NetAlertX overhaul.

Reviewed-on: #1589

README.md

@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.72 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -164,13 +164,13 @@
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
 | semaphore-ui | semaphoreui/semaphore:v2.16.51 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
-| signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
+| signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz |  |
-| signoz-otel-collector | signoz/signoz-otel-collector:v0.129.13 |  |
-| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.129.13 |  |
-| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.129.13 |  |
+| signoz-otel-collector | signoz/signoz-otel-collector:v0.144.2 |  |
+| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.144.2 |  |
+| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.144.2 |  |
 | signoz-zookeeper-1 | signoz/zookeeper:3.7.1 |  |
 | sonarqube | mc1arke/sonarqube-with-community-branch-plugin:lts | Code/DevOps quality/security |
 | sonarqube-pg-db | postgres:17-alpine |  |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:0d442f65e8f68c84beda5a7b4c2240b9c0774fb244a31640cde5af57bb476f61
+  image: h2invent/jitsi-admin-main:latest@sha256:0be2bff232d7a06eada84eb870500dfcbb8fa921727b521a29a6eea7ebf66736
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:68677f85c863830af7836ff07c4a13b7f085ebeff62f4dedb71499ca27d229f2
+  image: docker.io/valkey/valkey:9-alpine@sha256:ad4541b28b017bf4cd83ee057c51aafb21ea32e898e3f3b8b75e268650f2ac20
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:c34346f87725b9cce5dca5af1a2a9b989127d592cc4c6af5cf4652d4a86def90
+    image: docker.io/actualbudget/actual-server:latest@sha256:ea21a0b6243797d35ef6c4a8713c87efaba8fec3b3663220fa3af61f352fba5e
     labels:
       swag: enable
       swag_port: 5006
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
+    image: adguard/adguardhome:v0.107.72@sha256:4956b35b590286e5872fb4336d84a7862a2030c6efb4ca16442580c37d7ba32d
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:2a1875222471096c1ee76e583115d432aa47ae45bea4cbcf3519d270098f5e02
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:b84d5e9d24b1394ecb4d518498a87ffe8edf487619f2b7138c7433e8d7135dad
     labels:
       swag: enable
       swag_proto: http
@@ -357,7 +357,7 @@ services:
       URL_HOST: asciinema.trez.wtf
       URL_PORT: 4000
       URL_SCHEME: https
-    image: ghcr.io/asciinema/asciinema-server:latest@sha256:db0f8dd4e41b386b0fd5fa4ab783a297b123f68c2b6bc64cc97e35edfc8305d1
+    image: ghcr.io/asciinema/asciinema-server:latest@sha256:d6d3bd5377dbe0773016ece1fdcc8326826d45395f1df7a6883ea30caf7140e8
     labels:
       homepage.group: Code/DevOps
       homepage.name: Asciinema
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:99b1da76e9e628f519f2aff2a2595128d7abb377ee1d7cc991ee45257efb05f0
+    image: postgres:14-alpine@sha256:64ce25a0bb68e598edc3944f2f58f39d1e8641755baa4ba5f7ddfa142ed85c63
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -522,7 +522,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgres:15-alpine@sha256:1d1095b0503145be79c79239372aefadfacf6b7c33c9245bbf99ce4b6b89c737
+    image: postgres:15-alpine@sha256:fceb6f86328c36f2438fae3b851b0cc57c4a7e69a58c866d9ce24281f2cf0c9c
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -585,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:35bbd9e1f24593fc7b1377452fb3bf829d9bd490fef721fe2cd5f4cde5e7f11c
+    image: authelia/authelia:master@sha256:8d1d49ee46757a09e69e5f42fda59f836792632b69857b6508f4ba499ccfbd70
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -640,7 +640,7 @@ services:
   backrest:
     container_name: backrest
     hostname: backrest
-    image: garethgeorge/backrest:latest@sha256:1308397161321b3c5aeca8acc6bf26eccb990df385f2532d3ce0eaa8b483dedf
+    image: garethgeorge/backrest:latest@sha256:448fee1cb4cdf3f7d7078078480d38713673924ad415bfdf84bf9e49ff570201
     environment:
       BACKREST_DATA: /data # path for backrest data. restic binary and the database are placed here.
       BACKREST_CONFIG: /config/config.json # path for the backrest config file.
@@ -679,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+    image: lscr.io/linuxserver/bazarr:latest@sha256:b0bc617664dbca25845ac3b1bb6411b145b6a44a6d173071c9d2f426524fdd9f
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -726,7 +726,7 @@ services:
     container_name: beszel
     extra_hosts:
       - host.docker.internal:host-gateway
-    image: henrygd/beszel:latest@sha256:d1326b5cd73838b1d1acc5f1764c4b993c9668aa26df149082695894cb2805ae
+    image: henrygd/beszel:latest@sha256:64bcaa60d1ed4149f0628c70cf68044b5d1ea90b3437de41e009e873f50e3f36
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Beszel
@@ -767,7 +767,7 @@ services:
       KEY: "${BESZEL_RINOA_AGENT_KEY}"
     expose:
       - 45876
-    image: henrygd/beszel-agent:latest@sha256:67b51e7976da13b7ce15e0270869827d54aa3df8cf0978e240e4105f62395a46
+    image: henrygd/beszel-agent:latest@sha256:00829897142460910ed1de162b166d2494916c061ecdb092de3b0653818c02b9
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -790,7 +790,7 @@ services:
       TZ: America/New_York
       WEBSOCKET_ENABLED: "true"
     hostname: Rinoa
-    image: vaultwarden/server:latest@sha256:d89a6d21e361254670c24a4272b4b5f245e402c284f2f55de2c379fdbcfa1fa5
+    image: vaultwarden/server:latest@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
     labels:
       homepage.group: Privacy/Security
       homepage.name: Vaultwarden
@@ -889,7 +889,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:75928b6ce72502be734f4dd9573917b06d28c30117e0eb260c52a53b47dc5e07
+    image: ghcr.io/browserless/chromium:latest@sha256:76bd3c1df1777df5c90fad1c8182395563a45b57105dfe7a22143c24c7b6a300
     labels:
       swag: enable
       swag_proto: http
@@ -949,7 +949,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:e95931043d68da46e90498ce74ad317b392caade07186dc06bdfa1710901bf90
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:5e9650300a1a37174834b2528a7e2f0d40511016b55aca47bd65bb0396be7ccb
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -1048,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:195c3d07afc76e6db7119bd902f0565342976b5f6537461a97e09229dde14a5b
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:8ffaad9cf7886c0f24f0af49f62657beb7b790fdf585567f0fa52bd85615e708
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1158,7 +1158,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:2284624757c442933115fce4d64b99ea1854edad60453fb468e650dd5f4566a3
+    image: metabase/metabase@sha256:2ec9dc9f727be1eb9bf4b9438932f7a235b00f14649a86a09513f7988221f692
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1190,7 +1190,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:8649b9b36104de802cc33d17cc190aeef424ea89dff09f5416766290a152524b
+    image: mpepping/cyberchef:latest@sha256:e27e868eea21ee505a302ea1835b2c93018c6d718f1c50a72f5f34770ec958ac
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1226,7 +1226,7 @@ services:
       WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
       WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
       CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:8acdc65b4fa28005404de995abeeaf517ea0d0b7f715d3f5d548982d83c99c6d
+    image: jlesage/czkawka@sha256:bcfba77e655c3ece1f3021b2382fc1fc97035cf757acdb644a8acdad3a89e89e
     labels:
       homepage.group: System Administration
       homepage.name: Czkawka
@@ -1274,7 +1274,7 @@ services:
       DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:38305e41eba65f961531c9ccc4dc106a91d488ea72f8f7d8fd9a1f11f7880030
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:6807762c28c906dd99502c1ee6872660e97b062faff5c5dcfdfac2b2de1c437e
     labels:
       homepage.group: Automation
       homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:69d9c81d08886c83c0259dbe03ab9b27330fceee25d890725dc1347382f304e0
+    image: freikin/dawarich:latest@sha256:a3b000a5a85b2997ceb7117cb078f7b8851e5f958c87d5286bf098a6e1e26ea0
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1392,7 +1392,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:f439e384b4111f0bc21b4a49e223f8fd7f40516285fc3825d7a8af15e710d47c
+    image: postgis/postgis:17-3.5-alpine@sha256:1a0fcce1a3040389cbd9ee577cf7b4929eac6914054e2eb5f66ebfb5c6021f69
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1443,7 +1443,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:69d9c81d08886c83c0259dbe03ab9b27330fceee25d890725dc1347382f304e0
+    image: freikin/dawarich:latest@sha256:a3b000a5a85b2997ceb7117cb078f7b8851e5f958c87d5286bf098a6e1e26ea0
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1547,7 +1547,7 @@ services:
       timeout: 30s
       retries: 5
       start_period: 30s
-    image: alplat/dockflare:stable@sha256:d5d77c1caeb3a82467499371dd5e7c9ab7c2c03c527d4f1465062b755aa7c8ca # Or :unstable for the latest features
+    image: alplat/dockflare:stable@sha256:da9502921f35787c78a061b7ab605237553f38ef07a46873bd7df8c7af19fb6d # Or :unstable for the latest features
     labels:
       homepage.group: Privacy/Security
       homepage.name: DockFlare
@@ -1642,7 +1642,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:2dca60ef8a60909f2422595bd08cacdd8bfe03a223b8431d14a3cd0f6af327d8
+    image: lscr.io/linuxserver/duplicati:latest@sha256:3f41c1ce0356b4c55b7447ff29f1878f85b7cb3b92fbd8628a5e7f61a434a5e2
     labels:
       swag: enable
       swag_port: 8200
@@ -1735,7 +1735,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/Audio/Playlists:/playlists
   fastenhealth:
     container_name: fastenhealth
-    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:99d0a41ff9779a4d87b7c233724102ed2faac69df9c15c8bf720f61940512000
+    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:d208351137e8ba6a06aacede0d87f459a8bb9fc2ed705e62f4a9ca3f693bd7ca
     labels:
       homepage.group: Lifestyle
       homepage.name: Fasten Health
@@ -1858,7 +1858,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:b2262ff484e11aec57a5379ee85d0034275cf2b61321c26afd2127b534cd1694
+    image: ghost:latest@sha256:a35c41b1be9d6f7dc4e20d265d74a679c3a36d8182eb983f9925373307000b53
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1963,7 +1963,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:44b2944d4beb460aa7582fc2ae9f37bfee4a75788b76f2bf25312094029e4680
+    image: postgres:14@sha256:d1c2ec5683f89f861117e4ec87f63a0ce52d431738f53c903793ef3aeef0205b
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -1983,7 +1983,7 @@ services:
       GITEA_INSTANCE_URL: http://gitea:3000
       GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
       GITEA_RUNNER_NAME: "gitea-runner-1"
-    image: gitea/act_runner:nightly@sha256:ec2fa777af444b08d070e6b42627a1b8463c522ab0da1e5f5b587b9d3bf9e112
+    image: gitea/act_runner:nightly@sha256:02ac569e7a76faa767963485336ab195c864e5db5172d5191a57c497dad27f3f
     ports:
       - 63604:63604
     profiles: ["rinoa-infra"]
@@ -2043,7 +2043,7 @@ services:
       VPN_SERVICE_PROVIDER: private internet access
     expose:
       - 8000
-    image: qmcgaw/gluetun:latest@sha256:1aa28a0db802279d852b08d2358867bd75e2e319431a5da53d3cbb9a6c19fdab
+    image: qmcgaw/gluetun:latest@sha256:a70a461a9c86966193f543009cfedf57e51d2f4880f0d834d7b3c0091c9250d1
     ports:
       - 3333:3333
       - 3334:3334
@@ -2076,7 +2076,7 @@ services:
       GOTIFY_UPLOADEDIMAGESDIR: data/images
       GOTIFY_PLUGINSDIR: data/plugins
       GOTIFY_REGISTRATION: false
-    image: gotify/server@sha256:4702c392ca723d5016fc938c8b22572c3509efca812bdc5221d25158ba0201e3
+    image: gotify/server@sha256:a3af47067ce6aad76aadf5ba32d6ddfecd1ae576a961359f039fd1831e8b7652
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Gotify
@@ -2144,7 +2144,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
+    image: ghcr.io/gethomepage/homepage:latest@sha256:0b596092c0b55fe4c65379a428a3fe90bd192f10d1b07d189a34fe5fabe7eedb
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2219,7 +2219,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:9b2e5525c411b7b2d0b74267e71321692c856b32db1429a1b40440184460b402
+    image: ghcr.io/immich-app/immich-server:release@sha256:aa163d2e1cc2b16a9515dd1fef901e6f5231befad7024f093d7be1f2da14341a
     labels:
       swag: enable
       swag_proto: http
@@ -2262,7 +2262,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:fa843f76cd34795ce8ca133d2c62ad67aa082b0f90b578ce7878210dcb5ad536
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b213fa3c82d27a21a299c46ffbb38a091f18384db1ad67d409a3b34fe0fce556
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2312,7 +2312,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:b27b14e301856ec1354acee365c42e233c558ceae2de5257d3af68544c442fa5
+    image: alangrainger/immich-public-proxy:latest@sha256:4aea9965af2d28f78cda19b31b6672fc31124ee9411858dc8a043e0e30354f7d
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2343,7 +2343,7 @@ services:
       EXTERNAL_IMMICH_URL: https://pics.${MY_TLD}
       IMMICH_API_KEY: ${IMMICH_POWER_TOOLS_KEY}
       IMMICH_URL: http://immich-server:2283
-    image: ghcr.io/varun-raj/immich-power-tools:latest@sha256:2abdc8a73cd7438006e16f7a9b50f51ca6806332f8855404375e8bbdd5b024f7
+    image: ghcr.io/varun-raj/immich-power-tools:latest@sha256:8e7a25ed0e99c9c323012e306fde6c97a1004765742c8802ad03c95503679e77
     ports:
       - 54018:3000
     profiles: ["rinoa-apps"]
@@ -2397,7 +2397,7 @@ services:
       retries: 2
       test: wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/trending || exit 1
       timeout: 5s
-    image: quay.io/invidious/invidious:latest@sha256:2836b5b8226a53a9cc2afdbd5f5fe6bccdd200f2e17cd92a828b4dc8d8b5cc06
+    image: quay.io/invidious/invidious:latest@sha256:9d972ea5930c2e170b3c4d49bdd9fa09bf03f077d555f58747342062dffc5876
     labels:
       swag: enable
       swag_proto: http
@@ -2433,7 +2433,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:8f07706baf04785a59cc32547d54fa530ef0d0128e60b100d8971bb5991de6a0
+    image: quay.io/invidious/invidious-companion:latest@sha256:e90c3d1fca037fff68cfac16d617b8f3e70ece12563389e7870e88071304affa
     logging:
       options:
         max-size: "1G"
@@ -2457,7 +2457,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:44b2944d4beb460aa7582fc2ae9f37bfee4a75788b76f2bf25312094029e4680
+    image: docker.io/library/postgres:14@sha256:d1c2ec5683f89f861117e4ec87f63a0ce52d431738f53c903793ef3aeef0205b
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3133,7 +3133,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3189,7 +3189,7 @@ services:
     restart: unless-stopped
   karakeep:
     container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:2724d4a9a6d13a7fa3babf53b9245767aae56c34f06042a8463ee983c6b41caf
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:20754dbdafb11dfe288bbb1c2342a7855081b08ea069e86fcf2d4a2d945d3653
     environment:
       BROWSER_WEB_URL: http://chrome:9222
       DATA_DIR: /data
@@ -3244,7 +3244,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:2dfed65a2680514729c01943f45d42346e9e6628c22f4de6d19c6c1c3ec8e5f1
+    image: libretranslate/libretranslate@sha256:1c4cc6341fb6d823230957f0d019b8ccffc457169f1dab61ded25aefc2f5b67c
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3278,7 +3278,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:6fba990e5b460ea53a3f91ebac823a3471f2254669ea96036d9411fedf0f65be
+    image: lscr.io/linuxserver/lidarr:latest@sha256:37a3df74f4c2a6f10eead66f4d8034362ebf2866f935026b4a71dd888b9e7f08
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3329,7 +3329,7 @@ services:
       spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
     expose:
       - 5000
-    image: thewicklowwolf/lidify:latest@sha256:958eaddeef8195470b974ee03512d9a5c31ad2af3167f7824448fb026fa9c94a
+    image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidify
@@ -3371,7 +3371,7 @@ services:
         type: bind
   linkstack:
     container_name: linkstack
-    image: linkstackorg/linkstack:latest@sha256:d9c4e1fd521e1ae78e796ac549b4d3e6371665775761d6c712aec8ac3bd9c5bc
+    image: linkstackorg/linkstack:latest@sha256:1c8b05399ee459ac601bac3eede7fbe765d1b6b7be725663b57f3220610958bf
     environment:
       TZ: ${TZ}
       SERVER_ADMIN: noreply@${MY_TLD}
@@ -3560,7 +3560,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:18-alpine@sha256:aa6eb304ddb6dd26df23d05db4e5cb05af8951cda3e0dc57731b771e0ef4ab29
+    image: postgres:18-alpine@sha256:4da1a4828be12604092fa55311276f08f9224a74a62dcb4708bd7439e2a03911
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3587,7 +3587,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:d70694effbcb6158a5b9c7e81548aeaad24f11958329de517c5efb664aeb6219
+    image: linuxserver/mariadb@sha256:91de7f701bc7fc3a424b81beafca7a7c6c4c5b7c8be6afd2ae148698695c0b0c
     networks:
       default: null
     ports:
@@ -3641,7 +3641,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:4f609e151426bdd85b3931e31e105014ece96876fd76d489698f7bacaec38619
+    image: lscr.io/linuxserver/mastodon:latest@sha256:f8a7403cc1f9b93e3d55201c62479a4aa03178d7e65620670bbb27312a1c7a32
     labels:
       swag: enable
       swag_proto: http
@@ -3682,7 +3682,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3704,7 +3704,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:e24677c32ddb38eb53bb5284ac99d723ceadd994d0d1063ea606d933933fef13
+    image: getmaxun/maxun-backend:latest@sha256:68ee45d8b41cf47b9838e0d21013370ce84c1b0f5ad459705058747bade52da4
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3720,7 +3720,7 @@ services:
     depends_on:
       - maxun-backend
     <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:b0b9bcb9e2082f9047fe3cfd01d9c72a4d8eef93cd6f509b00a87c23bf26bf57
+    image: getmaxun/maxun-frontend:latest@sha256:d01897f9d8660412731efdf1e5b91ad5bfd2e077da1e9f5eb47a889303750ce4
     labels:
       swag: enable
       swag_proto: http
@@ -3748,7 +3748,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3830,7 +3830,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: pgvector/pgvector:pg17@sha256:1a5ea285a159bed991c74a9c4751b6eadc536b3c3263f3f95ec3865885a62b69
+    image: pgvector/pgvector:pg17@sha256:494dff7e67e7bc2c826b94c331364978d145ebb86fd338154138b084223b7f67
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3907,7 +3907,7 @@ services:
           create_host_path: true
   mixpost:
     container_name: mixpost
-    image: inovector/mixpost:latest@sha256:9a118d60bf1514ff19f5adee0b9d7684f8c00ee520e2bf4bcc295665f048c557
+    image: inovector/mixpost:latest@sha256:60f730aa99953a2956a69bced9b67c547f063dd647eaa0dc8a82f00f1a6f7450
     depends_on:
       mariadb:
         condition: service_healthy
@@ -3984,7 +3984,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:606f8e029603330411a7dd10b5ffd50eefc297fc80cee89f10a455e496a76ae7
+    image: mongo:7@sha256:81ed620b45935fb49704010b75d3fa73df547f71323cfdba49323a64412253a4
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -4020,7 +4020,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:be2c16b169bec7ed2fdaef102e27969f3f9e8cae7d17cd7e5ab532f0b317c7a0
+    image: foxxmd/multi-scrobbler@sha256:9693b07fa8b333d2fd26aa04b5bc1fa53d827b117e4dd9a85b9aa8bdd0b79168
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -4060,7 +4060,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:a9beb0dcaa547f0742a322f497af72127338d6ab8f3697b3be44f8ab737726f2
+    image: docker.n8n.io/n8nio/n8n@sha256:fdf1e22bc04a03e38da41da5a56ba9b9a48510f480874290ea9c180844cbdb0c
     labels:
       swag: enable
       swag_proto: http
@@ -4107,7 +4107,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
+    image: deluan/navidrome:latest@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4144,10 +4144,25 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/backups/navidrome:/backups
   netalertx:
     container_name: netalertx
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETUID
+      - SETGID
+      - NET_RAW
+      - NET_ADMIN
+      - NET_BIND_SERVICE
     environment:
       TZ: ${TZ}
       PORT: 20211
-    image: jokobsk/netalertx:latest@sha256:e0c6ae73a28eee1d94f959d1d266d4b5229cb5e784f6dae48fea7368e246a1e1
+      PUID: ${NETALERTX_UID:-20211} # Runtime UID after priming (Synology/no-copy-up safe)
+      PGID: ${NETALERTX_GID:-20211} # Runtime GID after priming (Synology/no-copy-up safe)
+      LISTEN_ADDR: ${LISTEN_ADDR:-0.0.0.0} # Listen for connections on all interfaces
+      GRAPHQL_PORT: ${GRAPHQL_PORT:-20212} # GraphQL API port
+      ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false} # Set to true to reset your config and database on each container start
+      NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0} # 0=kill all services and restart if any dies. 1 keeps running dead services.
+    image: jokobsk/netalertx:latest@sha256:f47a8020ae61fd668e1580cd5014e1a34e8ffa80360b1652e6deb3a7347f0238
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4172,16 +4187,11 @@ services:
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
+    tmpfs:
+      - "/tmp:mode=1700,uid=0,gid=0,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
     volumes:
-      - ${DOCKER_VOLUME_CONFIG}/netalertx/config:/app/config
-      - ${DOCKER_VOLUME_CONFIG}/netalertx/db:/app/db
-      # (optional) useful for debugging if you have issues setting up the container
-      # - ${DOCKER_VOLUME_CONFIG}/netalertx/logs:/app/log
-      # (API: OPTION 1) use for performance
-      - type: tmpfs
-        target: /app/api
-      # (API: OPTION 2) use when debugging issues
-      # - ${DOCKER_VOLUME_CONFIG}/netalertx/api:/app/api
+      - ${DOCKER_VOLUME_CONFIG}/netalertx/config:/data
+      - /etc/localtime:/etc/localtime:ro
   nextcloud:
     container_name: nextcloud-aio-mastercontainer
     environment:
@@ -4191,7 +4201,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:74abbbdfcffff867f5e22f14da8446dbafffb4368e94287b4697ff0a460e85f9
+    image: nextcloud/all-in-one:latest@sha256:4e23ad7f7a98c9284dffee2d8b638d368ef848ed055920d1d976284f7c6c26f1
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4242,7 +4252,7 @@ services:
       NC_SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       NC_SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       NC_SMTP_FROM: noreply@${MY_TLD}
-    image: "nocodb/nocodb:latest@sha256:d3aba4f7e89bd18fc01d6853eea0fa82476b161a678f7f0ff52380f4c52bb87f"
+    image: "nocodb/nocodb:latest@sha256:c3d38b5563234d287710519ff7507d43dfa553241bc70b955f91d90698065340"
     labels:
       homepage.group: Code/DevOps
       homepage.name: NocoDB
@@ -4279,7 +4289,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4296,7 +4306,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:5c2d3a515b5c1d120cb70f3c701c3c760ce742edd352f3acaa430280d9b725eb
+    image: lscr.io/linuxserver/ombi:latest@sha256:dfd3a3380a042ea44b4936703836d8ae7ee46bcae551b3fa574c9c25632eb027
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4375,7 +4385,7 @@ services:
       OLLAMA_MODEL: smollm2:1.7b
       THEME: "pole"
       DISABLE_DICTIONARY: false
-    image: kweg/omnipoly:latest@sha256:fa133d5ac6534ee45e393fab85ad61098a0826351724996e0d29ba61033dde7d
+    image: kweg/omnipoly:latest@sha256:2c7524c4f0778aa2849d25889b192d383b944b060feaf9109d70b5e137c7d3c9
     labels:
       homepage.group: Personal Tools
       homepage.name: OmniPoly
@@ -4444,7 +4454,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:000b87a6ae726aa7f6611a0064ba528ba1a6aff6ead5fb3b6c89fd4a5717eb8a
+    image: ghcr.io/open-webui/open-webui:main@sha256:ea750f19fc2a7ca0cb221bc512b8c2c470a01616b89ed98cb77d9ab0d5f24109
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4495,7 +4505,7 @@ services:
       PAPERLESS_URL: https://docs.${MY_TLD}
       USERMAP_GID: ${PGID}
       USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:a28330462994b937938e02aaa5632a1effcc7f9acfba96c1bef9c50e1167a027
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:1d99ede700ffdf7aa44899b5fee29c8c279f175769b6cb295e91e9f15772728e
     labels:
       swag: enable
       swag_proto: http
@@ -4587,7 +4597,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4662,7 +4672,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4747,7 +4757,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:0cac1e9b921ef783b49bd1f90243c830946ceb0edf175e66ca19b3991c55257e
+    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4776,7 +4786,7 @@ services:
     expose:
       - 9000
       - 9443
-    image: portainer/portainer-ce:alpine@sha256:a04e0ac3e99172e451055419e2ed46c67f24bff72209ab09235079d7642e87d8
+    image: portainer/portainer-ce:alpine@sha256:f56ef070ee60896039fcb219e639da6c1a0cdc726f0bf2eb5c124d33a1c78bf4
     labels:
       swag: enable
       swag_proto: http
@@ -4950,7 +4960,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:e74a1e093dcc223d671d4b7061e2b4946f1989a4d3059654ff4e623b731c9134
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -5119,7 +5129,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/radarec:latest@sha256:df726f35e3a1ef2f0cd482a6cf993bac8782804efd38ee8004c8694f7e8f526e
+    image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
     labels:
       homepage.group: Servarr Stack
       homepage.name: RadaRec
@@ -5166,7 +5176,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
+    image: lscr.io/linuxserver/radarr:latest@sha256:6d3e68474ea146f995af98d3fb2cb1a14e2e4457ddaf035aa5426889e2f9249c
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5228,7 +5238,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:f26fd329f35b97bccdf5ee5a7b558df0ccf1e073a1d7a5787e433043e22b9296
+    image: amruthpillai/reactive-resume:latest@sha256:dbaa9e91e1b5c093d27dccd0a5d717129747ccaa7d2d3e0277de2377f6893b95
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5261,7 +5271,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5613,7 +5623,7 @@ services:
       - "/dev/sdd:/dev/sdd:rwm"
       - "/dev/sde:/dev/sde:rwm"
       - "/dev/sdf:/dev/sdf:rwm"
-    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:8922d5aac20c5cbf7869e3fd47ab9900ad48acc18ffd72879ccb4c58dfe6bf41
+    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:18689773150d6b8b53c94a435f40f7b6e946fd4a6d40b44c64fa2154a5b38941
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: smartd.${MY_TLD}
@@ -5668,7 +5678,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:771d475fd7a6b9e254ad725220f977303cdb132fb2136401ea806553330214eb
+    image: searxng/searxng:latest@sha256:aace39e738c8022456a9f64aa8289e347833bb9e1f29cd248a22cc7ca7a6f5a3
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5785,7 +5795,7 @@ services:
       interval: 30s
       timeout: 5s
       retries: 3
-    image: signoz/signoz:v0.96.1@sha256:e2cded000c87adb0366c9ae4f292e034515458552d151879195071ba4f078b4e
+    image: signoz/signoz:v0.113.0@sha256:381d613fc4a186243a0ba28e55b957921e6d8663dd9111ef95c2cfdead1021c5
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Signoz
@@ -5877,7 +5887,7 @@ services:
       NGINX_ERROR_LOG_FILE: /swag/log/nginx/error.log
       OTEL_RESOURCE_ATTRIBUTES: host.name=signoz-host,os.type=linux
       LOW_CARDINAL_EXCEPTION_GROUPING: false
-    image: signoz/signoz-otel-collector:v0.129.13@sha256:432feb1755922bcc9a41406fd953410d1848488bbd5215621605ee0dfcf37622
+    image: signoz/signoz-otel-collector:v0.144.2@sha256:cc3e1559f0968f10a27977323c20323ca072ea3858af2233263e82532d551516
     ports:
       # - "1777:1777"     # pprof extension
       - "4317:4317" # OTLP gRPC receiver
@@ -5890,7 +5900,7 @@ services:
       - ${DOCKER_VOLUME_CONFIG}/swag/log/nginx/error.log:/swag/log/nginx/error.log:ro
   signoz-schema-migrator-async:
     <<: *signoz-db-depend
-    image: signoz/signoz-schema-migrator:v0.129.13@sha256:562d193f00683d917bfb37d06c37cc8ce1f0885f13f399272e339b86a65498b7
+    image: signoz/signoz-schema-migrator:v0.144.2@sha256:ed1d4bd65bc4a4d9b22d3c41e127f1aedebfdfa343ab94b7e8c57072bbf3129f
     container_name: signoz-schema-migrator-async
     command:
       - async
@@ -5900,7 +5910,7 @@ services:
     restart: on-failure
   signoz-schema-migrator-sync:
     <<: *signoz-common
-    image: signoz/signoz-schema-migrator:v0.129.13@sha256:562d193f00683d917bfb37d06c37cc8ce1f0885f13f399272e339b86a65498b7
+    image: signoz/signoz-schema-migrator:v0.144.2@sha256:ed1d4bd65bc4a4d9b22d3c41e127f1aedebfdfa343ab94b7e8c57072bbf3129f
     container_name: signoz-schema-migrator-sync
     command:
       - sync
@@ -5984,7 +5994,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -5998,7 +6008,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:02b4d538d351d6e35882a021c08e8600fe95d28860fb1dd724b597166e7221ca
+    image: lscr.io/linuxserver/sonarr:latest@sha256:37be832b78548e3f55f69c45b50e3b14d18df1b6def2a4994258217e67efb1a1
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6047,7 +6057,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/sonashow:latest@sha256:4b40df407bf31577668bfb3191e007ac78c349d81bfde7463ec8433d417ebd3d
+    image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
     labels:
       homepage.group: Servarr Stack
       homepage.name: SonaShow
@@ -6102,7 +6112,7 @@ services:
       TZ: ${TZ}
       #Script interval in seconds
       SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
+    image: mrusse08/soularr:latest@sha256:efa11f11ec1ad398f7456e3df304b942841f1ef975a02859c2e31cfdd24882d4
     network_mode: service:gluetun
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -6121,7 +6131,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:84fead20dc2bcc00d6f0d2df53e56866b4fe634640e075820b420ae4ea146fd2
+    image: ghcr.io/mrusse/soularr:main@sha256:2148f2c7f405a31ce64082ce085c88bf6e486fbb705bec20ead6a170fd8def72
     labels:
       homepage.name: Soularr
       homepage.group: Downloaders
@@ -6156,7 +6166,7 @@ services:
         condition: service_started
         required: true
         restart: true
-    image: slskd/slskd@sha256:bcf9820dab68e21d2bba8ebb1ffd583d71fcba542a50a1e998119f69b7b498fe
+    image: slskd/slskd@sha256:17ef977563be206f3b5932080b1e23883b2cb39dc9010640f6f39b4eaec887e3
     labels:
       homepage.name: Soulseek
       homepage.group: Downloaders
@@ -6185,7 +6195,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:dedc276c0899078f8c10788406592583a22b91d4d46cd11cbffe2b4577b59b79
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:4023b3e993d3764efe41d65eb4d1be8d9ff2ad8d756eb71de35fe805882ff0b5
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6225,7 +6235,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:515364d7c2005fe5dcfdf56b4750b165875bbb6a0a1dced1957c59c8cde61c07
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:cc287bb47ad754ce052ee3c35d023f753532cbbde63dffc6abb150f338ed41ce
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6277,7 +6287,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:4c7b2d56f6d5e9097ff2821dd80c235576637738709ec6d73507a4c14cfcec2d
+    image: lscr.io/linuxserver/swag:latest@sha256:9faf03e539a775b578e995f6782c96bc7dabef635c44417a147469dce66eca59
     labels:
       swag: enable
       swag_proto: http
@@ -6333,7 +6343,7 @@ services:
       SECRET_KEY: ${TANDOOR_SECRET_KEY}
       TZ: ${TZ}
       UID: 1000
-    image: vabene1111/recipes@sha256:c1a1d494631955bdb6c200066ee5914adbc378805ac0e4df9aeb795fe25c87aa
+    image: vabene1111/recipes@sha256:7ce6534c9ab0e471fd0f08add67e871b9173fb580c2f86294c3ead025603a3d7
     labels:
       homepage.group: Lifestyle
       homepage.name: Tandoor Recipes
@@ -6379,7 +6389,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6448,7 +6458,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:d62bcfe8230260e5d5de47796c498867e81d4ee5c70799a302caed91b5870b73
+    image: josh5/unmanic:latest@sha256:7043a04d2d56f6940fe1ce66fb1ead4a752579b6febfb4122a466a533f75a1aa
     labels:
       homepage.group: Media Library
       homepage.name: Unmanic
@@ -6547,7 +6557,7 @@ services:
     environment:
       AWS_ACCESS_KEY_ID: ${VAULT_HASHICORP_AWS_ACCESS_KEY_ID}
       AWS_SECRET_ACCESS_KEY: ${VAULT_HASHICORP_AWS_SECRET_ACCESS_KEY}
-    image: hashicorp/vault:latest@sha256:eb0ba6836e8d4699b7a1e8ca70d8433f7b87dcd067e6d82dff237d3ed2600ea0
+    image: hashicorp/vault:latest@sha256:5f244d447c6f90107149c9565da5ffedf847cec673ba0062a82fc3dd83c89e65
     labels:
       homepage.group: Code/DevOps
       homepage.name: HashiCorp Vault
@@ -6577,7 +6587,7 @@ services:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:9f1bbd7f24e2afdac64ff0985ef801d48f63086540a0844fc05727642bb5360a
+    image: bellamy/wallos:latest@sha256:46f25daeebedbe00f409abdc82f07d1bde6818dc9fee8b360b0b09c453c4b999
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6633,7 +6643,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:86a72847c4410bc0bb4dc6a0156eef4eb0da0033fee9c149e3afadaca879847f
+    image: clidey/whodb@sha256:95ef4c6e763a526f9e91d14f658ac7aef61639ee21c34c0339ef6cb213a02cf7
     environment:
       WHODB_CLICKHOUSE_1: '{
         "host": "signoz-clickhouse"
@@ -6808,7 +6818,7 @@ services:
       PGID: ${PGID}
       DISABLE_BUILTIN_AUTH: true
       TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:83fc0b50985d196226b7c28a27062a1c4e63124a5d6d2448710aee222637b79e
+    image: ghcr.io/wizarrrr/wizarr@sha256:855e2a9a98eb18ffee26f321aac5a58712bcb04a537f10c21b95d191f9407588
     labels:
       homepage.group: Servarr Stack
       homepage.name: Wizarr
@@ -6839,7 +6849,7 @@ services:
       YDL_CONFIG_PATH: /youtube-dl/config.yml
       YDL_DEBUG: "false"
     hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:a1ca58da9af2a6cf73f4915094384674712d45be4428d4326650fabf90093827
+    image: nbr23/youtube-dl-server:latest@sha256:ded22de8d482458f11e758aad15152832d4b031896832893cc46b8ecff4eb786
     labels:
       homepage.group: Downloaders
       homepage.name: YoutubeDL