diff --git a/hswaw/capacifier/BUILD.bazel b/hswaw/capacifier/BUILD.bazel
index 8956ae51..93dbe22b 100644
--- a/hswaw/capacifier/BUILD.bazel
+++ b/hswaw/capacifier/BUILD.bazel
@@ -15,6 +15,8 @@ go_library(
 go_binary(
     name = "capacifier",
     embed = [":capacifier_lib"],
+    pure = "on",
+    static = "on",
     visibility = ["//visibility:public"],
 )
 
@@ -40,5 +42,5 @@ container_push(
     image = ":runtime",
     registry = "registry.k0.hswaw.net",
     repository = "q3k/capacifier",
-    tag = "1680390588",
+    tag = "1698514087",
 )
diff --git a/hswaw/capacifier/prod.jsonnet b/hswaw/capacifier/prod.jsonnet
index 7984602c..1f4af02b 100644
--- a/hswaw/capacifier/prod.jsonnet
+++ b/hswaw/capacifier/prod.jsonnet
@@ -8,7 +8,7 @@ local kube = import "../../kube/kube.libsonnet";
         name: 'capacifier',
         namespace: 'capacifier',
         domain: 'capacifier.hackerspace.pl',
-        image: 'registry.k0.hswaw.net/q3k/capacifier:1680390588',
+        image: 'registry.k0.hswaw.net/q3k/capacifier@sha256:fd94b29bf711267235c96e5102ac4024e83e5851869a5e8814b83e76490c00af',
     },
 
     ns: kube.Namespace(cfg.namespace),
@@ -27,7 +27,6 @@ local kube = import "../../kube/kube.libsonnet";
                             },
                             command: [
                                 "/hswaw/capacifier/capacifier",
-                                "-hspki_disable",
                                 "-logtostderr",
                                 "-api_listen", "0.0.0.0:8080",
                                 "-ldap_bind_dn", "$(LDAP_DN)",