feat: add dockcheck update labels and fix Gotify service names

- Add mag37.dockcheck.update labels to audiobookshelf, caddy, gitea services
- Fix Gotify container names in Caddyfile routing
- Add explicit container names for gotify and igotify-assistant services
- Update Authentik to version 2025.6.3
- Fix environment variable format in gotify-compose template

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

roles/docker/files/Caddyfile

@@ -86,11 +86,11 @@ home.thesatelliteoflove.com {
 }
 
 gotify.thesatelliteoflove.com {
-    reverse_proxy gotify-gotify-1:80
+    reverse_proxy gotify:80
 }
 
 gotify-assistant.thesatelliteoflove.com {
-    reverse_proxy gotify-igotify-assistant-1:8080
+    reverse_proxy igotify-assistant:8080
 }
 
 pdg.thesatelliteoflove.com {

roles/docker/templates/audiobookshelf-compose.yml.j2

@@ -16,6 +16,7 @@ services:
       glance.icon: si:audiobookshelf
       glance.url: https://{{ subdomains.audio }}/
       glance.description: Audio book server
+      mag37.dockcheck.update: true
 volumes:
   audiobooks:
     driver: local

roles/docker/templates/authentik-compose.yml.j2

@@ -37,7 +37,7 @@ services:
       glance.parent: authentik
       glance.name: Redis
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.2}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
     restart: unless-stopped
     command: server
     environment:
@@ -64,7 +64,7 @@ services:
       glance.description: Authentication server
       glance.id: authentik
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.2}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
     restart: unless-stopped
     command: worker
     environment:

roles/docker/templates/caddy-compose.yml.j2

@@ -18,6 +18,7 @@ services:
       glance.icon: si:caddy
       glance.url: https://{{ primary_domain }}/
       glance.description: Reverse proxy
+      mag37.dockcheck.update: true
     networks:
       default:
         ipv4_address: {{ docker.hairpin_ip }}

roles/docker/templates/gitea-compose.yml.j2

@@ -20,6 +20,7 @@ services:
       glance.url: https://{{ subdomains.git }}/
       glance.description: Code repo
       glance.id: gitea
+      mag37.dockcheck.update: true
     volumes:
       - gitea:/data
       - /etc/timezone:/etc/timezone:ro
@@ -46,6 +47,7 @@ services:
     labels:
       glance.parent: gitea
       glance.name: Worker
+      mag37.dockcheck.update: true
     volumes:
       - ./runner-config.yaml:/config.yaml
       - ./data:/data

roles/docker/templates/gotify-compose.yml.j2

@@ -1,6 +1,7 @@
 services:
   gotify:
     image: gotify/server:latest
+    container_name: gotify
     restart: unless-stopped
     volumes:
       - gotify_data:/app/data
@@ -19,10 +20,11 @@ services:
   igotify-assistant:
     image: ghcr.io/androidseb25/igotify-notification-assist:latest
     restart: unless-stopped
+    container_name: igotify-assistant
     volumes:
       - igotify_data:/app/data
     environment:
-      - TZ=America/Denver
+      TZ: America/Denver
     depends_on:
       - gotify
     labels:

roles/docker/templates/mmdl-compose.yml.j2

@@ -35,6 +35,7 @@ services:
     labels:
       glance.parent: mmdl
       glance.name: DB
+      mag37.dockcheck.update: true
 
 volumes:
   mmdl_db: