chore: publish 1.3.0+v2.4.1 release

Reviewed-on: #2

.drone.yml

@@ -17,6 +17,7 @@ steps:
       DOMAIN: {{ .Name }}.swarm-test.autonomic.zone
       STACK_NAME: {{ .Name }}
       LETS_ENCRYPT_ENV: production
+      SECRET_DB_PASSWORD_VERSION: v1
 trigger:
   branch:
     - main
@@ -32,7 +33,7 @@ steps:
         from_secret: drone_abra-bot_token
       fork: true
       repositories:
-        - coop-cloud/auto-recipes-catalogue-json
+        - toolshed/auto-recipes-catalogue-json
 
 trigger:
   event: tag

.env.sample

@@ -17,14 +17,23 @@ DB_DATA_LOCATION=./postgres
 # To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
 # TZ=Etc/UTC
 
-# The Immich version to use. You can pin this to a specific version like "v1.71.0"
-IMMICH_VERSION=release
-
-# Connection secret for postgres. You should change it to a random password
-# Please use only the characters `A-Za-z0-9`, without special characters or spaces
-DB_PASSWORD=postgres
-
 # The values below this line do not need to be changed
 ###################################################################################
 DB_USERNAME=postgres
 DB_DATABASE_NAME=immich
+
+#### from here on you can edit again
+
+SECRET_DB_PASSWORD_VERSION=v1
+
+
+## Additional Storage:
+
+# COMPOSE_FILE="compose.yml"
+
+# external storage
+# COMPOSE_FILE="$COMPOSE_FILE:compose.storage.yml"
+# STORAGE_DEVICE="//uxxxxx-sub1.your-server.de/uxxxxx-sub1"
+# STORAGE_USERNAME="uuxxxxx-sub1"
+# STORAGE_PASSWORD="<your-password-not-to-be-checked-in-unencrypted-in-a-git-repository-"
+# STORAGE_READONLY=":ro"

README.md

@@ -5,13 +5,13 @@
 <!-- metadata -->
 
 * **Category**: Apps
-* **Status**: 0
+* **Status**: 1
 * **Image**: [`immich`](https://hub.docker.com/r/immich), 4, upstream
 * **Healthcheck**: No
 * **Backups**: No
-* **Email**: No
+* **Email**: 1
 * **Tests**: No
-* **SSO**: No
+* **SSO**: 1 (Oauth)
 
 <!-- endmetadata -->
 
@@ -22,3 +22,27 @@
 * `abra app deploy <app-name>`
 
 For more, see [`docs.coopcloud.tech`](https://docs.coopcloud.tech).
+
+## How do I integrate with Keycloak SSO?
+
+See https://docs.immich.app/administration/oauth/. The `ISSUER_URL` in the Immich settings should be `https://<sso-domain>/realms/<realm_name>/.well-known/openid-configuration`.
+
+## Volume
+
+You can manually create a volume that has more storage for the library. For example samba: https://docs.docker.com/engine/storage/volumes/#create-cifssamba-volumes
+
+```
+ docker volume create \
+	--driver local \
+	--opt type=cifs \
+	--opt device=//uxxxxx.your-server.de/backup \
+	--opt o=addr=uxxxxx.your-server.de,username=uxxxxxxx,password=*****,file_mode=0777,dir_mode=0777 \
+	--name immich_example_com_uploads
+``` 
+
+## External Library
+
+If you want to use the [external library functionality](https://docs.immich.app/guides/external-library/) of immich via a cifs/smb-share-drive you can use the additional `compose.storage.yml` file.
+Just uncomment and edit the respective .env-files.
+
+The external storage will be mounted to `/mnt/external_storage` (this is your import path in immich).

compose.storage.yml

@@ -0,0 +1,15 @@
+---
+version: "3.8"
+
+services:
+  app:
+    volumes:
+      - external_storage:/mnt/external_storage${STORAGE_READONLY}
+
+volumes:
+  external_storage:
+    driver: local
+    driver_opts:
+      type: cifs
+      device: ${STORAGE_DEVICE}
+      o: "username=${STORAGE_USERNAME},password=${STORAGE_PASSWORD}"

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
+    image: ghcr.io/immich-app/immich-server:v2.4.1
     volumes:
       - uploads:/usr/src/app/upload
       - /etc/localtime:/etc/localtime:ro
@@ -12,9 +12,11 @@ services:
       - DB_DATA_LOCATION
       - TZ
       - IMMICH_VERSION
-      - DB_PASSWORD
+      - DB_PASSWORD_FILE=/run/secrets/db_password
       - DB_USERNAME
       - DB_DATABASE_NAME
+    secrets:
+      - db_password
     networks:
       - proxy
       - backend
@@ -27,37 +29,44 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        - "coop-cloud.${STACK_NAME}.version=0.1.1+release"
+        - "coop-cloud.${STACK_NAME}.version=1.3.0+v2.4.1"
 
 
-  machine-learning:
-    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
-    ports:
-      - 3003:3003
+  immich-machine-learning: # TODO: this has to be that name, as the frontend tries to reach it at: http://immich-machine-learning:3003
+    image: ghcr.io/immich-app/immich-machine-learning:v2.4.1
     volumes:
       - model-cache:/cache
     networks:
       - backend
     healthcheck:
       disable: false
+
   redis:
-    image: redis:6.2-alpine@sha256:eaba718fecd1196d88533de7ba49bf903ad33664a92debb24660a922ecd9cac8
+    image: redis:8.4-alpine
     healthcheck:
       test: redis-cli ping || exit 1
     networks:
       - backend
+
   database:
-    image: tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0
+    image: tensorchord/pgvecto-rs:pg14-v0.2.0
     environment:
-      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
       POSTGRES_USER: ${DB_USERNAME}
       POSTGRES_DB: ${DB_DATABASE_NAME}
       POSTGRES_INITDB_ARGS: '--data-checksums'
+    secrets:
+      - db_password
     volumes:
       - postgres:/var/lib/postgresql/data
     networks:
       - backend
 
+secrets:
+  db_password:
+    external: true
+    name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}
+
 networks:
   proxy:
     external: true
@@ -66,4 +75,4 @@ networks:
 volumes:
   uploads:
   postgres:
-  model-cache:
+  model-cache:

release/0.2.1+v1.136.0

@@ -0,0 +1,14 @@
+when upgrading from below 1.132.0 first need to run 1.132.0-1.136.0 first! see https://immich.app/errors/#typeorm-upgrade
+
+### DB migration failing: multiple primary keys for table "geodata_places"
+
+https://github.com/immich-app/immich/issues/20167
+
+I ran into this issue while upgrading and had to remove it manually:
+
+```bash
+abra app run immich.example.com database bash
+psql -U postgres
+\c immich
+ALTER TABLE "geodata_places" DROP CONSTRAINT IF EXISTS "geodata_places_tmp_pkey";
+```

release/1.2.0+v2.4.1

@@ -0,0 +1 @@
+Adds db_password secret, you'll need to create a new db secret when upgrading (e.g. `echo "secret" | abra app secret insert immich.example.com db_password v1`)

release/1.3.0+v2.4.1

@@ -0,0 +1 @@
+added support for external storage. skipped 1.2.0 because it was not released as tag