Update docker.io/gotenberg/gotenberg Docker tag to v8.17.3

2025-03-07 00:01:11 +00:00
30 changed files with 99 additions and 544 deletions
--- a/audiobookshelf/.env.example
+++ b/audiobookshelf/.env.example
@@ -1 +0,0 @@
-AUDIOBOOKSHELF_DIR=
--- a/audiobookshelf/docker-compose.yml
+++ b/audiobookshelf/docker-compose.yml
@@ -1,13 +0,0 @@
-services:
-  audiobookshelf:
-    image: ghcr.io/advplyr/audiobookshelf:2.30.0
-    restart: always
-    ports:
-      - 13378:80
-    volumes:
-      - ${AUDIOBOOKSHELF_DIR}/audiobooks:/audiobooks
-      - ${AUDIOBOOKSHELF_DIR}/podcasts:/podcasts
-      - ${AUDIOBOOKSHELF_DIR}/config:/config
-      - ${AUDIOBOOKSHELF_DIR}/metadata:/metadata
-    environment:
-      - TZ=Europe/Amsterdam
--- a/audiomuse/.env.example
+++ b/audiomuse/.env.example
@@ -1,41 +0,0 @@
-# Copy this file to `.env` and fill in the values that match your setup.
-# Docker Compose files under deployment/ read these variables to keep settings in one place.
-#
-# IMPORTANT:
-# 1. This file must be named exactly ".env" (not .env.txt or .env.example)
-# 2. It must be in the SAME directory as your docker-compose-*.yaml file
-# 3. Do NOT use spaces around the = sign
-# 4. Do NOT use quotes around values (unless required by the value itself)
-# 5. After editing, restart containers: docker-compose down && docker-compose up -d
-#
-# SPECIAL CHARACTERS IN VALUES:
-# If your password or API key contains special characters like: $ ` " ' \ # ! & * ( ) [ ] { } | ; < > ?
-# you may need to:
-#   - Avoid quotes entirely: GEMINI_API_KEY=AIza$pecial!Key  (usually works)
-#   - OR use single quotes if the value has $: GEMINI_API_KEY='AIza$pecial!Key'
-#   - OR escape with backslash: GEMINI_API_KEY=AIza\$pecial\!Key
-# Most problematic characters: $ (variable expansion), ` (command substitution), " (string delimiter)
-#
-# TROUBLESHOOTING:
-# If API keys don't work, verify:
-#   - File is named ".env" exactly (check with: ls -la)
-#   - No spaces: GEMINI_API_KEY=AIza... (not GEMINI_API_KEY = "AIza...")
-#   - No unescaped special characters (especially $ ` " ')
-#   - Restart containers after changing this file
-# If all else fails, try hardcoding the value directly in docker-compose-*.yaml to isolate the issue
-
-# --- Jellyfin ---
-JELLYFIN_USER_ID=
-JELLYFIN_TOKEN=
-JELLYFIN_URL=https://jellyfin.smittenfeld.nl
-
-# --- Shared backend configuration ---
-AUDIOMUSE_POSTGRES_USER=audiomuse
-AUDIOMUSE_POSTGRES_PASSWORD=
-AUDIOMUSE_POSTGRES_DB=audiomusedb
-#
-## --- Remote worker integration ---
-#WORKER_URL=http://worker.example.com:8029/worker
-#WORKER_POSTGRES_HOST=server.example.com
-#WORKER_REDIS_URL=redis://server.example.com:6379/0
-
--- a/audiomuse/docker-compose.yml
+++ b/audiomuse/docker-compose.yml
@@ -1,127 +0,0 @@
-version: '3.8'
-services:
-  # Redis service for RQ (task queue)
-  audiomuse-ai-redis:
-    image: redis:7-alpine
-    container_name: audiomuse-redis
-    ports:
-      - "6379:6379" # Expose Redis port to the host
-    volumes:
-      - redis-data:/data # Persistent storage for Redis data
-    networks:
-      - audiomuse
-    restart: unless-stopped
-
-  # PostgreSQL database service
-  audiomuse-ai-postgres:
-    image: postgres:15-alpine
-    container_name: audiomuse-postgres
-    env_file:
-      - .env
-    environment:
-      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
-      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
-#    ports:
-#      - "5432:5432" # Expose PostgreSQL port to the host
-    volumes:
-      - postgres-data:/var/lib/postgresql/data # Persistent storage for PostgreSQL data
-    networks:
-      - audiomuse
-    restart: unless-stopped
-
-  # AudioMuse-AI Flask application service
-  audiomuse-ai-flask:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
-    container_name: audiomuse-ai-flask-app
-    ports:
-      - "8013:8000"
-    env_file:
-      - .env
-    environment:
-      SERVICE_TYPE: "flask" # Tells the container to run the Flask app
-      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
-      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
-      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
-      POSTGRES_PORT: "5432"
-      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
-      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
-      AI_MODEL_PROVIDER: "OPENAI"
-      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
-      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
-      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
-      TEMP_DIR: "/app/temp_audio"
-    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
-    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
-    # Increase tmpfs size for very large audio files as needed.
-    # If host RAM is limited, use a Docker volume instead of tmpfs.
-    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
-    tmpfs:
-      - /app/temp_audio:rw,size=1000m
-    depends_on:
-      - audiomuse-ai-redis
-      - audiomuse-ai-postgres
-    restart: unless-stopped
-    networks:
-      - audiomuse
-    models:
-      - llm # Specify that LLM models are used in this service
-
-  # AudioMuse-AI RQ Worker service
-  audiomuse-ai-worker:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
-    container_name: audiomuse-ai-worker-instance
-    env_file:
-      - .env
-    environment:
-      SERVICE_TYPE: "worker" # Tells the container to run the RQ worker
-      MEDIASERVER_TYPE: "jellyfin" # Specify the media server type
-      JELLYFIN_USER_ID: "${JELLYFIN_USER_ID}"
-      JELLYFIN_TOKEN: "${JELLYFIN_TOKEN}"
-      JELLYFIN_URL: "${JELLYFIN_URL}"
-      # DATABASE_URL is now constructed by config.py from the following:
-      POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
-      POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
-      POSTGRES_PORT: "5432"
-      POSTGRES_HOST: "audiomuse-ai-postgres" # Service name of the postgres container
-      REDIS_URL: "redis://audiomuse-ai-redis:6379/0" # Connects to the 'redis' service
-      AI_MODEL_PROVIDER: "OPENAI"
-      OPENAI_API_KEY: "any-random-string" # Dummy key to enable local model usage
-      OPENAI_SERVER_URL: "http://172.17.0.1:12434/engines/llama.cpp/v1/chat/completions" #This is the API endpoint for local DMR model from within the Docker container.
-      OPENAI_MODEL_NAME: "ai/qwen3:0.6B-Q4_0"
-      TEMP_DIR: "/app/temp_audio"
-    # Use tmpfs to process audio files in memory for better performance. this reduuces disk I/O but might use more RAM.
-    # Mounted directories are not shared between containers, so each container gets its own tmpfs instance.
-    # Increase tmpfs size for very large audio files as needed.
-    # If host RAM is limited, use a Docker volume instead of tmpfs.
-    # For more info on tmpfs: https://docs.docker.com/engine/storage/tmpfs/
-    tmpfs:
-      - /app/temp_audio:rw,size=1000m
-    depends_on:
-      - audiomuse-ai-redis
-      - audiomuse-ai-postgres
-    restart: unless-stopped
-    networks:
-      - audiomuse
-    models:
-      - llm # Specify that LLM models are used in this service
-
-# Using Docker Model Runner (DMR)
-# - Make sure your Docker Engine version supports the AI features and that the docker-model-plugin is installed.
-# - Follow Docker's setup guide: https://docs.docker.com/ai/model-runner/get-started/#docker-engine
-# - Once DMR is configured, you can download and run AI models locally just like Docker images — no code changes to this compose file are required.
-# - For model integration with docker-compose, see: https://docs.docker.com/ai/compose/models-and-compose/
-models:
-  llm:
-    model: ai/qwen3:0.6B-Q4_0 # Lightweight local model for testing. Change as needed; if changed, ensure it matches OPENAI_MODEL_NAME.
-
-
-# Define volumes for persistent data and temporary files
-volumes:
-  redis-data:
-  postgres-data:
-
-networks:
-  audiomuse:
--- a/baikal/.env.example
+++ b/baikal/.env.example
@@ -1,2 +0,0 @@
-BAIKAL_CONFIG_DIR=
-BAIKAL_DATA_DIR=
--- a/baikal/docker-compose.yml
+++ b/baikal/docker-compose.yml
@@ -1,11 +0,0 @@
-services:
-  baikal:
-    image: ckulka/baikal:0.10.1-nginx
-    restart: always
-    ports:
-      - "8083:80"
-    volumes:
-      - ${BAIKAL_CONFIG_DIR}:/var/www/baikal/config
-      - ${BAIKAL_DATA_DIR}:/var/www/baikal/Specific
-    env_file:
-      - .env
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,17 +1,11 @@
 include:
-  - audiobookshelf/docker-compose.yml
-  - audiomuse/docker-compose.yml
-  - baikal/docker-compose.yml
  - gitea/docker-compose.yml
+  - homeassistant/docker-compose.yml
  - immich/docker-compose.yml
  - jellyfin/docker-compose.yml
-  - nextcloud/docker-compose.yml
  - paperless/docker-compose.yml
-  - pihole/docker-compose.yml
  - pingvin/docker-compose.yml
  - pocketid/docker-compose.yml
-#  - spliit/docker-compose.yml
-  - shlink/docker-compose.yml
  - synapse/docker-compose.yml
  - updater/docker-compose.yml
  - vaultwarden/docker-compose.yml
--- a/gitea/docker-compose.yml
+++ b/gitea/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
  gitea:
    container_name: gitea
-    image: gitea/gitea:1.25.1-rootless
+    image: gitea/gitea:1.23.4-rootless
    restart: always
    volumes:
      - ${GITEA_DATA_LOCATION}:/var/lib/gitea
@@ -14,8 +14,7 @@ services:
      - "3000:3000"
      - "2222:2222"
  gitea-runner:
-    image: gitea/act_runner:0.2.13
-    restart: always
+    image: gitea/act_runner:0.2.11
    environment:
      CONFIG_FILE: /config.yaml
      GITEA_INSTANCE_URL: "${GITEA_INSTANCE_URL}"
--- a/homeassistant/.env.example
+++ b/homeassistant/.env.example
@@ -0,0 +1 @@
+HOMEASSISTANT_CONFIG_DIR=
--- a/homeassistant/docker-compose.yml
+++ b/homeassistant/docker-compose.yml
@@ -0,0 +1,13 @@
+services:
+  homeassistant:
+    container_name: homeassistant
+    image: ghcr.io/home-assistant/home-assistant:2025.1.4
+    volumes:
+      - ${HOMEASSISTANT_CONFIG_DIR}:/config
+      - /etc/localtime:/etc/localtime:ro
+      - /run/dbus:/run/dbus:ro
+    ports:
+      - "8123:8123"
+    restart: unless-stopped
+    privileged: true
+    network_mode: host
--- a/immich/.env.example
+++ b/immich/.env.example
@@ -1,10 +1,8 @@
 UPLOAD_LOCATION=
-IMMICH_VERSION=
 IMMICH_DB_LOCATION=

-IMMICH_DB_HOSTNAME=
-IMMICH_POSTGRES_DB=
-IMMICH_POSTGRES_USER=
-IMMICH_POSTGRES_PASSWORD=
+DB_USERNAME=
+DB_PASSWORD=
+DB_DATABASE_NAME=

-REDIS_HOSTNAME=
+REDIS_HOSTNAME=
--- a/immich/docker-compose.yml
+++ b/immich/docker-compose.yml
@@ -1,59 +1,77 @@
 services:
  immich-server:
    container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.3.1
+    image: ghcr.io/immich-app/immich-server:v1.129.0
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    volumes:
      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
-      - ${UPLOAD_LOCATION}:/data
+      - ${UPLOAD_LOCATION}:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
-    environment:
-      DB_HOSTNAME: ${IMMICH_DB_HOSTNAME}
-      DB_USERNAME: ${IMMICH_POSTGRES_USER}
-      DB_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
-      DB_DATABASE_NAME: ${IMMICH_POSTGRES_DB}
    ports:
      - '2283:2283'
    depends_on:
      - redis
      - database
    restart: always
+    healthcheck:
+      disable: false

  immich-machine-learning:
    container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.3.1
+    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
+    # Example tag: ${IMMICH_VERSION:-release}-cuda
+    image: ghcr.io/immich-app/immich-machine-learning:v1.129.0
+    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
+    #   file: hwaccel.ml.yml
+    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    restart: always
+    healthcheck:
+      disable: false

  redis:
    container_name: immich_redis
-    image: docker.io/valkey/valkey:8@sha256:81db6d39e1bba3b3ff32bd3a1b19a6d69690f94a3954ec131277b9a26b95b3aa
+    image: docker.io/redis:7.4-alpine@sha256:1bf97f21f01b0e7bd4b7b34a26d3b9d8086e41e70c10f262e8a9e0b49b5116a0
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always

  database:
    container_name: immich_postgres
-    image: ghcr.io/immich-app/postgres:16-vectorchord0.3.0-pgvectors0.2.0
+    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
    environment:
-      POSTGRES_USER: ${IMMICH_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${IMMICH_POSTGRES_PASSWORD}
-      POSTGRES_DB: ${IMMICH_POSTGRES_DB}
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_USER: ${DB_USERNAME}
+      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
-      DB_STORAGE_TYPE: 'HDD'
-    ports:
-      - 5433:5432
    volumes:
      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
      - ${IMMICH_DB_LOCATION}:/var/lib/postgresql/data
-    shm_size: 128mb
+    healthcheck:
+      test: >-
+        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1;
+        Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align
+        --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')";
+        echo "checksum failure count is $$Chksum";
+        [ "$$Chksum" = '0' ] || exit 1
+      interval: 5m
+      start_interval: 30s
+      start_period: 5m
+    command: >-
+      postgres
+      -c shared_preload_libraries=vectors.so
+      -c 'search_path="$$user", public, vectors'
+      -c logging_collector=on
+      -c max_wal_size=2GB
+      -c shared_buffers=512MB
+      -c wal_compression=on
    restart: always

 volumes:
--- a/jellyfin/docker-compose.yml
+++ b/jellyfin/docker-compose.yml
@@ -1,9 +1,9 @@
 services:
  jellyfin:
-    image: jellyfin/jellyfin:10.11.3
+    image: jellyfin/jellyfin:10.10.5
    user: ${JELLYFIN_USER_UID}:${JELLYFIN_USER_GID}
    network_mode: 'host'
-    restart: always
+    restart: 'unless-stopped'
    env_file:
      - .env
    environment:
--- a/nextcloud/.env.example
+++ b/nextcloud/.env.example
@@ -1,12 +0,0 @@
-NEXTCLOUD_DOMAIN=
-
-NEXTCLOUD_DATA_DIR=
-
-NEXTCLOUD_POSTGRES_DATA_DIR=
-NEXTCLOUD_POSTGRES_DB=
-NEXTCLOUD_POSTGRES_USER=
-NEXTCLOUD_POSTGRES_PASSWORD=
-
-COLLABORA_DOMAIN=
-COLLABORA_USER=
-COLLABORA_PASSWORD=
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -1,50 +0,0 @@
-services:
-  nextcloud_db:
-    image: docker.io/library/postgres:17
-    restart: always
-    volumes:
-      - ${NEXTCLOUD_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
-    environment:
-      POSTGRES_DB: ${NEXTCLOUD_POSTGRES_DB}
-      POSTGRES_USER: ${NEXTCLOUD_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${NEXTCLOUD_POSTGRES_PASSWORD}
-    ports:
-      - 5438:5432
-    networks:
-      - nextcloud
-  nextcloud:
-    image: nextcloud:32.0.1
-    restart: always
-    ports:
-      - 8081:80
-    links:
-      - db
-    volumes:
-      - ${NEXTCLOUD_DATA_DIR}:/var/www/html
-    environment:
-      - POSTGRES_HOST=nextcloud_db
-      - POSTGRES_DB=${NEXTCLOUD_POSTGRES_DB}
-      - POSTGRES_USER=${NEXTCLOUD_POSTGRES_USER}
-      - POSTGRES_PASSWORD=${NEXTCLOUD_POSTGRES_PASSWORD}
-      - REDIS_HOST=nextcloud-redis
-      - REDIS_PORT=6379
-      - NEXTCLOUD_TRUSTED_DOMAINS=${NEXTCLOUD_DOMAIN}
-    networks:
-      - nextcloud
-  cron:
-    image: nextcloud:32.0.1
-    container_name: nextcloud-cron
-    volumes:
-      - ${NEXTCLOUD_DATA_DIR}:/var/www/html
-    entrypoint: /cron.sh
-    restart: always
-    networks:
-      - nextcloud
-  nextcloud-redis:
-    image: redis:7
-    restart: always
-    networks:
-      - nextcloud
-
-networks:
-  nextcloud:
--- a/paperless/.env.example
+++ b/paperless/.env.example
@@ -9,9 +9,9 @@ PAPERLESS_SECRET_KEY=

 PAPERLESS_URL=

-PAPERLESS_POSTGRES_DB=
-PAPERLESS_POSTGRES_USER=
-PAPERLESS_POSTGRES_PASSWORD=
+POSTGRES_DB=
+POSTGRES_USER=
+POSTGRES_PASSWORD=

 #optional
 PAPERLESS_TIME_ZONE=
--- a/paperless/docker-compose.yml
+++ b/paperless/docker-compose.yml
@@ -1,25 +1,23 @@
 services:
  broker:
    image: docker.io/library/redis:7
-    restart: always
+    restart: unless-stopped
    volumes:
      - ${PAPERLESS_REDIS_DATA_DIR}:/data

  db:
    image: docker.io/library/postgres:17
-    restart: always
+    restart: unless-stopped
    volumes:
      - ${PAPERLESS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
    environment:
-      POSTGRES_DB: ${PAPERLESS_POSTGRES_DB}
-      POSTGRES_USER: ${PAPERLESS_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${PAPERLESS_POSTGRES_PASSWORD}
-    ports:
-      - 5434:5432
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}

  paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.19.4
-    restart: always
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.14.7
+    restart: unless-stopped
    depends_on:
      - db
      - broker
@@ -36,9 +34,9 @@ services:
    environment:
      PAPERLESS_REDIS: redis://broker:6379
      PAPERLESS_DBHOST: db
-      PAPERLESS_DBNAME: ${PAPERLESS_POSTGRES_DB}
-      PAPERLESS_DBUSER: ${PAPERLESS_POSTGRES_USER}
-      PAPERLESS_DBPASS: ${PAPERLESS_POSTGRES_PASSWORD}
+      PAPERLESS_DBNAME: ${POSTGRES_DB}
+      PAPERLESS_DBUSER: ${POSTGRES_USER}
+      PAPERLESS_DBPASS: ${POSTGRES_PASSWORD}
      PAPERLESS_TIKA_ENABLED: 1
      PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
      PAPERLESS_TIKA_ENDPOINT: http://tika:9998
@@ -49,8 +47,8 @@ services:
      PAPERLESS_REDIRECT_LOGIN_TO_SSO: true

  gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.24.0
-    restart: always
+    image: docker.io/gotenberg/gotenberg:8.17.3
+    restart: unless-stopped

    # The gotenberg chromium route is used to convert .eml files. We do not
    # want to allow external content like tracking pixels or even javascript.
@@ -60,5 +58,5 @@ services:
      - "--chromium-allow-list=file:///tmp/.*"

  tika:
-    image: docker.io/apache/tika:3.2.3.0
-    restart: always
+    image: docker.io/apache/tika:3.1.0.0
+    restart: unless-stopped
--- a/pihole/.env.example
+++ b/pihole/.env.example
@@ -1,2 +0,0 @@
-PIHOLE_DATA_DIR=
-PIHOLE_PASSWORD=
--- a/pihole/docker-compose.yml
+++ b/pihole/docker-compose.yml
@@ -1,37 +0,0 @@
-# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
-services:
-  pihole:
-    container_name: pihole
-    image: pihole/pihole:2025.11.0
-    ports:
-      # DNS Ports
-      - "53:53/tcp"
-      - "53:53/udp"
-      # Default HTTP Port
-      - "8080:80/tcp"
-      # Default HTTPs Port. FTL will generate a self-signed certificate
-#      - "443:443/tcp"
-      # Uncomment the below if using Pi-hole as your DHCP Server
-#      - "67:67/udp"
-      # Uncomment the line below if you are using Pi-hole as your NTP server
-      #- "123:123/udp"
-    environment:
-      # Set the appropriate timezone for your location from
-      # https://en.wikipedia.org/wiki/List_of_tz_database_time_zones, e.g:
-      TZ: 'Europe/Amsterdam'
-      # Set a password to access the web interface. Not setting one will result in a random password being assigned
-      FTLCONF_webserver_api_password: ${PIHOLE_PASSWORD}
-      # If using Docker's default `bridge` network setting the dns listening mode should be set to 'all'
-      FTLCONF_dns_listeningMode: 'all'
-    volumes:
-      # For persisting Pi-hole's databases and common configuration file
-      - ${PIHOLE_DATA_DIR}:/etc/pihole
-    cap_add:
-      # See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
-      # Required if you are using Pi-hole as your DHCP server, else not needed
-#      - NET_ADMIN
-      # Required if you are using Pi-hole as your NTP client to be able to set the host's system time
-#      - SYS_TIME
-      # Optional, if Pi-hole should get some more processing time
-      - SYS_NICE
-    restart: always
--- a/pingvin/docker-compose.yml
+++ b/pingvin/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
  pingvin:
-    image: stonith404/pingvin-share:v1.13.0
-    restart: always
+    image: stonith404/pingvin-share:v1.9.0
+    restart: unless-stopped
    ports:
      - 3042:3000
    environment:
--- a/pocketid/.env.example
+++ b/pocketid/.env.example
@@ -1,4 +1,4 @@
-APP_URL=
+PUBLIC_APP_URL=
 TRUST_PROXY=
 MAXMIND_LICENSE_KEY=
 PUID=
--- a/pocketid/docker-compose.yml
+++ b/pocketid/docker-compose.yml
@@ -1,16 +1,16 @@
 services:
  pocket-id:
-    image: ghcr.io/pocket-id/pocket-id:v1.15.0
-    restart: always
+    image: ghcr.io/pocket-id/pocket-id:v0.35.4
+    restart: unless-stopped
    env_file: .env
    ports:
-      - "3043:1411"
+      - 3043:80
    volumes:
      #TODO change this to a more appropriate location
-      - ./data:/app/data
+      - "./data:/app/backend/data"
    # Optional healthcheck
    healthcheck:
-      test: "curl -f http://localhost:1411/healthz"
+      test: "curl -f http://localhost/health"
      interval: 1m30s
      timeout: 5s
      retries: 2
--- a/renovate.json
+++ b/renovate.json
@@ -16,15 +16,6 @@
        "/tika/",
        "/gotenberg/"
      ]
-    },
-    {
-      "groupName": "Matrix",
-      "matchPackageNames": [
-        "matrixdotorg/synapse",
-        "ghcr.io/element-hq/matrix-authentication-service",
-        "dock.mau.dev/mautrix/whatsapp",
-        "dock.mau.dev/mautrix/signal"
-      ]
    }
  ]
 }
--- a/shlink/.env.example
+++ b/shlink/.env.example
@@ -1,5 +0,0 @@
-SHLINK_DOMAIN=
-SHLINK_IS_HTTPS_ENABLED=
-SHLINK_GEOIP_LICENSE_KEY=
-
-SLINK_API_KEY=
--- a/shlink/docker-compose.yml
+++ b/shlink/docker-compose.yml
@@ -1,31 +0,0 @@
-services:
-  shlink:
-    image: shlinkio/shlink:4.6
-    container_name: shlink
-    restart: always
-    ports:
-      - "8085:8080"
-    environment:
-      DEFAULT_DOMAIN: ${SHLINK_DOMAIN}
-      IS_HTTPS_ENABLED: ${SHLINK_IS_HTTPS_ENABLED}
-      GEOLITE_LICENSE_KEY: ${SHLINK_GEOIP_LICENSE_KEY}
-      INITIAL_API_KEY: ${SHLINK_API_KEY}
-      DB_DRIVER: postgres
-      DB_HOST: shlink_db
-      DB_NAME: ${SHLINK_POSTGRES_DB}
-      DB_USER: ${SHLINK_POSTGRES_USER}
-      DB_PASSWORD: ${SHLINK_POSTGRES_PASSWORD}
-    depends_on:
-      - shlink_db
-  shlink_db:
-    image: postgres:17
-    container_name: shlink_db
-    restart: always
-    volumes:
-      - ${SHLINK_POSTGRES_DIR}:/var/lib/postgresql/data
-    environment:
-      POSTGRES_DB: ${SHLINK_POSTGRES_DB}
-      POSTGRES_USER: ${SHLINK_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${SHLINK_POSTGRES_PASSWORD}
-    ports:
-      - 5436:5432
--- a/spliit/.env.example
+++ b/spliit/.env.example
@@ -1,14 +0,0 @@
-TZ=Europe/Amsterdam
-
-# db
-SPLIIT_POSTGRES_DIR=
-SPLIIT_POSTGRES_PASSWORD=
-SPLIIT_POSTGRES_USER=spliit
-SPLIIT_POSTGRES_DB=spliit
-
-# Image upload (for receipts)
-NEXT_PUBLIC_ENABLE_EXPENSE_DOCUMENTS=true
-S3_UPLOAD_KEY=
-S3_UPLOAD_SECRET=
-S3_UPLOAD_BUCKET=
-S3_UPLOAD_REGION=
--- a/spliit/docker-compose.yml
+++ b/spliit/docker-compose.yml
@@ -1,28 +0,0 @@
-services:
-  spliit:
-    image: ghcr.io/spliit-app/spliit:1.19.1
-    restart: always
-    ports:
-      - 3001:3000
-    depends_on:
-      - spliit_db
-    env_file:
-      - .env
-    environment:
-      TZ: ${TZ}
-      POSTGRES_HOST: spliit_db
-      POSTGRES_DB: ${SPLIIT_POSTGRES_DB}
-      POSTGRES_USER: ${SPLIIT_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${SPLIIT_POSTGRES_PASSWORD}
-  spliit_db:
-    image: postgres:17
-    restart: always
-    volumes:
-      - ${SPLIIT_POSTGRES_DIR}:/var/lib/postgresql/data
-    ports:
-      - 5437:5432
-    environment:
-      TZ: ${TZ}
-      POSTGRES_DB: ${SPLIIT_POSTGRES_DB}
-      POSTGRES_USER: ${SPLIIT_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${SPLIIT_POSTGRES_PASSWORD}
--- a/synapse/.env.example
+++ b/synapse/.env.example
@@ -1,9 +1,10 @@
 SYNAPSE_POSTGRES_DATA_DIR=
 SYNAPSE_CONFIG_DIR=

