Commit graph

991 commits

Author SHA1 Message Date
Andras Bacsai
8f90882875 fix(teams): make membership and source deletions atomic
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
Andras Bacsai
1eea1a1412 Merge remote-tracking branch 'origin/main' 2026-08-20 09:34:13 +02:00
Andras Bacsai
de1d234ea5
fix(auth): require confirmation before accepting magic links (#11413) 2026-08-20 09:34:05 +02:00
Andras Bacsai
680071dca8 fix(teams): restrict deletion to owners and backfill team ownership 2026-08-20 09:32:32 +02:00
Andras Bacsai
14d40c73a2
fix(docker-cleanup): finalize executions after job failure (#11408) 2026-08-19 16:47:19 +02:00
Andras Bacsai
7c69b32c58
fix(services): handle empty compose environment sections (#11407) 2026-08-19 16:46:57 +02:00
Andras Bacsai
15359833d3 Revert "Merge origin/next into main"
This reverts commit 541d743907, reversing
changes made to bb1d3f13f2.
2026-08-19 12:33:16 +02:00
Andras Bacsai
38aaf8cb2a
fix(caddy): prevent exact label generation argument error (#11397) 2026-08-19 12:31:36 +02:00
Andras Bacsai
541d743907 Merge origin/next into main 2026-08-19 12:30:09 +02:00
Andras Bacsai
89480bcc61 feat(api): add instance email settings endpoints
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras Bacsai
2b8e684f68 Merge remote-tracking branch 'origin/main' 2026-08-19 11:41:45 +02:00
Andras Bacsai
22f0af8d0e feat(platform): support SMTP EHLO, page-preserving teams, and upgrades 2026-08-19 11:41:41 +02:00
Andras Bacsai
34da7232aa
fix(api-tokens): scope token access to current team (#11396) 2026-08-19 11:27:23 +02:00
Andras Bacsai
849ba8f34c
fix(email): support custom SMTP EHLO domains (#11398) 2026-08-19 11:25:46 +02:00
github-actions[bot]
ba933ac8a0 Merge remote-tracking branch 'origin/main' into next 2026-08-19 09:09:28 +00:00
Andras Bacsai
9e6afc0408 Merge remote-tracking branch 'origin/main' 2026-08-19 11:09:10 +02:00
Andras Bacsai
e3a0279c00 fix(ui): flag pending proxy updates and Sentinel outages 2026-08-19 11:09:02 +02:00
github-actions[bot]
ce1d621dda Merge remote-tracking branch 'origin/main' into next 2026-08-19 08:43:43 +00:00
Andras Bacsai
41f7152441
fix(email): apply configured sender identity (#11393) 2026-08-19 10:43:25 +02:00
github-actions[bot]
b9646630c6 Merge remote-tracking branch 'origin/main' into next 2026-08-18 21:41:15 +00:00
Andras Bacsai
45d0ec7518
fix(dns): time out validation queries after five seconds (#11378) 2026-08-18 23:40:59 +02:00
github-actions[bot]
0bc826bf45 Merge remote-tracking branch 'origin/main' into next 2026-08-18 21:38:56 +00:00
Andras Bacsai
1cb9f001f8
fix(ssh): preserve sessions when recycling mux connections (#11377) 2026-08-18 23:38:38 +02:00
github-actions[bot]
56537220cd Merge remote-tracking branch 'origin/main' into next 2026-08-18 21:29:24 +00:00
🏔️ Peak
25df9ec473
fix(ui): center icon tooltips over their trigger (#11382) 2026-08-18 23:29:09 +02:00
github-actions[bot]
1dc7baf7b5 Merge remote-tracking branch 'origin/main' into next 2026-08-18 20:42:25 +00:00
Andras Bacsai
b4f9c9b51d feat(development): add QEMU VM provisioning and server seeding
Add configurable development QEMU profiles, host setup, VM lifecycle management,
and commands to seed managed VMs as Coolify servers. Improve installation dialog
logs with responsive mobile presentation.
2026-08-18 21:14:29 +02:00
Andras Bacsai
f6467feeb3
Add support for apk package manager (on Alpine Linux) (#6189) 2026-08-18 16:46:02 +02:00
Andras Bacsai
96790e6531 feat(server): support Alpine package management and Docker setup
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
2026-08-18 16:45:02 +02:00
Andras Bacsai
da8665330b feat(security): add integration token editing and rotation 2026-08-18 16:24:53 +02:00
Andras Bacsai
85e0821dd4 Merge branch 'main' into third-party-integration-tokens 2026-08-18 16:15:53 +02:00
Andras Bacsai
743f54b317 feat(security): add Cloudflare integration token management
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
Helge Sverre
8170798115
fix(security): enforce team-scoped authorization for scheduled tasks (#11239)
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
2026-08-18 16:01:17 +02:00
Andras Bacsai
3b08be1429 fix(auth): handle concurrent OAuth identity creation safely
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai
a3e968d03e fix(backups): preserve existing volume backup timeouts
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
2026-08-18 15:41:31 +02:00
Andras Bacsai
d29139f4a3 fix(auth): reject OAuth logins without valid provider IDs
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
2026-08-18 15:34:37 +02:00
Andras Bacsai
b075693274 fix(backups): preserve existing volume backup timeouts
Change only the default timeout for new volume backups without modifying existing schedules.
2026-08-18 15:30:59 +02:00
Andras Bacsai
f9f26c547c fix(auth): preserve OAuth identity across email changes
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai
050107a41d Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout 2026-08-18 15:11:48 +02:00
Andras Bacsai
1073bbca83 fix(sentinel): clarify restart after settings update
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai
ee843b7230 fix(ui): show server warnings with alert icons 2026-08-18 14:51:40 +02:00
Andras Bacsai
ce2ea0544e feat(auth): improve OAuth buttons and OIDC settings layout
Add provider icons and full-width centered login buttons, organize OIDC fields, and remove hardcoded user IDs from the seeder.
2026-08-18 14:33:21 +02:00
Andras Bacsai
8400e26a3f feat(auth): consolidate OAuth settings into standard authentication page
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai
dd597d1527 fix(backups): support long-running volume backups 2026-08-18 14:10:23 +02:00
Andras Bacsai
ad3e7350c1 Merge remote-tracking branch 'origin/main' 2026-08-18 14:05:22 +02:00
Andras Bacsai
00b7861a8f
fix(services): avoid loading bind-mount file contents (#10960) 2026-08-18 14:05:15 +02:00
Andras Bacsai
288dc98ca7 fix: enforce remote output size limits 2026-08-18 14:03:33 +02:00
Andras Bacsai
253e59e731 Merge remote-tracking branch 'origin/next' into openid-auth-support 2026-08-18 14:03:09 +02:00
Andras Bacsai
b2af1c11a5 fix(logs): clean up deployment log scrolling on teardown 2026-08-18 14:02:48 +02:00
Andras Bacsai
ccd7c59abf Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash 2026-08-18 13:58:16 +02:00