Testing with extra env.

.gitea/workflows/opencommit.yml

@@ -0,0 +1,36 @@
+name: 'OpenCommit Action'
+
+on:
+  push:
+    # this list of branches is often enough,
+    # but you may still ignore other public branches
+    branches-ignore:
+      - main
+
+jobs:
+  opencommit:
+    timeout-minutes: 10
+    name: OpenCommit
+    runs-on: ubuntu-latest
+    steps:
+      - name: Setup Node.js Environment
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: di-sukharev/opencommit@github-action-v1.0.2
+        name: OpenCommit
+        with:
+          GITHUB_TOKEN: ${{ secrets.BOT_GITEA_TOKEN }}
+        env:
+          OCO_AI_PROVIDER: ollama
+          OCO_API_URL: ${{ secrets.OLLAMA_API_URL }}/api/chat
+          # OCO_API_KEY: thisisatest
+          OCO_OPENAI_API_KEY: thisisatest
+          OCO_DESCRIPTION: true
+          OCO_EMOJI: true
+          OCO_MODEL: deepseek-coder:1.3b
+          OCO_LANGUAGE: en
+          OCO_PROMPT_MODULE: conventional-commit

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -11,8 +11,8 @@ on:
 
 env:
   FLARECTL_VERSION: "0.116.0"
-  HC_VAULT_VERSION: "1.21.4"
-  TEA_VERSION: "0.14.0"
+  HC_VAULT_VERSION: "1.21.1"
+  TEA_VERSION: "0.10.1"
 
 jobs:
   check-and-create-pr:
@@ -209,9 +209,8 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
+          HC_VAULT_AUTH: token
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Pre-pull/build service images in parallel
@@ -224,7 +223,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Dry Run
-        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:
@@ -415,9 +414,8 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
+          HC_VAULT_AUTH: token
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Pre-pull/build service images in parallel
@@ -429,7 +427,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

.gitea/workflows/renovate-pr-deploy.yml

@@ -10,7 +10,7 @@ on:
       - "**/docker-compose.yml"
 
 env:
-  HC_VAULT_VERSION: "1.21.4"
+  HC_VAULT_VERSION: "1.21.1"
   VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
   VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
 
@@ -138,13 +138,12 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
+          HC_VAULT_AUTH: token
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
+        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

.gitea/workflows/renovate.yml

@@ -2,11 +2,11 @@ name: Renovate
 
 on:
   schedule:
-    - cron: "0 */2 * * *"
+    - cron: "0/30 * * * *"
   workflow_dispatch:
 
 env:
-  RENOVATE_VERSION: "43.170.22"
+  RENOVATE_VERSION: "41.173.1"
 
 jobs:
   renovate:

README.md

@@ -6,13 +6,17 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.75 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
 | asciinema | ghcr.io/asciinema/asciinema-server:latest | Platform for hosting and sharing terminal session recordings |
 | asciinema-pg-db | postgres:14-alpine |  |
 | audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest | Podcasts, eBooks, & Audiobooks |
+| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta | Automatic playlist generation using AI |
+| audiomuse-ai-pg | postgres:15-alpine |  |
+| audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine |  |
+| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |  |
 | authelia | authelia/authelia:master | Authentication/authorization server with MFA & SSO |
 | authelia-pg | postgres:16-alpine |  |
 | authelia-valkey | docker.io/valkey/valkey:9-alpine |  |
@@ -21,7 +25,7 @@
 | beszel | henrygd/beszel:latest | Lightweight server monitoring hub |
 | beszel-agent | henrygd/beszel-agent:latest |  |
 | bitwarden | vaultwarden/server:latest | Credential/Information Vault |
-| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193 |  |
+| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.158 |  |
 | browserless | ghcr.io/browserless/chromium:latest |  |
 | bytestash | ghcr.io/jordan-dalby/bytestash:latest | Code Gists/Snippets |
 | changedetection | ghcr.io/dgtlmoon/changedetection.io | Page change monitoring with alerts |
@@ -34,6 +38,7 @@
 | crowdsec-dashboard | metabase/metabase | Real-time & crowdsourced protection against aggressive IPs |
 | cyber-chef | mpepping/cyberchef:latest | Web app for encryption, encoding, compression, and data analysis |
 | czkawka | jlesage/czkawka | Smart file management |
+| dagu | ghcr.io/dagu-org/dagu:alpine | Cron alternative with a web UI |
 | dawarich-app | freikin/dawarich:latest | Self-hosted alternative to Google Location History |
 | dawarich-pg-db | postgis/postgis:17-3.5-alpine |  |
 | dawarich-sidekiq | freikin/dawarich:latest |  |
@@ -47,12 +52,12 @@
 | explo | ghcr.io/lumepart/explo:latest |  |
 | fastenhealth | ghcr.io/fastenhealth/fasten-onprem:main | Open-source, self-hosted, personal/family electronic medical record aggregator |
 | flaresolverr | ghcr.io/flaresolverr/flaresolverr:latest |  |
-| garage | dxflrs/garage:v2.3.0 |  |
+| garage | dxflrs/garage:v2.1.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.26.2 | Private Code Repo |
+| gitea | gitea/gitea:1.25.2 | Private Code Repo |
 | gitea-db | postgres:14 |  |
-| gitea-runner | gitea/act_runner:nightly |  |
+| gitea-runner | gitea/act_runner:latest |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
 | gitignore-io | guog/gitignore.io:latest | .gitignore generator |
 | gluetun | qmcgaw/gluetun:latest |  |
@@ -90,7 +95,7 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:0.133.1 | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:0.130.1 | Self-hosted digital asset manager for 3D print files |
 | manyfold-pg-db | postgres:18-alpine |  |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
@@ -154,18 +159,18 @@
 | romm-valkey | docker.io/valkey/valkey:9-alpine |  |
 | sabnzbdvpn | ghcr.io/binhex/arch-sabnzbdvpn:latest | NZB Downloader over VPN |
 | sablier | sablierapp/sablier:latest |  |
-| scraparr | ghcr.io/thecfu/scraparr:3 |  |
+| scraparr | ghcr.io/thecfu/scraparr:2 |  |
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.18.4 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
-| signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
+| semaphore-ui | semaphoreui/semaphore:v2.16.47 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz |  |
-| signoz-otel-collector | signoz/signoz-otel-collector:v0.144.4 |  |
-| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.144.4 |  |
-| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.144.4 |  |
+| signoz-otel-collector | signoz/signoz-otel-collector:v0.129.12 |  |
+| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.129.12 |  |
+| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.129.12 |  |
 | signoz-zookeeper-1 | signoz/zookeeper:3.7.1 |  |
 | sonarqube | mc1arke/sonarqube-with-community-branch-plugin:lts | Code/DevOps quality/security |
 | sonarqube-pg-db | postgres:17-alpine |  |
@@ -179,11 +184,10 @@
 | swag | lscr.io/linuxserver/swag:latest | SWAG Dashboard for proxies |
 | tandoor | vabene1111/recipes | Recipes, cookbooks, meal-planning, & grocery lists |
 | tandoor-pg | postgres:16-alpine |  |
-| tdarr | ghcr.io/haveagitgat/tdarr:2.72.01 | Distributed transcode automation |
+| tdarr | ghcr.io/haveagitgat/tdarr:2.58.02 | Distributed transcode automation |
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
-| vault | hashicorp/vault:2.0.0-bugfix | HashiCorp Vault for secrets, key/value stores, etc. |
-| vault-agent | hashicorp/vault:2.0.0-bugfix |  |
+| vault | hashicorp/vault:latest | HashiCorp Vault for secrets, key/value stores, etc. |
 | wallos | bellamy/wallos:latest | Subscription Tracking |
 | web-check | lissy93/web-check | Site scanner for attack vectors, architecture, security configs, and more |
 | whodb | clidey/whodb | Lightweight next-gen database explorer |