diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 6b32f6d..ba6a0f8 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -37,11 +37,25 @@ jobs:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           aws-region: ${{ secrets.AWS_REGION }}
-      - name: Deploy to S3 and invalidate CloudFront
-        env:
-          BUCKET_NAME: ${{ secrets.BUCKET_NAME }}
-          CLOUDFRONT_ID: ${{ secrets.CLOUDFRONT_ID }}
-        run: |
-          aws s3 sync dist/ "s3://${BUCKET_NAME}"             --delete             --exclude "index.html"             --cache-control "public, max-age=31536000, immutable"
-          aws s3 cp dist/index.html "s3://${BUCKET_NAME}/index.html"             --cache-control "no-cache, no-store, must-revalidate"             --content-type "text/html"
-          aws cloudfront create-invalidation             --distribution-id "${CLOUDFRONT_ID}"             --paths "/" "/index.html"
+      - name: Sync hashed assets to S3
+        uses: aws-actions/aws-cli-action@v2
+        with:
+          command: >-
+            s3 sync dist/ "s3://${{ secrets.BUCKET_NAME }}"
+            --delete
+            --exclude "index.html"
+            --cache-control "public, max-age=31536000, immutable"
+      - name: Upload index.html
+        uses: aws-actions/aws-cli-action@v2
+        with:
+          command: >-
+            s3 cp dist/index.html "s3://${{ secrets.BUCKET_NAME }}/index.html"
+            --cache-control "no-cache, no-store, must-revalidate"
+            --content-type "text/html"
+      - name: Invalidate CloudFront
+        uses: aws-actions/aws-cli-action@v2
+        with:
+          command: >-
+            cloudfront create-invalidation
+            --distribution-id "${{ secrets.CLOUDFRONT_ID }}"
+            --paths "/" "/index.html"