diff --git a/clair-config.yml b/clair-config.yml
new file mode 100644
index 000000000..f8c4ea511
--- /dev/null
+++ b/clair-config.yml
@@ -0,0 +1,11 @@
+General:
+  clair_url: 'URL'
+  verify: false
+Plugins:
+  Docker:
+    class: paclair.plugins.docker_plugin.DockerPlugin
+    registries:
+      REGISTRY:
+        auth:
+          - "USERNAME"
+          - "PASSWORD"
diff --git a/deploy/kube-app.yml b/deploy/kube-app.yml
index 29b344fc3..69f0dfa91 100644
--- a/deploy/kube-app.yml
+++ b/deploy/kube-app.yml
@@ -5,6 +5,7 @@ metadata:
   name: demo-chat
   labels:
     service: demo-chat
+    revision: {{CF_REVISION}}
 spec:
   replicas: 1
   template:
@@ -12,8 +13,10 @@ spec:
       labels:
         service: demo-chat
     spec:
+      imagePullSecrets:
+        - name: {{PULL_SECRET}}
       containers:
-      - image: ${{build_step}}
+      - image: r.cfcr.io/{{CF_REPO_OWNER}}/{{CF_REPO_NAME}}:{{CF_SHORT_REVISION}}
         name: app
         imagePullPolicy: Always
         ports:
diff --git a/templates/login.html b/templates/login.html
index 38e76950d..cd26bdbbb 100644
--- a/templates/login.html
+++ b/templates/login.html
@@ -5,7 +5,7 @@
 <% block class %>lcb-login animated fadeIn<% endblock %>
 
 <% block attributes %>
-    style="background-image: url('./media/img/photos/<$ photo $>');"
+    style="background-image: url('./whoops/media/img/photos/<$ photo $>');"
 <% endblock %>
 
 <% block js %>