qpismont/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bump service images and update Tempo config

Browse Source 
Update Woodpecker, Gitea, Herald, and observability stack
images to latest versions. Migrate Tempo config to v3
schema with live_store and backend_scheduler/worker.
Add Docker socket mount and sandbox iteration limit to
Herald, and switch its model and entrypoint.
This commit is contained in:
qpismont
2026-09-21 17:13:53 +00:00
parent ede28f6d12
commit c553a2573e
3 changed files with 22 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.core.yml
+9 -6
View File
@@ -20,7 +20,7 @@ services:
- prometheus_network - prometheus_network
woodpecker_server: woodpecker_server:
image: woodpeckerci/woodpecker-server:v3.17-alpine image: woodpeckerci/woodpecker-server:v3.18.1-alpine
volumes: volumes:
- woodpeckerdata:/var/lib/woodpecker/ - woodpeckerdata:/var/lib/woodpecker/
entrypoint: /bin/sh -c "export WOODPECKER_GITEA_CLIENT=$$(cat /run/secrets/woodpecker_gitea_client) && export WOODPECKER_GITEA_SECRET=$$(cat /run/secrets/woodpecker_gitea_secret) && export WOODPECKER_AGENT_SECRET=$$(cat /run/secrets/woodpecker_agent_secret) && /bin/woodpecker-server" entrypoint: /bin/sh -c "export WOODPECKER_GITEA_CLIENT=$$(cat /run/secrets/woodpecker_gitea_client) && export WOODPECKER_GITEA_SECRET=$$(cat /run/secrets/woodpecker_gitea_secret) && export WOODPECKER_AGENT_SECRET=$$(cat /run/secrets/woodpecker_agent_secret) && /bin/woodpecker-server"
@@ -37,7 +37,7 @@ services:
- woodpecker_gitea_secret - woodpecker_gitea_secret
woodpecker_agent: woodpecker_agent:
image: woodpeckerci/woodpecker-agent:v3.17-alpine image: woodpeckerci/woodpecker-agent:v3.18.1-alpine
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
entrypoint: /bin/sh -c "export WOODPECKER_AGENT_SECRET=$$(cat /run/secrets/woodpecker_agent_secret) && /bin/woodpecker-agent" entrypoint: /bin/sh -c "export WOODPECKER_AGENT_SECRET=$$(cat /run/secrets/woodpecker_agent_secret) && /bin/woodpecker-agent"
@@ -51,7 +51,7 @@ services:
- woodpecker_agent_secret - woodpecker_agent_secret
gitea: gitea:
image: docker.gitea.com/gitea:1.27.1 image: docker.gitea.com/gitea:1.27.3
environment: environment:
- USER_UID=1000 - USER_UID=1000
- USER_GID=1000 - USER_GID=1000
@@ -64,7 +64,9 @@ services:
- reverse_network - reverse_network
herald: herald:
image: tintounn/herald:1.1 image: tintounn/herald:1.2
volumes:
- /var/run/docker.sock:/var/run/docker.sock
entrypoint: entrypoint:
- /bin/sh - /bin/sh
- -c - -c
@@ -73,7 +75,7 @@ services:
export OPEN_ROUTER_API_KEY=$$(cat /run/secrets/herald_openrouter_token) && export OPEN_ROUTER_API_KEY=$$(cat /run/secrets/herald_openrouter_token) &&
export WEBHOOK_SIG_HEADER_SECRET=$$(cat /run/secrets/herald_gitea_header_secret) && export WEBHOOK_SIG_HEADER_SECRET=$$(cat /run/secrets/herald_gitea_header_secret) &&
export SENTRY_DSN=$$(cat /run/secrets/herald_sentry_dsn) && export SENTRY_DSN=$$(cat /run/secrets/herald_sentry_dsn) &&
/app/herald /app/herald-server
networks: networks:
- reverse_network - reverse_network
- prometheus_network - prometheus_network
@@ -87,9 +89,10 @@ services:
BOT_MAX_CONCURRENT: 5 BOT_MAX_CONCURRENT: 5
GITEA_URL: http://gitea:3000 GITEA_URL: http://gitea:3000
GITEA_TIMEOUT: 60 GITEA_TIMEOUT: 60
OPEN_ROUTER_MODEL: deepseek/deepseek-v4-flash OPEN_ROUTER_MODEL: openai/gpt-5.6-luna-pro
OPEN_ROUTER_TIMEOUT: 600 OPEN_ROUTER_TIMEOUT: 600
METRICS_BIND_ADDR: 0.0.0.0:9100 METRICS_BIND_ADDR: 0.0.0.0:9100
SANDBOX_MAX_ITERATIONS: 32
wireguard_server: wireguard_server:
image: linuxserver/wireguard image: linuxserver/wireguard
docker-compose.observability.yml
+4 -4
View File
@@ -2,7 +2,7 @@ version: "3"
services: services:
tempo: tempo:
image: grafana/tempo:2.10.7 image: grafana/tempo:3.0.3
command: command:
- -config.file=/etc/tempo/tempo.yml - -config.file=/etc/tempo/tempo.yml
configs: configs:
@@ -31,7 +31,7 @@ services:
- prometheus_network - prometheus_network
alertmanager: alertmanager:
image: prom/alertmanager:v0.33.1 image: prom/alertmanager:v0.34.1
configs: configs:
- source: alertmanager_config - source: alertmanager_config
target: /etc/alertmanager/alertmanager.yml target: /etc/alertmanager/alertmanager.yml
@@ -53,7 +53,7 @@ services:
- reverse_network - reverse_network
otel-collector: otel-collector:
image: otel/opentelemetry-collector-contrib:0.156.0 image: otel/opentelemetry-collector-contrib:0.161.0
configs: configs:
- source: otel_collector_config - source: otel_collector_config
target: /etc/otelcol-contrib/config.yaml target: /etc/otelcol-contrib/config.yaml
@@ -71,7 +71,7 @@ services:
- prometheus_network - prometheus_network
prometheus: prometheus:
image: prom/prometheus:v3.9.1 image: prom/prometheus:v3.13.3
command: command:
- --config.file=/etc/prometheus/prometheus.yml - --config.file=/etc/prometheus/prometheus.yml
- --storage.tsdb.path=/prometheus - --storage.tsdb.path=/prometheus
tempo/tempo.yml
+9 -3
View File
@@ -8,10 +8,16 @@ distributor:
http: http:
endpoint: 0.0.0.0:4318 endpoint: 0.0.0.0:4318
ingester: live_store:
max_block_duration: 5m max_block_duration: 5m
compactor: backend_scheduler:
provider:
compaction:
compaction:
block_retention: 48h
backend_worker:
compaction: compaction:
block_retention: 48h block_retention: 48h
@@ -21,4 +27,4 @@ storage:
local: local:
path: /var/tempo/traces path: /var/tempo/traces
wal: wal:
path: /var/tempo/wal path: /var/tempo/wal