diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index fa16470..cd2768e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -16,10 +16,15 @@ jobs:
         with:
           lfs: true
 
+      - run: sudo apt-get update && sudo apt-get install -y imagemagick
+
       - uses: astral-sh/setup-uv@v5
 
       - run: uv sync
 
+      - name: Decrypt fonts
+        run: openssl enc -aes-256-cbc -pbkdf2 -d -in assets/static/fonts.tar.gz.enc -pass pass:'${{ secrets.FONTS_PASSPHRASE }}' | tar xzf - -C assets/static
+
       - run: uv run lektor build --output-path build
 
       - uses: cloudflare/wrangler-action@v3
diff --git a/assets/static/fonts.tar.gz.enc b/assets/static/fonts.tar.gz.enc
new file mode 100644
index 0000000..1379809
Binary files /dev/null and b/assets/static/fonts.tar.gz.enc differ