diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 9da70c6..03201e4 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -2,15 +2,23 @@ stages:
   - build
   - deploy
 
+variables:
+  COMPOSER_ALLOW_SUPERUSER: '1'
+
 build:
   stage: build
-  image: node:latest
+  image: composer:2
   script:
+    - composer install --no-dev --optimize-autoloader
+    - apk add --no-cache nodejs npm
     - npm install
     - npm run build
   artifacts:
     paths:
       - dist/
+      - vendor/
+      - composer.lock
+      - composer.json
 
 deploy:
   stage: deploy
@@ -29,15 +37,15 @@ deploy:
         -e "ssh -p 2244 -o StrictHostKeyChecking=no" \
         site/ $USERNAME@$HOST:$PROD_PATH/site/
 
-      sshpass -p "$PASSWORD" rsync -avz --delete \
+      sshpass -p "$PASSWORD" rsync -avz --delete -O \
+        -e "ssh -p 2244 -o StrictHostKeyChecking=no" \
+        ../vendor/ $USERNAME@$HOST:$PROD_PATH/vendor/
+
+      sshpass -p "$PASSWORD" rsync -avz --delete -O \
         -e "ssh -p 2244 -o StrictHostKeyChecking=no" \
         kirby/ $USERNAME@$HOST:$PROD_PATH/kirby/
 
-      sshpass -p "$PASSWORD" rsync -avz --delete \
-        -e "ssh -p 2244 -o StrictHostKeyChecking=no" \
-        vendor/ $USERNAME@$HOST:$PROD_PATH/vendor/
-
-      sshpass -p "$PASSWORD" rsync -avz --delete \
+      sshpass -p "$PASSWORD" rsync -avz --delete -O \
         --exclude 'tiles/' \
         -e "ssh -p 2244 -o StrictHostKeyChecking=no" \
         assets/ $USERNAME@$HOST:$PROD_PATH/assets/