diff --git a/kubernetes/deployment.yaml b/kubernetes/deployment.yaml
index b0ce7a4..cc750ba 100644
--- a/kubernetes/deployment.yaml
+++ b/kubernetes/deployment.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: mail-classifier
-          image: git.apps.sukany.cz/martin/mail-clasifier:latest
+          image: git.apps.sukany.cz/martin/mail-clasifier@sha256:8d2f109f6b67625cfe4c4728c384d941233109ec83da0c15798ec57a2bee95e0
           imagePullPolicy: Always
           env:
             - name: IMAP_HOST
@@ -41,7 +41,7 @@ spec:
             # Pokud používáš OpenWebUI (OpenRouter connection),
             # v k8s máš service "open-webui-service" na portu 8080:
             - name: OPENWEBUI_URL
-              value: "http://open-webui-service.open-webui.svc:8080"
+              value: "https://ai.apps.sukany.cz"
 
             # User API token / service token z OpenWebUI,
             # ulož ho do secretu mail-classifier-secret pod klíčem "openwebui_api_key"