feat: add Whatomate template

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

blueprints/9router/docker-compose.yml

@@ -0,0 +1,32 @@
+version: "3.8"
+
+services:
+  9router:
+    image: decolua/9router:0.5.40
+    restart: unless-stopped
+    environment:
+      DATA_DIR: /app/data
+      PORT: "20128"
+      HOSTNAME: "0.0.0.0"
+      NODE_ENV: production
+      JWT_SECRET: ${JWT_SECRET}
+      INITIAL_PASSWORD: ${INITIAL_PASSWORD}
+      API_KEY_SECRET: ${API_KEY_SECRET}
+      MACHINE_ID_SALT: ${MACHINE_ID_SALT}
+      BASE_URL: http://${ROUTER_HOST}
+      NEXT_PUBLIC_BASE_URL: http://${ROUTER_HOST}
+      HEADROOM_URL: http://headroom:8787
+      AUTH_COOKIE_SECURE: "false"
+    volumes:
+      - 9router-data:/app/data
+    depends_on:
+      - headroom
+
+  # Optional token-reduction proxy that 9Router calls through HEADROOM_URL.
+  # Shipped as a sidecar because the 9Router image does not bundle it.
+  headroom:
+    image: ghcr.io/chopratejas/headroom:0.6.7
+    restart: unless-stopped
+
+volumes:
+  9router-data:

blueprints/9router/meta.json

@@ -0,0 +1,17 @@
+{
+  "id": "9router",
+  "name": "9Router",
+  "version": "0.5.40",
+  "description": "Self-hosted AI model router that rotates requests across 40+ providers with automatic fallback, exposing an OpenAI-compatible endpoint for coding agents.",
+  "logo": "9router.png",
+  "links": {
+    "github": "https://github.com/decolua/9router",
+    "website": "https://9router.com",
+    "docs": "https://github.com/decolua/9router/blob/master/DOCKER.md"
+  },
+  "tags": [
+    "ai",
+    "proxy",
+    "developer-tools"
+  ]
+}

blueprints/9router/template.toml

@@ -0,0 +1,21 @@
+[variables]
+main_domain = "${domain}"
+jwt_secret = "${password:64}"
+initial_password = "${password:32}"
+api_key_secret = "${password:64}"
+machine_id_salt = "${password:32}"
+
+[config]
+env = [
+  "ROUTER_HOST=${main_domain}",
+  "JWT_SECRET=${jwt_secret}",
+  "INITIAL_PASSWORD=${initial_password}",
+  "API_KEY_SECRET=${api_key_secret}",
+  "MACHINE_ID_SALT=${machine_id_salt}",
+]
+mounts = []
+
+[[config.domains]]
+serviceName = "9router"
+port = 20128
+host = "${main_domain}"

blueprints/agentdvr/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 timezone = "America/New_York"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "agentdvr"
 port = 8090
@@ -11,3 +10,5 @@ host = "${main_domain}"
 
 [config.env]
 TIMEZONE = "${timezone}"
+
+[[config.mounts]]

blueprints/akaunting/template.toml

@@ -24,7 +24,6 @@ port = 80
 host = "${main_domain}"
 
 [config]
-mounts = []
 env = [
   # App
   "APP_URL=${main_domain}",
@@ -51,4 +50,5 @@ env = [
   "MYSQL_RANDOM_ROOT_PASSWORD=yes"
 ]
 
-# No custom mounts needed; volumes are already defined in compose.
+# No custom mounts needed; volumes are already defined in compose.
+[[config.mounts]]

blueprints/azuracast/template.toml

@@ -4,7 +4,6 @@ mysql_root_password = "${password:32}"
 mysql_password = "${password:16}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "azuracast"
 port = 80
@@ -28,3 +27,5 @@ NGINX_RADIO_PORTS = "8000,8010,8020,8030,8040,8050"
 PREFER_RELEASE_BUILDS = "true"
 COMPOSER_PLUGIN_MODE = "false"
 ADDITIONAL_MEDIA_SYNC_WORKER_COUNT = "0"
+
+[[config.mounts]]

blueprints/bigcapital/template.toml

@@ -72,7 +72,7 @@ s3_endpoint = ""
 s3_bucket = ""
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "webapp"
 port = 80
@@ -165,3 +165,6 @@ MYSQL_DATABASE = "${system_db_name}"
 MYSQL_USER = "${db_user}"
 MYSQL_PASSWORD = "${db_password}"
 MYSQL_ROOT_PASSWORD = "${db_root_password}"
+
+[[config.mounts]]
+

blueprints/booklore/template.toml

@@ -4,7 +4,6 @@ app_password = "${password:32}"
 db_root_password = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "booklore"
 port = 6060
@@ -21,3 +20,5 @@ MYSQL_USER = "booklore"
 MYSQL_PASSWORD = "${app_password}"
 # API Key
 MYSQL_ROOT_PASSWORD = "${db_root_password}"
+
+[[config.mounts]]

blueprints/borgitory/template.toml

@@ -2,10 +2,24 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "borgitory"
 port = 8000
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]
+name = "borgitory-data"
+mountPath = "/app/data"
+description = "Database and encryption key storage"
+
+[[config.mounts]]
+name = "borgitory-sources"
+mountPath = "/mnt/sources"
+description = "Sources to back up (read-only)"
+
+[[config.mounts]]
+name = "borgitory-repos"
+mountPath = "/mnt/repos"
+description = "Borg repositories (read-only)"

blueprints/budget-board/template.toml

@@ -3,12 +3,18 @@ main_domain = "${domain}"
 postgres_password = "${password:32}"  
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "budget-board-client" 
 port = 6253  
 host = "${main_domain}"  
 path = "/"
 
+
 [config.env]
 POSTGRES_PASSWORD = "${postgres_password}" 
+
+
+[[config.mounts]]
+source = "../files/db-data"  
+target = "/var/lib/postgresql/data"  
+type = "bind"  

blueprints/chatto/docker-compose.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   chatto:
-    image: ghcr.io/chattocorp/chatto:0.3.8
+    image: ghcr.io/chattocorp/chatto:0.4
     restart: unless-stopped
     expose:
       - "4000"

blueprints/chatto/meta.json

@@ -1,7 +1,7 @@
 {
   "id": "chatto",
   "name": "Chatto (single binary)",
-  "version": "0.3.8",
+  "version": "0.4.x",
   "description": "A fully-featured real-time chat application for teams and communities. This template deploys the single Chatto binary with embedded NATS. Note: email/password registration requires SMTP to be configured after deployment; voice/video calls are not included in the single-binary setup.",
   "logo": "logo.png",
   "links": {

blueprints/checkcle/template.toml

@@ -2,10 +2,13 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "checkcle"
 port = 8090
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]
+source = "checkcle-data"
+target = "/mnt/pb_data"

blueprints/convertx/template.toml

@@ -11,7 +11,6 @@ hide_history = "false"
 language = "en"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "convertx" 
 port = 3000
@@ -27,3 +26,8 @@ WEBROOT = "${webroot}"
 FFMPEG_ARGS = "${ffmpeg_args}"
 HIDE_HISTORY = "${hide_history}"
 LANGUAGE = "${language}"
+
+[[config.mounts]]
+source = "../files/data"
+target = "/app/data"
+type = "bind"

blueprints/cookie-cloud/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "cookiecloud"
 port = 8088
@@ -10,3 +9,6 @@ host = "${main_domain}"
 
 [config.env]
 # No environment variables required by default
+
+[[config.mounts]]
+# Data volume mount is defined in docker-compose.yml

blueprints/cup/template.toml

@@ -2,10 +2,16 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "cup"
 port = 8000
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]
+serviceName = "cup"
+source = "/var/run/docker.sock"
+target = "/var/run/docker.sock"
+type = "bind"

blueprints/directory-lister/template.toml

@@ -2,7 +2,6 @@
 app_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "directory-lister" # Must match the service name in docker-compose.yml
 port = 80
@@ -16,3 +15,5 @@ READMES_FIRST = "false"
 ZIP_DOWNLOADS = "true"
 TIMEZONE = "UTC"
 
+
+[[config.mounts]]

blueprints/docling-serve/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "docling-serve"
 port = 5001
@@ -12,3 +11,5 @@ host = "${main_domain}"
 DOCLING_SERVE_ENABLE_UI = "1"
 DOCLING_SERVE_HOST = "0.0.0.0"
 DOCLING_SERVE_PORT = "5001"
+
+[[config.mounts]]

blueprints/domain-locker/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 pg_password = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "app"
 port = 3000
@@ -27,3 +26,8 @@ DL_PG_NAME = "domain_locker"
 # DL_DOMAIN_INFO_API = ""
 # DL_DOMAIN_SUBS_API = ""
 # DL_DISABLE_WRITE_METHODS = "false"
+
+[[config.mounts]]
+# Example mount for PostgreSQL persistence (already defined in compose volumes)
+# filePath = "/var/lib/postgresql/data"
+# content = ""

blueprints/dozzle/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 docker_socket = "/var/run/docker.sock"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "dozzle"
 port = 8080
@@ -12,3 +11,8 @@ host = "${main_domain}"
 [config.env]
 DOZZLE_USERNAME = "${username}"
 DOZZLE_PASSWORD = "${password:16}"
+
+[[config.mounts]]
+source = "${docker_socket}"
+target = "/var/run/docker.sock"
+read_only = true

blueprints/dumbassets/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 default_pin = "${password:4}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "dumbassets"
 port = 3000
@@ -20,3 +19,9 @@ DEMO_MODE = "false"
 APPRISE_URL = ""
 CURRENCY_CODE = "USD"
 CURRENCY_LOCALE = "en-US"
+
+[[config.mounts]]
+serviceName = "dumbassets"
+type = "volume"
+source = "dumbassets-data"
+target = "/app/data"

blueprints/dumbbudget/template.toml

@@ -4,7 +4,6 @@ main_domain = "${domain}"
 dumbbudget_pin = "${password:16}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "dumbbudget"
 port = 3000
@@ -21,4 +20,5 @@ ALLOWED_ORIGINS = "${main_domain}"
 
 # The named volume 'dumbbudget-data' is defined in the docker-compose.yml.
 # According to Dokploy's template examples, volumes declared in the compose
-# file are automatically managed and do not require a separate entry here.
+# file are automatically managed and do not require a separate entry here.
+[[config.mounts]]

blueprints/dumbdrop/template.toml

@@ -2,7 +2,6 @@
 main_domain = "https://${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "dumbdrop"
 port = 3000
@@ -21,3 +20,5 @@ APPRISE_URL = ""
 APPRISE_MESSAGE = "New file uploaded {filename} ({size}), Storage used {storage}"
 APPRISE_SIZE_UNIT = "Auto"
 ALLOWED_EXTENSIONS = ""
+
+[[config.mounts]]

blueprints/dumbpad/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "dumbpad"
 port = 3000
@@ -18,3 +17,5 @@ LOCKOUT_TIME = "15"
 MAX_ATTEMPTS = "5"
 COOKIE_MAX_AGE = "24"
 PAGE_HISTORY_COOKIE_AGE = "365"
+
+[[config.mounts]]

blueprints/ezbookkeeping/template.toml

@@ -7,7 +7,6 @@ root_pass = "${password:32}"
 secret_key = "${password:64}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "ezbookkeeping"
 port = 8080
@@ -28,3 +27,5 @@ EBK_DATABASE_PASSWD = "${db_pass}"
 EBK_LOG_MODE = "file"
 # Security secret key used for application protection
 EBK_SECURITY_SECRET_KEY = "${secret_key}"
+
+[[config.mounts]] 

blueprints/flaresolverr/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "flaresolverr"
 port = 8191
@@ -13,3 +12,5 @@ LOG_LEVEL = "info"
 LOG_HTML = "false"
 CAPTCHA_SOLVER = "none"
 TZ = "Europe/London"
+
+[[config.mounts]]

blueprints/flatnotes-totp/template.toml

@@ -6,7 +6,6 @@ secret_key = "${password:32}"
 totp_key = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "flatnotes"
 port = 8080
@@ -23,3 +22,7 @@ FLATNOTES_SECRET_KEY = "${secret_key}"
 FLATNOTES_TOTP_KEY = "${totp_key}"
 FLATNOTES_SESSION_EXPIRY_DAYS = "30"
 FLATNOTES_PATH_PREFIX = ""
+
+[[config.mounts]]
+name = "flatnotes-data"
+mountPath = "/data"

blueprints/flatnotes/template.toml

@@ -5,7 +5,6 @@ password = "${password:16}"
 secret_key = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "flatnotes"
 port = 8080
@@ -27,3 +26,7 @@ FLATNOTES_QUICK_ACCESS_TITLE = "RECENTLY MODIFIED"
 FLATNOTES_QUICK_ACCESS_TERM = "*"
 FLATNOTES_QUICK_ACCESS_SORT = "lastModified"
 FLATNOTES_QUICK_ACCESS_LIMIT = "4"
+
+[[config.mounts]]
+name = "flatnotes-data"
+mountPath = "/data"

blueprints/flowise/template.toml

@@ -5,7 +5,6 @@ jwt_refresh_secret = "${password:32}"
 express_secret = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "flowise"
 port = 3000
@@ -15,3 +14,11 @@ host = "${main_domain}"
 JWT_AUTH_TOKEN_SECRET = "${jwt_secret}"
 JWT_REFRESH_TOKEN_SECRET = "${jwt_refresh_secret}"
 EXPRESS_SESSION_SECRET = "${express_secret}"
+
+[[config.mounts]]
+name = "flowise_data"
+mountPath = "/root/.flowise"
+
+[[config.mounts]]
+name = "redis_data"
+mountPath = "/data"

blueprints/fmd-server/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   fmd-server:
-    image: registry.gitlab.com/fmd-foss/fmd-server:v0.11.0
+    image: registry.gitlab.com/fmd-foss/fmd-server:0.16.0
     expose:
      - 8080
     environment:

blueprints/fmd-server/meta.json

@@ -1,7 +1,7 @@
 {
   "id": "fmd-server",
   "name": "FMD Server",
-  "version": "0.11.0",
+  "version": "0.16.0",
   "description": "A server to communicate with the FMD Android app, to locate and control your devices.",
   "logo": "fmd-server.svg",
   "links": {

blueprints/gitea-mysql/template.toml

@@ -4,7 +4,6 @@ db_password = "${password:24}"
 db_root_password = "${password:24}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "gitea"
 port = 3000
@@ -20,3 +19,5 @@ GITEA__database__USER = "gitea"
 GITEA__database__PASSWD = "${db_password}"
 GITEA_DB_PASSWORD = "${db_password}"
 MYSQL_ROOT_PASSWORD = "${db_root_password}"
+
+[[config.mounts]]

blueprints/gitea-postgres/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 db_password = "${password:24}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "gitea"
 port = 3000
@@ -18,3 +17,5 @@ GITEA__database__NAME = "gitea"
 GITEA__database__USER = "gitea"
 GITEA__database__PASSWD = "${db_password}"
 GITEA_DB_PASSWORD = "${db_password}"
+
+[[config.mounts]]

blueprints/gitea-sqlite/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "gitea"
 port = 3000
@@ -20,3 +19,5 @@ USER_GID = "1000"
 # GITEA__mailer__SMTP_PORT = "465"
 # GITEA__mailer__USER = "apikey"
 # GITEA__mailer__PASSWD = "${password:32}"
+
+[[config.mounts]]

blueprints/grimoire/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "grimoire"
 port = 5173
@@ -13,3 +12,5 @@ PORT = "5173"
 PUBLIC_ORIGIN = "https://${main_domain}"
 PUBLIC_HTTPS_ONLY = "true"
 PUBLIC_SIGNUP_DISABLED = "false"
+
+[[config.mounts]]

blueprints/grist/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 default_email = "${email}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "grist"
 port = 8484
@@ -11,3 +10,6 @@ host = "${main_domain}"
 
 [config.env]
 GRIST_DEFAULT_EMAIL = "${default_email}"
+
+[[config.mounts]]
+

blueprints/habitica/template.toml

@@ -6,7 +6,6 @@ mongo_admin_password = "${password}"
 mongo_habitica_password = "${password}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "client"
 port = 80
@@ -25,3 +24,9 @@ MONGO_ADMIN_PASSWORD = "${mongo_admin_password}"
 MONGO_HABITICA_USER = "habitica"
 MONGO_HABITICA_PASSWORD = "${mongo_habitica_password}"
 ADMIN_EMAIL = "no-reply@${main_domain}"
+
+[[config.mounts]]
+serviceName = "mongo"
+type = "volume"
+source = "habitica-mongo-data"
+target = "/data/db"

blueprints/hoppscotch/template.toml

@@ -4,7 +4,7 @@ db_password = "${password:32}"
 encryption_key = "${password:32}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "hoppscotch"
 port = 80
@@ -37,3 +37,5 @@ VITE_APP_PRIVACY_POLICY_LINK = "https://docs.hoppscotch.io/support/privacy"
 
 # Subpath Access
 ENABLE_SUBPATH_BASED_ACCESS = "true"
+
+[[config.mounts]]

blueprints/hortusfox/template.toml

@@ -10,7 +10,7 @@ DB_PASSWORD = "${password:20}"
 MARIADB_ROOT_PASSWORD = "${password:24}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "app"
 port = 80
@@ -24,3 +24,27 @@ DB_DATABASE = "${DB_DATABASE}"
 DB_USERNAME = "${DB_USERNAME}"
 DB_PASSWORD = "${DB_PASSWORD}"
 MARIADB_ROOT_PASSWORD = "${MARIADB_ROOT_PASSWORD}"
+
+[[config.mounts]]
+name = "app_images"
+mountPath = "/var/www/html/public/img"
+
+[[config.mounts]]
+name = "app_logs"
+mountPath = "/var/www/html/app/logs"
+
+[[config.mounts]]
+name = "app_backup"
+mountPath = "/var/www/html/public/backup"
+
+[[config.mounts]]
+name = "app_themes"
+mountPath = "/var/www/html/public/themes"
+
+[[config.mounts]]
+name = "app_migrate"
+mountPath = "/var/www/html/app/migrations"
+
+[[config.mounts]]
+name = "db_data"
+mountPath = "/var/lib/mysql"

blueprints/i18n-blog/template.toml

@@ -4,7 +4,7 @@ jwt_secret = "${password:32}" # secure default
 recovery_mode = "false"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "kuno"
 port = 80
@@ -18,3 +18,7 @@ GIN_MODE = "release"
 NODE_ENV = "production"
 JWT_SECRET = "${jwt_secret}"
 RECOVERY_MODE = "${recovery_mode}"
+
+[[config.mounts]]
+name = "kuno-data"
+mountPath = "/app/data"

blueprints/ihatemoney/template.toml

@@ -6,7 +6,6 @@ MAIL_PASSWORD = "${password:32}"
 SECRET_KEY = "${password:64}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "ihatemoney"
 port = 8000
@@ -38,3 +37,7 @@ LEGAL_LINK = ""
 PORT = "8000"
 PUID = "0"
 PGID = "0"
+
+[[config.mounts]]
+volumeName = "sqlite-db"
+mountPath = "/database"

blueprints/karakeep/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 karakeep_version = "release"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "web"
 port = 3000
@@ -107,3 +106,13 @@ host = "${main_domain}"
 # "CRAWLER_HTTP_PROXY" = ""
 # "CRAWLER_HTTPS_PROXY" = ""
 # "CRAWLER_NO_PROXY" = ""
+
+[[config.mounts]]
+# Persistent data directory for Karakeep
+volumeName = "data"
+mountPath = "/data"
+
+[[config.mounts]]
+# Meilisearch data directory
+volumeName = "meilisearch"
+mountPath = "/meili_data"

blueprints/kener/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 KENER_SECRET_KEY = "${password:64}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "kener"
 port = 3000
@@ -17,3 +16,18 @@ REDIS_URL = "redis://redis:6379"
 DATABASE_URL = "sqlite://./database/kener.sqlite.db"
 RESEND_API_KEY = ""
 RESEND_SENDER_EMAIL = ""
+
+[[config.mounts]]
+type = "volume"
+source = "data"
+target = "/app/database"
+
+[[config.mounts]]
+type = "volume"
+source = "redis_data"
+target = "/data"
+
+[[config.mounts]]
+type = "bind"
+source = "../files/uploads"
+target = "/app/uploads"

blueprints/kestra/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "kestra"
 port = 8080
@@ -10,3 +9,5 @@ host = "${main_domain}"
 
 
 [config.env]
+
+[[config.mounts]]

blueprints/keycloak/template.toml

@@ -8,7 +8,6 @@ KEYCLOAK_ADMIN_PASSWORD = "${password:32}"
 KC_HOSTNAME = "${main_domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "keycloak"
 port = 8080
@@ -21,3 +20,5 @@ POSTGRES_PASSWORD = "${POSTGRES_PASSWORD}"
 KEYCLOAK_ADMIN = "${KEYCLOAK_ADMIN}"
 KEYCLOAK_ADMIN_PASSWORD = "${KEYCLOAK_ADMIN_PASSWORD}"
 KC_HOSTNAME = "${KC_HOSTNAME}"
+
+[[config.mounts]]

blueprints/kitchenowl/template.toml

@@ -6,7 +6,7 @@ db_user = "kitchenowl"
 db_name = "kitchenowl"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "web"
 port = 8080
@@ -20,4 +20,14 @@ DB_NAME = "${db_name}"
 DB_USER = "${db_user}"
 DB_PASSWORD = "${db_password}"
 
-# Persist uploads/attachments
+# Persist uploads/attachments
+[[config.mounts]]
+serviceName = "web"
+volumeName = "kitchenowl_files"
+mountPath = "/data"
+
+# Persist Postgres data
+[[config.mounts]]
+serviceName = "db"
+volumeName = "kitchenowl_db"
+mountPath = "/var/lib/postgresql/data"

blueprints/letterfeed/template.toml

@@ -4,7 +4,7 @@ secret_key = "${password:64}"
 auth_password = "${password:32}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "frontend"
 port = 3000
@@ -28,3 +28,7 @@ LETTERFEED_AUTO_ADD_NEW_SENDERS = "false"
 LETTERFEED_SECRET_KEY = "${secret_key}"
 LETTERFEED_AUTH_USERNAME = "admin"
 LETTERFEED_AUTH_PASSWORD = "${auth_password}"
+
+[[config.mounts]]
+name = "letterfeed_data"
+mountPath = "/data"

blueprints/linkstack/template.toml

@@ -4,7 +4,6 @@ admin_email = "${email}"
 mysql_root_password = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "linkstack"
 port = 80
@@ -19,3 +18,11 @@ LOG_LEVEL = "info"
 PHP_MEMORY_LIMIT = "256M"
 UPLOAD_MAX_FILESIZE = "8M"
 MYSQL_ROOT_PASSWORD = "${mysql_root_password}"
+
+[[config.mounts]]
+volume = "linkstack-data"
+target = "/htdocs"
+
+[[config.mounts]]
+volume = "mysql-data"
+target = "/var/lib/mysql"

blueprints/litellm/template.toml

@@ -29,7 +29,6 @@ novita_api_key = ""
 infinity_api_key = ""
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "litellm"
 port = 4000
@@ -64,3 +63,5 @@ ANTHROPIC_API_KEY = "${anthropic_api_key}"
 INFISICAL_TOKEN = "${infisical_token}"
 NOVITA_API_KEY = "${novita_api_key}"
 INFINITY_API_KEY = "${infinity_api_key}"
+
+[[config.mounts]]

blueprints/memos/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "memos"
 port = 5230
@@ -12,3 +11,4 @@ host = "${main_domain}"
 [config.env]
 MEMOS_MODE = "prod"
 MEMOS_PORT = "5230"
+[[config.mounts]]

blueprints/metube/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "metube"
 port = 8081
@@ -40,3 +39,5 @@ DOWNLOAD_MODE = "limited"
 MAX_CONCURRENT_DOWNLOADS = "3" 
 LOGLEVEL = "INFO" 
 ENABLE_ACCESSLOG = "false" 
+
+[[config.mounts]]

blueprints/mixpost/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 mx_password = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "mixpost"
 port = 80
@@ -20,3 +19,5 @@ DB_DATABASE="mixpost_db"
 DB_USERNAME="mixpost_user"
 DB_PASSWORD="${mx_password}"
 
+
+[[config.mounts]]

blueprints/morphos/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "morphos-server"
 port = 8080
@@ -12,3 +11,9 @@ certResolver = "letsencrypt"
 
 [config.env]
 # No environment variables required based on provided information
+
+[[config.mounts]]
+source = "../files/morphos-upload"
+target = "/upload"
+type = "bind"
+readOnly = false

blueprints/navidrome/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "navidrome"
 port = 4533
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

blueprints/neko/template.toml

@@ -4,7 +4,6 @@ admin_password = "${password:16}"
 user_password = "${password:16}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "neko"
 port = 8080
@@ -19,3 +18,5 @@ NEKO_MEMBER_MULTIUSER_USER_PASSWORD = "${user_password}"
 NEKO_MEMBER_MULTIUSER_ADMIN_PASSWORD = "${admin_password}"
 NEKO_WEBRTC_EPR = "52000-52100"
 NEKO_WEBRTC_ICELITE = "1"
+
+[[config.mounts]]

blueprints/nocodb/template.toml

@@ -5,7 +5,6 @@ postgres_password = "${password:32}"
 postgres_db = "root_db"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "nocodb"
 port = 8080
@@ -15,3 +14,13 @@ host = "${main_domain}"
 POSTGRES_USER = "${postgres_user}"
 POSTGRES_PASSWORD = "${postgres_password}"
 POSTGRES_DB = "${postgres_db}"
+
+[[config.mounts]]
+serviceName = "nocodb"
+volumeName = "nc_data"
+mountPath = "/usr/app/data"
+
+[[config.mounts]]
+serviceName = "root_db"
+volumeName = "db_data"
+mountPath = "/var/lib/postgresql/data"

blueprints/omni-tools/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "omni-tools"
 port = 80
@@ -11,3 +10,5 @@ host = "${main_domain}"
 [config.env]
 # API Key
 LOCIZE_API_KEY = ""
+
+[[config.mounts]]

blueprints/open-webui/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 webui_secret_key = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "open-webui"
 port = 8080
@@ -13,3 +12,17 @@ host = "${main_domain}"
 # Secret key for signing JWTs for authentication.
 # A random key is generated by default.
 webui_secret_key = "${webui_secret_key}" # API Key
+
+[[config.mounts]]
+serviceName = "open-webui"
+type = "volume"
+source = "open-webui"
+target = "/app/backend/data"
+
+# Mount for the optional 'ollama' service.
+# This will be used if you uncomment the 'ollama' service in the docker-compose file.
+[[config.mounts]]
+serviceName = "ollama"
+type = "volume"
+source = "ollama"
+target = "/root/.ollama"

blueprints/opengist/template.toml

@@ -3,7 +3,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "opengist"
 port = 6157
@@ -13,3 +12,7 @@ host = "${main_domain}"
 UID = "1001"
 GID = "1001"
 OG_LOG_LEVEL = "info"
+
+[[config.mounts]]
+# This template uses a named volume defined in the docker-compose.yml,
+# so no file mounts need to be configured here.

blueprints/openinary/template.toml

@@ -7,7 +7,6 @@ allowed_origin = "http://${main_domain}"
 next_public_api_base_url = "/api"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "openinary"
 port = 3000
@@ -19,3 +18,23 @@ BETTER_AUTH_SECRET = "${better_auth_secret}"
 BETTER_AUTH_URL = "${better_auth_url}"
 ALLOWED_ORIGIN = "${allowed_origin}"
 NEXT_PUBLIC_API_BASE_URL = "${next_public_api_base_url}"
+
+[[config.mounts]]
+serviceName = "openinary"
+volumeName = "cache-data"
+mountPath = "/app/apps/api/cache"
+
+[[config.mounts]]
+serviceName = "openinary"
+volumeName = "public-files"
+mountPath = "/app/apps/api/public"
+
+[[config.mounts]]
+serviceName = "openinary"
+volumeName = "db-data"
+mountPath = "/app/data"
+
+[[config.mounts]]
+serviceName = "openinary"
+volumeName = "db-data"
+mountPath = "/app/web-standalone/data"

blueprints/openspeedtest/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "openspeedtest"
 port = 3000
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

blueprints/owncast/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "owncast"
 port = 8080
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

blueprints/palmr/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "palmr"
 port = 5487
@@ -10,3 +9,5 @@ host = "${main_domain}"
 
 [config.env]
 ENCRYPTION_KEY = ""
+
+[[config.mounts]] 

blueprints/passbolt/template.toml

@@ -7,7 +7,6 @@ email_user = "noreply@example.com"
 email_pass = "${password:16}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "passbolt"
 port = 80
@@ -28,3 +27,15 @@ PASSBOLT_EMAIL_PORT = "587"
 PASSBOLT_EMAIL_USER = "${email_user}"
 PASSBOLT_EMAIL_PASS = "${email_pass}"
 PASSBOLT_EMAIL_TLS = "true"
+
+[[config.mounts]]
+volume = "gpg_volume"
+target = "/etc/passbolt/gpg"
+
+[[config.mounts]]
+volume = "jwt_volume"
+target = "/etc/passbolt/jwt"
+
+[[config.mounts]]
+volume = "passbolt_mariadb_data"
+target = "/var/lib/mysql"

blueprints/paymenter/template.toml

@@ -5,7 +5,6 @@ mysql_password = "${password:16}"
 mysql_root_password = "${password:20}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "paymenter"
 port = 80
@@ -19,3 +18,5 @@ MYSQL_PASSWORD = "${mysql_password}"
 MYSQL_ROOT_PASSWORD = "${mysql_root_password}"
 MYSQL_DATABASE = "paymenter"
 MYSQL_USER = "paymenter"
+
+[[config.mounts]]

blueprints/penpot/docker-compose.yml

@@ -180,4 +180,5 @@ services:
     restart: always
     expose:
       - '1025'
-      - '1080'
+    expose:
+      - 1080

blueprints/picsur/template.toml

@@ -5,7 +5,7 @@ admin_password = "${password:32}"
 jwt_secret = "${jwt:jwt_secret}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "picsur"
 port = 8080
@@ -16,3 +16,8 @@ host = "${main_domain}"
 "PICSUR_ADMIN_PASSWORD" = "${admin_password}"
 "PICSUR_JWT_SECRET" = "${jwt_secret}"
 "POSTGRES_PASSWORD" = "${postgres_password}"
+
+[[config.mounts]]
+name = "picsur-data"
+serviceName = "picsur_postgres"
+mountPath = "/var/lib/postgresql/data"

blueprints/plark/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "plark"
 port = 80
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

blueprints/pocketbase/template.toml

@@ -4,7 +4,6 @@ admin_email = "${email}"
 admin_password = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "pocketbase"
 port = 8090
@@ -13,3 +12,7 @@ host = "${main_domain}"
 [config.env]
 ADMIN_EMAIL = "${admin_email}"
 ADMIN_PASSWORD = "${admin_password}"
+
+[[config.mounts]]
+name = "pocketbase-data"
+mountPath = "/pocketbase"

blueprints/portainer/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "portainer"
 port = 9000
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

blueprints/rote/template.toml

@@ -5,7 +5,6 @@ postgres_password = "${password:32}"
 image_tag = "latest"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "rote-frontend"
 port = 80
@@ -20,3 +19,5 @@ host = "${backend_domain}"
 POSTGRES_PASSWORD = "${postgres_password}"
 IMAGE_TAG = "${image_tag}"
 VITE_API_BASE = "http://${backend_domain}"
+
+[[config.mounts]]

blueprints/rss-bridge/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "rss-bridge"
 port = 80
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

blueprints/rustdesk/docker-compose.yml

@@ -1,4 +1,3 @@
-# dokploy: allow-host-ports — RustDesk relay/rendezvous protocol ports (21115-21119) must be host-published; Traefik cannot route raw TCP/UDP.
 services:
   hbbs:
     image: rustdesk/rustdesk-server:latest

blueprints/rustdesk/template.toml

@@ -3,10 +3,12 @@ server_domain = "${domain}"
 encryption_key = "${password:32}"
 
 [config]
-mounts = []
+
 [config.env]
 RELAY_HOST = "${server_domain}"
 RUSTDESK_RELAY_SERVER = "${server_domain}:21117"
 RUSTDESK_API_SERVER = "http://${server_domain}:21118"
 RUSTDESK_ID_SERVER = "${server_domain}:21116"
 ENCRYPTION_KEY = "${encryption_key}"
+
+[[config.mounts]]

blueprints/rutorrent/template.toml

@@ -6,7 +6,6 @@ incoming_port = "${INCOMING_PORT:-50000}"
 dht_port      = "${DHT_PORT:-6881}"
 
 [config]
-mounts = []
 # Dokploy will route this domain to the container's internal port 8080
 [[config.domains]]
 serviceName = "rutorrent"
@@ -18,3 +17,18 @@ PUID = "${puid}"
 PGID = "${pgid}"
 INCOMING_PORT = "${incoming_port}"
 DHT_PORT      = "${dht_port}"
+
+[[config.mounts]]
+type   = "volume"
+source = "rutorrent-data"
+target = "/data"
+
+[[config.mounts]]
+type   = "volume"
+source = "rutorrent-downloads"
+target = "/downloads"
+
+[[config.mounts]]
+type   = "volume"
+source = "rutorrent-passwd"
+target = "/passwd"

blueprints/senddock/docker-compose.yml

@@ -27,7 +27,7 @@ services:
       retries: 5
 
   senddock:
-    image: ghcr.io/arkhe-systems/senddock:0.6.5.1
+    image: ghcr.io/arkhe-systems/senddock:latest
     restart: unless-stopped
     depends_on:
       postgres:
@@ -40,8 +40,6 @@ services:
       - JWT_SECRET=${JWT_SECRET}
       - PUBLIC_URL=${PUBLIC_URL}
       - FRONTEND_URL=${PUBLIC_URL}
-      - DEPLOYMENT_MODE=self-hosted
-      - SENDDOCK_LICENSE_KEY=${SENDDOCK_LICENSE_KEY}
       - PORT=8080
     expose:
       - 8080

blueprints/senddock/meta.json

@@ -1,7 +1,7 @@
 {
   "id": "senddock",
   "name": "SendDock",
-  "version": "0.6.5.1",
+  "version": "0.8.0",
   "description": "Open-source, self-hosted email marketing platform with BYO SMTP. Manage subscribers, templates, broadcasts, and scheduled campaigns from one place.",
   "logo": "senddock.svg",
   "links": {

blueprints/senddock/template.toml

@@ -7,8 +7,7 @@ jwt_secret = "${password:64}"
 env = [
   "POSTGRES_PASSWORD=${postgres_password}",
   "JWT_SECRET=${jwt_secret}",
-  "PUBLIC_URL=https://${main_domain}",
-  "SENDDOCK_LICENSE_KEY="
+  "PUBLIC_URL=https://${main_domain}"
 ]
 
 [[config.domains]]

blueprints/silverbullet/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 sb_user = "admin:${password:16}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "silverbullet"
 port = 3000
@@ -11,3 +10,7 @@ host = "${main_domain}"
 
 [config.env]
 SB_USER = "${sb_user}"
+
+[[config.mounts]]
+name = "silverbullet-space"
+mountPath = "/space"

blueprints/statping-ng/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "statping-ng"
 port = 8080
@@ -11,3 +10,7 @@ host = "${main_domain}"
 [config.env]
 TZ = "UTC"
 DB_CONN = "sqlite"
+
+[[config.mounts]]
+source = "../files/statping-ng"
+target = "/app"

blueprints/storyden/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "storyden"
 port = 8000
@@ -10,3 +9,5 @@ host = "${main_domain}"
 
 [config.env]
 STORYDEN_FQDN = "http://${main_domain}"
+
+[[config.mounts]]

blueprints/streamflow/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 session_secret = "${password:64}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "streamflow"
 port = 7575
@@ -12,3 +11,5 @@ host = "${main_domain}"
 [config.env]
 SESSION_SECRET = "${session_secret}"
 TIMEZONE = "Asia/Jakarta"
+
+[[config.mounts]]

blueprints/surrealdb/template.toml

@@ -4,7 +4,6 @@ surrealdb_user = "${username}"
 surrealdb_password = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "surrealdb"
 port = 8000
@@ -13,3 +12,8 @@ host = "${main_domain}"
 [config.env]
 SURREAL_USER = "${surrealdb_user}"
 SURREAL_PASS = "${surrealdb_password}"
+
+[[config.mounts]]
+serviceName = "surrealdb"
+volumeName = "db_data"
+mountPath = "/usr/app/data"

blueprints/tianji/template.toml

@@ -4,8 +4,13 @@ main_domain = "${domain}"
 jwt_secret = "${password:32}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "tianji"
 port = 12345
 host = "${main_domain}"
+
+[[config.mounts]]
+serviceName = "postgres"
+type = "volume"
+source = "tianji-db-data"
+target = "/var/lib/postgresql/data"

