Volume fixes.

Merged by Trez.One

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -51,6 +51,7 @@ jobs:
     env:
       VAULT_ADDR: ${{ secrets.RINOA_VAULT_ADDR }}
       VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+      VAULT_NAMESPACE: ""
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -74,7 +75,7 @@ jobs:
         with:
           directory: ansible/
           playbook: docker_config_deploy.yml
-          key: ${{secrets.RINOA_ANSIBLE_PRIVATE_KEY}}
+          key: ${{ secrets.RINOA_ANSIBLE_PRIVATE_KEY }}
           options: |
             --inventory inventory/hosts.yml
             --check
@@ -257,6 +258,7 @@ jobs:
           notification_message: 'PR #${{ steps.pr_merge.outputs.pr_index }} merged.'
   ansible-config-docker-compose-deploy:
     name: Deploy via Ansible & Docker Compose
+    timeout-minutes: 360
     runs-on: ubuntu-latest
     needs: [pr-merge]
     env:
@@ -303,12 +305,12 @@ jobs:
         run: |
            vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env
       - name: Docker Compose Deployment
-        if: ${{ steps.regenerate-readme-modified-services.outputs.modified_services != '' }}
+        # if: ${{ steps.regenerate-readme-modified-services.outputs.modified_services != '' }}
         continue-on-error: true
         uses: keatonLiu/docker-compose-remote-action@v1.2
         with:
           docker_compose_file: docker-compose.yml
-          docker_args: -d --remove-orphans --pull missing --parallel -1
+          docker_args: -d --remove-orphans --pull missing
           ssh_user: gitea-deploy
           ssh_host: 192.168.1.254
           ssh_host_public_key: ${{ secrets.RINOA_GITEA_PUBLIC_SSH_KEY }}

README.md

@@ -20,6 +20,7 @@
 | castopod | castopod/castopod:latest |
 | cloudflared | cloudflare/cloudflared:latest |
 | cloudflareddns | ghcr.io/hotio/cloudflareddns:latest |
+| cronicle | elestio/cronicle:latest |
 | crowdsec | crowdsecurity/crowdsec:latest |
 | crowdsec-dashboard | metabase/metabase |
 | czkawka | jlesage/czkawka |
@@ -82,6 +83,7 @@
 | multi-scrobbler | foxxmd/multi-scrobbler |
 | n8n | docker.n8n.io/n8nio/n8n |
 | navidrome | deluan/navidrome:latest |
+| netalertx | jokobsk/netalertx:latest |
 | netbird-dashboard | netbirdio/dashboard:latest |
 | netbird-signal | netbirdio/signal:latest |
 | netbird-relay | netbirdio/relay:latest |
@@ -92,6 +94,7 @@
 | ombi | lscr.io/linuxserver/ombi:latest |
 | open-webui | ghcr.io/open-webui/open-webui:main |
 | paperless-ngx | ghcr.io/paperless-ngx/paperless-ngx:latest |
+| parseable | containers.parseable.com/parseable/parseable:latest |
 | pgbackweb | eduardolat/pgbackweb:latest |
 | pgbackweb-db | postgres:16-alpine |
 | plantuml-server | plantuml/plantuml-server:jetty |
@@ -134,6 +137,7 @@
 | unmanic | josh5/unmanic:latest |
 | uptimekuma | louislam/uptime-kuma:latest |
 | vault | hashicorp/vault:latest |
+| vector | timberio/vector:0.44.0-alpine |
 | wallabag | wallabag/wallabag |
 | wallos | bellamy/wallos:latest |
 | watchtower | ghcr.io/containrrr/watchtower:latest |

ansible/group_vars/all.yml

@@ -1,14 +1,14 @@
 vault_addr: "https://vault.trez.wtf"
 vault_token: !vault |
   $ANSIBLE_VAULT;1.1;AES256
-  66373236656261373330343233616231386539616566613864306436613635323533336365383232
+  30623330336664656231653066343930303830343530323930613666643863623837633738346639
-  6636653139393566643265303135343864363632393035380a643566373137316363626438356431
+  3734386663383333386635623931343361343363396434660a633637666539626264653437636134
-  64653237313866316537326565386164373564353166346334663638636531353337303937346466
+  36616334386264383330323164333432623538366234326563323664353338646331353233396161
-  3539366634393337620a653133336530333963343638643934303336653935363932643665353234
+  3030623162373232320a386432393337613431303432613065626163326363316365613937623031
-  63343565663632633563396131346139666236313863663332386131633831633566373366613738
+  39316566343238363934383833376136323461336666663762383663633531303138616132333938
-  63343634313539336534666632313736343338623538303434316230383764643432646663356238
+  30316334363436333164303035643835316238313038663761636338313433303766626238656234
-  61373132633062346436363036333533623931313037306633616662623032616137613734343638
+  34373436396430646339326361366634363735346637303865373164363663663263646661366663
-  63633031616161623437623935346366636433653435646333313638376161663237323130636433
+  36336334393535386332646461313262646131383932353534363936623961613761333762376561
-  31383031646666626163323966393738386233346137326231366263316532343563
+  31366662626231346638346339626565653831613865646436643233653066366534
 vault_token_cleaned: "{{ vault_token | regex_replace('\\n', '') }}"
 secrets_path: "rinoa-docker/env"

docker-compose.yml

@@ -617,6 +617,35 @@ services:
         source: /rinoa-storage
         target: /storage
         type: bind
+  cronicle:
+    container_name: cronicle
+    entrypoint: manager
+    environment:
+      CRONICLE_manager: 1
+      CRONICLE_secret_key: "${CRONICLE_SECRET_KEY}"
+      DOCKER_HOST: tcp://dockerproxy:2375
+    hostname: cronicle
+    image: elestio/cronicle:latest
+    labels:
+      homepage.group: Automation
+      homepage.name: Cronicle
+      homepage.href: https://cron.${MY_TLD}
+      homepage.icon: sh-cronicle.png
+      homepage.description: Multi-server task schedule with a web interface
+      swag: enable
+      swag_port: 3012
+      swag_proto: http
+      swag_url: cron.${MY_TLD}
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://cron.${MY_TLD}
+    ports:
+        - 31037:3012
+    restart: always
+    volumes:
+        - ${DOCKER_VOLUME_CONFIG}/cronicle/data:/opt/cronicle/data
+        - ${DOCKER_VOLUME_CONFIG}/cronicle/logs:/opt/cronicle/logs
+        - ${DOCKER_VOLUME_CONFIG}/cronicle/plugins:/opt/cronicle/plugins
+        - ${DOCKER_VOLUME_CONFIG}/cronicle/workloads/app:/app
   crowdsec:
     container_name: crowdsec
     environment:
@@ -1440,266 +1469,6 @@ services:
         type: bind
         bind:
           create_host_path: true
-  grafana:
-    container_name: grafana
-    depends_on:
-      grafana-alloy:
-        condition: service_started
-        required: true
-    environment:
-      GF_INSTALL_PLUGINS: grafana-piechart-panel
-      TZ: America/New_York
-    hostname: Rinoa
-    image: grafana/grafana-enterprise:latest
-    labels:
-      homepage.group: Infrastructure/App Performance Monitoring
-      homepage.name: Grafana (LGTM)
-      homepage.href: https://mon.${MY_TLD}
-      homepage.description: Monitoring Dashboard for metrics, logs, traces, & profiles
-      homepage.icon: grafana.png
-      homepage.widget.type: grafana
-      homepage.widget.url: http://grafana:3000
-      homepage.widget.username: admin
-      homepage.widget.password: ${GRAFANA_ADMIN_PASSWORD}
-      swag: enable
-      swag_proto: http
-      swag_url: mon.${MY_TLD}
-      swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.url: https://mon.${MY_TLD}
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "3006"
-        target: 3000
-    restart: unless-stopped
-    user: 1000:1000
-    volumes:
-      - bind:
-          create_host_path: true
-        read_only: true
-        source: /etc/localtime
-        target: /etc/localtime
-        type: bind
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/data
-        target: /var/lib/grafana
-        type: bind
-        bind:
-          create_host_path: true
-      - bind:
-          create_host_path: true
-        source: /rinoa-storage
-        target: /storage
-        type: bind
-  grafana-alloy:
-    cap_add:
-      - SYS_ADMIN
-      - SYS_TIME
-      - BPF
-      - SYSLOG
-    command: run --disable-reporting=true --stability.level=public-preview --server.http.listen-addr=0.0.0.0:12345 /etc/alloy/config.alloy
-    container_name: grafana-alloy
-    environment:
-      DOCKER_HOST: tcp://dockerproxy:2375
-    image: grafana/alloy:latest
-    labels:
-      homepage.group: Infrastructure/App Performance Monitoring
-      homepage.name: Grafana Alloy
-      homepage.description: Agent for metric/log/trace/profile collection and writing
-      homepage.href: http://192.168.1.254:12345
-      homepage.icon: sh-grafana-alloy.svg
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "12345"
-        target: 12345
-    privileged: true
-    restart: always
-    volumes:
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/alloy/config.alloy
-        target: /etc/alloy/config.alloy
-        type: bind
-        bind:
-          create_host_path: true
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/alloy/endpoints.json
-        target: /etc/alloy/endpoints.json
-        type: bind
-        bind:
-          create_host_path: true
-      - bind:
-          create_host_path: true
-        read_only: true
-        source: /proc
-        target: /host/proc
-        type: bind
-      - bind:
-          create_host_path: true
-        read_only: true
-        source: /sys
-        target: /host/sys
-        type: bind
-      - bind:
-          create_host_path: true
-        read_only: true
-        source: /
-        target: /rootfs
-        type: bind
-  grafana-loki:
-    command: -config.file=/etc/loki/loki-config.yaml
-    container_name: grafana-loki
-    depends_on:
-      grafana-alloy:
-        condition: service_started
-        required: true
-    image: grafana/loki:latest
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "3100"
-        target: 3100
-    restart: unless-stopped
-    volumes:
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/loki/loki-config.yaml
-        target: /etc/loki/loki-config.yaml
-        type: bind
-        bind:
-          create_host_path: true
-  grafana-mimir:
-    command:
-      - -ingester.native-histograms-ingestion-enabled=true
-      - -config.file=/etc/mimir.yaml
-    container_name: grafana-mimir
-    depends_on:
-      grafana-alloy:
-        condition: service_started
-        required: true
-    image: grafana/mimir:latest
-    labels:
-      homepage.group: Infrastructure/App Performance Monitoring
-      homepage.name: Grafana Mimir
-      homepage.href: http://192.168.1.254:9009
-      homepage.description: Long-term metrics storage
-      homepage.icon: /icons/grafana-mimir.png
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "9009"
-        target: 9009
-    restart: unless-stopped
-    volumes:
-      - source: grafana-mimir-data
-        target: /data
-        type: volume
-        volume: {}
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/mimir/mimir.yaml
-        target: /etc/mimir.yaml
-        type: bind
-        bind:
-          create_host_path: true
-  grafana-mimir-memcached:
-    container_name: grafana-mimir-memcached
-    depends_on:
-      grafana-alloy:
-        condition: service_started
-        required: true
-    environment:
-      MEMCACHED_MEMORY_LIMIT: 1g
-      MEMCACHED_THREADS: 4
-      MEMCACHED_MAX_CONNECTIONS: 2048
-      MEMCACHED_TCP_PORT: 11211
-      MEMCACHED_UDP_PORT: 11211
-    image: memcached
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "11211"
-        target: 11211
-    restart: unless-stopped
-  grafana-pyroscope:
-    command:
-      - -config.file=/etc/pyroscope.yml
-    container_name: grafana-pyroscope
-    depends_on:
-      grafana-alloy:
-        condition: service_started
-        required: true
-    image: grafana/pyroscope:latest
-    labels:
-      homepage.group: Infrastructure/App Performance Monitoring
-      homepage.name: Grafana Pyroscope
-      homepage.description: Profiling for applications
-      homepage.href: http://192.168.1.254:4040
-      homepage.icon: /icons/grafana-pyroscope.svg
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "4040"
-        target: 4040
-    restart: unless-stopped
-    volumes:
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/pyroscope/config.yaml
-        target: /etc/pyroscope.yml
-        type: bind
-        bind:
-          create_host_path: true
-  grafana-tempo:
-    command:
-      - -config.file=/etc/tempo.yaml
-    container_name: grafana-tempo
-    depends_on:
-      grafana-alloy:
-        condition: service_started
-        required: true
-    image: grafana/tempo:latest
-    networks:
-      default: null
-    ports:
-      - mode: ingress
-        protocol: tcp
-        published: "14268"
-        target: 14268
-      - mode: ingress
-        protocol: tcp
-        published: "3200"
-        target: 3200
-      - mode: ingress
-        protocol: tcp
-        published: "9095"
-        target: 9095
-      - mode: ingress
-        protocol: tcp
-        published: "4317"
-        target: 4317
-      - mode: ingress
-        protocol: tcp
-        published: "4318"
-        target: 4318
-      - mode: ingress
-        protocol: tcp
-        published: "9411"
-        target: 9411
-    restart: unless-stopped
-    volumes:
-      - source: grafana-tempo-data
-        target: /var/tempo
-        type: volume
-        volume: {}
-      - source: ${DOCKER_VOLUME_CONFIG}/grafana/tempo/tempo.yaml
-        target: /etc/tempo.yaml
-        type: bind
-        bind:
-          create_host_path: true
   guacamole:
     container_name: guacamole
     environment:
@@ -2259,6 +2028,7 @@ services:
       swag_port: 8096
       swag_proto: http
       swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://jf.${MY_TLD}
     ports:
       - 8487:8096
       - 7359:7359
@@ -3686,6 +3456,7 @@ services:
         bind:
           create_host_path: true
   parseable:
+    container_name: parseable
     command: [ "parseable", "s3-store" ]
     depends_on:
       - minio
@@ -3699,26 +3470,61 @@ services:
       P_S3_ACCESS_KEY: ${PARSEABLE_S3_ACCESS_KEY}
       P_S3_SECRET_KEY: ${PARSEABLE_S3_SECRET_KEY}
       P_S3_REGION: us-east-fh-pln
-    healthcheck:
-      test: [ "CMD", "curl", "-f", "http://localhost:8000/api/v1/liveness" ]
-      interval: 15s
-      timeout: 20s
-      retries: 5
     image: containers.parseable.com/parseable/parseable:latest
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Parseable
       homepage.href: https://logs.${MY_TLD}
       homepage.icon: parseable.svg
-      homepage.description: Backups for PostgreSQL
+      homepage.description: Log analytics system for high throughput log ingestion
       swag: enable
       swag_proto: http
       swag_port: 8000
       swag_url: logs.${MY_TLD}
     volumes:
-      - /parseable/staging:/staging
+      - ${DOCKER_VOLUME_CONFIG}/parseable/staging:/staging
     ports:
       - 14453:8000
+  peppermint:
+    container_name: peppermint
+    depends_on:
+      peppermint-pg-db:
+        condition: service_started
+        required: true
+    environment:
+      DB_USERNAME: peppermint
+      DB_PASSWORD: ${PEPPERMINT_PG_PASSWORD}
+      DB_HOST: peppermint-pg-db
+      SECRET: ${PEPPERMINT_SECRET_KEY}
+    image: pepperlabs/peppermint:latest
+    labels:
+      swag: enable
+      swag_proto: http
+      swag_port: 8080
+      swag_url: support.${MY_TLD}
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://support.${MY_TLD}
+      homepage.group: Professional Services
+      homepage.name: Peppermint
+      homepage.href: https://support.${MY_TLD}
+      homepage.icon: peppermint.svg
+      homepage.description: Open-source ticket management and help desk solution
+    ports:
+      - 3000:3000
+      - 5003:5003
+    restart: always
+  peppermint-pg-db:
+    container_name: peppermint-pg-db
+    environment:
+      POSTGRES_USER: peppermint
+      POSTGRES_PASSWORD: ${PEPPERMINT_PG_PASSWORD}
+      POSTGRES_DB: peppermint
+    expose:
+      - 5432
+    image: postgres:17-alpine
+    restart: always
+    volumes:
+      - peppermint-pg-data:/var/lib/postgresql/data
   pgbackweb:
     container_name: pgbackweb
     depends_on:
@@ -6593,362 +6399,6 @@ services:
         source: /rinoa-storage
         target: /storage
         type: bind
-  zammad-backup:
-    command:
-      - zammad-backup
-    container_name: zammad-backup
-    depends_on:
-      zammad-postgresql:
-        condition: service_started
-        required: true
-      zammad-railsserver:
-        condition: service_started
-        required: true
-    entrypoint: /usr/local/bin/backup.sh
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      BACKUP_TIME: "03:00"
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      HOLD_DAYS: "10"
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      TZ: Europe/Berlin
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    image: postgres:${ZAMMAD_POSTGRES_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-backup
-        target: /var/tmp/zammad
-        type: volume
-        volume: {}
-      - read_only: true
-        source: zammad-storage
-        target: /opt/zammad/storage
-        type: volume
-        volume: {}
-      - read_only: true
-        source: ${DOCKER_VOLUME_CONFIG}/zammad/scripts/backup.sh
-        target: /usr/local/bin/backup.sh
-        type: bind
-        volume: {}
-  zammad-elasticsearch:
-    container_name: zammad-elasticsearch
-    expose:
-      - 9200
-    image: bitnami/elasticsearch:${ZAMMAD_ELASTICSEARCH_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-es-data
-        target: /bitnami/elasticsearch/data
-        type: volume
-        volume: {}
-  zammad-init:
-    command:
-      - zammad-init
-    container_name: zammad-init
-    depends_on:
-      zammad-postgresql:
-        condition: service_started
-        required: true
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    hostname: init
-    image: ${ZAMMAD_IMAGE_REPO}:${ZAMMAD_VERSION}
-    networks:
-      default: null
-    restart: on-failure
-    user: "0:0"
-    volumes:
-      - zammad-storage:/opt/zammad/storage
-  zammad-memcached:
-    command: memcached -m 256M
-    container_name: zammad-memcached
-    image: memcached:${ZAMMAD_MEMCACHE_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-  zammad-nginx:
-    command:
-      - zammad-nginx
-    container_name: zammad-nginx
-    depends_on:
-      zammad-railsserver:
-        condition: service_started
-        required: true
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    expose:
-      - "8080"
-    image: ${ZAMMAD_IMAGE_REPO}:${ZAMMAD_VERSION}
-    labels:
-      swag: enable
-      swag_proto: http
-      swag_port: 8080
-      swag_url: support.${MY_TLD}
-      swag.uptime-kuma.enabled: true
-      swag.uptime-kuma.monitor.url: https://support.${MY_TLD}
-      homepage.group: Professional Services
-      homepage.name: Zammad
-      homepage.href: https://support.${MY_TLD}
-      homepage.icon: zammad.svg
-      homepage.description: Open-source helpdesk/customer support system
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - zammad-storage:/opt/zammad/storage
-  zammad-postgresql:
-    container_name: zammad-postgresql
-    environment:
-      POSTGRES_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRES_PASSWORD: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRES_USER: ${ZAMMAD_POSTGRES_USER}
-    hostname: postgresql
-    image: postgres:${ZAMMAD_POSTGRES_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-pg-data
-        target: /var/lib/postgresql/data
-        type: volume
-        volume: {}
-  zammad-railsserver:
-    command:
-      - zammad-railsserver
-    container_name: zammad-railserver
-    depends_on:
-      zammad-memcached:
-        condition: service_started
-        required: true
-      zammad-postgresql:
-        condition: service_started
-        required: true
-      zammad-redis:
-        condition: service_started
-        required: true
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    image: ${ZAMMAD_IMAGE_REPO}:${ZAMMAD_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-storage
-        target: /opt/zammad/storage
-        type: volume
-        volume: {}
-  zammad-redis:
-    container_name: zammad-redis
-    image: redis:${ZAMMAD_REDIS_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-redis-data
-        target: /data
-        type: volume
-        volume: {}
-  zammad-scheduler:
-    command:
-      - zammad-scheduler
-    container_name: zammad-scheduler
-    depends_on:
-      zammad-memcached:
-        condition: service_started
-        required: true
-      zammad-postgresql:
-        condition: service_started
-        required: true
-      zammad-redis:
-        condition: service_started
-        required: true
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    image: ${ZAMMAD_IMAGE_REPO}:${ZAMMAD_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-storage
-        target: /opt/zammad/storage
-        type: volume
-        volume: {}
-  zammad-websocket:
-    command:
-      - zammad-websocket
-    container_name: zammad-websocket
-    depends_on:
-      zammad-memcached:
-        condition: service_started
-        required: true
-      zammad-postgresql:
-        condition: service_started
-        required: true
-      zammad-redis:
-        condition: service_started
-        required: true
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    image: ${ZAMMAD_IMAGE_REPO}:${ZAMMAD_VERSION}
-    networks:
-      default: null
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - source: zammad-storage
-        target: /opt/zammad/storage
-        type: volume
-        volume: {}
   zitadel:
     container_name: zitadel
     image: ghcr.io/zitadel/zitadel:latest
@@ -7006,10 +6456,6 @@ volumes:
     name: crowdsec-config
   crowdsec-db:
     name: crowdsec-db
-  dagu_config:
-    name: dagu_config
-  dagu_data:
-    name: dagu_data
   dbgate-data:
     name: dbgate-data
   fastenhealth-cache:
@@ -7022,10 +6468,6 @@ volumes:
     name: filebeat_var
   gitea-pg-db:
     name: gitea-pg-db
-  grafana-mimir-data:
-    name: grafana-mimir-data
-  grafana-tempo-data:
-    name: grafana-tempo-data
   hortusfox_app_backup:
     name: hortusfox_app_backup
   hortusfox_app_images:
@@ -7074,12 +6516,6 @@ volumes:
     name: netbird-signal
   netbird-letsencrypt:
     name: netbird-letsencrypt
-  netbox-pg-db:
-    name: netbox-pg-db
-  netdata-cache:
-    name: netdata-cache
-  netdata-lib:
-    name: netdata-lib
   nextcloud_aio_mastercontainer:
     name: nextcloud_aio_mastercontainer
   ollama:
@@ -7092,6 +6528,8 @@ volumes:
     name: paperless-ngx-media
   paperless-ngx-pg:
     name: paperless-ngx-pg
+  peppermint-pg-data:
+    name: peppermint-pg-data
   pgbackweb-data:
     name: pgbackweb-data
   plausible-db-data:
@@ -7126,81 +6564,5 @@ volumes:
     name: wallos-db
   wallos-logos:
     name: wallos-logos
-  wazuh-dashboard-config:
-    name: wazuh-dashboard-config
-  wazuh-dashboard-custom:
-    name: wazuh-dashboard-custom
-  wazuh-indexer-data:
-    name: wazuh-indexer-data
-  wazuh_active_response:
-    name: wazuh_active_response
-  wazuh_agentless:
-    name: wazuh_agentless
-  wazuh_api_configuration:
-    name: wazuh_api_configuration
-  wazuh_etc:
-    name: wazuh_etc
-  wazuh_integrations:
-    name: wazuh_integrations
-  wazuh_logs:
-    name: wazuh_logs
-  wazuh_queue:
-    name: wazuh_queue
-  wazuh_var_multigroups:
-    name: wazuh_var_multigroups
-  wazuh_wodles:
-    name: wazuh_wodles
-  zammad-backup:
-    driver: local
-    name: zammad-backup
-  zammad-es-data:
-    driver: local
-    name: zammad-es-data
-  zammad-pg-data:
-    driver: local
-    name: zammad-pg-data
-  zammad-redis-data:
-    driver: local
-    name: zammad-redis-data
-  zammad-storage:
-    driver: local
-    name: zammad-storage
   zitadel-pg-db:
-    name: zitadel-pg-db
+    name: zitadel-pg-db
-x-shared:
-  zammad-service:
-    depends_on:
-      - zammad-memcached
-      - zammad-postgresql
-      - zammad-redis
-    environment:
-      AUTOWIZARD_JSON: null
-      AUTOWIZARD_RELATIVE_PATH: null
-      ELASTICSEARCH_ENABLED: true
-      ELASTICSEARCH_HOST: zammad-elasticsearch
-      ELASTICSEARCH_NAMESPACE: trez_it
-      ELASTICSEARCH_PORT: 9200
-      ELASTICSEARCH_REINDEX: true
-      ELASTICSEARCH_SCHEMA: http
-      ELASTICSEARCH_SSL_VERIFY: false
-      MEMCACHE_SERVERS: ${ZAMMAD_MEMCACHE_SERVERS}
-      POSTGRESQL_DB: ${ZAMMAD_POSTGRES_DB}
-      POSTGRESQL_DB_CREATE: true
-      POSTGRESQL_HOST: ${ZAMMAD_POSTGRES_HOST}
-      POSTGRESQL_OPTIONS: ${ZAMMAD_POSTGRESQL_OPTIONS}
-      POSTGRESQL_PASS: ${ZAMMAD_POSTGRES_PASS}
-      POSTGRESQL_PORT: ${ZAMMAD_POSTGRES_PORT}
-      POSTGRESQL_USER: ${ZAMMAD_POSTGRES_USER}
-      RAILS_LOG_TO_STDOUT: true
-      RAILS_TRUSTED_PROXIES: 172.18.0.0/16
-      REDIS_URL: ${ZAMMAD_REDIS_URL}
-      S3_URL: http://${ZAMMAD_S3_ACCESS_KEY}:${ZAMMAD_S3_SECRET_KEY}@minio:9000/zammad?region=us-east-fh-pln&force_path_style=true
-      ZAMMAD_BIND_IP: 0.0.0.0
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: null
-      ZAMMAD_PROCESS_SCHEDULED: null
-      ZAMMAD_SESSION_JOBS: null
-      ZAMMAD_WEB_CONCURRENCY: null
-    image: ${ZAMMAD_IMAGE_REPO}:${ZAMMAD_VERSION}
-    restart: ${ZAMMAD_RESTART}
-    volumes:
-      - zammad-storage:/opt/zammad/storage