Connect your speaker — everything stays on your node.
\n \n\n
\n
Whisperspeech-to-text ready on :10300
\n
Pipertext-to-speech ready on :10200
\n
Wake word“Hey Jarvis” on the speaker (openWakeWord on :10400)
\n
Speakerput it in pairing mode — ring LED blinking yellow
\n
\n\n
\n
Nodechecking…
\n
Bitcoin—
\n
Peers—
\n
\n\n
\n This page isn’t running over HTTPS, so the browser blocks Bluetooth.\n Open it via its https://…:10380 address (accept the self-signed\n certificate) and the button below will work.\n
\n\n
\n \n \n \n \n \n
Ready. Click the button, then pick “PineVoice” in the Bluetooth popup.
\n
\n\n
After WiFi joins, one manual step remains — pair the\n speaker in Home Assistant: Settings → Devices & services →\n Add Wyoming Protocol, host = the speaker’s IP, port\n 10700. Whisper, Piper, openWakeWord and the Assist pipeline\n are wired up automatically when Pine installs. Wake word:\n “Hey Jarvis.” Ask node things like “what’s the block\n height?”, “how many peers?”, “is the node\n synced?” or “what’s my lightning balance?” — and when a\n Claude API key is set on the node, anything else gets answered by\n Claude. New mesh messages are announced on the speaker too.
\n
Troubleshooting: if it hears you (LED reacts) but answers\n are silent, unplug and replug the speaker — an interrupted answer can\n wedge its audio output until it reboots.
Connect your speaker \u2014 everything stays on your node.
\n \n\n
\n
Whisperspeech-to-text ready on :10300
\n
Pipertext-to-speech ready on :10200
\n
Wake word\u201cHey Jarvis\u201d on the speaker (openWakeWord on :10400)
\n
Speakerput it in pairing mode \u2014 ring LED blinking yellow
\n
\n\n
\n
Nodechecking\u2026
\n
Bitcoin\u2014
\n
Peers\u2014
\n
\n\n
\n This page isn\u2019t running over HTTPS, so the browser blocks Bluetooth.\n Open it via its https://\u2026:10380 address (accept the self-signed\n certificate) and the button below will work.\n
\n\n
\n \n \n \n \n \n
Ready. Click the button, then pick \u201cPineVoice\u201d in the Bluetooth popup.
\n
\n\n
After WiFi joins, one manual step remains \u2014 pair the\n speaker in Home Assistant: Settings \u2192 Devices & services \u2192\n Add Wyoming Protocol, host = the speaker\u2019s IP, port\n 10700. Whisper, Piper, openWakeWord and the Assist pipeline\n are wired up automatically when Pine installs. Wake word:\n \u201cHey Jarvis.\u201d Ask node things like \u201cwhat\u2019s the block\n height?\u201d, \u201chow many peers?\u201d, \u201cis the node\n synced?\u201d or \u201cwhat\u2019s my lightning balance?\u201d \u2014 and when a\n Claude API key is set on the node, anything else gets answered by\n Claude. New mesh messages are announced on the speaker too.
\n
Troubleshooting: if it hears you (LED reacts) but answers\n are silent, unplug and replug the speaker \u2014 an interrupted answer can\n wedge its audio output until it reboots.
\n
\n\n \n\n\n"
+ }
+ ],
+ "health_check": {
+ "type": "tcp",
+ "endpoint": "localhost:443",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 5,
+ "start_period": "10s"
+ },
+ "interfaces": {
+ "main": {
+ "name": "Pine",
+ "description": "Connect your speaker to WiFi and check the voice assistant",
+ "type": "ui",
+ "port": 10380,
+ "protocol": "http",
+ "path": "/"
+ }
+ },
+ "metadata": {
+ "author": "Archipelago",
+ "icon": "/assets/img/app-icons/pine.svg",
+ "website": "https://github.com/rhasspy/wyoming",
+ "repo": "https://github.com/rhasspy/wyoming",
+ "license": "MIT",
+ "category": "home",
+ "launch": {
+ "open_in_new_tab": true
+ },
+ "tags": [
+ "home",
+ "voice",
+ "assistant",
+ "privacy"
+ ]
+ }
}
- },
- "version": "1.3.0"
+ }
},
"pine-openwakeword": {
+ "version": "2.1.0",
"manifest": {
"app": {
+ "id": "pine-openwakeword",
+ "name": "Pine Wake Word (openWakeWord)",
+ "version": "2.1.0",
+ "upstream": {
+ "kind": "github",
+ "repo": "rhasspy/wyoming-openwakeword"
+ },
+ "description": "Wyoming-protocol openWakeWord wake-word engine. Internal Pine voice-assistant stack member \u2014 lets Assist pipelines run wake-word detection on the node (groundwork for the custom \"Yo Archy\" wake word; stock models like \"ok nabu\" ship with the image).",
"category": "home",
+ "container_name": "pine-openwakeword",
"container": {
+ "image": "docker.io/rhasspy/wyoming-openwakeword:2.1.0",
+ "pull_policy": "if-not-present",
+ "network": "archy-net",
+ "network_aliases": [
+ "pine-openwakeword"
+ ],
"custom_args": [
"--preload-model",
"ok_nabu",
"--custom-model-dir",
"/custom"
- ],
- "image": "docker.io/rhasspy/wyoming-openwakeword:2.1.0",
- "network": "archy-net",
- "network_aliases": [
- "pine-openwakeword"
- ],
- "pull_policy": "if-not-present"
+ ]
},
- "container_name": "pine-openwakeword",
"dependencies": [
{
"storage": "512Mi"
}
],
- "description": "Wyoming-protocol openWakeWord wake-word engine. Internal Pine voice-assistant stack member — lets Assist pipelines run wake-word detection on the node (groundwork for the custom \"Yo Archy\" wake word; stock models like \"ok nabu\" ship with the image).",
+ "resources": {
+ "memory_limit": "512Mi"
+ },
+ "security": {
+ "capabilities": [],
+ "readonly_root": false,
+ "no_new_privileges": true,
+ "network_policy": "isolated"
+ },
+ "ports": [
+ {
+ "host": 10400,
+ "container": 10400,
+ "protocol": "tcp",
+ "auth": "none",
+ "auth_rationale": "Wyoming voice protocol, a binary local-only stream consumed by Home Assistant; not HTTP and not browser-reachable."
+ }
+ ],
+ "volumes": [
+ {
+ "type": "bind",
+ "source": "/var/lib/archipelago/pine-openwakeword",
+ "target": "/custom",
+ "options": [
+ "rw"
+ ]
+ }
+ ],
"environment": [],
"health_check": {
+ "type": "tcp",
"endpoint": "localhost:10400",
"interval": "30s",
- "retries": 5,
- "start_period": "30s",
"timeout": "5s",
- "type": "tcp"
+ "retries": 5,
+ "start_period": "30s"
},
- "id": "pine-openwakeword",
"metadata": {
"author": "Rhasspy / Home Assistant",
"icon": "/assets/img/app-icons/pine.svg",
- "license": "MIT",
+ "website": "https://github.com/rhasspy/wyoming-openwakeword",
"repo": "https://github.com/rhasspy/wyoming-openwakeword",
+ "license": "MIT",
"tags": [
"home",
"voice",
"wake-word",
"wyoming"
- ],
- "website": "https://github.com/rhasspy/wyoming-openwakeword"
- },
- "name": "Pine Wake Word (openWakeWord)",
- "ports": [
- {
- "auth": "none",
- "auth_rationale": "Wyoming voice protocol, a binary local-only stream consumed by Home Assistant; not HTTP and not browser-reachable.",
- "container": 10400,
- "host": 10400,
- "protocol": "tcp"
- }
- ],
- "resources": {
- "memory_limit": "512Mi"
- },
- "security": {
- "capabilities": [],
- "network_policy": "isolated",
- "no_new_privileges": true,
- "readonly_root": false
- },
- "upstream": {
- "kind": "github",
- "repo": "rhasspy/wyoming-openwakeword"
- },
- "version": "2.1.0",
- "volumes": [
- {
- "options": [
- "rw"
- ],
- "source": "/var/lib/archipelago/pine-openwakeword",
- "target": "/custom",
- "type": "bind"
- }
- ]
+ ]
+ }
}
- },
- "version": "2.1.0"
+ }
},
"pine-piper": {
+ "version": "2.4.2",
"manifest": {
"app": {
+ "id": "pine-piper",
+ "name": "Pine Piper (TTS)",
+ "version": "2.4.2",
+ "upstream": {
+ "kind": "github",
+ "repo": "rhasspy/wyoming-piper"
+ },
+ "description": "Wyoming-protocol Piper text-to-speech engine. Internal Pine voice-assistant stack member \u2014 gives Home Assistant Assist a natural voice for spoken responses on the PineVoice satellite.",
"category": "home",
+ "container_name": "pine-piper",
"container": {
- "custom_args": [
- "--voice",
- "en_GB-alba-medium"
- ],
"image": "docker.io/rhasspy/wyoming-piper:2.4.2",
+ "pull_policy": "if-not-present",
"network": "archy-net",
"network_aliases": [
"pine-piper"
],
- "pull_policy": "if-not-present"
+ "custom_args": [
+ "--voice",
+ "en_GB-alba-medium"
+ ]
},
- "container_name": "pine-piper",
"dependencies": [
{
"storage": "1Gi"
}
],
- "description": "Wyoming-protocol Piper text-to-speech engine. Internal Pine voice-assistant stack member — gives Home Assistant Assist a natural voice for spoken responses on the PineVoice satellite.",
- "environment": [],
- "health_check": {
- "endpoint": "localhost:10200",
- "interval": "30s",
- "retries": 5,
- "start_period": "60s",
- "timeout": "5s",
- "type": "tcp"
- },
- "id": "pine-piper",
- "metadata": {
- "author": "Rhasspy / Home Assistant",
- "icon": "/assets/img/app-icons/pine.svg",
- "license": "MIT",
- "repo": "https://github.com/rhasspy/wyoming-piper",
- "tags": [
- "home",
- "voice",
- "text-to-speech",
- "wyoming"
- ],
- "website": "https://github.com/rhasspy/wyoming-piper"
- },
- "name": "Pine Piper (TTS)",
- "ports": [
- {
- "auth": "none",
- "auth_rationale": "Wyoming voice protocol, a binary local-only stream consumed by Home Assistant; not HTTP and not browser-reachable.",
- "container": 10200,
- "host": 10200,
- "protocol": "tcp"
- }
- ],
"resources": {
"memory_limit": "512Mi"
},
"security": {
"capabilities": [],
- "network_policy": "isolated",
+ "readonly_root": false,
"no_new_privileges": true,
- "readonly_root": false
+ "network_policy": "isolated"
},
- "upstream": {
- "kind": "github",
- "repo": "rhasspy/wyoming-piper"
- },
- "version": "2.4.2",
+ "ports": [
+ {
+ "host": 10200,
+ "container": 10200,
+ "protocol": "tcp",
+ "auth": "none",
+ "auth_rationale": "Wyoming voice protocol, a binary local-only stream consumed by Home Assistant; not HTTP and not browser-reachable."
+ }
+ ],
"volumes": [
{
- "options": [
- "rw"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/pine-piper",
"target": "/data",
- "type": "bind"
+ "options": [
+ "rw"
+ ]
}
- ]
+ ],
+ "environment": [],
+ "health_check": {
+ "type": "tcp",
+ "endpoint": "localhost:10200",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 5,
+ "start_period": "60s"
+ },
+ "metadata": {
+ "author": "Rhasspy / Home Assistant",
+ "icon": "/assets/img/app-icons/pine.svg",
+ "website": "https://github.com/rhasspy/wyoming-piper",
+ "repo": "https://github.com/rhasspy/wyoming-piper",
+ "license": "MIT",
+ "tags": [
+ "home",
+ "voice",
+ "text-to-speech",
+ "wyoming"
+ ]
+ }
}
- },
- "version": "2.4.2"
+ }
},
"pine-whisper": {
+ "version": "3.4.2",
"manifest": {
"app": {
+ "id": "pine-whisper",
+ "name": "Pine Whisper (STT)",
+ "version": "3.4.2",
+ "upstream": {
+ "kind": "dockerhub",
+ "repo": "rhasspy/wyoming-whisper"
+ },
+ "description": "Wyoming-protocol faster-whisper speech-to-text engine. Internal Pine voice-assistant stack member \u2014 turns speech captured by a PineVoice satellite into text for Home Assistant Assist.",
"category": "home",
+ "container_name": "pine-whisper",
"container": {
+ "image": "docker.io/rhasspy/wyoming-whisper:3.4.1",
+ "pull_policy": "if-not-present",
+ "network": "archy-net",
+ "network_aliases": [
+ "pine-whisper"
+ ],
"custom_args": [
"--model",
"base-int8",
@@ -4750,135 +5065,93 @@
"en",
"--beam-size",
"1"
- ],
- "image": "docker.io/rhasspy/wyoming-whisper:3.4.1",
- "network": "archy-net",
- "network_aliases": [
- "pine-whisper"
- ],
- "pull_policy": "if-not-present"
+ ]
},
- "container_name": "pine-whisper",
"dependencies": [
{
"storage": "2Gi"
}
],
- "description": "Wyoming-protocol faster-whisper speech-to-text engine. Internal Pine voice-assistant stack member — turns speech captured by a PineVoice satellite into text for Home Assistant Assist.",
- "environment": [],
- "health_check": {
- "endpoint": "localhost:10300",
- "interval": "30s",
- "retries": 5,
- "start_period": "60s",
- "timeout": "5s",
- "type": "tcp"
- },
- "id": "pine-whisper",
- "metadata": {
- "author": "Rhasspy / Home Assistant",
- "icon": "/assets/img/app-icons/pine.svg",
- "license": "MIT",
- "repo": "https://github.com/rhasspy/wyoming-faster-whisper",
- "tags": [
- "home",
- "voice",
- "speech-to-text",
- "wyoming"
- ],
- "website": "https://github.com/rhasspy/wyoming-faster-whisper"
- },
- "name": "Pine Whisper (STT)",
- "ports": [
- {
- "auth": "none",
- "auth_rationale": "Wyoming voice protocol, a binary local-only stream consumed by Home Assistant; not HTTP and not browser-reachable.",
- "container": 10300,
- "host": 10300,
- "protocol": "tcp"
- }
- ],
"resources": {
"memory_limit": "2Gi"
},
"security": {
"capabilities": [],
- "network_policy": "isolated",
+ "readonly_root": false,
"no_new_privileges": true,
- "readonly_root": false
+ "network_policy": "isolated"
},
- "upstream": {
- "kind": "dockerhub",
- "repo": "rhasspy/wyoming-whisper"
- },
- "version": "3.4.2",
+ "ports": [
+ {
+ "host": 10300,
+ "container": 10300,
+ "protocol": "tcp",
+ "auth": "none",
+ "auth_rationale": "Wyoming voice protocol, a binary local-only stream consumed by Home Assistant; not HTTP and not browser-reachable."
+ }
+ ],
"volumes": [
{
- "options": [
- "rw"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/pine-whisper",
"target": "/data",
- "type": "bind"
+ "options": [
+ "rw"
+ ]
}
- ]
+ ],
+ "environment": [],
+ "health_check": {
+ "type": "tcp",
+ "endpoint": "localhost:10300",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 5,
+ "start_period": "60s"
+ },
+ "metadata": {
+ "author": "Rhasspy / Home Assistant",
+ "icon": "/assets/img/app-icons/pine.svg",
+ "website": "https://github.com/rhasspy/wyoming-faster-whisper",
+ "repo": "https://github.com/rhasspy/wyoming-faster-whisper",
+ "license": "MIT",
+ "tags": [
+ "home",
+ "voice",
+ "speech-to-text",
+ "wyoming"
+ ]
+ }
}
- },
- "version": "3.4.2"
+ }
},
"portainer": {
+ "version": "2.39.6",
"image": "source.archipelago-foundation.org/lfg2025/portainer:2.39.6",
"manifest": {
"app": {
+ "id": "portainer",
+ "name": "Portainer",
+ "version": "2.19.4",
+ "upstream": {
+ "kind": "github",
+ "repo": "portainer/portainer"
+ },
+ "description": "Container management web UI for the local Podman socket.",
"category": "development",
"container": {
- "data_uid": "1000:1000",
"image": "source.archipelago-foundation.org/lfg2025/portainer:2.39.6",
- "pull_policy": "if-not-present"
+ "pull_policy": "if-not-present",
+ "data_uid": "1000:1000"
},
"dependencies": [
{
"storage": "1Gi"
}
],
- "description": "Container management web UI for the local Podman socket.",
- "environment": [],
- "id": "portainer",
- "interfaces": {
- "main": {
- "description": "Portainer web interface",
- "name": "Web UI",
- "path": "/",
- "port": 9000,
- "protocol": "http",
- "type": "ui"
- }
- },
- "metadata": {
- "features": [
- "Container management dashboard",
- "Local Podman socket access",
- "Compose stack storage"
- ],
- "icon": "/assets/img/app-icons/portainer.webp",
- "launch": {
- "open_in_new_tab": true
- },
- "tier": "optional"
- },
- "name": "Portainer",
- "ports": [
- {
- "auth": "gated",
- "bind": "127.0.0.1",
- "container": 9000,
- "host": 9000,
- "protocol": "tcp"
- }
- ],
"resources": {
- "disk_limit": "1Gi",
- "memory_limit": "256Mi"
+ "memory_limit": "256Mi",
+ "disk_limit": "1Gi"
},
"security": {
"capabilities": [
@@ -4887,48 +5160,82 @@
"SETGID",
"DAC_OVERRIDE"
],
- "network_policy": "isolated",
+ "readonly_root": false,
"no_new_privileges": true,
- "readonly_root": false
+ "network_policy": "isolated"
},
- "upstream": {
- "kind": "github",
- "repo": "portainer/portainer"
- },
- "version": "2.19.4",
+ "ports": [
+ {
+ "host": 9000,
+ "container": 9000,
+ "protocol": "tcp",
+ "bind": "127.0.0.1",
+ "auth": "gated"
+ }
+ ],
"volumes": [
{
- "options": [
- "rw"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/portainer",
"target": "/data",
- "type": "bind"
- },
- {
"options": [
"rw"
- ],
+ ]
+ },
+ {
+ "type": "bind",
"source": "/var/lib/archipelago/portainer/compose",
"target": "/data/compose",
- "type": "bind"
- },
- {
"options": [
"rw"
- ],
+ ]
+ },
+ {
+ "type": "bind",
"source": "/run/user/1000/podman/podman.sock",
"target": "/var/run/docker.sock",
- "type": "bind"
+ "options": [
+ "rw"
+ ]
}
- ]
+ ],
+ "environment": [],
+ "interfaces": {
+ "main": {
+ "name": "Web UI",
+ "description": "Portainer web interface",
+ "type": "ui",
+ "port": 9000,
+ "protocol": "http",
+ "path": "/"
+ }
+ },
+ "metadata": {
+ "icon": "/assets/img/app-icons/portainer.webp",
+ "tier": "optional",
+ "launch": {
+ "open_in_new_tab": true
+ },
+ "features": [
+ "Container management dashboard",
+ "Local Podman socket access",
+ "Compose stack storage"
+ ]
+ }
}
- },
- "version": "2.39.6"
+ }
},
"router": {
+ "version": "1.0.0",
"manifest": {
"app": {
+ "id": "router",
+ "name": "Mesh Router",
+ "version": "1.0.0",
+ "upstream": {
+ "kind": "internal"
+ },
+ "description": "Mesh routing and local network management. Provides device discovery, routing, and network topology visualization.",
"container": {
"image": "archipelago/router:1.0.0",
"image_signature": "cosign://...",
@@ -4939,105 +5246,102 @@
"storage": "500Mi"
}
],
- "description": "Mesh routing and local network management. Provides device discovery, routing, and network topology visualization.",
+ "resources": {
+ "cpu_limit": 2,
+ "memory_limit": "512Mi",
+ "disk_limit": "500Mi"
+ },
+ "security": {
+ "capabilities": [
+ "NET_ADMIN",
+ "NET_RAW"
+ ],
+ "readonly_root": true,
+ "no_new_privileges": true,
+ "user": 1000,
+ "seccomp_profile": "default",
+ "network_policy": "host",
+ "apparmor_profile": "router"
+ },
+ "ports": [
+ {
+ "host": 8084,
+ "container": 8080,
+ "protocol": "tcp",
+ "bind": "127.0.0.1",
+ "auth": "gated"
+ },
+ {
+ "host": 5353,
+ "container": 5353,
+ "protocol": "udp",
+ "auth": "none",
+ "auth_rationale": "mDNS is UDP multicast service discovery; gating it would break .local name resolution for every device on the LAN."
+ },
+ {
+ "host": 1900,
+ "container": 1900,
+ "protocol": "udp",
+ "auth": "none",
+ "auth_rationale": "SSDP/UPnP discovery is UDP multicast \u2014 there is no HTTP request to gate and no client that could hold a session."
+ }
+ ],
+ "volumes": [
+ {
+ "type": "bind",
+ "source": "/var/lib/archipelago/router",
+ "target": "/app/data",
+ "options": [
+ "rw"
+ ]
+ },
+ {
+ "type": "bind",
+ "source": "/var/run/dbus",
+ "target": "/var/run/dbus",
+ "options": [
+ "ro"
+ ]
+ }
+ ],
"environment": [
"NETWORK_INTERFACE=eth0",
"MESH_ENABLED=true",
"DEVICE_DISCOVERY=true"
],
"health_check": {
+ "type": "http",
"endpoint": "http://localhost:8084",
- "interval": "30s",
"path": "/health",
- "retries": 3,
+ "interval": "30s",
"timeout": "5s",
- "type": "http"
+ "retries": 3
},
- "id": "router",
- "name": "Mesh Router",
"networking": {
- "device_discovery": true,
- "local_network_access": true,
"mesh_enabled": true,
+ "local_network_access": true,
+ "device_discovery": true,
"routing_protocols": [
"olsr",
"babel"
]
- },
- "ports": [
- {
- "auth": "gated",
- "bind": "127.0.0.1",
- "container": 8080,
- "host": 8084,
- "protocol": "tcp"
- },
- {
- "auth": "none",
- "auth_rationale": "mDNS is UDP multicast service discovery; gating it would break .local name resolution for every device on the LAN.",
- "container": 5353,
- "host": 5353,
- "protocol": "udp"
- },
- {
- "auth": "none",
- "auth_rationale": "SSDP/UPnP discovery is UDP multicast — there is no HTTP request to gate and no client that could hold a session.",
- "container": 1900,
- "host": 1900,
- "protocol": "udp"
- }
- ],
- "resources": {
- "cpu_limit": 2,
- "disk_limit": "500Mi",
- "memory_limit": "512Mi"
- },
- "security": {
- "apparmor_profile": "router",
- "capabilities": [
- "NET_ADMIN",
- "NET_RAW"
- ],
- "network_policy": "host",
- "no_new_privileges": true,
- "readonly_root": true,
- "seccomp_profile": "default",
- "user": 1000
- },
- "upstream": {
- "kind": "internal"
- },
- "version": "1.0.0",
- "volumes": [
- {
- "options": [
- "rw"
- ],
- "source": "/var/lib/archipelago/router",
- "target": "/app/data",
- "type": "bind"
- },
- {
- "options": [
- "ro"
- ],
- "source": "/var/run/dbus",
- "target": "/var/run/dbus",
- "type": "bind"
- }
- ]
+ }
}
- },
- "version": "1.0.0"
- },
- "routstr": {
- "image": "source.archipelago-foundation.org/lfg2025/routstr:v0.4.3",
- "version": "v0.4.3"
+ }
},
"searxng": {
+ "version": "latest",
"image": "source.archipelago-foundation.org/lfg2025/searxng:latest",
"manifest": {
"app": {
+ "id": "searxng",
+ "name": "SearXNG",
+ "version": "1.0.0",
+ "upstream": {
+ "kind": "github",
+ "repo": "searxng/searxng"
+ },
+ "description": "Privacy-respecting metasearch engine. Search the web without tracking.",
"container": {
"image": "source.archipelago-foundation.org/lfg2025/searxng:latest",
"pull_policy": "if-not-present"
@@ -5047,66 +5351,66 @@
"storage": "2Gi"
}
],
- "description": "Privacy-respecting metasearch engine. Search the web without tracking.",
+ "resources": {
+ "cpu_limit": 2,
+ "memory_limit": "1Gi",
+ "disk_limit": "2Gi"
+ },
+ "security": {
+ "capabilities": [],
+ "readonly_root": true,
+ "no_new_privileges": true,
+ "user": 1000,
+ "seccomp_profile": "default",
+ "network_policy": "isolated",
+ "apparmor_profile": "searxng"
+ },
+ "ports": [
+ {
+ "host": 8888,
+ "container": 8080,
+ "protocol": "tcp",
+ "bind": "127.0.0.1",
+ "auth": "gated"
+ }
+ ],
+ "volumes": [
+ {
+ "type": "bind",
+ "source": "/var/lib/archipelago/searxng",
+ "target": "/etc/searxng",
+ "options": [
+ "rw"
+ ]
+ }
+ ],
"environment": [
"SEARXNG_HOSTNAME=localhost",
"SEARXNG_BIND_ADDRESS=0.0.0.0:8080"
],
"health_check": {
+ "type": "http",
"endpoint": "http://localhost:8080",
- "interval": "30s",
"path": "/",
- "retries": 5,
+ "interval": "30s",
"timeout": "30s",
- "type": "http"
- },
- "id": "searxng",
- "name": "SearXNG",
- "ports": [
- {
- "auth": "gated",
- "bind": "127.0.0.1",
- "container": 8080,
- "host": 8888,
- "protocol": "tcp"
- }
- ],
- "resources": {
- "cpu_limit": 2,
- "disk_limit": "2Gi",
- "memory_limit": "1Gi"
- },
- "security": {
- "apparmor_profile": "searxng",
- "capabilities": [],
- "network_policy": "isolated",
- "no_new_privileges": true,
- "readonly_root": true,
- "seccomp_profile": "default",
- "user": 1000
- },
- "upstream": {
- "kind": "github",
- "repo": "searxng/searxng"
- },
- "version": "1.0.0",
- "volumes": [
- {
- "options": [
- "rw"
- ],
- "source": "/var/lib/archipelago/searxng",
- "target": "/etc/searxng",
- "type": "bind"
- }
- ]
+ "retries": 5
+ }
}
- },
- "version": "latest"
+ }
},
"strfry": {
+ "version": "1.1.2",
"manifest": {
"app": {
+ "id": "strfry",
+ "name": "Strfry Nostr Relay",
+ "version": "1.1.2",
+ "upstream": {
+ "kind": "github",
+ "repo": "hoytech/strfry"
+ },
+ "description": "Lightweight Nostr relay written in C++. Alternative to nostr-rs-relay with lower resource usage.",
"container": {
"image": "dockurr/strfry:1.1.2",
"image_signature": "cosign://...",
@@ -5117,136 +5421,187 @@
"storage": "5Gi"
}
],
- "description": "Lightweight Nostr relay written in C++. Alternative to nostr-rs-relay with lower resource usage.",
- "files": [
- {
- "content": "##\n## Default strfry config\n##\n\n# Directory that contains the strfry LMDB database (restart required)\ndb = \"./strfry-db/\"\n\ndbParams {\n # Maximum number of threads/processes that can simultaneously have LMDB transactions open (restart required)\n maxreaders = 256\n\n # Size of mmap() to use when loading LMDB (default is 10TB, does *not* correspond to disk-space used) (restart required)\n mapsize = 10995116277760\n\n # Disables read-ahead when accessing the LMDB mapping. Reduces IO activity when DB size is larger than RAM. (restart required)\n noReadAhead = false\n}\n\nevents {\n # Maximum size of normalised JSON, in bytes\n maxEventSize = 65536\n\n # Events newer than this will be rejected\n rejectEventsNewerThanSeconds = 900\n\n # Events older than this will be rejected\n rejectEventsOlderThanSeconds = 94608000\n\n # Ephemeral events older than this will be rejected\n rejectEphemeralEventsOlderThanSeconds = 60\n\n # Ephemeral events will be deleted from the DB when older than this\n ephemeralEventsLifetimeSeconds = 300\n\n # Maximum number of tags allowed\n maxNumTags = 2000\n\n # Maximum size for tag values, in bytes\n maxTagValSize = 1024\n}\n\nrelay {\n # Interface to listen on. Use 0.0.0.0 to listen on all interfaces (restart required)\n bind = \"0.0.0.0\"\n\n # Port to open for the nostr websocket protocol (restart required)\n port = 7777\n\n # Set OS-limit on maximum number of open files/sockets (if 0, don't attempt to set) (restart required)\n nofiles = 0\n\n # HTTP header that contains the client's real IP, before reverse proxying (ie x-real-ip) (MUST be all lower-case)\n realIpHeader = \"\"\n\n info {\n # NIP-11: Name of this server. Short/descriptive (< 30 characters)\n name = \"Archipelago Strfry Relay\"\n\n # NIP-11: Detailed information about relay, free-form\n description = \"Self-hosted strfry Nostr relay on Archipelago.\"\n\n # NIP-11: Administrative nostr pubkey, for contact purposes\n pubkey = \"\"\n\n # NIP-11: Alternative administrative contact (email, website, etc)\n contact = \"\"\n\n # NIP-11: URL pointing to an image to be used as an icon for the relay\n icon = \"\"\n\n # List of supported lists as JSON array, or empty string to use default. Example: \"[1,2]\"\n nips = \"\"\n }\n\n # Maximum accepted incoming websocket frame size (should be larger than max event) (restart required)\n maxWebsocketPayloadSize = 131072\n\n # Maximum number of filters allowed in a REQ\n maxReqFilterSize = 200\n\n # Websocket-level PING message frequency (should be less than any reverse proxy idle timeouts) (restart required)\n autoPingSeconds = 55\n\n # If TCP keep-alive should be enabled (detect dropped connections to upstream reverse proxy)\n enableTcpKeepalive = false\n\n # How much uninterrupted CPU time a REQ query should get during its DB scan\n queryTimesliceBudgetMicroseconds = 10000\n\n # Maximum records that can be returned per filter\n maxFilterLimit = 500\n\n # Maximum number of subscriptions (concurrent REQs) a connection can have open at any time\n maxSubsPerConnection = 20\n\n writePolicy {\n # If non-empty, path to an executable script that implements the writePolicy plugin logic\n plugin = \"/app/write-policy.py\"\n }\n\n compression {\n # Use permessage-deflate compression if supported by client. Reduces bandwidth, but slight increase in CPU (restart required)\n enabled = true\n\n # Maintain a sliding window buffer for each connection. Improves compression, but uses more memory (restart required)\n slidingWindow = true\n }\n\n logging {\n # Dump all incoming messages\n dumpInAll = false\n\n # Dump all incoming EVENT messages\n dumpInEvents = false\n\n # Dump all incoming REQ/CLOSE messages\n dumpInReqs = false\n\n # Log performance metrics for initial REQ database scans\n dbScanPerf = false\n\n # Log reason for invalid event rejection? Can be disabled to silence excessive logging\n invalidEvents = true\n }\n\n numThreads {\n # Ingester threads: route incoming requests, validate events/sigs (restart required)\n ingester = 3\n\n # reqWorker threads: Handle initial DB scan for events (restart required)\n reqWorker = 3\n\n # reqMonitor threads: Handle filtering of new events (restart required)\n reqMonitor = 3\n\n # negentropy threads: Handle negentropy protocol messages (restart required)\n negentropy = 2\n }\n\n negentropy {\n # Support negentropy protocol messages\n enabled = true\n\n # Maximum records that sync will process before returning an error\n maxSyncEvents = 1000000\n }\n}\n",
- "overwrite": true,
- "path": "/var/lib/archipelago/strfry-config/strfry.conf"
- }
- ],
- "health_check": {
- "endpoint": "http://127.0.0.1:7777",
- "interval": "30s",
- "path": "/health",
- "retries": 3,
- "timeout": "5s",
- "type": "http"
+ "resources": {
+ "cpu_limit": 1,
+ "memory_limit": "512Mi",
+ "disk_limit": "5Gi"
},
- "id": "strfry",
- "name": "Strfry Nostr Relay",
- "nostr_integration": {
- "monetization_enabled": true,
- "relay_type": "public"
+ "security": {
+ "capabilities": [],
+ "readonly_root": true,
+ "no_new_privileges": true,
+ "seccomp_profile": "default",
+ "network_policy": "isolated",
+ "apparmor_profile": "nostr-relay"
},
"ports": [
{
- "auth": "gated",
- "bind": "127.0.0.1",
- "container": 7777,
"host": 8090,
