Revert supabase Kong to 3.4.2 (3.9.3 has ada library issue on arm64)

Fix discourse, moodle, supabase upgrades
- discourse 2026.10.0: skip assets:precompile in init container (assets are pre-built in 2026.x images, no git repo present) Re-enable slot 2026 as latest - moodle: migrate from bitnamilegacy/moodle (EOL Aug 2025) to oksigenia/moodle:4.5 (drop-in replacement, same env vars/volumes, weekly rebuilds with PHP patches) - supabase: bump all 7 components to self-hosted v0.8.3 tags (studio, gotrue, postgrest, realtime, storage-api, postgres-meta, kong)
2026-10-30 18:21:17 +00:00 · 2026-10-30 18:19:19 +00:00 · 2026-10-27 15:44:48 +00:00 · 2026-10-27 15:42:24 +00:00 · 2026-10-27 15:40:51 +00:00 · 2026-10-26 16:29:02 +00:00
30 changed files with 37 additions and 41 deletions
--- a/bookwyrm/versions/0/deployment-worker.yaml
+++ b/bookwyrm/versions/0/deployment-worker.yaml
@@ -22,7 +22,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: celery-worker
-          image: ghcr.io/bookwyrm-social/bookwyrm:v0.8.6
+          image: ghcr.io/bookwyrm-social/bookwyrm:v0.9.3
          command:
            - celery
            - -A
--- a/bookwyrm/versions/0/deployment.yaml
+++ b/bookwyrm/versions/0/deployment.yaml
@@ -22,7 +22,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: bookwyrm
-          image: ghcr.io/bookwyrm-social/bookwyrm:v0.8.6
+          image: ghcr.io/bookwyrm-social/bookwyrm:v0.9.3
          command: ["/bin/sh", "-c", "python manage.py compile_themes && python manage.py collectstatic --noinput && python manage.py migrate && exec gunicorn bookwyrm.wsgi:application"]
          ports:
            - name: http
--- a/bookwyrm/versions/0/manifest.yaml
+++ b/bookwyrm/versions/0/manifest.yaml
@@ -1,4 +1,4 @@
-version: 0.8.7-2
+version: 0.9.3
 requires:
 - name: postgres
 - name: redis
--- a/decidim/versions/0/deployment.yaml
+++ b/decidim/versions/0/deployment.yaml
@@ -23,7 +23,7 @@ spec:
        fsGroupChangePolicy: Always
      containers:
        - name: decidim
-          image: payneio/decidim-sidekiq:0.31.0
+          image: payneio/decidim-sidekiq:0.31.6
          imagePullPolicy: Always
          command:
            - /bin/bash
@@ -143,7 +143,7 @@ spec:
            - name: decidim-data
              mountPath: /code/public/uploads
        - name: sidekiq
-          image: payneio/decidim-sidekiq:0.31.0
+          image: payneio/decidim-sidekiq:0.31.6
          imagePullPolicy: Always
          command:
            - /bin/bash
--- a/decidim/versions/0/manifest.yaml
+++ b/decidim/versions/0/manifest.yaml
@@ -1,4 +1,4 @@
-version: 0.31.0-4
+version: 0.31.6
 requires:
 - name: postgres
 - name: redis
--- a/discourse/app.yaml
+++ b/discourse/app.yaml
@@ -3,4 +3,4 @@ is: discourse
 description: Discourse is a modern, open-source discussion platform designed for online communities and forums.
 category: community
 icon: https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/discourse.svg
-latest: "3"
+latest: "2026"
--- a/discourse/versions/2026/deployment.yaml
+++ b/discourse/versions/2026/deployment.yaml
@@ -49,9 +49,7 @@ spec:
              set -e
              cd /var/www/discourse
              export HOME=/root
-              git config --global --add safe.directory /var/www/discourse
              bundle exec rake db:migrate
-              bundle exec rake assets:precompile
          env:
            - name: RAILS_ENV
              value: "production"
--- a/immich/versions/3/deployment-microservices.yaml
+++ b/immich/versions/3/deployment-microservices.yaml
@@ -25,7 +25,7 @@ spec:
      initContainers:
        - name: init-dirs
          image: "ghcr.io/immich-app/immich-server:v3.3.5"
-          command: ["sh", "-c", "mkdir -p /usr/src/app/upload/thumbs /usr/src/app/upload/upload /usr/src/app/upload/backups /usr/src/app/upload/library /usr/src/app/upload/profile /usr/src/app/upload/encoded-video"]
+          command: ["sh", "-c", "for d in thumbs upload backups library profile encoded-video; do mkdir -p /usr/src/app/upload/$d && touch /usr/src/app/upload/$d/.immich; done"]
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/immich/versions/3/deployment-server.yaml
+++ b/immich/versions/3/deployment-server.yaml
@@ -25,7 +25,7 @@ spec:
      initContainers:
        - name: init-dirs
          image: "ghcr.io/immich-app/immich-server:v3.3.5"
-          command: ["sh", "-c", "mkdir -p /usr/src/app/upload/thumbs /usr/src/app/upload/upload /usr/src/app/upload/backups /usr/src/app/upload/library /usr/src/app/upload/profile /usr/src/app/upload/encoded-video"]
+          command: ["sh", "-c", "for d in thumbs upload backups library profile encoded-video; do mkdir -p /usr/src/app/upload/$d && touch /usr/src/app/upload/$d/.immich; done"]
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/jitsi/versions/stable/deployment-jicofo.yaml
+++ b/jitsi/versions/stable/deployment-jicofo.yaml
@@ -22,7 +22,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: jitsi-jicofo
-          image: jitsi/jicofo:jicofo-1.0-1184-1
+          image: ghcr.io/jitsi/jicofo:stable-11248-2
          env:
            - name: XMPP_DOMAIN
              value: "{{ .xmppDomain }}"
--- a/jitsi/versions/stable/deployment-jvb.yaml
+++ b/jitsi/versions/stable/deployment-jvb.yaml
@@ -22,7 +22,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: jitsi-jvb
-          image: jitsi/jvb:jvb-2.3-296-g318c08ddc-1
+          image: ghcr.io/jitsi/jvb:stable-11248-2
          ports:
            - name: rtp-udp
              containerPort: 10000
--- a/jitsi/versions/stable/deployment-prosody.yaml
+++ b/jitsi/versions/stable/deployment-prosody.yaml
@@ -22,7 +22,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: jitsi-prosody
-          image: jitsi/prosody:prosody-13.0.6
+          image: ghcr.io/jitsi/prosody:stable-11248-2
          ports:
            - name: xmpp-c2s
              containerPort: 5222
--- a/jitsi/versions/stable/deployment-web.yaml
+++ b/jitsi/versions/stable/deployment-web.yaml
@@ -22,7 +22,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: jitsi-web
-          image: jitsi/web:web-1.0.9282-1
+          image: ghcr.io/jitsi/web:stable-11248-2
          ports:
            - name: http
              containerPort: 80
--- a/jitsi/versions/stable/manifest.yaml
+++ b/jitsi/versions/stable/manifest.yaml
@@ -1,4 +1,4 @@
-version: web-1.0.9282-3
+version: stable-11248-2
 defaultConfig:
  namespace: jitsi
  domain: jitsi.{{ .cloud.domain }}
--- a/keila/versions/0/deployment.yaml
+++ b/keila/versions/0/deployment.yaml
@@ -58,8 +58,6 @@ spec:
              key: smtpPassword
        - name: MAILER_SMTP_FROM_EMAIL
          value: "{{ .smtp.from }}"
-        - name: TZ_AUTOUPDATE
-          value: "disabled"
        - name: DISABLE_REGISTRATION
          value: "{{ .disableRegistration }}"
        - name: KEILA_USER
@@ -74,6 +72,8 @@ spec:
        volumeMounts:
        - name: uploads
          mountPath: /var/lib/keila/uploads
+        - name: tz-data
+          mountPath: /opt/app/lib/tz-0.28.2/priv
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
@@ -95,3 +95,5 @@ spec:
      - name: uploads
        persistentVolumeClaim:
          claimName: keila-uploads
+      - name: tz-data
+        emptyDir: {}
--- a/librebooking/versions/3/deployment.yaml
+++ b/librebooking/versions/3/deployment.yaml
@@ -24,7 +24,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: librebooking
-          image: librebooking/librebooking:5.1.0
+          image: librebooking/librebooking:7.1.0
          ports:
            - name: http
              containerPort: 8080
--- a/librebooking/versions/3/manifest.yaml
+++ b/librebooking/versions/3/manifest.yaml
@@ -1,4 +1,4 @@
-version: 3.3.7-2
+version: 7.1.0
 requires:
 - name: mysql
 defaultConfig:
--- a/moodle/versions/4/deployment.yaml
+++ b/moodle/versions/4/deployment.yaml
@@ -23,7 +23,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: moodle
-          image: bitnamilegacy/moodle:4.5.2
+          image: oksigenia/moodle:4.5
          ports:
            - name: http
              containerPort: 8080
--- a/moodle/versions/4/manifest.yaml
+++ b/moodle/versions/4/manifest.yaml
@@ -1,4 +1,4 @@
-version: 4.5.2-4
+version: 4.5.15
 requires:
 - name: mysql
 defaultConfig:
--- a/open-webui/versions/0/deployment.yaml
+++ b/open-webui/versions/0/deployment.yaml
@@ -19,7 +19,7 @@ spec:
          type: RuntimeDefault
      containers:
      - name: open-webui
-        image: ghcr.io/open-webui/open-webui:v0.9.5
+        image: ghcr.io/open-webui/open-webui:v0.12.4
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/open-webui/versions/0/manifest.yaml
+++ b/open-webui/versions/0/manifest.yaml
@@ -1,4 +1,4 @@
-version: 0.9.5-5
+version: 0.12.4
 defaultConfig:
  namespace: open-webui
  storage: 2Gi
--- a/supabase/versions/1/deployment-auth.yaml
+++ b/supabase/versions/1/deployment-auth.yaml
@@ -14,7 +14,7 @@ spec:
    spec:
      containers:
        - name: auth
-          image: supabase/gotrue:v2.189.0
+          image: supabase/gotrue:v2.197.0
          ports:
            - containerPort: 9999
          env:
--- a/supabase/versions/1/deployment-meta.yaml
+++ b/supabase/versions/1/deployment-meta.yaml
@@ -14,7 +14,7 @@ spec:
    spec:
      containers:
        - name: meta
-          image: supabase/postgres-meta:v0.96.6
+          image: supabase/postgres-meta:v0.100.0
          ports:
            - containerPort: 8080
          env:
--- a/supabase/versions/1/deployment-realtime.yaml
+++ b/supabase/versions/1/deployment-realtime.yaml
@@ -17,7 +17,7 @@ spec:
      hostname: realtime-dev
      containers:
        - name: realtime
-          image: supabase/realtime:v2.102.3
+          image: supabase/realtime:v2.143.3
          ports:
            - containerPort: 4000
          env:
--- a/supabase/versions/1/deployment-rest.yaml
+++ b/supabase/versions/1/deployment-rest.yaml
@@ -14,7 +14,7 @@ spec:
    spec:
      containers:
        - name: rest
-          image: postgrest/postgrest:v14.12
+          image: postgrest/postgrest:v14.18
          command: ["postgrest"]
          ports:
            - containerPort: 3000
--- a/supabase/versions/1/deployment-storage.yaml
+++ b/supabase/versions/1/deployment-storage.yaml
@@ -16,7 +16,7 @@ spec:
    spec:
      containers:
        - name: storage
-          image: supabase/storage-api:v1.60.4
+          image: supabase/storage-api:v1.81.0
          ports:
            - containerPort: 5000
          env:
--- a/supabase/versions/1/deployment-studio.yaml
+++ b/supabase/versions/1/deployment-studio.yaml
@@ -14,7 +14,7 @@ spec:
    spec:
      containers:
        - name: studio
-          image: supabase/studio:2026.06.03-sha-0bca601
+          image: supabase/studio:2026.10.12-sha-3699278
          ports:
            - containerPort: 3000
          env:
--- a/supabase/versions/1/manifest.yaml
+++ b/supabase/versions/1/manifest.yaml
@@ -1,4 +1,4 @@
-version: 2026.07.02-1
+version: 2026.10.12
 requires:
 - name: smtp
 defaultConfig:
--- a/zulip/app.yaml
+++ b/zulip/app.yaml
@@ -3,4 +3,4 @@ is: zulip
 description: Zulip is an open-source team chat application with threaded conversations, making it easy to catch up on important discussions without information overload.
 category: communication
 icon: https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/zulip.svg
-latest: "9"
+latest: "12"
--- a/zulip/versions/12/deployment.yaml
+++ b/zulip/versions/12/deployment.yaml
@@ -37,21 +37,19 @@ spec:
                  key: adminPassword
            - name: SETTING_EXTERNAL_HOST
              value: "{{ .domain }}"
-            - name: SSL_CERTIFICATE_GENERATION
-              value: "self-signed"
            - name: SECRETS_secret_key
              valueFrom:
                secretKeyRef:
                  name: zulip-secrets
                  key: secretKey
            # Database
-            - name: DB_HOST
+            - name: SETTING_REMOTE_POSTGRES_HOST
              value: "{{ .db.host }}"
-            - name: DB_HOST_PORT
+            - name: SETTING_REMOTE_POSTGRES_PORT
              value: "{{ .db.port }}"
-            - name: DB_NAME
+            - name: CONFIG_postgresql__database_name
              value: "{{ .db.name }}"
-            - name: DB_USER
+            - name: CONFIG_postgresql__database_user
              value: "{{ .db.user }}"
            - name: SECRETS_postgres_password
              valueFrom:
@@ -98,8 +96,6 @@ spec:
                  name: zulip-secrets
                  key: smtp.password
            # Reverse proxy configuration (Traefik terminates TLS)
-            - name: DISABLE_HTTPS
-              value: "true"
            - name: LOADBALANCER_IPS
              value: "10.244.0.0/16"
          resources:
Author	SHA1	Message	Date
Paul Payne	fc6308b090	Revert supabase Kong to 3.4.2 (3.9.3 has ada library issue on arm64)	2026-10-30 18:21:17 +00:00
Paul Payne	07e20bee59	Fix discourse, moodle, supabase upgrades - discourse 2026.10.0: skip assets:precompile in init container (assets are pre-built in 2026.x images, no git repo present) Re-enable slot 2026 as latest - moodle: migrate from bitnamilegacy/moodle (EOL Aug 2025) to oksigenia/moodle:4.5 (drop-in replacement, same env vars/volumes, weekly rebuilds with PHP patches) - supabase: bump all 7 components to self-hosted v0.8.3 tags (studio, gotrue, postgrest, realtime, storage-api, postgres-meta, kong)	2026-10-30 18:19:19 +00:00
Paul Payne	a393db8bac	Fix jitsi ghcr.io registry, fix keila tz writable volume - jitsi: stable tags moved to ghcr.io/jitsi/* (no longer on Docker Hub) - keila: mount emptyDir at /opt/app/lib/tz-0.28.2/priv so the tz library can write timezone data (TZ_AUTOUPDATE env var doesn't work, it's Elixir app config not env-driven)	2026-10-27 15:44:48 +00:00
Paul Payne	d31ab762f8	Bump bookwyrm, jitsi, librebooking, decidim - bookwyrm: 0.8.6 -> 0.9.3 (deployment + worker) - jitsi: all components to stable-11248-2 (web, jicofo, jvb, prosody) - librebooking: 5.1.0 -> 7.1.0 - decidim: 0.31.0 -> 0.31.6 (patch bump, custom image)	2026-10-27 15:42:24 +00:00
Paul Payne	4d3bb5cbd7	Bump open-webui to v0.12.4 (clean install, test-cloud PVC wiped)	2026-10-27 15:40:51 +00:00
Paul Payne	eb20b458a6	Fix immich init: create .immich marker files in upload subdirs Immich v3 folder checks require both the directories and .immich marker files to exist in each upload subdirectory.	2026-10-26 16:29:02 +00:00
Paul Payne	80c0d6b0ac	Fix zulip 12.x env vars, try open-webui v0.10.0 intermediate upgrade - zulip: rename legacy env vars per 12.x migration guide (DB_HOST -> SETTING_REMOTE_POSTGRES_HOST, etc.) Remove DISABLE_HTTPS/SSL_CERTIFICATE_GENERATION (HTTP is default in 12.x) Re-enable slot 12 as latest - open-webui: try v0.10.0 as intermediate step from v0.9.5 (v0.12.4 had duplicate column migration error jumping from v0.9.5)	2026-10-26 16:26:43 +00:00