Commit Graph
6125 Commits
Author SHA1 Message Date
github-actions[bot] 5b749850a3 Merge remote-tracking branch 'origin/main' into next 2026-08-20 07:39:12 +00:00
Andras Bacsai 8f90882875 fix(teams): make membership and source deletions atomic
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
github-actions[bot] cd1e595492 Merge remote-tracking branch 'origin/main' into next 2026-08-20 07:35:24 +00:00
github-actions[bot] 7759c9b910 Merge remote-tracking branch 'origin/main' into next 2026-08-20 07:34:23 +00:00
Andras Bacsai 1eea1a1412 Merge remote-tracking branch 'origin/main' 2026-08-20 09:34:13 +02:00
Andras BacsaiandGitHub de1d234ea5 fix(auth): require confirmation before accepting magic links (#11413) 2026-08-20 09:34:05 +02:00
Andras Bacsai 680071dca8 fix(teams): restrict deletion to owners and backfill team ownership 2026-08-20 09:32:32 +02:00
github-actions[bot] e8b0840c09 Merge remote-tracking branch 'origin/main' into next 2026-08-19 14:47:36 +00:00
Andras BacsaiandGitHub 14d40c73a2 fix(docker-cleanup): finalize executions after job failure (#11408) 2026-08-19 16:47:19 +02:00
peaklabs-dev 88ec944be7 fix(var): fail on missing user when hiding env values 2026-08-19 15:22:25 +02:00
peaklabs-dev afbe4d6fd7 feat(var): add environment variable copy functionality 2026-08-19 15:11:49 +02:00
Andras Bacsai 63d22f1331 chore: remove legacy Dusk tests and configure maintenance driver 2026-08-19 13:49:14 +02:00
Andras Bacsai 937892b3ea fix(storage): guard volume names and authorize source removal 2026-08-19 13:15:15 +02:00
Andras Bacsai 1d37968f5d Merge remote-tracking branch 'origin/next' into remove-local-volume-source 2026-08-19 13:13:09 +02:00
Andras Bacsai 81227670e6 Reapply "Merge origin/next into main"
This reverts commit 15359833d3.
2026-08-19 12:39:55 +02:00
Andras Bacsai 15359833d3 Revert "Merge origin/next into main"
This reverts commit 541d743907, reversing
changes made to bb1d3f13f2.
2026-08-19 12:33:16 +02:00
Andras BacsaiandGitHub 38aaf8cb2a fix(caddy): prevent exact label generation argument error (#11397) 2026-08-19 12:31:36 +02:00
Andras Bacsai 541d743907 Merge origin/next into main 2026-08-19 12:30:09 +02:00
Andras Bacsai 534f22a0df Merge remote-tracking branch 'origin/main' 2026-08-19 12:06:35 +02:00
Andras Bacsai 89480bcc61 feat(api): add instance email settings endpoints
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras BacsaiandGitHub 59be75bdac fix(email): prevent Proton SMTP From header folding (#11400) 2026-08-19 11:52:59 +02:00
Andras Bacsai 2b8e684f68 Merge remote-tracking branch 'origin/main' 2026-08-19 11:41:45 +02:00
Andras Bacsai 22f0af8d0e feat(platform): support SMTP EHLO, page-preserving teams, and upgrades 2026-08-19 11:41:41 +02:00
Andras BacsaiandGitHub 34da7232aa fix(api-tokens): scope token access to current team (#11396) 2026-08-19 11:27:23 +02:00
Andras BacsaiandGitHub 849ba8f34c fix(email): support custom SMTP EHLO domains (#11398) 2026-08-19 11:25:46 +02:00
github-actions[bot] 4d4bd098b7 Merge remote-tracking branch 'origin/main' into next 2026-08-19 08:55:26 +00:00
Andras BacsaiandGitHub ae85688651 fix(email): respect disabled SMTP encryption in test emails (#11384) 2026-08-19 10:55:10 +02:00
github-actions[bot] ce1d621dda Merge remote-tracking branch 'origin/main' into next 2026-08-19 08:43:43 +00:00
Andras BacsaiandGitHub 41f7152441 fix(email): apply configured sender identity (#11393) 2026-08-19 10:43:25 +02:00
github-actions[bot] 0bc826bf45 Merge remote-tracking branch 'origin/main' into next 2026-08-18 21:38:56 +00:00
Andras BacsaiandGitHub 1cb9f001f8 fix(ssh): preserve sessions when recycling mux connections (#11377) 2026-08-18 23:38:38 +02:00
github-actions[bot] 1dc7baf7b5 Merge remote-tracking branch 'origin/main' into next 2026-08-18 20:42:25 +00:00
Andras Bacsai b4f9c9b51d feat(development): add QEMU VM provisioning and server seeding
Add configurable development QEMU profiles, host setup, VM lifecycle management,
and commands to seed managed VMs as Coolify servers. Improve installation dialog
logs with responsive mobile presentation.
2026-08-18 21:14:29 +02:00
Andras Bacsai f5f904a403 refactor(storage): separate volumes from directory mounts 2026-08-18 20:01:36 +02:00
Andras Bacsai e62a2d45a0 Merge branch 'next' into remove-local-volume-source 2026-08-18 19:59:23 +02:00
Andras BacsaiandGitHub f6467feeb3 Add support for apk package manager (on Alpine Linux) (#6189) 2026-08-18 16:46:02 +02:00
Andras Bacsai 96790e6531 feat(server): support Alpine package management and Docker setup
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
2026-08-18 16:45:02 +02:00
Andras Bacsai da8665330b feat(security): add integration token editing and rotation 2026-08-18 16:24:53 +02:00
Andras Bacsai 85e0821dd4 Merge branch 'main' into third-party-integration-tokens 2026-08-18 16:15:53 +02:00
Andras Bacsai 743f54b317 feat(security): add Cloudflare integration token management
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
8170798115 fix(security): enforce team-scoped authorization for scheduled tasks (#11239)
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
2026-08-18 16:01:17 +02:00
Andras Bacsai 3b08be1429 fix(auth): handle concurrent OAuth identity creation safely
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai a3e968d03e fix(backups): preserve existing volume backup timeouts
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
2026-08-18 15:41:31 +02:00
Andras Bacsai d29139f4a3 fix(auth): reject OAuth logins without valid provider IDs
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
2026-08-18 15:34:37 +02:00
Andras Bacsai f9f26c547c fix(auth): preserve OAuth identity across email changes
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai 050107a41d Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout 2026-08-18 15:11:48 +02:00
Andras Bacsai 1073bbca83 fix(sentinel): clarify restart after settings update
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai 8400e26a3f feat(auth): consolidate OAuth settings into standard authentication page
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai dd597d1527 fix(backups): support long-running volume backups 2026-08-18 14:10:23 +02:00
Andras BacsaiandGitHub 00b7861a8f fix(services): avoid loading bind-mount file contents (#10960) 2026-08-18 14:05:15 +02:00