diff --git a/.gitea/workflows/pipeline.yml b/.gitea/workflows/pipeline.yml
index 10d014a..fb51017 100644
--- a/.gitea/workflows/pipeline.yml
+++ b/.gitea/workflows/pipeline.yml
@@ -47,23 +47,27 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Build Docker image
-        run: docker build -t gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }} .
+        run: docker build -t gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }} .
 
       - name: Trivy scan
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }}
+          image-ref: gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }}
           severity: CRITICAL,HIGH
           exit-code: "1" # laat de pipeline falen bij kritieke kwetsbaarheden
+          # gitea.token is geen geldig GitHub-token; leeg laten zodat setup-trivy
+          # de aquasecurity/trivy-repo anoniem kan clonen in plaats van een
+          # ongeldige Authorization-header naar github.com te sturen.
+          token-setup-trivy: ""
 
       - name: Login bij Gitea-registry
-        run: echo "${{ secrets.GLUCOSE_TOKEN }}" | docker login gitea.zb.local -u willem --password-stdin
+        run: echo "${{ secrets.GLUCOSE_TOKEN }}" | docker login gitea.zb-kw.duckdns.org -u willemjan --password-stdin
 
       - name: Tag en push
         run: |
-          docker tag gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }} gitea.zb.local/willem/glucose-dashboard:latest
-          docker push gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }}
-          docker push gitea.zb.local/willem/glucose-dashboard:latest
+          docker tag gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }} gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
+          docker push gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }}
+          docker push gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
 
   # ---------------------------------------------------------------------
   # 4. Deploy — SSH naar de LXC en herstart met de nieuwe image
diff --git a/docker-compose.yml b/docker-compose.yml
index d840770..073ffd1 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   glucose-dashboard:
-    image: gitea.zb.local/willem/glucose-dashboard:latest
+    image: gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
     container_name: glucose-dashboard
     restart: unless-stopped
     ports: