6165 Commits
Author SHA1 Message Date
Andras Bacsai 13a577a731 fix: align resource access checks 2026-08-19 15:05:51 +02:00
Andras Bacsai 63d22f1331 chore: remove legacy Dusk tests and configure maintenance driver 2026-08-19 13:49:14 +02:00
Andras Bacsai 937892b3ea fix(storage): guard volume names and authorize source removal 2026-08-19 13:15:15 +02:00
Andras Bacsai 1d37968f5d Merge remote-tracking branch 'origin/next' into remove-local-volume-source 2026-08-19 13:13:09 +02:00
Andras Bacsai 81227670e6 Reapply "Merge origin/next into main"
This reverts commit 15359833d3.
2026-08-19 12:39:55 +02:00
Andras Bacsai 15359833d3 Revert "Merge origin/next into main"
This reverts commit 541d743907, reversing
changes made to bb1d3f13f2.
2026-08-19 12:33:16 +02:00
Andras Bacsai 38aaf8cb2a fix(caddy): prevent exact label generation argument error (#11397) 2026-08-19 12:31:36 +02:00
Andras Bacsai 541d743907 Merge origin/next into main 2026-08-19 12:30:09 +02:00
Andras Bacsai 534f22a0df Merge remote-tracking branch 'origin/main' 2026-08-19 12:06:35 +02:00
Andras Bacsai 89480bcc61 feat(api): add instance email settings endpoints
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras Bacsai 59be75bdac fix(email): prevent Proton SMTP From header folding (#11400) 2026-08-19 11:52:59 +02:00
Andras Bacsai 2b8e684f68 Merge remote-tracking branch 'origin/main' 2026-08-19 11:41:45 +02:00
Andras Bacsai 22f0af8d0e feat(platform): support SMTP EHLO, page-preserving teams, and upgrades 2026-08-19 11:41:41 +02:00
Andras Bacsai 34da7232aa fix(api-tokens): scope token access to current team (#11396) 2026-08-19 11:27:23 +02:00
Andras Bacsai 849ba8f34c fix(email): support custom SMTP EHLO domains (#11398) 2026-08-19 11:25:46 +02:00
github-actions[bot] 4d4bd098b7 Merge remote-tracking branch 'origin/main' into next 2026-08-19 08:55:26 +00:00
Andras Bacsai ae85688651 fix(email): respect disabled SMTP encryption in test emails (#11384) 2026-08-19 10:55:10 +02:00
github-actions[bot] ce1d621dda Merge remote-tracking branch 'origin/main' into next 2026-08-19 08:43:43 +00:00
Andras Bacsai 41f7152441 fix(email): apply configured sender identity (#11393) 2026-08-19 10:43:25 +02:00
github-actions[bot] 0bc826bf45 Merge remote-tracking branch 'origin/main' into next 2026-08-18 21:38:56 +00:00
Andras Bacsai 1cb9f001f8 fix(ssh): preserve sessions when recycling mux connections (#11377) 2026-08-18 23:38:38 +02:00
github-actions[bot] 1dc7baf7b5 Merge remote-tracking branch 'origin/main' into next 2026-08-18 20:42:25 +00:00
Andras Bacsai b4f9c9b51d feat(development): add QEMU VM provisioning and server seeding
Add configurable development QEMU profiles, host setup, VM lifecycle management,
and commands to seed managed VMs as Coolify servers. Improve installation dialog
logs with responsive mobile presentation.
2026-08-18 21:14:29 +02:00
Andras Bacsai f5f904a403 refactor(storage): separate volumes from directory mounts 2026-08-18 20:01:36 +02:00
Andras Bacsai e62a2d45a0 Merge branch 'next' into remove-local-volume-source 2026-08-18 19:59:23 +02:00
Andras Bacsai f6467feeb3 ✨ Add support for apk package manager (on Alpine Linux) (#6189) 2026-08-18 16:46:02 +02:00
Andras Bacsai 96790e6531 feat(server): support Alpine package management and Docker setup
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
2026-08-18 16:45:02 +02:00
Andras Bacsai da8665330b feat(security): add integration token editing and rotation 2026-08-18 16:24:53 +02:00
Andras Bacsai 85e0821dd4 Merge branch 'main' into third-party-integration-tokens 2026-08-18 16:15:53 +02:00
Andras Bacsai 743f54b317 feat(security): add Cloudflare integration token management
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
Helge SverreandAndras Bacsai 8170798115 fix(security): enforce team-scoped authorization for scheduled tasks (#11239)
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
2026-08-18 16:01:17 +02:00
Andras Bacsai 3b08be1429 fix(auth): handle concurrent OAuth identity creation safely
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai a3e968d03e fix(backups): preserve existing volume backup timeouts
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
2026-08-18 15:41:31 +02:00
Andras Bacsai d29139f4a3 fix(auth): reject OAuth logins without valid provider IDs
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
2026-08-18 15:34:37 +02:00
Andras Bacsai f9f26c547c fix(auth): preserve OAuth identity across email changes
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai 050107a41d Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout 2026-08-18 15:11:48 +02:00
Andras Bacsai 1073bbca83 fix(sentinel): clarify restart after settings update
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai 8400e26a3f feat(auth): consolidate OAuth settings into standard authentication page
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai dd597d1527 fix(backups): support long-running volume backups 2026-08-18 14:10:23 +02:00
Andras Bacsai 00b7861a8f fix(services): avoid loading bind-mount file contents (#10960) 2026-08-18 14:05:15 +02:00
Andras Bacsai 288dc98ca7 fix: enforce remote output size limits 2026-08-18 14:03:33 +02:00
Andras Bacsai 253e59e731 Merge remote-tracking branch 'origin/next' into openid-auth-support 2026-08-18 14:03:09 +02:00
Andras Bacsai ccd7c59abf Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash 2026-08-18 13:58:16 +02:00
Andras Bacsai 861a904992 fix(server): surface pending proxy and outdated Traefik states 2026-08-18 13:53:40 +02:00
Andras Bacsai d2d6c8ac96 fix(deployments): defer container cleanup and configure dashboard HTTPS 2026-08-18 12:51:54 +02:00
Andrew Matia 264cb8e2b0 fix(webhook): restore GitLab source deployments (#11284) 2026-08-18 12:24:06 +02:00
Andras Bacsai d360da3270 fix(databases): chown SSL certs before container replacement (#11352) 2026-08-18 11:55:55 +02:00
NrwPlay 30da9e96eb fix(notification): update storage email link in S3 error (#8633) 2026-08-18 11:38:01 +02:00
Prai'nsandpeaklabs-dev 05ebba9f1a fix: compress dashboard over HTTPS (#10828)
Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
2026-08-18 11:30:09 +02:00
Andras Bacsai 417f996ef5 fix(databases): redirect stdin for the SSL cert chown (#11315) 2026-08-18 10:46:24 +02:00