diff --git a/.forgejo/workflows/cd.yml b/.forgejo/workflows/cd.yml
index 2aa3626..8e92ebc 100644
--- a/.forgejo/workflows/cd.yml
+++ b/.forgejo/workflows/cd.yml
@@ -22,5 +22,5 @@ jobs:
           path: book/
       - name: Deploy
         run: |
-          nix shell nixpkgs#rsync --command rsync -av --delete book/ /srv/www/binning.net/
+          nix shell nixpkgs#rsync --command rsync -av --delete --filter='protect assets/' book/ /srv/www/binning.net/
           printf "✓ Local deployment complete!\n"
\ No newline at end of file
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 2610ffa..fffced4 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -31,5 +31,5 @@ jobs:
           path: book/
       - name: Deploy
         run: |
-          nix shell nixpkgs#rsync --command rsync -av --delete book/ /srv/www/binning.net/
+          nix shell nixpkgs#rsync --command rsync -av --delete --filter='protect assets/' book/ /srv/www/binning.net/
           printf "✓ Local deployment complete!\n"
\ No newline at end of file
diff --git a/.forgejo/workflows/nightly.yml b/.forgejo/workflows/nightly.yml
index 90477da..827108b 100644
--- a/.forgejo/workflows/nightly.yml
+++ b/.forgejo/workflows/nightly.yml
@@ -36,5 +36,5 @@ jobs:
           path: book/
       - name: Deploy
         run: |
-          nix shell nixpkgs#rsync --command rsync -av --delete book/ /srv/www/binning.net/
+          nix shell nixpkgs#rsync --command rsync -av --delete --filter='protect assets/' book/ /srv/www/binning.net/
           printf "✓ Local deployment complete!\n"
diff --git a/.gitignore b/.gitignore
index d8fcb3e..e1eee3f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 # the build directory of mdbook
 book/
 *.jpg
-*.png
\ No newline at end of file
+*.png
+src/drafts/journal
\ No newline at end of file
diff --git a/.gitmodules b/.gitmodules
index 5ed5f5c..f5d1efb 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,3 +1,3 @@
 [submodule "src/private"]
 	path = src/private
-	url = https://forgejo.binning.net/www/private
+	url = forgejo@forgejo.binning.net:/www/private.git
diff --git a/deploy.sh b/deploy.sh
index bb8283c..1a0127f 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -15,7 +15,7 @@ fi
 printf "Deploying website files...\n"
 ssh ${REMOTE_USER}@${REMOTE_HOST} "mkdir -p /tmp/blog-deploy"
 rsync -avz --delete blog/ ${REMOTE_USER}@${REMOTE_HOST}:/tmp/blog-deploy/
-ssh ${REMOTE_USER}@${REMOTE_HOST} "sudo rsync -avz --delete /tmp/blog-deploy/ ${REMOTE_PATH}/ && \
+ssh ${REMOTE_USER}@${REMOTE_HOST} "sudo rsync -avz --delete --filter='protect assets/' /tmp/blog-deploy/ ${REMOTE_PATH}/ && \
     sudo chown -R nginx:nginx ${REMOTE_PATH}/ && \
     printf 'Content deployed.\n'"
 
diff --git a/src/README.md b/src/README.md
index 2dd2da6..d24aa48 100644
--- a/src/README.md
+++ b/src/README.md
@@ -2,7 +2,7 @@
 
 Welcome to my personal website, blog, and landing page for other self-hosted software. This website serves as a space to share musings, stories, and chronicles, about all of those things.
 
-![cover photo](cover-photo.jpg)
+![cover photo](/assets/cover-photo.jpg)
 
 ## About
 
diff --git a/src/private b/src/private
index 28cfe76..b9a3514 160000
--- a/src/private
+++ b/src/private
@@ -1 +1 @@
-Subproject commit 28cfe7618cc6babe24b12de6620e066af402e4e9
+Subproject commit b9a3514cf48badcb2165d7e8473217cbd6a7f2f2