diff --git a/roles/.gitignore b/roles/.gitignore
new file mode 100644
index 0000000..cedb995
--- /dev/null
+++ b/roles/.gitignore
@@ -0,0 +1,8 @@
+# Match everything in this directory
+/*
+# Except for obvious important stuff:
+!.gitignore
+!requirements.yml
+# And local roles:
+!ansible-pull/
+!common/
diff --git a/roles/requirements.yml b/roles/requirements.yml
index 0f143d0..0ad1db8 100644
--- a/roles/requirements.yml
+++ b/roles/requirements.yml
@@ -8,9 +8,12 @@
 # DB Server stuff
 # Docs: https://github.com/geerlingguy/ansible-role-postgresql
 - src: geerlingguy.postgresql
+  version: 2.2.1
 
 # Webserver stuff
 # Docs: https://github.com/geerlingguy/ansible-role-apache
 - src: geerlingguy.apache
+  version: 3.1.0
 # Docs: https://github.com/geerlingguy/ansible-role-php
 - src: geerlingguy.php
+  version: 4.5.1