diff --git a/ansible/deploy.yml b/ansible/deploy.yml
index 1c813dd..83166c4 100644
--- a/ansible/deploy.yml
+++ b/ansible/deploy.yml
@@ -3,8 +3,8 @@
   become: true
 
   roles:
-    - ansistrano.deploy
     - drupal-settings
+    - ansistrano.deploy
 
   vars_files:
     - vars/vault.yml
diff --git a/ansible/deploy/after-update-code.yml b/ansible/deploy/after-update-code.yml
index 6133fba..bd97d4e 100644
--- a/ansible/deploy/after-update-code.yml
+++ b/ansible/deploy/after-update-code.yml
@@ -1,4 +1,21 @@
 ---
+- name: Remove settings.php
+  file:
+    path: '{{ ansistrano_release_path.stdout }}/web/sites/{{ item.1.name|default("default")}}/settings.php'
+    state: absent
+  with_subelements:
+    - '{{ drupal_settings }}'
+    - sites
+
+- name: Link settings.php
+  file:
+    src: '/tmp/app/sites/{{ item.1.name|default("default")}}/settings.php'
+    dest: '{{ ansistrano_release_path.stdout }}/web/sites/{{ item.1.name|default("default")}}/settings.php'
+    state: link
+  with_subelements:
+    - '{{ drupal_settings }}'
+    - sites
+
 - name: Install Composer dependencies
   composer:
     command: install
diff --git a/ansible/vars/vars.yml b/ansible/vars/vars.yml
index 6c59dbe..315a313 100644
--- a/ansible/vars/vars.yml
+++ b/ansible/vars/vars.yml
@@ -32,7 +32,7 @@ app_db_user: "{{ vault_app_db_user }}"
 app_hash_salt: "{{ vault_app_hash_salt }}"
 
 drupal_settings:
-  - drupal_root: '{{ app_project_docroot }}'
+  - drupal_root: /tmp/app
     sites:
       - name: default
         settings: