diff --git a/.github/workflows/deploy-preview.yml b/.github/workflows/deploy-preview.yml
index a55f963..061e438 100644
--- a/.github/workflows/deploy-preview.yml
+++ b/.github/workflows/deploy-preview.yml
@@ -10,10 +10,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node: [18.x]
-    env:
-      CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-      DATABASE_URL: ${{ secrets.PREVIEW_DATABASE_URL }}
+        node: [20.x]
 
     steps:
       - uses: actions/checkout@v3
@@ -31,5 +28,11 @@ jobs:
       - run: pnpm run typecheck
 
       - run: pnpm run --filter @dinstack/api db:migrate
+        if: secrets.PREVIEW_DATABASE_URL
+        env:
+          DATABASE_URL: ${{ secrets.PREVIEW_DATABASE_URL }}
 
       - run: pnpm run deploy:preview
+        if: secrets.CLOUDFLARE_API_TOKEN
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
diff --git a/.github/workflows/deploy-production.yml b/.github/workflows/deploy-production.yml
index 714a71d..db5b6d8 100644
--- a/.github/workflows/deploy-production.yml
+++ b/.github/workflows/deploy-production.yml
@@ -10,10 +10,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node: [18.x]
-    env:
-      CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-      DATABASE_URL: ${{ secrets.PRODUCTION_DATABASE_URL }}
+        node: [20.x]
 
     steps:
       - uses: actions/checkout@v3
@@ -31,10 +28,17 @@ jobs:
       - run: pnpm run typecheck
 
       - run: pnpm run --filter @dinstack/api db:migrate
+        if: secrets.DATABASE_URL
+        env:
+          DATABASE_URL: ${{ secrets.DATABASE_URL }}
 
       - run: pnpm run deploy:production
+        if: secrets.CLOUDFLARE_API_TOKEN
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 
       - uses: nathanvaughn/actions-cloudflare-purge@master
+        if: secrets.CLOUDFLARE_API_TOKEN && secrets.CLOUDFLARE_ZONE_ID
         with:
           cf_zone: ${{ secrets.CLOUDFLARE_ZONE_ID }}
           cf_auth: ${{ secrets.CLOUDFLARE_API_TOKEN }}