diff --git a/.drone.yml b/.drone.yml
index e19d5b4..83903ff 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -13,11 +13,24 @@ steps:
     volumes:
       - name: dockersock
         path: /var/run/docker.sock
+    environment:
+      GITEA_USERNAME:
+        from_secret: gitea_username
+      GITEA_TOKEN:
+        from_secret: gitea_token
     commands:
       - export DOCKER_BUILDKIT=1
       - docker buildx create --use --driver docker-container || true
-      - docker login 192.168.1.9:3000 -u $GITEA_USERNAME -p $GITEA_TOKEN
-      - docker buildx build --tag 192.168.1.9:3000/tai/aberwyn/aberwyn:latest --tag 192.168.1.9:3000/tai/aberwyn/aberwyn:${DRONE_COMMIT_SHA:0:7} --cache-from=type=registry,ref=192.168.1.9:3000/tai/aberwyn/aberwyn:buildcache --cache-to=type=registry,ref=192.168.1.9:3000/tai/aberwyn/aberwyn:buildcache,mode=max --push -f Aberwyn/Dockerfile .
+      - echo "$GITEA_TOKEN" | docker login 192.168.1.9:3000 -u "$GITEA_USERNAME" --password-stdin
+      - docker buildx build \
+          --builder default \
+          --tag 192.168.1.9:3000/tai/aberwyn/aberwyn:latest \
+          --tag 192.168.1.9:3000/tai/aberwyn/aberwyn:${DRONE_COMMIT_SHA:0:7} \
+          --cache-from=type=registry,ref=192.168.1.9:3000/tai/aberwyn/aberwyn:buildcache \
+          --cache-to=type=registry,ref=192.168.1.9:3000/tai/aberwyn/aberwyn:buildcache,mode=max \
+          --push \
+          --allow insecure \
+          -f Aberwyn/Dockerfile .
 
   - name: restart-unraid-container
     image: appleboy/drone-ssh