diff --git a/.forgejo/workflows/build-rust.yml b/.forgejo/workflows/build-rust.yml
index d1c3e1c..53191ab 100644
--- a/.forgejo/workflows/build-rust.yml
+++ b/.forgejo/workflows/build-rust.yml
@@ -58,7 +58,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          nix develop .#ci -c bash -lc '
+          nix develop .#ci -c bash -euo pipefail -c '
             sccache --zero-stats >/dev/null 2>&1 || true
             cargo test --workspace --all-features
             sccache --show-stats || true
diff --git a/.forgejo/workflows/build-site.yml b/.forgejo/workflows/build-site.yml
index 3224ea9..ea4d58e 100644
--- a/.forgejo/workflows/build-site.yml
+++ b/.forgejo/workflows/build-site.yml
@@ -53,7 +53,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          nix develop .#ci -c bash -lc '
+          nix develop .#ci -c bash -euo pipefail -c '
             mkdir -p site/.next
             rm -rf site/.next/cache
             ln -sfn "${NEXT_CACHE_DIR}" site/.next/cache