Merge branch 'main' into beta

Author: dargmuesli

.github/workflows/ci.yml

@@ -14,22 +14,22 @@ on:
 jobs:
   ci-optimization:
     name: CI optimization
-    uses: dargmuesli/github-actions/.github/workflows/ci-optimization.yml@e98193e91e9be2af3af784b7a0f25d35bf4eadc5 # 4.0.7
+    uses: dargmuesli/github-actions/.github/workflows/ci-optimization.yml@f680e78d609905fc52fe9a981b4538da19d9dac4 # 4.3.1
     permissions:
       pull-requests: read
   build:
     needs: ci-optimization
     if: needs.ci-optimization.outputs.continue == 'true'
     name: dargstack rgen
-    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@e98193e91e9be2af3af784b7a0f25d35bf4eadc5 # 4.0.7
+    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@f680e78d609905fc52fe9a981b4538da19d9dac4 # 4.3.1
     permissions:
       contents: read
     with:
       APT_PACKAGES: mkcert
   release-semantic:
     needs: build
     name: Semantic Release
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@e98193e91e9be2af3af784b7a0f25d35bf4eadc5 # 4.0.7
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@f680e78d609905fc52fe9a981b4538da19d9dac4 # 4.3.1
     permissions:
       contents: write
       id-token: write

.github/workflows/release-schedule.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   release-schedule:
     name: "Release: Scheduled"
-    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@e98193e91e9be2af3af784b7a0f25d35bf4eadc5 # 4.0.7
+    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@f680e78d609905fc52fe9a981b4538da19d9dac4 # 4.3.1
     permissions:
       contents: read
     secrets:

CHANGELOG.md

@@ -19,6 +19,66 @@
 * **postgraphile:** change forward authorization path ([0e9cc64](https://github.com/maevsi/stack/commit/0e9cc64501ec547b5bddef83dda8a202a94ff203))
 * **vibetype:** allow csrf token access control header ([1ccdd94](https://github.com/maevsi/stack/commit/1ccdd94c7f87fc570212f6cf8c5ad281632e743f))
 
+## [16.1.9](https://github.com/maevsi/stack/compare/16.1.8...16.1.9) (2026-02-22)
+
+### Bug Fixes
+
+* **vibetype:** move allowed headers from postgraphile ([421ae19](https://github.com/maevsi/stack/commit/421ae19e65001039c15c94db5e91ce3610bd230f))
+
+## [16.1.8](https://github.com/maevsi/stack/compare/16.1.7...16.1.8) (2026-02-22)
+
+### Bug Fixes
+
+* **deps:** update ghcr.io/maevsi/vibetype to v13.3.3 ([a175137](https://github.com/maevsi/stack/commit/a1751375c4bcaae957fd32e920cd7a62e10114fa))
+
+## [16.1.7](https://github.com/maevsi/stack/compare/16.1.6...16.1.7) (2026-02-22)
+
+### Performance Improvements
+
+* **elasticsearch:** add resource constraints ([3ae4d73](https://github.com/maevsi/stack/commit/3ae4d73975b3afe8b5177cad84c476c358c230a4))
+
+## [16.1.6](https://github.com/maevsi/stack/compare/16.1.5...16.1.6) (2026-02-22)
+
+### Bug Fixes
+
+* **elasticsearch:** correct security configuration ([ccda936](https://github.com/maevsi/stack/commit/ccda936b5d1d7c24450027e260d9b49c27abbfbd))
+
+## [16.1.5](https://github.com/maevsi/stack/compare/16.1.4...16.1.5) (2026-02-21)
+
+### Bug Fixes
+
+* **zammad:** set nginx server scheme ([f035ac5](https://github.com/maevsi/stack/commit/f035ac5ed555b00983612de0c73abdca5accc34d))
+
+## [16.1.4](https://github.com/maevsi/stack/compare/16.1.3...16.1.4) (2026-02-21)
+
+### Bug Fixes
+
+* **zammad-init:** restart on failure only ([3fb38d9](https://github.com/maevsi/stack/commit/3fb38d9d88cc8dd4db0baa55345c3e8e14e0ad70))
+
+## [16.1.3](https://github.com/maevsi/stack/compare/16.1.2...16.1.3) (2026-02-21)
+
+### Bug Fixes
+
+* **elasticsearch:** set memory ([e257b75](https://github.com/maevsi/stack/commit/e257b75a3500aee4b0028bca4777905d14ca7cf0))
+
+## [16.1.2](https://github.com/maevsi/stack/compare/16.1.1...16.1.2) (2026-02-21)
+
+### Bug Fixes
+
+* **zammad-nginx:** resolve certificate ([e95bf06](https://github.com/maevsi/stack/commit/e95bf068fd2b4ad34c810815ab2e638b33cddb01))
+
+## [16.1.1](https://github.com/maevsi/stack/compare/16.1.0...16.1.1) (2026-02-21)
+
+### Bug Fixes
+
+* **deps:** lockfile maintenance ([0785ef9](https://github.com/maevsi/stack/commit/0785ef9d90e3b32b86da13fae2052f4879d3985d))
+
+## [16.1.0](https://github.com/maevsi/stack/compare/16.0.8...16.1.0) (2026-02-21)
+
+### Features
+
+* **zammad:** add ([f913dfc](https://github.com/maevsi/stack/commit/f913dfc894724e19195853138cc6610419a5ab42))
+
 ## [16.0.8](https://github.com/maevsi/stack/compare/16.0.7...16.0.8) (2026-02-08)
 
 ### Bug Fixes

CODEOWNERS

@@ -0,0 +1 @@
+* @dargmuesli

README.md

@@ -8,16 +8,34 @@ This project is deployed in accordance to the [DargStack template](https://githu
 ## Table of Contents
 
 
- 1. [secrets](#secrets)
+ 1. [x-shared](#x-shared)
 
- 2. [services](#services)
+ 2. [secrets](#secrets)
 
- 3. [volumes](#volumes)
+ 3. [services](#services)
+    
+ 4. [volumes](#volumes)
+    
+
+## x-shared
+
+
+ - ### `zammad-service`
+    
+    You can access the helpdesk at [zammad.app.localhost](https://zammad.app.localhost/).
 
 
 ## secrets
 
 
+ - ### `elasticsearch-keystore_password`
+    
+    The search engine's password for the keystore.
+    
+ - ### `elasticsearch-password`
+    
+    The search engine's password for the default user.
+    
  - ### `grafana_admin_email`
 
     The observation dashboard's admin email.
@@ -197,6 +215,10 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     You can check the database connector's setup logs using `portainer`.
 
+ - ### `elasticsearch`
+    
+    You cannot access the search engine via a web interface.
+    
  - ### `geoip`
 
     You cannot access the ip geolocator via a web interface.
@@ -209,6 +231,10 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     You cannot access the jobber via a web interface.
 
+ - ### `memcached`
+    
+    You cannot access the caching system via a web interface.
+    
  - ### `minio` ![development](https://img.shields.io/badge/-development-informational.svg?style=flat-square)
 
     You can access the s3 console at [minio.app.localhost](https://minio.app.localhost/).
@@ -246,6 +272,10 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     You can access reccoom's database via `adminer`.
 
+ - ### `redis`
+    
+    You cannot access the caching system via a web interface.
+    
  - ### `redpanda`
 
     You can access the event streaming platform's ui as described under `redpanda-console`.
@@ -274,6 +304,30 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     You can access the main project's frontend at [app.localhost](https://app.localhost/).
 
+ - ### `zammad-backup`
+    
+    You cannot access the helpdesk backup service via a web interface.
+    
+ - ### `zammad-init`
+    
+    You cannot access the helpdesk initialization service via a web interface.
+    
+ - ### `zammad-nginx`
+    
+    You can access the helpdesk at [zammad.app.localhost](https://zammad.app.localhost/).
+    
+ - ### `zammad-railsserver`
+    
+    You cannot access the helpdesk application server directly.
+    
+ - ### `zammad-scheduler`
+    
+    You cannot access the helpdesk scheduler directly.
+    
+ - ### `zammad-websocket`
+    
+    You cannot access the helpdesk websocket server directly.
+    
 
 ## volumes
 
@@ -294,6 +348,14 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     The change data capture's logs.
 
+ - ### `elasticsearch-configuration`
+    
+    The search engine's configuration.
+    
+ - ### `elasticsearch_data`
+    
+    The search engine's data.
+    
  - ### `grafana_data`
 
     The observation dashboard's data.
@@ -326,6 +388,10 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     The recommendation database's data.
 
+ - ### `redis_data`
+    
+    The caching system's data.
+    
  - ### `redpanda_data`
 
     The message queue's data.
@@ -334,4 +400,12 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     The frontend's data.
 
+ - ### `zammad-backup_data`
+    
+    The helpdesk backup's data.
+    
+ - ### `zammad_data`
+    
+    The helpdesk's data.
+    
 

package.json

@@ -2,8 +2,8 @@
   "author": "Jonas Thelemann <e-mail+maevsi_stack@jonas-thelemann.de>",
   "description": "Dargstack configuration for Vibetype.",
   "devDependencies": {
-    "@commitlint/cli": "20.4.1",
-    "@commitlint/config-conventional": "20.4.1",
+    "@commitlint/cli": "20.4.2",
+    "@commitlint/config-conventional": "20.4.2",
     "conventional-changelog-conventionalcommits": "9.1.0",
     "dargstack": "3.0.0",
     "dargstack_rgen": "0.9.84",
@@ -14,7 +14,7 @@
   },
   "license": "GPL-3.0-only",
   "name": "@maevsi/stack",
-  "packageManager": "pnpm@10.29.3",
+  "packageManager": "pnpm@10.30.1",
   "private": true,
   "repository": "https://github.com/maevsi/stack.git",
   "scripts": {