update GTS version

dns.yml

@@ -37,6 +37,8 @@
             ip: "152.53.36.98"
           - name: watcher
             ip: "152.53.36.98"
+          - name: chat
+            ip: "152.53.36.98"
       - name: nerder.land
         dns_records:
           - name: "forms"

roles/docker/files/Caddyfile

@@ -67,6 +67,15 @@ thesatelliteoflove.com {
     file_server
 }
 
+chat.thesatelliteoflove.com, chat.thesatelliteoflove.com:8448 {
+    handle /.well-known/* {
+        root * /srv/matrix
+        file_server
+    }
+    reverse_proxy /_matrix/* conduit-homeserver-1:6167
+}
+
+
 bookmarks.thesatelliteoflove.com {
     reverse_proxy hoarder-web-1:3000
 }

roles/docker/files/caddy-compose.yml

@@ -6,6 +6,8 @@ services:
       - "80:80"
       - "443:443"
       - "443:443/udp"
+      - "8448:8448"
+      - "8448:8448/udp"
     volumes:
       - ./Caddyfile:/etc/caddy/Caddyfile
       - ./site:/srv

roles/docker/files/client

@@ -0,0 +1,5 @@
+{
+    "m.homeserver": {
+        "base_url": "https://chat.thesatelliteoflove.com"
+    }
+}

roles/docker/files/dockge-compose.yml

@@ -2,6 +2,11 @@ services:
   dockge:
     image: louislam/dockge:1
     restart: unless-stopped
+    labels:
+      glance.name: Dockge
+      glance.icon: si:docker
+      glance.url: http://netcup.porgy-porgy.ts.net:5001
+      glance.description: Docker management      
     ports:
       # Host Port : Container Port
       - 5001:5001

roles/docker/files/server

@@ -0,0 +1,3 @@
+{
+    "m.server": "chat.thesatelliteoflove.com:443"
+}

roles/docker/tasks/appriseapi.yml

@@ -0,0 +1,19 @@
+- name: make appriseapi directories
+  ansible.builtin.file:
+    path: "{{ item}}"
+    state: directory
+  loop:
+    - /opt/stacks/appriseapi
+
+- name: Template out the compose file
+  ansible.builtin.template:
+    src: appriseapi-compose.yml.j2
+    dest: /opt/stacks/appriseapi/compose.yml
+    owner: root
+    mode: 644
+
+- name: deploy appriseapi stack
+  community.docker.docker_compose_v2:
+    project_src: /opt/stacks/appriseapi
+    files:
+    - compose.yml

roles/docker/tasks/conduit.yml

@@ -0,0 +1,29 @@
+- name: make conduit directories
+  ansible.builtin.file:
+    path: "{{ item}}"
+    state: directory
+  loop:
+    - /opt/stacks/conduit
+
+- name: copy well-known files
+  ansible.builtin.copy:
+    src: "{{item}}"
+    dest: /opt/stacks/caddy/site/matrix/
+    owner: root
+    mode: 644
+  loop:
+    - client
+    - server
+
+- name: Template out the compose file
+  ansible.builtin.template:
+    src: conduit-compose.yml.j2
+    dest: /opt/stacks/conduit/compose.yml
+    owner: root
+    mode: 644
+
+- name: deploy conduit stack
+  community.docker.docker_compose_v2:
+    project_src: /opt/stacks/conduit
+    files:
+    - compose.yml

roles/docker/tasks/main.yml

@@ -61,6 +61,7 @@
     project_src: /opt/dockge
     files:
     - dockge.yml
+  tags: dockge
 
 - name: Install caddy
   import_tasks: caddy.yml
@@ -153,3 +154,15 @@
 - name: Install changedetection
   import_tasks: changedetection.yml
   tags: changedetection
+
+- name: Install conduit
+  import_tasks: conduit.yml
+  tags: conduit
+
+- name: Install pinchflat
+  import_tasks: pinchflat.yml
+  tags: pinchflat
+
+- name: Install appriseapi
+  import_tasks: appriseapi.yml 
+  tags: appriseapi 

roles/docker/tasks/pinchflat.yml

@@ -0,0 +1,19 @@
+- name: make pinchflat directories
+  ansible.builtin.file:
+    path: "{{ item}}"
+    state: directory
+  loop:
+    - /opt/stacks/pinchflat
+
+- name: Template out the compose file
+  ansible.builtin.template:
+    src: pinchflat-compose.yml.j2
+    dest: /opt/stacks/pinchflat/compose.yml
+    owner: root
+    mode: 644
+
+- name: deploy pinchflat stack
+  community.docker.docker_compose_v2:
+    project_src: /opt/stacks/pinchflat
+    files:
+    - compose.yml

roles/docker/templates/appriseapi-compose.yml.j2

@@ -0,0 +1,21 @@
+services:
+  apprise:
+    container_name: apprise
+    ports:
+      - 100.70.169.99:8000:8000
+    environment:
+      - APPRISE_STATEFUL_MODE=simple
+      - APPRISE_WORKER_COUNT=1
+    volumes:
+      - config:/config
+      - plugin:/plugin
+      - attach:/attach
+    image: caronc/apprise:latest
+volumes:
+  config:
+  attach:
+  plugin:
+networks:
+  default:
+    external: true
+    name: lava

roles/docker/templates/audiobookshelf-compose.yml.j2

@@ -8,6 +8,7 @@ services:
       - metadata:/metadata
     environment:
       - TZ=America/Denver
+      - DISABLE_SSRF_REQUEST_FILTER=1
     extra_hosts:
       - 'auth.thesatelliteoflove.com:172.20.0.5'
     labels:

roles/docker/templates/authentik-compose.yml.j2

@@ -37,7 +37,7 @@ services:
       glance.parent: authentik
       glance.name: Redis
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.12.0}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.2.1}
     restart: unless-stopped
     command: server
     environment:
@@ -64,7 +64,7 @@ services:
       glance.description: Authentication server
       glance.id: authentik
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.12.0}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.2.1}
     restart: unless-stopped
     command: worker
     environment:

roles/docker/templates/changedetection-compose.yml.j2

@@ -4,6 +4,14 @@ services:
       image: ghcr.io/dgtlmoon/changedetection.io
       container_name: changedetection
       hostname: changedetection
+      extra_hosts:
+        - 'chat.thesatelliteoflove.com:172.20.0.5'
+      labels:
+        glance.name: Changedetection
+        glance.icon: si:watchtower
+        glance.url: https://watcher.thesatelliteoflove.com/
+        glance.description: Changedetection
+        glance.id: changedetection
       volumes:
         - changedetection-data:/datastore
 # Configurable proxy list support, see https://github.com/dgtlmoon/changedetection.io/wiki/Proxy-configuration#proxy-list-support
@@ -85,6 +93,9 @@ services:
      # RECOMMENDED FOR FETCHING PAGES WITH CHROME
     sockpuppetbrowser:
         hostname: sockpuppetbrowser
+        labels:
+          glance.parent: changedetection
+          glance.name: Browser
         image: dgtlmoon/sockpuppetbrowser:latest
         cap_add:
             - SYS_ADMIN

roles/docker/templates/codeserver-compose.yml.j2

@@ -2,6 +2,11 @@ services:
   codeserver:
     stdin_open: true
     tty: true
+    labels:
+      glance.name: Code Server
+      glance.icon: si:vscodium
+      glance.url: https://code.thesatelliteoflove.com/
+      glance.description: Code Server
     container_name: codeserver
     volumes:
       - home:/home

roles/docker/templates/conduit-compose.yml.j2

@@ -0,0 +1,46 @@
+services:
+    homeserver:
+        image: matrixconduit/matrix-conduit:next
+        restart: unless-stopped
+        volumes:
+            - db:/var/lib/matrix-conduit/
+        labels:
+          glance.name: Conduit
+          glance.icon: si:matrix
+          glance.url: https://chat.thesatelliteoflove.com/
+          glance.description: Matrix server
+        environment:
+            CONDUIT_SERVER_NAME: chat.thesatelliteoflove.com # EDIT THIS
+            CONDUIT_DATABASE_PATH: /var/lib/matrix-conduit/
+            CONDUIT_DATABASE_BACKEND: rocksdb
+            CONDUIT_PORT: 6167
+            CONDUIT_MAX_REQUEST_SIZE: 20000000 # in bytes, ~20 MB
+            CONDUIT_ALLOW_REGISTRATION: 'true'
+            CONDUIT_ALLOW_FEDERATION: 'true'
+            CONDUIT_ALLOW_CHECK_FOR_UPDATES: 'true'
+            CONDUIT_TRUSTED_SERVERS: '["matrix.org"]'
+            #CONDUIT_MAX_CONCURRENT_REQUESTS: 100
+            CONDUIT_ADDRESS: 0.0.0.0
+            CONDUIT_CONFIG: '' # Ignore this
+    #
+    ### Uncomment if you want to use your own Element-Web App.
+    ### Note: You need to provide a config.json for Element and you also need a second
+    ###       Domain or Subdomain for the communication between Element and Conduit
+    ### Config-Docs: https://github.com/vector-im/element-web/blob/develop/docs/config.md
+    # element-web:
+    #     image: vectorim/element-web:latest
+    #     restart: unless-stopped
+    #     ports:
+    #         - 8009:80
+    #     volumes:
+    #         - ./element_config.json:/app/config.json
+    #     depends_on:
+    #         - homeserver
+
+volumes:
+    db:
+
+networks:
+  default:
+    external: true
+    name: lava

roles/docker/templates/dawarich-compose.yml.j2

@@ -12,9 +12,15 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
+    labels:
+      glance.parent: dawarich
+      glance.name: Redis
   dawarich_db:
-    image: postgres:17-alpine
+    image: postgis/postgis:17-3.5-alpine
     shm_size: 1G
+    labels:
+      glance.parent: dawarich
+      glance.name: DB
     container_name: dawarich_db
     volumes:
       - dawarich_db_data:/var/lib/postgresql/data
@@ -32,6 +38,12 @@ services:
   dawarich_app:
     image: freikin/dawarich:latest
     container_name: dawarich_app
+    labels:
+      glance.name: Dawarich
+      glance.icon: si:openstreetmap
+      glance.url: https://loclog.thesatelliteoflove.com/
+      glance.description: Dawarich
+      glance.id: dawarich
     volumes:
       - dawarich_public:/var/app/public
       - dawarich_watched:/var/app/tmp/imports/watched
@@ -84,6 +96,9 @@ services:
   dawarich_sidekiq:
     image: freikin/dawarich:latest
     container_name: dawarich_sidekiq
+    labels:
+      glance.parent: dawarich
+      glance.name: Sidekiq
     volumes:
       - dawarich_public:/var/app/public
       - dawarich_watched:/var/app/tmp/imports/watched

roles/docker/templates/glance.yml.j2

@@ -108,6 +108,8 @@ pages:
         - paperless-ngx/paperless-ngx
         - linuxserver/docker-calibre-web
         - coder/code-server
+        - dgtlmoon/changedetection.io
+        - Freika/dawarich
     - size: full
       widgets:
       - type: rss

roles/docker/templates/gotosocial-compose.yml.j2

@@ -1,6 +1,6 @@
 services:
   gotosocial:
-    image: superseriousbusiness/gotosocial:0.17.3
+    image: superseriousbusiness/gotosocial:0.18.0
     container_name: gotosocial
     user: 1000:1000
     extra_hosts:

roles/docker/templates/pinchflat-compose.yml.j2

@@ -0,0 +1,16 @@
+services:
+  pinchflat:
+    environment:
+      - TZ=America/Denver
+    ports:
+      - 100.70.169.99:8945:8945
+    volumes:
+      - ./config:/config
+      - data:/downloads
+    image: ghcr.io/kieraneglin/pinchflat:latest
+volumes:
+  data:
+networks:
+  default:
+    external: true
+    name: lava