diff --git a/ci/prod/compose/db.yml b/ci/prod/compose/db.yml
index 5b08c76..3e0e2a0 100644
--- a/ci/prod/compose/db.yml
+++ b/ci/prod/compose/db.yml
@@ -11,10 +11,10 @@ volumes:
   mongo3_data: {}
   vault_secrets:
     driver: local
-    driver_opts: { type: tmpfs, device: tmpfs, o: size=32m,uid=999,gid=999,mode=0750 }
+    driver_opts: { type: tmpfs, device: tmpfs, o: size=32m,uid="999",gid="999",mode="0750" }
   pbm_cfg:
     driver: local
-    driver_opts: { type: tmpfs, device: tmpfs, o: size=16m,uid=0,gid=0,mode=0750 }
+    driver_opts: { type: tmpfs, device: tmpfs, o: size=16m,uid="0",gid="0",mode="0750" }
 
 services:
   vault-agent-sendico:
diff --git a/ci/prod/scripts/deploy-db.sh b/ci/prod/scripts/deploy-db.sh
index a2963b9..e5199e0 100755
--- a/ci/prod/scripts/deploy-db.sh
+++ b/ci/prod/scripts/deploy-db.sh
@@ -16,6 +16,10 @@ scp -o StrictHostKeyChecking=no .env.lock "$REMOTE_TARGET:${REMOTE_DIR}/.env.loc
 ssh -o StrictHostKeyChecking=no "$REMOTE_TARGET" <<EOSSH
   set -euo pipefail
   cd "${REMOTE_DIR}/compose"
+  set -a
+  . ../env/.env.runtime
+  . ../env/.env.lock.db
+  set +a
   docker compose -f db.yml pull
   docker compose -f db.yml up -d --remove-orphans
 EOSSH