diff --git a/.env.production b/.env.production
index 6e98582..b75a131 100644
--- a/.env.production
+++ b/.env.production
@@ -1,3 +1,3 @@
 PUBLIC_RELAY_SCHEME="https"
 PUBLIC_RELAY_HOST="relay.quic.video"
-PUBLIC_DEMO_TOKEN=""
+PUBLIC_DEMO_TOKEN="eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwdWIiOm51bGwsInB1YiEiOm51bGwsInN1YiI6IiIsImV4cCI6bnVsbCwiaWF0IjpudWxsfQ.2BBh_PuO9o5--ZL8RQfc8T2nH__1QIr7E2RPa6Jq90A"
diff --git a/infra/input.tf b/infra/input.tf
index 6ef878e..a39ed63 100644
--- a/infra/input.tf
+++ b/infra/input.tf
@@ -20,12 +20,12 @@ variable "domain" {
 
 variable "docker_relay" {
   description = "Docker image for moq-relay"
-  default     = "docker.io/kixelated/moq-relay:0.7.1"
+  default     = "docker.io/kixelated/moq-relay:latest"
 }
 
 variable "docker_hang" {
   description = "Docker image for hang"
-  default     = "docker.io/kixelated/hang:0.3.0"
+  default     = "docker.io/kixelated/hang:latest"
 }
 
 # A key generated using moq-token generate
diff --git a/src/components/watch.tsx b/src/components/watch.tsx
index f195669..e112692 100644
--- a/src/components/watch.tsx
+++ b/src/components/watch.tsx
@@ -6,7 +6,7 @@ export default function (props: { name: string; token?: string }) {
 	// The signed token is only needed for the demo/ prefix just to prevent abuse.
 	// All other broadcasts go to anon/ which is super easy to spoof.
 	const url = new URL(
-		`${import.meta.env.PUBLIC_RELAY_SCHEME}://${import.meta.env.PUBLIC_RELAY_HOST}/${props.token ? `demo/${props.token}` : `${props.name}.hang`}`,
+		`${import.meta.env.PUBLIC_RELAY_SCHEME}://${import.meta.env.PUBLIC_RELAY_HOST}/${props.token ? `demo/${props.token}.jwt` : `${props.name}.hang`}`,
 	);
 	const canvas = (
 		<canvas style={{ "max-width": "100%", height: "auto", margin: "0 auto", "border-radius": "1rem" }} />