Andras Bacsai
57a322ba11
fix(audit): restrict sensitive fields and centralize event filtering
2026-08-24 10:05:29 +02:00
Andras Bacsai
d74352f423
fix(audit): harden audit logging and admin controls
...
Log audit failures, redact invitation emails, exclude noisy model fields, and gate audit-log filters and pagination by admin access.
2026-08-24 09:13:20 +02:00
Andras Bacsai
8726746241
Merge remote-tracking branch 'origin/next' into team-resource-audit-logging
2026-08-24 00:02:30 +02:00
Andras Bacsai
91d4467322
feat(secrets): resolve integrations across deployments and databases
...
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
2026-08-23 21:33:00 +02:00
Andras Bacsai
51461456f6
feat(secrets): resolve remote secret references at deployment
...
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
2026-08-23 20:09:31 +02:00
Andras Bacsai
40e5fd8521
feat(audit): add team activity tracking and audit log
2026-08-22 13:18:14 +02:00
Andras Bacsai
ca5fcce39b
Reapply "Merge branch 'next' into main"
...
This reverts commit 7bbd91175f
2026-08-21 12:15:46 +02:00
Andras Bacsai
7bbd91175f
Revert "Merge branch 'next' into main"
...
This reverts commit 2598f3e4c883f1a2e503
2026-08-21 12:12:56 +02:00
github-actions[bot]
5b749850a3
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:39:12 +00:00
Andras Bacsai
8f90882875
fix(teams): make membership and source deletions atomic
...
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
github-actions[bot]
7759c9b910
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:34:23 +00:00
Andras Bacsai and GitHub
de1d234ea5
fix(auth): require confirmation before accepting magic links ( #11413 )
2026-08-20 09:34:05 +02:00
peaklabs-dev
afbe4d6fd7
feat(var): add environment variable copy functionality
2026-08-19 15:11:49 +02:00
Andras Bacsai
81227670e6
Reapply "Merge origin/next into main"
...
This reverts commit 15359833d3
2026-08-19 12:39:55 +02:00
Andras Bacsai
15359833d3
Revert "Merge origin/next into main"
...
This reverts commit 541d743907bb1d3f13f2
2026-08-19 12:33:16 +02:00
Andras Bacsai and GitHub
38aaf8cb2a
fix(caddy): prevent exact label generation argument error ( #11397 )
2026-08-19 12:31:36 +02:00
Andras Bacsai
541d743907
Merge origin/next into main
2026-08-19 12:30:09 +02:00
Andras Bacsai and GitHub
849ba8f34c
fix(email): support custom SMTP EHLO domains ( #11398 )
2026-08-19 11:25:46 +02:00
Andras Bacsai
85e0821dd4
Merge branch 'main' into third-party-integration-tokens
2026-08-18 16:15:53 +02:00
Andras Bacsai
743f54b317
feat(security): add Cloudflare integration token management
...
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
Andras Bacsai
f9f26c547c
fix(auth): preserve OAuth identity across email changes
...
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai
dd597d1527
fix(backups): support long-running volume backups
2026-08-18 14:10:23 +02:00
Andras Bacsai and GitHub
00b7861a8f
fix(services): avoid loading bind-mount file contents ( #10960 )
2026-08-18 14:05:15 +02:00
Andras Bacsai
288dc98ca7
fix: enforce remote output size limits
2026-08-18 14:03:33 +02:00
Andras Bacsai
253e59e731
Merge remote-tracking branch 'origin/next' into openid-auth-support
2026-08-18 14:03:09 +02:00
Andras Bacsai
ccd7c59abf
Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash
2026-08-18 13:58:16 +02:00
Andras Bacsai
861a904992
fix(server): surface pending proxy and outdated Traefik states
2026-08-18 13:53:40 +02:00
Andras Bacsai
d2d6c8ac96
fix(deployments): defer container cleanup and configure dashboard HTTPS
2026-08-18 12:51:54 +02:00
NrwPlay and GitHub
30da9e96eb
fix(notification): update storage email link in S3 error ( #8633 )
2026-08-18 11:38:01 +02:00
05ebba9f1a
fix: compress dashboard over HTTPS ( #10828 )
...
Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com >
2026-08-18 11:30:09 +02:00
Andras Bacsai
17d9d1a370
feat(domains): add configurable HTTPS redirects for service apps
2026-08-18 09:08:18 +02:00
Andras Bacsai and GitHub
5c6defbc76
fix(backups): honor full dumps and selected storage deletion ( #11331 )
2026-08-17 18:29:09 +02:00
Andras Bacsai
76030a30d4
chore(v5): archive V5 implementation and remove runtime integration
...
Move V5 source, migrations, UI, scripts, and tests into documentation, then remove V5 routes, models, jobs, configuration, dependencies, and application hooks.
2026-08-15 19:13:30 +02:00
Andras Bacsai and GitHub
1440d35750
fix(resources): preserve records sharing IDs across model types ( #11300 )
2026-08-15 18:43:20 +02:00
Andras Bacsai
857375f69c
feat(backups): add configurable CPU usage for volume compression
...
Add server-level compression CPU presets for volume backups and close the private key modal after saving.
2026-08-14 12:00:46 +02:00
Andras Bacsai
fd5eb3e0cd
feat(project): add icons and improve persistent volume management
...
Add project icon storage and serving with local/S3 support, prevent deletion of compose-managed volumes, and optimize volume backups. Refine project and backup UI components with consistent styling and coverage.
2026-08-13 22:56:52 +02:00
Andras Bacsai
18c4663e0f
Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash
2026-08-13 11:31:50 +02:00
Andras Bacsai
49c8f6cb5d
fix: cap remote file and task reads after size-check races
...
Read local file volumes with a bounded head instead of cat so a file that grows after the size check cannot be fully slurped into PHP memory. Treat oversized bounded reads as too large and skip binary detection on that placeholder. For scheduled tasks, read one extra byte, then truncate and append the 5MB notice instead of relying on a one-byte peek.
2026-08-13 11:31:26 +02:00
Andras Bacsai
4a7e77f809
Merge remote-tracking branch 'origin/main' into 11244-deprecated-docker-flags
2026-08-13 11:24:48 +02:00
Andras Bacsai
e79230cf37
fix(docker): replace deprecated stop flags with version-aware ones
...
Store each server's Docker version and build stop commands via
dockerStopCommand() so newer Docker uses --timeout instead of
deprecated --time/-t. Also show Docker version in server details.
2026-08-13 11:17:44 +02:00
Andras Bacsai and GitHub
462d6af99e
feat(services): add Jean Server one-click template ( #11248 )
2026-08-13 11:15:42 +02:00
Andras Bacsai
c3f485e0d6
feat(services): add Jean Server one-click template and extra fields
...
Register the jean-server compose template, logo, and catalog entries,
and expose token and allowed-origins settings on the service form.
Sort extra fields by sortOrder and omit empty service-name prefixes.
2026-08-13 11:00:04 +02:00
Eugene Scheepers
f867a9179e
fix(models): add datetime cast for finished_at in ScheduledDatabaseBackupExecution
2026-08-12 12:57:03 +00:00
Andras Bacsai
69ba001e21
feat(domains): add inline indexing and redirect controls
...
Move domain indexing and redirect settings into domain management views and include noindex changes in deployment configuration diffs.
2026-08-10 15:10:30 +02:00
Andras Bacsai
003e44d123
Merge remote-tracking branch 'origin/next' into feat/noindex-domains
2026-08-08 11:26:20 +02:00
Andras Bacsai and GitHub
f9caa5250d
feat(servers): add cross-instance server migration ( #11075 )
2026-08-07 23:07:55 +02:00
Andras Bacsai
51561e4bee
feat(profile): add uploadable avatars with local/S3 storage
...
Users can upload and remove profile pictures on the profile page.
Admins choose local or instance S3 storage in advanced settings.
Avatars are compressed to JPEG and served via a private cached route.
2026-08-07 21:39:56 +02:00
Andras Bacsai
de4e74b4cd
feat(server): fall back Sentinel URL to request host
...
Use the current request scheme/host when no FQDN or public IP is set,
skipping loopback hosts. Polish boarding/server create cards, optional
listbox tooltips, and cover the layout and Sentinel URL behavior in tests.
2026-08-07 15:41:39 +02:00
Andras Bacsai
8f7eb2d790
feat(server): auto-resolve Sentinel URL and polish setup UI
...
Ensure a Sentinel endpoint from instance FQDN/IP when enabling, use process dialogs for validation with install state, and tidy server create, boarding, metrics empty state, and log timestamps.
2026-08-07 15:21:18 +02:00
Andras Bacsai
fd6dbd5863
feat(service): warn when required environment variables are missing
...
Surface unset required service env vars in the configuration checker
popup and sidebar, refresh on env updates, and keep the env table
horizontally scrollable with correct managed/hardcoded pagination order.
2026-08-07 12:24:09 +02:00
Andras Bacsai
github-actions[bot]
peaklabs-dev
NrwPlayandGitHub
Eugene Scheepers