From 350e44ff95801459ab5fddb76d830e612efb8f72 Mon Sep 17 00:00:00 2001
From: zakher <zakhermasri@gmail.com>
Date: Sat, 15 Aug 2026 17:04:27 +0300
Subject: [PATCH 01/33] fix: search input icons and scrollbar shift from
 mode-toggle dropdown

---
 app/src/components/Search.tsx | 32 +++++++++++++++++---------------
 app/src/mode-toggle.tsx       |  4 ++--
 2 files changed, 19 insertions(+), 17 deletions(-)

diff --git a/app/src/components/Search.tsx b/app/src/components/Search.tsx
index 241285459..a0e923c38 100644
--- a/app/src/components/Search.tsx
+++ b/app/src/components/Search.tsx
@@ -109,20 +109,22 @@ const Search = () => {
             </div>
           </div>
 
-          <Input
-            type="text"
-            placeholder="Search templates..."
-            value={searchQuery}
-            onChange={handleSearchChange}
-            className="w-full p-6"
-          />
-          {searchQuery.length > 0 ? (
-            <div className="cursor-pointer" onClick={handleClearSearch}>
-              <XIcon className="absolute end-3 translate-y-3.5 top-1/2 h-5 w-5 text-gray-400" />
-            </div>
-          ) : (
-            <SearchIcon className="absolute end-3 translate-y-2 top-1/2 lg:size-5 size-4 text-gray-400" />
-          )}
+          <div className="relative">
+            <Input
+              type="text"
+              placeholder="Search templates..."
+              value={searchQuery}
+              onChange={handleSearchChange}
+              className="w-full"
+            />
+            {searchQuery.length > 0 ? (
+              <div className="cursor-pointer" onClick={handleClearSearch}>
+                <XIcon className="absolute end-3 top-1/2 -translate-y-1/2 h-5 w-5 text-gray-400" />
+              </div>
+            ) : (
+              <SearchIcon className="absolute end-3 top-1/2 -translate-y-1/2 lg:size-5 size-4 text-gray-400" />
+            )}
+          </div>
         </div>
 
         <div className="flex flex-row gap-2 justify-between">
@@ -154,7 +156,7 @@ const Search = () => {
                 <ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
               </Button>
             </PopoverTrigger>
-            <PopoverContent className="w-[200px] p-0">
+            <PopoverContent className="w-50 p-0">
               <Command shouldFilter={false}>
                 <CommandInput
                   placeholder="Search tags...."
diff --git a/app/src/mode-toggle.tsx b/app/src/mode-toggle.tsx
index 6b12a918f..48c3b0f54 100644
--- a/app/src/mode-toggle.tsx
+++ b/app/src/mode-toggle.tsx
@@ -5,7 +5,7 @@ import {
   DropdownMenu,
   DropdownMenuContent,
   DropdownMenuItem,
-  DropdownMenuTrigger,  
+  DropdownMenuTrigger,
 } from "./components/ui/dropdown-menu"
 import { useTheme } from "./theme-provider"
 
@@ -13,7 +13,7 @@ export function ModeToggle() {
   const { setTheme } = useTheme()
 
   return (
-    <DropdownMenu>
+    <DropdownMenu modal={false}>
       <DropdownMenuTrigger asChild>
         <Button variant="outline" size="icon">
           <Sun className="h-[1.2rem] w-[1.2rem] rotate-0 scale-100 transition-all dark:-rotate-90 dark:scale-0" />

From d5d374ad722869d86dc6318f22a74fc50e08e7fe Mon Sep 17 00:00:00 2001
From: jmaxdev <251231531+jmaxdev@users.noreply.github.com>
Date: Sat, 22 Aug 2026 13:23:56 -0300
Subject: [PATCH 02/33] feat: add Kotonoba template

---
 blueprints/kotonoba/docker-compose.yml | 19 ++++++++++
 blueprints/kotonoba/icon.svg           | 48 ++++++++++++++++++++++++++
 blueprints/kotonoba/meta.json          | 18 ++++++++++
 blueprints/kotonoba/template.toml      | 20 +++++++++++
 4 files changed, 105 insertions(+)
 create mode 100644 blueprints/kotonoba/docker-compose.yml
 create mode 100644 blueprints/kotonoba/icon.svg
 create mode 100644 blueprints/kotonoba/meta.json
 create mode 100644 blueprints/kotonoba/template.toml

diff --git a/blueprints/kotonoba/docker-compose.yml b/blueprints/kotonoba/docker-compose.yml
new file mode 100644
index 000000000..37e96eff0
--- /dev/null
+++ b/blueprints/kotonoba/docker-compose.yml
@@ -0,0 +1,19 @@
+version: "3.8"
+
+services:
+  kotonoba:
+    image: ghcr.io/trixtylab/kotonoba:latest
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      DB_PATH: ${DB_PATH}
+      UPLOAD_DIR: ${UPLOAD_DIR}
+      JWT_SECRET: ${JWT_SECRET}
+      SITE_URL: ${SITE_URL}
+      ADMIN_DOMAIN: ${ADMIN_DOMAIN}
+    volumes:
+      - blog_data:/app/data
+
+volumes:
+  blog_data: {}
+
diff --git a/blueprints/kotonoba/icon.svg b/blueprints/kotonoba/icon.svg
new file mode 100644
index 000000000..3b3adf27f
--- /dev/null
+++ b/blueprints/kotonoba/icon.svg
@@ -0,0 +1,48 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256" width="100%" height="100%">
+  <defs>
+    <!-- Primary Accent Gradient (Electric Indigo to Violet) -->
+    <linearGradient id="iconAccent" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#818CF8" />
+      <stop offset="100%" stop-color="#4F46E5" />
+    </linearGradient>
+
+    <!-- Cyan Highlight Gradient -->
+    <linearGradient id="iconCyan" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#38BDF8" />
+      <stop offset="100%" stop-color="#0284C7" />
+    </linearGradient>
+  </defs>
+
+  <!-- Pure Standalone Vector Symbol without Background Container -->
+  <g transform="translate(14, 10)">
+    <!-- Top Spark Dot (Kanji 言 Radical Spark) -->
+    <circle cx="80" cy="36" r="10" fill="url(#iconCyan)" />
+
+    <!-- Vertical Spine Pillar (CMS Core Column) -->
+    <rect x="68" y="58" width="24" height="144" rx="12" fill="url(#iconAccent)" />
+
+    <!-- Upper Speech Bar (Horizontal Japanese Radical Stroke) -->
+    <rect x="110" y="68" width="44" height="12" rx="6" fill="url(#iconCyan)" opacity="0.95" />
+
+    <!-- Geometric Dynamic Chevrons forming 'K' -->
+    <path
+      d="M 110 120 
+         C 110 112, 116 105, 124 101 
+         L 168 76 
+         C 178 70, 191 78, 191 89 
+         C 191 95, 187 101, 182 104 
+         L 142 126 
+         C 135 130, 135 136, 142 140 
+         L 183 162 
+         C 188 165, 191 171, 191 177 
+         C 191 188, 178 196, 168 190 
+         L 124 165 
+         C 116 161, 110 154, 110 146 
+         Z"
+      fill="url(#iconAccent)"
+    />
+
+    <!-- Central Dialogue Focal Point Node -->
+    <circle cx="130" cy="133" r="9" fill="url(#iconCyan)" />
+  </g>
+</svg>
diff --git a/blueprints/kotonoba/meta.json b/blueprints/kotonoba/meta.json
new file mode 100644
index 000000000..ce60b98bc
--- /dev/null
+++ b/blueprints/kotonoba/meta.json
@@ -0,0 +1,18 @@
+{
+  "id": "kotonoba",
+  "name": "Kotonoba",
+  "version": "latest",
+  "description": "A high-performance, self-hosted, multi-tenant blog CMS built with Next.js 16, SQLite, Tailwind CSS v4, and Docker.",
+  "logo": "icon.svg",
+  "links": {
+    "github": "https://github.com/trixtylab/kotonoba",
+    "website": "https://github.com/trixtylab/kotonoba",
+    "docs": "https://github.com/TrixtyLab/kotonoba/tree/master/docs"
+  },
+  "tags": [
+    "blog",
+    "i18n",
+    "nextjs",
+    "web"
+  ]
+}
\ No newline at end of file
diff --git a/blueprints/kotonoba/template.toml b/blueprints/kotonoba/template.toml
new file mode 100644
index 000000000..673e80d7a
--- /dev/null
+++ b/blueprints/kotonoba/template.toml
@@ -0,0 +1,20 @@
+[variables]
+main_domain = "${domain}"
+jwt_secret = "${password:32}"
+
+[config]
+env = [
+  "NODE_ENV=production",
+  "DB_PATH=/app/data/kotonoba.db",
+  "UPLOAD_DIR=/app/data/uploads",
+  "JWT_SECRET=${jwt_secret}",
+  "SITE_URL=https://${main_domain}",
+  "ADMIN_DOMAIN=https://${main_domain}"
+]
+mounts = []
+
+[[config.domains]]
+serviceName = "kotonoba"
+port = 3000
+host = "${main_domain}"
+

From b7ca428d92e98fe815d2a9c9484b116907810765 Mon Sep 17 00:00:00 2001
From: Zakher Masri <46135573+zaaakher@users.noreply.github.com>
Date: Tue, 25 Aug 2026 05:30:20 +0300
Subject: [PATCH 03/33] fix: update 20+ broken links in templates (#1084)

* fix: update 20+ broken links in templates

* fix: evolution-api links
---
 blueprints/chiefonboarding/meta.json | 2 +-
 blueprints/convex/meta.json          | 2 +-
 blueprints/creed/meta.json           | 4 ++--
 blueprints/cup/meta.json             | 4 ++--
 blueprints/docling-serve/meta.json   | 4 ++--
 blueprints/doublezero/meta.json      | 2 +-
 blueprints/dozzle/meta.json          | 2 +-
 blueprints/drawio/meta.json          | 4 ++--
 blueprints/drawnix/meta.json         | 7 ++++---
 blueprints/drizzle-gateway/meta.json | 2 +-
 blueprints/dumbassets/meta.json      | 2 +-
 blueprints/dumbbudget/meta.json      | 6 +++---
 blueprints/dumbdrop/meta.json        | 2 +-
 blueprints/dumbpad/meta.json         | 2 +-
 blueprints/elastic-search/meta.json  | 2 +-
 blueprints/evolutionapi/meta.json    | 6 +++---
 blueprints/trailbase/meta.json       | 2 +-
 blueprints/wg-easy/meta.json         | 4 ++--
 18 files changed, 30 insertions(+), 29 deletions(-)

diff --git a/blueprints/chiefonboarding/meta.json b/blueprints/chiefonboarding/meta.json
index 37fe83cee..833633740 100644
--- a/blueprints/chiefonboarding/meta.json
+++ b/blueprints/chiefonboarding/meta.json
@@ -6,7 +6,7 @@
   "logo": "logo.png",
   "links": {
     "github": "https://github.com/chiefonboarding/chiefonboarding",
-    "website": "https://demo.chiefonboarding.com/",
+    "website": "https://chiefonboarding.com/",
     "docs": "https://docs.chiefonboarding.com/"
   },
   "tags": [
diff --git a/blueprints/convex/meta.json b/blueprints/convex/meta.json
index 0fe17f3f6..51074f31b 100644
--- a/blueprints/convex/meta.json
+++ b/blueprints/convex/meta.json
@@ -5,7 +5,7 @@
   "description": "Convex is an open-source reactive database designed to make life easy for web app developers.",
   "logo": "convex.svg",
   "links": {
-    "github": "https://github.com/get-convex/convex",
+    "github": "https://github.com/get-convex/convex-backend",
     "website": "https://www.convex.dev/",
     "docs": "https://www.convex.dev/docs"
   },
diff --git a/blueprints/creed/meta.json b/blueprints/creed/meta.json
index d73220b09..904530756 100644
--- a/blueprints/creed/meta.json
+++ b/blueprints/creed/meta.json
@@ -5,9 +5,9 @@
   "description": "One personal context file every AI agent reads before answering and proposes updates to as it learns about you. Requires an external Supabase project (see instructions).",
   "logo": "creed.svg",
   "links": {
-    "github": "https://github.com/connorhpbrn/creed",
+    "github": "https://github.com/hpbrn/creed",
     "website": "https://creed.md",
-    "docs": "https://creed.md/docs"
+    "docs": "https://docs.creed.md/"
   },
   "tags": [
     "ai",
diff --git a/blueprints/cup/meta.json b/blueprints/cup/meta.json
index 8b0ee3016..ad38c428d 100644
--- a/blueprints/cup/meta.json
+++ b/blueprints/cup/meta.json
@@ -6,8 +6,8 @@
   "logo": "image.png",
   "links": {
     "github": "https://github.com/sergi0g/cup",
-    "website": "https://cup.sh",
-    "docs": "https://github.com/sergi0g/cup"
+    "website": "https://cup.sergi0g.dev/",
+    "docs": "https://cup.sergi0g.dev/docs"
   },
   "tags": [
     "docker",
diff --git a/blueprints/docling-serve/meta.json b/blueprints/docling-serve/meta.json
index ad399151a..9615e4a2a 100644
--- a/blueprints/docling-serve/meta.json
+++ b/blueprints/docling-serve/meta.json
@@ -6,8 +6,8 @@
   "logo": "docling-serve.png",
   "links": {
     "github": "https://github.com/docling-project/docling-serve",
-    "website": "https://docling-project.github.io/docling-serve/",
-    "docs": "https://docling-project.github.io/docling-serve/",
+    "website": "",
+    "docs": "https://github.com/docling-project/docling-serve/blob/main/docs/README.md",
     "dockerhub": "https://quay.io/repository/docling-project/docling-serve"
   },
   "tags": [
diff --git a/blueprints/doublezero/meta.json b/blueprints/doublezero/meta.json
index 3461c7b8f..a4a31e5d2 100644
--- a/blueprints/doublezero/meta.json
+++ b/blueprints/doublezero/meta.json
@@ -6,7 +6,7 @@
   "logo": "doublezero.svg",
   "links": {
     "github": "https://github.com/technomancy-dev/00",
-    "website": "https://www.double-zero.cloud/",
+    "website": "",
     "docs": "https://github.com/technomancy-dev/00"
   },
   "tags": [
diff --git a/blueprints/dozzle/meta.json b/blueprints/dozzle/meta.json
index 24964a855..b276d9f18 100644
--- a/blueprints/dozzle/meta.json
+++ b/blueprints/dozzle/meta.json
@@ -7,7 +7,7 @@
   "links": {
     "github": "https://github.com/amir20/dozzle",
     "website": "https://dozzle.dev",
-    "docs": "https://dozzle.dev/docs"
+    "docs": "https://dozzle.dev/guide/what-is-dozzle"
   },
   "tags": [
     "monitoring",
diff --git a/blueprints/drawio/meta.json b/blueprints/drawio/meta.json
index 63d7a9b40..341b7d14b 100644
--- a/blueprints/drawio/meta.json
+++ b/blueprints/drawio/meta.json
@@ -6,8 +6,8 @@
   "logo": "drawio.svg",
   "links": {
     "github": "https://github.com/jgraph/drawio",
-    "website": "https://draw.io/",
-    "docs": "https://www.drawio.com/doc/"
+    "website": "https://www.drawio.com/",
+    "docs": "https://www.drawio.com/docs/"
   },
   "tags": [
     "drawing",
diff --git a/blueprints/drawnix/meta.json b/blueprints/drawnix/meta.json
index 20e5d6b6f..aff36993a 100644
--- a/blueprints/drawnix/meta.json
+++ b/blueprints/drawnix/meta.json
@@ -5,9 +5,10 @@
   "description": "Drawnix is an application for generating and managing visual content, powered by pubuzhixing/drawnix Docker image.",
   "logo": "image.png",
   "links": {
-    "github": "https://github.com/pubuzhixing/drawnix",
-    "website": "https://hub.docker.com/r/pubuzhixing/drawnix",
-    "docs": "https://hub.docker.com/r/pubuzhixing/drawnix"
+    "github": "https://github.com/plait-board/drawnix/",
+    "website": "https://drawnix.com/",
+    "docs": "https://github.com/plait-board/drawnix/blob/develop/README_en.md#docker",
+    "dockerhub": "https://hub.docker.com/r/pubuzhixing/drawnix"
   },
   "tags": [
     "visualization",
diff --git a/blueprints/drizzle-gateway/meta.json b/blueprints/drizzle-gateway/meta.json
index 25d099ce5..e222f3140 100644
--- a/blueprints/drizzle-gateway/meta.json
+++ b/blueprints/drizzle-gateway/meta.json
@@ -5,7 +5,7 @@
   "description": "Drizzle Gateway is a self-hosted database gateway that allows you to connect to your databases from anywhere.",
   "logo": "drizzle-gateway.svg",
   "links": {
-    "github": "https://github.com/drizzle-team/drizzle-gateway",
+    "github": "",
     "website": "https://gateway.drizzle.team/",
     "docs": "https://gateway.drizzle.team/docs/railway"
   },
diff --git a/blueprints/dumbassets/meta.json b/blueprints/dumbassets/meta.json
index c8d7bfd35..366bf1b88 100644
--- a/blueprints/dumbassets/meta.json
+++ b/blueprints/dumbassets/meta.json
@@ -6,7 +6,7 @@
   "logo": "logo.svg",
   "links": {
     "github": "https://github.com/dumbwareio/dumbassets",
-    "website": "https://www.dumbware.io/software/DumbAssets/",
+    "website": "https://dumbware.io/DumbAssets/",
     "docs": "https://github.com/dumbwareio/dumbassets"
   },
   "tags": [
diff --git a/blueprints/dumbbudget/meta.json b/blueprints/dumbbudget/meta.json
index 83ed92dd9..798eacf2c 100644
--- a/blueprints/dumbbudget/meta.json
+++ b/blueprints/dumbbudget/meta.json
@@ -5,9 +5,9 @@
   "description": "DumbBudget is a simple, self-hosted budget tracking service with PIN protection and no database required.",
   "logo": "logo.svg",
   "links": {
-    "github": "https://github.com/dumbwareio/dumbbudget",
-    "website": "https://www.dumbware.io/software/DumbBudget/",
-    "docs": "https://github.com/dumbwareio/dumbbudget"
+    "github": "https://github.com/DumbWareio/DumbBudget",
+    "website": "https://dumbware.io/DumbBudget",
+    "docs": "https://github.com/DumbWareio/DumbBudget/blob/main/README.md"
   },
   "tags": [
     "budget",
diff --git a/blueprints/dumbdrop/meta.json b/blueprints/dumbdrop/meta.json
index 82932ed8c..2b640d6e6 100644
--- a/blueprints/dumbdrop/meta.json
+++ b/blueprints/dumbdrop/meta.json
@@ -6,7 +6,7 @@
   "logo": "logo.svg",
   "links": {
     "github": "https://github.com/dumbwareio/dumbdrop",
-    "website": "https://www.dumbware.io/software/DumbDrop/",
+    "website": "https://dumbware.io/DumbDrop/",
     "docs": "https://github.com/dumbwareio/dumbdrop"
   },
   "tags": [
diff --git a/blueprints/dumbpad/meta.json b/blueprints/dumbpad/meta.json
index e87cb9560..11a2d0c9c 100644
--- a/blueprints/dumbpad/meta.json
+++ b/blueprints/dumbpad/meta.json
@@ -6,7 +6,7 @@
   "logo": "logo.svg",
   "links": {
     "github": "https://github.com/dumbwareio/dumbpad",
-    "website": "https://www.dumbware.io/software/DumbPad/",
+    "website": "https://dumbware.io/DumbPad/",
     "docs": "https://github.com/dumbwareio/dumbpad"
   },
   "tags": [
diff --git a/blueprints/elastic-search/meta.json b/blueprints/elastic-search/meta.json
index 7860b958b..f667c3c04 100644
--- a/blueprints/elastic-search/meta.json
+++ b/blueprints/elastic-search/meta.json
@@ -7,7 +7,7 @@
   "links": {
     "github": "https://github.com/elastic/elasticsearch",
     "website": "https://www.elastic.co/elasticsearch/",
-    "docs": "https://docs.elastic.co/elasticsearch/"
+    "docs": "https://www.elastic.co/docs/solutions/search"
   },
   "tags": [
     "search",
diff --git a/blueprints/evolutionapi/meta.json b/blueprints/evolutionapi/meta.json
index 21cf2ce4f..1e467a511 100644
--- a/blueprints/evolutionapi/meta.json
+++ b/blueprints/evolutionapi/meta.json
@@ -5,9 +5,9 @@
   "description": "Evolution API is a robust platform dedicated to empowering small businesses with limited resources, going beyond a simple messaging solution via WhatsApp.",
   "logo": "evolutionapi.png",
   "links": {
-    "github": "https://github.com/EvolutionAPI/evolution-api",
-    "docs": "https://doc.evolution-api.com/v2/en/get-started/introduction",
-    "website": "https://evolution-api.com/opensource-whatsapp-api/"
+    "github": "https://github.com/evolution-foundation/evolution-api",
+    "docs": "https://docs.evolutionfoundation.com.br/en",
+    "website": "https://evolutionfoundation.com.br/"
   },
   "tags": [
     "api",
diff --git a/blueprints/trailbase/meta.json b/blueprints/trailbase/meta.json
index f00377f7c..8f718aa48 100644
--- a/blueprints/trailbase/meta.json
+++ b/blueprints/trailbase/meta.json
@@ -5,7 +5,7 @@
   "description": "TrailBase is a blazingly fast, open-source application server with type-safe APIs, built-in WebAssembly runtime, realtime, auth, and admin UI built on Rust, SQLite & Wasmtime.",
   "logo": "logo.svg",
   "links": {
-    "github": "https://github.com/trailbase/trailbase",
+    "github": "https://github.com/trailbaseio/trailbase",
     "website": "https://trailbase.io/",
     "docs": "https://trailbase.io/getting-started/install"
   },
diff --git a/blueprints/wg-easy/meta.json b/blueprints/wg-easy/meta.json
index f699bfb45..d4d172aa3 100644
--- a/blueprints/wg-easy/meta.json
+++ b/blueprints/wg-easy/meta.json
@@ -6,8 +6,8 @@
   "logo": "image.png",
   "links": {
     "github": "https://github.com/wg-easy/wg-easy",
-    "website": "https://wg-easy.github.io/",
-    "docs": "https://github.com/wg-easy/wg-easy/wiki"
+    "website": "https://wg-easy.github.io/wg-easy/latest/",
+    "docs": "https://wg-easy.github.io/wg-easy/latest/getting-started/"
   },
   "tags": [
     "vpn",

From 39ce5301b46fa4314e63653270dea607aed07fef Mon Sep 17 00:00:00 2001
From: Mauricio Siu <mauricio@dokploy.com>
Date: Mon, 24 Aug 2026 20:30:35 -0600
Subject: [PATCH 04/33] fix(kotonoba): pin image to 1.0.19, ADMIN_DOMAIN as
 hostname

- ghcr.io/trixtylab/kotonoba:latest -> 1.0.19 (same digest as latest today); meta.json version 1.0.19.
- ADMIN_DOMAIN is documented upstream as a bare hostname, pass ${main_domain} without scheme.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/kotonoba/docker-compose.yml | 2 +-
 blueprints/kotonoba/meta.json          | 2 +-
 blueprints/kotonoba/template.toml      | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/blueprints/kotonoba/docker-compose.yml b/blueprints/kotonoba/docker-compose.yml
index 37e96eff0..687cad117 100644
--- a/blueprints/kotonoba/docker-compose.yml
+++ b/blueprints/kotonoba/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   kotonoba:
-    image: ghcr.io/trixtylab/kotonoba:latest
+    image: ghcr.io/trixtylab/kotonoba:1.0.19
     restart: unless-stopped
     environment:
       NODE_ENV: production
diff --git a/blueprints/kotonoba/meta.json b/blueprints/kotonoba/meta.json
index ce60b98bc..6532fbf1a 100644
--- a/blueprints/kotonoba/meta.json
+++ b/blueprints/kotonoba/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "kotonoba",
   "name": "Kotonoba",
-  "version": "latest",
+  "version": "1.0.19",
   "description": "A high-performance, self-hosted, multi-tenant blog CMS built with Next.js 16, SQLite, Tailwind CSS v4, and Docker.",
   "logo": "icon.svg",
   "links": {
diff --git a/blueprints/kotonoba/template.toml b/blueprints/kotonoba/template.toml
index 673e80d7a..86fcbe36e 100644
--- a/blueprints/kotonoba/template.toml
+++ b/blueprints/kotonoba/template.toml
@@ -9,7 +9,7 @@ env = [
   "UPLOAD_DIR=/app/data/uploads",
   "JWT_SECRET=${jwt_secret}",
   "SITE_URL=https://${main_domain}",
-  "ADMIN_DOMAIN=https://${main_domain}"
+  "ADMIN_DOMAIN=${main_domain}"
 ]
 mounts = []
 

From a307ed472076fa1a2ee24ba89dfb5591ea7fda54 Mon Sep 17 00:00:00 2001
From: Stefan Ernst <ernst.stefan@icloud.com>
Date: Tue, 25 Aug 2026 04:30:56 +0200
Subject: [PATCH 05/33] chore: update Windshift to v0.8.5 (#1090)

---
 blueprints/windshift/docker-compose.yml | 2 +-
 blueprints/windshift/meta.json          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/blueprints/windshift/docker-compose.yml b/blueprints/windshift/docker-compose.yml
index c3f52eb14..7764e8323 100644
--- a/blueprints/windshift/docker-compose.yml
+++ b/blueprints/windshift/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   windshift:
-    image: ghcr.io/windshiftapp/windshift:v0.8.2
+    image: ghcr.io/windshiftapp/windshift:v0.8.5
     restart: unless-stopped
     environment:
       - BASE_URL=https://${DOMAIN}
diff --git a/blueprints/windshift/meta.json b/blueprints/windshift/meta.json
index 32b025d27..d474553e0 100644
--- a/blueprints/windshift/meta.json
+++ b/blueprints/windshift/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "windshift",
   "name": "Windshift",
-  "version": "v0.8.2",
+  "version": "v0.8.5",
   "description": "Self-hosted work management platform with projects, tasks, sprints, and team collaboration.",
   "logo": "windshift.png",
   "links": {

From 9c784b723eb737259227bb39611149eb40c50756 Mon Sep 17 00:00:00 2001
From: Torikul Islam <iamtoricool@gmail.com>
Date: Tue, 25 Aug 2026 08:34:46 +0600
Subject: [PATCH 06/33] feat: add postgres-pgadmin template (#1104)

* feat: add postgres-pgadmin template

* feat: expose postgres via second domain

Add postgres_domain variable and second [[config.domains]] for
postgres:5432 alongside pgadmin:80, so both the DB and the web UI
are reachable via Dokploy domains.

* fix(postgres-pgadmin): drop HTTP domain on postgres:5432, pre-register server in pgAdmin, bump pgAdmin to 9.17

- Remove the second [[config.domains]] pointing an HTTP host at postgres:5432 (Traefik returned 502).
- Mount servers.json + pgpass via config.mounts so pgAdmin comes with the bundled PostgreSQL pre-registered and connects without a password prompt (pgpass is copied to the data volume with 0600 for uid 5050).
- Bump dpage/pgadmin4 8.13 -> 9.17.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../postgres-pgadmin/docker-compose.yml       | 47 +++++++++++++++++++
 blueprints/postgres-pgadmin/meta.json         | 13 +++++
 .../postgres-pgadmin/postgres-pgadmin.svg     |  1 +
 blueprints/postgres-pgadmin/template.toml     | 44 +++++++++++++++++
 4 files changed, 105 insertions(+)
 create mode 100644 blueprints/postgres-pgadmin/docker-compose.yml
 create mode 100644 blueprints/postgres-pgadmin/meta.json
 create mode 100644 blueprints/postgres-pgadmin/postgres-pgadmin.svg
 create mode 100644 blueprints/postgres-pgadmin/template.toml

diff --git a/blueprints/postgres-pgadmin/docker-compose.yml b/blueprints/postgres-pgadmin/docker-compose.yml
new file mode 100644
index 000000000..4fd300b4f
--- /dev/null
+++ b/blueprints/postgres-pgadmin/docker-compose.yml
@@ -0,0 +1,47 @@
+version: "3.8"
+
+services:
+  postgres:
+    image: postgres:18-alpine
+    restart: unless-stopped
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+    volumes:
+      - postgres-data:/var/lib/postgresql
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
+    expose:
+      - "5432"
+
+  pgadmin:
+    image: dpage/pgadmin4:9.17
+    restart: unless-stopped
+    # pgpass must be 0600 and readable by the pgadmin user (uid 5050), so copy the
+    # mounted file into the data volume before starting pgAdmin.
+    entrypoint:
+      - /bin/sh
+      - -c
+      - cp /pgadmin4/pgpass /var/lib/pgadmin/pgpass && chmod 600 /var/lib/pgadmin/pgpass && exec /entrypoint.sh
+    environment:
+      - PGADMIN_DEFAULT_EMAIL=${PGADMIN_DEFAULT_EMAIL}
+      - PGADMIN_DEFAULT_PASSWORD=${PGADMIN_DEFAULT_PASSWORD}
+      - PGADMIN_CONFIG_SERVER_MODE=False
+      - PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED=False
+      - PGADMIN_SERVER_JSON_FILE=/pgadmin4/servers.json
+    volumes:
+      - pgadmin-data:/var/lib/pgadmin
+      - ../files/servers.json:/pgadmin4/servers.json:ro
+      - ../files/pgpass:/pgadmin4/pgpass:ro
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+volumes:
+  postgres-data:
+  pgadmin-data:
diff --git a/blueprints/postgres-pgadmin/meta.json b/blueprints/postgres-pgadmin/meta.json
new file mode 100644
index 000000000..fed8195de
--- /dev/null
+++ b/blueprints/postgres-pgadmin/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "postgres-pgadmin",
+  "name": "PostgreSQL + pgAdmin",
+  "version": "18-alpine",
+  "description": "PostgreSQL 18 Alpine with pgAdmin 4 web UI, persistent volumes and healthchecks for easy database administration.",
+  "logo": "postgres-pgadmin.svg",
+  "links": {
+    "github": "https://github.com/postgres/postgres",
+    "website": "https://www.postgresql.org/",
+    "docs": "https://www.pgadmin.org/docs/"
+  },
+  "tags": ["database", "postgres", "postgresql", "admin", "pgadmin"]
+}
diff --git a/blueprints/postgres-pgadmin/postgres-pgadmin.svg b/blueprints/postgres-pgadmin/postgres-pgadmin.svg
new file mode 100644
index 000000000..3f6340fd9
--- /dev/null
+++ b/blueprints/postgres-pgadmin/postgres-pgadmin.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="576.095" height="593.844" viewBox="0 0 432.071 445.383"><g style="fill-rule:nonzero;clip-rule:nonzero;fill:none;stroke:#fff;stroke-width:12.4651;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4"><path d="M323.205 324.227c2.833-23.601 1.984-27.062 19.563-23.239l4.463.392c13.517.615 31.199-2.174 41.587-7 22.362-10.376 35.622-27.7 13.572-23.148-50.297 10.376-53.755-6.655-53.755-6.655 53.111-78.803 75.313-178.836 56.149-203.322-52.27-66.789-142.748-35.206-144.262-34.386l-.482.089c-9.938-2.062-21.06-3.294-33.554-3.496-22.761-.374-40.032 5.967-53.133 15.904 0 0-161.408-66.498-153.899 83.628 1.597 31.936 45.777 241.655 98.47 178.31 19.259-23.163 37.871-42.748 37.871-42.748 9.242 6.14 20.307 9.272 31.912 8.147l.897-.765c-.281 2.876-.157 5.689.359 9.019-13.572 15.167-9.584 17.83-36.723 23.416-27.457 5.659-11.326 15.734-.797 18.367 12.768 3.193 42.305 7.716 62.268-20.224l-.795 3.188c5.325 4.26 4.965 30.619 5.72 49.452.756 18.834 2.017 36.409 5.856 46.771 3.839 10.36 8.369 37.05 44.036 29.406 29.809-6.388 52.6-15.582 54.677-101.107" style="fill:#000;stroke:#000;stroke-width:37.3953;stroke-linecap:butt;stroke-linejoin:miter"/><path stroke="none" d="M402.395 271.23c-50.302 10.376-53.76-6.655-53.76-6.655 53.111-78.808 75.313-178.843 56.153-203.326-52.27-66.785-142.752-35.2-144.262-34.38l-.486.087c-9.938-2.063-21.06-3.292-33.56-3.496-22.761-.373-40.026 5.967-53.127 15.902 0 0-161.411-66.495-153.904 83.63 1.597 31.938 45.776 241.657 98.471 178.312 19.26-23.163 37.869-42.748 37.869-42.748 9.243 6.14 20.308 9.272 31.908 8.147l.901-.765c-.28 2.876-.152 5.689.361 9.019-13.575 15.167-9.586 17.83-36.723 23.416-27.459 5.659-11.328 15.734-.796 18.367 12.768 3.193 42.307 7.716 62.266-20.224l-.796 3.188c5.319 4.26 9.054 27.711 8.428 48.969s-1.044 35.854 3.147 47.254 8.368 37.05 44.042 29.406c29.809-6.388 45.256-22.942 47.405-50.555 1.525-19.631 4.976-16.729 5.194-34.28l2.768-8.309c3.192-26.611.507-35.196 18.872-31.203l4.463.392c13.517.615 31.208-2.174 41.591-7 22.358-10.376 35.618-27.7 13.573-23.148z" style="fill:#336791;stroke:none"/><path d="M215.866 286.484c-1.385 49.516.348 99.377 5.193 111.495 4.848 12.118 15.223 35.688 50.9 28.045 29.806-6.39 40.651-18.756 45.357-46.051 3.466-20.082 10.148-75.854 11.005-87.281M173.104 38.256S11.583-27.76 19.092 122.365c1.597 31.938 45.779 241.664 98.473 178.316 19.256-23.166 36.671-41.335 36.671-41.335M260.349 26.207c-5.591 1.753 89.848-34.889 144.087 34.417 19.159 24.484-3.043 124.519-56.153 203.329"/><path d="M348.282 263.953s3.461 17.036 53.764 6.653c22.04-4.552 8.776 12.774-13.577 23.155-18.345 8.514-59.474 10.696-60.146-1.069-1.729-30.355 21.647-21.133 19.96-28.739-1.525-6.85-11.979-13.573-18.894-30.338-6.037-14.633-82.796-126.849 21.287-110.183 3.813-.789-27.146-99.002-124.553-100.599-97.385-1.597-94.19 119.762-94.19 119.762" style="stroke-linejoin:bevel"/><path d="M188.604 274.334c-13.577 15.166-9.584 17.829-36.723 23.417-27.459 5.66-11.326 15.733-.797 18.365 12.768 3.195 42.307 7.718 62.266-20.229 6.078-8.509-.036-22.086-8.385-25.547-4.034-1.671-9.428-3.765-16.361 3.994"/><path d="M187.715 274.069c-1.368-8.917 2.93-19.528 7.536-31.942 6.922-18.626 22.893-37.255 10.117-96.339-9.523-44.029-73.396-9.163-73.436-3.193-.039 5.968 2.889 30.26-1.067 58.548-5.162 36.913 23.488 68.132 56.479 64.938"/><path d="M172.517 141.7c-.288 2.039 3.733 7.48 8.976 8.207 5.234.73 9.714-3.522 9.998-5.559.284-2.039-3.732-4.285-8.977-5.015-5.237-.731-9.719.333-9.996 2.367z" style="fill:#fff;stroke-width:4.155;stroke-linecap:butt;stroke-linejoin:miter"/><path d="M331.941 137.543c.284 2.039-3.732 7.48-8.976 8.207-5.238.73-9.718-3.522-10.005-5.559-.277-2.039 3.74-4.285 8.979-5.015s9.718.333 10.002 2.368z" style="fill:#fff;stroke-width:2.0775;stroke-linecap:butt;stroke-linejoin:miter"/><path d="M350.676 123.432c.863 15.994-3.445 26.888-3.988 43.914-.804 24.748 11.799 53.074-7.191 81.435"/></g></svg>
\ No newline at end of file
diff --git a/blueprints/postgres-pgadmin/template.toml b/blueprints/postgres-pgadmin/template.toml
new file mode 100644
index 000000000..d6b6e8e81
--- /dev/null
+++ b/blueprints/postgres-pgadmin/template.toml
@@ -0,0 +1,44 @@
+[variables]
+pgadmin_domain = "${domain}"
+postgres_user = "${username}"
+postgres_password = "${password:32}"
+postgres_db = "postgres"
+pgadmin_email = "${email}"
+pgadmin_password = "${password:16}"
+
+[config]
+[[config.domains]]
+serviceName = "pgadmin"
+port = 80
+host = "${pgadmin_domain}"
+
+[config.env]
+POSTGRES_USER = "${postgres_user}"
+POSTGRES_PASSWORD = "${postgres_password}"
+POSTGRES_DB = "${postgres_db}"
+PGADMIN_DEFAULT_EMAIL = "${pgadmin_email}"
+PGADMIN_DEFAULT_PASSWORD = "${pgadmin_password}"
+
+# Pre-register the bundled PostgreSQL server in pgAdmin (imported on first launch only).
+[[config.mounts]]
+filePath = "/servers.json"
+content = """{
+  "Servers": {
+    "1": {
+      "Name": "PostgreSQL",
+      "Group": "Servers",
+      "Host": "postgres",
+      "Port": 5432,
+      "MaintenanceDB": "${postgres_db}",
+      "Username": "${postgres_user}",
+      "PassFile": "/var/lib/pgadmin/pgpass",
+      "SSLMode": "prefer"
+    }
+  }
+}
+"""
+
+[[config.mounts]]
+filePath = "/pgpass"
+content = """postgres:5432:*:${postgres_user}:${postgres_password}
+"""

From 72491787d457d42e4713ec5b78e09edb8f96c062 Mon Sep 17 00:00:00 2001
From: Abian Suarez <33789675+AbianS@users.noreply.github.com>
Date: Tue, 25 Aug 2026 03:39:06 +0100
Subject: [PATCH 07/33] fix(rustrak): point templates at the official images
 and current metadata (#1102)

Both Rustrak blueprints shipped abians7/* images pinned to v0.2.1, twelve
minor versions behind the current release, and linked to the old personal
repo. Updated to the official rustrak/* images on latest, refreshed the
metadata, and replaced the logo with the current mark.

The memory figure in the description is now measured rather than estimated:
32 MB resident at idle with SQLite, from docker stats on these images.
---
 blueprints/rustrak-full/docker-compose.yml |  4 ++--
 blueprints/rustrak-full/meta.json          | 10 +++++-----
 blueprints/rustrak-full/rustrak.svg        |  7 +------
 blueprints/rustrak/docker-compose.yml      |  2 +-
 blueprints/rustrak/meta.json               |  6 +++---
 blueprints/rustrak/rustrak.svg             |  7 +------
 6 files changed, 13 insertions(+), 23 deletions(-)

diff --git a/blueprints/rustrak-full/docker-compose.yml b/blueprints/rustrak-full/docker-compose.yml
index fa35356fe..cbbfdf295 100644
--- a/blueprints/rustrak-full/docker-compose.yml
+++ b/blueprints/rustrak-full/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   rustrak-server:
-    image: abians7/rustrak-server:v0.2.1-postgres
+    image: rustrak/rustrak-server:postgres
     restart: unless-stopped
     environment:
       - HOST=0.0.0.0
@@ -19,7 +19,7 @@ services:
         condition: service_healthy
 
   rustrak-ui:
-    image: abians7/rustrak-ui:v0.1.6
+    image: rustrak/rustrak-ui:latest
     restart: unless-stopped
     environment:
       - RUSTRAK_API_URL=${RUSTRAK_API_URL}
diff --git a/blueprints/rustrak-full/meta.json b/blueprints/rustrak-full/meta.json
index bbdd77e0b..cb9f1d9de 100644
--- a/blueprints/rustrak-full/meta.json
+++ b/blueprints/rustrak-full/meta.json
@@ -1,13 +1,13 @@
 {
   "id": "rustrak-full",
   "name": "Rustrak (Full Stack)",
-  "version": "0.2.1",
-  "description": "Self-hosted error tracking compatible with Sentry SDKs. Includes server, web dashboard UI, and PostgreSQL. Written in Rust with <100MB memory footprint.",
+  "version": "latest",
+  "description": "Self-hosted error tracking compatible with Sentry SDKs. Full stack: Rust server, web dashboard and PostgreSQL.",
   "logo": "rustrak.svg",
   "links": {
-    "github": "https://github.com/AbianS/rustrak",
-    "website": "https://abians.github.io/rustrak/",
-    "docs": "https://abians.github.io/rustrak/"
+    "github": "https://github.com/rustrak/rustrak",
+    "website": "https://rustrak.github.io/rustrak/",
+    "docs": "https://rustrak.github.io/rustrak/getting-started/overview"
   },
   "tags": [
     "monitoring",
diff --git a/blueprints/rustrak-full/rustrak.svg b/blueprints/rustrak-full/rustrak.svg
index 11d87e475..c12c62cac 100644
--- a/blueprints/rustrak-full/rustrak.svg
+++ b/blueprints/rustrak-full/rustrak.svg
@@ -1,6 +1 @@
-<svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg">
-  <rect width="512" height="512" rx="96" fill="#C5F11E"/>
-  <polygon points="274,90 108,291 256,291 238,422 404,221 256,221"
-          fill="#0A0A0A" stroke="#0A0A0A" stroke-width="20"
-          stroke-linejoin="round" stroke-linecap="round"/>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 1000"><defs><radialGradient id="poster10001000b0"><stop offset="0" stop-color="#c5f11e" stop-opacity="1.0"/><stop offset=".55" stop-color="#c5f11e" stop-opacity="0.55"/><stop offset="1" stop-color="#c5f11e" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b1"><stop offset="0" stop-color="#aed800" stop-opacity="0.95"/><stop offset=".55" stop-color="#aed800" stop-opacity="0.52"/><stop offset="1" stop-color="#aed800" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b2"><stop offset="0" stop-color="#96bd00" stop-opacity="0.85"/><stop offset=".55" stop-color="#96bd00" stop-opacity="0.47"/><stop offset="1" stop-color="#96bd00" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b3"><stop offset="0" stop-color="#030303" stop-opacity="1.0"/><stop offset=".55" stop-color="#030303" stop-opacity="0.55"/><stop offset="1" stop-color="#030303" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b4"><stop offset="0" stop-color="#030303" stop-opacity="0.95"/><stop offset=".55" stop-color="#030303" stop-opacity="0.52"/><stop offset="1" stop-color="#030303" stop-opacity="0"/></radialGradient><filter id="poster10001000f" x="-25%" y="-25%" width="150%" height="150%" color-interpolation-filters="sRGB"><feGaussianBlur stdDeviation="62" result="b"/><feTurbulence type="fractalNoise" baseFrequency="0.0026" numOctaves="2" seed="11" result="t"/><feDisplacementMap in="b" in2="t" scale="76" xChannelSelector="R" yChannelSelector="G"/></filter><filter id="poster10001000n" x="0" y="0" width="100%" height="100%"><feTurbulence type="fractalNoise" baseFrequency="0.52" numOctaves="4" seed="3" stitchTiles="stitch" result="t"/><feColorMatrix in="t" type="saturate" values="0" result="g"/><feComponentTransfer in="g"><feFuncA type="linear" slope="2.1" intercept="-0.42"/></feComponentTransfer></filter><clipPath id="poster10001000c"><rect width="1000" height="1000"/></clipPath></defs><g clip-path="url(#poster10001000c)"><rect width="1000" height="1000" fill="#030303"/><g filter="url(#poster10001000f)"><g transform="scale(1.3) translate(-115 -115)"><ellipse cx="200" cy="140" rx="560" ry="482" fill="url(#poster10001000b0)"/><ellipse cx="400" cy="300" rx="420" ry="361" fill="url(#poster10001000b1)"/><ellipse cx="60" cy="480" rx="364" ry="313" fill="url(#poster10001000b2)"/><ellipse cx="780" cy="740" rx="580" ry="499" fill="url(#poster10001000b3)"/><ellipse cx="580" cy="960" rx="400" ry="344" fill="url(#poster10001000b4)"/></g></g><g transform="translate(205.5 560.9) scale(0.17084)"><path fill="#ffffff" d="M54.00 0.00V-486.00H207.00V0.00ZM207.00 -266.50 142.50 -316.50Q161.50 -402.00 207.00 -449.00Q252.49 -496.00 331.50 -496.00Q366.50 -496.00 393.25 -485.50Q420.00 -475.00 440.00 -453.00L349.00 -338.00Q339.00 -349.00 324.19 -354.75Q309.39 -360.50 290.00 -360.50Q252.00 -360.50 229.50 -337.13Q207.00 -313.75 207.00 -266.50Z M708.50 11.00Q642.20 11.00 590.60 -16.50Q539.00 -44.00 509.75 -92.67Q480.50 -141.35 480.50 -204.39V-486.00H633.50V-206.00Q633.50 -180.92 642.44 -162.80Q651.38 -144.69 668.43 -134.84Q685.48 -125.00 708.66 -125.00Q743.00 -125.00 763.00 -146.53Q783.00 -168.06 783.00 -206.00V-486.00H936.00V-204.50Q936.00 -140.50 907.00 -92.00Q878.00 -43.50 826.78 -16.25Q775.57 11.00 708.50 11.00Z M1203.50 12.50Q1160.50 12.50 1119.00 1.25Q1077.50 -10.00 1042.25 -30.25Q1007.00 -50.50 982.00 -78.00L1068.50 -166.00Q1093.00 -139.50 1126.00 -125.25Q1159.00 -111.00 1198.00 -111.00Q1225.00 -111.00 1239.25 -118.75Q1253.50 -126.50 1253.50 -141.00Q1253.50 -159.00 1236.25 -168.50Q1219.00 -178.00 1192.00 -185.25Q1165.00 -192.50 1135.00 -201.75Q1105.00 -211.00 1077.75 -227.00Q1050.50 -243.00 1033.50 -271.25Q1016.50 -299.50 1016.50 -344.00Q1016.50 -390.50 1040.50 -425.25Q1064.50 -460.00 1108.50 -479.75Q1152.50 -499.50 1212.00 -499.50Q1273.50 -499.50 1326.25 -478.25Q1379.00 -457.00 1412.00 -414.50L1325.00 -326.50Q1302.00 -353.50 1273.50 -364.75Q1245.00 -376.00 1217.50 -376.00Q1191.50 -376.00 1178.75 -368.25Q1166.00 -360.50 1166.00 -347.00Q1166.00 -331.50 1183.00 -322.50Q1200.00 -313.50 1227.00 -306.50Q1254.00 -299.50 1283.75 -289.75Q1313.50 -280.00 1340.50 -262.75Q1367.50 -245.50 1384.50 -217.00Q1401.50 -188.50 1401.50 -143.00Q1401.50 -71.50 1348.00 -29.50Q1294.50 12.50 1203.50 12.50Z M1549.00 0.00V-687.00H1702.00V0.00ZM1439.00 -356.00V-486.00H1812.00V-356.00Z M1874.00 0.00V-486.00H2027.00V0.00ZM2027.00 -266.50 1962.50 -316.50Q1981.50 -402.00 2027.00 -449.00Q2072.49 -496.00 2151.50 -496.00Q2186.50 -496.00 2213.25 -485.50Q2240.00 -475.00 2260.00 -453.00L2169.00 -338.00Q2159.00 -349.00 2144.19 -354.75Q2129.39 -360.50 2110.00 -360.50Q2072.00 -360.50 2049.50 -337.13Q2027.00 -313.75 2027.00 -266.50Z M2516.00 10.00Q2449.00 10.00 2396.25 -23.00Q2343.50 -56.00 2313.25 -113.00Q2283.00 -170.00 2283.00 -242.50Q2283.00 -315.50 2313.25 -372.75Q2343.50 -430.00 2396.25 -463.00Q2449.00 -496.00 2516.00 -496.00Q2565.00 -496.00 2604.50 -477.00Q2644.00 -458.00 2668.75 -424.50Q2693.50 -391.00 2697.00 -348.00V-138.00Q2693.50 -95.00 2669.00 -61.50Q2644.50 -28.00 2604.75 -9.00Q2565.00 10.00 2516.00 10.00ZM2547.00 -128.00Q2596.00 -128.00 2626.00 -160.25Q2656.00 -192.50 2656.00 -243.00Q2656.00 -277.00 2642.50 -302.75Q2629.00 -328.50 2604.50 -343.25Q2580.00 -358.00 2547.50 -358.00Q2515.50 -358.00 2491.00 -343.25Q2466.50 -328.50 2452.25 -302.50Q2438.00 -276.50 2438.00 -243.00Q2438.00 -209.50 2452.00 -183.50Q2466.00 -157.50 2490.75 -142.75Q2515.50 -128.00 2547.00 -128.00ZM2649.50 0.00V-130.50L2672.50 -249.00L2649.50 -366.50V-486.00H2800.00V0.00Z M3214.00 0.00 3044.00 -252.00 3213.00 -486.00H3384.00L3180.00 -222.50L3185.00 -286.00L3394.00 0.00ZM2903.00 0.00V-726.00H3056.00V0.00Z"/></g><rect width="1000" height="1000" filter="url(#poster10001000n)" opacity="0.55" style="mix-blend-mode:overlay"/><rect width="1000" height="1000" filter="url(#poster10001000n)" opacity="0.045"/></g></svg>
diff --git a/blueprints/rustrak/docker-compose.yml b/blueprints/rustrak/docker-compose.yml
index 1203e9c12..e83d7f9e8 100644
--- a/blueprints/rustrak/docker-compose.yml
+++ b/blueprints/rustrak/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   rustrak:
-    image: abians7/rustrak-server:v0.2.1
+    image: rustrak/rustrak-server:latest
     restart: unless-stopped
     environment:
       - HOST=0.0.0.0
diff --git a/blueprints/rustrak/meta.json b/blueprints/rustrak/meta.json
index b841c197a..26f8caa63 100644
--- a/blueprints/rustrak/meta.json
+++ b/blueprints/rustrak/meta.json
@@ -1,11 +1,11 @@
 {
   "id": "rustrak",
   "name": "Rustrak",
-  "version": "0.2.1",
-  "description": "Self-hosted error tracking compatible with Sentry SDKs. Server only, written in Rust with <100MB memory footprint and SQLite storage. No external database required.",
+  "version": "latest",
+  "description": "Self-hosted error tracking compatible with Sentry SDKs. Server only, written in Rust: 32 MB of memory at idle, with SQLite storage. No external database required.",
   "logo": "rustrak.svg",
   "links": {
-    "github": "https://github.com/AbianS/rustrak",
+    "github": "https://github.com/rustrak/rustrak",
     "website": "https://rustrak.github.io/rustrak/",
     "docs": "https://rustrak.github.io/rustrak/getting-started/overview"
   },
diff --git a/blueprints/rustrak/rustrak.svg b/blueprints/rustrak/rustrak.svg
index 11d87e475..c12c62cac 100644
--- a/blueprints/rustrak/rustrak.svg
+++ b/blueprints/rustrak/rustrak.svg
@@ -1,6 +1 @@
-<svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg">
-  <rect width="512" height="512" rx="96" fill="#C5F11E"/>
-  <polygon points="274,90 108,291 256,291 238,422 404,221 256,221"
-          fill="#0A0A0A" stroke="#0A0A0A" stroke-width="20"
-          stroke-linejoin="round" stroke-linecap="round"/>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 1000"><defs><radialGradient id="poster10001000b0"><stop offset="0" stop-color="#c5f11e" stop-opacity="1.0"/><stop offset=".55" stop-color="#c5f11e" stop-opacity="0.55"/><stop offset="1" stop-color="#c5f11e" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b1"><stop offset="0" stop-color="#aed800" stop-opacity="0.95"/><stop offset=".55" stop-color="#aed800" stop-opacity="0.52"/><stop offset="1" stop-color="#aed800" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b2"><stop offset="0" stop-color="#96bd00" stop-opacity="0.85"/><stop offset=".55" stop-color="#96bd00" stop-opacity="0.47"/><stop offset="1" stop-color="#96bd00" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b3"><stop offset="0" stop-color="#030303" stop-opacity="1.0"/><stop offset=".55" stop-color="#030303" stop-opacity="0.55"/><stop offset="1" stop-color="#030303" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b4"><stop offset="0" stop-color="#030303" stop-opacity="0.95"/><stop offset=".55" stop-color="#030303" stop-opacity="0.52"/><stop offset="1" stop-color="#030303" stop-opacity="0"/></radialGradient><filter id="poster10001000f" x="-25%" y="-25%" width="150%" height="150%" color-interpolation-filters="sRGB"><feGaussianBlur stdDeviation="62" result="b"/><feTurbulence type="fractalNoise" baseFrequency="0.0026" numOctaves="2" seed="11" result="t"/><feDisplacementMap in="b" in2="t" scale="76" xChannelSelector="R" yChannelSelector="G"/></filter><filter id="poster10001000n" x="0" y="0" width="100%" height="100%"><feTurbulence type="fractalNoise" baseFrequency="0.52" numOctaves="4" seed="3" stitchTiles="stitch" result="t"/><feColorMatrix in="t" type="saturate" values="0" result="g"/><feComponentTransfer in="g"><feFuncA type="linear" slope="2.1" intercept="-0.42"/></feComponentTransfer></filter><clipPath id="poster10001000c"><rect width="1000" height="1000"/></clipPath></defs><g clip-path="url(#poster10001000c)"><rect width="1000" height="1000" fill="#030303"/><g filter="url(#poster10001000f)"><g transform="scale(1.3) translate(-115 -115)"><ellipse cx="200" cy="140" rx="560" ry="482" fill="url(#poster10001000b0)"/><ellipse cx="400" cy="300" rx="420" ry="361" fill="url(#poster10001000b1)"/><ellipse cx="60" cy="480" rx="364" ry="313" fill="url(#poster10001000b2)"/><ellipse cx="780" cy="740" rx="580" ry="499" fill="url(#poster10001000b3)"/><ellipse cx="580" cy="960" rx="400" ry="344" fill="url(#poster10001000b4)"/></g></g><g transform="translate(205.5 560.9) scale(0.17084)"><path fill="#ffffff" d="M54.00 0.00V-486.00H207.00V0.00ZM207.00 -266.50 142.50 -316.50Q161.50 -402.00 207.00 -449.00Q252.49 -496.00 331.50 -496.00Q366.50 -496.00 393.25 -485.50Q420.00 -475.00 440.00 -453.00L349.00 -338.00Q339.00 -349.00 324.19 -354.75Q309.39 -360.50 290.00 -360.50Q252.00 -360.50 229.50 -337.13Q207.00 -313.75 207.00 -266.50Z M708.50 11.00Q642.20 11.00 590.60 -16.50Q539.00 -44.00 509.75 -92.67Q480.50 -141.35 480.50 -204.39V-486.00H633.50V-206.00Q633.50 -180.92 642.44 -162.80Q651.38 -144.69 668.43 -134.84Q685.48 -125.00 708.66 -125.00Q743.00 -125.00 763.00 -146.53Q783.00 -168.06 783.00 -206.00V-486.00H936.00V-204.50Q936.00 -140.50 907.00 -92.00Q878.00 -43.50 826.78 -16.25Q775.57 11.00 708.50 11.00Z M1203.50 12.50Q1160.50 12.50 1119.00 1.25Q1077.50 -10.00 1042.25 -30.25Q1007.00 -50.50 982.00 -78.00L1068.50 -166.00Q1093.00 -139.50 1126.00 -125.25Q1159.00 -111.00 1198.00 -111.00Q1225.00 -111.00 1239.25 -118.75Q1253.50 -126.50 1253.50 -141.00Q1253.50 -159.00 1236.25 -168.50Q1219.00 -178.00 1192.00 -185.25Q1165.00 -192.50 1135.00 -201.75Q1105.00 -211.00 1077.75 -227.00Q1050.50 -243.00 1033.50 -271.25Q1016.50 -299.50 1016.50 -344.00Q1016.50 -390.50 1040.50 -425.25Q1064.50 -460.00 1108.50 -479.75Q1152.50 -499.50 1212.00 -499.50Q1273.50 -499.50 1326.25 -478.25Q1379.00 -457.00 1412.00 -414.50L1325.00 -326.50Q1302.00 -353.50 1273.50 -364.75Q1245.00 -376.00 1217.50 -376.00Q1191.50 -376.00 1178.75 -368.25Q1166.00 -360.50 1166.00 -347.00Q1166.00 -331.50 1183.00 -322.50Q1200.00 -313.50 1227.00 -306.50Q1254.00 -299.50 1283.75 -289.75Q1313.50 -280.00 1340.50 -262.75Q1367.50 -245.50 1384.50 -217.00Q1401.50 -188.50 1401.50 -143.00Q1401.50 -71.50 1348.00 -29.50Q1294.50 12.50 1203.50 12.50Z M1549.00 0.00V-687.00H1702.00V0.00ZM1439.00 -356.00V-486.00H1812.00V-356.00Z M1874.00 0.00V-486.00H2027.00V0.00ZM2027.00 -266.50 1962.50 -316.50Q1981.50 -402.00 2027.00 -449.00Q2072.49 -496.00 2151.50 -496.00Q2186.50 -496.00 2213.25 -485.50Q2240.00 -475.00 2260.00 -453.00L2169.00 -338.00Q2159.00 -349.00 2144.19 -354.75Q2129.39 -360.50 2110.00 -360.50Q2072.00 -360.50 2049.50 -337.13Q2027.00 -313.75 2027.00 -266.50Z M2516.00 10.00Q2449.00 10.00 2396.25 -23.00Q2343.50 -56.00 2313.25 -113.00Q2283.00 -170.00 2283.00 -242.50Q2283.00 -315.50 2313.25 -372.75Q2343.50 -430.00 2396.25 -463.00Q2449.00 -496.00 2516.00 -496.00Q2565.00 -496.00 2604.50 -477.00Q2644.00 -458.00 2668.75 -424.50Q2693.50 -391.00 2697.00 -348.00V-138.00Q2693.50 -95.00 2669.00 -61.50Q2644.50 -28.00 2604.75 -9.00Q2565.00 10.00 2516.00 10.00ZM2547.00 -128.00Q2596.00 -128.00 2626.00 -160.25Q2656.00 -192.50 2656.00 -243.00Q2656.00 -277.00 2642.50 -302.75Q2629.00 -328.50 2604.50 -343.25Q2580.00 -358.00 2547.50 -358.00Q2515.50 -358.00 2491.00 -343.25Q2466.50 -328.50 2452.25 -302.50Q2438.00 -276.50 2438.00 -243.00Q2438.00 -209.50 2452.00 -183.50Q2466.00 -157.50 2490.75 -142.75Q2515.50 -128.00 2547.00 -128.00ZM2649.50 0.00V-130.50L2672.50 -249.00L2649.50 -366.50V-486.00H2800.00V0.00Z M3214.00 0.00 3044.00 -252.00 3213.00 -486.00H3384.00L3180.00 -222.50L3185.00 -286.00L3394.00 0.00ZM2903.00 0.00V-726.00H3056.00V0.00Z"/></g><rect width="1000" height="1000" filter="url(#poster10001000n)" opacity="0.55" style="mix-blend-mode:overlay"/><rect width="1000" height="1000" filter="url(#poster10001000n)" opacity="0.045"/></g></svg>

From f343ceb15f0f595dddc7308bf3bd2b2dd91cdb0b Mon Sep 17 00:00:00 2001
From: Benjamin Nussbaum <bnussbau@users.noreply.github.com>
Date: Tue, 25 Aug 2026 04:39:44 +0200
Subject: [PATCH 08/33] feat(blueprint): update trmnl-larapaper template
 (#1101)

---
 blueprints/trmnl-larapaper/docker-compose.yml | 2 +-
 blueprints/trmnl-larapaper/larapaper.svg      | 2 +-
 blueprints/trmnl-larapaper/meta.json          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/blueprints/trmnl-larapaper/docker-compose.yml b/blueprints/trmnl-larapaper/docker-compose.yml
index ffd543065..30006d86f 100644
--- a/blueprints/trmnl-larapaper/docker-compose.yml
+++ b/blueprints/trmnl-larapaper/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   trmnl-larapaper:
-    image: ghcr.io/usetrmnl/larapaper:0.32.1
+    image: ghcr.io/usetrmnl/larapaper:0.33.0
     environment:
       - APP_URL=${APP_URL}
       - PHP_OPCACHE_ENABLE=${PHP_OPCACHE_ENABLE}
diff --git a/blueprints/trmnl-larapaper/larapaper.svg b/blueprints/trmnl-larapaper/larapaper.svg
index b6af57f29..9fc5fdba3 100644
--- a/blueprints/trmnl-larapaper/larapaper.svg
+++ b/blueprints/trmnl-larapaper/larapaper.svg
@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="1000" height="1000"><g clip-path="url(#SvgjsClipPath1056)"><rect width="1000" height="1000" fill="#f54900"></rect><g transform="matrix(29.166666666666668,0,0,29.166666666666668,150,150)"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="24" height="24"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="#ffffff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-trello"><rect width="18" height="18" x="3" y="3" rx="2" ry="2"></rect><rect width="3" height="9" x="7" y="7"></rect><rect width="3" height="5" x="14" y="7"></rect></svg></svg></g></g><defs><clipPath id="SvgjsClipPath1056"><rect width="1000" height="1000" x="0" y="0" rx="200" ry="200"></rect></clipPath></defs></svg>
\ No newline at end of file
+<svg xmlns="http://www.w3.org/2000/svg" width="1000" height="1000" viewBox="0 0 1000 1000"><defs><clipPath id="canvas"><rect width="1000" height="1000" rx="200" ry="200"/></clipPath></defs><g clip-path="url(#canvas)"><rect width="1000" height="1000" fill="#F8654B"/><rect x="150" y="237.5" width="700" height="525" rx="36" fill="#ffffff"/><rect x="198" y="285.5" width="604" height="399" rx="12" fill="#F8654B"/><path fill="#ffffff" fill-rule="evenodd" d="M524.4 614.66V392.04h36.7v-36.7h113.73v36.7h37.1v112.92h-37.1v36.7h-109.7v73Zm40.73-113.73H670.8V396.07H565.13ZM324.77 614.66v-36.3h-36.7V355.34h40.73v219h105.66v-36.7h41.14v40.72h-37.1v36.3Z"/></g></svg>
diff --git a/blueprints/trmnl-larapaper/meta.json b/blueprints/trmnl-larapaper/meta.json
index a3887b2ae..0ff7add6c 100644
--- a/blueprints/trmnl-larapaper/meta.json
+++ b/blueprints/trmnl-larapaper/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "trmnl-larapaper",
   "name": "TRMNL LaraPaper",
-  "version": "0.32.1",
+  "version": "0.33.0",
   "description": "LaraPaper is a self-hosted application (BYOS) to manage TRMNL e-ink devices.",
   "logo": "larapaper.svg",
   "links": {

From aa60cb637a1114174e905caed824cb34f64cbf18 Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Mon, 24 Aug 2026 20:40:55 -0600
Subject: [PATCH 09/33] fix(rustrak-full): bind UI to 0.0.0.0;
 chore(trmnl-larapaper): bump to 0.40.0 (#1105)

- rustrak-full: the Next.js standalone UI bound to $HOSTNAME (container id),
  so Traefik got connection refused and the UI domain returned 502 (pre-existing
  on canary, confirmed by deploying both #1102 and canary). HOSTNAME=0.0.0.0
  was deploy-verified: UI 200 "Rustrak - Error Tracking System".
- trmnl-larapaper: #1101 bumped to 0.33.0 (Apr 2026); upstream is at 0.40.0.
  0.40.0 was deploy-verified on the same template: healthy, /, /login,
  /register, /up all 200.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/rustrak-full/docker-compose.yml    | 3 +++
 blueprints/trmnl-larapaper/docker-compose.yml | 2 +-
 blueprints/trmnl-larapaper/meta.json          | 2 +-
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/blueprints/rustrak-full/docker-compose.yml b/blueprints/rustrak-full/docker-compose.yml
index cbbfdf295..ea1fd0e6c 100644
--- a/blueprints/rustrak-full/docker-compose.yml
+++ b/blueprints/rustrak-full/docker-compose.yml
@@ -23,6 +23,9 @@ services:
     restart: unless-stopped
     environment:
       - RUSTRAK_API_URL=${RUSTRAK_API_URL}
+      # Next.js standalone binds to $HOSTNAME (the container id) by default, which is
+      # unreachable from Traefik on the Dokploy network -> 502. Bind to all interfaces.
+      - HOSTNAME=0.0.0.0
     expose:
       - 3000
     depends_on:
diff --git a/blueprints/trmnl-larapaper/docker-compose.yml b/blueprints/trmnl-larapaper/docker-compose.yml
index 30006d86f..ee2349cc3 100644
--- a/blueprints/trmnl-larapaper/docker-compose.yml
+++ b/blueprints/trmnl-larapaper/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   trmnl-larapaper:
-    image: ghcr.io/usetrmnl/larapaper:0.33.0
+    image: ghcr.io/usetrmnl/larapaper:0.40.0
     environment:
       - APP_URL=${APP_URL}
       - PHP_OPCACHE_ENABLE=${PHP_OPCACHE_ENABLE}
diff --git a/blueprints/trmnl-larapaper/meta.json b/blueprints/trmnl-larapaper/meta.json
index 0ff7add6c..cb5c9659f 100644
--- a/blueprints/trmnl-larapaper/meta.json
+++ b/blueprints/trmnl-larapaper/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "trmnl-larapaper",
   "name": "TRMNL LaraPaper",
-  "version": "0.33.0",
+  "version": "0.40.0",
   "description": "LaraPaper is a self-hosted application (BYOS) to manage TRMNL e-ink devices.",
   "logo": "larapaper.svg",
   "links": {

From fee40dba4cd8ed951adbf2130b5e4fa741548fc5 Mon Sep 17 00:00:00 2001
From: Torikul Islam <iamtoricool@gmail.com>
Date: Tue, 25 Aug 2026 08:43:32 +0600
Subject: [PATCH 10/33] feat: add freellmapi template (#1099)

* feat: add freellmapi template

* fix: align meta.json version with pinned image tag

* fix: use hex helper for ENCRYPTION_KEY
---
 blueprints/freellmapi/docker-compose.yml | 29 ++++++++++++++++++++++++
 blueprints/freellmapi/freellmapi.svg     |  4 ++++
 blueprints/freellmapi/meta.json          | 13 +++++++++++
 blueprints/freellmapi/template.toml      | 14 ++++++++++++
 4 files changed, 60 insertions(+)
 create mode 100644 blueprints/freellmapi/docker-compose.yml
 create mode 100644 blueprints/freellmapi/freellmapi.svg
 create mode 100644 blueprints/freellmapi/meta.json
 create mode 100644 blueprints/freellmapi/template.toml

diff --git a/blueprints/freellmapi/docker-compose.yml b/blueprints/freellmapi/docker-compose.yml
new file mode 100644
index 000000000..663a20390
--- /dev/null
+++ b/blueprints/freellmapi/docker-compose.yml
@@ -0,0 +1,29 @@
+version: "3.8"
+
+services:
+  freellmapi:
+    image: ghcr.io/tashfeenahmed/freellmapi:v0.8.4
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      PORT: ${PORT}
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
+    expose:
+      - 3001
+    volumes:
+      - freellmapi-data:/app/server/data
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:3001/api/ping').then((res) => { if (!res.ok) process.exit(1); }).catch(() => process.exit(1));"
+        ]
+      interval: 30s
+      timeout: 5s
+      start_period: 15s
+      retries: 3
+
+volumes:
+  freellmapi-data:
diff --git a/blueprints/freellmapi/freellmapi.svg b/blueprints/freellmapi/freellmapi.svg
new file mode 100644
index 000000000..b0cf3a88f
--- /dev/null
+++ b/blueprints/freellmapi/freellmapi.svg
@@ -0,0 +1,4 @@
+<svg viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg" aria-hidden="true">
+  <circle cx="16" cy="16" r="11" fill="#ffffff"></circle>
+  <circle cx="16" cy="16" r="4" fill="#10b981"></circle>
+</svg>
\ No newline at end of file
diff --git a/blueprints/freellmapi/meta.json b/blueprints/freellmapi/meta.json
new file mode 100644
index 000000000..2b9c1fda8
--- /dev/null
+++ b/blueprints/freellmapi/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "freellmapi",
+  "name": "FreeLLMAPI",
+  "version": "v0.8.4",
+  "description": "FreeLLMAPI aggregates free tiers from 29 LLM providers into a single OpenAI-compatible endpoint with smart routing, automatic failover, per-key rate tracking, and encrypted key storage.",
+  "logo": "freellmapi.svg",
+  "links": {
+    "github": "https://github.com/tashfeenahmed/freellmapi",
+    "website": "https://freellmapi.co",
+    "docs": "https://github.com/tashfeenahmed/freellmapi/blob/main/docs/install.md"
+  },
+  "tags": ["ai", "proxy", "llm", "openai-compatible", "developer-tools"]
+}
diff --git a/blueprints/freellmapi/template.toml b/blueprints/freellmapi/template.toml
new file mode 100644
index 000000000..d11121588
--- /dev/null
+++ b/blueprints/freellmapi/template.toml
@@ -0,0 +1,14 @@
+[variables]
+main_domain = "${domain}"
+encryption_key = "${hash:64}"
+
+[config]
+[[config.domains]]
+serviceName = "freellmapi"
+port = 3001
+host = "${main_domain}"
+
+[config.env]
+NODE_ENV = "production"
+PORT = "3001"
+ENCRYPTION_KEY = "${encryption_key}"

From b45666793140445cc71948bc4d86906e25df8f9e Mon Sep 17 00:00:00 2001
From: Sadiq Al-Aboudi <75546975+sadiqAlAboudi@users.noreply.github.com>
Date: Tue, 25 Aug 2026 05:44:08 +0300
Subject: [PATCH 11/33] feat(Kanbn): add Kanbn template (#1098)

* feat(Kan): add and test kan template

* chore(Rename): change from kan to kanbn
---
 blueprints/kanbn/docker-compose.yml | 41 +++++++++++++++++++++++++++++
 blueprints/kanbn/logo.svg           |  3 +++
 blueprints/kanbn/meta.json          | 13 +++++++++
 blueprints/kanbn/template.toml      | 19 +++++++++++++
 4 files changed, 76 insertions(+)
 create mode 100644 blueprints/kanbn/docker-compose.yml
 create mode 100644 blueprints/kanbn/logo.svg
 create mode 100644 blueprints/kanbn/meta.json
 create mode 100644 blueprints/kanbn/template.toml

diff --git a/blueprints/kanbn/docker-compose.yml b/blueprints/kanbn/docker-compose.yml
new file mode 100644
index 000000000..0d8f36b1c
--- /dev/null
+++ b/blueprints/kanbn/docker-compose.yml
@@ -0,0 +1,41 @@
+services:
+  kanbn:
+    image: ghcr.io/kanbn/kan:0.6.0
+    restart: unless-stopped
+    expose:
+      - 3000
+    environment:
+      NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL}
+      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
+      POSTGRES_URL: ${POSTGRES_URL}
+      NEXT_PUBLIC_ALLOW_CREDENTIALS: "true"
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+
+  migrate:
+    image: ghcr.io/kanbn/kan-migrate:0.6.0
+    restart: "no"
+    environment:
+      POSTGRES_URL: ${POSTGRES_URL}
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+  postgres:
+    image: postgres:15
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: kan_db
+      POSTGRES_USER: kan
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+    volumes:
+      - kan_postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U kan -d kan_db"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+volumes:
+  kan_postgres_data:
\ No newline at end of file
diff --git a/blueprints/kanbn/logo.svg b/blueprints/kanbn/logo.svg
new file mode 100644
index 000000000..5a6ffb8a4
--- /dev/null
+++ b/blueprints/kanbn/logo.svg
@@ -0,0 +1,3 @@
+<svg width="2400" height="900" viewBox="0 0 2400 900" xmlns="http://www.w3.org/2000/svg">
+    <text id="kanbn" xml:space="preserve" x="239" y="681" font-family="Plus Jakarta Sans" font-size="598" font-weight="800" fill="#ededed" letter-spacing="-29.9">kan.bn</text>
+</svg>
diff --git a/blueprints/kanbn/meta.json b/blueprints/kanbn/meta.json
new file mode 100644
index 000000000..bbab1c76e
--- /dev/null
+++ b/blueprints/kanbn/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "kanbn",
+  "name": "Kanbn",
+  "version": "0.6.0",
+  "description": "The open-source project management alternative to Trello.",
+  "logo": "logo.svg",
+  "links": {
+    "website": "https://kan.bn/",
+    "github": "https://github.com/kanbn/kan",
+    "docs": "https://docs.kan.bn/"
+  },
+  "tags": ["collaboration", "project-management", "kanban-board", "task-management"]
+}
\ No newline at end of file
diff --git a/blueprints/kanbn/template.toml b/blueprints/kanbn/template.toml
new file mode 100644
index 000000000..6bf191a8d
--- /dev/null
+++ b/blueprints/kanbn/template.toml
@@ -0,0 +1,19 @@
+[variables]
+main_domain = "${domain}"
+postgres_password = "${password:32}"
+better_auth_secret = "${password:32}"
+
+[config]
+
+[[config.domains]]
+serviceName = "kanbn"
+port = 3000
+host = "${main_domain}"
+https = true
+
+[config.env]
+NEXT_PUBLIC_BASE_URL = "https://${main_domain}"
+BETTER_AUTH_SECRET = "${better_auth_secret}"
+POSTGRES_PASSWORD = "${postgres_password}"
+POSTGRES_URL = "postgresql://kan:${postgres_password}@postgres:5432/kan_db"
+NEXT_PUBLIC_ALLOW_CREDENTIALS = "true"
\ No newline at end of file

From 73d257ec111dea791806219bf4bcf91bbf710654 Mon Sep 17 00:00:00 2001
From: Sadiq Al-Aboudi <75546975+sadiqAlAboudi@users.noreply.github.com>
Date: Tue, 25 Aug 2026 05:44:44 +0300
Subject: [PATCH 12/33] feat(GoatCounter): Add GoatCounter template (#1096)

* init

* fix(goatcounter): error on deployment
---
 blueprints/goatcounter/docker-compose.yml | 33 +++++++++++++++++++++++
 blueprints/goatcounter/logo.svg           |  1 +
 blueprints/goatcounter/meta.json          | 13 +++++++++
 blueprints/goatcounter/template.toml      | 12 +++++++++
 4 files changed, 59 insertions(+)
 create mode 100644 blueprints/goatcounter/docker-compose.yml
 create mode 100644 blueprints/goatcounter/logo.svg
 create mode 100644 blueprints/goatcounter/meta.json
 create mode 100644 blueprints/goatcounter/template.toml

diff --git a/blueprints/goatcounter/docker-compose.yml b/blueprints/goatcounter/docker-compose.yml
new file mode 100644
index 000000000..a19a689af
--- /dev/null
+++ b/blueprints/goatcounter/docker-compose.yml
@@ -0,0 +1,33 @@
+services:
+  postgres:
+    image: postgres:18-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: goatcounter
+      POSTGRES_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD is required}
+      POSTGRES_DB: goatcounter
+    volumes:
+      - postgres_data:/var/lib/postgresql
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U goatcounter -d goatcounter"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+
+  goatcounter:
+    image: arp242/goatcounter:2.7
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+    expose:
+      - "8080"
+    environment:
+      GOATCOUNTER_DB: "postgresql+postgresql://goatcounter:${DB_PASSWORD:?DB_PASSWORD is required}@postgres:5432/goatcounter?sslmode=disable"
+      GOATCOUNTER_LISTEN: "0.0.0.0:8080"
+    command:
+      - serve
+      - -automigrate
+
+volumes:
+  postgres_data:
\ No newline at end of file
diff --git a/blueprints/goatcounter/logo.svg b/blueprints/goatcounter/logo.svg
new file mode 100644
index 000000000..9477e0354
--- /dev/null
+++ b/blueprints/goatcounter/logo.svg
@@ -0,0 +1 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 417 429" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:1.5;"><rect id="Artboard4" x="0.586" y="0" width="415.356" height="428.505" style="fill:none;"/><clipPath id="_clip1"><rect x="0.586" y="0" width="415.356" height="428.505"/></clipPath><g clip-path="url(#_clip1)"><path d="M25.399,235.075l118.517,-135.285c0,0 -124.734,-57.004 -120.995,-58.98c182.412,-96.381 370.769,214.033 370.769,214.033l-24.839,65.501c0,0 -169.954,-0.509 -192.464,-75.727" style="fill:none;stroke:#9a15a4;stroke-width:44.5px;"/><path d="M179.11,406.252c-0.044,-36.273 38.389,-117.225 38.389,-117.225" style="fill:none;stroke:#9a15a4;stroke-width:44.5px;"/></g></svg>
\ No newline at end of file
diff --git a/blueprints/goatcounter/meta.json b/blueprints/goatcounter/meta.json
new file mode 100644
index 000000000..45c713e95
--- /dev/null
+++ b/blueprints/goatcounter/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "goatcounter",
+  "name": "GoatCounter",
+  "version": "2.7.0",
+  "description": "GoatCounter is an open source web analytics platform available as a free donation-supported hosted service or self-hosted app. It aims to offer easy to use and meaningful privacy-friendly web analytics as an alternative to Google Analytics or Matomo.",
+  "logo": "logo.svg",
+  "links": {
+    "website": "https://www.goatcounter.com/",
+    "github": "https://github.com/arp242/goatcounter",
+    "docs": "https://www.goatcounter.com/help/"
+  },
+  "tags": ["analytics", "privacy"]
+}
\ No newline at end of file
diff --git a/blueprints/goatcounter/template.toml b/blueprints/goatcounter/template.toml
new file mode 100644
index 000000000..040ae979b
--- /dev/null
+++ b/blueprints/goatcounter/template.toml
@@ -0,0 +1,12 @@
+[variables]
+db_password = "${password:32}"
+goatcounter_domain = "${domain}"
+
+[config]
+env = ["DB_PASSWORD=${db_password}"]
+
+[[config.domains]]
+serviceName = "goatcounter"
+port = 8080
+host = "${goatcounter_domain}"
+https = true
\ No newline at end of file

From e4cd30c15a2c0e1e664af92e97fb2f268f40905a Mon Sep 17 00:00:00 2001
From: Sonny <24420064+Sonny93@users.noreply.github.com>
Date: Tue, 25 Aug 2026 04:57:54 +0200
Subject: [PATCH 13/33] Add MyLinks template (#1089)

* feat: add MyLinks template

* fix: correct postgres volume mount path

* fix: add compose version key required by Dokploy

* fix(my-links): healthcheck via 127.0.0.1 (localhost resolves to ::1 on Alpine, app listens on IPv4 only)

---------

Co-authored-by: Mauricio Siu <siumauricio@icloud.com>
Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
---
 blueprints/my-links/docker-compose.yml | 47 ++++++++++++++++++++++++++
 blueprints/my-links/meta.json          | 13 +++++++
 blueprints/my-links/my-links.svg       |  5 +++
 blueprints/my-links/template.toml      | 17 ++++++++++
 4 files changed, 82 insertions(+)
 create mode 100644 blueprints/my-links/docker-compose.yml
 create mode 100644 blueprints/my-links/meta.json
 create mode 100644 blueprints/my-links/my-links.svg
 create mode 100644 blueprints/my-links/template.toml

diff --git a/blueprints/my-links/docker-compose.yml b/blueprints/my-links/docker-compose.yml
new file mode 100644
index 000000000..71d8ff3cf
--- /dev/null
+++ b/blueprints/my-links/docker-compose.yml
@@ -0,0 +1,47 @@
+version: "3.8"
+services:
+  my-links:
+    environment:
+      - APP_KEY
+      - APP_URL
+      - DB_PASSWORD
+      - DB_HOST=postgres
+      - DB_PORT=5432
+      - DB_USER=mylinks
+      - DB_DATABASE=mylinks
+      - HOST=0.0.0.0
+      - PORT=3333
+      - NODE_ENV=production
+      - LOG_LEVEL=info
+    restart: unless-stopped
+    image: sonny93/my-links:5.3.0
+    expose:
+      - 3333
+    depends_on:
+      postgres:
+        condition: service_healthy
+    healthcheck:
+      test: ['CMD-SHELL', 'wget -qO- http://127.0.0.1:3333/ >/dev/null || exit 1']
+      interval: 30s
+      retries: 3
+      start_period: 30s
+      timeout: 10s
+
+  postgres:
+    image: postgres:18-alpine
+    restart: unless-stopped
+    user: postgres
+    environment:
+      POSTGRES_USER: mylinks
+      POSTGRES_DB: mylinks
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+    volumes:
+      - postgres-data:/var/lib/postgresql
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  postgres-data:
diff --git a/blueprints/my-links/meta.json b/blueprints/my-links/meta.json
new file mode 100644
index 000000000..f7abaf0be
--- /dev/null
+++ b/blueprints/my-links/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "my-links",
+  "name": "MyLinks",
+  "version": "5.3.0",
+  "description": "Self-hostable bookmark manager to organize, search and share your favorite links.",
+  "logo": "my-links.svg",
+  "links": {
+    "github": "https://github.com/my-links/my-links",
+    "website": "https://www.mylinks.app",
+    "docs": "https://docs.mylinks.app"
+  },
+  "tags": ["bookmarks", "link-sharing"]
+}
diff --git a/blueprints/my-links/my-links.svg b/blueprints/my-links/my-links.svg
new file mode 100644
index 000000000..7409f0af9
--- /dev/null
+++ b/blueprints/my-links/my-links.svg
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<svg viewBox="0 0 200 200" xmlns="http://www.w3.org/2000/svg">
+  <path d="M 106.813 73.354 L 86.501 73.355 C 86.501 84.421 95.594 93.398 106.813 93.398 C 124.952 93.398 139.996 108.476 139.996 126.656 L 140 126.656 C 140 144.835 124.956 159.913 106.816 159.913 L 0 159.913 L 62.001 200 L 62.001 189.977 C 62.001 184.441 66.476 179.956 72 179.956 L 106.816 179.956 L 106.816 179.962 C 136.14 179.962 159.999 156.048 159.999 126.656 C 159.999 97.266 136.14 73.354 106.813 73.354 Z" fill="#3f88c5" />
+  <path d="M 93.184 126.646 L 113.498 126.645 C 113.498 115.579 104.402 106.603 93.184 106.603 C 75.042 106.603 60 91.524 60 73.344 C 60 55.165 75.044 40.09 93.184 40.09 L 200 40.09 L 137.999 0 L 137.999 10.023 C 137.999 15.559 133.524 20.044 128 20.044 L 93.184 20.044 L 93.184 20.039 C 63.86 20.039 40.001 43.951 40.001 73.344 L 39.997 73.344 C 39.997 102.735 63.855 126.646 93.184 126.646 Z" fill="#3f88c5" />
+</svg>
diff --git a/blueprints/my-links/template.toml b/blueprints/my-links/template.toml
new file mode 100644
index 000000000..782e5c4a2
--- /dev/null
+++ b/blueprints/my-links/template.toml
@@ -0,0 +1,17 @@
+[variables]
+main_domain = "${domain}"
+app_key = "${base64:32}"
+db_password = "${password}"
+
+[config]
+mounts = []
+
+[[config.domains]]
+serviceName = "my-links"
+port = 3_333
+host = "${main_domain}"
+
+[config.env]
+APP_KEY = "${app_key}"
+APP_URL = "http://${main_domain}"
+DB_PASSWORD = "${db_password}"

From 6621a29d5443c8edf621c4e66ba5365a9b14bc38 Mon Sep 17 00:00:00 2001
From: Vitaliy Kukharik <37010174+vitabaks@users.noreply.github.com>
Date: Tue, 25 Aug 2026 04:58:32 +0200
Subject: [PATCH 14/33] Autobase: bump to v2.10.0 (#1088)

Update Autobase Docker image from 2.7.2 to 2.10.0 in docker-compose.yml and sync the blueprint meta.json version to match.
---
 blueprints/autobase/docker-compose.yml | 2 +-
 blueprints/autobase/meta.json          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/blueprints/autobase/docker-compose.yml b/blueprints/autobase/docker-compose.yml
index 7b931d9e7..148925bab 100644
--- a/blueprints/autobase/docker-compose.yml
+++ b/blueprints/autobase/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   autobase-console:
-    image: autobase/console:2.7.2
+    image: autobase/console:2.10.0
     restart: unless-stopped
     expose:
       - "80"
diff --git a/blueprints/autobase/meta.json b/blueprints/autobase/meta.json
index 1f913592a..0368e5609 100644
--- a/blueprints/autobase/meta.json
+++ b/blueprints/autobase/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "autobase",
   "name": "Autobase",
-  "version": "2.7.2",
+  "version": "2.10.0",
   "description": "Autobase for PostgreSQL® is an open-source alternative to cloud-managed databases (self-hosted DBaaS).",
   "links": {
     "github": "https://github.com/vitabaks/autobase",

From 63635b1ff63b3646eaa5937a32ed797ab28cbabe Mon Sep 17 00:00:00 2001
From: Abbas Aga <99952598+Uaghazade1@users.noreply.github.com>
Date: Tue, 25 Aug 2026 06:20:43 +0300
Subject: [PATCH 15/33] feat(openanalytics): add Open Analytics blueprint
 (#1094)

---
 blueprints/openanalytics/docker-compose.yml | 528 ++++++++++++++++++++
 blueprints/openanalytics/logo.svg           |  19 +
 blueprints/openanalytics/meta.json          |  13 +
 blueprints/openanalytics/template.toml      | 144 ++++++
 4 files changed, 704 insertions(+)
 create mode 100644 blueprints/openanalytics/docker-compose.yml
 create mode 100644 blueprints/openanalytics/logo.svg
 create mode 100644 blueprints/openanalytics/meta.json
 create mode 100644 blueprints/openanalytics/template.toml

diff --git a/blueprints/openanalytics/docker-compose.yml b/blueprints/openanalytics/docker-compose.yml
new file mode 100644
index 000000000..3d1aab697
--- /dev/null
+++ b/blueprints/openanalytics/docker-compose.yml
@@ -0,0 +1,528 @@
+# OpenAnalytics for Dokploy's template catalogue.
+#
+# This folder is the blueprint submitted to `Dokploy/templates` as
+# `blueprints/openanalytics/`; the copy here is the source of truth and the two
+# must not drift. The operator walkthrough is `../DOKPLOY.md`.
+#
+# Derived from `../docker-compose.coolify.yml`, the tested one-click shape.
+# What changed for this platform, and nothing else did:
+#
+# 1. **Generated values arrive through the project `.env`.** Dokploy renders
+#    `template.toml`'s variables into one `.env` file, and this file references
+#    them with `${...}` per service. DO NOT "simplify" this into a shared
+#    `env_file:`: every service has a FORBIDDEN_KEYS list and EXITS AT STARTUP
+#    when handed a secret it must not hold (`packages/domain/src/env.ts`). One
+#    shared env block would hand every service every secret and nothing would
+#    boot. That is the design working, not a bug: the collector is
+#    internet-facing and must not reach ClickHouse; the gateway verifies
+#    signatures and must not hold the key that mints them.
+#
+# 2. **A Caddy edge replaces Coolify's Traefik-label middleware.** Dokploy's
+#    Traefik owns TLS and writes `X-Forwarded-For` and `X-Real-Ip` from the
+#    connection, but it passes `CF-Connecting-IP` and its family through,
+#    because they are nobody's standard. Without stripping them, any visitor
+#    picks their own rate-limit bucket or writes their own country into your
+#    analytics. All four domains therefore point at `edge`, which deletes that
+#    family before anything internal sees it. The Caddyfile arrives as a
+#    template mount (`../files/Caddyfile`).
+#
+# 3. **`mem_limit` is gone; the ClickHouse ulimits stay.** The valkey-queue
+#    memory bound still holds: `maxmemory` lives in the conf baked into the
+#    image.
+#
+# ## Images
+#
+# Pinned to `v0.5.0`. The floor is `v0.4.0`, the first release whose
+# `collector` image serves `oa.js` itself — before it, the one file a customer
+# pastes into their page answered 404 on installs with no tracker builder.
+# Nothing here builds: the platform pulls nine of our images plus postgres,
+# alpine and caddy. `OA_IMAGE_TAG` in the environment tab overrides the pin;
+# move it only together with this file (the env shape and the migrations are
+# versioned with the images).
+
+x-node-healthcheck: &node-healthcheck
+  test:
+    [
+      'CMD',
+      'node',
+      '-e',
+      "fetch('http://127.0.0.1:'+process.env.PORT+'/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+    ]
+  interval: 15s
+  timeout: 5s
+  retries: 10
+  start_period: 30s
+
+services:
+  # --- stores ---------------------------------------------------------------
+
+  postgres:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: openanalytics
+      POSTGRES_DB: openanalytics
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+    volumes:
+      - pg-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"']
+      interval: 10s
+      timeout: 5s
+      retries: 10
+
+  # Upstream's server plus our config drop-in and the entrypoint that renders
+  # the four users, baked into the image (a one-click platform has no checkout
+  # to bind-mount them from).
+  clickhouse:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/clickhouse:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      CLICKHOUSE_INGEST_PASSWORD: ${CLICKHOUSE_INGEST_PASSWORD}
+      CLICKHOUSE_READ_PASSWORD: ${CLICKHOUSE_READ_PASSWORD}
+      CLICKHOUSE_MAINTENANCE_PASSWORD: ${CLICKHOUSE_MAINTENANCE_PASSWORD}
+      CLICKHOUSE_MIGRATION_PASSWORD: ${CLICKHOUSE_MIGRATION_PASSWORD}
+    volumes:
+      - ch-data:/var/lib/clickhouse
+    ulimits:
+      nofile:
+        soft: 262144
+        hard: 262144
+    healthcheck:
+      test: ['CMD', 'clickhouse-client', '--query', 'SELECT 1']
+      interval: 10s
+      timeout: 5s
+      retries: 20
+      start_period: 20s
+
+  # The durable event queue. Between the collector's 202 and the worker's
+  # insert this instance holds the only copy of an event.
+  valkey-queue:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/valkey:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      VALKEY_PASSWORD: ${VALKEY_QUEUE_PASSWORD}
+      # One image, two policies. Durable: appendonly, no eviction. Named rather
+      # than defaulted, because a default would be a guess about whether an
+      # acknowledged event may be evicted before the worker inserts it.
+      OA_VALKEY_CONF: /usr/local/etc/valkey/valkey-queue.conf
+    volumes:
+      - valkey-queue-data:/data
+    healthcheck:
+      test: ['CMD-SHELL', 'REDISCLI_AUTH="$$VALKEY_PASSWORD" valkey-cli ping | grep -q PONG']
+      interval: 10s
+      timeout: 5s
+      retries: 10
+
+  # Presence, rate-limit counters, short-lived caches. Losable by design.
+  valkey-realtime:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/valkey:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      VALKEY_PASSWORD: ${VALKEY_REALTIME_PASSWORD}
+      # Losable by design: allkeys-lru inside a memory bound.
+      OA_VALKEY_CONF: /usr/local/etc/valkey/valkey-realtime.conf
+    volumes:
+      - valkey-realtime-data:/data
+    healthcheck:
+      test: ['CMD-SHELL', 'REDISCLI_AUTH="$$VALKEY_PASSWORD" valkey-cli ping | grep -q PONG']
+      interval: 10s
+      timeout: 5s
+      retries: 10
+
+  # --- one-shot: the three signing pairs, and the credential keyring ---------
+  #
+  # No platform generator can make either: a keypair whose halves must match
+  # across two services is not a random string, and the keyring wants exactly
+  # 32 bytes. So both are made inside the stack and handed over as files.
+  #
+  # Four separate key volumes rather than one, so the split between the api's
+  # private halves and each verifier's public half is a filesystem fact and not
+  # a convention: a single shared volume would put every private half one `cat`
+  # away from every service that only verifies.
+  #
+  # Idempotent, and that is load-bearing: platforms re-run the whole stack on
+  # every redeploy, and regenerating would rotate all three pairs behind
+  # everyone's back. Each half is written only when missing, and a missing
+  # public half is derived from the private one, so an interrupted volume
+  # repairs itself.
+  #
+  # EVERY LITERAL DOLLAR IS DOUBLED. Compose substitutes dollar-variables
+  # before the container sees the command, so a single-dollar `$pair` would
+  # arrive as an empty string and this would write `/keys/api/.private.pem`
+  # three times.
+  keygen:
+    image: alpine:3.21
+    restart: 'no'
+    command:
+      - sh
+      - -ec
+      - |
+        apk add --no-cache openssl >/dev/null
+        mkdir -p /keys/api /keys/gateway /keys/realtime /keyring
+        for entry in "query gateway" "realtime realtime"; do
+          set -- $$entry
+          pair=$$1
+          dest=$$2
+          if [ ! -f "/keys/api/$$pair.private.pem" ]; then
+            openssl genpkey -algorithm ed25519 -out "/keys/api/$$pair.private.pem"
+            echo "$$pair: private half generated"
+          else
+            echo "$$pair: private half exists, left alone"
+          fi
+          if [ ! -f "/keys/$$dest/$$pair.public.pem" ]; then
+            openssl pkey -in "/keys/api/$$pair.private.pem" -pubout \
+              -out "/keys/$$dest/$$pair.public.pem"
+            echo "$$pair: public half derived for $$dest"
+          fi
+        done
+        # 32 bytes, which is what `CREDENTIAL_KEY_BYTES` in
+        # `packages/integrations/src/credential-vault.ts` checks rather than
+        # trusts. Written only when missing: rotating it on a redeploy would
+        # strand every provider credential a customer had already connected.
+        if [ ! -f /keyring/credential-keyring.json ]; then
+          printf '{"active":"k1","keys":{"k1":"%s"}}' "$$(openssl rand -base64 32)" \
+            > /keyring/credential-keyring.json
+          echo "credential keyring: generated"
+        else
+          echo "credential keyring: exists, left alone"
+        fi
+        # uid 1000 is `node` in the runtime image, which is the user every
+        # service runs as.
+        chown -R 1000:1000 /keys /keyring
+        chmod 700 /keys/api /keys/gateway /keys/realtime /keyring
+        chmod 400 /keys/api/*.pem /keyring/credential-keyring.json
+        chmod 444 /keys/gateway/*.pem /keys/realtime/*.pem
+        ls -l /keys/api /keys/gateway /keys/realtime /keyring
+    volumes:
+      - keys-api:/keys/api
+      - keys-gateway:/keys/gateway
+      - keys-realtime:/keys/realtime
+      - keyring:/keyring
+
+  # --- one-shot: the geo database -------------------------------------------
+  #
+  # DB-IP City Lite and not MaxMind, and the licence is the whole reason:
+  # GeoLite2 needs an account and a licence key and forbids redistribution, so
+  # nothing could fetch it on your behalf. DB-IP City Lite is CC BY 4.0, a
+  # direct download. The attribution is a licence condition rather than a
+  # courtesy, and it belongs wherever you show the data:
+  # "IP Geolocation by DB-IP, https://db-ip.com, CC BY 4.0."
+  #
+  # The network is a first-install dependency only: the file is written once
+  # and every later deploy short-circuits on the first line. To refresh it,
+  # delete it from the volume and redeploy. A failed download fails the deploy,
+  # which is the lesser evil: the collector refuses to start on a `GEOIP_DB_PATH`
+  # that names no file, so the alternative is a crash loop one step further
+  # from its cause.
+  geoip:
+    image: alpine:3.21
+    restart: 'no'
+    command:
+      - sh
+      - -ec
+      - |
+        if [ -f /geoip/dbip-city-lite.mmdb ]; then
+          echo "geoip: database present, left alone"
+          exit 0
+        fi
+        apk add --no-cache curl >/dev/null
+
+        # Two candidates. A month's build appears a day or two into it, so on the
+        # first of the month the current one is a 404 rather than an error.
+        # Written out rather than `date -d '1 month ago'`, which busybox does not
+        # take. Leading zeros are stripped because POSIX arithmetic reads `08` as
+        # octal and refuses it.
+        y=$$(date -u +%Y)
+        m=$$(date -u +%m | sed "s/^0*//")
+        pm=$$((m - 1))
+        py=$$y
+        if [ "$$pm" -le 0 ]; then pm=12; py=$$((y - 1)); fi
+        prev=$$(printf "%04d-%02d" "$$py" "$$pm")
+
+        fetched=""
+        for month in "$$(date -u +%Y-%m)" "$$prev"; do
+          echo "geoip: trying $$month"
+          # --fail so a 404 is a non-zero exit rather than an HTML error page
+          # saved as a .gz, which would fail later inside gzip with nothing
+          # pointing here.
+          if curl -fsSL --retry 2 --max-time 300 -o /tmp/dbip.gz \
+            "https://download.db-ip.com/free/dbip-city-lite-$$month.mmdb.gz"; then
+            fetched="$$month"
+            break
+          fi
+        done
+        if [ -z "$$fetched" ]; then
+          echo "geoip: no build available. Check https://db-ip.com/db/download/ip-to-city-lite" >&2
+          exit 1
+        fi
+
+        gzip -dc /tmp/dbip.gz > /tmp/dbip.mmdb
+        # Verified before it is moved into place. Every MaxMind-format file ends
+        # with the metadata marker; `strings` and not `grep -a`, because
+        # busybox's `-a` does not match inside this file.
+        if ! tail -c 200000 /tmp/dbip.mmdb | strings | grep -q "MaxMind.com"; then
+          echo "geoip: the download is not a MaxMind-format database" >&2
+          exit 1
+        fi
+        # Moved last, so an interrupted run leaves nothing half-written.
+        mv /tmp/dbip.mmdb /geoip/dbip-city-lite.mmdb
+        chown 1000:1000 /geoip/dbip-city-lite.mmdb
+        chmod 444 /geoip/dbip-city-lite.mmdb
+        echo "geoip: wrote dbip-city-lite.mmdb ($$fetched, $$(du -h /geoip/dbip-city-lite.mmdb | cut -f1))"
+        echo "geoip: IP Geolocation by DB-IP, https://db-ip.com, CC BY 4.0."
+    volumes:
+      - geoip:/geoip
+
+  # --- one-shot: schemas ----------------------------------------------------
+  #
+  # Both stores build from empty. Re-runs are safe and are the upgrade path:
+  # both runners keep a ledger and apply only what is pending.
+  migrate:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/migrate:${OA_IMAGE_TAG:-v0.5.0}
+    restart: 'no'
+    # Required, not decoration: this is the worker's image under another tag,
+    # so without an entrypoint of its own it boots as the worker and is refused
+    # by the least-privilege boundary. The two CLIs are what a migration is.
+    entrypoint:
+      ['sh', '-c', 'node packages/postgres/dist/cli.js && node packages/clickhouse/dist/cli.js']
+    environment:
+      ENVIRONMENT: production
+      POSTGRES_MIGRATION_URL: postgres://openanalytics:${POSTGRES_PASSWORD}@postgres:5432/openanalytics
+      CLICKHOUSE_URL: http://clickhouse:8123
+      # `analytics`, and it cannot be anything else: the ClickHouse entrypoint
+      # writes every grant against `analytics.<table>` by name, so a database
+      # called anything else comes up empty of privileges. Note the spelling
+      # too: the migration CLI reads CLICKHOUSE_DATABASE while the worker and
+      # the gateway read CLICKHOUSE_DB.
+      CLICKHOUSE_DATABASE: analytics
+      CLICKHOUSE_MIGRATION_USER: oa_migration
+      CLICKHOUSE_MIGRATION_PASSWORD: ${CLICKHOUSE_MIGRATION_PASSWORD}
+    depends_on:
+      postgres: { condition: service_healthy }
+      clickhouse: { condition: service_healthy }
+
+  # --- application services --------------------------------------------------
+
+  # The only process allowed to read ClickHouse. Holds the PUBLIC half of the
+  # query pair and nothing else: it verifies signed query envelopes and can
+  # never mint a request it would accept.
+  gateway:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/query-gateway:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      ENVIRONMENT: production
+      LOG_LEVEL: info
+      PORT: 8081
+      CLICKHOUSE_URL: http://clickhouse:8123
+      CLICKHOUSE_DB: analytics
+      CLICKHOUSE_READ_USER: oa_read
+      CLICKHOUSE_READ_PASSWORD: ${CLICKHOUSE_READ_PASSWORD}
+      REALTIME_CACHE_REDIS_URL: redis://:${VALKEY_REALTIME_PASSWORD}@valkey-realtime:6379
+      QUERY_SIGNING_KEY_ID: oa-selfhost-1
+      QUERY_SIGNING_PUBLIC_KEY_FILE: /keys/query.public.pem
+    volumes:
+      - keys-gateway:/keys:ro
+    healthcheck: *node-healthcheck
+    depends_on:
+      migrate: { condition: service_completed_successfully }
+      keygen: { condition: service_completed_successfully }
+      valkey-realtime: { condition: service_healthy }
+
+  # Control plane, and the only holder of all three private halves. Started
+  # after the gateway: the api sends a field on every gateway query that an
+  # older gateway rejects, so gateway-first has no broken window at all.
+  api:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/api:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      ENVIRONMENT: production
+      LOG_LEVEL: info
+      PORT: 8082
+      DATABASE_URL: postgres://openanalytics:${POSTGRES_PASSWORD}@postgres:5432/openanalytics
+      REALTIME_CACHE_REDIS_URL: redis://:${VALKEY_REALTIME_PASSWORD}@valkey-realtime:6379
+      QUERY_GATEWAY_URL: http://gateway:8081
+      AUTH_BASE_URL: https://${API_DOMAIN}
+      APP_BASE_URL: https://${APP_DOMAIN}
+      COLLECTOR_BASE_URL: https://${COLLECTOR_DOMAIN}
+      AUTH_TRUSTED_ORIGINS: https://${APP_DOMAIN}
+      PRODUCT_NAME: Open Analytics
+      AUTH_SECRET: ${AUTH_SECRET}
+      TRIAL_IDENTITY_SECRET: ${TRIAL_IDENTITY_SECRET}
+      CREDENTIAL_SOURCE_SECRET: ${CREDENTIAL_SOURCE_SECRET}
+      # A path rather than the value: no platform generator makes the 32 bytes
+      # this wants. `keygen` writes it; see the note there.
+      OA_CREDENTIAL_KEYRING_FILE: /keyring/credential-keyring.json
+      QUERY_SIGNING_KEY_ID: oa-selfhost-1
+      # The default is `disabled`, written for the hosted product. The
+      # first-run "create the first account" screen depends on it being on.
+      AUTH_PASSWORD_SIGNIN: enabled
+      QUERY_SIGNING_PRIVATE_KEY_FILE: /keys/query.private.pem
+      REALTIME_TOKEN_SIGNING_KEY_FILE: /keys/realtime.private.pem
+    volumes:
+      - keys-api:/keys:ro
+      - keyring:/keyring:ro
+    healthcheck: *node-healthcheck
+    depends_on:
+      migrate: { condition: service_completed_successfully }
+      keygen: { condition: service_completed_successfully }
+      gateway: { condition: service_healthy }
+      valkey-realtime: { condition: service_healthy }
+
+  # Ingest, and the one service that ever sees a raw visitor IP. It also
+  # serves `oa.js` from the copy baked into its own image.
+  collector:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/collector:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      ENVIRONMENT: production
+      LOG_LEVEL: info
+      PORT: 8083
+      DATABASE_URL: postgres://openanalytics:${POSTGRES_PASSWORD}@postgres:5432/openanalytics
+      EVENT_STREAM_REDIS_URL: redis://:${VALKEY_QUEUE_PASSWORD}@valkey-queue:6379
+      REALTIME_CACHE_REDIS_URL: redis://:${VALKEY_REALTIME_PASSWORD}@valkey-realtime:6379
+      ANONYMOUS_IDENTITY_SECRET: ${ANONYMOUS_IDENTITY_SECRET}
+      ANONYMOUS_IDENTITY_KEY_VERSION: 1
+      # Set, because the `geoip` one-shot guarantees the file. To use MaxMind
+      # instead, or a newer build: copy your file into the volume and point
+      # this at it.
+      GEOIP_DB_PATH: /geoip/dbip-city-lite.mmdb
+    volumes:
+      # Not read-only: `docker cp` into the running container is the documented
+      # way to refresh the database or swap in MaxMind.
+      - geoip:/geoip
+    healthcheck: *node-healthcheck
+    depends_on:
+      migrate: { condition: service_completed_successfully }
+      keygen: { condition: service_completed_successfully }
+      geoip: { condition: service_completed_successfully }
+      valkey-queue: { condition: service_healthy }
+      valkey-realtime: { condition: service_healthy }
+
+  # The SSE stream behind the live dashboard. Verifies short-lived tokens the
+  # api mints, and holds the PUBLIC half only.
+  realtime:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/realtime:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      ENVIRONMENT: production
+      LOG_LEVEL: info
+      PORT: 8084
+      REALTIME_CACHE_REDIS_URL: redis://:${VALKEY_REALTIME_PASSWORD}@valkey-realtime:6379
+      REALTIME_TOKEN_VERIFY_KEY_FILE: /keys/realtime.public.pem
+    volumes:
+      - keys-realtime:/keys:ro
+    healthcheck: *node-healthcheck
+    depends_on:
+      migrate: { condition: service_completed_successfully }
+      keygen: { condition: service_completed_successfully }
+      valkey-realtime: { condition: service_healthy }
+
+  # Drains the queue into ClickHouse; sessions, rollups, exports, mail,
+  # deletions. Never public.
+  worker:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/worker:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      ENVIRONMENT: production
+      LOG_LEVEL: info
+      PORT: 8085
+      DATABASE_URL: postgres://openanalytics:${POSTGRES_PASSWORD}@postgres:5432/openanalytics
+      EVENT_STREAM_REDIS_URL: redis://:${VALKEY_QUEUE_PASSWORD}@valkey-queue:6379
+      REALTIME_CACHE_REDIS_URL: redis://:${VALKEY_REALTIME_PASSWORD}@valkey-realtime:6379
+      CLICKHOUSE_URL: http://clickhouse:8123
+      CLICKHOUSE_DB: analytics
+      CLICKHOUSE_INGEST_USER: oa_ingest
+      CLICKHOUSE_INGEST_PASSWORD: ${CLICKHOUSE_INGEST_PASSWORD}
+      CLICKHOUSE_MAINTENANCE_USER: oa_maintenance
+      CLICKHOUSE_MAINTENANCE_PASSWORD: ${CLICKHOUSE_MAINTENANCE_PASSWORD}
+      ANONYMOUS_IDENTITY_SECRET: ${ANONYMOUS_IDENTITY_SECRET}
+      ANONYMOUS_IDENTITY_KEY_VERSION: 1
+      # A path rather than the value: `keygen` writes it; see the note there.
+      OA_CREDENTIAL_KEYRING_FILE: /keyring/credential-keyring.json
+      PRODUCT_NAME: Open Analytics
+      # Only a from-address, and nothing sends until a transport is configured
+      # under Account then Deployment. The schema wants at least three
+      # characters, so an empty value would be a crash loop caused by a
+      # variable nothing told the operator was required.
+      EMAIL_FROM: ${OA_EMAIL_FROM:-Open Analytics <analytics@analytics.example>}
+    # The worker decrypts what the api encrypted, so it holds the same keyring
+    # and reads it from the same file.
+    volumes:
+      - keyring:/keyring:ro
+    healthcheck: *node-healthcheck
+    depends_on:
+      migrate: { condition: service_completed_successfully }
+      keygen: { condition: service_completed_successfully }
+      valkey-queue: { condition: service_healthy }
+      valkey-realtime: { condition: service_healthy }
+
+  # The dashboard. The published image is built against placeholder origins and
+  # its entrypoint substitutes the three `NEXT_PUBLIC_*` values below at every
+  # container start, which is what lets one image serve any deployment.
+  web:
+    image: ${OA_IMAGE_REPO:-ghcr.io/openlabs-so/openanalytics}/web:${OA_IMAGE_TAG:-v0.5.0}
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      PORT: 3000
+      NEXT_PUBLIC_API_URL: https://${API_DOMAIN}
+      NEXT_PUBLIC_REALTIME_URL: https://${REALTIME_DOMAIN}
+      NEXT_PUBLIC_COLLECTOR_URL: https://${COLLECTOR_DOMAIN}
+    # Its own healthcheck, not the shared one: the dashboard has no `/health`
+    # route, and `/login` renders without a session, so a 200 means serving.
+    healthcheck:
+      test:
+        [
+          'CMD',
+          'node',
+          '-e',
+          "fetch('http://127.0.0.1:3000/login').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 15s
+      timeout: 5s
+      retries: 10
+      start_period: 30s
+    depends_on:
+      api: { condition: service_healthy }
+
+  # --- edge ------------------------------------------------------------------
+
+  # All four public hostnames land here (see `template.toml`), and this is the
+  # one job Dokploy's Traefik is not configured for: deleting the
+  # client-settable identity headers before anything internal reads them. The
+  # Caddyfile arrives as a template mount. Do not point the domains at the
+  # services directly: that would ship the stack without its header hygiene.
+  edge:
+    image: caddy:2-alpine
+    restart: unless-stopped
+    environment:
+      OA_APP_HOST: ${APP_DOMAIN}
+      OA_API_HOST: ${API_DOMAIN}
+      OA_COLLECTOR_HOST: ${COLLECTOR_DOMAIN}
+      OA_REALTIME_HOST: ${REALTIME_DOMAIN}
+    volumes:
+      - ../files/Caddyfile:/etc/caddy/Caddyfile:ro
+    expose:
+      - '80'
+    depends_on:
+      web: { condition: service_started }
+      api: { condition: service_started }
+      collector: { condition: service_started }
+      realtime: { condition: service_started }
+
+volumes:
+  pg-data:
+  ch-data:
+  valkey-queue-data:
+  valkey-realtime-data:
+  keys-api:
+  keys-gateway:
+  keys-realtime:
+  keyring:
+  geoip:
diff --git a/blueprints/openanalytics/logo.svg b/blueprints/openanalytics/logo.svg
new file mode 100644
index 000000000..ddfe83a95
--- /dev/null
+++ b/blueprints/openanalytics/logo.svg
@@ -0,0 +1,19 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" fill="#296FF0">
+  <title>Open Analytics</title>
+  <clipPath id="ring">
+    <path fill-rule="evenodd" clip-rule="evenodd" d="M256 4a252 252 0 1 0 0 504 252 252 0 1 0 0-504Zm0 109a141 141 0 1 1 0 282 141 141 0 1 1 0-282Z"/>
+  </clipPath>
+  <g clip-path="url(#ring)">
+    <rect x="0" y="4" width="512" height="20"/>
+    <rect x="0" y="36" width="512" height="20"/>
+    <rect x="0" y="68" width="512" height="20"/>
+    <rect x="0" y="100" width="512" height="20"/>
+    <rect x="0" y="132" width="512" height="20"/>
+    <rect x="0" y="164" width="512" height="20"/>
+    <rect x="0" y="196" width="512" height="20"/>
+    <rect x="0" y="228" width="512" height="20"/>
+    <rect x="0" y="260" width="512" height="20"/>
+    <rect x="0" y="292" width="512" height="20"/>
+    <rect x="0" y="324" width="512" height="188"/>
+  </g>
+</svg>
diff --git a/blueprints/openanalytics/meta.json b/blueprints/openanalytics/meta.json
new file mode 100644
index 000000000..f35233727
--- /dev/null
+++ b/blueprints/openanalytics/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "openanalytics",
+  "name": "Open Analytics",
+  "version": "v0.5.0",
+  "description": "Open Analytics is an open-source, AI-native web analytics platform: realtime dashboards, funnels, visitor journeys, custom events, revenue analytics, and an MCP server for AI agents. Deploys the complete official self-hosted stack.",
+  "logo": "logo.svg",
+  "links": {
+    "github": "https://github.com/OpenLabs-so/openanalytics",
+    "website": "https://getopen.so",
+    "docs": "https://github.com/OpenLabs-so/openanalytics/blob/main/infra/selfhost/DOKPLOY.md"
+  },
+  "tags": ["analytics"]
+}
diff --git a/blueprints/openanalytics/template.toml b/blueprints/openanalytics/template.toml
new file mode 100644
index 000000000..b882da094
--- /dev/null
+++ b/blueprints/openanalytics/template.toml
@@ -0,0 +1,144 @@
+# OpenAnalytics for Dokploy. Four hostnames, not four paths: the dashboard,
+# the api, the collector and the realtime stream are separate origins, and all
+# four route through the `edge` service below, which strips the
+# client-settable identity headers (see the mounted Caddyfile).
+#
+# After deploying, replace the four generated domains with real DNS records in
+# the Domains tab AND update the matching *_DOMAIN environment variables to
+# the same values, then redeploy: the api builds auth origins, CORS and every
+# link it hands out from those variables, not from the Domains tab.
+
+[variables]
+app_domain = "${domain}"
+api_domain = "${domain}"
+collector_domain = "${domain}"
+realtime_domain = "${domain}"
+postgres_password = "${password:32}"
+clickhouse_ingest_password = "${password:32}"
+clickhouse_read_password = "${password:32}"
+clickhouse_maintenance_password = "${password:32}"
+clickhouse_migration_password = "${password:32}"
+valkey_queue_password = "${password:32}"
+valkey_realtime_password = "${password:32}"
+auth_secret = "${base64:64}"
+trial_identity_secret = "${base64:64}"
+credential_source_secret = "${base64:64}"
+anonymous_identity_secret = "${base64:64}"
+
+[config]
+
+# All four domains point at the Caddy edge on purpose. Pointing one at its
+# service directly would skip the header hygiene the edge exists for.
+[[config.domains]]
+serviceName = "edge"
+port = 80
+host = "${app_domain}"
+
+[[config.domains]]
+serviceName = "edge"
+port = 80
+host = "${api_domain}"
+
+[[config.domains]]
+serviceName = "edge"
+port = 80
+host = "${collector_domain}"
+
+[[config.domains]]
+serviceName = "edge"
+port = 80
+host = "${realtime_domain}"
+
+[config.env]
+# The four public origins. The compose file derives AUTH_BASE_URL,
+# AUTH_TRUSTED_ORIGINS and the dashboard's NEXT_PUBLIC_* values from these,
+# so they must always equal the domains served above.
+APP_DOMAIN = "${app_domain}"
+API_DOMAIN = "${api_domain}"
+COLLECTOR_DOMAIN = "${collector_domain}"
+REALTIME_DOMAIN = "${realtime_domain}"
+
+# Store credentials. Each service receives only the ones it is allowed to
+# hold; the compose file interpolates them per service on purpose.
+POSTGRES_PASSWORD = "${postgres_password}"
+CLICKHOUSE_INGEST_PASSWORD = "${clickhouse_ingest_password}"
+CLICKHOUSE_READ_PASSWORD = "${clickhouse_read_password}"
+CLICKHOUSE_MAINTENANCE_PASSWORD = "${clickhouse_maintenance_password}"
+CLICKHOUSE_MIGRATION_PASSWORD = "${clickhouse_migration_password}"
+VALKEY_QUEUE_PASSWORD = "${valkey_queue_password}"
+VALKEY_REALTIME_PASSWORD = "${valkey_realtime_password}"
+
+# Application secrets. The two signing key pairs and the credential keyring
+# are deliberately NOT here: the `keygen` one-shot generates them inside the
+# stack, because no platform generator can produce a keypair whose halves
+# must match across two services.
+AUTH_SECRET = "${auth_secret}"
+TRIAL_IDENTITY_SECRET = "${trial_identity_secret}"
+CREDENTIAL_SOURCE_SECRET = "${credential_source_secret}"
+ANONYMOUS_IDENTITY_SECRET = "${anonymous_identity_secret}"
+
+# The sender address on outgoing mail. Only a from-address: nothing sends
+# until a transport is configured in the dashboard under Account then
+# Deployment. Replace it when you set that up.
+OA_EMAIL_FROM = "Open Analytics <analytics@analytics.example>"
+
+# The edge, behind Dokploy's Traefik.
+#
+# Traefik terminates TLS, routes all four hostnames here, and writes
+# X-Forwarded-For and X-Real-Ip from the connection. What it does not do is
+# touch CF-Connecting-IP and its family, because they are nobody's standard —
+# and the collector reads the visitor's address and geo from exactly that
+# family of headers. Without the deletions below, any visitor could pick their
+# own rate-limit bucket or write their own country into the analytics.
+#
+# X-Real-IP is deliberately NOT asserted here: the proxy in front of this one
+# owns it. Asserting it from this hop would stamp Traefik's address on every
+# visitor.
+[[config.mounts]]
+filePath = "/Caddyfile"
+content = """
+{
+	auto_https off
+}
+
+(client_identity_hygiene) {
+	header_up -Fly-Client-IP
+	header_up -CF-Connecting-IP
+	header_up -True-Client-IP
+	header_up -X-Vercel-IP-Country
+	header_up -X-Vercel-IP-City
+	header_up -Fly-Client-Country
+	header_up -CF-IPCountry
+	header_up -CF-IPCity
+}
+
+:80 {
+	@web host {$OA_APP_HOST}
+	handle @web {
+		reverse_proxy web:3000
+	}
+
+	@api host {$OA_API_HOST}
+	handle @api {
+		reverse_proxy api:8082 {
+			import client_identity_hygiene
+		}
+	}
+
+	@collector host {$OA_COLLECTOR_HOST}
+	handle @collector {
+		reverse_proxy collector:8083 {
+			import client_identity_hygiene
+		}
+	}
+
+	@realtime host {$OA_REALTIME_HOST}
+	handle @realtime {
+		reverse_proxy realtime:8084 {
+			import client_identity_hygiene
+		}
+	}
+
+	respond 404
+}
+"""

From 0bb292dad33689619192ec628ac58ab797d76458 Mon Sep 17 00:00:00 2001
From: Tekena Solomon <tekena157@gmail.com>
Date: Tue, 25 Aug 2026 05:56:29 +0100
Subject: [PATCH 16/33] feat: add Instatic template (#1093)

* feat: add Instatic template

Instatic is a self-hosted, open-source visual CMS combining a canvas
editor, content engine, and static site publisher. Deployed as a
single container backed by SQLite, with uploads and DB on one
persistent volume.

Signed-off-by: Tekena Solomon <tekena157@gmail.com>

* fix: add init container to fix Instatic storage volume permissions

Signed-off-by: Tekena Solomon <tekena157@gmail.com>

* fix(instatic): accept both https and http public origins so the setup wizard works before HTTPS is enabled

---------

Signed-off-by: Tekena Solomon <tekena157@gmail.com>
Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
---
 blueprints/instatic/docker-compose.yml | 32 ++++++++++++++++++++++++++
 blueprints/instatic/instatic.svg       | 15 ++++++++++++
 blueprints/instatic/meta.json          | 13 +++++++++++
 blueprints/instatic/template.toml      | 16 +++++++++++++
 4 files changed, 76 insertions(+)
 create mode 100644 blueprints/instatic/docker-compose.yml
 create mode 100644 blueprints/instatic/instatic.svg
 create mode 100644 blueprints/instatic/meta.json
 create mode 100644 blueprints/instatic/template.toml

diff --git a/blueprints/instatic/docker-compose.yml b/blueprints/instatic/docker-compose.yml
new file mode 100644
index 000000000..2643448c2
--- /dev/null
+++ b/blueprints/instatic/docker-compose.yml
@@ -0,0 +1,32 @@
+version: "3.8"
+
+services:
+  instatic-init:
+    image: ghcr.io/corebunch/instatic:0.0.16
+    user: "0:0"
+    entrypoint: ["chown", "-R", "bun:bun", "/app/storage"]
+    volumes:
+      - instatic-storage:/app/storage
+
+  instatic:
+    image: ghcr.io/corebunch/instatic:0.0.16
+    restart: unless-stopped
+    env_file:
+      - .env
+    depends_on:
+      instatic-init:
+        condition: service_completed_successfully
+    expose:
+      - 3001
+    volumes:
+      - instatic-storage:/app/storage
+    healthcheck:
+      test: ["CMD", "bun", "run", "server/healthcheck.ts"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
+
+volumes:
+  instatic-storage:
+    driver: local
diff --git a/blueprints/instatic/instatic.svg b/blueprints/instatic/instatic.svg
new file mode 100644
index 000000000..cbd789f03
--- /dev/null
+++ b/blueprints/instatic/instatic.svg
@@ -0,0 +1,15 @@
+<svg width="256" height="256" viewBox="0 0 256 256" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g clip-path="url(#clip0_1_2)">
+<rect width="256" height="256" fill="white"/>
+<path d="M167.667 207.333V227.167H88.3333V207.333H167.667ZM88.3333 207.333H48.6667V187.5H88.3333V207.333ZM207.333 207.333H167.667V187.5H207.333V207.333ZM48.6667 187.5H28.8333V167.667H48.6667V187.5ZM167.667 187.5H88.3333V167.667H167.667V187.5ZM227.167 187.5H207.333V167.667H227.167V187.5ZM88.3333 167.667H48.6667V147.833H88.3333V167.667ZM207.333 167.667H167.667V147.833H207.333V167.667ZM48.6667 147.833H28.8333V128H48.6667V147.833ZM167.667 48.6667H207.333V68.5H227.167V108.167H207.333V128H167.667V147.833H88.3333V128H48.6667V108.167H28.8333V68.5H48.6667V48.6667H88.3333V28.8333H167.667V48.6667ZM227.167 147.833H207.333V128H227.167V147.833Z" fill="black"/>
+<rect width="20" height="20" fill="black"/>
+<rect x="236" width="20" height="20" fill="black"/>
+<rect x="236" y="236" width="20" height="20" fill="black"/>
+<rect y="236" width="20" height="20" fill="black"/>
+</g>
+<defs>
+<clipPath id="clip0_1_2">
+<rect width="256" height="256" fill="white"/>
+</clipPath>
+</defs>
+</svg>
diff --git a/blueprints/instatic/meta.json b/blueprints/instatic/meta.json
new file mode 100644
index 000000000..2661cd38e
--- /dev/null
+++ b/blueprints/instatic/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "instatic",
+  "name": "Instatic",
+  "version": "0.0.16",
+  "description": "Instatic is a self-hosted, open-source visual CMS combining a canvas editor, content engine, and static site publisher, producing clean semantic HTML with no framework runtime shipped to visitors.",
+  "logo": "instatic.svg",
+  "links": {
+    "github": "https://github.com/corebunch/instatic",
+    "website": "https://instatic.com",
+    "docs": "https://github.com/corebunch/instatic/tree/main/docs"
+  },
+  "tags": ["cms", "website-builder", "static-site"]
+}
diff --git a/blueprints/instatic/template.toml b/blueprints/instatic/template.toml
new file mode 100644
index 000000000..0a1071fd5
--- /dev/null
+++ b/blueprints/instatic/template.toml
@@ -0,0 +1,16 @@
+[variables]
+main_domain = "${domain}"
+instatic_secret_key = "${base64:32}"
+
+[[config.domains]]
+serviceName = "instatic"
+port = 3001
+host = "${main_domain}"
+
+[config.env]
+PORT = "3001"
+DATABASE_URL = "sqlite:/app/storage/data/cms.db"
+UPLOADS_DIR = "/app/storage/uploads"
+STATIC_DIR = "/app/dist"
+INSTATIC_SECRET_KEY = "${instatic_secret_key}"
+PUBLIC_ORIGIN = "https://${main_domain},http://${main_domain}"

From 8deda67f4cb50de9438db279a7b26828048a74a1 Mon Sep 17 00:00:00 2001
From: Madhav Gupta <114633095+M4dhav@users.noreply.github.com>
Date: Tue, 25 Aug 2026 10:26:50 +0530
Subject: [PATCH 17/33] update Calcom image version and add QOL Env Var for
 public signup and Email SMTP (#1091)

* feat: update calcom image version and add QOL Env Var for public signup

* fix: add quotes to env var definition

* fix: add more information for selfhosting

* feat: add env vars and config for Email SMTP Creds

* chore(calcom): bump meta.json version to v6.2.0 and fix ARM comment line reference

---------

Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
---
 blueprints/calcom/docker-compose.yml | 17 ++++++++++++++++-
 blueprints/calcom/meta.json          |  2 +-
 blueprints/calcom/template.toml      |  6 ++++++
 3 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/blueprints/calcom/docker-compose.yml b/blueprints/calcom/docker-compose.yml
index a309a1da4..c988ec024 100644
--- a/blueprints/calcom/docker-compose.yml
+++ b/blueprints/calcom/docker-compose.yml
@@ -1,3 +1,8 @@
+# If you are on a machine with ARM architecture, please add a "-arm" suffix to the calcom image on line 19.
+# For example, `calcom/cal.com:v6.2.0` will become `calcom/cal.com:v6.2.0-arm`
+
+# If serving the instance on https, change `NEXT_PUBLIC_WEBAPP_URL` (Line 28) and `NEXTAUTH_URL` (Line 30) to https
+
 services:
   postgres:
     image: postgres:16-alpine
@@ -11,15 +16,25 @@ services:
       - DATABASE_URL=postgres://postgres:password@postgres:5432/db
 
   calcom:
-    image: calcom/cal.com:v2.7.6
+    image: calcom/cal.com:v6.2.0
     depends_on:
       - postgres
     environment:
       - NEXTAUTH_SECRET=${NEXTAUTH_SECRET}
       - CALENDSO_ENCRYPTION_KEY=${CALENDSO_ENCRYPTION_KEY}
       - DATABASE_URL=postgres://postgres:password@postgres:5432/db
+      - DATABASE_DIRECT_URL=postgres://postgres:password@postgres:5432/db
+      - DATABASE_HOST=postgres:5432
       - NEXT_PUBLIC_WEBAPP_URL=http://${CALCOM_HOST}
+      - ALLOWED_HOSTNAMES="${CALCOM_HOST}"
       - NEXTAUTH_URL=http://${CALCOM_HOST}/api/auth
+      - NEXT_PUBLIC_DISABLE_SIGNUP=${DISABLE_SIGNUP}
+      - EMAIL_SERVER_HOST=${SMTP_SERVER}
+      - EMAIL_SERVER_PORT=${SMTP_PORT}
+      - EMAIL_SERVER_USER=${EMAIL_SERVER_USER}
+      - EMAIL_SERVER_PASSWORD=${SMTP_PASSWORD}
+      - EMAIL_FROM=${EMAIL_FROM}
+
 
 volumes:
   calcom-data:
diff --git a/blueprints/calcom/meta.json b/blueprints/calcom/meta.json
index b4c1f88c5..497e416bf 100644
--- a/blueprints/calcom/meta.json
+++ b/blueprints/calcom/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "calcom",
   "name": "Calcom",
-  "version": "v2.7.6",
+  "version": "v6.2.0",
   "description": "Calcom is a open source alternative to Calendly that allows to create scheduling and booking services.",
   "links": {
     "github": "https://github.com/calcom/cal.com",
diff --git a/blueprints/calcom/template.toml b/blueprints/calcom/template.toml
index a6303ad12..365daf47c 100644
--- a/blueprints/calcom/template.toml
+++ b/blueprints/calcom/template.toml
@@ -8,6 +8,12 @@ env = [
   "CALCOM_HOST=${main_domain}",
   "NEXTAUTH_SECRET=${nextauth_secret}",
   "CALENDSO_ENCRYPTION_KEY=${calcom_encryption_key}",
+  "DISABLE_SIGNUP=true",
+  "SMTP_SERVER=",
+  "SMTP_PORT=",
+  "SMTP_PASSWORD=",
+  "EMAIL_SERVER_USER=",
+  "EMAIL_FROM=",
 ]
 mounts = []
 

From c322999417d5c615310e532c6fd13805b038ac92 Mon Sep 17 00:00:00 2001
From: Chirag Aggarwal <chiragaggarwal5k@gmail.com>
Date: Tue, 25 Aug 2026 10:51:42 +0530
Subject: [PATCH 18/33] Fix Appwrite Function API requests behind HTTPS
 redirects (#1087)

* fix(appwrite): enable HTTPS for function API endpoint

* appwrite: document that _APP_OPTIONS_FORCE_HTTPS=enabled requires an HTTPS domain

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/appwrite/template.toml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/blueprints/appwrite/template.toml b/blueprints/appwrite/template.toml
index 54d3a8bcd..4f17cf7ab 100644
--- a/blueprints/appwrite/template.toml
+++ b/blueprints/appwrite/template.toml
@@ -15,7 +15,10 @@ env = [
   "_APP_POOL_ADAPTER=stack",
   "_APP_WORKER_PER_CORE=6",
   "_APP_OPTIONS_ABUSE=enabled",
-  "_APP_OPTIONS_FORCE_HTTPS=disabled",
+  # Requires HTTPS to be enabled on the main domain in Dokploy (Domains tab).
+  # Makes Appwrite generate https:// URLs (e.g. APPWRITE_FUNCTION_API_ENDPOINT for
+  # Functions) and reject plain-HTTP API calls; over plain HTTP the console cannot log in.
+  "_APP_OPTIONS_FORCE_HTTPS=enabled",
   "_APP_OPTIONS_ROUTER_FORCE_HTTPS=disabled",
   "_APP_OPTIONS_ROUTER_PROTECTION=disabled",
   "_APP_OPENSSL_KEY_V1=${openssl_key}",

From b05ce42a12859c1da8c9481cf147e6c8d580bb26 Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 15:04:31 -0600
Subject: [PATCH 19/33] chore(plausible): update to v3.2.1 (#1123)

- ghcr.io/plausible/community-edition v2.1.5 -> v3.2.1 (latest stable release)
- clickhouse-server 24.3.3.102-alpine -> 24.12-alpine, matching the official
  CE v3.2.1 compose.yml
- CLICKHOUSE_SKIP_USER_SETUP=1 on the events db: required by ClickHouse
  24.11+ images so Plausible can connect as the passwordless default user
  (without it the app crash-loops with AUTHENTICATION_FAILED)
- plausible-data volume + TMPDIR per the official v3 compose

Deploy-verified on a Dokploy instance: fresh import, all 3 containers
running, HTTP 200 on the domain with the Plausible login page.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/plausible/docker-compose.yml | 15 +++++++++++++--
 blueprints/plausible/meta.json          |  2 +-
 2 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/blueprints/plausible/docker-compose.yml b/blueprints/plausible/docker-compose.yml
index ad483ecf6..d53074893 100644
--- a/blueprints/plausible/docker-compose.yml
+++ b/blueprints/plausible/docker-compose.yml
@@ -9,7 +9,7 @@ services:
       - POSTGRES_PASSWORD=postgres
 
   plausible_events_db:
-    image: clickhouse/clickhouse-server:24.3.3.102-alpine
+    image: clickhouse/clickhouse-server:24.12-alpine
     restart: always
 
     volumes:
@@ -21,20 +21,31 @@ services:
       nofile:
         soft: 262144
         hard: 262144
+    environment:
+      # Required since ClickHouse 24.11+ images: skip the default-user setup so
+      # Plausible can connect as "default" without a password (matches the
+      # official CE v3 compose.yml).
+      - CLICKHOUSE_SKIP_USER_SETUP=1
 
   plausible:
-    image: ghcr.io/plausible/community-edition:v2.1.5
+    image: ghcr.io/plausible/community-edition:v3.2.1
     restart: always
     command: sh -c "sleep 10 && /entrypoint.sh db createdb && /entrypoint.sh db migrate && /entrypoint.sh run"
     depends_on:
       - plausible_db
       - plausible_events_db
+    volumes:
+      - plausible-data:/var/lib/plausible
+    environment:
+      - TMPDIR=/var/lib/plausible/tmp
     env_file:
       - .env
 
 volumes:
   db-data:
     driver: local
+  plausible-data:
+    driver: local
   event-data:
     driver: local
   event-logs:
diff --git a/blueprints/plausible/meta.json b/blueprints/plausible/meta.json
index e98c8f4cf..5c3e27d89 100644
--- a/blueprints/plausible/meta.json
+++ b/blueprints/plausible/meta.json
@@ -1,7 +1,7 @@
 {
   "id": "plausible",
   "name": "Plausible",
-  "version": "v2.1.5",
+  "version": "v3.2.1",
   "description": "Plausible is a open source, self-hosted web analytics platform that lets you track website traffic and user behavior.",
   "logo": "logo.svg",
   "links": {

From c974384957648e8dec02ed4fd1ac423959029987 Mon Sep 17 00:00:00 2001
From: Manan Santoki <manansantoki2003@gmail.com>
Date: Sun, 30 Aug 2026 15:03:35 -0700
Subject: [PATCH 20/33] feat: make Firecrawl template production-ready (#1118)

* feat: make Firecrawl template production-ready

* fix: generate valid Firecrawl API keys
---
 blueprints/firecrawl/docker-compose.yml | 1488 +++++++++++++++++++++--
 blueprints/firecrawl/instructions.md    |  101 ++
 blueprints/firecrawl/meta.json          |   10 +-
 blueprints/firecrawl/template.toml      |  102 +-
 4 files changed, 1538 insertions(+), 163 deletions(-)
 create mode 100644 blueprints/firecrawl/instructions.md

diff --git a/blueprints/firecrawl/docker-compose.yml b/blueprints/firecrawl/docker-compose.yml
index 1a36c8f71..83d565880 100644
--- a/blueprints/firecrawl/docker-compose.yml
+++ b/blueprints/firecrawl/docker-compose.yml
@@ -1,129 +1,1405 @@
-name: firecrawl
- 
-x-common-service: &common-service
-  image: ghcr.io/firecrawl/firecrawl:latest
-  ulimits:
-    nofile:
-      soft: 65535
-      hard: 65535
-  extra_hosts:
-    - "host.docker.internal:host-gateway"
- 
-x-common-env: &common-env
-  REDIS_URL: ${REDIS_URL:-redis://redis:6379}
-  REDIS_RATE_LIMIT_URL: ${REDIS_RATE_LIMIT_URL:-redis://redis:6379}
-  PLAYWRIGHT_MICROSERVICE_URL: ${PLAYWRIGHT_MICROSERVICE_URL:-http://playwright-service:3000/scrape}
-  NUQ_DATABASE_URL: ${NUQ_DATABASE_URL:-postgres://postgres:postgres@nuq-postgres:5432/postgres}
-  USE_DB_AUTHENTICATION: ${USE_DB_AUTHENTICATION:-}
-  OPENAI_API_KEY: ${OPENAI_API_KEY:-}
-  OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
-  MODEL_NAME: ${MODEL_NAME:-}
-  MODEL_EMBEDDING_NAME: ${MODEL_EMBEDDING_NAME:-}
-  OLLAMA_BASE_URL: ${OLLAMA_BASE_URL:-}
-  SLACK_WEBHOOK_URL: ${SLACK_WEBHOOK_URL:-}
-  BULL_AUTH_KEY: ${BULL_AUTH_KEY:-}
-  TEST_API_KEY: ${TEST_API_KEY:-}
-  POSTHOG_API_KEY: ${POSTHOG_API_KEY:-}
-  POSTHOG_HOST: ${POSTHOG_HOST:-}
-  SUPABASE_ANON_TOKEN: ${SUPABASE_ANON_TOKEN:-}
-  SUPABASE_URL: ${SUPABASE_URL:-}
-  SUPABASE_SERVICE_TOKEN: ${SUPABASE_SERVICE_TOKEN:-}
-  SELF_HOSTED_WEBHOOK_URL: ${SELF_HOSTED_WEBHOOK_URL:-}
-  SERPER_API_KEY: ${SERPER_API_KEY:-}
-  SEARCHAPI_API_KEY: ${SEARCHAPI_API_KEY:-}
-  LOGGING_LEVEL: ${LOGGING_LEVEL:-INFO}
-  PROXY_SERVER: ${PROXY_SERVER:-}
-  PROXY_USERNAME: ${PROXY_USERNAME:-}
-  PROXY_PASSWORD: ${PROXY_PASSWORD:-}
-  NO_PROXY: ${NO_PROXY:-localhost,127.0.0.1,redis,nuq-postgres,playwright-service,host.docker.internal}
-  SEARXNG_ENDPOINT: ${SEARXNG_ENDPOINT:-}
-  SEARXNG_ENGINES: ${SEARXNG_ENGINES:-}
-  SEARXNG_CATEGORIES: ${SEARXNG_CATEGORIES:-}
- 
+version: "3.8"
+
+# The database schema and OpenAPI artifact are generated from Firecrawl
+# v2.11.230 and embedded as Compose configs so Dokploy can import the entire
+# authenticated stack as one template without external files.
+
+x-logging: &default-logging
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+    compress: "true"
+
 services:
+  firecrawl-db:
+    image: postgres:17-alpine@sha256:18cfe3ef5e6815560c98237d6216d1e5119702fb0f3894c8785dd58b8bbe5d73
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: ${APP_POSTGRES_PASSWORD:?required}
+      POSTGRES_DB: firecrawl
+    configs:
+      - source: db-init-prerequisites
+        target: /docker-entrypoint-initdb.d/010-prerequisites.sql
+      - source: db-init-schema
+        target: /docker-entrypoint-initdb.d/020-current-schema.sql
+      - source: db-init-constraints
+        target: /docker-entrypoint-initdb.d/030-selfhost-constraints.sql
+      - source: db-init-rpcs
+        target: /docker-entrypoint-initdb.d/040-selfhost-rpcs.sql
+    volumes:
+      - firecrawl-db-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres -d firecrawl"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+      start_period: 10s
+    logging: *default-logging
+
+  firecrawl-db-seed:
+    image: postgres:17-alpine@sha256:18cfe3ef5e6815560c98237d6216d1e5119702fb0f3894c8785dd58b8bbe5d73
+    restart: "no"
+    depends_on:
+      firecrawl-db:
+        condition: service_healthy
+    environment:
+      PGHOST: firecrawl-db
+      PGPORT: "5432"
+      PGUSER: postgres
+      PGPASSWORD: ${APP_POSTGRES_PASSWORD:?required}
+      PGDATABASE: firecrawl
+      FIRECRAWL_ORG_ID: ${FIRECRAWL_ORG_ID:?required}
+      FIRECRAWL_TEAM_ID: ${FIRECRAWL_TEAM_ID:?required}
+      FIRECRAWL_API_KEY: ${FIRECRAWL_API_KEY:?required}
+    configs:
+      - source: db-seed
+        target: /seed.sql
+    command:
+      - /bin/sh
+      - -ec
+      - >-
+        psql
+        -v org_id="$${FIRECRAWL_ORG_ID}"
+        -v team_id="$${FIRECRAWL_TEAM_ID}"
+        -v api_key="$${FIRECRAWL_API_KEY}"
+        -f /seed.sql
+    logging: *default-logging
+
+  nuq-postgres:
+    image: ghcr.io/firecrawl/nuq-postgres@sha256:aed86f62858f29bd971abddcdeb301c12888098d2cf5d33c1ba42b053bc460f6
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: ${NUQ_POSTGRES_PASSWORD:?required}
+      POSTGRES_DB: postgres
+    volumes:
+      - nuq-postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+      start_period: 10s
+    logging: *default-logging
+
+  redis:
+    image: redis:7-alpine@sha256:ff02b58f971e7d7d156a1267e283fcbbeee91773b6aa36c49dac28ecfe28eadf
+    restart: unless-stopped
+    environment:
+      REDIS_PASSWORD: ${REDIS_PASSWORD:?required}
+    command:
+      - /bin/sh
+      - -ec
+      - exec redis-server --bind 0.0.0.0 --appendonly yes --requirepass "$${REDIS_PASSWORD}"
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD-SHELL", "redis-cli -a \"$${REDIS_PASSWORD}\" --no-auth-warning ping | grep -q PONG"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+      start_period: 5s
+    logging: *default-logging
+
+  rabbitmq:
+    image: rabbitmq:3-management@sha256:e582c0bc7766f3342496d8485efb5a1df782b5ce3886ad017e2eaae442311f69
+    restart: unless-stopped
+    environment:
+      RABBITMQ_DEFAULT_USER: ${RABBITMQ_USER:?required}
+      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_PASSWORD:?required}
+    volumes:
+      - rabbitmq-data:/var/lib/rabbitmq
+    healthcheck:
+      test: ["CMD", "rabbitmq-diagnostics", "-q", "check_running"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+      start_period: 15s
+    logging: *default-logging
+
   playwright-service:
-    image: ghcr.io/firecrawl/playwright-service:latest
-    shm_size: "1g"
+    image: ghcr.io/firecrawl/playwright-service@sha256:468009bae00911d40d7120d58489a1d529362c22c45585cb9076094fe61b0025
     restart: unless-stopped
     environment:
-      PORT: 3000
+      PORT: "3000"
+      MAX_CONCURRENT_PAGES: ${CRAWL_CONCURRENT_REQUESTS:-10}
+      ALLOW_LOCAL_WEBHOOKS: ${ALLOW_LOCAL_WEBHOOKS:-false}
+      BLOCK_MEDIA: ${BLOCK_MEDIA:-true}
       PROXY_SERVER: ${PROXY_SERVER:-}
       PROXY_USERNAME: ${PROXY_USERNAME:-}
       PROXY_PASSWORD: ${PROXY_PASSWORD:-}
-      BLOCK_MEDIA: ${BLOCK_MEDIA:-}
-      NO_PROXY: ${NO_PROXY:-localhost,127.0.0.1,redis,nuq-postgres,playwright-service,host.docker.internal}
- 
-  api:
-    <<: *common-service
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    tmpfs:
+      - /tmp/.cache:noexec,nosuid,size=1g
+    logging: *default-logging
+
+  firecrawl:
+    image: ghcr.io/firecrawl/firecrawl:2.11.230@sha256:7c5bf28dd3397be9a5bfb103adeef9adefbad352d223011da1bab606a0044416
     restart: unless-stopped
-    expose:
-      - "3002"
+    command: node dist/src/harness.js --start-docker
+    ulimits:
+      nofile:
+        soft: 65535
+        hard: 65535
     environment:
-      <<: *common-env
-      HOST: "0.0.0.0"
-      PORT: 3002
-      WORKER_PORT: 3005
       ENV: local
+      HOST: 0.0.0.0
+      PORT: "3002"
+      EXTRACT_WORKER_PORT: "3004"
+      WORKER_PORT: "3005"
+      USE_DB_AUTHENTICATION: "true"
+      DATABASE_URL: postgresql://postgres:${APP_POSTGRES_PASSWORD:?required}@firecrawl-db:5432/firecrawl
+      DATABASE_REPLICA_URL: postgresql://postgres:${APP_POSTGRES_PASSWORD:?required}@firecrawl-db:5432/firecrawl
+      REDIS_URL: redis://:${REDIS_PASSWORD:?required}@redis:6379
+      REDIS_RATE_LIMIT_URL: redis://:${REDIS_PASSWORD:?required}@redis:6379
+      PLAYWRIGHT_MICROSERVICE_URL: http://playwright-service:3000/scrape
+      NUQ_DATABASE_URL: postgresql://postgres:${NUQ_POSTGRES_PASSWORD:?required}@nuq-postgres:5432/postgres
+      NUQ_DATABASE_URL_LISTEN: postgresql://postgres:${NUQ_POSTGRES_PASSWORD:?required}@nuq-postgres:5432/postgres
+      NUQ_RABBITMQ_URL: amqp://${RABBITMQ_USER:?required}:${RABBITMQ_PASSWORD:?required}@rabbitmq:5672
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: ${NUQ_POSTGRES_PASSWORD:?required}
+      POSTGRES_DB: postgres
+      POSTGRES_HOST: nuq-postgres
+      POSTGRES_PORT: "5432"
+      NUM_WORKERS_PER_QUEUE: ${NUM_WORKERS_PER_QUEUE:-8}
+      CRAWL_CONCURRENT_REQUESTS: ${CRAWL_CONCURRENT_REQUESTS:-10}
+      MAX_CONCURRENT_JOBS: ${MAX_CONCURRENT_JOBS:-5}
+      BROWSER_POOL_SIZE: ${BROWSER_POOL_SIZE:-5}
+      HARNESS_STARTUP_TIMEOUT_MS: "120000"
+      LOGGING_LEVEL: ${LOGGING_LEVEL:-INFO}
+      DISABLE_ENGPICKER: ${DISABLE_ENGPICKER:-true}
+      BULL_AUTH_KEY: ${BULL_AUTH_KEY:?required}
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
+      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
+      OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
+      OLLAMA_BASE_URL: ${OLLAMA_BASE_URL:-}
+      MODEL_NAME: ${MODEL_NAME:-}
+      MODEL_EMBEDDING_NAME: ${MODEL_EMBEDDING_NAME:-}
+      SEARCHAPI_API_KEY: ${SEARCHAPI_API_KEY:-}
+      LLAMAPARSE_API_KEY: ${LLAMAPARSE_API_KEY:-}
+      SLACK_WEBHOOK_URL: ${SLACK_WEBHOOK_URL:-}
+      SEARXNG_ENDPOINT: ${SEARXNG_ENDPOINT:-}
+      SEARXNG_ENGINES: ${SEARXNG_ENGINES:-}
+      SEARXNG_CATEGORIES: ${SEARXNG_CATEGORIES:-}
+      SELF_HOSTED_WEBHOOK_URL: ${SELF_HOSTED_WEBHOOK_URL:-}
+      SELF_HOSTED_WEBHOOK_HMAC_SECRET: ${SELF_HOSTED_WEBHOOK_HMAC_SECRET:-}
+      PROXY_SERVER: ${PROXY_SERVER:-}
+      PROXY_USERNAME: ${PROXY_USERNAME:-}
+      PROXY_PASSWORD: ${PROXY_PASSWORD:-}
+      ALLOW_LOCAL_WEBHOOKS: ${ALLOW_LOCAL_WEBHOOKS:-false}
+    expose:
+      - "3002"
     depends_on:
-      redis:
-        condition: service_started
-      playwright-service:
-        condition: service_started
+      firecrawl-db-seed:
+        condition: service_completed_successfully
       nuq-postgres:
         condition: service_healthy
-    command: node --import ./dist/src/otel.js dist/src/index.js
- 
-  worker:
-    <<: *common-service
-    restart: unless-stopped
-    environment:
-      <<: *common-env
-      HOST: "0.0.0.0"
-      PORT: 3005
-      ENV: local
-    depends_on:
       redis:
-        condition: service_started
-      nuq-postgres:
         condition: service_healthy
-    command: node --import ./dist/src/otel.js dist/src/services/queue-worker.js
- 
-  extract-worker:
-    <<: *common-service
+      rabbitmq:
+        condition: service_healthy
+      playwright-service:
+        condition: service_started
+    healthcheck:
+      test:
+        - CMD
+        - node
+        - -e
+        - >-
+          fetch('http://127.0.0.1:3002/v0/health/liveness').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))
+      interval: 10s
+      timeout: 5s
+      retries: 20
+      start_period: 60s
+    logging: *default-logging
+
+  swagger-ui:
+    image: swaggerapi/swagger-ui:v5.32.14@sha256:3d93169968848d371a6a56ca1ab18b47a8906ba461b8eba0688866354f5431d5
     restart: unless-stopped
     environment:
-      <<: *common-env
-      HOST: "0.0.0.0"
-      PORT: 3004
-      ENV: local
+      SWAGGER_JSON_URL: /openapi.json
+      DEEP_LINKING: "true"
+      DISPLAY_OPERATION_ID: "false"
+      DISPLAY_REQUEST_DURATION: "true"
+      DOC_EXPANSION: none
+      PERSIST_AUTHORIZATION: "true"
+      TRY_IT_OUT_ENABLED: "true"
+    configs:
+      - source: firecrawl-openapi
+        target: /tmp/openapi.json.gz.b64
+    command:
+      - /bin/sh
+      - -ec
+      - >-
+        base64 -d /tmp/openapi.json.gz.b64 | gzip -dc > /usr/share/nginx/html/openapi.json;
+        exec /docker-entrypoint.sh nginx -g 'daemon off;'
+    expose:
+      - "8080"
+    logging: *default-logging
+
+  gateway:
+    image: nginx:1.29-alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de
+    restart: unless-stopped
+    configs:
+      - source: firecrawl-gateway-nginx
+        target: /etc/nginx/conf.d/default.conf
+    expose:
+      - "8080"
     depends_on:
-      redis:
-        condition: service_started
-      nuq-postgres:
+      firecrawl:
         condition: service_healthy
-    command: node --import ./dist/src/otel.js dist/src/services/extract-worker.js
- 
-  redis:
-    image: redis:alpine
-    command: redis-server --bind 0.0.0.0
- 
-  nuq-postgres:
-    build:
-      context: "https://github.com/firecrawl/firecrawl.git#main:apps/nuq-postgres"
-      dockerfile: Dockerfile
-    restart: unless-stopped
-    environment:
-      POSTGRES_USER: postgres
-      POSTGRES_PASSWORD: postgres
-      POSTGRES_DB: postgres
-    volumes:
-      - nuq_pg_data:/var/lib/postgresql/data
+      swagger-ui:
+        condition: service_started
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
-      start_period: 30s
+      test: ["CMD-SHELL", "wget -q -O /dev/null http://127.0.0.1:8080/v0/health/liveness"]
       interval: 10s
       timeout: 5s
-      retries: 10
- 
+      retries: 20
+      start_period: 10s
+    logging: *default-logging
+
+configs:
+  db-init-prerequisites:
+    content: |
+      \set ON_ERROR_STOP on
+
+      CREATE SCHEMA IF NOT EXISTS extensions;
+      CREATE EXTENSION IF NOT EXISTS pgcrypto WITH SCHEMA extensions;
+
+      CREATE TABLE IF NOT EXISTS public.organizations (
+        id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+        name text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      );
+
+  db-init-schema:
+    # Generated from apps/api/src/db/schema/public.ts at v2.11.230.
+    content: |
+      CREATE TABLE "agent_sponsors" (
+        "id" bigint GENERATED BY DEFAULT AS IDENTITY (sequence name "agent_sponsors_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "email" text NOT NULL,
+        "status" text DEFAULT 'pending' NOT NULL,
+        "verification_deadline" timestamp with time zone NOT NULL,
+        "agent_name" text NOT NULL,
+        "sandboxed_team_id" uuid,
+        "api_key_id" bigint,
+        "requesting_ip" text,
+        "tos_version" text,
+        "tos_hash" text,
+        "verification_token" text NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now(),
+        "verified_at" timestamp with time zone,
+        "updated_at" timestamp with time zone DEFAULT now()
+      );
+      --> statement-breakpoint
+      CREATE TABLE "agents" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "cost_tracking" jsonb,
+        "is_successful" boolean NOT NULL,
+        "error" text
+      );
+      --> statement-breakpoint
+      CREATE TABLE "api_keys" (
+        "id" bigint GENERATED BY DEFAULT AS IDENTITY (sequence name "api_keys_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "created_at" timestamp with time zone DEFAULT now(),
+        "key" uuid DEFAULT gen_random_uuid(),
+        "name" text,
+        "team_id" uuid,
+        "owner_id" uuid,
+        "agent_provisioned" boolean DEFAULT false,
+        "concurrency" integer,
+        CONSTRAINT "api_keys_id_team_id_key" UNIQUE("id","team_id")
+      );
+      --> statement-breakpoint
+      CREATE TABLE "batch_scrapes" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "num_docs" integer NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "cancelled" boolean NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "blocklist" (
+        "id" bigint GENERATED BY DEFAULT AS IDENTITY (sequence name "blocklist_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "data" jsonb NOT NULL,
+        "org_id" uuid
+      );
+      --> statement-breakpoint
+      CREATE TABLE "blocklist_hits" (
+        "id" uuid NOT NULL,
+        "domain" text NOT NULL,
+        "url" text,
+        "team_id" uuid,
+        "origin" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "browser_session_activities" (
+        "id" bigint GENERATED ALWAYS AS IDENTITY (sequence name "browser_session_activities_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "team_id" text NOT NULL,
+        "session_id" text NOT NULL,
+        "language" text NOT NULL,
+        "timeout" integer NOT NULL,
+        "exit_code" integer,
+        "killed" boolean DEFAULT false NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "source" text DEFAULT 'browser'
+      );
+      --> statement-breakpoint
+      CREATE TABLE "browser_sessions" (
+        "id" uuid NOT NULL,
+        "team_id" text NOT NULL,
+        "request_id" uuid,
+        "should_bill" boolean DEFAULT true NOT NULL,
+        "browser_id" text NOT NULL,
+        "workspace_id" text NOT NULL,
+        "context_id" text NOT NULL,
+        "cdp_url" text NOT NULL,
+        "cdp_path" text NOT NULL,
+        "stream_web_view" boolean DEFAULT false NOT NULL,
+        "status" text DEFAULT 'active' NOT NULL,
+        "ttl_total" integer NOT NULL,
+        "ttl_without_activity" integer,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "deleted_at" timestamp with time zone,
+        "credits_used" integer,
+        "cdp_interactive_path" text,
+        "scrape_id" uuid
+      );
+      --> statement-breakpoint
+      CREATE TABLE "code_searches" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "target" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "response" jsonb,
+        "num_results" integer NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "crawls" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "url" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "num_docs" integer NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "cancelled" boolean NOT NULL,
+        "monitor_id" uuid,
+        "monitor_check_id" uuid
+      );
+      --> statement-breakpoint
+      CREATE TABLE "deep_researches" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "query" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "cost_tracking" jsonb,
+        "options" jsonb
+      );
+      --> statement-breakpoint
+      CREATE TABLE "deterministic_json_llm_cache" (
+        "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+        "cache_key" text NOT NULL UNIQUE,
+        "response" text NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "last_used_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "deterministic_json_scripts" (
+        "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+        "cache_key" text NOT NULL UNIQUE,
+        "code" text NOT NULL,
+        "url" text,
+        "model" text,
+        "cache_version" integer,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "last_used_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "eb-sync" (
+        "id" bigint GENERATED BY DEFAULT AS IDENTITY (sequence name "eb-sync_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "team_id" text
+      );
+      --> statement-breakpoint
+      CREATE TABLE "extracts" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "urls" text[] NOT NULL,
+        "options" jsonb,
+        "model_kind" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "cost_tracking" jsonb
+      );
+      --> statement-breakpoint
+      CREATE TABLE "idempotency_keys" (
+        "key" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "ip_restriction_config" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "team_id" uuid NOT NULL UNIQUE,
+        "allowed_ips" jsonb DEFAULT '[]' NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "key_restriction_config" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "api_key_id" bigint NOT NULL UNIQUE,
+        "team_id" uuid NOT NULL,
+        "allowed_formats" jsonb DEFAULT '[]' NOT NULL,
+        "allowed_endpoints" jsonb DEFAULT '[]' NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        CONSTRAINT "allowed_formats_is_string_array" CHECK (jsonb_typeof("allowed_formats") = 'array' AND NOT jsonb_path_exists("allowed_formats", '$$[*] ? (@.type() != "string")')),
+        CONSTRAINT "allowed_endpoints_is_string_array" CHECK (jsonb_typeof("allowed_endpoints") = 'array' AND NOT jsonb_path_exists("allowed_endpoints", '$$[*] ? (@.type() != "string")'))
+      );
+      --> statement-breakpoint
+      CREATE TABLE "keyless_credit_usage" (
+        "id" bigint GENERATED BY DEFAULT AS IDENTITY (sequence name "keyless_credit_usage_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "team_id" uuid NOT NULL,
+        "ip" text NOT NULL,
+        "credits_used" integer NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "llm_texts" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "origin_url" text NOT NULL,
+        "llmstxt" text NOT NULL,
+        "llmstxt_full" text NOT NULL,
+        "max_urls" integer NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone
+      );
+      --> statement-breakpoint
+      CREATE TABLE "llmstxts" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "url" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "num_urls" integer NOT NULL,
+        "options" jsonb,
+        "cost_tracking" jsonb,
+        "credits_cost" integer NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "maps" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "url" text NOT NULL,
+        "options" jsonb,
+        "team_id" uuid NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "num_results" integer NOT NULL,
+        "credits_cost" integer NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "mcp_action_logs" (
+        "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+        "team_id" uuid NOT NULL,
+        "user_id" uuid,
+        "api_key_id" bigint,
+        "oauth_client_id" text,
+        "auth_type" text NOT NULL,
+        "tool_name" text NOT NULL,
+        "status" text NOT NULL,
+        "request_id" uuid NOT NULL,
+        "client_name" text,
+        "client_version" text,
+        "error_class" text,
+        "resource" text NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "expires_at" timestamp with time zone NOT NULL,
+        CONSTRAINT "mcp_action_logs_team_request_unique" UNIQUE("team_id","request_id")
+      );
+      --> statement-breakpoint
+      CREATE TABLE "monitor_check_pages" (
+        "id" uuid NOT NULL,
+        "check_id" uuid NOT NULL,
+        "monitor_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "target_id" text NOT NULL,
+        "url" text NOT NULL,
+        "url_hash" bytea NOT NULL,
+        "status" text NOT NULL,
+        "previous_scrape_id" uuid,
+        "current_scrape_id" uuid,
+        "diff_gcs_key" text,
+        "diff_text_bytes" integer,
+        "diff_json_bytes" integer,
+        "status_code" integer,
+        "error" text,
+        "metadata" jsonb,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "judgment" jsonb
+      );
+      --> statement-breakpoint
+      CREATE TABLE "monitor_checks" (
+        "id" uuid NOT NULL,
+        "monitor_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "trigger" text NOT NULL,
+        "status" text DEFAULT 'queued' NOT NULL,
+        "scheduled_for" timestamp with time zone,
+        "started_at" timestamp with time zone,
+        "finished_at" timestamp with time zone,
+        "estimated_credits" integer,
+        "reserved_credits" integer,
+        "actual_credits" integer,
+        "autumn_lock_id" text,
+        "billing_status" text DEFAULT 'not_applicable' NOT NULL,
+        "total_pages" integer DEFAULT 0 NOT NULL,
+        "same_count" integer DEFAULT 0 NOT NULL,
+        "changed_count" integer DEFAULT 0 NOT NULL,
+        "new_count" integer DEFAULT 0 NOT NULL,
+        "removed_count" integer DEFAULT 0 NOT NULL,
+        "error_count" integer DEFAULT 0 NOT NULL,
+        "target_results" jsonb,
+        "webhook_payload" jsonb,
+        "email_payload" jsonb,
+        "notification_status" jsonb,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "monitor_email_recipients" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "monitor_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "email" text NOT NULL,
+        "status" text DEFAULT 'pending' NOT NULL,
+        "token" text NOT NULL,
+        "source" text DEFAULT 'opt_in' NOT NULL,
+        "confirmation_sent_at" timestamp with time zone,
+        "confirmed_at" timestamp with time zone,
+        "unsubscribed_at" timestamp with time zone,
+        "last_notified_at" timestamp with time zone,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "monitor_pages" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "monitor_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "target_id" text NOT NULL,
+        "url" text NOT NULL,
+        "url_hash" bytea NOT NULL,
+        "source" text NOT NULL,
+        "first_seen_check_id" uuid,
+        "last_seen_check_id" uuid,
+        "last_changed_check_id" uuid,
+        "last_scrape_id" uuid,
+        "last_status" text NOT NULL,
+        "is_removed" boolean DEFAULT false NOT NULL,
+        "removed_at" timestamp with time zone,
+        "metadata" jsonb,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "monitors" (
+        "id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "name" text NOT NULL,
+        "status" text DEFAULT 'active' NOT NULL,
+        "schedule_cron" text NOT NULL,
+        "schedule_timezone" text DEFAULT 'UTC' NOT NULL,
+        "next_run_at" timestamp with time zone,
+        "last_run_at" timestamp with time zone,
+        "last_check_id" uuid,
+        "current_check_id" uuid,
+        "locked_at" timestamp with time zone,
+        "locked_until" timestamp with time zone,
+        "retention_days" integer DEFAULT 30 NOT NULL,
+        "estimated_credits_per_month" integer,
+        "targets" jsonb DEFAULT '[]' NOT NULL,
+        "webhook" jsonb,
+        "notification" jsonb,
+        "last_check_summary" jsonb,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "deleted_at" timestamp with time zone,
+        "goal" text,
+        "judge_enabled" boolean DEFAULT false NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "notification_preferences" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "user_id" uuid NOT NULL,
+        "last_referral_notification" timestamp with time zone,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "email_preferences" text[] DEFAULT '{rate_limit_warnings,system_alerts}'::text[],
+        "unsubscribed_all" boolean DEFAULT false
+      );
+      --> statement-breakpoint
+      CREATE TABLE "parses" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "url" text NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "time_taken" numeric NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "cost_tracking" jsonb,
+        "pdf_num_pages" integer,
+        "credits_cost" integer NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "partner_provisioned_accounts" (
+        "id" bigint GENERATED BY DEFAULT AS IDENTITY (sequence name "partner_provisioned_accounts_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+        "integration_id" bigint NOT NULL,
+        "team_id" uuid NOT NULL,
+        "org_id" uuid NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "prices" (
+        "id" text NOT NULL,
+        "product_id" text,
+        "active" boolean DEFAULT true NOT NULL,
+        "description" text,
+        "unit_amount" bigint,
+        "currency" text DEFAULT 'usd',
+        "type" text DEFAULT 'recurring',
+        "interval" text,
+        "interval_count" integer DEFAULT 1,
+        "trial_period_days" integer DEFAULT 0,
+        "metadata" jsonb DEFAULT '{}',
+        "credits" integer DEFAULT 50,
+        "is_usage" boolean DEFAULT false,
+        "rate_limits" jsonb,
+        "concurrency" integer,
+        "plan_priority" jsonb,
+        "upfront" boolean DEFAULT false,
+        "slug" text DEFAULT gen_random_uuid() NOT NULL,
+        "should_be_graceful" boolean DEFAULT false,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "unit_amount_rollover_cap" smallint DEFAULT 0 NOT NULL,
+        "associated_auto_recharge_price_id" text,
+        "exp_pack_max_per_month" integer
+      );
+      --> statement-breakpoint
+      CREATE TABLE "products" (
+        "id" text NOT NULL,
+        "active" boolean DEFAULT true NOT NULL,
+        "name" text,
+        "description" text,
+        "image" text,
+        "metadata" jsonb DEFAULT '{}' NOT NULL,
+        "order" smallint,
+        "test_mode" boolean DEFAULT true,
+        "is_enterprise" boolean DEFAULT false,
+        "is_extract" boolean DEFAULT false,
+        "is_displayed" boolean DEFAULT false,
+        "is_stripe_test" boolean DEFAULT false,
+        "slug" text,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "type" text
+      );
+      --> statement-breakpoint
+      CREATE TABLE "requests" (
+        "id" uuid NOT NULL,
+        "kind" text NOT NULL,
+        "api_version" text NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "team_id" uuid NOT NULL,
+        "origin" text NOT NULL,
+        "integration" text,
+        "target_hint" text NOT NULL,
+        "dr_clean_by" timestamp with time zone,
+        "api_key_id" bigint,
+        "external_request_id" text
+      );
+      --> statement-breakpoint
+      CREATE TABLE "research_github_searches" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "target" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "response" jsonb,
+        "num_results" integer NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "research_paper_inspects" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "target" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "response" jsonb,
+        "num_results" integer NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "research_paper_reads" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "target" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "response" jsonb,
+        "num_results" integer NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "research_paper_searches" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "target" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "response" jsonb,
+        "num_results" integer NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "research_related_papers" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "target" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "response" jsonb,
+        "num_results" integer NOT NULL,
+        "time_taken" numeric NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "scrapes" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "url" text NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "time_taken" numeric NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "cost_tracking" jsonb,
+        "pdf_num_pages" integer,
+        "credits_cost" integer NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "monitor_id" uuid,
+        "monitor_check_id" uuid,
+        "content_type" text
+      );
+      --> statement-breakpoint
+      CREATE TABLE "search_feedback" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "search_id" uuid,
+        "endpoint" text DEFAULT 'search' NOT NULL,
+        "job_id" uuid,
+        "request_id" uuid,
+        "api_version" text DEFAULT 'v2',
+        "team_id" uuid NOT NULL,
+        "api_key_id" bigint,
+        "overall_rating" text NOT NULL,
+        "issue_types" text[] DEFAULT '{}'::text[] NOT NULL,
+        "tags" text[] DEFAULT '{}'::text[] NOT NULL,
+        "comment" text,
+        "valuable_sources" jsonb DEFAULT '[]' NOT NULL,
+        "missing_content" jsonb DEFAULT '[]' NOT NULL,
+        "query_suggestions" text,
+        "metadata" jsonb DEFAULT '{}' NOT NULL,
+        "job_status" text,
+        "credits_billed" integer DEFAULT 0 NOT NULL,
+        "integration" text,
+        "origin" text,
+        "credits_refunded" integer DEFAULT 0 NOT NULL,
+        "refund_policy" jsonb,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "searches" (
+        "id" uuid NOT NULL,
+        "request_id" uuid NOT NULL,
+        "query" text NOT NULL,
+        "team_id" uuid NOT NULL,
+        "options" jsonb,
+        "time_taken" numeric NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "credits_cost" integer NOT NULL,
+        "is_successful" boolean NOT NULL,
+        "error" text,
+        "num_results" integer NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "siem_logging_config" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "org_id" uuid NOT NULL UNIQUE,
+        "enabled" boolean DEFAULT false NOT NULL,
+        "destination" jsonb DEFAULT '{}' NOT NULL,
+        "secret_ciphertext" text NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "slack_installations" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "team_id" uuid NOT NULL,
+        "slack_team_id" text NOT NULL,
+        "slack_team_name" text,
+        "slack_enterprise_id" text,
+        "bot_user_id" text,
+        "bot_token" text NOT NULL,
+        "scope" text,
+        "authed_user_id" text,
+        "app_id" text,
+        "incoming_webhook" jsonb,
+        "revoked_at" timestamp with time zone,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "subscriptions" (
+        "id" text NOT NULL,
+        "user_id" uuid NOT NULL,
+        "status" text,
+        "metadata" jsonb,
+        "price_id" text,
+        "quantity" integer,
+        "cancel_at_period_end" boolean,
+        "created" timestamp with time zone DEFAULT now() NOT NULL,
+        "current_period_start" timestamp with time zone DEFAULT now() NOT NULL,
+        "current_period_end" timestamp with time zone DEFAULT now() NOT NULL,
+        "ended_at" timestamp with time zone DEFAULT now(),
+        "cancel_at" timestamp with time zone DEFAULT now(),
+        "canceled_at" timestamp with time zone DEFAULT now(),
+        "trial_start" timestamp with time zone DEFAULT now(),
+        "trial_end" timestamp with time zone DEFAULT now(),
+        "team_id" uuid,
+        "is_usage" boolean DEFAULT false,
+        "is_extract" boolean DEFAULT false,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "expansion_associated_coupon" bigint,
+        "pending_price_id" text,
+        "pending_price_effective_at" timestamp with time zone,
+        "pending_schedule_id" text
+      );
+      --> statement-breakpoint
+      CREATE TABLE "teams" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now(),
+        "name" text,
+        "banned" boolean DEFAULT false,
+        "idmux_expires_at" timestamp with time zone,
+        "updated_at" timestamp with time zone DEFAULT now(),
+        "hmac_secret" text DEFAULT encode(extensions.gen_random_bytes(32), 'hex'::text) NOT NULL,
+        "referrer_integration" varchar,
+        "allocated_concurrent_browsers" integer,
+        "org_id" uuid NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "threat_protection_config" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "org_id" uuid NOT NULL UNIQUE,
+        "mode" varchar DEFAULT 'off' NOT NULL,
+        "config" jsonb DEFAULT '{}' NOT NULL,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+      );
+      --> statement-breakpoint
+      CREATE TABLE "user_notifications" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "team_id" uuid,
+        "notification_type" text NOT NULL,
+        "sent_date" date NOT NULL,
+        "email_id" text,
+        "timestamp" timestamp with time zone,
+        "read" boolean DEFAULT false,
+        "metadata" jsonb
+      );
+      --> statement-breakpoint
+      CREATE TABLE "user_teams" (
+        "user_id" uuid NOT NULL,
+        "team_id" uuid NOT NULL,
+        "role" text DEFAULT 'admin',
+        "created_at" timestamp with time zone DEFAULT now()
+      );
+      --> statement-breakpoint
+      CREATE TABLE "users" (
+        "id" uuid NOT NULL,
+        "full_name" text,
+        "avatar_url" text,
+        "billing_address" jsonb,
+        "payment_method" jsonb,
+        "email" text,
+        "team_id" uuid,
+        "created_on" timestamp with time zone DEFAULT now(),
+        "referrer_integration" varchar
+      );
+      --> statement-breakpoint
+      CREATE TABLE "webhook_logs" (
+        "id" uuid DEFAULT gen_random_uuid() NOT NULL,
+        "success" boolean NOT NULL,
+        "error" text,
+        "team_id" uuid NOT NULL,
+        "crawl_id" uuid NOT NULL,
+        "scrape_id" uuid,
+        "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+        "url" text NOT NULL,
+        "status_code" smallint,
+        "event" text NOT NULL,
+        "latency_ms" integer DEFAULT 0
+      );
+      --> statement-breakpoint
+      CREATE INDEX "mcp_action_logs_expires_idx" ON "mcp_action_logs" ("expires_at");--> statement-breakpoint
+      ALTER TABLE "key_restriction_config" ADD CONSTRAINT "key_restriction_config_9bDRALPGpEuO_fkey" FOREIGN KEY ("api_key_id","team_id") REFERENCES "api_keys"("id","team_id") ON DELETE CASCADE;
+  db-init-constraints:
+    content: |
+      \set ON_ERROR_STOP on
+
+      -- The public Drizzle schema mirrors Firecrawl's managed database shape, where
+      -- several constraints are applied out-of-band. Recreate those constraints for
+      -- a standalone PostgreSQL database.
+      DO $$firecrawl$$
+      DECLARE
+        table_record record;
+      BEGIN
+        FOR table_record IN
+          SELECT c.table_name
+          FROM information_schema.columns c
+          JOIN information_schema.tables t
+            ON t.table_schema = c.table_schema
+           AND t.table_name = c.table_name
+          WHERE c.table_schema = 'public'
+            AND c.column_name = 'id'
+            AND c.is_nullable = 'NO'
+            AND t.table_type = 'BASE TABLE'
+            AND NOT EXISTS (
+              SELECT 1
+              FROM pg_constraint pc
+              JOIN pg_class rel ON rel.oid = pc.conrelid
+              JOIN pg_namespace ns ON ns.oid = rel.relnamespace
+              WHERE ns.nspname = 'public'
+                AND rel.relname = c.table_name
+                AND pc.contype = 'p'
+            )
+        LOOP
+          EXECUTE format(
+            'ALTER TABLE public.%I ADD CONSTRAINT %I PRIMARY KEY (id)',
+            table_record.table_name,
+            table_record.table_name || '_pkey'
+          );
+        END LOOP;
+      END
+      $$firecrawl$$;
+
+      CREATE UNIQUE INDEX IF NOT EXISTS api_keys_key_unique
+        ON public.api_keys (key);
+      CREATE UNIQUE INDEX IF NOT EXISTS idempotency_keys_key_unique
+        ON public.idempotency_keys (key);
+      CREATE UNIQUE INDEX IF NOT EXISTS slack_installations_team_id_unique
+        ON public.slack_installations (team_id);
+      CREATE UNIQUE INDEX IF NOT EXISTS monitor_pages_identity_unique
+        ON public.monitor_pages (monitor_id, target_id, url_hash);
+      CREATE UNIQUE INDEX IF NOT EXISTS monitor_email_recipients_identity_unique
+        ON public.monitor_email_recipients (monitor_id, email);
+
+      CREATE INDEX IF NOT EXISTS api_keys_team_id_idx ON public.api_keys (team_id);
+      CREATE INDEX IF NOT EXISTS requests_team_id_idx ON public.requests (team_id);
+      CREATE INDEX IF NOT EXISTS requests_dr_clean_by_idx
+        ON public.requests (dr_clean_by)
+        WHERE dr_clean_by IS NOT NULL;
+      CREATE INDEX IF NOT EXISTS monitors_due_idx
+        ON public.monitors (next_run_at)
+        WHERE status = 'active' AND deleted_at IS NULL;
+
+  db-init-rpcs:
+    # Standalone implementations for database RPCs called by v2.11.230.
+    content: |
+      \set ON_ERROR_STOP on
+
+      -- Firecrawl's current API calls these PostgreSQL functions directly. They are
+      -- not included in the public self-host guide, so this file supplies standalone
+      -- equivalents. Billing is intentionally unlimited for this private self-host.
+
+      CREATE OR REPLACE FUNCTION public.selfhost_unlimited_rate_limit_flags()
+      RETURNS jsonb
+      LANGUAGE sql
+      IMMUTABLE
+      AS $$function$$
+        SELECT jsonb_build_object(
+          'rateLimitOverrides',
+          jsonb_build_object(
+            'crawl', 2147483647,
+            'crawlStatus', 2147483647,
+            'scrape', 2147483647,
+            'scrapeAgentPreview', 2147483647,
+            'preview', 2147483647,
+            'search', 2147483647,
+            'map', 2147483647,
+            'extract', 2147483647,
+            'extractStatus', 2147483647,
+            'extractAgentPreview', 2147483647,
+            'browser', 2147483647,
+            'browserExecute', 2147483647,
+            'browserReplay', 2147483647,
+            'account', 2147483647,
+            'supportAsk', 2147483647,
+            'supportDocsSearch', 2147483647,
+            'research', 2147483647,
+            'developerSearch', 2147483647,
+            'labs', 2147483647
+          )
+        )
+      $$function$$;
+
+      CREATE TABLE IF NOT EXISTS public.firecrawl_change_tracking_scrapes (
+        id bigint GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+        team_id uuid NOT NULL,
+        url text NOT NULL,
+        job_id text NOT NULL,
+        change_tracking_tag text,
+        date_added timestamptz NOT NULL DEFAULT now()
+      );
+
+      CREATE INDEX IF NOT EXISTS firecrawl_change_tracking_lookup_idx
+        ON public.firecrawl_change_tracking_scrapes
+          (team_id, url, change_tracking_tag, date_added DESC);
+
+      CREATE OR REPLACE FUNCTION public.auth_chunk_1(
+        input_key text,
+        input_credential_purpose text DEFAULT 'general'
+      )
+      RETURNS TABLE (
+        api_key text,
+        api_key_id bigint,
+        team_id uuid,
+        org_id uuid,
+        flags jsonb,
+        is_banned boolean
+      )
+      LANGUAGE sql
+      STABLE
+      SECURITY DEFINER
+      SET search_path = public, pg_temp
+      AS $$function$$
+        SELECT
+          k.key::text,
+          k.id,
+          t.id,
+          t.org_id,
+          public.selfhost_unlimited_rate_limit_flags(),
+          COALESCE(t.banned, false)
+        FROM public.api_keys k
+        JOIN public.teams t ON t.id = k.team_id
+        WHERE k.key::text = input_key
+        LIMIT 1
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.auth_chunk_1_from_team(input_team text)
+      RETURNS TABLE (
+        api_key text,
+        api_key_id bigint,
+        team_id uuid,
+        org_id uuid,
+        flags jsonb,
+        is_banned boolean
+      )
+      LANGUAGE sql
+      STABLE
+      SECURITY DEFINER
+      SET search_path = public, pg_temp
+      AS $$function$$
+        SELECT
+          k.key::text,
+          k.id,
+          t.id,
+          t.org_id,
+          public.selfhost_unlimited_rate_limit_flags(),
+          COALESCE(t.banned, false)
+        FROM public.teams t
+        LEFT JOIN LATERAL (
+          SELECT ak.id, ak.key
+          FROM public.api_keys ak
+          WHERE ak.team_id = t.id
+          ORDER BY ak.id
+          LIMIT 1
+        ) k ON true
+        WHERE t.id = input_team::uuid
+        LIMIT 1
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.bill_team_7(
+        _team_id uuid,
+        sub_id text,
+        credits numeric,
+        i_api_key_id bigint,
+        is_extract_param boolean
+      )
+      RETURNS TABLE (api_key text)
+      LANGUAGE sql
+      VOLATILE
+      SECURITY DEFINER
+      SET search_path = public, pg_temp
+      AS $$function$$
+        SELECT k.key::text
+        FROM public.api_keys k
+        WHERE k.team_id = _team_id
+          AND (i_api_key_id IS NULL OR k.id = i_api_key_id)
+        ORDER BY k.id
+        LIMIT 1
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.credits_billed_by_crawl_id_2(i_crawl_id uuid)
+      RETURNS TABLE (credits_billed bigint)
+      LANGUAGE sql
+      STABLE
+      SET search_path = public, pg_temp
+      AS $$function$$
+        SELECT COALESCE((
+          SELECT c.credits_cost::bigint
+          FROM public.crawls c
+          WHERE c.id = i_crawl_id
+          LIMIT 1
+        ), 0::bigint)
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.change_tracking_insert_scrape(
+        p_team_id uuid,
+        p_url text,
+        p_job_id text,
+        p_change_tracking_tag text,
+        p_date_added timestamptz
+      )
+      RETURNS bigint
+      LANGUAGE plpgsql
+      VOLATILE
+      SET search_path = public, pg_temp
+      AS $$function$$
+      DECLARE
+        inserted_id bigint;
+      BEGIN
+        INSERT INTO public.firecrawl_change_tracking_scrapes (
+          team_id, url, job_id, change_tracking_tag, date_added
+        ) VALUES (
+          p_team_id, p_url, p_job_id, p_change_tracking_tag, p_date_added
+        )
+        RETURNING id INTO inserted_id;
+        RETURN inserted_id;
+      END
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.diff_get_last_scrape_v7(
+        i_team_id uuid,
+        i_url text,
+        i_tag text
+      )
+      RETURNS TABLE (o_job_id text, o_date_added timestamptz)
+      LANGUAGE sql
+      STABLE
+      SET search_path = public, pg_temp
+      AS $$function$$
+        SELECT ct.job_id, ct.date_added
+        FROM public.firecrawl_change_tracking_scrapes ct
+        WHERE ct.team_id = i_team_id
+          AND ct.url = i_url
+          AND ct.change_tracking_tag IS NOT DISTINCT FROM i_tag
+        ORDER BY ct.date_added DESC
+        LIMIT 1
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.get_zdr_cleanup_batch_2(p_limit integer)
+      RETURNS TABLE (request_id uuid, ids uuid[])
+      LANGUAGE sql
+      STABLE
+      SET search_path = public, pg_temp
+      AS $$function$$
+        SELECT NULL::uuid, ARRAY[]::uuid[]
+        WHERE false
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.monitoring_claim_due_monitors(
+        p_worker_id text,
+        p_limit integer,
+        p_lease_seconds integer
+      )
+      RETURNS SETOF public.monitors
+      LANGUAGE plpgsql
+      VOLATILE
+      SET search_path = public, pg_temp
+      AS $$function$$
+      BEGIN
+        RETURN QUERY
+        WITH due AS (
+          SELECT m.id
+          FROM public.monitors m
+          WHERE m.status = 'active'
+            AND m.deleted_at IS NULL
+            AND m.next_run_at IS NOT NULL
+            AND m.next_run_at <= now()
+            AND (m.locked_until IS NULL OR m.locked_until < now())
+          ORDER BY m.next_run_at
+          FOR UPDATE SKIP LOCKED
+          LIMIT GREATEST(p_limit, 0)
+        )
+        UPDATE public.monitors m
+        SET locked_at = now(),
+            locked_until = now() + make_interval(secs => GREATEST(p_lease_seconds, 1)),
+            updated_at = now()
+        FROM due
+        WHERE m.id = due.id
+        RETURNING m.*;
+      END
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.get_agent_free_requests_left(i_team_id uuid)
+      RETURNS TABLE (free_requests_left integer)
+      LANGUAGE sql
+      STABLE
+      AS $$function$$
+        SELECT 2147483647
+      $$function$$;
+
+      CREATE OR REPLACE FUNCTION public.agent_consume_free_request_if_left(i_team_id uuid)
+      RETURNS TABLE (consumed boolean)
+      LANGUAGE sql
+      VOLATILE
+      AS $$function$$
+        SELECT true
+      $$function$$;
+
+  db-seed:
+    content: |
+      \set ON_ERROR_STOP on
+
+      INSERT INTO public.organizations (id, name)
+      VALUES (:'org_id'::uuid, 'Self-hosted')
+      ON CONFLICT (id) DO UPDATE SET updated_at = now();
+
+      INSERT INTO public.teams (id, name, org_id, banned)
+      VALUES (:'team_id'::uuid, 'Self-hosted', :'org_id'::uuid, false)
+      ON CONFLICT (id) DO UPDATE
+      SET org_id = EXCLUDED.org_id,
+          banned = false,
+          updated_at = now();
+
+      INSERT INTO public.api_keys (key, name, team_id)
+      VALUES (regexp_replace(:'api_key', '^fc-', '')::uuid, 'Dokploy production', :'team_id'::uuid)
+      ON CONFLICT (key) DO UPDATE
+      SET team_id = EXCLUDED.team_id,
+          name = EXCLUDED.name;
+
+      -- Workers require one global row even when the self-host blocklist is empty.
+      INSERT INTO public.blocklist (data, org_id)
+      SELECT '{"blocklist":[],"allowedKeywords":[]}'::jsonb, NULL
+      WHERE NOT EXISTS (
+        SELECT 1 FROM public.blocklist WHERE org_id IS NULL
+      );
+
+  firecrawl-openapi:
+    content: |
+      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
+
+  firecrawl-gateway-nginx:
+    content: |
+      server {
+        listen 8080;
+        server_name _;
+        client_max_body_size 50m;
+
+        location = /openapi.json {
+          proxy_pass http://swagger-ui:8080/openapi.json;
+          proxy_set_header Host $$host;
+          add_header Cache-Control "no-store" always;
+        }
+
+        location = /docs {
+          return 308 /docs/;
+        }
+
+        location /docs/ {
+          proxy_pass http://swagger-ui:8080/;
+          proxy_set_header Host $$host;
+          proxy_set_header X-Forwarded-Proto $$scheme;
+          proxy_set_header X-Forwarded-Prefix /docs;
+        }
+
+        location / {
+          proxy_pass http://firecrawl:3002;
+          proxy_http_version 1.1;
+          proxy_set_header Host $$host;
+          proxy_set_header X-Real-IP $$remote_addr;
+          proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
+          proxy_set_header X-Forwarded-Proto $$scheme;
+          proxy_set_header Upgrade $$http_upgrade;
+          proxy_set_header Connection $$connection_upgrade;
+          proxy_read_timeout 3600s;
+          proxy_send_timeout 3600s;
+        }
+      }
+
+      map $$http_upgrade $$connection_upgrade {
+        default upgrade;
+        '' close;
+      }
+
+
+
 volumes:
-  nuq_pg_data:
+  firecrawl-db-data:
+  nuq-postgres-data:
+  redis-data:
+  rabbitmq-data:
diff --git a/blueprints/firecrawl/instructions.md b/blueprints/firecrawl/instructions.md
new file mode 100644
index 000000000..d906ffcd4
--- /dev/null
+++ b/blueprints/firecrawl/instructions.md
@@ -0,0 +1,101 @@
+# Firecrawl
+
+This template deploys Firecrawl `2.11.230` with authenticated API access, persistent infrastructure, browser rendering, and interactive Swagger documentation.
+
+## First deployment
+
+1. Create the template and keep the generated environment values unchanged.
+2. Deploy the Compose service.
+3. Wait for `firecrawl-db-seed` to finish and for `gateway` and `firecrawl` to become healthy. The first start can take several minutes.
+4. Open `https://<your-domain>/docs/` for the interactive API documentation.
+
+Dokploy generates the client credential in the Environment tab:
+
+```text
+FIRECRAWL_API_KEY=fc-...
+```
+
+Treat this value as a secret. The template provisions it in Firecrawl's PostgreSQL authentication database automatically.
+
+## Test the API
+
+```bash
+curl -X POST "https://<your-domain>/v2/scrape" \
+  -H "Authorization: Bearer <FIRECRAWL_API_KEY>" \
+  -H "Content-Type: application/json" \
+  -d '{"url":"https://docs.dokploy.com","formats":[{"type":"markdown"}]}'
+```
+
+The OpenAPI document is available at:
+
+```text
+https://<your-domain>/openapi.json
+```
+
+## Included services
+
+- `gateway`: public same-origin API and documentation gateway.
+- `firecrawl`: API plus queue, extract, indexing, NuQ, and reconciliation workers.
+- `playwright-service`: browser-rendered scraping.
+- `firecrawl-db`: authentication, request, crawl, monitoring, and application data.
+- `nuq-postgres`: durable NuQ job storage.
+- `redis`: queues, caching, and rate-limit state.
+- `rabbitmq`: extract-job transport.
+- `swagger-ui`: interactive API documentation.
+
+Only the gateway is assigned a public domain. PostgreSQL, Redis, RabbitMQ, Playwright, and worker ports remain private.
+
+## Capabilities
+
+Scrape, batch scrape, crawl, map, parsing, browser sessions, monitoring, change tracking, and the normal non-AI API paths work without an external model provider.
+
+AI-backed extraction, JSON generation, agent features, and summaries require one of these configurations in the Environment tab:
+
+- `OPENAI_API_KEY`, optionally with `OPENAI_BASE_URL`
+- `OPENROUTER_API_KEY`
+- `OLLAMA_BASE_URL`
+
+Set `MODEL_NAME` and `MODEL_EMBEDDING_NAME` when the provider requires explicit model names.
+
+Search integrations can be configured with `SEARCHAPI_API_KEY` or `SEARXNG_ENDPOINT`. Proxy variables and LlamaParse are optional.
+
+## MCP clients
+
+The Firecrawl API is not itself an MCP transport. Connect the official Firecrawl MCP adapter to this deployment:
+
+```json
+{
+  "mcpServers": {
+    "firecrawl-selfhost": {
+      "command": "npx",
+      "args": ["-y", "firecrawl-mcp"],
+      "env": {
+        "FIRECRAWL_API_URL": "https://<your-domain>",
+        "FIRECRAWL_API_KEY": "<FIRECRAWL_API_KEY>"
+      }
+    }
+  }
+}
+```
+
+## Persistence and backups
+
+The following named volumes contain persistent state:
+
+- `firecrawl-db-data`
+- `nuq-postgres-data`
+- `redis-data`
+- `rabbitmq-data`
+
+Back up both PostgreSQL volumes before upgrading. Redis and RabbitMQ backups are also recommended when queued jobs must survive disaster recovery.
+
+Database initialization scripts run only when `firecrawl-db-data` is empty. A newer Firecrawl image may require schema or RPC changes, so do not replace the pinned image with `latest` without reviewing migrations and testing a restored backup.
+
+## Security notes
+
+- Keep `ALLOW_LOCAL_WEBHOOKS=false` unless private-network webhook access is intentional.
+- Keep the generated database, Redis, RabbitMQ, and Bull secrets private.
+- Use HTTPS for the public domain.
+- The generated API key receives unrestricted self-host rate-limit overrides; protect it like an administrator credential.
+- Changing `FIRECRAWL_API_KEY` after deployment provisions another key and does not automatically revoke the old one.
+
diff --git a/blueprints/firecrawl/meta.json b/blueprints/firecrawl/meta.json
index 452dec5b2..30a4d9ccc 100644
--- a/blueprints/firecrawl/meta.json
+++ b/blueprints/firecrawl/meta.json
@@ -1,19 +1,21 @@
 {
   "id": "firecrawl",
   "name": "Firecrawl",
-  "version": "latest",
-  "description": "Firecrawl is an API service that takes a URL, crawls it, and converts it into clean markdown or structured data. It can crawl all accessible subpages and provide clean data for each.",
+  "version": "2.11.230",
+  "description": "Production-ready, authenticated Firecrawl with persistent queues, browser rendering, a generated API key, and interactive OpenAPI documentation.",
   "logo": "firecrawl.svg",
   "links": {
     "github": "https://github.com/firecrawl/firecrawl",
     "website": "https://firecrawl.dev",
-    "docs": "https://github.com/firecrawl/firecrawl"
+    "docs": "https://docs.firecrawl.dev/contributing/self-host"
   },
   "tags": [
     "api",
     "crawler",
     "scraping",
     "data-extraction",
-    "llm"
+    "llm",
+    "automation",
+    "self-hosted"
   ]
 }
diff --git a/blueprints/firecrawl/template.toml b/blueprints/firecrawl/template.toml
index 999ec4ca0..c9db68367 100644
--- a/blueprints/firecrawl/template.toml
+++ b/blueprints/firecrawl/template.toml
@@ -1,65 +1,61 @@
 [variables]
 main_domain = "${domain}"
-openai_api_key = "${OPENAI_API_KEY}"
-openai_base_url = "${OPENAI_BASE_URL}"
-ollama_base_url = "${OLLAMA_BASE_URL}"
-model_name = "${MODEL_NAME}"
-model_embedding_name = "${MODEL_EMBEDDING_NAME}"
-proxy_server = "${PROXY_SERVER}"
-proxy_username = "${PROXY_USERNAME}"
-proxy_password = "${PROXY_PASSWORD}"
-searxng_endpoint = "${SEARXNG_ENDPOINT}"
-searxng_engines = "${SEARXNG_ENGINES}"
-searxng_categories = "${SEARXNG_CATEGORIES}"
-supabase_anon_token = "${SUPABASE_ANON_TOKEN}"
-supabase_url = "${SUPABASE_URL}"
-supabase_service_token = "${SUPABASE_SERVICE_TOKEN}"
-test_api_key = "${TEST_API_KEY}"
-bull_auth_key = "${password:32}"
-llamaparse_api_key = "${LLAMAPARSE_API_KEY}"
-slack_webhook_url = "${SLACK_WEBHOOK_URL}"
-posthog_api_key = "${POSTHOG_API_KEY}"
-posthog_host = "${POSTHOG_HOST}"
-max_cpu = "${MAX_CPU}"
-max_ram = "${MAX_RAM}"
+app_postgres_password = "${hash:32}"
+nuq_postgres_password = "${hash:32}"
+redis_password = "${hash:32}"
+rabbitmq_password = "${hash:32}"
+bull_auth_key = "${hash:32}"
+firecrawl_org_id = "${uuid}"
+firecrawl_team_id = "${uuid}"
+# Dokploy's real hash helper returns exactly N hex characters. Force the UUID
+# version and variant nibbles so Firecrawl's strict API-key parser accepts it.
+firecrawl_api_key_a = "${hash:12}"
+firecrawl_api_key_b = "${hash:3}"
+firecrawl_api_key_c = "${hash:15}"
+firecrawl_api_key = "fc-${firecrawl_api_key_a}4${firecrawl_api_key_b}8${firecrawl_api_key_c}"
+self_hosted_webhook_hmac_secret = "${hash:32}"
 
 [config]
 env = [
-  "PORT=3002",
-  "HOST=0.0.0.0",
-  "USE_DB_AUTHENTICATION=false",
+  "APP_POSTGRES_PASSWORD=${app_postgres_password}",
+  "NUQ_POSTGRES_PASSWORD=${nuq_postgres_password}",
+  "REDIS_PASSWORD=${redis_password}",
+  "RABBITMQ_USER=firecrawl",
+  "RABBITMQ_PASSWORD=${rabbitmq_password}",
   "BULL_AUTH_KEY=${bull_auth_key}",
-  "PLAYWRIGHT_MICROSERVICE_URL=http://playwright-service:3000/scrape",
-  "REDIS_URL=redis://redis:6379",
-  "REDIS_RATE_LIMIT_URL=redis://redis:6379",
-  "OPENAI_API_KEY=${openai_api_key}",
-  "OPENAI_BASE_URL=${openai_base_url}",
-  "OLLAMA_BASE_URL=${ollama_base_url}",
-  "MODEL_NAME=${model_name}",
-  "MODEL_EMBEDDING_NAME=${model_embedding_name}",
-  "PROXY_SERVER=${proxy_server}",
-  "PROXY_USERNAME=${proxy_username}",
-  "PROXY_PASSWORD=${proxy_password}",
-  "SEARXNG_ENDPOINT=${searxng_endpoint}",
-  "SEARXNG_ENGINES=${searxng_engines}",
-  "SEARXNG_CATEGORIES=${searxng_categories}",
-  "SUPABASE_ANON_TOKEN=${supabase_anon_token}",
-  "SUPABASE_URL=${supabase_url}",
-  "SUPABASE_SERVICE_TOKEN=${supabase_service_token}",
-  "TEST_API_KEY=${test_api_key}",
-  "LLAMAPARSE_API_KEY=${llamaparse_api_key}",
-  "SLACK_WEBHOOK_URL=${slack_webhook_url}",
-  "POSTHOG_API_KEY=${posthog_api_key}",
-  "POSTHOG_HOST=${posthog_host}",
-  "MAX_CPU=0.8",
-  "MAX_RAM=0.8"
+  "FIRECRAWL_ORG_ID=${firecrawl_org_id}",
+  "FIRECRAWL_TEAM_ID=${firecrawl_team_id}",
+  "FIRECRAWL_API_KEY=${firecrawl_api_key}",
+  "NUM_WORKERS_PER_QUEUE=8",
+  "CRAWL_CONCURRENT_REQUESTS=10",
+  "MAX_CONCURRENT_JOBS=5",
+  "BROWSER_POOL_SIZE=5",
+  "LOGGING_LEVEL=INFO",
+  "DISABLE_ENGPICKER=true",
+  "ALLOW_LOCAL_WEBHOOKS=false",
+  "BLOCK_MEDIA=true",
+  "OPENAI_API_KEY=",
+  "OPENAI_BASE_URL=",
+  "OPENROUTER_API_KEY=",
+  "OLLAMA_BASE_URL=",
+  "MODEL_NAME=",
+  "MODEL_EMBEDDING_NAME=",
+  "SEARCHAPI_API_KEY=",
+  "SEARXNG_ENDPOINT=",
+  "SEARXNG_ENGINES=",
+  "SEARXNG_CATEGORIES=",
+  "LLAMAPARSE_API_KEY=",
+  "SLACK_WEBHOOK_URL=",
+  "PROXY_SERVER=",
+  "PROXY_USERNAME=",
+  "PROXY_PASSWORD=",
+  "SELF_HOSTED_WEBHOOK_URL=",
+  "SELF_HOSTED_WEBHOOK_HMAC_SECRET=${self_hosted_webhook_hmac_secret}"
 ]
 mounts = []
 
 [[config.domains]]
-serviceName = "api"
-port = 3002
+serviceName = "gateway"
+port = 8080
 host = "${main_domain}"
 path = "/"
-
- 
\ No newline at end of file

From 127b607d76a072c0a16162c265da29f614dfad5a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bora=20G=C3=B6k=C3=A7e?=
 <101249701+BoraGkc@users.noreply.github.com>
Date: Mon, 31 Aug 2026 01:20:26 +0300
Subject: [PATCH 21/33] feat: add BlogFactory template (#1111)

---
 blueprints/blogfactory/README.md          |  12 +++
 blueprints/blogfactory/blogfactory.svg    |   8 ++
 blueprints/blogfactory/docker-compose.yml | 102 ++++++++++++++++++++++
 blueprints/blogfactory/meta.json          |  13 +++
 blueprints/blogfactory/template.toml      |  28 ++++++
 5 files changed, 163 insertions(+)
 create mode 100644 blueprints/blogfactory/README.md
 create mode 100644 blueprints/blogfactory/blogfactory.svg
 create mode 100644 blueprints/blogfactory/docker-compose.yml
 create mode 100644 blueprints/blogfactory/meta.json
 create mode 100644 blueprints/blogfactory/template.toml

diff --git a/blueprints/blogfactory/README.md b/blueprints/blogfactory/README.md
new file mode 100644
index 000000000..f061a051c
--- /dev/null
+++ b/blueprints/blogfactory/README.md
@@ -0,0 +1,12 @@
+# BlogFactory on Dokploy
+
+Dokploy creates independent database, storage, JWT, encryption, and scheduler secrets during import. Only the `web` service receives a public domain; the API, scheduler, PostgreSQL, and MinIO remain private.
+
+## First administrator
+
+1. Open the Compose service's environment settings and copy the generated `ADMIN_EMAILS` value.
+2. Open the generated BlogFactory domain and register with that exact email address.
+3. Return to the Compose environment settings, change `BLOGFACTORY_ALLOW_SIGNUP` to `false`, and redeploy.
+4. Add OpenRouter, CMS, or Google Search Console credentials from BlogFactory only when you need those optional integrations.
+
+BlogFactory sends reviewed content to connected CMS providers as drafts. The template does not grant live-publish or delete authority.
diff --git a/blueprints/blogfactory/blogfactory.svg b/blueprints/blogfactory/blogfactory.svg
new file mode 100644
index 000000000..e0a7da7d1
--- /dev/null
+++ b/blueprints/blogfactory/blogfactory.svg
@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64">
+  <rect width="64" height="64" rx="8" fill="#fff"/>
+  <rect x="1" y="1" width="62" height="62" rx="7" fill="none" stroke="#d7d8d4" stroke-width="2"/>
+  <circle cx="50" cy="14" r="5" fill="#ff5a1f"/>
+  <rect x="13" y="31" width="10" height="18" fill="#202224"/>
+  <rect x="27" y="20" width="10" height="29" fill="#202224"/>
+  <rect x="41" y="26" width="10" height="23" fill="#202224"/>
+</svg>
diff --git a/blueprints/blogfactory/docker-compose.yml b/blueprints/blogfactory/docker-compose.yml
new file mode 100644
index 000000000..1048a1dd1
--- /dev/null
+++ b/blueprints/blogfactory/docker-compose.yml
@@ -0,0 +1,102 @@
+version: "3.8"
+
+services:
+  postgres:
+    image: postgres:17.6-alpine3.22
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: blogfactory
+      POSTGRES_USER: blogfactory
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U blogfactory -d blogfactory"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+
+  minio:
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
+    restart: unless-stopped
+    command: server /data --console-address :9001
+    environment:
+      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
+      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
+    volumes:
+      - minio-data:/data
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+
+  api:
+    image: ghcr.io/blogfactoryhq/blogfactory-api:v0.1.0
+    restart: unless-stopped
+    command: >-
+      sh -c "bun run src/init-s3-bucket.ts && bun run src/db/migrate.ts && exec bun run src/index.ts"
+    depends_on:
+      postgres:
+        condition: service_healthy
+      minio:
+        condition: service_healthy
+    expose:
+      - 3000
+    environment:
+      NODE_ENV: production
+      PORT: 3000
+      BLOGFACTORY_SELF_HOSTED: "true"
+      DATABASE_URL: postgresql://blogfactory:${POSTGRES_PASSWORD}@postgres:5432/blogfactory
+      JWT_SECRET: ${JWT_SECRET}
+      API_KEY_ENCRYPTION_SECRET: ${API_KEY_ENCRYPTION_SECRET}
+      ADMIN_EMAILS: ${ADMIN_EMAILS}
+      BLOGFACTORY_ALLOW_SIGNUP: ${BLOGFACTORY_ALLOW_SIGNUP}
+      CRON_SECRET: ${CRON_SECRET}
+      WEB_APP_URL: ${BLOGFACTORY_URL}
+      MCP_APP_URL: http://web/mcp-review.html
+      MCP_ALLOWED_ORIGINS: ${BLOGFACTORY_URL}
+      S3_ENDPOINT: http://minio:9000
+      S3_ACCESS_KEY_ID: ${MINIO_ROOT_USER}
+      S3_SECRET_ACCESS_KEY: ${MINIO_ROOT_PASSWORD}
+      S3_BUCKET: blogfactory
+      S3_REGION: us-east-1
+    healthcheck:
+      test: ["CMD", "bun", "-e", "fetch('http://localhost:3000/api/ready').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
+      interval: 10s
+      timeout: 5s
+      retries: 20
+
+  web:
+    image: ghcr.io/blogfactoryhq/blogfactory-web:v0.1.0
+    restart: unless-stopped
+    depends_on:
+      api:
+        condition: service_healthy
+    expose:
+      - 80
+    environment:
+      API_UPSTREAM: http://api:3000
+    healthcheck:
+      test: ["CMD-SHELL", "nginx -t >/dev/null 2>&1 && wget -q -O /dev/null http://api:3000/api/ready"]
+      interval: 10s
+      timeout: 5s
+      retries: 20
+
+  scheduler:
+    image: curlimages/curl:8.15.0
+    restart: unless-stopped
+    depends_on:
+      api:
+        condition: service_healthy
+    environment:
+      CRON_SECRET: ${CRON_SECRET}
+      CRON_INTERVAL_SECONDS: 21600
+    entrypoint: ["/bin/sh", "-c"]
+    command:
+      - >-
+        while true; do curl --fail --silent --show-error --output /dev/null -H "Authorization: Bearer $${CRON_SECRET}" http://api:3000/api/cron/drain && echo "Scheduler drain completed"; sleep "$${CRON_INTERVAL_SECONDS}"; done
+
+volumes:
+  postgres-data:
+  minio-data:
diff --git a/blueprints/blogfactory/meta.json b/blueprints/blogfactory/meta.json
new file mode 100644
index 000000000..9ec06b290
--- /dev/null
+++ b/blueprints/blogfactory/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "blogfactory",
+  "name": "BlogFactory",
+  "version": "v0.1.0",
+  "description": "Self-hosted control plane for AI-assisted content operations and human-approved CMS draft delivery.",
+  "logo": "blogfactory.svg",
+  "links": {
+    "github": "https://github.com/BlogFactoryHQ/blogfactory",
+    "website": "https://blogfactory.io/",
+    "docs": "https://github.com/BlogFactoryHQ/blogfactory/blob/main/docs/self-hosting.md"
+  },
+  "tags": ["ai", "automation", "content-management"]
+}
diff --git a/blueprints/blogfactory/template.toml b/blueprints/blogfactory/template.toml
new file mode 100644
index 000000000..7a519f69d
--- /dev/null
+++ b/blueprints/blogfactory/template.toml
@@ -0,0 +1,28 @@
+[variables]
+main_domain = "${domain}"
+postgres_password = "${password:48}"
+minio_root_user = "blogfactory"
+minio_root_password = "${password:48}"
+jwt_secret = "${base64:48}"
+encryption_secret = "${base64:48}"
+cron_secret = "${base64:48}"
+admin_email = "${email}"
+
+[config]
+env = [
+  "POSTGRES_PASSWORD=${postgres_password}",
+  "MINIO_ROOT_USER=${minio_root_user}",
+  "MINIO_ROOT_PASSWORD=${minio_root_password}",
+  "JWT_SECRET=${jwt_secret}",
+  "API_KEY_ENCRYPTION_SECRET=${encryption_secret}",
+  "CRON_SECRET=${cron_secret}",
+  "ADMIN_EMAILS=${admin_email}",
+  "BLOGFACTORY_ALLOW_SIGNUP=true",
+  "BLOGFACTORY_URL=https://${main_domain}",
+]
+mounts = []
+
+[[config.domains]]
+serviceName = "web"
+port = 80
+host = "${main_domain}"

From b35349963e83b902f4d3186c7d9f410d00fbc422 Mon Sep 17 00:00:00 2001
From: Javier <100307829+javierlnmn@users.noreply.github.com>
Date: Mon, 31 Aug 2026 00:21:07 +0200
Subject: [PATCH 22/33] feat(wupnext): add new env vars for mcp server (#1100)

