Commit graph

1104 commits

Author SHA1 Message Date
Andras Bacsai
9638012a4f feat(github): add GitHub app management endpoints
- Implemented a new GithubController with endpoints to create GitHub apps, load repositories, and fetch branches for a given repository.
- Added OpenAPI annotations for API documentation.
- Included validation for incoming requests and error handling for various scenarios.
2025-09-22 15:11:30 +02:00
Andras Bacsai
78ae42283c
Merge pull request #5697 from DanielHemmati/feat/manage-db-using-api
[Enhancement]: See and manage DB backups via API
2025-09-22 13:37:37 +02:00
Andras Bacsai
0539dedaa0 feat(databases): enhance backup management API with new endpoints and improved data handling
- Refactored backup configuration retrieval and update logic to use UUIDs instead of IDs.
- Added new endpoint to list backup executions for a specific backup configuration.
- Improved error handling and validation for backup operations.
- Updated API documentation to reflect changes in parameter names and descriptions.
2025-09-22 13:14:45 +02:00
Andras Bacsai
a463a562ec fix(domains): trim whitespace from domains before validation 2025-09-22 12:51:23 +02:00
Andras Bacsai
c69345c643
Merge pull request #6644 from APISentinel/fix/GHSA-927g-56xp-6427
fix: hide sensitive email change fields in team member responses (#GHSA-927g-56xp-6427)
2025-09-22 12:25:03 +02:00
Andras Bacsai
2abcfd2f1c
Merge branch 'next' into feat/manage-db-using-api 2025-09-22 10:18:43 +02:00
Andras Bacsai
f33df13c4e feat(environment): replace is_buildtime_only with is_runtime and is_buildtime flags for environment variables, updating related logic and views 2025-09-18 18:14:54 +02:00
Yihang Wang
844a67a006
fix: hide sensitive email change fields in team member responses 2025-09-18 00:40:09 +08:00
Andras Bacsai
20ad2165e7 feat(environment): introduce 'is_buildtime_only' attribute to environment variables for improved build-time configuration 2025-09-11 17:38:16 +02:00
Andras Bacsai
5b3b4bbc43 refactor(environment): remove 'is_build_time' attribute from environment variable handling across the application to simplify configuration 2025-09-11 16:51:56 +02:00
Andras Bacsai
d9ebf3b142 refactor(webhook): remove Webhook model and related logic; add migrations to drop webhooks and kubernetes tables 2025-09-10 19:35:53 +02:00
Andras Bacsai
48d3b3d263 refactor(deployment): add validation for pull request existence in deployment process to enhance error handling 2025-09-10 14:31:29 +02:00
Andras Bacsai
52312e9de6 refactor(github-webhook): restructure application processing by grouping applications by server for improved deployment handling 2025-09-10 09:30:43 +02:00
Andras Bacsai
a7671ed379 refactor(dns-validation): rename DNS validation functions for consistency and clarity, and remove unused code 2025-09-09 09:00:35 +02:00
Andras Bacsai
8c5c249c6a refactor(webhook): replace direct forceDelete calls with DeleteResourceJob dispatch for application previews 2025-09-05 19:27:59 +02:00
Andras Bacsai
a10e51b2c4 fix(webhook): replace delete with forceDelete for application previews to ensure immediate removal 2025-09-05 17:50:33 +02:00
Andras Bacsai
339118558c feat(settings): add option to restrict PR deployments to repository members and contributors 2025-09-05 14:30:51 +02:00
Andras Bacsai
6e3e80f1c2 fix(api): add custom labels generation for applications with readonly container label setting enabled 2025-08-31 15:40:48 +02:00
Andras Bacsai
75b61a6b00 feat(domains): add force_domain_override option and enhance domain conflict detection responses 2025-08-28 11:21:30 +02:00
Andras Bacsai
643343785a refactor(auth): simplify access control logic in CanAccessTerminal and ServerPolicy by allowing all users to perform actions 2025-08-28 10:48:24 +02:00
Andras Bacsai
63fcc0ebc3 feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled. 2025-08-26 10:27:38 +02:00
Andras Bacsai
74ebaef17b feat(api): enhance IP access control in middleware and settings; support CIDR notation and special case for 0.0.0.0 to allow all IPs 2025-08-26 10:27:38 +02:00
Andras Bacsai
ae79a98d72 feat(auth): add middleware for resource creation authorization 2025-08-26 10:27:38 +02:00
Andras Bacsai
3e1f47a243 feat(auth): introduce resource creation authorization middleware and policies for enhanced access control 2025-08-26 10:27:38 +02:00
Andras Bacsai
b1334a1bc6 feat(auth): implement comprehensive authorization checks across API controllers 2025-08-23 18:51:10 +02:00
Andras Bacsai
8408205955 feat(validation): add custom validation rules for Git repository URLs and branches
- Introduced `ValidGitRepositoryUrl` and `ValidGitBranch` validation rules to ensure safe and valid input for Git repository URLs and branch names.
- Updated relevant Livewire components and API controllers to utilize the new validation rules, enhancing security against command injection and invalid inputs.
- Refactored existing validation logic to improve consistency and maintainability across the application.
2025-08-22 14:38:21 +02:00
Andras Bacsai
38c0641734 feat(validation): centralize validation patterns for names and descriptions
- Introduced `ValidationPatterns` class to standardize validation rules and messages for name and description fields across the application.
- Updated various components and models to utilize the new validation patterns, ensuring consistent sanitization and validation logic.
- Replaced the `HasSafeNameAttribute` trait with `HasSafeStringAttribute` to enhance attribute handling and maintain consistency in name sanitization.
- Enhanced the `CleanupNames` command to align with the new validation rules, allowing for a broader range of valid characters in names.
2025-08-19 12:14:48 +02:00
Andras Bacsai
e958b3761d feat(cleanup): add command for sanitizing name fields across models
- Introduced `CleanupNames` command to sanitize name fields by removing invalid characters, ensuring only letters, numbers, spaces, dashes, underscores, and dots are retained.
- Implemented options for dry run, model-specific cleaning, database backup, and forced execution.
- Updated `Init` command to call the new `cleanup:names` command.
- Enhanced project and environment validation to enforce name sanitization rules.
- Added `HasSafeNameAttribute` trait to relevant models for consistent name handling.
2025-08-19 11:04:23 +02:00
Andras Bacsai
0e014ce213 fix(service api): separate create and update service functionalities 2025-08-17 19:45:12 +02:00
Andras Bacsai
6b0d995033
Merge branch 'next' into fix/service-update-required-params 2025-08-17 18:43:36 +02:00
Andras Bacsai
5ded100300 feat(api): add endpoints for managing environments in projects, including listing, creating, and deleting environments 2025-08-16 18:27:38 +02:00
Andras Bacsai
a32342d126 feat(api): add create_environment endpoint to ProjectController for environment creation in projects 2025-08-15 20:24:32 +02:00
Yanluis Fermin
9b0fd2073a
fix(api): update service upsert to retain name and description values if not set 2025-08-11 12:31:12 -04:00
Yanluis Fermin
4ff7ab7895
Merge branch 'next' into fix/service-update-required-params 2025-08-11 10:23:30 -04:00
🏔️ Peak
2a526c54d5
fix(docker): volumes get delete when stopping a service if Delete Unused Volumes is activated (#6317) 2025-08-04 21:15:56 +02:00
Yanluis Fermin
ad8f442318
refactor(services): update validation rules to be optional 2025-07-30 15:59:35 -04:00
Rado
00225a9eff
fix(webhooks): exclude webhook routes from CSRF protection (#6200) 2025-07-18 19:04:08 +02:00
Andras Bacsai
5bdf2e8481 refactor(previews): move preview domain generation logic to ApplicationPreview model for better encapsulation and consistency across webhook handlers 2025-07-14 19:12:57 +02:00
Andras Bacsai
7fb85314e5 refactor(invitation): rename methods for consistency and enhance invitation deletion logic 2025-06-25 11:45:55 +02:00
peaklabs-dev
2934d4a259
chore(api): update API docs 2025-05-27 15:10:20 +02:00
Nurdism
999a67cbda
feat(api): Add connect_to_docker_network setting to App creation API (#5691) 2025-05-27 15:07:31 +02:00
Dusan
94df6ca51f
feat(api): Add latest query param to Service restart API (#5881) 2025-05-27 15:03:17 +02:00
DanielHemmati
2bf6a9cb2c undo changes to update_by_uuid method 2025-05-22 14:39:36 +02:00
DanielHemmati
be104cd612 feat(api): add endpoint to update backup configuration by UUID and backup ID; modify response to include backup id 2025-05-22 14:36:14 +02:00
Andras Bacsai
6c7b64e96d refactor(applications): remove unused docker compose raw decoding 2025-05-20 14:11:59 +02:00
Andras Bacsai
9c3817ee14 fix(deploy): update resource timestamp handling in deploy_resource method 2025-05-20 11:15:31 +02:00
Andras Bacsai
cee9dfcf52 fix(api): enhance validation for docker_compose_raw in ApplicationsController
- Add checks to ensure docker_compose_raw is provided and correctly base64 encoded.
