Update docker.io/library/postgres Docker tag to v18

audiobookshelf/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   audiobookshelf:
-    image: ghcr.io/advplyr/audiobookshelf:2.32.1
+    image: ghcr.io/advplyr/audiobookshelf:2.31.0
     restart: always
     ports:
       - 13378:80

audiomuse/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   # Redis service for RQ (task queue)
   audiomuse-ai-redis:
-    image: redis:8-alpine
+    image: redis:7-alpine
     container_name: audiomuse-redis
     ports:
       - "6379:6379" # Expose Redis port to the host
@@ -21,8 +21,8 @@ services:
       POSTGRES_USER: ${AUDIOMUSE_POSTGRES_USER}
       POSTGRES_PASSWORD: ${AUDIOMUSE_POSTGRES_PASSWORD}
       POSTGRES_DB: ${AUDIOMUSE_POSTGRES_DB}
-    ports:
-      - "5435:5432" # Expose PostgreSQL port to the host
+#    ports:
+#      - "5432:5432" # Expose PostgreSQL port to the host
     volumes:
       - postgres-data:/var/lib/postgresql/data # Persistent storage for PostgreSQL data
     networks:
@@ -31,7 +31,7 @@ services:
 
   # AudioMuse-AI Flask application service
   audiomuse-ai-flask:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.8.9 # Reflects deployment.yaml
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
     container_name: audiomuse-ai-flask-app
     ports:
       - "8013:8000"
@@ -69,7 +69,7 @@ services:
 
   # AudioMuse-AI RQ Worker service
   audiomuse-ai-worker:
-    image: ghcr.io/neptunehub/audiomuse-ai:0.8.9 # Reflects deployment.yaml
+    image: ghcr.io/neptunehub/audiomuse-ai:0.8.2 # Reflects deployment.yaml
     container_name: audiomuse-ai-worker-instance
     env_file:
       - .env
@@ -123,4 +123,4 @@ volumes:
   postgres-data:
 
 networks:
-  audiomuse:
+  audiomuse:

baikal/.env.example

@@ -0,0 +1,2 @@
+BAIKAL_CONFIG_DIR=
+BAIKAL_DATA_DIR=

baikal/docker-compose.yml

@@ -0,0 +1,11 @@
+services:
+  baikal:
+    image: ckulka/baikal:0.10.1-nginx
+    restart: always
+    ports:
+      - "8083:80"
+    volumes:
+      - ${BAIKAL_CONFIG_DIR}:/var/www/baikal/config
+      - ${BAIKAL_DATA_DIR}:/var/www/baikal/Specific
+    env_file:
+      - .env

docker-compose.yml

@@ -1,10 +1,10 @@
 include:
   - audiobookshelf/docker-compose.yml
   - audiomuse/docker-compose.yml
+  - baikal/docker-compose.yml
   - gitea/docker-compose.yml
   - immich/docker-compose.yml
   - jellyfin/docker-compose.yml
-  - monitoring/docker-compose.yml
   - nextcloud/docker-compose.yml
   - paperless/docker-compose.yml
   - pihole/docker-compose.yml
@@ -13,5 +13,5 @@ include:
   - spliit/docker-compose.yml
   - shlink/docker-compose.yml
   - synapse/docker-compose.yml
-#  - updater/docker-compose.yml
-  - vaultwarden/docker-compose.yml
+  - updater/docker-compose.yml
+  - vaultwarden/docker-compose.yml

gitea/docker-compose.yml

@@ -14,7 +14,7 @@ services:
       - "3000:3000"
       - "2222:2222"
   gitea-runner:
-    image: gitea/act_runner:0.3.0
+    image: gitea/act_runner:0.2.13
     restart: always
     environment:
       CONFIG_FILE: /config.yaml
@@ -24,4 +24,4 @@ services:
     volumes:
       - ./runner-config.yaml:/config.yaml
       - ${GITEA_RUNNER_DATA_LOCATION}:/data
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock

immich/.env.example

@@ -8,8 +8,3 @@ IMMICH_POSTGRES_USER=
 IMMICH_POSTGRES_PASSWORD=
 
 REDIS_HOSTNAME=
-
-IMMICH_EXTERNAL_MEDIA_LOCATION=
-
-# Default timezone for images without a timezone set
-TZ=

immich/docker-compose.yml

@@ -1,13 +1,13 @@
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.5.6
+    image: ghcr.io/immich-app/immich-server:v2.4.1
     # extends:
     #   file: hwaccel.transcoding.yml
     #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
     volumes:
+      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
       - ${UPLOAD_LOCATION}:/data
-      - ${IMMICH_EXTERNAL_MEDIA_LOCATION}:/external:ro
       - /etc/localtime:/etc/localtime:ro
     env_file:
       - .env
@@ -25,7 +25,7 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.5.6
+    image: ghcr.io/immich-app/immich-machine-learning:v2.4.1
     volumes:
       - model-cache:/cache
     env_file:

jellyfin/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   jellyfin:
-    image: jellyfin/jellyfin:10.11.6
+    image: jellyfin/jellyfin:10.11.5
     user: ${JELLYFIN_USER_UID}:${JELLYFIN_USER_GID}
     network_mode: 'host'
     restart: always

monitoring/.env.example

@@ -1,27 +0,0 @@
-GRAFANA_ADMIN_USER=
-GRAFANA_ADMIN_PASSWORD=
-GRAFANA_DOMAIN=
-GRAFANA_ROOT_URL=
-GRAFANA_DISABLE_LOGIN_FORM=false
-
-GRAFANA_SMTP_ENABLED=true
-GRAFANA_SMTP_HOST=
-GRAFANA_SMTP_USER=
-GRAFANA_SMTP_PASSWORD=
-GRAFANA_SMTP_FROM=
-
-GRAFANA_DATA_DIR=
-
-PROMETHEUS_CONFIG_PATH=
-PROMETHEUS_DATA_DIR=
-
-BLACKBOX_CONFIG_PATH=
-
-LOKI_CONFIG_PATH=
-LOKI_DATA_DIR=
-
-ALLOY_CONFIG_PATH=
-
-GMF_MATRIX_HOMESERVER=
-GMF_MATRIX_USER=
-GMF_MATRIX_TOKEN=

monitoring/docker-compose.yml

@@ -1,115 +0,0 @@
-services:
-  # Prometheus - Metrics Collection
-  prometheus:
-    image: prom/prometheus:v3.9.1
-    restart: unless-stopped
-    ports:
-      - "9091:9090"
-    volumes:
-      - ${PROMETHEUS_CONFIG_PATH}:/etc/prometheus/prometheus.yml:ro
-      - ${PROMETHEUS_DATA_DIR}:/prometheus
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--storage.tsdb.path=/prometheus'
-      - '--web.console.libraries=/etc/prometheus/console_libraries'
-      - '--web.console.templates=/etc/prometheus/consoles'
-      - '--storage.tsdb.retention.time=200h'
-      - '--web.enable-lifecycle'
-      - '--web.enable-admin-api'
-
-  # Grafana - Visualization Dashboard
-  grafana:
-    image: grafana/grafana:12.4.0
-    restart: unless-stopped
-    ports:
-      - "3002:3000"
-    volumes:
-      - ${GRAFANA_DATA_DIR}:/var/lib/grafana
-    environment:
-      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER}
-      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}
-      - GF_USERS_ALLOW_SIGN_UP=false
-      - GF_SERVER_DOMAIN=${GRAFANA_DOMAIN}
-      - GF_SERVER_ROOT_URL=${GRAFANA_ROOT_URL}
-      - GF_AUTH_DISABLE_LOGIN_FORM=${GRAFANA_DISABLE_LOGIN_FORM}
-      - GF_SMTP_ENABLED=${GRAFANA_SMTP_ENABLED}
-      - GF_SMTP_HOST=${GRAFANA_SMTP_HOST}
-      - GF_SMTP_USER=${GRAFANA_SMTP_USER}
-      - GF_SMTP_PASSWORD=${GRAFANA_SMTP_PASSWORD}
-      - GF_SMTP_FROM_ADDRESS=${GRAFANA_SMTP_FROM}
-    depends_on:
-      - prometheus
-
-  loki:
-    image: grafana/loki:3.6.7
-    restart: unless-stopped
-    ports:
-      - "3100:3100"
-    volumes:
-      - ${LOKI_CONFIG_PATH}:/etc/loki/local-config.yaml
-      - ${LOKI_DATA_DIR}:/loki
-    command:
-      - '-config.file=/etc/loki/local-config.yaml'
-      - '-target=all'
-
-  alloy:
-    image: grafana/alloy:v1.13.2
-    restart: unless-stopped
-    ports:
-      - "12345:12345"
-    volumes:
-      - ${ALLOY_CONFIG_PATH}:/etc/alloy/config.alloy:ro
-      - /var/log:/var/log:ro
-
-  # Node Exporter - Host System Metrics
-  node_exporter:
-    image: prom/node-exporter:v1.10.2
-    restart: unless-stopped
-    ports:
-      - "9100:9100"
-    volumes:
-      - /proc:/host/proc:ro
-      - /sys:/host/sys:ro
-      - /:/rootfs:ro
-    command:
-      - '--path.procfs=/host/proc'
-      - '--path.rootfs=/rootfs'
-      - '--path.sysfs=/host/sys'
-      - '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
-
-  # cAdvisor - Container Metrics
-  cadvisor:
-    image: gcr.io/cadvisor/cadvisor:v0.55.1
-    restart: unless-stopped
-    privileged: true
-    ports:
-      - "8081:8080"
-    volumes:
-      - /:/rootfs:ro
-      - /var/run:/var/run:ro
-      - /sys:/sys:ro
-      - /var/lib/docker/:/var/lib/docker:ro
-    devices:
-      - /dev/kmsg
-    command:
-      - '--housekeeping_interval=30s'
-      - '--max_housekeeping_interval=35s'
-      - '--event_storage_event_limit=default=0'
-      - '--event_storage_age_limit=default=0'
-      - '--disable_metrics=disk,diskIO,tcp,udp,percpu,sched,process,hugetlb,referenced_memory'
-      - '--docker_only=true'
-
-  # Blackbox Exporter - Endpoint Monitoring
-  blackbox_exporter:
-    image: prom/blackbox-exporter:v0.28.0
-    restart: unless-stopped
-    ports:
-      - "9115:9115"
-    volumes:
-      - ${BLACKBOX_CONFIG_PATH}:/etc/blackbox_exporter/config.yml
-
-  grafana-matrix-forwarder:
-    build: ./grafana-matrix-forwarder
-    restart: unless-stopped
-    env_file:
-      - .env

monitoring/grafana-matrix-forwarder/Dockerfile

@@ -1,9 +0,0 @@
-FROM alpine
-
-# Create main app folder to run from
-WORKDIR /app
-
-# Copy compiled binary to release image
-COPY grafana-matrix-forwarder /app/grafana-matrix-forwarder
-
-ENTRYPOINT ["/app/grafana-matrix-forwarder"]

paperless/docker-compose.yml

@@ -6,7 +6,7 @@ services:
       - ${PAPERLESS_REDIS_DATA_DIR}:/data
 
   db:
-    image: docker.io/library/postgres:17
+    image: docker.io/library/postgres:18
     restart: always
     volumes:
       - ${PAPERLESS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -18,7 +18,7 @@ services:
       - 5434:5432
 
   paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.10
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.2
     restart: always
     depends_on:
       - db
@@ -49,7 +49,7 @@ services:
       PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
 
   gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.27.0
+    image: docker.io/gotenberg/gotenberg:8.25.1
     restart: always
 
     # The gotenberg chromium route is used to convert .eml files. We do not

pihole/docker-compose.yml

@@ -2,7 +2,7 @@
 services:
   pihole:
     container_name: pihole
-    image: pihole/pihole:2026.02.0
+    image: pihole/pihole:2025.11.1
     ports:
       # DNS Ports
       - "53:53/tcp"

pocketid/.env.example

@@ -3,5 +3,3 @@ TRUST_PROXY=
 MAXMIND_LICENSE_KEY=
 PUID=
 PGID=
-ENCRYPTION_KEY=
-POCKETID_DATA_DIR=

pocketid/docker-compose.yml

@@ -1,16 +1,17 @@
 services:
   pocket-id:
-    image: ghcr.io/pocket-id/pocket-id:v2.3.0
+    image: ghcr.io/pocket-id/pocket-id:v1.16.0
     restart: always
     env_file: .env
     ports:
       - "3043:1411"
     volumes:
-      - ${POCKETID_DATA_DIR}:/app/data
+      #TODO change this to a more appropriate location
+      - ./data:/app/data
     # Optional healthcheck
     healthcheck:
       test: "curl -f http://localhost:1411/healthz"
       interval: 1m30s
       timeout: 5s
       retries: 2
-      start_period: 10s
+      start_period: 10s

shlink/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   shlink:
-    image: shlinkio/shlink:5.0
+    image: shlinkio/shlink:4.6
     container_name: shlink
     restart: always
     ports:

synapse/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.4.1
+    image: ghcr.io/element-hq/lk-jwt-service:0.4.0
     container_name: element-call-jwt
     hostname: auth-server
     environment:
@@ -13,7 +13,7 @@ services:
     ports:
       - 8071:8080
   element-call-livekit:
-    image: livekit/livekit-server:v1.9.11
+    image: livekit/livekit-server:v1.9.8
     command: --config /etc/livekit.yaml
     ports:
       - "7880:7880/tcp"
@@ -25,12 +25,12 @@ services:
       - ${LIVEKIT_CONFIG_DIR}/config.yaml:/etc/livekit.yaml:ro
   mautrix-signal:
     container_name: mautrix-signal
-    image: dock.mau.dev/mautrix/signal:v0.2602.1
+    image: dock.mau.dev/mautrix/signal:v0.2512.0
     restart: always
     volumes:
       - ${MAUTRIX_SIGNAL_DATA_DIR}:/data
   mautrix-signal_db:
-    image: docker.io/library/postgres:17
+    image: docker.io/library/postgres:18
     restart: always
     volumes:
       - ${MAUTRIX_SIGNAL_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -42,7 +42,7 @@ services:
       - 5439:5432
   mautrix-whatsapp:
     container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.2602.0
+    image: dock.mau.dev/mautrix/whatsapp:v0.2512.0
     #image: petersmit27/mautrix-whatsapp:latest
     restart: always
     volumes:
@@ -50,7 +50,7 @@ services:
     depends_on:
       - mautrix-whatsapp_db
   mautrix-whatsapp_db:
-    image: docker.io/library/postgres:17
+    image: docker.io/library/postgres:18
     restart: always
     volumes:
       - ${MAUTRIX_WHATSAPP_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -61,7 +61,7 @@ services:
     ports:
       - 5440:5432
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.12.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.8.0
     restart: always
     working_dir: /config
     volumes:
@@ -73,7 +73,7 @@ services:
     depends_on:
       - mas_db
   mas_db:
-    image: docker.io/library/postgres:17
+    image: docker.io/library/postgres:18
     restart: always
     volumes:
       - ${MAS_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -84,7 +84,7 @@ services:
     ports:
       - 5441:5432
   synapse_db:
-    image: docker.io/library/postgres:17
+    image: docker.io/library/postgres:18
     restart: always
     volumes:
       - ${SYNAPSE_POSTGRES_DATA_DIR}:/var/lib/postgresql/data
@@ -97,7 +97,7 @@ services:
       - 5442:5432
   synapse:
     container_name: synapse
-    image: matrixdotorg/synapse:v1.148.0
+    image: matrixdotorg/synapse:v1.144.0
     restart: always
     volumes:
       - ${SYNAPSE_CONFIG_DIR}:/data
@@ -107,10 +107,3 @@ services:
       - synapse_db
       - mas
       - mautrix-whatsapp
-  element-admin:
-    image: oci.element.io/element-admin:0.1.10
-    restart: unless-stopped
-    ports:
-      - "8079:8080"
-    environment:
-      - SERVER_NAME=${MATRIX_DOMAIN}

updater/Dockerfile

@@ -16,7 +16,7 @@ RUN echo \
 
 # Install git and docker-compose
 RUN apt-get update && \
-    apt-get install -y git docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin docker-model-plugin && \
+    apt-get install -y git docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin && \
     rm -rf /var/lib/apt/lists/*
 
 # Create .docker directory and set permissions

vaultwarden/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   vaultwarden:
     container_name: vaultwarden
-    image: vaultwarden/server:1.35.4
+    image: vaultwarden/server:1.34.3
     restart: always
     volumes:
       - ${VAULTWARDEN_DATA_LOCATION}:/data/