diff --git a/.build.yml b/.build.yml
index 9113c5d..a311374 100644
--- a/.build.yml
+++ b/.build.yml
@@ -1,8 +1,8 @@
 image: alpine/edge
 
 secrets:
-  - 0f9c437f-5dfc-49f1-abfb-0030f265c018
-  - f523ee29-5ef8-490f-8903-43ad7c49060b
+  - 0ee986ff-5686-43cd-ac3a-1fe5b2e5dd8f
+  - f523ee29-5ef8-490f-8903-43ad7c49060b 
 
 sources:
   - https://git.sr.ht/~jswank/alpine-cli
@@ -32,3 +32,4 @@ tasks:
   - publish: |
       cd alpine-cli
       chpst -e ~/.envdir sudo --preserve-env just publish
+      chpst -e ~/.envdir sudo --preserve-env just ci-publish-dh
diff --git a/justfile b/justfile
index 78353b0..43a837a 100644
--- a/justfile
+++ b/justfile
@@ -1,15 +1,22 @@
 set dotenv-load
 
-image := "ghcr.io/jswank/alpine-cli:latest"
+image := "jswank/alpine-cli:latest"
 n := "alpine-cli"
 
 # build a new image
 build:
-  podman build -t {{image}} -f Dockerfile ./ctx 
+  podman build -t {{image}} -f build/Dockerfile . 
 
 # publish the image
 publish: 
   @ echo $GH_PAT | podman login ghcr.io -u jswank --password-stdin >/dev/null 2>&1
-  podman push {{image}}
+  podman push ghcr.io/{{image}}
   @ podman logout ghcr.io
 
+# publish the image to Dockerhub / docker.io
+publish-dh:
+  @ podman tag {{image}} docker.io/{{image}}
+  @ echo $DH_PAT | podman login docker.io -u jswank --password-stdin >/dev/null 2>&1
+  podman push docker.io/{{image}}
+  @ podman logout docker.io
+