feat(grocy): add Grocy

README.md

@@ -26,7 +26,9 @@ under the same user permissions as yourself, from within your own `$HOME`.
 > [!NOTE]
 > It is recommended to create another user specifically for running these
 > containers, but it is not strictly required. Details for setting up a system
-> from scratch are located in [AlmaLinux.md](./AlmaLinux.md).
+> from scratch are located in [AlmaLinux.md](./AlmaLinux.md) or
+> [Ubuntu.md](./Ubuntu.md
+)
 
 ## Getting started
 
@@ -140,75 +142,76 @@ Navigate to `http://localhost:9000` in your browser.
 
 I'm working on new quadlets every day. This is a list of all of the containers
 that I intend to add to this repository. It is still growing, and I welcome
-[pull requests](https://github.com/redbeardymcgee/podbox/pulls).
+[pull requests](https://git.mcgee.red/redbeardymcgee/podbox/pulls).
 
 - [x] [Actual](https://actualbudget.github.io/docs/)
 - [x] [AdGuard](https://adguard.com)
-- [ ] [Apprise](https://github.com/caronc/apprise)
+- [x] [Apprise](https://github.com/caronc/apprise)
 - [ ] [ArgoCD](https://github.com/argoproj/argo-cd)
 - [x] [Audiobookshelf](https://www.audiobookshelf.org/)
 - [ ] [Authelia](https://www.authelia.com/)
 - [ ] [Authentik](https://goauthentik.io/)
-- [ ] [betanin](https://github.com/sentriz/betanin)
-- [ ] [Bigcapital](https://bigcapital.app/)
-- [ ] [Bitwarden](https://bitwarden.com/)
+- [x] [betanin](https://github.com/sentriz/betanin)
 - [x] [Blinko](https://blinko.mintlify.app/introduction)
 - [x] [booktree](https://github.com/myxdvz/booktree)
 - [x] [Caddy](https://caddyserver.com) # Socket activation requires newer `caddy` and `podman`
 - [x] [Calibre](https://github.com/linuxserver/docker-calibre)
 - [x] [Calibre-web](https://github.com/janeczku/calibre-web)
 - [x] [ChartDB](https://chartdb.io/)
-- [ ] [Checkmate](https://github.com/bluewave-labs/checkmate)
-- [ ] [Code::Stats](https://codestats.net/)
+- [x] [Checkmate](https://github.com/bluewave-labs/checkmate)
 - [x] [dash.](https://getdashdot.com/)
 - [x] [Dashy](https://dashy.to)
-- [ ] [Dittofeed](https://www.dittofeed.com)
 - [ ] [Duplicacy](https://duplicacy.com/)
 - [ ] [Duplicati](https://duplicati.com/)
-- [ ] [EmulatorJS](https://emulatorjs.org/)
 - [x] [Filebrowser](https://filebrowser.org/)
+- [x] [Filestash](https://filestash.app)
 - [x] [FiveFilters](https://www.fivefilters.org/)
+- [x] [Forgejo](https://forgejo.org)
 - [x] [Foundry VTT](https://foundryvtt.com)
 - [x] [FreshRSS](https://www.freshrss.org/)
-- [ ] [Gaseous](https://github.com/gaseous-project/gaseous-server)
+- [x] [Gaseous](https://github.com/gaseous-project/gaseous-server)
+- [x] [Glance](https://github.com/glanceapp/glance)
 - [x] [Glances](https://nicolargo.github.io/glances/)
-- [ ] [glueforward](https://github.com/GeoffreyCoulaud/glueforward)
+- [x] [glueforward](https://github.com/GeoffreyCoulaud/glueforward)
 - [x] [gluetun](https://github.com/qdm12/gluetun)
-- [ ] [Graphite](https://graphiteapp.org/)
-- [ ] [Healthchecks](https://healthchecks.io/)
+- [x] [Graphite](https://graphiteapp.org/)
+- [x] [Graylog](https://graylog.org)
+- [x] [Healthchecks](https://healthchecks.io/)
 - [x] [hoarder](https://hoarder.app/)
 - [x] [Homarr](https://homarr.dev/)
-- [ ] [Homepage](https://gethomepage.dev/)
+- [x] [Homepage](https://gethomepage.dev/)
 - [ ] [Immich](https://immich.app/)
 - [x] [IT-Tools](https://it-tools.tech/)
 - [x] [Joplin](https://joplinapp.org/)
 - [x] [Kavita](https://kavitareader.com)
 - [ ] [Keycloak](https://www.keycloak.org)
 - [x] [Kibitzr](https://kibitzr.github.io/)
-- [ ] [Komga](https://komga.org/)
-- [ ] [LazyLibrarian](https://lazylibrarian.gitlab.io/)
+- [x] [Komga](https://komga.org/)
+- [x] [LazyLibrarian](https://lazylibrarian.gitlab.io/)
+- [x] [Leantime](https://leantime.io)
+- [x] [LibreNMS](https://librenms.org)
 - [x] [librespeed](https://librespeed.org)
 - [x] [Linkwarden](https://linkwarden.app/)
 - [x] [Lounge](https://thelounge.chat)
 - [x] [Matrix](https://matrix.org/)
-- [ ] [Maxun](https://github.com/getmaxun/maxun)
+- [x] [Maxun](https://github.com/getmaxun/maxun)
 - [x] [Mealie](https://mealie.io/)
 - [x] [Memos](https://usememos.com)
-- [ ] [Miniflux](https://miniflux.app/)
+- [x] [Miniflux](https://miniflux.app/)
 - [x] [MinIO](https://min.io)
-- [ ] [n8n](https://n8n.io/)
+- [x] [n8n](https://n8n.io/)
 - [x] [Nebula](https://github.com/slackhq/nebula)
 - [ ] [Netbird](https://netbird.io/)
 - [x] [netboot.xyz](https://netboot.xyz)
 - [x] [Netdata](https://www.netdata.cloud/)
 - [ ] [Note Mark](https://github.com/enchant97/note-mark)
 - [ ] [Notesnook](https://github.com/streetwriters/notesnook-sync-server)
-- [ ] [ntop](https://www.ntop.org/)
-- [ ] [OpenNMS](https://www.opennms.org/)
-- [ ] [PiHole](https://pi-hole.net/)
-- [ ] [Pocket ID](https://github.com/stonith404/pocket-id)
+- [x] [OpenObserve](https://openobserve.ai)
+- [x] [OpenSpeedTest](https://openspeedtest.com)
+- [x] [PiHole](https://pi-hole.net/)
+- [x] [Pocket ID](https://github.com/stonith404/pocket-id)
 - [ ] [Pod Arcade](https://www.pod-arcade.com/)
-- [ ] [Postiz](https://postiz.com/)
+- [x] [Postiz](https://postiz.com/)
 - [x] [Prometheus](https://prometheus.io)
 - [x] [protonmail-bridge-docker](https://github.com/shenxn/protonmail-bridge-docker)
 - [x] [Prowlarr](https://prowlarr.com)
@@ -216,21 +219,23 @@ that I intend to add to this repository. It is still growing, and I welcome
 - [x] [qBittorrent](https://qbittorrent.org)
 - [x] [qbittorrent-port-forward-gluetun-server](https://github.com/mjmeli/qbittorrent-port-forward-gluetun-server)
 - [x] [Radarr](https://radarr.video)
-- [ ] [RomM](https://romm.app/)
+- [x] [RomM](https://romm.app/)
 - [ ] [Seafile](https://www.seafile.com)
 - [ ] [Shiori](https://github.com/go-shiori/shiori)
 - [ ] [SimpleX](https://simplex.chat/)
 - [x] [Snowflake](https://snowflake.torproject.org/)
 - [ ] [solidtime](https://docs.solidtime.io/self-hosting/intro)
 - [x] [Sonarr](https://sonarr.tv)
+- [x] [Speedtest Tracker](https://speedtest-tracker.dev)
 - [x] [Stirling PDF](https://stirlingpdf.io)
-- [ ] [Supervisord](http://supervisord.org/)
+- [x] [syslog-ng](https://syslog-ng.github.io/)
 - [x] [Tandoor](https://github.com/TandoorRecipes/recipes)
 - [x] [traggo](https://traggo.net)
+- [x] [Termix](https://github.com/LukeGus/Termix)
 - [ ] [Ubooquity](https://vaemendis.net/ubooquity/)
 - [ ] [Umami](https://umami.is/)
 - [ ] [UrBackup](https://urbackup.org)
-- [ ] [Vikunja](https://vikunja.io)
+- [x] [Vikunja](https://vikunja.io)
 - [ ] [Wazuh](https://wazuh.com/)
 - [ ] [wiki.js](https://js.wiki)
 - [ ] [wger](https://wger.de/)

Ubuntu.md

@@ -137,3 +137,42 @@ podman system migrate
 systemctl --user enable --now podman-auto-update
 exit
 ```
+
+## Podman fails autostart
+
+In Podman < 5.3 containers may fail to autostart because user level units cannot depend on system level units (in this case `network-online.target`)
+
+Podman >= 5.3 should ship with a workaround user unit that can be used `podman-user-wait-network-online.service`, use that instead of the fix below.  
+
+See [this github issue](https://github.com/containers/podman/issues/22197) for workarounds, the workaround below is what worked for me. The google.com ping can be replaced with your preferred (reachable) ip/host
+
+To fix this, create the following
+
+```bash
+# ~/.config/systemd/user/network-online.service
+[Unit]
+Description=User-level proxy to system-level network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=sh -c 'until ping -c 1 google.com; do sleep 5; done'
+
+[Install]
+WantedBy=default.target
+```
+```bash
+# ~/.config/systemd/user/network-online.target
+[Unit]
+Description=User-level network-online.target
+Requires=network-online.service
+Wants=network-online.service
+After=network-online.service
+```
+Then enable the service `systemctl --user enable network-online.service`
+
+In quadlets add the following:
+
+```bash
+[Unit]
+After=network-online.target
+```

pods/README.md

@@ -1,34 +0,0 @@
-## Weechat
-
-> [!WARNING]
-> If you have permissions issue trying to persist data > [Potential
-> permissions issue
-> fix](https://github.com/weechat/weechat-container/issues/10#issuecomment-2472077317)
-
-### Attach and configure
-
-> [!TIP]
-> Detach key sequence: `ctrl-p` `ctrl-q`.
-
-```bash
-ssh -t $host machinectl shell $ctuser@ podman attach weechat
-/set irc.look.smart_filter on
-/set irc.server_default.msg_part ""
-/set irc.server_default.msg_quit ""
-/set irc.ctcp.clientinfo ""
-/set irc.ctcp.finger ""
-/set irc.ctcp.source ""
-/set irc.ctcp.time ""
-/set irc.ctcp.userinfo ""
-/set irc.ctcp.version ""
-/set irc.ctcp.ping ""
-/plugin unload xfer
-/set weechat.plugin.autoload "*,!xfer"
-/filter add irc_smart * irc_smart_filter *
-/server add mam irc.myanonamouse.net/6697
-/set irc.server.mam.username $irc_username
-/set irc.server_default.autojoin_dynamic on
-/set irc.server.mam.nicks "$irc_nick1,$irc_nick2"
-/set irc.server.mam.autoconnect on
-/connect mam
-```

pods/mamstack/caddy/Caddyfile

@@ -1,7 +0,0 @@
-{
-        acme_dns $provider $api_key
-}
-
-qb.$domain.$tld {
-        reverse_proxy localhost:8080
-}

pods/mamstack/caddy/Containerfile

@@ -1,8 +0,0 @@
-FROM docker.io/caddy:$version-builder AS builder
-
-RUN xcaddy build \
-    --with github.com/caddy-dns/$module
-
-FROM docker.io/caddy:$version
-
-COPY --from=builder /usr/bin/caddy /usr/bin/caddy

pods/mamstack/caddy/caddy.build

@@ -1,4 +0,0 @@
-[Build]
-ImageTag=localhost/caddy-njalla
-SetWorkingDirectory=unit
-

pods/mamstack/caddy/caddy.container

@@ -1,21 +0,0 @@
-[Unit]
-Description=Reverse proxy
-
-[Service]
-Restart=on-failure
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=caddy.build
-ContainerName=caddy
-HostName=caddy
-Pod=MAMstack.pod
-AutoUpdate=registry
-
-Volume=caddy-config:/config
-Volume=caddy-data:/data
-
-Volume=./Caddyfile:/etc/caddy/Caddyfile
-

pods/mamstack/caddy/data.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=caddy-data

pods/mamstack/gluetun/gluetun.container

@@ -1,33 +0,0 @@
-[Unit]
-Description=gluetun VPN
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/qmcgaw/gluetun:$gluetun_version
-ContainerName=gluetun
-HostName=gluetun
-AddCapability=NET_ADMIN
-AddDevice=/dev/net/tun:/dev/net/tun
-Pod=MAMstack.pod
-AutoUpdate=registry
-
-Volume=./config.toml:/gluetun/auth/config.toml
-
-Environment=TZ=$timezone
-Environment=UPDATER_PERIOD=24h
-Environment=UPDATER_VPN_SERVICE_PROVIDERS=protonvpn
-Environment=VPN_SERVICE_PROVIDER=protonvpn
-# The trailing `+pmp` is for port forwarding
-Environment=OPENVPN_USER=${openvpn_user}+pmp
-Environment=OPENVPN_PASSWORD=$openvpn_password
-Environment=OPENVPN_CIPHERS=aes-256-gcm
-Environment=SERVER_COUNTRIES=$countries
-Environment=VPN_PORT_FORWARDING=on
-Environment=FIREWALL_DEBUG=on
-

pods/mamstack/mamstack.pod

@@ -1,10 +0,0 @@
-[Pod]
-PodName=MAMstack
-
-Network=mamstack.network
-
-PublishPort=80
-PublishPort=443
-PublishPort=443:443/udp
-
-Volume=

pods/mamstack/pointspend/pointspend.container

@@ -1,27 +0,0 @@
-[Unit]
-Description=Bonus points spender
-After=qbittorrent.service
-After=gluetun.service
-BindsTo=gluetun.service
-BindsTo=qbittorrent.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-# TODO: Is `latest` safe for this container?
-Image=docker.io/myanonamouse/pointspend:latest
-ContainerName=pointspend
-HostName=pointspend
-Pod=MAMstack.pod
-AutoUpdate=registry
-
-Environment=BUFFER=1000
-Environment=WEDGEHOURS=0
-Environment=VIP=1
-
-Secret=mam_id,type=env,target=MAMID

pods/mamstack/qbit_manage/config.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=qbit_manage-config
-

pods/mamstack/qbit_manage/config.yml

@@ -1,322 +0,0 @@
-# This is an example configuration file that documents all the options.
-# It will need to be modified for your specific use case.
-# Please refer to the link below for more details on how to set up the configuration file
-# https://github.com/StuffAnThings/qbit_manage/wiki/Config-Setup
-
-commands:
-  # The commands defined below will IGNORE any commands used in command line and docker env variables.
-  dry_run: True
-  cross_seed: False
-  recheck: False
-  cat_update: False
-  tag_update: False
-  rem_unregistered: False
-  tag_tracker_error: False
-  rem_orphaned: False
-  tag_nohardlinks: False
-  share_limits: False
-  skip_qb_version_check: False
-  skip_cleanup: False
-
-qbt:
-  # qBittorrent parameters
-  host: "localhost:8080"
-  user: "username"
-  pass: "password"
-
-settings:
-  force_auto_tmm: False # Will force qBittorrent to enable Automatic Torrent Management for each torrent.
-  force_auto_tmm_ignore_tags: #Torrents with these tags will be ignored when force_auto_tmm is enabled.
-    - cross-seed
-    - Upload
-  tracker_error_tag: issue # Will set the tag of any torrents that do not have a working tracker.
-  nohardlinks_tag: noHL # Will set the tag of any torrents with no hardlinks.
-  share_limits_tag: ~share_limit # Will add this tag when applying share limits to provide an easy way to filter torrents by share limit group/priority for each torrent
-  share_limits_min_seeding_time_tag: MinSeedTimeNotReached # Tag to be added to torrents that have not yet reached the minimum seeding time
-  share_limits_min_num_seeds_tag: MinSeedsNotMet # Tag to be added to torrents that have not yet reached the minimum number of seeds
-  share_limits_last_active_tag: LastActiveLimitNotReached # Tag to be added to torrents that have not yet reached the last active limit
-  cross_seed_tag: cross-seed # Will set the tag of any torrents that are added by cross-seed command
-  cat_filter_completed: True # Filters for completed torrents only when running cat_update command
-  share_limits_filter_completed: True # Filters for completed torrents only when running share_limits command
-  tag_nohardlinks_filter_completed: True # Filters for completed torrents only when running tag_nohardlinks command
-  cat_update_all: True # Checks and updates all torrent categories if set to True when running cat_update command, otherwise only update torrents that are uncategorized
-  disable_qbt_default_share_limits: True # Allows QBM to handle share limits by disabling qBittorrents default Share limits. Only active when the share_limits command is set to True
-
-directory:
-  # Do not remove these
-  # Cross-seed var: </your/path/here/>  # Output directory of cross-seed
-  # root_dir var: </your/path/here/>  # Root downloads directory used to check for orphaned files, noHL, and RecycleBin.
