Merge remote-tracking branch 'refs/remotes/origin/manyfold-postgres-deployment_2025-12-20T13-16-50' into manyfold-postgres-deployment_2025-12-20T13-16-50

Reviewed-on: #1401

README.md

@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.70 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -95,7 +95,7 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:latest | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:0.130.1 | Self-hosted digital asset manager for 3D print files |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
 | mastodon | lscr.io/linuxserver/mastodon:latest | Open-source social network |
@@ -162,7 +162,7 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.16.45 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.16.47 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |

docker-compose.yml

@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.70@sha256:33e2240c466b2bb1d4fe9d65fd86178160bf6ee8835cf7b50ab3a7c5e39571fe
+    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:ac6764993e634f348d5a11c69d92a578cdf8202c6e6e11777e2db16c0b41a066
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:8b607429101cb393764025dd459346c0fa167c6cd55627ee051d16f8a48d5a93
     labels:
       swag: enable
       swag_proto: http
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:3ccbb4eb4e8fe35fef673c52c2fc664713420bf5b68610cc581157f2358824a5
+    image: postgres:14-alpine@sha256:14f02666642586a64d6fae8ef42d479fd76456a77c73ae8a626b8fe323b76d22
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -585,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:12b17de24ca29cd2e2642bd57d474223c51be66bbe6d146d1c1ab8490e945785
+    image: authelia/authelia:master@sha256:12ca4e715f8c3a8c7ae1a2d0ef35cc0fe5d137255d6fc08fc20d83e909dfb23c
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:a5074487380d4e686036ce61ed6f2d363939ae9a0c40123d1a9e3bb3a5f344b4
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -679,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:ec11e988e8e13411c994a4d9f43ed9b97409aa92c1da54d9f23926c3da7c2032
+    image: lscr.io/linuxserver/bazarr:latest@sha256:648f694532a3a53d8cf78bc888919ef538659bad41af4c680b0427ad1047d171
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -1048,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:5108968338eb3f90cd4ecd6c15efcfb1b59c3a569565bbedce1555c33ec6c368
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:0d5da9f389a60f12f1154cfd0c3e062d5dbe997dd235280c017a5ca679230b7c
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1074,7 +1074,7 @@ services:
     container_name: convertx
     environment:
       JWT_SECRET: ${CONVERTX_JWT_SECRET}
-    image: ghcr.io/c4illin/convertx@sha256:2397d94fa091e48f1fbfcb97dd28d6c36cf7bdac2a33fb5cd66813e6ab723849
+    image: ghcr.io/c4illin/convertx@sha256:1402221b314c794e918a219b7f7698a214e447304472ca406acccc91e9537e63
     labels:
       homepage.group: System Administration
       homepage.name: ConvertX
@@ -1158,7 +1158,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:bbea3d5c486de65f1b80b2315c36b184ec9ee66525cf49e8c596b3707485008a
+    image: metabase/metabase@sha256:791299d1e7e382fb2426bcc3bbb4f29d51e9a63f96c5aa40d590f72285d02a53
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1274,7 +1274,7 @@ services:
       DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:42657c77f5eb1a4fd2b0cf222ae1b2403cc2dc9d37fe56d66f9c080e4aaa7688
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:27d105fad9661008aadd9060a6405619c7f30aaa747198c7c423aac37bfc3229
     labels:
       homepage.group: Automation
       homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:c302b2bec65d8523a4b450b859d89ff348170551317254f9fdbbe22005f38d27
+    image: freikin/dawarich:latest@sha256:4f83ccbfcbc5166ba9f96ba7571ab0812c2596f99079ceffc7808a3f896bef0b
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1392,7 +1392,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:d2479a02791972a0210f271de539b69eeeedb5d225e7ff974c5661740d3ed598
+    image: postgis/postgis:17-3.5-alpine@sha256:f439e384b4111f0bc21b4a49e223f8fd7f40516285fc3825d7a8af15e710d47c
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1443,7 +1443,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:c302b2bec65d8523a4b450b859d89ff348170551317254f9fdbbe22005f38d27
+    image: freikin/dawarich:latest@sha256:4f83ccbfcbc5166ba9f96ba7571ab0812c2596f99079ceffc7808a3f896bef0b
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1506,7 +1506,7 @@ services:
       TASKS: 1
       VOLUMES: 1
       LOG_LEVEL: debug
-    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:3400c429c5f9e1b21d62130fb93b16e2e772d4fb7695bd52fc2b743800b9fe9e
+    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476
     networks:
       default: null
     ports:
@@ -1642,7 +1642,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:e8102af032b42636fe85a2633f4cc9c074f4694ab850e3ac419aef12e602094d
+    image: lscr.io/linuxserver/duplicati:latest@sha256:0994aa6da740efe41d4070cc618d525b5b42a13645896344ca0eeafab5f3bd65
     labels:
       swag: enable
       swag_port: 8200
@@ -1695,7 +1695,7 @@ services:
         type: bind
   excalidraw:
     container_name: excalidraw
-    image: "excalidraw/excalidraw:latest@sha256:b2b642fdaca652cf23c20e07d3603bed5b22b2e1c88a15bec5f92e8a38d9041c"
+    image: "excalidraw/excalidraw:latest@sha256:95d528cb4f8d18e0fbdc42ae3d09b5c4a899bfbd6bb89eeaf94b904330d79714"
     labels:
       homepage.group: Personal Tools
       homepage.name: Excalidraw
@@ -1858,7 +1858,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:7e3a906905a7893c20d60d5e1dd04f57fb8666972dcb8e2f817725dfc1814208
+    image: ghost:latest@sha256:8984a1bea469dfb641be13a72280c2380420dd2c70ede708e5e18687805aa7e3
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1963,7 +1963,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:ca25035f7e6f74552655a1c5e4a9eb21f85e9d316f1f70371f790ef70095dd58
+    image: postgres:14@sha256:da076311f78c56e4bf6548ef3668fa77fa2865c5efca3f79a6d6bb9b3710b477
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -2165,7 +2165,7 @@ services:
   hugo:
     command: hugo server --baseURL "it-services.${MY_TLD}" --bind 0.0.0.0 --appendPort=false --source=/src/ --configDir=/src/config/ -e production --logLevel debug
     container_name: hugo
-    image: hugomods/hugo:exts@sha256:86b9a9ee8915be9cd5e9b555082352ab502daebf12c0bdae0a513f5340586496
+    image: hugomods/hugo:exts@sha256:3e1c26aa57083565ff09db8d45fb58d9f42fd9d6d497dd5326afe6df77a3712f
     labels:
       swag: enable
       swag_proto: http
@@ -2219,7 +2219,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:f8d06a32b1b2a81053d78e40bf8e35236b9faefb5c3903ce9ca8712c9ed78445
+    image: ghcr.io/immich-app/immich-server:release@sha256:7e2d0df478651551df3358072e68c235200b875eccd6eb4a5c5d8879a7095cf4
     labels:
       swag: enable
       swag_proto: http
@@ -2262,7 +2262,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:379e31b8c75107b0af8141904baa8cc933d7454b88fdb204265ef11749d7d908
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b3deefd1826f113824e9d7bc30d905e7f823535887d03f869330946b6db3b44a
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2362,7 +2362,7 @@ services:
       DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: /run/secrets/influxdb2-admin-token
       DOCKER_INFLUXDB_INIT_ORG: rinoa
       DOCKER_INFLUXDB_INIT_BUCKET: rinoa
-    image: influxdb:2-alpine@sha256:b4dbe25bb8f8be38f9cf5a12cbca453318a1ad3475954e9d37c38f6e5bc5006b
+    image: influxdb:2-alpine@sha256:fb537cf0d57937a57eac33efd079ae5b36a1d35437dc1eba1ecb8800a352b62a
     labels:
       swag: enable
       swag_proto: http
@@ -2433,7 +2433,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:a9de6b495fcad1de80d18b4452409e3f328af1f93cd0729c18fc833012efa9c8
+    image: quay.io/invidious/invidious-companion:latest@sha256:07a1dd6893e6311e341067cf61ba5f920184e40339e4b4e195f5713f99311343
     logging:
       options:
         max-size: "1G"
@@ -2506,7 +2506,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:aab0b50a3ce43a41621fc7040a379cc57174059aec8f9c17a90176649a0c1ab1
+    image: jellyfin/jellyfin@sha256:6d819e9ab067efcf712993b23455cc100ee5585919bb297ea5a109ac00cb626e
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3133,7 +3133,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:7cd12b4b4bf00307d4ab00e98622290e589e5de767cb55a48b1cf0e71770ae24
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3165,7 +3165,7 @@ services:
       POSTGRES_USER: ${JOPLIN_POSTGRES_USER}
       POSTGRES_PORT: 5432
       POSTGRES_HOST: joplin-db
-    image: joplin/server:latest@sha256:95b67dc6a4e77a974ac2bcc86818cbbfe5495e7b62d06a66f848a877878dce53
+    image: joplin/server:latest@sha256:5d9e7f9d31b436cb1b99d1a6a65d8c5bf760829094617e8ad1e956fd925de888
     labels:
       homepage.group: Personal Tools
       homepage.name: Joplin
@@ -3189,7 +3189,7 @@ services:
     restart: unless-stopped
   karakeep:
     container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:3b521070cdc26d7385cc288fe0cf7aef17e1fa551a1960cdfd7b8d5d732167a9
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:bbdc3274bbe510cac32551b2a8825019f61d23c261ddb8baa9bb4311caed31c4
     environment:
       BROWSER_WEB_URL: http://chrome:9222
       DATA_DIR: /data
@@ -3244,7 +3244,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:e7bc605306a9d3f1899112a0adc72684c34932138392e1ed470123e41aced97a
+    image: libretranslate/libretranslate@sha256:e1d5512317e8ffb5f14d496da8ad3a1f320700fa58090cf51a6d3232a6357f4d
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3278,7 +3278,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:47e8b286474150a42477e278be9ddd5c7956b691c8684cd0dfd1530c423a4722
+    image: lscr.io/linuxserver/lidarr:latest@sha256:ede2bb17350cc97a0d3f24389aa91803f655eac29aa022c77a71f4a61cc621e4
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3513,11 +3513,17 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-      DATABASE_URL: sqlite3:/config/manyfold.sqlite3
-      REDIS_URL: redis://manyfold-valkey:6379/2
+      DATABASE_URL: postgresql://manyfold:${MANYFOLD_PG_DB_PASSWORD}@manyfold-pg-db:5432/manyfold
+      REDIS_URL: redis://manyfold-valkey:6379/0
       SECRET_KEY_BASE: ${MANYFOLD_SECRET_KEY_BASE}
       MUTLIUSER: enabled
-    image: lscr.io/linuxserver/manyfold:latest@sha256:c5e6025fe0a2c6b804454e9324ac1757332ef37734279cb47b360f21a146a2d0
+      MANYFOLD_LOG_LEVEL: info
+      SMTP_SERVER: postal-smtp
+      SMTP_PORT: 25
+      SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
+      SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
+      SMTP_FROM_ADDRESS: noreply@${MY_TLD}
+    image: lscr.io/linuxserver/manyfold:0.130.1
     labels:
       homepage.group: Lifestyle
       homepage.name: Manyfold
@@ -3539,8 +3545,26 @@ services:
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
-      - ${DOCKER_VOLUME_CONFIG}/manyfold/config:/config
-      - ${DOCKER_VOLUME_CONFIG}/manyfold/library:/libraries #optional
+      - ${DOCKER_VOLUME_CONFIG}/manyfold/library:/libraries
+  manyfold-pg-db:
+    container_name: manyfold-pg-db
+    environment:
+      POSTGRES_USER: manyfold
+      POSTGRES_PASSWORD: ${MANYFOLD_PG_DB_PASSWORD}
+      POSTGRES_DB: manyfold
+    expose:
+      - 5432
+    healthcheck:
+      test: pg_isready -q -t 2 -d $$POSTGRES_DB -U $$POSTGRES_USER
+      start_period: 20s
+      timeout: 30s
+      interval: 10s
+      retries: 5
+    image: postgres:18-alpine
+    profiles: ["rinoa-apps"]
+    restart: always
+    volumes:
+      - manyfold-pg-db:/var/lib/postgresql/data
   manyfold-valkey:
     container_name: manyfold-valkey
     <<: *valkey-params
@@ -3563,7 +3587,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:73a403f999eb7317b0fcd084f42bd77ed813f4e09d2a4ebc1ba90ea48e43041a
+    image: linuxserver/mariadb@sha256:1fa6fab7aed1a1acbe4a60d62bf89e9ba4d1e16b331c8a64f80b14e0117ebd88
     networks:
       default: null
     ports:
@@ -3658,7 +3682,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:7cd12b4b4bf00307d4ab00e98622290e589e5de767cb55a48b1cf0e71770ae24
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3724,7 +3748,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:7cd12b4b4bf00307d4ab00e98622290e589e5de767cb55a48b1cf0e71770ae24
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3960,7 +3984,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:542095b9517562dbbd4dd061a19459168237eb5f26841ac0e56c89ebb2eb4173
+    image: mongo:7@sha256:32b5cbf6e1075ad0f5eb2b880ee61e985d5135519a7a34a7d81712af37f27913
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -3996,7 +4020,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:292427c9f1b2b9fcf5d5bf1f84aea65d0a1efaea147c1adb388a7a0008d88ed0
+    image: foxxmd/multi-scrobbler@sha256:7e2709a4c06e2a8dc8ceeebb5f6d02cc43076b1a0b64bd68e8f868bebc989e19
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -4167,7 +4191,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:bea462cf8835d6034b257ad3f2190eb18ccb1edaec11b8d4d802f322a380efb8
+    image: nextcloud/all-in-one:latest@sha256:33f46abc48b1a12aa6eef5dda9cdf39403f4b5f8537b3791e8f45ffcd7928992
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4255,7 +4279,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:a5074487380d4e686036ce61ed6f2d363939ae9a0c40123d1a9e3bb3a5f344b4
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4315,7 +4339,7 @@ services:
         type: bind
   omnitools:
     container_name: omnitools
-    image: iib0011/omni-tools:latest@sha256:2e58d498a8f240a20e93119899ca5ab5ee30791353e74eb279e313869a395122
+    image: iib0011/omni-tools:latest@sha256:4c89fb9492482b9cb9cbe65b5d2c67d4d281705c079ad0e53a23520526020aad
     labels:
       homepage.group: Personal Tools
       homepage.name: OmniTools
@@ -4393,7 +4417,7 @@ services:
       RAG_WEB_SEARCH_ENGINE: searxng
       RAG_WEB_SEARCH_RESULT_COUNT: 3
       RAG_WEB_SEARCH_CONCURRENT_REQUESTS: 10
-      SEARXNG_QUERY_URL: "http://searxng:8080/search?q=<query>"
+      SEARXNG_QUERY_URL: "https://search.trez.wtf/search?q=<query>"
       ENABLE_LDAP: true
       LDAP_SERVER_LABEL: rinoa-ldap
       LDAP_SERVER_HOST: lldap
@@ -4471,7 +4495,7 @@ services:
       PAPERLESS_URL: https://docs.${MY_TLD}
       USERMAP_GID: ${PGID}
       USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:98528e58787e48c73748608e8d4c03b1692c185e69fc237c00c44d3b4f68b335
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:8cbd8ce3ef1857bd144026a7e7192d0889188352b5271631e42ff069ccceeb74
     labels:
       swag: enable
       swag_proto: http
@@ -4563,7 +4587,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:7cd12b4b4bf00307d4ab00e98622290e589e5de767cb55a48b1cf0e71770ae24
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4638,7 +4662,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:a5074487380d4e686036ce61ed6f2d363939ae9a0c40123d1a9e3bb3a5f344b4
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4752,7 +4776,7 @@ services:
     expose:
       - 9000
       - 9443
-    image: portainer/portainer-ce:alpine@sha256:5135ffc483be84b773288c92c80a054a234abcf615975d6122cbe930f5c65d27
+    image: portainer/portainer-ce:alpine@sha256:a04e0ac3e99172e451055419e2ed46c67f24bff72209ab09235079d7642e87d8
     labels:
       swag: enable
       swag_proto: http
@@ -4926,7 +4950,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:475853535de3de8441b87c1457c30f2e695f4831228b12b6b7274e9da409d874
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:67a8aaedcfd6989f3030b937a6a07007310b1dfc7ee8df16d2cbfa48d1c1158c
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -5142,7 +5166,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:06ac318ecb95a34c7b229568dcb4271f02cb5007bb189a0dd67a2032864187ca
+    image: lscr.io/linuxserver/radarr:latest@sha256:6c0948b42c149e36bb3dbc0b64d36c77b2d3c9dccf1b424c4f72af1e57ba0c21
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5237,7 +5261,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:a5074487380d4e686036ce61ed6f2d363939ae9a0c40123d1a9e3bb3a5f344b4
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5306,7 +5330,7 @@ services:
       REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION: off
       REDLIB_DEFAULT_HIDE_SCORE: off
       REDLIB_DEFAULT_FIXED_NAVBAR: on
-    image: quay.io/redlib/redlib:latest@sha256:25dbb5466ebd22e58277d4aa54897899b044f02f7219ca3054784aecc0be34e1
+    image: quay.io/redlib/redlib:latest@sha256:dffb6c5a22f889d47d8e28e33411db0fb6c5694599f72cf740c912c12f5fc1c6
     labels:
       homepage.group: Social
       homepage.name: Redlib
@@ -5644,7 +5668,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:b88ef002ab1d9a901766f9eb59779089a74e8f444477e0151fa8cd1f91a02006
+    image: searxng/searxng:latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5702,7 +5726,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.16.45@sha256:979a5924ed459d5169178197fc7b4d849bcb6fbb4aded1f1d1c0b279717b5187
+    image: semaphoreui/semaphore:v2.16.47@sha256:71aabf9314d1051ab92025f26809daea72bd90cb78a6a2badfe15400acf11619
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5960,7 +5984,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:7cd12b4b4bf00307d4ab00e98622290e589e5de767cb55a48b1cf0e71770ae24
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -5974,7 +5998,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:60e5edcac39172294ad22d55d1b08c2c0a9fe658cad2f2c4d742ae017d7874de
+    image: lscr.io/linuxserver/sonarr:latest@sha256:8b9f2138ec50fc9e521960868f79d2ad0d529bc610aef19031ea8ff80b54c5e0
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6078,7 +6102,7 @@ services:
       TZ: ${TZ}
       #Script interval in seconds
       SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:71a0b9e5a522d76bb0ffdb6d720d681fde22417b3a5acc9ecae61c89d05d8afc
+    image: mrusse08/soularr:latest@sha256:b41d4f8ec74e9eded55e0096ddb40ba155ff3288f87b50639d57e5ba4c980159
     network_mode: service:gluetun
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -6097,7 +6121,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:61181c5809845d2c49c8c3c182c0280c5c91069cd2e5d7c341ddd8bfa2c01598
+    image: ghcr.io/mrusse/soularr:main@sha256:15bcdf0bcbce937f39c1c93ba8384fc1508e849bff943b56e4bc79a076af9ea2
     labels:
       homepage.name: Soularr
       homepage.group: Downloaders
@@ -6161,7 +6185,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:b574379eb8aff5563e1874acfa3d5afa144e1831288cdecf3d720d410e86097b
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:ce42fcb3c4fdcceb22e8c91ad93b8293ea0fe0873221f07fce36aed65b6a1f51
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6201,7 +6225,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:6ec3e0d5d92977c58c40ce5ab78a6237b1e9a86e80b28792b4ff76db1d3fdf90
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:940c83732d373b08efd110de708d51d639705404de7dabc7230e5665819efb4a
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6253,7 +6277,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:0ba42d50fe3090d9e52caf3c483172d740c0c01690b4ea9cfab1d82b81dc4f7c
+    image: lscr.io/linuxserver/swag:latest@sha256:c8afbd137c2f44a13c913cd24ba0cdf77ed03d1e6c500af11ae97b300d533e6d
     labels:
       swag: enable
       swag_proto: http
@@ -6355,7 +6379,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:a5074487380d4e686036ce61ed6f2d363939ae9a0c40123d1a9e3bb3a5f344b4
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6424,7 +6448,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:1abf55d8d57c28955d071b93819747875e011f6e67f659d7844b6f4f30910054
+    image: josh5/unmanic:latest@sha256:f0cdf77d9e18f79f7c27e13e269c1bd74378c5dcc1d644540ba22795076f9eb8
     labels:
       homepage.group: Media Library
       homepage.name: Unmanic
@@ -6609,7 +6633,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:8b90897250c51c292f9105622faafff74abf3bd9855ef73c1e55226a90909df7
+    image: clidey/whodb@sha256:55100f0904f7006ecd304c6b6c42d36e989f0815decdc1d54bd7ebfdaeea613e
     environment:
       WHODB_CLICKHOUSE_1: '{
         "host": "signoz-clickhouse"
@@ -6784,7 +6808,7 @@ services:
       PGID: ${PGID}
       DISABLE_BUILTIN_AUTH: true
       TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:5809c5da07883e3e572b279e41998a6ae93a17f978da899cfe803bc8d7b459fe
+    image: ghcr.io/wizarrrr/wizarr@sha256:83fc0b50985d196226b7c28a27062a1c4e63124a5d6d2448710aee222637b79e
     labels:
       homepage.group: Servarr Stack
       homepage.name: Wizarr
@@ -6931,6 +6955,8 @@ volumes:
     name: libretranslate_models
   lldap_data:
     name: lldap_data
+  manyfold-pg-db:
+    name: manyfold-pg-db
   manyfold-valkey-data:
     name: manyfold-valkey-data
   mastodon-pg-db: