diff --git a/draw/draw.yaml b/draw/draw.yaml
index fb4a523..1cd7b02 100644
--- a/draw/draw.yaml
+++ b/draw/draw.yaml
@@ -1,46 +1,46 @@
-# ================================
-# EXCALIDRAW - STATELESS
-# https://excalidraw.com
-# ================================
+# ==========================================
+# JS PAINT (STATELESS)
+# ==========================================
 
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: excalidraw
-  labels:
-    app: excalidraw
+  name: jspaint
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app: excalidraw
+      app: jspaint
   template:
     metadata:
       labels:
-        app: excalidraw
+        app: jspaint
     spec:
+      nodeSelector:
+        kubernetes.io/hostname: mist
+
       containers:
-        - name: excalidraw
-          image: excalidraw/excalidraw:latest
+        - name: jspaint
+          image: ghcr.io/1j01/jspaint:latest
           ports:
             - containerPort: 80
           resources:
             requests:
-              cpu: "100m"
-              memory: "128Mi"
+              cpu: "50m"
+              memory: "64Mi"
             limits:
-              cpu: "300m"
-              memory: "256Mi"
+              cpu: "200m"
+              memory: "128Mi"
 
 ---
 apiVersion: v1
 kind: Service
 metadata:
-  name: excalidraw
+  name: jspaint
 spec:
   selector:
-    app: excalidraw
+    app: jspaint
   ports:
     - port: 80
       targetPort: 80
@@ -49,17 +49,16 @@ spec:
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: excalidraw-ingressroute
+  name: jspaint-ingress
 spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`draw.juntekim.com`)
+    - match: Host(`jspaint.juntekim.com`)
       kind: Rule
       services:
-        - name: excalidraw
+        - name: jspaint
           port: 80
+          passHostHeader: true
   tls:
-    certResolver: myresolver
-    domains:
-      - main: draw.juntekim.com
+    certResolver: myresolver
\ No newline at end of file
diff --git a/recipes/recipes.yaml b/recipes/recipes.yaml
index fe61226..86791e5 100644
--- a/recipes/recipes.yaml
+++ b/recipes/recipes.yaml
@@ -88,8 +88,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: tandoor-postgres
-  labels:
-    app: tandoor-postgres
 spec:
   replicas: 1
   selector:
@@ -139,8 +137,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: tandoor-redis
-  labels:
-    app: tandoor-redis
 spec:
   replicas: 1
   selector:
@@ -178,8 +174,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: tandoor
-  labels:
-    app: tandoor
 spec:
   replicas: 1
   selector:
@@ -192,12 +186,16 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/hostname: mist
+
+      enableServiceLinks: false   # 🔥 CRITICAL FIX
+
       containers:
         - name: tandoor
           image: vabene1111/recipes:latest
           env:
             - name: SECRET_KEY
-              value: replace-with-very-long-random-string
+              value: replace-with-long-random-string
+
             - name: DB_ENGINE
               value: django.db.backends.postgresql
             - name: POSTGRES_HOST
@@ -210,19 +208,25 @@ spec:
               value: tandoorpassword
             - name: POSTGRES_DB
               value: tandoor
+
             - name: REDIS_HOST
               value: tandoor-redis
             - name: REDIS_PORT
               value: "6379"
+
             - name: ALLOWED_HOSTS
-              value: recipes.juntekim.com
+              value: "*"
+
             - name: DEBUG
               value: "0"
+
           ports:
             - containerPort: 8080
+
           volumeMounts:
             - name: media-storage
               mountPath: /opt/recipes/mediafiles
+
       volumes:
         - name: media-storage
           persistentVolumeClaim: