diff --git a/authserver/k8s/nginx.yaml b/authserver/k8s/nginx.yaml
index fae0081..cc5c601 100644
--- a/authserver/k8s/nginx.yaml
+++ b/authserver/k8s/nginx.yaml
@@ -105,6 +105,8 @@ spec:
           ports:
             - containerPort: 80
           env:
+            - name: NGINX_ENVSUBST_FILTER
+              value: "^(AUTHSERVER_BACKEND_UPSTREAM|CLOUDDM_UPSTREAM|CLOUDDM_PUBLIC_HOST)$"
             - name: AUTHSERVER_BACKEND_UPSTREAM
               value: http://authserver-backend:8083
             - name: CLOUDDM_UPSTREAM