diff --git a/overrides/compose.https.yaml b/overrides/compose.https.yaml
index 9096e560..66ca8d06 100644
--- a/overrides/compose.https.yaml
+++ b/overrides/compose.https.yaml
@@ -8,11 +8,14 @@ services:
       - traefik.http.routers.frontend-http.rule=Host(${SITES:?List of sites not set})
 
   proxy:
-    image: traefik:v2.11
+    image: traefik:v3.6
     restart: unless-stopped
     command:
       - --providers.docker=true
       - --providers.docker.exposedbydefault=false
+      # Keep v2 rule syntax for now 
+      # Ensure compatibility with existing labels (will be removed if v3 transistion is complete)
+      - --core.defaultRuleSyntax=v2
       - --entrypoints.web.address=:80
       - --entrypoints.web.http.redirections.entrypoint.to=websecure
       - --entrypoints.web.http.redirections.entrypoint.scheme=https
diff --git a/overrides/compose.proxy.yaml b/overrides/compose.proxy.yaml
index 32ce9fab..39b36749 100644
--- a/overrides/compose.proxy.yaml
+++ b/overrides/compose.proxy.yaml
@@ -7,10 +7,13 @@ services:
       - traefik.http.routers.frontend-http.rule=HostRegexp(`{any:.+}`)
 
   proxy:
-    image: traefik:v2.11
+    image: traefik:v3.6
     command:
       - --providers.docker
       - --providers.docker.exposedbydefault=false
+      # Keep v2 rule syntax for now 
+      # Ensure compatibility with existing labels (will be removed if v3 transistion is complete)
+      - --core.defaultRuleSyntax=v2
       - --entrypoints.web.address=:80
     ports:
       - ${HTTP_PUBLISH_PORT:-80}:80
diff --git a/overrides/compose.traefik-ssl.yaml b/overrides/compose.traefik-ssl.yaml
index b83cb8e4..1c3a0ad2 100644
--- a/overrides/compose.traefik-ssl.yaml
+++ b/overrides/compose.traefik-ssl.yaml
@@ -23,6 +23,9 @@ services:
       - --providers.docker=true
       # Do not expose all Docker services, only the ones explicitly exposed
       - --providers.docker.exposedbydefault=false
+      # Keep v2 rule syntax for now 
+      # Ensure compatibility with existing labels (will be removed if v3 transistion is complete)
+      - --core.defaultRuleSyntax=v2
       # Create an entrypoint http listening on port 80
       - --entrypoints.http.address=:80
       # Create an entrypoint https listening on port 443
diff --git a/overrides/compose.traefik.yaml b/overrides/compose.traefik.yaml
index 7765e19d..1846597f 100644
--- a/overrides/compose.traefik.yaml
+++ b/overrides/compose.traefik.yaml
@@ -1,6 +1,6 @@
 services:
   traefik:
-    image: "traefik:v2.11"
+    image: "traefik:v3.6"
     restart: unless-stopped
     labels:
       # Enable Traefik for this service, to make it available in the public network
@@ -24,6 +24,9 @@ services:
       - --providers.docker=true
       # Do not expose all Docker services, only the ones explicitly exposed
       - --providers.docker.exposedbydefault=false
+      # Keep v2 rule syntax for now 
+      # Ensure compatibility with existing labels (will be removed if v3 transistion is complete)
+      - --core.defaultRuleSyntax=v2
       # Create an entrypoint http listening on port 80
       - --entrypoints.http.address=:80
       # Enable the access log, with HTTP requests