Adding extra_hosts for browserless/chromium.

Merged by Trez.One

README.md

@@ -16,7 +16,7 @@
 | bitmagnet | ghcr.io/bitmagnet-io/bitmagnet:latest |
 | bitmagnet-pg-db | postgres:17-alpine |
 | bitwarden | vaultwarden/server:latest |
-| bluesky-pds | ghcr.io/bluesky-social/pds:latest |
+| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.98 |
 | browserless | ghcr.io/browserless/chromium:latest |
 | bunkerweb | bunkerity/bunkerweb:1.6.0 |
 | bunkerweb-scheduler | bunkerity/bunkerweb-scheduler:1.6.0 |
@@ -52,7 +52,6 @@
 | gotify | gotify/server |
 | guacamole | flcontainers/guacamole:latest |
 | homepage | ghcr.io/gethomepage/homepage:latest |
-| hortusfox | ghcr.io/danielbrendel/hortusfox-web:latest |
 | hugo | hugomods/hugo:exts |
 | immich-server | ghcr.io/immich-app/immich-server:release |
 | immich-machine-learning | ghcr.io/immich-app/immich-machine-learning:release |
@@ -63,8 +62,6 @@
 | invidious | quay.io/invidious/invidious:latest |
 | invidious-sig-helper | quay.io/invidious/inv-sig-helper:latest |
 | invidious-db | docker.io/library/postgres:14 |
-| invoice-ninja | invoiceninja/invoiceninja-debian:5 |
-| invoice-ninja_proxy | nginx |
 | it-tools | ghcr.io/corentinth/it-tools:latest |
 | jellyfin | jellyfin/jellyfin |
 | jitsi-etherpad | etherpad/etherpad:1.8.6 |
@@ -82,6 +79,7 @@
 | libretranslate | libretranslate/libretranslate |
 | lidarr | lscr.io/linuxserver/lidarr:latest |
 | lidify | thewicklowwolf/lidify:latest |
+| linkstack | linkstackorg/linkstack:latest |
 | lldap | lldap/lldap:stable |
 | maloja | krateng/maloja:latest |
 | manyfold | lscr.io/linuxserver/manyfold:latest |
@@ -96,24 +94,14 @@
 | n8n | docker.n8n.io/n8nio/n8n |
 | navidrome | deluan/navidrome:latest |
 | netalertx | jokobsk/netalertx:latest |
-| netbird-dashboard | netbirdio/dashboard:latest |
-| netbird-signal | netbirdio/signal:latest |
-| netbird-relay | netbirdio/relay:latest |
-| netbird-management | netbirdio/management:latest |
-| netbird-coturn | coturn/coturn:latest |
 | nextcloud | nextcloud/all-in-one:latest |
 | ollama | ollama/ollama |
 | ombi | lscr.io/linuxserver/ombi:latest |
 | paperless-ngx | ghcr.io/paperless-ngx/paperless-ngx:latest |
 | parseable | containers.parseable.com/parseable/parseable:latest |
-| peppermint | pepperlabs/peppermint:latest |
-| peppermint-pg-db | postgres:17-alpine |
 | pgbackweb | eduardolat/pgbackweb:latest |
 | pgbackweb-db | postgres:16-alpine |
 | plantuml-server | plantuml/plantuml-server:jetty |
-| plausible | ghcr.io/plausible/community-edition:v2.1.0 |
-| plausible_db | postgres:16-alpine |
-| plausible_events_db | clickhouse/clickhouse-server:24.3.3.102-alpine |
 | portainer | portainer/portainer-ce:2.27.0-alpine |
 | portall | need4swede/portall:latest |
 | postal-smtp | ghcr.io/postalserver/postal:latest |
@@ -143,9 +131,8 @@
 | soulseek | slskd/slskd |
 | sourcebot | ghcr.io/sourcebot-dev/sourcebot:latest |
 | speedtest-tracker | lscr.io/linuxserver/speedtest-tracker:latest |
-| spotisub | blastbeng/spotisub:latest |
 | stable-diffusion-download | git.trez.wtf/trez.one/stable-diffusion-download:v9.0.0 |
-| stable-diffusion-webui | git.trez.wtf/trez.one/stable-diffusion-ui:v9.0.0 |
+| stable-diffusion-webui | git.trez.wtf/trez.one/stable-diffusion-ui:v9.0.1 |
 | swag | lscr.io/linuxserver/swag:latest |
 | tandoor | vabene1111/recipes |
 | tandoor-pg | postgres:16-alpine |

ansible/app-configs/homepage_settings.yaml.j2

@@ -23,29 +23,26 @@ provider: duckduckgo
 layout:
   System Administration:
     style: row
-    columns: 5
+    columns: 4
   Infrastructure/App Performance Monitoring:
     style: row
-    columns: 3
+    columns: 4
   Code/DevOps:
     style: row
     columns: 4
   Social:
     style: row
-    columns: 3
+    columns: 4
   Lifestyle:
     style: row
-    columns: 5
+    columns: 3
   Automation:
     style: row
     columns: 5
   Privacy/Security:
     style: row
-    columns: 3
+    columns: 5
-  Personal Services:
+  Personal/Professional Services:
-    style: row
-    columns: 4
-  Professional Services:
     style: row
     columns: 5
   Servarr Stack:

ansible/app-configs/librechat_librechat.yaml.j2

@@ -6,21 +6,21 @@ endpoints:
       baseURL: "http://ollama:11434/v1/chat/completions"
       models:
         default: [
-          "deepseek-r1",
+          "deepseek-r1:1.5b",
-          "deepseek-coder-v2",
+          "deepseek-coder-v2:16b",
-          "deepseek-v3",
+          "deepseek-v3:671b",
-          "llama3.3",
+          "llama3.3:70b",
-          "phi4",
+          "phi4:14b",
           "qwen2.5",
-          "llama2",
+          "llama2:7b",
-          "mistral",
+          "mistral:7b",
-          "codellama",
+          "codellama:7b",
-          "tinyllama",
+          "tinyllama:1.1b",
-          "starcoder2",
+          "starcoder2:3b",
-          "dolphin-mixtral",
+          "dolphin-mistral:7b",
-          "smollm2",
+          "smollm2:1.7b",
-          "orca-mini",
+          "orca-mini:3b",
-          "mistral-openorca"
+          "mistral-openorca:7b"
         ]
