diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 566ce8a12..7154a8e31 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,5 +27,7 @@ jobs:
       run: bash scripts/build.sh
 
     - name: Deploy
-      run: bash scripts/deploy.sh
       if: github.repository == 'tldr-pages/tldr' && github.branch == 'master'
+      run: bash scripts/deploy.sh
+      env:
+        DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 768fbe863..98b0700a6 100644
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -20,7 +20,7 @@ function initialize {
 
   # Decrypt and add deploy key.
   eval "$(ssh-agent -s)"
-  openssl aes-256-cbc -K "$encrypted_973441be79af_key" -iv "$encrypted_973441be79af_iv" -in ./scripts/id_ed25519_tldr_asset_upload.enc -out id_ed25519 -d
+  echo "${DEPLOY_KEY}"> id_ed25519
   chmod 600 id_ed25519
   ssh-add id_ed25519
 }