build(DOCKER): add backports, pin dependencies

.vale/Vocab/smtp/accept.txt

@@ -1,4 +1,5 @@
 aws|AWS
+backports
 certbot
 cloudflare|Cloudflare
 dev|Dev

Dockerfile

@@ -16,11 +16,15 @@ RUN mkdir -p certbot /usr/local/share/certs/providers /usr/local/share/certs/scr
 COPY providers/"${PROVIDER}".bash /usr/local/share/certs/providers
 COPY scripts/*.bash /usr/local/share/certs/scripts
 
+# Add Backports
+RUN printf "deb http://httpredir.debian.org/debian bullseye-backports main\ndeb-src http://httpredir.debian.org/debian bullseye-backports main" \
+              > /etc/apt/sources.list.d/backports.list
+
 RUN apt-get update                                              \
       &&                                                        \
     apt-get install -y --no-install-recommends                  \
-    certbot                                                     \
-    jq                                                          \
+    certbot=1.*                                                 \
+    jq=1.*                                                      \
       &&                                                        \
     bash -c "                                                   \
       source /usr/local/share/certs/providers/${PROVIDER}.bash  \

providers/aws.bash

@@ -5,7 +5,9 @@ provider_create() {
 }
 
 provider_dependencies() {
-  apt-get install -y --no-install-recommends awscli python3-certbot-dns-route53
+  apt-get install -y --no-install-recommends \
+    awscli=1.* \
+    python3-certbot-dns-route53=1.*
 }
 
 provider_dkim() {

providers/cloudflare.bash

@@ -6,7 +6,10 @@ provider_create() {
 }
 
 provider_dependencies() {
-  apt-get install -y --no-install-recommends curl python3-certbot-dns-cloudflare
+  apt-get install -y --no-install-recommends \
+    curl=7.88.* \
+    libcurl4=7.88.* \
+    python3-certbot-dns-cloudflare=1.*
 }
 
 provider_dkim() {