diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 3b1aa6e..9971151 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -14,6 +14,8 @@ env:
   TF_VAR_hcloud_token: ${{ secrets.HCLOUD_TOKEN }}
   TF_VAR_s3_access_key: ${{ secrets.S3_ACCESS_KEY }}
   TF_VAR_s3_secret_key: ${{ secrets.S3_SECRET_KEY }}
+  TF_VAR_s3_endpoint: ${{ secrets.S3_ENDPOINT }}
+  TF_VAR_s3_bucket: ${{ secrets.S3_BUCKET }}
 
 jobs:
   terraform:
diff --git a/.gitea/workflows/destroy.yml b/.gitea/workflows/destroy.yml
index be2927a..c1e2475 100644
--- a/.gitea/workflows/destroy.yml
+++ b/.gitea/workflows/destroy.yml
@@ -10,6 +10,11 @@ on:
 
 env:
   TF_VERSION: "1.7.0"
+  TF_VAR_hcloud_token: ${{ secrets.HCLOUD_TOKEN }}
+  TF_VAR_s3_access_key: ${{ secrets.S3_ACCESS_KEY }}
+  TF_VAR_s3_secret_key: ${{ secrets.S3_SECRET_KEY }}
+  TF_VAR_s3_endpoint: ${{ secrets.S3_ENDPOINT }}
+  TF_VAR_s3_bucket: ${{ secrets.S3_BUCKET }}
 
 jobs:
   destroy:
diff --git a/terraform/backend.hcl b/terraform/backend.hcl
new file mode 100644
index 0000000..619c8e8
--- /dev/null
+++ b/terraform/backend.hcl
@@ -0,0 +1,4 @@
+endpoint                    = "https://s3.eu-central-003.backblazeb2.com"
+bucket                      = "k8s-terraform-state"
+region                      = "auto"
+skip_requesting_account_id  = true