Update grafana/alloy Docker tag to v1.16.0

Reviewed-on: https://git.smittenfeld.nl/peter/homelab-docker-config/pulls/311

audiomuse/docker-compose.yml

@@ -31,7 +31,7 @@ services:
 
   # AudioMuse-AI Flask application service
   audiomuse-ai-flask:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.9.3 # Reflects deployment.yaml
+    image: ghcr.io/neptunehub/audiomuse-ai:0.9.5 # Reflects deployment.yaml
     container_name: audiomuse-ai-flask-app
     ports:
       - "8013:8000"
@@ -69,7 +69,7 @@ services:
 
   # AudioMuse-AI RQ Worker service
   audiomuse-ai-worker:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.9.3 # Reflects deployment.yaml
+    image: ghcr.io/neptunehub/audiomuse-ai:0.9.5 # Reflects deployment.yaml
     container_name: audiomuse-ai-worker-instance
     env_file:
       - .env

docker-compose.yml

@@ -10,8 +10,8 @@ include:
   - pihole/docker-compose.yml
   - pingvin/docker-compose.yml
   - pocketid/docker-compose.yml
-  - spliit/docker-compose.yml
+#  - spliit/docker-compose.yml migrated to k8s
   - shlink/docker-compose.yml
   - synapse/docker-compose.yml
 #  - updater/docker-compose.yml
-  - vaultwarden/docker-compose.yml
+#  - vaultwarden/docker-compose.yml

immich/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.6.3
+    image: ghcr.io/immich-app/immich-server:v2.7.5
     # extends:
     #   file: hwaccel.transcoding.yml
     #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
@@ -25,7 +25,7 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.6.3
+    image: ghcr.io/immich-app/immich-machine-learning:v2.7.5
     volumes:
       - model-cache:/cache
     env_file:

monitoring/docker-compose.yml

@@ -53,7 +53,7 @@ services:
       - '-target=all'
 
   alloy:
-    image: grafana/alloy:v1.15.0
+    image: grafana/alloy:v1.16.0
     restart: unless-stopped
     ports:
       - "12345:12345"

spliit/spliit.yaml

@@ -0,0 +1,119 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: spliit
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: spliit-db
+  namespace: spliit
+spec:
+  instances: 1
+  storage:
+    size: 2Gi
+  bootstrap:
+    initdb:
+      database: spliit
+      owner: spliit
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: spliit
+  namespace: spliit
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: spliit
+  template:
+    metadata:
+      labels:
+        app: spliit
+    spec:
+      containers:
+        - name: spliit
+          image: petersmit27/spliit:latest
+          ports:
+            - containerPort: 3000
+          env:
+            - name: POSTGRES_PRISMA_URL
+              valueFrom:
+                secretKeyRef:
+                  name: spliit-db-app
+                  key: uri
+            - name: POSTGRES_URL_NON_POOLING
+              valueFrom:
+                secretKeyRef:
+                  name: spliit-db-app
+                  key: uri
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: spliit
+  namespace: spliit
+spec:
+  selector:
+    app: spliit
+  ports:
+    - port: 3000
+      targetPort: 3000
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: spliit
+  namespace: spliit
+spec:
+  parentRefs:
+    - name: main
+      namespace: envoy-gateway-system
+      sectionName: https-smittenfeld
+  hostnames:
+    - split.smittenfeld.nl
+  rules:
+    - backendRefs:
+        - name: spliit
+          port: 3000
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: spliit-create-group
+  namespace: spliit
+spec:
+  parentRefs:
+    - name: main
+      namespace: envoy-gateway-system
+      sectionName: https-smittenfeld
+  hostnames:
+    - split.smittenfeld.nl
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /groups/create
+      backendRefs:
+        - name: spliit
+          port: 3000
+---
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: SecurityPolicy
+metadata:
+  name: spliit-create-ip-restriction
+  namespace: spliit
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: spliit-create-group
+  authorization:
+    defaultAction: Deny
+    rules:
+      - action: Allow
+        principal:
+          clientCIDRs:
+            - 188.91.195.91/32

synapse/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.4.2
+    image: ghcr.io/element-hq/lk-jwt-service:0.4.3
     container_name: element-call-jwt
     hostname: auth-server
     environment:
@@ -13,7 +13,7 @@ services:
     ports:
       - 8071:8080
   element-call-livekit:
-    image: livekit/livekit-server:v1.10.1
+    image: livekit/livekit-server:v1.11.0
     command: --config /etc/livekit.yaml
     ports:
       - "7880:7880/tcp"
@@ -42,7 +42,7 @@ services:
       - 5439:5432
   mautrix-whatsapp:
     container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.2603.0
+    image: dock.mau.dev/mautrix/whatsapp:v0.2604.0
     #image: petersmit27/mautrix-whatsapp:latest
     restart: always
     volumes:
@@ -61,7 +61,7 @@ services:
     ports:
       - 5440:5432
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.14.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.15.0
     restart: always
     working_dir: /config
     volumes:
@@ -97,7 +97,7 @@ services:
       - 5442:5432
   synapse:
     container_name: synapse
-    image: matrixdotorg/synapse:v1.150.0
+    image: matrixdotorg/synapse:v1.151.0
     restart: always
     volumes:
       - ${SYNAPSE_CONFIG_DIR}:/data