diff --git a/.forgejo/workflows/build.yaml b/.forgejo/workflows/build.yaml
index 1aa2168..e3592d8 100644
--- a/.forgejo/workflows/build.yaml
+++ b/.forgejo/workflows/build.yaml
@@ -4,19 +4,30 @@ jobs:
     runs-on: native
     steps:
       - uses: actions/checkout@v4
-      - run: |
+
+      - name: prepare ssh
+        run: |
           cat <<EOF > .id_rsa
           ${{ secrets.SSH_KEY }}
           EOF
           chmod 600 .id_rsa
+          
           eval $(ssh-agent)
           ssh-add .id_rsa
-          NIX_SSHOPTS="-i $PWD/id_rsa" nix flake update
+          
+          cat <<EOF > "$GITHUB_ENV"
+          SSH_AUTH_SOCK="$SSH_AUTH_SOCK"
+          SSH_AGENT_PID=$SSH_AGENT_PID
+          EOF
+
+      - run: nix flake update
       - run: nix build .#nixosConfigurations.orbi.config.system.build.toplevel
       - run: nix build .#nixosConfigurations.cream.config.system.build.toplevel
       - run: nix build .#nixosConfigurations.cherry.config.system.build.toplevel
       - run: nix build .#nixosConfigurations.chungus.config.system.build.toplevel
-      - if: always()
+
+      - name: destroy ssh
+        if: always()
         run: |
           echo $SSH_AGENT_PID
           kill $SSH_AGENT_PID