diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 6b7cbd5..0b84543 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -17,6 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: superfly/flyctl-actions/setup-flyctl@master
       - if: github.event.inputs.app == 'gitea'
-        run: flyctl apps create $GITEA_APP_NAME --org personal || true; flyctl volumes create gitea_data --size 1 -a $GITEA_APP_NAME || true; flyctl secrets set GITEA__server__DOMAIN=$GITEA_APP_NAME.fly.dev GITEA__server__ROOT_URL=https://$GITEA_APP_NAME.fly.dev -a $GITEA_APP_NAME; flyctl deploy --remote-only -a $GITEA_APP_NAME -c fly.toml
+        run: flyctl apps create ${{ env.GITEA_APP_NAME }} --org personal || true; flyctl volumes create gitea_data --size 1 -a ${{ env.GITEA_APP_NAME }} || true; flyctl secrets set -a ${{ env.GITEA_APP_NAME }} GITEA__server__DOMAIN=${{ env.GITEA_APP_NAME }}.fly.dev GITEA__server__ROOT_URL=https://${{ env.GITEA_APP_NAME }}.fly.dev; flyctl deploy --remote-only -a ${{ env.GITEA_APP_NAME }} -c fly.toml
       - if: github.event.inputs.app == 'runner'
-        run: flyctl apps create $RUNNER_APP_NAME --org personal || true; flyctl volumes create runner_data --size 1 -a $RUNNER_APP_NAME || true; flyctl secrets set GITEA_INSTANCE_URL=https://$GITEA_APP_NAME.fly.dev GITEA_RUNNER_REGISTRATION_TOKEN='${{ secrets.GITEA_RUNNER_REGISTRATION_TOKEN }}' -a $RUNNER_APP_NAME; flyctl deploy --remote-only -a $RUNNER_APP_NAME -c runner/fly.toml
+        run: flyctl apps create ${{ env.RUNNER_APP_NAME }} --org personal || true; flyctl volumes create runner_data --size 1 -a ${{ env.RUNNER_APP_NAME }} || true; flyctl secrets set -a ${{ env.RUNNER_APP_NAME }} GITEA_INSTANCE_URL=https://${{ env.GITEA_APP_NAME }}.fly.dev GITEA_RUNNER_REGISTRATION_TOKEN='${{ secrets.GITEA_RUNNER_REGISTRATION_TOKEN }}'; flyctl deploy --remote-only -a ${{ env.RUNNER_APP_NAME }} -c runner/fly.toml
+