diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 1f34937..2787de1 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -56,11 +56,10 @@ jobs:
             ls -t $DEPLOY_DIR/backup/*.jar | tail -n +6 | xargs -r rm
           fi
 
-          # Secrets → 환경변수 파일 (systemd EnvironmentFile)
-          cat > $DEPLOY_DIR/.env << ENVEOF
-          GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}
-          JWT_SECRET=${JWT_SECRET}
-          ENVEOF
+          # Secrets → 환경변수 파일 (빈 값은 제외)
+          : > $DEPLOY_DIR/.env
+          [ -n "$GOOGLE_CLIENT_ID" ] && echo "GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}" >> $DEPLOY_DIR/.env
+          [ -n "$JWT_SECRET" ] && echo "JWT_SECRET=${JWT_SECRET}" >> $DEPLOY_DIR/.env
 
           # JAR 교체 + 재시작 트리거
           cp backend/target/kcg.jar $DEPLOY_DIR/kcg.jar