diff --git a/.forgejo/workflows/cicd.yml b/.forgejo/workflows/cicd.yml
index 021bb8a..99d320b 100644
--- a/.forgejo/workflows/cicd.yml
+++ b/.forgejo/workflows/cicd.yml
@@ -13,19 +13,19 @@ jobs:
 
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: "9.0.x"
+          dotnet-version: "10.0.x"
 
       - name: Test
         run: dotnet test -c Release
 
-      - name: Publish
-        run: dotnet publish -c Release -o out
+      - name: Publish (self-contained linux-x64)
+        run: dotnet publish -c Release -r linux-x64 --self-contained true -o out
 
       - name: Install deploy tools
         run: |
           apt-get update
           apt-get install -y rsync openssh-client
-          
+
       - name: Deploy TEST
         env:
           DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
@@ -40,7 +40,7 @@ jobs:
           ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts
 
           rsync -az --delete out/ "$DEPLOY_USER@$DEPLOY_HOST:/opt/minapp-test/app/"
-          ssh "$DEPLOY_USER@$DEPLOY_HOST" "sudo systemctl restart minapp-test"
+          ssh "$DEPLOY_USER@$DEPLOY_HOST" "chmod +x /opt/minapp-test/app/MinApp && sudo systemctl restart minapp-test"
 
   deploy_prod_manual:
     if: ${{ github.event_name == 'workflow_dispatch' }}
@@ -50,10 +50,15 @@ jobs:
 
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: "8.0.x"
+          dotnet-version: "10.0.x"
 
-      - name: Publish
-        run: dotnet publish -c Release -o out
+      - name: Publish (self-contained linux-x64)
+        run: dotnet publish -c Release -r linux-x64 --self-contained true -o out
+
+      - name: Install deploy tools
+        run: |
+          apt-get update
+          apt-get install -y rsync openssh-client
 
       - name: Deploy PROD
         env:
@@ -69,4 +74,4 @@ jobs:
           ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts
 
           rsync -az --delete out/ "$DEPLOY_USER@$DEPLOY_HOST:/opt/minapp/app/"
-          ssh "$DEPLOY_USER@$DEPLOY_HOST" "sudo systemctl restart minapp"
+          ssh "$DEPLOY_USER@$DEPLOY_HOST" "chmod +x /opt/minapp/app/MinApp && sudo systemctl restart minapp"