🔧 Renovate: Update (digest) postgis/postgis:17-3.5-alpine Docker digest to 0ccc4f5

Reviewed-on: #1554

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -223,7 +223,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Dry Run
-        uses: hoverkraft-tech/compose-action@3846bcd61da338e9eaaf83e7ed0234a12b099b72 # v2.4.1
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:
@@ -427,7 +427,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@3846bcd61da338e9eaaf83e7ed0234a12b099b72 # v2.4.1
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

.gitea/workflows/renovate-pr-deploy.yml

@@ -143,7 +143,7 @@ jobs:
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@3846bcd61da338e9eaaf83e7ed0234a12b099b72 # v2.4.1
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

README.md

@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.69 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -57,7 +57,7 @@
 | ghost | ghost:latest | Personal blog |
 | gitea | gitea/gitea:1.25.2 | Private Code Repo |
 | gitea-db | postgres:14 |  |
-| gitea-runner | gitea/act_runner:latest |  |
+| gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
 | gitignore-io | guog/gitignore.io:latest | .gitignore generator |
 | gluetun | qmcgaw/gluetun:latest |  |
@@ -95,7 +95,8 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:latest | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:0.131.0 | Self-hosted digital asset manager for 3D print files |
+| manyfold-pg-db | postgres:18-alpine |  |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
 | mastodon | lscr.io/linuxserver/mastodon:latest | Open-source social network |
@@ -162,7 +163,7 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.16.45 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.16.47 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:2e346b104ef1dc4450a045bb0aa633c0a0bf60c1bdf2bd34f2c0d0e3fe847013
+  image: h2invent/jitsi-admin-main:latest@sha256:9907e588829fcb3c1b96fa0dcc00719dbea4f7d360b2757cb6fec2602b008872
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:b4ee67d73e00393e712accc72cfd7003b87d0fcd63f0eba798b23251bfc9c394
+  image: docker.io/valkey/valkey:9-alpine@sha256:c106a0c03bcb23cbdf9febe693114cb7800646b11ca8b303aee7409de005faa8
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:8f72d73e68958566850325c1f9fe780a4477340979969bd6979649dc519723ab
+    image: docker.io/actualbudget/actual-server:latest@sha256:e82b7302b0db7f8fa063159e8bddc07443bb83761798dc9ba84fe1b3df62d74f
     labels:
       swag: enable
       swag_port: 5006
@@ -177,7 +177,7 @@ services:
     container_name: adguard
     environment:
       TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.69@sha256:8a4107ec812023842ccab9e04600c5d39d3be6b15e907c34a36339c184c8fccf
+    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
     labels:
       swag: enable
       swag_proto: http
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:a99a83e24e09d548279906495ba26b7f7def29feae0300583085780cd162a98d
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:c188764bbf0d3a84921ed530438a2364d30abd7c36f42bc4103438041333e22c
     labels:
       swag: enable
       swag_proto: http
@@ -357,7 +357,7 @@ services:
       URL_HOST: asciinema.trez.wtf
       URL_PORT: 4000
       URL_SCHEME: https
-    image: ghcr.io/asciinema/asciinema-server:latest@sha256:ce1dcd55850219d2b4fa729e5f6c64efbb0af1b05d94bd150334770231762507
+    image: ghcr.io/asciinema/asciinema-server:latest@sha256:db0f8dd4e41b386b0fd5fa4ab783a297b123f68c2b6bc64cc97e35edfc8305d1
     labels:
       homepage.group: Code/DevOps
       homepage.name: Asciinema
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:1bf14357b97fe10f21f2eda7f0d230b2514ab5770ab81cb9cd6cce6750d68b26
+    image: postgres:14-alpine@sha256:14f02666642586a64d6fae8ef42d479fd76456a77c73ae8a626b8fe323b76d22
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:6fbd7dc95d53c6e168ce69e760b87c334e3b9ba88bf7b8531ed5a116d5d6da03
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:a52dc5db694a5bf041ce38f285dd6c6a660a4b1b21e37ad6b6746433263b2ae5
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -585,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:623978b755878897e82915aa084b4f17037b78baea4afafeb160d1bde679fa1c
+    image: authelia/authelia:master@sha256:59fac7802044c53bdf278ed41ed696130f57a71bfdf236394118a69505542632
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -679,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:2be164c02c0bb311b6c32e57d3d0ddc2813d524e89ab51a3408c1bf6fafecda5
+    image: lscr.io/linuxserver/bazarr:latest@sha256:5af962ae633e97c8e008e4b6e638798de1420e8a9e8e6189beb108a52c6e942a
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -726,7 +726,7 @@ services:
     container_name: beszel
     extra_hosts:
       - host.docker.internal:host-gateway
-    image: henrygd/beszel:latest@sha256:24c5513b364a2cb6f966819389128999817afbaebfe81ba2980289e39326f484
+    image: henrygd/beszel:latest@sha256:dac99b67c250fe5492d9c6f5d889905fa93726cf8f44eaa7bc0970c7e3ea2eeb
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Beszel
@@ -767,7 +767,7 @@ services:
       KEY: "${BESZEL_RINOA_AGENT_KEY}"
     expose:
       - 45876
-    image: henrygd/beszel-agent:latest@sha256:dee59d68ac327a755aec7651dd31b9f9a6d7db3da6f093e16e8c36c1f71a18cd
+    image: henrygd/beszel-agent:latest@sha256:137f2aefa4f8b06df8a94cc85449da6da2e1977230bfa5fdce9d0119ada19b0a
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -889,7 +889,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:78069f933b3b457410a9348845d7273d8ada8e2f10a85b5f5a7e9895f1334093
+    image: ghcr.io/browserless/chromium:latest@sha256:721bc471a3a23d9b18cae3a41ac129f25d454e8a15b797c1da3f8a98827642c3
     labels:
       swag: enable
       swag_proto: http
@@ -949,7 +949,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:99cf11f04b5d1f1300b5b68f17dc22e76bdb5d6695d7e6590d2df92eca8fb339
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:8ef2849ceac50e98e37b91dd1b9a32cb495e8ce38937617267d9d22013572659
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -980,7 +980,7 @@ services:
     cap_add:
       - SYS_ADMIN
     container_name: changedetection-chrome
-    image: dgtlmoon/sockpuppetbrowser:latest@sha256:50619e56663d81c2b46a2219ea91220c05d2e403448df8bdff12dbe4b1ab910b
+    image: dgtlmoon/sockpuppetbrowser:latest@sha256:7116c61ef9cfce3d48a7efd9355d2fbe19f593ea3cfb52a5ded40ecbcb0a3f9d
     environment:
       SCREEN_WIDTH: 1920
       SCREEN_HEIGHT: 1024
@@ -1048,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:b64687779bbe0dcd41f9854129ce8fa9d6c5f009e1992a79bed97c85fe253eaf
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:a583c04378abe62040b44e281c9572d447ad4e55ed4567b8c020816d78bb8c4f
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1074,7 +1074,7 @@ services:
     container_name: convertx
     environment:
       JWT_SECRET: ${CONVERTX_JWT_SECRET}
-    image: ghcr.io/c4illin/convertx@sha256:53f2c04ebe63fdfb4d812ee66b78a5db9360c729f3defe3dcc864256ff91a7cb
+    image: ghcr.io/c4illin/convertx@sha256:e1f85be04bbaf8a55ead9261194c3ae0fa0957d303ea537127154860b2552afd
     labels:
       homepage.group: System Administration
       homepage.name: ConvertX
@@ -1131,7 +1131,7 @@ services:
         timokoessler/mongodb
         timokoessler/uptime-kuma
         xs539/joplin-server
-    image: crowdsecurity/crowdsec:latest@sha256:4beb1633cf4f41bb6f9e64d065d151d3aa5e3aa7082d5c3061a243037db0d890
+    image: crowdsecurity/crowdsec:latest@sha256:4312a5109057f2a6b1237431abe638cd1026ecb3a9c2707c6ccc1ed09e4cb994
     networks:
       default: null
     ports:
@@ -1158,7 +1158,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:bbea3d5c486de65f1b80b2315c36b184ec9ee66525cf49e8c596b3707485008a
+    image: metabase/metabase@sha256:2284624757c442933115fce4d64b99ea1854edad60453fb468e650dd5f4566a3
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1226,7 +1226,7 @@ services:
       WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
       WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
       CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:03109f40d1bc41ebe24c2fd3ee81429950338591bbb64c4cf39ec6160fee75a4
+    image: jlesage/czkawka@sha256:8acdc65b4fa28005404de995abeeaf517ea0d0b7f715d3f5d548982d83c99c6d
     labels:
       homepage.group: System Administration
       homepage.name: Czkawka
@@ -1274,7 +1274,7 @@ services:
       DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:42657c77f5eb1a4fd2b0cf222ae1b2403cc2dc9d37fe56d66f9c080e4aaa7688
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:38305e41eba65f961531c9ccc4dc106a91d488ea72f8f7d8fd9a1f11f7880030
     labels:
       homepage.group: Automation
       homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:c3225f42870d322d7a2fa5f2c60833de8860ffcb30c2c084ab8eb797bf5a3010
+    image: freikin/dawarich:latest@sha256:d87c0e63a7475cfa50ebbc5b7d7dd814a010a48f989a35ca0c4affdcf63c278b
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1392,7 +1392,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:f439e384b4111f0bc21b4a49e223f8fd7f40516285fc3825d7a8af15e710d47c
+    image: postgis/postgis:17-3.5-alpine@sha256:0ccc4f581a6d6016d9ebee67f0496702005e6b5650b710b9ae6edbd5ccf7ceff
     profiles: ["rinoa-apps"]
     restart: always
     shm_size: 1G
@@ -1443,7 +1443,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:c3225f42870d322d7a2fa5f2c60833de8860ffcb30c2c084ab8eb797bf5a3010
+    image: freikin/dawarich:latest@sha256:d87c0e63a7475cfa50ebbc5b7d7dd814a010a48f989a35ca0c4affdcf63c278b
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1459,7 +1459,7 @@ services:
       - dawarich-valkey-data:/data/valkey
   dead-man-hand:
     container_name: dead-man-hand
-    image: ghcr.io/bkupidura/dead-man-hand:latest@sha256:31905f19678f60d55ecdfa63dad009c07e2055cb5db0c608c8cab5de4467050e
+    image: ghcr.io/bkupidura/dead-man-hand:latest@sha256:bdfcc5b2429bf02aa37ec78e120078572fd6f8e4161973ec4d0250c7ad378779
     environment:
       DMH_CONFIG_FILE: /data/config.yaml
     labels:
@@ -1506,7 +1506,7 @@ services:
       TASKS: 1
       VOLUMES: 1
       LOG_LEVEL: debug
-    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:3400c429c5f9e1b21d62130fb93b16e2e772d4fb7695bd52fc2b743800b9fe9e
+    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476
     networks:
       default: null
     ports:
@@ -1642,7 +1642,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:1efa096a59254e8232dfe1e1cfac1d16ec783b6b2baf2f814d2b53b7b26a41be
+    image: lscr.io/linuxserver/duplicati:latest@sha256:3d8ac3bc359a2ae0703b3062f390087ffb97bc04c041e9a336495ecbccb17dca
     labels:
       swag: enable
       swag_port: 8200
@@ -1695,7 +1695,7 @@ services:
         type: bind
   excalidraw:
     container_name: excalidraw
-    image: "excalidraw/excalidraw:latest@sha256:7f48a686abb742397c1a9dc146812a60198e356c1fece05c2f1e011d2971c3bf"
+    image: "excalidraw/excalidraw:latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c"
     labels:
       homepage.group: Personal Tools
       homepage.name: Excalidraw
@@ -1858,7 +1858,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:8a30cacb126262887f4db101e438271ade0b51437917b8165d26b0fede72ccf2
+    image: ghost:latest@sha256:86090f3ee57af8d8e3fa11875b5787068a1c17b8aebd4b88d932efe11097f578
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1963,7 +1963,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:ca25035f7e6f74552655a1c5e4a9eb21f85e9d316f1f70371f790ef70095dd58
+    image: postgres:14@sha256:da076311f78c56e4bf6548ef3668fa77fa2865c5efca3f79a6d6bb9b3710b477
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -1983,7 +1983,7 @@ services:
       GITEA_INSTANCE_URL: http://gitea:3000
       GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
       GITEA_RUNNER_NAME: "gitea-runner-1"
-    image: gitea/act_runner:latest@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
+    image: gitea/act_runner:nightly@sha256:ec2fa777af444b08d070e6b42627a1b8463c522ab0da1e5f5b587b9d3bf9e112
     ports:
       - 63604:63604
     profiles: ["rinoa-infra"]
@@ -2076,7 +2076,7 @@ services:
       GOTIFY_UPLOADEDIMAGESDIR: data/images
       GOTIFY_PLUGINSDIR: data/plugins
       GOTIFY_REGISTRATION: false
-    image: gotify/server@sha256:2ae0e4e689f183137c8247884382fcb174d5a72253ce1897e7e5267090093fc8
+    image: gotify/server@sha256:4702c392ca723d5016fc938c8b22572c3509efca812bdc5221d25158ba0201e3
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Gotify
@@ -2144,7 +2144,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:b6ac42c31845ea7c862d71451c16413a6284430d8ff08e16ad791f42718a7c71
+    image: ghcr.io/gethomepage/homepage:latest@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2165,7 +2165,7 @@ services:
   hugo:
     command: hugo server --baseURL "it-services.${MY_TLD}" --bind 0.0.0.0 --appendPort=false --source=/src/ --configDir=/src/config/ -e production --logLevel debug
     container_name: hugo
-    image: hugomods/hugo:exts@sha256:86b9a9ee8915be9cd5e9b555082352ab502daebf12c0bdae0a513f5340586496
+    image: hugomods/hugo:exts@sha256:dcbc5b53c4e53bb74a7c986caf58a3954395a1e9d8dc9bb492f2c610a7cf6eb0
     labels:
       swag: enable
       swag_proto: http
@@ -2219,7 +2219,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:f8d06a32b1b2a81053d78e40bf8e35236b9faefb5c3903ce9ca8712c9ed78445
+    image: ghcr.io/immich-app/immich-server:release@sha256:e6a6298e67ae077808fdb7d8d5565955f60b0708191576143fc02d30ab1389d1
     labels:
       swag: enable
       swag_proto: http
@@ -2262,7 +2262,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:379e31b8c75107b0af8141904baa8cc933d7454b88fdb204265ef11749d7d908
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b3deefd1826f113824e9d7bc30d905e7f823535887d03f869330946b6db3b44a
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2312,7 +2312,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:ed5c7cc406bd26bb1cff327b8a3d8aad35210e45830b620d55f280773b528f3b
+    image: alangrainger/immich-public-proxy:latest@sha256:8ec9c90824c14843c52856df8a55ed0f12160c77564b3e67a235ffc462ea15fc
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2362,7 +2362,7 @@ services:
       DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: /run/secrets/influxdb2-admin-token
       DOCKER_INFLUXDB_INIT_ORG: rinoa
       DOCKER_INFLUXDB_INIT_BUCKET: rinoa
-    image: influxdb:2-alpine@sha256:b4dbe25bb8f8be38f9cf5a12cbca453318a1ad3475954e9d37c38f6e5bc5006b
+    image: influxdb:2-alpine@sha256:fb537cf0d57937a57eac33efd079ae5b36a1d35437dc1eba1ecb8800a352b62a
     labels:
       swag: enable
       swag_proto: http
@@ -2433,7 +2433,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:9c6039ebe1691e70c76aefd207b1ea2784a4d8d1a7c531cdb18e6d1317c468e9
+    image: quay.io/invidious/invidious-companion:latest@sha256:07a1dd6893e6311e341067cf61ba5f920184e40339e4b4e195f5713f99311343
     logging:
       options:
         max-size: "1G"
@@ -2457,7 +2457,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:ca25035f7e6f74552655a1c5e4a9eb21f85e9d316f1f70371f790ef70095dd58
+    image: docker.io/library/postgres:14@sha256:d508bf6220b5c7b7cd9c735d6abd5ea2e6e4e45882a29ed704f625aba32bd935
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2506,7 +2506,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:aab0b50a3ce43a41621fc7040a379cc57174059aec8f9c17a90176649a0c1ab1
+    image: jellyfin/jellyfin@sha256:333b647716631443a43c7fabac4b0c46b4e2f036bad19547e00958f10f721b85
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3133,7 +3133,7 @@ services:
       POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
     expose:
       - 5432
-    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -3165,7 +3165,7 @@ services:
       POSTGRES_USER: ${JOPLIN_POSTGRES_USER}
       POSTGRES_PORT: 5432
       POSTGRES_HOST: joplin-db
-    image: joplin/server:latest@sha256:95b67dc6a4e77a974ac2bcc86818cbbfe5495e7b62d06a66f848a877878dce53
+    image: joplin/server:latest@sha256:5d9e7f9d31b436cb1b99d1a6a65d8c5bf760829094617e8ad1e956fd925de888
     labels:
       homepage.group: Personal Tools
       homepage.name: Joplin
@@ -3189,7 +3189,7 @@ services:
     restart: unless-stopped
   karakeep:
     container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:be023336ed2ffb4c82209b068fd68f31e33b4a365e8222f8e8fbb499085c00af
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:2724d4a9a6d13a7fa3babf53b9245767aae56c34f06042a8463ee983c6b41caf
     environment:
       BROWSER_WEB_URL: http://chrome:9222
       DATA_DIR: /data
@@ -3233,7 +3233,7 @@ services:
       Java_Xmx: 1g
     expose:
       - 8010
-    image: elestio/languagetool:latest@sha256:85a32bdef9e7d87125977a201bfe7aa4310e67cab8abfa370157a9fc67cda4cd
+    image: elestio/languagetool:latest@sha256:f0c2e7a1dc3b9acc893f86959406500fe04764ff49372a5d2fb69d6206f09c65
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3244,7 +3244,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:8724755a6f9cc7ac6c1241784baef88abfe28015966271e7f78bc106d8914d78
+    image: libretranslate/libretranslate@sha256:233a6911654d99c6da39a7ec8dde47c31c69359e19eab086fb3c5b1aae0bd188
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3278,7 +3278,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:01d64fdba60554f5928b2ff8294a45c2e049423d5a9bac62167c40bdaeca231f
+    image: lscr.io/linuxserver/lidarr:latest@sha256:be65454ba890ad01a93b01cfc178adfa1a397b487bfdce2ac23bd956c473d10d
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3371,7 +3371,7 @@ services:
         type: bind
   linkstack:
     container_name: linkstack
-    image: linkstackorg/linkstack:latest@sha256:abd691b4293b020a317de8794737671e0315159efcb868e8a4124d6f0611f7ae
+    image: linkstackorg/linkstack:latest@sha256:2b298302ab50184cf99294ef3ae6a3c49c13081162e9a1d067a872e9c75b3e55
     environment:
       TZ: ${TZ}
       SERVER_ADMIN: noreply@${MY_TLD}
@@ -3432,6 +3432,7 @@ services:
     networks:
       default: null
     ports:
+      - 3890:3890
       - 17170:17170
     profiles: ["rinoa-apps"]
     restart: always
@@ -3442,7 +3443,7 @@ services:
         bind:
           create_host_path: true
   loggifly:
-    image: ghcr.io/clemcer/loggifly:latest@sha256:6faa4d4964994a9213494f879b58085acc04cafa2927cadfde98657676dfd199
+    image: ghcr.io/clemcer/loggifly:latest@sha256:9f6a673cd11fb90ffd0cfdb9675d5d3b9b3dfac060800fab52ec8dfbd4cc0293
     container_name: loggifly
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -3512,11 +3513,17 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-      DATABASE_URL: sqlite3:/config/manyfold.sqlite3
-      REDIS_URL: redis://manyfold-valkey:6379/2
+      DATABASE_URL: postgresql://manyfold:${MANYFOLD_PG_DB_PASSWORD}@manyfold-pg-db:5432/manyfold
+      REDIS_URL: redis://manyfold-valkey:6379/0
       SECRET_KEY_BASE: ${MANYFOLD_SECRET_KEY_BASE}
       MUTLIUSER: enabled
-    image: lscr.io/linuxserver/manyfold:latest@sha256:c5e6025fe0a2c6b804454e9324ac1757332ef37734279cb47b360f21a146a2d0
+      MANYFOLD_LOG_LEVEL: info
+      SMTP_SERVER: postal-smtp
+      SMTP_PORT: 25
+      SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
+      SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
+      SMTP_FROM_ADDRESS: noreply@${MY_TLD}
+    image: lscr.io/linuxserver/manyfold:0.131.0@sha256:ae82810d884268ba69dabe30c8691a2e6fe230618a90220016c830a741cefa11
     labels:
       homepage.group: Lifestyle
       homepage.name: Manyfold
@@ -3538,8 +3545,26 @@ services:
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
-      - ${DOCKER_VOLUME_CONFIG}/manyfold/config:/config
-      - ${DOCKER_VOLUME_CONFIG}/manyfold/library:/libraries #optional
+      - ${DOCKER_VOLUME_CONFIG}/manyfold/library:/libraries
+  manyfold-pg-db:
+    container_name: manyfold-pg-db
+    environment:
+      POSTGRES_USER: manyfold
+      POSTGRES_PASSWORD: ${MANYFOLD_PG_DB_PASSWORD}
+      POSTGRES_DB: manyfold
+    expose:
+      - 5432
+    healthcheck:
+      test: pg_isready -q -t 2 -d $$POSTGRES_DB -U $$POSTGRES_USER
+      start_period: 20s
+      timeout: 30s
+      interval: 10s
+      retries: 5
+    image: postgres:18-alpine@sha256:b40d931bd0e7ce6eecc59a5a6ac3b3c04a01e559750e73e7086b6dbd7f8bf545
+    profiles: ["rinoa-apps"]
+    restart: always
+    volumes:
+      - manyfold-pg-db:/var/lib/postgresql/data
   manyfold-valkey:
     container_name: manyfold-valkey
     <<: *valkey-params
@@ -3562,7 +3587,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:73a403f999eb7317b0fcd084f42bd77ed813f4e09d2a4ebc1ba90ea48e43041a
+    image: linuxserver/mariadb@sha256:d33fb3da7766dbe445f4781b0a78e42fcf7e87d8cb4c9f2d5a37abaa8c4316ca
     networks:
       default: null
     ports:
@@ -3616,7 +3641,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:32b5274a9ad46981c1d9ca99616bf876f03d1526e68efa548fac2ea157282033
+    image: lscr.io/linuxserver/mastodon:latest@sha256:ffd718f5a7192b2cf29044678bf0d32aebf6039778bf3fcc4c859df81bbfab87
     labels:
       swag: enable
       swag_proto: http
@@ -3657,7 +3682,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3679,7 +3704,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:e45e7aec5d9b2794f4c798a03814ac03090e480c6ad134588caa1de7cd372b66
+    image: getmaxun/maxun-backend:latest@sha256:5f986441487a2fa92c98937a8cf34786062326716f29dfab50c3fe4e35d68995
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3695,7 +3720,7 @@ services:
     depends_on:
       - maxun-backend
     <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:6d6f2974a153f7d0d9ca8aa72db45bfe875ad6041e73d54e6f84e1337d2279f9
+    image: getmaxun/maxun-frontend:latest@sha256:b2721be4e4791f563aaee6cf3dc4ab3068275c6224714e82e599cab282e53dfa
     labels:
       swag: enable
       swag_proto: http
@@ -3723,7 +3748,7 @@ services:
     restart: unless-stopped
   maxun-pg-db:
     container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     environment:
       POSTGRES_USER: maxun
       POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3776,7 +3801,7 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/memes/:/rails/public/memes
   meme-search-pro-img2txt-gen:
-    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:62d1dbbdab12e543f0ba13d3419ea9d234d61531bef95b910794a31a3c54db51
+    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:81ffbc934de800f3f5206f742db534a78596ec894e348dc25548495a1e9ad78e
     container_name: meme-search-pro-img2txt-gen
     deploy:
       resources:
@@ -3959,7 +3984,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:542095b9517562dbbd4dd061a19459168237eb5f26841ac0e56c89ebb2eb4173
+    image: mongo:7@sha256:4510cf3d7050003e958745adb25d2deb3fb907430716162d9cc1a92eda2a6047
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -3995,7 +4020,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:5c261a306f4ee714ebf0e3a0f2aa6c74d312b938a0524884cc42755e91f1343e
+    image: foxxmd/multi-scrobbler@sha256:489684af568507ab33de0befd1138cd5c815b2fa6c728ab968516053495d609f
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -4082,7 +4107,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:648ebd45c50c58edc7ad9f0cc3b4411a1bece16c81f0b3630a0ab0a739c6d7ec
+    image: deluan/navidrome:latest@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4122,7 +4147,7 @@ services:
     environment:
       TZ: ${TZ}
       PORT: 20211
-    image: jokobsk/netalertx:latest@sha256:fd1a4ca4bd4c0f38797b36b4ec5b0928d7add7b9add788d9cedb11fd25a42a65
+    image: jokobsk/netalertx:latest@sha256:effae612fe9dd55e0ded482d340425dcd720b8898d37bd3bc3dc4be7b3598b28
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4166,7 +4191,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:bea462cf8835d6034b257ad3f2190eb18ccb1edaec11b8d4d802f322a380efb8
+    image: nextcloud/all-in-one:latest@sha256:5a0ba9b760be86ce3938695c7d0af0a6f64c9df0017fd90c3a1bc523fcb99b7b
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4217,7 +4242,7 @@ services:
       NC_SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       NC_SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       NC_SMTP_FROM: noreply@${MY_TLD}
-    image: "nocodb/nocodb:latest@sha256:8fd57018accf775fb5390392910e4b0ef6bb154f17c5732b478eb76c40ee8d1e"
+    image: "nocodb/nocodb:latest@sha256:d3aba4f7e89bd18fc01d6853eea0fa82476b161a678f7f0ff52380f4c52bb87f"
     labels:
       homepage.group: Code/DevOps
       homepage.name: NocoDB
@@ -4254,7 +4279,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4271,7 +4296,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:acefcbde5f9fa09ea39451fc13fcc95aa6a877010b2d92f688a17361ddc14b3b
+    image: lscr.io/linuxserver/ombi:latest@sha256:5c2d3a515b5c1d120cb70f3c701c3c760ce742edd352f3acaa430280d9b725eb
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4314,7 +4339,7 @@ services:
         type: bind
   omnitools:
     container_name: omnitools
-    image: iib0011/omni-tools:latest@sha256:66027051e7fcf25ca898f3ddddb1e7a7a6682fea4985ca4b96444a7b9d5a984c
+    image: iib0011/omni-tools:latest@sha256:4c89fb9492482b9cb9cbe65b5d2c67d4d281705c079ad0e53a23520526020aad
     labels:
       homepage.group: Personal Tools
       homepage.name: OmniTools
@@ -4392,7 +4417,7 @@ services:
       RAG_WEB_SEARCH_ENGINE: searxng
       RAG_WEB_SEARCH_RESULT_COUNT: 3
       RAG_WEB_SEARCH_CONCURRENT_REQUESTS: 10
-      SEARXNG_QUERY_URL: "http://searxng:8080/search?q=<query>"
+      SEARXNG_QUERY_URL: "https://search.trez.wtf/search?q=<query>"
       ENABLE_LDAP: true
       LDAP_SERVER_LABEL: rinoa-ldap
       LDAP_SERVER_HOST: lldap
@@ -4402,7 +4427,7 @@ services:
       LDAP_APP_DN: uid=authelia,ou=people,dc=trez,dc=wtf
       LDAP_APP_PASSWORD: ${AUTHELIA_AUTH_BIND_LDAP_PASSWORD}
       LDAP_SEARCH_BASE: dc=trez,dc=wtf
-      LDAP_SEARCH_FILTERS: "(&({username_attribute}={input})(objectClass=person))"
+      LDAP_SEARCH_FILTER: "(objectClass=inetOrgPerson)"
       LDAP_USE_TLS: false
       # LibreTranslate
       LT_DEBUG: false
@@ -4419,7 +4444,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:c0297cf2f76e0ba21d19eb3a21753d3b271c0247694cba3948677d2a97ec559f
+    image: ghcr.io/open-webui/open-webui:main@sha256:000b87a6ae726aa7f6611a0064ba528ba1a6aff6ead5fb3b6c89fd4a5717eb8a
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4470,7 +4495,7 @@ services:
       PAPERLESS_URL: https://docs.${MY_TLD}
       USERMAP_GID: ${PGID}
       USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:8ffd737c69a569bbdadc118e7f54b0b1050ffac2868fdf9e390a68cb7c82a79d
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:665f2f5cc5482ea2e44f90a7fa170908aaeb95d8d3c70e17f746de8fcb81f644
     labels:
       swag: enable
       swag_proto: http
@@ -4562,7 +4587,7 @@ services:
       interval: 5s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     restart: unless-stopped
     volumes:
       - pgbackweb-data:/var/lib/postgresql/data
@@ -4637,7 +4662,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4751,7 +4776,7 @@ services:
     expose:
       - 9000
       - 9443
-    image: portainer/portainer-ce:alpine@sha256:5135ffc483be84b773288c92c80a054a234abcf615975d6122cbe930f5c65d27
+    image: portainer/portainer-ce:alpine@sha256:a04e0ac3e99172e451055419e2ed46c67f24bff72209ab09235079d7642e87d8
     labels:
       swag: enable
       swag_proto: http
@@ -4803,7 +4828,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:8bea203e8785541c0acac7860de9f70849b05806e0c6db1d83dfc1b8407a6077
+    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:089b0e92e3071c3a586dbb3f6f021033a30777500167a5eb52fc727819d6458c
     labels:
       swag: enable
       swag_auth: authelia
@@ -4835,7 +4860,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:7783796d791c3e10aedba9d5f7fc2b934bb0e7afa75bc89054b70b886ed39e5c
+    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:e0c01460b689ac1fbb11ef0e93e08971fb2a4c907e7cabeaf53586680c3be77d
     ports:
       - 36102:8000
     profiles: ["rinoa-apps"]
@@ -4925,7 +4950,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:475853535de3de8441b87c1457c30f2e695f4831228b12b6b7274e9da409d874
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -5141,7 +5166,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:06ac318ecb95a34c7b229568dcb4271f02cb5007bb189a0dd67a2032864187ca
+    image: lscr.io/linuxserver/radarr:latest@sha256:270f25698624b57b86ca119cc95399d7ff15be8297095b4e1223fd5b549b732c
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5203,7 +5228,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:f1b27f567b2a1b57fb6b2a81f7b9cec0af577b6be945820c1599a0a8b6b91f8b
+    image: amruthpillai/reactive-resume:latest@sha256:f26fd329f35b97bccdf5ee5a7b558df0ccf1e073a1d7a5787e433043e22b9296
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5236,7 +5261,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5305,7 +5330,7 @@ services:
       REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION: off
       REDLIB_DEFAULT_HIDE_SCORE: off
       REDLIB_DEFAULT_FIXED_NAVBAR: on
-    image: quay.io/redlib/redlib:latest@sha256:25dbb5466ebd22e58277d4aa54897899b044f02f7219ca3054784aecc0be34e1
+    image: quay.io/redlib/redlib:latest@sha256:dffb6c5a22f889d47d8e28e33411db0fb6c5694599f72cf740c912c12f5fc1c6
     labels:
       homepage.group: Social
       homepage.name: Redlib
@@ -5643,7 +5668,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:0124d32d77e0c7360d0b85f5d91882d1837e6ceb243c82e190f5d7e9f1401334
+    image: searxng/searxng:latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5701,7 +5726,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.16.45@sha256:979a5924ed459d5169178197fc7b4d849bcb6fbb4aded1f1d1c0b279717b5187
+    image: semaphoreui/semaphore:v2.16.47@sha256:71aabf9314d1051ab92025f26809daea72bd90cb78a6a2badfe15400acf11619
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5959,7 +5984,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:9a78577340f3d26384b6aebeb475c0d46d664fd4ffa68503b4be4e4462745f94
+    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
     profiles: ["rinoa-infra"]
     restart: unless-stopped
     volumes:
@@ -5973,7 +5998,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:60e5edcac39172294ad22d55d1b08c2c0a9fe658cad2f2c4d742ae017d7874de
+    image: lscr.io/linuxserver/sonarr:latest@sha256:02b4d538d351d6e35882a021c08e8600fe95d28860fb1dd724b597166e7221ca
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6077,7 +6102,7 @@ services:
       TZ: ${TZ}
       #Script interval in seconds
       SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:71a0b9e5a522d76bb0ffdb6d720d681fde22417b3a5acc9ecae61c89d05d8afc
+    image: mrusse08/soularr:latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
     network_mode: service:gluetun
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -6096,7 +6121,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:61181c5809845d2c49c8c3c182c0280c5c91069cd2e5d7c341ddd8bfa2c01598
+    image: ghcr.io/mrusse/soularr:main@sha256:84fead20dc2bcc00d6f0d2df53e56866b4fe634640e075820b420ae4ea146fd2
     labels:
       homepage.name: Soularr
       homepage.group: Downloaders
@@ -6131,7 +6156,7 @@ services:
         condition: service_started
         required: true
         restart: true
-    image: slskd/slskd@sha256:239ccb871fa1a624aa8ad4f11a712b4ec6c7a2ff570bf5800abae2cf91030834
+    image: slskd/slskd@sha256:e3635858d9614a2fb811601afca706dbf97a6838b849905c27294cbce71be268
     labels:
       homepage.name: Soulseek
       homepage.group: Downloaders
@@ -6160,7 +6185,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:7a0af49937e7a6003e98582acaa6c647136e2776121e34749dd1f23d74a535e7
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:d00dcbe8cd2c868ec059dd70379d8d7b033932c8fbeb744f6e10d0133c664a42
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6200,7 +6225,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:af9942975d39b953a008aaa1bb2bbb23330d725d8aeda835eb53de3715e42e36
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:8fb811bce906513dc5dd312981f070e4780e02da20b7a20327d6e141077532f5
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6252,7 +6277,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:c618d7be86c61924355299048d169412c2ebc4fb4489b9d2e3064f9574acd4cb
+    image: lscr.io/linuxserver/swag:latest@sha256:5ff9f08a09cc4b224f89430615388758cc7e29c9e644614348172cf2f7ac66b9
     labels:
       swag: enable
       swag_proto: http
@@ -6354,7 +6379,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:79c06d285ed9186efbbc45c73413b3c3510c3c94ffede2f25d1e523f74d07f28
+    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6423,7 +6448,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:bb6af876ff5ba04c368c27490ce51631b25f1aedd52734f772afcabf2f30c1df
+    image: josh5/unmanic:latest@sha256:0dd283b467f327310eaa972df3b31902cfe7170b66ad8a766496f95eaf030cb8
     labels:
       homepage.group: Media Library
       homepage.name: Unmanic
@@ -6522,7 +6547,7 @@ services:
     environment:
       AWS_ACCESS_KEY_ID: ${VAULT_HASHICORP_AWS_ACCESS_KEY_ID}
       AWS_SECRET_ACCESS_KEY: ${VAULT_HASHICORP_AWS_SECRET_ACCESS_KEY}
-    image: hashicorp/vault:latest@sha256:f4e2687b72858a9e2160c344c9fa1ef74c07f21a89a8c00534ab64d3f187b927
+    image: hashicorp/vault:latest@sha256:eb0ba6836e8d4699b7a1e8ca70d8433f7b87dcd067e6d82dff237d3ed2600ea0
     labels:
       homepage.group: Code/DevOps
       homepage.name: HashiCorp Vault
@@ -6552,7 +6577,7 @@ services:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:1277c83dc626853ac14658c1b0aaf003e1bced213c37370d149fdd9622b5747f
+    image: bellamy/wallos:latest@sha256:9f1bbd7f24e2afdac64ff0985ef801d48f63086540a0844fc05727642bb5360a
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6608,7 +6633,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:a87465ded0f27548e09fb666a8efaba8ceb3aa4200ed1f53b0ba786503620904
+    image: clidey/whodb@sha256:86a72847c4410bc0bb4dc6a0156eef4eb0da0033fee9c149e3afadaca879847f
     environment:
       WHODB_CLICKHOUSE_1: '{
         "host": "signoz-clickhouse"
@@ -6783,7 +6808,7 @@ services:
       PGID: ${PGID}
       DISABLE_BUILTIN_AUTH: true
       TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:5809c5da07883e3e572b279e41998a6ae93a17f978da899cfe803bc8d7b459fe
+    image: ghcr.io/wizarrrr/wizarr@sha256:83fc0b50985d196226b7c28a27062a1c4e63124a5d6d2448710aee222637b79e
     labels:
       homepage.group: Servarr Stack
       homepage.name: Wizarr
@@ -6814,7 +6839,7 @@ services:
       YDL_CONFIG_PATH: /youtube-dl/config.yml
       YDL_DEBUG: "false"
     hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:a5274ded39024da2fe8c3116747e9b906a867ffea8307a6cd4220215f1dfefed
+    image: nbr23/youtube-dl-server:latest@sha256:343b29500cd23668c5a9f6b4c4849f28f60a3bfe22c526ad919f461dfc192c8f
     labels:
       homepage.group: Downloaders
       homepage.name: YoutubeDL
@@ -6930,6 +6955,8 @@ volumes:
     name: libretranslate_models
   lldap_data:
     name: lldap_data
+  manyfold-pg-db:
+    name: manyfold-pg-db
   manyfold-valkey-data:
     name: manyfold-valkey-data
   mastodon-pg-db: