diff --git a/.gitignore b/.gitignore
index be36d87b7c7a2f931dd86eb78284335693b9a3a5..da64de3f0358b16ce1f016460a3f3c2abbd9d85c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,3 @@
-.env
-
 secrets
 
 aws.xml
@@ -186,11 +184,10 @@ web_modules/
 .yarn-integrity
 
 # dotenv environment variable files
-.env
-.env.development.local
-.env.test.local
-.env.production.local
-.env.local
+.env*
+.flaskenv*
+!.env.project
+!.env.vault
 
 # parcel-bundler cache (https://parceljs.org/)
 .cache
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 9b99865292350fb8b274c8771820fa8784a565d8..353272291883896608e06fb69b5069064aea0aac 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,22 +3,29 @@ variables:
     GIT_SUBMODULE_FORCE_HTTPS: "true"
     SECURE_FILES_DOWNLOAD_PATH: './'
 
+
 stages:
     - deploy
 
+
 deploy:
     image: docker:latest
     stage: deploy
     tags:
         - dojo_backend_deployment
     script:
-        - API_VERSION=$(jq -r .version API/ExpressAPI/package.json)
-        # Download secure files
-        - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
-        # Prepare environment
-        - mv env_$API_VERSION .env
-        - cp .env API/.env
+        - cd "API/ExpressAPI"
+
+        # Get API version
+        - API_VERSION=$(jq -r .version package.json)
+
+        # Get env file
+        - |
+            echo "Decrypt production env vars" # Do not remove this line because it is used for hide the production key from the ci/cd console
+            npx dotenv-vault local decrypt "${DOTENV_PROD_KEY}" > ../.env
+
         # Deploy
+        - cd ../../
         - ./infra --run
-    only:
-        - main
\ No newline at end of file
+    rules:
+        - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
\ No newline at end of file
diff --git a/API b/API
index 7884e53cc8bdeb0575323467b34d7123af842eee..99efe8d7a6f3efd394fd7a5aef61f77232ed39c5 160000
--- a/API
+++ b/API
@@ -1 +1 @@
-Subproject commit 7884e53cc8bdeb0575323467b34d7123af842eee
+Subproject commit 99efe8d7a6f3efd394fd7a5aef61f77232ed39c5