peaklabs-dev
48573fc865
ci: add temporary hotfix release workflow
2026-10-21 14:20:51 +02:00
peaklabs-dev
435b2bcf54
ci: add temporary patched PHP base image build
2026-10-21 14:20:51 +02:00
peaklabs-dev
dfcf4245b8
feat(scripts): add patch script for security fix releases
2026-10-21 14:20:50 +02:00
Andras Bacsai
2ade696375
fix(storage): resolve ${VAR:-default} bind sources and safe conversion ( #12227 )
2026-10-20 11:41:54 +02:00
Andras Bacsai
5925c8403a
fix(log-drain): replace server name whitespace with hyphens ( #12239 )
2026-10-20 11:29:11 +02:00
Andras Bacsai
57faba1b96
fix(logs): prevent URL redaction from spanning log lines ( #12238 )
2026-10-20 10:49:29 +02:00
Andras Bacsai
d55852ee94
fix(proxy): persist running status from Sentinel push updates ( #12237 )
2026-10-20 10:49:26 +02:00
Andras Bacsai
bf957e425f
fix(docker): parse quoted and hyphenated custom docker option values ( #12208 )
2026-10-19 23:12:16 +02:00
Andras Bacsai
71131804f6
fix: require notification and log drain fields only when enabled ( #12232 )
2026-10-19 21:47:33 +02:00
Andras Bacsai
e61c0edd1a
fix(odoo): enable proxy mode in service template ( #12231 )
2026-10-19 21:46:16 +02:00
Andras Bacsai
62be8674bc
feat(proxy): add optional permanent redirects for apps and services ( #12233 )
2026-10-19 21:46:12 +02:00
Andras Bacsai
fb6d3e7c9b
fix(proxy): exclude SSE streams from Traefik compression ( #12229 )
2026-10-19 21:43:51 +02:00
Andras Bacsai
10e93c3751
fix(terminal): stop interactive programs from leaking CPU after close ( #12230 )
2026-10-19 21:31:26 +02:00
Andras Bacsai
33b16ac345
fix(sure): check Sidekiq process for worker healthcheck ( #12228 )
2026-10-19 21:30:29 +02:00
Andras Bacsai
5ae125ad39
fix(tasks): run scheduled tasks only in running app containers ( #12226 )
2026-10-19 21:28:54 +02:00
Andras Bacsai
6d36605176
fix(proxy): require coolify-proxy container name outside Swarm ( #12225 )
2026-10-19 21:23:12 +02:00
Andras Bacsai
c089f8a328
fix(backups): use configured databases when container env is missing ( #12212 )
2026-10-19 21:21:53 +02:00
Andras Bacsai
54315b10e5
fix(compose): strip UTF-8 BOM before parsing Docker Compose YAML ( #12223 )
2026-10-19 21:21:15 +02:00
Andras Bacsai
d043c10c11
fix(postgresql): set PGPASSWORD for healthchecks and backups ( #12224 )
2026-10-19 21:20:17 +02:00
Andras Bacsai
1fff44cdb4
fix(twenty): allow more time for startup health checks ( #12222 )
2026-10-19 21:18:52 +02:00
Andras Bacsai
bfc39678a4
fix(homepage): make Docker socket opt-in and set allowed hosts ( #12221 )
2026-10-19 21:18:41 +02:00
Andras Bacsai
b73f15c736
fix(weblate): configure SMTP and correct sender email variables ( #12220 )
2026-10-19 21:18:38 +02:00
Andras Bacsai
3acfa6b9a6
fix(telegram): show API errors when sending test notifications ( #12219 )
2026-10-19 21:17:35 +02:00
Andras Bacsai
36f36daec9
fix(webhooks): hide manual Git webhook form for non-Git resources ( #12218 )
2026-10-19 21:12:45 +02:00
Andras Bacsai
b4c3101b29
fix(compose): reject scale and replicas greater than one ( #12213 )
2026-10-19 21:08:06 +02:00
Andras Bacsai
59793b060c
fix(api): point rejected fqdn field to domains on application writes ( #12217 )
2026-10-19 21:07:51 +02:00
Andras Bacsai
91bd773ef2
fix(trigger): use public service URL for app, login, and API origins ( #12214 )
2026-10-19 21:05:49 +02:00
Andras Bacsai
3b407c8413
fix(backups): send Content-MD5 for S3-only volume backups on Object Lock ( #12215 )
2026-10-19 21:05:38 +02:00
Andras Bacsai
536db50e58
fix(huly): replace default MinIO credentials with generated secrets ( #12209 )
2026-10-19 17:32:52 +02:00
Andras Bacsai and Claude Opus 5.5
63153aa8b4
fix(cloud): rework unsubscribed team cleanup and account deletion ( #12210 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-19 17:32:16 +02:00
Andras Bacsai
2d2bf48003
fix(langfuse): generate a 64-character hex encryption key ( #12207 )
2026-10-19 17:18:16 +02:00
Andras Bacsai
975048bad8
fix(security): encrypt plaintext secrets at rest
2026-10-19 12:28:23 +02:00
Andras Bacsai
5611521055
Merge remote-tracking branch 'origin/main'
2026-10-19 11:17:13 +02:00
Andras Bacsai and Claude Opus 5.5
fb317d7129
chore: remove Sentry integration
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-19 11:14:35 +02:00
7d86405706
docs(readme): update one-click service count ( #12204 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: Andras Bacsai <andrasbacsai@users.noreply.github.com >
2026-10-19 10:39:20 +02:00
Andras Bacsai
7fe40f4cf6
fix(api): require deploy ability for server side effects
...
Require deploy permission for API changes that trigger server side effects, including resource deletion, storage access, provider operations, and database imports. Also escape Docker cleanup filters and sanitize log drain server names.
2026-10-19 09:07:42 +02:00
Andras Bacsai and Claude Opus 5.5
0eeb630ccd
fix(compose): use explicit compose file paths and remove volumes by name ( #12199 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-19 00:00:48 +02:00
Andras Bacsai
9355728d03
fix(log-drains): validate custom log drain configuration ( #12197 )
2026-10-18 23:40:54 +02:00
Andras Bacsai
a16994a88f
fix(api): require deploy permission for proxy and custom log drain changes ( #12198 )
2026-10-18 23:35:25 +02:00
Andras Bacsai
5227693885
fix(deployments): scope deployment queries to team applications ( #12195 )
2026-10-18 23:32:14 +02:00
Andras Bacsai
8ab10c66de
fix(api): require deploy ability to run scheduled tasks ( #12194 )
2026-10-18 23:27:05 +02:00
Andras Bacsai
aae27629d4
Merge remote-tracking branch 'origin/main'
2026-10-18 23:24:00 +02:00
Andras Bacsai
c781cddbab
fix(server-transfer): require update access to export bundles
2026-10-18 23:21:16 +02:00
Andras Bacsai
ecce3cb9b4
refactor(api): check token abilities through the token in ApiAbility ( #12193 )
2026-10-18 23:16:38 +02:00
09cfe2d211
fix(api): honour force_domain_override for docker_compose_domains on create ( #12032 )
...
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-18 23:07:46 +02:00
Andras Bacsai
6d2ad920d4
chore(deps): override postcss selector parser to 7.1.6
2026-10-18 23:01:56 +02:00
dependabot[bot]
abd19a2692
chore(deps): bump source-map-js from 1.2.1 to 1.2.2 ( #12114 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-18 22:06:23 +02:00
Andras Bacsai and Claude Opus 5.5
8ed31bb96e
feat(env): restore Coolify default variables with a per-resource option
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-18 12:55:53 +02:00
Andras Bacsai
6099c0b4a3
fix(service): repair forgejo templates and enable forgejo with runner
...
- Database variants: use the same database name in Forgejo and the database
container (`forgejo` by default); Postgres stayed unhealthy and MySQL/MariaDB
installs failed with access denied.
- SSH: publish ${FORGEJO_SSH_PORT:-22222} and set SSH_PORT, DOMAIN and
SSH_DOMAIN, so clone URLs are correct and several instances fit on a server.
- Runner variants: start Forgejo from /usr/bin/s6-svscan, lock the install
with a generated admin, register runner 13.2.0 with a generated shared
secret, and enable the templates.
Closes #11924
2026-10-18 12:45:49 +02:00
Andras Bacsai
34b3a18307
fix(compose): resolve ../ bind sources in raw compose mode
...
oldRawParser made the bind directory of a long-syntax source like
../data at {workdir}./data, next to the path that Docker Compose uses.
Resolve the source with replaceLocalSource(), as the compose parsers do,
so Coolify makes the directory that the container mounts. A source that
resolves above / now stops the deployment before remote work.
Closes #4055
2026-10-18 12:09:42 +02:00