Commit Graph
100 Commits
Author SHA1 Message Date
Andras Bacsai f49c330d9d feat(database): queue starts and resolve credentials securely
Extract database start command execution into a shared service and job, preserving activity tracking and status events while supporting resolved secret credentials.
2026-08-23 22:33:03 +02:00
Andras Bacsai 91d4467322 feat(secrets): resolve integrations across deployments and databases
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
2026-08-23 21:33:00 +02:00
Andras Bacsai 4cd75e05b5 chore: remove obsolete AI lessons and task notes 2026-08-23 21:11:26 +02:00
Andras Bacsai ba179d50ac feat(secrets): add integration token and application manager APIs
Add API endpoints for creating validated secret manager tokens and configuring application secret manager settings. Suppress secret-bearing deployment command logs and redact resolved remote secrets.
2026-08-23 20:42:20 +02:00
Andras Bacsai 51461456f6 feat(secrets): resolve remote secret references at deployment
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
2026-08-23 20:09:31 +02:00
Andras Bacsai 0bcaa4f51a Merge remote-tracking branch 'origin/main' into next 2026-08-21 12:19:57 +02:00
Andras Bacsai dd90926583 fix(ci): protect main during sync conflicts 2026-08-21 12:19:05 +02:00
Andras Bacsai ca5fcce39b Reapply "Merge branch 'next' into main"
This reverts commit 7bbd91175f.
2026-08-21 12:15:46 +02:00
Andras Bacsai 7bbd91175f Revert "Merge branch 'next' into main"
This reverts commit 2598f3e4c8, reversing
changes made to 83f1a2e503.
2026-08-21 12:12:56 +02:00
Andras BacsaiandGitHub 2598f3e4c8 Merge branch 'next' into main 2026-08-21 12:11:40 +02:00
Andras BacsaiandGitHub 83f1a2e503 fix(domains): allow adding domains without explicit ports (#11442) 2026-08-21 12:04:14 +02:00
Andras Bacsai 15072b9cf7 fix(ui): release modal scroll lock before confirmation submission
Close the confirmation modal before submitting destructive actions and reopen it when submission fails or returns an error.
2026-08-21 11:23:04 +02:00
Andras BacsaiandGitHub 65f4649a7d fix(deployments): ignore newly tracked static configuration (#11430) 2026-08-20 20:17:08 +02:00
Andras BacsaiandGitHub 33218532a8 Align resource access checks (#11405) 2026-08-20 12:49:59 +02:00
Andras Bacsai c9b857884b fix(api): align team-scoped responses 2026-08-20 12:40:13 +02:00
Andras Bacsai 38502e8205 fix(resources): preserve deletion when remote cleanup fails
Separate remote service cleanup from resource deletion and ensure database removal
completes despite cleanup errors. Update the disabled two-factor badge icon.
2026-08-20 11:10:14 +02:00
Andras Bacsai 8f90882875 fix(teams): make membership and source deletions atomic
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
Andras Bacsai 1eea1a1412 Merge remote-tracking branch 'origin/main' 2026-08-20 09:34:13 +02:00
Andras BacsaiandGitHub de1d234ea5 fix(auth): require confirmation before accepting magic links (#11413) 2026-08-20 09:34:05 +02:00
Andras Bacsai 680071dca8 fix(teams): restrict deletion to owners and backfill team ownership 2026-08-20 09:32:32 +02:00
Andras BacsaiandGitHub 14d40c73a2 fix(docker-cleanup): finalize executions after job failure (#11408) 2026-08-19 16:47:19 +02:00
Andras BacsaiandGitHub 7c69b32c58 fix(services): handle empty compose environment sections (#11407) 2026-08-19 16:46:57 +02:00
Andras Bacsai 13a577a731 fix: align resource access checks 2026-08-19 15:05:51 +02:00
Andras BacsaiandGitHub fd97baf2dd Hide source path from volume creation UI (#7591) 2026-08-19 13:51:44 +02:00
Andras Bacsai 63d22f1331 chore: remove legacy Dusk tests and configure maintenance driver 2026-08-19 13:49:14 +02:00
Andras Bacsai 937892b3ea fix(storage): guard volume names and authorize source removal 2026-08-19 13:15:15 +02:00
Andras Bacsai 1d37968f5d Merge remote-tracking branch 'origin/next' into remove-local-volume-source 2026-08-19 13:13:09 +02:00
Andras Bacsai 58861227e0 fix(ci): allow RC workflow to revalidate prereleases 2026-08-19 13:07:07 +02:00
Andras Bacsai 81227670e6 Reapply "Merge origin/next into main"
This reverts commit 15359833d3.
2026-08-19 12:39:55 +02:00
Andras Bacsai 15359833d3 Revert "Merge origin/next into main"
This reverts commit 541d743907, reversing
changes made to bb1d3f13f2.
2026-08-19 12:33:16 +02:00
Andras BacsaiandGitHub 38aaf8cb2a fix(caddy): prevent exact label generation argument error (#11397) 2026-08-19 12:31:36 +02:00
Andras Bacsai 541d743907 Merge origin/next into main 2026-08-19 12:30:09 +02:00
Andras Bacsai bb1d3f13f2 feat(ci): add next build and RC release workflows
Replace generic staging builds with traceable next images and reviewed RC releases.
2026-08-19 12:22:51 +02:00
Andras BacsaiandGitHub c3a86b054a fix(upgrade): persist target image before container recreation (#11401) 2026-08-19 12:18:05 +02:00
Andras Bacsai 534f22a0df Merge remote-tracking branch 'origin/main' 2026-08-19 12:06:35 +02:00
Andras Bacsai 89480bcc61 feat(api): add instance email settings endpoints
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras BacsaiandGitHub 59be75bdac fix(email): prevent Proton SMTP From header folding (#11400) 2026-08-19 11:52:59 +02:00
Andras Bacsai 2b8e684f68 Merge remote-tracking branch 'origin/main' 2026-08-19 11:41:45 +02:00
Andras Bacsai 22f0af8d0e feat(platform): support SMTP EHLO, page-preserving teams, and upgrades 2026-08-19 11:41:41 +02:00
Andras BacsaiandGitHub 34da7232aa fix(api-tokens): scope token access to current team (#11396) 2026-08-19 11:27:23 +02:00
Andras BacsaiandGitHub 849ba8f34c fix(email): support custom SMTP EHLO domains (#11398) 2026-08-19 11:25:46 +02:00
Andras Bacsai 9e6afc0408 Merge remote-tracking branch 'origin/main' 2026-08-19 11:09:10 +02:00
Andras Bacsai e3a0279c00 fix(ui): flag pending proxy updates and Sentinel outages 2026-08-19 11:09:02 +02:00
Andras BacsaiandGitHub ae85688651 fix(email): respect disabled SMTP encryption in test emails (#11384) 2026-08-19 10:55:10 +02:00
Andras BacsaiandGitHub 41f7152441 fix(email): apply configured sender identity (#11393) 2026-08-19 10:43:25 +02:00
Andras Bacsai 292c3aa231 chore(release): bump Coolify versions to 4.3.10 and 4.3.11 2026-08-19 00:09:48 +02:00
Andras BacsaiandGitHub 45d0ec7518 fix(dns): time out validation queries after five seconds (#11378) 2026-08-18 23:40:59 +02:00
Andras BacsaiandGitHub 1cb9f001f8 fix(ssh): preserve sessions when recycling mux connections (#11377) 2026-08-18 23:38:38 +02:00
Andras Bacsai 81f3cc6446 Merge remote-tracking branch 'origin/main' 2026-08-18 22:42:06 +02:00
Andras Bacsai b4f9c9b51d feat(development): add QEMU VM provisioning and server seeding
Add configurable development QEMU profiles, host setup, VM lifecycle management,
and commands to seed managed VMs as Coolify servers. Improve installation dialog
logs with responsive mobile presentation.
2026-08-18 21:14:29 +02:00
Andras Bacsai 680a7e892d fix(storage): clarify source path removal impact 2026-08-18 20:05:09 +02:00
Andras Bacsai f5f904a403 refactor(storage): separate volumes from directory mounts 2026-08-18 20:01:36 +02:00
Andras Bacsai e62a2d45a0 Merge branch 'next' into remove-local-volume-source 2026-08-18 19:59:23 +02:00
Andras BacsaiandGitHub f6467feeb3 Add support for apk package manager (on Alpine Linux) (#6189) 2026-08-18 16:46:02 +02:00
Andras Bacsai 96790e6531 feat(server): support Alpine package management and Docker setup
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
2026-08-18 16:45:02 +02:00
Andras BacsaiandGitHub ff13c22431 feat(security): add Cloudflare integration token management (#11359) 2026-08-18 16:43:06 +02:00
Andras Bacsai e78fde9b53 Merge remote-tracking branch 'origin/next' into third-party-integration-tokens 2026-08-18 16:26:53 +02:00
Andras Bacsai a9ae9caedc chore: ignore superpowers plan files 2026-08-18 16:25:56 +02:00
Andras Bacsai da8665330b feat(security): add integration token editing and rotation 2026-08-18 16:24:53 +02:00
Andras Bacsai f4852dd96c ci: use current checkout action for branch sync 2026-08-18 16:24:41 +02:00
Andras Bacsai 9281e8604c ci: sync main changes to next 2026-08-18 16:24:11 +02:00
Andras Bacsai fe9e1e46f5 Merge remote-tracking branch 'origin/main' into next 2026-08-18 16:17:26 +02:00
Andras Bacsai 85e0821dd4 Merge branch 'main' into third-party-integration-tokens 2026-08-18 16:15:53 +02:00
Andras Bacsai 743f54b317 feat(security): add Cloudflare integration token management
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
Andras BacsaiandGitHub 8aa2cbe462 fix(backups): support long-running volume backups (#11358) 2026-08-18 15:52:52 +02:00
Andras BacsaiandGitHub dd4ec1ab5e fix(auth): preserve OAuth identity across email changes (#11357) 2026-08-18 15:51:00 +02:00
Andras Bacsai 3b08be1429 fix(auth): handle concurrent OAuth identity creation safely
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai a3e968d03e fix(backups): preserve existing volume backup timeouts
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
2026-08-18 15:41:31 +02:00
Andras Bacsai d29139f4a3 fix(auth): reject OAuth logins without valid provider IDs
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
2026-08-18 15:34:37 +02:00
Andras Bacsai b075693274 fix(backups): preserve existing volume backup timeouts
Change only the default timeout for new volume backups without modifying existing schedules.
2026-08-18 15:30:59 +02:00
Andras Bacsai f9f26c547c fix(auth): preserve OAuth identity across email changes
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai 050107a41d Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout 2026-08-18 15:11:48 +02:00
Andras Bacsai 1073bbca83 fix(sentinel): clarify restart after settings update
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai ee843b7230 fix(ui): show server warnings with alert icons 2026-08-18 14:51:40 +02:00
Andras BacsaiandGitHub 41b06e73a0 feat(auth): add OIDC SSO and registration controls (#10543) 2026-08-18 14:46:25 +02:00
Andras Bacsai ce2ea0544e feat(auth): improve OAuth buttons and OIDC settings layout
Add provider icons and full-width centered login buttons, organize OIDC fields, and remove hardcoded user IDs from the seeder.
2026-08-18 14:33:21 +02:00
Andras Bacsai 8400e26a3f feat(auth): consolidate OAuth settings into standard authentication page
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai dd597d1527 fix(backups): support long-running volume backups 2026-08-18 14:10:23 +02:00
Andras Bacsai ad3e7350c1 Merge remote-tracking branch 'origin/main' 2026-08-18 14:05:22 +02:00
Andras BacsaiandGitHub 00b7861a8f fix(services): avoid loading bind-mount file contents (#10960) 2026-08-18 14:05:15 +02:00
Andras Bacsai 288dc98ca7 fix: enforce remote output size limits 2026-08-18 14:03:33 +02:00
Andras Bacsai 253e59e731 Merge remote-tracking branch 'origin/next' into openid-auth-support 2026-08-18 14:03:09 +02:00
Andras Bacsai b2af1c11a5 fix(logs): clean up deployment log scrolling on teardown 2026-08-18 14:02:48 +02:00
Andras Bacsai ccd7c59abf Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash 2026-08-18 13:58:16 +02:00
Andras Bacsai 861a904992 fix(server): surface pending proxy and outdated Traefik states 2026-08-18 13:53:40 +02:00
Andras Bacsai 3cca2a0bfe fix(ui): add spacing between database backup sections
Add a flex column gap to the backup edit layout and cover the spacing with a feature test.
2026-08-18 12:53:41 +02:00
Andras Bacsai d2d6c8ac96 fix(deployments): defer container cleanup and configure dashboard HTTPS 2026-08-18 12:51:54 +02:00
Andras BacsaiandGitHub d360da3270 fix(databases): chown SSL certs before container replacement (#11352) 2026-08-18 11:55:55 +02:00
Andras Bacsai 713ddd84fc Merge remote-tracking branch 'origin/main' 2026-08-18 11:39:10 +02:00
Andras Bacsai 88eccbf78f chore(release): bump Coolify versions to 4.3.9 2026-08-18 11:29:01 +02:00
Andras BacsaiandGitHub 417f996ef5 fix(databases): redirect stdin for the SSL cert chown (#11315) 2026-08-18 10:46:24 +02:00
Andras BacsaiandGitHub c9d5c4c41f fix(upgrade): handle missing status after restart (#11350) 2026-08-18 10:41:45 +02:00
Andras Bacsai a3e78a3677 fix(authorization): gate mutable Livewire controls by policy
Disable unauthorized listbox inputs and hide application deploy actions, with updated disabled styling and coverage.
2026-08-18 10:18:52 +02:00
Andras BacsaiandGitHub f588913435 fix(table): keep page-size dropdown within viewport (#11349) 2026-08-18 10:03:07 +02:00
Andras Bacsai 48da7ee6e2 fix(table): preserve computed dropdown top position 2026-08-18 10:02:28 +02:00
Andras BacsaiandGitHub cd2c3f3431 fix(postgresql): persist selected public access state (#11348) 2026-08-18 09:46:41 +02:00
Andras Bacsai ab5025f0a7 fix: select Traefik networks and stabilize dropdown positioning 2026-08-18 09:42:36 +02:00
Andras Bacsai 8ecf77eadb fix(postgresql): persist selected public access state 2026-08-18 09:42:22 +02:00
Andras Bacsai 0d23b29775 fix: honor GitHub default branches and reconcile proxy networks
Use searchable repository and branch selectors, select each repository's default branch when available, and discover running container networks during proxy reconciliation.
2026-08-18 09:16:29 +02:00
Andras Bacsai 17d9d1a370 feat(domains): add configurable HTTPS redirects for service apps 2026-08-18 09:08:18 +02:00