Ship homelab quick wins: Recyclarr, infra pins, jd.ginnoir.com, and LAN lockdown.

Add Recyclarr to the media stack, pin database/object-store/Caddy/Vault images with Watchtower disabled, expose JDownloader at jd.ginnoir.com, and restrict minio/homarr/docs to internal_only. Mark TB-002–004 and TB-033 complete; bundle batch-3 OIDC env for FreshRSS, ownCloud, and Reactive Resume.
2026-06-11 02:28:06 -05:00
parent 1ce63153ab
commit 51acb44322
34 changed files with 392 additions and 105 deletions
@@ -46,9 +46,11 @@ services:
      - "8997:8080"

  romm-db:
-    image: mariadb:latest
+    image: mariadb:12.3
    container_name: romm-db
    restart: unless-stopped
+    labels:
+      - "com.centurylabs.watchtower.enable=false"
    networks: [roms]
    env_file:
      - stack.env