diff --git a/abra.sh b/abra.sh
index 539a378..f2994f8 100755
--- a/abra.sh
+++ b/abra.sh
@@ -1,3 +1,9 @@
+# 3wc: can't use $0 within `source`'d scripts
+# https://unix.stackexchange.com/a/507165/465023
+pushd "$( dirname "${BASH_SOURCE[0]}" )" > /dev/null || exit 1
+
 git checkout .
 
 envsubst < compose.yml > compose.yml.tmp && mv compose.yml.tmp compose.yml
+
+popd > /dev/null || exit 1
diff --git a/compose.yml b/compose.yml
index 2d1d062..4255550 100644
--- a/compose.yml
+++ b/compose.yml
@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: "${IMAGE}"
+    image: "decentral1se/biobulkbende.org:latest"
     networks:
       - proxy
     deploy:
@@ -12,10 +12,10 @@ services:
         order: start-first
       labels:
         - "traefik.enable=true"
-        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=${PORT}"
-        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
-        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
-        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
+        - "traefik.http.services.container_demo.loadbalancer.server.port=5000"
+        - "traefik.http.routers.container_demo.rule=Host(`hax.swarm-demo.autonomic.zone`)"
+        - "traefik.http.routers.container_demo.entrypoints=web-secure"
+        - "traefik.http.routers.container_demo.tls.certresolver=production"
 
 networks:
   proxy: