perf: configure service update configuration

src/production/adminer/compose.yaml

@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.adminer-secure.tls.certresolver=default
+      update_config:
+        order: start-first

src/production/cloudflared/compose.yaml

@@ -5,6 +5,8 @@ services:
     deploy:
       labels:
         - dargstack.profiles=default
+      update_config:
+        order: start-first
     environment:
       TUNNEL_TOKEN: ${CLOUDFLARED_TUNNEL_TOKEN}
     image: cloudflare/cloudflared

src/production/debezium/compose.yaml

@@ -0,0 +1,9 @@
+services:
+  debezium:
+    deploy:
+      update_config:
+        order: stop-first
+  debezium-postgres-connector:
+    deploy:
+      update_config:
+        order: stop-first

src/production/elasticsearch/compose.yaml

@@ -0,0 +1,5 @@
+services:
+  elasticsearch:
+    deploy:
+      update_config:
+        order: stop-first

src/production/geoip/compose.yaml

@@ -0,0 +1,5 @@
+services:
+  geoip:
+    deploy:
+      update_config:
+        order: start-first

src/production/grafana/compose.yaml

@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.grafana-secure.tls.certresolver=default
+      update_config:
+        order: start-first

src/production/jobber/compose.yaml

@@ -1,5 +1,8 @@
 services:
   jobber:
+    deploy:
+      update_config:
+        order: stop-first
     environment:
       SENTRY_CRONS: ${SENTRY_CRONS}
     volumes:

src/production/memcached/compose.yaml

@@ -0,0 +1,5 @@
+services:
+  memcached:
+    deploy:
+      update_config:
+        order: start-first

src/production/portainer-agent/compose.yaml

@@ -0,0 +1,5 @@
+services:
+  portainer-agent:
+    deploy:
+      update_config:
+        order: start-first

src/production/portainer/compose.yaml

@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.portainer-secure.tls.certresolver=default
+      update_config:
+        order: stop-first

src/production/postgraphile/compose.yaml

@@ -5,4 +5,6 @@ services:
         - (( append ))
         - traefik.http.routers.postgraphile.middlewares=postgraphile-auth,postgraphile-cors
         - traefik.http.routers.postgraphile-secure.tls.certresolver=default
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/postgraphile:2.0.0-beta.1

src/production/postgres/compose.yaml

@@ -3,8 +3,15 @@ secrets:
     # The database's name.
     external: true
 services:
+  postgres:
+    deploy:
+      update_config:
+        order: stop-first
   postgres-backup:
     # You cannot access the database backup directly.
+    deploy:
+      update_config:
+        order: stop-first
     environment:
       POSTGRES_DB_FILE: /run/secrets/postgres-backup-db
       POSTGRES_HOST: postgres

src/production/prometheus/compose.yaml

@@ -4,3 +4,5 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.prometheus-secure.tls.certresolver=default
+      update_config:
+        order: stop-first

src/production/reccoom/compose.yaml

@@ -1,4 +1,7 @@
 services:
   reccoom:
-    deploy: (( prune ))
+    deploy:
+      labels: (( prune ))
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/reccoom:0.9.0

src/production/reccoom_postgres/compose.yaml

@@ -0,0 +1,5 @@
+services:
+  reccoom_postgres:
+    deploy:
+      update_config:
+        order: stop-first

src/production/redis/compose.yaml

@@ -0,0 +1,5 @@
+services:
+  redis:
+    deploy:
+      update_config:
+        order: stop-first

src/production/redpanda/compose.yaml

@@ -1,6 +1,12 @@
 services:
+  redpanda:
+    deploy:
+      update_config:
+        order: stop-first
   redpanda-console:
     deploy:
       labels:
         - (( append ))
         - traefik.http.routers.redpanda-secure.tls.certresolver=default
+      update_config:
+        order: start-first

src/production/sqitch/compose.yaml

@@ -1,4 +1,7 @@
 services:
   sqitch:
+    deploy:
+      update_config:
+        order: stop-first
     image: ghcr.io/maevsi/sqitch:10.0.8
     volumes: (( prune ))

src/production/traefik/compose.yaml

@@ -16,6 +16,8 @@ services:
       labels:
         - (( append ))
         - traefik.http.routers.traefik-secure.tls.certresolver=default
+      update_config:
+        order: start-first
     environment:
       CF_DNS_API_TOKEN_FILE: /run/secrets/traefik-cf-dns-api-token
       CF_ZONE_API_TOKEN_FILE: /run/secrets/traefik-cf-zone-api-token
@@ -33,6 +35,9 @@ services:
       - --source=/etc/traefik/acme/acme.json
       - --version=v2
       - --watch
+    deploy:
+      update_config:
+        order: stop-first
     environment:
       STACK_DOMAIN: ${STACK_DOMAIN}
     image: ldez/traefik-certs-dumper:v2.11.0

src/production/tusd/compose.yaml

@@ -5,3 +5,5 @@ services:
         - (( append ))
         - traefik.http.routers.tusd.middlewares=tusd-cors
         - traefik.http.routers.tusd-secure.tls.certresolver=default
+      update_config:
+        order: start-first

src/production/vibetype/compose.yaml

@@ -5,6 +5,8 @@ services:
         - (( append ))
         - traefik.http.routers.vibetype.middlewares=vibetype_cors,vibetype_redirectregex
         - traefik.http.routers.vibetype-secure.tls.certresolver=default
+      update_config:
+        order: start-first
     image: ghcr.io/maevsi/vibetype:13.4.0
   # vibetype-beta:
   #   # You can access the main project frontend's beta version at [beta.app.localhost](https://beta.app.localhost/).

src/production/zammad/compose.yaml

@@ -1,6 +1,28 @@
 services:
+  zammad-backup:
+    deploy:
+      update_config:
+        order: stop-first
+  zammad-init:
+    deploy:
+      update_config:
+        order: stop-first
   zammad-nginx:
     deploy:
       labels:
         - (( append ))
         - traefik.http.routers.zammad-secure.tls.certresolver=default
+      update_config:
+        order: start-first
+  zammad-railsserver:
+    deploy:
+      update_config:
+        order: start-first
+  zammad-scheduler:
+    deploy:
+      update_config:
+        order: stop-first
+  zammad-websocket:
+    deploy:
+      update_config:
+        order: start-first