All services: pass TZ to a container only when its image uses it

services/arcane/compose.yaml

@@ -61,6 +61,7 @@ services:
       - LOG_LEVEL=info # Optional
       - LOG_JSON=false # Optional
       - OIDC_ENABLED=false # Optional
+      - TZ=${TZ}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ./${SERVICE}-data:/app/data

services/beszel-hub/compose.yaml

@@ -55,7 +55,6 @@ services:
     environment:
       - PUID=1000
       - PGID=1000
-      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/beszel_data:/beszel_data  # Work directory for Beszel Hub - you may need to change the path
     depends_on:

services/booklore/compose.yaml

@@ -59,6 +59,7 @@ services:
       - DATABASE_USERNAME=${MYSQL_USER}                          # Must match MYSQL_USER defined in the mariadb container
       - DATABASE_PASSWORD=${MYSQL_PASSWORD}               #  Use a strong password; must match MYSQL_PASSWORD defined in the mariadb container 
       - SWAGGER_ENABLED=false                               # Swagger UI (API docs).
+      - TZ=${TZ}
     volumes:
       - ./data:/app/data
       - ./books:/books1       # Book library folder — point to one of your collections

services/coder/compose.yaml

@@ -56,6 +56,7 @@ services:
       CODER_PG_CONNECTION_URL: "postgresql://${POSTGRES_USER:-username}:${POSTGRES_PASSWORD:-password}@localhost/${POSTGRES_DB:-coder}?sslmode=disable"
       CODER_HTTP_ADDRESS: "0.0.0.0:7080"
       CODER_ACCESS_URL: "${CODER_ACCESS_URL}"
+      TZ: ${TZ}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./${SERVICE}-data/coder-home:/home/coder

services/convertx/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE} # Name for local container management
     environment:
       - JWT_SECRET=aLongAndSecretStringUsedToSignTheJSONWebToken1234 # will use randomUUID() if unset
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data:/app/data
     depends_on:

services/copyparty/compose.yaml

@@ -80,6 +80,7 @@ services:
     # enabling mimalloc by replacing "NOPE" with "2" will make some stuff twice as fast, but everything will use twice as much ram:
     environment:
       LD_PRELOAD: /usr/lib/libmimalloc-secure.so.NOPE
+      TZ: ${TZ}
     stop_grace_period: 15s  # thumbnailer is allowed to continue finishing up for 10s after the shutdown signal
     healthcheck:
       # hide it from logs with "/._" so it matches the default --lf-url filter 

services/dockge/compose.yaml

@@ -57,6 +57,7 @@ services:
       - DOCKGE_STACKS_DIR=${STACKS_DIR} # Tell Dockge where your stacks directory is
       - PUID=${PUID} # Set the stack file/dir ownership to this user
       - PGID=${PGID} # Set the stack file/dir ownership to this group
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/app/config:/app/data
       - /var/run/docker.sock:/var/run/docker.sock

services/dockhand/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE} # Name for local container management
     environment:
       - HOST_DATA_DIR=/app/data
+      - TZ=${TZ}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ./dockhand-data:/app/data # Data directory for Dockhand - you may need to change the path

services/docmost/compose.yaml

@@ -57,6 +57,7 @@ services:
       APP_SECRET: ${APP_SECRET:?Set APP_SECRET in .env}
       DATABASE_URL: 'postgresql://docmost:${DB_PASSWORD:?Set DB_PASSWORD in .env}@localhost:5432/docmost?schema=public'
       REDIS_URL: 'redis://localhost:6379'
+      TZ: ${TZ}
     volumes:
       - ./${SERVICE}-data/docmost:/app/data/storage
     depends_on:

services/dozzle/compose.yaml

@@ -52,6 +52,8 @@ services:
     image: ${IMAGE_URL} # Image to be used
     network_mode: service:tailscale # Sidecar configuration to route ${SERVICE} through Tailscale
     container_name: app-${SERVICE} # Name for local container management
+    environment:
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/dozzle-data:/data
       - /var/run/docker.sock:/var/run/docker.sock:ro

services/espocrm/compose.yml

@@ -78,6 +78,7 @@ services:
       - ESPOCRM_ADMIN_PASSWORD=${ESPOCRM_ADMIN_PASSWORD}
       - ESPOCRM_SITE_URL=${ESPOCRM_SITE_URL}
       - ESPOCRM_DEFAULT_CURRENCY=${ESPOCRM_DEFAULT_CURRENCY}
+      - TZ=${TZ}
     volumes: # EspoCRM 10 and later only need these directories mounted, not all of /var/www/html.
       - ./${SERVICE}-data/data:/var/www/html/data
       - ./${SERVICE}-data/custom:/var/www/html/custom

services/fossflow/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE} # Name for local container management
     environment:
       - PUBLIC_URL=https://fossflow.<YOUR-TS-DOMAIN>.ts.net
+      - TZ=${TZ}
     depends_on:
       tailscale:
         condition: service_healthy

services/glance/compose.yaml

@@ -52,6 +52,8 @@ services:
     image: ${IMAGE_URL} # Image to be used
     network_mode: service:tailscale # Sidecar configuration to route ${SERVICE} through Tailscale
     container_name: app-${SERVICE} # Name for local container management
+    environment:
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/config:/app/config # Make sure to add the files glance.yml and home.yml to the config folder. See: (https://github.com/glanceapp/docker-compose-template/tree/main/root/config)
       - ./${SERVICE}-data/assets:/app/assets # Make sure to add the file user.css to the assets folder. See: (https://github.com/glanceapp/docker-compose-template/tree/main/root/assets)

services/gotify/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE} # Name for local container management
     environment:
       - GOTIFY_DEFAULTUSER_PASS=admin
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/app/data:/app/data
     depends_on:

services/homebox/compose.yaml

@@ -56,7 +56,6 @@ services:
     environment:
       - PUID=1000
       - PGID=1000
-      - TZ=${TZ}
       - HBOX_AUTH_API_KEY_PEPPER=${HBOX_AUTH_API_KEY_PEPPER:?Set HBOX_AUTH_API_KEY_PEPPER in .env}
     volumes:
       - ./${SERVICE}-data:/data

services/homepage/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE} # Name for local container management
     environment:
       - HOMEPAGE_ALLOWED_HOSTS=homepage.${TAILNET_NAME}.ts.net
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/config:/app/config
       - /var/run/docker.sock:/var/run/docker.sock:ro # optional, for docker integrations

services/memos/compose.yaml

@@ -56,6 +56,7 @@ services:
       MEMOS_PORT: 5230
       MEMOS_DRIVER: sqlite
       MEMOS_INSTANCE_URL: https://memos.<YOUR_TS_DOMAIN>.ts.net # Update with your Tailscale domain
+      TZ: ${TZ}
     volumes:
       - ./${SERVICE}-data:/var/opt/memos
     depends_on:

services/miniflux/compose.yaml

@@ -59,6 +59,7 @@ services:
       - ADMIN_USERNAME=${ADMIN_USERNAME}
       - ADMIN_PASSWORD=${ADMIN_PASSWORD}
       - BASE_URL=https://${SERVICE}.${TAILNET_NAME} # Change to your tailnet name
+      - TZ=${TZ}
     depends_on:
       tailscale:
         condition: service_healthy

services/navidrome/compose.yaml

@@ -57,7 +57,6 @@ services:
       # ND_LOGLEVEL: debug
       - PUID=1000
       - PGID=1000
-      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/data:/data
       - /path/to/your/music/folder:/music:ro # Adjust to your liking

services/newwallpaperwhodis/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE}
     environment:
       - NODE_ENV=production
+      - TZ=${TZ}
     volumes:
       # Map the data folder where the SQLite DB or structured metadata will live
       - ./data:/app/data

services/next-explorer/compose.yaml

@@ -67,6 +67,7 @@ services:
       # Optional host UID/GID mapping
       - PUID=${PUID} # Change according to your customization if needed
       - PGID=${PGID} # Change according to your customization if needed
+      - TZ=${TZ}
     volumes:
       - ./config:/config
       - ./cache:/cache

services/portainer/compose.yaml

@@ -55,7 +55,6 @@ services:
     environment:
       - PUID=1000
       - PGID=1000
-      - TZ=${TZ}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ./${SERVICE}-data/portainer_data:/data

services/portracker/compose.yaml

@@ -60,6 +60,7 @@ services:
       - /var/run/docker.sock:/var/run/docker.sock:ro
     environment:
       - DATABASE_PATH=/data/portracker.db
+      - TZ=${TZ}
     depends_on:
       tailscale:
         condition: service_healthy

services/radicale/compose.yaml

@@ -54,6 +54,7 @@ services:
     container_name: app-${SERVICE} # Name for local container management
     environment:
       - TAKE_FILE_OWNERSHIP=true
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/app/data:/data
       - ./${SERVICE}-data/config/radicale.conf:/config/radicale.conf

services/rustdesk-server/compose.yml

@@ -58,7 +58,6 @@ services:
     environment:
       - PUID=1000
       - PGID=1000
-      - TZ=${TZ}
       - ALWAYS_USE_RELAY=${ALWAYS_USE_RELAY}
     depends_on:
       tailscale:
@@ -77,7 +76,6 @@ services:
     environment:
       - PUID=1000
       - PGID=1000
-      - TZ=${TZ}
     network_mode: service:tailscale # Sidecar configuration to route ${SERVICE} through Tailscale
     # Healthcheck: none possible. The image contains only the hbbs and hbbr binaries, with no shell, HTTP client, or health command.
     restart: always

services/speedtest-tracker/compose.yaml

@@ -55,6 +55,7 @@ services:
     environment:
       - PUID=1000
       - PGID=1000
+      - TZ=${TZ}
       - APP_KEY=${APP_KEY:?Set APP_KEY in .env}
       - DB_CONNECTION=sqlite
       #- APP_NAME=

services/stirlingpdf/compose.yaml

@@ -56,6 +56,7 @@ services:
       - DOCKER_ENABLE_SECURITY=false
       - INSTALL_BOOK_AND_ADVANCED_HTML_OPS=false
       - LANGS=en_GB
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/trainingData:/usr/share/tessdata # Required for extra OCR languages
       - ./${SERVICE}-data/extraConfigs:/configs

services/sure/compose.yaml

@@ -74,6 +74,7 @@ services:
       - OIDC_CLIENT_ID=${OIDC_CLIENT_ID} # Optional: OIDC client ID for authentication. Required if OIDC_ISSUER is set.
       - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET} # Optional: OIDC client secret for authentication. Required if OIDC_ISSUER is set.
       - OIDC_REDIRECT_URI=${OIDC_REDIRECT_URI} # Optional: OIDC redirect URI for authentication. Required if OIDC_ISSUER is set.
+      - TZ=${TZ}
       # BINDING: "::"  # Uncomment for IPv6 dual-stack inside the container
     depends_on:
       tailscale:
@@ -116,6 +117,7 @@ services:
       - DB_PORT=${DB_PORT:-5432}
       - REDIS_URL=${REDIS_URL:-redis://172.28.0.11:6379/1}
       - OPENAI_ACCESS_TOKEN=${OPENAI_ACCESS_TOKEN} # NOTE: enabling OpenAI will incur costs when you use AI-related features in the app (chat, rules).  Make sure you have set appropriate spend limits on your account before adding this.
+      - TZ=${TZ}
 
   db:
     image: postgres:16

services/technitium/compose.yaml

@@ -80,6 +80,7 @@ services:
       - DNS_SERVER_FORWARDERS=${DNS_SERVER1},${DNS_SERVER2} #Comma separated list of forwarder addresses.
       # - DNS_SERVER_FORWARDER_PROTOCOL=Tcp #Forwarder protocol options: Udp, Tcp, Tls, Https, HttpsJson.
       # - DNS_SERVER_LOG_USING_LOCAL_TIME=true #Enable this option to use local time instead of UTC for logging.
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/app/config:/config
     depends_on:

services/tracktor/compose.yaml

@@ -56,6 +56,7 @@ services:
       - TRACKTOR_DEMO_MODE=false
       - FORCE_DATA_SEED=false
       - CORS_ORIGINS=https://${SERVICE}.${TS_TAILNET}.ts.net # Adjust as needed for your setup
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data:/data
     depends_on:

services/uptime-kuma/compose.yaml

@@ -52,6 +52,8 @@ services:
     image: ${IMAGE_URL} # Image to be used
     network_mode: service:tailscale # Sidecar configuration to route ${SERVICE} through Tailscale
     container_name: app-${SERVICE} # Name for local container management
+    environment:
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/uptime-kuma-data:/app/data # uptime-kuma data/configuration folder
       - /var/run/docker.sock:/var/run/docker.sock:ro # Read-only access to the docker.sock

services/vaultwarden/compose.yaml

@@ -55,6 +55,7 @@ services:
     environment:
       # DOMAIN: "https://vaultwarden.example.com"  # required when using a reverse proxy; your domain; vaultwarden needs to know it's https to work properly with attachments
       SIGNUPS_ALLOWED: "true" # Deactivate this with "false" after you have created your account so that no strangers can register
+      TZ: ${TZ}
     volumes:
       - ./${SERVICE}-data/vw-data:/data
     depends_on:

services/xwiki/compose.yml

@@ -63,6 +63,7 @@ services:
       - DB_PASSWORD=${DB_PASSWORD}
       - DB_DATABASE=${DB_DATABASE}
       - DB_HOST=db-${SERVICE}
+      - TZ=${TZ}
     volumes:
       - ./${SERVICE}-data/xwiki:/usr/local/xwiki
     healthcheck: