diff --git a/.github/workflows/ci-cd-web-desktop.yml b/.github/workflows/ci-cd-web-desktop.yml
index 322eb10..c04b064 100644
--- a/.github/workflows/ci-cd-web-desktop.yml
+++ b/.github/workflows/ci-cd-web-desktop.yml
@@ -158,6 +158,10 @@ jobs:
       - name: Swarm deploy (stack.yml)
         run: |
           cd "$EFFECTIVE_APP_DIR"
+          # Exporta variáveis do .env para substituição no stack (ex.: MACHINE_PROVISIONING_SECRET)
+          set -o allexport
+          if [ -f .env ]; then . ./.env; fi
+          set +o allexport
           APP_DIR="$EFFECTIVE_APP_DIR" RELEASE_SHA=${{ github.sha }} docker stack deploy --with-registry-auth -c stack.yml sistema
 
       - name: Restart web service with new code