name: ultima
networks:
  default:
    name: ultima_default
services:
  beszel-agent:
    container_name: beszel-agent
    environment:
      PORT: 45876
      # Do not remove quotes around the key
      KEY: "${BESZEL_ULTIMA_AGENT_KEY}"
      TOKEN: ${BESZEL_ULTIMA_TOKEN}
      HUB_URL: http://192.168.1.254:22220
    expose:
      - 45876
    image: henrygd/beszel-agent:0.18.4@sha256:00829897142460910ed1de162b166d2494916c061ecdb092de3b0653818c02b9
    network_mode: host
    restart: unless-stopped
    volumes:
      - ${ULTIMA_DOCKER_DIR}/beszel-agent:/var/lib/beszel-agent
      - /var/run/docker.sock:/var/run/docker.sock:ro
  context7-mcp:
    container_name: context7-mcp
    expose:
      - 8080
    image: mcp/context7:latest@sha256:1174e6a29634a83b2be93ac1fefabf63265f498c02c72201fe3464e687dd8836
    restart: unless-stopped
  docker-socket-proxy:
    container_name: dockerproxy
    environment:
      AUTH: 1
      BUILD: 1
      COMMIT: 1
      CONFIGS: 1
      CONTAINERS: 1
      DISTRIBUTION: 1
      EVENTS: 1
      EXEC: 1
      GPRC: 1
      IMAGES: 1
      INFO: 1
      NETWORKS: 1
      NODES: 1
      POST: 1
      PLUGINS: 1
      SERVICES: 1
      SESSION: 1
      SYSTEM: 1
      TASKS: 1
      VOLUMES: 1
      LOG_LEVEL: debug
    image: ghcr.io/tecnativa/docker-socket-proxy:latest@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476
    ports:
      - 2375:2375
    privileged: true
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
  faster-whisper:
    container_name: faster-whisper
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
      TZ: ${TZ}
      WHISPER_MODEL: large
      LOCAL_ONLY: #optional
      WHISPER_BEAM: 1 #optional
      WHISPER_LANG: en #optional
    image: lscr.io/linuxserver/faster-whisper:latest@sha256:51cf56fd52c751d43aa1a26f8cfec09a3e122107e5d076f3311e65378cf1c6ea
    ports:
      - "10300:10300"
    restart: unless-stopped
    volumes:
      - ${ULTIMA_DOCKER_DIR}/faster-whisper/:/config
  gitea-mcp:
    command: ["/app/gitea-mcp", "-t", "http", "--port", "8080", "-d"]
    container_name: gitea-mcp
    environment:
      GITEA_INSTANCE_URL: http://192.168.1.254:3013
      GITEA_ACCESS_TOKEN: ${GITEA_ROOT_TOKEN}
    expose:
      - 8080
    image: gitea/gitea-mcp-server:0.9.0@sha256:4add361130b2101d3027f2dd5ad2a08258dc3c45f9631030f5c3ca0a773df285
    restart: unless-stopped
  meilisearch:
    container_name: meilisearch
    environment:
      MEILI_HOST: http://meilisearch:7700
      MEILI_NO_ANALYTICS: true
      MEILI_MASTER_KEY: ${MEILISEARCH_MASTER_KEY}
    image: getmeili/meilisearch:v1.27@sha256:22e82938463a532286bd6b2b902a5a3fa7a5017d46cc6a3cc3b4c6fc365e49f0
    ports:
      - 7700:7700
    restart: always
    user: ${PUID}:${PGID}
    volumes:
      - ${ULTIMA_DOCKER_DIR}/meilisearch:/meili_data
  navidrome-mcp:
    container_name: navidrome-mcp
    image: git.trez.wtf/trez/navidrome-mcp:latest@sha256:4c98af82902471ae411126b0333370614c5d71ec8a2819a90fd2bdff2170ef05
    expose:
      - 5000
    environment:
      NAVIDROME_URL: "https://navi.trez.wtf"
      NAVIDROME_USERNAME: admin
      NAVIDROME_PASSWORD: ${NAVIDROME_PASSWORD}
      LASTFM_API_KEY: ${LASTFM_API_KEY}
      RADIO_BROWSER_USER_AGENT: "Navidrome-MCP/1.0"
      LYRICS_PROVIDER: "lrclib"
      LRCLIB_USER_AGENT: "Navidrome-MCP/1.0"
      # NAVIDROME_DEFAULT_LIBRARIES: ""
    restart: unless-stopped
  ollama:
    container_name: ollama
    image: ollama/ollama@sha256:5a5d014aa774f78ebe1340c0d4afc2e35afc12a2c3b34c84e71f78ea20af4ba3
    ports:
      - 11434:11434
    restart: unless-stopped
    volumes:
      - ollama:/root/.ollama
  piper:
    container_name: piper
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
      TZ: ${TZ}
      PIPER_VOICE: en_GB-jenny_dioco-medium
      LOCAL_ONLY: #optional
      PIPER_LENGTH: 1.0 #optional
      PIPER_NOISE: 0.667 #optional
      PIPER_NOISEW: 0.333 #optional
      PIPER_SPEAKER: 0 #optional
      NO_STREAMING: #optional
    image: lscr.io/linuxserver/piper:latest@sha256:84cf7e0abb9ec4e0e3916541f409c11b903c4edd04ec64bcc14493be9c353da6
    ports:
      - 10200:10200
    restart: unless-stopped
    volumes:
      - ${ULTIMA_DOCKER_DIR}/piper/:/config
  portainer-agent:
    container_name: portainer_agent
    image: portainer/agent:latest@sha256:7af856876dcb2778108bf6846f3da31b176443db90e3de31fcfdf17e5ab7857e
    volumes:
      - /:/host
      - /var/lib/docker/volumes:/var/lib/docker/volumes
      - /var/run/docker.sock:/var/run/docker.sock
    restart: always
    ports:
      - 9001:9001
  scanopy-daemon:
    container_name: scanopy-daemon
    environment:
      SCANOPY_LOG_LEVEL: info
      SCANOPY_SERVER_URL: http://127.0.0.1:60072
      SCANOPY_NETWORK_ID: ${SCANOPY_NETWORK_ID}
      SCANOPY_DAEMON_API_KEY: ${SCANOPY_DAEMON_API_KEY}
      SCANOPY_USER_ID: ${SCANOPY_USER_ID}
      SCANOPY_NAME: scanopy-daemon-tar-valon
      SCANOPY_MODE: daemon_poll
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:60073/api/health || exit 1"]
      interval: 5s
      timeout: 3s
      retries: 15
    image: ghcr.io/scanopy/scanopy/daemon:latest@sha256:81474de858922f19d0acd6c6fe39ad896826aea892a8ab2f8e46506c03cbcbdb
    network_mode: host
    privileged: true
    restart: unless-stopped
    volumes:
      - scanopy-daemon-config:/root/.config/daemon
      - /var/run/docker.sock:/var/run/docker.sock:ro
  scanopy-pg:
    container_name: scanopy-pg
    environment:
      POSTGRES_DB: scanopy
      POSTGRES_USER: scanopy
      POSTGRES_PASSWORD: ${SCANOPY_PG_PASSWORD}
    expose:
      - 5432
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U scanopy"]
      interval: 10s
      timeout: 5s
      retries: 5
    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
    restart: unless-stopped
    volumes:
      - scanopy-pg-data:/var/lib/postgresql/data
  scanopy-server:
    container_name: scanopy-server
    image: ghcr.io/scanopy/scanopy/server:latest@sha256:8a0884a3b672b3fbe1d7a006ab29edfa1c6cfa1896928b99737ed4c1bb2c1731
    depends_on:
      scanopy-pg:
        condition: service_healthy
      scanopy-daemon:
        condition: service_started
    environment:
      SCANOPY_LOG_LEVEL: info
      SCANOPY_DATABASE_URL: postgresql://scanopy:${SCANOPY_PG_PASSWORD}@scanopy-pg:5432/scanopy
      SCANOPY_WEB_EXTERNAL_PATH: /app/static
      SCANOPY_PUBLIC_URL: http://192.168.1.248:60072
      SCANOPY_INTEGRATED_DAEMON_URL: http://host.docker.internal:60073
    extra_hosts:
      - "host.docker.internal:host-gateway"
    ports:
      - 60072:60072
    restart: unless-stopped
    volumes:
      - ${ULTIMA_DOCKER_DIR}/scanopy:/data
  searxng-mcp:
    container_name: searxng-mcp
    environment:
      SEARXNG_URL: http://192.168.1.254:8095
      MCP_HTTP_PORT: 3000
    expose:
      - 3000
    image: isokoliuk/mcp-searxng:latest@sha256:c41115e70a53902d524546f3e0a3d16b4c18380639435f104bf1eed7c144d82f
    restart: unless-stopped
    stdin_open: true
  signoz-logspout:
    command: signoz://192.168.1.254:8082
    container_name: signoz-logspout
    environment:
      ENV: prod
      SIGNOZ_LOG_ENDPOINT: http://192.168.1.254:8082
    image: pavanputhra/logspout-signoz:2025.07.19-887dfeb@sha256:6da8ce12279a5262de8b2d5c083ce82d4c878c4eab702b4d328afe147ed7553b
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
  signoz-mcp:
    container_name: signoz-mcp-server
    image: signoz/signoz-mcp-server:v0.0.5@sha256:e0b8fe3eee634e1c7a45470c734e50b19c74e065add73834519e37d89d7ce092
    environment:
      SIGNOZ_URL: http://192.168.1.254:36113
      SIGNOZ_API_KEY: ${SIGNOZ_API_KEY}
      TRANSPORT_MODE: http
      MCP_SERVER_PORT: 8000
      LOG_LEVEL: info
    expose:
      - 8000
    restart: unless-stopped
  stable-diffusion-webui:
    container_name: stable-diffusion-webui
    image: ghcr.io/neggles/sd-webui-docker:latest@sha256:1795fe796e1dad0d8d3baa9ef7c38a255b69c0878b76869feecc617bfd015e53
    environment:
      CLI_ARGS: "--api --use-cpu all --precision full --no-half --skip-torch-cuda-test --ckpt /empty.pt --do-not-download-clip --disable-nan-check --disable-opt-split-attention" # will have to be changed for new hardware
      PYTHONUNBUFFERED: "1"
      TERM: "vt100"
      SD_WEBUI_VARIANT: "default"
    ports:
      - 7860:7860
    restart: unless-stopped
    volumes:
      - ${ULTIMA_DOCKER_DIR}/stable-diffusion-webui/data:/data
      - ${ULTIMA_DOCKER_DIR}/stable-diffusion-webui/output:/output
  webui-mcpo:
    container_name: webui-mcpo
    image: masterno12/webui-mcpo:latest@sha256:018df5374c627ebeb82ea395a9c26f7439cf8a66c003608f390d09eecfc8db7d
    ports:
      - 18003:8000
    restart: unless-stopped
    volumes:
      - ${ULTIMA_DOCKER_DIR}/mcpo:/opt/mcpo
  wikipedia-mcp:
    command: ["--transport", "sse", "--country", "US", "--enable-cache"]
    container_name: wikipedia-mcp
    expose:
      - 8000
    image: mcp/wikipedia-mcp:latest@sha256:bed30a8fafa85c1babed1d3a7def33e1fb3a89ddd75ddd6c92087f0a9ae4f19a
    restart: unless-stopped
volumes:
  ollama:
    name: ollama
  scanopy-daemon-config:
    name: scanopy-daemon-config
  scanopy-pg-data:
    name: scanopy-pg-data