diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 4182b09..0a49280 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -9,14 +9,6 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: 1.4.0
-      - name: Install and test
-        run: |
-          bun install --frozen-lockfile
-          bun run test:unit -- --run
-
       # Build once. The same SHA-tagged image stays on the deployment host for
       # one-click promotion to production; the production workflow never rebuilds it.
       - uses: docker/build-push-action@v5
diff --git a/.gitea/workflows/deploy-production.yml b/.gitea/workflows/deploy-production.yml
index 4e3ad0d..e46db22 100644
--- a/.gitea/workflows/deploy-production.yml
+++ b/.gitea/workflows/deploy-production.yml
@@ -12,14 +12,6 @@ jobs:
         with:
           ref: staging
 
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: 1.4.0
-      - name: Check staging source
-        run: |
-          bun install --frozen-lockfile
-          bun run test:unit -- --run
-
       - name: Configure deployment SSH key
         env:
           DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
diff --git a/Dockerfile b/Dockerfile
index df374d0..aa53cdb 100755
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,6 +3,7 @@ WORKDIR /app
 COPY package.json bun.lock ./
 RUN bun install --frozen-lockfile
 COPY . .
+RUN bun run test:unit -- --run
 RUN bun run build
 
 FROM oven/bun:1.4.0