Compare commits

7 Commits

Author SHA1 Message Date
val
8d74ee6495 chore: publish 1.9.0+v3.0.1 release 2026-07-04 13:21:03 +02:00
dff4fd6cb3 chore(deps): update immich monorepo to v3 2026-07-02 22:10:15 +00:00
6b45c97b43 Merge pull request 'chore: upgrade to 1.7.0+v2.7.5' (#11) from upgrade-1.7.0+v2.7.5 into main
Reviewed-on: https://git.coopcloud.tech/coop-cloud/immich/pulls/11
2026-06-15 17:39:56 +00:00
17f1649c2d chore: set update_config failure_action continue to handle concurrent app+db restart
All checks were successful
cc-ci/testme cc-ci: success
2026-06-12 03:22:22 +00:00
eafa87d4d1 chore: add app healthcheck start_period to avoid startup race
Some checks failed
cc-ci/testme cc-ci: failure
2026-06-12 03:12:18 +00:00
d561baaf06 chore: upgrade to 1.8.0+v2.7.5
Some checks failed
cc-ci/testme cc-ci: failure
2026-06-12 02:39:22 +00:00
107d7220ad chore: upgrade to 1.7.0+v2.7.5
All checks were successful
cc-ci/testme cc-ci: success
Confirms immich-server at the latest v2.7.5 + holds the DB pin immich v2.7.5 ships
(14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357), and adds a working postgres
backup/restore for the VectorChord DB (search_path rewrite per immich docs + a
local-trust pg_hba lockout, like matrix-synapse, so the app cannot race the reimport).
2026-06-10 16:53:52 +00:00
3 changed files with 19 additions and 21 deletions

View File

@ -3,7 +3,7 @@ version: "3.8"
services: services:
app: app:
image: ghcr.io/immich-app/immich-server:v2.7.5 image: ghcr.io/immich-app/immich-server:v3.0.1
volumes: volumes:
- uploads:/usr/src/app/upload - uploads:/usr/src/app/upload
- /etc/localtime:/etc/localtime:ro - /etc/localtime:/etc/localtime:ro
@ -19,18 +19,21 @@ services:
- proxy - proxy
- backend - backend
healthcheck: healthcheck:
disable: false test: ["CMD-SHELL", "immich-healthcheck"]
start_period: 120s
depends_on: depends_on:
- redis - redis
- database - database
deploy: deploy:
update_config:
failure_action: continue
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=2283" - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=2283"
- "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})" - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
- "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure" - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
- "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}" - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
- "coop-cloud.${STACK_NAME}.version=1.6.0+v2.7.5" - "coop-cloud.${STACK_NAME}.version=1.9.0+v3.0.1"
- "backupbot.backup=${ENABLE_BACKUPS:-true}" - "backupbot.backup=${ENABLE_BACKUPS:-true}"
- "backupbot.volumes.model-cache=false" - "backupbot.volumes.model-cache=false"
- "backupbot.volumes.uploads=false" - "backupbot.volumes.uploads=false"
@ -38,7 +41,7 @@ services:
immich-machine-learning: # TODO: this has to be that name, as the frontend tries to reach it at: http://immich-machine-learning:3003 immich-machine-learning: # TODO: this has to be that name, as the frontend tries to reach it at: http://immich-machine-learning:3003
image: ghcr.io/immich-app/immich-machine-learning:v2.7.5 image: ghcr.io/immich-app/immich-machine-learning:v3.0.1
volumes: volumes:
- model-cache:/cache - model-cache:/cache
networks: networks:
@ -54,7 +57,7 @@ services:
- backend - backend
database: database:
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23 image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.3.0@sha256:87c050465fb969a68c7ac23e375e21f4c95cfacd0edce5fa1bc31e63b7891891
environment: environment:
POSTGRES_PASSWORD_FILE: /run/secrets/db_password POSTGRES_PASSWORD_FILE: /run/secrets/db_password
POSTGRES_USER: ${DB_USERNAME} POSTGRES_USER: ${DB_USERNAME}

View File

@ -1,14 +1,11 @@
#!/bin/bash #!/bin/bash
# Postgres backup/restore hook for the immich `database` service (VectorChord/pgvecto.rs image). # Postgres backup/restore hook for immich's VectorChord/pgvecto.rs `database` service.
# Invoked by backupbot-two via the deploy labels: # Two image-specific constraints:
# backupbot.backup.pre-hook = "/pg_backup.sh backup" # 1. Never DROP DATABASE — the bundled pgvecto.rs worker PANICs and crashes the server.
# backupbot.backup.volumes.postgres.path = "backup.sql" # So `pg_dump --clean --if-exists` does a per-object replace in the live DB on restore.
# backupbot.restore.post-hook = "/pg_backup.sh restore" # 2. Restore rewrites the dump's empty search_path back to `public, pg_catalog` so VectorChord
# Backup dumps the immich DB to backup.sql (gzip) inside the postgres volume; backupbot then # types resolve (per https://docs.immich.app/administration/backup-and-restore).
# archives that file. Restore reads it back and reimports. immich-server keeps TCP connections
# open to the DB, so restore must terminate them and FORCE-drop before recreating (the matrix-synapse
# pg_hba "local trust" trick does not cover networked connections).
set -e set -e
@ -18,16 +15,13 @@ DB_USER="${POSTGRES_USER:-postgres}"
DB_NAME="${POSTGRES_DB:-immich}" DB_NAME="${POSTGRES_DB:-immich}"
function backup { function backup {
pg_dump -U "$DB_USER" "$DB_NAME" | gzip > "$BACKUP_FILE" pg_dump --clean --if-exists -U "$DB_USER" "$DB_NAME" | gzip > "$BACKUP_FILE"
} }
function restore { function restore {
# immich-server holds connections to the DB; drop them so DROP DATABASE can proceed. gunzip -c "$BACKUP_FILE" \
psql -U "$DB_USER" -d postgres -c \ | sed "s/SELECT pg_catalog.set_config('search_path', '', false);/SELECT pg_catalog.set_config('search_path', 'public, pg_catalog', true);/g" \
"SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname='${DB_NAME}' AND pid<>pg_backend_pid();" | psql -U "$DB_USER" -d "$DB_NAME" -f -
psql -U "$DB_USER" -d postgres -c "DROP DATABASE ${DB_NAME} WITH (FORCE);"
createdb -U "$DB_USER" "$DB_NAME"
gunzip -c "$BACKUP_FILE" | psql -U "$DB_USER" -d "$DB_NAME" -1 -v ON_ERROR_STOP=1 -f -
} }
$@ $@

1
release/1.9.0+v3.0.1 Normal file
View File

@ -0,0 +1 @@
upgrade to immich 3 successfully deployed, but perhaps better check https://immich.app/blog/v3-migration if it affects your deployment