Lock mutable image tags to current running digests

Lock mutable image tags to current running digests

apps/homepage/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   homepage:
-    image: ghcr.io/gethomepage/homepage:latest
+    image: ghcr.io/gethomepage/homepage:latest@sha256:cc84f2f5eb3c7734353701ccbaa24ed02dacb0d119114e50e4251e2005f3990a
     container_name: homepage
     restart: unless-stopped
     environment:
@@ -39,4 +39,4 @@ services:
 
 networks:
   frontend_net:
-    external: true
+    external: true

apps/immich/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3.9"
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:release
+    image: ghcr.io/immich-app/immich-server:release@sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5
     restart: unless-stopped
     depends_on:
       - redis
@@ -34,7 +34,7 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:release
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:a2501141440f10516d329fdfba2c68082e19eb9ba6016c061ac80d23beadf7f3
     restart: unless-stopped
     volumes:
       - model-cache:/cache
@@ -77,4 +77,4 @@ networks:
     internal: true
     driver: bridge
   frontend_net:
-    external: true
+    external: true

apps/ntfy/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   ntfy:
-    image: binwiederhier/ntfy:latest
+    image: binwiederhier/ntfy:latest@sha256:2b9e12d56a538f4402da53128eeca02696c4b207ab7fbe031c27eca92ca9b86
     container_name: ntfy
     restart: unless-stopped
     dns:                       

apps/paperless-gpt/docker-compose.yml

@@ -2,7 +2,7 @@ version: '3.8'
 
 services:
   paperless-gpt:
-    image: icereed/paperless-gpt:latest
+    image: icereed/paperless-gpt:latest@sha256:c0ce6186028911101a2cfe68353f14a9db2653596f3f1cff94de4b6db3114ff
     container_name: paperless-gpt
     restart: unless-stopped
     security_opt: