Commit Graph
18149 Commits
Author SHA1 Message Date
Andras Bacsai 45a24f7fa2 chore(templates): regenerate service templates
Add the 9 PHP-based services that were re-enabled with patched image
versions.
2026-10-22 20:39:23 +02:00
Andras Bacsai 624bc098c6 fix(service): bump PHP templates to patched images and re-enable them
Update the templates that pinned images with a PHP release vulnerable
to CVE-2026-109618 and CVE-2026-109619, and remove their ignore flag:

- appwrite 2.6.1 (console 1.2.97, orchestrator 2.2.4, exiftool service)
- castopod 1.15.6
- freescout: move to nfrastack/freescout:2.2.21 (tiredofit image removed)
- grocy 4.7.1
- opnform 2.6.1 (nginx route for Nuxt icons)
- paymenter v1.5.9
- pterodactyl panel v1.15.2, wings v1.13.4
- snipe-it v8.8.3
2026-10-22 20:39:08 +02:00
Andras Bacsai 7acfcdff24 feat(ui): reorganize resource settings and domain port editing 2026-10-22 20:26:41 +02:00
Andras Bacsai e89fd7e9df chore(templates): regenerate service templates
Add the 38 PHP-based services that were re-enabled after their images
received the patched PHP release.
2026-10-22 20:26:17 +02:00
Andras Bacsai 0ebb1a1da8 fix(service): re-enable PHP templates with patched images
Remove the ignore flag from 38 PHP-based service templates whose
current images ship a PHP release fixed for CVE-2026-109618 and
CVE-2026-109619 (8.5.12, 8.4.27, 8.3.36, 8.2.35, or the patched
Debian and Ubuntu packages).
2026-10-22 20:26:09 +02:00
Andras Bacsai 6c6fff5d26 style(ui): use brand accents for dark-mode controls and feedback 2026-10-22 16:34:40 +02:00
Andras Bacsai 61e46da88d style(source): align dark source selection with brand colors 2026-10-22 16:04:30 +02:00
Andras Bacsai eeaeacbe3f style(ui): refine canvas layouts and rollback settings 2026-10-22 15:54:02 +02:00
Andras Bacsai c454f84545 fix(server-transfer): keep imported data exact and guard archived servers
- Skip TrimStrings and ConvertEmptyStringsToNull on the import route; an empty shared variable failed the whole import
- Keep compose parser versions, static ports, legacy variable keys, and only the bundle's variables and destinations
- Give the transfer back token the deploy permission that the import needs
- Move the Cloudflare tunnel DNS record with the server and park it on the source
- Refuse cloud server deletes, power on, tunnel and DNS changes, and scp for archives; skip their backup alerts and provider polling
- Add a column-level round-trip test, archive guard tests, and a live full-coverage transfer test
- Advance the GitLab App sequence in the dev seeder
2026-10-22 15:52:20 +02:00
Andras BacsaiandClaude Opus 5.5 dff2674466 style(sidebar): add resource menu return row and refine dark UI details
- Add a main-menu row that reopens the resource menu, with a placeholder row
- Show only the other view as an icon in the view switcher
- Remove the active tile glow and the collapsed Search frame
- Tint the dark command palette purple and whiten focused-row details
- Soften the toast edge and give the toast icon tile 3D depth
- Document the decisions in DESIGN.md

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 14:02:18 +02:00
Andras Bacsai 59928035b7 feat(forms): add copy button to password inputs by default 2026-10-22 13:43:44 +02:00
Andras Bacsai ab531972d2 style(sidebar): apply dark theme styles to mobile sidebar 2026-10-22 10:08:50 +02:00
Andras Bacsai d88b58ccc1 fix(breadcrumb): sync title after Livewire navigation 2026-10-22 10:04:21 +02:00
Andras Bacsai 7510d4ef77 Merge remote-tracking branch 'origin/main' 2026-10-22 09:59:26 +02:00
Andras Bacsai a9fdf07a72 Refresh the dark dashboard with the approved purple brand shell (#12277) 2026-10-22 09:58:55 +02:00
Andras Bacsai 17f13b6a2c fix(service): hide canvas toggle when compose resources are empty 2026-10-22 09:58:12 +02:00
Cursor AgentandAndras Bacsai 8df39bc637 Refresh the dark dashboard around the coolLabs purple brand.
Dark mode keeps a black canvas, paints cards at #121212, and tints the sidebar purple-black. Active navigation, secondary buttons, and the view switcher use brand purple; warning yellow stays for real warnings.

Co-authored-by: Andras Bacsai <andrasbacsai@users.noreply.github.com>
2026-10-22 07:13:38 +00:00
Andras Bacsai 91ea7d851e Fix/secret manager request timeout (#12270) 2026-10-21 22:58:00 +02:00
Andras Bacsai 5a92340ae3 Merge remote-tracking branch 'origin/main' 2026-10-21 22:56:42 +02:00
Andras Bacsai c465371356 Merge remote-tracking branch 'origin/main' into fix/secret-manager-request-timeout
# Conflicts:
#	other/nightly/versions.json
#	tests/Feature/Security/IntegrationTokenFormTest.php
#	versions.json
2026-10-21 22:44:50 +02:00
Andras Bacsai 970850a7a3 v4.5 (#12246) 2026-10-21 22:43:55 +02:00
Andras BacsaiandClaude Opus 5.5 d382ce6bf4 chore(templates): regenerate service templates
Remove the 58 PHP-based services that #12268 marked as ignored, and
include template changes merged from main in #12192.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 22:35:13 +02:00
Andras Bacsai 0db3244dad Merge remote-tracking branch 'origin/main' into fix/secret-manager-request-timeout 2026-10-21 22:31:35 +02:00
ShadowArcanist 784c8deec3 Disable PHP-based service templates (CVE-2026-109618, CVE-2026-109619) (#12268) 2026-10-21 22:17:37 +02:00
Andras Bacsai bbbaa776ad Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-21 22:14:47 +02:00
peaklabs-dev 681a0e2aee fix(scripts): read the Coolify version from the containers files 2026-10-21 21:55:52 +02:00
Andras Bacsai f61c74f7b7 Merge remote-tracking branch 'origin/main' into fix/secret-manager-request-timeout 2026-10-21 21:48:04 +02:00
Andras Bacsai bcdbbfa0b6 fix(navbar): hide title for the first navigation section 2026-10-21 21:45:38 +02:00
Andras Bacsai c9c2a8876b Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-21 21:41:43 +02:00
Andras Bacsai 5fd97af0e4 style(ui): use neutral near-black dark theme surfaces 2026-10-21 21:41:22 +02:00
peaklabs-dev 82b40eb852 fix(scripts): improve patch.sh
- let patch.sh run while the coolify container is stopped
- If the compose files are from 4.4 but an older Coolify is installed the error now prints the command to update to 4.4.7
2026-10-21 21:35:08 +02:00
Andras Bacsai b8b82d545f chore(docker): bump cloudflared to 2026.10.3 2026-10-21 21:32:42 +02:00
Andras Bacsai c232e8f68f chore(docker): bump Serversideup PHP image to v5.0.2 2026-10-21 21:29:15 +02:00
Andras Bacsai 326ad020ec Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-21 21:26:16 +02:00
Andras Bacsai 4c57600b52 Merge remote-tracking branch 'origin/main' into fix/secret-manager-request-timeout 2026-10-21 21:25:13 +02:00
dependabot[bot] 5d21b048a8 chore(deps-dev): bump vite from 8.2.1 to 8.3.4 (#12251)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-21 21:23:48 +02:00
Andras BacsaiandClaude Opus 5.5 212ee153e6 fix(ui): move fetch server details button to overview header and hide empty GPU list
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 21:14:14 +02:00
Andras Bacsai 8d400e3d6b fix(ui): refine service resources and settings section styling 2026-10-21 21:01:24 +02:00
Andras BacsaiandClaude Opus 5.5 8255f85a50 fix(ui): lighten dark mode and match card, table, and tile headers to the topbar
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 18:46:52 +02:00
Andras BacsaiandClaude Opus 5.5 ab71f1af61 fix(ui): align dashboard deployments heading and unify muted table headers
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 18:45:49 +02:00
Andras BacsaiandClaude Opus 5.5 f227bbcb5d fix(ui): keep cards opaque over the floating dotted backdrop
- Top-level cards, empty states, and standalone wells paint their translucent tint over the page color
- Boxes inside a standalone well keep their tint in floating dark mode

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 18:23:07 +02:00
Andras Bacsai b017bd1cd3 fix(settings): merge update settings into one section 2026-10-21 18:22:57 +02:00
Andras BacsaiandClaude Opus 5.5 dbc3fb91bf fix(cdn): fetch versions.json once per hour, spread evenly across instances
- Retry CDN requests only for transient errors and honor Retry-After
  (Cloudflare error 1200 sends 60 s), with jitter.
- Read helper and Sentinel versions from the local versions.json, which
  the hourly update check refreshes, instead of fetching per job/server.
- Replace the random 0-600 s delay with a stable per-instance offset
  inside the cron interval (max 1 h).
- Manual update checks and upgrades make one CDN attempt only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 18:10:48 +02:00
Andras BacsaiandClaude Opus 5.5 44c6322259 fix(canvas): fit the server header and skip placeholder cards in the status summary
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 18:10:47 +02:00
Andras BacsaiandClaude Opus 5.5 c4bc9ae8bf fix(canvas): show servers without resources on the servers canvas
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 18:02:02 +02:00
Andras BacsaiandClaude Opus 5.5 b1f2abf868 fix(cloud): refresh local versions.json hourly on every node
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-21 17:18:56 +02:00
Andras Bacsai 666ae60c2c Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-21 16:49:31 +02:00
Andras Bacsai d404da904f feat(app-key): re-encrypt stored secrets after key rotation 2026-10-21 16:47:51 +02:00
Andras Bacsai d730ab48fd feat(security): add command to re-encrypt secrets after key rotation 2026-10-21 16:47:40 +02:00
Andras Bacsai e9f69ce95b Merge remote-tracking branch 'origin/main' into fix/secret-manager-request-timeout 2026-10-21 16:23:00 +02:00