mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
0c018fa318
The ranking the last commits built toward is now enforced: a semver tag, else a digest, and nothing else without a written reason. Two states fail. A pin that is neither names something the registry can move underneath us, and nothing here can tell whether it still points where it did when it was written. A digest on an upstream that does publish semver takes the fallback for no gain and hides the entry from the update job. Thirteen entries stood in the way when the check was first run. Four were resolved by the channel grammar, which made the Jitsi components orderable without touching their pins. Three needed nothing once a moving tag could declare itself with 'docker-version'. Two are fixed here and four are declared. LiteLLM leaves 'main-v1.77.3.dynamic_rates'. That tag exists exactly once among 2609, so it is a dead end no updater can follow, and it misreports itself: the image inside answers 1.77.2. The pin moves to 'main-v1.77.7-stable', five patches along the same minor and onto a channel with 134 builds. Started against this repository's config shape, 1.77.7 registers both model entry forms and accepts drop_params and the os.environ master key. Pixelfed leaves 'latest' for '20260917'. The upstream stamps its dates as one eight-digit number, which is depth 1 and orderable with no tooling change at all, and the two tags resolve to the same digest, so nothing about the deployed image moves. The four declarations carry the count that justifies them rather than a claim: LM Studio publishes two tags and neither is a version, the MIG registry carries one, and the two Nextcloud Talk images publish 174 and 104 AIO build stamps between them. Both branches of the gate were negative-controlled. The digest branch skips in this repository because no digest pin exists at all, so it was exercised by introducing one and watching it fail. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
67 lines
1.7 KiB
YAML
67 lines
1.7 KiB
YAML
---
|
|
# nocheck: dynamic-flag
|
|
# nocheck: logout
|
|
logout:
|
|
enabled: false
|
|
shared: false
|
|
# nocheck: dynamic-flag
|
|
# nocheck: oidc
|
|
# nocheck: sso
|
|
sso:
|
|
enabled: false
|
|
shared: false
|
|
dashboard:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-dashboard' in group_names }}"
|
|
shared: "{{ 'web-app-dashboard' in group_names }}"
|
|
matomo:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-matomo' in group_names }}"
|
|
shared: "{{ 'web-app-matomo' in group_names }}"
|
|
# nocheck: dynamic-flag
|
|
# nocheck: playwright-service-flag — DB engine, covered by role-local integration tests
|
|
redis:
|
|
enabled: false
|
|
shared: "{{ 'svc-db-redis' in group_names }}"
|
|
backup:
|
|
disabled: true
|
|
mig:
|
|
healthcheck:
|
|
flavor: curl
|
|
modes:
|
|
compose:
|
|
enabled: true
|
|
swarm:
|
|
enabled: true
|
|
image: ghcr.io/kevinveenbirkenbach/infinito-mig
|
|
# nocheck: docker-version -- this registry carries exactly 1 tag; the image is built from this project and has no release line yet
|
|
version: latest
|
|
name: mig
|
|
min_storage: 1224MB
|
|
ports:
|
|
internal:
|
|
http: 80
|
|
local:
|
|
http: 8047
|
|
lifecycle: alpha
|
|
cpus: "0.2"
|
|
mem_reservation: 128m
|
|
mem_limit: 256m
|
|
pids_limit: 256
|
|
# nocheck: playwright-service-flag — css consumer, no Playwright surface (provider: web-svc-css)
|
|
css:
|
|
bond: 1
|
|
enabled: "{{ 'web-svc-css' in group_names }}"
|
|
shared: "{{ 'web-svc-css' in group_names }}"
|
|
prometheus:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-prometheus' in group_names }}"
|
|
shared: "{{ 'web-app-prometheus' in group_names }}"
|
|
|
|
# nocheck: playwright-service-flag
|
|
# nocheck: variants-coverage — sso-variant-tor requires the onion on in every variant, so the false polarity has no variant left to live in
|
|
tor:
|
|
bond: 0.5
|
|
enabled: "{{ 'svc-net-tor' in group_names }}"
|
|
shared: true # nocheck: dynamic-flag
|