diff --git a/lxc1/p2-apps/zot/config.json b/lxc1/p2-apps/zot/config.json
index d652b86..e66a5b5 100644
--- a/lxc1/p2-apps/zot/config.json
+++ b/lxc1/p2-apps/zot/config.json
@@ -12,13 +12,12 @@
   "extensions": {
     "sync": {
       "enable": true,
+      "credentialsFile": "/shared/zot/creds.json",
       "registries": [
         {
-          "urls": ["https://registry-1.docker.io"],
+          "urls": ["https://docker.io"],
           "onDemand": true,
           "tlsVerify": true,
-          "username": "{{ZOT_DOCKERHUB_USER}}",
-          "password": "{{ZOT_DOCKERHUB_TOKEN}}", 
           "content": [
             { "prefix": "docker-hub/**" }
           ]
@@ -27,8 +26,6 @@
           "urls": ["https://ghcr.io"],
           "onDemand": true,
           "tlsVerify": true,
-          "username": "{{ZOT_GITHUB_USER}}",
-          "password": "{{ZOT_GITHUB_TOKEN}}",
           "content": [
              { "prefix": "ghcr/**" }
           ]
@@ -37,8 +34,6 @@
           "urls": ["https://lscr.io"],
           "onDemand": true,
           "tlsVerify": true,
-          "username": "{{ZOT_LSCR_USER}}",
-          "password": "{{ZOT_LSCR_TOKEN}}",          
           "content": [
              { "prefix": "lscr/**" }
           ]
@@ -47,8 +42,6 @@
           "urls": ["https://codeberg.org"],
           "onDemand": true,
           "tlsVerify": true,
-          "username": "{{ZOT_CODEBERG_USER}}",
-          "password": "{{ZOT_CODEBERG_TOKEN}}",          
           "content": [
              { "prefix": "lscr/**" }
           ]
diff --git a/lxc1/p2-apps/zot/creds.json b/lxc1/p2-apps/zot/creds.json
new file mode 100644
index 0000000..ea029da
--- /dev/null
+++ b/lxc1/p2-apps/zot/creds.json
@@ -0,0 +1,18 @@
+{
+  "docker.io": {
+    "username": "${OT_DOCKERHUB_USER}",
+    "password": "${OT_DOCKERHUB_TOKEN}"
+  },
+  "ghcr.io": {
+    "username": "${ZOT_GITHUB_USER}",
+    "password": "${ZOT_GITHUB_TOKEN}"
+  },
+  "lscr.io": {
+    "username": "${ZOT_LSCR_USER}",
+    "password": "${ZOT_GITHUB_TOKEN}"
+  },
+  "codeberg.org": {
+    "username": "${ZOT_CODEBERG_USER}",
+    "password": "${ZOT_CODEBERG_TOKEN}"
+  }
+}
\ No newline at end of file