diff --git a/docker/compose.dev.yml b/docker/compose.dev.yml
index 0388de1..a482a9d 100644
--- a/docker/compose.dev.yml
+++ b/docker/compose.dev.yml
@@ -8,7 +8,9 @@ services:
   # on http://api.localhost / http://app.localhost via the routers in
   # compose.yml. Dashboard at http://localhost:8090.
   proxy:
-    image: traefik:3.6
+    # A patch tag, so a host holding an older cached 3.6 pulls this one. 3.6.25
+    # knows --accesslog.fields.queryparameters, which older 3.6 refuses.
+    image: traefik:3.6.25
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     ports:
diff --git a/docker/compose.traefik.yml b/docker/compose.traefik.yml
index 0353564..541c80b 100644
--- a/docker/compose.traefik.yml
+++ b/docker/compose.traefik.yml
@@ -1,6 +1,8 @@
 services:
   traefik:
-    image: traefik:3.6
+    # A patch tag, so a host holding an older cached 3.6 pulls this one. 3.6.25
+    # knows --accesslog.fields.queryparameters, which older 3.6 refuses.
+    image: traefik:3.6.25
     ports:
       # Listen on port 80, default for HTTP, necessary to redirect to HTTPS
       - 80:80