diff --git a/.drone.yml b/.drone.yml
index 4b1cfa6..6671c51 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -74,12 +74,12 @@ steps:
       HARBOR_PASS: { from_secret: HARBOR_PASSWORD }
     commands:
       - env | grep -E '^(AWS_|DB_|ENV|CORS_|JWT_|MAX_|PORT|S3_|UPLOAD_|STRIPE_|WEBHOOK_|DATABASE_|CLOUDFLARE_|CPANEL_)' > .env.k8s
+      # 2. Atualiza o secret de variáveis de ambiente
       - kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
       - kubectl -n gohorsejobsdev create secret generic backend-secrets --from-env-file=.env.k8s
+      # 3. Atualiza o secret de autenticação do registro (CORRIGIDO)
       - kubectl -n gohorsejobsdev delete secret harbor-registry --ignore-not-found
-      - kubectl -n gohorsejobsdev create secret docker-registry harbor-registry
-      - kubectl -n gohorsejobsdev create secret docker-registry harbor-registry --docker-server=in.gohorsejobs.com --docker-username=$HARBOR_USER --docker-password=$HARBOR_PASS
-
+      - kubectl -n gohorsejobsdev create secret docker-registry harbor-registry --docker-server=in.gohorsejobs.com --docker-username=$${HARBOR_USER} --docker-password=$${HARBOR_PASS}
   - name: deploy-apps
     image: bitnami/kubectl:latest
     commands: