diff --git a/apps/base/dhcp-system/cr/keaapi.yaml b/apps/base/dhcp-system/cr/keaapi.yaml
index 2d086af..d2c7b7a 100644
--- a/apps/base/dhcp-system/cr/keaapi.yaml
+++ b/apps/base/dhcp-system/cr/keaapi.yaml
@@ -11,7 +11,7 @@ metadata:
     argocd.argoproj.io/sync-wave: "1"
 spec:
   replicas: 1
-  image: git.unkin.net/unkin/kea-api:v0.1.0
+  image: git.unkin.net/unkin/kea-api:v0.1.1
   tokenSecretName: kea-api-token
   service:
     type: ClusterIP
diff --git a/apps/base/dhcp-system/cr/keacluster.yaml b/apps/base/dhcp-system/cr/keacluster.yaml
index 3ea207b..3b1ce73 100644
--- a/apps/base/dhcp-system/cr/keacluster.yaml
+++ b/apps/base/dhcp-system/cr/keacluster.yaml
@@ -11,15 +11,13 @@ metadata:
     argocd.argoproj.io/sync-wave: "1"
 spec:
   replicas: 2
-  image: git.unkin.net/unkin/kea:v0.1.0
+  image: git.unkin.net/unkin/kea:v0.1.1
   domainName: main.unkin.net
   defaultLeaseTime: 1200
   maxLeaseTime: 86400
-  ntpServers:
-    - 0.au.pool.ntp.org
-    - 1.au.pool.ntp.org
-    - 2.au.pool.ntp.org
-    - 3.au.pool.ntp.org
+  # No ntpServers: DHCP option 42 (ntp-servers) carries IPv4 addresses only, so
+  # the rotating AU pool.ntp.org hostnames cannot be delivered this way (kea
+  # rejects them at config load). Add concrete NTP server IPs here if needed.
   ha:
     mode: hot-standby
   service:
diff --git a/apps/base/dhcp-system/deployment.yaml b/apps/base/dhcp-system/deployment.yaml
index 041879c..2f75c40 100644
--- a/apps/base/dhcp-system/deployment.yaml
+++ b/apps/base/dhcp-system/deployment.yaml
@@ -21,7 +21,7 @@ spec:
         runAsNonRoot: true
       containers:
         - name: operator
-          image: git.unkin.net/unkin/kea-operator:v0.1.0
+          image: git.unkin.net/unkin/kea-operator:v0.1.1
           args:
             - --metrics-bind-address=:8080
             - --health-probe-bind-address=:8081