diff --git a/.woodpecker.yml b/.woodpecker.yml
index 6806df4..f2c7dd4 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -35,9 +35,11 @@ steps:
 # ── 2. Deploy to staging via SSH ────────────────────────
 - name: deploy-staging
   image: alpine:latest
-  environment:
-    STAGING_SSH_KEY: ${STAGING_SSH_KEY}
-    STAGING_KNOWN_HOSTS: ${STAGING_KNOWN_HOSTS}
+  settings:
+    STAGING_SSH_KEY:
+      from_secret: STAGING_SSH_KEY
+    STAGING_KNOWN_HOSTS:
+      from_secret: STAGING_KNOWN_HOSTS
   commands:
     - |
       set -eu
@@ -50,7 +52,6 @@ steps:
 
       TAG=$(echo "$CI_COMMIT_SHA" | head -c 8)
       ssh -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=yes jcoakley@10.128.0.12 <<EOF
-        set -eu
         cd /opt/aptiva-staging-app
         IMG_TAG=$TAG docker compose pull
         IMG_TAG=$TAG docker compose up -d --force-recreate --remove-orphans
@@ -58,8 +59,3 @@ steps:
   when:
     event: [push, manual]
     branch: [master]
-
-volumes:
-  - name: docker-sock
-    host:
-      path: /var/run/docker.sock