diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 47c7917..b31b72f 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -14,7 +14,7 @@ jobs:
 
     env:
       DEPLOY_PATH: /var/www/html/solar-relay
-      SERVICE: solar-relay.service
+      SERVICE: solar-relay
       HEALTH_URL: https://rpioffice.nest.lutran.ch/solar-relay/healthz
 
     steps:
diff --git a/README.md b/README.md
index 55b38d1..06f76e5 100644
--- a/README.md
+++ b/README.md
@@ -273,8 +273,12 @@ directory and keep the local config there. Install the unit before the first dep
 then add a restricted sudoers rule using the actual runner
 account and the path from `command -v systemctl`:
 
+```sh
+sudo visudo -f /etc/sudoers.d/solar-relay
+```
+
 ```sudoers
-www-data ALL=(root) NOPASSWD: /usr/bin/systemctl restart solar-relay.service
+www-data ALL=(root) NOPASSWD: /usr/bin/systemctl restart solar-relay
 ```
 
 The workflow installs dependencies and runs tests in `.venv-ci`, checks the installed