# --- monitor (Flatcar) ---
# The hub and agents share the TLS pair baked into the image, so this must
# match the agent tag on ai, oswald_runner, oswl_connector and the TrueNAS hosts.
DOZZLE_IMAGE=amir20/dozzle:v11.3.5
ALERTA_IMAGE=alerta/alerta-web:9.1.0

# --- ai (Flatcar) ---
GITEA_MCP_IMAGE=docker.gitea.com/gitea-mcp-server:1.11.0
LITELLM_IMAGE=docker.litellm.ai/berriai/litellm:v1.106.4
QDRANT_IMAGE=qdrant/qdrant:v1.20.0
OPEN_TERMINAL_IMAGE=ghcr.io/open-webui/open-terminal:0.14.5
OPEN_WEBUI_IMAGE=ghcr.io/open-webui/open-webui:v0.12.4
OPENCODE_IMAGE=ghcr.io/anomalyco/opencode:2.2.3

# --- oswald_runner (Flatcar) ---
GITEA_RUNNER_IMAGE=docker.io/gitea/runner:3.5.0
N8N_IMAGE=docker.n8n.io/n8nio/n8n:2.40.5
CISA_KEV_RSS_IMAGE=ghcr.io/xsaveopt/cisa-kev-rss:0.0.5
DOMAIN_WATCHDOG_IMAGE=maelgangloff/domain-watchdog:v1.4.6
# Major must match POSTGRES_VERSION in domain-watchdog's .env (used in DATABASE_URL).
DOMAIN_WATCHDOG_POSTGRES_IMAGE=postgres:16.15-alpine
DOMAIN_WATCHDOG_VALKEY_IMAGE=valkey/valkey:9.1.2
# Domain Watchdog here shares DOMAIN_WATCHDOG_IMAGE and
# DOMAIN_WATCHDOG_VALKEY_IMAGE with the compose deployment.

# --- oswl_connector (Flatcar) ---
TAILSCALE_IMAGE=docker.io/tailscale/tailscale:v1.104.2

# --- utility (Flatcar) ---
# cturra/ntp only publishes "latest", so it is pinned by digest (2025-11-30 build).
NTP_IMAGE=cturra/ntp@sha256:7224d4e7c7833aabbcb7dd70c46c8a8dcccda365314c6db047b9b10403ace3bc
APT_CACHER_NG_IMAGE=mbentley/apt-cacher-ng:trixie-20261026
REGISTRY_CACHE_IMAGE=registry:3.1.2

# --- phpipam (Flatcar) ---
PHPIPAM_WWW_IMAGE=phpipam/phpipam-www:v1.8.3
PHPIPAM_CRON_IMAGE=phpipam/phpipam-cron:v1.8.3