diff --git a/meta/linode/babybuddy.tf b/meta/linode/babybuddy.tf
index 6ad1eee..cccd398 100644
--- a/meta/linode/babybuddy.tf
+++ b/meta/linode/babybuddy.tf
@@ -13,37 +13,6 @@ resource "kubernetes_persistent_volume_claim" "babybuddy" {
   }
 }
 
-# resource "kubernetes_pod" "babybuddy" {
-#   metadata {
-#     name = "babybuddy"
-#     labels = {
-#       app = "babybuddy"
-#     }
-#   }
-
-#   spec {
-#     container {
-#       # https://github.com/babybuddy/babybuddy/issues/337
-#       image             = "lscr.io/linuxserver/babybuddy:v1.9.0-ls14"
-#       image_pull_policy = "Always"
-#       name              = "babybuddy"
-#       port {
-#         container_port = 8000
-#       }
-#       volume_mount {
-#         name       = "babybuddy"
-#         mount_path = "/config"
-#       }
-#     }
-#     volume {
-#       name = "babybuddy"
-#       persistent_volume_claim {
-#         claim_name = "babybuddy"
-#       }
-#     }
-#   }
-# }
-
 resource "kubernetes_deployment" "babybuddy" {
   metadata {
     name = "babybuddy"
@@ -66,8 +35,7 @@ resource "kubernetes_deployment" "babybuddy" {
       }
       spec {
         container {
-          # https://github.com/babybuddy/babybuddy/issues/337
-          image             = "lscr.io/linuxserver/babybuddy:v1.9.0-ls14"
+          image             = "lscr.io/linuxserver/babybuddy:1.10.2"
           name              = "babybuddy"
           image_pull_policy = "Always"
           port {
@@ -77,6 +45,14 @@ resource "kubernetes_deployment" "babybuddy" {
             name       = "babybuddy"
             mount_path = "/config"
           }
+          env {
+            name  = "CSRF_TRUSTED_ORIGINS"
+            value = "https://babybuddy.${var.domain}"
+          }
+          env {
+            name  = "SECURE_PROXY_SSL_HEADER"
+            value = "True"
+          }
         }
         volume {
           name = "babybuddy"