6 Commits

Author SHA1 Message Date
5ac2d8526d chore: regall sweep trigger
All checks were successful
cc-ci/testme cc-ci: success
2026-06-17 02:13:21 +00:00
6a8c2fc560 Merge pull request 'chore: set update_config failure_action continue to handle concurrent app+db restart' (#2) from upgrade-1.7.0+v2.7.5 into main
Reviewed-on: #2
2026-06-15 17:43:00 +00:00
17f1649c2d chore: set update_config failure_action continue to handle concurrent app+db restart
All checks were successful
cc-ci/testme cc-ci: success
2026-06-12 03:22:22 +00:00
eafa87d4d1 chore: add app healthcheck start_period to avoid startup race
Some checks failed
cc-ci/testme cc-ci: failure
2026-06-12 03:12:18 +00:00
d561baaf06 chore: upgrade to 1.8.0+v2.7.5
Some checks failed
cc-ci/testme cc-ci: failure
2026-06-12 02:39:22 +00:00
107d7220ad chore: upgrade to 1.7.0+v2.7.5
All checks were successful
cc-ci/testme cc-ci: success
Confirms immich-server at the latest v2.7.5 + holds the DB pin immich v2.7.5 ships
(14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357), and adds a working postgres
backup/restore for the VectorChord DB (search_path rewrite per immich docs + a
local-trust pg_hba lockout, like matrix-synapse, so the app cannot race the reimport).
2026-06-10 16:53:52 +00:00
3 changed files with 17 additions and 20 deletions

View File

@ -45,4 +45,4 @@ You can manually create a volume that has more storage for the library. For exam
If you want to use the [external library functionality](https://docs.immich.app/guides/external-library/) of immich via a cifs/smb-share-drive you can use the additional `compose.storage.yml` file.
Just uncomment and edit the respective .env-files.
The external storage will be mounted to `/mnt/external_storage` (this is your import path in immich).
The external storage will be mounted to `/mnt/external_storage` (this is your import path in immich).

View File

@ -19,18 +19,21 @@ services:
- proxy
- backend
healthcheck:
disable: false
test: ["CMD-SHELL", "immich-healthcheck"]
start_period: 120s
depends_on:
- redis
- database
deploy:
update_config:
failure_action: continue
labels:
- "traefik.enable=true"
- "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=2283"
- "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
- "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
- "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
- "coop-cloud.${STACK_NAME}.version=1.6.0+v2.7.5"
- "coop-cloud.${STACK_NAME}.version=1.8.0+v2.7.5"
- "backupbot.backup=${ENABLE_BACKUPS:-true}"
- "backupbot.volumes.model-cache=false"
- "backupbot.volumes.uploads=false"
@ -54,7 +57,7 @@ services:
- backend
database:
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.3.0@sha256:87c050465fb969a68c7ac23e375e21f4c95cfacd0edce5fa1bc31e63b7891891
environment:
POSTGRES_PASSWORD_FILE: /run/secrets/db_password
POSTGRES_USER: ${DB_USERNAME}

View File

@ -1,14 +1,11 @@
#!/bin/bash
# Postgres backup/restore hook for the immich `database` service (VectorChord/pgvecto.rs image).
# Invoked by backupbot-two via the deploy labels:
# backupbot.backup.pre-hook = "/pg_backup.sh backup"
# backupbot.backup.volumes.postgres.path = "backup.sql"
# backupbot.restore.post-hook = "/pg_backup.sh restore"
# Backup dumps the immich DB to backup.sql (gzip) inside the postgres volume; backupbot then
# archives that file. Restore reads it back and reimports. immich-server keeps TCP connections
# open to the DB, so restore must terminate them and FORCE-drop before recreating (the matrix-synapse
# pg_hba "local trust" trick does not cover networked connections).
# Postgres backup/restore hook for immich's VectorChord/pgvecto.rs `database` service.
# Two image-specific constraints:
# 1. Never DROP DATABASE — the bundled pgvecto.rs worker PANICs and crashes the server.
# So `pg_dump --clean --if-exists` does a per-object replace in the live DB on restore.
# 2. Restore rewrites the dump's empty search_path back to `public, pg_catalog` so VectorChord
# types resolve (per https://docs.immich.app/administration/backup-and-restore).
set -e
@ -18,16 +15,13 @@ DB_USER="${POSTGRES_USER:-postgres}"
DB_NAME="${POSTGRES_DB:-immich}"
function backup {
pg_dump -U "$DB_USER" "$DB_NAME" | gzip > "$BACKUP_FILE"
pg_dump --clean --if-exists -U "$DB_USER" "$DB_NAME" | gzip > "$BACKUP_FILE"
}
function restore {
# immich-server holds connections to the DB; drop them so DROP DATABASE can proceed.
psql -U "$DB_USER" -d postgres -c \
"SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname='${DB_NAME}' AND pid<>pg_backend_pid();"
psql -U "$DB_USER" -d postgres -c "DROP DATABASE ${DB_NAME} WITH (FORCE);"
createdb -U "$DB_USER" "$DB_NAME"
gunzip -c "$BACKUP_FILE" | psql -U "$DB_USER" -d "$DB_NAME" -1 -v ON_ERROR_STOP=1 -f -
gunzip -c "$BACKUP_FILE" \
| sed "s/SELECT pg_catalog.set_config('search_path', '', false);/SELECT pg_catalog.set_config('search_path', 'public, pg_catalog', true);/g" \
| psql -U "$DB_USER" -d "$DB_NAME" -f -
}
$@