diff --git a/Dockerfile b/Dockerfile
index a850658..e8773ae 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,5 @@
 FROM golang:1.20
 
-RUN apt update && apt install -y python3-pip
 
 WORKDIR /srv/root
 
@@ -11,6 +10,9 @@ COPY . /srv/root
 
 RUN go build
 
+RUN apt update && apt install -y python3-pip
+RUN pip install --break-system-packages -i http://pypi2.akatsuki.gg/cmyui/dev akatsuki-cli
+
 EXPOSE 80
 
 CMD ["./scripts/start.sh"]
diff --git a/scripts/start.sh b/scripts/start.sh
index c7429b4..4f2d1d5 100755
--- a/scripts/start.sh
+++ b/scripts/start.sh
@@ -12,8 +12,6 @@ if [ -z "$APP_ENV" ]; then
 fi
 
 if [[ $PULL_SECRETS_FROM_VAULT -eq 1 ]]; then
-  # TODO: is there a better way to deal with this?
-  pip install --break-system-packages -i $PYPI_INDEX_URL akatsuki-cli
   # TODO: revert to $APP_ENV
   akatsuki vault get akatsuki-api production-k8s -o .env
   source .env