diff --git a/Dockerfile b/Dockerfile
index 7b33428..565c16d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,12 @@
-# using tag debian:buster-slim to automatically receive updates on buster
-# assuming debian:buster-slim is stable enough, so no breaking changes
+# using tag debian:bullseye-slim to automatically receive updates on bullseye
+# assuming debian:bullseye-slim is stable enough, so no breaking changes
 
-FROM debian:buster-slim as builder
+FROM debian:bullseye-slim as builder
 LABEL maintainer="PDOK dev <https://github.com/PDOK/lighttpd-docker/issues>"
 
 ENV DEBIAN_FRONTEND noninteractive
 ENV TZ Europe/Amsterdam
-ENV LIGHTTPD_VERSION=1.4.65
+ENV LIGHTTPD_VERSION=1.4.67
 
 # https://redmine.lighttpd.net/projects/lighttpd/wiki/DevelGit
 # hadolint ignore=DL3008
@@ -17,7 +17,7 @@ RUN apt-get -y update \
   ca-certificates \
   git \
   libbz2-dev \
-  liblua5.2-dev \
+  liblua5.4-dev \
   libpcre2-dev \
   libssl-dev \
   libtool \
@@ -39,7 +39,7 @@ RUN ./autogen.sh \
   && make \
   && make install
 
-FROM debian:buster-slim as service
+FROM debian:bullseye-slim as service
 LABEL maintainer="PDOK dev <https://github.com/PDOK/lighttpd-docker/issues>"
 
 RUN useradd --no-log-init -U -r www
@@ -55,7 +55,7 @@ RUN apt-get -y update \
   && apt-get install -y --no-install-recommends \
   ca-certificates \
   libcap2-bin \
-  liblua5.2-0 \
+  liblua5.4-0 \
   wget \
   && rm -rf /var/lib/apt/lists/*
 
diff --git a/README.md b/README.md
index cef6043..0e2b91b 100644
--- a/README.md
+++ b/README.md
@@ -24,8 +24,7 @@ The image comes with a default, overridable [`lighttdp.conf`](config/lighttpd.co
 - `mod_expire`: Sets Cache-Control headers on files with hashed filenames like `index.561ecd9f.css`
 - `mod_deflate`: Output compression on html, text, css, javascript and xml files, the compressed files are stored in a cache directory
 
-When running this image on Kubernetes and serving out very large files that will be compressed, ensure that the cache directory has it's own volume mount. For most webapps this will not be necessary. 
-
+When running this image on Kubernetes and serving out very large files that will be compressed, ensure that the cache directory has it's own volume mount. For most webapps this will not be necessary.
 
 ## What will it do