diff --git a/apps/nextcloud/docker-compose.yml b/apps/nextcloud/docker-compose.yml
index c7f6481..1280062 100644
--- a/apps/nextcloud/docker-compose.yml
+++ b/apps/nextcloud/docker-compose.yml
@@ -78,7 +78,7 @@ services:
       start_period: 180s
 
   nextcloud-db:
-    image: mariadb:11.4
+    image: mariadb:${NEXTCLOUD_DB_VERSION}
     restart: always
     profiles: ["apps","all","nextcloud"]
     container_name: nextcloud-db
@@ -106,6 +106,7 @@ services:
     labels:
       - "io.portainer.accesscontrol.public"
       - "wud.watch=true"
+      - "wud.tag.include=11.4"
     healthcheck:
       test: ["CMD-SHELL", "mariadb-admin ping -u $$MYSQL_USER --password=$$(cat /run/secrets/nextcloud_db_password) --silent"]
       interval: 10s
diff --git a/default-environment.env b/default-environment.env
index f844bbd..b738f0c 100644
--- a/default-environment.env
+++ b/default-environment.env
@@ -30,6 +30,7 @@ GITEA_RUNNER_LABELS=ubuntu-latest:docker://node:20-bookworm,ubuntu-22.04:docker:
 GRAFANA_ROOT_URL=https://grafana.${DOMAIN}/
 
 # Nextcloud
+NEXTCLOUD_DB_VERSION=11.4
 NEXTCLOUD_MYSQL_DATABASE=nextcloud
 NEXTCLOUD_MYSQL_HOST=nextcloud_db:3306
 NEXTCLOUD_TRUSTED_DOMAINS=nextcloud.${DOMAIN}