diff --git a/.gitea/workflows/obfuscate-main.yml b/.gitea/workflows/obfuscate-main.yml
index 86a491b..1aa8f32 100644
--- a/.gitea/workflows/obfuscate-main.yml
+++ b/.gitea/workflows/obfuscate-main.yml
@@ -6,8 +6,14 @@ on:
       - main
   workflow_dispatch:
 
+env:
+  GITEA_HOST: git.hexahost.dev
+  REPO_PATH: smueller/HexaHost-Frontend
+
 jobs:
   obfuscate:
+    # Kein erneuter Lauf nach dem Bot-Commit
+    if: ${{ !contains(github.event.head_commit.message, '[skip ci]') }}
     runs-on: ubuntu-latest
 
     steps:
@@ -15,15 +21,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-
-      - name: Skip loop commits
-        run: |
-          msg="$(git log -1 --pretty=%B)"
-          echo "Last commit message: $msg"
-          if echo "$msg" | grep -q "\[skip ci\]"; then
-            echo "Skip CI commit detected."
-            exit 0
-          fi
+          # Gitea liefert intern oft eine IP; Zertifikat gilt für git.hexahost.dev
+          repository-url: https://git.hexahost.dev/smueller/HexaHost-Frontend
 
       - name: Setup Python
         uses: actions/setup-python@v5
@@ -39,13 +38,16 @@ jobs:
         run: python scripts/obfuscate_release.py --root . --hash-assets
 
       - name: Commit obfuscated build
+        env:
+          GITEA_TOKEN: ${{ github.token }}
         run: |
           git config user.name "gitea-actions"
           git config user.email "actions@local"
+          git remote set-url origin "https://oauth2:${GITEA_TOKEN}@${GITEA_HOST}/${REPO_PATH}.git"
           git add -A
           if git diff --cached --quiet; then
             echo "No build changes to commit."
             exit 0
           fi
           git commit -m "chore(release): obfuscate and hash production assets [skip ci]"
-          git push
+          git push origin HEAD:main