diff --git a/charts/reuse-surface/templates/deployment.yaml b/charts/reuse-surface/templates/deployment.yaml
index 9cc17ea..3fd100e 100644
--- a/charts/reuse-surface/templates/deployment.yaml
+++ b/charts/reuse-surface/templates/deployment.yaml
@@ -16,6 +16,7 @@ spec:
     metadata:
       labels: {{- include "reuse.selectorLabels" . | nindent 8 }}
     spec:
+      enableServiceLinks: false
       securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers:
         - name: reuse-surface
@@ -31,6 +32,10 @@ spec:
             - secretRef:
                 name: {{ .Values.envSecretName | quote }}
           env:
+            - name: REUSE_SURFACE_LISTEN_HOST
+              value: "0.0.0.0"
+            - name: REUSE_SURFACE_LISTEN_PORT
+              value: {{ .Values.service.targetPort | quote }}
             - name: REUSE_SURFACE_DB
               value: {{ printf "%s/reuse.db" .Values.persistence.mountPath | quote }}
             - name: REUSE_SURFACE_CACHE_DIR
diff --git a/helm/reuse-surface-values.yaml b/helm/reuse-surface-values.yaml
index 18c7bf6..cfb6de4 100644
--- a/helm/reuse-surface-values.yaml
+++ b/helm/reuse-surface-values.yaml
@@ -2,4 +2,4 @@
 # REUSE_SURFACE_TOKEN is supplied via Secret reuse-surface-env.
 
 image:
-  tag: "pending-first-build"
\ No newline at end of file
+  tag: "ae41395"
\ No newline at end of file