From 17ed751943a40ffd52f563f943af24b67a7a53b3 Mon Sep 17 00:00:00 2001
From: thelamer <ryankuba@gmail.com>
Date: Sun, 20 Jul 2025 19:41:40 -0400
Subject: [PATCH] update docs and testing

---
 .github/workflows/external_trigger.yml | 4 ++--
 Jenkinsfile                            | 8 ++++----
 README.md                              | 6 +++++-
 jenkins-vars.yml                       | 8 ++++----
 readme-vars.yml                        | 1 -
 5 files changed, 15 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/external_trigger.yml b/.github/workflows/external_trigger.yml
index 7aee258..a5d7f90 100644
--- a/.github/workflows/external_trigger.yml
+++ b/.github/workflows/external_trigger.yml
@@ -29,7 +29,7 @@ jobs:
           echo "> [!NOTE]" >> $GITHUB_STEP_SUMMARY
           echo "> External trigger running off of master branch. To disable this trigger, add \`sqlitebrowser_master\` into the Github organizational variable \`SKIP_EXTERNAL_TRIGGER\`." >> $GITHUB_STEP_SUMMARY
           printf "\n## Retrieving external version\n\n" >> $GITHUB_STEP_SUMMARY
-          EXT_RELEASE=$(curl -sL "http://dl-cdn.alpinelinux.org/alpine/v3.21/community/x86_64/APKINDEX.tar.gz" | tar -xz -C /tmp \
+          EXT_RELEASE=$(curl -sL "http://dl-cdn.alpinelinux.org/alpine/v3.22/community/x86_64/APKINDEX.tar.gz" | tar -xz -C /tmp \
             && awk '/^P:'"sqlitebrowser"'$/,/V:/' /tmp/APKINDEX | sed -n 2p | sed 's/^V://')
           echo "Type is \`alpine_repo\`" >> $GITHUB_STEP_SUMMARY
           if grep -q "^sqlitebrowser_master_${EXT_RELEASE}" <<< "${SKIP_EXTERNAL_TRIGGER}"; then
@@ -107,7 +107,7 @@ jobs:
           if [ "${EXT_RELEASE_SANITIZED}" == "${IMAGE_VERSION}" ]; then
             echo "Sanitized version \`${EXT_RELEASE_SANITIZED}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY
             exit 0
-          elif [[ $(curl -sL "http://dl-cdn.alpinelinux.org/alpine/v3.21/community/aarch64/APKINDEX.tar.gz" | tar -xz -C /tmp && awk '/^P:'"sqlitebrowser"'$/,/V:/' /tmp/APKINDEX | sed -n 2p | sed 's/^V://') != "${EXT_RELEASE}" ]]; then
+          elif [[ $(curl -sL "http://dl-cdn.alpinelinux.org/alpine/v3.22/community/aarch64/APKINDEX.tar.gz" | tar -xz -C /tmp && awk '/^P:'"sqlitebrowser"'$/,/V:/' /tmp/APKINDEX | sed -n 2p | sed 's/^V://') != "${EXT_RELEASE}" ]]; then
             echo "New version \`${EXT_RELEASE}\` found; but not all arch repos updated yet; exiting" >> $GITHUB_STEP_SUMMARY
             FAILURE_REASON="New version ${EXT_RELEASE} for sqlitebrowser tag latest is detected, however not all arch repos are updated yet. Will try again later."
             curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://cdn.discordapp.com/avatars/354986384542662657/df91181b3f1cf0ef1592fbe18e0962d7.png","embeds": [{"color": 9802903,
diff --git a/Jenkinsfile b/Jenkinsfile
index 515b90b..d5ce460 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -27,14 +27,14 @@ pipeline {
     DEV_DOCKERHUB_IMAGE = 'lsiodev/sqlitebrowser'
     PR_DOCKERHUB_IMAGE = 'lspipepr/sqlitebrowser'
     DIST_IMAGE = 'alpine'
-    DIST_TAG = '3.21'
-    DIST_REPO = 'http://dl-cdn.alpinelinux.org/alpine/v3.21/community/'
+    DIST_TAG = '3.22'
+    DIST_REPO = 'http://dl-cdn.alpinelinux.org/alpine/v3.22/community/'
     DIST_REPO_PACKAGES = 'sqlitebrowser'
     MULTIARCH='true'
     CI='true'
     CI_WEB='true'
-    CI_PORT='3000'
-    CI_SSL='false'
+    CI_PORT='3001'
+    CI_SSL='true'
     CI_DELAY='120'
     CI_DOCKERENV='TZ=US/Pacific'
     CI_AUTH='user:password'
diff --git a/README.md b/README.md
index 356fa49..afba8ac 100644
--- a/README.md
+++ b/README.md
@@ -58,9 +58,13 @@ The architectures supported by this image are:
 
 The application can be accessed at:
 
-* http://yourhost:3000/
 * https://yourhost:3001/
 
+### Strict reverse proxies
+
+This image uses a self-signed certificate by default. This naturally means the scheme is `https`.
+If you are using a reverse proxy which validates certificates, you need to [disable this check for the container](https://docs.linuxserver.io/faq#strict-proxy).
+
 **Modern GUI desktop apps may have compatibility issues with the latest Docker syscall restrictions. You can use Docker with the `--security-opt seccomp=unconfined` setting to allow these syscalls on hosts with older Kernels or libseccomp versions.**
 
 ### Security
diff --git a/jenkins-vars.yml b/jenkins-vars.yml
index f8851ff..2012a5e 100644
--- a/jenkins-vars.yml
+++ b/jenkins-vars.yml
@@ -16,14 +16,14 @@ repo_vars:
   - DEV_DOCKERHUB_IMAGE = 'lsiodev/sqlitebrowser'
   - PR_DOCKERHUB_IMAGE = 'lspipepr/sqlitebrowser'
   - DIST_IMAGE = 'alpine'
-  - DIST_TAG = '3.21'
-  - DIST_REPO = 'http://dl-cdn.alpinelinux.org/alpine/v3.21/community/'
+  - DIST_TAG = '3.22'
+  - DIST_REPO = 'http://dl-cdn.alpinelinux.org/alpine/v3.22/community/'
   - DIST_REPO_PACKAGES = 'sqlitebrowser'
   - MULTIARCH='true'
   - CI='true'
   - CI_WEB='true'
-  - CI_PORT='3000'
-  - CI_SSL='false'
+  - CI_PORT='3001'
+  - CI_SSL='true'
   - CI_DELAY='120'
   - CI_DOCKERENV='TZ=US/Pacific'
   - CI_AUTH='user:password'
diff --git a/readme-vars.yml b/readme-vars.yml
index c31b013..3b05b61 100644
--- a/readme-vars.yml
+++ b/readme-vars.yml
@@ -37,7 +37,6 @@ app_setup_block_enabled: true
 app_setup_block: |
   The application can be accessed at:
 
-  * http://yourhost:3000/
   * https://yourhost:3001/
 # init diagram
 init_diagram: |