Compare commits

..

1 Commits

5 changed files with 80 additions and 103 deletions
@@ -209,9 +209,8 @@ jobs:
with:
HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
HC_VAULT_AUTH: approle
HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
HC_VAULT_AUTH: token
HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
HC_VAULT_SECRETS_PATH: rinoa-docker/env
- name: Pre-pull/build service images in parallel
@@ -415,9 +414,8 @@ jobs:
with:
HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
HC_VAULT_AUTH: approle
HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
HC_VAULT_AUTH: token
HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
HC_VAULT_SECRETS_PATH: rinoa-docker/env
- name: Pre-pull/build service images in parallel
+2 -3
View File
@@ -138,9 +138,8 @@ jobs:
with:
HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
HC_VAULT_AUTH: approle
HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
HC_VAULT_AUTH: token
HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
HC_VAULT_SECRETS_PATH: rinoa-docker/env
- name: Docker Compose Deployment
+2 -2
View File
@@ -2,11 +2,11 @@ name: Renovate
on:
schedule:
- cron: "0 */2 * * *"
- cron: "0/30 * * * *"
workflow_dispatch:
env:
RENOVATE_VERSION: "43.252.5"
RENOVATE_VERSION: "43.170.22"
jobs:
renovate:
+10 -7
View File
@@ -6,13 +6,17 @@
| --- | --- | --- |
| 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
| actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
| adguard | adguard/adguardhome:v0.107.75 | Ad-blocking/DNS |
| adguard | adguard/adguardhome:v0.107.74 | Ad-blocking/DNS |
| apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
| apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
| archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
| asciinema | ghcr.io/asciinema/asciinema-server:latest | Platform for hosting and sharing terminal session recordings |
| asciinema-pg-db | postgres:14-alpine | |
| audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest | Podcasts, eBooks, & Audiobooks |
| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta | Automatic playlist generation using AI |
| audiomuse-ai-pg | postgres:15-alpine | |
| audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine | |
| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta | |
| authelia | authelia/authelia:master | Authentication/authorization server with MFA & SSO |
| authelia-pg | postgres:16-alpine | |
| authelia-valkey | docker.io/valkey/valkey:9-alpine | |
@@ -50,7 +54,7 @@
| garage | dxflrs/garage:v2.3.0 | |
| garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
| ghost | ghost:latest | Personal blog |
| gitea | gitea/gitea:1.26.4 | Private Code Repo |
| gitea | gitea/gitea:1.26.1 | Private Code Repo |
| gitea-db | postgres:14 | |
| gitea-runner | gitea/act_runner:nightly | |
| gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 | |
@@ -90,7 +94,7 @@
| lldap | lldap/lldap:stable | LDAP made easy |
| loggifly | ghcr.io/clemcer/loggifly:latest | |
| maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
| manyfold | lscr.io/linuxserver/manyfold:0.146.0 | Self-hosted digital asset manager for 3D print files |
| manyfold | lscr.io/linuxserver/manyfold:0.133.1 | Self-hosted digital asset manager for 3D print files |
| manyfold-pg-db | postgres:18-alpine | |
| manyfold-valkey | docker.io/valkey/valkey:9-alpine | |
| mariadb | linuxserver/mariadb | |
@@ -158,8 +162,8 @@
| scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
| searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
| searxng-valkey | docker.io/valkey/valkey:9-alpine | |
| semaphore-ui | semaphoreui/semaphore:v2.18.4 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
| signoz-app | signoz/signoz:v0.131.1 | Logs, metrics, and traces in a single pane |
| semaphore-ui | semaphoreui/semaphore:v2.18.3 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
| signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
| signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine | |
| signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine | |
| signoz-logspout | pavanputhra/logspout-signoz | |
@@ -179,11 +183,10 @@
| swag | lscr.io/linuxserver/swag:latest | SWAG Dashboard for proxies |
| tandoor | vabene1111/recipes | Recipes, cookbooks, meal-planning, & grocery lists |
| tandoor-pg | postgres:16-alpine | |
| tdarr | ghcr.io/haveagitgat/tdarr:2.82.02 | Distributed transcode automation |
| tdarr | ghcr.io/haveagitgat/tdarr:2.72.01 | Distributed transcode automation |
| unmanic | josh5/unmanic:latest | Library Optimizer |
| uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
| vault | hashicorp/vault:2.0.0-bugfix | HashiCorp Vault for secrets, key/value stores, etc. |
| vault-agent | hashicorp/vault:2.0.0-bugfix | |
| wallos | bellamy/wallos:latest | Subscription Tracking |
| web-check | lissy93/web-check | Site scanner for attack vectors, architecture, security configs, and more |
| whodb | clidey/whodb | Lightweight next-gen database explorer |
+62 -85
View File
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
x-valkey-params: &valkey-params
healthcheck:
test: redis-cli ping || exit 1
image: docker.io/valkey/valkey:9-alpine@sha256:a35428eba9043cc0b79dbe54100f0c92784f2de00ad09b01182bfb1c5c83d1bd
image: docker.io/valkey/valkey:9-alpine@sha256:d1cc70645bbcef743615463a2fa4616e841407545e18f560aed0c49671a90147
environment:
ALLOW_EMPTY_PASSWORD: yes
VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
# - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
# See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
# !! If you are not using any of these options, remove the 'environment:' tag entirely.
image: docker.io/actualbudget/actual-server:latest@sha256:e18b7fbfec6157a368fad4146563f397502e9da70a120aeaeac63b4977405d1c
image: docker.io/actualbudget/actual-server:latest@sha256:1aeeb3985db55556e716dec25e08f6ce09308c2571b65cddbc6746ee6d5e0d45
labels:
swag: enable
swag_port: 5006
@@ -177,7 +177,7 @@ services:
container_name: adguard
environment:
TZ: ${TZ}
image: adguard/adguardhome:v0.107.75@sha256:50ac5916778faa06ad4adcff606c7aaf806cb55dc1995160dbf50633c9bda94d
image: adguard/adguardhome:v0.107.74@sha256:f29c58a91f79387cbbbb042e140814f58e830d457d44af03d662c8df43db9dea
labels:
swag: enable
swag_proto: http
@@ -261,7 +261,7 @@ services:
APPRISE_ATTACH_SIZE: 500
APPRISE_CONFIG_DIR: /config
APPRISE_STATEFUL_MODE: simple
image: lscr.io/linuxserver/apprise-api:latest@sha256:0d114aa96f1782173af59c6af88b1dc75918af71ab8a160a3b1e48da1b5de96f
image: lscr.io/linuxserver/apprise-api:latest@sha256:3b7155682d9aaf168668621d4a63f2dc2c63e100593543113b81fa201a91d3e0
labels:
swag: enable
swag_proto: http
@@ -357,7 +357,7 @@ services:
URL_HOST: asciinema.trez.wtf
URL_PORT: 4000
URL_SCHEME: https
image: ghcr.io/asciinema/asciinema-server:latest@sha256:0474b2186be46b23f5e16dbd4319727dbb68f27a303705fbe632821bf524b313
image: ghcr.io/asciinema/asciinema-server:latest@sha256:d6d3bd5377dbe0773016ece1fdcc8326826d45395f1df7a6883ea30caf7140e8
labels:
homepage.group: Code/DevOps
homepage.name: Asciinema
@@ -483,7 +483,7 @@ services:
expose:
- 9091
- 9959 # Metrics port for Prometheus
image: authelia/authelia:master@sha256:69f9d896ee3fcc7f4763d58067b40cb013ab7fe3452445e52b4f3bff10f3ed1d
image: authelia/authelia:master@sha256:47f64d0477329255c5efc1f01b584e1a341244354926c8f82fcc88dfcfbc3f94
labels:
homepage.group: Privacy/Security
homepage.name: Authelia
@@ -577,7 +577,7 @@ services:
TZ: ${TZ}
DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
hostname: Rinoa
image: lscr.io/linuxserver/bazarr:latest@sha256:95f27692c3de6dbe130cd035d342d8138ec74ade7b62cfc52e11ae222c52c855
image: lscr.io/linuxserver/bazarr:latest@sha256:4b7bb6d861c08bbf0c388b936ada8b2ba57669ca9974323f504e974577d19d63
labels:
homepage.group: Servarr Stack
homepage.name: Bazarr
@@ -787,7 +787,7 @@ services:
- 3000
extra_hosts:
- "host.docker.internal:host-gateway"
image: ghcr.io/browserless/chromium:latest@sha256:b1734c1208047fc67df1e9905ce0dd3c72ddb8d93db41549ec441798f33837a6
image: ghcr.io/browserless/chromium:latest@sha256:ba9fb80100147d657c6fbffadf95308f6843c6931d3e064ac2fb612282101f8e
labels:
swag: enable
swag_proto: http
@@ -847,7 +847,7 @@ services:
TZ: ${TZ}
LC_ALL: en_US.UTF-8
LISTEN_HOST: 0.0.0.0
image: ghcr.io/dgtlmoon/changedetection.io@sha256:736331d2787f94d3201b64aa641e090f67e28577ba505bd7ba5d7c1841e1e0ca
image: ghcr.io/dgtlmoon/changedetection.io@sha256:2d0030e12494be9ebf6a6ebbbad46afe5763f498bbfefe9ebb7f0bf6be3ca5dc
labels:
homepage.description: Page change monitoring with alerts
homepage.group: System Administration
@@ -946,7 +946,7 @@ services:
PUID: "1000"
TZ: America/New_York
hostname: Rinoa
image: ghcr.io/hotio/cloudflareddns:latest@sha256:43e0fdc42bc7e029b8fc418a3196ed95fc2e88ad1809b603fc2b0b847ebbbf51
image: ghcr.io/hotio/cloudflareddns:latest@sha256:6e7bb740c8c0a75ecb1bfc2992511e2abdd92acc8d3424d9abaf0f78055f12dc
networks:
default: null
profiles: ["rinoa-apps"]
@@ -972,7 +972,7 @@ services:
container_name: convertx
environment:
JWT_SECRET: ${CONVERTX_JWT_SECRET}
image: ghcr.io/c4illin/convertx@sha256:b515b04bfd25298a5cdc775b2fcd48b9399bab658ce13e2598b65df1b16098c8
image: ghcr.io/c4illin/convertx@sha256:e1f85be04bbaf8a55ead9261194c3ae0fa0957d303ea537127154860b2552afd
labels:
homepage.group: System Administration
homepage.name: ConvertX
@@ -1042,7 +1042,7 @@ services:
environment:
MB_DB_FILE: /data/metabase.db
MGID: ${GID-1000}
image: metabase/metabase@sha256:8d6e649d4bbd19aa641a5b71bff2c89e3c2f348e8a1f0b527573b06c73c7748d
image: metabase/metabase@sha256:34e59486732cb203701bcfe9c7515acfa13c58c15bb4475a0c88e987ac18176a
labels:
homepage.group: Privacy/Security
homepage.name: CrowdSec Dashboard
@@ -1074,7 +1074,7 @@ services:
- crowdsec-db:/data/
cyber-chef:
container_name: cyber-chef
image: mpepping/cyberchef:latest@sha256:c9a202b56408dea46f28d95177a896d59e284902c884d0ef84377fecdf0ab286
image: mpepping/cyberchef:latest@sha256:f65dd46824d3a202d36750f538fe7fc01d579e2623ca5a57c864625bf1bb3712
labels:
homepage.description: Web app for encryption, encoding, compression, and data analysis
homepage.group: Privacy/Security
@@ -1192,7 +1192,7 @@ services:
retries: 30
start_period: 30s
timeout: 10s
image: freikin/dawarich:latest@sha256:c8413c39fd17bc801d9823507ae5ac08cf4333c6de5cd110922dbca31d097372
image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
labels:
homepage.group: Privacy/Security
homepage.name: Dawarich
@@ -1232,7 +1232,7 @@ services:
retries: 5
start_period: 30s
timeout: 10s
image: postgis/postgis:17-3.5-alpine@sha256:5a30b4cf0c787aae9e428c1fce1ef736fccc7fc294958ee99d3836fb51b1819b
image: postgis/postgis:17-3.5-alpine@sha256:5dc2f0b5871ba999a2825d3b118e4d70a7e61577ab5fca2d8695632007214acb
profiles: ["rinoa-apps"]
restart: always
shm_size: 1G
@@ -1283,7 +1283,7 @@ services:
retries: 30
start_period: 30s
timeout: 10s
image: freikin/dawarich:latest@sha256:c8413c39fd17bc801d9823507ae5ac08cf4333c6de5cd110922dbca31d097372
image: freikin/dawarich:latest@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
profiles: ["rinoa-apps"]
restart: on-failure
stdin_open: true
@@ -1629,7 +1629,7 @@ services:
BROWSER_TIMEOUT: 40000
TEST_URL: https://duckduckgo.com
hostname: Rinoa
image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:139dfee1c6f89249c8d665d1333a42e8ec74ec0a86bc6bb1c8461e10d3a66a47
image: ghcr.io/flaresolverr/flaresolverr:latest@sha256:7962759d99d7e125e108e0f5e7f3cdbcd36161776d058d1d9b7153b92ef1af9e
networks:
default: null
ports:
@@ -1708,7 +1708,7 @@ services:
mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
url: https://blog.${MY_TLD}
image: ghost:latest@sha256:588d5f5ed5ac6e94925860f76b2b14a18cf5d71c58a236f8817c600a9454fe2d
image: ghost:latest@sha256:876880a26b770631949d9bf2aa4b62d169e2a2f1dad56e9b065ac5d6f1c346e1
labels:
homepage.group: Lifestyle
homepage.name: Ghost
@@ -1753,7 +1753,7 @@ services:
GITEA__mailer__SMTP_PORT: 25
GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
image: gitea/gitea:1.26.4@sha256:8e25c717b8f748445e15ec46e0390f577cb628101184cb0a150d1dae126c1f39
image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
labels:
cloudflare.tunnel.enable: true
cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1813,7 +1813,7 @@ services:
interval: 10s
start_period: 20s
test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
image: postgres:14@sha256:a209aced4fa19381231fae4d9a4c5816f7691294f13572f8bddc082ba32e1c7c
image: postgres:14@sha256:04a3d3d1475ad37f07d8219d0e5eb46f64ac132bf6e110c772dab45e12e4a919
networks:
default: null
profiles: ["rinoa-infra"]
@@ -1895,7 +1895,7 @@ services:
VPN_SERVICE_PROVIDER: private internet access
expose:
- 8000
image: qmcgaw/gluetun:latest@sha256:b0ee2135e6ba52ad3f102aae9663707cd1c9531485117067a380d3b2b6dd991d
image: qmcgaw/gluetun:latest@sha256:18a0abe7a020acdf9f80db45440d18487239abde5495a357ceb36517f7ea67cf
ports:
- 3333:3333
- 3334:3334
@@ -2073,7 +2073,7 @@ services:
REDIS_DBINDEX: 0
healthcheck:
disable: false
image: ghcr.io/immich-app/immich-server:release@sha256:46dedfc5848f7313bd6b584ea9f2648057430307aad6de56de968f6710a72cae
image: ghcr.io/immich-app/immich-server:release@sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5
labels:
swag: enable
swag_proto: http
@@ -2116,7 +2116,7 @@ services:
container_name: immich-machine-learning
healthcheck:
disable: false
image: ghcr.io/immich-app/immich-machine-learning:release@sha256:cb2128c5cbc554fdaa2a036fb4419c808a9f3e0f27170e569dd9e727243da909
image: ghcr.io/immich-app/immich-machine-learning:release@sha256:a2501141440f10516d329fdfba2c68082e19eb9ba6016c061ac80d23beadf7f3
profiles: ["rinoa-apps"]
restart: always
volumes:
@@ -2163,7 +2163,7 @@ services:
test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
start_period: 10s
timeout: 5s
image: alangrainger/immich-public-proxy:latest@sha256:bc42ab09bce13fa4972861ddd45ff9a1ed82f590121409519af91546edb8dd77
image: alangrainger/immich-public-proxy:latest@sha256:48c4ea4884b04c77a4a4ec93e190dea6cb7dc1b38acb005a35dd56f68212d85a
labels:
homepage.group: Lifestyle
homepage.name: Immich Public Proxy
@@ -2310,7 +2310,7 @@ services:
test:
- CMD-SHELL
- pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
image: docker.io/library/postgres:14@sha256:3e7dd0bfd7bfb4fc1278d1a354da44375dfe924bed8eaf83ae14967d84dede5b
image: docker.io/library/postgres:14@sha256:04a3d3d1475ad37f07d8219d0e5eb46f64ac132bf6e110c772dab45e12e4a919
networks:
default: null
profiles: ["rinoa-apps"]
@@ -2359,7 +2359,7 @@ services:
container_name: jellyfin
environment:
JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
image: jellyfin/jellyfin@sha256:bc9fa8e1462fffe3d8d4255fc62af478602641f4c0e5f4875fea8563d1189837
image: jellyfin/jellyfin@sha256:1694ff069f0c9dafb283c36765175606866769f5d72f2ed56b6a0f1be922fc37
labels:
homepage.group: Media Library
homepage.name: Jellyfin
@@ -3018,7 +3018,7 @@ services:
POSTGRES_USER: ${JOPLIN_POSTGRES_USER}
POSTGRES_PORT: 5432
POSTGRES_HOST: joplin-db
image: joplin/server:latest@sha256:0877bfba41a943017c42c58e90db9d8d548bfe699b5e410248b5b879371734f9
image: joplin/server:latest@sha256:5d9e7f9d31b436cb1b99d1a6a65d8c5bf760829094617e8ad1e956fd925de888
labels:
homepage.group: Personal Tools
homepage.name: Joplin
@@ -3131,7 +3131,7 @@ services:
TZ: America/New_York
DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
hostname: Rinoa
image: lscr.io/linuxserver/lidarr:latest@sha256:ca2f95634d422fdeccfbff2a42cbe3a4fed1170f7e3546d99d5d5f2c9c9aa03b
image: lscr.io/linuxserver/lidarr:latest@sha256:7f34e2a907c7bcfc5cd49a1685db21a1e5055c96e8ad5e0d77ee94e1d50d84e5
labels:
homepage.group: Servarr Stack
homepage.name: Lidarr
@@ -3182,7 +3182,7 @@ services:
spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
expose:
- 5000
image: thewicklowwolf/lidify:latest@sha256:15a28139a6b16ff4bc5e6cc2fae413f837f8bd1971e15918c6cc7fd7fa0dcf54
image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
labels:
homepage.group: Servarr Stack
homepage.name: Lidify
@@ -3296,7 +3296,7 @@ services:
bind:
create_host_path: true
loggifly:
image: ghcr.io/clemcer/loggifly:latest@sha256:9f141d01602dffb9238fd39ece7bef845914297bc5eeb9c985e7525cb8abaf8c
image: ghcr.io/clemcer/loggifly:latest@sha256:fe9b5c968d794b3045176289215d044a5dd554816fe708212dba41781b18de62
container_name: loggifly
profiles: ["rinoa-apps"]
restart: unless-stopped
@@ -3377,7 +3377,7 @@ services:
SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
SMTP_FROM_ADDRESS: noreply@${MY_TLD}
image: lscr.io/linuxserver/manyfold:0.146.0@sha256:9632aa5f5f151eb0b94ba21523e78e67cf885a65c4d9b0d5eb2bd435f95c19c4
image: lscr.io/linuxserver/manyfold:0.133.1@sha256:1e27e90558d913a41b01a81d3e6f24d7faad60cc3478abe52ddd9fc104a39494
labels:
homepage.group: Lifestyle
homepage.name: Manyfold
@@ -3441,7 +3441,7 @@ services:
timeout: 10s
retries: 5
hostname: Rinoa
image: linuxserver/mariadb@sha256:41e8b59056fda0dfca6e24e2515674b18a76e774c93e464899da4d7116bc147d
image: linuxserver/mariadb@sha256:93fb1eebb9ef4e4e820c90827e217dfafe7e8cb5839a1ff3cd40ac4f205c06ea
networks:
default: null
ports:
@@ -3558,7 +3558,7 @@ services:
<<: *maxun-env
expose:
- 8080
image: getmaxun/maxun-backend:latest@sha256:5945a48b1ddb6f751b1f3412aec4513bce720e532fd60b6c355c5a2f3953ae07
image: getmaxun/maxun-backend:latest@sha256:7161477b77d29d59636553dce12a9912478ee0c207243be75b203d42a9eb3f9f
mem_limit: 2g # Set a 2GB memory limit
ports:
- 8369:8080
@@ -3574,7 +3574,7 @@ services:
depends_on:
- maxun-backend
<<: *maxun-env
image: getmaxun/maxun-frontend:latest@sha256:803076b49cb7a3b07aab3c56e293a2a18e39784d9dd5b4ad5ec964c86d361cee
image: getmaxun/maxun-frontend:latest@sha256:055c0ded4d1028ab4a6f2b76457299053f0244c0df30cc104370f4b7ac435352
labels:
swag: enable
swag_proto: http
@@ -3691,7 +3691,7 @@ services:
- ${DOCKER_VOLUME_CONFIG}/meme_search_pro/db-data/meme-search-db:/var/lib/postgresql/data
mini-qr:
container_name: mini-qr
image: ghcr.io/lyqht/mini-qr:latest@sha256:3010a8e449fd162381338691f1c8e876a5bf30b9ebb2d48fd36e1a324e697b3f
image: ghcr.io/lyqht/mini-qr:latest@sha256:c9ccf1c25dda85db4275518c9583f6d72fab0885a2221cade0fa1249633aa1a4
labels:
swag: enable
swag_auth: authelia
@@ -3874,7 +3874,7 @@ services:
LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
image: foxxmd/multi-scrobbler@sha256:7d50785dba6c97b81640643180b04e3aa48138b3a71c041277617c27d36011b3
image: foxxmd/multi-scrobbler@sha256:aecbf754a18c2ddc5d9bcf6385316a63aeae685f4106e76c25ab9d2c26c0f550
labels:
homepage.group: Media Library
homepage.name: Multi-Scrobbler
@@ -3914,7 +3914,7 @@ services:
NODE_ENV: production
WEBHOOK_URL: https://n8n.${MY_TLD}/
GENERIC_TIMEZONE: ${TZ}
image: docker.n8n.io/n8nio/n8n@sha256:74f1ef0ec73cd1b85c3b55926732c9dfaa544a66d6bb2872fd57718c557954a4
image: docker.n8n.io/n8nio/n8n@sha256:bd3142315412165662d34c7d1556d19deb42225d639c448d0b35cdd3d9f749e4
labels:
swag: enable
swag_proto: http
@@ -3967,7 +3967,7 @@ services:
ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
ND_SUBSONICARTISTPARTICIPATIONS: true
image: deluan/navidrome:latest@sha256:c4b5cb36a790b3eb63ca6a68bbe2fe149c2d7fa2e586f7a480e61db630e6664b
image: deluan/navidrome:latest@sha256:9fa40b3d8dec43ceb2213d1fa551da3dcfef6ac6d19c2e534efb92527c2bafd2
labels:
homepage.group: Media Library
homepage.name: Navidrome
@@ -4303,7 +4303,6 @@ services:
LDAP_SEARCH_BASE: dc=trez,dc=wtf
LDAP_SEARCH_FILTER: "(objectClass=inetOrgPerson)"
LDAP_USE_TLS: false
#WEBUI_SECRET_KEY: ${}
# LibreTranslate
LT_DEBUG: false
LT_UPDATE_MODELS: true
@@ -4319,7 +4318,7 @@ services:
WEBSOCKET_MANAGER: redis
WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
REDIS_KEY_PREFIX: open-webui
image: ghcr.io/open-webui/open-webui:main@sha256:a26effeb220e132482bf7e0560b3404843e7bc40d23051144e062960df8df6b0
image: ghcr.io/open-webui/open-webui:main@sha256:74093dadc9c6aabc23987a74fd8c2fb8d995b1a5b22e83b0036fb9d6af590e8c
labels:
homepage.group: Personal Tools
homepage.name: Open WebUI
@@ -4624,7 +4623,7 @@ services:
- plant-it-valkey-data:/data/valkey
plantuml-server:
container_name: plantuml-server
image: plantuml/plantuml-server:jetty@sha256:6ab7824dbc4882156ba9b6d4f8ca42d697a79634c073d4d28eb768158f6ef5a7
image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
labels:
homepage.group: Personal Tools
homepage.name: PlantUML
@@ -4705,7 +4704,7 @@ services:
timeout: 10s
retries: 3
start_period: 5s
image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:713ea1c03f111d92a4a2dbcf99ed69dade8aa68428c41b4b4c4f2515eec89091
image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:4e0b4c4f0dd99954b6db70e8766f856742ec1a43370d94a754f8a608ddb0d88a
labels:
swag: enable
swag_auth: authelia
@@ -4737,7 +4736,7 @@ services:
timeout: 10s
retries: 3
start_period: 5s
image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:75723c6a85b2fa2971becf7c32794ac3c9b69786ef14560e19eae3892f8c7bf1
image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:881099ffea3550c0abd4ebdb48751f33fde913265695ab5890319f30583e3c62
ports:
- 36102:8000
profiles: ["rinoa-apps"]
@@ -4747,7 +4746,7 @@ services:
- NET_BIND_SERVICE
command: postal smtp-server
container_name: postal-smtp
image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
networks:
default: null
ports:
@@ -4760,7 +4759,7 @@ services:
postal-web:
command: postal web-server
container_name: postal-web
image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
labels:
swag: enable
swag_proto: http
@@ -4796,7 +4795,7 @@ services:
container_name: postal-worker
environment:
LOG_LEVEL: debug
image: ghcr.io/postalserver/postal:latest@sha256:4819090c759d9ed361915df853a432074e5a85bac4511e908ec93899420b55bf
image: ghcr.io/postalserver/postal:latest@sha256:4f96b2e527c5589e6b73e25aebf877917bba45b460f535ecfca527488745e926
networks:
default: null
profiles: ["rinoa-apps"]
@@ -4827,7 +4826,7 @@ services:
TP_COMMUNITY_THEME: false
TP_THEME: space-gray
hostname: Rinoa
image: lscr.io/linuxserver/prowlarr:latest@sha256:3e9bd62ca90c97c5df75b7012e10a29f6926e62807deeddc1dc89e6e2fd141e1
image: lscr.io/linuxserver/prowlarr:latest@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
labels:
homepage.group: Servarr Stack
homepage.name: Prowlarr
@@ -4874,7 +4873,7 @@ services:
qbittorrentvpn:
required: true
condition: service_started
image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:cafdbdc61315ada302a494af9ee112a7b85eda5369edbb5b3b2d69eaccd63b2b
image: ghcr.io/stuffanthings/qbit_manage:latest@sha256:8786f2efc6fb8e26281f09bf6c5d0004e2d2420fd4781af0aed123ae01558e21
environment:
# Web API Configuration
QBT_WEB_SERVER: true # Set to true to enable web API
@@ -4934,7 +4933,7 @@ services:
VPN_PASS: ${DELUGEVPN_ENVIRONMENT_VPN_PASS}
VPN_PROV: pia
WEBUI_PORT: 8080
image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:b61d8a11e022239c4e3b218ae7ebb58d9adc67b59c46280c1812c6d9ccc0e8d1
image: ghcr.io/binhex/arch-qbittorrentvpn:latest@sha256:fe6daf82a190902d99350026eccdb883eb1e5f80b23827ba04a29c155815c696
labels:
homepage.group: Downloaders
homepage.name: qBittorrent
@@ -4998,7 +4997,7 @@ services:
tmdb_api_key: ${TMDB_API_KEY}
expose:
- 5000
image: thewicklowwolf/radarec:latest@sha256:1ff2aee6682b81363160a686860f7ead8314c47a13af88d623bf7f149d165e7b
image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
labels:
homepage.group: Servarr Stack
homepage.name: RadaRec
@@ -5107,7 +5106,7 @@ services:
STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
STORAGE_USE_SSL: false
TZ: ${TZ}
image: amruthpillai/reactive-resume:latest@sha256:c55782377718e9475e318f9a802fcff380f978331a1ae509096f97aadb971c29
image: amruthpillai/reactive-resume:latest@sha256:b760446c4301af067e7d595537a877e378363aa6ce921b7349e62983621826aa
labels:
homepage.group: Professional Services
homepage.name: Reactive Resume
@@ -5381,7 +5380,7 @@ services:
VPN_USER: ${SABNZBDVPN_ENVIRONMENT_VPN_USER}
DEBUG: true
hostname: Rinoa
image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:f9c6e4131a003ff8d033949afa08e3555cddcccbff51375c920f3755438e2b06
image: ghcr.io/binhex/arch-sabnzbdvpn:latest@sha256:c01bec2f4a9695aca83034f2ca759936ac1d2ddd96b2dc17ce62533bb065ea84
labels:
homepage.group: Downloaders
homepage.name: SABnzbd
@@ -5430,8 +5429,6 @@ services:
source: /rinoa-storage
target: /storage
type: bind
- ${DOCKER_VOLUME_CONFIG}/.openvpn:/config/openvpn
- ${DOCKER_VOLUME_CONFIG}/.wireguard:/config/wireguard
sablier:
container_name: sablier
environment:
@@ -5552,7 +5549,7 @@ services:
container_name: searxng
environment:
SEARXNG_BASE_URL: https://search.${MY_TLD}
image: searxng/searxng:latest@sha256:04cc81a759e882e411569e008a77243ab8b0fc4137bcf88018cd7b7c3cbdff41
image: searxng/searxng:latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
labels:
homepage.group: Privacy/Security
homepage.name: SearxNG
@@ -5606,7 +5603,7 @@ services:
SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
SEMAPHORE_EMAIL_SECURE: false
SEMAPHORE_USE_REMOTE_RUNNER: true
image: semaphoreui/semaphore:v2.18.4@sha256:e32c60f52e42799be077c6669f8dc9fcb6cedb1a1f851f791a6be851f4347c41
image: semaphoreui/semaphore:v2.18.3@sha256:e9260bfa82556e574b2f372a1d880a9cfe16aa4621a39ae79ac32e44e50f9da8
labels:
homepage.group: Code/DevOps
homepage.name: Semaphore UI
@@ -5667,7 +5664,7 @@ services:
interval: 30s
timeout: 5s
retries: 3
image: signoz/signoz:v0.131.1@sha256:0149e8119c9d0fbd457bb612f7aef4f162df2871184d8a0c450c9d536519dbce
image: signoz/signoz:v0.113.0@sha256:381d613fc4a186243a0ba28e55b957921e6d8663dd9111ef95c2cfdead1021c5
labels:
homepage.group: Infrastructure/App Performance Monitoring
homepage.name: Signoz
@@ -5929,7 +5926,7 @@ services:
tmdb_api_key: ${TMDB_API_KEY}
expose:
- 5000
image: thewicklowwolf/sonashow:latest@sha256:fae1105710063e6900159c32942128bc8d78522c2cedf54036f1cbdd9c49281e
image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
labels:
homepage.group: Servarr Stack
homepage.name: SonaShow
@@ -6067,7 +6064,7 @@ services:
- ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
speedtest-tracker:
container_name: speedtest-tracker
image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:3f75c5ec7a14c232f91af1ddda4248543bb2e8f0aeb18fec64c34d2f42dd00ce
image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:bf18a04f9e61573cefb0112ca9604a93a82451ada74050a6b30b41e30651d9a1
environment:
PUID: ${PUID}
PGID: ${PGID}
@@ -6107,7 +6104,7 @@ services:
SECURITY_ENABLE_LOGIN: true
SYSTEM_SHOW_UPDATE: false
SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:976dfa581b6cb1fb91e9b0b90284a92febe8ba6a4519e28f95c4e8e550d6d70d
image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:950c596db26e0764f642def2fd4f9ee904ff2ac16d83fe621ff731b771d9b385
labels:
homepage.name: Stirling-PDF
homepage.group: Professional Services
@@ -6159,7 +6156,7 @@ services:
UPTIME_KUMA_URL: http://uptimekuma:3001
UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
hostname: Rinoa
image: lscr.io/linuxserver/swag:latest@sha256:ef97e83fc0283f972406ed62f208482653b9a9233eb389b947718b28c8c99263
image: lscr.io/linuxserver/swag:latest@sha256:74b906a164b2eb43f1792aeac5e2ca464b5b118b3d918cb1a5f2b8ccfed12ebb
labels:
swag: enable
swag_proto: http
@@ -6292,7 +6289,7 @@ services:
cronPluginUpdate:
NVIDIA_DRIVER_CAPABILITIES: all
NVIDIA_VISIBLE_DEVICES: all
image: ghcr.io/haveagitgat/tdarr:2.82.02@sha256:6153e00470667b5ed4f6f6f1bfaa016432efa4c20b1919de229d9b7265bff70b
image: ghcr.io/haveagitgat/tdarr:2.72.01@sha256:fd9abc79b06a14e4ed0940aade7a92afe734d3188104fa085d5cde3eaf778b2f
labels:
homepage.group: Servarr Stack
homepage.name: Tdarr
@@ -6456,31 +6453,11 @@ services:
volumes:
- ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/config/:/vault/config
- ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/logs/:/vault/logs
vault-agent:
cap_add:
- IPC_LOCK
command:
- agent
- -config=/vault/config/vault-agent.hcl
container_name: hc-vault-agent
environment:
VAULT_ADDR: http://hc-vault:8200
SKIP_SETCAP: true
image: hashicorp/vault:2.0.0-bugfix
ports:
- 8100
profiles: ["rinoa-apps"]
restart: unless-stopped
volumes:
- ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/config/:/vault/config:ro
- ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/data/:/vault/data:ro
- ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/tokens/:/vault/tokens
- ${DOCKER_VOLUME_CONFIG}/hashicorp-vault/agent/output/:/vault/output
wallos:
container_name: wallos
environment:
TZ: ${TZ}
image: bellamy/wallos:latest@sha256:3b2cdc843b4b1920220ce26a5804208eab8c236c60d4c777c6223c181f837be1
image: bellamy/wallos:latest@sha256:f226b0ccb9f726f0389653357a692a684afbb7a6cca705099a1d826e8f47a772
labels:
homepage.group: Lifestyle
homepage.name: wallos
@@ -6510,7 +6487,7 @@ services:
- wallos-logos:/var/www/html/images/uploads/logos
web-check:
container_name: web-check
image: lissy93/web-check@sha256:6c2c4957c8794ffbcd50e0b560f6f010f17884b36b587c74155482fbad15a077
image: lissy93/web-check@sha256:f1aee591cef9bb1b76e8e37786675144cbdd17a07e9b1968fa2b797798c91ab4
labels:
homepage.group: Privacy/Security
homepage.name: Web-Check
@@ -6536,7 +6513,7 @@ services:
restart: unless-stopped
whodb:
container_name: whodb
image: clidey/whodb@sha256:8bd38ba3f744b8ee2df9d151ac096484ac52bba09a911f000259bc7cb63b7841
image: clidey/whodb@sha256:29f5b78bb2e3d07514058f33f0157bd0845b0b9d841a6775d7ef9c5a952c4e78
environment:
WHODB_CLICKHOUSE_1: '{ "host": "signoz-clickhouse" }'
WHODB_MARIADB_1: '{ "host": "mariadb", "user": "root", "password":