diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index c4010c7..eebfa1d 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -25,12 +25,19 @@ cache:
   paths:
     - .m2/repository
 
+# Default retry для всех jobs — runner image pull mirror flaky
+default:
+  retry:
+    max: 2
+    when:
+      - runner_system_failure
+      - stuck_or_timeout_failure
+      - script_failure
+
 # ─── TEST ──────────────────────────────────────
 maven-test:
   stage: test
-  image:
-    name: maven:3.9.9-eclipse-temurin-21
-    pull_policy: if-not-present
+  image: maven:3.9.9-eclipse-temurin-21
   script:
     - mvn $MAVEN_CLI_OPTS verify
   artifacts:
@@ -42,9 +49,7 @@ maven-test:
 # ─── BUILD (Maven jars) ────────────────────────
 maven-package:
   stage: build
-  image:
-    name: maven:3.9.9-eclipse-temurin-21
-    pull_policy: if-not-present
+  image: maven:3.9.9-eclipse-temurin-21
   script:
     - mvn $MAVEN_CLI_OPTS package -DskipTests
   artifacts:
@@ -56,14 +61,11 @@ maven-package:
 # ─── PUBLISH (Docker images) ───────────────────
 .docker_base: &docker_base
   stage: publish
-  image:
-    name: docker:26
-    pull_policy: if-not-present
+  image: docker:26
   services:
     - name: docker:26-dind
       alias: docker
       command: ["--tls=false"]
-      pull_policy: if-not-present
   variables:
     DOCKER_HOST: tcp://docker:2375
     DOCKER_TLS_CERTDIR: ""