diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index 776565c..36f0aa5 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -11,6 +11,18 @@ jobs:
     container:
       image: oven/bun:latest
     steps:
+      - name: Install system dependencies
+        run: |
+          apt-get update
+          apt-get install -y ca-certificates curl
+
+      - name: Test network connectivity
+        run: |
+          echo "--- Testing DNS resolution ---"
+          bun -e "const r = await fetch('https://api.cloudflare.com/client/v4/'); console.log(r.status, await r.text().then(t => t.slice(0, 200)))" || echo "Bun fetch failed"
+          echo "--- Testing with curl ---"
+          curl -sf -o /dev/null -w "HTTP %{http_code} to api.cloudflare.com\n" https://api.cloudflare.com/client/v4/ || echo "curl to Cloudflare API failed!"
+
       - name: Checkout
         uses: actions/checkout@v4
 
@@ -26,24 +38,6 @@ jobs:
           ls -la .svelte-kit/cloudflare/ || echo "ERROR: .svelte-kit/cloudflare/ does not exist!"
           test -f .svelte-kit/cloudflare/_worker.js && echo "_worker.js exists" || echo "ERROR: _worker.js not found!"
 
-      - name: Verify secrets are set
-        run: |
-          if [ -z "$CLOUDFLARE_API_TOKEN" ]; then
-            echo "ERROR: CLOUDFLARE_API_TOKEN is empty or not set!"
-            exit 1
-          else
-            echo "CLOUDFLARE_API_TOKEN is set (length: ${#CLOUDFLARE_API_TOKEN})"
-          fi
-          if [ -z "$CLOUDFLARE_ACCOUNT_ID" ]; then
-            echo "ERROR: CLOUDFLARE_ACCOUNT_ID is empty or not set!"
-            exit 1
-          else
-            echo "CLOUDFLARE_ACCOUNT_ID is set (length: ${#CLOUDFLARE_ACCOUNT_ID})"
-          fi
-        env:
-          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-
       - name: Deploy to Cloudflare Workers
         timeout-minutes: 10
         run: |