diff --git a/entrypoint.sh b/entrypoint.sh
index aa637ba..c4420a8 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -8,9 +8,7 @@ echo "$SSH_HOST_KEY" > "$HOME/.ssh/known_hosts"
 export GIT_SSH_COMMAND="ssh -i ""$SSH_PRIVATE_KEY"""
 
 
-# update swarm-nat
-# use docker.io/lubiland/swarm-nat until registry.lubiland.de allows public access
-docker pull docker.io/lubiland/swarm-nat
+docker pull gitea.lubiland.de/lubiland/swarm-nat
 
 while :; do
     # check if the git repository already got cloned
@@ -23,9 +21,7 @@ while :; do
     fi
 
     # run the actual swarm-nat docker container
-    # use docker instead of running it directly to use --cap-add
-    # use docker.io/lubiland/swarm-nat until registry.lubiland.de allows public access
-    docker run --rm --net=host --cap-add=NET_ADMIN --volume /var/run/docker.sock:/var/run/docker.sock --volume /cephfs/lubiland-lubinat/lubidock/stacks:/stacks docker.io/lubiland/swarm-nat
+    docker run --rm --net=host --cap-add=NET_ADMIN --volume /var/run/docker.sock:/var/run/docker.sock --volume /cephfs/lubiland-lubinat/lubidock/stacks:/stacks gitea.lubiland.de/lubiland/swarm-nat
 
     sleep 60
-done
\ No newline at end of file
+done
diff --git a/update.sh b/update.sh
new file mode 100755
index 0000000..e1d4e5d
--- /dev/null
+++ b/update.sh
@@ -0,0 +1,4 @@
+#!/bin/sh -e
+
+docker buildx build --no-cache -t gitea.lubiland.de/lubiland/lubinat:latest .
+docker push gitea.lubiland.de/lubiland/lubinat:latest