diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 1c3437b..57bdd3a 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -5,6 +5,10 @@ on:
   push:
     branches: [main]
   workflow_dispatch:
+    inputs:
+      deploy_host:
+        description: "Box IP to deploy to; deploy-all passes the freshly-provisioned target IP. Blank (push) uses the DEPLOY_HOST secret."
+        required: false
 
 jobs:
   build:
@@ -78,7 +82,7 @@ jobs:
           REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
           REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
         with:
-          host: ${{ secrets.DEPLOY_HOST }}
+          host: ${{ inputs.deploy_host || secrets.DEPLOY_HOST }}
           username: ${{ secrets.DEPLOY_USER }}
           port: ${{ secrets.DEPLOY_PORT }}
           key: ${{ secrets.DEPLOY_SSH_KEY }}