diff --git a/configuration.nix b/configuration.nix
index 92a2bf1..c97b1ec 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -80,6 +80,17 @@
   };
 
   security.sudo.wheelNeedsPassword = true;
+  security.sudo.extraRules = [
+    {
+      users = [ "reudy" ];
+      commands = [
+        {
+          command = "${pkgs.systemd}/bin/systemctl reload caddy";
+          options = [ "NOPASSWD" ];
+        }
+      ];
+    }
+  ];
 
 
   services.openssh = {
diff --git a/panel/panelctl.sh b/panel/panelctl.sh
index 61382eb..9b24555 100644
--- a/panel/panelctl.sh
+++ b/panel/panelctl.sh
@@ -171,7 +171,7 @@ write_default_compose() {
   cat >"${stack_dir}/compose.yaml" <<EOF
 services:
   app:
-    image: traefik/whoami:latest
+    image: docker.io/traefik/whoami:latest
     restart: unless-stopped
     ports:
       - "127.0.0.1:${port}:80"