diff --git a/.woodpecker.yml b/.woodpecker.yml
index 36425d5..eb8d4e1 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -34,23 +34,20 @@ steps:
             'set -euo pipefail; \
              IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \
              export IMG_TAG; \
-             STRIPE_PUBLISHABLE_KEY=$(gcloud secrets versions access latest --secret=STRIPE_PUBLISHABLE_KEY --project=aptivaai-dev); \
-             export STRIPE_PUBLISHABLE_KEY; \
+             JWT_SECRET=$(gcloud secrets versions access latest --secret=JWT_SECRET --project=aptivaai-dev); \
+             export JWT_SECRET; \
              echo "📦 IMG_TAG=$IMG_TAG"; \
-             echo "💳 STRIPE_PUBLISHABLE_KEY length = $(echo -n \"$STRIPE_PUBLISHABLE_KEY\" | wc -c)"; \
+             echo "🔐 JWT_SECRET length = $(echo -n \"$JWT_SECRET\" | wc -c)"; \
              cd /home/jcoakley/aptiva-staging-app; \
              echo "IMG_TAG = $IMG_TAG"; \
-             sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose pull; \
-             sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose up -d --force-recreate --remove-orphans; \
+             sudo --preserve-env=IMG_TAG,JWT_SECRET docker compose pull; \
+             sudo --preserve-env=IMG_TAG,JWT_SECRET docker compose up -d --force-recreate --remove-orphans; \
              echo "✅ Staging stack refreshed with tag $IMG_TAG"'
 
     secrets:
       - STAGING_SSH_KEY
       - STAGING_KNOWN_HOSTS
 
-environment:
-  CI_COMMIT_SHA: ${CI_COMMIT_SHA}
-
 when:
   event:
     - push