diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 804fc5e..45e953e 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -2,7 +2,7 @@
 // README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu
 {
 	"name": "git-limbosolutions-com-dev",
-	"image": "git.limbosolutions.com/mylimbo/devcontainers/devops:latest",
+	"image": "oci.limbosolutions.com/public/devcontainers/devops:latest",
 	"runArgs": ["--hostname=git-limbosolutions-com-dev-container"],
 	"remoteUser": "vscode",
 	"mounts": [
diff --git a/deploy/app/helm-values.yaml b/deploy/app/helm-values.yaml
index f956d59..4b8013c 100644
--- a/deploy/app/helm-values.yaml
+++ b/deploy/app/helm-values.yaml
@@ -28,7 +28,7 @@ valkey:
   architecture: standalone
   global:
     valkey:
-      password: "???"
+      password: "" # !!! set on values.private.yaml
 
   # Disable NetworkPolicy creation in the Bitnami valkey subchart.
   # This deployment runs inside a controlled namespace where network
@@ -98,10 +98,10 @@ postgresql:
   global:
     postgresql:
       auth:
-        postgresPassword: "???"
-        password: "???"
-        database: "???"
-        username: "???"
+        postgresPassword: ""  # !!! set on values.private.yaml
+        password: ""  # !!! set on values.private.yaml
+        database: ""  # !!! set on values.private.yaml
+        username: ""  # !!! set on values.private.yaml
 
   serviceAccount:
     # serviceAccount resources are owned and managed by the Infrastructure layer.