diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index f40bfbe..6908ab9 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -61,6 +61,11 @@ jobs:
           # Embedded by crates/miner-cli/build.rs into --version; validate below
           # asserts the host runs exactly this commit.
           MINER_BUILD_SHA: ${{ github.sha }}
+          # Fail the build here if nvcc is missing rather than shipping a
+          # binary that falls back to wgpu and failing validate on the hosts.
+          # (The same warning in ci.yml's test job is expected: the `rust`
+          # runner has no nvcc and only lints and tests.)
+          MINER_CUDA_REQUIRE: "1"
         run: |
           set -euo pipefail
           cargo build --release --locked -p miner-cli