From ba48d9cc5e2332f8b0954720bb23e4875fb4179a Mon Sep 17 00:00:00 2001
From: zachary painter <60552605+ZPain8464@users.noreply.github.com>
Date: Thu, 29 Feb 2024 12:18:03 -0500
Subject: [PATCH] updates Docker pull URLs

---
 content/docs/capabilities/high-availability.mdx        | 8 ++++----
 content/docs/courses/fundamentals/advanced-policies.md | 4 ++--
 content/docs/courses/fundamentals/advanced-routes.md   | 4 ++--
 content/docs/courses/fundamentals/build-policies.md    | 4 ++--
 content/docs/courses/fundamentals/build-routes.md      | 8 ++++----
 content/docs/courses/fundamentals/get-started.md       | 8 ++++----
 content/docs/courses/fundamentals/jwt-verification.md  | 6 +++---
 content/docs/courses/fundamentals/tcp-routes.md        | 2 +-
 content/docs/deploy/clients/pomerium-cli.mdx           | 6 +++---
 content/docs/deploy/core.mdx                           | 6 +++---
 content/docs/guides/code-server.mdx                    | 2 +-
 content/docs/guides/gitlab.mdx                         | 2 +-
 content/docs/guides/jwt-verification.md                | 2 +-
 content/docs/guides/local-oidc.md                      | 4 ++--
 content/docs/identity-providers/oidc.mdx               | 4 ++--
 content/examples/docker/autocert.docker-compose.yml    | 4 ++--
 content/examples/docker/basic.docker-compose.yml.md    | 4 ++--
 content/examples/docker/nginx.docker-compose.yml       | 8 ++++----
 content/examples/enterprise/hosted-auth-docker.yaml.md | 4 ++--
 content/examples/jenkins/jenkins-docker-compose.md     | 4 ++--
 content/examples/nginx/docker-compose.yaml.md          | 4 ++--
 content/examples/tcp/docker-compose.yaml.md            | 2 +-
 content/examples/tiddlywiki/docker-compose.yaml.md     | 2 +-
 content/examples/tooljet/console-compose.yaml.md       | 4 ++--
 content/examples/tooljet/docker-compose.yaml.md        | 4 ++--
 25 files changed, 55 insertions(+), 55 deletions(-)

diff --git a/content/docs/capabilities/high-availability.mdx b/content/docs/capabilities/high-availability.mdx
index f249dfc5d..81f0ddf9e 100644
--- a/content/docs/capabilities/high-availability.mdx
+++ b/content/docs/capabilities/high-availability.mdx
@@ -178,7 +178,7 @@ networks:
 services:
   pomerium-proxy:
     hostname: pomerium-proxy
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     networks:
       main: {}
     volumes:
@@ -196,7 +196,7 @@ services:
       - CERTIFICATE_AUTHORITY_FILE=/run/secrets/ca.pem
   pomerium-authorize:
     hostname: pomerium-authorize
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     networks:
       main: {}
     volumes:
@@ -208,7 +208,7 @@ services:
       - CERTIFICATE_AUTHORITY_FILE=/run/secrets/ca.pem
   pomerium-authenticate:
     hostname: pomerium-authenticate
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml
     secrets:
@@ -227,7 +227,7 @@ services:
           - authenticate.localhost.pomerium.io
   pomerium-databroker:
     hostname: pomerium-databroker
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     networks:
       main: {}
     volumes:
diff --git a/content/docs/courses/fundamentals/advanced-policies.md b/content/docs/courses/fundamentals/advanced-policies.md
index 83361bf79..ab808dd80 100644
--- a/content/docs/courses/fundamentals/advanced-policies.md
+++ b/content/docs/courses/fundamentals/advanced-policies.md
@@ -168,13 +168,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     environment:
diff --git a/content/docs/courses/fundamentals/advanced-routes.md b/content/docs/courses/fundamentals/advanced-routes.md
index e4626e776..f1e3c5eab 100644
--- a/content/docs/courses/fundamentals/advanced-routes.md
+++ b/content/docs/courses/fundamentals/advanced-routes.md
@@ -443,13 +443,13 @@ Docker Compose
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     environment:
diff --git a/content/docs/courses/fundamentals/build-policies.md b/content/docs/courses/fundamentals/build-policies.md
index 8ad1a1ece..50615ce70 100644
--- a/content/docs/courses/fundamentals/build-policies.md
+++ b/content/docs/courses/fundamentals/build-policies.md
@@ -247,13 +247,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   grafana:
diff --git a/content/docs/courses/fundamentals/build-routes.md b/content/docs/courses/fundamentals/build-routes.md
index a3baeab96..6af85af2a 100644
--- a/content/docs/courses/fundamentals/build-routes.md
+++ b/content/docs/courses/fundamentals/build-routes.md
@@ -71,13 +71,13 @@ In your `docker-compose.yaml` file, add Grafana as a service:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   grafana:
@@ -185,13 +185,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   grafana:
diff --git a/content/docs/courses/fundamentals/get-started.md b/content/docs/courses/fundamentals/get-started.md
index 2afa3492b..2506079cf 100644
--- a/content/docs/courses/fundamentals/get-started.md
+++ b/content/docs/courses/fundamentals/get-started.md
@@ -110,13 +110,13 @@ Add the following configuration settings to `docker-compose.yaml`:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 ```
@@ -184,13 +184,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 ```
diff --git a/content/docs/courses/fundamentals/jwt-verification.md b/content/docs/courses/fundamentals/jwt-verification.md
index 5cf3084e6..496f2b779 100644
--- a/content/docs/courses/fundamentals/jwt-verification.md
+++ b/content/docs/courses/fundamentals/jwt-verification.md
@@ -208,7 +208,7 @@ In your Docker Compose file, add the following environment variable to your Veri
 
 ```yaml title="docker-compose"
 verify:
-  image: pomerium/verify:latest
+  image: cr.pomerium.com/pomerium/verify:latest
   expose:
     - 8000
   environment:
@@ -339,13 +339,13 @@ Docker Compose
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     environment:
diff --git a/content/docs/courses/fundamentals/tcp-routes.md b/content/docs/courses/fundamentals/tcp-routes.md
index b77df62dd..64fd6e736 100644
--- a/content/docs/courses/fundamentals/tcp-routes.md
+++ b/content/docs/courses/fundamentals/tcp-routes.md
@@ -117,7 +117,7 @@ In your Docker Compose file, bind mount your wildcard certificates as a volume i
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       # Mount your wildcard certificates:
       - ./_wildcard.localhost.pomerium.io-key.pem:/pomerium/key.pem:ro
diff --git a/content/docs/deploy/clients/pomerium-cli.mdx b/content/docs/deploy/clients/pomerium-cli.mdx
index 4a822e9ac..4b7ec36ea 100644
--- a/content/docs/deploy/clients/pomerium-cli.mdx
+++ b/content/docs/deploy/clients/pomerium-cli.mdx
@@ -92,21 +92,21 @@ The CLI utilizes a [minimal](https://github.com/GoogleContainerTools/distroless)
 - `:vX.Y.Z`: which will pull the a [specific tagged release](https://github.com/pomerium/cli/tags).
 
   ```bash {2}
-  docker run pomerium/cli:v0.1.0 --version
+  docker run cr.pomerium.com/pomerium/cli:v0.1.0 --version
   v0.1.0+53bfa4e
   ```
 
 - `:latest`: which will pull the [most recent tagged release](https://github.com/pomerium/cli/releases).
 
   ```bash {2}
-  docker run pomerium/cli:latest --version
+  docker run cr.pomerium.com/pomerium/cli:latest --version
   v0.2.0+87e214b
   ```
 
 - `:main` : which will pull an image in sync with git's [main](https://github.com/pomerium/pomerium/tree/main) branch.
 
   ```bash
-  docker pull pomerium/cli:main
+  docker pull cr.pomerium.com/pomerium/cli:main
   ```
 
 ### Source
diff --git a/content/docs/deploy/core.mdx b/content/docs/deploy/core.mdx
index c88401b88..db5f9c02b 100644
--- a/content/docs/deploy/core.mdx
+++ b/content/docs/deploy/core.mdx
@@ -95,19 +95,19 @@ Pomerium also provides [Docker container images](https://www.docker.com/resource
 - `:vX.Y` corresponds to the latest patch release for a specific minor version (starting with v0.25).
 
   ```shell-session
-  $ docker pull pomerium/pomerium:v0.25
+  $ docker pull cr.pomerium.com/pomerium/pomerium:v0.25
   ```
 
 - `:latest` corresponds to the [most recent tagged release](https://github.com/pomerium/pomerium/releases/latest).
 
   ```shell-session
-  $ docker pull pomerium/pomerium:latest
+  $ docker pull cr.pomerium.com/pomerium/pomerium:latest
   ```
 
 - `:main` corresponds to the most recent development build from the [main](https://github.com/pomerium/pomerium/tree/main) git branch.
 
   ```shell-session
-  $ docker pull pomerium/pomerium:main
+  $ docker pull cr.pomerium.com/pomerium/pomerium:main
   ```
 
 Rootless images for official releases are also published to provide additional security. In these images, Pomerium runs as the `nonroot` user. Depending on your deployment environment, you may need to grant the container additional [capabilities](https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/) or change the [listen address](/docs/reference/address) to use a port number other than 443.
diff --git a/content/docs/guides/code-server.mdx b/content/docs/guides/code-server.mdx
index 180c5f290..a098e1471 100644
--- a/content/docs/guides/code-server.mdx
+++ b/content/docs/guides/code-server.mdx
@@ -101,7 +101,7 @@ In your `docker-compose.yaml` file, add the code-server and Pomerium services:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
diff --git a/content/docs/guides/gitlab.mdx b/content/docs/guides/gitlab.mdx
index ed2e2084c..27e62a4a0 100644
--- a/content/docs/guides/gitlab.mdx
+++ b/content/docs/guides/gitlab.mdx
@@ -212,7 +212,7 @@ Integrations that use unique subdomains will require their own certificates and
     ...
 
       pomerium:
-        image: pomerium/pomerium:latest
+        image: cr.pomerium.com/pomerium/pomerium:latest
         container_name: pomerium
         volumes:
           - ./srv/pomerium/config.yaml:/pomerium/config.yaml:ro
diff --git a/content/docs/guides/jwt-verification.md b/content/docs/guides/jwt-verification.md
index 4862c3509..0266ed7cd 100644
--- a/content/docs/guides/jwt-verification.md
+++ b/content/docs/guides/jwt-verification.md
@@ -59,7 +59,7 @@ Mac and Linux users can use DNSMasq to map the `*.localhost.pomerium.io` domain
        driver: 'bridge'
    services:
      pomerium:
-       image: pomerium/pomerium:latest
+       image: cr.pomerium.com/pomerium/pomerium:latest
        ports:
          - '443:443'
        volumes:
diff --git a/content/docs/guides/local-oidc.md b/content/docs/guides/local-oidc.md
index 2457f4810..8dc56105a 100644
--- a/content/docs/guides/local-oidc.md
+++ b/content/docs/guides/local-oidc.md
@@ -17,7 +17,7 @@ You can use the same configuration examples below for other supported [identity
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     environment:
       # Generate new secret keys. e.g. `head -c32 /dev/urandom | base64`
       - COOKIE_SECRET=<redacted>
@@ -36,7 +36,7 @@ services:
       - identityprovider
 
   verify:
-    image: pomerium/verify
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 
diff --git a/content/docs/identity-providers/oidc.mdx b/content/docs/identity-providers/oidc.mdx
index 399b0d21f..1b71b9160 100644
--- a/content/docs/identity-providers/oidc.mdx
+++ b/content/docs/identity-providers/oidc.mdx
@@ -49,13 +49,13 @@ services:
         aliases:
           - keycloak.localhost.pomerium.io
   pomerium:
-    image: pomerium/pomerium:v0.23.0
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     environment:
       JWKS_ENDPOINT: https://pomerium/.well-known/pomerium/jwks.json
 ```
diff --git a/content/examples/docker/autocert.docker-compose.yml b/content/examples/docker/autocert.docker-compose.yml
index 453796c13..fd08dcd39 100644
--- a/content/examples/docker/autocert.docker-compose.yml
+++ b/content/examples/docker/autocert.docker-compose.yml
@@ -1,7 +1,7 @@
 version: "3"
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     environment:
       # Generate new secret keys. e.g. `head -c32 /dev/urandom | base64`
       - COOKIE_SECRET=V2JBZk0zWGtsL29UcFUvWjVDWWQ2UHExNXJ0b2VhcDI=
@@ -13,6 +13,6 @@ services:
 
   # https://verify.corp.beyondperimeter.com --> Pomerium --> http://verify
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 80
diff --git a/content/examples/docker/basic.docker-compose.yml.md b/content/examples/docker/basic.docker-compose.yml.md
index 78446f2f0..11e288e43 100644
--- a/content/examples/docker/basic.docker-compose.yml.md
+++ b/content/examples/docker/basic.docker-compose.yml.md
@@ -2,7 +2,7 @@
 version: "3"
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       ## Mount your config file: https://www.pomerium.com/docs/reference/
       - ./config.yaml:/pomerium/config.yaml:ro
@@ -10,7 +10,7 @@ services:
       - 443:443
   ## https://verify.localhost.pomerium.io --> Pomerium --> http://verify
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 ```
\ No newline at end of file
diff --git a/content/examples/docker/nginx.docker-compose.yml b/content/examples/docker/nginx.docker-compose.yml
index 6d70fabeb..9fe2f0576 100644
--- a/content/examples/docker/nginx.docker-compose.yml
+++ b/content/examples/docker/nginx.docker-compose.yml
@@ -12,7 +12,7 @@ services:
       - /var/run/docker.sock:/tmp/docker.sock:ro
 
   pomerium-authenticate:
-    image: pomerium/pomerium:latest # or `build: .` to build from source
+    image: cr.pomerium.com/pomerium/pomerium:latest # or `build: .` to build from source
     restart: always
     environment:
       - SERVICES=authenticate
@@ -60,7 +60,7 @@ services:
       - 443
 
   pomerium-authorize:
-    image: pomerium/pomerium:latest # or `build: .` to build from source
+    image: cr.pomerium.com/pomerium/pomerium:latest # or `build: .` to build from source
     restart: always
     environment:
       - SERVICES=authorize
@@ -77,7 +77,7 @@ services:
       - 443
 
   pomerium-databroker:
-    image: pomerium/pomerium:latest # or `build: .` to build from source
+    image: cr.pomerium.com/pomerium/pomerium:latest # or `build: .` to build from source
     restart: always
     environment:
       - SERVICES=databroker
@@ -94,7 +94,7 @@ services:
 
   # https://verify.corp.beyondperimeter.com
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 80
   # https://hello.corp.beyondperimeter.com
diff --git a/content/examples/enterprise/hosted-auth-docker.yaml.md b/content/examples/enterprise/hosted-auth-docker.yaml.md
index ae6a15201..7384ea68f 100644
--- a/content/examples/enterprise/hosted-auth-docker.yaml.md
+++ b/content/examples/enterprise/hosted-auth-docker.yaml.md
@@ -2,7 +2,7 @@
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
@@ -58,7 +58,7 @@ services:
     volumes:
       - pgdata:/var/lib/postgresql/data
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     restart: always
diff --git a/content/examples/jenkins/jenkins-docker-compose.md b/content/examples/jenkins/jenkins-docker-compose.md
index 5f0c23a9a..bc000fcdf 100644
--- a/content/examples/jenkins/jenkins-docker-compose.md
+++ b/content/examples/jenkins/jenkins-docker-compose.md
@@ -4,7 +4,7 @@ networks:
  main: {}
 services:
  pomerium:
-   image: pomerium/pomerium:latest
+   image: cr.pomerium.com/pomerium/pomerium:latest
    volumes:
      - ./config.yaml:/pomerium/config.yaml:ro
    ports:
@@ -16,7 +16,7 @@ services:
  verify:
    networks:
      main: {}
-   image: pomerium/verify:latest
+   image: cr.pomerium.com/pomerium/verify:latest
    expose:
      - 8000
  jenkins:
diff --git a/content/examples/nginx/docker-compose.yaml.md b/content/examples/nginx/docker-compose.yaml.md
index 4dfd6697c..f29da8fa6 100644
--- a/content/examples/nginx/docker-compose.yaml.md
+++ b/content/examples/nginx/docker-compose.yaml.md
@@ -19,11 +19,11 @@ services:
       - ./proxy.conf:/etc/nginx/proxy.conf
 
   verify:
-    image: pomerium/verify
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 80
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     expose:
diff --git a/content/examples/tcp/docker-compose.yaml.md b/content/examples/tcp/docker-compose.yaml.md
index 44599db94..fac4007bc 100644
--- a/content/examples/tcp/docker-compose.yaml.md
+++ b/content/examples/tcp/docker-compose.yaml.md
@@ -2,7 +2,7 @@
 version: "3"
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       # Uncomment to mount certificates (optional)
       # - ./_wildcard.localhost.pomerium.io.pem:/pomerium/cert.pem:ro
diff --git a/content/examples/tiddlywiki/docker-compose.yaml.md b/content/examples/tiddlywiki/docker-compose.yaml.md
index af5233187..e9931d8d1 100644
--- a/content/examples/tiddlywiki/docker-compose.yaml.md
+++ b/content/examples/tiddlywiki/docker-compose.yaml.md
@@ -3,7 +3,7 @@ version: "3"
 
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       # Use a volume to store ACME certificates
       - ./config.yaml:/pomerium/config.yaml:ro
diff --git a/content/examples/tooljet/console-compose.yaml.md b/content/examples/tooljet/console-compose.yaml.md
index ab119fd39..e4a3ab3f7 100644
--- a/content/examples/tooljet/console-compose.yaml.md
+++ b/content/examples/tooljet/console-compose.yaml.md
@@ -4,7 +4,7 @@ networks:
   main: {}
 services:
   pomerium:
-    image: pomerium/pomerium:v0.21.1
+    image: cr.pomerium.com/pomerium/pomerium:v0.21.1
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
@@ -69,7 +69,7 @@ services:
   verify:
     networks:
       main: {}
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     restart: always
diff --git a/content/examples/tooljet/docker-compose.yaml.md b/content/examples/tooljet/docker-compose.yaml.md
index 2e84a443f..27fa381f9 100644
--- a/content/examples/tooljet/docker-compose.yaml.md
+++ b/content/examples/tooljet/docker-compose.yaml.md
@@ -4,7 +4,7 @@ networks:
   main: {}
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       ## Mount your config file: https://www.pomerium.com/docs/reference/
       - ./config.yaml:/pomerium/config.yaml:ro
@@ -19,7 +19,7 @@ services:
   verify:
     networks:
       main: {}
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   tooljet: