feat(grocy): add Grocy

README.md

@@ -26,7 +26,9 @@ under the same user permissions as yourself, from within your own `$HOME`.
 > [!NOTE]
 > It is recommended to create another user specifically for running these
 > containers, but it is not strictly required. Details for setting up a system
-> from scratch are located in [AlmaLinux.md](./AlmaLinux.md).
+> from scratch are located in [AlmaLinux.md](./AlmaLinux.md) or
+> [Ubuntu.md](./Ubuntu.md
+)
 
 ## Getting started
 
@@ -140,75 +142,76 @@ Navigate to `http://localhost:9000` in your browser.
 
 I'm working on new quadlets every day. This is a list of all of the containers
 that I intend to add to this repository. It is still growing, and I welcome
-[pull requests](https://github.com/redbeardymcgee/podbox/pulls).
+[pull requests](https://git.mcgee.red/redbeardymcgee/podbox/pulls).
 
 - [x] [Actual](https://actualbudget.github.io/docs/)
 - [x] [AdGuard](https://adguard.com)
-- [ ] [Apprise](https://github.com/caronc/apprise)
+- [x] [Apprise](https://github.com/caronc/apprise)
 - [ ] [ArgoCD](https://github.com/argoproj/argo-cd)
 - [x] [Audiobookshelf](https://www.audiobookshelf.org/)
 - [ ] [Authelia](https://www.authelia.com/)
 - [ ] [Authentik](https://goauthentik.io/)
-- [ ] [betanin](https://github.com/sentriz/betanin)
+- [x] [betanin](https://github.com/sentriz/betanin)
-- [ ] [Bigcapital](https://bigcapital.app/)
-- [ ] [Bitwarden](https://bitwarden.com/)
 - [x] [Blinko](https://blinko.mintlify.app/introduction)
 - [x] [booktree](https://github.com/myxdvz/booktree)
 - [x] [Caddy](https://caddyserver.com) # Socket activation requires newer `caddy` and `podman`
 - [x] [Calibre](https://github.com/linuxserver/docker-calibre)
 - [x] [Calibre-web](https://github.com/janeczku/calibre-web)
 - [x] [ChartDB](https://chartdb.io/)
-- [ ] [Checkmate](https://github.com/bluewave-labs/checkmate)
+- [x] [Checkmate](https://github.com/bluewave-labs/checkmate)
-- [ ] [Code::Stats](https://codestats.net/)
 - [x] [dash.](https://getdashdot.com/)
 - [x] [Dashy](https://dashy.to)
-- [ ] [Dittofeed](https://www.dittofeed.com)
 - [ ] [Duplicacy](https://duplicacy.com/)
 - [ ] [Duplicati](https://duplicati.com/)
-- [ ] [EmulatorJS](https://emulatorjs.org/)
 - [x] [Filebrowser](https://filebrowser.org/)
+- [x] [Filestash](https://filestash.app)
 - [x] [FiveFilters](https://www.fivefilters.org/)
+- [x] [Forgejo](https://forgejo.org)
 - [x] [Foundry VTT](https://foundryvtt.com)
 - [x] [FreshRSS](https://www.freshrss.org/)
-- [ ] [Gaseous](https://github.com/gaseous-project/gaseous-server)
+- [x] [Gaseous](https://github.com/gaseous-project/gaseous-server)
+- [x] [Glance](https://github.com/glanceapp/glance)
 - [x] [Glances](https://nicolargo.github.io/glances/)
-- [ ] [glueforward](https://github.com/GeoffreyCoulaud/glueforward)
+- [x] [glueforward](https://github.com/GeoffreyCoulaud/glueforward)
 - [x] [gluetun](https://github.com/qdm12/gluetun)
-- [ ] [Graphite](https://graphiteapp.org/)
+- [x] [Graphite](https://graphiteapp.org/)
-- [ ] [Healthchecks](https://healthchecks.io/)
+- [x] [Graylog](https://graylog.org)
+- [x] [Healthchecks](https://healthchecks.io/)
 - [x] [hoarder](https://hoarder.app/)
 - [x] [Homarr](https://homarr.dev/)
-- [ ] [Homepage](https://gethomepage.dev/)
+- [x] [Homepage](https://gethomepage.dev/)
 - [ ] [Immich](https://immich.app/)
 - [x] [IT-Tools](https://it-tools.tech/)
 - [x] [Joplin](https://joplinapp.org/)
 - [x] [Kavita](https://kavitareader.com)
 - [ ] [Keycloak](https://www.keycloak.org)
 - [x] [Kibitzr](https://kibitzr.github.io/)
-- [ ] [Komga](https://komga.org/)
+- [x] [Komga](https://komga.org/)
-- [ ] [LazyLibrarian](https://lazylibrarian.gitlab.io/)
+- [x] [LazyLibrarian](https://lazylibrarian.gitlab.io/)
+- [x] [Leantime](https://leantime.io)
+- [x] [LibreNMS](https://librenms.org)
 - [x] [librespeed](https://librespeed.org)
 - [x] [Linkwarden](https://linkwarden.app/)
 - [x] [Lounge](https://thelounge.chat)
 - [x] [Matrix](https://matrix.org/)
-- [ ] [Maxun](https://github.com/getmaxun/maxun)
+- [x] [Maxun](https://github.com/getmaxun/maxun)
 - [x] [Mealie](https://mealie.io/)
 - [x] [Memos](https://usememos.com)
-- [ ] [Miniflux](https://miniflux.app/)
+- [x] [Miniflux](https://miniflux.app/)
 - [x] [MinIO](https://min.io)
-- [ ] [n8n](https://n8n.io/)
+- [x] [n8n](https://n8n.io/)
 - [x] [Nebula](https://github.com/slackhq/nebula)
 - [ ] [Netbird](https://netbird.io/)
 - [x] [netboot.xyz](https://netboot.xyz)
 - [x] [Netdata](https://www.netdata.cloud/)
 - [ ] [Note Mark](https://github.com/enchant97/note-mark)
 - [ ] [Notesnook](https://github.com/streetwriters/notesnook-sync-server)
-- [ ] [ntop](https://www.ntop.org/)
+- [x] [OpenObserve](https://openobserve.ai)
-- [ ] [OpenNMS](https://www.opennms.org/)
+- [x] [OpenSpeedTest](https://openspeedtest.com)
-- [ ] [PiHole](https://pi-hole.net/)
+- [x] [PiHole](https://pi-hole.net/)
-- [ ] [Pocket ID](https://github.com/stonith404/pocket-id)
+- [x] [Pocket ID](https://github.com/stonith404/pocket-id)
 - [ ] [Pod Arcade](https://www.pod-arcade.com/)
-- [ ] [Postiz](https://postiz.com/)
+- [x] [Postiz](https://postiz.com/)
 - [x] [Prometheus](https://prometheus.io)
 - [x] [protonmail-bridge-docker](https://github.com/shenxn/protonmail-bridge-docker)
 - [x] [Prowlarr](https://prowlarr.com)
@@ -216,21 +219,23 @@ that I intend to add to this repository. It is still growing, and I welcome
 - [x] [qBittorrent](https://qbittorrent.org)
 - [x] [qbittorrent-port-forward-gluetun-server](https://github.com/mjmeli/qbittorrent-port-forward-gluetun-server)
 - [x] [Radarr](https://radarr.video)
-- [ ] [RomM](https://romm.app/)
+- [x] [RomM](https://romm.app/)
 - [ ] [Seafile](https://www.seafile.com)
 - [ ] [Shiori](https://github.com/go-shiori/shiori)
 - [ ] [SimpleX](https://simplex.chat/)
 - [x] [Snowflake](https://snowflake.torproject.org/)
 - [ ] [solidtime](https://docs.solidtime.io/self-hosting/intro)
 - [x] [Sonarr](https://sonarr.tv)
+- [x] [Speedtest Tracker](https://speedtest-tracker.dev)
 - [x] [Stirling PDF](https://stirlingpdf.io)
-- [ ] [Supervisord](http://supervisord.org/)
+- [x] [syslog-ng](https://syslog-ng.github.io/)
 - [x] [Tandoor](https://github.com/TandoorRecipes/recipes)
 - [x] [traggo](https://traggo.net)
+- [x] [Termix](https://github.com/LukeGus/Termix)
 - [ ] [Ubooquity](https://vaemendis.net/ubooquity/)
 - [ ] [Umami](https://umami.is/)
 - [ ] [UrBackup](https://urbackup.org)
-- [ ] [Vikunja](https://vikunja.io)
+- [x] [Vikunja](https://vikunja.io)
 - [ ] [Wazuh](https://wazuh.com/)
 - [ ] [wiki.js](https://js.wiki)
 - [ ] [wger](https://wger.de/)

Ubuntu.md

@@ -137,3 +137,42 @@ podman system migrate
 systemctl --user enable --now podman-auto-update
 exit
 ```
+
+## Podman fails autostart
+
+In Podman < 5.3 containers may fail to autostart because user level units cannot depend on system level units (in this case `network-online.target`)
+
+Podman >= 5.3 should ship with a workaround user unit that can be used `podman-user-wait-network-online.service`, use that instead of the fix below.  
+
+See [this github issue](https://github.com/containers/podman/issues/22197) for workarounds, the workaround below is what worked for me. The google.com ping can be replaced with your preferred (reachable) ip/host
+
+To fix this, create the following
+
+```bash
+# ~/.config/systemd/user/network-online.service
+[Unit]
+Description=User-level proxy to system-level network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=sh -c 'until ping -c 1 google.com; do sleep 5; done'
+
+[Install]
+WantedBy=default.target
+```
+```bash
+# ~/.config/systemd/user/network-online.target
+[Unit]
+Description=User-level network-online.target
+Requires=network-online.service
+Wants=network-online.service
+After=network-online.service
+```
+Then enable the service `systemctl --user enable network-online.service`
+
+In quadlets add the following:
+
+```bash
+[Unit]
+After=network-online.target
+```

quadlets/README.md

@@ -1,3 +1,3 @@
-# Quadlets
+## Quadlets
 
 Quadlets go in `~/.config/containers/systemd`.

quadlets/actual/actual.container

@@ -1,5 +1,5 @@
 [Unit]
-Description=Budget management
+Description=Actual budget management
 
 
 [Service]
@@ -12,6 +12,8 @@ WantedBy=default.target
 [Container]
 Image=docker.io/actualbudget/actual-server:latest
 ContainerName=actual
+
+Network=actual.network
 HostName=actual
 
 Volume=actual-data:/data

quadlets/actual/actual.network

@@ -0,0 +1 @@
+[Network]

quadlets/adguard/adguard.container

@@ -11,8 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/adguard/adguardhome:latest
 ContainerName=adguard
-HostName=adguard
 
+Network=adguard.network
+HostName=adguard
 PublishPort=53:53/tcp
 PublishPort=53:53/udp
 PublishPort=784:784/udp
@@ -21,6 +22,6 @@ PublishPort=3000:3000/tcp
 PublishPort=8844:80/tcp
 PublishPort=8443:443/tcp
 
-Volume=adguard-config:/opt/adguardhome/work:z
+Volume=adguard-config:/opt/adguardhome/work
-Volume=adguard-work:/opt/adguardhome/conf:z
+Volume=adguard-work:/opt/adguardhome/conf
-Volume=/var/log/AdGuardHome.log:/var/log/AdGuardHome.log:z
+Volume=/var/log/AdGuardHome.log:/var/log/AdGuardHome.log

quadlets/adguard/adguard.network

@@ -0,0 +1 @@
+[Network]

quadlets/apprise/apprise.container

@@ -0,0 +1,25 @@
+[Unit]
+Description=Apprise API
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/caronc/apprise:latest
+ContainerName=apprise
+AutoUpdate=registry
+
+Network=apprise.network
+HostName=apprise
+PublishPort=8000:8000
+
+Volume=apprise-config:/config
+Volume=apprise-plugin:/plugin
+Volume=apprise-attahc:/attahc
+
+Environment=APPRISE_STATEFUL_MODE=simple
+Environment=APPRISE_WORKER_COUNT=1

quadlets/apprise/apprise.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Apprise network
+
+[Network]
+NetworkName=apprise
+

quadlets/apprise/apprise.volume

@@ -0,0 +1,5 @@
+[Volume]
+VolumeName=apprise-config
+VolumeName=apprise-plugin
+VolumeName=apprise-attach
+

quadlets/audiobookshelf/audiobookshelf.container

@@ -11,13 +11,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/advplyr/audiobookshelf:latest
 ContainerName=audiobookshelf
-HostName=audiobookshelf
 
+Network=audiobookshelf.network
+HostName=audiobookshelf
 PublishPort=13378:80
 
-Volume=audiobookshelf-config:/metadata:z
+Volume=audiobookshelf-config:/metadata
-Volume=audiobookshelf-metadata:/config:z
+Volume=audiobookshelf-metadata:/config
-Volume=audiobookshelf-audiobooks:/audiobooks:z
+Volume=audiobookshelf-audiobooks:/audiobooks
-
-Environment=AUDIOBOOKSHELF_UID=USER_UID_HERE
-Environment=AUDIOBOOKSHELF_GID=USER_GID_HERE

quadlets/audiobookshelf/audiobookshelf.network

@@ -0,0 +1 @@
+[Network]

quadlets/betanin/betanin.container

@@ -0,0 +1,24 @@
+[Unit]
+Description=betanin
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/sentriz/betanin
+ContainerName=betanin
+AutoUpdate=registry
+
+Network=betanin.network
+HostName=betanin
+PublishPort=9393:9393
+
+Volume=betanin-data:/b/.local/share/betanin
+Volume=betanin-config:/b/.local/share/config
+Volume=betanin-beets:/b/.local/share/beets
+Volume=/path/to/music:/music
+Volume=/path/to/downloads:/downloads

quadlets/betanin/betanin.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=betanin network
+
+[Network]
+NetworkName=betanin
+

quadlets/betanin/betanin.volume

@@ -0,0 +1,5 @@
+[Volume]
+VolumeName=betanin-data
+VolumeName=betanin-config
+VolumeName=betanin-beets
+

quadlets/blinko/blinko-db.container

@@ -13,6 +13,7 @@ WantedBy=default.target
 Image=docker.io/postgres
 ContainerName=blinko-db
 
+Network=blinko.network
 HostName=blinko-db
 PublishPort=5435:5432
 

quadlets/blinko/blinko.container

@@ -14,6 +14,7 @@ WantedBy=default.target
 Image=docker.io/blinkospace/blinko
 ContainerName=blinko
 
+Network=blinko.network
 HostName=blinko
 PublishPort=1111:1111
 

quadlets/blinko/blinko.network

@@ -0,0 +1 @@
+[Network]

quadlets/blinko/data.volume

@@ -1,3 +1,4 @@
 [Volume]
 VolumeName=blinko-data
+VolumeName=blinko-db
 

quadlets/blinko/db.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=blinko-db
-

quadlets/caddy/caddy.container

@@ -1,7 +1,6 @@
 [Unit]
 Description=Reverse proxy
 
-
 [Service]
 Restart=on-failure
 
@@ -11,8 +10,9 @@ WantedBy=default.target
 [Container]
 Image=caddy.build
 ContainerName=caddy
-HostName=caddy
 
+Network=reverse-proxy.network
+HostName=caddy
 PublishPort=80:80
 PublishPort=443:443
 PublishPort=443:443/udp

quadlets/caddy/caddy.volume

@@ -1,2 +1,3 @@
 [Volume]
 VolumeName=caddy-config
+VolumeName=caddy-data

quadlets/caddy/data.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=caddy-data

quadlets/caddy/reverse-proxy.network

@@ -0,0 +1 @@
+[Network]

quadlets/calibre/calibre.container

@@ -11,8 +11,9 @@ WantedBy=default.target
 [Container]
 Image=lscr.io/linuxserver/calibre:latest
 ContainerName=calibre
-HostName=calibre
 
+Network=calibre.network
+HostName=calibre
 PublishPort=8080
 
 Volume=calibre-config:/config

quadlets/calibre/calibre.network

@@ -0,0 +1 @@
+[Network]

quadlets/chartdb/chartdb.container

@@ -12,6 +12,7 @@ WantedBy=default.target
 Image=ghcr.io/chartdb/chartdb
 ContainerName=chartdb
 
+Network=chartdb.network
 HostName=chartdb
 PublishPort=8080:80
 

quadlets/chartdb/chartdb.network

@@ -0,0 +1 @@
+[Network]

quadlets/checkmate/checkmate-mongo.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Checkmate mongodb
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_database_mongo:latest
+ContainerName=checkmate-mongodb
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate-mongodb
+PublishPort=27017:27017
+
+Volume=checkmate-mongodb:/data/db
+
+Exec=mongod --quiet

quadlets/checkmate/checkmate-redis.container

@@ -0,0 +1,20 @@
+[Unit]
+Description=Checkmate Redis
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_redis:latest
+ContainerName=checkmate-redis
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate-redis
+PublishPort=6379:6379
+
+Volume=checkmate-redis:/data

quadlets/checkmate/checkmate-server.container

@@ -0,0 +1,27 @@
+[Unit]
+Description=Checkmate server
+Requires=checkmate-mongodb.service
+Requires=checkmate-redis.service
+After=checkmate-mongodb.service
+After=checkmate-redis.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_server:latest
+ContainerName=checkmate-server
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate-server
+PublishPort=5000:5000
+
+Volume=%t/podman/podman.sock:/run/user/1000/podman/podman.sock:ro
+
+Environment=REDIS_HOST=checkmate-redis
+Environment=DB_CONNECTION_STRING=mongodb://checkmate-mongodb:27017/uptime_db

quadlets/checkmate/checkmate.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Checkmate
+Requires=checkmate-server.service
+After=checkmate-server.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_client:latest
+ContainerName=checkmate
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate
+PublishPort=80:80
+PublishPort=443:443
+
+Environment=UPTIME_APP_API_BASE_URL=http://localhost:5000/api/v1

quadlets/checkmate/checkmate.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Checkmate network
+
+[Network]
+NetworkName=checkmate
+

quadlets/checkmate/checkmate.volume

@@ -0,0 +1,4 @@
+[Volume]
+VolumeName=checkmate-mongodb
+VolumeName=checkmate-redis
+

quadlets/dashdot/dashdot-nvidia.container

@@ -13,7 +13,7 @@ Image=docker.io/mauricenino/dashdot:nvidia
 ContainerName=dashdot-nvidia
 AutoUpdate=registry
 
-Network=
+Network=dashdot.network
 HostName=dashdot
 PublishPort=3001:3001
 

quadlets/dashdot/dashdot.container

@@ -13,7 +13,7 @@ Image=docker.io/mauricenino/dashdot
 ContainerName=dashdot
 AutoUpdate=registry
 
-Network=
+Network=dashdot.network
 HostName=dashdot
 PublishPort=3001:3001
 

quadlets/dashdot/dashdot.network

@@ -0,0 +1 @@
+[Network]

quadlets/dashy/dashy.container

@@ -12,10 +12,10 @@ WantedBy=default.target
 [Container]
 Image=docker.io/lissy93/dashy:$dashy_version
 ContainerName=dashy
-HostName=dashy
 AutoUpdate=registry
 
-Network=
+Network=dashy.network
+HostName=dashy
 
 Volume=./user-data:/app/user-data
 

quadlets/dashy/dashy.network

@@ -0,0 +1 @@
+[Network]

quadlets/filebrowser/filebrowser.container

@@ -12,6 +12,9 @@ WantedBy=multi-user.target default.target
 Image=docker.io/hurlenko/filebrowser:latest
 ContainerName=filebrowser
 
+Network=filebrowser.network
+Hostname=filebrowser
+
 Volume=/path/to/what/you/want/to/share:/data:z
 Volume=fb-config:/config:z
 Volume=fb-branding:/branding:z

quadlets/filebrowser/filebrowser.network

@@ -0,0 +1 @@
+[Network]

quadlets/filestash/filestash-wopi.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Filestash wopi
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/collabora/code:24.04.10.2.1
+ContainerName=filestash-wopi
+AutoUpdate=registry
+
+Network=filestash.network
+HostName=filestash-wopi
+PublishPort=9980:9980
+
+Environment=extra_params=--o:ssl.enable=false
+Environment=aliasgroup1="https://.*:443"
+
+Exec=bash -c '/start-collabora-online.sh cool'

quadlets/filestash/filestash.container

@@ -0,0 +1,28 @@
+[Unit]
+Description=Filestash
+Wants=filestash-wopi.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/machines/filestash:latest
+ContainerName=filestash
+AutoUpdate=registry
+
+Network=filestash.network
+HostName=filestash
+PublishPort=8334:8334
+
+Volume=filestash:/app/data/state
+
+Environment=APPLICATION_URL=https://filestash.example.com
+Environment=CANARY=true
+Environment=OFFICE_URL=http://filestash-wopi:9980
+Environment=OFFICE_FILESTASH_URL=http://filestash:8334
+Environment=OFFICE_REWRITE_URL=http://127.0.0.1:9980
+

quadlets/filestash/filestash.network

@@ -0,0 +1 @@
+[Network]

quadlets/forgejo/forgejo-data.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=forgejo-data

quadlets/forgejo/forgejo.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Forgejo
+After=
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=codeberg.org/forgejo/forgejo:10
+ContainerName=forgejo
+AutoUpdate=registry
+
+Network=forgejo.network
+HostName=forgejo
+PublishPort=222:22
+PublishPort=3000:3000
+
+Volume=forgejo-data:/data

quadlets/forgejo/forgejo.network

@@ -0,0 +1 @@
+[Network]

quadlets/foundryvtt/foundryvtt.container

@@ -11,19 +11,19 @@ WantedBy=default.target
 [Container]
 Image=docker.io/felddy/foundryvtt:release
 ContainerName=foundryvtt
-HostName=foundryvtt
+AutoUpdate=registry
 
+Network=foundryvtt.network
+HostName=foundryvtt
 Volume=foundryvtt-data:/data
 
 PublishPort=30000:30000
 
-Environment=TIMEZONE=
+Environment=TIMEZONE=Etc/UTC
-Environment=FOUNDRY_UID=
+Secret=foundry-password,type=env,target=FOUNDRY_PASSWORD
-Environment=FOUNDRY_GID=
-Environment=FOUNDRY_PASSWORD=
 Environment=FOUNDRY_USERNAME=
-Environment=FOUNDRY_ADMIN_KEY=
+Secret=foundry-admin-key,type=env,target=FOUNDRY_ADMIN_KEY
-Environment=FOUNDRY_LICENSE_KEY=XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
+Secret=foundry-license-key,type=env,target=FOUNDRY_LICENSE_KEY=XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
-Environment=FOUNDRY_HOT_RELOAD=true
+Environment=FOUNDRY_HOT_RELOAD=false
 Environment=CONTAINER_PRESERVE_CONFIG=true
 Environment=CONTAINER_CACHE="/data/container_cache"

quadlets/foundryvtt/foundryvtt.network

@@ -0,0 +1 @@
+[Network]

quadlets/freshrss/fivefilters.container

@@ -11,9 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/heussd/fivefilters-full-text-rss:latest
 ContainerName=fivefilters
-HostName=fivefilters
 
 Network=freshrss.network
+HostName=fivefilters
 PublishPort=5000:80
 
-Environment=FTR_ADMIN_PASSWORD=XXXXXXXX
+Secret=ftr-admin-password,type=env,target=FTR_ADMIN_PASSWORD

quadlets/freshrss/freshrss.container

@@ -1,5 +1,6 @@
 [Unit]
 Description=FreshRSS Quadlet
+Requires=fivefilters.service
 After=fivefilters.service
 
 [Service]
@@ -12,13 +13,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/linuxserver/freshrss:latest
 ContainerName=freshrss
-HostName=freshrss
 
 Network=freshrss.network
+HostName=freshrss
 PublishPort=4422:80
 
-Volume=freshrss-config:/config:z
+Volume=freshrss-config:/config
 
-Environment=PUID=1001
+Environment=TZ=Etc/UTC
-Environment=PGID=1001
-Environment=TZ=Europe/London

quadlets/freshrss/freshrss.network

@@ -1,9 +1 @@
 [Network]
-Subnet=10.10.10.0/24
-Gateway=10.10.10.1
-Label=app=freshrss
-Driver=pasta
-
-
-
-

quadlets/gaseous/gaseous-mariadb.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Gaseous MariaDB
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/mariadb:latest
+ContainerName=gaseous-mariadb
+AutoUpdate=registry
+
+Network=gaseous.network
+HostName=gaseous-mariadb
+
+Volume=gaseous-mariadb:/var/lib/mysql
+
+Environment=MARIADB_ROOT_PASSWORD=gaseous
+Environment=MARIADB_USER=gaseous
+Environment=MARIADB_PASSWORD=gaseous

quadlets/gaseous/gaseous.container

@@ -0,0 +1,29 @@
+[Unit]
+Description=Gaseous ROM manager
+Requires=gaseous-mariadb.service
+After=gaseous-mariadb.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/gaseousgames/gaseousserver:latest
+ContainerName=gaseous
+AutoUpdate=registry
+
+Network=gaseous.network
+HostName=gaseous
+PublishPort=5198:80
+
+Volume=gaseous:/root/.gaseous-server
+
+Environment=TZ=Etc/UTC
+Environment=dbhost=gsdb
+Environment=dbuser=root
+Environment=dbpass=gaseous
+Environment=igdbclientid=
+Environment=igdbclientsecret=

quadlets/gaseous/gaseous.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Gaseous ROMs network
+
+[Network]
+NetworkName=gaseous
+

quadlets/gaseous/gaseous.volume

@@ -0,0 +1,4 @@
+[Volume]
+VolumeName=gaseous
+VolumeName=gaseous-mariadb
+

quadlets/glance/config/glance.yml

@@ -0,0 +1,12 @@
+server:
+  assets-path: /app/assets
+
+theme:
+  # Note: assets are cached by the browser, changes to the CSS file
+  # will not be reflected until the browser cache is cleared (Ctrl+F5)
+  custom-css-file: /assets/user.css
+
+pages:
+  # It's not necessary to create a new file for each page and include it, you can simply
+  # put its contents here, though multiple pages are easier to manage when separated
+  !include: home.yml

quadlets/glance/config/home.yml

@@ -0,0 +1,88 @@
+- name: Home
+  # Optionally, if you only have a single page you can hide the desktop navigation for a cleaner look
+  # hide-desktop-navigation: true
+  columns:
+    - size: small
+      widgets:
+        - type: calendar
+          first-day-of-week: monday
+
+        - type: rss
+          limit: 10
+          collapse-after: 3
+          cache: 12h
+          feeds:
+            - url: https://selfh.st/rss/
+              title: selfh.st
+            - url: https://ciechanow.ski/atom.xml
+            - url: https://www.joshwcomeau.com/rss.xml
+              title: Josh Comeau
+            - url: https://samwho.dev/rss.xml
+            - url: https://ishadeed.com/feed.xml
+              title: Ahmad Shadeed
+
+        - type: twitch-channels
+          channels:
+            - theprimeagen
+            - j_blow
+            - piratesoftware
+            - cohhcarnage
+            - christitustech
+            - EJ_SA
+
+    - size: full
+      widgets:
+        - type: group
+          widgets:
+            - type: hacker-news
+            - type: lobsters
+
+        - type: videos
+          channels:
+            - UCXuqSBlHAE6Xw-yeJA0Tunw # Linus Tech Tips
+            - UCR-DXc1voovS8nhAvccRZhg # Jeff Geerling
+            - UCsBjURrPoezykLs9EqgamOA # Fireship
+            - UCBJycsmduvYEL83R_U4JriQ # Marques Brownlee
+            - UCHnyfMqiRRG1u-2MsSQLbXA # Veritasium
+
+        - type: group
+          widgets:
+            - type: reddit
+              subreddit: technology
+              show-thumbnails: true
+            - type: reddit
+              subreddit: selfhosted
+              show-thumbnails: true
+
+    - size: small
+      widgets:
+        - type: weather
+          location: London, United Kingdom
+          units: metric # alternatively "imperial"
+          hour-format: 12h # alternatively "24h"
+          # Optionally hide the location from being displayed in the widget
+          # hide-location: true
+
+        - type: markets
+          markets:
+            - symbol: SPY
+              name: S&P 500
+            - symbol: BTC-USD
+              name: Bitcoin
+            - symbol: NVDA
+              name: NVIDIA
+            - symbol: AAPL
+              name: Apple
+            - symbol: MSFT
+              name: Microsoft
+
+        - type: releases
+          cache: 1d
+          # Without authentication the Github API allows for up to 60 requests per hour. You can create a
+          # read-only token from your Github account settings and use it here to increase the limit.
+          # token: ...
+          repositories:
+            - glanceapp/glance
+            - go-gitea/gitea
+            - immich-app/immich
+            - syncthing/syncthing

quadlets/glance/glance.container

@@ -0,0 +1,21 @@
+[Unit]
+Description=Glance dashboard
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/glanceapp/glance
+ContainerName=glance
+AutoUpdate=registry
+
+Network=glance.network
+HostName=glance
+PublishPort=8080:8080
+
+Volume=glance-config:/app/config
+

quadlets/glance/glance.env

@@ -0,0 +1,3 @@
+# Variables defined here will be available to use anywhere in the config with the syntax ${MY_SECRET_TOKEN}
+# Note: making changes to this file requires re-running docker compose up
+MY_SECRET_TOKEN=123456

quadlets/glance/glance.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=glance-config

quadlets/glances/glances.container

@@ -11,9 +11,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/nicolargo/glances:$version_tag
 ContainerName=glances
-HostName=glances
 AutoUpdate=registry
 
+Network=glances.network
+HostName=glances
+
 Volume=%t/podman/podman.sock:/run/user/1000/podman/podman.sock:ro
 Volume=/etc/os-release:/etc/os-release:ro
 Volume=./glances.conf:/glances/conf/glances.conf

quadlets/glances/glances.network

@@ -0,0 +1 @@
+[Network]

quadlets/gluetun/gluetun.container

@@ -11,7 +11,7 @@ TimeoutStartSec=900
 WantedBy=default.target
 
 [Container]
-Image=docker.io/qmcgaw/gluetun:$gluetun_version
+Image=docker.io/qmcgaw/gluetun
 ContainerName=gluetun
 HostName=gluetun
 AutoUpdate=registry
@@ -20,7 +20,7 @@ AddDevice=/dev/net/tun:/dev/net/tun
 
 Volume=./config.toml:/gluetun/auth/config.toml
 
-Environment=TZ=$timezone
+Environment=TZ=Etc/UTC
 Environment=UPDATER_PERIOD=24h
 Environment=UPDATER_VPN_SERVICE_PROVIDERS=protonvpn
 Environment=VPN_SERVICE_PROVIDER=protonvpn

quadlets/graphite/graphite.container

@@ -0,0 +1,26 @@
+[Unit]
+Description=Graphite monitoring
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/graphiteapp/graphite-statsd
+ContainerName=graphite
+AutoUpdate=registry
+
+Network=graphite.network
+HostName=graphite
+PublishPort=80:80
+PublishPort=2003-2004:2003-2004
+PublishPort=2023-2024:2023-2024
+PublishPort=8125:8125/udp
+PublishPort=8125:8125
+
+Volume=graphite-conf:/opt/graphite/conf
+
+EnvironmentFile=graphite.env

quadlets/graphite/graphite.env

@@ -0,0 +1 @@
+EXAMPLE=value

quadlets/graphite/graphite.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Graphite network
+
+[Network]
+NetworkName=graphite
+

quadlets/graphite/graphite.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=graphite-conf
+

quadlets/graylog/graylog-datanode.container

@@ -0,0 +1,28 @@
+[Unit]
+Description=Graylog datanode
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/graylog/graylog-datanode:6.1
+ContainerName=graylog-datanode
+AutoUpdate=registry
+
+Network=graylog.network
+HostName=graylog-datanode
+PublishPort=8999:8999
+PublishPort=9200:9200
+PublishPort=9300:9300
+
+Volume=graylog-datanode:/var/lib/graylog-datanode
+
+Environment=GRAYLOG_DATANODE_ID_FILE=/var/lib/graylog-datanode/node-id
+Environment=GRAYLOG_DATANODE_MONGODB_URI=mongodb://graylog-db:27017/graylog
+
+Secret=graylog-password-secret,type=env,target=GRAYLOG_DATANODE_PASSWORD_SECRET
+

quadlets/graylog/graylog-db.container

@@ -0,0 +1,21 @@
+[Unit]
+Description=Graylog MongoDB
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/mongo:6.0
+ContainerName=graylog-db
+AutoUpdate=registry
+
+Network=graylog.network
+HostName=graylog-db
+
+Volume=graylog-db-data:/data/db
+Volume=graylog-db-config:/data/configdb
+

quadlets/graylog/graylog.container

@@ -0,0 +1,45 @@
+[Unit]
+Description=Graylog
+Wants=graylog-db
+Wants=graylog-database
+After=graylog-db
+After=graylog-database
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/graylog:6.1
+ContainerName=graylog
+AutoUpdate=registry
+
+Network=graylog.network
+HostName=graylog
+PublishPort=5044:5044/tcp
+PublishPort=5140:5140/udp
+PublishPort=5140:5140/tcp
+PublishPort=5555:5555/tcp
+PublishPort=5555:5555/udp
+PublishPort=9000:9000/tcp
+PublishPort=12201:12201/tcp
+PublishPort=12201:12201/udp
+PublishPort=13301:13301/tcp
+PublishPort=13302:13302/tcp
+
+Volume=graylog-data:/usr/share/graylog/data/data
+
+Environment=GRAYLOG_NODE_ID_FILE=/usr/share/graylog/data/data/node-id
+Environment=GRAYLOG_HTTP_BIND_ADDRESS=0.0.0.0:9000
+Environment=GRAYLOG_HTTP_EXTERNAL_URI=http://localhost:9000/
+Environment=GRAYLOG_MONGODB_URI=mongodb://graylog-db:27017/graylog
+
+Secret=graylog-password-secret,type=env,target=GRAYLOG_PASSWORD_SECRET
+Secret=graylog-root-password-sha2,type=env,target=GRAYLOG_ROOT_PASSWORD_SHA2
+
+Entrypoint=/usr/bin/tini
+Exec=-- /docker-entrypoint.sh
+

quadlets/graylog/graylog.network

@@ -0,0 +1,7 @@
+[Unit]
+Description=Graylog network
+
+[Network]
+NetworkName=graylog
+Subnet=172.25.1.0/29
+Gateway=172.25.0.1

quadlets/grocy/grocy.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Grocy grocery management
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=lscr.io/linuxserver/grocy
+ContainerName=grocy
+AutoUpdate=registry
+
+Network=grocy.network
+HostName=grocy
+PublishPort=9283:80
+
+Volume=grocy-config:/config
+
+Environment=TZ=Etc/UTC

quadlets/grocy/grocy.network

@@ -0,0 +1 @@
+[Network]

quadlets/grocy/grocy.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=grocy-config
+

quadlets/healthchecks/healthchecks-postgres.container

@@ -0,0 +1,26 @@
+[Unit]
+Description=Healthchecks postgres
+Requires=healthchecks-postgres.service
+After=healthchecks-postgres.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/postgres:16
+ContainerName=healthchecks-postgres
+AutoUpdate=registry
+
+Network=healthchecks.network
+HostName=healthchecks-postgres
+PublishPort=8000:8000
+
+Volume=healthchecks-postgres:/var/lib/postgresql/data
+
+Environment=POSTGRES_DB=healthchecks
+
+Secret=healthchecks-postgres-password,type=env,target=POSTGRES_PASSWORD

quadlets/healthchecks/healthchecks.container

@@ -0,0 +1,24 @@
+[Unit]
+Description=Healthchecks
+Requires=healthchecks-postgres.service
+After=healthchecks-postgres.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/healthchecks:latest
+ContainerName=healthchecks
+AutoUpdate=registry
+
+Network=healthchecks.network
+HostName=healthchecks
+PublishPort=8000:8000
+
+EnvironmentFile=healthchecks.env
+
+Exec=uwsgi /opt/healthchecks/docker/uwsgi.ini

quadlets/healthchecks/healthchecks.env

@@ -0,0 +1,80 @@
+ALLOWED_HOSTS=localhost
+APPRISE_ENABLED=False
+DB=postgres
+DB_CONN_MAX_AGE=0
+DB_HOST=db
+DB_NAME=hc
+# Use Secret=...
+# DB_PASSWORD=fixme-postgres-password
+DB_PORT=5432
+DB_SSLMODE=prefer
+DB_TARGET_SESSION_ATTRS=read-write
+DB_USER=postgres
+DEBUG=False
+DEFAULT_FROM_EMAIL=healthchecks@example.org
+DISCORD_CLIENT_ID=
+DISCORD_CLIENT_SECRET=
+EMAIL_HOST=
+EMAIL_HOST_PASSWORD=
+EMAIL_HOST_USER=
+EMAIL_PORT=587
+EMAIL_USE_TLS=True
+EMAIL_USE_VERIFICATION=True
+INTEGRATIONS_ALLOW_PRIVATE_IPS=False
+LINENOTIFY_CLIENT_ID=
+LINENOTIFY_CLIENT_SECRET=
+MASTER_BADGE_LABEL=Mychecks
+MATRIX_ACCESS_TOKEN=
+MATRIX_HOMESERVER=
+MATRIX_USER_ID=
+MATTERMOST_ENABLED=True
+MSTEAMS_ENABLED=True
+OPSGENIE_ENABLED=True
+PAGERTREE_ENABLED=True
+PD_APP_ID=
+PD_ENABLED=True
+PING_BODY_LIMIT=10000
+PING_EMAIL_DOMAIN=localhost
+PING_ENDPOINT=http://localhost:8000/ping/
+PROMETHEUS_ENABLED=True
+PUSHBULLET_CLIENT_ID=
+PUSHBULLET_CLIENT_SECRET=
+PUSHOVER_API_TOKEN=
+PUSHOVER_EMERGENCY_EXPIRATION=86400
+PUSHOVER_EMERGENCY_RETRY_DELAY=300
+PUSHOVER_SUBSCRIPTION_URL=
+REGISTRATION_OPEN=True
+REMOTE_USER_HEADER=
+ROCKETCHAT_ENABLED=True
+RP_ID=
+S3_ACCESS_KEY=
+S3_BUCKET=
+S3_ENDPOINT=
+S3_REGION=
+S3_SECRET_KEY=
+S3_TIMEOUT=60
+S3_SECURE=True
+SECRET_KEY=---
+SHELL_ENABLED=False
+SIGNAL_CLI_SOCKET=
+SITE_LOGO_URL=
+SITE_NAME=Mychecks
+SITE_ROOT=http://localhost:8000
+SLACK_CLIENT_ID=
+SLACK_CLIENT_SECRET=
+SLACK_ENABLED=True
+# SMTPD_PORT=
+SPIKE_ENABLED=True
+TELEGRAM_BOT_NAME=ExampleBot
+TELEGRAM_TOKEN=
+TRELLO_APP_KEY=
+TWILIO_ACCOUNT=
+TWILIO_AUTH=
+TWILIO_FROM=
+TWILIO_USE_WHATSAPP=False
+USE_PAYMENTS=False
+VICTOROPS_ENABLED=True
+WEBHOOKS_ENABLED=True
+WHATSAPP_DOWN_CONTENT_SID=
+WHATSAPP_UP_CONTENT_SID=
+ZULIP_ENABLED=True

quadlets/healthchecks/healthchecks.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Healthchecks network
+
+[Network]
+NetworkName=healthchecks
+

quadlets/healthchecks/healthchecks.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=healthchecks-postgres
+

quadlets/hoarder/hoarder-chrome.container

@@ -11,6 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/zenika/alpine-chrome
 ContainerName=hoarder-chrome
+AutoUpdate=registry
+
+Network=hoarder.network
 HostName=hoarder-chrome
 
 Exec=--no-sandbox --disable-gpu --disable-dev-shm-usage --remote-debugging-address=0.0.0.0 --remote-debugging-port=9222 --hide-scrollbars

quadlets/hoarder/hoarder-meilisearch.container

@@ -1,7 +1,6 @@
 [Unit]
 Description=Hoarder requirement
 
-
 [Service]
 Restart=on-failure
 TimeoutStartSec=900
@@ -12,8 +11,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/getmeili/meilisearch:v1.6
 ContainerName=hoarder-meilisearch
+AutoUpdate=registry
+
+Network=hoarder.network
 HostName=hoarder-meilisearch
 
 EnvironmentFile=hoarder.env
 
-Volume=meilisearch:/meili_data
+Volume=hoarder-meilisearch:/meili_data

quadlets/hoarder/hoarder.container

@@ -12,9 +12,11 @@ WantedBy=default.target
 [Container]
 Image=ghcr.io/hoarder-app/hoarder:release
 ContainerName=hoarder
-HostName=hoarder
+AutoUpdate=registry
 
-PublishPort=3000
+Network=hoarder.network
+HostName=hoarder
+PublishPort=3000:3000
 
 Volume=hoarder-data:/data
 

quadlets/hoarder/hoarder.volume

@@ -1,2 +1,3 @@
 [Volume]
 VolumeName=hoarder-data
+VolumeName=hoarder-meilisearch

quadlets/hoarder/meilisearch.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=meilisearch

quadlets/homarr/data.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=homarr-data
-

quadlets/homarr/homarr.container

@@ -1,7 +1,6 @@
 [Unit]
 Description=Homarr
 
-
 [Service]
 Restart=on-failure
 TimeoutStartSec=900
@@ -12,6 +11,8 @@ WantedBy=default.target
 [Container]
 Image=ghcr.io/ajnart/homarr:latest
 ContainerName=homarr
+
+Network=homarr.network
 HostName=homarr
 
 Volume=homarr-configs:/app/data/configs

quadlets/homarr/homarr.network

@@ -0,0 +1 @@
+[Network]

quadlets/homarr/homarr.volume

@@ -1,3 +1,4 @@
 [Volume]
 VolumeName=homarr-configs
+VolumeName=homarr-data
 

quadlets/homepage/homepage.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Homepage
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=ghcr.io/gethomepage/homepage:latest
+ContainerName=homepage
+AutoUpdate=registry
+
+Network=homepage.network
+HostName=homepage
+PublishPort=3000:3000
+
+Volume=homepage-config:/app/config
+
+Environment=HOMEPAGE_ALLOWED_HOSTS=homepage.example.com
+

quadlets/homepage/homepage.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Homepage network
+
+[Network]
+NetworkName=homepage
+

quadlets/homepage/homepage.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=homepage-config
+

quadlets/homer/homer.container

@@ -11,8 +11,10 @@ WantedBy=default.target
 [Container]
 Image=docker.io/b4bz/homer
 ContainerName=homer
-HostName=homer
+AutoUpdate=registry
 
+Network=homer.network
+HostName=homer
 PublishPort=8080:8080
 
 Volume=homer-assets:/www/assets

quadlets/homer/homer.network

@@ -0,0 +1 @@
+[Network]

quadlets/it-tools/it-tools.container

@@ -11,6 +11,7 @@ WantedBy=default.target
 [Container]
 Image=docker.io/corentinth/it-tools:latest
 ContainerName=it-tools
-HostName=it-tools
 
+Network=it-tools.network
+HostName=it-tools
 PublishPort=8088:80

quadlets/it-tools/it-tools.network

@@ -0,0 +1 @@
+[Network]

quadlets/joplin/joplin.container

@@ -10,9 +10,11 @@ WantedBy=default.target
 
 [Container]
 Image=docker.io/joplin/server:latest
-ContainerName=joplin-server
+ContainerName=joplin
-HostName=joplin-server
+AutoUpdate=registry
 
+Network=joplin.network
+HostName=joplin
 PublishPort=22300:22300
 
 Environment=APP_BASE_URL=https://joplin.example.com