starred/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-08-24 02:24:11 -05:00
Code Issues Packages Projects Releases Wiki Activity
16,805 Commits 85 Branches 693 Tags
team-resource-audit-logging
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andras Bacsai d74352f423 fix(audit): harden audit logging and admin controls 
Log audit failures, redact invitation emails, exclude noisy model fields, and gate audit-log filters and pagination by admin access.
 2026-08-24 09:13:20 +02:00
Andras Bacsai c1f29beff1 feat(audit): expose team events and log integration actions 
Add an admin-only audit-events API endpoint and restrict audit-log UI access. Record integration token and secret manager changes, key access, and references in audit events.
 2026-08-24 07:56:21 +02:00
Andras Bacsai 8726746241 Merge remote-tracking branch 'origin/next' into team-resource-audit-logging 2026-08-24 00:02:30 +02:00
Andras BacsaiandGitHub 4454340b09 feat(secrets): add 3rd party secret manager providers (#11474) 2026-08-24 00:01:23 +02:00
Andras Bacsai 6d716e54d7 fix(database): preserve credentials and activity context on start 
Keep raw secret values for database credentials, escape Redis passwords in startup commands, and pass user context through queued database starts.
 2026-08-23 23:03:06 +02:00
Andras Bacsai f49c330d9d feat(database): queue starts and resolve credentials securely 
Extract database start command execution into a shared service and job, preserving activity tracking and status events while supporting resolved secret credentials.
 2026-08-23 22:33:03 +02:00
Andras Bacsai 91d4467322 feat(secrets): resolve integrations across deployments and databases 
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
 2026-08-23 21:33:00 +02:00
Andras Bacsai 4cd75e05b5 chore: remove obsolete AI lessons and task notes 2026-08-23 21:11:26 +02:00
Andras Bacsai ba179d50ac feat(secrets): add integration token and application manager APIs 
Add API endpoints for creating validated secret manager tokens and configuring application secret manager settings. Suppress secret-bearing deployment command logs and redact resolved remote secrets.
 2026-08-23 20:42:20 +02:00
Andras Bacsai 51461456f6 feat(secrets): resolve remote secret references at deployment 
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
 2026-08-23 20:09:31 +02:00
Andras Bacsai 40e5fd8521 feat(audit): add team activity tracking and audit log 2026-08-22 13:18:14 +02:00
Andras Bacsai 0bcaa4f51a Merge remote-tracking branch 'origin/main' into next 2026-08-21 12:19:57 +02:00
Andras Bacsai dd90926583 fix(ci): protect main during sync conflicts 2026-08-21 12:19:05 +02:00
Andras Bacsai ca5fcce39b Reapply "Merge branch 'next' into main" 
This reverts commit 7bbd91175f.
 2026-08-21 12:15:46 +02:00
Andras Bacsai 7bbd91175f Revert "Merge branch 'next' into main" 
This reverts commit 2598f3e4c8, reversing
changes made to 83f1a2e503.
 2026-08-21 12:12:56 +02:00
Andras BacsaiandGitHub 2598f3e4c8 Merge branch 'next' into main 2026-08-21 12:11:40 +02:00
Andras BacsaiandGitHub 83f1a2e503 fix(domains): allow adding domains without explicit ports (#11442) 2026-08-21 12:04:14 +02:00
Andras Bacsai 15072b9cf7 fix(ui): release modal scroll lock before confirmation submission 
Close the confirmation modal before submitting destructive actions and reopen it when submission fails or returns an error.
 2026-08-21 11:23:04 +02:00
Andras BacsaiandGitHub 65f4649a7d fix(deployments): ignore newly tracked static configuration (#11430) 2026-08-20 20:17:08 +02:00
Andras BacsaiandGitHub 33218532a8 Align resource access checks (#11405) 2026-08-20 12:49:59 +02:00
Andras Bacsai c9b857884b fix(api): align team-scoped responses 2026-08-20 12:40:13 +02:00
Andras Bacsai 38502e8205 fix(resources): preserve deletion when remote cleanup fails 
Separate remote service cleanup from resource deletion and ensure database removal
completes despite cleanup errors. Update the disabled two-factor badge icon.
 2026-08-20 11:10:14 +02:00
Andras Bacsai 8f90882875 fix(teams): make membership and source deletions atomic 
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
 2026-08-20 09:38:50 +02:00
Andras Bacsai 1eea1a1412 Merge remote-tracking branch 'origin/main' 2026-08-20 09:34:13 +02:00
Andras BacsaiandGitHub de1d234ea5 fix(auth): require confirmation before accepting magic links (#11413) 2026-08-20 09:34:05 +02:00
Andras Bacsai 680071dca8 fix(teams): restrict deletion to owners and backfill team ownership 2026-08-20 09:32:32 +02:00
Andras BacsaiandGitHub 14d40c73a2 fix(docker-cleanup): finalize executions after job failure (#11408) 2026-08-19 16:47:19 +02:00
Andras BacsaiandGitHub 7c69b32c58 fix(services): handle empty compose environment sections (#11407) 2026-08-19 16:46:57 +02:00
Andras Bacsai 13a577a731 fix: align resource access checks 2026-08-19 15:05:51 +02:00
Andras BacsaiandGitHub fd97baf2dd Hide source path from volume creation UI (#7591) 2026-08-19 13:51:44 +02:00
Andras Bacsai 63d22f1331 chore: remove legacy Dusk tests and configure maintenance driver 2026-08-19 13:49:14 +02:00
Andras Bacsai 937892b3ea fix(storage): guard volume names and authorize source removal 2026-08-19 13:15:15 +02:00
Andras Bacsai 1d37968f5d Merge remote-tracking branch 'origin/next' into remove-local-volume-source 2026-08-19 13:13:09 +02:00
Andras Bacsai 58861227e0 fix(ci): allow RC workflow to revalidate prereleases 2026-08-19 13:07:07 +02:00
Andras Bacsai 81227670e6 Reapply "Merge origin/next into main" 
This reverts commit 15359833d3.
 2026-08-19 12:39:55 +02:00
Andras Bacsai 15359833d3 Revert "Merge origin/next into main" 
This reverts commit 541d743907, reversing
changes made to bb1d3f13f2.
 2026-08-19 12:33:16 +02:00
Andras BacsaiandGitHub 38aaf8cb2a fix(caddy): prevent exact label generation argument error (#11397) 2026-08-19 12:31:36 +02:00
Andras Bacsai 541d743907 Merge origin/next into main 2026-08-19 12:30:09 +02:00
Andras Bacsai bb1d3f13f2 feat(ci): add next build and RC release workflows 
Replace generic staging builds with traceable next images and reviewed RC releases.
 2026-08-19 12:22:51 +02:00
Andras BacsaiandGitHub c3a86b054a fix(upgrade): persist target image before container recreation (#11401) 2026-08-19 12:18:05 +02:00
Andras Bacsai 534f22a0df Merge remote-tracking branch 'origin/main' 2026-08-19 12:06:35 +02:00
Andras Bacsai 89480bcc61 feat(api): add instance email settings endpoints 
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
 2026-08-19 11:57:26 +02:00
Andras BacsaiandGitHub 59be75bdac fix(email): prevent Proton SMTP From header folding (#11400) 2026-08-19 11:52:59 +02:00
Andras Bacsai 2b8e684f68 Merge remote-tracking branch 'origin/main' 2026-08-19 11:41:45 +02:00
Andras Bacsai 22f0af8d0e feat(platform): support SMTP EHLO, page-preserving teams, and upgrades 2026-08-19 11:41:41 +02:00
Andras BacsaiandGitHub 34da7232aa fix(api-tokens): scope token access to current team (#11396) 2026-08-19 11:27:23 +02:00
Andras BacsaiandGitHub 849ba8f34c fix(email): support custom SMTP EHLO domains (#11398) 2026-08-19 11:25:46 +02:00
Andras Bacsai 9e6afc0408 Merge remote-tracking branch 'origin/main' 2026-08-19 11:09:10 +02:00
Andras Bacsai e3a0279c00 fix(ui): flag pending proxy updates and Sentinel outages 2026-08-19 11:09:02 +02:00
Andras BacsaiandGitHub ae85688651 fix(email): respect disabled SMTP encryption in test emails (#11384) 2026-08-19 10:55:10 +02:00
Andras BacsaiandGitHub 41f7152441 fix(email): apply configured sender identity (#11393) 2026-08-19 10:43:25 +02:00
Andras Bacsai 292c3aa231 chore(release): bump Coolify versions to 4.3.10 and 4.3.11 2026-08-19 00:09:48 +02:00
Andras BacsaiandGitHub 45d0ec7518 fix(dns): time out validation queries after five seconds (#11378) 2026-08-18 23:40:59 +02:00
Andras BacsaiandGitHub 1cb9f001f8 fix(ssh): preserve sessions when recycling mux connections (#11377) 2026-08-18 23:38:38 +02:00
Andras Bacsai 81f3cc6446 Merge remote-tracking branch 'origin/main' 2026-08-18 22:42:06 +02:00
Andras Bacsai b4f9c9b51d feat(development): add QEMU VM provisioning and server seeding 
Add configurable development QEMU profiles, host setup, VM lifecycle management,
and commands to seed managed VMs as Coolify servers. Improve installation dialog
logs with responsive mobile presentation.
 2026-08-18 21:14:29 +02:00
Andras Bacsai 680a7e892d fix(storage): clarify source path removal impact 2026-08-18 20:05:09 +02:00
Andras Bacsai f5f904a403 refactor(storage): separate volumes from directory mounts 2026-08-18 20:01:36 +02:00
Andras Bacsai e62a2d45a0 Merge branch 'next' into remove-local-volume-source 2026-08-18 19:59:23 +02:00
Andras BacsaiandGitHub f6467feeb3 ✨ Add support for apk package manager (on Alpine Linux) (#6189) 2026-08-18 16:46:02 +02:00
Andras Bacsai 96790e6531 feat(server): support Alpine package management and Docker setup 
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
 2026-08-18 16:45:02 +02:00
Andras BacsaiandGitHub ff13c22431 feat(security): add Cloudflare integration token management (#11359) 2026-08-18 16:43:06 +02:00
Andras Bacsai e78fde9b53 Merge remote-tracking branch 'origin/next' into third-party-integration-tokens 2026-08-18 16:26:53 +02:00
Andras Bacsai a9ae9caedc chore: ignore superpowers plan files 2026-08-18 16:25:56 +02:00
Andras Bacsai da8665330b feat(security): add integration token editing and rotation 2026-08-18 16:24:53 +02:00
Andras Bacsai f4852dd96c ci: use current checkout action for branch sync 2026-08-18 16:24:41 +02:00
Andras Bacsai 9281e8604c ci: sync main changes to next 2026-08-18 16:24:11 +02:00
Andras Bacsai fe9e1e46f5 Merge remote-tracking branch 'origin/main' into next 2026-08-18 16:17:26 +02:00
Andras Bacsai 85e0821dd4 Merge branch 'main' into third-party-integration-tokens 2026-08-18 16:15:53 +02:00
Andras Bacsai 743f54b317 feat(security): add Cloudflare integration token management 
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
 2026-08-18 16:15:34 +02:00
Andras BacsaiandGitHub 8aa2cbe462 fix(backups): support long-running volume backups (#11358) 2026-08-18 15:52:52 +02:00
Andras BacsaiandGitHub dd4ec1ab5e fix(auth): preserve OAuth identity across email changes (#11357) 2026-08-18 15:51:00 +02:00
Andras Bacsai 3b08be1429 fix(auth): handle concurrent OAuth identity creation safely 
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
 2026-08-18 15:43:46 +02:00
Andras Bacsai a3e968d03e fix(backups): preserve existing volume backup timeouts 
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
 2026-08-18 15:41:31 +02:00
Andras Bacsai d29139f4a3 fix(auth): reject OAuth logins without valid provider IDs 
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
 2026-08-18 15:34:37 +02:00
Andras Bacsai b075693274 fix(backups): preserve existing volume backup timeouts 
Change only the default timeout for new volume backups without modifying existing schedules.
 2026-08-18 15:30:59 +02:00
Andras Bacsai f9f26c547c fix(auth): preserve OAuth identity across email changes 
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
 2026-08-18 15:27:27 +02:00
Andras Bacsai 050107a41d Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout 2026-08-18 15:11:48 +02:00
Andras Bacsai 1073bbca83 fix(sentinel): clarify restart after settings update 
Add a regression test for the updated success notification.
 2026-08-18 15:06:05 +02:00
Andras Bacsai ee843b7230 fix(ui): show server warnings with alert icons 2026-08-18 14:51:40 +02:00
Andras BacsaiandGitHub 41b06e73a0 feat(auth): add OIDC SSO and registration controls (#10543) 2026-08-18 14:46:25 +02:00
Andras Bacsai ce2ea0544e feat(auth): improve OAuth buttons and OIDC settings layout 
Add provider icons and full-width centered login buttons, organize OIDC fields, and remove hardcoded user IDs from the seeder.
 2026-08-18 14:33:21 +02:00
Andras Bacsai 8400e26a3f feat(auth): consolidate OAuth settings into standard authentication page 
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
 2026-08-18 14:22:49 +02:00
Andras Bacsai dd597d1527 fix(backups): support long-running volume backups 2026-08-18 14:10:23 +02:00
Andras Bacsai ad3e7350c1 Merge remote-tracking branch 'origin/main' 2026-08-18 14:05:22 +02:00
Andras BacsaiandGitHub 00b7861a8f fix(services): avoid loading bind-mount file contents (#10960) 2026-08-18 14:05:15 +02:00
Andras Bacsai 288dc98ca7 fix: enforce remote output size limits 2026-08-18 14:03:33 +02:00
Andras Bacsai 253e59e731 Merge remote-tracking branch 'origin/next' into openid-auth-support 2026-08-18 14:03:09 +02:00
Andras Bacsai b2af1c11a5 fix(logs): clean up deployment log scrolling on teardown 2026-08-18 14:02:48 +02:00
Andras Bacsai ccd7c59abf Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash 2026-08-18 13:58:16 +02:00
Andras Bacsai 861a904992 fix(server): surface pending proxy and outdated Traefik states 2026-08-18 13:53:40 +02:00
Andras Bacsai 3cca2a0bfe fix(ui): add spacing between database backup sections 
Add a flex column gap to the backup edit layout and cover the spacing with a feature test.
 2026-08-18 12:53:41 +02:00
Andras Bacsai d2d6c8ac96 fix(deployments): defer container cleanup and configure dashboard HTTPS 2026-08-18 12:51:54 +02:00
Andras BacsaiandGitHub d360da3270 fix(databases): chown SSL certs before container replacement (#11352) 2026-08-18 11:55:55 +02:00
Andras Bacsai 713ddd84fc Merge remote-tracking branch 'origin/main' 2026-08-18 11:39:10 +02:00
Andras Bacsai 88eccbf78f chore(release): bump Coolify versions to 4.3.9 2026-08-18 11:29:01 +02:00
Andras BacsaiandGitHub 417f996ef5 fix(databases): redirect stdin for the SSL cert chown (#11315) 2026-08-18 10:46:24 +02:00
Andras BacsaiandGitHub c9d5c4c41f fix(upgrade): handle missing status after restart (#11350) 2026-08-18 10:41:45 +02:00
Andras Bacsai a3e78a3677 fix(authorization): gate mutable Livewire controls by policy 
Disable unauthorized listbox inputs and hide application deploy actions, with updated disabled styling and coverage.
 2026-08-18 10:18:52 +02:00
Andras BacsaiandGitHub f588913435 fix(table): keep page-size dropdown within viewport (#11349) 2026-08-18 10:03:07 +02:00