Update some roles

roles/authentik/vars/main.yml

@@ -3,7 +3,7 @@ authentik_svc:
   domain: auth.serguzim.me
   name: authentik
   port: 9000
-  image_tag: 2023.8
+  image_tag: 2024.2
   db:
     host: "{{ postgres.host }}"
     database: authentik

roles/backup/files/node002/immich.sh

@@ -2,4 +2,4 @@ backup_path="$BACKUP_LOCATION/immich"
 mkdir -p "$backup_path"
 
 cd /opt/services/immich || exit
-docker compose exec database pg_dump -U "$DB_USERNAME" "$DB_DATABASE" | gzip >"$backup_path/immich.sql.gz"
+docker compose exec database sh -c 'pg_dump -U "$DB_USERNAME" "$DB_DATABASE"' | gzip >"$backup_path/immich.sql.gz"

roles/caddy/files/snippets

@@ -39,6 +39,7 @@
 (analytics) {
 	handle_path /_a/* {
 		reverse_proxy https://analytics.serguzim.me {
+			header_up X-Analytics-IP {remote}
 			header_up Host {http.reverse_proxy.upstream.hostport}
 		}
 	}

roles/shlink/vars/main.yml

@@ -1,6 +1,8 @@
 ---
 shlink_svc:
   domain: msrg.cc
+  additional_domains:
+    - "emgauwa.app"
   name: shlink
   port: 8080
 
@@ -22,8 +24,7 @@ shlink_env:
   DB_USER: "{{ vault_shlink.db.user }}"
   DB_PASSWORD: "{{ vault_shlink.db.pass }}"
 
-  DISABLE_TRACKING: true
+  GEOLITE_LICENSE_KEY: "{{ vault_shlink.geolite_key }}"
-  SKIP_INITIAL_GEOLITE_DOWNLOAD: true
 
 shlink_compose:
   watchtower: true

roles/umami/vars/main.yml

@@ -18,6 +18,7 @@ umami_env:
   DATABASE_TYPE: postgresql
   FORCE_SSL: 1
   HASH_SALT: "{{ umami_hash_salt }}"
+  CLIENT_IP_HEADER: X-Analytics-IP
 
 umami_compose:
   watchtower: true