Unpin littlelink-server latest images and update docs

This commit is contained in:
okxlin
2026-07-31 09:50:02 +08:00
parent 9457ae896d
commit dbb6910ba2
2 changed files with 2 additions and 2 deletions
+1 -1
View File
@@ -28,7 +28,7 @@ LittleLink Server is a lightweight self-hosted personal link page. Environment v
## Deployment And Security
- The package pins the official `latest` image to the reviewed OCI digest because upstream does not publish versioned releases.
- The package follows the official unpinned `latest` tag because upstream does not publish versioned releases. This supports Watchtower-style updates, but each newly resolved image requires renewed review.
- The container runs as the image's non-root `node` user, drops all Linux capabilities, prevents privilege escalation, and uses a read-only root filesystem.
- Values are rendered into a public page. Do not place passwords, private tokens, or non-public URLs in profile fields.
- External avatar and link URLs are loaded by visitors' browsers. Use trusted HTTPS destinations and terminate public access through the 1Panel reverse proxy.
@@ -1,6 +1,6 @@
services:
littlelink-server:
image: "ghcr.io/timothystewart6/littlelink-server:latest@sha256:b0921c1403331dcaf7ba93b7528f03d58ae8fc132b23297bd9cb46166f005aa0"
image: "ghcr.io/timothystewart6/littlelink-server:latest"
container_name: ${CONTAINER_NAME}
restart: always
networks: