diff --git a/k8s/apps/k8s-secrets/deployment.yaml b/k8s/apps/k8s-secrets/deployment.yaml
index 355476d..f112b95 100644
--- a/k8s/apps/k8s-secrets/deployment.yaml
+++ b/k8s/apps/k8s-secrets/deployment.yaml
@@ -19,8 +19,8 @@ spec:
         kubernetes.io/os: linux
       containers:
       - name: secret-reader
-        image: ultradesu/k8s-secrets:latest
-        imagePullPolicy: IfNotPresent
+        image: ultradesu/k8s-secrets:0.1.1
+        imagePullPolicy: Always
         args:
           - "--secrets"
           - "openai-creds"
diff --git a/k8s/core/authentik/kustomization.yaml b/k8s/core/authentik/kustomization.yaml
index 8d146ff..67ee653 100644
--- a/k8s/core/authentik/kustomization.yaml
+++ b/k8s/core/authentik/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: authentik
     repo: https://charts.goauthentik.io
-    version: 2025.2.3
+    version: 2025.8.1
     releaseName: authentik
     namespace: authentik
     valuesFile: values.yaml
diff --git a/k8s/core/authentik/values.yaml b/k8s/core/authentik/values.yaml
index c6c428f..3b185b2 100644
--- a/k8s/core/authentik/values.yaml
+++ b/k8s/core/authentik/values.yaml
@@ -15,6 +15,8 @@ worker:
   envFrom:
     - secretRef:
         name: authentik-creds
+  #nodeSelector:
+  #  kubernetes.io/hostname: home.homenet
 server:
   envFrom:
     - secretRef: