Merge pull request '🔧 Renovate: Update (digest) authelia/authelia:master Docker digest to db0a69f' (#2748) from renovate/authelia-authelia-master into main

Reviewed-on: #2649

README.md

@@ -50,7 +50,7 @@
 | garage | dxflrs/garage:v2.3.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.26.1 | Private Code Repo |
+| gitea | gitea/gitea:1.26.2 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -183,6 +183,7 @@
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
 | vault | hashicorp/vault:2.0.0-bugfix | HashiCorp Vault for secrets, key/value stores, etc. |
+| vault-agent | hashicorp/vault:2.0.0-bugfix |  |
 | wallos | bellamy/wallos:latest | Subscription Tracking |
 | web-check | lissy93/web-check | Site scanner for attack vectors, architecture, security configs, and more |
 | whodb | clidey/whodb | Lightweight next-gen database explorer |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:e0776533ea02e68771d8b8b857112e8b27197ded73b24efc4881375b1f239689
+  image: h2invent/jitsi-admin-main:latest@sha256:87affbe785e74339a53b55b40014a8f004194c9996551b0824f86339372276b1
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:1aeeb3985db55556e716dec25e08f6ce09308c2571b65cddbc6746ee6d5e0d45
+    image: docker.io/actualbudget/actual-server:latest@sha256:74385f8067f401e61f0be9e343c471705c42dfaa195295c40c5b2f15f4dcc9d4
     labels:
       swag: enable
       swag_port: 5006
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:0d114aa96f1782173af59c6af88b1dc75918af71ab8a160a3b1e48da1b5de96f
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:bea0fd4a44ec7223cdad11fb909eb610b420c10a6b87bafcf22f61f111c43371
     labels:
       swag: enable
       swag_proto: http
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:1eef6716183c52abafe5405e7d6be8390248ecd59c7488c44af871757ac8fc4d
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -483,7 +483,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:913eef1ba069a0bb03cbc78ecd785c7443f04bedd41176498407cc8d6a51f523
+    image: authelia/authelia:master@sha256:bbe4d45bd40baad15df41ff45c3adf6efbfa868fc41bfcec3ca38cb6033e9cc2
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -577,7 +577,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:95f27692c3de6dbe130cd035d342d8138ec74ade7b62cfc52e11ae222c52c855
+    image: lscr.io/linuxserver/bazarr:latest@sha256:4b5e510042bf471c8bafab89cada9774fba2fb25f16ec64235151cacbe847c10
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -787,7 +787,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:af0f9442caf5908fdf655a23c34e50e6f1c66ce3306d88e3d4578280bcba9661
+    image: ghcr.io/browserless/chromium:latest@sha256:e14388229e602b21aa60c3233d1865c8c112f973c6fae03235d4e34c0f9d6c01
     labels:
       swag: enable
       swag_proto: http
@@ -847,7 +847,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:d89d4187221206f7f9f2c7946e7483815db905ca7d122644081aebd5d23ba391
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:736331d2787f94d3201b64aa641e090f67e28577ba505bd7ba5d7c1841e1e0ca
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -1042,7 +1042,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:f50d83eabc0e38cf9c40fc9c779ca39780b44edb3db3a0857d59ca46949eddad
+    image: metabase/metabase@sha256:4907c2cd316261ff92bf03cdf0944e3a8dde7a37ff9669834ec25738f2eb2d02
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1074,7 +1074,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:c9a202b56408dea46f28d95177a896d59e284902c884d0ef84377fecdf0ab286
+    image: mpepping/cyberchef:latest@sha256:c0dbc2129e8eb7dbcee121d90d380e4fc7d498ba52252dd5525507c55acc2009
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1192,7 +1192,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
+    image: freikin/dawarich:latest@sha256:7c70f2169e848ed77ae1cec01dd10ec4a73a70a785d4e4d248db1735c0bc25ed
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1283,7 +1283,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
+    image: freikin/dawarich:latest@sha256:7c70f2169e848ed77ae1cec01dd10ec4a73a70a785d4e4d248db1735c0bc25ed
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1489,7 +1489,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:d681e5213fa0871efa573856ed838d38150231df66c7de4b3dbe6980290f2571
+    image: lscr.io/linuxserver/duplicati:latest@sha256:98986271265c9184f844d7e61ce63a60993d8dcfe5f989e4316b374ccebfdaee
     labels:
       swag: enable
       swag_port: 8200
@@ -1575,7 +1575,7 @@ services:
       WEEKLY_JAMS_FLAGS: --playlist=weekly-jams --download-mode=skip
       DAILY_JAMS_SCHEDULE: 30 2 * * *
       DAILY_JAMS_FLAGS: --playlist=daily-jams --download-mode=skip
-    image: ghcr.io/lumepart/explo:latest@sha256:d4b55bf5c8f2099815e1613a74d9d5ceb1ee6a3fc8f973a19c60cf842bc8d8df
+    image: ghcr.io/lumepart/explo:latest@sha256:cad2acbe3b504b1c12456f86a13869ecc147b358465aa3d06d66243ac614cf2e
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -1629,7 +1629,7 @@ services:
       BROWSER_TIMEOUT: 40000
       TEST_URL: https://duckduckgo.com
     hostname: Rinoa
-    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
+    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:139dfee1c6f89249c8d665d1333a42e8ec74ec0a86bc6bb1c8461e10d3a66a47
     networks:
       default: null
     ports:
@@ -1708,7 +1708,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:876880a26b770631949d9bf2aa4b62d169e2a2f1dad56e9b065ac5d6f1c346e1
+    image: ghost:latest@sha256:2452ef8a8402e3f9f14e0ba9d84074ba82336277f5073250560e8b48906632df
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1753,7 +1753,7 @@ services:
       GITEA__mailer__SMTP_PORT: 25
       GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
       GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
+    image: gitea/gitea:1.26.2@sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1813,7 +1813,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:270d88b68e90419ae596e0b472291868749847ab18ccb5e2cb27cab4dcbf0125
+    image: postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -1996,7 +1996,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+    image: ghcr.io/gethomepage/homepage:latest@sha256:a0b71c8e757298d02560186bab9fbe3fc2d375c523a62cc1019177b37e48aa28
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2163,7 +2163,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:48c4ea4884b04c77a4a4ec93e190dea6cb7dc1b38acb005a35dd56f68212d85a
+    image: alangrainger/immich-public-proxy:latest@sha256:6aeb25d05155049f4600f1b40469c735cecaa99c22e3a943a3fe3ce02a1ae7f7
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2286,7 +2286,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:1ddd3f1c6ba5c4b8b786b91830926bb510376918a7d43b2f142df6650c239951
+    image: quay.io/invidious/invidious-companion:latest@sha256:11561591f1d7374605c076801035175e7bb32c7ec18dcb69545b8f618e10a249
     logging:
       options:
         max-size: "1G"
@@ -2310,7 +2310,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:4519de92ae505d7ea7274c4e73105e12cc892efedbfd02d7c0bd9811280f883c
+    image: docker.io/library/postgres:14@sha256:d462928b1898dd74b749ef486797968828c1e7fc9befb5e5ca03a33bfbc32d64
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2359,7 +2359,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:1694ff069f0c9dafb283c36765175606866769f5d72f2ed56b6a0f1be922fc37
+    image: jellyfin/jellyfin@sha256:aefb67e6a7ff1debdd154a78a7bbb780fd0c873d8639210a7f6a2016ad2b35db
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3086,7 +3086,7 @@ services:
       Java_Xmx: 1g
     expose:
       - 8010
-    image: elestio/languagetool:latest@sha256:c71c314fd6d2223634829d0aa7ba9c8b6ab79e7072e3ac03f4cc07231043ab56
+    image: elestio/languagetool:latest@sha256:47bd72901e400849e44d1f4aed351d6f740ee00d4714ff52464e7dd7c441b3e4
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3097,7 +3097,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:c3887840d04c8173fb654ed3acfd41699928c380375808311b5d136d4e056e8b
+    image: libretranslate/libretranslate@sha256:32e49df654dc427edb6c95f1f93cd21dd18b36d4df906a1a34472e1263abe91b
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3131,7 +3131,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:7f34e2a907c7bcfc5cd49a1685db21a1e5055c96e8ad5e0d77ee94e1d50d84e5
+    image: lscr.io/linuxserver/lidarr:latest@sha256:b08b2194fa4ddb7f7ace9d1bfd82bd9b26f457d79aa70f42d923d2e15a820f0e
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3441,7 +3441,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:41e8b59056fda0dfca6e24e2515674b18a76e774c93e464899da4d7116bc147d
+    image: linuxserver/mariadb@sha256:adbb0142f55abd0e913b8fdd017f637d2318d434e74755908c768399e96403ec
     networks:
       default: null
     ports:
@@ -3495,7 +3495,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:0ede5a930a5af406edb714e6d7179f2388adf1e16d283fb61469b2dd59cf262b
+    image: lscr.io/linuxserver/mastodon:latest@sha256:eb34805b65f9f1354c0b6f33df3a4bebb8c2db690c6146eac175a96d06de341c
     labels:
       swag: enable
       swag_proto: http
@@ -3558,7 +3558,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:7161477b77d29d59636553dce12a9912478ee0c207243be75b203d42a9eb3f9f
+    image: getmaxun/maxun-backend:latest@sha256:06c524edafb7ff84d34340dc7f3656c71cba4f5e3c957ca1b1b4ab84f5505057
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3655,7 +3655,7 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/memes/:/rails/public/memes
   meme-search-pro-img2txt-gen:
-    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:81ffbc934de800f3f5206f742db534a78596ec894e348dc25548495a1e9ad78e
+    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:e212afdcacf866080879dfb1c9a324b71580f84a94c5ca73b52a64a06c73a5ef
     container_name: meme-search-pro-img2txt-gen
     deploy:
       resources:
@@ -3691,7 +3691,7 @@ services:
       - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/db-data/meme-search-db:/var/lib/postgresql/data
   mini-qr:
     container_name: mini-qr
-    image: ghcr.io/lyqht/mini-qr:latest@sha256:ec76feae04ac23ff272f4adfa244195f9b82f2a8ba412a78ef6721bad1ef14fa
+    image: ghcr.io/lyqht/mini-qr:latest@sha256:c9ccf1c25dda85db4275518c9583f6d72fab0885a2221cade0fa1249633aa1a4
     labels:
       swag: enable
       swag_auth: authelia
@@ -3838,7 +3838,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:4b5bf3c2bb7516164f6dcb44acce4fdcb428abfe5771a1128304a0f34ab9ff7c
+    image: mongo:7@sha256:8ecb514b00bdcc0bde67ef4e6c330385377a9dc68e24ee94e28c07c891647348
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -3914,7 +3914,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:34df96d9a7e14c21c70dea69dc2d9c62f920ffe56238f03861ce5ea4ba56481e
+    image: docker.n8n.io/n8nio/n8n@sha256:9f1f8e4c093c9924338bd168e3f813f746041d13b337753af0dbdd329e7b50f7
     labels:
       swag: enable
       swag_proto: http
@@ -3967,7 +3967,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:9fa40b3d8dec43ceb2213d1fa551da3dcfef6ac6d19c2e534efb92527c2bafd2
+    image: deluan/navidrome:latest@sha256:c4b5cb36a790b3eb63ca6a68bbe2fe149c2d7fa2e586f7a480e61db630e6664b
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4022,7 +4022,7 @@ services:
       GRAPHQL_PORT: ${GRAPHQL_PORT:-20212} # GraphQL API port
       ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false} # Set to true to reset your config and database on each container start
       NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0} # 0=kill all services and restart if any dies. 1 keeps running dead services.
-    image: jokobsk/netalertx:latest@sha256:656da7fc9f9fa5429cc75a33b0eb073fe538fd58b3d370f229fa0e4725f065b7
+    image: jokobsk/netalertx:latest@sha256:cd5176052fec71a75c902cc555e97cb540833d79c7cac8695c6adc611c402347
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4169,7 +4169,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:0caadf03b8047e1e6ec8396069bfd7aa2ecacb7d26cd67435dc1f334634d04ac
+    image: lscr.io/linuxserver/ombi:latest@sha256:8b4b1e9aad2e7768396b30ccea4fca446f59abca5530d3d1ad41ab5a13fd19d4
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4623,7 +4623,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
+    image: plantuml/plantuml-server:jetty@sha256:6ab7824dbc4882156ba9b6d4f8ca42d697a79634c073d4d28eb768158f6ef5a7
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4704,7 +4704,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:4e0b4c4f0dd99954b6db70e8766f856742ec1a43370d94a754f8a608ddb0d88a
+    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:713ea1c03f111d92a4a2dbcf99ed69dade8aa68428c41b4b4c4f2515eec89091
     labels:
       swag: enable
       swag_auth: authelia
@@ -4736,7 +4736,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:881099ffea3550c0abd4ebdb48751f33fde913265695ab5890319f30583e3c62
+    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:75723c6a85b2fa2971becf7c32794ac3c9b69786ef14560e19eae3892f8c7bf1
     ports:
       - 36102:8000
     profiles: ["rinoa-apps"]
@@ -4746,7 +4746,7 @@ services:
       - NET_BIND_SERVICE
     command: postal smtp-server
     container_name: postal-smtp
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     networks:
       default: null
     ports:
@@ -4759,7 +4759,7 @@ services:
   postal-web:
     command: postal web-server
     container_name: postal-web
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     labels:
       swag: enable
       swag_proto: http
@@ -4795,7 +4795,7 @@ services:
     container_name: postal-worker
     environment:
       LOG_LEVEL: debug
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -4826,7 +4826,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:a46d0ce0a8236bc4e065fe7c91a55d026c9d849620c5845250519b977d8857f3
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -4933,7 +4933,7 @@ services:
       VPN_PASS: ${DELUGEVPN_ENVIRONMENT_VPN_PASS}
       VPN_PROV: pia
       WEBUI_PORT: 8080
-    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:fe6daf82a190902d99350026eccdb883eb1e5f80b23827ba04a29c155815c696
+    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:64462c1cef85a4dde9ff76465dfa39f5628b6b88a30143fa48b3546a776fcac0
     labels:
       homepage.group: Downloaders
       homepage.name: qBittorrent
@@ -5044,7 +5044,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+    image: lscr.io/linuxserver/radarr:latest@sha256:7b45af3b660f5ff5f7d6d625bfa99960cb9265e902f1bef136486f6d2be73ee9
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5106,7 +5106,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:c55782377718e9475e318f9a802fcff380f978331a1ae509096f97aadb971c29
+    image: amruthpillai/reactive-resume:latest@sha256:267e56e622f39b226e3796331e7391dad6ac9bc8c4369a506f33cd5876f26b36
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5285,7 +5285,7 @@ services:
         condition: service_healthy
         required: true
         restart: true
-    image: rommapp/romm:latest@sha256:2b7a1714b287f69b081ad2a63bb8c2fa673666a17b2f21322b580b0cd51cb266
+    image: rommapp/romm:latest@sha256:fa9a412dd2881472ef85aa9b268a84ae6d149b865fddd50df2b72749ce8a480e
     environment:
       ROMM_DB_DRIVER: mariadb # mariadb | sqlite (default: sqlite)
       ROMM_HOST: https://localhost:3000 # [Optional] your host ip or domain name (including http(s)://, subdomain and port if needed). Being used only for webRcade feed for now.
@@ -5380,7 +5380,7 @@ services:
       VPN_USER: ${SABNZBDVPN_ENVIRONMENT_VPN_USER}
       DEBUG: true
     hostname: Rinoa
-    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:c01bec2f4a9695aca83034f2ca759936ac1d2ddd96b2dc17ce62533bb065ea84
+    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:f9c6e4131a003ff8d033949afa08e3555cddcccbff51375c920f3755438e2b06
     labels:
       homepage.group: Downloaders
       homepage.name: SABnzbd
@@ -5549,7 +5549,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
+    image: searxng/searxng:latest@sha256:04cc81a759e882e411569e008a77243ab8b0fc4137bcf88018cd7b7c3cbdff41
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5877,7 +5877,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:60f3b6b5c7647ba2bafd81163acfe34b11117b9b834ebd7fbcc3e5f1b309c7ef
+    image: lscr.io/linuxserver/sonarr:latest@sha256:02bc962946fef994e67a38152446df25c10a52f8583aefeeb6467f9dd44cab99
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6064,7 +6064,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:bf18a04f9e61573cefb0112ca9604a93a82451ada74050a6b30b41e30651d9a1
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:f99dfd097709016dfb4387d65bfdc0419bde99cf1dce7e26e70ca616c86f1281
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6104,7 +6104,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:950c596db26e0764f642def2fd4f9ee904ff2ac16d83fe621ff731b771d9b385
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:2bb9b67f3edbca7ecc80f6e851a02cd04a10d5ea1d69b3e80b1e1f615e97b7a2
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6156,7 +6156,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:74b906a164b2eb43f1792aeac5e2ca464b5b118b3d918cb1a5f2b8ccfed12ebb
+    image: lscr.io/linuxserver/swag:latest@sha256:08ab364516bbc9b5b36a008084c259780f24a85d421f29b967560dc662606d75
     labels:
       swag: enable
       swag_proto: http
@@ -6453,11 +6453,31 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/config/:/vault/config
       - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/logs/:/vault/logs
+  vault-agent:
+    cap_add:
+      - IPC_LOCK
+    command:
+      - agent
+      - -config=/vault/config/vault-agent.hcl
+    container_name: hc-vault-agent
+    environment:
+      VAULT_ADDR: http://hc-vault:8200
+      SKIP_SETCAP: true
+    image: hashicorp/vault:2.0.0-bugfix
+    ports:
+      - 8100
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/config/:/vault/config:ro
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/data/:/vault/data:ro
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/tokens/:/vault/tokens
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/output/:/vault/output
   wallos:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:f226b0ccb9f726f0389653357a692a684afbb7a6cca705099a1d826e8f47a772
+    image: bellamy/wallos:latest@sha256:11ed4975912a014e2ec53d5270acfdde8eb928f59b56ad9ba136a2e69bbec019
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6487,7 +6507,7 @@ services:
       - wallos-logos:/var/www/html/images/uploads/logos
   web-check:
     container_name: web-check
-    image: lissy93/web-check@sha256:e5cd2f8c9197e0a2b646ce94691ffa2a08878b1ae9bbbbbb725c37e685ff8859
+    image: lissy93/web-check@sha256:1b102bc289f9bbd9688fff60a96b13cbe110def0cb9af087202c0668d4add315
     labels:
       homepage.group: Privacy/Security
       homepage.name: Web-Check