diff --git a/crowdsec/acquis.d/caddy.yaml b/crowdsec/acquis.d/caddy.yaml
index 5fc010c..e7b09d7 100644
--- a/crowdsec/acquis.d/caddy.yaml
+++ b/crowdsec/acquis.d/caddy.yaml
@@ -5,4 +5,3 @@ labels:
   type: caddy
 follow_stdout: true
 follow_stderr: true
-check_interval: 5s
diff --git a/crowdsec/acquis.d/services.yaml b/crowdsec/acquis.d/services.yaml
index 3c300f8..687d27c 100644
--- a/crowdsec/acquis.d/services.yaml
+++ b/crowdsec/acquis.d/services.yaml
@@ -5,7 +5,6 @@ labels:
   type: gitea
 follow_stdout: true
 follow_stderr: true
-check_interval: 5s
 ---
 source: docker
 container_name:
@@ -14,7 +13,6 @@ labels:
   type: vaultwarden
 follow_stdout: true
 follow_stderr: true
-check_interval: 5s
 ---
 source: docker
 container_name:
@@ -23,4 +21,3 @@ labels:
   type: stalwart
 follow_stdout: true
 follow_stderr: true
-check_interval: 5s
diff --git a/crowdsec/docker-compose.yaml b/crowdsec/docker-compose.yaml
index ea33b65..b50c05d 100644
--- a/crowdsec/docker-compose.yaml
+++ b/crowdsec/docker-compose.yaml
@@ -13,6 +13,7 @@ services:
       - "com.centurylinklabs.watchtower.enable=true"
     environment:
       TZ: "Etc/UTC"
+      USE_WAL: "true"
       COLLECTIONS: >-
         crowdsecurity/linux
         crowdsecurity/caddy
diff --git a/vaultwarden/docker-compose.yaml b/vaultwarden/docker-compose.yaml
index b565e61..c120f1a 100644
--- a/vaultwarden/docker-compose.yaml
+++ b/vaultwarden/docker-compose.yaml
@@ -12,6 +12,7 @@ services:
     environment:
       - DOMAIN=${DOMAIN}
       - ADMIN_TOKEN=${ADMIN_TOKEN}
+      - LOG_TIMESTAMP_FORMAT=%Y-%m-%d %H:%M:%S.%3f%:z
     networks:
       - caddy
     volumes: