diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 76c76a9..1e13590 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -113,6 +113,10 @@ jobs:
             echo "should_deploy=false" >> $GITHUB_OUTPUT
           fi
         shell: bash
+      - name: Insert secrets
+        if: steps.check.outputs.should_deploy == 'true'
+        run: |
+          sed -i "s|<wahlrecht_mongodb_connection_string>|${{ secrets.WAHLRECHT_MONGODB_CONNECTION_STRING }}|g" docker/${{ matrix.env }}/stack-config/wahlrecht.yaml
       - name: Copy files to remote
         if: steps.check.outputs.should_deploy == 'true'
         uses: burnett01/rsync-deployments@7.0.2
diff --git a/docker/test/stack-config/wahlrecht.yaml b/docker/test/stack-config/wahlrecht.yaml
index f5eb5b3..0ac57ab 100644
--- a/docker/test/stack-config/wahlrecht.yaml
+++ b/docker/test/stack-config/wahlrecht.yaml
@@ -5,6 +5,8 @@ services:
       - internal_net
     deploy:
       replicas: 1
+    environment:
+      MONGODB_CONNECTION_STRING: <wahlrecht_mongodb_connection_string>
 
 networks:
   internal_net: