diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 7cfea6c..b5874b1 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -29,11 +29,10 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Create .env file
-        run: echo "PUBLIC_TURNSTILE_SITEKEY=${{ secrets.TURNSTILE_SITEKEY }}" > .env
-
       - name: Build
         run: pnpm build
+        env:
+          PUBLIC_TURNSTILE_SITEKEY: ${{ secrets.TURNSTILE_SITEKEY }}
 
       - name: Deploy
         uses: cloudflare/wrangler-action@v3
diff --git a/src/components/svelte/ContactForm.svelte b/src/components/svelte/ContactForm.svelte
index eb2c071..0c0f2e8 100644
--- a/src/components/svelte/ContactForm.svelte
+++ b/src/components/svelte/ContactForm.svelte
@@ -10,10 +10,7 @@
   let turnstileWidgetId: string | null = $state(null)
   let turnstileContainer: HTMLElement
 
-  // Get Turnstile sitekey from environment variable
-  // Dev: uses test key from .env
-  // Prod: uses real key from Cloudflare Pages env vars
-  const TURNSTILE_SITEKEY = import.meta.env.PUBLIC_TURNSTILE_SITEKEY || '1x00000000000000000000AA'
+  const TURNSTILE_SITEKEY = import.meta.env.PUBLIC_TURNSTILE_SITEKEY
 
   onMount(() => {
     // Wait for Turnstile script to load