move mamstack to branch

README.md

@@ -26,9 +26,7 @@ under the same user permissions as yourself, from within your own `$HOME`.
 > [!NOTE]
 > It is recommended to create another user specifically for running these
 > containers, but it is not strictly required. Details for setting up a system
-> from scratch are located in [AlmaLinux.md](./AlmaLinux.md) or
+> from scratch are located in [AlmaLinux.md](./AlmaLinux.md).
-> [Ubuntu.md](./Ubuntu.md
-)
 
 ## Getting started
 
@@ -142,76 +140,75 @@ Navigate to `http://localhost:9000` in your browser.
 
 I'm working on new quadlets every day. This is a list of all of the containers
 that I intend to add to this repository. It is still growing, and I welcome
-[pull requests](https://git.mcgee.red/redbeardymcgee/podbox/pulls).
+[pull requests](https://github.com/redbeardymcgee/podbox/pulls).
 
 - [x] [Actual](https://actualbudget.github.io/docs/)
 - [x] [AdGuard](https://adguard.com)
-- [x] [Apprise](https://github.com/caronc/apprise)
+- [ ] [Apprise](https://github.com/caronc/apprise)
 - [ ] [ArgoCD](https://github.com/argoproj/argo-cd)
 - [x] [Audiobookshelf](https://www.audiobookshelf.org/)
 - [ ] [Authelia](https://www.authelia.com/)
 - [ ] [Authentik](https://goauthentik.io/)
-- [x] [betanin](https://github.com/sentriz/betanin)
+- [ ] [betanin](https://github.com/sentriz/betanin)
+- [ ] [Bigcapital](https://bigcapital.app/)
+- [ ] [Bitwarden](https://bitwarden.com/)
 - [x] [Blinko](https://blinko.mintlify.app/introduction)
 - [x] [booktree](https://github.com/myxdvz/booktree)
 - [x] [Caddy](https://caddyserver.com) # Socket activation requires newer `caddy` and `podman`
 - [x] [Calibre](https://github.com/linuxserver/docker-calibre)
 - [x] [Calibre-web](https://github.com/janeczku/calibre-web)
 - [x] [ChartDB](https://chartdb.io/)
-- [x] [Checkmate](https://github.com/bluewave-labs/checkmate)
+- [ ] [Checkmate](https://github.com/bluewave-labs/checkmate)
+- [ ] [Code::Stats](https://codestats.net/)
 - [x] [dash.](https://getdashdot.com/)
 - [x] [Dashy](https://dashy.to)
+- [ ] [Dittofeed](https://www.dittofeed.com)
 - [ ] [Duplicacy](https://duplicacy.com/)
 - [ ] [Duplicati](https://duplicati.com/)
+- [ ] [EmulatorJS](https://emulatorjs.org/)
 - [x] [Filebrowser](https://filebrowser.org/)
-- [x] [Filestash](https://filestash.app)
 - [x] [FiveFilters](https://www.fivefilters.org/)
-- [x] [Forgejo](https://forgejo.org)
 - [x] [Foundry VTT](https://foundryvtt.com)
 - [x] [FreshRSS](https://www.freshrss.org/)
-- [x] [Gaseous](https://github.com/gaseous-project/gaseous-server)
+- [ ] [Gaseous](https://github.com/gaseous-project/gaseous-server)
-- [x] [Glance](https://github.com/glanceapp/glance)
 - [x] [Glances](https://nicolargo.github.io/glances/)
-- [x] [glueforward](https://github.com/GeoffreyCoulaud/glueforward)
+- [ ] [glueforward](https://github.com/GeoffreyCoulaud/glueforward)
 - [x] [gluetun](https://github.com/qdm12/gluetun)
-- [x] [Graphite](https://graphiteapp.org/)
+- [ ] [Graphite](https://graphiteapp.org/)
-- [x] [Graylog](https://graylog.org)
+- [ ] [Healthchecks](https://healthchecks.io/)
-- [x] [Healthchecks](https://healthchecks.io/)
 - [x] [hoarder](https://hoarder.app/)
 - [x] [Homarr](https://homarr.dev/)
-- [x] [Homepage](https://gethomepage.dev/)
+- [ ] [Homepage](https://gethomepage.dev/)
 - [ ] [Immich](https://immich.app/)
 - [x] [IT-Tools](https://it-tools.tech/)
 - [x] [Joplin](https://joplinapp.org/)
 - [x] [Kavita](https://kavitareader.com)
 - [ ] [Keycloak](https://www.keycloak.org)
 - [x] [Kibitzr](https://kibitzr.github.io/)
-- [x] [Komga](https://komga.org/)
+- [ ] [Komga](https://komga.org/)
-- [x] [LazyLibrarian](https://lazylibrarian.gitlab.io/)
+- [ ] [LazyLibrarian](https://lazylibrarian.gitlab.io/)
-- [x] [Leantime](https://leantime.io)
-- [x] [LibreNMS](https://librenms.org)
 - [x] [librespeed](https://librespeed.org)
 - [x] [Linkwarden](https://linkwarden.app/)
 - [x] [Lounge](https://thelounge.chat)
 - [x] [Matrix](https://matrix.org/)
-- [x] [Maxun](https://github.com/getmaxun/maxun)
+- [ ] [Maxun](https://github.com/getmaxun/maxun)
 - [x] [Mealie](https://mealie.io/)
 - [x] [Memos](https://usememos.com)
-- [x] [Miniflux](https://miniflux.app/)
+- [ ] [Miniflux](https://miniflux.app/)
 - [x] [MinIO](https://min.io)
-- [x] [n8n](https://n8n.io/)
+- [ ] [n8n](https://n8n.io/)
 - [x] [Nebula](https://github.com/slackhq/nebula)
 - [ ] [Netbird](https://netbird.io/)
 - [x] [netboot.xyz](https://netboot.xyz)
 - [x] [Netdata](https://www.netdata.cloud/)
 - [ ] [Note Mark](https://github.com/enchant97/note-mark)
 - [ ] [Notesnook](https://github.com/streetwriters/notesnook-sync-server)
-- [x] [OpenObserve](https://openobserve.ai)
+- [ ] [ntop](https://www.ntop.org/)
-- [x] [OpenSpeedTest](https://openspeedtest.com)
+- [ ] [OpenNMS](https://www.opennms.org/)
-- [x] [PiHole](https://pi-hole.net/)
+- [ ] [PiHole](https://pi-hole.net/)
-- [x] [Pocket ID](https://github.com/stonith404/pocket-id)
+- [ ] [Pocket ID](https://github.com/stonith404/pocket-id)
 - [ ] [Pod Arcade](https://www.pod-arcade.com/)
-- [x] [Postiz](https://postiz.com/)
+- [ ] [Postiz](https://postiz.com/)
 - [x] [Prometheus](https://prometheus.io)
 - [x] [protonmail-bridge-docker](https://github.com/shenxn/protonmail-bridge-docker)
 - [x] [Prowlarr](https://prowlarr.com)
@@ -219,23 +216,21 @@ that I intend to add to this repository. It is still growing, and I welcome
 - [x] [qBittorrent](https://qbittorrent.org)
 - [x] [qbittorrent-port-forward-gluetun-server](https://github.com/mjmeli/qbittorrent-port-forward-gluetun-server)
 - [x] [Radarr](https://radarr.video)
-- [x] [RomM](https://romm.app/)
+- [ ] [RomM](https://romm.app/)
 - [ ] [Seafile](https://www.seafile.com)
 - [ ] [Shiori](https://github.com/go-shiori/shiori)
 - [ ] [SimpleX](https://simplex.chat/)
 - [x] [Snowflake](https://snowflake.torproject.org/)
 - [ ] [solidtime](https://docs.solidtime.io/self-hosting/intro)
 - [x] [Sonarr](https://sonarr.tv)
-- [x] [Speedtest Tracker](https://speedtest-tracker.dev)
 - [x] [Stirling PDF](https://stirlingpdf.io)
-- [x] [syslog-ng](https://syslog-ng.github.io/)
+- [ ] [Supervisord](http://supervisord.org/)
 - [x] [Tandoor](https://github.com/TandoorRecipes/recipes)
 - [x] [traggo](https://traggo.net)
-- [x] [Termix](https://github.com/LukeGus/Termix)
 - [ ] [Ubooquity](https://vaemendis.net/ubooquity/)
 - [ ] [Umami](https://umami.is/)
 - [ ] [UrBackup](https://urbackup.org)
-- [x] [Vikunja](https://vikunja.io)
+- [ ] [Vikunja](https://vikunja.io)
 - [ ] [Wazuh](https://wazuh.com/)
 - [ ] [wiki.js](https://js.wiki)
 - [ ] [wger](https://wger.de/)

Ubuntu.md

@@ -137,42 +137,3 @@ podman system migrate
 systemctl --user enable --now podman-auto-update
 exit
 ```
-
-## Podman fails autostart
-
-In Podman < 5.3 containers may fail to autostart because user level units cannot depend on system level units (in this case `network-online.target`)
-
-Podman >= 5.3 should ship with a workaround user unit that can be used `podman-user-wait-network-online.service`, use that instead of the fix below.  
-
-See [this github issue](https://github.com/containers/podman/issues/22197) for workarounds, the workaround below is what worked for me. The google.com ping can be replaced with your preferred (reachable) ip/host
-
-To fix this, create the following
-
-```bash
-# ~/.config/systemd/user/network-online.service
-[Unit]
-Description=User-level proxy to system-level network-online.target
-
-[Service]
-Type=oneshot
-ExecStart=sh -c 'until ping -c 1 google.com; do sleep 5; done'
-
-[Install]
-WantedBy=default.target
-```
-```bash
-# ~/.config/systemd/user/network-online.target
-[Unit]
-Description=User-level network-online.target
-Requires=network-online.service
-Wants=network-online.service
-After=network-online.service
-```
-Then enable the service `systemctl --user enable network-online.service`
-
-In quadlets add the following:
-
-```bash
-[Unit]
-After=network-online.target
-```

pods/README.md

@@ -0,0 +1,34 @@
+## Weechat
+
+> [!WARNING]
+> If you have permissions issue trying to persist data > [Potential
+> permissions issue
+> fix](https://github.com/weechat/weechat-container/issues/10#issuecomment-2472077317)
+
+### Attach and configure
+
+> [!TIP]
+> Detach key sequence: `ctrl-p` `ctrl-q`.
+
+```bash
+ssh -t $host machinectl shell $ctuser@ podman attach weechat
+/set irc.look.smart_filter on
+/set irc.server_default.msg_part ""
+/set irc.server_default.msg_quit ""
+/set irc.ctcp.clientinfo ""
+/set irc.ctcp.finger ""
+/set irc.ctcp.source ""
+/set irc.ctcp.time ""
+/set irc.ctcp.userinfo ""
+/set irc.ctcp.version ""
+/set irc.ctcp.ping ""
+/plugin unload xfer
+/set weechat.plugin.autoload "*,!xfer"
+/filter add irc_smart * irc_smart_filter *
+/server add mam irc.myanonamouse.net/6697
+/set irc.server.mam.username $irc_username
+/set irc.server_default.autojoin_dynamic on
+/set irc.server.mam.nicks "$irc_nick1,$irc_nick2"
+/set irc.server.mam.autoconnect on
+/connect mam
+```

pods/mamstack/caddy/Caddyfile

@@ -0,0 +1,7 @@
+{
+        acme_dns $provider $api_key
+}
+
+qb.$domain.$tld {
+        reverse_proxy localhost:8080
+}

pods/mamstack/caddy/Containerfile

@@ -0,0 +1,8 @@
+FROM docker.io/caddy:$version-builder AS builder
+
+RUN xcaddy build \
+    --with github.com/caddy-dns/$module
+
+FROM docker.io/caddy:$version
+
+COPY --from=builder /usr/bin/caddy /usr/bin/caddy

pods/mamstack/caddy/caddy.build

@@ -0,0 +1,4 @@
+[Build]
+ImageTag=localhost/caddy-njalla
+SetWorkingDirectory=unit
+

pods/mamstack/caddy/caddy.container

@@ -0,0 +1,21 @@
+[Unit]
+Description=Reverse proxy
+
+[Service]
+Restart=on-failure
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=caddy.build
+ContainerName=caddy
+HostName=caddy
+Pod=MAMstack.pod
+AutoUpdate=registry
+
+Volume=caddy-config:/config
+Volume=caddy-data:/data
+
+Volume=./Caddyfile:/etc/caddy/Caddyfile
+

pods/mamstack/caddy/config.volume

@@ -1,3 +1,2 @@
 [Volume]
 VolumeName=caddy-config
-VolumeName=caddy-data

pods/mamstack/caddy/data.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=caddy-data

pods/mamstack/gluetun/gluetun.container

@@ -0,0 +1,33 @@
+[Unit]
+Description=gluetun VPN
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/qmcgaw/gluetun:$gluetun_version
+ContainerName=gluetun
+HostName=gluetun
+AddCapability=NET_ADMIN
+AddDevice=/dev/net/tun:/dev/net/tun
+Pod=MAMstack.pod
+AutoUpdate=registry
+
+Volume=./config.toml:/gluetun/auth/config.toml
+
+Environment=TZ=$timezone
+Environment=UPDATER_PERIOD=24h
+Environment=UPDATER_VPN_SERVICE_PROVIDERS=protonvpn
+Environment=VPN_SERVICE_PROVIDER=protonvpn
+# The trailing `+pmp` is for port forwarding
+Environment=OPENVPN_USER=${openvpn_user}+pmp
+Environment=OPENVPN_PASSWORD=$openvpn_password
+Environment=OPENVPN_CIPHERS=aes-256-gcm
+Environment=SERVER_COUNTRIES=$countries
+Environment=VPN_PORT_FORWARDING=on
+Environment=FIREWALL_DEBUG=on
+

pods/mamstack/mamstack.pod

@@ -0,0 +1,10 @@
+[Pod]
+PodName=MAMstack
+
+Network=mamstack.network
+
+PublishPort=80
+PublishPort=443
+PublishPort=443:443/udp
+
+Volume=

pods/mamstack/pointspend/pointspend.container

@@ -0,0 +1,27 @@
+[Unit]
+Description=Bonus points spender
+After=qbittorrent.service
+After=gluetun.service
+BindsTo=gluetun.service
+BindsTo=qbittorrent.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+# TODO: Is `latest` safe for this container?
+Image=docker.io/myanonamouse/pointspend:latest
+ContainerName=pointspend
+HostName=pointspend
+Pod=MAMstack.pod
+AutoUpdate=registry
+
+Environment=BUFFER=1000
+Environment=WEDGEHOURS=0
+Environment=VIP=1
+
+Secret=mam_id,type=env,target=MAMID

pods/mamstack/qbit_manage/config.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=qbit_manage-config
+

pods/mamstack/qbit_manage/config.yml

@@ -0,0 +1,322 @@
+# This is an example configuration file that documents all the options.
+# It will need to be modified for your specific use case.
+# Please refer to the link below for more details on how to set up the configuration file
+# https://github.com/StuffAnThings/qbit_manage/wiki/Config-Setup
+
+commands:
+  # The commands defined below will IGNORE any commands used in command line and docker env variables.
+  dry_run: True
+  cross_seed: False
+  recheck: False
+  cat_update: False
+  tag_update: False
+  rem_unregistered: False
+  tag_tracker_error: False
+  rem_orphaned: False
+  tag_nohardlinks: False
+  share_limits: False
+  skip_qb_version_check: False
+  skip_cleanup: False
+
+qbt:
+  # qBittorrent parameters
+  host: "localhost:8080"
+  user: "username"
+  pass: "password"
+
+settings:
+  force_auto_tmm: False # Will force qBittorrent to enable Automatic Torrent Management for each torrent.
+  force_auto_tmm_ignore_tags: #Torrents with these tags will be ignored when force_auto_tmm is enabled.
+    - cross-seed
+    - Upload
+  tracker_error_tag: issue # Will set the tag of any torrents that do not have a working tracker.
+  nohardlinks_tag: noHL # Will set the tag of any torrents with no hardlinks.
+  share_limits_tag: ~share_limit # Will add this tag when applying share limits to provide an easy way to filter torrents by share limit group/priority for each torrent
+  share_limits_min_seeding_time_tag: MinSeedTimeNotReached # Tag to be added to torrents that have not yet reached the minimum seeding time
+  share_limits_min_num_seeds_tag: MinSeedsNotMet # Tag to be added to torrents that have not yet reached the minimum number of seeds
+  share_limits_last_active_tag: LastActiveLimitNotReached # Tag to be added to torrents that have not yet reached the last active limit
+  cross_seed_tag: cross-seed # Will set the tag of any torrents that are added by cross-seed command
+  cat_filter_completed: True # Filters for completed torrents only when running cat_update command
+  share_limits_filter_completed: True # Filters for completed torrents only when running share_limits command
+  tag_nohardlinks_filter_completed: True # Filters for completed torrents only when running tag_nohardlinks command
+  cat_update_all: True # Checks and updates all torrent categories if set to True when running cat_update command, otherwise only update torrents that are uncategorized
+  disable_qbt_default_share_limits: True # Allows QBM to handle share limits by disabling qBittorrents default Share limits. Only active when the share_limits command is set to True
+
+directory:
+  # Do not remove these
+  # Cross-seed var: </your/path/here/>  # Output directory of cross-seed
+  # root_dir var: </your/path/here/>  # Root downloads directory used to check for orphaned files, noHL, and RecycleBin.
+  # <OPTIONAL> remote_dir var: </your/path/here/>  # Path of docker host mapping of root_dir.
+  # remote_dir must be set if you're running qbit_manage locally and qBittorrent/cross_seed is in a docker
+  # remote_dir should not be set if qbit_manage is running in a container
+  # <OPTIONAL> recycle_bin var: </your/path/here/>   # Path of the RecycleBin folder. Default location is set to remote_dir/.RecycleBin
+  # <OPTIONAL> torrents_dir var: </your/path/here/>  # Path of the your qbittorrent torrents directory. Required for `save_torrents` attribute in recyclebin
+  # <OPTIONAL> orphaned_dir var: </your/path/here/>  # Path of the the Orphaned Data folder. This is similar to RecycleBin, but only for orphaned data.
+  cross_seed: "/your/path/here/"
+  root_dir: "/data/torrents/"
+  remote_dir: "/mnt/user/data/torrents/"
+  recycle_bin: "/mnt/user/data/torrents/.RecycleBin"
+  torrents_dir: "/qbittorrent/data/BT_backup"
+  orphaned_dir: "/data/torrents/orphaned_data"
+
+cat:
+  # Category & Path Parameters
+  # All save paths in qbittorent must be populated below.
+  # If you want to leave a save_path as uncategorized you can use the key 'Uncategorized' as the name of the category.
+  # <Category Name> : <save_path>  # Path of your save directory.
+  movies: "/data/torrents/Movies"
+  tv: "/data/torrents/TV"
+
+cat_change:
+  # This moves all the torrents from one category to another category. This executes on --cat-update
+  # WARNING: if the paths are different and Default Torrent Management Mode is set to automatic the files could be moved !!!
+  # <Old Category Name> : <New Category>
+  Radarr-HD.cross-seed: movies-hd
+  Radarr-UHD.cross-seed: movies-uhd
+  movies-hd.cross-seed: movies-hd
+  movies-uhd.cross-seed: movies-uhd
+
+tracker:
+  # Mandatory
+  # Tag Parameters
+  # <Tracker URL Keyword>:    # <MANDATORY> This is the keyword in the tracker url. You can define multiple tracker urls by splitting with `|` delimiter
+  # <MANDATORY> Set tag name. Can be a list of tags or a single tag
+  #   tag: <Tag Name>
+  # <OPTIONAL> Set the category based on tracker URL. This category option takes priority over the category defined by save directory
+  #   cat: <Category Name>
+  # <OPTIONAL> Set this to the notifiarr react name. This is used to add indexer reactions to the notifications sent by Notifiarr
+  #   notifiarr: <notifiarr indexer>
+  animebytes.tv:
+    tag: AnimeBytes
+    notifiarr: animebytes
+  avistaz:
+    tag:
+      - Avistaz
+      - tag2
+      - tag3
+    notifiarr: avistaz
+  beyond-hd:
+    tag: [Beyond-HD, tag2, tag3]
+    cat: movies
+    notifiarr: beyondhd
+  blutopia:
+    tag: Blutopia
+    notifiarr: blutopia
+  cartoonchaos:
+    tag: CartoonChaos
+  digitalcore:
+    tag: DigitalCore
+    notifiarr: digitalcore
+  gazellegames:
+    tag: GGn
+  hdts:
+    tag: HDTorrents
+  landof.tv:
+    tag: BroadcasTheNet
+    notifiarr: broadcasthenet
+  myanonamouse:
+    tag: MaM
+  passthepopcorn:
+    tag: PassThePopcorn
+    notifiarr: passthepopcorn
+  privatehd:
+    tag: PrivateHD
+    notifiarr:
+  torrentdb:
+    tag: TorrentDB
+    notifiarr: torrentdb
+  torrentleech|tleechreload:
+    tag: TorrentLeech
+    notifiarr: torrentleech
+  tv-vault:
+    tag: TV-Vault
+  # The "other" key is a special keyword and if defined will tag any other trackers that don't match the above trackers into this tag
+  other:
+    tag: other
+
+nohardlinks:
+  # Tag Movies/Series that are not hard linked outside the root directory
+  # Mandatory to fill out directory parameter above to use this function (root_dir/remote_dir)
+  # This variable should be set to your category name of your completed movies/completed series in qbit. Acceptable variable can be any category you would like to tag if there are no hardlinks found
+  movies-completed-4k:
+  series-completed-4k:
+  movies-completed:
+    # <OPTIONAL> exclude_tags var: Will exclude torrents with any of the following tags when searching through the category.
+    exclude_tags:
+      - Beyond-HD
+      - AnimeBytes
+      - MaM
+    # <OPTIONAL> ignore_root_dir var: Will ignore any hardlinks detected in the same root_dir (Default True).
+    ignore_root_dir: true
+  # Can have additional categories set with separate ratio/seeding times defined.
+  series-completed:
+    # <OPTIONAL> exclude_tags var: Will exclude torrents with any of the following tags when searching through the category.
+    exclude_tags:
+      - Beyond-HD
+      - BroadcasTheNet
+    # <OPTIONAL> ignore_root_dir var: Will ignore any hardlinks detected in the same root_dir (Default True).
+    ignore_root_dir: true
+
+share_limits:
+  # Control how torrent share limits are set depending on the priority of your grouping
+  # Each torrent will be matched with the share limit group with the highest priority that meets the group filter criteria.
+  # Each torrent can only be matched with one share limit group
+  # This variable is mandatory and is a text defining the name of your grouping. This can be any string you want
+  noHL:
+    # <MANDATORY> priority: <int/float> # This is the priority of your grouping. The lower the number the higher the priority
+    priority: 1
+    # <OPTIONAL> include_all_tags: <list> # Filter the group based on one or more tags. Multiple include_all_tags are checked with an AND condition
+    # All tags defined here must be present in the torrent for it to be included in this group
+    include_all_tags:
+      - noHL
+    # <OPTIONAL> include_any_tags: <list> # Filter the group based on one or more tags. Multiple include_any_tags are checked with an OR condition
+    # Any tags defined here must be present in the torrent for it to be included in this group
+    include_any_tags:
+      - noHL
+    # <OPTIONAL> exclude_all_tags: <list> # Filter by excluding one or more tags. Multiple exclude_all_tags are checked with an AND condition
+    # This is useful to combine with the category filter to exclude one or more tags from an entire category
+    # All tags defined here must be present in the torrent for it to be excluded in this group
+    exclude_all_tags:
+      - Beyond-HD
+    # <OPTIONAL> exclude_any_tags: <list> # Filter by excluding one or more tags. Multiple exclude_any_tags are checked with an OR condition
+    # This is useful to combine with the category filter to exclude one or more tags from an entire category
+    # Any tags defined here must be present in the torrent for it to be excluded in this group
+    exclude_any_tags:
+      - Beyond-HD
+    # <OPTIONAL> categories: <list> # Filter by including one or more categories. Multiple categories are checked with an OR condition
+    # Since one torrent can only be associated with a single category, multiple categories are checked with an OR condition
+    categories:
+      - RadarrComplete
+      - SonarrComplete
+    # <OPTIONAL> max_ratio <float>: Will set the torrent Maximum share ratio until torrent is stopped from seeding/uploading and may be cleaned up / removed if the minimums have been met.
+    # Will default to -1 (no limit) if not specified for the group.
+    max_ratio: 5.0
+    # <OPTIONAL> max_seeding_time <str>: Will set the torrent Maximum seeding time until torrent is stopped from seeding/uploading and may be cleaned up / removed if the minimums have been met.
+    # See Some examples of valid time expressions (https://github.com/onegreyonewhite/pytimeparse2)
+    # 32m, 2h32m, 3d2h32m, 1w3d2h32m
+    # Will default to -1 (no limit) if not specified for the group. (Max value of 1 year (525600 minutes))
+    max_seeding_time: 90d
+    # <OPTIONAL> min_seeding_time <str>: Will prevent torrent deletion by cleanup variable if torrent has not yet minimum seeding time (minutes).
+    # This should only be set if you are using this in conjunction with max_seeding_time and max_ratio. If you are not setting a max_ratio, then use max_seeding_time instead.
+    # If the torrent has not yet reached this minimum seeding time, it will change the share limits back to no limits and resume the torrent to continue seeding.
+    # See Some examples of valid time expressions (https://github.com/onegreyonewhite/pytimeparse2)
+    # 32m, 2h32m, 3d2h32m, 1w3d2h32m
+    # Will default to 0 if not specified for the group.
+    min_seeding_time: 30d
+    # <OPTIONAL> last_active <str>: Will prevent torrent deletion by cleanup variable if torrent has been active within the last x minutes.
+    # If the torrent has been active within the last x minutes, it will change the share limits back to no limits and resume the torrent to continue seeding.
+    # See Some examples of valid time expressions (https://github.com/onegreyonewhite/pytimeparse2)
+    # 32m, 2h32m, 3d2h32m, 1w3d2h32m
+    # Will default to 0 if not specified for the group.
+    last_active: 30d
+    # <OPTIONAL> Limit Upload Speed <int>: Will limit the upload speed KiB/s (KiloBytes/second) (`-1` : No Limit)
+    limit_upload_speed: 0
+    # <OPTIONAL> Enable Group Upload Speed <bool>: Upload speed limits are applied at the group level. This will take limit_upload_speed defined and divide it equally among the number of torrents in the group.
+    enable_group_upload_speed: false
+    # <OPTIONAL> cleanup <bool>: WARNING!! Setting this as true Will remove and delete contents of any torrents that satisfies the share limits (max time OR max ratio)
+    cleanup: false
+    # <OPTIONAL> resume_torrent_after_change <bool>: This variable will resume your torrent after changing share limits. Default is true
+    resume_torrent_after_change: true
+    # <OPTIONAL> add_group_to_tag <bool>: This adds your grouping as a tag with a prefix defined in settings . Default is true
+    # Example: A grouping defined as noHL will have a tag set to ~share_limit.noHL (if using the default prefix)
+    add_group_to_tag: true
+    # <OPTIONAL> min_num_seeds <int>: Will prevent torrent deletion by cleanup variable if the number of seeds is less than the value set here.
+    # If the torrent has less number of seeds than the min_num_seeds, the share limits will be changed back to no limits and resume the torrent to continue seeding.
+    # Will default to 0 if not specified for the group.
+    min_num_seeds: 0
+    # <OPTIONAL> custom_tag <str>: Apply a custom tag name for this particular group. **WARNING (This tag MUST be unique as it will be used to determine share limits. Please ensure it does not overlap with any other tags in qbt)**
+    custom_tag: sharelimits_noHL
+  cross-seed:
+    priority: 2
+    include_all_tags:
+      - cross-seed
+    max_seeding_time: 7d
+    cleanup: false
+  PTP:
+    priority: 3
+    include_all_tags:
+      - PassThePopcorn
+    max_ratio: 2.0
+    max_seeding_time: 90d
+    cleanup: false
+  default:
+    priority: 999
+    max_ratio: -1
+    max_seeding_time: -1
+    cleanup: false
+
+recyclebin:
+  # Recycle Bin method of deletion will move files into the recycle bin (Located in /root_dir/.RecycleBin) instead of directly deleting them in qbit
+  # By default the Recycle Bin will be emptied on every run of the qbit_manage script if empty_after_x_days is defined.
+  enabled: true
+  # <OPTIONAL> empty_after_x_days var:
+  # Will automatically remove all files and folders in recycle bin after x days. (Checks every script run)
+  # If this variable is not defined it, the RecycleBin will never be emptied.
+  # WARNING: Setting this variable to 0 will delete all files immediately upon script run!
+  empty_after_x_days: 60
+  # <OPTIONAL> save_torrents var:
+  # If this option is set to true you MUST fill out the torrents_dir in the directory attribute.
+  # This will save a copy of your .torrent and .fastresume file in the recycle bin before deleting it from qbittorrent
+  save_torrents: true
+  # <OPTIONAL> split_by_category var:
+  # This will split the recycle bin folder by the save path defined in the `cat` attribute
+  # and add the base folder name of the recycle bin that was defined in the `recycle_bin` sub-attribute under directory.
+  split_by_category: false
+
+orphaned:
+  # Orphaned files are those in the root_dir download directory that are not referenced by any active torrents.
+  # Will automatically remove all files and folders in orphaned data after x days. (Checks every script run)
+  # If this variable is not defined it, the orphaned data will never be emptied.
+  # WARNING: Setting this variable to 0 will delete all files immediately upon script run!
+  empty_after_x_days: 60
+  # File patterns that will not be considered orphaned files. Handy for generated files that aren't part of the torrent but belong with the torrent's files
+  exclude_patterns:
+    - "**/.DS_Store"
+    - "**/Thumbs.db"
+    - "**/@eaDir"
+    - "/data/torrents/temp/**"
+    - "**/*.!qB"
+    - "**/*_unpackerred"
+  # Set your desired threshold for the maximum number of orphaned files qbm will delete in a single run. (-1 to disable safeguards)
+  # This will help reduce the number of accidental large amount orphaned deletions in a single run
+  # WARNING: Setting this variable to -1 will not safeguard against any deletions
+  max_orphaned_files_to_delete: 50
+
+apprise:
+  # Apprise integration with webhooks
+  # Leave Empty/Blank to disable
+  # Mandatory to fill out the url of your apprise API endpoint
+  api_url: http://apprise-api:8000
+  # Mandatory to fill out the notification url/urls based on the notification services provided by apprise. https://github.com/caronc/apprise/wiki
+  notify_url:
+
+notifiarr:
+  # Notifiarr integration with webhooks
+  # Leave Empty/Blank to disable
+  # Mandatory to fill out API Key
+  apikey: ####################################
+  # <OPTIONAL> Set to a unique value (could be your username on notifiarr for example)
+  instance:
+
+webhooks:
+  # Webhook notifications:
+  # Possible values:
+  # Set value to notifiarr if using notifiarr integration
+  # Set value to apprise if using apprise integration
+  # Set value to a valid webhook URL
+  # Set value to nothing (leave Empty/Blank) to disable
+  error: https://mywebhookurl.com/qbt_manage
+  run_start: notifiarr
+  run_end: apprise
+  function:
+    cross_seed: https://mywebhookurl.com/qbt_manage
+    recheck: notifiarr
+    cat_update: apprise
+    tag_update: notifiarr
+    rem_unregistered: notifiarr
+    tag_tracker_error: notifiarr
+    rem_orphaned: notifiarr
+    tag_nohardlinks: notifiarr
+    share_limits: notifiarr
+    cleanup_dirs: notifiarr
+

pods/mamstack/qbit_manage/qbit_manage.container

@@ -0,0 +1,24 @@
+[Unit]
+Description=qBittorrent manager
+Wants=qbittorrent.service
+After=qbittorrent.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=ghcr.io/stuffanthings/qbit_manage:latest
+ContainerName=qbit_manage
+HostName=qbit_manage
+Pod=MAMstack.pod
+AutoUpdate=registry
+
+Volume=qbit_manage-config:/config
+Volume=/volumes/books/qbittorrent/downloads:/data/torrents
+Volume=qbittorrent-config:/qbittorrent
+
+EnvironmentFile=qbit_manage.env

pods/mamstack/qbit_manage/qbit_manage.env

@@ -0,0 +1,19 @@
+QBT_RUN=false
+QBT_SCHEDULE=1440
+QBT_CONFIG=config.yml
+QBT_LOGFILE=activity.log
+QBT_CROSS_SEED=false
+QBT_RECHECK=false
+QBT_CAT_UPDATE=false
+QBT_TAG_UPDATE=false
+QBT_REM_UNREGISTERED=false
+QBT_REM_ORPHANED=false
+QBT_TAG_TRACKER_ERROR=false
+QBT_TAG_NOHARDLINKS=false
+QBT_SHARE_LIMITS=false
+QBT_SKIP_CLEANUP=false
+QBT_DRY_RUN=false
+QBT_LOG_LEVEL=INFO
+QBT_DIVIDER==
+QBT_WIDTH=100
+

pods/mamstack/qbittorrent-port-forward-gluetun-server/qbittorrent-port-forward-gluetun-server.container

@@ -0,0 +1,26 @@
+[Unit]
+Description=Port forward updater for qbittorrent over gluetun
+After=gluetun.service
+After=qbittorrent.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+# TODO: Replace this with one that has tags
+# Probably have to repack my own
+Image=docker.io/mjmeli/qbittorrent-port-forward-gluetun-server:latest
+ContainerName=qbittorrent-port-forward-gluetun-server
+HostName=qbittorrent-port-forward-gluetun-server
+Pod=MAMstack
+AutoUpdate=registry
+
+Environment=QBT_USERNAME=$qbt_user
+Environment=QBT_ADDR=http://localhost:8080
+Environment=GTN_ADDR=http://localhost:8000
+
+Secret=qbt_pw,type=env,target=QBT_PASSWORD

pods/mamstack/qbittorrent/qbittorrent.container

@@ -0,0 +1,27 @@
+[Unit]
+Description=qbittorrent client
+After=gluetun.service
+BindsTo=gluetun.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+Image=docker.io/qbittorrentofficial/qbittorrent-nox:$qbt_version
+ContainerName=qbittorrent
+HostName=qbittorrent
+AutoUpdate=registry
+
+Network=
+
+Volume=/volumes/books/qbittorrent/config:/config
+Volume=/volumes/books/qbittorrent/downloads:/downloads
+
+Environment=QBT_LEGAL_NOTICE=confirm
+Environment=QBT_VERSION=$qbt_version
+Environment=TZ=$timezone
+

pods/mamstack/seedboxapi/seedboxapi.container

@@ -0,0 +1,28 @@
+[Unit]
+Description=Update qbittorrent session IP for tracker
+After=qbittorrent.service
+After=gluetun.service
+BindsTo=gluetun.service
+BindsTo=qbittorrent.service
+
+[Service]
+Restart=on-failure
+TimeoutStartSec=900
+
+[Install]
+WantedBy=default.target
+
+[Container]
+# TODO: Is `latest` safe for this container?
+Image=docker.io/myanonamouse/seedboxapi:latest
+ContainerName=seedboxapi
+HostName=seedboxapi
+Pod=MAMstack.pod
+AutoUpdate=registry
+
+Volume=/volumes/books/seedboxapi/config:/config
+
+Environment=DEBUG=1
+Environment=interval=1
+
+Secret=mam_id,type=env,target=mam_id

quadlets/README.md

@@ -1,3 +1,3 @@
-## Quadlets
+# Quadlets
 
 Quadlets go in `~/.config/containers/systemd`.

quadlets/actual/actual.container

@@ -1,5 +1,5 @@
 [Unit]
-Description=Actual budget management
+Description=Budget management
 
 
 [Service]
@@ -12,8 +12,6 @@ WantedBy=default.target
 [Container]
 Image=docker.io/actualbudget/actual-server:latest
 ContainerName=actual
-
-Network=actual.network
 HostName=actual
 
 Volume=actual-data:/data

quadlets/actual/actual.network

@@ -1 +0,0 @@
-[Network]

quadlets/adguard/adguard.container

@@ -11,9 +11,8 @@ WantedBy=default.target
 [Container]
 Image=docker.io/adguard/adguardhome:latest
 ContainerName=adguard
-
-Network=adguard.network
 HostName=adguard
+
 PublishPort=53:53/tcp
 PublishPort=53:53/udp
 PublishPort=784:784/udp
@@ -22,6 +21,6 @@ PublishPort=3000:3000/tcp
 PublishPort=8844:80/tcp
 PublishPort=8443:443/tcp
 
-Volume=adguard-config:/opt/adguardhome/work
+Volume=adguard-config:/opt/adguardhome/work:z
-Volume=adguard-work:/opt/adguardhome/conf
+Volume=adguard-work:/opt/adguardhome/conf:z
-Volume=/var/log/AdGuardHome.log:/var/log/AdGuardHome.log
+Volume=/var/log/AdGuardHome.log:/var/log/AdGuardHome.log:z

quadlets/adguard/adguard.network

@@ -1 +0,0 @@
-[Network]

quadlets/apprise/apprise.container

@@ -1,25 +0,0 @@
-[Unit]
-Description=Apprise API
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/caronc/apprise:latest
-ContainerName=apprise
-AutoUpdate=registry
-
-Network=apprise.network
-HostName=apprise
-PublishPort=8000:8000
-
-Volume=apprise-config:/config
-Volume=apprise-plugin:/plugin
-Volume=apprise-attahc:/attahc
-
-Environment=APPRISE_STATEFUL_MODE=simple
-Environment=APPRISE_WORKER_COUNT=1

quadlets/apprise/apprise.network

@@ -1,6 +0,0 @@
-[Unit]
-Description=Apprise network
-
-[Network]
-NetworkName=apprise
-

quadlets/apprise/apprise.volume

@@ -1,5 +0,0 @@
-[Volume]
-VolumeName=apprise-config
-VolumeName=apprise-plugin
-VolumeName=apprise-attach
-

quadlets/audiobookshelf/audiobookshelf.container

@@ -11,11 +11,13 @@ WantedBy=default.target
 [Container]
 Image=docker.io/advplyr/audiobookshelf:latest
 ContainerName=audiobookshelf
-
-Network=audiobookshelf.network
 HostName=audiobookshelf
+
 PublishPort=13378:80
 
-Volume=audiobookshelf-config:/metadata
+Volume=audiobookshelf-config:/metadata:z
-Volume=audiobookshelf-metadata:/config
+Volume=audiobookshelf-metadata:/config:z
-Volume=audiobookshelf-audiobooks:/audiobooks
+Volume=audiobookshelf-audiobooks:/audiobooks:z
+
+Environment=AUDIOBOOKSHELF_UID=USER_UID_HERE
+Environment=AUDIOBOOKSHELF_GID=USER_GID_HERE

quadlets/audiobookshelf/audiobookshelf.network

@@ -1 +0,0 @@
-[Network]

quadlets/betanin/betanin.container

@@ -1,24 +0,0 @@
-[Unit]
-Description=betanin
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/sentriz/betanin
-ContainerName=betanin
-AutoUpdate=registry
-
-Network=betanin.network
-HostName=betanin
-PublishPort=9393:9393
-
-Volume=betanin-data:/b/.local/share/betanin
-Volume=betanin-config:/b/.local/share/config
-Volume=betanin-beets:/b/.local/share/beets
-Volume=/path/to/music:/music
-Volume=/path/to/downloads:/downloads

quadlets/betanin/betanin.network

@@ -1,6 +0,0 @@
-[Unit]
-Description=betanin network
-
-[Network]
-NetworkName=betanin
-

quadlets/betanin/betanin.volume

@@ -1,5 +0,0 @@
-[Volume]
-VolumeName=betanin-data
-VolumeName=betanin-config
-VolumeName=betanin-beets
-

quadlets/blinko/blinko-db.container

@@ -13,7 +13,6 @@ WantedBy=default.target
 Image=docker.io/postgres
 ContainerName=blinko-db
 
-Network=blinko.network
 HostName=blinko-db
 PublishPort=5435:5432
 

quadlets/blinko/blinko.container

@@ -14,7 +14,6 @@ WantedBy=default.target
 Image=docker.io/blinkospace/blinko
 ContainerName=blinko
 
-Network=blinko.network
 HostName=blinko
 PublishPort=1111:1111
 

quadlets/blinko/blinko.network

@@ -1 +0,0 @@
-[Network]

quadlets/blinko/data.volume

@@ -1,4 +1,3 @@
 [Volume]
 VolumeName=blinko-data
-VolumeName=blinko-db
 

quadlets/blinko/db.volume

@@ -0,0 +1,3 @@
+[Volume]
+VolumeName=blinko-db
+

quadlets/caddy/caddy.container

@@ -1,6 +1,7 @@
 [Unit]
 Description=Reverse proxy
 
+
 [Service]
 Restart=on-failure
 
@@ -10,9 +11,8 @@ WantedBy=default.target
 [Container]
 Image=caddy.build
 ContainerName=caddy
-
-Network=reverse-proxy.network
 HostName=caddy
+
 PublishPort=80:80
 PublishPort=443:443
 PublishPort=443:443/udp

quadlets/caddy/config.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=caddy-config

quadlets/caddy/data.volume

@@ -0,0 +1,2 @@
+[Volume]
+VolumeName=caddy-data

quadlets/caddy/reverse-proxy.network

@@ -1 +0,0 @@
-[Network]

quadlets/calibre/calibre.container

@@ -11,9 +11,8 @@ WantedBy=default.target
 [Container]
 Image=lscr.io/linuxserver/calibre:latest
 ContainerName=calibre
-
-Network=calibre.network
 HostName=calibre
+
 PublishPort=8080
 
 Volume=calibre-config:/config

quadlets/calibre/calibre.network

@@ -1 +0,0 @@
-[Network]

quadlets/chartdb/chartdb.container

@@ -12,7 +12,6 @@ WantedBy=default.target
 Image=ghcr.io/chartdb/chartdb
 ContainerName=chartdb
 
-Network=chartdb.network
 HostName=chartdb
 PublishPort=8080:80
 

quadlets/chartdb/chartdb.network

@@ -1 +0,0 @@
-[Network]

quadlets/checkmate/checkmate-mongo.container

@@ -1,22 +0,0 @@
-[Unit]
-Description=Checkmate mongodb
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/bluewaveuptime/uptime_database_mongo:latest
-ContainerName=checkmate-mongodb
-AutoUpdate=registry
-
-Network=checkmate.network
-HostName=checkmate-mongodb
-PublishPort=27017:27017
-
-Volume=checkmate-mongodb:/data/db
-
-Exec=mongod --quiet

quadlets/checkmate/checkmate-redis.container

@@ -1,20 +0,0 @@
-[Unit]
-Description=Checkmate Redis
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/bluewaveuptime/uptime_redis:latest
-ContainerName=checkmate-redis
-AutoUpdate=registry
-
-Network=checkmate.network
-HostName=checkmate-redis
-PublishPort=6379:6379
-
-Volume=checkmate-redis:/data

quadlets/checkmate/checkmate-server.container

@@ -1,27 +0,0 @@
-[Unit]
-Description=Checkmate server
-Requires=checkmate-mongodb.service
-Requires=checkmate-redis.service
-After=checkmate-mongodb.service
-After=checkmate-redis.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/bluewaveuptime/uptime_server:latest
-ContainerName=checkmate-server
-AutoUpdate=registry
-
-Network=checkmate.network
-HostName=checkmate-server
-PublishPort=5000:5000
-
-Volume=%t/podman/podman.sock:/run/user/1000/podman/podman.sock:ro
-
-Environment=REDIS_HOST=checkmate-redis
-Environment=DB_CONNECTION_STRING=mongodb://checkmate-mongodb:27017/uptime_db

quadlets/checkmate/checkmate.container

@@ -1,23 +0,0 @@
-[Unit]
-Description=Checkmate
-Requires=checkmate-server.service
-After=checkmate-server.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/bluewaveuptime/uptime_client:latest
-ContainerName=checkmate
-AutoUpdate=registry
-
-Network=checkmate.network
-HostName=checkmate
-PublishPort=80:80
-PublishPort=443:443
-
-Environment=UPTIME_APP_API_BASE_URL=http://localhost:5000/api/v1

quadlets/checkmate/checkmate.network

@@ -1,6 +0,0 @@
-[Unit]
-Description=Checkmate network
-
-[Network]
-NetworkName=checkmate
-

quadlets/checkmate/checkmate.volume

@@ -1,4 +0,0 @@
-[Volume]
-VolumeName=checkmate-mongodb
-VolumeName=checkmate-redis
-

quadlets/dashdot/dashdot-nvidia.container

@@ -13,7 +13,7 @@ Image=docker.io/mauricenino/dashdot:nvidia
 ContainerName=dashdot-nvidia
 AutoUpdate=registry
 
-Network=dashdot.network
+Network=
 HostName=dashdot
 PublishPort=3001:3001
 

quadlets/dashdot/dashdot.container

@@ -13,7 +13,7 @@ Image=docker.io/mauricenino/dashdot
 ContainerName=dashdot
 AutoUpdate=registry
 
-Network=dashdot.network
+Network=
 HostName=dashdot
 PublishPort=3001:3001
 

quadlets/dashdot/dashdot.network

@@ -1 +0,0 @@
-[Network]

quadlets/dashy/dashy.container

@@ -12,10 +12,10 @@ WantedBy=default.target
 [Container]
 Image=docker.io/lissy93/dashy:$dashy_version
 ContainerName=dashy
+HostName=dashy
 AutoUpdate=registry
 
-Network=dashy.network
+Network=
-HostName=dashy
 
 Volume=./user-data:/app/user-data
 

quadlets/dashy/dashy.network

@@ -1 +0,0 @@
-[Network]

quadlets/filebrowser/filebrowser.container

@@ -12,9 +12,6 @@ WantedBy=multi-user.target default.target
 Image=docker.io/hurlenko/filebrowser:latest
 ContainerName=filebrowser
 
-Network=filebrowser.network
-Hostname=filebrowser
-
 Volume=/path/to/what/you/want/to/share:/data:z
 Volume=fb-config:/config:z
 Volume=fb-branding:/branding:z

quadlets/filebrowser/filebrowser.network

@@ -1 +0,0 @@
-[Network]

quadlets/filestash/filestash-wopi.container

@@ -1,23 +0,0 @@
-[Unit]
-Description=Filestash wopi
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/collabora/code:24.04.10.2.1
-ContainerName=filestash-wopi
-AutoUpdate=registry
-
-Network=filestash.network
-HostName=filestash-wopi
-PublishPort=9980:9980
-
-Environment=extra_params=--o:ssl.enable=false
-Environment=aliasgroup1="https://.*:443"
-
-Exec=bash -c '/start-collabora-online.sh cool'

quadlets/filestash/filestash.container

@@ -1,28 +0,0 @@
-[Unit]
-Description=Filestash
-Wants=filestash-wopi.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/machines/filestash:latest
-ContainerName=filestash
-AutoUpdate=registry
-
-Network=filestash.network
-HostName=filestash
-PublishPort=8334:8334
-
-Volume=filestash:/app/data/state
-
-Environment=APPLICATION_URL=https://filestash.example.com
-Environment=CANARY=true
-Environment=OFFICE_URL=http://filestash-wopi:9980
-Environment=OFFICE_FILESTASH_URL=http://filestash:8334
-Environment=OFFICE_REWRITE_URL=http://127.0.0.1:9980
-

quadlets/filestash/filestash.network

@@ -1 +0,0 @@
-[Network]

quadlets/forgejo/forgejo-data.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=forgejo-data

quadlets/forgejo/forgejo.container

@@ -1,22 +0,0 @@
-[Unit]
-Description=Forgejo
-After=
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=codeberg.org/forgejo/forgejo:10
-ContainerName=forgejo
-AutoUpdate=registry
-
-Network=forgejo.network
-HostName=forgejo
-PublishPort=222:22
-PublishPort=3000:3000
-
-Volume=forgejo-data:/data

quadlets/forgejo/forgejo.network

@@ -1 +0,0 @@
-[Network]

quadlets/foundryvtt/foundryvtt.container

@@ -11,19 +11,19 @@ WantedBy=default.target
 [Container]
 Image=docker.io/felddy/foundryvtt:release
 ContainerName=foundryvtt
-AutoUpdate=registry
-
-Network=foundryvtt.network
 HostName=foundryvtt
+
 Volume=foundryvtt-data:/data
 
 PublishPort=30000:30000
 
-Environment=TIMEZONE=Etc/UTC
+Environment=TIMEZONE=
-Secret=foundry-password,type=env,target=FOUNDRY_PASSWORD
+Environment=FOUNDRY_UID=
+Environment=FOUNDRY_GID=
+Environment=FOUNDRY_PASSWORD=
 Environment=FOUNDRY_USERNAME=
-Secret=foundry-admin-key,type=env,target=FOUNDRY_ADMIN_KEY
+Environment=FOUNDRY_ADMIN_KEY=
-Secret=foundry-license-key,type=env,target=FOUNDRY_LICENSE_KEY=XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
+Environment=FOUNDRY_LICENSE_KEY=XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
-Environment=FOUNDRY_HOT_RELOAD=false
+Environment=FOUNDRY_HOT_RELOAD=true
 Environment=CONTAINER_PRESERVE_CONFIG=true
 Environment=CONTAINER_CACHE="/data/container_cache"

quadlets/foundryvtt/foundryvtt.network

@@ -1 +0,0 @@
-[Network]

quadlets/freshrss/fivefilters.container

@@ -11,9 +11,9 @@ WantedBy=default.target
 [Container]
 Image=docker.io/heussd/fivefilters-full-text-rss:latest
 ContainerName=fivefilters
+HostName=fivefilters
 
 Network=freshrss.network
-HostName=fivefilters
 PublishPort=5000:80
 
-Secret=ftr-admin-password,type=env,target=FTR_ADMIN_PASSWORD
+Environment=FTR_ADMIN_PASSWORD=XXXXXXXX

quadlets/freshrss/freshrss.container

@@ -1,6 +1,5 @@
 [Unit]
 Description=FreshRSS Quadlet
-Requires=fivefilters.service
 After=fivefilters.service
 
 [Service]
@@ -13,11 +12,13 @@ WantedBy=default.target
 [Container]
 Image=docker.io/linuxserver/freshrss:latest
 ContainerName=freshrss
+HostName=freshrss
 
 Network=freshrss.network
-HostName=freshrss
 PublishPort=4422:80
 
-Volume=freshrss-config:/config
+Volume=freshrss-config:/config:z
 
-Environment=TZ=Etc/UTC
+Environment=PUID=1001
+Environment=PGID=1001
+Environment=TZ=Europe/London

quadlets/freshrss/freshrss.network

@@ -1 +1,9 @@
 [Network]
+Subnet=10.10.10.0/24
+Gateway=10.10.10.1
+Label=app=freshrss
+Driver=pasta
+
+
+
+

quadlets/gaseous/gaseous-mariadb.container

@@ -1,23 +0,0 @@
-[Unit]
-Description=Gaseous MariaDB
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/mariadb:latest
-ContainerName=gaseous-mariadb
-AutoUpdate=registry
-
-Network=gaseous.network
-HostName=gaseous-mariadb
-
-Volume=gaseous-mariadb:/var/lib/mysql
-
-Environment=MARIADB_ROOT_PASSWORD=gaseous
-Environment=MARIADB_USER=gaseous
-Environment=MARIADB_PASSWORD=gaseous

quadlets/gaseous/gaseous.container

@@ -1,29 +0,0 @@
-[Unit]
-Description=Gaseous ROM manager
-Requires=gaseous-mariadb.service
-After=gaseous-mariadb.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/gaseousgames/gaseousserver:latest
-ContainerName=gaseous
-AutoUpdate=registry
-
-Network=gaseous.network
-HostName=gaseous
-PublishPort=5198:80
-
-Volume=gaseous:/root/.gaseous-server
-
-Environment=TZ=Etc/UTC
-Environment=dbhost=gsdb
-Environment=dbuser=root
-Environment=dbpass=gaseous
-Environment=igdbclientid=
-Environment=igdbclientsecret=

quadlets/gaseous/gaseous.network

@@ -1,6 +0,0 @@
-[Unit]
-Description=Gaseous ROMs network
-
-[Network]
-NetworkName=gaseous
-

quadlets/gaseous/gaseous.volume

@@ -1,4 +0,0 @@
-[Volume]
-VolumeName=gaseous
-VolumeName=gaseous-mariadb
-

quadlets/glance/config/glance.yml

@@ -1,12 +0,0 @@
-server:
-  assets-path: /app/assets
-
-theme:
-  # Note: assets are cached by the browser, changes to the CSS file
-  # will not be reflected until the browser cache is cleared (Ctrl+F5)
-  custom-css-file: /assets/user.css
-
-pages:
-  # It's not necessary to create a new file for each page and include it, you can simply
-  # put its contents here, though multiple pages are easier to manage when separated
-  !include: home.yml

quadlets/glance/config/home.yml

@@ -1,88 +0,0 @@
-- name: Home
-  # Optionally, if you only have a single page you can hide the desktop navigation for a cleaner look
-  # hide-desktop-navigation: true
-  columns:
-    - size: small
-      widgets:
-        - type: calendar
-          first-day-of-week: monday
-
-        - type: rss
-          limit: 10
-          collapse-after: 3
-          cache: 12h
-          feeds:
-            - url: https://selfh.st/rss/
-              title: selfh.st
-            - url: https://ciechanow.ski/atom.xml
-            - url: https://www.joshwcomeau.com/rss.xml
-              title: Josh Comeau
-            - url: https://samwho.dev/rss.xml
-            - url: https://ishadeed.com/feed.xml
-              title: Ahmad Shadeed
-
-        - type: twitch-channels
-          channels:
-            - theprimeagen
-            - j_blow
-            - piratesoftware
-            - cohhcarnage
-            - christitustech
-            - EJ_SA
-
-    - size: full
-      widgets:
-        - type: group
-          widgets:
-            - type: hacker-news
-            - type: lobsters
-
-        - type: videos
-          channels:
-            - UCXuqSBlHAE6Xw-yeJA0Tunw # Linus Tech Tips
-            - UCR-DXc1voovS8nhAvccRZhg # Jeff Geerling
-            - UCsBjURrPoezykLs9EqgamOA # Fireship
-            - UCBJycsmduvYEL83R_U4JriQ # Marques Brownlee
-            - UCHnyfMqiRRG1u-2MsSQLbXA # Veritasium
-
-        - type: group
-          widgets:
-            - type: reddit
-              subreddit: technology
-              show-thumbnails: true
-            - type: reddit
-              subreddit: selfhosted
-              show-thumbnails: true
-
-    - size: small
-      widgets:
-        - type: weather
-          location: London, United Kingdom
-          units: metric # alternatively "imperial"
-          hour-format: 12h # alternatively "24h"
-          # Optionally hide the location from being displayed in the widget
-          # hide-location: true
-
-        - type: markets
-          markets:
-            - symbol: SPY
-              name: S&P 500
-            - symbol: BTC-USD
-              name: Bitcoin
-            - symbol: NVDA
-              name: NVIDIA
-            - symbol: AAPL
-              name: Apple
-            - symbol: MSFT
-              name: Microsoft
-
-        - type: releases
-          cache: 1d
-          # Without authentication the Github API allows for up to 60 requests per hour. You can create a
-          # read-only token from your Github account settings and use it here to increase the limit.
-          # token: ...
-          repositories:
-            - glanceapp/glance
-            - go-gitea/gitea
-            - immich-app/immich
-            - syncthing/syncthing

quadlets/glance/glance.container

@@ -1,21 +0,0 @@
-[Unit]
-Description=Glance dashboard
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/glanceapp/glance
-ContainerName=glance
-AutoUpdate=registry
-
-Network=glance.network
-HostName=glance
-PublishPort=8080:8080
-
-Volume=glance-config:/app/config
-

quadlets/glance/glance.env

@@ -1,3 +0,0 @@
-# Variables defined here will be available to use anywhere in the config with the syntax ${MY_SECRET_TOKEN}
-# Note: making changes to this file requires re-running docker compose up
-MY_SECRET_TOKEN=123456

quadlets/glance/glance.volume

@@ -1,2 +0,0 @@
-[Volume]
-VolumeName=glance-config

quadlets/glances/glances.container

@@ -11,10 +11,8 @@ WantedBy=default.target
 [Container]
 Image=docker.io/nicolargo/glances:$version_tag
 ContainerName=glances
-AutoUpdate=registry
-
-Network=glances.network
 HostName=glances
+AutoUpdate=registry
 
 Volume=%t/podman/podman.sock:/run/user/1000/podman/podman.sock:ro
 Volume=/etc/os-release:/etc/os-release:ro

quadlets/glances/glances.network

@@ -1 +0,0 @@
-[Network]

quadlets/gluetun/gluetun.container

@@ -11,7 +11,7 @@ TimeoutStartSec=900
 WantedBy=default.target
 
 [Container]
-Image=docker.io/qmcgaw/gluetun
+Image=docker.io/qmcgaw/gluetun:$gluetun_version
 ContainerName=gluetun
 HostName=gluetun
 AutoUpdate=registry
@@ -20,7 +20,7 @@ AddDevice=/dev/net/tun:/dev/net/tun
 
 Volume=./config.toml:/gluetun/auth/config.toml
 
-Environment=TZ=Etc/UTC
+Environment=TZ=$timezone
 Environment=UPDATER_PERIOD=24h
 Environment=UPDATER_VPN_SERVICE_PROVIDERS=protonvpn
 Environment=VPN_SERVICE_PROVIDER=protonvpn

quadlets/graphite/graphite.container

@@ -1,26 +0,0 @@
-[Unit]
-Description=Graphite monitoring
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/graphiteapp/graphite-statsd
-ContainerName=graphite
-AutoUpdate=registry
-
-Network=graphite.network
-HostName=graphite
-PublishPort=80:80
-PublishPort=2003-2004:2003-2004
-PublishPort=2023-2024:2023-2024
-PublishPort=8125:8125/udp
-PublishPort=8125:8125
-
-Volume=graphite-conf:/opt/graphite/conf
-
-EnvironmentFile=graphite.env

quadlets/graphite/graphite.env

@@ -1 +0,0 @@
-EXAMPLE=value

quadlets/graphite/graphite.network

@@ -1,6 +0,0 @@
-[Unit]
-Description=Graphite network
-
-[Network]
-NetworkName=graphite
-

quadlets/graphite/graphite.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=graphite-conf
-

quadlets/graylog/graylog-datanode.container

@@ -1,28 +0,0 @@
-[Unit]
-Description=Graylog datanode
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/graylog/graylog-datanode:6.1
-ContainerName=graylog-datanode
-AutoUpdate=registry
-
-Network=graylog.network
-HostName=graylog-datanode
-PublishPort=8999:8999
-PublishPort=9200:9200
-PublishPort=9300:9300
-
-Volume=graylog-datanode:/var/lib/graylog-datanode
-
-Environment=GRAYLOG_DATANODE_ID_FILE=/var/lib/graylog-datanode/node-id
-Environment=GRAYLOG_DATANODE_MONGODB_URI=mongodb://graylog-db:27017/graylog
-
-Secret=graylog-password-secret,type=env,target=GRAYLOG_DATANODE_PASSWORD_SECRET
-

quadlets/graylog/graylog-db.container

@@ -1,21 +0,0 @@
-[Unit]
-Description=Graylog MongoDB
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/mongo:6.0
-ContainerName=graylog-db
-AutoUpdate=registry
-
-Network=graylog.network
-HostName=graylog-db
-
-Volume=graylog-db-data:/data/db
-Volume=graylog-db-config:/data/configdb
-

quadlets/graylog/graylog.container

@@ -1,45 +0,0 @@
-[Unit]
-Description=Graylog
-Wants=graylog-db
-Wants=graylog-database
-After=graylog-db
-After=graylog-database
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/graylog:6.1
-ContainerName=graylog
-AutoUpdate=registry
-
-Network=graylog.network
-HostName=graylog
-PublishPort=5044:5044/tcp
-PublishPort=5140:5140/udp
-PublishPort=5140:5140/tcp
-PublishPort=5555:5555/tcp
-PublishPort=5555:5555/udp
-PublishPort=9000:9000/tcp
-PublishPort=12201:12201/tcp
-PublishPort=12201:12201/udp
-PublishPort=13301:13301/tcp
-PublishPort=13302:13302/tcp
-
-Volume=graylog-data:/usr/share/graylog/data/data
-
-Environment=GRAYLOG_NODE_ID_FILE=/usr/share/graylog/data/data/node-id
-Environment=GRAYLOG_HTTP_BIND_ADDRESS=0.0.0.0:9000
-Environment=GRAYLOG_HTTP_EXTERNAL_URI=http://localhost:9000/
-Environment=GRAYLOG_MONGODB_URI=mongodb://graylog-db:27017/graylog
-
-Secret=graylog-password-secret,type=env,target=GRAYLOG_PASSWORD_SECRET
-Secret=graylog-root-password-sha2,type=env,target=GRAYLOG_ROOT_PASSWORD_SHA2
-
-Entrypoint=/usr/bin/tini
-Exec=-- /docker-entrypoint.sh
-

quadlets/graylog/graylog.network

@@ -1,7 +0,0 @@
-[Unit]
-Description=Graylog network
-
-[Network]
-NetworkName=graylog
-Subnet=172.25.1.0/29
-Gateway=172.25.0.1

quadlets/grocy/grocy.container

@@ -1,22 +0,0 @@
-[Unit]
-Description=Grocy grocery management
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=lscr.io/linuxserver/grocy
-ContainerName=grocy
-AutoUpdate=registry
-
-Network=grocy.network
-HostName=grocy
-PublishPort=9283:80
-
-Volume=grocy-config:/config
-
-Environment=TZ=Etc/UTC

quadlets/grocy/grocy.network

@@ -1 +0,0 @@
-[Network]

quadlets/grocy/grocy.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=grocy-config
-

quadlets/healthchecks/healthchecks-postgres.container

@@ -1,26 +0,0 @@
-[Unit]
-Description=Healthchecks postgres
-Requires=healthchecks-postgres.service
-After=healthchecks-postgres.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/postgres:16
-ContainerName=healthchecks-postgres
-AutoUpdate=registry
-
-Network=healthchecks.network
-HostName=healthchecks-postgres
-PublishPort=8000:8000
-
-Volume=healthchecks-postgres:/var/lib/postgresql/data
-
-Environment=POSTGRES_DB=healthchecks
-
-Secret=healthchecks-postgres-password,type=env,target=POSTGRES_PASSWORD

quadlets/healthchecks/healthchecks.container

@@ -1,24 +0,0 @@
-[Unit]
-Description=Healthchecks
-Requires=healthchecks-postgres.service
-After=healthchecks-postgres.service
-
-[Service]
-Restart=on-failure
-TimeoutStartSec=900
-
-[Install]
-WantedBy=default.target
-
-[Container]
-Image=docker.io/healthchecks:latest
-ContainerName=healthchecks
-AutoUpdate=registry
-
-Network=healthchecks.network
-HostName=healthchecks
-PublishPort=8000:8000
-
-EnvironmentFile=healthchecks.env
-
-Exec=uwsgi /opt/healthchecks/docker/uwsgi.ini

quadlets/healthchecks/healthchecks.env

@@ -1,80 +0,0 @@
-ALLOWED_HOSTS=localhost
-APPRISE_ENABLED=False
-DB=postgres
-DB_CONN_MAX_AGE=0
-DB_HOST=db
-DB_NAME=hc
-# Use Secret=...
-# DB_PASSWORD=fixme-postgres-password
-DB_PORT=5432
-DB_SSLMODE=prefer
-DB_TARGET_SESSION_ATTRS=read-write
-DB_USER=postgres
-DEBUG=False
-DEFAULT_FROM_EMAIL=healthchecks@example.org
-DISCORD_CLIENT_ID=
-DISCORD_CLIENT_SECRET=
-EMAIL_HOST=
-EMAIL_HOST_PASSWORD=
-EMAIL_HOST_USER=
-EMAIL_PORT=587
-EMAIL_USE_TLS=True
-EMAIL_USE_VERIFICATION=True
-INTEGRATIONS_ALLOW_PRIVATE_IPS=False
-LINENOTIFY_CLIENT_ID=
-LINENOTIFY_CLIENT_SECRET=
-MASTER_BADGE_LABEL=Mychecks
-MATRIX_ACCESS_TOKEN=
-MATRIX_HOMESERVER=
-MATRIX_USER_ID=
-MATTERMOST_ENABLED=True
-MSTEAMS_ENABLED=True
-OPSGENIE_ENABLED=True
-PAGERTREE_ENABLED=True
-PD_APP_ID=
-PD_ENABLED=True
-PING_BODY_LIMIT=10000
-PING_EMAIL_DOMAIN=localhost
-PING_ENDPOINT=http://localhost:8000/ping/
-PROMETHEUS_ENABLED=True
-PUSHBULLET_CLIENT_ID=
-PUSHBULLET_CLIENT_SECRET=
-PUSHOVER_API_TOKEN=
-PUSHOVER_EMERGENCY_EXPIRATION=86400
-PUSHOVER_EMERGENCY_RETRY_DELAY=300
-PUSHOVER_SUBSCRIPTION_URL=
-REGISTRATION_OPEN=True
-REMOTE_USER_HEADER=
-ROCKETCHAT_ENABLED=True
-RP_ID=
-S3_ACCESS_KEY=
-S3_BUCKET=
-S3_ENDPOINT=
-S3_REGION=
-S3_SECRET_KEY=
-S3_TIMEOUT=60
-S3_SECURE=True
-SECRET_KEY=---
-SHELL_ENABLED=False
-SIGNAL_CLI_SOCKET=
-SITE_LOGO_URL=
-SITE_NAME=Mychecks
-SITE_ROOT=http://localhost:8000
-SLACK_CLIENT_ID=
-SLACK_CLIENT_SECRET=
-SLACK_ENABLED=True
-# SMTPD_PORT=
-SPIKE_ENABLED=True
-TELEGRAM_BOT_NAME=ExampleBot
-TELEGRAM_TOKEN=
-TRELLO_APP_KEY=
-TWILIO_ACCOUNT=
-TWILIO_AUTH=
-TWILIO_FROM=
-TWILIO_USE_WHATSAPP=False
-USE_PAYMENTS=False
-VICTOROPS_ENABLED=True
-WEBHOOKS_ENABLED=True
-WHATSAPP_DOWN_CONTENT_SID=
-WHATSAPP_UP_CONTENT_SID=
-ZULIP_ENABLED=True

quadlets/healthchecks/healthchecks.network

@@ -1,6 +0,0 @@
-[Unit]
-Description=Healthchecks network
-
-[Network]
-NetworkName=healthchecks
-

quadlets/healthchecks/healthchecks.volume

@@ -1,3 +0,0 @@
-[Volume]
-VolumeName=healthchecks-postgres
-

quadlets/hoarder/data.volume

@@ -1,3 +1,2 @@
 [Volume]
 VolumeName=hoarder-data
-VolumeName=hoarder-meilisearch