🔧 Renovate: Update (digest) louislam/uptime-kuma:latest Docker digest to 3d63290

.gitea/workflows/compose-services-readme.yml

@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
     - name: Checkout
-      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
       with:
         ref: 'main'
     - name: Install yq

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -223,7 +223,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Dry Run
-        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
+        uses: hoverkraft-tech/compose-action@3846bcd61da338e9eaaf83e7ed0234a12b099b72 # v2.4.1
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:
@@ -427,7 +427,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
+        uses: hoverkraft-tech/compose-action@3846bcd61da338e9eaaf83e7ed0234a12b099b72 # v2.4.1
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

.gitea/workflows/renovate-pr-deploy.yml

@@ -143,7 +143,7 @@ jobs:
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
+        uses: hoverkraft-tech/compose-action@3846bcd61da338e9eaaf83e7ed0234a12b099b72 # v2.4.1
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

README.md

@@ -6,17 +6,17 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.69 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
 | asciinema | ghcr.io/asciinema/asciinema-server:latest | Platform for hosting and sharing terminal session recordings |
 | asciinema-pg-db | postgres:14-alpine |  |
 | audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest | Podcasts, eBooks, & Audiobooks |
-| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta | Automatic playlist generation using AI |
+| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.11-beta | Automatic playlist generation using AI |
 | audiomuse-ai-pg | postgres:15-alpine |  |
 | audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine |  |
-| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |  |
+| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.11-beta |  |
 | authelia | authelia/authelia:master | Authentication/authorization server with MFA & SSO |
 | authelia-pg | postgres:16-alpine |  |
 | authelia-valkey | docker.io/valkey/valkey:9-alpine |  |
@@ -95,7 +95,7 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:0.130.1 | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:latest | Self-hosted digital asset manager for 3D print files |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
 | mastodon | lscr.io/linuxserver/mastodon:latest | Open-source social network |
@@ -105,6 +105,7 @@
 | maxun-frontend | getmaxun/maxun-frontend:latest | No-code web data extraction platform |
 | maxun-pg-db | postgres:17-alpine |  |
 | maxun-valkey | docker.io/valkey/valkey:9-alpine |  |
+| meilisearch | getmeili/meilisearch:v1.26 |  |
 | meme-search-pro | ghcr.io/neonwatty/meme_search_pro:latest | Meme search engine built with Python and Ruby |
 | meme-search-pro-img2txt-gen | ghcr.io/neonwatty/image_to_text_generator:latest |  |
 | meme-search-db | pgvector/pgvector:pg17 |  |
@@ -123,6 +124,7 @@
 | nocodb | nocodb/nocodb:latest | Turn any SQL-based database into a smart spreadsheet |
 | nocodb-pg-db | postgres:16-alpine |  |
 | nocodb-valkey | docker.io/valkey/valkey:9-alpine |  |
+| ollama | ollama/ollama:latest |  |
 | ombi | lscr.io/linuxserver/ombi:latest | Media Requests |
 | omnitools | iib0011/omni-tools:latest | Tools for common tasks |
 | omnipoly | kweg/omnipoly:latest | Open-source language translation with LanguageTool, LibreTranslate, & Ollama |
@@ -162,7 +164,7 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.16.47 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.16.45 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
@@ -179,11 +181,12 @@
 | soularr-dashboard | ghcr.io/mrusse/soularr:main | Dashboard for monitoring Soularr |
 | soulseek | slskd/slskd | Modern client-server application for the Soulseek file-sharing network. |
 | speedtest-tracker | lscr.io/linuxserver/speedtest-tracker:latest | Self-hosted internet performance tracking |
+| stable-diffusion-webui | ghcr.io/neggles/sd-webui-docker:latest |  |
 | stirling-pdf | docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest | PDF Operations |
 | swag | lscr.io/linuxserver/swag:latest | SWAG Dashboard for proxies |
 | tandoor | vabene1111/recipes | Recipes, cookbooks, meal-planning, & grocery lists |
 | tandoor-pg | postgres:16-alpine |  |
-| tdarr | ghcr.io/haveagitgat/tdarr:2.58.02 | Distributed transcode automation |
+| tdarr | ghcr.io/haveagitgat/tdarr:2.57.01 | Distributed transcode automation |
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
 | vault | hashicorp/vault:latest | HashiCorp Vault for secrets, key/value stores, etc. |

docker-compose.yml

@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:1be494495248d53e3558b198a1c704e6b559d5e99fe4c926e14a8ad24d76c6fa
+  image: docker.io/valkey/valkey:9-alpine@sha256:b4ee67d73e00393e712accc72cfd7003b87d0fcd63f0eba798b23251bfc9c394
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:7f38b450cc3b7523dd5377792895e58b9cf333769e5a27f89e643b6f5fc60565
+    image: docker.io/actualbudget/actual-server:latest@sha256:8f72d73e68958566850325c1f9fe780a4477340979969bd6979649dc519723ab
     labels:
       swag: enable
       swag_port: 5006
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
+    image: adguard/adguardhome:v0.107.69@sha256:8a4107ec812023842ccab9e04600c5d39d3be6b15e907c34a36339c184c8fccf
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:8b607429101cb393764025dd459346c0fa167c6cd55627ee051d16f8a48d5a93
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:a99a83e24e09d548279906495ba26b7f7def29feae0300583085780cd162a98d
     labels:
       swag: enable
       swag_proto: http
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:14f02666642586a64d6fae8ef42d479fd76456a77c73ae8a626b8fe323b76d22
+    image: postgres:14-alpine@sha256:1bf14357b97fe10f21f2eda7f0d230b2514ab5770ab81cb9cd6cce6750d68b26
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:e23adb24848d99d19cd1e251aee4e1e12ed4f5effc8ccb21754b062b6a06cf66
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:6fbd7dc95d53c6e168ce69e760b87c334e3b9ba88bf7b8531ed5a116d5d6da03
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -470,7 +470,7 @@ services:
         condition: service_healthy
     environment:
       AI_MODEL_PROVIDER: OLLAMA
-      OLLAMA_SERVER_URL: http://192.168.1.249:11434/api/generate
+      OLLAMA_SERVER_URL: http://ollama:11434/api/generate
       SERVICE_TYPE: "flask"
       MEDIASERVER_TYPE: "navidrome"
       NAVIDROME_URL: http://navidrome:4533/
@@ -482,8 +482,8 @@ services:
       POSTGRES_HOST: audiomuse-ai-pg
       POSTGRES_PORT: 5432
       REDIS_URL: redis://audiomuse-ai-valkey:6379/0
-      TEMP_DIR: /app/temp_audio
-    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
+      TEMP_DIR: /app/temp_audio"
+    image: ghcr.io/neptunehub/audiomuse-ai:0.7.11-beta@sha256:f934eb528940eef42a39fe3ba8b6d99d9972326efbbc2d2ec50f039281550137
     labels:
       homepage.group: Media Library
       homepage.name: AudioMuse-AI
@@ -543,7 +543,7 @@ services:
         condition: service_healthy
     environment:
       AI_MODEL_PROVIDER: OLLAMA
-      OLLAMA_SERVER_URL: http://192.168.1.249:11434/api/generate
+      OLLAMA_SERVER_URL: http://ollama:11434/api/generate
       SERVICE_TYPE: "worker"
       MEDIASERVER_TYPE: "navidrome"
       NAVIDROME_URL: http://navidrome:4533/
@@ -556,7 +556,7 @@ services:
       POSTGRES_PORT: 5432
       REDIS_URL: "redis://audiomuse-ai-valkey:6379/0"
       TEMP_DIR: "/app/temp_audio"
-    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
+    image: ghcr.io/neptunehub/audiomuse-ai:0.7.11-beta@sha256:f934eb528940eef42a39fe3ba8b6d99d9972326efbbc2d2ec50f039281550137
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -585,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:12ca4e715f8c3a8c7ae1a2d0ef35cc0fe5d137255d6fc08fc20d83e909dfb23c
+    image: authelia/authelia:master@sha256:f16fd4a617959898c83b1ec72a1a62e013b324d4be2f100248f589b94cae1404
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -679,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:648f694532a3a53d8cf78bc888919ef538659bad41af4c680b0427ad1047d171
+    image: lscr.io/linuxserver/bazarr:latest@sha256:2be164c02c0bb311b6c32e57d3d0ddc2813d524e89ab51a3408c1bf6fafecda5
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -726,7 +726,7 @@ services:
     container_name: beszel
     extra_hosts:
       - host.docker.internal:host-gateway
-    image: henrygd/beszel:latest@sha256:185142e6c91bd44c77fef6cd31784aee0f782eb1d7193c3ee34a9902a936621c
+    image: henrygd/beszel:latest@sha256:24c5513b364a2cb6f966819389128999817afbaebfe81ba2980289e39326f484
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Beszel
@@ -767,7 +767,7 @@ services:
       KEY: "${BESZEL_RINOA_AGENT_KEY}"
     expose:
       - 45876
-    image: henrygd/beszel-agent:latest@sha256:730ac49d1a89d315b5a9424ad8cca2f586e981da7caf151c5ec2d599f474efad
+    image: henrygd/beszel-agent:latest@sha256:dee59d68ac327a755aec7651dd31b9f9a6d7db3da6f093e16e8c36c1f71a18cd
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -889,7 +889,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:e38a849a8e294a64a1e97cf664bc2b716da208dee8ab20a668cc06dc79b6f885
+    image: ghcr.io/browserless/chromium:latest@sha256:78069f933b3b457410a9348845d7273d8ada8e2f10a85b5f5a7e9895f1334093
     labels:
       swag: enable
       swag_proto: http
@@ -949,7 +949,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:99cf11f04b5d1f1300b5b68f17dc22e76bdb5d6695d7e6590d2df92eca8fb339
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:46ed4c0d67cd78228df430a4e56956a233f7055576b64fc849b4487e6d2c303d
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -980,7 +980,7 @@ services:
     cap_add:
       - SYS_ADMIN
     container_name: changedetection-chrome
-    image: dgtlmoon/sockpuppetbrowser:latest@sha256:50619e56663d81c2b46a2219ea91220c05d2e403448df8bdff12dbe4b1ab910b
+    image: dgtlmoon/sockpuppetbrowser:latest@sha256:9f2df6791a4cd9b2c3138cb62b5a8de7f27953cab84729fe09d28cbd341a8973
     environment:
       SCREEN_WIDTH: 1920
       SCREEN_HEIGHT: 1024
@@ -1048,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:0d5da9f389a60f12f1154cfd0c3e062d5dbe997dd235280c017a5ca679230b7c
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:b64687779bbe0dcd41f9854129ce8fa9d6c5f009e1992a79bed97c85fe253eaf
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1074,7 +1074,7 @@ services:
     container_name: convertx
     environment:
       JWT_SECRET: ${CONVERTX_JWT_SECRET}
-    image: ghcr.io/c4illin/convertx@sha256:1402221b314c794e918a219b7f7698a214e447304472ca406acccc91e9537e63
+    image: ghcr.io/c4illin/convertx@sha256:53f2c04ebe63fdfb4d812ee66b78a5db9360c729f3defe3dcc864256ff91a7cb
     labels:
       homepage.group: System Administration
       homepage.name: ConvertX
@@ -1131,7 +1131,7 @@ services:
         timokoessler/mongodb
         timokoessler/uptime-kuma
         xs539/joplin-server
-    image: crowdsecurity/crowdsec:latest@sha256:4312a5109057f2a6b1237431abe638cd1026ecb3a9c2707c6ccc1ed09e4cb994
+    image: crowdsecurity/crowdsec:latest@sha256:4beb1633cf4f41bb6f9e64d065d151d3aa5e3aa7082d5c3061a243037db0d890
     networks:
       default: null
     ports:
@@ -1158,7 +1158,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:791299d1e7e382fb2426bcc3bbb4f29d51e9a63f96c5aa40d590f72285d02a53
+    image: metabase/metabase@sha256:bbea3d5c486de65f1b80b2315c36b184ec9ee66525cf49e8c596b3707485008a
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1226,7 +1226,7 @@ services:
       WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
       WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
       CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:bd07aa45527db7bcca72eff9c6234a038013ca70501c00e8539eb5d4f0359389
+    image: jlesage/czkawka@sha256:03109f40d1bc41ebe24c2fd3ee81429950338591bbb64c4cf39ec6160fee75a4
     labels:
       homepage.group: System Administration
       homepage.name: Czkawka
@@ -1274,7 +1274,7 @@ services:
       DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:27d105fad9661008aadd9060a6405619c7f30aaa747198c7c423aac37bfc3229
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:b887c230850789aefd386a6bf33fbc4805b66ab324a80fc92af61570454e1434
     labels:
       homepage.group: Automation
       homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:4f83ccbfcbc5166ba9f96ba7571ab0812c2596f99079ceffc7808a3f896bef0b
+    image: freikin/dawarich:latest@sha256:660d55f9309f63ad259e021c3e6817245200d5faf2cc44e3b5c7fcef0c79e09d
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1443,7 +1443,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:4f83ccbfcbc5166ba9f96ba7571ab0812c2596f99079ceffc7808a3f896bef0b
+    image: freikin/dawarich:latest@sha256:660d55f9309f63ad259e021c3e6817245200d5faf2cc44e3b5c7fcef0c79e09d
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1459,7 +1459,7 @@ services:
       - dawarich-valkey-data:/data/valkey
   dead-man-hand:
     container_name: dead-man-hand
-    image: ghcr.io/bkupidura/dead-man-hand:latest@sha256:bdfcc5b2429bf02aa37ec78e120078572fd6f8e4161973ec4d0250c7ad378779
+    image: ghcr.io/bkupidura/dead-man-hand:latest@sha256:31905f19678f60d55ecdfa63dad009c07e2055cb5db0c608c8cab5de4467050e
     environment:
       DMH_CONFIG_FILE: /data/config.yaml
     labels:
@@ -1506,7 +1506,7 @@ services:
       TASKS: 1
       VOLUMES: 1
       LOG_LEVEL: debug
-    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476
+    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:3400c429c5f9e1b21d62130fb93b16e2e772d4fb7695bd52fc2b743800b9fe9e
     networks:
       default: null
     ports:
@@ -1611,9 +1611,6 @@ services:
       DOCKER_HOST_2_URL: tcp://192.168.1.252:2375
       DOCKER_HOST_2_NAME: Rikku
       DOCKER_HOST_2_PUBLIC_NAME: 192.168.1.252
-      DOCKER_HOST_3_URL: tcp://192.168.1.249:2375
-      DOCKER_HOST_3_NAME: Ultima
-      DOCKER_HOST_3_PUBLIC_NAME: 192.168.1.249
     labels:
       swag: enable
       swag_proto: http
@@ -1642,7 +1639,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:0994aa6da740efe41d4070cc618d525b5b42a13645896344ca0eeafab5f3bd65
+    image: lscr.io/linuxserver/duplicati:latest@sha256:fcb122b63f4203f9876c19dd71077b456108bbbe9615d9fbf57a8e6454d6382e
     labels:
       swag: enable
       swag_port: 8200
@@ -1695,7 +1692,7 @@ services:
         type: bind
   excalidraw:
     container_name: excalidraw
-    image: "excalidraw/excalidraw:latest@sha256:95d528cb4f8d18e0fbdc42ae3d09b5c4a899bfbd6bb89eeaf94b904330d79714"
+    image: "excalidraw/excalidraw:latest@sha256:7f48a686abb742397c1a9dc146812a60198e356c1fece05c2f1e011d2971c3bf"
     labels:
       homepage.group: Personal Tools
       homepage.name: Excalidraw
@@ -1779,7 +1776,7 @@ services:
       BROWSER_TIMEOUT: 40000
       TEST_URL: https://duckduckgo.com
     hostname: Rinoa
-    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
+    image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:4f4e5f759aa3a9a64305e99188ea1db1ec2944a5e7d290d2b089af5f2f6f48e4
     networks:
       default: null
     ports:
@@ -1858,7 +1855,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:8984a1bea469dfb641be13a72280c2380420dd2c70ede708e5e18687805aa7e3
+    image: ghost:latest@sha256:8a30cacb126262887f4db101e438271ade0b51437917b8165d26b0fede72ccf2
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1963,7 +1960,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:da076311f78c56e4bf6548ef3668fa77fa2865c5efca3f79a6d6bb9b3710b477
+    image: postgres:14@sha256:ca25035f7e6f74552655a1c5e4a9eb21f85e9d316f1f70371f790ef70095dd58
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -2144,7 +2141,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:7dc099d5c6ec7fc945d858218565925b01ff8a60bcbfda990fc680a8b5cd0b6e
+    image: ghcr.io/gethomepage/homepage:latest@sha256:b6ac42c31845ea7c862d71451c16413a6284430d8ff08e16ad791f42718a7c71
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2165,7 +2162,7 @@ services:
   hugo:
     command: hugo server --baseURL "it-services.${MY_TLD}" --bind 0.0.0.0 --appendPort=false --source=/src/ --configDir=/src/config/ -e production --logLevel debug
     container_name: hugo
-    image: hugomods/hugo:exts@sha256:3e1c26aa57083565ff09db8d45fb58d9f42fd9d6d497dd5326afe6df77a3712f
+    image: hugomods/hugo:exts@sha256:86b9a9ee8915be9cd5e9b555082352ab502daebf12c0bdae0a513f5340586496
     labels:
       swag: enable
       swag_proto: http
@@ -2219,7 +2216,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:7e2d0df478651551df3358072e68c235200b875eccd6eb4a5c5d8879a7095cf4
+    image: ghcr.io/immich-app/immich-server:release@sha256:f8d06a32b1b2a81053d78e40bf8e35236b9faefb5c3903ce9ca8712c9ed78445
     labels:
       swag: enable
       swag_proto: http
@@ -2262,7 +2259,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b3deefd1826f113824e9d7bc30d905e7f823535887d03f869330946b6db3b44a
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:379e31b8c75107b0af8141904baa8cc933d7454b88fdb204265ef11749d7d908
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2362,7 +2359,7 @@ services:
       DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: /run/secrets/influxdb2-admin-token
       DOCKER_INFLUXDB_INIT_ORG: rinoa
       DOCKER_INFLUXDB_INIT_BUCKET: rinoa
-    image: influxdb:2-alpine@sha256:fb537cf0d57937a57eac33efd079ae5b36a1d35437dc1eba1ecb8800a352b62a
+    image: influxdb:2-alpine@sha256:b4dbe25bb8f8be38f9cf5a12cbca453318a1ad3475954e9d37c38f6e5bc5006b
     labels:
       swag: enable
       swag_proto: http
@@ -2433,7 +2430,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:07a1dd6893e6311e341067cf61ba5f920184e40339e4b4e195f5713f99311343
+    image: quay.io/invidious/invidious-companion:latest@sha256:9c6039ebe1691e70c76aefd207b1ea2784a4d8d1a7c531cdb18e6d1317c468e9
     logging:
       options:
         max-size: "1G"
@@ -2457,7 +2454,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:da076311f78c56e4bf6548ef3668fa77fa2865c5efca3f79a6d6bb9b3710b477
+    image: docker.io/library/postgres:14@sha256:ca25035f7e6f74552655a1c5e4a9eb21f85e9d316f1f70371f790ef70095dd58
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2506,7 +2503,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:6d819e9ab067efcf712993b23455cc100ee5585919bb297ea5a109ac00cb626e
+    image: jellyfin/jellyfin@sha256:1edf3f17997acbe139718f252a7d2ded2706762390d787a34204668498dbc5f6
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3133,7 +3130,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3165,7 +3162,7 @@ services:
       POSTGRES_USER: ${JOPLIN_POSTGRES_USER}
       POSTGRES_PORT: 5432
       POSTGRES_HOST: joplin-db
-    image: joplin/server:latest@sha256:5d9e7f9d31b436cb1b99d1a6a65d8c5bf760829094617e8ad1e956fd925de888
+    image: joplin/server:latest@sha256:95b67dc6a4e77a974ac2bcc86818cbbfe5495e7b62d06a66f848a877878dce53
     labels:
       homepage.group: Personal Tools
       homepage.name: Joplin
@@ -3189,7 +3186,7 @@ services:
     restart: unless-stopped
   karakeep:
     container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:bbdc3274bbe510cac32551b2a8825019f61d23c261ddb8baa9bb4311caed31c4
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:cd2348520ba25bbee64199468cd41758ab325eecd6a3a5c40cd6443a1607f9e9
     environment:
       BROWSER_WEB_URL: http://chrome:9222
       DATA_DIR: /data
@@ -3199,7 +3196,7 @@ services:
       NEXTAUTH_SECRET: ${KARAKEEP_NEXTAUTH_SECRET}
       NEXTAUTH_URL: https://kkeep.${MY_TLD}
       OPENAI_API_KEY: ${LIBRECHAT_OPENAI_API_KEY}
-      OLLAMA_BASE_URL: http://192.168.1.249:11434
+      OLLAMA_BASE_URL: http://ollama:11434
     labels:
       homepage.group: Lifestyle
       homepage.name: Karakeep
@@ -3244,7 +3241,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:e1d5512317e8ffb5f14d496da8ad3a1f320700fa58090cf51a6d3232a6357f4d
+    image: libretranslate/libretranslate@sha256:f458dd6729ed50646ed08fcda52515dbcc60688100afc56c0f818272ee739606
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3278,7 +3275,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:ede2bb17350cc97a0d3f24389aa91803f655eac29aa022c77a71f4a61cc621e4
+    image: lscr.io/linuxserver/lidarr:latest@sha256:01d64fdba60554f5928b2ff8294a45c2e049423d5a9bac62167c40bdaeca231f
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3371,7 +3368,7 @@ services:
         type: bind
   linkstack:
     container_name: linkstack
-    image: linkstackorg/linkstack:latest@sha256:2b298302ab50184cf99294ef3ae6a3c49c13081162e9a1d067a872e9c75b3e55
+    image: linkstackorg/linkstack:latest@sha256:abd691b4293b020a317de8794737671e0315159efcb868e8a4124d6f0611f7ae
     environment:
       TZ: ${TZ}
       SERVER_ADMIN: noreply@${MY_TLD}
@@ -3432,7 +3429,6 @@ services:
     networks:
       default: null
     ports:
-      - 3890:3890
       - 17170:17170
     profiles: ["rinoa-apps"]
     restart: always
@@ -3513,17 +3509,11 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-      DATABASE_URL: postgresql://manyfold:${MANYFOLD_PG_DB_PASSWORD}@manyfold-pg-db:5432/manyfold
-      REDIS_URL: redis://manyfold-valkey:6379/0
+      DATABASE_URL: sqlite3:/config/manyfold.sqlite3
+      REDIS_URL: redis://manyfold-valkey:6379/2
       SECRET_KEY_BASE: ${MANYFOLD_SECRET_KEY_BASE}
       MUTLIUSER: enabled
-      MANYFOLD_LOG_LEVEL: info
-      SMTP_SERVER: postal-smtp
-      SMTP_PORT: 25
-      SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
-      SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
-      SMTP_FROM_ADDRESS: noreply@${MY_TLD}
-    image: lscr.io/linuxserver/manyfold:0.130.1
+    image: lscr.io/linuxserver/manyfold:latest@sha256:920f5d8b599339f86f6880d30e553dd1760612371a71bb9d252ea646261e9e54
     labels:
       homepage.group: Lifestyle
       homepage.name: Manyfold
@@ -3545,26 +3535,8 @@ services:
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
-      - ${DOCKER_VOLUME_CONFIG}/manyfold/library:/libraries
-  manyfold-pg-db:
-    container_name: manyfold-pg-db
-    environment:
-      POSTGRES_USER: manyfold
-      POSTGRES_PASSWORD: ${MANYFOLD_PG_DB_PASSWORD}
-      POSTGRES_DB: manyfold
-    expose:
-      - 5432
-    healthcheck:
-      test: pg_isready -q -t 2 -d $$POSTGRES_DB -U $$POSTGRES_USER
-      start_period: 20s
-      timeout: 30s
-      interval: 10s
-      retries: 5
-    image: postgres:18-alpine
-    profiles: ["rinoa-apps"]
-    restart: always
-    volumes:
-      - manyfold-pg-db:/var/lib/postgresql/data
+      - ${DOCKER_VOLUME_CONFIG}/manyfold/config:/config
+      - ${DOCKER_VOLUME_CONFIG}/manyfold/library:/libraries #optional
   manyfold-valkey:
     container_name: manyfold-valkey
     <<: *valkey-params
@@ -3587,7 +3559,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:1fa6fab7aed1a1acbe4a60d62bf89e9ba4d1e16b331c8a64f80b14e0117ebd88
+    image: linuxserver/mariadb@sha256:73a403f999eb7317b0fcd084f42bd77ed813f4e09d2a4ebc1ba90ea48e43041a
     networks:
       default: null
     ports:
@@ -3641,7 +3613,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:053797d91ed25f30004bce69434269b1f673c33b524ce3aadbdcf76cd556a210
+    image: lscr.io/linuxserver/mastodon:latest@sha256:32b5274a9ad46981c1d9ca99616bf876f03d1526e68efa548fac2ea157282033
     labels:
       swag: enable
       swag_proto: http
@@ -3682,7 +3654,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3704,7 +3676,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:88561d729704988e6592198fd2ee4fbc60cd7fee7e8f9eaa6f7c4e919a01347a
+    image: getmaxun/maxun-backend:latest@sha256:165b3d4135b8ad2a30c2eb0c30a027e779966b6241aa5482143c518d27e64d15
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3720,7 +3692,7 @@ services:
     depends_on:
       - maxun-backend
     <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:88822f950c81a17bfe760b31bea5979a5a93bf69a4813ae4b94a0d9f6c75577c
+    image: getmaxun/maxun-frontend:latest@sha256:e1885e6050eabbf01e6ed464ab82a66005223b289ddd4faa74f6e99fc470ca03
     labels:
       swag: enable
       swag_proto: http
@@ -3748,7 +3720,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3769,6 +3741,20 @@ services:
     <<: *valkey-params
     volumes:
       - maxun-valkey-data:/data/valkey
+  meilisearch:
+    container_name: meilisearch
+    environment:
+      MEILI_HOST: http://meilisearch:7700
+      MEILI_NO_ANALYTICS: true
+      MEILI_MASTER_KEY: ${MEILISEARCH_MASTER_KEY}
+    image: getmeili/meilisearch:v1.26@sha256:773759814f59214a0971dc8810ae1d85002e92166d99760cd546d5ee8ac37c14
+    ports:
+      - 7700:7700
+    profiles: ["rinoa-apps"]
+    restart: always
+    user: ${PUID}:${PGID}
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/meilisearch:/meili_data
   meme-search-pro:
     container_name: meme-search-pro
     depends_on:
@@ -3984,7 +3970,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:32b5cbf6e1075ad0f5eb2b880ee61e985d5135519a7a34a7d81712af37f27913
+    image: mongo:7@sha256:542095b9517562dbbd4dd061a19459168237eb5f26841ac0e56c89ebb2eb4173
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -4020,7 +4006,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:7e2709a4c06e2a8dc8ceeebb5f6d02cc43076b1a0b64bd68e8f868bebc989e19
+    image: foxxmd/multi-scrobbler@sha256:5c261a306f4ee714ebf0e3a0f2aa6c74d312b938a0524884cc42755e91f1343e
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -4107,7 +4093,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
+    image: deluan/navidrome:latest@sha256:648ebd45c50c58edc7ad9f0cc3b4411a1bece16c81f0b3630a0ab0a739c6d7ec
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4147,7 +4133,7 @@ services:
     environment:
       TZ: ${TZ}
       PORT: 20211
-    image: jokobsk/netalertx:latest@sha256:fd1a4ca4bd4c0f38797b36b4ec5b0928d7add7b9add788d9cedb11fd25a42a65
+    image: jokobsk/netalertx:latest@sha256:9304e29cd71bf9ddc9f33d6a7ddb3d71bab71815e077ab330f86bcc081598a79
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4191,7 +4177,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:33f46abc48b1a12aa6eef5dda9cdf39403f4b5f8537b3791e8f45ffcd7928992
+    image: nextcloud/all-in-one:latest@sha256:090f59bbef2c6753b2ac58163d3bece84b15af19d9d83d02c33da83080cb6400
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4279,7 +4265,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4289,6 +4275,15 @@ services:
     <<: *valkey-params
     volumes:
       - nocodb_valkey_data:/data/valkey
+  ollama:
+    container_name: ollama
+    image: ollama/ollama:latest@sha256:d4188c1dfa870386a14e299976aed96daeb83876b69e1a852c9d09ea76463b9f
+    ports:
+      - 11434:11434
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - ollama:/root/.ollama
   ombi:
     container_name: ombi
     environment:
@@ -4339,7 +4334,7 @@ services:
         type: bind
   omnitools:
     container_name: omnitools
-    image: iib0011/omni-tools:latest@sha256:4c89fb9492482b9cb9cbe65b5d2c67d4d281705c079ad0e53a23520526020aad
+    image: iib0011/omni-tools:latest@sha256:66027051e7fcf25ca898f3ddddb1e7a7a6682fea4985ca4b96444a7b9d5a984c
     labels:
       homepage.group: Personal Tools
       homepage.name: OmniTools
@@ -4371,7 +4366,7 @@ services:
     environment:
       LANGUAGE_TOOL: http://languagetool:8010
       LIBRETRANSLATE: http://libretranslate:5000
-      OLLAMA: http://192.168.1.249:11434
+      OLLAMA: http://ollama:11434
       OLLAMA_MODEL: smollm2:1.7b
       THEME: "pole"
       DISABLE_DICTIONARY: false
@@ -4397,38 +4392,30 @@ services:
     restart: unless-stopped
   open-webui:
     container_name: open-webui
+    depends_on:
+      ollama:
+        condition: service_started
+        required: true
+      stable-diffusion-webui:
+        condition: service_started
+        required: true
     environment:
-      OLLAMA_BASE_URLS: http://192.168.1.249:11434;http://192.168.1.248:11434
-      WEBUI_AUTH: true
-      ENABLE_PASSWORD_VALIDATION: true
-      ENABLE_SIGNUP_PASSWORD_CONFIRMATION: true
-      ENABLE_SIGNUP: true
-      ENABLE_LOGIN_FORM: true
+      OLLAMA_BASE_URLS: http://ollama:11434;http://192.168.1.250:11434;http://192.168.1.252:11434
+      WEBUI_AUTH: false
       ENABLE_IMAGE_GENERATION: "true"
-      AUTOMATIC1111_BASE_URL: http://192.168.1.248:7860
+      AUTOMATIC1111_BASE_URL: http://stable-diffusion-webui:7860
       IMAGE_SIZE: "1024x1024"
       IMAGE_STEPS: "3"
       ENABLE_OTEL: true
       ENABLE_OTEL_METRICS: true
       OTEL_EXPORTER_OTLP_INSECURE: true # Use insecure connection for OTLP, remove in production
-      OTEL_EXPORTER_OTLP_ENDPOINT: http://192.168.1.254:4317
+      OTEL_EXPORTER_OTLP_ENDPOINT: http://signoz-otel-collector:4317
       OTEL_SERVICE_NAME: open-webui
       ENABLE_RAG_WEB_SEARCH: True
       RAG_WEB_SEARCH_ENGINE: searxng
       RAG_WEB_SEARCH_RESULT_COUNT: 3
       RAG_WEB_SEARCH_CONCURRENT_REQUESTS: 10
-      SEARXNG_QUERY_URL: "https://search.trez.wtf/search?q=<query>"
-      ENABLE_LDAP: true
-      LDAP_SERVER_LABEL: rinoa-ldap
-      LDAP_SERVER_HOST: lldap
-      LDAP_SERVER_PORT: 3890
-      LDAP_ATTRIBUTE_FOR_MAIL: mail
-      LDAP_ATTRIBUTE_FOR_USERNAME: uid
-      LDAP_APP_DN: uid=authelia,ou=people,dc=trez,dc=wtf
-      LDAP_APP_PASSWORD: ${AUTHELIA_AUTH_BIND_LDAP_PASSWORD}
-      LDAP_SEARCH_BASE: dc=trez,dc=wtf
-      LDAP_SEARCH_FILTER: "(objectClass=inetOrgPerson)"
-      LDAP_USE_TLS: false
+      SEARXNG_QUERY_URL: "http://searxng:8080/search?q=<query>"
       # LibreTranslate
       LT_DEBUG: false
       LT_UPDATE_MODELS: true
@@ -4444,7 +4431,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:c8e04b9319257448fa4e7ad140cb6596994217ec83d6e7656ccba649bf557318
+    image: ghcr.io/open-webui/open-webui:main@sha256:c0297cf2f76e0ba21d19eb3a21753d3b271c0247694cba3948677d2a97ec559f
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4454,6 +4441,7 @@ services:
       swag: enable
       swag_port: 8080
       swag_proto: http
+      swag_auth: authelia
       swag_url: ai.${MY_TLD}
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -4495,7 +4483,7 @@ services:
       PAPERLESS_URL: https://docs.${MY_TLD}
       USERMAP_GID: ${PGID}
       USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:8cbd8ce3ef1857bd144026a7e7192d0889188352b5271631e42ff069ccceeb74
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:8ffd737c69a569bbdadc118e7f54b0b1050ffac2868fdf9e390a68cb7c82a79d
     labels:
       swag: enable
       swag_proto: http
@@ -4587,7 +4575,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4662,7 +4650,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4776,7 +4764,7 @@ services:
     expose:
       - 9000
       - 9443
-    image: portainer/portainer-ce:alpine@sha256:a04e0ac3e99172e451055419e2ed46c67f24bff72209ab09235079d7642e87d8
+    image: portainer/portainer-ce:alpine@sha256:5135ffc483be84b773288c92c80a054a234abcf615975d6122cbe930f5c65d27
     labels:
       swag: enable
       swag_proto: http
@@ -4950,7 +4938,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:67a8aaedcfd6989f3030b937a6a07007310b1dfc7ee8df16d2cbfa48d1c1158c
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:475853535de3de8441b87c1457c30f2e695f4831228b12b6b7274e9da409d874
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -4997,7 +4985,7 @@ services:
       qbittorrentvpn:
         required: true
         condition: service_started
-    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:4f36632a138b4e5aeab3b765b7f389087bfb140c80dbbec1343eca74dc351245
+    image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:94399ef83005856209dcb61756427f00e4907092b7c44ba8ee8d631c81daef20
     environment:
       # Web API Configuration
       QBT_WEB_SERVER: true # Set to true to enable web API
@@ -5166,7 +5154,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:6c0948b42c149e36bb3dbc0b64d36c77b2d3c9dccf1b424c4f72af1e57ba0c21
+    image: lscr.io/linuxserver/radarr:latest@sha256:06ac318ecb95a34c7b229568dcb4271f02cb5007bb189a0dd67a2032864187ca
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5261,7 +5249,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5330,7 +5318,7 @@ services:
       REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION: off
       REDLIB_DEFAULT_HIDE_SCORE: off
       REDLIB_DEFAULT_FIXED_NAVBAR: on
-    image: quay.io/redlib/redlib:latest@sha256:dffb6c5a22f889d47d8e28e33411db0fb6c5694599f72cf740c912c12f5fc1c6
+    image: quay.io/redlib/redlib:latest@sha256:25dbb5466ebd22e58277d4aa54897899b044f02f7219ca3054784aecc0be34e1
     labels:
       homepage.group: Social
       homepage.name: Redlib
@@ -5668,7 +5656,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
+    image: searxng/searxng:latest@sha256:fc076352d72154feb1d8c0eb42dd5570a3ebc9ca8c6b9c8318ce545a8dfd1ea4
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5726,7 +5714,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.16.47@sha256:71aabf9314d1051ab92025f26809daea72bd90cb78a6a2badfe15400acf11619
+    image: semaphoreui/semaphore:v2.16.45@sha256:979a5924ed459d5169178197fc7b4d849bcb6fbb4aded1f1d1c0b279717b5187
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5984,7 +5972,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -5998,7 +5986,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:8b9f2138ec50fc9e521960868f79d2ad0d529bc610aef19031ea8ff80b54c5e0
+    image: lscr.io/linuxserver/sonarr:latest@sha256:2fc9c36769a3f50ab529e7ccc37687d118ab42199b01588573f03b3393cc3223
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6102,7 +6090,7 @@ services:
       TZ: ${TZ}
       #Script interval in seconds
       SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:b41d4f8ec74e9eded55e0096ddb40ba155ff3288f87b50639d57e5ba4c980159
+    image: mrusse08/soularr:latest@sha256:71a0b9e5a522d76bb0ffdb6d720d681fde22417b3a5acc9ecae61c89d05d8afc
     network_mode: service:gluetun
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -6121,7 +6109,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:15bcdf0bcbce937f39c1c93ba8384fc1508e849bff943b56e4bc79a076af9ea2
+    image: ghcr.io/mrusse/soularr:main@sha256:61181c5809845d2c49c8c3c182c0280c5c91069cd2e5d7c341ddd8bfa2c01598
     labels:
       homepage.name: Soularr
       homepage.group: Downloaders
@@ -6156,7 +6144,7 @@ services:
         condition: service_started
         required: true
         restart: true
-    image: slskd/slskd@sha256:e3635858d9614a2fb811601afca706dbf97a6838b849905c27294cbce71be268
+    image: slskd/slskd@sha256:239ccb871fa1a624aa8ad4f11a712b4ec6c7a2ff570bf5800abae2cf91030834
     labels:
       homepage.name: Soulseek
       homepage.group: Downloaders
@@ -6185,7 +6173,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:ce42fcb3c4fdcceb22e8c91ad93b8293ea0fe0873221f07fce36aed65b6a1f51
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:79d7d058cbc12a6311c4c284f0c2fb781a02e96079215ce500ac5eba6a5d676d
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6217,6 +6205,21 @@ services:
     restart: unless-stopped
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/speedtest-tracker:/config
+  stable-diffusion-webui:
+    container_name: stable-diffusion-webui
+    image: ghcr.io/neggles/sd-webui-docker:latest@sha256:1795fe796e1dad0d8d3baa9ef7c38a255b69c0878b76869feecc617bfd015e53
+    environment:
+      CLI_ARGS: "--api --use-cpu all --precision full --no-half --skip-torch-cuda-test --ckpt /empty.pt --do-not-download-clip --disable-nan-check --disable-opt-split-attention"
+      PYTHONUNBUFFERED: "1"
+      TERM: "vt100"
+      SD_WEBUI_VARIANT: "default"
+    ports:
+      - 7860:7860
+    profiles: ["rinoa-apps"]
+    restart: unless-stopped
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/stable-diffusion-webui/data:/data
+      - ${DOCKER_VOLUME_CONFIG}/stable-diffusion-webui/output:/output
   stirling-pdf:
     container_name: stirling-pdf
     environment:
@@ -6225,7 +6228,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:940c83732d373b08efd110de708d51d639705404de7dabc7230e5665819efb4a
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:281cd2f5d5bb747ce6cd19c54d7ef8e9597bdee2e67eb88fa701f684c8b35654
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6277,7 +6280,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:c8afbd137c2f44a13c913cd24ba0cdf77ed03d1e6c500af11ae97b300d533e6d
+    image: lscr.io/linuxserver/swag:latest@sha256:18b676423642f88b50112e03adaa0303a3868c786bf19f72e6feb61bbff2138d
     labels:
       swag: enable
       swag_proto: http
@@ -6379,7 +6382,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6410,7 +6413,7 @@ services:
       cronPluginUpdate:
       NVIDIA_DRIVER_CAPABILITIES: all
       NVIDIA_VISIBLE_DEVICES: all
-    image: ghcr.io/haveagitgat/tdarr:2.58.02@sha256:20a5656c4af4854e1877046294f77113f949d27e35940a9a65f231423d063207
+    image: ghcr.io/haveagitgat/tdarr:2.57.01@sha256:a20579b19d95d532153fe0f53300227f64f72192b108ee1fb18c455cc8f6d86d
     labels:
       homepage.group: Servarr Stack
       homepage.name: Tdarr
@@ -6448,7 +6451,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:f0cdf77d9e18f79f7c27e13e269c1bd74378c5dcc1d644540ba22795076f9eb8
+    image: josh5/unmanic:latest@sha256:0105922cd085440b047b9e3343741293ceaabcecdc3ad64533ea4135dcf78f75
     labels:
       homepage.group: Media Library
       homepage.name: Unmanic
@@ -6502,7 +6505,7 @@ services:
       UPTIME_KUMA_PASSWORD: ${UPTIME_KUMA_PASSWORD}
       DOCKER_HOST: tcp:/${DOCKER_VOLUME_CONFIG}proxy:2375
     hostname: Rinoa
-    image: louislam/uptime-kuma:latest@sha256:431fee3be822b04861cf0e35daf4beef6b7cb37391c5f26c3ad6e12ce280fe18
+    image: louislam/uptime-kuma:latest@sha256:3d632903e6af34139a37f18055c4f1bfd9b7205ae1138f1e5e8940ddc1d176f9
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Uptime Kuma
@@ -6633,7 +6636,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:55100f0904f7006ecd304c6b6c42d36e989f0815decdc1d54bd7ebfdaeea613e
+    image: clidey/whodb@sha256:56e882a1c55de08bbfdd64fb3dcc18d5f1037b68b7031cb0a29f45c8420e1950
     environment:
       WHODB_CLICKHOUSE_1: '{
         "host": "signoz-clickhouse"
@@ -6769,7 +6772,7 @@ services:
         "host": "plant-it-valkey"
         }'
       WHODB_SQLITE3_1: '{"database":"kuma.db"}'
-      WHODB_OLLAMA_HOST: 192.168.1.249
+      WHODB_OLLAMA_HOST: ollama
       WHODB_OLLAMA_PORT: 11434
       WHODB_ANTHROPIC_API_KEY: ${LIBRECHAT_ANTHROPIC_API_KEY}
       WHODB_OPENAI_API_KEY: ${LIBRECHAT_OPENAI_API_KEY}
@@ -6808,7 +6811,7 @@ services:
       PGID: ${PGID}
       DISABLE_BUILTIN_AUTH: true
       TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:83fc0b50985d196226b7c28a27062a1c4e63124a5d6d2448710aee222637b79e
+    image: ghcr.io/wizarrrr/wizarr@sha256:5809c5da07883e3e572b279e41998a6ae93a17f978da899cfe803bc8d7b459fe
     labels:
       homepage.group: Servarr Stack
       homepage.name: Wizarr
@@ -6839,7 +6842,7 @@ services:
       YDL_CONFIG_PATH: /youtube-dl/config.yml
       YDL_DEBUG: "false"
     hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:a44cb66c056775decd3ef153d20532b3a8d958a8ab196b6dbb0d4550f878c17c
+    image: nbr23/youtube-dl-server:latest@sha256:a5274ded39024da2fe8c3116747e9b906a867ffea8307a6cd4220215f1dfefed
     labels:
       homepage.group: Downloaders
       homepage.name: YoutubeDL
@@ -6955,8 +6958,6 @@ volumes:
     name: libretranslate_models
   lldap_data:
     name: lldap_data
-  manyfold-pg-db:
-    name: manyfold-pg-db
   manyfold-valkey-data:
     name: manyfold-valkey-data
   mastodon-pg-db:
@@ -6991,6 +6992,8 @@ volumes:
     name: nocodb_pg_data
   nocodb_valkey_data:
     name: nocodb_valkey_data
+  ollama:
+    name: ollama
   open-webui-data:
     name: open-webui-data
   open-webui-valkey-data: