Swap Photopea -> GIMP (lscr.io/linuxserver/gimp); remove broken photopea container/basic-auth on media tools

docker-compose.yml

@@ -169,16 +169,25 @@ services:
     <<: *logging
 
   # ----- Tool containers (profile "tools") -----
-  # Images per Obsidian blueprint: Photopea shtse8, KdenLive + Audacity via
-  # LinuxServer standalone apps. Host ports reassigned (8081 taken by airflow,
-  # 3000 taken by a NixOS service) -> video 8083, audio 8084.
-  photopea:
-    image: ${IMAGE_PHOTOPEA:-shtse8/photopea:1.0}
+  # Images per Obsidian blueprint: media tools via LinuxServer standalone apps.
+  # Host ports reassigned (8081 taken by airflow, 3000 taken by a NixOS
+  # service) -> video 8083, audio 8084, gimp 8087.
+  gimp:
+    image: ${IMAGE_GIMP:-lscr.io/linuxserver/gimp:latest}
     profiles: ["tools"]
     restart: unless-stopped
+    environment:
+      PUID: 1000
+      PGID: 100
+      TZ: Australia/Melbourne
+      DARK_MODE: "true"
     ports:
-      - "8487:8887"
+      - "8087:3000"
+    volumes:
+      - gimp-config:/config
+      - /mnt/data/family-home-lab/shared-media:/media:ro
     networks: [fhl-net]
+    shm_size: 1gb
     <<: *logging
 
   video-editor:
@@ -217,6 +226,7 @@ volumes:
   pgdata:
   redisdata:
   rabbitmqdata:
+  gimp-config:
   video-config:
   audio-config: