diff --git a/kubenix-modules/media.nix b/kubenix-modules/media.nix
index 96016ae..6aad73e 100644
--- a/kubenix-modules/media.nix
+++ b/kubenix-modules/media.nix
@@ -68,7 +68,7 @@
 
             spec = {
               containers.jellyfin = {
-                image = "jellyfin/jellyfin:10.9.6";
+                image = "jellyfin/jellyfin:10.9.7";
                 envFrom = [{ configMapRef.name = "jellyfin-env"; }];
                 ports.web.containerPort = 8096;
                 imagePullPolicy = "Always";
@@ -128,6 +128,15 @@
             component = "transmission";
           };
 
+          strategy = {
+            type = "RollingUpdate";
+
+            rollingUpdate = {
+              maxSurge = 0;
+              maxUnavailable = 1;
+            };
+          };
+
           template = {
             metadata.labels = {
               app = "media";
@@ -136,8 +145,9 @@
 
             spec = {
               containers.transmission = {
-                image = "lscr.io/linuxserver/transmission:latest";
+                image = "lscr.io/linuxserver/transmission:4.0.6";
                 envFrom = [{ configMapRef.name = "transmission-env"; }];
+                imagePullPolicy = "Always";
 
                 ports = {
                   web.containerPort = 9091;
@@ -233,6 +243,15 @@
             component = "radarr";
           };
 
+          strategy = {
+            type = "RollingUpdate";
+
+            rollingUpdate = {
+              maxSurge = 0;
+              maxUnavailable = 1;
+            };
+          };
+
           template = {
             metadata.labels = {
               app = "media";
@@ -241,9 +260,10 @@
 
             spec = {
               containers.radarr = {
-                image = "lscr.io/linuxserver/radarr:latest";
+                image = "lscr.io/linuxserver/radarr:5.7.0";
                 envFrom = [{ configMapRef.name = "radarr-env"; }];
                 ports.web.containerPort = 7878;
+                imagePullPolicy = "Always";
 
                 volumeMounts = [
                   {
@@ -283,6 +303,15 @@
             component = "prowlarr";
           };
 
+          strategy = {
+            type = "RollingUpdate";
+
+            rollingUpdate = {
+              maxSurge = 0;
+              maxUnavailable = 1;
+            };
+          };
+
           template = {
             metadata.labels = {
               app = "media";
@@ -293,9 +322,10 @@
               volumes.config.persistentVolumeClaim.claimName = "prowlarr";
 
               containers.prowlarr = {
-                image = "lscr.io/linuxserver/prowlarr:latest";
+                image = "lscr.io/linuxserver/prowlarr:1.20.1";
                 envFrom = [{ configMapRef.name = "prowlarr-env"; }];
                 ports.web.containerPort = 9696;
+                imagePullPolicy = "Always";
 
                 volumeMounts = [{
                   name = "config";
@@ -324,6 +354,15 @@
             component = "sonarr";
           };
 
+          strategy = {
+            type = "RollingUpdate";
+
+            rollingUpdate = {
+              maxSurge = 0;
+              maxUnavailable = 1;
+            };
+          };
+
           template = {
             metadata.labels = {
               app = "media";
@@ -332,9 +371,10 @@
 
             spec = {
               containers.sonarr = {
-                image = "lscr.io/linuxserver/sonarr:latest";
+                image = "lscr.io/linuxserver/sonarr:4.0.6";
                 envFrom = [{ configMapRef.name = "sonarr-env"; }];
                 ports.web.containerPort = 8989;
+                imagePullPolicy = "Always";
 
                 volumeMounts = [
                   {
@@ -374,6 +414,15 @@
             component = "bazarr";
           };
 
+          strategy = {
+            type = "RollingUpdate";
+
+            rollingUpdate = {
+              maxSurge = 0;
+              maxUnavailable = 1;
+            };
+          };
+
           template = {
             metadata.labels = {
               app = "media";
@@ -382,9 +431,10 @@
 
             spec = {
               containers.bazarr = {
-                image = "lscr.io/linuxserver/bazarr:latest";
+                image = "lscr.io/linuxserver/bazarr:1.4.3";
                 envFrom = [{ configMapRef.name = "bazarr-env"; }];
                 ports.web.containerPort = 6767;
+                imagePullPolicy = "Always";
 
                 volumeMounts = [
                   {