Update postgres Docker tag to v18

Reviewed-on: https://git.smittenfeld.nl/peter/homelab-docker-config/pulls/231

audiobookshelf/docker-compose.yml

@@ -1,6 +1,7 @@
 services:
   audiobookshelf:
-    image: ghcr.io/advplyr/audiobookshelf:2.27.0
+    image: ghcr.io/advplyr/audiobookshelf:2.31.0
+    restart: always
     ports:
       - 13378:80
     volumes:

audiomuse/.env.example

@@ -0,0 +1,41 @@
+# Copy this file to `.env` and fill in the values that match your setup.
+# Docker Compose files under deployment/ read these variables to keep settings in one place.
+#
+# IMPORTANT:
+# 1. This file must be named exactly ".env" (not .env.txt or .env.example)
+# 2. It must be in the SAME directory as your docker-compose-*.yaml file
+# 3. Do NOT use spaces around the = sign
+# 4. Do NOT use quotes around values (unless required by the value itself)
+# 5. After editing, restart containers: docker-compose down && docker-compose up -d
+#
+# SPECIAL CHARACTERS IN VALUES:
+# If your password or API key contains special characters like: $ ` " ' \ # ! & * ( ) [ ] { } | ; < > ?
+# you may need to:
+#   - Avoid quotes entirely: GEMINI_API_KEY=AIza$pecial!Key  (usually works)
+#   - OR use single quotes if the value has $: GEMINI_API_KEY='AIza$pecial!Key'
+#   - OR escape with backslash: GEMINI_API_KEY=AIza\$pecial\!Key
+# Most problematic characters: $ (variable expansion), ` (command substitution), " (string delimiter)
+#
+# TROUBLESHOOTING:
+# If API keys don't work, verify:
+#   - File is named ".env" exactly (check with: ls -la)
+#   - No spaces: GEMINI_API_KEY=AIza... (not GEMINI_API_KEY = "AIza...")
+#   - No unescaped special characters (especially $ ` " ')
+#   - Restart containers after changing this file
+# If all else fails, try hardcoding the value directly in docker-compose-*.yaml to isolate the issue
+
+# --- Jellyfin ---
+JELLYFIN_USER_ID=
+JELLYFIN_TOKEN=
+JELLYFIN_URL=https://jellyfin.smittenfeld.nl
+
+# --- Shared backend configuration ---
+AUDIOMUSE_POSTGRES_USER=audiomuse
+AUDIOMUSE_POSTGRES_PASSWORD=
+AUDIOMUSE_POSTGRES_DB=audiomusedb
+#
+## --- Remote worker integration ---
+#WORKER_URL=http://worker.example.com:8029/worker
+#WORKER_POSTGRES_HOST=server.example.com
+#WORKER_REDIS_URL=redis://server.example.com:6379/0
+

audiomuse/docker-compose.yml

@@ -0,0 +1,126 @@
+services:
+  # Redis service for RQ (task queue)
+  audiomuse-ai-redis:
+    image: redis:7-alpine
+    container_name: audiomuse-redis
+    ports:
+      - "6379:6379" # Expose Redis port to the host
+    volumes:
+      - redis-data:/data # Persistent storage for Redis data
+    networks:
+      - audiomuse
+    restart: unless-stopped
+
+  # PostgreSQL database service
+  audiomuse-ai-postgres:
+    image: postgres:18-alpine
+    container_name: audiomuse-postgres
+    env_file:
+      - .env
+    environment:
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+#    ports:
+#      - "5432:5432" # Expose PostgreSQL port to the host
+    volumes:
+      - postgres-data:/var/lib/postgresql/data # Persistent storage for PostgreSQL data
+    networks:
+      - audiomuse
+    restart: unless-stopped
+
+  # AudioMuse-AI Flask application service
+  audiomuse-ai-flask:
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
+    container_name: audiomuse-ai-flask-app
+    ports:
+      - "8013:8000"
+    env_file:
+      - .env
+    environment:
+      SERVICE_TYPE: "flask" # Tells the container to run the Flask app
+      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+      POSTGRES_PORT: "5432"
+      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
+      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
+      AI_MODEL_PROVIDER: "OPENAI"
+      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
+      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
+      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
+      TEMP_DIR: "/app/temp_audio"
+    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
+    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
+    # Increase tmpfs size for very large audio files as needed.
+    # If host RAM is limited, use a Docker volume instead of tmpfs.
+    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
+    tmpfs:
+      - /app/temp_audio:rw,size=1000m
+    depends_on:
+      - audiomuse-ai-redis
+      - audiomuse-ai-postgres
+    restart: unless-stopped
+    networks:
+      - audiomuse
+    models:
+      - llm # Specify that LLM models are used in this service
+
+  # AudioMuse-AI RQ Worker service
+  audiomuse-ai-worker:
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
+    container_name: audiomuse-ai-worker-instance
+    env_file:
+      - .env
+    environment:
+      SERVICE_TYPE: "worker" # Tells the container to run the RQ worker
+      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
+      JELLYFIN_USER_ID: "${JELLYFIN_USER_ID}"
+      JELLYFIN_TOKEN: "${JELLYFIN_TOKEN}"
+      JELLYFIN_URL: "${JELLYFIN_URL}"
+      # DATABASE_URL is now constructed by config.py from the following:
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+      POSTGRES_PORT: "5432"
+      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
+      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
+      AI_MODEL_PROVIDER: "OPENAI"
+      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
+      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
+      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
+      TEMP_DIR: "/app/temp_audio"
+    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
+    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
+    # Increase tmpfs size for very large audio files as needed.
+    # If host RAM is limited, use a Docker volume instead of tmpfs.
+    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
+    tmpfs:
+      - /app/temp_audio:rw,size=1000m
+    depends_on:
+      - audiomuse-ai-redis
+      - audiomuse-ai-postgres
+    restart: unless-stopped
+    networks:
+      - audiomuse
+    models:
+      - llm # Specify that LLM models are used in this service
+
+# Using Docker Model Runner (DMR)
+# - Make sure your Docker Engine version supports the AI features and that the docker-model-plugin is installed.
+# - Follow Docker's setup guide: https://docs.docker.com/ai/model-runner/get-started/#docker-engine
+# - Once DMR is configured, you can download and run AI models locally just like Docker images — no code changes to this compose file are required.
+# - For model integration with docker-compose, see: https://docs.docker.com/ai/compose/models-and-compose/
+models:
+  llm:
+    model: ai/qwen3:0.6B-Q4_0 # Lightweight local model for testing. Change as needed; if changed, ensure it matches OPENAI_MODEL_NAME.
+
+
+# Define volumes for persistent data and temporary files
+volumes:
+  redis-data:
+  postgres-data:
+
+networks:
+  audiomuse:

docker-compose.yml

@@ -1,5 +1,6 @@
 include:
   - audiobookshelf/docker-compose.yml
+  - audiomuse/docker-compose.yml
   - baikal/docker-compose.yml
   - gitea/docker-compose.yml
   - immich/docker-compose.yml
@@ -9,7 +10,6 @@ include:
   - pihole/docker-compose.yml
   - pingvin/docker-compose.yml
   - pocketid/docker-compose.yml
-  - searxng/docker-compose.yml
   - spliit/docker-compose.yml
   - shlink/docker-compose.yml
   - synapse/docker-compose.yml

gitea/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   gitea:
     container_name: gitea
-    image: gitea/gitea:1.24.3-rootless
+    image: gitea/gitea:1.25.2-rootless
     restart: always
     volumes:
       - ${GITEA_DATA_LOCATION}:/var/lib/gitea
@@ -14,7 +14,8 @@ services:
       - "3000:3000"
       - "2222:2222"
   gitea-runner:
-    image: gitea/act_runner:0.2.12
+    image: gitea/act_runner:0.2.13
+    restart: always
     environment:
       CONFIG_FILE: /config.yaml
       GITEA_INSTANCE_URL: "${GITEA_INSTANCE_URL}"

immich/.env.example

@@ -1,8 +1,10 @@
 UPLOAD_LOCATION=
+IMMICH_VERSION=
 IMMICH_DB_LOCATION=
 
-DB_USERNAME=
-DB_PASSWORD=
-DB_DATABASE_NAME=
+IMMICH_DB_HOSTNAME=
+IMMICH_POSTGRES_DB=
+IMMICH_POSTGRES_USER=
+IMMICH_POSTGRES_PASSWORD=
 
 REDIS_HOSTNAME=

immich/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v1.137.3
+    image: ghcr.io/immich-app/immich-server:v2.3.1
     # extends:
     #   file: hwaccel.transcoding.yml
     #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
@@ -11,34 +11,30 @@ services:
       - /etc/localtime:/etc/localtime:ro
     env_file:
       - .env
+    environment:
+      DB_HOSTNAME: ${IMMICH_DB_HOSTNAME}
+      DB_USERNAME: ${IMMICH_POSTGRES_USER}
+      DB_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
+      DB_DATABASE_NAME: ${IMMICH_POSTGRES_DB}
     ports:
       - '2283:2283'
     depends_on:
       - redis
       - database
     restart: always
-    healthcheck:
-      disable: false
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
-    # Example tag: ${IMMICH_VERSION:-release}-cuda
-    image: ghcr.io/immich-app/immich-machine-learning:v1.137.3
-    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
-    #   file: hwaccel.ml.yml
-    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    image: ghcr.io/immich-app/immich-machine-learning:v2.3.1
     volumes:
       - model-cache:/cache
     env_file:
       - .env
     restart: always
-    healthcheck:
-      disable: false
 
   redis:
     container_name: immich_redis
-    image: docker.io/redis:7.4-alpine@sha256:1bf97f21f01b0e7bd4b7b34a26d3b9d8086e41e70c10f262e8a9e0b49b5116a0
+    image: docker.io/valkey/valkey:9@sha256:fb8d272e529ea567b9bf1302245796f21a2672b8368ca3fcb938ac334e613c8f
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
@@ -47,14 +43,17 @@ services:
     container_name: immich_postgres
     image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
     environment:
-      POSTGRES_PASSWORD: ${DB_PASSWORD}
-      POSTGRES_USER: ${DB_USERNAME}
-      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_USER: ${IMMICH_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${IMMICH_POSTGRES_DB}
       POSTGRES_INITDB_ARGS: '--data-checksums'
       DB_STORAGE_TYPE: 'HDD'
+    ports:
+      - 5433:5432
     volumes:
       # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
       - ${IMMICH_DB_LOCATION}:/var/lib/postgresql/data
+    shm_size: 128mb
     restart: always
 
 volumes:

jellyfin/docker-compose.yml

@@ -1,9 +1,9 @@
 services:
   jellyfin:
-    image: jellyfin/jellyfin:10.10.7
+    image: jellyfin/jellyfin:10.11.5
     user: ${JELLYFIN_USER_UID}:${JELLYFIN_USER_GID}
     network_mode: 'host'
-    restart: 'unless-stopped'
+    restart: always
     env_file:
       - .env
     environment:

nextcloud/docker-compose.yml

@@ -1,17 +1,19 @@
 services:
   nextcloud_db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${NEXTCLOUD_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
       POSTGRES_DB: ${NEXTCLOUD_POSTGRES_DB}
       POSTGRES_USER: ${NEXTCLOUD_POSTGRES_USER}
       POSTGRES_PASSWORD: ${NEXTCLOUD_POSTGRES_PASSWORD}
+    ports:
+      - 5438:5432
     networks:
       - nextcloud
   nextcloud:
-    image: nextcloud:31.0.7
+    image: nextcloud:32.0.3
     restart: always
     ports:
       - 8081:80
@@ -30,12 +32,12 @@ services:
     networks:
       - nextcloud
   cron:
-    image: nextcloud:31.0.7
+    image: nextcloud:32.0.3
     container_name: nextcloud-cron
     volumes:
       - ${NEXTCLOUD_DATA_DIR}:/var/www/html
     entrypoint: /cron.sh
-    restart: unless-stopped
+    restart: always
     networks:
       - nextcloud
   nextcloud-redis:

paperless/.env.example

@@ -9,9 +9,9 @@ PAPERLESS_SECRET_KEY=
 
 PAPERLESS_URL=
 
-POSTGRES_DB=
-POSTGRES_USER=
-POSTGRES_PASSWORD=
+PAPERLESS_POSTGRES_DB=
+PAPERLESS_POSTGRES_USER=
+PAPERLESS_POSTGRES_PASSWORD=
 
 #optional
 PAPERLESS_TIME_ZONE=

paperless/docker-compose.yml

@@ -1,23 +1,25 @@
 services:
   broker:
     image: docker.io/library/redis:7
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${PAPERLESS_REDIS_DATA_DIR}:/data
 
   db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${PAPERLESS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
-      POSTGRES_DB: ${POSTGRES_DB}
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${PAPERLESS_POSTGRES_DB}
+      POSTGRES_USER: ${PAPERLESS_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${PAPERLESS_POSTGRES_PASSWORD}
+    ports:
+      - 5434:5432
 
   paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.17.1
-    restart: unless-stopped
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.2
+    restart: always
     depends_on:
       - db
       - broker
@@ -34,9 +36,9 @@ services:
     environment:
       PAPERLESS_REDIS: redis://broker:6379
       PAPERLESS_DBHOST: db
-      PAPERLESS_DBNAME: ${POSTGRES_DB}
-      PAPERLESS_DBUSER: ${POSTGRES_USER}
-      PAPERLESS_DBPASS: ${POSTGRES_PASSWORD}
+      PAPERLESS_DBNAME: ${PAPERLESS_POSTGRES_DB}
+      PAPERLESS_DBUSER: ${PAPERLESS_POSTGRES_USER}
+      PAPERLESS_DBPASS: ${PAPERLESS_POSTGRES_PASSWORD}
       PAPERLESS_TIKA_ENABLED: 1
       PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
       PAPERLESS_TIKA_ENDPOINT: http://tika:9998
@@ -47,8 +49,8 @@ services:
       PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
 
   gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.21.1
-    restart: unless-stopped
+    image: docker.io/gotenberg/gotenberg:8.25.1
+    restart: always
 
     # The gotenberg chromium route is used to convert .eml files. We do not
     # want to allow external content like tracking pixels or even javascript.
@@ -58,5 +60,5 @@ services:
       - "--chromium-allow-list=file:///tmp/.*"
 
   tika:
-    image: docker.io/apache/tika:3.2.1.0
-    restart: unless-stopped
+    image: docker.io/apache/tika:3.2.3.0
+    restart: always

pihole/docker-compose.yml

@@ -2,7 +2,7 @@
 services:
   pihole:
     container_name: pihole
-    image: pihole/pihole:2025.06.1
+    image: pihole/pihole:2025.11.1
     ports:
       # DNS Ports
       - "53:53/tcp"
@@ -34,4 +34,4 @@ services:
 #      - SYS_TIME
       # Optional, if Pi-hole should get some more processing time
       - SYS_NICE
-    restart: unless-stopped
+    restart: always

pingvin/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   pingvin:
     image: stonith404/pingvin-share:v1.13.0
-    restart: unless-stopped
+    restart: always
     ports:
       - 3042:3000
     environment:

pocketid/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   pocket-id:
-    image: ghcr.io/pocket-id/pocket-id:v1.6.4
-    restart: unless-stopped
+    image: ghcr.io/pocket-id/pocket-id:v1.16.0
+    restart: always
     env_file: .env
     ports:
       - "3043:1411"

renovate.json

@@ -23,7 +23,9 @@
         "matrixdotorg/synapse",
         "ghcr.io/element-hq/matrix-authentication-service",
         "dock.mau.dev/mautrix/whatsapp",
-        "dock.mau.dev/mautrix/signal"
+        "dock.mau.dev/mautrix/signal",
+        "ghcr.io/element-hq/lk-jwt-service",
+        "livekit/livekit-server"
       ]
     }
   ]

searxng/.env.example

@@ -1,2 +0,0 @@
-SEARXNG_CONFIG_DIR=
-SEARXNG_DATA_DIR=

searxng/docker-compose.yml

@@ -1,11 +0,0 @@
-services:
-  searxng:
-    container_name: searxng
-    image: docker.io/searxng/searxng:latest
-    restart: unless-stopped
-    env_file: .env
-    ports:
-      - "8888:8080"
-    volumes:
-      - ${SEARXNG_CONFIG_DIR}:/etc/searxng/
-      - ${SEARXNG_DATA_DIR}:/var/cache/searxng/

shlink/docker-compose.yml

@@ -1,8 +1,8 @@
 services:
   shlink:
-    image: shlinkio/shlink:4.5
+    image: shlinkio/shlink:4.6
     container_name: shlink
-    restart: unless-stopped
+    restart: always
     ports:
       - "8085:8080"
     environment:
@@ -18,12 +18,14 @@ services:
     depends_on:
       - shlink_db
   shlink_db:
-    image: postgres:17
+    image: postgres:18
     container_name: shlink_db
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${SHLINK_POSTGRES_DIR}:/var/lib/postgresql/data
     environment:
       POSTGRES_DB: ${SHLINK_POSTGRES_DB}
       POSTGRES_USER: ${SHLINK_POSTGRES_USER}
       POSTGRES_PASSWORD: ${SHLINK_POSTGRES_PASSWORD}
+    ports:
+      - 5436:5432

spliit/docker-compose.yml

@@ -1,6 +1,8 @@
 services:
   spliit:
+    #image: ghcr.io/spliit-app/spliit:1.19.1
     image: petersmit27/spliit:latest
+    restart: always
     ports:
       - 3001:3000
     depends_on:
@@ -14,9 +16,12 @@ services:
       POSTGRES_USER: ${SPLIIT_POSTGRES_USER}
       POSTGRES_PASSWORD: ${SPLIIT_POSTGRES_PASSWORD}
   spliit_db:
-    image: postgres:17
+    image: postgres:18
+    restart: always
     volumes:
       - ${SPLIIT_POSTGRES_DIR}:/var/lib/postgresql/data
+    ports:
+      - 5437:5432
     environment:
       TZ: ${TZ}
       POSTGRES_DB: ${SPLIIT_POSTGRES_DB}

synapse/.env.example

@@ -1,9 +1,9 @@
 SYNAPSE_POSTGRES_DATA_DIR=
 SYNAPSE_CONFIG_DIR=
 
-POSTGRES_DB=
-POSTGRES_USER=
-POSTGRES_PASSWORD=
+SYNAPSE_POSTGRES_DB=
+SYNAPSE_POSTGRES_USER=
+SYNAPSE_POSTGRES_PASSWORD=
 
 MAS_CONFIG_DIR=
 

synapse/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.3.0
+    image: ghcr.io/element-hq/lk-jwt-service:0.4.0
     container_name: element-call-jwt
     hostname: auth-server
     environment:
@@ -9,56 +9,60 @@ services:
       - LIVEKIT_KEY=devkey
       - LIVEKIT_SECRET=${LIVEKIT_SECRET_KEY}
       - LIVEKIT_FULL_ACCESS_HOMESERVERS=${MATRIX_DOMAIN} 
-    restart: unless-stopped
+    restart: always
     ports:
       - 8071:8080
   element-call-livekit:
-    image: livekit/livekit-server:v1.9.0
+    image: livekit/livekit-server:v1.9.8
     command: --config /etc/livekit.yaml
     ports:
       - "7880:7880/tcp"
       - "7881:7881/tcp"
       - "7882:7882/tcp"
       - "50100-50200:50100-50200/udp"
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
   mautrix-signal:
     container_name: mautrix-signal
-    image: dock.mau.dev/mautrix/signal:v0.8.5
-    restart: unless-stopped
+    image: dock.mau.dev/mautrix/signal:v0.2512.0
+    restart: always
     volumes:
       - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
   mautrix-signal_db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${MAUTRIX_SIGNAL_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
       POSTGRES_DB: ${MAUTRIX_SIGNAL_POSTGRES_DB}
       POSTGRES_USER: ${MAUTRIX_SIGNAL_POSTGRES_USER}
       POSTGRES_PASSWORD: ${MAUTRIX_SIGNAL_POSTGRES_PASSWORD}
+    ports:
+      - 5439:5432
   mautrix-whatsapp:
     container_name: mautrix-whatsapp
-    #image: dock.mau.dev/mautrix/whatsapp:v0.12.2
-    image: petersmit27/mautrix-whatsapp:latest
-    restart: unless-stopped
+    image: dock.mau.dev/mautrix/whatsapp:v0.2512.0
+    #image: petersmit27/mautrix-whatsapp:latest
+    restart: always
     volumes:
       - ${MAUTRIX_WHATSAPP_DATA_DIR}:/data
     depends_on:
       - mautrix-whatsapp_db
   mautrix-whatsapp_db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
       POSTGRES_DB: ${MAUTRIX_WHATSAPP_POSTGRES_DB}
       POSTGRES_USER: ${MAUTRIX_WHATSAPP_POSTGRES_USER}
       POSTGRES_PASSWORD: ${MAUTRIX_WHATSAPP_POSTGRES_PASSWORD}
+    ports:
+      - 5440:5432
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:0.20.0
-    restart: unless-stopped
+    image: ghcr.io/element-hq/matrix-authentication-service:1.8.0
+    restart: always
     working_dir: /config
     volumes:
       - ${MAS_CONFIG_DIR}:/config
@@ -70,27 +74,31 @@ services:
       - mas_db
   mas_db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${MAS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
       POSTGRES_DB: ${MAS_POSTGRES_DB}
       POSTGRES_USER: ${MAS_POSTGRES_USER}
       POSTGRES_PASSWORD: ${MAS_POSTGRES_PASSWORD}
+    ports:
+      - 5441:5432
   synapse_db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${SYNAPSE_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
-      POSTGRES_DB: ${POSTGRES_DB}
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${SYNAPSE_POSTGRES_DB}
+      POSTGRES_USER: ${SYNAPSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${SYNAPSE_POSTGRES_PASSWORD}
       POSTGRES_INITDB_ARGS: '--encoding=UTF-8  --locale=C'
+    ports:
+      - 5442:5432
   synapse:
     container_name: synapse
-    image: matrixdotorg/synapse:v1.135.0
-    restart: unless-stopped
+    image: matrixdotorg/synapse:v1.144.0
+    restart: always
     volumes:
       - ${SYNAPSE_CONFIG_DIR}:/data
     ports: