diff --git a/hosts/stratus/containers/docker/actualbudget/default.nix b/hosts/stratus/containers/docker/actualbudget/default.nix
index ec59782..1f3f635 100644
--- a/hosts/stratus/containers/docker/actualbudget/default.nix
+++ b/hosts/stratus/containers/docker/actualbudget/default.nix
@@ -19,7 +19,7 @@ in
 
   virtualisation.oci-containers.containers = {
     ${serviceName} = {
-      image = "ghcr.io/actualbudget/actual-server@sha256:90a670b73ce539ca4bf70e3740756f106ec815d3933cabf2414ae2e26e031d65";
+      image = "ghcr.io/actualbudget/actual-server@sha256:0cf0300ed4905045ed87e8892c26fbd83cd08e8499bb81dc28deef6afeb162fb";
       volumes = [ "/data/${serviceName}:/data" ];
     };
 
diff --git a/hosts/stratus/containers/docker/default.nix b/hosts/stratus/containers/docker/default.nix
index 4b520ac..1b444bf 100644
--- a/hosts/stratus/containers/docker/default.nix
+++ b/hosts/stratus/containers/docker/default.nix
@@ -13,7 +13,7 @@ in
     containers = lib.mapAttrs' (
       name: _:
       lib.nameValuePair "tailscale-${name}" {
-        image = "ghcr.io/tailscale/tailscale@sha256:83a6faec34866f70914a7d241d6ca749e6914f08f4f9059d942e1c3088dc001b";
+        image = "ghcr.io/tailscale/tailscale@sha256:da35f0fbeb3037754049e3b079cb30c58c140576a50b54be107c0ff6ad0ec0e9";
         environment = {
           TS_STATE_DIR = "/var/lib/tailscale";
           TS_SERVE_CONFIG = "/config/tailscale-serve.json";
diff --git a/hosts/stratus/containers/docker/onlyoffice/default.nix b/hosts/stratus/containers/docker/onlyoffice/default.nix
index c52a704..30fd1f6 100644
--- a/hosts/stratus/containers/docker/onlyoffice/default.nix
+++ b/hosts/stratus/containers/docker/onlyoffice/default.nix
@@ -19,7 +19,7 @@ in
 
   virtualisation.oci-containers.containers = {
     ${serviceName} = {
-      image = "onlyoffice/documentserver@sha256:b9e3c35eab182d3de822a53b109b0f27070f6eacea3b1388b9c50d1182f638f2";
+      image = "onlyoffice/documentserver@sha256:3489a54c581414055dd9bfa3890435e5e6fc8c4ce0ffdd65cf3c7869f680cf81";
       environmentFiles = [
         # Contains "JWT_SECRET=<token>"
         config.sops.secrets."container/${serviceName}/jwt-secret".path
diff --git a/hosts/stratus/containers/docker/stirling-pdf/default.nix b/hosts/stratus/containers/docker/stirling-pdf/default.nix
index 0ee6762..bff8c3c 100644
--- a/hosts/stratus/containers/docker/stirling-pdf/default.nix
+++ b/hosts/stratus/containers/docker/stirling-pdf/default.nix
@@ -17,7 +17,7 @@ in
 {
   virtualisation.oci-containers.containers = {
     ${serviceName} = {
-      image = "frooodle/s-pdf@sha256:5b9c9443e6eb0fa23b39475d68741d80826249193df231d6859ecda0f0aedd8d";
+      image = "frooodle/s-pdf@sha256:2a4a1483cd9f84e6af6281d84839ed15bb02d3818f02edad780f59e1c9e22a49";
       environment = {
         LANGS = "de_DE";
         SYSTEM_SHOWUPDATE = "false";