diff --git a/.github/workflows/ci-cd-web-desktop.yml b/.github/workflows/ci-cd-web-desktop.yml
index d14185b..f411d2c 100644
--- a/.github/workflows/ci-cd-web-desktop.yml
+++ b/.github/workflows/ci-cd-web-desktop.yml
@@ -122,6 +122,8 @@ jobs:
             EXCLUDE_ENV=""
           fi
           rsync $RSYNC_FLAGS \
+            --filter='protect .next.old*' \
+            --exclude '.next.old*' \
             --filter='protect node_modules' \
             --filter='protect node_modules/**' \
             --filter='protect .pnpm-store' \
@@ -193,19 +195,13 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Determine writable APP_DIR
+      - name: Determine APP_DIR (fallback safe path)
         id: appdir
         run: |
-          DEFAULT_DIR="${APP_DIR:-/srv/apps/sistema}"
           FALLBACK_DIR="$HOME/apps/sistema"
-          TARGET_DIR="$DEFAULT_DIR"
-          mkdir -p "$TARGET_DIR" 2>/dev/null || true
-          if ! (test -d "$TARGET_DIR" && test -w "$TARGET_DIR"); then
-            TARGET_DIR="$FALLBACK_DIR"
-            mkdir -p "$TARGET_DIR"
-          fi
-          echo "Using APP_DIR=$TARGET_DIR"
-          echo "EFFECTIVE_APP_DIR=$TARGET_DIR" >> "$GITHUB_ENV"
+          mkdir -p "$FALLBACK_DIR"
+          echo "Using APP_DIR (fallback)=$FALLBACK_DIR"
+          echo "EFFECTIVE_APP_DIR=$FALLBACK_DIR" >> "$GITHUB_ENV"
 
       - name: Sync workspace to APP_DIR (preserving local env)
         run: |
@@ -216,6 +212,8 @@ jobs:
             EXCLUDE_ENV=""
           fi
           rsync $RSYNC_FLAGS \
+            --filter='protect .next.old*' \
+            --exclude '.next.old*' \
             --filter='protect node_modules' \
             --filter='protect node_modules/**' \
             --filter='protect .pnpm-store' \