TZ=Europe/Tallinn ühtlustus; qdrant telemeetria väljas; postgis-pgvector pilt

main/docker-compose.yml

@@ -22,7 +22,7 @@ services:
       - ai_network
 
   postgres:
-    image: kartoza/postgis:16
+    image: kartoza-postgis-pgvector:16
     container_name: postgres_postgis
     restart: always
     ports:
@@ -42,8 +42,8 @@ services:
       - /backups/docker/postgres:/backups
       - /etc/localtime:/etc/localtime
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ai_user -d research_db"]
-      interval: 10s
+      test: ["CMD-SHELL", "pg_isready -h 127.0.0.1 -p 5432 -U ai_user -d research_db"]
+      interval: 60s
       timeout: 5s
       retries: 5
     networks:
@@ -77,13 +77,14 @@ services:
 
   weaviate:
     mem_limit: 4g
-    image: semitechnologies/weaviate:1.28.0
+    image: semitechnologies/weaviate:1.39.2
     container_name: weaviate
     restart: always
     ports:
       - "8080:8080"
       - "50051:50051"
     environment:
+      TZ: Europe/Tallinn
       QUERY_DEFAULTS_LIMIT: 25
       AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: 'true'
       PERSISTENCE_DATA_PATH: '/var/lib/weaviate'
@@ -91,6 +92,8 @@ services:
       CLUSTER_HOSTNAME: 'weaviate'
       LANG: C.UTF-8
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
+      - /etc/localtime:/etc/localtime:ro
       - weaviate_data:/var/lib/weaviate
       - /backups/docker/weaviate:/backups
       - /etc/localtime:/etc/localtime
@@ -131,11 +134,13 @@ services:
     ports:
       - "8887:8888"
     environment:
+      - TZ=Europe/Tallinn
       - JUPYTER_ENABLE_LAB=yes
       - JUPYTER_TOKEN=ai_server_2026
       - LANG=C.UTF-8
       #- TZ=Europe/Tallinn
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - /data/docker/jupyter/notebooks:/home/jovyan/work
       - /data/docker/jupyter/data:/home/jovyan/data
       - jupyter_data:/home/jovyan/.jupyter

main/images/postgis-pgvector/Dockerfile

@@ -0,0 +1,4 @@
+FROM kartoza/postgis:16
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends postgresql-16-pgvector \
+    && rm -rf /var/lib/apt/lists/*

main/qdrant-config.yaml

@@ -8,3 +8,6 @@ storage:
 
 service:
   max_request_size_mb: 256
+
+# Keela anonüümne telemeetria (telemetry.qdrant.io ei ole siit ühendatav)
+telemetry_disabled: true

secondary/docker-compose.yml

@@ -29,6 +29,7 @@ services:
     ports:
       - "127.0.0.1:9101:80"
     environment:
+      - TZ=Europe/Tallinn
       - LANG=C.UTF-8
     volumes:
       - /etc/localtime:/etc/localtime:ro

third/browserless/docker-compose.yml

@@ -77,6 +77,8 @@ services:
       - CONNECTION_TIMEOUT=60000
       - TZ=Europe/Tallinn
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
+      - /etc/localtime:/etc/localtime:ro
       - /etc/localtime:/etc/localtime
     networks:
       - ai_network

third/drupal/bussikeskus/docker-compose.yml

@@ -6,6 +6,7 @@ services:
     container_name: ts-bussikeskus
     hostname: bussikeskus-ohmu
     environment:
+      - TZ=Europe/Tallinn
       - TS_AUTHKEY=tskey-auth-k1fycT38sK11CNTRL-8qi5GExmmdhJNghogtHfdhxVfbmc1zqjJ
       - "TS_EXTRA_ARGS=--advertise-tags=tag:container --reset"
       - TS_SERVE_CONFIG=/config/bussikeskus.json
@@ -13,6 +14,8 @@ services:
       - TS_USERSPACE=false
       - LANG=C.UTF-8
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
+      - /etc/localtime:/etc/localtime:ro
       - ${PWD}/state:/var/lib/tailscale
       - ${PWD}/config:/config
     devices:
@@ -27,9 +30,12 @@ services:
     image: registry.odamus.com/drupal/drupal_7_rong:latest
     container_name: drupal_bussikeskus
     network_mode: service:ts-network
+    environment:
+      - TZ=Europe/Tallinn
     depends_on:
       - ts-network
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - html:/var/www/html
       - backups:/root/drush-backups
       - /backups/docker/drupal/bussikeskus:/backups

third/drupal/mustikas/docker-compose.yml

@@ -10,6 +10,7 @@ services:
     container_name: ts-mustikas
     hostname: mustikas
     environment:
+      - TZ=Europe/Tallinn
       - TS_AUTHKEY=tskey-auth-kRL2zfvzRs11CNTRL-LGBy2N3nDNDU2d5ot7jBNDLBw54FsrK8U
       - "TS_EXTRA_ARGS=--advertise-tags=tag:container --reset"
       - TS_SERVE_CONFIG=/config/mustikas.json
@@ -17,6 +18,8 @@ services:
       - TS_USERSPACE=false
       - LANG=C.UTF-8
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
+      - /etc/localtime:/etc/localtime:ro
       - ${PWD}/state:/var/lib/tailscale
       - ${PWD}/config:/config
     devices:
@@ -31,11 +34,14 @@ services:
     image: registry.odamus.com/drupal/drupal_7_rong:latest
     container_name: drupal_mustikas
     network_mode: service:ts-network
+    environment:
+      - TZ=Europe/Tallinn
     depends_on:
       - ts-network
     #ports:
     #  - "127.0.0.1:8008:80"
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - html:/var/www/html
       - backups:/root/drush-backups
       - /backups/docker/drupal/mustikas:/backups

third/drupal/see1/docker-compose.yml

@@ -10,6 +10,7 @@ services:
     container_name: ts-see1
     hostname: see1
     environment:
+      - TZ=Europe/Tallinn
       - TS_AUTHKEY=tskey-auth-k8tw1o22ag11CNTRL-CVRECjx9BcE2zzsxq4VDcET1KzxcbiaAA
       - "TS_EXTRA_ARGS=--advertise-tags=tag:container --reset"
       - TS_SERVE_CONFIG=/config/see1.json
@@ -17,6 +18,8 @@ services:
       - TS_USERSPACE=false
       - LANG=C.UTF-8
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
+      - /etc/localtime:/etc/localtime:ro
       - ${PWD}/state:/var/lib/tailscale
       - ${PWD}/config:/config
     devices:
@@ -31,9 +34,12 @@ services:
     image: drupal:9
     container_name: drupal_see1
     network_mode: service:ts-network
+    environment:
+      - TZ=Europe/Tallinn
     depends_on:
       - ts-network
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - modules:/opt/drupal/web/modules
       - profile:/opt/drupal/web/profiles
       - theme:/opt/drupal/web/themes

third/n8n/docker-compose.yml

@@ -5,6 +5,7 @@ services:
     image: tailscale/tailscale:latest
     container_name: ts-n8n
     environment:
+      - TZ=Europe/Tallinn
       - TS_AUTHKEY=tskey-auth-kS1DGBXc3H11CNTRL-UuCbbRQBEBBvrQhXreS7BBVwmztVyNSz
       - "TS_EXTRA_ARGS=--advertise-tags=tag:container --reset"
       - TS_SERVE_CONFIG=/config/n8n.json
@@ -12,6 +13,7 @@ services:
       - TS_USERSPACE=false
       - LANG=C.UTF-8
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
       - /opt/docker-compose/third/n8n/state:/var/lib/tailscale
       - /opt/docker-compose/third/n8n/config:/config
       - /etc/localtime:/etc/localtime:ro
@@ -32,6 +34,7 @@ services:
     ports:
       - "5678:5678"
     environment:
+      TZ: Europe/Tallinn
       GENERIC_TIMEZONE: "Europe/Tallinn"
       N8N_PORT: "5678"
       N8N_PROTOCOL: "http"
@@ -56,6 +59,7 @@ services:
     restart: unless-stopped
     #user: root
     environment:
+      - TZ=Europe/Tallinn
       - N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679
       - N8N_RUNNERS_AUTH_TOKEN=super_strong_random_token_change_this_2026
       - N8N_RUNNERS_TASK_TIMEOUT=300
@@ -82,10 +86,12 @@ services:
     restart: unless-stopped
     user: root
     environment:
+      - TZ=Europe/Tallinn
       - PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
     volumes:
       - /data/docker/playwright-browsers:/ms-playwright
       - /etc/localtime:/etc/localtime:ro
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
     ports:
       - "3003:3003"
     command: >

third/server/anythingllm/docker-compose.yml

@@ -14,6 +14,7 @@ services:
       - /backups/docker/anythingllm:/backups
       - /etc/localtime:/etc/localtime:ro
     environment:
+      - TZ=Europe/Tallinn
       # Üldine
       - NODE_ENV=production
       - PORT=3001

third/server/languagetool/docker-compose.yml

@@ -7,3 +7,6 @@ services:
     environment:
       - TZ=Europe/Tallinn
     restart: unless-stopped
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro

third/server/mcp-filesystem/docker-compose.yml

@@ -8,6 +8,7 @@ services:
     environment:
       - TZ=Europe/Tallinn
     volumes:
+      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
       - /data/mcp-filesystem:/projects/data
       - /backups/docker/mcp-fileserver:/backups
       - /etc/localtime:/etc/localtime:ro

third/server/odysseus/docker-compose.yml

@@ -59,8 +59,10 @@ services:
     ports:
       - "127.0.0.1:8100:8000"
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - chromadb-data:/chroma/chroma
     environment:
+      - TZ=Europe/Tallinn
       - ANONYMIZED_TELEMETRY=FALSE
     networks:
       - main_ai_network
@@ -84,9 +86,11 @@ services:
     ports:
       - "127.0.0.1:8088:8080"
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - searxng-data:/etc/searxng
       - ./repo/config/searxng/settings.yml:/tmp/searxng-settings.yml.template:ro,z
     environment:
+      - TZ=Europe/Tallinn
       - SEARXNG_BASE_URL=http://localhost:8080/
     cap_drop:
       - ALL
@@ -111,10 +115,12 @@ services:
     ports:
       - "127.0.0.1:8091:80"
     volumes:
+      - /etc/localtime:/etc/localtime:ro
       - ntfy-cache:/var/cache/ntfy
       - ./ntfy/server.yml:/etc/ntfy/server.yml:ro
       - ./ntfy/data:/var/lib/ntfy
     environment:
+      - TZ=Europe/Tallinn
       - NTFY_BASE_URL=https://ohmu.tail20e23.ts.net:8091
     networks:
       - main_ai_network

third/server/redis/docker-compose.yml

@@ -4,6 +4,8 @@ services:
   redis:
     image: redis:7-alpine
     container_name: redis
+    environment:
+      - TZ=Europe/Tallinn
     ports:
       - "6379:6379"
     restart: unless-stopped