diff --git a/hosts/franz/arion/media/arion-compose.nix b/hosts/franz/arion/media/arion-compose.nix
index 8bea4ba..c505e2e 100644
--- a/hosts/franz/arion/media/arion-compose.nix
+++ b/hosts/franz/arion/media/arion-compose.nix
@@ -66,6 +66,11 @@
         "traefik.http.routers.navidrome-external.tls" = "true";
         "traefik.http.routers.navidrome-external.tls.certresolver" = "letsencrypt";
 
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.sort_tags" = "semver";
+        "diun.include_tags" = "^\\d+\\.\\d+\\.\\d+$$";
+        "diun.exclude_tags" = "\\b\\d{4,}\\b";
       };
       volumes = [
         "/storage/dataset/docker/media/navidrome_data:/data"
@@ -157,6 +162,10 @@
         "traefik.docker.network" = "dmz";
         "traefik.http.routers.prowlarr.tls" = "true";
         "traefik.http.routers.prowlarr.tls.certresolver" = "letsencrypt";
+
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.include_tags" = "^\\d+\\.\\d+\\.\\d+$$";
       };
       volumes = [
         "/storage/dataset/docker/media/prowlarr_data:/config"
@@ -183,6 +192,10 @@
         "traefik.docker.network" = "dmz";
         "traefik.http.routers.sonarr.tls" = "true";
         "traefik.http.routers.sonarr.tls.certresolver" = "letsencrypt";
+
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.include_tags" = "^\\d+\\.\\d+\\.\\d+$$";
       };
       volumes = [
         "/storage/dataset/docker/media/sonarr_data:/config"
@@ -211,6 +224,10 @@
         "traefik.docker.network" = "dmz";
         "traefik.http.routers.radarr.tls" = "true";
         "traefik.http.routers.radarr.tls.certresolver" = "letsencrypt";
+
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.include_tags" = "^\\d+\\.\\d+\\.\\d+$$";
       };
       volumes = [
         "/storage/dataset/docker/media/radarr_data:/config"
@@ -240,6 +257,12 @@
         "traefik.docker.network" = "dmz";
         "traefik.http.routers.lidarr.tls" = "true";
         "traefik.http.routers.lidarr.tls.certresolver" = "letsencrypt";
+
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.include_tags" = "^\\d+\\.\\d+\\.\\d+$$";
+
+        # "diun.max_tags" = "10";
       };
       volumes = [
         "/storage/dataset/docker/media/lidarr_data:/config"
@@ -317,6 +340,10 @@
         "traefik.docker.network" = "dmz";
         "traefik.http.routers.autobrr.tls" = "true";
         "traefik.http.routers.autobrr.tls.certresolver" = "letsencrypt";
+
+        "diun.enable" = "true";
+        "diun.watch_repo" = "true";
+        "diun.include_tags" = "^v\\d+\\.\\d+\\.\\d+$$";
       };
       volumes = [
         "/storage/dataset/docker/media/autobrr_data:/config"