From 207d61d724a22747786ecd71c2dacd034cb4eb4c Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:17:56 -0500
Subject: [PATCH 01/42] Init forgejo actions

---
 .forgejo/workflows/build-image.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .forgejo/workflows/build-image.yml

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
new file mode 100644
index 0000000..4cff900
--- /dev/null
+++ b/.forgejo/workflows/build-image.yml
@@ -0,0 +1,20 @@
+on: [push]
+
+jobs:
+  build-image:
+    runs-on: docker
+    container:
+      image: node:18-bookworm
+    steps:
+      - name: Repository Checkout
+        uses: https://gitea.angry.im/actions/checkout@v3
+        with:
+          submodules: recursive
+
+      - name: Mask Secrets
+        run: 'echo "::add-mask::${{ secret.FORGEJO_TOKEN }}'
+
+      - name: Setup podman
+        run: |
+          apt-get update && apt-get install -y podman
+          podman login gitea.angry.im --password ${{ secret.FORGEJO_TOKEN }}

From c3027f071ddedc9ef5ddc3d5076fc382a9c29597 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:19:38 -0500
Subject: [PATCH 02/42] Fix multi-line command

---
 .forgejo/workflows/build-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 4cff900..4d4e7d6 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -16,5 +16,5 @@ jobs:
 
       - name: Setup podman
         run: |
-          apt-get update && apt-get install -y podman
+          apt-get update && apt-get install -y podman && \
           podman login gitea.angry.im --password ${{ secret.FORGEJO_TOKEN }}

From 3898c23f13b7d00a281c20e17d61410433938860 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:22:19 -0500
Subject: [PATCH 03/42] Test

---
 .forgejo/workflows/build-image.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 4d4e7d6..da7e1e6 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -16,5 +16,7 @@ jobs:
 
       - name: Setup podman
         run: |
-          apt-get update && apt-get install -y podman && \
+          id -a
+          apt-get update
+          apt-get install -y podman
           podman login gitea.angry.im --password ${{ secret.FORGEJO_TOKEN }}

From fc9a92c5aee8bcba6c6d320e5f880864e88f09ce Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:23:18 -0500
Subject: [PATCH 04/42] Test

---
 .forgejo/workflows/build-image.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index da7e1e6..7c22ba4 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -19,4 +19,3 @@ jobs:
           id -a
           apt-get update
           apt-get install -y podman
-          podman login gitea.angry.im --password ${{ secret.FORGEJO_TOKEN }}

From e569f1b2a68daf61365c2fb1fd0a8d16558fe668 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:25:22 -0500
Subject: [PATCH 05/42] Fix podman setup (?)

---
 .forgejo/workflows/build-image.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 7c22ba4..579f02a 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -12,10 +12,10 @@ jobs:
           submodules: recursive
 
       - name: Mask Secrets
-        run: 'echo "::add-mask::${{ secret.FORGEJO_TOKEN }}'
+        run: 'echo "::add-mask::${{ secrets.FORGEJO_TOKEN }}'
 
       - name: Setup podman
         run: |
-          id -a
           apt-get update
           apt-get install -y podman
+          podman login gitea.angry.im --password ${{ secrets.FORGEJO_TOKEN }}

From 64b411906e55dd526b087533c2578cc232c1fcff Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:26:10 -0500
Subject: [PATCH 06/42] Fix syntax

---
 .forgejo/workflows/build-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 579f02a..49304f6 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -12,7 +12,7 @@ jobs:
           submodules: recursive
 
       - name: Mask Secrets
-        run: 'echo "::add-mask::${{ secrets.FORGEJO_TOKEN }}'
+        run: 'echo "::add-mask::${{ secrets.FORGEJO_TOKEN }}"'
 
       - name: Setup podman
         run: |

From 9e0a2535d3a0c80c8c385b572aa26ac74e2d9f2f Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:27:06 -0500
Subject: [PATCH 07/42] Add username for podman

---
 .forgejo/workflows/build-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 49304f6..62afebb 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -18,4 +18,4 @@ jobs:
         run: |
           apt-get update
           apt-get install -y podman
-          podman login gitea.angry.im --password ${{ secrets.FORGEJO_TOKEN }}
+          podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}

From 69c32bb4f3f65a5d975ab3add74f48da26ab2060 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:31:02 -0500
Subject: [PATCH 08/42] Test add image build & push

---
 .forgejo/workflows/build-image.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 62afebb..e28a1a6 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -19,3 +19,6 @@ jobs:
           apt-get update
           apt-get install -y podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
+
+      - name: Build & Push
+        run: ./build-image.sh element-web

From a0f1b19adfe00692eda7e7f3b0bbf4947ad9ac60 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:33:16 -0500
Subject: [PATCH 09/42] Test podman

---
 .forgejo/workflows/build-image.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index e28a1a6..4333c3c 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -20,5 +20,8 @@ jobs:
           apt-get install -y podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
 
+      - name: Confirm Podman works
+        run: podman run --rm hello-world
+
       - name: Build & Push
         run: ./build-image.sh element-web

From 7b6b76036d248a222edf90753dd146368f5f96aa Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:37:14 -0500
Subject: [PATCH 10/42] Test

---
 .forgejo/workflows/build-image.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 4333c3c..665460d 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -16,6 +16,7 @@ jobs:
 
       - name: Setup podman
         run: |
+          id -a
           apt-get update
           apt-get install -y podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}

From 294bacdada5009c94a10419a6dc8fc0407e8edbb Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:40:58 -0500
Subject: [PATCH 11/42] Fixup subuid / subgid and fuse mount

---
 .forgejo/workflows/build-image.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 665460d..c44107b 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -5,22 +5,25 @@ jobs:
     runs-on: docker
     container:
       image: node:18-bookworm
+      volumes:
+        - /dev/fuse:/dev/fuse
     steps:
       - name: Repository Checkout
         uses: https://gitea.angry.im/actions/checkout@v3
         with:
           submodules: recursive
 
-      - name: Mask Secrets
-        run: 'echo "::add-mask::${{ secrets.FORGEJO_TOKEN }}"'
-
       - name: Setup podman
         run: |
-          id -a
           apt-get update
           apt-get install -y podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
 
+      - name: Fixup subuid/subgid
+        run: |
+          echo 'root:1:999' > /etc/subuid
+          echo 'root:1:999' > /etc/subgid
+
       - name: Confirm Podman works
         run: podman run --rm hello-world
 

From d5b1dd1034ce0c0edc396420218098ed4ab434bb Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:43:31 -0500
Subject: [PATCH 12/42] Try using alpine for newer podman (without
 fuse-overlayfs)

---
 .forgejo/workflows/build-image.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index c44107b..8b998b3 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,9 +4,7 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: node:18-bookworm
-      volumes:
-        - /dev/fuse:/dev/fuse
+      image: node:18-alpine
     steps:
       - name: Repository Checkout
         uses: https://gitea.angry.im/actions/checkout@v3
@@ -15,8 +13,7 @@ jobs:
 
       - name: Setup podman
         run: |
-          apt-get update
-          apt-get install -y podman
+          apk add podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
 
       - name: Fixup subuid/subgid

From 76019f59df21479be621669eda787f916ffa36d4 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:45:06 -0500
Subject: [PATCH 13/42] Add git setup for alpine

---
 .forgejo/workflows/build-image.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 8b998b3..0a90051 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -6,14 +6,12 @@ jobs:
     container:
       image: node:18-alpine
     steps:
-      - name: Repository Checkout
-        uses: https://gitea.angry.im/actions/checkout@v3
-        with:
-          submodules: recursive
+      - name: Install packages
+        run: |
+          apk add git podman
 
       - name: Setup podman
         run: |
-          apk add podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
 
       - name: Fixup subuid/subgid
@@ -21,6 +19,11 @@ jobs:
           echo 'root:1:999' > /etc/subuid
           echo 'root:1:999' > /etc/subgid
 
+      - name: Repository Checkout
+        uses: https://gitea.angry.im/actions/checkout@v3
+        with:
+          submodules: recursive
+
       - name: Confirm Podman works
         run: podman run --rm hello-world
 

From 68f2d6830a850dbc6c3b012c8b5212a3e6170235 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:48:20 -0500
Subject: [PATCH 14/42] Use anonymous volume for guest /var/lib/containers

---
 .forgejo/workflows/build-image.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 0a90051..ac0da8e 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -5,6 +5,8 @@ jobs:
     runs-on: docker
     container:
       image: node:18-alpine
+      volumes:
+        - /var/lib/containers
     steps:
       - name: Install packages
         run: |

From 17b18b01bb382e800791b5b6cb5ce3ba27ff5a63 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:50:13 -0500
Subject: [PATCH 15/42] Fix subuid/subgid before testing podman

---
 .forgejo/workflows/build-image.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index ac0da8e..47acb3f 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -12,15 +12,15 @@ jobs:
         run: |
           apk add git podman
 
-      - name: Setup podman
-        run: |
-          podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
-
       - name: Fixup subuid/subgid
         run: |
           echo 'root:1:999' > /etc/subuid
           echo 'root:1:999' > /etc/subgid
 
+      - name: Setup podman
+        run: |
+          podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
+
       - name: Repository Checkout
         uses: https://gitea.angry.im/actions/checkout@v3
         with:

From d66609a954ea2aba8854ebb70104f5b7ae99e267 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:53:49 -0500
Subject: [PATCH 16/42] Use official podman images

---
 .forgejo/workflows/build-image.yml | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 47acb3f..064a330 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,18 +4,12 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: node:18-alpine
-      volumes:
-        - /var/lib/containers
+      image: quay.io/podman/stable
     steps:
       - name: Install packages
         run: |
-          apk add git podman
-
-      - name: Fixup subuid/subgid
-        run: |
-          echo 'root:1:999' > /etc/subuid
-          echo 'root:1:999' > /etc/subgid
+          dnf -y module install nodejs:18/common
+          dnf -y install git
 
       - name: Setup podman
         run: |

From 06886b43017f9f78566175d55b784374448a3a03 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:56:31 -0500
Subject: [PATCH 17/42] Revert "Use official podman images"

This reverts commit d66609a954ea2aba8854ebb70104f5b7ae99e267.
---
 .forgejo/workflows/build-image.yml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 064a330..47acb3f 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,12 +4,18 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: quay.io/podman/stable
+      image: node:18-alpine
+      volumes:
+        - /var/lib/containers
     steps:
       - name: Install packages
         run: |
-          dnf -y module install nodejs:18/common
-          dnf -y install git
+          apk add git podman
+
+      - name: Fixup subuid/subgid
+        run: |
+          echo 'root:1:999' > /etc/subuid
+          echo 'root:1:999' > /etc/subgid
 
       - name: Setup podman
         run: |

From 87ee8b7eba3457b263cbbadc1d4af8344afa1bee Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 14:57:13 -0500
Subject: [PATCH 18/42] Switch to Debian Trixie

---
 .forgejo/workflows/build-image.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 47acb3f..2c984b7 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,13 +4,14 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: node:18-alpine
+      image: debian:trixie
       volumes:
         - /var/lib/containers
     steps:
       - name: Install packages
         run: |
-          apk add git podman
+          apt-get -y update
+          apt-get -y install git nodejs podman
 
       - name: Fixup subuid/subgid
         run: |

From bba62748695667ecc9ac658ecedf4a257a71fe5b Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:05:45 -0500
Subject: [PATCH 19/42] Revert "Switch to Debian Trixie"

This reverts commit 87ee8b7eba3457b263cbbadc1d4af8344afa1bee.
---
 .forgejo/workflows/build-image.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 2c984b7..47acb3f 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,14 +4,13 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: debian:trixie
+      image: node:18-alpine
       volumes:
         - /var/lib/containers
     steps:
       - name: Install packages
         run: |
-          apt-get -y update
-          apt-get -y install git nodejs podman
+          apk add git podman
 
       - name: Fixup subuid/subgid
         run: |

From 037fe95b379d4d71c9ef05bf6a1d5a5e6a17c996 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:05:48 -0500
Subject: [PATCH 20/42] Reapply "Use official podman images"

This reverts commit 06886b43017f9f78566175d55b784374448a3a03.
---
 .forgejo/workflows/build-image.yml | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 47acb3f..064a330 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,18 +4,12 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: node:18-alpine
-      volumes:
-        - /var/lib/containers
+      image: quay.io/podman/stable
     steps:
       - name: Install packages
         run: |
-          apk add git podman
-
-      - name: Fixup subuid/subgid
-        run: |
-          echo 'root:1:999' > /etc/subuid
-          echo 'root:1:999' > /etc/subgid
+          dnf -y module install nodejs:18/common
+          dnf -y install git
 
       - name: Setup podman
         run: |

From 2319132092066f9112ed7fcd1ccccfc560b4f2d7 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:06:30 -0500
Subject: [PATCH 21/42] Rework usage of podman image

---
 .forgejo/workflows/build-image.yml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 064a330..aa81d0b 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -6,14 +6,13 @@ jobs:
     container:
       image: quay.io/podman/stable
     steps:
-      - name: Install packages
+      - name: Install additional packages
         run: |
-          dnf -y module install nodejs:18/common
-          dnf -y install git
+          dnf -y install git nodejs
 
       - name: Setup podman
         run: |
-          podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
+          sudo -u podman podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
 
       - name: Repository Checkout
         uses: https://gitea.angry.im/actions/checkout@v3
@@ -21,7 +20,7 @@ jobs:
           submodules: recursive
 
       - name: Confirm Podman works
-        run: podman run --rm hello-world
+        run: sudo -u podman podman run --rm hello-world
 
       - name: Build & Push
-        run: ./build-image.sh element-web
+        run: sudo -u podman ./build-image.sh element-web

From c88c7f2499c87888094b06f2b55d861c61780908 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:09:22 -0500
Subject: [PATCH 22/42] Refer to a fixed podman image version

---
 .forgejo/workflows/build-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index aa81d0b..9161a3f 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -4,7 +4,7 @@ jobs:
   build-image:
     runs-on: docker
     container:
-      image: quay.io/podman/stable
+      image: quay.io/podman/stable:v4.9.0
     steps:
       - name: Install additional packages
         run: |

From 249d882272c3ac75829be375dd67c14968959019 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:13:37 -0500
Subject: [PATCH 23/42] Test changed-files action

---
 .forgejo/workflows/build-image.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 9161a3f..f058e81 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -19,8 +19,16 @@ jobs:
         with:
           submodules: recursive
 
-      - name: Confirm Podman works
-        run: sudo -u podman podman run --rm hello-world
+      - name: Detect Directory Changes
+        id: changed-dirs
+        uses: https://github.com/tj-actions/changed-files@v42
+        with:
+          dir_names: 'true'
 
       - name: Build & Push
-        run: sudo -u podman ./build-image.sh element-web
+        env:
+          ALL_CHANGED_DIRS: ${{ steps.changed-dirs.outputs.all_changed_files }}
+        run: |
+          for file in ${ALL_CHANGED_DIRS}; do
+            echo "sudo -u podman ./build-image.sh ${file}"
+          done

From c63bada17066cfed7b2268b24da5a9d5bcacd27b Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:20:19 -0500
Subject: [PATCH 24/42] Configure changed-files plugin properly

---
 .forgejo/workflows/build-image.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index f058e81..ccfdee3 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -24,8 +24,14 @@ jobs:
         uses: https://github.com/tj-actions/changed-files@v42
         with:
           dir_names: 'true'
+          dir_names_max_depth: '1'
+          dir_names_exclude_current_dir: 'true'
+          files_ignore: |
+            .forgejo/**
+            build-image.sh
 
       - name: Build & Push
+        if: ${{ steps.changed-dirs.all_changed_files_count != '0' }}
         env:
           ALL_CHANGED_DIRS: ${{ steps.changed-dirs.outputs.all_changed_files }}
         run: |

From 7756b9804a3a1530cbad6dfab4d7a11b687e3de0 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:23:44 -0500
Subject: [PATCH 25/42] Actually build images

---
 .forgejo/workflows/build-image.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index ccfdee3..5ace49f 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -36,5 +36,6 @@ jobs:
           ALL_CHANGED_DIRS: ${{ steps.changed-dirs.outputs.all_changed_files }}
         run: |
           for file in ${ALL_CHANGED_DIRS}; do
-            echo "sudo -u podman ./build-image.sh ${file}"
+            echo "---- Building ${file} ----"
+            sudo -u podman ./build-image.sh ${file}
           done

From f66636aa07a8562c92b6394a036ccbcac2a877f3 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:23:52 -0500
Subject: [PATCH 26/42] element-web: Uprev to v1.11.58

---
 element-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/element-web/Dockerfile b/element-web/Dockerfile
index 3a8aed5..6459f0c 100644
--- a/element-web/Dockerfile
+++ b/element-web/Dockerfile
@@ -1,4 +1,4 @@
-ARG ELEMENT_VER=v1.11.57
+ARG ELEMENT_VER=v1.11.58
 
 FROM debian:11 AS builder
 

From f1296db6c9c902becca974c29994e8d87a466ec2 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:26:20 -0500
Subject: [PATCH 27/42] Add forgejo actions for automatic building and pushing

---
 .forgejo/workflows/build-image.yml | 41 ++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 .forgejo/workflows/build-image.yml

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
new file mode 100644
index 0000000..5ace49f
--- /dev/null
+++ b/.forgejo/workflows/build-image.yml
@@ -0,0 +1,41 @@
+on: [push]
+
+jobs:
+  build-image:
+    runs-on: docker
+    container:
+      image: quay.io/podman/stable:v4.9.0
+    steps:
+      - name: Install additional packages
+        run: |
+          dnf -y install git nodejs
+
+      - name: Setup podman
+        run: |
+          sudo -u podman podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
+
+      - name: Repository Checkout
+        uses: https://gitea.angry.im/actions/checkout@v3
+        with:
+          submodules: recursive
+
+      - name: Detect Directory Changes
+        id: changed-dirs
+        uses: https://github.com/tj-actions/changed-files@v42
+        with:
+          dir_names: 'true'
+          dir_names_max_depth: '1'
+          dir_names_exclude_current_dir: 'true'
+          files_ignore: |
+            .forgejo/**
+            build-image.sh
+
+      - name: Build & Push
+        if: ${{ steps.changed-dirs.all_changed_files_count != '0' }}
+        env:
+          ALL_CHANGED_DIRS: ${{ steps.changed-dirs.outputs.all_changed_files }}
+        run: |
+          for file in ${ALL_CHANGED_DIRS}; do
+            echo "---- Building ${file} ----"
+            sudo -u podman ./build-image.sh ${file}
+          done

From d270b638e5cfab3434127565507d6a97f52f47e4 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:26:42 -0500
Subject: [PATCH 28/42] element-web: Uprev to v1.11.58

---
 element-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/element-web/Dockerfile b/element-web/Dockerfile
index 3a8aed5..6459f0c 100644
--- a/element-web/Dockerfile
+++ b/element-web/Dockerfile
@@ -1,4 +1,4 @@
-ARG ELEMENT_VER=v1.11.57
+ARG ELEMENT_VER=v1.11.58
 
 FROM debian:11 AS builder
 

From 897a20c56a78461911f6553da03bdefded797a19 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:28:53 -0500
Subject: [PATCH 29/42] Switch to our clone of changed-files action

---
 .forgejo/workflows/build-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 5ace49f..ef3aa79 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -21,7 +21,7 @@ jobs:
 
       - name: Detect Directory Changes
         id: changed-dirs
-        uses: https://github.com/tj-actions/changed-files@v42
+        uses: https://gitea.angry.im/actions/changed-files@v42
         with:
           dir_names: 'true'
           dir_names_max_depth: '1'

From c7214472b01f514b77ccd17f2427880adb193d11 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Thu, 15 Feb 2024 15:29:51 -0500
Subject: [PATCH 30/42] standardnotes-web: uprev 3.189.5

---
 standardnotes-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/standardnotes-web/Dockerfile b/standardnotes-web/Dockerfile
index 3d439d8..2c53a72 100644
--- a/standardnotes-web/Dockerfile
+++ b/standardnotes-web/Dockerfile
@@ -1,6 +1,6 @@
 FROM node:16-alpine AS builder
 
-ARG SN_TAG=@standardnotes/web@3.173.23
+ARG SN_TAG=@standardnotes/web@3.189.5
 
 RUN apk add git
 

From 7514a43574f862f2625f2c4ba58219b7843e9d87 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Sat, 17 Feb 2024 13:45:16 -0500
Subject: [PATCH 31/42] uptime-kuma: Uprev

