Andras Bacsai
63d6d835a9
Align resource creation permissions ( #10799 )
2026-06-29 15:59:46 +02:00
Andras Bacsai
29445bf177
fix: align resource creation permissions
2026-06-29 15:57:17 +02:00
Andras Bacsai
f2d11d9300
fix(railpack): interpolate build-time env variables by sourcing build… ( #10768 )
2026-06-29 11:08:19 +02:00
Andras Bacsai
9f36a8df31
Harden database backup imports ( #10796 )
2026-06-29 10:36:31 +02:00
Andras Bacsai
7d65a4b496
Merge remote-tracking branch 'origin/next' into harden-database-import-files
2026-06-29 10:35:35 +02:00
Andras Bacsai
f4c863bc34
fix(service): correct Convex origin env vars and expose HTTP actions port ( #10646 )
2026-06-29 10:27:55 +02:00
Andras Bacsai
0194a6f104
feat(service): add Inngest one-click service template ( #10612 )
2026-06-29 10:27:37 +02:00
Andras Bacsai
84bf96ce76
chore(service): gitea-runner patch version bump ( #10566 )
2026-06-29 10:27:20 +02:00
Andras Bacsai
2d63d51237
fix: harden database backup imports
2026-06-29 10:27:01 +02:00
Andras Bacsai
9a64b2ea0a
Merge remote-tracking branch 'origin/next' into fix/railpack-buildtime-env-interpolation
2026-06-29 10:20:07 +02:00
Andras Bacsai
2dc34f61ff
fix(railpack): create empty build-time env file
2026-06-29 10:19:22 +02:00
Andras Bacsai
fe9b43be7c
fix(deploy): preserve private key command metadata ( #10795 )
2026-06-29 10:17:57 +02:00
Andras Bacsai
a630532308
fix(deploy): preserve deploy key command metadata
2026-06-29 10:17:09 +02:00
Andras Bacsai
3729b5c074
improve github webhook
2026-06-28 15:25:58 +02:00
Andras Bacsai
1a5b8d3612
fix(deploy): skip logging deploy key commands
2026-06-28 13:15:18 +02:00
Andras Bacsai
dcb235f831
Validate environment variable keys ( #10773 )
2026-06-25 18:34:59 +02:00
Andras Bacsai
87d4744390
Validate environment variable keys
2026-06-25 18:19:58 +02:00
Andras Bacsai
bef94a9ce2
feat(mcp): add per-team server toggle
2026-06-25 11:42:19 +02:00
Aditya Tripathi
623bf89543
fix(railpack): interpolate build-time env variables by sourcing build-time .env
...
Railpack builds forwarded build-time variables inline as `env 'KEY=VALUE'`,
which single-quotes each value and prevents shell interpolation. References
like BETTER_AUTH_URL=$COOLIFY_URL reached the build as the literal string
"$COOLIFY_URL" instead of the resolved URL, breaking builds that validate
their env (e.g. SvelteKit/better-auth).
Wrap the railpack `docker buildx build` invocation with the same
wrap_build_command_with_env_export() helper used by the Dockerfile and
Nixpacks build paths, sourcing the build-time .env file (which writes
COOLIFY_* first and double-quotes normal vars to allow $VAR expansion).
Only buildpack control variables (NIXPACKS_/RAILPACK_), excluded from that
file and never needing interpolation, remain inline. Secret flags are
unchanged and read the interpolated values from the exported environment.
Fixes #10736
2026-06-24 20:11:46 +00:00
Andras Bacsai
3f0a0f7a0d
chore(ci): gate docs reminder comments on "Waiting for Docs PR" label ( #10659 )
2026-06-23 17:24:09 +02:00
Andras Bacsai
f87cacc3f0
chore(deps): bump esbuild, laravel-vite-plugin and vite ( #10665 )
2026-06-23 17:23:25 +02:00
Andras Bacsai
75791339d0
chore(deps): bump symfony/routing from 7.4.12 to 7.4.13 ( #10680 )
2026-06-23 17:23:00 +02:00
Andras Bacsai
f9b16b4158
chore(deps): bump symfony/http-foundation from 7.4.8 to 7.4.13 ( #10683 )
2026-06-23 17:22:40 +02:00
Andras Bacsai
9b6a9c6007
chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 ( #10710 )
2026-06-23 17:22:16 +02:00
Andras Bacsai
fd9293887e
chore(deps): bump laravel/framework from 12.60.2 to 12.61.1 ( #10711 )
2026-06-23 17:21:52 +02:00
Andras Bacsai
ae817a53fa
chore(deps): bump guzzlehttp/guzzle from 7.10.3 to 7.12.1 ( #10738 )
2026-06-23 17:21:27 +02:00
Andras Bacsai
376d9ae86b
chore(deps): bump guzzlehttp/psr7 from 2.10.1 to 2.12.1 ( #10739 )
2026-06-23 17:21:06 +02:00
dependabot[bot]
b3d4446d44
chore(deps): bump guzzlehttp/psr7 from 2.10.1 to 2.12.1
...
Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7 ) from 2.10.1 to 2.12.1.
- [Release notes](https://github.com/guzzle/psr7/releases )
- [Changelog](https://github.com/guzzle/psr7/blob/2.12/CHANGELOG.md )
- [Commits](https://github.com/guzzle/psr7/compare/2.10.1...2.12.1 )
---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
dependency-version: 2.12.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 17:48:00 +00:00
dependabot[bot]
f3458e8943
chore(deps): bump guzzlehttp/guzzle from 7.10.3 to 7.12.1
...
Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle ) from 7.10.3 to 7.12.1.
- [Release notes](https://github.com/guzzle/guzzle/releases )
- [Changelog](https://github.com/guzzle/guzzle/blob/7.12/CHANGELOG.md )
- [Commits](https://github.com/guzzle/guzzle/compare/7.10.3...7.12.1 )
---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
dependency-version: 7.12.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 17:20:13 +00:00
Andras Bacsai
2007d802ef
feat(v5): expose corrosion and firewall diagnostics
2026-06-22 13:52:17 +02:00
Andras Bacsai
4cdd45070d
Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react
2026-06-22 12:14:19 +02:00
Andras Bacsai
e3e91b7741
feat(v5): sync server status and ingress access
...
Add Flux agent token issuing, open and revoke Caddy ingress firewall
rules, broadcast server-scoped application status updates, and update
the dashboard to show unreachable servers as unknown.
2026-06-22 11:56:26 +02:00
Andras Bacsai
75cbcad240
feat(v5): show server stale status and coold logs
2026-06-22 11:14:13 +02:00
Andras Bacsai
0914052b56
fix(v5): rename nginx action to deploy
2026-06-21 22:55:13 +02:00
Andras Bacsai
e543d2b376
feat(v5): deploy nginx applications through Flux
...
Create nginx containers through Flux image and container primitives instead of SSH, and allow selecting a custom nginx image from the dashboard.
2026-06-21 22:39:16 +02:00
Andras Bacsai
ec3e5dc9eb
feat(dev): include firewall capabilities in flux defaults
2026-06-21 21:47:35 +02:00
Andras Bacsai
4061a3844b
feat(v5): sync resource firewall rules via Flux
2026-06-21 21:16:08 +02:00
Andras Bacsai
22e3d6960e
feat(v5): add app configuration inspector
...
Add a sheet-based dashboard inspector with overview, networking, and
advanced tabs for applications.
Switch Caddy proxy actions to the generic Flux ingress apply and stop
payloads.
2026-06-21 18:58:01 +02:00
Andras Bacsai
a42785189e
fix(dev): cache bust mutable coold nightly assets
2026-06-21 18:15:47 +02:00
Andras Bacsai
6069ac0669
fix(dev): rely on default flux dev capabilities
2026-06-21 17:08:09 +02:00
Andras Bacsai
18d0745c63
chore(backlog): remove obsolete local task backlog
2026-06-21 16:55:11 +02:00
Andras Bacsai
4938b65f20
refactor(v5): defer builder bootstrap support
...
Remove active builder flags from dev Lima sync, bootstrap commands,
and server capabilities while documenting the v5 control-plane and
host-agent boundaries.
2026-06-21 16:54:02 +02:00
Andras Bacsai
068a2979fd
feat(v5): use bridged Lima hosts for coold dev
...
Add v5 architecture docs and update dev bootstrap, seeding, and tests to use bridged Lima .local hosts with a container-accessible SSH key.
2026-06-21 15:13:59 +02:00
Andras Bacsai
1c091e9e36
feat(v5): add dashboard ingress routing controls
...
Add V5 dashboard controls and validation for enabling server-backed app ingress, track generic ingress type/status fields, and improve Flux dispatch timeout/error handling.
2026-06-20 23:10:48 +02:00
Andras Bacsai
ad0bcc8a4a
feat(v5): add application ingress routing
2026-06-20 15:08:45 +02:00
Andras Bacsai
86156b6f7a
feat(v5): add mesh app canvas
2026-06-20 09:23:16 +02:00
dependabot[bot]
7f7f33b06d
chore(deps): bump laravel/framework from 12.60.2 to 12.61.1
...
Bumps [laravel/framework](https://github.com/laravel/framework ) from 12.60.2 to 12.61.1.
- [Release notes](https://github.com/laravel/framework/releases )
- [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/framework/compare/v12.60.2...v12.61.1 )
---
updated-dependencies:
- dependency-name: laravel/framework
dependency-version: 12.61.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-06-20 05:29:35 +00:00
dependabot[bot]
3c3e11b841
chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54
...
Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib ) from 3.0.52 to 3.0.54.
- [Release notes](https://github.com/phpseclib/phpseclib/releases )
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md )
- [Commits](https://github.com/phpseclib/phpseclib/compare/3.0.52...3.0.54 )
---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
dependency-version: 3.0.54
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-06-20 04:01:07 +00:00
Andras Bacsai
155b07378c
refactor(v5): remove CLI-specific fields and labels from clusters UI
...
Remove server count badge, last run status, and CLI summary from the
cluster detail panel. Rename "CLI state" to "Cluster state" and update
the add-server dialog to drop "CLI-generated" wording. Add test
assertions covering all removed and renamed elements.
2026-06-19 13:53:10 +02:00
Andras Bacsai
24bbfe07c6
feat(v5): add server bootstrap job with realtime cluster broadcasting
...
- Add V5BootstrapServerJob: SSH into new servers, install coold/WireGuard,
track bootstrap progress via last_bootstrap_action/status/output fields
- Add V5ClusterUpdated event: broadcasts full cluster+servers payload to
team private channel on bootstrap state changes
- Add V5RealtimeTestEvent + RealtimeTest page for WebSocket connectivity testing
- Consolidate 3 dropped migrations into base cluster/server migrations:
WireGuard config, builder CPU quota, status check fields, uuid
- Auto-generate uuid on V5Model create via Schema::hasColumn guard
- Expose currentTeam.id in Inertia shared props
- Add showCluster, realtimeTest, broadcastRealtimeTest controller endpoints
- Add dropdown-menu UI component
2026-06-19 11:44:42 +02:00