Andras Bacsai e2c826a976 fix: run SSH wrapper via sh and scope secret tokens to resource team ...

SSH: sshd runs the remote command with the user's login shell, which
can be fish or csh/tcsh. Those shells cannot parse POSIX `if ... fi`, so
the bash/sh fallback wrapper now runs inside `sh -c "..."`. Unit tests
run the wrapper under every login shell that is installed and check that
it stays one simple sh command.

Secret managers: the SecretManagerLinks component now lists and resolves
tokens by the resource's team instead of the session team. A team switch
in another tab can no longer link a token from a different team.
SecretManagerLink::fetchSecrets() also throws when the linked token does
not belong to the resource's team, so no request is sent with it.

Also adds a lesson note: remove the SSH mux file before live SSH or
login-shell tests.

2026-09-30 11:05:42 +02:00

..

Application.php

fix(server): keep data directory commands working for non-root SSH users

2026-09-29 20:46:54 +02:00

ApplicationDeploymentQueue.php

fix(multi-server): make applications on several servers consistent

2026-09-28 15:38:57 +02:00

ApplicationPreview.php

fix(compose): use external volumes as declared

2026-09-27 16:53:54 +02:00

ApplicationSetting.php

…

AuditEvent.php

…

BaseModel.php

…

CloudInitScript.php

…

CloudProviderToken.php

…

DiscordNotificationSettings.php

…

DnsProviderZone.php

…

DockerCleanupExecution.php

…

EmailNotificationSettings.php

…

Environment.php

feat(database): add sqlite as a standalone database type

2026-09-24 19:03:42 +02:00

EnvironmentVariable.php

fix(env): prevent copying unauthorized and shown-once values

2026-09-25 07:30:17 +02:00

GithubApp.php

…

GitlabApp.php

…

InstanceSettings.php

refactor(http): remove the TrustHosts middleware that never checked the host

2026-09-28 12:00:16 +02:00

IntegrationToken.php

…

LocalFileVolume.php

fix(server): keep data directory commands working for non-root SSH users

2026-09-29 20:46:54 +02:00

LocalPersistentVolume.php

feat(database): let docker compose applications mount the sqlite volume

2026-09-27 18:00:34 +02:00

ManagedDnsRecord.php

feat: add Traefik ACME cert UI and shared managed DNS record ownership

2026-09-25 19:00:00 +02:00

ManagedDnsRecordReference.php

feat: add Traefik ACME cert UI and shared managed DNS record ownership

2026-09-25 19:00:00 +02:00

NotificationThrottle.php

fix(notifications): throttle repeated notifications per resource

2026-09-29 11:29:39 +02:00

OauthIdentity.php

…

OauthSetting.php

…

PersonalAccessToken.php

…

PrivateKey.php

fix(keys): check duplicate private keys in the key's own team

2026-09-28 10:13:20 +02:00

Project.php

feat(database): add sqlite as a standalone database type

2026-09-24 19:03:42 +02:00

ProjectSetting.php

…

PushoverNotificationSettings.php

…

S3Storage.php

…

ScheduledDatabaseBackup.php

fix(notifications): throttle repeated notifications per resource

2026-09-29 11:29:39 +02:00

ScheduledDatabaseBackupExecution.php

…

ScheduledJobDelivery.php

…

ScheduledTask.php

feat(scheduler): dispatch scheduled jobs by their stored next run time

2026-09-29 10:07:23 +02:00

ScheduledTaskExecution.php

…

ScheduledVolumeBackup.php

feat(scheduler): dispatch scheduled jobs by their stored next run time

2026-09-29 10:07:23 +02:00

ScheduledVolumeBackupExecution.php

…

SecretManagerLink.php

fix: run SSH wrapper via sh and scope secret tokens to resource team

2026-09-30 11:05:42 +02:00

Server.php

fix(notifications): throttle repeated notifications per resource

2026-09-29 11:29:39 +02:00

ServerSetting.php

fix(notifications): throttle repeated notifications per resource

2026-09-29 11:29:39 +02:00

Service.php

fix(server): keep data directory commands working for non-root SSH users

2026-09-29 20:46:54 +02:00

ServiceApplication.php

feat: add Traefik ACME cert UI and shared managed DNS record ownership

2026-09-25 19:00:00 +02:00

ServiceDatabase.php

fix(backups): improve backup command handling

2026-09-24 11:44:53 +02:00

SharedEnvironmentVariable.php

…

SlackNotificationSettings.php

…

SslCertificate.php

…

StandaloneClickhouse.php

…

StandaloneDocker.php

feat(database): add sqlite as a standalone database type

2026-09-24 19:03:42 +02:00

StandaloneDragonfly.php

…

StandaloneKeydb.php

…

StandaloneMariadb.php

…

StandaloneMongodb.php

…

StandaloneMysql.php

…

StandalonePostgresql.php

…

StandaloneRedis.php

…

StandaloneSqlite.php

feat(database): let docker compose applications mount the sqlite volume

2026-09-27 18:00:34 +02:00

Subscription.php

…

SwarmDocker.php

feat(database): add sqlite as a standalone database type

2026-09-24 19:03:42 +02:00

Tag.php

…

Team.php

fix(notifications): throttle repeated notifications per resource

2026-09-29 11:29:39 +02:00

TeamInvitation.php

…

TelegramNotificationSettings.php

…

User.php

fix(oauth): let pre-existing users link first identity without verification

2026-09-29 22:11:06 +02:00

UserChangelogRead.php

…

WebhookNotificationSettings.php

…