Update nextcloud Docker tag to v35

Reviewed-on: #16

.gitea/workflows/up-down.yaml

@@ -0,0 +1,50 @@
+name: Add up down workflow
+
+on:
+  workflow_dispatch:
+    inputs:
+      action:
+        description: 'Action to perform (up or down)'
+        required: true
+        default: 'up'
+        type: choice
+        options:
+          - up
+          - down
+
+env:
+  REMOTE_PREPROD_PATH: /var/app/nextcloud/preprod
+
+  # --- SECRETS ---
+  SSH_HOST: ${{ secrets.SSH_HOST }}
+  SSH_USER: ${{ secrets.SSH_USER }}
+  SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+  SSH_PORT: ${{ secrets.SSH_PORT || 22 }}
+
+jobs:
+    # ------------------------------------------------------------------
+  # STAGE 3.5: DEPLOY PRE-PROD
+  # ------------------------------------------------------------------
+  up_down_preprod:
+    name: Up/Down (Pre-Prod)
+    runs-on: ubuntu-latest
+    # if: github.ref == 'refs/heads/main'
+    steps:
+      - name: Up/Down Remote Environment
+        uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5
+        with:
+          host: ${{ env.SSH_HOST }}
+          username: ${{ env.SSH_USER }}
+          key: ${{ env.SSH_PRIVATE_KEY }}
+          port: ${{ env.SSH_PORT }}
+          script: |
+            set -e
+            cd ${{ env.REMOTE_PREPROD_PATH }}
+            if [ "${{ github.event.inputs.action }}" = "up" ]; then
+              docker compose -f docker-compose.yml up -d --build --remove-orphans --wait
+            elif [ "${{ github.event.inputs.action }}" = "down" ]; then
+              docker compose -f docker-compose.yml down || true
+            else
+              echo "Invalid action: ${{ github.event.inputs.action }}. Use 'up' or 'down'."
+              exit 1
+            fi

.gitea/workflows/workflow.yaml

@@ -92,6 +92,22 @@ jobs:
             set -e
             cd ${{ env.REMOTE_PREPROD_PATH }}
             docker compose -f docker-compose.yml up -d --build --remove-orphans --wait
+  stop_preprod:
+    name: Stop Pre-Prod
+    runs-on: ubuntu-latest
+    needs: [deploy_preprod]
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - name: Remove Remote Environment
+        uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5
+        with:
+          host: ${{ env.SSH_HOST }}
+          username: ${{ env.SSH_USER }}
+          key: ${{ env.SSH_PRIVATE_KEY }}
+          port: ${{ env.SSH_PORT }}
+          script: |
+            cd "${{ env.REMOTE_PREPROD_PATH }}"
+            docker compose down || true
 
     # # ------------------------------------------------------------------
   # # STAGE 4: DEPLOY PRODUCTION

docker-compose.yml

@@ -12,7 +12,7 @@ services:
   #     - database-connection
   db:
     # image: mysql:9.2.0
-    image: mysql:9.7.2
+    image: mysql:9.7.2@sha256:29abb0a179982e4a8928138bfc7f918af9eda64e7eeb1b1d084c1720a20159e6
     restart: always
     volumes:
       - mysql:/var/lib/mysql
@@ -23,13 +23,13 @@ services:
     environment:
       - MYSQL_RANDOM_ROOT_PASSWORD=igen
   redis:
-    image: redis:8.6.5-alpine
+    image: redis:8.10.1-alpine@sha256:7d509f5640f5ed199d8781b5f5a45050133efe700aed34491f0b060665066d76
     restart: always
     networks: 
       - redis-connection
 
   app:
-    image: nextcloud:32.0.14-fpm-alpine 
+    image: nextcloud:35.0.0-fpm-alpine@sha256:cd58314580a4ab3edb70a5ef44f062eb5d926c3ec44c29c8dd89965928ee074a 
       # image: nextcloud@sha256:e899ecc5d6b89863d06ffd6eaa3a965c7fc7fd671b38dd06f8185e1df761c7c8 
       # image: nextcloud:fpm
     restart: always
@@ -61,7 +61,7 @@ services:
   collabora:
     #    image: collabora/code:24.04.7.2.1
     # image: collabora/code:24.04.13.3.1
-    image: collabora/code:26.04.2.4.1
+    image: collabora/code:26.04.4.1.1@sha256:1efda3043e8b9cb437d1b6c6efe20cc3753760e634de012b8dac391da488bf97
     cap_add: 
       - MKNOD
     privileged: true
@@ -95,7 +95,7 @@ services:
  
   
   whiteboard:
-    image: ghcr.io/nextcloud-releases/whiteboard:v1.5.9
+    image: ghcr.io/nextcloud-releases/whiteboard:v1.5.9@sha256:b60b7633f90d106ac6922f9bc27e1a1ca2442488b740fefdae4c812f34e9cebc
     environment:
       - NEXTCLOUD_URL=https://tar-v33.kovagoadi.hu
       - JWT_SECRET_KEY=dohlahqu3chaS7ieghee # Change me before deploying prod
@@ -138,7 +138,7 @@ services:
 
     
   cron:
-    image: nextcloud:32.0.14-fpm-alpine 
+    image: nextcloud:35.0.0-fpm-alpine@sha256:cd58314580a4ab3edb70a5ef44f062eb5d926c3ec44c29c8dd89965928ee074a 
     # image: nextcloud@sha256:e899ecc5d6b89863d06ffd6eaa3a965c7fc7fd671b38dd06f8185e1df761c7c8 
     restart: always
     volumes:

web/Dockerfile

@@ -1,3 +1,3 @@
-FROM nginx:1.31.3-alpine
+FROM nginx:1.31.6-alpine@sha256:35c6bab452e41fc906bfa367bccff2e92f88ba6723d07479e7a18e1c6a3f5b52
 
 COPY nginx.conf /etc/nginx/nginx.conf