Commit Graph
17924 Commits
Author SHA1 Message Date
Andras Bacsai 87dade4517 fix(secret-manager): add configurable request timeout for Infisical and Vault 2026-10-20 13:00:38 +02:00
Andras Bacsai 2ade696375 fix(storage): resolve ${VAR:-default} bind sources and safe conversion (#12227) 2026-10-20 11:41:54 +02:00
Andras Bacsai 5925c8403a fix(log-drain): replace server name whitespace with hyphens (#12239) 2026-10-20 11:29:11 +02:00
Andras Bacsai 57faba1b96 fix(logs): prevent URL redaction from spanning log lines (#12238) 2026-10-20 10:49:29 +02:00
Andras Bacsai d55852ee94 fix(proxy): persist running status from Sentinel push updates (#12237) 2026-10-20 10:49:26 +02:00
Andras Bacsai bf957e425f fix(docker): parse quoted and hyphenated custom docker option values (#12208) 2026-10-19 23:12:16 +02:00
Andras Bacsai 71131804f6 fix: require notification and log drain fields only when enabled (#12232) 2026-10-19 21:47:33 +02:00
Andras Bacsai e61c0edd1a fix(odoo): enable proxy mode in service template (#12231) 2026-10-19 21:46:16 +02:00
Andras Bacsai 62be8674bc feat(proxy): add optional permanent redirects for apps and services (#12233) 2026-10-19 21:46:12 +02:00
Andras Bacsai fb6d3e7c9b fix(proxy): exclude SSE streams from Traefik compression (#12229) 2026-10-19 21:43:51 +02:00
Andras Bacsai 10e93c3751 fix(terminal): stop interactive programs from leaking CPU after close (#12230) 2026-10-19 21:31:26 +02:00
Andras Bacsai 33b16ac345 fix(sure): check Sidekiq process for worker healthcheck (#12228) 2026-10-19 21:30:29 +02:00
Andras Bacsai 5ae125ad39 fix(tasks): run scheduled tasks only in running app containers (#12226) 2026-10-19 21:28:54 +02:00
Andras Bacsai 6d36605176 fix(proxy): require coolify-proxy container name outside Swarm (#12225) 2026-10-19 21:23:12 +02:00
Andras Bacsai c089f8a328 fix(backups): use configured databases when container env is missing (#12212) 2026-10-19 21:21:53 +02:00
Andras Bacsai 54315b10e5 fix(compose): strip UTF-8 BOM before parsing Docker Compose YAML (#12223) 2026-10-19 21:21:15 +02:00
Andras Bacsai d043c10c11 fix(postgresql): set PGPASSWORD for healthchecks and backups (#12224) 2026-10-19 21:20:17 +02:00
Andras Bacsai 1fff44cdb4 fix(twenty): allow more time for startup health checks (#12222) 2026-10-19 21:18:52 +02:00
Andras Bacsai bfc39678a4 fix(homepage): make Docker socket opt-in and set allowed hosts (#12221) 2026-10-19 21:18:41 +02:00
Andras Bacsai b73f15c736 fix(weblate): configure SMTP and correct sender email variables (#12220) 2026-10-19 21:18:38 +02:00
Andras Bacsai 3acfa6b9a6 fix(telegram): show API errors when sending test notifications (#12219) 2026-10-19 21:17:35 +02:00
Andras Bacsai 36f36daec9 fix(webhooks): hide manual Git webhook form for non-Git resources (#12218) 2026-10-19 21:12:45 +02:00
Andras Bacsai b4c3101b29 fix(compose): reject scale and replicas greater than one (#12213) 2026-10-19 21:08:06 +02:00
Andras Bacsai 59793b060c fix(api): point rejected fqdn field to domains on application writes (#12217) 2026-10-19 21:07:51 +02:00
Andras Bacsai 91bd773ef2 fix(trigger): use public service URL for app, login, and API origins (#12214) 2026-10-19 21:05:49 +02:00
Andras Bacsai 3b407c8413 fix(backups): send Content-MD5 for S3-only volume backups on Object Lock (#12215) 2026-10-19 21:05:38 +02:00
Andras Bacsai 536db50e58 fix(huly): replace default MinIO credentials with generated secrets (#12209) 2026-10-19 17:32:52 +02:00
Andras BacsaiandClaude Opus 5.5 63153aa8b4 fix(cloud): rework unsubscribed team cleanup and account deletion (#12210)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 17:32:16 +02:00
Andras Bacsai 2d2bf48003 fix(langfuse): generate a 64-character hex encryption key (#12207) 2026-10-19 17:18:16 +02:00
Andras Bacsai 975048bad8 fix(security): encrypt plaintext secrets at rest 2026-10-19 12:28:23 +02:00
Andras Bacsai 5611521055 Merge remote-tracking branch 'origin/main' 2026-10-19 11:17:13 +02:00
Andras BacsaiandClaude Opus 5.5 fb317d7129 chore: remove Sentry integration
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 11:14:35 +02:00
7d86405706 docs(readme): update one-click service count (#12204)
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Andras Bacsai <andrasbacsai@users.noreply.github.com>
2026-10-19 10:39:20 +02:00
Andras Bacsai 7fe40f4cf6 fix(api): require deploy ability for server side effects
Require deploy permission for API changes that trigger server side effects, including resource deletion, storage access, provider operations, and database imports. Also escape Docker cleanup filters and sanitize log drain server names.
2026-10-19 09:07:42 +02:00
Andras BacsaiandClaude Opus 5.5 0eeb630ccd fix(compose): use explicit compose file paths and remove volumes by name (#12199)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 00:00:48 +02:00
Andras Bacsai 9355728d03 fix(log-drains): validate custom log drain configuration (#12197) 2026-10-18 23:40:54 +02:00
Andras Bacsai a16994a88f fix(api): require deploy permission for proxy and custom log drain changes (#12198) 2026-10-18 23:35:25 +02:00
Andras Bacsai 5227693885 fix(deployments): scope deployment queries to team applications (#12195) 2026-10-18 23:32:14 +02:00
Andras Bacsai 8ab10c66de fix(api): require deploy ability to run scheduled tasks (#12194) 2026-10-18 23:27:05 +02:00
Andras Bacsai aae27629d4 Merge remote-tracking branch 'origin/main' 2026-10-18 23:24:00 +02:00
Andras Bacsai c781cddbab fix(server-transfer): require update access to export bundles 2026-10-18 23:21:16 +02:00
Andras Bacsai ecce3cb9b4 refactor(api): check token abilities through the token in ApiAbility (#12193) 2026-10-18 23:16:38 +02:00
09cfe2d211 fix(api): honour force_domain_override for docker_compose_domains on create (#12032)
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-18 23:07:46 +02:00
Andras Bacsai 6d2ad920d4 chore(deps): override postcss selector parser to 7.1.6 2026-10-18 23:01:56 +02:00
dependabot[bot] abd19a2692 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#12114)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-18 22:06:23 +02:00
Andras BacsaiandClaude Opus 5.5 8ed31bb96e feat(env): restore Coolify default variables with a per-resource option
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-18 12:55:53 +02:00
Andras Bacsai 6099c0b4a3 fix(service): repair forgejo templates and enable forgejo with runner
- Database variants: use the same database name in Forgejo and the database
  container (`forgejo` by default); Postgres stayed unhealthy and MySQL/MariaDB
  installs failed with access denied.
- SSH: publish ${FORGEJO_SSH_PORT:-22222} and set SSH_PORT, DOMAIN and
  SSH_DOMAIN, so clone URLs are correct and several instances fit on a server.
- Runner variants: start Forgejo from /usr/bin/s6-svscan, lock the install
  with a generated admin, register runner 13.2.0 with a generated shared
  secret, and enable the templates.

Closes #11924
2026-10-18 12:45:49 +02:00
Andras Bacsai 34b3a18307 fix(compose): resolve ../ bind sources in raw compose mode
oldRawParser made the bind directory of a long-syntax source like
../data at {workdir}./data, next to the path that Docker Compose uses.
Resolve the source with replaceLocalSource(), as the compose parsers do,
so Coolify makes the directory that the container mounts. A source that
resolves above / now stops the deployment before remote work.

Closes #4055
2026-10-18 12:09:42 +02:00
Andras Bacsai 6d4551faec test(parsers): add golden tests for the compose parsers
ServiceParserReferenceTest parses reference fixtures for serviceParser and
applicationParser (one service per feature, with setting variations and error
cases) and every template, and compares the output with expected files.
scripts/parser-snapshot-diff shows how a code change alters the output of all
cases (save / baseline). Template expected files are gitignored.
2026-10-18 11:29:39 +02:00
Andras Bacsai fc4562ede7 fix(services): treat SERVICE_FQDN_ twin as a copy of SERVICE_URL_ declaration
A service that declares SERVICE_FQDN_X_PORT while the named service declares
SERVICE_URL_X_PORT (same value) now counts as a copy, like an exact copy, so it
does not take the named service's domain. Also replace the Postgres-only
regex in the magic variable loop with the same check in PHP.
2026-10-18 11:29:39 +02:00