docker: set tags explicit and remove digests (#750)

Reviewed-on: #750
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>

docker-compose/httpd/docker-compose.yml.j2

@@ -2,7 +2,7 @@ version: '3'
 services:
   httpd-registry:
     container_name: "httpd-registry"
-    image: "registry.mgrote.net/httpd:master@sha256:5030d128b9470ef172ad528b61bea9d9de7320f32770b826199c6d64ebaf3478"
+    image: "registry.mgrote.net/httpd:v1.0.92"
     restart: always
     volumes:
       - uploads:/usr/local/apache2/htdocs/
@@ -17,7 +17,7 @@ services:
 
   python-api-server:
     container_name: httpd-api
-    image: "registry.mgrote.net/python-api-server:latest@sha256:5c0a98c2acfbfadeaeba85598c2da701a37250aedddee1045a0047c81e57d79f"
+    image: "registry.mgrote.net/python-api-server:v1.0.120"
     restart: always
     ports:
       - "5040:5000"

docker-compose/mail-relay/docker-compose.yml.j2

@@ -1,7 +1,7 @@
 version: '3.3'
 services:
   postfix:
-    image: "registry.mgrote.net/postfix:master@sha256:84555f8d08552afe58c1f05ea341f45073113694bb211277b532a192b7ddd0e4"
+    image: "registry.mgrote.net/postfix:v1.0.137"
     container_name: mail-relay
     restart: always
     ports:

docker-compose/miniflux/docker-compose.yml.j2

@@ -3,7 +3,7 @@ services:
 ######## Miniflux ########
   miniflux:
     container_name: "mf-frontend"
-    image: "ghcr.io/miniflux/miniflux:2.0.51@sha256:9f3bca6a95428c04c8fb54ee723a5f69b9e419b0bf5dfd7a4d70dfb0414d60f1"
+    image: "ghcr.io/miniflux/miniflux:2.0.51"
     restart: always
     depends_on:
       - mf-db16
@@ -34,7 +34,7 @@ services:
 ######## Postgres ########
   mf-db16:
     container_name: "mf-db16"
-    image: "postgres:16.1@sha256:4d1b17af6f66b852ee3a721f6691a2ca7352f9d28f570a6a48cee4ebe646b2fd"
+    image: "postgres:16.1"
     restart: always
     environment:
       POSTGRES_USER: miniflux
@@ -62,7 +62,7 @@ services:
       MF_API_URL: https://miniflux.mgrote.net/v1
       MF_SLEEP: 600
       #MF_DEBUG: 1
-    image: "registry.mgrote.net/miniflux-filter:latest@sha256:b75f7c6913dd1954f62ce393110f847c3c04e94fccdfac963fcb54085349c6f4"
+    image: "registry.mgrote.net/miniflux-filter:v1.0.107"
     volumes:
       - ./filter.txt:/data/filter.txt
     networks:

docker-compose/navidrome/docker-compose.yml.j2

@@ -3,7 +3,7 @@ services:
 ######## navidrome-mg ########
   navidrome-mg:
     container_name: "navidrome-mg"
-    image: "deluan/navidrome:0.51.0@sha256:efd0b899e74db3e5063a8c773cfe7d103b0b61ce7021a50f2f9da189591b9dc7"
+    image: "deluan/navidrome:0.51.0"
     restart: always
     environment:
       ND_LOGLEVEL: info

docker-compose/nextcloud/docker-compose.yml.j2

@@ -2,7 +2,7 @@ version: '3.3'
 services:
 ######## Datenbank ########
   nextcloud-db:
-    image: "mariadb:11.2.2@sha256:fee2ec0d2b4f15f21aa1f88305d4085fdc0a9bb7242a1b4409f3002c6160d05b"
+    image: "mariadb:11.2.2"
     container_name: nextcloud-db
     command: --transaction-isolation=READ-COMMITTED --log-bin=ROW --innodb_read_only_compressed=OFF
     restart: unless-stopped
@@ -38,7 +38,7 @@ services:
 
 ######## Redis ########
   nextcloud-redis:
-    image: "redis:7.2.4@sha256:f44e91787b843612a3878d8d8fae227b9db63f471214314f5b2e73576ca633d0"
+    image: "redis:7.2.4"
     container_name: nextcloud-redis
     hostname: nextcloud-redis
     networks:
@@ -54,7 +54,7 @@ services:
 ######## cron ########
   nextcloud-cron:
     container_name: nextcloud-cron
-    image: "registry.mgrote.net/nextcloud-cronjob:master@sha256:f88e0bb3e4c94c1486147ebfd8da17f240fdb9e3a61836c9d7d973fc2f84aafa"
+    image: "registry.mgrote.net/nextcloud-cronjob:v1.0.111"
     restart: unless-stopped
     network_mode: none
     depends_on:
@@ -68,7 +68,7 @@ services:
 
 ######## Nextcloud ########
   nextcloud-app:
-    image: "nextcloud:28.0.2@sha256:0d231d59967d997141be8016c41df5e05f03137abbf741a8f0be2c0a8af80cf6"
+    image: "nextcloud:28.0.2"
     container_name: nextcloud-app
     restart: unless-stopped
     depends_on:

docker-compose/registry/docker-compose.yml.j2

@@ -3,7 +3,7 @@ services:
   oci-registry:
     restart: always
     container_name: oci-registry
-    image: "registry:2.8.3@sha256:f4e1b878d4bc40a1f65532d68c94dcfbab56aa8cba1f00e355a206e7f6cc9111"
+    image: "registry:2.8.3"
     volumes:
       - oci:/var/lib/registry
       - ./htpasswd:/auth/htpasswd
@@ -53,7 +53,7 @@ services:
     # docker pull registry.mgrote.net/myfirstimage
 
   oci-registry-redis:
-    image: "redis:7.2.4@sha256:f44e91787b843612a3878d8d8fae227b9db63f471214314f5b2e73576ca633d0"
+    image: "redis:7.2.4"
     container_name: oci-registry-redis
     networks:
       - intern
@@ -70,7 +70,7 @@ services:
   oci-registry-ui:
     restart: always
     # url: registry.mgrote.net/ui/index.html
-    image: "joxit/docker-registry-ui:2.5.6@sha256:ccb4b40737938050b2617b8c61d4287b1078c424ddafe0fcb81b5ce82a3a7198"
+    image: "joxit/docker-registry-ui:2.5.6"
     container_name: oci-registry-ui
     environment:
       DELETE_IMAGES: true

docker-compose/routeros-config-export/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   routeros-config-export:
     container_name: routeros-config-export
     restart: always
-    image: "registry.mgrote.net/routeros-config-export:master@sha256:7f0c7e37f431858e7786ca728a4dfc576d44a15098f2c122df2fa4aed34f622f"
+    image: "registry.mgrote.net/routeros-config-export:v1.0.115"
     volumes:
       - ./key_rb5009:/key_rb5009:ro
       - ./key_hex:/key_hex:ro

docker-compose/statping-ng/docker-compose.yml.j2

@@ -3,7 +3,7 @@ version: '2.3'
 services:
   statping:
     container_name: statping
-    image: "registry.mgrote.net/statping-ng:latest@sha256:1b253ed54720068cf88aa05206b8308674038565cae140b6c0540587f0968260"
+    image: "registry.mgrote.net/statping-ng:v1.0.73"
     restart: always
     volumes:
       - statping_data:/app

docker-compose/traefik/docker-compose.yml.j2

@@ -3,7 +3,7 @@ services:
 ######## traefik ########
   traefik:
     container_name: traefik
-    image: "traefik:v3.0@sha256:81a73de0d19b6d61eb1f1e413d48835fe3c412f5ed3d9750dc3dab5c93519445"
+    image: "traefik:v3.0"
     restart: always
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -28,7 +28,7 @@ services:
 ######## nforwardauth ########
   nforwardauth:
     restart: always
-    image: "nosduco/nforwardauth:v1.4.0@sha256:16e38db002d27758bdc53c70ba12113d84158c758efe930c97c6e9e2bf612a5d"
+    image: "nosduco/nforwardauth:v1.4.0"
     container_name: traefik-nforwardauth
     environment:
       TOKEN_SECRET: "{{ lookup('keepass', 'nforwardauth_token_secret', 'password') }}"

docker-compose/unifi-network-application/docker-compose.yml.j2

@@ -2,7 +2,7 @@
 version: "2.1"
 services:
   unifi-network-application:
-    image: "lscr.io/linuxserver/unifi-network-application:8.0.28-ls27@sha256:e673a6100ef8de6ec5e3d8b7bd48f1d1940466f74801048c046a471f5219f551"
+    image: "lscr.io/linuxserver/unifi-network-application:8.0.28-ls27"
     container_name: unifi-network-application
     environment:
       PUID: 1000
@@ -43,7 +43,7 @@ services:
     # 1. mongosh
     # 2. db.getSiblingDB("unifidb").createUser({user: "unifiuser", pwd: "GEHEIM", roles: [{role: "dbOwner", db: "unifidb"}, {role: "dbOwner", db: "unifidb_stat"}]});
     # https://discourse.linuxserver.io/t/cant-connect-to-mongodb-for-unifi-network-application/8166
-    image: "docker.io/mongo:7.0.5@sha256:a5b9ae2e3d47fde6040e4a1b96a13bff7a71836200f9dc1125ed01745a0a0951"
+    image: "docker.io/mongo:7.0.5"
     container_name: unifi-db
     volumes:
       - db-data:/data/db

docker-compose/wiki/docker-compose.yml.j2

@@ -2,7 +2,7 @@ version: '3'
 services:
   wiki-webserver:
     container_name: wiki-webserver
-    image: "registry.mgrote.net/httpd:master@sha256:5030d128b9470ef172ad528b61bea9d9de7320f32770b826199c6d64ebaf3478"
+    image: "registry.mgrote.net/httpd:v1.0.92"
     restart: always
     networks:
       - traefik

docker-compose/woodpecker/docker-compose.yml.j2

@@ -5,7 +5,7 @@ services:
   woodpecker-server:
     restart: always
     container_name: woodpecker-server
-    image: "woodpeckerci/woodpecker-server:v2.3.0@sha256:50b4d16adae91a9be2d73efb093c8a5df43bde228e416efcd71620822478d4a1"
+    image: "woodpeckerci/woodpecker-server:v2.3.0"
     ports:
       - 8000:8000
     volumes:
@@ -41,7 +41,7 @@ services:
 
   woodpecker-agent:
     container_name: woodpecker-agent
-    image: "woodpeckerci/woodpecker-agent:v2.3.0@sha256:d64898cf9cfa5ae735e904dc421baf6fa1f36df24800793d8f4a455ba964e65f"
+    image: "woodpeckerci/woodpecker-agent:v2.3.0"
     command: agent
     restart: always
     depends_on:

renovate.json

@@ -1,9 +1,10 @@
 {
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "extends": [
-        "config:recommended"
-    ],
-    "ignorePaths": [
-        "**/friedhof/**"
-    ]
+    "extends": ["config:recommended"],
+    "ignorePaths": ["**/friedhof/**"],
+    "packageRules": [{
+      "managers": ["docker-compose"],
+      "updateTypes": ["pin", "digest"],
+      "enabled": false
+  }]
 }