diff --git a/.env b/.env
index 6e639ce..3c639b1 100644
--- a/.env
+++ b/.env
@@ -3,10 +3,15 @@ LOCAL_DOMAIN=neofs.devenv
 IPV4_PREFIX=192.168.130
 CA_CERTS_TRUSTED_STORE=/etc/ssl/certs
 
+# Bastion image
+BASTION_VERSION=10
+BASTION_IMAGE=debian
+
 # NeoGo privnet
 #CHAIN_PATH="/path/to/devenv.dump.gz"
 CHAIN_URL="https://github.com/nspcc-dev/neofs-contract/releases/download/v0.15.5/devenv_mainchain_notary_disabled.gz"
 NEOGO_VERSION=0.99.2
+NEOGO_IMAGE=nspccdev/neo-go
 
 # NeoFS InnerRing nodes
 IR_VERSION=0.32.0
diff --git a/services/basenet/docker-compose.yml b/services/basenet/docker-compose.yml
index cc70cd8..abac92a 100644
--- a/services/basenet/docker-compose.yml
+++ b/services/basenet/docker-compose.yml
@@ -5,7 +5,7 @@ services:
 
   basenet:
     container_name: bastion
-    image: debian:10
+    image: ${BASTION_IMAGE}:${BASTION_VERSION}
     domainname: ${LOCAL_DOMAIN}
     hostname: bastion
     command: ["/bin/sleep", "infinity"]
diff --git a/services/chain/docker-compose.yml b/services/chain/docker-compose.yml
index be54f4c..b3e0822 100644
--- a/services/chain/docker-compose.yml
+++ b/services/chain/docker-compose.yml
@@ -3,7 +3,7 @@
 version: "2.4"
 services:
   neofs_main_chain:
-    image: nspccdev/neo-go:${NEOGO_VERSION}
+    image: ${NEOGO_IMAGE}:${NEOGO_VERSION}
     container_name: main_chain
     command: ["node", "--config-path", "/config", "--privnet", "--debug"]
     domainname: ${LOCAL_DOMAIN}
diff --git a/services/morph_chain/docker-compose.yml b/services/morph_chain/docker-compose.yml
index 1d75483..a4cebf4 100644
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@@ -3,7 +3,7 @@
 version: "2.4"
 services:
   neofs_morph_chain:
-    image: nspccdev/neo-go:${NEOGO_VERSION}
+    image: ${NEOGO_IMAGE}:${NEOGO_VERSION}
     container_name: morph_chain
     command: ["node", "--config-path", "/config", "--privnet", "--debug"]
     domainname: ${LOCAL_DOMAIN}