fix: bring remaining blueprints in line with the port conventions (audit green)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
feat: add Novu self-hosted notification template (#1056 )
2026-11-11 13:38:07 -06:00 · 2026-08-06 23:19:00 -06:00 · 2026-08-06 22:59:35 -06:00 · 2026-08-06 13:50:26 -06:00 · 2026-08-06 01:25:48 -06:00 · 2026-08-06 01:11:35 -06:00
451 changed files with 3709 additions and 1651 deletions
@@ -0,0 +1,163 @@
+name: Audit All Blueprints
+
+# The per-PR validators only look at blueprints a PR touches, which is the right
+# call for CI cost but means a template is checked when it lands and then never
+# again. When a rule is added or tightened, every existing blueprint that breaks
+# it stays broken with nothing surfacing it (see #1047).
+#
+# This job runs the same validators over ALL blueprints on a schedule, so drift
+# is reported instead of accumulating. It never runs on pull_request, so it
+# cannot block a contributor for a pre-existing problem they did not introduce.
+
+on:
+  schedule:
+    # Mondays, 04:00 UTC
+    - cron: "0 4 * * 1"
+  workflow_dispatch:
+    inputs:
+      fail_on_findings:
+        description: "Exit non-zero when findings exist (default: report only)"
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.16.0
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 8
+
+      - name: Install dependencies
+        run: cd build-scripts && pnpm install
+
+      - name: Validate per-template metadata
+        run: node build-scripts/generate-meta.js --check
+
+      - name: Audit every blueprint
+        id: audit
+        run: |
+          # $RUNNER_TEMP is per-job; also cleared explicitly so a re-run or a
+          # partially-executed earlier step can never leak into the summary.
+          WORK="${RUNNER_TEMP:-/tmp}"
+          OUT="$WORK/validator-out.txt"
+          REPORT="$WORK/audit-report.md"
+          SUMMARY="$WORK/audit-summary.md"
+          rm -f "$OUT" "$REPORT" "$SUMMARY"
+
+          COMPOSE_FAILED=""
+          TOML_FAILED=""
+
+          for dir in blueprints/*/; do
+            id="$(basename "$dir")"
+
+            # Run unconditionally: a blueprint with no docker-compose.yml or no
+            # template.toml is itself a finding, and the validators already
+            # report a missing file clearly. Skipping them would hide exactly
+            # the blueprints most likely to be broken.
+            if ! (cd build-scripts && pnpm exec tsx validate-docker-compose.ts \
+                   --file "../$dir/docker-compose.yml") > "$OUT" 2>&1; then
+              COMPOSE_FAILED="$COMPOSE_FAILED $id"
+              {
+                echo "### \`$id\` — docker-compose.yml"
+                echo '```'
+                grep '❌' "$OUT" || cat "$OUT"
+                echo '```'
+              } >> "$REPORT"
+            fi
+
+            if ! (cd build-scripts && pnpm exec tsx validate-template.ts \
+                   --dir "../$dir") > "$OUT" 2>&1; then
+              TOML_FAILED="$TOML_FAILED $id"
+              {
+                echo "### \`$id\` — template.toml"
+                echo '```'
+                grep '❌' "$OUT" || cat "$OUT"
+                echo '```'
+              } >> "$REPORT"
+            fi
+          done
+
+          COMPOSE_COUNT=$(echo $COMPOSE_FAILED | wc -w | tr -d ' ')
+          TOML_COUNT=$(echo $TOML_FAILED | wc -w | tr -d ' ')
+          TOTAL=$(ls -d blueprints/*/ | wc -l | tr -d ' ')
+
+          {
+            echo "## Blueprint audit"
+            echo ""
+            echo "| check | failing | of |"
+            echo "| --- | --- | --- |"
+            echo "| \`validate-docker-compose.ts\` | $COMPOSE_COUNT | $TOTAL |"
+            echo "| \`validate-template.ts\` | $TOML_COUNT | $TOTAL |"
+            echo ""
+          } > "$SUMMARY"
+
+          if [ -f "$REPORT" ]; then
+            cat "$REPORT" >> "$SUMMARY"
+          else
+            echo "No findings." >> "$SUMMARY"
+          fi
+
+          # The step summary caps at ~1MB and truncates silently past it, which
+          # would hide findings exactly as the backlog grows. Bound what we
+          # append and point at the artifact for the rest.
+          SUMMARY_LIMIT=$((512 * 1024))
+          SUMMARY_BYTES=$(wc -c < "$SUMMARY" | tr -d ' ')
+
+          if [ "$SUMMARY_BYTES" -gt "$SUMMARY_LIMIT" ]; then
+            # Emit the header table only, never a byte-sliced prefix: cutting
+            # mid-``` leaves an unclosed code fence, which swallows the notice
+            # below it and makes the truncation invisible in the rendered summary.
+            {
+              head -n 7 "$SUMMARY"
+              echo ""
+              echo "_Report omitted: $SUMMARY_BYTES bytes exceeds the $SUMMARY_LIMIT byte budget for a job summary._"
+              echo "_Download the \`blueprint-audit\` artifact for the complete output._"
+            } >> "$GITHUB_STEP_SUMMARY"
+          else
+            cat "$SUMMARY" >> "$GITHUB_STEP_SUMMARY"
+          fi
+
+          # Always published, so the full report survives regardless of size.
+          cp "$SUMMARY" "$WORK/blueprint-audit.md"
+          echo "report_path=$WORK/blueprint-audit.md" >> "$GITHUB_OUTPUT"
+
+          echo "compose_failed=$COMPOSE_COUNT" >> "$GITHUB_OUTPUT"
+          echo "toml_failed=$TOML_COUNT" >> "$GITHUB_OUTPUT"
+
+          if [ "$COMPOSE_COUNT" != "0" ] || [ "$TOML_COUNT" != "0" ]; then
+            echo "::warning::$COMPOSE_COUNT compose and $TOML_COUNT template.toml findings across $TOTAL blueprints"
+          fi
+
+      - name: Upload the full report
+        if: always() && steps.audit.outputs.report_path != ''
+        uses: actions/upload-artifact@v4
+        with:
+          name: blueprint-audit
+          path: ${{ steps.audit.outputs.report_path }}
+          retention-days: 30
+
+      - name: Fail if requested
+        # `inputs` is only populated for workflow_dispatch; on a schedule run it
+        # is not available, so gate on the event first and read the value through
+        # github.event.inputs, which is an empty string when absent.
+        if: >-
+          github.event_name == 'workflow_dispatch' &&
+          github.event.inputs.fail_on_findings == 'true' &&
+          (steps.audit.outputs.compose_failed != '0' || steps.audit.outputs.toml_failed != '0')
+        run: |
+          echo "❌ Findings present and fail_on_findings was requested."
+          exit 1
@@ -183,7 +183,7 @@ services:
      - 3000:3000

    # Instead use this way:
-    ports:
+    expose:
      - 3000
 ```

@@ -0,0 +1,32 @@
+version: "3.8"
+
+services:
+  9router:
+    image: decolua/9router:0.5.40
+    restart: unless-stopped
+    environment:
+      DATA_DIR: /app/data
+      PORT: "20128"
+      HOSTNAME: "0.0.0.0"
+      NODE_ENV: production
+      JWT_SECRET: ${JWT_SECRET}
+      INITIAL_PASSWORD: ${INITIAL_PASSWORD}
+      API_KEY_SECRET: ${API_KEY_SECRET}
+      MACHINE_ID_SALT: ${MACHINE_ID_SALT}
+      BASE_URL: http://${ROUTER_HOST}
+      NEXT_PUBLIC_BASE_URL: http://${ROUTER_HOST}
+      HEADROOM_URL: http://headroom:8787
+      AUTH_COOKIE_SECURE: "false"
+    volumes:
+      - 9router-data:/app/data
+    depends_on:
+      - headroom
+
+  # Optional token-reduction proxy that 9Router calls through HEADROOM_URL.
+  # Shipped as a sidecar because the 9Router image does not bundle it.
+  headroom:
+    image: ghcr.io/chopratejas/headroom:0.6.7
+    restart: unless-stopped
+
+volumes:
+  9router-data:
@@ -0,0 +1,17 @@
+{
+  "id": "9router",
+  "name": "9Router",
+  "version": "0.5.40",
+  "description": "Self-hosted AI model router that rotates requests across 40+ providers with automatic fallback, exposing an OpenAI-compatible endpoint for coding agents.",
+  "logo": "9router.png",
+  "links": {
+    "github": "https://github.com/decolua/9router",
+    "website": "https://9router.com",
+    "docs": "https://github.com/decolua/9router/blob/master/DOCKER.md"
+  },
+  "tags": [
+    "ai",
+    "proxy",
+    "developer-tools"
+  ]
+}
@@ -0,0 +1,21 @@
+[variables]
+main_domain = "${domain}"
+jwt_secret = "${password:64}"
+initial_password = "${password:32}"
+api_key_secret = "${password:64}"
+machine_id_salt = "${password:32}"
+
+[config]
+env = [
+  "ROUTER_HOST=${main_domain}",
+  "JWT_SECRET=${jwt_secret}",
+  "INITIAL_PASSWORD=${initial_password}",
+  "API_KEY_SECRET=${api_key_secret}",
+  "MACHINE_ID_SALT=${machine_id_salt}",
+]
+mounts = []
+
+[[config.domains]]
+serviceName = "9router"
+port = 20128
+host = "${main_domain}"
@@ -3,7 +3,7 @@ version: "3"
 services:
  ackee:
    image: electerious/ackee:3.4.2
-    ports:
+    expose:
      - "3000"
    environment:
      - ACKEE_USERNAME=${ACKEE_USERNAME}
@@ -61,4 +61,4 @@ services:

 volumes:
  postgres_data:
-  redis_data: 
+  redis_data: 
@@ -1,3 +1,4 @@
+# dokploy: allow-host-ports — DNS (53/tcp+udp), DHCP (67/68) and DNS-over-TLS/QUIC (853) are not HTTP protocols; clients must reach them directly on the host, Traefik cannot route them.
 version: "3.8"
 services:
  adguardhome:
@@ -10,11 +11,12 @@ services:
      - "68:68/tcp" # DHCP Client
      - "853:853/tcp" # DNS over TLS, DNS-over-QUIC
      - "853:853/udp" # DNS over TLS, DNS-over-QUIC
-      - "6060:6060/tcp" # HTTP (pprof)
+    expose:
+      - 6060 # HTTP (pprof) — debug endpoint, no need to publish it on the host
    volumes:
      - adguardhome-work:/opt/adguardhome/work
      - adguardhome-conf:/opt/adguardhome/conf

 volumes:
  adguardhome-work: {}
-  adguardhome-conf: {}
+  adguardhome-conf: {}
@@ -3,5 +3,5 @@ services:
  adminer:
    image: adminer:4.8.1
    restart: unless-stopped
-    ports:
-      - 8080 
+    expose:
+      - 8080 
@@ -3,7 +3,7 @@ services:
  affinepro:
    image: ghcr.io/toeverything/affine:stable
    restart: unless-stopped
-    ports:
+    expose:
      - 3010
    volumes:
      - affine-storage:/root/.affine/storage
@@ -11,4 +11,4 @@ services:
    volumes:
      - agent-zero-data:/a0/usr
 volumes:
-  agent-zero-data:
+  agent-zero-data:
@@ -11,12 +11,11 @@ services:
      - agentdvr-config:/AgentDVR/Media/XML/
      - agentdvr-media:/AgentDVR/Media/WebServerRoot/Media/
      - agentdvr-commands:/AgentDVR/Commands/
-    ports:
+    expose:
      - 8090
      - 3478/udp
      - 50000-50100/udp
-
 volumes:
  agentdvr-config: {}
  agentdvr-media: {}
-  agentdvr-commands: {}
+  agentdvr-commands: {}
@@ -3,6 +3,7 @@ main_domain = "${domain}"
 timezone = "America/New_York"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "agentdvr"
 port = 8090
@@ -10,5 +11,3 @@ host = "${main_domain}"

 [config.env]
 TIMEZONE = "${timezone}"
-
-[[config.mounts]]
@@ -24,6 +24,7 @@ port = 80
 host = "${main_domain}"

 [config]
+mounts = []
 env = [
  # App
  "APP_URL=${main_domain}",
@@ -50,5 +51,4 @@ env = [
  "MYSQL_RANDOM_ROOT_PASSWORD=yes"
 ]

-# No custom mounts needed; volumes are already defined in compose.
-[[config.mounts]]
+# No custom mounts needed; volumes are already defined in compose.
@@ -11,4 +11,4 @@ services:
    restart: unless-stopped

 volumes:
-  alist-data:
+  alist-data:
@@ -3,10 +3,10 @@ services:
  alltube:
    image: dnomd343/alltube:latest
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    environment:
      - TITLE=${TITLE}
      - CONVERT=${CONVERT}
      - STREAM=${STREAM}
-      - REMUX=${REMUX} 
+      - REMUX=${REMUX} 
@@ -3,7 +3,7 @@ services:
  ampache:
    image: ampache/ampache:latest
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    volumes:
      - config:/var/www/config
@@ -14,4 +14,4 @@ services:
 volumes:
  config: {}
  log: {}
-  mysql: {} 
+  mysql: {} 
@@ -3,7 +3,7 @@ services:
  anonupload:
    image: ghcr.io/supernova3339/anonfiles:1
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    environment:
      - ADMIN_EMAIL=${ADMIN_EMAIL}
@@ -13,4 +13,4 @@ services:
      - uploads:/var/www/html/uploads

 volumes:
-  uploads: {} 
+  uploads: {} 
@@ -1,7 +1,7 @@
 services:
  answer:
    image: apache/answer:1.4.1
-    ports:
+    expose:
      - '80'
    restart: on-failure
    volumes:
@@ -10,7 +10,7 @@
    "docs": "https://answer.apache.org/docs"
  },
  "tags": [
-    "q&a",
+    "q-and-a",
    "self-hosted"
  ]
 }
@@ -3,7 +3,7 @@ services:
  anubis:
    image: ghcr.io/techarohq/anubis:latest
    restart: unless-stopped
-    ports:
+    expose:
      - "8923" # Anubis default port
    environment:
      # Required: Point to your frontend service locally
@@ -3,7 +3,7 @@ services:
  anythingllm:
    image: mintplexlabs/anythingllm:latest
    restart: unless-stopped
-    ports:
+    expose:
      - 3001
    environment:
      - STORAGE_DIR=/app/server/storage
@@ -13,4 +13,4 @@ services:
      - SYS_ADMIN

 volumes:
-  storage: {} 
+  storage: {} 
@@ -1,3 +1,4 @@
+# dokploy: allow-host-ports — Anytype clients speak the any-sync protocol (TCP 33010, UDP/QUIC 33020) directly against the server; it is not HTTP, so Traefik cannot route it.
 # Example: Any-Sync-Bundle with embedded MongoDB and Redis (all-in-one image)
 #
 # Usage:
@@ -3,7 +3,7 @@ services:
  apprise-api:
    image: linuxserver/apprise-api:latest
    restart: unless-stopped
-    ports:
+    expose:
      - 8000
    environment:
      - PUID=1000
@@ -13,4 +13,4 @@ services:
      - config:/config

 volumes:
-  config: {} 
+  config: {} 
@@ -7,4 +7,4 @@ services:
    restart: unless-stopped

 volumes:
-  appsmith-data:
+  appsmith-data:
@@ -3,7 +3,7 @@ services:
  arangodb:
    image: arangodb:3.12.4
    restart: unless-stopped
-    ports:
+    expose:
      - 8529
    environment:
      - ARANGO_ROOT_PASSWORD=${ARANGO_PASSWORD}
@@ -11,4 +11,4 @@ services:
      - data:/var/lib/arangodb3

 volumes:
-  data: {} 
+  data: {} 
@@ -9,8 +9,7 @@ services:
      PUBLIC_SNAPSHOTS: ${PUBLIC_SNAPSHOTS}
    volumes:
      - archivebox_data:/data
-    ports:
+    expose:
      - "8000"
-
 volumes:
  archivebox_data:
@@ -3,7 +3,7 @@ services:
  argilla-web:
    image: argilla/argilla-server:latest
    restart: unless-stopped
-    ports:
+    expose:
      - 6900
    environment:
      - ARGILLA_HOME_PATH=/var/lib/argilla
@@ -74,4 +74,4 @@ volumes:
  argilladata: {}
  elasticdata: {}
  dbdata: {}
-  redisdata: {} 
+  redisdata: {} 
@@ -3,7 +3,7 @@ services:
  audiobookshelf:
    image: ghcr.io/advplyr/audiobookshelf:2.19.4
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    environment:
      - TZ=UTC
@@ -14,4 +14,4 @@ services:

 volumes:
  config: {}
-  metadata: {} 
+  metadata: {} 
@@ -16,9 +16,8 @@ services:
        condition: service_healthy
      postgres:
        condition: service_healthy
-    ports:
+    expose:
      - 9091
-
  redis:
    image: redis:7-alpine
    restart: unless-stopped
@@ -52,4 +51,4 @@ services:
 volumes:
  authelia_config:
  redis_data:
-  postgres_data:
+  postgres_data:
@@ -3,7 +3,7 @@ services:
  authorizer:
    image: lakhansamani/authorizer:1.4.4
    restart: unless-stopped
-    ports:
+    expose:
      - 8080
    environment:
      - DATABASE_TYPE=postgres
@@ -37,4 +37,4 @@ services:

 volumes:
  db_data: {}
-  redis_data: {} 
+  redis_data: {} 
@@ -2,7 +2,7 @@ services:
  autobase-console:
    image: autobase/console:2.7.2
    restart: unless-stopped
-    ports:
+    expose:
      - "80"
      - "8080"
    environment:
@@ -2,7 +2,7 @@ services:
  azuracast:
    image: ghcr.io/azuracast/azuracast:latest
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    volumes:
      - azuracast-station-data:/var/azuracast/stations
@@ -36,4 +36,4 @@ volumes:
  azuracast-data: {}
  azuracast-uploads: {}
  azuracast-backups: {}
-  mariadb-data: {}
+  mariadb-data: {}
@@ -4,6 +4,7 @@ mysql_root_password = "${password:32}"
 mysql_password = "${password:16}"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "azuracast"
 port = 80
@@ -27,5 +28,3 @@ NGINX_RADIO_PORTS = "8000,8010,8020,8030,8040,8050"
 PREFER_RELEASE_BUILDS = "true"
 COMPOSER_PLUGIN_MODE = "false"
 ADDITIONAL_MEDIA_SYNC_WORKER_COUNT = "0"
-
-[[config.mounts]]
@@ -3,7 +3,7 @@ services:
  babybuddy:
    image: linuxserver/babybuddy:2.7.0
    restart: unless-stopped
-    ports:
+    expose:
      - 8000
    environment:
      - PUID=1000
@@ -16,4 +16,4 @@ services:
      - config:/config

 volumes:
-  config: {} 
+  config: {} 
@@ -2,7 +2,7 @@ services:
  backrest:
    image: garethgeorge/backrest:v1.7.3
    restart: unless-stopped
-    ports:
+    expose:
      - 9898
    environment:
      - BACKREST_PORT=9898
@@ -3,7 +3,7 @@ services:
  baikal:
    image: ckulka/baikal:nginx-php8.2
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    environment:
      - TZ=UTC
@@ -13,4 +13,4 @@ services:

 volumes:
  config: {}
-  data: {} 
+  data: {} 
@@ -3,11 +3,11 @@ services:
  barrage:
    image: maulik9898/barrage:0.3.0
    restart: unless-stopped
-    ports:
+    expose:
      - 3000
    environment:
      - NEXTAUTH_SECRET=${NEXTAUTH_SECRET}
      - NEXTAUTH_URL=http://${DOMAIN}
      - DELUGE_URL=${DELUGE_URL}
      - DELUGE_PASSWORD=${DELUGE_PASSWORD}
-      - BARRAGE_PASSWORD=${BARRAGE_PASSWORD} 
+      - BARRAGE_PASSWORD=${BARRAGE_PASSWORD} 
@@ -3,7 +3,7 @@ services:
  bazarr:
    image: lscr.io/linuxserver/bazarr:1.5.1
    restart: unless-stopped
-    ports:
+    expose:
      - 6767
    environment:
      - PUID=1000
@@ -15,4 +15,4 @@ services:
      - ${TV_PATH}:/tv

 volumes:
-  config: {} 
+  config: {} 
@@ -3,11 +3,11 @@ services:
  beszel:
    image: henrygd/beszel:0.10.2
    restart: unless-stopped
-    ports:
+    expose:
      - 8090
    volumes:
      - beszel_data:/beszel_data
      - /var/run/docker.sock:/var/run/docker.sock:ro

 volumes:
-  beszel_data: {} 
+  beszel_data: {} 
@@ -4,10 +4,8 @@ services:
    restart: unless-stopped
    depends_on:
      - server
-    ports:
+    expose:
      - '80'
-
-
  server:
    image: bigcapitalhq/server:latest
    restart: unless-stopped
@@ -18,9 +16,8 @@ services:
        condition: service_started
      redis:
        condition: service_started
-    ports:
+    expose:
      - '3000'
-
    environment:
      # Mail
      - MAIL_HOST=${MAIL_HOST}
@@ -97,9 +94,8 @@ services:
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
    volumes:
      - mysql:/var/lib/mysql
-    ports:
+    expose:
      - '3306'
-
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h localhost -u root -p$$MYSQL_ROOT_PASSWORD || exit 1"]
      interval: 10s
@@ -110,7 +106,7 @@ services:
  mongo:
    image: mongo:7
    restart: unless-stopped
-    ports:
+    expose:
      - '27017'
    volumes:
      - mongo:/data/db
@@ -119,7 +115,7 @@ services:
  redis:
    image: redis:7-alpine
    restart: unless-stopped
-    ports:
+    expose:
      - '6379'
    volumes:
      - redis:/data
@@ -133,10 +129,8 @@ services:
  gotenberg:
    image: gotenberg/gotenberg:7
    restart: unless-stopped
-    ports:
+    expose:
      - '9000'
-
-
 volumes:
  mysql:
    name: bigcapital_mysql
@@ -72,7 +72,7 @@ s3_endpoint = ""
 s3_bucket = ""

 [config]
-
+mounts = []
 [[config.domains]]
 serviceName = "webapp"
 port = 80
@@ -165,6 +165,3 @@ MYSQL_DATABASE = "${system_db_name}"
 MYSQL_USER = "${db_user}"
 MYSQL_PASSWORD = "${db_password}"
 MYSQL_ROOT_PASSWORD = "${db_root_password}"
-
-[[config.mounts]]
-
@@ -28,6 +28,9 @@ services:
      - AUTORUN_LARAVEL_STORAGE_LINK=true
    volumes:
      - billmora-storage:/var/www/html/storage
+      - billmora-plugins:/var/www/html/plugin
+      - billmora-themes-resources:/var/www/html/resources/themes
+      - billmora-themes-public:/var/www/html/public/themes
    depends_on:
      billmora-db:
        condition: service_healthy
@@ -58,6 +61,9 @@ services:
      - AUTORUN_ENABLED=false
    volumes:
      - billmora-storage:/var/www/html/storage
+      - billmora-plugins:/var/www/html/plugin
+      - billmora-themes-resources:/var/www/html/resources/themes
+      - billmora-themes-public:/var/www/html/public/themes
    depends_on:
      billmora-db:
        condition: service_healthy
@@ -88,6 +94,9 @@ services:
      - AUTORUN_ENABLED=false
    volumes:
      - billmora-storage:/var/www/html/storage
+      - billmora-plugins:/var/www/html/plugin
+      - billmora-themes-resources:/var/www/html/resources/themes
+      - billmora-themes-public:/var/www/html/public/themes
    depends_on:
      billmora-db:
        condition: service_healthy
@@ -126,5 +135,8 @@ services:

 volumes:
  billmora-storage:
+  billmora-plugins:
+  billmora-themes-resources:
+  billmora-themes-public:
  billmora-db-data:
  billmora-redis-data:
@@ -19,7 +19,7 @@ services:
      - PGID=1000
      - TZ=Etc/UTC
      - SUBFOLDER=/ #optional
-    ports:
+    expose:
      - 3000
      - 3001
    restart: unless-stopped
@@ -16,9 +16,8 @@ services:
      options:
        max-size: "10m"
        max-file: "3"
-    ports:
+    expose:
      - 1111
-
  blinko-postgres:
    image: postgres:14
    restart: always
@@ -45,4 +45,4 @@ services:
      timeout: 10s
      retries: 10
 volumes: 
-  pds-data:
+  pds-data:
@@ -8,7 +8,7 @@ services:
    depends_on:
      mariadb:
        condition: service_healthy
-    ports:
+    expose:
      - 6060
    volumes:
      - booklore-data:/app/data
@@ -4,6 +4,7 @@ app_password = "${password:32}"
 db_root_password = "${password:32}"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "booklore"
 port = 6060
@@ -20,5 +21,3 @@ MYSQL_USER = "booklore"
 MYSQL_PASSWORD = "${app_password}"
 # API Key
 MYSQL_ROOT_PASSWORD = "${db_root_password}"
-
-[[config.mounts]]
@@ -3,7 +3,7 @@ services:
  bookstack:
    image: lscr.io/linuxserver/bookstack:24.12.1
    restart: unless-stopped
-    ports:
+    expose:
      - 80
    environment:
      - PUID=1000
@@ -32,4 +32,4 @@ services:

 volumes:
  config: {}
-  db_data: {} 
+  db_data: {} 
@@ -2,24 +2,10 @@
 main_domain = "${domain}"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "borgitory"
 port = 8000
 host = "${main_domain}"

 [config.env]
-
-[[config.mounts]]
-name = "borgitory-data"
-mountPath = "/app/data"
-description = "Database and encryption key storage"
-
-[[config.mounts]]
-name = "borgitory-sources"
-mountPath = "/mnt/sources"
-description = "Sources to back up (read-only)"
-
-[[config.mounts]]
-name = "borgitory-repos"
-mountPath = "/mnt/repos"
-description = "Borg repositories (read-only)"
@@ -3,7 +3,7 @@ services:
  botpress:
    image: botpress/server:12.31.9
    restart: unless-stopped
-    ports:
+    expose:
      - 81
    environment:
      - BP_HOST=0.0.0.0
@@ -31,4 +31,4 @@ services:

 volumes:
  data: {}
-  db_data: {} 
+  db_data: {} 
@@ -22,7 +22,7 @@ services:
    environment:
      VITE_API_URL: http://budget-board-server
      PORT: 6253
-    ports:
+    expose:
      - 6253
    depends_on:
      - budget-board-server
@@ -3,18 +3,12 @@ main_domain = "${domain}"
 postgres_password = "${password:32}"  

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "budget-board-client" 
 port = 6253  
 host = "${main_domain}"  
 path = "/"

-
 [config.env]
 POSTGRES_PASSWORD = "${postgres_password}" 
-
-
-[[config.mounts]]
-source = "../files/db-data"  
-target = "/var/lib/postgresql/data"  
-type = "bind"  
@@ -3,7 +3,7 @@ services:
  bytebase:
    image: bytebase/bytebase:3.3.0
    restart: unless-stopped
-    ports:
+    expose:
      - 8080
    environment:
      - PG_URL=postgres://postgres:${DB_PASSWORD}@bytebase-db:5432/bytebase
@@ -24,4 +24,4 @@ services:

 volumes:
  data: {}
-  db_data: {} 
+  db_data: {} 
@@ -4,7 +4,7 @@ services:
  bytestash:
    image: ghcr.io/jordan-dalby/bytestash:1.5.6
    restart: unless-stopped
-    ports:
+    expose:
      - "5000"
    environment:
      - BASE_PATH=
@@ -24,4 +24,4 @@ services:
      - snippets:/data/snippets

 volumes:
-  snippets: 
+  snippets: 
@@ -9,7 +9,7 @@ services:
      - TZ=Etc/UTC
      - PUID=1000
      - PGID=1000
-    ports:
+    expose:
      - 8080
    volumes:
      - books:/books
@@ -17,4 +17,4 @@ services:

 volumes:
  books:
-  data: 
+  data: 
@@ -10,7 +10,7 @@
    "docs": "https://manual.calibre-ebook.com/"
  },
  "tags": [
-    "Documents",
-    "E-Commerce"
+    "documents",
+    "e-commerce"
  ]
 }
@@ -7,10 +7,10 @@ services:
    environment:
      - CARBONE_EE_LICENSE=${CARBONE_KEY}
      - CARBONE_EE_STUDIO=true
-    ports:
+    expose:
      - 4000
    volumes:
      - template:/app/template

 volumes:
-  template: 
+  template: 
@@ -10,9 +10,9 @@
    "docs": "https://carbone.io/documentation/design/overview/getting-started.html"
  },
  "tags": [
-    "Document Generation",
-    "Automation",
-    "Reporting",
-    "Productivity"
+    "document-generation",
+    "automation",
+    "reporting",
+    "productivity"
  ]
 }
@@ -30,4 +30,4 @@ services:

 volumes:
  casdoor-postgres-data:
-  casdoor-data:
+  casdoor-data:
@@ -11,7 +11,7 @@ services:
      - CLOUDFLARE_TOKEN=${CLOUDFLARE_TOKEN}
      - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
      - LOG_LEVEL=${LOG_LEVEL}
-    ports:
+    expose:
      - 8000
    volumes:
      - certmate_certificates:/app/certificates
@@ -4,10 +4,10 @@ services:
  changedetection:
    image: ghcr.io/dgtlmoon/changedetection.io:0.49
    restart: unless-stopped
-    ports:
+    expose:
      - 5000
    volumes:
      - datastore:/datastore

 volumes:
-  datastore: 
+  datastore: 
@@ -10,8 +10,8 @@
    "docs": "https://github.com/dgtlmoon/changedetection.io/wiki"
  },
  "tags": [
-    "Monitoring",
-    "Data",
-    "Notifications"
+    "monitoring",
+    "data",
+    "notifications"
  ]
 }
@@ -2,7 +2,7 @@ version: "3.8"

 services:
  chatto:
-    image: ghcr.io/chattocorp/chatto:0.3.8
+    image: ghcr.io/chattocorp/chatto:0.4
    restart: unless-stopped
    expose:
      - "4000"
@@ -1,7 +1,7 @@
 {
  "id": "chatto",
  "name": "Chatto (single binary)",
-  "version": "0.3.8",
+  "version": "0.4.x",
  "description": "A fully-featured real-time chat application for teams and communities. This template deploys the single Chatto binary with embedded NATS. Note: email/password registration requires SMTP to be configured after deployment; voice/video calls are not included in the single-binary setup.",
  "logo": "logo.png",
  "links": {
@@ -76,4 +76,4 @@ services:
 volumes:
  chatwoot-storage:
  chatwoot-postgres-data:
-  chatwoot-redis-data:
+  chatwoot-redis-data:
@@ -2,13 +2,10 @@
 main_domain = "${domain}"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "checkcle"
 port = 8090
 host = "${main_domain}"

 [config.env]
-
-[[config.mounts]]
-source = "checkcle-data"
-target = "/mnt/pb_data"
@@ -3,7 +3,7 @@ services:
  server:
    image: ghcr.io/bluewave-labs/checkmate-backend-mono:latest
    restart: always
-    ports:
+    expose:
      - 52345
    environment:
      - UPTIME_APP_API_BASE_URL=${UPTIME_APP_API_BASE_URL}
@@ -15,7 +15,7 @@ services:
      - CHEVERETO_HTTPS=0
      - CHEVERETO_MAX_POST_SIZE=2G
      - CHEVERETO_MAX_UPLOAD_SIZE=2G
-    ports:
+    expose:
      - 80
    volumes:
      - storage:/var/www/html/images/
@@ -35,4 +35,4 @@ services:

 volumes:
  storage:
-  mysql: 
+  mysql: 
@@ -10,10 +10,10 @@
    "docs": "https://v4-docs.chevereto.com/"
  },
  "tags": [
-    "Image Hosting",
-    "File Management",
-    "Open Source",
-    "Multi-User",
-    "Private Albums"
+    "image-hosting",
+    "file-management",
+    "open-source",
+    "multi-user",
+    "private-albums"
  ]
 }
@@ -6,8 +6,6 @@
 services:
  chibisafe:
    image: chibisafe/chibisafe:latest
-    networks:
-      - chibinet
    environment:
      - BASE_API_URL=http://chibisafe_server:8000
    restart: unless-stopped
@@ -20,8 +18,6 @@ services:

  chibisafe_server:
    image: chibisafe/chibisafe-server:latest
-    networks:
-      - chibinet
    volumes:
      - database:/app/database:rw
      - uploads:/app/uploads:rw
@@ -43,8 +39,6 @@ services:

  caddy:
    image: caddy:2-alpine
-    networks:
-      - chibinet
    volumes:
      - ../files/Caddyfile:/etc/caddy/Caddyfile:ro
      - uploads:/app/uploads:ro
@@ -62,8 +56,3 @@ volumes:
  database:
  uploads:
  logs:
-
-networks:
-  chibinet:
-    driver: bridge
-    internal: true
@@ -10,7 +10,7 @@
    "docs": "https://chibisafe.app/docs/intro"
  },
  "tags": [
-    "media system",
+    "media-system",
    "storage",
    "file-sharing"
  ]
@@ -8,7 +8,7 @@ services:
      - SECRET_KEY=${SECRET_KEY}
      - DATABASE_URL=postgres://postgres:${DB_PASSWORD}@db:5432/chiefonboarding
      - ALLOWED_HOSTS=${DOMAIN}
-    ports:
+    expose:
      - 8000
    depends_on:
      - db
@@ -23,4 +23,4 @@ services:
      - postgres_data:/var/lib/postgresql/data

 volumes:
-  postgres_data: 
+  postgres_data: 
@@ -10,10 +10,10 @@
    "docs": "https://docs.chiefonboarding.com/"
  },
  "tags": [
-    "Employee Onboarding",
-    "HR Management",
-    "Task Tracking",
-    "Role-Based Access",
-    "Document Management"
+    "employee-onboarding",
+    "hr-management",
+    "task-tracking",
+    "role-based-access",
+    "document-management"
  ]
 }
@@ -5,7 +5,7 @@ services:
    restart: unless-stopped
    volumes:
      - ../files/chirpstack:/etc/chirpstack
-    ports:
+    expose:
      - 8080
    environment:
      - MQTT_BROKER_HOST=mosquitto
@@ -21,7 +21,7 @@ services:
    restart: unless-stopped
    volumes:
      - ../files/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge
-    ports:
+    expose:
      - 1700/udp
    environment:
      - INTEGRATION__MQTT__EVENT_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/event/{{ .EventType }}
@@ -36,7 +36,7 @@ services:
    restart: unless-stopped
    volumes:
      - ../files/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge
-    ports:
+    expose:
      - 3001
    depends_on:
      - mosquitto
@@ -45,7 +45,7 @@ services:
    image: chirpstack/chirpstack-rest-api:4
    restart: unless-stopped
    command: --server chirpstack:8080 --bind 0.0.0.0:8090 --insecure
-    ports:
+    expose:
      - 8090
    depends_on:
      - chirpstack
@@ -73,9 +73,8 @@ services:
    restart: unless-stopped
    volumes:
      - ../files/mosquitto/config/:/mosquitto/config/
-    ports:
+    expose:
      - 1883
-
 volumes:
  postgresqldata:
  redisdata:
@@ -3,7 +3,7 @@ version: "3"
 services:
  chromium:
    image: lscr.io/linuxserver/chromium:5f5dd27e-ls102
-    ports:
+    expose:
      - "3000"
    environment:
      - PUID=1000
@@ -13,4 +13,4 @@ services:
      - config:/config

 volumes:
-  config: 
+  config: 
@@ -3,7 +3,7 @@ version: "3"
 services:
  classicpress:
    image: classicpress/classicpress:php8.3-apache
-    ports:
+    expose:
      - "80"
    environment:
      - WORDPRESS_DB_HOST=db
@@ -27,4 +27,4 @@ services:

 volumes:
  wordpress-data:
-  db-data: 
+  db-data: 
@@ -3,7 +3,7 @@ version: "3"
 services:
  cloud9:
    image: lscr.io/linuxserver/cloud9:1.29.2
-    ports:
+    expose:
      - "8000"
    environment:
      - PUID=1000
@@ -17,4 +17,4 @@ services:
      - code:/code

 volumes:
-  code: 
+  code: 
@@ -3,7 +3,7 @@ version: "3"
 services:
  cloudcmd:
    image: coderaiser/cloudcmd:18.5.1
-    ports:
+    expose:
      - "80"
    environment:
      - CLOUDCMD_ROOT=/mnt/fs
@@ -12,4 +12,4 @@ services:
      - CLOUDCMD_PASSWORD=${PASSWORD}
    volumes:
      - /root:/root
-      - /:/mnt/fs 
+      - /:/mnt/fs 
@@ -3,7 +3,7 @@ version: "3"
 services:
  cockpit:
    image: cockpithq/cockpit:core-2.11.0
-    ports:
+    expose:
      - "80"
    environment:
      - COCKPIT_SESSION_NAME=cockpit
@@ -27,4 +27,4 @@ services:
 volumes:
  config:
  storage:
-  mongo-data: 
+  mongo-data: 
@@ -3,7 +3,7 @@ version: "3"
 services:
  codex:
    image: ghcr.io/codex-team/codex.docs:v2.2
-    ports:
+    expose:
      - "3000"
    environment:
      - APP_CONFIG_database_driver=mongodb
@@ -28,4 +28,4 @@ services:
 volumes:
  uploads:
  db:
-  mongo-data: 
+  mongo-data: 
@@ -3,10 +3,10 @@ version: "3"
 services:
  collabora:
    image: collabora/code:latest
-    ports:
+    expose:
      - "9980"
    environment:
      - domain=${DOMAIN}
      - username=${USERNAME}
      - password=${PASSWORD}
-      - extra_params=--o:ssl.enable=false 
+      - extra_params=--o:ssl.enable=false 
@@ -5,5 +5,5 @@ services:
    restart: unless-stopped
    volumes:
      - ../files/commafeed-data:/commafeed/data
-    ports:
+    expose:
      - 8082
@@ -3,7 +3,7 @@ version: "3"
 services:
  commento:
    image: registry.gitlab.com/commento/commento:v1.8.0
-    ports:
+    expose:
      - "8080"
    environment:
      - COMMENTO_ORIGIN=${COMMENTO_ORIGIN}
@@ -19,4 +19,4 @@ services:
      - postgres-data:/var/lib/postgresql/data

 volumes:
-  postgres-data: 
+  postgres-data: 
@@ -3,7 +3,7 @@ version: "3"
 services:
  commentoplusplus:
    image: caroga/commentoplusplus:v1.8.7
-    ports:
+    expose:
      - "8080"
    environment:
      - COMMENTO_ORIGIN=${COMMENTO_ORIGIN}
@@ -22,4 +22,4 @@ services:
      - postgres-data:/var/lib/postgresql/data

 volumes:
-  postgres-data: 
+  postgres-data: 
@@ -1,37 +0,0 @@
-<svg
-  version="1.1"
-  id="Layer_1"
-  xmlns="http://www.w3.org/2000/svg"
-  x="0px"
-  y="0px"
-  width="100%"
-  viewBox="0 0 864 864"
-  enableBackground="new 0 0 864 864"
-  xmlSpace="preserve"
->
-  <path
-    fill="#EC008C"
-    opacity="1.000000"
-    stroke="none"
