diff --git a/.forgejo/workflows/terraform-apply.yml b/.forgejo/workflows/terraform-apply.yml
index 70cee76..1e683f9 100644
--- a/.forgejo/workflows/terraform-apply.yml
+++ b/.forgejo/workflows/terraform-apply.yml
@@ -87,9 +87,10 @@ jobs:
           TF_SKIP_REGION_VALIDATION: "true"
           TF_SKIP_REQUESTING_ACCOUNT_ID: "true"
         run: |
-          # Override S3 endpoint to use internal cluster DNS (storage ns)
-          export TF_CLI_ARGS_init="-backend-config=endpoints.s3=http://minio.storage.svc.cluster.local:9000"
-          terraform init
+          terraform init \
+            -backend-config="endpoint=http://minio.storage.svc.cluster.local:9000" \
+            -backend-config="access_key=$AWS_ACCESS_KEY_ID" \
+            -backend-config="secret_key=$AWS_SECRET_ACCESS_KEY"
 
       - name: Pull Terraform State
         working-directory: terraform
diff --git a/terraform/state.tf b/terraform/state.tf
index b83ef23..767217b 100644
--- a/terraform/state.tf
+++ b/terraform/state.tf
@@ -4,9 +4,7 @@ terraform {
     bucket                      = "terraform-state"
     key                         = "homelab/terraform.tfstate"
     region                      = "us-east-1"
-    endpoints = {
-      s3 = "https://minio-api.riotpiao.homelab.com"
-    }
+    endpoint                    = "https://minio-api.riotpiao.homelab.com"
     profile                     = "minio"
     skip_credentials_validation = true
     skip_requesting_account_id  = true