diff --git a/.gitea/workflows/ci-deploy.yml b/.gitea/workflows/ci-deploy.yml
index 6ac2ea8d..6af31c5a 100644
--- a/.gitea/workflows/ci-deploy.yml
+++ b/.gitea/workflows/ci-deploy.yml
@@ -5,6 +5,14 @@ on:
     branches: [main]
   workflow_dispatch:
 
+# Single deploy at a time per host — pve-201's docker container name
+# `flights-web` is a shared mutex. Without this, back-to-back pushes
+# race on `docker stop / rm / run`, with the second run hitting
+# "container name already in use". Queue, don't cancel.
+concurrency:
+  group: ci-deploy-pve-201
+  cancel-in-progress: false
+
 jobs:
   build-deploy-test:
     runs-on: ubuntu-latest