diff --git a/hswaw/ldapweb/OWNERS b/hswaw/ldapweb/OWNERS
new file mode 100644
index 0000000..f5bb617
--- /dev/null
+++ b/hswaw/ldapweb/OWNERS
@@ -0,0 +1,2 @@
+owners:
+  - radex
diff --git a/hswaw/ldapweb/README.md b/hswaw/ldapweb/README.md
index 52c7a56..a103605 100644
--- a/hswaw/ldapweb/README.md
+++ b/hswaw/ldapweb/README.md
@@ -1,3 +1,3 @@
-# LDAP web
+# LDAPWeb
 
-Manually built from https://code.hackerspace.pl/hswaw/ldapweb
+Source: https://code.hackerspace.pl/hswaw/ldapweb
diff --git a/hswaw/ldapweb/prod.jsonnet b/hswaw/ldapweb/prod.jsonnet
index 325e34c..72083c3 100644
--- a/hswaw/ldapweb/prod.jsonnet
+++ b/hswaw/ldapweb/prod.jsonnet
@@ -8,11 +8,12 @@
         name: 'ldapweb',
         namespace: 'ldapweb',
         domain: 'profile.hackerspace.pl',
-        image: 'registry.k0.hswaw.net/radex/ldapweb:1698604668',
+        image: 'registry.k0.hswaw.net/radex/ldapweb:20231123203042',
     },
 
     secrets:: {
         admin_password: { secretKeyRef: { name: cfg.name, key: 'admin_password' } },
+        smtp_password: { secretKeyRef: { name: cfg.name, key: 'smtp_password' } },
     },
 
     ns: kube.Namespace(cfg.namespace),
@@ -37,6 +38,10 @@
                                 LDAPWEB_ACTIVE_GROUPS: 'fatty,starving,potato',
                                 LDAPWEB_ADMIN_DN: 'cn=ldapweb,ou=services,dc=hackerspace,dc=pl',
                                 LDAPWEB_ADMIN_PASSWORD: top.secrets.admin_password,
+                                LDAPWEB_PROTECTED_GROUPS: 'ldap-admin,staff,zarzad',
+                                LDAPWEB_SMTP_USER: 'ldapweb',
+                                LDAPWEB_SMTP_PASSWORD: top.secrets.smtp_password,
+                                LDAPWEB_PAPERTRAIL_RECIPIENTS: 'zarzad@hackerspace.pl',
                                 LDAPWEB_AVATAR_CACHE_TIMEOUT: '1800',
                             }
                         },