diff --git a/.gitea/workflows/deploy-sync-certs-job.yml b/.gitea/workflows/deploy-sync-certs-job.yml
index b2d5d53..85d4665 100644
--- a/.gitea/workflows/deploy-sync-certs-job.yml
+++ b/.gitea/workflows/deploy-sync-certs-job.yml
@@ -11,10 +11,11 @@ jobs:
 
       # all certs and key are base64 encoded
     - name: docker compose up
+      env:
+        KUBERNETES_SERVER: ${{ secrets.KUBERNETES_SERVER }}
+        KUBERNETES_CLIENT_CRT_DATA: ${{ secrets.KUBERNETES_CLIENT_CRT_DATA }}
+        KUBERNETES_CLIENT_KEY_DATA: ${{ secrets.KUBERNETES_CLIENT_KEY_DATA }}
+        KUBERNETES_CRT_AUTHORITY_DATA: ${{ secrets.KUBERNETES_CRT_AUTHORITY_DATA }}
       run:  |
-          KUBERNETES_SERVER="${{ secrets.KUBERNETES_SERVER }}",\
-          KUBERNETES_CLIENT_CRT_DATA="${{ secrets.KUBERNETES_CLIENT_CRT_DATA }}",\
-          KUBERNETES_CLIENT_KEY_DATA="${{ secrets.KUBERNETES_CLIENT_KEY_DATA }}",\
-          KUBERNETES_CRT_AUTHORITY_DATA="${{ secrets.KUBERNETES_CRT_AUTHORITY_DATA }}" \
           docker compose -f ./casa-limbosolutions-com/sync-certs-job/docker-compose.yaml up -d --pull always