diff --git a/docker/netbird/docker-compose.yml b/docker/netbird/docker-compose.yml
index 63cb819..58a46f3 100644
--- a/docker/netbird/docker-compose.yml
+++ b/docker/netbird/docker-compose.yml
@@ -23,7 +23,7 @@ services:
         max-size: "500m"
         max-file: "2"
   signal:
-    image: netbirdio/signal:0.37.1
+    image: netbirdio/signal:0.36.7
     restart: unless-stopped
     volumes:
       - netbird-signal:/var/lib/netbird
diff --git a/docker/nextcloud/Dockerfile b/docker/nextcloud/Dockerfile
index d088a52..3009267 100644
--- a/docker/nextcloud/Dockerfile
+++ b/docker/nextcloud/Dockerfile
@@ -1,4 +1,4 @@
-FROM nextcloud:31.0.0-apache
+FROM nextcloud:30.0.6-apache
 
 RUN set -ex; \
     \
diff --git a/docker/nextcloud/docker-compose.yml b/docker/nextcloud/docker-compose.yml
index 8016afd..bf1033a 100644
--- a/docker/nextcloud/docker-compose.yml
+++ b/docker/nextcloud/docker-compose.yml
@@ -14,7 +14,7 @@ services:
       - nextcloud
 
   nextcloud:
-    image: git.roboces.dev/catalin/fukuops:nextcloud-31.0.0
+    image: git.roboces.dev/catalin/fukuops:nextcloud-30.0.6
     volumes:
       - /mnt/nas1/legacy-storage/cloud/cloud/data:/var/www/html/data
       - /mnt/nas1/legacy-storage/cloud/cloud/config:/var/www/html/config
diff --git a/k8s/argo-apps/authentik.yaml b/k8s/argo-apps/authentik.yaml
index 23193d7..30929f6 100644
--- a/k8s/argo-apps/authentik.yaml
+++ b/k8s/argo-apps/authentik.yaml
@@ -12,7 +12,7 @@ spec:
   sources:
     - chart: authentik
       repoURL: https://charts.goauthentik.io/
-      targetRevision: 2025.2.*
+      targetRevision: 2024.12.*
       helm:
         valuesObject:
           authentik:
diff --git a/k8s/argo-apps/elastic.yaml b/k8s/argo-apps/elastic.yaml
index ad10f66..6fd7b9c 100644
--- a/k8s/argo-apps/elastic.yaml
+++ b/k8s/argo-apps/elastic.yaml
@@ -12,7 +12,7 @@ spec:
   sources:
     - chart: elasticsearch
       repoURL: registry-1.docker.io/bitnamicharts
-      targetRevision: 21.4.7
+      targetRevision: 21.4.6
       helm:
         valuesObject:
           service:
diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml
index fc11db5..6580bc0 100644
--- a/k8s/argo-apps/renovate.yaml
+++ b/k8s/argo-apps/renovate.yaml
@@ -13,7 +13,7 @@ spec:
   sources:
     - chart: renovate
       repoURL: https://docs.renovatebot.com/helm-charts
-      targetRevision: 39.185.*
+      targetRevision: 39.182.*
       helm:
         valuesObject:
           renovate:
diff --git a/tofu/authentik/main.tf b/tofu/authentik/main.tf
index 68f9f44..ead5247 100644
--- a/tofu/authentik/main.tf
+++ b/tofu/authentik/main.tf
@@ -27,11 +27,6 @@ resource "authentik_group" "admins" {
   is_superuser = true
 }
 
-resource "authentik_group" "arrs" {
-  name         = "arrs"
-  is_superuser = false
-}
-
 resource "authentik_group" "vpn" {
   name         = "vpn"
   is_superuser = false
@@ -121,7 +116,7 @@ module "sonarr" {
   source                       = "../modules/authentik-proxy"
   app_name                     = "Sonarr"
   app_slug                     = "sonarr"
-  app_access_group_id          = authentik_group.arrs.id
+  app_access_group_id          = authentik_group.admins.id
   app_url                      = "https://sonarr.fukurokuju.dev"
   internal_host                = "http://192.168.1.3:38013/"
   internal_host_ssl_validation = false
@@ -132,7 +127,7 @@ module "radarr" {
   source                       = "../modules/authentik-proxy"
   app_name                     = "Radarr"
   app_slug                     = "radarr"
-  app_access_group_id          = authentik_group.arrs.id
+  app_access_group_id          = authentik_group.admins.id
   app_url                      = "https://radarr.fukurokuju.dev"
   internal_host                = "http://192.168.1.3:38012/"
   internal_host_ssl_validation = false
@@ -143,7 +138,7 @@ module "lidarr" {
   source                       = "../modules/authentik-proxy"
   app_name                     = "Lidarr"
   app_slug                     = "lidarr"
-  app_access_group_id          = authentik_group.arrs.id
+  app_access_group_id          = authentik_group.admins.id
   app_url                      = "https://lidarr.fukurokuju.dev"
   internal_host                = "http://192.168.1.3:38010/"
   internal_host_ssl_validation = false
@@ -154,7 +149,7 @@ module "qbit" {
   source                       = "../modules/authentik-proxy"
   app_name                     = "qBit"
   app_slug                     = "qbit"
-  app_access_group_id          = authentik_group.arrs.id
+  app_access_group_id          = authentik_group.admins.id
   app_url                      = "https://qbit.fukurokuju.dev"
   internal_host                = "http://192.168.1.3:30024"
   internal_host_ssl_validation = false