fix: use nonexistent backup path for backup RED canary

.drone.yml

@@ -3,7 +3,7 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
   - name: deployment
-    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest@sha256:fc1fa69bea5528db7ba184297735ac1bbd278720910e4cb1f502de9aee14e228
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
     settings:
       host: swarm-test.autonomic.zone
       stack: custom_html
@@ -26,7 +26,7 @@ kind: pipeline
 name: generate recipe catalogue
 steps:
   - name: release a new version
-    image: plugins/downstream@sha256:03ff02d8a5637ea5197fa08929a91dfeeb5e30b1da62b82b6c2a895b170338ca
+    image: plugins/downstream
     settings:
       server: https://build.coopcloud.tech
       token:

compose.git-pull.yml

@@ -3,7 +3,7 @@ services:
   git:
     environment:
       - GIT_REPO_URL
-    image: alpine/git:v2.54.0@sha256:ae0f6f4bce38d2b8c40becc0d6241a08d9f57186ea03029de2189a2b5e722d94
+    image: alpine/git:v2.49.1
     entrypoint: /docker-entrypoint.sh
     volumes:
       - content:/git

compose.sftp.yml

@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   ssh:
-    image: lscr.io/linuxserver/openssh-server:latest@sha256:946fa26105e0ec212fdf821b9ddc59aab65f2c2d07c02b25ff0f5001fc332ff0
+    image: lscr.io/linuxserver/openssh-server:latest
     networks:
       - proxy
     environment:
@@ -22,7 +22,7 @@ services:
   # that content can be transferred through the unprivileged sshd process
   # using `scp` etc.
   sshstart:
-    image: lscr.io/linuxserver/openssh-server:latest@sha256:946fa26105e0ec212fdf821b9ddc59aab65f2c2d07c02b25ff0f5001fc332ff0
+    image: lscr.io/linuxserver/openssh-server:latest
     user: root
     depends_on:
       - ssh

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: nginx:1.31.7@sha256:6c3fee1d7a4686ea271e9cc60d9c741cdfbc44ecf11d343025e1cff4c5522f47
+    image: nginx:1.29.0
     networks:
       - proxy
     deploy:
@@ -15,13 +15,13 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        # Force HTTPS (redirect http -> https) on DOMAIN and any EXTRA_DOMAINS
+        # Redirect from EXTRA_DOMAINS to DOMAIN
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.14.1+1.31.6"
+        - "coop-cloud.${STACK_NAME}.version=1.11.0+1.29.0"
         - "backupbot.backup=true"
-        - "backupbot.backup.path=/usr/share/nginx/html"
+        - "backupbot.backup.path=/nonexistent-path-cc-ci-canary-bad"
     environment:
       - DEFAULT_CONF_FILE=/etc/nginx/conf.d/default.conf
       - REDIRECT_FROM_PATH

renovate.json

@@ -1,14 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ],
-  "packageRules": [
-    {
-      "matchDatasources": [
-        "docker"
-      ],
-      "pinDigests": true
-    }
-  ]
-}