Compare commits

..

1 Commits

Author SHA1 Message Date
renovate-bot 7268e37ccc 🔧 Renovate: Pin dependencies
Gitea Branch PR & Docker Deployment / Check and Create PR (push) Failing after 14m4s
Gitea Branch PR & Docker Deployment / Generate list of added/modified/deleted services (push) Has been cancelled
Gitea Branch PR & Docker Deployment / Docker Compose Dry Run (push) Has been cancelled
Gitea Branch PR & Docker Deployment / PR Merge (push) Has been cancelled
Gitea Branch PR & Docker Deployment / Docker Compose Deployment (push) Has been cancelled
2026-03-08 08:07:54 +00:00
5 changed files with 30 additions and 184 deletions
+7 -9
View File
@@ -10,7 +10,7 @@ on:
env:
HC_VAULT_VERSION: "1.21.4"
TEA_VERSION: "0.14.0"
TEA_VERSION: "0.10.1"
jobs:
check-and-create-pr:
@@ -190,13 +190,12 @@ jobs:
with:
HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
HC_VAULT_AUTH: approle
HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
HC_VAULT_AUTH: token
HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
HC_VAULT_SECRETS_PATH: ultima-docker/env
- name: Docker Compose Dry Run
uses: cssnr/stack-deploy-action@28c3c6f42b225af7100652b459621c0c966fd901 # v1.5.0
uses: cssnr/stack-deploy-action@d58b92bcd776afc57ef12f55bafff71200fd218e # v1.4.0
with:
mode: compose
file: ${{ steps.compose_file_list.outputs.compose_list }}
@@ -313,13 +312,12 @@ jobs:
with:
HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
HC_VAULT_AUTH: approle
HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
HC_VAULT_AUTH: token
HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
HC_VAULT_SECRETS_PATH: ultima-docker/env
- name: Docker Compose Deployment
uses: cssnr/stack-deploy-action@28c3c6f42b225af7100652b459621c0c966fd901 # v1.5.0
uses: cssnr/stack-deploy-action@d58b92bcd776afc57ef12f55bafff71200fd218e # v1.4.0
with:
mode: compose
file: ${{ needs.docker-compose-dry-run.outputs.compose_file_list }}
+1 -1
View File
@@ -123,7 +123,7 @@ jobs:
HC_VAULT_SECRETS_PATH: ultima-docker/env
- name: Docker Compose Deployment
uses: cssnr/stack-deploy-action@28c3c6f42b225af7100652b459621c0c966fd901 # v1.5.0
uses: cssnr/stack-deploy-action@d58b92bcd776afc57ef12f55bafff71200fd218e # v1.4.0
with:
mode: compose
file: docker-compose.yml
+2 -2
View File
@@ -2,11 +2,11 @@ name: Renovate
on:
schedule:
- cron: "0 */2 * * *"
- cron: "0/30 * * * *"
workflow_dispatch:
env:
RENOVATE_VERSION: "43.252.8"
RENOVATE_VERSION: "42.50.3"
jobs:
renovate:
+2 -7
View File
@@ -4,16 +4,12 @@
| Service | Image |
| --- | --- |
| audiomuse-ai-flask | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |
| audiomuse-ai-pg | postgres:15-alpine |
| audiomuse-ai-valkey | docker.io/valkey/valkey:9-alpine |
| audiomuse-ai-worker | ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta |
| beszel-agent | henrygd/beszel-agent:0.18.7 |
| beszel-agent | henrygd/beszel-agent:0.18.4 |
| context7-mcp | mcp/context7:latest |
| docker-socket-proxy | ghcr.io/tecnativa/docker-socket-proxy:latest |
| faster-whisper | lscr.io/linuxserver/faster-whisper:latest |
| gitea-mcp | gitea/gitea-mcp-server:0.9.0 |
| meilisearch | getmeili/meilisearch:v1.36 |
| meilisearch | getmeili/meilisearch:v1.27 |
| navidrome-mcp | git.trez.wtf/trez/navidrome-mcp:latest |
| ollama | ollama/ollama |
| piper | lscr.io/linuxserver/piper:latest |
@@ -21,7 +17,6 @@
| scanopy-daemon | ghcr.io/scanopy/scanopy/daemon:latest |
| scanopy-pg | postgres:17-alpine |
| scanopy-server | ghcr.io/scanopy/scanopy/server:latest |
| scriberr | ghcr.io/rishikanthc/scriberr:v1.2.0 |
| searxng-mcp | isokoliuk/mcp-searxng:latest |
| signoz-logspout | pavanputhra/logspout-signoz:2025.07.19-887dfeb |
| signoz-mcp | signoz/signoz-mcp-server:v0.0.5 |
+18 -165
View File
@@ -3,97 +3,6 @@ networks:
default:
name: ultima_default
services:
audiomuse-ai-flask:
container_name: audiomuse-ai-flask
depends_on:
audiomuse-ai-valkey:
required: true
condition: service_healthy
audiomuse-ai-pg:
required: true
condition: service_healthy
environment:
AI_MODEL_PROVIDER: OLLAMA
OLLAMA_SERVER_URL: http://ollama:11434/api/generate
SERVICE_TYPE: "flask"
MEDIASERVER_TYPE: "navidrome"
AUDIOMUSE_AI_PG_PASSWORD: "pgEwBcxOlRJPlcuER98G1R1FWlDqdkUc"
NAVIDROME_PASSWORD: "3MFiLK#JryTgXSxF5&W4&Y8H8zTancpZ"
NAVIDROME_USERNAME: "admin"
NAVIDROME_URL: http://192.168.1.254:4533/
POSTGRES_USER: audiomuse
POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
POSTGRES_DB: audiomusedb
POSTGRES_HOST: audiomuse-ai-pg
POSTGRES_PORT: 5432
REDIS_URL: redis://audiomuse-ai-valkey:6379/0
TEMP_DIR: /app/temp_audio
image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
ports:
- 8000:8000
restart: unless-stopped
volumes:
- audiomuse-temp-audio-flask:/app/temp_audio
audiomuse-ai-pg:
container_name: audiomuse-ai-pg
environment:
POSTGRES_USER: audiomuse
POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
POSTGRES_DB: audiomusedb
expose:
- 5432
healthcheck:
test: ["CMD-SHELL", "pg_isready -U audiomuse -d audiomusedb"]
interval: 10s
retries: 5
start_period: 30s
timeout: 10s
image: postgres:15-alpine@sha256:3d0f7584ed7d04e27fa050d6683a74746608faf21f202be78460d679cc56461f
restart: unless-stopped
volumes:
- audiomuse-ai-pg-data:/var/lib/postgresql/data
audiomuse-ai-valkey:
container_name: audiomuse-ai-valkey
healthcheck:
test: redis-cli ping || exit 1
image: docker.io/valkey/valkey:9-alpine@sha256:c9b77919daeba2c02ad954d0c844cc4e7142069d177b89c5fd771f405daf9e02
environment:
ALLOW_EMPTY_PASSWORD: yes
VALKEY_DATA_DIR: /data/valkey
VALKEY_DATABASE: 0
expose:
- 6379
restart: unless-stopped
volumes:
- audiomuse-ai-valkey-data:/data/valkey
audiomuse-ai-worker:
container_name: audiomuse-ai-worker
depends_on:
audiomuse-ai-valkey:
required: true
condition: service_healthy
audiomuse-ai-pg:
required: true
condition: service_healthy
environment:
AI_MODEL_PROVIDER: OLLAMA
OLLAMA_SERVER_URL: http://ollama:11434/api/generate
SERVICE_TYPE: "worker"
MEDIASERVER_TYPE: "navidrome"
NAVIDROME_URL: http://192.168.1.254:4533/
NAVIDROME_USER: ${NAVIDROME_USERNAME}
NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
POSTGRES_USER: audiomuse
POSTGRES_PASSWORD: ${AUDIOMUSE_AI_PG_PASSWORD}
POSTGRES_DB: audiomusedb
POSTGRES_HOST: audiomuse-ai-pg
POSTGRES_PORT: 5432
REDIS_URL: "redis://audiomuse-ai-valkey:6379/0"
TEMP_DIR: "/app/temp_audio"
image: ghcr.io/neptunehub/audiomuse-ai:0.7.12-beta@sha256:a0ed658b75d66044e3884cbf94acf5e016d4898bac4d5f0f25929b066c3e5f9c
restart: unless-stopped
volumes:
- audiomuse-temp-audio-worker:/app/temp_audio
beszel-agent:
container_name: beszel-agent
environment:
@@ -104,7 +13,7 @@ services:
HUB_URL: http://192.168.1.254:22220
expose:
- 45876
image: henrygd/beszel-agent:0.18.7@sha256:8874e2c53f9de5e063a6a80d6b617e20fa593ac5dc4eb4c6ce1f912f510f38f8
image: henrygd/beszel-agent:0.18.4@sha256:00829897142460910ed1de162b166d2494916c061ecdb092de3b0653818c02b9
network_mode: host
restart: unless-stopped
volumes:
@@ -157,7 +66,7 @@ services:
LOCAL_ONLY: #optional
WHISPER_BEAM: 1 #optional
WHISPER_LANG: en #optional
image: lscr.io/linuxserver/faster-whisper:latest@sha256:ee157f638a019bc27f5c17f1a70ad2cd7a625d03e72c0ed26e7a37697add23a0
image: lscr.io/linuxserver/faster-whisper:latest@sha256:e2ca077d2c759712a6df7ce5ac6353f757530439ff59cca0139863554f057906
ports:
- "10300:10300"
restart: unless-stopped
@@ -171,22 +80,7 @@ services:
GITEA_ACCESS_TOKEN: ${GITEA_ROOT_TOKEN}
expose:
- 8080
image: gitea/gitea-mcp-server:1.3.0@sha256:26cf7bd4ce9face39ed25f0ec82817b1dfdfe8e829240130bffdf353e336ec00
restart: unless-stopped
ha-mcp:
image: ghcr.io/homeassistant-ai/ha-mcp:7.12.1@sha256:fe32c119ce77d1806209648b294e2644d970255f3ae4c4acd1957707fcca811b
container_name: ha-mcp
environment:
HOMEASSISTANT_URL: http://192.168.1.252:8123
HOMEASSISTANT_TOKEN: ${HOME_ASSISTANT_LONG_LIVED_TOKEN}
BACKUP_HINT: normal
HA_TIMEOUT: 30
HA_MAX_RETRIES: 3
ENABLE_WEBSOCKET: true
DEBUG: true
LOG_LEVEL: ERROR
ports:
- 8086:8086
image: gitea/gitea-mcp-server:0.9.0@sha256:4add361130b2101d3027f2dd5ad2a08258dc3c45f9631030f5c3ca0a773df285
restart: unless-stopped
meilisearch:
container_name: meilisearch
@@ -194,7 +88,7 @@ services:
MEILI_HOST: http://meilisearch:7700
MEILI_NO_ANALYTICS: true
MEILI_MASTER_KEY: ${MEILISEARCH_MASTER_KEY}
image: getmeili/meilisearch:v1.49@sha256:bdc7d7e7939911c40d88d6bcd01f9c72c81f7293135916d48bce241569f721bd
image: getmeili/meilisearch:v1.27@sha256:22e82938463a532286bd6b2b902a5a3fa7a5017d46cc6a3cc3b4c6fc365e49f0
ports:
- 7700:7700
restart: always
@@ -218,11 +112,9 @@ services:
restart: unless-stopped
ollama:
container_name: ollama
# environment:
image: ollama/ollama@sha256:57f573b47f1f71ebb445789f279fe3e596a8beab182f7cf486db9205bad87c5a
image: ollama/ollama@sha256:0ff452f6a4c3c5bb4ab063a1db190b261d5834741a519189ed5301d50e4434d1
ports:
- 11434:11434
privileged: true
restart: unless-stopped
volumes:
- ollama:/root/.ollama
@@ -239,7 +131,7 @@ services:
PIPER_NOISEW: 0.333 #optional
PIPER_SPEAKER: 0 #optional
NO_STREAMING: #optional
image: lscr.io/linuxserver/piper:latest@sha256:aa9d8e464caedb3f5590d44c8e001bf7f087fcb2d50275fc8c3549414cfa2e69
image: lscr.io/linuxserver/piper:latest@sha256:cb8a30f91de6a16f0b2d5c9004804d1ec13d850fb6b0fb10269be21543fe10c3
ports:
- 10200:10200
restart: unless-stopped
@@ -247,7 +139,7 @@ services:
- ${ULTIMA_DOCKER_DIR}/piper/:/config
portainer-agent:
container_name: portainer_agent
image: portainer/agent:latest@sha256:43c8bc9bafde891ddd0fc3dcc61ac6e1887e7e2027baa76ce402bc014037fba6
image: portainer/agent:latest@sha256:e3a9bcb1e5862edaca62d6e54f70efc5815dff33e955a30578b174423b19977c
volumes:
- /:/host
- /var/lib/docker/volumes:/var/lib/docker/volumes
@@ -258,19 +150,14 @@ services:
scanopy-daemon:
container_name: scanopy-daemon
environment:
SCANOPY_LOG_LEVEL: debug
SCANOPY_SERVER_URL: http://192.168.1.248:60072
SCANOPY_NETWORK_ID: ${SCANOPY_NETWORK_ID}
SCANOPY_DAEMON_API_KEY: ${SCANOPY_DAEMON_API_KEY}
SCANOPY_USER_ID: ${SCANOPY_USER_ID}
SCANOPY_NAME: scanopy-daemon-tar-valon
SCANOPY_MODE: daemon_poll
SCANOPY_LOG_LEVEL: info
SCANOPY_SERVER_URL: http://127.0.0.1:60072
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:60073/api/health || exit 1"]
interval: 5s
timeout: 3s
retries: 15
image: ghcr.io/scanopy/scanopy/daemon:latest@sha256:e3865d79fd81f87b4aebaa15fa441059fd348a47c718e40756c62c492048012b
image: ghcr.io/scanopy/scanopy/daemon:latest@sha256:7a8d06ff4576a66e4414eb91dc08931012e870dd7c79d7877e3f251e1a3bc997
network_mode: host
privileged: true
restart: unless-stopped
@@ -286,32 +173,28 @@ services:
expose:
- 5432
healthcheck:
test: ["CMD-SHELL", "pg_isready -U scanopy"]
test: ["CMD-SHELL", "pg_isready -U postgres"]
interval: 10s
timeout: 5s
retries: 5
image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
restart: unless-stopped
volumes:
- scanopy-pg-data:/var/lib/postgresql/data
scanopy-server:
container_name: scanopy-server
image: ghcr.io/scanopy/scanopy/server:latest@sha256:03669449724b9826f42d02bb50b82bcad7ede42f798a9bb1c645ae09ab14c060
image: ghcr.io/scanopy/scanopy/server:latest@sha256:24324e2dd3179479f7facb0f13bb5ffc771b016bede261c5ce2245bea65946e8
depends_on:
scanopy-pg:
condition: service_healthy
scanopy-daemon:
condition: service_started
environment:
SCANOPY_LOG_LEVEL: debug
SCANOPY_LOG_LEVEL: info
SCANOPY_DATABASE_URL: postgresql://scanopy:${SCANOPY_PG_PASSWORD}@scanopy-pg:5432/scanopy
SCANOPY_WEB_EXTERNAL_PATH: /app/static
SCANOPY_PUBLIC_URL: http://192.168.1.248:60072
SCANOPY_INTEGRATED_DAEMON_URL: http://host.docker.internal:60073
SCANOPY_SMTP_RELAY: 192.168.1.254:25
SCANOPY_SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
SCANOPY_SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
SCANOPY_SMTP_EMAIL: noreply@trez.wtf
extra_hosts:
- "host.docker.internal:host-gateway"
ports:
@@ -319,20 +202,6 @@ services:
restart: unless-stopped
volumes:
- ${ULTIMA_DOCKER_DIR}/scanopy:/data
scriberr:
container_name: scriberr
hostname: scriberr
image: ghcr.io/rishikanthc/scriberr:v1.2.0@sha256:9e36448fb5a6003b28cd3d9ac783e8cbef5ed916936c20ec353a55fa380484f4
environment:
PUID: ${PUID}
PGID: ${PGID}
APP_ENV: production # DO NOT CHANGE THIS
ports:
- 8080:8080
restart: unless-stopped
volumes:
- scriberr_data:/app/data # volume for data
- scriberr_env_data:/app/whisperx-env # volume for models and python envs
searxng-mcp:
container_name: searxng-mcp
environment:
@@ -340,7 +209,7 @@ services:
MCP_HTTP_PORT: 3000
expose:
- 3000
image: isokoliuk/mcp-searxng:latest@sha256:b6727fc950cf1a7501d70f863b563d9fc689d6e33c773296ed845070c5646b48
image: isokoliuk/mcp-searxng:latest@sha256:7e01e7ad96e332a9fd10a295f99de1cb30b6574637359c722e49c3aa1bd02c83
restart: unless-stopped
stdin_open: true
signoz-logspout:
@@ -355,7 +224,7 @@ services:
- /var/run/docker.sock:/var/run/docker.sock
signoz-mcp:
container_name: signoz-mcp-server
image: signoz/signoz-mcp-server:v0.7.0@sha256:ee27515d27f501f8487d310fa04450adb15be92354c232d26384f732b2796e6a
image: signoz/signoz-mcp-server:v0.0.5@sha256:e0b8fe3eee634e1c7a45470c734e50b19c74e065add73834519e37d89d7ce092
environment:
SIGNOZ_URL: http://192.168.1.254:36113
SIGNOZ_API_KEY: ${SIGNOZ_API_KEY}
@@ -369,10 +238,7 @@ services:
container_name: stable-diffusion-webui
image: ghcr.io/neggles/sd-webui-docker:latest@sha256:1795fe796e1dad0d8d3baa9ef7c38a255b69c0878b76869feecc617bfd015e53
environment:
CLI_ARGS:
"--api --use-cpu all --precision full --no-half --skip-torch-cuda-test
--ckpt /empty.pt --do-not-download-clip --disable-nan-check
--disable-opt-split-attention" # will have to be changed for new hardware
CLI_ARGS: "--api --use-cpu all --precision full --no-half --skip-torch-cuda-test --ckpt /empty.pt --do-not-download-clip --disable-nan-check --disable-opt-split-attention" # will have to be changed for new hardware
PYTHONUNBUFFERED: "1"
TERM: "vt100"
SD_WEBUI_VARIANT: "default"
@@ -395,25 +261,12 @@ services:
container_name: wikipedia-mcp
expose:
- 8000
image: mcp/wikipedia-mcp:latest@sha256:32ce608113696e8d6efc8bbfcc1ef4d52552a3543a3cd733427c6169767849d2
image: mcp/wikipedia-mcp:latest@sha256:047f17273bae96828903cfd12f13c7a64951b54e537530ecb6678fff5204a584
restart: unless-stopped
volumes:
audiomuse-ai-pg-data:
name: audiomuse-ai-pg-data
audiomuse-temp-audio-flask:
name: audiomuse-temp-audio-flask
audiomuse-ai-valkey-data:
name: audiomuse-ai-valkey-data
audiomuse-temp-audio-worker:
name: audiomuse-temp-audio-worker
ollama:
name: ollama
scanopy-daemon-config:
name: scanopy-daemon-config
scanopy-pg-data:
name: scanopy-pg-data
scriberr_data:
name: scriberr_data
scriberr_env_data:
name: scriberr_env_data