diff --git a/argocd/manifests/immich/kustomization.yaml b/argocd/manifests/immich/kustomization.yaml
index c7c54e1..399a975 100644
--- a/argocd/manifests/immich/kustomization.yaml
+++ b/argocd/manifests/immich/kustomization.yaml
@@ -19,4 +19,5 @@ images:
   - name: ghcr.io/immich-app/immich-machine-learning
     newTag: v2.6.3
   - name: docker.io/valkey/valkey
-    newTag: "8.1-alpine"
+    newName: registry.ops.eblu.me/blumeops/valkey
+    newTag: v8.1.6-r0-946fa75
diff --git a/argocd/manifests/paperless/kustomization.yaml b/argocd/manifests/paperless/kustomization.yaml
index 3e65578..4e1f658 100644
--- a/argocd/manifests/paperless/kustomization.yaml
+++ b/argocd/manifests/paperless/kustomization.yaml
@@ -14,9 +14,6 @@ resources:
 images:
   - name: registry.ops.eblu.me/blumeops/paperless
     newTag: v2.20.13-07f52e9
-  # TODO(DR-2026-04): authentik-redis is amd64-only (nix-built on ringtail).
-  # Was running under QEMU emulation before. Switched to upstream valkey
-  # during DR recovery. Build a multi-arch blumeops/redis or keep upstream.
   - name: docker.io/library/redis
-    newName: docker.io/valkey/valkey
-    newTag: "8.1-alpine"
+    newName: registry.ops.eblu.me/blumeops/valkey
+    newTag: v8.1.6-r0-946fa75