Update service versions

playbooks/roles/authentik/defaults/main.yml

@@ -5,7 +5,7 @@ authentik_svc:
   domain: "{{ all_services | service_get_domain(service_name) }}"
   port: 9000
   caddy_proxy_extra: "header_up X-Forwarded-Host {http.request.header.X-Forward-Auth-Host}"
-  image_tag: 2025.2
+  image_tag: 2026.2
   db:
     host: "{{ postgres.host }}"
     user: "{{ opentofu.postgresql_data.authentik.user }}"
@@ -26,12 +26,12 @@ authentik_env:
 
   AUTHENTIK_AVATARS: none
 
-  AUTHENTIK_REDIS__HOST: redis
-
   AUTHENTIK_POSTGRESQL__HOST: "{{ svc.db.host }}"
   AUTHENTIK_POSTGRESQL__NAME: "{{ svc.db.database }}"
   AUTHENTIK_POSTGRESQL__USER: "{{ svc.db.user }}"
   AUTHENTIK_POSTGRESQL__PASSWORD: "{{ svc.db.pass }}"
+  AUTHENTIK_POSTGRESQL__SSLMODE: verify-full
+  AUTHENTIK_POSTGRESQL__SSLROOTCERT: system
 
 authentik_compose:
   watchtower: update
@@ -40,8 +40,6 @@ authentik_compose:
     services:
       app:
         command: server
-        depends_on:
-          - redis
       worker:
         image: ghcr.io/goauthentik/server:{{ svc.image_tag }}
         restart: always
@@ -54,12 +52,5 @@ authentik_compose:
           sh.acme.autoload.domain: auth.serguzim.me
         env_file:
           - .env
-        depends_on:
-          - redis
-        networks:
-          default:
-      redis:
-        image: redis:alpine
-        restart: always
         networks:
           default:

playbooks/roles/immich/defaults/main.yml

@@ -4,7 +4,7 @@ immich_db_db: immich
 immich_db_user: "{{ undef() }}"
 immich_db_pass: "{{ undef() }}"
 
-immich_docker_tag: v2.7.5
+immich_docker_tag: v3.2.0
 
 immich_svc:
   domain: "{{ all_services | service_get_domain(service_name) }}"

playbooks/roles/minio/defaults/main.yml

@@ -25,7 +25,7 @@ minio_env:
 
 
 minio_compose:
-  watchtower: update
+  watchtower: false
   image: minio/minio
   volumes:
     - data:/data