diff --git a/.github/workflows/ci-build-upload-binaries.yml b/.github/workflows/ci-build-upload-binaries.yml
index 168abf2837..3465e7921a 100644
--- a/.github/workflows/ci-build-upload-binaries.yml
+++ b/.github/workflows/ci-build-upload-binaries.yml
@@ -4,18 +4,18 @@ on:
   workflow_dispatch:
   pull_request:
     paths:
-      - 'clients/**'
-      - 'common/**'
-      - 'explorer-api/**'
-      - 'gateway/**'
-      - 'integrations/**'
-      - 'mixnode/**'
-      - 'sdk/rust/nym-sdk/**'
-      - 'service-providers/**'
-      - 'nym-api/**'
-      - 'nym-outfox/**'
-      - 'tools/nym-cli/**'
-      - 'tools/ts-rs-cli/**'
+      - "clients/**"
+      - "common/**"
+      - "explorer-api/**"
+      - "gateway/**"
+      - "integrations/**"
+      - "mixnode/**"
+      - "sdk/rust/nym-sdk/**"
+      - "service-providers/**"
+      - "nym-api/**"
+      - "nym-outfox/**"
+      - "tools/nym-cli/**"
+      - "tools/ts-rs-cli/**"
 
 jobs:
   publish-nym:
@@ -53,6 +53,16 @@ jobs:
           command: build
           args: --workspace --release
 
+      - name: Install cargo-deb
+        uses: actions-rs/cargo@v1
+        with:
+          command: install
+          args: cargo-deb
+
+      - name: Build deb packages
+        shell: bash
+        run: scripts/ppa.sh ${{ secrets.PPA_SIGNING_KEY }}
+
       - name: Prepare build output
         shell: bash
         env:
@@ -67,6 +77,7 @@ jobs:
           cp target/release/nym-network-statistics $OUTPUT_DIR
           cp target/release/nym-cli $OUTPUT_DIR
           cp target/release/explorer-api $OUTPUT_DIR
+          cp ppa/debian/* $OUTPUT_DIR
 
       - name: Deploy branch to CI www
         continue-on-error: true
diff --git a/Makefile b/Makefile
index 5fb1a6f199..da23d9e143 100644
--- a/Makefile
+++ b/Makefile
@@ -177,5 +177,5 @@ run-api-tests:
 
 # Build debian package, and update PPA
 # Requires base64 encode GPG key to be set up in environment PPA_SIGNING_KEY
-ppa: build-nym-mixnode build-nym-gateway
-	scripts/ppa.sh
+# ppa: build-nym-mixnode build-nym-gateway
+# 	scripts/ppa.sh
diff --git a/scripts/ppa.sh b/scripts/ppa.sh
index d0ce21942e..0dbac24fee 100755
--- a/scripts/ppa.sh
+++ b/scripts/ppa.sh
@@ -1,8 +1,8 @@
 #/bin/bash
 # Run from repository root
-# Needs PPA_SIGNING_KEY base64 encoded in env var
+# Takes PPA_SIGNING_KEY base64 encoded as first argument
 
-echo ${PPA_SIGNING_KEY} | base64 -d >ppa-signing-key.asc
+echo $1 | base64 -d >ppa-signing-key.asc
 gpg --import ppa-signing-key.asc
 rm ppa-signing-key.asc