ProxMenux/oci/catalog/apps/teable.json

{
  "schema_version": "0.5.0",
  "kind": "proxmenux.oci-template",
  "id": "image-teable",
  "status": "generated-unvalidated",
  "catalog_ui": {
    "title": {
      "en_US": "Teable"
    },
    "tagline": {
      "en_US": "Teable adopts a concise spreadsheet interface, yet creates powerful database applications"
    },
    "description": {
      "en_US": "Teable is a new generation open-source database platform. It provides an intuitive spreadsheet-like experience, while being powered by a high-performance Postgres database underneath, combining ease of use with powerful data processing capabilities.\n\n**Key Features:**\n- **High Performance**: Built on the Postgres core, it effortlessly handles millions of records with extremely fast response times.\n- **Modern Interface**: Offers multiple views including grid, kanban, gallery, and forms, with a clean and user-friendly design.\n- **Real-time Collaboration**: Supports multi-user online collaboration with real-time data synchronisation.\n- **Automation & API**: Provides powerful RESTful APIs to enable flexible integration and automation.\n\n**Learn More:**\n- [Teable Official Website](https://teable.ai)\n- [Teable GitHub Repository](https://github.com/teableio/teable)\n- [Help Documentation](https://help.teable.ai)\n"
    },
    "category": "databases",
    "category_label": "Databases",
    "author": "teableio",
    "developer": "teableio",
    "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/teable.webp",
    "thumbnail": null,
    "screenshots": [],
    "architectures": [
      "amd64",
      "arm64"
    ],
    "launch": {
      "scheme": "http",
      "port": 3000,
      "path": "/"
    },
    "website": "https://teable.ai",
    "documentation": null,
    "repository": "https://hub.docker.com/r/teableio/teable",
    "tips": [],
    "mini_changelog": [],
    "display_version": null,
    "updated_at": null
  },
  "source": {
    "provider": "official",
    "repository": "https://hub.docker.com/r/teableio/teable",
    "revision": "f59c957cd4de1446da35128c8e74c0288ee4c9dd92eeb194a781b4d224c9a53b",
    "image_repository_url": "https://hub.docker.com/r/teableio/teable",
    "readme_pushed_at": "2026-09-11T10:43:22Z",
    "compose_sha256": "f59c957cd4de1446da35128c8e74c0288ee4c9dd92eeb194a781b4d224c9a53b",
    "generated_at": "2026-09-13T15:48:36+00:00"
  },
  "container_contract": {
    "service_name": "teable",
    "container_name": "teable",
    "image": {
      "reference": "teableio/teable:latest",
      "registry": "docker.io",
      "repository": "teableio/teable",
      "tag": "latest",
      "digest": null,
      "pull_policy": "resolve-selected-tag-to-architecture-digest-at-install"
    },
    "environment": [
      {
        "name": "TZ",
        "example": "$TZ",
        "required": true,
        "sensitive": false,
        "source": "docker-compose"
      },
      {
        "name": "NEXT_ENV_IMAGES_ALL_REMOTE",
        "example": "true",
        "required": true,
        "sensitive": false,
        "source": "docker-compose"
      },
      {
        "name": "PUBLIC_ORIGIN",
        "example": "http://127.0.0.1:3000",
        "required": true,
        "sensitive": false,
        "source": "docker-compose"
      },
      {
        "name": "PRISMA_DATABASE_URL",
        "example": "postgresql://example:example@teable-db:5432/teable-db",
        "required": true,
        "sensitive": false,
        "source": "docker-compose"
      },
      {
        "name": "BACKEND_CACHE_PROVIDER",
        "example": "redis",
        "required": true,
        "sensitive": false,
        "source": "docker-compose"
      },
      {
        "name": "BACKEND_CACHE_REDIS_URI",
        "example": "redis://default:password@teable-cache:6379/0",
        "required": true,
        "sensitive": false,
        "source": "docker-compose"
      }
    ],
    "volumes": [
      {
        "id": "volume-0",
        "container_path": "/app/.assets",
        "compose_source_example": "/DATA/AppData/$AppID/assets",
        "read_only": false,
        "required": true,
        "installation_choice": [
          "managed-volume",
          "host-bind"
        ],
        "default": "managed-volume",
        "managed_volume": {
          "backup": true,
          "default_size_gb": 8
        }
      }
    ],
    "ports": [
      {
        "container_port": 3000,
        "published_example": 3200,
        "protocol": "tcp",
        "required": true,
        "proxmox_behavior": "listener-on-dedicated-lxc-address-no-nat"
      }
    ],
    "related_services": [
      {
        "name": "teable-db",
        "image": "postgres:latest"
      },
      {
        "name": "teable-cache",
        "image": "redis:latest"
      }
    ],
    "restart": "unless-stopped",
    "stop_grace_period": null,
    "original_compose": "name: teable\nservices:\n  teable:\n    image: teableio/teable:latest\n    container_name: teable\n    restart: unless-stopped\n    deploy:\n      resources:\n        reservations:\n          memory: 512M\n    ports:\n    - target: 3000\n      published: '3200'\n      protocol: tcp\n    volumes:\n    - type: bind\n      source: /DATA/AppData/$AppID/assets\n      target: /app/.assets\n    environment:\n    - TZ=$TZ\n    - NEXT_ENV_IMAGES_ALL_REMOTE=true\n    - PUBLIC_ORIGIN=http://127.0.0.1:3000\n    - PRISMA_DATABASE_URL=postgresql://example:example@teable-db:5432/teable-db\n    - BACKEND_CACHE_PROVIDER=redis\n    - BACKEND_CACHE_REDIS_URI=redis://default:password@teable-cache:6379/0\n    networks:\n    - teable-network\n    depends_on:\n      teable-db:\n        condition: service_healthy\n      teable-cache:\n        condition: service_healthy\n  teable-db:\n    image: postgres:latest\n    restart: unless-stopped\n    container_name: teable-db\n    deploy:\n      resources:\n        reservations:\n          memory: 256M\n    volumes:\n    - type: bind\n      source: /DATA/AppData/$AppID/data\n      target: /var/lib/postgresql/data\n    environment:\n    - TZ=$TZ\n    - POSTGRES_DB=teable-db\n    - POSTGRES_USER=example\n    - POSTGRES_PASSWORD=${GENERATED_POSTGRES_PASSWORD}\n    networks:\n    - teable-network\n    healthcheck:\n      test:\n      - CMD-SHELL\n      - sh -c 'pg_isready -U example -d teable-db'\n      interval: 10s\n      timeout: 3s\n      retries: 3\n  teable-cache:\n    image: redis:latest\n    restart: unless-stopped\n    container_name: teable-cache\n    deploy:\n      resources:\n        reservations:\n          memory: 256M\n    expose:\n    - '6379'\n    volumes:\n    - type: bind\n      source: /DATA/AppData/$AppID/teable-cache-data\n      target: /data\n    networks:\n    - teable-network\n    command:\n    - redis-server\n    - --requirepass password\n    healthcheck:\n      test:\n      - CMD\n      - redis-cli\n      - --raw\n      - incr\n      - ping\n      interval: 10s\n      timeout: 3s\n      retries: 3\nnetworks:\n  teable-network:\n    name: teable-network\n    driver: bridge\n"
  },
  "compose_stack": {
    "project_name": "teable",
    "deployment_model": "one-native-oci-lxc-per-compose-service",
    "user_experience": "single-application-install",
    "main_service": "teable",
    "service_count": 3,
    "services": [
      {
        "name": "teable-cache",
        "image": "redis:latest",
        "is_main": false,
        "role": "dependency",
        "vmid_offset": 1,
        "depends_on": [],
        "frontend_network": false,
        "private_network": true,
        "compose": {
          "image": "redis:latest",
          "restart": "unless-stopped",
          "container_name": "teable-cache",
          "deploy": {
            "resources": {
              "reservations": {
                "memory": "256M"
              }
            }
          },
          "expose": [
            "6379"
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/DATA/AppData/$AppID/teable-cache-data",
              "target": "/data"
            }
          ],
          "networks": [
            "teable-network"
          ],
          "command": [
            "redis-server",
            "--requirepass password"
          ],
          "healthcheck": {
            "test": [
              "CMD",
              "redis-cli",
              "--raw",
              "incr",
              "ping"
            ],
            "interval": "10s",
            "timeout": "3s",
            "retries": 3
          }
        }
      },
      {
        "name": "teable-db",
        "image": "postgres:latest",
        "is_main": false,
        "role": "dependency",
        "vmid_offset": 2,
        "depends_on": [],
        "frontend_network": false,
        "private_network": true,
        "compose": {
          "image": "postgres:latest",
          "restart": "unless-stopped",
          "container_name": "teable-db",
          "deploy": {
            "resources": {
              "reservations": {
                "memory": "256M"
              }
            }
          },
          "volumes": [
            {
              "type": "bind",
              "source": "/DATA/AppData/$AppID/data",
              "target": "/var/lib/postgresql/data"
            }
          ],
          "environment": [
            "TZ=$TZ",
            "POSTGRES_DB=teable-db",
            "POSTGRES_USER=example",
            "POSTGRES_PASSWORD=${GENERATED_POSTGRES_PASSWORD}"
          ],
          "networks": [
            "teable-network"
          ],
          "healthcheck": {
            "test": [
              "CMD-SHELL",
              "sh -c 'pg_isready -U example -d teable-db'"
            ],
            "interval": "10s",
            "timeout": "3s",
            "retries": 3
          }
        }
      },
      {
        "name": "teable",
        "image": "teableio/teable:latest",
        "is_main": true,
        "role": "frontend",
        "vmid_offset": 0,
        "depends_on": [
          "teable-cache",
          "teable-db"
        ],
        "frontend_network": true,
        "private_network": true,
        "compose": {
          "image": "teableio/teable:latest",
          "container_name": "teable",
          "restart": "unless-stopped",
          "deploy": {
            "resources": {
              "reservations": {
                "memory": "512M"
              }
            }
          },
          "ports": [
            {
              "target": 3000,
              "published": "3200",
              "protocol": "tcp"
            }
          ],
          "volumes": [
            {
              "type": "bind",
              "source": "/DATA/AppData/$AppID/assets",
              "target": "/app/.assets"
            }
          ],
          "environment": [
            "TZ=$TZ",
            "NEXT_ENV_IMAGES_ALL_REMOTE=true",
            "PUBLIC_ORIGIN=http://127.0.0.1:3000",
            "PRISMA_DATABASE_URL=postgresql://example:example@teable-db:5432/teable-db",
            "BACKEND_CACHE_PROVIDER=redis",
            "BACKEND_CACHE_REDIS_URI=redis://default:password@teable-cache:6379/0"
          ],
          "networks": [
            "teable-network"
          ],
          "depends_on": {
            "teable-db": {
              "condition": "service_healthy"
            },
            "teable-cache": {
              "condition": "service_healthy"
            }
          }
        }
      }
    ],
    "top_level": {
      "name": "teable",
      "networks": {
        "teable-network": {
          "name": "teable-network",
          "driver": "bridge"
        }
      }
    },
    "networking": {
      "frontend": "selected-proxmox-bridge",
      "private_required": true,
      "private_creation": "automatic-create-if-missing",
      "private_address_allocation": "automatic-static-address-per-service",
      "service_discovery": "private-addresses-with-compose-service-host-aliases",
      "dependency_external_access": "disabled-unless-service-publishes-ports",
      "prompt_user_for_private_network": false
    },
    "storage": [
      {
        "id": "teable-volume-0",
        "service": "teable",
        "container_path": "/app/.assets",
        "mode": "managed-volume",
        "user_selectable": false,
        "backup": true,
        "shared_with_other_lxc": false,
        "source_path": null,
        "source_path_prompt": null
      },
      {
        "id": "teable-db-volume-0",
        "service": "teable-db",
        "container_path": "/var/lib/postgresql/data",
        "mode": "managed-volume",
        "user_selectable": false,
        "backup": true,
        "shared_with_other_lxc": false,
        "source_path": null,
        "source_path_prompt": null
      },
      {
        "id": "teable-cache-volume-0",
        "service": "teable-cache",
        "container_path": "/data",
        "mode": "host-bind",
        "user_selectable": true,
        "backup": false,
        "shared_with_other_lxc": true,
        "source_path": null,
        "source_path_prompt": "Host directory for teable-cache:/data"
      }
    ],
    "orchestration": {
      "reserve_vmids_atomically": 3,
      "start_order": [
        "teable-cache",
        "teable-db",
        "teable"
      ],
      "stop_order": [
        "teable",
        "teable-db",
        "teable-cache"
      ],
      "dependency_readiness": "compose-healthcheck-then-port-or-process-fallback",
      "rollback_on_failure": "remove-new-rootfs-preserve-created-persistent-volumes"
    },
    "installer_inputs": {
      "prompted": [
        "stack_name",
        "base_vmid",
        "rootfs_storage",
        "persistent_data_destinations",
        "frontend_bridge",
        "frontend_ipv4_mode"
      ],
      "automatic": [
        "dependent_vmids",
        "private_bridge",
        "private_subnet",
        "private_service_addresses",
        "compose_service_aliases",
        "generated_secrets",
        "dependency_start_and_stop_order"
      ],
      "generated_secrets": [
        {
          "id": "postgres-password",
          "strategy": "generate-cryptographically-random-at-install",
          "bindings": [
            {
              "service": "teable-db",
              "environment_variable": "POSTGRES_PASSWORD"
            }
          ]
        }
      ]
    }
  },
  "first_run": {
    "endpoints": [
      {
        "label": "Web UI",
        "scheme": "http",
        "port": 3000,
        "path": "/",
        "source": "compose-metadata"
      }
    ],
    "credentials": []
  },
  "proxmox": {
    "runtime": "native-oci-lxc",
    "technology_status": "proxmox-technology-preview",
    "defaults": {
      "unprivileged": true,
      "ostype": "auto-from-image",
      "cores": 2,
      "memory_mb": 512,
      "swap_mb": 512,
      "rootfs_size_gb": 8,
      "rootfs_storage": "local-lvm",
      "volume_storage": "local-lvm",
      "template_storage": "local",
      "bridge": "vmbr0",
      "ipv4": "dhcp",
      "firewall": true,
      "host_managed_network": true,
      "onboot": false,
      "features": [
        "nesting=1"
      ],
      "shutdown_timeout_seconds": 30
    },
    "image_metadata_policy": {
      "entrypoint": "import-from-oci-image",
      "cmd": "import-from-oci-image",
      "environment": "import-image-env-then-apply-compose-overrides",
      "user": "import-from-oci-image",
      "working_dir": "import-from-oci-image",
      "stop_signal": "import-from-oci-image"
    },
    "adaptations": [
      {
        "id": "imported-compose-source",
        "upstream_behavior": "The source definition deploys the complete Docker Compose application model.",
        "native_lxc_behavior": "The source model is preserved and remains blocked until every service option has a reviewed native Proxmox mapping.",
        "reason": "Catalog import must not imply runtime compatibility.",
        "behavioral_impact": "No automatic installation before review.",
        "validation": "pending-per-application"
      },
      {
        "id": "rolling-latest-image",
        "upstream_behavior": "A discovered Compose may pin a release tag or digest.",
        "native_lxc_behavior": "ProxMenux selects the same image repository with the latest tag for catalog installations.",
        "reason": "The automatic catalog intentionally offers rolling latest images; pinned versions belong to the future manual installer.",
        "behavioral_impact": "The installed release can be newer than the discovered Compose revision.",
        "validation": "pending-per-application"
      },
      {
        "id": "dedicated-lxc-network",
        "upstream_behavior": "Docker publishes selected container ports on the Docker host.",
        "native_lxc_behavior": "A reviewed native application will listen on its original container ports at a dedicated LXC address.",
        "reason": "A native LXC has its own address and does not require Docker port NAT.",
        "behavioral_impact": "Published ports are metadata; ProxMenux URLs use the matching container target port.",
        "validation": "pending-per-application"
      },
      {
        "id": "compose-shm-size",
        "upstream_behavior": "Compose sets the size of the container /dev/shm tmpfs.",
        "native_lxc_behavior": "ProxMenux mounts a native LXC tmpfs at /dev/shm with the same requested capacity.",
        "reason": "The OCI image runs directly as an LXC and therefore needs the equivalent Proxmox mount entry.",
        "behavioral_impact": "None expected.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-command",
        "upstream_behavior": "Compose replaces the image Cmd while retaining its Entrypoint.",
        "native_lxc_behavior": "ProxMenux reads the official OCI Entrypoint and combines it with the Compose command as the native LXC init command.",
        "reason": "Proxmox stores the effective OCI process as one entrypoint string.",
        "behavioral_impact": "None expected.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-privileged-mode",
        "upstream_behavior": "Compose selects whether the container runs in privileged mode.",
        "native_lxc_behavior": "ProxMenux uses a privileged LXC only after an explicit high-risk confirmation; otherwise it keeps the LXC unprivileged.",
        "reason": "The native OCI-LXC deployment must preserve the requested privilege level without silently weakening isolation.",
        "behavioral_impact": "A privileged LXC has weaker isolation from the Proxmox host.",
        "validation": "native-equivalent"
      },
      {
        "id": "compose-process-runtime",
        "upstream_behavior": "Compose can replace Entrypoint, User and WorkingDir and request an init process or interactive terminal.",
        "native_lxc_behavior": "ProxMenux applies the process overrides through native LXC init directives; lxc-init provides PID 1 supervision and the CT console provides terminal access.",
        "reason": "The OCI process must start with the same identity, command and working directory without Docker.",
        "behavioral_impact": "Compose stdin_open and tty become access through the Proxmox LXC console.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-healthcheck",
        "upstream_behavior": "Docker periodically executes the declared container healthcheck.",
        "native_lxc_behavior": "For a single-service LXC, ProxMenux translates HTTP localhost checks into a mandatory first-start service check.",
        "reason": "Proxmox has no persistent Docker health state, while the installer still must detect a failed first boot.",
        "behavioral_impact": "The check runs during installation rather than continuously after installation.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-cpu-priority",
        "upstream_behavior": "Docker cpu_shares sets a relative scheduling weight with 1024 as its neutral value.",
        "native_lxc_behavior": "ProxMenux converts the relative weight to Proxmox cpuunits with 100 as its neutral value and lets the user review it.",
        "reason": "Both settings express relative CPU priority on different scales.",
        "behavioral_impact": "Rounding and Proxmox minimum limits can slightly change very low weights.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-network-identity",
        "upstream_behavior": "Compose can set hostname, MAC address, extra hosts and attach a service to Docker networks.",
        "native_lxc_behavior": "ProxMenux applies hostname and MAC to net0, writes additional host aliases into the LXC and uses its dedicated bridge connection for single-service networks.",
        "reason": "A dedicated LXC has its own network namespace and does not need a Docker bridge per service.",
        "behavioral_impact": "host-gateway resolves to the IPv4 address of the selected Proxmox bridge.",
        "validation": "pending-per-application"
      },
      {
        "id": "compose-network-mode",
        "upstream_behavior": "Docker host mode removes Docker network isolation; bridge and default use a Docker-managed network.",
        "native_lxc_behavior": "The OCI process uses the dedicated LXC network namespace directly, so host, bridge and default all listen on the LXC address without Docker NAT.",
        "reason": "The LXC is the application host and already has its own address and port namespace.",
        "behavioral_impact": "host means the LXC host, never the Proxmox host; this preserves Proxmox network isolation.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-capabilities-and-sysctls",
        "upstream_behavior": "Compose can add Linux capabilities and set kernel parameters in the container network namespace.",
        "native_lxc_behavior": "ProxMenux validates requested capabilities against the native LXC capability set and writes namespaced network settings as lxc.sysctl directives.",
        "reason": "A native OCI-LXC already starts with the namespaced capability set; lxc.cap.keep would incorrectly discard unrelated required capabilities.",
        "behavioral_impact": "Host-global capabilities such as SYS_MODULE remain blocked until their host prerequisite is explicitly adapted.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "docker-engine-metadata",
        "upstream_behavior": "Compose labels annotate Docker objects and the json-file logging driver rotates Docker-managed logs.",
        "native_lxc_behavior": "Labels remain source metadata; Docker json-file settings are not applied because the OCI process runs directly under LXC.",
        "reason": "There is no Docker object or Docker json-file log behind a native OCI-LXC application.",
        "behavioral_impact": "Docker-only label consumers and Docker log-driver rotation do not exist in the native deployment.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-device-passthrough",
        "upstream_behavior": "Compose passes host character devices or requests an NVIDIA runtime GPU.",
        "native_lxc_behavior": "ProxMenux converts recognized device declarations to native Proxmox dev resources; NVIDIA profiles also inject compatible host driver libraries read-only.",
        "reason": "Native OCI-LXC does not execute Docker device or NVIDIA runtime hooks.",
        "behavioral_impact": "Hardware is exposed only after explicit user confirmation and host-path validation.",
        "validation": "not-requested-by-compose"
      },
      {
        "id": "compose-host-ipc",
        "upstream_behavior": "ipc: host shares the Docker host IPC namespace, commonly to avoid Docker's small default shared-memory allocation.",
        "native_lxc_behavior": "The application keeps the LXC IPC namespace and receives a configurable 1 GiB /dev/shm instead of sharing Proxmox host IPC.",
        "reason": "Processes in a single native LXC already share one IPC namespace; retaining isolation is safer than exposing host IPC.",
        "behavioral_impact": "The application cannot exchange IPC objects with processes on the Proxmox host.",
        "validation": "not-requested-by-compose"
      }
    ],
    "stack_environment_overrides": {
      "teable-cache": {
        "REDISCLI_AUTH": "${GENERATED_REDIS_PASSWORD}"
      },
      "teable": {
        "BACKEND_CACHE_REDIS_URI": "redis://default:${GENERATED_REDIS_PASSWORD}@teable-cache:6379/0"
      }
    },
    "stack_command_overrides": {
      "teable-cache": [
        "redis-server",
        "--requirepass",
        "${REDISCLI_AUTH}"
      ]
    },
    "stack_adaptation_notes": [
      "The malformed imported '--requirepass password' argument is translated to separate Redis command arguments, preserving its upstream entrypoint.",
      "Redis, its authenticated healthcheck and Teable share one generated password. The hook contains no secret; redis-cli reads REDISCLI_AUTH inside the LXC.",
      "The named internal Compose bridge becomes an automatically allocated private Proxmox bridge, avoiding fixed-name collisions.",
      "Redis readiness requires the exact PONG response, not only redis-cli exit status.",
      "Credentials persist in native LXC runtime metadata; administrator access can read them. Latest images and first boot remain unvalidated."
    ],
    "stack_references": [
      "https://github.com/teableio/teable",
      "https://redis.io/docs/latest/develop/tools/cli/"
    ],
    "installer_profile": {
      "stack_driver": "generic-multi-lxc-stack"
    }
  },
  "compatibility": {
    "automatic_install_candidate": true,
    "validated": false,
    "supported_compose_keys": [
      "cap_add",
      "command",
      "container_name",
      "cpu_shares",
      "deploy",
      "devices",
      "entrypoint",
      "environment",
      "extra_hosts",
      "healthcheck",
      "hostname",
      "image",
      "init",
      "ipc",
      "labels",
      "logging",
      "mac_address",
      "network_mode",
      "networks",
      "ports",
      "privileged",
      "restart",
      "runtime",
      "shm_size",
      "stdin_open",
      "stop_grace_period",
      "sysctls",
      "tty",
      "user",
      "volumes",
      "working_dir"
    ],
    "untranslated_blockers": [],
    "policy": "Single-image definitions are installable when every declared Compose option has a native Proxmox translation. Multi-image and unsupported runtime features remain blocked until their orchestrator or mapping is available."
  },
  "validation": {
    "schema": "passed-at-generation",
    "clean_install": "pending",
    "service_health": "pending",
    "restart_persistence": "pending",
    "backup_restore": "pending",
    "update_preserves_data": "pending"
  },
  "lifecycle": {
    "update_strategy": "resolve-latest-image-then-apply-reviewed-native-lxc-update",
    "registry_state": {
      "resolved_architecture": null,
      "resolved_digest": null,
      "image_version_label": null,
      "image_created": null
    },
    "change_detection": "compare-compose-sha256-and-resolved-latest-image-digest",
    "automatic_unattended_updates": false,
    "dependency_lifecycle": {
      "implementation": "proxmox-hookscript",
      "trigger": "main-lxc-pre-start",
      "waits_for_dependency_healthchecks": true,
      "stops_dependencies_with_main": false
    }
  }
}