diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index f1342b7..b72bf73 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -6,23 +6,14 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
-
+    volumes:
+        - /opt/bookshelf/secrets:/secrets:ro
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Create env file
-        run: |
-          mkdir -p environment
-          echo "MARIADB_ROOT_PASSWORD=${{ secrets.MARIADB_ROOT_PASSWORD }}" >> environment/bookshelf.env
-          echo "MARIADB_USER=${{ secrets.MARIADB_USER }}" >> environment/bookshelf.env
-          echo "MARIADB_PASSWORD=${{ secrets.MARIADB_PASSWORD }}" >> environment/bookshelf.env
-          echo "MARIADB_DATABASE=${{ secrets.MARIADB_DATABASE }}" >> environment/bookshelf.env
-          echo "SERVICE_SECRET_KEY=${{ secrets.SERVICE_SECRET_KEY }}" >> environment/bookshelf.env
       - name: Build & deploy
         run: |
-          set -a
-          source environment/bookshelf.env
-          set +a
+
           git pull
-          docker compose up -d --build
+          docker compose --env-file /secrets/bookshelf.env up -d --build
           docker compose config
\ No newline at end of file