-  # <OPTIONAL> remote_dir var: </your/path/here/>  # Path of docker host mapping of root_dir.
-  # remote_dir must be set if you're running qbit_manage locally and qBittorrent/cross_seed is in a docker
-  # remote_dir should not be set if qbit_manage is running in a container
-  # <OPTIONAL> recycle_bin var: </your/path/here/>   # Path of the RecycleBin folder. Default location is set to remote_dir/.RecycleBin
-  # <OPTIONAL> torrents_dir var: </your/path/here/>  # Path of the your qbittorrent torrents directory. Required for `save_torrents` attribute in recyclebin
-  # <OPTIONAL> orphaned_dir var: </your/path/here/>  # Path of the the Orphaned Data folder. This is similar to RecycleBin, but only for orphaned data.
-  cross_seed: "/your/path/here/"
-  root_dir: "/data/torrents/"
-  remote_dir: "/mnt/user/data/torrents/"
-  recycle_bin: "/mnt/user/data/torrents/.RecycleBin"
-  torrents_dir: "/qbittorrent/data/BT_backup"
-  orphaned_dir: "/data/torrents/orphaned_data"
-
-cat:
-  # Category & Path Parameters
-  # All save paths in qbittorent must be populated below.
-  # If you want to leave a save_path as uncategorized you can use the key 'Uncategorized' as the name of the category.
-  # <Category Name> : <save_path>  # Path of your save directory.
-  movies: "/data/torrents/Movies"
-  tv: "/data/torrents/TV"
-
-cat_change:
-  # This moves all the torrents from one category to another category. This executes on --cat-update
-  # WARNING: if the paths are different and Default Torrent Management Mode is set to automatic the files could be moved !!!
-  # <Old Category Name> : <New Category>
-  Radarr-HD.cross-seed: movies-hd
-  Radarr-UHD.cross-seed: movies-uhd
-  movies-hd.cross-seed: movies-hd
-  movies-uhd.cross-seed: movies-uhd
-
-tracker:
-  # Mandatory
-  # Tag Parameters
-  # <Tracker URL Keyword>:    # <MANDATORY> This is the keyword in the tracker url. You can define multiple tracker urls by splitting with `|` delimiter
-  # <MANDATORY> Set tag name. Can be a list of tags or a single tag
-  #   tag: <Tag Name>
-  # <OPTIONAL> Set the category based on tracker URL. This category option takes priority over the category defined by save directory
-  #   cat: <Category Name>
-  # <OPTIONAL> Set this to the notifiarr react name. This is used to add indexer reactions to the notifications sent by Notifiarr
-  #   notifiarr: <notifiarr indexer>
-  animebytes.tv:
-    tag: AnimeBytes
-    notifiarr: animebytes
-  avistaz:
-    tag:
-      - Avistaz
-      - tag2
-      - tag3
-    notifiarr: avistaz
-  beyond-hd:
-    tag: [Beyond-HD, tag2, tag3]
-    cat: movies
-    notifiarr: beyondhd
-  blutopia:
-    tag: Blutopia
-    notifiarr: blutopia
-  cartoonchaos:
-    tag: CartoonChaos
-  digitalcore:
-    tag: DigitalCore
-    notifiarr: digitalcore
-  gazellegames:
-    tag: GGn
-  hdts:
-    tag: HDTorrents
-  landof.tv:
-    tag: BroadcasTheNet
-    notifiarr: broadcasthenet
-  myanonamouse:
-    tag: MaM
-  passthepopcorn:
-    tag: PassThePopcorn
-    notifiarr: passthepopcorn
-  privatehd:
-    tag: PrivateHD
-    notifiarr:
-  torrentdb:
-    tag: TorrentDB
-    notifiarr: torrentdb
-  torrentleech|tleechreload:
-    tag: TorrentLeech
-    notifiarr: torrentleech
-  tv-vault:
-    tag: TV-Vault
-  # The "other" key is a special keyword and if defined will tag any other trackers that don't match the above trackers into this tag
-  other:
-    tag: other
-
-nohardlinks:
-  # Tag Movies/Series that are not hard linked outside the root directory
-  # Mandatory to fill out directory parameter above to use this function (root_dir/remote_dir)
-  # This variable should be set to your category name of your completed movies/completed series in qbit. Acceptable variable can be any category you would like to tag if there are no hardlinks found
-  movies-completed-4k:
-  series-completed-4k:
-  movies-completed:
-    # <OPTIONAL> exclude_tags var: Will exclude torrents with any of the following tags when searching through the category.
-    exclude_tags:
-      - Beyond-HD
-      - AnimeBytes
-      - MaM
-    # <OPTIONAL> ignore_root_dir var: Will ignore any hardlinks detected in the same root_dir (Default True).
-    ignore_root_dir: true
-  # Can have additional categories set with separate ratio/seeding times defined.
-  series-completed:
-    # <OPTIONAL> exclude_tags var: Will exclude torrents with any of the following tags when searching through the category.
-    exclude_tags:
-      - Beyond-HD
-      - BroadcasTheNet
-    # <OPTIONAL> ignore_root_dir var: Will ignore any hardlinks detected in the same root_dir (Default True).
-    ignore_root_dir: true
-
-share_limits:
-  # Control how torrent share limits are set depending on the priority of your grouping
-  # Each torrent will be matched with the share limit group with the highest priority that meets the group filter criteria.
-  # Each torrent can only be matched with one share limit group
-  # This variable is mandatory and is a text defining the name of your grouping. This can be any string you want
-  noHL:
-    # <MANDATORY> priority: <int/float> # This is the priority of your grouping. The lower the number the higher the priority
-    priority: 1
-    # <OPTIONAL> include_all_tags: <list> # Filter the group based on one or more tags. Multiple include_all_tags are checked with an AND condition
-    # All tags defined here must be present in the torrent for it to be included in this group
-    include_all_tags:
-      - noHL
-    # <OPTIONAL> include_any_tags: <list> # Filter the group based on one or more tags. Multiple include_any_tags are checked with an OR condition
-    # Any tags defined here must be present in the torrent for it to be included in this group
-    include_any_tags:
-      - noHL
-    # <OPTIONAL> exclude_all_tags: <list> # Filter by excluding one or more tags. Multiple exclude_all_tags are checked with an AND condition
-    # This is useful to combine with the category filter to exclude one or more tags from an entire category
-    # All tags defined here must be present in the torrent for it to be excluded in this group
-    exclude_all_tags:
-      - Beyond-HD
-    # <OPTIONAL> exclude_any_tags: <list> # Filter by excluding one or more tags. Multiple exclude_any_tags are checked with an OR condition
-    # This is useful to combine with the category filter to exclude one or more tags from an entire category
-    # Any tags defined here must be present in the torrent for it to be excluded in this group
-    exclude_any_tags:
-      - Beyond-HD
-    # <OPTIONAL> categories: <list> # Filter by including one or more categories. Multiple categories are checked with an OR condition
-    # Since one torrent can only be associated with a single category, multiple categories are checked with an OR condition
-    categories:
-      - RadarrComplete
-      - SonarrComplete
-    # <OPTIONAL> max_ratio <float>: Will set the torrent Maximum share ratio until torrent is stopped from seeding/uploading and may be cleaned up / removed if the minimums have been met.
-    # Will default to -1 (no limit) if not specified for the group.
-    max_ratio: 5.0
-    # <OPTIONAL> max_seeding_time <str>: Will set the torrent Maximum seeding time until torrent is stopped from seeding/uploading and may be cleaned up / removed if the minimums have been met.
-    # See Some examples of valid time expressions (https://github.com/onegreyonewhite/pytimeparse2)
-    # 32m, 2h32m, 3d2h32m, 1w3d2h32m
-    # Will default to -1 (no limit) if not specified for the group. (Max value of 1 year (525600 minutes))
-    max_seeding_time: 90d
-    # <OPTIONAL> min_seeding_time <str>: Will prevent torrent deletion by cleanup variable if torrent has not yet minimum seeding time (minutes).
-    # This should only be set if you are using this in conjunction with max_seeding_time and max_ratio. If you are not setting a max_ratio, then use max_seeding_time instead.
-    # If the torrent has not yet reached this minimum seeding time, it will change the share limits back to no limits and resume the torrent to continue seeding.
-    # See Some examples of valid time expressions (https://github.com/onegreyonewhite/pytimeparse2)
-    # 32m, 2h32m, 3d2h32m, 1w3d2h32m
-    # Will default to 0 if not specified for the group.
-    min_seeding_time: 30d
-    # <OPTIONAL> last_active <str>: Will prevent torrent deletion by cleanup variable if torrent has been active within the last x minutes.
-    # If the torrent has been active within the last x minutes, it will change the share limits back to no limits and resume the torrent to continue seeding.
-    # See Some examples of valid time expressions (https://github.com/onegreyonewhite/pytimeparse2)
-    # 32m, 2h32m, 3d2h32m, 1w3d2h32m
-    # Will default to 0 if not specified for the group.
-    last_active: 30d
-    # <OPTIONAL> Limit Upload Speed <int>: Will limit the upload speed KiB/s (KiloBytes/second) (`-1` : No Limit)
-    limit_upload_speed: 0
-    # <OPTIONAL> Enable Group Upload Speed <bool>: Upload speed limits are applied at the group level. This will take limit_upload_speed defined and divide it equally among the number of torrents in the group.
-    enable_group_upload_speed: false
-    # <OPTIONAL> cleanup <bool>: WARNING!! Setting this as true Will remove and delete contents of any torrents that satisfies the share limits (max time OR max ratio)
-    cleanup: false
-    # <OPTIONAL> resume_torrent_after_change <bool>: This variable will resume your torrent after changing share limits. Default is true
-    resume_torrent_after_change: true
-    # <OPTIONAL> add_group_to_tag <bool>: This adds your grouping as a tag with a prefix defined in settings . Default is true
-    # Example: A grouping defined as noHL will have a tag set to ~share_limit.noHL (if using the default prefix)
-    add_group_to_tag: true
-    # <OPTIONAL> min_num_seeds <int>: Will prevent torrent deletion by cleanup variable if the number of seeds is less than the value set here.
-    # If the torrent has less number of seeds than the min_num_seeds, the share limits will be changed back to no limits and resume the torrent to continue seeding.
-    # Will default to 0 if not specified for the group.
-    min_num_seeds: 0
-    # <OPTIONAL> custom_tag <str>: Apply a custom tag name for this particular group. **WARNING (This tag MUST be unique as it will be used to determine share limits. Please ensure it does not overlap with any other tags in qbt)**
-    custom_tag: sharelimits_noHL
-  cross-seed:
-    priority: 2
-    include_all_tags:
-      - cross-seed
-    max_seeding_time: 7d
-    cleanup: false
-  PTP:
-    priority: 3
-    include_all_tags:
-      - PassThePopcorn
-    max_ratio: 2.0
-    max_seeding_time: 90d
-    cleanup: false
-  default:
-    priority: 999
-    max_ratio: -1
-    max_seeding_time: -1
-    cleanup: false
-
-recyclebin:
-  # Recycle Bin method of deletion will move files into the recycle bin (Located in /root_dir/.RecycleBin) instead of directly deleting them in qbit
-  # By default the Recycle Bin will be emptied on every run of the qbit_manage script if empty_after_x_days is defined.
-  enabled: true
-  # <OPTIONAL> empty_after_x_days var:
-  # Will automatically remove all files and folders in recycle bin after x days. (Checks every script run)
-  # If this variable is not defined it, the RecycleBin will never be emptied.
-  # WARNING: Setting this variable to 0 will delete all files immediately upon script run!
-  empty_after_x_days: 60
-  # <OPTIONAL> save_torrents var:
-  # If this option is set to true you MUST fill out the torrents_dir in the directory attribute.
-  # This will save a copy of your .torrent and .fastresume file in the recycle bin before deleting it from qbittorrent
-  save_torrents: true
-  # <OPTIONAL> split_by_category var:
-  # This will split the recycle bin folder by the save path defined in the `cat` attribute
-  # and add the base folder name of the recycle bin that was defined in the `recycle_bin` sub-attribute under directory.
-  split_by_category: false
-
-orphaned:
-  # Orphaned files are those in the root_dir download directory that are not referenced by any active torrents.
-  # Will automatically remove all files and folders in orphaned data after x days. (Checks every script run)
-  # If this variable is not defined it, the orphaned data will never be emptied.
-  # WARNING: Setting this variable to 0 will delete all files immediately upon script run!
-  empty_after_x_days: 60
-  # File patterns that will not be considered orphaned files. Handy for generated files that aren't part of the torrent but belong with the torrent's files
-  exclude_patterns:
-    - "**/.DS_Store"
-    - "**/Thumbs.db"
-    - "**/@eaDir"
-    - "/data/torrents/temp/**"
-    - "**/*.!qB"
-    - "**/*_unpackerred"
-  # Set your desired threshold for the maximum number of orphaned files qbm will delete in a single run. (-1 to disable safeguards)
-  # This will help reduce the number of accidental large amount orphaned deletions in a single run
-  # WARNING: Setting this variable to -1 will not safeguard against any deletions
-  max_orphaned_files_to_delete: 50
-
-apprise:
-  # Apprise integration with webhooks
-  # Leave Empty/Blank to disable
-  # Mandatory to fill out the url of your apprise API endpoint
-  api_url: http://apprise-api:8000
-  # Mandatory to fill out the notification url/urls based on the notification services provided by apprise. https://github.com/caronc/apprise/wiki
-  notify_url:
-
-notifiarr:
-  # Notifiarr integration with webhooks
-  # Leave Empty/Blank to disable
-  # Mandatory to fill out API Key
-  apikey: ####################################
-  # <OPTIONAL> Set to a unique value (could be your username on notifiarr for example)
-  instance:
-
-webhooks:
-  # Webhook notifications:
-  # Possible values:
-  # Set value to notifiarr if using notifiarr integration
-  # Set value to apprise if using apprise integration
-  # Set value to a valid webhook URL
-  # Set value to nothing (leave Empty/Blank) to disable
-  error: https://mywebhookurl.com/qbt_manage
-  run_start: notifiarr
-  run_end: apprise
-  function:
-    cross_seed: https://mywebhookurl.com/qbt_manage
-    recheck: notifiarr
-    cat_update: apprise
-    tag_update: notifiarr
-    rem_unregistered: notifiarr
-    tag_tracker_error: notifiarr
-    rem_orphaned: notifiarr
-    tag_nohardlinks: notifiarr
-    share_limits: notifiarr
-    cleanup_dirs: notifiarr
-

pods/mamstack/qbit_manage/qbit_manage.container

@@ -1,24 +0,0 @@
-[Unit]
-Description=qBittorrent manager
-Wants=qbittorrent.service
-After=qbittorrent.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=ghcr.io/stuffanthings/qbit_manage:latest
-ContainerName=qbit_manage
-HostName=qbit_manage
-Pod=MAMstack.pod
-AutoUpdate=registry
-
-Volume=qbit_manage-config:/config
-Volume=/volumes/books/qbittorrent/downloads:/data/torrents
-Volume=qbittorrent-config:/qbittorrent
-
-EnvironmentFile=qbit_manage.env

pods/mamstack/qbit_manage/qbit_manage.env

@@ -1,19 +0,0 @@
-QBT_RUN=false
-QBT_SCHEDULE=1440
-QBT_CONFIG=config.yml
-QBT_LOGFILE=activity.log
-QBT_CROSS_SEED=false
-QBT_RECHECK=false
-QBT_CAT_UPDATE=false
-QBT_TAG_UPDATE=false
-QBT_REM_UNREGISTERED=false
-QBT_REM_ORPHANED=false
-QBT_TAG_TRACKER_ERROR=false
-QBT_TAG_NOHARDLINKS=false
-QBT_SHARE_LIMITS=false
-QBT_SKIP_CLEANUP=false
-QBT_DRY_RUN=false
-QBT_LOG_LEVEL=INFO
-QBT_DIVIDER==
-QBT_WIDTH=100
-

pods/mamstack/qbittorrent-port-forward-gluetun-server/qbittorrent-port-forward-gluetun-server.container

@@ -1,26 +0,0 @@
-[Unit]
-Description=Port forward updater for qbittorrent over gluetun
-After=gluetun.service
-After=qbittorrent.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-# TODO: Replace this with one that has tags
-# Probably have to repack my own
-Image=docker.io/mjmeli/qbittorrent-port-forward-gluetun-server:latest
-ContainerName=qbittorrent-port-forward-gluetun-server
-HostName=qbittorrent-port-forward-gluetun-server
-Pod=MAMstack
-AutoUpdate=registry
-
-Environment=QBT_USERNAME=$qbt_user
-Environment=QBT_ADDR=http://localhost:8080
-Environment=GTN_ADDR=http://localhost:8000
-
-Secret=qbt_pw,type=env,target=QBT_PASSWORD

pods/mamstack/qbittorrent/qbittorrent.container

@@ -1,27 +0,0 @@
-[Unit]
-Description=qbittorrent client
-After=gluetun.service
-BindsTo=gluetun.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/qbittorrentofficial/qbittorrent-nox:$qbt_version
-ContainerName=qbittorrent
-HostName=qbittorrent
-AutoUpdate=registry
-
-Network=
-
-Volume=/volumes/books/qbittorrent/config:/config
-Volume=/volumes/books/qbittorrent/downloads:/downloads
-
-Environment=QBT_LEGAL_NOTICE=confirm
-Environment=QBT_VERSION=$qbt_version
-Environment=TZ=$timezone
-

pods/mamstack/seedboxapi/seedboxapi.container

@@ -1,28 +0,0 @@
-[Unit]
-Description=Update qbittorrent session IP for tracker
-After=qbittorrent.service
-After=gluetun.service
-BindsTo=gluetun.service
-BindsTo=qbittorrent.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-# TODO: Is `latest` safe for this container?
-Image=docker.io/myanonamouse/seedboxapi:latest
-ContainerName=seedboxapi
-HostName=seedboxapi
-Pod=MAMstack.pod
-AutoUpdate=registry
-
-Volume=/volumes/books/seedboxapi/config:/config
-
-Environment=DEBUG=1
-Environment=interval=1
-
-Secret=mam_id,type=env,target=mam_id

quadlets/README.md

@@ -1,3 +1,3 @@
-# Quadlets
+## Quadlets
 
 Quadlets go in `~/.config/containers/systemd`.

quadlets/actual/actual.container

@@ -1,5 +1,5 @@
 [Unit]
-Description=Budget management
+Description=Actual budget management
 
 
 [Service]
@@ -12,6 +12,8 @@ WantedBy=default.target
 [Container]
 Image=docker.io/actualbudget/actual-server:latest
 ContainerName=actual
+
+Network=actual.network
 HostName=actual
 
 Volume=actual-data:/data

quadlets/actual/actual.network

@@ -0,0 +1 @@
+[Network]

quadlets/adguard/adguard.container

@@ -11,8 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/adguard/adguardhome:latest
 ContainerName=adguard
-HostName=adguard
 
+Network=adguard.network
+HostName=adguard
 PublishPort=53:53/tcp
 PublishPort=53:53/udp
 PublishPort=784:784/udp
@@ -21,6 +22,6 @@ PublishPort=3000:3000/tcp
 PublishPort=8844:80/tcp
 PublishPort=8443:443/tcp
 
-Volume=adguard-config:/opt/adguardhome/work:z
-Volume=adguard-work:/opt/adguardhome/conf:z
-Volume=/var/log/AdGuardHome.log:/var/log/AdGuardHome.log:z
+Volume=adguard-config:/opt/adguardhome/work
+Volume=adguard-work:/opt/adguardhome/conf
+Volume=/var/log/AdGuardHome.log:/var/log/AdGuardHome.log

quadlets/adguard/adguard.network

@@ -0,0 +1 @@
+[Network]

quadlets/apprise/apprise.container

@@ -0,0 +1,25 @@
+[Unit]
+Description=Apprise API
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/caronc/apprise:latest
+ContainerName=apprise
+AutoUpdate=registry
+
+Network=apprise.network
+HostName=apprise
+PublishPort=8000:8000
+
+Volume=apprise-config:/config
+Volume=apprise-plugin:/plugin
+Volume=apprise-attahc:/attahc
+
+Environment=APPRISE_STATEFUL_MODE=simple
+Environment=APPRISE_WORKER_COUNT=1

quadlets/apprise/apprise.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Apprise network
+
+[Network]
+NetworkName=apprise
+

quadlets/apprise/apprise.volume

@@ -0,0 +1,5 @@
+[Volume]
+VolumeName=apprise-config
+VolumeName=apprise-plugin
+VolumeName=apprise-attach
+

quadlets/audiobookshelf/audiobookshelf.container

@@ -11,13 +11,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/advplyr/audiobookshelf:latest
 ContainerName=audiobookshelf
-HostName=audiobookshelf
 
+Network=audiobookshelf.network
+HostName=audiobookshelf
 PublishPort=13378:80
 
-Volume=audiobookshelf-config:/metadata:z
-Volume=audiobookshelf-metadata:/config:z
-Volume=audiobookshelf-audiobooks:/audiobooks:z
-
-Environment=AUDIOBOOKSHELF_UID=USER_UID_HERE
-Environment=AUDIOBOOKSHELF_GID=USER_GID_HERE
+Volume=audiobookshelf-config:/metadata
+Volume=audiobookshelf-metadata:/config
+Volume=audiobookshelf-audiobooks:/audiobooks

quadlets/audiobookshelf/audiobookshelf.network

@@ -0,0 +1 @@
+[Network]

quadlets/betanin/betanin.container

@@ -0,0 +1,24 @@
+[Unit]
+Description=betanin
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/sentriz/betanin
+ContainerName=betanin
+AutoUpdate=registry
+
+Network=betanin.network
+HostName=betanin
+PublishPort=9393:9393
+
+Volume=betanin-data:/b/.local/share/betanin
+Volume=betanin-config:/b/.local/share/config
+Volume=betanin-beets:/b/.local/share/beets
+Volume=/path/to/music:/music
+Volume=/path/to/downloads:/downloads

quadlets/betanin/betanin.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=betanin network
+
+[Network]
+NetworkName=betanin
+

quadlets/betanin/betanin.volume

@@ -0,0 +1,5 @@
+[Volume]
+VolumeName=betanin-data
+VolumeName=betanin-config
+VolumeName=betanin-beets
+

quadlets/blinko/blinko-db.container

@@ -13,6 +13,7 @@ WantedBy=default.target
 Image=docker.io/postgres
 ContainerName=blinko-db
 
+Network=blinko.network
 HostName=blinko-db
 PublishPort=5435:5432
 

quadlets/blinko/blinko.container

@@ -14,6 +14,7 @@ WantedBy=default.target
 Image=docker.io/blinkospace/blinko
 ContainerName=blinko
 
+Network=blinko.network
 HostName=blinko
 PublishPort=1111:1111
 

quadlets/blinko/blinko.network

@@ -0,0 +1 @@
+[Network]

quadlets/blinko/data.volume

@@ -1,3 +1,4 @@
 [Volume]
 VolumeName=blinko-data
+VolumeName=blinko-db
 

quadlets/blinko/db.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=blinko-db
-

quadlets/caddy/caddy.container

@@ -1,7 +1,6 @@
 [Unit]
 Description=Reverse proxy
 
-
 [Service]
 Restart=on-failure
 
@@ -11,8 +10,9 @@ WantedBy=default.target
 [Container]
 Image=caddy.build
 ContainerName=caddy
-HostName=caddy
 
+Network=reverse-proxy.network
+HostName=caddy
 PublishPort=80:80
 PublishPort=443:443
 PublishPort=443:443/udp

quadlets/caddy/caddy.volume

@@ -1,2 +1,3 @@
 [Volume]
 VolumeName=caddy-config
+VolumeName=caddy-data

quadlets/caddy/config.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=caddy-config

quadlets/caddy/data.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=caddy-data

quadlets/caddy/reverse-proxy.network

@@ -0,0 +1 @@
+[Network]

quadlets/calibre/calibre.container

@@ -11,8 +11,9 @@ WantedBy=default.target
 [Container]
 Image=lscr.io/linuxserver/calibre:latest
 ContainerName=calibre
-HostName=calibre
 
+Network=calibre.network
+HostName=calibre
 PublishPort=8080
 
 Volume=calibre-config:/config

quadlets/calibre/calibre.network

@@ -0,0 +1 @@
+[Network]

quadlets/chartdb/chartdb.container

@@ -12,6 +12,7 @@ WantedBy=default.target
 Image=ghcr.io/chartdb/chartdb
 ContainerName=chartdb
 
+Network=chartdb.network
 HostName=chartdb
 PublishPort=8080:80
 

quadlets/chartdb/chartdb.network

@@ -0,0 +1 @@
+[Network]

quadlets/checkmate/checkmate-mongo.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Checkmate mongodb
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_database_mongo:latest
+ContainerName=checkmate-mongodb
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate-mongodb
+PublishPort=27017:27017
+
+Volume=checkmate-mongodb:/data/db
+
+Exec=mongod --quiet

quadlets/checkmate/checkmate-redis.container

@@ -0,0 +1,20 @@
+[Unit]
+Description=Checkmate Redis
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_redis:latest
+ContainerName=checkmate-redis
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate-redis
+PublishPort=6379:6379
+
+Volume=checkmate-redis:/data

quadlets/checkmate/checkmate-server.container

@@ -0,0 +1,27 @@
+[Unit]
+Description=Checkmate server
+Requires=checkmate-mongodb.service
+Requires=checkmate-redis.service
+After=checkmate-mongodb.service
+After=checkmate-redis.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_server:latest
+ContainerName=checkmate-server
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate-server
+PublishPort=5000:5000
+
+Volume=%t/podman/podman.sock:/run/user/1000/podman/podman.sock:ro
+
+Environment=REDIS_HOST=checkmate-redis
+Environment=DB_CONNECTION_STRING=mongodb://checkmate-mongodb:27017/uptime_db

quadlets/checkmate/checkmate.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Checkmate
+Requires=checkmate-server.service
+After=checkmate-server.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/bluewaveuptime/uptime_client:latest
+ContainerName=checkmate
+AutoUpdate=registry
+
+Network=checkmate.network
+HostName=checkmate
+PublishPort=80:80
+PublishPort=443:443
+
+Environment=UPTIME_APP_API_BASE_URL=http://localhost:5000/api/v1

quadlets/checkmate/checkmate.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Checkmate network
+
+[Network]
+NetworkName=checkmate
+

quadlets/checkmate/checkmate.volume

@@ -0,0 +1,4 @@
+[Volume]
+VolumeName=checkmate-mongodb
+VolumeName=checkmate-redis
+

quadlets/dashdot/dashdot-nvidia.container

@@ -13,7 +13,7 @@ Image=docker.io/mauricenino/dashdot:nvidia
 ContainerName=dashdot-nvidia
 AutoUpdate=registry
 
-Network=
+Network=dashdot.network
 HostName=dashdot
 PublishPort=3001:3001
 

quadlets/dashdot/dashdot.container

@@ -13,7 +13,7 @@ Image=docker.io/mauricenino/dashdot
 ContainerName=dashdot
 AutoUpdate=registry
 
-Network=
+Network=dashdot.network
 HostName=dashdot
 PublishPort=3001:3001
 

quadlets/dashdot/dashdot.network

@@ -0,0 +1 @@
+[Network]

quadlets/dashy/dashy.container

@@ -12,10 +12,10 @@ WantedBy=default.target
 [Container]
 Image=docker.io/lissy93/dashy:$dashy_version
 ContainerName=dashy
-HostName=dashy
 AutoUpdate=registry
 
-Network=
+Network=dashy.network
+HostName=dashy
 
 Volume=./user-data:/app/user-data
 

quadlets/dashy/dashy.network

@@ -0,0 +1 @@
+[Network]

quadlets/filebrowser/filebrowser.container

@@ -12,6 +12,9 @@ WantedBy=multi-user.target default.target
 Image=docker.io/hurlenko/filebrowser:latest
 ContainerName=filebrowser
 
+Network=filebrowser.network
+Hostname=filebrowser
+
 Volume=/path/to/what/you/want/to/share:/data:z
 Volume=fb-config:/config:z
 Volume=fb-branding:/branding:z

quadlets/filebrowser/filebrowser.network

@@ -0,0 +1 @@
+[Network]

quadlets/filestash/filestash-wopi.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Filestash wopi
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/collabora/code:24.04.10.2.1
+ContainerName=filestash-wopi
+AutoUpdate=registry
+
+Network=filestash.network
+HostName=filestash-wopi
+PublishPort=9980:9980
+
+Environment=extra_params=--o:ssl.enable=false
+Environment=aliasgroup1="https://.*:443"
+
+Exec=bash -c '/start-collabora-online.sh cool'

quadlets/filestash/filestash.container

@@ -0,0 +1,28 @@
+[Unit]
+Description=Filestash
+Wants=filestash-wopi.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/machines/filestash:latest
+ContainerName=filestash
+AutoUpdate=registry
+
+Network=filestash.network
+HostName=filestash
+PublishPort=8334:8334
+
+Volume=filestash:/app/data/state
+
+Environment=APPLICATION_URL=https://filestash.example.com
+Environment=CANARY=true
+Environment=OFFICE_URL=http://filestash-wopi:9980
+Environment=OFFICE_FILESTASH_URL=http://filestash:8334
+Environment=OFFICE_REWRITE_URL=http://127.0.0.1:9980
+

quadlets/filestash/filestash.network

@@ -0,0 +1 @@
+[Network]

quadlets/forgejo/forgejo-data.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=forgejo-data

quadlets/forgejo/forgejo.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Forgejo
+After=
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=codeberg.org/forgejo/forgejo:10
+ContainerName=forgejo
+AutoUpdate=registry
+
+Network=forgejo.network
+HostName=forgejo
+PublishPort=222:22
+PublishPort=3000:3000
+
+Volume=forgejo-data:/data

quadlets/forgejo/forgejo.network

@@ -0,0 +1 @@
+[Network]

quadlets/foundryvtt/foundryvtt.container

@@ -11,19 +11,19 @@ WantedBy=default.target
 [Container]
 Image=docker.io/felddy/foundryvtt:release
 ContainerName=foundryvtt
-HostName=foundryvtt
+AutoUpdate=registry
 
+Network=foundryvtt.network
+HostName=foundryvtt
 Volume=foundryvtt-data:/data
 
 PublishPort=30000:30000
 
-Environment=TIMEZONE=
-Environment=FOUNDRY_UID=
-Environment=FOUNDRY_GID=
-Environment=FOUNDRY_PASSWORD=
+Environment=TIMEZONE=Etc/UTC
+Secret=foundry-password,type=env,target=FOUNDRY_PASSWORD
 Environment=FOUNDRY_USERNAME=
-Environment=FOUNDRY_ADMIN_KEY=
-Environment=FOUNDRY_LICENSE_KEY=XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
-Environment=FOUNDRY_HOT_RELOAD=true
+Secret=foundry-admin-key,type=env,target=FOUNDRY_ADMIN_KEY
+Secret=foundry-license-key,type=env,target=FOUNDRY_LICENSE_KEY=XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
+Environment=FOUNDRY_HOT_RELOAD=false
 Environment=CONTAINER_PRESERVE_CONFIG=true
 Environment=CONTAINER_CACHE="/data/container_cache"

quadlets/foundryvtt/foundryvtt.network

@@ -0,0 +1 @@
+[Network]

quadlets/freshrss/fivefilters.container

@@ -11,9 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/heussd/fivefilters-full-text-rss:latest
 ContainerName=fivefilters
-HostName=fivefilters
 
 Network=freshrss.network
+HostName=fivefilters
 PublishPort=5000:80
 
-Environment=FTR_ADMIN_PASSWORD=XXXXXXXX
+Secret=ftr-admin-password,type=env,target=FTR_ADMIN_PASSWORD

quadlets/freshrss/freshrss.container

@@ -1,5 +1,6 @@
 [Unit]
 Description=FreshRSS Quadlet
+Requires=fivefilters.service
 After=fivefilters.service
 
 [Service]
@@ -12,13 +13,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/linuxserver/freshrss:latest
 ContainerName=freshrss
-HostName=freshrss
 
 Network=freshrss.network
+HostName=freshrss
 PublishPort=4422:80
 
-Volume=freshrss-config:/config:z
+Volume=freshrss-config:/config
 
-Environment=PUID=1001
-Environment=PGID=1001
-Environment=TZ=Europe/London
+Environment=TZ=Etc/UTC

quadlets/freshrss/freshrss.network

@@ -1,9 +1 @@
 [Network]
-Subnet=10.10.10.0/24
-Gateway=10.10.10.1
-Label=app=freshrss
-Driver=pasta
-
-
-
-

quadlets/gaseous/gaseous-mariadb.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Gaseous MariaDB
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/mariadb:latest
+ContainerName=gaseous-mariadb
+AutoUpdate=registry
+
+Network=gaseous.network
+HostName=gaseous-mariadb
+
+Volume=gaseous-mariadb:/var/lib/mysql
+
+Environment=MARIADB_ROOT_PASSWORD=gaseous
+Environment=MARIADB_USER=gaseous
+Environment=MARIADB_PASSWORD=gaseous

quadlets/gaseous/gaseous.container

@@ -0,0 +1,29 @@
+[Unit]
+Description=Gaseous ROM manager
+Requires=gaseous-mariadb.service
+After=gaseous-mariadb.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/gaseousgames/gaseousserver:latest
+ContainerName=gaseous
+AutoUpdate=registry
+
+Network=gaseous.network
+HostName=gaseous
+PublishPort=5198:80
+
+Volume=gaseous:/root/.gaseous-server
+
+Environment=TZ=Etc/UTC
+Environment=dbhost=gsdb
+Environment=dbuser=root
+Environment=dbpass=gaseous
+Environment=igdbclientid=
+Environment=igdbclientsecret=

quadlets/gaseous/gaseous.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Gaseous ROMs network
+
+[Network]
+NetworkName=gaseous
+

quadlets/gaseous/gaseous.volume

@@ -0,0 +1,4 @@
+[Volume]
+VolumeName=gaseous
+VolumeName=gaseous-mariadb
+

quadlets/glance/config/glance.yml

@@ -0,0 +1,12 @@
+server:
+  assets-path: /app/assets
+
+theme:
+  # Note: assets are cached by the browser, changes to the CSS file
+  # will not be reflected until the browser cache is cleared (Ctrl+F5)
+  custom-css-file: /assets/user.css
+
+pages:
+  # It's not necessary to create a new file for each page and include it, you can simply
+  # put its contents here, though multiple pages are easier to manage when separated
+  !include: home.yml

quadlets/glance/config/home.yml

@@ -0,0 +1,88 @@
+- name: Home
+  # Optionally, if you only have a single page you can hide the desktop navigation for a cleaner look
+  # hide-desktop-navigation: true
+  columns:
+    - size: small
+      widgets:
+        - type: calendar
+          first-day-of-week: monday
+
+        - type: rss
+          limit: 10
+          collapse-after: 3
+          cache: 12h
+          feeds:
+            - url: https://selfh.st/rss/
+              title: selfh.st
+            - url: https://ciechanow.ski/atom.xml
+            - url: https://www.joshwcomeau.com/rss.xml
+              title: Josh Comeau
+            - url: https://samwho.dev/rss.xml
+            - url: https://ishadeed.com/feed.xml
+              title: Ahmad Shadeed
+
+        - type: twitch-channels
+          channels:
+            - theprimeagen
+            - j_blow
+            - piratesoftware
+            - cohhcarnage
+            - christitustech
+            - EJ_SA
+
+    - size: full
+      widgets:
+        - type: group
+          widgets:
+            - type: hacker-news
+            - type: lobsters
+
+        - type: videos
+          channels:
+            - UCXuqSBlHAE6Xw-yeJA0Tunw # Linus Tech Tips
+            - UCR-DXc1voovS8nhAvccRZhg # Jeff Geerling
+            - UCsBjURrPoezykLs9EqgamOA # Fireship
+            - UCBJycsmduvYEL83R_U4JriQ # Marques Brownlee
+            - UCHnyfMqiRRG1u-2MsSQLbXA # Veritasium
+
+        - type: group
+          widgets:
+            - type: reddit
+              subreddit: technology
+              show-thumbnails: true
+            - type: reddit
+              subreddit: selfhosted
+              show-thumbnails: true
+
+    - size: small
+      widgets:
+        - type: weather
+          location: London, United Kingdom
+          units: metric # alternatively "imperial"
+          hour-format: 12h # alternatively "24h"
+          # Optionally hide the location from being displayed in the widget
+          # hide-location: true
+
+        - type: markets
+          markets:
+            - symbol: SPY
+              name: S&P 500
+            - symbol: BTC-USD
+              name: Bitcoin
+            - symbol: NVDA
+              name: NVIDIA
+            - symbol: AAPL
+              name: Apple
+            - symbol: MSFT
+              name: Microsoft
+
+        - type: releases
+          cache: 1d
+          # Without authentication the Github API allows for up to 60 requests per hour. You can create a
+          # read-only token from your Github account settings and use it here to increase the limit.
+          # token: ...
+          repositories:
+            - glanceapp/glance
+            - go-gitea/gitea
+            - immich-app/immich
+            - syncthing/syncthing

quadlets/glance/glance.container

@@ -0,0 +1,21 @@
+[Unit]
+Description=Glance dashboard
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/glanceapp/glance
+ContainerName=glance
+AutoUpdate=registry
+
+Network=glance.network
+HostName=glance
+PublishPort=8080:8080
+
+Volume=glance-config:/app/config
+

quadlets/glance/glance.env

@@ -0,0 +1,3 @@
+# Variables defined here will be available to use anywhere in the config with the syntax ${MY_SECRET_TOKEN}
+# Note: making changes to this file requires re-running docker compose up
+MY_SECRET_TOKEN=123456

quadlets/glance/glance.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=glance-config

quadlets/glances/glances.container

@@ -11,9 +11,11 @@ WantedBy=default.target
 [Container]
 Image=docker.io/nicolargo/glances:$version_tag
 ContainerName=glances
-HostName=glances
 AutoUpdate=registry
 
+Network=glances.network
+HostName=glances
+
 Volume=%t/podman/podman.sock:/run/user/1000/podman/podman.sock:ro
 Volume=/etc/os-release:/etc/os-release:ro
 Volume=./glances.conf:/glances/conf/glances.conf

quadlets/glances/glances.network

@@ -0,0 +1 @@
+[Network]

quadlets/gluetun/gluetun.container

@@ -11,7 +11,7 @@ TimeoutStartSec=900
 WantedBy=default.target
 
 [Container]
-Image=docker.io/qmcgaw/gluetun:$gluetun_version
+Image=docker.io/qmcgaw/gluetun
 ContainerName=gluetun
 HostName=gluetun
 AutoUpdate=registry
@@ -20,7 +20,7 @@ AddDevice=/dev/net/tun:/dev/net/tun
 
 Volume=./config.toml:/gluetun/auth/config.toml
 
-Environment=TZ=$timezone
+Environment=TZ=Etc/UTC
 Environment=UPDATER_PERIOD=24h
 Environment=UPDATER_VPN_SERVICE_PROVIDERS=protonvpn
 Environment=VPN_SERVICE_PROVIDER=protonvpn

quadlets/graphite/graphite.container

@@ -0,0 +1,26 @@
+[Unit]
+Description=Graphite monitoring
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/graphiteapp/graphite-statsd
+ContainerName=graphite
+AutoUpdate=registry
+
+Network=graphite.network
+HostName=graphite
+PublishPort=80:80
+PublishPort=2003-2004:2003-2004
+PublishPort=2023-2024:2023-2024
+PublishPort=8125:8125/udp
+PublishPort=8125:8125
+
+Volume=graphite-conf:/opt/graphite/conf
+
+EnvironmentFile=graphite.env

quadlets/graphite/graphite.env

@@ -0,0 +1 @@
+EXAMPLE=value

quadlets/graphite/graphite.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Graphite network
+
+[Network]
+NetworkName=graphite
+

quadlets/graphite/graphite.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=graphite-conf
+

quadlets/graylog/graylog-datanode.container

@@ -0,0 +1,28 @@
+[Unit]
+Description=Graylog datanode
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/graylog/graylog-datanode:6.1
+ContainerName=graylog-datanode
+AutoUpdate=registry
+
+Network=graylog.network
+HostName=graylog-datanode
+PublishPort=8999:8999
+PublishPort=9200:9200
+PublishPort=9300:9300
+
+Volume=graylog-datanode:/var/lib/graylog-datanode
+
+Environment=GRAYLOG_DATANODE_ID_FILE=/var/lib/graylog-datanode/node-id
+Environment=GRAYLOG_DATANODE_MONGODB_URI=mongodb://graylog-db:27017/graylog
+
+Secret=graylog-password-secret,type=env,target=GRAYLOG_DATANODE_PASSWORD_SECRET
+

quadlets/graylog/graylog-db.container

@@ -0,0 +1,21 @@
+[Unit]
+Description=Graylog MongoDB
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/mongo:6.0
+ContainerName=graylog-db
+AutoUpdate=registry
+
+Network=graylog.network
+HostName=graylog-db
+
+Volume=graylog-db-data:/data/db
+Volume=graylog-db-config:/data/configdb
+

quadlets/graylog/graylog.container

@@ -0,0 +1,45 @@
+[Unit]
+Description=Graylog
+Wants=graylog-db
+Wants=graylog-database
+After=graylog-db
+After=graylog-database
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/graylog:6.1
+ContainerName=graylog
+AutoUpdate=registry
+
+Network=graylog.network
+HostName=graylog
+PublishPort=5044:5044/tcp
+PublishPort=5140:5140/udp
+PublishPort=5140:5140/tcp
+PublishPort=5555:5555/tcp
+PublishPort=5555:5555/udp
+PublishPort=9000:9000/tcp
+PublishPort=12201:12201/tcp
+PublishPort=12201:12201/udp
+PublishPort=13301:13301/tcp
+PublishPort=13302:13302/tcp
+
+Volume=graylog-data:/usr/share/graylog/data/data
+
+Environment=GRAYLOG_NODE_ID_FILE=/usr/share/graylog/data/data/node-id
+Environment=GRAYLOG_HTTP_BIND_ADDRESS=0.0.0.0:9000
+Environment=GRAYLOG_HTTP_EXTERNAL_URI=http://localhost:9000/
+Environment=GRAYLOG_MONGODB_URI=mongodb://graylog-db:27017/graylog
+
+Secret=graylog-password-secret,type=env,target=GRAYLOG_PASSWORD_SECRET
+Secret=graylog-root-password-sha2,type=env,target=GRAYLOG_ROOT_PASSWORD_SHA2
+
+Entrypoint=/usr/bin/tini
+Exec=-- /docker-entrypoint.sh
+

quadlets/graylog/graylog.network

@@ -0,0 +1,7 @@
+[Unit]
+Description=Graylog network
+
+[Network]
+NetworkName=graylog
+Subnet=172.25.1.0/29
+Gateway=172.25.0.1

quadlets/grocy/grocy.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Grocy grocery management
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=lscr.io/linuxserver/grocy
+ContainerName=grocy
+AutoUpdate=registry
+
+Network=grocy.network
+HostName=grocy
+PublishPort=9283:80
+
+Volume=grocy-config:/config
+
+Environment=TZ=Etc/UTC

quadlets/grocy/grocy.network

@@ -0,0 +1 @@
+[Network]

quadlets/grocy/grocy.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=grocy-config
+

quadlets/healthchecks/healthchecks-postgres.container

@@ -0,0 +1,26 @@
+[Unit]
+Description=Healthchecks postgres
+Requires=healthchecks-postgres.service
+After=healthchecks-postgres.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/postgres:16
+ContainerName=healthchecks-postgres
+AutoUpdate=registry
+
+Network=healthchecks.network
+HostName=healthchecks-postgres
+PublishPort=8000:8000
+
+Volume=healthchecks-postgres:/var/lib/postgresql/data
+
+Environment=POSTGRES_DB=healthchecks
+
+Secret=healthchecks-postgres-password,type=env,target=POSTGRES_PASSWORD

quadlets/healthchecks/healthchecks.container

@@ -0,0 +1,24 @@
+[Unit]
+Description=Healthchecks
+Requires=healthchecks-postgres.service
+After=healthchecks-postgres.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/healthchecks:latest
+ContainerName=healthchecks
+AutoUpdate=registry
+
+Network=healthchecks.network
+HostName=healthchecks
+PublishPort=8000:8000
+
+EnvironmentFile=healthchecks.env
+
+Exec=uwsgi /opt/healthchecks/docker/uwsgi.ini

quadlets/healthchecks/healthchecks.env

@@ -0,0 +1,80 @@
+ALLOWED_HOSTS=localhost
+APPRISE_ENABLED=False
+DB=postgres
+DB_CONN_MAX_AGE=0
+DB_HOST=db
+DB_NAME=hc
+# Use Secret=...
+# DB_PASSWORD=fixme-postgres-password
+DB_PORT=5432
+DB_SSLMODE=prefer
+DB_TARGET_SESSION_ATTRS=read-write
+DB_USER=postgres
+DEBUG=False
+DEFAULT_FROM_EMAIL=healthchecks@example.org
+DISCORD_CLIENT_ID=
+DISCORD_CLIENT_SECRET=
+EMAIL_HOST=
+EMAIL_HOST_PASSWORD=
+EMAIL_HOST_USER=
+EMAIL_PORT=587
+EMAIL_USE_TLS=True
+EMAIL_USE_VERIFICATION=True
+INTEGRATIONS_ALLOW_PRIVATE_IPS=False
+LINENOTIFY_CLIENT_ID=
+LINENOTIFY_CLIENT_SECRET=
+MASTER_BADGE_LABEL=Mychecks
+MATRIX_ACCESS_TOKEN=
+MATRIX_HOMESERVER=
+MATRIX_USER_ID=
+MATTERMOST_ENABLED=True
+MSTEAMS_ENABLED=True
+OPSGENIE_ENABLED=True
+PAGERTREE_ENABLED=True
+PD_APP_ID=
+PD_ENABLED=True
+PING_BODY_LIMIT=10000
+PING_EMAIL_DOMAIN=localhost
+PING_ENDPOINT=http://localhost:8000/ping/
+PROMETHEUS_ENABLED=True
+PUSHBULLET_CLIENT_ID=
+PUSHBULLET_CLIENT_SECRET=
+PUSHOVER_API_TOKEN=
+PUSHOVER_EMERGENCY_EXPIRATION=86400
+PUSHOVER_EMERGENCY_RETRY_DELAY=300
+PUSHOVER_SUBSCRIPTION_URL=
+REGISTRATION_OPEN=True
+REMOTE_USER_HEADER=
+ROCKETCHAT_ENABLED=True
+RP_ID=
+S3_ACCESS_KEY=
+S3_BUCKET=
+S3_ENDPOINT=
+S3_REGION=
+S3_SECRET_KEY=
+S3_TIMEOUT=60
+S3_SECURE=True
+SECRET_KEY=---
+SHELL_ENABLED=False
+SIGNAL_CLI_SOCKET=
+SITE_LOGO_URL=
+SITE_NAME=Mychecks
+SITE_ROOT=http://localhost:8000
+SLACK_CLIENT_ID=
+SLACK_CLIENT_SECRET=
+SLACK_ENABLED=True
+# SMTPD_PORT=
+SPIKE_ENABLED=True
+TELEGRAM_BOT_NAME=ExampleBot
+TELEGRAM_TOKEN=
+TRELLO_APP_KEY=
+TWILIO_ACCOUNT=
+TWILIO_AUTH=
+TWILIO_FROM=
+TWILIO_USE_WHATSAPP=False
+USE_PAYMENTS=False
+VICTOROPS_ENABLED=True
+WEBHOOKS_ENABLED=True
+WHATSAPP_DOWN_CONTENT_SID=
+WHATSAPP_UP_CONTENT_SID=
+ZULIP_ENABLED=True

quadlets/healthchecks/healthchecks.network

@@ -0,0 +1,6 @@
+[Unit]
+Description=Healthchecks network
+
+[Network]
+NetworkName=healthchecks
+

quadlets/healthchecks/healthchecks.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=healthchecks-postgres
+

quadlets/hoarder/hoarder-chrome.container

@@ -11,6 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/zenika/alpine-chrome
 ContainerName=hoarder-chrome
+AutoUpdate=registry
+
+Network=hoarder.network
 HostName=hoarder-chrome
 
 Exec=--no-sandbox --disable-gpu --disable-dev-shm-usage --remote-debugging-address=0.0.0.0 --remote-debugging-port=9222 --hide-scrollbars