mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-06 13:10:37 -04:00
Andras BacsaiandClaude Opus 5.5
4ca0b4415c
- New server settings: is_auto_security_updates_enabled and auto_security_updates_time (maintenance window, HH:MM in the time zone of the server). Both move with a server transfer. - Debian/Ubuntu: install unattended-upgrades and write 52coolify-unattended-upgrades. `#clear` drops the distro origin lists, so only the security origins stay (Debian <codename>-security, Ubuntu <codename>-security, and the Ubuntu Pro ESM security origins). A drop-in for apt-daily-upgrade.timer sets the time. https://manpages.debian.org/bookworm/apt/apt.conf.5.en.html https://github.com/mvo5/unattended-upgrades/blob/master/README.md - RHEL family: install dnf-automatic (dnf5-plugin-automatic on dnf5), set upgrade_type = security and apply_updates = yes in /etc/dnf/automatic.conf, and add a drop-in for dnf-automatic.timer (dnf4) or dnf5-automatic.timer (dnf5). https://dnf.readthedocs.io/en/latest/automatic.html https://dnf5.readthedocs.io/en/latest/dnf5_plugins/automatic.8.html - Off removes the Coolify files, so the operating system default comes back. Other package managers show "not supported". - The schedule and the automatic updates share one form and one unsaved bar. The remote commands run only when the automatic update settings change; a failure keeps the old setting. - Commands are written for non-root SSH users (tee and single sh -c scripts) and were run in Debian 12, Ubuntu 24.04, Rocky 9, and Fedora containers as root and as a sudo user. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>