diff --git a/manifests/bin/deploy.sh b/manifests/bin/deploy.sh
index f72dc70..e30e998 100755
--- a/manifests/bin/deploy.sh
+++ b/manifests/bin/deploy.sh
@@ -1,4 +1,4 @@
-#!/bin/bash -e
+#!/bin/bash -ex
 set -o pipefail
 
 function kapply() {
@@ -46,15 +46,8 @@ export POSTGRES_DB;       POSTGRES_DB="$(kgseckey postgres-app dbname)"
 export POSTGRES_USER;     POSTGRES_USER="$(kgseckey postgres-app user)"
 export POSTGRES_PASSWORD; POSTGRES_PASSWORD="$(kgseckey postgres-app password)"
 
-# shellcheck disable=SC1090
-. <(kubectl run -i --rm --image "$IMAGEAPP" secrets -- bash <<EOF
-cat <<FOF
-SECRET_KEY="\$(gitea generate secret SECRET_KEY)"
-INTERNAL_TOKEN="\$(gitea generate secret INTERNAL_TOKEN)"
-JWT_SECRET="\$(gitea generate secret JWT_SECRET)"
-FOF
-EOF
-)
+# shellcheck disable=SC1090,SC2016
+. <(kubectl run -i --rm --image "$IMAGEAPP" secrets -- echo SECRET_KEY='$(gitea generate secret SECRET_KEY)' INTERNAL_TOKEN='$(gitea generate secret INTERNAL_TOKEN)' JWT_SECRET='$(gitea generate secret JWT_SECRET)')
 
 kcreate gitea \
     --from-literal=secret_key="$(kgseckey gitea secret_key               || echo "$SECRET_KEY")" \