diff --git a/hack/dockerpush.sh b/hack/dockerpush.sh
index 6273275122..e8a881ad35 100755
--- a/hack/dockerpush.sh
+++ b/hack/dockerpush.sh
@@ -8,4 +8,7 @@ set -euo pipefail
 
 ./hack/populate_secrets.sh
 
-exec "$(nix-build --no-out-link ./docker-images.nix)"
+export AWS_ACCESS_KEY_ID="$(nix eval --raw -f ./ ops.secrets.nixCache.AWS_ACCESS_KEY_ID)"
+export AWS_SECRET_ACCESS_KEY="$(nix eval --raw -f ./ ops.secrets.nixCache.AWS_SECRET_ACCESS_KEY)"
+
+exec "$(nix-build --substituters "https://cache.nixos.org s3://lukegb-nix-cache?endpoint=storage.googleapis.com&trusted=1" --no-out-link ./docker-images.nix)"