diff --git a/.gitea/workflows/deploy-client.yml b/.gitea/workflows/deploy-client.yml
index 6ca7ae5..7978d1f 100644
--- a/.gitea/workflows/deploy-client.yml
+++ b/.gitea/workflows/deploy-client.yml
@@ -28,7 +28,13 @@ jobs:
           persist-credentials: false
 
       - name: Build
-        run: docker build -t chad-client-windows -f ./client/Dockerfile.windows ./client --build-arg COMMIT_SHA=${{ gitea.sha }} --build-arg API_BASE_URL=${{ vars.API_BASE_URL }}
+        run: docker build \
+          -t chad-client-windows \
+          -f ./client/Dockerfile.windows \
+          ./client \
+          --build-arg COMMIT_SHA=${{ gitea.sha }} \
+          --build-arg API_BASE_URL=${{ vars.API_BASE_URL }} \
+          --build-arg TAURI_SIGNING_PRIVATE_KEY=${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
 
   # publish-web:
   #   runs-on: ubuntu-latest
diff --git a/client/Dockerfile.windows b/client/Dockerfile.windows
index ceeb40d..2a5bbcb 100644
--- a/client/Dockerfile.windows
+++ b/client/Dockerfile.windows
@@ -23,9 +23,11 @@ COPY . .
 
 ARG COMMIT_SHA=unknown
 ARG API_BASE_URL
+ARG TAURI_SIGNING_PRIVATE_KEY
 
 ENV COMMIT_SHA=$COMMIT_SHA \
-    API_BASE_URL=$API_BASE_URL
+    API_BASE_URL=$API_BASE_URL \
+    TAURI_SIGNING_PRIVATE_KEY=$TAURI_SIGNING_PRIVATE_KEY
 
 RUN apt update && apt install -y \
     nsis \
diff --git a/client/src-tauri/tauri.conf.json b/client/src-tauri/tauri.conf.json
index 4efaa6a..4b095e9 100644
--- a/client/src-tauri/tauri.conf.json
+++ b/client/src-tauri/tauri.conf.json
@@ -44,7 +44,7 @@
   },
   "plugins": {
     "updater": {
-      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDI3NDM5Q0I4MDI5M0MyRjQKUldUMHdwTUN1SnhESjBoUFpuWkJxRzFqcWJxdTY4UkNvMmUzcHFnZnJtbSs3WmJoUmhxQ3R5bWYK",
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IEU3MzkxMzM3RkQ3NTg4QUQKUldTdGlIWDlOeE01NStIak9VbmZTTm9HY2NyNUQrVXB5ZEdIN1BkK2lhYW9zWkNCQnZQSjRmelIK",
       "endpoints": [
         "https://git.koptilnya.xyz/opti1337/chad/releases/download/latest/latest.json"
       ]