heather: pin Forgejo 15.0.9 and isolate Arion service updates

This commit is contained in:
mikl 2026-09-26 16:56:43 +03:00
commit 4efbdc9bda
2 changed files with 7 additions and 2 deletions

View file

@ -145,7 +145,7 @@ in
# === Forgejo (git.iscg.dev) === # === Forgejo (git.iscg.dev) ===
# Первый сервис, proof-of-concept для цепочки arion→docker→Caddy. # Первый сервис, proof-of-concept для цепочки arion→docker→Caddy.
forgejo = { forgejo = {
service.image = "codeberg.org/forgejo/forgejo:9"; service.image = "codeberg.org/forgejo/forgejo:15.0.9";
service.container_name = "forgejo"; service.container_name = "forgejo";
service.restart = "unless-stopped"; service.restart = "unless-stopped";
service.volumes = [ "forgejo-data:/data" ]; service.volumes = [ "forgejo-data:/data" ];

View file

@ -97,11 +97,16 @@
# NB: settings — это модуль с imports, НЕ `import ./arion-compose.nix`. # NB: settings — это модуль с imports, НЕ `import ./arion-compose.nix`.
virtualisation.arion.backend = "docker"; virtualisation.arion.backend = "docker";
virtualisation.arion.projects.heather = { virtualisation.arion.projects.heather = {
serviceName = "heather"; # systemd: arion-heather.service serviceName = "heather"; # systemd: heather.service
settings = { settings = {
imports = [ ./arion-compose.nix ]; imports = [ ./arion-compose.nix ];
}; };
}; };
# Applying the NixOS configuration must not run `arion up` for *all* services:
# in particular it would start the intentionally stopped Teable stack and
# touch production Matrix. After changing an image, update that one service
# explicitly with `arion --prebuilt-file <active-unit-compose> up -d --no-deps SERVICE`.
systemd.services.heather.restartIfChanged = false;
networking = { networking = {
hostName = "heather"; hostName = "heather";