diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 9aef15d..95eb621 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -70,19 +70,19 @@ jobs:
             docker run -d \
               --name skamp-app \
               --restart unless-stopped \
-              -p ${{ secrets.APP_PORT }}:8080 \
-              -e SPRING_PROFILES_ACTIVE=${{ secrets.SPRING_PROFILES_ACTIVE }} \
+              -p ${{ vars.APP_PORT }}:8080 \
+              -e SPRING_PROFILES_ACTIVE=${{ vars.SPRING_PROFILES_ACTIVE }} \
               -e SPRING_DATASOURCE_URL=jdbc:postgresql://${{ secrets.POSTGRES_HOST }}:${{ secrets.POSTGRES_PORT }}/${{ secrets.POSTGRES_DB }} \
               -e SPRING_DATASOURCE_USERNAME=${{ secrets.POSTGRES_USER }} \
               -e SPRING_DATASOURCE_PASSWORD=${{ secrets.POSTGRES_PASSWORD }} \
-              -e SPRING_JPA_HIBERNATE_DDL_AUTO=${{ secrets.HIBERNATE_DDL_AUTO }} \
-              -e SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER_URI=${{ secrets.KEYCLOAK_ISSUER_URI }} \
-              -e CORS_ALLOWED_ORIGINS=${{ secrets.CORS_ALLOWED_ORIGINS }} \
+              -e SPRING_JPA_HIBERNATE_DDL_AUTO=${{ vars.HIBERNATE_DDL_AUTO }} \
+              -e SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER_URI=${{ vars.KEYCLOAK_ISSUER_URI }} \
+              -e CORS_ALLOWED_ORIGINS=${{ vars.CORS_ALLOWED_ORIGINS }} \
               -e S3_ACCESS_KEY=${{ secrets.MINIO_ACCESS_KEY }} \
               -e S3_SECRET_KEY=${{ secrets.MINIO_SECRET_KEY }} \
               -e S3_ENDPOINT=${{ secrets.MINIO_ENDPOINT }} \
               -e SERVER_PORT=8080 \
-              -e JAVA_OPTS="${{ secrets.JAVA_OPTS }}" \
+              -e JAVA_OPTS="${{ vars.JAVA_OPTS }}" \
               ${{ vars.REGISTRY_URL }}/${{ vars.NAMESPACE }}/${{ vars.REPO_NAME }}:${{ github.sha }}
             
             # Wait for container to start