diff --git a/README.md b/README.md
index 6ba3c67..a2f46e1 100644
--- a/README.md
+++ b/README.md
@@ -30,5 +30,15 @@ cd /var/www/wallabag/
 php bin/console wallabag:install --env=prod -n
 ```
 
+## Database migrations
+
+After Wallabag upgrades:
+
+```
+abra app run YOURDOMAIN app bash
+cd /var/www/wallabag/
+php bin/console doctrine:migrations:migrate --env=prod --no-interaction
+```
+
 [`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
 [`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik
diff --git a/compose.yml b/compose.yml
index 6f1e396..11fcd06 100644
--- a/compose.yml
+++ b/compose.yml
@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   app:
-    image: wallabag/wallabag:2.3.8
+    image: wallabag/wallabag:2.4.3
     environment:
       # Prevent database creation (handled by MySQL service)
       - POPULATE_DATABASE="false"
@@ -43,9 +43,9 @@ services:
         #- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=0.1.0+2.3.8"
+        - "coop-cloud.${STACK_NAME}.version=0.2.0+2.4.3"
   db:
-    image: mariadb
+    image: mariadb:10.5
     environment:
       - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/db_root_password
       - MYSQL_USER=wallabag
@@ -59,7 +59,7 @@ services:
       - db_password
       - db_root_password
   redis:
-    image: redis:alpine
+    image: redis:6.0.16-alpine
     networks:
       - internal
 volumes: