Same stack (pangolin ee-1.23.0, gerbil 1.5.1, traefik v3.7, crowdsec, grafana,
prometheus, dashboards, project pangolin); mounts absolute to /root on the
VPS; crowdsec-manager now mounted on the repo-managed compose file so it
edits the git-tracked source. Enables Renovate version bumps.
- Pocket-ID: ENCRYPTION_KEY contains $ — Komodo .env interpolation
eats it. Inline with $$ YAML escape (value already in git history
from master.yaml; rotate later).
- photon: image dropped uv; use image default CMD, strip stale PATH/JAVA.
- glances: PYTHON_VERSION must be 3.14 to match image venv.