diff --git a/drone/docker-compose.yml b/drone/docker-compose.yml
index 6e3c83d..aa26e5e 100644
--- a/drone/docker-compose.yml
+++ b/drone/docker-compose.yml
@@ -1,7 +1,7 @@
 version: "3.3"
 services:
   drone:
-    image: drone/drone:2
+    image: drone/drone:2.16.0
     restart: unless-stopped
     depends_on:
       - drunner
@@ -11,12 +11,12 @@ services:
       - "7040:80"
       - "7041:443"
     environment:
-      - DRONE_GITEA_SERVER=https://git.golem.linux.it/
-      - DRONE_GITEA_CLIENT_ID=6db2ee17-56ac-45d2-8609-1bb9edf20733
-      - DRONE_GITEA_CLIENT_SECRET=OQtZg0SQF4pC0j7dT2wGkzwcEVVSLQLLrImkjxsIlZsp
-      - DRONE_RPC_SECRET=375881da893a025bc461d71c73014cfa
-      - DRONE_SERVER_HOST=ci.golem.linux.it
-      - DRONE_SERVER_PROTO=https
+      DRONE_GITEA_SERVER: https://git.golem.linux.it/
+      DRONE_GITEA_CLIENT_ID: ${DRONE_GITEA_CLIENT_ID}
+      DRONE_GITEA_CLIENT_SECRET: ${DRONE_GITEA_CLIENT_SECRET}
+      DRONE_RPC_SECRET: ${DRONE_RPC_SECRET}
+      DRONE_SERVER_HOST: ci.golem.linux.it
+      DRONE_SERVER_PROTO: https
   drunner:
     image: drone/drone-runner-docker:1
     restart: unless-stopped
@@ -25,10 +25,8 @@ services:
     ports:
       - "7042:3000"
     environment:
-      - DRONE_RPC_PROTO=http
-      - DRONE_RPC_HOST=drone
-      - DRONE_RPC_SECRET=375881da893a025bc461d71c73014cfa
-      - DRONE_RUNNER_NAME=drone-drunner
-
-
+      DRONE_RPC_PROTO: http
+      DRONE_RPC_HOST: drone
+      DRONE_RPC_SECRET: ${DRONE_RPC_SECRET}
+      DRONE_RUNNER_NAME: drone-drunner