From 353a1411812b17378859df74d36d98c5f19159e3 Mon Sep 17 00:00:00 2001 From: Erich Blume Date: Tue, 24 Mar 2026 13:19:23 -0700 Subject: [PATCH] Remove tag = "latest" from nix container definitions The tag field in buildLayeredImage is optional and only affects the local docker-archive output. The CI workflow tags with immutable SHA-based tags via skopeo, so "latest" is misleading noise. Co-Authored-By: Claude Opus 4.6 (1M context) --- containers/alloy/default.nix | 2 -- containers/authentik-redis/default.nix | 2 -- containers/authentik/default.nix | 2 -- containers/ntfy/default.nix | 2 -- 4 files changed, 8 deletions(-) diff --git a/containers/alloy/default.nix b/containers/alloy/default.nix index f8e4966..e508a10 100644 --- a/containers/alloy/default.nix +++ b/containers/alloy/default.nix @@ -116,8 +116,6 @@ in pkgs.dockerTools.buildLayeredImage { name = "blumeops/alloy"; - tag = "latest"; - contents = [ alloy pkgs.cacert diff --git a/containers/authentik-redis/default.nix b/containers/authentik-redis/default.nix index 98c09f4..7b66f84 100644 --- a/containers/authentik-redis/default.nix +++ b/containers/authentik-redis/default.nix @@ -15,8 +15,6 @@ assert pkgs.redis.version == version; pkgs.dockerTools.buildLayeredImage { name = "blumeops/authentik-redis"; - tag = "latest"; - contents = [ pkgs.redis ]; diff --git a/containers/authentik/default.nix b/containers/authentik/default.nix index 7d5a976..5b965bd 100644 --- a/containers/authentik/default.nix +++ b/containers/authentik/default.nix @@ -41,8 +41,6 @@ in pkgs.dockerTools.buildLayeredImage { name = "blumeops/authentik"; - tag = "latest"; - contents = [ ak authentik-django diff --git a/containers/ntfy/default.nix b/containers/ntfy/default.nix index 7c13afd..cc1bc2a 100644 --- a/containers/ntfy/default.nix +++ b/containers/ntfy/default.nix @@ -67,8 +67,6 @@ in pkgs.dockerTools.buildLayeredImage { name = "blumeops/ntfy"; - tag = "latest"; - contents = [ ntfy pkgs.cacert