Update docker.io/actualbudget/actual-server Docker tag to v25.6.1

ansible/assets/docker-ext/compose.yml.j2

@@ -25,7 +25,6 @@ services:
       - --experimental.plugins.crowdsec-bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
       - --experimental.plugins.crowdsec-bouncer.version=v1.2.1
       # - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
-      - --accesslog=true
     ports:
       # The HTTP port
       - "80:80"
@@ -180,7 +179,7 @@ services:
       timeout: 3s
   authentik-server:
     container_name: authentik-server
-    image: ghcr.io/goauthentik/server:2025.6.2
+    image: ghcr.io/goauthentik/server:2025.2.2
     restart: unless-stopped
     command: server
     environment:
@@ -214,7 +213,7 @@ services:
       - "traefik.http.routers.authentik.middlewares=crowdsec@docker"
   authentik-worker:
     container_name: authentik-worker
-    image: ghcr.io/goauthentik/server:2025.6.2
+    image: ghcr.io/goauthentik/server:2025.2.2
     restart: unless-stopped
     command: worker
     environment:
@@ -429,7 +428,7 @@ services:
       #    - net.ipv4.conf.all.src_valid_mark=1
       #  restart: unless-stopped
   crowdsec:
-    image: crowdsecurity/crowdsec:v1.6.9
+    image: crowdsecurity/crowdsec:v1.6.6
     container_name: crowdsec
     environment:
       PGID: "1001"

ansible/assets/docker-int/compose.yml.j2

@@ -5,7 +5,6 @@ services:
     # The official v2 Traefik docker image
     image: traefik:v3.3
     # Enables the web UI and tells Traefik to listen to docker
-    restart: unless-stopped
     command:
       - --api.insecure=true
       - --providers.docker
@@ -60,7 +59,7 @@ services:
     volumes:
       - redisdata:/data
   paperless-webserver:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.16.3
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.14.7
     container_name: paperless-webserver
     restart: unless-stopped
     depends_on:
@@ -73,9 +72,8 @@ services:
       - media:/usr/src/paperless/media
       - export:/usr/src/paperless/export
       - consume:/usr/src/paperless/consume
-    #env_file: docker-compose.env
-    environment:
-      PAPERLESS_DATE_ORDER: MDY
+    env_file: docker-compose.env
+    # environment:
     labels:
       - "traefik.http.routers.paperless.rule=Host(`paperless.injust.us`)"
       - "traefik.http.routers.paperless.entrypoints=websecure"
@@ -107,7 +105,7 @@ services:
       - "traefik.http.routers.testweb.entrypoints=websecure"
       - "traefik.http.routers.testweb.tls.certresolver=myresolver"
   actual_server:
-    image: docker.io/actualbudget/actual-server:25.7.0
+    image: docker.io/actualbudget/actual-server:25.6.1
     ports:
       # This line makes Actual available at port 5006 of the device you run the server on,
       # i.e. http://localhost:5006. You can change the first number to change the port, if you want.

ansible/inventory/hosts.yaml

@@ -21,9 +21,9 @@ docker:
     gitea:
       ansible_ssh_user: root
 
-#wireguard:
-# hosts:
-#    wireguard:
+wireguard:
+  hosts:
+    wireguard:
 
 external_access:
   hosts: