diff --git a/bffsrv.Dockerfile b/bffsrv.Dockerfile
index c8f7b044..81d3de87 100644
--- a/bffsrv.Dockerfile
+++ b/bffsrv.Dockerfile
@@ -1,5 +1,5 @@
 ## Build layer
-FROM golang:1.21.0-bookworm AS build
+FROM golang:1.21.0-bullseye AS build
 
 WORKDIR /app
 
@@ -11,7 +11,7 @@ COPY . ./
 RUN go build -o /app/bffsrv ./cmd/bffsrv
 
 ## Deploy layer
-FROM gcr.io/distroless/base-debian10
+FROM gcr.io/distroless/base-debian11
 
 COPY --from=build /app/bffsrv /app/bffsrv
 
diff --git a/infra/k8s/api.yaml b/infra/k8s/api.yaml
index 1bc3843c..19f90674 100644
--- a/infra/k8s/api.yaml
+++ b/infra/k8s/api.yaml
@@ -29,7 +29,7 @@ spec:
       serviceAccountName: bff-api
       containers:
         - name: api
-          image: ghcr.io/strideynet/bsky-furry-feed/bffsrv:1f4489dcf48bd2c8d6579b7fc6e0202ea4dc8efb
+          image: ghcr.io/strideynet/bsky-furry-feed/bffsrv:c9fb596df0e7a2d9a48d577b31385d757692b237
           env:
             - name: ENV
               value: production
diff --git a/infra/k8s/ingester.yaml b/infra/k8s/ingester.yaml
index b362a962..6381bde3 100644
--- a/infra/k8s/ingester.yaml
+++ b/infra/k8s/ingester.yaml
@@ -29,7 +29,7 @@ spec:
       serviceAccountName: bff-ingester
       containers:
       - name: ingester
-        image: ghcr.io/strideynet/bsky-furry-feed/bffsrv:1f4489dcf48bd2c8d6579b7fc6e0202ea4dc8efb
+        image: ghcr.io/strideynet/bsky-furry-feed/bffsrv:c9fb596df0e7a2d9a48d577b31385d757692b237
         env:
           - name: ENV
             value: production