diff --git a/stacks/immich/frame-emo.tf b/stacks/immich/frame-emo.tf
index 577d84af..221577ba 100644
--- a/stacks/immich/frame-emo.tf
+++ b/stacks/immich/frame-emo.tf
@@ -73,7 +73,9 @@ resource "kubernetes_deployment" "immich-frame-emo" {
       }
       spec {
         container {
-          image = "ghcr.io/immichframe/immichframe:v1.0.32.0"
+          # immich_v3: upstream compat tag for Immich v3 — see frame.tf for the
+          # full story; repin to a versioned tag once upstream releases v3 support.
+          image = "ghcr.io/immichframe/immichframe:immich_v3"
           name  = "immich-frame-emo"
           resources {
             requests = {
diff --git a/stacks/immich/frame.tf b/stacks/immich/frame.tf
index c86a47eb..97d83966 100644
--- a/stacks/immich/frame.tf
+++ b/stacks/immich/frame.tf
@@ -69,7 +69,11 @@ resource "kubernetes_deployment" "immich-frame" {
       }
       spec {
         container {
-          image = "ghcr.io/immichframe/immichframe:v1.0.32.0"
+          # immich_v3 is the upstream compat tag for Immich v3 servers — every
+          # versioned release (≤ v1.0.33.0) crashes deserializing v3 API
+          # responses (immichFrame/immichFrame#653). Pin back to a vX.Y.Z.W tag
+          # once a stable release ships v3 support (upstream PR #654).
+          image = "ghcr.io/immichframe/immichframe:immich_v3"
           name  = "immich-frame"
           resources {
             requests = {
diff --git a/stacks/immich/main.tf b/stacks/immich/main.tf
index 09f03ca9..b0c0eef8 100644
--- a/stacks/immich/main.tf
+++ b/stacks/immich/main.tf
@@ -15,7 +15,7 @@ locals {
 variable "immich_version" {
   type = string
   # Change me to upgrade
-  default = "v2.7.5"
+  default = "v3.0.0"
 }
 variable "proxmox_host" { type = string }
 variable "redis_host" { type = string }
@@ -492,7 +492,7 @@ resource "kubernetes_deployment" "immich-postgres" {
       }
       spec {
         container {
-          image = "ghcr.io/immich-app/postgres:15-vectorchord0.3.0-pgvectors0.2.0"
+          image = "ghcr.io/immich-app/postgres:15-vectorchord0.4.3-pgvectors0.2.0"
           name  = "immich-postgresql"
           port {
             container_port = 5432
@@ -882,7 +882,7 @@ resource "kubernetes_cron_job_v1" "clip-index-prewarm" {
             restart_policy = "Never"
             container {
               name  = "prewarm"
-              image = "ghcr.io/immich-app/postgres:15-vectorchord0.3.0-pgvectors0.2.0"
+              image = "ghcr.io/immich-app/postgres:15-vectorchord0.4.3-pgvectors0.2.0"
               # command overrides the postgres entrypoint → runs psql directly.
               command = [
                 "psql", "-v", "ON_ERROR_STOP=1", "-c",
@@ -964,7 +964,7 @@ resource "kubernetes_cron_job_v1" "immich-search-probe" {
             }
             init_container {
               name  = "measure"
-              image = "ghcr.io/immich-app/postgres:15-vectorchord0.3.0-pgvectors0.2.0"
+              image = "ghcr.io/immich-app/postgres:15-vectorchord0.4.3-pgvectors0.2.0"
               command = ["/bin/bash", "-c", <<-EOT
                 set -uo pipefail
                 OUT=/shared/metrics.prom