From a393db8bacba8df77ea0e6d755ea6a2c8d3dec1f Mon Sep 17 00:00:00 2001
From: Paul Payne <paul@payne.io>
Date: Tue, 27 Oct 2026 15:44:48 +0000
Subject: [PATCH] Fix jitsi ghcr.io registry, fix keila tz writable volume

- jitsi: stable tags moved to ghcr.io/jitsi/* (no longer on Docker Hub)
- keila: mount emptyDir at /opt/app/lib/tz-0.28.2/priv so the tz
  library can write timezone data (TZ_AUTOUPDATE env var doesn't work,
  it's Elixir app config not env-driven)
---
 jitsi/versions/stable/deployment-jicofo.yaml  | 2 +-
 jitsi/versions/stable/deployment-jvb.yaml     | 2 +-
 jitsi/versions/stable/deployment-prosody.yaml | 2 +-
 jitsi/versions/stable/deployment-web.yaml     | 2 +-
 keila/versions/0/deployment.yaml              | 8 +++++---
 5 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/jitsi/versions/stable/deployment-jicofo.yaml b/jitsi/versions/stable/deployment-jicofo.yaml
index 04f44e4..2fe7153 100644
--- a/jitsi/versions/stable/deployment-jicofo.yaml
+++ b/jitsi/versions/stable/deployment-jicofo.yaml
@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jitsi-jicofo
-          image: jitsi/jicofo:stable-11248-2
+          image: ghcr.io/jitsi/jicofo:stable-11248-2
           env:
             - name: XMPP_DOMAIN
               value: "{{ .xmppDomain }}"
diff --git a/jitsi/versions/stable/deployment-jvb.yaml b/jitsi/versions/stable/deployment-jvb.yaml
index 232f923..39003a2 100644
--- a/jitsi/versions/stable/deployment-jvb.yaml
+++ b/jitsi/versions/stable/deployment-jvb.yaml
@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jitsi-jvb
-          image: jitsi/jvb:stable-11248-2
+          image: ghcr.io/jitsi/jvb:stable-11248-2
           ports:
             - name: rtp-udp
               containerPort: 10000
diff --git a/jitsi/versions/stable/deployment-prosody.yaml b/jitsi/versions/stable/deployment-prosody.yaml
index 8ffce62..1b10549 100644
--- a/jitsi/versions/stable/deployment-prosody.yaml
+++ b/jitsi/versions/stable/deployment-prosody.yaml
@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jitsi-prosody
-          image: jitsi/prosody:stable-11248-2
+          image: ghcr.io/jitsi/prosody:stable-11248-2
           ports:
             - name: xmpp-c2s
               containerPort: 5222
diff --git a/jitsi/versions/stable/deployment-web.yaml b/jitsi/versions/stable/deployment-web.yaml
index 16ed980..6d801c6 100644
--- a/jitsi/versions/stable/deployment-web.yaml
+++ b/jitsi/versions/stable/deployment-web.yaml
@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jitsi-web
-          image: jitsi/web:stable-11248-2
+          image: ghcr.io/jitsi/web:stable-11248-2
           ports:
             - name: http
               containerPort: 80
diff --git a/keila/versions/0/deployment.yaml b/keila/versions/0/deployment.yaml
index fc93f65..ff43453 100644
--- a/keila/versions/0/deployment.yaml
+++ b/keila/versions/0/deployment.yaml
@@ -58,8 +58,6 @@ spec:
               key: smtpPassword
         - name: MAILER_SMTP_FROM_EMAIL
           value: "{{ .smtp.from }}"
-        - name: TZ_AUTOUPDATE
-          value: "disabled"
         - name: DISABLE_REGISTRATION
           value: "{{ .disableRegistration }}"
         - name: KEILA_USER
@@ -74,6 +72,8 @@ spec:
         volumeMounts:
         - name: uploads
           mountPath: /var/lib/keila/uploads
+        - name: tz-data
+          mountPath: /opt/app/lib/tz-0.28.2/priv
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
@@ -94,4 +94,6 @@ spec:
       volumes:
       - name: uploads
         persistentVolumeClaim:
-          claimName: keila-uploads
\ No newline at end of file
+          claimName: keila-uploads
+      - name: tz-data
+        emptyDir: {}
\ No newline at end of file