Update ghcr.io/immich-app/postgres Docker tag to v16

Reviewed-on: https://git.smittenfeld.nl/peter/homelab-docker-config/pulls/224

audiobookshelf/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   audiobookshelf:
-    image: ghcr.io/advplyr/audiobookshelf:2.29.0
+    image: ghcr.io/advplyr/audiobookshelf:2.30.0
     restart: always
     ports:
       - 13378:80

audiomuse/.env.example

@@ -0,0 +1,41 @@
+# Copy this file to `.env` and fill in the values that match your setup.
+# Docker Compose files under deployment/ read these variables to keep settings in one place.
+#
+# IMPORTANT:
+# 1. This file must be named exactly ".env" (not .env.txt or .env.example)
+# 2. It must be in the SAME directory as your docker-compose-*.yaml file
+# 3. Do NOT use spaces around the = sign
+# 4. Do NOT use quotes around values (unless required by the value itself)
+# 5. After editing, restart containers: docker-compose down && docker-compose up -d
+#
+# SPECIAL CHARACTERS IN VALUES:
+# If your password or API key contains special characters like: $ ` " ' \ # ! & * ( ) [ ] { } | ; < > ?
+# you may need to:
+#   - Avoid quotes entirely: GEMINI_API_KEY=AIza$pecial!Key  (usually works)
+#   - OR use single quotes if the value has $: GEMINI_API_KEY='AIza$pecial!Key'
+#   - OR escape with backslash: GEMINI_API_KEY=AIza\$pecial\!Key
+# Most problematic characters: $ (variable expansion), ` (command substitution), " (string delimiter)
+#
+# TROUBLESHOOTING:
+# If API keys don't work, verify:
+#   - File is named ".env" exactly (check with: ls -la)
+#   - No spaces: GEMINI_API_KEY=AIza... (not GEMINI_API_KEY = "AIza...")
+#   - No unescaped special characters (especially $ ` " ')
+#   - Restart containers after changing this file
+# If all else fails, try hardcoding the value directly in docker-compose-*.yaml to isolate the issue
+
+# --- Jellyfin ---
+JELLYFIN_USER_ID=
+JELLYFIN_TOKEN=
+JELLYFIN_URL=https://jellyfin.smittenfeld.nl
+
+# --- Shared backend configuration ---
+AUDIOMUSE_POSTGRES_USER=audiomuse
+AUDIOMUSE_POSTGRES_PASSWORD=
+AUDIOMUSE_POSTGRES_DB=audiomusedb
+#
+## --- Remote worker integration ---
+#WORKER_URL=http://worker.example.com:8029/worker
+#WORKER_POSTGRES_HOST=server.example.com
+#WORKER_REDIS_URL=redis://server.example.com:6379/0
+

audiomuse/docker-compose.yml

@@ -0,0 +1,127 @@
+version: '3.8'
+services:
+  # Redis service for RQ (task queue)
+  audiomuse-ai-redis:
+    image: redis:7-alpine
+    container_name: audiomuse-redis
+    ports:
+      - "6379:6379" # Expose Redis port to the host
+    volumes:
+      - redis-data:/data # Persistent storage for Redis data
+    networks:
+      - audiomuse
+    restart: unless-stopped
+
+  # PostgreSQL database service
+  audiomuse-ai-postgres:
+    image: postgres:15-alpine
+    container_name: audiomuse-postgres
+    env_file:
+      - .env
+    environment:
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+#    ports:
+#      - "5432:5432" # Expose PostgreSQL port to the host
+    volumes:
+      - postgres-data:/var/lib/postgresql/data # Persistent storage for PostgreSQL data
+    networks:
+      - audiomuse
+    restart: unless-stopped
+
+  # AudioMuse-AI Flask application service
+  audiomuse-ai-flask:
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
+    container_name: audiomuse-ai-flask-app
+    ports:
+      - "8013:8000"
+    env_file:
+      - .env
+    environment:
+      SERVICE_TYPE: "flask" # Tells the container to run the Flask app
+      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+      POSTGRES_PORT: "5432"
+      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
+      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
+      AI_MODEL_PROVIDER: "OPENAI"
+      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
+      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
+      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
+      TEMP_DIR: "/app/temp_audio"
+    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
+    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
+    # Increase tmpfs size for very large audio files as needed.
+    # If host RAM is limited, use a Docker volume instead of tmpfs.
+    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
+    tmpfs:
+      - /app/temp_audio:rw,size=1000m
+    depends_on:
+      - audiomuse-ai-redis
+      - audiomuse-ai-postgres
+    restart: unless-stopped
+    networks:
+      - audiomuse
+    models:
+      - llm # Specify that LLM models are used in this service
+
+  # AudioMuse-AI RQ Worker service
+  audiomuse-ai-worker:
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
+    container_name: audiomuse-ai-worker-instance
+    env_file:
+      - .env
+    environment:
+      SERVICE_TYPE: "worker" # Tells the container to run the RQ worker
+      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
+      JELLYFIN_USER_ID: "${JELLYFIN_USER_ID}"
+      JELLYFIN_TOKEN: "${JELLYFIN_TOKEN}"
+      JELLYFIN_URL: "${JELLYFIN_URL}"
+      # DATABASE_URL is now constructed by config.py from the following:
+      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
+      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
+      POSTGRES_PORT: "5432"
+      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
+      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
+      AI_MODEL_PROVIDER: "OPENAI"
+      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
+      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
+      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
+      TEMP_DIR: "/app/temp_audio"
+    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
+    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
+    # Increase tmpfs size for very large audio files as needed.
+    # If host RAM is limited, use a Docker volume instead of tmpfs.
+    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
+    tmpfs:
+      - /app/temp_audio:rw,size=1000m
+    depends_on:
+      - audiomuse-ai-redis
+      - audiomuse-ai-postgres
+    restart: unless-stopped
+    networks:
+      - audiomuse
+    models:
+      - llm # Specify that LLM models are used in this service
+
+# Using Docker Model Runner (DMR)
+# - Make sure your Docker Engine version supports the AI features and that the docker-model-plugin is installed.
+# - Follow Docker's setup guide: https://docs.docker.com/ai/model-runner/get-started/#docker-engine
+# - Once DMR is configured, you can download and run AI models locally just like Docker images — no code changes to this compose file are required.
+# - For model integration with docker-compose, see: https://docs.docker.com/ai/compose/models-and-compose/
+models:
+  llm:
+    model: ai/qwen3:0.6B-Q4_0 # Lightweight local model for testing. Change as needed; if changed, ensure it matches OPENAI_MODEL_NAME.
+
+
+# Define volumes for persistent data and temporary files
+volumes:
+  redis-data:
+  postgres-data:
+
+networks:
+  audiomuse:

docker-compose.yml

@@ -1,5 +1,6 @@
 include:
   - audiobookshelf/docker-compose.yml
+  - audiomuse/docker-compose.yml
   - baikal/docker-compose.yml
   - gitea/docker-compose.yml
   - immich/docker-compose.yml
@@ -9,8 +10,7 @@ include:
   - pihole/docker-compose.yml
   - pingvin/docker-compose.yml
   - pocketid/docker-compose.yml
-  - postgres/docker-compose.yml
+#  - spliit/docker-compose.yml
-  - spliit/docker-compose.yml
   - shlink/docker-compose.yml
   - synapse/docker-compose.yml
   - updater/docker-compose.yml

gitea/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   gitea:
     container_name: gitea
-    image: gitea/gitea:1.24.6-rootless
+    image: gitea/gitea:1.25.1-rootless
     restart: always
     volumes:
       - ${GITEA_DATA_LOCATION}:/var/lib/gitea

immich/docker-compose.updated.yml

@@ -1,48 +0,0 @@
-services:
-  immich-server:
-    container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v1.143.1
-    volumes:
-      - ${UPLOAD_LOCATION}:/data
-      - /etc/localtime:/etc/localtime:ro
-    env_file:
-      - .env
-    environment:
-      DB_HOSTNAME: shared-postgres
-      DB_PORT: 5432
-      DB_USERNAME: ${IMMICH_POSTGRES_USER}
-      DB_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
-      DB_DATABASE_NAME: ${IMMICH_POSTGRES_DB}
-    ports:
-      - '2283:2283'
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-      redis:
-        condition: service_started
-    restart: always
-    networks:
-      - postgres-network
-
-  immich-machine-learning:
-    container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v1.143.1
-    volumes:
-      - model-cache:/cache
-    env_file:
-      - .env
-    restart: always
-
-  redis:
-    container_name: immich_redis
-    image: docker.io/redis:7.4-alpine@sha256:1bf97f21f01b0e7bd4b7b34a26d3b9d8086e41e70c10f262e8a9e0b49b5116a0
-    healthcheck:
-      test: redis-cli ping || exit 1
-    restart: always
-
-volumes:
-  model-cache:
-
-networks:
-  postgres-network:
-    external: true

immich/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v1.143.1
+    image: ghcr.io/immich-app/immich-server:v2.3.1
     # extends:
     #   file: hwaccel.transcoding.yml
     #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
@@ -25,7 +25,7 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v1.143.1
+    image: ghcr.io/immich-app/immich-machine-learning:v2.3.1
     volumes:
       - model-cache:/cache
     env_file:
@@ -34,14 +34,14 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/redis:7.4-alpine@sha256:1bf97f21f01b0e7bd4b7b34a26d3b9d8086e41e70c10f262e8a9e0b49b5116a0
+    image: docker.io/valkey/valkey:8@sha256:81db6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
 
   database:
     container_name: immich_postgres
-    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
+    image: ghcr.io/immich-app/postgres:16-vectorchord0.3.0-pgvectors0.2.0
     environment:
       POSTGRES_USER: ${IMMICH_POSTGRES_USER}
       POSTGRES_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
@@ -53,6 +53,7 @@ services:
     volumes:
       # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
       - ${IMMICH_DB_LOCATION}:/var/lib/postgresql/data
+    shm_size: 128mb
     restart: always
 
 volumes:

jellyfin/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   jellyfin:
-    image: jellyfin/jellyfin:10.10.7
+    image: jellyfin/jellyfin:10.11.3
     user: ${JELLYFIN_USER_UID}:${JELLYFIN_USER_GID}
     network_mode: 'host'
     restart: always

nextcloud/docker-compose.updated.yml

@@ -1,47 +0,0 @@
-services:
-  nextcloud_db:
-    # Remove this service - using shared-postgres instead
-
-  nextcloud:
-    image: nextcloud:31.0.9
-    restart: always
-    ports:
-      - 8081:80
-    volumes:
-      - ${NEXTCLOUD_DATA_DIR}:/var/www/html
-    environment:
-      - POSTGRES_HOST=shared-postgres
-      - POSTGRES_PORT=5432
-      - POSTGRES_DB=${NEXTCLOUD_POSTGRES_DB}
-      - POSTGRES_USER=${NEXTCLOUD_POSTGRES_USER}
-      - POSTGRES_PASSWORD=${NEXTCLOUD_POSTGRES_PASSWORD}
-      - REDIS_HOST=nextcloud-redis
-      - REDIS_PORT=6379
-      - NEXTCLOUD_TRUSTED_DOMAINS=${NEXTCLOUD_DOMAIN}
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-    networks:
-      - nextcloud
-      - postgres-network
-
-  cron:
-    image: nextcloud:31.0.9
-    container_name: nextcloud-cron
-    volumes:
-      - ${NEXTCLOUD_DATA_DIR}:/var/www/html
-    entrypoint: /cron.sh
-    restart: always
-    networks:
-      - nextcloud
-
-  nextcloud-redis:
-    image: redis:7
-    restart: always
-    networks:
-      - nextcloud
-
-networks:
-  nextcloud:
-  postgres-network:
-    external: true

nextcloud/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   nextcloud_db:
-    image: docker.io/library/postgres:18
+    image: docker.io/library/postgres:17
     restart: always
     volumes:
       - ${NEXTCLOUD_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -13,7 +13,7 @@ services:
     networks:
       - nextcloud
   nextcloud:
-    image: nextcloud:31.0.9
+    image: nextcloud:32.0.1
     restart: always
     ports:
       - 8081:80
@@ -32,7 +32,7 @@ services:
     networks:
       - nextcloud
   cron:
-    image: nextcloud:31.0.9
+    image: nextcloud:32.0.1
     container_name: nextcloud-cron
     volumes:
       - ${NEXTCLOUD_DATA_DIR}:/var/www/html

paperless/docker-compose.updated.yml

@@ -1,54 +0,0 @@
-services:
-  broker:
-    image: docker.io/library/redis:7
-    restart: always
-    volumes:
-      - ${PAPERLESS_REDIS_DATA_DIR}:/data
-
-  paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.18.4
-    restart: always
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-      broker:
-        condition: service_started
-      gotenberg:
-        condition: service_started
-      tika:
-        condition: service_started
-    ports:
-      - "8070:8000"
-    volumes:
-      - ${PAPERLESS_DATA_DIR}:/usr/src/paperless/data
-      - ${PAPERLESS_MEDIA_DIR}:/usr/src/paperless/media
-      - ${PAPERLESS_EXPORT_DIR}/export:/usr/src/paperless/export
-      - ${PAPERLESS_CONSUME_DIR}:/usr/src/paperless/consume
-    env_file: .env
-    environment:
-      PAPERLESS_REDIS: redis://broker:6379
-      PAPERLESS_DBHOST: shared-postgres
-      PAPERLESS_DBPORT: 5432
-      PAPERLESS_DBNAME: ${PAPERLESS_POSTGRES_DB}
-      PAPERLESS_DBUSER: ${PAPERLESS_POSTGRES_USER}
-      PAPERLESS_DBPASS: ${PAPERLESS_POSTGRES_PASSWORD}
-      PAPERLESS_TIKA_ENABLED: 1
-      PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
-      PAPERLESS_TIKA_ENDPOINT: http://tika:9998
-      PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
-      USE_X_FORWARD_HOST: true
-      USE_X_FORWARDED_PORT: true
-      PAPERLESS_DISABLE_REGULAR_LOGIN: true
-      PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
-    networks:
-      - postgres-network
-
-  gotenberg:
-    # ... existing gotenberg configuration ...
-
-  tika:
-    # ... existing tika configuration ...
-
-networks:
-  postgres-network:
-    external: true

paperless/docker-compose.yml

@@ -6,7 +6,7 @@ services:
       - ${PAPERLESS_REDIS_DATA_DIR}:/data
 
   db:
-    image: docker.io/library/postgres:18
+    image: docker.io/library/postgres:17
     restart: always
     volumes:
       - ${PAPERLESS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -18,7 +18,7 @@ services:
       - 5434:5432
 
   paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.18.4
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.19.4
     restart: always
     depends_on:
       - db
@@ -49,7 +49,7 @@ services:
       PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
 
   gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.23.1
+    image: docker.io/gotenberg/gotenberg:8.24.0
     restart: always
 
     # The gotenberg chromium route is used to convert .eml files. We do not

pihole/docker-compose.yml

@@ -2,7 +2,7 @@
 services:
   pihole:
     container_name: pihole
-    image: pihole/pihole:2025.08.0
+    image: pihole/pihole:2025.11.0
     ports:
       # DNS Ports
       - "53:53/tcp"

pocketid/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   pocket-id:
-    image: ghcr.io/pocket-id/pocket-id:v1.11.2
+    image: ghcr.io/pocket-id/pocket-id:v1.15.0
     restart: always
     env_file: .env
     ports:

postgres/.env.example

@@ -1,2 +0,0 @@
-SHARED_DB_PASSWORD=
-SHARED_DB_DATA_DIR=

postgres/docker-compose.yml

@@ -1,35 +0,0 @@
-services:
-  shared-postgres:
-    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
-    container_name: shared-postgres
-    restart: always
-    env_file:
-      # Env files for all services using this shared database
-      - ../spliit/.env
-      - ../shlink/.env
-      - ../immich/.env
-      - ../nextcloud/.env
-      - ../paperless/.env
-      - ../synapse/.env
-    environment:
-      POSTGRES_USER: postgres
-      POSTGRES_PASSWORD: ${SHARED_DB_PASSWORD}
-      POSTGRES_DB: postgres
-      POSTGRES_INITDB_ARGS: '--encoding=UTF-8 --locale=C --data-checksums'
-    volumes:
-      - ${SHARED_DB_DATA_DIR}:/var/lib/postgresql/data
-      - ./init-scripts:/docker-entrypoint-initdb.d:ro
-    ports:
-      - "5431:5432"
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U postgres"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-    networks:
-      - postgres-network
-
-networks:
-  postgres-network:
-    name: postgres-network
-    driver: bridge

postgres/init-scripts/01-init-databases.sh

@@ -1,73 +0,0 @@
-#!/bin/bash
-set -e
-
-# This script initializes all databases and users for the homelab services
-# It runs automatically when the PostgreSQL container starts for the first time
-
-echo "Creating databases and users for homelab services..."
-
-# Function to create database and user with restricted permissions
-create_db_and_user() {
-    local db_name=$1
-    local db_user=$2
-    local db_password=$3
-
-    echo "Creating database: $db_name with user: $db_user"
-
-    psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
-        -- Create database
-        CREATE DATABASE "$db_name";
-
-        -- Create user with password
-        CREATE USER "$db_user" WITH ENCRYPTED PASSWORD '$db_password';
-
-        -- Grant connection to the specific database only
-        GRANT CONNECT ON DATABASE "$db_name" TO "$db_user";
-
-        -- Make user owner of the database
-        ALTER DATABASE "$db_name" OWNER TO "$db_user";
-
-        -- Connect to the specific database to set schema permissions
-        \c "$db_name"
-
-        -- Grant schema permissions
-        GRANT ALL ON SCHEMA public TO "$db_user";
-        GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO "$db_user";
-        GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO "$db_user";
-        GRANT ALL PRIVILEGES ON ALL FUNCTIONS IN SCHEMA public TO "$db_user";
-
-        -- Set default privileges for future objects
-        ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO "$db_user";
-        ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO "$db_user";
-        ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON FUNCTIONS TO "$db_user";
-
-        -- Switch back to postgres database
-        \c postgres
-EOSQL
-}
-
-# Create databases for each service
-# Using environment variables that will be set in your .env file
-
-# Spliit
-create_db_and_user "${SPLIIT_POSTGRES_DB}" "${SPLIIT_POSTGRES_USER}" "${SPLIIT_POSTGRES_PASSWORD}"
-
-# Shlink
-create_db_and_user "${SHLINK_POSTGRES_DB}" "${SHLINK_POSTGRES_USER}" "${SHLINK_POSTGRES_PASSWORD}"
-
-# Immich
-create_db_and_user "${IMMICH_POSTGRES_DB}" "${IMMICH_POSTGRES_USER}" "${IMMICH_POSTGRES_PASSWORD}"
-
-# Nextcloud
-create_db_and_user "${NEXTCLOUD_POSTGRES_DB}" "${NEXTCLOUD_POSTGRES_USER}" "${NEXTCLOUD_POSTGRES_PASSWORD}"
-
-# Paperless
-create_db_and_user "${PAPERLESS_POSTGRES_DB}" "${PAPERLESS_POSTGRES_USER}" "${PAPERLESS_POSTGRES_PASSWORD}"
-
-# Matrix and co
-create_db_and_user "${SYNAPSE_POSTGRES_DB}" "${SYNAPSE_POSTGRES_USER}" "${SYNAPSE_POSTGRES_PASSWORD}"
-create_db_and_user "${MAS_POSTGRES_DB}" "${MAS_POSTGRES_USER}" "${MAS_POSTGRES_PASSWORD}"
-create_db_and_user "${MAUTRIX_SIGNAL_POSTGRES_DB}" "${MAUTRIX_SIGNAL_POSTGRES_USER}" "${MAUTRIX_SIGNAL_POSTGRES_PASSWORD}"
-create_db_and_user "${MAUTRIX_WHATSAPP_POSTGRES_DB}" "${MAUTRIX_WHATSAPP_POSTGRES_USER}" "${MAUTRIX_WHATSAPP_POSTGRES_PASSWORD}"
-
-echo "Database initialization completed successfully!"

postgres/init-scripts/02-immich-extensions.sh

@@ -1,35 +0,0 @@
-#!/bin/bash
-set -e
-
-# Enable vector extensions for Immich database
-echo "Enabling vector extensions for Immich database..."
-
-psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "${IMMICH_POSTGRES_DB}" <<-EOSQL
-    -- Create extensions as superuser
-    CREATE EXTENSION IF NOT EXISTS vectors;
-    CREATE EXTENSION IF NOT EXISTS earthdistance CASCADE;
-
-    -- Grant usage on the extension schemas to immich user
-    GRANT USAGE ON SCHEMA vectors TO ${IMMICH_POSTGRES_USER};
-    GRANT USAGE ON SCHEMA earthdistance TO ${IMMICH_POSTGRES_USER};
-
-    -- Grant all privileges on extension objects to immich user
-    GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA vectors TO ${IMMICH_POSTGRES_USER};
-    GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA vectors TO ${IMMICH_POSTGRES_USER};
-    GRANT ALL PRIVILEGES ON ALL FUNCTIONS IN SCHEMA vectors TO ${IMMICH_POSTGRES_USER};
-
-    GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA earthdistance TO ${IMMICH_POSTGRES_USER};
-    GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA earthdistance TO ${IMMICH_POSTGRES_USER};
-    GRANT ALL PRIVILEGES ON ALL FUNCTIONS IN SCHEMA earthdistance TO ${IMMICH_POSTGRES_USER};
-
-    -- Set default privileges for future extension objects
-    ALTER DEFAULT PRIVILEGES IN SCHEMA vectors GRANT ALL ON TABLES TO ${IMMICH_POSTGRES_USER};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA vectors GRANT ALL ON SEQUENCES TO ${IMMICH_POSTGRES_USER};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA vectors GRANT ALL ON FUNCTIONS TO ${IMMICH_POSTGRES_USER};
-
-    ALTER DEFAULT PRIVILEGES IN SCHEMA earthdistance GRANT ALL ON TABLES TO ${IMMICH_POSTGRES_USER};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA earthdistance GRANT ALL ON SEQUENCES TO ${IMMICH_POSTGRES_USER};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA earthdistance GRANT ALL ON FUNCTIONS TO ${IMMICH_POSTGRES_USER};
-EOSQL
-
-echo "Immich vector extensions enabled successfully!"

shlink/docker-compose.updated.yml

@@ -1,27 +0,0 @@
-services:
-  shlink:
-    image: shlinkio/shlink:4.5
-    container_name: shlink
-    restart: always
-    ports:
-      - "8085:8080"
-    environment:
-      DEFAULT_DOMAIN: ${SHLINK_DOMAIN}
-      IS_HTTPS_ENABLED: ${SHLINK_IS_HTTPS_ENABLED}
-      GEOLITE_LICENSE_KEY: ${SHLINK_GEOIP_LICENSE_KEY}
-      INITIAL_API_KEY: ${SHLINK_API_KEY}
-      DB_DRIVER: postgres
-      DB_HOST: shared-postgres
-      DB_PORT: 5432
-      DB_NAME: ${SHLINK_POSTGRES_DB}
-      DB_USER: ${SHLINK_POSTGRES_USER}
-      DB_PASSWORD: ${SHLINK_POSTGRES_PASSWORD}
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-    networks:
-      - postgres-network
-
-networks:
-  postgres-network:
-    external: true

shlink/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   shlink:
-    image: shlinkio/shlink:4.5
+    image: shlinkio/shlink:4.6
     container_name: shlink
     restart: always
     ports:

spliit/docker-compose.updated.yml

@@ -1,24 +0,0 @@
-services:
-  spliit:
-    image: ghcr.io/spliit-app/spliit:1.18.0
-    restart: always
-    ports:
-      - 3001:3000
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-    env_file:
-      - .env
-    environment:
-      TZ: ${TZ}
-      POSTGRES_HOST: shared-postgres
-      POSTGRES_PORT: 5432
-      POSTGRES_DB: ${SPLIIT_POSTGRES_DB}
-      POSTGRES_USER: ${SPLIIT_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${SPLIIT_POSTGRES_PASSWORD}
-    networks:
-      - postgres-network
-
-networks:
-  postgres-network:
-    external: true

spliit/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   spliit:
-    image: ghcr.io/spliit-app/spliit:1.18.0
+    image: ghcr.io/spliit-app/spliit:1.19.1
     restart: always
     ports:
       - 3001:3000

synapse/docker-compose.updated.yml

@@ -1,105 +0,0 @@
-services:
-  element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.3.0
-    container_name: element-call-jwt
-    hostname: auth-server
-    environment:
-      - LK_JWT_PORT=8080
-      - LIVEKIT_URL=https://${LIVEKIT_DOMAIN}/livekit/sfu
-      - LIVEKIT_KEY=devkey
-      - LIVEKIT_SECRET=${LIVEKIT_SECRET_KEY}
-      - LIVEKIT_FULL_ACCESS_HOMESERVERS=${MATRIX_DOMAIN}
-    restart: always
-    ports:
-      - 8071:8080
-
-  element-call-livekit:
-    image: livekit/livekit-server:v1.9.1
-    command: --config /etc/livekit.yaml
-    ports:
-      - "7880:7880/tcp"
-      - "7881:7881/tcp"
-      - "7882:7882/tcp"
-      - "50100-50200:50100-50200/udp"
-    restart: always
-    volumes:
-      - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
-
-  mautrix-signal:
-    container_name: mautrix-signal
-    image: dock.mau.dev/mautrix/signal:v0.8.7
-    restart: always
-    volumes:
-      - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-    environment:
-      # Configure database connection for mautrix-signal
-      MAUTRIX_SIGNAL_DATABASE_TYPE: postgres
-      MAUTRIX_SIGNAL_DATABASE_URI: postgresql://${MAUTRIX_SIGNAL_POSTGRES_USER}:${MAUTRIX_SIGNAL_POSTGRES_PASSWORD}@shared-postgres:5432/${MAUTRIX_SIGNAL_POSTGRES_DB}?sslmode=disable
-    networks:
-      - postgres-network
-
-  mautrix-whatsapp:
-    container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.12.5
-    restart: always
-    volumes:
-      - ${MAUTRIX_WHATSAPP_DATA_DIR}:/data
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-    environment:
-      # Configure database connection for mautrix-whatsapp
-      MAUTRIX_WHATSAPP_DATABASE_TYPE: postgres
-      MAUTRIX_WHATSAPP_DATABASE_URI: postgresql://${MAUTRIX_WHATSAPP_POSTGRES_USER}:${MAUTRIX_WHATSAPP_POSTGRES_PASSWORD}@shared-postgres:5432/${MAUTRIX_WHATSAPP_POSTGRES_DB}?sslmode=disable
-    networks:
-      - postgres-network
-
-  mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.3.0
-    restart: always
-    working_dir: /config
-    volumes:
-      - ${MAS_CONFIG_DIR}:/config
-    environment:
-      MAS_CONFIG: /config/config.yaml
-      # Database connection will be configured in the MAS config file
-      MAS_DATABASE_URL: postgresql://${MAS_POSTGRES_USER}:${MAS_POSTGRES_PASSWORD}@shared-postgres:5432/${MAS_POSTGRES_DB}?sslmode=disable
-    ports:
-      - "8090:8090"
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-    networks:
-      - postgres-network
-
-  synapse:
-    container_name: synapse
-    image: matrixdotorg/synapse:v1.138.2
-    restart: always
-    volumes:
-      - ${SYNAPSE_CONFIG_DIR}:/data
-    ports:
-      - "8008:8008"
-    environment:
-      # Synapse database connection will be configured in homeserver.yaml
-      SYNAPSE_DATABASE_HOST: shared-postgres
-      SYNAPSE_DATABASE_PORT: 5432
-      SYNAPSE_DATABASE_USER: ${SYNAPSE_POSTGRES_USER}
-      SYNAPSE_DATABASE_PASSWORD: ${SYNAPSE_POSTGRES_PASSWORD}
-      SYNAPSE_DATABASE_NAME: ${SYNAPSE_POSTGRES_DB}
-    depends_on:
-      shared-postgres:
-        condition: service_healthy
-      mas:
-        condition: service_started
-      mautrix-whatsapp:
-        condition: service_started
-    networks:
-      - postgres-network
-
-networks:
-  postgres-network:
-    external: true

