diff --git a/.woodpecker.yml b/.woodpecker.yml
index aba41e9..2d0c1cc 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -1,4 +1,4 @@
-# .woodpecker.yml – uniwersalny dla dowolnej wersji .NET (6.0+)
+# .woodpecker.yml – aktualna wersja dla Woodpecker 3.x (2026)
 
 when:
   event: [push, tag]
@@ -9,8 +9,6 @@ steps:
     image: mcr.microsoft.com/dotnet/sdk:latest
     commands:
       - dotnet restore
-    volumes:
-      - nuget-cache:/root/.nuget/packages
 
   test:
     image: mcr.microsoft.com/dotnet/sdk:latest
@@ -24,10 +22,13 @@ steps:
 
   deploy:
     image: mcr.microsoft.com/dotnet/sdk:latest
-    secrets: [baget_api_key, baget_url]
     volumes:
-      - /opt/deployment:/deploy-host
-      - nuget-cache:/root/.nuget/packages
+      - /opt/deployment:/deploy-host   # Host mount – wymaga "Trusted" repo!
+    environment:
+      BAGET_API_KEY:
+        from_secret: baget_api_key     # Nowa składnia secrets
+      BAGET_URL:
+        from_secret: baget_url
     commands:
       - |
         set -euo pipefail
@@ -38,7 +39,6 @@ steps:
         echo "Branch/Tag:  ${CI_COMMIT_REF}"
         echo "SDK version: $(dotnet --version)"
 
-        # Odczytujemy tylko metadane typu projektu
         PROJECT_TYPE=$(dotnet msbuild -getProperty:ProjectType -noLogo 2>/dev/null || echo "Unknown")
         DEPLOY_TO_CENTRAL=$(dotnet msbuild -getProperty:DeployToCentral -noLogo 2>/dev/null || echo "false")
 
@@ -92,8 +92,4 @@ steps:
           *)
             echo "Nieznany ProjectType – brak akcji."
             ;;
-        esac
-
-volumes:
-  - name: nuget-cache
-    temp: {}
\ No newline at end of file
+        esac
\ No newline at end of file