Increase MEMORY allocation to 768M in service-immich.json

Add POSTGRES_INITDB_ARGS to service-immich.json for data checksums
Refactor domain configuration to use a unified DOMAIN key across Nextcloud JSON files
2025-09-07 22:58:14 +02:00 · 2025-09-07 22:52:26 +02:00 · 2025-09-06 17:04:41 +02:00 · 2025-09-06 17:03:16 +02:00 · 2025-09-06 16:27:40 +02:00 · 2025-09-02 14:16:22 +02:00
54 changed files with 2614 additions and 217 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+*tmp*
--- a/applications-tree.json
+++ b/applications-tree.json
--- a/filebrowser/service-filebrowser.json
+++ b/filebrowser/service-filebrowser.json
@@ -21,7 +21,7 @@
            "DEPEND": "null",
            "START_ON_BOOT": "false",
            "ENTRYPOINT": "sh -c",
-            "CMD": "mkdir -p /etc/user/data/jellyfin/media && mkdir -p /etc/user/data/transmission/downloads/complete",
+            "CMD": "mkdir -p /etc/user/data/jellyfin/media && chown -R 1000:1000 /etc/user/data/jellyfin/media && mkdir -p /etc/user/data/transmission/downloads/complete",
            "PRE_START": "null",
            "POST_START": "null"
        },
@@ -61,7 +61,7 @@
            "DEPEND": [],
            "START_ON_BOOT": "false",
            "ENTRYPOINT": "sh",
-            "CMD": "if [ ! -f /database.db ]; then /filebrowser config init && /filebrowser users add \"$FILEBROWSER_USER\" \"$FILEBROWSER_PASS\" --perm.admin && /filebrowser ; else /filebrowser ; fi",
+            "CMD": "if [ ! -f /database/filebrowser.db ]; then cd /database ; /bin/filebrowser config init && /bin/filebrowser users add \"$FILEBROWSER_USER\" \"$FILEBROWSER_PASS\" --perm.admin && /init.sh; else /init.sh ; fi",
            "PRE_START": "null",
            "POST_START": [
                "firewall-filebrowser",
--- a/filebrowser/template.json
+++ b/filebrowser/template.json
--- a/gitea/domain-gitea.json
+++ b/gitea/domain-gitea.json
@@ -0,0 +1,60 @@
+{
+    "main": {
+        "SERVICE_NAME": "gitea",
+        "DOMAIN": "#DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/domain-check",
+            "UPDATE": "true",
+            "MEMORY": "64M",
+            "NAME": "domain_checker",
+            "ROLES": "domain_checker",
+            "NETWORK": "host",
+            "SELECTOR": "",
+            "SCALE": "0",
+            "EXTRA": "--rm --privileged",
+            "PRE_START": [],
+            "DEPEND": [],
+            "POST_START": [],
+            "CMD": "",
+            "ENVS": [
+                {
+                    "PROXY": "smarthostloadbalancer"
+                },
+                {
+                    "TARGET": "gitea-app"
+                },
+                {
+                    "PORT": "3000"
+                },
+                {
+                    "DOMAIN": "#DOMAIN"
+                },
+                {
+                    "SMARTHOST_PROXY_PATH": "/smarthost-domains"
+                },
+                {
+                    "OPERATION": "CREATE"
+                }
+            ],
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/config/smarthost-domains",
+                    "DEST": "/smarthost-domains",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ]
+        }
+    ]
+}
--- a/gitea/firewall-gitea-dns.json
+++ b/gitea/firewall-gitea-dns.json
@@ -0,0 +1,76 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "UPDATE": "true",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "gitea-app"
+                },
+                {
+                    "TARGET": "coredns"
+                },
+                {
+                    "TYPE": "udp"
+                },
+                {
+                    "TARGET_PORT": "53"
+                },
+                {
+                    "COMMENT": "gitea application access for local dns"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "",
+            "PRE_START": [],
+            "POST_START": []
+        }
+    ]
+}
--- a/gitea/firewall-gitea-smtp.json
+++ b/gitea/firewall-gitea-smtp.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "gitea-app"
+                },
+                {
+                    "TARGET": "smtp"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "25"
+                },
+                {
+                    "COMMENT": "gitea to smtp"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/gitea/firewall-gitea.json
+++ b/gitea/firewall-gitea.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "smarthostbackend"
+                },
+                {
+                    "TARGET": "gitea-app"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "3000"
+                },
+                {
+                    "COMMENT": "gitea"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/gitea/gitea-secret.json
+++ b/gitea/gitea-secret.json
@@ -0,0 +1,22 @@
+{
+    "giteapostgres": {
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_ROOT_PASSWORD": "#POSTGRES_ROOT_PASSWORD"
+    },
+    "giteaapp": {
+        "GITEA__database__DB_TYPE": "postgres",
+        "GITEA__database__HOST": "giteapostgres-db",
+        "GITEA__database__NAME": "#POSTGRES_DB",
+        "GITEA__database__USER": "#POSTGRES_USER",
+        "GITEA__database__PASSWD": "#POSTGRES_PASSWORD",
+        "GITEA__mailer__ENABLED": "#MAIL_ENABLE",
+        "GITEA__mailer__FROM": "#MAIL_FROM",
+        "GITEA__mailer__PROTOCOL": "#MAIL_PROTOCOL",
+        "GITEA__mailer__SMTP_ADDR": "#MAIL_SMTP_ADDR",
+        "GITEA__mailer__SMTP_PORT": "#MAIL_SMTP_PORT",
+        "GITEA__mailer__USER": "#MAIL_USER",
+        "GITEA__mailer__PASSWD": "#MAIL_PASSWORD"
+    }
+}
--- a/gitea/service-gitea.json
+++ b/gitea/service-gitea.json
@@ -0,0 +1,110 @@
+{
+    "main": {
+        "SERVICE_NAME": "gitea",
+        "DOMAIN": "#DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "alpine:latest",
+            "UPDATE": "true",
+            "NAME": "gitea-init",
+            "NETWORK": "host",
+            "MEMORY": "64M",
+            "VOLUMES": [
+                {
+                    "SOURCE": "USER_DATA",
+                    "DEST": "/etc/user/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "ENTRYPOINT": "sh -c",
+            "CMD": "mkdir -p /etc/user/data/gitea/db && mkdir -p /etc/user/data/gitea/data && chown -R 1000:1000 /etc/user/data/gitea",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "postgres:15-alpine",
+            "NAME": "giteapostgres-db",
+            "UPDATE": "true",
+            "ROLES": "postgres-db",
+            "MEMORY": "256M",
+            "NETWORK": "gitea-net",
+            "SELECTOR": "giteapostgres-db",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/gitea/db",
+                    "DEST": "/var/lib/postgresql/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "5432",
+                    "TYPE": "tcp"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/gitea/gitea.json"
+            ],
+            "ENVS": [
+                {
+                    "POSTGRES_INITDB_ARGS": "--encoding=UTF8 --locale=C"
+                }
+            ],
+            "EXTRA": "--label logging=promtail_user --label logging_jobname=containers --restart unless-stopped",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": [],
+            "POST_START": []
+        },
+        {
+            "IMAGE": "gitea/gitea:latest",
+            "UPDATE": "true",
+            "NAME": "giteaapp",
+            "DNS": [
+                "coredns"
+            ],
+            "MEMORY": "512M",
+            "SELECTOR": "gitea-app",
+            "NETWORK": "gitea-net",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/gitea/data",
+                    "DEST": "/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "3000",
+                    "TYPE": "tcp"
+                },
+                {
+                    "SOURCE": "null",
+                    "DEST": "22",
+                    "TYPE": "tcp"
+                }
+            ],
+            "EXTRA": "null",
+            "ENV_FILES": [
+                "/etc/user/secret/gitea/gitea.json"
+            ],
+            "DEPEND": [],
+            "START_ON_BOOT": "true",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": [
+                "firewall-gitea-dns",
+                "firewall-gitea-smtp",
+                "firewall-gitea",
+                "domain-gitea"
+            ]
+        }
+    ]
+}
--- a/gitea/template.json
+++ b/gitea/template.json
--- a/guacamole/template.json
+++ b/guacamole/template.json
--- a/homeassistant/template.json
+++ b/homeassistant/template.json
@@ -2,7 +2,7 @@
    "name": "Homeassistant",
    "subtitle": "Smart Home",
    "title": "Home Assistant",
-    "icon": "data:image/svg+xml;base64,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",
+    "icon": "data:image/svg+xml;base64,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",
    "description": "Home Assistant is free and open-source home automation software that acts as a central hub for managing and controlling smart home devices. It allows users to connect, automate, and customize their smart home setup, offering local control and privacy features. ",
    "fields": [
        {
--- a/immich/service-immich.json
+++ b/immich/service-immich.json
@@ -29,7 +29,7 @@
            "IMAGE": "tensorchord/pgvecto-rs:pg14-v0.2.0",
            "UPDATE": "true",
            "NAME": "immichpostgres-db",
-            "MEMORY": "256M",
+            "MEMORY": "768M",
            "NETWORK": "immich-net",
            "SELECTOR": "immichpostgres",
            "VOLUMES": [
@@ -49,6 +49,11 @@
            "ENV_FILES": [
                "/etc/user/secret/immich/immich.json"
            ],
+            "ENVS": [
+                {
+                    "POSTGRES_INITDB_ARGS": "--data-checksums"
+                }
+            ],
            "EXTRA": "--restart always",
            "DEPEND": "null",
            "START_ON_BOOT": "false",
@@ -81,7 +86,7 @@
            "IMAGE": "ghcr.io/immich-app/immich-server:#IMMICH_VERSION",
            "UPDATE": "true",
            "NAME": "immichapp-app",
-            "MEMORY": "1024M",
+            "MEMORY": "1536M",
            "NETWORK": "immich-net",
            "SELECTOR": "immichapp",
            "PORTS": [
@@ -136,7 +141,7 @@
            "UPDATE": "true",
            "NAME": "immichmachine-learning",
            "ROLES": "backend-www",
-            "MEMORY": "1024M",
+            "MEMORY": "1536M",
            "NETWORK": "immich-net",
            "SELECTOR": "immichmachine-learning",
            "ENVS": [
--- a/immich/template.json
+++ b/immich/template.json
@@ -1,5 +1,6 @@
 {
    "name": "Immich",
+    "title": "Immich",
    "subtitle": "Photos and Videos",
    "icon": "data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iOTYiIGhlaWdodD0iOTYiIHZpZXdCb3g9IjAgMCA5NiA5NiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQ1LjMwNjkgMzIuNTE3N0M1MC41NDQ1IDM3LjE4IDU0Ljc2NTUgNDIuMTc2MyA1Ny40ODIgNDYuODg0OUM2Mi4xNDc2IDM4LjQ5NTIgNjUuMjY1MiAyOC41MjU4IDY1LjMwNDUgMjIuMTc2MkM2NS4zMDQ1IDIyLjEzMTMgNjUuMzA0NSAyMi4wOTAzIDY1LjMwNDUgMjIuMDUyMkM2NS4zMDQ1IDEyLjY1NjYgNTUuOTgyOCA5IDQ3Ljk1MjggOUMzOS45MjI5IDkgMzAuNjAxMSAxMi42NTY2IDMwLjYwMTEgMjIuMDUyMkMzMC42MDExIDIyLjE4MDMgMzAuNjAxMSAyMi4zNTIxIDMwLjYwMTEgMjIuNTU5MkMzNS4wNzcgMjQuNTU5OSA0MC4zODIzIDI4LjEzNDYgNDUuMzA2OSAzMi41MTc3WiIgZmlsbD0iI0ZBMjkyMSIvPgo8cGF0aCBkPSJNMTYuNzM0NSA1OC4xMzk2QzIwLjAwOCA1NC40Nzc1IDI1LjAzMDIgNTAuNTA4OCAzMC42OTc1IDQ3LjE1MzVDMzYuNzI2OCA0My41ODU1IDQyLjc1NzQgNDEuMDkyOCA0OC4wNTA1IDM5Ljk1MjFDNDEuNTU2NCAzMi44OTc5IDMzLjA5IDI2LjgzNTkgMjcuMDk0NiAyNC44MzY2QzI3LjA1MjYgMjQuODIzIDI3LjAxMzMgMjQuODEwNyAyNi45NzggMjQuNzk4NUMxOC4wOSAyMS44OTU2IDExLjc1MDMgMjkuNjc4OCA5LjI2OTgxIDM3LjM1NzJDNi43ODkzIDQ1LjAzNTYgNy4zNjY3MSA1NS4wNzk5IDE2LjI1NDcgNTcuOTgyOEMxNi4zNzUzIDU4LjAyMjMgMTYuNTM4IDU4LjA3NTUgMTYuNzM0NSA1OC4xMzk2WiIgZmlsbD0iI0VENzlCNSIvPgo8cGF0aCBkPSJNODYuNzMgMzcuMjI3M0M4NC4yNDk1IDI5LjU0ODkgNzcuOTA5OCAyMS43NjU3IDY5LjAyMTggMjQuNjY4NkM2OC44OTk4IDI0LjcwODEgNjguNzM3MiAyNC43NjEyIDY4LjU0MiAyNC44MjUzQzY4LjAzMzcgMjkuNzIyIDY2LjI5MTkgMzUuOTAxMyA2My42Njc1IDQxLjk2NDZDNjAuODc2NiA0OC40MTM3IDU3LjQ1NCA1My45OTQ3IDUzLjgzODkgNTguMDQ2NEM2My4yMTYyIDU5LjkxNjIgNzMuNjEwMiA1OS44MTU0IDc5LjYyODYgNTcuODkxQzc5LjY3MDYgNTcuODc3NSA3OS43MDk5IDU3Ljg2MzggNzkuNzQ1MSA1Ny44NTI5Qzg4LjYzMzEgNTQuOTQ4NiA4OS4yMTA2IDQ0LjkwNDQgODYuNzMgMzcuMjI3M1oiIGZpbGw9IiNGRkI0MDAiLz4KPHBhdGggZD0iTTQwLjAyODEgNjUuNjQ1N0MzOC41MTY3IDU4Ljc3ODIgMzguMDIxOSA1Mi4yNDA1IDM4LjU3NzcgNDYuODI3MUMyOS44OTg0IDUwLjg1NzIgMjEuNTQ4NiA1Ny4wOCAxNy44MDM0IDYyLjE5NDhDMTcuNzc3NSA2Mi4yMzAyIDE3Ljc1MzIgNjIuMjY0NCAxNy43MzE1IDYyLjI5NDNDMTIuMjM5IDY5Ljg5NjQgMTcuNjQyMSA3OC4zNjM5IDI0LjEzODkgODMuMTA4QzMwLjYzNDQgODcuODUzNCA0MC4zMTQxIDkwLjQwNDcgNDUuODA3OSA4Mi44MDI3QzQ1Ljg4MzggODIuNjk5MSA0NS45ODQxIDgyLjU2MDEgNDYuMTA0NyA4Mi4zOTI1QzQzLjY1MjYgNzguMTMwOCA0MS40NDg3IDcyLjEwMTUgNDAuMDI4MSA2NS42NDU3WiIgZmlsbD0iIzFFODNGNyIvPgo8cGF0aCBkPSJNNzguMTIyOSA2MS44MDQ5QzczLjMzMzkgNjIuODMyNSA2Ni45NTA4IDYzLjA3NjUgNjAuNDAzOCA2Mi40NEM1My40NDA2IDYxLjc2NDEgNDcuMTA1IDYwLjIxNTggNDIuMTU0OCA1OC4wMTA3QzQzLjI4MzkgNjcuNTU0OCA0Ni41OTEzIDc3LjQ2MjkgNTAuMjcxNSA4Mi42MjRDNTAuMjk3MiA4Mi42NTk1IDUwLjMyMTcgODIuNjkzNiA1MC4zNDM0IDgyLjcyMzVDNTUuODM1NyA5MC4zMjU2IDY1LjUxNTQgODcuNzc0MyA3Mi4wMTIyIDgzLjAyODhDNzguNTA3OSA3OC4yODM0IDgzLjkxMjIgNjkuODE1OSA3OC40MTk3IDYyLjIxNTJDNzguMzQzOCA2Mi4xMTE1IDc4LjI0MzUgNjEuOTcyNSA3OC4xMjI5IDYxLjgwNDlaIiBmaWxsPSIjMThDMjQ5Ii8+Cjwvc3ZnPgo=",
    "description":"Immich is a free, open-source, self-hosted photo and video management platform designed as an alternative to Google Photos. It allows users to back up, organize, and manage their photos and videos on their own server, prioritizing privacy and control over their data.",
--- a/jellyfin/service-jellyfin.json
+++ b/jellyfin/service-jellyfin.json
@@ -29,7 +29,7 @@
            "POST_START": "null"
        },
        {
-            "IMAGE": "jellyfin/jellyfin:latest",
+            "IMAGE": "jellyfin/jellyfin:#VERSION",
            "UPDATE": "true",
            "NAME": "jellyfin",
            "NETWORK": "host",
--- a/jellyfin/template.json
+++ b/jellyfin/template.json
@@ -1,13 +1,21 @@
 {
    "name": "Jellyfin",
+    "title": "Jellyfin",
    "subtitle": "Media System",
-    "icon": "data:image/svg+xml;base64,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",
+    "icon": "data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iNjYiIGhlaWdodD0iNjYiIHZpZXdCb3g9IjAgMCA2NiA2NiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTMzIDI1LjI4NzZDMzAuMTAxNCAyNS4yODc2IDIwLjc3MTcgNDIuMjA0MiAyMi4xOTQgNDUuMDYwMkMyMy42MTY0IDQ3LjkxNjMgNDIuMzk5MiA0Ny44ODUxIDQzLjgwNTkgNDUuMDYwMkM0NS4yMTI3IDQyLjIzNTQgMzUuOTAyOCAyNS4yODkgMzMgMjUuMjg3NloiIGZpbGw9InVybCgjcGFpbnQwX2xpbmVhcl8yMl85OCkiLz4KPHBhdGggZD0iTTMzIDBDMjQuMjcwMSAwIC0zLjg0NTIzIDUwLjk3MSAwLjQ0MTcwNiA1OS41Nzg5QzQuNzI4NjQgNjguMTg2OCA2MS4zMjY2IDY4LjA4NzUgNjUuNTY2OCA1OS41Nzg5QzY5LjgwNjkgNTEuMDcwMiA0MS43MzgzIDAgMzMgMFpNNTQuMzQzOSA1Mi4xMDk3QzUxLjU2NTggNTcuNjg3MSAxNC40ODM4IDU3Ljc0OTUgMTEuNjc0NSA1Mi4xMDk3QzguODY1MjUgNDYuNDY5OSAyNy4yODY0IDEzLjA3MjEgMzMuMDA4NSAxMy4wNzIxQzM4LjczMDUgMTMuMDcyMSA1Ny4xMjIgNDYuNTMwOSA1NC4zNDM5IDUyLjEwOTdaIiBmaWxsPSJ1cmwoI3BhaW50MV9saW5lYXJfMjJfOTgpIi8+CjxkZWZzPgo8bGluZWFyR3JhZGllbnQgaWQ9InBhaW50MF9saW5lYXJfMjJfOTgiIHgxPSIxMi4zMzExIiB5MT0iMjYuOTQzOSIgeDI9IjY3LjA1NDQiIHkyPSI1OC41Mzc5IiBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSI+CjxzdG9wIHN0b3AtY29sb3I9IiNBQTVDQzMiLz4KPHN0b3Agb2Zmc2V0PSIxIiBzdG9wLWNvbG9yPSIjMDBBNERDIi8+CjwvbGluZWFyR3JhZGllbnQ+CjxsaW5lYXJHcmFkaWVudCBpZD0icGFpbnQxX2xpbmVhcl8yMl85OCIgeDE9IjEyLjMzMTEiIHkxPSIyNi45NDQiIHgyPSI2Ny4wNTQ0IiB5Mj0iNTguNTM4IiBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSI+CjxzdG9wIHN0b3AtY29sb3I9IiNBQTVDQzMiLz4KPHN0b3Agb2Zmc2V0PSIxIiBzdG9wLWNvbG9yPSIjMDBBNERDIi8+CjwvbGluZWFyR3JhZGllbnQ+CjwvZGVmcz4KPC9zdmc+Cg==",
    "description": "Jellyfin is a free and open-source media server and suite of applications that allows users to manage, organize, and stream their personal media collections. It is built by volunteers and emphasizes user control, privacy, and a lack of tracking or hidden agendas.",
    "fields": [
        {
            "description": "Domain",
            "key": "DOMAIN",
            "value": ""
+        },
+        {
+            "description": "Version",
+            "key": "VERSION",
+            "value": "2025081105",
+            "info": "Latest stable official version at the time of template creation.",
+            "advanced": "true"
        }
    ]
 }
--- a/leantime/domain-leantime.json
+++ b/leantime/domain-leantime.json
@@ -26,7 +26,7 @@
                    "TARGET": "leantime-app"
                },
                {
-                    "PORT": "80"
+                    "PORT": "8080"
                },
                {
                    "DOMAIN": "#DOMAIN"
--- a/leantime/firewall-leantime-dns.json
+++ b/leantime/firewall-leantime-dns.json
@@ -0,0 +1,76 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "UPDATE": "true",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "leantimeapp"
+                },
+                {
+                    "TARGET": "coredns"
+                },
+                {
+                    "TYPE": "udp"
+                },
+                {
+                    "TARGET_PORT": "53"
+                },
+                {
+                    "COMMENT": "leantime nginx access for local dns"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "",
+            "PRE_START": [],
+            "POST_START": []
+        }
+    ]
+}
--- a/leantime/firewall-leantime-smtp.json
+++ b/leantime/firewall-leantime-smtp.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "leantime-app"
+                },
+                {
+                    "TARGET": "smtp"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "25"
+                },
+                {
+                    "COMMENT": "leantime to smtp"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/leantime/firewall-leantime.json
+++ b/leantime/firewall-leantime.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "smarthostbackend"
+                },
+                {
+                    "TARGET": "leantime-app"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "8080"
+                },
+                {
+                    "COMMENT": "leantime"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/leantime/leantime-secret.json
+++ b/leantime/leantime-secret.json
@@ -0,0 +1,17 @@
+{
+    "leantimemysql": {
+        "MARIADB_DATABASE": "#DB_MYSQL",
+        "MARIADB_USER": "#DB_USER",
+        "MARIADB_PASSWORD": "#DB_PASSWORD",
+        "MARIADB_ROOT_PASSWORD": "#DB_ROOT_PASSWORD"
+    },
+    "leantimeapp": {
+        "LEAN_DB_USER": "#DB_USER",
+        "LEAN_DB_PASSWORD": "#DB_PASSWORD",
+        "LEAN_DB_HOST": "leantimemysql-db",
+        "LEAN_DB_DATABASE": "#DB_MYSQL",
+        "LEAN_OIDC_CLIENT_SECRET": "#OIDC_CLIENT_SECRET",
+        "LEAN_S3_SECRET": "#S3_SECRET",
+        "LEAN_SESSION_PASSWORD": "#SESSION_PASSWORD"
+    }
+}
--- a/leantime/service-leantime.json
+++ b/leantime/service-leantime.json
@@ -0,0 +1,302 @@
+{
+    "main": {
+        "SERVICE_NAME": "leantime",
+        "DOMAIN": "#DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "alpine:latest",
+            "UPDATE": "true",
+            "NAME": "leantime",
+            "NETWORK": "host",
+            "MEMORY": "64M",
+            "VOLUMES": [
+                {
+                    "SOURCE": "USER_DATA",
+                    "DEST": "/etc/user/data",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "SYSTEM_DATA",
+                    "DEST": "/etc/system/data",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "SYSTEM_LOG",
+                    "DEST": "/etc/system/log",
+                    "TYPE": "rw"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/leantime/leantime.json"
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "ENTRYPOINT": "sh -c",
+            "CMD": "mkdir -p /etc/user/data/leantime/db && mkdir -p /etc/system/log/leantime/db && mkdir -p /etc/user/data/leantime/data/plugins && mkdir -p /etc/user/data/leantime/data/public && mkdir -p /etc/user/data/leantime/data/user && chmod 770 -R /etc/user/data/leantime/data && chown -R 82:82 /etc/user/data/leantime/data",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "mariadb:latest",
+            "UPDATE": "true",
+            "NAME": "leantimemysql-db",
+            "MEMORY": "256M",
+            "NETWORK": "leantime-net",
+            "SELECTOR": "leantimemysql",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/leantime/db",
+                    "DEST": "/var/lib/mysql",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/system/log/leantime/db",
+                    "DEST": "/var/lib/mysql/mysql-bin",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "3306",
+                    "TYPE": "tcp"
+                }
+            ],
+            "READYNESS": [
+                {
+                    "tcp": "3306"
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/leantime/leantime.json"
+            ],
+            "EXTRA": "--restart always",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "leantime/leantime:latest",
+            "UPDATE": "true",
+            "NAME": "leantimeapp",
+            "MEMORY": "1024M",
+            "NETWORK": "leantime-net",
+            "SELECTOR": "leantime-app",
+            "DNS": [
+                "coredns"
+            ],
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/leantime/data/public",
+                    "DEST": "/var/www/html/public/userfiles",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/data/leantime/data/user",
+                    "DEST": "/var/www/html/userfiles",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/data/leantime/data/plugins",
+                    "DEST": "/var/www/html/app/Plugins",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "8080",
+                    "TYPE": "tcp"
+                }
+            ],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "LEAN_RATELIMIT_GENERAL": "1000"
+                },
+                {
+                    "LEAN_RATELIMIT_API": "10"
+                },
+                {
+                    "LEAN_RATELIMIT_AUTH": "20"
+                },
+                {
+                    "LEAN_LDAP_USE_LDAP": "false"
+                },
+                {
+                    "LEAN_USER_FILE_PATH": "userfiles/"
+                },
+                {
+                    "LEAN_PORT": "80"
+                },
+                {
+                    "LEAN_APP_URL": "https://#DOMAIN"
+                },
+                {
+                    "LEAN_APP_DIR": "leantime/"
+                },
+                {
+                    "LEAN_DEBUG": "DEBUG"
+                },
+                {
+                    "LEAN_SITENAME": "#LEANTIME_SITENAME"
+                },
+                {
+                    "LEAN_LANGUAGE": "#LEANTIME_LANG"
+                },
+                {
+                    "LEAN_DEFAULT_TIMEZONE": "#LEANTIME_TZ"
+                },
+                {
+                    "LEAN_LOG_PATH": "log/"
+                },
+                {
+                    "LEAN_DISABLE_LOGIN_FORM": "false"
+                },
+                {
+                    "LEAN_SESSION_EXPIRATION": "#SESSION_EXPIRATION"
+                },
+                {
+                    "LEAN_SESSION_SECURE": "#SESSION_SECURITY"
+                },
+                {
+                    "LEAN_EMAIL_RETURN": ""
+                },
+                {
+                    "LEAN_EMAIL_USE_SMTP": "true"
+                },
+                {
+                    "LEAN_EMAIL_SMTP_HOSTS": "#LEANTIME_SMTP"
+                },
+                {
+                    "LEAN_EMAIL_SMTP_AUTH": "false"
+                },
+                {
+                    "LEAN_EMAIL_SMTP_USERNAME": ""
+                },
+                {
+                    "LEAN_EMAIL_SMTP_PASSWORD": ""
+                },
+                {
+                    "LEAN_EMAIL_SMTP_AUTO_TLS": "false"
+                },
+                {
+                    "LEAN_EMAIL_SMTP_SECURE": "false"
+                },
+                {
+                    "LEAN_EMAIL_SMTP_SSLNOVERIFY": "false"
+                },
+                {
+                    "LEAN_EMAIL_SMTP_PORT": "25"
+                },
+                {
+                    "LEAN_LDAP_USE_LDAP": "false"
+                },
+                {
+                    "LEAN_OIDC_ENABLE": "#OIDC_ENABLE"
+                },
+                {
+                    "LEAN_OIDC_CLIENT_ID": "#OIDC_CLIENT_ID"
+                },
+                {
+                    "LEAN_OIDC_CREATE_USER": "#OIDC_CREATE_USER"
+                },
+                {
+                    "LEAN_OIDC_DEFAULT_ROLE": "20"
+                },
+                {
+                    "LEAN_OIDC_PROVIDER_URL": "#OIDC_PROVIDER_URL"
+                },
+                {
+                    "LEAN_OIDC_AUTH_URL_OVERRIDE": "#OIDC_AUTH_URL_OVERRIDE"
+                },
+                {
+                    "LEAN_OIDC_TOKEN_URL_OVERRIDE": "#OIDC_TOKEN_URL_OVERRIDE"
+                },
+                {
+                    "LEAN_OIDC_USERINFO_URL_OVERRIDE": "#OIDC_USERINFO_URL_OVERRIDE"
+                },
+                {
+                    "LEAN_OIDC_SCOPES": "user:email,read:user"
+                },
+                {
+                    "LEAN_OIDC_FIELD_EMAIL": "0.email"
+                },
+                {
+                    "LEAN_OIDC_FIELD_FIRSTNAME": "name"
+                },
+                {
+                    "LEAN_LOGO_PATH": "/dist/images/logo.svg"
+                },
+                {
+                    "LEAN_PRINT_LOGO_URL": "/dist/images/logo.png"
+                },
+                {
+                    "LEAN_DEFAULT_THEME": "default"
+                },
+                {
+                    "LEAN_PRIMARY_COLOR": "#006d9f"
+                },
+                {
+                    "LEAN_SECONDARY_COLOR": "#00a886"
+                },
+                {
+                    "LEAN_USE_S3": "#LEANTIME_USE_S3"
+                },
+                {
+                    "LEAN_S3_KEY": "#S3_KEY"
+                },
+                {
+                    "LEAN_S3_BUCKET": "#S3_BUCKET"
+                },
+                {
+                    "LEAN_S3_USE_PATH_STYLE_ENDPOINT": "#S3_USE_PATH_STYLE_ENDPOINT"
+                },
+                {
+                    "LEAN_S3_REGION": "#S3_REGION"
+                },
+                {
+                    "LEAN_S3_FOLDER_NAME": "#S3_FOLDER_NAME"
+                },
+                {
+                    "LEAN_S3_END_POINT": "#S3_END_POINT"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/leantime/leantime.json"
+            ],
+            "EXTRA": "--restart always",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": [
+                "firewall-leantime-dns"
+            ],
+            "POST_START": [
+                "firewall-leantime-smtp",
+                "firewall-leantime",
+                "domain-leantime"
+            ]
+        }
+    ]
+}
--- a/leantime/template.json
+++ b/leantime/template.json
--- a/matrix/domain-matrix-admin.json
+++ b/matrix/domain-matrix-admin.json
@@ -0,0 +1,63 @@
+{
+    "main": {
+        "SERVICE_NAME": "matrix",
+        "DOMAIN": "#ADMINDOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/domain-check",
+            "UPDATE": "true",
+            "MEMORY": "64M",
+            "NAME": "domain_checker",
+            "ROLES": "domain_checker",
+            "NETWORK": "host",
+            "SELECTOR": "",
+            "SCALE": "0",
+            "EXTRA": "--rm --privileged",
+            "PRE_START": [],
+            "DEPEND": [],
+            "POST_START": [],
+            "CMD": "",
+            "ENVS": [
+                {
+                    "PROXY": "smarthostloadbalancer"
+                },
+                {
+                    "TARGET": "matrixadmin"
+                },
+                {
+                    "PORT": "80"
+                },
+                {
+                    "DOMAIN": "#ADMINDOMAIN"
+                },
+                {
+                    "SMARTHOST_PROXY_PATH": "/smarthost-domains"
+                },
+                {
+                    "LOCATION": "#SUBPATH"
+                },
+                {
+                    "OPERATION": "CREATE"
+                }
+            ],
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/config/smarthost-domains",
+                    "DEST": "/smarthost-domains",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ]
+        }
+    ]
+}
--- a/matrix/domain-matrix.json
+++ b/matrix/domain-matrix.json
@@ -0,0 +1,60 @@
+{
+    "main": {
+        "SERVICE_NAME": "matrix",
+        "DOMAIN": "#DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/domain-check",
+            "UPDATE": "true",
+            "MEMORY": "64M",
+            "NAME": "domain_checker",
+            "ROLES": "domain_checker",
+            "NETWORK": "host",
+            "SELECTOR": "",
+            "SCALE": "0",
+            "EXTRA": "--rm --privileged",
+            "PRE_START": [],
+            "DEPEND": [],
+            "POST_START": [],
+            "CMD": "",
+            "ENVS": [
+                {
+                    "PROXY": "smarthostloadbalancer"
+                },
+                {
+                    "TARGET": "matrixserver"
+                },
+                {
+                    "PORT": "8008"
+                },
+                {
+                    "DOMAIN": "#DOMAIN"
+                },
+                {
+                    "SMARTHOST_PROXY_PATH": "/smarthost-domains"
+                },
+                {
+                    "OPERATION": "CREATE"
+                }
+            ],
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/config/smarthost-domains",
+                    "DEST": "/smarthost-domains",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ]
+        }
+    ]
+}
--- a/matrix/firewall-matrix-admin.json
+++ b/matrix/firewall-matrix-admin.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "smarthostbackend"
+                },
+                {
+                    "TARGET": "matrixadmin"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "80"
+                },
+                {
+                    "COMMENT": "matrixadmin for proxy"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/matrix/firewall-matrix-dns.json
+++ b/matrix/firewall-matrix-dns.json
@@ -0,0 +1,76 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "UPDATE": "true",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "matrixserver"
+                },
+                {
+                    "TARGET": "coredns"
+                },
+                {
+                    "TYPE": "udp"
+                },
+                {
+                    "TARGET_PORT": "53"
+                },
+                {
+                    "COMMENT": "matrix nginx access for local dns"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "",
+            "PRE_START": [],
+            "POST_START": []
+        }
+    ]
+}
--- a/matrix/firewall-matrix-smtp.json
+++ b/matrix/firewall-matrix-smtp.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "matrixserver"
+                },
+                {
+                    "TARGET": "smtp"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "25"
+                },
+                {
+                    "COMMENT": "matrix to smtp"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/matrix/firewall-matrix.json
+++ b/matrix/firewall-matrix.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "smarthostbackend"
+                },
+                {
+                    "TARGET": "matrixserver"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "8008"
+                },
+                {
+                    "COMMENT": "matrix"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/matrix/matrix-secret.json
+++ b/matrix/matrix-secret.json
@@ -0,0 +1,29 @@
+{
+    "matrixpostgres": {
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_ROOT_PASSWORD": "#POSTGRES_ROOT_PASSWORD"
+    },
+    "matrixserver": {
+        "DB_TYPE": "psycopg2",
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_HOST": "matrixpostgres-db",
+        "DB_PORT": "5432",
+        "SYNAPSE_SERVER_NAME": "#DOMAIN",
+        "SYNAPSE_REPORT_STATS": "no",
+        "ADMIN_USERNAME": "#ADMIN_USERNAME",
+        "ADMIN_PASSWORD": "#ADMIN_PASSWORD",
+        "SYNAPSE_CONFIG_DIR": "/data",
+        "SYNAPSE_CONFIG_PATH": "/data/homeserver.yaml",
+        "SYNAPSE_DATA_DIR": "/data"
+    },
+    "matrixadmin": {
+        "REACT_APP_SERVER": "https://#DOMAIN",
+        "BASE_PATH": "#ADMINDOMAIN",
+        "ADMINDOMAIN": "#ADMINDOMAIN",
+        "SUBPATH": "#SUBPATH"
+    }
+}
--- a/matrix/service-matrix.json
+++ b/matrix/service-matrix.json
@@ -0,0 +1,199 @@
+{
+    "main": {
+        "SERVICE_NAME": "matrix",
+        "DOMAIN": "DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "alpine:latest",
+            "UPDATE": "true",
+            "NAME": "matrix-init",
+            "NETWORK": "host",
+            "MEMORY": "64M",
+            "VOLUMES": [
+                {
+                    "SOURCE": "USER_DATA",
+                    "DEST": "/etc/user/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/matrix/matrix.json"
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "ENTRYPOINT": "sh -c",
+            "CMD": "mkdir -p /etc/user/data/matrix/db && mkdir -p /etc/user/data/matrix/synapse",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "postgres:alpine",
+            "UPDATE": "true",
+            "NAME": "matrixpostgres-db",
+            "ROLES": "postgres-db",
+            "MEMORY": "256M",
+            "NETWORK": "matrix-net",
+            "SELECTOR": "matrixpostgres-db",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/matrix/db",
+                    "DEST": "/var/lib/postgresql/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "5432",
+                    "TYPE": "tcp"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/matrix/matrix.json"
+            ],
+            "ENVS": [
+                {
+                    "POSTGRES_INITDB_ARGS": "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
+                }
+            ],
+            "EXTRA": "--restart unless-stopped",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": [],
+            "POST_START": []
+        },
+        {
+            "IMAGE": "matrixdotorg/synapse",
+            "UPDATE": "true",
+            "NAME": "matrixserver-init",
+            "ROLES": "backend-www",
+            "MEMORY": "512M",
+            "NETWORK": "matrix-net",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/matrix/synapse",
+                    "DEST": "/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/matrix/matrix.json"
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "ENTRYPOINT": "bash -c",
+            "CMD": "if [ ! -f /data/homeserver.yaml ]; then /start.py generate ; else exit 1; fi",
+            "PRE_START": [],
+            "POST_START": []
+        },
+        {
+            "IMAGE": "safebox/matrix-setup:latest",
+            "UPDATE": "true",
+            "NAME": "matrixserver-dbinit",
+            "NETWORK": "host",
+            "MEMORY": "64M",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/matrix/synapse",
+                    "DEST": "/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/matrix/matrix.json"
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "matrixdotorg/synapse",
+            "UPDATE": "true",
+            "NAME": "matrixserver-app",
+            "ROLES": "backend-www",
+            "MEMORY": "512M",
+            "NETWORK": "matrix-net",
+            "SELECTOR": "matrixserver",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/matrix/synapse",
+                    "DEST": "/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/matrix/matrix.json"
+            ],
+            "EXTRA": "--restart unless-stopped",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": [],
+            "POST_START": [
+                "firewall-matrix",
+                "domain-matrix"
+            ]
+        },
+        {
+            "IMAGE": "safebox/matrix-setup:latest",
+            "UPDATE": "true",
+            "NAME": "matrixserver-finalize",
+            "NETWORK": "host",
+            "MEMORY": "64M",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/matrix/synapse",
+                    "DEST": "/data",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "SHARED",
+                    "DEST": "/var/tmp/shared",
+                    "TYPE": "rw"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/matrix/matrix.json"
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "awesometechnologies/synapse-admin",
+            "UPDATE": "true",
+            "NAME": "matrixadmin",
+            "ROLES": "backend-www",
+            "MEMORY": "128M",
+            "NETWORK": "matrix-net",
+            "SELECTOR": "matrixadmin",
+            "VOLUMES": [],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "80",
+                    "TYPE": "tcp"
+                }
+            ],
+            "EXTRA": "--restart unless-stopped",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": [],
+            "POST_START": [
+                "firewall-matrix-admin",
+                "domain-matrix-admin"
+            ]
+        }
+    ]
+}
--- a/matrix/template.json
+++ b/matrix/template.json
--- a/nextcloud/domain-nextcloud.json
+++ b/nextcloud/domain-nextcloud.json
@@ -1,7 +1,7 @@
- {
+{
    "main": {
        "SERVICE_NAME": "nextcloud",
-      "DOMAIN": "#NEXTCLOUD_TRUSTED_DOMAINS"
+        "DOMAIN": "#DOMAIN"
    },
    "containers": [
        {
@@ -19,12 +19,24 @@
            "POST_START": [],
            "CMD": "",
            "ENVS": [
-          { "PROXY": "smarthostloadbalancer" },
-          { "TARGET": "nextcloudnginx" },
-          { "PORT": "80" },
-          { "DOMAIN": "#NEXTCLOUD_TRUSTED_DOMAINS" },
-          { "SMARTHOST_PROXY_PATH": "/smarthost-domains" },
-	        { "OPERATION": "CREATE" }
+                {
+                    "PROXY": "smarthostloadbalancer"
+                },
+                {
+                    "TARGET": "nextcloudnginx"
+                },
+                {
+                    "PORT": "80"
+                },
+                {
+                    "DOMAIN": "#DOMAIN"
+                },
+                {
+                    "SMARTHOST_PROXY_PATH": "/smarthost-domains"
+                },
+                {
+                    "OPERATION": "CREATE"
+                }
            ],
            "VOLUMES": [
                {
--- a/nextcloud/nextcloud-secret.json
+++ b/nextcloud/nextcloud-secret.json
@@ -1,20 +1,20 @@
 {
-    "nextcloudmysql": {
-        "MARIADB_DATABASE": "#MARIADB_DATABASE",
-        "MARIADB_USER": "#MARIADB_USER",
-        "MARIADB_PASSWORD": "#MARIADB_PASSWORD",
-        "MARIADB_ROOT_PASSWORD": "#MARIADB_ROOT_PASSWORD"
+    "nextcloudpostgres": {
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_ROOT_PASSWORD": "#POSTGRES_ROOT_PASSWORD"
    },
    "nextcloudphp": {
        "NEXTCLOUD_ADMIN_USER": "#NEXTCLOUD_ADMIN_USER",
        "NEXTCLOUD_ADMIN_PASSWORD": "#NEXTCLOUD_ADMIN_PASSWORD",
-        "NEXTCLOUD_TRUSTED_DOMAINS": "#NEXTCLOUD_TRUSTED_DOMAINS",
-        "OVERWRITEHOST": "#NEXTCLOUD_TRUSTED_DOMAINS",
+        "DOMAIN": "#DOMAIN",
+        "OVERWRITEHOST": "#DOMAIN",
        "NEXTCLOUD_DATA_DIR": "/var/data",
-        "MYSQL_DATABASE": "#MARIADB_DATABASE",
-        "MYSQL_USER": "#MARIADB_USER",
-        "MYSQL_PASSWORD": "#MARIADB_PASSWORD",
-        "MYSQL_HOST": "nextcloudmysql-db",
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_HOST": "nextcloudpostgres-db",
        "REDIS_HOST": "nextcloud-redis"
    }
 }
--- a/nextcloud/service-nextcloud.json
+++ b/nextcloud/service-nextcloud.json
@@ -34,47 +34,31 @@
            "DEPEND": "null",
            "START_ON_BOOT": "false",
            "ENTRYPOINT": "sh -c",
-            "CMD": "mkdir -p /etc/user/data/nextcloud/db && mkdir -p /etc/system/log/nextcloud/db && mkdir -p /etc/user/data/nextcloud/apps && mkdir -p /etc/user/data/nextcloud/config && mkdir -p /etc/user/data/nextcloud/data && chmod 777 -R /etc/user/data/nextcloud && chmod 0770 -R /etc/user/data/nextcloud/data && chown -R 82:82 /etc/user/data/nextcloud/data && chown -R 82:82 /etc/user/data/nextcloud/apps && chown -R 82:82 /etc/user/data/nextcloud/config",
+            "CMD": "mkdir -p /etc/user/data/nextcloud/db && mkdir -p /etc/user/data/nextcloud/apps && mkdir -p /etc/user/data/nextcloud/config && mkdir -p /etc/user/data/nextcloud/data && chmod 777 -R /etc/user/data/nextcloud && chmod 0770 -R /etc/user/data/nextcloud/data && chown -R 82:82 /etc/user/data/nextcloud/data && chown -R 82:82 /etc/user/data/nextcloud/apps && chown -R 82:82 /etc/user/data/nextcloud/config",
            "PRE_START": "null",
            "POST_START": "null"
        },
        {
-            "IMAGE": "mariadb:10.5",
+            "IMAGE": "postgres:15-alpine",
            "UPDATE": "true",
-            "NAME": "nextcloudmysql-db",
+            "NAME": "nextcloudpostgres-db",
            "MEMORY": "256M",
            "NETWORK": "nextcloud-net",
-            "SELECTOR": "nextcloudmysql",
+            "SELECTOR": "nextcloudpostgres",
            "VOLUMES": [
                {
                    "SOURCE": "/etc/user/data/nextcloud/db",
-                    "DEST": "/var/lib/mysql",
-                    "TYPE": "rw"
-                },
-                {
-                    "SOURCE": "/etc/system/log/nextcloud/db",
-                    "DEST": "/var/lib/mysql/mysql-bin",
+                    "DEST": "/var/lib/postgres",
                    "TYPE": "rw"
                }
            ],
            "PORTS": [
                {
                    "SOURCE": "null",
-                    "DEST": "3306",
+                    "DEST": "5432",
                    "TYPE": "tcp"
                }
            ],
-            "READYNESS": [
-                {
-                    "tcp": "3306"
-                },
-                {
-                    "HTTP": ""
-                },
-                {
-                    "EXEC": "/ready.sh"
-                }
-            ],
            "ENV_FILES": [
                "/etc/user/secret/nextcloud/nextcloud.json"
            ],
@@ -182,7 +166,7 @@
            ]
        },
        {
-            "IMAGE": "registry.format.hu/nextcloud-nginx:1.23.1",
+            "IMAGE": "safebox/nextcloud-nginx:latest",
            "UPDATE": "true",
            "NAME": "nextcloudnginx",
            "ROLES": "backend-www",
--- a/nextcloud/template.json
+++ b/nextcloud/template.json
--- a/outline/domain-outline.json
+++ b/outline/domain-outline.json
@@ -29,7 +29,7 @@
                    "PORT": "3000"
                },
                {
-                    "DOMAIN": "#OUTLINE_DOMAIN"
+                    "DOMAIN": "#DOMAIN"
                },
                {
                    "SMARTHOST_PROXY_PATH": "/smarthost-domains"
--- a/outline/outline-secret.json
+++ b/outline/outline-secret.json
@@ -7,6 +7,31 @@
    "outlineapp": {
        "SECRET_KEY": "#SECRET_KEY",
        "UTILS_SECRET": "#UTILS_SECRET",
-        "DATABASE_URL": "postgres://#DB_USER:#DB_PASSWORD@outlinepostgres-db:5432/#DB_NAME"
+        "DATABASE_URL": "postgres://#DB_USER:#DB_PASSWORD@outlinepostgres-db:5432/#DB_NAME",
+        "SLACK_CLIENT_ID": "#SLACK_CLIENT_ID",
+        "SLACK_CLIENT_SECRET": "#SLACK_CLIENT_SECRET",
+        "GOOGLE_CLIENT_ID": "#GOOGLE_CLIENT_ID",
+        "GOOGLE_CLIENT_SECRET": "#GOOGLE_CLIENT_SECRET",
+        "AZURE_CLIENT_ID": "#AZURE_CLIENT_ID",
+        "AZURE_CLIENT_SECRET": "#AZURE_CLIENT_SECRET",
+        "AZURE_RESOURCE_APP_ID": "#AZURE_RESOURCE_APP_ID",
+        "DISCORD_CLIENT_ID": "#DISCORD_CLIENT_ID",
+        "DISCORD_CLIENT_SECRET": "#DISCORD_CLIENT_SECRET",
+        "DISCORD_SERVER_ID": "#DISCORD_SERVER_ID",
+        "OIDC_CLIENT_ID": "#OIDC_CLIENT_ID",
+        "OIDC_CLIENT_SECRET": "#OIDC_CLIENT_SECRET",
+        "OIDC_AUTH_URI": "#OIDC_AUTH_URI",
+        "OIDC_TOKEN_URI": "#OIDC_TOKEN_URI",
+        "OIDC_USERINFO_URI": "#OIDC_USERINFO_URI",
+        "OIDC_LOGOUT_URI": "#OIDC_LOGOUT_URI",
+        "OIDC_USERNAME_CLAIM": "#OIDC_USERNAME_CLAIM",
+        "OIDC_DISPLAY_NAME": "#OIDC_DISPLAY_NAME",
+        "OIDC_SCOPES": "#OIDC_SCOPES",
+        "SMTP_HOST": "#SMTP_HOST",
+        "SMTP_PORT": "#SMTP_PORT",
+        "SMTP_SERVICE": "#SMTP_SERVICE",
+        "SMTP_USERNAME": "#SMTP_USERNAME",
+        "SMTP_PASSWORD": "#SMTP_PASSWORD",
+        "SMTP_FROM_EMAIL": "#SMTP_FROM_EMAIL"
    }
 }
--- a/outline/service-outline.json
+++ b/outline/service-outline.json
@@ -108,10 +108,10 @@
                    "DATABASE_CONNECTION_POOL_MAX": ""
                },
                {
-                    "REDIS_URL": "redis://outlineredis-app:6379"
+                    "REDIS_URL": "redis://outlineredis-server:6379"
                },
                {
-                    "URL": "https://#OUTLINE_DOMAIN"
+                    "URL": "https://#DOMAIN"
                },
                {
                    "PORT": 3000
--- a/outline/template.json
+++ b/outline/template.json
@@ -1,8 +1,9 @@
 {
-    "name": "Outline",
-    "subtitle": "Collaborative Knowledge Base",
+    "name": "outline",
+    "title": "Outline",
+    "subtitle": "Knowledge Base",
    "description": "Outline is an open-source, self-hosted knowledge management and wiki application designed for teams to organize documentation, internal knowledge bases, onboarding guides, and notes.",
-    "icon": "data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iNTAiIGhlaWdodD0iNTAiIHZpZXdCb3g9IjAgMCA1MCA1MCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHJlY3Qgd2lkdGg9IjUwIiBoZWlnaHQ9IjUwIiByeD0iMiIgZmlsbD0id2hpdGUiLz4KPHBhdGggZD0iTTMwIDQxLjUyMDNWNDIuNDk2OUMzMCA0My44NzkzIDI4Ljg4MDcgNDUgMjcuNSA0NUMyNy4wNzA3IDQ1IDI2LjY0ODYgNDQuODg5MyAyNi4yNzQzIDQ0LjY3ODVMMTEuMjc0MyAzNi4yMzA1QzEwLjQ4NzIgMzUuNzg3MSAxMCAzNC45NTMxIDEwIDM0LjA0ODhWMTYuOTUxNkMxMCAxNi4wNDczIDEwLjQ4NzIgMTUuMjEzMyAxMS4yNzQzIDE0Ljc3TDI2LjI3NDMgNi4zMjE5MUMyNy40Nzc3IDUuNjQ0MTUgMjkuMDAyIDYuMDcxNDkgMjkuNjc4OSA3LjI3NjM5QzI5Ljg4OTQgNy42NTEwNiAzMCA4LjA3MzcgMzAgOC41MDM1OFY5LjQ4MDE4TDMxLjc4MTYgOC45NDUwMkMzMy4xMDQxIDguNTQ3NzggMzQuNDk3OCA5LjI5OTE4IDM0Ljg5NDYgMTAuNjIzM0MzNC45NjQ1IDEwLjg1NjcgMzUgMTEuMDk5IDM1IDExLjM0MjZWMTIuMzU4OEwzNy4xODk5IDEyLjA4NDdDMzguNTYgMTEuOTEzMiAzOS44MDk0IDEyLjg4NjMgMzkuOTgwNyAxNC4yNThDMzkuOTkzNiAxNC4zNjEgNDAgMTQuNDY0NyA0MCAxNC41Njg1VjM2LjQzMTlDNDAgMzcuODE0NCAzOC44ODA3IDM4LjkzNTEgMzcuNSAzOC45MzUxQzM3LjM5NjMgMzguOTM1MSAzNy4yOTI4IDM4LjkyODYgMzcuMTg5OSAzOC45MTU3TDM1IDM4LjY0MTdWMzkuNjU3OUMzNSA0MS4wNDAzIDMzLjg4MDcgNDIuMTYxIDMyLjUgNDIuMTYxQzMyLjI1NjcgNDIuMTYxIDMyLjAxNDcgNDIuMTI1NCAzMS43ODE2IDQyLjA1NTRMMzAgNDEuNTIwM1pNMzAgMzguOTA2OUwzMi41IDM5LjY1NzlWMTEuMzQyNkwzMCAxMi4wOTM1VjM4LjkwNjlaTTM1IDE0Ljg4MTRWMzYuMTE5MUwzNy41IDM2LjQzMTlWMTQuNTY4NUwzNSAxNC44ODE0Wk0xMi41IDE2Ljk1MTZWMzQuMDQ4OEwyNy41IDQyLjQ5NjlWOC41MDM1OEwxMi41IDE2Ljk1MTZaTTE1IDE4LjYxNjZMMTcuNSAxNy4zNjVWMzMuNjM1NEwxNSAzMi4zODM4VjE4LjYxNjZaIiBmaWxsPSJibGFjayIvPgo8L3N2Zz4K",
+    "icon": "data:image/svg+xml;base64,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",
    "fields": [
        {
            "description": "Secret key",
@@ -51,6 +52,174 @@
            "key": "DOMAIN",
            "value": "",
            "required": "true"
+        },
+        {
+            "description": "Slack client ID",
+            "key": "SLACK_CLIENT_ID",
+            "value": "",
+            "info": "Create a new app in your Slack workspace at https://api.slack.com/apps?new_app=1 and add 'Sign in with Slack' under 'Add features and functionality'. Set the Redirect URL to 'https://<your-domain>/auth/slack.callback'.",
+            "advanced": "true"
+        },
+        {
+            "description": "Slack client secret",
+            "key": "SLACK_CLIENT_SECRET",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "Google client ID",
+            "key": "GOOGLE_CLIENT_ID",
+            "value": "",
+            "info": "Create OAuth 2.0 credentials in Google Cloud Console at https://console.cloud.google.com/apis/credentials and set the Redirect URL to 'https://<your-domain>/auth/google.callback'.",
+            "advanced": "true"
+        },
+        {
+            "description": "Google client secret",
+            "key": "GOOGLE_CLIENT_SECRET",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "Azure client ID",
+            "key": "AZURE_CLIENT_ID",
+            "value": "",
+            "info": "Register an application in Azure AD at https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade and set the Redirect URL to 'https://<your-domain>/auth/azuread.callback'.",
+            "advanced": "true"
+        },
+        {
+            "description": "Azure client secret",
+            "key": "AZURE_CLIENT_SECRET",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "Azure resource app ID",
+            "key": "AZURE_RESOURCE_APP_ID",
+            "value": "",
+            "info": "This is usually the same as the client ID, but can vary based on your Azure AD setup.",
+            "advanced": "true"
+        },
+        {
+            "description": "Discord client ID",
+            "key": "DISCORD_CLIENT_ID",
+            "value": "",
+            "info": "Create an application in Discord Developer Portal at https://discord.com/developers/applications and set the Redirect URL to 'https://<your-domain>/auth/discord.callback'.",
+            "advanced": "true"
+        },
+        {
+            "description": "Discord client secret",
+            "key": "DISCORD_CLIENT_SECRET",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "Discord server ID (optional)",
+            "key": "DISCORD_SERVER_ID",
+            "value": "",
+            "info": "(Optional) If you want to restrict login to members of a specific Discord server, provide the server ID here.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect client ID",
+            "key": "OIDC_CLIENT_ID",
+            "value": "",
+            "info": "Set up an OpenID Connect application with your provider and set the Redirect URL to 'https://<your-domain>/auth/oidc.callback'.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect client secret",
+            "key": "OIDC_CLIENT_SECRET",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect provider auth URI",
+            "key": "OIDC_AUTH_URI",
+            "value": "",
+            "info": "The authorization endpoint URL of your OpenID Connect provider.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect provider token URI",
+            "key": "OIDC_TOKEN_URI",
+            "value": "",
+            "info": "The token endpoint URL of your OpenID Connect provider.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect provider userinfo URI",
+            "key": "OIDC_USERINFO_URI",
+            "value": "",
+            "info": "The userinfo endpoint URL of your OpenID Connect provider.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect provider logout URI (optional)",
+            "key": "OIDC_LOGOUT_URI",
+            "value": "",
+            "info": "(Optional) The logout endpoint URL of your OpenID Connect provider, if supported.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect username claim",
+            "key": "OIDC_USERNAME_CLAIM",
+            "value": "preferred_username",
+            "info": "The claim in the ID token or userinfo response to use as the username. Defaults to 'preferred_username'.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect display name",
+            "key": "OIDC_DISPLAY_NAME",
+            "value": "OpenID Connect",
+            "info": "The display name for the OpenID Connect authentication option. Defaults to 'OpenID Connect'.",
+            "advanced": "true"
+        },
+        {
+            "description": "OpenID Connect scopes",
+            "key": "OIDC_SCOPES",
+            "value": "openid profile email",
+            "info": "Space-separated list of scopes to request during authentication. Defaults to 'openid profile email'.",
+            "advanced": "true"
+        },
+        {
+            "description": "SMTP host",
+            "key": "SMTP_HOST",
+            "value": "",
+            "info": "Used for sending invitation and password reset emails. Leave blank to disable email functionality.",
+            "advanced": "true"
+        },
+        {
+            "description": "SMTP port",
+            "key": "SMTP_PORT",
+            "value": "587",
+            "info": "(Optional) The port to connect to on the SMTP server. Defaults to 587.",
+            "advanced": "true"
+        },
+        {
+            "description": "SMTP service (e.g., gmail)",
+            "key": "SMTP_SERVICE",
+            "value": "",
+            "info": "Used for sending invitation and password reset emails. Leave blank to disable email functionality.",
+            "advanced": "true"
+        },
+        {
+            "description": "SMTP username (email address)",
+            "key": "SMTP_USERNAME",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "SMTP password",
+            "key": "SMTP_PASSWORD",
+            "value": "",
+            "advanced": "true"
+        },
+        {
+            "description": "From email address",
+            "key": "SMTP_FROM_EMAIL",
+            "value": "",
+            "info": "(Optional) The email address that emails will be sent from. Defaults to the SMTP username if not set.",
+            "advanced": "true"
        }
    ]
 }
--- a/pocketid/domain-pocketid.json
+++ b/pocketid/domain-pocketid.json
@@ -0,0 +1,60 @@
+{
+    "main": {
+        "SERVICE_NAME": "pocketid",
+        "DOMAIN": "#DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/domain-check",
+            "UPDATE": "true",
+            "MEMORY": "64M",
+            "NAME": "domain_checker",
+            "ROLES": "domain_checker",
+            "NETWORK": "host",
+            "SELECTOR": "",
+            "SCALE": "0",
+            "EXTRA": "--rm --privileged",
+            "PRE_START": [],
+            "DEPEND": [],
+            "POST_START": [],
+            "CMD": "",
+            "ENVS": [
+                {
+                    "PROXY": "smarthostloadbalancer"
+                },
+                {
+                    "TARGET": "pocketid-app"
+                },
+                {
+                    "PORT": "1411"
+                },
+                {
+                    "DOMAIN": "#DOMAIN"
+                },
+                {
+                    "SMARTHOST_PROXY_PATH": "/smarthost-domains"
+                },
+                {
+                    "OPERATION": "CREATE"
+                }
+            ],
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/config/smarthost-domains",
+                    "DEST": "/smarthost-domains",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ]
+        }
+    ]
+}
--- a/pocketid/firewall-pocketid-dns.json
+++ b/pocketid/firewall-pocketid-dns.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "coredns"
+                },
+                {
+                    "TARGET": "pocketid-app"
+                },
+                {
+                    "TYPE": "udp"
+                },
+                {
+                    "TARGET_PORT": "53"
+                },
+                {
+                    "COMMENT": "dns for pocketid-app"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/pocketid/firewall-pocketid-smtp.json
+++ b/pocketid/firewall-pocketid-smtp.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "pocketid-app"
+                },
+                {
+                    "TARGET": "smtp"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "25"
+                },
+                {
+                    "COMMENT": "smtp for pocketid-app"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/pocketid/firewall-pocketid.json
+++ b/pocketid/firewall-pocketid.json
@@ -0,0 +1,75 @@
+{
+    "main": {
+        "SERVICE_NAME": "firewalls",
+        "DOMAIN": "null"
+    },
+    "containers": [
+        {
+            "IMAGE": "safebox/firewall",
+            "NAME": "firewall",
+            "MEMORY": "64M",
+            "NETWORK": "host",
+            "SCALE": "0",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/run/",
+                    "DEST": "/run/",
+                    "TYPE": "rw"
+                },
+                {
+                    "SOURCE": "/etc/user/config/services",
+                    "DEST": "/services",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/etc/system/data/dns/hosts.local",
+                    "DEST": "/etc/dns/hosts.local",
+                    "TYPE": "ro"
+                },
+                {
+                    "SOURCE": "/var/run/docker.sock",
+                    "DEST": "/var/run/docker.sock",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [],
+            "READYNESS": [
+                {
+                    "tcp": ""
+                },
+                {
+                    "HTTP": ""
+                },
+                {
+                    "EXEC": "/ready.sh"
+                }
+            ],
+            "ENVS": [
+                {
+                    "CHAIN": "DOCKER-USER"
+                },
+                {
+                    "SOURCE": "smarthostbackend"
+                },
+                {
+                    "TARGET": "pocketid-app"
+                },
+                {
+                    "TYPE": "tcp"
+                },
+                {
+                    "TARGET_PORT": "1411"
+                },
+                {
+                    "COMMENT": "proxy for pocketid-app"
+                }
+            ],
+            "EXTRA": "--privileged --rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": "null"
+        }
+    ]
+}
--- a/pocketid/pocketid-secret.json
+++ b/pocketid/pocketid-secret.json
@@ -0,0 +1,16 @@
+{
+    "pocketidpostgres": {
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_ROOT_PASSWORD": "#POSTGRES_ROOT_PASSWORD"
+    },
+    "pocketidapp": {
+        "PUBLIC_APP_URL": "https://#DOMAIN",
+        "TRUST_PROXY": "true",
+        "PUID": "1000",
+        "PGID": "1000",
+        "DB_PROVIDER": "postgres",
+        "DB_CONNECTION_STRING": "postgresql://#POSTGRES_USER:#POSTGRES_PASSWORD@pocketidpostgres-db:5432/#POSTGRES_DB"
+    }
+}
--- a/pocketid/service-pocketid.json
+++ b/pocketid/service-pocketid.json
@@ -0,0 +1,99 @@
+{
+    "main": {
+        "SERVICE_NAME": "pocketid",
+        "DOMAIN": "#DOMAIN"
+    },
+    "containers": [
+        {
+            "IMAGE": "alpine:latest",
+            "UPDATE": "true",
+            "NAME": "pocketid-init",
+            "NETWORK": "host",
+            "MEMORY": "64M",
+            "VOLUMES": [
+                {
+                    "SOURCE": "USER_DATA",
+                    "DEST": "/etc/user/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "EXTRA": "--rm",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "ENTRYPOINT": "sh -c",
+            "CMD": "mkdir -p /mkdir -p /etc/user/data/pocketid/db",
+            "PRE_START": "null",
+            "POST_START": "null"
+        },
+        {
+            "IMAGE": "postgres:16-alpine",
+            "NAME": "pocketidpostgres-db",
+            "UPDATE": "true",
+            "ROLES": "postgres-db patroni",
+            "MEMORY": "256M",
+            "NETWORK": "pocketid-net",
+            "SELECTOR": "pocketidpostgres-db",
+            "VOLUMES": [
+                {
+                    "SOURCE": "/etc/user/data/pocketid/db",
+                    "DEST": "/var/lib/postgresql/data",
+                    "TYPE": "rw"
+                }
+            ],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "5432",
+                    "TYPE": "tcp"
+                }
+            ],
+            "ENV_FILES": [
+                "/etc/user/secret/pocketid/pocketid.json"
+            ],
+            "ENVS": [
+                {
+                    "POSTGRES_INITDB_ARGS": "--encoding=UTF8 --locale=C"
+                }
+            ],
+            "EXTRA": "--label logging=promtail_user --label logging_jobname=containers --restart unless-stopped",
+            "DEPEND": "null",
+            "START_ON_BOOT": "false",
+            "CMD": "null",
+            "PRE_START": [],
+            "POST_START": []
+        },
+        {
+            "IMAGE": "11notes/pocket-id:1",
+            "UPDATE": "true",
+            "NAME": "pocketidapp",
+            "DNS": [
+                "coredns"
+            ],
+            "MEMORY": "256M",
+            "SELECTOR": "pocketid-app",
+            "NETWORK": "pocketid-net",
+            "VOLUMES": [],
+            "PORTS": [
+                {
+                    "SOURCE": "null",
+                    "DEST": "1411",
+                    "TYPE": "tcp"
+                }
+            ],
+            "EXTRA": "--label logging=promtail_user --label logging_jobname=containers --restart unless-stopped",
+            "ENV_FILES": [
+                "/etc/user/secret/pocketid/pocketid.json"
+            ],
+            "DEPEND": [],
+            "START_ON_BOOT": "true",
+            "CMD": "null",
+            "PRE_START": "null",
+            "POST_START": [
+                "firewall-pocketid",
+                "firewall-pocketid-dns",
+                "firewall-pocketid-smtp",
+                "domain-pocketid"
+            ]
+        }
+    ]
+}
--- a/pocketid/template.json
+++ b/pocketid/template.json
@@ -0,0 +1,43 @@
+{
+    "name": "Pocketid",
+    "title": "pocketid",
+    "subtitle": "Identity management",
+    "icon": "data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iNTAiIGhlaWdodD0iNTAiIHZpZXdCb3g9IjAgMCA1MCA1MCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQzIDBIN0MzLjEzNDAxIDAgMCAzLjEzNDAxIDAgN1Y0M0MwIDQ2Ljg2NiAzLjEzNDAxIDUwIDcgNTBINDNDNDYuODY2IDUwIDUwIDQ2Ljg2NiA1MCA0M1Y3QzUwIDMuMTM0MDEgNDYuODY2IDAgNDMgMFoiIGZpbGw9IndoaXRlIi8+CjxwYXRoIGQ9Ik0yNC40ODc4IDdDMzEuOTM4NCA3IDM4IDEzLjEzNjMgMzggMjAuNjc4N0MzOCAyMy42NDI2IDM3LjA3OSAyNi40NjMyIDM1LjMzNjIgMjguODM0MkMzMy42Mjc4IDMxLjE1OTUgMzEuMjkwMSAzMi44NDg2IDI4LjU3NTEgMzMuNzE5OEwyNy44MjQ3IDMzLjk2MUwyNi4wMzY0IDI1LjAzMTVMMjYuNTMxMSAyNC43ODkyQzI4LjE0NTkgMjMuOTk5IDI5LjE4OTYgMjIuMzE1NiAyOS4xODk2IDIwLjUwMTJDMjkuMTg5NiAxNy44NzY0IDI3LjA4MDUgMTUuNzQwOSAyNC40ODgxIDE1Ljc0MDlDMjEuODk1OCAxNS43NDA5IDE5Ljc4NiAxNy44NzY0IDE5Ljc4NiAyMC41MDEyQzE5Ljc4NiAyMi4zMTU2IDIwLjgzIDIzLjk5OSAyMi40NDQ4IDI0Ljc4OTJMMjIuOTMwMiAyNS4wMjcyTDIwLjA0OTUgNDNIMTJWN0gyNC40ODgxSDI0LjQ4NzhaIiBmaWxsPSJibGFjayIvPgo8L3N2Zz4K",
+    "description": "PocketID is an open-source identity and access management solution that provides secure and efficient user authentication and authorization for web applications and services.",
+    "fields": [
+        {
+            "description": "Domain",
+            "key": "DOMAIN",
+            "value": "",
+            "required": "true"
+        },
+        {
+            "description": "Postgres database name",
+            "key": "POSTGRES_DB",
+            "value": "",
+            "required": "true",
+            "generated": ""
+        },
+        {
+            "description": "Postgres username",
+            "key": "POSTGRES_USER",
+            "value": "",
+            "required": "true",
+            "generated": "time|md5|8"
+        },
+        {
+            "description": "Postgres password for user",
+            "key": "POSTGRES_PASSWORD",
+            "value": "",
+            "required": "true",
+            "generated": "random|md5|12"
+        },
+        {
+            "description": "Postgres root user password",
+            "key": "POSTGRES_ROOT_PASSWORD",
+            "value": "",
+            "required": "true",
+            "generated": "random|sha256|20"
+        }
+    ]
+}
--- a/roundcube/template.json
+++ b/roundcube/template.json
@@ -1,41 +0,0 @@
-{
-        "name": "roundcube",
-        "fields": [
-                {
-                        "description": "Please add IMAP HOST:",
-                        "key": "ROUNDCUBE_IMAP_HOST",
-                        "value": "",
-                        "required": "true"
-                },
-                {
-                        "description": "Please add IMAP PORT:",
-                        "key": "ROUNDCUBE_IMAP_PORT",
-                        "value": "143",
-                        "required": "true"
-                },
-                {
-                        "description": "Please add SMTP HOST:",
-                        "key": "ROUNDCUBE_SMTP_HOST",
-                        "value": "",
-                        "required": "true"
-                },
-                {
-                        "description": "Please add SMTP PORT (587, 465, 25, etc.):",
-                        "key": "ROUNDCUBE_SMTP_PORT",
-                        "value": "25",
-                        "required": "true"
-                },
-                {
-                        "description": "Please add UPLOAD_MAX_FILESIZE (default: 50M):",
-                        "key": "ROUNDCUBE_UPLOAD",
-                        "value": "50M",
-                        "required": "true"
-                },
-                {
-                        "description": "Please add Roundcube DOMAIN:",
-                        "key": "ROUNDCUBE_DOMAIN",
-                        "value": "",
-                        "required": "true"
-                }
-        ]
-}
--- a/smtp/template.json
+++ b/smtp/template.json
--- a/transmission/template.json
+++ b/transmission/template.json
--- a/vaultwarden/service-vaultwarden.json
+++ b/vaultwarden/service-vaultwarden.json
@@ -15,44 +15,34 @@
                    "SOURCE": "USER_DATA",
                    "DEST": "/etc/user/data",
                    "TYPE": "rw"
-                },
-                {
-                    "SOURCE": "SYSTEM_LOG",
-                    "DEST": "/etc/system/log",
-                    "TYPE": "rw"
                }
            ],
            "EXTRA": "--rm",
            "DEPEND": "null",
            "START_ON_BOOT": "false",
            "ENTRYPOINT": "sh -c",
-            "CMD": "mkdir -p /etc/user/data/vaultwarden/data && mkdir -p /etc/user/data/vaultwarden/db && mkdir -p /etc/system/log/vaultwarden/db",
+            "CMD": "mkdir -p /etc/user/data/vaultwarden/data && mkdir -p /etc/user/data/vaultwarden/db",
            "PRE_START": "null",
            "POST_START": "null"
        },
        {
-            "IMAGE": "mariadb:latest",
+            "IMAGE": "postgres:15-alpine",
            "UPDATE": "true",
-            "NAME": "vaultwardenmysql-db",
