diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 751172f..fff1494 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -16,6 +16,13 @@ jobs:
 
       - name: Render CV
         run: |
+          # set missing XDG paths and SSL cert path
+          export HOME=/tmp/render_home
+          export XDG_DATA_HOME=/tmp/typst_data
+          export XDG_CACHE_HOME=/tmp/typst_cache
+          mkdir -p $HOME $XDG_DATA_HOME $XDG_CACHE_HOME
+          export SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt
+
           uvx --with "rendercv[full]" rendercv render resume.yaml
 
       - name: Deploy CV via Rsync