roles/docker/defaults/main.yml

@@ -42,6 +42,7 @@ services:
     domain: sso.{{ base_domain }}
     volume_folder: "{{ volume_root_folder }}/keycloak"
     version: "20.0"
+    postgres_version: 10
     allowed_sender_domain: true
 
   restic:
@@ -67,6 +68,8 @@ services:
     domain: "cloud.{{ base_domain }}"
     volume_folder: "{{ volume_root_folder }}/nextcloud"
     version: 25-apache
+    postgres_version: 10
+    redis_version: 7-alpine
     allowed_sender_domain: true
 
   gitea:
@@ -81,6 +84,7 @@ services:
     domain: "passit.{{ base_domain }}"
     volume_folder: "{{ volume_root_folder }}/passit"
     version: stable
+    postgres_version: 10
     allowed_sender_domain: true
 
   matrix:
@@ -88,6 +92,7 @@ services:
     domain: "matrix.{{ base_domain }}"
     volume_folder: "{{ volume_root_folder }}/matrix"
     version: v1.63.1
+    postgres_version: 10
     allowed_sender_domain: true
 
   riot:
@@ -113,6 +118,7 @@ services:
     domain: "pad.{{ base_domain }}"
     volume_folder: "{{ volume_root_folder }}/hedgedoc"
     version: 1.9.6
+    postgres_version: 10-alpine
 
   data_coop_website:
     file: websites/data.coop.yml
@@ -168,6 +174,8 @@ services:
     domain: "social.{{ base_domain }}"
     volume_folder: "{{ volume_root_folder }}/mastodon"
     version: v4.0.2
+    postgres_version: 14-alpine
+    redis_version: 6-alpine
     allowed_sender_domain: true
 
   rallly:
@@ -175,6 +183,7 @@ services:
     domain: "when.{{ base_domain }}"
     volume_folder: "{{ volume_root_folder }}/rallly"
     version: ac55701890cd866ee946deb25e2b2839fb14900e
+    postgres_version: 14-alpine
     allowed_sender_domain: true
 
   pinafore:
@@ -186,6 +195,8 @@ services:
     file: membersystem.yml
     domain: "member.{{ base_domain }}"
     django_admins: "Vidir:valberg@orn.li"
+    version: latest
+    postgres_version: 13-alpine
     allowed_sender_domain: true
 
   watchtower:

roles/docker/tasks/services/drone.yml

@@ -8,7 +8,7 @@
       services:
         drone:
           container_name: "drone"
-          image: drone/drone:1
+          image: "drone/drone:{{ services.drone.version }}"
           restart: unless-stopped
           networks:
             - external_services
@@ -48,4 +48,4 @@
         drone:
         external_services:
           external:
-            name: external_services
+            name: external_services

roles/docker/tasks/services/hedgedoc.yml

@@ -22,7 +22,7 @@
     definition:
       services:
         database:
-          image: "postgres:10-alpine"
+          image: "postgres:{{ services.hedgedoc.postgres_version }}"
           environment:
             POSTGRES_USER: "codimd"
             POSTGRES_PASSWORD: "{{ postgres_passwords.hedgedoc }}"
@@ -34,7 +34,7 @@
             - "{{ services.hedgedoc.volume_folder }}/db:/var/lib/postgresql/data"
         
         app:
-          image: quay.io/hedgedoc/hedgedoc:{{ services.hedgedoc.version }}
+          image: "quay.io/hedgedoc/hedgedoc:{{ services.hedgedoc.version }}"
           environment:
             CMD_DB_URL: "postgres://codimd:{{ postgres_passwords.hedgedoc }}@hedgedoc_database_1:5432/codimd"
             CMD_DOMAIN: "{{ services.hedgedoc.domain }}"

roles/docker/tasks/services/keycloak.yml

@@ -5,9 +5,8 @@
     definition:
       version: "3.6"
       services:
-
         postgres:
-          image: "postgres:10"
+          image: "postgres:{{ services.keycloak.postgres_version }}"
           restart: "unless-stopped"
           networks:
             - "keycloak"

roles/docker/tasks/services/mastodon.yml

@@ -55,7 +55,7 @@
       services:
         db:
           restart: always
-          image: postgres:14-alpine
+          image: "postgres:{{ services.mastodon.postgres_version }}"
           shm_size: 256mb
           networks:
             - internal_network
@@ -70,7 +70,7 @@
 
         redis:
           restart: always
-          image: redis:6-alpine
+          image: "redis:{{ services.mastodon.redis_version }}"
           networks:
             - internal_network
           healthcheck:

roles/docker/tasks/services/matrix_riot.yml

@@ -66,7 +66,7 @@
       services:
         matrix_db:
           container_name: matrix_db
-          image: postgres:10
+          image: "postgres:{{ services.matrix.postgres_version }}"
           restart: unless-stopped
           networks:
             - matrix
@@ -78,7 +78,7 @@
 
         matrix_app:
           container_name: matrix
-          image: matrixdotorg/synapse:{{ services.matrix.version }}
+          image: "matrixdotorg/synapse:{{ services.matrix.version }}"
           restart: unless-stopped
           networks:
             - matrix
@@ -96,7 +96,7 @@
 
         riot:
           container_name: riot_app
-          image: avhost/docker-matrix-riot:{{ services.riot.version }}
+          image: "avhost/docker-matrix-riot:{{ services.riot.version }}"
           restart: unless-stopped
           networks:
             - matrix

roles/docker/tasks/services/membersystem.yml

@@ -8,7 +8,7 @@
       version: "3"
       services:
         backend:
-          image: docker.data.coop/membersystem:latest
+          image: "docker.data.coop/membersystem:{{ services.membersystem.version }}"
           restart: always
           user: $UID:$GID
           tty: true
@@ -37,7 +37,7 @@
             com.centurylinklabs.watchtower.enable: "true"
 
         postgres:
-          image: postgres:13-alpine
+          image: "postgres:{{ services.membersystem.postgres_version }}"
           restart: always
           volumes:
             - "{{ volume_root_folder }}/membersystem/postgres/data:/var/lib/postgresql/data"

roles/docker/tasks/services/nextcloud.yml

@@ -12,7 +12,7 @@
     definition:
       services:
         postgres:
-          image: "postgres:10"
+          image: "postgres:{{ services.nextcloud.postgres_version }}"
           restart: "unless-stopped"
           networks:
             - "nextcloud"
@@ -24,7 +24,7 @@
             POSTGRES_USER: "nextcloud"
 
         redis:
-          image: "redis:7-alpine"
+          image: "redis:{{ services.nextcloud.redis_version }}"
           restart: "unless-stopped"
           command: "redis-server --requirepass {{ nextcloud_secrets.redis_password }}"
           tmpfs:

roles/docker/tasks/services/passit.yml

@@ -8,7 +8,7 @@
       version: "3.6"
       services:
         passit_db:
-          image: "postgres:10"
+          image: "postgres:{{ services.passit.postgres_version }}"
           restart: "always"
           networks:
             - "passit"

roles/docker/tasks/services/rallly.yml

@@ -16,7 +16,7 @@
       version: "3.8"
       services:
         rallly_db:
-          image: "postgres:14-alpine"
+          image: "postgres:{{ services.rallly.postgres_version }}"
           restart: "always"
           shm_size: "256mb"
           networks: