diff --git a/.secrets-baseline b/.secrets-baseline
index 7555cef..af31148 100644
--- a/.secrets-baseline
+++ b/.secrets-baseline
@@ -200,7 +200,7 @@
         "filename": "core/syslogng.nomad",
         "hashed_secret": "298b5925fe7c7458cb8a12a74621fdedafea5ad6",
         "is_verified": false,
-        "line_number": 159,
+        "line_number": 165,
         "is_secret": false
       },
       {
@@ -208,10 +208,10 @@
         "filename": "core/syslogng.nomad",
         "hashed_secret": "3a1cec2d3c3de7e4da4d99c6731ca696c24b72b4",
         "is_verified": false,
-        "line_number": 159,
+        "line_number": 165,
         "is_secret": false
       }
     ]
   },
-  "generated_at": "2022-11-11T21:26:53Z"
+  "generated_at": "2023-01-13T23:47:42Z"
 }
diff --git a/core/metrics/exporters.nomad b/core/metrics/exporters.nomad
index e9f7068..9cbd70f 100644
--- a/core/metrics/exporters.nomad
+++ b/core/metrics/exporters.nomad
@@ -54,8 +54,14 @@ job "metrics" {
     task "promtail" {
       driver = "docker"
 
+      meta = {
+        "diun.sort_tags" = "semver"
+        "diun.watch_repo" = true
+        "diun.include_tags" = "^[0-9]+\\.[0-9]+\\.[0-9]+"
+      }
+
       config {
-        image = "grafana/promtail:2.2.1"
+        image = "grafana/promtail:2.7.1"
         args = ["-config.file=/etc/promtail/promtail.yml"]
         ports = ["promtail"]
 
diff --git a/core/syslogng.nomad b/core/syslogng.nomad
index ac38e0b..a5918aa 100644
--- a/core/syslogng.nomad
+++ b/core/syslogng.nomad
@@ -46,8 +46,14 @@ job "syslogng" {
     task "promtail" {
       driver = "docker"
 
+      meta = {
+        "diun.sort_tags" = "semver"
+        "diun.watch_repo" = true
+        "diun.include_tags" = "^[0-9]+\\.[0-9]+\\.[0-9]+"
+      }
+
       config {
-        image = "grafana/promtail:2.2.1"
+        image = "grafana/promtail:2.7.1"
         ports = ["main", "metrics"]
         args = ["--config.file=/etc/promtail/promtail.yml"]
 
diff --git a/core/traefik/traefik.nomad b/core/traefik/traefik.nomad
index a2b22a7..7139d46 100644
--- a/core/traefik/traefik.nomad
+++ b/core/traefik/traefik.nomad
@@ -73,6 +73,12 @@ job "traefik" {
     task "traefik" {
       driver = "docker"
 
+      meta = {
+        "diun.sort_tags" = "semver"
+        "diun.watch_repo" = true
+        "diun.include_tags" = "^[0-9]+\\.[0-9]+"
+      }
+
       config {
         image = "traefik:2.9"