diff --git a/services/pegasus/deployment.yaml b/services/pegasus/deployment.yaml
index 3a10dfe..bfc2779 100644
--- a/services/pegasus/deployment.yaml
+++ b/services/pegasus/deployment.yaml
@@ -11,9 +11,9 @@ spec:
     rollingUpdate:
       maxSurge: 0
       maxUnavailable: 1
-  selector: { matchLabels: { app: pegasus } }
+  selector: {matchLabels: {app: pegasus}}
   template:
-    metadata: { labels: { app: pegasus } }
+    metadata: {labels: {app: pegasus}}
     spec:
       nodeSelector:
         kubernetes.io/arch: amd64
@@ -52,48 +52,47 @@ spec:
             runAsNonRoot: false
             allowPrivilegeEscalation: false
           volumeMounts:
-            - { name: media, mountPath: /media }
-
+            - {name: media, mountPath: /media}
       containers:
         - name: pegasus
-          image: registry.bstein.dev/streaming/pegasus:1.2.32 # {"$imagepolicy": "jellyfin:pegasus"}
+          image: registry.bstein.dev/streaming/pegasus-vault:1.2.32 # {"$imagepolicy": "jellyfin:pegasus"}
           imagePullPolicy: Always
           command: ["/pegasus"]
           env:
             - name: PEGASUS_MEDIA_ROOT
-              valueFrom: { configMapKeyRef: { name: pegasus-config, key: PEGASUS_MEDIA_ROOT } }
+              valueFrom: {configMapKeyRef: {name: pegasus-config, key: PEGASUS_MEDIA_ROOT}}
             - name: PEGASUS_BIND
-              valueFrom: { configMapKeyRef: { name: pegasus-config, key: PEGASUS_BIND } }
+              valueFrom: {configMapKeyRef: {name: pegasus-config, key: PEGASUS_BIND}}
             - name: PEGASUS_USER_MAP_FILE
               value: "/config/user-map.yaml"
             - name: PEGASUS_SESSION_KEY
-              valueFrom: { secretKeyRef: { name: pegasus-secrets, key: PEGASUS_SESSION_KEY } }
+              valueFrom: {secretKeyRef: {name: pegasus-secrets, key: PEGASUS_SESSION_KEY}}
             - name: JELLYFIN_URL
-              valueFrom: { secretKeyRef: { name: pegasus-secrets, key: JELLYFIN_URL } }
+              valueFrom: {secretKeyRef: {name: pegasus-secrets, key: JELLYFIN_URL}}
             - name: JELLYFIN_API_KEY
-              valueFrom: { secretKeyRef: { name: pegasus-secrets, key: JELLYFIN_API_KEY } }
+              valueFrom: {secretKeyRef: {name: pegasus-secrets, key: JELLYFIN_API_KEY}}
             - name: PEGASUS_DEBUG
               value: "1"
             - name: PEGASUS_DRY_RUN
               value: "0"
-          ports: [{ name: http, containerPort: 8080 }]
+          ports: [{name: http, containerPort: 8080}]
           readinessProbe:
-            httpGet: { path: /healthz, port: http }
+            httpGet: {path: /healthz, port: http}
             initialDelaySeconds: 2
             periodSeconds: 5
             timeoutSeconds: 1
           livenessProbe:
-            httpGet: { path: /healthz, port: http }
+            httpGet: {path: /healthz, port: http}
             initialDelaySeconds: 10
             periodSeconds: 10
             timeoutSeconds: 2
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
-            capabilities: { drop: ["ALL"] }
+            capabilities: {drop: ["ALL"]}
           resources:
-            requests: { cpu: 100m, memory: 256Mi }
-            limits:   { cpu: 1000m, memory: 1Gi }
+            requests: {cpu: 100m, memory: 256Mi}
+            limits: {cpu: 1000m, memory: 1Gi}
           volumeMounts:
             - name: media
               mountPath: /media
@@ -107,6 +106,6 @@ spec:
           persistentVolumeClaim:
             claimName: jellyfin-media-asteria-new
         - name: config
-          configMap: { name: pegasus-user-map }
+          configMap: {name: pegasus-user-map}
         - name: tmp
           emptyDir: {}