* feat(wupnext): add new env vars for mcp server

* fix: set explicit docker image version tag
---
 blueprints/wupnext/docker-compose.yml | 11 ++++++++++-
 blueprints/wupnext/meta.json          |  3 ++-
 blueprints/wupnext/template.toml      |  7 ++++++-
 3 files changed, 18 insertions(+), 3 deletions(-)

diff --git a/blueprints/wupnext/docker-compose.yml b/blueprints/wupnext/docker-compose.yml
index 95bd27a2b..5fb8d455c 100644
--- a/blueprints/wupnext/docker-compose.yml
+++ b/blueprints/wupnext/docker-compose.yml
@@ -2,13 +2,17 @@ version: "3.8"
 
 services:
   wupnext:
-    image: docker.io/javierlnmn/wupnext:latest
+    image: docker.io/javierlnmn/wupnext:0.3.0
     restart: unless-stopped
     environment:
       SECRET_KEY: ${SECRET_KEY}
       DEBUG: "False"
       ALLOWED_HOSTS: ${ALLOWED_HOSTS}
       CSRF_TRUSTED_ORIGINS: ${CSRF_TRUSTED_ORIGINS}
+      # Public base URL, used for links in emails
+      SITE_URL: ${SITE_URL}
+      # Public origin the MCP server advertises to clients during discovery
+      MCP_BASE_URL: ${MCP_BASE_URL}
       EMAIL_BACKEND: anymail.backends.resend.EmailBackend
       DEFAULT_FROM_EMAIL: ${DEFAULT_FROM_EMAIL}
       RESEND_API_KEY: ${RESEND_API_KEY}
@@ -31,9 +35,14 @@ services:
       DEBUG: "False"
       ALLOWED_HOSTS: ${ALLOWED_HOSTS}
       CSRF_TRUSTED_ORIGINS: ${CSRF_TRUSTED_ORIGINS}
+      SITE_URL: ${SITE_URL}
       EMAIL_BACKEND: anymail.backends.resend.EmailBackend
       DEFAULT_FROM_EMAIL: ${DEFAULT_FROM_EMAIL}
       RESEND_API_KEY: ${RESEND_API_KEY}
+      # Django Q2 cluster (ORM broker, no Redis)
+      Q_WORKERS: ${Q_WORKERS}
+      Q_TIMEOUT: ${Q_TIMEOUT}
+      Q_RETRY: ${Q_RETRY}
     volumes:
       - wupnext-db:/app/db
     depends_on:
diff --git a/blueprints/wupnext/meta.json b/blueprints/wupnext/meta.json
index 7cd10c489..f22964425 100644
--- a/blueprints/wupnext/meta.json
+++ b/blueprints/wupnext/meta.json
@@ -2,7 +2,7 @@
   "id": "wupnext",
   "name": "WupNext",
   "version": "latest",
-  "description": "WupNext is a self-hosted to-do and task queue app: groups, subtasks, deadlines, a built-in pomodoro timer, and daily email reminders. Server-rendered Django with HTMX, backed by SQLite.",
+  "description": "WupNext is a self-hosted to-do and task queue app: groups, subtasks, deadlines, a built-in pomodoro timer, email reminders, and an MCP server so an AI client can work the board. Server-rendered Django with HTMX, backed by SQLite.",
   "logo": "logo.svg",
   "links": {
     "github": "https://github.com/javierlnmn/wupnext",
@@ -14,6 +14,7 @@
     "tasks",
     "productivity",
     "pomodoro",
+    "mcp",
     "django",
     "self-hosted"
   ]
diff --git a/blueprints/wupnext/template.toml b/blueprints/wupnext/template.toml
index eb4f48034..e85598d23 100644
--- a/blueprints/wupnext/template.toml
+++ b/blueprints/wupnext/template.toml
@@ -12,11 +12,16 @@ env = [
   "SECRET_KEY=${secret_key}",
   "ALLOWED_HOSTS=${main_domain}",
   "CSRF_TRUSTED_ORIGINS=https://${main_domain}",
+  "SITE_URL=https://${main_domain}",
+  "MCP_BASE_URL=https://${main_domain}",
   "DEFAULT_FROM_EMAIL=${from_email}",
   "RESEND_API_KEY=${resend_api_key}",
   "DJANGO_SUPERUSER_USERNAME=${admin_username}",
   "DJANGO_SUPERUSER_EMAIL=${admin_email}",
-  "DJANGO_SUPERUSER_PASSWORD=${admin_password}"
+  "DJANGO_SUPERUSER_PASSWORD=${admin_password}",
+  "Q_WORKERS=2",
+  "Q_TIMEOUT=60",
+  "Q_RETRY=120"
 ]
 mounts = []
 

From 1aa2d74f4ecbd6a5f415c414ec29dcf81b9ff310 Mon Sep 17 00:00:00 2001
From: BacemJ <67553399+BacemJ@users.noreply.github.com>
Date: Sun, 30 Aug 2026 23:33:00 +0100
Subject: [PATCH 23/33] data permission right & Traefik configuration (#1110)

* data permission right & Traefik configuration

Permession to write on data directory is mandatory for odoo server to run
Added Traefik configuration to allow POS and live chat to run

* fix(odoo_19): provide odoo.conf via config mount and enable proxy_mode

The empty ../files/config bind mount was hiding the image's
/etc/odoo/odoo.conf, crashing wait-for-psql.py (NoSectionError:
'options') in a restart loop. Ship odoo.conf through the template
mount instead, with proxy_mode enabled so websocket/POS/livechat
work behind Traefik (threaded mode serves /websocket on 8069, so
no extra routing is needed). Revert the manual Traefik labels
(invalid compose: labels must be a mapping; Dokploy generates
routing from template.toml) and the chown command (the named
volume already gets odoo ownership from the image).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/odoo_19/template.toml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/blueprints/odoo_19/template.toml b/blueprints/odoo_19/template.toml
index 886082927..2a56f3901 100644
--- a/blueprints/odoo_19/template.toml
+++ b/blueprints/odoo_19/template.toml
@@ -3,9 +3,17 @@ main_domain = "${domain}"
 
 [config]
 env = {}
-mounts = []
 
 [[config.domains]]
 serviceName = "web"
 port = 8_069
 host = "${main_domain}"
+
+[[config.mounts]]
+filePath = "config/odoo.conf"
+content = """
+[options]
+addons_path = /mnt/extra-addons
+data_dir = /var/lib/odoo
+proxy_mode = True
+"""

From 7b1cf998030ac6412e99ddcc0d75f6c95c399822 Mon Sep 17 00:00:00 2001
From: Hugo0507 <88935502+Hugo0507@users.noreply.github.com>
Date: Sun, 30 Aug 2026 17:33:41 -0500
Subject: [PATCH 24/33] fix(postiz): pass all social provider env vars and fix
 Temporal healthcheck (#1121)

* fix(postiz): pass all social provider env vars and fix Temporal healthcheck

* fix(postiz): drop env vars Postiz does not read, unset NOT_SECURED

- GOOGLE_CLIENT_ID/GOOGLE_CLIENT_SECRET are not read by Postiz:
  the Google auth provider and GMB both use YOUTUBE_CLIENT_ID
  (google.provider.ts, gmb.provider.ts).
- NEXT_PUBLIC_FRONTEND_URL does not exist in the Postiz codebase.
- Postiz checks NOT_SECURED for truthiness only, so the string
  "false" still enables insecure mode; remove the variable so
  secure cookies are actually on for the HTTPS deployment.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Mauricio Siu <mauricio@dokploy.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/postiz/docker-compose.yml | 28 +++++++++++++++++++++++-----
 blueprints/postiz/template.toml      |  8 +++++++-
 2 files changed, 30 insertions(+), 6 deletions(-)

diff --git a/blueprints/postiz/docker-compose.yml b/blueprints/postiz/docker-compose.yml
index 876bbfb49..b9a6d01b9 100644
--- a/blueprints/postiz/docker-compose.yml
+++ b/blueprints/postiz/docker-compose.yml
@@ -12,12 +12,15 @@ services:
       JWT_SECRET: ${JWT_SECRET}
       DATABASE_URL: "postgresql://${DB_USER}:${DB_PASSWORD}@postiz-postgres:5432/${DB_NAME}"
       REDIS_URL: "redis://postiz-redis:6379"
-      BACKEND_INTERNAL_URL: "http://localhost:3000"
+      # "localhost" resolves to ::1 first, but the backend only listens on IPv4.
+      BACKEND_INTERNAL_URL: "http://127.0.0.1:3000"
       TEMPORAL_ADDRESS: "temporal:7233"
       IS_GENERAL: "true"
-      DISABLE_REGISTRATION: "false"
+      DISABLE_REGISTRATION: ${DISABLE_REGISTRATION:-false}
       RUN_CRON: "true"
-      NOT_SECURED: "true"
+      # Postiz only checks whether NOT_SECURED is set (any value, even "false",
+      # enables insecure mode). The template is served over HTTPS, so keep it
+      # unset to get secure cookies.
       STORAGE_PROVIDER: "local"
       UPLOAD_DIRECTORY: "/uploads"
       NEXT_PUBLIC_UPLOAD_DIRECTORY: "/uploads"
@@ -25,12 +28,22 @@ services:
       # === Social Media API Settings ===
       # These variables should be defined in the Dokploy Environment tab.
       # For more configuration options and details, please refer to the official documentation.
+      # Every provider Postiz reads must be listed here, otherwise setting it in
+      # the Environment tab has no effect: it never reaches the container.
       FACEBOOK_APP_ID: ${FACEBOOK_APP_ID}
       FACEBOOK_APP_SECRET: ${FACEBOOK_APP_SECRET}
+      INSTAGRAM_APP_ID: ${INSTAGRAM_APP_ID}
+      INSTAGRAM_APP_SECRET: ${INSTAGRAM_APP_SECRET}
       LINKEDIN_CLIENT_ID: ${LINKEDIN_CLIENT_ID}
       LINKEDIN_CLIENT_SECRET: ${LINKEDIN_CLIENT_SECRET}
       X_API_KEY: ${X_API_KEY}
       X_API_SECRET: ${X_API_SECRET}
+      # YOUTUBE_CLIENT_ID/SECRET also power "Sign in with Google" (Postiz's
+      # Google auth provider reads YOUTUBE_CLIENT_ID).
+      YOUTUBE_CLIENT_ID: ${YOUTUBE_CLIENT_ID}
+      YOUTUBE_CLIENT_SECRET: ${YOUTUBE_CLIENT_SECRET}
+      TIKTOK_CLIENT_ID: ${TIKTOK_CLIENT_ID}
+      TIKTOK_CLIENT_SECRET: ${TIKTOK_CLIENT_SECRET}
 
     volumes:
       - postiz-config:/config/
@@ -41,7 +54,8 @@ services:
       postiz-redis:
         condition: service_healthy
       temporal:
-        condition: service_started
+        # Postiz crashes on boot if Temporal is not accepting connections yet.
+        condition: service_healthy
 
   postiz-postgres:
     image: postgres:17-alpine
@@ -74,6 +88,7 @@ services:
 
   temporal-elasticsearch:
     image: elasticsearch:7.17.27
+    restart: always
     environment:
       - cluster.routing.allocation.disk.threshold_enabled=true
       - cluster.routing.allocation.disk.watermark.low=512mb
@@ -87,6 +102,7 @@ services:
 
   temporal-postgresql:
     image: postgres:16
+    restart: always
     environment:
       POSTGRES_PASSWORD: ${TEMPORAL_PASSWORD}
       POSTGRES_USER: ${TEMPORAL_USER}
@@ -100,6 +116,7 @@ services:
 
   temporal:
     image: temporalio/auto-setup:1.28.1
+    restart: always
     depends_on:
       temporal-postgresql:
         condition: service_healthy
@@ -116,7 +133,8 @@ services:
       - ES_VERSION=v7
       - TEMPORAL_NAMESPACE=default
     healthcheck:
-      test: ["CMD", "tctl", "--address", "127.0.0.1:7233", "workflow", "list"]
+      # tctl needs an explicit namespace, and Temporal does not bind 127.0.0.1.
+      test: ["CMD-SHELL", "tctl --address $$(hostname -i):7233 --namespace default workflow list > /dev/null 2>&1"]
       interval: 15s
       timeout: 10s
       retries: 30
diff --git a/blueprints/postiz/template.toml b/blueprints/postiz/template.toml
index 4528e909b..61d969c92 100644
--- a/blueprints/postiz/template.toml
+++ b/blueprints/postiz/template.toml
@@ -18,10 +18,16 @@ env = [
     "TEMPORAL_PASSWORD=${temporal_password}",
     "FACEBOOK_APP_ID=",
     "FACEBOOK_APP_SECRET=",
+    "INSTAGRAM_APP_ID=",
+    "INSTAGRAM_APP_SECRET=",
     "LINKEDIN_CLIENT_ID=",
     "LINKEDIN_CLIENT_SECRET=",
     "X_API_KEY=",
-    "X_API_SECRET="
+    "X_API_SECRET=",
+    "YOUTUBE_CLIENT_ID=",
+    "YOUTUBE_CLIENT_SECRET=",
+    "TIKTOK_CLIENT_ID=",
+    "TIKTOK_CLIENT_SECRET="
 ]
 mounts = []
 

From 6284bbc74fbe9c9e537c2f14532e44436f8bf5ee Mon Sep 17 00:00:00 2001
From: egedemirkaran <justice39.dev@gmail.com>
Date: Mon, 31 Aug 2026 00:34:37 +0200
Subject: [PATCH 25/33] fix: Update outdated website URL (#1120)

---
 blueprints/wanderer/meta.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/blueprints/wanderer/meta.json b/blueprints/wanderer/meta.json
index 7b01562a3..3ec8cfa0d 100644
--- a/blueprints/wanderer/meta.json
+++ b/blueprints/wanderer/meta.json
@@ -6,7 +6,7 @@
   "logo": "image.png",
   "links": {
     "github": "https://github.com/flomp/wanderer",
-    "website": "https://wanderer.app",
+    "website": "https://wanderer.to",
     "docs": "https://github.com/flomp/wanderer#readme"
   },
   "tags": [

From 698ab85f6decd0ddc97a7725765d5d2247bbe7a4 Mon Sep 17 00:00:00 2001
From: Steven Tran <37040376+joiha-steven@users.noreply.github.com>
Date: Mon, 31 Aug 2026 05:35:18 +0700
Subject: [PATCH 26/33] feat(template): add Quire Ink (#1117)

---
 blueprints/quireink/docker-compose.yml |  15 +++++++++++++++
 blueprints/quireink/meta.json          |  13 +++++++++++++
 blueprints/quireink/quireink.png       | Bin 0 -> 17824 bytes
 blueprints/quireink/template.toml      |  11 +++++++++++
 4 files changed, 39 insertions(+)
 create mode 100644 blueprints/quireink/docker-compose.yml
 create mode 100644 blueprints/quireink/meta.json
 create mode 100644 blueprints/quireink/quireink.png
 create mode 100644 blueprints/quireink/template.toml

diff --git a/blueprints/quireink/docker-compose.yml b/blueprints/quireink/docker-compose.yml
new file mode 100644
index 000000000..62b6afd7f
--- /dev/null
+++ b/blueprints/quireink/docker-compose.yml
@@ -0,0 +1,15 @@
+version: "3.8"
+
+services:
+  quireink:
+    image: quireink/quireink:2.2.1
+    restart: unless-stopped
+    environment:
+      SITE_URL: https://${QUIREINK_HOST}
+    volumes:
+      - quireink-data:/var/lib/quire/data
+      - quireink-uploads:/var/lib/quire/uploads
+
+volumes:
+  quireink-data: {}
+  quireink-uploads: {}
diff --git a/blueprints/quireink/meta.json b/blueprints/quireink/meta.json
new file mode 100644
index 000000000..8682c2bb6
--- /dev/null
+++ b/blueprints/quireink/meta.json
@@ -0,0 +1,13 @@
+{
+  "id": "quireink",
+  "name": "Quire Ink",
+  "version": "2.2.1",
+  "description": "A self-hosted blog in one container: a real editor over Markdown with tables, footnotes and mathematics, scheduled publishing, newsletters over your own SMTP, comments with a built-in spam gate, cookie-free analytics, full-text search and a book reading mode. Importers bring a WordPress, Ghost, Substack or Medium blog across with its redirects and images. There is no database service to run and nothing is fetched from a third party: two SQLite files and an uploads folder are the whole of it. After the first start, open the container logs for the one-time link that claims the blog and creates your account.",
+  "logo": "quireink.png",
+  "links": {
+    "github": "https://github.com/joiha-steven/quireink",
+    "website": "https://quireink.com",
+    "docs": "https://github.com/joiha-steven/quireink/blob/main/docs/self-host-docker.md"
+  },
+  "tags": ["cms", "self-hosted", "blog"]
+}
diff --git a/blueprints/quireink/quireink.png b/blueprints/quireink/quireink.png
new file mode 100644
index 0000000000000000000000000000000000000000..98daa723f2876052cf84db2093b0b74537e666e9
GIT binary patch
literal 17824
zcmY*>3p~@`|NnazGxuw5a~Uc`CHMO#LdqqQZfsqYL=<wjjgl^+=;o3o5*4D5+opt+
zOD-XoP2|qp@7w<GsXo8&zsI8odpqxQUia5Iuk(8DrlY;J0Iv)$0008}Z7iJt01EyJ
z1&|2v$3k%X8u)|9&*qpv0Pu-%{zHJ|R4D*J1N$w_4+p1CrIFgsdj!&GnCd6?t)6M6
zqz)s!o8<?_4fc7wef#rELAmnPS~Wgz?YqL&#Ggk_p1*v;E~xXMbq#cT(k*2&j|{fO
zVE>NNm!7(lF^AM{?b@pd`MhtN;H0T`$vktmf3bwY>R)E|t%psUHit})G=*ok)lXM3
zLaLe#X(Orgspl`;++CiZH=zyJ4x@=rdpo*xC~Cig=n-LlXfeUw574>@*TLor<_-m%
z9?q>ZB{%nHRmJ{G$NF{pQ>5@P1Ase5m~SqGktp<fA~d=LGdwskC05-yxsjV|W=U3|
z3ghX3?BkvM4<m+FW1&@}5VmMeZ*K10!tTo}et;mAbXE3c?s)x`7j#jNgOyAp1==@|
znh~`JE-oE)5BGmPSBKafc1<?H*KO(T4wOl}U(LwUO`@&KPW8ijMjS!`LH@6#6A!;~
z#X_oBm?$&ByJ&81I`*L~mVah(-o@p;OHMYwjbH&p795P9aw0XrPu#o_e*5WCpxyOk
zGeOB4eBf|RL5=lGy24IM^oxO*^tMO@>JNXSH%alA-zWHXIH)O4j}Cex4ZsD(F&Bw*
z0L`B^N0e{fV4=h|MS&Qg7B*wj4Gdc2sqsahyFWq<G%pDrZf=x7D{B_sjg)Wuf}e+Y
z1K?`gWlO~r9a+Kd^1ZV(PXI-Q7$m53PiG!0sMu2(u(<B4K@<QbhpZ-nf~;Arrl(I6
z=cMA<=b&92sd>u2d>U3iCCV_U?Ht&J8H;2Kz&H8(ZphJ~yYijHX||(aCWJE@V&Evw
z-9I8XxbovEy)Gh>Z3o>PyYCA5*H3(8deRg9J-{D9-id)R=I@3*XFqgc_Kq#n_%|uj
ztnDWXJQu2wPk%C%@rgzd12{ZTj~Y6f207y;mGI>FFeWRL`_E$dw!QQ-u|!rhMvWjV
zbeEe$K!P0i4qIqt^9&~W(_R?oZ2(k;-t(>06zEM%$I&itZ#~eKI2?Z@x#bMfRWZXW
z<zmvCVx<$`7eOK*xAoUAe-^5X9wc#8Zuy(K(`1L`%<^_c>ZXZ6D8tl|tcF{X%<p5(
z+dm)r1OX?s{e``bd~CeZHkJ-KwQ1FW;MOe=>kyX&dh?5qZ$S+K+*b7@UJ>dSTFSLe
zZUJt75jykUQk}>^>?WCKeqr}*C(;>qdpC7LgvB7~L-EQ~5s)#EW}-kEk5uOt^Oz0#
zSwAh1H1IKguuREj=6qYx*Z_x7KWeQCREqJn_Wa-`S#;u?chx%&Y$KRVetL1f?ccK>
zVl!{EL^0asN&Ef{1Y`?lO}3qM=@67iwG;XyHb3g{2f2d4oNMvs81G;`6V3vF;L)B5
z66&E6Az-6utb5@v8E)s`vd3?2d|#;hzop||sX4~+YZ##vIFxc2h|5+>D8rzh3jAF_
zd6FC7C4@?k`}<ihFOry>n}`42z3H=@mo%OTfT5r~X+FFBwuV89{J*KTm5>@H4oKrx
zjX!1-&HiB?r0ohywRYF<m3wRFKNSu96Nw8ida?Qc*pJH>$97`=XVoNu>5~lu&PGxH
zD-A^-znqIRoqkXOwg08ZdlX{c>@NnmxVSY({gXN%*hSZKoUe498EL|#JpCuX;q$OZ
zd#b(m5?6%(M+Axmxw&%x%gToytn{iP7a+#gIvVg-^M2Hr2I#2IX(ac+rfGm;?kX(=
zQdvw%nLoA)Doin*e|SM?z|ZKf5<dLIyZS<jZItz2(0``CNInMGv%QV<<o;-{Yb6vC
zJX1&bXQWgJYR(F9W}{{8HysGz_6~1@G)^92;E?|oBEpLE1QzTa?$dW~BUN_?{8<jv
z%^iXJ72+>DV=4$D|L6vFfI^*2-V4Zn9`!ciXq{u1619l3Vv6I;$ap$i=|9@^79L=e
z*=V^xt_!YwvXQ96UfnJK*U=2{7W%MU67b9XzlrqnmLZQfMymcqGH`ZmC0XE-&z6n-
z?4q%*zm(wz)nN&&Wt`?eqVO|Xz!<^i#vhLcS$35sE>PC@ZiYw>eT#Gtpq1@yq9^~?
z#t-Se%=M}>ff65qO8FBaIo=f`%L^Ys%l;Vz&ePcgB%>yo7XPv2N4?)e&YQ5i$OAlO
zc?`at{i8jq)sm&3i%XEl4D5e~A}R!t|2vzj0<cJ6fBqXw0q)n<D9<0w8ju3X|4#yM
zslDtVocKTH$kS~Iuch<{5QAF--QoXq^ZF?2WjFg8Jzu)IA0z%xpx~TAs1~5!>df=%
zzb;uJl7PUnx&B)eL6EYEhht4*!PLePjUV+^2}zK75cq~y{2RQfkojaJauu!cpB!j*
z07C)sfA*sHSU?K$E#}Opf2%YjkVJk7$iEQ<Bp>oJp%jXo^)vfxyn}@hC^~u{@F%u|
z#t;lCcw|jP%QyYA%WF_<C!~TP{Eu-!Pznl&(vg421Pw1;uhd1Fs4Vp)4#C~<oBDlS
zu(2kdvh;iHo<l^qi^)>AL-U3|Wo6yEkDvlhLfmP_k5n$aN5>u%)PWo$9fzz}s|&T$
z`sed_s#vu&IrwtreAFQOoU-gzjYt-gQP#r^GJr<{Hbmvv21r_QN@7{mYv{CNwJDdN
zTj_kMfu|O4UF4E;P&w2auUrC=-sCwt24<v-VNuwHk)vg=xJ^HYVfR`|^WB6Na!o=u
z$RSAL^CX}v+`EcoNEY);EOQmUb2XR2XZHdtEwr?4T~zQWLk|lSeDCr!^(XHiz!b3O
z_S^Ovw^)%Tx81XBQw$Tw`23-X3dwqxl3W=iypv1Ren(t_+{}o6!D(+Sf+N_sK4h_6
zuVtgRk@LNB)76Cm^|d?FT8!z<5%_05M4%oof~}CLvd`e%o4GJw&+oW>h9*h<*bP7u
zs+EWvKI9jsTrx6CbJu@ZnZizLFVJ>V_jdjLqc<6y@y;x8qjVdz5XxFd9{m9le6|3I
z&L`&|uL=@AaFa0^GIG$Qz}JB}qmqx?BIFj-@eMP=Tz^M`%f>~s!uXCp{PPO66TvGi
z63u$X*JP-cpis%^=ZP_3n&~&wKM))~?q{>270eQ{Y#j4}-;i*Dsvp8Y0$|;uGrMo}
zrz_bvY6H|o7B+aHI7I~$CioFM@kTv)foEkN_PAW2o<kB|3N`xk=(IV`+$r0W%Z{tr
zsneX29_ersb&beQ22fc7!ho~}bX33VWf-PpB9vwjw7#|LRa4%=>SM+`hdh^l|B~Bi
zPc3M_9?(UV^(F$u;C%@3jxc}TwdKmeH;MRstmL-qj5I~5!n5c+o7fQcG=S<Ng4|(C
zPp966UfiV?nRYfX!^KgNp8Z9Te;eF(XC>gxu`0*Y7U|0o5m^fzFS8RT9=EMVpKR+b
z$zEP;e<Liz#q5+lny-h30bllBDwJ*Ausx)ow%WfWg-UX{*X48}D}T{t`+nJZmK#K`
z;3<c$lLNAp<TVp;<b-};xc!Y)EcA7=D9MUnd2XXq8cdaF0DUAjZX5UHp4ZttYnh8@
zVl6z*9=<yk%{RW=d}TFXyWlK`?3a@lt1Pltw_uTLZ}$w?3Ayq<2ysHxuP?*8sG^_=
z0QU<0x65CM<ci3;cX|4^$KAD2G4lQvf)8n@Hw+F~HjLNgKhv;4L`Ja;TCA<GPt<HJ
zSQq(T7lEP{_6#85I_t%SUyj@ria<iP^Q`5o7ua)_eR>EU>DH}0I;fg`9ouluyzv><
z@#Aj3b1*m-aa+@hzoR!>9OGKL(P?b0ihtFuy`|Grcmd~(f5YKj=QCGi+GK#-9gzxy
znh=8=qsWFJ?sn=e94SnKx*3a3@k=Sqyy{8ecH8JQ+Trw&OUESkK4=2a6Kx1k7p)W9
z53N-)44Ij$mjiNEa>;34x#$u&J<H?LCIOC0Yl0h%1)NR!MK>j<Mj=NW;0o$Utm`00
zuGX!M&xpMv_3my187T@k^xCWJI=0$e;B7h{^T*D!u)DJt1G60Ljt9)I=g&$#8%t0N
zg*}#}Qyx<73m{OyNuxq7>DS>lF_Hqe^A%t0trTdeWBqy%q>BpLJo>tG`-5yVC}li9
zb!EWwQnhX80m)%KeRyxDNLLNwEP%EcdFQFnxt1)0nTSekFdTe8YH-Su$TpGzMH^+3
zyn);>$n@;qU8zPw&fxg)X+Bs40R5o1Dzb7Jf2L|1b~}|I;8U~d#){LHDwpOi)-G!8
zY$QZfpVo8y!YcyAYmhg6<>O<{WUL9^HIXm3Pj1;N2JCLE21OWK;+2RS55TBIrk)&Y
zB*g;kKp+Mn!u$01jyqGP9kc}(4SVDb=c3o9%Z2Ry+U)dya0^aiAjZYMC${)fRx%P<
z>&<<a>t-nq2H`83y+KXMJGJ&cJ_ta15$_<<05WLr4MM|lioHdA|JC`I(AGo;vyi=h
z7)C`}BAxk)GUtG(yKq9!fyJ~^MGKzp6~@9>7-vvC9RJ>XQ;lFqZAEPaB)j5$?5B74
z2j4nC_PyQtG^BRcJF4bZq>%54hq3$Ix12pqX0LT4H{+wN?drsFT#ndAKoo0K*VVzk
z<4{xtYIM1kaRXg%0e^YEHf5fAs~7^s*VveTqUhYn3aD~gHQK43HZ4cK(Ijfa@2EGk
z1#<B7!ZPfLrZAv<UG_k35+!+~9YbdtXA$iwyy3jWescp!n~jQ~<*@C)p^Qc86l9Bh
z7U>6p`PvZ;SRp!oyWkFX47q;f$ub;M=bD!D_P=4P&=C7_xjL+`b}Q7DkqsF>4TDo-
z>mO<T-hE!8PfgBbWm^<0>Ip<w)D|0(?;##gsZ`$xu-_L!Nq`iOQ`W|F{Z-v;=G%^i
z^(J04d@Ws!+6WNXr>;XFjs{LIHk5Hw&OSKv+?r`-Zv(7XY19Fp^uv?yTL<V#t#Wo5
zNrZNi8Lt(uZGZJ;Z!GdPMgM`_M4_Z^(WfvRNelExRq>p0<`pNA@`MNDoi}O5!gu9l
z5;EQSe9e*;t`coSvU<xP!(O0cJ-fSYUnS=BbDY@9{>2flz5?<w%|7RkU{2n(T#3-A
z04?si;=UqW`$UA-wDQad-<w9c654cAVlTPOj0vzN@XBx~869A1chI77|92-=@{y56
zy5Q&$3GyM$#ydpMuq{WAfF39wB|g9LJZmFozOD)3`71;JMh1-^Z$@PQJcdUDywr@&
z4W$<w9Y<^3SSx6hUj}ltReYr-(Dehu8m|auOXRd>JO4Y+2F!8mx5KSr+`F)PWT8vy
zSu_s?f87?^?qgU`SK)OyH3Eb7+~-ZYb!fvDh2tkK@djMv9jXLndlmwUeoU9*dBLLN
z_SnpBh2v+QqKm)qrT8rCxWbssBrX^ff2|sGyfS@%<e(VjjDmb-;mJplAP1<&uRt*<
z^Rm7tGm`|j|HioY1`i5M%Pw3SUrT~+bXM~spm@t_Ol#VyEYjHAve3u=mc!P*yR1@#
zgx^$fe`^G_CIV-Beu~i9c{h|om}%tN0SWPMEfR0>Xtw^zp!R|qlQN%)*XgysfMXEb
zRGNC%l0(;vi^gH=%W^m1@m~E!noOEo`1hXegdgicGgK*>=+U!`HsMi9qy&H@?v*3X
zP^(Pggb_R?Y}q3bNG~gLdmexyX-XW@d~q>KEpOFoe0kGMvCpb8Kjqk>_AHbGGwzF;
z8|7<D(exInZ8{4K-|mVpeG*{c2r_*vKxcGn_=Bq9XMyfsw9e3c@g>q|Onr1Dz{uq)
zz1P3_a*3USl*M-P#2{AP+=9$Le!LdcvjnJRW|GpfpsL%mwyV<?7n5!##63uxDR#9@
z>X+*B5N`1zE4C0!cRGV}=dSPLV;yQ^<$kaZYq~mj<rgbr9}k3S)_--1&*($8D4+vh
z%g^@Ug=4p)SL$pQt<xP<2ArHOklRn0TQkb_p8&!O%OPxgYGDz$nHAHR%f-D*q(r?8
zqI=%Hn73<UD)f!HT4U6QN2ji+!V<V<a1LLEIs4*)YV~scjnUtljC6{?&}(IZ)k6sy
zx>V%&nVI6*4An)*vpfbQ>53!pqa4&c>0-q9ytN!bIkgpa7x&PTkRkUwdwTgt=j5qg
z1_1;1%QWsy8;4g;pmwhCf$`K|NPK>8+I;_#jHr>h^==*;cyQ02<rr)s=r9+gArRr2
zGF%N^VXO?76X!8uuHva{6xu@&N!rn?)0(0ICXJ(~uz*3}hPs^oLwY_>U_XgO$H<Ea
zGhbNIn7~=cMrWHA$gpD_;oXgh3|(g2;t(zwsrp_#Ay<Lu4hEWc2SJx<omJSg!gr;%
zA98Ba!lPCdYU|c~SUKtobS2+I5DUOP*KW&f{JvHRtFGu{^%pmYeBXzCcOlMSi2p!~
z5LSXp*y#^I(ep1T7LuuAS}W>{3^`z!1U-4Pv(72+O#5tgS>P`pN>%v&TaiE^a3o$1
zN&Hr~VHHuYymuT&dQ$_@I&<llMnu#Zm;i9%FktDeig?%#`obN?tX0?#{o~-E#-1aG
zgvVq?blQo>Psg0Uk~kXWFChxZ=uR@j0RQ(Ok8MqTFUL)6$J5IQ>+d_%WBVt5aE+w7
z4#O+<A#N%H8=bqk(LiWbc~91~!uzq^4eu~ntOMS{6R5&t?U6*MBGcPC@EzJ?%z4=6
zbVchduj!k|m*cgZtJ=$EgcGJJI`jGLdkVYzt{R%6G%#X|2@tRbA`Cpy9kZPJ=91=O
z|D)%7bK4@r=hbLzsBS^Kxr5tNfxF}9iQ72zJ#QxrC7n#FrHIzm2nuw!gvphY+ck(A
zb|-MpF@sEhn12a4DzTm771Dq9Xr|ueRPP8WxvRp*g*T(0S5=p<<?3Gi&?m&^)^F?f
zq`c|CoVtBSh9q$ddO>w&LI%w2ovW7KNDW;+a%g1A0Jgy~l>Lp`3&up73ZC*zR!9Ay
z-L*XW0><4^ZT-$RzLsJ}tQqjCP7sdWd&UeryZorerTj>N-zK)PgUuz-6qpT)HV;ON
zX^gg}E4X)(<z`u?*L)tM5d<nkbom^|PXb(l$q;5|brg8q@X{E$ZhV4|_;Q)~JdJh0
zZgrUW@)*%c#k|-w*0LE3Jy8#CJ+h72-^=};r?R%B+NN@)i)A3IAE*Y(oK4Y(21|5V
z3BZXKgSd8;NM(1Jv)^2?%UG-u!ga6gQn8yLx2T6e1>qci7nmgY!`a120@<!VD&$s7
z=;Jiaa7Wv|us1#6$bM@>enf_JixnT73axb(Ab7_S?ww<8Myw-e%*E|r!yAdst6BB_
zHpD>Aj(~oXu+94&xW9-gAAHI^?zmjs@mTn+bV0l5p`PrhCp?<=XaEs@{nfR*J)dp}
zl^ajJ)erf7E4GoC^$>DRFA?I>u)qo-34ohVDmI%fD#KPX3~6QG&R^UURu=iQs(i=O
z-02*`;Ru$&v{^vhdRb7lidonpX8qgvZ#9E;tY6n?mu1$Nu0Mw)mkQS9eaI<Ry@(kc
z_g5(-kz~)_ro-Cj#ZrI&DNKe}PaW3MoJ&cOel2f$b?O_i{OLUAD1p&^;Ql~~KBYcl
zs^@fPkNdrLM4RX2M&fu=^=I=Q`7F_fMCx(yu&7BLqg<=Sm<u@fHyMTccWQTtO&}&I
zn5&=mlh&%w@0!?YlU4KiQQCCXlF#Mw+7Y31>B`O1X=eqmXuw*y@z24mM{FagH5l2h
z;iPsDC(i22RXj&bA6_Xc@1Lw%awDgQ*%<Ffnz)%Jba>*|0Pg@Sun@ks``PU7<7)&k
zM;+&ydyqXd77#KnzAEL{kkcGAf<2+?KX6KYcITs!FHd+q!8OQrZIo7D4%Y|R?B!Q%
zzu}v`#+rAz&NF(4nn=Y45fiujCbRB4;MO0S0R-9wX&9tsaEy|fbUbr`J;E?;Hbvf*
zR$$c}o0c7o3QJ#!R@w(d04!FU78jJ9J)69(gQc9s=3)Q_S7pOzc5+5dTnc;ssxQ(h
z;_ai#0}4b6``tkjFgjrGb7B6yt^=*du=#eUZ`hMC0RE^wJN@nVG`>S?fXvHN@8VxY
zEkIV*9lweriG~6lOP?`|e8Iaf?b!IvVoy$|J~y~5ylg~1uYiRu=4SR&{u?Vl>}6fH
zObhs=@7$McJlfXBFmeeq9tnB2R#YO!eR&<Ya<tqmkGpsbraCqQ<%blg@=S+~aJ_+J
zFTr$^j(F#lU3hmPWx~hn&fL`oA1n+n-(nQ(ulUh~_^c4{Sp#g#%J}&qnrGJzYO^ax
zO4Pg5Te3?(<<+YCX7?icn@}}Rxo1eP+;L|mu;y|QBD!FU9vNOBs21=bKMrvG6ldMi
zX<23#^TRUtcPsE%Qt83nm|#h=0BfKd)!Xp+p6z3*1g9i)YM#~-O$e}cY^-vy&g9H4
z+ZYl(;_cU6rQK&J;$k^&MZ8v7C#(&p24CZX;spjrxhQ(s>}Ou*y?Wb9e=5q}E3vo)
z<C68Q6ZrKoUS_B;2J=d=ym8O0;6d;t^}UsC!OuFROmh@e{rPEEFHp~Sh#UI5)n;ww
zZS&SeIV5oH`kMl<l4Ci>uBv10kTX~?3DdO<F&^}k>!n+wg8h}W;ulWiZ51*Q9(hnD
zP>=~`%zSoLGo3NJBh72PzsaCMBgnDIlA3C}Uu_*Y++z)1%7LTwnEAt$)+j>Fu1mh>
z1%COf>O&IdjPR)RS`7fjr3yLwl(ifl-`^urLb6ZpZ<0y%hFyYc)ZSK*TR*9V`=|l1
zi5H(hAPJY(aCTUC^KC!3mYmG<C3Qt?{ZPTvQfC63gRF3${K}6ca^YAL>dgH1^z6Z#
zdSBD5iF20kQnm_IO#PtWJD-1W*!eLRUBPdsHX4vfWzt;NXxfVkdjeCO`y^@_w?5DS
ze%{qx7PJS2Ws!(Y+^A?{TgUeeP6uc70a##&&-aq$Q!aGo!cLB;?7E5k)Tl+anPu!W
zJJdMMv#;la$uDSwF!13U6blF!ys-vDyhQ1awz_ZLjGu()N4_EV%Ej)E7npnRd4fu>
z2hgAdHTikKdRp6J-s`f+O1ZoADWbBmw=fPE(m5gnAp)9kEPJcxIzFb%%UOsydsXic
zszexARmuSBbF$%o2COa;Dp|j$yffVU=8C0{_94nL#u|m-RDZMDataT)KO%FJ2Qy!r
zjk7;wvY$6{IEnLgwdK+Rkib_oRvAF(Sf$iyt-WNAv@jJqPKEXGCw<N?3cA#A&dzyF
zN(*3_cWObUiFXBvITP&W!w#j!$@PLgJ?F@;?>N~%&k_Mxq*h)q8VmwxUH*r98!A^C
ze{lZ#R1^+u`@4jeWr|^U#5eYG_)7M*JRjc_2pp>*8$9zQNM%tw3D}6v^MGpsUt>7+
zEH@OOJ8%359R<wbqVIzxz4#J97+^s<wZL%p368ClcpR!&krr?klHgn>fd*`Y`CsO{
z+LJsyz+=@76cFlK-j2Wyw8u3E35_F(SFi|j`P5;VgTK!Q3wB}X$IoGb0AV1<7Z}oF
zQ%FHrYhcA6%(vD@#;ohiMx2Jj@ih5mIviAvIFE@h;F%a^ECVM}`VMeO6Q_&Y0vzMb
z&qsVSggi_G3vHa4Bq0!RjkBBa?^wpmV_CSaPrD-Qk$}HY6PR@Fw7f8UAp}Wi69B4v
zR;>bmkY(+sLVMH;k2X6sq*4pPBR-Ko`HV1loM;`8Yf-M^n)!5INL+hNe6v*eE}W}C
z2tuFo%rKtVw4p}qvD5~0KodsAV2=-Afp^|_)glmB%kw*fIjYNPg%f2SnSR}z87wqU
zAN94?jsrtCENJ95pvotb0{9C9q4E_;S}Fw^;BLlG0;rq35M&(<%#?(Ei47Le<c1_%
zK@ejefxA3do(BR>ECT9%kO}mu@GqdO@RLw1#(zJQTK<hk;{a&n9Lo8l&VIoHD|~?6
z(!7R0^lK})Ie~+l*l6@IEn%Q<aw&2A_AXZ-P`$xe6Ji1I?}KJls6sYcXM?kGYM}f2
zz=;GN>~HgU6p&+`2K)L0tn3`OueW`3*MAaXz`PST4KY34DDkZrtcTzrEiWJm=ZTG`
zs>*=Xg1FyZDE4_^CCms)mW>SK8~@h}U?~oi37)tGc+Mk$d>}c@(F)-AhF^lzNCJi@
zd!R)=GXoB(znkKV>rd@;<{|1W5=^Bh<&ua3=U}!VONp{VP%3Tp5&Wh$gD5|HIY%5y
z?`n?xnaj$*@f}Ikli6f_ACd_A%9WrlG8pOj9yuY2dW=+LKZHjLiuV+Cgc^LGJsI9T
zHf?V(o+AK8Hq$o~jq$O+x7zW@&Bcf*6MX`p*Z7I^Nv~y7fahslaCi7O$?saW<Hu%-
zpCo*w^e#8?NdZab<o93_^@~(hE-3*rctJzD#98m_gVtvg?78TF%LP-CeouMYih%s}
zK~;LN-O^yp8v33P8Mj7>a|%y@cz!q(ko6(}B0T%^h`oxwUxq+M$ajekuW1>P*ViZn
z;`?tT;HciUY^SBGI@|a!iJ19yO!WD1+ZU7ccW3A&3Wl)LC4oj$DP<rENo+4FR0vtJ
z4LYwakcF+3yDa&#r?=-Sm@2|q{qwycA`dJq+}VQ=w7*a-l87E8I_rNO+74WEwvVVP
z*S>VSt)wd0@7cmgQ00fJxtOBy<w;}zs1nME%Oa|{auTk?PMM*Yg)MDW4b5jb#y+%b
z_{~e!Y+u2d3q<!<Bf)z}GCZL=42YL6|IycN$>_b*l5HnGxus@HyYt5DwXmyh3%72n
z&bTwGgx@?{DC_ATy;Ov_y^`enwEWB^LhS|t^=1Vu`f2iya@>B}+g1wEZmmp?nonu!
z)2VOHBUpD|J6YCJSN}X!X8(;~W_~<Opg<GcEOT6bi$7>{0)hQaU9UuD=+VAUGUpun
zMx7DgDX+c}BL#is@9az*^2tY7Kke@6POrx_PJ9h!b@oPULh(bc5dTz!)SIg*88;88
z_-3tC5^g;3h)T83@)_8ckwF6-aV^512<__hsW8$9PL?TDZ0}}t=*;tlb@dIrzGk1^
zFBnp9h0W^s7d)~<$nqO9xM!yq4DSkQ(PK6*U{LP?bKsz~#h7OPMeTk;m9qJ#Rw>w=
zw)d9N%grXc4=2aADhuzto#gx?>lNUsz0Pjo8Y$&Q<B`NzeTb7jlr_^0o3>X8WfnJ{
z*(J(jp}U+FqqW5_@YN&DLr$IUl~eCu0-h<K&#uIGoZ$xZLL4!N2Cu&?fqi%W<VZxb
z8%b>>fS}e*w9yBC3?76-W=4JVOGE(-n-$at69!Y-uC1QhrU#b24^Vi7rv!swT+1Di
z*}cgd64&K_eo+fFjkC#m&|7QsRbjz!ZMiC_qN9%n1rKx5L@p;!wJi(Hxu2%(&u>dQ
zw{-QJ+gmNw@l09W-xwj*=y(P6G2JIouinS#%n3-#(r=6hUq!T#W)SG85}xpb$1K8L
zgnsNBOPbqGBrnVdRAO2$yi?aPrlx3%paB0@>>v?<Q-AARK1jU&4m`?`6lHQoASNr{
z%KPLT)Z&PZfmp5#(Q&3vBtv!$sw8l~;SFoIr=ATio88VlK>hd=fE3V8e<pblWl<1i
z!?_2lZ~8I2w+2@@|K!c>zZ!d-?W+#_e9Dq$PACNL6yxkdG9Q3DAy9<hpZar!!~(i1
zR>$~!-|Fy1q_JFn4gJQjsTZGsv*M+((fYRXJQ^EI!v;;VE4PU@8Hak8`f=*doba6G
z=MNCCgQqXFxis3tBCcd!?SecoBP}DI<E_)DA>)I<_MA8X-l=bfb8J-HgE>9w^SZpi
zAnZ0bZg_JyzWx~G-lda6k6G!<2%`Mlzyd?Tawk~1eI;cTtz{AeWoE8rl*4w68KI?$
zWrc65b2jb~zKv1mqB6}gGn)=W)jxs-2Fo+L&VfIM4TP`>MGIHE&;$|T3oOFjKK5RP
zY{FCKqEPWeMPcBkcyaP&+ej(Z@uPGzayK$6RQc?qVK#&5{~HZea$|oz<^Iw3CA{=0
zfew;k@J1L7i1s0Do}B*rmR~rh$aq`QYRmq&jbfjSxJG1=f&23F>5?9!_iIv?pN=Q9
zM*e%pR4_@a@!>^jtg>^Z+_IzVr+`9Vv4!*I1ovNx*5!+P_Gmh-Vd_Sb;!TQz+-TG>
z8piXuITm<*h78tS+H$2eI}+k#zXJE322DY^#?8h*^1d_txofcp;)`@be3_l5kiX%^
z!`SUCX7p<hemM5mIqKnPy}R<|b$yDBM&Cn?8CB$@2%7FGx6faFUf$P|J2PmNOA8ro
zBlO(an#N{9erRz+(X*cPq+>)`1@49q#eH17^%nj29@W?T6x?@OzRhwsJZEs^Q%06t
zd^dYeZEh#1!sr)U;Bag$O#eza3f-!mKd-YA5*RhI9V$^NEu6LLP@-G0++u4IIjKFd
z1{FXJg5uD8qY0L3g8h_TB<PP#(>x^5B|2B%(bJzJ9RY?{yiFrPtx!&FR;al@p_lEr
zzAW@w0?s*tW$C~B0<H01`G8={I*)k$nwT?g+357?r%Z1g7|I_BTc989dBQ%(oEOUD
z6hjRK_DRqmH65tdu6yM(kIkMw8AZ5j@$jc!{XWrXi!|1Q_ZOiR4Z%@f8xtL?=goiD
z6lW9MH|GDW27of~g%2fFO>0x*zCZOzR?<COzdj<jHlCh0x`X=aYCb)WnL}ssg&E}d
zPhT0q`92Qj-hw{`R&YmWpU{&!{f7K1q7S!U#HnBGGrUStSHJf)jBkDkmSnJ!%`=_b
zs9rj8DYCO|J;O6>1n2nT%6kf9%sTQY=4u_TomPGt7qRloZLzaC(k)_Ufp8hRKxkvX
zU|X@@u<isUKx2Sd11XzeJp1>4R-Y^i`urOOcT+#D{7c`}508!vk8#IdS(9`~dAA{~
z5|sa`_VxKMTd46H&FnqeUCn&V?i-lJ%QeIY+*$z4``i1&At+D#(x8Oo7<-rgrb_jg
zigks>#_R82D2)^5S*ydJtD|vOg5LSG{BEMiuwVGfGZ$FC9m@oK&<L3#vk-KDi)PSW
zGywI0w0}++r!~D%K#xDbrny)8NGiTJyJ$wVRXsG#^rc;WSf1#^=ONG|ucfoik+AgS
zIc99zOtUC-t)#+-%UcnZ02vj%X59PLWteO!A{?UWn8&Cd(Ybsm9<i@-Npg09w(Zl)
z;j_%{x=WyvA9PX*m+3St`^R7q>p^)VQ4zR85lOgWSwQ}oHGCtCJ2y3|BjJ;8ZMzWp
z7?+{@v6IUqRii%7qCPcK*nRdn1YH@S%i}l!FR6uMIq>2W4b!A=Njoe+YKtRzdCmzQ
zvE>;NeQg^eX;vbCo3h%fGGTFpGR^XTSA9<zgA|hrFaS%wO-pfvPWG3~i!}8W{g!6z
zerj*XH9)E**lpNf|9x3f@QcvXSKPkL^9<Oid_wwu8hPku=<{`W?fv<u11$ff&^3nB
zGP@kJ!Cdog#`KtS=7>TTIHF+%WG`3VrXulz@#b?53KWWl4O++fOOmc<o+Xc(EsyOn
zYaircus^EK?<fA}l0b6UNSkAR-5Ct)T*P?Jo~iNcaoH>@=1`(TnQ>>;Q(51c683=I
zv^n9(c52U4@IYzk+uxo=RD@ebKQQ-_(eGQj6f{EHl2V*{oG@}zC=Zq7dir6UlhEA{
zgG)VqQ(`=YkCs_uMbCmoH-diq&*5$|B1S16dbV_(1m%`M)R3V(u~0*EkN$iR1dQ@#
zl~zu<X1Lv`neKb^A>So^nVF)I5tM)v>J=;y#sXW%`=<(T9teMXAkMYl94}JA{B^t6
z=P39B^~njG*p5Zo(gVx@JJtUPsN~9zrqpKteF>4kS9vg?$4t(7J(8sgGXaZ1Dl1~T
z8ZUCvf3ag)FO@6pQl(F#wxEL9WR+Efp0I-qdsoQqFu!!kWeVGL`YNLM1z5~&$|7>-
zn>fnu59IABG>o5Kygy!F_)4a?!Y5Jr$`+p@@*M6Fo!y6F?VdKT+$n|fJ_du(Px9KB
zZqt<Xgr)>J9)*KfmbMR78c@C!)qQ#&6kAJayFNv3@BSE65qKqINpSQm<h3dq&{E~9
zSFGO?oT#W9u;cbFsJLI{RH<lgU|7#~Nz1ai>?^oOWt2P__C^@H)AVs7SHUmvrj!1b
ze19FHlknNtM&nkmC3a!bb}TD7sT$YfQmxz>S!0?IbX{;?{}Q(zcvVikV+-N5%qZPF
z{_*BwW%<09r_pk+f3MH4IMp_m1P?1&JA*Pfah}q|c`foPLl^k-n)~984{8P1hIJcx
z>OHD9y7IZKK!QyBK1+gqBF#h1ukJM&$2ubll)y5X{~%$7x;K}y_2siBW6#WSzWQxb
zC-;V2r(=4!U*73Tf-io{4+3!FYjPFKd<BV|=x4mxIpBrQ(TCZN<7sarQo{7`ca9PF
zq;9C#5uEL+W!_B4Q6;$sNjndKNkFea?@AAMv~88N<IkK$Dv6l~QCn-tax!L>BiP4&
zv1j&;lylGQdq%4cvm>UR1y9tqOd#tPQ8XFq`jD&Q8di<DWggC!9ns1R@AGYiEes@v
z5tZ}-J+eqkAsoE4h$M>cBSsy$phOmdmhIFGxIkXez-H2EE|d8Z8(a)}8gKta*yL7l
zONQ858?;nWRD@LZvBKsk;n!-ZcKUq=Hb=-q8q}_63SF*L1URB0445ZF56FsVQgvh2
zCr8ps{GF6a*QcW^y9;YHs7IqH;UABO^%(mp1Fw&Qlj@Z|1*TiYkLDs(-|q2yih_&6
z<5WjwhPILyMlhj`9f^0Mml-Z=@Y)XY{)h-JLiN8lp?&;V_#IfbPq&E(Pm$wka(dug
zXXzQ=5d+^D#$0K0MKzAh(?Upl171!mz2K*XRBuhB+dXZMWd#c#?M009%|6Z7te1bP
zy~1}Awt%~+4puSAf|)fvkSqZ{=#)3v$uTL66(6zGmbRQ%NbrH1L=!hUd%(&Gnm%9M
zrbMq>?wzvFXa|XKFi~9}Y%Eud*?65gr!OSMHAxvhq6*%Jorfox=pEIiJLMOX9xp~_
zO)7K|R>{>k`W`g<eaT)DplS&>32;jlYp;;{s$2b5$*GcXPbET<hqX-ys>Rh(2$pHk
zB96bDKSsIJlu?cnN*(K4N`>4?{hw9l^gwTK@LT6GW5du4-Uo)2ox+<P9=u|ZtR`N^
zg08A5jb$pAL`gL#%FO53%`ie6cYEC2bwwJBDPJ~%rd$B6<(U$>=3-P-^5=R)jf7IN
z2fgummG4+4KTBYmzz*w;4mmM;e#zY${|ekIJHAA!E+&)7WqZ1bT`i-hedQMe8+Y$(
zBuGStvP*hlM%e^)UL-Nf0iES8=8e@u>s^^*;f9iNxN6L439$RqLkNxqL|Ov9{i3bS
z7B4T;p6^Z&h&7!v$hM;H%U^w;Hq*(~EX&-_$z83crTN^<J8Q=(JH@+_ITz!stJDA-
zHfI~eJbQlwbPvu}BdZP993k|bxW1A`_$^QGjE=No=yHKAp`Z=MDsgu#stt_YCwisy
zQx4Gf;=c~tO_Kz^`NG`h@0?^vwijs+HK)!8<C)(5kpLK|!HYhnuV<ycL@8lcmYxP}
z332iJZE#8;Sy6aox0QRvY*Leh((bbKcajo)4(?ze3EygiNnGyd)++(mt41nkzaJGK
z?a@KnpNH!N)Ed{57V{B;-9iQR+EpL!3>=ALri@U&n~s7hY;PZJFL<{pu4akV-dnoh
zjcwC-3DNl`T<>~^6YCKJQ3jOJszVM<8Es4_EJXjtL1H8#igFzWMQb|o?+|I<ID93V
zZu@fh8wwV(H!G#;huf#O5>G}javT0VyPuju+BbHBepr3)S2A5HkFP1psfpL1S6-E(
zfc>2(u0~j-4;gtlr!8B!i?mbrl~ArDpkyGkbh|;!o{#gfkVQVn?W)-d_*U&AIzD}j
zo*wq$;Dr^%7_KoI`nT@@XtnS}#qH}$TQ3I~si~n7%8Mq%jIMjNqPrmqA_ZsGi*;Pj
zi)C(HzmZqoke28}<_=yHhOQZh^w!;iK*^e!8ay`0;H!os+mT6%j>@Mj4}oWjhD$c>
zqvx(gDlpP>nqN@GgVwpGvg%7b#9s&6&4MvH&%dQJy@O^>F9Gv_s&L}DZ1_C%MGD-1
zG`LBCH`7bC{gWPVo+zUKH>}aDrTJNU4$so7tTyG7@!mb+s?*t}J+y;M>N&D609Myj
z`V*b0oQs5qsx53gb_xr{EP+R;%Yc@<=Md|rB@tbB{JzDc7;lAu_#M>f5(&DXaq#wy
z?FsqUSmE<Qx)Apk-MV7TbJm>_{QgDHga(%#C$fH(b^0j~1-!9fpyXBQJzKlVHL`UJ
z)GJrUpMc$;kT4@SbGx74@v7H%Lsngpn`Ej*u{z8himCzglt_YI^>Mp{YWsk=C=cv!
z67m@Fm=d=8<vtuEB_`QZq?nZo2m4mR&I+Z}<R?zLNO{a2x6(wbYPw@upE0$hQvPKC
z;Z_(kYN_UVN#A6ZAlTMN1<m=+odBbOmmk!!kir3dx2&p5W9OoNt)6hmr_4Uo&mNpI
z?oaMJi~)&8gG5`|>ZJucorlRNQah@H9iOKK`Qi9btg-y|N9<v>#q;j7t!qoJ%p(!a
zcRP1|bE(WWZ=j`z{prZq197pKQbwU$l!b*pH0cM=*Gm4--}p)}<6#L%h(NwGmSEoa
zn_%uE9!zYHX!rn8Nqd)Pf=$*1ny;V)7jkjz_iMN8P!7nA+qa0R=U4L)i>9eT{Y^X-
z1PT1UKaHMA2K)Tp8$vOxpO5+o4h3ZbI%6%yGn7d#%5iqxBcG$XGx_2WoY};k5B5wE
z#?r->q)S--+2cwD-~YTn1n;o?t-3A_Ei)t^dee@ZH}MJ8g^$<J+E;t%4_&KXo2`W9
zyU&N>+MU_9sQvr_(rfSnQX{9~?ew>;F|sd`GuK2RcIi}$PB*zG!$*Q?MmM~tdzMh_
z*Q~ZS_g15s{F*f16;~DBM!qJVV-sw!4=deoJUvjZb^Sd2$Td)XV0Twj%a)uf87>Ed
ztSL&kQxsZV^KJ|_Yjt<%SWIH_y2NM6CKI1lNwUTfon2$wW1`kgmYj2H*GIS{`awJ4
zmr#TT+_yD#lG>B7do5UnY&ezQ(N&_lMA>Lx!?Bx&b*;HaJTF#;ch#YIKpT(&Z2+5~
zG0crdG(@P-15xfRImI+Y!`6)yf!ziJG*dr3;U0+sf`MLDE+9c>PjQ+ezZ4!y&@z`7
ze0|Y^eqr~<`~50}adEcB$&FTl#L17}($9Pyp0sahu-6b>$*%6evKQY`H+%8!T_=t&
zSv)|DO4o<&CEKrAa51;{?S8hWxw-hvx}K{dIdP4%T?mS!2rOv4E7=W5fHh~3r)Np>
zB*kPdS20-Gk@|znrw%~8hMesvj0M)~0QQozd)H3ww;uDEI+`^uW#tSrgVmC)W<SQq
z8S5X;f~LC#G+nfH=|uE|+s-6(%f-vq4C8C_2j1nKzZB89wK30`#h?szhWQMg;A4+@
zyvknh*-JW>J$E>8VT?#~El3~9vIJ+b=ge~8Pz3aq9U7cP{G+GqClkdJU(O|W%yg8n
z!X6Q6^ax5w!&yg19OSV1iD1U`^1-N;k?GPiqAd^9TG%~U_6b<WYzjs{fSS$)cCUoh
zMu9hA)k;Z%i#!XfKd_G^`L?t#`0u$k`e-8a&P{Kno_Z_wsijWJ`mJhbrq_&fPPK9A
zu;7CW70ZSNexTyOj^Hz)0XAojRdP{Zf3Il}Rh`kzioXAq+o*eD*_n1t-Ya>_r0XZS
z{KyaniT$(9T`Olc+jjAhpn%WZuy{ej-zlQ)`@ojw2VbX1yG*%6xp|Z9q!ptK65>+C
zDkCo~?i*b`+Afdlt_su&!<<g0Sb826drx39&zX}rZP&H@fz#F^up%<~r;c2nrLx3}
z?~5<?inX9d8JAdcH^rE;QH9bG?55-o>2vSc!*RQ}Hqs6OLwbY2QB_c)T1VlIF;Y@u
zI{t+3KUoz)E7jg8$K|>p8L&A%Nfj*&TOH&?lnM24^}5BVOM0a%86_VWhwuYn$0w&R
zJeCxDG+zO$649}EVf27{fKDPLokY`t16!q1l+oG=l7g)MR}Q&j>Xps=DHOUxTRKId
zaPOaY`#uxhRoaKl*AN?))Dd<cCG8-0<_j934)ZB;<`JjcGd89>ZLV3M@WYN*)fQRi
z#Sh{ZSr*#I4(VPPUxgDk?q4tD-1A6477QAeo|da9->j71u|t>M9M#$u3)r((wE50}
z`zOS0ASTU9)tr3unqh@=0%~j0VW&eE_7!`bInnV#1Tw}&jnnTZ##0@BY&OD=dT2~n
zCbp8Uk)qP0@MFKQoDT1_$;I;QP+Msc>`a}*2`TWH&uMwD(n~P#Y(T~t#J2jqY>yBd
zTAZH<+P`JAGs?Zi`IF3VkcR$s$<3`1R#b1lwV>)_d%kNA9G{p&f@R!N#8Sl8bzZP{
zGGzs>(BGAHh(P+vnbNZp&8JY1%|>!6V%rr!gzAFv6@*#<Sg0OUc18@MgJ{AG-3Vi?
z>_D|}nssHXMFbZbATqEgGj;Msoa-l$Hb74`4Hir6*hk$wzzP){0(Xa?u>;<k5`vn0
zW@^r1rdQVeTdlw%8z`WH>c<9tjUBG>tXt^CNP;}4(U-HF)Kl0Q5FFT$F3FrRen|S$
z1`nX_+=KB(o!P<T-Cc2Wohdyd*marXo^TXYu=EQ3ZjbNoNKfJH$c;N5o_`cjP~Bxn
z_6E;J>%Fi*uhg(<!^H3P{YzY3)N`CB@I8KlerS}S>d_sZq1@B^-bVBs%Usu{ixudC
z+z_{Vi*m4eI(#^DozryJ{hxXw!O$to37z7pT(b2>%H*|>X;Y}zxgm%Gp$fPN-dX~g
zr`o6_VN<9~a$;MDIa4F~0yd78u0S;ca}5yEW#Wex=N9+dhG<vU3^<2Xi;Swma1(cW
zN9X1~J)WC8zUvOpGY}gBA~mx51EaAQR+1uMqLORt3qgtf%eeFS{XXQbcz}4+Tf@Nd
z>_f5$*wA7bMdtt5z;+|VsDv;(g*Jf~SRFl?KR}nR6)?GODuxK#M6ICu5hc0s0?9dZ
zvwuh@@cv76Nf~rX<Ug1SSmppB3LsSJ51Iy14|req6c+dgWQ(gs++uPfH1t1k%rh>c
zSuFQo=nx3}^7Pi^VIcwb_5Z*z-z)%4L8)H@;ozjB=`aVg)xouTA^Fz~c2miC`SeE0
z+C?1m3bX4uTd1dqJzjkSu=4;ec|ec=hi=le>`EOWJXExoiz{fL853f`oQ-!o!JcKY
zk5dSYX_segD}wxb5x0*Ns@EtDf|nAm`LqgR_%sLKnMItIteSZgbP!rRldZt4PbO6g
zTq^(F)|GC0R4573WxNx(iVseu3ClW`6<yA~IM7l_Gnw`~P;Ek4Hlb%47{BR{Ineke
zTxKGz^#(CgGJH=}*P0|?e3y?{mZy(3vMF&t?*C9b%}l^<P}w!SrSD19syF$4^7|M=
zythf&$g3b_VCHimP0#TgW*1P(qgf@k5@73`Q+FYIVhRq?lTzmfZ^g}8t%zb#7=1_s
z@65Qy5j^9$Jr4*)9gT;9x9Slu<HiuwB%t);IydZg)_CCkIzut?0EhzG=vKjygtiK{
z!;nOEdr{zAG2dX_7DX?wxvO{(vPrrmTe|o#<-+tgYWz=wf{CpVtTKM`9p>&MIv@9G
zKeAe5#K3%sgBL54$pjbq0P)M^pGjC2;{Mr#wXf;P;lRzVb`q{MT5qp*Q&}soTIo!z
zT#aU6>fd3)!_uM!#0SqK2-~5xTu>tYz|7S0yIrbeeMd)M>PZAa0r{E<r%FTVPW;mG
z2k+Seu1z5$6^7;yt{n~<tnAd(_artSUvl#AYj|%Ez|glx{(|NN6L5&vzNnLBxxmYb
zP%%E?#B02dBMiIVr(Q_>b&^Nk;3n)%$7|hh5V!{+5>N*%arPB2um=3vd%=clL{G&}
zSFw@zSEddKYuGeS@0V+AP;T<SKASbFk@FAwhq6!pg|dQO#kZ#Bk$^nn^z*_)f038G
z5rAi$8F3_pP5wI!v{$gR(9s*0JksU@;cp&}{^Lmocn=&qMG=tVo1}0=y$Mdk_I+K!
zH2~hb^d$c{;L-1TkBylQ(p19R|Db3nBk%#xIuQKVziJ<`e9bPwN_Wdp|G;$(9EFm>
zM={X1t6hKLarobY>|+*y_ackyzj+MsZgA?4CMf<G+~nH-0_k3NvnL`<L?$T-|L7uS
zg{}ql$DhOg52Da|p4I?9VSk4I1F*ej3{xI}P<9krzUDtJyL+&E!qk4dx^%epQ~n2*
z=l!OQ?Y2LfT?o)^(Wv;izu>zgGaVFNOTZPXeH8y+Jh2yK-FURN7Q9{R<3PY)t{a}L
z(}tD#=vCBzL}E?5#t61R3m@=*7(3;c%x2+CXtNCfa2avF7XZ?WtjAaX#Vb=ux$#YG
zT{v(I_#ei;gR{UBxa#o(e}~<91nWr1W)Gh+BC|ij{@_fd^ts2u9sMvfH@EEL`lG)9
zZGgMB9)y+W9i3ZS`0424;t+!R4*@78#+{oRx}*Cx!3|SsIO+3WxWu28Ee%k+;Q&Kw
zX(Ikpp$Yen_*zOw6&NEzQ1E||QVPaBUe^CEsST8;yYKT&v^XcqZu2MS=2jjsjI0o&
zI|%+2oW~XL;f;q^n2&`=9sYp`!G}#d7b$bk#pw>B{{~(rH|T=T29FRi$Nt(!QZ>md
zHapTeLdLG1h$giDT}t&dy*Vb!28656>B;^hRyY+_{!l3rL<pyoX8+k2$&d5>18Z6J
z3Lr{h>n6A!Vjz4Q=8{>)_ToIV{P*kz%%z6&Y#y?~!}aI81keajSU<}Sw^}=sF*$#y
zJljliJFqQMhpSAC?~g#RFJxb4=ri9eKk0tcZ-w}0h#JZ$afOY=jzFf#CB#aiz@NcH
zk5jPEmY-|0_Jqd*gpYrru;8umogFLs3Y{?KP3}L7Q!Db<<G_1`^rw15jexAMAd-{1
zG+XJE3m3jAC{fd6|C-z#dOVUU@(+(mHCRpL`JazA>&}Az^YP{Ca*J32$q-^7naaoU
zZnC)G;WHKEor`DeiI{)rWT|S}0l21~6!$e)6emzv$}>**&oNlD#01REzxH@^f}TEe
z(4;>;``TqQ0|ibZ#-ar$=kBKLi*RxA@$e!W=lmVom7C4V7JpSS=y6X$AKn#gfZH5h
zo5n&_44$1;h=8!p{`+zPyP52M%uu!r-!{lUp6S8kgj=DMHtYSwxcK=S9D)+&6lOWb
zmkQW}iIo$z5Jszv#k*nQDm2kxBsUTEXRAPZ3T0b_etb$#8MD^=?`^+vg)x=uwb6SG
zfGCdL`k||H*t_hR5Dqjy1^VwP`OFP=R{!NYzO#?G@~IFy@W<)#O>_cR{7MptD&8dv
z2>xB)docjhw!ur;Nff3+gyEY*1I1RJ3}7<iFGd?+QaPyI!C|b6%MG3lW!6J$UTq9I
zx)HglYzwZ)!7uJr!_ReygNiF4KaP6bHjDF(Z5qLq`iK5XaVsC#@84Ueznra({^}1`
z6{5#pt^s8MAEXvCs*)zc!_^vKXSuYx+BXfOp#MU8tyxu7A+-G4<dIZi`%U{v5a1q4
z47&Vt1T|#AU+NnS`X05^5Zf~H^<3}F-QVqErZCoBPPA~8;vPEjC}L93el5H^GStwv
zQN`&c5=y9pfE35pkvwQ26IYaJ+kGibb)92vi;2HU7Ot8xU9`6xA1$nWPWXIfXL`s+
z_~&MnV>h00<ppt>N6T+7NE?X-V-_~|l&3bSbj{DcDZN@67!p01Cc)#}a-zdPofF!K
s%U_r|7ic<LdQk^Aq~#;k${B2!{cSlHLh0*70Q|RqpS@+?UVPO517Idgu>b%7

literal 0
HcmV?d00001

diff --git a/blueprints/quireink/template.toml b/blueprints/quireink/template.toml
new file mode 100644
index 000000000..11683dfe3
--- /dev/null
+++ b/blueprints/quireink/template.toml
@@ -0,0 +1,11 @@
+[variables]
+main_domain = "${domain}"
+
+[config]
+env = ["QUIREINK_HOST=${main_domain}"]
+mounts = []
+
+[[config.domains]]
+serviceName = "quireink"
+port = 3000
+host = "${main_domain}"

From c784f9b9c88d55780f5ba4f6826b309e8bcaa761 Mon Sep 17 00:00:00 2001
From: Nicolas SANS <nicolas.sans@epitech.eu>
Date: Mon, 31 Aug 2026 00:35:58 +0200
Subject: [PATCH 27/33] feat: add Silo object storage service with Docker
 Compose setup (#1112)

* feat: add Silo object storage service with Docker Compose setup

* update version to match docker image

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 blueprints/silo/docker-compose.yml | 16 ++++++
 blueprints/silo/logo.svg           | 82 ++++++++++++++++++++++++++++++
 blueprints/silo/meta.json          | 17 +++++++
 blueprints/silo/template.toml      | 18 +++++++
 4 files changed, 133 insertions(+)
 create mode 100644 blueprints/silo/docker-compose.yml
 create mode 100644 blueprints/silo/logo.svg
 create mode 100644 blueprints/silo/meta.json
 create mode 100644 blueprints/silo/template.toml

diff --git a/blueprints/silo/docker-compose.yml b/blueprints/silo/docker-compose.yml
new file mode 100644
index 000000000..c575eaa2a
--- /dev/null
+++ b/blueprints/silo/docker-compose.yml
@@ -0,0 +1,16 @@
+services:
+  silo:
+    image: pgsty/silo:RELEASE.2026-08-06T00-00-00Z
+    restart: unless-stopped
+    expose:
+      - 9000
+      - 9001
+    environment:
+      - MINIO_ROOT_USER=${MINIO_ROOT_USER}
+      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD}
+    volumes:
+      - silo:/data
+    command: server /data --console-address ":9001"
+
+volumes:
+  silo:
diff --git a/blueprints/silo/logo.svg b/blueprints/silo/logo.svg
new file mode 100644
index 000000000..957589755
--- /dev/null
+++ b/blueprints/silo/logo.svg
@@ -0,0 +1,82 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg"
+     width="570" height="570" viewBox="230 213 570 570"
+     preserveAspectRatio="xMidYMid meet"
+     role="img" aria-labelledby="title desc"
+     shape-rendering="geometricPrecision">
+  <title id="title">SILO emblem</title>
+  <desc id="desc">A smooth circular SILO mark with a peaked roof, flowing left wall, columns, and a curved base.</desc>
+
+  <defs>
+    <linearGradient id="silo-color" x1="276" y1="720" x2="742" y2="286" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#064A83"/>
+      <stop offset="0.5" stop-color="#007FA8"/>
+      <stop offset="1" stop-color="#22C7C9"/>
+    </linearGradient>
+  </defs>
+
+  <g fill="url(#silo-color)">
+    <!-- Outer circular band, intentionally opened at the lower-right plinth. -->
+    <path d="
+      M 734 676
+      A 283.5 278.5 0 1 0 310 692
+      L 359 692
+      A 247 248.5 0 1 1 688 676
+      Z"/>
+
+    <!-- Flowing left wall; its upper tangent matches the inner ellipse. -->
+    <path d="
+      M 300.57 375
+      C 292 390 300 430 328 450
+      C 343 461 357 472 374 481
+      C 410 501 426 517 426 544
+      L 426 676
+      L 336 676
+      C 308 647 286 608 274 565
+      C 262 522 263 479 272 439
+      C 278 413 286 389 300.57 375
+      Z"/>
+
+    <!-- Right column with tangent-continuous upper shoulder. -->
+    <path d="
+      M 602 373
+      Q 602 368 607 370
+      C 619 374 634 381 634 389
+      L 634 647
+      Q 634 649 636 649
+      L 708 649
+      L 734 676
+      L 602 676
+      Z"/>
+
+    <!-- Lower circular cap. -->
+    <path d="
+      M 310 692
+      L 714 692
+      C 668 743 596 774 512 774
+      C 428 774 355 743 310 692
+      Z"/>
+
+    <!-- Main silo body, with a tangent-continuous right shoulder. -->
+    <path d="
+      M 389 389
+      C 389 374 447 351 512 351
+      C 540 351 565 354 580 359
+      Q 583 360 583 364
+      L 583 676
+      L 443 676
+      L 443 541
+      C 443 509 426 490 389 470
+      Z"/>
+
+    <!-- Peaked roof with softly tapered, burr-free tips. -->
+    <path d="
+      M 512 274
+      L 647 365
+      Q 649 370 647 376
+      C 609 350 563 337 512 337
+      C 460 337 414 350 377 376
+      Q 375 370 377 365
+      Z"/>
+  </g>
+</svg>
diff --git a/blueprints/silo/meta.json b/blueprints/silo/meta.json
new file mode 100644
index 000000000..1b1670338
--- /dev/null
+++ b/blueprints/silo/meta.json
@@ -0,0 +1,17 @@
+{
+  "id": "silo",
+  "name": "Silo",
+  "version": "RELEASE.2026-08-06T00-00-00Z",
+  "description": "S3-Compatible Object Storage. A MinIO fork maintained by PGSTY",
+  "logo": "logo.svg",
+  "links": {
+    "github": "https://github.com/pgsty/silo",
+    "website": "https://silo.pgsty.com",
+    "docs": "https://silo.pgsty.com/docs/"
+  },
+  "tags": [
+    "s3",
+    "file",
+    "storage"
+  ]
+}
diff --git a/blueprints/silo/template.toml b/blueprints/silo/template.toml
new file mode 100644
index 000000000..5073ec779
--- /dev/null
+++ b/blueprints/silo/template.toml
@@ -0,0 +1,18 @@
+[variables]
+main_domain = "${domain}"
+console_domain = "${domain}"
+password = "${password:32}"
+
+[config]
+[[config.domains]]
+serviceName = "silo"
+port = 9000
+host = "${main_domain}"
+[[config.domains]]
+serviceName = "silo"
+port = 9001
+host = "${console_domain}"
+
+[config.env]
+MINIO_ROOT_USER = "silo_usr"
+MINIO_ROOT_PASSWORD = "${password}"

From 614e4fef12fecb712e2bbe90f809d77bcdbba12c Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 16:45:14 -0600
Subject: [PATCH 28/33] fix(odoo_17, odoo_18): provide odoo.conf via config
 mount and enable proxy_mode (#1124)

Same root cause as odoo_19 (#1108, fixed in #1110): the compose file
bind-mounts ../files/config over /etc/odoo, but with mounts = [] the
directory is empty, hiding the image's /etc/odoo/odoo.conf. As a result
wait-for-psql.py crashes with configparser.NoSectionError: No section:
'options' and the web container never starts.

Ship odoo.conf through the template config mount instead, with
proxy_mode enabled so websocket/POS/livechat work behind Traefik.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/odoo_17/template.toml | 10 +++++++++-
 blueprints/odoo_18/template.toml | 10 +++++++++-
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/blueprints/odoo_17/template.toml b/blueprints/odoo_17/template.toml
index 886082927..2a56f3901 100644
--- a/blueprints/odoo_17/template.toml
+++ b/blueprints/odoo_17/template.toml
@@ -3,9 +3,17 @@ main_domain = "${domain}"
 
 [config]
 env = {}
-mounts = []
 
 [[config.domains]]
 serviceName = "web"
 port = 8_069
 host = "${main_domain}"
+
+[[config.mounts]]
+filePath = "config/odoo.conf"
+content = """
+[options]
+addons_path = /mnt/extra-addons
+data_dir = /var/lib/odoo
+proxy_mode = True
+"""
diff --git a/blueprints/odoo_18/template.toml b/blueprints/odoo_18/template.toml
index 886082927..2a56f3901 100644
--- a/blueprints/odoo_18/template.toml
+++ b/blueprints/odoo_18/template.toml
@@ -3,9 +3,17 @@ main_domain = "${domain}"
 
 [config]
 env = {}
-mounts = []
 
 [[config.domains]]
 serviceName = "web"
 port = 8_069
 host = "${main_domain}"
+
+[[config.mounts]]
+filePath = "config/odoo.conf"
+content = """
+[options]
+addons_path = /mnt/extra-addons
+data_dir = /var/lib/odoo
+proxy_mode = True
+"""

From 8ac27a0f89aaf37936563065b1004973d7eaf33a Mon Sep 17 00:00:00 2001
From: Ghazi Ben Dahmane <ghazi.ben.dahmane@gmail.com>
Date: Mon, 31 Aug 2026 01:44:43 +0200
Subject: [PATCH 29/33] fix: update Pocket ID template to v2.14.0 (#1113)

---
 blueprints/pocket-id/docker-compose.yml | 14 +++++++++-----
 blueprints/pocket-id/meta.json          | 14 ++++++++++----
 blueprints/pocket-id/template.toml      |  5 +++--
 3 files changed, 22 insertions(+), 11 deletions(-)

diff --git a/blueprints/pocket-id/docker-compose.yml b/blueprints/pocket-id/docker-compose.yml
index b3e679767..c772939a7 100644
--- a/blueprints/pocket-id/docker-compose.yml
+++ b/blueprints/pocket-id/docker-compose.yml
@@ -1,15 +1,19 @@
+version: "3.8"
+
 services:
   pocket-id:
-    image: ghcr.io/pocket-id/pocket-id:v1
+    image: pocketid/pocket-id:v2.14.0
     restart: unless-stopped
     environment:
-      - APP_URL
-      - TRUST_PROXY
-      - ENCRYPTION_KEY
+      APP_URL: ${APP_URL}
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
+      TRUST_PROXY: ${TRUST_PROXY}
     volumes:
       - pocket-id-data:/app/data
+    expose:
+      - "1411"
     healthcheck:
-      test: [ "CMD", "/app/pocket-id", "healthcheck" ]
+      test: ["CMD", "/app/pocket-id", "healthcheck"]
       interval: 1m30s
       timeout: 5s
       retries: 2
diff --git a/blueprints/pocket-id/meta.json b/blueprints/pocket-id/meta.json
index cea38bd15..c00d6177c 100644
--- a/blueprints/pocket-id/meta.json
+++ b/blueprints/pocket-id/meta.json
@@ -1,16 +1,22 @@
 {
   "id": "pocket-id",
   "name": "Pocket ID",
-  "version": "v1",
-  "description": "A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.",
+  "version": "2.14.0",
+  "description": "Pocket ID is a simple OpenID Connect and OAuth 2.0 provider that lets users authenticate to applications with passkeys.",
   "logo": "pocket-id.svg",
   "links": {
     "github": "https://github.com/pocket-id/pocket-id",
     "website": "https://pocket-id.org/",
-    "docs": "https://pocket-id.org/docs"
+    "docs": "https://pocket-id.org/docs/"
   },
   "tags": [
+    "authentication",
     "identity",
-    "auth"
+    "sso",
+    "oidc",
+    "oauth2",
+    "passkeys",
+    "security",
+    "self-hosted"
   ]
 }
diff --git a/blueprints/pocket-id/template.toml b/blueprints/pocket-id/template.toml
index aaefaa124..8108a4fdc 100644
--- a/blueprints/pocket-id/template.toml
+++ b/blueprints/pocket-id/template.toml
@@ -1,5 +1,6 @@
 [variables]
 main_domain = "${domain}"
+encryption_key = "${base64:32}"
 
 [config]
 mounts = []
@@ -10,6 +11,6 @@ port = 1411
 host = "${main_domain}"
 
 [config.env]
-ENCRYPTION_KEY = "CHANGEME: openssl rand -base64 32"
-APP_URL = "http://${main_domain}"
+APP_URL = "https://${main_domain}"
+ENCRYPTION_KEY = "${encryption_key}"
 TRUST_PROXY = "true"

From a9aa64ee512a83317ca1a87423f2fc5811b70c37 Mon Sep 17 00:00:00 2001
From: Ghazi Ben Dahmane <ghazi.ben.dahmane@gmail.com>
Date: Mon, 31 Aug 2026 01:45:24 +0200
Subject: [PATCH 30/33] feat: add FalkorDB template (#1116)

---
 blueprints/falkordb/docker-compose.yml | 37 ++++++++++++++++++++++++++
 blueprints/falkordb/falkordb.svg       | 17 ++++++++++++
 blueprints/falkordb/instructions.md    |  4 +++
 blueprints/falkordb/meta.json          | 20 ++++++++++++++
 blueprints/falkordb/template.toml      | 19 +++++++++++++
 5 files changed, 97 insertions(+)
 create mode 100644 blueprints/falkordb/docker-compose.yml
 create mode 100644 blueprints/falkordb/falkordb.svg
 create mode 100644 blueprints/falkordb/instructions.md
 create mode 100644 blueprints/falkordb/meta.json
 create mode 100644 blueprints/falkordb/template.toml

diff --git a/blueprints/falkordb/docker-compose.yml b/blueprints/falkordb/docker-compose.yml
new file mode 100644
index 000000000..370d2f7b8
--- /dev/null
+++ b/blueprints/falkordb/docker-compose.yml
@@ -0,0 +1,37 @@
+version: "3.8"
+
+services:
+  falkordb:
+    image: falkordb/falkordb:v4.20.4-alpine
+    restart: unless-stopped
+    environment:
+      - REDIS_ARGS=--requirepass ${FALKORDB_PASSWORD} --appendonly yes
+      - FALKORDB_ARGS=MAX_QUEUED_QUERIES 25 TIMEOUT 1000 RESULTSET_SIZE 10000 IMPORT_FOLDER /app/.data/import
+      - FALKORDB_PASSWORD=${FALKORDB_PASSWORD}
+      - AUTH_URL=${AUTH_URL}
+      - AUTH_SECRET=${AUTH_SECRET}
+      - NEXTAUTH_URL=${AUTH_URL}
+      - NEXTAUTH_SECRET=${AUTH_SECRET}
+      - ENCRYPTION_KEY=${ENCRYPTION_KEY}
+      - ALLOWED_ORIGINS=${AUTH_URL}
+      - TRUST_PROXY_HEADERS=true
+      - CSV_STORAGE=local
+      - CSV_LOCAL_TEMP_DIR=/app/.data/import
+      - CSV_LOCAL_LOAD_URI_MODE=file
+      - API_TOKEN_STORAGE_PATH=/app/.data/api_tokens.json
+    volumes:
+      - falkordb_data:/var/lib/falkordb/data
+      - falkordb_browser_data:/app/.data
+    expose:
+      - 3000
+      - 6379
+    healthcheck:
+      test: ["CMD-SHELL", "REDISCLI_AUTH=$$FALKORDB_PASSWORD redis-cli ping | grep PONG"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 10s
+
+volumes:
+  falkordb_data:
+  falkordb_browser_data:
diff --git a/blueprints/falkordb/falkordb.svg b/blueprints/falkordb/falkordb.svg
new file mode 100644
index 000000000..09270551a
--- /dev/null
+++ b/blueprints/falkordb/falkordb.svg
@@ -0,0 +1,17 @@
+<svg width="508" height="508" viewBox="0 0 508 508" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g clip-path="url(#clip0_1764_80)">
+<rect x="2" width="508" height="508" rx="63.5" fill="#191919"/>
+<path d="M459.448 247.263C459.06 249.273 458.295 251.265 457.465 253.036C456.174 255.775 454.477 258.357 452.439 260.598C447.809 265.671 441.271 268.253 434.576 269.608C427.88 270.964 407.573 270.088 399.089 268.041C377.481 262.821 355.182 262.941 341.966 268.05C333.583 271.296 330.651 273.15 326.224 276.968C308.711 292.027 300.872 328.455 293.919 349.897C289.188 364.56 284.549 379.823 273.925 391.378C257.565 409.149 230.332 414 205.635 414H97.1546C95.7989 414 94.7752 412.773 95.0427 411.436L97.588 398.35C99.6538 387.689 109.005 379.998 119.869 379.998H192.706C213.732 379.998 236.234 377.056 247.891 360.963C254.43 351.916 256.311 340.711 258.985 330.051C268.346 292.728 271.454 258.219 308.822 243.5C297.811 236.621 289.806 225.499 287.021 213.27C281.902 190.694 294.011 167.962 295.136 144.897C295.634 135.075 293.319 123.999 284.697 118.549C278.656 114.722 270.91 114.611 263.652 114.611C236.409 114.639 219.182 114.657 187.504 114.676H180.145C165.897 114.685 155.199 101.691 157.919 87.7101L158.685 83.7446C158.879 82.7209 159.745 82.0016 160.778 82.0016C177.637 82.0016 241.602 82.103 273.695 82.0016C292.222 81.9555 313.036 82.8224 325.579 95.7242C329.738 100.013 332.394 104.992 333.962 110.387C334.035 110.6 334.091 110.83 334.155 111.051C337.752 124.267 334.921 139.852 331.296 153.621C326.63 171.531 321.632 192.345 331.628 209.461C335.603 216.258 341.828 221.293 349.224 223.959C353.356 225.453 355.126 226.2 359.516 226.163C361.711 226.144 363.897 225.923 366.064 225.536C370.38 224.779 375.074 223.728 378.966 222.963C380.829 222.594 382.701 222.262 384.591 221.994C389.719 221.275 395.206 221.137 400.426 222.179C404.253 222.944 407.988 224.355 411.188 226.605C414.591 229.003 416.602 231.982 418.391 235.671C419.396 237.737 420.641 239.83 422.67 240.909C426.303 242.846 431.938 241.545 435.848 241.232C439.915 240.909 443.955 240.273 448.012 239.802C449.986 239.572 451.959 239.369 453.942 239.277C455.501 239.203 457.198 239.406 458.369 240.559C459.208 241.388 459.605 242.587 459.697 243.768C459.78 244.911 459.678 246.083 459.457 247.254L459.448 247.263Z" fill="url(#paint0_linear_1764_80)"/>
+<path d="M182.763 183.28L172.627 235.164C172.36 236.556 173.421 237.848 174.841 237.848H229.159C230.58 237.848 231.64 239.139 231.373 240.531L228.956 253.055C226.909 263.66 217.622 271.333 206.823 271.333H167.509C166.43 271.333 165.499 272.099 165.296 273.159L154.663 327.847C152.606 338.443 143.319 346.088 132.529 346.088H110.525C109.105 346.088 108.045 344.797 108.312 343.405L145.902 149.794C146.104 148.734 147.036 147.968 148.115 147.968H254.096C255.516 147.968 256.577 149.259 256.309 150.652L253.893 163.176C251.846 173.781 242.559 181.454 231.76 181.454H184.985C183.906 181.454 182.975 182.219 182.772 183.28H182.763Z" fill="white"/>
+</g>
+<defs>
+<linearGradient id="paint0_linear_1764_80" x1="459.787" y1="82.0147" x2="70.7574" y2="381.599" gradientUnits="userSpaceOnUse">
+<stop stop-color="#7466FF"/>
+<stop offset="0.5" stop-color="#FF66B3"/>
+<stop offset="1" stop-color="#FF804D"/>
+</linearGradient>
+<clipPath id="clip0_1764_80">
+<rect width="508" height="508" fill="white"/>
+</clipPath>
+</defs>
+</svg>
diff --git a/blueprints/falkordb/instructions.md b/blueprints/falkordb/instructions.md
new file mode 100644
index 000000000..f6f4b0ca5
--- /dev/null
+++ b/blueprints/falkordb/instructions.md
@@ -0,0 +1,4 @@
+1. Open the generated domain to access FalkorDB Browser.
+2. Create a connection using `localhost` as the host and `6379` as the port.
+3. Leave the username empty and use the generated `FALKORDB_PASSWORD` from the Dokploy environment settings.
+4. Keep port `6379` private unless remote database clients need direct access. The browser interface can access it inside the container.
diff --git a/blueprints/falkordb/meta.json b/blueprints/falkordb/meta.json
new file mode 100644
index 000000000..f2ac219e1
--- /dev/null
+++ b/blueprints/falkordb/meta.json
@@ -0,0 +1,20 @@
+{
+  "id": "falkordb",
+  "name": "FalkorDB",
+  "version": "4.20.4",
+  "description": "A high-performance graph database for knowledge graphs, GraphRAG, agent memory, fraud detection and other relationship-heavy workloads. Includes the FalkorDB Browser interface.",
+  "logo": "falkordb.svg",
+  "links": {
+    "github": "https://github.com/FalkorDB/FalkorDB",
+    "website": "https://www.falkordb.com/",
+    "docs": "https://docs.falkordb.com/"
+  },
+  "tags": [
+    "database",
+    "graph-database",
+    "knowledge-graph",
+    "graphrag",
+    "ai",
+    "redis"
+  ]
+}
diff --git a/blueprints/falkordb/template.toml b/blueprints/falkordb/template.toml
new file mode 100644
index 000000000..43b3a6cff
--- /dev/null
+++ b/blueprints/falkordb/template.toml
@@ -0,0 +1,19 @@
+[variables]
+main_domain = "${domain}"
+falkordb_url = "https://${main_domain}"
+falkordb_password = "${hash:32}"
+auth_secret = "${base64:48}"
+encryption_key = "${hash:32}"
+
+[config]
+env = [
+  "FALKORDB_PASSWORD=${falkordb_password}",
+  "AUTH_URL=${falkordb_url}",
+  "AUTH_SECRET=${auth_secret}",
+  "ENCRYPTION_KEY=${encryption_key}",
+]
+
+[[config.domains]]
+serviceName = "falkordb"
+port = 3000
+host = "${main_domain}"

From b87d9a9a8a86aea8df7b88ccb665c54a9b5adfd3 Mon Sep 17 00:00:00 2001
From: Ghazi Ben Dahmane <ghazi.ben.dahmane@gmail.com>
Date: Mon, 31 Aug 2026 01:46:06 +0200
Subject: [PATCH 31/33] feat: add Rustrak SQLite full-stack template (#1115)

---
 blueprints/rustrak-sqlite/docker-compose.yml | 33 ++++++++++++++++++++
 blueprints/rustrak-sqlite/meta.json          | 20 ++++++++++++
 blueprints/rustrak-sqlite/rustrak.svg        |  1 +
 blueprints/rustrak-sqlite/template.toml      | 25 +++++++++++++++
 4 files changed, 79 insertions(+)
 create mode 100644 blueprints/rustrak-sqlite/docker-compose.yml
 create mode 100644 blueprints/rustrak-sqlite/meta.json
 create mode 100644 blueprints/rustrak-sqlite/rustrak.svg
 create mode 100644 blueprints/rustrak-sqlite/template.toml

diff --git a/blueprints/rustrak-sqlite/docker-compose.yml b/blueprints/rustrak-sqlite/docker-compose.yml
new file mode 100644
index 000000000..3a486e985
--- /dev/null
+++ b/blueprints/rustrak-sqlite/docker-compose.yml
@@ -0,0 +1,33 @@
+version: "3.8"
+
+services:
+  rustrak-server:
+    image: rustrak/rustrak-server:latest
+    restart: unless-stopped
+    environment:
+      - HOST=0.0.0.0
+      - PORT=8080
+      - RUST_LOG=info
+      - SSL_PROXY=true
+      - SESSION_SECRET_KEY=${SESSION_SECRET_KEY}
+      - CREATE_SUPERUSER=${CREATE_SUPERUSER}
+    volumes:
+      - rustrak_data:/data
+    expose:
+      - 8080
+
+  rustrak-ui:
+    image: rustrak/rustrak-ui:latest
+    restart: unless-stopped
+    environment:
+      - RUSTRAK_API_URL=${RUSTRAK_API_URL}
+      # Next.js standalone binds to $HOSTNAME (the container id) by default, which is
+      # unreachable from Traefik on the Dokploy network -> 502. Bind to all interfaces.
+      - HOSTNAME=0.0.0.0
+    expose:
+      - 3000
+    depends_on:
+      - rustrak-server
+
+volumes:
+  rustrak_data:
diff --git a/blueprints/rustrak-sqlite/meta.json b/blueprints/rustrak-sqlite/meta.json
new file mode 100644
index 000000000..d1586505c
--- /dev/null
+++ b/blueprints/rustrak-sqlite/meta.json
@@ -0,0 +1,20 @@
+{
+  "id": "rustrak-sqlite",
+  "name": "Rustrak (Full Stack SQLite)",
+  "version": "latest",
+  "description": "Self-hosted error tracking compatible with Sentry SDKs. Full stack with the Rust server, web dashboard and built-in SQLite storage. No external database required.",
+  "logo": "rustrak.svg",
+  "links": {
+    "github": "https://github.com/rustrak/rustrak",
+    "website": "https://rustrak.github.io/rustrak/",
+    "docs": "https://rustrak.github.io/rustrak/getting-started/overview"
+  },
+  "tags": [
+    "monitoring",
+    "error-tracking",
+    "sentry",
+    "rust",
+    "observability",
+    "sqlite"
+  ]
+}
diff --git a/blueprints/rustrak-sqlite/rustrak.svg b/blueprints/rustrak-sqlite/rustrak.svg
new file mode 100644
index 000000000..c12c62cac
--- /dev/null
+++ b/blueprints/rustrak-sqlite/rustrak.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 1000"><defs><radialGradient id="poster10001000b0"><stop offset="0" stop-color="#c5f11e" stop-opacity="1.0"/><stop offset=".55" stop-color="#c5f11e" stop-opacity="0.55"/><stop offset="1" stop-color="#c5f11e" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b1"><stop offset="0" stop-color="#aed800" stop-opacity="0.95"/><stop offset=".55" stop-color="#aed800" stop-opacity="0.52"/><stop offset="1" stop-color="#aed800" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b2"><stop offset="0" stop-color="#96bd00" stop-opacity="0.85"/><stop offset=".55" stop-color="#96bd00" stop-opacity="0.47"/><stop offset="1" stop-color="#96bd00" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b3"><stop offset="0" stop-color="#030303" stop-opacity="1.0"/><stop offset=".55" stop-color="#030303" stop-opacity="0.55"/><stop offset="1" stop-color="#030303" stop-opacity="0"/></radialGradient><radialGradient id="poster10001000b4"><stop offset="0" stop-color="#030303" stop-opacity="0.95"/><stop offset=".55" stop-color="#030303" stop-opacity="0.52"/><stop offset="1" stop-color="#030303" stop-opacity="0"/></radialGradient><filter id="poster10001000f" x="-25%" y="-25%" width="150%" height="150%" color-interpolation-filters="sRGB"><feGaussianBlur stdDeviation="62" result="b"/><feTurbulence type="fractalNoise" baseFrequency="0.0026" numOctaves="2" seed="11" result="t"/><feDisplacementMap in="b" in2="t" scale="76" xChannelSelector="R" yChannelSelector="G"/></filter><filter id="poster10001000n" x="0" y="0" width="100%" height="100%"><feTurbulence type="fractalNoise" baseFrequency="0.52" numOctaves="4" seed="3" stitchTiles="stitch" result="t"/><feColorMatrix in="t" type="saturate" values="0" result="g"/><feComponentTransfer in="g"><feFuncA type="linear" slope="2.1" intercept="-0.42"/></feComponentTransfer></filter><clipPath id="poster10001000c"><rect width="1000" height="1000"/></clipPath></defs><g clip-path="url(#poster10001000c)"><rect width="1000" height="1000" fill="#030303"/><g filter="url(#poster10001000f)"><g transform="scale(1.3) translate(-115 -115)"><ellipse cx="200" cy="140" rx="560" ry="482" fill="url(#poster10001000b0)"/><ellipse cx="400" cy="300" rx="420" ry="361" fill="url(#poster10001000b1)"/><ellipse cx="60" cy="480" rx="364" ry="313" fill="url(#poster10001000b2)"/><ellipse cx="780" cy="740" rx="580" ry="499" fill="url(#poster10001000b3)"/><ellipse cx="580" cy="960" rx="400" ry="344" fill="url(#poster10001000b4)"/></g></g><g transform="translate(205.5 560.9) scale(0.17084)"><path fill="#ffffff" d="M54.00 0.00V-486.00H207.00V0.00ZM207.00 -266.50 142.50 -316.50Q161.50 -402.00 207.00 -449.00Q252.49 -496.00 331.50 -496.00Q366.50 -496.00 393.25 -485.50Q420.00 -475.00 440.00 -453.00L349.00 -338.00Q339.00 -349.00 324.19 -354.75Q309.39 -360.50 290.00 -360.50Q252.00 -360.50 229.50 -337.13Q207.00 -313.75 207.00 -266.50Z M708.50 11.00Q642.20 11.00 590.60 -16.50Q539.00 -44.00 509.75 -92.67Q480.50 -141.35 480.50 -204.39V-486.00H633.50V-206.00Q633.50 -180.92 642.44 -162.80Q651.38 -144.69 668.43 -134.84Q685.48 -125.00 708.66 -125.00Q743.00 -125.00 763.00 -146.53Q783.00 -168.06 783.00 -206.00V-486.00H936.00V-204.50Q936.00 -140.50 907.00 -92.00Q878.00 -43.50 826.78 -16.25Q775.57 11.00 708.50 11.00Z M1203.50 12.50Q1160.50 12.50 1119.00 1.25Q1077.50 -10.00 1042.25 -30.25Q1007.00 -50.50 982.00 -78.00L1068.50 -166.00Q1093.00 -139.50 1126.00 -125.25Q1159.00 -111.00 1198.00 -111.00Q1225.00 -111.00 1239.25 -118.75Q1253.50 -126.50 1253.50 -141.00Q1253.50 -159.00 1236.25 -168.50Q1219.00 -178.00 1192.00 -185.25Q1165.00 -192.50 1135.00 -201.75Q1105.00 -211.00 1077.75 -227.00Q1050.50 -243.00 1033.50 -271.25Q1016.50 -299.50 1016.50 -344.00Q1016.50 -390.50 1040.50 -425.25Q1064.50 -460.00 1108.50 -479.75Q1152.50 -499.50 1212.00 -499.50Q1273.50 -499.50 1326.25 -478.25Q1379.00 -457.00 1412.00 -414.50L1325.00 -326.50Q1302.00 -353.50 1273.50 -364.75Q1245.00 -376.00 1217.50 -376.00Q1191.50 -376.00 1178.75 -368.25Q1166.00 -360.50 1166.00 -347.00Q1166.00 -331.50 1183.00 -322.50Q1200.00 -313.50 1227.00 -306.50Q1254.00 -299.50 1283.75 -289.75Q1313.50 -280.00 1340.50 -262.75Q1367.50 -245.50 1384.50 -217.00Q1401.50 -188.50 1401.50 -143.00Q1401.50 -71.50 1348.00 -29.50Q1294.50 12.50 1203.50 12.50Z M1549.00 0.00V-687.00H1702.00V0.00ZM1439.00 -356.00V-486.00H1812.00V-356.00Z M1874.00 0.00V-486.00H2027.00V0.00ZM2027.00 -266.50 1962.50 -316.50Q1981.50 -402.00 2027.00 -449.00Q2072.49 -496.00 2151.50 -496.00Q2186.50 -496.00 2213.25 -485.50Q2240.00 -475.00 2260.00 -453.00L2169.00 -338.00Q2159.00 -349.00 2144.19 -354.75Q2129.39 -360.50 2110.00 -360.50Q2072.00 -360.50 2049.50 -337.13Q2027.00 -313.75 2027.00 -266.50Z M2516.00 10.00Q2449.00 10.00 2396.25 -23.00Q2343.50 -56.00 2313.25 -113.00Q2283.00 -170.00 2283.00 -242.50Q2283.00 -315.50 2313.25 -372.75Q2343.50 -430.00 2396.25 -463.00Q2449.00 -496.00 2516.00 -496.00Q2565.00 -496.00 2604.50 -477.00Q2644.00 -458.00 2668.75 -424.50Q2693.50 -391.00 2697.00 -348.00V-138.00Q2693.50 -95.00 2669.00 -61.50Q2644.50 -28.00 2604.75 -9.00Q2565.00 10.00 2516.00 10.00ZM2547.00 -128.00Q2596.00 -128.00 2626.00 -160.25Q2656.00 -192.50 2656.00 -243.00Q2656.00 -277.00 2642.50 -302.75Q2629.00 -328.50 2604.50 -343.25Q2580.00 -358.00 2547.50 -358.00Q2515.50 -358.00 2491.00 -343.25Q2466.50 -328.50 2452.25 -302.50Q2438.00 -276.50 2438.00 -243.00Q2438.00 -209.50 2452.00 -183.50Q2466.00 -157.50 2490.75 -142.75Q2515.50 -128.00 2547.00 -128.00ZM2649.50 0.00V-130.50L2672.50 -249.00L2649.50 -366.50V-486.00H2800.00V0.00Z M3214.00 0.00 3044.00 -252.00 3213.00 -486.00H3384.00L3180.00 -222.50L3185.00 -286.00L3394.00 0.00ZM2903.00 0.00V-726.00H3056.00V0.00Z"/></g><rect width="1000" height="1000" filter="url(#poster10001000n)" opacity="0.55" style="mix-blend-mode:overlay"/><rect width="1000" height="1000" filter="url(#poster10001000n)" opacity="0.045"/></g></svg>
diff --git a/blueprints/rustrak-sqlite/template.toml b/blueprints/rustrak-sqlite/template.toml
new file mode 100644
index 000000000..bafaf2a28
--- /dev/null
+++ b/blueprints/rustrak-sqlite/template.toml
@@ -0,0 +1,25 @@
+[variables]
+main_domain = "${domain}"
+api_domain = "${domain}"
+session_secret_key = "${password:64}"
+admin_email = "${email}"
+admin_password = "${password:16}"
+create_superuser = "${admin_email}:${admin_password}"
+rustrak_api_url = "https://${api_domain}"
+
+[config]
+env = [
+  "SESSION_SECRET_KEY=${session_secret_key}",
+  "CREATE_SUPERUSER=${create_superuser}",
+  "RUSTRAK_API_URL=${rustrak_api_url}",
+]
+
+[[config.domains]]
+serviceName = "rustrak-ui"
+port = 3000
+host = "${main_domain}"
+
+[[config.domains]]
+serviceName = "rustrak-server"
+port = 8080
+host = "${api_domain}"

From 830d6bbc8de2a8cb0c87d3c3f2294940ecd0e933 Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Mon, 31 Aug 2026 14:05:48 -0600
Subject: [PATCH 32/33] Add OpenStatus template (#1126)

Self-hosted OpenStatus (status pages + uptime monitoring) following the
official docker-compose.github-packages.yaml setup: local libSQL database,
one-shot migration runner built from the pinned upstream commit, workflows,
API server, dashboard, status-page, and the private-location ingest server.
All app images pinned to upstream commit e1a9825; Tinybird analytics run in
no-op mode by default.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/openstatus/docker-compose.yml | 197 +++++++++++++++++++++++
 blueprints/openstatus/instructions.md    |  60 +++++++
 blueprints/openstatus/meta.json          |  17 ++
 blueprints/openstatus/openstatus.png     | Bin 0 -> 5939 bytes
 blueprints/openstatus/template.toml      |  34 ++++
 5 files changed, 308 insertions(+)
 create mode 100644 blueprints/openstatus/docker-compose.yml
 create mode 100644 blueprints/openstatus/instructions.md
 create mode 100644 blueprints/openstatus/meta.json
 create mode 100644 blueprints/openstatus/openstatus.png
 create mode 100644 blueprints/openstatus/template.toml

diff --git a/blueprints/openstatus/docker-compose.yml b/blueprints/openstatus/docker-compose.yml
new file mode 100644
index 000000000..d11221b4f
--- /dev/null
+++ b/blueprints/openstatus/docker-compose.yml
@@ -0,0 +1,197 @@
+services:
+  libsql:
+    image: ghcr.io/tursodatabase/libsql-server:v0.24.33
+    restart: unless-stopped
+    expose:
+      - 8080
+    volumes:
+      - libsql-data:/var/lib/sqld
+    environment:
+      - SQLD_NODE=primary
+      # Increase limits to handle multiple services without connection pooling
+      - SQLD_MAX_CONCURRENT_CONNECTIONS=512
+      - SQLD_MAX_CONCURRENT_REQUESTS=1024
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          'perl -e ''use IO::Socket::INET; exit(IO::Socket::INET->new(PeerAddr=>"127.0.0.1:8080",Timeout=>1) ? 0 : 1);''',
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 10s
+
+  # One-shot migration runner (idempotent — drizzle skips applied migrations).
+  # No published image exists for it upstream, so it is built from the pinned
+  # commit the ghcr.io app images were built from.
+  db-migrate:
+    build:
+      context: https://github.com/openstatusHQ/openstatus.git#e1a98255e39c9cc9f6d4853dbce30c3f6c42514a
+      dockerfile: packages/db/Dockerfile
+    restart: on-failure:3
+    environment:
+      - DATABASE_URL=http://libsql:8080
+      - DATABASE_AUTH_TOKEN=
+    depends_on:
+      libsql:
+        condition: service_healthy
+
+  workflows:
+    image: ghcr.io/openstatushq/openstatus-workflows:e1a9825
+    restart: unless-stopped
+    expose:
+      - 3000
+    volumes:
+      - workflows-data:/app/data
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - DATABASE_URL=http://libsql:8080
+      - DATABASE_AUTH_TOKEN=
+      - CRON_SECRET=${CRON_SECRET}
+      - RESEND_API_KEY=${RESEND_API_KEY:-re_selfhost_placeholder}
+      - SITE_URL=https://${DASHBOARD_HOST}
+      - TINYBIRD_NOOP=true
+    depends_on:
+      db-migrate:
+        condition: service_completed_successfully
+      libsql:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3000/ping"]
+      interval: 15s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+  server:
+    image: ghcr.io/openstatushq/openstatus-server:e1a9825
+    restart: unless-stopped
+    expose:
+      - 3000
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - DATABASE_URL=http://libsql:8080
+      - DATABASE_AUTH_TOKEN=
+      - CRON_SECRET=${CRON_SECRET}
+      - RESEND_API_KEY=${RESEND_API_KEY:-re_selfhost_placeholder}
+      - SUPER_ADMIN_TOKEN=${SUPER_ADMIN_TOKEN}
+      - SELF_HOST=true
+      - FLY_REGION=self-hosted
+      - TINYBIRD_NOOP=true
+      - UPSTASH_REDIS_REST_URL=http://localhost:6379
+      - UPSTASH_REDIS_REST_TOKEN=placeholder
+    depends_on:
+      db-migrate:
+        condition: service_completed_successfully
+      workflows:
+        condition: service_healthy
+      libsql:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3000/ping"]
+      interval: 15s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+  dashboard:
+    image: ghcr.io/openstatushq/openstatus-dashboard:e1a9825
+    restart: unless-stopped
+    expose:
+      - 3000
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - HOSTNAME=0.0.0.0
+      - AUTH_TRUST_HOST=true
+      - DATABASE_URL=http://libsql:8080
+      - DATABASE_AUTH_TOKEN=
+      - AUTH_SECRET=${AUTH_SECRET}
+      - SELF_HOST=true
+      - NEXT_PUBLIC_URL=https://${DASHBOARD_HOST}
+      - CRON_SECRET=${CRON_SECRET}
+      - RESEND_API_KEY=${RESEND_API_KEY:-re_selfhost_placeholder}
+      - TINYBIRD_NOOP=true
+      - UPSTASH_REDIS_REST_URL=http://localhost:6379
+      - UPSTASH_REDIS_REST_TOKEN=placeholder
+    depends_on:
+      db-migrate:
+        condition: service_completed_successfully
+      workflows:
+        condition: service_healthy
+      libsql:
+        condition: service_healthy
+      server:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3000/"]
+      interval: 15s
+      timeout: 10s
+      retries: 3
+      start_period: 45s
+
+  status-page:
+    image: ghcr.io/openstatushq/openstatus-status-page:e1a9825
+    restart: unless-stopped
+    expose:
+      - 3000
+    environment:
+      - NODE_ENV=production
+      - PORT=3000
+      - HOSTNAME=0.0.0.0
+      - AUTH_TRUST_HOST=true
+      - DATABASE_URL=http://libsql:8080
+      - DATABASE_AUTH_TOKEN=
+      - AUTH_SECRET=${AUTH_SECRET}
+      - SELF_HOST=true
+      - NEXT_PUBLIC_URL=https://${DASHBOARD_HOST}
+      - CRON_SECRET=${CRON_SECRET}
+      - RESEND_API_KEY=${RESEND_API_KEY:-re_selfhost_placeholder}
+      - TINYBIRD_NOOP=true
+    depends_on:
+      db-migrate:
+        condition: service_completed_successfully
+      workflows:
+        condition: service_healthy
+      libsql:
+        condition: service_healthy
+      server:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3000/"]
+      interval: 15s
+      timeout: 10s
+      retries: 3
+      start_period: 45s
+
+  # Ingest server for private-location probes (the probe itself,
+  # ghcr.io/openstatushq/private-location, runs wherever you monitor from).
+  private-location:
+    image: ghcr.io/openstatushq/openstatus-private-location:e1a9825
+    restart: unless-stopped
+    expose:
+      - 8080
+    environment:
+      - PORT=8080
+      - GIN_MODE=release
+      - DB_URL=http://libsql:8080
+      - WORKFLOWS_URL=http://workflows:3000
+      - CRON_SECRET=${CRON_SECRET}
+      - TINYBIRD_URL=${TINYBIRD_URL}
+      - TINYBIRD_TOKEN=${TINYBIRD_TOKEN}
+    depends_on:
+      server:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "wget", "--spider", "-q", "http://localhost:8080/health"]
+      interval: 15s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+volumes:
+  libsql-data:
+  workflows-data:
diff --git a/blueprints/openstatus/instructions.md b/blueprints/openstatus/instructions.md
new file mode 100644
index 000000000..ae147b9e7
--- /dev/null
+++ b/blueprints/openstatus/instructions.md
@@ -0,0 +1,60 @@
+# OpenStatus
+
+OpenStatus is deployed here in self-hosted mode following the official Docker
+setup (`DOCKER.md` / `docker-compose.github-packages.yaml` upstream), with all
+app images pinned to the same upstream commit (`e1a9825`).
+
+## Services
+
+| Service | Purpose |
+|---|---|
+| dashboard | Admin UI (your first domain) |
+| status-page | Public status pages (your second domain, pages served at `/<slug>`) |
+| server | API backend (tRPC / public API) |
+| workflows | Background jobs / alerting |
+| libsql | Local libSQL (Turso) database — no cloud account needed |
+| db-migrate | One-shot migration runner (built from the pinned upstream commit, exits after applying) |
+| private-location | Ingest server that receives check results from your monitoring probes |
+
+Database migrations run automatically on every deploy (the one-shot
+`db-migrate` service is idempotent).
+
+Note: `db-migrate` is built from source (upstream publishes no image for it),
+so the first deployment takes a few extra minutes while it builds.
+
+## First login
+
+1. Open the dashboard domain and choose **magic link** login with your e-mail.
+2. If you did not configure `RESEND_API_KEY`, the magic link is not e-mailed —
+   it is printed to the **dashboard service logs**. Open the dashboard
+   container logs in Dokploy and copy the `>>> Magic Link: ...` URL into your
+   browser. If the printed link starts with `http://0.0.0.0:3000`, replace that
+   host with your dashboard domain before opening it. (Optionally, once HTTPS
+   is enabled on your dashboard domain, you can add
+   `AUTH_URL=https://<your-dashboard-domain>` to the dashboard service in the
+   compose file so links are generated with the right host — do not set it to
+   an empty value or a plain-HTTP domain, as that breaks the auth flow.)
+3. Create a workspace and a status page with a slug; it becomes available at
+   `https://<status-page-domain>/<slug>`.
+
+## Running checks (probes)
+
+Self-hosted OpenStatus runs monitors through **private location probes**
+(`ghcr.io/openstatushq/private-location`) that you deploy wherever you want to
+monitor from. Point the probe at this stack's ingest server:
+
+- Expose the `private-location` service (port 8080) on a domain in Dokploy, and
+- set `OPENSTATUS_INGEST_URL` on the probe to that URL, together with the
+  `OPENSTATUS_KEY` you create in the dashboard.
+
+See the upstream guide: https://www.openstatus.dev/docs (Guides → How to
+Self-Host openstatus).
+
+## Analytics (optional)
+
+Tinybird analytics are disabled by default (`TINYBIRD_NOOP=true`), so charts
+show no data but everything else works. To enable analytics, run a Tinybird
+Local container or use Tinybird Cloud, deploy the `packages/tinybird` project
+with the `tb` CLI, and set `TINYBIRD_URL` / `TINYBIRD_TOKEN` in the
+environment (plus `TINY_BIRD_API_KEY` and remove `TINYBIRD_NOOP`) — see the
+upstream self-hosting guide.
diff --git a/blueprints/openstatus/meta.json b/blueprints/openstatus/meta.json
new file mode 100644
index 000000000..259b8365b
--- /dev/null
+++ b/blueprints/openstatus/meta.json
@@ -0,0 +1,17 @@
+{
+  "id": "openstatus",
+  "name": "OpenStatus",
+  "version": "e1a9825",
+  "description": "OpenStatus is an open-source synthetic monitoring platform with beautiful status pages, uptime and API monitoring as code, and alerting.",
+  "logo": "openstatus.png",
+  "links": {
+    "github": "https://github.com/openstatusHQ/openstatus",
+    "website": "https://www.openstatus.dev",
+    "docs": "https://www.openstatus.dev/docs"
+  },
+  "tags": [
+    "monitoring",
+    "status-page",
+    "uptime"
+  ]
+}
diff --git a/blueprints/openstatus/openstatus.png b/blueprints/openstatus/openstatus.png
new file mode 100644
index 0000000000000000000000000000000000000000..9f458a6c8c08d3e83886ea6caea0587bd25beaa0
GIT binary patch
literal 5939
zcmeHLS6oxe*53)CgeD=<i$N4LG*JQRNEM|@P^5&S(xMbW5(ObdKm?I<j#omjmPiw&
z3Zdixq5={)QY42Ef&z+=L<9s3e4Bgj%lB{}zW488|Mr?SYi7-!*|XMv{qMTDI7o;p
ziUI&2;dsjSEC4{5;Ik|u1Zwm@U5x-=@TgN4VgNu4x%)tX{6cw935hxDU=7s1SN;Mv
zU?C@+PXfS;Y_VT~f&d`<#?kg9h5%WbTDrcsPg;mIX1<-RoLns;g#Zw!{Zh8TeLy)`
z4T^%=!leIE*s{)q8H}9v4(kjKj}I=MS1$5n^sPggMfl3r){w={X;I)ec9I})N}T{f
z{mv33+LGh|X*d=*b>ROM|9wCB?!@EM9k;YBleVb@{x*NBce-TNgwN4oKkwXbC3Lp8
z-&#Ay@7S0(H8qvv%wFG|7HDl;osJX?wL?~FYHEg*O;RJb69@Bw`$Q&#p|#GL?j%gZ
zPSjb@#I*7yCkW;i7PS_>=SNe%S2$$9hZ-{-Py+o(Y8{c{rS1iKO^~hSS!^?N4MwAW
znI-(>e)H^CoI_HN*rY5zbuAI{f7?{^EM<LteF%NgQ~&P+gfd@=$?op%;q&!Z^Ca1n
z49^}ELE+h#v1nLLhM_}BR5jA_#`jO(WL}@*9#wSqR65CUQmi+AVXr)+G#Uka@iy$W
zHTP&Jq7KpIKJ|LfYKBze+PA!%<F_>l3Wby_mI*(j+&_+3I*U}LDD0>8qih*1aG!@u
zb+*7hWo0j9@DZ3^yR6#QkmZgD1ChQKQ!U&{;8|<sW0BM!E|})X=?<MpCRHD0aMoGN
z1Rc1bL^~5niFl=po*sYhuk@z;JWS8CKCZvK9GbZL^&#-&CW(v=)2y!yR+%^=+bB)N
z*s(@(P8?kP+)o}$es-VrSQJXGJ-*ll&Gi<+8lGnTVF!4K(faL0d=2e@`Y;kX7SR$t
zgKW8SR@|Sz#px_oa5ABt$)Aw?@oOU{n^l2sQv2PRJMv0oQp9&F>RBG3(Z3@ad%*i`
z^vH+h<y!jVo8W=zW$&}JFs&18eZ+o@9E<)^Pq}HC_$!o8cA*f$JTXn~20b)EYjQ`%
z=ii0*sOCDBBGFiHgxc2nbW%y<V!)~L%`Bz2C(@)RQG^QxO-C<EK@wtPFa6AD3^S;I
z8LH)A>f)29pPmyVF8aC)Rc+JTKawBz`NVb6*M};Zcn<RhR9Xu`)$Uc3k2>6H{$d>;
zAK%th4$~9MoH^{N>w9^LeEGuc<yuO_#mwL6sRh;im)bIVcoSpe!>%P3quyzPl*9`u
z8DyVc!?Ij&+19$;IhI79%QZP#zr<jmy#5KOwq}PVuPgPZ<j3GXZSO(f;p+LyYk{}C
zhX%^opRF7E8gk0aofkK_+&U{8?lq0cpkdX&6mQ4%;?Y8Toz4HEhpWDtD`(w!MQ`Wx
z`Sr->$}Rd4Bz#ZxytTz*N2ozIW`!tFCiW^{3G4TSCrwq~yA?B=8EGzOSOK5@se9Cd
zgunD{DD`F!ewaS`(`#1c?ws2_@S@0->b|HzrPay{(@dd=*5R>?7;>`7($dmH@H`Y-
z6(Ka!C=GI%rIT6qZ389**-F>zsGmg<gx|@@Z@$Ijf5JFGuXn9^E8TxkVQB7Xnj=@z
zDZzbdICcBjUSnSp-YP{`Jd>-UK{J)ImP>Q|DVfbu0m{U>H4^UFao2ps1A8v=L6ZWm
ziX@G3u}P(?<@nIhS`o*H#_+I~d;J#QxudM`(I$EvSE75bVD{kFnO=sCw=;3${<bvL
z9GSglYGI)Z=!eRT!#2SQPnjLr8Z0mpEJX}W$ae69vYIuS9k+b29SIkJ;JXFi<@B(7
zziJZVOK&Vdy8J8>e|fE~uZvwrQXke|2fRM4t;KD8|D5SK{|?T~_-F{z*0MJG)5tp4
zM4`6QOWaAsFF;|?Q2pycf|d+&K)*($u6p8H=*TOq_n?f4nOSU~XthoRbC0B?=ye43
z;ax-b>P3?*Aun=Zl}VVv`A0Xtk?Deyto*Z@G#^Aa#)`qtmp-Qc!G?S8&m%JQhbKnS
zE}a#UV+1WJ{G+zEHo;P@vG~O@_EcT4giz_3=o+3p%|wJLktth$-4A6`xE0ZkUunoU
zIy4qrVwr>mj;g4rJaoubl`*v8Mx@`_2NbZ)<_AZ@nNm8z0Uqqhi|=m4V5mw`^Atr2
z)bQ=UR^})Kqpnunx-k8zZzn|y)Cdp4^aUEzg<skV-}m(%ysP{#$OjGY!KY83rkbId
zwyLYbA6{R0zX6N<W1?QEU>p*T3^DeB_E(G+b`|@T#zmLfD_5Uf$57$o7)WELn%3=e
z#u%zf=Gyn$!h1xmmI^~3+VnE?1w5_%PYk2)u$J7!F`&a+LG;RaQnR}Kk7SE$<(})X
zNQZL2*;>Scx~BK_{wPo3LN~!5MN4*5?z}jwOofFu3IPm}ZlNU^&6g|v0uEi#`<nK@
zL_1I$T0WWeRPNbLMg{xo@8NRt`4iYjU$2rgnh%1V6ioZlSzeQEqnP-^%4R<_Q<f5!
zT$UNW-j}^Eb(Qb#RS+(x5wztv{ew52;FrQKzshP$>|9@-YFkYT5lM1sbmP@JHZuH&
zip|?rgI?Cxdz@<=u;UtD_5U>a(*UvrcE5eA%fB8K6&0tgYNgTbiAxVRQsoN+nbK5T
zdcBi*GNrTn0;B*%7!RO`5--D<GIp648pXO^!Z;aMG=u|WNO-{)P4U;Rodp6efO3-*
zqz+AMJK&QJc->+7oo&d21bCA0j=OqES{qC_7^u?)-!`7z(nIosZ!`$xfLnMkm|h*c
z*rfrb=_xTJPcll(R_Gkk-AQWw#pG|U;wnmRD?UG*`76J+Bt|tUjl*nTS$Hc5XA0ih
z{PFCFHW=7+tW4L|*4|Z}e=fRmmA~#Y;}UJOK3|d~3k3gXw>GMIx-2kg0a0y-+y-dc
z_FP@70)>E%p%P0uFonkS_!VZz1z5;%f?yowWfmZdq~Qvf2_(GasBRZq`S|e?R*}sj
zEFe1L;RcMOQaC7HSNPxoa%s*OY*ll>unAs3G6T*u4Lv5HJtRBOX8h`_tV<Qt%enA#
z!p)oBxz4@uVpoHSqdiydZRCQ6KDh$|UPW;$OE8X(xG+%t-rz^v7$GEG_U-a=1SG(q
z_*|^13`g9*Gf@Yq))m6kti0DCgw$n;1l$_C5rU*1^C|$mN^oDUfP*F`C(%H4Un27(
zhB^)|prIQSVH^XYDqwQ<NO=J$qOrs^ulaUIF1A7kN>`=DKbWaJta=Zi>k5bc{fJ$}
zelK3?CppsM$aT^85~N!QoI4L^9$tP2Og=3jJY*HIyCHN7yFu_UGgyM5CAdY;C;3Bp
zp+XBTPKJFc$Iwi%<u^cU#Z-bLw|HxH@jRqdDK5)bnmUi60^p6nf>OdEpmkO;9yC}f
z0~YS%z8$2+>psbcETpm8FPRR%nmBzR0n(}-p@E@ZKD#99M~rxOQxg`+3k2SjcI8P?
zd+$I{xA%uwb7k*@0GFa_ia?d0yp_=SB%J2ckPkW9GUg(}WOoC<(Hi4Gt9?R5@!Cct
zso4t;yg?B(VS2#fy~fCYV_ha&SDa`@k|XXN`=<lONnz<&hy$N^X3XiPrY2Ef3Tcc6
zA@RZg0*O(*U=TjZh5lyC1-(vhZ!SKE0t%py1JYFB5#6s4TwSXGa03>JpaP!|R68#8
z5<R?F>fgdYi{Jeo+|oaO6?}1;Fis>09R-OIufPw%0%s}U(m0Xv@$sMv&ICU)K^{0d
z;d1;12r5%wHa2>KyV#QF#w(7|6r!t)Pn;pG7seg4!oxV=&c43`Ej7(3*wwKF7w%7~
zlVKcVniyS0X1CXc3yqxzA#5uAKbC0bnKfSV*2YT6#>$YT7_fviAY-WW><Fheh0<F>
zRkhMokAxH8-#~eFn(M-w0YXd4=g>6MUZRZEmaorqu>0?akOo&H9@=Bj!^u#f!F9m*
zF}o<}r9!En$z3Bj6Q^o^69a_a37XTO#b>o0Bd#3^j*zB~=XMB$X5+p(r&ZPJ2ME%O
z_gN;Mc)Fn|!!h7Nh9iW${C&@)E<2O(LO5w)(W7Tz_ZDbC>N@W1*(VE*KSm)y#-6f^
z2BSuG;_&!>5Lb!<{h9o>-E>fZp*BxUPwN5I_KoqTw0N;aDo_>w{gY#$A=r@7>-q{B
zAgRsi?ICH^K#tsE8)-d`v@S`K3%F5Rghx{Gb;1$>H^%UsVAEmc=!lrYY4NV0!l48s
z8ICd-R<!_ajmZJ)br9l6>L7`|D$2@xm!FJMfu&$#Z%>$~{^-CGhAKvn5X#kSl7dfx
zu>;yr0Gac6q-|ey<0Ob(bo=`H1c@IT^5iPme!oe~0L^~|WB=Zlno1?`*yZf2ThYlj
z{JPgUr2HnC4{P&OFo?gNTVgbS{`Be55wqy5OZp`INd(Hl!9mb#3Is}m9IG#)x-L};
zr;fcwCyDQmZOoI?BtX0}ZI0!r6OxZd%S&`i_eT}`cPP`u9=*bIuz_CtV~Yl<V6*F8
zLmqk8*ijsl7mO`t2?iW|j%`P4yK<p*4U{+u&l-DBI=+YMU&Im|`L(%Pbwqq}pbAN~
z$_Gzv@1~yW&itdwQ8*Trm4TPPqUN2wYxZlSo*v2jY3Y+b2CiT)qV=lf*#`-#JIx(6
zJBeD=I=Y9V0~NmZ9`sIW^wcuo8yoE`-FcEVJ?^%1<@KSl>#nY@VvFFdl<l#*jK?<v
z;(3m9aTJ2j_n*AkYY7RyK-#HBhANJ#6RjyCo`>^|$53_7u0m}dP44DVyJeANwQE;#
zpm@0w8*mEKw&cNU8Yogba-cR06yvN$#l(}to0ZT^$rc+}T32H=DBh>sOt#2e$<4lh
zUvvpcRk=GWUKA|&!?PjReDk@I_n^w%J>M3`pNm;d6POXrAb1FW9~Eb1MweqS7+^V~
zM{2eK=j#=oh=S5Jc@vgp3>}$B=<Rb>`z9>@Wz$;#I{lH1^OU3&pk9CX-vxc)G6J4F
zoArkL2l5Tj@Zc>sRhdX>a6k=v@<8kgh44TDR0ox!OIXgbn%?FFu2sJRg(MqeQ8Ram
z2N}O66kgg(RX{T(hOY@3I%eL8fpOA8jRguG^-_(!2bIb{i(ko*T?u|hF#7i8ucx1P
zQ{g3g5Yvp-7C0P!KPRT47}ENrmwE%Vl@-QO<JW6}*uj{%MHE4cr5#d=n>+orY}6Ow
zbB|bS8!~7k^|h2;b1Ff<d{vzOgc6$?VU7WTWQGyipJ<pHRGXdAeDnnqry>+;ld?QK
z>|UmeW}f~yEmpla+n0SgDXG&<PA2kkQ2Y3VWnJY$A$-c@89{5#EF?fi4@*4+R)vQ@
zIC9Uuual{}*WTX#9o$mu_J({dx$bj2+gp*4T+N)PL4M>`I8!y<qsGZZ03W82JDB#t
zwd$2akiai6GKh9HoFITXd2--`YcE4xUwbA~&{wYCy;g#+Mu<PK9Db2+uLTdaT`-Y+
z=?{w>^6G;q>Tk`w4d!3WYJU2Sml~Z(zs29YUY3NRnvY^Sii2UZ>aknS+%+$84-tQP
zxiUr)sd;{Xf=V4^78QGkrpU3PChc^Xf!qMl9Sb6=HS?!C7^(n*0cYQ}@8XI~1tO>d
z`x62QY)2bw5b|)kY=6F1Qxd8z-3f9YpXI0Zfm0L}78aVj&@KEIG;d?NAG1{`!BxK_
zYfF<-mg}Aogmqn7GTs?slQ-d0Gafw2!up~z%ar946oSM4v6~g&vl{(NEuy9F3#;C{
zoq<0P^lk(E6+0%}^5&vTItpfa4uKeU?IyE5{&Pvv_TjGJUTL?K+B*~3ndeqcsi>+J
ztLTTdA+DrtWbPJb!E6P?+2INY$yNn@994bn@8~`|;0?mT>Sp153!M2o?oXp8ePHTt
zX_kVRgH`$HKxzx>7k_<PFqEu@egenVrr+uSp;_ayn9hsh{_9{VIdd;0)Kz=NYv{8H
zSZ*R(B^ks~gL>rsq)W22ey2fHdYP7&OGD0*EK7Hckk{X;Hy~$J6<ty3(PM_j&V`TN
zDlv~gM=Z$aq|+}WNaWO>{LwZ%=l$f6kR9u63@WY0TKjZW-ebFd<M%f#z-sHrxxqn7
zqi@b*_T{j_o?uL8lZw9miyWl~JJw`R3gN;TOeZg$wp(1vw~9=*%zQW(tb)dljWjUW
z4y*lc28_k(&m%%IdNmmW0_D)Ovh=V-o74tJ?uf}!NE!;w5b<4XX#fcW1>s1#gXEv3
zxG};PCyY3lcgB*wq-sRX9@C2b@<#^wIFC9FW~EBvGneXF`-Rq%2X3<tdZt8F^A)?w
zg<d2oCF4}cP9$>H5n`_f+}F^N`_dhn>jWh$ieM{I#4mqzJ=P$RE004G2n4Uh?OzuH
zRP>L7pdA(UEQ9s<G@=X9@uc*^xhrBB4y(O6sHe{E>a;Vf`G-Rx1AakTZkT2$c@mDj
zsb0LZHPbD;*yS6@&*?yb98A5W^2usZRn4VKn@-#joIBrMMp<ou`z%5Mx=ZJLR+_=-
z5D5D(?XyUrv|a}3oZCoOyNs~VnuYCf@3)B7N}n`)kRTeg%8{z|cRI-7aLAgj#UegJ
z&LE%U4tD^OHh;X$k2;ud`0`zjK7xAhET$9D1M)>_F}7l_;EWTV@A7pnf;^Q|<%~x9
ztfy47I_Y|3q^qZx2TX5(j_Co*#g0(-W7DgpS?iVFEvLDElJYBmf`M0#)AtK?N92Qi
zdIqsQX=nQ*?w3K75lsviIyvGjZ}jjx-L}+zRq;9ECC?&}_!*8}u=0@TTLjNqZ`*|Q
zstIk39-n&}Cc*jk%{S%h$`CP51bfO*rE75UxqqiF(}-qf&N7Icz_s==sFBzL78Rsk
udbfUt{FN*QLOI~Kh5u(y|F2vze_wO7@ksj*nKF>$1|02NY-_CpNdE)W2B(++

literal 0
HcmV?d00001

diff --git a/blueprints/openstatus/template.toml b/blueprints/openstatus/template.toml
new file mode 100644
index 000000000..594d0dd17
--- /dev/null
+++ b/blueprints/openstatus/template.toml
@@ -0,0 +1,34 @@
+[variables]
+dashboard_domain = "${domain}"
+status_page_domain = "${domain}"
+auth_secret = "${base64:32}"
+cron_secret = "${password:32}"
+super_admin_token = "${password:32}"
+
+[config]
+
+# Dashboard (admin UI — log in here)
+[[config.domains]]
+serviceName = "dashboard"
+port = 3000
+host = "${dashboard_domain}"
+
+# Public status pages (served at /<page-slug>)
+[[config.domains]]
+serviceName = "status-page"
+port = 3000
+host = "${status_page_domain}"
+
+[config.env]
+DASHBOARD_HOST = "${dashboard_domain}"
+STATUS_PAGE_HOST = "${status_page_domain}"
+AUTH_SECRET = "${auth_secret}"
+CRON_SECRET = "${cron_secret}"
+SUPER_ADMIN_TOKEN = "${super_admin_token}"
+# Optional: Resend API key for outgoing e-mails. Without it, magic-link
+# login URLs are printed to the dashboard container logs instead.
+RESEND_API_KEY = ""
+# Optional: Tinybird analytics for the private-location ingest server
+# (see instructions — analytics are disabled/no-op by default)
+TINYBIRD_URL = ""
+TINYBIRD_TOKEN = ""

From 77fd697d7dc07724551ccf1018f804a083e48018 Mon Sep 17 00:00:00 2001
From: Narciso <narciso.arias21@gmail.com>
Date: Tue, 29 Sep 2026 11:12:00 -0400
Subject: [PATCH 33/33] fix: resolve dependabot security alerts and fix
 templates for toml 4

Dependencies:
- app: react-router-dom ^7.18.0, vite ^6.4.3, yaml 2.8.3
- app (transitive, lockfile only): postcss 8.5.28, nanoid 3.3.19,
  picomatch 2.3.2/4.0.7, browserslist 4.29.2, rollup 4.63.5,
  @babel/core 7.29.7, @babel/runtime 7.29.7
- build-scripts: toml 4.2.0 (matches Dokploy/dokploy#5517), yaml 2.8.3

Templates rejected by toml 4's strict parsing (Dokploy fetches template.toml
from this repo at runtime, so they would fail there once #5517 ships):
- signoz, supabase: write invalid escape sequences (\{ \$ \( \s ...) as \\
  so the parsed value keeps the literal backslash exactly as toml 3 produced it
- timescaledb, valkey: drop `mounts = []` redefined by [[config.mounts]]

Parsed output is deep-equal to before under toml 3 for all 532 templates.
---
 app/package.json                     |   6 +-
 app/pnpm-lock.yaml                   | 622 +++++++++++++++------------
 blueprints/signoz/template.toml      |  12 +-
 blueprints/supabase/template.toml    |  10 +-
 blueprints/timescaledb/template.toml |   1 -
 blueprints/valkey/template.toml      |   1 -
 build-scripts/package-lock.json      |  26 +-
 build-scripts/package.json           |   4 +-
 build-scripts/pnpm-lock.yaml         |  23 +-
 9 files changed, 388 insertions(+), 317 deletions(-)

diff --git a/app/package.json b/app/package.json
index 26209757d..e4fa71591 100644
--- a/app/package.json
+++ b/app/package.json
@@ -35,13 +35,13 @@
     "next-themes": "^0.4.6",
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
-    "react-router-dom": "^7.9.4",
+    "react-router-dom": "^7.18.0",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.3.1",
     "tailwindcss": "^4.1.16",
     "tailwindcss-animate": "^1.0.7",
     "vite-plugin-static-copy": "^2.3.2",
-    "yaml": "2.7.1",
+    "yaml": "2.8.3",
     "zustand": "^5.0.8"
   },
   "devDependencies": {
@@ -51,6 +51,6 @@
     "@vitejs/plugin-react": "^4.7.0",
     "globals": "^15.15.0",
     "typescript": "~5.7.3",
-    "vite": "^6.4.1"
+    "vite": "^6.4.3"
   }
 }
diff --git a/app/pnpm-lock.yaml b/app/pnpm-lock.yaml
index 2d26f18e1..efebcaea7 100644
--- a/app/pnpm-lock.yaml
+++ b/app/pnpm-lock.yaml
@@ -49,13 +49,13 @@ importers:
         version: 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       '@tailwindcss/vite':
         specifier: ^4.1.16
-        version: 4.1.17(vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1))
+        version: 4.1.17(vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3))
       '@uiw/codemirror-theme-github':
         specifier: ^4.25.2
         version: 4.25.3(@codemirror/language@6.11.3)(@codemirror/state@6.5.2)(@codemirror/view@6.29.0)
       '@uiw/react-codemirror':
         specifier: ^4.25.2
-        version: 4.25.3(@babel/runtime@7.26.9)(@codemirror/autocomplete@6.19.1)(@codemirror/language@6.11.3)(@codemirror/lint@6.8.4)(@codemirror/search@6.5.10)(@codemirror/state@6.5.2)(@codemirror/theme-one-dark@6.1.2)(@codemirror/view@6.29.0)(codemirror@6.0.1)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
+        version: 4.25.3(@babel/runtime@7.29.7)(@codemirror/autocomplete@6.19.1)(@codemirror/language@6.11.3)(@codemirror/lint@6.8.4)(@codemirror/search@6.5.10)(@codemirror/state@6.5.2)(@codemirror/theme-one-dark@6.1.2)(@codemirror/view@6.29.0)(codemirror@6.0.1)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       class-variance-authority:
         specifier: ^0.7.1
         version: 0.7.1
@@ -81,8 +81,8 @@ importers:
         specifier: ^19.2.0
         version: 19.2.0(react@19.2.0)
       react-router-dom:
-        specifier: ^7.9.4
-        version: 7.9.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
+        specifier: ^7.18.0
+        version: 7.18.4(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       sonner:
         specifier: ^2.0.7
         version: 2.0.7(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
@@ -97,10 +97,10 @@ importers:
         version: 1.0.7(tailwindcss@4.1.17)
       vite-plugin-static-copy:
         specifier: ^2.3.2
-        version: 2.3.2(vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1))
+        version: 2.3.2(vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3))
       yaml:
-        specifier: 2.7.1
-        version: 2.7.1
+        specifier: 2.8.3
+        version: 2.8.3
       zustand:
         specifier: ^5.0.8
         version: 5.0.8(@types/react@19.2.4)(react@19.2.0)
@@ -116,7 +116,7 @@ importers:
         version: 19.2.3(@types/react@19.2.4)
       '@vitejs/plugin-react':
         specifier: ^4.7.0
-        version: 4.7.0(vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1))
+        version: 4.7.0(vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3))
       globals:
         specifier: ^15.15.0
         version: 15.15.0
@@ -124,41 +124,41 @@ importers:
         specifier: ~5.7.3
         version: 5.7.3
       vite:
-        specifier: ^6.4.1
-        version: 6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1)
+        specifier: ^6.4.3
+        version: 6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3)
 
 packages:
 
-  '@babel/code-frame@7.27.1':
-    resolution: {integrity: sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg==}
+  '@babel/code-frame@7.29.7':
+    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/compat-data@7.28.5':
-    resolution: {integrity: sha512-6uFXyCayocRbqhZOB+6XcuZbkMNimwfVGFji8CTZnCzOHVGvDqzvitu1re2AU5LROliz7eQPhB8CpAMvnx9EjA==}
+  '@babel/compat-data@7.29.7':
+    resolution: {integrity: sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/core@7.28.5':
-    resolution: {integrity: sha512-e7jT4DxYvIDLk1ZHmU/m/mB19rex9sv0c2ftBtjSBv+kVM/902eh0fINUzD7UwLLNR+jU585GxUJ8/EBfAM5fw==}
+  '@babel/core@7.29.7':
+    resolution: {integrity: sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/generator@7.28.5':
-    resolution: {integrity: sha512-3EwLFhZ38J4VyIP6WNtt2kUdW9dokXA9Cr4IVIFHuCpZ3H8/YFOl5JjZHisrn1fATPBmKKqXzDFvh9fUwHz6CQ==}
+  '@babel/generator@7.29.8':
+    resolution: {integrity: sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-compilation-targets@7.27.2':
-    resolution: {integrity: sha512-2+1thGUUWWjLTYTHZWK1n8Yga0ijBz1XAhUXcKy81rd5g6yh7hGqMp45v7cadSbEHc9G3OTv45SyneRN3ps4DQ==}
+  '@babel/helper-compilation-targets@7.29.7':
+    resolution: {integrity: sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-globals@7.28.0':
-    resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==}
+  '@babel/helper-globals@7.29.7':
+    resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-module-imports@7.27.1':
-    resolution: {integrity: sha512-0gSFWUPNXNopqtIPQvlD5WgXYI5GY2kP2cCvoT8kczjbfcfuIljTbcWrulD1CIPIX2gt1wghbDy08yE1p+/r3w==}
+  '@babel/helper-module-imports@7.29.7':
+    resolution: {integrity: sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-module-transforms@7.28.3':
-    resolution: {integrity: sha512-gytXUbs8k2sXS9PnQptz5o0QnpLL51SwASIORY6XaBKF88nsOT0Zw9szLqlSGQDP/4TljBAD5y98p2U1fqkdsw==}
+  '@babel/helper-module-transforms@7.29.7':
+    resolution: {integrity: sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
@@ -171,24 +171,24 @@ packages:
     resolution: {integrity: sha512-4A/SCr/2KLd5jrtOMFzaKjVtAei3+2r/NChoBNoZ3EyP/+GlhoaEGoWOZUmFmoITP7zOJyHIMm+DYRd8o3PvHA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-string-parser@7.27.1':
-    resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
+  '@babel/helper-string-parser@7.29.7':
+    resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
     engines: {node: '>=6.9.0'}
 
   '@babel/helper-validator-identifier@7.25.9':
     resolution: {integrity: sha512-Ed61U6XJc3CVRfkERJWDz4dJwKe7iLmmJsbOGu9wSloNSFttHV0I8g6UAgb7qnK5ly5bGLPd4oXZlxCdANBOWQ==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-validator-identifier@7.28.5':
-    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
+  '@babel/helper-validator-identifier@7.29.7':
+    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-validator-option@7.27.1':
-    resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==}
+  '@babel/helper-validator-option@7.29.7':
+    resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helpers@7.28.4':
-    resolution: {integrity: sha512-HFN59MmQXGHVyYadKLVumYsA9dBFun/ldYxipEjzA4196jpLZd8UjEEBLkbEkvfYreDqJhZxYAWFPtrfhNpj4w==}
+  '@babel/helpers@7.29.7':
+    resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
     engines: {node: '>=6.9.0'}
 
   '@babel/parser@7.26.9':
@@ -196,8 +196,8 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
-  '@babel/parser@7.28.5':
-    resolution: {integrity: sha512-KKBU1VGYR7ORr3At5HAtUQ+TV3SzRCXmA/8OdDZiLDBIZxVyzXuztPjfLd3BV1PRAQGCMWWSHYhL0F8d5uHBDQ==}
+  '@babel/parser@7.29.9':
+    resolution: {integrity: sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
@@ -213,24 +213,24 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
-  '@babel/runtime@7.26.9':
-    resolution: {integrity: sha512-aA63XwOkcl4xxQa3HjPMqOP6LiK0ZDv3mUPYEFXkpHbaFjtGggE1A61FjFzJnB+p7/oy2gA8E+rcBNl/zC1tMg==}
+  '@babel/runtime@7.29.7':
+    resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/template@7.27.2':
-    resolution: {integrity: sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==}
+  '@babel/template@7.29.7':
+    resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/traverse@7.28.5':
-    resolution: {integrity: sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ==}
+  '@babel/traverse@7.29.8':
+    resolution: {integrity: sha512-I5z7H3bf/41ktsNVLtpN0wAa336HkqIHQ5BuPLEhTkt1jVSyZpeNKIzTgEWmlxjdg81R0IgUCcaE+Ok3NvrfZg==}
     engines: {node: '>=6.9.0'}
 
   '@babel/types@7.26.9':
     resolution: {integrity: sha512-Y3IR1cRnOxOCDvMmNiym7XpXQ93iGDDPHx+Zj+NM+rg0fBaShfQLkg+hKPaZCEvg5N/LeCo4+Rj/i3FuJsIQaw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/types@7.28.5':
-    resolution: {integrity: sha512-qQ5m48eI/MFLQ5PxQj4PFaprjyCTLI37ElWMmNs0K8Lk3dVeOdNpB3ks8jc7yM5CDmVC73eMVk/trk3fgmrUpA==}
+  '@babel/types@7.29.8':
+    resolution: {integrity: sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==}
     engines: {node: '>=6.9.0'}
 
   '@codemirror/autocomplete@6.19.1':
@@ -485,6 +485,12 @@ packages:
   '@marijn/find-cluster-break@1.0.2':
     resolution: {integrity: sha512-l0h88YhZFyKdXIFNfSWpyjStDjGHwZ/U7iobcK1cQQD8sejsONdQtTVU+1wVN1PBw40PiiHB1vA5S7VTfQiP9g==}
 
+  '@napi-rs/lzma-linux-x64-gnu@1.5.1':
+    resolution: {integrity: sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ==}
+    engines: {node: ^22.20 || ^24.12 || >=25}
+    cpu: [x64]
+    os: [linux]
+
   '@nodelib/fs.scandir@2.1.5':
     resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
     engines: {node: '>= 8'}
@@ -1002,98 +1008,128 @@ packages:
   '@rolldown/pluginutils@1.0.0-beta.27':
     resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==}
 
-  '@rollup/rollup-android-arm-eabi@4.35.0':
-    resolution: {integrity: sha512-uYQ2WfPaqz5QtVgMxfN6NpLD+no0MYHDBywl7itPYd3K5TjjSghNKmX8ic9S8NU8w81NVhJv/XojcHptRly7qQ==}
+  '@rollup/rollup-android-arm-eabi@4.63.5':
+    resolution: {integrity: sha512-J25QJU+B78T4FhhBsNpLJyVWOi31mwtpcMwywHmOKH65Q9IWGA81gPj+dnwlhU8wktVriYE+tFAaQgrnJRzAZg==}
     cpu: [arm]
     os: [android]
 
-  '@rollup/rollup-android-arm64@4.35.0':
-    resolution: {integrity: sha512-FtKddj9XZudurLhdJnBl9fl6BwCJ3ky8riCXjEw3/UIbjmIY58ppWwPEvU3fNu+W7FUsAsB1CdH+7EQE6CXAPA==}
+  '@rollup/rollup-android-arm64@4.63.5':
+    resolution: {integrity: sha512-LDopB3zuZM5Ux9TT2luNEBJW/tYbGU2g1d+VpKk6I+gSKDb+/7sYE6M225gRQt4RbMX6MSwMsVR/phdjVUgRLg==}
     cpu: [arm64]
     os: [android]
 
-  '@rollup/rollup-darwin-arm64@4.35.0':
-    resolution: {integrity: sha512-Uk+GjOJR6CY844/q6r5DR/6lkPFOw0hjfOIzVx22THJXMxktXG6CbejseJFznU8vHcEBLpiXKY3/6xc+cBm65Q==}
+  '@rollup/rollup-darwin-arm64@4.63.5':
+    resolution: {integrity: sha512-wlJEERGfeuHeBavCL2qVnNacOK43NDoZM4sjkeRPymd04OAE9T1zBqDJgmZ+CIsPTYKwdzpUC8vmOw84dwY4Tg==}
     cpu: [arm64]
     os: [darwin]
 
-  '@rollup/rollup-darwin-x64@4.35.0':
-    resolution: {integrity: sha512-3IrHjfAS6Vkp+5bISNQnPogRAW5GAV1n+bNCrDwXmfMHbPl5EhTmWtfmwlJxFRUCBZ+tZ/OxDyU08aF6NI/N5Q==}
+  '@rollup/rollup-darwin-x64@4.63.5':
+    resolution: {integrity: sha512-4nJJGg5jbo2wwPP4JP+LfEBA3bvP8rU9CLuhp7jWvq9sxEyhjQFTFdrqi+/dHEin/pd8jpT0vcehIpnZtmEdcQ==}
     cpu: [x64]
     os: [darwin]
 
-  '@rollup/rollup-freebsd-arm64@4.35.0':
-    resolution: {integrity: sha512-sxjoD/6F9cDLSELuLNnY0fOrM9WA0KrM0vWm57XhrIMf5FGiN8D0l7fn+bpUeBSU7dCgPV2oX4zHAsAXyHFGcQ==}
+  '@rollup/rollup-freebsd-arm64@4.63.5':
+    resolution: {integrity: sha512-DrZbyCDF1hneuO6jRbvZ2D7+PIBM6yIwYnJpg2vIk58T+wuFpiaGZrfUr59lDWw45bg+IrpTGLPiNi/Fk4w3Cg==}
     cpu: [arm64]
     os: [freebsd]
 
-  '@rollup/rollup-freebsd-x64@4.35.0':
-    resolution: {integrity: sha512-2mpHCeRuD1u/2kruUiHSsnjWtHjqVbzhBkNVQ1aVD63CcexKVcQGwJ2g5VphOd84GvxfSvnnlEyBtQCE5hxVVw==}
+  '@rollup/rollup-freebsd-x64@4.63.5':
+    resolution: {integrity: sha512-gqfUVMJMB3mehqywxp6hTBFfgtMQykZY19+cfiaYP0toIJLb/1DZRJHVkQQGP13W4TAwfZDWeg1qBcheTRioXQ==}
     cpu: [x64]
     os: [freebsd]
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.35.0':
-    resolution: {integrity: sha512-mrA0v3QMy6ZSvEuLs0dMxcO2LnaCONs1Z73GUDBHWbY8tFFocM6yl7YyMu7rz4zS81NDSqhrUuolyZXGi8TEqg==}
+  '@rollup/rollup-linux-arm-gnueabihf@4.63.5':
+    resolution: {integrity: sha512-CFmhpvAwzSaWMlN3VN7UtmoTihlZNzoP0juQib5TQRnYUyDV8dXeWOp29sobWAT6gXl/hQgAClLlEiYozQG3OQ==}
     cpu: [arm]
     os: [linux]
 
-  '@rollup/rollup-linux-arm-musleabihf@4.35.0':
-    resolution: {integrity: sha512-DnYhhzcvTAKNexIql8pFajr0PiDGrIsBYPRvCKlA5ixSS3uwo/CWNZxB09jhIapEIg945KOzcYEAGGSmTSpk7A==}
+  '@rollup/rollup-linux-arm-musleabihf@4.63.5':
+    resolution: {integrity: sha512-Uc9H8eXCOayV6JLTH5bXKMId6qbhNHa818/BgYjm4jrlq3vZquC9cqyvHBw17xy5Mnj5f+I3gFK5JcEf3hSqrw==}
     cpu: [arm]
     os: [linux]
 
-  '@rollup/rollup-linux-arm64-gnu@4.35.0':
-    resolution: {integrity: sha512-uagpnH2M2g2b5iLsCTZ35CL1FgyuzzJQ8L9VtlJ+FckBXroTwNOaD0z0/UF+k5K3aNQjbm8LIVpxykUOQt1m/A==}
+  '@rollup/rollup-linux-arm64-gnu@4.63.5':
+    resolution: {integrity: sha512-VcPr/szv/1BFw112Kt//fxulXt/JPqzzidU84iW68L2DdjnOO8QFUv2zTSYBEPHD6movBD4z+bbr5y60GYM7Jw==}
     cpu: [arm64]
     os: [linux]
 
-  '@rollup/rollup-linux-arm64-musl@4.35.0':
-    resolution: {integrity: sha512-XQxVOCd6VJeHQA/7YcqyV0/88N6ysSVzRjJ9I9UA/xXpEsjvAgDTgH3wQYz5bmr7SPtVK2TsP2fQ2N9L4ukoUg==}
+  '@rollup/rollup-linux-arm64-musl@4.63.5':
+    resolution: {integrity: sha512-BnxtJ5/91BrIHYIkGrmjz/lbMhqEHt1dPFqIxIFR+jPn0xVc/oUSCtIT089zfp5ufwGDlYz2UC+Fe1SRBpYFbQ==}
     cpu: [arm64]
     os: [linux]
 
-  '@rollup/rollup-linux-loongarch64-gnu@4.35.0':
-    resolution: {integrity: sha512-5pMT5PzfgwcXEwOaSrqVsz/LvjDZt+vQ8RT/70yhPU06PTuq8WaHhfT1LW+cdD7mW6i/J5/XIkX/1tCAkh1W6g==}
+  '@rollup/rollup-linux-loong64-gnu@4.63.5':
+    resolution: {integrity: sha512-LrYcHZwF+fAMNKHYTOQ5osWM4AZF7YF6D+XtsjDyEvljtt11twc+zHVXBLNEjxVSUnKYsOhvVz4Z213eW02COQ==}
+    cpu: [loong64]
+    os: [linux]
+
+  '@rollup/rollup-linux-loong64-musl@4.63.5':
+    resolution: {integrity: sha512-nj7QKQePAAUpCpJHtg0pR0W/b92A9NO17JS3BAQmHDn/yhmkir2p8llrKY9TOhleKIaSzy1JhxS3T9FVld6coA==}
     cpu: [loong64]
     os: [linux]
 
-  '@rollup/rollup-linux-powerpc64le-gnu@4.35.0':
-    resolution: {integrity: sha512-c+zkcvbhbXF98f4CtEIP1EBA/lCic5xB0lToneZYvMeKu5Kamq3O8gqrxiYYLzlZH6E3Aq+TSW86E4ay8iD8EA==}
+  '@rollup/rollup-linux-ppc64-gnu@4.63.5':
+    resolution: {integrity: sha512-5ylkX6dWMeBKge9nTU+Rxfb+ZfaCIJ9lRqIFaK0eAMcWp7OJbYnLveLgXmm0VrvuLKb8qIK+mHyH0qu88RM+iA==}
     cpu: [ppc64]
     os: [linux]
 
-  '@rollup/rollup-linux-riscv64-gnu@4.35.0':
-    resolution: {integrity: sha512-s91fuAHdOwH/Tad2tzTtPX7UZyytHIRR6V4+2IGlV0Cej5rkG0R61SX4l4y9sh0JBibMiploZx3oHKPnQBKe4g==}
+  '@rollup/rollup-linux-ppc64-musl@4.63.5':
+    resolution: {integrity: sha512-oHK4ZHYFDKjZviK34I+NwgfbGxgI7ztrNxj2hPTSSNFgeq1a/lEd7dHV2fdGAuTH4Iym3RHJg+vAbWaWG4B7Zg==}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@rollup/rollup-linux-riscv64-gnu@4.63.5':
+    resolution: {integrity: sha512-UcetmHZ6XOXuUByiKZyQmb55ZPr0LABr3Ec/HB9wKZn6CEAFWZkE+hsJErJ9hbPBC7nI0dKuELx7CoV6IM7TMg==}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@rollup/rollup-linux-riscv64-musl@4.63.5':
+    resolution: {integrity: sha512-C5CmDPQBtvjVo8cgQsBs+w6WB0JLkiixhgi6hVLV11hERWdn/p0XcPU2OUcZzac9BPOFq7SbaHFa8r3SWEysCQ==}
     cpu: [riscv64]
     os: [linux]
 
-  '@rollup/rollup-linux-s390x-gnu@4.35.0':
-    resolution: {integrity: sha512-hQRkPQPLYJZYGP+Hj4fR9dDBMIM7zrzJDWFEMPdTnTy95Ljnv0/4w/ixFw3pTBMEuuEuoqtBINYND4M7ujcuQw==}
+  '@rollup/rollup-linux-s390x-gnu@4.63.5':
+    resolution: {integrity: sha512-lHVQHJFKsuuxLMi3MQO9XVL8Tje3JR82CzB+QDKC5NWBcsIWuwsn9uIM5e3lBhI+fF1/s63qnyYqsg65+8rV/w==}
     cpu: [s390x]
     os: [linux]
 
-  '@rollup/rollup-linux-x64-gnu@4.35.0':
-    resolution: {integrity: sha512-Pim1T8rXOri+0HmV4CdKSGrqcBWX0d1HoPnQ0uw0bdp1aP5SdQVNBy8LjYncvnLgu3fnnCt17xjWGd4cqh8/hA==}
+  '@rollup/rollup-linux-x64-gnu@4.63.5':
+    resolution: {integrity: sha512-3W9bTFcQNJn71cSJVM9RKIiZOy8DO/XLDii8Uv/Pm6WKqDRj7JV3ZfuXIEfyuy5LXpIzAbB/1M4Ukp9GKNa7nA==}
     cpu: [x64]
     os: [linux]
 
-  '@rollup/rollup-linux-x64-musl@4.35.0':
-    resolution: {integrity: sha512-QysqXzYiDvQWfUiTm8XmJNO2zm9yC9P/2Gkrwg2dH9cxotQzunBHYr6jk4SujCTqnfGxduOmQcI7c2ryuW8XVg==}
+  '@rollup/rollup-linux-x64-musl@4.63.5':
+    resolution: {integrity: sha512-VDC7rRJlee/scpki96GZ27Omf6yU87s1YXwVTpjE5841faVlDYYT565rgfmoR1U0sqL7z5ivQSDjcsF6VRXyBA==}
     cpu: [x64]
     os: [linux]
 
-  '@rollup/rollup-win32-arm64-msvc@4.35.0':
-    resolution: {integrity: sha512-OUOlGqPkVJCdJETKOCEf1mw848ZyJ5w50/rZ/3IBQVdLfR5jk/6Sr5m3iO2tdPgwo0x7VcncYuOvMhBWZq8ayg==}
+  '@rollup/rollup-openbsd-x64@4.63.5':
+    resolution: {integrity: sha512-z86Ok2p4pTdv5xqCKZsTooO7yBEiaJR/HzU3Wx8RmWsPoLppnMKROhJusQob8B3IE1ghC343kUW9rC2r+Wf3ig==}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@rollup/rollup-openharmony-arm64@4.63.5':
+    resolution: {integrity: sha512-IzQmj+xXwQFGhMAMKMQVXkMwMZN3TqkJgAE0nSsqvVwWWciP4AIPMmWRqOQ2GfX7TUDZr+xqGFcBS36CRPGw0g==}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@rollup/rollup-win32-arm64-msvc@4.63.5':
+    resolution: {integrity: sha512-F6qpTaPc9bwBH85kjy0/BLmLSW1uv7AoOXCoRIkg2arlgCYlWYcAbiMkvZuAcaWk9TpCRG//okznLAqLGshkMw==}
     cpu: [arm64]
     os: [win32]
 
-  '@rollup/rollup-win32-ia32-msvc@4.35.0':
-    resolution: {integrity: sha512-2/lsgejMrtwQe44glq7AFFHLfJBPafpsTa6JvP2NGef/ifOa4KBoglVf7AKN7EV9o32evBPRqfg96fEHzWo5kw==}
+  '@rollup/rollup-win32-ia32-msvc@4.63.5':
+    resolution: {integrity: sha512-igoDsTFhhwECBeGbUuLeIk7t8Y1apa+cs6mDWpx2EZ0ch7oEQgzHbFUXN9euoHekCAQzXdXApAGkV6jznS7tWw==}
     cpu: [ia32]
     os: [win32]
 
-  '@rollup/rollup-win32-x64-msvc@4.35.0':
-    resolution: {integrity: sha512-PIQeY5XDkrOysbQblSW7v3l1MDZzkTEzAfTPkj5VAu3FW8fS4ynyLg2sINp0fp3SjZ8xkRYpLqoKcYqAkhU1dw==}
+  '@rollup/rollup-win32-x64-gnu@4.63.5':
+    resolution: {integrity: sha512-U3teMeMbXFmaM5D+OTJpsOXd+wV/qftIeYF9kBKL4v73641qyJmoXFtA28DQLsnmlyayEsTe72xpLHrArq6vHw==}
+    cpu: [x64]
+    os: [win32]
+
+  '@rollup/rollup-win32-x64-msvc@4.63.5':
+    resolution: {integrity: sha512-ypfC34F3RKXvCXBglGqGMsUSMKlgwd1HX9AOAlx9RoZZ6GaI42YHVeKpzg3JG+wpBUJYTG+NNZhqbDWL8tBZkw==}
     cpu: [x64]
     os: [win32]
 
@@ -1199,8 +1235,8 @@ packages:
   '@types/babel__traverse@7.20.6':
     resolution: {integrity: sha512-r1bzfrm0tomOI8g1SzvCaQHo6Lcv6zu0EA+W2kHrt8dyrHQxGzBBL4kdkzIS+jBMV+EYcMAEAqXqYaLJq5rOZg==}
 
-  '@types/estree@1.0.6':
-    resolution: {integrity: sha512-AYnb1nQyY49te+VRAVgmzfcgjYS91mY5P0TKUDCLEM+gNnA+3T6rWITXRLYCpahpqSQbN5cE+gHpnPyXjHWxcw==}
+  '@types/estree@1.0.9':
+    resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==}
 
   '@types/node@20.19.25':
     resolution: {integrity: sha512-ZsJzA5thDQMSQO788d7IocwwQbI8B5OPzmqNvpf3NY/+MHDAS759Wo0gd2WQeXYt5AAAQjzcrTVC6SKCuYgoCQ==}
@@ -1259,6 +1295,11 @@ packages:
     resolution: {integrity: sha512-y+CcFFwelSXpLZk/7fMB2mUbGtX9lKycf1MWJ7CaTIERyitVlyQx6C+sxcROU2BAJ24OiZyK+8wj2i8AlBoS3A==}
     engines: {node: '>=10'}
 
+  baseline-browser-mapping@2.11.26:
+    resolution: {integrity: sha512-GLQdD3y6UF8iVuMJl5fHgE4jdn/ua7n+toKfLgNlg3BqQtOZjpy68T8Tup8/wGWZCDlm7KMg7tPb4MPn7oN0TQ==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
   binary-extensions@2.3.0:
     resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
     engines: {node: '>=8'}
@@ -1267,13 +1308,13 @@ packages:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
     engines: {node: '>=8'}
 
-  browserslist@4.24.4:
-    resolution: {integrity: sha512-KDi1Ny1gSePi1vm0q4oxSF8b4DR44GF4BbmS2YdhPLOEqd8pDviZOGH/GsmRwoWJ2+5Lr085X7naowMwKHDG1A==}
+  browserslist@4.29.2:
+    resolution: {integrity: sha512-/u9r8k8ue4ZhHCw9ovDtltpWdXeXzjhdxCGj6vm1RGLPXb8lu33EMdoCHF5Sx8oYBS+Q/FYYNmAqlHncxR3RmA==}
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
 
-  caniuse-lite@1.0.30001703:
-    resolution: {integrity: sha512-kRlAGTRWgPsOj7oARC9m1okJEXdL/8fekFVcxA8Hl7GH4r/sN4OJn/i6Flde373T50KS7Y37oFbMwlE8+F42kQ==}
+  caniuse-lite@1.0.30001813:
+    resolution: {integrity: sha512-zfjJo4rM0+fUomGDBW/xcDjhIwz/210DGvip2MAMDZ8KHcRPnOHmEgHPZP0UHlZoxr8fYKVJOqcORhYQcG4FKQ==}
 
   chokidar@3.6.0:
     resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
@@ -1327,8 +1368,8 @@ packages:
   detect-node-es@1.1.0:
     resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==}
 
-  electron-to-chromium@1.5.113:
-    resolution: {integrity: sha512-wjT2O4hX+wdWPJ76gWSkMhcHAV2PTMX+QetUCPYEdCIe+cxmgzzSSiGRCKW8nuh4mwKZlpv0xvoW7OF2X+wmHg==}
+  electron-to-chromium@1.5.440:
+    resolution: {integrity: sha512-SghDzqdJokdz8zP8YNlvS74+CwLRoUPDGvP/gFA+HrKVw+pOshUAgx8pXR37xl/u16zGae746rFNWvZ/22kU2Q==}
 
   enhanced-resolve@5.18.3:
     resolution: {integrity: sha512-d4lC8xfavMeBjzGr2vECC3fsGXziXZQyJxD868h2M/mBI3PwAuODxAkLkq5HYuvrPYcUtiLzsTo8U3PgX3Ocww==}
@@ -1519,8 +1560,8 @@ packages:
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
-  nanoid@3.3.9:
-    resolution: {integrity: sha512-SppoicMGpZvbF1l3z4x7No3OlIjP7QJvC9XR7AhZr1kL133KHnKPztkKDc+Ir4aJ/1VhTySrtKhrsycmrMQfvg==}
+  nanoid@3.3.19:
+    resolution: {integrity: sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
@@ -1530,8 +1571,9 @@ packages:
       react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
       react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
 
-  node-releases@2.0.19:
-    resolution: {integrity: sha512-xxOWJsBKtzAq7DY0J+DTzuz58K8e7sJbdgwkbMWQe8UYB6ekmsQ45q0M/tJDsGaZmbC+l7n57UV8Hl5tHxO9uw==}
+  node-releases@2.0.57:
+    resolution: {integrity: sha512-kQK9LGGFiHtrWiNhZtA7Qbw17AQz+dmsEKODRIVTXA9+e5MS/2gZEBhYJt13GrAz5/IOZKddH/0Z3TP/Zgo+yw==}
+    engines: {node: '>=18'}
 
   normalize-path@3.0.0:
     resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
@@ -1544,16 +1586,16 @@ packages:
   picocolors@1.1.1:
     resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
 
-  picomatch@2.3.1:
-    resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==}
+  picomatch@2.3.2:
+    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
     engines: {node: '>=8.6'}
 
-  picomatch@4.0.3:
-    resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
+  picomatch@4.0.7:
+    resolution: {integrity: sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==}
     engines: {node: '>=12'}
 
-  postcss@8.5.3:
-    resolution: {integrity: sha512-dle9A3yYxlBSrt8Fu+IpjGT8SY8hN0mlaA6GY8t0P5PjIOZemULz/E2Bnm/2dcUOena75OTNkHI76uZBNUUq3A==}
+  postcss@8.5.28:
+    resolution: {integrity: sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==}
     engines: {node: ^10 || ^12 || >=14}
 
   queue-microtask@1.2.3:
@@ -1598,15 +1640,15 @@ packages:
       '@types/react':
         optional: true
 
-  react-router-dom@7.9.6:
-    resolution: {integrity: sha512-2MkC2XSXq6HjGcihnx1s0DBWQETI4mlis4Ux7YTLvP67xnGxCvq+BcCQSO81qQHVUTM1V53tl4iVVaY5sReCOA==}
+  react-router-dom@7.18.4:
+    resolution: {integrity: sha512-yrfmJHIpDG7taCpqKjT1G5B6q3O2K+RN8/fgNf0lTjCwiPbQ0ei6vXX9ZjQR+7ld8Tr7Z5xmyMnZ8YJrphWQUw==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       react: '>=18'
       react-dom: '>=18'
 
-  react-router@7.9.6:
-    resolution: {integrity: sha512-Y1tUp8clYRXpfPITyuifmSoE2vncSME18uVLgaqyxh9H35JWpIfzHo+9y3Fzh5odk/jxPW29IgLgzcdwxGqyNA==}
+  react-router@7.18.4:
+    resolution: {integrity: sha512-PUPQcMhMGRAslLcvtlPz/kmzBEWPhLdgLFrL7pLNepBL6dX0lWj4WD2cUYVgYCuT3jxvghYFg81cDTj44DhetQ==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       react: '>=18'
@@ -1633,15 +1675,12 @@ packages:
     resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==}
     engines: {node: '>=8.10.0'}
 
-  regenerator-runtime@0.14.1:
-    resolution: {integrity: sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==}
-
   reusify@1.1.0:
     resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
     engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
 
-  rollup@4.35.0:
-    resolution: {integrity: sha512-kg6oI4g+vc41vePJyO6dHt/yl0Rz3Thv0kJeVQ3D1kS3E5XSuKbPc29G4IpT/Kv1KQwgHVcN+HtyS+HYLNSvQg==}
+  rollup@4.63.5:
+    resolution: {integrity: sha512-KRWwmNLlPw5M7HcdYfm15oBv9n9LPtjzpzCIxS/phwqvPyxHSoKX6Y2YU3pxSPfy0CLquVgsx/j/hBi6OvH1Nw==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
@@ -1712,8 +1751,8 @@ packages:
     resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
     engines: {node: '>= 10.0.0'}
 
-  update-browserslist-db@1.1.3:
-    resolution: {integrity: sha512-UxhIZQ+QInVdunkDAaiazvvT/+fXL5Osr0JZlJulepYu6Jd7qJtDZjlur0emRlT71EN3ScPoE7gvsuIKKNavKw==}
+  update-browserslist-db@1.3.3:
+    resolution: {integrity: sha512-pJ2sYawQS0R/WI928Gj5GlPhTGzbMelq0+4INtSYNDV9ErKJcX6xjGWkoG/VnB3dpUm00zALaqkrUD77pO5TDQ==}
     hasBin: true
     peerDependencies:
       browserslist: '>= 4.21.0'
@@ -1744,8 +1783,8 @@ packages:
     peerDependencies:
       vite: ^5.0.0 || ^6.0.0
 
-  vite@6.4.1:
-    resolution: {integrity: sha512-+Oxm7q9hDoLMyJOYfUYBuHQo+dkAloi33apOPP56pzj+vsdJDzr+j1NISE5pyaAuKL4A3UD34qd0lx5+kfKp2g==}
+  vite@6.4.3:
+    resolution: {integrity: sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==}
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
     hasBin: true
     peerDependencies:
@@ -1790,9 +1829,9 @@ packages:
   yallist@3.1.1:
     resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
 
-  yaml@2.7.1:
-    resolution: {integrity: sha512-10ULxpnOCQXxJvBgxsn9ptjq6uviG/htZKk9veJGhlqn3w/DxQ631zFF+nlQXLwmImeS5amR2dl2U8sg6U9jsQ==}
-    engines: {node: '>= 14'}
+  yaml@2.8.3:
+    resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==}
+    engines: {node: '>= 14.6'}
     hasBin: true
 
   zustand@5.0.8:
@@ -1815,25 +1854,25 @@ packages:
 
 snapshots:
 
-  '@babel/code-frame@7.27.1':
+  '@babel/code-frame@7.29.7':
     dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
-  '@babel/compat-data@7.28.5': {}
+  '@babel/compat-data@7.29.7': {}
 
-  '@babel/core@7.28.5':
+  '@babel/core@7.29.7':
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/generator': 7.28.5
-      '@babel/helper-compilation-targets': 7.27.2
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.28.5)
-      '@babel/helpers': 7.28.4
-      '@babel/parser': 7.28.5
-      '@babel/template': 7.27.2
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.8
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.7)
+      '@babel/helpers': 7.29.7
+      '@babel/parser': 7.29.9
+      '@babel/template': 7.29.7
+      '@babel/traverse': 7.29.8
+      '@babel/types': 7.29.8
       '@jridgewell/remapping': 2.3.5
       convert-source-map: 2.0.0
       debug: 4.4.0
@@ -1843,37 +1882,37 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/generator@7.28.5':
+  '@babel/generator@7.29.8':
     dependencies:
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/parser': 7.29.9
+      '@babel/types': 7.29.8
       '@jridgewell/gen-mapping': 0.3.13
       '@jridgewell/trace-mapping': 0.3.31
       jsesc: 3.1.0
 
-  '@babel/helper-compilation-targets@7.27.2':
+  '@babel/helper-compilation-targets@7.29.7':
     dependencies:
-      '@babel/compat-data': 7.28.5
-      '@babel/helper-validator-option': 7.27.1
-      browserslist: 4.24.4
+      '@babel/compat-data': 7.29.7
+      '@babel/helper-validator-option': 7.29.7
+      browserslist: 4.29.2
       lru-cache: 5.1.1
       semver: 6.3.1
 
-  '@babel/helper-globals@7.28.0': {}
+  '@babel/helper-globals@7.29.7': {}
 
-  '@babel/helper-module-imports@7.27.1':
+  '@babel/helper-module-imports@7.29.7':
     dependencies:
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/traverse': 7.29.8
+      '@babel/types': 7.29.8
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-module-transforms@7.28.3(@babel/core@7.28.5)':
+  '@babel/helper-module-transforms@7.29.7(@babel/core@7.29.7)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
-      '@babel/traverse': 7.28.5
+      '@babel/core': 7.29.7
+      '@babel/helper-module-imports': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+      '@babel/traverse': 7.29.8
     transitivePeerDependencies:
       - supports-color
 
@@ -1881,55 +1920,53 @@ snapshots:
 
   '@babel/helper-string-parser@7.25.9': {}
 
-  '@babel/helper-string-parser@7.27.1': {}
+  '@babel/helper-string-parser@7.29.7': {}
 
   '@babel/helper-validator-identifier@7.25.9': {}
 
-  '@babel/helper-validator-identifier@7.28.5': {}
+  '@babel/helper-validator-identifier@7.29.7': {}
 
-  '@babel/helper-validator-option@7.27.1': {}
+  '@babel/helper-validator-option@7.29.7': {}
 
-  '@babel/helpers@7.28.4':
+  '@babel/helpers@7.29.7':
     dependencies:
-      '@babel/template': 7.27.2
-      '@babel/types': 7.28.5
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.8
 
   '@babel/parser@7.26.9':
     dependencies:
       '@babel/types': 7.26.9
 
-  '@babel/parser@7.28.5':
+  '@babel/parser@7.29.9':
     dependencies:
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.8
 
-  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.7)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.7
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.7)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.7
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/runtime@7.26.9':
-    dependencies:
-      regenerator-runtime: 0.14.1
+  '@babel/runtime@7.29.7': {}
 
-  '@babel/template@7.27.2':
+  '@babel/template@7.29.7':
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/code-frame': 7.29.7
+      '@babel/parser': 7.29.9
+      '@babel/types': 7.29.8
 
-  '@babel/traverse@7.28.5':
+  '@babel/traverse@7.29.8':
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/generator': 7.28.5
-      '@babel/helper-globals': 7.28.0
-      '@babel/parser': 7.28.5
-      '@babel/template': 7.27.2
-      '@babel/types': 7.28.5
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.8
+      '@babel/helper-globals': 7.29.7
+      '@babel/parser': 7.29.9
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.8
       debug: 4.4.0
     transitivePeerDependencies:
       - supports-color
@@ -1939,10 +1976,10 @@ snapshots:
       '@babel/helper-string-parser': 7.25.9
       '@babel/helper-validator-identifier': 7.25.9
 
-  '@babel/types@7.28.5':
+  '@babel/types@7.29.8':
     dependencies:
-      '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-string-parser': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
 
   '@codemirror/autocomplete@6.19.1':
     dependencies:
@@ -2117,7 +2154,7 @@ snapshots:
 
   '@jridgewell/gen-mapping@0.3.13':
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.0
+      '@jridgewell/sourcemap-codec': 1.5.5
       '@jridgewell/trace-mapping': 0.3.31
 
   '@jridgewell/gen-mapping@0.3.8':
@@ -2147,7 +2184,7 @@ snapshots:
   '@jridgewell/trace-mapping@0.3.31':
     dependencies:
       '@jridgewell/resolve-uri': 3.1.2
-      '@jridgewell/sourcemap-codec': 1.5.0
+      '@jridgewell/sourcemap-codec': 1.5.5
 
   '@lezer/common@1.2.3': {}
 
@@ -2173,6 +2210,9 @@ snapshots:
 
   '@marijn/find-cluster-break@1.0.2': {}
 
+  '@napi-rs/lzma-linux-x64-gnu@1.5.1':
+    optional: true
+
   '@nodelib/fs.scandir@2.1.5':
     dependencies:
       '@nodelib/fs.stat': 2.0.5
@@ -2187,7 +2227,7 @@ snapshots:
 
   '@radix-ui/primitive@1.0.1':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
 
   '@radix-ui/primitive@1.1.3': {}
 
@@ -2214,7 +2254,7 @@ snapshots:
 
   '@radix-ui/react-compose-refs@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       react: 19.2.0
     optionalDependencies:
       '@types/react': 19.2.4
@@ -2227,7 +2267,7 @@ snapshots:
 
   '@radix-ui/react-context@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       react: 19.2.0
     optionalDependencies:
       '@types/react': 19.2.4
@@ -2240,7 +2280,7 @@ snapshots:
 
   '@radix-ui/react-dialog@1.0.5(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/primitive': 1.0.1
       '@radix-ui/react-compose-refs': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       '@radix-ui/react-context': 1.0.1(@types/react@19.2.4)(react@19.2.0)
@@ -2291,7 +2331,7 @@ snapshots:
 
   '@radix-ui/react-dismissable-layer@1.0.5(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/primitive': 1.0.1
       '@radix-ui/react-compose-refs': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       '@radix-ui/react-primitive': 1.0.3(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
@@ -2333,7 +2373,7 @@ snapshots:
 
   '@radix-ui/react-focus-guards@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       react: 19.2.0
     optionalDependencies:
       '@types/react': 19.2.4
@@ -2346,7 +2386,7 @@ snapshots:
 
   '@radix-ui/react-focus-scope@1.0.4(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-compose-refs': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       '@radix-ui/react-primitive': 1.0.3(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       '@radix-ui/react-use-callback-ref': 1.0.1(@types/react@19.2.4)(react@19.2.0)
@@ -2369,7 +2409,7 @@ snapshots:
 
   '@radix-ui/react-id@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-use-layout-effect': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       react: 19.2.0
     optionalDependencies:
@@ -2460,7 +2500,7 @@ snapshots:
 
   '@radix-ui/react-portal@1.0.4(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-primitive': 1.0.3(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       react: 19.2.0
       react-dom: 19.2.0(react@19.2.0)
@@ -2480,7 +2520,7 @@ snapshots:
 
   '@radix-ui/react-presence@1.0.1(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-compose-refs': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       '@radix-ui/react-use-layout-effect': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       react: 19.2.0
@@ -2501,7 +2541,7 @@ snapshots:
 
   '@radix-ui/react-primitive@1.0.3(@types/react-dom@19.2.3(@types/react@19.2.4))(@types/react@19.2.4)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-slot': 1.0.2(@types/react@19.2.4)(react@19.2.0)
       react: 19.2.0
       react-dom: 19.2.0(react@19.2.0)
@@ -2546,7 +2586,7 @@ snapshots:
 
   '@radix-ui/react-slot@1.0.2(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-compose-refs': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       react: 19.2.0
     optionalDependencies:
@@ -2584,7 +2624,7 @@ snapshots:
 
   '@radix-ui/react-use-callback-ref@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       react: 19.2.0
     optionalDependencies:
       '@types/react': 19.2.4
@@ -2597,7 +2637,7 @@ snapshots:
 
   '@radix-ui/react-use-controllable-state@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-use-callback-ref': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       react: 19.2.0
     optionalDependencies:
@@ -2620,7 +2660,7 @@ snapshots:
 
   '@radix-ui/react-use-escape-keydown@1.0.3(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@radix-ui/react-use-callback-ref': 1.0.1(@types/react@19.2.4)(react@19.2.0)
       react: 19.2.0
     optionalDependencies:
@@ -2635,7 +2675,7 @@ snapshots:
 
   '@radix-ui/react-use-layout-effect@1.0.1(@types/react@19.2.4)(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       react: 19.2.0
     optionalDependencies:
       '@types/react': 19.2.4
@@ -2664,61 +2704,79 @@ snapshots:
 
   '@rolldown/pluginutils@1.0.0-beta.27': {}
 
-  '@rollup/rollup-android-arm-eabi@4.35.0':
+  '@rollup/rollup-android-arm-eabi@4.63.5':
     optional: true
 
-  '@rollup/rollup-android-arm64@4.35.0':
+  '@rollup/rollup-android-arm64@4.63.5':
     optional: true
 
-  '@rollup/rollup-darwin-arm64@4.35.0':
+  '@rollup/rollup-darwin-arm64@4.63.5':
     optional: true
 
-  '@rollup/rollup-darwin-x64@4.35.0':
+  '@rollup/rollup-darwin-x64@4.63.5':
     optional: true
 
-  '@rollup/rollup-freebsd-arm64@4.35.0':
+  '@rollup/rollup-freebsd-arm64@4.63.5':
     optional: true
 
-  '@rollup/rollup-freebsd-x64@4.35.0':
+  '@rollup/rollup-freebsd-x64@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.35.0':
+  '@rollup/rollup-linux-arm-gnueabihf@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-arm-musleabihf@4.35.0':
+  '@rollup/rollup-linux-arm-musleabihf@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-arm64-gnu@4.35.0':
+  '@rollup/rollup-linux-arm64-gnu@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-arm64-musl@4.35.0':
+  '@rollup/rollup-linux-arm64-musl@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-loongarch64-gnu@4.35.0':
+  '@rollup/rollup-linux-loong64-gnu@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-powerpc64le-gnu@4.35.0':
+  '@rollup/rollup-linux-loong64-musl@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-riscv64-gnu@4.35.0':
+  '@rollup/rollup-linux-ppc64-gnu@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-s390x-gnu@4.35.0':
+  '@rollup/rollup-linux-ppc64-musl@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-x64-gnu@4.35.0':
+  '@rollup/rollup-linux-riscv64-gnu@4.63.5':
     optional: true
 
-  '@rollup/rollup-linux-x64-musl@4.35.0':
+  '@rollup/rollup-linux-riscv64-musl@4.63.5':
     optional: true
 
-  '@rollup/rollup-win32-arm64-msvc@4.35.0':
+  '@rollup/rollup-linux-s390x-gnu@4.63.5':
     optional: true
 
-  '@rollup/rollup-win32-ia32-msvc@4.35.0':
+  '@rollup/rollup-linux-x64-gnu@4.63.5':
     optional: true
 
-  '@rollup/rollup-win32-x64-msvc@4.35.0':
+  '@rollup/rollup-linux-x64-musl@4.63.5':
+    optional: true
+
+  '@rollup/rollup-openbsd-x64@4.63.5':
+    optional: true
+
+  '@rollup/rollup-openharmony-arm64@4.63.5':
+    optional: true
+
+  '@rollup/rollup-win32-arm64-msvc@4.63.5':
+    optional: true
+
+  '@rollup/rollup-win32-ia32-msvc@4.63.5':
+    optional: true
+
+  '@rollup/rollup-win32-x64-gnu@4.63.5':
+    optional: true
+
+  '@rollup/rollup-win32-x64-msvc@4.63.5':
     optional: true
 
   '@tailwindcss/node@4.1.17':
@@ -2782,12 +2840,12 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.1.17
       '@tailwindcss/oxide-win32-x64-msvc': 4.1.17
 
-  '@tailwindcss/vite@4.1.17(vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1))':
+  '@tailwindcss/vite@4.1.17(vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3))':
     dependencies:
       '@tailwindcss/node': 4.1.17
       '@tailwindcss/oxide': 4.1.17
       tailwindcss: 4.1.17
-      vite: 6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1)
+      vite: 6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3)
 
   '@types/babel__core@7.20.5':
     dependencies:
@@ -2810,7 +2868,7 @@ snapshots:
     dependencies:
       '@babel/types': 7.26.9
 
-  '@types/estree@1.0.6': {}
+  '@types/estree@1.0.9': {}
 
   '@types/node@20.19.25':
     dependencies:
@@ -2848,9 +2906,9 @@ snapshots:
       '@codemirror/state': 6.5.2
       '@codemirror/view': 6.29.0
 
-  '@uiw/react-codemirror@4.25.3(@babel/runtime@7.26.9)(@codemirror/autocomplete@6.19.1)(@codemirror/language@6.11.3)(@codemirror/lint@6.8.4)(@codemirror/search@6.5.10)(@codemirror/state@6.5.2)(@codemirror/theme-one-dark@6.1.2)(@codemirror/view@6.29.0)(codemirror@6.0.1)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
+  '@uiw/react-codemirror@4.25.3(@babel/runtime@7.29.7)(@codemirror/autocomplete@6.19.1)(@codemirror/language@6.11.3)(@codemirror/lint@6.8.4)(@codemirror/search@6.5.10)(@codemirror/state@6.5.2)(@codemirror/theme-one-dark@6.1.2)(@codemirror/view@6.29.0)(codemirror@6.0.1)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)':
     dependencies:
-      '@babel/runtime': 7.26.9
+      '@babel/runtime': 7.29.7
       '@codemirror/commands': 6.8.0
       '@codemirror/state': 6.5.2
       '@codemirror/theme-one-dark': 6.1.2
@@ -2865,41 +2923,44 @@ snapshots:
       - '@codemirror/lint'
       - '@codemirror/search'
 
-  '@vitejs/plugin-react@4.7.0(vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1))':
+  '@vitejs/plugin-react@4.7.0(vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3))':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.28.5)
+      '@babel/core': 7.29.7
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.7)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.7)
       '@rolldown/pluginutils': 1.0.0-beta.27
       '@types/babel__core': 7.20.5
       react-refresh: 0.17.0
-      vite: 6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1)
+      vite: 6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
   anymatch@3.1.3:
     dependencies:
       normalize-path: 3.0.0
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   aria-hidden@1.2.4:
     dependencies:
       tslib: 2.8.1
 
+  baseline-browser-mapping@2.11.26: {}
+
   binary-extensions@2.3.0: {}
 
   braces@3.0.3:
     dependencies:
       fill-range: 7.1.1
 
-  browserslist@4.24.4:
+  browserslist@4.29.2:
     dependencies:
-      caniuse-lite: 1.0.30001703
-      electron-to-chromium: 1.5.113
-      node-releases: 2.0.19
-      update-browserslist-db: 1.1.3(browserslist@4.24.4)
+      baseline-browser-mapping: 2.11.26
+      caniuse-lite: 1.0.30001813
+      electron-to-chromium: 1.5.440
+      node-releases: 2.0.57
+      update-browserslist-db: 1.3.3(browserslist@4.29.2)
 
-  caniuse-lite@1.0.30001703: {}
+  caniuse-lite@1.0.30001813: {}
 
   chokidar@3.6.0:
     dependencies:
@@ -2959,7 +3020,7 @@ snapshots:
 
   detect-node-es@1.1.0: {}
 
-  electron-to-chromium@1.5.113: {}
+  electron-to-chromium@1.5.440: {}
 
   enhanced-resolve@5.18.3:
     dependencies:
@@ -3008,9 +3069,9 @@ snapshots:
     dependencies:
       reusify: 1.1.0
 
-  fdir@6.5.0(picomatch@4.0.3):
+  fdir@6.5.0(picomatch@4.0.7):
     optionalDependencies:
-      picomatch: 4.0.3
+      picomatch: 4.0.7
 
   fill-range@7.1.1:
     dependencies:
@@ -3129,18 +3190,18 @@ snapshots:
   micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   ms@2.1.3: {}
 
-  nanoid@3.3.9: {}
+  nanoid@3.3.19: {}
 
   next-themes@0.4.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
     dependencies:
       react: 19.2.0
       react-dom: 19.2.0(react@19.2.0)
 
-  node-releases@2.0.19: {}
+  node-releases@2.0.57: {}
 
   normalize-path@3.0.0: {}
 
@@ -3148,13 +3209,13 @@ snapshots:
 
   picocolors@1.1.1: {}
 
-  picomatch@2.3.1: {}
+  picomatch@2.3.2: {}
 
-  picomatch@4.0.3: {}
+  picomatch@4.0.7: {}
 
-  postcss@8.5.3:
+  postcss@8.5.28:
     dependencies:
-      nanoid: 3.3.9
+      nanoid: 3.3.19
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
@@ -3197,13 +3258,13 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.2.4
 
-  react-router-dom@7.9.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
+  react-router-dom@7.18.4(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
     dependencies:
       react: 19.2.0
       react-dom: 19.2.0(react@19.2.0)
-      react-router: 7.9.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
+      react-router: 7.18.4(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
 
-  react-router@7.9.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
+  react-router@7.18.4(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
     dependencies:
       cookie: 1.0.2
       react: 19.2.0
@@ -3223,35 +3284,40 @@ snapshots:
 
   readdirp@3.6.0:
     dependencies:
-      picomatch: 2.3.1
-
-  regenerator-runtime@0.14.1: {}
+      picomatch: 2.3.2
 
   reusify@1.1.0: {}
 
-  rollup@4.35.0:
+  rollup@4.63.5:
     dependencies:
-      '@types/estree': 1.0.6
+      '@types/estree': 1.0.9
     optionalDependencies:
-      '@rollup/rollup-android-arm-eabi': 4.35.0
-      '@rollup/rollup-android-arm64': 4.35.0
-      '@rollup/rollup-darwin-arm64': 4.35.0
-      '@rollup/rollup-darwin-x64': 4.35.0
-      '@rollup/rollup-freebsd-arm64': 4.35.0
-      '@rollup/rollup-freebsd-x64': 4.35.0
-      '@rollup/rollup-linux-arm-gnueabihf': 4.35.0
-      '@rollup/rollup-linux-arm-musleabihf': 4.35.0
-      '@rollup/rollup-linux-arm64-gnu': 4.35.0
-      '@rollup/rollup-linux-arm64-musl': 4.35.0
-      '@rollup/rollup-linux-loongarch64-gnu': 4.35.0
-      '@rollup/rollup-linux-powerpc64le-gnu': 4.35.0
-      '@rollup/rollup-linux-riscv64-gnu': 4.35.0
-      '@rollup/rollup-linux-s390x-gnu': 4.35.0
-      '@rollup/rollup-linux-x64-gnu': 4.35.0
-      '@rollup/rollup-linux-x64-musl': 4.35.0
-      '@rollup/rollup-win32-arm64-msvc': 4.35.0
-      '@rollup/rollup-win32-ia32-msvc': 4.35.0
-      '@rollup/rollup-win32-x64-msvc': 4.35.0
+      '@napi-rs/lzma-linux-x64-gnu': 1.5.1
+      '@rollup/rollup-android-arm-eabi': 4.63.5
+      '@rollup/rollup-android-arm64': 4.63.5
+      '@rollup/rollup-darwin-arm64': 4.63.5
+      '@rollup/rollup-darwin-x64': 4.63.5
+      '@rollup/rollup-freebsd-arm64': 4.63.5
+      '@rollup/rollup-freebsd-x64': 4.63.5
+      '@rollup/rollup-linux-arm-gnueabihf': 4.63.5
+      '@rollup/rollup-linux-arm-musleabihf': 4.63.5
+      '@rollup/rollup-linux-arm64-gnu': 4.63.5
+      '@rollup/rollup-linux-arm64-musl': 4.63.5
+      '@rollup/rollup-linux-loong64-gnu': 4.63.5
+      '@rollup/rollup-linux-loong64-musl': 4.63.5
+      '@rollup/rollup-linux-ppc64-gnu': 4.63.5
+      '@rollup/rollup-linux-ppc64-musl': 4.63.5
+      '@rollup/rollup-linux-riscv64-gnu': 4.63.5
+      '@rollup/rollup-linux-riscv64-musl': 4.63.5
+      '@rollup/rollup-linux-s390x-gnu': 4.63.5
+      '@rollup/rollup-linux-x64-gnu': 4.63.5
+      '@rollup/rollup-linux-x64-musl': 4.63.5
+      '@rollup/rollup-openbsd-x64': 4.63.5
+      '@rollup/rollup-openharmony-arm64': 4.63.5
+      '@rollup/rollup-win32-arm64-msvc': 4.63.5
+      '@rollup/rollup-win32-ia32-msvc': 4.63.5
+      '@rollup/rollup-win32-x64-gnu': 4.63.5
+      '@rollup/rollup-win32-x64-msvc': 4.63.5
       fsevents: 2.3.3
 
   run-parallel@1.2.0:
@@ -3285,8 +3351,8 @@ snapshots:
 
   tinyglobby@0.2.15:
     dependencies:
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.7)
+      picomatch: 4.0.7
 
   to-regex-range@5.0.1:
     dependencies:
@@ -3302,9 +3368,9 @@ snapshots:
 
   universalify@2.0.1: {}
 
-  update-browserslist-db@1.1.3(browserslist@4.24.4):
+  update-browserslist-db@1.3.3(browserslist@4.29.2):
     dependencies:
-      browserslist: 4.24.4
+      browserslist: 4.29.2
       escalade: 3.2.0
       picocolors: 1.1.1
 
@@ -3323,35 +3389,35 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.2.4
 
-  vite-plugin-static-copy@2.3.2(vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1)):
+  vite-plugin-static-copy@2.3.2(vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3)):
     dependencies:
       chokidar: 3.6.0
       fast-glob: 3.3.3
       fs-extra: 11.3.0
       p-map: 7.0.3
       picocolors: 1.1.1
-      vite: 6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1)
+      vite: 6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3)
 
-  vite@6.4.1(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.7.1):
+  vite@6.4.3(@types/node@20.19.25)(jiti@2.6.1)(lightningcss@1.30.2)(yaml@2.8.3):
     dependencies:
       esbuild: 0.25.1
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
-      postcss: 8.5.3
-      rollup: 4.35.0
+      fdir: 6.5.0(picomatch@4.0.7)
+      picomatch: 4.0.7
+      postcss: 8.5.28
+      rollup: 4.63.5
       tinyglobby: 0.2.15
     optionalDependencies:
       '@types/node': 20.19.25
       fsevents: 2.3.3
       jiti: 2.6.1
       lightningcss: 1.30.2
-      yaml: 2.7.1
+      yaml: 2.8.3
 
   w3c-keyname@2.2.8: {}
 
   yallist@3.1.1: {}
 
-  yaml@2.7.1: {}
+  yaml@2.8.3: {}
 
   zustand@5.0.8(@types/react@19.2.4)(react@19.2.0):
     optionalDependencies:
diff --git a/blueprints/signoz/template.toml b/blueprints/signoz/template.toml
index 98839a942..39a72af04 100644
--- a/blueprints/signoz/template.toml
+++ b/blueprints/signoz/template.toml
@@ -472,7 +472,7 @@ content = """
                 <my_ad_server>
                     <host>localhost</host>
                     <port>389</port>
-                    <bind_dn>EXAMPLE\{user_name}</bind_dn>
+                    <bind_dn>EXAMPLE\\{user_name}</bind_dn>
                     <user_dn_detection>
                         <base_dn>CN=Users,DC=example,DC=com</base_dn>
                         <search_filter>(&amp;(objectClass=user)(sAMAccountName={user_name}))</search_filter>
@@ -624,14 +624,14 @@ content = """
          To install and run JDBC bridge in background:
          * [Debian/Ubuntu]
            export MVN_URL=https://repo1.maven.org/maven2/ru/yandex/clickhouse/clickhouse-jdbc-bridge
-           export PKG_VER=$(curl -sL $MVN_URL/maven-metadata.xml | grep '<release>' | sed -e 's|.*>\(.*\)<.*|\1|')
+           export PKG_VER=$(curl -sL $MVN_URL/maven-metadata.xml | grep '<release>' | sed -e 's|.*>\\(.*\\)<.*|\\1|')
            wget https://github.com/ClickHouse/clickhouse-jdbc-bridge/releases/download/v$PKG_VER/clickhouse-jdbc-bridge_$PKG_VER-1_all.deb
            apt install --no-install-recommends -f ./clickhouse-jdbc-bridge_$PKG_VER-1_all.deb
            clickhouse-jdbc-bridge &
 
          * [CentOS/RHEL]
            export MVN_URL=https://repo1.maven.org/maven2/ru/yandex/clickhouse/clickhouse-jdbc-bridge
-           export PKG_VER=$(curl -sL $MVN_URL/maven-metadata.xml | grep '<release>' | sed -e 's|.*>\(.*\)<.*|\1|')
+           export PKG_VER=$(curl -sL $MVN_URL/maven-metadata.xml | grep '<release>' | sed -e 's|.*>\\(.*\\)<.*|\\1|')
            wget https://github.com/ClickHouse/clickhouse-jdbc-bridge/releases/download/v$PKG_VER/clickhouse-jdbc-bridge-$PKG_VER-1.noarch.rpm
            yum localinstall -y clickhouse-jdbc-bridge-$PKG_VER-1.noarch.rpm
            clickhouse-jdbc-bridge &
@@ -1068,11 +1068,11 @@ content = """
     <query_masking_rules>
         <rule>
             <name>hide encrypt/decrypt arguments</name>
-            <regexp>((?:aes_)?(?:encrypt|decrypt)(?:_mysql)?)\s*\(\s*(?:'(?:\\'|.)+'|.*?)\s*\)</regexp>
+            <regexp>((?:aes_)?(?:encrypt|decrypt)(?:_mysql)?)\\s*\\(\\s*(?:'(?:\\'|.)+'|.*?)\\s*\\)</regexp>
             <!-- or more secure, but also more invasive:
-                (aes_\w+)\s*\(.*\)
+                (aes_\\w+)\\s*\\(.*\\)
             -->
-            <replace>\1(???)</replace>
+            <replace>\\1(???)</replace>
         </rule>
     </query_masking_rules>
 
diff --git a/blueprints/supabase/template.toml b/blueprints/supabase/template.toml
index ea4d243fe..e6c1cb308 100644
--- a/blueprints/supabase/template.toml
+++ b/blueprints/supabase/template.toml
@@ -213,17 +213,17 @@ content = """#!/bin/bash
 # and performs environment variable substitution in the declarative config.
 
 if [ -n "$SUPABASE_SECRET_KEY" ] && [ -n "$SUPABASE_PUBLISHABLE_KEY" ]; then
-    export LUA_AUTH_EXPR="\$((headers.authorization ~= nil and headers.authorization:sub(1, 10) ~= 'Bearer sb_' and headers.authorization) or (headers.apikey == '$SUPABASE_SECRET_KEY' and 'Bearer $SERVICE_ROLE_KEY_ASYMMETRIC') or (headers.apikey == '$SUPABASE_PUBLISHABLE_KEY' and 'Bearer $ANON_KEY_ASYMMETRIC') or headers.apikey)"
-    export LUA_RT_WS_EXPR="\$((query_params.apikey == '$SUPABASE_SECRET_KEY' and '$SERVICE_ROLE_KEY_ASYMMETRIC') or (query_params.apikey == '$SUPABASE_PUBLISHABLE_KEY' and '$ANON_KEY_ASYMMETRIC') or query_params.apikey)"
+    export LUA_AUTH_EXPR="\\$((headers.authorization ~= nil and headers.authorization:sub(1, 10) ~= 'Bearer sb_' and headers.authorization) or (headers.apikey == '$SUPABASE_SECRET_KEY' and 'Bearer $SERVICE_ROLE_KEY_ASYMMETRIC') or (headers.apikey == '$SUPABASE_PUBLISHABLE_KEY' and 'Bearer $ANON_KEY_ASYMMETRIC') or headers.apikey)"
+    export LUA_RT_WS_EXPR="\\$((query_params.apikey == '$SUPABASE_SECRET_KEY' and '$SERVICE_ROLE_KEY_ASYMMETRIC') or (query_params.apikey == '$SUPABASE_PUBLISHABLE_KEY' and '$ANON_KEY_ASYMMETRIC') or query_params.apikey)"
 else
-    export LUA_AUTH_EXPR="\$((headers.authorization ~= nil and headers.authorization:sub(1, 10) ~= 'Bearer sb_' and headers.authorization) or headers.apikey)"
-    export LUA_RT_WS_EXPR="\$(query_params.apikey)"
+    export LUA_AUTH_EXPR="\\$((headers.authorization ~= nil and headers.authorization:sub(1, 10) ~= 'Bearer sb_' and headers.authorization) or headers.apikey)"
+    export LUA_RT_WS_EXPR="\\$(query_params.apikey)"
 fi
 
 awk '{
   result = ""
   rest = $0
-  while (match(rest, /\$[A-Za-z_][A-Za-z_0-9]*/)) {
+  while (match(rest, /\\$[A-Za-z_][A-Za-z_0-9]*/)) {
     varname = substr(rest, RSTART + 1, RLENGTH - 1)
     if (varname in ENVIRON) {
       result = result substr(rest, 1, RSTART - 1) ENVIRON[varname]
diff --git a/blueprints/timescaledb/template.toml b/blueprints/timescaledb/template.toml
index 7ebe8fc3d..b8ad7c6ad 100644
--- a/blueprints/timescaledb/template.toml
+++ b/blueprints/timescaledb/template.toml
@@ -5,7 +5,6 @@ postgres_db = "timescaledb"
 timescaledb_telemetry = "off"
 
 [config]
-mounts = []
 
 [config.env]
 POSTGRES_USER = "${postgres_user}"
diff --git a/blueprints/valkey/template.toml b/blueprints/valkey/template.toml
index 2d5af5753..86b315714 100644
--- a/blueprints/valkey/template.toml
+++ b/blueprints/valkey/template.toml
@@ -5,7 +5,6 @@ valkey_password = "${password:32}"
 env = [
   "VALKEY_PASSWORD=${valkey_password}"
 ]
-mounts = []
 
 [[config.mounts]]
 filePath = "valkey.conf"
diff --git a/build-scripts/package-lock.json b/build-scripts/package-lock.json
index bb11b4e01..74ffc3b89 100644
--- a/build-scripts/package-lock.json
+++ b/build-scripts/package-lock.json
@@ -8,8 +8,8 @@
       "name": "dokploy-templates-build-scripts",
       "version": "1.0.0",
       "dependencies": {
-        "toml": "^3.0.0",
-        "yaml": "2.7.1"
+        "toml": "4.2.0",
+        "yaml": "2.8.3"
       },
       "devDependencies": {
         "@types/node": "^20.0.0",
@@ -553,10 +553,13 @@
       }
     },
     "node_modules/toml": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/toml/-/toml-3.0.0.tgz",
-      "integrity": "sha512-y/mWCZinnvxjTKYhJ+pYxwD0mRLVvOtdS2Awbgxln6iEnt4rk0yBxeSBHkGJcPucRiG0e55mwWp+g/05rsrd6w==",
-      "license": "MIT"
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/toml/-/toml-4.2.0.tgz",
+      "integrity": "sha512-TvAJjbHZlYmI323+srtqHQFyJsoWy6mI09ppkuj9+iRsqsVKG9fvTcOP7FHF2UCb0QSYtjEavffrKzdd0XgClg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      }
     },
     "node_modules/tsx": {
       "version": "4.21.0",
@@ -600,15 +603,18 @@
       "license": "MIT"
     },
     "node_modules/yaml": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.7.1.tgz",
-      "integrity": "sha512-10ULxpnOCQXxJvBgxsn9ptjq6uviG/htZKk9veJGhlqn3w/DxQ631zFF+nlQXLwmImeS5amR2dl2U8sg6U9jsQ==",
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
       }
     }
   }
diff --git a/build-scripts/package.json b/build-scripts/package.json
index 6df162f82..dc3d9044c 100644
--- a/build-scripts/package.json
+++ b/build-scripts/package.json
@@ -9,8 +9,8 @@
     "process-meta": "node process-meta.js"
   },
   "dependencies": {
-    "toml": "^3.0.0",
-    "yaml": "2.7.1"
+    "toml": "4.2.0",
+    "yaml": "2.8.3"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",
diff --git a/build-scripts/pnpm-lock.yaml b/build-scripts/pnpm-lock.yaml
index daa7c9056..cbe77d21e 100644
--- a/build-scripts/pnpm-lock.yaml
+++ b/build-scripts/pnpm-lock.yaml
@@ -9,11 +9,11 @@ importers:
   .:
     dependencies:
       toml:
-        specifier: ^3.0.0
-        version: 3.0.0
+        specifier: 4.2.0
+        version: 4.2.0
       yaml:
-        specifier: 2.7.1
-        version: 2.7.1
+        specifier: 2.8.3
+        version: 2.8.3
     devDependencies:
       '@types/node':
         specifier: ^20.0.0
@@ -202,8 +202,9 @@ packages:
   resolve-pkg-maps@1.0.0:
     resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==}
 
-  toml@3.0.0:
-    resolution: {integrity: sha512-y/mWCZinnvxjTKYhJ+pYxwD0mRLVvOtdS2Awbgxln6iEnt4rk0yBxeSBHkGJcPucRiG0e55mwWp+g/05rsrd6w==}
+  toml@4.2.0:
+    resolution: {integrity: sha512-TvAJjbHZlYmI323+srtqHQFyJsoWy6mI09ppkuj9+iRsqsVKG9fvTcOP7FHF2UCb0QSYtjEavffrKzdd0XgClg==}
+    engines: {node: '>=20'}
 
   tsx@4.21.0:
     resolution: {integrity: sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw==}
@@ -218,9 +219,9 @@ packages:
   undici-types@6.21.0:
     resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
 
-  yaml@2.7.1:
-    resolution: {integrity: sha512-10ULxpnOCQXxJvBgxsn9ptjq6uviG/htZKk9veJGhlqn3w/DxQ631zFF+nlQXLwmImeS5amR2dl2U8sg6U9jsQ==}
-    engines: {node: '>= 14'}
+  yaml@2.8.3:
+    resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==}
+    engines: {node: '>= 14.6'}
     hasBin: true
 
 snapshots:
@@ -345,7 +346,7 @@ snapshots:
 
   resolve-pkg-maps@1.0.0: {}
 
-  toml@3.0.0: {}
+  toml@4.2.0: {}
 
   tsx@4.21.0:
     dependencies:
@@ -358,4 +359,4 @@ snapshots:
 
   undici-types@6.21.0: {}
 
-  yaml@2.7.1: {}
+  yaml@2.8.3: {}