chore(release): stage v1.7.54-alpha

core/archipelago/src/api/rpc/package/config.rs

@@ -192,7 +192,7 @@ pub(super) fn get_health_check_args(app_id: &str, _rpc_pass: &str) -> Vec<String
             ("curl -sf http://localhost:8123/api/ || exit 1", "30s", "3")
         }
         "grafana" => (
-            "curl -sf http://localhost:3000/api/health || exit 1",
+            "test -w /var/lib/grafana && test -w /var/lib/grafana/grafana.db && curl -sf http://localhost:3000/api/health || exit 1",
             "30s",
             "3",
         ),
@@ -292,7 +292,8 @@ pub(super) fn get_memory_limit(app_id: &str) -> &'static str {
         "nginx-proxy-manager" => "256m",
         // Databases
         "archy-btcpay-db" | "archy-mempool-db" | "mysql-mempool" => "512m",
-        "immich_postgres" | "penpot-postgres" => "256m",
+        "immich_postgres" => "2g",
+        "penpot-postgres" => "256m",
         "immich_redis" | "penpot-valkey" => "128m",
         // Default
         _ => "512m",
@@ -428,7 +429,7 @@ pub(super) async fn get_containers_for_app(package_id: &str) -> Result<Vec<Strin
 
 #[cfg(test)]
 mod tests {
-    use super::all_container_names;
+    use super::{all_container_names, get_health_check_args};
 
     #[test]
     fn bitcoin_variant_container_names_are_precise() {
@@ -440,6 +441,19 @@ mod tests {
         assert!(knots.contains(&"bitcoin-knots".to_string()));
         assert!(!knots.contains(&"bitcoin-core".to_string()));
     }
+
+    #[test]
+    fn grafana_health_requires_writable_data_and_http_health() {
+        let args = get_health_check_args("grafana", "unused");
+        let health_cmd = args
+            .iter()
+            .find_map(|arg| arg.strip_prefix("--health-cmd="))
+            .expect("grafana should have a health command");
+
+        assert!(health_cmd.contains("test -w /var/lib/grafana"));
+        assert!(health_cmd.contains("test -w /var/lib/grafana/grafana.db"));
+        assert!(health_cmd.contains("http://localhost:3000/api/health"));
+    }
 }
 
 /// Get data directories to clean for an app.

core/archipelago/src/api/rpc/package/runtime.rs

@@ -669,6 +669,9 @@ async fn do_package_start(to_start: &[String]) -> Result<()> {
     for name in to_start {
         ensure_runtime_host_port_listener(name).await?;
     }
+    if to_start.iter().any(|name| name == "indeedhub") {
+        super::install::patch_indeedhub_nostr_provider().await;
+    }
     Ok(())
 }
 
@@ -826,6 +829,9 @@ async fn do_package_restart(containers: &[String]) -> Result<()> {
         }
         ensure_runtime_host_port_listener(name).await?;
     }
+    if containers.iter().any(|name| name == "indeedhub") {
+        super::install::patch_indeedhub_nostr_provider().await;
+    }
     if !errors.is_empty() {
         return Err(anyhow::anyhow!("Restart failed: {}", errors.join("; ")));
     }
@@ -842,7 +848,10 @@ async fn repair_before_package_start(container_name: &str) {
         "btcpay-server" | "archy-nbxplorer" => repair_btcpay_dirs().await,
         "indeedhub-postgres" | "indeedhub-redis" | "indeedhub-minio" | "indeedhub-relay"
         | "indeedhub-api" | "indeedhub-ffmpeg" | "indeedhub" => repair_indeedhub_network().await,
-        "grafana" => cleanup_stale_pasta_port("3000").await,
+        "grafana" => {
+            repair_grafana_dirs().await;
+            cleanup_stale_pasta_port("3000").await;
+        }
         "gitea" => cleanup_gitea_stale_ports().await,
         _ => {}
     }
@@ -943,6 +952,34 @@ async fn repair_btcpay_dirs() {
     repair_btcpay_database_password().await;
 }
 
+async fn repair_grafana_dirs() {
+    let _ = tokio::process::Command::new("sudo")
+        .args(["mkdir", "-p", "/var/lib/archipelago/grafana"])
+        .output()
+        .await;
+    let podman_chown = tokio::process::Command::new("podman")
+        .args([
+            "unshare",
+            "chown",
+            "-R",
+            "472:472",
+            "/var/lib/archipelago/grafana",
+        ])
+        .output()
+        .await;
+    if !podman_chown.as_ref().is_ok_and(|o| o.status.success()) {
+        let _ = tokio::process::Command::new("sudo")
+            .args([
+                "chown",
+                "-R",
+                "100471:100471",
+                "/var/lib/archipelago/grafana",
+            ])
+            .output()
+            .await;
+    }
+}
+
 async fn repair_btcpay_database_password() {
     let Ok(db_pass) =
         tokio::fs::read_to_string("/var/lib/archipelago/secrets/btcpay-db-password").await

core/archipelago/src/api/rpc/package/stacks.rs

@@ -450,7 +450,7 @@ impl RpcHandler {
                 "--cap-add=SETGID",
                 "--cap-add=SETUID",
                 "--security-opt=no-new-privileges:true",
-                "--memory=512m",
+                "--memory=2g",
                 "--pids-limit=4096",
                 "--health-cmd=pg_isready -U postgres || exit 1",
                 "--health-interval=30s",