Removing Patchman services.

Auto Merge of PR 149 - open-webui-ollama-portracker-mods_2025-08-26T15-05-45
Merged by Trez.One
2025-08-27 06:49:23 -04:00 · 2025-08-26 15:50:24 -04:00 · 2025-08-26 15:47:12 -04:00 · 2025-08-26 15:46:58 -04:00 · 2025-08-26 15:21:32 -04:00 · 2025-08-26 19:21:11 +00:00
10 changed files with 1190 additions and 432 deletions
@@ -1,4 +1,5 @@
 name: Gitea Branch PR & Ansible Deployment
+
 on:
  workflow_dispatch:
  push:
@@ -8,6 +9,7 @@ on:
      - '**.j2'
      - '**/pr-ansible-config-deployment.yaml'
      - 'ansible/**.yml'
+
 jobs:
  check-and-create-pr:
    if: github.ref != 'refs/heads/main'
@@ -15,21 +17,24 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
        with:
          fetch-depth: 1
+
      - name: Cache tea CLI
        id: cache-tea
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/tea/0.9.2/x64
          key: tea-${{ runner.os }}-0.9.2
+
      - name: Install tea
        uses: supplypike/setup-bin@v4
        with:
          uri: 'https://gitea.com/gitea/tea/releases/download/v0.9.2/tea-0.9.2-linux-amd64'
          name: 'tea'
          version: '0.9.2'
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -37,6 +42,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: PR Check'
          notification_message: 'Checking for existing PR... 🔍'
+
      - name: Check if open PR exists
        id: check-opened-pr-step
        continue-on-error: true
@@ -44,6 +50,7 @@ jobs:
          tea login add --name gitea-rinoa --url "${{ secrets.RINOA_GITEA_URL }}" --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
          pr_exists=$(tea pr list --repo ${{ github.repository }} --state open --fields index,title,head | egrep '\[ANSIBLE\].*${{ github.ref_name }}' | tail -1 | wc -l)
          echo "exists=$pr_exists" >> $GITHUB_OUTPUT
+
      - name: Create PR
        if: ${{ steps.check-opened-pr-step.outputs.exists == '0' }}
        run: |
@@ -51,6 +58,7 @@ jobs:
          pr_index_old=$(tea pr ls --repo ${{ github.repository }} --state all --fields index,title,head --output csv | sed -e 's|"||g' | egrep '^[0-9]' | head -1 | awk -F"," '{print $1}')
          pr_index_new=$(expr ${pr_index_old} + 1)
          tea pr c -r ${{ github.repository }} -t "[ANSIBLE] Automated PR for ${{ github.ref_name }} - #${pr_index_new}" -d "Automatically created PR for branch: ${{ github.ref_name }}" -a ${{ github.actor }} -L "Ansible Configs.j2"
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -58,6 +66,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: PR Check'
          notification_message: 'PR Created 🎟️'
+
  ansible-dry-run:
    name: Ansible Dry Run
    needs: [check-and-create-pr]
@@ -68,7 +77,8 @@ jobs:
      VAULT_NAMESPACE: ""
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
+
      - name: Cache Ansible Galaxy Collections
        uses: actions/cache@v3
        with:
@@ -76,15 +86,19 @@ jobs:
          key: ${{ runner.os }}-ansible-${{ hashFiles('./ansible/collections/requirements.yml') }}
          restore-keys: |
            ${{ runner.os }}-ansible-
+
      - name: Install Ansible
        uses: alex-oleshkevich/setup-ansible@v1.0.1
        with:
          version: "11.4.0"
+
      - name: Install Vault
        uses: cpanato/vault-installer@main
+
      - name: Install hvac
        run: |
          pip install hvac
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -92,6 +106,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Ansible Config Dry Run @ Rinoa'
          notification_message: 'Starting Ansible dry run...'
+
      - name: Ansible Playbook Dry Run
        uses: dawidd6/action-ansible-playbook@v3
        with:
@@ -103,6 +118,7 @@ jobs:
          options: |
            --check
            --inventory inventory/hosts.yml
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -110,19 +126,22 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Ansible Dry Run @ Rinoa'
          notification_message: 'Ansible dry run completed successfully.'
+
  pr-merge:
    name: PR Merge
    needs: [ansible-dry-run]
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
+
      - name: Install tea
        uses: supplypike/setup-bin@v4
        with:
          uri: 'https://gitea.com/gitea/tea/releases/download/v0.9.2/tea-0.9.2-linux-amd64'
          name: 'tea'
          version: '0.9.2'
+
      - name: PR Merge
        id: pr_merge
        run: |
@@ -132,6 +151,7 @@ jobs:
          pr_index=$(tea pr ls --repo ${{ github.repository }} --state open --fields index,title,head,state --output csv | egrep ${{ github.ref_name }} | awk -F"," '{print $1}' | sed -e 's|"||g')
          tea pr m --repo ${{ github.repository }} --title "Auto Merge of PR ${pr_index} - ${{ github.ref_name }}" --message "Merged by ${{ github.actor }}" ${pr_index}
          echo "pr_index=${pr_index}" >> $GITHUB_OUTPUT
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -139,6 +159,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: PR Merge Successful'
          notification_message: 'PR #${{ steps.pr_merge.outputs.pr_index }} merged.'
+
  ansible-config-deploy:
    name: Ansible Config Deployment
    runs-on: ubuntu-latest
@@ -149,28 +170,34 @@ jobs:
      DOCKER_HOST: tcp://dockerproxy:2375
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
        with:
          ref: main
+
      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: 3.12
+
      - name: Cache Vault install
        id: cache-vault
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/vault/1.18.0/x64
          key: vault-${{ runner.os }}-1.18.0
+
      - name: Install Ansible
        uses: alex-oleshkevich/setup-ansible@v1.0.1
        with:
          version: "11.4.0"
+
      - name: Install Vault
        uses: cpanato/vault-installer@main
+
      - name: Install hvac
        run: |
          pip install hvac
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -178,6 +205,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Ansible Config Deployment @ Rinoa'
          notification_message: 'Starting config deployment with Ansible...'
+
      - name: Ansible Playbook Config Deploy
        uses: dawidd6/action-ansible-playbook@v3
        with:
@@ -188,6 +216,7 @@ jobs:
          requirements: collections/requirements.yml
          options: |
            --inventory inventory/hosts.yml
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -1,4 +1,5 @@
 name: Gitea Branch PR, Cloudflare DNS, README generation, & Docker Deployment
+
 on:
  workflow_dispatch:
  push:
@@ -8,10 +9,12 @@ on:
      - '**/docker-compose.yml'
      - '**/pr-cloudflare-docker-deploy.yml'
      - '!ansible/**.yml'
+
 env:
  FLARECTL_VERSION: '0.115.0'
  HC_VAULT_VERSION: '1.20.0'
  TEA_VERSION: '0.10.1'
+
 jobs:
  check-and-create-pr:
    if: github.ref != 'refs/heads/main'
@@ -22,18 +25,21 @@ jobs:
        uses: actions/checkout@v4
        with:
          fetch-depth: 1
+
      - name: Cache tea CLI
        id: cache-tea
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/tea/${{ env.TEA_VERSION }}/x64
          key: tea-${{ runner.os }}-${{ env.TEA_VERSION }}
+
      - name: Install tea
        uses: supplypike/setup-bin@v4
        with:
          uri: https://gitea.com/gitea/tea/releases/download/v${{ env.TEA_VERSION }}/tea-${{ env.TEA_VERSION }}-linux-amd64
          name: tea
          version: ${{ env.TEA_VERSION }}
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -41,6 +47,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: PR Check'
          notification_message: 'Checking for existing PR... 🔍'
+
      - name: Check if open PR exists
        id: check-opened-pr-step
        continue-on-error: true
@@ -48,6 +55,7 @@ jobs:
          tea login add --name gitea-rinoa --url "${{ secrets.RINOA_GITEA_URL }}" --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
          pr_exists=$(tea pr list --repo ${{ github.repository }} --state open --fields index,title,head | egrep '\[DOCKER\].*${{ github.ref_name }}' | tail -1 | wc -l)
          echo "exists=$pr_exists" >> $GITHUB_OUTPUT
+
      - name: Create PR
        if: ${{ steps.check-opened-pr-step.outputs.exists == '0' }}
        run: |
@@ -55,6 +63,7 @@ jobs:
          pr_index_old=$(tea pr ls --repo ${{ github.repository }} --state all --fields index,title,head --output csv | sed -e 's|"||g' | egrep '^[0-9]' | head -1 | awk -F"," '{print $1}')
          pr_index_new=$(expr ${pr_index_old} + 1)
          tea pr c -r ${{ github.repository }} -t "[DOCKER] Automated PR for ${{ github.ref_name }} - #${pr_index_new}" -d "Automatically created PR for branch: ${{ github.ref_name }}" -a ${{ github.actor }} -L "Docker Compose"
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -62,6 +71,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: PR Check'
          notification_message: 'PR Created 🎟️'
+
  generate-service-list:
    name: Generate list of added/modified/deleted services
    runs-on: ubuntu-latest
@@ -69,11 +79,14 @@ jobs:
    outputs:
      svc_deploy_list: ${{ steps.detect_services.outputs.docker_svc_list }}
    steps:
+
      - name: Checkout
        uses: actions/checkout@v4
+
      - name: Fetch base branch
        run: |
          git fetch origin ${{ github.event.pull_request.base.ref }}
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -81,10 +94,12 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Services TBD'
          notification_message: 'Generating list of services to deploy...'
+
      - name: Save both versions of docker-compose.yml
        run: |
          git show origin/main:docker-compose.yml > docker-compose-main.yml || touch docker-compose-main.yml
          cp docker-compose.yml docker-compose-head.yml
+
      - name: Detect added, deleted, and modified services
        id: detect_services
        run: |
@@ -114,9 +129,11 @@ jobs:
          echo "docker_svc_list<<EOF" >> "$GITHUB_OUTPUT"
          echo "$mod_svcs" >> "$GITHUB_OUTPUT"
          echo "EOF" >> "$GITHUB_OUTPUT"
+
      - name: List of Services for (Re)Deployment
        run: |
          echo -e "${{ steps.detect_services.outputs.docker_svc_list }}"
+
  docker-compose-dry-run:
    name: Docker Compose Dry Run
    needs: [generate-service-list]
@@ -130,20 +147,24 @@ jobs:
    steps:
      - name: Checkout
        uses: actions/checkout@v4
+
      - name: Login to Gitea Container Registry
        run: |
          docker login -u gitea-sonarqube-bot -p ${RINOA_REGISTRY_PASSWORD} git.trez.wtf
+
      - name: Cache Vault install
        id: cache-vault
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/vault/${{ env.HC_VAULT_VERSION }}/x64
          key: vault-${{ runner.os }}-${{ env.HC_VAULT_VERSION }}
+
      - name: Install Vault (only if not cached)
        if: steps.cache-vault.outputs.cache-hit != 'true'
        uses: cpanato/vault-installer@main
        with:
          version: ${{ env.HC_VAULT_VERSION }}
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -151,10 +172,12 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Docker Compose Dry Run @ Rinoa'
          notification_message: 'Starting Docker Compose dry run...'
+
      - name: Generate .env file for Docker Compose
        run: |
          vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env
          echo ${DOCKER_SVC_LIST}
+
      - name: Docker Compose Dry Run
        uses: hoverkraft-tech/compose-action@v2.2.0
        env:
@@ -165,6 +188,7 @@ jobs:
          up-flags: -d --remove-orphans --dry-run
          down-flags: --dry-run
          compose-flags: --dry-run
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -172,6 +196,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Docker Compose Dry Run @ Rinoa'
          notification_message: 'Docker Compose dry run completed successfully.'
+
  cloudflare-dns-setup:
    name: Cloudflare DNS Setup
    needs: [docker-compose-dry-run]
@@ -181,17 +206,20 @@ jobs:
        uses: actions/checkout@v4
        with:
          fetch-depth: 1
+
      - name: Cache flarectl CLI
        uses: actions/cache@v4
        with:
          path: ~/.flarectl
          key: flarectl-${{ runner.os }}-${{ env.FLARECTL_VERSION }}-${{ hashFiles('workflow-config.yml') }}
+
      - name: Install flarectl
        uses: supplypike/setup-bin@v4
        with:
          uri: https://github.com/cloudflare/cloudflare-go/releases/download/v${{ env.FLARECTL_VERSION }}/flarectl_${{ env.FLARECTL_VERSION }}_linux_amd64.tar.gz
          name: flarectl
          version: ${{ env.FLARECTL_VERSION }}
+
      - name: Cache Subdomain Files
        uses: actions/cache@v4
        with:
@@ -199,6 +227,7 @@ jobs:
            compose_subdomains.txt
            cloudflare_subdomains.txt
          key: ${{ runner.os }}-subdomains-${{ hashFiles('docker-compose.yml') }}
+
      - name: Grab Subdomains from Docker Compose & Cloudflare
        id: grab-subdomains
        env:
@@ -214,6 +243,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Cloudflare Setup @ Rinoa'
          notification_message: 'Starting Cloudflare DNS setup...'
+
      - name: Compare Subdomains
        id: compare-subdomains
        uses: LouisBrunner/diff-action@v2.2.0
@@ -223,6 +253,7 @@ jobs:
          mode: addition
          tolerance: mixed-better
          output: domain_compare.txt
+
      - name: Create Subdomains
        if: steps.compare-subdomains.outputs.output != ''
        continue-on-error: true
@@ -234,6 +265,7 @@ jobs:
            echo "Creating $subdomain.trez.wtf..."
            flarectl dns create --zone "trez.wtf" --name "${subdomain}" --type=CNAME --content "trez.wtf" --proxy true
          done
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -241,6 +273,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Cloudflare Setup @ Rinoa'
          notification_message: 'Cloudflare DNS setup completed successfully.'
+
  regenerate-readme-modified-services:
    name: Update README & Generate List of Modified Services
    runs-on: ubuntu-latest
@@ -248,8 +281,10 @@ jobs:
    steps:
      - name: Checkout
        uses: actions/checkout@v4
+
      - name: Install yq
        uses: dcarbone/install-yq-action@v1
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -257,25 +292,30 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: README Update'
          notification_message: 'Updating README...'
+
      - name: Generate service list
        run: |
          yq '.services | to_entries | map({"service": .key, "image": .value.image})' docker-compose.yml > services.yml
+
      - name: Generate Markdown Table
        uses: gazab/create-markdown-table@v1
        id: service-table
        with:
          file: ./services.yml
+
      - name: Regenerate README
        run: |
          echo "# List of Services" > README.md
          echo -e "\n\n" >> README.md
          echo "${{ steps.service-table.outputs.table }}" >> README.md
+
      - name: Add/Commit README.md
        id: commit-readme
        uses: EndBug/add-and-commit@v9
        with:
          message: "chore: Update README"
          add: "README.md"
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -283,6 +323,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: README Update'
          notification_message: 'README updated'
+
  pr-merge:
    name: PR Merge
    needs: [regenerate-readme-modified-services]
@@ -290,18 +331,21 @@ jobs:
    steps:
      - name: Checkout
        uses: actions/checkout@v4
+
      - name: Cache tea CLI
        id: cache-tea
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/tea/${{ env.TEA_VERSION }}/x64
          key: tea-${{ runner.os }}-${{ env.TEA_VERSION }}
+
      - name: Install tea
        uses: supplypike/setup-bin@v4
        with:
          uri: https://gitea.com/gitea/tea/releases/download/v${{ env.TEA_VERSION }}/tea-${{ env.TEA_VERSION }}-linux-amd64
          name: tea
          version: ${{ env.TEA_VERSION }}
+
      - name: PR Merge
        id: pr_merge
        run: |
@@ -311,6 +355,7 @@ jobs:
          pr_index=$(tea pr ls --repo ${{ github.repository }} --state open --fields index,title,head,state --output csv | egrep ${{ github.ref_name }} | awk -F"," '{print $1}' | sed -e 's|"||g')
          tea pr m --repo ${{ github.repository }} --title "Auto Merge of PR ${pr_index} - ${{ github.ref_name }}" --message "Merged by ${{ github.actor }}" ${pr_index}
          echo "pr_index=${pr_index}" >> $GITHUB_OUTPUT
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -318,6 +363,7 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: PR Merge Successful'
          notification_message: 'PR #${{ steps.pr_merge.outputs.pr_index }} merged.'
+
  docker-compose-deploy:
    name: Docker Compose Deployment
    runs-on: ubuntu-latest
@@ -333,20 +379,24 @@ jobs:
        uses: actions/checkout@v4
        with:
          ref: main
+
      - name: Cache Vault install
        id: cache-vault
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/vault/${{ env.HC_VAULT_VERSION }}/x64
          key: vault-${{ runner.os }}-${{ env.HC_VAULT_VERSION }}
+
      - name: Install Vault (only if not cached)
        if: steps.cache-vault.outputs.cache-hit != 'true'
        uses: cpanato/vault-installer@main
        with:
          version: ${{ env.HC_VAULT_VERSION }}
+
      - name: Login to Gitea Container Registry
        run: |
          docker login -u gitea-sonarqube-bot -p ${RINOA_REGISTRY_PASSWORD} git.trez.wtf
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -354,10 +404,12 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: Docker Compose Deployment @ Rinoa'
          notification_message: 'Starting Docker Compose run...'
+
      - name: Generate .env file for deployment
        run: |
           vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env
           echo ${DOCKER_SVC_LIST}
+
      - name: Docker Compose Deployment
        uses: hoverkraft-tech/compose-action@v2.2.0
        env:
@@ -367,7 +419,8 @@ jobs:
            ${{ needs.generate-service-list.outputs.svc_deploy_list }}
          up-flags: -d --remove-orphans
          down-flags: --dry-run
-      - name: Docker Compoose Healthcheck
+
+      - name: Docker Compose Healthcheck
        uses: jaracogmbh/docker-compose-health-check-action@v1.0.0
        with:
          max-retries: 30
@@ -375,6 +428,7 @@ jobs:
          compose-file: "docker-compose.yml"
          skip-exited: "true"
          skip-no-healthcheck: "true"
+
      - name: Gotify Notification
        uses: eikendev/gotify-action@master
        with:
@@ -1,10 +1,13 @@
 name: Auto-Unseal for Vault
+
 on:
  workflow_dispatch:
  schedule:
-    - cron: "30 5 * * *"
+    - cron: '30 5 * * *'
+
 env:
  HC_VAULT_VERSION: '1.20.0'
+
 jobs:
  auto-unseal:
    name: Unseal Vault
@@ -22,22 +25,26 @@ jobs:
          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
          notification_title: 'GITEA: HC Vault @ Rinoa'
          notification_message: 'Hashicorp Vault unsealing started... 🔐'
+
      - name: Cache Vault install
        id: cache-vault
        uses: actions/cache@v4
        with:
          path: /opt/hostedtoolcache/vault/${{ env.HC_VAULT_VERSION }}/x64
          key: vault-${{ runner.os }}-${{ env.HC_VAULT_VERSION }}
+
      - name: Install Vault (only if not cached)
        if: steps.cache-vault.outputs.cache-hit != 'true'
        uses: cpanato/vault-installer@main
        with:
          version: ${{ env.HC_VAULT_VERSION }}
+
      - name: Unseal Vault
        run: |
          for vault_shard in $VAULT_SHARDS; do
            vault operator unseal -address="${VAULT_ADDR}" -non-interactive "${vault_shard}"
          done
+
      - name: Vault Unseal Completion
        uses: eikendev/gotify-action@master
        with:
@@ -10,6 +10,8 @@
 | apprise-api | lscr.io/linuxserver/apprise-api:latest |
 | archivebox | archivebox/archivebox:latest |
 | argus | quay.io/argus-io/argus:latest |
+| asciinema | ghcr.io/asciinema/asciinema-server:latest |
+| asciinema-pg-db | postgres:14-alpine |
 | audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest |
 | authelia | authelia/authelia:master |
 | authelia-pg | postgres:16-alpine |
@@ -26,13 +28,14 @@
 | changedetection | ghcr.io/dgtlmoon/changedetection.io |
 | changedetection-chrome | dgtlmoon/sockpuppetbrowser:latest |
 | chrome | gcr.io/zenika-hub/alpine-chrome:123 |
+| clipcascade | sathvikrao/clipcascade:latest |
 | cloudflareddns | ghcr.io/hotio/cloudflareddns:latest |
 | convertx | ghcr.io/c4illin/convertx |
-| cronicle | elestio/cronicle:latest |
 | crowdsec | crowdsecurity/crowdsec:latest |
 | crowdsec-dashboard | metabase/metabase |
 | cyber-chef | mpepping/cyberchef:latest |
 | czkawka | jlesage/czkawka |
+| dagu | ghcr.io/dagu-org/dagu:alpine |
 | dawarich-app | freikin/dawarich:latest |
 | dawarich-pg-db | postgis/postgis:17-3.5-alpine |
 | dawarich-sidekiq | freikin/dawarich:latest |
@@ -46,14 +49,14 @@
 | explo | ghcr.io/lumepart/explo:latest |
 | fastenhealth | ghcr.io/fastenhealth/fasten-onprem:main |
 | flaresolverr | ghcr.io/flaresolverr/flaresolverr:latest |
-| freescout | tiredofit/freescout:latest |
 | garage | dxflrs/garage:v2.0.0 |
 | garage-webui | khairul169/garage-webui:latest |
 | ghost | ghost:latest |
-| gitea | gitea/gitea:1.24.3 |
+| gitea | gitea/gitea:1.24.5 |
 | gitea-db | postgres:14 |
 | gitea-runner | gitea/act_runner:latest |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |
+| gitignore-io | guog/gitignore.io:latest |
 | gluetun | qmcgaw/gluetun:latest |
 | gotify | gotify/server |
 | graylog | graylog/graylog:6.1 |
@@ -86,10 +89,6 @@
 | joplin | joplin/server:latest |
 | karakeep | ghcr.io/karakeep-app/karakeep:release |
 | languagetool | elestio/languagetool:latest |
-| librechat-api | ghcr.io/danny-avila/librechat-dev:latest |
-| librechat-rag-api | ghcr.io/danny-avila/librechat-rag-api-dev-lite:latest |
-| librechat-valkey | docker.io/bitnami/valkey:latest |
-| librechat-vectordb | ankane/pgvector:latest |
 | libretranslate | libretranslate/libretranslate |
 | lidarr | lscr.io/linuxserver/lidarr:latest |
 | lidify | thewicklowwolf/lidify:latest |
@@ -121,19 +120,26 @@
 | navidrome | deluan/navidrome:latest |
 | netalertx | jokobsk/netalertx:latest |
 | nextcloud | nextcloud/all-in-one:latest |
-| ollama | ollama/ollama |
+| nocodb | nocodb/nocodb:latest |
+| nocodb-pg-db | postgres:16-alpine |
+| nocodb-valkey | docker.io/bitnami/valkey:latest |
+| ollama | ollama/ollama:latest |
 | ombi | lscr.io/linuxserver/ombi:latest |
-| omni-tools | iib0011/omni-tools:latest |
+| omnitools | iib0011/omni-tools:latest |
 | omnipoly | kweg/omnipoly:latest |
+| open-webui | ghcr.io/open-webui/open-webui:main |
+| open-webui-valkey | docker.io/bitnami/valkey:latest |
 | paperless-ngx | ghcr.io/paperless-ngx/paperless-ngx:latest |
 | paperless-valkey | docker.io/bitnami/valkey:latest |
+| patchman-server | ghcr.io/tigattack/patchman |
+| patchman-worker | ghcr.io/tigattack/patchman |
+| patchman-memcached | memcached:1.6-alpine |
+| patchman-valkey | docker.io/bitnami/valkey:latest |
 | penpot-frontend | penpotapp/frontend:latest |
 | penpot-backend | penpotapp/backend:latest |
 | penpot-exporter | penpotapp/exporter:latest |
 | penpot-pg-db | postgres:15-alpine |
 | penpot-redis | redis:7.2 |
-| pgbackweb | eduardolat/pgbackweb:latest |
-| pgbackweb-db | postgres:16-alpine |
 | planka | ghcr.io/plankanban/planka:2.0.0-rc.3 |
 | planka-pg-db | postgres:16-alpine |
 | plant-it | msdeluise/plant-it-server:latest |
@@ -142,15 +148,13 @@
 | portainer | portainer/portainer-ce:alpine |
 | portchecker-web | ghcr.io/dsgnr/portcheckerio-web:latest |
 | portchecker-api | ghcr.io/dsgnr/portcheckerio-api:latest |
-| portnote-web | haedlessdev/portnote:latest |
-| portnote-agent | haedlessdev/portnote-agent:latest |
-| portnote-pg-db | postgres:17-alpine |
+| portracker | mostafawahied/portracker:latest |
 | postal-smtp | ghcr.io/postalserver/postal:latest |
 | postal-web | ghcr.io/postalserver/postal:latest |
 | postal-worker | ghcr.io/postalserver/postal:latest |
 | prowlarr | lscr.io/linuxserver/prowlarr:latest |
 | qbit-manage | ghcr.io/stuffanthings/qbit_manage:latest |
-| qbittorrentvpn | ghcr.io/binhex/arch-qbittorrentvpn:5.1.0-1-01 |
+| qbittorrentvpn | ghcr.io/binhex/arch-qbittorrentvpn:latest |
 | radarec | thewicklowwolf/radarec:latest |
 | radarr | lscr.io/linuxserver/radarr:latest |
 | reactive-resume | amruthpillai/reactive-resume:latest |
@@ -160,13 +164,13 @@
 | rocketchat | registry.rocket.chat/rocketchat/rocket.chat:latest |
 | romm | rommapp/romm:latest |
 | romm-valkey | docker.io/bitnami/valkey:latest |
-| sabnzbdvpn | ghcr.io/binhex/arch-sabnzbdvpn:4.5.1-1-02 |
+| sabnzbdvpn | ghcr.io/binhex/arch-sabnzbdvpn:latest |
 | sablier | sablierapp/sablier:latest |
 | scraparr | ghcr.io/thecfu/scraparr:latest |
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus |
 | searxng | searxng/searxng:latest |
 | searxng-valkey | docker.io/bitnami/valkey:latest |
-| semaphore | semaphoreui/semaphore:v2.12.14 |
+| semaphore-ui | semaphoreui/semaphore:v2.12.14 |
 | signoz-app | signoz/signoz:v0.91.0 |
 | signoz-clickhouse | clickhouse/clickhouse-server:24.1.2-alpine |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:24.1.2-alpine |
@@ -183,8 +187,7 @@
 | soularr-dashboard | git.trez.wtf/trez.one/soularr-dashboard:v0.1 |
 | soulseek | slskd/slskd |
 | speedtest-tracker | lscr.io/linuxserver/speedtest-tracker:latest |
-| stable-diffusion-download | git./trez.one/stable-diffusion-download:v9.0.0 |
-| stable-diffusion-webui | git./trez.one/stable-diffusion-ui:v9.0.1 |
+| stable-diffusion-webui | ghcr.io/neggles/sd-webui-docker:latest |
 | stirling-pdf | docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest |
 | swag | lscr.io/linuxserver/swag:latest |
 | tandoor | vabene1111/recipes |
@@ -200,4 +203,14 @@
 | whodb | clidey/whodb |
 | wizarr | ghcr.io/wizarrrr/wizarr |
 | youtubedl | nbr23/youtube-dl-server:latest |
+| zammad-backup | ghcr.io/zammad/zammad:6.5.0-15 |
+| zammad-elasticsearch | elasticsearch:8.18.0 |
+| zammad-init | ghcr.io/zammad/zammad:6.5.0-15 |
+| zammad-memcached | memcached:1.6.38-alpine |
+| zammad-nginx | ghcr.io/zammad/zammad:6.5.0-15 |
+| zammad-postgresql | postgres:17.5-alpine |
+| zammad-railsserver | ghcr.io/zammad/zammad:6.5.0-15 |
+| zammad-redis | redis:7.4.2-alpine |
+| zammad-scheduler | ghcr.io/zammad/zammad:6.5.0-15 |
+| zammad-websocket | ghcr.io/zammad/zammad:6.5.0-15 |

@@ -0,0 +1,22 @@
+ui = true
+disable_clustering = true
+log_level = "debug"
+api_addr = "http://127.0.0.1:8200"
+// storage "raft" {
+//   path = "/path/to/raft/data"
+//   node_id = "raft_node_id"
+// }
+
+storage "s3" {
+    endpoint = "minio:9000"
+    bucket = "secrets-vault"
+    region = "us-east-fh-pln"
+    s3_force_path_style = "true"
+    disable_ssl = "true"
+}
+
+listener "tcp" {
+  address = "0.0.0.0:8200"
+  proxy_protocol_behavior = "use_always"
+  tls_disable = 1
+}
@@ -15,7 +15,7 @@ showStats: false
 statusStyle: "dot"
 favicon: /icons/favicon.ico
 useEqualHeights: true
-hideErrors: false
+hideErrors: true
 searchDescriptions: true
 showSearchSuggestions: true
 provider: duckduckgo
@@ -44,7 +44,7 @@ layout:
    columns: 5
  Personal Tools:
    style: row
-    columns: 5
+    columns: 4
  Professional Services:
    style: row
    columns: 5
@@ -0,0 +1,124 @@
+[app]
+# Log level: info, debug, warn, error, fatal
+log_level = "debug"
+# Environment: dev, prod.
+# Setting to "dev" will enable color logging in terminal.
+env = "dev"
+# Whether to automatically check for application updates on start up, app updates are shown as a banner in the admin panel.
+check_updates = true
+
+# HTTP server.
+[app.server]
+# Address to bind the HTTP server to.
+address = "0.0.0.0:9000"
+# Unix socket path (leave empty to use TCP address instead)
+socket = ""
+# Do NOT disable secure cookies in production environment if you don't know exactly what you're doing!
+disable_secure_cookies = false
+# Request read and write timeouts.
+read_timeout = "5s"
+write_timeout = "5s"
+# Maximum request body size in bytes (100MB)
+# If you are using proxy, you may need to configure them to allow larger request bodies.
+max_body_size = 104857600
+# Size of the read buffer for incoming requests
+read_buffer_size = 4096
+# Keepalive settings.
+keepalive_timeout = "10s"
+
+# File upload provider to use, either `fs` or `s3`.
+[upload]
+provider = "s3"
+
+# Filesystem provider.
+[upload.fs]
+# Directory where uploaded files are stored, make sure this directory exists and is writable by the application.
+upload_path = 'uploads'
+
+# S3 provider.
+[upload.s3]
+# S3 endpoint URL (required only for non-AWS S3-compatible providers like MinIO).
+# Leave empty to use default AWS endpoints.
+url = "http://minio:9000"
+
+# AWS S3 credentials, keep empty to use attached IAM roles.
+access_key = "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LIBREDESK_S3_ACCESS_KEY'] }}"
+secret_key = "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LIBREDESK_S3_SECRET_KEY'] }}"
+
+# AWS region, e.g., "us-east-1", "eu-west-1", etc.
+region = "us-east-fh-pln"
+# S3 bucket name where files will be stored.
+bucket = "libredesk"
+# Optional prefix path within the S3 bucket where files will be stored.
+# Example, if set to "uploads/media", files will be stored under that path.
+# Useful for organizing files inside a shared bucket.
+bucket_path = ""
+# S3 signed URL expiry duration (e.g., "30m", "1h")
+expiry = "30m"
+
+# Postgres.
+[db]
+# If running locally, use `localhost`.
+host = "libredesk-pg-db"
+# Database port, default is 5432.
+port = 5432
+# Update the following values with your database credentials.
+user = "libredesk"
+password = "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LIBREDESK_PG_DB_PASSWD'] }}"
+database = "libredesk"
+ssl_mode = "disable"
+# Maximum number of open database connections
+max_open = 30
+# Maximum number of idle connections in the pool
+max_idle = 30
+# Maximum time a connection can be reused before being closed
+max_lifetime = "300s"
+
+# Redis.
+[redis]
+# If running locally, use `localhost:6379`.
+address = "libredesk-valkey:6379"
+password = ""
+db = 0
+
+[message]
+# Number of workers processing outgoing message queue
+outgoing_queue_workers = 10
+# Number of workers processing incoming message queue
+incoming_queue_workers = 10
+# How often to scan for outgoing messages to process, keep it low to process messages quickly.
