Update ghcr.io/immich-app/postgres Docker tag to v16

Reviewed-on: https://git.smittenfeld.nl/peter/homelab-docker-config/pulls/224

audiobookshelf/.env.example

@@ -0,0 +1 @@
+AUDIOBOOKSHELF_DIR=

audiobookshelf/docker-compose.yml

@@ -0,0 +1,13 @@
+services:
+  audiobookshelf:
+    image: ghcr.io/advplyr/audiobookshelf:2.30.0
+    restart: always
+    ports:
+      - 13378:80
+    volumes:
+      - ${AUDIOBOOKSHELF_DIR}/audiobooks:/audiobooks
+      - ${AUDIOBOOKSHELF_DIR}/podcasts:/podcasts
+      - ${AUDIOBOOKSHELF_DIR}/config:/config
+      - ${AUDIOBOOKSHELF_DIR}/metadata:/metadata
+    environment:
+      - TZ=Europe/Amsterdam

audiomuse/.env.example

@@ -0,0 +1,41 @@
+# Copy this file to `.env` and fill in the values that match your setup.
+# Docker Compose files under deployment/ read these variables to keep settings in one place.
+#
+# IMPORTANT:
+# 1. This file must be named exactly ".env" (not .env.txt or .env.example)
+# 2. It must be in the SAME directory as your docker-compose-*.yaml file
+# 3. Do NOT use spaces around the = sign
+# 4. Do NOT use quotes around values (unless required by the value itself)
+# 5. After editing, restart containers: docker-compose down && docker-compose up -d
+#
+# SPECIAL CHARACTERS IN VALUES:
+# If your password or API key contains special characters like: $ ` " ' \ # ! & * ( ) [ ] { } | ; < > ?
+# you may need to:
+#   - Avoid quotes entirely: GEMINI_API_KEY=AIza$pecial!Key  (usually works)
+#   - OR use single quotes if the value has $: GEMINI_API_KEY='AIza$pecial!Key'
+#   - OR escape with backslash: GEMINI_API_KEY=AIza\$pecial\!Key
+# Most problematic characters: $ (variable expansion), ` (command substitution), " (string delimiter)
+#
+# TROUBLESHOOTING:
+# If API keys don't work, verify:
+#   - File is named ".env" exactly (check with: ls -la)
+#   - No spaces: GEMINI_API_KEY=AIza... (not GEMINI_API_KEY = "AIza...")
+#   - No unescaped special characters (especially $ ` " ')
+#   - Restart containers after changing this file
+# If all else fails, try hardcoding the value directly in docker-compose-*.yaml to isolate the issue
+
+# --- Jellyfin ---
+JELLYFIN_USER_ID=
+JELLYFIN_TOKEN=
+JELLYFIN_URL=https://jellyfin.smittenfeld.nl
+
+# --- Shared backend configuration ---
+AUDIOMUSE_POSTGRES_USER=audiomuse
+AUDIOMUSE_POSTGRES_PASSWORD=
+AUDIOMUSE_POSTGRES_DB=audiomusedb
+#
+## --- Remote worker integration ---
+#WORKER_URL=http://worker.example.com:8029/worker
+#WORKER_POSTGRES_HOST=server.example.com
+#WORKER_REDIS_URL=redis://server.example.com:6379/0
+

audiomuse/docker-compose.yml

@@ -0,0 +1,127 @@
+version: '3.8'
+services:
+  # Redis service for RQ (task queue)
+  audiomuse-ai-redis:
+    image: redis:7-alpine
+    container_name: audiomuse-redis
+    ports:
+      - "6379:6379" # Expose Redis port to the host
+    volumes:
+      - redis-data:/data # Persistent storage for Redis data
+    networks:
+      - audiomuse
+    restart: unless-stopped
+
+  # PostgreSQL database service
+  audiomuse-ai-postgres:
+    image: postgres:15-alpine
+    container_name: audiomuse-postgres
+    env_file:
+      - .env
+    environment:
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+#    ports:
+#      - "5432:5432" # Expose PostgreSQL port to the host
+    volumes:
+      - postgres-data:/var/lib/postgresql/data # Persistent storage for PostgreSQL data
+    networks:
+      - audiomuse
+    restart: unless-stopped
+
+  # AudioMuse-AI Flask application service
+  audiomuse-ai-flask:
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
+    container_name: audiomuse-ai-flask-app
+    ports:
+      - "8013:8000"
+    env_file:
+      - .env
+    environment:
+      SERVICE_TYPE: "flask" # Tells the container to run the Flask app
+      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+      POSTGRES_PORT: "5432"
+      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
+      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
+      AI_MODEL_PROVIDER: "OPENAI"
+      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
+      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
+      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
+      TEMP_DIR: "/app/temp_audio"
+    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
+    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
+    # Increase tmpfs size for very large audio files as needed.
+    # If host RAM is limited, use a Docker volume instead of tmpfs.
+    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
+    tmpfs:
+      - /app/temp_audio:rw,size=1000m
+    depends_on:
+      - audiomuse-ai-redis
+      - audiomuse-ai-postgres
+    restart: unless-stopped
+    networks:
+      - audiomuse
+    models:
+      - llm # Specify that LLM models are used in this service
+
+  # AudioMuse-AI RQ Worker service
+  audiomuse-ai-worker:
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
+    container_name: audiomuse-ai-worker-instance
+    env_file:
+      - .env
+    environment:
+      SERVICE_TYPE: "worker" # Tells the container to run the RQ worker
+      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
+      JELLYFIN_USER_ID: "${JELLYFIN_USER_ID}"
+      JELLYFIN_TOKEN: "${JELLYFIN_TOKEN}"
+      JELLYFIN_URL: "${JELLYFIN_URL}"
+      # DATABASE_URL is now constructed by config.py from the following:
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+      POSTGRES_PORT: "5432"
+      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
+      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
+      AI_MODEL_PROVIDER: "OPENAI"
+      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
+      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
+      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
+      TEMP_DIR: "/app/temp_audio"
+    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
+    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
+    # Increase tmpfs size for very large audio files as needed.
+    # If host RAM is limited, use a Docker volume instead of tmpfs.
+    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
+    tmpfs:
+      - /app/temp_audio:rw,size=1000m
+    depends_on:
+      - audiomuse-ai-redis
+      - audiomuse-ai-postgres
+    restart: unless-stopped
+    networks:
+      - audiomuse
+    models:
+      - llm # Specify that LLM models are used in this service
+
+# Using Docker Model Runner (DMR)
+# - Make sure your Docker Engine version supports the AI features and that the docker-model-plugin is installed.
+# - Follow Docker's setup guide: https://docs.docker.com/ai/model-runner/get-started/#docker-engine
+# - Once DMR is configured, you can download and run AI models locally just like Docker images — no code changes to this compose file are required.
+# - For model integration with docker-compose, see: https://docs.docker.com/ai/compose/models-and-compose/
+models:
+  llm:
+    model: ai/qwen3:0.6B-Q4_0 # Lightweight local model for testing. Change as needed; if changed, ensure it matches OPENAI_MODEL_NAME.
+
+
+# Define volumes for persistent data and temporary files
+volumes:
+  redis-data:
+  postgres-data:
+
+networks:
+  audiomuse:

baikal/.env.example

@@ -0,0 +1,2 @@
+BAIKAL_CONFIG_DIR=
+BAIKAL_DATA_DIR=

baikal/docker-compose.yml

@@ -0,0 +1,11 @@
+services:
+  baikal:
+    image: ckulka/baikal:0.10.1-nginx
+    restart: always
+    ports:
+      - "8083:80"
+    volumes:
+      - ${BAIKAL_CONFIG_DIR}:/var/www/baikal/config
+      - ${BAIKAL_DATA_DIR}:/var/www/baikal/Specific
+    env_file:
+      - .env

docker-compose.yml

@@ -1,10 +1,17 @@
 include:
+  - audiobookshelf/docker-compose.yml
+  - audiomuse/docker-compose.yml
+  - baikal/docker-compose.yml
   - gitea/docker-compose.yml
-  - homeassistant/docker-compose.yml
   - immich/docker-compose.yml
   - jellyfin/docker-compose.yml
+  - nextcloud/docker-compose.yml
   - paperless/docker-compose.yml
+  - pihole/docker-compose.yml
   - pingvin/docker-compose.yml
   - pocketid/docker-compose.yml
+#  - spliit/docker-compose.yml
+  - shlink/docker-compose.yml
+  - synapse/docker-compose.yml
   - updater/docker-compose.yml
   - vaultwarden/docker-compose.yml

gitea/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   gitea:
     container_name: gitea
-    image: gitea/gitea:1.23.1-rootless
+    image: gitea/gitea:1.25.1-rootless
     restart: always
     volumes:
       - ${GITEA_DATA_LOCATION}:/var/lib/gitea
@@ -14,7 +14,8 @@ services:
       - "3000:3000"
       - "2222:2222"
   gitea-runner:
-    image: gitea/act_runner:0.2.11
+    image: gitea/act_runner:0.2.13
+    restart: always
     environment:
       CONFIG_FILE: /config.yaml
       GITEA_INSTANCE_URL: "${GITEA_INSTANCE_URL}"

homeassistant/.env.example

@@ -1 +0,0 @@
-HOMEASSISTANT_CONFIG_DIR=

homeassistant/docker-compose.yml

@@ -1,13 +0,0 @@
-services:
-  homeassistant:
-    container_name: homeassistant
-    image: ghcr.io/home-assistant/home-assistant:2025.1.4
-    volumes:
-      - ${HOMEASSISTANT_CONFIG_DIR}:/config
-      - /etc/localtime:/etc/localtime:ro
-      - /run/dbus:/run/dbus:ro
-    ports:
-      - "8123:8123"
-    restart: unless-stopped
-    privileged: true
-    network_mode: host

immich/.env.example

@@ -1,9 +1,10 @@
 UPLOAD_LOCATION=
+IMMICH_VERSION=
 IMMICH_DB_LOCATION=
 
-DB_HOSTNAME=
-DB_USERNAME=
-DB_PASSWORD=
-DB_DATABASE_NAME=
+IMMICH_DB_HOSTNAME=
+IMMICH_POSTGRES_DB=
+IMMICH_POSTGRES_USER=
+IMMICH_POSTGRES_PASSWORD=
 
 REDIS_HOSTNAME=

immich/docker-compose.yml

@@ -1,77 +1,59 @@
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v1.125.6
+    image: ghcr.io/immich-app/immich-server:v2.3.1
     # extends:
     #   file: hwaccel.transcoding.yml
     #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
     volumes:
       # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
-      - ${UPLOAD_LOCATION}:/usr/src/app/upload
+      - ${UPLOAD_LOCATION}:/data
       - /etc/localtime:/etc/localtime:ro
     env_file:
       - .env
+    environment:
+      DB_HOSTNAME: ${IMMICH_DB_HOSTNAME}
+      DB_USERNAME: ${IMMICH_POSTGRES_USER}
+      DB_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
+      DB_DATABASE_NAME: ${IMMICH_POSTGRES_DB}
     ports:
       - '2283:2283'
     depends_on:
       - redis
       - database
     restart: always
-    healthcheck:
-      disable: false
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
-    # Example tag: ${IMMICH_VERSION:-release}-cuda
-    image: ghcr.io/immich-app/immich-machine-learning:v1.125.6
-    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
-    #   file: hwaccel.ml.yml
-    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    image: ghcr.io/immich-app/immich-machine-learning:v2.3.1
     volumes:
       - model-cache:/cache
     env_file:
       - .env
     restart: always
-    healthcheck:
-      disable: false
 
   redis:
     container_name: immich_redis
-    image: docker.io/redis:7.4-alpine@sha256:1bf97f21f01b0e7bd4b7b34a26d3b9d8086e41e70c10f262e8a9e0b49b5116a0
+    image: docker.io/valkey/valkey:8@sha256:81db6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
 
   database:
     container_name: immich_postgres
-    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
+    image: ghcr.io/immich-app/postgres:16-vectorchord0.3.0-pgvectors0.2.0
     environment:
-      POSTGRES_PASSWORD: ${DB_PASSWORD}
-      POSTGRES_USER: ${DB_USERNAME}
-      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_USER: ${IMMICH_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${IMMICH_POSTGRES_DB}
       POSTGRES_INITDB_ARGS: '--data-checksums'
+      DB_STORAGE_TYPE: 'HDD'
+    ports:
+      - 5433:5432
     volumes:
       # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
       - ${IMMICH_DB_LOCATION}:/var/lib/postgresql/data
-    healthcheck:
-      test: >-
-        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1;
-        Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align
-        --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')";
-        echo "checksum failure count is $$Chksum";
-        [ "$$Chksum" = '0' ] || exit 1
-      interval: 5m
-      start_interval: 30s
-      start_period: 5m
-    command: >-
-      postgres
-      -c shared_preload_libraries=vectors.so
-      -c 'search_path="$$user", public, vectors'
-      -c logging_collector=on
-      -c max_wal_size=2GB
-      -c shared_buffers=512MB
-      -c wal_compression=on
+    shm_size: 128mb
     restart: always
 
 volumes:

jellyfin/docker-compose.yml

@@ -1,9 +1,9 @@
 services:
   jellyfin:
-    image: jellyfin/jellyfin:10.10.5
+    image: jellyfin/jellyfin:10.11.3
     user: ${JELLYFIN_USER_UID}:${JELLYFIN_USER_GID}
     network_mode: 'host'
-    restart: 'unless-stopped'
+    restart: always
     env_file:
       - .env
     environment:

nextcloud/.env.example

@@ -0,0 +1,12 @@
+NEXTCLOUD_DOMAIN=
+
+NEXTCLOUD_DATA_DIR=
+
+NEXTCLOUD_POSTGRES_DATA_DIR=
+NEXTCLOUD_POSTGRES_DB=
+NEXTCLOUD_POSTGRES_USER=
+NEXTCLOUD_POSTGRES_PASSWORD=
+
+COLLABORA_DOMAIN=
+COLLABORA_USER=
+COLLABORA_PASSWORD=

nextcloud/docker-compose.yml

@@ -0,0 +1,50 @@
+services:
+  nextcloud_db:
+    image: docker.io/library/postgres:17
+    restart: always
+    volumes:
+      - ${NEXTCLOUD_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: ${NEXTCLOUD_POSTGRES_DB}
+      POSTGRES_USER: ${NEXTCLOUD_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${NEXTCLOUD_POSTGRES_PASSWORD}
+    ports:
+      - 5438:5432
+    networks:
+      - nextcloud
+  nextcloud:
+    image: nextcloud:32.0.1
+    restart: always
+    ports:
+      - 8081:80
+    links:
+      - db
+    volumes:
+      - ${NEXTCLOUD_DATA_DIR}:/var/www/html
+    environment:
+      - POSTGRES_HOST=nextcloud_db
+      - POSTGRES_DB=${NEXTCLOUD_POSTGRES_DB}
+      - POSTGRES_USER=${NEXTCLOUD_POSTGRES_USER}
+      - POSTGRES_PASSWORD=${NEXTCLOUD_POSTGRES_PASSWORD}
+      - REDIS_HOST=nextcloud-redis
+      - REDIS_PORT=6379
+      - NEXTCLOUD_TRUSTED_DOMAINS=${NEXTCLOUD_DOMAIN}
+    networks:
+      - nextcloud
+  cron:
+    image: nextcloud:32.0.1
+    container_name: nextcloud-cron
+    volumes:
+      - ${NEXTCLOUD_DATA_DIR}:/var/www/html
+    entrypoint: /cron.sh
+    restart: always
+    networks:
+      - nextcloud
+  nextcloud-redis:
+    image: redis:7
+    restart: always
+    networks:
+      - nextcloud
+
+networks:
+  nextcloud:

paperless/.env.example

@@ -9,9 +9,9 @@ PAPERLESS_SECRET_KEY=
 
 PAPERLESS_URL=
 
-POSTGRES_DB=
-POSTGRES_USER=
-POSTGRES_PASSWORD=
+PAPERLESS_POSTGRES_DB=
+PAPERLESS_POSTGRES_USER=
+PAPERLESS_POSTGRES_PASSWORD=
 
 #optional
 PAPERLESS_TIME_ZONE=

paperless/docker-compose.yml

@@ -1,23 +1,25 @@
 services:
   broker:
     image: docker.io/library/redis:7
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${PAPERLESS_REDIS_DATA_DIR}:/data
 
   db:
     image: docker.io/library/postgres:17
-    restart: unless-stopped
+    restart: always
     volumes:
       - ${PAPERLESS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
     environment:
-      POSTGRES_DB: ${POSTGRES_DB}
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${PAPERLESS_POSTGRES_DB}
+      POSTGRES_USER: ${PAPERLESS_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${PAPERLESS_POSTGRES_PASSWORD}
+    ports:
+      - 5434:5432
 
   paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.14.5
-    restart: unless-stopped
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.19.4
+    restart: always
     depends_on:
       - db
       - broker
@@ -34,9 +36,9 @@ services:
     environment:
       PAPERLESS_REDIS: redis://broker:6379
       PAPERLESS_DBHOST: db
-      PAPERLESS_DBNAME: ${POSTGRES_DB}
-      PAPERLESS_DBUSER: ${POSTGRES_USER}
-      PAPERLESS_DBPASS: ${POSTGRES_PASSWORD}
+      PAPERLESS_DBNAME: ${PAPERLESS_POSTGRES_DB}
+      PAPERLESS_DBUSER: ${PAPERLESS_POSTGRES_USER}
+      PAPERLESS_DBPASS: ${PAPERLESS_POSTGRES_PASSWORD}
       PAPERLESS_TIKA_ENABLED: 1
       PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
       PAPERLESS_TIKA_ENDPOINT: http://tika:9998
@@ -47,8 +49,8 @@ services:
       PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
 
   gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.15.3
-    restart: unless-stopped
+    image: docker.io/gotenberg/gotenberg:8.24.0
+    restart: always
 
     # The gotenberg chromium route is used to convert .eml files. We do not
     # want to allow external content like tracking pixels or even javascript.
@@ -58,5 +60,5 @@ services:
       - "--chromium-allow-list=file:///tmp/.*"
 
   tika:
-    image: docker.io/apache/tika:3.0.0.0
-    restart: unless-stopped
+    image: docker.io/apache/tika:3.2.3.0
+    restart: always

