diff --git a/.woodpecker/deploy.yml b/.woodpecker/deploy.yml
index 4d592a2..b002985 100644
--- a/.woodpecker/deploy.yml
+++ b/.woodpecker/deploy.yml
@@ -1,8 +1,10 @@
 # Deploy: build image, push to registry, trigger Portainer stack redeploy.
 # Runs on push/tag/manual to main only, after ci workflow succeeds.
 when:
-    branch: main
-    event: [push, tag, manual]
+    - branch: main
+      event: [push, tag, manual]
+    - event: deployment
+      evaluate: 'CI_PIPELINE_DEPLOY_TARGET == "production"'
 
 depends_on:
     - ci
diff --git a/nginx/snippets/cache-rules.conf b/nginx/snippets/cache-rules.conf
index d8cbd88..533cdd0 100644
--- a/nginx/snippets/cache-rules.conf
+++ b/nginx/snippets/cache-rules.conf
@@ -38,11 +38,7 @@ location ~* \.(pdf|doc|docx)$ {
     access_log off;
 }
 
-# robots.txt: short cache (1 day)
-location = /robots.txt {
-    add_header Cache-Control "public, max-age=86400";
-    access_log off;
-}
+# robots.txt and sitemap.xml: handled in default.conf with alias (variant-specific)
 
 # favicon: long cache (30 days)
 location = /favicon.svg {