diff --git a/roles/git-fastd-peers/tasks/main.yml b/roles/git-fastd-peers/tasks/main.yml
index 3339069..98eff5d 100644
--- a/roles/git-fastd-peers/tasks/main.yml
+++ b/roles/git-fastd-peers/tasks/main.yml
@@ -28,6 +28,7 @@
   git:
     repo: "{{ item.value.peers_mesh_repo }}"
     dest: "/etc/fastd/{{ item.key }}VPN/peers"
+    version: master
     update: no
   with_dict: "{{ meshes }}"
   become: false
@@ -36,6 +37,7 @@
   git:
     repo: "{{ item.value.peers_intragate_repo }}"
     dest: "/etc/fastd/{{ item.key }}igVPN/peers"
+    version: master
     update: no
   with_dict: "{{ meshes }}"
   become: false
diff --git a/roles/git-repos/tasks/main.yml b/roles/git-repos/tasks/main.yml
index ad6703e..56eaa62 100644
--- a/roles/git-repos/tasks/main.yml
+++ b/roles/git-repos/tasks/main.yml
@@ -18,5 +18,6 @@
   git:
     repo: "{{ item.value.repo_url }}"
     dest: "/home/admin/clones/{{ item.key }}"
+    version: "{{ item.value.version }}"
   with_dict: "{{ common_repos }}"
   become: false
diff --git a/roles/git-repos/vars/main.yml b/roles/git-repos/vars/main.yml
index 572463e..b5bbb31 100644
--- a/roles/git-repos/vars/main.yml
+++ b/roles/git-repos/vars/main.yml
@@ -2,7 +2,10 @@
 common_repos:
   backend-scripts:
     repo_url: https://github.com/freifunk-mwu/backend-scripts.git
+    version: master
   icvpn-meta:
     repo_url: https://github.com/freifunk/icvpn-meta.git
+    version: master
   icvpn-scripts:
     repo_url: https://github.com/freifunk/icvpn-scripts.git
+    version: master
diff --git a/roles/service-tinc/tasks/main.yml b/roles/service-tinc/tasks/main.yml
index 994f480..c1ff01f 100644
--- a/roles/service-tinc/tasks/main.yml
+++ b/roles/service-tinc/tasks/main.yml
@@ -11,6 +11,7 @@
   git:
     repo: "{{ icvpn.icvpn_repo }}"
     dest: /etc/tinc/{{ icvpn.interface }}
+    version: master
     update: no
 
 - name: set directory permissions