New templates

AGENTS.md

@@ -170,6 +170,16 @@ This document provides essential context for AI models interacting with this pro
   - **Env:** Array of strings: `env = ["KEY=VALUE", "DB_PASSWORD=${db_pass}"]`
   - **Available helpers:** `${domain}`, `${password:length}`, `${base64:length}`, `${hash:length}`, `${uuid}`, `${randomPort}`, `${email}`, `${username}`, `${timestamp}`, `${timestamps:datetime}`, `${timestampms:datetime}`, `${jwt:secret_var:payload_var}`
   - **JWT helper example:** `${jwt:mysecret:mypayload}` with payload containing `exp: ${timestamps:2030-01-01T00:00:00Z}`
+  - **Volume bind mounts (in docker-compose.yml):** When mounting host paths, do NOT use absolute paths like `"/folder:/path/in/container"`. Use relative paths instead:
+    ```yaml
+    # Invalid
+    volumes:
+      - "/folder:/path/in/container" ❌
+    # Valid
+    volumes:
+      - "../files/my-database:/var/lib/mysql" ✅
+      - "../files/my-configs:/etc/my-app/config" ✅
+    ```
 
 - **meta.json Requirements:**
 

CONTRIBUTING.md

@@ -20,6 +20,11 @@ This project adheres to the [Contributor Covenant Code of Conduct](https://www.c
 
 For larger changes or questions, open an issue first to discuss your ideas.
 
+### Pull Request Guidelines
+
+- **Keep PRs small and focused.** Avoid very large PRs; prefer several smaller PRs (e.g., one template or one logical change per PR). This speeds up review and keeps the history clear.
+- **Test before submitting.** Any PR that has not been tested by the contributor will be closed. This keeps the PR queue tidy and ensures that only contributions that have been verified by their authors are considered.
+
 ## Adding a New Template
 
 To add a new template, follow these steps:

blueprints/ackee/instructions.md

@@ -1,4 +1,4 @@
 
-## TODO
+## Instructions
 
 We don't have nothing to show here....

blueprints/alist/docker-compose.yml

@@ -1,7 +1,7 @@
 version: '3.3'
 services:
   alist:
-    image: xhofe/alist:v3.41.0
+    image: xhofe/alist:v3.55.0
     volumes:
       - alist-data:/opt/alist/data
     environment:

blueprints/appsmith/docker-compose.yml

@@ -1,6 +1,10 @@
 version: "3.8"
 services:
   appsmith:
-    image: index.docker.io/appsmith/appsmith-ee:v1.29
+    image: appsmith/appsmith-ee:v1.94
     volumes:
-      - ../files/stacks:/appsmith-stacks
+      - appsmith-data:/appsmith-stacks
+    restart: unless-stopped
+
+volumes:
+  appsmith-data:

blueprints/budibase/docker-compose.yml

@@ -1,8 +1,8 @@
 services:
+
   apps:
-    image: budibase.docker.scarf.sh/budibase/apps:3.5.3
+    image: budibase/apps:3.23.47
     restart: unless-stopped
-
     environment:
       SELF_HOSTED: 1
       LOG_LEVEL: info
@@ -39,10 +39,10 @@ services:
       timeout: 15s
       retries: 5
       start_period: 10s
+
   worker:
-    image: budibase.docker.scarf.sh/budibase/worker:3.2.25
+    image: budibase/worker:3.23.47
     restart: unless-stopped
-
     environment:
       SELF_HOSTED: 1
       LOG_LEVEL: info
@@ -78,10 +78,10 @@ services:
       timeout: 15s
       retries: 5
       start_period: 10s
+
   minio:
-    image: minio/minio:RELEASE.2024-11-07T00-52-20Z
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
     restart: unless-stopped
-
     volumes:
       - 'minio_data:/data'
     environment:
@@ -98,10 +98,10 @@ services:
       interval: 30s
       timeout: 20s
       retries: 3
+
   proxy:
-    image: budibase/proxy:3.2.25
+    image: budibase/proxy:3.23.47
     restart: unless-stopped
-
     environment:
       PROXY_RATE_LIMIT_WEBHOOKS_PER_SECOND: 10
       PROXY_RATE_LIMIT_API_PER_SECOND: 20
@@ -130,10 +130,10 @@ services:
       timeout: 15s
       retries: 5
       start_period: 10s
+
   couchdb:
     image: budibase/couchdb:v3.3.3
     restart: unless-stopped
-
     environment:
       COUCHDB_USER: budibase
       COUCHDB_PASSWORD: ${BB_COUCHDB_PASSWORD}
@@ -150,9 +150,9 @@ services:
       start_period: 10s
     volumes:
       - 'couchdb3_data:/opt/couchdb/data'
-  redis:
-    image: redis:7.2-alpine
 
+  redis:
+    image: redis:8.4-alpine
     restart: unless-stopped
     command: 'redis-server --requirepass "${BB_REDIS_PASSWORD}"'
     volumes:
@@ -168,22 +168,9 @@ services:
       timeout: 15s
       retries: 5
       start_period: 10s
-  watchtower:
-    restart: unless-stopped   
-
-    image: containrrr/watchtower:1.7.1
-    volumes:
-      - '/var/run/docker.sock:/var/run/docker.sock'
-    command: '--debug --http-api-update bbapps bbworker bbproxy'
-    environment:
-      WATCHTOWER_HTTP_API: true
-      WATCHTOWER_HTTP_API_TOKEN: ${BB_WATCHTOWER_PASSWORD}
-      WATCHTOWER_CLEANUP: true
-    labels:
-      - com.centurylinklabs.watchtower.enable=false
 
 
 volumes:
   minio_data:
   couchdb3_data:
-  redis_data: 
+  redis_data: 

blueprints/cloudflare-ddns/docker-compose.yml

@@ -0,0 +1,16 @@
+# For more details, see:
+# - https://github.com/favonia/cloudflare-ddns
+services:
+  cloudflare-ddns:
+    image: favonia/cloudflare-ddns:1
+    network_mode: host
+    restart: unless-stopped
+    user: "1000:1000"
+    read_only: true
+    cap_drop: [all]
+    security_opt: [no-new-privileges:true]
+    environment:
+      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN:?}
+      - DOMAINS=${DOMAINS:?}
+      - PROXIED=false
+      - IP6_PROVIDER=none

blueprints/cloudflare-ddns/template.toml

@@ -0,0 +1,9 @@
+variables = {}
+
+[config]
+domains = []
+mounts = []
+
+[config.env]
+CLOUDFLARE_API_TOKEN = "<INSERT YOUR TOKEN>"
+DOMAINS = "example.org,www.example.org,example.io"

blueprints/cloudflared/docker-compose.yml

@@ -3,14 +3,14 @@ services:
     image: 'cloudflare/cloudflared:latest'
     environment:
       # Don't forget to set this in your Dokploy Environment
-      - 'TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}'
+      - 'TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN:?}'
     network_mode: host
     restart: unless-stopped
     command: [
       "tunnel",
 
       # More tunnel run parameters here:
-      # https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/configure-tunnels/tunnel-run-parameters/
+      # https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/configure-tunnels/cloudflared-parameters/run-parameters/
       "--no-autoupdate",
       #"--protocol", "http2",
 

blueprints/cloudflared/template.toml

@@ -2,5 +2,7 @@ variables = {}
 
 [config]
 domains = []
-env = ["CLOUDFLARE_TUNNEL_TOKEN=\"<INSERT TOKEN>\""]
 mounts = []
+
+[config.env]
+CLOUDFLARE_TUNNEL_TOKEN = ""

blueprints/habitica/docker-compose.yml

@@ -1,13 +1,18 @@
-version: "3.8"
-
 services:
   server:
     image: docker.io/awinterstein/habitica-server:latest
     restart: unless-stopped
     depends_on:
-      - mongo
+      mongo:
+        condition: service_healthy
     environment:
-      - NODE_DB_URI=mongodb://mongo/habitica
+      NODE_DB_URI: "mongodb://${MONGO_HABITICA_USER}:${MONGO_HABITICA_PASSWORD}@mongo/habitica?authSource=habitica"
+      INVITE_ONLY: "${INVITE_ONLY}"
+      EMAIL_SERVER_URL: "${EMAIL_SERVER_URL}"
+      EMAIL_SERVER_PORT: "${EMAIL_SERVER_PORT}"
+      EMAIL_SERVER_AUTH_USER: "${EMAIL_SERVER_AUTH_USER}"
+      EMAIL_SERVER_AUTH_PASSWORD: "${EMAIL_SERVER_AUTH_PASSWORD}"
+      ADMIN_EMAIL: "${ADMIN_EMAIL}"
 
   client:
     image: docker.io/awinterstein/habitica-client:latest
@@ -20,12 +25,64 @@ services:
   mongo:
     image: docker.io/mongo:latest
     restart: unless-stopped
-    command: ["--replSet", "rs", "--bind_ip_all", "--port", "27017"]
+    command: >
+      bash -c "
+        echo \"${MONGO_KEYFILE_CONTENT}\" > /etc/mongo-keyfile &&
+        chown 999:999 /etc/mongo-keyfile &&
+        chmod 400 /etc/mongo-keyfile &&
+        exec docker-entrypoint.sh mongod --replSet rs --bind_ip_all --port 27017 --keyFile /etc/mongo-keyfile
+      "
+    environment:
+      MONGO_INITDB_ROOT_USERNAME: ${MONGO_ADMIN_USER}
+      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_ADMIN_PASSWORD}
+      MONGO_KEYFILE_CONTENT: ${MONGO_KEYFILE_CONTENT}
+      MONGO_HABITICA_USER: ${MONGO_HABITICA_USER}
+      MONGO_HABITICA_PASSWORD: ${MONGO_HABITICA_PASSWORD}
+    # ---------------------------------------------------------
+    # SMART HEALTHCHECK: Auto-fixes Hostname Mismatches for replicaSet
+    # ---------------------------------------------------------
     healthcheck:
-      test: echo "try { rs.status() } catch (err) { rs.initiate() }" | mongosh --port 27017 --quiet
-      interval: 10s
-      timeout: 30s
-      retries: 30
+      test: |
+        mongosh --port 27017 --quiet -u "${MONGO_ADMIN_USER}" -p "${MONGO_ADMIN_PASSWORD}" --authenticationDatabase admin --eval "
+          try {
+            // 1. Hostname Fix
+            const config = rs.conf();
+            const currentHost = require('os').hostname() + ':27017';
+            if (config.members[0].host !== currentHost) {
+              config.members[0].host = currentHost;
+              rs.reconfig(config, { force: true });
+            }
+
+            // 2. User Creation Logic
+            const targetDb = db.getSiblingDB('habitica');
+            const hUser = process.env.MONGO_HABITICA_USER;
+            const hPass = process.env.MONGO_HABITICA_PASSWORD;
+
+            // We can only check/create users if we are Primary
+            if (rs.isMaster().ismaster) {
+              if (!targetDb.getUser(hUser)) {
+                print('Creating missing user ' + hUser + '...');
+                targetDb.createUser({ user: hUser, pwd: hPass, roles: ['readWrite'] });
+              }
+              // SUCCESS: User exists and we are Primary
+              quit(0);
+            } else {
+              // We are not Primary yet (still electing), so we cannot confirm user exists.
+              // Fail the check so the dependent app waits.
+              print('Waiting for Primary state...');
+              quit(1);
+            }
+          } catch (err) {
+            // If not initialized, initiate and FAIL this check so we wait for the next cycle
+            try { 
+              rs.initiate({ _id: 'rs', members: [{ _id: 0, host: require('os').hostname() + ':27017' }] }); 
+            } catch (e) {}
+            quit(1);
+          }
+        "
+      interval: 5s
+      timeout: 10s
+      retries: 20
     volumes:
       - habitica-mongo-data:/data/db
 

blueprints/habitica/template.toml

@@ -1,6 +1,9 @@
 [variables]
 main_domain = "${domain}"
 mail_password = "${password:32}"
+mongo_key = "${base64:756}"
+mongo_admin_password = "${password}"
+mongo_habitica_password = "${password}"
 
 [config]
 [[config.domains]]
@@ -9,16 +12,21 @@ port = 80
 host = "habitica.${main_domain}"
 
 [config.env]
-
-BASE_URL="https://habitica.${main_domain}"
-INVITE_ONLY="false"
-EMAIL_SERVER_URL="mail.example.com"
-EMAIL_SERVER_PORT="587"
-EMAIL_SERVER_AUTH_USER="mail_user"
-EMAIL_SERVER_AUTH_PASSWORD="${mail_password}"
+BASE_URL = "https://habitica.${main_domain}"
+INVITE_ONLY = "false"
+EMAIL_SERVER_URL = "mail.example.com"
+EMAIL_SERVER_PORT = "587"
+EMAIL_SERVER_AUTH_USER = "mail_user"
+EMAIL_SERVER_AUTH_PASSWORD = "${mail_password}"
+MONGO_KEYFILE_CONTENT = "${mongo_key}"
+MONGO_ADMIN_USER = "admin"
+MONGO_ADMIN_PASSWORD = "${mongo_admin_password}"
+MONGO_HABITICA_USER = "habitica"
+MONGO_HABITICA_PASSWORD = "${mongo_habitica_password}"
+ADMIN_EMAIL = "no-reply@${main_domain}"
 
 [[config.mounts]]
 serviceName = "mongo"
 type = "volume"
 source = "habitica-mongo-data"
-target = "/data/db"
+target = "/data/db"

blueprints/invoiceshelf/docker-compose.yml

@@ -20,8 +20,7 @@ services:
     image: invoiceshelf/invoiceshelf:nightly
 
     volumes:
-      - invoiceshelf-app-data:/data
-      - invoiceshelf-app-conf:/conf
+      - invoiceshelf-storage:/var/www/html/storage
     environment:
       - PHP_TZ=UTC
       - TIMEZONE=UTC
@@ -49,5 +48,4 @@ services:
 
 volumes:
   invoiceshelf-postgres-data:
-  invoiceshelf-app-data:
-  invoiceshelf-app-conf: 
+  invoiceshelf-storage:

blueprints/ipfs/docker-compose.yml

@@ -0,0 +1,17 @@
+version: "3.8"
+services:
+  ipfs:
+    image: ipfs/kubo:latest
+    restart: unless-stopped
+    environment:
+      - IPFS_PROFILE=server
+    volumes:
+      - ipfs_data:/data/ipfs
+      - ipfs_staging:/export
+    ports:
+      - 4001
+      - 8080
+      - 5001
+volumes:
+  ipfs_data: {}
+  ipfs_staging: {}