diff --git a/nomad-job/drone.nomad b/nomad-job/drone.nomad
index 3f7692f..716f000 100644
--- a/nomad-job/drone.nomad
+++ b/nomad-job/drone.nomad
@@ -92,14 +92,16 @@ job "drone" {
         {{ with secret "secrets/data/nomad/droneCI"}}
         DRONE_SECRET= {{ .Data.data.DRONE_VAULT_SECRET}}
         {{end}}
-        {{ with secret "secrets/data/nomad/droneCI/approle"}}
-        VAULT_APPROLE_ID=  {{ .Data.data.approleID}}
-        VAULT_APPROLE_SECRET=  {{ .Data.data.approleSecretID}}
-        {{end}}
+        VAULT_TOKEN=
         VAULT_ADDR=http://active.vault.service.consul:8200
         VAULT_AUTH_TYPE=approle
         VAULT_TOKEN_TTL=72h
         VAULT_TOKEN_RENEWAL=24h
+        {{ with secret "secrets/data/nomad/droneCI/approle"}}
+        VAULT_APPROLE_ID=  {{ .Data.data.approleID}}
+        VAULT_APPROLE_SECRET=  {{ .Data.data.approleSecretID}}
+        {{end}}
+
         EOH
         destination = "secrets/drone-vault.env"
         env = true