🔧 Renovate: Update (digest) ghcr.io/hotio/cloudflareddns:latest Docker digest to 30dd104

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -209,9 +209,8 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
+          HC_VAULT_AUTH: token
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Pre-pull/build service images in parallel
@@ -415,9 +414,8 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
+          HC_VAULT_AUTH: token
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Pre-pull/build service images in parallel

.gitea/workflows/renovate-pr-deploy.yml

@@ -138,9 +138,8 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
+          HC_VAULT_AUTH: token
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment

.gitea/workflows/renovate.yml

@@ -2,7 +2,7 @@ name: Renovate
 
 on:
   schedule:
-    - cron: "0 */2 * * *"
+    - cron: "0/30 * * * *"
   workflow_dispatch:
 
 env:

README.md

@@ -6,13 +6,17 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.75 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.74 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
 | asciinema | ghcr.io/asciinema/asciinema-server:latest | Platform for hosting and sharing terminal session recordings |
 | asciinema-pg-db | postgres:14-alpine |  |
 | audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest | Podcasts, eBooks, & Audiobooks |
+| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta | Automatic playlist generation using AI |
+| audiomuse-ai-pg | postgres:15-alpine |  |
+| audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine |  |
+| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |  |
 | authelia | authelia/authelia:master | Authentication/authorization server with MFA & SSO |
 | authelia-pg | postgres:16-alpine |  |
 | authelia-valkey | docker.io/valkey/valkey:9-alpine |  |
@@ -50,7 +54,7 @@
 | garage | dxflrs/garage:v2.3.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.26.2 | Private Code Repo |
+| gitea | gitea/gitea:1.26.1 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -158,7 +162,7 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.18.4 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.18.3 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
@@ -183,7 +187,6 @@
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
 | vault | hashicorp/vault:2.0.0-bugfix | HashiCorp Vault for secrets, key/value stores, etc. |
-| vault-agent | hashicorp/vault:2.0.0-bugfix |  |
 | wallos | bellamy/wallos:latest | Subscription Tracking |
 | web-check | lissy93/web-check | Site scanner for attack vectors, architecture, security configs, and more |
 | whodb | clidey/whodb | Lightweight next-gen database explorer |

docker-compose.yml

@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:a35428eba9043cc0b79dbe54100f0c92784f2de00ad09b01182bfb1c5c83d1bd
+  image: docker.io/valkey/valkey:9-alpine@sha256:d1cc70645bbcef743615463a2fa4616e841407545e18f560aed0c49671a90147
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.75@sha256:50ac5916778faa06ad4adcff606c7aaf806cb55dc1995160dbf50633c9bda94d
+    image: adguard/adguardhome:v0.107.74@sha256:f29c58a91f79387cbbbb042e140814f58e830d457d44af03d662c8df43db9dea
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:0d114aa96f1782173af59c6af88b1dc75918af71ab8a160a3b1e48da1b5de96f
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:3b7155682d9aaf168668621d4a63f2dc2c63e100593543113b81fa201a91d3e0
     labels:
       swag: enable
       swag_proto: http
@@ -312,7 +312,7 @@ services:
       PUBLIC_SNAPSHOTS: false # set to False to prevent anonymous users from viewing snapshot content
       PUBLIC_ADD_VIEW: false # set to True to allow anonymous users to submit new URLs to archive
       SEARCH_BACKEND_ENGINE: ripgrep # tells ArchiveBox to use sonic container below for fast full-text search
-    image: archivebox/archivebox:latest@sha256:1a5a37331091d9df865ead2b9c231aa5a892fc26fe0422ce6140d9e2d9532327
+    image: archivebox/archivebox:latest@sha256:fdf2936192aa1e909b0c3f286f60174efa24078555be4b6b90a07f2cef1d4909
     labels:
       homepage.group: Personal Tools
       homepage.name: ArchiveBox
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -459,6 +459,108 @@ services:
         source: /rinoa-storage
         target: /storage
         type: bind
+  audiomuse-ai-flask:
+    container_name: audiomuse-ai-flask
+    depends_on:
+      audiomuse-ai-valkey:
+        required: true
+        condition: service_healthy
+      audiomuse-ai-pg:
+        required: true
+        condition: service_healthy
+    environment:
+      AI_MODEL_PROVIDER: OLLAMA
+      OLLAMA_SERVER_URL: http://192.168.1.249:11434/api/generate
+      SERVICE_TYPE: "flask"
+      MEDIASERVER_TYPE: "navidrome"
+      NAVIDROME_URL: http://navidrome:4533/
+      NAVIDROME_USER: ${NAVIDROME_USERNAME}
+      NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
+      POSTGRES_USER: audiomuse
+      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
+      POSTGRES_DB: audiomusedb
+      POSTGRES_HOST: audiomuse-ai-pg
+      POSTGRES_PORT: 5432
+      REDIS_URL: redis://audiomuse-ai-valkey:6379/0
+      TEMP_DIR: /app/temp_audio
+    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
+    labels:
+      homepage.group: Media Library
+      homepage.name: AudioMuse-AI
+      homepage.href: https://muse.${MY_TLD}
+      homepage.description: Automatic playlist generation using AI
+      homepage.icon: /icons/audiomuseai.png
+      swag: enable
+      swag_auth: authelia
+      swag_port: 8000
+      swag_proto: http
+      swag_url: muse.${MY_TLD}
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.parent: Rinoa
+      swag.uptime-kuma.name: AudioMuse-AI
+      swag.uptime-kuma.monitor.url: https://muse.${MY_TLD}
+      swag.uptime-kuma.monitor.interval: 300
+      swag.uptime-kuma.monitor.retryInterval: 60
+      swag.uptime-kuma.monitor.maxretries: 5
+    ports:
+      - 36025:8000
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - audiomuse-temp-audio-flask:/app/temp_audio
+  audiomuse-ai-pg:
+    container_name: audiomuse-ai-pg
+    environment:
+      POSTGRES_USER: audiomuse
+      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
+      POSTGRES_DB: audiomusedb
+    expose:
+      - 5432
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U audiomuse -d audiomusedb"]
+      interval: 10s
+      retries: 5
+      start_period: 30s
+      timeout: 10s
+    image: postgres:15-alpine@sha256:df7bca0066e6f60cc3dd32faa70caddec20e2c22b58932f79498e5704b23854a
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - audiomuse-ai-pg-data:/var/lib/postgresql/data
+  audiomuse-ai-valkey:
+    container_name: audiomuse-ai-valkey
+    <<: *valkey-params
+    volumes:
+      - audiomuse-ai-valkey-data:/data/valkey
+  audiomuse-ai-worker:
+    container_name: audiomuse-ai-worker
+    depends_on:
+      audiomuse-ai-valkey:
+        required: true
+        condition: service_healthy
+      audiomuse-ai-pg:
+        required: true
+        condition: service_healthy
+    environment:
+      AI_MODEL_PROVIDER: OLLAMA
+      OLLAMA_SERVER_URL: http://192.168.1.249:11434/api/generate
+      SERVICE_TYPE: "worker"
+      MEDIASERVER_TYPE: "navidrome"
+      NAVIDROME_URL: http://navidrome:4533/
+      NAVIDROME_USER: ${NAVIDROME_USERNAME}
+      NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
+      POSTGRES_USER: audiomuse
+      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
+      POSTGRES_DB: audiomusedb
+      POSTGRES_HOST: audiomuse-ai-pg
+      POSTGRES_PORT: 5432
+      REDIS_URL: "redis://audiomuse-ai-valkey:6379/0"
+      TEMP_DIR: "/app/temp_audio"
+    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - audiomuse-temp-audio-worker:/app/temp_audio
   authelia:
     container_name: authelia
     depends_on:
@@ -483,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:4848d39777ede5f11d8123d4c30488a1d418f9d8183ffbb8f624b1a13bf0ec6f
+    image: authelia/authelia:master@sha256:3edd3ba1f9d0afa45f10ab3deff11e8eff4b285104192bf2b0eaa478b23c399f
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -577,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:95f27692c3de6dbe130cd035d342d8138ec74ade7b62cfc52e11ae222c52c855
+    image: lscr.io/linuxserver/bazarr:latest@sha256:4b7bb6d861c08bbf0c388b936ada8b2ba57669ca9974323f504e974577d19d63
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -787,7 +889,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:af0f9442caf5908fdf655a23c34e50e6f1c66ce3306d88e3d4578280bcba9661
+    image: ghcr.io/browserless/chromium:latest@sha256:ba9fb80100147d657c6fbffadf95308f6843c6931d3e064ac2fb612282101f8e
     labels:
       swag: enable
       swag_proto: http
@@ -847,7 +949,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:d89d4187221206f7f9f2c7946e7483815db905ca7d122644081aebd5d23ba391
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:2d0030e12494be9ebf6a6ebbbad46afe5763f498bbfefe9ebb7f0bf6be3ca5dc
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -946,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:6e7bb740c8c0a75ecb1bfc2992511e2abdd92acc8d3424d9abaf0f78055f12dc
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:30dd1042c33cc748f6356383c72e70d8e9c6a0225f273138565179e9a1991f4f
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1042,7 +1144,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:8d6e649d4bbd19aa641a5b71bff2c89e3c2f348e8a1f0b527573b06c73c7748d
+    image: metabase/metabase@sha256:34e59486732cb203701bcfe9c7515acfa13c58c15bb4475a0c88e987ac18176a
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1074,7 +1176,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:c9a202b56408dea46f28d95177a896d59e284902c884d0ef84377fecdf0ab286
+    image: mpepping/cyberchef:latest@sha256:b9d1a4cdd219c2dc97758e613ecb3a07a8d285889601f1fc5b1b03282423e303
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1192,7 +1294,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+    image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1232,7 +1334,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:5a30b4cf0c787aae9e428c1fce1ef736fccc7fc294958ee99d3836fb51b1819b
+    image: postgis/postgis:17-3.5-alpine@sha256:5dc2f0b5871ba999a2825d3b118e4d70a7e61577ab5fca2d8695632007214acb
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1283,7 +1385,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+    image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1708,7 +1810,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:588d5f5ed5ac6e94925860f76b2b14a18cf5d71c58a236f8817c600a9454fe2d
+    image: ghost:latest@sha256:876880a26b770631949d9bf2aa4b62d169e2a2f1dad56e9b065ac5d6f1c346e1
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1753,7 +1855,7 @@ services:
       GITEA__mailer__SMTP_PORT: 25
       GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
       GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.26.2@sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031
+    image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1813,7 +1915,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
+    image: postgres:14@sha256:04a3d3d1475ad37f07d8219d0e5eb46f64ac132bf6e110c772dab45e12e4a919
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -2163,7 +2265,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:759a04f859bd18d51cf70d06756f802df9707b410f3e91dc25787254b6d2099a
+    image: alangrainger/immich-public-proxy:latest@sha256:48c4ea4884b04c77a4a4ec93e190dea6cb7dc1b38acb005a35dd56f68212d85a
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2310,7 +2412,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
+    image: docker.io/library/postgres:14@sha256:04a3d3d1475ad37f07d8219d0e5eb46f64ac132bf6e110c772dab45e12e4a919
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2359,7 +2461,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:bc9fa8e1462fffe3d8d4255fc62af478602641f4c0e5f4875fea8563d1189837
+    image: jellyfin/jellyfin@sha256:1694ff069f0c9dafb283c36765175606866769f5d72f2ed56b6a0f1be922fc37
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3018,7 +3120,7 @@ services:
       POSTGRES_USER: ${JOPLIN_POSTGRES_USER}
       POSTGRES_PORT: 5432
       POSTGRES_HOST: joplin-db
-    image: joplin/server:latest@sha256:0877bfba41a943017c42c58e90db9d8d548bfe699b5e410248b5b879371734f9
+    image: joplin/server:latest@sha256:5d9e7f9d31b436cb1b99d1a6a65d8c5bf760829094617e8ad1e956fd925de888
     labels:
       homepage.group: Personal Tools
       homepage.name: Joplin
@@ -3131,7 +3233,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:ca2f95634d422fdeccfbff2a42cbe3a4fed1170f7e3546d99d5d5f2c9c9aa03b
+    image: lscr.io/linuxserver/lidarr:latest@sha256:7f34e2a907c7bcfc5cd49a1685db21a1e5055c96e8ad5e0d77ee94e1d50d84e5
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3182,7 +3284,7 @@ services:
       spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
     expose:
       - 5000
-    image: thewicklowwolf/lidify:latest@sha256:15a28139a6b16ff4bc5e6cc2fae413f837f8bd1971e15918c6cc7fd7fa0dcf54
+    image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidify
@@ -3296,7 +3398,7 @@ services:
         bind:
           create_host_path: true
   loggifly:
-    image: ghcr.io/clemcer/loggifly:latest@sha256:5eae87a3fd141dd7af12a53bb470bd6902d8dc6c8d6ec1d5017d5abdd4c64930
+    image: ghcr.io/clemcer/loggifly:latest@sha256:fe9b5c968d794b3045176289215d044a5dd554816fe708212dba41781b18de62
     container_name: loggifly
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -3441,7 +3543,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:41e8b59056fda0dfca6e24e2515674b18a76e774c93e464899da4d7116bc147d
+    image: linuxserver/mariadb@sha256:93fb1eebb9ef4e4e820c90827e217dfafe7e8cb5839a1ff3cd40ac4f205c06ea
     networks:
       default: null
     ports:
@@ -3558,7 +3660,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:7161477b77d29d59636553dce12a9912478ee0c207243be75b203d42a9eb3f9f
+    image: getmaxun/maxun-backend:latest@sha256:d8e8ab9d50162f5cfcb8c1d4d7b33f49ec3ceb46b3d06933662f340d5dfd6c96
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3914,7 +4016,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:9f1f8e4c093c9924338bd168e3f813f746041d13b337753af0dbdd329e7b50f7
+    image: docker.n8n.io/n8nio/n8n@sha256:fe36dc659e17c046255eb56ef65e7776eb7d13e4ca83a76bef137effa090972d
     labels:
       swag: enable
       swag_proto: http
@@ -4303,7 +4405,6 @@ services:
       LDAP_SEARCH_BASE: dc=trez,dc=wtf
       LDAP_SEARCH_FILTER: "(objectClass=inetOrgPerson)"
       LDAP_USE_TLS: false
-      #WEBUI_SECRET_KEY: ${}
       # LibreTranslate
       LT_DEBUG: false
       LT_UPDATE_MODELS: true
@@ -4319,7 +4420,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:73f93f9ff87bc148105ffdba14ee35f03481a7ebbfaa9b350ebec4210e4b1a45
+    image: ghcr.io/open-webui/open-webui:main@sha256:74093dadc9c6aabc23987a74fd8c2fb8d995b1a5b22e83b0036fb9d6af590e8c
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4624,7 +4725,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:6ab7824dbc4882156ba9b6d4f8ca42d697a79634c073d4d28eb768158f6ef5a7
+    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4827,7 +4928,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:c9fe528f34b1fd3715438b6f6d6991d64e2965f2c055db36398bc66a0e7eab01
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -4874,7 +4975,7 @@ services:
       qbittorrentvpn:
         required: true
         condition: service_started
-    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:56e1eeec5582e202e82479b42b588e3807ececca25716f91c7a29f5c597c55d0
+    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:8786f2efc6fb8e26281f09bf6c5d0004e2d2420fd4781af0aed123ae01558e21
     environment:
       # Web API Configuration
       QBT_WEB_SERVER: true # Set to true to enable web API
@@ -4934,7 +5035,7 @@ services:
       VPN_PASS: ${DELUGEVPN_ENVIRONMENT_VPN_PASS}
       VPN_PROV: pia
       WEBUI_PORT: 8080
-    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:b61d8a11e022239c4e3b218ae7ebb58d9adc67b59c46280c1812c6d9ccc0e8d1
+    image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:fe6daf82a190902d99350026eccdb883eb1e5f80b23827ba04a29c155815c696
     labels:
       homepage.group: Downloaders
       homepage.name: qBittorrent
@@ -4998,7 +5099,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/radarec:latest@sha256:1ff2aee6682b81363160a686860f7ead8314c47a13af88d623bf7f149d165e7b
+    image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
     labels:
       homepage.group: Servarr Stack
       homepage.name: RadaRec
@@ -5045,7 +5146,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+    image: lscr.io/linuxserver/radarr:latest@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5107,7 +5208,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:c55782377718e9475e318f9a802fcff380f978331a1ae509096f97aadb971c29
+    image: amruthpillai/reactive-resume:latest@sha256:b760446c4301af067e7d595537a877e378363aa6ce921b7349e62983621826aa
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5381,7 +5482,7 @@ services:
       VPN_USER: ${SABNZBDVPN_ENVIRONMENT_VPN_USER}
       DEBUG: true
     hostname: Rinoa
-    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:f9c6e4131a003ff8d033949afa08e3555cddcccbff51375c920f3755438e2b06
+    image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:c01bec2f4a9695aca83034f2ca759936ac1d2ddd96b2dc17ce62533bb065ea84
     labels:
       homepage.group: Downloaders
       homepage.name: SABnzbd
@@ -5430,8 +5531,6 @@ services:
         source: /rinoa-storage
         target: /storage
         type: bind
-      - ${DOCKER_VOLUME_CONFIG}/.openvpn:/config/openvpn
-      - ${DOCKER_VOLUME_CONFIG}/.wireguard:/config/wireguard
   sablier:
     container_name: sablier
     environment:
@@ -5552,7 +5651,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:04cc81a759e882e411569e008a77243ab8b0fc4137bcf88018cd7b7c3cbdff41
+    image: searxng/searxng:latest@sha256:654eff5a61e7a768b233b89da64ba71904d06c67c2f43fb31ab5ce20b6f1e44c
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5606,7 +5705,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.18.4@sha256:e32c60f52e42799be077c6669f8dc9fcb6cedb1a1f851f791a6be851f4347c41
+    image: semaphoreui/semaphore:v2.18.3@sha256:e9260bfa82556e574b2f372a1d880a9cfe16aa4621a39ae79ac32e44e50f9da8
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5929,7 +6028,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/sonashow:latest@sha256:fae1105710063e6900159c32942128bc8d78522c2cedf54036f1cbdd9c49281e
+    image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
     labels:
       homepage.group: Servarr Stack
       homepage.name: SonaShow
@@ -6067,7 +6166,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:3f75c5ec7a14c232f91af1ddda4248543bb2e8f0aeb18fec64c34d2f42dd00ce
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:bf18a04f9e61573cefb0112ca9604a93a82451ada74050a6b30b41e30651d9a1
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6107,7 +6206,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:976dfa581b6cb1fb91e9b0b90284a92febe8ba6a4519e28f95c4e8e550d6d70d
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:950c596db26e0764f642def2fd4f9ee904ff2ac16d83fe621ff731b771d9b385
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6159,7 +6258,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:ef97e83fc0283f972406ed62f208482653b9a9233eb389b947718b28c8c99263
+    image: lscr.io/linuxserver/swag:latest@sha256:74b906a164b2eb43f1792aeac5e2ca464b5b118b3d918cb1a5f2b8ccfed12ebb
     labels:
       swag: enable
       swag_proto: http
@@ -6456,26 +6555,6 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/config/:/vault/config
       - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/logs/:/vault/logs
-  vault-agent:
-    cap_add:
-      - IPC_LOCK
-    command:
-      - agent
-      - -config=/vault/config/vault-agent.hcl
-    container_name: hc-vault-agent
-    environment:
-      VAULT_ADDR: http://hc-vault:8200
-      SKIP_SETCAP: true
-    image: hashicorp/vault:2.0.0-bugfix
-    ports:
-      - 8100
-    profiles: ["rinoa-apps"]
-    restart: unless-stopped
-    volumes:
-      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/config/:/vault/config:ro
-      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/data/:/vault/data:ro
-      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/tokens/:/vault/tokens
-      - ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/output/:/vault/output
   wallos:
     container_name: wallos
     environment:
@@ -6510,7 +6589,7 @@ services:
       - wallos-logos:/var/www/html/images/uploads/logos
   web-check:
     container_name: web-check
-    image: lissy93/web-check@sha256:6c2c4957c8794ffbcd50e0b560f6f010f17884b36b587c74155482fbad15a077
+    image: lissy93/web-check@sha256:f1aee591cef9bb1b76e8e37786675144cbdd17a07e9b1968fa2b797798c91ab4
     labels:
       homepage.group: Privacy/Security
       homepage.name: Web-Check
@@ -6536,7 +6615,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:daee5c278a431a14f7d76a2f55eb483452d16e151f90098a61ceea358d35f025
+    image: clidey/whodb@sha256:29f5b78bb2e3d07514058f33f0157bd0845b0b9d841a6775d7ef9c5a952c4e78
     environment:
       WHODB_CLICKHOUSE_1: '{ "host": "signoz-clickhouse" }'
       WHODB_MARIADB_1: '{ "host": "mariadb", "user": "root", "password":
@@ -6710,6 +6789,14 @@ volumes:
     name: asciinema-data
   asciinema-pg-data:
     name: asciinema-pg-data
+  audiomuse-ai-pg-data:
+    name: audiomuse-ai-pg-data
+  audiomuse-temp-audio-flask:
+    name: audiomuse-temp-audio-flask
+  audiomuse-ai-valkey-data:
+    name: audiomuse-ai-valkey-data
+  audiomuse-temp-audio-worker:
+    name: audiomuse-temp-audio-worker
   authelia-pg-db:
     name: authelia-pg-db
   authelia-valkey-data: