Merge pull request #90 from rodneyosodo/dependabot/github_actions/gh-dependency-696b649f44

chore(deps): bump actions/setup-python from 6 to 7 in the gh-dependency group

.github/workflows/ci.yaml

@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.14"
 
@@ -80,7 +80,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.14"
 

.pre-commit-config.yaml

@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
+    rev: v6.0.0
     hooks:
       - id: check-yaml
       - id: end-of-file-fixer

docker-compose/bajeti/docker-compose.yaml

@@ -0,0 +1,53 @@
+services:
+  bajeti-backend:
+    container_name: bajeti-backend
+    image: ghcr.io/rodneyosodo/bajeti/backend:0.3.2
+    restart: unless-stopped
+    networks:
+      - homelab-network
+    security_opt:
+      - no-new-privileges:true
+    ports:
+      - 6020:6020
+    volumes:
+      - ~/docker-volumes/bajeti/db:/app/data
+    environment:
+      BAJETI_PORT: 6020
+      BAJETI_LOG_LEVEL: info
+      BAJETI_DB_FILE_NAME: /app/data/bajeti.db
+      BAJETI_RECEIPTS_DIR: /app/data/receipts
+      BAJETI_FRONTEND_URL: ${BAJETI_FRONTEND_URL}
+      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
+      BETTER_AUTH_URL: ${BETTER_AUTH_URL}
+      BAJETI_AI_DEFAULT_PROVIDER: ollama
+      BAJETI_AI_OLLAMA_URL: http://ollama:11434
+      BAJETI_AI_OLLAMA_MODEL: llama3.2:3b
+      BAJETI_BACKUP_DIR: /app/data/backups
+      BAJETI_BACKUP_RETENTION_DAYS: 30
+      BAJETI_BACKUP_CRON_SCHEDULE: 0 2 * * *
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "wget -qO- http://127.0.0.1:6020/healthz/live | grep -qc 'true'",
+        ]
+      interval: 3s
+      timeout: 3s
+      retries: 3
+      start_period: 3s
+
+  bajeti-dashboard:
+    container_name: bajeti-dashboard
+    image: ghcr.io/rodneyosodo/bajeti/dashboard:0.3.2
+    restart: unless-stopped
+    networks:
+      - homelab-network
+    security_opt:
+      - no-new-privileges:true
+    ports:
+      - 6021:80
+    environment:
+      VITE_BETTER_AUTH_URL: ${VITE_BETTER_AUTH_URL}
+    depends_on:
+      bajeti-backend:
+        condition: service_healthy

docker-compose/cloudflared/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   cloudflared:
     container_name: cloudflared
-    image: docker.io/cloudflare/cloudflared:2026.5.2
+    image: docker.io/cloudflare/cloudflared:2026.6.1
     restart: unless-stopped
     command: tunnel --metrics 0.0.0.0:4090 --no-autoupdate run --token ${CLOUDFLARE_TOKEN}
     networks:

docker-compose/convertx/docker-compose.yaml

@@ -0,0 +1,20 @@
+services:
+  convertx:
+    container_name: convertx
+    image: ghcr.io/c4illin/convertx:v0.18.0
+    restart: unless-stopped
+    networks:
+      - homelab-network
+    security_opt:
+      - no-new-privileges:true
+    ports:
+      - "6010:3000"
+    environment:
+      - ACCOUNT_REGISTRATION=false
+      - JWT_SECRET=${CONVERTX_JWT_SECRET}
+      - HTTP_ALLOWED=true
+      - ALLOW_UNAUTHENTICATED=false
+      - AUTO_DELETE_EVERY_N_HOURS=24
+      - TZ=Africa/Nairobi
+    volumes:
+      - ~/docker-volumes/convertx/data:/app/data

docker-compose/dawarich/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   dawarich-app:
     container_name: dawarich-app
-    image: docker.io/freikin/dawarich:1.7.11
+    image: docker.io/freikin/dawarich:1.9.2
     volumes:
       - ~/docker-volumes/dawarich/public:/var/app/public
       - ~/docker-volumes/dawarich/watched:/var/app/tmp/imports/watched
@@ -72,7 +72,7 @@ services:
 
   dawarich-sidekiq:
     container_name: dawarich-sidekiq
-    image: docker.io/freikin/dawarich:1.7.11
+    image: docker.io/freikin/dawarich:1.9.2
     volumes:
       - ~/docker-volumes/dawarich/public:/var/app/public
       - ~/docker-volumes/dawarich/watched:/var/app/tmp/imports/watched

