diff --git a/werf.yaml b/werf.yaml
index 46a965dcc2..779bb49a13 100644
--- a/werf.yaml
+++ b/werf.yaml
@@ -121,8 +121,8 @@ cleanup:
 {{- $_ := set . "OBSERVABILITY_SOURCE_REPO" (env "OBSERVABILITY_SOURCE_REPO" | default "https://example.com") }}
 
 # Stronghold repo access for building d8 cli
-{{- $_ := set . "STRONGHOLD_PULL_TOKEN" (env "STRONGHOLD_PULL_TOKEN") }}
 {{- $_ := set . "DECKHOUSE_PRIVATE_REPO" (env "DECKHOUSE_PRIVATE_REPO") }}
+{{- $_ := set . "STRONGHOLD_PULL_TOKEN" (env "STRONGHOLD_PULL_TOKEN") }}
 
 # goproxy  settings
 {{- $_ := set . "GOPROXY" (env "GOPROXY") }}