* And make tailscale non-blocking
---
 uptime-kuma-tailscale/Dockerfile | 2 +-
 uptime-kuma-tailscale/run.sh     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/uptime-kuma-tailscale/Dockerfile b/uptime-kuma-tailscale/Dockerfile
index a6ddaf6..7944866 100644
--- a/uptime-kuma-tailscale/Dockerfile
+++ b/uptime-kuma-tailscale/Dockerfile
@@ -2,7 +2,7 @@
 # Used on fly.io because it does not support sidecar containers
 # The tailscale ephemeral key should be provided via the env variable TAILSCALE_KEY
 # custom tailscale control plane can be specified with TAILSCALE_SERVER
-FROM docker.io/louislam/uptime-kuma:1.21.2
+FROM docker.io/louislam/uptime-kuma:1.23.11
 # Default tailscale login server
 ENV TAILSCALE_SERVER=https://controlplane.tailscale.com
 ENV TAILSCALE_HOSTNAME=uptime-kuma
diff --git a/uptime-kuma-tailscale/run.sh b/uptime-kuma-tailscale/run.sh
index 5de8d4b..c1f587e 100644
--- a/uptime-kuma-tailscale/run.sh
+++ b/uptime-kuma-tailscale/run.sh
@@ -2,5 +2,5 @@
 
 /usr/sbin/tailscaled -state=mem: &
 sleep 1
-tailscale up --login-server=$TAILSCALE_SERVER --authkey=$TAILSCALE_KEY --hostname=$TAILSCALE_HOSTNAME
+tailscale up --login-server=$TAILSCALE_SERVER --authkey=$TAILSCALE_KEY --hostname=$TAILSCALE_HOSTNAME &
 node /app/server/server.js

From 4b4812868edef2173bb6395e3652f21207c4333f Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Fri, 29 Mar 2024 15:31:49 -0400
Subject: [PATCH 32/42] Uprev element-web

---
 element-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/element-web/Dockerfile b/element-web/Dockerfile
index 6459f0c..3282947 100644
--- a/element-web/Dockerfile
+++ b/element-web/Dockerfile
@@ -1,4 +1,4 @@
-ARG ELEMENT_VER=v1.11.58
+ARG ELEMENT_VER=v1.11.63
 
 FROM debian:11 AS builder
 

From 23d5ffd72a8ee7a9da44ca36dbde174a3b59548c Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Mon, 1 Apr 2024 20:39:33 -0400
Subject: [PATCH 33/42] Add nginx-dav-ext

---
 nginx-dav-ext/Dockerfile | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 nginx-dav-ext/Dockerfile

diff --git a/nginx-dav-ext/Dockerfile b/nginx-dav-ext/Dockerfile
new file mode 100644
index 0000000..59ea45e
--- /dev/null
+++ b/nginx-dav-ext/Dockerfile
@@ -0,0 +1,21 @@
+ARG NGINX_VERSION=1.25.4
+
+FROM docker.io/debian:bookworm AS builder
+
+ARG NGINX_VERSION
+
+RUN apt-get -y update && apt-get -y install git build-essential wget libxslt1-dev libpcre2-dev zlib1g-dev \
+      && mkdir /src && cd /src \
+      && wget -qO - https://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz | tar zxfv - \
+      && git clone https://github.com/arut/nginx-dav-ext-module.git
+
+RUN cd /src/nginx-${NGINX_VERSION} && ./configure --with-compat \
+         --with-file-aio --with-threads \
+         --add-dynamic-module=../nginx-dav-ext-module \
+      && make modules
+
+FROM docker.io/nginx:${NGINX_VERSION}-bookworm
+
+ARG NGINX_VERSION
+
+COPY --from=builder /src/nginx-${NGINX_VERSION}/objs/ngx_http_dav_ext_module.so /usr/lib/nginx/modules/

From 6a0acef82967efbc1223a7fa67928869e1dc077a Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Sat, 6 Apr 2024 15:44:02 -0400
Subject: [PATCH 34/42] nginx-dav-ext: Add OpenResty's more input headers
 module

---
 nginx-dav-ext/Dockerfile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/nginx-dav-ext/Dockerfile b/nginx-dav-ext/Dockerfile
index 59ea45e..3fe048f 100644
--- a/nginx-dav-ext/Dockerfile
+++ b/nginx-dav-ext/Dockerfile
@@ -7,11 +7,13 @@ ARG NGINX_VERSION
 RUN apt-get -y update && apt-get -y install git build-essential wget libxslt1-dev libpcre2-dev zlib1g-dev \
       && mkdir /src && cd /src \
       && wget -qO - https://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz | tar zxfv - \
-      && git clone https://github.com/arut/nginx-dav-ext-module.git
+      && git clone https://github.com/arut/nginx-dav-ext-module.git \
+      && git clone https://github.com/openresty/headers-more-nginx-module.git
 
 RUN cd /src/nginx-${NGINX_VERSION} && ./configure --with-compat \
          --with-file-aio --with-threads \
          --add-dynamic-module=../nginx-dav-ext-module \
+         --add-dynamic-module=../headers-more-nginx-module \
       && make modules
 
 FROM docker.io/nginx:${NGINX_VERSION}-bookworm
@@ -19,3 +21,4 @@ FROM docker.io/nginx:${NGINX_VERSION}-bookworm
 ARG NGINX_VERSION
 
 COPY --from=builder /src/nginx-${NGINX_VERSION}/objs/ngx_http_dav_ext_module.so /usr/lib/nginx/modules/
+COPY --from=builder /src/nginx-${NGINX_VERSION}/objs/ngx_http_headers_more_filter_module.so /usr/lib/nginx/modules/

From 465c3ea65f391f12ebb8b103ea3d7a8ed061985e Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Fri, 12 Apr 2024 20:34:14 -0400
Subject: [PATCH 35/42] standardnotes-web: Bump

---
 standardnotes-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/standardnotes-web/Dockerfile b/standardnotes-web/Dockerfile
index 2c53a72..d011de9 100644
--- a/standardnotes-web/Dockerfile
+++ b/standardnotes-web/Dockerfile
@@ -1,6 +1,6 @@
 FROM node:16-alpine AS builder
 
-ARG SN_TAG=@standardnotes/web@3.189.5
+ARG SN_TAG=@standardnotes/web@3.192.17
 
 RUN apk add git
 

From 2d358be1a8dada25701d1487495b2d90475135e3 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Mon, 20 May 2024 21:52:09 -0400
Subject: [PATCH 36/42] standardnotes-web: bump

---
 standardnotes-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/standardnotes-web/Dockerfile b/standardnotes-web/Dockerfile
index d011de9..57f58cc 100644
--- a/standardnotes-web/Dockerfile
+++ b/standardnotes-web/Dockerfile
@@ -1,6 +1,6 @@
 FROM node:16-alpine AS builder
 
-ARG SN_TAG=@standardnotes/web@3.192.17
+ARG SN_TAG=@standardnotes/web@3.194.6
 
 RUN apk add git
 

From 94413391e0dd7843a34fec436f9d524054ce8109 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Sat, 3 Aug 2024 21:25:05 -0400
Subject: [PATCH 37/42] Bump element-web

---
 element-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/element-web/Dockerfile b/element-web/Dockerfile
index 3282947..be5553d 100644
--- a/element-web/Dockerfile
+++ b/element-web/Dockerfile
@@ -1,4 +1,4 @@
-ARG ELEMENT_VER=v1.11.63
+ARG ELEMENT_VER=v1.11.72
 
 FROM debian:11 AS builder
 

From 2f3d953ff22f43dc111f453458bdf9832c118146 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Sun, 11 Aug 2024 17:10:33 -0400
Subject: [PATCH 38/42] bump standardnotes-web

---
 standardnotes-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/standardnotes-web/Dockerfile b/standardnotes-web/Dockerfile
index 57f58cc..68d5137 100644
--- a/standardnotes-web/Dockerfile
+++ b/standardnotes-web/Dockerfile
@@ -1,6 +1,6 @@
 FROM node:16-alpine AS builder
 
-ARG SN_TAG=@standardnotes/web@3.194.6
+ARG SN_TAG=@standardnotes/web@3.195.1
 
 RUN apk add git
 

From 11fac54d37ea902207d0bae8b521fa95a6a6215d Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Sat, 14 Sep 2024 10:38:10 -0400
Subject: [PATCH 39/42] element-web: Bump

---
 element-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/element-web/Dockerfile b/element-web/Dockerfile
index be5553d..7484576 100644
--- a/element-web/Dockerfile
+++ b/element-web/Dockerfile
@@ -1,4 +1,4 @@
-ARG ELEMENT_VER=v1.11.72
+ARG ELEMENT_VER=v1.11.77
 
 FROM debian:11 AS builder
 

From ff1f8bda1e4926cdda0dc20b2ad1337f479b4a39 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Sat, 28 Sep 2024 09:46:39 -0400
Subject: [PATCH 40/42] bump standardnotes-web

---
 standardnotes-web/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/standardnotes-web/Dockerfile b/standardnotes-web/Dockerfile
index 68d5137..034990d 100644
--- a/standardnotes-web/Dockerfile
+++ b/standardnotes-web/Dockerfile
@@ -1,6 +1,6 @@
 FROM node:16-alpine AS builder
 
-ARG SN_TAG=@standardnotes/web@3.195.1
+ARG SN_TAG=@standardnotes/web@3.195.6
 
 RUN apk add git
 

From 4245bee8e45442c4ccfdbbbc858f681420944aa3 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Mon, 21 Apr 2025 10:27:59 -0400
Subject: [PATCH 41/42] Update uptime-kuma-tailscale

---
 uptime-kuma-tailscale/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/uptime-kuma-tailscale/Dockerfile b/uptime-kuma-tailscale/Dockerfile
index 7944866..827891d 100644
--- a/uptime-kuma-tailscale/Dockerfile
+++ b/uptime-kuma-tailscale/Dockerfile
@@ -2,7 +2,7 @@
 # Used on fly.io because it does not support sidecar containers
 # The tailscale ephemeral key should be provided via the env variable TAILSCALE_KEY
 # custom tailscale control plane can be specified with TAILSCALE_SERVER
-FROM docker.io/louislam/uptime-kuma:1.23.11
+FROM docker.io/louislam/uptime-kuma:1.23.16
 # Default tailscale login server
 ENV TAILSCALE_SERVER=https://controlplane.tailscale.com
 ENV TAILSCALE_HOSTNAME=uptime-kuma

From fe7812a22951e01597df7dd9c74207226c637ae9 Mon Sep 17 00:00:00 2001
From: Peter Cai <peter@typeblog.net>
Date: Mon, 21 Apr 2025 10:38:18 -0400
Subject: [PATCH 42/42] Update headscale image

---
 headscale/Dockerfile | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/headscale/Dockerfile b/headscale/Dockerfile
index 0744ee2..1ab2c23 100644
--- a/headscale/Dockerfile
+++ b/headscale/Dockerfile
@@ -1,7 +1,7 @@
 # Builder image
-FROM docker.io/golang:1.20-bullseye AS build
-ARG VERSION=v0.22.3
-ARG CADDY_VERSION=v2.7.6
+FROM docker.io/golang:1.24-bookworm AS build
+ARG VERSION=v0.25.1
+ARG CADDY_VERSION=v2.10.0
 ENV GOPATH /go
 
 RUN apt-get install -y git && \
@@ -26,8 +26,8 @@ RUN strip /go/bin/caddy
 RUN test -e /go/bin/caddy
 
 # Node build image
-FROM docker.io/node:19-bullseye AS build-node
-ARG UI_COMMIT=a9db179089e3ae2b417fb657a2d3da68a54b1f2d
+FROM docker.io/node:22-bookworm AS build-node
+ARG UI_COMMIT=2025.03.21
 
 RUN apt-get install -y git && \
     git clone https://github.com/gurucomputing/headscale-ui /headscale-ui
@@ -39,7 +39,7 @@ RUN git checkout $UI_COMMIT && npm install --development && npm run build
 # Production image
 # Note that we do not use "distroless" because we actually want to have a shell in the image
 # to run app.sh (in order to perform custom initialization)
-FROM docker.io/golang:1.20-bullseye
+FROM docker.io/golang:1.24-bookworm
 
 COPY --from=build /go/bin/headscale /bin/headscale
 COPY --from=build /go/bin/caddy /bin/caddy