Update php Docker tag to v7.4

ansible/assets/docker-ext/compose.yml

@@ -410,7 +410,7 @@ services:
       - "traefik.http.services.healthchecks-http.loadbalancer.server.port=8000"
       - "traefik.http.routers.healthchecks.middlewares=authchain@docker"
   apache:
-    image: php:7.2-apache
+    image: php:7.4-apache
     volumes: 
       - ./apache:/var/www/html
     ports:
@@ -427,7 +427,7 @@ services:
     networks:
       - backend
   apache2:
-    image: php:7.2-apache
+    image: php:7.4-apache
     volumes: 
       - ./apache:/var/www/html
     ports:

ansible/assets/docker-ext/compose.yml.j2

@@ -1,3 +1,4 @@
+---
 version: "3.5"
 services:
   traefik:
@@ -105,7 +106,7 @@ services:
     volumes:
       - ./stalwart-mail:/opt/stalwart-mail
     container_name: stalwart-mail
-    image: stalwartlabs/mail-server:latest
+    image: stalwartlabs/mail-server:v0.10.6
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.stalwart.rule=Host(`stalwart.mycomputer.party`)"
@@ -154,7 +155,7 @@ services:
 
   linkding:
     container_name: "${LD_CONTAINER_NAME:-linkding}"
-    image: sissbruecker/linkding:latest-plus
+    image: sissbruecker/linkding:1.36.0-plus
     ports:
       - "${LD_HOST_PORT:-9090}:9090"
     volumes:
@@ -173,7 +174,7 @@ services:
   wallabag:
     container_name: wallabag
     restart: unless-stopped
-    image: wallabag/wallabag
+    image: wallabag/wallabag:2.6.10
     environment:
       # - MYSQL_ROOT_PASSWORD=wallaroot
       - POSTGRES_USER=wallabag
@@ -217,7 +218,7 @@ services:
       timeout: 3s
   authentik-server:
     container_name: authentik-server
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.8.2}
+    image: ghcr.io/goauthentik/server:2024.8.2
     restart: unless-stopped
     command: server
     environment:
@@ -251,7 +252,7 @@ services:
       - "traefik.http.routers.authentik.middlewares=crowdsec@docker"
   authentik-worker:
     container_name: authentik-worker
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.8.2}
+    image: ghcr.io/goauthentik/server:2024.8.2
     restart: unless-stopped
     command: worker
     environment:
@@ -277,13 +278,13 @@ services:
     depends_on:
       - redis
   changedetection:
-      image: ghcr.io/dgtlmoon/changedetection.io
+    image: ghcr.io/dgtlmoon/changedetection.io:0.47.06
     container_name: changedetection
     hostname: changedetection
     volumes:
       - changedetection-data:/datastore
-# Configurable proxy list support, see https://github.com/dgtlmoon/changedetection.io/wiki/Proxy-configuration#proxy-list-support
+      # Configurable proxy list support, see https://github.com/dgtlmoon/changedetection.io/wiki/Proxy-configuration#proxy-list-support
-#        - ./proxies.json:/datastore/proxies.json
+      #        - ./proxies.json:/datastore/proxies.json
 
     environment:
       #        Default listening port, can also be changed with the -p option
@@ -391,7 +392,7 @@ services:
     restart: unless-stopped
     # To use a pre-built image, remove the above "build" section
     # and uncomment the following line:
-    image: healthchecks/healthchecks:latest
+    image: healthchecks/healthchecks:v3.7
     env_file:
       - .healthchecks-env
     ports:
@@ -409,7 +410,7 @@ services:
       - "traefik.http.services.healthchecks-http.loadbalancer.server.port=8000"
       - "traefik.http.routers.healthchecks.middlewares=authchain@docker"
   apache:
-    image: php:7.2-apache
+    image: php:7.4-apache
     volumes:
       - ./apache:/var/www/html
     ports:
@@ -426,7 +427,7 @@ services:
     networks:
       - backend
   apache2:
-    image: php:7.2-apache
+    image: php:7.4-apache
     volumes:
       - ./apache:/var/www/html
     ports:
@@ -466,7 +467,7 @@ services:
       #    - net.ipv4.conf.all.src_valid_mark=1
       #  restart: unless-stopped
   crowdsec:
-    image: crowdsecurity/crowdsec
+    image: crowdsecurity/crowdsec:v1.6.3
     container_name: crowdsec
     environment:
       PGID: "1001"
@@ -493,14 +494,14 @@ services:
       - proxy
       - backend
   ddns-updater:
-    image: docker.io/qmcgaw/ddns-updater
+    image: docker.io/qmcgaw/ddns-updater:v2.8
     container_name: ddns-updater
     ports:
       - 8014:8000
     volumes:
       - ./ddns-updater:/updater/data
   bookstack:
-    image: lscr.io/linuxserver/bookstack
+    image: lscr.io/linuxserver/bookstack:v24.10.1-ls173
     container_name: bookstack
     environment:
       - PUID=1000
@@ -528,7 +529,7 @@ services:
       - "traefik.http.routers.bookstack.tls.certresolver=myresolver"
       - "traefik.http.routers.bookstack.tls=true"
   bookstack_db:
-    image: lscr.io/linuxserver/mariadb
+    image: lscr.io/linuxserver/mariadb:v24.10.1-ls173
     container_name: bookstack_db
     environment:
       - PUID=1000
@@ -542,7 +543,7 @@ services:
       - ./bookstack_db_data:/config
     restart: unless-stopped
   wikijs:
-    image: ghcr.io/requarks/wiki:2
+    image: ghcr.io/requarks/wiki:2.5.305
     container_name: wikijs
     environment:
       DB_TYPE: postgres

ansible/assets/docker-int/compose.yml.j2

@@ -69,7 +69,7 @@ services:
             #        POSTGRES_USER: paperless
             #        POSTGRES_PASSWORD: paperless
     paperless-webserver:
-        image: ghcr.io/paperless-ngx/paperless-ngx:latest
+        image: ghcr.io/paperless-ngx/paperless-ngx:2.7.2
         container_name: paperless-webserver
         restart: unless-stopped
         depends_on:
@@ -127,7 +127,7 @@ services:
             - "traefik.http.routers.testweb.entrypoints=websecure"
             - "traefik.http.routers.testweb.tls.certresolver=myresolver"
     actual_server:
-        image: docker.io/actualbudget/actual-server:latest
+        image: docker.io/actualbudget/actual-server:24.11.0
         ports:
             # This line makes Actual available at port 5006 of the device you run the server on,
             # i.e. http://localhost:5006. You can change the first number to change the port, if you want.