diff --git a/.env b/.env
index ad88751..c439b19 100644
--- a/.env
+++ b/.env
@@ -2,7 +2,7 @@ DATABASE_URL=postgres://postgres:changeme@db/windmill?sslmode=disable
 
 # For Enterprise Edition, use:
 # WM_IMAGE=ghcr.io/windmill-labs/windmill-ee:main
-WM_IMAGE=ghcr.io/windmill-labs/windmill:main
+WM_IMAGE=ghcr.io/windmill-labs/windmill:v1.5.3
 
 
 # To use another port than :80, setup the Caddyfile and the caddy section of the docker-compose to your needs: https://caddyserver.com/docs/getting-started
diff --git a/docker-compose.yml b/docker-compose.yml
index 70a4f57..f630fd2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,5 +1,3 @@
-version: "3.9"
-
 x-logging: &default-logging
   driver: "json-file"
   options:
@@ -39,7 +37,7 @@ services:
   windmill_server:
     image: ${WM_IMAGE}
     container_name: windmill_server
-    pull_policy: always
+    pull_policy: if_not_present
     deploy:
       replicas: 1
     restart: unless-stopped
@@ -77,7 +75,7 @@ services:
 
   windmill_worker:
     image: ${WM_IMAGE}
-    pull_policy: always
+    pull_policy: if_not_present
     deploy:
       replicas: 3
       resources:
@@ -104,7 +102,7 @@ services:
 
   windmill_worker_native:
     image: ${WM_IMAGE}
-    pull_policy: always
+    pull_policy: if_not_present
     deploy:
       replicas: 1
       resources:
@@ -128,8 +126,8 @@ services:
     logging: *default-logging
 
   windmill_extra:
-    image: ghcr.io/windmill-labs/windmill-extra:latest
-    pull_policy: always
+    image: ghcr.io/windmill-labs/windmill-extra:v1.5.3
+    pull_policy: if_not_present
     restart: unless-stopped
     expose:
       - 3001