- "protocol": "tcp"
+ "container": 7777,
+ "protocol": "tcp",
+ "bind": "127.0.0.1",
+ "auth": "gated"
}
],
- "resources": {
- "cpu_limit": 1,
- "disk_limit": "5Gi",
- "memory_limit": "512Mi"
- },
- "security": {
- "apparmor_profile": "nostr-relay",
- "capabilities": [],
- "network_policy": "isolated",
- "no_new_privileges": true,
- "readonly_root": true,
- "seccomp_profile": "default"
- },
- "upstream": {
- "kind": "github",
- "repo": "hoytech/strfry"
- },
- "version": "1.1.2",
"volumes": [
{
- "options": [
- "rw"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/strfry",
"target": "/app/strfry-db",
- "type": "bind"
+ "options": [
+ "rw"
+ ]
},
{
- "options": [
- "ro"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/strfry-config/strfry.conf",
"target": "/etc/strfry.conf",
- "type": "bind"
+ "options": [
+ "ro"
+ ]
}
- ]
+ ],
+ "files": [
+ {
+ "path": "/var/lib/archipelago/strfry-config/strfry.conf",
+ "overwrite": true,
+ "content": "##\n## Default strfry config\n##\n\n# Directory that contains the strfry LMDB database (restart required)\ndb = \"./strfry-db/\"\n\ndbParams {\n # Maximum number of threads/processes that can simultaneously have LMDB transactions open (restart required)\n maxreaders = 256\n\n # Size of mmap() to use when loading LMDB (default is 10TB, does *not* correspond to disk-space used) (restart required)\n mapsize = 10995116277760\n\n # Disables read-ahead when accessing the LMDB mapping. Reduces IO activity when DB size is larger than RAM. (restart required)\n noReadAhead = false\n}\n\nevents {\n # Maximum size of normalised JSON, in bytes\n maxEventSize = 65536\n\n # Events newer than this will be rejected\n rejectEventsNewerThanSeconds = 900\n\n # Events older than this will be rejected\n rejectEventsOlderThanSeconds = 94608000\n\n # Ephemeral events older than this will be rejected\n rejectEphemeralEventsOlderThanSeconds = 60\n\n # Ephemeral events will be deleted from the DB when older than this\n ephemeralEventsLifetimeSeconds = 300\n\n # Maximum number of tags allowed\n maxNumTags = 2000\n\n # Maximum size for tag values, in bytes\n maxTagValSize = 1024\n}\n\nrelay {\n # Interface to listen on. Use 0.0.0.0 to listen on all interfaces (restart required)\n bind = \"0.0.0.0\"\n\n # Port to open for the nostr websocket protocol (restart required)\n port = 7777\n\n # Set OS-limit on maximum number of open files/sockets (if 0, don't attempt to set) (restart required)\n nofiles = 0\n\n # HTTP header that contains the client's real IP, before reverse proxying (ie x-real-ip) (MUST be all lower-case)\n realIpHeader = \"\"\n\n info {\n # NIP-11: Name of this server. Short/descriptive (< 30 characters)\n name = \"Archipelago Strfry Relay\"\n\n # NIP-11: Detailed information about relay, free-form\n description = \"Self-hosted strfry Nostr relay on Archipelago.\"\n\n # NIP-11: Administrative nostr pubkey, for contact purposes\n pubkey = \"\"\n\n # NIP-11: Alternative administrative contact (email, website, etc)\n contact = \"\"\n\n # NIP-11: URL pointing to an image to be used as an icon for the relay\n icon = \"\"\n\n # List of supported lists as JSON array, or empty string to use default. Example: \"[1,2]\"\n nips = \"\"\n }\n\n # Maximum accepted incoming websocket frame size (should be larger than max event) (restart required)\n maxWebsocketPayloadSize = 131072\n\n # Maximum number of filters allowed in a REQ\n maxReqFilterSize = 200\n\n # Websocket-level PING message frequency (should be less than any reverse proxy idle timeouts) (restart required)\n autoPingSeconds = 55\n\n # If TCP keep-alive should be enabled (detect dropped connections to upstream reverse proxy)\n enableTcpKeepalive = false\n\n # How much uninterrupted CPU time a REQ query should get during its DB scan\n queryTimesliceBudgetMicroseconds = 10000\n\n # Maximum records that can be returned per filter\n maxFilterLimit = 500\n\n # Maximum number of subscriptions (concurrent REQs) a connection can have open at any time\n maxSubsPerConnection = 20\n\n writePolicy {\n # If non-empty, path to an executable script that implements the writePolicy plugin logic\n plugin = \"/app/write-policy.py\"\n }\n\n compression {\n # Use permessage-deflate compression if supported by client. Reduces bandwidth, but slight increase in CPU (restart required)\n enabled = true\n\n # Maintain a sliding window buffer for each connection. Improves compression, but uses more memory (restart required)\n slidingWindow = true\n }\n\n logging {\n # Dump all incoming messages\n dumpInAll = false\n\n # Dump all incoming EVENT messages\n dumpInEvents = false\n\n # Dump all incoming REQ/CLOSE messages\n dumpInReqs = false\n\n # Log performance metrics for initial REQ database scans\n dbScanPerf = false\n\n # Log reason for invalid event rejection? Can be disabled to silence excessive logging\n invalidEvents = true\n }\n\n numThreads {\n # Ingester threads: route incoming requests, validate events/sigs (restart required)\n ingester = 3\n\n # reqWorker threads: Handle initial DB scan for events (restart required)\n reqWorker = 3\n\n # reqMonitor threads: Handle filtering of new events (restart required)\n reqMonitor = 3\n\n # negentropy threads: Handle negentropy protocol messages (restart required)\n negentropy = 2\n }\n\n negentropy {\n # Support negentropy protocol messages\n enabled = true\n\n # Maximum records that sync will process before returning an error\n maxSyncEvents = 1000000\n }\n}\n"
+ }
+ ],
+ "health_check": {
+ "type": "http",
+ "endpoint": "http://127.0.0.1:7777",
+ "path": "/health",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 3
+ },
+ "nostr_integration": {
+ "relay_type": "public",
+ "monetization_enabled": true
+ }
}
- },
- "version": "1.1.2"
+ }
},
"tailscale": {
+ "version": "stable",
"image": "source.archipelago-foundation.org/lfg2025/tailscale:stable",
- "version": "stable"
- },
- "uptime-kuma": {
- "image": "source.archipelago-foundation.org/lfg2025/uptime-kuma:1",
"manifest": {
"app": {
+ "id": "tailscale",
+ "name": "Tailscale",
+ "version": "1.78.0",
+ "upstream": {
+ "kind": "github",
+ "repo": "tailscale/tailscale"
+ },
+ "description": "Zero-config VPN with WireGuard mesh networking.",
"container": {
- "custom_args": [
- "--",
- "node",
- "server/server.js"
- ],
- "image": "source.archipelago-foundation.org/lfg2025/uptime-kuma:1",
+ "image": "source.archipelago-foundation.org/lfg2025/tailscale:stable",
+ "pull_policy": "if-not-present",
"network": "pasta",
- "pull_policy": "if-not-present"
+ "entrypoint": [
+ "sh",
+ "-c",
+ "tailscaled --tun=userspace-networking & for i in $(seq 1 30); do [ -S /var/run/tailscale/tailscaled.sock ] && break; sleep 1; done; tailscale web --listen 0.0.0.0:8240 & wait"
+ ]
},
"dependencies": [
{
"storage": "1Gi"
}
],
- "description": "Self-hosted uptime monitoring.",
- "environment": [
- "TZ=UTC"
- ],
- "health_check": {
- "endpoint": "localhost:3001",
- "interval": "30s",
- "path": "/",
- "retries": 3,
- "timeout": "5s",
- "type": "http"
+ "resources": {
+ "memory_limit": "512Mi",
+ "disk_limit": "1Gi"
},
- "id": "uptime-kuma",
- "metadata": {
- "author": "Uptime Kuma",
- "category": "data",
- "icon": "/assets/img/app-icons/uptime-kuma.webp",
- "launch": {
- "open_in_new_tab": true
- },
- "repo": "https://github.com/louislam/uptime-kuma",
- "tier": "recommended"
+ "security": {
+ "capabilities": [],
+ "readonly_root": false,
+ "no_new_privileges": true,
+ "network_policy": "isolated"
},
- "name": "Uptime Kuma",
"ports": [
{
- "auth": "gated",
+ "host": 8240,
+ "container": 8240,
+ "protocol": "tcp",
"bind": "127.0.0.1",
- "container": 3001,
- "host": 3002,
- "protocol": "tcp"
+ "auth": "open",
+ "auth_rationale": "Tailscale's web console authenticates against the tailnet account for all administrative actions; the node's cookie challenge would be a second, redundant login."
+ }
+ ],
+ "volumes": [
+ {
+ "type": "bind",
+ "source": "/var/lib/archipelago/tailscale",
+ "target": "/var/lib/tailscale",
+ "options": [
+ "rw"
+ ]
+ }
+ ],
+ "environment": [
+ "TS_STATE_DIR=/var/lib/tailscale"
+ ],
+ "health_check": {
+ "type": "tcp",
+ "endpoint": "localhost:8240",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 3
+ },
+ "interfaces": {
+ "main": {
+ "name": "Web console",
+ "description": "Tailscale web console",
+ "type": "ui",
+ "port": 8240,
+ "protocol": "http",
+ "path": "/"
+ }
+ },
+ "metadata": {
+ "author": "Tailscale",
+ "category": "networking",
+ "icon": "/assets/img/app-icons/tailscale.webp",
+ "repo": "https://github.com/tailscale/tailscale",
+ "tier": "recommended"
+ }
+ }
+ }
+ },
+ "uptime-kuma": {
+ "version": "1",
+ "image": "source.archipelago-foundation.org/lfg2025/uptime-kuma:1",
+ "manifest": {
+ "app": {
+ "id": "uptime-kuma",
+ "name": "Uptime Kuma",
+ "version": "1.23.0",
+ "upstream": {
+ "kind": "github",
+ "repo": "louislam/uptime-kuma"
+ },
+ "description": "Self-hosted uptime monitoring.",
+ "container": {
+ "image": "source.archipelago-foundation.org/lfg2025/uptime-kuma:1",
+ "pull_policy": "if-not-present",
+ "network": "pasta",
+ "custom_args": [
+ "--",
+ "node",
+ "server/server.js"
+ ]
+ },
+ "dependencies": [
+ {
+ "storage": "1Gi"
}
],
"resources": {
- "disk_limit": "1Gi",
- "memory_limit": "256Mi"
+ "memory_limit": "256Mi",
+ "disk_limit": "1Gi"
},
"security": {
"capabilities": [
@@ -5255,85 +5610,78 @@
"SETUID",
"SETGID"
],
- "network_policy": "isolated",
- "readonly_root": false
+ "readonly_root": false,
+ "network_policy": "isolated"
},
- "upstream": {
- "kind": "github",
- "repo": "louislam/uptime-kuma"
- },
- "version": "1.23.0",
+ "ports": [
+ {
+ "host": 3002,
+ "container": 3001,
+ "protocol": "tcp",
+ "bind": "127.0.0.1",
+ "auth": "gated"
+ }
+ ],
"volumes": [
{
- "options": [
- "rw"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/uptime-kuma",
"target": "/app/data",
- "type": "bind"
+ "options": [
+ "rw"
+ ]
}
- ]
+ ],
+ "environment": [
+ "TZ=UTC"
+ ],
+ "health_check": {
+ "type": "http",
+ "endpoint": "localhost:3001",
+ "path": "/",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 3
+ },
+ "metadata": {
+ "icon": "/assets/img/app-icons/uptime-kuma.webp",
+ "category": "data",
+ "tier": "recommended",
+ "author": "Uptime Kuma",
+ "repo": "https://github.com/louislam/uptime-kuma",
+ "launch": {
+ "open_in_new_tab": true
+ }
+ }
}
- },
- "version": "1"
+ }
},
"vaultwarden": {
+ "version": "1.37.1-alpine",
"image": "source.archipelago-foundation.org/lfg2025/vaultwarden:1.37.1-alpine",
"manifest": {
"app": {
+ "id": "vaultwarden",
+ "name": "Vaultwarden",
+ "version": "1.30.0",
+ "upstream": {
+ "kind": "github",
+ "repo": "dani-garcia/vaultwarden"
+ },
+ "description": "Self-hosted password vault with zero-knowledge encryption.",
"container": {
"image": "source.archipelago-foundation.org/lfg2025/vaultwarden:1.37.1-alpine",
- "network": "pasta",
- "pull_policy": "if-not-present"
+ "pull_policy": "if-not-present",
+ "network": "pasta"
},
"dependencies": [
{
"storage": "1Gi"
}
],
- "description": "Self-hosted password vault with zero-knowledge encryption.",
- "environment": [],
- "health_check": {
- "endpoint": "localhost:80",
- "interval": "30s",
- "retries": 3,
- "timeout": "5s",
- "type": "tcp"
- },
- "id": "vaultwarden",
- "interfaces": {
- "main": {
- "description": "Vaultwarden web vault",
- "name": "Web UI",
- "path": "/",
- "port": 8082,
- "protocol": "http",
- "type": "ui"
- }
- },
- "metadata": {
- "author": "Vaultwarden",
- "category": "data",
- "icon": "/assets/img/app-icons/vaultwarden.webp",
- "launch": {
- "open_in_new_tab": true
- },
- "repo": "https://github.com/dani-garcia/vaultwarden",
- "tier": "recommended"
- },
- "name": "Vaultwarden",
- "ports": [
- {
- "auth": "gated",
- "bind": "127.0.0.1",
- "container": 80,
- "host": 8082,
- "protocol": "tcp"
- }
- ],
"resources": {
- "disk_limit": "1Gi",
- "memory_limit": "256Mi"
+ "memory_limit": "256Mi",
+ "disk_limit": "1Gi"
},
"security": {
"capabilities": [
@@ -5342,31 +5690,58 @@
"SETGID",
"NET_BIND_SERVICE"
],
- "network_policy": "isolated",
- "readonly_root": false
+ "readonly_root": false,
+ "network_policy": "isolated"
},
- "upstream": {
- "kind": "github",
- "repo": "dani-garcia/vaultwarden"
- },
- "version": "1.30.0",
+ "ports": [
+ {
+ "host": 8082,
+ "container": 80,
+ "protocol": "tcp",
+ "bind": "127.0.0.1",
+ "auth": "gated"
+ }
+ ],
"volumes": [
{
- "options": [
- "rw"
- ],
+ "type": "bind",
"source": "/var/lib/archipelago/vaultwarden",
"target": "/data",
- "type": "bind"
+ "options": [
+ "rw"
+ ]
}
- ]
+ ],
+ "environment": [],
+ "health_check": {
+ "type": "tcp",
+ "endpoint": "localhost:80",
+ "interval": "30s",
+ "timeout": "5s",
+ "retries": 3
+ },
+ "interfaces": {
+ "main": {
+ "name": "Web UI",
+ "description": "Vaultwarden web vault",
+ "type": "ui",
+ "port": 8082,
+ "protocol": "http",
+ "path": "/"
+ }
+ },
+ "metadata": {
+ "icon": "/assets/img/app-icons/vaultwarden.webp",
+ "category": "data",
+ "tier": "recommended",
+ "author": "Vaultwarden",
+ "repo": "https://github.com/dani-garcia/vaultwarden",
+ "launch": {
+ "open_in_new_tab": true
+ }
+ }
}
- },
- "version": "1.37.1-alpine"
+ }
}
- },
- "schema": 1,
- "signature": "da5b6b183ac46c062945c27abdc06affb558e805e1ccf67ac0ee17e5e3dd85cc05a0656dd83bdacb1e1d237445145d00995f55e77209e1cbb2b6d8ce47084e0a",
- "signed_by": "did:key:z6Mkfu5LT8d4DjETtrkATvHh9Dvcbnr7zBCUwfau8Sw7DLWT",
- "updated": "2026-08-30"
+ }
}
diff --git a/scripts/generate-app-catalog.sh b/scripts/generate-app-catalog.sh
index 1a75eb74..736a6a0e 100755
--- a/scripts/generate-app-catalog.sh
+++ b/scripts/generate-app-catalog.sh
@@ -81,9 +81,6 @@ SINGLE = {
"fedimint": "FEDIMINT_IMAGE",
"fedimint-gateway": "FEDIMINT_GATEWAY_IMAGE",
"nostr-rs-relay": "NOSTR_RS_RELAY_IMAGE",
- "nostr-vpn": "NOSTR_VPN_IMAGE",
- "fips": "FIPS_IMAGE",
- "routstr": "ROUTSTR_IMAGE",
"adguardhome": "ADGUARDHOME_IMAGE",
}
@@ -100,13 +97,6 @@ STACK = {
"immich_postgres": "IMMICH_POSTGRES_IMAGE",
"immich_redis": "REDIS_IMAGE",
},
- "penpot": {
- "penpot-frontend": "PENPOT_FRONTEND_IMAGE",
- "penpot-backend": "PENPOT_BACKEND_IMAGE",
- "penpot-exporter": "PENPOT_EXPORTER_IMAGE",
- "penpot-postgres": "PENPOT_POSTGRES_IMAGE",
- "penpot-valkey": "PENPOT_VALKEY_IMAGE",
- },
"mempool": {
"archy-mempool-web": "MEMPOOL_WEB_IMAGE",
"mempool-api": "MEMPOOL_BACKEND_IMAGE",
diff --git a/scripts/image-versions.sh b/scripts/image-versions.sh
index 966096d2..263b2aa1 100644
--- a/scripts/image-versions.sh
+++ b/scripts/image-versions.sh
@@ -99,13 +99,9 @@ VALKEY_IMAGE="$ARCHY_REGISTRY/valkey:8.1.6"
# Nostr
NOSTR_RS_RELAY_IMAGE="$ARCHY_REGISTRY/nostr-rs-relay:0.10.0"
STRFRY_IMAGE="$ARCHY_REGISTRY/strfry:1.0.4"
-NOSTR_VPN_IMAGE="$ARCHY_REGISTRY/nostr-vpn:v0.3.7"
-NOSTR_VPN_UI_IMAGE="$ARCHY_REGISTRY/nostr-vpn-ui:latest"
-FIPS_IMAGE="$ARCHY_REGISTRY/fips:v0.1.0"
FIPS_UI_IMAGE="$ARCHY_REGISTRY/fips-ui:1.7.123-alpha"
# AI / Routing
-ROUTSTR_IMAGE="$ARCHY_REGISTRY/routstr:v0.4.3"
# Community / Gaming
BOTFIGHTS_IMAGE="$ARCHY_REGISTRY/botfights:1.2.11"
@@ -127,12 +123,6 @@ GITEA_IMAGE="docker.io/gitea/gitea:1.23"
IMMICH_POSTGRES_IMAGE="$ARCHY_REGISTRY/immich-postgres:14-vectorchord0.4.3-pgvectors0.2.0"
IMMICH_SERVER_IMAGE="$ARCHY_REGISTRY/immich-server:release"
-# Penpot stack
-PENPOT_POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:15"
-PENPOT_VALKEY_IMAGE="$ARCHY_REGISTRY/valkey:8.1"
-PENPOT_BACKEND_IMAGE="$ARCHY_REGISTRY/penpot-backend:2.4"
-PENPOT_EXPORTER_IMAGE="$ARCHY_REGISTRY/penpot-exporter:2.4"
-PENPOT_FRONTEND_IMAGE="$ARCHY_REGISTRY/penpot-frontend:2.4"
# Custom UI containers (built from docker/ dirs, pushed to registry)
BITCOIN_UI_IMAGE="$ARCHY_REGISTRY/bitcoin-ui:1.7.123-alpha"