diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
index 6dba082..d5e16f3 100644
--- a/.woodpecker/build.yaml
+++ b/.woodpecker/build.yaml
@@ -5,5 +5,5 @@ steps:
   - name: docker-build
     image: woodpeckerci/plugin-docker-buildx
     settings:
-      repo: git.unkin.net/unkin/encapi
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/encapi
       dry_run: true
diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml
index 3a8c612..7f03b6b 100644
--- a/.woodpecker/docker.yaml
+++ b/.woodpecker/docker.yaml
@@ -6,13 +6,10 @@ steps:
   - name: docker-encapi
     image: woodpeckerci/plugin-docker-buildx
     settings:
-      registry: git.unkin.net
-      repo: git.unkin.net/unkin/encapi
+      registry: artifactapi.k8s.syd1.au.unkin.net
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/encapi
       build_args:
         VERSION: ${CI_COMMIT_TAG}
-      username: droneci
-      password:
-        from_secret: DRONECI_PASSWORD
       tags:
         - ${CI_COMMIT_TAG}
         - latest
diff --git a/README.md b/README.md
index 1c23949..9e92113 100644
--- a/README.md
+++ b/README.md
@@ -93,7 +93,7 @@ make test-short               # skip container-backed DB tests
 ## Releases
 
 - **`encapi` server image** — tagging `vX.Y.Z` builds and pushes
-  `git.unkin.net/unkin/encapi:{tag,latest}` (distroless).
+  `artifactapi.k8s.syd1.au.unkin.net/docker-internal/encapi:{tag,latest}` (distroless).
 - **`encapi-cli` RPM** — the same tag builds an RPM (nfpm) and publishes it to
   the ArtifactAPI `rpm-internal` repo. Installs `encapi-cli`, the `encapi-enc`
   Puppet wrapper, and `/etc/encapi/enc.conf`.