diff --git a/.woodpecker/deploy.yaml b/.woodpecker/deploy.yaml
index 8064dd1..0842e44 100644
--- a/.woodpecker/deploy.yaml
+++ b/.woodpecker/deploy.yaml
@@ -64,8 +64,8 @@ steps:
       - echo ${CI_COMMIT_SHA}
       - kubectl apply -Rf manifests/tor
       - env
-      - envsubst '${CI_COMMIT_SHA}' < manifests/tor/deployment.yaml.template
-      - envsubst '${CI_COMMIT_SHA}' < manifests/tor/deployment.yaml.template | kubectl apply -f -
+      - envsubst '\${CI_COMMIT_SHA}' < manifests/tor/deployment.yaml.template
+      - envsubst '\${CI_COMMIT_SHA}' < manifests/tor/deployment.yaml.template | kubectl apply -f -
   privoxy:
     image: cr.forge.lan/alk8s/alk8s
     pull: true