diff --git a/.github/workflows/ci-cd-web-desktop.yml b/.github/workflows/ci-cd-web-desktop.yml
index b69ec4d..486f4c6 100644
--- a/.github/workflows/ci-cd-web-desktop.yml
+++ b/.github/workflows/ci-cd-web-desktop.yml
@@ -30,10 +30,14 @@ jobs:
           node-version: 20
           cache: 'pnpm'
 
-      - name: Sync workspace to APP_DIR
+      - name: Sync workspace to APP_DIR (preserving local env)
         run: |
           mkdir -p "$APP_DIR"
           rsync -az --delete \
+            --filter='protect .env' \
+            --filter='protect .env*' \
+            --filter='protect apps/desktop/.env*' \
+            --filter='protect convex/.env*' \
             --exclude '.git' \
             --exclude '.next' \
             --exclude '.env*' \