diff --git a/roles/gitea/defaults/main.yml b/roles/gitea/defaults/main.yml
index 12291e7..642f128 100644
--- a/roles/gitea/defaults/main.yml
+++ b/roles/gitea/defaults/main.yml
@@ -1,9 +1,9 @@
 ---
 # Gitea version
-gitea_version: "1.22"
+gitea_version: "latest"
 
 # Network configuration
-gitea_port: 3000
+gitea_port: 3100
 
 # Container image
 gitea_image: gitea/gitea
diff --git a/roles/gitea/tasks/main.yml b/roles/gitea/tasks/main.yml
index 59640dd..85de3d0 100644
--- a/roles/gitea/tasks/main.yml
+++ b/roles/gitea/tasks/main.yml
@@ -79,6 +79,13 @@
     group: "{{ ansible_user }}"
     mode: "0755"
 
+- name: Pull Gitea container image
+  ansible.builtin.command: "podman pull {{ gitea_image }}:{{ gitea_version }}"
+  changed_when: pull_result.stdout is search('Writing manifest')
+  register: pull_result
+  become: false
+  become_user: "{{ ansible_user }}"
+
 - name: Deploy Kubernetes YAML for Gitea
   ansible.builtin.template:
     src: gitea.yaml.j2
diff --git a/roles/immich/tasks/main.yml b/roles/immich/tasks/main.yml
index 861b483..c50988c 100644
--- a/roles/immich/tasks/main.yml
+++ b/roles/immich/tasks/main.yml
@@ -86,6 +86,16 @@
   loop:
     - "{{ immich_upload_location }}"
 
+- name: Pull Immich container images
+  ansible.builtin.command: "podman pull {{ item }}"
+  loop:
+    - "{{ immich_server_image }}:{{ immich_version }}"
+    - "{{ immich_ml_image }}:{{ immich_version }}"
+  changed_when: pull_result.stdout is search('Writing manifest')
+  register: pull_result
+  become: false
+  become_user: "{{ ansible_user }}"
+
 - name: Deploy Kubernetes YAML for Immich
   ansible.builtin.template:
     src: immich.yaml.j2
diff --git a/roles/ntfy/defaults/main.yml b/roles/ntfy/defaults/main.yml
index 157539e..8d834e8 100644
--- a/roles/ntfy/defaults/main.yml
+++ b/roles/ntfy/defaults/main.yml
@@ -12,7 +12,7 @@ ntfy_admin_user: admin
 # ntfy_admin_password: ""  # Intentionally undefined - role will fail if not set
 
 # Network configuration
-ntfy_port: 8080
+ntfy_port: 8090
 
 # Container image
 ntfy_image: binwiederhier/ntfy
diff --git a/roles/ntfy/tasks/main.yml b/roles/ntfy/tasks/main.yml
index 34f9db1..7d0e0fc 100644
--- a/roles/ntfy/tasks/main.yml
+++ b/roles/ntfy/tasks/main.yml
@@ -37,6 +37,13 @@
     mode: "0644"
   notify: Restart ntfy
 
+- name: Pull ntfy container image
+  ansible.builtin.command: "podman pull {{ ntfy_image }}:{{ ntfy_version }}"
+  changed_when: pull_result.stdout is search('Writing manifest')
+  register: pull_result
+  become: false
+  become_user: "{{ ansible_user }}"
+
 - name: Deploy Kubernetes YAML for ntfy
   ansible.builtin.template:
     src: ntfy.yaml.j2
diff --git a/roles/uptime_kuma/defaults/main.yml b/roles/uptime_kuma/defaults/main.yml
index b15e673..739c4bb 100644
--- a/roles/uptime_kuma/defaults/main.yml
+++ b/roles/uptime_kuma/defaults/main.yml
@@ -7,7 +7,7 @@ uptime_kuma_version: "2"
 uptime_kuma_data_dir: "{{ podman_projects_dir }}/uptime-kuma/data"
 
 # Network configuration
-uptime_kuma_port: 3001
+uptime_kuma_port: 3300
 
 # Container image
 uptime_kuma_image: louislam/uptime-kuma
diff --git a/roles/uptime_kuma/tasks/main.yml b/roles/uptime_kuma/tasks/main.yml
index 42aba67..1063194 100644
--- a/roles/uptime_kuma/tasks/main.yml
+++ b/roles/uptime_kuma/tasks/main.yml
@@ -15,6 +15,13 @@
     group: "{{ ansible_user }}"
     mode: "0755"
 
+- name: Pull Uptime Kuma container image
+  ansible.builtin.command: "podman pull {{ uptime_kuma_image }}:{{ uptime_kuma_version }}"
+  changed_when: pull_result.stdout is search('Writing manifest')
+  register: pull_result
+  become: false
+  become_user: "{{ ansible_user }}"
+
 - name: Deploy Kubernetes YAML for uptime-kuma
   ansible.builtin.template:
     src: uptime-kuma.yaml.j2