viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: pin ~28 images to specific versions, enable DIUN monitoring, add app-stacks pipeline

Browse source 
Pin third-party images from :latest to current stable versions:
- Platform: cloudflared, technitium, snmp-exporter, pve-exporter,
  headscale, shadowsocks, xray
- Apps: paperless-ngx, linkwarden, wealthfolio, speedtest, synapse,
  n8n, prowlarr, qbittorrent, lidarr, rybbit, ollama, immichframe,
  cyberchef, networking-toolbox, echo, coturn, shlink, affine

Enable DIUN annotations on all pinned deployments with per-image
tag patterns. Add Woodpecker app-stacks pipeline for selective
terragrunt apply on changed app stacks.
This commit is contained in:
Viktor Barzin 2026-04-06 14:27:13 +03:00
parent a81f7df2a0
commit 09b4bad958
30 changed files with 233 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

6
stacks/matrix/main.tf
View file

@ -111,13 +111,15 @@ resource "kubernetes_deployment" "matrix" {
app = "matrix"
}
annotations = {
"diun.enable" = "true"
"diun.include_tags" = "^v\\d+\\.\\d+\\.\\d+$"
"dependency.kyverno.io/wait-for" = "pg-cluster-rw.dbaas:5432"
}
}
spec {
init_container {
name = "install-psycopg2"
image = "matrixdotorg/synapse:latest"
image = "matrixdotorg/synapse:v1.125.0"
command = ["/bin/sh", "-c", "pip install --target=/extra-packages psycopg2-binary 2>/dev/null"]
volume_mount {
name = "extra-packages"
@ -150,7 +152,7 @@ resource "kubernetes_deployment" "matrix" {
}
}
container {
image = "matrixdotorg/synapse:latest"
image = "matrixdotorg/synapse:v1.125.0"
name = "matrix"
port {
container_port = 8008