fix: disable automatic vikunja icon changes (pride logo)

packages/infra/docker/config.yml

@@ -0,0 +1,2 @@
+service:
+  allowiconchanges: false

packages/infra/docker/vikunja-compose.yml

@@ -0,0 +1,42 @@
+services:
+  db:
+    image: postgres:15-alpine
+    environment:
+      POSTGRES_USER: vikunja
+      POSTGRES_PASSWORD: mintel_vikunja_DB_2026!
+      POSTGRES_DB: vikunja
+    volumes:
+      - ./data/db:/var/lib/postgresql/data
+    restart: always
+
+  vikunja:
+    image: vikunja/vikunja:latest
+    environment:
+      VIKUNJA_DATABASE_HOST: db
+      VIKUNJA_DATABASE_PASSWORD: mintel_vikunja_DB_2026!
+      VIKUNJA_DATABASE_TYPE: postgres
+      VIKUNJA_DATABASE_USER: vikunja
+      VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_PUBLICURL: https://tasks.infra.mintel.me/
+      VIKUNJA_SERVICE_ENABLEREGISTRATION: true
+      VIKUNJA_SERVICE_ALLOWICONCHANGES: false
+      VIKUNJA_SERVICE_JWTSECRET: d2FzaHViZXJzZWN1cmVqd3RzZWNyZXQyMDI2IQ==
+    volumes:
+      - ./data/files:/app/vikunja/files
+      - ./config.yml:/etc/vikunja/config.yml:ro
+    depends_on:
+      - db
+    restart: always
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.vikunja.rule=Host(`tasks.infra.mintel.me`)"
+      - "traefik.http.routers.vikunja.entrypoints=websecure"
+      - "traefik.http.routers.vikunja.tls.certresolver=le"
+      - "traefik.http.services.vikunja.loadbalancer.server.port=3456"
+    networks:
+      - default
+      - infra
+
+networks:
+  infra:
+    external: true

packages/infra/scripts/mintel-optimizer.sh

@@ -56,7 +56,17 @@ fi
 # 3. Global Docker Pruning
 echo "🧹 Pruning Docker resources..."
 docker system prune -af --filter "until=24h"
+
+echo "🧹 Pruning BuildKit builder containers and cache..."
+# Remove orphaned buildkit containers to release volume locks
+docker rm -f $(docker ps -aq --filter name=buildx_buildkit_builder) 2>/dev/null || true
+docker builder prune -af || true
+docker buildx prune -af || true
+
+echo "🧹 Pruning Docker volumes..."
 docker volume prune -f
+# Force remove dangling buildx state volumes that might bypass standard prune
+docker volume ls -q | grep buildx | xargs -r docker volume rm 2>/dev/null || true
 
 echo "✅ Optimization complete!"
 df -h /mnt/HC_Volume_104796416