{ "schema_version": "0.5.0", "kind": "proxmenux.oci-template", "id": "image-sofa", "status": "generated-unvalidated", "catalog_ui": { "title": { "en_US": "Sofa" }, "description": { "en_US": "Self-hosted movie and TV tracker with watch history, recommendations, and media-server integrations." }, "category": "media", "category_label": "Media & Streaming", "author": "jakejarvis", "developer": "jakejarvis", "icon": "https://raw.githubusercontent.com/jakejarvis/sofa/main/apps/web/public/icon.svg", "thumbnail": null, "screenshots": [], "architectures": [ "amd64", "arm64" ], "launch": { "scheme": "http", "port": 3000, "path": "/" }, "website": "https://github.com/jakejarvis/sofa", "documentation": "https://github.com/jakejarvis/sofa#readme", "repository": "https://github.com/jakejarvis/sofa", "tips": [ "A TMDB API Read Access Token is required for metadata and discovery. Update BETTER_AUTH_URL to the public HTTPS address when putting the app behind a reverse proxy.", "The first account created becomes the administrator and registration then closes by default." ], "mini_changelog": [], "display_version": null, "updated_at": null }, "source": { "provider": "jakejarvis", "repository": "https://github.com/jakejarvis/sofa", "default_branch": "main", "revision": "a8294d977b0f2c0ad267d0b516298881a5571e86", "image_repository_url": "https://github.com/orgs/jakejarvis/packages/container/package/sofa", "readme_pushed_at": "", "compose_sha256": "f58035702e2110cf26805bcb3c6a442296146ddd8dd36c1bf956469e94007471", "generated_at": "2026-10-26T06:12:09+00:00", "readme_raw_url": "https://raw.githubusercontent.com/jakejarvis/sofa/main/README.md" }, "container_contract": { "service_name": "sofa", "container_name": "sofa", "image": { "reference": "ghcr.io/jakejarvis/sofa:edge", "registry": "ghcr.io", "repository": "ghcr.io/jakejarvis/sofa", "tag": "edge", "digest": null, "pull_policy": "resolve-selected-tag-to-architecture-digest-at-install" }, "environment": [ { "name": "TMDB_API_READ_ACCESS_TOKEN", "example": null, "required": true, "sensitive": true, "source": "upstream-documentation" }, { "name": "BETTER_AUTH_SECRET", "example": "${GENERATED_BETTER_AUTH_SECRET}", "required": true, "sensitive": true, "source": "upstream-documentation" }, { "name": "BETTER_AUTH_URL", "example": "http://@CONTAINER_ADDRESS@:3000", "required": true, "sensitive": false, "container_address": "http://@CONTAINER_ADDRESS@:3000", "source": "upstream-documentation" } ], "volumes": [ { "id": "volume-0", "container_path": "/data", "compose_source_example": "./data", "read_only": false, "required": true, "installation_choice": [ "managed-volume", "host-bind" ], "default": "managed-volume", "managed_volume": { "backup": true, "default_size_gb": 8 } } ], "ports": [ { "container_port": 3000, "published_example": 3000, "protocol": "tcp", "required": true, "proxmox_behavior": "listener-on-dedicated-lxc-address-no-nat" } ], "related_services": [], "restart": "unless-stopped", "stop_grace_period": null, "original_compose": "{\n \"name\": \"sofa\",\n \"services\": {\n \"sofa\": {\n \"image\": \"ghcr.io/jakejarvis/sofa:edge\",\n \"container_name\": \"sofa\",\n \"restart\": \"unless-stopped\",\n \"ports\": [\n \"3000:3000/tcp\"\n ],\n \"volumes\": [\n \"./data:/data\"\n ],\n \"environment\": {\n \"TMDB_API_READ_ACCESS_TOKEN\": null,\n \"BETTER_AUTH_SECRET\": \"${GENERATED_BETTER_AUTH_SECRET}\",\n \"BETTER_AUTH_URL\": \"http://@CONTAINER_ADDRESS@:3000\"\n }\n }\n }\n}" }, "compose_stack": { "project_name": "sofa", "deployment_model": "one-native-oci-lxc-per-compose-service", "user_experience": "single-application-install", "main_service": "sofa", "service_count": 1, "services": [ { "name": "sofa", "image": "ghcr.io/jakejarvis/sofa:edge", "is_main": true, "role": "frontend", "vmid_offset": 0, "depends_on": [], "frontend_network": true, "private_network": false, "compose": { "image": "ghcr.io/jakejarvis/sofa:edge", "container_name": "sofa", "restart": "unless-stopped", "ports": [ "3000:3000/tcp" ], "volumes": [ "./data:/data" ], "environment": { "TMDB_API_READ_ACCESS_TOKEN": null, "BETTER_AUTH_SECRET": "${GENERATED_BETTER_AUTH_SECRET}", "BETTER_AUTH_URL": "http://@CONTAINER_ADDRESS@:3000" } } } ], "top_level": {}, "networking": { "frontend": "selected-proxmox-bridge", "private_required": false, "private_creation": "automatic-create-if-missing", "private_address_allocation": "automatic-static-address-per-service", "service_discovery": "private-addresses-with-compose-service-host-aliases", "dependency_external_access": "disabled-unless-service-publishes-ports", "prompt_user_for_private_network": false }, "storage": [ { "id": "sofa-volume-0", "service": "sofa", "container_path": "/data", "mode": "managed-volume", "user_selectable": true, "backup": true, "shared_with_other_lxc": false, "source_path": null, "source_path_prompt": null } ], "orchestration": { "reserve_vmids_atomically": 1, "start_order": [ "sofa" ], "stop_order": [ "sofa" ], "dependency_readiness": "compose-healthcheck-then-port-or-process-fallback", "rollback_on_failure": "remove-new-rootfs-preserve-created-persistent-volumes" }, "installer_inputs": { "prompted": [ "stack_name", "base_vmid", "rootfs_storage", "persistent_data_destinations", "frontend_bridge", "frontend_ipv4_mode" ], "automatic": [ "dependent_vmids", "private_bridge", "private_subnet", "private_service_addresses", "compose_service_aliases", "generated_secrets", "dependency_start_and_stop_order" ], "generated_secrets": [ { "id": "generated-sofa-better-auth-secret", "strategy": "generate-cryptographically-random-at-install", "bindings": [ { "service": "sofa", "environment_variable": "BETTER_AUTH_SECRET" } ] } ] } }, "first_run": { "endpoints": [ { "label": "Sofa", "scheme": "http", "port": 3000, "path": "/", "source": "upstream-documentation" } ], "credentials": [] }, "proxmox": { "runtime": "native-oci-lxc", "technology_status": "proxmox-technology-preview", "defaults": { "unprivileged": true, "ostype": "auto-from-image", "cores": 2, "memory_mb": 1024, "swap_mb": 512, "rootfs_size_gb": 8, "rootfs_storage": "local-lvm", "volume_storage": "local-lvm", "template_storage": "local", "bridge": "vmbr0", "ipv4": "dhcp", "firewall": true, "host_managed_network": true, "onboot": false, "features": [ "nesting=1" ], "shutdown_timeout_seconds": 120 }, "image_metadata_policy": { "entrypoint": "import-from-oci-image", "cmd": "import-from-oci-image", "environment": "import-image-env-then-apply-compose-overrides", "user": "import-from-oci-image", "working_dir": "import-from-oci-image", "stop_signal": "import-from-oci-image" }, "installer_profile": { "generated_sensitive_environment": { "BETTER_AUTH_SECRET": { "strategy": "token-hex", "bytes": 32 } }, "volume_preparations": [ { "container_path": "/data", "remove_lost_found": true, "owner_strategy": "mapped-application-user", "only_when_mount_type": "managed-volume" } ], "volume_owner": { "uid": 1000, "gid": 1000 }, "startup_healthcheck": { "scheme": "http", "port": 3000, "path": "/", "timeout_seconds": 180, "request_timeout_seconds": 10, "stability_seconds": 4, "verify_tls": true } } }, "compatibility": { "automatic_install_candidate": true, "validated": false, "supported_compose_keys": [ "image", "container_name", "environment", "ports", "restart", "volumes", "user" ], "untranslated_blockers": [], "policy": "Single OCI image and one application service. Persistent paths, required settings, listeners and upstream first-run steps are recorded; runtime installation and service behavior remain unvalidated until laboratory testing." }, "validation": { "schema": "passed-at-generation", "clean_install": "pending", "service_health": "pending", "restart_persistence": "pending", "backup_restore": "pending", "update_preserves_data": "pending" }, "lifecycle": { "update_strategy": "resolve-latest-image-then-apply-reviewed-native-lxc-update", "registry_state": { "resolved_architecture": null, "resolved_digest": null, "image_version_label": null, "image_created": null }, "change_detection": "compare-compose-sha256-and-resolved-latest-image-digest", "automatic_unattended_updates": false } }