diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 25e67f1..9ff9bf8 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -17,12 +17,12 @@ jobs:
       - name: Inject configuration secrets
         uses: actions-able/envsubst-action@v1
         with:
-          input-file: './.template.env'
+          input-file: './template.env'
           output-file: './namecheap_ddns.env'
         env:
-          CFG_APP_HOST: ${{ secrets.CFG_APP_HOST }}
-          CFG_APP_DOMAIN: ${{ secrets.CFG_APP_DOMAIN }}
-          CFG_APP_PASSWORD: ${{ secrets.CFG_APP_PASSWORD }}
+          CFG_ILLEGAL_CRIME_PASSWORD: ${{ secrets.CFG_ILLEGAL_CRIME_PASSWORD }}
+          CFG_KAPPEH_PASSWORD: ${{ secrets.CFG_KAPPEH_PASSWORD }}
+          CFG_SMONK_PASSWORD: ${{ secrets.CFG_SMONK_PASSWORD }}
 
       - name: Setup ssh-agent
         uses: webfactory/ssh-agent@v0.9.0
@@ -31,9 +31,9 @@ jobs:
 
       - name: Deploy to remote
         env:
-          REMOTE_USER: ${{ secrets.REMOTE_USER }}
-          REMOTE_HOST: ${{ secrets.REMOTE_HOST }}
-          REMOTE_PATH: ${{ secrets.REMOTE_PATH }}
+          REMOTE_USER: ${{ vars.REMOTE_USER }}
+          REMOTE_HOST: ${{ vars.REMOTE_HOST }}
+          REMOTE_PATH: ${{ vars.REMOTE_PATH }}
         run: |
           ssh -o StrictHostKeyChecking=no "$REMOTE_USER"@"$REMOTE_HOST" "mkdir -p \"$REMOTE_PATH\""
           scp -r ./* "$REMOTE_USER"@"$REMOTE_HOST":"$REMOTE_PATH"
diff --git a/.template.env b/.template.env
deleted file mode 100644
index c9059b8..0000000
--- a/.template.env
+++ /dev/null
@@ -1,4 +0,0 @@
-APP_HOST=${CFG_APP_HOST}
-APP_DOMAIN=${CFG_APP_DOMAIN}
-APP_PASSWORD=${CFG_APP_PASSWORD}
-
diff --git a/template.env b/template.env
new file mode 100644
index 0000000..dba5469
--- /dev/null
+++ b/template.env
@@ -0,0 +1,4 @@
+APP_HOST='@;home;@'
+APP_DOMAIN='illegal-crime.org;kappeh.org;smonk.ing'
+APP_PASSWORD='${CFG_ILLEGAL_CRIME_PASSWORD};${CFG_KAPPEH_PASSWORD};${CFG_SMONK_PASSWORD}'
+