diff --git a/.drone.yml b/.drone.yml
index 8970880..697b1f4 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -17,11 +17,13 @@ steps:
   - name: ansible-playbook --check
     image: python:3.10.6
     environment:
-      KEY:
+      SSH_KEY:
         from_secret: ssh_key
     commands:
       - pip install ansible==6.4.0 > /dev/null 2> /dev/null
       - mkdir "$HOME/.ssh"
-      - echo "$KEY" > "$HOME/.ssh/id"
+      - echo "$SSH_KEY" > "$HOME/.ssh/id"
+      - chmod 0600 ~/.ssh/id
+      - ssh-keyscan -p 2309 vmd98928.contaboserver.net > "$HOME/.ssh/known_hosts"
       - cd ansible
-      - ansible-playbook --check playbooks/misc-all.yaml
+      - ansible-playbook --private-key "$HOME/.ssh/id" --check playbooks/misc-all.yaml
diff --git a/ansible/inventory b/ansible/inventory
index 3a36b7f..6ad4c26 100644
--- a/ansible/inventory
+++ b/ansible/inventory
@@ -1,2 +1,2 @@
 [misc]
-vmd98928.contaboserver.net
+vmd98928.contaboserver.net ansible_port=2309
diff --git a/ansible/playbooks/misc-docker.yaml b/ansible/playbooks/misc-docker.yaml
index dfaea4c..59820ac 100644
--- a/ansible/playbooks/misc-docker.yaml
+++ b/ansible/playbooks/misc-docker.yaml
@@ -86,6 +86,7 @@
     # Before deploying the remaining configs below, we check that
     # Gitea is reachable at git.pbrinkmeier.de
     - name: Wait for gitea to be reachable
+      check_mode: false
       ansible.builtin.uri:
         method: GET
         url: https://git.pbrinkmeier.de/api/v1/version
diff --git a/ansible/roles/docker/tasks/main.yaml b/ansible/roles/docker/tasks/main.yaml
index 3312785..ee75aff 100644
--- a/ansible/roles/docker/tasks/main.yaml
+++ b/ansible/roles/docker/tasks/main.yaml
@@ -12,6 +12,7 @@
       - lsb-release
 
 - name: Retrieve Docker GPG key
+  check_mode: false
   ansible.builtin.uri:
     url: https://download.docker.com/linux/debian/gpg
     return_content: true
@@ -25,6 +26,7 @@
     creates: /usr/share/keyrings/docker-archive-keyring.gpg
 
 - name: Retrieve dpkg architecture
+  check_mode: false
   ansible.builtin.command: dpkg --print-architecture
   register: dpkg_architecture
   changed_when: false