diff --git a/apps/k8s01/dns/dns.yaml b/apps/k8s01/dns/dns.yaml
index 9283d0154fada266f178e23149974a3b9fa66a3a..45001becb8d9a05e0af8173ddb710b79b41f1693 100644
--- a/apps/k8s01/dns/dns.yaml
+++ b/apps/k8s01/dns/dns.yaml
@@ -30,8 +30,8 @@ data:
       enable: true
     fqdnOnly:
       enable: true
-    certFile: /etc/pki/dnsproxy/tls.crt
-    keyFile: /etc/pki/dnsproxy/tls.key
+    certFile: /etc/pki/blocky/tls.crt
+    keyFile: /etc/pki/blocky/tls.key
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -50,8 +50,8 @@ spec:
         app: resolver
     spec:
       containers:
-        - name: dnsproxy
-          image: ghcr.io/0xerr0r/blocky:main
+        - name: blocky
+          image: ghcr.io/0xerr0r/blocky:main@sha256:556d13b4c6bc7b51736f3f5764bb695cadfc2fa569a0805eff6550b73690a30b
           args:
             - --config
             - /etc/blocky/config.yaml
@@ -93,7 +93,7 @@ spec:
               memory: 256Mi
           volumeMounts:
             - name: tls-secret
-              mountPath: "/etc/pki/dnsproxy"
+              mountPath: "/etc/pki/blocky"
               readOnly: true
             - name: config
               mountPath: "/etc/blocky/"