diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 2eb9f5e..59b8432 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -21,11 +21,11 @@ jobs:
       - name: Run backend tests
         working-directory: backend
         env:
-          DATABASE_URL: sqlite+aiosqlite:///:memory:
-          ENVIRONMENT: test
+          DATABASE_URL: "sqlite+aiosqlite:///:memory:"
+          ENVIRONMENT: "test"
         run: pytest
       - name: Build backend Docker image
-        run: docker build -t nexamfa-backend:${{ github.sha }} backend
+        run: docker build -t "nexamfa-backend:${{ github.sha }}" backend
 
   frontend:
     runs-on: ubuntu-latest
@@ -40,7 +40,7 @@ jobs:
           npm install
           npm run build
       - name: Build frontend Docker image
-        run: docker build -t nexamfa-frontend:${{ github.sha }} frontend
+        run: docker build -t "nexamfa-frontend:${{ github.sha }}" frontend
 
   android:
     runs-on: ubuntu-latest
@@ -49,19 +49,19 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Prepare Firebase configuration
-        if: ${{ secrets.GOOGLE_SERVICES_JSON_BASE64 != '' }}
+        if: "${{ secrets.GOOGLE_SERVICES_JSON_BASE64 != '' }}"
         run: echo "${{ secrets.GOOGLE_SERVICES_JSON_BASE64 }}" | base64 -d > android/app/google-services.json
       - name: Prepare release keystore
-        if: ${{ secrets.ANDROID_KEYSTORE_BASE64 != '' }}
+        if: "${{ secrets.ANDROID_KEYSTORE_BASE64 != '' }}"
         run: |
           echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | base64 -d > android/release.keystore
       - name: Build Android artifacts
         working-directory: android
         env:
-          ANDROID_KEYSTORE_PATH: ${{ github.workspace }}/android/release.keystore
-          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
-          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
-          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
+          ANDROID_KEYSTORE_PATH: "${{ github.workspace }}/android/release.keystore"
+          ANDROID_KEYSTORE_PASSWORD: "${{ secrets.ANDROID_KEYSTORE_PASSWORD }}"
+          ANDROID_KEY_ALIAS: "${{ secrets.ANDROID_KEY_ALIAS }}"
+          ANDROID_KEY_PASSWORD: "${{ secrets.ANDROID_KEY_PASSWORD }}"
         run: |
           gradle testDebugUnitTest assembleDebug assembleRelease bundleRelease
       - name: Upload debug APK