diff --git a/deployment/docker-build/dev/docker-compose.yml b/deployment/docker-build/dev/docker-compose.yml
index 5eb6c2646..5e1ca7625 100644
--- a/deployment/docker-build/dev/docker-compose.yml
+++ b/deployment/docker-build/dev/docker-compose.yml
@@ -115,7 +115,7 @@ services:
 
   ipfs:
     restart: always
-    image: ipfs/kubo:v0.37.0
+    image: ipfs/kubo:v0.41.0
     ports:
       - "4001:4001"
       - "4001:4001/udp"
@@ -128,7 +128,7 @@ services:
       - IPFS_TELEMETRY=off
     networks:
       - pyaleph
-    command: ["daemon", "--enable-pubsub-experiment", "--enable-gc", "--migrate"]
+    command: ["daemon", "--enable-gc", "--migrate"]
 
 
 networks:
diff --git a/deployment/docker-build/docker-compose.yml b/deployment/docker-build/docker-compose.yml
index c6a54672f..388f66278 100644
--- a/deployment/docker-build/docker-compose.yml
+++ b/deployment/docker-build/docker-compose.yml
@@ -44,7 +44,7 @@ services:
 
   ipfs:
     restart: always
-    image: ipfs/kubo:v0.37.0
+    image: ipfs/kubo:v0.41.0
     ports:
       - "4001:4001"
       - "4001:4001/udp"
@@ -58,7 +58,7 @@ services:
       - IPFS_TELEMETRY=off
     networks:
       - pyaleph
-    command: ["daemon", "--enable-pubsub-experiment", "--enable-gc", "--migrate"]
+    command: ["daemon", "--enable-gc", "--migrate"]
 
   postgres:
     restart: always
diff --git a/deployment/samples/docker-compose/docker-compose.yml b/deployment/samples/docker-compose/docker-compose.yml
index 7f2c7b048..a70c3c999 100644
--- a/deployment/samples/docker-compose/docker-compose.yml
+++ b/deployment/samples/docker-compose/docker-compose.yml
@@ -103,7 +103,7 @@ services:
 
   ipfs:
     restart: always
-    image: ipfs/kubo:v0.37.0
+    image: ipfs/kubo:v0.41.0
     ports:
       - "4001:4001"
       - "4001:4001/udp"
@@ -116,7 +116,7 @@ services:
       - IPFS_TELEMETRY=off
     networks:
       - pyaleph
-    command: ["daemon", "--enable-pubsub-experiment", "--enable-gc", "--migrate"]
+    command: ["daemon", "--enable-gc", "--migrate"]
 
 
 networks:
diff --git a/deployment/samples/docker-monitoring/docker-compose.yml b/deployment/samples/docker-monitoring/docker-compose.yml
index f528c2c56..4a93ca5c3 100644
--- a/deployment/samples/docker-monitoring/docker-compose.yml
+++ b/deployment/samples/docker-monitoring/docker-compose.yml
@@ -105,7 +105,7 @@ services:
 
   ipfs:
     restart: always
-    image: ipfs/kubo:v0.37.0
+    image: ipfs/kubo:v0.41.0
     ports:
       - "4001:4001"
       - "4001:4001/udp"
@@ -118,7 +118,7 @@ services:
       - IPFS_TELEMETRY=off
     networks:
       - pyaleph
-    command: ["daemon", "--enable-pubsub-experiment", "--enable-gc", "--migrate"]
+    command: ["daemon", "--enable-gc", "--migrate"]
 
   prometheus:
     restart: always
diff --git a/deployment/scripts/001-update-ipfs-config.sh b/deployment/scripts/001-update-ipfs-config.sh
index c0ca972a1..c95bd8019 100755
--- a/deployment/scripts/001-update-ipfs-config.sh
+++ b/deployment/scripts/001-update-ipfs-config.sh
@@ -13,8 +13,12 @@ echo "Updating IPFS config file..."
 # Enable the V1+V2 service
 ipfs config AutoNAT.ServiceMode 'enabled'
 
-# Only announce recursively pinned CIDs
-ipfs config Reprovider.Strategy 'pinned'
+# Only announce recursively pinned CIDs (Reprovider.* keys were removed in kubo 0.38)
+ipfs config Provide.Strategy 'pinned'
+
+# Pubsub must be enabled via config in kubo 0.38+; the legacy --enable-pubsub-experiment
+# daemon flag is a no-op (logs a deprecation error without enabling pubsub).
+ipfs config Pubsub.Enabled --json 'true'
 
 # ONLY use the Amino DHT (no HTTP routers).
 ipfs config Routing.Type "dhtserver"