diff --git a/docker-compose/httpd/docker-compose.yml.j2 b/docker-compose/httpd/docker-compose.yml.j2
index bd1de90e..f145e06a 100644
--- a/docker-compose/httpd/docker-compose.yml.j2
+++ b/docker-compose/httpd/docker-compose.yml.j2
@@ -2,7 +2,7 @@ version: '3'
 services:
   httpd-registry:
     container_name: "httpd-registry"
-    image: "registry.mgrote.net/httpd:master"
+    image: "registry.mgrote.net/httpd:master@sha256:4e99b75f28d06cc2fde76b9679119c7a757a2a80176ce5987898cc7f421f48f8"
     restart: always
     volumes:
       - uploads:/usr/local/apache2/htdocs/
diff --git a/docker-compose/nextcloud/docker-compose.yml.j2 b/docker-compose/nextcloud/docker-compose.yml.j2
index de155b83..d9381143 100644
--- a/docker-compose/nextcloud/docker-compose.yml.j2
+++ b/docker-compose/nextcloud/docker-compose.yml.j2
@@ -74,7 +74,7 @@ services:
 
 ######## Nextcloud ########
   nextcloud-app:
-    image: "nextcloud:28.0.2"
+    image: "nextcloud:28.0.2@sha256:0d231d59967d997141be8016c41df5e05f03137abbf741a8f0be2c0a8af80cf6"
     container_name: nextcloud-app
     restart: unless-stopped
     depends_on:
diff --git a/docker-compose/traefik/docker-compose.yml.j2 b/docker-compose/traefik/docker-compose.yml.j2
index 9dc77d2c..3855b459 100644
--- a/docker-compose/traefik/docker-compose.yml.j2
+++ b/docker-compose/traefik/docker-compose.yml.j2
@@ -3,7 +3,7 @@ services:
 ######## traefik ########
   traefik:
     container_name: traefik
-    image: "traefik:v3.0"
+    image: "traefik:v3.0@sha256:81a73de0d19b6d61eb1f1e413d48835fe3c412f5ed3d9750dc3dab5c93519445"
     restart: always
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
diff --git a/docker-compose/wiki/docker-compose.yml.j2 b/docker-compose/wiki/docker-compose.yml.j2
index 599214c9..c865a874 100644
--- a/docker-compose/wiki/docker-compose.yml.j2
+++ b/docker-compose/wiki/docker-compose.yml.j2
@@ -2,7 +2,7 @@ version: '3'
 services:
   wiki-webserver:
     container_name: wiki-webserver
-    image: "registry.mgrote.net/httpd:master"
+    image: "registry.mgrote.net/httpd:master@sha256:4e99b75f28d06cc2fde76b9679119c7a757a2a80176ce5987898cc7f421f48f8"
     restart: always
     networks:
       - traefik