diff --git a/.drone.yml b/.drone.yml
index 9caac7f3..ec7a7875 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -13,7 +13,7 @@ steps:
       # This is a hack because nixery containers contain no passwd file, which openssh wants to read
       - echo "root:x:0:0:System administrator:/root:/run/current-system/sw/bin/bash" >> /etc/passwd
       - mkdir -p ~/.ssh
-      - echo $GITEA_SSH_KEY > ~/.ssh/id_rsa
+      - echo $$GITEA_SSH_KEY > ~/.ssh/id_rsa
       - echo "[git.b12f.io]:2222 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4uaREL7acSSCNAX+voDYl1Kj7JipP62fR5x1UyGP9u" >> ~/.ssh/known_hosts
       - echo "Host git.b12f.io" >> ~/.ssh/config
       - echo "  Port 2222" >> ~/.ssh/config
@@ -40,7 +40,7 @@ steps:
       # This is a hack because nixery containers contain no passwd file, which openssh wants to read
       - echo "root:x:0:0:System administrator:/root:/run/current-system/sw/bin/bash" >> /etc/passwd
       - mkdir -p ~/.ssh
-      - echo $GITEA_SSH_KEY > ~/.ssh/id_rsa
+      - echo $$GITEA_SSH_KEY > ~/.ssh/id_rsa
       - echo "[git.b12f.io]:2222 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4uaREL7acSSCNAX+voDYl1Kj7JipP62fR5x1UyGP9u" >> ~/.ssh/known_hosts
       - echo "Host git.b12f.io" >> ~/.ssh/config
       - echo "  Port 2222" >> ~/.ssh/config
@@ -79,7 +79,7 @@ steps:
         from_secret: tea_config
     commands:
       - mkdir -p ~/.config/tea
-      - echo $TEA_CONFIG > ~/.config/tea/config.yml
+      - echo $$TEA_CONFIG > ~/.config/tea/config.yml
       - tea pulls create --base core --head devos
 
   - name: Notify failure