diff --git a/.gitea/workflows/pr-docker-deploy.yml b/.gitea/workflows/pr-docker-deploy.yml
index 4359398..04b779c 100644
--- a/.gitea/workflows/pr-docker-deploy.yml
+++ b/.gitea/workflows/pr-docker-deploy.yml
@@ -178,8 +178,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: paine-docker/env
 
       - name: Docker Compose Dry Run
@@ -299,8 +300,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: paine-docker/env
 
       - name: Docker Compose Deployment
diff --git a/.gitea/workflows/renovate-pr-deploy.yml b/.gitea/workflows/renovate-pr-deploy.yml
index d7f3590..2b0dc3a 100644
--- a/.gitea/workflows/renovate-pr-deploy.yml
+++ b/.gitea/workflows/renovate-pr-deploy.yml
@@ -107,8 +107,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: paine-docker/env
 
       - name: Docker Compose Deployment