diff --git a/apps/cloud/affine.yaml b/apps/cloud/affine.yaml
index 4a60b9d..84d508a 100644
--- a/apps/cloud/affine.yaml
+++ b/apps/cloud/affine.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: affine
-          image: ghcr.io/toeverything/affine:stable
+          image: ghcr.io/toeverything/affine:0.27.4
           imagePullPolicy: Always
           command:
             [
diff --git a/apps/default/vaultwarden.yaml b/apps/default/vaultwarden.yaml
index f7162fc..077b40e 100644
--- a/apps/default/vaultwarden.yaml
+++ b/apps/default/vaultwarden.yaml
@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: vaultwarden
-          image: vaultwarden/server:latest
+          image: vaultwarden/server:1.37.2
           imagePullPolicy: Always
           env:
             - name: DOMAIN
diff --git a/apps/dns/adguard-sync.yaml b/apps/dns/adguard-sync.yaml
index fd9e792..1a5b104 100644
--- a/apps/dns/adguard-sync.yaml
+++ b/apps/dns/adguard-sync.yaml
@@ -32,7 +32,7 @@ spec:
     spec:
       containers:
         - name: adguardsync
-          image: ghcr.io/bakito/adguardhome-sync:latest
+          image: ghcr.io/bakito/adguardhome-sync:v0.9.2
           imagePullPolicy: Always
           ports:
             - containerPort: 8080
diff --git a/apps/dns/adguard.yaml b/apps/dns/adguard.yaml
index dcde429..9691ea2 100644
--- a/apps/dns/adguard.yaml
+++ b/apps/dns/adguard.yaml
@@ -42,7 +42,7 @@ spec:
                       - arm64
       containers:
         - name: adguardhome
-          image: adguard/adguardhome:latest
+          image: adguard/adguardhome:v0.107.79
           imagePullPolicy: Always
           ports:
             - containerPort: 53
diff --git a/apps/infra/wg-easy.yaml b/apps/infra/wg-easy.yaml
index 53bdbc4..28bcc62 100644
--- a/apps/infra/wg-easy.yaml
+++ b/apps/infra/wg-easy.yaml
@@ -42,7 +42,7 @@ spec:
               weight: 100
       containers:
         - name: wg-easy
-          image: ghcr.io/wg-easy/wg-easy:latest
+          image: ghcr.io/wg-easy/wg-easy:14@sha256:5f26407fd2ede54df76d63304ef184576a6c1bb73f934a58a11abdd852fab549
           imagePullPolicy: Always
           ports:
             - containerPort: 51820