diff --git a/infrastructure/docker-compose.yml b/infrastructure/docker-compose.yml
index 47ad009..3039f57 100644
--- a/infrastructure/docker-compose.yml
+++ b/infrastructure/docker-compose.yml
@@ -3,6 +3,7 @@ services:
   # Runs database migrations once before the API and worker start.
   migrate:
     image: git.devils.zone/devil/youtube-studio-flow-backend:${IMAGE_TAG:-latest}
+    pull_policy: always
     command: npx prisma migrate deploy
     restart: "no"
     environment:
@@ -15,6 +16,7 @@ services:
 
   api:
     image: git.devils.zone/devil/youtube-studio-flow-backend:${IMAGE_TAG:-latest}
+    pull_policy: always
     restart: unless-stopped
     environment:
       NODE_ENV: production
@@ -54,6 +56,7 @@ services:
 
   worker:
     image: git.devils.zone/devil/youtube-studio-flow-backend:${IMAGE_TAG:-latest}
+    pull_policy: always
     restart: unless-stopped
     command: node dist/worker.js
     environment:
@@ -82,6 +85,7 @@ services:
     # Dockerfile default, /api/v1) — the relative path works because Traefik serves both
     # frontend and API on the same domain.
     image: git.devils.zone/devil/youtube-studio-flow-frontend:${IMAGE_TAG:-latest}
+    pull_policy: always
     restart: unless-stopped
     labels:
       - "traefik.enable=true"