docker-compose/act-runner/docker-compose.yml.j2

@@ -5,6 +5,7 @@ services:
     container_name: act-runner
     image: gitea/act_runner
     restart: always
+    pull_policy: missing
     volumes:
       - act_runner_data:/data
       - ./config.yml:/config.yml

docker-compose/gramps/docker-compose.yml.j2

@@ -4,6 +4,7 @@ services:
     container_name: grampsweb
     image: ghcr.io/gramps-project/grampsweb:v24.8.0  # version
     restart: always
+    pull_policy: missing
     ports:
       - "6483:5000"  # host:docker
     environment:
@@ -45,6 +46,7 @@ services:
     image: redis:7.4.1-alpine
     container_name: grampsweb_redis
     restart: always
+    pull_policy: missing
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 30s

docker-compose/httpd/docker-compose.yml.j2

@@ -3,6 +3,7 @@ services:
     container_name: "httpd-registry"
     image: "registry.mgrote.net/httpd:latest"
     restart: always
+    pull_policy: missing
     volumes:
       - uploads:/usr/local/apache2/htdocs/
       - "{{ compose_dest_basedir }}/httpd/httpd.conf:/usr/local/apache2/conf/httpd.conf:ro"
@@ -13,6 +14,7 @@ services:
     container_name: httpd-api
     image: "registry.mgrote.net/python-api-server:latest"
     restart: always
+    pull_policy: missing
     ports:
       - "5040:5000"
     volumes:

docker-compose/miniflux/docker-compose.yml.j2

@@ -4,6 +4,7 @@ services:
     container_name: "mf-frontend"
     image: "ghcr.io/miniflux/miniflux:2.2.0"
     restart: always
+    pull_policy: missing
     depends_on:
       - mf-db17
     environment:
@@ -35,6 +36,7 @@ services:
     container_name: "mf-db"
     image: "postgres:17.0"
     restart: always
+    pull_policy: missing
     environment:
       POSTGRES_USER: miniflux
       POSTGRES_PASSWORD: "{{ lookup('viczem.keepass.keepass', 'miniflux_postgres_password', 'password') }}"
@@ -55,6 +57,7 @@ services:
     depends_on:
       - miniflux
     restart: always
+    pull_policy: missing
     environment:
       TZ: Europe/Berlin
       MF_AUTH_TOKEN: "{{ lookup('viczem.keepass.keepass', 'miniflux_auth_token', 'password') }}"

docker-compose/navidrome/docker-compose.yml.j2

@@ -4,6 +4,7 @@ services:
     container_name: "navidrome-mg"
     image: "deluan/navidrome:0.53.3"
     restart: always
+    pull_policy: missing
     environment:
       ND_LOGLEVEL: info
       ND_SESSIONTIMEOUT: 24h

docker-compose/nextcloud/docker-compose.yml.j2

@@ -4,7 +4,8 @@ services:
     image: "mariadb:11.5.2"
     container_name: nextcloud-db
     command: --transaction-isolation=READ-COMMITTED --log-bin=ROW --innodb_read_only_compressed=OFF
-    restart: unless-stopped
+    restart: always
+    pull_policy: missing
     volumes:
       - /etc/localtime:/etc/localtime:ro
       - /etc/timezone:/etc/timezone:ro
@@ -43,7 +44,8 @@ services:
     hostname: nextcloud-redis
     networks:
       - intern
-    restart: unless-stopped
+    restart: always
+    pull_policy: missing
     command: "redis-server --requirepass {{ lookup('viczem.keepass.keepass', 'nextcloud_redis_host_password', 'password') }}"
     healthcheck:
       test: ["CMD", "redis-cli", "--pass", "{{ lookup('viczem.keepass.keepass', 'nextcloud_redis_host_password', 'password') }}", "--no-auth-warning", "ping"]
@@ -55,7 +57,8 @@ services:
   nextcloud-cron:
     container_name: nextcloud-cron
     image: "registry.mgrote.net/nextcloud-cronjob:latest"
-    restart: unless-stopped
+    restart: always
+    pull_policy: missing
     network_mode: none
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -68,7 +71,8 @@ services:
   nextcloud-app:
     image: "nextcloud:30.0.1"
     container_name: nextcloud-app
-    restart: unless-stopped
+    restart: always
+    pull_policy: missing
     depends_on:
       - nextcloud-db
       - nextcloud-redis

docker-compose/postfix/docker-compose.yml.j2

@@ -3,6 +3,7 @@ services:
     image: "registry.mgrote.net/postfix:latest"
     container_name: postfix
     restart: always
+    pull_policy: missing
     ports:
         - 1025:25
     environment:

docker-compose/registry/docker-compose.yml.j2

@@ -1,6 +1,7 @@
 services:
   oci-registry:
     restart: always
+    pull_policy: missing
     container_name: oci-registry
     image: "registry:2.8.3"
     volumes:
@@ -56,6 +57,7 @@ services:
     networks:
       - intern
     restart: always
+    pull_policy: missing
     environment:
       REDIS_PASSWORD: "{{ lookup('viczem.keepass.keepass', 'oci-registry-redis-pw', 'password') }}"
       MAXMEMORY POLICY: allkeys-lru
@@ -67,6 +69,7 @@ services:
 
   oci-registry-ui:
     restart: always
+    pull_policy: missing
     # url: registry.mgrote.net/ui/index.html
     image: "joxit/docker-registry-ui:2.5.7"
     container_name: oci-registry-ui

docker-compose/routeros-config-export/docker-compose.yml

@@ -2,6 +2,7 @@ services:
   routeros-config-export:
     container_name: routeros-config-export
     restart: always
+    pull_policy: missing
     image: "registry.mgrote.net/routeros-config-export:latest"
     volumes:
       - ./key_rb5009:/key_rb5009:ro

docker-compose/traefik/docker-compose.yml.j2

@@ -4,6 +4,7 @@ services:
     container_name: traefik
     image: "traefik:v3.1.6"
     restart: always
+    pull_policy: missing
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./traefik.yml:/etc/traefik/traefik.yml
@@ -27,6 +28,7 @@ services:
 ######## nforwardauth ########
   nforwardauth:
     restart: always
+    pull_policy: missing
     image: "nosduco/nforwardauth:v1.4.0"
     container_name: traefik-nforwardauth
     environment:

docker-compose/unifi-network-application/docker-compose.yml.j2

@@ -27,6 +27,7 @@ services:
       - 6789:6789 #optional
       - 5514:5514/udp #optional
     restart: always
+    pull_policy: missing
     networks:
       - postfix
       - unifi-internal
@@ -49,6 +50,7 @@ services:
     volumes:
       - db-data:/data/db
     restart: always
+    pull_policy: missing
     environment:
       MARIADB_AUTO_UPGRADE: "1"
     networks:

docker-compose/wiki/docker-compose.yml.j2

@@ -3,6 +3,7 @@ services:
     container_name: wiki-webserver
     image: "registry.mgrote.net/httpd:latest"
     restart: always
+    pull_policy: missing
     networks:
       - traefik
     ports: