diff --git a/playbooks/roles/authentik/vars/main.yml b/playbooks/roles/authentik/vars/main.yml
index adaeb84..6318eda 100644
--- a/playbooks/roles/authentik/vars/main.yml
+++ b/playbooks/roles/authentik/vars/main.yml
@@ -2,7 +2,7 @@
 authentik_svc:
   domain: "{{ all_services | service_get_domain(role_name) }}"
   port: 9000
-  image_tag: 2024.8
+  image_tag: 2025.2
   db:
     host: "{{ postgres.host }}"
     user: "{{ opentofu.postgresql_data.authentik.user }}"
@@ -31,7 +31,7 @@ authentik_env:
   AUTHENTIK_POSTGRESQL__PASSWORD: "{{ svc.db.pass }}"
 
 authentik_compose:
-  watchtower: false
+  watchtower: update
   image: ghcr.io/goauthentik/server:{{ svc.image_tag }}
   file:
     services: