Update container images and add Immich & Yamtrack stacksHEADmaster

- cAdvisor: 0.56.2 -> 0.60.6
- Docuseal: 2.3.4 -> 3.3.6
- Gotify: 2.9.0 -> 3.1.1
- Grafana: 11.3.0 -> 13.1.0 (switch from grafana-oss)
- PrivateBin: 2.0.3 -> 2.1.1
- Prometheus: 3.9.1 -> 3.16.0
- Syncthing: 2.0.14 -> 2.1.7
- Uptime-Kuma: 2.1.3 -> 2.5.9
- Vaultwarden: 1.35.3 -> 1.37.5
- Add Immich stack with machine learning, Valkey and PostgreSQL
- Add Yamtrack stack with Redis
- Configure tmpfs mounts for PrivateBin

12 files changed, 112 insertions, 9 deletions

diff --git a/.gitignore b/.gitignore
index 8eb16b1..d9026e0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,6 +11,7 @@
 # Ignore specific directories
 privatebin/privatebin-data/
 roundcube/www/
+immich-app/library
 
 # Ignore .env explicitly
 .env
diff --git a/cadvisor/compose.yaml b/cadvisor/compose.yaml
index 0e390c9..73929ec 100644
--- a/cadvisor/compose.yaml
+++ b/cadvisor/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
   cadvisor:
-    image: ghcr.io/google/cadvisor:0.56.2
+    image: ghcr.io/google/cadvisor:0.60.6
     container_name: cadvisor
     ports:
       - 10.0.0.1:8084:8080
diff --git a/docuseal/compose.yaml b/docuseal/compose.yaml
index 6318ff8..5d65826 100644
--- a/docuseal/compose.yaml
+++ b/docuseal/compose.yaml
@@ -2,7 +2,7 @@
 services:
   docuseal:
     container_name: docuseal
-    image: docuseal/docuseal:2.3.4
+    image: docuseal/docuseal:3.3.6
     ports:
       - 10.0.0.1:3030:3000
     volumes:
diff --git a/gotify/compose.yaml b/gotify/compose.yaml
index 7a6557d..cb9200f 100644
--- a/gotify/compose.yaml
+++ b/gotify/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
   gotify:
-    image: gotify/server:2.9.0
+    image: gotify/server:3.1.1
     restart: unless-stopped
     ports:
       - 10.0.0.1:8082:80
diff --git a/grafana/compose.yaml b/grafana/compose.yaml
index 1f7e191..408ab63 100644
--- a/grafana/compose.yaml
+++ b/grafana/compose.yaml
@@ -5,7 +5,7 @@ volumes:
 
