From ac857d7839dcfef1919db9888f42dc9949c797e3 Mon Sep 17 00:00:00 2001
From: traveler <phil@pncharris.com>
Date: Sun, 28 Dec 2025 11:27:42 -0600
Subject: [PATCH] sdsd

---
 pinchflat.yaml | 57 +++++++++++++++++++++++++++++++++-----------------
 1 file changed, 38 insertions(+), 19 deletions(-)

diff --git a/pinchflat.yaml b/pinchflat.yaml
index 3f9acbc..2b3fa7a 100644
--- a/pinchflat.yaml
+++ b/pinchflat.yaml
@@ -1,34 +1,53 @@
 services:
   pinchflat:
     image: ghcr.io/kieraneglin/pinchflat:latest
-    environment:
-      # Set the timezone to your local timezone
-      - TZ=America/Chicago
-      - PGID=998
-      - PUID=1001 
-    ports:
-      - '8945:8945'
     networks:
       - netgrimoire
+
+    environment:
+      # Set the timezone to your local timezone
+      TZ: America/Chicago
+      PUID: "1001"
+      PGID: "998"
+
+    # Match your standard UID:GID execution model
+    user: "1001:998"
+
+    ports:
+      - target: 8945
+        published: 8945
+        protocol: tcp
+        mode: ingress
+
     volumes:
       - /DockerVol/pinchflat/config:/config
       - /data/nfs/Baxter/Data/media/other/pinchflat:/downloads
+
     deploy:
-      labels:
-        - homepage.group=Application
-        - homepage.name=PinchFlat
-        - homepage.icon=pinchflat.png
-        - homepage.href=http://pinchflat.netgrimoire.com
-        - homepage.description=Youtube Library
-        - kuma.pf.http.name="Pinchflat"
-        - kuma.pf.http.url=http://pinchflat:8945
-        - caddy=pinchflat.netgrimoire.com
-        - caddy.import=authentik
-        - caddy.reverse_proxy="{{upstreams 8945}}"
       placement:
         constraints:
           - node.hostname == nas
 
+      labels:
+        # Homepage
+        homepage.group: "Downloaders"
+        homepage.name: "PinchFlat"
+        homepage.icon: "pinchflat.png"
+        homepage.href: "https://pinchflat.netgrimoire.com"
+        homepage.description: "YouTube Library"
+
+        # Kuma
+        kuma.pf.http.name: "PinchFlat"
+        kuma.pf.http.url: "http://pinchflat:8945"
+
+        # Caddy
+        caddy: "pinchflat.netgrimoire.com"
+        caddy.import: "authentik"
+        caddy.reverse_proxy: "pinchflat:8945"
+
+        # Diun (image update monitoring)
+        diun.enable: "true"
+
 networks:
   netgrimoire:
-    external: true 
\ No newline at end of file
+    external: true