🔧 Renovate: Update (digest) lscr.io/linuxserver/prowlarr:latest Docker digest to 536036a

Reviewed-on: #2841

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -209,8 +209,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Pre-pull/build service images in parallel
@@ -414,8 +415,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Pre-pull/build service images in parallel

.gitea/workflows/renovate-pr-deploy.yml

@@ -138,8 +138,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment

.gitea/workflows/renovate.yml

@@ -2,11 +2,11 @@ name: Renovate
 
 on:
   schedule:
-    - cron: "0/30 * * * *"
+    - cron: "0 */2 * * *"
   workflow_dispatch:
 
 env:
-  RENOVATE_VERSION: "43.170.22"
+  RENOVATE_VERSION: "43.252.8"
 
 jobs:
   renovate:

README.md

@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.75 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.77 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -21,7 +21,7 @@
 | beszel | henrygd/beszel:latest | Lightweight server monitoring hub |
 | beszel-agent | henrygd/beszel-agent:latest |  |
 | bitwarden | vaultwarden/server:latest | Credential/Information Vault |
-| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193 |  |
+| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.5009 |  |
 | browserless | ghcr.io/browserless/chromium:latest |  |
 | bytestash | ghcr.io/jordan-dalby/bytestash:latest | Code Gists/Snippets |
 | changedetection | ghcr.io/dgtlmoon/changedetection.io | Page change monitoring with alerts |
@@ -50,7 +50,7 @@
 | garage | dxflrs/garage:v2.3.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.26.2 | Private Code Repo |
+| gitea | gitea/gitea:1.26.4 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -90,7 +90,7 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:0.133.1 | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:0.146.0 | Self-hosted digital asset manager for 3D print files |
 | manyfold-pg-db | postgres:18-alpine |  |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
@@ -159,7 +159,7 @@
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
 | semaphore-ui | semaphoreui/semaphore:v2.18.4 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
-| signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
+| signoz-app | signoz/signoz:v0.131.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz |  |
@@ -179,7 +179,7 @@
 | swag | lscr.io/linuxserver/swag:latest | SWAG Dashboard for proxies |
 | tandoor | vabene1111/recipes | Recipes, cookbooks, meal-planning, & grocery lists |
 | tandoor-pg | postgres:16-alpine |  |
-| tdarr | ghcr.io/haveagitgat/tdarr:2.72.01 | Distributed transcode automation |
+| tdarr | ghcr.io/haveagitgat/tdarr:2.82.02 | Distributed transcode automation |
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
 | vault | hashicorp/vault:2.0.0-bugfix | HashiCorp Vault for secrets, key/value stores, etc. |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:e0776533ea02e68771d8b8b857112e8b27197ded73b24efc4881375b1f239689
+  image: h2invent/jitsi-admin-main:latest@sha256:16b87532a2b75efe47d61d7a4c6dd342b0e654e9721717463e3ae75e241fc0d8
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:74385f8067f401e61f0be9e343c471705c42dfaa195295c40c5b2f15f4dcc9d4
+    image: docker.io/actualbudget/actual-server:latest@sha256:e18b7fbfec6157a368fad4146563f397502e9da70a120aeaeac63b4977405d1c
     labels:
       swag: enable
       swag_port: 5006
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.75@sha256:50ac5916778faa06ad4adcff606c7aaf806cb55dc1995160dbf50633c9bda94d
+    image: adguard/adguardhome:v0.107.77@sha256:e6f2b8bcda06064ab055b44933a4f0e983c35558b9cdb8d2e7ab1efcee36d890
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:0d114aa96f1782173af59c6af88b1dc75918af71ab8a160a3b1e48da1b5de96f
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:992e293a4755349a4824b23f20a0a5c0db0a30be4fe4690799923f30a8aa6696
     labels:
       swag: enable
       swag_proto: http
@@ -357,7 +357,7 @@ services:
       URL_HOST: asciinema.trez.wtf
       URL_PORT: 4000
       URL_SCHEME: https
-    image: ghcr.io/asciinema/asciinema-server:latest@sha256:d6d3bd5377dbe0773016ece1fdcc8326826d45395f1df7a6883ea30caf7140e8
+    image: ghcr.io/asciinema/asciinema-server:latest@sha256:0474b2186be46b23f5e16dbd4319727dbb68f27a303705fbe632821bf524b313
     labels:
       homepage.group: Code/DevOps
       homepage.name: Asciinema
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:6765739f422606933bc2aece3a2288e40e491488fd7e7c14e3323dfeefb10e38
+    image: postgres:14-alpine@sha256:f1341c01408dc7278e9d365ed4f860cd3f87dd16b4464ac326fc0f422083a579
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:1eef6716183c52abafe5405e7d6be8390248ecd59c7488c44af871757ac8fc4d
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -483,7 +483,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:648c80b38d2039b836903c06a7e04a97a44f163566aa91280378340de271cac3
+    image: authelia/authelia:master@sha256:9d4869958adb4ec66b713aba6cde2ba2c8646b10a88f401abadfefa9793a1765
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -519,7 +519,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
+    image: postgres:16-alpine@sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -577,7 +577,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:95f27692c3de6dbe130cd035d342d8138ec74ade7b62cfc52e11ae222c52c855
+    image: lscr.io/linuxserver/bazarr:latest@sha256:5d916d07404296ec35ee726e13e0e558f05952724cf494a7f009d913fb2b12f3
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -752,7 +752,7 @@ services:
       LOG_ENABLED: true
     expose:
       - 3000
-    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193@sha256:54122ea4515d9021a4901aa849c6e57d2275e2194f6eda2cc9df217d12302f9e
+    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.5009@sha256:c0d208c91808ba0c75ad0ab5c5bae7c1e7c2d6f644b975a26726b2f6f7e4b8e8
     labels:
       swag: enable
       swag_port: 3000
@@ -787,7 +787,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:af0f9442caf5908fdf655a23c34e50e6f1c66ce3306d88e3d4578280bcba9661
+    image: ghcr.io/browserless/chromium:latest@sha256:05f10074ec39bc9161881c8ccc79304f98e713bb9c97dc0140e35fd3877374b7
     labels:
       swag: enable
       swag_proto: http
@@ -847,7 +847,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:d89d4187221206f7f9f2c7946e7483815db905ca7d122644081aebd5d23ba391
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:736331d2787f94d3201b64aa641e090f67e28577ba505bd7ba5d7c1841e1e0ca
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -946,7 +946,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:6e7bb740c8c0a75ecb1bfc2992511e2abdd92acc8d3424d9abaf0f78055f12dc
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:b04e0665e2f623ee2ce80c129dffe863c774a2e2a8799ac58e38b4ab13101e5c
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -972,7 +972,7 @@ services:
     container_name: convertx
     environment:
       JWT_SECRET: ${CONVERTX_JWT_SECRET}
-    image: ghcr.io/c4illin/convertx@sha256:e1f85be04bbaf8a55ead9261194c3ae0fa0957d303ea537127154860b2552afd
+    image: ghcr.io/c4illin/convertx@sha256:b515b04bfd25298a5cdc775b2fcd48b9399bab658ce13e2598b65df1b16098c8
     labels:
       homepage.group: System Administration
       homepage.name: ConvertX
@@ -1042,7 +1042,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:b0511d28f5a504915cda5d4e233e5d25bab95fd8879823cbeb29580707473d36
+    image: metabase/metabase@sha256:8eaebc20adb7a775d509cdfcf8d752ad521933e6fc218421d4af3197a84f1d70
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1074,7 +1074,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:ad69e26bc1890d09fffc35fb85a10106a493a433c546cb747fce7dd80604563e
+    image: mpepping/cyberchef:latest@sha256:d2da4dc407362ba2929e74696f0b08a49a2ad7181d5527a0c5d35e51c197ee77
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1110,7 +1110,7 @@ services:
       WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
       WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
       CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:bb1012c8a162f79918eac88c7fd5e579b52e1464eeadc6fb2509363d2e569a10
+    image: jlesage/czkawka@sha256:dc2c53512e655de268137207e906189e88686a7545c4e63fe49d2d0580964c79
     labels:
       homepage.group: System Administration
       homepage.name: Czkawka
@@ -1192,7 +1192,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+    image: freikin/dawarich:latest@sha256:c8413c39fd17bc801d9823507ae5ac08cf4333c6de5cd110922dbca31d097372
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1232,7 +1232,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:5a30b4cf0c787aae9e428c1fce1ef736fccc7fc294958ee99d3836fb51b1819b
+    image: postgis/postgis:17-3.5-alpine@sha256:ec091d607c1cc2263e0811a0b1d25113ebbcb4e7e1390f84fe0394f9f7c12f68
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1283,7 +1283,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+    image: freikin/dawarich:latest@sha256:c8413c39fd17bc801d9823507ae5ac08cf4333c6de5cd110922dbca31d097372
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1489,7 +1489,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:d681e5213fa0871efa573856ed838d38150231df66c7de4b3dbe6980290f2571
+    image: lscr.io/linuxserver/duplicati:latest@sha256:c170cef686c21c7bdebc51d82405beb70bed98549d774d5b0ac139985625fd7a
     labels:
       swag: enable
       swag_port: 8200
@@ -1575,7 +1575,7 @@ services:
       WEEKLY_JAMS_FLAGS: --playlist=weekly-jams --download-mode=skip
       DAILY_JAMS_SCHEDULE: 30 2 * * *
       DAILY_JAMS_FLAGS: --playlist=daily-jams --download-mode=skip
-    image: ghcr.io/lumepart/explo:latest@sha256:d4b55bf5c8f2099815e1613a74d9d5ceb1ee6a3fc8f973a19c60cf842bc8d8df
+    image: ghcr.io/lumepart/explo:latest@sha256:f22b9131501c68e68a2598b2e6ddceeda7ac547ab6ea1bb701b49f93f54b7f9d
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -1629,7 +1629,7 @@ services:
       BROWSER_TIMEOUT: 40000
       TEST_URL: https://duckduckgo.com
     hostname: Rinoa
-    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
+    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:139dfee1c6f89249c8d665d1333a42e8ec74ec0a86bc6bb1c8461e10d3a66a47
     networks:
       default: null
     ports:
@@ -1708,7 +1708,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:588d5f5ed5ac6e94925860f76b2b14a18cf5d71c58a236f8817c600a9454fe2d
+    image: ghost:latest@sha256:e74daf96ac5236eb4e27f638847899b96bc502425f6315498aa7c5daafe7b7f0
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1753,7 +1753,7 @@ services:
       GITEA__mailer__SMTP_PORT: 25
       GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
       GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.26.2@sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031
+    image: gitea/gitea:1.26.4@sha256:8e25c717b8f748445e15ec46e0390f577cb628101184cb0a150d1dae126c1f39
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1813,7 +1813,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
+    image: postgres:14@sha256:9e279cc7fc6e908da071befe389c576bd6752dbd295a9c078f96a75bab03e54c
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -1895,7 +1895,7 @@ services:
       VPN_SERVICE_PROVIDER: private internet access
     expose:
       - 8000
-    image: qmcgaw/gluetun:latest@sha256:18a0abe7a020acdf9f80db45440d18487239abde5495a357ceb36517f7ea67cf
+    image: qmcgaw/gluetun:latest@sha256:b0ee2135e6ba52ad3f102aae9663707cd1c9531485117067a380d3b2b6dd991d
     ports:
       - 3333:3333
       - 3334:3334
@@ -1996,7 +1996,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+    image: ghcr.io/gethomepage/homepage:latest@sha256:a0b71c8e757298d02560186bab9fbe3fc2d375c523a62cc1019177b37e48aa28
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2073,7 +2073,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5
+    image: ghcr.io/immich-app/immich-server:release@sha256:14390f3dc9512dc3273b12ccee6363d9be16c388699abc3f3fe0498bb9829937
     labels:
       swag: enable
       swag_proto: http
@@ -2116,7 +2116,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:a2501141440f10516d329fdfba2c68082e19eb9ba6016c061ac80d23beadf7f3
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:412f68e46e1966d0f87a8733a430369ee184b3a83e7b1e2db536dff291a34aa7
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2163,7 +2163,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:6aeb25d05155049f4600f1b40469c735cecaa99c22e3a943a3fe3ce02a1ae7f7
+    image: alangrainger/immich-public-proxy:latest@sha256:bc42ab09bce13fa4972861ddd45ff9a1ed82f590121409519af91546edb8dd77
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2213,7 +2213,7 @@ services:
       DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: /run/secrets/influxdb2-admin-token
       DOCKER_INFLUXDB_INIT_ORG: rinoa
       DOCKER_INFLUXDB_INIT_BUCKET: rinoa
-    image: influxdb:2-alpine@sha256:1cb8fa92ff9d13518d8198dae872b7ea523757a03c655d12a67175b1ab7a72f0
+    image: influxdb:2-alpine@sha256:243d7adc3edc2a3f98518e5395a9be725504acb43deb125bdcc78579b5c4bbd8
     labels:
       swag: enable
       swag_proto: http
@@ -2250,7 +2250,7 @@ services:
         wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/trending || exit
         1
       timeout: 5s
-    image: quay.io/invidious/invidious:latest@sha256:9d972ea5930c2e170b3c4d49bdd9fa09bf03f077d555f58747342062dffc5876
+    image: quay.io/invidious/invidious:latest@sha256:7099e3077ecce323497841cd95a981359e72736fcd3365582badbc8e9b3d1783
     labels:
       swag: enable
       swag_proto: http
@@ -2286,7 +2286,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:1ddd3f1c6ba5c4b8b786b91830926bb510376918a7d43b2f142df6650c239951
+    image: quay.io/invidious/invidious-companion:latest@sha256:c2bacd4b7e2d80d1ac474d3b287aafd03140c2b8618095dd7c9c0c8884c0b7fc
     logging:
       options:
         max-size: "1G"
@@ -2310,7 +2310,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:d462928b1898dd74b749ef486797968828c1e7fc9befb5e5ca03a33bfbc32d64
+    image: docker.io/library/postgres:14@sha256:9e279cc7fc6e908da071befe389c576bd6752dbd295a9c078f96a75bab03e54c
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2359,7 +2359,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:bc9fa8e1462fffe3d8d4255fc62af478602641f4c0e5f4875fea8563d1189837
+    image: jellyfin/jellyfin@sha256:aefb67e6a7ff1debdd154a78a7bbb780fd0c873d8639210a7f6a2016ad2b35db
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -2986,7 +2986,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
+    image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3097,7 +3097,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:c3887840d04c8173fb654ed3acfd41699928c380375808311b5d136d4e056e8b
+    image: libretranslate/libretranslate@sha256:fb17e836049824735f932f1884abc83974d06370fe8e9993dc3b23c4cb22e728
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3131,7 +3131,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:ca2f95634d422fdeccfbff2a42cbe3a4fed1170f7e3546d99d5d5f2c9c9aa03b
+    image: lscr.io/linuxserver/lidarr:latest@sha256:94a876d1581f2ae5af5b846320d5f6f7a102a4755939ce0b43b01c60f9f86056
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3296,7 +3296,7 @@ services:
         bind:
           create_host_path: true
   loggifly:
-    image: ghcr.io/clemcer/loggifly:latest@sha256:5eae87a3fd141dd7af12a53bb470bd6902d8dc6c8d6ec1d5017d5abdd4c64930
+    image: ghcr.io/clemcer/loggifly:latest@sha256:9f141d01602dffb9238fd39ece7bef845914297bc5eeb9c985e7525cb8abaf8c
     container_name: loggifly
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -3377,7 +3377,7 @@ services:
       SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SMTP_FROM_ADDRESS: noreply@${MY_TLD}
-    image: lscr.io/linuxserver/manyfold:0.133.1@sha256:1e27e90558d913a41b01a81d3e6f24d7faad60cc3478abe52ddd9fc104a39494
+    image: lscr.io/linuxserver/manyfold:0.146.0@sha256:9632aa5f5f151eb0b94ba21523e78e67cf885a65c4d9b0d5eb2bd435f95c19c4
     labels:
       homepage.group: Lifestyle
       homepage.name: Manyfold
@@ -3414,7 +3414,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:18-alpine@sha256:96d56f7f57c6aacd1fcb908bc83b345ec5f83231ee486dd66a1baadce274db88
+    image: postgres:18-alpine@sha256:9a8afca54e7861fd90fab5fdf4c42477a6b1cb7d293595148e674e0a3181de15
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3441,7 +3441,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:41e8b59056fda0dfca6e24e2515674b18a76e774c93e464899da4d7116bc147d
+    image: linuxserver/mariadb@sha256:4fd30d278d9c85158706679451dac3d48aeec9c447fc0135d8c75b3c938b61e7
     networks:
       default: null
     ports:
@@ -3495,7 +3495,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:eb34805b65f9f1354c0b6f33df3a4bebb8c2db690c6146eac175a96d06de341c
+    image: lscr.io/linuxserver/mastodon:latest@sha256:764b0595a3c7a6989c64493ae3189458b612c696b1cb1d67603e3f3d9009eef3
     labels:
       swag: enable
       swag_proto: http
@@ -3536,7 +3536,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
+    image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3558,7 +3558,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:7161477b77d29d59636553dce12a9912478ee0c207243be75b203d42a9eb3f9f
+    image: getmaxun/maxun-backend:latest@sha256:5945a48b1ddb6f751b1f3412aec4513bce720e532fd60b6c355c5a2f3953ae07
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3574,7 +3574,7 @@ services:
     depends_on:
       - maxun-backend
     <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:ac9150566fea38778e350d7f3ef3cf7244539394e5bc3598c1b5c30f41b5b73a
+    image: getmaxun/maxun-frontend:latest@sha256:803076b49cb7a3b07aab3c56e293a2a18e39784d9dd5b4ad5ec964c86d361cee
     labels:
       swag: enable
       swag_proto: http
@@ -3602,7 +3602,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
+    image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3684,14 +3684,14 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: pgvector/pgvector:pg17@sha256:feb68f4f15446397d8cac7f4fe48fe4586de83160d1fc48b46283312d1a33966
+    image: pgvector/pgvector:pg17@sha256:d2ef61f42ef767baa5a1475393303cc235bcd92febd9d7014eddb48b41f3bad0
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/db-data/meme-search-db:/var/lib/postgresql/data
   mini-qr:
     container_name: mini-qr
-    image: ghcr.io/lyqht/mini-qr:latest@sha256:c9ccf1c25dda85db4275518c9583f6d72fab0885a2221cade0fa1249633aa1a4
+    image: ghcr.io/lyqht/mini-qr:latest@sha256:3010a8e449fd162381338691f1c8e876a5bf30b9ebb2d48fd36e1a324e697b3f
     labels:
       swag: enable
       swag_auth: authelia
@@ -3838,7 +3838,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:4b5bf3c2bb7516164f6dcb44acce4fdcb428abfe5771a1128304a0f34ab9ff7c
+    image: mongo:7@sha256:d5b3ca8c3f3cdce78d44870dc0871b76d5235e9b2ad4ea6bea5d1fbff8027703
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -3874,7 +3874,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:aecbf754a18c2ddc5d9bcf6385316a63aeae685f4106e76c25ab9d2c26c0f550
+    image: foxxmd/multi-scrobbler@sha256:b116e68f1937d5cb0edad0ff8d7af3a1eee56b979529e098fbc7c196adde5d39
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -3914,7 +3914,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:9f1f8e4c093c9924338bd168e3f813f746041d13b337753af0dbdd329e7b50f7
+    image: docker.n8n.io/n8nio/n8n@sha256:74f1ef0ec73cd1b85c3b55926732c9dfaa544a66d6bb2872fd57718c557954a4
     labels:
       swag: enable
       swag_proto: http
@@ -3967,7 +3967,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:c4b5cb36a790b3eb63ca6a68bbe2fe149c2d7fa2e586f7a480e61db630e6664b
+    image: deluan/navidrome:latest@sha256:9012939114fbb1bb641b81cf96dec5ded15f0aafefe8d47a511d7cb919658e40
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4022,7 +4022,7 @@ services:
       GRAPHQL_PORT: ${GRAPHQL_PORT:-20212} # GraphQL API port
       ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false} # Set to true to reset your config and database on each container start
       NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0} # 0=kill all services and restart if any dies. 1 keeps running dead services.
-    image: jokobsk/netalertx:latest@sha256:656da7fc9f9fa5429cc75a33b0eb073fe538fd58b3d370f229fa0e4725f065b7
+    image: jokobsk/netalertx:latest@sha256:ffab3346b7a924b47bf6b992f369241801b736e54087011047e227937969532f
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4062,7 +4062,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:e77ff490d8caf528116feb2268a2e8cb9d9c974090090878ea00e76998f5298c
+    image: nextcloud/all-in-one:latest@sha256:e7abd7c7f4f28ec63971e92fdcb03d361a85cd3e7d83cd50d19c375cad623614
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4152,7 +4152,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
+    image: postgres:16-alpine@sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4169,7 +4169,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:0caadf03b8047e1e6ec8396069bfd7aa2ecacb7d26cd67435dc1f334634d04ac
+    image: lscr.io/linuxserver/ombi:latest@sha256:108c3a6949eafecb677c342a6848d5de8c902173fda67eaaabb609a22c7882c3
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4303,6 +4303,7 @@ services:
       LDAP_SEARCH_BASE: dc=trez,dc=wtf
       LDAP_SEARCH_FILTER: "(objectClass=inetOrgPerson)"
       LDAP_USE_TLS: false
+      #WEBUI_SECRET_KEY: ${}
       # LibreTranslate
       LT_DEBUG: false
       LT_UPDATE_MODELS: true
@@ -4318,7 +4319,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:74093dadc9c6aabc23987a74fd8c2fb8d995b1a5b22e83b0036fb9d6af590e8c
+    image: ghcr.io/open-webui/open-webui:main@sha256:a26effeb220e132482bf7e0560b3404843e7bc40d23051144e062960df8df6b0
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4463,7 +4464,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
+    image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4538,7 +4539,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
+    image: postgres:16-alpine@sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4623,7 +4624,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:6ab7824dbc4882156ba9b6d4f8ca42d697a79634c073d4d28eb768158f6ef5a7
+    image: plantuml/plantuml-server:jetty@sha256:5b9968b8723e03ef585396b257127337ca5f91e58ccbffc88f085bd649a717dc
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4704,7 +4705,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:4e0b4c4f0dd99954b6db70e8766f856742ec1a43370d94a754f8a608ddb0d88a
+    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:713ea1c03f111d92a4a2dbcf99ed69dade8aa68428c41b4b4c4f2515eec89091
     labels:
       swag: enable
       swag_auth: authelia
@@ -4736,7 +4737,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:881099ffea3550c0abd4ebdb48751f33fde913265695ab5890319f30583e3c62
+    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:75723c6a85b2fa2971becf7c32794ac3c9b69786ef14560e19eae3892f8c7bf1
     ports:
       - 36102:8000
     profiles: ["rinoa-apps"]
@@ -4746,7 +4747,7 @@ services:
       - NET_BIND_SERVICE
     command: postal smtp-server
     container_name: postal-smtp
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     networks:
       default: null
     ports:
@@ -4759,7 +4760,7 @@ services:
   postal-web:
     command: postal web-server
     container_name: postal-web
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     labels:
       swag: enable
       swag_proto: http
@@ -4795,7 +4796,7 @@ services:
     container_name: postal-worker
     environment:
       LOG_LEVEL: debug
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -4826,7 +4827,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:c9fe528f34b1fd3715438b6f6d6991d64e2965f2c055db36398bc66a0e7eab01
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:536036aeb2c740d1a660ccf143b58a8bd6222f09010258fdfc10a538af7bec78
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -4873,7 +4874,7 @@ services:
       qbittorrentvpn:
         required: true
         condition: service_started
-    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:56e1eeec5582e202e82479b42b588e3807ececca25716f91c7a29f5c597c55d0
+    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:cafdbdc61315ada302a494af9ee112a7b85eda5369edbb5b3b2d69eaccd63b2b
     environment:
       # Web API Configuration
       QBT_WEB_SERVER: true # Set to true to enable web API
@@ -4933,7 +4934,7 @@ services:
       VPN_PASS: ${DELUGEVPN_ENVIRONMENT_VPN_PASS}
       VPN_PROV: pia
       WEBUI_PORT: 8080
-    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:fe6daf82a190902d99350026eccdb883eb1e5f80b23827ba04a29c155815c696
+    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:b61d8a11e022239c4e3b218ae7ebb58d9adc67b59c46280c1812c6d9ccc0e8d1
     labels:
       homepage.group: Downloaders
       homepage.name: qBittorrent
@@ -5044,7 +5045,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+    image: lscr.io/linuxserver/radarr:latest@sha256:28852d0eacababc206762af48fe86d78594a4f434cc46b358f9764a857098662
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5106,7 +5107,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:267e56e622f39b226e3796331e7391dad6ac9bc8c4369a506f33cd5876f26b36
+    image: amruthpillai/reactive-resume:latest@sha256:c55782377718e9475e318f9a802fcff380f978331a1ae509096f97aadb971c29
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5139,7 +5140,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
+    image: postgres:16-alpine@sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5285,7 +5286,7 @@ services:
         condition: service_healthy
         required: true
         restart: true
-    image: rommapp/romm:latest@sha256:2b7a1714b287f69b081ad2a63bb8c2fa673666a17b2f21322b580b0cd51cb266
+    image: rommapp/romm:latest@sha256:c81778afcafe7c865bdf156d1c62349aec3dfca3aca5ec0d6c2c2e8bfa9fb071
     environment:
       ROMM_DB_DRIVER: mariadb # mariadb | sqlite (default: sqlite)
       ROMM_HOST: https://localhost:3000 # [Optional] your host ip or domain name (including http(s)://, subdomain and port if needed). Being used only for webRcade feed for now.
@@ -5380,7 +5381,7 @@ services:
       VPN_USER: ${SABNZBDVPN_ENVIRONMENT_VPN_USER}
       DEBUG: true
     hostname: Rinoa
-    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:c01bec2f4a9695aca83034f2ca759936ac1d2ddd96b2dc17ce62533bb065ea84
+    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:f9c6e4131a003ff8d033949afa08e3555cddcccbff51375c920f3755438e2b06
     labels:
       homepage.group: Downloaders
       homepage.name: SABnzbd
@@ -5429,6 +5430,8 @@ services:
         source: /rinoa-storage
         target: /storage
         type: bind
+      - ${DOCKER_VOLUME_CONFIG}/.openvpn:/config/openvpn
+      - ${DOCKER_VOLUME_CONFIG}/.wireguard:/config/wireguard
   sablier:
     container_name: sablier
     environment:
@@ -5444,7 +5447,7 @@ services:
       STRATEGY_DYNAMIC_DEFAULT_THEME: hacker-terminal
       STRATEGY_DYNAMIC_DEFAULT_REFRESH_FREQUENCY: 5s
       STRATEGY_BLOCKING_DEFAULT_TIMEOUT: 1m
-    image: sablierapp/sablier:latest@sha256:31c6877d69e7d8e627b51343f78234498e8746eb90051deafcfb765caabb584b
+    image: sablierapp/sablier:latest@sha256:c706adda00f977667b049b2973297129e9eda943f07817c85969fc55e73bb26b
     ports:
       - 19311:10000
     profiles: ["rinoa-apps"]
@@ -5549,7 +5552,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:04cc81a759e882e411569e008a77243ab8b0fc4137bcf88018cd7b7c3cbdff41
+    image: searxng/searxng:latest@sha256:aaf56bb5ad737d48a8a375778d42eb4ab1757231e6b1eb7980e71d8dd5bdf0de
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5603,7 +5606,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.18.4@sha256:e32c60f52e42799be077c6669f8dc9fcb6cedb1a1f851f791a6be851f4347c41
+    image: semaphoreui/semaphore:v2.18.25@sha256:9d2ca34eb47675397fb1939365a66b7c24899a57ee7654c8adc0fd1c0d9c5d57
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5664,7 +5667,7 @@ services:
       interval: 30s
       timeout: 5s
       retries: 3
-    image: signoz/signoz:v0.113.0@sha256:381d613fc4a186243a0ba28e55b957921e6d8663dd9111ef95c2cfdead1021c5
+    image: signoz/signoz:v0.131.1@sha256:0149e8119c9d0fbd457bb612f7aef4f162df2871184d8a0c450c9d536519dbce
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Signoz
@@ -5756,7 +5759,7 @@ services:
       NGINX_ERROR_LOG_FILE: /swag/log/nginx/error.log
       OTEL_RESOURCE_ATTRIBUTES: host.name=signoz-host,os.type=linux
       LOW_CARDINAL_EXCEPTION_GROUPING: false
-    image: signoz/signoz-otel-collector:v0.144.4@sha256:3a3205cf47f92249c2c2eca8ead2cdf7d1181646910d397b6c435505422d777a
+    image: signoz/signoz-otel-collector:v0.144.5@sha256:f9bf94d566055d06581f3befbf361cc26d670f31ad00cb31fda2ec380210c5ec
     ports:
       # - "1777:1777"     # pprof extension
       - "4317:4317" # OTLP gRPC receiver
@@ -5769,7 +5772,7 @@ services:
       - ${DOCKER_VOLUME_CONFIG}/swag/log/nginx/error.log:/swag/log/nginx/error.log:ro
   signoz-schema-migrator-async:
     <<: *signoz-db-depend
-    image: signoz/signoz-schema-migrator:v0.144.4@sha256:7678033d452b4f20b8852e736f598d241d95df48f5292ba5388fba670ed94e6e
+    image: signoz/signoz-schema-migrator:v0.144.5@sha256:97df68692c56f1bcefbfade1bbf779a148a7bb599165dcf2fe369680158ff569
     container_name: signoz-schema-migrator-async
     command:
       - async
@@ -5779,7 +5782,7 @@ services:
     restart: on-failure
   signoz-schema-migrator-sync:
     <<: *signoz-common
-    image: signoz/signoz-schema-migrator:v0.144.4@sha256:7678033d452b4f20b8852e736f598d241d95df48f5292ba5388fba670ed94e6e
+    image: signoz/signoz-schema-migrator:v0.144.5@sha256:97df68692c56f1bcefbfade1bbf779a148a7bb599165dcf2fe369680158ff569
     container_name: signoz-schema-migrator-sync
     command:
       - sync
@@ -5863,7 +5866,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
+    image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -5877,7 +5880,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:60f3b6b5c7647ba2bafd81163acfe34b11117b9b834ebd7fbcc3e5f1b309c7ef
+    image: lscr.io/linuxserver/sonarr:latest@sha256:4b025354d338999e03bf6dbdadcdde94815d39d4a5aba5de3cdc86a56d7d6c51
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6064,7 +6067,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:3f75c5ec7a14c232f91af1ddda4248543bb2e8f0aeb18fec64c34d2f42dd00ce
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:e4732e8e9073bdd5b419959c1151b761afa591166328d2ab751adc1e3d070563
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6104,7 +6107,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:2bb9b67f3edbca7ecc80f6e851a02cd04a10d5ea1d69b3e80b1e1f615e97b7a2
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:976dfa581b6cb1fb91e9b0b90284a92febe8ba6a4519e28f95c4e8e550d6d70d
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6143,7 +6146,7 @@ services:
       ONLY_SUBDOMAINS: false
       PGID: 1000
       PUID: 1000
-      SUBDOMAINS: etherpad,ha,www
+      SUBDOMAINS: etherpad,ha,www,patch
       TZ: America/New_York
       URL: ${MY_TLD}
       VALIDATION: dns
@@ -6156,7 +6159,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:ef97e83fc0283f972406ed62f208482653b9a9233eb389b947718b28c8c99263
+    image: lscr.io/linuxserver/swag:latest@sha256:ead85c5849c4538a70df4ce3b9eb3a3dc943a6e0ff9e951f30e9cdc0fbbbc492
     labels:
       swag: enable
       swag_proto: http
@@ -6212,7 +6215,7 @@ services:
       SECRET_KEY: ${TANDOOR_SECRET_KEY}
       TZ: ${TZ}
       UID: 1000
-    image: vabene1111/recipes@sha256:969c5b3552ffbf18a6f82b3ad5babbae89bfbd30ab6e3195fd3c158bcf3062ed
+    image: vabene1111/recipes@sha256:f6c58afdea7a721d079ebd6ee5483f2c9da77dd1e709e16d60a82c218e80a451
     labels:
       homepage.group: Lifestyle
       homepage.name: Tandoor Recipes
@@ -6258,7 +6261,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
+    image: postgres:16-alpine@sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6289,7 +6292,7 @@ services:
       cronPluginUpdate:
       NVIDIA_DRIVER_CAPABILITIES: all
       NVIDIA_VISIBLE_DEVICES: all
-    image: ghcr.io/haveagitgat/tdarr:2.72.01@sha256:fd9abc79b06a14e4ed0940aade7a92afe734d3188104fa085d5cde3eaf778b2f
+    image: ghcr.io/haveagitgat/tdarr:2.82.02@sha256:6153e00470667b5ed4f6f6f1bfaa016432efa4c20b1919de229d9b7265bff70b
     labels:
       homepage.group: Servarr Stack
       homepage.name: Tdarr
@@ -6477,7 +6480,7 @@ services:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:11ed4975912a014e2ec53d5270acfdde8eb928f59b56ad9ba136a2e69bbec019
+    image: bellamy/wallos:latest@sha256:8ebde07dbdd34eb671ef40560fd9503c5f995d4594c169a08cf93288d5a1b8e9
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6507,7 +6510,7 @@ services:
       - wallos-logos:/var/www/html/images/uploads/logos
   web-check:
     container_name: web-check
-    image: lissy93/web-check@sha256:6c2c4957c8794ffbcd50e0b560f6f010f17884b36b587c74155482fbad15a077
+    image: lissy93/web-check@sha256:b0b42d1037cc990139bb077b6b2418c5f4bc48f607b1159607c5a08d03728d99
     labels:
       homepage.group: Privacy/Security
       homepage.name: Web-Check
@@ -6533,7 +6536,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:daee5c278a431a14f7d76a2f55eb483452d16e151f90098a61ceea358d35f025
+    image: clidey/whodb@sha256:f46e4c5bff34e88e2c11721f4fbbd1dcb46c735c1af5cb16d55610442d960662
     environment:
       WHODB_CLICKHOUSE_1: '{ "host": "signoz-clickhouse" }'
       WHODB_MARIADB_1: '{ "host": "mariadb", "user": "root", "password":
@@ -6630,7 +6633,7 @@ services:
       PGID: ${PGID}
       DISABLE_BUILTIN_AUTH: true
       TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:19da537e01b5470cb34b083b5ac64cb534dd27084d9d66bc634e96c1f3976884
+    image: ghcr.io/wizarrrr/wizarr@sha256:606f9b88b0303daae11f595e424756b588d9365021c53dcb4d1369f2efc0543c
     labels:
       homepage.group: Servarr Stack
       homepage.name: Wizarr
@@ -6661,7 +6664,7 @@ services:
       YDL_CONFIG_PATH: /youtube-dl/config.yml
       YDL_DEBUG: "false"
     hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:b96cd888162d088b5a2e011b03fca1c78c9bbf2e5ed558325330a8420c66af5a
+    image: nbr23/youtube-dl-server:latest@sha256:739ea9f057c1cedb2da0e750841572502e1b3b343ccbae59a82bce6845082f20
     labels:
       homepage.group: Downloaders
       homepage.name: YoutubeDL