Update docker.io/gitea/act_runner Docker tag to v0.4.1

.archived/vaultwarden/compose.yaml

@@ -1,53 +1,71 @@
+# Vaultwarden Configuration - (Bitwarden-compatible) Password Manager
 services:
   vaultwarden_db:
+    # PostgreSQL Database Configuration
     container_name: vaultwarden_db
     image: docker.io/library/postgres:17.5
-    restart: unless-stopped
+    restart: unless-stopped  # Auto-recover from crashes
+    
+    # Database credentials
     environment:
-      - POSTGRES_USER=${POSTGRES_USER}
-      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
-      - POSTGRES_DB=${POSTGRES_DB}
+      - POSTGRES_USER=${POSTGRES_USER}  # Database username
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}  # Database password
+      - POSTGRES_DB=${POSTGRES_DB}  # Database name
+    
+    # Persistent storage configuration
     volumes:
-      - ${APPDATA_PATH}/vaultwarden/db:/var/lib/postgresql/data
+      - ${APPDATA_PATH}/vaultwarden/db:/var/lib/postgresql/data  # Database files
+    
+    # Network configuration
     ports:
-      - ${DB_PORT}:5432
+      - ${DB_PORT}:5432  # PostgreSQL default port
     networks:
-      - backend
+      - backend  # Connects to backend network
+    
+    # Health monitoring
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
-      interval: 30s
-      timeout: 5s
-      retries: 5
-      start_period: 20s
+      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]  # Connection check
+      interval: 30s  # Check every 30 seconds
+      timeout: 5s  # Maximum check duration
+      retries: 5  # Allow 5 failures before marking unhealthy
+      start_period: 20s  # Initial grace period
 
   vaultwarden_server:
     container_name: vaultwarden_server
-    image: ghcr.io/dani-garcia/vaultwarden:1.34.1
-    restart: unless-stopped
+    # Container configuration
+    image: ghcr.io/dani-garcia/vaultwarden:1.34.1  # Official Vaultwarden image
+    restart: unless-stopped  # Auto-restart on failure
     depends_on:
       vaultwarden_db:
-        condition: service_healthy
-    environment:
-      - PUID=${PUID}
-      - PGID=${PGID}
-      - TZ=${TZ}
-      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@vaultwarden_db:5432/${POSTGRES_DB}
-      - WEBSOCKET_ENABLED=${WEBSOCKET_ENABLED}
-      - LOG_FILE=/data/vaultwarden.log
-      # Uncomment and set these only on first run
-      # - DOMAIN=${DOMAIN}
-      # - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}
-      # - ADMIN_TOKEN=${ADMIN_TOKEN}
-    volumes:
-      - ${APPDATA_PATH}/vaultwarden/data:/data
-    ports:
-      - ${SERVER_PORT}:80
-    networks:
-      - frontend
-      - backend
+        condition: service_healthy  # Wait for healthy database
     
+    # Application settings
+    environment:
+      - PUID=${PUID}  # User ID for file permissions
+      - PGID=${PGID}  # Group ID for file permissions
+      - TZ=${TZ}  # Timezone configuration
+      - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@vaultwarden_db:5432/${POSTGRES_DB}  # DB connection
+      - WEBSOCKET_ENABLED=${WEBSOCKET_ENABLED}  # Real-time updates
+      - LOG_FILE=/data/vaultwarden.log  # Log file location
+      # Uncomment and set these only on first run
+      # - DOMAIN=${DOMAIN}  # Domain Name
+      # - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}  # User registration
+      # - ADMIN_TOKEN=${ADMIN_TOKEN}  # Admin interface access token
+    
+    # Persistent storage configuration
+    volumes:
+      - ${APPDATA_PATH}/vaultwarden/data:/data  # Vault data storage
+    
+    # Network configuration
+    ports:
+      - ${SERVER_PORT}:80  # Web interface port
+    networks:
+      - frontend  # Connects to frontend network
+      - backend  # Connects to backend network
+
+# External network definitions
 networks:
   frontend:
-    external: true
+    external: true  # Uses existing frontend network
   backend:
-    external: true
+    external: true  # Uses existing backend network

adminer/compose.yaml

@@ -1,7 +1,7 @@
 services:
   adminer:
     container_name: adminer
-    image: docker.io/library/adminer:5.4.2@sha256:41898b976011fd87f2d3037366ad97f7d89fddfebc8aa8b3a7d77d0c465aa37b
+    image: docker.io/library/adminer:5.4.2@sha256:16a72c6140f64d00a3a9edf8d3d3b18a7b0a29ca31b0453378d9eb71f01f9e34
     restart: unless-stopped
     ports:
       - ${PORT}:8080

dockhand/compose.yaml

@@ -1,7 +1,7 @@
 services:
   dockhand_db:
     container_name: dockhand_db
-    image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
+    image: docker.io/library/postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a
     restart: unless-stopped
     environment:
       - POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
 
   dockhand:
     container_name: dockhand
-    image: fnsys/dockhand:v1.0.27@sha256:8c2f62e215d257e3b17fd0d458d4fcd134f67c4ee495831b818004677ad57e3b
+    image: fnsys/dockhand:v1.0.22@sha256:3f38c995dfdb1f51f07ffb796162b445744456c2b8a1929c33a8b0593250892e
     restart: unless-stopped
     depends_on:
       dockhand_db:

forgejo/compose.yaml

@@ -1,7 +1,7 @@
 services:
   forgejo:
     container_name: forgejo
-    image: codeberg.org/forgejo/forgejo:15.0.1-rootless@sha256:4f4d168b4e792d0f73e5f4da0548f3b54b9c9d03fb85f277c97eb985cb9a290a
+    image: codeberg.org/forgejo/forgejo:14.0.3-rootless@sha256:3bde16a366e57f37c09599b77ceb83ed05b1934f8224072f8140bc66cf243608
     restart: unless-stopped
     user: ${PUID}:${PGID}
     volumes:

gitea-runner/compose.yaml

@@ -1,7 +1,7 @@
 services:
   gitea_runner:
     container_name: gitea_runner
-    image: docker.io/gitea/act_runner:0.6.0@sha256:b2df7d04d17334ff8e741c32b0df099d5df046d96599cb330d4ed7c097cb087f
+    image: docker.io/gitea/act_runner:0.4.1@sha256:696a59b51ad3d149521e3beb0229d5fb88f87295e1616f940199793274415b56
     restart: unless-stopped
     environment:
       CONFIG_FILE: /config.yml

hawser/compose.yaml

@@ -1,7 +1,7 @@
 services:
   hawser:
     container_name: hawser
-    image: ghcr.io/finsys/hawser:0.2.41@sha256:53bb1e23fb302f337d70fe111affee5f30f476c56aeb33c6c8c1d510fdc4133c
+    image: ghcr.io/finsys/hawser:0.2.39@sha256:03c9f31205f7b5ee7aef55bf3058d050fe4ac8a745029c19107eaa0c34ef3422
     restart: unless-stopped
     environment:
       - TOKEN=${TOKEN}

healthchecks/compose.yaml

@@ -1,7 +1,7 @@
 services:
   healthchecks:
     container_name: healthchecks
-    image: ghcr.io/linuxserver/healthchecks:4.2.20260428@sha256:2973440afcdcf5884b334782a70b7a7c292595810ad3a162f0289d2e878f2c80
+    image: ghcr.io/linuxserver/healthchecks:4.1.20260323@sha256:9284fb75cc62aafebb01eceef41f1630cc5c97c25ea2e310083e9799f36836f3
     restart: unless-stopped
     environment:
       - PUID=${PUID}

home-assistant/compose.yaml

@@ -1,7 +1,7 @@
 services:
   home-assistant:
     container_name: home-assistant
-    image: ghcr.io/home-assistant/home-assistant:2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
+    image: ghcr.io/home-assistant/home-assistant:2026.4.0@sha256:7fbf6a5e006e889d7799476ad7646bd18e9dc73e8a4ccd9326b41798de6bb3bf
     restart: unless-stopped
     volumes:
       - ${APPDATA_PATH}/home-assistant/config:/config

kiwix/compose.yaml

@@ -1,7 +1,7 @@
 services:
   kiwix:
     container_name: kiwix
-    image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:0b6541355b250c6b45d2d7725e88f22f1d6a0f45ad9480d9c0bd4bc58436a12f
+    image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
     restart: unless-stopped
     command:
       - '*.zim'

lldap/compose.yaml

@@ -1,7 +1,7 @@
 services:
   lldap_db:
     container_name: lldap_db
-    image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
+    image: docker.io/library/postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a
     restart: unless-stopped
     environment:
       - POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
 
   lldap:
     container_name: lldap
-    image: ghcr.io/lldap/lldap:v0.6.3-alpine-rootless@sha256:ba2c50930ea998eefd5454aa678a7977448019248b1827da87d330df0b71c284
+    image: ghcr.io/lldap/lldap:v0.6.2-alpine-rootless@sha256:35df821899ec54c11eaab395e9c68e191e2582592cba343b0a904f6821aadcd2
     restart: unless-stopped
     depends_on:
       lldap_db:

newt/compose.yaml

@@ -1,10 +0,0 @@
-services:
-  newt:
-    container_name: newt
-    image: fosrl/newt:1.12.2
-    restart: unless-stopped
-    environment:
-      - PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}
-      - NEWT_ID=${NEWT_ID}
-      - NEWT_SECRET=${NEWT_SECRET}
-    network_mode: host

