Ship homelab quick wins: Recyclarr, infra pins, jd.ginnoir.com, and LAN lockdown.

Add Recyclarr to the media stack, pin database/object-store/Caddy/Vault images with Watchtower disabled, expose JDownloader at jd.ginnoir.com, and restrict minio/homarr/docs to internal_only. Mark TB-002–004 and TB-033 complete; bundle batch-3 OIDC env for FreshRSS, ownCloud, and Reactive Resume.
2026-06-11 02:28:06 -05:00
parent 1ce63153ab
commit 51acb44322
34 changed files with 392 additions and 105 deletions
@@ -31,6 +31,8 @@ services:
    container_name: postgres_famapp
    image: postgres:16-alpine
    restart: unless-stopped
+    labels:
+      - "com.centurylabs.watchtower.enable=false"
    networks: [famapp]
    env_file:
      - stack.env
@@ -44,9 +46,11 @@ services:

  famapp-minio:
    container_name: minio_famapp
-    image: minio/minio:latest
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
    command: server /data --console-address ":9003"
    restart: unless-stopped
+    labels:
+      - "com.centurylabs.watchtower.enable=false"
    networks: [famapp]
    env_file:
      - stack.env