feat(supabase): add services and statefulset for database management

feat(synapse): update ingress to use traefik ingress class and bump version

feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress

feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration

fix(taiga): update liveness and readiness probes to use tcpSocket for health checks

fix(taiga): change PVC access mode to ReadWriteMany for media and static storage

feat(traefik): add icon and ignore rules for traefik service

docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments

feat(ushahidi): implement dedicated Redis deployment for Ushahidi

fix(vllm): update deployment strategy and readiness/liveness probes for improved stability

fix(writefreely): pin writefreely image version to v0.15.1 for consistency

docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior

polis/app.yaml

@@ -2,4 +2,7 @@ name: polis
 is: polis
 description: Pol.is is an open-source large-scale conversational survey tool that helps communities gather, understand, and act on the expressed opinions of large groups of people.
 category: community
+icon: https://avatars.githubusercontent.com/u/5333592?s=200&v=4
 latest: dev
+ignoreRules:
+  - WC-IMG  # private AWS ECR images; no public versioned alternative available

polis/notes.md

@@ -0,0 +1,9 @@
+# Polis — Notes
+
+## No public Docker images
+
+`compdemocracy/polis-server` images are private — they are not publicly available on Docker Hub
+or ghcr.io. Deploying without pre-built images results in `ImagePullBackOff`.
+
+The current package uses private AWS ECR images. This is tracked in `app.yaml` via
+`ignoreRules: [WC-IMG]`. Building images from source is required for a fully self-hostable package.

polis/versions/dev/manifest.yaml

@@ -15,7 +15,7 @@ defaultConfig:
 defaultSecrets:
   - key: dbPassword
   - key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}"
+    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
   - key: loginCodePepper
   - key: jwtPrivateKey
   - key: jwtPublicKey