diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 0e56578..b747c11 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -22,7 +22,14 @@ jobs:
         run: |
           set -e
           cd "$APP_DIR"
-          git pull
+          git fetch --prune --tags
+          if [ -n "${GITHUB_SHA:-}" ]; then
+            git checkout -f "$GITHUB_SHA"
+          else
+            git checkout -f main
+            git reset --hard origin/main
+          fi
+          git clean -fdx
           npm run dbforce
           npm run build
           pm2 reload ecosystem.config.js --env production || (pm2 start ecosystem.config.js --env production && pm2 save)