diff --git a/stable/sonatype-nexus/Chart.yaml b/stable/sonatype-nexus/Chart.yaml
index 82da77ec33..625a1fc0b7 100644
--- a/stable/sonatype-nexus/Chart.yaml
+++ b/stable/sonatype-nexus/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: sonatype-nexus
-version: 1.21.2
-appVersion: 3.19.1-01
+version: 1.21.3
+appVersion: 3.20.1-01
 description: Sonatype Nexus is an open source repository manager
 keywords:
   - artifacts
diff --git a/stable/sonatype-nexus/values.yaml b/stable/sonatype-nexus/values.yaml
index 07d1b8e330..15c2d994a4 100644
--- a/stable/sonatype-nexus/values.yaml
+++ b/stable/sonatype-nexus/values.yaml
@@ -9,12 +9,14 @@ deploymentStrategy: {}
   # type: RollingUpdate
 
 nexus:
-  imageName: quay.io/travelaudience/docker-nexus
-  imageTag: 3.19.1
+  imageName: sonatype/nexus3
+  imageTag: 3.20.1
   imagePullPolicy: IfNotPresent
   env:
     - name: install4jAddVmParams
       value: "-Xms1200M -Xmx1200M -XX:MaxDirectMemorySize=2G -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap"
+    - name: NEXUS_SECURITY_RANDOMPASSWORD
+      value: "false"
   # nodeSelector:
   #   cloud.google.com/gke-nodepool: default-pool
   resources: {}
@@ -46,8 +48,8 @@ nexus:
   # loadBalancerSourceRanges:
   #   - 192.168.1.10/32
   # labels: {}
-  # securityContext:
-  #   fsGroup: 2000
+  securityContext:
+    fsGroup: 2000
   podAnnotations: {}
   livenessProbe:
     initialDelaySeconds: 30