diff --git a/playbook.yml b/playbook.yml
index 73138e8..657439d 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -21,14 +21,14 @@
     - role: cloudflare-ddns
     - role: cloudflared
     - role: nginx
+    - role: portainer
     - role: actual
     - role: postgres
     - role: wedding
-    - role: changedetection
     - role: monitoring
     - role: immich
     - role: hoarder
-    - role: portainer
+    - role: backups
   vars:
     # devsec.hardening.ssh_hardening vars:
     ssh_client_port: 22 # Default, but duplicated here for documentation purpose. Not changed because its only accessible via LAN.
diff --git a/versions.yml b/versions.yml
index 44fb59c..30617a0 100644
--- a/versions.yml
+++ b/versions.yml
@@ -2,13 +2,14 @@
 versions:
   # Changelog: https://actualbudget.org/docs/releases/
   actual: 25.2.1
-  changedetection:
-    # Changelog: https://changedetection.io/CHANGELOG.txt
-    self: 0.49.1
-    # ⬇️ This isn't preferable, i'd rather pin a version. However
-    # it's quite hard to find a suitable candidate (https://hub.docker.com/r/browserless/chrome/tags)
-    # for arm64.
-    headless_chrome: latest
+  # ⬇️ Currently disabled
+  # changedetection:
+  #   # Changelog: https://changedetection.io/CHANGELOG.txt
+  #   self: 0.49.1
+  #   # ⬇️ This isn't preferable, i'd rather pin a version. However
+  #   # it's quite hard to find a suitable candidate (https://hub.docker.com/r/browserless/chrome/tags)
+  #   # for arm64.
+  #   headless_chrome: latest
   # Changelog: https://github.com/immich-app/immich/releases
   immich: v1.127.0
   monitoring: