chore: upgrade db to pgautoupgrade/pgautoupgrade:17-alpine

Reviewed-on: https://git.coopcloud.tech/coop-cloud/hedgedoc/pulls/31
Reviewed-by: fauno <fauno@sutty.coop.ar>

MAINTENANCE.md

@@ -0,0 +1,32 @@
+# Hedgedoc Recipe Maintenance
+
+All contributions should be made via a pull request. This is to ensure a
+certain quality and consistency, that others can rely on.
+
+## Maintainer Responsibilities
+
+A recipe maintainer has the following responsibilities:
+
+- Respond to pull requests / issues within two weeks
+- Make image security updates within a week
+- Make image major updates every three months
+
+In order to fullfill these responsibilities a recipe maintainer:
+
+- Has to watch the repository (to get notifications)
+- Needs to make sure renovate is configured properly
+
+## Pull Requests
+
+A pull request can be merged if it is approved by at least one maintainer. For
+pull requests opened by a maintainer they need to be approved by another
+maintainer. Even though it is okay to merge a pull request with one approval, it
+is always better if all maintainers looked at the pull request and approved it.
+
+## Become a maintainer
+
+Everyone can apply to be a recipe maintainer:
+1. Watch the repository to always get updates
+2. Simply add your self to the list in the [README.md](./README.md) and open a new pull request with the change.
+3. Once the pull request gets merged you will be added to the [hedgedoc maintainers team](https://git.coopcloud.tech/org/coop-cloud/teams/hedgedoc-maintainers).
+4. Join the room [#cc-|-hedgedoc-maintenance:matrix.org](#cc-|-hedgedoc-maintenance:matrix.org) and chat to other maintainers.

README.md

@@ -5,8 +5,9 @@
 [Hedgedoc][hedegedoc] using Coöp Cloud ♥
 
 <!-- metadata -->
+* **Maintainer**: [@fauno](https://git.coopcloud.tech/fauno) , Local-IT: [@moritz](https://git.coopcloud.tech/moritz), [@msimon](https://git.coopcloud.tech/simon), [@carla](https://git.coopcloud.tech/carla)
 * **Category**: Apps
-* **Status**: 2, beta
+* **Status**: 3
 * **Image**: [`quay.io/hedgedoc/hedgedoc`](https://quay.io/hedgedoc/hedgedoc), 4, upstream
 * **Healthcheck**: Yes
 * **Backups**: Yes
@@ -20,14 +21,14 @@
 1. Set up Docker Swarm and [`abra`][abra]
 2. Deploy [`coop-cloud/traefik`][compose-traefik]
 3. `abra app new hedgedoc`
-4. `abra app config YOURAPPDOMAIN` - be sure to change `$DOMAIN` to something that resolves to
+4. `abra app config YOURAPPDOMAIN` - be sure to change `DOMAIN` to something that resolves to
    your Docker swarm box
 5. `abra app deploy YOURAPPDOMAIN`
 6. Create initial user:
-	```
+
-	abra app run YOURAPPDOMAIN app bash
+```
-	. /docker-entrypoint.sh -e
+abra app run YOURAPPDOMAIN app -- bin/manage_users --add admin@ema.il
-	bin/manage_users
+```
 
 [hedegedoc]: https://github.com/hedgedoc/hedgedoc
 [abra]: https://git.autonomic.zone/autonomic-cooperative/abra

compose.postgresql.yml

@@ -14,7 +14,7 @@ services:
     secrets:
       - db_password
   db:
-    image: pgautoupgrade/pgautoupgrade:16-alpine
+    image: pgautoupgrade/pgautoupgrade:17-alpine
     environment:
       - POSTGRES_USER=codimd
       - POSTGRES_PASSWORD_FILE=/run/secrets/db_password

compose.yml

@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   app:
-    image: quay.io/hedgedoc/hedgedoc:1.10.7
+    image: quay.io/hedgedoc/hedgedoc:1.12.0
     environment:
       - CMD_USECDN=false
       - CMD_URL_ADDPORT=false
@@ -58,7 +58,7 @@ services:
         - "traefik.http.middlewares.${STACK_NAME}-redirecthostname.redirectregex.replacement=https://${DOMAIN}/$${2}"
         - "traefik.http.middlewares.${STACK_NAME}-redirecthostname.redirectregex.permanent=true"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=3.0.9+1.10.7"
+        - "coop-cloud.${STACK_NAME}.version=3.2.0+1.12.0"
         - "backupbot.backup=${ENABLE_BACKUPS:-true}"
     healthcheck:
       test: 'nodejs -e "http.get(''http://localhost:3000'', (res) => { console.log(''status: '', res.statusCode); if (res.statusCode == 200) { process.exit(0); } else { process.exit(1); } });"'

release/3.1.0+1.11.0

@@ -0,0 +1 @@
+Important CVE fixes

renovate.json

@@ -2,5 +2,6 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:base"
-  ]
+  ],
+  "reviewers": ["fauno","moritz","simon","carla"]
 }