diff --git a/deploy/manydecks/client.yaml b/deploy/manydecks/client.yaml
index 9e0e933..ef2b752 100644
--- a/deploy/manydecks/client.yaml
+++ b/deploy/manydecks/client.yaml
@@ -62,7 +62,7 @@ spec:
     spec:
       containers:
         - name: client
-          image: ghcr.io/lattyware/manydecks/client:latest-release
+          image: registry.git.svc.cluster.local:5000/manycoqdecks-client:latest
           ports:
             - containerPort: 8082
           volumeMounts:
diff --git a/deploy/manydecks/secrets.example.yaml b/deploy/manydecks/secrets.example.yaml
index 4c5e71f..91ce503 100644
--- a/deploy/manydecks/secrets.example.yaml
+++ b/deploy/manydecks/secrets.example.yaml
@@ -25,8 +25,11 @@ stringData:
           secret: "CHANGE_ME_JWT_SECRET",
           algorithm: "HS256",
           expiresIn: "3h",
+          // Local auth: set username and a bcrypt password hash.
+          // Generate hash with: htpasswd -bnBC 12 "" YOUR_PASSWORD | tr -d ':\n' | sed 's/$2y/$2a/'
+          // or in Node: require('bcryptjs').hashSync('YOUR_PASSWORD', 12)
+          username: "CHANGE_ME_USERNAME",
+          password: "CHANGE_ME_BCRYPT_HASH",
         },
-        // Allow login without an account:
-        guest: {},
       },
     }
diff --git a/deploy/manydecks/server.yaml b/deploy/manydecks/server.yaml
index c052c17..f43194e 100644
--- a/deploy/manydecks/server.yaml
+++ b/deploy/manydecks/server.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: server
-          image: ghcr.io/lattyware/manydecks/server:latest-release
+          image: registry.git.svc.cluster.local:5000/manycoqdecks-server:latest
           env:
             - name: NODE_ENV
               value: production