diff --git a/apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml b/apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml
index f3b5cc0..55a7033 100644
--- a/apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml
+++ b/apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml
@@ -15,16 +15,13 @@ spec:
                   - cn-hk
           weight: 1
   instances: 1
-  imageName: ghcr.io/tensorchord/cloudnative-pgvecto.rs:17.5-v0.4.0
+  imageName: ghcr.io/cloudnative-pg/postgresql:17-bookworm
   enableSuperuserAccess: true
   storage:
     size: 10Gi
   postgresql:
     parameters:
       archive_timeout: 30min
-    # 启用向量扩展
-    shared_preload_libraries:
-      - "vectors.so"
   backup:
     retentionPolicy: "7d"
     barmanObjectStore:
diff --git a/apps/infra/data/cloudnative-pg/cnpg17-cluster-sh.yaml b/apps/infra/data/cloudnative-pg/cnpg17-cluster-sh.yaml
index 5f6c1d8..5fa9ac2 100644
--- a/apps/infra/data/cloudnative-pg/cnpg17-cluster-sh.yaml
+++ b/apps/infra/data/cloudnative-pg/cnpg17-cluster-sh.yaml
@@ -15,7 +15,7 @@ spec:
                   - cn-sh
           weight: 1
   instances: 1
-  imageName: ghcr.io/tensorchord/cloudnative-pgvecto.rs:17.5-v0.4.0
+  imageName: ghcr.io/cloudnative-pg/postgresql:17-bookworm
   enableSuperuserAccess: true
   storage:
     size: 10Gi
diff --git a/apps/infra/net/nginx/helmchart.yaml b/apps/infra/net/nginx/helmchart.yaml
index 67c80a6..5690c4d 100644
--- a/apps/infra/net/nginx/helmchart.yaml
+++ b/apps/infra/net/nginx/helmchart.yaml
@@ -125,9 +125,11 @@ spec:
       # crowdsec插件配置
       extraInitContainers:
         - name: init-clone-crowdsec-bouncer
-          image: devcm/lua-bouncer-plugin:v1.0.5
+          image: crowdsecurity/lua-bouncer-plugin:v1.1.1
           imagePullPolicy: IfNotPresent
           env:
+            - name: SHELL
+              value: "/bin/sh"
             - name: API_URL
               value: "http://crowdsec-service.infra-net.svc.cluster.local:8080"
             - name: API_KEY
@@ -150,7 +152,8 @@ spec:
               value: "0x4AAAAAAAxJ2dwFOaNg5ae3c6wYTmWH0bU"
             - name: CAPTCHA_TEMPLATE_PATH
               value: /etc/nginx/static/captcha.html
-          command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"]
+          command: ['/bin/sh', '-c']
+          args: ['sh /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/']
           volumeMounts:
             - name: crowdsec-bouncer-plugin
               mountPath: /lua_plugins