Update ghcr.io/jlesage/handbrake Docker tag to v26.03.1

Reviewed-on: #197

.archived/adguardhome/.env

@@ -1,6 +0,0 @@
-# Paths
-APPDATA_PATH=/home/username/appdata
-
-# Ports
-DNS_PORT=53
-ADMIN_PORT=

.archived/bytestash/.env

@@ -1,14 +0,0 @@
-# Environment Variables
-JWT_SECRET=
-TOKEN_EXPIRY=
-ALLOW_NEW_ACCOUNTS=
-DEBUG=
-DISABLE_ACCOUNTS=
-DISABLE_INTERNAL_ACCOUNTS=
-OIDC_ENABLED=
-
-# Paths
-APPDATA_PATH=/home/username/appdata
-
-# Ports
-PORT=

.archived/caddy-cloudflare-ddns/docker-compose.yml

@@ -1,25 +0,0 @@
-services:
-  caddy:
-    image: docker.io/ryuupendragon/caddy-cloudflare-ddns:2.10.0
-    container_name: caddy
-    cap_add:
-      - NET_ADMIN
-    environment:
-      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
-    volumes:
-      - ${APPDATA_PATH}/caddy/caddy-file:/etc/caddy
-      - ${APPDATA_PATH}/caddy/caddy-config:/config
-      - ${APPDATA_PATH}/caddy/caddy-data:/data
-      - ${APPDATA_PATH}/caddy/caddy-logs:/logs
-      - ${APPDATA_PATH}/caddy/caddy-srv:/srv
-    ports:
-      - ${HTTP_PORT}:80
-      - ${HTTPS_PORT}:443
-      - ${HTTPS_PORT}:443/udp
-    networks:
-      - frontend
-    restart: unless-stopped
-
-networks:
-  frontend:
-    external: true

.archived/forgejo/docker-compose.yml

@@ -1,44 +0,0 @@
-services:
-  forgejo_db:
-    image: docker.io/library/mariadb:11.7.2
-    container_name: forgejo_db
-    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW --innodb-file-per-table=1 --skip-innodb-read-only-compressed
-    environment:
-      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
-      - MYSQL_USER=${MYSQL_USER}
-      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
-      - MYSQL_DATABASE=${MYSQL_DATABASE}
-    volumes:
-      - ${APPDATA_PATH}/forgejo/db:/var/lib/mysql
-    ports:
-      - ${DB_PORT}:3306
-    restart: unless-stopped
-    healthcheck:
-      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
-      start_period: 10s
-      interval: 10s
-      timeout: 5s
-      retries: 3
-
-  forgejo_server:
-    image: codeberg.org/forgejo/forgejo:11.0.1-rootless
-    container_name: forgejo_server
-    depends_on:
-      forgejo_db:
-        condition: service_healthy
-    user: ${PUID}:${PGID}
-    environment:
-      - FORGEJO__database__DB_TYPE=mysql
-      - FORGEJO__database__HOST=forgejo_db
-      - FORGEJO__database__NAME=${MYSQL_DATABASE}
-      - FORGEJO__database__USER=${MYSQL_USER}
-      - FORGEJO__database__PASSWD=${MYSQL_PASSWORD}
-    volumes:
-      - ${APPDATA_PATH}/forgejo/config:/etc/gitea
-      - ${APPDATA_PATH}/forgejo/data:/var/lib/gitea
-      - /etc/timezone:/etc/timezone:ro
-      - /etc/localtime:/etc/localtime:ro
-    ports:
-      - ${SERVER_PORT}:3000
-      - ${SSH_PORT}:22
-    restart: unless-stopped

backrest/compose.yaml

@@ -1,7 +1,7 @@
 services:
   backrest:
     container_name: backrest
-    image: docker.io/garethgeorge/backrest:v1.11.2@sha256:6ecf25925dafcb6b37ab871d23c1d424a6f5008191a631c0b520641ec22a3f84
+    image: docker.io/garethgeorge/backrest:v1.12.0@sha256:448fee1cb4cdf3f7d7078078480d38713673924ad415bfdf84bf9e49ff570201
     restart: unless-stopped
     hostname: ${HOSTNAME}
     environment:

dockhand/compose.yaml

@@ -0,0 +1,44 @@
+services:
+  dockhand_db:
+    container_name: dockhand_db
+    image: docker.io/library/postgres:18.2@sha256:9b5bd946f3a507db72c55959700e517463e8d5dbb6f7eb30d920d5bcf6951431
+    restart: unless-stopped
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+      - PGDATA=/var/lib/postgresql/18/docker
+    volumes:
+      - ./db:/var/lib/postgresql
+    networks:
+      - backend
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
+  dockhand:
+    container_name: dockhand
+    image: fnsys/dockhand:v1.0.18@sha256:81ee6728840ea99978d811d9dfa61e5445467e01502320fa7733bcf7e567d105
+    restart: unless-stopped
+    depends_on:
+      dockhand_db:
+        condition: service_healthy
+    environment:
+      - DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@dockhand_db:5432/${POSTGRES_DB}
+    volumes:
+      - ./data:/app/data
+      - /var/run/docker.sock:/var/run/docker.sock
+    ports:
+      - 3000:3000
+    networks:
+      - frontend
+      - backend
+
+networks:
+  frontend:
+    external: true
+  backend:
+    external: true

gitea-runner/compose.yaml

@@ -1,7 +1,7 @@
 services:
   gitea_runner:
     container_name: gitea_runner
-    image: docker.io/gitea/act_runner:0.2.13@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
+    image: docker.io/gitea/act_runner:0.3.0@sha256:8368754bb612a1deb07ed604e3b955338aefc01576d4d0d92e8dd82f29250fcd
     restart: unless-stopped
     environment:
       CONFIG_FILE: /config.yml
@@ -12,3 +12,5 @@ services:
       - ./config.yml:/config.yml
       - ./data:/data
       - /var/run/docker.sock:/var/run/docker.sock
+    ports:
+      - ${PORT}:${PORT}

gitea-runner/config.yml

@@ -32,31 +32,40 @@ runner:
   fetch_timeout: 5s
   # The interval for fetching the job from the Gitea instance.
   fetch_interval: 2s
+  # The github_mirror of a runner is used to specify the mirror address of the github that pulls the action repository.
+  # It works when something like `uses: actions/checkout@v4` is used and DEFAULT_ACTIONS_URL is set to github,
+  # and github_mirror is not empty. In this case,
+  # it replaces https://github.com with the value here, which is useful for some special network environments.
+  github_mirror: ''
   # The labels of a runner are used to determine which jobs the runner can run, and how to run them.
   # Like: "macos-arm64:host" or "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
   # Find more images provided by Gitea at https://gitea.com/docker.gitea.com/runner-images .
   # If it's empty when registering, it will ask for inputting labels.
   # If it's empty when execute `daemon`, will use labels in `.runner` file.
   labels:
-    - "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
-    - "ubuntu-arm64:docker://docker.gitea.com/runner-images:ubuntu-latest"
-    - "ubuntu-22.04:docker://docker.gitea.com/runner-images:ubuntu-22.04"
-    - "ubuntu-cat:docker://ghcr.io/catthehacker/ubuntu:act-latest"
-    - "bookworm:docker://node:20-bookworm"
-    - "bookworm-slim:docker://node:24-bookworm-slim"
-    - "bullseye:docker://node:20-bullseye"
-    - "bullseye-slim:docker://node:20-bullseye-slim"
+    - "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-24.04"
+    - "ubuntu-latest-full:docker://ghcr.io/catthehacker/ubuntu:full-24.04"
+    - "ubuntu-arm64:docker://ghcr.io/catthehacker/ubuntu:act-24.04"
+    - "ubuntu-arm64-full:docker://ghcr.io/catthehacker/ubuntu:full-24.04"
+    - "ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04"
+    - "ubuntu-22.04-full:docker://ghcr.io/catthehacker/ubuntu:full-22.04"
+    - "trixie:docker://node:25-trixie"
+    - "trixie-slim:docker://node:25-trixie-slim"
+    - "bookworm:docker://node:25-bookworm"
+    - "bookworm-slim:docker://node:25-bookworm-slim"
+    - "bullseye:docker://node:25-bullseye"
+    - "bullseye-slim:docker://node:25-bullseye-slim"
 
 cache:
   # Enable cache server to use actions/cache.
-  enabled: false
+  enabled: true
   # The directory to store the cache data.
   # If it's empty, the cache data will be stored in $HOME/.cache/actcache.
   dir: ""
   # The host of the cache server.
   # It's not for the address to listen, but the address to connect from job containers.
   # So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
-  host: ""
+  host: "IP"
   # The port of the cache server.
   # 0 means to use a random available port.
   port: 0
@@ -99,6 +108,10 @@ container:
   force_pull: true
   # Rebuild docker image(s) even if already present
   force_rebuild: false
+  # Always require a reachable docker daemon, even if not required by act_runner
+  require_docker: false
+  # Timeout to wait for the docker daemon to be reachable, if docker is required by require_docker or act_runner
+  docker_timeout: 0s
 
 host:
   # The parent directory of a job's working directory.

gitea-runner/docker-compose-multi.yml

@@ -1,42 +0,0 @@
-services:
-  gitea_runner1:
-    container_name: gitea_runner1
-    image: docker.io/gitea/act_runner:0.2.13@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
-    restart: unless-stopped
-    environment:
-      CONFIG_FILE: /config.yml
-      GITEA_INSTANCE_URL: "${INSTANCE_URL}"
-      GITEA_RUNNER_REGISTRATION_TOKEN: "${REGISTRATION_TOKEN}"
-      GITEA_RUNNER_NAME: "${RUNNER_NAME1}"
-    volumes:
-      - ./config.yml:/config.yml
-      - ./data1:/data
-      - /var/run/docker.sock:/var/run/docker.sock
-
-  gitea_runner2:
-    container_name: gitea_runner2
-    image: docker.io/gitea/act_runner:0.2.13@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
-    restart: unless-stopped
-    environment:
-      CONFIG_FILE: /config.yml
-      GITEA_INSTANCE_URL: "${INSTANCE_URL}"
-      GITEA_RUNNER_REGISTRATION_TOKEN: "${REGISTRATION_TOKEN}"
-      GITEA_RUNNER_NAME: "${RUNNER_NAME2}"
-    volumes:
-      - ./config.yml:/config.yml
-      - ./data2:/data
-      - /var/run/docker.sock:/var/run/docker.sock
-
-  gitea_runner3:
-    container_name: gitea_runner3
-    image: docker.io/gitea/act_runner:0.2.13@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
-    restart: unless-stopped
-    environment:
-      CONFIG_FILE: /config.yml
-      GITEA_INSTANCE_URL: "${INSTANCE_URL}"
-      GITEA_RUNNER_REGISTRATION_TOKEN: "${REGISTRATION_TOKEN}"
-      GITEA_RUNNER_NAME: "${RUNNER_NAME3}"
-    volumes:
-      - ./config.yml:/config.yml
-      - ./data3:/data
-      - /var/run/docker.sock:/var/run/docker.sock

gotify/compose.yaml

@@ -1,7 +1,7 @@
 services:
   gotify:
     container_name: gotify
-    image: ghcr.io/gotify/server:2.8.0@sha256:4702c392ca723d5016fc938c8b22572c3509efca812bdc5221d25158ba0201e3
+    image: ghcr.io/gotify/server:2.9.0@sha256:4df8c1bb23646b8d8b308e881866474bfae4a9a5b3980e5047f87eb84017e8a0
     restart: unless-stopped
     environment:
       - TZ=${TZ}

handbrake/compose.yaml

@@ -0,0 +1,34 @@
+services:
+  handbrake:
+    container_name: handbrake
+    image: ghcr.io/jlesage/handbrake:v26.03.1
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          cpus: '${CPU_LIMIT}'
+    environment:
+      - USER_ID=${USER_ID}
+      - GROUP_ID=${GROUP_ID}
+      - UMASK=${UMASK}
+      - TZ=${TZ}
+      - DISPLAY_WIDTH=${DISPLAY_WIDTH}
+      - DISPLAY_HEIGHT=${DISPLAY_HEIGHT}
+      - DARK_MODE=${DARK_MODE}
+      - WEB_AUDIO=${WEB_AUDIO}
+      - HANDBRAKE_GUI=${HANDBRAKE_GUI}
+      - AUTOMATED_CONVERSION=${AUTOMATED_CONVERSION}
+    volumes:
+      - ${APPDATA_PATH}/handbrake/config:/config
+      - ${DATA_PATH}:/storage:ro
+      - ${APPDATA_PATH}/handbrake/watch:/watch
+      - ${APPDATA_PATH}/handbrake/output:/output
+      - ${APPDATA_PATH}/handbrake/trash:/trash
+    ports:
+      - ${PORT}:5800
+    networks:
+      - frontend
+
+networks:
+  frontend:
+    external: true

hawser/compose.yaml

@@ -0,0 +1,19 @@
+services:
+  hawser:
+    container_name: hawser
+    image: ghcr.io/finsys/hawser:0.2.29@sha256:b6f8eabb5e839a1950fae5302db5a96e98dbe63e928e8178c3ca682aed008e26
+    restart: unless-stopped
+    environment:
+      - TOKEN=${TOKEN}
+      - LOG_LEVEL=${LOG_LEVEL}
+    volumes:
+      - ./stacks:/data/stacks
+      - /var/run/docker.sock:/var/run/docker.sock
+    ports:
+      - 2376:2376
+    networks:
+      - frontend
+
+networks:
+  frontend:
+    external: true

healthchecks/compose.yaml

@@ -1,7 +1,7 @@
 services:
   healthchecks:
     container_name: healthchecks
-    image: ghcr.io/linuxserver/healthchecks:4.0.20260209@sha256:5c3b3eab2287ad7816733a24ab041f27c16a7503ead3fa39c134d88ef7dbe9a5
+    image: ghcr.io/linuxserver/healthchecks:4.0.20260216@sha256:9748ad5de1a8aaede64e54d742424f2e8a92ed661814c232b333e567de40d829
     restart: unless-stopped
     environment:
       - PUID=${PUID}

home-assistant/compose.yaml

@@ -1,7 +1,7 @@
 services:
   home-assistant:
     container_name: home-assistant
-    image: ghcr.io/home-assistant/home-assistant:2026.2.2@sha256:3e2dff545c46e91f4ab2b21597016011d76d0de58bc8eaf51d75e841f337bf88
+    image: ghcr.io/home-assistant/home-assistant:2026.2.3@sha256:96fa92d83fa8dae987fbbbcf58b1fea1140985ff6a8517b37f7b65c76ef20133
     restart: unless-stopped
     volumes:
       - ${APPDATA_PATH}/home-assistant/config:/config

homepage/compose-docker.yaml

@@ -1,7 +1,7 @@
 services:
   homepage_socket_proxy:
     container_name: homepage_socket_proxy
-    image: ghcr.io/11notes/socket-proxy:2.1.6@sha256:2f4e605a5441b31389a95ef942af45927e8df4df4e974cfa271a388799d4f87b
+    image: ghcr.io/11notes/socket-proxy:2.1.7@sha256:6806f9b3cfe64325ae2dc967381412e415d868c9542753962fd2e73f4f9686f1
     restart: unless-stopped
     read_only: true
     user: ${SOCKET_UID}:${SOCKET_GID}
@@ -15,7 +15,7 @@ services:
 
   homepage:
     container_name: homepage
-    image: ghcr.io/gethomepage/homepage:v1.9.0@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
+    image: ghcr.io/gethomepage/homepage:v1.10.1@sha256:0b596092c0b55fe4c65379a428a3fe90bd192f10d1b07d189a34fe5fabe7eedb
     restart: unless-stopped
     depends_on:
       homepage_socket_proxy:

homepage/compose.yaml

@@ -1,7 +1,7 @@
 services:
   homepage:
     container_name: homepage
-    image: ghcr.io/gethomepage/homepage:v1.9.0@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
+    image: ghcr.io/gethomepage/homepage:v1.10.1@sha256:0b596092c0b55fe4c65379a428a3fe90bd192f10d1b07d189a34fe5fabe7eedb
     restart: unless-stopped
     environment:
       - PUID=${PUID}

jellystat/compose.yaml

@@ -0,0 +1,56 @@
+services:
+  jellystat_db:
+    container_name: jellystat_db
+    image: docker.io/library/postgres:18.2@sha256:9b5bd946f3a507db72c55959700e517463e8d5dbb6f7eb30d920d5bcf6951431
+    restart: unless-stopped
+    shm_size: '1gb'
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+      - PGDATA=/var/lib/postgresql/18/docker
+    volumes:
+      - ${APPDATA_PATH}/jellystat/db:/var/lib/postgresql
+    networks:
+      - backend
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
+  jellystat:
+    container_name: jellystat
+    image: ghcr.io/cyfershepard/jellystat:1.1.8@sha256:c8c451704ba7985340142cd047e2364cabaf41b613669b6c5340688ed217f82a
+    restart: unless-stopped
+    depends_on:
+      jellystat-db:
+        condition: service_healthy
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+      - POSTGRES_IP=jellystat_db
+      - POSTGRES_PORT=5432
+      - JWT_SECRET=${JWT_SECRET}
+      - TZ=${TZ}
+    volumes:
+      - ${APPDATA_PATH}/jellystat/backup-data:/app/backend/backup-data
+    ports:
+      - ${PORT}:3000
+    networks:
+      - frontend
+      - backend
+    healthcheck:
+      test: wget --no-verbose --tries=1 --spider http://localhost:3000/auth/isConfigured || exit 1
+      interval: 60s
+      timeout: 30s
+      retries: 5
+      start_period: 30s
+
+networks:
+  frontend:
+    external: true
+  backend:
+    external: true

kiwix/compose.yaml

@@ -1,12 +1,12 @@
 services:
   kiwix:
     container_name: kiwix
-    image: ghcr.io/kiwix/kiwix-serve:3.8.1@sha256:a105ef4c6791741224f0f6883fc391c4fe8bd25307be286e631d0a52e8777ef7
+    image: ghcr.io/kiwix/kiwix-serve:3.8.1@sha256:9bffd4f940645d4d518f137e87b7865d3d0ef30f6c13fbe4a3b9e747be3cd1ad
     restart: unless-stopped
     command:
       - '*.zim'
     volumes:
-      - ${APPDATA_PATH}/kiwix/data:/data
+      - ${DATA_PATH}:/data
     ports:
       - ${PORT}:8080
     networks:

lldap/compose.yaml

@@ -1,7 +1,7 @@
 services:
   lldap_db:
     container_name: lldap_db
-    image: docker.io/library/postgres:18.1@sha256:f42fe58fa146f29072559fcb855cc2e93e2c9ab08c1cbe7c5db4973d665e3d86
+    image: docker.io/library/postgres:18.2@sha256:9b5bd946f3a507db72c55959700e517463e8d5dbb6f7eb30d920d5bcf6951431
     restart: unless-stopped
     environment:
       - POSTGRES_USER=${POSTGRES_USER}

open-webui/compose.yaml

@@ -0,0 +1,19 @@
+services:
+  open-webui:
+    container_name: open-webui
+    image: ghcr.io/open-webui/open-webui:v0.8.8-ollama@sha256:781938633d6d445daa489fcdc0c1988c4c875e6358175f484fdd8a89aa152503
+    restart: unless-stopped
+    environment:
+      - OLLAMA_BASE_URL=${OLLAMA_BASE_URL}
+      - WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY}
+      - WEBUI_AUTH=true
+    volumes:
+      - ${APPDATA_PATH}/open-webui/data:/app/backend/data
+    ports:
+      - ${PORT}:8080
+    networks:
+      - frontend
+
+networks:
+  frontend:
+    external: true

pocket-id/compose.yaml

@@ -1,7 +1,7 @@
 services:
   pocket-id-db:
     container_name: pocket-id-db
-    image: docker.io/library/postgres:18.1@sha256:f42fe58fa146f29072559fcb855cc2e93e2c9ab08c1cbe7c5db4973d665e3d86
+    image: docker.io/library/postgres:18.2@sha256:9b5bd946f3a507db72c55959700e517463e8d5dbb6f7eb30d920d5bcf6951431
     restart: unless-stopped
     environment:
       - POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
 
   pocket-id:
     container_name: pocket-id
-    image: ghcr.io/pocket-id/pocket-id:v2.2.0-distroless@sha256:ad2d21a7b31d6b4f1d999caec794a5b5edeb97fc40801947158d62befd4203e3
+    image: ghcr.io/pocket-id/pocket-id:v2.3.0-distroless@sha256:85a7485108325e34679b0fbca0baeb8418401f6d6cf59944d50f3ec013aafd09
     restart: unless-stopped
     depends_on:
       pocket-id-db:

renovate.json

@@ -6,6 +6,7 @@
   "labels": ["renovate"],
   "configMigration": true,
   "prHourlyLimit": 0,
+  "prConcurrentLimit": 0,
   "ignorePaths": [".archived/", "**/node_modules/**", "**/vendor/**"],
   "docker-compose": {
     "hostRules": [

selfhst-icons/compose.yaml

@@ -0,0 +1,17 @@
+services:
+  selfhst-icons:
+    container_name: selfhst-icons
+    image: ghcr.io/selfhst/icons:3.2.0@sha256:3a6db28194ac905f9cfa8529b2abf7a3c21b688c5515b47c4a28ae49c16fa0fc
+    restart: unless-stopped
+    environment:
+      - ICON_SOURCE=remote
+      - REMOTE_URL=${REMOTE_URL}
+      - STANDARD_ICON_FORMAT=${STANDARD_ICON_FORMAT}
+    ports:
+      - 4050:4050
+    networks:
+      - frontend
+
+networks:
+  frontend:
+    external: true

syncthing/compose.yaml

@@ -0,0 +1,27 @@
+services:
+  syncthing:
+    container_name: syncthing
+    image: ghcr.io/syncthing/syncthing:2.0.14
+    restart: unless-stopped
+    hostname: ${HOSTNAME}
+    environment:
+      - PUID=${PUID}
+      - PGID=${PGID}
+    volumes:
+      - ${APPDATA_PATH}/syncthing/data:/var/syncthing
+    ports:
+      - 8384:8384          # Web UI
+      - 22000:22000/tcp    # TCP file transfers
+      - 22000:22000/udp    # QUIC file transfers
+      - 21027:21027/udp    # Local discovery broadcasts
+    healthcheck:
+      test: curl -fkLsS -m 2 127.0.0.1:8384/rest/noauth/health | grep -o --color=never OK || exit 1
+      interval: 1m
+      timeout: 10s
+      retries: 3
+    networks:
+      - frontend
+
+networks:
+  frontend:
+    external: true

uptime-kuma/compose.yaml

@@ -1,7 +1,7 @@
 services:
   uptime-kuma:
     container_name: uptime-kuma
-    image: ghcr.io/louislam/uptime-kuma:2.1.1@sha256:e4045dc9b2b96a5503be7372e3b648104ba7153e452974c2247c66178389ac39
+    image: ghcr.io/louislam/uptime-kuma:2.1.3@sha256:32c352a235fd10f98b3f64a6a4345d3c0c7f4e8be7810d2e1e867f7fe2e48ba2
     restart: unless-stopped
     volumes:
       - ${APPDATA_PATH}/uptime-kuma/config:/app/data