2026-03-21 01:32:28 +00:00
|
|
|
#!/bin/bash
|
|
|
|
|
# Container image versions — single source of truth
|
|
|
|
|
# Source this file from all scripts that create containers
|
|
|
|
|
#
|
|
|
|
|
# Usage: source /opt/archipelago/image-versions.sh 2>/dev/null || true
|
|
|
|
|
# source "$(dirname "$0")/image-versions.sh" 2>/dev/null || true
|
2026-03-29 14:25:13 +01:00
|
|
|
#
|
2026-04-11 09:33:10 -04:00
|
|
|
# Tags MUST match what's actually in the registry at git.tx1138.com/lfg2025/
|
|
|
|
|
# Run: podman images --format '{{.Repository}}:{{.Tag}}' | grep 'git.tx1138' | sort
|
2026-03-29 14:25:13 +01:00
|
|
|
# to verify against the registry.
|
2026-03-21 01:32:28 +00:00
|
|
|
|
2026-04-12 06:38:34 -04:00
|
|
|
# Archipelago app registries (primary + fallback)
|
2026-04-12 11:43:01 -04:00
|
|
|
ARCHY_REGISTRY="23.182.128.160:3000/lfg2025"
|
|
|
|
|
ARCHY_REGISTRY_FALLBACK="git.tx1138.com/lfg2025"
|
2026-03-26 14:06:21 +00:00
|
|
|
|
2026-03-21 01:32:28 +00:00
|
|
|
# Bitcoin stack
|
2026-03-29 14:25:13 +01:00
|
|
|
BITCOIN_KNOTS_IMAGE="$ARCHY_REGISTRY/bitcoin-knots:latest"
|
|
|
|
|
LND_IMAGE="$ARCHY_REGISTRY/lnd:v0.18.4-beta"
|
2026-03-26 14:06:21 +00:00
|
|
|
ELECTRUMX_IMAGE="$ARCHY_REGISTRY/electrumx:v1.18.0"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# Mempool stack
|
2026-03-26 14:06:21 +00:00
|
|
|
MEMPOOL_BACKEND_IMAGE="$ARCHY_REGISTRY/mempool-backend:v3.0.0"
|
|
|
|
|
MEMPOOL_WEB_IMAGE="$ARCHY_REGISTRY/mempool-frontend:v3.0.0"
|
|
|
|
|
MARIADB_IMAGE="$ARCHY_REGISTRY/mariadb:11.4.10"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# BTCPay
|
2026-03-26 14:06:21 +00:00
|
|
|
BTCPAY_IMAGE="$ARCHY_REGISTRY/btcpayserver:1.13.7"
|
|
|
|
|
NBXPLORER_IMAGE="$ARCHY_REGISTRY/nbxplorer:2.6.0"
|
|
|
|
|
POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:15.17"
|
|
|
|
|
BTCPAY_POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:15.17"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# Apps
|
2026-03-29 14:25:13 +01:00
|
|
|
HOMEASSISTANT_IMAGE="$ARCHY_REGISTRY/home-assistant:2024.1"
|
|
|
|
|
GRAFANA_IMAGE="$ARCHY_REGISTRY/grafana:10.2.0"
|
|
|
|
|
UPTIME_KUMA_IMAGE="$ARCHY_REGISTRY/uptime-kuma:1"
|
|
|
|
|
JELLYFIN_IMAGE="$ARCHY_REGISTRY/jellyfin:10.8.13"
|
2026-03-26 14:06:21 +00:00
|
|
|
PHOTOPRISM_IMAGE="$ARCHY_REGISTRY/photoprism:240915"
|
2026-03-29 14:25:13 +01:00
|
|
|
OLLAMA_IMAGE="$ARCHY_REGISTRY/ollama:latest"
|
|
|
|
|
VAULTWARDEN_IMAGE="$ARCHY_REGISTRY/vaultwarden:1.30.0-alpine"
|
fix: container security hardening, onboarding viewport scaling, boot screen cleanup
Container security:
- Add --cap-drop ALL + --security-opt no-new-privileges:true to 12 containers
missing hardening in first-boot-containers.sh (mempool-db, electrumx,
mempool-api, mempool-web, electrs-ui, btcpay-db, nbxplorer, nostr-rs-relay,
strfry, tailscale, bitcoin-ui, lnd-ui)
- Mirror same hardening in deploy-to-target.sh for consistency
- Add --read-only + tmpfs to nostr-rs-relay
- Fix filebrowser deploy to include security flags
- Remove duplicate UI image definitions in image-versions.sh
- Separate Jellyfin capabilities (needs FOWNER, exec tmpfs for CoreCLR JIT)
- Harden archy-net creation with existence check and error handling
UI fixes:
- Fix onboarding viewport scaling: all 7 screens now use h-full + max-h-full
pattern so containers never overflow viewport regardless of padding
- Remove path-option-card wrappers from seed verify inputs, left-justify labels
- Remove batteries/barbarian icons from boot screen (keep bitcoin, cloud, github, save)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-31 17:35:34 +01:00
|
|
|
NEXTCLOUD_IMAGE="$ARCHY_REGISTRY/nextcloud:29"
|
2026-03-29 14:25:13 +01:00
|
|
|
SEARXNG_IMAGE="$ARCHY_REGISTRY/searxng:latest"
|
2026-04-02 16:15:04 +01:00
|
|
|
# OnlyOffice removed — incompatible with rootless Podman (internal postgres/rabbitmq fail)
|
|
|
|
|
# Replaced by CryptPad (single Node.js process, e2e encrypted)
|
|
|
|
|
CRYPTPAD_IMAGE="$ARCHY_REGISTRY/cryptpad:2024.12.0"
|
2026-03-26 14:06:21 +00:00
|
|
|
FILEBROWSER_IMAGE="$ARCHY_REGISTRY/filebrowser:v2.27.0"
|
2026-03-29 14:25:13 +01:00
|
|
|
NPM_IMAGE="$ARCHY_REGISTRY/nginx-proxy-manager:latest"
|
|
|
|
|
PORTAINER_IMAGE="$ARCHY_REGISTRY/portainer:latest"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# Networking
|
2026-03-29 14:25:13 +01:00
|
|
|
TAILSCALE_IMAGE="$ARCHY_REGISTRY/tailscale:stable"
|
2026-03-26 14:06:21 +00:00
|
|
|
ALPINE_TOR_IMAGE="$ARCHY_REGISTRY/alpine-tor:0.4.8.13"
|
|
|
|
|
ADGUARDHOME_IMAGE="$ARCHY_REGISTRY/adguardhome:v0.107.55"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# Fedimint
|
2026-03-26 14:06:21 +00:00
|
|
|
FEDIMINT_IMAGE="$ARCHY_REGISTRY/fedimintd:v0.10.0"
|
|
|
|
|
FEDIMINT_GATEWAY_IMAGE="$ARCHY_REGISTRY/gatewayd:v0.10.0"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# Media
|
2026-03-26 14:06:21 +00:00
|
|
|
REDIS_IMAGE="$ARCHY_REGISTRY/redis:7.4.8"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
2026-03-22 03:30:21 +00:00
|
|
|
# Valkey (general purpose)
|
2026-03-26 14:06:21 +00:00
|
|
|
VALKEY_IMAGE="$ARCHY_REGISTRY/valkey:8.1.6"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
|
|
|
|
# Nostr
|
2026-03-26 14:06:21 +00:00
|
|
|
NOSTR_RS_RELAY_IMAGE="$ARCHY_REGISTRY/nostr-rs-relay:0.9.0"
|
|
|
|
|
STRFRY_IMAGE="$ARCHY_REGISTRY/strfry:1.0.4"
|
2026-04-08 15:00:00 +02:00
|
|
|
NOSTR_VPN_IMAGE="$ARCHY_REGISTRY/nostr-vpn:v0.3.7"
|
2026-04-03 05:06:45 +01:00
|
|
|
NOSTR_VPN_UI_IMAGE="$ARCHY_REGISTRY/nostr-vpn-ui:latest"
|
2026-04-07 14:51:13 +01:00
|
|
|
FIPS_IMAGE="$ARCHY_REGISTRY/fips:v0.1.0"
|
|
|
|
|
FIPS_UI_IMAGE="$ARCHY_REGISTRY/fips-ui:latest"
|
fix: BUILD_VERSION from Cargo.toml, kiosk scaling, new apps, Rust warnings
Critical:
- BUILD_VERSION was hardcoded as "1.3.0-alpha" — now reads from Cargo.toml
This caused ALL ISOs to show v1.3.0 regardless of actual binary version
Kiosk:
- Remove --disable-gpu flags (broke display scaling on some monitors)
- Add --start-fullscreen --window-size for reliable fullscreen
New apps:
- Nostr VPN, FIPS, Routstr, noStrudel, BotFights, NWNN, 484 Kitchen,
Call the Operator, Arch Presentation, Syntropy Institute, T-0
Rust: suppress dead_code and unused_assignments warnings
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-03 00:35:52 +01:00
|
|
|
|
|
|
|
|
# AI / Routing
|
|
|
|
|
ROUTSTR_IMAGE="$ARCHY_REGISTRY/routstr:v0.4.3"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
2026-04-11 16:47:54 -04:00
|
|
|
# Community / Gaming
|
feat: botfights, discover, mobile gamepad, content handler, package config updates
Miscellaneous improvements: botfights manifest, discover page curated
apps, mobile gamepad enhancements, content HTTP handler, package
install config updates, health monitor tweaks, shared content UI,
container specs and image version updates.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-11 23:11:41 -04:00
|
|
|
BOTFIGHTS_IMAGE="$ARCHY_REGISTRY/botfights:1.1.0"
|
2026-04-11 16:47:54 -04:00
|
|
|
|
feat: botfights, discover, mobile gamepad, content handler, package config updates
Miscellaneous improvements: botfights manifest, discover page curated
apps, mobile gamepad enhancements, content HTTP handler, package
install config updates, health monitor tweaks, shared content UI,
container specs and image version updates.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-11 23:11:41 -04:00
|
|
|
# IndeedHub stack
|
|
|
|
|
INDEEDHUB_IMAGE="$ARCHY_REGISTRY/indeedhub:1.0.0"
|
|
|
|
|
INDEEDHUB_API_IMAGE="$ARCHY_REGISTRY/indeedhub-api:1.0.0"
|
|
|
|
|
INDEEDHUB_FFMPEG_IMAGE="$ARCHY_REGISTRY/indeedhub-ffmpeg:1.0.0"
|
2026-03-26 14:06:21 +00:00
|
|
|
MINIO_IMAGE="$ARCHY_REGISTRY/minio:RELEASE.2024-11-07T00-52-20Z"
|
|
|
|
|
INDEEDHUB_POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:16.13-alpine"
|
|
|
|
|
INDEEDHUB_REDIS_IMAGE="$ARCHY_REGISTRY/redis:7.4.8-alpine"
|
2026-03-21 01:32:28 +00:00
|
|
|
|
2026-04-12 06:10:56 -04:00
|
|
|
# Gitea (Git + Container Registry)
|
|
|
|
|
GITEA_IMAGE="docker.io/gitea/gitea:1.23"
|
|
|
|
|
|
2026-03-21 03:06:29 +00:00
|
|
|
# DWN (Decentralized Web Node)
|
2026-03-26 14:06:21 +00:00
|
|
|
DWN_SERVER_IMAGE="$ARCHY_REGISTRY/dwn-server:main"
|
|
|
|
|
|
|
|
|
|
# Immich stack
|
|
|
|
|
IMMICH_POSTGRES_IMAGE="$ARCHY_REGISTRY/immich-postgres:14-vectorchord0.4.3-pgvectors0.2.0"
|
|
|
|
|
IMMICH_SERVER_IMAGE="$ARCHY_REGISTRY/immich-server:release"
|
2026-03-21 03:06:29 +00:00
|
|
|
|
2026-03-26 14:06:21 +00:00
|
|
|
# Penpot stack
|
|
|
|
|
PENPOT_POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:15"
|
|
|
|
|
PENPOT_VALKEY_IMAGE="$ARCHY_REGISTRY/valkey:8.1"
|
|
|
|
|
PENPOT_BACKEND_IMAGE="$ARCHY_REGISTRY/penpot-backend:2.4"
|
|
|
|
|
PENPOT_EXPORTER_IMAGE="$ARCHY_REGISTRY/penpot-exporter:2.4"
|
|
|
|
|
PENPOT_FRONTEND_IMAGE="$ARCHY_REGISTRY/penpot-frontend:2.4"
|
2026-03-21 03:06:29 +00:00
|
|
|
|
2026-03-31 11:06:19 +01:00
|
|
|
# Custom UI containers (built from docker/ dirs, pushed to registry)
|
fix: container security hardening, onboarding viewport scaling, boot screen cleanup
Container security:
- Add --cap-drop ALL + --security-opt no-new-privileges:true to 12 containers
missing hardening in first-boot-containers.sh (mempool-db, electrumx,
mempool-api, mempool-web, electrs-ui, btcpay-db, nbxplorer, nostr-rs-relay,
strfry, tailscale, bitcoin-ui, lnd-ui)
- Mirror same hardening in deploy-to-target.sh for consistency
- Add --read-only + tmpfs to nostr-rs-relay
- Fix filebrowser deploy to include security flags
- Remove duplicate UI image definitions in image-versions.sh
- Separate Jellyfin capabilities (needs FOWNER, exec tmpfs for CoreCLR JIT)
- Harden archy-net creation with existence check and error handling
UI fixes:
- Fix onboarding viewport scaling: all 7 screens now use h-full + max-h-full
pattern so containers never overflow viewport regardless of padding
- Remove path-option-card wrappers from seed verify inputs, left-justify labels
- Remove batteries/barbarian icons from boot screen (keep bitcoin, cloud, github, save)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-31 17:35:34 +01:00
|
|
|
# These use :latest because they're internally built and pushed — acceptable for self-hosted images
|
2026-03-31 11:09:49 +01:00
|
|
|
BITCOIN_UI_IMAGE="$ARCHY_REGISTRY/bitcoin-ui:latest"
|
|
|
|
|
LND_UI_IMAGE="$ARCHY_REGISTRY/lnd-ui:latest"
|
|
|
|
|
ELECTRS_UI_IMAGE="$ARCHY_REGISTRY/electrs-ui:latest"
|
|
|
|
|
|
2026-03-21 01:32:28 +00:00
|
|
|
# Base images
|
2026-03-29 14:25:13 +01:00
|
|
|
NGINX_ALPINE_IMAGE="$ARCHY_REGISTRY/nginx:1.27.4-alpine"
|