Adding Vault Agent.

Merge pull request '🔧 Renovate: Update (digest) searxng/searxng:latest Docker digest to 04cc81a' (#2684 ) from renovate/searxng-searxng-latest into main
Reviewed-on: #2684
2026-05-25 20:08:51 -04:00 · 2026-05-25 11:53:11 -04:00 · 2026-05-25 14:41:38 +00:00 · 2026-05-21 22:30:18 -04:00 · 2026-05-22 02:29:46 +00:00 · 2026-05-21 21:53:07 -04:00
2 changed files with 54 additions and 34 deletions
@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.74 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.75 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -50,7 +50,7 @@
 | garage | dxflrs/garage:v2.3.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.26.1 | Private Code Repo |
+| gitea | gitea/gitea:1.26.2 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -158,7 +158,7 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.18.3 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.18.4 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
  healthcheck:
    test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:d1cc70645bbcef743615463a2fa4616e841407545e18f560aed0c49671a90147
+  image: docker.io/valkey/valkey:9-alpine@sha256:a35428eba9043cc0b79dbe54100f0c92784f2de00ad09b01182bfb1c5c83d1bd
  environment:
    ALLOW_EMPTY_PASSWORD: yes
    VALKEY_DATA_DIR: /data/valkey
@@ -177,7 +177,7 @@ services:
    container_name: adguard
    environment:
      TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.74@sha256:f29c58a91f79387cbbbb042e140814f58e830d457d44af03d662c8df43db9dea
+    image: adguard/adguardhome:v0.107.75@sha256:50ac5916778faa06ad4adcff606c7aaf806cb55dc1995160dbf50633c9bda94d
    labels:
      swag: enable
      swag_proto: http
@@ -261,7 +261,7 @@ services:
      APPRISE_ATTACH_SIZE: 500
      APPRISE_CONFIG_DIR: /config
      APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:3b7155682d9aaf168668621d4a63f2dc2c63e100593543113b81fa201a91d3e0
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:0d114aa96f1782173af59c6af88b1dc75918af71ab8a160a3b1e48da1b5de96f
    labels:
      swag: enable
      swag_proto: http
@@ -483,7 +483,7 @@ services:
    expose:
      - 9091
      - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:47f64d0477329255c5efc1f01b584e1a341244354926c8f82fcc88dfcfbc3f94
+    image: authelia/authelia:master@sha256:0cd9474b07bbabb2614ed19e330b847b0b87d3f119b72d8d620137b421976334
    labels:
      homepage.group: Privacy/Security
      homepage.name: Authelia
@@ -577,7 +577,7 @@ services:
      TZ: ${TZ}
      DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
    hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:4b7bb6d861c08bbf0c388b936ada8b2ba57669ca9974323f504e974577d19d63
+    image: lscr.io/linuxserver/bazarr:latest@sha256:95f27692c3de6dbe130cd035d342d8138ec74ade7b62cfc52e11ae222c52c855
    labels:
      homepage.group: Servarr Stack
      homepage.name: Bazarr
@@ -787,7 +787,7 @@ services:
      - 3000
    extra_hosts:
      - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:ba9fb80100147d657c6fbffadf95308f6843c6931d3e064ac2fb612282101f8e
+    image: ghcr.io/browserless/chromium:latest@sha256:af0f9442caf5908fdf655a23c34e50e6f1c66ce3306d88e3d4578280bcba9661
    labels:
      swag: enable
      swag_proto: http
@@ -847,7 +847,7 @@ services:
      TZ: ${TZ}
      LC_ALL: en_US.UTF-8
      LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:2d0030e12494be9ebf6a6ebbbad46afe5763f498bbfefe9ebb7f0bf6be3ca5dc
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:d89d4187221206f7f9f2c7946e7483815db905ca7d122644081aebd5d23ba391
    labels:
      homepage.description: Page change monitoring with alerts
      homepage.group: System Administration
@@ -1042,7 +1042,7 @@ services:
    environment:
      MB_DB_FILE: /data/metabase.db
      MGID: ${GID-1000}
-    image: metabase/metabase@sha256:34e59486732cb203701bcfe9c7515acfa13c58c15bb4475a0c88e987ac18176a
+    image: metabase/metabase@sha256:8d6e649d4bbd19aa641a5b71bff2c89e3c2f348e8a1f0b527573b06c73c7748d
    labels:
      homepage.group: Privacy/Security
      homepage.name: CrowdSec Dashboard
@@ -1074,7 +1074,7 @@ services:
      - crowdsec-db:/data/
  cyber-chef:
    container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:f65dd46824d3a202d36750f538fe7fc01d579e2623ca5a57c864625bf1bb3712
+    image: mpepping/cyberchef:latest@sha256:c9a202b56408dea46f28d95177a896d59e284902c884d0ef84377fecdf0ab286
    labels:
      homepage.description: Web app for encryption, encoding, compression, and data analysis
      homepage.group: Privacy/Security
@@ -1192,7 +1192,7 @@ services:
      retries: 30
      start_period: 30s
      timeout: 10s
-    image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
+    image: freikin/dawarich:latest@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
    labels:
      homepage.group: Privacy/Security
      homepage.name: Dawarich
@@ -1232,7 +1232,7 @@ services:
      retries: 5
      start_period: 30s
      timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:5dc2f0b5871ba999a2825d3b118e4d70a7e61577ab5fca2d8695632007214acb
+    image: postgis/postgis:17-3.5-alpine@sha256:5a30b4cf0c787aae9e428c1fce1ef736fccc7fc294958ee99d3836fb51b1819b
    profiles: ["rinoa-apps"]
    restart: always
    shm_size: 1G
@@ -1283,7 +1283,7 @@ services:
      retries: 30
      start_period: 30s
      timeout: 10s
-    image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
+    image: freikin/dawarich:latest@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
    profiles: ["rinoa-apps"]
    restart: on-failure
    stdin_open: true
@@ -1708,7 +1708,7 @@ services:
      mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
      mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
      url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:876880a26b770631949d9bf2aa4b62d169e2a2f1dad56e9b065ac5d6f1c346e1
+    image: ghost:latest@sha256:588d5f5ed5ac6e94925860f76b2b14a18cf5d71c58a236f8817c600a9454fe2d
    labels:
      homepage.group: Lifestyle
      homepage.name: Ghost
@@ -1753,7 +1753,7 @@ services:
      GITEA__mailer__SMTP_PORT: 25
      GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
      GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
+    image: gitea/gitea:1.26.2@sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031
    labels:
      cloudflare.tunnel.enable: true
      cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1813,7 +1813,7 @@ services:
      interval: 10s
      start_period: 20s
      test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:04a3d3d1475ad37f07d8219d0e5eb46f64ac132bf6e110c772dab45e12e4a919
+    image: postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
    networks:
      default: null
    profiles: ["rinoa-infra"]
@@ -2310,7 +2310,7 @@ services:
      test:
        - CMD-SHELL
        - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:04a3d3d1475ad37f07d8219d0e5eb46f64ac132bf6e110c772dab45e12e4a919
+    image: docker.io/library/postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -2359,7 +2359,7 @@ services:
    container_name: jellyfin
    environment:
      JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:1694ff069f0c9dafb283c36765175606866769f5d72f2ed56b6a0f1be922fc37
+    image: jellyfin/jellyfin@sha256:bc9fa8e1462fffe3d8d4255fc62af478602641f4c0e5f4875fea8563d1189837
    labels:
      homepage.group: Media Library
      homepage.name: Jellyfin
@@ -3131,7 +3131,7 @@ services:
      TZ: America/New_York
      DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
    hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:7f34e2a907c7bcfc5cd49a1685db21a1e5055c96e8ad5e0d77ee94e1d50d84e5
+    image: lscr.io/linuxserver/lidarr:latest@sha256:ca2f95634d422fdeccfbff2a42cbe3a4fed1170f7e3546d99d5d5f2c9c9aa03b
    labels:
      homepage.group: Servarr Stack
      homepage.name: Lidarr
@@ -3182,7 +3182,7 @@ services:
      spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
    expose:
      - 5000
-    image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
+    image: thewicklowwolf/lidify:latest@sha256:15a28139a6b16ff4bc5e6cc2fae413f837f8bd1971e15918c6cc7fd7fa0dcf54
    labels:
      homepage.group: Servarr Stack
      homepage.name: Lidify
@@ -3441,7 +3441,7 @@ services:
      timeout: 10s
      retries: 5
    hostname: Rinoa
-    image: linuxserver/mariadb@sha256:93fb1eebb9ef4e4e820c90827e217dfafe7e8cb5839a1ff3cd40ac4f205c06ea
+    image: linuxserver/mariadb@sha256:41e8b59056fda0dfca6e24e2515674b18a76e774c93e464899da4d7116bc147d
    networks:
      default: null
    ports:
@@ -3914,7 +3914,7 @@ services:
      NODE_ENV: production
      WEBHOOK_URL: https://n8n.${MY_TLD}/
      GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:bd3142315412165662d34c7d1556d19deb42225d639c448d0b35cdd3d9f749e4
+    image: docker.n8n.io/n8nio/n8n@sha256:9f1f8e4c093c9924338bd168e3f813f746041d13b337753af0dbdd329e7b50f7
    labels:
      swag: enable
      swag_proto: http
@@ -4623,7 +4623,7 @@ services:
      - plant-it-valkey-data:/data/valkey
  plantuml-server:
    container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
+    image: plantuml/plantuml-server:jetty@sha256:6ab7824dbc4882156ba9b6d4f8ca42d697a79634c073d4d28eb768158f6ef5a7
    labels:
      homepage.group: Personal Tools
      homepage.name: PlantUML
@@ -4826,7 +4826,7 @@ services:
      TP_COMMUNITY_THEME: false
      TP_THEME: space-gray
    hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:c9fe528f34b1fd3715438b6f6d6991d64e2965f2c055db36398bc66a0e7eab01
    labels:
      homepage.group: Servarr Stack
      homepage.name: Prowlarr
@@ -4997,7 +4997,7 @@ services:
      tmdb_api_key: ${TMDB_API_KEY}
    expose:
      - 5000
-    image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
+    image: thewicklowwolf/radarec:latest@sha256:1ff2aee6682b81363160a686860f7ead8314c47a13af88d623bf7f149d165e7b
    labels:
      homepage.group: Servarr Stack
      homepage.name: RadaRec
@@ -5106,7 +5106,7 @@ services:
      STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
      STORAGE_USE_SSL: false
      TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:b760446c4301af067e7d595537a877e378363aa6ce921b7349e62983621826aa
+    image: amruthpillai/reactive-resume:latest@sha256:c55782377718e9475e318f9a802fcff380f978331a1ae509096f97aadb971c29
    labels:
      homepage.group: Professional Services
      homepage.name: Reactive Resume
@@ -5549,7 +5549,7 @@ services:
    container_name: searxng
    environment:
      SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
+    image: searxng/searxng:latest@sha256:04cc81a759e882e411569e008a77243ab8b0fc4137bcf88018cd7b7c3cbdff41
    labels:
      homepage.group: Privacy/Security
      homepage.name: SearxNG
@@ -5603,7 +5603,7 @@ services:
      SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
      SEMAPHORE_EMAIL_SECURE: false
      SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.18.3@sha256:e9260bfa82556e574b2f372a1d880a9cfe16aa4621a39ae79ac32e44e50f9da8
+    image: semaphoreui/semaphore:v2.18.4@sha256:e32c60f52e42799be077c6669f8dc9fcb6cedb1a1f851f791a6be851f4347c41
    labels:
      homepage.group: Code/DevOps
      homepage.name: Semaphore UI
@@ -5926,7 +5926,7 @@ services:
      tmdb_api_key: ${TMDB_API_KEY}
    expose:
      - 5000
-    image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
+    image: thewicklowwolf/sonashow:latest@sha256:fae1105710063e6900159c32942128bc8d78522c2cedf54036f1cbdd9c49281e
    labels:
      homepage.group: Servarr Stack
      homepage.name: SonaShow
@@ -6064,7 +6064,7 @@ services:
      - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
  speedtest-tracker:
    container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:bf18a04f9e61573cefb0112ca9604a93a82451ada74050a6b30b41e30651d9a1
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:3f75c5ec7a14c232f91af1ddda4248543bb2e8f0aeb18fec64c34d2f42dd00ce
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
@@ -6453,6 +6453,26 @@ services:
    volumes:
      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/config/:/vault/config
      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/logs/:/vault/logs
+  vault-agent:
+    cap_add:
+      - IPC_LOCK
+    command:
+      - agent
+      - -config=/vault/config/vault-agent.hcl
+    container_name: hc-vault-agent
+    environment:
+      VAULT_ADDR: http://hc-vault:8200
+      SKIP_SETCAP: true
+    image: hashicorp/vault:2.0.0-bugfix
+    ports:
+      - 8100
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/config/:/vault/config:ro
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/data/:/vault/data:ro
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/tokens/:/vault/tokens
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/output/:/vault/output
  wallos:
    container_name: wallos
    environment:
@@ -6487,7 +6507,7 @@ services:
      - wallos-logos:/var/www/html/images/uploads/logos
  web-check:
    container_name: web-check
-    image: lissy93/web-check@sha256:f1aee591cef9bb1b76e8e37786675144cbdd17a07e9b1968fa2b797798c91ab4
+    image: lissy93/web-check@sha256:6c2c4957c8794ffbcd50e0b560f6f010f17884b36b587c74155482fbad15a077
    labels:
      homepage.group: Privacy/Security
      homepage.name: Web-Check
@@ -6513,7 +6533,7 @@ services:
    restart: unless-stopped
  whodb:
    container_name: whodb
-    image: clidey/whodb@sha256:29f5b78bb2e3d07514058f33f0157bd0845b0b9d841a6775d7ef9c5a952c4e78
+    image: clidey/whodb@sha256:daee5c278a431a14f7d76a2f55eb483452d16e151f90098a61ceea358d35f025
    environment:
      WHODB_CLICKHOUSE_1: '{ "host": "signoz-clickhouse" }'
      WHODB_MARIADB_1: '{ "host": "mariadb", "user": "root", "password":