diff --git a/.drone.jsonnet b/.drone.jsonnet
index 2dfd0d5..5a2df98 100644
--- a/.drone.jsonnet
+++ b/.drone.jsonnet
@@ -18,6 +18,7 @@ local PythonVersion(pyversion='3.5') = {
 
 local PipelineLint = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'lint',
   platform: {
     os: 'linux',
@@ -44,6 +45,7 @@ local PipelineLint = {
 
 local PipelineTest = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'test',
   platform: {
     os: 'linux',
@@ -83,6 +85,7 @@ local PipelineTest = {
 
 local PipelineSecurity = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'security',
   platform: {
     os: 'linux',
@@ -112,6 +115,7 @@ local PipelineSecurity = {
 
 local PipelineBuildPackage = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'build-package',
   platform: {
     os: 'linux',
@@ -173,6 +177,7 @@ local PipelineBuildPackage = {
 
 local PipelineBuildContainer(arch='amd64') = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'build-container-' + arch,
   platform: {
     os: 'linux',
@@ -189,8 +194,9 @@ local PipelineBuildContainer(arch='amd64') = {
     },
     {
       name: 'dryrun',
-      image: 'plugins/docker:18-linux-' + arch,
+      image: 'plugins/docker:19',
       settings: {
+        config: { from_secret: 'docker_config' },
         dry_run: true,
         dockerfile: 'docker/Dockerfile',
         repo: 'thegeeklab/${DRONE_REPO_NAME}',
@@ -204,8 +210,9 @@ local PipelineBuildContainer(arch='amd64') = {
     },
     {
       name: 'publish-dockerhub',
-      image: 'plugins/docker:18-linux-' + arch,
+      image: 'plugins/docker:19',
       settings: {
+        config: { from_secret: 'docker_config' },
         auto_tag: true,
         auto_tag_suffix: arch,
         dockerfile: 'docker/Dockerfile',
@@ -220,8 +227,9 @@ local PipelineBuildContainer(arch='amd64') = {
     },
     {
       name: 'publish-quay',
-      image: 'plugins/docker:18-linux-' + arch,
+      image: 'plugins/docker:19',
       settings: {
+        config: { from_secret: 'docker_config' },
         auto_tag: true,
         auto_tag_suffix: arch,
         dockerfile: 'docker/Dockerfile',
@@ -246,6 +254,7 @@ local PipelineBuildContainer(arch='amd64') = {
 
 local PipelineDocs = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'docs',
   platform: {
     os: 'linux',
@@ -354,6 +363,7 @@ local PipelineDocs = {
 
 local PipelineNotifications = {
   kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
   name: 'notifications',
   platform: {
     os: 'linux',
diff --git a/.drone.yml b/.drone.yml
index fdb7749..05ed7c4 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -16,6 +16,9 @@ steps:
   environment:
     PY_COLORS: 1
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -98,6 +101,9 @@ steps:
   - python38-pytest
   - python39-pytest
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -125,6 +131,9 @@ steps:
   environment:
     PY_COLORS: 1
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -183,6 +192,9 @@ steps:
     ref:
     - refs/tags/**
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -208,8 +220,10 @@ steps:
   - poetry build
 
 - name: dryrun
-  image: plugins/docker:18-linux-amd64
+  image: plugins/docker:19
   settings:
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     dry_run: true
     password:
@@ -224,10 +238,12 @@ steps:
   - build
 
 - name: publish-dockerhub
-  image: plugins/docker:18-linux-amd64
+  image: plugins/docker:19
   settings:
     auto_tag: true
     auto_tag_suffix: amd64
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     password:
       from_secret: docker_password
@@ -242,10 +258,12 @@ steps:
   - dryrun
 
 - name: publish-quay
-  image: plugins/docker:18-linux-amd64
+  image: plugins/docker:19
   settings:
     auto_tag: true
     auto_tag_suffix: amd64
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     password:
       from_secret: quay_password
@@ -260,6 +278,9 @@ steps:
   depends_on:
   - dryrun
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -285,8 +306,10 @@ steps:
   - poetry build
 
 - name: dryrun
-  image: plugins/docker:18-linux-arm64
+  image: plugins/docker:19
   settings:
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     dry_run: true
     password:
@@ -301,10 +324,12 @@ steps:
   - build
 
 - name: publish-dockerhub
-  image: plugins/docker:18-linux-arm64
+  image: plugins/docker:19
   settings:
     auto_tag: true
     auto_tag_suffix: arm64
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     password:
       from_secret: docker_password
@@ -319,10 +344,12 @@ steps:
   - dryrun
 
 - name: publish-quay
-  image: plugins/docker:18-linux-arm64
+  image: plugins/docker:19
   settings:
     auto_tag: true
     auto_tag_suffix: arm64
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     password:
       from_secret: quay_password
@@ -337,6 +364,9 @@ steps:
   depends_on:
   - dryrun
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -362,8 +392,10 @@ steps:
   - poetry build
 
 - name: dryrun
-  image: plugins/docker:18-linux-arm
+  image: plugins/docker:19
   settings:
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     dry_run: true
     password:
@@ -378,10 +410,12 @@ steps:
   - build
 
 - name: publish-dockerhub
-  image: plugins/docker:18-linux-arm
+  image: plugins/docker:19
   settings:
     auto_tag: true
     auto_tag_suffix: arm
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     password:
       from_secret: docker_password
@@ -396,10 +430,12 @@ steps:
   - dryrun
 
 - name: publish-quay
-  image: plugins/docker:18-linux-arm
+  image: plugins/docker:19
   settings:
     auto_tag: true
     auto_tag_suffix: arm
+    config:
+      from_secret: docker_config
     dockerfile: docker/Dockerfile
     password:
       from_secret: quay_password
@@ -414,6 +450,9 @@ steps:
   depends_on:
   - dryrun
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -503,6 +542,9 @@ steps:
     - refs/heads/master
     - refs/tags/**
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -594,6 +636,9 @@ steps:
     - success
     - failure
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/master
@@ -607,6 +652,6 @@ depends_on:
 
 ---
 kind: signature
-hmac: fd70b6b2c63c8307c8653b9ca6bd264501e5237ffb22bcf0883f9eb327ee6f89
+hmac: 75497b938ca5a161c125b510a28ddbf446bfa69bec13203b27af6dd4426f2902
 
 ...