- Implement detailed error responses for validation failures to improve user feedback.
2025-05-19 13:30:31 +02:00
Andras Bacsai
38d9471de1 fix(api): validate docker_compose_raw input in ApplicationsController
- Ensure docker_compose_raw is provided and base64 encoded before processing.
- Return appropriate validation error messages for missing or incorrectly formatted input.
2025-05-19 13:29:23 +02:00
DanielHemmati
166e5ad227 remove dd 2025-04-25 17:31:04 +02:00
DanielHemmati
b4119fe012 change the order of update 2025-04-25 17:31:04 +02:00
DanielHemmati
71ff19e746 get all of the backups 2025-04-25 17:31:04 +02:00
DanielHemmati
81180af27d add ability to get backup now and get all schedule backup 2025-04-25 17:31:04 +02:00
DanielHemmati
2a06a392d5 Implement backup delete 2025-04-25 17:31:04 +02:00
DanielHemmati
5dff22d345 implement backup config via api 2025-04-25 17:31:04 +02:00
DanielHemmati
da487f609a implmenet Get /database/:uuid/backups api 2025-04-25 17:31:04 +02:00
DanielHemmati
2e0d432886 add backup config info to 2025-04-25 17:29:30 +02:00
Andras Bacsai
78ef80f800 refactor 2025-04-23 13:22:01 +02:00
Andras Bacsai
a7164c4b4d
Merge pull request #5653 from LaurenceJJones/servers_validate_json_code
fix: Add 201 json code to servers validate api response
2025-04-22 20:53:02 +02:00
Andras Bacsai
eee57d4c06 fix(api): handle JSON response in service creation and update methods for improved error handling 2025-04-22 11:16:49 +02:00
Andras Bacsai
1d52df0e4e refactor(api): remove token variable from OpenAPI specifications for clarity 2025-04-22 11:12:30 +02:00
Andras Bacsai
3160b8a5a5 feat(api): enhance OpenAPI specifications with token variable and additional key attributes 2025-04-22 10:44:37 +02:00
Andras Bacsai
4ea00cff31 refactor(applications): remove redundant error response in create_env method 2025-04-22 10:44:30 +02:00
Laurence
3f9228fb80
fix: Add 201 json code to servers validate api response 2025-04-19 12:17:21 +01:00
Andras Bacsai
61cc49d317 fix(DeployController): update request handling to use input method and enhance OpenAPI description for deployment endpoint 2025-04-11 15:37:42 +02:00
Andras Bacsai
d075241289 feat(Deployment): enhance queue_application_deployment to handle existing deployments and return appropriate status messages 2025-04-11 15:27:56 +02:00
Laurence
1e7b15ae77
enhance: Add missing UUID to openapi spec 2025-04-09 17:52:12 +01:00
Andrew Nagy
61c689d807
fix(api): Add back validateDataApplications (#5539) 2025-04-05 13:58:15 +02:00
Meghea Iulian
d9be1191d6
feat(api): update OpenAPI spec for services (#5448) 2025-04-03 16:02:59 +02:00
peaklabs-dev
34699129f4
fix(api): used ssh keys can be deleted 2025-04-03 14:07:11 +02:00
peaklabs-dev
1384de7566
fix(docs): comment out execute for now
- Due to security concerns, execute is disabled, so we need to comment out the code as well to update the docs.
2025-04-01 20:57:20 +02:00
Andras Bacsai
9f67633f2c feat(api): add endpoints for retrieving application logs and deployments 2025-03-31 17:38:54 +02:00
Andras Bacsai
107eb8836b
Merge pull request #5444 from karan-vk/main
Feat(api): Add Pull Request deployment support to WebHooks
2025-03-31 17:34:02 +02:00
Andras Bacsai
ee5c0f0413 fix(deploy): validate team ID before deployment 2025-03-31 17:33:01 +02:00
Andras Bacsai
d8248ba153
Update app/Http/Controllers/Api/DeployController.php
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-03-31 17:23:58 +02:00
Andras Bacsai
99dd516d6b
Update app/Http/Controllers/Api/DeployController.php
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-03-31 17:22:40 +02:00
Andras Bacsai
adc3d95254 fix: only get apps for the current team 2025-03-31 16:52:51 +02:00
__m__
3b04d3df91 feat(deployments): add list application deployments api route 2025-03-31 12:31:17 +01:00
Karan Vijayakumar
f0a1abc55d fix(DeployController): cast 'pr' query parameter to integer
Ensure the 'pr' query parameter is consistently treated as an integer to avoid type-related issues in subsequent logic
2025-03-28 01:50:21 +09:00
Karan Vijayakumar
2947a9ff1d feat(deploy): add pull request ID parameter to deploy endpoint 2025-03-28 01:16:29 +09:00
Andras Bacsai
5e6c112fcc feat(github): enhance repository loading and validation in applications 2025-03-24 14:29:17 +01:00
Andras Bacsai
120facfca3 feat(api): unify service creation endpoint and enhance validation 2025-03-21 11:31:17 +01:00
Meghea Iulian
d08774d083
feat(api): update Services api routes and handlers 2025-03-20 08:28:28 +02:00
Meghea Iulian
d16888b707
feat(api): separate create and one-click routes
Moves previous POST /services to POST /services/one-click.
Adds new POST /services that takes a docker_compose.
2025-03-19 10:22:34 +02:00
Meghea Iulian
5a7ced9438
feat(api): add api to create custom services
Add separate API to create services with custom Docker compose instead
of oneclick services implement as a POST to /services/compose.
This is somewhat similar to /applications/dockercompose but that API is
the only one in ApplicationsController that actually works with the `Service` model.
2025-03-19 06:51:20 +02:00
Meghea Iulian
57f0a7d400 fix(api): use name from request payload
In POST `/applications/dockercompose`  the `name` parameter is required.
The API thou ignores it and generates its own name for the service.
2025-03-14 14:41:05 +02:00
Andras Bacsai
337e12f5c6
Merge pull request #5245 from janwiebe-jump/fix-gitea
Gitea webhook sends action synchronized
2025-03-11 10:21:56 +01:00
Andras Bacsai
96cf9abef8 fix(api): docker compose based apps creationg through api 2025-03-10 11:18:14 +01:00
janwiebe-jump
37553e79b7
Gitea webhook sends action synchronized 2025-02-27 17:25:33 +01:00
Andras Bacsai
dea125f679 refactor(notifications): Improve transactional email settings handling
- Replace `! $type` checks with `blank($type)` for consistency
- Modify email settings configuration to handle null/disabled states
- Ensure proper fallback and configuration of email providers
2025-02-27 12:56:37 +01:00
Andras Bacsai
27e4882d57 feat(core): You can validate compose files with docker compose config
fix(core): labels are now accepted with both compose styles
refactor: remove lots of ray's
2025-02-27 11:29:04 +01:00
Andras Bacsai
65a7610e48
Merge pull request #5029 from IARayan/IARayan-bitbucket-preview-deployment-fix-pullrequest-update
fix: Handle pullrequest:updated for reliable preview deployments
2025-02-04 13:55:16 +01:00
Andras Bacsai
186a3fc75b
Merge pull request #5038 from Vann-Dev/main
feat(api): add applications logs api
2025-02-04 13:33:30 +01:00
Vann
2e652490c1 chore: add openapi response 2025-02-04 02:56:15 +00:00
Vann
11a5ec7c38 feat: add lines query parameter 2025-02-02 13:43:31 +00:00
Vann
7b60d76b77 feat: remove ansi color from log 2025-02-02 10:01:01 +00:00
sistracia
43e8d17197 fix(api): domain check when updating domain 2025-02-02 14:52:05 +07:00
Vann
e7988fc295 feat: container logs 2025-02-01 17:21:38 +00:00
Van-Dev
b1d6167e89
feat: add application api route 2025-02-01 22:09:59 +07:00
Islam Adel
672a5d0bc5
fix: Handle pullrequest:updated for reliable preview deployments
The repo:push payload lacks the destination branch name, using push.changes.0.new.name instead. While sufficient for updates, this causes failures in preview deployments when a PR receives new commits—Coolify looks for git_branch in the applications table but finds the source branch instead.

By also processing pullrequest:updated, we ensure preview deployments remain in sync. However, this event triggers on various actions (e.g., PR title changes, reviewer updates), causing extra redeploys. Since Coolify doesn’t store commit hashes for preview deployments, handling these extra redeploys is our best workaround for Bitbucket.
2025-02-01 12:24:23 +02:00
Andras Bacsai
3bc85b1a8c fix: validate private key through API
feat: able to add base64 encoded private key, not just oneline
2025-01-20 13:59:02 +01:00