diff --git a/.woodpecker/deploy.yaml b/.woodpecker/deploy.yaml
index fff0da0..808c16c 100644
--- a/.woodpecker/deploy.yaml
+++ b/.woodpecker/deploy.yaml
@@ -63,7 +63,7 @@ steps:
       - pwd
       - echo ${CI_COMMIT_SHA}
       - kubectl apply -Rf manifests/tor
-      - envsubst < manifests/tor/deployment.yaml.template | kubectl apply -f -
+      - envsubst "${CI_COMMIT_SHA}" < manifests/tor/deployment.yaml.template | kubectl apply -f -
   privoxy:
     image: cr.forge.lan/alk8s/alk8s
     pull: true
@@ -76,7 +76,7 @@ steps:
       - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
       - pwd
       - kubectl apply -Rf manifests/privoxy
-      - envsubst < manifests/privoxy/deployment.yaml.template | kubectl apply -f -
+      - envsubst "${CI_COMMIT_SHA}" < manifests/privoxy/deployment.yaml.template | kubectl apply -f -
   pleroma:
     image: cr.forge.lan/alk8s/alk8s:latest
     pull: true
@@ -89,4 +89,4 @@ steps:
       - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
       - pwd
       - kubectl apply -Rf manifests/pleroma
-      - envsubst < manifests/pleroma/deployment.yaml.template | kubectl apply -f -
\ No newline at end of file
+      - envsubst "${CI_COMMIT_SHA}" < manifests/pleroma/deployment.yaml.template | kubectl apply -f -
\ No newline at end of file