pihole/.env.example

@@ -0,0 +1,2 @@
+PIHOLE_DATA_DIR=
+PIHOLE_PASSWORD=

pihole/docker-compose.yml

@@ -0,0 +1,37 @@
+# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
+services:
+  pihole:
+    container_name: pihole
+    image: pihole/pihole:2025.11.0
+    ports:
+      # DNS Ports
+      - "53:53/tcp"
+      - "53:53/udp"
+      # Default HTTP Port
+      - "8080:80/tcp"
+      # Default HTTPs Port. FTL will generate a self-signed certificate
+#      - "443:443/tcp"
+      # Uncomment the below if using Pi-hole as your DHCP Server
+#      - "67:67/udp"
+      # Uncomment the line below if you are using Pi-hole as your NTP server
+      #- "123:123/udp"
+    environment:
+      # Set the appropriate timezone for your location from
+      # https://en.wikipedia.org/wiki/List_of_tz_database_time_zones, e.g:
+      TZ: 'Europe/Amsterdam'
+      # Set a password to access the web interface. Not setting one will result in a random password being assigned
+      FTLCONF_webserver_api_password: ${PIHOLE_PASSWORD}
+      # If using Docker's default `bridge` network setting the dns listening mode should be set to 'all'
+      FTLCONF_dns_listeningMode: 'all'
+    volumes:
+      # For persisting Pi-hole's databases and common configuration file
+      - ${PIHOLE_DATA_DIR}:/etc/pihole
+    cap_add:
+      # See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
+      # Required if you are using Pi-hole as your DHCP server, else not needed
+#      - NET_ADMIN
+      # Required if you are using Pi-hole as your NTP client to be able to set the host's system time
+#      - SYS_TIME
+      # Optional, if Pi-hole should get some more processing time
+      - SYS_NICE
+    restart: always

pingvin/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   pingvin:
-    image: stonith404/pingvin-share:v1.8.2
-    restart: unless-stopped
+    image: stonith404/pingvin-share:v1.13.0
+    restart: always
     ports:
       - 3042:3000
     environment:

pocketid/.env.example

@@ -1,4 +1,4 @@
-PUBLIC_APP_URL=
+APP_URL=
 TRUST_PROXY=
 MAXMIND_LICENSE_KEY=
 PUID=

pocketid/docker-compose.yml

@@ -1,15 +1,16 @@
 services:
   pocket-id:
-    image: stonith404/pocket-id:v0.28.0
-    restart: unless-stopped
+    image: ghcr.io/pocket-id/pocket-id:v1.15.0
+    restart: always
     env_file: .env
     ports:
-      - 3043:80
+      - "3043:1411"
     volumes:
-      - "./data:/app/backend/data"
+      #TODO change this to a more appropriate location
+      - ./data:/app/data
     # Optional healthcheck
     healthcheck:
-      test: "curl -f http://localhost/health"
+      test: "curl -f http://localhost:1411/healthz"
       interval: 1m30s
       timeout: 5s
       retries: 2

renovate.json

@@ -8,6 +8,23 @@
     {
       "groupName": "Immich",
       "matchPackageNames": "/^ghcr.io/immich-app/immich/"
+    },
+    {
+      "groupName": "Paperless-ngx",
+      "matchPackageNames": [
+        "/paperless-ngx/",
+        "/tika/",
+        "/gotenberg/"
+      ]
+    },
+    {
+      "groupName": "Matrix",
+      "matchPackageNames": [
+        "matrixdotorg/synapse",
+        "ghcr.io/element-hq/matrix-authentication-service",
+        "dock.mau.dev/mautrix/whatsapp",
+        "dock.mau.dev/mautrix/signal"
+      ]
     }
   ]
 }

shlink/.env.example

@@ -0,0 +1,5 @@
+SHLINK_DOMAIN=
+SHLINK_IS_HTTPS_ENABLED=
+SHLINK_GEOIP_LICENSE_KEY=
+
+SLINK_API_KEY=

shlink/docker-compose.yml

@@ -0,0 +1,31 @@
+services:
+  shlink:
+    image: shlinkio/shlink:4.6
+    container_name: shlink
+    restart: always
+    ports:
+      - "8085:8080"
+    environment:
+      DEFAULT_DOMAIN: ${SHLINK_DOMAIN}
+      IS_HTTPS_ENABLED: ${SHLINK_IS_HTTPS_ENABLED}
+      GEOLITE_LICENSE_KEY: ${SHLINK_GEOIP_LICENSE_KEY}
+      INITIAL_API_KEY: ${SHLINK_API_KEY}
+      DB_DRIVER: postgres
+      DB_HOST: shlink_db
+      DB_NAME: ${SHLINK_POSTGRES_DB}
+      DB_USER: ${SHLINK_POSTGRES_USER}
+      DB_PASSWORD: ${SHLINK_POSTGRES_PASSWORD}
+    depends_on:
+      - shlink_db
+  shlink_db:
+    image: postgres:17
+    container_name: shlink_db
+    restart: always
+    volumes:
+      - ${SHLINK_POSTGRES_DIR}:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: ${SHLINK_POSTGRES_DB}
+      POSTGRES_USER: ${SHLINK_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${SHLINK_POSTGRES_PASSWORD}
+    ports:
+      - 5436:5432

spliit/.env.example

@@ -0,0 +1,14 @@
+TZ=Europe/Amsterdam
+
+# db
+SPLIIT_POSTGRES_DIR=
+SPLIIT_POSTGRES_PASSWORD=
+SPLIIT_POSTGRES_USER=spliit
+SPLIIT_POSTGRES_DB=spliit
+
+# Image upload (for receipts)
+NEXT_PUBLIC_ENABLE_EXPENSE_DOCUMENTS=true
+S3_UPLOAD_KEY=
+S3_UPLOAD_SECRET=
+S3_UPLOAD_BUCKET=
+S3_UPLOAD_REGION=

spliit/docker-compose.yml

@@ -0,0 +1,28 @@
+services:
+  spliit:
+    image: ghcr.io/spliit-app/spliit:1.19.1
+    restart: always
+    ports:
+      - 3001:3000
+    depends_on:
+      - spliit_db
+    env_file:
+      - .env
+    environment:
+      TZ: ${TZ}
+      POSTGRES_HOST: spliit_db
+      POSTGRES_DB: ${SPLIIT_POSTGRES_DB}
+      POSTGRES_USER: ${SPLIIT_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${SPLIIT_POSTGRES_PASSWORD}
+  spliit_db:
+    image: postgres:17
+    restart: always
+    volumes:
+      - ${SPLIIT_POSTGRES_DIR}:/var/lib/postgresql/data
+    ports:
+      - 5437:5432
+    environment:
+      TZ: ${TZ}
+      POSTGRES_DB: ${SPLIIT_POSTGRES_DB}
+      POSTGRES_USER: ${SPLIIT_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${SPLIIT_POSTGRES_PASSWORD}

synapse/.env.example

@@ -0,0 +1,31 @@
+SYNAPSE_POSTGRES_DATA_DIR=
+SYNAPSE_CONFIG_DIR=
+
+SYNAPSE_POSTGRES_DB=
+SYNAPSE_POSTGRES_USER=
+SYNAPSE_POSTGRES_PASSWORD=
+
+MAS_CONFIG_DIR=
+
+MAS_POSTGRES_DATA_DIR=
+MAS_POSTGRES_DB=
+MAS_POSTGRES_USER=
+MAS_POSTGRES_PASSWORD=
+
+MAUTRIX_WHATSAPP_DATA_DIR=
+MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR=
+MAUTRIX_WHATSAPP_POSTGRES_DB=
+MAUTRIX_WHATSAPP_POSTGRES_USER=
+MAUTRIX_WHATSAPP_POSTGRES_PASSWORD=
+
+MAUTRIX_SIGNAL_DATA_DIR=
+MAUTRIX_SIGNAL_POSTGRES_DATA_DIR=
+MAUTRIX_SIGNAL_POSTGRES_DB=
+MAUTRIX_SIGNAL_POSTGRES_USER=
+MAUTRIX_SIGNAL_POSTGRES_PASSWORD=
+
+MATRIX_DOMAIN=
+
+LIVEKIT_DOMAIN=
+LIVEKIT_SECRET_KEY=
+LIVEKIT_CONFIG_DIR=

synapse/docker-compose.yml

@@ -0,0 +1,109 @@
+services:
+  element-call-auth-service:
+    image: ghcr.io/element-hq/lk-jwt-service:0.3.0
+    container_name: element-call-jwt
+    hostname: auth-server
+    environment:
+      - LK_JWT_PORT=8080
+      - LIVEKIT_URL=https://${LIVEKIT_DOMAIN}/livekit/sfu
+      - LIVEKIT_KEY=devkey
+      - LIVEKIT_SECRET=${LIVEKIT_SECRET_KEY}
+      - LIVEKIT_FULL_ACCESS_HOMESERVERS=${MATRIX_DOMAIN} 
+    restart: always
+    ports:
+      - 8071:8080
+  element-call-livekit:
+    image: livekit/livekit-server:v1.9.3
+    command: --config /etc/livekit.yaml
+    ports:
+      - "7880:7880/tcp"
+      - "7881:7881/tcp"
+      - "7882:7882/tcp"
+      - "50100-50200:50100-50200/udp"
+    restart: always
+    volumes:
+      - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
+  mautrix-signal:
+    container_name: mautrix-signal
+    image: dock.mau.dev/mautrix/signal:v0.2511.0
+    restart: always
+    volumes:
+      - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
+  mautrix-signal_db:
+    image: docker.io/library/postgres:17
+    restart: always
+    volumes:
+      - ${MAUTRIX_SIGNAL_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: ${MAUTRIX_SIGNAL_POSTGRES_DB}
+      POSTGRES_USER: ${MAUTRIX_SIGNAL_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${MAUTRIX_SIGNAL_POSTGRES_PASSWORD}
+    ports:
+      - 5439:5432
+  mautrix-whatsapp:
+    container_name: mautrix-whatsapp
+    image: dock.mau.dev/mautrix/whatsapp:v0.2511.0
+    #image: petersmit27/mautrix-whatsapp:latest
+    restart: always
+    volumes:
+      - ${MAUTRIX_WHATSAPP_DATA_DIR}:/data
+    depends_on:
+      - mautrix-whatsapp_db
+  mautrix-whatsapp_db:
+    image: docker.io/library/postgres:17
+    restart: always
+    volumes:
+      - ${MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: ${MAUTRIX_WHATSAPP_POSTGRES_DB}
+      POSTGRES_USER: ${MAUTRIX_WHATSAPP_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${MAUTRIX_WHATSAPP_POSTGRES_PASSWORD}
+    ports:
+      - 5440:5432
+  mas:
+    image: ghcr.io/element-hq/matrix-authentication-service:1.6.0
+    restart: always
+    working_dir: /config
+    volumes:
+      - ${MAS_CONFIG_DIR}:/config
+    environment:
+      MAS_CONFIG: /config/config.yaml
+    ports:
+      - "8090:8090"
+    depends_on:
+      - mas_db
+  mas_db:
+    image: docker.io/library/postgres:17
+    restart: always
+    volumes:
+      - ${MAS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: ${MAS_POSTGRES_DB}
+      POSTGRES_USER: ${MAS_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${MAS_POSTGRES_PASSWORD}
+    ports:
+      - 5441:5432
+  synapse_db:
+    image: docker.io/library/postgres:17
+    restart: always
+    volumes:
+      - ${SYNAPSE_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: ${SYNAPSE_POSTGRES_DB}
+      POSTGRES_USER: ${SYNAPSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${SYNAPSE_POSTGRES_PASSWORD}
+      POSTGRES_INITDB_ARGS: '--encoding=UTF-8  --locale=C'
+    ports:
+      - 5442:5432
+  synapse:
+    container_name: synapse
+    image: matrixdotorg/synapse:v1.142.1
+    restart: always
+    volumes:
+      - ${SYNAPSE_CONFIG_DIR}:/data
+    ports:
+      - "8008:8008"
+    depends_on:
+      - synapse_db
+      - mas
+      - mautrix-whatsapp

vaultwarden/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   vaultwarden:
     container_name: vaultwarden
-    image: vaultwarden/server:1.33.1
+    image: vaultwarden/server:1.34.3
     restart: always
     volumes:
       - ${VAULTWARDEN_DATA_LOCATION}:/data/
@@ -11,4 +11,4 @@ services:
     env_file:
       - .env
     ports:
-      - "8080:80"
+      - "8082:80"