diff --git a/apps/devops/cert-manager/helmchart-dnspod.yaml b/apps/devops/cert-manager/helmchart-dnspod.yaml
index de95748..42a0052 100644
--- a/apps/devops/cert-manager/helmchart-dnspod.yaml
+++ b/apps/devops/cert-manager/helmchart-dnspod.yaml
@@ -14,7 +14,7 @@ spec:
       namespace: infra-devops
     groupName: cert.dev.cm
     clusterIssuer:
-      # 此处需在部署后修改clusterIssuer
+      # 此处需在部署后修改clusterIssuer 添加在dns01下
       # cnameStrategy: Follow
       staging: false
       email: admin@dev.cm
diff --git a/install/agent.config.yaml b/install/agent.config.yaml
index ef81309..57e67c2 100644
--- a/install/agent.config.yaml
+++ b/install/agent.config.yaml
@@ -3,9 +3,10 @@ server: "https://k3s.dev.cm:6443"
 token: "K1010dd6f0853e824cfaf417117f31a0d797a738aa2d4b9d01cd5972a9b084c81a0::server:e4836f1f469315fadd5b12c07d7fb10e"
 
 # 网络相关
-# 阿里云vps 需要添加 extraArgs=--netfilter-mode=off
+# WARN 阿里云、华为云因使用100网段作为dns等内部服务 需要关闭netfilter 否则会自动添加iptables规则导致无法访问dns
+# WARN 需要添加 extraArgs=--netfilter-mode=off
 vpn-auth: "name=tailscale,joinKey=tskey-auth-kGPKhWTTQN11CNTRL-V3zxxhg5B9iwHut6guHw8iTrpHfwrwZ7"
 
 # 节点相关
 # 保留节点资源 根据节点做不同配置
-# kubelet-arg: "kube-reserved=cpu=1000m,memory=1Gi"
\ No newline at end of file
+# kubelet-arg: "kube-reserved=cpu=1000m,memory=1Gi"
diff --git a/install/registries.yaml b/install/registries.yaml
index 90b29e7..27435f4 100644
--- a/install/registries.yaml
+++ b/install/registries.yaml
@@ -1,7 +1,7 @@
 mirrors:
   "docker.io":
     endpoint:
-      - "https://mirror.ccs.tencentyun.com"
+      - "docker.m.daocloud.io"
   "registry.k8s.io":
     endpoint:
       - "k8s.m.daocloud.io"