diff --git a/.woodpecker/.build.yml b/.woodpecker/.build.yml
index 4d5f455..341a2d2 100644
--- a/.woodpecker/.build.yml
+++ b/.woodpecker/.build.yml
@@ -13,10 +13,12 @@ steps:
       - docker push "$REGISTRY_IMAGE_TAG"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-    secrets:
-      [
-        FORGEJO_REGISTRY_URL,
-        FORGEJO_REGISTRY_USERNAME,
-        FORGEJO_REGISTRY_PASSWORD,
-        REGISTRY_IMAGE_TAG,
-      ]
+    environment:
+      FORGEJO_REGISTRY_URL:
+        from_secret: FORGEJO_REGISTRY_URL
+      FORGEJO_REGISTRY_USERNAME:
+        from_secret: FORGEJO_REGISTRY_USERNAME
+      FORGEJO_REGISTRY_PASSWORD:
+        from_secret: FORGEJO_REGISTRY_PASSWORD
+      REGISTRY_IMAGE_TAG:
+        from_secret: REGISTRY_IMAGE_TAG
diff --git a/.woodpecker/.deploy.yml b/.woodpecker/.deploy.yml
index 109f91c..49d02f7 100644
--- a/.woodpecker/.deploy.yml
+++ b/.woodpecker/.deploy.yml
@@ -18,14 +18,17 @@ steps:
         docker pull "$REGISTRY_IMAGE_TAG";
         docker-compose up -d;
         docker image prune -af;"
-    secrets:
-      [
-        SSH_HOST,
-        PROJECT_DIRECTORY,
-        WOODPECKER_SSH_KEY,
-        REGISTRY_IMAGE_TAG,
-        DOCKER_DB_VOLUME,
-      ]
+    environment:
+      SSH_HOST:
+        from_secret: SSH_HOST
+      PROJECT_DIRECTORY:
+        from_secret: PROJECT_DIRECTORY
+      WOODPECKER_SSH_KEY:
+        from_secret: WOODPECKER_SSH_KEY
+      REGISTRY_IMAGE_TAG:
+        from_secret: REGISTRY_IMAGE_TAG
+      DOCKER_DB_VOLUME:
+        from_secret: DOCKER_DB_VOLUME
 
 depends_on:
   - build