...

Merged by Trez.One

.gitea/workflows/pr-ansible-config-only-deploy.yml

@@ -0,0 +1,160 @@
+name: Gitea Branch PR & Ansible Configurations Deployment
+on:
+  push:
+    branches:
+      - '**'
+    paths:
+      - '**.j2'
+jobs:
+  check-and-create-pr:
+    if: github.ref != 'refs/heads/main'
+    name: Check and Create PR
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+      - name: Cache tea CLI
+        id: cache-tea
+        uses: actions/cache@v4
+        with:
+          path: /opt/hostedtoolcache/tea/0.9.2/x64
+          key: tea-${{ runner.os }}-0.9.2
+      - name: Install tea
+        uses: supplypike/setup-bin@v4
+        with:
+          uri: 'https://gitea.com/gitea/tea/releases/download/v0.9.2/tea-0.9.2-linux-amd64'
+          name: 'tea'
+          version: '0.9.2'
+      - name: Check if open PR exists
+        id: check-opened-pr-step
+        continue-on-error: true
+        run: |
+          tea login add --name gitea-rinoa --url "${{ secrets.RINOA_GITEA_URL }}" --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
+          pr_exists=$(tea pr list --repo ${{ github.repository }} --state open --fields index,title,head | egrep ${{ github.ref_name }} | tail -1 | wc -l)
+          echo "exists=$pr_exists" >> $GITHUB_OUTPUT
+      - name: Create PR
+        if: ${{ steps.check-opened-pr-step.outputs.exists == '0' }}
+        run: |
+          tea login default gitea-rinoa
+          pr_index_old=$(tea pr ls --repo ${{ github.repository }} --state all --fields index,title,head --output csv | sed -e 's|"||g' | egrep '^[0-9]' | head -1 | awk -F"," '{print $1}')
+          pr_index_new=$(expr ${pr_index_old} + 1)
+          tea pr c -r ${{ github.repository }} -t "Automated PR for ${{ github.ref_name }} - #${pr_index_new}" -d "Automatically created PR for branch: ${{ github.ref_name }}" -a ${{ github.actor }} -L "Ansible Configs.j2"
+  ansible-lint:
+    name: Ansible Lint
+    needs: [check-and-create-pr]
+    runs-on: ubuntu-latest
+    env:
+      VAULT_ADDR: ${{ secrets.RINOA_VAULT_ADDR }}
+      VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+      VAULT_NAMESPACE: ""
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Cache Ansible Galaxy Collections
+        uses: actions/cache@v3
+        with:
+          path: ansible/collections
+          key: ${{ runner.os }}-ansible-${{ hashFiles('./ansible/collections/requirements.yml') }}
+          restore-keys: |
+            ${{ runner.os }}-ansible-
+      - name: Install Ansible
+        uses: alex-oleshkevich/setup-ansible@v1.0.1
+        with:
+          version: "11.0.0"
+      - name: Install Vault
+        uses: cpanato/vault-installer@main
+      - name: Install hvac
+        run: pip install hvac
+      - name: Ansible Playbook Dry Run
+        uses: dawidd6/action-ansible-playbook@v2
+        with:
+          directory: ansible/
+          playbook: docker_config_deploy.yml
+          key: ${{ secrets.RINOA_ANSIBLE_PRIVATE_KEY }}
+          options: |
+            --inventory inventory/hosts.yml
+            --check
+          requirements: collections/requirements.yml
+          vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+      - name: Gotify Notification
+        uses: eikendev/gotify-action@master
+        with:
+          gotify_api_base: '${{ secrets.RINOA_GOTIFY_URL }}'
+          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
+          notification_title: 'GITEA: Ansible Config Dry Run @ Rinoa'
+          notification_message: 'Ansible dry run completed successfully.'
+  pr-merge:
+    name: PR Merge
+    needs: [regenerate-readme-modified-services]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Install tea
+        uses: supplypike/setup-bin@v4
+        with:
+          uri: 'https://gitea.com/gitea/tea/releases/download/v0.9.2/tea-0.9.2-linux-amd64'
+          name: 'tea'
+          version: '0.9.2'
+      - name: PR Merge
+        id: pr_merge
+        run: |
+          tea login add --name gitea-rinoa --url ${{ secrets.RINOA_GITEA_URL }} --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
+          tea login default gitea-rinoa
+          echo "Merging PR..."
+          pr_index=$(tea pr ls --repo ${{ github.repository }} --state open --fields index,title,head,state --output csv | egrep ${{ github.ref_name }} | awk -F"," '{print $1}' | sed -e 's|"||g')
+          tea pr m --repo ${{ github.repository }} --title "Auto Merge of PR ${pr_index} - ${{ github.ref_name }}" --message "Merged by ${{ github.actor }}" ${pr_index}
+          echo "pr_index=${pr_index}" >> $GITHUB_OUTPUT
+      - name: Gotify Notification
+        uses: eikendev/gotify-action@master
+        with:
+          gotify_api_base: '${{ secrets.RINOA_GOTIFY_URL }}'
+          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
+          notification_title: 'GITEA: PR Merge Successful'
+          notification_message: 'PR #${{ steps.pr_merge.outputs.pr_index }} merged.'
+  ansible-config-deploy:
+    name: Ansible Config Deployment
+    runs-on: ubuntu-latest
+    needs: [pr-merge]
+    env:
+      VAULT_ADDR: ${{ secrets.RINOA_VAULT_ADDR }}
+      VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+      DOCKER_HOST: tcp://dockerproxy:2375
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: main
+      - name: Cache Vault install
+        id: cache-vault
+        uses: actions/cache@v4
+        with:
+          path: /opt/hostedtoolcache/vault/1.18.0/x64
+          key: vault-${{ runner.os }}-1.18.0
+      - name: Install Ansible
+        uses: alex-oleshkevich/setup-ansible@v1.0.1
+        with:
+          version: "11.0.0"
+      - name: Install Vault
+        uses: cpanato/vault-installer@main
+      - name: Install hvac
+        run: pip install hvac
+      - name: Deploy Docker Configs via Ansible
+        uses: dawidd6/action-ansible-playbook@v2
+        with:
+          directory: ansible/
+          playbook: docker_config_deploy.yml
+          key: ${{secrets.RINOA_ANSIBLE_PRIVATE_KEY}}
+          options: |
+            --inventory inventory/hosts.yml
+          requirements: collections/requirements.yml
+          vault_password: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+      - name: Gotify Notification
+        uses: eikendev/gotify-action@master
+        with:
+          gotify_api_base: '${{ secrets.RINOA_GOTIFY_URL }}'
+          gotify_app_token: '${{ secrets.RINOA_RUNNER_GOTIFY_TOKEN }}'
+          notification_title: 'GITEA: Ansible Config Deployment @ Rinoa'
+          notification_message: 'Deployment completed successfully.'

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -1,14 +1,13 @@
 name: Gitea Branch PR, Cloudflare DNS, README generation, & Ansible/Docker Deployment
 on:
   push:
-    branches-ignore:
+    branches:
-      - main
+      - '**'
     paths:
-      - '**.yaml'
+      - 'docker-compose.yml'
-      - '**.yml'
-      - '**.j2'
 jobs:
   check-and-create-pr:
+    if: github.ref != 'refs/heads/main'
     name: Check and Create PR
     runs-on: ubuntu-latest
     steps:
@@ -41,7 +40,7 @@ jobs:
           tea login default gitea-rinoa
           pr_index_old=$(tea pr ls --repo ${{ github.repository }} --state all --fields index,title,head --output csv | sed -e 's|"||g' | egrep '^[0-9]' | head -1 | awk -F"," '{print $1}')
           pr_index_new=$(expr ${pr_index_old} + 1)
-          tea pr c -r ${{ github.repository }} -t "Automated PR for ${{ github.ref_name }} - #${pr_index_new}" -d "Automatically created PR for branch: ${{ github.ref_name }}" -a ${{ github.actor }}
+          tea pr c -r ${{ github.repository }} -t "Automated PR for ${{ github.ref_name }} - #${pr_index_new}" -d "Automatically created PR for branch: ${{ github.ref_name }}" -a ${{ github.actor }} -L "Docker Compose, Ansible Configs.j2"
   docker-compose-ansible-lints:
     name: Docker Compose & Ansible Lints
     needs: [check-and-create-pr]
@@ -255,7 +254,7 @@ jobs:
           notification_title: 'GITEA: PR Merge Successful'
           notification_message: 'PR #${{ steps.pr_merge.outputs.pr_index }} merged.'
   ansible-config-docker-compose-deploy:
-    name: Deploy via Ansible & Docker Compose
+    name: Ansible Configs & Docker Compose Deployment
     runs-on: ubuntu-latest
     needs: [pr-merge]
     env:

ansible/app-configs/crowdsec_local-api-credentials.yaml.j2

@@ -0,0 +1,6 @@
+{% set vault_addr = 'https://vault.trez.wtf' %}
+{% set secrets_path = 'rinoa-docker/env' %}
+
+url: http://0.0.0.0:8080
+login: localhost
+password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['CROWDSEC_LOCAL_API_KEY'] }}

ansible/app-configs/homepage_settings.yaml.j2

@@ -23,7 +23,7 @@ provider: duckduckgo
 layout:
   System Administration:
     style: row
-    columns: 4
+    columns: 3
     # fiveColumns: true
   Infrastructure/App Performance Monitoring:
     style: row

ansible/app-configs/sabnzbdvpn_sabnzbd.ini.j2

@@ -342,7 +342,7 @@ host = news.newshosting.com
 port = 563
 timeout = 60
 username = thetrezuredone
-password = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSKD_PASSWORD'] }}
+password = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSK_USER_PASSWORD'] }}
 connections = 8
 ssl = 1
 ssl_verify = 3

ansible/app-configs/soularr_config.ini.j2

@@ -0,0 +1,76 @@
+{% set vault_addr = 'https://vault.trez.wtf' %}
+{% set secrets_path = 'rinoa-docker/env' %}
+
+[Lidarr]
+api_key = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LIDARR_API_KEY'] }}
+host_url = http://lidarr:8686
+#This should be the path mounted in lidarr that points to your slskd download directory.
+#If Lidarr is not running in Docker then this may just be the same dir as Slskd is using below.
+download_dir = /storage
+
+[Slskd]
+#Api key from Slskd. Need to set this up manually. See link to Slskd docs above.
+api_key = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSKD_API_KEY'] }}
+host_url = http://gluetun:5030
+#Slskd download directory. Should have set it up when installing Slskd.
+download_dir = /app/downloads
+#Removes searches from Slskd after the search finishes.
+delete_searches = False
+#Maximum time (in seconds) that the script will wait for downloads to complete.
+#This is used to prevent the script from running forever due to a stalled download. Defaults to 1 hour.
+stalled_timeout = 3600
+
+[Release Settings]
+#Selects the release with the most common amount of tracks out of all the releases.
+use_most_common_tracknum = True
+allow_multi_disc = True
+#See full list of countries below.
+accepted_countries = Europe,Japan,United Kingdom,United States,[Worldwide],Australia,Canada
+#See full list of formats below.
+accepted_formats = CD,Digital Media,Vinyl
+
+[Search Settings]
+search_timeout = 5000
+maximum_peer_queue = 50
+#Min upload speed in bit/s
+minimum_peer_upload_speed = 0
+#Min match ratio accepted when comparing lidarr track names to soulseek filenames.
+minimum_filename_match_ratio = 0.5
+#Specify the file types you prefer from most to least. As well as their attributes such as bitrate / samplerate / bitdepth.
+#For flacs you can choose the bitdepth/samplerate. And for mp3s the bitrate.
+#If you do not care about the specific quality you can still just put "flac" or "mp3".
+#Soularr will then just look at the filetype and ignore file attributes.
+allowed_filetypes = flac 24/192,flac 16/44.1,flac,mp3 320,mp3
+ignored_users = User1,User2,Fred,Bob
+#Set to False if you only want to search for complete albums
+search_for_tracks = True
+#Set to True if you want to add the artist's name to the beginning of the search for albums
+album_prepend_artist = False
+track_prepend_artist = True
+#Valid search types: all || incrementing_page || first_page
+  #"all" will search for every wanted record everytime soularr is run.
+  #"incrementing_page" will start with the first page and increment to the next on each run.
+  #"first_page" will repeatedly search the first page.
+#If using the search type "first_page" remove_wanted_on_failure should be enabled.
+search_type = incrementing_page
+#How mancy records to grab each run, must be a number between 1 - 2,147,483,647
+number_of_albums_to_grab = 10
+#Unmonitors the album if Soularr can't find it and places it in "failure_list.txt".
+#Failed albums can be re monitored by filtering "Unmonitored" in the Lidarr wanted list.
+remove_wanted_on_failure = False
+#Comma separated list of words that can't be in the title of albums or tracks. Case insensitive.
+title_blacklist = BlacklistWord1,blacklistword2
+#Lidarr source to use for searching. Accepted values are "all", "missing", or "cutoff_unmet". If "all" is selected
+# then both missing and cutoff_unme will be searched. The default value is "missing".
+search_source = missing
+
+[Logging]
+#These options are passed into the logger's basicConfig() method as-is.
+#This means, if you're familiar with Python's logging module, you can configure
+#the logger with options beyond what's listed here by default.
+#For more information on available options  --  https://docs.python.org/3/library/logging.html#logging.basicConfig
+level = INFO
+# Format of log message  --  https://docs.python.org/3/library/logging.html#logrecord-attributes
+format = [%(levelname)s|%(module)s|L%(lineno)d] %(asctime)s: %(message)s
+# Format of datetimes  --  https://docs.python.org/3/library/time.html#time.strftime
+datefmt = %Y-%m-%dT%H:%M:%S%z

ansible/app-configs/soulseek_slskd.yml.j2

@@ -1,238 +1,212 @@
 {% set vault_addr = 'https://vault.trez.wtf' %}
 {% set secrets_path = 'rinoa-docker/env' %}
 
-# debug: false
+directories:
-# remote_configuration: false
+  incomplete: /app/incomplete
-# remote_file_management: false
+  downloads: /app/downloads
-# instance_name: default
+shares:
-# flags:
+  directories:
-#   no_logo: false
+    - /music
-#   no_start: false
+rooms:
-#   no_config_watch: false
+  - '! meow chat :3'
-#   no_connect: false
+  - '#ANUS'
-#   no_share_scan: false
+  - '#CORONAVIRUS'
-#   force_share_scan: false
+  - '#Horrorcore'
-#   no_version_check: false
+  - '#La France'
-#   log_sql: false
+  - '#icilombre-hardcore'
-#   experimental: false
+  - '#polska'
-#   volatile: false
+  - '#vegan'
-#   case_sensitive_reg_ex: false
+  - $$RARE RAP MUSIC$$
-#   legacy_windows_tcp_keepalive: false
+  - ([6)]
-# relay:
+  - +Autism+
-#   enabled: false
+  - +BlackMetal+
-#   mode: controller # controller (default), agent, or debug (for local development)
+  - +HIP_HOP_SCENE_RELEASES+
-#   # controller config is required when running in 'agent' mode
+  - /mu/
-#   # this specifies the relay controller that will be controlling this agent
+  - 60lover
-#   controller:
+  - 60lover v2
-#     address: https://some.site.com:5000
+  - 70 Rare groove Soul Jazz
-#     ignore_certificate_errors: false
+  - 80's 12 Inches & More
-#     api_key: <a 16-255 character string corresponding to one of the controller's 'readwrite' or 'administrator' API keys>
+  - 90's Rare Riddim !!
-#     secret: <a 16-255 character shared secret matching the controller's config for this agent>
+  - 90's emo
-#     downloads: false
+  - <>Electronics Labels<>
-#   # agent config is optional when running in 'controller' mode
+  - ACID
-#   # this specifies all of the agents capable of connecting
+  - ARGENTINA
-#   agents:
+  - "ATLLUMINATI\u201Cawareness"
-#     my_agent:
+  - AUSTRALIA
-#       instance_name: my_agent # make sure the top-level instance_name of the agent matches!
+  - Alcohol
-#       secret: <a 16-255 character string unique to this agent>
+  - Ambient
-#       cidr: 0.0.0.0/0,::/0
+  - Anime
-# permissions:
+  - Audiobooks
-#   file:
+  - Avantgarde
-#     mode: ~ # not for Windows, chmod syntax, e.g. 644, 777. can't escalate beyond umask
+  - BDSM
-# directories:
+  - BLUES BUNKER MUSIC
-#   incomplete: ~
+  - BOB DYLAN ROOM
-#   downloads: ~
+  - BigEdsClassicRock
-# shares:
+  - BigedsSixties
-#   directories:
+  - Blues&Soul
-#     - ~
+  - Bootlegged concerts
-#   filters:
+  - Brasil
-#     - \.ini$
+  - Breakcore
-#     - Thumbs.db$
+  - CHILE
-#     - \.DS_Store$
+  - Canada
-#   cache:
+  - China Room
-#     storage_mode: memory
+  - Chiptunes
-#     workers: 16
+  - Christians
-#     retention: ~ # retain indefinitely (do not automatically re-scan)
+  - Classical
-# rooms:
+  - Come To The Sabbath !
-#   - ~
+  - Communism
-# global:
+  - DEATH METAL CLUB
-#   upload:
+  - Dark Ambient
-#     slots: 20
+  - De Koffie Shop
-#     speed_limit: 1000 # in kibibytes
+  - De Kroeg
-#   limits:
+  - Deathrock
-#     queued:
+  - DieMilitarmusik
-#       files: 500
+  - Disco Classics
-#       megabytes: 5000
+  - Doom Metal
-#     daily:
+  - Doujin Music
-#       files: 1000
+  - Dub Techno
-#       megabytes: 10000
+  - Dubstep
-#       failures: 200
+  - EBM-GOTHIC-INDUSTRIAL
-#     weekly:
+  - EBooks
-#       files: 5000
+  - Emo
-#       megabytes: 50000
+  - Eurodance
-#       failures: 1000
+  - Eurovision Song Contest
-#   download:
+  - Experimental Electronica
-#     slots: 500
+  - FOLK MUSIC
-#     speed_limit: 1000
+  - Free Jazz
-# groups:
+  - Furry
-#   default:
+  - Gay
-#     upload:
+  - Gothic
-#       priority: 500
+  - Greece
-#       strategy: roundrobin
+  - Grindcore
-#       slots: 10
+  - HEE cum eaters 1! !
-#     limits:
+  - HOUSE MUSIC LOVERS (AG)
-#       queued:
+  - Happy Hardcore
-#         files: 150
+  - Hardcore NL
-#         megabytes: 1500
+  - Hardcore/punk
-#       daily: ~ # no daily limits (weekly still apply)
+  - Hip Hop
-#       weekly:
+  - Horror movies
-#         files: 1500
+  - IDM
-#         megabytes: 15000
+  - INDUSTRIAL
-#         failures: 150
+  - IReGGaeGaLaXy
-#   leechers:
+  - Incredibly Strange Music
-#     thresholds:
+  - Israel
-#       files: 1
+  - Jaz (Full CDs)
-#       directories: 1
+  - Jazz
-#     upload:
+  - Jazz-Rock-Fusion-Guitar
-#       priority: 999
+  - Juggalo Family
-#       strategy: roundrobin
+  - Jungle
-#       slots: 1
+  - Korean Music
-#       speed_limit: 100
+  - LANGUAGE EXCHANGE here
-#     limits:
+  - LGBTQ+!!
-#       queued:
+  - Last.fm
-#         files: 15
+  - Linux
-#         megabytes: 150
+  - Lossless Scores
-#       daily:
+  - MOVIES
-#         files: 30
+  - Mac Users
-#         megabytes: 300
+  - Metal
-#         failures: 10
+  - MovieMusic
-#       weekly:
+  - NORWAY
-#         files: 150
+  - New Crystal Vibrations
-#         megabytes: 1500
+  - New Wave
-#         failures: 30
+  - New Zealand
-#   blacklisted:
+  - OLD SKOOL GANGSTA SHIT
-#     members:
+  - OLDSCHOOL 88-94
-#       - <username to blacklist>
+  - OLI SHOTA CUB ROOM!
-#     cidrs:
+  - Original Blues Bunker
-#       - <CIDR to blacklist, e.g. 255.255.255.255/32>
+  - PSYCHEDELIA
-#   user_defined:
+  - PUNK/HARDCORE/GRIND
-#     my_buddies:
+  - Portugal
-#       upload:
+  - Post Punk
-#         priority: 250
+  - Post-Hardcore (modern)
-#         strategy: firstinfirstout
+  - Progressive Rock
-#         slots: 10
+  - Psychedelic/Acid Rock
-#       limits:
+  - Psytrance
-#         queued:
+  - Quebec
-#           files: 1000 # override global default
+  - REGGAE
-#       members:
+  - Rare Music
-#         - alice
+  - RareVHS/DVD/Rips
-#         - bob
+  - Retro Gaming
-# blacklist:
+  - Romania
-#   enabled: true
+  - Room Name
-#   file: <path to file containing CIDRs to blacklist>
+  - SIsk Idiots !!
-# filters:
+  - SLUDGE!
-#   search:
+  - Slovenia
-#     request:
+  - Soundtracks&Scores
-#       - ^.{1,2}$
+  - Spain
-# web:
+  - Stoner HiVe
-#   port: 5030
+  - Stoner Rock
-#   https:
+  - Strange Music
-#     disabled: false
+  - TECHNO, Mixes and Tunes
-#     port: 5031
+  - THC
-#     force: false
+  - Talia
-#     certificate:
+  - The Dangerous Kitchen
-#       pfx: ~
+  - TheScoreZone
-#       password: ~
+  - Thrash Metal
-#   url_base: /
+  - Tinmans Movie Room
-#   content_path: wwwroot
+  - Trip-Hop
-#   logging: false
+  - Ttalian_dancefloor
-#   authentication:
+  - Twee Folks
-#     disabled: false
+  - UK DUB
-#     username: slskd
+  - URIDDIM!!
-#     password: slskd
+  - Ukraine
-#     jwt:
+  - Underground Hiphop
-#       key: ~
+  - VAPORWAVE
-#       ttl: 604800000
+  - Video Game Chat
-#     api_keys:
+  - Vinyl Addicts
-#       my_api_key:
+  - Vocaloid
-#         key: <some example string between 16 and 255 characters>
+  - WHATCDs
-#         role: readonly # readonly, readwrite, administrator
+  - World Music
-#         cidr: 0.0.0.0/0,::/0
+  - Yacht Rock
-# retention:
+  - '[German] [Deutsch]'
-#   transfers:
+  - abbey road Itd
-#     upload:
+  - anime cunny
-#       succeeded: 1440 # 1 day
+  - bleeps&klonks
-#       errored: 30
+  - breakbeat
-#       cancelled: 5
+  - comics
-#     download:
+  - deep house connection
-#       succeeded: 1440 # 1 day
+  - drum'n'bass
-#       errored: 20160 # 2 weeks 
+  - eesti mehed
-#       cancelled: 5
+  - electro
-#   files:
+  - flacfield
-#     complete: 20160 # 2 weeks
+  - food
-#     incomplete: 43200 # 30 days
+  - for Losers
-#   logs: 259200 # 180 days
+  - hungary
-# logger:
+  - indie
-#   disk: false
+  - japanese music
-#   no_color: false
+  - library music
-#   loki: ~
+  - lossless
-# metrics:
+  - minimal music
-#   enabled: false
+  - museek
-#   url: /metrics
+  - noise
-#   authentication:
+  - 'on'
-#     disabled: false
+  - postrock
-#     username: slskd
+  - programming
-#     password: slskd
+  - progressive house
-# feature:
+  - public porn
-#   swagger: false
+  - r/musichoarder
-# soulseek:
+  - ru
-#   address: vps.slsknet.org
+  - shoegaze
-#   port: 2271
+  - tapekvit
-#   username: ~
+  - test
-#   password: ~
+  - trancEaddict
-#   description: |
+  - trivia
-#     A slskd user. https://github.com/slskd/slskd
+  - what.cd
-#   listen_ip_address: 0.0.0.0
+  - what.cd electronic
-#   listen_port: 50300
+  - what.cd-flac
-#   diagnostic_level: Info
+  - '{Italo Disco'
-#   distributed_network:
+web:
-#     disabled: false
+  authentication:
-#     disable_children: false
+    username: slskd
-#     child_limit: 25
+    password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSKD_WEB_PASSSWORD'] }}
-#     logging: false
+    api_keys:
-#   connection:
+      my_api_key:
-#     timeout:
+        key: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSKD_API_KEY'] }}
-#       connect: 10000
+        role: readwrite0
-#       inactivity: 15000
+        cidr: 0.0.0.0/0,::/0
-#     buffer:
+soulseek:
-#       read: 16384
+  address: vps.slsknet.org
-#       write: 16384
+  port: 2271
-#       transfer: 262144
+  username: Trez.One
-#       write_queue: 250
+  password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSK_USER_PASSWORD'] }}
-#     proxy:
+  diagnostic_level: Info
-#       enabled: false
-#       address: ~
-#       port: ~
-#       username: ~
-#       password: ~
-# integration:
-#   ftp:
-#     enabled: false
-#     address: ~
-#     port: ~
-#     username: ~
-#     password: ~
-#     remote_path: /
-#     encryption_mode: auto
-#     ignore_certificate_errors: false
-#     overwrite_existing: true
-#     connection_timeout: 5000
-#     retry_attempts: 3
-#   pushbullet:
-#     enabled: false
-#     access_token: ~
-#     notification_prefix: "From slskd:"
-#     notify_on_private_message: true
-#     notify_on_room_mention: true
-#     retry_attempts: 3
-#     cooldown_time: 900000

docker-compose.yml

@@ -61,47 +61,12 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3001:3000
-        protocol: tcp
+      - 446:443
-        published: "3001"
+      - 8008:80
-        target: 3000
+      - 853:853
-      - mode: ingress
+      - 67:67
-        protocol: tcp
+      - 688:68
-        published: "446"
-        target: 443
-      - mode: ingress
-        protocol: tcp
-        published: "8008"
-        target: 80
-      - mode: ingress
-        protocol: tcp
-        published: "853"
-        target: 853
-      - host_ip: 0.0.0.0
-        mode: ingress
-        protocol: tcp
-        published: "53"
-        target: 53
-      - host_ip: 0.0.0.0
-        mode: ingress
-        protocol: udp
-        published: "53"
-        target: 53
-      - host_ip: 0.0.0.0
-        mode: ingress
-        protocol: udp
-        published: "67"
-        target: 67
-      - host_ip: 0.0.0.0
-        mode: ingress
-        protocol: tcp
-        published: "688"
-        target: 68
-      - host_ip: 0.0.0.0
-        mode: ingress
-        protocol: udp
-        published: "688"
-        target: 68
     restart: unless-stopped
     volumes:
       - bind:
@@ -158,10 +123,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 13378:80
-        protocol: tcp
-        published: "13378"
-        target: 80
     restart: unless-stopped
     user: 1000:1000
     volumes:
@@ -274,10 +236,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 6767:6767
-        protocol: tcp
-        published: "6767"
-        target: 6767
     restart: unless-stopped
     volumes:
       - bind:
@@ -338,12 +297,7 @@ services:
     network_mode: host
     restart: unless-stopped
     volumes:
-      - /dev/sda:/extra-filesystems/sda:ro
+      - /rinoa-storage:/extra-filesystems/rinoa-storage:ro
-      - /dev/sdb:/extra-filesystems/sdb:ro
-      - /dev/sdc:/extra-filesystems/sdc:ro
-      - /dev/sdd:/extra-filesystems/sdd:ro
-      - /dev/sde:/extra-filesystems/sde:ro
-      - /dev/sdf:/extra-filesystems/sdf:ro
       - /dev/nvme0n1:/extra-filesystems/nvme0n1:ro
   bitmagnet:
     command:
@@ -408,6 +362,7 @@ services:
     networks:
       bitmagnet:
         ipv4_address: 192.168.55.8
+      default: null
     restart: unless-stopped
     shm_size: 1g
     volumes:
@@ -445,14 +400,8 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3012:3012
-        protocol: tcp
+      - 8013:80
-        published: "3012"
-        target: 3012
-      - mode: ingress
-        protocol: tcp
-        published: "8013"
-        target: 80
     restart: unless-stopped
     volumes:
       - bind:
@@ -680,10 +629,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8101:8080
-        protocol: tcp
-        published: "8101"
-        target: 8080
     restart: unless-stopped
     security_opt:
       - no-new-privileges=true
@@ -748,12 +694,10 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8908:3000
-        protocol: tcp
-        published: "8908"
-        target: 3000
     restart: always
     volumes:
+      - ${DOCKER_VOLUME_CONFIG}/crowdsec/local-api-credentials.yaml:/etc/crowdsec/local_api_credentials.yaml
       - source: crowdsec-db
         target: /data/
         type: volume
@@ -783,10 +727,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 5800:5800
-        protocol: tcp
-        published: "5800"
-        target: 5800
     privileged: true
     restart: unless-stopped
     volumes:
@@ -819,7 +760,7 @@ services:
     environment:
       RAILS_ENV: development
       REDIS_URL: redis://redis:6379/
-      DATABASE_HOST: dawarich-db
+      DATABASE_HOST: dawarich-pg-db
       DATABASE_USERNAME: dawarich
       DATABASE_PASSWORD: ${DAWARICH_PG_PASSWORD}
       DATABASE_NAME: dawarich
@@ -886,7 +827,7 @@ services:
     environment:
       RAILS_ENV: development
       REDIS_URL: redis://redis:6379/
-      DATABASE_HOST: dawarich-db
+      DATABASE_HOST: dawarich-pg-db
       DATABASE_USERNAME: dawarich
       DATABASE_PASSWORD: ${DAWARICH_PG_PASSWORD}
       DATABASE_NAME: dawarich
@@ -926,7 +867,7 @@ services:
     volumes:
       - dawarich_public:/var/app/public
       - dawarich_watched:/var/app/tmp/imports/watched
-      - ${DOCKER_VOLUME_CONFIG}/dawarich/sideqik-entrypoint.sh:/usr/local/bin/sidekiq-entrypoint.sh
+      - ${DOCKER_VOLUME_CONFIG}/dawarich/sidekiq-entrypoint.sh:/usr/local/bin/sidekiq-entrypoint.sh
   dbgate:
     container_name: dbgate
     environment:
@@ -1105,26 +1046,11 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 58846:58846
-        protocol: tcp
+      - 58946:58946
-        published: "58846"
+      - 6881:6881
-        target: 58846
+      - 8112:8112
-      - mode: ingress
+      - 8118:8118
-        protocol: tcp
-        published: "58946"
-        target: 58946
-      - mode: ingress
-        protocol: tcp
-        published: "6881"
-        target: 6881
-      - mode: ingress
-        protocol: tcp
-        published: "8112"
-        target: 8112
-      - mode: ingress
-        protocol: tcp
-        published: "8118"
-        target: 8118
     privileged: true
     restart: unless-stopped
     sysctls:
@@ -1176,10 +1102,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 2375:2375
-        protocol: tcp
-        published: "2375"
-        target: 2375
     privileged: true
     restart: unless-stopped
     volumes:
@@ -1206,10 +1129,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3002:3000
-        protocol: tcp
-        published: "3002"
-        target: 3000
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/docuseal
@@ -1238,11 +1158,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8282:8200
-        protocol: tcp
-        published: "8282"
-        target: 8200
-      - ${DUPLICATI_PORT_8200}:8200
     restart: unless-stopped
     volumes:
       - bind:
@@ -1289,10 +1205,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8105:8080
-        protocol: tcp
-        published: "8105"
-        target: 8080
     restart: unless-stopped
     volumes:
       - source: fastenhealth-cache
@@ -1318,10 +1231,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8191:8191
-        protocol: tcp
-        published: "8191"
-        target: 8191
     restart: unless-stopped
     sysctls:
       - net.ipv6.conf.all.disable_ipv6=1
@@ -1415,14 +1325,8 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3013:3000
-        protocol: tcp
+      - 222:22
-        published: "3013"
-        target: 3000
-      - mode: ingress
-        protocol: tcp
-        published: "222"
-        target: 22
     restart: always
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/gitea
@@ -1548,30 +1452,11 @@ services:
         ipv4_address: 192.168.55.7
       default: null
     ports:
-      - mode: ingress
+      - 3333:3333
-        protocol: tcp
+      - 3334:3334
-        published: "3333"
+      - 5030:5030
-        target: 3333
+      - 5031:5031
-      - mode: ingress
+      - 50300:50300
-        protocol: tcp
-        published: "3334"
-        target: 3334
-      - mode: ingress
-        protocol: udp
-        published: "3334"
-        target: 3334
-      - mode: ingress
-        protocol: tcp
-        published: "5030"
-        target: 5030
-      - mode: ingress
-        protocol: tcp
-        published: "5031"
-        target: 5031
-      - mode: ingress
-        protocol: tcp
-        published: "50300"
-        target: 50300
     restart: always
   gotify:
     container_name: gotify
@@ -1613,10 +1498,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8097:80
-        protocol: tcp
-        published: "8097"
-        target: 80
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/gotify
@@ -1657,10 +1539,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3004:3000
-        protocol: tcp
-        published: "3004"
-        target: 3000
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/homepage
@@ -1715,10 +1594,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8006:80
-        protocol: tcp
-        published: "8006"
-        target: 80
     restart: unless-stopped
     volumes:
       - source: hortusfox_app_images
@@ -1760,10 +1636,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 1313:1313
-        protocol: tcp
-        published: "1313"
-        target: 1313
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/hugo/
@@ -1972,10 +1845,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3007:3000
-        protocol: tcp
-        published: "3007"
-        target: 3000
     restart: unless-stopped
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/invidious/config.yml:/config.yml
@@ -2065,10 +1935,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8003:8003
-        protocol: tcp
-        published: "8003"
-        target: 8003
     restart: always
     volumes:
       - invoice-ninja_cache:/var/www/html/bootstrap/cache
@@ -2124,10 +1991,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8005:80
-        protocol: tcp
-        published: "8005"
-        target: 80
     restart: always
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/invoice-ninja/nginx:/etc/nginx/conf.d:ro
@@ -2150,10 +2014,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8104:80
-        protocol: tcp
-        published: "8104"
-        target: 80
     restart: unless-stopped
   jellyfin:
     container_name: jellyfin
@@ -2334,7 +2195,7 @@ services:
     networks:
       default: null
     ports:
-      - 127.0.0.1:${JICOFO_REST_PORT:-8889}:8888
+      - 8889:8888
     restart: unless-stopped
     volumes:
       - bind:
@@ -2395,7 +2256,7 @@ services:
     networks:
       default: null
     ports:
-      - ${JIGASI_PORT_MIN:-20000}-${JIGASI_PORT_MAX:-20050}:${JIGASI_PORT_MIN:-20000}-${JIGASI_PORT_MAX:-20050}/udp
+      - 20000-20050:20000-20050/udp
     restart: unless-stopped
     volumes:
       - bind:
@@ -2454,8 +2315,8 @@ services:
     networks:
       default: null
     ports:
-      - ${JVB_PORT:-10000}:${JVB_PORT:-10000}/udp
+      - 10000:10000/udp
-      - 127.0.0.1:${JVB_COLIBRI_PORT:-8091}:8080
+      - 8091:8080
     restart: unless-stopped
     volumes:
       - bind:
@@ -2554,7 +2415,7 @@ services:
       XMPP_RECORDER_DOMAIN:
       XMPP_PORT:
     expose:
-      - ${XMPP_PORT:-5222}
+      - 5222
       - "5347"
       - "5280"
     image: jitsi/prosody:${JITSI_IMAGE_VERSION:-stable}
@@ -2735,8 +2596,8 @@ services:
     networks:
       default: null
     ports:
-      - ${JITSI__HTTP_PORT}:80
+      - 8001:80
-      - ${JITSI__HTTPS_PORT}:443
+      - 8002:443
     restart: unless-stopped
     volumes:
       - bind:
@@ -2810,10 +2671,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 22300:22300
-        protocol: tcp
-        published: "22300"
-        target: 22300
     restart: unless-stopped
   libretranslate:
     container_name: libretranslate
@@ -2863,10 +2721,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8686:8686
-        protocol: tcp
-        published: "8686"
-        target: 8686
     restart: unless-stopped
     volumes:
       - bind:
@@ -2966,10 +2821,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 17170:17170
-        protocol: tcp
-        published: "17170"
-        target: 17170
     restart: always
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/lldap
@@ -3008,10 +2860,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 42010:42010
-        protocol: tcp
-        published: "42010"
-        target: 42010
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/maloja/config
@@ -3041,10 +2890,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3306:3306
-        protocol: tcp
-        published: "3306"
-        target: 3306
     restart: unless-stopped
     volumes:
       - bind:
@@ -3170,14 +3016,8 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 9001:9000
-        protocol: tcp
+      - 9092:9090
-        published: "9001"
-        target: 9000
-      - mode: ingress
-        protocol: tcp
-        published: "9092"
-        target: 9090
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/minio/data
@@ -3233,10 +3073,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 9078:9078
-        protocol: tcp
-        published: "9078"
-        target: 9078
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/multi-scrobbler
@@ -3308,10 +3145,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 4533:4533
-        protocol: tcp
-        published: "4533"
-        target: 4533
     restart: unless-stopped
     user: 1000:1000
     volumes:
@@ -3486,7 +3320,7 @@ services:
       homepage.icon: nextcloud.svg
       homepage.description: Private Cloud
       homepage.widget.type: nextcloud
-      homepage.widget.url: https://cloud.trez.wtf/
+      homepage.widget.url: http://nextcloud-aio-apache:11000
       homepage.widget.key: ${NEXTCLOUD_HOMEPAGE_TOKEN}
       swag: enable
       swag_port: 11000
@@ -3531,10 +3365,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3579:3579
-        protocol: tcp
-        published: "3579"
-        target: 3579
     restart: unless-stopped
     volumes:
       - bind:
@@ -3620,10 +3451,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8004:8000
-        protocol: tcp
-        published: "8004"
-        target: 8000
     restart: unless-stopped
     volumes:
       - source: paperless-ngx-data
@@ -3805,10 +3633,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8107:8000
-        protocol: tcp
-        published: "8107"
-        target: 8000
     restart: always
   plausible_db:
     container_name: plausible-db
@@ -3905,10 +3730,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 25:25
-        protocol: tcp
-        published: "25"
-        target: 25
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/postal
@@ -3936,10 +3758,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 5001:5000
-        protocol: tcp
-        published: "5001"
-        target: 5000
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/postal
@@ -3988,10 +3807,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 9696:9696
-        protocol: tcp
-        published: "9696"
-        target: 9696
     restart: unless-stopped
     volumes:
       - bind:
@@ -4086,10 +3902,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 7878:7878
-        protocol: tcp
-        published: "7878"
-        target: 7878
     restart: unless-stopped
     volumes:
       - bind:
@@ -4157,10 +3970,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3011:3000
-        protocol: tcp
-        published: "3011"
-        target: 3000
     restart: unless-stopped
   reactive-resume-pg:
     container_name: reactive-resume-pg
@@ -4200,10 +4010,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8787:8787
-        protocol: tcp
-        published: "8787"
-        target: 8787
     restart: unless-stopped
     volumes:
       - bind:
@@ -4287,10 +4094,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8103:8080
-        protocol: tcp
-        published: "8103"
-        target: 8080
     read_only: true
     restart: always
     security_opt:
@@ -4371,18 +4175,9 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8080:8080
-        protocol: tcp
+      - 8090:8090
-        published: "8080"
+      - 8119:8118
-        target: 8080
-      - mode: ingress
-        protocol: tcp
-        published: "8090"
-        target: 8090
-      - mode: ingress
-        protocol: tcp
-        published: "8119"
-        target: 8118
     privileged: true
     restart: unless-stopped
     sysctls:
@@ -4473,14 +4268,8 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8909:8080
-        protocol: tcp
+      - 8910:8086
-        published: "8909"
-        target: 8080
-      - mode: ingress
-        protocol: tcp
-        published: "8910"
-        target: 8086
     restart: unless-stopped
     volumes:
       - bind:
@@ -4530,10 +4319,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8095:8080
-        protocol: tcp
-        published: "8095"
-        target: 8080
     privileged: true
     restart: unless-stopped
     volumes:
@@ -4622,10 +4408,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8989:8989
-        protocol: tcp
-        published: "8989"
-        target: 8989
     restart: unless-stopped
     volumes:
       - bind:
@@ -4716,6 +4499,32 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads:/downloads
       #Select where you are storing your config file. Leave "/data" since thats where the script expects the config file to be
       - ${DOCKER_VOLUME_CONFIG}/soularr:/data
+  soularr-dashboard:
+    container_name: soularr-dashboard
+    depends_on:
+      soularr:
+        condition: service_started
+        required: true
+    environment:
+      PUID: ${PUID}
+      PGID: ${PGID}
+      TZ: ${TZ}
+    labels:
+      homepage.name: Soularr
+      homepage.group: Downloaders
+      homepage.description: Dashboard for monitoring Soularr
+      homepage.href: https://slsk.${MY_TLD}
+      homepage.icon: /icons/soularr.png
+    image: git.trez.wtf/trez.one/soularr-dashboard:v0.1
+    ports:
+      - 18364:8080
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/soularr/dashboard:/app
+      - ${DOCKER_VOLUME_CONFIG}/soularr:/data
+      - ${DOCKER_VOLUME_CONFIG}/soularr/logs:/data/logs
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    working_dir: /app
   soulseek:
     container_name: soulseek
     depends_on:
@@ -4723,11 +4532,6 @@ services:
         condition: service_started
         required: true
         restart: true
-    environment:
-      SLSKD_PASSWORD: ${SLSKD_PASSWORD}
-      SLSKD_REMOTE_CONFIGURATION: true
-      SLSKD_SHARED_DIR: /music
-      SLSKD_USERNAME: slsk
     image: slskd/slskd
     labels:
       homepage.name: Soulseek
@@ -4745,16 +4549,10 @@ services:
     network_mode: service:gluetun
     restart: always
     volumes:
-      - source: ${DOCKER_VOLUME_CONFIG}/soulseek
+      - ${DOCKER_VOLUME_CONFIG}/soulseek:/app
-        target: /app
+      - ${DOCKER_VOLUME_STORAGE}/Audio/Music:/music
-        type: bind
+      - ${DOCKER_VOLUME_STORAGE}/downloads/completed/slsk:/app/downloads/
-        bind:
+      - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_STORAGE}/Audio/Music
-        target: /music
-        type: bind
-        bind:
-          create_host_path: true
   sourcebot:
     container_name: sourcebot
     environment:
@@ -4833,7 +4631,7 @@ services:
     environment:
       DNSPLUGIN: cloudflare
       EMAIL: charish.patel@trez.wtf
-      EXTRA_DOMAINS: 
+      EXTRA_DOMAINS:
       ONLY_SUBDOMAINS: false
       PGID: 1000
       PUID: 1000
@@ -4870,18 +4668,9 @@ services:
       - default
       - nextcloud-aio
     ports:
-      - mode: ingress
+      - 443:443
-        protocol: tcp
+      - 80:80
-        published: "443"
+      - 81:81
-        target: 443
-      - mode: ingress
-        protocol: tcp
-        published: "80"
-        target: 80
-      - mode: ingress
-        protocol: tcp
-        published: "81"
-        target: 81
     restart: unless-stopped
     volumes:
       - bind:
@@ -4940,10 +4729,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8106:8080
-        protocol: tcp
-        published: "8106"
-        target: 8080
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/tandoor/static
@@ -4997,10 +4783,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8911:8888
-        protocol: tcp
-        published: "8911"
-        target: 8888
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/unmanic
@@ -5043,10 +4826,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3003:3001
-        protocol: tcp
-        published: "3003"
-        target: 3001
     restart: unless-stopped
     volumes:
       - bind:
@@ -5153,9 +4933,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 32768:80
-        protocol: tcp
-        target: 80
     restart: unless-stopped
     volumes:
       - source: ${DOCKER_VOLUME_CONFIG}/wallabag/images
@@ -5182,10 +4960,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8283:80
-        protocol: tcp
-        published: "8283"
-        target: 80
     restart: unless-stopped
     volumes:
       - wallos-db:/var/www/html/db
@@ -5260,10 +5035,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 3010:3000
-        protocol: tcp
-        published: "3010"
-        target: 3000
     restart: unless-stopped
   your_spotify:
     container_name: your_spotify
@@ -5294,8 +5066,8 @@ services:
     networks:
       default: null
     ports:
-      - ${YOUR_SPOTIFY_PORT_80}:80
+      - 8088:80
-      - ${YOUR_SPOTIFY_PORT_443}:443
+      - 8098:443
     restart: always
   youtubedl:
     container_name: youtubedl
@@ -5322,10 +5094,7 @@ services:
     networks:
       default: null
     ports:
-      - mode: ingress
+      - 8089:8080
-        protocol: tcp
-        published: "8089"
-        target: 8080
     restart: unless-stopped
     volumes:
       - bind:
@@ -5386,7 +5155,7 @@ services:
       start_period: '20s'
     image: postgres:16-alpine
     restart: unless-stopped
-    volumes: 
+    volumes:
       - zitadel-pg-db:/var/lib/postgresql/data
 volumes:
   authelia-pg-db: