diff --git a/docker-compose.production.yml b/docker-compose.production.yml
index e4d118e..dd399ea 100644
--- a/docker-compose.production.yml
+++ b/docker-compose.production.yml
@@ -11,9 +11,11 @@ services:
       - agent_network
     deploy:
       mode: global
-    placement:
-      constraints:
-        - node.role == manager
+      update_config:
+        failure_action: rollback
+      placement:
+        constraints:
+          - node.role == manager
 
   portainer:
     command: "-H tcp://tasks.agent:9001 --tlsskipverify"