blueprints/tor-browser/template.toml

@@ -6,7 +6,6 @@ keep_app_running = "1"
 timezone = "Europe/Vienna"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "tor"
 port = 5800
@@ -17,3 +16,5 @@ DISPLAY_WIDTH = "${display_width}"
 DISPLAY_HEIGHT = "${display_height}"
 KEEP_APP_RUNNING = "${keep_app_running}"
 TZ = "${timezone}"
+
+[[config.mounts]]

blueprints/upsnap/template.toml

@@ -3,7 +3,7 @@ main_domain = "${domain}"
 upsnap_password = "${password:32}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "upsnap"
 port = 8090
@@ -17,3 +17,7 @@ UPSNAP_SCAN_RANGE = "192.168.1.0/24"
 UPSNAP_SCAN_TIMEOUT = "500ms"
 UPSNAP_PING_PRIVILEGED = "true"
 UPSNAP_WEBSITE_TITLE = "Upsnap Network Monitor"
+
+[[config.mounts]]
+source = "upsnap-data"
+target = "/app/pb_data"

blueprints/vikunja/template.toml

@@ -4,7 +4,6 @@ db_password = "${password:32}"
 jwt_secret = "${jwt:db_password}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "vikunja"
 port = 3456
@@ -18,3 +17,13 @@ VIKUNJA_DATABASE_TYPE = "postgres"
 VIKUNJA_DATABASE_USER = "vikunja"
 VIKUNJA_DATABASE_DATABASE = "vikunja"
 VIKUNJA_SERVICE_JWTSECRET = "${jwt_secret}"
+
+[[config.mounts]]
+serviceName = "vikunja"
+volumeName = "vikunja-files"
+mountPath = "/app/vikunja/files"
+
+[[config.mounts]]
+serviceName = "db"
+volumeName = "vikunja-db"
+mountPath = "/var/lib/postgresql/data"

blueprints/wanderer/template.toml

@@ -6,7 +6,7 @@ upload_user = "${username}"
 upload_password = "${password:16}"
 
 [config]
-mounts = []
+
 [[config.domains]]
 serviceName = "web"
 port = 3000
@@ -28,3 +28,19 @@ POCKETBASE_ENCRYPTION_KEY = "${pocketbase_key}"
 UPLOAD_USER = "${upload_user}"
 UPLOAD_PASSWORD = "${upload_password}"
 ORIGIN = "http://${main_domain}"
+
+
+[[config.mounts]]
+serviceName = "search"
+volumeName = "search-data"
+mountPath = "/meili_data/data.ms"
+
+[[config.mounts]]
+serviceName = "db"
+volumeName = "db-data"
+mountPath = "/pb_data"
+
+[[config.mounts]]
+serviceName = "web"
+volumeName = "uploads"
+mountPath = "/app/uploads"

blueprints/web-check/template.toml

@@ -2,7 +2,6 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "web-check"
 port = 3000
@@ -28,3 +27,5 @@ API_TIMEOUT_LIMIT = "10000"
 API_CORS_ORIGIN = "*"            
 API_ENABLE_RATE_LIMIT = "true"    
 ENABLE_ANALYTICS = "false"       
+
+[[config.mounts]]

blueprints/whatomate/docker-compose.yml

@@ -0,0 +1,46 @@
+services:
+  whatomate:
+    image: shridh0r/whatomate:0.1.1-beta-0.16.1
+    restart: unless-stopped
+    depends_on:
+      db:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    environment:
+      - TZ=Etc/UTC
+    volumes:
+      - ../files/config.toml:/app/config.toml:ro
+      - whatomate-uploads:/app/uploads
+    command: ["server", "-migrate", "-config", "/app/config.toml"]
+
+  db:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      - POSTGRES_USER=whatomate
+      - POSTGRES_PASSWORD=whatomate
+      - POSTGRES_DB=whatomate
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U whatomate -d whatomate"]
+      interval: 10s
+      timeout: 5s
+      retries: 6
+    volumes:
+      - whatomate-postgres-data:/var/lib/postgresql/data
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    volumes:
+      - whatomate-redis-data:/data
+
+volumes:
+  whatomate-uploads:
+  whatomate-postgres-data:
+  whatomate-redis-data:

blueprints/whatomate/instructions.md

@@ -0,0 +1,14 @@
+# Whatomate
+
+## Getting started
+
+1. Deploy the template and open the app domain.
+2. Log in with the default admin credentials: **admin@admin.com** / **admin**. Change the password right after the first login.
+3. Connect your WhatsApp Business account: go to **Settings → WhatsApp Accounts** and add your Meta Cloud API credentials (phone number ID, access token). See the [configuration docs](https://shridarpatil.github.io/whatomate/getting-started/configuration/).
+4. Point your Meta webhook to `https://<your-domain>/webhook` and use the `webhook_verify_token` from the generated `config.toml` mount (Dokploy → your service → Advanced → Mounts).
+
+## Notes
+
+- The full application configuration lives in the `config.toml` file mount (JWT secret, encryption key and webhook verify token are auto-generated per deployment). Edit it and redeploy to change settings.
+- Uploads are persisted in the `whatomate-uploads` volume; PostgreSQL and Redis data in `whatomate-postgres-data` and `whatomate-redis-data`.
+- Voice calling / IVR requires extra WebRTC configuration (UDP ports, public IP or TURN server). See the [calling docs](https://shridarpatil.github.io/whatomate/features/calling/).

blueprints/whatomate/meta.json

@@ -0,0 +1,17 @@
+{
+  "id": "whatomate",
+  "name": "Whatomate",
+  "version": "0.1.1-beta-0.16.1",
+  "description": "Modern, open-source WhatsApp Business Platform with real-time chat, chatbot automation, bulk campaigns, template management, and voice calling via Meta's Cloud API.",
+  "logo": "whatomate.svg",
+  "links": {
+    "github": "https://github.com/shridarpatil/whatomate",
+    "website": "https://whatomate.io/",
+    "docs": "https://shridarpatil.github.io/whatomate/"
+  },
+  "tags": [
+    "communication",
+    "automation",
+    "crm"
+  ]
+}

blueprints/whatomate/template.toml

@@ -0,0 +1,67 @@
+[variables]
+main_domain = "${domain}"
+jwt_secret = "${password:64}"
+encryption_key = "${password:32}"
+webhook_verify_token = "${password:32}"
+
+[config]
+[[config.domains]]
+serviceName = "whatomate"
+port = 8_080
+host = "${main_domain}"
+
+[[config.mounts]]
+filePath = "config.toml"
+content = """
+[app]
+name = "Whatomate"
+environment = "staging"
+debug = false
+encryption_key = "${encryption_key}"
+
+[server]
+host = "0.0.0.0"
+port = 8080
+read_timeout = 30
+write_timeout = 30
+base_path = ""
+allowed_origins = ""
+
+[database]
+host = "db"
+port = 5432
+user = "whatomate"
+password = "whatomate"
+name = "whatomate"
+ssl_mode = "disable"
+max_open_conns = 25
+max_idle_conns = 5
+conn_max_lifetime = 300
+
+[redis]
+host = "redis"
+port = 6379
+username = ""
+password = ""
+db = 0
+tls = false
+
+[jwt]
+secret = "${jwt_secret}"
+access_expiry_mins = 15
+refresh_expiry_days = 1
+
+[storage]
+type = "local"
+local_path = "./uploads"
+
+[whatsapp]
+webhook_verify_token = "${webhook_verify_token}"
+api_version = "v24.0"
+base_url = "https://graph.facebook.com"
+
+[default_admin]
+email = "admin@admin.com"
+password = "admin"
+full_name = "Admin"
+"""

blueprints/whatomate/whatomate.svg

@@ -0,0 +1,5 @@
+<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <circle cx="20" cy="20" r="18" fill="#25D366"/>
+  <path d="M20 8C13.373 8 8 13.373 8 20C8 22.385 8.632 24.615 9.745 26.545L8 32L13.655 30.295C15.515 31.295 17.685 31.87 20 31.87C26.627 31.87 32 26.497 32 19.87C32 13.373 26.627 8 20 8Z" fill="white"/>
+  <path d="M26.5 23.5C26.2 24.5 24.8 25.3 23.7 25.5C22.9 25.6 21.9 25.7 18.5 24.3C14.3 22.5 11.6 18.2 11.4 17.9C11.2 17.6 9.5 15.4 9.5 13.1C9.5 10.8 10.7 9.7 11.2 9.2C11.6 8.8 12.2 8.6 12.7 8.6C12.9 8.6 13.1 8.6 13.2 8.6C13.7 8.6 14 8.7 14.3 9.4C14.7 10.3 15.5 12.6 15.6 12.8C15.7 13 15.8 13.3 15.6 13.6C15.5 13.9 15.4 14.1 15.2 14.3C15 14.5 14.8 14.8 14.6 15C14.4 15.2 14.2 15.4 14.4 15.8C14.6 16.2 15.4 17.5 16.6 18.6C18.1 19.9 19.4 20.4 19.9 20.6C20.4 20.8 20.7 20.8 21 20.5C21.3 20.2 22 19.4 22.3 19C22.6 18.6 23 18.5 23.4 18.7C23.8 18.8 26.1 19.9 26.5 20.1C26.9 20.3 27.2 20.4 27.3 20.6C27.4 20.9 27.4 21.8 26.5 23.5Z" fill="#25D366"/>
+</svg>

blueprints/yamtrack/template.toml

@@ -3,7 +3,6 @@ main_domain = "${domain}"
 SECRET = "${password:64}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "yamtrack"
 port = 8000
@@ -13,3 +12,8 @@ host = "${main_domain}"
 SECRET = "${SECRET}"
 TZ = "Europe/Berlin"
 REDIS_URL = "redis://redis:6379"
+
+[[config.mounts]]
+serviceName = "yamtrack"
+volumeName = "yamtrack-db"
+mountPath = "/yamtrack/db"

blueprints/yt-dlp-webui/template.toml

@@ -2,10 +2,11 @@
 main_domain = "${domain}"
 
 [config]
-mounts = []
 [[config.domains]]
 serviceName = "yt-dlp-webui"
 port = 3033
 host = "${main_domain}"
 
 [config.env]
+
+[[config.mounts]]

build-scripts/validate-docker-compose.ts

@@ -25,7 +25,6 @@ interface ValidationResult {
 type LogLevel = "info" | "success" | "warning" | "error" | "debug";
 
 class DockerComposeValidator {
-	private allowHostPorts = false;
 	private options: Required<DockerComposeValidatorOptions>;
 	private errors: string[] = [];
 	private warnings: string[] = [];
@@ -74,9 +73,6 @@ class DockerComposeValidator {
 			}
 
 			const content = fs.readFileSync(composePath, "utf8");
-			// Opt-out marker for templates whose protocols require host-published ports
-			// (mail/SMTP, game servers, streaming, VPN, remote-desktop relays...).
-			this.allowHostPorts = /^#\s*dokploy:\s*allow-host-ports\b/m.test(content);
 			const compose = yaml.parse(content) as ComposeSpecification;
 
 			if (!compose || typeof compose !== "object") {
@@ -176,25 +172,13 @@ class DockerComposeValidator {
 					if (typeof port === "string") {
 						// Check for port mapping format (e.g., "3000:3000" or "8080:80")
 						if (/^\d+:\d+/.test(port)) {
-							if (this.allowHostPorts) {
-								this.warning(
-									`Service '${serviceName}': ports[${index}] publishes host port '${port}' (allowed by '# dokploy: allow-host-ports' marker)`
-								);
-							} else {
-								this.error(
-									`Service '${serviceName}': ports[${index}] uses port mapping format '${port}'. According to README, use only port number (e.g., '3000') instead of '3000:3000'. Dokploy handles port routing.`
-								);
-							}
+							this.error(
+								`Service '${serviceName}': ports[${index}] uses port mapping format '${port}'. According to README, use only port number (e.g., '3000') instead of '3000:3000'. Dokploy handles port routing.`
+							);
 						}
 					} else if (typeof port === "object" && port !== null) {
 						// Check for published port mapping
 						if (port.published && port.target) {
-							if (this.allowHostPorts) {
-								this.warning(
-									`Service '${serviceName}': ports[${index}] publishes host port (allowed by '# dokploy: allow-host-ports' marker)`
-								);
-								return;
-							}
 							this.error(
 								`Service '${serviceName}': ports[${index}] uses port mapping (published: ${port.published}, target: ${port.target}). According to README, use only port number. Dokploy handles port routing.`
 							);