docker-compose/default.env

@@ -1,6 +1,6 @@
 ## SMTP
-SMTP_HOST="0.0.0.0"
-SMTP_PORT="9001"
+SMTP_HOST=""
+SMTP_PORT=""
 SMTP_SECURE=""
 SMTP_AUTHTYPE=""
 SMTP_NAME=""
@@ -15,7 +15,7 @@ CLOUDFLARE_TOKEN=""
 DOCUSEAL_POSTGRES_USER=""
 DOCUSEAL_POSTGRES_PASSWORD=""
 DOCUSEAL_POSTGRES_DB=""
-DOCUSEAL_POSTGRES_URL=""
+DOCUSEAL_POSTGRES_URL="postgresql://${DOCUSEAL_POSTGRES_USER}:${DOCUSEAL_POSTGRES_PASSWORD}@docuseal-db:5432/${DOCUSEAL_POSTGRES_DB}"
 
 ## GITEA
 GITEA_POSTGRES_DB=""
@@ -32,7 +32,7 @@ HEDGEDOC_SESSION_SECRET=""
 HEDGEDOC_POSTGRES_USER=""
 HEDGEDOC_POSTGRES_PASSWORD=""
 HEDGEDOC_POSTGRES_DB=""
-HEDGEDOC_POSTGRES_URL=""
+HEDGEDOC_POSTGRES_URL="postgresql://${HEDGEDOC_POSTGRES_USER}:${HEDGEDOC_POSTGRES_PASSWORD}@hedgedoc-db:5432/${HEDGEDOC_POSTGRES_DB}"
 
 ## IMMICH
 
@@ -77,7 +77,7 @@ KENER_ORIGIN=""
 KENER_POSTGRES_USER=""
 KENER_POSTGRES_PASSWORD=""
 KENER_POSTGRES_DB=""
-KENER_POSTGRES_URL=""
+KENER_POSTGRES_URL="postgresql://${KENER_POSTGRES_USER}:${KENER_POSTGRES_PASSWORD}@kener-db:5432/${KENER_POSTGRES_DB}"
 
 ## KENER REDIS
 KENER_REDIS_PASSWORD=""
@@ -85,15 +85,15 @@ KENER_REDIS_URL=""
 
 ## ATUIN
 ATUIN_HOST="0.0.0.0"
-ATUIN_PORT="9002"
+ATUIN_PORT="4080"
 ATUIN_OPEN_REGISTRATION=""
-ATUIN_RUST_LOG=""
+ATUIN_RUST_LOG="info,atuin_server=debug"
 
 ## ATUIN DB
 ATUIN_POSTGRES_USER=""
 ATUIN_POSTGRES_PASSWORD=""
 ATUIN_POSTGRES_DB=""
-ATUIN_POSTGRES_URL=""
+ATUIN_POSTGRES_URL="postgres://${ATUIN_POSTGRES_USER}:${ATUIN_POSTGRES_PASSWORD}@atuin-db:5432/${ATUIN_POSTGRES_DB}"
 
 ## KARAKEEP
 OPENAI_API_KEY=""
@@ -102,7 +102,7 @@ KARAKEEP_NEXTAUTH_SECRET=""
 KARAKEEP_MEILI_MASTER_KEY=""
 
 ## DAWARICH
-DAWARICH_APPLICATION_HOSTS="localhost,::1,127.0.0.1"
+DAWARICH_APPLICATION_HOSTS="localhost,::1,127.0.0.1,192.168.100.32,dawarich.rodneyosodo.com,www.dawarich.rodneyosodo.com"
 DAWARICH_SECRET_KEY_BASE=""
 DAWARICH_METRICS_USERNAME=""
 DAWARICH_METRICS_PASSWORD=""
@@ -115,7 +115,7 @@ DAWARICH_POSTGRES_URL="postgresql://${DAWARICH_POSTGRES_USER}:${DAWARICH_POSTGRE
 
 ### DAWARICH REDIS
 DAWARICH_REDIS_PASSWORD=""
-DAWARICH_REDIS_URL=redis://dawarich-redis:6379
+DAWARICH_REDIS_URL=""
 
 ### RUSTFS
 RUSTFS_ACCESS_KEY=""
@@ -135,8 +135,17 @@ PAPERLESS_REDIS_URL=""
 PAPERLESS_POSTGRES_USER=""
 PAPERLESS_POSTGRES_PASSWORD=""
 PAPERLESS_POSTGRES_DB=""
-PAPERLESS_POSTGRES_URL=""
+PAPERLESS_POSTGRES_URL="postgresql://${PAPERLESS_POSTGRES_USER}:${PAPERLESS_POSTGRES_PASSWORD}@paperless-db:5432/${PAPERLESS_POSTGRES_DB}"
 
 ### GRAFANA
 GRAFANA_ADMIN_USER="admin"
 GRAFANA_ADMIN_PASSWORD="admin"
+
+### TREK
+TREK_ENCRYPTION_KEY=""
+TREK_PUBLIC_URL=""
+TREK_ADMIN_EMAIL=""
+TREK_ADMIN_PASSWORD=""
+
+## ConvertX
+CONVERTX_JWT_SECRET=""

docker-compose/docker-compose.yaml

@@ -70,9 +70,6 @@ include:
   - path: ./karakeep/docker-compose.yaml
     project_directory: ..
     env_file: .env
-  - path: ./prometheus/docker-compose.yaml
-    project_directory: ..
-    env_file: .env
   - path: ./dawarich/docker-compose.yaml
     project_directory: ..
     env_file: .env
@@ -100,3 +97,12 @@ include:
   - path: ./obsidian/docker-compose.yaml
     project_directory: ..
     env_file: .env
+  - path: ./trek/docker-compose.yaml
+    project_directory: ..
+    env_file: .env
+  - path: ./convertx/docker-compose.yaml
+    project_directory: ..
+    env_file: .env
+  - path: ./bajeti/docker-compose.yaml
+    project_directory: ..
+    env_file: .env

docker-compose/docuseal/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   docuseal:
     container_name: docuseal
-    image: docker.io/docuseal/docuseal:3.0.2
+    image: docker.io/docuseal/docuseal:3.1.2
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/dozzle/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   dozzle:
     container_name: dozzle
-    image: docker.io/amir20/dozzle:v10.6.3
+    image: docker.io/amir20/dozzle:v10.6.7
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/gitea/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   gitea:
     container_name: gitea
-    image: docker.io/gitea/gitea:1.26.2
+    image: docker.io/gitea/gitea:1.26.4
     restart: unless-stopped
     networks:
       - homelab-network
@@ -63,7 +63,7 @@ services:
 
   gitea-runner:
     container_name: gitea-runner
-    image: docker.io/gitea/runner:1.0.7
+    image: docker.io/gitea/runner:2.0.0
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/hedgedoc/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   hedgedoc:
     container_name: hedgedoc
-    image: quay.io/hedgedoc/hedgedoc:1.10.8
+    image: quay.io/hedgedoc/hedgedoc:1.11.0
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/immich/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   immich-server:
     container_name: immich-server
-    image: ghcr.io/immich-app/immich-server:v2.7.5
+    image: ghcr.io/immich-app/immich-server:v3.0.1
     restart: unless-stopped
     networks:
       - homelab-network
@@ -18,7 +18,7 @@ services:
       - immich-redis
       - immich-postgres
     environment:
-      - IMMICH_VERSION=v2.3.1
+      - IMMICH_VERSION=v3
       - TZ=Africa/Nairobi
       - REDIS_HOSTNAME=immich-redis
       - REDIS_PORT=6379
@@ -39,7 +39,7 @@ services:
 
   immich-machine-learning:
     container_name: immich-machine-learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.7.5
+    image: ghcr.io/immich-app/immich-machine-learning:v3.0.1
     restart: unless-stopped
     networks:
       - homelab-network
@@ -64,6 +64,7 @@ services:
       - POSTGRES_DB=${IMMICH_POSTGRES_DB}
       - POSTGRES_INITDB_ARGS="--data-checksums"
       - DB_STORAGE_TYPE=HDD
+    shm_size: 128mb
     volumes:
       - ~/docker-volumes/immich/postgres-data:/var/lib/postgresql/data
 

docker-compose/kener/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   kener:
     container_name: kener
-    image: docker.io/rajnandan1/kener:v4.0.23
+    image: docker.io/rajnandan1/kener:v4.1.1
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/mealie/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   mealie:
     container_name: mealie
-    image: docker.io/hkotel/mealie:v3.19.2
+    image: docker.io/hkotel/mealie:v3.20.1
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/ollama/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   ollama:
     container_name: ollama
-    image: docker.io/ollama/ollama:0.24.0
+    image: docker.io/ollama/ollama:0.31.1
     restart: unless-stopped
     networks:
       - homelab-network
@@ -18,7 +18,7 @@ services:
 
   open-webui:
     container_name: open-webui
-    image: ghcr.io/open-webui/open-webui:v0.9.5
+    image: ghcr.io/open-webui/open-webui:v0.10.2
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/opengist/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   opengist:
     container_name: opengist
-    image: ghcr.io/thomiceli/opengist:1.12.2
+    image: ghcr.io/thomiceli/opengist:1.13.1
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/paperless/docker-compose.yaml

@@ -73,7 +73,7 @@ services:
 
   gotenberg:
     container_name: gotenberg
-    image: docker.io/gotenberg/gotenberg:8.33
+    image: docker.io/gotenberg/gotenberg:8.34
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/pihole/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   pihole:
     container_name: pihole
-    image: docker.io/pihole/pihole:2026.05.0
+    image: docker.io/pihole/pihole:2026.06.0
     restart: unless-stopped
     networks:
       homelab-network:

docker-compose/portainer/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   portainer:
     container_name: portainer
-    image: docker.io/portainer/portainer-ce:2.42.0
+    image: docker.io/portainer/portainer-ce:2.43.0
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/prometheus/docker-compose.yaml

@@ -1,15 +0,0 @@
-services:
-  prometheus:
-    container_name: prometheus
-    image: docker.io/prom/prometheus:v3.12.0
-    restart: unless-stopped
-    networks:
-      - homelab-network
-    security_opt:
-      - no-new-privileges:true
-    ports:
-      - 4081:9090
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
-      - ./docker-compose/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
-      - ~/docker-volumes/prometheus/data:/prometheus

docker-compose/speedtest-tracker/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: docker.io/linuxserver/speedtest-tracker:1.14.3
+    image: docker.io/linuxserver/speedtest-tracker:1.14.5
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/swagger-editor/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   swagger-editor:
     container_name: swagger-editor
-    image: docker.io/swaggerapi/swagger-editor:v5.5.2
+    image: docker.io/swaggerapi/swagger-editor:v5.7.0
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/trek/docker-compose.yaml

@@ -0,0 +1,49 @@
+services:
+  trek:
+    container_name: trek
+    image: docker.io/mauriceboe/trek:3.2.1
+    restart: unless-stopped
+    networks:
+      - homelab-network
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETUID
+      - SETGID
+    tmpfs:
+      - /tmp:noexec,nosuid,size=128m
+    ports:
+      - "5090:5090"
+    environment:
+      - NODE_ENV=production
+      - PORT=5090
+      - ENCRYPTION_KEY=${TREK_ENCRYPTION_KEY}
+      - TZ=Africa/Nairobi
+      - LOG_LEVEL=info
+      - DEFAULT_LANGUAGE=en
+      - SESSION_DURATION=30d
+      - SESSION_DURATION_REMEMBER=30d
+      - ALLOWED_ORIGINS=${TREK_PUBLIC_URL}
+      - FORCE_HTTPS=true
+      - HSTS_INCLUDE_SUBDOMAINS=true
+      - COOKIE_SECURE=false
+      - TRUST_PROXY=1
+      - ALLOW_INTERNAL_NETWORK=true
+      - APP_URL=${TREK_PUBLIC_URL}
+      - ADMIN_EMAIL=${TREK_ADMIN_EMAIL}
+      - ADMIN_PASSWORD=${TREK_ADMIN_PASSWORD}
+      - MCP_RATE_LIMIT=10000
+      - MCP_MAX_SESSION_PER_USER=1000
+    volumes:
+      - ~/docker-volumes/trek/data:/app/data
+      - ~/docker-volumes/trek/uploads:/app/uploads
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:3000/api/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s

docker-compose/vaultwarden/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   vaultwarden:
     container_name: vaultwarden
-    image: docker.io/vaultwarden/server:1.36.0
+    image: docker.io/vaultwarden/server:1.37.1
     restart: unless-stopped
     networks:
       - homelab-network

docker-compose/victoria-metrics/docker-compose.yaml

@@ -10,7 +10,7 @@ services:
     ports:
       - 4082:4082
     volumes:
-      - ./docker-compose/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
+      - ./docker-compose/victoria-metrics/prometheus.yml:/etc/prometheus/prometheus.yml:ro
       - ~/docker-volumes/victoria-metrics/data:/storage
     command:
       - -storageDataPath=/storage

docker-compose/victoria-metrics/prometheus.yml

@@ -4,25 +4,19 @@ global:
   evaluation_interval: 15s
 
 scrape_configs:
-  - job_name: prometheus
+  - job_name: victoria-metrics
     honor_timestamps: true
     metrics_path: /metrics
     scheme: http
     static_configs:
       - targets:
-          - localhost:9090
+          - localhost:4082
 
   - job_name: cloudflared
     static_configs:
       - targets:
           - cloudflared:4090
 
-  - job_name: dawarich-app
-    static_configs:
-      - targets:
-          - dawarich-app:9394
-          - dawarich-sidekiq:9394
-
   - job_name: endlessh
     static_configs:
       - targets: