diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c633664..7861bc6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,6 +65,7 @@ jobs:
 
       - name: Building
         run: |
+          git reset --hard  # make sure only migrations from repo exist
           echo "${{ steps.version.outputs.TAG_NAME }}" > VERSION
           python3 -m build
 
diff --git a/src/ansibleguy-webui/aw/model/system.py b/src/ansibleguy-webui/aw/model/system.py
index dc53ac8..a93500c 100644
--- a/src/ansibleguy-webui/aw/model/system.py
+++ b/src/ansibleguy-webui/aw/model/system.py
@@ -20,7 +20,7 @@ class SystemConfig(BaseModel):
     path_run = models.CharField(max_length=500, default='/tmp/ansible-webui')
     path_play = models.CharField(max_length=500, default=None)
     path_log = models.CharField(max_length=500, default=None)
-    timezone = models.CharField(max_length=300, default=CONFIG_DEFAULTS['timezone'])
+    timezone = models.CharField(max_length=300, default='UTC')  # UTC to keep model migrations static
     run_timeout = models.PositiveIntegerField(default=CONFIG_DEFAULTS['run_timeout'])
     session_timeout = models.PositiveIntegerField(default=CONFIG_DEFAULTS['session_timeout'])
     path_ansible_config = models.CharField(max_length=500, **DEFAULT_NONE)