fix(supabase): upgrade database to Postgres 17

Align the template with the current upstream self-hosted stack
(supabase/postgres 17.6.1.136, studio 2026.08.03, kong 3.9.3),
remove the deprecated analytics/vector services and switch
Studio/pg-meta to the postgres role per upstream guidance.

Closes #1067

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.github/workflows/audit-all-blueprints.yml

@@ -0,0 +1,163 @@
+name: Audit All Blueprints
+
+# The per-PR validators only look at blueprints a PR touches, which is the right
+# call for CI cost but means a template is checked when it lands and then never
+# again. When a rule is added or tightened, every existing blueprint that breaks
+# it stays broken with nothing surfacing it (see #1047).
+#
+# This job runs the same validators over ALL blueprints on a schedule, so drift
+# is reported instead of accumulating. It never runs on pull_request, so it
+# cannot block a contributor for a pre-existing problem they did not introduce.
+
+on:
+  schedule:
+    # Mondays, 04:00 UTC
+    - cron: "0 4 * * 1"
+  workflow_dispatch:
+    inputs:
+      fail_on_findings:
+        description: "Exit non-zero when findings exist (default: report only)"
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.16.0
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 8
+
+      - name: Install dependencies
+        run: cd build-scripts && pnpm install
+
+      - name: Validate per-template metadata
+        run: node build-scripts/generate-meta.js --check
+
+      - name: Audit every blueprint
+        id: audit
+        run: |
+          # $RUNNER_TEMP is per-job; also cleared explicitly so a re-run or a
+          # partially-executed earlier step can never leak into the summary.
+          WORK="${RUNNER_TEMP:-/tmp}"
+          OUT="$WORK/validator-out.txt"
+          REPORT="$WORK/audit-report.md"
+          SUMMARY="$WORK/audit-summary.md"
+          rm -f "$OUT" "$REPORT" "$SUMMARY"
+
+          COMPOSE_FAILED=""
+          TOML_FAILED=""
+
+          for dir in blueprints/*/; do
+            id="$(basename "$dir")"
+
+            # Run unconditionally: a blueprint with no docker-compose.yml or no
+            # template.toml is itself a finding, and the validators already
+            # report a missing file clearly. Skipping them would hide exactly
+            # the blueprints most likely to be broken.
+            if ! (cd build-scripts && pnpm exec tsx validate-docker-compose.ts \
+                   --file "../$dir/docker-compose.yml") > "$OUT" 2>&1; then
+              COMPOSE_FAILED="$COMPOSE_FAILED $id"
+              {
+                echo "### \`$id\` — docker-compose.yml"
+                echo '```'
+                grep '❌' "$OUT" || cat "$OUT"
+                echo '```'
+              } >> "$REPORT"
+            fi
+
+            if ! (cd build-scripts && pnpm exec tsx validate-template.ts \
+                   --dir "../$dir") > "$OUT" 2>&1; then
+              TOML_FAILED="$TOML_FAILED $id"
+              {
+                echo "### \`$id\` — template.toml"
+                echo '```'
+                grep '❌' "$OUT" || cat "$OUT"
+                echo '```'
+              } >> "$REPORT"
+            fi
+          done
+
+          COMPOSE_COUNT=$(echo $COMPOSE_FAILED | wc -w | tr -d ' ')
+          TOML_COUNT=$(echo $TOML_FAILED | wc -w | tr -d ' ')
+          TOTAL=$(ls -d blueprints/*/ | wc -l | tr -d ' ')
+
+          {
+            echo "## Blueprint audit"
+            echo ""
+            echo "| check | failing | of |"
+            echo "| --- | --- | --- |"
+            echo "| \`validate-docker-compose.ts\` | $COMPOSE_COUNT | $TOTAL |"
+            echo "| \`validate-template.ts\` | $TOML_COUNT | $TOTAL |"
+            echo ""
+          } > "$SUMMARY"
+
+          if [ -f "$REPORT" ]; then
+            cat "$REPORT" >> "$SUMMARY"
+          else
+            echo "No findings." >> "$SUMMARY"
+          fi
+
+          # The step summary caps at ~1MB and truncates silently past it, which
+          # would hide findings exactly as the backlog grows. Bound what we
+          # append and point at the artifact for the rest.
+          SUMMARY_LIMIT=$((512 * 1024))
+          SUMMARY_BYTES=$(wc -c < "$SUMMARY" | tr -d ' ')
+
+          if [ "$SUMMARY_BYTES" -gt "$SUMMARY_LIMIT" ]; then
+            # Emit the header table only, never a byte-sliced prefix: cutting
+            # mid-``` leaves an unclosed code fence, which swallows the notice
+            # below it and makes the truncation invisible in the rendered summary.
+            {
+              head -n 7 "$SUMMARY"
+              echo ""
+              echo "_Report omitted: $SUMMARY_BYTES bytes exceeds the $SUMMARY_LIMIT byte budget for a job summary._"
+              echo "_Download the \`blueprint-audit\` artifact for the complete output._"
+            } >> "$GITHUB_STEP_SUMMARY"
+          else
+            cat "$SUMMARY" >> "$GITHUB_STEP_SUMMARY"
+          fi
+
+          # Always published, so the full report survives regardless of size.
+          cp "$SUMMARY" "$WORK/blueprint-audit.md"
+          echo "report_path=$WORK/blueprint-audit.md" >> "$GITHUB_OUTPUT"
+
+          echo "compose_failed=$COMPOSE_COUNT" >> "$GITHUB_OUTPUT"
+          echo "toml_failed=$TOML_COUNT" >> "$GITHUB_OUTPUT"
+
+          if [ "$COMPOSE_COUNT" != "0" ] || [ "$TOML_COUNT" != "0" ]; then
+            echo "::warning::$COMPOSE_COUNT compose and $TOML_COUNT template.toml findings across $TOTAL blueprints"
+          fi
+
+      - name: Upload the full report
+        if: always() && steps.audit.outputs.report_path != ''
+        uses: actions/upload-artifact@v4
+        with:
+          name: blueprint-audit
+          path: ${{ steps.audit.outputs.report_path }}
+          retention-days: 30
+
+      - name: Fail if requested
+        # `inputs` is only populated for workflow_dispatch; on a schedule run it
+        # is not available, so gate on the event first and read the value through
+        # github.event.inputs, which is an empty string when absent.
+        if: >-
+          github.event_name == 'workflow_dispatch' &&
+          github.event.inputs.fail_on_findings == 'true' &&
+          (steps.audit.outputs.compose_failed != '0' || steps.audit.outputs.toml_failed != '0')
+        run: |
+          echo "❌ Findings present and fail_on_findings was requested."
+          exit 1

README.md

@@ -183,7 +183,7 @@ services:
       - 3000:3000
 
     # Instead use this way:
-    ports:
+    expose:
       - 3000
 ```
 

blueprints/9router/docker-compose.yml

@@ -0,0 +1,32 @@
+version: "3.8"
+
+services:
+  9router:
+    image: decolua/9router:0.5.40
+    restart: unless-stopped
+    environment:
+      DATA_DIR: /app/data
+      PORT: "20128"
+      HOSTNAME: "0.0.0.0"
+      NODE_ENV: production
+      JWT_SECRET: ${JWT_SECRET}
+      INITIAL_PASSWORD: ${INITIAL_PASSWORD}
+      API_KEY_SECRET: ${API_KEY_SECRET}
+      MACHINE_ID_SALT: ${MACHINE_ID_SALT}
+      BASE_URL: http://${ROUTER_HOST}
+      NEXT_PUBLIC_BASE_URL: http://${ROUTER_HOST}
+      HEADROOM_URL: http://headroom:8787
+      AUTH_COOKIE_SECURE: "false"
+    volumes:
+      - 9router-data:/app/data
+    depends_on:
+      - headroom
+
+  # Optional token-reduction proxy that 9Router calls through HEADROOM_URL.
+  # Shipped as a sidecar because the 9Router image does not bundle it.
+  headroom:
+    image: ghcr.io/chopratejas/headroom:0.6.7
+    restart: unless-stopped
+
+volumes:
+  9router-data:

blueprints/9router/meta.json

@@ -0,0 +1,17 @@
+{
+  "id": "9router",
+  "name": "9Router",
+  "version": "0.5.40",
+  "description": "Self-hosted AI model router that rotates requests across 40+ providers with automatic fallback, exposing an OpenAI-compatible endpoint for coding agents.",
+  "logo": "9router.png",
+  "links": {
+    "github": "https://github.com/decolua/9router",
+    "website": "https://9router.com",
+    "docs": "https://github.com/decolua/9router/blob/master/DOCKER.md"
+  },
+  "tags": [
+    "ai",
+    "proxy",
+    "developer-tools"
+  ]
+}

blueprints/9router/template.toml

@@ -0,0 +1,21 @@
+[variables]
+main_domain = "${domain}"
+jwt_secret = "${password:64}"
+initial_password = "${password:32}"
+api_key_secret = "${password:64}"
+machine_id_salt = "${password:32}"
+
+[config]
+env = [
+  "ROUTER_HOST=${main_domain}",
+  "JWT_SECRET=${jwt_secret}",
+  "INITIAL_PASSWORD=${initial_password}",
+  "API_KEY_SECRET=${api_key_secret}",
+  "MACHINE_ID_SALT=${machine_id_salt}",
+]
+mounts = []
+
+[[config.domains]]
+serviceName = "9router"
+port = 20128
+host = "${main_domain}"

blueprints/ackee/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   ackee:
     image: electerious/ackee:3.4.2
-    ports:
+    expose:
       - "3000"
     environment:
       - ACKEE_USERNAME=${ACKEE_USERNAME}

blueprints/activepieces/docker-compose.yml

@@ -61,4 +61,4 @@ services:
 
 volumes:
   postgres_data:
-  redis_data: 
+  redis_data: 

blueprints/adguardhome/docker-compose.yml

@@ -17,4 +17,4 @@ services:
 
 volumes:
   adguardhome-work: {}
-  adguardhome-conf: {}
+  adguardhome-conf: {}

blueprints/adminer/docker-compose.yml

@@ -3,5 +3,5 @@ services:
   adminer:
     image: adminer:4.8.1
     restart: unless-stopped
-    ports:
-      - 8080 
+    expose:
+      - 8080 

blueprints/affinepro/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   affinepro:
     image: ghcr.io/toeverything/affine:stable
     restart: unless-stopped
-    ports:
+    expose:
       - 3010
     volumes:
       - affine-storage:/root/.affine/storage

blueprints/agent-zero/docker-compose.yml

@@ -11,4 +11,4 @@ services:
     volumes:
       - agent-zero-data:/a0/usr
 volumes:
-  agent-zero-data:
+  agent-zero-data:

blueprints/agentdvr/docker-compose.yml

@@ -11,12 +11,11 @@ services:
       - agentdvr-config:/AgentDVR/Media/XML/
       - agentdvr-media:/AgentDVR/Media/WebServerRoot/Media/
       - agentdvr-commands:/AgentDVR/Commands/
-    ports:
+    expose:
       - 8090
       - 3478/udp
       - 50000-50100/udp
-
 volumes:
   agentdvr-config: {}
   agentdvr-media: {}
-  agentdvr-commands: {}
+  agentdvr-commands: {}

blueprints/alist/docker-compose.yml

@@ -11,4 +11,4 @@ services:
     restart: unless-stopped
 
 volumes:
-  alist-data:
+  alist-data:

blueprints/alltube/docker-compose.yml

@@ -3,10 +3,10 @@ services:
   alltube:
     image: dnomd343/alltube:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     environment:
       - TITLE=${TITLE}
       - CONVERT=${CONVERT}
       - STREAM=${STREAM}
-      - REMUX=${REMUX} 
+      - REMUX=${REMUX} 

blueprints/ampache/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   ampache:
     image: ampache/ampache:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     volumes:
       - config:/var/www/config
@@ -14,4 +14,4 @@ services:
 volumes:
   config: {}
   log: {}
-  mysql: {} 
+  mysql: {} 

blueprints/anonupload/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   anonupload:
     image: ghcr.io/supernova3339/anonfiles:1
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     environment:
       - ADMIN_EMAIL=${ADMIN_EMAIL}
@@ -13,4 +13,4 @@ services:
       - uploads:/var/www/html/uploads
 
 volumes:
-  uploads: {} 
+  uploads: {} 

blueprints/answer/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   answer:
     image: apache/answer:1.4.1
-    ports:
+    expose:
       - '80'
     restart: on-failure
     volumes:

blueprints/answer/meta.json

@@ -10,7 +10,7 @@
     "docs": "https://answer.apache.org/docs"
   },
   "tags": [
-    "q&a",
+    "q-and-a",
     "self-hosted"
   ]
 }

blueprints/anubis/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   anubis:
     image: ghcr.io/techarohq/anubis:latest
     restart: unless-stopped
-    ports:
+    expose:
       - "8923" # Anubis default port
     environment:
       # Required: Point to your frontend service locally

blueprints/anythingllm/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   anythingllm:
     image: mintplexlabs/anythingllm:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 3001
     environment:
       - STORAGE_DIR=/app/server/storage
@@ -13,4 +13,4 @@ services:
       - SYS_ADMIN
 
 volumes:
-  storage: {} 
+  storage: {} 

blueprints/apprise-api/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   apprise-api:
     image: linuxserver/apprise-api:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 8000
     environment:
       - PUID=1000
@@ -13,4 +13,4 @@ services:
       - config:/config
 
 volumes:
-  config: {} 
+  config: {} 

blueprints/appsmith/docker-compose.yml

@@ -7,4 +7,4 @@ services:
     restart: unless-stopped
 
 volumes:
-  appsmith-data:
+  appsmith-data:

blueprints/arangodb/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   arangodb:
     image: arangodb:3.12.4
     restart: unless-stopped
-    ports:
+    expose:
       - 8529
     environment:
       - ARANGO_ROOT_PASSWORD=${ARANGO_PASSWORD}
@@ -11,4 +11,4 @@ services:
       - data:/var/lib/arangodb3
 
 volumes:
-  data: {} 
+  data: {} 

blueprints/archivebox/docker-compose.yml

@@ -9,8 +9,7 @@ services:
       PUBLIC_SNAPSHOTS: ${PUBLIC_SNAPSHOTS}
     volumes:
       - archivebox_data:/data
-    ports:
+    expose:
       - "8000"
-
 volumes:
   archivebox_data:

blueprints/argilla/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   argilla-web:
     image: argilla/argilla-server:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 6900
     environment:
       - ARGILLA_HOME_PATH=/var/lib/argilla
@@ -74,4 +74,4 @@ volumes:
   argilladata: {}
   elasticdata: {}
   dbdata: {}
-  redisdata: {} 
+  redisdata: {} 

blueprints/audiobookshelf/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   audiobookshelf:
     image: ghcr.io/advplyr/audiobookshelf:2.19.4
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     environment:
       - TZ=UTC
@@ -14,4 +14,4 @@ services:
 
 volumes:
   config: {}
-  metadata: {} 
+  metadata: {} 

blueprints/authelia/docker-compose.yml

@@ -16,9 +16,8 @@ services:
         condition: service_healthy
       postgres:
         condition: service_healthy
-    ports:
+    expose:
       - 9091
-
   redis:
     image: redis:7-alpine
     restart: unless-stopped
@@ -52,4 +51,4 @@ services:
 volumes:
   authelia_config:
   redis_data:
-  postgres_data:
+  postgres_data:

blueprints/authorizer/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   authorizer:
     image: lakhansamani/authorizer:1.4.4
     restart: unless-stopped
-    ports:
+    expose:
       - 8080
     environment:
       - DATABASE_TYPE=postgres
@@ -37,4 +37,4 @@ services:
 
 volumes:
   db_data: {}
-  redis_data: {} 
+  redis_data: {} 

blueprints/autobase/docker-compose.yml

@@ -2,7 +2,7 @@ services:
   autobase-console:
     image: autobase/console:2.7.2
     restart: unless-stopped
-    ports:
+    expose:
       - "80"
       - "8080"
     environment:

blueprints/azuracast/docker-compose.yml

@@ -2,7 +2,7 @@ services:
   azuracast:
     image: ghcr.io/azuracast/azuracast:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     volumes:
       - azuracast-station-data:/var/azuracast/stations
@@ -36,4 +36,4 @@ volumes:
   azuracast-data: {}
   azuracast-uploads: {}
   azuracast-backups: {}
-  mariadb-data: {}
+  mariadb-data: {}

blueprints/babybuddy/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   babybuddy:
     image: linuxserver/babybuddy:2.7.0
     restart: unless-stopped
-    ports:
+    expose:
       - 8000
     environment:
       - PUID=1000
@@ -16,4 +16,4 @@ services:
       - config:/config
 
 volumes:
-  config: {} 
+  config: {} 

blueprints/backrest/docker-compose.yml

@@ -2,7 +2,7 @@ services:
   backrest:
     image: garethgeorge/backrest:v1.7.3
     restart: unless-stopped
-    ports:
+    expose:
       - 9898
     environment:
       - BACKREST_PORT=9898

blueprints/baikal/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   baikal:
     image: ckulka/baikal:nginx-php8.2
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     environment:
       - TZ=UTC
@@ -13,4 +13,4 @@ services:
 
 volumes:
   config: {}
-  data: {} 
+  data: {} 

blueprints/barrage/docker-compose.yml

@@ -3,11 +3,11 @@ services:
   barrage:
     image: maulik9898/barrage:0.3.0
     restart: unless-stopped
-    ports:
+    expose:
       - 3000
     environment:
       - NEXTAUTH_SECRET=${NEXTAUTH_SECRET}
       - NEXTAUTH_URL=http://${DOMAIN}
       - DELUGE_URL=${DELUGE_URL}
       - DELUGE_PASSWORD=${DELUGE_PASSWORD}
-      - BARRAGE_PASSWORD=${BARRAGE_PASSWORD} 
+      - BARRAGE_PASSWORD=${BARRAGE_PASSWORD} 

blueprints/bazarr/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   bazarr:
     image: lscr.io/linuxserver/bazarr:1.5.1
     restart: unless-stopped
-    ports:
+    expose:
       - 6767
     environment:
       - PUID=1000
@@ -15,4 +15,4 @@ services:
       - ${TV_PATH}:/tv
 
 volumes:
-  config: {} 
+  config: {} 

blueprints/beszel/docker-compose.yml

@@ -3,11 +3,11 @@ services:
   beszel:
     image: henrygd/beszel:0.10.2
     restart: unless-stopped
-    ports:
+    expose:
       - 8090
     volumes:
       - beszel_data:/beszel_data
       - /var/run/docker.sock:/var/run/docker.sock:ro
 
 volumes:
-  beszel_data: {} 
+  beszel_data: {} 

blueprints/bigcapital/docker-compose.yml

@@ -4,10 +4,8 @@ services:
     restart: unless-stopped
     depends_on:
       - server
-    ports:
+    expose:
       - '80'
-
-
   server:
     image: bigcapitalhq/server:latest
     restart: unless-stopped
@@ -18,9 +16,8 @@ services:
         condition: service_started
       redis:
         condition: service_started
-    ports:
+    expose:
       - '3000'
-
     environment:
       # Mail
       - MAIL_HOST=${MAIL_HOST}
@@ -97,9 +94,8 @@ services:
       - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
     volumes:
       - mysql:/var/lib/mysql
-    ports:
+    expose:
       - '3306'
-
     healthcheck:
       test: ["CMD-SHELL", "mysqladmin ping -h localhost -u root -p$$MYSQL_ROOT_PASSWORD || exit 1"]
       interval: 10s
@@ -110,7 +106,7 @@ services:
   mongo:
     image: mongo:7
     restart: unless-stopped
-    ports:
+    expose:
       - '27017'
     volumes:
       - mongo:/data/db
@@ -119,7 +115,7 @@ services:
   redis:
     image: redis:7-alpine
     restart: unless-stopped
-    ports:
+    expose:
       - '6379'
     volumes:
       - redis:/data
@@ -133,10 +129,8 @@ services:
   gotenberg:
     image: gotenberg/gotenberg:7
     restart: unless-stopped
-    ports:
+    expose:
       - '9000'
-
-
 volumes:
   mysql:
     name: bigcapital_mysql

blueprints/billmora/docker-compose.yml

@@ -28,6 +28,9 @@ services:
       - AUTORUN_LARAVEL_STORAGE_LINK=true
     volumes:
       - billmora-storage:/var/www/html/storage
+      - billmora-plugins:/var/www/html/plugin
+      - billmora-themes-resources:/var/www/html/resources/themes
+      - billmora-themes-public:/var/www/html/public/themes
     depends_on:
       billmora-db:
         condition: service_healthy
@@ -58,6 +61,9 @@ services:
       - AUTORUN_ENABLED=false
     volumes:
       - billmora-storage:/var/www/html/storage
+      - billmora-plugins:/var/www/html/plugin
+      - billmora-themes-resources:/var/www/html/resources/themes
+      - billmora-themes-public:/var/www/html/public/themes
     depends_on:
       billmora-db:
         condition: service_healthy
@@ -88,6 +94,9 @@ services:
       - AUTORUN_ENABLED=false
     volumes:
       - billmora-storage:/var/www/html/storage
+      - billmora-plugins:/var/www/html/plugin
+      - billmora-themes-resources:/var/www/html/resources/themes
+      - billmora-themes-public:/var/www/html/public/themes
     depends_on:
       billmora-db:
         condition: service_healthy
@@ -126,5 +135,8 @@ services:
 
 volumes:
   billmora-storage:
+  billmora-plugins:
+  billmora-themes-resources:
+  billmora-themes-public:
   billmora-db-data:
   billmora-redis-data:

blueprints/blender/docker-compose.yml

@@ -19,7 +19,7 @@ services:
       - PGID=1000
       - TZ=Etc/UTC
       - SUBFOLDER=/ #optional
-    ports:
+    expose:
       - 3000
       - 3001
     restart: unless-stopped

blueprints/blinko/docker-compose.yml

@@ -16,9 +16,8 @@ services:
       options:
         max-size: "10m"
         max-file: "3"
-    ports:
+    expose:
       - 1111
-
   blinko-postgres:
     image: postgres:14
     restart: always

blueprints/bluesky-pds/docker-compose.yml

@@ -45,4 +45,4 @@ services:
       timeout: 10s
       retries: 10
 volumes: 
-  pds-data:
+  pds-data:

blueprints/booklore/docker-compose.yml

@@ -8,7 +8,7 @@ services:
     depends_on:
       mariadb:
         condition: service_healthy
-    ports:
+    expose:
       - 6060
     volumes:
       - booklore-data:/app/data

blueprints/bookstack/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   bookstack:
     image: lscr.io/linuxserver/bookstack:24.12.1
     restart: unless-stopped
-    ports:
+    expose:
       - 80
     environment:
       - PUID=1000
@@ -32,4 +32,4 @@ services:
 
 volumes:
   config: {}
-  db_data: {} 
+  db_data: {} 

blueprints/botpress/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   botpress:
     image: botpress/server:12.31.9
     restart: unless-stopped
-    ports:
+    expose:
       - 81
     environment:
       - BP_HOST=0.0.0.0
@@ -31,4 +31,4 @@ services:
 
 volumes:
   data: {}
-  db_data: {} 
+  db_data: {} 

blueprints/budget-board/docker-compose.yml

@@ -22,7 +22,7 @@ services:
     environment:
       VITE_API_URL: http://budget-board-server
       PORT: 6253
-    ports:
+    expose:
       - 6253
     depends_on:
       - budget-board-server

blueprints/bytebase/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   bytebase:
     image: bytebase/bytebase:3.3.0
     restart: unless-stopped
-    ports:
+    expose:
       - 8080
     environment:
       - PG_URL=postgres://postgres:${DB_PASSWORD}@bytebase-db:5432/bytebase
@@ -24,4 +24,4 @@ services:
 
 volumes:
   data: {}
-  db_data: {} 
+  db_data: {} 

blueprints/bytestash/docker-compose.yml

@@ -4,7 +4,7 @@ services:
   bytestash:
     image: ghcr.io/jordan-dalby/bytestash:1.5.6
     restart: unless-stopped
-    ports:
+    expose:
       - "5000"
     environment:
       - BASE_PATH=
@@ -24,4 +24,4 @@ services:
       - snippets:/data/snippets
 
 volumes:
-  snippets: 
+  snippets: 

blueprints/calibre/docker-compose.yml

@@ -9,7 +9,7 @@ services:
       - TZ=Etc/UTC
       - PUID=1000
       - PGID=1000
-    ports:
+    expose:
       - 8080
     volumes:
       - books:/books
@@ -17,4 +17,4 @@ services:
 
 volumes:
   books:
-  data: 
+  data: 

blueprints/calibre/meta.json

@@ -10,7 +10,7 @@
     "docs": "https://manual.calibre-ebook.com/"
   },
   "tags": [
-    "Documents",
-    "E-Commerce"
+    "documents",
+    "e-commerce"
   ]
 }

blueprints/carbone/docker-compose.yml

@@ -7,10 +7,10 @@ services:
     environment:
       - CARBONE_EE_LICENSE=${CARBONE_KEY}
       - CARBONE_EE_STUDIO=true
-    ports:
+    expose:
       - 4000
     volumes:
       - template:/app/template
 
 volumes:
-  template: 
+  template: 

blueprints/carbone/meta.json

@@ -10,9 +10,9 @@
     "docs": "https://carbone.io/documentation/design/overview/getting-started.html"
   },
   "tags": [
-    "Document Generation",
-    "Automation",
-    "Reporting",
-    "Productivity"
+    "document-generation",
+    "automation",
+    "reporting",
+    "productivity"
   ]
 }

blueprints/casdoor/docker-compose.yml

@@ -30,4 +30,4 @@ services:
 
 volumes:
   casdoor-postgres-data:
-  casdoor-data:
+  casdoor-data:

blueprints/certmate/docker-compose.yml

@@ -11,7 +11,7 @@ services:
       - CLOUDFLARE_TOKEN=${CLOUDFLARE_TOKEN}
       - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
       - LOG_LEVEL=${LOG_LEVEL}
-    ports:
+    expose:
       - 8000
     volumes:
       - certmate_certificates:/app/certificates

blueprints/changedetection/docker-compose.yml

@@ -4,10 +4,10 @@ services:
   changedetection:
     image: ghcr.io/dgtlmoon/changedetection.io:0.49
     restart: unless-stopped
-    ports:
+    expose:
       - 5000
     volumes:
       - datastore:/datastore
 
 volumes:
-  datastore: 
+  datastore: 

blueprints/changedetection/meta.json

@@ -10,8 +10,8 @@
     "docs": "https://github.com/dgtlmoon/changedetection.io/wiki"
   },
   "tags": [
-    "Monitoring",
-    "Data",
-    "Notifications"
+    "monitoring",
+    "data",
+    "notifications"
   ]
 }

blueprints/chatto/docker-compose.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   chatto:
-    image: ghcr.io/chattocorp/chatto:0.3.8
+    image: ghcr.io/chattocorp/chatto:0.4
     restart: unless-stopped
     expose:
       - "4000"

blueprints/chatto/meta.json

@@ -1,7 +1,7 @@
 {
   "id": "chatto",
   "name": "Chatto (single binary)",
-  "version": "0.3.8",
+  "version": "0.4.x",
   "description": "A fully-featured real-time chat application for teams and communities. This template deploys the single Chatto binary with embedded NATS. Note: email/password registration requires SMTP to be configured after deployment; voice/video calls are not included in the single-binary setup.",
   "logo": "logo.png",
   "links": {

blueprints/chatwoot/docker-compose.yml

@@ -76,4 +76,4 @@ services:
 volumes:
   chatwoot-storage:
   chatwoot-postgres-data:
-  chatwoot-redis-data:
+  chatwoot-redis-data:

blueprints/checkmate/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   server:
     image: ghcr.io/bluewave-labs/checkmate-backend-mono:latest
     restart: always
-    ports:
+    expose:
       - 52345
     environment:
       - UPTIME_APP_API_BASE_URL=${UPTIME_APP_API_BASE_URL}

blueprints/chevereto/docker-compose.yml

@@ -15,7 +15,7 @@ services:
       - CHEVERETO_HTTPS=0
       - CHEVERETO_MAX_POST_SIZE=2G
       - CHEVERETO_MAX_UPLOAD_SIZE=2G
-    ports:
+    expose:
       - 80
     volumes:
       - storage:/var/www/html/images/
@@ -35,4 +35,4 @@ services:
 
 volumes:
   storage:
-  mysql: 
+  mysql: 

blueprints/chevereto/meta.json

@@ -10,10 +10,10 @@
     "docs": "https://v4-docs.chevereto.com/"
   },
   "tags": [
-    "Image Hosting",
-    "File Management",
-    "Open Source",
-    "Multi-User",
-    "Private Albums"
+    "image-hosting",
+    "file-management",
+    "open-source",
+    "multi-user",
+    "private-albums"
   ]
 }

blueprints/chibisafe/meta.json

@@ -10,7 +10,7 @@
     "docs": "https://chibisafe.app/docs/intro"
   },
   "tags": [
-    "media system",
+    "media-system",
     "storage",
     "file-sharing"
   ]

blueprints/chiefonboarding/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       - SECRET_KEY=${SECRET_KEY}
       - DATABASE_URL=postgres://postgres:${DB_PASSWORD}@db:5432/chiefonboarding
       - ALLOWED_HOSTS=${DOMAIN}
-    ports:
+    expose:
       - 8000
     depends_on:
       - db
@@ -23,4 +23,4 @@ services:
       - postgres_data:/var/lib/postgresql/data
 
 volumes:
-  postgres_data: 
+  postgres_data: 

blueprints/chiefonboarding/meta.json

@@ -10,10 +10,10 @@
     "docs": "https://docs.chiefonboarding.com/"
   },
   "tags": [
-    "Employee Onboarding",
-    "HR Management",
-    "Task Tracking",
-    "Role-Based Access",
-    "Document Management"
+    "employee-onboarding",
+    "hr-management",
+    "task-tracking",
+    "role-based-access",
+    "document-management"
   ]
 }

blueprints/chirpstack/docker-compose.yml

@@ -5,7 +5,7 @@ services:
     restart: unless-stopped
     volumes:
       - ../files/chirpstack:/etc/chirpstack
-    ports:
+    expose:
       - 8080
     environment:
       - MQTT_BROKER_HOST=mosquitto
@@ -21,7 +21,7 @@ services:
     restart: unless-stopped
     volumes:
       - ../files/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge
-    ports:
+    expose:
       - 1700/udp
     environment:
       - INTEGRATION__MQTT__EVENT_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/event/{{ .EventType }}
@@ -36,7 +36,7 @@ services:
     restart: unless-stopped
     volumes:
       - ../files/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge
-    ports:
+    expose:
       - 3001
     depends_on:
       - mosquitto
@@ -45,7 +45,7 @@ services:
     image: chirpstack/chirpstack-rest-api:4
     restart: unless-stopped
     command: --server chirpstack:8080 --bind 0.0.0.0:8090 --insecure
-    ports:
+    expose:
       - 8090
     depends_on:
       - chirpstack
@@ -73,9 +73,8 @@ services:
     restart: unless-stopped
     volumes:
       - ../files/mosquitto/config/:/mosquitto/config/
-    ports:
+    expose:
       - 1883
-
 volumes:
   postgresqldata:
   redisdata:

blueprints/chromium/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   chromium:
     image: lscr.io/linuxserver/chromium:5f5dd27e-ls102
-    ports:
+    expose:
       - "3000"
     environment:
       - PUID=1000
@@ -13,4 +13,4 @@ services:
       - config:/config
 
 volumes:
-  config: 
+  config: 

blueprints/classicpress/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   classicpress:
     image: classicpress/classicpress:php8.3-apache
-    ports:
+    expose:
       - "80"
     environment:
       - WORDPRESS_DB_HOST=db
@@ -27,4 +27,4 @@ services:
 
 volumes:
   wordpress-data:
-  db-data: 
+  db-data: 

blueprints/cloud9/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   cloud9:
     image: lscr.io/linuxserver/cloud9:1.29.2
-    ports:
+    expose:
       - "8000"
     environment:
       - PUID=1000
@@ -17,4 +17,4 @@ services:
       - code:/code
 
 volumes:
-  code: 
+  code: 

blueprints/cloudcommander/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   cloudcmd:
     image: coderaiser/cloudcmd:18.5.1
-    ports:
+    expose:
       - "80"
     environment:
       - CLOUDCMD_ROOT=/mnt/fs
@@ -12,4 +12,4 @@ services:
       - CLOUDCMD_PASSWORD=${PASSWORD}
     volumes:
       - /root:/root
-      - /:/mnt/fs 
+      - /:/mnt/fs 

blueprints/cockpit/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   cockpit:
     image: cockpithq/cockpit:core-2.11.0
-    ports:
+    expose:
       - "80"
     environment:
       - COCKPIT_SESSION_NAME=cockpit
@@ -27,4 +27,4 @@ services:
 volumes:
   config:
   storage:
-  mongo-data: 
+  mongo-data: 

blueprints/codex-docs/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   codex:
     image: ghcr.io/codex-team/codex.docs:v2.2
-    ports:
+    expose:
       - "3000"
     environment:
       - APP_CONFIG_database_driver=mongodb
@@ -28,4 +28,4 @@ services:
 volumes:
   uploads:
   db:
-  mongo-data: 
+  mongo-data: 

blueprints/collabora-office/docker-compose.yml

@@ -3,10 +3,10 @@ version: "3"
 services:
   collabora:
     image: collabora/code:latest
-    ports:
+    expose:
       - "9980"
     environment:
       - domain=${DOMAIN}
       - username=${USERNAME}
       - password=${PASSWORD}
-      - extra_params=--o:ssl.enable=false 
+      - extra_params=--o:ssl.enable=false 

blueprints/commafeed/docker-compose.yml

@@ -5,5 +5,5 @@ services:
     restart: unless-stopped
     volumes:
       - ../files/commafeed-data:/commafeed/data
-    ports:
+    expose:
       - 8082

blueprints/commento/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   commento:
     image: registry.gitlab.com/commento/commento:v1.8.0
-    ports:
+    expose:
       - "8080"
     environment:
       - COMMENTO_ORIGIN=${COMMENTO_ORIGIN}
@@ -19,4 +19,4 @@ services:
       - postgres-data:/var/lib/postgresql/data
 
 volumes:
-  postgres-data: 
+  postgres-data: 

blueprints/commentoplusplus/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   commentoplusplus:
     image: caroga/commentoplusplus:v1.8.7
-    ports:
+    expose:
       - "8080"
     environment:
       - COMMENTO_ORIGIN=${COMMENTO_ORIGIN}
@@ -22,4 +22,4 @@ services:
       - postgres-data:/var/lib/postgresql/data
 
 volumes:
-  postgres-data: 
+  postgres-data: 

blueprints/conduwuit/conduwuit.svg

@@ -1,37 +0,0 @@
-<svg
-  version="1.1"
-  id="Layer_1"
-  xmlns="http://www.w3.org/2000/svg"
-  x="0px"
-  y="0px"
-  width="100%"
-  viewBox="0 0 864 864"
-  enableBackground="new 0 0 864 864"
-  xmlSpace="preserve"
->
-  <path
-    fill="#EC008C"
-    opacity="1.000000"
-    stroke="none"
-    d="M0.999997,649.000000 C1.000000,433.052795 1.000000,217.105591 1.000000,1.079198 C288.876801,1.079198 576.753601,1.079198 865.000000,1.079198 C865.000000,73.025414 865.000000,145.051453 864.634888,217.500671 C852.362488,223.837280 840.447632,229.735275 828.549438,235.666794 C782.143677,258.801056 735.743225,281.945923 688.998657,304.980469 C688.122009,304.476532 687.580750,304.087708 687.053894,303.680206 C639.556946,266.944733 573.006775,291.446869 560.804199,350.179443 C560.141357,353.369446 559.717590,356.609131 559.195374,359.748962 C474.522705,359.748962 390.283478,359.748962 306.088135,359.748962 C298.804138,318.894806 265.253357,295.206024 231.834442,293.306793 C201.003021,291.554596 169.912033,310.230042 156.935104,338.792725 C149.905151,354.265930 147.884064,370.379944 151.151794,387.034515 C155.204453,407.689667 166.300507,423.954224 183.344437,436.516663 C181.938263,437.607025 180.887405,438.409576 179.849426,439.228516 C147.141953,465.032562 139.918045,510.888947 163.388611,545.322632 C167.274551,551.023804 172.285187,555.958313 176.587341,561.495728 C125.846893,587.012817 75.302292,612.295532 24.735992,637.534790 C16.874903,641.458496 8.914484,645.183228 0.999997,649.000000 z"
-  />
-  <path
-    fill="#000000"
-    opacity="1.000000"
-    stroke="none"
-    d="M689.340759,305.086823 C735.743225,281.945923 782.143677,258.801056 828.549438,235.666794 C840.447632,229.735275 852.362488,223.837280 864.634888,217.961929 C865.000000,433.613190 865.000000,649.226379 865.000000,864.919800 C577.000000,864.919800 289.000000,864.919800 1.000000,864.919800 C1.000000,793.225708 1.000000,721.576721 0.999997,649.463867 C8.914484,645.183228 16.874903,641.458496 24.735992,637.534790 C75.302292,612.295532 125.846893,587.012817 176.939667,561.513062 C178.543060,562.085083 179.606812,562.886414 180.667526,563.691833 C225.656799,597.853394 291.232574,574.487244 304.462524,519.579773 C304.989105,517.394409 305.501068,515.205505 305.984619,513.166748 C391.466370,513.166748 476.422729,513.166748 561.331177,513.166748 C573.857727,555.764343 608.978149,572.880920 638.519897,572.672791 C671.048340,572.443665 700.623230,551.730408 711.658752,520.910583 C722.546875,490.502106 715.037842,453.265564 682.776733,429.447052 C683.966064,428.506866 685.119507,427.602356 686.265320,426.688232 C712.934143,405.412262 723.011475,370.684631 711.897339,338.686676 C707.312805,325.487671 699.185303,314.725128 689.340759,305.086823 z"
-  />
-  <path
-    fill="#FEFBFC"
-    opacity="1.000000"
-    stroke="none"
-    d="M688.998657,304.980469 C699.185303,314.725128 707.312805,325.487671 711.897339,338.686676 C723.011475,370.684631 712.934143,405.412262 686.265320,426.688232 C685.119507,427.602356 683.966064,428.506866 682.776733,429.447052 C715.037842,453.265564 722.546875,490.502106 711.658752,520.910583 C700.623230,551.730408 671.048340,572.443665 638.519897,572.672791 C608.978149,572.880920 573.857727,555.764343 561.331177,513.166748 C476.422729,513.166748 391.466370,513.166748 305.984619,513.166748 C305.501068,515.205505 304.989105,517.394409 304.462524,519.579773 C291.232574,574.487244 225.656799,597.853394 180.667526,563.691833 C179.606812,562.886414 178.543060,562.085083 177.128418,561.264465 C172.285187,555.958313 167.274551,551.023804 163.388611,545.322632 C139.918045,510.888947 147.141953,465.032562 179.849426,439.228516 C180.887405,438.409576 181.938263,437.607025 183.344437,436.516663 C166.300507,423.954224 155.204453,407.689667 151.151794,387.034515 C147.884064,370.379944 149.905151,354.265930 156.935104,338.792725 C169.912033,310.230042 201.003021,291.554596 231.834442,293.306793 C265.253357,295.206024 298.804138,318.894806 306.088135,359.748962 C390.283478,359.748962 474.522705,359.748962 559.195374,359.748962 C559.717590,356.609131 560.141357,353.369446 560.804199,350.179443 C573.006775,291.446869 639.556946,266.944733 687.053894,303.680206 C687.580750,304.087708 688.122009,304.476532 688.998657,304.980469 M703.311279,484.370789 C698.954468,457.053253 681.951416,440.229645 656.413696,429.482330 C673.953552,421.977875 688.014709,412.074219 696.456482,395.642365 C704.862061,379.280853 706.487793,362.316345 700.947998,344.809204 C691.688965,315.548492 664.183716,296.954437 633.103516,298.838257 C618.467957,299.725372 605.538086,305.139557 594.588501,314.780121 C577.473999,329.848511 570.185486,349.121399 571.838501,371.750854 C479.166595,371.750854 387.082886,371.750854 294.582672,371.750854 C293.993011,354.662048 288.485260,339.622314 276.940491,327.118439 C265.392609,314.611176 251.082092,307.205322 234.093262,305.960541 C203.355347,303.708374 176.337585,320.898438 166.089890,348.816620 C159.557541,366.613007 160.527206,384.117401 168.756042,401.172516 C177.054779,418.372589 191.471954,428.832886 207.526581,435.632172 C198.407059,442.272583 188.815598,448.302246 180.383728,455.660675 C171.685028,463.251984 166.849655,473.658661 163.940216,484.838684 C161.021744,496.053375 161.212982,507.259705 164.178833,518.426208 C171.577927,546.284302 197.338104,566.588867 226.001465,567.336853 C240.828415,567.723816 254.357819,563.819092 266.385468,555.199646 C284.811554,541.994751 293.631104,523.530579 294.687347,501.238312 C387.354828,501.238312 479.461304,501.238312 571.531799,501.238312 C577.616638,543.189026 615.312866,566.342102 651.310059,559.044739 C684.973938,552.220398 708.263306,519.393127 703.311279,484.370789 z"
-  />
-  <path
-    fill="#EC008C"
-    opacity="1.000000"
-    stroke="none"
-    d="M703.401855,484.804718 C708.263306,519.393127 684.973938,552.220398 651.310059,559.044739 C615.312866,566.342102 577.616638,543.189026 571.531799,501.238312 C479.461304,501.238312 387.354828,501.238312 294.687347,501.238312 C293.631104,523.530579 284.811554,541.994751 266.385468,555.199646 C254.357819,563.819092 240.828415,567.723816 226.001465,567.336853 C197.338104,566.588867 171.577927,546.284302 164.178833,518.426208 C161.212982,507.259705 161.021744,496.053375 163.940216,484.838684 C166.849655,473.658661 171.685028,463.251984 180.383728,455.660675 C188.815598,448.302246 198.407059,442.272583 207.526581,435.632172 C191.471954,428.832886 177.054779,418.372589 168.756042,401.172516 C160.527206,384.117401 159.557541,366.613007 166.089890,348.816620 C176.337585,320.898438 203.355347,303.708374 234.093262,305.960541 C251.082092,307.205322 265.392609,314.611176 276.940491,327.118439 C288.485260,339.622314 293.993011,354.662048 294.582672,371.750854 C387.082886,371.750854 479.166595,371.750854 571.838501,371.750854 C570.185486,349.121399 577.473999,329.848511 594.588501,314.780121 C605.538086,305.139557 618.467957,299.725372 633.103516,298.838257 C664.183716,296.954437 691.688965,315.548492 700.947998,344.809204 C706.487793,362.316345 704.862061,379.280853 696.456482,395.642365 C688.014709,412.074219 673.953552,421.977875 656.413696,429.482330 C681.951416,440.229645 698.954468,457.053253 703.401855,484.804718 z"
-  />
-</svg>
-

blueprints/conduwuit/docker-compose.yml

@@ -1,48 +0,0 @@
-# conduwuit
-# https://conduwuit.puppyirl.gay/deploying/docker-compose.yml
-
-services:
-  homeserver:
-    image: girlbossceo/conduwuit:latest
-    restart: unless-stopped
-    ports:
-      - 8448:6167
-    volumes:
-      - db:/var/lib/conduwuit
-      #- ./conduwuit.toml:/etc/conduwuit.toml
-    environment:
-      # Edit this in your Dokploy Environment
-      CONDUWUIT_SERVER_NAME: ${CONDUWUIT_SERVER_NAME}
-
-      CONDUWUIT_DATABASE_PATH: /var/lib/conduwuit
-      CONDUWUIT_PORT: 6167
-      CONDUWUIT_MAX_REQUEST_SIZE: 20000000 # in bytes, ~20 MB
-
-      CONDUWUIT_ALLOW_REGISTRATION: 'true'
-      CONDUWUIT_REGISTRATION_TOKEN: ${CONDUWUIT_REGISTRATION_TOKEN}
-
-      CONDUWUIT_ALLOW_FEDERATION: 'true'
-      CONDUWUIT_ALLOW_CHECK_FOR_UPDATES: 'true'
-      CONDUWUIT_TRUSTED_SERVERS: '["matrix.org"]'
-      #CONDUWUIT_LOG: warn,state_res=warn
-      CONDUWUIT_ADDRESS: 0.0.0.0
-
-      # Uncomment if you mapped config toml in volumes
-      #CONDUWUIT_CONFIG: '/etc/conduwuit.toml'
-
-  ### Uncomment if you want to use your own Element-Web App.
-  ### Note: You need to provide a config.json for Element and you also need a second
-  ###     Domain or Subdomain for the communication between Element and conduwuit
-  ### Config-Docs: https://github.com/vector-im/element-web/blob/develop/docs/config.md
-  # element-web:
-  #   image: vectorim/element-web:latest
-  #   restart: unless-stopped
-  #   ports:
-  #     - 8009:80
-  #   volumes:
-  #     - ./element_config.json:/app/config.json
-  #   depends_on:
-  #     - homeserver
-
-volumes:
-  db:

blueprints/conduwuit/meta.json

@@ -1,19 +0,0 @@
-{
-  "id": "conduwuit",
-  "name": "Conduwuit",
-  "version": "latest",
-  "description": "Well-maintained, featureful Matrix chat homeserver (fork of Conduit)",
-  "logo": "conduwuit.svg",
-  "links": {
-    "github": "https://github.com/girlbossceo/conduwuit",
-    "website": "https://conduwuit.puppyirl.gay",
-    "docs": "https://conduwuit.puppyirl.gay/configuration.html"
-  },
-  "tags": [
-    "backend",
-    "chat",
-    "communication",
-    "matrix",
-    "server"
-  ]
-}

blueprints/conduwuit/template.toml

@@ -1,15 +0,0 @@
-[variables]
-main_domain = "${domain}"
-registration_token = "${password:20}"
-
-[config]
-env = [
-  "CONDUWUIT_SERVER_NAME=${main_domain}",
-  "CONDUWUIT_REGISTRATION_TOKEN=${registration_token}",
-]
-mounts = []
-
-[[config.domains]]
-serviceName = "homeserver"
-port = 6_167
-host = "${main_domain}"

blueprints/confluence/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   confluence:
     image: atlassian/confluence-server:8.6-ubuntu-jdk17
-    ports:
+    expose:
       - "8090"
     volumes:
       - confluence-data:/var/atlassian/application-data/confluence
@@ -15,4 +15,4 @@ services:
       - CATALINA_CONNECTOR_SECURE=true
 
 volumes:
-  confluence-data: 
+  confluence-data: 

blueprints/convertx/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   convertx:
     image: ghcr.io/c4illin/convertx
     restart: unless-stopped
-    ports:
+    expose:
       - 3000
     environment:
       - JWT_SECRET=${JWT_SECRET}

blueprints/coralproject/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3"
 services:
   coral:
     image: coralproject/talk:9.7.0
-    ports:
+    expose:
       - "3000"
     environment:
       - MONGODB_URI=${MONGODB_URI}
@@ -30,4 +30,4 @@ services:
 
 volumes:
   mongo-data:
-  redis-data: 
+  redis-data: 

blueprints/couchdb/docker-compose.yml

@@ -3,7 +3,7 @@ version: '3.8'
 services:
   couchdb:
     image: couchdb:latest
-    ports:
+    expose:
       - '5984'
     volumes:
       - couchdb-data:/opt/couchdb/data

blueprints/crawl4ai/meta.json

@@ -12,8 +12,8 @@
   "tags": [
     "crawler",
     "scraping",
-    "AI",
-    "LLM",
-    "API"
+    "ai",
+    "llm",
+    "api"
   ]
 }

blueprints/crowdsec/docker-compose.yml

@@ -28,4 +28,4 @@ services:
     restart: unless-stopped
 volumes:
   crowdsec-db:
-  crowdsec-config:
+  crowdsec-config:

blueprints/cup/docker-compose.yml

@@ -5,7 +5,7 @@ services:
     image: ghcr.io/sergi0g/cup:latest
     restart: unless-stopped
     command: serve
-    ports:
+    expose:
       - "8000"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock

blueprints/cut/docker-compose.yml

@@ -11,7 +11,7 @@ services:
       # Bundled Redis below, private to the project network.
       - REDIS_URL=redis://redis:6379
     # Expose the container port only; Dokploy maps the domain to it.
-    ports:
+    expose:
       - 3000
     healthcheck:
       test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/"]

blueprints/dashy/docker-compose.yml

@@ -3,9 +3,9 @@ services:
   dashy:
     image: lissy93/dashy:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 8080
     volumes:
       - dashy-config:/app/user-data
 volumes:
-  dashy-config: {}
+  dashy-config: {}

blueprints/databasus/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   databasus:
     image: databasus/databasus:latest
-    ports:
+    expose:
       - "4005"
     volumes:
       # Persistent data storage

blueprints/directory-lister/docker-compose.yml

@@ -2,8 +2,7 @@ services:
   directory-lister:
     image: directorylister/directorylister:latest
     restart: unless-stopped
-    ports:
-      # The internal port of the application.
+    expose:
       - 80
     volumes:
       # Mounts a persistent named volume to store directory data.

blueprints/directus/docker-compose.yml

@@ -1,15 +1,73 @@
 services:
+  directus:
+    image: directus/directus:12.1.1
+    expose:
+      - 8055
+    volumes:
+      - directus_uploads:/directus/uploads
+      - directus_extensions:/directus/extensions
+    depends_on:
+      database:
+        condition: service_healthy
+      cache:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD-SHELL", "wget --spider -q http://127.0.0.1:8055/server/ping || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_interval: 5s
+      start_period: 30s
+    environment:
+      SECRET: ${DIRECTUS_SECRET}
+
+      DB_CLIENT: "pg"
+      DB_HOST: "database"
+      DB_PORT: "5432"
+      DB_DATABASE: ${DB_NAME}
+      DB_USER: ${DB_USER}
+      DB_PASSWORD: ${DB_PASSWORD}
+
+      CACHE_ENABLED: "true"
+      CACHE_AUTO_PURGE: "true"
+      CACHE_STORE: "redis"
+      REDIS: "redis://cache:6379"
+
+      WEBSOCKETS_ENABLED: "true"
+      PUBLIC_URL: ${PUBLIC_URL}
+      LICENSE_KEY: ${LICENSE_KEY}
+
+      # After first successful login, remove ADMIN_EMAIL and ADMIN_PASSWORD below.
+      ADMIN_EMAIL: ${ADMIN_EMAIL}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD}
+
+      STORAGE_LOCATIONS: "local"
+      STORAGE_LOCAL_DRIVER: "local"
+      STORAGE_LOCAL_ROOT: "/directus/uploads"
+
+      # S3-compatible storage — uncomment and set S3_* env vars in template.toml.
+      # STORAGE_LOCATIONS: "s3"
+      # STORAGE_S3_DRIVER: "s3"
+      # STORAGE_S3_KEY: ${S3_ACCESS_KEY}
+      # STORAGE_S3_SECRET: ${S3_SECRET_KEY}
+      # STORAGE_S3_BUCKET: ${S3_BUCKET}
+      # STORAGE_S3_REGION: ${S3_REGION}
+      # STORAGE_S3_ENDPOINT: ${S3_ENDPOINT}
+      # STORAGE_S3_ROOT: ${S3_ROOT}
+      # STORAGE_S3_FORCE_PATH_STYLE: ${S3_FORCE_PATH_STYLE}
+      # STORAGE_S3_ACL: "private"
+
   database:
     image: postgis/postgis:13-master
     volumes:
       - directus_database:/var/lib/postgresql/data
 
     environment:
-      POSTGRES_USER: "directus"
-      POSTGRES_PASSWORD: ${DATABASE_PASSWORD}
-      POSTGRES_DB: "directus"
+      POSTGRES_USER: ${DB_USER}
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_DB: ${DB_NAME}
     healthcheck:
-      test: ["CMD", "pg_isready", "--host=localhost", "--username=directus"]
+      test: ["CMD-SHELL", "pg_isready --host=localhost --username=$$POSTGRES_USER"]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -26,38 +84,6 @@ services:
       start_interval: 5s
       start_period: 30s
 
-
-  directus:
-    image: directus/directus:11.12.0
-    ports:
-      - 8055
-    volumes:
-      - directus_uploads:/directus/uploads
-      - directus_extensions:/directus/extensions
-    depends_on:
-      database:
-        condition: service_healthy
-      cache:
-        condition: service_healthy
-    environment:
-      SECRET: ${DIRECTUS_SECRET}
-
-      DB_CLIENT: "pg"
-      DB_HOST: "database"
-      DB_PORT: "5432"
-      DB_DATABASE: "directus"
-      DB_USER: "directus"
-      DB_PASSWORD: ${DATABASE_PASSWORD}
-
-      CACHE_ENABLED: "true"
-      CACHE_AUTO_PURGE: "true"
-      CACHE_STORE: "redis"
-      REDIS: "redis://cache:6379"
-
-      # After first successful login, remove the admin email/password env. variables below
-      # as these will now be stored in the database.
-      ADMIN_EMAIL: "admin@example.com"
-      ADMIN_PASSWORD: "d1r3ctu5"
 volumes:
   directus_uploads:
   directus_extensions:

blueprints/directus/meta.json

@@ -1,13 +1,13 @@
 {
   "id": "directus",
   "name": "Directus",
-  "version": "11.0.2",
+  "version": "12.1.1",
   "description": "Directus is an open source headless CMS that provides an API-first solution for building custom backends.",
   "logo": "directus.jpg",
   "links": {
     "github": "https://github.com/directus/directus",
     "website": "https://directus.io/",
-    "docs": "https://docs.directus.io/"
+    "docs": "https://directus.com/docs/"
   },
   "tags": [
     "cms"

blueprints/directus/template.toml

@@ -1,12 +1,41 @@
 [variables]
 main_domain = "${domain}"
+public_url = "https://${main_domain}"
 directus_secret = "${base64:64}"
-database_password = "${password}"
+db_password = "${password:32}"
+db_user = "directus"
+db_name = "directus"
+admin_email = "${email}"
+admin_password = "${password:24}"
+license_key = ""
+
+# Object storage (S3-compatible) — uncomment when switching from local to S3.
+# s3_access_key = ""
+# s3_secret_key = ""
+# s3_bucket = ""
+# s3_region = "us-east-1"
+# s3_endpoint = "https://s3.amazonaws.com"
+# s3_root = ""
+# s3_force_path_style = "false"
 
 [config]
 env = [
-  "DATABASE_PASSWORD=${database_password}",
+  "PUBLIC_URL=${public_url}",
   "DIRECTUS_SECRET=${directus_secret}",
+  "DB_PASSWORD=${db_password}",
+  "DB_USER=${db_user}",
+  "DB_NAME=${db_name}",
+  "ADMIN_EMAIL=${admin_email}",
+  "ADMIN_PASSWORD=${admin_password}",
+  "LICENSE_KEY=${license_key}",
+  # Uncomment when enabling S3 storage in docker-compose.yml:
+  # "S3_ACCESS_KEY=${s3_access_key}",
+  # "S3_SECRET_KEY=${s3_secret_key}",
+  # "S3_BUCKET=${s3_bucket}",
+  # "S3_REGION=${s3_region}",
+  # "S3_ENDPOINT=${s3_endpoint}",
+  # "S3_ROOT=${s3_root}",
+  # "S3_FORCE_PATH_STYLE=${s3_force_path_style}",
 ]
 mounts = []
 

blueprints/discord-tickets/docker-compose.yml

@@ -47,4 +47,4 @@ services:
 
 volumes:
   tickets-mysql-data:
-  tickets-app-data: 
+  tickets-app-data: 

blueprints/discourse/docker-compose.yml

@@ -54,7 +54,7 @@ services:
       # DISCOURSE_SMTP_ENABLE_START_TLS: "true"
       # DISCOURSE_NOTIFICATION_EMAIL: [email protected]
       # DISCOURSE_DEVELOPER_EMAILS: [email protected]
-    ports:
+    expose:
       - 80
     restart: unless-stopped
 

blueprints/dockge/docker-compose.yml

@@ -8,9 +8,8 @@ services:
       - dockge_stacks:/opt/stacks
     environment:
       DOCKGE_STACKS_DIR: /opt/stacks
-    ports:
+    expose:
       - "5001"
-
 volumes:
   dockge_data:
   dockge_stacks:

blueprints/docling-serve/docker-compose.yml

@@ -2,7 +2,7 @@ services:
   docling-serve:
     image: quay.io/docling-project/docling-serve:latest
     restart: unless-stopped
-    ports:
+    expose:
       - 5001
     environment:
       - DOCLING_SERVE_ENABLE_UI=1

blueprints/docmost/docker-compose.yml

@@ -37,4 +37,4 @@ services:
 volumes:
   docmost:
   db_docmost_data:
-  redis_docmost_data:
+  redis_docmost_data:

blueprints/documenso/docker-compose.yml

@@ -43,7 +43,7 @@ services:
       - CERT_INFO_ORGANIZATIONAL_UNIT=${CERT_INFO_ORGANIZATIONAL_UNIT:-IT Department}
       - CERT_INFO_EMAIL=${CERT_INFO_EMAIL:-admin@example.com}
       - DOCUMENSO_HOST=${DOCUMENSO_HOST}
-    ports:
+    expose:
       - ${DOCUMENSO_PORT}
     entrypoint:
       - /bin/sh