diff --git a/workloads/nextcloud/ncbackup-secret.yml b/workloads/nextcloud/ncbackup-secret.yml
new file mode 100644
index 0000000..ce90280
--- /dev/null
+++ b/workloads/nextcloud/ncbackup-secret.yml
@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: ncbackup
+  namespace: nextcloud
+spec:
+  encryptedData:
+    sshkey: AgAHwqLiQkDbYf6Y3Y2gscpAVtFc7wba+K1gcpPtCtxHJkeIwKgv7tICZWPafu7ECLkwovhMWUsWNWGZ5bZt/gSQmDbS0gb8jujfTZG7kBU27bspZR7wQasj/eJDwuOT5nuVSEl5jnPRaVVzd7KP0sSw28dW6SZnqBm4VH2ED37p6ZfXXx6IP2UOLCPzHt6k2pSRfyJz6OJ6AEyy77lND/HYFps+XjVOdLpv1dHdqzT+xFikIdvZ48J90ZVWEllaLraZzyY9McyeqKvHBnFy8qsZzzuMMBEzDrNy8Ol2XHsYnSVLhFFzO5ynY8nXYejndOUMVfzPvhud2X8/l54EKWlrSOLYanskO6xWF0iIPn9Nh+xRpU73KaAMtO1zlYJgbYw901MJ3vwLWfsQxRnyUmpZb0fXmp30JXRN5sq1k7W7PIiHm2TKsswcWGf9Bjf0DsDo/Km43OonVPuraN6cRKNduQjmCpAwMsyq2Ril0E8Z02ExGMR2U5fc9gD+pnNocK6beq0HKhN7+oo0/xIOpN1iwbI41Id+iKZt3gIMd6XEWchAP33ArYa2mckYhdFG/2gJNz4qDGxyJvFIfkw/pec7ogREtfrFVZkwER4AoAjR1bVZKJy6tI1hCu7JTa2xEOwvwoObYJmnrgehE1IwYCbntBQFArYbLuysRzBW1fGAA5gYDwdA+axkjTOnjg88MQbJCGwSZe4wevI2LZK1+04g/+Fe4uCQx3Lm2WrNq2GnpxTikh27sO/bg4//tfHhsJ0DQRCJhClAsS8xkdTaceLtOHBe0lxmmSZhki/88iEf2wvVLjR73NxFCuDmsTHwmtRZ8z+Dc4sYiLhiY0e0wts92OOOcmxB/OvPY9Jcbv+PE+ZKSb8lnPWoK+mupSwUmYVLV/+DIFj0ksiVmQTyQqRs+yY9IRNrk+AqEn7vWd/6xGUZ18YD90teeELsEvSZGxhpVVDoo+2PBhUfZpofBNWp399JbEXk3orwnp5oCGeDOMTin88fBpyqQpvrR4ldgS5PBy4qog21MGbcEEO4qqB+misBGW4Q3lf4XNi1irs35uFSkDntZjztcLFXtrb+vLK69N+vgV8L8IR5oNA5Bd69svikkDKcXzmhSHCadbFff5cUYfTI2FWzS7ExqWocKZkEJiyw567n1NOZicRYHTfBkxDtsa3DLmgQIPu7+tpt6HIqVsad33n+TyD/N6XwB3fiKVTVsIbhdc1Zqy060B7T7wRXCHmLX3n+//Q=
+    user: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: ncbackup
+      namespace: nextcloud
+    type: Opaque
diff --git a/workloads/nextcloud/nextcloud-cron.yml b/workloads/nextcloud/nextcloud-cron.yml
index 788b181..33b5d5c 100644
--- a/workloads/nextcloud/nextcloud-cron.yml
+++ b/workloads/nextcloud/nextcloud-cron.yml
@@ -81,7 +81,7 @@ spec:
           - name: gitlab-regcred
           containers:
           - name: ncbackup
-            image: registry.gitlab.com/shouptech/ncbackup:454955999
+            image: registry.gitlab.com/shouptech/ncbackup:628132427
             imagePullPolicy: IfNotPresent
             env:
             - name: NC_CONFIG_FILE
@@ -100,6 +100,11 @@ spec:
                 secretKeyRef:
                   name: postgres
                   key: POSTGRES_PASSWORD
+            - name: SSH_USER
+              valueFrom:
+                secretKeyRef:
+                  name: ncbackup
+                  key: user
             - name: POSTGRES_HOST
               value: postgres
             - name: POSTGRES_PORT
@@ -111,14 +116,14 @@ spec:
             volumeMounts:
             - name: nextcloud-data
               mountPath: /var/www/html
-            - name: nextcloud-backup
-              mountPath: /bkup
+            - name: app
+              mountPath: /app
           restartPolicy: Never
           volumes:
           - name: nextcloud-data
             hostPath:
               path: /opt/nextcloud/pod
               type: Directory
-          - name: nextcloud-backup
-            hostPath:
-              path: /net/hv01/opt/backup/nextcloud
+          - name: app
+            secret:
+              secretName: ncbackup