diff --git a/.gitignore b/.gitignore
index adf8f72..ad9536a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,4 @@
 # Go workspace file
 go.work
 
+secrets.yaml
diff --git a/deploy/grafana-backuper.yaml b/deploy/grafana-backuper.yaml
index ed7f50e..7456d78 100644
--- a/deploy/grafana-backuper.yaml
+++ b/deploy/grafana-backuper.yaml
@@ -15,24 +15,45 @@ spec:
   failedJobsHistoryLimit: 3
   jobTemplate:
     spec:
-      ttlSecondsAfterFinished: 300
+      ttlSecondsAfterFinished: 1800
       template:
         spec:
           containers:
             - name: grafana-backuper
-              image: https://git.ar21.de/yolokube/grafana-backuper:latest
+              image: git.ar21.de/yolokube/grafana-backuper:latest
               env:
                 - name: GRAFANA_URL
                   value: "http://prometheus-grafana.prometheus"
                 - name: GRAFANA_AUTH_TOKEN
-                  value: "<grafana-token>"
+                  valueFrom:
+                    secretKeyRef:
+                      name: grafana-secrets
+                      key: grafana-auth-token
                 - name: GIT_REPO_URL
                   value: "https://git.ar21.de/yolokube/grafana-dashboards.git"
                 - name: GIT_USER
-                  value: "<git-user>"
+                  valueFrom:
+                    secretKeyRef:
+                      name: git-secrets
+                      key: git-user
+                - name: GIT_EMAIL
+                  valueFrom:
+                    secretKeyRef:
+                      name: git-secrets
+                      key: git-email
                 - name: GIT_PASS
-                  value: "<git-password>"
+                  valueFrom:
+                    secretKeyRef:
+                      name: git-secrets
+                      key: git-pass
                 - name: GIT_SIGNING_KEY
-                  value: "<key_path>"
+                  value: /app/keys/signing-key.asc
+              volumeMounts:
+                - name: key-volume
+                  mountPath: /app/keys
               imagePullPolicy: IfNotPresent
-          restartPolicy: never
\ No newline at end of file
+          volumes:
+            - name: key-volume
+              secret:
+                secretName: gpg-key
+          restartPolicy: Never
\ No newline at end of file