-    d="M0.999997,649.000000 C1.000000,433.052795 1.000000,217.105591 1.000000,1.079198 C288.876801,1.079198 576.753601,1.079198 865.000000,1.079198 C865.000000,73.025414 865.000000,145.051453 864.634888,217.500671 C852.362488,223.837280 840.447632,229.735275 828.549438,235.666794 C782.143677,258.801056 735.743225,281.945923 688.998657,304.980469 C688.122009,304.476532 687.580750,304.087708 687.053894,303.680206 C639.556946,266.944733 573.006775,291.446869 560.804199,350.179443 C560.141357,353.369446 559.717590,356.609131 559.195374,359.748962 C474.522705,359.748962 390.283478,359.748962 306.088135,359.748962 C298.804138,318.894806 265.253357,295.206024 231.834442,293.306793 C201.003021,291.554596 169.912033,310.230042 156.935104,338.792725 C149.905151,354.265930 147.884064,370.379944 151.151794,387.034515 C155.204453,407.689667 166.300507,423.954224 183.344437,436.516663 C181.938263,437.607025 180.887405,438.409576 179.849426,439.228516 C147.141953,465.032562 139.918045,510.888947 163.388611,545.322632 C167.274551,551.023804 172.285187,555.958313 176.587341,561.495728 C125.846893,587.012817 75.302292,612.295532 24.735992,637.534790 C16.874903,641.458496 8.914484,645.183228 0.999997,649.000000 z"
-  />
-  <path
-    fill="#000000"
-    opacity="1.000000"
-    stroke="none"
-    d="M689.340759,305.086823 C735.743225,281.945923 782.143677,258.801056 828.549438,235.666794 C840.447632,229.735275 852.362488,223.837280 864.634888,217.961929 C865.000000,433.613190 865.000000,649.226379 865.000000,864.919800 C577.000000,864.919800 289.000000,864.919800 1.000000,864.919800 C1.000000,793.225708 1.000000,721.576721 0.999997,649.463867 C8.914484,645.183228 16.874903,641.458496 24.735992,637.534790 C75.302292,612.295532 125.846893,587.012817 176.939667,561.513062 C178.543060,562.085083 179.606812,562.886414 180.667526,563.691833 C225.656799,597.853394 291.232574,574.487244 304.462524,519.579773 C304.989105,517.394409 305.501068,515.205505 305.984619,513.166748 C391.466370,513.166748 476.422729,513.166748 561.331177,513.166748 C573.857727,555.764343 608.978149,572.880920 638.519897,572.672791 C671.048340,572.443665 700.623230,551.730408 711.658752,520.910583 C722.546875,490.502106 715.037842,453.265564 682.776733,429.447052 C683.966064,428.506866 685.119507,427.602356 686.265320,426.688232 C712.934143,405.412262 723.011475,370.684631 711.897339,338.686676 C707.312805,325.487671 699.185303,314.725128 689.340759,305.086823 z"
-  />
-  <path
-    fill="#FEFBFC"
-    opacity="1.000000"
-    stroke="none"
-    d="M688.998657,304.980469 C699.185303,314.725128 707.312805,325.487671 711.897339,338.686676 C723.011475,370.684631 712.934143,405.412262 686.265320,426.688232 C685.119507,427.602356 683.966064,428.506866 682.776733,429.447052 C715.037842,453.265564 722.546875,490.502106 711.658752,520.910583 C700.623230,551.730408 671.048340,572.443665 638.519897,572.672791 C608.978149,572.880920 573.857727,555.764343 561.331177,513.166748 C476.422729,513.166748 391.466370,513.166748 305.984619,513.166748 C305.501068,515.205505 304.989105,517.394409 304.462524,519.579773 C291.232574,574.487244 225.656799,597.853394 180.667526,563.691833 C179.606812,562.886414 178.543060,562.085083 177.128418,561.264465 C172.285187,555.958313 167.274551,551.023804 163.388611,545.322632 C139.918045,510.888947 147.141953,465.032562 179.849426,439.228516 C180.887405,438.409576 181.938263,437.607025 183.344437,436.516663 C166.300507,423.954224 155.204453,407.689667 151.151794,387.034515 C147.884064,370.379944 149.905151,354.265930 156.935104,338.792725 C169.912033,310.230042 201.003021,291.554596 231.834442,293.306793 C265.253357,295.206024 298.804138,318.894806 306.088135,359.748962 C390.283478,359.748962 474.522705,359.748962 559.195374,359.748962 C559.717590,356.609131 560.141357,353.369446 560.804199,350.179443 C573.006775,291.446869 639.556946,266.944733 687.053894,303.680206 C687.580750,304.087708 688.122009,304.476532 688.998657,304.980469 M703.311279,484.370789 C698.954468,457.053253 681.951416,440.229645 656.413696,429.482330 C673.953552,421.977875 688.014709,412.074219 696.456482,395.642365 C704.862061,379.280853 706.487793,362.316345 700.947998,344.809204 C691.688965,315.548492 664.183716,296.954437 633.103516,298.838257 C618.467957,299.725372 605.538086,305.139557 594.588501,314.780121 C577.473999,329.848511 570.185486,349.121399 571.838501,371.750854 C479.166595,371.750854 387.082886,371.750854 294.582672,371.750854 C293.993011,354.662048 288.485260,339.622314 276.940491,327.118439 C265.392609,314.611176 251.082092,307.205322 234.093262,305.960541 C203.355347,303.708374 176.337585,320.898438 166.089890,348.816620 C159.557541,366.613007 160.527206,384.117401 168.756042,401.172516 C177.054779,418.372589 191.471954,428.832886 207.526581,435.632172 C198.407059,442.272583 188.815598,448.302246 180.383728,455.660675 C171.685028,463.251984 166.849655,473.658661 163.940216,484.838684 C161.021744,496.053375 161.212982,507.259705 164.178833,518.426208 C171.577927,546.284302 197.338104,566.588867 226.001465,567.336853 C240.828415,567.723816 254.357819,563.819092 266.385468,555.199646 C284.811554,541.994751 293.631104,523.530579 294.687347,501.238312 C387.354828,501.238312 479.461304,501.238312 571.531799,501.238312 C577.616638,543.189026 615.312866,566.342102 651.310059,559.044739 C684.973938,552.220398 708.263306,519.393127 703.311279,484.370789 z"
-  />
-  <path
-    fill="#EC008C"
-    opacity="1.000000"
-    stroke="none"
-    d="M703.401855,484.804718 C708.263306,519.393127 684.973938,552.220398 651.310059,559.044739 C615.312866,566.342102 577.616638,543.189026 571.531799,501.238312 C479.461304,501.238312 387.354828,501.238312 294.687347,501.238312 C293.631104,523.530579 284.811554,541.994751 266.385468,555.199646 C254.357819,563.819092 240.828415,567.723816 226.001465,567.336853 C197.338104,566.588867 171.577927,546.284302 164.178833,518.426208 C161.212982,507.259705 161.021744,496.053375 163.940216,484.838684 C166.849655,473.658661 171.685028,463.251984 180.383728,455.660675 C188.815598,448.302246 198.407059,442.272583 207.526581,435.632172 C191.471954,428.832886 177.054779,418.372589 168.756042,401.172516 C160.527206,384.117401 159.557541,366.613007 166.089890,348.816620 C176.337585,320.898438 203.355347,303.708374 234.093262,305.960541 C251.082092,307.205322 265.392609,314.611176 276.940491,327.118439 C288.485260,339.622314 293.993011,354.662048 294.582672,371.750854 C387.082886,371.750854 479.166595,371.750854 571.838501,371.750854 C570.185486,349.121399 577.473999,329.848511 594.588501,314.780121 C605.538086,305.139557 618.467957,299.725372 633.103516,298.838257 C664.183716,296.954437 691.688965,315.548492 700.947998,344.809204 C706.487793,362.316345 704.862061,379.280853 696.456482,395.642365 C688.014709,412.074219 673.953552,421.977875 656.413696,429.482330 C681.951416,440.229645 698.954468,457.053253 703.401855,484.804718 z"
-  />
-</svg>
-
@@ -1,48 +0,0 @@
-# conduwuit
-# https://conduwuit.puppyirl.gay/deploying/docker-compose.yml
-
-services:
-  homeserver:
-    image: girlbossceo/conduwuit:latest
-    restart: unless-stopped
-    ports:
-      - 8448:6167
-    volumes:
-      - db:/var/lib/conduwuit
-      #- ./conduwuit.toml:/etc/conduwuit.toml
-    environment:
-      # Edit this in your Dokploy Environment
-      CONDUWUIT_SERVER_NAME: ${CONDUWUIT_SERVER_NAME}
-
-      CONDUWUIT_DATABASE_PATH: /var/lib/conduwuit
-      CONDUWUIT_PORT: 6167
-      CONDUWUIT_MAX_REQUEST_SIZE: 20000000 # in bytes, ~20 MB
-
-      CONDUWUIT_ALLOW_REGISTRATION: 'true'
-      CONDUWUIT_REGISTRATION_TOKEN: ${CONDUWUIT_REGISTRATION_TOKEN}
-
-      CONDUWUIT_ALLOW_FEDERATION: 'true'
-      CONDUWUIT_ALLOW_CHECK_FOR_UPDATES: 'true'
-      CONDUWUIT_TRUSTED_SERVERS: '["matrix.org"]'
-      #CONDUWUIT_LOG: warn,state_res=warn
-      CONDUWUIT_ADDRESS: 0.0.0.0
-
-      # Uncomment if you mapped config toml in volumes
-      #CONDUWUIT_CONFIG: '/etc/conduwuit.toml'
-
-  ### Uncomment if you want to use your own Element-Web App.
-  ### Note: You need to provide a config.json for Element and you also need a second
-  ###     Domain or Subdomain for the communication between Element and conduwuit
-  ### Config-Docs: https://github.com/vector-im/element-web/blob/develop/docs/config.md
-  # element-web:
-  #   image: vectorim/element-web:latest
-  #   restart: unless-stopped
-  #   ports:
-  #     - 8009:80
-  #   volumes:
-  #     - ./element_config.json:/app/config.json
-  #   depends_on:
-  #     - homeserver
-
-volumes:
-  db:
@@ -1,19 +0,0 @@
-{
-  "id": "conduwuit",
-  "name": "Conduwuit",
-  "version": "latest",
-  "description": "Well-maintained, featureful Matrix chat homeserver (fork of Conduit)",
-  "logo": "conduwuit.svg",
-  "links": {
-    "github": "https://github.com/girlbossceo/conduwuit",
-    "website": "https://conduwuit.puppyirl.gay",
-    "docs": "https://conduwuit.puppyirl.gay/configuration.html"
-  },
-  "tags": [
-    "backend",
-    "chat",
-    "communication",
-    "matrix",
-    "server"
-  ]
-}
@@ -1,15 +0,0 @@
-[variables]
-main_domain = "${domain}"
-registration_token = "${password:20}"
-
-[config]
-env = [
-  "CONDUWUIT_SERVER_NAME=${main_domain}",
-  "CONDUWUIT_REGISTRATION_TOKEN=${registration_token}",
-]
-mounts = []
-
-[[config.domains]]
-serviceName = "homeserver"
-port = 6_167
-host = "${main_domain}"
@@ -3,7 +3,7 @@ version: "3"
 services:
  confluence:
    image: atlassian/confluence-server:8.6-ubuntu-jdk17
-    ports:
+    expose:
      - "8090"
    volumes:
      - confluence-data:/var/atlassian/application-data/confluence
@@ -15,4 +15,4 @@ services:
      - CATALINA_CONNECTOR_SECURE=true

 volumes:
-  confluence-data: 
+  confluence-data: 
@@ -3,7 +3,7 @@ services:
  convertx:
    image: ghcr.io/c4illin/convertx
    restart: unless-stopped
-    ports:
+    expose:
      - 3000
    environment:
      - JWT_SECRET=${JWT_SECRET}
@@ -11,6 +11,7 @@ hide_history = "false"
 language = "en"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "convertx" 
 port = 3000
@@ -26,8 +27,3 @@ WEBROOT = "${webroot}"
 FFMPEG_ARGS = "${ffmpeg_args}"
 HIDE_HISTORY = "${hide_history}"
 LANGUAGE = "${language}"
-
-[[config.mounts]]
-source = "../files/data"
-target = "/app/data"
-type = "bind"
@@ -2,6 +2,7 @@
 main_domain = "${domain}"

 [config]
+mounts = []
 [[config.domains]]
 serviceName = "cookiecloud"
 port = 8088
@@ -9,6 +10,3 @@ host = "${main_domain}"

 [config.env]
 # No environment variables required by default
-
-[[config.mounts]]
-# Data volume mount is defined in docker-compose.yml
@@ -3,7 +3,7 @@ version: "3"
 services:
  coral:
    image: coralproject/talk:9.7.0
-    ports:
+    expose:
      - "3000"
    environment:
      - MONGODB_URI=${MONGODB_URI}
@@ -30,4 +30,4 @@ services:

 volumes:
  mongo-data:
-  redis-data: 
+  redis-data: 
@@ -3,7 +3,7 @@ version: '3.8'
 services:
  couchdb:
    image: couchdb:latest
-    ports:
+    expose:
      - '5984'
    volumes:
      - couchdb-data:/opt/couchdb/data
@@ -12,8 +12,8 @@
  "tags": [
    "crawler",
    "scraping",
-    "AI",
-    "LLM",
-    "API"
+    "ai",
+    "llm",
+    "api"
  ]
 }
@@ -0,0 +1,8 @@
+<svg width="1031" height="244" viewBox="0 0 1031 244" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M374.72 225.76C356.8 225.76 341.027 221.653 327.4 213.44C313.773 205.04 303.133 193.093 295.48 177.6C287.827 162.107 284 143.627 284 122.16C284 100.88 287.733 82.4933 295.2 67C302.853 51.32 313.493 39.28 327.12 30.88C340.747 22.2933 356.707 18 375 18C399.64 18 418.773 24.16 432.4 36.48C446.027 48.8 454.893 65.88 459 87.72L427.36 89.4C424.747 75.7733 419.147 65.1333 410.56 57.48C401.973 49.64 390.12 45.72 375 45.72C362.867 45.72 352.32 48.8 343.36 54.96C334.587 61.12 327.68 69.8933 322.64 81.28C317.787 92.6667 315.36 106.293 315.36 122.16C315.36 138.027 317.787 151.653 322.64 163.04C327.68 174.427 334.68 183.107 343.64 189.08C352.6 195.053 362.96 198.04 374.72 198.04C390.773 198.04 403.187 193.84 411.96 185.44C420.92 176.853 426.52 165.093 428.76 150.16L460.4 151.84C457.973 166.96 453.12 180.027 445.84 191.04C438.56 202.053 428.947 210.64 417 216.8C405.053 222.773 390.96 225.76 374.72 225.76Z" fill="white"/>
+<path d="M488.982 221.28V72.32H516.142L517.262 111.8L514.742 110.96C516.795 97.52 520.902 87.72 527.062 81.56C533.409 75.4 541.902 72.32 552.542 72.32H566.822V98.92H552.542C545.075 98.92 538.822 100.133 533.782 102.56C528.742 104.987 524.915 108.72 522.302 113.76C519.875 118.8 518.662 125.333 518.662 133.36V221.28H488.982Z" fill="white"/>
+<path d="M648.166 224.64C633.606 224.64 621.006 221.467 610.366 215.12C599.913 208.773 591.793 199.72 586.006 187.96C580.406 176.2 577.606 162.48 577.606 146.8C577.606 131.12 580.406 117.493 586.006 105.92C591.793 94.16 599.913 85.1067 610.366 78.76C620.82 72.2267 633.14 68.96 647.326 68.96C660.766 68.96 672.62 72.1333 682.886 78.48C693.153 84.64 701.086 93.6 706.686 105.36C712.473 117.12 715.366 131.307 715.366 147.92V155.48H608.406C609.153 170.04 612.98 180.96 619.886 188.24C626.98 195.52 636.5 199.16 648.446 199.16C657.22 199.16 664.5 197.107 670.286 193C676.073 188.893 680.086 183.387 682.326 176.48L713.126 178.44C709.206 192.253 701.46 203.453 689.886 212.04C678.5 220.44 664.593 224.64 648.166 224.64ZM608.406 133.08H684.006C683.073 119.827 679.246 110.027 672.526 103.68C665.993 97.3333 657.593 94.16 647.326 94.16C636.686 94.16 627.913 97.52 621.006 104.24C614.286 110.773 610.086 120.387 608.406 133.08Z" fill="white"/>
+<path d="M805.64 224.64C791.08 224.64 778.48 221.467 767.84 215.12C757.387 208.773 749.267 199.72 743.48 187.96C737.88 176.2 735.08 162.48 735.08 146.8C735.08 131.12 737.88 117.493 743.48 105.92C749.267 94.16 757.387 85.1067 767.84 78.76C778.293 72.2267 790.613 68.96 804.8 68.96C818.24 68.96 830.093 72.1333 840.36 78.48C850.627 84.64 858.56 93.6 864.16 105.36C869.947 117.12 872.84 131.307 872.84 147.92V155.48H765.88C766.627 170.04 770.453 180.96 777.36 188.24C784.453 195.52 793.973 199.16 805.92 199.16C814.693 199.16 821.973 197.107 827.76 193C833.547 188.893 837.56 183.387 839.8 176.48L870.6 178.44C866.68 192.253 858.933 203.453 847.36 212.04C835.973 220.44 822.067 224.64 805.64 224.64ZM765.88 133.08H841.48C840.547 119.827 836.72 110.027 830 103.68C823.467 97.3333 815.067 94.16 804.8 94.16C794.16 94.16 785.387 97.52 778.48 104.24C771.76 110.773 767.56 120.387 765.88 133.08Z" fill="white"/>
+<path d="M954.714 224.64C942.02 224.64 930.914 221.467 921.394 215.12C912.06 208.773 904.874 199.813 899.834 188.24C894.98 176.48 892.554 162.667 892.554 146.8C892.554 130.933 895.074 117.213 900.114 105.64C905.154 93.88 912.34 84.8267 921.674 78.48C931.007 72.1333 942.02 68.96 954.714 68.96C964.98 68.96 974.127 71.1067 982.154 75.4C990.18 79.6933 996.247 85.6667 1000.35 93.32V22.48H1030.03V221.28H1002.31L1001.47 198.88C997.367 206.907 991.114 213.253 982.714 217.92C974.5 222.4 965.167 224.64 954.714 224.64ZM962.554 198.88C970.58 198.88 977.394 196.827 982.994 192.72C988.594 188.613 992.887 182.64 995.874 174.8C998.86 166.96 1000.35 157.627 1000.35 146.8C1000.35 135.6 998.86 126.173 995.874 118.52C992.887 110.68 988.594 104.8 982.994 100.88C977.394 96.7733 970.58 94.72 962.554 94.72C950.607 94.72 941.087 99.3867 933.994 108.72C926.9 117.867 923.354 130.56 923.354 146.8C923.354 162.853 926.9 175.547 933.994 184.88C941.087 194.213 950.607 198.88 962.554 198.88Z" fill="white"/>
+<path fill-rule="evenodd" clip-rule="evenodd" d="M156.683 25.8912C156.683 20.7784 153.949 16.6984 150.153 15.8682L50.8845 0.803281C44.4474 -0.207939 40.8385 -0.418278 34.4022 1.07664C21.948 4.53448 19.4689 5.55156 7.16796 9.52026C1.74137 10.8567 0 14.8659 0 20.1609L0.111367 226.189C0.111367 231.049 3.3005 234.218 7.66406 235.676C14.0626 237.863 21.4027 240.262 28.5807 242.489C33.5011 244.038 38.8467 244.038 45.3161 243.664C52.231 243.259 92.7685 236.617 149.596 229.044C154.101 228.447 156.663 224.772 156.663 221.087L156.713 25.8912H156.683ZM132.658 192.425C134.521 192.222 139.148 190.127 139.148 184.639V59.9491C139.279 57.4788 137.528 52.9533 132.445 52.5382L75.861 44.5097C70.7786 44.2971 68.0552 47.9924 68.0552 51.4043V194.055C68.2678 196.525 70.161 200.362 75.2333 199.542L132.658 192.425Z" fill="white"/>
+</svg>
@@ -0,0 +1,65 @@
+version: "3.8"
+services:
+  creed:
+    build:
+      context: https://github.com/connorhpbrn/creed.git#e9b096d6d68fef6df336338bc9965a94ab62f75e
+      dockerfile_inline: |
+        FROM node:20-alpine AS builder
+        WORKDIR /app
+        COPY package.json package-lock.json ./
+        RUN npm ci
+        COPY . .
+        ARG NEXT_PUBLIC_SITE_URL
+        ARG NEXT_PUBLIC_SUPABASE_URL
+        ARG NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY
+        ARG NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY
+        ARG NEXT_PUBLIC_CONTACT_EMAIL
+        ARG NEXT_PUBLIC_GITHUB_URL
+        ENV NEXT_PUBLIC_SITE_URL=$NEXT_PUBLIC_SITE_URL \
+            NEXT_PUBLIC_SUPABASE_URL=$NEXT_PUBLIC_SUPABASE_URL \
+            NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=$NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY \
+            NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=$NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY \
+            NEXT_PUBLIC_CONTACT_EMAIL=$NEXT_PUBLIC_CONTACT_EMAIL \
+            NEXT_PUBLIC_GITHUB_URL=$NEXT_PUBLIC_GITHUB_URL
+        RUN npm run build
+
+        FROM node:20-alpine AS runner
+        WORKDIR /app
+        ENV NODE_ENV=production
+        COPY --from=builder /app/public ./public
+        COPY --from=builder /app/.next ./.next
+        COPY --from=builder /app/node_modules ./node_modules
+        COPY --from=builder /app/package.json ./package.json
+        COPY --from=builder /app/next.config.ts ./next.config.ts
+        EXPOSE 3000
+        CMD ["npm", "start"]
+      args:
+        NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL}
+        NEXT_PUBLIC_SUPABASE_URL: ${NEXT_PUBLIC_SUPABASE_URL}
+        NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY: ${NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY}
+        NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY: ${NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY}
+        NEXT_PUBLIC_CONTACT_EMAIL: ${NEXT_PUBLIC_CONTACT_EMAIL}
+        NEXT_PUBLIC_GITHUB_URL: ${NEXT_PUBLIC_GITHUB_URL}
+    restart: unless-stopped
+    environment:
+      - NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL}
+      - NEXT_PUBLIC_SUPABASE_URL=${NEXT_PUBLIC_SUPABASE_URL}
+      - NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=${NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY}
+      - SUPABASE_SECRET_KEY=${SUPABASE_SECRET_KEY}
+      - CREED_ENCRYPTION_SECRET=${CREED_ENCRYPTION_SECRET}
+      - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY}
+      - NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=${NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY}
+      - STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET}
+      - OPENROUTER_PLATFORM_KEY=${OPENROUTER_PLATFORM_KEY}
+      - ANALYSIS_MODEL=${ANALYSIS_MODEL}
+      - TAB_MODEL=${TAB_MODEL}
+      - PANEL_MODEL=${PANEL_MODEL}
+      - RESEND_API_KEY=${RESEND_API_KEY}
+      - RESEND_FROM_EMAIL=${RESEND_FROM_EMAIL}
+      - GITHUB_OAUTH_CLIENT_ID=${GITHUB_OAUTH_CLIENT_ID}
+      - GITHUB_OAUTH_CLIENT_SECRET=${GITHUB_OAUTH_CLIENT_SECRET}
+      - NEXT_PUBLIC_CONTACT_EMAIL=${NEXT_PUBLIC_CONTACT_EMAIL}
+      - NEXT_PUBLIC_GITHUB_URL=${NEXT_PUBLIC_GITHUB_URL}
+      - CREED_CSP_ENFORCE=${CREED_CSP_ENFORCE}
+    expose:
+      - 3000
@@ -0,0 +1,19 @@
+{
+  "id": "creed",
+  "name": "Creed",
+  "version": "e9b096d",
+  "description": "One personal context file every AI agent reads before answering and proposes updates to as it learns about you. Requires an external Supabase project (see instructions).",
+  "logo": "creed.svg",
+  "links": {
+    "github": "https://github.com/connorhpbrn/creed",
+    "website": "https://creed.md",
+    "docs": "https://creed.md/docs"
+  },
+  "tags": [
+    "ai",
+    "productivity",
+    "mcp",
+    "nextjs",
+    "supabase"
+  ]
+}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Mauricio SiuandClaude Fable 5	256969c306	fix: bring remaining blueprints in line with the port conventions (audit green) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-06 23:19:00 -06:00
Abdullah Istiak GitHub Cursor	ba60abbcf3	feat: add Novu self-hosted notification template (#1056 ) * feat: add Novu self-hosted notification template Co-authored-by: Cursor <cursoragent@cursor.com> * feat: enhance Novu template with comprehensive environment variable configuration Added a detailed environment variable section to the Novu template, including secrets, feature flags, service URLs, and database configurations. This update improves clarity and usability for self-hosted deployments. --------- Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-06 22:59:35 -06:00
Diego Enriquez-Serrano GitHub Mauricio Siu Mauricio Siu Claude Fable 5	eec3b3d510	Update forgejo template; bumps Forgejo version to 15; fixes git push over ssh (#880 ) * Update forgejo template; bumps Forgejo version to 15; fixes git push over ssh * updates template compose and toml to use internal port mapping * fix: bump Forgejo to 16, use expose per repo convention, drop HTTP domain on SSH port - codeberg.org/forgejo/forgejo:15 -> :16 (current stable, 16.0.2) - ports -> expose (repo convention since #1053; Traefik reaches the container over the docker network, no host port publishing needed) - remove the [[config.domains]] entry on port 22: Dokploy domains are Traefik HTTP routers and cannot proxy SSH (returned 500 in testing) - drop empty FORGEJO__server__SSH_PORT= and SSH_LISTEN_PORT overrides (image defaults already listen on 22) - clean comment/blank entries from template.toml env array Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Mauricio Siu <mauricio@dokploy.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-08-06 13:50:26 -06:00
Mauricio Siu GitHub Claude Fable 5	1d47fa16e4	fix: normalize template.toml mounts across all 502 blueprints (#1063 ) * fix: normalize template.toml mounts across all blueprints (closes #1047) - 79 blueprints declared a bare [[config.mounts]] header (one empty array element in TOML) -> replaced with the repo idiom 'mounts = []' - 38 blueprints carried doc-style mount blocks (name/mountPath/description) that don't match the schema (filePath/content) and are inert in Dokploy's template processor -> removed; their named volumes already live in each docker-compose.yml - penpot: duplicate 'expose' map key made its docker-compose.yml invalid YAML -> merged into one expose list After this, validate-template.ts passes for all 502 blueprints. The remaining validate-docker-compose.ts flags are the intentional host-port templates (mail/game/streaming protocols: poste.io, mailu, oryx, fivem, lodestone, etc.) which the validator does not yet model as exceptions. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat: validator opt-out marker for intentional host ports + annotate rustdesk The validate-docker-compose CI on this PR was failing on rustdesk's hbbs/hbbr port mappings (21115-21119) — intentional host-published ports for the RustDesk relay/rendezvous protocol, which Traefik cannot route. Adds a '# dokploy: allow-host-ports' top-of-file marker that downgrades the port-mapping errors to warnings for such protocol templates (mail/game/streaming/VPN/remote-desktop), and annotates rustdesk. Other exception templates (poste.io, mailu, oryx, fivem...) can be annotated case-by-case as the weekly audit (#1049) surfaces them. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-08-06 01:25:48 -06:00
Mauricio Siu GitHub Claude Fable 5	8ad0f9134e	fix(supabase): upgrade database to Postgres 17 (#1068 ) Align the template with the current upstream self-hosted stack (supabase/postgres 17.6.1.136, studio 2026.08.03, kong 3.9.3), remove the deprecated analytics/vector services and switch Studio/pg-meta to the postgres role per upstream guidance. Closes #1067 Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-08-06 01:11:35 -06:00
Maarten Coppens GitHub Copilot Autofix powered by AI Mauricio Siu Claude Fable 5	01930d7a71	Add Yuvomi template (#1065 ) * Add Yuvomi template Privacy-first, self-hosted family planner. - Image pinned to 0.71.10 (latest stable GHCR tag) - 4 named volumes (data/backups/modules/documents) - SESSION_SECRET via ${password:64} helper - Single domain on port 3000 - Healthcheck wired * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * chore(yuvomi): bump image to 1.85.0 The PR pinned ghcr.io/ulsklyc/yuvomi:0.71.10, but upstream's latest stable release is v1.85.0. Bump the compose image tag and meta.json version to match. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-08-06 01:06:22 -06:00
Szymon BludnikandGitHub	ebeeb58dee	Add Creed self-host template (#1043 ) * feat(templates): add Creed self-host template Adds a Dokploy blueprint for Creed (creed.md), built from source since no official Docker image exists yet. Requires an external Supabase project (schema pushed via the Supabase CLI), so only what can be generated locally (CREED_ENCRYPTION_SECRET) is auto-filled; Supabase, Stripe, OpenRouter, Resend, and GitHub OAuth vars are left blank with setup steps documented in the mounted README. NEXT_PUBLIC_* vars are threaded through as Docker build args (not just runtime env), since Next.js inlines them at build time and the app hard-fails the build if NEXT_PUBLIC_SITE_URL is unset — this was caught by an actual `docker compose build` run against the upstream repo, not just template validation. Verified with docker compose build/up: image builds cleanly, container boots, / returns 200, and /api/health correctly reports "degraded" with Supabase unconfigured as expected. * Pin creed build context and refactor env - Pin creed docker-compose build context to a specific commit hash to ensure reproducible builds - Expose port 3000 in docker-compose (use expose instead of ports) - Update meta.json version from latest to the pinned hash e9b096d - Convert template.toml env block from [config.env] to a single env array - Keep the README.md mount in place * Modify docker-compose build context URL Updated the build context URL to the main branch. * fix(creed): pin build context and move env under [config] Restore the commit pin so the inline Dockerfile matches the pre-monorepo layout, and place env under [config] before domains so Dokploy imports the environment correctly.	2026-08-06 01:06:00 -06:00
Mauricio Siu GitHub rowupstream	ce2864aa12	chore: update stalwart named volumes for v0.16 (#1066 ) Co-authored-by: rowupstream <259214402+rowupstream@users.noreply.github.com>	2026-08-05 08:54:26 -06:00
rowupstream	b258e9f774	chore: update stalwart named volumes for v0.16	2026-08-04 10:07:09 -05:00
abhishukla610 GitHub Abhiigg Mauricio Siu	755c7c5c50	Add Open Design template (#966 ) * Add Open Design template Open Design is a local-first, open-source design tool that ships as a single self-contained container (no external DB or cache). Adds the blueprint (docker-compose.yml + template.toml + logo) and a meta.json entry. * Use node-based healthcheck for Open Design template (matches upstream; verified locally) * Pin Open Design image to 0.16.1 for reproducible deploys Replace :latest with the immutable released tag ghcr.io/nexu-io/od:0.16.1 in docker-compose.yml and set the matching version in meta.json, per the repo pinning convention (AGENTS.md). Tag 0.16.1 verified: /api/health returns 200 and the node-based healthcheck passes. * Allow both http and https origins for Open Design template Dokploy's auto-generated domain is served over plain HTTP by default (no cert), so OD_ALLOWED_ORIGINS=https://${main_domain} alone made the daemon reject the browser's http origin with 403, breaking the app after the onboarding shell loaded. List both schemes so the template works on the default HTTP domain and after a user adds an HTTPS certificate. Verified against a live deploy: listed origin -> 200, unlisted -> 403; the daemon supports comma-separated multi-origin per deploy/README.md. * Disable daemon API auth so the Open Design web UI loads The daemon token-gates its API when bound to 0.0.0.0 (every container), and a browser has no way to present that bearer token, so the web UI's bootstrap calls all returned 401 and the app failed to load. Set OD_DISABLE_API_AUTH=1 (the daemon's documented escape hatch) so the UI works on deploy. Add a README noting the instance is then open (front it with auth/HTTPS if internet-facing) and how to enable AI features. Verified end to end against a live deploy on a real domain. --------- Co-authored-by: Abhiigg <abhi@incrediblegoodguys.com> Co-authored-by: Mauricio Siu <siumauricio@icloud.com>	2026-08-03 05:02:23 -06:00
Mauricio Siu GitHub Claude Fable 5	025ae61c2c	feat: add Whatomate template (#1064 ) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-08-03 05:01:17 -06:00
Marios AntonoudiouandGitHub	0b731157ce	Chatto latest (#1060 ) * Switch to latest channel for chatto * Update meta.json too * Switch to 0.4 series	2026-08-03 04:46:41 -06:00
Juan VargasandGitHub	0eae107272	Update SendDock template: track latest image, drop deprecated env vars (#1057 ) - Point the image at ghcr.io/arkhe-systems/senddock:latest so fresh deploys always get the current release without a per-release PR. - Remove DEPLOYMENT_MODE (self-host is the default now; the cloud flag became the boolean CLOUD). - Remove SENDDOCK_LICENSE_KEY (Pro license is activated from the dashboard in 0.8; the env var is removed in 0.9).	2026-08-03 04:46:16 -06:00
Jiho LeeandGitHub	de726de736	feat: add 9Router template (#1046 ) * feat: add 9Router template (#1040) * fix: pin the headroom sidecar instead of :latest * fix: use http for BASE_URL per the repo URL convention * fix: set NEXT_PUBLIC_BASE_URL so the browser hits the deployed domain	2026-08-03 04:39:57 -06:00
Khiet Tam Nguyen GitHub Mauricio Siu Claude Fable 5	a73e4928f2	feat: bump fmd-server to 0.16.0 for compatibility with Open Street Map (#1052 ) * feat(fmd-server): bump to version 0.16.0 * fix: use expose instead of ports * fix: fmd-server image tag is 0.16.0 (upstream dropped the v prefix) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-08-03 04:39:40 -06:00
Yusuf GündoğduandGitHub	1dc9c36216	libredb-studio: bump version to 0.9.59 (#1039 )	2026-08-03 04:37:04 -06:00
Khiet Tam NguyenandGitHub	5aba7908a2	chore: remove conduwuit in favour of tuwunel (#1054 )	2026-08-03 04:36:59 -06:00
Jiho LeeandGitHub	a49f00fd7b	ci: audit every blueprint on a schedule (#1049 ) * ci: audit every blueprint on a schedule (#1047) * ci: use RUNNER_TEMP and gate the fail step on the dispatch event * ci: bound the step summary and publish the full report as an artifact * ci: treat a missing file as a finding, and never truncate mid-fence	2026-08-03 04:36:31 -06:00
Finley Crawford-McQuillanandGitHub	292877b370	feat: Add Fluxer template (#1045 ) * feat: Add Fluxer template * fix: populate config.env in template.toml * fix: syntax in template.toml for config.env * fix: use multiline string for config.env in template.toml * fix: format config.env as valid string array in template.toml * fix: update template.toml format to match standard env array structure * add: template.toml with optional env vars and http guidance * fix: change wording to avoid confusion * fix: add more missing instructions * fix: more wording changes * fix: final wording improvements * fix: comma missing from previous commit	2026-08-03 04:36:10 -06:00
Théo LAGACHE GitHub Théo LAGACHE	a176ba3e16	Blueprints/portabase (#1055 ) * feat(blueprints): add portabase * feat(blueprints): add portabase --------- Co-authored-by: Théo LAGACHE <theo.lagache@soluce-technologies.com>	2026-08-03 04:18:15 -06:00
Khiet Tam NguyenandGitHub	69e731eda1	fix: change "ports" -> "expose" for multiple services (#1053 ) * fix: change "ports" -> "expose" for multiple services * chore: remove helper script	2026-08-03 04:12:26 -06:00
Andre Carbajal VargasandGitHub	c1ccb27359	feat: add NaviServer template (#1062 ) * feat: add NaviServer template * fix: address NaviServer template review comments * fix: align NaviServer template env format * fix: publish NaviServer Minecraft ports	2026-08-03 04:12:23 -06:00
JavierandGitHub	4de48c2a73	Add WupNext blueprint (#1051 )	2026-08-03 04:09:10 -06:00
Jiho LeeandGitHub	0c33668267	fix: bring scrutiny, stack-auth and vault in line with the compose conventions (#1048 ) * fix: drop no-op container_name from three blueprints (#1047) * fix: drop the empty [[config.mounts]] block from vault * fix: pin vault and scrutiny images, add the missing version header	2026-08-03 04:02:30 -06:00
Stefan ErnstandGitHub	285e667c68	chore: update Windshift to v0.8.2 (#1041 )	2026-07-21 21:56:19 -06:00
Mauricio SiuandGitHub	c33d499975	Merge branch 'main' into canary	2026-07-20 00:34:19 -06:00
Marko KostichandGitHub	b4542d82f8	feat(directus): upgrade template to Directus 12.1.1 (#986 ) * feat(directus): upgrade template to Directus 12.1.1 * feat(directus): add commented S3 env variables to template.toml	2026-07-19 19:25:33 -06:00
MaflyandGitHub	ceb65b216f	fix(docker): share plugins and themes volumes across containers (#990 )	2026-07-19 19:24:15 -06:00
SamTV12345 GitHub Copilot Autofix powered by AI	8daff07700	Add PodFetch template (#1035 ) * Add PodFetch template * Use env array syntax in template.toml * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Address review: match version to image tag, expose admin_username variable, dark-mode friendly logo --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	2026-07-19 19:20:01 -06:00
Jakub KrzyżanowskiandGitHub	08d87d8a90	feat: add struxa template (#1037 ) * feat: add struxa template Adds a Dokploy blueprint for Struxa (github.com/struxadotcloud/struxa), a self-hosted, open-source server management panel. Deploys the published GHCR images (dashboard, watchkeeper, migrate) plus MySQL and MinIO sidecars. The web service generates its RS256 JWT keypair at startup via Node's built-in crypto module, since no Dokploy template helper covers RSA key generation. * fix: pin struxa images to latest floating tag struxa's release workflow pushes a latest floating tag alongside version tags on every stable release, matching the convention used by ~44% of existing blueprints (version: "latest" in meta.json). * fix: generate a 64-char DATABASE_ENCRYPTION_KEY Dokploy's runtime \${hash:N} helper produces N hex characters, not N bytes (the templates repo's local preview helpers.ts models it as byte count, which is inconsistent with the platform). struxa's env schema requires DATABASE_ENCRYPTION_KEY to be >=64 chars (it's hex decoded to a 32-byte AES-256 key), so \${hash:32} only produced half the required length. Confirmed against other blueprints (sim, chatwoot, outline) which all use \${hash:64} for 64-char secrets. * fix: address Copilot review comments - Add explicit \`version: "3.8"\` to docker-compose.yml, matching the documented template format. - Pin minio/minio to a specific RELEASE tag (used elsewhere in the repo: plane, posthog) instead of the floating latest tag. - Default BETTER_AUTH_URL/APP_URL/CORS_ORIGIN to http://, matching repo convention for Dokploy-fronted apps (TLS terminates at the proxy). * fix: rename web service to struxa AGENTS.md convention: the primary Docker service name should match the blueprint folder name. Renamed the web/dashboard service from "web" to "struxa" in docker-compose.yml and updated template.toml's config.domains.serviceName to match.	2026-07-19 19:19:42 -06:00
Zakher MasriandGitHub	8ca2bf9393	feat: adds `check-links.js` to find broken links (#983 )	2026-07-19 19:11:43 -06:00
Marko KostichandGitHub	7aee585368	chore: normalize template tags to kebab-case (#987 )	2026-07-19 19:11:40 -06:00
Edward BurtonandGitHub	34f3577b81	feat(templates): add systemprompt (#1032 ) * feat(templates): add systemprompt * fix header comment: accurate in both repos	2026-07-19 19:09:19 -06:00
Mauricio SiuandGitHub	fff1708ebd	Merge pull request #1033 from Dokploy/feat/mailu feat: add Mailu mail server template	2026-07-19 19:06:25 -06:00
Mauricio SiuandGitHub	c66a1df3cf	Merge pull request #1027 from Dokploy/feat/oryx feat: add Oryx (SRS) media streaming template	2026-07-19 19:05:32 -06:00
Mauricio SiuandGitHub	dd12762085	Merge pull request #994 from Jinjinov/add-openhabittracker Add openhabittracker template	2026-07-19 19:05:24 -06:00
Mauricio SiuandGitHub	d6b842c275	Merge pull request #1034 from Dokploy/feat/oneuptime feat: add OneUptime template	2026-07-17 13:37:12 -06:00
Mauricio SiuandClaude Fable 5	6683685dae	feat: add OneUptime template Adds OneUptime (open-source observability platform: uptime monitoring, status pages, incident management, on-call, logs/traces/metrics) as a template, following upstream's current single-app architecture (app + nginx ingress + postgres + redis + clickhouse + probe). Closes #514 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-16 17:46:15 -06:00
Mauricio SiuandClaude Fable 5	af8b535d34	feat: add Oryx (SRS) media streaming template Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-14 14:06:04 -06:00
Jinjinov	6d56faf0ed	Add openhabittracker blueprint	2026-07-13 23:25:21 +02:00
Mauricio SiuandGitHub	a34def7060	Merge pull request #985 from H3xKatana/fix/kener-add-redis fix(kener): add required Redis service to fix REDIS_URL crash	2026-07-08 14:12:11 -06:00
0xkatana	c345475d68	fix: add required Redis service to Kener template Kener v4 requires Redis for BullMQ background queues. Without it, the application crashes on startup with 'REDIS_URL is not defined' error. Changes: - Add Redis 7 Alpine service with healthcheck - Pin Kener image to v4.1.1 (was 'latest') - Add REDIS_URL env var pointing to redis://redis:6379 - Remove unused postgres and mysql services (SQLite is the default) - Remove unused env vars for removed DB services - Use expose instead of ports (Dokploy convention) - Add depends_on with service_healthy condition for Redis Fixes https://github.com/Dokploy/templates/issues/976	2026-07-08 20:07:23 +01:00
Mauricio SiuandGitHub	decfac62c9	Merge pull request #980 from Dokploy/canary New 85 Templates	2026-07-08 11:04:02 -06:00