diff --git a/docker-compose.yml b/docker-compose.yml
index be6dbb1..5b3ec36 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -148,7 +148,7 @@ services:
   emby:
     container_name: emby
 #    image:  emby/embyserver:latest
-    image: emby/embyserver:4.9.0.29
+    image: emby/embyserver:4.9.0.30
     restart: always
     network_mode: host
     environment:
@@ -180,8 +180,8 @@ services:
 
   # fail2ban might need a better whitelist? (I had internal docker ips in my quick fudge as well?)
   mail:
-    image: docker.io/mailserver/docker-mailserver:latest
-    hostname: depaoli.id.au
+    image: docker.io/mailserver/docker-mailserver:14.0.0
+#    hostname: depaoli.id.au
     domainname: depaoli.id.au
     container_name: mail
     restart: always
@@ -271,7 +271,7 @@ services:
     restart: always
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
-#      - "last.commit.url=https://api.github.com/bitnami/containers/tree/main/bitnami/openldap/commits
+      - "last.commit.url=https://api.github.com/repos/bitnami/containers/commits?path=bitnami/openldap"
     environment:
       BITNAMI_DEBUG: "true"
       LDAP_ROOT: "dc=depaoli,dc=id,dc=au"
@@ -325,7 +325,6 @@ services:
       - ROUNDCUBEMAIL_SMTP_SERVER=ssl://depaoli.id.au
       - ROUNDCUBEMAIL_SMTP_PORT=465
 
-
   portainer:
     container_name: portainer
     image: portainer/portainer-ce:latest
@@ -579,7 +578,7 @@ services:
 
   bookdb_dev:
     container_name: bookdb_dev
-    image: postgres
+    image: postgres:latest
     restart: always
     environment:
       POSTGRES_USER: ddp
@@ -600,7 +599,7 @@ services:
 
   bookdb:
     container_name: bookdb
-    image: postgres:16
+    image: postgres:17
     restart: always
     environment:
       POSTGRES_USER: ddp
@@ -688,7 +687,7 @@ services:
 
   padb:
     container_name: padb
-    image: postgres:16
+    image: postgres:17
     restart: always
     # replace entrypoint to install cron and a cron job to backup users so we can rebuild the content from sqls
     entrypoint: /root/mara-init/entrypoint-wrapper.sh
@@ -715,8 +714,8 @@ services:
     build: 
       context: '/home/ddp/src/photoassistant'
       args:
-        PJM_UID: 500
-        PJM_GID: 500
+        # uid for ddp (for dev/container)
+        PA_ID: "1000"
     environment:
       ENV: "container"
     depends_on:
@@ -736,8 +735,8 @@ services:
     build: 
       context: '/home/ddp/src/photoassistant'
       args:
-        PJM_UID: 500
-        PJM_GID: 500
+        # uid for mythtv (for prod)
+        PA_ID: "500"
     environment:
       ENV: "production"
     depends_on: