diff --git a/.gitea/workflows/debug-db.yml b/.gitea/workflows/debug-db.yml
new file mode 100644
index 0000000..b2f6086
--- /dev/null
+++ b/.gitea/workflows/debug-db.yml
@@ -0,0 +1,47 @@
+name: Debug DB
+
+on:
+  workflow_dispatch:
+
+jobs:
+  debug:
+    runs-on: mac
+    steps:
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          printf '%s' "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/ec2_deploy.pem
+          chmod 600 ~/.ssh/ec2_deploy.pem
+          ssh-keyscan -H ${{ secrets.EC2_HOST }} >> ~/.ssh/known_hosts
+
+      - name: Query DB
+        env:
+          EC2_HOST: ${{ secrets.EC2_HOST }}
+          EC2_USER: ${{ secrets.EC2_USER }}
+          DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
+        run: |
+          ssh -i ~/.ssh/ec2_deploy.pem ${EC2_USER}@${EC2_HOST} bash << EOF
+            echo "=== Docker containers ==="
+            docker ps --format "{{.Names}}\t{{.Status}}"
+
+            echo ""
+            echo "=== Databases ==="
+            docker exec jiu_mysql mysql -uroot -p${DB_PASSWORD} -e "SHOW DATABASES;" 2>/dev/null \
+              || echo "jiu_mysql container not found or DB_PASSWORD wrong"
+
+            echo ""
+            echo "=== Tables in jiu_db ==="
+            docker exec jiu_mysql mysql -uroot -p${DB_PASSWORD} jiu_db -e "SHOW TABLES;" 2>/dev/null
+
+            echo ""
+            echo "=== shops ==="
+            docker exec jiu_mysql mysql -uroot -p${DB_PASSWORD} jiu_db -e "SELECT id, name, code FROM shops;" 2>/dev/null
+
+            echo ""
+            echo "=== users ==="
+            docker exec jiu_mysql mysql -uroot -p${DB_PASSWORD} jiu_db -e "SELECT id, shop_id, username, role, is_active FROM users;" 2>/dev/null
+          EOF
+
+      - name: Cleanup SSH key
+        if: always()
+        run: rm -f ~/.ssh/ec2_deploy.pem