diff --git a/ansible/roles/netbird-server/defaults/main.yml b/ansible/roles/netbird-server/defaults/main.yml
index f3d5f9ff..10de9b4b 100644
--- a/ansible/roles/netbird-server/defaults/main.yml
+++ b/ansible/roles/netbird-server/defaults/main.yml
@@ -3,6 +3,14 @@
 netbird_server_host: netbird.renner.uno
 netbird_server_user: root
 
+# Pinned image versions (was :latest — unpinned drift on the mesh control
+# plane). management/signal/relay/reverse-proxy share one release line;
+# dashboard versions independently. >=0.71 is required for IPv6 overlay
+# addressing. Bump deliberately and snapshot the VPS before applying — a
+# management major bump runs a store migration.
+netbird_version: "0.73.2"
+netbird_dashboard_version: "v2.80.0"
+
 # Authentik OIDC configuration
 netbird_auth_audience: "qrCjbsFeOO32kXOVwF8OrunzettalsMJ5GoOKJAR"
 netbird_auth_client_id: "qrCjbsFeOO32kXOVwF8OrunzettalsMJ5GoOKJAR"
diff --git a/ansible/roles/netbird-server/templates/docker-compose.yml.j2 b/ansible/roles/netbird-server/templates/docker-compose.yml.j2
index b065542d..8877fc78 100644
--- a/ansible/roles/netbird-server/templates/docker-compose.yml.j2
+++ b/ansible/roles/netbird-server/templates/docker-compose.yml.j2
@@ -50,7 +50,7 @@ services:
 
   # UI Dashboard
   dashboard:
-    image: netbirdio/dashboard:latest
+    image: netbirdio/dashboard:{{ netbird_dashboard_version }}
     container_name: netbird-dashboard
     restart: unless-stopped
     depends_on:
@@ -85,7 +85,7 @@ services:
 
   # Signal Server
   signal:
-    image: netbirdio/signal:latest
+    image: netbirdio/signal:{{ netbird_version }}
     container_name: netbird-signal
     restart: unless-stopped
     depends_on:
@@ -119,7 +119,7 @@ services:
 
   # Relay Server
   relay:
-    image: netbirdio/relay:latest
+    image: netbirdio/relay:{{ netbird_version }}
     container_name: netbird-relay
     restart: unless-stopped
     environment:
@@ -144,7 +144,7 @@ services:
 
   # Management Server
   management:
-    image: netbirdio/management:latest
+    image: netbirdio/management:{{ netbird_version }}
     container_name: netbird-management
     restart: unless-stopped
     depends_on:
@@ -214,7 +214,7 @@ services:
 
   # Reverse Proxy Service (per docs.netbird.io/selfhosted/migration/enable-reverse-proxy)
   proxy:
-    image: netbirdio/reverse-proxy:latest
+    image: netbirdio/reverse-proxy:{{ netbird_version }}
     container_name: netbird-proxy
     restart: unless-stopped
     networks: