mg/homeserver
1
0
Fork 0
Code Issues 1 Pull requests 3 Activity Actions

docker: set tags explicit and remove digests (#750)

Browse source 
Reviewed-on: #750
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>
This commit is contained in:
Michael Grote 2024-02-06 20:46:14 +01:00 committed by mg
parent 90fa6e060d
commit e722f20c65
13 changed files with 30 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docker-compose/httpd/docker-compose.yml.j2
View file

@ -2,7 +2,7 @@ version: '3'
services: services:
httpd-registry: httpd-registry:
container_name: "httpd-registry" container_name: "httpd-registry"
image: "registry.mgrote.net/httpd:master@sha256:5030d128b9470ef172ad528b61bea9d9de7320f32770b826199c6d64ebaf3478" image: "registry.mgrote.net/httpd:v1.0.92"
restart: always restart: always
volumes: volumes:
- uploads:/usr/local/apache2/htdocs/ - uploads:/usr/local/apache2/htdocs/
@ -17,7 +17,7 @@ services:
python-api-server: python-api-server:
container_name: httpd-api container_name: httpd-api
image: "registry.mgrote.net/python-api-server:latest@sha256:5c0a98c2acfbfadeaeba85598c2da701a37250aedddee1045a0047c81e57d79f" image: "registry.mgrote.net/python-api-server:v1.0.120"
restart: always restart: always
ports: ports:
- "5040:5000" - "5040:5000"

2
docker-compose/mail-relay/docker-compose.yml.j2
View file

@ -1,7 +1,7 @@
version: '3.3' version: '3.3'
services: services:
postfix: postfix:
image: "registry.mgrote.net/postfix:master@sha256:84555f8d08552afe58c1f05ea341f45073113694bb211277b532a192b7ddd0e4" image: "registry.mgrote.net/postfix:v1.0.137"
container_name: mail-relay container_name: mail-relay
restart: always restart: always
ports: ports:

6
docker-compose/miniflux/docker-compose.yml.j2
View file

@ -3,7 +3,7 @@ services:
######## Miniflux ######## ######## Miniflux ########
miniflux: miniflux:
container_name: "mf-frontend" container_name: "mf-frontend"
image: "ghcr.io/miniflux/miniflux:2.0.51@sha256:9f3bca6a95428c04c8fb54ee723a5f69b9e419b0bf5dfd7a4d70dfb0414d60f1" image: "ghcr.io/miniflux/miniflux:2.0.51"
restart: always restart: always
depends_on: depends_on:
- mf-db16 - mf-db16
@ -34,7 +34,7 @@ services:
######## Postgres ######## ######## Postgres ########
mf-db16: mf-db16:
container_name: "mf-db16" container_name: "mf-db16"
image: "postgres:16.1@sha256:4d1b17af6f66b852ee3a721f6691a2ca7352f9d28f570a6a48cee4ebe646b2fd" image: "postgres:16.1"
restart: always restart: always
environment: environment:
POSTGRES_USER: miniflux POSTGRES_USER: miniflux
@ -62,7 +62,7 @@ services:
MF_API_URL: https://miniflux.mgrote.net/v1 MF_API_URL: https://miniflux.mgrote.net/v1
MF_SLEEP: 600 MF_SLEEP: 600
#MF_DEBUG: 1 #MF_DEBUG: 1
image: "registry.mgrote.net/miniflux-filter:latest@sha256:b75f7c6913dd1954f62ce393110f847c3c04e94fccdfac963fcb54085349c6f4" image: "registry.mgrote.net/miniflux-filter:v1.0.107"
volumes: volumes:
- ./filter.txt:/data/filter.txt - ./filter.txt:/data/filter.txt
networks: networks:

2
docker-compose/navidrome/docker-compose.yml.j2
View file

@ -3,7 +3,7 @@ services:
######## navidrome-mg ######## ######## navidrome-mg ########
navidrome-mg: navidrome-mg:
container_name: "navidrome-mg" container_name: "navidrome-mg"
image: "deluan/navidrome:0.51.0@sha256:efd0b899e74db3e5063a8c773cfe7d103b0b61ce7021a50f2f9da189591b9dc7" image: "deluan/navidrome:0.51.0"
restart: always restart: always
environment: environment:
ND_LOGLEVEL: info ND_LOGLEVEL: info

8
docker-compose/nextcloud/docker-compose.yml.j2
View file

@ -2,7 +2,7 @@ version: '3.3'
services: services:
######## Datenbank ######## ######## Datenbank ########
nextcloud-db: nextcloud-db:
image: "mariadb:11.2.2@sha256:fee2ec0d2b4f15f21aa1f88305d4085fdc0a9bb7242a1b4409f3002c6160d05b" image: "mariadb:11.2.2"
container_name: nextcloud-db container_name: nextcloud-db
command: --transaction-isolation=READ-COMMITTED --log-bin=ROW --innodb_read_only_compressed=OFF command: --transaction-isolation=READ-COMMITTED --log-bin=ROW --innodb_read_only_compressed=OFF
restart: unless-stopped restart: unless-stopped
@ -38,7 +38,7 @@ services:
######## Redis ######## ######## Redis ########
nextcloud-redis: nextcloud-redis:
image: "redis:7.2.4@sha256:f44e91787b843612a3878d8d8fae227b9db63f471214314f5b2e73576ca633d0" image: "redis:7.2.4"
container_name: nextcloud-redis container_name: nextcloud-redis
hostname: nextcloud-redis hostname: nextcloud-redis
networks: networks:
@ -54,7 +54,7 @@ services:
######## cron ######## ######## cron ########
nextcloud-cron: nextcloud-cron:
container_name: nextcloud-cron container_name: nextcloud-cron
image: "registry.mgrote.net/nextcloud-cronjob:master@sha256:f88e0bb3e4c94c1486147ebfd8da17f240fdb9e3a61836c9d7d973fc2f84aafa" image: "registry.mgrote.net/nextcloud-cronjob:v1.0.111"
restart: unless-stopped restart: unless-stopped
network_mode: none network_mode: none
depends_on: depends_on:
@ -68,7 +68,7 @@ services:
######## Nextcloud ######## ######## Nextcloud ########
nextcloud-app: nextcloud-app:
image: "nextcloud:28.0.2@sha256:0d231d59967d997141be8016c41df5e05f03137abbf741a8f0be2c0a8af80cf6" image: "nextcloud:28.0.2"
container_name: nextcloud-app container_name: nextcloud-app
restart: unless-stopped restart: unless-stopped
depends_on: depends_on:

6
docker-compose/registry/docker-compose.yml.j2
View file

@ -3,7 +3,7 @@ services:
oci-registry: oci-registry:
restart: always restart: always
container_name: oci-registry container_name: oci-registry
image: "registry:2.8.3@sha256:f4e1b878d4bc40a1f65532d68c94dcfbab56aa8cba1f00e355a206e7f6cc9111" image: "registry:2.8.3"
volumes: volumes:
- oci:/var/lib/registry - oci:/var/lib/registry
- ./htpasswd:/auth/htpasswd - ./htpasswd:/auth/htpasswd
@ -53,7 +53,7 @@ services:
# docker pull registry.mgrote.net/myfirstimage # docker pull registry.mgrote.net/myfirstimage
oci-registry-redis: oci-registry-redis:
image: "redis:7.2.4@sha256:f44e91787b843612a3878d8d8fae227b9db63f471214314f5b2e73576ca633d0" image: "redis:7.2.4"
container_name: oci-registry-redis container_name: oci-registry-redis
networks: networks:
- intern - intern
@ -70,7 +70,7 @@ services:
oci-registry-ui: oci-registry-ui:
restart: always restart: always
# url: registry.mgrote.net/ui/index.html # url: registry.mgrote.net/ui/index.html
image: "joxit/docker-registry-ui:2.5.6@sha256:ccb4b40737938050b2617b8c61d4287b1078c424ddafe0fcb81b5ce82a3a7198" image: "joxit/docker-registry-ui:2.5.6"
container_name: oci-registry-ui container_name: oci-registry-ui
environment: environment:
DELETE_IMAGES: true DELETE_IMAGES: true

2
docker-compose/routeros-config-export/docker-compose.yml
View file

@ -3,7 +3,7 @@ services:
routeros-config-export: routeros-config-export:
container_name: routeros-config-export container_name: routeros-config-export
restart: always restart: always
image: "registry.mgrote.net/routeros-config-export:master@sha256:7f0c7e37f431858e7786ca728a4dfc576d44a15098f2c122df2fa4aed34f622f" image: "registry.mgrote.net/routeros-config-export:v1.0.115"
volumes: volumes:
- ./key_rb5009:/key_rb5009:ro - ./key_rb5009:/key_rb5009:ro
- ./key_hex:/key_hex:ro - ./key_hex:/key_hex:ro

2
docker-compose/statping-ng/docker-compose.yml.j2
View file

@ -3,7 +3,7 @@ version: '2.3'
services: services:
statping: statping:
container_name: statping container_name: statping
image: "registry.mgrote.net/statping-ng:latest@sha256:1b253ed54720068cf88aa05206b8308674038565cae140b6c0540587f0968260" image: "registry.mgrote.net/statping-ng:v1.0.73"
restart: always restart: always
volumes: volumes:
- statping_data:/app - statping_data:/app

4
docker-compose/traefik/docker-compose.yml.j2
View file

@ -3,7 +3,7 @@ services:
######## traefik ######## ######## traefik ########
traefik: traefik:
container_name: traefik container_name: traefik
image: "traefik:v3.0@sha256:81a73de0d19b6d61eb1f1e413d48835fe3c412f5ed3d9750dc3dab5c93519445" image: "traefik:v3.0"
restart: always restart: always
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
@ -28,7 +28,7 @@ services:
######## nforwardauth ######## ######## nforwardauth ########
nforwardauth: nforwardauth:
restart: always restart: always
image: "nosduco/nforwardauth:v1.4.0@sha256:16e38db002d27758bdc53c70ba12113d84158c758efe930c97c6e9e2bf612a5d" image: "nosduco/nforwardauth:v1.4.0"
container_name: traefik-nforwardauth container_name: traefik-nforwardauth
environment: environment:
TOKEN_SECRET: "{{ lookup('keepass', 'nforwardauth_token_secret', 'password') }}" TOKEN_SECRET: "{{ lookup('keepass', 'nforwardauth_token_secret', 'password') }}"

4
docker-compose/unifi-network-application/docker-compose.yml.j2
View file

@ -2,7 +2,7 @@
version: "2.1" version: "2.1"
services: services:
unifi-network-application: unifi-network-application:
image: "lscr.io/linuxserver/unifi-network-application:8.0.28-ls27@sha256:e673a6100ef8de6ec5e3d8b7bd48f1d1940466f74801048c046a471f5219f551" image: "lscr.io/linuxserver/unifi-network-application:8.0.28-ls27"
container_name: unifi-network-application container_name: unifi-network-application
environment: environment:
PUID: 1000 PUID: 1000
@ -43,7 +43,7 @@ services:
# 1. mongosh # 1. mongosh
# 2. db.getSiblingDB("unifidb").createUser({user: "unifiuser", pwd: "GEHEIM", roles: [{role: "dbOwner", db: "unifidb"}, {role: "dbOwner", db: "unifidb_stat"}]}); # 2. db.getSiblingDB("unifidb").createUser({user: "unifiuser", pwd: "GEHEIM", roles: [{role: "dbOwner", db: "unifidb"}, {role: "dbOwner", db: "unifidb_stat"}]});
# https://discourse.linuxserver.io/t/cant-connect-to-mongodb-for-unifi-network-application/8166 # https://discourse.linuxserver.io/t/cant-connect-to-mongodb-for-unifi-network-application/8166
image: "docker.io/mongo:7.0.5@sha256:a5b9ae2e3d47fde6040e4a1b96a13bff7a71836200f9dc1125ed01745a0a0951" image: "docker.io/mongo:7.0.5"
container_name: unifi-db container_name: unifi-db
volumes: volumes:
- db-data:/data/db - db-data:/data/db

2
docker-compose/wiki/docker-compose.yml.j2
View file

@ -2,7 +2,7 @@ version: '3'
services: services:
wiki-webserver: wiki-webserver:
container_name: wiki-webserver container_name: wiki-webserver
image: "registry.mgrote.net/httpd:master@sha256:5030d128b9470ef172ad528b61bea9d9de7320f32770b826199c6d64ebaf3478" image: "registry.mgrote.net/httpd:v1.0.92"
restart: always restart: always
networks: networks:
- traefik - traefik

4
docker-compose/woodpecker/docker-compose.yml.j2
View file

@ -5,7 +5,7 @@ services:
woodpecker-server: woodpecker-server:
restart: always restart: always
container_name: woodpecker-server container_name: woodpecker-server
image: "woodpeckerci/woodpecker-server:v2.3.0@sha256:50b4d16adae91a9be2d73efb093c8a5df43bde228e416efcd71620822478d4a1" image: "woodpeckerci/woodpecker-server:v2.3.0"
ports: ports:
- 8000:8000 - 8000:8000
volumes: volumes:
@ -41,7 +41,7 @@ services:
woodpecker-agent: woodpecker-agent:
container_name: woodpecker-agent container_name: woodpecker-agent
image: "woodpeckerci/woodpecker-agent:v2.3.0@sha256:d64898cf9cfa5ae735e904dc421baf6fa1f36df24800793d8f4a455ba964e65f" image: "woodpeckerci/woodpecker-agent:v2.3.0"
command: agent command: agent
restart: always restart: always
depends_on: depends_on:

13
renovate.json
View file

@ -1,9 +1,10 @@
{ {
"$schema": "https://docs.renovatebot.com/renovate-schema.json", "$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [ "extends": ["config:recommended"],
"config:recommended" "ignorePaths": ["**/friedhof/**"],
], "packageRules": [{
"ignorePaths": [ "managers": ["docker-compose"],
"**/friedhof/**" "updateTypes": ["pin", "digest"],
] "enabled": false
}]
} }