diff --git a/apps/fc-devicemgmt/deployment-web.yaml b/apps/fc-devicemgmt/deployment-web.yaml
index 9e9b3a2..fe062f6 100644
--- a/apps/fc-devicemgmt/deployment-web.yaml
+++ b/apps/fc-devicemgmt/deployment-web.yaml
@@ -10,6 +10,8 @@
 # Phase 1 production uses a Longhorn RWO PVC at /data/devicemgmt.db. The
 # 1Password runtime item stays mounted through env for future MySQL/API-key
 # cutover, but MySQL is not required for this first product-host rollout.
+# Image v20260611-healthz is built from FlowerCore.DeviceManagement master
+# 3c15f3b, which adds the /healthz alias required by fleet monitoring.
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -76,7 +78,7 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: web
-          image: localhost/fc-devicemgmt-web:v20260610-bluejay
+          image: localhost/fc-devicemgmt-web:v20260611-healthz
           imagePullPolicy: Never
           ports:
             - name: http
@@ -89,6 +91,8 @@ spec:
               value: "Production"
             - name: DOTNET_SYSTEM_GLOBALIZATION_INVARIANT
               value: "false"
+            - name: HOME
+              value: "/data"
             - name: FlowerCore__Service__Name
               value: "FlowerCore.DeviceManagement.Web"
             - name: FlowerCore__DeviceManagement__DefaultTenantId