app store: uninstall removes containers and never data
There is now no uninstall option that deletes data, rather than a careful one that does. A user uninstalling a sidecar is saying "stop running this", which is not the same sentence as "delete my photo library", and for Immich or Jellyfin getting that wrong once is unrecoverable. No confirmation dialog makes it a good default. So: `docker compose down` without `-v`. Containers and networks go; the service directory and everything under it stays exactly as it was. The bind-mount convention already makes this hard to get wrong, which is worth noting because it means the safety is structural rather than a rule someone has to keep following. Data lives on the host inside the service directory, so `-v` — which only removes NAMED volumes — could not delete it even if a future change added the flag back. `mode: 'existing'` has no disposal question at all: we did not create that service, so uninstall removes our sidecar and our rows and touches nothing else. Reclaiming disk becomes its own feature later, with the sizes in front of the user — "Photos is using 340 GB, delete it?" — as a deliberate act rather than a checkbox inside an uninstall flow. Removed two stale `down -v` references that survived the first pass, one in the schema comment and one in the design doc's table. Leftovers like those are how a rule becomes permission again. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
@@ -142,11 +142,10 @@ Two independent flags, because they answer different questions:
|
||||
|
||||
That yields the three outcomes asked for:
|
||||
|
||||
| Action | Effect |
|
||||
| ------------------------ | ------------------------------------------------------------------------------------ |
|
||||
| **Disable** | Stop the sidecar. Container, config, schema and data all stay. Re-enable is instant. |
|
||||
| **Uninstall, keep data** | Stop, remove the process. Leave container volumes and rows. |
|
||||
| **Full uninstall** | Also `docker compose down -v` and drop the sidecar's tables. |
|
||||
| Action | Effect |
|
||||
| ------------- | -------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **Disable** | Stop the sidecar. Container, config, schema and data all stay. Re-enable is instant. |
|
||||
| **Uninstall** | Stop the sidecar, `docker compose down` — containers and networks removed. **The service directory and everything in it stays.** |
|
||||
|
||||
The middle one is the in-between; the user chooses disposal at uninstall time rather than us guessing.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user