 services:
   grafana:
-    image: docker.io/grafana/grafana-oss:11.3.0
+    image: docker.io/grafana/grafana:13.1.0
     container_name: grafana
     ports:
       - 10.0.0.1:3000:3000
diff --git a/immich-app/compose.yaml b/immich-app/compose.yaml
new file mode 100644
index 0000000..eac0e41
--- /dev/null
+++ b/immich-app/compose.yaml
@@ -0,0 +1,77 @@
+#
+# WARNING: To install Immich, follow our guide: https://docs.immich.app/install/docker-compose
+#
+# Make sure to use the docker-compose.yml of the current release:
+#
+# https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+#
+# The compose file on main may not be compatible with the latest release.
+
+name: immich
+
+services:
+  immich-server:
+    container_name: immich_server
+    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
+    # extends:
+    #   file: hwaccel.transcoding.yml
+    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
+    volumes:
+      # Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
+      - ${UPLOAD_LOCATION}:/data
+      - /data/Synck/immich:/usr/src/app/external:ro
+      - /etc/localtime:/etc/localtime:ro
+    env_file:
+      - .env
+    ports:
+      - 10.0.0.1:2283:2283
+    depends_on:
+      - redis
+      - database
+    restart: always
+    healthcheck:
+      disable: false
+
+  immich-machine-learning:
+    container_name: immich_machine_learning
+    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
+    # Example tag: ${IMMICH_VERSION:-release}-cuda
+    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
+    # extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
+    #   file: hwaccel.ml.yml
+    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    volumes:
+      - model-cache:/cache
+    env_file:
+      - .env
+    restart: always
+    healthcheck:
+      disable: false
+
+  redis:
+    container_name: immich_redis
+    image: docker.io/valkey/valkey:9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d
+    healthcheck:
+      test: redis-cli ping | grep -q PONG || exit 1
+    restart: always
+
+  database:
+    container_name: immich_postgres
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
+    environment:
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_USER: ${DB_USERNAME}
+      POSTGRES_DB: ${DB_DATABASE_NAME}
+      POSTGRES_INITDB_ARGS: '--data-checksums'
+      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
+      # DB_STORAGE_TYPE: 'HDD'
+    volumes:
+      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
+      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
+    shm_size: 128mb
+    restart: always
+    healthcheck:
+      disable: false
+
+volumes:
+  model-cache:
diff --git a/privatebin/compose.yaml b/privatebin/compose.yaml
index dfd7da4..27e0732 100644
--- a/privatebin/compose.yaml
+++ b/privatebin/compose.yaml
@@ -1,6 +1,6 @@
 services:
   nginx-fpm-alpine:
-    image: privatebin/nginx-fpm-alpine:2.0.3
+    image: privatebin/nginx-fpm-alpine:2.1.1
     restart: unless-stopped
     read_only: true
     ports:
@@ -8,4 +8,7 @@ services:
     volumes:
       - $PWD/privatebin-data:/srv/data
       - $PWD/conf.php:/srv/cfg/conf.php:ro
+    tmpfs:
+      - /tmp
+      - /run:exec
 networks: {}
diff --git a/prometheus/compose.yaml b/prometheus/compose.yaml
index c87d6d6..f54c358 100644
--- a/prometheus/compose.yaml
+++ b/prometheus/compose.yaml
@@ -4,7 +4,7 @@ volumes:
     driver: local
 services:
   prometheus:
-    image: docker.io/prom/prometheus:v3.9.1
+    image: docker.io/prom/prometheus:v3.16.0
     container_name: prometheus
     ports:
       - 10.0.0.1:9090:9090
diff --git a/syncthing/compose.yaml b/syncthing/compose.yaml
index b504833..73fcfb6 100644
--- a/syncthing/compose.yaml
+++ b/syncthing/compose.yaml
@@ -1,6 +1,6 @@
 services:
   syncthing:
-    image: ghcr.io/syncthing/syncthing:2.0.14
+    image: ghcr.io/syncthing/syncthing:2.1.7
     container_name: syncthing
     hostname: VPS
     environment:
diff --git a/uptime-kuma/compose.yaml b/uptime-kuma/compose.yaml
index eeed5d2..0de1a7c 100644
--- a/uptime-kuma/compose.yaml
+++ b/uptime-kuma/compose.yaml
@@ -1,7 +1,7 @@
 services:
   uptime-kuma:
     container_name: uptime-kuma
-    image: louislam/uptime-kuma:2.1.3
+    image: louislam/uptime-kuma:2.5.9
     restart: unless-stopped
     ports:
       - 10.0.0.1:3001:3001
diff --git a/vaultwarden/compose.yaml b/vaultwarden/compose.yaml
index 03063e5..7e7e235 100644
--- a/vaultwarden/compose.yaml
+++ b/vaultwarden/compose.yaml
@@ -7,6 +7,6 @@ services:
     ports:
       - 10.0.0.1:8090:80
     restart: unless-stopped
-    image: vaultwarden/server:1.35.3
+    image: vaultwarden/server:1.37.5
 networks: {}
 ...
diff --git a/yamtrack/compose.yaml b/yamtrack/compose.yaml
new file mode 100644
index 0000000..446f765
--- /dev/null
+++ b/yamtrack/compose.yaml
@@ -0,0 +1,22 @@
+services:
+  yamtrack:
+    container_name: yamtrack
+    image: ghcr.io/fuzzygrim/yamtrack
+    restart: unless-stopped
+    depends_on:
+      - redis
+    env_file:
+      - .env
+    volumes:
+      - ./db:/yamtrack/db
+    ports:
+      - 10.0.0.1:8083:8000
+  redis:
+    container_name: yamtrack-redis
+    image: redis:8-alpine
+    restart: unless-stopped
+    volumes:
+      - yamtrack_redis_data:/data
+volumes:
+  yamtrack_redis_data: null
+networks: {}