diff --git a/.build.yml b/.build.yml
index a6df434..b4aa7dd 100644
--- a/.build.yml
+++ b/.build.yml
@@ -58,3 +58,4 @@ tasks:
       SOURCEHUT_PAGES_TOKEN=${OAUTH2_TOKEN} PRIVATE_SSH_KEY=~/.ssh/passwordless-auth-sshfs ./bin/deploy-gmi.sh
 artifacts:
   - web/tildeweb-prod-build.tar.gz
+  - web/gemini-site.tar.gz
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index afbeecb..f9da491 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -5,7 +5,6 @@ image:
 stages:
   - test
   - build
-  - sync-repo
 
 default:
   tags:
@@ -38,19 +37,13 @@ pages:
     # This ensures that only pushes to the default branch will trigger
     # a pages deploy
     - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
-.pages:srht:
-  stage: build
-  needs:
-    - pages
-  script:
-    - doppler run -- ./bin/deploykit-gmi.sh
-  rules:
-    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
 
 # TODO: Automate this over at mirrors/cronjobs soon.
-sync-branch:
-  stage: sync-repo
+sync-repo:
+  stage: build
   allow_failure: true
+  variables:
+    GIT_SSH_COMMAND: "ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"
   script:
     - |
       set -x