diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 282fdcb..2edd627 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   deploy:
-    uses: ppetru/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
+    uses: alo/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
     with:
       service_name: animaltrack
     secrets: inherit
diff --git a/docker.nix b/docker.nix
index 253149b..89f7d7b 100644
--- a/docker.nix
+++ b/docker.nix
@@ -19,7 +19,7 @@ let
   };
 in
 pkgs.dockerTools.buildImage {
-  name = "gitea.v.paler.net/ppetru/animaltrack";
+  name = "gitea.v.paler.net/alo/animaltrack";
   tag = "latest";
 
   copyToRoot = pkgs.buildEnv {
@@ -47,6 +47,9 @@ pkgs.dockerTools.buildImage {
   # Create required directories without runAsRoot (which needs KVM)
   extraCommands = ''
     mkdir -p -m 1777 tmp
+    # var may already exist from nix packages with restrictive permissions
+    chmod 755 var 2>/dev/null || mkdir -p -m 755 var
+    mkdir -p -m 755 var/lib
     mkdir -p var/lib/animaltrack
   '';