perf: configure services updates to start first

dargmuesli · dargmuesli · commit 32efaff87d4e · 2026-04-04T18:54:44.000+02:00
diff --git a/src/production/adminer/compose.yaml b/src/production/adminer/compose.yaml
@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.adminer-secure.tls.certresolver=default
+      update_config:
+        order: start-first
diff --git a/src/production/cloudflared/compose.yaml b/src/production/cloudflared/compose.yaml
@@ -5,6 +5,8 @@ services:
     deploy:
       labels:
         - dargstack.profiles=default
+      update_config:
+        order: start-first
     environment:
       TUNNEL_TOKEN: ${CLOUDFLARED_TUNNEL_TOKEN}
     image: cloudflare/cloudflared
diff --git a/src/production/debezium/compose.yaml b/src/production/debezium/compose.yaml
@@ -0,0 +1,9 @@
+services:
+  debezium:
+    deploy:
+      update_config:
+        order: start-first
+  debezium-postgres-connector:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/elasticsearch/compose.yaml b/src/production/elasticsearch/compose.yaml
@@ -0,0 +1,5 @@
+services:
+  elasticsearch:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/geoip/compose.yaml b/src/production/geoip/compose.yaml
@@ -0,0 +1,5 @@
+services:
+  geoip:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/grafana/compose.yaml b/src/production/grafana/compose.yaml
@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.grafana-secure.tls.certresolver=default
+      update_config:
+        order: start-first
diff --git a/src/production/jobber/compose.yaml b/src/production/jobber/compose.yaml
@@ -1,5 +1,8 @@
 services:
   jobber:
+    deploy:
+      update_config:
+        order: start-first
     environment:
       SENTRY_CRONS: ${SENTRY_CRONS}
     volumes:
diff --git a/src/production/memcached/compose.yaml b/src/production/memcached/compose.yaml
@@ -0,0 +1,5 @@
+services:
+  memcached:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/portainer-agent/compose.yaml b/src/production/portainer-agent/compose.yaml
@@ -0,0 +1,5 @@
+services:
+  portainer-agent:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/portainer/compose.yaml b/src/production/portainer/compose.yaml
@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.portainer-secure.tls.certresolver=default
+      update_config:
+        order: start-first
diff --git a/src/production/postgraphile/compose.yaml b/src/production/postgraphile/compose.yaml
@@ -5,4 +5,6 @@ services:
         - (( append ))
         - traefik.http.routers.postgraphile.middlewares=postgraphile-auth,postgraphile-cors
         - traefik.http.routers.postgraphile-secure.tls.certresolver=default
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/postgraphile:2.0.0-beta.1
diff --git a/src/production/postgres/compose.yaml b/src/production/postgres/compose.yaml
@@ -5,6 +5,9 @@ secrets:
 services:
   postgres-backup:
     # You cannot access the database backup directly.
+    deploy:
+      update_config:
+        order: start-first
     environment:
       POSTGRES_DB_FILE: /run/secrets/postgres-backup-db
       POSTGRES_HOST: postgres
@@ -18,6 +21,10 @@ services:
     volumes:
       - postgres-data:/var/lib/postgresql/
       - postgres-backup-data:/backups/
+  postgres:
+    deploy:
+      update_config:
+        order: start-first
 volumes:
   postgres-backup-data:
     # The database backup's data.
diff --git a/src/production/prometheus/compose.yaml b/src/production/prometheus/compose.yaml
@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.prometheus-secure.tls.certresolver=default
+      update_config:
+        order: start-first
diff --git a/src/production/reccoom/compose.yaml b/src/production/reccoom/compose.yaml
@@ -1,4 +1,7 @@
 services:
   reccoom:
-    deploy: (( prune ))
+    deploy:
+      labels: (( prune ))
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/reccoom:0.8.1
diff --git a/src/production/reccoom_postgres/compose.yaml b/src/production/reccoom_postgres/compose.yaml
@@ -0,0 +1,5 @@
+services:
+  reccoom_postgres:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/redis/compose.yaml b/src/production/redis/compose.yaml
@@ -0,0 +1,5 @@
+services:
+  redis:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/redpanda/compose.yaml b/src/production/redpanda/compose.yaml
@@ -4,3 +4,9 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.redpanda-secure.tls.certresolver=default
+      update_config:
+        order: start-first
+  redpanda:
+    deploy:
+      update_config:
+        order: start-first
diff --git a/src/production/sqitch/compose.yaml b/src/production/sqitch/compose.yaml
@@ -1,4 +1,7 @@
 services:
   sqitch:
+    deploy:
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/sqitch:10.0.6
     volumes: (( prune ))
diff --git a/src/production/traefik/compose.yaml b/src/production/traefik/compose.yaml
@@ -16,6 +16,8 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.traefik-secure.tls.certresolver=default
+      update_config:
+        order: start-first
     environment:
       CF_DNS_API_TOKEN_FILE: /run/secrets/traefik-cf-dns-api-token
       CF_ZONE_API_TOKEN_FILE: /run/secrets/traefik-cf-zone-api-token
@@ -38,6 +40,9 @@ services:
     image: ldez/traefik-certs-dumper:v2.11.0
     volumes:
       - acme-data:/etc/traefik/acme/
+    deploy:
+      update_config:
+        order: start-first
 volumes:
   acme-data:
     # The reverse proxy's certificate data.
diff --git a/src/production/tusd/compose.yaml b/src/production/tusd/compose.yaml
@@ -5,3 +5,5 @@ services:
         - (( append ))
         - traefik.http.routers.tusd.middlewares=tusd-cors
         - traefik.http.routers.tusd-secure.tls.certresolver=default
+      update_config:
+        order: start-first
diff --git a/src/production/vibetype/compose.yaml b/src/production/vibetype/compose.yaml
@@ -5,6 +5,8 @@ services:
         - (( append ))
         - traefik.http.routers.vibetype.middlewares=vibetype_cors,vibetype_redirectregex
         - traefik.http.routers.vibetype-secure.tls.certresolver=default
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/vibetype:13.3.3
   # vibetype-beta:
   #   # You can access the main project frontend's beta version at [beta.app.localhost](https://beta.app.localhost/).
diff --git a/src/production/zammad/compose.yaml b/src/production/zammad/compose.yaml
@@ -1,6 +1,28 @@
 services:
+  zammad-backup:
+    deploy:
+      update_config:
+        order: start-first
+  zammad-init:
+    deploy:
+      update_config:
+        order: start-first
   zammad-nginx:
     deploy:
       labels:
         - (( append ))
         - traefik.http.routers.zammad-secure.tls.certresolver=default
+      update_config:
+        order: start-first
+  zammad-railsserver:
+    deploy:
+      update_config:
+        order: start-first
+  zammad-scheduler:
+    deploy:
+      update_config:
+        order: start-first
+  zammad-websocket:
+    deploy:
+      update_config:
+        order: start-first