-SYNAPSE_POSTGRES_DB=
-SYNAPSE_POSTGRES_USER=
-SYNAPSE_POSTGRES_PASSWORD=
+POSTGRES_DB=
+POSTGRES_USER=
+POSTGRES_PASSWORD=
+

 MAS_CONFIG_DIR=

@@ -11,21 +12,3 @@ MAS_POSTGRES_DATA_DIR=
 MAS_POSTGRES_DB=
 MAS_POSTGRES_USER=
 MAS_POSTGRES_PASSWORD=
-
-MAUTRIX_WHATSAPP_DATA_DIR=
-MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR=
-MAUTRIX_WHATSAPP_POSTGRES_DB=
-MAUTRIX_WHATSAPP_POSTGRES_USER=
-MAUTRIX_WHATSAPP_POSTGRES_PASSWORD=
-
-MAUTRIX_SIGNAL_DATA_DIR=
-MAUTRIX_SIGNAL_POSTGRES_DATA_DIR=
-MAUTRIX_SIGNAL_POSTGRES_DB=
-MAUTRIX_SIGNAL_POSTGRES_USER=
-MAUTRIX_SIGNAL_POSTGRES_PASSWORD=
-
-MATRIX_DOMAIN=
-
-LIVEKIT_DOMAIN=
-LIVEKIT_SECRET_KEY=
-LIVEKIT_CONFIG_DIR=
--- a/synapse/docker-compose.yml
+++ b/synapse/docker-compose.yml
@@ -1,68 +1,7 @@
 services:
-  element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.3.0
-    container_name: element-call-jwt
-    hostname: auth-server
-    environment:
-      - LK_JWT_PORT=8080
-      - LIVEKIT_URL=https://${LIVEKIT_DOMAIN}/livekit/sfu
-      - LIVEKIT_KEY=devkey
-      - LIVEKIT_SECRET=${LIVEKIT_SECRET_KEY}
-      - LIVEKIT_FULL_ACCESS_HOMESERVERS=${MATRIX_DOMAIN} 
-    restart: always
-    ports:
-      - 8071:8080
-  element-call-livekit:
-    image: livekit/livekit-server:v1.9.3
-    command: --config /etc/livekit.yaml
-    ports:
-      - "7880:7880/tcp"
-      - "7881:7881/tcp"
-      - "7882:7882/tcp"
-      - "50100-50200:50100-50200/udp"
-    restart: always
-    volumes:
-      - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
-  mautrix-signal:
-    container_name: mautrix-signal
-    image: dock.mau.dev/mautrix/signal:v0.2511.0
-    restart: always
-    volumes:
-      - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
-  mautrix-signal_db:
-    image: docker.io/library/postgres:17
-    restart: always
-    volumes:
-      - ${MAUTRIX_SIGNAL_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
-    environment:
-      POSTGRES_DB: ${MAUTRIX_SIGNAL_POSTGRES_DB}
-      POSTGRES_USER: ${MAUTRIX_SIGNAL_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${MAUTRIX_SIGNAL_POSTGRES_PASSWORD}
-    ports:
-      - 5439:5432
-  mautrix-whatsapp:
-    container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.2511.0
-    #image: petersmit27/mautrix-whatsapp:latest
-    restart: always
-    volumes:
-      - ${MAUTRIX_WHATSAPP_DATA_DIR}:/data
-    depends_on:
-      - mautrix-whatsapp_db
-  mautrix-whatsapp_db:
-    image: docker.io/library/postgres:17
-    restart: always
-    volumes:
-      - ${MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
-    environment:
-      POSTGRES_DB: ${MAUTRIX_WHATSAPP_POSTGRES_DB}
-      POSTGRES_USER: ${MAUTRIX_WHATSAPP_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${MAUTRIX_WHATSAPP_POSTGRES_PASSWORD}
-    ports:
-      - 5440:5432
  mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.6.0
-    restart: always
+    image: ghcr.io/element-hq/matrix-authentication-service:0.14.1
+    restart: unless-stopped
    working_dir: /config
    volumes:
      - ${MAS_CONFIG_DIR}:/config
@@ -74,31 +13,26 @@ services:
      - mas_db
  mas_db:
    image: docker.io/library/postgres:17
-    restart: always
+    restart: unless-stopped
    volumes:
      - ${MAS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: ${MAS_POSTGRES_DB}
      POSTGRES_USER: ${MAS_POSTGRES_USER}
      POSTGRES_PASSWORD: ${MAS_POSTGRES_PASSWORD}
-    ports:
-      - 5441:5432
  synapse_db:
    image: docker.io/library/postgres:17
-    restart: always
+    restart: unless-stopped
    volumes:
      - ${SYNAPSE_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
    environment:
-      POSTGRES_DB: ${SYNAPSE_POSTGRES_DB}
-      POSTGRES_USER: ${SYNAPSE_POSTGRES_USER}
-      POSTGRES_PASSWORD: ${SYNAPSE_POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_INITDB_ARGS: '--encoding=UTF-8  --locale=C'
-    ports:
-      - 5442:5432
  synapse:
-    container_name: synapse
-    image: matrixdotorg/synapse:v1.142.1
-    restart: always
+    image: matrixdotorg/synapse:v1.125.0
+    restart: unless-stopped
    volumes:
      - ${SYNAPSE_CONFIG_DIR}:/data
    ports:
@@ -106,4 +40,4 @@ services:
    depends_on:
      - synapse_db
      - mas
-      - mautrix-whatsapp
+
--- a/vaultwarden/docker-compose.yml
+++ b/vaultwarden/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
  vaultwarden:
    container_name: vaultwarden
-    image: vaultwarden/server:1.34.3
+    image: vaultwarden/server:1.33.2
    restart: always
    volumes:
      - ${VAULTWARDEN_DATA_LOCATION}:/data/
@@ -11,4 +11,4 @@ services:
    env_file:
      - .env
    ports:
-      - "8082:80"
+      - "8080:80"