diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index c7ee25f..6631c66 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -1,15 +1,16 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - namespace.yaml
-  - configmap.yaml
-  - externalsecret-registry.yaml
-  - deployment.yaml
-  - service.yaml
-  - ingress.yaml
+- namespace.yaml
+- configmap.yaml
+- externalsecret-registry.yaml
+- deployment.yaml
+- service.yaml
+- ingress.yaml
 
 # CI updates newTag to the immutable git-sha via `kustomize edit set image` (see .gitea/workflows/ci.yml).
 # Name is the public HTTPS pull endpoint that k3s uses.
 images:
-  - name: git.7tl-homelab.com/bmr_bluecap/bcs-website
-    newTag: latest
+- name: git.7tl-homelab.com/bmr_bluecap/bcs-website
+  newName: git.7tl-homelab.com/bmr_bluecap/bcs-website
+  newTag: b9f2c72bd47b