diff --git a/continuwuity.hcl b/continuwuity.hcl
index 0080821..2a0ff87 100644
--- a/continuwuity.hcl
+++ b/continuwuity.hcl
@@ -118,11 +118,12 @@ EOF
       }
 
       config {
-        # Mirrored from upstream into registry.i80.dk by the deploy workflow.
-        # Must match IMAGE in .gitea/workflows/deploy.yml.
-        image      = "registry.i80.dk/continuwuity:latest"
+        # Upstream image. TODO: mirror into registry.i80.dk once the namespace + push creds
+        # are sorted (the deploy workflow's mirror step needs REGISTRY_USER/PASSWORD and a valid
+        # path, e.g. registry.i80.dk/gitea/continuwuity — bare registry.i80.dk/continuwuity returns 400).
+        image      = "forgejo.ellis.link/continuwuation/continuwuity:latest"
         ports      = ["http"]
-        force_pull = true # required with :latest — otherwise Nomad reuses the cached image on redeploy
+        force_pull = true # :latest — re-pull on redeploy
       }
 
       resources {