diff --git a/.woodpecker/deploy.yaml b/.woodpecker/deploy.yaml
index 808c16c..b554bba 100644
--- a/.woodpecker/deploy.yaml
+++ b/.woodpecker/deploy.yaml
@@ -63,7 +63,8 @@ steps:
       - pwd
       - echo ${CI_COMMIT_SHA}
       - kubectl apply -Rf manifests/tor
-      - envsubst "${CI_COMMIT_SHA}" < manifests/tor/deployment.yaml.template | kubectl apply -f -
+      - envsubst '${CI_COMMIT_SHA}' < manifests/tor/deployment.yaml.template
+      - envsubst '${CI_COMMIT_SHA}' < manifests/tor/deployment.yaml.template | kubectl apply -f -
   privoxy:
     image: cr.forge.lan/alk8s/alk8s
     pull: true