🔧 Renovate: Update (digest) louislam/uptime-kuma:latest Docker digest to 3d63290

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -11,7 +11,7 @@ on:
 
 env:
   FLARECTL_VERSION: "0.116.0"
-  HC_VAULT_VERSION: "1.21.2"
+  HC_VAULT_VERSION: "1.21.1"
   TEA_VERSION: "0.10.1"
 
 jobs:
@@ -223,7 +223,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Dry Run
-        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:
@@ -427,7 +427,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

.gitea/workflows/renovate-pr-deploy.yml

@@ -10,7 +10,7 @@ on:
       - "**/docker-compose.yml"
 
 env:
-  HC_VAULT_VERSION: "1.21.2"
+  HC_VAULT_VERSION: "1.21.1"
   VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
   VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
 
@@ -143,7 +143,7 @@ jobs:
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

README.md

@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.72 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -25,7 +25,7 @@
 | beszel | henrygd/beszel:latest | Lightweight server monitoring hub |
 | beszel-agent | henrygd/beszel-agent:latest |  |
 | bitwarden | vaultwarden/server:latest | Credential/Information Vault |
-| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193 |  |
+| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.158 |  |
 | browserless | ghcr.io/browserless/chromium:latest |  |
 | bytestash | ghcr.io/jordan-dalby/bytestash:latest | Code Gists/Snippets |
 | changedetection | ghcr.io/dgtlmoon/changedetection.io | Page change monitoring with alerts |
@@ -55,7 +55,7 @@
 | garage | dxflrs/garage:v2.1.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.25.4 | Private Code Repo |
+| gitea | gitea/gitea:1.25.2 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -163,14 +163,14 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.16.51 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
-| signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
+| semaphore-ui | semaphoreui/semaphore:v2.16.47 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz |  |
-| signoz-otel-collector | signoz/signoz-otel-collector:v0.144.2 |  |
-| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.144.2 |  |
-| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.144.2 |  |
+| signoz-otel-collector | signoz/signoz-otel-collector:v0.129.12 |  |
+| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.129.12 |  |
+| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.129.12 |  |
 | signoz-zookeeper-1 | signoz/zookeeper:3.7.1 |  |
 | sonarqube | mc1arke/sonarqube-with-community-branch-plugin:lts | Code/DevOps quality/security |
 | sonarqube-pg-db | postgres:17-alpine |  |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:0be2bff232d7a06eada84eb870500dfcbb8fa921727b521a29a6eea7ebf66736
+  image: h2invent/jitsi-admin-main:latest@sha256:e47d4e97bc2fc9e09284d23d67abd1d2176e91feb0521b4d2db7c460cddc12c4
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:ad4541b28b017bf4cd83ee057c51aafb21ea32e898e3f3b8b75e268650f2ac20
+  image: docker.io/valkey/valkey:9-alpine@sha256:c106a0c03bcb23cbdf9febe693114cb7800646b11ca8b303aee7409de005faa8
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:ea21a0b6243797d35ef6c4a8713c87efaba8fec3b3663220fa3af61f352fba5e
+    image: docker.io/actualbudget/actual-server:latest@sha256:e82b7302b0db7f8fa063159e8bddc07443bb83761798dc9ba84fe1b3df62d74f
     labels:
       swag: enable
       swag_port: 5006
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.72@sha256:4956b35b590286e5872fb4336d84a7862a2030c6efb4ca16442580c37d7ba32d
+    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:b84d5e9d24b1394ecb4d518498a87ffe8edf487619f2b7138c7433e8d7135dad
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:c188764bbf0d3a84921ed530438a2364d30abd7c36f42bc4103438041333e22c
     labels:
       swag: enable
       swag_proto: http
@@ -357,7 +357,7 @@ services:
       URL_HOST: asciinema.trez.wtf
       URL_PORT: 4000
       URL_SCHEME: https
-    image: ghcr.io/asciinema/asciinema-server:latest@sha256:d6d3bd5377dbe0773016ece1fdcc8326826d45395f1df7a6883ea30caf7140e8
+    image: ghcr.io/asciinema/asciinema-server:latest@sha256:db0f8dd4e41b386b0fd5fa4ab783a297b123f68c2b6bc64cc97e35edfc8305d1
     labels:
       homepage.group: Code/DevOps
       homepage.name: Asciinema
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:64ce25a0bb68e598edc3944f2f58f39d1e8641755baa4ba5f7ddfa142ed85c63
+    image: postgres:14-alpine@sha256:14f02666642586a64d6fae8ef42d479fd76456a77c73ae8a626b8fe323b76d22
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -522,7 +522,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgres:15-alpine@sha256:fceb6f86328c36f2438fae3b851b0cc57c4a7e69a58c866d9ce24281f2cf0c9c
+    image: postgres:15-alpine@sha256:aa7b1ef595e165f0b780162e3a41edd0a7ed3ea672eb8a0f81615ba725e62bc5
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -585,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:8d1d49ee46757a09e69e5f42fda59f836792632b69857b6508f4ba499ccfbd70
+    image: authelia/authelia:master@sha256:87903b92b97c80c5e217981c4ca20d39c0aac70ffbe9554a83437ec1927fe34b
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
+    image: postgres:16-alpine@sha256:23e88eb049fd5d54894d70100df61d38a49ed97909263f79d4ff4c30a5d5fca2
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -640,7 +640,7 @@ services:
   backrest:
     container_name: backrest
     hostname: backrest
-    image: garethgeorge/backrest:latest@sha256:448fee1cb4cdf3f7d7078078480d38713673924ad415bfdf84bf9e49ff570201
+    image: garethgeorge/backrest:latest@sha256:1308397161321b3c5aeca8acc6bf26eccb990df385f2532d3ce0eaa8b483dedf
     environment:
       BACKREST_DATA: /data # path for backrest data. restic binary and the database are placed here.
       BACKREST_CONFIG: /config/config.json # path for the backrest config file.
@@ -679,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:b0bc617664dbca25845ac3b1bb6411b145b6a44a6d173071c9d2f426524fdd9f
+    image: lscr.io/linuxserver/bazarr:latest@sha256:5af962ae633e97c8e008e4b6e638798de1420e8a9e8e6189beb108a52c6e942a
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -726,7 +726,7 @@ services:
     container_name: beszel
     extra_hosts:
       - host.docker.internal:host-gateway
-    image: henrygd/beszel:latest@sha256:64bcaa60d1ed4149f0628c70cf68044b5d1ea90b3437de41e009e873f50e3f36
+    image: henrygd/beszel:latest@sha256:dac99b67c250fe5492d9c6f5d889905fa93726cf8f44eaa7bc0970c7e3ea2eeb
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Beszel
@@ -767,7 +767,7 @@ services:
       KEY: "${BESZEL_RINOA_AGENT_KEY}"
     expose:
       - 45876
-    image: henrygd/beszel-agent:latest@sha256:00829897142460910ed1de162b166d2494916c061ecdb092de3b0653818c02b9
+    image: henrygd/beszel-agent:latest@sha256:137f2aefa4f8b06df8a94cc85449da6da2e1977230bfa5fdce9d0119ada19b0a
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -790,7 +790,7 @@ services:
       TZ: America/New_York
       WEBSOCKET_ENABLED: "true"
     hostname: Rinoa
-    image: vaultwarden/server:latest@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
+    image: vaultwarden/server:latest@sha256:84fd8a47f58d79a1ad824c27be0a9492750c0fa5216b35c749863093bfa3c3d7
     labels:
       homepage.group: Privacy/Security
       homepage.name: Vaultwarden
@@ -854,7 +854,7 @@ services:
       LOG_ENABLED: true
     expose:
       - 3000
-    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193@sha256:54122ea4515d9021a4901aa849c6e57d2275e2194f6eda2cc9df217d12302f9e
+    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.158@sha256:44810dc5cf9c78135d20dfd60e0999e2db0dfc5fd56dc7e45e8844d1b57c54bd
     labels:
       swag: enable
       swag_port: 3000
@@ -889,7 +889,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:76bd3c1df1777df5c90fad1c8182395563a45b57105dfe7a22143c24c7b6a300
+    image: ghcr.io/browserless/chromium:latest@sha256:6d87229a8a8b1c26346b183c7298dca571ddb0914c5bc595fec155aa4008b2ec
     labels:
       swag: enable
       swag_proto: http
@@ -909,7 +909,7 @@ services:
       DEBUG: true
       DISABLE_ACCOUNTS: false
       DISABLE_INTERNAL_ACCOUNTS: false
-    image: ghcr.io/jordan-dalby/bytestash:latest@sha256:f5ca5cc8c33d76eda8969757d5b6da653c39ca8d946b3f7bfbc86df1360bf525
+    image: ghcr.io/jordan-dalby/bytestash:latest@sha256:9c17b5510ca45c976fe23b0d4705ad416aa58d4bf756a70e03ef1f08cf7801fd
     labels:
       homepage.description: Code Gists/Snippets
       homepage.group: Code/DevOps
@@ -949,7 +949,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:5e9650300a1a37174834b2528a7e2f0d40511016b55aca47bd65bb0396be7ccb
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:e95931043d68da46e90498ce74ad317b392caade07186dc06bdfa1710901bf90
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -1048,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:8ffaad9cf7886c0f24f0af49f62657beb7b790fdf585567f0fa52bd85615e708
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:f299435d60f7037ed65d442a68cb647b8f32d766e6e4d510ab090311f61549db
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1158,7 +1158,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:2ec9dc9f727be1eb9bf4b9438932f7a235b00f14649a86a09513f7988221f692
+    image: metabase/metabase@sha256:2284624757c442933115fce4d64b99ea1854edad60453fb468e650dd5f4566a3
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1190,7 +1190,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:e27e868eea21ee505a302ea1835b2c93018c6d718f1c50a72f5f34770ec958ac
+    image: mpepping/cyberchef:latest@sha256:1772a04fd261f971da89cf6212147afe55a37b4a93421db928a78e01de3d65ea
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1226,7 +1226,7 @@ services:
       WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
       WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
       CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:bcfba77e655c3ece1f3021b2382fc1fc97035cf757acdb644a8acdad3a89e89e
+    image: jlesage/czkawka@sha256:8acdc65b4fa28005404de995abeeaf517ea0d0b7f715d3f5d548982d83c99c6d
     labels:
       homepage.group: System Administration
       homepage.name: Czkawka
@@ -1274,7 +1274,7 @@ services:
       DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:6807762c28c906dd99502c1ee6872660e97b062faff5c5dcfdfac2b2de1c437e
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:38305e41eba65f961531c9ccc4dc106a91d488ea72f8f7d8fd9a1f11f7880030
     labels:
       homepage.group: Automation
       homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:a3b000a5a85b2997ceb7117cb078f7b8851e5f958c87d5286bf098a6e1e26ea0
+    image: freikin/dawarich:latest@sha256:d87c0e63a7475cfa50ebbc5b7d7dd814a010a48f989a35ca0c4affdcf63c278b
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1392,7 +1392,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:1a0fcce1a3040389cbd9ee577cf7b4929eac6914054e2eb5f66ebfb5c6021f69
+    image: postgis/postgis:17-3.5-alpine@sha256:f439e384b4111f0bc21b4a49e223f8fd7f40516285fc3825d7a8af15e710d47c
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1443,7 +1443,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:a3b000a5a85b2997ceb7117cb078f7b8851e5f958c87d5286bf098a6e1e26ea0
+    image: freikin/dawarich:latest@sha256:d87c0e63a7475cfa50ebbc5b7d7dd814a010a48f989a35ca0c4affdcf63c278b
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1547,7 +1547,7 @@ services:
       timeout: 30s
       retries: 5
       start_period: 30s
-    image: alplat/dockflare:stable@sha256:da9502921f35787c78a061b7ab605237553f38ef07a46873bd7df8c7af19fb6d # Or :unstable for the latest features
+    image: alplat/dockflare:stable@sha256:d5d77c1caeb3a82467499371dd5e7c9ab7c2c03c527d4f1465062b755aa7c8ca # Or :unstable for the latest features
     labels:
       homepage.group: Privacy/Security
       homepage.name: DockFlare
@@ -1642,7 +1642,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:3f41c1ce0356b4c55b7447ff29f1878f85b7cb3b92fbd8628a5e7f61a434a5e2
+    image: lscr.io/linuxserver/duplicati:latest@sha256:3d8ac3bc359a2ae0703b3062f390087ffb97bc04c041e9a336495ecbccb17dca
     labels:
       swag: enable
       swag_port: 8200
@@ -1726,7 +1726,7 @@ services:
       WEEKLY_JAMS_FLAGS: --playlist=weekly-jams --download-mode=skip
       DAILY_JAMS_SCHEDULE: 30 2 * * *
       DAILY_JAMS_FLAGS: --playlist=daily-jams --download-mode=skip
-    image: ghcr.io/lumepart/explo:latest@sha256:e4659bd1f4349a6355c0a89a0f718092de27b32d64ee24c76e1609089b060701
+    image: ghcr.io/lumepart/explo:latest@sha256:d323d0e1e8aaced56907f0357cb4172d879b7ce5efcc88ffe3421cfb8d846b2d
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -1735,7 +1735,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/Audio/Playlists:/playlists
   fastenhealth:
     container_name: fastenhealth
-    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:d208351137e8ba6a06aacede0d87f459a8bb9fc2ed705e62f4a9ca3f693bd7ca
+    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:9b8ad1e45695d43d8b469648518b5a9037a43cd80d7fdacbd49bbaf219b4c0fc
     labels:
       homepage.group: Lifestyle
       homepage.name: Fasten Health
@@ -1858,7 +1858,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:a35c41b1be9d6f7dc4e20d265d74a679c3a36d8182eb983f9925373307000b53
+    image: ghost:latest@sha256:bdb0e16455594e6a3fc57708cfaca5cedb3a7b26f65c1af0a25da084a0e51049
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1903,7 +1903,7 @@ services:
       GITEA__mailer__SMTP_PORT: 25
       GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
       GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.25.4@sha256:17d18218be2dad1f8ed402a4f906989505c90ab8b66ee9befcecfb5d470133e7
+    image: gitea/gitea:1.25.2@sha256:534428e78fc00d3ac8647f3467a3f91252acf23a46ea0c872f03191e3c878f7d
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1963,7 +1963,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:d1c2ec5683f89f861117e4ec87f63a0ce52d431738f53c903793ef3aeef0205b
+    image: postgres:14@sha256:d508bf6220b5c7b7cd9c735d6abd5ea2e6e4e45882a29ed704f625aba32bd935
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -1983,7 +1983,7 @@ services:
       GITEA_INSTANCE_URL: http://gitea:3000
       GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
       GITEA_RUNNER_NAME: "gitea-runner-1"
-    image: gitea/act_runner:nightly@sha256:02ac569e7a76faa767963485336ab195c864e5db5172d5191a57c497dad27f3f
+    image: gitea/act_runner:nightly@sha256:ec2fa777af444b08d070e6b42627a1b8463c522ab0da1e5f5b587b9d3bf9e112
     ports:
       - 63604:63604
     profiles: ["rinoa-infra"]
@@ -2043,7 +2043,7 @@ services:
       VPN_SERVICE_PROVIDER: private internet access
     expose:
       - 8000
-    image: qmcgaw/gluetun:latest@sha256:a70a461a9c86966193f543009cfedf57e51d2f4880f0d834d7b3c0091c9250d1
+    image: qmcgaw/gluetun:latest@sha256:6a59b7901068b7c50ef52200152db3afd4b9cebc13e272b2169de4cdcad91006
     ports:
       - 3333:3333
       - 3334:3334
@@ -2076,7 +2076,7 @@ services:
       GOTIFY_UPLOADEDIMAGESDIR: data/images
       GOTIFY_PLUGINSDIR: data/plugins
       GOTIFY_REGISTRATION: false
-    image: gotify/server@sha256:a3af47067ce6aad76aadf5ba32d6ddfecd1ae576a961359f039fd1831e8b7652
+    image: gotify/server@sha256:4702c392ca723d5016fc938c8b22572c3509efca812bdc5221d25158ba0201e3
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Gotify
@@ -2144,7 +2144,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:0b596092c0b55fe4c65379a428a3fe90bd192f10d1b07d189a34fe5fabe7eedb
+    image: ghcr.io/gethomepage/homepage:latest@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2219,7 +2219,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:aa163d2e1cc2b16a9515dd1fef901e6f5231befad7024f093d7be1f2da14341a
+    image: ghcr.io/immich-app/immich-server:release@sha256:e6a6298e67ae077808fdb7d8d5565955f60b0708191576143fc02d30ab1389d1
     labels:
       swag: enable
       swag_proto: http
@@ -2262,7 +2262,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b213fa3c82d27a21a299c46ffbb38a091f18384db1ad67d409a3b34fe0fce556
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b3deefd1826f113824e9d7bc30d905e7f823535887d03f869330946b6db3b44a
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2312,7 +2312,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:4aea9965af2d28f78cda19b31b6672fc31124ee9411858dc8a043e0e30354f7d
+    image: alangrainger/immich-public-proxy:latest@sha256:e670bb4e40b480f51c10c4a6b0953311a8e9fdfac50f3768a4ab63f91f49311e
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2343,7 +2343,7 @@ services:
       EXTERNAL_IMMICH_URL: https://pics.${MY_TLD}
       IMMICH_API_KEY: ${IMMICH_POWER_TOOLS_KEY}
       IMMICH_URL: http://immich-server:2283
-    image: ghcr.io/varun-raj/immich-power-tools:latest@sha256:8e7a25ed0e99c9c323012e306fde6c97a1004765742c8802ad03c95503679e77
+    image: ghcr.io/varun-raj/immich-power-tools:latest@sha256:2abdc8a73cd7438006e16f7a9b50f51ca6806332f8855404375e8bbdd5b024f7
     ports:
       - 54018:3000
     profiles: ["rinoa-apps"]
@@ -2362,7 +2362,7 @@ services:
       DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: /run/secrets/influxdb2-admin-token
       DOCKER_INFLUXDB_INIT_ORG: rinoa
       DOCKER_INFLUXDB_INIT_BUCKET: rinoa
-    image: influxdb:2-alpine@sha256:f15dfc604753f53b180364a331b46c2f4bc5c08a665d025982b301efa69bc2f7
+    image: influxdb:2-alpine@sha256:fb537cf0d57937a57eac33efd079ae5b36a1d35437dc1eba1ecb8800a352b62a
     labels:
       swag: enable
       swag_proto: http
@@ -2397,7 +2397,7 @@ services:
       retries: 2
       test: wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/trending || exit 1
       timeout: 5s
-    image: quay.io/invidious/invidious:latest@sha256:9d972ea5930c2e170b3c4d49bdd9fa09bf03f077d555f58747342062dffc5876
+    image: quay.io/invidious/invidious:latest@sha256:2836b5b8226a53a9cc2afdbd5f5fe6bccdd200f2e17cd92a828b4dc8d8b5cc06
     labels:
       swag: enable
       swag_proto: http
@@ -2433,7 +2433,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:e90c3d1fca037fff68cfac16d617b8f3e70ece12563389e7870e88071304affa
+    image: quay.io/invidious/invidious-companion:latest@sha256:07a1dd6893e6311e341067cf61ba5f920184e40339e4b4e195f5713f99311343
     logging:
       options:
         max-size: "1G"
@@ -2457,7 +2457,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:d1c2ec5683f89f861117e4ec87f63a0ce52d431738f53c903793ef3aeef0205b
+    image: docker.io/library/postgres:14@sha256:d508bf6220b5c7b7cd9c735d6abd5ea2e6e4e45882a29ed704f625aba32bd935
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3133,7 +3133,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3189,7 +3189,7 @@ services:
     restart: unless-stopped
   karakeep:
     container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:20754dbdafb11dfe288bbb1c2342a7855081b08ea069e86fcf2d4a2d945d3653
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:2724d4a9a6d13a7fa3babf53b9245767aae56c34f06042a8463ee983c6b41caf
     environment:
       BROWSER_WEB_URL: http://chrome:9222
       DATA_DIR: /data
@@ -3244,7 +3244,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:1c4cc6341fb6d823230957f0d019b8ccffc457169f1dab61ded25aefc2f5b67c
+    image: libretranslate/libretranslate@sha256:b3dac22bc8c5770ab97b873c404328e7d84736d626df1999b26f2cdb62fae57a
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3278,7 +3278,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:37a3df74f4c2a6f10eead66f4d8034362ebf2866f935026b4a71dd888b9e7f08
+    image: lscr.io/linuxserver/lidarr:latest@sha256:be65454ba890ad01a93b01cfc178adfa1a397b487bfdce2ac23bd956c473d10d
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3329,7 +3329,7 @@ services:
       spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
     expose:
       - 5000
-    image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
+    image: thewicklowwolf/lidify:latest@sha256:958eaddeef8195470b974ee03512d9a5c31ad2af3167f7824448fb026fa9c94a
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidify
@@ -3371,7 +3371,7 @@ services:
         type: bind
   linkstack:
     container_name: linkstack
-    image: linkstackorg/linkstack:latest@sha256:1c8b05399ee459ac601bac3eede7fbe765d1b6b7be725663b57f3220610958bf
+    image: linkstackorg/linkstack:latest@sha256:2b298302ab50184cf99294ef3ae6a3c49c13081162e9a1d067a872e9c75b3e55
     environment:
       TZ: ${TZ}
       SERVER_ADMIN: noreply@${MY_TLD}
@@ -3523,7 +3523,7 @@ services:
       SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SMTP_FROM_ADDRESS: noreply@${MY_TLD}
-    image: lscr.io/linuxserver/manyfold:0.131.0@sha256:e40699dac23fae4de09982fcb2e5d478917b5b9a60bd1fda43ec7a2f18a8c4d6
+    image: lscr.io/linuxserver/manyfold:0.131.0@sha256:ae82810d884268ba69dabe30c8691a2e6fe230618a90220016c830a741cefa11
     labels:
       homepage.group: Lifestyle
       homepage.name: Manyfold
@@ -3560,7 +3560,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:18-alpine@sha256:4da1a4828be12604092fa55311276f08f9224a74a62dcb4708bd7439e2a03911
+    image: postgres:18-alpine@sha256:b40d931bd0e7ce6eecc59a5a6ac3b3c04a01e559750e73e7086b6dbd7f8bf545
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3587,7 +3587,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:91de7f701bc7fc3a424b81beafca7a7c6c4c5b7c8be6afd2ae148698695c0b0c
+    image: linuxserver/mariadb@sha256:d33fb3da7766dbe445f4781b0a78e42fcf7e87d8cb4c9f2d5a37abaa8c4316ca
     networks:
       default: null
     ports:
@@ -3641,7 +3641,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:f8a7403cc1f9b93e3d55201c62479a4aa03178d7e65620670bbb27312a1c7a32
+    image: lscr.io/linuxserver/mastodon:latest@sha256:ffd718f5a7192b2cf29044678bf0d32aebf6039778bf3fcc4c859df81bbfab87
     labels:
       swag: enable
       swag_proto: http
@@ -3682,7 +3682,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3704,7 +3704,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:68ee45d8b41cf47b9838e0d21013370ce84c1b0f5ad459705058747bade52da4
+    image: getmaxun/maxun-backend:latest@sha256:e24677c32ddb38eb53bb5284ac99d723ceadd994d0d1063ea606d933933fef13
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3720,7 +3720,7 @@ services:
     depends_on:
       - maxun-backend
     <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:d01897f9d8660412731efdf1e5b91ad5bfd2e077da1e9f5eb47a889303750ce4
+    image: getmaxun/maxun-frontend:latest@sha256:b0b9bcb9e2082f9047fe3cfd01d9c72a4d8eef93cd6f509b00a87c23bf26bf57
     labels:
       swag: enable
       swag_proto: http
@@ -3748,7 +3748,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3830,7 +3830,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: pgvector/pgvector:pg17@sha256:494dff7e67e7bc2c826b94c331364978d145ebb86fd338154138b084223b7f67
+    image: pgvector/pgvector:pg17@sha256:1a5ea285a159bed991c74a9c4751b6eadc536b3c3263f3f95ec3865885a62b69
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3907,7 +3907,7 @@ services:
           create_host_path: true
   mixpost:
     container_name: mixpost
-    image: inovector/mixpost:latest@sha256:60f730aa99953a2956a69bced9b67c547f063dd647eaa0dc8a82f00f1a6f7450
+    image: inovector/mixpost:latest@sha256:9a118d60bf1514ff19f5adee0b9d7684f8c00ee520e2bf4bcc295665f048c557
     depends_on:
       mariadb:
         condition: service_healthy
@@ -3984,7 +3984,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:81ed620b45935fb49704010b75d3fa73df547f71323cfdba49323a64412253a4
+    image: mongo:7@sha256:4510cf3d7050003e958745adb25d2deb3fb907430716162d9cc1a92eda2a6047
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -4020,7 +4020,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:9693b07fa8b333d2fd26aa04b5bc1fa53d827b117e4dd9a85b9aa8bdd0b79168
+    image: foxxmd/multi-scrobbler@sha256:6d86950db092b2b02f2c1f3d37644b8a88290cfbd78e307fe6fab1761088d9cd
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -4060,7 +4060,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:fdf1e22bc04a03e38da41da5a56ba9b9a48510f480874290ea9c180844cbdb0c
+    image: docker.n8n.io/n8nio/n8n@sha256:b4ce485c070c95efae9f42fa39918623f821d70ea255cdf6467b02865db3a00e
     labels:
       swag: enable
       swag_proto: http
@@ -4107,7 +4107,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
+    image: deluan/navidrome:latest@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4144,25 +4144,10 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/backups/navidrome:/backups
   netalertx:
     container_name: netalertx
-    cap_drop:
-      - ALL
-    cap_add:
-      - CHOWN
-      - SETUID
-      - SETGID
-      - NET_RAW
-      - NET_ADMIN
-      - NET_BIND_SERVICE
     environment:
       TZ: ${TZ}
       PORT: 20211
-      PUID: ${NETALERTX_UID:-20211} # Runtime UID after priming (Synology/no-copy-up safe)
-      PGID: ${NETALERTX_GID:-20211} # Runtime GID after priming (Synology/no-copy-up safe)
-      LISTEN_ADDR: ${LISTEN_ADDR:-0.0.0.0} # Listen for connections on all interfaces
-      GRAPHQL_PORT: ${GRAPHQL_PORT:-20212} # GraphQL API port
-      ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false} # Set to true to reset your config and database on each container start
-      NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0} # 0=kill all services and restart if any dies. 1 keeps running dead services.
-    image: jokobsk/netalertx:latest@sha256:f47a8020ae61fd668e1580cd5014e1a34e8ffa80360b1652e6deb3a7347f0238
+    image: jokobsk/netalertx:latest@sha256:effae612fe9dd55e0ded482d340425dcd720b8898d37bd3bc3dc4be7b3598b28
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4187,11 +4172,16 @@ services:
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
-    tmpfs:
-      - "/tmp:mode=1700,uid=0,gid=0,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
     volumes:
-      - ${DOCKER_VOLUME_CONFIG}/netalertx/config:/data
-      - /etc/localtime:/etc/localtime:ro
+      - ${DOCKER_VOLUME_CONFIG}/netalertx/config:/app/config
+      - ${DOCKER_VOLUME_CONFIG}/netalertx/db:/app/db
+      # (optional) useful for debugging if you have issues setting up the container
+      # - ${DOCKER_VOLUME_CONFIG}/netalertx/logs:/app/log
+      # (API: OPTION 1) use for performance
+      - type: tmpfs
+        target: /app/api
+      # (API: OPTION 2) use when debugging issues
+      # - ${DOCKER_VOLUME_CONFIG}/netalertx/api:/app/api
   nextcloud:
     container_name: nextcloud-aio-mastercontainer
     environment:
@@ -4201,7 +4191,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:4e23ad7f7a98c9284dffee2d8b638d368ef848ed055920d1d976284f7c6c26f1
+    image: nextcloud/all-in-one:latest@sha256:74abbbdfcffff867f5e22f14da8446dbafffb4368e94287b4697ff0a460e85f9
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4252,7 +4242,7 @@ services:
       NC_SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       NC_SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       NC_SMTP_FROM: noreply@${MY_TLD}
-    image: "nocodb/nocodb:latest@sha256:c3d38b5563234d287710519ff7507d43dfa553241bc70b955f91d90698065340"
+    image: "nocodb/nocodb:latest@sha256:d3aba4f7e89bd18fc01d6853eea0fa82476b161a678f7f0ff52380f4c52bb87f"
     labels:
       homepage.group: Code/DevOps
       homepage.name: NocoDB
@@ -4289,7 +4279,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
+    image: postgres:16-alpine@sha256:23e88eb049fd5d54894d70100df61d38a49ed97909263f79d4ff4c30a5d5fca2
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4306,7 +4296,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:dfd3a3380a042ea44b4936703836d8ae7ee46bcae551b3fa574c9c25632eb027
+    image: lscr.io/linuxserver/ombi:latest@sha256:5c2d3a515b5c1d120cb70f3c701c3c760ce742edd352f3acaa430280d9b725eb
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4385,7 +4375,7 @@ services:
       OLLAMA_MODEL: smollm2:1.7b
       THEME: "pole"
       DISABLE_DICTIONARY: false
-    image: kweg/omnipoly:latest@sha256:2c7524c4f0778aa2849d25889b192d383b944b060feaf9109d70b5e137c7d3c9
+    image: kweg/omnipoly:latest@sha256:fa133d5ac6534ee45e393fab85ad61098a0826351724996e0d29ba61033dde7d
     labels:
       homepage.group: Personal Tools
       homepage.name: OmniPoly
@@ -4454,7 +4444,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:ea750f19fc2a7ca0cb221bc512b8c2c470a01616b89ed98cb77d9ab0d5f24109
+    image: ghcr.io/open-webui/open-webui:main@sha256:000b87a6ae726aa7f6611a0064ba528ba1a6aff6ead5fb3b6c89fd4a5717eb8a
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4505,7 +4495,7 @@ services:
       PAPERLESS_URL: https://docs.${MY_TLD}
       USERMAP_GID: ${PGID}
       USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:1d99ede700ffdf7aa44899b5fee29c8c279f175769b6cb295e91e9f15772728e
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:665f2f5cc5482ea2e44f90a7fa170908aaeb95d8d3c70e17f746de8fcb81f644
     labels:
       swag: enable
       swag_proto: http
@@ -4597,7 +4587,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4672,7 +4662,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
+    image: postgres:16-alpine@sha256:23e88eb049fd5d54894d70100df61d38a49ed97909263f79d4ff4c30a5d5fca2
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4757,7 +4747,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
+    image: plantuml/plantuml-server:jetty@sha256:726f1c7af41dacb9cd909b1a7fe8b7c6e1921724a979de118ae4c1778f0b9a84
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4786,7 +4776,7 @@ services:
     expose:
       - 9000
       - 9443
-    image: portainer/portainer-ce:alpine@sha256:f56ef070ee60896039fcb219e639da6c1a0cdc726f0bf2eb5c124d33a1c78bf4
+    image: portainer/portainer-ce:alpine@sha256:a04e0ac3e99172e451055419e2ed46c67f24bff72209ab09235079d7642e87d8
     labels:
       swag: enable
       swag_proto: http
@@ -4880,7 +4870,7 @@ services:
       - NET_BIND_SERVICE
     command: postal smtp-server
     container_name: postal-smtp
-    image: ghcr.io/postalserver/postal:latest@sha256:e8300c81deeee3123a732f5e70598719d613d26fc03ec350e623031aa75b2e2b
+    image: ghcr.io/postalserver/postal:latest@sha256:ff9a42deeda9b236ac36df012dab843b14726da8f3c2464c18c371f23107d986
     networks:
       default: null
     ports:
@@ -4893,7 +4883,7 @@ services:
   postal-web:
     command: postal web-server
     container_name: postal-web
-    image: ghcr.io/postalserver/postal:latest@sha256:e8300c81deeee3123a732f5e70598719d613d26fc03ec350e623031aa75b2e2b
+    image: ghcr.io/postalserver/postal:latest@sha256:ff9a42deeda9b236ac36df012dab843b14726da8f3c2464c18c371f23107d986
     labels:
       swag: enable
       swag_proto: http
@@ -4929,7 +4919,7 @@ services:
     container_name: postal-worker
     environment:
       LOG_LEVEL: debug
-    image: ghcr.io/postalserver/postal:latest@sha256:e8300c81deeee3123a732f5e70598719d613d26fc03ec350e623031aa75b2e2b
+    image: ghcr.io/postalserver/postal:latest@sha256:ff9a42deeda9b236ac36df012dab843b14726da8f3c2464c18c371f23107d986
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -4960,7 +4950,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:e74a1e093dcc223d671d4b7061e2b4946f1989a4d3059654ff4e623b731c9134
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -5129,7 +5119,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
+    image: thewicklowwolf/radarec:latest@sha256:df726f35e3a1ef2f0cd482a6cf993bac8782804efd38ee8004c8694f7e8f526e
     labels:
       homepage.group: Servarr Stack
       homepage.name: RadaRec
@@ -5176,7 +5166,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:6d3e68474ea146f995af98d3fb2cb1a14e2e4457ddaf035aa5426889e2f9249c
+    image: lscr.io/linuxserver/radarr:latest@sha256:270f25698624b57b86ca119cc95399d7ff15be8297095b4e1223fd5b549b732c
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5238,7 +5228,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:dbaa9e91e1b5c093d27dccd0a5d717129747ccaa7d2d3e0277de2377f6893b95
+    image: amruthpillai/reactive-resume:latest@sha256:f26fd329f35b97bccdf5ee5a7b558df0ccf1e073a1d7a5787e433043e22b9296
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5271,7 +5261,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
+    image: postgres:16-alpine@sha256:23e88eb049fd5d54894d70100df61d38a49ed97909263f79d4ff4c30a5d5fca2
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5416,7 +5406,7 @@ services:
         condition: service_healthy
         required: true
         restart: true
-    image: rommapp/romm:latest@sha256:7f8b04e2e7652ae3121f19e712373bc021530b3c500e0c077c69a9cfe431395c
+    image: rommapp/romm:latest@sha256:b909e95d1aab88db9817be700183fda8d24094b3e7c28355ddbd066e2659fc8f
     environment:
       ROMM_DB_DRIVER: mariadb # mariadb | sqlite (default: sqlite)
       ROMM_HOST: https://localhost:3000 # [Optional] your host ip or domain name (including http(s)://, subdomain and port if needed). Being used only for webRcade feed for now.
@@ -5573,7 +5563,7 @@ services:
       STRATEGY_DYNAMIC_DEFAULT_THEME: hacker-terminal
       STRATEGY_DYNAMIC_DEFAULT_REFRESH_FREQUENCY: 5s
       STRATEGY_BLOCKING_DEFAULT_TIMEOUT: 1m
-    image: sablierapp/sablier:latest@sha256:000fab8e34adec9587b2424cc91e8526403ebea4b0636e9667f4123d450fe165
+    image: sablierapp/sablier:latest@sha256:4d4096b59a6e1496bd3106c1a90a7fdd161aafb73d58539b8c749c69380dedae
     ports:
       - 19311:10000
     profiles: ["rinoa-apps"]
@@ -5623,7 +5613,7 @@ services:
       - "/dev/sdd:/dev/sdd:rwm"
       - "/dev/sde:/dev/sde:rwm"
       - "/dev/sdf:/dev/sdf:rwm"
-    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:18689773150d6b8b53c94a435f40f7b6e946fd4a6d40b44c64fa2154a5b38941
+    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:e5638d8580adba40f7c03464cde8420866188b9e48cddb9fc3866ec3243163d5
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: smartd.${MY_TLD}
@@ -5678,7 +5668,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:aace39e738c8022456a9f64aa8289e347833bb9e1f29cd248a22cc7ca7a6f5a3
+    image: searxng/searxng:latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5736,7 +5726,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.16.51@sha256:316520f513e3c964d23cdd40709777a6a452e275020627aba406e9bd9c08adde
+    image: semaphoreui/semaphore:v2.16.47@sha256:71aabf9314d1051ab92025f26809daea72bd90cb78a6a2badfe15400acf11619
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5795,7 +5785,7 @@ services:
       interval: 30s
       timeout: 5s
       retries: 3
-    image: signoz/signoz:v0.113.0@sha256:381d613fc4a186243a0ba28e55b957921e6d8663dd9111ef95c2cfdead1021c5
+    image: signoz/signoz:v0.96.1@sha256:e2cded000c87adb0366c9ae4f292e034515458552d151879195071ba4f078b4e
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Signoz
@@ -5887,7 +5877,7 @@ services:
       NGINX_ERROR_LOG_FILE: /swag/log/nginx/error.log
       OTEL_RESOURCE_ATTRIBUTES: host.name=signoz-host,os.type=linux
       LOW_CARDINAL_EXCEPTION_GROUPING: false
-    image: signoz/signoz-otel-collector:v0.144.2@sha256:cc3e1559f0968f10a27977323c20323ca072ea3858af2233263e82532d551516
+    image: signoz/signoz-otel-collector:v0.129.12@sha256:84df7d9786ce12ee5983fc8460225371a204bca6320c85717801bf110b84ed65
     ports:
       # - "1777:1777"     # pprof extension
       - "4317:4317" # OTLP gRPC receiver
@@ -5900,7 +5890,7 @@ services:
       - ${DOCKER_VOLUME_CONFIG}/swag/log/nginx/error.log:/swag/log/nginx/error.log:ro
   signoz-schema-migrator-async:
     <<: *signoz-db-depend
-    image: signoz/signoz-schema-migrator:v0.144.2@sha256:ed1d4bd65bc4a4d9b22d3c41e127f1aedebfdfa343ab94b7e8c57072bbf3129f
+    image: signoz/signoz-schema-migrator:v0.129.12@sha256:43044b0666c60ad9c0e8c1240d478f846d0c2b7fccfea142fa043f327c8be279
     container_name: signoz-schema-migrator-async
     command:
       - async
@@ -5910,7 +5900,7 @@ services:
     restart: on-failure
   signoz-schema-migrator-sync:
     <<: *signoz-common
-    image: signoz/signoz-schema-migrator:v0.144.2@sha256:ed1d4bd65bc4a4d9b22d3c41e127f1aedebfdfa343ab94b7e8c57072bbf3129f
+    image: signoz/signoz-schema-migrator:v0.129.12@sha256:43044b0666c60ad9c0e8c1240d478f846d0c2b7fccfea142fa043f327c8be279
     container_name: signoz-schema-migrator-sync
     command:
       - sync
@@ -5994,7 +5984,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -6008,7 +5998,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:37be832b78548e3f55f69c45b50e3b14d18df1b6def2a4994258217e67efb1a1
+    image: lscr.io/linuxserver/sonarr:latest@sha256:02b4d538d351d6e35882a021c08e8600fe95d28860fb1dd724b597166e7221ca
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6057,7 +6047,7 @@ services:
       tmdb_api_key: ${TMDB_API_KEY}
     expose:
       - 5000
-    image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
+    image: thewicklowwolf/sonashow:latest@sha256:4b40df407bf31577668bfb3191e007ac78c349d81bfde7463ec8433d417ebd3d
     labels:
       homepage.group: Servarr Stack
       homepage.name: SonaShow
@@ -6112,7 +6102,7 @@ services:
       TZ: ${TZ}
       #Script interval in seconds
       SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:efa11f11ec1ad398f7456e3df304b942841f1ef975a02859c2e31cfdd24882d4
+    image: mrusse08/soularr:latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
     network_mode: service:gluetun
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -6131,7 +6121,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:2148f2c7f405a31ce64082ce085c88bf6e486fbb705bec20ead6a170fd8def72
+    image: ghcr.io/mrusse/soularr:main@sha256:84fead20dc2bcc00d6f0d2df53e56866b4fe634640e075820b420ae4ea146fd2
     labels:
       homepage.name: Soularr
       homepage.group: Downloaders
@@ -6166,7 +6156,7 @@ services:
         condition: service_started
         required: true
         restart: true
-    image: slskd/slskd@sha256:17ef977563be206f3b5932080b1e23883b2cb39dc9010640f6f39b4eaec887e3
+    image: slskd/slskd@sha256:e3635858d9614a2fb811601afca706dbf97a6838b849905c27294cbce71be268
     labels:
       homepage.name: Soulseek
       homepage.group: Downloaders
@@ -6195,7 +6185,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:4023b3e993d3764efe41d65eb4d1be8d9ff2ad8d756eb71de35fe805882ff0b5
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:d00dcbe8cd2c868ec059dd70379d8d7b033932c8fbeb744f6e10d0133c664a42
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6235,7 +6225,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:cc287bb47ad754ce052ee3c35d023f753532cbbde63dffc6abb150f338ed41ce
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:8fb811bce906513dc5dd312981f070e4780e02da20b7a20327d6e141077532f5
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6287,7 +6277,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:9faf03e539a775b578e995f6782c96bc7dabef635c44417a147469dce66eca59
+    image: lscr.io/linuxserver/swag:latest@sha256:5ff9f08a09cc4b224f89430615388758cc7e29c9e644614348172cf2f7ac66b9
     labels:
       swag: enable
       swag_proto: http
@@ -6343,7 +6333,7 @@ services:
       SECRET_KEY: ${TANDOOR_SECRET_KEY}
       TZ: ${TZ}
       UID: 1000
-    image: vabene1111/recipes@sha256:7ce6534c9ab0e471fd0f08add67e871b9173fb580c2f86294c3ead025603a3d7
+    image: vabene1111/recipes@sha256:5cd01ba0473a48878db3ed9b2c6f2c5db12b68649e169ce9cfa43f052fb0aa95
     labels:
       homepage.group: Lifestyle
       homepage.name: Tandoor Recipes
@@ -6389,7 +6379,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:b7587f3cb74f4f4b2a4f9d67f052edbf95eb93f4fec7c5ada3792546caaf7383
+    image: postgres:16-alpine@sha256:23e88eb049fd5d54894d70100df61d38a49ed97909263f79d4ff4c30a5d5fca2
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6458,7 +6448,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:7043a04d2d56f6940fe1ce66fb1ead4a752579b6febfb4122a466a533f75a1aa
+    image: josh5/unmanic:latest@sha256:0dd283b467f327310eaa972df3b31902cfe7170b66ad8a766496f95eaf030cb8
     labels:
       homepage.group: Media Library
       homepage.name: Unmanic
@@ -6512,7 +6502,7 @@ services:
       UPTIME_KUMA_PASSWORD: ${UPTIME_KUMA_PASSWORD}
       DOCKER_HOST: tcp:/${DOCKER_VOLUME_CONFIG}proxy:2375
     hostname: Rinoa
-    image: louislam/uptime-kuma:latest@sha256:431fee3be822b04861cf0e35daf4beef6b7cb37391c5f26c3ad6e12ce280fe18
+    image: louislam/uptime-kuma:latest@sha256:3d632903e6af34139a37f18055c4f1bfd9b7205ae1138f1e5e8940ddc1d176f9
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Uptime Kuma
@@ -6557,7 +6547,7 @@ services:
     environment:
       AWS_ACCESS_KEY_ID: ${VAULT_HASHICORP_AWS_ACCESS_KEY_ID}
       AWS_SECRET_ACCESS_KEY: ${VAULT_HASHICORP_AWS_SECRET_ACCESS_KEY}
-    image: hashicorp/vault:latest@sha256:5f244d447c6f90107149c9565da5ffedf847cec673ba0062a82fc3dd83c89e65
+    image: hashicorp/vault:latest@sha256:eb0ba6836e8d4699b7a1e8ca70d8433f7b87dcd067e6d82dff237d3ed2600ea0
     labels:
       homepage.group: Code/DevOps
       homepage.name: HashiCorp Vault
@@ -6587,7 +6577,7 @@ services:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:46f25daeebedbe00f409abdc82f07d1bde6818dc9fee8b360b0b09c453c4b999
+    image: bellamy/wallos:latest@sha256:9f1bbd7f24e2afdac64ff0985ef801d48f63086540a0844fc05727642bb5360a
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6617,7 +6607,7 @@ services:
       - wallos-logos:/var/www/html/images/uploads/logos
   web-check:
     container_name: web-check
-    image: lissy93/web-check@sha256:2b4ee0a63f6e5cf12c96dd5b123fff488b40410b99f43f08a6e24bc8460531fa
+    image: lissy93/web-check@sha256:f2d1dc726958c1d79ac459cac84eb26eb4f203a4d27447f336695a8c1884f1e3
     labels:
       homepage.group: Privacy/Security
       homepage.name: Web-Check
@@ -6643,7 +6633,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:95ef4c6e763a526f9e91d14f658ac7aef61639ee21c34c0339ef6cb213a02cf7
+    image: clidey/whodb@sha256:86a72847c4410bc0bb4dc6a0156eef4eb0da0033fee9c149e3afadaca879847f
     environment:
       WHODB_CLICKHOUSE_1: '{
         "host": "signoz-clickhouse"
@@ -6818,7 +6808,7 @@ services:
       PGID: ${PGID}
       DISABLE_BUILTIN_AUTH: true
       TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:855e2a9a98eb18ffee26f321aac5a58712bcb04a537f10c21b95d191f9407588
+    image: ghcr.io/wizarrrr/wizarr@sha256:83fc0b50985d196226b7c28a27062a1c4e63124a5d6d2448710aee222637b79e
     labels:
       homepage.group: Servarr Stack
       homepage.name: Wizarr
@@ -6849,7 +6839,7 @@ services:
       YDL_CONFIG_PATH: /youtube-dl/config.yml
       YDL_DEBUG: "false"
     hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:ded22de8d482458f11e758aad15152832d4b031896832893cc46b8ecff4eb786
+    image: nbr23/youtube-dl-server:latest@sha256:343b29500cd23668c5a9f6b4c4849f28f60a3bfe22c526ad919f461dfc192c8f
     labels:
       homepage.group: Downloaders
       homepage.name: YoutubeDL