 # fetching list of models is supported but the `name` field must start
 # with `ollama` (case-insensitive), as it does in this example.

docker-compose.yml

@@ -115,7 +115,7 @@ services:
       SEARCH_BACKEND_ENGINE: ripgrep       # tells ArchiveBox to use sonic container below for fast full-text search
     image: archivebox/archivebox:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: ArchiveBox
       homepage.href: https://archive.${MY_TLD}
       homepage.icon: archivebox.png
@@ -202,9 +202,8 @@ services:
       AUTHELIA_SESSION_SECRET: ${AUTHELIA_SESSION_SECRET}
       AUTHELIA_STORAGE_ENCRYPTION_KEY: ${AUTHELIA_STORAGE_ENCRYPTION_KEY}
       AUTHELIA_STORAGE_POSTGRES_PASSWORD: ${AUTHELIA_STORAGE_POSTGRES_PASSWORD}
-      GUID: ${PGID}
+      # PGID: ${PGID}
-      PGID: ${PGID}
+      # PUID: ${PUID}
-      PUID: ${PUID}
       TZ: ${TZ}
     expose:
       - 9091
@@ -479,7 +478,7 @@ services:
       LOG_ENABLED: true
     expose:
       - 3000
-    image: ghcr.io/bluesky-social/pds:latest
+    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.98
     labels:
       swag: enable
       swag_port: 3000
@@ -497,15 +496,17 @@ services:
       ALLOW_FILE_PROTOCOL: true
       CONCURRENT: 20
       HEALTH: false
-      PROXY_HOST: swag
+      PROXY_HOST: browserless
-      PROXY_PORT: 443
+      PROXY_PORT: 3000
-      PROXY_SSL: true
+      PROXY_SSL: false
       QUEUED: 20
       TIMEOUT: 300000
       TOKEN: ${CHROMIUM_TOKEN}
       TZ: ${TZ}
     expose:
       - 3000
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
     image: ghcr.io/browserless/chromium:latest
     labels:
       swag: enable
@@ -925,7 +926,7 @@ services:
       timeout: 10s
     image: freikin/dawarich:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: Dawarich
       homepage.href: https://loc.${MY_TLD}
       homepage.icon: dawarich.svg
@@ -1164,9 +1165,9 @@ services:
       VPN_INPUT_PORTS: ""
       VPN_OPTIONS: ""
       VPN_OUTPUT_PORTS: ""
-      VPN_PASS: QGXRAYAwzVv9X84MAK2gPYq2Mt6ztdoA
+      VPN_PASS: ${DELUGEVPN_ENVIRONMENT_VPN_PASS}
       VPN_PROV: pia
-      VPN_USER: p3120278
+      VPN_USER: ${DELUGEVPN_ENVIRONMENT_VPN_USER}
     hostname: Rinoa
     image: ghcr.io/binhex/arch-delugevpn:latest
     labels:
@@ -1266,13 +1267,83 @@ services:
       NOTIFICATION_URLS: gotify://gotify/${DV_BKUP_GOTIFY_TOKEN}
     restart: always
     volumes:
-      - docker-volume-bkup-data:/backup/my-app-backup:ro
       - ${DOCKER_VOLUME_STORAGE}/backups/docker_volume_bkups:/archive
+      - authelia-pg-db:/data/authelia-pg-db:ro
+      - bitmagnet-pg-db:/data/bitmagnet-pg-db:ro
+      - bunkerweb-storage:/data/bunkerweb-storage:ro
+      - castopod-media:/data/castopod-media:ro
+      - crowdsec-config:/data/crowdsec-config:ro
+      - crowdsec-db:/data/crowdsec-db:ro
+      - dawarich_db_data:/data/dawarich_db_data:ro
+      - dawarich_shared:/data/dawarich_shared:ro
+      - dawarich_public:/data/dawarich_public:ro
+      - dawarich_watched:/data/dawarich_watched:ro
+      - dbgate-data:/data/dbgate-data:ro
+      - docker-volume-bkup-data:/data/docker-volume-bkup-data:ro
+      - fastenhealth-cache:/data/fastenhealth-cache:ro
+      - fastenhealth-db:/data/fastenhealth-db:ro
+      - filebeat_etc:/data/filebeat_etc:ro
+      - filebeat_var:/data/filebeat_var:ro
+      - gitea-pg-db:/data/gitea-pg-db:ro
+      - hortusfox_app_backup:/data/hortusfox_app_backup:ro
+      - hortusfox_app_images:/data/hortusfox_app_images:ro
+      - hortusfox_app_logs:/data/hortusfox_app_logs:ro
+      - hortusfox_app_migrate:/data/hortusfox_app_migrate:ro
+      - hortusfox_app_themes:/data/hortusfox_app_themes:ro
+      - hortusfox_db_data:/data/hortusfox_db_data:ro
+      - immich-model-cache:/data/immich-model-cache:ro
+      - influxdb2-data:/data/influxdb2-data:ro
+      - influxdb2-config:/data/influxdb2-config:ro
+      - invidious-postgres:/data/invidious-postgres:ro
+      - invoice-ninja_cache:/data/invoice-ninja_cache:ro
+      - invoice-ninja_public:/data/invoice-ninja_public:ro
+      - invoice-ninja_storage:/data/invoice-ninja_storage:ro
+      - jitsi-web-admin-theme:/data/jitsi-web-admin-theme:ro
+      - jitsi-web-admin-upload:/data/jitsi-web-admin-upload:ro
+      - joplin_data:/data/joplin_data:ro
+      - librechat-pg-data:/data/librechat-pg-data:ro
+      - libretranslate_models:/data/libretranslate_models:ro
+      - lldap_data:/data/lldap_data:ro
+      - mastodon-pg-db:/data/mastodon-pg-db:ro
+      - mixpost-storage:/data/mixpost-storage:ro
+      - mixpost-logs:/data/mixpost-logs:ro
+      - mongodb_config:/data/mongodb_config:ro
+      - mongodb_data:/data/mongodb_data:ro
+      - n8n-data:/data/n8n-data:ro
+      - netbird-mgmt:/data/netbird-mgmt:ro
+      - netbird-signal:/data/netbird-signal:ro
+      - netbird-letsencrypt:/data/netbird-letsencrypt:ro
+      - nextcloud_aio_mastercontainer:/data/nextcloud_aio_mastercontainer:ro
+      - ollama:/data/ollama:ro
+      - open-webui:/data/open-webui:ro
+      - paperless-ngx-data:/data/paperless-ngx-data:ro
+      - paperless-ngx-media:/data/paperless-ngx-media:ro
+      - paperless-ngx-pg:/data/paperless-ngx-pg:ro
+      - peppermint-pg-data:/data/peppermint-pg-data:ro
+      - pgbackweb-data:/data/pgbackweb-data:ro
+      - plausible-db-data:/data/plausible-db-data:ro
+      - plausible-event-data:/data/plausible-event-data:ro
+      - plausible-event-logs:/data/plausible-event-logs:ro
+      - portainer-data:/data/portainer-data:ro
+      - reactive-resume-pg:/data/reactive-resume-pg:ro
+      - semaphore_config:/data/semaphore_config:ro
+      - semaphore_data:/data/semaphore_data:ro
+      - semaphore_tmp:/data/semaphore_tmp:ro
+      - sonarqube-data:/data/sonarqube-data:ro
+      - sonarqube-db:/data/sonarqube-db:ro
+      - sonarqube-db-data:/data/sonarqube-db-data:ro
+      - sonarqube-extensions:/data/sonarqube-extensions:ro
+      - sonarqube-logs:/data/sonarqube-logs:ro
+      - sonarqube-temp:/data/sonarqube-temp:ro
+      - tandoor-pg:/data/tandoor-pg:ro
+      - unmanic-cache:/data/unmanic-cache:ro
+      - wallos-db:/data/wallos-db:ro
+      - wallos-logos:/data/wallos-logos:ro
   docuseal:
     container_name: docuseal
     image: docuseal/docuseal:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: Docuseal
       homepage.href: https://docs.${MY_TLD}
       homepage.description: OSS Document Signing & Verification
@@ -1690,60 +1761,6 @@ services:
         type: bind
         bind:
           create_host_path: true
-  hortusfox:
-    container_name: hortusfox
-    depends_on:
-      mariadb:
-        condition: service_started
-        required: true
-        restart: true
-    environment:
-      APP_ADMIN_EMAIL: charish.patel@trez.wtf
-      APP_ADMIN_PASSWORD: ${HORTUSFOX_ADMIN_PASSWORD}
-      DB_CHARSET: utf8mb4
-      DB_DATABASE: hortusfox
-      DB_HOST: mariadb
-      DB_PASSWORD: ${HORTUSFOX_DB_PASSWORD}
-      DB_PORT: 3306
-      DB_USERNAME: hortusfox
-    image: ghcr.io/danielbrendel/hortusfox-web:latest
-    labels:
-      swag: enable
-      swag_proto: http
-      swag_url: plants.${MY_TLD}
-      swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.url: https://plants.${MY_TLD}
-      homepage.group: Lifestyle
-      homepage.name: HortusFox
-      homepage.href: https://plants.${MY_TLD}
-      homepage.icon: hortusfox.png
-      homepage.description: Plant management system
-    networks:
-      default: null
-    ports:
-      - 8006:80
-    restart: unless-stopped
-    volumes:
-      - source: hortusfox_app_images
-        target: /var/www/html/public/img
-        type: volume
-        volume: {}
-      - source: hortusfox_app_logs
-        target: /var/www/html/app/logs
-        type: volume
-        volume: {}
-      - source: hortusfox_app_backup
-        target: /var/www/html/public/backup
-        type: volume
-        volume: {}
-      - source: hortusfox_app_themes
-        target: /var/www/html/public/themes
-        type: volume
-        volume: {}
-      - source: hortusfox_app_migrate
-        target: /var/www/html/app/migrations
-        type: volume
-        volume: {}
   hugo:
     command: hugo server --baseURL "it-services.trez.wtf" --bind 0.0.0.0 --appendPort=false --source=/src/it-services --configDir=/src/it-services/config/ -e production --logLevel debug
     container_name: hugo
@@ -1755,27 +1772,17 @@ services:
       swag_url: it-services.${MY_TLD}
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.url: https://it-services.${MY_TLD}
-      homepage.group: Professional Services
+      homepage.group: Personal/Professional Services
       homepage.name: Hugo
       homepage.href: https://it-services.${MY_TLD}
       homepage.icon: hugo.svg
       homepage.description: Static site
-    networks:
-      default: null
     ports:
       - 1313:1313
     restart: unless-stopped
     volumes:
-      - source: ${DOCKER_VOLUME_CONFIG}/hugo/
+      - ${DOCKER_VOLUME_CONFIG}/hugo/:/src
-        target: /src
+      - ${DOCKER_VOLUME_CONFIG}/hugo/cache:/tmp/hugo_cache
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/hugo/cache
-        target: /tmp/hugo_cache
-        type: bind
-        bind:
-          create_host_path: true
   immich-server:
     container_name: immich-server
     depends_on:
@@ -2020,110 +2027,6 @@ services:
         type: bind
         bind:
           create_host_path: true
-  invoice-ninja:
-    container_name: invoice-ninja
-    depends_on:
-      mariadb:
-        condition: service_started
-        required: true
-        restart: true
-    environment:
-      APP_DEBUG: true
-      APP_KEY: ${IN_APP_KEY}
-      APP_URL: http://invoice_ninja:8003
-      APP_ENV: /var/www/html/.env
-      DB_DATABASE: invoice_ninja
-      DB_HOST: mariadb
-      DB_PASSWORD: ${IN_MYSQL_PASSWORD}
-      DB_PORT: 3306
-      DB_USERNAME: ininja
-      IN_PASSWORD: ${IN_PASSWORD}
-      IN_USER_EMAIL: charish.patel@trez.wtf
-      MAIL_ENCRYPTION: null
-      MAIL_FROM_ADDRESS: noreply@trez.wtf
-      MAIL_FROM_NAME: null
-      MAIL_HOST: postal-smtp
-      MAIL_MAILER: log
-      MAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
-      MAIL_PORT: 25
-      MAIL_USERNAME: ${POSTAL_SMTP_AUTH_USER}
-      MYSQL_DATABASE: invoice_ninja
-      MYSQL_PASSWORD: ${IN_MYSQL_PASSWORD}
-      MYSQL_ROOT_PASSWORD: ${MARIADB_ENVIRONMENT_MYSQL_ROOT_PASSWORD}
-      MYSQL_USER: ininja
-      PDF_GENERATOR: snappdf
-      PHANTOMJS_PDF_GENERATION: false
-      QUEUE_CONNECTION: database
-      REQUIRE_HTTPS: false
-      TRUSTED_PROXIES: 172.18.0.0/16
-    expose:
-      - 9000
-    image: invoiceninja/invoiceninja-debian:5
-    networks:
-      default: null
-    ports:
-      - 8003:8003
-    restart: always
-    volumes:
-      - invoice-ninja_cache:/var/www/html/bootstrap/cache
-      - invoice-ninja_public:/var/www/html/public
-      - invoice-ninja_storage:/var/www/html/storage
-  invoice-ninja_proxy:
-    container_name: invoice-ninja_proxy
-    depends_on:
-      invoice-ninja:
-        condition: service_started
-        required: true
-        restart: true
-    environment:
-      APP_DEBUG: true
-      APP_KEY: ${IN_APP_KEY}
-      APP_URL: http://invoice_ninja:9000
-      DB_DATABASE: invoice_ninja
-      DB_HOST: mariadb
-      DB_PASSWORD: ${IN_MYSQL_PASSWORD}
-      DB_PORT: 3306
-      DB_USERNAME: ininja
-      IN_PASSWORD: ${IN_PASSWORD}
-      IN_USER_EMAIL: charish.patel@trez.wtf
-      MAIL_ENCRYPTION: null
-      MAIL_FROM_ADDRESS: noreply@trez.wtf
-      MAIL_FROM_NAME: null
-      MAIL_HOST: postal-smtp
-      MAIL_MAILER: log
-      MAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
-      MAIL_PORT: 25
-      MAIL_USERNAME: ${POSTAL_SMTP_AUTH_USER}
-      MYSQL_DATABASE: invoice_ninja
-      MYSQL_PASSWORD: ${IN_MYSQL_PASSWORD}
-      MYSQL_ROOT_PASSWORD: ${MARIADB_ENVIRONMENT_MYSQL_ROOT_PASSWORD}
-      MYSQL_USER: ininja
-      PDF_GENERATOR: snappdf
-      PHANTOMJS_PDF_GENERATION: false
-      QUEUE_CONNECTION: database
-      REQUIRE_HTTPS: false
-      TRUSTED_PROXIES: 172.18.0.0/16
-    image: nginx
-    labels:
-      swag: enable
-      swag_proto: http
-      swag_url: biz.${MY_TLD}
-      swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.url: https://biz.${MY_TLD}
-      homepage.group: Professional Services
-      homepage.name: Invoice Ninja
-      homepage.href: https://biz.${MY_TLD}
-      homepage.icon: invoice-ninja.svg
-      homepage.description: Simple invoicing, multiple payment options, expense and vendor management, and more!
-    networks:
-      default: null
-    ports:
-      - 8005:80
-    restart: always
-    volumes:
-      - ${DOCKER_VOLUME_CONFIG}/invoice-ninja/nginx:/etc/nginx/conf.d:ro
-      - invoice-ninja_public:/var/www/html/public
-      - invoice-ninja_storage:/var/www/html/storage
   it-tools:
     container_name: it-tools
     image: ghcr.io/corentinth/it-tools:latest
@@ -2786,7 +2689,7 @@ services:
       POSTGRES_HOST: joplin-db
     image: joplin/server:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: Joplin
       homepage.href: https://notes.${MY_TLD}
       homepage.icon: joplin.svg
@@ -2814,7 +2717,7 @@ services:
       RAG_API_URL: http://librechat-rag-api:8000
     image: ghcr.io/danny-avila/librechat-dev:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: LibreChat
       homepage.href: https://ai.${MY_TLD}
       homepage.icon: sh-librechat.svg
@@ -2870,7 +2773,7 @@ services:
     environment:
       LT_UPDATE_MODELS: true
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: LibreTranslate
       homepage.href: https://translate.${MY_TLD}
       homepage.icon: sh-libretranslate.svg
@@ -2984,6 +2887,33 @@ services:
         source: /etc/localtime
         target: /etc/localtime
         type: bind
+  linkstack:
+    container_name: linkstack
+    image: linkstackorg/linkstack:latest
+    environment:
+      TZ: ${TZ}
+      SERVER_ADMIN: noreply@${MY_TLD}
+      HTTP_SERVER_NAME: profile.${MY_TLD}
+      HTTPS_SERVER_NAME: profile.${MY_TLD}
+      LOG_LEVEL: info
+      PHP_MEMORY_LIMIT: 256M
+      UPLOAD_MAX_FILESIZE: 64M
+    labels:
+      homepage.group: Social
+      homepage.name: LinkStack
+      homepage.href: https://profile.${MY_TLD}
+      homepage.icon: linkstack.svg
+      homepage.description: Personal profile
+      swag: enable
+      swag_proto: https
+      swag_url: profile.${MY_TLD}
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://profile.${MY_TLD}
+    ports:
+      - 8190:443
+    restart: unless-stopped
+    volumes:
+      - linkstack_data:/htdocs
   lldap:
     container_name: lldap
     environment:
@@ -3188,7 +3118,7 @@ services:
       homepage.icon: mastodon.svg
       homepage.description: Open-source social network
       homepage.widget.type: mastodon
-      homepage.widget.url: http://mastodon
+      homepage.widget.url: https://mastodon.${MY_TLD}
     ports:
       - 9044:80
       - 3444:443
@@ -3455,123 +3385,123 @@ services:
         target: /app/api
       # (API: OPTION 2) use when debugging issues
       # - ${DOCKER_VOLUME_CONFIG}/netalertx/api:/app/api
-  netbird-dashboard:
+  # netbird-dashboard:
-    container_name: netbird-dashboard
+  #   container_name: netbird-dashboard
-    environment:
+  #   environment:
-      # Endpoints
+  #     # Endpoints
-      NETBIRD_MGMT_API_ENDPOINT: https://netbird.${MY_TLD}:33073
+  #     NETBIRD_MGMT_API_ENDPOINT: https://netbird.${MY_TLD}:33073
-      NETBIRD_MGMT_GRPC_API_ENDPOINT: https://netbird.${MY_TLD}:33073
+  #     NETBIRD_MGMT_GRPC_API_ENDPOINT: https://netbird.${MY_TLD}:33073
-      # OIDC
+  #     # OIDC
-      AUTH_AUDIENCE: ${NETBIRD_ZITADEL_CLIENT_ID}
+  #     AUTH_AUDIENCE: ${NETBIRD_ZITADEL_CLIENT_ID}
-      AUTH_CLIENT_ID: ${NETBIRD_ZITADEL_CLIENT_ID}
+  #     AUTH_CLIENT_ID: ${NETBIRD_ZITADEL_CLIENT_ID}
-      AUTH_CLIENT_SECRET: ${NETBIRD_ZITADEL_CLIENT_SECRET}
+  #     AUTH_CLIENT_SECRET: ${NETBIRD_ZITADEL_CLIENT_SECRET}
-      AUTH_AUTHORITY: https://id.${MY_TLD}
+  #     AUTH_AUTHORITY: https://id.${MY_TLD}
-      USE_AUTH0: false
+  #     USE_AUTH0: false
-      AUTH_SUPPORTED_SCOPES: openid profile email offline_access api
+  #     AUTH_SUPPORTED_SCOPES: openid profile email offline_access api
-      AUTH_REDIRECT_URI: /auth
+  #     AUTH_REDIRECT_URI: /auth
-      AUTH_SILENT_REDIRECT_URI: /silent-auth
+  #     AUTH_SILENT_REDIRECT_URI: /silent-auth
-      NETBIRD_TOKEN_SOURCE: accessToken
+  #     NETBIRD_TOKEN_SOURCE: accessToken
-      # SSL
+  #     # SSL
-      NGINX_SSL_PORT: 443
+  #     NGINX_SSL_PORT: 443
-      # Letsencrypt
+  #     # Letsencrypt
-      LETSENCRYPT_DOMAIN:
+  #     LETSENCRYPT_DOMAIN:
-      LETSENCRYPT_EMAIL:
+  #     LETSENCRYPT_EMAIL:
-    image: netbirdio/dashboard:latest
+  #   image: netbirdio/dashboard:latest
-    labels:
+  #   labels:
-      homepage.group: Privacy/Security
+  #     homepage.group: Privacy/Security
-      homepage.name: Netbird
+  #     homepage.name: Netbird
-      homepage.href: https://netbird.${MY_TLD}
+  #     homepage.href: https://netbird.${MY_TLD}
-      homepage.icon: netbird.svg
+  #     homepage.icon: netbird.svg
-      homepage.description: Peer-to-peer private network and centralized access control system
+  #     homepage.description: Peer-to-peer private network and centralized access control system
-      swag: enable
+  #     swag: enable
-      swag_proto: http
+  #     swag_proto: http
-      swag_port: 80
+  #     swag_port: 80
-      swag_auth: authelia
+  #     swag_auth: authelia
-      swag_url: netbird.${MY_TLD}
+  #     swag_url: netbird.${MY_TLD}
-      swag_server_custom_directive: |
+  #     swag_server_custom_directive: |
-        location /signalexchange.SignalExchange/ {
+  #       location /signalexchange.SignalExchange/ {
-            grpc_pass grpc://netbird-signal:80;
+  #           grpc_pass grpc://netbird-signal:80;
-            #grpc_ssl_verify off;
+  #           #grpc_ssl_verify off;
-            grpc_read_timeout 1d;
+  #           grpc_read_timeout 1d;
-            grpc_send_timeout 1d;
+  #           grpc_send_timeout 1d;
-            grpc_socket_keepalive on;
+  #           grpc_socket_keepalive on;
-        }
+  #       }
-        # Proxy Management http endpoint
+  #       # Proxy Management http endpoint
-        location /api {
+  #       location /api {
-            proxy_pass http://netbird-management:443;
+  #           proxy_pass http://netbird-management:443;
-        }
+  #       }
-        # Proxy Management grpc endpoint
+  #       # Proxy Management grpc endpoint
-        location /management.ManagementService/ {
+  #       location /management.ManagementService/ {
-            grpc_pass grpc://netbird-management:443;
+  #           grpc_pass grpc://netbird-management:443;
-            #grpc_ssl_verify off;
+  #           #grpc_ssl_verify off;
-            grpc_read_timeout 1d;
+  #           grpc_read_timeout 1d;
-            grpc_send_timeout 1d;
+  #           grpc_send_timeout 1d;
-            grpc_socket_keepalive on;
+  #           grpc_socket_keepalive on;
-        }
+  #       }
-      swag.uptime-kuma.enabled: true
+  #     swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.url: https://netbird.${MY_TLD}
+  #     swag.uptime-kuma.monitor.url: https://netbird.${MY_TLD}
-    ports:
+  #   ports:
-      - 32908:80
+  #     - 32908:80
-      - 36610:443
+  #     - 36610:443
-    restart: unless-stopped
+  #   restart: unless-stopped
-    volumes:
+  #   volumes:
-      - netbird-letsencrypt:/etc/letsencrypt/
+  #     - netbird-letsencrypt:/etc/letsencrypt/
-  netbird-signal:
+  # netbird-signal:
-    container_name: netbird-signal
+  #   container_name: netbird-signal
-    image: netbirdio/signal:latest
+  #   image: netbirdio/signal:latest
-    ports:
+  #   ports:
-      - 10001:80
+  #     - 10001:80
-    restart: unless-stopped
+  #   restart: unless-stopped
-    volumes:
+  #   volumes:
-      - netbird-signal:/var/lib/netbird
+  #     - netbird-signal:/var/lib/netbird
-  netbird-relay:
+  # netbird-relay:
-    container_name: netbird-relay
+  #   container_name: netbird-relay
-    image: netbirdio/relay:latest
+  #   image: netbirdio/relay:latest
-    restart: unless-stopped
+  #   restart: unless-stopped
-    environment:
+  #   environment:
-      NB_LOG_LEVEL: info
+  #     NB_LOG_LEVEL: info
-      NB_LISTEN_ADDRESS: :33080
+  #     NB_LISTEN_ADDRESS: :33080
-      NB_EXPOSED_ADDRESS: netbird.${MY_TLD}:33080
+  #     NB_EXPOSED_ADDRESS: netbird.${MY_TLD}:33080
-      # todo: change to a secure secret
+  #     # todo: change to a secure secret
-      NB_AUTH_SECRET: ${NETBIRD_RELAY_AUTH_SECRET}
+  #     NB_AUTH_SECRET: ${NETBIRD_RELAY_AUTH_SECRET}
-    ports:
+  #   ports:
-      - 33080:33080
+  #     - 33080:33080
-  netbird-management:
+  # netbird-management:
-    command: [
+  #   command: [
-      "--port", "443",
+  #     "--port", "443",
-      "--log-file", "console",
+  #     "--log-file", "console",
-      "--log-level", "info",
+  #     "--log-level", "info",
-      "--disable-anonymous-metrics=false",
+  #     "--disable-anonymous-metrics=false",
-      "--single-account-mode-domain=netbird.${MY_TLD}",
+  #     "--single-account-mode-domain=netbird.${MY_TLD}",
-      "--dns-domain=netbird.selfhosted"
+  #     "--dns-domain=netbird.selfhosted"
-      ]
+  #     ]
-    container_name: netbird-management
+  #   container_name: netbird-management
-    depends_on:
+  #   depends_on:
-      netbird-dashboard:
+  #     netbird-dashboard:
-        condition: service_started
+  #       condition: service_started
-    environment:
+  #   environment:
-      NETBIRD_STORE_ENGINE_POSTGRES_DSN:
+  #     NETBIRD_STORE_ENGINE_POSTGRES_DSN:
-      NETBIRD_STORE_ENGINE_MYSQL_DSN:
+  #     NETBIRD_STORE_ENGINE_MYSQL_DSN:
-    image: netbirdio/management:latest
+  #   image: netbirdio/management:latest
-    restart: unless-stopped
+  #   restart: unless-stopped
-    volumes:
+  #   volumes:
-      - netbird-mgmt:/var/lib/netbird
+  #     - netbird-mgmt:/var/lib/netbird
-      - netbird-letsencrypt:/etc/letsencrypt:ro
+  #     - netbird-letsencrypt:/etc/letsencrypt:ro
-      - ${DOCKER_VOLUME_CONFIG}/netbird/management.json:/etc/netbird/management.json
+  #     - ${DOCKER_VOLUME_CONFIG}/netbird/management.json:/etc/netbird/management.json
-    ports:
+  #   ports:
-      - 23833:443 #API port
+  #     - 23833:443 #API port
-  netbird-coturn:
+  # netbird-coturn:
-    command:
+  #   command:
-      - -c /etc/turnserver.conf
+  #     - -c /etc/turnserver.conf
-    container_name: netbird-coturn
+  #   container_name: netbird-coturn
-    image: coturn/coturn:latest
+  #   image: coturn/coturn:latest
-    restart: unless-stopped
+  #   restart: unless-stopped
-    #domainname: netbird.${MY_TLD} # only needed when TLS is enabled
+  #   #domainname: netbird.${MY_TLD} # only needed when TLS is enabled
-    volumes:
+  #   volumes:
-      - ${DOCKER_VOLUME_CONFIG}/netbird/turnserver.conf:/etc/turnserver.conf:ro
+  #     - ${DOCKER_VOLUME_CONFIG}/netbird/turnserver.conf:/etc/turnserver.conf:ro
-    #      - ${DOCKER_VOLUME_CONFIG}/netbird/privkey.pem:/etc/coturn/private/privkey.pem:ro
+  #        - ${DOCKER_VOLUME_CONFIG}/netbird/privkey.pem:/etc/coturn/private/privkey.pem:ro
-    #      - ${DOCKER_VOLUME_CONFIG}/netbird/cert.pem:/etc/coturn/certs/cert.pem:ro
+  #        - ${DOCKER_VOLUME_CONFIG}/netbird/cert.pem:/etc/coturn/certs/cert.pem:ro
-    network_mode: host
+  #   network_mode: host
   nextcloud:
     container_name: nextcloud-aio-mastercontainer
     environment:
@@ -3583,7 +3513,7 @@ services:
       - 11000
     image: nextcloud/all-in-one:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: NextCloud
       homepage.href: https://cloud.${MY_TLD}
       homepage.icon: nextcloud.svg
@@ -3682,7 +3612,7 @@ services:
       swag_url: docs.${MY_TLD}
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.url: https://docs.${MY_TLD}
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: Paperless-ngx
       homepage.href: https://docs.${MY_TLD}
       homepage.icon: paperless-ngx.svg
@@ -3742,51 +3672,6 @@ services:
     restart: unless-stopped
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/parseable/staging:/staging
-  peppermint:
-    container_name: peppermint
-    depends_on:
-      peppermint-pg-db:
-        condition: service_started
-        required: true
-    environment:
-      BASE_URL: https://support.trez.wtf
-      DB_USERNAME: peppermint
-      DB_PASSWORD: ${PEPPERMINT_PG_PASSWORD}
-      DB_HOST: peppermint-pg-db
-      SECRET: ${PEPPERMINT_SECRET_KEY}
-    image: pepperlabs/peppermint:latest
-    labels:
-      swag: enable
-      swag_proto: http
-      swag_port: 3000
-      swag_url: support.${MY_TLD}
-      swag_server_custom_directive: |
-        location /api {
-              proxy_pass http://peppermint:5003;
-        }
-      swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.url: https://support.${MY_TLD}
-      homepage.group: Professional Services
-      homepage.name: Peppermint
-      homepage.href: https://support.${MY_TLD}
-      homepage.icon: peppermint.svg
-      homepage.description: Open-source ticket management and help desk solution
-    ports:
-      - 3000:3000
-      - 5003:5003
-    restart: always
-  peppermint-pg-db:
-    container_name: peppermint-pg-db
-    environment:
-      POSTGRES_USER: peppermint
-      POSTGRES_PASSWORD: ${PEPPERMINT_PG_PASSWORD}
-      POSTGRES_DB: peppermint
-    expose:
-      - 5432
-    image: postgres:17-alpine
-    restart: always
-    volumes:
-      - peppermint-pg-data:/var/lib/postgresql/data
   pgbackweb:
     container_name: pgbackweb
     depends_on:
@@ -3833,79 +3718,6 @@ services:
       - 8080
     image: 'plantuml/plantuml-server:jetty'
     restart: unless-stopped
-  plausible:
-    command: sh -c "sleep 10 && /entrypoint.sh db createdb && /entrypoint.sh db migrate && /entrypoint.sh run"
-    container_name: plausible
-    depends_on:
-      plausible_db:
-        condition: service_started
-        required: true
-      plausible_events_db:
-        condition: service_started
-        required: true
-    environment:
-      BASE_URL: https://analytics.${MY_TLD}
-      CLICKHOUSE_DATABASE_URL: http://plausible-events-db:8123/plausible_events_db
-      DATABASE_URL: postgres://plausible:${PLAUSIBLE_PG_PASSWORD}@plausible-db:5432/plausible_db
-      DISABLE_REGISTRATION: invite_only
-      ENABLE_EMAIL_VERIFICATION: true
-      MAILER_ADAPTER: Bamboo.Mua
-      MAILER_EMAIL: noreply@trez.wtf
-      MAILER_NAME: Plausible
-      MAXMINDDB_LICENSE_KEY: ${SWAG_MAXMINDDB_LICENSE_KEY}
-      SECRET_KEY_BASE: ${PLAUSIBLE_SECRET_KEY_BASE}
-      SMTP_HOST_ADDR: postal-smtp
-      SMTP_HOST_PORT: 25
-      SMTP_USER_NAME: ${POSTAL_SMTP_AUTH_USER}
-      SMTP_USER_PWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-      TOTP_VAULT_KEY: ${PLAUSIBLE_TOTP_VAULT_KEY}
-    image: ghcr.io/plausible/community-edition:v2.1.0
-    labels:
-      swag: enable
-      swag_proto: http
-      swag_port: 8000
-      swag_url: analytics.${MY_TLD}
-      homepage.group: Professional Services
-      homepage.name: Plausible
-      homepage.href: https://analytics.${MY_TLD}
-      homepage.icon: plausible.svg
-      homepage.description: Open-source web analytics
-    networks:
-      default: null
-    ports:
-      - 8107:8000
-    restart: always
-  plausible_db:
-    container_name: plausible-db
-    environment:
-      POSTGRES_DB: plausible_db
-      POSTGRES_PASSWORD: ${PLAUSIBLE_PG_PASSWORD}
-      POSTGRES_USER: plausible
-    expose:
-      - 5432
-    image: postgres:16-alpine
-    networks:
-      default: null
-    restart: always
-    volumes:
-      - plausible-db-data:/var/lib/postgresql/data
-  plausible_events_db:
-    container_name: plausible-events-db
-    expose:
-      - 8123
-    image: clickhouse/clickhouse-server:24.3.3.102-alpine
-    networks:
-      default: null
-    restart: always
-    ulimits:
-      nofile:
-        hard: 262144
-        soft: 262144
-    volumes:
-      - plausible-event-data:/var/lib/clickhouse
-      - plausible-event-logs:/var/log/clickhouse-server
-      - ${DOCKER_VOLUME_CONFIG}/plausible/clickhouse/clickhouse-config.xml:/etc/clickhouse-server/config.d/logging.xml:ro
-      - ${DOCKER_VOLUME_CONFIG}/plausible/clickhouse/clickhouse-user-config.xml:/etc/clickhouse-server/users.d/logging.xml:ro
   portainer:
     command: -H tcp://dockerproxy:2375
     container_name: portainer
@@ -3933,7 +3745,7 @@ services:
       homepage.description: Service delivery platform for containerized applications
       homepage.widget.type: portainer
       homepage.widget.url: http://portainer:9000
-      homepage.widget.env: 20
+      homepage.widget.env: 7
       homepage.widget.key: ${PORTAINER_HOMEPAGE_TOKEN}
     restart: unless-stopped
     volumes:
@@ -4174,7 +3986,7 @@ services:
       ACCESS_TOKEN_SECRET: ${REACTIVE_RESUME_ACCESS_TOKEN_SECRET}
       CHROME_PORT: 443
       CHROME_TOKEN: ${CHROMIUM_TOKEN}
-      CHROME_URL: wss://browse.${MY_TLD}
+      CHROME_URL: wss://browserless:3000
       DATABASE_URL: postgresql://reactiveresume:${REACTIVE_RESUME_PGSQL_PASSWORD}@reactive-resume-pg:5432/reactiveresume
       MAIL_FROM: noreply@trez.wtf
       NODE_ENV: production
@@ -4193,7 +4005,7 @@ services:
       TZ: ${TZ}
     image: amruthpillai/reactive-resume:latest
     labels:
-      homepage.group: Professional Services
+      homepage.group: Personal/Professional Services
       homepage.name: Reactive Resume
       homepage.href: https://resume.${MY_TLD}
       homepage.icon: reactive-resume.svg
@@ -4385,12 +4197,12 @@ services:
       TZ: America/New_York
       VPN_CLIENT: openvpn
       VPN_ENABLED: yes
-      VPN_INPUT_PORTS: 
+      VPN_INPUT_PORTS:
-      VPN_OPTIONS: 
+      VPN_OPTIONS:
-      VPN_OUTPUT_PORTS: 
+      VPN_OUTPUT_PORTS:
-      VPN_PASS: QGXRAYAwzVv9X84MAK2gPYq2Mt6ztdoA
+      VPN_PASS: ${SABNZBDVPN_ENVIRONMENT_VPN_PASS}
       VPN_PROV: pia
-      VPN_USER: p3120278
+      VPN_USER: ${SABNZBDVPN_ENVIRONMENT_VPN_USER}
       DEBUG: true
     hostname: Rinoa
     image: ghcr.io/binhex/arch-sabnzbdvpn:latest
@@ -4446,7 +4258,7 @@ services:
       - 3000
     image: jpyles0524/scraperr:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: Scraperr
       homepage.href: https://scrape.${MY_TLD}
       homepage.icon: /icons/scraperr.png
@@ -4537,7 +4349,7 @@ services:
       SEARXNG_BASE_URL: https://${SEARXNG_BASE_URL:-localhost}/
     image: searxng/searxng:latest
     labels:
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.name: SearxNG
       homepage.href: https://search.${MY_TLD}
       homepage.icon: searxng.png
@@ -4877,27 +4689,6 @@ services:
     restart: unless-stopped
     volumes:
         - ${DOCKER_VOLUME_CONFIG}/speedtest-tracker:/config
-  spotisub:
-    container_name: spotisub
-    environment:
-      SPOTIPY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
-      SPOTIPY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-      SPOTIPY_REDIRECT_URI: http://127.0.0.1:8080/
-      SUBSONIC_API_HOST: http://navidrome
-      SUBSONIC_API_PORT: 4533
-      SUBSONIC_API_USER: ${NAVIDROME_USERNAME}
-      SUBSONIC_API_PASS: ${NAVIDROME_PASSWORD}
-    healthcheck:
-      test: curl -s http://127.0.0.1:5183/api/v1/utils/healthcheck | grep -q 'Ok!' || exit 1
-      interval: 30s
-      retries: 20
-      start_period: 30s
-    image: blastbeng/spotisub:latest
-    ports:
-      - 5183:5183
-    restart: always
-    volumes:
-      - ${DOCKER_VOLUME_CONFIG}/spotisub:/home/user/spotisub/cache
   stable-diffusion-download:
     container_name: stable-diffusion-download
     image: git.trez.wtf/trez.one/stable-diffusion-download:v9.0.0
@@ -4906,12 +4697,12 @@ services:
       - ${DOCKER_VOLUME_CONFIG}/stable-diffusion-webui/data:/data
   stable-diffusion-webui:
     container_name: stable-diffusion-webui
-    image: git.trez.wtf/trez.one/stable-diffusion-ui:v9.0.0
+    image: git.trez.wtf/trez.one/stable-diffusion-ui:v9.0.1
     environment:
       - CLI_ARGS=--allow-code --medvram --xformers --enable-insecure-extension-access --api
     labels:
       homepage.name: Stable-Diffusion WebUI
-      homepage.group: Personal Services
+      homepage.group: Personal/Professional Services
       homepage.description: Deep learning, text-to-image model
       homepage.href: https://sd.${MY_TLD}
       homepage.icon: /icons/stable-diffusion.png
@@ -5484,6 +5275,8 @@ volumes:
     name: jitsi-web-admin-upload
   joplin_data:
     name: joplin_data
+  linkstack_data:
+    name: linkstack_data
   librechat-pg-data:
     name: librechat-pg-data
   libretranslate_models:
@@ -5559,6 +5352,4 @@ volumes:
   wallos-db:
     name: wallos-db
   wallos-logos:
-    name: wallos-logos
+    name: wallos-logos
-  zitadel-pg-db:
-    name: zitadel-pg-db