synapse/docker-compose.yml

@@ -13,7 +13,7 @@ services:
     ports:
       - 8071:8080
   element-call-livekit:
-    image: livekit/livekit-server:v1.9.1
+    image: livekit/livekit-server:v1.9.3
     command: --config /etc/livekit.yaml
     ports:
       - "7880:7880/tcp"
@@ -25,12 +25,12 @@ services:
       - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
   mautrix-signal:
     container_name: mautrix-signal
-    image: dock.mau.dev/mautrix/signal:v0.8.7
+    image: dock.mau.dev/mautrix/signal:v0.2511.0
     restart: always
     volumes:
       - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
   mautrix-signal_db:
-    image: docker.io/library/postgres:18
+    image: docker.io/library/postgres:17
     restart: always
     volumes:
       - ${MAUTRIX_SIGNAL_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -42,7 +42,7 @@ services:
       - 5439:5432
   mautrix-whatsapp:
     container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.12.5
+    image: dock.mau.dev/mautrix/whatsapp:v0.2511.0
     #image: petersmit27/mautrix-whatsapp:latest
     restart: always
     volumes:
@@ -50,7 +50,7 @@ services:
     depends_on:
       - mautrix-whatsapp_db
   mautrix-whatsapp_db:
-    image: docker.io/library/postgres:18
+    image: docker.io/library/postgres:17
     restart: always
     volumes:
       - ${MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -61,7 +61,7 @@ services:
     ports:
       - 5440:5432
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.3.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.6.0
     restart: always
     working_dir: /config
     volumes:
@@ -73,7 +73,7 @@ services:
     depends_on:
       - mas_db
   mas_db:
-    image: docker.io/library/postgres:18
+    image: docker.io/library/postgres:17
     restart: always
     volumes:
       - ${MAS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -84,7 +84,7 @@ services:
     ports:
       - 5441:5432
   synapse_db:
-    image: docker.io/library/postgres:18
+    image: docker.io/library/postgres:17
     restart: always
     volumes:
       - ${SYNAPSE_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -97,7 +97,7 @@ services:
       - 5442:5432
   synapse:
     container_name: synapse
-    image: matrixdotorg/synapse:v1.138.2
+    image: matrixdotorg/synapse:v1.142.1
     restart: always
     volumes:
       - ${SYNAPSE_CONFIG_DIR}:/data