diff --git a/docker-compose.yml b/docker-compose.yml
index ba11903..89886dd 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -330,7 +330,7 @@ services:
 
   portainer:
     container_name: portainer
-    image: portainer/portainer
+    image: portainer/portainer-ce:latest
     restart: unless-stopped
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
@@ -343,6 +343,7 @@ services:
       - "traefik.http.middlewares.stripprefix-portainer.stripprefix.prefixes=/portainer"
       - "traefik.http.routers.portainer.middlewares=stripprefix-portainer@docker"
       - "traefik.http.routers.portainer.entrypoints=web"
+      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
 
   plex:
     container_name: plex
@@ -381,7 +382,6 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.hass.rule=Host(`hass.depaoli.id.au`)"
       - "traefik.http.routers.hass.tls=true"
-      - "traefik.http.routers.hass.tls.options=tls12@file"
       - "traefik.http.routers.hass.entrypoints=secureweb"
     ports:
       - "8123:8123"
@@ -633,7 +633,6 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.bitwarden_rs.rule=Host(`bw.depaoli.id.au`) || Host(`ddphome.asuscomm.com`)"
       - "traefik.http.routers.bitwarden_rs.tls=true"
-      - "traefik.http.routers.bitwarden_rs.tls.options=tls12@file"
       - "traefik.http.routers.bitwarden_rs.entrypoints=secureweb"
 
   # auto-update docker images