heather: pin Forgejo 15.0.9 and isolate Arion service updates

This commit is contained in:
mikl 2026-09-26 16:56:43 +03:00
commit 4efbdc9bda
2 changed files with 7 additions and 2 deletions

View file

@ -145,7 +145,7 @@ in
# === Forgejo (git.iscg.dev) ===
# Первый сервис, proof-of-concept для цепочки arion→docker→Caddy.
forgejo = {
service.image = "codeberg.org/forgejo/forgejo:9";
service.image = "codeberg.org/forgejo/forgejo:15.0.9";
service.container_name = "forgejo";
service.restart = "unless-stopped";
service.volumes = [ "forgejo-data:/data" ];

View file

@ -97,11 +97,16 @@
# NB: settings — это модуль с imports, НЕ `import ./arion-compose.nix`.
virtualisation.arion.backend = "docker";
virtualisation.arion.projects.heather = {
serviceName = "heather"; # systemd: arion-heather.service
serviceName = "heather"; # systemd: heather.service
settings = {
imports = [ ./arion-compose.nix ];
};
};
# Applying the NixOS configuration must not run `arion up` for *all* services:
# in particular it would start the intentionally stopped Teable stack and
# touch production Matrix. After changing an image, update that one service
# explicitly with `arion --prebuilt-file <active-unit-compose> up -d --no-deps SERVICE`.
systemd.services.heather.restartIfChanged = false;
networking = {
hostName = "heather";