From f3be42c857674dde8ad082ee0d34cb4c3187c70b Mon Sep 17 00:00:00 2001
From: Kevin Wang <wy721@qq.com>
Date: Fri, 27 Mar 2026 07:02:57 +0000
Subject: [PATCH] Pin dstack-ingress image to v2.0 digest

Pin all example docker-compose files and README to the v2.0 release
digest for reproducible builds.
---
 custom-domain/dstack-ingress/README.md                 | 6 +++---
 custom-domain/dstack-ingress/docker-compose.multi.yaml | 3 +--
 custom-domain/dstack-ingress/docker-compose.yaml       | 3 +--
 3 files changed, 5 insertions(+), 7 deletions(-)

diff --git a/custom-domain/dstack-ingress/README.md b/custom-domain/dstack-ingress/README.md
index d6a2bfc..ff09346 100644
--- a/custom-domain/dstack-ingress/README.md
+++ b/custom-domain/dstack-ingress/README.md
@@ -35,7 +35,7 @@ You can use a wildcard domain (e.g. `*.myapp.com`) to route all subdomains to a
 ```yaml
 services:
   dstack-ingress:
-    image: dstacktee/dstack-ingress:latest
+    image: dstacktee/dstack-ingress:2.0@sha256:9fb13c42dceaba91d2e2e7de3a06700a2cf507f4335ae70f3f1db4574a5ad552
     ports:
       - "443:443"
     environment:
@@ -64,7 +64,7 @@ volumes:
 ```yaml
 services:
   dstack-ingress:
-    image: dstacktee/dstack-ingress:latest
+    image: dstacktee/dstack-ingress:2.0@sha256:9fb13c42dceaba91d2e2e7de3a06700a2cf507f4335ae70f3f1db4574a5ad552
     ports:
       - "443:443"
     environment:
@@ -102,7 +102,7 @@ Use `ROUTING_MAP` to route different domains to different backends via SNI:
 ```yaml
 services:
   ingress:
-    image: dstacktee/dstack-ingress:latest
+    image: dstacktee/dstack-ingress:2.0@sha256:9fb13c42dceaba91d2e2e7de3a06700a2cf507f4335ae70f3f1db4574a5ad552
     ports:
       - "443:443"
     environment:
diff --git a/custom-domain/dstack-ingress/docker-compose.multi.yaml b/custom-domain/dstack-ingress/docker-compose.multi.yaml
index 74d92c5..0b3e46b 100644
--- a/custom-domain/dstack-ingress/docker-compose.multi.yaml
+++ b/custom-domain/dstack-ingress/docker-compose.multi.yaml
@@ -1,7 +1,6 @@
 services:
   ingress:
-    # TODO: pin by digest for production (dstacktee/dstack-ingress@sha256:...)
-    image: dstacktee/dstack-ingress:latest
+    image: dstacktee/dstack-ingress:2.0@sha256:9fb13c42dceaba91d2e2e7de3a06700a2cf507f4335ae70f3f1db4574a5ad552
     ports:
       - "443:443"
     environment:
diff --git a/custom-domain/dstack-ingress/docker-compose.yaml b/custom-domain/dstack-ingress/docker-compose.yaml
index ad79ed1..53c7788 100644
--- a/custom-domain/dstack-ingress/docker-compose.yaml
+++ b/custom-domain/dstack-ingress/docker-compose.yaml
@@ -1,7 +1,6 @@
 services:
   dstack-ingress:
-    # TODO: pin by digest for production (dstacktee/dstack-ingress@sha256:...)
-    image: dstacktee/dstack-ingress:latest
+    image: dstacktee/dstack-ingress:2.0@sha256:9fb13c42dceaba91d2e2e7de3a06700a2cf507f4335ae70f3f1db4574a5ad552
     ports:
       - "443:443"
     environment: