diff --git a/hosts/lab/dokuwiki.nix b/hosts/lab/dokuwiki.nix
index d94cb4b..ac8ca15 100644
--- a/hosts/lab/dokuwiki.nix
+++ b/hosts/lab/dokuwiki.nix
@@ -8,7 +8,7 @@
   };
 
   virtualisation.oci-containers.containers.dokuwiki = {
-    image = "lscr.io/linuxserver/dokuwiki:latest";
+    image = "lscr.io/linuxserver/dokuwiki:2025-05-14b-ls299";
     environment = {
       PUID = "1000";
       PGID = "1000";
@@ -20,4 +20,6 @@
     ];
     ports = [ "127.0.0.1:8070:80" ];
   };
+
+  systemd.services.podman-dokuwiki.serviceConfig.User = "lew";
 }
diff --git a/hosts/lab/foundry.nix b/hosts/lab/foundry.nix
index 2660860..162439c 100644
--- a/hosts/lab/foundry.nix
+++ b/hosts/lab/foundry.nix
@@ -8,13 +8,16 @@
   };
 
   virtualisation.oci-containers.containers.foundry = {
-    image = "node:22-slim";
+    image = "node:22.22.2-slim";
     cmd = [ "node" "main.js" "--dataPath=/data" ];
     workdir = "/app";
+    user = "1000:1000";
     volumes = [
       "/srv/foundry/app:/app:ro"
       "/srv/foundry/data:/data"
     ];
     ports = [ "127.0.0.1:30000:30000" ];
   };
+
+  systemd.services.podman-foundry.serviceConfig.User = "lew";
 }