diff --git a/charts/spire/README.md b/charts/spire/README.md
index 083212e..9f14f38 100644
--- a/charts/spire/README.md
+++ b/charts/spire/README.md
@@ -87,9 +87,9 @@ Kubernetes: `>=1.21.0-0`
 | oidc.image.version | string | `""` |  |
 | oidc.insecureScheme.enabled | bool | `false` |  |
 | oidc.insecureScheme.nginx.image.pullPolicy | string | `"IfNotPresent"` |  |
-| oidc.insecureScheme.nginx.image.registry | string | `"docker.io"` |  |
-| oidc.insecureScheme.nginx.image.repository | string | `"nginx"` |  |
-| oidc.insecureScheme.nginx.image.version | string | `"alpine"` |  |
+| oidc.insecureScheme.nginx.image.registry | string | `"cgr.dev"` |  |
+| oidc.insecureScheme.nginx.image.repository | string | `"chainguard/nginx"` |  |
+| oidc.insecureScheme.nginx.image.version | float | `1.23` |  |
 | oidc.jwtIssuer | string | `"oidc-discovery.example.org"` |  |
 | oidc.logLevel | string | `"INFO"` |  |
 | oidc.nodeSelector."kubernetes.io/arch" | string | `"amd64"` |  |
diff --git a/charts/spire/values.yaml b/charts/spire/values.yaml
index 45522c2..967a079 100644
--- a/charts/spire/values.yaml
+++ b/charts/spire/values.yaml
@@ -175,10 +175,10 @@ oidc:
 
     nginx:
       image:
-        registry: docker.io
-        repository: nginx
+        registry: cgr.dev
+        repository: chainguard/nginx
         pullPolicy: IfNotPresent
-        version: alpine
+        version: 1.23
 
   acme:
     tosAccepted: false