archipelagoandClaude Opus 5
c19c411b91
With registry push access, the 24 mirror-backed apps stopped being blocked. Ten images are now mirrored (single-platform amd64, matching the existing convention) and their pins moved: alby-hub v1.23.0 -> v1.24.0 mempool-frontend v3.0.1 -> v3.3.1 (mempool, archy-mempool-web) mempool-backend v3.0.0 -> v3.3.1 fedimintd v0.10.0 -> v0.10.1 gatewayd v0.10.0 -> v0.10.1 nostr-rs-relay 0.9.0 -> 0.10.0 portainer 2.39.1 -> 2.39.6 vaultwarden 1.30.0-alpine -> 1.37.1-alpine jellyfin 10.8.13 -> 10.11.11 home-assistant 2026.7.3 -> 2026.8.2 Every one verified pullable from our mirror after copying, so none can become an image-not-found on a node. image-versions.sh moved in lockstep — it is the baseline the update badge compares against when the catalog does not cover an app, and leaving it behind would have kept advertising an update that had already been applied. Chosen by risk, not by count: these are patch/minor bumps with no data migration. The ones held back are held for a reason each — Postgres 15->18 and 16->18 refuse to start on an older cluster, Redis 7->8, Valkey 7->9, Nextcloud 29->32 must go one major at a time, plus uptime-kuma 1->2, grafana 10->13, electrumx 1->2, photoprism, and core-lightning's three years of schema migrations. Those are each a migration plan, not a pin edit. LND (v0.18.4 -> v0.21.2) is held separately: it is only a minor bump by version but it migrates its channel database irreversibly, and this box holds real funds. Note the checker still reports several of these as behind, and that is correct: it reads the *catalog* pin, which is what nodes actually act on. These land when the catalog is regenerated and re-signed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
69 lines
1.7 KiB
YAML
69 lines
1.7 KiB
YAML
app:
|
|
id: mempool
|
|
name: Mempool Explorer
|
|
version: 3.0.0
|
|
# Where this app comes from, so scripts/check-upstream-releases.py can
|
|
# tell us when the pin below has fallen behind. Without it nothing can:
|
|
# container.image names our mirror, not the project it was mirrored from.
|
|
upstream:
|
|
kind: github
|
|
repo: mempool/mempool
|
|
description: Bitcoin mempool and blockchain explorer. Real-time transaction and block visualization.
|
|
|
|
container:
|
|
image: source.archipelago-foundation.org/lfg2025/mempool-frontend:v3.3.1
|
|
image_signature: cosign://...
|
|
pull_policy: if-not-present
|
|
|
|
dependencies:
|
|
- app_id: bitcoin-core
|
|
version: ">=24.0"
|
|
- storage: 20Gi
|
|
- bitcoin:archival
|
|
|
|
resources:
|
|
cpu_limit: 2
|
|
memory_limit: 2Gi
|
|
disk_limit: 20Gi
|
|
|
|
security:
|
|
capabilities: []
|
|
readonly_root: true
|
|
no_new_privileges: true
|
|
user: 1000
|
|
seccomp_profile: default
|
|
network_policy: isolated
|
|
apparmor_profile: mempool
|
|
|
|
ports:
|
|
- host: 4080
|
|
container: 8080 # mempool-frontend nginx listens on 8080 (FRONTEND_HTTP_PORT=8080)
|
|
protocol: tcp # Web UI
|
|
bind: 127.0.0.1
|
|
auth: gated
|
|
|
|
volumes:
|
|
- type: bind
|
|
source: /var/lib/archipelago/mempool
|
|
target: /data
|
|
options: [rw]
|
|
|
|
environment:
|
|
- MEMPOOL_BACKEND=electrum
|
|
- MEMPOOL_BITCOIN_HOST=bitcoin-core
|
|
- MEMPOOL_BITCOIN_PORT=8332
|
|
- MEMPOOL_BITCOIN_USER=${BITCOIN_RPC_USER}
|
|
- MEMPOOL_BITCOIN_PASSWORD=${BITCOIN_RPC_PASSWORD}
|
|
|
|
health_check:
|
|
type: http
|
|
endpoint: http://localhost:4080
|
|
path: /api/health
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
|
|
bitcoin_integration:
|
|
rpc_access: read-only
|
|
sync_required: true
|