diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml
index 82e88cb..17ac661 100644
--- a/.github/workflows/deploy-prod.yml
+++ b/.github/workflows/deploy-prod.yml
@@ -6,7 +6,7 @@
 # Manual deploy / rollback: Actions -> "Deploy: Web (prod)" -> Run workflow.
 #
 # Required config:
-#   secret  TS_AUTHKEY                 — Tailscale ephemeral auth key, tag:ci-deploy
+#   secret  TS_AUTHKEY_CI               — Tailscale ephemeral auth key, tag:ci
 #   secret  LAUNCHPAD_SSH_KEY          — ed25519 private key for yashiel@launchpad
 #   secret  NEXT_PUBLIC_TMDB_API_KEY   — public TMDB build arg (op://Agents/skystream/tmdb-api-key)
 #   var     LAUNCHPAD_HOST             — launchpad tailnet IP (100.122.178.53)
@@ -41,7 +41,7 @@ jobs:
       - name: Connect to Tailscale
         uses: tailscale/github-action@780049a30b6ff5c378a9e7b389d15ece7a204888 # v4.1.3
         with:
-          authkey: ${{ secrets.TS_AUTHKEY }}
+          authkey: ${{ secrets.TS_AUTHKEY_CI }}
           version: latest
 
       - name: SSH key