From dbb6910ba22dcdc09249b399e29d6d41f72114ee Mon Sep 17 00:00:00 2001 From: okxlin <61420215+okxlin@users.noreply.github.com> Date: Fri, 31 Jul 2026 09:50:02 +0800 Subject: [PATCH] Unpin littlelink-server latest images and update docs --- apps/littlelink-server/README.md | 2 +- apps/littlelink-server/latest/docker-compose.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/littlelink-server/README.md b/apps/littlelink-server/README.md index 9e295d528..c925dbf4c 100644 --- a/apps/littlelink-server/README.md +++ b/apps/littlelink-server/README.md @@ -28,7 +28,7 @@ LittleLink Server is a lightweight self-hosted personal link page. Environment v ## Deployment And Security -- The package pins the official `latest` image to the reviewed OCI digest because upstream does not publish versioned releases. +- The package follows the official unpinned `latest` tag because upstream does not publish versioned releases. This supports Watchtower-style updates, but each newly resolved image requires renewed review. - The container runs as the image's non-root `node` user, drops all Linux capabilities, prevents privilege escalation, and uses a read-only root filesystem. - Values are rendered into a public page. Do not place passwords, private tokens, or non-public URLs in profile fields. - External avatar and link URLs are loaded by visitors' browsers. Use trusted HTTPS destinations and terminate public access through the 1Panel reverse proxy. diff --git a/apps/littlelink-server/latest/docker-compose.yml b/apps/littlelink-server/latest/docker-compose.yml index 4c56b650c..c332cf9b4 100644 --- a/apps/littlelink-server/latest/docker-compose.yml +++ b/apps/littlelink-server/latest/docker-compose.yml @@ -1,6 +1,6 @@ services: littlelink-server: - image: "ghcr.io/timothystewart6/littlelink-server:latest@sha256:b0921c1403331dcaf7ba93b7528f03d58ae8fc132b23297bd9cb46166f005aa0" + image: "ghcr.io/timothystewart6/littlelink-server:latest" container_name: ${CONTAINER_NAME} restart: always networks: