From e40a120ea97ede9afffd78bef9d54bbc03b923bb Mon Sep 17 00:00:00 2001
From: Nils Grunwald <nilsgrunwald@msn.com>
Date: Sun, 19 Apr 2026 13:43:20 +0200
Subject: [PATCH] Upload latest changes

---
 gitea/docker-compose.yml       |  4 +-
 immich/.env                    |  3 +-
 immich/docker-compose.yml      | 24 +--------
 immich/docker-compose.yml.save | 97 ++++++++++++++++++++++++++++++++++
 mosquitto/docker-compose.yml   |  3 --
 n8n/.env                       | 13 +++++
 n8n/compose.yaml               | 44 +++++++++++++++
 nextcloud/docker-compose.yml   |  2 +-
 nginx/docker-compose.yml       |  2 +-
 paperless/docker-compose.yml   |  5 +-
 traefik/docker-compose.yaml    |  2 +-
 11 files changed, 166 insertions(+), 33 deletions(-)
 create mode 100644 immich/docker-compose.yml.save
 create mode 100644 n8n/.env
 create mode 100644 n8n/compose.yaml

diff --git a/gitea/docker-compose.yml b/gitea/docker-compose.yml
index d253ae8..5d67acf 100644
--- a/gitea/docker-compose.yml
+++ b/gitea/docker-compose.yml
@@ -6,7 +6,7 @@ networks:
 
 services:
   server:
-    image: gitea/gitea:1.22.3
+    image: gitea/gitea:1.24.6
     container_name: gitea
     environment:
       - USER_UID=1000
@@ -46,4 +46,4 @@ services:
       
 volumes:
   gitea_data:
-  gitea_mysql:
\ No newline at end of file
+  gitea_mysql:
diff --git a/immich/.env b/immich/.env
index 27c3e95..61c883d 100644
--- a/immich/.env
+++ b/immich/.env
@@ -1,3 +1,4 @@
+
 # You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
 
 # The location where your uploaded files are stored
@@ -9,7 +10,7 @@ DB_DATA_LOCATION=/media/immich/postgres
 # TZ=Etc/UTC
 
 # The Immich version to use. You can pin this to a specific version like "v1.71.0"
-IMMICH_VERSION=release
+IMMICH_VERSION=v2.5.6
 
 # Connection secret for postgres. You should change it to a random password
 # Please use only the characters `A-Za-z0-9`, without special characters or spaces
diff --git a/immich/docker-compose.yml b/immich/docker-compose.yml
index a95998f..aaa718a 100644
--- a/immich/docker-compose.yml
+++ b/immich/docker-compose.yml
@@ -71,7 +71,7 @@ services:
 
   database:
     container_name: immich_postgres
-    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0
     environment:
       POSTGRES_PASSWORD: ${DB_PASSWORD}
       POSTGRES_USER: ${DB_USERNAME}
@@ -80,29 +80,9 @@ services:
     volumes:
       # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
       - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
-    healthcheck:
-      test: pg_isready --dbname='${DB_DATABASE_NAME}' --username='${DB_USERNAME}' || exit 1; Chksum="$$(psql --dbname='${DB_DATABASE_NAME}' --username='${DB_USERNAME}' --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
-      interval: 5m
-      #start_interval: 30s
-      start_period: 5m
     networks:
       - immich
-    command:
-      [
-        'postgres',
-        '-c',
-        'shared_preload_libraries=vectors.so',
-        '-c',
-        'search_path="$$user", public, vectors',
-        '-c',
-        'logging_collector=on',
-        '-c',
-        'max_wal_size=2GB',
-        '-c',
-        'shared_buffers=512MB',
-        '-c',
-        'wal_compression=on',
-      ]
+    shm_size: 128mb
     restart: always
 
 volumes:
diff --git a/immich/docker-compose.yml.save b/immich/docker-compose.yml.save
new file mode 100644
index 0000000..0540b18
--- /dev/null
+++ b/immich/docker-compose.yml.save
@@ -0,0 +1,97 @@
+
+networks:
+  traefik_web:
+    external: true
+
+networks:
+  traefik_web:
+    external: true
+#
+# WARNING: Make sure to use the docker-compose.yml of the current release:
+#
+# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+#
+# The compose file on main may not be compatible with the latest release.
+#
+
+name: immich
+
+networks:
+  traefik_web:
+    external: true 
+  immich:
+
+services:
+  immich-server:
+    container_name: immich_server
+    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
+    # extends:
+    #   file: hwaccel.transcoding.yml
+    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
+    volumes:
+      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
+      - ${UPLOAD_LOCATION}:/usr/src/app/upload
+      - /etc/localtime:/etc/localtime:ro
+    env_file:
+      - .env
+    ports:
+      - '2283:2283'
+    networks:
+      - traefik_web
+      - immich
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.immich.rule=Host(`immich.montana2000.freeddns.org`)"
+      - "traefik.http.services.immich-service.loadbalancer.server.port=2283"
+    depends_on:
+      - redis
+      - database
+    restart: always
+    healthcheck:
+      disable: false
+
+  immich-machine-learning:
+    container_name: immich_machine_learning
+    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
+    # Example tag: ${IMMICH_VERSION:-release}-cuda
+    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
+    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
+    #   file: hwaccel.ml.yml
+    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    volumes:
+      - model-cache:/cache
+    networks:
+      - immich
+    env_file:
+      - .env
+    restart: always
+    healthcheck:
+      disable: false
+
+  redis:
+    container_name: immich_redis
+    image: docker.io/redis:6.2-alpine@sha256:2ba50e1ac3a0ea17b736ce9db2b0a9f6f8b85d4c27d5f5accc6a416d8f42c6d5
+    healthcheck:
+      test: redis-cli ping || exit 1
+    restart: always
+    networks:
+      - immich
+
+  database:
+    container_name: immich_postgres
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0
+    environment:
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_USER: ${DB_USERNAME}
+      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_INITDB_ARGS: '--data-checksums'
+    volumes:
+      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
+    networks:
+      - immich
+    shm_size: 128mb
+    restart: always
+
+volumes:
+  model-cache:
diff --git a/mosquitto/docker-compose.yml b/mosquitto/docker-compose.yml
index cdeb5c7..00fa501 100644
--- a/mosquitto/docker-compose.yml
+++ b/mosquitto/docker-compose.yml
@@ -20,6 +20,3 @@ volumes:
   mosquitto_data:
   mosquitto_log:
 
-
-  
-   
diff --git a/n8n/.env b/n8n/.env
new file mode 100644
index 0000000..f42b605
--- /dev/null
+++ b/n8n/.env
@@ -0,0 +1,13 @@
+# DOMAIN_NAME and SUBDOMAIN together determine where n8n will be reachable from
+# The top level domain to serve from
+DOMAIN_NAME=montana2000.freeddns.org
+
+# The subdomain to serve from
+SUBDOMAIN=n8n
+
+# The above example serve n8n at: https://n8n.example.com
+
+# Optional timezone to set which gets used by Cron and other scheduling nodes
+# New York is the default value if not set
+GENERIC_TIMEZONE=Europe/Berlin
+
diff --git a/n8n/compose.yaml b/n8n/compose.yaml
new file mode 100644
index 0000000..e700d61
--- /dev/null
+++ b/n8n/compose.yaml
@@ -0,0 +1,44 @@
+services:
+
+  n8n:
+    image: docker.n8n.io/n8nio/n8n
+    restart: always
+    ports:
+      - "127.0.0.1:5678:5678"
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.n8n.rule=Host(`${SUBDOMAIN}.${DOMAIN_NAME}`)
+      - traefik.http.routers.n8n.tls=true
+      - traefik.http.routers.n8n.entrypoints=https
+      - traefik.http.routers.n8n.tls.certresolver=mytlschallenge
+      - traefik.http.middlewares.n8n.headers.SSLRedirect=true
+      - traefik.http.middlewares.n8n.headers.STSSeconds=315360000
+      - traefik.http.middlewares.n8n.headers.browserXSSFilter=true
+      - traefik.http.middlewares.n8n.headers.contentTypeNosniff=true
+      - traefik.http.middlewares.n8n.headers.forceSTSHeader=true
+      - traefik.http.middlewares.n8n.headers.SSLHost=${DOMAIN_NAME}
+      - traefik.http.middlewares.n8n.headers.STSIncludeSubdomains=true
+      - traefik.http.middlewares.n8n.headers.STSPreload=true
+      - traefik.http.routers.n8n.middlewares=n8n@docker
+    networks:
+      - traefik_web
+    environment:
+      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
+      - N8N_HOST=${SUBDOMAIN}.${DOMAIN_NAME}
+      - N8N_PORT=5678
+      - N8N_PROTOCOL=https
+      - NODE_ENV=production
+      - WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/
+      - GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
+      - TZ=${GENERIC_TIMEZONE}
+    volumes:
+      - n8n_data:/home/node/.n8n
+      - ./local-files:/files
+
+volumes:
+  n8n_data:
+
+
+networks:
+  traefik_web:
+    external: true
diff --git a/nextcloud/docker-compose.yml b/nextcloud/docker-compose.yml
index 25439dc..880c162 100644
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -21,7 +21,7 @@ services:
     
 
   app:
-    image: nextcloud:30.0.1
+    image: nextcloud:32.0.6
     container_name: nextcloud
     restart: always
     ports:
diff --git a/nginx/docker-compose.yml b/nginx/docker-compose.yml
index b949444..d8f2857 100644
--- a/nginx/docker-compose.yml
+++ b/nginx/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   nginx:
-    image: nginx:1.27
+    image: nginx:1.29
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.nginx.rule=Host(`montana2000.freeddns.org`)"
diff --git a/paperless/docker-compose.yml b/paperless/docker-compose.yml
index 1c9b03d..ac28f42 100644
--- a/paperless/docker-compose.yml
+++ b/paperless/docker-compose.yml
@@ -95,7 +95,8 @@ services:
       - traefik_web
 
   tika:
-    image: ghcr.io/paperless-ngx/tika:latest
+    # image: ghcr.io/paperless-ngx/tika:latest
+    image: docker.io/apache/tika:latest
     restart: unless-stopped
     networks:
       - traefik_web
@@ -108,4 +109,4 @@ volumes:
 
 networks:
   traefik_web:
-    external: true 
\ No newline at end of file
+    external: true 
diff --git a/traefik/docker-compose.yaml b/traefik/docker-compose.yaml
index 83676c7..ad442a2 100644
--- a/traefik/docker-compose.yaml
+++ b/traefik/docker-compose.yaml
@@ -3,7 +3,7 @@ version: "3.3"
 services:
 
   traefik:
-    image: "traefik:v3.2"
+    image: "traefik:v3.6.10"
     container_name: "traefik"
     command:
       #- "--log.level=DEBUG"