diff --git a/webserver/docker_coturn/templates/docker-compose.yml b/webserver/docker_coturn/templates/docker-compose.yml
index 1ac93935465b4e47ce20061eec7e25188c00ed52..20e56a3735a87ee2140fa52f14fc84fe0fc0a4eb 100644
--- a/webserver/docker_coturn/templates/docker-compose.yml
+++ b/webserver/docker_coturn/templates/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3"
 services:
 
   coturn:
-    image: coturn/coturn:4.6.2
+    image: coturn/coturn:latest
     restart: always
     command:
       - turnserver
diff --git a/webserver/docker_dokuwiki/templates/docker-compose.yml b/webserver/docker_dokuwiki/templates/docker-compose.yml
index 5cef278a9f4c605e335f12b1948fd30ebd3df9f9..f7d425f9ac92b956f979a466a58b85f9bf039a49 100644
--- a/webserver/docker_dokuwiki/templates/docker-compose.yml
+++ b/webserver/docker_dokuwiki/templates/docker-compose.yml
@@ -11,6 +11,7 @@ services:
       - /srv/dokuwiki/data/:/var/www/html
       - /srv/dokuwiki/pdftemplate/:/var/www/html/lib/plugins/dw2pdf/tpl/warpzone/
     labels:
+      - com.centurylinklabs.watchtower.enable=false
       - traefik.enable=true
       - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
       - traefik.http.routers.{{ servicename }}.entrypoints=websecure
diff --git a/webserver/docker_gitlab/templates/docker-compose.yml b/webserver/docker_gitlab/templates/docker-compose.yml
index 735b93e62d2c827dfda5855cefa59e8c800be61f..6b623c7f18aaf70db3252bc1a9a9266f40cebd50 100644
--- a/webserver/docker_gitlab/templates/docker-compose.yml
+++ b/webserver/docker_gitlab/templates/docker-compose.yml
@@ -5,7 +5,7 @@ services:
 
   app:
 
-    image: gitlab/gitlab-ce:16.9.1-ce.0
+    image: gitlab/gitlab-ce:latest
     restart: always
     ports:
       - "444:22"
diff --git a/webserver/docker_hackmd/templates/docker-compose.yml b/webserver/docker_hackmd/templates/docker-compose.yml
index c92a449e0a808f1629324d2c505906dda1435de2..9cef21717d7832305484cbff709eb7880e2a5724 100644
--- a/webserver/docker_hackmd/templates/docker-compose.yml
+++ b/webserver/docker_hackmd/templates/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3"
 services:
 
   app:
-    image: quay.io/hedgedoc/hedgedoc:1.9.9-debian
+    image: quay.io/hedgedoc/hedgedoc:latest
     restart: always
     depends_on:
       - db
diff --git a/webserver/docker_icinga/templates/docker-compose.yml b/webserver/docker_icinga/templates/docker-compose.yml
index 55b22d6de35fed9def714a8ae85c64cb59d8d36a..e59e92b2c85733b2a6a4b060d82e789489fbac09 100644
--- a/webserver/docker_icinga/templates/docker-compose.yml
+++ b/webserver/docker_icinga/templates/docker-compose.yml
@@ -41,6 +41,7 @@ services:
       ICINGA2_FEATURE_GRAPHITE_PORT: 2003
       ICINGA2_FEATURE_DIRECTOR: 0
     labels:
+      - com.centurylinklabs.watchtower.enable=false
       - traefik.enable=true
       - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
       - traefik.http.routers.{{ servicename }}.entrypoints=websecure
diff --git a/webserver/docker_keycloak/templates/docker-compose.yml b/webserver/docker_keycloak/templates/docker-compose.yml
index b89a0449575cb6eaeb36c75f19986341c9adec25..e57b8b70345de5232c16c45c1241c7644b002d2e 100644
--- a/webserver/docker_keycloak/templates/docker-compose.yml
+++ b/webserver/docker_keycloak/templates/docker-compose.yml
@@ -25,6 +25,7 @@ services:
       DB_PASSWORD: "{{ postgres_user_pass }}"
       PROXY_ADDRESS_FORWARDING: "true"
     labels:
+      - com.centurylinklabs.watchtower.enable=false
       - traefik.enable=true
       - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
       - traefik.http.routers.{{ servicename }}.entrypoints=websecure
diff --git a/webserver/docker_matrix/templates/docker-compose.yml b/webserver/docker_matrix/templates/docker-compose.yml
index c843aeb4bbac429b5a060401ab10e19846320fb3..ea93fd0ebc9091b62b9c6669d74b48422d8ea6cd 100644
--- a/webserver/docker_matrix/templates/docker-compose.yml
+++ b/webserver/docker_matrix/templates/docker-compose.yml
@@ -13,7 +13,7 @@ services:
 
   db:
 
-    image: postgres:16.1
+    image: postgres:16
     restart: always
     volumes:
       - /srv/matrix/db:/var/lib/postgresql/data
@@ -27,7 +27,7 @@ services:
 
   synapse:
 
-    image: matrixdotorg/synapse:v1.98.0
+    image: matrixdotorg/synapse:latest
     restart: always
     cpu_count: "1"
     cpuset: "0"
@@ -63,6 +63,7 @@ services:
       - /srv/matrix/ma1sd-config/:/etc/ma1sd
       - /srv/matrix/ma1sd-data/:/var/ma1sd
     labels:
+      - com.centurylinklabs.watchtower.enable=false
       - traefik.enable=true
       - traefik.http.routers.{{ servicename }}-ma1sd.rule=((Host(`{{ domain }}`) && PathPrefix(`/_matrix/client/r0/login`)) || (Host(`{{ domain }}`) && PathPrefix(`/_matrix/identity`)))
       - traefik.http.routers.{{ servicename }}-ma1sd.entrypoints=websecure
diff --git a/webserver/docker_matterbridge/templates/docker-compose.yml b/webserver/docker_matterbridge/templates/docker-compose.yml
index abe9029f44063bfa1d07f9f78ba44d6eb4090b3b..a6de5dc7f788a1de0e8e2932b38a59ee3ff1bc9a 100644
--- a/webserver/docker_matterbridge/templates/docker-compose.yml
+++ b/webserver/docker_matterbridge/templates/docker-compose.yml
@@ -5,7 +5,7 @@ services:
 
   cw:
 
-    image: 42wim/matterbridge:1.26
+    image: 42wim/matterbridge:latest
     restart: always
     volumes:
       - /srv/matterbridge/etc/matterbridge_cw.toml:/matterbridge.toml:ro
@@ -16,7 +16,7 @@ services:
 
   wz:
 
-    image: 42wim/matterbridge:1.26
+    image: 42wim/matterbridge:latest
     restart: always
     volumes:
       - /srv/matterbridge/etc/matterbridge_wz.toml:/matterbridge.toml:ro
@@ -27,7 +27,7 @@ services:
 
   web:
 
-    image: nginx:1.25.3
+    image: nginx:latest
     restart: always
     volumes:
       - /srv/matterbridge/media/:/usr/share/nginx/html/matterbridge/:ro,z
diff --git a/webserver/docker_vpnserver/templates/docker-compose.yml b/webserver/docker_vpnserver/templates/docker-compose.yml
index 7e1d7a4c81ff97c33e26d64e4472f4255b2bdf58..2c6364cd5ac44d22ee6fa0fc0f4b5ba5f21f5f57 100644
--- a/webserver/docker_vpnserver/templates/docker-compose.yml
+++ b/webserver/docker_vpnserver/templates/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3"
 services:
 
   app:
-    image: ghcr.io/freifunkmuc/wg-access-server:v0.10.1
+    image: ghcr.io/freifunkmuc/wg-access-server:latest
     restart: always
     cap_add:
       - NET_ADMIN
diff --git a/webserver/docker_wordpress/templates/docker-compose.yml b/webserver/docker_wordpress/templates/docker-compose.yml
index bd06cf593ae32bb2a4796b9599d661889ebe1e0a..117d151d61820427e8be9f76d29fc542305c0d2c 100644
--- a/webserver/docker_wordpress/templates/docker-compose.yml
+++ b/webserver/docker_wordpress/templates/docker-compose.yml
@@ -5,7 +5,7 @@ services:
 
   db:
 
-    image: mariadb:11.2.2
+    image: mariadb:11
     restart: always
     volumes:
       - /srv/wordpress/db/:/var/lib/mysql
@@ -29,6 +29,7 @@ services:
       WORDPRESS_DB_USER: wordpress
       WORDPRESS_DB_PASSWORD: "{{ mysql_user_pass }}"
     labels:
+      - com.centurylinklabs.watchtower.enable=false
       - traefik.enable=true
       - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
       - traefik.http.routers.{{ servicename }}.entrypoints=websecure