diff --git a/.forgejo/workflows/deploy-from-scratch.yml b/.forgejo/workflows/deploy-from-scratch.yml
index 2aeae47..fa32946 100644
--- a/.forgejo/workflows/deploy-from-scratch.yml
+++ b/.forgejo/workflows/deploy-from-scratch.yml
@@ -19,6 +19,13 @@ jobs:
         env:
           CI_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
+          # Only used on a re-run after the one-time credentials file was
+          # already consumed by an earlier successful run (fresh installs
+          # generate their own password and don't need this). Without it,
+          # a repeat run of this workflow against an already-initialized
+          # Graylog dies at resolve_admin_password with "Cannot find admin
+          # password" - confirmed live.
+          GRAYLOG_ADMIN_PASSWORD: ${{ secrets.GRAYLOG_ADMIN_PASSWORD }}
         run: |
           rm -rf /tmp/graylog-deploy-ci-host
           git clone --depth 1 --branch main "https://x-access-token:${CI_TOKEN}@git.zotac.keenetic.link/zotac/graylog-deploy.git" /tmp/graylog-deploy-ci-host