Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v2.20.11

2026-03-19 00:10:25 +00:00
13 changed files with 25 additions and 144 deletions
--- a/aiworkshop.md
+++ b/aiworkshop.md
--- a/audiobookshelf/docker-compose.yml
+++ b/audiobookshelf/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
  audiobookshelf:
-    image: ghcr.io/advplyr/audiobookshelf:2.33.1
+    image: ghcr.io/advplyr/audiobookshelf:2.32.1
    restart: always
    ports:
      - 13378:80
--- a/audiomuse/docker-compose.yml
+++ b/audiomuse/docker-compose.yml
@@ -31,7 +31,7 @@ services:

  # AudioMuse-AI Flask application service
  audiomuse-ai-flask:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.9.5 # Reflects deployment.yaml
+    image: ghcr.io/neptunehub/audiomuse-ai:0.9.3 # Reflects deployment.yaml
    container_name: audiomuse-ai-flask-app
    ports:
      - "8013:8000"
@@ -69,7 +69,7 @@ services:

  # AudioMuse-AI RQ Worker service
  audiomuse-ai-worker:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.9.5 # Reflects deployment.yaml
+    image: ghcr.io/neptunehub/audiomuse-ai:0.9.3 # Reflects deployment.yaml
    container_name: audiomuse-ai-worker-instance
    env_file:
      - .env
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,8 +10,8 @@ include:
  - pihole/docker-compose.yml
  - pingvin/docker-compose.yml
  - pocketid/docker-compose.yml
-#  - spliit/docker-compose.yml migrated to k8s
+  - spliit/docker-compose.yml
  - shlink/docker-compose.yml
  - synapse/docker-compose.yml
 #  - updater/docker-compose.yml
-#  - vaultwarden/docker-compose.yml
+  - vaultwarden/docker-compose.yml
--- a/gitea/docker-compose.yml
+++ b/gitea/docker-compose.yml
@@ -14,7 +14,7 @@ services:
      - "3000:3000"
      - "2222:2222"
  gitea-runner:
-    image: gitea/act_runner:0.3.1
+    image: gitea/act_runner:0.3.0
    restart: always
    environment:
      CONFIG_FILE: /config.yaml
--- a/immich/docker-compose.yml
+++ b/immich/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
  immich-server:
    container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.7.5
+    image: ghcr.io/immich-app/immich-server:v2.5.6
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
@@ -25,7 +25,7 @@ services:

  immich-machine-learning:
    container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.7.5
+    image: ghcr.io/immich-app/immich-machine-learning:v2.5.6
    volumes:
      - model-cache:/cache
    env_file:
--- a/jellyfin/docker-compose.yml
+++ b/jellyfin/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
  jellyfin:
-    image: jellyfin/jellyfin:10.11.8
+    image: jellyfin/jellyfin:10.11.6
    user: ${JELLYFIN_USER_UID}:${JELLYFIN_USER_GID}
    network_mode: 'host'
    restart: always
--- a/monitoring/docker-compose.yml
+++ b/monitoring/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
  # Prometheus - Metrics Collection
  prometheus:
-    image: prom/prometheus:v3.10.0
+    image: prom/prometheus:v3.9.1
    restart: unless-stopped
    ports:
      - "9091:9090"
@@ -19,7 +19,7 @@ services:

  # Grafana - Visualization Dashboard
  grafana:
-    image: grafana/grafana:12.4.2
+    image: grafana/grafana:12.4.0
    restart: unless-stopped
    ports:
      - "3002:3000"
@@ -41,7 +41,7 @@ services:
      - prometheus

  loki:
-    image: grafana/loki:3.7.1
+    image: grafana/loki:3.6.7
    restart: unless-stopped
    ports:
      - "3100:3100"
@@ -53,7 +53,7 @@ services:
      - '-target=all'

  alloy:
-    image: grafana/alloy:v1.16.0
+    image: grafana/alloy:v1.13.2
    restart: unless-stopped
    ports:
      - "12345:12345"
--- a/paperless/docker-compose.yml
+++ b/paperless/docker-compose.yml
@@ -18,7 +18,7 @@ services:
      - 5434:5432

  paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.13
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.11
    restart: always
    depends_on:
      - db
@@ -49,7 +49,7 @@ services:
      PAPERLESS_REDIRECT_LOGIN_TO_SSO: true

  gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.29.1
+    image: docker.io/gotenberg/gotenberg:8.27.0
    restart: always

    # The gotenberg chromium route is used to convert .eml files. We do not
@@ -60,5 +60,5 @@ services:
      - "--chromium-allow-list=file:///tmp/.*"

  tika:
-    image: docker.io/apache/tika:3.3.0.0
+    image: docker.io/apache/tika:3.2.3.0
    restart: always
--- a/pihole/docker-compose.yml
+++ b/pihole/docker-compose.yml
@@ -2,7 +2,7 @@
 services:
  pihole:
    container_name: pihole
-    image: pihole/pihole:2026.04.0
+    image: pihole/pihole:2026.02.0
    ports:
      # DNS Ports
      - "53:53/tcp"
--- a/pocketid/docker-compose.yml
+++ b/pocketid/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
  pocket-id:
-    image: ghcr.io/pocket-id/pocket-id:v2.5.0
+    image: ghcr.io/pocket-id/pocket-id:v2.4.0
    restart: always
    env_file: .env
    ports:
--- a/spliit/spliit.yaml
+++ b/spliit/spliit.yaml
@@ -1,119 +0,0 @@
---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: spliit
---
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: spliit-db
-  namespace: spliit
-spec:
-  instances: 1
-  storage:
-    size: 2Gi
-  bootstrap:
-    initdb:
-      database: spliit
-      owner: spliit
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: spliit
-  namespace: spliit
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: spliit
-  template:
-    metadata:
-      labels:
-        app: spliit
-    spec:
-      containers:
-        - name: spliit
-          image: petersmit27/spliit:latest
-          ports:
-            - containerPort: 3000
-          env:
-            - name: POSTGRES_PRISMA_URL
-              valueFrom:
-                secretKeyRef:
-                  name: spliit-db-app
-                  key: uri
-            - name: POSTGRES_URL_NON_POOLING
-              valueFrom:
-                secretKeyRef:
-                  name: spliit-db-app
-                  key: uri
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: spliit
-  namespace: spliit
-spec:
-  selector:
-    app: spliit
-  ports:
-    - port: 3000
-      targetPort: 3000
---
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: spliit
-  namespace: spliit
-spec:
-  parentRefs:
-    - name: main
-      namespace: envoy-gateway-system
-      sectionName: https-smittenfeld
-  hostnames:
-    - split.smittenfeld.nl
-  rules:
-    - backendRefs:
-        - name: spliit
-          port: 3000
---
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: spliit-create-group
-  namespace: spliit
-spec:
-  parentRefs:
-    - name: main
-      namespace: envoy-gateway-system
-      sectionName: https-smittenfeld
-  hostnames:
-    - split.smittenfeld.nl
-  rules:
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /groups/create
-      backendRefs:
-        - name: spliit
-          port: 3000
---
-apiVersion: gateway.envoyproxy.io/v1alpha1
-kind: SecurityPolicy
-metadata:
-  name: spliit-create-ip-restriction
-  namespace: spliit
-spec:
-  targetRefs:
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      name: spliit-create-group
-  authorization:
-    defaultAction: Deny
-    rules:
-      - action: Allow
-        principal:
-          clientCIDRs:
-            - 188.91.195.91/32
--- a/synapse/docker-compose.yml
+++ b/synapse/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
  element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.4.3
+    image: ghcr.io/element-hq/lk-jwt-service:0.4.1
    container_name: element-call-jwt
    hostname: auth-server
    environment:
@@ -13,7 +13,7 @@ services:
    ports:
      - 8071:8080
  element-call-livekit:
-    image: livekit/livekit-server:v1.11.0
+    image: livekit/livekit-server:v1.9.12
    command: --config /etc/livekit.yaml
    ports:
      - "7880:7880/tcp"
@@ -25,7 +25,7 @@ services:
      - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
  mautrix-signal:
    container_name: mautrix-signal
-    image: dock.mau.dev/mautrix/signal:v26.02.2
+    image: dock.mau.dev/mautrix/signal:v0.2603.0
    restart: always
    volumes:
      - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
@@ -42,7 +42,7 @@ services:
      - 5439:5432
  mautrix-whatsapp:
    container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.2604.0
+    image: dock.mau.dev/mautrix/whatsapp:v0.2603.0
    #image: petersmit27/mautrix-whatsapp:latest
    restart: always
    volumes:
@@ -61,7 +61,7 @@ services:
    ports:
      - 5440:5432
  mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.15.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.13.0
    restart: always
    working_dir: /config
    volumes:
@@ -97,7 +97,7 @@ services:
      - 5442:5432
  synapse:
    container_name: synapse
-    image: matrixdotorg/synapse:v1.151.0
+    image: matrixdotorg/synapse:v1.149.1
    restart: always
    volumes:
      - ${SYNAPSE_CONFIG_DIR}:/data
@@ -108,7 +108,7 @@ services:
      - mas
      - mautrix-whatsapp
  element-admin:
-    image: oci.element.io/element-admin:0.1.11
+    image: oci.element.io/element-admin:0.1.10
    restart: unless-stopped
    ports:
      - "8079:8080"