diff --git a/ansible/roles/podman/tasks/container-bookstack.yml b/ansible/roles/podman/tasks/container-bookstack.yml
index 2c83c6f..c117ac7 100644
--- a/ansible/roles/podman/tasks/container-bookstack.yml
+++ b/ansible/roles/podman/tasks/container-bookstack.yml
@@ -18,6 +18,14 @@
   ansible.builtin.meta: flush_handlers
   tags: bookstack
 
+- name: unshare chown the bookstack upload volumes
+  become: true
+  become_user: "{{ podman_user }}"
+  changed_when: false
+  ansible.builtin.command: |
+    podman unshare chown -R 33:33 {{ bookstack_path }}/public {{ bookstack_path }}/storage
+  tags: bookstack
+
 - name: create bookstack-db container
   become: true
   become_user: "{{ podman_user }}"
diff --git a/ansible/roles/podman/tasks/container-graylog.yml b/ansible/roles/podman/tasks/container-graylog.yml
index 78a44ba..3535f02 100644
--- a/ansible/roles/podman/tasks/container-graylog.yml
+++ b/ansible/roles/podman/tasks/container-graylog.yml
@@ -96,7 +96,7 @@
   become_user: "{{ podman_user }}"
   containers.podman.podman_container:
     name: graylog
-    image: docker.io/graylog/graylog:4.2.9
+    image: docker.io/graylog/graylog:4.3
     recreate: true
     restart: true
     restart_policy: on-failure