diff --git a/.gitea/workflows/pulumi.yml b/.gitea/workflows/pulumi.yml
index 37df1c6..8b49c55 100644
--- a/.gitea/workflows/pulumi.yml
+++ b/.gitea/workflows/pulumi.yml
@@ -11,7 +11,8 @@ env:
   AWS_ACCESS_KEY_ID: ${{ secrets.MINIO_ACCESS_KEY }}
   AWS_SECRET_ACCESS_KEY: ${{ secrets.MINIO_SECRET_KEY }}
   AWS_REGION: us-east-1
-  MINIO_ENDPOINT: "127.0.0.1:9000"
+  # Use Docker host gateway to reach MinIO on the host
+  MINIO_ENDPOINT: "172.17.0.1:9000"
 
 jobs:
   pulumi:
@@ -35,25 +36,25 @@ jobs:
 
       - name: Install Pulumi plugins
         run: |
-          pulumi plugin install resource command
+          $HOME/.pulumi/bin/pulumi plugin install resource command
 
       - name: Login to MinIO backend
         run: |
-          pulumi login "s3://pulumi-state?endpoint=$MINIO_ENDPOINT&disableSSL=true&s3ForcePathStyle=true"
+          $HOME/.pulumi/bin/pulumi login "s3://pulumi-state?endpoint=$MINIO_ENDPOINT&disableSSL=true&s3ForcePathStyle=true"
 
       - name: Select stack
         run: |
-          pulumi stack select poc --create
+          $HOME/.pulumi/bin/pulumi stack select poc --create
 
       - name: Set Pulumi config
         run: |
-          pulumi config set netbird:url https://netbird-poc.networkmonitor.cc
-          pulumi config set --secret netbird:token "${{ secrets.NETBIRD_TOKEN }}"
+          $HOME/.pulumi/bin/pulumi config set netbird:url https://netbird-poc.networkmonitor.cc
+          $HOME/.pulumi/bin/pulumi config set --secret netbird:token "${{ secrets.NETBIRD_TOKEN }}"
 
       - name: Pulumi Preview
         if: github.event_name == 'pull_request'
-        run: pulumi preview
+        run: $HOME/.pulumi/bin/pulumi preview
 
       - name: Pulumi Up
         if: github.ref == 'refs/heads/main' && github.event_name == 'push'
-        run: pulumi up --yes
+        run: $HOME/.pulumi/bin/pulumi up --yes