From deac2ea2ab0dbb8d024b98b20d04ed13c4630a52 Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Mon, 11 May 2026 18:32:35 +0000
Subject: [PATCH 01/26] bump to 0.3.0+v5.1.0

---
 compose.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/compose.yml b/compose.yml
index 0887e23..c78729c 100644
--- a/compose.yml
+++ b/compose.yml
@@ -84,14 +84,14 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v4.5.0
+    image: lasuite/impress-frontend:v5.1.0
     networks:
       - backend
     deploy:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.2.9+v4.5.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.0+v5.1.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
@@ -101,7 +101,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v4.5.0
+    image: lasuite/impress-backend:v5.1.0
     networks:
       - backend
     environment:
@@ -136,7 +136,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v4.5.0
+    image: lasuite/impress-backend:v5.1.0
     networks:
       - backend
     healthcheck:
@@ -166,7 +166,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v4.5.0
+    image: lasuite/impress-y-provider:v5.1.0
     networks:
       - backend
     healthcheck:
@@ -212,7 +212,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8.0.5
+    image: redis:8.2.6
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 15s
@@ -252,7 +252,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.29.5
+    image: nginx:1.30.0
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8083"]
       interval: 15s

From c9ca51a3da654b7461fc5db3348d6ba3919b4ffb Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Mon, 11 May 2026 18:37:39 +0000
Subject: [PATCH 02/26] rename AI env vars for v5.x (AI_API_KEY ->
 OPENAI_SDK_API_KEY, AI_BASE_URL -> OPENAI_SDK_BASE_URL)

---
 compose.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/compose.yml b/compose.yml
index c78729c..0d43758 100644
--- a/compose.yml
+++ b/compose.yml
@@ -49,10 +49,10 @@ x-common-env: &common-env
   LOGOUT_REDIRECT_URL:
   OIDC_REDIRECT_ALLOWED_HOSTS:
   OIDC_AUTH_REQUEST_EXTRA_PARAMS:
-  # AI (Fixme: remove?)
+  # AI
   AI_FEATURE_ENABLED: "false"
-  AI_BASE_URL: https://openaiendpoint.com
-  AI_API_KEY: password
+  OPENAI_SDK_BASE_URL: https://openaiendpoint.com
+  OPENAI_SDK_API_KEY: password
   AI_MODEL: llama
   # Collaboration
   COLLABORATION_API_URL: https://$DOMAIN/collaboration/api/

From 9f6852404693e54e61a6051a98d51955ae5baaa5 Mon Sep 17 00:00:00 2001
From: notplants <mfowler.email@protonmail.com>
Date: Mon, 18 May 2026 17:42:23 +0000
Subject: [PATCH 03/26] bump to 0.3.1+v5.1.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add env vars introduced upstream across v4.6 → v5.0:
- CONVERSION_UPLOAD_ENABLED (v4.8.5) — recipe override true (upstream default false)
- CONVERSION_FILE_MAX_SIZE / _EXTENSIONS_ALLOWED / _API_* (v4.5.0 source)
- DB_PSYCOPG_POOL_ENABLED (v4.8.1)
- DJANGO_EMAIL_URL_APP (v4.6.0) — recipe sets to https://${DOMAIN}
- MEDIA_AUTH_ORIGINAL_URL_HEADER (v5.0.0)

All except CONVERSION_UPLOAD_ENABLED and DJANGO_EMAIL_URL_APP use the
bare-key defer-to-upstream pattern (like existing LOGGING_LEVEL_*), so
upstream defaults apply unless the operator sets them in .env.

Document all 10 vars (commented) in .env.sample.
---
 .env.sample | 34 ++++++++++++++++++++++++++++++++++
 compose.yml | 16 +++++++++++++++-
 2 files changed, 49 insertions(+), 1 deletion(-)

diff --git a/.env.sample b/.env.sample
index 43bd3d1..779ebcd 100644
--- a/.env.sample
+++ b/.env.sample
@@ -72,3 +72,37 @@ LOGGING_LEVEL_LOGGERS_APP=INFO
 ##############################################################################
 # Set to false to disable automatic migrations on backend startup
 # AUTO_MIGRATIONS=true
+
+##############################################################################
+# CONVERSION (file upload → Yjs via y-provider)
+##############################################################################
+# Allow uploading .docx/.md files for conversion to Yjs.
+# Recipe sets this to true (upstream default is false).
+# CONVERSION_UPLOAD_ENABLED=true
+# Upstream defaults (uncomment to override):
+# CONVERSION_FILE_MAX_SIZE=20971520
+# CONVERSION_FILE_EXTENSIONS_ALLOWED=.docx,.md
+# CONVERSION_API_ENDPOINT=convert
+# CONVERSION_API_CONTENT_FIELD=content
+# CONVERSION_API_TIMEOUT=30
+# CONVERSION_API_SECURE=false
+
+##############################################################################
+# DATABASE CONNECTION POOL
+##############################################################################
+# Upstream default (uncomment to override):
+# DB_PSYCOPG_POOL_ENABLED=false
+
+##############################################################################
+# EMAIL APP URL
+##############################################################################
+# DJANGO_EMAIL_URL_APP is set automatically in compose.yml to https://${DOMAIN}.
+# Override is not exposed via .env — edit compose.yml directly if needed.
+# (Upstream default falls back to Django's Site framework, not configured here.)
+
+##############################################################################
+# MEDIA AUTH HEADER
+##############################################################################
+# Header the backend reads for media auth subrequests.
+# Upstream default matches the recipe's nginx config (X-Original-URL).
+# MEDIA_AUTH_ORIGINAL_URL_HEADER=HTTP_X_ORIGINAL_URL
diff --git a/compose.yml b/compose.yml
index 0d43758..cd894ef 100644
--- a/compose.yml
+++ b/compose.yml
@@ -56,6 +56,20 @@ x-common-env: &common-env
   AI_MODEL: llama
   # Collaboration
   COLLABORATION_API_URL: https://$DOMAIN/collaboration/api/
+  # Email app URL (used in email templates; matches recipe DOMAIN)
+  DJANGO_EMAIL_URL_APP: "https://${DOMAIN}"
+  # Conversion (file upload → Yjs via y-provider)
+  CONVERSION_UPLOAD_ENABLED: "${CONVERSION_UPLOAD_ENABLED:-true}"
+  CONVERSION_FILE_MAX_SIZE:
+  CONVERSION_FILE_EXTENSIONS_ALLOWED:
+  CONVERSION_API_ENDPOINT:
+  CONVERSION_API_CONTENT_FIELD:
+  CONVERSION_API_TIMEOUT:
+  CONVERSION_API_SECURE:
+  # Database connection pool
+  DB_PSYCOPG_POOL_ENABLED:
+  # Media auth header (matches recipe nginx by default)
+  MEDIA_AUTH_ORIGINAL_URL_HEADER:
 
 x-postgres-env: &postgres-env
   # Postgresql db container configuration
@@ -91,7 +105,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.0+v5.1.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.1+v5.1.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]

From 03db64341d9004ca682e0f2e838ef87b1708ba74 Mon Sep 17 00:00:00 2001
From: notplants <mfowler.email@protonmail.com>
Date: Mon, 18 May 2026 18:43:02 +0000
Subject: [PATCH 04/26] bump to 0.3.2+v5.1.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Wire up the file-upload conversion path that CONVERSION_UPLOAD_ENABLED
exposes:

- Add Y_PROVIDER_API_BASE_URL and Y_PROVIDER_API_KEY_FILE to common-env
  so the backend can call y-provider (used for .md→Yjs).
- Add DOCSPEC_API_URL to common-env and a new docspec service
  (ghcr.io/docspecio/api:3.0.1) for the .docx→BlockNote→Yjs path.

These were missing because they were dormant while
CONVERSION_UPLOAD_ENABLED defaulted to false upstream. Now that the
recipe defaults it to true (0.3.1+v5.1.0), they're required for the
upload endpoint to function.

Upstream reference:
- https://github.com/suitenumerique/docs/blob/v5.1.0/compose.yml (docspec service)
- https://github.com/suitenumerique/docs/blob/v5.1.0/env.d/development/common (DOCSPEC_API_URL, Y_PROVIDER_API_BASE_URL)
- https://github.com/docspecio/api (DocSpec source)
---
 compose.yml | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index cd894ef..21879b6 100644
--- a/compose.yml
+++ b/compose.yml
@@ -66,6 +66,11 @@ x-common-env: &common-env
   CONVERSION_API_CONTENT_FIELD:
   CONVERSION_API_TIMEOUT:
   CONVERSION_API_SECURE:
+  # Y-Provider base URL + API key (needed when CONVERSION_UPLOAD_ENABLED is true)
+  Y_PROVIDER_API_BASE_URL: http://y-provider:4444/api/
+  Y_PROVIDER_API_KEY_FILE: /run/secrets/y_api_key
+  # DocSpec — converts .docx → BlockNote JSON, then y-provider turns that into Yjs
+  DOCSPEC_API_URL: http://docspec:4000/conversion
   # Database connection pool
   DB_PSYCOPG_POOL_ENABLED:
   # Media auth header (matches recipe nginx by default)
@@ -105,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.1+v5.1.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.2+v5.1.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
@@ -198,6 +203,18 @@ services:
     secrets:
       - y_api_key
 
+  docspec:
+    image: ghcr.io/docspecio/api:3.0.1
+    networks:
+      - backend
+    healthcheck:
+      # Use 127.0.0.1, which is required instead of localhost for this healtcheck because of elixir/busybox bindings
+      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:4000/health"]
+      interval: 15s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
   db:
     image: pgautoupgrade/pgautoupgrade:18-debian
     networks:

From 148439f7cf7c0dced0a37324170d854cddee5bde Mon Sep 17 00:00:00 2001
From: trav <trav@teafry.me>
Date: Mon, 25 May 2026 20:41:17 +0100
Subject: [PATCH 05/26] chore: upgrade to 0.3.3+v5.1.0

---
 compose.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/compose.yml b/compose.yml
index 21879b6..6aec4a6 100644
--- a/compose.yml
+++ b/compose.yml
@@ -110,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.2+v5.1.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.3+v5.1.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
@@ -204,7 +204,7 @@ services:
       - y_api_key
 
   docspec:
-    image: ghcr.io/docspecio/api:3.0.1
+    image: ghcr.io/docspecio/api:3.0.2
     networks:
       - backend
     healthcheck:
@@ -243,7 +243,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8.2.6
+    image: redis:8.6.3
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 15s
@@ -283,7 +283,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.30.0
+    image: nginx:1.31.1
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8083"]
       interval: 15s

From 4c57b8f80d546ac3b6e3345daef283d0166dc87e Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@autonomic.zone>
Date: Tue, 2 Jun 2026 07:23:07 +0000
Subject: [PATCH 06/26] chore: upgrade to 0.3.4+v5.1.0

---
 compose.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/compose.yml b/compose.yml
index 6aec4a6..41db936 100644
--- a/compose.yml
+++ b/compose.yml
@@ -110,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.3+v5.1.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.4+v5.1.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
@@ -243,7 +243,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8.6.3
+    image: redis:8.8.0
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 15s

From da9a110c46bc0db0264652411a9dec61067b9e3d Mon Sep 17 00:00:00 2001
From: trav <trav@teafry.me>
Date: Tue, 2 Jun 2026 13:12:14 -0400
Subject: [PATCH 07/26] update pgbackup version to v4

---
 abra.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/abra.sh b/abra.sh
index 2cb0ec8..468faea 100755
--- a/abra.sh
+++ b/abra.sh
@@ -2,7 +2,7 @@
 # Docs: https://docs.coopcloud.tech/maintainers/handbook/#manage-configs
 export ABRA_ENTRYPOINT_VERSION=v5
 export NGINX_CONF_VERSION=v3
-export PG_BACKUP_VERSION=v3
+export PG_BACKUP_VERSION=v4
 export MINIO_INITIALIZE_VERSION=v1
 export MIGRATE_VERSION=v1
 

From 22076ad5d9c9aa94612ff6c9041ffe4bb7228b42 Mon Sep 17 00:00:00 2001
From: autonomic-bot <bot@autonomic.zone>
Date: Fri, 5 Jun 2026 02:43:55 +0000
Subject: [PATCH 08/26] chore: upgrade to v5.2.0

---
 compose.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/compose.yml b/compose.yml
index 41db936..d50b20e 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,14 +103,14 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.1.0
+    image: lasuite/impress-frontend:v5.2.0
     networks:
       - backend
     deploy:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.4+v5.1.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.4+v5.2.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.1.0
+    image: lasuite/impress-backend:v5.2.0
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.1.0
+    image: lasuite/impress-backend:v5.2.0
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.1.0
+    image: lasuite/impress-y-provider:v5.2.0
     networks:
       - backend
     healthcheck:

From 8a06cfc2c904ead7bbf881517fceaf3b079e10ef Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Fri, 12 Jun 2026 03:34:05 +0000
Subject: [PATCH 09/26] chore: upgrade to v5.2.1

---
 compose.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/compose.yml b/compose.yml
index d50b20e..4a2d800 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,14 +103,14 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.2.0
+    image: lasuite/impress-frontend:v5.2.1
     networks:
       - backend
     deploy:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.4+v5.2.0"
+        - "coop-cloud.${STACK_NAME}.version=0.3.5+v5.2.1"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.2.0
+    image: lasuite/impress-backend:v5.2.1
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.2.0
+    image: lasuite/impress-backend:v5.2.1
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.2.0
+    image: lasuite/impress-y-provider:v5.2.1
     networks:
       - backend
     healthcheck:

From 505e53ccc2ea9183aa98e9fbe4c3906810e570f2 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Mon, 22 Jun 2026 21:31:06 +0000
Subject: [PATCH 10/26] chore: upgrade to v5.3.0 (impress
 app/backend/celery/y-provider) + nginx 1.31.2

---
 compose.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/compose.yml b/compose.yml
index 4a2d800..3d6ac73 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,7 +103,7 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.2.1
+    image: lasuite/impress-frontend:v5.3.0
     networks:
       - backend
     deploy:
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.2.1
+    image: lasuite/impress-backend:v5.3.0
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.2.1
+    image: lasuite/impress-backend:v5.3.0
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.2.1
+    image: lasuite/impress-y-provider:v5.3.0
     networks:
       - backend
     healthcheck:
@@ -283,7 +283,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.31.1
+    image: nginx:1.31.2
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8083"]
       interval: 15s

From 9e3f3b13517bc8df63a46778090138f1e2c84ce5 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Mon, 29 Jun 2026 00:56:21 +0000
Subject: [PATCH 11/26] chore: upgrade impress to v5.3.0, nginx to 1.31.2,
 minio to RELEASE.2025-09-07

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 3d6ac73..b8d6a83 100644
--- a/compose.yml
+++ b/compose.yml
@@ -253,7 +253,7 @@ services:
       - backend
 
   minio:
-    image: minio/minio:RELEASE.2025-05-24T17-08-30Z
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
     environment: *minio-env
     healthcheck:
       test: ["CMD", "mc", "ready", "local"]

From 7e7ba76a6b00fee61999ab9411c30dc8fe74b37f Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Mon, 13 Jul 2026 20:32:19 +0000
Subject: [PATCH 12/26] chore: upgrade impress to v5.4.1

---
 compose.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/compose.yml b/compose.yml
index b8d6a83..4e5aa2d 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,7 +103,7 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.3.0
+    image: lasuite/impress-frontend:v5.4.1
     networks:
       - backend
     deploy:
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.3.0
+    image: lasuite/impress-backend:v5.4.1
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.3.0
+    image: lasuite/impress-backend:v5.4.1
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.3.0
+    image: lasuite/impress-y-provider:v5.4.1
     networks:
       - backend
     healthcheck:

From f772297f865e4c41626edf9632c8bb1d07dcf389 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Fri, 24 Jul 2026 04:23:34 +0000
Subject: [PATCH 13/26] chore: upgrade nginx to 1.31.3

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 4e5aa2d..4dc4449 100644
--- a/compose.yml
+++ b/compose.yml
@@ -283,7 +283,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.31.2
+    image: nginx:1.31.3
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8083"]
       interval: 15s

From 5821060339f5bb1807655b966e0aad20da9eb548 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Tue, 4 Aug 2026 00:21:52 +0000
Subject: [PATCH 14/26] chore: upgrade to impress v5.4.1 + redis 8.8.1 + nginx
 1.31.3 + minio 2025-09-07

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 4dc4449..1361d8e 100644
--- a/compose.yml
+++ b/compose.yml
@@ -243,7 +243,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8.8.0
+    image: redis:8.8.1
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 15s

From bdbefca6c62e5f6031c5aac124bf02d9a51b887f Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Tue, 4 Aug 2026 01:12:02 +0000
Subject: [PATCH 15/26] chore: upgrade impress to v5.4.1, redis to 8.10.0,
 nginx to 1.31.3

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 1361d8e..c4b8203 100644
--- a/compose.yml
+++ b/compose.yml
@@ -243,7 +243,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8.8.1
+    image: redis:8.10.0
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 15s

From 1dc6544f6f0fbfcf7344d35ebf1249dc3be57299 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Fri, 21 Aug 2026 02:42:52 +0000
Subject: [PATCH 16/26] chore: upgrade redis to 8.10.1, nginx to 1.31.4

---
 compose.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/compose.yml b/compose.yml
index c4b8203..9335e2a 100644
--- a/compose.yml
+++ b/compose.yml
@@ -243,7 +243,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8.10.0
+    image: redis:8.10.1
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 15s
@@ -283,7 +283,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.31.3
+    image: nginx:1.31.4
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8083"]
       interval: 15s

From f47e452ca848ea50631eef684b49c55a0fdc8e16 Mon Sep 17 00:00:00 2001
From: trav <trav@teafry.me>
Date: Mon, 24 Aug 2026 12:35:15 -0400
Subject: [PATCH 17/26] chore: publish 0.4.0+v5.4.1 release

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 9335e2a..bf4dc33 100644
--- a/compose.yml
+++ b/compose.yml
@@ -110,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.5+v5.2.1"
+        - "coop-cloud.${STACK_NAME}.version=0.4.0+v5.4.1"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]

From 1bb8213b3745b737083c2fc15c38fcbf11397238 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@autonomic.zone>
Date: Fri, 28 Aug 2026 03:17:10 +0000
Subject: [PATCH 18/26] chore: upgrade impress to v5.5.0

---
 compose.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/compose.yml b/compose.yml
index bf4dc33..d87fd77 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,7 +103,7 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.4.1
+    image: lasuite/impress-frontend:v5.5.0
     networks:
       - backend
     deploy:
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.4.1
+    image: lasuite/impress-backend:v5.5.0
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.4.1
+    image: lasuite/impress-backend:v5.5.0
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.4.1
+    image: lasuite/impress-y-provider:v5.5.0
     networks:
       - backend
     healthcheck:

From f3cb4433729f09e0fca1ca3505af053b4d218809 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Fri, 4 Sep 2026 02:32:06 +0000
Subject: [PATCH 19/26] chore: upgrade impress to v5.6.0, nginx to 1.31.5

---
 compose.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/compose.yml b/compose.yml
index d87fd77..317e38b 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,7 +103,7 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.5.0
+    image: lasuite/impress-frontend:v5.6.0
     networks:
       - backend
     deploy:
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.5.0
+    image: lasuite/impress-backend:v5.6.0
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.5.0
+    image: lasuite/impress-backend:v5.6.0
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.5.0
+    image: lasuite/impress-y-provider:v5.6.0
     networks:
       - backend
     healthcheck:
@@ -283,7 +283,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.31.4
+    image: nginx:1.31.5
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8083"]
       interval: 15s

From 71b74f5dea16339e52b8ed390998ba64ab969b2b Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Mon, 7 Sep 2026 21:43:44 +0000
Subject: [PATCH 20/26] chore: upgrade impress to v5.6.1

---
 compose.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/compose.yml b/compose.yml
index 317e38b..a8cc4c8 100644
--- a/compose.yml
+++ b/compose.yml
@@ -103,7 +103,7 @@ x-minio-env: &minio-env
 
 services:
   app:
-    image: lasuite/impress-frontend:v5.6.0
+    image: lasuite/impress-frontend:v5.6.1
     networks:
       - backend
     deploy:
@@ -120,7 +120,7 @@ services:
       start_period: 10s
 
   backend:
-    image: lasuite/impress-backend:v5.6.0
+    image: lasuite/impress-backend:v5.6.1
     networks:
       - backend
     environment:
@@ -155,7 +155,7 @@ services:
       - email_pass
 
   celery:
-    image: lasuite/impress-backend:v5.6.0
+    image: lasuite/impress-backend:v5.6.1
     networks:
       - backend
     healthcheck:
@@ -185,7 +185,7 @@ services:
 
 
   y-provider:
-    image: lasuite/impress-y-provider:v5.6.0
+    image: lasuite/impress-y-provider:v5.6.1
     networks:
       - backend
     healthcheck:

From 5afdfc27621b2903dc864c25e4012bcf051517e8 Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Tue, 15 Sep 2026 15:02:45 -0400
Subject: [PATCH 21/26] chore: publish 0.4.1+v5.6.1 release

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index a8cc4c8..e2fb5e6 100644
--- a/compose.yml
+++ b/compose.yml
@@ -110,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.4.0+v5.4.1"
+        - "coop-cloud.${STACK_NAME}.version=0.4.1+v5.6.1"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]

From 7afbae3ea0eadcc13fa2a3e8e833827ebc1684bd Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Tue, 15 Sep 2026 19:10:40 +0000
Subject: [PATCH 22/26] fix: pull MinIO image from Quay

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index e2fb5e6..c10af74 100644
--- a/compose.yml
+++ b/compose.yml
@@ -253,7 +253,7 @@ services:
       - backend
 
   minio:
-    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
+    image: quay.io/minio/minio:RELEASE.2025-09-07T16-13-09Z
     environment: *minio-env
     healthcheck:
       test: ["CMD", "mc", "ready", "local"]

From bf0f3cfc292febbdf2b84ae7546345ee23ea30ac Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Tue, 15 Sep 2026 15:12:15 -0400
Subject: [PATCH 23/26] chore: publish 0.4.2+v5.6.1 release

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index c10af74..8539a24 100644
--- a/compose.yml
+++ b/compose.yml
@@ -110,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.4.1+v5.6.1"
+        - "coop-cloud.${STACK_NAME}.version=0.4.2+v5.6.1"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]

From 4f9cb564694a26afe4f74af11a4068d0ec31e9b1 Mon Sep 17 00:00:00 2001
From: Linus Gasser <linus.gasser@epfl.ch>
Date: Tue, 29 Sep 2026 07:41:41 +0200
Subject: [PATCH 24/26] Update to minio from bitnamilegacy

---
 compose.yml         | 9 +++++----
 minio-initialize.sh | 5 +++++
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/compose.yml b/compose.yml
index 8539a24..46fc16c 100644
--- a/compose.yml
+++ b/compose.yml
@@ -253,7 +253,8 @@ services:
       - backend
 
   minio:
-    image: quay.io/minio/minio:RELEASE.2025-09-07T16-13-09Z
+    image: bitnamilegacy/minio:2025.7.23-debian-12-r5
+    user: root
     environment: *minio-env
     healthcheck:
       test: ["CMD", "mc", "ready", "local"]
@@ -262,11 +263,11 @@ services:
       retries: 300
     networks:
       - backend
-    command: minio server /data
+    command: /opt/bitnami/scripts/minio/run.sh
     entrypoint: >
-      sh -c "/minio-initialize.sh & exec /usr/bin/docker-entrypoint.sh \"$$@\"" --
+      sh -c "/minio-initialize.sh & exec /opt/bitnami/scripts/minio/entrypoint.sh \"$$@\"" --
     volumes:
-      - minio:/data
+      - minio:/bitnami/minio/data
     deploy:
       labels:
         backupbot.backup: "${ENABLE_BACKUPS:-true}"
diff --git a/minio-initialize.sh b/minio-initialize.sh
index 3511083..f0f552e 100644
--- a/minio-initialize.sh
+++ b/minio-initialize.sh
@@ -1,6 +1,11 @@
 #!/bin/sh
 set -e
 
+# Use an isolated mc config dir: the bundled Bitnami image runs its own
+# internal mc client (as the "minio" user) against the default /.mc path,
+# which collides with this script running as root against the same path.
+export MC_CONFIG_DIR=/tmp/mc-docs-init
+
 # Wait for minio to be ready (up to 60 seconds)
 i=0
 while ! mc ready local 2>/dev/null; do

From 9f3d9588a21fd8e8b71dde48e1a599e3afbb25b4 Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Tue, 29 Sep 2026 10:04:09 -0400
Subject: [PATCH 25/26] chore: publish 0.4.3+v5.6.1 release

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 46fc16c..3015562 100644
--- a/compose.yml
+++ b/compose.yml
@@ -110,7 +110,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.4.2+v5.6.1"
+        - "coop-cloud.${STACK_NAME}.version=0.4.3+v5.6.1"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]

From 25db1d6790efbef342c0940a37f0d2d864ba5b33 Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Tue, 29 Sep 2026 14:26:16 +0000
Subject: [PATCH 26/26] docs: add recipe maintenance policy

---
 MAINTENANCE.md | 15 +++++++++++++++
 README.md      |  5 +++++
 2 files changed, 20 insertions(+)
 create mode 100644 MAINTENANCE.md

diff --git a/MAINTENANCE.md b/MAINTENANCE.md
new file mode 100644
index 0000000..5e6ae11
--- /dev/null
+++ b/MAINTENANCE.md
@@ -0,0 +1,15 @@
+# Lasuite-Docs Recipe Maintenance
+
+All contributions should be made via pull requests.
+
+## Pull Requests
+
+A pull request can be merged directly into `main` by any maintainer. No approval is needed, but pull requests should be tested as working before merge.
+
+## Become a maintainer
+
+Everyone can apply to be a recipe maintainer:
+
+1. Watch the repository to get updates.
+2. Add yourself to the list in [README.md](./README.md) and open a pull request with the change.
+3. Once the pull request is merged, you will be added to the [La Suite maintainers team](https://git.coopcloud.tech/org/coop-cloud/teams/lasuite-maintainers).
diff --git a/README.md b/README.md
index 49e32b7..9c0a435 100644
--- a/README.md
+++ b/README.md
@@ -80,3 +80,8 @@ You then need to insert the password for your smtp server as a secret:
 Then redeploy the app, and automated e-mail sending should work:
 
 `abra app deploy <app-name> --force`
+
+## Maintainers
+
+* @trav
+* @notplants