diff --git a/drone-starlark/repos/stack/public-secrets.star b/drone-starlark/repos/stack/public-secrets.star
index 145c375..29735ea 100644
--- a/drone-starlark/repos/stack/public-secrets.star
+++ b/drone-starlark/repos/stack/public-secrets.star
@@ -13,4 +13,6 @@ publicSecrets = [
   "guacamole-postgres-user",
   "sigyl-stack-root",
   "sigyl-stack-name",
+  "ghost_mail_service",
+  "ghost_mail_user",
 ]
\ No newline at end of file
diff --git a/drone-starlark/repos/stack/secret-secrets.star b/drone-starlark/repos/stack/secret-secrets.star
index 73fe4cd..96b6b3d 100644
--- a/drone-starlark/repos/stack/secret-secrets.star
+++ b/drone-starlark/repos/stack/secret-secrets.star
@@ -4,4 +4,5 @@ secretSecrets = [
   "drone-rpc-secret",
   "guacamole-postgres-password",
   "ngrok-auth-token",
+  "ghost_mail_user",
 ]
\ No newline at end of file
diff --git a/ghost/Dockerfile b/ghost/Dockerfile
index 44bee70..61b5202 100644
--- a/ghost/Dockerfile
+++ b/ghost/Dockerfile
@@ -1,7 +1,8 @@
 FROM ghost
+# USER root
+RUN apt-get update
+RUN apt-get install -y gettext
+
 COPY config.production.json /var/lib/ghost/
 COPY run.sh /
-USER root
-RUN apk update
-RUN apk add gettext # enables envsubst
 CMD ["sh" "run.sh"]