selfhostedops/selfhostedops-stack
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Episode 17: updates one service at a time, a health check that asks real questions, every tag pinned

Browse source 
updates/health.sh: 43 checks across all services (API answers, git refs, a push
message round trip, SSO redirects and token endpoint, mesh state, backup age).
updates/update.sh: per service pull or build, snapshot, recreate, wait for the
health check, put image and data back on red and stop the run.
backup/backup.sh: online dumps for n8n, Pocket ID and tinyauth; BACKUP_TAG so
pre-update snapshots are not removed by the nightly keep-daily rule.
compose.yml and caddy/Dockerfile: exact versions instead of latest, 16, 7-alpine
and caddy:2-alpine.
This commit is contained in:
Maximilian Grimm 2026-10-08 22:04:29 +02:00
parent 1655d04d7d
commit 55b2fe7646
7 changed files with 380 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

9
updates/health.env.example Normal file
View file

@ -0,0 +1,9 @@
# Optional credentials for updates/health.sh. Copy to health.env (mode 600).
# Read-only Forgejo token: forgejo admin user generate-access-token -u <user> -t health --scopes read:repository --raw
FORGEJO_HEALTH_TOKEN=
FORGEJO_HEALTH_REPO=owner/repo
# ntfy user with read-write on the topic "healthcheck":
# ntfy user add health && ntfy access health healthcheck rw
NTFY_HEALTH_AUTH=health:password
# Number of active n8n workflows you expect (leave empty for "at least one")
N8N_EXPECT_ACTIVE=