[mass update] fix supporting multiple domains while enforcing ssl

.drone.yml

@@ -18,8 +18,24 @@ steps:
       LETS_ENCRYPT_ENV: production
       APP_ENTRYPOINT_CONF_VERSION: v1
       BACKEND_ENTRYPOINT_CONF_VERSION: v1
-      SECRET_DB_PASSWORD_VERSION: v1
+      SECRET_PENPOT_DB_PASSWORD_VERSION: v1
       SECRET_SMTP_PASSWORD_VERSION: v1
 trigger:
   branch:
     - main
+---
+kind: pipeline
+name: generate recipe catalogue
+steps:
+  - name: release a new version
+    image: plugins/downstream
+    settings:
+      server: https://build.coopcloud.tech
+      token:
+        from_secret: drone_abra-bot_token
+      fork: true
+      repositories:
+        - toolshed/auto-recipes-catalogue-json
+
+trigger:
+  event: tag

compose.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   app:
-    image: "penpotapp/frontend:1.19.1"
+    image: "penpotapp/frontend:1.19.3"
     networks:
       - proxy
       - internal
@@ -26,12 +26,12 @@ services:
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=2.0.0+1.19.1"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
+        - "coop-cloud.${STACK_NAME}.version=2.0.1+1.19.3"
 
   penpot-backend:
-    image: "penpotapp/backend:1.19.1"
+    image: "penpotapp/backend:1.19.3"
     volumes:
       - penpot_assets:/opt/data
     depends_on:
@@ -72,7 +72,7 @@ services:
       - internal
 
   penpot-exporter:
-    image: "penpotapp/exporter:1.19.1"
+    image: "penpotapp/exporter:1.19.3"
     environment:
       - PENPOT_PUBLIC_URI=http://app
       - PENPOT_REDIS_URI=redis://penpot-redis/0
@@ -80,7 +80,7 @@ services:
       - internal
 
   penpot-postgres:
-    image: "postgres:15.4"
+    image: "postgres:16.2"
     stop_signal: SIGINT
     secrets:
       - db_password
@@ -95,7 +95,7 @@ services:
       - internal
 
   penpot-redis:
-    image: redis:7.2.1
+    image: redis:7.2.4
     networks:
       - internal