@simplehomelab/deployrr 6.0.0-rc3

package/apps/official/langfuse/files/pre-install.sh

@@ -0,0 +1,178 @@
+#!/bin/bash
+# Langfuse Pre-Install Hook
+# Injects auto-generated secrets into all Langfuse compose files via sed placeholders
+# Optionally configures headless initialization using existing Deployrr credentials
+
+COMPOSE_DIR="$DOCKER_FOLDER/compose/$HOSTNAME"
+
+# ============================================================
+# SECTION 1: Read and validate secrets
+# ============================================================
+POSTGRESQL_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_postgresql_password" 2>/dev/null)
+REDIS_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_redis_password" 2>/dev/null)
+CLICKHOUSE_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_clickhouse_password" 2>/dev/null)
+MINIO_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_minio_password" 2>/dev/null)
+NEXTAUTH_SECRET=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_nextauth_secret" 2>/dev/null)
+SALT=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_salt" 2>/dev/null)
+ENCRYPTION_KEY=$(sudo cat "$DOCKER_FOLDER/secrets/langfuse_encryption_key" 2>/dev/null)
+
+if [[ -z "$POSTGRESQL_PASSWORD" || -z "$REDIS_PASSWORD" || -z "$CLICKHOUSE_PASSWORD" || \
+      -z "$MINIO_PASSWORD" || -z "$NEXTAUTH_SECRET" || -z "$SALT" || -z "$ENCRYPTION_KEY" ]]; then
+    f_print_error "One or more Langfuse secrets are missing from $DOCKER_FOLDER/secrets/"
+    log_error "langfuse" "Missing secrets - aborting pre-install"
+    return 1
+fi
+
+f_print_substep "Injecting secrets into Langfuse compose files..."
+
+# ============================================================
+# SECTION 2: Inject secrets into compose files
+# ============================================================
+
+# --- Inject into main compose (langfuse-web) ---
+local web_compose="$COMPOSE_DIR/langfuse.yml"
+if [[ -f "$web_compose" ]]; then
+    sudo sed -i "s|POSTGRESQL-PASSWORD-PLACEHOLDER|$POSTGRESQL_PASSWORD|g" "$web_compose"
+    sudo sed -i "s|REDIS-PASSWORD-PLACEHOLDER|$REDIS_PASSWORD|g" "$web_compose"
+    sudo sed -i "s|CLICKHOUSE-PASSWORD-PLACEHOLDER|$CLICKHOUSE_PASSWORD|g" "$web_compose"
+    sudo sed -i "s|MINIO-PASSWORD-PLACEHOLDER|$MINIO_PASSWORD|g" "$web_compose"
+    sudo sed -i "s|NEXTAUTH-SECRET-PLACEHOLDER|$NEXTAUTH_SECRET|g" "$web_compose"
+    sudo sed -i "s|SALT-PLACEHOLDER|$SALT|g" "$web_compose"
+    sudo sed -i "s|ENCRYPTION-KEY-PLACEHOLDER|$ENCRYPTION_KEY|g" "$web_compose"
+    log_info "langfuse" "Injected secrets into langfuse.yml"
+fi
+
+# --- Inject into worker compose ---
+local worker_compose="$COMPOSE_DIR/langfuse-worker.yml"
+if [[ -f "$worker_compose" ]]; then
+    sudo sed -i "s|POSTGRESQL-PASSWORD-PLACEHOLDER|$POSTGRESQL_PASSWORD|g" "$worker_compose"
+    sudo sed -i "s|REDIS-PASSWORD-PLACEHOLDER|$REDIS_PASSWORD|g" "$worker_compose"
+    sudo sed -i "s|CLICKHOUSE-PASSWORD-PLACEHOLDER|$CLICKHOUSE_PASSWORD|g" "$worker_compose"
+    sudo sed -i "s|MINIO-PASSWORD-PLACEHOLDER|$MINIO_PASSWORD|g" "$worker_compose"
+    sudo sed -i "s|SALT-PLACEHOLDER|$SALT|g" "$worker_compose"
+    sudo sed -i "s|ENCRYPTION-KEY-PLACEHOLDER|$ENCRYPTION_KEY|g" "$worker_compose"
+    log_info "langfuse" "Injected secrets into langfuse-worker.yml"
+fi
+
+# --- Inject into PostgreSQL compose ---
+local pg_compose="$COMPOSE_DIR/langfuse-postgresql.yml"
+if [[ -f "$pg_compose" ]]; then
+    sudo sed -i "s|POSTGRESQL-PASSWORD-PLACEHOLDER|$POSTGRESQL_PASSWORD|g" "$pg_compose"
+    log_info "langfuse" "Injected secrets into langfuse-postgresql.yml"
+fi
+
+# --- Inject into Redis compose ---
+local redis_compose="$COMPOSE_DIR/langfuse-redis.yml"
+if [[ -f "$redis_compose" ]]; then
+    sudo sed -i "s|REDIS-PASSWORD-PLACEHOLDER|$REDIS_PASSWORD|g" "$redis_compose"
+    log_info "langfuse" "Injected secrets into langfuse-redis.yml"
+fi
+
+# --- Inject into ClickHouse compose ---
+local ch_compose="$COMPOSE_DIR/langfuse-clickhouse.yml"
+if [[ -f "$ch_compose" ]]; then
+    sudo sed -i "s|CLICKHOUSE-PASSWORD-PLACEHOLDER|$CLICKHOUSE_PASSWORD|g" "$ch_compose"
+    log_info "langfuse" "Injected secrets into langfuse-clickhouse.yml"
+fi
+
+# --- Inject into MinIO compose ---
+local minio_compose="$COMPOSE_DIR/langfuse-minio.yml"
+if [[ -f "$minio_compose" ]]; then
+    sudo sed -i "s|MINIO-PASSWORD-PLACEHOLDER|$MINIO_PASSWORD|g" "$minio_compose"
+    log_info "langfuse" "Injected secrets into langfuse-minio.yml"
+fi
+
+f_print_success "Langfuse secrets configured"
+
+# ============================================================
+# SECTION 3: Headless initialization prompt
+# ============================================================
+local headless_choice
+headless_choice=$(dialog \
+    --backtitle "Deployrr - Langfuse Setup" \
+    --title "Account Initialization" \
+    --menu "\nHow would you like to set up your Langfuse admin account?\n" 0 0 2 \
+    "1" "Use existing Deployrr credentials (recommended)" \
+    "2" "Set up manually via web UI after install" \
+    3>&1 1>&2 2>&3)
+
+local dialog_exit=$?
+if [[ $dialog_exit -ne 0 ]]; then
+    headless_choice="2"
+fi
+
+if [[ "$headless_choice" == "1" ]]; then
+    # --- Read existing Deployrr credentials ---
+    local basic_user basic_pass
+    basic_user=$(sudo cat "$DOCKER_FOLDER/secrets/basic_auth_username" 2>/dev/null)
+    basic_pass=$(sudo cat "$DOCKER_FOLDER/secrets/basic_auth_password" 2>/dev/null)
+
+    if [[ -z "$basic_user" || -z "$basic_pass" ]]; then
+        f_print_warning "Could not read Deployrr credentials - falling back to manual setup"
+        log_warning "langfuse" "basic_auth credentials not found, skipping headless init"
+        headless_choice="2"
+    fi
+fi
+
+if [[ "$headless_choice" == "1" ]]; then
+    # --- Prompt for email ---
+    local user_email
+    user_email=$(dialog \
+        --backtitle "Deployrr - Langfuse Setup" \
+        --title "Admin Email" \
+        --inputbox "\nEnter the email address for your Langfuse admin account:\n" 10 60 \
+        3>&1 1>&2 2>&3)
+
+    local email_exit=$?
+    if [[ $email_exit -ne 0 || -z "$user_email" ]]; then
+        f_print_warning "No email provided - falling back to manual setup"
+        log_warning "langfuse" "No email provided, skipping headless init"
+        headless_choice="2"
+    fi
+fi
+
+if [[ "$headless_choice" == "1" ]]; then
+    # --- Prompt for org name ---
+    local org_name
+    org_name=$(dialog \
+        --backtitle "Deployrr - Langfuse Setup" \
+        --title "Organization Name" \
+        --inputbox "\nEnter a name for your Langfuse organization:\n" 10 60 "Deployrr" \
+        3>&1 1>&2 2>&3)
+    [[ -z "$org_name" ]] && org_name="Deployrr"
+
+    # --- Prompt for project name ---
+    local project_name
+    project_name=$(dialog \
+        --backtitle "Deployrr - Langfuse Setup" \
+        --title "Project Name" \
+        --inputbox "\nEnter a name for your first Langfuse project:\n" 10 60 "Default Project" \
+        3>&1 1>&2 2>&3)
+    [[ -z "$project_name" ]] && project_name="Default Project"
+
+    # --- Derive IDs from names (lowercase, spaces to hyphens) ---
+    local org_id project_id
+    org_id=$(echo "$org_name" | tr '[:upper:]' '[:lower:]' | tr ' ' '-')
+    project_id=$(echo "$project_name" | tr '[:upper:]' '[:lower:]' | tr ' ' '-')
+
+    # --- Inject headless init values ---
+    f_print_substep "Configuring headless initialization..."
+
+    sudo sed -i "s|HEADLESS-ORG-PLACEHOLDER|$org_id|g" "$web_compose"
+    sudo sed -i "s|HEADLESS-ORGNAME-PLACEHOLDER|$org_name|g" "$web_compose"
+    sudo sed -i "s|HEADLESS-PROJECT-PLACEHOLDER|$project_id|g" "$web_compose"
+    sudo sed -i "s|HEADLESS-PROJECTNAME-PLACEHOLDER|$project_name|g" "$web_compose"
+    sudo sed -i "s|HEADLESS-EMAIL-PLACEHOLDER|$user_email|g" "$web_compose"
+    sudo sed -i "s|HEADLESS-USERNAME-PLACEHOLDER|$basic_user|g" "$web_compose"
+    sudo sed -i "s|HEADLESS-PASSWORD-PLACEHOLDER|$basic_pass|g" "$web_compose"
+
+    f_print_success "Admin account will be created on first startup"
+    log_info "langfuse" "Headless init configured: user=$basic_user email=$user_email"
+else
+    # --- Remove headless init placeholders ---
+    if [[ -f "$web_compose" ]]; then
+        sudo sed -i "/HEADLESS-.*-PLACEHOLDER/d" "$web_compose"
+        log_info "langfuse" "Headless init skipped - placeholders removed"
+    fi
+    f_print_substep "Manual account setup selected - create your account via the web UI"
+fi

package/apps/official/langfuse/langfuse-clickhouse.yml

@@ -0,0 +1,25 @@
+services:
+  # Langfuse ClickHouse - Dedicated Analytics Database for Langfuse
+  langfuse-clickhouse:
+    container_name: langfuse-clickhouse
+    image: docker.io/clickhouse/clickhouse-server:${LANGFUSECLICKHOUSE_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: wget --no-verbose --tries=1 --spider http://localhost:8123/ping || exit 1
+      interval: 5s
+      timeout: 5s
+      retries: 10
+      start_period: 1s
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/langfuse-clickhouse/data:/var/lib/clickhouse
+      - $DOCKERDIR/appdata/langfuse-clickhouse/logs:/var/log/clickhouse-server
+    environment:
+      - CLICKHOUSE_DB=default
+      - CLICKHOUSE_USER=clickhouse
+      - CLICKHOUSE_PASSWORD=CLICKHOUSE-PASSWORD-PLACEHOLDER
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/langfuse/langfuse-minio.yml

@@ -0,0 +1,25 @@
+services:
+  # Langfuse MinIO - Dedicated Object Storage for Langfuse
+  langfuse-minio:
+    container_name: langfuse-minio
+    image: minio/minio:${LANGFUSEMINIO_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    entrypoint: sh
+    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
+    healthcheck:
+      test: ["CMD", "mc", "ready", "local"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+      start_period: 5s
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/langfuse-minio:/data
+    environment:
+      - MINIO_ROOT_USER=minio
+      - MINIO_ROOT_PASSWORD=MINIO-PASSWORD-PLACEHOLDER
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/langfuse/langfuse-postgresql.yml

@@ -0,0 +1,26 @@
+services:
+  # Langfuse PostgreSQL - Dedicated Database for Langfuse
+  langfuse-postgresql:
+    container_name: langfuse-postgresql
+    image: postgres:${LANGFUSEPOSTGRESQL_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d langfuse -U langfuse_db_user"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 5s
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/langfuse-postgresql:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_DB=langfuse
+      - POSTGRES_USER=langfuse_db_user
+      - POSTGRES_PASSWORD=POSTGRESQL-PASSWORD-PLACEHOLDER
+      - TZ=UTC
+      - PGTZ=UTC
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/langfuse/langfuse-redis.yml

@@ -0,0 +1,22 @@
+services:
+  # Langfuse Redis - Dedicated Cache and Queue for Langfuse
+  langfuse-redis:
+    container_name: langfuse-redis
+    image: redis:${LANGFUSEREDIS_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    command: >
+      --requirepass REDIS-PASSWORD-PLACEHOLDER
+      --maxmemory-policy noeviction
+    healthcheck:
+      test: ["CMD", "redis-cli", "-a", "REDIS-PASSWORD-PLACEHOLDER", "ping"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/langfuse-redis:/data
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/langfuse/langfuse-worker.yml

@@ -0,0 +1,50 @@
+services:
+  # Langfuse Worker - Background Event Processor
+  langfuse-worker:
+    image: docker.io/langfuse/langfuse-worker:${LANGFUSEWORKER_VERSION_PIN}
+    container_name: langfuse-worker
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    depends_on:
+      langfuse-postgresql:
+        condition: service_healthy
+      langfuse-redis:
+        condition: service_healthy
+      langfuse-clickhouse:
+        condition: service_healthy
+      langfuse-minio:
+        condition: service_healthy
+    networks:
+      - default
+    environment:
+      - DATABASE_URL=postgresql://langfuse_db_user:POSTGRESQL-PASSWORD-PLACEHOLDER@langfuse-postgresql:5432/langfuse
+      - SALT=SALT-PLACEHOLDER
+      - ENCRYPTION_KEY=ENCRYPTION-KEY-PLACEHOLDER
+      - TELEMETRY_ENABLED=false
+      - LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES=false
+      - CLICKHOUSE_MIGRATION_URL=clickhouse://langfuse-clickhouse:9000
+      - CLICKHOUSE_URL=http://langfuse-clickhouse:8123
+      - CLICKHOUSE_USER=clickhouse
+      - CLICKHOUSE_PASSWORD=CLICKHOUSE-PASSWORD-PLACEHOLDER
+      - CLICKHOUSE_CLUSTER_ENABLED=false
+      - LANGFUSE_S3_EVENT_UPLOAD_BUCKET=langfuse
+      - LANGFUSE_S3_EVENT_UPLOAD_REGION=auto
+      - LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=minio
+      - LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=MINIO-PASSWORD-PLACEHOLDER
+      - LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=http://langfuse-minio:9000
+      - LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE=true
+      - LANGFUSE_S3_EVENT_UPLOAD_PREFIX=events/
+      - LANGFUSE_S3_MEDIA_UPLOAD_BUCKET=langfuse
+      - LANGFUSE_S3_MEDIA_UPLOAD_REGION=auto
+      - LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID=minio
+      - LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY=MINIO-PASSWORD-PLACEHOLDER
+      - LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT=http://langfuse-minio:9000
+      - LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE=true
+      - LANGFUSE_S3_MEDIA_UPLOAD_PREFIX=media/
+      - LANGFUSE_S3_BATCH_EXPORT_ENABLED=false
+      - REDIS_HOST=langfuse-redis
+      - REDIS_PORT=6379
+      - REDIS_AUTH=REDIS-PASSWORD-PLACEHOLDER
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/langfuse/manifest.json

@@ -0,0 +1,201 @@
+{
+    "$schema": "../../../apps/manifest-schema.json",
+    "version": "1.2",
+    "app": {
+        "sname": "langfuse",
+        "pname": "Langfuse",
+        "description": "Langfuse is an open-source LLM engineering platform for observability, metrics, evaluations, prompt management, and dataset handling. It provides tracing, analytics, and debugging tools for AI/LLM applications. This installation includes dedicated PostgreSQL, Redis, ClickHouse, and MinIO containers.",
+        "descriptionShort": "LLM observability & analytics",
+        "icon": "https://raw.githubusercontent.com/langfuse/langfuse/main/web/public/icon256.png",
+        "_iconFuture": "sh-langfuse",
+        "category": "official",
+        "menuNumber": "06",
+        "tags": [
+            "ai",
+            "llm",
+            "observability",
+            "analytics",
+            "tracing",
+            "monitoring"
+        ]
+    },
+    "deployment": {
+        "type": "multicontainer",
+        "compose": "compose.yml",
+        "profiles": [
+            "apps",
+            "all"
+        ],
+        "networks": [
+            "default"
+        ],
+        "webui": true,
+        "port": 3100,
+        "protocol": "http"
+    },
+    "dependencies": [
+        {
+            "sname": "langfuse-postgresql",
+            "pname": "Langfuse PostgreSQL",
+            "compose": "langfuse-postgresql.yml",
+            "installOrder": 1,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Dedicated PostgreSQL database for Langfuse"
+        },
+        {
+            "sname": "langfuse-redis",
+            "pname": "Langfuse Redis",
+            "compose": "langfuse-redis.yml",
+            "installOrder": 2,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Dedicated Redis cache and queue for Langfuse"
+        },
+        {
+            "sname": "langfuse-clickhouse",
+            "pname": "Langfuse ClickHouse",
+            "compose": "langfuse-clickhouse.yml",
+            "installOrder": 3,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Dedicated ClickHouse analytics database for Langfuse"
+        },
+        {
+            "sname": "langfuse-minio",
+            "pname": "Langfuse MinIO",
+            "compose": "langfuse-minio.yml",
+            "installOrder": 4,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Dedicated MinIO object storage for Langfuse events and media"
+        },
+        {
+            "sname": "langfuse-worker",
+            "pname": "Langfuse Worker",
+            "compose": "langfuse-worker.yml",
+            "installOrder": 5,
+            "waitForHealthy": false,
+            "required": true,
+            "description": "Background worker for Langfuse event processing"
+        }
+    ],
+    "requirements": {
+        "prerequisites": [
+            "prerequisites"
+        ],
+        "apps": []
+    },
+    "database": {
+        "type": "postgresql",
+        "containerSname": "langfuse-postgresql",
+        "name": "langfuse",
+        "user": "langfuse_db_user",
+        "passwordSecret": "langfuse_postgresql_password",
+        "host": "langfuse-postgresql",
+        "port": 5432
+    },
+    "traefik": {
+        "supported": true
+    },
+    "dashboard": {
+        "enabled": true,
+        "location": "local",
+        "showStats": true,
+        "portVariable": "LANGFUSE_PORT"
+    },
+    "env": {
+        "variables": [
+            {
+                "name": "LANGFUSE_PORT",
+                "description": "Web interface port",
+                "type": "port",
+                "default": 3100,
+                "prompt": true,
+                "required": true,
+                "validation": {
+                    "type": "port",
+                    "min": 1,
+                    "max": 65535
+                }
+            }
+        ],
+        "secrets": [
+            {
+                "name": "langfuse_postgresql_password",
+                "description": "PostgreSQL database password",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "langfuse_redis_password",
+                "description": "Redis authentication password",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "langfuse_clickhouse_password",
+                "description": "ClickHouse database password",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "langfuse_minio_password",
+                "description": "MinIO root password",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "langfuse_nextauth_secret",
+                "description": "NextAuth session encryption secret",
+                "type": "random",
+                "length": 64,
+                "addToCompose": false
+            },
+            {
+                "name": "langfuse_salt",
+                "description": "Encryption salt for Langfuse",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "langfuse_encryption_key",
+                "description": "Encryption key for Langfuse (64-char hex)",
+                "type": "random",
+                "length": 64,
+                "addToCompose": false
+            }
+        ]
+    },
+    "hooks": {
+        "preInstall": {
+            "script": "files/pre-install.sh"
+        },
+        "postInstall": {
+            "messages": [
+                {
+                    "style": "note",
+                    "text": "Langfuse uses dedicated containers: \\Z5langfuse-postgresql\\Zn, \\Z5langfuse-redis\\Zn, \\Z5langfuse-clickhouse\\Zn, \\Z5langfuse-minio\\Zn, and \\Z5langfuse-worker\\Zn."
+                },
+                {
+                    "style": "note",
+                    "text": "If you chose headless init, your admin account is ready. Otherwise, create your account at \\Z4https://langfuse.$DOMAINNAME_1\\Zn"
+                },
+                {
+                    "style": "note",
+                    "text": "Secrets are stored in \\Z4$DOCKER_FOLDER/secrets/\\Zn (langfuse_*)."
+                }
+            ]
+        }
+    },
+    "status": {
+        "file": "06_langfuse_status",
+        "successMessage": "Langfuse Setup Completed",
+        "telemetryAction": "langfuse"
+    }
+}

package/apps/official/lidarr/compose.yml

@@ -0,0 +1,25 @@
+services:
+  # Lidarr - Music Management
+  lidarr:
+    image: lscr.io/linuxserver/lidarr:latest
+    container_name: lidarr
+    security_opt:
+      - no-new-privileges:true
+    restart: "no"
+    profiles: ["media", "starr", "all"]
+    networks:
+      - default
+    ports:
+      - "$LIDARR_PORT:8686"
+    volumes:
+      - $DOCKERDIR/appdata/lidarr:/config
+      # - $MEDIADIR1:/data/media1
+      # - $MEDIADIR2:/data/media2
+      # - $MEDIADIR3:/data/media3
+      - $DOWNLOADSDIR:/data/downloads 
+      - "/etc/localtime:/etc/localtime:ro"
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/lidarr/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "lidarr",
+    "pname": "Lidarr",
+    "description": "Lidarr is a music collection manager for Usenet and BitTorrent users. It can monitor multiple RSS feeds for new albums from your favorite artists and will interface with clients and indexers to grab, sort, and rename them.",
+    "descriptionShort": "PVR for Music",
+    "icon": "sh-lidarr",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["media", "music", "pvr", "starr"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["media", "starr", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 8686,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "media_folder", "downloads_folder", "appfolder_permission"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "LIDARR_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "LIDARR_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 8686,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_lidarr_status",
+    "successMessage": "Lidarr Setup Completed",
+    "telemetryAction": "lidarr"
+  }
+}

package/apps/official/lollypop/compose.yml

@@ -0,0 +1,26 @@
+services:
+  # Lollypop - Music Player
+  lollypop:
+    image: lscr.io/linuxserver/lollypop:latest
+    container_name: lollypop
+    security_opt:
+      - no-new-privileges:true
+      - seccomp:unconfined #optional
+    restart: "unless-stopped"
+    profiles: ["apps", "media", "all"]
+    networks:
+      - default
+    # DEVICES-GPU-PLACEHOLDER-DO-NOT-DELETE
+    ports:
+      - "$LOLLYPOP_PORT:3000" # HTTP
+    #   - 3001:3001 # HTTPS
+    volumes:
+      - $DOCKERDIR/appdata/lollypop:/config
+      # - $MEDIADIR1:/data/media1
+      # - $MEDIADIR2:/data/media2
+      # - $MEDIADIR3:/data/media3
+    environment:
+      TZ: $TZ
+      PUID: $PUID
+      PGID: $PGID
+    # DOCKER-LABELS-PLACEHOLDER