feat(supabase): add services and statefulset for database management

feat(synapse): update ingress to use traefik ingress class and bump version

feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress

feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration

fix(taiga): update liveness and readiness probes to use tcpSocket for health checks

fix(taiga): change PVC access mode to ReadWriteMany for media and static storage

feat(traefik): add icon and ignore rules for traefik service

docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments

feat(ushahidi): implement dedicated Redis deployment for Ushahidi

fix(vllm): update deployment strategy and readiness/liveness probes for improved stability

fix(writefreely): pin writefreely image version to v0.15.1 for consistency

docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior

ghost/notes.md

@@ -0,0 +1,15 @@
+# Ghost — Notes
+
+## Bitnami image migration
+
+Ghost was originally packaged using `bitnami/ghost`. Bitnami moved their images off Docker Hub
+in 2023, so the Bitnami image no longer pulls without authentication.
+
+**Fix**: use the official `ghost:X.Y.Z-alpine` image. The official image has different conventions:
+
+| | Bitnami | Official |
+|---|---|---|
+| DB host env | `GHOST_DATABASE_HOST` | `database__connection__host` |
+| Content path | `/bitnami/ghost` | `/var/lib/ghost/content` |
+
+Check `docker manifest inspect ghost:latest` for the current version tag before updating.

ghost/versions/5/db-init-job.yaml

@@ -19,6 +19,7 @@ spec:
               mysql -h ${DB_HOSTNAME} -P ${DB_PORT} -u root -p${MYSQL_ROOT_PASSWORD} <<EOF
               CREATE DATABASE IF NOT EXISTS ${DB_DATABASE_NAME};
               CREATE USER IF NOT EXISTS '${DB_USERNAME}'@'%' IDENTIFIED BY '${DB_PASSWORD}';
+              ALTER USER '${DB_USERNAME}'@'%' IDENTIFIED BY '${DB_PASSWORD}';
               GRANT ALL PRIVILEGES ON ${DB_DATABASE_NAME}.* TO '${DB_USERNAME}'@'%';
               FLUSH PRIVILEGES;
               EOF