diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 26e2a00..effd894 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,11 +48,10 @@ nfpms:
     file_name_template: "{{ .ConventionalFileName }}"
     vendor: GnousEU
     homepage: https://git.gnous.eu/plakken/
-    maintainer: Ada <ada@gnous.eu>
+    maintainer: GnousEU <contact@gnous.eu>
     description: A light paste server
     license: AGPLv3
     formats:
-      - apk
       - deb
       - rpm
       - archlinux
diff --git a/.woodpecker/release.yaml b/.woodpecker/release.yaml
index 9c36d4b..da1e695 100644
--- a/.woodpecker/release.yaml
+++ b/.woodpecker/release.yaml
@@ -1,24 +1,8 @@
 steps:
-  - name: Build
-    image: golang:1.22
+  - name: release
+    image: goreleaser/goreleaser
     commands:
-      - go mod download
-      - CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-w -s" -o plakken-linux-amd64 # Enable static binary, target Linux, remove debug information and strip binary
-      - CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags "-w -s" -o plakken-linux-arm64
-      - CGO_ENABLED=0 GOOS=linux GOARCH=arm go build -ldflags "-w -s" -o plakken-linux-arm
-      - CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-w -s" -o plakken-windows-amd64.exe
-      - CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags "-w -s" -o plakken-windows-arm64.exe
-      - CGO_ENABLED=0 GOOS=linux GOARCH=arm go build -ldflags "-w -s" -o plakken-windows-arm.exe
+      - goreleaser release
+    secrets: [ release_token ]
     when:
       event: tag
-  - name: Release
-    image: woodpeckerci/plugin-gitea-release
-    settings:
-      base_url: https://git.gnous.eu
-      files:
-        - "plakken*"
-      api_key:
-        from_secret: release_token
-      target: main
-    when:
-      event: tag
\ No newline at end of file
diff --git a/plakken.service b/plakken.service
index 8e677e5..6427e10 100644
--- a/plakken.service
+++ b/plakken.service
@@ -12,9 +12,9 @@ ExecStart=/usr/bin/plakken
 
 EnvironmentFile=/etc/plakken/env
 
-NoNewPrivileges=yes
 ProtectSystem=strict
 ProtectHome=true
+NoNewPrivileges=yes
 RestrictNamespaces=true
 PrivateTmp=true
 PrivateDevices=true