Commit Graph
17896 Commits
Author SHA1 Message Date
github-actions[bot] cc6378177c Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-14 08:27:56 +00:00
Andras Bacsai d080bf35e6 refactor(policies): remove unused authorization methods (#12165) 2026-10-14 10:18:05 +02:00
github-actions[bot] 599eecca69 Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-14 07:45:50 +00:00
Andras Bacsai d196dd322f fix(deploy): keep start-time buildpack vars in runtime env (#12025) 2026-10-14 09:43:55 +02:00
Andras Bacsai 33ee09fa87 feat(canvas): add interactive resource views and team avatars (#12160) 2026-10-14 09:28:10 +02:00
Andras Bacsai 448dc8ea0a feat(logging): strengthen secret redaction and add admin controls (#12151) 2026-10-13 20:43:19 +02:00
Andras Bacsai 9302395063 feat(metrics): fleet-wide Metrics page + per-server disk/network/load charts (#11867) 2026-10-13 11:58:34 +02:00
Andras Bacsai f63726279c Merge remote-tracking branch 'origin/release/v4.5' into sentinel-metrics-sidebar-page 2026-10-13 11:57:47 +02:00
Andras Bacsai d77580cb35 fix(metrics): fetch fleet data concurrently and refresh server access
Run metric requests in batches of eight workers, isolate endpoint failures,
and preserve CPU and memory history when Sentinel lacks a summary endpoint.
Repair Sentinel tokens before creating workers and bound SSH fetch timeouts.

Reauthorize team servers on refresh and hydration, clear stale metrics after
transfers or deletions, and resolve container metadata for team ID zero.

Use only root filesystem samples when mount fields are present, while
supporting legacy disk data. Add regression coverage for concurrent workers,
access changes, endpoint failures, and disk mapping.
2026-10-13 11:56:39 +02:00
Andras Bacsai f37761253d feat(server): set up Cloudflare tunnels with API tokens (#12157) 2026-10-13 11:32:26 +02:00
Andras Bacsai c35d3d5c8c fix(hostinger): use a searchable listbox for extra SSH keys 2026-10-13 11:25:33 +02:00
Andras Bacsai 8dfad2c16c fix(dev): define the s6 user bundle in user-bundles.d (#12155) 2026-10-13 11:19:26 +02:00
Aditya Tripathi 5e39010543 fix(dev): define the s6 user bundle in user-bundles.d
The serversideup/php base image now defines its user bundle (nginx,
php-fpm) in /etc/s6-overlay/user-bundles.d. A bundle in s6-rc.d/user
has priority over it, so the dev container started without nginx and
php-fpm and did not become healthy.
2026-10-13 08:27:33 +00:00
Andras Bacsai 4f92d3c094 feat(auth): add passkey sign-in (#12154) 2026-10-13 10:10:03 +02:00
Andras Bacsai 2fa4d06ed6 fix(auth): allow restricted accounts to confirm passwords for passkeys 2026-10-13 10:09:48 +02:00
github-actions[bot] 8f5bb11bee Merge remote-tracking branch 'origin/main' into release/v4.5 2026-10-13 08:04:48 +00:00
Andras Bacsai dc6777a71d feat(server): paginate Docker images with adjustable page size
Reset pagination when search or page size changes and clamp page bounds.
Move disk usage badges beside the Images heading.
2026-10-13 10:02:19 +02:00
Aditya Tripathi 12ffea0ab2 refactor(auth): merge the passkey migrations into one 2026-10-13 06:54:26 +00:00
Aditya Tripathi 7bed78c81e feat(auth): add passkey sign-in
Enable Fortify passkeys (laravel/passkeys) with the @laravel/passkeys
client. Users can sign in with a passkey, confirm sensitive actions with
one, and add, rename, and delete passkeys on the Profile page.

- Resolve the relying party for each request from the instance URL, then
  APP_URL, then localhost. Passkey routes return 404 on other hosts.
- Add the is_passkey_enabled instance setting (Settings > Advanced).
- Use a hex user handle (laravel/passkeys-server#41).
- Rate limit the passkey routes by client IP.
- Record audit events for registered, verified, and deleted passkeys.
2026-10-13 04:01:40 +00:00
Andras Bacsai a81eb2d4d2 chore: merge main into release/v4.5 (#12153) 2026-10-12 22:40:54 +02:00
Andras Bacsai 83384a7b95 Merge remote-tracking branch 'origin/release/v4.5' into automation/sync-main-to-release-v4.5 2026-10-12 22:30:41 +02:00
Andras Bacsai 11ece25149 chore: merge main into release/v4.5 (#12140) 2026-10-12 21:40:08 +02:00
Andras Bacsai 200af07225 Merge remote-tracking branch 'origin/release/v4.5' into automation/sync-main-to-release-v4.5 2026-10-12 21:38:45 +02:00
Andras BacsaiandClaude Opus 5.5 3863f0d257 fix(proxy): link Traefik update docs in patch update callout
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 21:11:05 +02:00
Andras Bacsai c30e47dc12 fix(ui): show Redeploy label for running applications 2026-10-12 21:11:05 +02:00
Andras Bacsai da426914ca Revert "fix(ui): prevent layout shifts with a stable scrollbar gutter"
This reverts commit 5756a4cda4.
2026-10-12 15:14:30 +02:00
Andras Bacsai 5756a4cda4 fix(ui): prevent layout shifts with a stable scrollbar gutter
Skip terminal scroll-lock padding when the browser reserves scrollbar space.
2026-10-12 15:07:09 +02:00
Andras Bacsai c54902f776 feat(logs): add text view, group log toolbar into menus, and use skeleton loaders
- Runtime logs: add a compact text view, move display options and log level filters into a View menu, move copy and download into an Export menu, and remove the extra top margin.
- Replace spinner loading cards with skeletons on the logs, dynamic configurations, proxy, TLS certificates, Docker images, environment variables, preview deployments, rollback, subscription, cloud provider, and new resource pages.
2026-10-12 14:55:37 +02:00
Andras Bacsai 7837a07ba2 fix(notifications): disable channels after repeated configuration failures
Count invalid keys, tokens, and deleted webhooks in a new failure_count column
on each notification settings table, like servers.unreachable_count. After 3
failures in a row the channel is disabled and the team is told by instance
email and its other channels. Rate limits and server errors are retried and
not counted; test notifications never count.
2026-10-12 14:37:58 +02:00
Andras Bacsai 12b35957eb feat(ui): add yaml syntax highlighting to dynamic proxy configs and file mounts 2026-10-12 14:31:37 +02:00
Andras BacsaiandClaude Opus 5.5 b13ecb0542 chore(seeding): seed railpack examples from new repo layout
Move all git examples into ApplicationSeeder on railpack, using the
reorganized coollabsio/coolify-examples main branch, and drop the
separate Railpack Examples project. Add DEV_SEED_IP to set the IP for
seeded sslip.io domains (e.g. a Tailscale IP).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 14:26:19 +02:00
Andras Bacsai a7e1cecfa7 fix(ui): remove "View log" text from deploying indicator 2026-10-12 14:26:09 +02:00
Andras BacsaiandClaude Opus 5.5 213a61b7ab fix(env): pass exact env values to containers, keep old escaping for existing variables (#12024)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 13:06:45 +02:00
Andras Bacsai 9893a5f503 fix(seeding): stop writing CA certificates to servers on startup
Remove the CA certificate seeder from production seeding. Add a regression
test verifying no CA certificate is created or remote task queued.
2026-10-12 10:35:20 +02:00
🏔️ Peak 856735613d feat(backups): back up the coolify database before an update (#12093) 2026-10-12 00:59:14 +02:00
🏔️ Peak 068f02e274 chore(repo): add why section and maintainer PR templates (#12091) 2026-10-12 00:12:40 +02:00
Andras Bacsai 1d7bee0b83 fix(compose): preserve long bind options and non-creating sources (#12135) 2026-10-11 21:02:29 +02:00
Andras Bacsai cdd8f82840 fix(compose): preserve environment variable semantics (#11794) 2026-10-11 21:02:11 +02:00
Andras Bacsai 1e42284db0 feat(proxy): override the Traefik certificate resolver per resource
Applications and service applications can now use the server resolver,
no resolver ("none"), or a custom resolver name. This allows servers
that mix Let's Encrypt domains with domains that use their own
certificates, such as Cloudflare Origin CA. The setting is available in
the UI and the API.

Closes #12138
2026-10-11 19:01:27 +02:00
Andras Bacsai 90c2e58e52 feat(build-packs): mark Nixpacks as deprecated and recommend Railpack 2026-10-11 18:39:45 +02:00
Andras Bacsai ebfa747e77 feat(github-runners): link to the GitHub App from not-ready callouts 2026-10-11 17:26:10 +02:00
Andras Bacsai e58e490061 fix(api): link to API settings where disabled API blocks a feature 2026-10-11 16:53:35 +02:00
Andras Bacsai ec9621370a fix(deployments): log the configured timeout when a deployment times out 2026-10-11 16:25:26 +02:00
Andras Bacsai 263630bcf2 fix(proxy): clear absent letsencrypt resolvers during migration
Set the resolver to null when saved Traefik configuration has no active letsencrypt resolver. Preserve existing settings for active or unknown configurations and log parsing failures.

Add regression coverage for missing, active, unknown, and malformed configurations.
2026-10-11 11:17:01 +02:00
Andras Bacsai af589f6da4 feat(proxy): make the Traefik certificate resolver configurable per server
Coolify always added tls.certresolver=letsencrypt to generated HTTPS
routers, so Traefik logged errors when the proxy used its own
certificates (for example Cloudflare Origin CA) without that resolver.
Add a server setting (default letsencrypt) in the proxy page and API.
An empty value omits the resolver from resource labels, the Coolify
dashboard routes, and the catch-all router.

Closes #12138
2026-10-11 10:19:40 +02:00
Andras BacsaiandClaude Opus 5.5 d4502bc514 fix(previews): avoid doubled scheme in preview URL templates
Closes #12136

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-11 09:51:41 +02:00
Andras Bacsai f55efc859d fix(docker): pin PHP base image to prevent startup failures
Pin development and production images to serversideup PHP v4.5.1 to
avoid the v5 user-bundle relocation that breaks startup.

Bump Coolify to 4.4.6 in the default config and version manifests.
v4.4.6
2026-10-09 20:36:48 +02:00
Andras Bacsai 5246427b03 fix(upgrade): remove disk space checks that block Coolify updates v4.4.5 2026-10-09 20:03:49 +02:00
Andras Bacsai e3d7c04be7 chore: merge main into release/v4.5 (#12131) 2026-10-09 19:30:48 +02:00
Andras Bacsai 5cece62545 feat: add Hostinger VPS, multi-destination backups and maintenance pages
- Add Hostinger server provisioning, API endpoints and lifecycle controls.
- Support multiple S3 destinations for database and volume backups.
- Add proxy error pages and application and service maintenance mode.
- Detect repository configuration and support environment imports.
- Add HTTP basic auth hash options and Redis-compatible database flushing.
- Improve Railpack builder cleanup and development instance backups.
2026-10-09 19:30:26 +02:00