pangolin/compose-local.yaml

@@ -1,45 +0,0 @@
-name: pangolin
-services:
-  pangolin:
-    container_name: pangolin
-    image: ghcr.io/fosrl/pangolin:1.18.0
-    restart: unless-stopped
-    deploy:
-      resources:
-        limits:
-          memory: 1g
-        reservations:
-          memory: 256m
-    volumes:
-      - ./config:/app/config
-    healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:3001/api/v1/"]
-      interval: "10s"
-      timeout: "10s"
-      retries: 15
-
-  traefik:
-    container_name: traefik
-    image: ghcr.io/traefik/traefik:v3.6.14
-    restart: unless-stopped
-    depends_on:
-      pangolin:
-        condition: service_healthy
-    command:
-      - --configFile=/etc/traefik/traefik_config.yml
-    environment:
-      - CLOUDFLARE_DNS_API_TOKEN=${CLOUDFLARE_DNS_API_TOKEN}
-    volumes:
-      - ./config/traefik:/etc/traefik:ro # Volume to store the Traefik configuration
-      - ./config/letsencrypt:/letsencrypt # Volume to store the Let's Encrypt certificates
-      - ./config/traefik/logs:/var/log/traefik # Volume to store Traefik logs
-    ports:
-      - 443:443
-      - 80:80
-      - 22:22
-      - 2222:2222
-
-networks:
-  default:
-    driver: bridge
-    name: pangolin

pangolin/compose.yaml

@@ -1,66 +0,0 @@
-name: pangolin
-services:
-  pangolin:
-    container_name: pangolin
-    image: ghcr.io/fosrl/pangolin:1.18.0
-    restart: unless-stopped
-    volumes:
-      - ./config:/app/config
-    healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:3001/api/v1/"]
-      interval: "10s"
-      timeout: "10s"
-      retries: 15
-
-  gerbil:
-    container_name: gerbil
-    image: ghcr.io/fosrl/gerbil:1.3.1
-    restart: unless-stopped
-    depends_on:
-      pangolin:
-        condition: service_healthy
-    command:
-      - --reachableAt=http://gerbil:3004
-      - --generateAndSaveKeyTo=/var/config/key
-      - --remoteConfig=http://pangolin:3001/api/v1/
-    cap_add:
-      - NET_ADMIN
-      - SYS_MODULE
-    volumes:
-      - ./config/:/var/config
-    ports:
-      - 51820:51820/udp
-      - 21820:21820/udp
-      - 443:443
-      - 80:80
-
-  traefik:
-    container_name: traefik
-    image: ghcr.io/traefik/traefik:v3.6.14
-    restart: unless-stopped
-    depends_on:
-      pangolin:
-        condition: service_healthy
-    command:
-      - --configFile=/etc/traefik/traefik_config.yml
-    environment:
-      - CLOUDFLARE_DNS_API_TOKEN=${CLOUDFLARE_DNS_API_TOKEN}
-    volumes:
-      - ./config/traefik:/etc/traefik:ro # Volume to store the Traefik configuration
-      - ./config/letsencrypt:/letsencrypt # Volume to store the Let's Encrypt certificates
-      - ./config/traefik/logs:/var/log/traefik # Volume to store Traefik logs
-    network_mode: service:gerbil # Ports appear on the gerbil service
-
-  webfinger:              # For Tailscale
-    container_name: webfinger
-    image: nginx:1.30.0-alpine
-    volumes:
-      - ./webfinger/webfinger.json:/usr/share/nginx/html/.well-known/webfinger:ro
-      - ./webfinger/nginx.conf:/etc/nginx/conf.d/default.conf:ro
-    restart: unless-stopped
-
-networks:
-  default:
-    driver: bridge
-    name: pangolin
-    enable_ipv6: true # activate if your system supports IPv6

pocket-id/compose.yaml

@@ -1,7 +1,7 @@
 services:
   pocket-id-db:
     container_name: pocket-id-db
-    image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
+    image: docker.io/library/postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a
     restart: unless-stopped
     environment:
       - POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
 
   pocket-id:
     container_name: pocket-id
-    image: ghcr.io/pocket-id/pocket-id:v2.6.2-distroless@sha256:a9adc636b5d30098307b8a1292c5887a59690cd5429aac5e87b588852f9c346d
+    image: ghcr.io/pocket-id/pocket-id:v2.5.0-distroless@sha256:deadc3c4dd6655a7d7f959200db1c74e394942dc061e6f3732b709983a08aab7
     restart: unless-stopped
     depends_on:
       pocket-id-db: