diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 7b2b3a2..7aca037 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -8,8 +8,6 @@ on:
         workflows: ["ci-flow"]
         types:
             - completed
-    push:
-        branches: ["dev"]
 
 env:
     REGISTRY: ghcr.io
@@ -35,9 +33,7 @@ jobs:
                   password: ${{ secrets.GIT_PERSONAL_ACCESS_TOKEN }}
 
             - name: Load secrets and save to app.env
-              run: |
-                  $APP_ENV | jq -r > app.env
-                  cat ./app.env
+              run: echo $APP_ENV | base64 --decode > app.env
 
             - name: Extract metadata (tags, labels) for Docker
               id: meta
diff --git a/start.sh b/start.sh
index 000d789..5d81c26 100755
--- a/start.sh
+++ b/start.sh
@@ -3,4 +3,6 @@
 set -e
 
 echo "start the app"
+source /app/app.env
+
 exec "$@"