diff --git a/.gitea/workflows/01-deploy-proxmox-infra.yaml b/.gitea/workflows/01-deploy-proxmox-infra.yaml
index 5e5336a..20494c5 100644
--- a/.gitea/workflows/01-deploy-proxmox-infra.yaml
+++ b/.gitea/workflows/01-deploy-proxmox-infra.yaml
@@ -6,14 +6,14 @@ on:
     branches:
       - main
     paths:
-      - "01-proxmox-infra/**"
-      - ".gitea/workflows/**"
+      - '01-proxmox-infra/**'
+      - '.gitea/workflows/**'
   pull_request:
     branches:
       - main
     paths:
-      - "01-proxmox-infra/**"
-      - ".gitea/workflows/**"
+      - '01-proxmox-infra/**'
+      - '.gitea/workflows/**'
 
 jobs:
   preview:
@@ -27,7 +27,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "24"
+          node-version: '24'
 
       - name: Restore Stack Config
         run: echo "${{ secrets.PROXMOX_INFRA_PULUMI_DEV_YAML }}" | base64 -d > 01-proxmox-infra/Pulumi.dev.yaml
@@ -64,7 +64,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "24"
+          node-version: '24'
 
       - name: Restore Stack Config
         run: echo "${{ secrets.PROXMOX_INFRA_PULUMI_DEV_YAML }}" | base64 -d > 01-proxmox-infra/Pulumi.dev.yaml
@@ -81,14 +81,15 @@ jobs:
         working-directory: 01-proxmox-infra
 
       - name: Refresh State
-        uses: pulumi/actions@v5
-        with:
-          command: refresh
-          stack-name: dev
-          work-dir: 01-proxmox-infra
-          cloud-url: ${{ secrets.PULUMI_BACKEND_URL }}
+        run: |
+          pulumi login "$PULUMI_BACKEND_URL"
+          pulumi refresh --yes --stack dev \
+            --target 'urn:pulumi:dev::proxmox-infra::proxmoxve*' \
+            --target 'urn:pulumi:dev::proxmox-infra::tls*'
+        working-directory: 01-proxmox-infra
         env:
           PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
+          PULUMI_BACKEND_URL: ${{ secrets.PULUMI_BACKEND_URL }}
 
       - name: Deploy
         uses: pulumi/actions@v5