diff --git a/environment/http/docker-compose.prod.yml b/environment/http/docker-compose.prod.yml
index 1702cc7..c00af25 100644
--- a/environment/http/docker-compose.prod.yml
+++ b/environment/http/docker-compose.prod.yml
@@ -50,6 +50,7 @@ name: ignis-http
 
 services:
   db:
+    restart: unless-stopped
     image: postgres:17-alpine
     env_file: [env/db.env]
     volumes:
@@ -61,6 +62,7 @@ services:
       retries: 5
 
   ignis:
+    restart: unless-stopped
     # Pre-built by .github/workflows/docker-publish.yml on each vX.Y.Z tag.
     # Set IGNIS_IMAGE_TAG in .env to pin a version; defaults to `latest`.
     image: ghcr.io/thd-spatial-ai/ignis:${IGNIS_IMAGE_TAG:-latest}
diff --git a/environment/http/docker-compose.yml b/environment/http/docker-compose.yml
index 5ffa135..2da58d6 100644
--- a/environment/http/docker-compose.yml
+++ b/environment/http/docker-compose.yml
@@ -37,6 +37,7 @@ name: ignis-http
 # and https environments running at once.
 services:
   db:
+    restart: unless-stopped
     image: postgres:17-alpine
     env_file: [env/db.env]        # POSTGRES_USER / POSTGRES_PASSWORD / POSTGRES_DB
     volumes:
@@ -50,6 +51,7 @@ services:
     # network, by service name (`db`).
 
   ignis:
+    restart: unless-stopped
     build:
       # Context is the repository root, two levels up. The dockerfiles stay at
       # environment/ rather than being copied into http/ and https/: the image
diff --git a/environment/https/docker-compose.prod.yml b/environment/https/docker-compose.prod.yml
index 9c10004..40a34c7 100644
--- a/environment/https/docker-compose.prod.yml
+++ b/environment/https/docker-compose.prod.yml
@@ -58,6 +58,7 @@ name: ignis-https
 
 services:
   db:
+    restart: unless-stopped
     image: postgres:17-alpine
     env_file: [env/db.env]
     volumes:
@@ -69,6 +70,7 @@ services:
       retries: 5
 
   ignis:
+    restart: unless-stopped
     # Pre-built by .github/workflows/docker-publish.yml on each vX.Y.Z tag.
     # Set IGNIS_IMAGE_TAG in .env to pin a version; defaults to `latest`.
     image: ghcr.io/thd-spatial-ai/ignis:${IGNIS_IMAGE_TAG:-latest}
@@ -88,6 +90,7 @@ services:
       start_period: 10s
 
   proxy:
+    restart: unless-stopped
     image: caddy:2.11-alpine
     env_file: [env/proxy.env]
     environment:
diff --git a/environment/https/docker-compose.quickstart.yml b/environment/https/docker-compose.quickstart.yml
index 421a9ef..fe134c4 100644
--- a/environment/https/docker-compose.quickstart.yml
+++ b/environment/https/docker-compose.quickstart.yml
@@ -40,6 +40,7 @@ name: ignis-https
 
 services:
   db:
+    restart: unless-stopped
     image: postgres:17-alpine
     env_file: [env/db.env]
     volumes:
@@ -51,6 +52,7 @@ services:
       retries: 5
 
   ignis:
+    restart: unless-stopped
     # Pre-built by .github/workflows/docker-publish.yml on each vX.Y.Z tag.
     # Set IGNIS_IMAGE_TAG to pin a version; defaults to `latest`.
     image: ghcr.io/thd-spatial-ai/ignis:${IGNIS_IMAGE_TAG:-latest}
@@ -70,6 +72,7 @@ services:
       start_period: 10s
 
   proxy:
+    restart: unless-stopped
     image: caddy:2.11-alpine
     env_file: [env/proxy.env]
     environment:
diff --git a/environment/https/docker-compose.yml b/environment/https/docker-compose.yml
index ff38ce2..c565c88 100644
--- a/environment/https/docker-compose.yml
+++ b/environment/https/docker-compose.yml
@@ -39,6 +39,7 @@ name: ignis-https
 # called, which is what stops the http and https environments running at once.
 services:
   db:
+    restart: unless-stopped
     image: postgres:17-alpine
     env_file: [env/db.env]        # POSTGRES_USER / POSTGRES_PASSWORD / POSTGRES_DB
     volumes:
@@ -52,6 +53,7 @@ services:
     # network, by service name (`db`), same as the app itself.
 
   ignis:
+    restart: unless-stopped
     build:
       # Context is the repository root, two levels up. The dockerfiles stay at
       # environment/ rather than being copied into http/ and https/: the image
@@ -96,6 +98,7 @@ services:
         condition: service_healthy
 
   proxy:
+    restart: unless-stopped
     image: caddy:2.11-alpine
     env_file: [env/proxy.env]       # IGNIS_SITE_ADDRESS
     environment: