diff --git a/deployment/bare_metal/.env.dist b/deployment/bare_metal/.env.dist
index feada1d86..9eaa2a0ed 100644
--- a/deployment/bare_metal/.env.dist
+++ b/deployment/bare_metal/.env.dist
@@ -11,6 +11,10 @@ NGINX_SSL_DHPARAM=/etc/letsencrypt/ssl-dhparams.pem
 NGINX_SSL_INCLUDE=/etc/letsencrypt/options-ssl-nginx.conf
 NGINX_UPDATE_PAGE_ROOT=/home/gradido/gradido/deployment/bare_metal/nginx/update-page
 
+# webhook
+WEBHOOK_GITHUB_SECRET=secret
+WEBHOOK_GITHUB_BRANCH=master
+
 # backend
 EMAIL=true
 EMAIL_USERNAME=peter@lustig.de
diff --git a/deployment/bare_metal/webhook/hooks.json.template b/deployment/bare_metal/webhook/hooks.json.template
index c6915d5b9..7f6a76fd5 100644
--- a/deployment/bare_metal/webhook/hooks.json.template
+++ b/deployment/bare_metal/webhook/hooks.json.template
@@ -5,7 +5,7 @@
       "pass-arguments-to-command": [
         {
           "source": "string",
-          "name": "master"
+          "name": "$WEBHOOK_GITHUB_BRANCH"
         }
       ],
       "command-working-directory": "/home/gradido/gradido/deployment/bare_metal",
@@ -14,7 +14,7 @@
           {
             "match": {
               "type": "payload-hash-sha1",
-              "secret": "secret",
+              "secret": "$WEBHOOK_GITHUB_SECRET",
               "parameter": {
                 "source": "header",
                 "name": "X-Hub-Signature"
@@ -24,7 +24,7 @@
           {
             "match": {
               "type": "value",
-              "value": "refs/heads/master",
+              "value": "refs/heads/$WEBHOOK_GITHUB_BRANCH",
               "parameter": {
                 "source": "payload",
                 "name": "ref"