diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 7a3ad81..4f09bcc 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -138,16 +138,20 @@ jobs:
                   REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
                   REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
                   CONTAINER_REGISTRY: ${{ vars.CONTAINER_REGISTRY }}
+                  PROD_DATABASE_URL: ${{ secrets.PROD_DATABASE_URL }}
               with:
                   host: ${{ secrets.DEPLOY_HOST }}
                   port: ${{ secrets.DEPLOY_PORT }}
                   username: ${{ secrets.DEPLOY_USER }}
                   key: ${{ secrets.DEPLOY_KEY }}
-                  envs: REGISTRY_USERNAME,REGISTRY_PASSWORD,CONTAINER_REGISTRY
+                  envs: REGISTRY_USERNAME,REGISTRY_PASSWORD,CONTAINER_REGISTRY,PROD_DATABASE_URL
                   script: |
+                      set -e
+                      IMAGE="$CONTAINER_REGISTRY/brackt:latest"
                       docker login $CONTAINER_REGISTRY -u $REGISTRY_USERNAME -p $REGISTRY_PASSWORD
                       cd brackt
                       docker compose pull
+                      docker run --rm -e DATABASE_URL="$PROD_DATABASE_URL" "$IMAGE" npx drizzle-kit migrate
                       docker compose up -d
                       sleep 10
                       if docker compose ps | grep -qE "Exit|exited"; then