hswaw/capacifier: deploy

1. Fix spurious -hspki_disable call now that mirko has been ripped out.
2. Build pure/static binary.

Change-Id: Ibe05f18f23d0794eb1a839064474112e004df824
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1747
Reviewed-by: radex <radex@hackerspace.pl>
diff --git a/hswaw/capacifier/prod.jsonnet b/hswaw/capacifier/prod.jsonnet
index 7984602..1f4af02 100644
--- a/hswaw/capacifier/prod.jsonnet
+++ b/hswaw/capacifier/prod.jsonnet
@@ -8,7 +8,7 @@
         name: 'capacifier',
         namespace: 'capacifier',
         domain: 'capacifier.hackerspace.pl',
-        image: 'registry.k0.hswaw.net/q3k/capacifier:1680390588',
+        image: 'registry.k0.hswaw.net/q3k/capacifier@sha256:fd94b29bf711267235c96e5102ac4024e83e5851869a5e8814b83e76490c00af',
     },
 
     ns: kube.Namespace(cfg.namespace),
@@ -27,7 +27,6 @@
                             },
                             command: [
                                 "/hswaw/capacifier/capacifier",
-                                "-hspki_disable",
                                 "-logtostderr",
                                 "-api_listen", "0.0.0.0:8080",
                                 "-ldap_bind_dn", "$(LDAP_DN)",