diff --git a/docker-compose.yml b/docker-compose.yml
index 6299c81..c34ef1c 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,7 +11,7 @@ networks:
 
 services:
   watchtower:
-    image: containrrr/watchtower
+    image: containrrr/watchtower:0.3.11
     command: --label-enable --interval=30
     restart: on-failure
     volumes:
@@ -75,7 +75,7 @@ services:
       traefik.http.middlewares.api_auth.basicauth.users: ${HTTP_AUTH:?required}
 
   portainer:
-    image: portainer/portainer:latest
+    image: portainer/portainer:1.23.2
     restart: always
     ports:
       - 9000:9000
@@ -93,7 +93,7 @@ services:
       com.centurylinklabs.watchtower.enable: true
 
   node-exporter:
-    image: "prom/node-exporter"
+    image: prom/node-exporter:v0.18.1
     command:
       - --path.procfs=/host/proc
       - --path.sysfs=/host/sys
@@ -110,7 +110,7 @@ services:
       - com.centurylinklabs.watchtower.enable=true
 
   cadvisor:
-    image: "google/cadvisor"
+    image: gcr.io/google-containers/cadvisor:v0.36.0
     command:
       - --allow_dynamic_housekeeping=true
       - --global_housekeeping_interval=1m
@@ -134,7 +134,7 @@ services:
       com.centurylinklabs.watchtower.enable: true
 
   prometheus:
-    image: "prom/prometheus"
+    image: prom/prometheus:v2.18.1
     command:
       - --config.file=/etc/prometheus/prometheus.yml
       - --storage.tsdb.path=/prometheus
@@ -157,7 +157,7 @@ services:
       com.centurylinklabs.watchtower.enable: true
 
   grafana:
-    image: grafana/grafana
+    image: grafana/grafana:6.7.2
     restart: always
     user: "0"
     environment:
@@ -183,7 +183,7 @@ services:
       com.centurylinklabs.watchtower.enable: true
 
   loki:
-    image: grafana/loki:latest
+    image: grafana/loki:1.4.1
     ports:
       - 3100:3100
     entrypoint: /usr/bin/loki -config.file=/etc/loki/local-config.yaml