+            "NAME": "vaultwardenpostgres-db",
            "MEMORY": "256M",
            "NETWORK": "vaultwarden-net",
-            "SELECTOR": "vaultwardenmysql-db",
+            "SELECTOR": "vaultwardenpostgres-db",
            "VOLUMES": [
                {
                    "SOURCE": "/etc/user/data/vaultwarden/db",
-                    "DEST": "/var/lib/mysql",
-                    "TYPE": "rw"
-                },
-                {
-                    "SOURCE": "/etc/system/log/vaultwarden/db",
-                    "DEST": "/var/lib/mysql/mysql-bin",
+                    "DEST": "/var/lib/postgres",
                    "TYPE": "rw"
                }
            ],
            "PORTS": [
                {
                    "SOURCE": "null",
-                    "DEST": "3306",
+                    "DEST": "5432",
                    "TYPE": "tcp"
                }
            ],
--- a/vaultwarden/template.json
+++ b/vaultwarden/template.json
--- a/vaultwarden/vaultwarden-secret.json
+++ b/vaultwarden/vaultwarden-secret.json
@@ -1,12 +1,12 @@
 {
-    "vaultwardenmysql": {
-        "MARIADB_DATABASE": "#MARIADB_DATABASE",
-        "MARIADB_USER": "#MARIADB_USER",
-        "MARIADB_PASSWORD": "#MARIADB_PASSWORD",
-        "MARIADB_ROOT_PASSWORD": "#MARIADB_ROOT_PASSWORD"
+    "vaultwardenpostgres": {
+        "POSTGRES_DB": "#POSTGRES_DB",
+        "POSTGRES_USER": "#POSTGRES_USER",
+        "POSTGRES_PASSWORD": "#POSTGRES_PASSWORD",
+        "POSTGRES_ROOT_PASSWORD": "#POSTGRES_ROOT_PASSWORD"
    },
    "vaultwardenapp": {
-        "DATABASE_URL": "'mysql://#MARIADB_USER:#MARIADB_PASSWORD@vaultwardenmysql-db:3306/#MARIADB_DATABASE'",
+        "DATABASE_URL": "'postgresql://#POSTGRES_USER:#POSTGRES_PASSWORD@vaultwardenpostgres-db:5432/#POSTGRES_DB'",
        "ADMIN_TOKEN": "#ADMIN_TOKEN",
        "VAULTWARDEN_DOMAIN": "#VAULTWARDEN_DOMAIN",
        "VAULTWARDEN_SMTP_PASSWORD": "#VAULTWARDEN_SMTP_PASSWORD"
Author	SHA1	Message	Date
gyurix	a7d40ec41a	Increase MEMORY allocation to 768M in service-immich.json	2025-09-07 22:58:14 +02:00
gyurix	1af3c8ab1e	Add POSTGRES_INITDB_ARGS to service-immich.json for data checksums	2025-09-07 22:52:26 +02:00
gyurix	becd96416a	Refactor domain configuration to use a unified DOMAIN key across Nextcloud JSON files	2025-09-06 17:04:41 +02:00
gyurix	09371f8b4b	Update DOMAIN key in service-nextcloud.json to use NEXTCLOUD_TRUSTED_DOMAINS	2025-09-06 17:03:16 +02:00
gyurix	56e6e4e789	Update description in template.json to reflect new identity management features	2025-09-06 16:27:40 +02:00
gyurix	f5130b0c57	Update volume destination paths in service-matrix.json and service-pocketid.json for PostgreSQL data	2025-09-02 14:16:22 +02:00
gyurix	1ef0fd1f5c	Update EXTRA configuration in service-matrix.json for container cleanup	2025-09-02 11:31:52 +02:00
gyurix	ca41276ecf	Remove unnecessary EXTRA configuration from service-matrix.json	2025-09-02 11:14:15 +02:00
gyurix	7a2a4e90ed	Update volume mapping in service-matrix.json for improved clarity	2025-09-02 11:08:41 +02:00
gyurix	4bb61da615	Remove unused PORTS configuration from service-matrix.json	2025-09-02 10:56:19 +02:00
gyurix	e3862bbeb7	Rename matrixserver-setup to matrixserver-dbinit and add new volume mapping for input data	2025-09-02 10:33:26 +02:00
gyurix	fc0197dcf1	Refactor configuration file structure for enhanced readability and organization	2025-09-01 16:22:29 +02:00
gyurix	c30a5ceadb	Update SUBPATH details in template.json for clearer usage instructions	2025-09-01 10:17:54 +02:00
gyurix	fcc452af8a	Rename LOCAL_PATH to LOCATION in domain-matrix-admin.json for clarity	2025-09-01 10:09:57 +02:00
gyurix	daaa19d32a	Update domain keys in configuration files for consistency and clarity	2025-09-01 10:05:22 +02:00
gyurix	2129a7e8f9	Refactor matrix configuration structure for improved clarity and maintainability	2025-08-31 19:57:40 +02:00
gyurix	22e37d90af	Update domain and path keys in configuration files for consistency	2025-08-31 14:46:04 +02:00
gyurix	efd077e41a	Add DOMAIN_ADMIN and SUB_PATH fields to configuration files	2025-08-31 14:38:12 +02:00
gyurix	3fbdace533	Rename matrix server components and add finalize setup configuration	2025-08-31 14:27:09 +02:00
gyurix	f065b4f6ce	Add required fields and types to matrix template configuration	2025-08-31 14:18:20 +02:00
gyurix	05f0a6d10f	Add matrix service configuration and update related settings	2025-08-31 14:14:34 +02:00
gyurix	01ca5a196c	Refactor database connection string to enhance clarity and consistency	2025-08-31 12:21:26 +02:00
gyurix	b5c693bc8b	Add initial configuration files for matrix service and firewalls	2025-08-31 12:15:16 +02:00
gyurix	37e93e661d	Update port configuration from 3000 to 1411 in domain, firewall, and service JSON files	2025-08-30 09:48:49 +02:00
gyurix	9c0932bdd4	Rename POSTGRES_CONNECTION_STRING to DB_CONNECTION_STRING in pocketid-secret.json	2025-08-30 09:38:35 +02:00
gyurix	a8f4533991	Update PocketID image reference in service-pocketid.json to use versioned tag	2025-08-30 09:36:14 +02:00
gyurix	feace468dc	Update PostgreSQL volume paths in service-pocketid.json	2025-08-30 09:27:26 +02:00
gyurix	4e19534cae	Update SERVICE_NAME in domain-pocketid.json from 'vaultwarden' to 'pocketid'	2025-08-30 09:22:15 +02:00
gyurix	5fd409e79c	Update Pocketid icon in applications-tree.json to a new SVG representation	2025-08-30 09:21:01 +02:00
gyurix	0e487b02c5	Add PocketID configuration files for PostgreSQL integration and firewall settings	2025-08-30 08:56:08 +02:00
gyurix	3f73d1e42d	Refactor Vaultwarden configuration to replace MariaDB with PostgreSQL, update related keys and paths, and remove unnecessary log directory.	2025-08-29 17:20:14 +02:00
gyurix	6d65026806	Update Gitea service configuration to change SERVICE_NAME and DOMAIN settings	2025-08-29 15:38:32 +02:00
gyurix	5aca166c34	Update Gitea secret configuration to change database host to 'giteapostgres-db'	2025-08-29 14:48:12 +02:00
gyurix	70e144b7f8	Update Gitea configuration to replace 'gitea' with 'gitea-app' in service and firewall settings	2025-08-29 14:39:46 +02:00
gyurix	fd179866b2	Update Gitea service configuration to use latest image tag for Gitea	2025-08-29 14:31:01 +02:00
gyurix	46ff9e08cc	Fix typo in Gitea service configuration ENV_FILES path	2025-08-29 14:27:48 +02:00
gyurix	5de24e19fe	Update Gitea service configuration to use absolute path for ENV_FILES	2025-08-29 14:27:29 +02:00
gyurix	d6fe96f2c7	Update Gitea service configuration to use 'gitea.json' for ENV_FILES and format DNS entries	2025-08-29 14:24:52 +02:00
gyurix	e62029bca4	Remove unnecessary option from MAIL_ENABLE in Gitea template configuration	2025-08-29 14:22:20 +02:00
gyurix	31c72181b4	Refactor service configurations to improve compatibility and streamline setup process	2025-08-29 14:19:09 +02:00
gyurix	459ca0e019	Update Nextcloud PostgreSQL image to version 15 and add Gitea configuration files for PostgreSQL and firewall services	2025-08-29 14:16:43 +02:00
gyurix	324ad45ef3	Update Nextcloud configuration to use PostgreSQL instead of MariaDB and adjust related settings	2025-08-29 10:19:39 +02:00
gyurix	4b91fa6f3f	Add .gitignore, update Redis URL and domain placeholders, and expand outline secret configuration	2025-08-29 08:14:08 +02:00
gyurix	f4f66398de	Update Jellyfin service configuration to use version placeholder and add version metadata to template	2025-08-25 10:44:18 +02:00
gyurix	b07b6c7800	Add matrix server configuration and update filebrowser command to set ownership	2025-08-23 14:29:12 +02:00
thafu	d9c3d3f6c1	leantime smtp transm vaultw template update	2025-08-14 18:54:28 +02:00
hael	a49f5baa13	Update outline/domain-outline.json	2025-08-14 16:22:02 +00:00
gyurix	2a6f54d65e	Update Leantime configuration to change port from 80 to 8080	2025-08-14 17:50:40 +02:00
gyurix	b8ac9eb0ef	Update secret key generation method in template.json to use openssl\|hex	2025-08-14 17:31:20 +02:00
gyurix	8e61ae53e3	Add firewall configuration files for Leantime services	2025-08-14 17:30:29 +02:00
gyurix	fbb8934b2d	Update secret key generation method in template.json to use openssl\|rand	2025-08-14 15:23:27 +02:00
gyurix	88ae6dd365	Increase memory allocation for immich services in service-immich.json	2025-08-12 12:33:47 +02:00
hael	cc76e60006	Update outline/template.json	2025-08-07 13:22:53 +00:00
thafu	5d1297571b	test2	2025-08-06 14:27:57 +02:00
thafu	f2f97551d2	test	2025-08-06 14:17:00 +02:00
thafu	3f2960628c	template update	2025-08-05 15:02:07 +02:00
gyurix	9bf8622848	Update CMD in service-filebrowser.json to improve initialization logic and correct database path	2025-08-04 18:16:43 +02:00
gyurix	92fbb27e80	Add required fields and validation info for filebrowser credentials	2025-08-04 15:39:14 +02:00
gyurix	ea7bec4dfc	Refactor CMD in service-filebrowser.json to remove unnecessary directory change	2025-08-04 15:20:57 +02:00
gyurix	90e071dc3a	Update CMD in service-filebrowser.json to set working directory and improve initialization logic	2025-08-04 15:16:29 +02:00
gyurix	0fd3ca5619	Update subtitle for Outline application in applications-tree.json	2025-08-04 14:38:58 +02:00
gyurix	62da50fde4	Merge branch 'dev' of https://git.format.hu/format/default-applications-tree into dev	2025-08-04 14:34:36 +02:00
thafu	db451f42bd	application tree and template update	2025-08-04 14:30:33 +02:00
gyurix	f138652ea0	Fix CMD in service-filebrowser.json to use absolute path for filebrowser binary	2025-08-04 14:23:08 +02:00
gyurix	998be9eb47	Update CMD in service-filebrowser.json to use absolute path for filebrowser binary	2025-08-04 14:21:49 +02:00