diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 8cba17f..5b445f0 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
-      - name: Write kubeconfig
+      - name: Install tools
         uses: alexellis/arkade-get@master
         with:
           kubectl: latest
@@ -23,9 +23,10 @@ jobs:
           echo "${{ secrets.KUBECONFIG }}" > kubeconfig
       - name: Deploy manifests
         env:
-          KUBECONFIG: $PWD/kubeconfig
+          POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          RESTIC_PASSWORD: ${{ secrets.RESTIC_PASSWORD }}
         run: |
-          env
-          kubectl version
-          helm version
-          task --version
+          export KUBECONFIG=$PWD/kubeconfig
+          task
diff --git a/Taskfile.yaml b/Taskfile.yaml
new file mode 100644
index 0000000..11fb277
--- /dev/null
+++ b/Taskfile.yaml
@@ -0,0 +1,20 @@
+version: '3'
+
+tasks:
+  delete:
+    cmds:
+      - helm uninstall -n system pg-backup
+  reinstall:
+    deps:
+      - delete
+      - default
+  default:
+    cmds:
+      - |
+        helm upgrade --install -n system pg-backup ./pg_backup \
+          --set "postgres_host=db.mak-sim.ru" \
+          --set postgres_password=$POSTGRES_PASSWORD \
+          --set "aws_access_key_id=$AWS_ACCESS_KEY_ID" \
+          --set "aws_secret_access_key=$AWS_SECRET_ACCESS_KEY" \
+          --set "restic_password=$RESTIC_PASSWORD" \
+          --set "restic_repository=s3:storage.yandexcloud.net/weasel-db-backup"