Merge pull request '🔧 Renovate: Update (digest) mongo:7 Docker digest to 8ecb514' (#2740) from renovate/mongo-7 into main

Reviewed-on: #2649

README.md

@@ -6,17 +6,13 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.74 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.75 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
 | asciinema | ghcr.io/asciinema/asciinema-server:latest | Platform for hosting and sharing terminal session recordings |
 | asciinema-pg-db | postgres:14-alpine |  |
 | audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest | Podcasts, eBooks, & Audiobooks |
-| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta | Automatic playlist generation using AI |
-| audiomuse-ai-pg | postgres:15-alpine |  |
-| audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine |  |
-| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |  |
 | authelia | authelia/authelia:master | Authentication/authorization server with MFA & SSO |
 | authelia-pg | postgres:16-alpine |  |
 | authelia-valkey | docker.io/valkey/valkey:9-alpine |  |
@@ -54,7 +50,7 @@
 | garage | dxflrs/garage:v2.3.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.26.1 | Private Code Repo |
+| gitea | gitea/gitea:1.26.2 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -162,7 +158,7 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.18.2 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.18.4 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
@@ -187,6 +183,7 @@
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
 | vault | hashicorp/vault:2.0.0-bugfix | HashiCorp Vault for secrets, key/value stores, etc. |
+| vault-agent | hashicorp/vault:2.0.0-bugfix |  |
 | wallos | bellamy/wallos:latest | Subscription Tracking |
 | web-check | lissy93/web-check | Site scanner for attack vectors, architecture, security configs, and more |
 | whodb | clidey/whodb | Lightweight next-gen database explorer |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:e0776533ea02e68771d8b8b857112e8b27197ded73b24efc4881375b1f239689
+  image: h2invent/jitsi-admin-main:latest@sha256:87affbe785e74339a53b55b40014a8f004194c9996551b0824f86339372276b1
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:d1cc70645bbcef743615463a2fa4616e841407545e18f560aed0c49671a90147
+  image: docker.io/valkey/valkey:9-alpine@sha256:a35428eba9043cc0b79dbe54100f0c92784f2de00ad09b01182bfb1c5c83d1bd
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:1aeeb3985db55556e716dec25e08f6ce09308c2571b65cddbc6746ee6d5e0d45
+    image: docker.io/actualbudget/actual-server:latest@sha256:74385f8067f401e61f0be9e343c471705c42dfaa195295c40c5b2f15f4dcc9d4
     labels:
       swag: enable
       swag_port: 5006
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.74@sha256:f29c58a91f79387cbbbb042e140814f58e830d457d44af03d662c8df43db9dea
+    image: adguard/adguardhome:v0.107.75@sha256:50ac5916778faa06ad4adcff606c7aaf806cb55dc1995160dbf50633c9bda94d
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:3b7155682d9aaf168668621d4a63f2dc2c63e100593543113b81fa201a91d3e0
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:9c268f6290b303ddacdc682157094c63672576859b1026b2bfee4e9c880b4019
     labels:
       swag: enable
       swag_proto: http
@@ -312,7 +312,7 @@ services:
       PUBLIC_SNAPSHOTS: false # set to False to prevent anonymous users from viewing snapshot content
       PUBLIC_ADD_VIEW: false # set to True to allow anonymous users to submit new URLs to archive
       SEARCH_BACKEND_ENGINE: ripgrep # tells ArchiveBox to use sonic container below for fast full-text search
-    image: archivebox/archivebox:latest@sha256:fdf2936192aa1e909b0c3f286f60174efa24078555be4b6b90a07f2cef1d4909
+    image: archivebox/archivebox:latest@sha256:1a5a37331091d9df865ead2b9c231aa5a892fc26fe0422ce6140d9e2d9532327
     labels:
       homepage.group: Personal Tools
       homepage.name: ArchiveBox
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:bc06a4b2c6e50e3a9b7638fe7d3064d4497c89b3ce5e45a0bbc1124af6958adf
+    image: postgres:14-alpine@sha256:6765739f422606933bc2aece3a2288e40e491488fd7e7c14e3323dfeefb10e38
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:1eef6716183c52abafe5405e7d6be8390248ecd59c7488c44af871757ac8fc4d
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -459,108 +459,6 @@ services:
         source: /rinoa-storage
         target: /storage
         type: bind
-  audiomuse-ai-flask:
-    container_name: audiomuse-ai-flask
-    depends_on:
-      audiomuse-ai-valkey:
-        required: true
-        condition: service_healthy
-      audiomuse-ai-pg:
-        required: true
-        condition: service_healthy
-    environment:
-      AI_MODEL_PROVIDER: OLLAMA
-      OLLAMA_SERVER_URL: http://192.168.1.249:11434/api/generate
-      SERVICE_TYPE: "flask"
-      MEDIASERVER_TYPE: "navidrome"
-      NAVIDROME_URL: http://navidrome:4533/
-      NAVIDROME_USER: ${NAVIDROME_USERNAME}
-      NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
-      POSTGRES_USER: audiomuse
-      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
-      POSTGRES_DB: audiomusedb
-      POSTGRES_HOST: audiomuse-ai-pg
-      POSTGRES_PORT: 5432
-      REDIS_URL: redis://audiomuse-ai-valkey:6379/0
-      TEMP_DIR: /app/temp_audio
-    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
-    labels:
-      homepage.group: Media Library
-      homepage.name: AudioMuse-AI
-      homepage.href: https://muse.${MY_TLD}
-      homepage.description: Automatic playlist generation using AI
-      homepage.icon: /icons/audiomuseai.png
-      swag: enable
-      swag_auth: authelia
-      swag_port: 8000
-      swag_proto: http
-      swag_url: muse.${MY_TLD}
-      swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.parent: Rinoa
-      swag.uptime-kuma.name: AudioMuse-AI
-      swag.uptime-kuma.monitor.url: https://muse.${MY_TLD}
-      swag.uptime-kuma.monitor.interval: 300
-      swag.uptime-kuma.monitor.retryInterval: 60
-      swag.uptime-kuma.monitor.maxretries: 5
-    ports:
-      - 36025:8000
-    profiles: ["rinoa-apps"]
-    restart: unless-stopped
-    volumes:
-      - audiomuse-temp-audio-flask:/app/temp_audio
-  audiomuse-ai-pg:
-    container_name: audiomuse-ai-pg
-    environment:
-      POSTGRES_USER: audiomuse
-      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
-      POSTGRES_DB: audiomusedb
-    expose:
-      - 5432
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U audiomuse -d audiomusedb"]
-      interval: 10s
-      retries: 5
-      start_period: 30s
-      timeout: 10s
-    image: postgres:15-alpine@sha256:09e4f20b14ddb3dfe3a0c825b206032aaf8f28300ba2070c0b60fc1c10c6abc7
-    profiles: ["rinoa-apps"]
-    restart: unless-stopped
-    volumes:
-      - audiomuse-ai-pg-data:/var/lib/postgresql/data
-  audiomuse-ai-valkey:
-    container_name: audiomuse-ai-valkey
-    <<: *valkey-params
-    volumes:
-      - audiomuse-ai-valkey-data:/data/valkey
-  audiomuse-ai-worker:
-    container_name: audiomuse-ai-worker
-    depends_on:
-      audiomuse-ai-valkey:
-        required: true
-        condition: service_healthy
-      audiomuse-ai-pg:
-        required: true
-        condition: service_healthy
-    environment:
-      AI_MODEL_PROVIDER: OLLAMA
-      OLLAMA_SERVER_URL: http://192.168.1.249:11434/api/generate
-      SERVICE_TYPE: "worker"
-      MEDIASERVER_TYPE: "navidrome"
-      NAVIDROME_URL: http://navidrome:4533/
-      NAVIDROME_USER: ${NAVIDROME_USERNAME}
-      NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
-      POSTGRES_USER: audiomuse
-      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
-      POSTGRES_DB: audiomusedb
-      POSTGRES_HOST: audiomuse-ai-pg
-      POSTGRES_PORT: 5432
-      REDIS_URL: "redis://audiomuse-ai-valkey:6379/0"
-      TEMP_DIR: "/app/temp_audio"
-    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
-    profiles: ["rinoa-apps"]
-    restart: unless-stopped
-    volumes:
-      - audiomuse-temp-audio-worker:/app/temp_audio
   authelia:
     container_name: authelia
     depends_on:
@@ -585,7 +483,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:135efd5c2d0d854692276ef2a80c5b86429eb7f8d5d0219e2fc0a8955f67e663
+    image: authelia/authelia:master@sha256:3330c7807d1b3942ef219a33a09c869899cf733b943e141e1ec10db58555b4f0
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +519,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:4e6e670bb069649261c9c18031f0aded7bb249a5b6664ddec29c013a89310d50
+    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -679,7 +577,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:4b7bb6d861c08bbf0c388b936ada8b2ba57669ca9974323f504e974577d19d63
+    image: lscr.io/linuxserver/bazarr:latest@sha256:4b5e510042bf471c8bafab89cada9774fba2fb25f16ec64235151cacbe847c10
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -889,7 +787,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:56f6b349685a94a5e07f1e376bb5d5d5c5a96a554bd27bab5d6d018d8e578e4f
+    image: ghcr.io/browserless/chromium:latest@sha256:c2abacf88698dc6750038363e1205c2f141856db21d564df9f7e2d8c9fb8fc22
     labels:
       swag: enable
       swag_proto: http
@@ -949,7 +847,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:2d0030e12494be9ebf6a6ebbbad46afe5763f498bbfefe9ebb7f0bf6be3ca5dc
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:736331d2787f94d3201b64aa641e090f67e28577ba505bd7ba5d7c1841e1e0ca
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -1048,7 +946,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:93accf096f89735a3c934f20a7c2ff9c3782b27292576c703375d571ccedc9ff
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:6e7bb740c8c0a75ecb1bfc2992511e2abdd92acc8d3424d9abaf0f78055f12dc
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1144,7 +1042,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:7fb43cf2bc6ae8d51b551ce2640ea3da4cd521d96e383f188f8ac67986e2238e
+    image: metabase/metabase@sha256:b0511d28f5a504915cda5d4e233e5d25bab95fd8879823cbeb29580707473d36
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1176,7 +1074,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:d0074b07c56e9d29180c54c7eba4e391ef539f10e062f82bc9392784efb1da76
+    image: mpepping/cyberchef:latest@sha256:ad69e26bc1890d09fffc35fb85a10106a493a433c546cb747fce7dd80604563e
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1294,7 +1192,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:f7eea22def731ef98f0644b191c477917790bb0e5449b0014bac2f349ce178a7
+    image: freikin/dawarich:latest@sha256:7c70f2169e848ed77ae1cec01dd10ec4a73a70a785d4e4d248db1735c0bc25ed
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1334,7 +1232,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:20d789eb03af1942f9e2bd871068a54af8a439895e97d669481eac51ee110f90
+    image: postgis/postgis:17-3.5-alpine@sha256:5a30b4cf0c787aae9e428c1fce1ef736fccc7fc294958ee99d3836fb51b1819b
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1385,7 +1283,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:f7eea22def731ef98f0644b191c477917790bb0e5449b0014bac2f349ce178a7
+    image: freikin/dawarich:latest@sha256:7c70f2169e848ed77ae1cec01dd10ec4a73a70a785d4e4d248db1735c0bc25ed
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1591,7 +1489,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:96527b9d11c1a83af9a7a1a58f944eb468e8fedcb5b9bfe8e205c358825db50e
+    image: lscr.io/linuxserver/duplicati:latest@sha256:98986271265c9184f844d7e61ce63a60993d8dcfe5f989e4316b374ccebfdaee
     labels:
       swag: enable
       swag_port: 8200
@@ -1677,7 +1575,7 @@ services:
       WEEKLY_JAMS_FLAGS: --playlist=weekly-jams --download-mode=skip
       DAILY_JAMS_SCHEDULE: 30 2 * * *
       DAILY_JAMS_FLAGS: --playlist=daily-jams --download-mode=skip
-    image: ghcr.io/lumepart/explo:latest@sha256:d4b55bf5c8f2099815e1613a74d9d5ceb1ee6a3fc8f973a19c60cf842bc8d8df
+    image: ghcr.io/lumepart/explo:latest@sha256:cad2acbe3b504b1c12456f86a13869ecc147b358465aa3d06d66243ac614cf2e
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -1731,7 +1629,7 @@ services:
       BROWSER_TIMEOUT: 40000
       TEST_URL: https://duckduckgo.com
     hostname: Rinoa
-    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
+    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:139dfee1c6f89249c8d665d1333a42e8ec74ec0a86bc6bb1c8461e10d3a66a47
     networks:
       default: null
     ports:
@@ -1810,7 +1708,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:b9bb8898a04041632e3233de2f3a7bf4a0d8758fa7e6e2452fe0c8b139a59741
+    image: ghost:latest@sha256:2452ef8a8402e3f9f14e0ba9d84074ba82336277f5073250560e8b48906632df
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1855,7 +1753,7 @@ services:
       GITEA__mailer__SMTP_PORT: 25
       GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
       GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
+    image: gitea/gitea:1.26.2@sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1915,7 +1813,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:eba8ddbdd837ecfbb6ca8a26d8deec68a2f9b076660102ae641dba0f371c099b
+    image: postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -2098,7 +1996,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+    image: ghcr.io/gethomepage/homepage:latest@sha256:a0b71c8e757298d02560186bab9fbe3fc2d375c523a62cc1019177b37e48aa28
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2265,7 +2163,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:48c4ea4884b04c77a4a4ec93e190dea6cb7dc1b38acb005a35dd56f68212d85a
+    image: alangrainger/immich-public-proxy:latest@sha256:6aeb25d05155049f4600f1b40469c735cecaa99c22e3a943a3fe3ce02a1ae7f7
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2388,7 +2286,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:1ddd3f1c6ba5c4b8b786b91830926bb510376918a7d43b2f142df6650c239951
+    image: quay.io/invidious/invidious-companion:latest@sha256:11561591f1d7374605c076801035175e7bb32c7ec18dcb69545b8f618e10a249
     logging:
       options:
         max-size: "1G"
@@ -2412,7 +2310,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:eba8ddbdd837ecfbb6ca8a26d8deec68a2f9b076660102ae641dba0f371c099b
+    image: docker.io/library/postgres:14@sha256:d462928b1898dd74b749ef486797968828c1e7fc9befb5e5ca03a33bfbc32d64
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2461,7 +2359,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:1694ff069f0c9dafb283c36765175606866769f5d72f2ed56b6a0f1be922fc37
+    image: jellyfin/jellyfin@sha256:aefb67e6a7ff1debdd154a78a7bbb780fd0c873d8639210a7f6a2016ad2b35db
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3088,7 +2986,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:c7526c0f6c3f30260a563d7bcf8ad778effac59a44f8ffa86678c35418338609
+    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3120,7 +3018,7 @@ services:
       POSTGRES_USER: ${JOPLIN_POSTGRES_USER}
       POSTGRES_PORT: 5432
       POSTGRES_HOST: joplin-db
-    image: joplin/server:latest@sha256:5d9e7f9d31b436cb1b99d1a6a65d8c5bf760829094617e8ad1e956fd925de888
+    image: joplin/server:latest@sha256:0877bfba41a943017c42c58e90db9d8d548bfe699b5e410248b5b879371734f9
     labels:
       homepage.group: Personal Tools
       homepage.name: Joplin
@@ -3188,7 +3086,7 @@ services:
       Java_Xmx: 1g
     expose:
       - 8010
-    image: elestio/languagetool:latest@sha256:c71c314fd6d2223634829d0aa7ba9c8b6ab79e7072e3ac03f4cc07231043ab56
+    image: elestio/languagetool:latest@sha256:40045549a8b31b6b385dea55274a192359fcd61089824d022fb087d9bef867d8
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3199,7 +3097,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:c3887840d04c8173fb654ed3acfd41699928c380375808311b5d136d4e056e8b
+    image: libretranslate/libretranslate@sha256:32e49df654dc427edb6c95f1f93cd21dd18b36d4df906a1a34472e1263abe91b
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3233,7 +3131,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:d2f944115de2ca6754ad142ee92f9db481b1574c7bc030974d624584106b78d7
+    image: lscr.io/linuxserver/lidarr:latest@sha256:b08b2194fa4ddb7f7ace9d1bfd82bd9b26f457d79aa70f42d923d2e15a820f0e
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3284,7 +3182,7 @@ services:
       spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
     expose:
       - 5000
-    image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
+    image: thewicklowwolf/lidify:latest@sha256:15a28139a6b16ff4bc5e6cc2fae413f837f8bd1971e15918c6cc7fd7fa0dcf54
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidify
@@ -3398,7 +3296,7 @@ services:
         bind:
           create_host_path: true
   loggifly:
-    image: ghcr.io/clemcer/loggifly:latest@sha256:fe9b5c968d794b3045176289215d044a5dd554816fe708212dba41781b18de62
+    image: ghcr.io/clemcer/loggifly:latest@sha256:5eae87a3fd141dd7af12a53bb470bd6902d8dc6c8d6ec1d5017d5abdd4c64930
     container_name: loggifly
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -3516,7 +3414,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:18-alpine@sha256:54451ecb8ab38c24c3ec123f2fd501303a3a1856a5c66e98cecf2460d5e1e9d7
+    image: postgres:18-alpine@sha256:96d56f7f57c6aacd1fcb908bc83b345ec5f83231ee486dd66a1baadce274db88
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3543,7 +3441,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:93fb1eebb9ef4e4e820c90827e217dfafe7e8cb5839a1ff3cd40ac4f205c06ea
+    image: linuxserver/mariadb@sha256:adbb0142f55abd0e913b8fdd017f637d2318d434e74755908c768399e96403ec
     networks:
       default: null
     ports:
@@ -3597,7 +3495,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:c0625aba603aec36975ab010f58ae9c2faadf8a95f64506f2ae2ea7d57ef6247
+    image: lscr.io/linuxserver/mastodon:latest@sha256:eb34805b65f9f1354c0b6f33df3a4bebb8c2db690c6146eac175a96d06de341c
     labels:
       swag: enable
       swag_proto: http
@@ -3638,7 +3536,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:c7526c0f6c3f30260a563d7bcf8ad778effac59a44f8ffa86678c35418338609
+    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3660,7 +3558,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:d8e8ab9d50162f5cfcb8c1d4d7b33f49ec3ceb46b3d06933662f340d5dfd6c96
+    image: getmaxun/maxun-backend:latest@sha256:06c524edafb7ff84d34340dc7f3656c71cba4f5e3c957ca1b1b4ab84f5505057
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3704,7 +3602,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:c7526c0f6c3f30260a563d7bcf8ad778effac59a44f8ffa86678c35418338609
+    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3757,7 +3655,7 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/memes/:/rails/public/memes
   meme-search-pro-img2txt-gen:
-    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:81ffbc934de800f3f5206f742db534a78596ec894e348dc25548495a1e9ad78e
+    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:e212afdcacf866080879dfb1c9a324b71580f84a94c5ca73b52a64a06c73a5ef
     container_name: meme-search-pro-img2txt-gen
     deploy:
       resources:
@@ -3786,7 +3684,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: pgvector/pgvector:pg17@sha256:494dff7e67e7bc2c826b94c331364978d145ebb86fd338154138b084223b7f67
+    image: pgvector/pgvector:pg17@sha256:feb68f4f15446397d8cac7f4fe48fe4586de83160d1fc48b46283312d1a33966
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3940,7 +3838,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:32979a1189dfdc44da3f5ed40d910495f5ad8f6f7f77556646f890a30b2d3f56
+    image: mongo:7@sha256:8ecb514b00bdcc0bde67ef4e6c330385377a9dc68e24ee94e28c07c891647348
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -4016,7 +3914,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:d8b7ace22609c8297f02b2103543b2babdfa3880d5bcfb14e4e0d9d8ec11671c
+    image: docker.n8n.io/n8nio/n8n@sha256:9f1f8e4c093c9924338bd168e3f813f746041d13b337753af0dbdd329e7b50f7
     labels:
       swag: enable
       swag_proto: http
@@ -4069,7 +3967,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:9fa40b3d8dec43ceb2213d1fa551da3dcfef6ac6d19c2e534efb92527c2bafd2
+    image: deluan/navidrome:latest@sha256:c4b5cb36a790b3eb63ca6a68bbe2fe149c2d7fa2e586f7a480e61db630e6664b
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4124,7 +4022,7 @@ services:
       GRAPHQL_PORT: ${GRAPHQL_PORT:-20212} # GraphQL API port
       ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false} # Set to true to reset your config and database on each container start
       NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0} # 0=kill all services and restart if any dies. 1 keeps running dead services.
-    image: jokobsk/netalertx:latest@sha256:656da7fc9f9fa5429cc75a33b0eb073fe538fd58b3d370f229fa0e4725f065b7
+    image: jokobsk/netalertx:latest@sha256:cd5176052fec71a75c902cc555e97cb540833d79c7cac8695c6adc611c402347
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4164,7 +4062,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:3a094111b88ae4789708ada7eb9c6a3eb4a342ad878a07b8b07d4dbce360c3aa
+    image: nextcloud/all-in-one:latest@sha256:e77ff490d8caf528116feb2268a2e8cb9d9c974090090878ea00e76998f5298c
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4254,7 +4152,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:4e6e670bb069649261c9c18031f0aded7bb249a5b6664ddec29c013a89310d50
+    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4271,7 +4169,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:2a1edf438ebfc4f1aae148c32914d7d7c1ba4c92923b32fed7a19d03933812ed
+    image: lscr.io/linuxserver/ombi:latest@sha256:8b4b1e9aad2e7768396b30ccea4fca446f59abca5530d3d1ad41ab5a13fd19d4
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4565,7 +4463,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:c7526c0f6c3f30260a563d7bcf8ad778effac59a44f8ffa86678c35418338609
+    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4640,7 +4538,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:4e6e670bb069649261c9c18031f0aded7bb249a5b6664ddec29c013a89310d50
+    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4725,7 +4623,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
+    image: plantuml/plantuml-server:jetty@sha256:6ab7824dbc4882156ba9b6d4f8ca42d697a79634c073d4d28eb768158f6ef5a7
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4806,7 +4704,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:4e0b4c4f0dd99954b6db70e8766f856742ec1a43370d94a754f8a608ddb0d88a
+    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:713ea1c03f111d92a4a2dbcf99ed69dade8aa68428c41b4b4c4f2515eec89091
     labels:
       swag: enable
       swag_auth: authelia
@@ -4838,7 +4736,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:881099ffea3550c0abd4ebdb48751f33fde913265695ab5890319f30583e3c62
+    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:75723c6a85b2fa2971becf7c32794ac3c9b69786ef14560e19eae3892f8c7bf1
     ports:
       - 36102:8000
     profiles: ["rinoa-apps"]
@@ -4848,7 +4746,7 @@ services:
       - NET_BIND_SERVICE
     command: postal smtp-server
     container_name: postal-smtp
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     networks:
       default: null
     ports:
@@ -4861,7 +4759,7 @@ services:
   postal-web:
     command: postal web-server
     container_name: postal-web
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     labels:
       swag: enable
       swag_proto: http
@@ -4897,7 +4795,7 @@ services:
     container_name: postal-worker
     environment:
       LOG_LEVEL: debug
-    image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
+    image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -4928,7 +4826,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:4b52038b7b6452a20c145239fa07d8218d1541d736a96c43aa0a5f60141cab28
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:a46d0ce0a8236bc4e065fe7c91a55d026c9d849620c5845250519b977d8857f3
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -4975,7 +4873,7 @@ services:
       qbittorrentvpn:
         required: true
         condition: service_started
-    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:8786f2efc6fb8e26281f09bf6c5d0004e2d2420fd4781af0aed123ae01558e21
+    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:56e1eeec5582e202e82479b42b588e3807ececca25716f91c7a29f5c597c55d0
     environment:
       # Web API Configuration
       QBT_WEB_SERVER: true # Set to true to enable web API
@@ -5035,7 +4933,7 @@ services:
       VPN_PASS: ${DELUGEVPN_ENVIRONMENT_VPN_PASS}
       VPN_PROV: pia
       WEBUI_PORT: 8080
-    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:202f2fbbd5d70b2a57ce4fafdd22ef12af2f64ca2f87b277ea7456fe37c9063d
+    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:64462c1cef85a4dde9ff76465dfa39f5628b6b88a30143fa48b3546a776fcac0
     labels:
       homepage.group: Downloaders
       homepage.name: qBittorrent
@@ -5099,7 +4997,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
+    image: thewicklowwolf/radarec:latest@sha256:1ff2aee6682b81363160a686860f7ead8314c47a13af88d623bf7f149d165e7b
     labels:
       homepage.group: Servarr Stack
       homepage.name: RadaRec
@@ -5146,7 +5044,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+    image: lscr.io/linuxserver/radarr:latest@sha256:7b45af3b660f5ff5f7d6d625bfa99960cb9265e902f1bef136486f6d2be73ee9
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5208,7 +5106,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:26699291cbb07298dcd38c80f495b60e60b2b02d914533ef19b3aa91418a667b
+    image: amruthpillai/reactive-resume:latest@sha256:267e56e622f39b226e3796331e7391dad6ac9bc8c4369a506f33cd5876f26b36
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5241,7 +5139,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:4e6e670bb069649261c9c18031f0aded7bb249a5b6664ddec29c013a89310d50
+    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5387,7 +5285,7 @@ services:
         condition: service_healthy
         required: true
         restart: true
-    image: rommapp/romm:latest@sha256:2b7a1714b287f69b081ad2a63bb8c2fa673666a17b2f21322b580b0cd51cb266
+    image: rommapp/romm:latest@sha256:fa9a412dd2881472ef85aa9b268a84ae6d149b865fddd50df2b72749ce8a480e
     environment:
       ROMM_DB_DRIVER: mariadb # mariadb | sqlite (default: sqlite)
       ROMM_HOST: https://localhost:3000 # [Optional] your host ip or domain name (including http(s)://, subdomain and port if needed). Being used only for webRcade feed for now.
@@ -5482,7 +5380,7 @@ services:
       VPN_USER: ${SABNZBDVPN_ENVIRONMENT_VPN_USER}
       DEBUG: true
     hostname: Rinoa
-    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:a478044eb2828633979b37ddfaf1a6b28999492ac3011d2f0bb000981f2b62b7
+    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:f9c6e4131a003ff8d033949afa08e3555cddcccbff51375c920f3755438e2b06
     labels:
       homepage.group: Downloaders
       homepage.name: SABnzbd
@@ -5546,7 +5444,7 @@ services:
       STRATEGY_DYNAMIC_DEFAULT_THEME: hacker-terminal
       STRATEGY_DYNAMIC_DEFAULT_REFRESH_FREQUENCY: 5s
       STRATEGY_BLOCKING_DEFAULT_TIMEOUT: 1m
-    image: sablierapp/sablier:latest@sha256:ce28de9ff608b4f9107466db6812d0c655587246de44e1e4a1cbae3c3b9814fa
+    image: sablierapp/sablier:latest@sha256:31c6877d69e7d8e627b51343f78234498e8746eb90051deafcfb765caabb584b
     ports:
       - 19311:10000
     profiles: ["rinoa-apps"]
@@ -5651,7 +5549,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:a7f9188cc7fa8b6b037e0d85709c0dced8f05d0eba84145eb7fe7027a4c00850
+    image: searxng/searxng:latest@sha256:04cc81a759e882e411569e008a77243ab8b0fc4137bcf88018cd7b7c3cbdff41
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5705,7 +5603,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.18.3@sha256:e9260bfa82556e574b2f372a1d880a9cfe16aa4621a39ae79ac32e44e50f9da8
+    image: semaphoreui/semaphore:v2.18.4@sha256:e32c60f52e42799be077c6669f8dc9fcb6cedb1a1f851f791a6be851f4347c41
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5965,7 +5863,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:c7526c0f6c3f30260a563d7bcf8ad778effac59a44f8ffa86678c35418338609
+    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -5979,7 +5877,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:60f3b6b5c7647ba2bafd81163acfe34b11117b9b834ebd7fbcc3e5f1b309c7ef
+    image: lscr.io/linuxserver/sonarr:latest@sha256:02bc962946fef994e67a38152446df25c10a52f8583aefeeb6467f9dd44cab99
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6028,7 +5926,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
+    image: thewicklowwolf/sonashow:latest@sha256:fae1105710063e6900159c32942128bc8d78522c2cedf54036f1cbdd9c49281e
     labels:
       homepage.group: Servarr Stack
       homepage.name: SonaShow
@@ -6166,7 +6064,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:a2f4b798445ad702df27b028f190cd7247627d1d3c6cb473f684e2738658021f
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:f99dfd097709016dfb4387d65bfdc0419bde99cf1dce7e26e70ca616c86f1281
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6206,7 +6104,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:950c596db26e0764f642def2fd4f9ee904ff2ac16d83fe621ff731b771d9b385
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:2bb9b67f3edbca7ecc80f6e851a02cd04a10d5ea1d69b3e80b1e1f615e97b7a2
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6258,7 +6156,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:d3a8f05c8cd01de35499b35573201499614ec17b71498ec01c0ed82119169147
+    image: lscr.io/linuxserver/swag:latest@sha256:08ab364516bbc9b5b36a008084c259780f24a85d421f29b967560dc662606d75
     labels:
       swag: enable
       swag_proto: http
@@ -6360,7 +6258,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:4e6e670bb069649261c9c18031f0aded7bb249a5b6664ddec29c013a89310d50
+    image: postgres:16-alpine@sha256:16bc17c64a573ef34162af9298258d1aec548232985b33ed7b1eac33ba35c229
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6555,11 +6453,31 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/config/:/vault/config
       - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/logs/:/vault/logs
+  vault-agent:
+    cap_add:
+      - IPC_LOCK
+    command:
+      - agent
+      - -config=/vault/config/vault-agent.hcl
+    container_name: hc-vault-agent
+    environment:
+      VAULT_ADDR: http://hc-vault:8200
+      SKIP_SETCAP: true
+    image: hashicorp/vault:2.0.0-bugfix
+    ports:
+      - 8100
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/config/:/vault/config:ro
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/data/:/vault/data:ro
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/tokens/:/vault/tokens
+      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/output/:/vault/output
   wallos:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:e4ca23a5b56d3f3e36987db9e38faa2b88adb0df0453852346689e6397daac83
+    image: bellamy/wallos:latest@sha256:11ed4975912a014e2ec53d5270acfdde8eb928f59b56ad9ba136a2e69bbec019
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6589,7 +6507,7 @@ services:
       - wallos-logos:/var/www/html/images/uploads/logos
   web-check:
     container_name: web-check
-    image: lissy93/web-check@sha256:f1aee591cef9bb1b76e8e37786675144cbdd17a07e9b1968fa2b797798c91ab4
+    image: lissy93/web-check@sha256:89e64002dc8871bfd38ec6068df025f5b4b9f0e45d31a2884f894d1407380b11
     labels:
       homepage.group: Privacy/Security
       homepage.name: Web-Check
@@ -6615,7 +6533,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:c301a9a9740c10896df5e57ba4b77440ea22531c75111dcf689b78bf7b1cdd07
+    image: clidey/whodb@sha256:daee5c278a431a14f7d76a2f55eb483452d16e151f90098a61ceea358d35f025
     environment:
       WHODB_CLICKHOUSE_1: '{ "host": "signoz-clickhouse" }'
       WHODB_MARIADB_1: '{ "host": "mariadb", "user": "root", "password":
@@ -6789,14 +6707,6 @@ volumes:
     name: asciinema-data
   asciinema-pg-data:
     name: asciinema-pg-data
-  audiomuse-ai-pg-data:
-    name: audiomuse-ai-pg-data
-  audiomuse-temp-audio-flask:
-    name: audiomuse-temp-audio-flask
-  audiomuse-ai-valkey-data:
-    name: audiomuse-ai-valkey-data
-  audiomuse-temp-audio-worker:
-    name: audiomuse-temp-audio-worker
   authelia-pg-db:
     name: authelia-pg-db
   authelia-valkey-data: