Version 1.18

v1.18.4

Remove security_opt:no-new-privileges from Fileflows since it prevents it from working correctly (cannot install Dockermods)

v1.18.3

Docker daemon

Moved docker_daemon_options_base out of the playbook’s play-level vars: and into role defaults so it can finally be overridden from inventory/group_vars/all/. Previously, defining it in your group vars had no effect because play-level vars outrank group vars in Ansible’s precedence ladder.

To customize Docker daemon settings (log driver, log rotation, address pools, etc.), set docker_daemon_options_base in any file under inventory/group_vars/all/. The dict is replaced wholesale — not deep-merged — so copy any keys you want to keep from the default in roles/hmsdocker/defaults/main/hmsd_advanced.yml.

v1.18.2

Traefik

Add HTTP/3 (QUIC over UDP) support to Traefik. It’s automatically active whenever SSL is enabled — no configuration required.

• The websecure entrypoint advertises HTTP/3 via the Alt-Svc header; compatible browsers upgrade transparently and fall back to HTTP/2 over TCP if UDP/443 is unreachable.
• The Traefik container now exposes UDP 443 in addition to TCP 443. If you want HTTP/3 reachable from outside your LAN, forward UDP/443 on your router (in addition to TCP/443) and ensure your host firewall allows it.

v1.18.1

No new (useful) features, adds a compatability shim layer for variable renames/migrations to make upcoming releases much easier.

Installs community.docker and community.general ansible collections by default

Add AI disclaimer to bottom of GitHub readme.

v1.18.0

New Containers

• Scrutiny is now available to monitor drive SMART status
• Beszel is now available for host monitoring

Removed container

Removed Huntarr since it has been removed from everywhere

Container changes

Pin Uptime-Kuma to tag 2 since the latest tag was deprecated.

Note: this will increase start time of Uptime-kuma since it needs to migrate the data

Other changes

Add preflight checks and argument_spec files to outline variables

Add/improve healthchecks for containers

Add security_opt: no-new-privileges:true to all containers

Traefik:

• If using SSL/TLS, the websecure entrypoint is now the default, this will halve the amount of routers for Traefik

Media servers (Plex, Emby, Jellyfin):

• Transcode directories can now use tmpfs, add the following to plex.yml if they do not exist:
  • hmsdocker_transcode_tmpfs_enabled: true :: this will enable tmpfs
  • hmsdocker_transcode_tmpfs_size: 4g :: this defines the max size, 4g is the default

Documentation updates