+message_outgoing_scan_interval = "50ms"
+# Maximum number of messages that can be queued for incoming processing
+incoming_queue_size = 5000
+# Maximum number of messages that can be queued for outgoing processing
+outgoing_queue_size = 5000
+
+[notification]
+# Number of concurrent notification workers
+concurrency = 2
+# Maximum number of notifications that can be queued
+queue_size = 2000
+
+[automation]
+# Number of workers processing automation rules
+worker_count = 10
+
+[autoassigner]
+# How often to run automatic conversation assignment
+autoassign_interval = "5m"
+
+[webhook]
+# Number of webhook delivery workers
+workers = 5
+# Maximum number of webhook deliveries that can be queued
+queue_size = 10000
+# HTTP timeout for webhook requests
+timeout = "15s"
+
+[conversation]
+# How often to check for conversations to unsnooze
+unsnooze_interval = "5m"
+
+[sla]
+# How often to evaluate SLA compliance for conversations
+evaluation_interval = "5m"
@@ -24,30 +24,31 @@
    {
      "type": "spotify",
      "enable": true,
-      "clients": [],
-      "name": "spotify",
+      "clients": ["lastfmClient", "ListenBrainzClient", "maloja"],
+      "name": "spotifySource",
      "data": {
        "clientId": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['YOUR_SPOTIFY_ID'] }}",
        "clientSecret": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['YOUR_SPOTIFY_SECRET'] }}",
-        "redirectUri": "http://localhost:9078/callback"
+        "redirectUri": "https://scrobble.trez.wtf/callback"
      }
    },
    {
      "type": "lastfm",
      "enable": true,
-      "clients": [],
-      "name": "lastfm",
+      "clients": ["ListenBrainzClient", "maloja"],
+      "configureAs": "source",
+      "name": "lastfmSource",
      "data": {
        "apiKey": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LASTFM_API_KEY'] }}",
        "secret": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LASTFM_API_SECRET'] }}",
-        "redirectUri": "http://localhost:9078/lastfm/callback"
+        "redirectUri": "https://scrobble.trez.wtf/lastfm/callback"
      }
    },
    {
      "type": "listenbrainz",
      "enable": true,
-      "clients": [],
-      "name": "listenBrainz",
+      "clients": ["lastfmClient", "maloja"],
+      "name": "listenBrainzSource",
      "data": {
        "token": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['MALOJA_LISTENBRAINZ_TOKEN'] }}",
        "username": "Trez.One"
@@ -56,8 +57,8 @@
    {
      "type": "subsonic",
      "enable": true,
-      "clients": [],
-      "name": "navidrome",
+      "clients": ["lastfmClient", "ListenBrainzClient", "maloja"],
+      "name": "navidromeSource",
      "data": {
        "url": "http://navidrome:4533",
        "user": "admin",
@@ -70,10 +71,11 @@
      "type": "lastfm",
      "enable": true,
      "name": "lastFmClient",
+      "configureAs": "client",
      "data": {
        "apiKey": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LASTFM_API_KEY'] }}",
        "secret": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LASTFM_API_SECRET'] }}",
-        "redirectUri": "http://localhost:9078/lastfm/callback"
+        "redirectUri": "https://scrobble.trez.wtf/lastfm/callback"
      }
    },
    {
@@ -88,7 +90,7 @@
    {
      "type": "maloja",
      "enable": true,
-      "name": "maloja",
+      "name": "malojaClient",
      "data": {
        "url": "http://maloja:42010",
        "apiKey": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['MALOJA_API_KEY'] }}"
@@ -1,14 +1,14 @@
 vault_addr: "https://vault.trez.wtf"
 vault_token: !vault |
-  $ANSIBLE_VAULT;1.1;AES256
-  31616264333530373062366539333738643937326562616130636266646532653862663966663862
-  6336343130363932316237373939656530663339383061360a626433656432633734363635313236
-  36646161663939393035333066656435663064313031636430386163653438336165663432393563
-  3032316331653662310a653930623965303835396239383663306438633738356563633834623036
-  35616132656166663233613937346364343439306561306661633239623837373564323430386635
-  31663762303234326363643262633761363661656538373333396139376132303564336635623632
-  30303166336432653038333733386334323262623736626435623933653035363035383930366166
-  64376639396664303034656533656339363436306638396462333230636136396538303638323338
-  3138
+  $ANSIBLE_VAULT;1.2;AES256
+  66306233356534393231373064633939646434316262343431663466653262646431633737343432
+  3364626261356234333233383433316233663866653466390a323733663932316434373038336466
+  36313462356238336638326135363263393863343939313534336134633037643563373837663263
+  3963323538636336360a313564316137333665353565623332623666373066316561323738626336
+  37616537616561336661313763386163643230643731396131373232343038323365626238366430
+  39613835383461393232613730353133343337303838646131353034613966393865346433386133
+  32373161306534396330656531353831356430633038333339326564666464663534363164663130
+  31316665343032396361383534373365613632616436343566323165383166356131636162626339
+  6336
 vault_token_cleaned: "{{ vault_token | regex_replace('\\n', '') }}"
 secrets_path: "rinoa-docker/env"