diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index c8241f0..e4ec111 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -94,9 +94,13 @@ jobs:
                 --docker-password="${{ env.CR_PASSWORD_ACTIVE }}" \
                 --dry-run=client -o yaml | kubectl apply -f -
 
-              # 2) 应用运行时 Secret（数据库连接串：火山 RDS 内网地址）
+              # 2) 应用运行时 Secret（DB 连接串 + 阿里云短信凭据）
               kubectl create secret generic cyberstar-env \
                 --from-literal=DATABASE_URL='mysql://zyc:Zyc188208@mysql8351f937d637.rds.ivolces.com:3306/cyberstar?charset=utf8mb4' \
+                --from-literal=SMS_SIGN_NAME='广州气元科技' \
+                --from-literal=SMS_TEMPLATE_CODE='SMS_506210397' \
+                --from-literal=SMS_ACCESS_KEY='LTAI5t7jGzFH4ExkJ9TSmQyd' \
+                --from-literal=SMS_SECRET_KEY='u0d3OyTWe9BjnNjK81bvEElky4xcHk' \
                 --dry-run=client -o yaml | kubectl apply -f -
 
               # 3) Apply manifests