diff --git a/playbooks/roles/haproxy/templates/docker-compose.yaml.j2 b/playbooks/roles/haproxy/templates/docker-compose.yaml.j2
index 04488bde3f..efd26f2d10 100644
--- a/playbooks/roles/haproxy/templates/docker-compose.yaml.j2
+++ b/playbooks/roles/haproxy/templates/docker-compose.yaml.j2
@@ -5,7 +5,7 @@ version: '2'
 services:
   haproxy:
     restart: always
-    image: docker.io/library/haproxy:latest
+    image: docker.io/library/haproxy:lts
     # NOTE(ianw) 2021-05-17 : haproxy >= 2.4 runs as a non-privileged
     # user.  The main problem here is we use host networking, so the
     # haproxy user is not allowed to bind to low ports (80/443).  The