diff --git a/docker-compose/httpd/docker-compose.yml.j2 b/docker-compose/httpd/docker-compose.yml.j2
index 5db32e3d..275bdbb8 100644
--- a/docker-compose/httpd/docker-compose.yml.j2
+++ b/docker-compose/httpd/docker-compose.yml.j2
@@ -2,7 +2,7 @@ version: '3'
 services:
   httpd-registry:
     container_name: "httpd-registry"
-    image: httpd:2.4.58
+    image: httpd:2.4.57
     restart: always
     volumes:
       - uploads:/usr/local/apache2/htdocs/
diff --git a/docker-compose/miniflux/docker-compose.yml.j2 b/docker-compose/miniflux/docker-compose.yml.j2
index 567af320..fdce824e 100644
--- a/docker-compose/miniflux/docker-compose.yml.j2
+++ b/docker-compose/miniflux/docker-compose.yml.j2
@@ -36,7 +36,7 @@ services:
 ######## PostGreSQL ########
   db:
     container_name: "mf-db"
-    image: postgres:13
+    image: postgres:13.12:13.12
     restart: always
     environment:
       POSTGRES_USER: miniflux
diff --git a/docker-compose/nextcloud/docker-compose.yml.j2 b/docker-compose/nextcloud/docker-compose.yml.j2
index 10f8de18..918d2890 100644
--- a/docker-compose/nextcloud/docker-compose.yml.j2
+++ b/docker-compose/nextcloud/docker-compose.yml.j2
@@ -2,7 +2,7 @@ version: '3.3'
 services:
 ######## Datenbank ########
   nextcloud-db:
-    image: mariadb:10
+    image: mariadb:10.6.15
     container_name: nextcloud-db
     command: --transaction-isolation=READ-COMMITTED --log-bin=ROW --innodb_read_only_compressed=OFF
     restart: unless-stopped
@@ -30,7 +30,7 @@ services:
 
 ######## Redis ########
   nextcloud-redis:
-    image: redis:7-alpine
+    image: redis:70.15
     container_name: nextcloud-redis
     hostname: nextcloud-redis
     networks:
@@ -59,7 +59,7 @@ services:
 
 ######## Nextcloud ########
   nextcloud-app:
-    image: nextcloud:27
+    image: nextcloud:27.1.5
     container_name: nextcloud-app
     restart: unless-stopped
     depends_on:
diff --git a/docker-compose/photoprism/docker-compose.yml.j2 b/docker-compose/photoprism/docker-compose.yml.j2
index 401a8d74..dca4ed66 100644
--- a/docker-compose/photoprism/docker-compose.yml.j2
+++ b/docker-compose/photoprism/docker-compose.yml.j2
@@ -66,7 +66,7 @@ services:
       com.centurylinklabs.watchtower.depends-on: photoprism-db
 
   mariadb:
-    image: mariadb:10
+    image: mariadb:10.6.15:10
     container_name: photoprism-db
     restart: always
     security_opt:
diff --git a/docker-compose/registry/docker-compose.yml.j2 b/docker-compose/registry/docker-compose.yml.j2
index 3b793bf1..f72add59 100644
--- a/docker-compose/registry/docker-compose.yml.j2
+++ b/docker-compose/registry/docker-compose.yml.j2
@@ -3,7 +3,7 @@ services:
   oci-registry:
     restart: always
     container_name: oci-registry
-    image: registry:2
+    image: registry:2.8.2
     volumes:
       - oci:/var/lib/registry
       - ./htpasswd:/auth/htpasswd
@@ -51,7 +51,7 @@ services:
     # docker pull registry.mgrote.net/myfirstimage
 
   oci-registry-redis:
-    image: redis:7
+    image: redis:7.0.15
     container_name: oci-registry-redis
     networks:
       - intern
diff --git a/docker-compose/traefik/docker-compose.yml.j2 b/docker-compose/traefik/docker-compose.yml.j2
index 060b8ac1..33da9700 100644
--- a/docker-compose/traefik/docker-compose.yml.j2
+++ b/docker-compose/traefik/docker-compose.yml.j2
@@ -3,7 +3,7 @@ services:
 ######## traefik ########
   traefik:
     container_name: traefik
-    image: traefik:latest
+    image: traefik:2.10
     restart: always
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -25,7 +25,7 @@ services:
 ######## nforwardauth ########
   nforwardauth:
     restart: always
-    image: nosduco/nforwardauth:v1
+    image: nosduco/nforwardauth:v1.3.4
     container_name: traefik-nforwardauth
     environment:
       TOKEN_SECRET: {{ lookup('keepass', 'nforwardauth_token_secret', 'password') }}
diff --git a/docker-compose/unifi-network-application/docker-compose.yml.j2 b/docker-compose/unifi-network-application/docker-compose.yml.j2
index ae3b8839..c21d3f43 100644
--- a/docker-compose/unifi-network-application/docker-compose.yml.j2
+++ b/docker-compose/unifi-network-application/docker-compose.yml.j2
@@ -2,7 +2,7 @@
 version: "2.1"
 services:
   unifi-network-application:
-    image: lscr.io/linuxserver/unifi-network-application:latest
+    image: lscr.io/linuxserver/unifi-network-application:8.0.28-ls27
     container_name: unifi-network-application
     environment:
       PUID: 1000
@@ -41,7 +41,7 @@ services:
     # 1. mongo
     # 2. db.getSiblingDB("unifidb").createUser({user: "unifiuser", pwd: "GEHEIM", roles: [{role: "dbOwner", db: "unifidb"}, {role: "dbOwner", db: "unifidb_stat"}]});
     # https://discourse.linuxserver.io/t/cant-connect-to-mongodb-for-unifi-network-application/8166
-    image: docker.io/mongo:4
+    image: docker.io/mongo:6.0.13
     container_name: unifi-db
     volumes:
       - db-data:/data/db
diff --git a/docker-compose/watchtower/docker-compose.yml.j2 b/docker-compose/watchtower/docker-compose.yml.j2
index ca18bacd..5033089e 100644
--- a/docker-compose/watchtower/docker-compose.yml.j2
+++ b/docker-compose/watchtower/docker-compose.yml.j2
@@ -3,7 +3,7 @@ services:
   watchtower:
     restart: always
     container_name: watchtower
-    image: containrrr/watchtower@sha256:6dd50763bbd632a83cb154d5451700530d1e44200b268a4e9488fefdfcf2b038
+    image: containrrr/watchtower:1.7.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
diff --git a/docker-compose/wiki/docker-compose.yml.j2 b/docker-compose/wiki/docker-compose.yml.j2
index 004e60d4..20fb7683 100644
--- a/docker-compose/wiki/docker-compose.yml.j2
+++ b/docker-compose/wiki/docker-compose.yml.j2
@@ -2,7 +2,7 @@ version: '3'
 services:
   wiki-webserver:
     container_name: wiki-webserver
-    image: httpd:2.4@sha256:ba846154ade27292d216cce2d21f1c7e589f3b66a4a643bff0cdd348efd17aa3
+    image: httpd:2.4.57
     restart: always
     networks:
       - traefik
diff --git a/friedhof/lldap/docker-compose.yml.j2 b/friedhof/lldap/docker-compose.yml.j2
index a517a572..62996c09 100644
--- a/friedhof/lldap/docker-compose.yml.j2
+++ b/friedhof/lldap/docker-compose.yml.j2
@@ -42,7 +42,7 @@ services:
       - com.centurylinklabs.watchtower.depends-on=lldap-db
 ######## DB ########
   lldap-db:
-    image: mariadb:10@sha256:692856b1f36a6e824ff8b8e78929643c90faa5f0931d74425eed52b09e8ac37b
+    image: mariadb:10.6.15:10
     container_name: lldap-db
     restart: always
     volumes: