Merge pull request '🔧 Renovate: Update (digest) docker.io/valkey/valkey:9-alpine Docker digest to c9b7791' (#341) from renovate/docker-io-valkey-valkey-9-alpine into main

Merged by renovate-bot

.gitea/workflows/pr-docker-deploy.yml

@@ -10,7 +10,7 @@ on:
 
 env:
   HC_VAULT_VERSION: "1.21.4"
-  TEA_VERSION: "0.10.1"
+  TEA_VERSION: "0.14.0"
 
 jobs:
   check-and-create-pr:
@@ -190,8 +190,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: ultima-docker/env
 
       - name: Docker Compose Dry Run
@@ -312,8 +313,9 @@ jobs:
         with:
           HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
           HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: token
-          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+          HC_VAULT_AUTH: approle
+          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
+          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
           HC_VAULT_SECRETS_PATH: ultima-docker/env
 
       - name: Docker Compose Deployment

.gitea/workflows/renovate.yml

@@ -2,11 +2,11 @@ name: Renovate
 
 on:
   schedule:
-    - cron: "0/30 * * * *"
+    - cron: "0 */2 * * *"
   workflow_dispatch:
 
 env:
-  RENOVATE_VERSION: "42.50.3"
+  RENOVATE_VERSION: "43.252.8"
 
 jobs:
   renovate:

README.md

@@ -4,12 +4,16 @@
 
 | Service | Image |
 | --- | --- |
-| beszel-agent | henrygd/beszel-agent:0.18.6 |
+| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |
+| audiomuse-ai-pg | postgres:15-alpine |
+| audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine |
+| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |
+| beszel-agent | henrygd/beszel-agent:0.18.7 |
 | context7-mcp | mcp/context7:latest |
 | docker-socket-proxy | ghcr.io/tecnativa/docker-socket-proxy:latest |
 | faster-whisper | lscr.io/linuxserver/faster-whisper:latest |
 | gitea-mcp | gitea/gitea-mcp-server:0.9.0 |
-| meilisearch | getmeili/meilisearch:v1.27 |
+| meilisearch | getmeili/meilisearch:v1.36 |
 | navidrome-mcp | git.trez.wtf/trez/navidrome-mcp:latest |
 | ollama | ollama/ollama |
 | piper | lscr.io/linuxserver/piper:latest |
@@ -17,6 +21,7 @@
 | scanopy-daemon | ghcr.io/scanopy/scanopy/daemon:latest |
 | scanopy-pg | postgres:17-alpine |
 | scanopy-server | ghcr.io/scanopy/scanopy/server:latest |
+| scriberr | ghcr.io/rishikanthc/scriberr:v1.2.0 |
 | searxng-mcp | isokoliuk/mcp-searxng:latest |
 | signoz-logspout | pavanputhra/logspout-signoz:2025.07.19-887dfeb |
 | signoz-mcp | signoz/signoz-mcp-server:v0.0.5 |

docker-compose.yml

@@ -3,6 +3,97 @@ networks:
   default:
     name: ultima_default
 services:
+  audiomuse-ai-flask:
+    container_name: audiomuse-ai-flask
+    depends_on:
+      audiomuse-ai-valkey:
+        required: true
+        condition: service_healthy
+      audiomuse-ai-pg:
+        required: true
+        condition: service_healthy
+    environment:
+      AI_MODEL_PROVIDER: OLLAMA
+      OLLAMA_SERVER_URL: http://ollama:11434/api/generate
+      SERVICE_TYPE: "flask"
+      MEDIASERVER_TYPE: "navidrome"
+      AUDIOMUSE_AI_PG_PASSWORD: "pgEwBcxOlRJPlcuER98G1R1FWlDqdkUc"
+      NAVIDROME_PASSWORD: "3MFiLK#JryTgXSxF5&W4&Y8H8zTancpZ"
+      NAVIDROME_USERNAME: "admin"
+      NAVIDROME_URL: http://192.168.1.254:4533/
+      POSTGRES_USER: audiomuse
+      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
+      POSTGRES_DB: audiomusedb
+      POSTGRES_HOST: audiomuse-ai-pg
+      POSTGRES_PORT: 5432
+      REDIS_URL: redis://audiomuse-ai-valkey:6379/0
+      TEMP_DIR: /app/temp_audio
+    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
+    ports:
+      - 8000:8000
+    restart: unless-stopped
+    volumes:
+      - audiomuse-temp-audio-flask:/app/temp_audio
+  audiomuse-ai-pg:
+    container_name: audiomuse-ai-pg
+    environment:
+      POSTGRES_USER: audiomuse
+      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
+      POSTGRES_DB: audiomusedb
+    expose:
+      - 5432
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U audiomuse -d audiomusedb"]
+      interval: 10s
+      retries: 5
+      start_period: 30s
+      timeout: 10s
+    image: postgres:15-alpine@sha256:3d0f7584ed7d04e27fa050d6683a74746608faf21f202be78460d679cc56461f
+    restart: unless-stopped
+    volumes:
+      - audiomuse-ai-pg-data:/var/lib/postgresql/data
+  audiomuse-ai-valkey:
+    container_name: audiomuse-ai-valkey
+    healthcheck:
+      test: redis-cli ping || exit 1
+    image: docker.io/valkey/valkey:9-alpine@sha256:c9b77919daeba2c02ad954d0c844cc4e7142069d177b89c5fd771f405daf9e02
+    environment:
+      ALLOW_EMPTY_PASSWORD: yes
+      VALKEY_DATA_DIR: /data/valkey
+      VALKEY_DATABASE: 0
+    expose:
+      - 6379
+    restart: unless-stopped
+    volumes:
+      - audiomuse-ai-valkey-data:/data/valkey
+  audiomuse-ai-worker:
+    container_name: audiomuse-ai-worker
+    depends_on:
+      audiomuse-ai-valkey:
+        required: true
+        condition: service_healthy
+      audiomuse-ai-pg:
+        required: true
+        condition: service_healthy
+    environment:
+      AI_MODEL_PROVIDER: OLLAMA
+      OLLAMA_SERVER_URL: http://ollama:11434/api/generate
+      SERVICE_TYPE: "worker"
+      MEDIASERVER_TYPE: "navidrome"
+      NAVIDROME_URL: http://192.168.1.254:4533/
+      NAVIDROME_USER: ${NAVIDROME_USERNAME}
+      NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
+      POSTGRES_USER: audiomuse
+      POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
+      POSTGRES_DB: audiomusedb
+      POSTGRES_HOST: audiomuse-ai-pg
+      POSTGRES_PORT: 5432
+      REDIS_URL: "redis://audiomuse-ai-valkey:6379/0"
+      TEMP_DIR: "/app/temp_audio"
+    image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
+    restart: unless-stopped
+    volumes:
+      - audiomuse-temp-audio-worker:/app/temp_audio
   beszel-agent:
     container_name: beszel-agent
     environment:
@@ -66,7 +157,7 @@ services:
       LOCAL_ONLY: #optional
       WHISPER_BEAM: 1 #optional
       WHISPER_LANG: en #optional
-    image: lscr.io/linuxserver/faster-whisper:latest@sha256:9d8ef5a3512f31207846ddc0ee2c2b266937b5eab82853ce961dbcef193749d3
+    image: lscr.io/linuxserver/faster-whisper:latest@sha256:ee157f638a019bc27f5c17f1a70ad2cd7a625d03e72c0ed26e7a37697add23a0
     ports:
       - "10300:10300"
     restart: unless-stopped
@@ -80,7 +171,22 @@ services:
       GITEA_ACCESS_TOKEN: ${GITEA_ROOT_TOKEN}
     expose:
       - 8080
-    image: gitea/gitea-mcp-server:0.9.0@sha256:4add361130b2101d3027f2dd5ad2a08258dc3c45f9631030f5c3ca0a773df285
+    image: gitea/gitea-mcp-server:1.3.0@sha256:26cf7bd4ce9face39ed25f0ec82817b1dfdfe8e829240130bffdf353e336ec00
+    restart: unless-stopped
+  ha-mcp:
+    image: ghcr.io/homeassistant-ai/ha-mcp:7.12.1@sha256:fe32c119ce77d1806209648b294e2644d970255f3ae4c4acd1957707fcca811b
+    container_name: ha-mcp
+    environment:
+      HOMEASSISTANT_URL: http://192.168.1.252:8123
+      HOMEASSISTANT_TOKEN: ${HOME_ASSISTANT_LONG_LIVED_TOKEN}
+      BACKUP_HINT: normal
+      HA_TIMEOUT: 30
+      HA_MAX_RETRIES: 3
+      ENABLE_WEBSOCKET: true
+      DEBUG: true
+      LOG_LEVEL: ERROR
+    ports:
+      - 8086:8086
     restart: unless-stopped
   meilisearch:
     container_name: meilisearch
@@ -88,7 +194,7 @@ services:
       MEILI_HOST: http://meilisearch:7700
       MEILI_NO_ANALYTICS: true
       MEILI_MASTER_KEY: ${MEILISEARCH_MASTER_KEY}
-    image: getmeili/meilisearch:v1.27@sha256:22e82938463a532286bd6b2b902a5a3fa7a5017d46cc6a3cc3b4c6fc365e49f0
+    image: getmeili/meilisearch:v1.49@sha256:bdc7d7e7939911c40d88d6bcd01f9c72c81f7293135916d48bce241569f721bd
     ports:
       - 7700:7700
     restart: always
@@ -112,9 +218,8 @@ services:
     restart: unless-stopped
   ollama:
     container_name: ollama
-    environment:
-      OLLAMA_VULKAN: 1
-    image: ollama/ollama@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
+    # environment:
+    image: ollama/ollama@sha256:57f573b47f1f71ebb445789f279fe3e596a8beab182f7cf486db9205bad87c5a
     ports:
       - 11434:11434
     privileged: true
@@ -134,7 +239,7 @@ services:
       PIPER_NOISEW: 0.333 #optional
       PIPER_SPEAKER: 0 #optional
       NO_STREAMING: #optional
-    image: lscr.io/linuxserver/piper:latest@sha256:06fa02639052096d3726796b72acc7ae911e09edb19f9f8de9f10cdaba9a07a3
+    image: lscr.io/linuxserver/piper:latest@sha256:aa9d8e464caedb3f5590d44c8e001bf7f087fcb2d50275fc8c3549414cfa2e69
     ports:
       - 10200:10200
     restart: unless-stopped
@@ -142,7 +247,7 @@ services:
       - ${ULTIMA_DOCKER_DIR}/piper/:/config
   portainer-agent:
     container_name: portainer_agent
-    image: portainer/agent:latest@sha256:7af856876dcb2778108bf6846f3da31b176443db90e3de31fcfdf17e5ab7857e
+    image: portainer/agent:latest@sha256:43c8bc9bafde891ddd0fc3dcc61ac6e1887e7e2027baa76ce402bc014037fba6
     volumes:
       - /:/host
       - /var/lib/docker/volumes:/var/lib/docker/volumes
@@ -165,7 +270,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 15
-    image: ghcr.io/scanopy/scanopy/daemon:latest@sha256:3ba8b7dfeb40fb672c2ed32dcbf8dc2ce39759cd6d845de0af51f36bba0679d1
+    image: ghcr.io/scanopy/scanopy/daemon:latest@sha256:e3865d79fd81f87b4aebaa15fa441059fd348a47c718e40756c62c492048012b
     network_mode: host
     privileged: true
     restart: unless-stopped
@@ -185,13 +290,13 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
+    image: postgres:17-alpine@sha256:6a3e8680cc46290e8b1b7d2f9bbbe25f058dd2e0fdc4f819bb929d8b11f2480d
     restart: unless-stopped
     volumes:
       - scanopy-pg-data:/var/lib/postgresql/data
   scanopy-server:
     container_name: scanopy-server
-    image: ghcr.io/scanopy/scanopy/server:latest@sha256:4efe8ea9b1c0bbcaac7547077d6fc703f5019271bafc974cc4e4bb580e0e291b
+    image: ghcr.io/scanopy/scanopy/server:latest@sha256:03669449724b9826f42d02bb50b82bcad7ede42f798a9bb1c645ae09ab14c060
     depends_on:
       scanopy-pg:
         condition: service_healthy
@@ -214,6 +319,20 @@ services:
     restart: unless-stopped
     volumes:
       - ${ULTIMA_DOCKER_DIR}/scanopy:/data
+  scriberr:
+    container_name: scriberr
+    hostname: scriberr
+    image: ghcr.io/rishikanthc/scriberr:v1.2.0@sha256:9e36448fb5a6003b28cd3d9ac783e8cbef5ed916936c20ec353a55fa380484f4
+    environment:
+      PUID: ${PUID}
+      PGID: ${PGID}
+      APP_ENV: production # DO NOT CHANGE THIS
+    ports:
+      - 8080:8080
+    restart: unless-stopped
+    volumes:
+      - scriberr_data:/app/data # volume for data
+      - scriberr_env_data:/app/whisperx-env # volume for models and python envs
   searxng-mcp:
     container_name: searxng-mcp
     environment:
@@ -221,7 +340,7 @@ services:
       MCP_HTTP_PORT: 3000
     expose:
       - 3000
-    image: isokoliuk/mcp-searxng:latest@sha256:2d936f821eae1f4859b3534e1dd10d73f9c3687f366f1755538cf3217b2716f0
+    image: isokoliuk/mcp-searxng:latest@sha256:b6727fc950cf1a7501d70f863b563d9fc689d6e33c773296ed845070c5646b48
     restart: unless-stopped
     stdin_open: true
   signoz-logspout:
@@ -236,7 +355,7 @@ services:
       - /var/run/docker.sock:/var/run/docker.sock
   signoz-mcp:
     container_name: signoz-mcp-server
-    image: signoz/signoz-mcp-server:v0.0.5@sha256:e0b8fe3eee634e1c7a45470c734e50b19c74e065add73834519e37d89d7ce092
+    image: signoz/signoz-mcp-server:v0.7.0@sha256:ee27515d27f501f8487d310fa04450adb15be92354c232d26384f732b2796e6a
     environment:
       SIGNOZ_URL: http://192.168.1.254:36113
       SIGNOZ_API_KEY: ${SIGNOZ_API_KEY}
@@ -250,7 +369,10 @@ services:
     container_name: stable-diffusion-webui
     image: ghcr.io/neggles/sd-webui-docker:latest@sha256:1795fe796e1dad0d8d3baa9ef7c38a255b69c0878b76869feecc617bfd015e53
     environment:
-      CLI_ARGS: "--api --use-cpu all --precision full --no-half --skip-torch-cuda-test --ckpt /empty.pt --do-not-download-clip --disable-nan-check --disable-opt-split-attention" # will have to be changed for new hardware
+      CLI_ARGS:
+        "--api --use-cpu all --precision full --no-half --skip-torch-cuda-test
+        --ckpt /empty.pt --do-not-download-clip --disable-nan-check
+        --disable-opt-split-attention" # will have to be changed for new hardware
       PYTHONUNBUFFERED: "1"
       TERM: "vt100"
       SD_WEBUI_VARIANT: "default"
@@ -273,12 +395,25 @@ services:
     container_name: wikipedia-mcp
     expose:
       - 8000
-    image: mcp/wikipedia-mcp:latest@sha256:0568b3ada09f9b0a60271dd5e96a50f006c4b4c5c0d8cf5fe21a68200c3c48b3
+    image: mcp/wikipedia-mcp:latest@sha256:32ce608113696e8d6efc8bbfcc1ef4d52552a3543a3cd733427c6169767849d2
     restart: unless-stopped
 volumes:
+  audiomuse-ai-pg-data:
+    name: audiomuse-ai-pg-data
+  audiomuse-temp-audio-flask:
+    name: audiomuse-temp-audio-flask
+  audiomuse-ai-valkey-data:
+    name: audiomuse-ai-valkey-data
+  audiomuse-temp-audio-worker:
+    name: audiomuse-temp-audio-worker
   ollama:
     name: ollama
+
   scanopy-daemon-config:
     name: scanopy-daemon-config
   scanopy-pg-data:
     name: scanopy-pg-data
+  scriberr_data:
+    name: scriberr_data
+  scriberr_env_data:
+    name: scriberr_env_data