diff --git a/defaults/main.yml b/defaults/main.yml
index a859a2d..712bbdc 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -2,6 +2,7 @@ path: /srv/{{ role_name }}
 
 authentik_override: {}
 authentik_defaults:
+  version: "latest"
   url: ""
   db_password: ""
   secret: ""
diff --git a/templates/compose.yml.j2 b/templates/compose.yml.j2
index 194fee5..6315e04 100644
--- a/templates/compose.yml.j2
+++ b/templates/compose.yml.j2
@@ -26,7 +26,7 @@ services:
       postgresql:
         condition: service_healthy
     env_file: ".env"
-    image: ghcr.io/goauthentik/server:2025.10.3
+    image: ghcr.io/goauthentik/server:{{ authentik.version }}
     networks:
       - proxy
       - internal
@@ -57,7 +57,7 @@ services:
       postgresql:
         condition: service_healthy
     env_file: ".env"
-    image: ghcr.io/goauthentik/server:2025.10.3
+    image: ghcr.io/goauthentik/server:{{ authentik.version }}
     networks:
       - internal
     restart: unless-stopped
@@ -71,7 +71,7 @@ services:
 
 {% if authentik.radius.enabled %}
   radius_outpost:
-    image: ghcr.io/goauthentik/radius:2025.10.3
+    image: ghcr.io/goauthentik/radius:{{ authentik.version }}
     networks:
       - internal
     ports: