Update dependency ansible to v11

.gitea/workflows/ansible-deploy.yaml

@@ -23,7 +23,7 @@ jobs:
           python3 -m pip install -r requirements.txt
 
       - name: Run playbook
-        uses: dawidd6/action-ansible-playbook@v3
+        uses: dawidd6/action-ansible-playbook@v2
         with:
           # Required, playbook filepath
           playbook: ${{ matrix.playbook }}

ansible/assets/docker-ext/compose.yml.j2

@@ -4,7 +4,7 @@ services:
   traefik:
     container_name: traefik
     # The official v2 Traefik docker image
-    image: traefik:v3.3
+    image: traefik:v3.1
     restart: unless-stopped
     depends_on:
       - crowdsec
@@ -106,7 +106,7 @@ services:
     volumes:
       - ./stalwart-mail:/opt/stalwart-mail
     container_name: stalwart-mail
-    image: stalwartlabs/mail-server:v0.11.6
+    image: stalwartlabs/mail-server:v0.10.6
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.stalwart.rule=Host(`stalwart.mycomputer.party`)"
@@ -116,7 +116,7 @@ services:
       - "traefik.http.services.stalwart-http.loadbalancer.server.port=8080"
   linkding:
     container_name: "${LD_CONTAINER_NAME:-linkding}"
-    image: sissbruecker/linkding:1.39.1-plus
+    image: sissbruecker/linkding:1.36.0-plus
     ports:
       - "${LD_HOST_PORT:-9090}:9090"
     volumes:
@@ -179,7 +179,7 @@ services:
       timeout: 3s
   authentik-server:
     container_name: authentik-server
-    image: ghcr.io/goauthentik/server:2025.2.2
+    image: ghcr.io/goauthentik/server:2024.8.2
     restart: unless-stopped
     command: server
     environment:
@@ -213,7 +213,7 @@ services:
       - "traefik.http.routers.authentik.middlewares=crowdsec@docker"
   authentik-worker:
     container_name: authentik-worker
-    image: ghcr.io/goauthentik/server:2025.2.2
+    image: ghcr.io/goauthentik/server:2024.8.2
     restart: unless-stopped
     command: worker
     environment:
@@ -239,7 +239,7 @@ services:
     depends_on:
       - redis
   changedetection:
-    image: ghcr.io/dgtlmoon/changedetection.io:0.49.7
+    image: ghcr.io/dgtlmoon/changedetection.io:0.47.06
     container_name: changedetection
     hostname: changedetection
     volumes:
@@ -353,7 +353,7 @@ services:
     restart: unless-stopped
     # To use a pre-built image, remove the above "build" section
     # and uncomment the following line:
-    image: healthchecks/healthchecks:v3.9
+    image: healthchecks/healthchecks:v3.8
     env_file:
       - .healthchecks-env
     ports:
@@ -371,7 +371,7 @@ services:
       - "traefik.http.services.healthchecks-http.loadbalancer.server.port=8000"
       - "traefik.http.routers.healthchecks.middlewares=authchain@docker"
   apache:
-    image: php:8.4-apache
+    image: php:7.2-apache
     volumes:
       - ./apache:/var/www/html
     ports:
@@ -388,7 +388,7 @@ services:
     networks:
       - backend
   apache2:
-    image: php:8.4-apache
+    image: php:7.2-apache
     volumes:
       - ./apache:/var/www/html
     ports:
@@ -428,7 +428,7 @@ services:
       #    - net.ipv4.conf.all.src_valid_mark=1
       #  restart: unless-stopped
   crowdsec:
-    image: crowdsecurity/crowdsec:v1.6.6
+    image: crowdsecurity/crowdsec:v1.6.3
     container_name: crowdsec
     environment:
       PGID: "1001"
@@ -455,7 +455,7 @@ services:
       - proxy
       - backend
   ddns-updater:
-    image: docker.io/qmcgaw/ddns-updater:v2.9
+    image: docker.io/qmcgaw/ddns-updater:v2.8
     container_name: ddns-updater
     ports:
       - 8014:8000
@@ -504,7 +504,7 @@ services:
       - ./bookstack_db_data:/config
     restart: unless-stopped
   wikijs:
-    image: ghcr.io/requarks/wiki:2.5.307
+    image: ghcr.io/requarks/wiki:2.5.305
     container_name: wikijs
     environment:
       DB_TYPE: postgres

ansible/assets/docker-int/compose.yml.j2

@@ -3,7 +3,7 @@ services:
   traefik:
     container_name: traefik
     # The official v2 Traefik docker image
-    image: traefik:v3.3
+    image: traefik:v2.11
     # Enables the web UI and tells Traefik to listen to docker
     command:
       - --api.insecure=true
@@ -59,7 +59,7 @@ services:
     volumes:
       - redisdata:/data
   paperless-webserver:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.14.7
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.13.5
     container_name: paperless-webserver
     restart: unless-stopped
     depends_on:
@@ -105,7 +105,7 @@ services:
       - "traefik.http.routers.testweb.entrypoints=websecure"
       - "traefik.http.routers.testweb.tls.certresolver=myresolver"
   actual_server:
-    image: docker.io/actualbudget/actual-server:25.3.1
+    image: docker.io/actualbudget/actual-server:24.11.0
     ports:
       # This line makes Actual available at port 5006 of the device you run the server on,
       # i.e. http://localhost:5006. You can change the first number to change the port, if you want.
@@ -159,7 +159,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/redis:6.2-alpine@sha256:148bb5411c184abd288d9aaed139c98123eeb8824c5d3fce03cf721db58066d8
+    image: docker.io/redis:6.2-alpine@sha256:eaba718fecd1196d88533de7ba49bf903ad33664a92debb24660a922ecd9cac8
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always

ansible/assets/git/compose.yml.j2

@@ -11,7 +11,7 @@ volumes:
 
 services:
   server:
-    image: gitea/gitea:1.23.5
+    image: gitea/gitea:1.22.3
     container_name: gitea
     restart: unless-stopped
     environment:

requirements.txt

@@ -1,4 +1,4 @@
-ansible==11.4.0
+ansible==11.3.0
 ansible-core==2.15.11
 #cffi==1.15.1
 #cryptography==39.0.0