Update clickhouse/clickhouse-server Docker tag to v24.10.1.2812

ansible/files/nginx-docker.conf

@@ -7,6 +7,8 @@ server {
     server_name {{ server_name }};
     set $upstream {{ upstream }};
 
+    access_log /var/log/nginx/{{ server_name|split|first }}.log main;
+
     ssl_certificate {{ ssl_cert_path }}/fullchain.pem;
     ssl_certificate_key {{ ssl_cert_path }}/privkey.pem;
     ssl_trusted_certificate {{ ssl_cert_path }}/chain.pem;

ansible/roles/comentario/files/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   comentario:
-    image: registry.gitlab.com/comentario/comentario:v3.10.0
+    image: registry.gitlab.com/comentario/comentario:v3.11.0
     restart: unless-stopped
     user: "{{ docker_user.id }}:{{ docker_user.id }}"
     depends_on:

ansible/roles/forgejo/files/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   forgejo:
-    image: code.forgejo.org/forgejo/forgejo:8-rootless
+    image: code.forgejo.org/forgejo/forgejo:9-rootless
     user: "{{ docker_user.id }}:{{ docker_user.id }}"
     environment:
       - TZ={{ timezone }}

ansible/roles/mastodon/files/docker-compose.yml

@@ -1,19 +1,22 @@
 services:
   mastodon:
-    image: lscr.io/linuxserver/mastodon:4.2.12
+    image: lscr.io/linuxserver/mastodon:4.3.1
     environment:
       - TZ={{ timezone }}
       - PUID={{ docker_user.id }}
       - PGID={{ docker_user.id }}
       - LOCAL_DOMAIN=theorangeone.net
       - WEB_DOMAIN=mastodon.theorangeone.net
-      - DATABASE_URL=postgresql://mastodon:mastodon@db/mastodon
+      - DATABASE_URL=postgresql://mastodon:mastodon@db:5432/mastodon
       - REDIS_URL=redis://redis
       - SIDEKIQ_REDIS_URL=redis://redis/1
       - SECRET_KEY_BASE={{ vault_secret_key_base }}
       - OTP_SECRET={{ vault_otp_secret }}
       - VAPID_PRIVATE_KEY={{ vault_vapid_private_key }}
       - VAPID_PUBLIC_KEY={{ vault_vapid_public_key }}
+      - ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY={{ vault_active_record_encryption_deterministic_key }}
+      - ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT={{ vault_active_record_encryption_key_derivation_salt }}
+      - ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY={{ vault_active_record_encryption_primary_key }}
       - SINGLE_USER_MODE=true
       - DEFAULT_LOCALE=en
       - STREAMING_CLUSTER_NUM=1

ansible/roles/mastodon/vars/vault.yml

@@ -1,30 +1,42 @@
 $ANSIBLE_VAULT;1.1;AES256
-63646161653431383335313735643535313434613362343161373961633539373932313338343633
+61313731363564306234653163633231356330313936636631393536356434396530643065333731
-6637323935616636353731336531663635656532383166640a633335666633363136333433343266
+3534663665643665613164343931646262643231356337350a333262356130636265643465323263
-37383237623837616464613561633931613230623633313533393464646464646566366330323365
+34333463353131323930636566633462613561333733636230363066343834316664363036346635
-6563396262363238320a303433636266616635313536396132366239343230656432626639653230
+6666363330383337340a316635663663343034613039353835633035633036646131303365626466
-63336165323337393664373635616532643935343363303766376533366661663366623939653564
+38636438323537303134356162633666376236346635366161356430376366626637343362363039
-35363335396266363532653038623038383836383236366466366339343433393338343566653834
+33356332333362363834373137633130306161393430393830643363636463633234646634306265
-30393761626537313531346466373136666565653731663430376664353737663039643263303533
+34366438333132633937303661356134383831373765306339363161643132393737356434653832
-35663836626462333262356330616131316432326139616165363831393036343235663736626661
+31346166333539643161346130386565376630333435376661343666636239666138316337633463
-35666264346563306133306565636261633766616135616366376430643763333031353534373033
+37633237393063313633393732616364653930353661366136346139663030393530383533646265
-35373739333562313639376264343562363130373531313563643834613533653034316536323339
+34393236643439316364376236373431643536333561613135616338643538313238303530356136
-39646337376462656362666330643831653730393562316661326433633334353963306664396264
+34393864323365633166643434363262346233393938313463643162343761643831373639313830
-30373238653832613861633263383663616538366361336163373861613538613132353963373666
+31363837393934333064316463313562393939613034653762303764333730353165623765653430
-34376464333462633839396263396335613233356261666661313763333033376434626463663133
+32383961353162306431393331643262353635383761663330323239383732346535636138636634
-32646130333635656665396335393232346661303861626566663931303637653065313031323936
+64616631373765393033306562343433373733646331643930373663323837393438643331663062
-64333931393165343761376630666462343136353335343632323435306261633232633662353137
+39323564376436353032303362653261363730383062346664663462656230613238303430303561
-32323863343365623566316537343062393638393434323134633535313531333135666535323439
+63663461376139616237333864643461343130326637616264353132613930306238613634343636
-35613439373737396562613834373638356534326438646330663564366436333962626135363833
+62393835393336646133616438336266653762366163623032323131656638393234383532333237
-63653731383163653932383632306239663365323237363562306639643662393530633430386164
+34333030356638326139333636343865636335333665656534656466333135663562303637333136
-61613137663734636666633966663366393832353166343239656335396630323138366338616430
+62386134633330663364323730646134383534623835636633653236653232393232653163613435
-37653036303735383664656530626630616437373762343263643661343464326466353234316363
+64663437383233323435386163653933383634666630383862323831316166353837323461333961
-64643733363435656365343537626364643430316630663666373932663564623835646336633034
+39626563323364653731316361333534616361366435643266626164666463613836336639373835
-65646264346439356161353838353064626230636664373035336433356530326632613035316434
+64393038336333356431326532626463333332373465613364386461623533646266626264383332
-31613434366530323263383337316432316432373835343164313963643733626362393334623266
+61393338663162343831616566346133646166353431396139393237356332616437353538313236
-65356131626135336337383139643838333134616137366530353730646634633364353333646563
+35323263383036623761643430336462656430356164313561663437383530346434306438386533
-66333134616639363932613238346538623764663831353031383834613230393936386432623434
+34366262663261636365323235326532393436333962383032353236323761373239613836646564
-37393935346238633338323432613638616466623264656434393761623363356330623632323261
+33316433656636313261653364663966633431663762363133666631653835386131643061626161
-36393064316263666432663633323535363035323535653834323064383437343530306166306239
+39633065326130643134343139363266363362393938623261646231333833643034633638386162
-37316236313533393062623066336561373138636339393631313866303433643832383230656532
+37376263613839353365336563623830333338373339393830323834326234373833336237326365
-3137
+63366664323136303638643237366265653235363266333738343437313636663163663134363262
+32663533363539313238663237366330633738613733363932653031356263643935666166363536
+61383532373565383730363662613533333265636361333230333233396534353337653662363065
+38393937396337633430303831353831376666623061356239363534333537323662306530303639
+65303735343431623561356361373330343033643130393235336535623530303236356432353834
+62376163646362616465643730353866333464666365336336383466653462346334646231633736
+62336132343737303061396636313334333538396333626263396361386631313730363766653530
+66663461616530326261343931343330313836633966646661626361643064316261313234386635
+30306534396136656432653236343337656433396337393064313466653165396562393665363938
+63393232646164333263313136303236353465636139376232626563613835303561653935316332
+61373432613632663366383933343839363765396637306339363162616237366361306237336464
+37353336306536396466356432393766623061363938633736323431313237663464646364666131
+3737

ansible/roles/plausible/files/docker-compose.yml

@@ -29,7 +29,7 @@ services:
       - SMTP_HOST_SSL_ENABLED=true
 
   clickhouse:
-    image: clickhouse/clickhouse-server:24.3.3.102-alpine
+    image: clickhouse/clickhouse-server:24.10.1.2812-alpine
     restart: unless-stopped
     volumes:
       - ./clickhouse:/var/lib/clickhouse

ansible/roles/uptime_kuma/files/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   uptime-kuma:
-    image: louislam/uptime-kuma:1.23.13-alpine
+    image: louislam/uptime-kuma:1.23.15-alpine
     environment:
       - TZ={{ timezone }}
       - PUID={{ docker_user.id }}

ansible/roles/vaultwarden/files/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   vaultwarden:
-    image: vaultwarden/server:1.32.0-alpine
+    image: vaultwarden/server:1.32.3-alpine
     restart: unless-stopped
     user: "{{ docker_user.id }}:{{ docker_user.id }}"
     volumes:

ansible/roles/website/files/docker-compose.yml

@@ -14,7 +14,8 @@ services:
       - UNSPLASH_CLIENT_ID={{ vault_unsplash_client_id }}
       - SENTRY_DSN={{ vault_website_sentry_dsn }}
       - BASE_HOSTNAME=theorangeone.net
-      - WEB_CONCURRENCY=5
+      - GRANIAN_WORKERS=2
+      - GRANIAN_BLOCKING_THREADS=2
       - SEO_INDEX=true
       - ACTIVITYPUB_HOST=mastodon.theorangeone.net
     volumes: