archy/releases/app-catalog.json

{
  "schema": 1,
  "updated": "2026-06-28",
  "apps": {
    "adguardhome": {
      "version": "v0.107.55",
      "image": "146.59.87.168:3000/lfg2025/adguardhome:v0.107.55"
    },
    "aiui": {
      "version": "0.1.0",
      "manifest": {
        "app": {
          "id": "aiui",
          "name": "AI Assistant",
          "version": "0.1.0",
          "description": "Conversational AI interface for Archipelago. Quarantined \u2014 communicates only via context broker.",
          "internal": true,
          "container": {
            "image": "localhost/archipelago-aiui:latest",
            "pull_policy": "always"
          },
          "resources": {
            "cpu_limit": 1,
            "memory_limit": "512Mi",
            "disk_limit": "1Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "aiui"
          },
          "ports": [
            {
              "host": 5180,
              "container": 80,
              "protocol": "tcp",
              "bind": "127.0.0.1"
            }
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:80",
            "path": "/",
            "interval": "60s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "archy-btcpay-db": {
      "version": "15.17",
      "manifest": {
        "app": {
          "id": "archy-btcpay-db",
          "name": "BTCPay Postgres",
          "version": 15.17,
          "description": "Postgres backend for BTCPay and NBXplorer.",
          "container": {
            "image": "git.tx1138.com/lfg2025/postgres:15.17",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "data_uid": "100998:100998",
            "secret_env": [
              {
                "key": "POSTGRES_PASSWORD",
                "secret_file": "btcpay-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "storage": "20Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/postgres-btcpay",
              "target": "/var/lib/postgresql/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "POSTGRES_DB=btcpay",
            "POSTGRES_USER=btcpay"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:5432",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "none",
            "sync_required": false
          }
        }
      }
    },
    "archy-mempool-db": {
      "version": "11.4.10",
      "manifest": {
        "app": {
          "id": "archy-mempool-db",
          "name": "Mempool MariaDB",
          "version": "11.4.10",
          "description": "MariaDB backend for the mempool explorer stack.",
          "container": {
            "image": "git.tx1138.com/lfg2025/mariadb:11.4.10",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "data_uid": "100998:100998",
            "secret_env": [
              {
                "key": "MYSQL_PASSWORD",
                "secret_file": "mempool-db-password"
              },
              {
                "key": "MYSQL_ROOT_PASSWORD",
                "secret_file": "mysql-root-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "storage": "20Gi"
            }
          ],
          "resources": {
            "memory_limit": "512Mi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/mysql-mempool",
              "target": "/var/lib/mysql",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "MYSQL_DATABASE=mempool",
            "MYSQL_USER=mempool"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:3306",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "none",
            "sync_required": false
          }
        }
      }
    },
    "archy-mempool-web": {
      "version": "3.0.1",
      "manifest": {
        "app": {
          "id": "archy-mempool-web",
          "name": "Mempool Web",
          "version": "3.0.1",
          "description": "Frontend web UI for mempool explorer.",
          "container_name": "mempool",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/mempool-frontend:v3.0.1",
            "pull_policy": "if-not-present",
            "network": "archy-net"
          },
          "dependencies": [
            {
              "app_id": "mempool-api",
              "version": ">=3.0.0"
            }
          ],
          "resources": {
            "memory_limit": "512Mi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 4080,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "environment": [
            "FRONTEND_HTTP_PORT=8080",
            "BACKEND_MAINNET_HTTP_HOST=mempool-api"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8080",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "none",
            "sync_required": false
          }
        }
      }
    },
    "archy-nbxplorer": {
      "version": "2.6.0",
      "manifest": {
        "app": {
          "id": "archy-nbxplorer",
          "name": "NBXplorer",
          "version": "2.6.0",
          "description": "BTCPay blockchain indexer service.",
          "container": {
            "image": "git.tx1138.com/lfg2025/nbxplorer:2.6.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "secret_env": [
              {
                "key": "NBXPLORER_BTCRPCPASSWORD",
                "secret_file": "bitcoin-rpc-password"
              },
              {
                "key": "BTCPAY_DB_PASS",
                "secret_file": "btcpay-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=26.0"
            },
            {
              "app_id": "archy-btcpay-db",
              "version": ">=15.17"
            }
          ],
          "resources": {
            "memory_limit": "2Gi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 32838,
              "container": 32838,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/nbxplorer",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "NBXPLORER_DATADIR=/data",
            "NBXPLORER_NETWORK=mainnet",
            "NBXPLORER_CHAINS=btc",
            "NBXPLORER_BIND=0.0.0.0:32838",
            "NBXPLORER_BTCRPCURL=http://bitcoin-knots:8332",
            "NBXPLORER_BTCRPCUSER=archipelago",
            "NBXPLORER_BTCNODEENDPOINT=bitcoin-knots:8333",
            "NBXPLORER_NOAUTH=1",
            "NBXPLORER_POSTGRES=Username=btcpay;Password=${BTCPAY_DB_PASS};Host=archy-btcpay-db;Port=5432;Database=nbxplorer"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:32838",
            "path": "/",
            "interval": "30s",
            "timeout": "30s",
            "retries": 5
          },
          "bitcoin_integration": {
            "rpc_access": "read-only",
            "sync_required": true
          }
        }
      }
    },
    "bitcoin-core": {
      "version": "28.4.0",
      "manifest": {
        "app": {
          "id": "bitcoin-core",
          "name": "Bitcoin Core",
          "version": "28.4.0",
          "description": "Reference Bitcoin Core node with dynamic prune/full-mode startup based on host disk.",
          "container_name": "bitcoin-core",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/bitcoin:28.4",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "entrypoint": [
              "sh",
              "-lc"
            ],
            "custom_args": [
              "BITCOIND=\"$(command -v bitcoind || true)\"; if [ -z \"$BITCOIND\" ]; then\n  BITCOIND=\"$(find /opt -path '*/bin/bitcoind' -type f 2>/dev/null | sort | tail -n 1)\";\nfi; if [ -z \"$BITCOIND\" ]; then\n  echo \"bitcoind not found in image\" >&2;\n  exit 127;\nfi; RPC_USER=\"$(printenv BITCOIN_RPC_USER)\"; RPC_PASS=\"$(printenv BITCOIN_RPC_PASS)\"; RPC_TXRELAY_AUTH=\"$(printenv BITCOIN_RPC_TXRELAY_RPCAUTH || true)\"; DISK_GB_VALUE=\"$(printenv DISK_GB || true)\"; RPC_HEADROOM=\"-rpcthreads=16 -rpcworkqueue=256\"; RPC_TXRELAY_FLAGS=\"-rpcwhitelistdefault=0\"; if [ -n \"$RPC_TXRELAY_AUTH\" ]; then\n  RPC_TXRELAY_FLAGS=\"$RPC_TXRELAY_FLAGS -rpcauth=$RPC_TXRELAY_AUTH -rpcwhitelist=txrelay:sendrawtransaction,submitpackage,testmempoolaccept,getmempoolinfo,getrawmempool,getmempoolentry,getnetworkinfo,getblockchaininfo,getblockcount,getblockhash,getblock,getblockheader,getrawtransaction,gettxout,gettxspendingprevout,decoderawtransaction,decodescript,estimatesmartfee,uptime,ping,getconnectioncount,getpeerinfo,getindexinfo,getdeploymentinfo,getchaintips\";\nfi; if [ \"${DISK_GB_VALUE:-0}\" -lt 1000 ]; then\n  exec \"$BITCOIND\" -datadir=/home/bitcoin/.bitcoin -noconf -server=1 -prune=550 -rpcallowip=0.0.0.0/0 -rpcbind=0.0.0.0:8332 -listen=1 -bind=0.0.0.0:8333 -dbcache=1024 -par=0 -maxconnections=125 $RPC_HEADROOM $RPC_TXRELAY_FLAGS -rpcuser=\"$RPC_USER\" -rpcpassword=\"$RPC_PASS\";\nelse\n  exec \"$BITCOIND\" -datadir=/home/bitcoin/.bitcoin -noconf -server=1 -txindex=1 -rpcallowip=0.0.0.0/0 -rpcbind=0.0.0.0:8332 -listen=1 -bind=0.0.0.0:8333 -dbcache=4096 -par=0 -maxconnections=125 $RPC_HEADROOM $RPC_TXRELAY_FLAGS -rpcuser=\"$RPC_USER\" -rpcpassword=\"$RPC_PASS\";\nfi"
            ],
            "derived_env": [
              {
                "key": "DISK_GB",
                "template": "{{DISK_GB}}"
              }
            ],
            "secret_env": [
              {
                "key": "BITCOIN_RPC_PASS",
                "secret_file": "bitcoin-rpc-password"
              },
              {
                "key": "BITCOIN_RPC_TXRELAY_RPCAUTH",
                "secret_file": "bitcoin-rpc-txrelay-rpcauth"
              }
            ],
            "data_uid": "100101:100101"
          },
          "dependencies": [
            {
              "storage": "500Gi"
            }
          ],
          "resources": {
            "cpu_limit": 0,
            "memory_limit": "4Gi",
            "disk_limit": "500Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8332,
              "container": 8332,
              "protocol": "tcp"
            },
            {
              "host": 8333,
              "container": 8333,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/bitcoin",
              "target": "/home/bitcoin/.bitcoin",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "BITCOIN_RPC_USER=archipelago"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:8332",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true,
            "testnet_support": false,
            "pruning_support": true
          }
        }
      }
    },
    "bitcoin-knots": {
      "version": "latest",
      "image": "146.59.87.168:3000/lfg2025/bitcoin-knots:latest",
      "manifest": {
        "app": {
          "id": "bitcoin-knots",
          "name": "Bitcoin Knots",
          "version": "28.1.0",
          "description": "Full Bitcoin Knots node with dynamic prune/full-mode startup based on host disk.",
          "container_name": "bitcoin-knots",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/bitcoin-knots:latest",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "entrypoint": [
              "sh",
              "-lc"
            ],
            "custom_args": [
              "BITCOIND=\"$(command -v bitcoind || true)\"; if [ -z \"$BITCOIND\" ]; then\n  BITCOIND=\"$(find /opt -path '*/bin/bitcoind' -type f 2>/dev/null | sort | tail -n 1)\";\nfi; if [ -z \"$BITCOIND\" ]; then\n  echo \"bitcoind not found in image\" >&2;\n  exit 127;\nfi; RPC_USER=\"$(printenv BITCOIN_RPC_USER)\"; RPC_PASS=\"$(printenv BITCOIN_RPC_PASS)\"; RPC_TXRELAY_AUTH=\"$(printenv BITCOIN_RPC_TXRELAY_RPCAUTH || true)\"; DISK_GB_VALUE=\"$(printenv DISK_GB || true)\"; RPC_HEADROOM=\"-rpcthreads=16 -rpcworkqueue=256\"; RPC_TXRELAY_FLAGS=\"-rpcwhitelistdefault=0\"; if [ -n \"$RPC_TXRELAY_AUTH\" ]; then\n  RPC_TXRELAY_FLAGS=\"$RPC_TXRELAY_FLAGS -rpcauth=$RPC_TXRELAY_AUTH -rpcwhitelist=txrelay:sendrawtransaction,submitpackage,testmempoolaccept,getmempoolinfo,getrawmempool,getmempoolentry,getnetworkinfo,getblockchaininfo,getblockcount,getblockhash,getblock,getblockheader,getrawtransaction,gettxout,gettxspendingprevout,decoderawtransaction,decodescript,estimatesmartfee,uptime,ping,getconnectioncount,getpeerinfo,getindexinfo,getdeploymentinfo,getchaintips\";\nfi; if [ \"${DISK_GB_VALUE:-0}\" -lt 1000 ]; then\n  exec \"$BITCOIND\" -datadir=/home/bitcoin/.bitcoin -noconf -server=1 -prune=550 -rpcallowip=0.0.0.0/0 -rpcbind=0.0.0.0:8332 -listen=1 -bind=0.0.0.0:8333 -dbcache=2048 -par=0 -maxconnections=125 $RPC_HEADROOM $RPC_TXRELAY_FLAGS -rpcuser=\"$RPC_USER\" -rpcpassword=\"$RPC_PASS\";\nelse\n  exec \"$BITCOIND\" -datadir=/home/bitcoin/.bitcoin -noconf -server=1 -txindex=1 -rpcallowip=0.0.0.0/0 -rpcbind=0.0.0.0:8332 -listen=1 -bind=0.0.0.0:8333 -dbcache=4096 -par=0 -maxconnections=125 $RPC_HEADROOM $RPC_TXRELAY_FLAGS -rpcuser=\"$RPC_USER\" -rpcpassword=\"$RPC_PASS\";\nfi"
            ],
            "derived_env": [
              {
                "key": "DISK_GB",
                "template": "{{DISK_GB}}"
              }
            ],
            "secret_env": [
              {
                "key": "BITCOIN_RPC_PASS",
                "secret_file": "bitcoin-rpc-password"
              },
              {
                "key": "BITCOIN_RPC_TXRELAY_RPCAUTH",
                "secret_file": "bitcoin-rpc-txrelay-rpcauth"
              }
            ],
            "data_uid": "100101:100101"
          },
          "dependencies": [
            {
              "storage": "500Gi"
            }
          ],
          "resources": {
            "cpu_limit": 0,
            "memory_limit": "8Gi",
            "disk_limit": "500Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8332,
              "container": 8332,
              "protocol": "tcp"
            },
            {
              "host": 8333,
              "container": 8333,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/bitcoin",
              "target": "/home/bitcoin/.bitcoin",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "BITCOIN_RPC_USER=archipelago"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:8332",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true,
            "testnet_support": false,
            "pruning_support": true
          }
        }
      }
    },
    "bitcoin-ui": {
      "version": "1.7.84-alpha",
      "image": "146.59.87.168:3000/lfg2025/bitcoin-ui:1.7.84-alpha",
      "manifest": {
        "app": {
          "id": "bitcoin-ui",
          "name": "Bitcoin UI",
          "version": "1.0.0",
          "description": "Archipelago-native HTTP proxy + static site for interacting with the\nBitcoin Core / Bitcoin Knots JSON-RPC. Runs nginx inside a container\nand reverse-proxies /bitcoin-rpc/ to 127.0.0.1:8332 on the host. The\nupstream Authorization header is substituted from\n/var/lib/archipelago/secrets/bitcoin-rpc-password by the prod\norchestrator's pre-start hook, rendered into an nginx.conf that is\nbind-mounted read-only at container start.\n",
          "container": {
            "build": {
              "context": "/opt/archipelago/docker/bitcoin-ui",
              "dockerfile": "Dockerfile",
              "tag": "localhost/bitcoin-ui:local"
            }
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core"
            }
          ],
          "resources": {
            "memory_limit": "128Mi"
          },
          "security": {
            "readonly_root": false,
            "network_policy": "host"
          },
          "ports": [],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/bitcoin-ui/nginx.conf",
              "target": "/etc/nginx/conf.d/default.conf",
              "options": [
                "ro"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "http",
            "endpoint": "http://127.0.0.1:8334",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "botfights": {
      "version": "1.1.0",
      "manifest": {
        "app": {
          "id": "botfights",
          "name": "BotFights",
          "version": "1.1.0",
          "description": "Bot competition arena with 2-player arcade fighting mode. AI bots battle in trivia challenges while humans duke it out with controllers. Built for Bitcoiners.",
          "category": "community",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/botfights:1.1.0",
            "pull_policy": "always"
          },
          "dependencies": [
            {
              "storage": "500Mi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "512Mi",
            "disk_limit": "500Mi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1001,
            "seccomp_profile": "default",
            "network_policy": "bridge",
            "apparmor_profile": "default"
          },
          "ports": [
            {
              "host": 9100,
              "container": 9100,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "botfights-data",
              "target": "/app/server/data"
            },
            {
              "type": "tmpfs",
              "target": "/tmp",
              "options": [
                "rw",
                "noexec",
                "nosuid",
                "size=64m"
              ]
            }
          ],
          "environment": [
            "NODE_ENV=production"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:9100",
            "path": "/api/health",
            "interval": "30s",
            "timeout": "10s",
            "retries": 3,
            "start_period": "30s"
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Bot arena and arcade fighter with controller support",
              "type": "ui",
              "port": 9100,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "author": "Dorian",
            "repo": "https://botfights.net",
            "icon": "/assets/img/app-icons/botfights.svg",
            "license": "MIT",
            "tags": [
              "bitcoin",
              "gaming",
              "arcade",
              "fighter",
              "bots",
              "competition",
              "controller"
            ]
          }
        }
      }
    },
    "btcpay": {
      "version": "2.3.9",
      "image": "docker.io/btcpayserver/btcpayserver:2.3.9",
      "images": {
        "btcpay-server": "docker.io/btcpayserver/btcpayserver:2.3.9",
        "archy-nbxplorer": "146.59.87.168:3000/lfg2025/nbxplorer:2.6.0",
        "archy-btcpay-db": "146.59.87.168:3000/lfg2025/postgres:15.17"
      }
    },
    "btcpay-server": {
      "version": "2.3.9",
      "manifest": {
        "app": {
          "id": "btcpay-server",
          "name": "BTCPay Server",
          "version": "2.3.9",
          "description": "Self-hosted Bitcoin payment processor. Accept Bitcoin payments without intermediaries.",
          "container": {
            "image": "docker.io/btcpayserver/btcpayserver:2.3.9",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "secret_env": [
              {
                "key": "BTCPAY_BTCRPCPASSWORD",
                "secret_file": "bitcoin-rpc-password"
              },
              {
                "key": "BTCPAY_DB_PASS",
                "secret_file": "btcpay-db-password"
              }
            ],
            "derived_env": [
              {
                "key": "BTCPAY_HOST",
                "template": "{{HOST_IP}}:23000"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=26.0"
            },
            {
              "app_id": "archy-btcpay-db",
              "version": ">=15.17"
            },
            {
              "app_id": "archy-nbxplorer",
              "version": ">=2.6.0"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "2Gi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 23000,
              "container": 49392,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/btcpay",
              "target": "/datadir",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "ASPNETCORE_URLS=http://0.0.0.0:49392",
            "BTCPAY_PROTOCOL=http",
            "BTCPAY_CHAINS=btc",
            "BTCPAY_BTCEXPLORERURL=http://archy-nbxplorer:32838",
            "BTCPAY_BTCRPCURL=http://bitcoin-knots:8332",
            "BTCPAY_BTCRPCUSER=archipelago",
            "BTCPAY_POSTGRES=Username=btcpay;Password=${BTCPAY_DB_PASS};Host=archy-btcpay-db;Port=5432;Database=btcpay"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:49392",
            "path": "/",
            "interval": "30s",
            "timeout": "30s",
            "retries": 5
          },
          "bitcoin_integration": {
            "rpc_access": "read-only",
            "sync_required": true
          },
          "lightning_integration": {
            "payment_processing": false,
            "invoice_management": true
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "BTCPay Server dashboard",
              "type": "ui",
              "port": 23000,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "core-lightning": {
      "version": "23.08.2",
      "manifest": {
        "app": {
          "id": "core-lightning",
          "name": "Core Lightning (CLN)",
          "version": "23.08.2",
          "description": "Lightning Network implementation in C. Lightweight alternative to LND.",
          "container": {
            "image": "elementsproject/lightningd:v23.08.2",
            "image_signature": "cosign://...",
            "pull_policy": "verify-signature"
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=26.0"
            }
          ],
          "resources": {
            "cpu_limit": 1,
            "memory_limit": "512Mi",
            "disk_limit": "5Gi"
          },
          "security": {
            "capabilities": [
              "NET_BIND_SERVICE"
            ],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "core-lightning"
          },
          "ports": [
            {
              "host": 9736,
              "container": 9735,
              "protocol": "tcp"
            },
            {
              "host": 9835,
              "container": 9835,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/core-lightning",
              "target": "/home/clightning/.lightning",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "BITCOIND_RPCURL=http://bitcoin-core:8332",
            "BITCOIND_RPCUSER=${BITCOIN_RPC_USER}",
            "BITCOIND_RPCPASS=${BITCOIN_RPC_PASSWORD}",
            "NETWORK=bitcoin"
          ],
          "health_check": {
            "type": "exec",
            "endpoint": "lightning-cli getinfo",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true
          },
          "lightning_integration": {
            "channel_management": true,
            "payment_routing": true
          }
        }
      }
    },
    "cryptpad": {
      "version": "2024.12.0",
      "image": "146.59.87.168:3000/lfg2025/cryptpad:2024.12.0"
    },
    "did-wallet": {
      "version": "1.0.0",
      "manifest": {
        "app": {
          "id": "did-wallet",
          "name": "Web5 DID Wallet",
          "version": "1.0.0",
          "description": "Web5 wallet with Decentralized Identifier (DID) support. Manage your digital identity and Web5 assets.",
          "container": {
            "image": "archipelago/did-wallet:1.0.0",
            "image_signature": "cosign://...",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "storage": "2Gi"
            }
          ],
          "resources": {
            "cpu_limit": 1,
            "memory_limit": "512Mi",
            "disk_limit": "2Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "did-wallet"
          },
          "ports": [
            {
              "host": 8083,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/did-wallet",
              "target": "/app/wallet",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "WALLET_STORAGE=/app/wallet"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8083",
            "path": "/health",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "web5_integration": {
            "did_support": true,
            "wallet_functionality": true,
            "bitcoin_integration": true
          }
        }
      }
    },
    "electrs-ui": {
      "version": "latest",
      "image": "146.59.87.168:3000/lfg2025/electrs-ui:latest",
      "manifest": {
        "app": {
          "id": "electrs-ui",
          "name": "Electrs UI",
          "version": "1.0.0",
          "description": "Archipelago-native HTTP frontend for electrs/electrumx status. Runs\nnginx inside a container, serves static assets, and proxies\n/electrs-status to the archipelago backend on 127.0.0.1:5678.\n",
          "container": {
            "build": {
              "context": "/opt/archipelago/docker/electrs-ui",
              "dockerfile": "Dockerfile",
              "tag": "localhost/electrs-ui:local"
            }
          },
          "dependencies": [],
          "resources": {
            "memory_limit": "64Mi"
          },
          "security": {
            "readonly_root": false,
            "network_policy": "host"
          },
          "ports": [],
          "volumes": [],
          "environment": [],
          "health_check": {
            "type": "http",
            "endpoint": "http://127.0.0.1:50002",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "electrumx": {
      "version": "v1.18.0",
      "image": "146.59.87.168:3000/lfg2025/electrumx:v1.18.0",
      "manifest": {
        "app": {
          "id": "electrumx",
          "name": "ElectrumX",
          "version": "1.18.0",
          "description": "Electrum server indexing Bitcoin chain data for lightweight wallet queries.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/electrumx:v1.18.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "data_uid": "1000:1000",
            "entrypoint": [
              "sh",
              "-lc"
            ],
            "custom_args": [
              "export DAEMON_URL=\"http://archipelago:$(printenv BITCOIN_RPC_PASS)@bitcoin-knots:8332/\"; exec electrumx_server"
            ],
            "secret_env": [
              {
                "key": "BITCOIN_RPC_PASS",
                "secret_file": "bitcoin-rpc-password"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "bitcoin-knots",
              "version": ">=26.0"
            },
            {
              "storage": "50Gi"
            }
          ],
          "resources": {
            "cpu_limit": 0,
            "memory_limit": "6Gi",
            "disk_limit": "50Gi"
          },
          "security": {
            "capabilities": [
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 50001,
              "container": 50001,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/electrumx",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "COIN=Bitcoin",
            "DB_DIRECTORY=/data",
            "SERVICES=tcp://:50001,rpc://0.0.0.0:8000",
            "CACHE_MB=1024",
            "MAX_SEND=10000000"
          ],
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "ElectrumX server status and connection details",
              "type": "ui",
              "port": 50002,
              "protocol": "http"
            }
          },
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:50001",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3,
            "start_period": "10m"
          },
          "bitcoin_integration": {
            "rpc_access": "read-only",
            "sync_required": true,
            "pruning_support": false
          }
        }
      }
    },
    "fedimint": {
      "version": "v0.10.0",
      "image": "146.59.87.168:3000/lfg2025/fedimintd:v0.10.0",
      "manifest": {
        "app": {
          "id": "fedimint",
          "name": "Fedimint Guardian",
          "version": "0.10.0",
          "description": "Federated Bitcoin minting service with built-in Guardian UI. Privacy-preserving Bitcoin custody.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/fedimintd:v0.10.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "entrypoint": [
              "sh",
              "-lc"
            ],
            "custom_args": [
              "until state=\"$(curl -sS --connect-timeout 5 -m 45 -u \"$FM_BITCOIND_USERNAME:$FM_BITCOIND_PASSWORD\" -H \"Content-Type: application/json\" --data-binary '{\"jsonrpc\":\"1.0\",\"id\":\"fedimint-wait\",\"method\":\"getblockchaininfo\",\"params\":[]}' \"$FM_BITCOIND_URL/\")\" && echo \"$state\" | grep -q '\"initialblockdownload\":false'; do\n  echo \"Waiting for Bitcoin RPC sync at $FM_BITCOIND_URL...\";\n  sleep 30;\ndone;\nexec fedimintd"
            ],
            "derived_env": [
              {
                "key": "FM_P2P_URL",
                "template": "fedimint://{{HOST_MDNS}}:8173"
              },
              {
                "key": "FM_API_URL",
                "template": "ws://{{HOST_MDNS}}:8174"
              }
            ],
            "secret_env": [
              {
                "key": "FM_BITCOIND_PASSWORD",
                "secret_file": "bitcoin-rpc-password"
              }
            ],
            "data_uid": "1000:1000"
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=26.0"
            },
            {
              "storage": "20Gi"
            }
          ],
          "resources": {
            "cpu_limit": 4,
            "memory_limit": "4Gi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8173,
              "container": 8173,
              "protocol": "tcp"
            },
            {
              "host": 8174,
              "container": 8174,
              "protocol": "tcp"
            },
            {
              "host": 8177,
              "container": 8175,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/fedimint",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "FM_DATA_DIR=/data",
            "FM_BITCOIND_URL=http://bitcoin-knots:8332",
            "FM_BITCOIND_USERNAME=archipelago",
            "FM_BITCOIN_NETWORK=bitcoin",
            "FM_BIND_P2P=0.0.0.0:8173",
            "FM_BIND_API=0.0.0.0:8174",
            "FM_BIND_UI=0.0.0.0:8175"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8175",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "interfaces": {
            "main": {
              "name": "Guardian UI",
              "description": "Fedimint Guardian wait/proxy UI",
              "type": "ui",
              "port": 8175,
              "protocol": "http",
              "path": "/"
            }
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true
          }
        }
      }
    },
    "fedimint-clientd": {
      "version": "0.8.0",
      "manifest": {
        "app": {
          "id": "fedimint-clientd",
          "name": "Fedimint Client",
          "version": "0.8.0",
          "description": "Fedimint ecash client daemon (fmcd). Lets the node hold Fedimint ecash and join federations; the wallet talks to it over a local REST API.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/fmcd:0.8.1",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "generated_secrets": [
              {
                "name": "fmcd-password",
                "kind": "hex16"
              }
            ],
            "secret_env": [
              {
                "key": "FMCD_PASSWORD",
                "secret_file": "fmcd-password"
              }
            ],
            "data_uid": "1000:1000"
          },
          "dependencies": [
            {
              "storage": "2Gi"
            }
          ],
          "resources": {
            "cpu_limit": 0.25,
            "memory_limit": "1Gi",
            "disk_limit": "2Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "DAC_OVERRIDE",
              "FOWNER",
              "SETUID",
              "SETGID"
            ],
            "readonly_root": true,
            "network_policy": "bridge"
          },
          "ports": [
            {
              "host": 8178,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/fmcd",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "FMCD_ADDR=0.0.0.0:8080",
            "FMCD_MODE=rest",
            "FMCD_DATA_DIR=/data",
            "FMCD_INVITE_CODE=fed11qgqyj3mfwfhksw309uuxywtxxfjrjc35xuexverpxdsnxcnrxucxvenzveskgc3kvvun2c34xp3k2ep38yunzdpexcekxe3hvd3rvvmx8pnrvdenx5mnzvtzqqqjqt0t6pc3s5z0ynqjw9s4njf6svwgu59kweawc0vvrddcjeemw6yyn4pcdp"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:8080",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "fedimint-gateway": {
      "version": "v0.10.0",
      "image": "146.59.87.168:3000/lfg2025/gatewayd:v0.10.0",
      "manifest": {
        "app": {
          "id": "fedimint-gateway",
          "name": "Fedimint Gateway",
          "version": "0.10.0",
          "description": "Fedimint gateway service with automatic LND-or-LDK backend selection.",
          "container": {
            "image": "git.tx1138.com/lfg2025/gatewayd:v0.10.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "entrypoint": [
              "sh",
              "-lc"
            ],
            "custom_args": [
              "if [ -f /lnd/tls.cert ] && [ -f /lnd/data/chain/bitcoin/mainnet/admin.macaroon ]; then\n  exec gatewayd --data-dir /data --listen 0.0.0.0:8176 --bcrypt-password-hash \"$FEDI_HASH\" --network bitcoin --bitcoind-url http://host.archipelago:8332 --bitcoind-username \"$FM_BITCOIND_USERNAME\" --bitcoind-password \"$FM_BITCOIND_PASSWORD\" lnd --lnd-rpc-host lnd:10009 --lnd-tls-cert /lnd/tls.cert --lnd-macaroon /lnd/data/chain/bitcoin/mainnet/admin.macaroon;\nelse\n  exec gatewayd --data-dir /data --listen 0.0.0.0:8176 --bcrypt-password-hash \"$FEDI_HASH\" --network bitcoin --bitcoind-url http://host.archipelago:8332 --bitcoind-username \"$FM_BITCOIND_USERNAME\" --bitcoind-password \"$FM_BITCOIND_PASSWORD\" ldk --ldk-lightning-port 9737 --ldk-alias archipelago-gateway;\nfi"
            ],
            "generated_secrets": [
              {
                "name": "fedimint-gateway-hash",
                "kind": "bcrypt"
              }
            ],
            "secret_env": [
              {
                "key": "FM_BITCOIND_PASSWORD",
                "secret_file": "bitcoin-rpc-password"
              },
              {
                "key": "FEDI_HASH",
                "secret_file": "fedimint-gateway-hash"
              }
            ],
            "data_uid": "1000:1000"
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=26.0"
            },
            {
              "app_id": "fedimint",
              "version": ">=0.10.0"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "2Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8176,
              "container": 8176,
              "protocol": "tcp"
            },
            {
              "host": 9737,
              "container": 9737,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/fedimint-gateway",
              "target": "/data",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/lnd",
              "target": "/lnd",
              "options": [
                "ro"
              ]
            }
          ],
          "environment": [
            "FM_BITCOIND_USERNAME=archipelago"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8176",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true
          }
        }
      }
    },
    "filebrowser": {
      "version": "v2.27.0",
      "image": "146.59.87.168:3000/lfg2025/filebrowser:v2.27.0",
      "manifest": {
        "app": {
          "id": "filebrowser",
          "name": "File Browser",
          "version": "2.27.0",
          "description": "Baseline Archipelago file manager service.",
          "container": {
            "image": "git.tx1138.com/lfg2025/filebrowser:v2.27.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "custom_args": [
              "--config",
              "/data/.filebrowser.json"
            ],
            "data_uid": "100000:100000"
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE",
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8083,
              "container": 80,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/filebrowser",
              "target": "/srv",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/filebrowser-data",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:80",
            "path": "/health",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "none",
            "sync_required": false
          }
        }
      }
    },
    "fips": {
      "version": "v0.1.0",
      "image": "146.59.87.168:3000/lfg2025/fips:v0.1.0"
    },
    "fips-ui": {
      "version": "1.0.0",
      "manifest": {
        "app": {
          "id": "fips-ui",
          "name": "FIPS Mesh",
          "version": "1.0.0",
          "description": "Archipelago-native dashboard for the FIPS mesh transport. Runs nginx\ninside a container with host networking, serves a static dashboard on\n:8336, and reverse-proxies /rpc/v1 to the archipelago backend on\n127.0.0.1:5678. All FIPS controls (status, seed anchors, reconnect,\nrestart, and stable-channel daemon updates) go through the existing\nfips.* RPC methods, authenticated by the browser's own archipelago\nsession \u2014 there is no separate secret to manage.\n",
          "container": {
            "build": {
              "context": "/opt/archipelago/docker/fips-ui",
              "dockerfile": "Dockerfile",
              "tag": "localhost/fips-ui:local"
            }
          },
          "resources": {
            "memory_limit": "128Mi"
          },
          "security": {
            "readonly_root": false,
            "network_policy": "host"
          },
          "ports": [],
          "volumes": [],
          "environment": [],
          "health_check": {
            "type": "http",
            "endpoint": "http://127.0.0.1:8336",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "gitea": {
      "version": "1.23",
      "manifest": {
        "app": {
          "id": "gitea",
          "name": "Gitea",
          "version": "1.23",
          "description": "Self-hosted Git service with built-in container registry, CI/CD, and package hosting.",
          "category": "development",
          "container": {
            "image": "docker.io/gitea/gitea:1.23",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "storage": "500Mi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi",
            "disk_limit": "500Mi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE",
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "no_new_privileges": false,
            "network_policy": "bridge"
          },
          "ports": [
            {
              "host": 3001,
              "container": 3000,
              "protocol": "tcp"
            },
            {
              "host": 2222,
              "container": 22,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/gitea/data",
              "target": "/data",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/gitea/config",
              "target": "/etc/gitea",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "GITEA__database__DB_TYPE=sqlite3",
            "GITEA__server__SSH_PORT=2222",
            "GITEA__server__SSH_LISTEN_PORT=22",
            "GITEA__server__LFS_START_SERVER=true",
            "GITEA__packages__ENABLED=true",
            "GITEA__repository__ENABLE_PUSH_CREATE_USER=true",
            "GITEA__repository__ENABLE_PUSH_CREATE_ORG=true"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:3000",
            "path": "/",
            "interval": "120s",
            "timeout": "30s",
            "retries": 5
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Gitea web interface",
              "type": "ui",
              "port": 3001,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/gitea.svg",
            "repo": "https://gitea.com",
            "tier": "optional",
            "launch": {
              "open_in_new_tab": true
            },
            "features": [
              "Git repositories with web UI",
              "Built-in container/package registry",
              "Issue tracking and pull requests",
              "CI/CD via Gitea Actions",
              "Lightweight SQLite deployment"
            ]
          },
          "nginx_proxy": {
            "listen": 3000,
            "proxy_pass": "http://127.0.0.1:3001",
            "extra_headers": [
              "proxy_hide_header X-Frame-Options",
              "proxy_hide_header Content-Security-Policy"
            ]
          }
        }
      }
    },
    "grafana": {
      "version": "10.2.0",
      "image": "146.59.87.168:3000/lfg2025/grafana:10.2.0",
      "manifest": {
        "app": {
          "id": "grafana",
          "name": "Grafana",
          "version": "10.2.0",
          "description": "Analytics and monitoring platform. Visualize metrics and create dashboards.",
          "container": {
            "image": "grafana/grafana:10.2.0",
            "image_signature": "cosign://...",
            "pull_policy": "if-not-present",
            "data_uid": "472:472"
          },
          "dependencies": [
            {
              "storage": "5Gi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "1Gi",
            "disk_limit": "5Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "grafana"
          },
          "ports": [
            {
              "host": 3000,
              "container": 3000,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/grafana",
              "target": "/var/lib/grafana",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "GF_SECURITY_ADMIN_USER=admin",
            "GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}",
            "GF_SERVER_ROOT_URL=http://localhost:3000",
            "GF_INSTALL_PLUGINS="
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:3000",
            "path": "/api/health",
            "interval": "30s",
            "timeout": "30s",
            "retries": 5
          },
          "metadata": {
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "homeassistant": {
      "version": "2024.1",
      "image": "146.59.87.168:3000/lfg2025/home-assistant:2024.1",
      "manifest": {
        "app": {
          "id": "homeassistant",
          "name": "Home Assistant",
          "version": "2024.1.0",
          "description": "Open source home automation platform. Control and monitor your smart home devices.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/home-assistant:2024.1",
            "pull_policy": "if-not-present",
            "network": "pasta"
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "512Mi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE",
              "NET_BIND_SERVICE",
              "NET_RAW"
            ],
            "readonly_root": false,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "home-assistant"
          },
          "ports": [
            {
              "host": 8123,
              "container": 8123,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/home-assistant",
              "target": "/config",
              "options": [
                "rw"
              ]
            }
          ],
          "devices": [],
          "environment": [
            "TZ=UTC"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:8123",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Home Assistant dashboard",
              "type": "ui",
              "port": 8123,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/homeassistant.png",
            "category": "home",
            "author": "Home Assistant",
            "repo": "https://github.com/home-assistant/core",
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "immich": {
      "version": "release",
      "image": "146.59.87.168:3000/lfg2025/immich-server:release",
      "images": {
        "immich_server": "146.59.87.168:3000/lfg2025/immich-server:release",
        "immich_postgres": "146.59.87.168:3000/lfg2025/immich-postgres:14-vectorchord0.4.3-pgvectors0.2.0",
        "immich_redis": "146.59.87.168:3000/lfg2025/redis:7.4.8"
      },
      "manifest": {
        "app": {
          "id": "immich",
          "name": "Immich",
          "version": "2.7.4",
          "description": "Self-hosted photo and video backup with mobile apps and search.",
          "container_name": "immich_server",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/immich-server:release",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "secret_env": [
              {
                "key": "DB_PASSWORD",
                "secret_file": "immich-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "immich-postgres"
            },
            {
              "app_id": "immich-redis"
            },
            {
              "storage": "200Gi"
            }
          ],
          "resources": {
            "memory_limit": "2Gi",
            "disk_limit": "200Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 2283,
              "container": 2283,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/immich",
              "target": "/usr/src/app/upload",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "DB_HOSTNAME=immich_postgres",
            "DB_USERNAME=postgres",
            "DB_DATABASE_NAME=immich",
            "REDIS_HOSTNAME=immich_redis",
            "UPLOAD_LOCATION=/usr/src/app/upload"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:2283",
            "path": "/api/server/ping",
            "interval": "30s",
            "timeout": "5s",
            "retries": 20
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Immich photo library",
              "type": "ui",
              "port": 2283,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "immich-postgres": {
      "version": "14-vectorchord0.4.3-pgvectors0.2.0",
      "manifest": {
        "app": {
          "id": "immich-postgres",
          "name": "Immich Postgres",
          "version": "14-vectorchord0.4.3-pgvectors0.2.0",
          "description": "Postgres (pgvecto.rs / vectorchord) backend for Immich.",
          "container_name": "immich_postgres",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/immich-postgres:14-vectorchord0.4.3-pgvectors0.2.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "data_uid": "100998:100998",
            "generated_secrets": [
              {
                "name": "immich-db-password",
                "kind": "hex32"
              }
            ],
            "secret_env": [
              {
                "key": "POSTGRES_PASSWORD",
                "secret_file": "immich-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "storage": "40Gi"
            }
          ],
          "resources": {
            "memory_limit": "2Gi",
            "disk_limit": "40Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "DAC_OVERRIDE",
              "FOWNER",
              "SETGID",
              "SETUID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/immich-db",
              "target": "/var/lib/postgresql/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "POSTGRES_USER=postgres",
            "POSTGRES_DB=immich"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:5432",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "immich-redis": {
      "version": "7-alpine",
      "manifest": {
        "app": {
          "id": "immich-redis",
          "name": "Immich Redis",
          "version": "7-alpine",
          "description": "Valkey (Redis-compatible) cache for Immich.",
          "container_name": "immich_redis",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/valkey:7-alpine",
            "pull_policy": "if-not-present",
            "network": "archy-net"
          },
          "dependencies": [],
          "resources": {
            "memory_limit": "128Mi"
          },
          "security": {
            "capabilities": [
              "SETGID",
              "SETUID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [],
          "environment": [],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:6379",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "indeedhub": {
      "version": "1.0.0",
      "image": "146.59.87.168:3000/lfg2025/indeedhub:1.0.0",
      "images": {
        "indeedhub": "146.59.87.168:3000/lfg2025/indeedhub:1.0.0",
        "indeedhub-api": "146.59.87.168:3000/lfg2025/indeedhub-api:1.0.0",
        "indeedhub-ffmpeg": "146.59.87.168:3000/lfg2025/indeedhub-ffmpeg:1.0.0"
      },
      "manifest": {
        "app": {
          "id": "indeedhub",
          "name": "IndeeHub",
          "version": "1.0.0",
          "description": "Bitcoin documentary streaming platform featuring God Bless Bitcoin and other educational content about Bitcoin, sovereignty, and decentralized technology. Sign in with your Nostr identity.",
          "category": "community",
          "container_name": "indeedhub",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/indeedhub:1.0.0",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net"
          },
          "dependencies": [
            {
              "app_id": "indeedhub-api"
            },
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "512Mi",
            "disk_limit": "1Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "DAC_OVERRIDE",
              "SETGID",
              "SETUID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 7778,
              "container": 7777,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "tmpfs",
              "target": "/run",
              "options": [
                "rw",
                "nosuid",
                "nodev",
                "size=16m"
              ]
            },
            {
              "type": "tmpfs",
              "target": "/var/cache/nginx",
              "options": [
                "rw",
                "nosuid",
                "nodev",
                "size=32m"
              ]
            }
          ],
          "environment": [],
          "hooks": {
            "post_install": [
              {
                "exec": [
                  "sed",
                  "-i",
                  "/X-Frame-Options/d",
                  "/etc/nginx/conf.d/default.conf"
                ]
              },
              {
                "copy_from_host": {
                  "src": "web-ui/nostr-provider.js",
                  "dest": "/usr/share/nginx/html/nostr-provider.js"
                }
              },
              {
                "exec": [
                  "sh",
                  "-c",
                  "grep -q nostr-provider /etc/nginx/conf.d/default.conf || sed -i 's#</head>#<script src=\"/nostr-provider.js\"></script></head>#' /etc/nginx/conf.d/default.conf"
                ]
              },
              {
                "exec": [
                  "nginx",
                  "-s",
                  "reload"
                ]
              }
            ]
          },
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:7777",
            "interval": "30s",
            "timeout": "5s",
            "retries": 5,
            "start_period": "30s"
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Stream Bitcoin documentaries with Nostr identity",
              "type": "ui",
              "port": 7778,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "author": "Indeehub Team",
            "icon": "/assets/img/app-icons/indeedhub.png",
            "website": "https://indeedhub.com",
            "repo": "https://github.com/indeedhub/indeedhub",
            "license": "MIT",
            "tags": [
              "bitcoin",
              "documentary",
              "streaming",
              "media",
              "education",
              "nostr"
            ]
          }
        }
      }
    },
    "indeedhub-api": {
      "version": "1.0.0",
      "manifest": {
        "app": {
          "id": "indeedhub-api",
          "name": "IndeedHub API",
          "version": "1.0.0",
          "description": "IndeedHub backend API (Nostr auth, media, payments).",
          "category": "community",
          "container_name": "indeedhub-api",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/indeedhub-api:1.0.0",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net",
            "network_aliases": [
              "api"
            ],
            "generated_secrets": [
              {
                "name": "indeedhub-jwt",
                "kind": "hex32"
              }
            ],
            "secret_env": [
              {
                "key": "DATABASE_PASSWORD",
                "secret_file": "indeedhub-db-password"
              },
              {
                "key": "AWS_SECRET_KEY",
                "secret_file": "indeedhub-minio-password"
              },
              {
                "key": "NOSTR_JWT_SECRET",
                "secret_file": "indeedhub-jwt"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "indeedhub-postgres"
            },
            {
              "app_id": "indeedhub-redis"
            },
            {
              "app_id": "indeedhub-minio"
            }
          ],
          "resources": {
            "memory_limit": "2Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [],
          "environment": [
            "PORT=4000",
            "DATABASE_HOST=postgres",
            "DATABASE_PORT=5432",
            "DATABASE_USER=indeedhub",
            "DATABASE_NAME=indeedhub",
            "QUEUE_HOST=redis",
            "QUEUE_PORT=6379",
            "S3_ENDPOINT=http://minio:9000",
            "AWS_REGION=us-east-1",
            "AWS_ACCESS_KEY=indeeadmin",
            "S3_PUBLIC_BUCKET_NAME=indeedhub-public",
            "S3_PRIVATE_BUCKET_NAME=indeedhub-private",
            "S3_PUBLIC_BUCKET_URL=/storage",
            "NOSTR_JWT_EXPIRES_IN=7d",
            "AES_MASTER_SECRET=0123456789abcdef0123456789abcdef",
            "ENVIRONMENT=production"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:4000",
            "interval": "30s",
            "timeout": "5s",
            "retries": 10
          }
        }
      }
    },
    "indeedhub-ffmpeg": {
      "version": "1.0.0",
      "manifest": {
        "app": {
          "id": "indeedhub-ffmpeg",
          "name": "IndeedHub FFmpeg Worker",
          "version": "1.0.0",
          "description": "IndeedHub background media transcoding worker.",
          "category": "community",
          "container_name": "indeedhub-ffmpeg",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/indeedhub-ffmpeg:1.0.0",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net",
            "secret_env": [
              {
                "key": "DATABASE_PASSWORD",
                "secret_file": "indeedhub-db-password"
              },
              {
                "key": "AWS_SECRET_KEY",
                "secret_file": "indeedhub-minio-password"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "indeedhub-api"
            }
          ],
          "resources": {
            "memory_limit": "4Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [],
          "environment": [
            "DATABASE_HOST=postgres",
            "DATABASE_PORT=5432",
            "DATABASE_USER=indeedhub",
            "DATABASE_NAME=indeedhub",
            "QUEUE_HOST=redis",
            "QUEUE_PORT=6379",
            "S3_ENDPOINT=http://minio:9000",
            "AWS_REGION=us-east-1",
            "AWS_ACCESS_KEY=indeeadmin",
            "S3_PUBLIC_BUCKET_NAME=indeedhub-public",
            "S3_PRIVATE_BUCKET_NAME=indeedhub-private",
            "ENVIRONMENT=production",
            "AES_MASTER_SECRET=0123456789abcdef0123456789abcdef"
          ]
        }
      }
    },
    "indeedhub-minio": {
      "version": "RELEASE.2024-11-07T00-52-20Z",
      "manifest": {
        "app": {
          "id": "indeedhub-minio",
          "name": "IndeedHub MinIO",
          "version": "RELEASE.2024-11-07T00-52-20Z",
          "description": "MinIO S3-compatible object storage for IndeedHub media.",
          "category": "community",
          "container_name": "indeedhub-minio",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/minio:RELEASE.2024-11-07T00-52-20Z",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net",
            "network_aliases": [
              "minio"
            ],
            "custom_args": [
              "server",
              "/data"
            ],
            "generated_secrets": [
              {
                "name": "indeedhub-minio-password",
                "kind": "hex32"
              }
            ],
            "secret_env": [
              {
                "key": "MINIO_ROOT_PASSWORD",
                "secret_file": "indeedhub-minio-password"
              }
            ]
          },
          "dependencies": [
            {
              "storage": "50Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi",
            "disk_limit": "50Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "volume",
              "source": "indeedhub-minio-data",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "MINIO_ROOT_USER=indeeadmin"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:9000",
            "path": "/minio/health/live",
            "interval": "30s",
            "timeout": "5s",
            "retries": 5
          }
        }
      }
    },
    "indeedhub-postgres": {
      "version": "16.13-alpine",
      "manifest": {
        "app": {
          "id": "indeedhub-postgres",
          "name": "IndeedHub Postgres",
          "version": "16.13-alpine",
          "description": "Postgres database backend for IndeedHub.",
          "category": "community",
          "container_name": "indeedhub-postgres",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/postgres:16.13-alpine",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net",
            "network_aliases": [
              "postgres"
            ],
            "generated_secrets": [
              {
                "name": "indeedhub-db-password",
                "kind": "hex32"
              }
            ],
            "secret_env": [
              {
                "key": "POSTGRES_PASSWORD",
                "secret_file": "indeedhub-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "DAC_OVERRIDE",
              "FOWNER",
              "SETGID",
              "SETUID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "volume",
              "source": "indeedhub-postgres-data",
              "target": "/var/lib/postgresql/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "POSTGRES_USER=indeedhub",
            "POSTGRES_DB=indeedhub"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:5432",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "indeedhub-redis": {
      "version": "7.4.8-alpine",
      "manifest": {
        "app": {
          "id": "indeedhub-redis",
          "name": "IndeedHub Redis",
          "version": "7.4.8-alpine",
          "description": "Redis queue/cache backend for IndeedHub.",
          "category": "community",
          "container_name": "indeedhub-redis",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/redis:7.4.8-alpine",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net",
            "network_aliases": [
              "redis"
            ]
          },
          "dependencies": [
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi"
          },
          "security": {
            "capabilities": [
              "SETGID",
              "SETUID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "volume",
              "source": "indeedhub-redis-data",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:6379",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "indeedhub-relay": {
      "version": "0.9.0",
      "manifest": {
        "app": {
          "id": "indeedhub-relay",
          "name": "IndeedHub Nostr Relay",
          "version": "0.9.0",
          "description": "nostr-rs-relay backing IndeedHub's Nostr identity + comments.",
          "category": "community",
          "container_name": "indeedhub-relay",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/nostr-rs-relay:0.9.0",
            "pull_policy": "if-not-present",
            "network": "indeedhub-net",
            "network_aliases": [
              "relay"
            ]
          },
          "dependencies": [
            {
              "storage": "2Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi",
            "disk_limit": "2Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [
            {
              "type": "volume",
              "source": "indeedhub-relay-data",
              "target": "/usr/src/app/db",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:8080",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "jellyfin": {
      "version": "10.8.13",
      "image": "146.59.87.168:3000/lfg2025/jellyfin:10.8.13",
      "manifest": {
        "app": {
          "id": "jellyfin",
          "name": "Jellyfin",
          "version": "10.8.13",
          "description": "Free media server. Stream movies, music, and photos.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/jellyfin:10.8.13",
            "pull_policy": "if-not-present",
            "network": "pasta"
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8096,
              "container": 8096,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/jellyfin/config",
              "target": "/config",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/jellyfin/cache",
              "target": "/cache",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:8096",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Jellyfin media dashboard",
              "type": "ui",
              "port": 8096,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/jellyfin.webp",
            "category": "data",
            "author": "Jellyfin",
            "repo": "https://github.com/jellyfin/jellyfin"
          }
        }
      }
    },
    "lightning-stack": {
      "version": "0.12.0",
      "manifest": {
        "app": {
          "id": "lightning-stack",
          "name": "Lightning Stack",
          "version": "0.12.0",
          "description": "Complete Lightning Network implementation. Includes LND, CLN, and management tools.",
          "container": {
            "image": "lightninglabs/lightning-stack:v0.12.0",
            "image_signature": "cosign://...",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=24.0"
            },
            {
              "storage": "50Gi"
            }
          ],
          "resources": {
            "cpu_limit": 4,
            "memory_limit": "4Gi",
            "disk_limit": "50Gi"
          },
          "security": {
            "capabilities": [
              "NET_BIND_SERVICE"
            ],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "lightning-stack"
          },
          "ports": [
            {
              "host": 9737,
              "container": 9735,
              "protocol": "tcp"
            },
            {
              "host": 10010,
              "container": 10009,
              "protocol": "tcp"
            },
            {
              "host": 8087,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/lightning-stack",
              "target": "/root/.lightning",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "BITCOIND_HOST=bitcoin-core",
            "BITCOIND_RPCUSER=${BITCOIN_RPC_USER}",
            "BITCOIND_RPCPASS=${BITCOIN_RPC_PASSWORD}",
            "NETWORK=mainnet"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8087",
            "path": "/v1/getinfo",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true
          },
          "lightning_integration": {
            "channel_management": true,
            "payment_routing": true
          }
        }
      }
    },
    "lnd": {
      "version": "v0.18.4-beta",
      "image": "146.59.87.168:3000/lfg2025/lnd:v0.18.4-beta",
      "manifest": {
        "app": {
          "id": "lnd",
          "name": "LND",
          "version": "0.18.4",
          "description": "Lightning Network implementation by Lightning Labs. Enables instant, low-cost Bitcoin payments.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/lnd:v0.18.4-beta",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "secret_env": [
              {
                "key": "BITCOIND_RPCPASS",
                "secret_file": "bitcoin-rpc-password"
              }
            ],
            "data_uid": "100000:100000"
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=26.0"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "1Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE",
              "NET_RAW"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 9735,
              "container": 9735,
              "protocol": "tcp"
            },
            {
              "host": 10009,
              "container": 10009,
              "protocol": "tcp"
            },
            {
              "host": 18080,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/lnd",
              "target": "/root/.lnd",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "BITCOIND_HOST=bitcoin-knots",
            "BITCOIND_RPCUSER=archipelago",
            "NETWORK=mainnet"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:10009",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "admin",
            "sync_required": true
          },
          "lightning_integration": {
            "channel_management": true,
            "payment_routing": true
          }
        }
      }
    },
    "lnd-ui": {
      "version": "latest",
      "image": "146.59.87.168:3000/lfg2025/lnd-ui:latest",
      "manifest": {
        "app": {
          "id": "lnd-ui",
          "name": "LND UI",
          "version": "1.0.0",
          "description": "Archipelago-native HTTP frontend for LND. Runs nginx inside a\ncontainer and serves static assets. LND connection info is fetched\nvia an absolute URL that the host nginx routes to the archipelago\nbackend on 127.0.0.1:5678, so no upstream auth is baked in.\n",
          "container": {
            "build": {
              "context": "/opt/archipelago/docker/lnd-ui",
              "dockerfile": "Dockerfile",
              "tag": "localhost/lnd-ui:local"
            }
          },
          "dependencies": [
            {
              "app_id": "lnd"
            }
          ],
          "resources": {
            "memory_limit": "64Mi"
          },
          "security": {
            "readonly_root": false,
            "network_policy": "bridge"
          },
          "ports": [
            {
              "host": 18083,
              "container": 80,
              "protocol": "tcp"
            }
          ],
          "volumes": [],
          "environment": [],
          "health_check": {
            "type": "http",
            "endpoint": "http://127.0.0.1:18083",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "mempool": {
      "version": "v3.0.1",
      "image": "146.59.87.168:3000/lfg2025/mempool-frontend:v3.0.1",
      "images": {
        "archy-mempool-web": "146.59.87.168:3000/lfg2025/mempool-frontend:v3.0.1",
        "mempool-api": "146.59.87.168:3000/lfg2025/mempool-backend:v3.0.0",
        "archy-mempool-db": "146.59.87.168:3000/lfg2025/mariadb:11.4.10"
      },
      "manifest": {
        "app": {
          "id": "mempool",
          "name": "Mempool Explorer",
          "version": "3.0.0",
          "description": "Bitcoin mempool and blockchain explorer. Real-time transaction and block visualization.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/mempool-frontend:v3.0.1",
            "image_signature": "cosign://...",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "app_id": "bitcoin-core",
              "version": ">=24.0"
            },
            {
              "storage": "20Gi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "2Gi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "mempool"
          },
          "ports": [
            {
              "host": 4080,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/mempool",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "MEMPOOL_BACKEND=electrum",
            "MEMPOOL_BITCOIN_HOST=bitcoin-core",
            "MEMPOOL_BITCOIN_PORT=8332",
            "MEMPOOL_BITCOIN_USER=${BITCOIN_RPC_USER}",
            "MEMPOOL_BITCOIN_PASSWORD=${BITCOIN_RPC_PASSWORD}"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:4080",
            "path": "/api/health",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "read-only",
            "sync_required": true
          }
        }
      }
    },
    "mempool-api": {
      "version": "3.0.0",
      "manifest": {
        "app": {
          "id": "mempool-api",
          "name": "Mempool API",
          "version": "3.0.0",
          "description": "Backend API for mempool explorer.",
          "container": {
            "image": "git.tx1138.com/lfg2025/mempool-backend:v3.0.0",
            "pull_policy": "if-not-present",
            "network": "archy-net",
            "derived_env": [
              {
                "key": "CORE_RPC_HOST",
                "template": "{{BITCOIN_HOST}}"
              }
            ],
            "secret_env": [
              {
                "key": "CORE_RPC_PASSWORD",
                "secret_file": "bitcoin-rpc-password"
              },
              {
                "key": "DATABASE_PASSWORD",
                "secret_file": "mempool-db-password"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "bitcoin-knots",
              "version": ">=26.0"
            },
            {
              "app_id": "electrumx",
              "version": ">=1.18.0"
            },
            {
              "app_id": "archy-mempool-db",
              "version": ">=11.4.10"
            }
          ],
          "resources": {
            "memory_limit": "2Gi",
            "disk_limit": "20Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8999,
              "container": 8999,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/mempool",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "MEMPOOL_BACKEND=electrum",
            "ELECTRUM_HOST=electrumx",
            "ELECTRUM_PORT=50001",
            "ELECTRUM_TLS_ENABLED=false",
            "CORE_RPC_PORT=8332",
            "CORE_RPC_USERNAME=archipelago",
            "DATABASE_ENABLED=true",
            "DATABASE_HOST=archy-mempool-db",
            "DATABASE_DATABASE=mempool",
            "DATABASE_USERNAME=mempool"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8999",
            "path": "/api/v1/backend-info",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "bitcoin_integration": {
            "rpc_access": "read-only",
            "sync_required": true,
            "pruning_support": false
          }
        }
      }
    },
    "morphos-server": {
      "version": "1.0.0",
      "manifest": {
        "app": {
          "id": "morphos-server",
          "name": "MorphOS Server",
          "version": "1.0.0",
          "description": "MorphOS server platform. Decentralized application server.",
          "container": {
            "image": "archipelago/morphos-server:1.0.0",
            "image_signature": "cosign://...",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "storage": "5Gi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "2Gi",
            "disk_limit": "5Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "morphos-server"
          },
          "ports": [
            {
              "host": 8086,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/morphos-server",
              "target": "/app/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "MORPHOS_ENV=production",
            "MORPHOS_DATA_DIR=/app/data"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8086",
            "path": "/health",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          }
        }
      }
    },
    "netbird": {
      "version": "2.38.0",
      "manifest": {
        "app": {
          "id": "netbird",
          "name": "NetBird",
          "version": "2.38.0",
          "description": "Self-hosted WireGuard mesh VPN control plane with dashboard, embedded identity provider, management API, signal, relay, and STUN. The user-facing entry point \u2014 a TLS proxy in front of the dashboard + server.",
          "category": "networking",
          "container_name": "netbird",
          "container": {
            "image": "docker.io/library/nginx:1.27-alpine",
            "pull_policy": "if-not-present",
            "network": "netbird-net",
            "generated_certs": [
              {
                "crt": "/var/lib/archipelago/netbird/tls.crt",
                "key": "/var/lib/archipelago/netbird/tls.key"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "netbird-server"
            },
            {
              "app_id": "netbird-dashboard"
            },
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "DAC_OVERRIDE",
              "SETGID",
              "SETUID",
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8087,
              "container": 443,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/netbird/nginx.conf",
              "target": "/etc/nginx/conf.d/default.conf",
              "options": [
                "ro"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/netbird/tls.crt",
              "target": "/etc/nginx/tls.crt",
              "options": [
                "ro"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/netbird/tls.key",
              "target": "/etc/nginx/tls.key",
              "options": [
                "ro"
              ]
            }
          ],
          "environment": [],
          "files": [
            {
              "path": "/var/lib/archipelago/netbird/nginx.conf",
              "overwrite": true,
              "content": "server {\n    listen 443 ssl;\n    server_name _;\n\n    # netbird's dashboard needs a secure context (window.crypto.subtle for\n    # OIDC PKCE), so the proxy terminates TLS with a self-signed cert (#15).\n    ssl_certificate /etc/nginx/tls.crt;\n    ssl_certificate_key /etc/nginx/tls.key;\n\n    # Rootless Podman can hand a container a new IP across restarts/reboots.\n    # nginx resolves a literal upstream name ONCE at startup and caches it,\n    # so after the IP moves every request 502s with \"host unreachable\"\n    # (issue #15, observed live on .198: nginx pinned to a dead\n    # netbird-dashboard IP). Fix: point `resolver` at the netbird-net\n    # gateway (Podman's aardvark DNS) and use VARIABLE upstreams, which\n    # forces nginx to re-resolve the container names at request time.\n    resolver {{NETWORK_GATEWAY}} valid=10s ipv6=off;\n\n    proxy_set_header Host $host;\n    proxy_set_header X-Real-IP $remote_addr;\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n    proxy_set_header X-Forwarded-Proto $scheme;\n    proxy_http_version 1.1;\n\n    location ~ ^/(relay|ws-proxy/) {\n        set $nb_server netbird-server;\n        proxy_pass http://$nb_server:80;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n        proxy_read_timeout 1d;\n    }\n\n    location ~ ^/(api|oauth2)(/|$) {\n        # The dashboard is a SPA whose API/OIDC base URL is baked at build\n        # time to one host:port. A single box is reached via several\n        # addresses, so those fetches are cross-origin and the browser\n        # blocks them with no Access-Control-Allow-Origin (#15, live on\n        # .198). Reflect the caller's Origin and answer the CORS preflight.\n        if ($request_method = OPTIONS) {\n            add_header Access-Control-Allow-Origin $http_origin always;\n            add_header Access-Control-Allow-Credentials true always;\n            add_header Access-Control-Allow-Methods \"GET, POST, PUT, PATCH, DELETE, OPTIONS\" always;\n            add_header Access-Control-Allow-Headers \"Authorization, Content-Type, Accept\" always;\n            add_header Access-Control-Max-Age 86400 always;\n            add_header Content-Length 0;\n            return 204;\n        }\n        add_header Access-Control-Allow-Origin $http_origin always;\n        add_header Access-Control-Allow-Credentials true always;\n        add_header Access-Control-Allow-Methods \"GET, POST, PUT, PATCH, DELETE, OPTIONS\" always;\n        add_header Access-Control-Allow-Headers \"Authorization, Content-Type, Accept\" always;\n        set $nb_server netbird-server;\n        proxy_pass http://$nb_server:80;\n    }\n\n    location ~ ^/(signalexchange\\.SignalExchange|management\\.ManagementService|management\\.ProxyService)/ {\n        set $nb_server netbird-server;\n        grpc_pass grpc://$nb_server:80;\n        grpc_read_timeout 1d;\n        grpc_send_timeout 1d;\n    }\n\n    # OIDC callback routes are client-side SPA routes with NO prebuilt page\n    # in the dashboard bundle, so proxying them straight through 404s \u2014\n    # which crashes the dashboard's auth init and shows \"Unauthenticated\"\n    # with dead buttons (#15, live on .198: /nb-auth + /nb-silent-auth\n    # returned 404). Serve index.html at these paths (URL unchanged) so\n    # react-oidc boots and completes the login / silent-SSO.\n    location ~ ^/(nb-auth|nb-silent-auth) {\n        set $nb_dashboard netbird-dashboard;\n        rewrite ^.*$ /index.html break;\n        proxy_pass http://$nb_dashboard:80;\n    }\n\n    location / {\n        set $nb_dashboard netbird-dashboard;\n        proxy_pass http://$nb_dashboard:80;\n    }\n}\n"
            }
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:443",
            "interval": "30s",
            "timeout": "5s",
            "retries": 5,
            "start_period": "20s"
          },
          "interfaces": {
            "main": {
              "name": "Dashboard",
              "description": "Manage your self-hosted NetBird mesh VPN",
              "type": "ui",
              "port": 8087,
              "protocol": "https",
              "path": "/"
            }
          },
          "metadata": {
            "author": "NetBird",
            "icon": "/assets/img/app-icons/netbird.svg",
            "website": "https://netbird.io",
            "repo": "https://github.com/netbirdio/netbird",
            "license": "BSD-3-Clause",
            "tags": [
              "networking",
              "vpn",
              "wireguard",
              "mesh"
            ]
          }
        }
      }
    },
    "netbird-dashboard": {
      "version": "2.38.0",
      "manifest": {
        "app": {
          "id": "netbird-dashboard",
          "name": "NetBird Dashboard",
          "version": "2.38.0",
          "description": "NetBird management dashboard (SPA). Internal stack member served through the netbird proxy.",
          "category": "networking",
          "container_name": "netbird-dashboard",
          "container": {
            "image": "docker.io/netbirdio/dashboard:v2.38.0",
            "pull_policy": "if-not-present",
            "network": "netbird-net",
            "network_aliases": [
              "netbird-dashboard"
            ],
            "derived_env": [
              {
                "key": "NETBIRD_MGMT_API_ENDPOINT",
                "template": "https://{{HOST_IP}}:8087"
              },
              {
                "key": "NETBIRD_MGMT_GRPC_API_ENDPOINT",
                "template": "https://{{HOST_IP}}:8087"
              },
              {
                "key": "AUTH_AUTHORITY",
                "template": "https://{{HOST_IP}}:8087/oauth2"
              }
            ]
          },
          "dependencies": [
            {
              "app_id": "netbird-server"
            }
          ],
          "resources": {
            "memory_limit": "256Mi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "DAC_OVERRIDE",
              "SETGID",
              "SETUID",
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [],
          "volumes": [],
          "environment": [
            "AUTH_AUDIENCE=netbird-dashboard",
            "AUTH_CLIENT_ID=netbird-dashboard",
            "AUTH_CLIENT_SECRET=",
            "USE_AUTH0=false",
            "AUTH_SUPPORTED_SCOPES=openid profile email groups",
            "AUTH_REDIRECT_URI=/nb-auth",
            "AUTH_SILENT_REDIRECT_URI=/nb-silent-auth",
            "NETBIRD_TOKEN_SOURCE=idToken",
            "NGINX_SSL_PORT=443",
            "LETSENCRYPT_DOMAIN=none"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:80",
            "interval": "30s",
            "timeout": "5s",
            "retries": 5,
            "start_period": "20s"
          },
          "metadata": {
            "author": "NetBird",
            "icon": "/assets/img/app-icons/netbird.svg",
            "website": "https://netbird.io",
            "repo": "https://github.com/netbirdio/dashboard",
            "license": "BSD-3-Clause",
            "tags": [
              "networking",
              "vpn",
              "dashboard"
            ]
          }
        }
      }
    },
    "netbird-server": {
      "version": "0.71.2",
      "manifest": {
        "app": {
          "id": "netbird-server",
          "name": "NetBird Server",
          "version": "0.71.2",
          "description": "NetBird combined management / signal / relay server with an embedded identity provider and STUN. Backend for the self-hosted NetBird mesh VPN.",
          "category": "networking",
          "container_name": "netbird-server",
          "container": {
            "image": "docker.io/netbirdio/netbird-server:0.71.2",
            "pull_policy": "if-not-present",
            "network": "netbird-net",
            "network_aliases": [
              "netbird-server"
            ],
            "generated_secrets": [
              {
                "name": "netbird-relay-auth-secret",
                "kind": "base64"
              },
              {
                "name": "netbird-store-encryption-key",
                "kind": "base64"
              }
            ],
            "custom_args": [
              "--config",
              "/etc/netbird/config.yaml"
            ]
          },
          "dependencies": [
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi"
          },
          "security": {
            "capabilities": [
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8086,
              "container": 80,
              "protocol": "tcp"
            },
            {
              "host": 3478,
              "container": 3478,
              "protocol": "udp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/netbird/data",
              "target": "/var/lib/netbird",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/netbird/config.yaml",
              "target": "/etc/netbird/config.yaml",
              "options": [
                "ro"
              ]
            }
          ],
          "environment": [],
          "files": [
            {
              "path": "/var/lib/archipelago/netbird/config.yaml",
              "overwrite": true,
              "content": "server:\n  listenAddress: \":80\"\n  exposedAddress: \"https://{{HOST_IP}}:8087\"\n  stunPorts:\n    - 3478\n  metricsPort: 9090\n  healthcheckAddress: \":9000\"\n  logLevel: \"info\"\n  logFile: \"console\"\n  authSecret: \"{{secret:netbird-relay-auth-secret}}\"\n  dataDir: \"/var/lib/netbird\"\n  auth:\n    issuer: \"https://{{HOST_IP}}:8087/oauth2\"\n    localAuthDisabled: false\n    signKeyRefreshEnabled: false\n    dashboardRedirectURIs:\n      - \"https://{{HOST_IP}}:8087/nb-auth\"\n      - \"https://{{HOST_IP}}:8087/nb-silent-auth\"\n    dashboardPostLogoutRedirectURIs:\n      - \"https://{{HOST_IP}}:8087/\"\n    cliRedirectURIs:\n      - \"http://localhost:53000/\"\n  store:\n    engine: \"sqlite\"\n    encryptionKey: \"{{secret:netbird-store-encryption-key}}\"\n"
            }
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:80",
            "interval": "30s",
            "timeout": "5s",
            "retries": 10,
            "start_period": "30s"
          },
          "metadata": {
            "author": "NetBird",
            "icon": "/assets/img/app-icons/netbird.svg",
            "website": "https://netbird.io",
            "repo": "https://github.com/netbirdio/netbird",
            "license": "BSD-3-Clause",
            "tags": [
              "networking",
              "vpn",
              "wireguard",
              "mesh"
            ]
          }
        }
      }
    },
    "nextcloud": {
      "version": "29",
      "image": "146.59.87.168:3000/lfg2025/nextcloud:29",
      "manifest": {
        "app": {
          "id": "nextcloud",
          "name": "Nextcloud",
          "version": "29",
          "description": "Your own private cloud. File sync, calendars, contacts.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/nextcloud:29",
            "pull_policy": "if-not-present",
            "network": "pasta"
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE",
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8085,
              "container": 80,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/nextcloud",
              "target": "/var/www/html",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:80",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Nextcloud file and collaboration dashboard",
              "type": "ui",
              "port": 8085,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/nextcloud.webp",
            "category": "data",
            "author": "Nextcloud",
            "repo": "https://github.com/nextcloud/server",
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "nginx-proxy-manager": {
      "version": "latest",
      "image": "146.59.87.168:3000/lfg2025/nginx-proxy-manager:latest"
    },
    "nostr-rs-relay": {
      "version": "0.9.0",
      "image": "146.59.87.168:3000/lfg2025/nostr-rs-relay:0.9.0",
      "manifest": {
        "app": {
          "id": "nostr-rs-relay",
          "name": "Nostr Relay (Rust)",
          "version": "0.8.0",
          "description": "High-performance Nostr relay written in Rust. Host your own decentralized social media relay and earn networking profits.",
          "container": {
            "image": "scsibug/nostr-rs-relay:0.8.9",
            "image_signature": "cosign://...",
            "pull_policy": "verify-signature",
            "data_uid": "1000:1000"
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "1Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "nostr-relay"
          },
          "ports": [
            {
              "host": 18081,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/nostr-relay",
              "target": "/usr/src/app/db",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "RELAY_NAME=Archipelago Nostr Relay",
            "RELAY_DESCRIPTION=Self-hosted Nostr relay on Archipelago",
            "MAX_EVENTS=1000000",
            "MAX_SUBSCRIPTIONS=100"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8080",
            "path": "/",
            "interval": "30s",
            "timeout": "30s",
            "retries": 5
          },
          "nostr_integration": {
            "relay_type": "public",
            "monetization_enabled": true,
            "event_storage": "sqlite"
          }
        }
      }
    },
    "nostr-vpn": {
      "version": "v0.3.7",
      "image": "146.59.87.168:3000/lfg2025/nostr-vpn:v0.3.7"
    },
    "ollama": {
      "version": "latest",
      "image": "146.59.87.168:3000/lfg2025/ollama:latest"
    },
    "penpot": {
      "version": "2.4",
      "image": "146.59.87.168:3000/lfg2025/penpot-frontend:2.4",
      "images": {
        "penpot-frontend": "146.59.87.168:3000/lfg2025/penpot-frontend:2.4",
        "penpot-backend": "146.59.87.168:3000/lfg2025/penpot-backend:2.4",
        "penpot-exporter": "146.59.87.168:3000/lfg2025/penpot-exporter:2.4",
        "penpot-postgres": "146.59.87.168:3000/lfg2025/postgres:15",
        "penpot-valkey": "146.59.87.168:3000/lfg2025/valkey:8.1"
      }
    },
    "photoprism": {
      "version": "240915",
      "image": "146.59.87.168:3000/lfg2025/photoprism:240915",
      "manifest": {
        "app": {
          "id": "photoprism",
          "name": "PhotoPrism",
          "version": "240915",
          "description": "AI-powered photo management with facial recognition.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/photoprism:240915",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "storage": "10Gi"
            }
          ],
          "resources": {
            "memory_limit": "1Gi",
            "disk_limit": "10Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "SETUID",
              "SETGID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 2342,
              "container": 2342,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/photoprism",
              "target": "/photoprism/storage",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "PHOTOPRISM_ADMIN_PASSWORD=archipelago",
            "PHOTOPRISM_DEFAULT_LOCALE=en"
          ],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:2342",
            "interval": "60s",
            "timeout": "5s",
            "retries": 3
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "PhotoPrism photo library",
              "type": "ui",
              "port": 2342,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/photoprism.svg",
            "category": "data",
            "author": "PhotoPrism",
            "repo": "https://github.com/photoprism/photoprism",
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "portainer": {
      "version": "2.19.4",
      "image": "146.59.87.168:3000/lfg2025/portainer:2.19.4",
      "manifest": {
        "app": {
          "id": "portainer",
          "name": "Portainer",
          "version": "2.19.4",
          "description": "Container management web UI for the local Podman socket.",
          "category": "development",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/portainer:2.19.4",
            "pull_policy": "if-not-present",
            "data_uid": "1000:1000"
          },
          "dependencies": [
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi",
            "disk_limit": "1Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "SETUID",
              "SETGID",
              "DAC_OVERRIDE"
            ],
            "readonly_root": false,
            "no_new_privileges": true,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 9000,
              "container": 9000,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/portainer",
              "target": "/data",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/lib/archipelago/portainer/compose",
              "target": "/data/compose",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/run/user/1000/podman/podman.sock",
              "target": "/var/run/docker.sock",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Portainer web interface",
              "type": "ui",
              "port": 9000,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/portainer.webp",
            "tier": "optional",
            "launch": {
              "open_in_new_tab": true
            },
            "features": [
              "Container management dashboard",
              "Local Podman socket access",
              "Compose stack storage"
            ]
          }
        }
      }
    },
    "router": {
      "version": "1.0.0",
      "manifest": {
        "app": {
          "id": "router",
          "name": "Mesh Router",
          "version": "1.0.0",
          "description": "Mesh routing and local network management. Provides device discovery, routing, and network topology visualization.",
          "container": {
            "image": "archipelago/router:1.0.0",
            "image_signature": "cosign://...",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "storage": "500Mi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "512Mi",
            "disk_limit": "500Mi"
          },
          "security": {
            "capabilities": [
              "NET_ADMIN",
              "NET_RAW"
            ],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "host",
            "apparmor_profile": "router"
          },
          "ports": [
            {
              "host": 8084,
              "container": 8080,
              "protocol": "tcp"
            },
            {
              "host": 5353,
              "container": 5353,
              "protocol": "udp"
            },
            {
              "host": 1900,
              "container": 1900,
              "protocol": "udp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/router",
              "target": "/app/data",
              "options": [
                "rw"
              ]
            },
            {
              "type": "bind",
              "source": "/var/run/dbus",
              "target": "/var/run/dbus",
              "options": [
                "ro"
              ]
            }
          ],
          "environment": [
            "NETWORK_INTERFACE=eth0",
            "MESH_ENABLED=true",
            "DEVICE_DISCOVERY=true"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8084",
            "path": "/health",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "networking": {
            "mesh_enabled": true,
            "local_network_access": true,
            "device_discovery": true,
            "routing_protocols": [
              "olsr",
              "babel"
            ]
          }
        }
      }
    },
    "routstr": {
      "version": "v0.4.3",
      "image": "146.59.87.168:3000/lfg2025/routstr:v0.4.3"
    },
    "searxng": {
      "version": "latest",
      "image": "146.59.87.168:3000/lfg2025/searxng:latest",
      "manifest": {
        "app": {
          "id": "searxng",
          "name": "SearXNG",
          "version": "1.0.0",
          "description": "Privacy-respecting metasearch engine. Search the web without tracking.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/searxng:latest",
            "pull_policy": "if-not-present"
          },
          "dependencies": [
            {
              "storage": "2Gi"
            }
          ],
          "resources": {
            "cpu_limit": 2,
            "memory_limit": "1Gi",
            "disk_limit": "2Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "searxng"
          },
          "ports": [
            {
              "host": 8888,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/searxng",
              "target": "/etc/searxng",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "SEARXNG_HOSTNAME=localhost",
            "SEARXNG_BIND_ADDRESS=0.0.0.0:8080"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8080",
            "path": "/",
            "interval": "30s",
            "timeout": "30s",
            "retries": 5
          }
        }
      }
    },
    "strfry": {
      "version": "0.9.0",
      "manifest": {
        "app": {
          "id": "strfry",
          "name": "Strfry Nostr Relay",
          "version": "0.9.0",
          "description": "Lightweight Nostr relay written in C++. Alternative to nostr-rs-relay with lower resource usage.",
          "container": {
            "image": "dockurr/strfry:1.0.4",
            "image_signature": "cosign://...",
            "pull_policy": "verify-signature"
          },
          "dependencies": [
            {
              "storage": "5Gi"
            }
          ],
          "resources": {
            "cpu_limit": 1,
            "memory_limit": "512Mi",
            "disk_limit": "5Gi"
          },
          "security": {
            "capabilities": [],
            "readonly_root": true,
            "no_new_privileges": true,
            "user": 1000,
            "seccomp_profile": "default",
            "network_policy": "isolated",
            "apparmor_profile": "nostr-relay"
          },
          "ports": [
            {
              "host": 8082,
              "container": 8080,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/strfry",
              "target": "/strfry",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "RELAY_NAME=Archipelago Strfry Relay"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "http://localhost:8082",
            "path": "/health",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "nostr_integration": {
            "relay_type": "public",
            "monetization_enabled": true
          }
        }
      }
    },
    "tailscale": {
      "version": "stable",
      "image": "146.59.87.168:3000/lfg2025/tailscale:stable"
    },
    "uptime-kuma": {
      "version": "1",
      "image": "146.59.87.168:3000/lfg2025/uptime-kuma:1",
      "manifest": {
        "app": {
          "id": "uptime-kuma",
          "name": "Uptime Kuma",
          "version": "1.23.0",
          "description": "Self-hosted uptime monitoring.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/uptime-kuma:1",
            "pull_policy": "if-not-present",
            "network": "pasta",
            "custom_args": [
              "--",
              "node",
              "server/server.js"
            ]
          },
          "dependencies": [
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi",
            "disk_limit": "1Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "FOWNER",
              "SETUID",
              "SETGID"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 3002,
              "container": 3001,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/uptime-kuma",
              "target": "/app/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [
            "TZ=UTC"
          ],
          "health_check": {
            "type": "http",
            "endpoint": "localhost:3001",
            "path": "/",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "metadata": {
            "icon": "/assets/img/app-icons/uptime-kuma.webp",
            "category": "data",
            "tier": "recommended",
            "author": "Uptime Kuma",
            "repo": "https://github.com/louislam/uptime-kuma",
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    },
    "vaultwarden": {
      "version": "1.30.0-alpine",
      "image": "146.59.87.168:3000/lfg2025/vaultwarden:1.30.0-alpine",
      "manifest": {
        "app": {
          "id": "vaultwarden",
          "name": "Vaultwarden",
          "version": "1.30.0",
          "description": "Self-hosted password vault with zero-knowledge encryption.",
          "container": {
            "image": "146.59.87.168:3000/lfg2025/vaultwarden:1.30.0-alpine",
            "pull_policy": "if-not-present",
            "network": "pasta"
          },
          "dependencies": [
            {
              "storage": "1Gi"
            }
          ],
          "resources": {
            "memory_limit": "256Mi",
            "disk_limit": "1Gi"
          },
          "security": {
            "capabilities": [
              "CHOWN",
              "SETUID",
              "SETGID",
              "NET_BIND_SERVICE"
            ],
            "readonly_root": false,
            "network_policy": "isolated"
          },
          "ports": [
            {
              "host": 8082,
              "container": 80,
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/var/lib/archipelago/vaultwarden",
              "target": "/data",
              "options": [
                "rw"
              ]
            }
          ],
          "environment": [],
          "health_check": {
            "type": "tcp",
            "endpoint": "localhost:80",
            "interval": "30s",
            "timeout": "5s",
            "retries": 3
          },
          "interfaces": {
            "main": {
              "name": "Web UI",
              "description": "Vaultwarden web vault",
              "type": "ui",
              "port": 8082,
              "protocol": "http",
              "path": "/"
            }
          },
          "metadata": {
            "icon": "/assets/img/app-icons/vaultwarden.webp",
            "category": "data",
            "tier": "recommended",
            "author": "Vaultwarden",
            "repo": "https://github.com/dani-garcia/vaultwarden",
            "launch": {
              "open_in_new_tab": true
            }
          }
        }
      }
    }
  }
}