chore(ci): use Forgejo build and CDN publishing

.env.production

@@ -15,4 +15,5 @@ ROOT_USERNAME=
 ROOT_USER_EMAIL=
 ROOT_USER_PASSWORD=
 
-REGISTRY_URL=docker.io
+REGISTRY_URL=forgejo.mapledeploy.ca
+CDN_URL=https://updates.mapledeploy.ca

.forgejo/workflows/build.yml

@@ -0,0 +1,109 @@
+name: Build MapleDeploy Coolify Image
+
+on:
+  push:
+    branches: [mapledeploy]
+    paths-ignore:
+      - "*.md"
+      - ".github/**"
+
+env:
+  REGISTRY: forgejo.mapledeploy.ca
+  CDN_STORAGE_ZONE: coolify-update
+  CDN_PULL_ZONE_ID: "5338895"
+  CDN_BASE_URL: https://updates.mapledeploy.ca
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Get version
+        id: version
+        run: |
+          # Match both "'version' => '4.3.12'" and "'version' => env('COOLIFY_VERSION') ?: '4.3.12'"
+          # (greedy .* means the capture takes the last quoted string on the line)
+          BASE_VERSION=$(sed -n "s/.*'version' => .*'\([^']*\)'.*/\1/p" config/constants.php | head -1)
+          if [ -z "$BASE_VERSION" ]; then
+            echo "ERROR: could not extract base version from config/constants.php" >&2
+            exit 1
+          fi
+          TIMESTAMP=$(date -u +%Y%m%d%H%M)
+          VERSION="${BASE_VERSION}.${TIMESTAMP}"
+          HELPER_VERSION=$(sed -n "s/.*'helper_version' => '\([^']*\)'.*/\1/p" config/constants.php)
+          REALTIME_VERSION=$(sed -n "s/.*'realtime_version' => '\([^']*\)'.*/\1/p" config/constants.php)
+          echo "VERSION=${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "HELPER_VERSION=${HELPER_VERSION}" >> "$GITHUB_OUTPUT"
+          echo "REALTIME_VERSION=${REALTIME_VERSION}" >> "$GITHUB_OUTPUT"
+          echo "Building version: ${VERSION} (helper: ${HELPER_VERSION}, realtime: ${REALTIME_VERSION})"
+
+      - name: Login to Forgejo registry
+        run: |
+          echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u ${{ github.repository_owner }} --password-stdin
+
+      - name: Build image
+        run: |
+          DOCKER_BUILDKIT=1 docker build -f docker/production/Dockerfile \
+            --build-arg MAPLEDEPLOY_VERSION=${{ steps.version.outputs.VERSION }} \
+            -t ${{ env.REGISTRY }}/${{ github.repository }}:${{ steps.version.outputs.VERSION }} \
+            -t ${{ env.REGISTRY }}/${{ github.repository }}:latest \
+            .
+
+      - name: Push image
+        run: |
+          docker push ${{ env.REGISTRY }}/${{ github.repository }}:${{ steps.version.outputs.VERSION }}
+          docker push ${{ env.REGISTRY }}/${{ github.repository }}:latest
+
+      - name: Generate versions.json
+        run: |
+          cat > versions.json <<EOF
+          {
+            "coolify": {
+              "v4": {
+                "version": "${{ steps.version.outputs.VERSION }}"
+              },
+              "helper": {
+                "version": "${{ steps.version.outputs.HELPER_VERSION }}"
+              },
+              "realtime": {
+                "version": "${{ steps.version.outputs.REALTIME_VERSION }}"
+              }
+            }
+          }
+          EOF
+          echo "Generated versions.json:"
+          cat versions.json
+
+      - name: Install curl
+        run: apk add --no-cache curl
+
+      - name: Upload artifacts to Bunny CDN
+        run: |
+          STORAGE_URL="https://storage.bunnycdn.com/${{ env.CDN_STORAGE_ZONE }}/coolify"
+
+          upload() {
+            local file="$1"
+            local dest="$2"
+            echo "Uploading ${file} -> ${dest}"
+            curl -fsSL -X PUT "${STORAGE_URL}/${dest}" \
+              -H "AccessKey: ${{ secrets.BUNNY_CDN_STORAGE_KEY }}" \
+              -H "Content-Type: application/octet-stream" \
+              --data-binary @"${file}"
+          }
+
+          upload versions.json versions.json
+          upload scripts/upgrade.sh upgrade.sh
+          upload scripts/upgrade-postgres.sh upgrade-postgres.sh
+          upload docker-compose.yml docker-compose.yml
+          upload docker-compose.prod.yml docker-compose.prod.yml
+          upload .env.production .env.production
+
+          echo "All artifacts uploaded."
+
+      - name: Purge CDN cache
+        run: |
+          curl -fsSL -X POST "https://api.bunny.net/pullzone/${{ env.CDN_PULL_ZONE_ID }}/purgeCache" \
+            -H "AccessKey: ${{ secrets.BUNNY_API_KEY }}" \
+            -H "Content-Type: application/json"
+          echo "CDN cache purged."

.github/workflows/chore-lock-closed-issues-discussions-and-prs.yml

@@ -1,22 +0,0 @@
-name: Lock closed Issues, Discussions, and PRs
-
-on:
-  schedule:
-    - cron: '0 1 * * *'
-
-permissions:
-  issues: write
-  discussions: write
-  pull-requests: write
-
-jobs:
-  lock-threads:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Lock threads after 30 days of inactivity
-        uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          issue-inactive-days: '30'
-          discussion-inactive-days: '30'
-          pr-inactive-days: '30'

.github/workflows/chore-manage-pr-branch.yaml

@@ -1,182 +0,0 @@
-name: Manage PR Branch
-
-# Runs *after* the "PR Quality" workflow finishes. This is required because
-# PR Quality may close a PR that fails its checks, so we must wait for it to
-# complete before deciding whether to retarget the PR's base branch.
-on:
-  workflow_run:
-    workflows: ["PR Quality"]
-    types:
-      - completed
-
-permissions:
-  contents: read
-  pull-requests: write
-
-concurrency:
-  group: manage-pr-branch-${{ github.event.workflow_run.head_sha }}
-  cancel-in-progress: true
-
-jobs:
-  manage-branch:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Retarget PR base branch based on category
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const run = context.payload.workflow_run;
-
-            // Branch routing based on the "Category" section of the PR body.
-            // Bug fixes and one-click service changes ship in patch releases -> main.
-            // Everything else (features, improvements) -> next.
-            const MAIN_BRANCH = 'main';
-            const NEXT_BRANCH = 'next';
-
-            // Maintainers/collaborators are trusted to pick their own base branch.
-            const EXEMPT_ASSOCIATIONS = new Set(['OWNER', 'MEMBER', 'COLLABORATOR']);
-
-            // Resolve the open PR from the triggering run.
-            //
-            // PR Quality runs on `pull_request_target`, so `run.head_sha` is the
-            // *base* branch tip, not the PR head — a commit-based lookup finds
-            // nothing. Instead match on the source branch (`head_branch`) and its
-            // owner (`head_repository.owner.login`), which uniquely identify the PR
-            // via the `owner:branch` head filter. This also works for forked PRs,
-            // where `workflow_run.pull_requests` is empty.
-            const headOwner = run.head_repository?.owner?.login;
-            const headBranch = run.head_branch;
-
-            let prRef;
-            if (headOwner && headBranch) {
-              const { data: openPrs } = await github.rest.pulls.list({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                state: 'open',
-                head: `${headOwner}:${headBranch}`,
-                per_page: 100,
-              });
-              prRef = openPrs[0];
-            }
-
-            // Fallback: same-repo PRs may also be resolvable by commit association.
-            if (!prRef) {
-              const { data: associated } = await github.rest.repos.listPullRequestsAssociatedWithCommit({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                commit_sha: run.head_sha,
-              });
-              prRef = associated.find(pr => pr.state === 'open');
-            }
-
-            if (!prRef) {
-              core.info('No open PR associated with this run (possibly closed by PR Quality). Skipping.');
-              return;
-            }
-
-            // Fetch the full PR to get an up-to-date body, base ref, and state.
-            const { data: pr } = await github.rest.pulls.get({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              pull_number: prRef.number,
-            });
-
-            if (pr.state !== 'open') {
-              core.info(`PR #${pr.number} is not open. Skipping.`);
-              return;
-            }
-
-            // Skip PRs opened by owners/members/collaborators — they choose their own base.
-            if (EXEMPT_ASSOCIATIONS.has(pr.author_association)) {
-              core.info(`PR #${pr.number} author association is ${pr.author_association}. Skipping.`);
-              return;
-            }
-
-            // Skip if a maintainer has already changed the base branch manually.
-            const timeline = await github.paginate(github.rest.issues.listEventsForTimeline, {
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: pr.number,
-              per_page: 100,
-            });
-
-            const baseChanges = timeline.filter(e => e.event === 'base_ref_changed');
-            for (const change of baseChanges) {
-              const actor = change.actor?.login;
-              if (!actor) {
-                continue;
-              }
-              try {
-                const { data: perm } = await github.rest.repos.getCollaboratorPermissionLevel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  username: actor,
-                });
-                // admin/maintain/write => trusted maintainer.
-                if (['admin', 'maintain', 'write'].includes(perm.permission)) {
-                  core.info(`Base branch was changed manually by ${actor} (${perm.permission}). Skipping.`);
-                  return;
-                }
-              } catch (error) {
-                core.info(`Could not resolve permission for ${actor}: ${error.message}`);
-              }
-            }
-
-            // Parse the checked category checkboxes from the PR body.
-            const body = pr.body ?? '';
-            const checked = [];
-            const checkboxRegex = /^\s*-\s*\[([ xX])\]\s*(.+?)\s*$/gm;
-            let match;
-            while ((match = checkboxRegex.exec(body)) !== null) {
-              if (match[1].toLowerCase() === 'x') {
-                checked.push(match[2].toLowerCase());
-              }
-            }
-
-            const includesAny = (labels) => labels.some(label => checked.some(c => c.includes(label)));
-
-            const mainCategories = ['bug fix', 'adding new one click service', 'fixing or updating existing one click service'];
-            const nextCategories = ['improvement', 'new feature'];
-
-            const wantsMain = includesAny(mainCategories);
-            const wantsNext = includesAny(nextCategories);
-
-            if (!wantsMain && !wantsNext) {
-              core.info('No category selected in the PR body. Skipping.');
-              return;
-            }
-
-            // If categories from both groups are checked, prefer next: features and
-            // improvements can only be released from the development branch.
-            const targetBranch = wantsNext ? NEXT_BRANCH : MAIN_BRANCH;
-
-            if (pr.base.ref === targetBranch) {
-              core.info(`PR #${pr.number} already targets ${targetBranch}. Nothing to do.`);
-              return;
-            }
-
-            const previousBranch = pr.base.ref;
-
-            await github.rest.pulls.update({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              pull_number: pr.number,
-              base: targetBranch,
-            });
-
-            await github.rest.issues.createComment({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: pr.number,
-              body: [
-                `Based on the selected category, this PR's base branch was automatically changed from \`${previousBranch}\` to \`${targetBranch}\`.`,
-                '',
-                targetBranch === MAIN_BRANCH
-                  ? 'Bug fixes and one-click service changes target `main`.'
-                  : 'New features and improvements target `next`.',
-                '',
-                'If you believe this is incorrect, please let a maintainer know.',
-              ].join('\n'),
-            });
-
-            core.info(`Retargeted PR #${pr.number}: ${previousBranch} -> ${targetBranch}.`);

.github/workflows/chore-manage-stale-issues-and-prs.yml

@@ -1,32 +0,0 @@
-name: Manage Stale Issues and PRs
-
-on:
-  schedule:
-    - cron: '0 2 * * *'
-
-permissions:
-  issues: write
-  pull-requests: write
-
-jobs:
-  manage-stale:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Manage stale issues and PRs
-        uses: actions/stale@v9
-        id: stale
-        with:
-          stale-issue-message: 'This issue will be automatically closed in a few days if no response is received. Please provide an update with the requested information.'
-          stale-pr-message: 'This pull request requires attention. If no changes or response is received within the next few days, it will be automatically closed. Please update your PR or leave a comment with the requested information.'
-          close-issue-message: 'This issue has been automatically closed due to inactivity.'
-          close-pr-message: 'Thank you for your contribution. Due to inactivity, this PR was automatically closed. If you would like to continue working on this change in the future, feel free to reopen this PR or submit a new one.'
-          days-before-stale: 14
-          days-before-close: 7
-          stale-issue-label: '⏱︎ Stale'
-          stale-pr-label: '⏱︎ Stale'
-          only-labels: '💤 Waiting for feedback, 💤 Waiting for changes'
-          remove-stale-when-updated: true
-          operations-per-run: 100
-          labels-to-remove-when-unstale: '⏱︎ Stale, 💤 Waiting for feedback, 💤 Waiting for changes'
-          close-issue-reason: 'not_planned'
-          exempt-all-milestones: false

.github/workflows/chore-pr-comments.yml

@@ -1,52 +0,0 @@
-name: Add comment based on label
-on:
-  pull_request_target:
-    types:
-      - labeled
-
-permissions:
-  pull-requests: write
-
-jobs:
-  add-comment:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        include:
-          - label: "⚙️ Service"
-            body: |
-              Hi @${{ github.event.pull_request.user.login }}! 👋
-
-              It appears to us that you are either adding a new service or making changes to an existing one.
-              We kindly ask you to also review and update the **Coolify Documentation** to include this new service or it's new configuration needs.
-              This will help ensure that our documentation remains accurate and up-to-date for all users.
-
-              Coolify Docs Repository: https://github.com/coollabsio/coolify-docs
-              How to Contribute a new Service to the Docs: https://coolify.io/docs/get-started/contribute/service#adding-a-new-service-template-to-the-coolify-documentation
-          - label: "🛠️ Feature"
-            body: |
-              Hi @${{ github.event.pull_request.user.login }}! 👋
-
-              It appears to us that you are adding a new feature to Coolify.
-              We kindly ask you to also update the **Coolify Documentation** to include information about this new feature.
-              This will help ensure that our documentation remains accurate and up-to-date for all users.
-
-              Coolify Docs Repository: https://github.com/coollabsio/coolify-docs
-              How to Contribute to the Docs: https://coolify.io/docs/get-started/contribute/documentation
-          # - label: "✨ Enhancement"
-          #  body: |
-          #    It appears to us that you are making an enhancement to Coolify.
-          #    We kindly ask you to also review and update the Coolify Documentation to include information about this enhancement if applicable.
-          #    This will help ensure that our documentation remains accurate and up-to-date for all users.
-    steps:
-      - name: Add comment
-        if: >-
-          (github.event.label.name == matrix.label || github.event.label.name == '📑 Waiting for Docs PR')
-          && contains(github.event.pull_request.labels.*.name, matrix.label)
-          && contains(github.event.pull_request.labels.*.name, '📑 Waiting for Docs PR')
-        run: gh pr comment "$NUMBER" --body "$BODY"
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GH_REPO: ${{ github.repository }}
-          NUMBER: ${{ github.event.pull_request.number }}
-          BODY: ${{ matrix.body }}

.github/workflows/claude.yml

@@ -1,37 +0,0 @@
-name: Claude Code
-
-on:
-  issue_comment:
-    types: [created]
-  pull_request_review_comment:
-    types: [created]
-  issues:
-    types: [opened, assigned]
-  pull_request_review:
-    types: [submitted]
-
-jobs:
-  claude:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-      issues: write
-      id-token: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code
-        id: claude
-        uses: anthropics/claude-code-action@v1
-        with:
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          claude_args: '--model opus'

.github/workflows/cleanup-ghcr-untagged.yml

@@ -1,22 +0,0 @@
-name: Cleanup Untagged GHCR Images
-
-on:
-  workflow_dispatch:
-
-permissions:
-  packages: write
-
-jobs:
-  cleanup-all-packages:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        package: ['coolify', 'coolify-helper', 'coolify-realtime', 'coolify-testing-host']
-    steps:
-      - name: Delete untagged ${{ matrix.package }} images
-        uses: actions/delete-package-versions@v5
-        with:
-          package-name: ${{ matrix.package }}
-          package-type: 'container'
-          min-versions-to-keep: 0
-          delete-only-untagged-versions: 'true'

.github/workflows/coolify-helper-next.yml

@@ -1,117 +0,0 @@
-name: Coolify Helper Image Development
-
-on:
-  push:
-    branches: [ "next" ]
-    paths:
-      - .github/workflows/coolify-helper-next.yml
-      - docker/coolify-helper/Dockerfile
-
-permissions:
-  contents: read
-  packages: write
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: "coollabsio/coolify-helper"
-
-jobs:
-  build-push:
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getHelperVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Build and Push Image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/coolify-helper/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: |
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-${{ matrix.arch }}
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-${{ matrix.arch }}
-          labels: |
-            coolify.managed=true
-
-  merge-manifest:
-    runs-on: ubuntu-24.04
-    needs: build-push
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getHelperVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Create & publish manifest on ${{ env.GITHUB_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-amd64 \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-aarch64 \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:next
-
-      - name: Create & publish manifest on ${{ env.DOCKER_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-amd64 \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-aarch64 \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:next
-
-      - uses: sarisia/actions-status-discord@v1
-        if: always()
-        with:
-          webhook: ${{ secrets.DISCORD_WEBHOOK_DEV_RELEASE_CHANNEL  }}
-

.github/workflows/coolify-helper.yml

@@ -1,161 +0,0 @@
-name: Coolify Helper Image
-
-on:
-  workflow_dispatch:
-  push:
-    branches: [ "main" ]
-    paths:
-      - .github/workflows/coolify-helper.yml
-      - docker/coolify-helper/Dockerfile
-
-permissions:
-  contents: read
-  packages: write
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: "coollabsio/coolify-helper"
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  check-version:
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Ensure version is not published
-        run: |
-          BASE_VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getHelperVersion.php)
-          VERSION="${BASE_VERSION}"
-          for registry in "${DOCKER_REGISTRY}" "${GITHUB_REGISTRY}"; do
-            IMAGE="${registry}/${IMAGE_NAME}:${VERSION}"
-            if output=$(docker buildx imagetools inspect "$IMAGE" 2>&1); then
-              echo "::error::Version $VERSION already exists in $registry"
-              exit 1
-            fi
-            if ! grep -Eqi 'manifest unknown|not found|no such manifest' <<< "$output"; then
-              echo "::error::Could not verify $IMAGE: $output"
-              exit 1
-            fi
-          done
-          echo "Version $VERSION is available in both registries"
-
-  build-push:
-    needs: check-version
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getHelperVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Build and Push Image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/coolify-helper/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: |
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-${{ matrix.arch }}
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-${{ matrix.arch }}
-          labels: |
-            coolify.managed=true
-  merge-manifest:
-    runs-on: ubuntu-24.04
-    needs: build-push
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getHelperVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Create & publish manifest on ${{ env.GITHUB_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-amd64 \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-aarch64 \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }} \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - name: Create & publish manifest on ${{ env.DOCKER_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-amd64 \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-aarch64 \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }} \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - uses: sarisia/actions-status-discord@v1
-        if: always()
-        with:
-          webhook: ${{ secrets.DISCORD_WEBHOOK_PROD_RELEASE_CHANNEL  }}

.github/workflows/coolify-next-build.yml

@@ -1,152 +0,0 @@
-name: Build Coolify Next
-
-on:
-  push:
-    branches: [next]
-    paths-ignore:
-      - .github/workflows/coolify-helper.yml
-      - .github/workflows/coolify-helper-next.yml
-      - .github/workflows/coolify-realtime.yml
-      - .github/workflows/coolify-realtime-next.yml
-      - .github/workflows/pr-quality.yaml
-      - docker/coolify-helper/Dockerfile
-      - docker/coolify-realtime/Dockerfile
-      - docker/testing-host/Dockerfile
-      - templates/**
-      - CHANGELOG.md
-
-permissions:
-  contents: read
-  packages: write
-
-concurrency:
-  group: coolify-next-build
-  cancel-in-progress: false
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: coollabsio/coolify
-
-jobs:
-  prepare:
-    runs-on: ubuntu-24.04
-    outputs:
-      rc_version: ${{ steps.version.outputs.rc_version }}
-      short_sha: ${{ steps.version.outputs.short_sha }}
-      version: ${{ steps.version.outputs.version }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Resolve next version
-        id: version
-        run: |
-          RC_VERSION=$(jq -r '.coolify.nightly.version' versions.json)
-          if [[ ! "${RC_VERSION}" =~ ^[0-9]+\.[0-9]+-rc\.[0-9]+$ ]]; then
-            echo "Invalid next RC version: ${RC_VERSION}"
-            exit 1
-          fi
-
-          SHORT_SHA="${GITHUB_SHA::7}"
-          VERSION="${RC_VERSION}.${SHORT_SHA}"
-          echo "rc_version=${RC_VERSION}" >> "$GITHUB_OUTPUT"
-          echo "short_sha=${SHORT_SHA}" >> "$GITHUB_OUTPUT"
-          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-
-  build:
-    needs: prepare
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Build and push next image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/production/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          build-args: |
-            COOLIFY_VERSION=${{ needs.prepare.outputs.version }}
-          tags: |
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:next-build-${{ needs.prepare.outputs.short_sha }}-${{ matrix.arch }}
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:next-build-${{ needs.prepare.outputs.short_sha }}-${{ matrix.arch }}
-
-  publish:
-    needs: [prepare, build]
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Publish next manifest on ${{ env.GITHUB_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.GITHUB_REGISTRY }}
-          SHA: ${{ needs.prepare.outputs.short_sha }}
-          VERSION: ${{ needs.prepare.outputs.version }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          SOURCE="next-build-${SHA}"
-          docker buildx imagetools create \
-            "${IMAGE}:${SOURCE}-amd64" \
-            "${IMAGE}:${SOURCE}-aarch64" \
-            --tag "${IMAGE}:sha-${SHA}" \
-            --tag "${IMAGE}:${VERSION}" \
-            --tag "${IMAGE}:next"
-
-      - name: Publish next manifest on ${{ env.DOCKER_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.DOCKER_REGISTRY }}
-          SHA: ${{ needs.prepare.outputs.short_sha }}
-          VERSION: ${{ needs.prepare.outputs.version }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          SOURCE="next-build-${SHA}"
-          docker buildx imagetools create \
-            "${IMAGE}:${SOURCE}-amd64" \
-            "${IMAGE}:${SOURCE}-aarch64" \
-            --tag "${IMAGE}:sha-${SHA}" \
-            --tag "${IMAGE}:${VERSION}" \
-            --tag "${IMAGE}:next"

.github/workflows/coolify-rc-release.yml

@@ -1,304 +0,0 @@
-name: Release Coolify RC
-run-name: ${{ inputs.tag }}
-
-on:
-  workflow_dispatch:
-    inputs:
-      tag:
-        description: Existing draft prerelease tag (for example, v4.4-rc.1)
-        required: true
-        type: string
-
-permissions: {}
-
-concurrency:
-  group: coolify-rc-release
-  cancel-in-progress: false
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: coollabsio/coolify
-
-jobs:
-  validate:
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-    outputs:
-      release_id: ${{ steps.draft.outputs.release_id }}
-      version: ${{ steps.version.outputs.version }}
-    steps:
-      - name: Reject releases outside next
-        if: ${{ github.ref != 'refs/heads/next' }}
-        run: |
-          echo "RC releases must run from the next branch, not ${{ github.ref }}."
-          exit 1
-
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Validate version
-        id: version
-        env:
-          TAG_NAME: ${{ inputs.tag }}
-        run: |
-          if [[ ! "${TAG_NAME}" =~ ^v[0-9]+\.[0-9]+-rc\.[0-9]+$ ]]; then
-            echo "Unsupported RC tag: ${TAG_NAME}"
-            exit 1
-          fi
-
-          VERSION="${TAG_NAME#v}"
-          CONFIG_VERSION=$(jq -r '.coolify.nightly.version' versions.json)
-          if [[ "${CONFIG_VERSION}" != "${VERSION}" ]]; then
-            echo "RC tag ${VERSION} does not match nightly version ${CONFIG_VERSION}."
-            exit 1
-          fi
-
-          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-
-      - name: Validate and pin draft prerelease
-        id: draft
-        uses: actions/github-script@v8
-        env:
-          TAG_NAME: ${{ inputs.tag }}
-        with:
-          script: |
-            const releases = await github.paginate(github.rest.repos.listReleases, {
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              per_page: 100,
-            });
-            const release = releases.find((candidate) => candidate.tag_name === process.env.TAG_NAME);
-
-            if (!release) {
-              core.setFailed(`Create a draft prerelease for ${process.env.TAG_NAME} before running this workflow.`);
-              return;
-            }
-            if (!release.draft) {
-              core.setFailed(`Release ${process.env.TAG_NAME} must still be a draft.`);
-              return;
-            }
-            if (!release.prerelease) {
-              core.setFailed(`RC release ${process.env.TAG_NAME} must be marked as a prerelease.`);
-              return;
-            }
-            if (!release.body?.trim()) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} must contain reviewed release notes.`);
-              return;
-            }
-
-            try {
-              await github.rest.git.getRef({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                ref: `tags/${process.env.TAG_NAME}`,
-              });
-              core.setFailed(`Git tag ${process.env.TAG_NAME} already exists.`);
-              return;
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-
-            await github.rest.repos.updateRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: release.id,
-              tag_name: process.env.TAG_NAME,
-              target_commitish: context.sha,
-              prerelease: true,
-            });
-            core.setOutput('release_id', release.id);
-
-  build:
-    needs: validate
-    permissions:
-      contents: read
-      packages: write
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Build and push RC image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/production/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          build-args: |
-            COOLIFY_VERSION=${{ needs.validate.outputs.version }}
-          tags: |
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:rc-release-${{ needs.validate.outputs.version }}-${{ github.sha }}-${{ matrix.arch }}
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:rc-release-${{ needs.validate.outputs.version }}-${{ github.sha }}-${{ matrix.arch }}
-
-  revalidate:
-    needs: [validate, build]
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-    steps:
-      - name: Revalidate draft prerelease
-        uses: actions/github-script@v8
-        env:
-          RELEASE_ID: ${{ needs.validate.outputs.release_id }}
-          TAG_NAME: ${{ inputs.tag }}
-        with:
-          script: |
-            const releaseId = Number(process.env.RELEASE_ID);
-            const { data: release } = await github.rest.repos.getRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: releaseId,
-            });
-
-            if (release.tag_name !== process.env.TAG_NAME || !release.draft || !release.prerelease) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} changed while the images were building.`);
-              return;
-            }
-            if (!release.body?.trim()) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} no longer contains release notes.`);
-              return;
-            }
-            if (release.target_commitish !== context.sha) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} no longer targets ${context.sha}.`);
-              return;
-            }
-
-            try {
-              await github.rest.git.getRef({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                ref: `tags/${process.env.TAG_NAME}`,
-              });
-              core.setFailed(`Git tag ${process.env.TAG_NAME} was created while the images were building.`);
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-
-  publish:
-    needs: [validate, build, revalidate]
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-      packages: write
-    steps:
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Publish RC and next on ${{ env.GITHUB_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.GITHUB_REGISTRY }}
-          VERSION: ${{ needs.validate.outputs.version }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          SOURCE="rc-release-${VERSION}-${GITHUB_SHA}"
-          docker buildx imagetools create \
-            "${IMAGE}:${SOURCE}-amd64" \
-            "${IMAGE}:${SOURCE}-aarch64" \
-            --tag "${IMAGE}:${VERSION}" \
-            --tag "${IMAGE}:next"
-
-      - name: Publish RC and next on ${{ env.DOCKER_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.DOCKER_REGISTRY }}
-          VERSION: ${{ needs.validate.outputs.version }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          SOURCE="rc-release-${VERSION}-${GITHUB_SHA}"
-          docker buildx imagetools create \
-            "${IMAGE}:${SOURCE}-amd64" \
-            "${IMAGE}:${SOURCE}-aarch64" \
-            --tag "${IMAGE}:${VERSION}" \
-            --tag "${IMAGE}:next"
-
-      - name: Publish reviewed draft prerelease
-        uses: actions/github-script@v8
-        env:
-          RELEASE_ID: ${{ needs.validate.outputs.release_id }}
-          TAG_NAME: ${{ inputs.tag }}
-        with:
-          script: |
-            const releaseId = Number(process.env.RELEASE_ID);
-            const { data: release } = await github.rest.repos.getRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: releaseId,
-            });
-
-            if (release.tag_name !== process.env.TAG_NAME || !release.draft || !release.prerelease) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} changed while the images were building.`);
-              return;
-            }
-            if (!release.body?.trim()) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} no longer contains release notes.`);
-              return;
-            }
-            if (release.target_commitish !== context.sha) {
-              core.setFailed(`Draft prerelease ${process.env.TAG_NAME} no longer targets ${context.sha}.`);
-              return;
-            }
-
-            try {
-              await github.rest.git.getRef({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                ref: `tags/${process.env.TAG_NAME}`,
-              });
-              core.setFailed(`Git tag ${process.env.TAG_NAME} was created while the images were building.`);
-              return;
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-
-            await github.rest.repos.updateRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: Number(process.env.RELEASE_ID),
-              tag_name: process.env.TAG_NAME,
-              target_commitish: context.sha,
-              prerelease: true,
-              draft: false,
-            });

.github/workflows/coolify-realtime-next.yml

@@ -1,120 +0,0 @@
-name: Coolify Realtime Development
-
-on:
-  push:
-    branches: [ "next" ]
-    paths:
-      - .github/workflows/coolify-realtime-next.yml
-      - docker/coolify-realtime/Dockerfile
-      - docker/coolify-realtime/terminal-server.js
-      - docker/coolify-realtime/package.json
-      - docker/coolify-realtime/package-lock.json
-      - docker/coolify-realtime/soketi-entrypoint.sh
-
-permissions:
-  contents: read
-  packages: write
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: "coollabsio/coolify-realtime"
-
-jobs:
-  build-push:
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getRealtimeVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Build and Push Image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/coolify-realtime/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: |
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-${{ matrix.arch }}
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-${{ matrix.arch }}
-          labels: |
-            coolify.managed=true
-
-  merge-manifest:
-    runs-on: ubuntu-24.04
-    needs: build-push
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getRealtimeVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Create & publish manifest on ${{ env.GITHUB_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-amd64 \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-aarch64 \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:next
-
-      - name: Create & publish manifest on ${{ env.DOCKER_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-amd64 \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next-aarch64 \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-next \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:next
-
-      - uses: sarisia/actions-status-discord@v1
-        if: always()
-        with:
-          webhook: ${{ secrets.DISCORD_WEBHOOK_DEV_RELEASE_CHANNEL  }}

.github/workflows/coolify-realtime.yml

@@ -1,161 +0,0 @@
-name: Coolify Realtime
-
-on:
-  push:
-    branches: [ "main" ]
-    paths:
-      - .github/workflows/coolify-realtime.yml
-      - docker/coolify-realtime/**
-
-permissions:
-  contents: read
-  packages: write
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: "coollabsio/coolify-realtime"
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  check-version:
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Ensure version is not published
-        run: |
-          BASE_VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getRealtimeVersion.php)
-          VERSION="${BASE_VERSION}"
-          for registry in "${DOCKER_REGISTRY}" "${GITHUB_REGISTRY}"; do
-            IMAGE="${registry}/${IMAGE_NAME}:${VERSION}"
-            if output=$(docker buildx imagetools inspect "$IMAGE" 2>&1); then
-              echo "::error::Version $VERSION already exists in $registry"
-              exit 1
-            fi
-            if ! grep -Eqi 'manifest unknown|not found|no such manifest' <<< "$output"; then
-              echo "::error::Could not verify $IMAGE: $output"
-              exit 1
-            fi
-          done
-          echo "Version $VERSION is available in both registries"
-
-  build-push:
-    needs: check-version
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getRealtimeVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Build and Push Image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/coolify-realtime/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: |
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-${{ matrix.arch }}
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-${{ matrix.arch }}
-          labels: |
-            coolify.managed=true
-
-  merge-manifest:
-    runs-on: ubuntu-24.04
-    needs: build-push
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Get Version
-        id: version
-        run: |
-          echo "VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getRealtimeVersion.php)"|xargs >> $GITHUB_OUTPUT
-
-      - name: Create & publish manifest on ${{ env.GITHUB_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-amd64 \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-aarch64 \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }} \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - name: Create & publish manifest on ${{ env.DOCKER_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-amd64 \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}-aarch64 \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }} \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - uses: sarisia/actions-status-discord@v1
-        if: always()
-        with:
-          webhook: ${{ secrets.DISCORD_WEBHOOK_PROD_RELEASE_CHANNEL  }}

.github/workflows/coolify-release.yml

@@ -1,259 +0,0 @@
-name: Release Coolify Stable
-run-name: ${{ inputs.tag }}
-
-on:
-  workflow_dispatch:
-    inputs:
-      tag:
-        description: Existing draft release tag (for example, v4.3.1)
-        required: true
-        type: string
-
-permissions: {}
-
-concurrency:
-  group: coolify-fix-release
-  cancel-in-progress: false
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: coollabsio/coolify
-
-jobs:
-  validate:
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-    outputs:
-      release_id: ${{ steps.draft.outputs.release_id }}
-      version: ${{ steps.version.outputs.version }}
-    steps:
-      - name: Reject releases outside the production branch
-        if: ${{ github.ref_name != 'main' }}
-        run: |
-          echo "Stable releases must run from main, not ${{ github.ref_name }}."
-          exit 1
-
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Validate version
-        id: version
-        env:
-          TAG_NAME: ${{ inputs.tag }}
-        run: |
-          if [[ ! "${TAG_NAME}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
-            echo "Unsupported fix release tag: ${TAG_NAME}"
-            exit 1
-          fi
-
-          VERSION="${TAG_NAME#v}"
-          CONFIG_VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getVersion.php)
-
-          if [[ "${CONFIG_VERSION}" != "${VERSION}" ]]; then
-            echo "Release tag ${VERSION} does not match config version ${CONFIG_VERSION}."
-            exit 1
-          fi
-
-          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-
-      - name: Validate and pin draft release
-        id: draft
-        uses: actions/github-script@v8
-        env:
-          TAG_NAME: ${{ inputs.tag }}
-        with:
-          script: |
-            const releases = await github.paginate(github.rest.repos.listReleases, {
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              per_page: 100,
-            });
-            const release = releases.find((candidate) => candidate.tag_name === process.env.TAG_NAME);
-
-            if (!release) {
-              core.setFailed(`Create a draft release for ${process.env.TAG_NAME} before running this workflow.`);
-              return;
-            }
-            if (!release.draft) {
-              core.setFailed(`Release ${process.env.TAG_NAME} must still be a draft.`);
-              return;
-            }
-            if (release.prerelease) {
-              core.setFailed(`Fix release ${process.env.TAG_NAME} cannot be marked as a prerelease.`);
-              return;
-            }
-            if (!release.body?.trim()) {
-              core.setFailed(`Draft release ${process.env.TAG_NAME} must contain reviewed release notes.`);
-              return;
-            }
-
-            try {
-              await github.rest.git.getRef({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                ref: `tags/${process.env.TAG_NAME}`,
-              });
-              core.setFailed(`Git tag ${process.env.TAG_NAME} already exists.`);
-              return;
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-
-            await github.rest.repos.updateRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: release.id,
-              tag_name: process.env.TAG_NAME,
-              target_commitish: context.sha,
-            });
-            core.setOutput('release_id', release.id);
-
-  build:
-    needs: validate
-    permissions:
-      contents: read
-      packages: write
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Build and push release image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/production/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          build-args: |
-            COOLIFY_VERSION=${{ needs.validate.outputs.version }}
-          tags: |
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:release-${{ needs.validate.outputs.version }}-${{ github.sha }}-${{ matrix.arch }}
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:release-${{ needs.validate.outputs.version }}-${{ github.sha }}-${{ matrix.arch }}
-
-  publish:
-    needs: [validate, build]
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-      packages: write
-    steps:
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Publish version and latest on ${{ env.GITHUB_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.GITHUB_REGISTRY }}
-          VERSION: ${{ needs.validate.outputs.version }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          SOURCE="release-${VERSION}-${GITHUB_SHA}"
-          docker buildx imagetools create \
-            "${IMAGE}:${SOURCE}-amd64" \
-            "${IMAGE}:${SOURCE}-aarch64" \
-            --tag "${IMAGE}:${VERSION}" \
-            --tag "${IMAGE}:latest"
-
-      - name: Publish version and latest on ${{ env.DOCKER_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.DOCKER_REGISTRY }}
-          VERSION: ${{ needs.validate.outputs.version }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          SOURCE="release-${VERSION}-${GITHUB_SHA}"
-          docker buildx imagetools create \
-            "${IMAGE}:${SOURCE}-amd64" \
-            "${IMAGE}:${SOURCE}-aarch64" \
-            --tag "${IMAGE}:${VERSION}" \
-            --tag "${IMAGE}:latest"
-
-      - name: Publish reviewed draft release
-        uses: actions/github-script@v8
-        env:
-          RELEASE_ID: ${{ needs.validate.outputs.release_id }}
-          TAG_NAME: ${{ inputs.tag }}
-        with:
-          script: |
-            const releaseId = Number(process.env.RELEASE_ID);
-            const { data: release } = await github.rest.repos.getRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: releaseId,
-            });
-
-            if (release.tag_name !== process.env.TAG_NAME || !release.draft || release.prerelease) {
-              core.setFailed(`Draft release ${process.env.TAG_NAME} changed while the images were building.`);
-              return;
-            }
-            if (!release.body?.trim()) {
-              core.setFailed(`Draft release ${process.env.TAG_NAME} no longer contains release notes.`);
-              return;
-            }
-            if (release.target_commitish !== context.sha) {
-              core.setFailed(`Draft release ${process.env.TAG_NAME} no longer targets ${context.sha}.`);
-              return;
-            }
-
-            try {
-              await github.rest.git.getRef({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                ref: `tags/${process.env.TAG_NAME}`,
-              });
-              core.setFailed(`Git tag ${process.env.TAG_NAME} was created while the images were building.`);
-              return;
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-
-            await github.rest.repos.updateRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              release_id: Number(process.env.RELEASE_ID),
-              tag_name: process.env.TAG_NAME,
-              target_commitish: context.sha,
-              draft: false,
-            });

.github/workflows/coolify-sha-build.yml

@@ -1,109 +0,0 @@
-name: Build Coolify (SHA)
-
-on:
-  push:
-    branches: ["main"]
-
-permissions:
-  contents: read
-  packages: write
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: "coollabsio/coolify"
-
-jobs:
-  build-push:
-    outputs:
-      short_sha: ${{ steps.version.outputs.short_sha }}
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Resolve internal version
-        id: version
-        run: |
-          BASE_VERSION=$(docker run --rm -v "$(pwd):/app" -w /app php:8.2-alpine3.16 php bootstrap/getVersion.php)
-          echo "version=${BASE_VERSION}-dev.${GITHUB_SHA::9}" >> "$GITHUB_OUTPUT"
-          echo "short_sha=${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Build and Push Image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/production/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          build-args: |
-            COOLIFY_VERSION=${{ steps.version.outputs.version }}
-          tags: |
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:sha-${{ steps.version.outputs.short_sha }}-${{ matrix.arch }}
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:sha-${{ steps.version.outputs.short_sha }}-${{ matrix.arch }}
-
-  merge-manifest:
-    runs-on: ubuntu-24.04
-    needs: build-push
-    steps:
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Create & publish manifest on ${{ env.GITHUB_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.GITHUB_REGISTRY }}
-          SHA: ${{ needs.build-push.outputs.short_sha }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          docker buildx imagetools create \
-            "${IMAGE}:sha-${SHA}-amd64" \
-            "${IMAGE}:sha-${SHA}-aarch64" \
-            --tag "${IMAGE}:sha-${SHA}"
-
-      - name: Create & publish manifest on ${{ env.DOCKER_REGISTRY }}
-        env:
-          REGISTRY: ${{ env.DOCKER_REGISTRY }}
-          SHA: ${{ needs.build-push.outputs.short_sha }}
-        run: |
-          IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          docker buildx imagetools create \
-            "${IMAGE}:sha-${SHA}-amd64" \
-            "${IMAGE}:sha-${SHA}-aarch64" \
-            --tag "${IMAGE}:sha-${SHA}"

.github/workflows/coolify-testing-host.yml

@@ -1,104 +0,0 @@
-name: Coolify Testing Host
-
-on:
-  push:
-    branches: [ "next" ]
-    paths:
-      - .github/workflows/coolify-testing-host.yml
-      - docker/testing-host/Dockerfile
-
-permissions:
-  contents: read
-  packages: write
-
-env:
-  GITHUB_REGISTRY: ghcr.io
-  DOCKER_REGISTRY: docker.io
-  IMAGE_NAME: "coollabsio/coolify-testing-host"
-
-jobs:
-  build-push:
-    strategy:
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-24.04
-          - arch: aarch64
-            platform: linux/aarch64
-            runner: ubuntu-24.04-arm
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Build and Push Image (${{ matrix.arch }})
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: docker/testing-host/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: |
-            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:latest-${{ matrix.arch }}
-            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:latest-${{ matrix.arch }}
-          labels: |
-            coolify.managed=true
-
-  merge-manifest:
-    runs-on: ubuntu-24.04
-    needs: build-push
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          persist-credentials: false
-
-      - uses: docker/setup-buildx-action@v3
-
-      - name: Login to ${{ env.GITHUB_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.GITHUB_REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN  }}
-
-      - name: Login to ${{ env.DOCKER_REGISTRY }}
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Create & publish manifest on ${{ env.GITHUB_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:latest-amd64 \
-          ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:latest-aarch64 \
-          --tag ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - name: Create & publish manifest on ${{ env.DOCKER_REGISTRY }}
-        run: |
-          docker buildx imagetools create \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:latest-amd64 \
-          ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:latest-aarch64 \
-          --tag ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - uses: sarisia/actions-status-discord@v1
-        if: always()
-        with:
-          webhook: ${{ secrets.DISCORD_WEBHOOK_DEV_RELEASE_CHANNEL  }}

.github/workflows/generate-changelog.yml

@@ -1,42 +0,0 @@
-name: Generate Changelog
-
-on:
-  push:
-    branches: [ main ]
-    paths-ignore:
-      - .github/workflows/coolify-helper.yml
-      - .github/workflows/coolify-helper-next.yml
-      - .github/workflows/coolify-realtime.yml
-      - .github/workflows/coolify-realtime-next.yml
-      - .github/workflows/pr-quality.yaml
-  workflow_dispatch:
-
-permissions:
-  contents: write
-
-jobs:
-  changelog:
-    name: Generate changelog
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Generate changelog
-        uses: orhun/git-cliff-action@v4
-        with:
-          config: cliff.toml
-          args: --verbose
-        env:
-          OUTPUT: CHANGELOG.md
-          GITHUB_REPO: ${{ github.repository }}
-
-      - name: Commit
-        run: |
-          git config user.name 'github-actions[bot]'
-          git config user.email 'github-actions[bot]@users.noreply.github.com'
-          git add CHANGELOG.md
-          git commit -m "docs: update changelog"
-          git push https://${{ secrets.GITHUB_TOKEN }}@github.com/${GITHUB_REPOSITORY}.git HEAD:${GITHUB_REF_NAME}

.github/workflows/pr-quality.yaml

@@ -1,108 +0,0 @@
-name: PR Quality
-
-permissions:
-  contents: read
-  issues: read
-  pull-requests: write
-
-on:
-  pull_request_target:
-    types: [opened, reopened]
-
-jobs:
-  pr-quality:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: peakoss/anti-slop@v0
-        with:
-          # General Settings
-          max-failures: 4
-
-          # PR Branch Checks
-          allowed-target-branches: ""
-          blocked-target-branches: ""
-          allowed-source-branches: ""
-          blocked-source-branches: ""
-
-          # PR Quality Checks
-          max-negative-reactions: 0
-          require-maintainer-can-modify: true
-
-          # PR Title Checks
-          require-conventional-title: true
-
-          # PR Description Checks
-          require-description: true
-          max-description-length: 2500
-          max-emoji-count: 2
-          max-code-references: 5
-          require-linked-issue: false
-          blocked-terms:  |
-            STRAWBERRY
-            🤖 Generated with Claude Code
-            Generated with Claude Code
-          blocked-issue-numbers: 8154
-
-          # PR Template Checks
-          require-pr-template: true
-          strict-pr-template-sections: "Contributor Agreement"
-          optional-pr-template-sections: "Issues,Preview"
-          max-additional-pr-template-sections: 2
-
-          # Commit Message Checks
-          max-commit-message-length: 500
-          require-conventional-commits: false
-          require-commit-author-match: true
-          blocked-commit-authors: ""
-
-          # File Checks
-          allowed-file-extensions: ""
-          allowed-paths: ""
-          blocked-paths: |
-            README.md
-            SECURITY.md
-            LICENSE
-            CODE_OF_CONDUCT.md
-            templates/service-templates-latest.json
-            templates/service-templates.json
-          require-final-newline: true
-          max-added-comments: 10
-
-          # User Checks
-          detect-spam-usernames: true
-          min-account-age: 30
-          max-daily-forks: 7
-          min-profile-completeness: 4
-
-          # Merge Checks
-          min-repo-merged-prs: 0
-          min-repo-merge-ratio: 0
-          min-global-merge-ratio: 30
-          global-merge-ratio-exclude-own: false
-
-          # Exemptions
-          exempt-draft-prs: false
-          exempt-bots: |
-            actions-user
-            dependabot[bot]
-            renovate[bot]
-            github-actions[bot]
-          exempt-users: ""
-          exempt-author-association: "OWNER,MEMBER,COLLABORATOR"
-          exempt-label: "quality/exempt"
-          exempt-pr-label: ""
-          exempt-all-milestones: false
-          exempt-all-pr-milestones: false
-          exempt-milestones: ""
-          exempt-pr-milestones: ""
-
-          # PR Success Actions
-          success-add-pr-labels: ""
-
-          # PR Failure Actions
-          failure-remove-pr-labels: ""
-          failure-remove-all-pr-labels: true
-          failure-add-pr-labels: "quality/rejected"
-          failure-pr-message: "This PR did not pass quality checks so it will be closed. If you believe this is a mistake please let us know."
-          close-pr: true
-          lock-pr: false

.github/workflows/sync-main-to-next.yml

@@ -1,62 +0,0 @@
-name: Sync main to next
-
-on:
-  push:
-    branches: [main]
-  workflow_dispatch:
-
-permissions:
-  contents: write
-  pull-requests: write
-
-concurrency:
-  group: sync-main-to-next
-  cancel-in-progress: false
-
-jobs:
-  sync:
-    name: Merge main into next
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout next
-        uses: actions/checkout@v5
-        with:
-          ref: next
-          fetch-depth: 0
-
-      - name: Merge main into next
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          git config user.name 'github-actions[bot]'
-          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
-          git fetch origin main next
-
-          if git merge --no-edit origin/main; then
-            git push origin HEAD:next
-            exit 0
-          fi
-
-          conflicts=$(git diff --name-only --diff-filter=U)
-          git merge --abort
-
-          if [ -z "$conflicts" ]; then
-            echo 'The merge failed without conflicts, so no pull request was created.'
-            exit 1
-          fi
-
-          sync_branch='automation/sync-main-to-next'
-          existing_pr=$(gh pr list --base next --head "$sync_branch" --state open --json url --jq '.[0].url')
-          if [ -n "$existing_pr" ]; then
-            echo "A main to next pull request already exists: $existing_pr"
-          else
-            git push --force origin origin/main:"refs/heads/$sync_branch"
-            gh pr create \
-              --base next \
-              --head "$sync_branch" \
-              --title 'chore: merge main into next' \
-              --body 'This pull request was created automatically because main could not be merged into next without conflicts. Resolve conflicts on this temporary branch; never update main with next.'
-          fi
-
-          echo 'main could not be merged into next without conflicts.'
-          exit 1

app/Actions/Fortify/ResetUserPassword.php

@@ -6,6 +6,7 @@
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Validator;
 use Illuminate\Validation\Rules\Password;
+use Illuminate\Validation\ValidationException;
 use Laravel\Fortify\Contracts\ResetsUserPasswords;
 
 class ResetUserPassword implements ResetsUserPasswords
@@ -17,6 +18,13 @@ class ResetUserPassword implements ResetsUserPasswords
      */
     public function reset(User $user, array $input): void
     {
+        if ($user->isMapledeployRevoked()) {
+            // MapleDeploy branding: dashboard-managed revocation is restored only by mapledeploy:user:set-password.
+            throw ValidationException::withMessages([
+                'email' => [trans('passwords.user')],
+            ]);
+        }
+
         Validator::make($input, [
             'password' => ['required', Password::defaults(), 'confirmed'],
         ])->validate();

app/Actions/Proxy/CheckProxy.php

@@ -102,7 +102,8 @@ public function handle(Server $server, $fromUI = false): bool
             foreach ($conflicts as $port => $conflict) {
                 if ($conflict) {
                     if ($fromUI) {
-                        throw new \Exception("Port $port is in use.<br>You must stop the process using this port.<br><br>Docs: <a target='_blank' class='dark:text-white hover:underline' href='https://coolify.io/docs'>https://coolify.io/docs</a><br>Discord: <a target='_blank' class='dark:text-white hover:underline' href='https://coolify.io/discord'>https://coolify.io/discord</a>");
+                        // MapleDeploy branding: support links
+                        throw new \Exception("Port $port is in use.<br>You must stop the process using this port.<br><br>Support: <a target='_blank' class='dark:text-white hover:underline' href='https://mapledeploy.ca/contact'>https://mapledeploy.ca/contact</a>");
                     } else {
                         return false;
                     }

app/Actions/Server/StartSentinel.php

@@ -26,7 +26,8 @@ public function handle(Server $server, bool $restart = false, ?string $latestVer
         $endpoint = $server->settings->ensureSentinelUrl();
         $debug = data_get($server, 'settings.is_sentinel_debug_enabled');
         $mountDir = '/data/coolify/sentinel';
-        $image = coolifyRegistryUrl().'/coollabsio/sentinel:'.$version;
+        // MapleDeploy branding: Sentinel is not mirrored to our Forgejo registry, so pull from ghcr.io directly (upstream image)
+        $image = 'ghcr.io/coollabsio/sentinel:'.$version;
         $environments = [
             'TOKEN' => $token,
             'DEBUG' => $debug ? 'true' : 'false',

app/Actions/Server/UpdateCoolify.php

@@ -118,7 +118,8 @@ private function update()
     {
         $latestHelperImageVersion = getHelperVersion();
         $upgradeScriptUrl = config('constants.coolify.upgrade_script_url');
-        $registryUrl = coolifyRegistryUrl();
+        // MapleDeploy branding: always use the fork registry default, ignoring per-instance overrides
+        $registryUrl = config('constants.coolify.registry_url');
 
         remote_process([
             "curl -fsSL {$upgradeScriptUrl} -o /data/coolify/source/upgrade.sh",

app/Console/Commands/Init.php

@@ -265,15 +265,11 @@ private function restoreCoolifyDbBackup()
         }
     }
 
+    // MapleDeploy branding: telemetry disabled — no phone-home signal
     private function sendAliveSignal()
     {
-        $id = config('app.id');
-        $version = config('constants.coolify.version');
-        try {
-            Http::get("https://undead.coolify.io/v4/alive?appId=$id&version=$version");
-        } catch (\Throwable $e) {
-            echo "Error in sending live signal: {$e->getMessage()}\n";
-        }
+        // Disabled for MapleDeploy: do not send telemetry to coolify.io
+        return;
     }
 
     private function replaceSlashInEnvironmentName()

app/Console/Commands/Mapledeploy/UserCreate.php

@@ -0,0 +1,160 @@
+<?php
+
+namespace App\Console\Commands\Mapledeploy;
+
+use App\Enums\Role;
+use App\Models\Team;
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Validator;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rule;
+
+class UserCreate extends Command
+{
+    protected $signature = 'mapledeploy:user:create
+                            {--email= : User email address}
+                            {--name= : User display name}
+                            {--admin : Create the first root admin user}
+                            {--team-role=member : Root team role for non-admin users}';
+
+    protected $description = 'Create a Coolify user for MapleDeploy dashboard access management';
+
+    public function handle(): int
+    {
+        $password = $this->readPassword();
+        $input = [
+            'email' => $this->option('email'),
+            'name' => $this->option('name'),
+            'password' => $password,
+            'team_role' => $this->option('team-role'),
+        ];
+
+        $validator = Validator::make($input, [
+            'email' => ['required', 'string', 'email', 'max:255'],
+            'name' => ['required', 'string', 'max:255'],
+            'password' => ['required', 'string', 'min:8'],
+            'team_role' => ['required', Rule::in([Role::ADMIN->value, Role::MEMBER->value])],
+        ]);
+
+        if ($validator->fails()) {
+            return $this->failWith('INVALID_INPUT');
+        }
+
+        $input['email'] = Str::lower((string) $input['email']);
+
+        if (User::whereEmail($input['email'])->exists()) {
+            return $this->failWith('EMAIL_EXISTS');
+        }
+
+        if ($this->option('admin')) {
+            return $this->createAdmin($input);
+        }
+
+        return $this->createMember($input);
+    }
+
+    private function createAdmin(array $input): int
+    {
+        if (User::count() !== 0) {
+            return $this->failWith('USERS_ALREADY_EXIST');
+        }
+
+        $user = DB::transaction(function () use ($input) {
+            $user = (new User)->forceFill([
+                'id' => 0,
+                'name' => $input['name'],
+                'email' => $input['email'],
+                'password' => Hash::make($input['password']),
+            ]);
+            $user->save();
+            $user->markEmailAsVerified();
+
+            $settings = instanceSettings();
+            $settings->is_registration_enabled = false;
+            $attributes = $settings->getAttributes();
+            if (array_key_exists('setup_token', $attributes)) {
+                $settings->setup_token = null;
+            }
+            if (array_key_exists('setup_callback_url', $attributes)) {
+                $settings->setup_callback_url = null;
+            }
+            $settings->save();
+
+            return $user;
+        });
+
+        return $this->succeedWithUser($user);
+    }
+
+    private function createMember(array $input): int
+    {
+        $rootTeam = Team::find(0);
+        if (! $rootTeam) {
+            return $this->failWith('ROOT_TEAM_MISSING');
+        }
+
+        $user = DB::transaction(function () use ($input, $rootTeam) {
+            $user = User::create([
+                'name' => $input['name'],
+                'email' => $input['email'],
+                'password' => Hash::make($input['password']),
+            ]);
+            $user->markEmailAsVerified();
+            $this->deletePersonalTeams($user);
+            $user->teams()->syncWithoutDetaching([
+                $rootTeam->id => ['role' => $input['team_role']],
+            ]);
+
+            return $user;
+        });
+
+        return $this->succeedWithUser($user);
+    }
+
+    private function deletePersonalTeams(User $user): void
+    {
+        // MapleDeploy branding: dashboard-managed users should only see the
+        // managed instance root team, not an empty personal Coolify team.
+        $personalTeams = Team::query()
+            ->where('teams.id', '!=', 0)
+            ->where('personal_team', true)
+            ->whereHas('members', fn ($query) => $query->whereKey($user->id))
+            ->get();
+
+        foreach ($personalTeams as $team) {
+            DB::table('team_user')
+                ->where('team_id', $team->id)
+                ->where('user_id', $user->id)
+                ->delete();
+            DB::table('teams')->where('id', $team->id)->delete();
+        }
+    }
+
+    private function readPassword(): string
+    {
+        return rtrim((string) stream_get_contents(STDIN), "\n");
+    }
+
+    private function succeedWithUser(User $user): int
+    {
+        $this->line(json_encode([
+            'user' => [
+                'id' => $user->id,
+                'email' => $user->email,
+                'name' => $user->name,
+            ],
+        ], JSON_THROW_ON_ERROR));
+
+        return self::SUCCESS;
+    }
+
+    private function failWith(string $code): int
+    {
+        $this->line(json_encode(['error' => $code], JSON_THROW_ON_ERROR));
+
+        return self::FAILURE;
+    }
+}

app/Console/Commands/Mapledeploy/UserDelete.php

@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Console\Commands\Mapledeploy;
+
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+
+class UserDelete extends Command
+{
+    protected $signature = 'mapledeploy:user:delete {user_id : Coolify user id}';
+
+    protected $description = 'Delete a Coolify user for MapleDeploy dashboard access management';
+
+    public function handle(): int
+    {
+        $rawUserId = $this->argument('user_id');
+        $userId = filter_var($rawUserId, FILTER_VALIDATE_INT, ['options' => ['min_range' => 0]]);
+        if ($userId === false) {
+            return $this->failWith('INVALID_USER_ID');
+        }
+
+        if ($userId === 0) {
+            return $this->failWith('CANNOT_DELETE_ROOT_USER');
+        }
+
+        $user = User::find($userId);
+        if (! $user) {
+            $this->line(json_encode([
+                'deleted' => null,
+                'alreadyDeleted' => true,
+                'id' => $userId,
+            ], JSON_THROW_ON_ERROR));
+
+            return self::SUCCESS;
+        }
+
+        $deleted = [
+            'id' => $user->id,
+            'email' => $user->email,
+        ];
+
+        DB::transaction(function () use ($user) {
+            $user->tokens()->delete();
+            // MapleDeploy branding: deletion must end any active browser sessions.
+            DB::table('sessions')->where('user_id', $user->id)->delete();
+            $user->delete();
+        });
+
+        $this->line(json_encode(['deleted' => $deleted], JSON_THROW_ON_ERROR));
+
+        return self::SUCCESS;
+    }
+
+    private function failWith(string $code): int
+    {
+        $this->line(json_encode(['error' => $code], JSON_THROW_ON_ERROR));
+
+        return self::FAILURE;
+    }
+}

app/Console/Commands/Mapledeploy/UserList.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Console\Commands\Mapledeploy;
+
+use App\Models\User;
+use Illuminate\Console\Command;
+
+class UserList extends Command
+{
+    protected $signature = 'mapledeploy:user:list';
+
+    protected $description = 'List Coolify users for MapleDeploy dashboard access management';
+
+    public function handle(): int
+    {
+        $users = User::with('teams')
+            ->orderBy('id')
+            ->get()
+            ->map(fn (User $user) => [
+                'id' => $user->id,
+                'email' => $user->email,
+                'name' => $user->name,
+                'created_at' => $user->created_at?->toISOString(),
+                'teams' => $user->teams
+                    ->map(fn ($team) => [
+                        'id' => $team->id,
+                        'name' => $team->name,
+                        'role' => $team->pivot?->role,
+                    ])
+                    ->values()
+                    ->all(),
+            ])
+            ->values()
+            ->all();
+
+        $this->line(json_encode(['users' => $users], JSON_THROW_ON_ERROR));
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/Mapledeploy/UserRevoke.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Console\Commands\Mapledeploy;
+
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+
+class UserRevoke extends Command
+{
+    protected $signature = 'mapledeploy:user:revoke {user_id : Coolify user id}';
+
+    protected $description = 'Revoke a Coolify user login for MapleDeploy dashboard access management';
+
+    public function handle(): int
+    {
+        $userId = (int) $this->argument('user_id');
+        if ($userId === 0) {
+            return $this->failWith('CANNOT_REVOKE_ROOT_USER');
+        }
+
+        $user = User::find($userId);
+        if (! $user) {
+            return $this->failWith('USER_NOT_FOUND');
+        }
+
+        $user->forceFill([
+            'password' => Hash::make(Str::random(64)),
+            // MapleDeploy branding: OAuth login matches by email, so keep a
+            // persistent marker that the callback can reject after revocation.
+            'remember_token' => 'mapledeploy-revoked:'.Str::random(40),
+        ])->save();
+        $user->tokens()->delete();
+        // MapleDeploy branding: revocation must end any active browser sessions.
+        DB::table('sessions')->where('user_id', $user->id)->delete();
+
+        $this->line(json_encode([
+            'revoked' => [
+                'id' => $user->id,
+                'email' => $user->email,
+            ],
+        ], JSON_THROW_ON_ERROR));
+
+        return self::SUCCESS;
+    }
+
+    private function failWith(string $code): int
+    {
+        $this->line(json_encode(['error' => $code], JSON_THROW_ON_ERROR));
+
+        return self::FAILURE;
+    }
+}

app/Console/Commands/Mapledeploy/UserSetPassword.php

@@ -0,0 +1,107 @@
+<?php
+
+namespace App\Console\Commands\Mapledeploy;
+
+use App\Enums\Role;
+use App\Models\Team;
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Validator;
+use Illuminate\Support\Str;
+
+class UserSetPassword extends Command
+{
+    protected $signature = 'mapledeploy:user:set-password
+                            {user_id : Coolify user id}
+                            {--email= : New user email address}
+                            {--name= : New user display name}';
+
+    protected $description = 'Set a Coolify user password for MapleDeploy dashboard access management';
+
+    public function handle(): int
+    {
+        $password = rtrim((string) stream_get_contents(STDIN), "\n");
+        $updatesOwner = $this->option('email') !== null || $this->option('name') !== null;
+        $input = [
+            'password' => $password,
+            'email' => $this->option('email'),
+            'name' => $this->option('name'),
+        ];
+        $rules = ['password' => ['required', 'string', 'min:8']];
+        if ($updatesOwner) {
+            $rules['email'] = ['required', 'string', 'email', 'max:255'];
+            $rules['name'] = ['required', 'string', 'max:255'];
+        }
+        $validator = Validator::make($input, $rules);
+
+        if ($validator->fails()) {
+            return $this->failWith('INVALID_INPUT');
+        }
+
+        $user = User::find($this->argument('user_id'));
+        if (! $user) {
+            return $this->failWith('USER_NOT_FOUND');
+        }
+        $rootTeam = null;
+        if ((int) $user->id !== 0) {
+            $rootTeam = Team::find(0);
+            if (! $rootTeam) {
+                return $this->failWith('ROOT_TEAM_MISSING');
+            }
+        }
+
+        $changes = [
+            'password' => Hash::make($password),
+            // MapleDeploy branding: clear the revocation marker when the
+            // dashboard intentionally restores this Coolify login.
+            'remember_token' => null,
+        ];
+        if ($updatesOwner) {
+            $email = Str::lower((string) $input['email']);
+            if (User::whereEmail($email)->whereKeyNot($user->id)->exists()) {
+                return $this->failWith('EMAIL_EXISTS');
+            }
+            // MapleDeploy branding: claiming root admin transfers the Coolify
+            // account identity so the previous email holder cannot recover it.
+            $changes['email'] = $email;
+            $changes['name'] = $input['name'];
+        }
+
+        DB::transaction(function () use ($user, $changes, $updatesOwner, $rootTeam) {
+            $user->forceFill($changes)->save();
+            if ($updatesOwner && ! $user->hasVerifiedEmail()) {
+                $user->markEmailAsVerified();
+            }
+            if ($rootTeam) {
+                // MapleDeploy branding: matching an existing Coolify user by
+                // email must grant the same root-team admin access as a newly
+                // dashboard-created user.
+                $user->teams()->syncWithoutDetaching([
+                    $rootTeam->id => ['role' => Role::ADMIN->value],
+                ]);
+            }
+            // MapleDeploy branding: password resets from the dashboard should
+            // end browser sessions authenticated with the previous password.
+            DB::table('sessions')->where('user_id', $user->id)->delete();
+        });
+
+        $this->line(json_encode([
+            'user' => [
+                'id' => $user->id,
+                'email' => $user->email,
+                'name' => $user->name,
+            ],
+        ], JSON_THROW_ON_ERROR));
+
+        return self::SUCCESS;
+    }
+
+    private function failWith(string $code): int
+    {
+        $this->line(json_encode(['error' => $code], JSON_THROW_ON_ERROR));
+
+        return self::FAILURE;
+    }
+}

app/Http/Controllers/Api/OpenApi.php

@@ -4,8 +4,9 @@
 
 use OpenApi\Attributes as OA;
 
-#[OA\Info(title: 'Coolify', version: '0.1')]
-#[OA\Server(url: 'https://app.coolify.io/api/v1', description: 'Coolify Cloud API. Change the host to your own instance if you are self-hosting.')]
+// MapleDeploy branding: API documentation
+#[OA\Info(title: 'MapleDeploy', version: '0.1')]
+#[OA\Server(url: '/api/v1', description: 'MapleDeploy API. Powered by Coolify.')]
 #[OA\SecurityScheme(
     type: 'http',
     scheme: 'bearer',

app/Http/Controllers/Api/OtherController.php

@@ -5,7 +5,6 @@
 use App\Http\Controllers\Controller;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
-use Illuminate\Support\Facades\Http;
 use OpenApi\Attributes as OA;
 
 class OtherController extends Controller
@@ -273,23 +272,6 @@ public function disable_mcp(Request $request)
         return response()->json(['message' => 'MCP server disabled.'], 200);
     }
 
-    public function feedback(Request $request)
-    {
-        $data = $request->validate([
-            'content' => ['required', 'string', 'min:10', 'max:2000'],
-        ]);
-
-        $webhook_url = config('constants.webhooks.feedback_discord_webhook');
-        if ($webhook_url) {
-            Http::timeout(5)->post($webhook_url, [
-                'content' => $data['content'],
-                'allowed_mentions' => ['parse' => []],
-            ]);
-        }
-
-        return response()->json(['message' => 'Feedback sent.'], 200);
-    }
-
     #[OA\Get(
         summary: 'Healthcheck',
         description: 'Healthcheck endpoint.',

app/Http/Controllers/Controller.php

@@ -82,6 +82,11 @@ public function forgot_password(Request $request)
                 return response()->json(['message' => 'Transactional emails are not active'], 400);
             }
             $request->validate([Fortify::email() => 'required|email']);
+            $user = User::where('email', $request->input(Fortify::email()))->first();
+            if ($user?->isMapledeployRevoked()) {
+                // MapleDeploy branding: only the dashboard set-password path can restore revoked users.
+                return app(SuccessfulPasswordResetLinkRequestResponse::class, ['status' => Password::RESET_LINK_SENT]);
+            }
             $status = Password::broker(config('fortify.passwords'))->sendResetLink(
                 $request->only(Fortify::email())
             );

app/Http/Controllers/OauthController.php

@@ -25,6 +25,12 @@ public function callback(string $provider)
             }
             $email = strtolower($email);
             $user = User::whereEmail($email)->first();
+            // MapleDeploy branding: dashboard revocation scrambles passwords,
+            // clears sessions, and marks the user so email-matched OAuth cannot
+            // reopen access.
+            if ($user?->isMapledeployRevoked()) {
+                abort(403, 'User access has been revoked');
+            }
             if (! $user) {
                 $settings = instanceSettings();
                 if (! $settings->is_registration_enabled) {

app/Http/Kernel.php

@@ -17,6 +17,7 @@
 use App\Http\Middleware\EnsureTokenBelongsToCurrentTeamMember;
 use App\Http\Middleware\PreventRequestsDuringMaintenance;
 use App\Http\Middleware\RedirectIfAuthenticated;
+use App\Http\Middleware\RejectMapledeployRevokedUser;
 use App\Http\Middleware\TrimStrings;
 use App\Http\Middleware\TrustHosts;
 use App\Http\Middleware\TrustProxies;
@@ -75,6 +76,7 @@ class Kernel extends HttpKernel
             ShareErrorsFromSession::class,
             VerifyCsrfToken::class,
             SubstituteBindings::class,
+            RejectMapledeployRevokedUser::class,
             CheckForcePasswordReset::class,
             DecideWhatToDoWithUser::class,
 

app/Http/Middleware/DecideWhatToDoWithUser.php

@@ -16,6 +16,16 @@ public function handle(Request $request, Closure $next): Response
             $currentTeam = auth()->user()?->recreate_personal_team();
             refreshSession($currentTeam);
         }
+        $preferredTeam = auth()?->user()?->mapledeployPreferredTeam();
+        if (
+            $preferredTeam &&
+            $preferredTeam->id === 0 &&
+            auth()?->user()?->currentTeam()?->id !== 0
+        ) {
+            // MapleDeploy branding: repair sessions that landed in the empty
+            // personal team before dashboard-managed root-team access existed.
+            refreshSession($preferredTeam);
+        }
         if (auth()?->user()?->currentTeam()) {
             refreshSession(auth()->user()->currentTeam());
         } elseif (auth()?->user()?->teams?->count() > 0) {

app/Http/Middleware/RejectMapledeployRevokedUser.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class RejectMapledeployRevokedUser
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        $user = auth()->user();
+        if (! $user?->isMapledeployRevoked()) {
+            return $next($request);
+        }
+
+        // MapleDeploy branding: revocation is marked on the user row so old
+        // browser sessions are rejected even when SESSION_DRIVER is not database.
+        auth()->logout();
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        if ($request->routeIs('login') || $request->path() === 'login') {
+            return $next($request);
+        }
+
+        return redirect()->route('login')->withErrors([
+            'email' => __('auth.failed'),
+        ]);
+    }
+}

app/Livewire/Help.php

@@ -1,58 +0,0 @@
-<?php
-
-namespace App\Livewire;
-
-use DanHarrin\LivewireRateLimiting\WithRateLimiting;
-use Illuminate\Notifications\Messages\MailMessage;
-use Illuminate\Support\Facades\Http;
-use Livewire\Attributes\Validate;
-use Livewire\Component;
-
-class Help extends Component
-{
-    use WithRateLimiting;
-
-    #[Validate(['required', 'min:10', 'max:1000'])]
-    public string $description;
-
-    #[Validate(['required', 'min:3', 'max:600'])]
-    public string $subject;
-
-    public function submit()
-    {
-        try {
-            $this->validate();
-            $this->rateLimit(3, 30);
-
-            $settings = instanceSettings();
-            $mail = new MailMessage;
-            $mail->view(
-                'emails.help',
-                [
-                    'description' => $this->description,
-                ]
-            );
-            $mail->subject("[HELP]: {$this->subject}");
-            $type = set_transanctional_email_settings($settings);
-
-            // Sending feedback through Cloud API
-            if (blank($type)) {
-                $url = 'https://app.coolify.io/api/feedback';
-                Http::post($url, [
-                    'content' => 'User: `'.auth()->user()?->email.'` with subject: `'.$this->subject.'` has the following problem: `'.$this->description.'`',
-                ]);
-            } else {
-                send_user_an_email($mail, auth()->user()?->email, 'feedback@coollabs.io');
-            }
-            $this->dispatch('success', 'Feedback sent.', 'We will get in touch with you as soon as possible.');
-            $this->reset('description', 'subject');
-        } catch (\Throwable $e) {
-            return handleError($e, $this);
-        }
-    }
-
-    public function render()
-    {
-        return view('livewire.help')->layout('layouts.app');
-    }
-}

app/Livewire/Settings/Advanced.php

@@ -32,8 +32,7 @@ class Advanced extends Component
 
     public ?string $allowed_ips = null;
 
-    #[Validate('boolean')]
-    public bool $is_sponsorship_popup_enabled;
+    // MapleDeploy branding: is_sponsorship_popup_enabled removed (popup removed)
 
     #[Validate('boolean')]
     public bool $disable_two_step_confirmation;
@@ -64,7 +63,6 @@ public function rules()
             'custom_dns_servers' => ['nullable', 'string', new ValidDnsServers],
             'is_api_enabled' => 'boolean',
             'allowed_ips' => ['nullable', 'string', new ValidIpOrCidr],
-            'is_sponsorship_popup_enabled' => 'boolean',
             'disable_two_step_confirmation' => 'boolean',
             'is_wire_navigate_enabled' => 'boolean',
             'is_mcp_server_enabled' => 'boolean',
@@ -87,7 +85,6 @@ public function mount()
         $this->is_dns_validation_enabled = $this->settings->is_dns_validation_enabled;
         $this->is_api_enabled = $this->settings->is_api_enabled;
         $this->disable_two_step_confirmation = $this->settings->disable_two_step_confirmation;
-        $this->is_sponsorship_popup_enabled = $this->settings->is_sponsorship_popup_enabled;
         $this->is_wire_navigate_enabled = $this->settings->is_wire_navigate_enabled ?? true;
         $this->is_mcp_server_enabled = $this->settings->is_mcp_server_enabled ?? false;
         $this->webhook_allowed_internal_hosts = collect($this->settings->webhook_allowed_internal_hosts ?? [])->implode(',');
@@ -204,7 +201,6 @@ public function instantSave(?array $webhookAllowedInternalHosts = null)
             $this->settings->custom_dns_servers = $this->custom_dns_servers;
             $this->settings->is_api_enabled = $this->is_api_enabled;
             $this->settings->allowed_ips = $this->allowed_ips;
-            $this->settings->is_sponsorship_popup_enabled = $this->is_sponsorship_popup_enabled;
             $this->settings->disable_two_step_confirmation = $this->disable_two_step_confirmation;
             $this->settings->is_wire_navigate_enabled = $this->is_wire_navigate_enabled;
             $this->settings->is_mcp_server_enabled = $this->is_mcp_server_enabled;

app/Models/User.php

@@ -96,7 +96,7 @@ protected static function boot()
             $team = [
                 'name' => $user->name."'s Team",
                 'personal_team' => true,
-                'show_boarding' => true,
+                'show_boarding' => false,
             ];
             if ($user->id === 0) {
                 $team['id'] = 0;
@@ -219,7 +219,7 @@ public function recreate_personal_team()
         $team = [
             'name' => $this->name."'s Team",
             'personal_team' => true,
-            'show_boarding' => true,
+            'show_boarding' => false,
         ];
         if ($this->id === 0) {
             $team['id'] = 0;
@@ -232,6 +232,20 @@ public function recreate_personal_team()
         return $new_team;
     }
 
+    public function mapledeployPreferredTeam(): ?Team
+    {
+        // MapleDeploy branding: dashboard-managed users are attached to the
+        // root team so they can administer the customer's managed instance.
+        $rootTeam = $this->teams->firstWhere('id', 0);
+        $rootRole = data_get($rootTeam, 'pivot.role');
+        if ($rootTeam && ($rootRole === 'admin' || $rootRole === 'owner')) {
+            return $rootTeam;
+        }
+
+        return $this->teams->firstWhere('personal_team', true)
+            ?? $this->teams->first();
+    }
+
     public function createToken(string $name, array $abilities = ['*'], ?DateTimeInterface $expiresAt = null)
     {
         $plainTextToken = sprintf(
@@ -292,9 +306,19 @@ public function sendVerificationEmail()
 
     public function sendPasswordResetNotification($token): void
     {
+        if ($this->isMapledeployRevoked()) {
+            return;
+        }
+
         $this?->notify(new TransactionalEmailsResetPassword($token));
     }
 
+    public function isMapledeployRevoked(): bool
+    {
+        // MapleDeploy branding: dashboard-managed revocation stores a persistent marker.
+        return str_starts_with((string) $this->remember_token, 'mapledeploy-revoked:');
+    }
+
     public function isAdmin()
     {
         return $this->role() === 'admin' || $this->role() === 'owner';

app/Providers/FortifyServiceProvider.php

@@ -43,13 +43,13 @@ public function boot(): void
     {
         Fortify::createUsersUsing(CreateNewUser::class);
         Fortify::registerView(function () {
-            $isFirstUser = User::count() === 0;
-
             $settings = instanceSettings();
             if (! $settings->is_registration_enabled) {
                 return redirect()->route('login');
             }
 
+            $isFirstUser = User::count() === 0;
+
             return view('auth.register', [
                 'isFirstUser' => $isFirstUser,
             ]);
@@ -59,8 +59,11 @@ public function boot(): void
             $settings = instanceSettings();
             $enabled_oauth_providers = OauthSetting::where('enabled', true)->get();
             $users = User::count();
-            if ($users == 0) {
-                // If there are no users, redirect to registration
+            // MapleDeploy branding: public registration is disabled by default
+            // because the dashboard creates the first admin over SSH. Do not
+            // redirect to /register in that fail-closed state, or fresh/failed
+            // provisioning loops between login and registration.
+            if ($users == 0 && $settings->is_registration_enabled) {
                 return redirect()->route('register');
             }
 
@@ -91,8 +94,9 @@ public function boot(): void
                     $user->currentTeam = $invitation->team;
                     $invitation->delete();
                 } else {
-                    // Normal login - use personal team
-                    $user->currentTeam = $user->teams->firstWhere('personal_team', true);
+                    // MapleDeploy branding: root-team admins should land in
+                    // the managed instance team, not their empty personal team.
+                    $user->currentTeam = $user->mapledeployPreferredTeam();
                     if (! $user->currentTeam) {
                         $user->currentTeam = $user->recreate_personal_team();
                     }

bootstrap/helpers/shared.php

@@ -634,13 +634,14 @@ function get_route_parameters(): array
 
 function get_latest_sentinel_version(): string
 {
+    // MapleDeploy branding: our versions.json omits the sentinel key, so fall back to 'latest' (matches upstream's fallback in CheckAndStartSentinelJob)
     try {
         $response = Http::get(config('constants.coolify.versions_url'));
         $versions = $response->json();
 
-        return data_get($versions, 'coolify.sentinel.version');
-    } catch (Throwable) {
-        return '0.0.0';
+        return data_get($versions, 'coolify.sentinel.version') ?? 'latest';
+    } catch (\Throwable) {
+        return 'latest';
     }
 }
 function get_latest_version_of_coolify(): string

config/app.php

@@ -46,7 +46,7 @@
     |
     */
 
-    'name' => env('APP_NAME', 'Coolify'),
+    'name' => env('APP_NAME', 'MapleDeploy'), // MapleDeploy branding
 
     /*
     |--------------------------------------------------------------------------

config/constants.php

@@ -1,27 +1,28 @@
 <?php
 
 return [
+    // MapleDeploy branding: registry pointed to Forgejo, auto-update disabled by default
     'coolify' => [
         'version' => env('COOLIFY_VERSION') ?: '4.3.12',
         'helper_version' => '1.0.16',
         'realtime_version' => '1.0.17',
         'railpack_version' => '0.23.0',
         'self_hosted' => env('SELF_HOSTED', true),
-        'autoupdate' => env('AUTOUPDATE'),
+        'autoupdate' => env('AUTOUPDATE', false),
         'base_config_path' => env('BASE_CONFIG_PATH', '/data/coolify'),
-        'registry_url' => env('REGISTRY_URL', 'docker.io'),
-        'helper_image' => env('HELPER_IMAGE', env('REGISTRY_URL', 'docker.io').'/coollabsio/coolify-helper'),
-        'realtime_image' => env('REALTIME_IMAGE', env('REGISTRY_URL', 'docker.io').'/coollabsio/coolify-realtime'),
+        'registry_url' => env('REGISTRY_URL', 'forgejo.mapledeploy.ca'),
+        'helper_image' => env('HELPER_IMAGE', 'ghcr.io/coollabsio/coolify-helper'),
+        'realtime_image' => env('REALTIME_IMAGE', 'ghcr.io/coollabsio/coolify-realtime'),
         'is_windows_docker_desktop' => env('IS_WINDOWS_DOCKER_DESKTOP', false),
-        'cdn_url' => env('CDN_URL', 'https://cdn.coollabs.io'),
-        'versions_url' => env('VERSIONS_URL', env('CDN_URL', 'https://cdn.coollabs.io').'/coolify/versions.json'),
-        'upgrade_script_url' => env('UPGRADE_SCRIPT_URL', env('CDN_URL', 'https://cdn.coollabs.io').'/coolify/upgrade.sh'),
-        'releases_url' => env('RELEASES_URL', 'https://cdn.coollabs.io/coolify/releases.json'),
+        'cdn_url' => env('CDN_URL', 'https://updates.mapledeploy.ca'),
+        'versions_url' => env('VERSIONS_URL', env('CDN_URL', 'https://updates.mapledeploy.ca').'/coolify/versions.json'),
+        'upgrade_script_url' => env('UPGRADE_SCRIPT_URL', env('CDN_URL', 'https://updates.mapledeploy.ca').'/coolify/upgrade.sh'),
+        'releases_url' => 'https://cdn.coolify.io/releases.json',
     ],
 
     'urls' => [
-        'docs' => 'https://coolify.io/docs',
-        'contact' => 'https://coolify.io/docs/contact',
+        'docs' => 'https://mapledeploy.ca/docs',
+        'contact' => 'https://mapledeploy.ca/contact',
     ],
 
     'services' => [
@@ -94,8 +95,9 @@
         'verification_code_expiry_minutes' => 10,
     ],
 
-    'sentry' => [
-        'sentry_dsn' => env('SENTRY_DSN'),
+    // MapleDeploy branding: telemetry disabled
+    'sentry' => [ // disabled by MapleDeploy
+        'sentry_dsn' => null,
     ],
 
     'sentinel' => [
@@ -117,7 +119,6 @@
     ],
 
     'webhooks' => [
-        'feedback_discord_webhook' => env('FEEDBACK_DISCORD_WEBHOOK'),
         'dev_webhook' => env('SERVEO_URL'),
     ],
 

config/database.php

@@ -21,6 +21,13 @@
     return $fallbackHosts === [] ? ['coolify-db'] : $fallbackHosts;
 };
 
+$pgsqlOptions = [];
+if (defined('Pdo\Pgsql::ATTR_DISABLE_PREPARES')) {
+    $pgsqlOptions[Pgsql::ATTR_DISABLE_PREPARES] = env('DB_DISABLE_PREPARES', false);
+} elseif (defined('\PDO::PGSQL_ATTR_DISABLE_PREPARES')) {
+    $pgsqlOptions[PDO::PGSQL_ATTR_DISABLE_PREPARES] = env('DB_DISABLE_PREPARES', false);
+}
+
 $pgsql = [
     'driver' => 'pgsql',
     'url' => env('DATABASE_URL'),
@@ -34,9 +41,7 @@
     'prefix_indexes' => true,
     'search_path' => 'public',
     'sslmode' => 'prefer',
-    'options' => [
-        (defined('Pdo\Pgsql::ATTR_DISABLE_PREPARES') ? Pgsql::ATTR_DISABLE_PREPARES : PDO::PGSQL_ATTR_DISABLE_PREPARES) => env('DB_DISABLE_PREPARES', false),
-    ],
+    'options' => $pgsqlOptions,
 ];
 
 /*
@@ -97,7 +102,7 @@
 
         'testing' => [
             'driver' => 'sqlite',
-            'database' => ':memory:',
+            'database' => env('DB_DATABASE', ':memory:'),
             'prefix' => '',
             'foreign_key_constraints' => true,
         ],

config/livewire.php

@@ -118,7 +118,7 @@
 
     'navigate' => [
         'show_progress_bar' => true,
-        'progress_bar_color' => '#6b16ed',
+        'progress_bar_color' => '#fde047', // MapleDeploy branding: warning yellow
     ],
 
     /*

config/sentry.php

@@ -2,8 +2,8 @@
 
 return [
 
-    // @see https://docs.sentry.io/product/sentry-basics/dsn-explainer/
-    'dsn' => config('constants.sentry.sentry_dsn'),
+    // Sentry DSN disabled by MapleDeploy.
+    'dsn' => config('constants.sentry.sentry_dsn'), // disabled by MapleDeploy
 
     // The release version of your application
     // Example with dynamic git hash: trim(exec('git --git-dir ' . base_path('.git') . ' log --pretty="%h" -n1 HEAD'))
@@ -40,7 +40,7 @@
 
     'tracing' => [
         // Trace queue jobs as their own transactions
-        'queue_job_transactions' => env('SENTRY_TRACE_QUEUE_ENABLED', false),
+        'queue_job_transactions' => env('SENTRY_TRACE_QUEUE_ENABLED', false), // disabled by MapleDeploy
 
         // Capture queue jobs as spans when executed on the sync driver
         'queue_jobs' => true,
@@ -61,12 +61,12 @@
         'http_client_requests' => true,
 
         // Capture Redis operations as spans (this enables Redis events in Laravel)
-        'redis_commands' => env('SENTRY_TRACE_REDIS_COMMANDS', false),
+        'redis_commands' => env('SENTRY_TRACE_REDIS_COMMANDS', false), // disabled by MapleDeploy
 
         // Try to find out where the Redis command originated from and add it to the command spans
         'redis_origin' => true,
 
-        // Indicates if the tracing integrations supplied by Sentry should be loaded
+        // Indicates if the tracing integrations supplied by Sentry should be loaded; disabled by MapleDeploy.
         'default_integrations' => true,
 
         // Indicates that requests without a matching route should be traced
@@ -74,12 +74,12 @@
     ],
 
     // @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#send-default-pii
-    'send_default_pii' => env('SENTRY_SEND_DEFAULT_PII', false),
+    'send_default_pii' => env('SENTRY_SEND_DEFAULT_PII', false), // disabled by MapleDeploy
 
     // @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#traces-sample-rate
-    'enable_tracing' => env('SENTRY_ENABLE_TRACING', false),
+    'enable_tracing' => env('SENTRY_ENABLE_TRACING', false), // disabled by MapleDeploy
     'traces_sample_rate' => 0.2,
 
-    'profiles_sample_rate' => env('SENTRY_PROFILES_SAMPLE_RATE') === null ? null : (float) env('SENTRY_PROFILES_SAMPLE_RATE'),
+    'profiles_sample_rate' => env('SENTRY_PROFILES_SAMPLE_RATE') === null ? null : (float) env('SENTRY_PROFILES_SAMPLE_RATE'), // disabled by MapleDeploy
 
 ];

database/migrations/2024_01_15_084609_add_custom_dns_server.php

@@ -13,7 +13,7 @@ public function up(): void
     {
         Schema::table('instance_settings', function (Blueprint $table) {
             $table->boolean('is_dns_validation_enabled')->default(true);
-            $table->string('custom_dns_servers')->nullable()->default('1.1.1.1');
+            $table->string('custom_dns_servers')->nullable()->default('149.112.121.10,149.112.122.10');
         });
     }
 

database/migrations/2026_06_13_000000_drop_mapledeploy_setup_columns_from_instance_settings.php

@@ -0,0 +1,47 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        $columns = array_values(array_filter(
+            ['setup_token', 'setup_callback_url'],
+            fn (string $column) => Schema::hasColumn('instance_settings', $column),
+        ));
+
+        if ($columns === []) {
+            return;
+        }
+
+        Schema::table('instance_settings', function (Blueprint $table) use ($columns) {
+            // MapleDeploy branding: remove legacy one-time setup columns from customer instances.
+            $table->dropColumn($columns);
+        });
+    }
+
+    public function down(): void
+    {
+        $missingColumns = array_values(array_filter(
+            ['setup_token', 'setup_callback_url'],
+            fn (string $column) => ! Schema::hasColumn('instance_settings', $column),
+        ));
+
+        if ($missingColumns === []) {
+            return;
+        }
+
+        Schema::table('instance_settings', function (Blueprint $table) use ($missingColumns) {
+            if (in_array('setup_token', $missingColumns, true)) {
+                $table->text('setup_token')->nullable();
+            }
+
+            if (in_array('setup_callback_url', $missingColumns, true)) {
+                $table->text('setup_callback_url')->nullable();
+            }
+        });
+    }
+};

database/seeders/InstanceSettingsSeeder.php

@@ -15,7 +15,9 @@ public function run(): void
     {
         InstanceSettings::create([
             'id' => 0,
-            'is_registration_enabled' => true,
+            // MapleDeploy branding: dashboard provisioning creates the first
+            // admin over SSH, so public registration must fail closed.
+            'is_registration_enabled' => false,
             'is_api_enabled' => isDev(),
             'smtp_enabled' => true,
             'smtp_host' => 'coolify-mail',

database/seeders/ProductionSeeder.php

@@ -57,6 +57,9 @@ public function run(): void
         if (InstanceSettings::find(0) == null) {
             InstanceSettings::create([
                 'id' => 0,
+                // MapleDeploy branding: dashboard provisioning creates the
+                // first admin over SSH, so public registration must fail closed.
+                'is_registration_enabled' => false,
             ]);
         }
 

docker-compose.prod.yml

@@ -1,6 +1,6 @@
 services:
   coolify:
-    image: "${REGISTRY_URL:-docker.io}/coollabsio/coolify:${LATEST_IMAGE:-latest}"
+    image: "${REGISTRY_URL:-forgejo.mapledeploy.ca}/rosslh/coolify:${LATEST_IMAGE:-latest}"
     volumes:
       - type: bind
         source: /data/coolify/source/.env
@@ -62,7 +62,7 @@ services:
       retries: 10
       timeout: 2s
   soketi:
-    image: '${REGISTRY_URL:-docker.io}/coollabsio/coolify-realtime:1.0.17'
+    image: 'ghcr.io/coollabsio/coolify-realtime:1.0.17' # MapleDeploy branding: pinned to ghcr.io, not mirrored
     ports:
       - "${SOKETI_PORT:-6001}:6001"
       - "6002:6002"

docker/production/Dockerfile

@@ -147,6 +147,16 @@ COPY --chown=www-data:www-data composer.json composer.lock ./
 COPY --chown=www-data:www-data app ./app
 COPY --chown=www-data:www-data bootstrap ./bootstrap
 COPY --chown=www-data:www-data config ./config
+
+# MapleDeploy: inject build version into constants.php at build time.
+# The version in git stays at the upstream value to avoid rebase conflicts.
+# CI passes the timestamped version (e.g. 4.0.0-beta.468.202603140006) as a build arg.
+ARG MAPLEDEPLOY_VERSION=""
+RUN if [ -n "$MAPLEDEPLOY_VERSION" ]; then \
+      sed -i "s/'version' => '[^']*'/'version' => '$MAPLEDEPLOY_VERSION'/" config/constants.php && \
+      chown www-data:www-data config/constants.php; \
+    fi
+
 COPY --chown=www-data:www-data database ./database
 COPY --chown=www-data:www-data lang ./lang
 COPY --chown=www-data:www-data public ./public

lang/en.json

@@ -19,7 +19,7 @@
     "auth.register_now": "Register",
     "auth.logout": "Logout",
     "auth.register": "Register",
-    "auth.registration_disabled": "Registration is disabled. Please contact the administrator.",
+    "auth.registration_disabled": "Set up server access in the MapleDeploy dashboard.",
     "auth.reset_password": "Reset password",
     "auth.failed": "These credentials do not match our records.",
     "auth.failed.callback": "Failed to process callback from login provider.",

lang/fr.json

@@ -17,7 +17,7 @@
     "auth.register_now": "S'enregistrer",
     "auth.logout": "Déconnexion",
     "auth.register": "S'enregistrer",
-    "auth.registration_disabled": "L'enregistrement est désactivé. Merci de contacter l'administrateur.",
+    "auth.registration_disabled": "Configurez l’accès au serveur dans le tableau de bord MapleDeploy.",
     "auth.reset_password": "Réinitialiser le mot de passe",
     "auth.failed": "Aucune correspondance n'a été trouvée pour les informations d'identification renseignées.",
     "auth.failed.callback": "Erreur lors du processus de retour de la plateforme de connexion.",

resources/css/app.css

@@ -14,57 +14,101 @@
 
 @custom-variant dark (&:where(.dark, .dark *));
 
+/* MapleDeploy branding: Canadian red accent, stone greys */
 @theme {
-    --font-sans: 'Geist Sans', Inter, sans-serif;
-    --font-mono: 'Geist Mono', 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace;
-    --font-geist-sans: 'Geist Sans', Inter, sans-serif;
-    --font-logs: 'Geist Mono', 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace;
+    --font-sans: Inter, sans-serif;
+    --font-display: 'Overlock', sans-serif;
+    --font-mono: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace;
+    --font-logs: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace;
 
-    --color-base: #101010;
-    --color-warning: #fcd452;
+    --color-base: #292524;
+    --color-warning: #fde047;
     --color-warning-50: #fefce8;
     --color-warning-100: #fef9c3;
     --color-warning-200: #fef08a;
     --color-warning-300: #fde047;
-    --color-warning-400: #fcd452;
-    --color-warning-500: #facc15;
+    --color-warning-400: #facc15;
+    --color-warning-500: #eab308;
     --color-warning-600: #ca8a04;
     --color-warning-700: #a16207;
     --color-warning-800: #854d0e;
     --color-warning-900: #713f12;
     --color-success: #22C55E;
-    --color-error: #dc2626;
-    --color-coollabs-50: #f5f0ff;
-    --color-coollabs: #6b16ed;
-    --color-coollabs-100: #7317ff;
-    --color-coollabs-200: #5a12c7;
-    --color-coollabs-300: #4a0fa3;
-    --color-coolgray-100: #181818;
-    --color-coolgray-200: #202020;
-    --color-coolgray-300: #242424;
-    --color-coolgray-400: #282828;
-    --color-coolgray-500: #323232;
+    /* MapleDeploy branding: red palette hue-normalized to OKLCH h=29.38 (#D52A1E) */
+    --color-error: #dc281c;
+    --color-coollabs-50: #fef3f1;
+    --color-coollabs: #d52b1f;
+    --color-coollabs-100: #f34d3d;
+    --color-coollabs-200: #bc251a;
+    --color-coollabs-300: #9c2117;
+    /* Override Tailwind's red scale so red-* utility classes match the MapleDeploy brand hue */
+    --color-red-50: #fef1ef;
+    --color-red-100: #ffe3df;
+    --color-red-200: #ffcec5;
+    --color-red-300: #feaa9d;
+    --color-red-400: #fb7968;
+    --color-red-500: #f34d3d;
+    --color-red-600: #d52b1f;
+    --color-red-700: #bc251a;
+    --color-red-800: #9c2117;
+    --color-red-900: #812219;
+    --color-red-950: #460d08;
+    /* MapleDeploy branding: coolgray remapped to stone (coolgray-200 interpolated, see COOLIFY_FORK.md) */
+    --color-coolgray-100: #1c1917;
+    --color-coolgray-200: #35322f;
+    --color-coolgray-300: #44403c;
+    --color-coolgray-400: #57534e;
+    --color-coolgray-500: #78716c;
 
     /* Graphite design language (ported from ref/frontend). Layered neutral
-       surfaces + translucent hairlines. See DESIGN.md. */
-    --color-app: #0c0c0d;
-    /* Canvas: neutral near-black (oklch), not pure black */
-    --color-panel: oklch(10% 0 0);
-    --color-surface: #161618;
-    --color-raised: #1c1c1e;
-    --color-selected: #26262a;
-    --color-fg: #f2f2f2;
-    --color-fg-dim: #b4b4b8;
-    --color-fg-faint: #6e6e74;
-    --color-accent: #6b16ed;
+       surfaces + translucent hairlines. See DESIGN.md.
+       MapleDeploy branding: every Graphite grey below is re-tinted to the warm
+       stone hue at matched OKLCH lightness (see COOLIFY_FORK.md). */
+    --color-app: #0e0c0b; /* MapleDeploy branding: stone remap (was #0c0c0d) */
+    /* Canvas: warm near-black (oklch), not pure black */
+    --color-panel: oklch(10% 0.0027 49.25); /* MapleDeploy branding: stone remap (was oklch(10% 0 0)) */
+    --color-surface: #181614; /* MapleDeploy branding: stone remap (was #161618) */
+    --color-raised: #1f1b1a; /* MapleDeploy branding: stone remap (was #1c1c1e) */
+    --color-selected: #2a2524; /* MapleDeploy branding: stone remap (was #26262a) */
+    --color-fg: #f2f2f1; /* MapleDeploy branding: stone remap (was #f2f2f2) */
+    --color-fg-dim: #b9b3b0; /* MapleDeploy branding: stone remap (was #b4b4b8) */
+    --color-fg-faint: #756d67; /* MapleDeploy branding: stone remap (was #6e6e74) */
+    --color-accent: #d52b1f; /* MapleDeploy branding: accent → red-600 */
     --color-accent-foreground: #ffffff;
     --color-hairline: rgba(255, 255, 255, 0.08);
-    --color-nav-text: #525252;
-    --color-nav-muted: #666666;
-    --color-nav-active: #171717;
-    --color-log: #0d0d0d;
+    --color-nav-text: #56514c; /* MapleDeploy branding: stone remap (was #525252) */
+    --color-nav-muted: #6b655f; /* MapleDeploy branding: stone remap (was #666666) */
+    --color-nav-active: #191615; /* MapleDeploy branding: stone remap (was #171717) */
+    --color-log: #0f0d0b; /* MapleDeploy branding: stone remap (was #0d0d0d) */
 
     --shadow-modal: 0 24px 64px rgba(0, 0, 0, 0.55), 0 4px 16px rgba(0, 0, 0, 0.4);
+
+    /* MapleDeploy branding: remap neutral and gray → stone for warm tone consistency with marketing/dashboard.
+       Upstream uses neutral for text/borders and gray for backgrounds/surfaces. Remapping both to stone
+       warms the entire UI to match our design system, covering ~1000 class references without touching
+       any Blade templates. */
+    --color-neutral-50: oklch(98.5% 0.001 106.423);
+    --color-neutral-100: oklch(97% 0.001 106.424);
+    --color-neutral-200: oklch(92.3% 0.003 48.717);
+    --color-neutral-300: oklch(86.9% 0.005 56.366);
+    --color-neutral-400: oklch(70.9% 0.01 56.259);
+    --color-neutral-500: oklch(55.3% 0.013 58.071);
+    --color-neutral-600: oklch(44.4% 0.011 73.639);
+    --color-neutral-700: oklch(37.4% 0.01 67.558);
+    --color-neutral-800: oklch(26.8% 0.007 34.298);
+    --color-neutral-900: oklch(21.6% 0.006 56.043);
+    --color-neutral-950: oklch(14.7% 0.004 49.25);
+    --color-gray-50: oklch(98.5% 0.001 106.423);
+    --color-gray-100: oklch(97% 0.001 106.424);
+    --color-gray-200: oklch(92.3% 0.003 48.717);
+    --color-gray-300: oklch(86.9% 0.005 56.366);
+    --color-gray-400: oklch(70.9% 0.01 56.259);
+    --color-gray-500: oklch(55.3% 0.013 58.071);
+    --color-gray-600: oklch(44.4% 0.011 73.639);
+    --color-gray-700: oklch(37.4% 0.01 67.558);
+    --color-gray-800: oklch(26.8% 0.007 34.298);
+    --color-gray-900: oklch(21.6% 0.006 56.043);
+    --color-gray-950: oklch(14.7% 0.004 49.25);
 }
 
 /*
@@ -258,7 +302,8 @@ @layer components {
 */
 html,
 body {
-    @apply w-full min-h-full bg-gray-50 dark:bg-app dark:text-fg-dim;
+    /* MapleDeploy branding: text-stone-800 body text matches marketing/dashboard */
+    @apply w-full min-h-full text-stone-800 bg-gray-50 dark:bg-app dark:text-fg-dim;
 }
 
 body {
@@ -293,19 +338,20 @@ button[isHighlighted]:not(:disabled) {
 }
 
 h1 {
-    @apply text-[24px] leading-7 font-semibold tracking-tight dark:text-white;
+    /* MapleDeploy branding: font-display (Overlock) on semantic headings */
+    @apply text-[24px] leading-7 font-semibold tracking-tight font-display dark:text-white;
 }
 
 h2 {
-    @apply text-xl font-bold dark:text-white;
+    @apply text-xl font-bold font-display dark:text-white;
 }
 
 h3 {
-    @apply text-lg font-bold dark:text-white;
+    @apply text-lg font-bold font-display dark:text-white;
 }
 
 h4 {
-    @apply text-base font-bold dark:text-white;
+    @apply text-base font-bold font-display dark:text-white;
 }
 
 a {
@@ -473,8 +519,8 @@ .application-console-shell,
 .terminal-fullscreen-shell {
     position: relative;
     isolation: isolate;
-    color: #f2f2f2;
-    background-color: #121214;
+    color: #f2f2f1; /* MapleDeploy branding: stone remap (was #f2f2f2) */
+    background-color: #141210; /* MapleDeploy branding: stone remap (was #121214) */
 }
 
 .application-console-shell {
@@ -523,7 +569,7 @@ html:not(.dark) .application-console-shell[data-console-theme="system"] .applica
 
 html.dark .application-console-shell[data-console-theme="system"],
 html.dark .terminal-fullscreen-shell[data-console-theme="system"] {
-    --console-theme-background: #121214;
+    --console-theme-background: #141210; /* MapleDeploy branding: stone remap (was #121214) */
     --console-theme-border: rgb(255 255 255 / 0.08);
 }
 
@@ -935,26 +981,26 @@ :root {
 }
 
 .dark {
-    --color-accent: #fcd452;
-    --coollabs-canvas: oklch(10% 0 0);
+    --color-accent: #fde047; /* MapleDeploy branding: dark-mode accent → warning */
+    --coollabs-canvas: oklch(10% 0.0027 49.25); /* MapleDeploy branding: stone remap */
     /* elevated (card shells/headers) and recessed (input fills) sit a touch
        above the canvas so they read lighter than near-black */
-    --coollabs-elevated: oklch(15% 0 0);
-    --coollabs-recessed: oklch(20% 0 0);
-    --coollabs-base: oklch(17% 0 0);
-    --coollabs-fill: oklch(26.9% 0 0);
-    --coollabs-line: oklch(32% 0 0);
-    --coollabs-hairline: oklch(26.9% 0 0);
-    --coollabs-subtle: oklch(70.8% 0 0);
-    --color-nav-text: #a8a8b0;
-    --color-nav-muted: #7a7a84;
-    --color-nav-active: #f2f2f2;
+    --coollabs-elevated: oklch(15% 0.0041 49.55); /* MapleDeploy branding: stone remap */
+    --coollabs-recessed: oklch(20% 0.0055 54.47); /* MapleDeploy branding: stone remap */
+    --coollabs-base: oklch(17% 0.0047 51.51); /* MapleDeploy branding: stone remap */
+    --coollabs-fill: oklch(26.9% 0.007 34.3); /* MapleDeploy branding: stone remap (≈ stone-800) */
+    --coollabs-line: oklch(32% 0.0085 50.61); /* MapleDeploy branding: stone remap */
+    --coollabs-hairline: oklch(26.9% 0.007 34.3); /* MapleDeploy branding: stone remap (≈ stone-800) */
+    --coollabs-subtle: oklch(70.8% 0.01 56.27); /* MapleDeploy branding: stone remap (≈ stone-400) */
+    --color-nav-text: #aea8a3; /* MapleDeploy branding: stone remap (was #a8a8b0) */
+    --color-nav-muted: #817974; /* MapleDeploy branding: stone remap (was #7a7a84) */
+    --color-nav-active: #f2f2f1; /* MapleDeploy branding: stone remap (was #f2f2f2) */
 }
 
 /* Theme surfaces are derived from one brand color. Changing
    --theme-base-color is enough to generate a complete dark surface ladder. */
 html[data-theme="custom"] {
-    --theme-base-color: #6b16ed;
+    --theme-base-color: #d52b1f; /* MapleDeploy branding: default custom-theme base → red-600 */
     --theme-bright-color: color-mix(in srgb, var(--theme-base-color) 85%, white);
     --theme-scrollbar-thumb: color-mix(in srgb, var(--theme-bright-color) 70%, var(--theme-accent-foreground));
     --theme-border-color: color-mix(in oklab, var(--theme-base-color) 42%, #52525b);
@@ -1608,7 +1654,7 @@ .resource-heading-tabs-scroller {
 
 .dark .resource-heading-tabs-scroller {
     /* Matches dark:bg-white/[0.035] pill track + panel so fade blends */
-    --resource-heading-tabs-fade: color-mix(in srgb, var(--color-panel, #0a0a0a) 96.5%, white);
+    --resource-heading-tabs-fade: color-mix(in srgb, var(--color-panel, #0b0a09) 96.5%, white); /* MapleDeploy branding: stone remap */
 }
 
 .resource-heading-tabs-control {
@@ -1673,8 +1719,8 @@ .resource-heading-tabs-control-icon {
 }
 
 .dark .resource-heading-tabs-control-icon {
-    color: var(--color-fg-dim, #a3a3a3);
-    background: var(--color-raised, #171717);
+    color: var(--color-fg-dim, #a8a29e); /* MapleDeploy branding: stone remap */
+    background: var(--color-raised, #191615); /* MapleDeploy branding: stone remap */
     box-shadow:
         0 1px 2px rgba(0, 0, 0, 0.35),
         0 0 0 1px rgba(255, 255, 255, 0.1);
@@ -1688,8 +1734,8 @@ .resource-heading-tabs-control:focus-visible .resource-heading-tabs-control-icon
 
 .dark .resource-heading-tabs-control:hover .resource-heading-tabs-control-icon,
 .dark .resource-heading-tabs-control:focus-visible .resource-heading-tabs-control-icon {
-    color: var(--color-fg, #fafafa);
-    background: var(--color-raised, #171717);
+    color: var(--color-fg, #fafaf9); /* MapleDeploy branding: stone remap */
+    background: var(--color-raised, #191615); /* MapleDeploy branding: stone remap */
 }
 
 .resource-heading-tabs-control:focus {
@@ -1698,7 +1744,7 @@ .resource-heading-tabs-control:focus {
 
 .resource-heading-tabs-control:focus-visible .resource-heading-tabs-control-icon {
     box-shadow:
-        0 0 0 2px color-mix(in srgb, var(--color-coollabs, #6b16ed) 45%, transparent),
+        0 0 0 2px color-mix(in srgb, var(--color-coollabs, #d52b1f) 45%, transparent), /* MapleDeploy branding */
         0 0 0 1px rgba(0, 0, 0, 0.08);
 }
 
@@ -2034,7 +2080,7 @@ .dark .searchable-listbox-search-input {
 }
 
 .searchable-listbox-search-input::placeholder {
-    color: var(--color-fg-faint, #737373);
+    color: var(--color-fg-faint, #78716c); /* MapleDeploy branding: stone remap */
 }
 
 .searchable-listbox-search-input:focus {
@@ -2067,7 +2113,7 @@ .searchable-listbox-empty {
     padding: 0.75rem 0.5rem;
     text-align: center;
     font-size: 0.75rem;
-    color: var(--color-fg-dim, #737373);
+    color: var(--color-fg-dim, #78716c); /* MapleDeploy branding: stone remap */
 }
 
 /* Flush layer-card body (tables and other full-bleed content) */
@@ -2995,7 +3041,7 @@ .logs-viewer {
 
 .dark .logs-viewer {
     background: var(--color-log);
-    color: #f5f5f5;
+    color: #f5f5f4; /* MapleDeploy branding: stone remap (stone-100) */
 }
 
 .logs-viewer-toolbar {
@@ -3077,7 +3123,7 @@ .logs-viewer-lines-label {
 }
 
 .dark .logs-viewer-lines-label {
-    color: var(--color-fg-faint, #6e6e74);
+    color: var(--color-fg-faint, #756d67); /* MapleDeploy branding: stone remap */
 }
 
 .logs-viewer-lines-input {
@@ -3114,7 +3160,7 @@ .logs-viewer-status-badge {
 .dark .logs-viewer-status-badge {
     border-color: rgba(255, 255, 255, 0.1) !important;
     background: rgba(255, 255, 255, 0.05) !important;
-    color: #d4d4d4 !important;
+    color: #d6d3d1 !important; /* MapleDeploy branding: stone remap (stone-300) */
 }
 
 /* Section header status (proxy/sentinel) stays inline with title on mobile */
@@ -3239,12 +3285,12 @@ .logs-viewer-btn:hover {
 }
 
 .dark .logs-viewer-btn {
-    color: #a3a3a3;
+    color: #a8a29e; /* MapleDeploy branding: stone remap (stone-400) */
 }
 
 .dark .logs-viewer-btn:hover {
     background: rgba(255, 255, 255, 0.06);
-    color: #f5f5f5;
+    color: #f5f5f4; /* MapleDeploy branding: stone remap (stone-100) */
 }
 
 .logs-viewer-btn-active {

resources/css/fonts.css

@@ -70,18 +70,12 @@ @font-face {
   src: url('../fonts/inter-v13-cyrillic_cyrillic-ext_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2') format('woff2');
 }
 
+/* MapleDeploy branding: Overlock for headings */
 @font-face {
   font-display: swap;
-  font-family: 'Geist Mono';
+  font-family: 'Overlock';
   font-style: normal;
-  font-weight: 100 900;
-  src: url('../fonts/geist-mono-variable.woff2') format('woff2');
-}
-
-@font-face {
-  font-display: swap;
-  font-family: 'Geist Sans';
-  font-style: normal;
-  font-weight: 100 900;
-  src: url('../fonts/geist-sans-variable.woff2') format('woff2');
+  font-weight: 900;
+  src: url('../fonts/overlock-v19-latin-900.woff2') format('woff2'),
+       url('../fonts/overlock-v19-latin-900.ttf') format('truetype');
 }

resources/css/utilities.css

@@ -36,15 +36,15 @@ @utility input-sticky {
     box-shadow: inset 4px 0 0 transparent, inset 0 0 0 1px #e5e5e5;
 
     &:where(.dark, .dark *) {
-        box-shadow: inset 4px 0 0 transparent, inset 0 0 0 1px #242424;
+        box-shadow: inset 4px 0 0 transparent, inset 0 0 0 1px #272322; /* MapleDeploy branding: stone remap (was #242424) */
     }
 
     &:focus-visible {
-        box-shadow: inset 4px 0 0 #6b16ed, inset 0 0 0 1px #e5e5e5;
+        box-shadow: inset 4px 0 0 #d52b1f, inset 0 0 0 1px #e5e5e5;
     }
 
     &:where(.dark, .dark *):focus-visible {
-        box-shadow: inset 4px 0 0 #fcd452, inset 0 0 0 1px #242424;
+        box-shadow: inset 4px 0 0 #fde047, inset 0 0 0 1px #272322; /* MapleDeploy branding: stone remap (was #242424) */
     }
 }
 
@@ -178,7 +178,7 @@ @utility tag {
 }
 
 @utility add-tag {
-    @apply flex items-center px-2 text-xs cursor-pointer dark:text-neutral-500/20 text-neutral-500 group-hover:text-neutral-700 dark:group-hover:text-white dark:hover:bg-coolgray-300 hover:bg-neutral-200;
+    @apply flex items-center px-2 text-xs cursor-pointer dark:text-neutral-500 text-neutral-500 group-hover:text-neutral-700 dark:group-hover:text-white dark:hover:bg-coolgray-300 hover:bg-neutral-200;
 }
 
 @utility user-menu-item {
@@ -272,7 +272,8 @@ @utility icon {
 }
 
 @utility scrollbar {
-    @apply scrollbar-thumb-coollabs-100 scrollbar-track-neutral-200 dark:scrollbar-thumb-coollabs-100 dark:scrollbar-track-coolgray-200 scrollbar-thin;
+    /* MapleDeploy branding: yellow scrollbar thumb instead of Coolify brand color */
+    @apply scrollbar-thumb-warning scrollbar-track-neutral-200 dark:scrollbar-thumb-warning dark:scrollbar-track-coolgray-200 scrollbar-thin;
 }
 
 @utility main {
@@ -332,7 +333,8 @@ @utility description {
 }
 
 @utility bg-coollabs-gradient {
-    @apply from-purple-500 via-pink-500 to-red-500 bg-linear-to-r;
+    /* MapleDeploy branding */
+    @apply from-red-700 via-red-500 to-red-400 bg-linear-to-r;
 }
 
 @utility text-helper {
@@ -396,7 +398,7 @@ @utility log-warning {
 }
 
 @utility log-debug {
-    @apply bg-purple-500/10 dark:bg-purple-500/15;
+    @apply bg-stone-500/10 dark:bg-stone-500/15;
 }
 
 @utility log-info {

resources/js/terminal.js

@@ -43,7 +43,7 @@ function createApplicationTerminalTheme(accent, colors = {}) {
     return {
         ...baseApplicationTerminalTheme,
         cursor: accent,
-        cursorAccent: '#101012',
+        cursorAccent: '#12100e', // MapleDeploy branding: stone remap (was #101012)
         selectionBackground: `${accent}66`,
         ...colors,
     };
@@ -69,7 +69,7 @@ function createSystemTerminalTheme() {
     }
 
     if (document.documentElement.classList.contains('dark')) {
-        return createApplicationTerminalTheme('#8C8E9C');
+        return createApplicationTerminalTheme('#958D89'); // MapleDeploy branding: stone remap (was #8C8E9C)
     }
 
     return createApplicationTerminalTheme('#52525b', {
@@ -143,7 +143,7 @@ const applicationTerminalThemes = {
         cyan: '#51d5d5',
         brightMagenta: '#ffa1d4',
     }),
-    'shadows-transparent': createApplicationTerminalTheme('#8C8E9C'),
+    'shadows-transparent': createApplicationTerminalTheme('#958D89'), // MapleDeploy branding: stone remap (was #8C8E9C)
 };
 
 function logTerminal(level, message, ...context) {

resources/views/auth/confirm-password.blade.php

@@ -1,5 +1,5 @@
 <x-layout-simple>
-    <x-auth.shell title="Coolify" description="Confirm your password to continue to this secure area.">
+    <x-auth.shell title="MapleDeploy" description="Confirm your password to continue to this secure area.">
         <div class="flex flex-col gap-4">
             @if (session('status'))
                 <x-auth.alert type="success">{{ session('status') }}</x-auth.alert>

resources/views/auth/forgot-password.blade.php

@@ -1,5 +1,5 @@
 <x-layout-simple>
-    <x-auth.shell title="Coolify"
+    <x-auth.shell title="MapleDeploy"
         description="Enter your account email and we’ll send you a secure reset link.">
         <div class="flex flex-col gap-4">
             @if (session('status'))

resources/views/auth/login.blade.php

@@ -1,5 +1,5 @@
 <x-layout-simple>
-    <x-auth.shell title="Coolify" description="Sign in to manage your applications and infrastructure.">
+    <x-auth.shell title="MapleDeploy" description="Sign in to manage your applications and infrastructure.">
         <div class="flex flex-col gap-4">
             @if (session('status'))
                 <x-auth.alert type="success">{{ session('status') }}</x-auth.alert>
@@ -93,7 +93,7 @@ class="auth-tooltip max-w-xs whitespace-normal">
 
         <x-slot:footer>
             @if ($is_registration_enabled)
-                <span>New to Coolify?</span>
+                <span>New to MapleDeploy?</span> {{-- MapleDeploy branding --}}
                 <a href="/register" class="auth-text-link">{{ __('auth.register_now') }}</a>
             @else
                 <span>{{ __('auth.registration_disabled') }}</span>

resources/views/auth/register.blade.php

@@ -11,7 +11,7 @@ function getOldOrLocal($key, $localValue)
 ?>
 
 <x-layout-simple>
-    <x-auth.shell title="Coolify"
+    <x-auth.shell title="MapleDeploy"
         :description="$isFirstUser ? 'Create the root account for this instance.' : 'Create your account to get started.'">
         <div class="flex flex-col gap-4">
             @if ($isFirstUser)

resources/views/auth/reset-password.blade.php

@@ -1,6 +1,6 @@
 <x-layout-simple>
     <x-auth.shell title="{{ __('auth.reset_password') }}"
-        description="Choose a strong new password for your Coolify account.">
+        description="Choose a strong new password for your MapleDeploy account.">
         <div class="flex flex-col gap-4">
             @if (session('status'))
                 <x-auth.alert type="success">{{ session('status') }}</x-auth.alert>

resources/views/auth/two-factor-challenge.blade.php

@@ -1,5 +1,5 @@
 <x-layout-simple>
-    <x-auth.shell title="Coolify" description="Verify your identity to finish signing in.">
+    <x-auth.shell title="MapleDeploy" description="Verify your identity to finish signing in.">
         <div class="flex flex-col gap-4" x-data="{
             showRecovery: false,
             submitAuthenticatorCode(event) {

resources/views/auth/verify-email.blade.php

@@ -1,9 +1,9 @@
 <x-layout-simple>
-    <x-auth.shell title="Coolify" description="Verify your email address to activate your account.">
+    <x-auth.shell title="MapleDeploy" description="Verify your email address to activate your account.">
         <div class="flex flex-col gap-4">
             <div class="auth-guidance">
                 <x-reicon name="mail" class="mt-0.5 size-4 shrink-0" />
-                <p>We sent a verification link to your email address. Open it to continue to Coolify.</p>
+                <p>We sent a verification link to your email address. Open it to continue to MapleDeploy.</p> {{-- MapleDeploy branding --}}
             </div>
 
             <livewire:verify-email />

resources/views/components/auth/shell.blade.php

@@ -7,7 +7,15 @@
     <div class="auth-shell-content">
         <div class="auth-card">
             <div class="auth-card-heading">
-                <h1>{{ $title }}</h1>
+                {{-- MapleDeploy branding: brand-titled pages show the logo lockup instead of a wordmark heading --}}
+                @if ($title === 'MapleDeploy')
+                    <div class="flex justify-center pb-2">
+                        <img src="https://mapledeploy.ca/api/logo/lockup?height=80" alt="MapleDeploy" class="h-12 dark:hidden" />
+                        <img src="https://mapledeploy.ca/api/logo/lockup?height=80&dark=true" alt="MapleDeploy" class="hidden h-12 dark:block" />
+                    </div>
+                @else
+                    <h1>{{ $title }}</h1>
+                @endif
                 @if ($description)
                     <p>{{ $description }}</p>
                 @endif

resources/views/components/callout.blade.php

@@ -46,7 +46,7 @@
     <div class="flex items-start gap-2.5">
         <x-reicon :name="$style['icon']" class="mt-0.5 size-4 shrink-0 {{ $style['iconClass'] }}" />
         <div class="min-w-0 flex-1 {{ $dismissible ? 'pr-7' : '' }}">
-            <div class="text-[12px] font-semibold {{ $style['titleClass'] }}">{{ $title }}</div>
+            <div class="text-[12px] font-semibold font-display {{ $style['titleClass'] }}">{{ $title }}</div> {{-- MapleDeploy branding --}}
             <div class="mt-0.5 text-[12px] leading-5 {{ $style['textClass'] }}">{{ $slot }}</div>
         </div>
         @if ($dismissible && $onDismiss)

resources/views/components/emails/footer.blade.php

@@ -1,6 +1,7 @@
 {{ Illuminate\Mail\Markdown::parse('---') }}
 
 Thank you,<br>
-{{ config('app.name') ?? 'Coolify' }}
+{{ config('app.name') ?? 'MapleDeploy' }}
 
-{{ Illuminate\Mail\Markdown::parse('[Contact Support](https://coolify.io/docs/contact)') }}
+{{-- MapleDeploy branding: support link --}}
+{{ Illuminate\Mail\Markdown::parse('[Contact Support](https://mapledeploy.ca/contact)') }}

resources/views/components/forms/datalist.blade.php

@@ -99,10 +99,11 @@
             {{-- Unified Input Container with Tags Inside --}}
             <div @click="$refs.searchInput.focus()" x-data="{ focused: false }" @focusin="focused = true" @focusout="focused = false"
                 class="flex flex-wrap gap-1.5 max-h-40 overflow-y-auto scrollbar py-1.5  px-2 w-full text-sm rounded-sm border-0 bg-white dark:bg-coolgray-100 cursor-text px-1 text-black dark:text-white"
+                {{-- MapleDeploy branding: red accent instead of Coolify purple; dark border #272322 stone remap (was #242424) --}}
                 :style="(() => {
                     const isDark = document.documentElement.classList.contains('dark');
-                    const accent = isDark ? '#fcd452' : '#6b16ed';
-                    const border = isDark ? '#242424' : '#e5e5e5';
+                    const accent = isDark ? '#fde047' : '#d52b1f';
+                    const border = isDark ? '#272322' : '#e5e5e5';
                     return focused
                         ? 'box-shadow: inset 4px 0 0 ' + accent + ', inset 0 0 0 2px ' + border + ';'
                         : 'box-shadow: inset 4px 0 0 transparent, inset 0 0 0 2px ' + border + ';';
@@ -110,7 +111,7 @@ class="flex flex-wrap gap-1.5 max-h-40 overflow-y-auto scrollbar py-1.5  px-2 w-
                 :class="{
                         'opacity-50': {{ $disabled ? 'true' : 'false' }}
                     }" wire:loading.class="opacity-50"
-                wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]">
+                wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]">
 
                 {{-- Selected Tags Inside Input --}}
                 <template x-for="value in selected" :key="value">
@@ -240,17 +241,18 @@ class="pointer-events-none absolute inset-0 rounded-[5px] border border-neutral-
                 {{-- Input Container --}}
                 <div @click="openDropdown()" x-data="{ focused: false }" @focusin="focused = true" @focusout="focused = false"
                     class="flex items-center gap-2 py-1.5 w-full text-sm rounded-sm border-0 bg-white dark:bg-coolgray-100 cursor-text text-black dark:text-white"
+                    {{-- MapleDeploy branding: red accent instead of Coolify purple; dark border #272322 stone remap (was #242424) --}}
                     :style="(() => {
                         const isDark = document.documentElement.classList.contains('dark');
-                        const accent = isDark ? '#fcd452' : '#6b16ed';
-                        const border = isDark ? '#242424' : '#e5e5e5';
+                        const accent = isDark ? '#fde047' : '#d52b1f';
+                        const border = isDark ? '#272322' : '#e5e5e5';
                         return focused
                             ? 'box-shadow: inset 4px 0 0 ' + accent + ', inset 0 0 0 2px ' + border + ';'
                             : 'box-shadow: inset 4px 0 0 transparent, inset 0 0 0 2px ' + border + ';';
                     })()"
                     :class="{
                     'opacity-50': {{ $disabled ? 'true' : 'false' }}
-                }" wire:loading.class="opacity-50" wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]">
+                }" wire:loading.class="opacity-50" wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]">
 
                     {{-- Display Selected Value or Search Input --}}
                     <div class="flex-1 flex items-center min-w-0 px-1">

resources/views/components/forms/env-var-input.blade.php

@@ -211,7 +211,7 @@
             @readonly($readonly)
             @if ($modelBinding !== 'null')
                 wire:model="{{ $modelBinding }}"
-                wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]"
+                wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]"
             @endif
             wire:loading.attr="disabled"
             @disabled($disabled)

resources/views/components/forms/input.blade.php

@@ -28,16 +28,6 @@
         </div>
     @elseif ($type === 'password')
         <div class="relative" x-data="{ type: 'password' }" @success.window="type = 'password'">
-            <input autocomplete="{{ $autocomplete }}" value="{{ $value }}"
-                x-bind:type="type"
-                x-bind:class="{ 'truncate': type === 'text' && ! $el.disabled }"
-                {{ $attributes->merge(['class' => $defaultClass]) }} @required($required)
-                @if ($modelBinding !== 'null') wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @endif
-                wire:loading.attr="disabled"
-                @readonly($readonly) @disabled($disabled) id="{{ $htmlId }}"
-                name="{{ $name }}" placeholder="{{ $attributes->get('placeholder') }}"
-                aria-placeholder="{{ $attributes->get('placeholder') }}"
-                @if ($autofocus) x-ref="autofocusInput" @endif>
             @if ($allowToPeak)
                 <button type="button" x-on:click="type = type === 'password' ? 'text' : 'password'"
                     class="password-toggle flex absolute inset-y-0 right-0 z-10 items-center pr-2 cursor-pointer text-neutral-500 hover:text-black dark:text-neutral-400 dark:hover:text-white"
@@ -48,12 +38,22 @@ class="password-toggle flex absolute inset-y-0 right-0 z-10 items-center pr-2 cu
                     <x-reicon name="eye-off2" x-cloak x-show="type === 'text'" class="size-[18px]" />
                 </button>
             @endif
+            <input autocomplete="{{ $autocomplete }}" value="{{ $value }}"
+                x-bind:type="type"
+                x-bind:class="{ 'truncate': type === 'text' && ! $el.disabled }"
+                {{ $attributes->merge(['class' => $defaultClass]) }} @required($required)
+                @if ($modelBinding !== 'null') wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @endif
+                wire:loading.attr="disabled"
+                @readonly($readonly) @disabled($disabled) id="{{ $htmlId }}"
+                name="{{ $name }}" placeholder="{{ $attributes->get('placeholder') }}"
+                aria-placeholder="{{ $attributes->get('placeholder') }}"
+                @if ($autofocus) x-ref="autofocusInput" @endif>
 
         </div>
     @else
         <input autocomplete="{{ $autocomplete }}" @if ($value) value="{{ $value }}" @endif
             {{ $attributes->merge(['class' => $defaultClass]) }} @required($required) @readonly($readonly)
-            @if ($modelBinding !== 'null') wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @endif
+            @if ($modelBinding !== 'null') wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @endif
             wire:loading.attr="disabled"
             type="{{ $type }}" @disabled($disabled) min="{{ $attributes->get('min') }}"
             max="{{ $attributes->get('max') }}" minlength="{{ $attributes->get('minlength') }}"

resources/views/components/forms/monaco-editor.blade.php

@@ -46,10 +46,11 @@
                             inherit: true,
                             rules: [],
                             colors: {
-                                'editor.background': '#0b0b0c',
-                                'editorGutter.background': '#0b0b0c',
-                                'editorStickyScroll.background': '#0b0b0c',
-                                'minimap.background': '#0b0b0c',
+                                // MapleDeploy branding: stone remap (was #0b0b0c)
+                                'editor.background': '#0d0b0a',
+                                'editorGutter.background': '#0d0b0a',
+                                'editorStickyScroll.background': '#0d0b0a',
+                                'minimap.background': '#0d0b0a',
                                 'scrollbarSlider.background': '#ffffff1a',
                                 'scrollbarSlider.hoverBackground': '#ffffff2e',
                                 'scrollbarSlider.activeBackground': '#ffffff40',

resources/views/components/forms/select.blade.php

@@ -14,7 +14,7 @@ class="mb-0! flex items-center gap-1 text-sm font-medium leading-4 {{ $disabled
     @endif
     <select {{ $attributes->merge(['class' => $defaultClass]) }} @disabled($disabled) @required($required)
         wire:loading.attr="disabled" name={{ $modelBinding }} id="{{ $htmlId }}"
-        @if ($attributes->whereStartsWith('wire:model')->first()) {{ $attributes->whereStartsWith('wire:model')->first() }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @else wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @endif>
+        @if ($attributes->whereStartsWith('wire:model')->first()) {{ $attributes->whereStartsWith('wire:model')->first() }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @else wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @endif>
         {{ $slot }}
     </select>
     @error($modelBinding)

resources/views/components/forms/textarea.blade.php

@@ -36,21 +36,6 @@ function handleKeydown(e) {
     @else
         @if ($type === 'password')
             <div class="relative" x-data="{ type: 'password' }" @success.window="type = 'password'">
-                <input x-cloak x-show="type === 'password'" value="{{ $value }}"
-                    {{ $attributes->merge(['class' => $defaultClassInput]) }} @required($required)
-                    @if ($modelBinding !== 'null') wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @endif
-                    wire:loading.attr="disabled"
-                    type="{{ $type }}" @readonly($readonly) @disabled($disabled) id="{{ $htmlId }}"
-                    name="{{ $name }}" placeholder="{{ $attributes->get('placeholder') }}"
-                    aria-placeholder="{{ $attributes->get('placeholder') }}">
-                <textarea minlength="{{ $minlength }}" maxlength="{{ $maxlength }}" x-cloak x-show="type !== 'password'"
-                    placeholder="{{ $placeholder }}" {{ $attributes->merge(['class' => $defaultClass]) }}
-                    @if ($realtimeValidation) wire:model.debounce.200ms="{{ $modelBinding }}" wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]"
-                @else
-            wire:model={{ $value ?? $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @endif
-                    @disabled($disabled) @readonly($readonly) @required($required) id="{{ $htmlId }}"
-                    name="{{ $name }}" name={{ $modelBinding }}
-                    @if ($autofocus) x-ref="autofocusInput" @endif></textarea>
                 @if ($allowToPeak)
                     <button type="button" x-on:click="type = type === 'password' ? 'text' : 'password'"
                         class="absolute inset-y-0 right-0 flex items-center h-6 pt-2 pr-2 cursor-pointer dark:hover:text-white"
@@ -71,15 +56,30 @@ class="absolute inset-y-0 right-0 flex items-center h-6 pt-2 pr-2 cursor-pointer
                         </svg>
                     </button>
                 @endif
+                <input x-cloak x-show="type === 'password'" value="{{ $value }}"
+                    {{ $attributes->merge(['class' => $defaultClassInput]) }} @required($required)
+                    @if ($modelBinding !== 'null') wire:model={{ $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @endif
+                    wire:loading.attr="disabled"
+                    type="{{ $type }}" @readonly($readonly) @disabled($disabled) id="{{ $htmlId }}"
+                    name="{{ $name }}" placeholder="{{ $attributes->get('placeholder') }}"
+                    aria-placeholder="{{ $attributes->get('placeholder') }}">
+                <textarea minlength="{{ $minlength }}" maxlength="{{ $maxlength }}" x-cloak x-show="type !== 'password'"
+                    placeholder="{{ $placeholder }}" {{ $attributes->merge(['class' => $defaultClass]) }}
+                    @if ($realtimeValidation) wire:model.debounce.200ms="{{ $modelBinding }}" wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]"
+                @else
+            wire:model={{ $value ?? $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @endif
+                    @disabled($disabled) @readonly($readonly) @required($required) id="{{ $htmlId }}"
+                    name="{{ $name }}" name={{ $modelBinding }}
+                    @if ($autofocus) x-ref="autofocusInput" @endif></textarea>
 
             </div>
         @else
             <textarea minlength="{{ $minlength }}" maxlength="{{ $maxlength }}"
                 {{ $allowTab ? '@keydown.tab=handleKeydown' : '' }} placeholder="{{ $placeholder }}"
                 {{ !$spellcheck ? 'spellcheck=false' : '' }} {{ $attributes->merge(['class' => $defaultClass]) }}
-                @if ($realtimeValidation) wire:model.debounce.200ms="{{ $modelBinding }}" wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]"
+                @if ($realtimeValidation) wire:model.debounce.200ms="{{ $modelBinding }}" wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]"
         @else
-    wire:model={{ $value ?? $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#6b16ed,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fcd452,inset_0_0_0_2px_#242424]" @endif
+    wire:model={{ $value ?? $modelBinding }} wire:dirty.class="[box-shadow:inset_4px_0_0_#d52b1f,inset_0_0_0_2px_#e5e5e5] dark:[box-shadow:inset_4px_0_0_#fde047,inset_0_0_0_2px_#272322]" @endif
                 @disabled($disabled) @readonly($readonly) @required($required) id="{{ $htmlId }}"
                 name="{{ $name }}" name={{ $modelBinding }}
                 @if ($autofocus) x-ref="autofocusInput" @endif></textarea>

resources/views/components/limit-reached.blade.php

@@ -1,5 +1,5 @@
 <div class="flex flex-col items-center justify-center h-32">
-    <span class="text-xl font-bold dark:text-white">You have reached the limit of {{ $name }} you can create.</span>
+    <span class="text-xl font-bold font-display dark:text-white">You have reached the limit of {{ $name }} you can create.</span>
     <span>Please <a class="dark:text-white underline" {{ wireNavigate() }} href="{{ route('subscription.show') }}">upgrade your
             subscription</a> to create more
         {{ $name }}.</span>

resources/views/components/navbar.blade.php

@@ -47,7 +47,7 @@
                     document.documentElement.classList.remove('dark');
                 }
                 document.documentElement.dataset.theme = userSettings === 'custom' ? 'custom' : (isDark ? 'dark' : 'light');
-                document.querySelector('meta[name=theme-color]')?.setAttribute('content', isDark ? '#101010' : '#ffffff');
+                document.querySelector('meta[name=theme-color]')?.setAttribute('content', isDark ? '#12100e' : '#ffffff'); // MapleDeploy branding: stone remap (was #101010)
             }
     }">
     {{-- Search is only useful when workspace resources are available --}}
@@ -167,16 +167,7 @@ class="{{ request()->is('security*') ? 'menu-item-active menu-item' : 'menu-item
                     <span class="menu-item-label" :class="collapsed && 'lg:hidden'">Keys & Tokens</span>
                 </a>
             </li>
-            @if (isCloud() && auth()->user()->isAdmin())
-                <li>
-                    <a title="Subscription" {{ wireNavigate() }}
-                        class="{{ request()->is('subscription*') ? 'menu-item-active menu-item' : 'menu-item' }}"
-                        :class="collapsed && 'lg:justify-center lg:px-0'" href="{{ route('subscription.show') }}">
-                        <x-reicon name="subscription" class="menu-item-icon" />
-                        <span class="menu-item-label" :class="collapsed && 'lg:hidden'">Subscription</span>
-                    </a>
-                </li>
-            @endif
+            {{-- MapleDeploy branding: Cloud subscription menu removed --}}
             <li>
                 <a title="Tags" {{ wireNavigate() }}
                     class="{{ request()->is('tags*') ? 'menu-item-active menu-item' : 'menu-item' }}"
@@ -197,34 +188,19 @@ class="{{ request()->is('settings*') ? 'menu-item-active menu-item' : 'menu-item
             @endif
             <li class="flex-1" aria-hidden="true"></li>
         @endif
-        @if (auth()->id() === 0 && (isCloud() || isDev()))
-            <li>
-                <a title="Admin" {{ wireNavigate() }}
-                    class="{{ request()->is('admin') ? 'menu-item-active menu-item' : 'menu-item' }}"
-                    :class="collapsed && 'lg:justify-center lg:px-0'" href="{{ route('admin.index') }}">
-                    <x-reicon name="fire" class="menu-item-icon text-pink-500" />
-                    <span class="menu-item-label" :class="collapsed && 'lg:hidden'">Admin</span>
-                </a>
-            </li>
-        @endif
-        @if (isCloud() && ! isSubscribed())
-            {{-- Unsubscribed cloud has no workspace items — keep these at the top of the list. --}}
-            <li class="nav-section" :class="collapsed && 'lg:hidden'">Account</li>
-            <li>
-                <a title="Subscription" {{ wireNavigate() }}
-                    class="{{ request()->is('subscription*') ? 'menu-item-active menu-item' : 'menu-item' }}"
-                    :class="collapsed && 'lg:justify-center lg:px-0'"
-                    href="{{ isSubscriptionOnGracePeriod() ? route('subscription.show') : route('subscription.index') }}">
-                    <x-reicon name="subscription" class="menu-item-icon" />
-                    <span class="menu-item-label" :class="collapsed && 'lg:hidden'">Subscription</span>
-                </a>
-            </li>
-            @if (auth()->user()->teams()->get()->count() > 1)
-                <li class="mt-2">
-                    <livewire:navbar-delete-team />
-                </li>
-            @endif
-        @endif
+        {{-- MapleDeploy branding: Cloud admin menu removed --}}
+        {{-- MapleDeploy branding: Cloud subscription/account section removed --}}
+        {{-- MapleDeploy branding: AGPL source code link (license requirement) --}}
+        <li>
+            <a title="Source code (AGPL-3.0)" class="menu-item" :class="collapsed && 'lg:justify-center lg:px-0'"
+                href="https://forgejo.mapledeploy.ca/rosslh/coolify" target="_blank">
+                <svg class="menu-item-icon" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+                    <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"
+                        stroke-width="2" d="M16 18l6-6-6-6M8 6l-6 6 6 6" />
+                </svg>
+                <span class="menu-item-label" :class="collapsed && 'lg:hidden'">Source code</span>
+            </a>
+        </li>
     </ul>
     {{-- Sticky sidebar collapser (desktop only; mobile uses a temporary slide-over) --}}
     <div class="sticky bottom-0 mt-auto -mx-2 hidden items-center gap-1 bg-white px-2 py-2 dark:bg-panel lg:-mx-3 lg:flex lg:px-3"

resources/views/components/pricing-plans.blade.php

@@ -35,19 +35,21 @@ class="font-bold dark:text-warning">{{ config('constants.limits.trial_period') }
             </div>
         </div>
         <div class="p-4 rounded-sm bg-coolgray-400">
+            {{-- MapleDeploy branding: link to Forgejo source repo --}}
             <h2 id="tier-hobby" class="flex items-start gap-4 text-4xl font-bold tracking-tight">Unlimited Trial
                 <x-forms.button><a class="font-bold dark:text-white hover:no-underline"
-                        href="https://github.com/coollabsio/coolify">Get Started</a></x-forms.button>
+                        href="https://forgejo.mapledeploy.ca/rosslh/coolify">Get Started</a></x-forms.button>
             </h2>
             <p class="mt-4 text-sm leading-6">Start self-hosting <span class="dark:text-warning">without limits</span>
                 with
-                our
-                OSS version. Same features as the paid version, but you have to manage by yourself.</p>
+                the
+                open source version. Same features as the paid version, but you have to manage by yourself.</p>
         </div>
 
         <div class="flow-root mt-12">
+            {{-- MapleDeploy branding: link to mapledeploy.ca --}}
             <div class="pb-10 text-xl text-center">For the detailed list of features, please visit our landing page: <a
-                    class="font-bold underline dark:text-white" href="https://coolify.io">coolify.io</a></div>
+                    class="font-bold underline dark:text-white" href="https://mapledeploy.ca">mapledeploy.ca</a></div>
             <div
                 class="grid max-w-sm grid-cols-1 -mt-16 divide-y divide-neutral-200 dark:divide-coolgray-500 isolate gap-y-16 sm:mx-auto lg:-mx-8 lg:mt-0 lg:max-w-none lg:grid-cols-3 lg:divide-x lg:divide-y-0 xl:-mx-4">
 

resources/views/components/server/provider-token-picker.blade.php

@@ -6,7 +6,7 @@
 ])
 
 <x-application.settings-section title="{{ $providerLabel }} account"
-    description="Choose the cloud credential Coolify should use for this server." flush>
+    description="Choose the cloud credential MapleDeploy should use for this server." flush> {{-- MapleDeploy branding --}}
     @if ($tokens->isEmpty())
         <x-empty title="No {{ $providerLabel }} tokens"
             description="Add an API token to continue provisioning." icon-name="keys" size="sm">

resources/views/components/settings/layout.blade.php

@@ -17,7 +17,7 @@
 <section class="application-settings-workspace w-full max-w-none">
     <header class="settings-mobile-header xl:hidden">
         <h1 class="settings-mobile-title">Instance Settings</h1>
-        <p class="settings-mobile-description">Configure global settings for this Coolify instance.</p>
+        <p class="settings-mobile-description">Configure global settings for this MapleDeploy instance.</p> {{-- MapleDeploy branding --}}
     </header>
     <div class="grid min-w-0 gap-8 xl:grid-cols-[210px_minmax(0,1fr)] xl:gap-8">
         <aside class="application-settings-navigation min-w-0 xl:self-start">

resources/views/components/status-summary.blade.php

@@ -86,7 +86,7 @@ class="listbox-panel top-8! right-auto! left-0! z-[90]! w-[min(16rem,calc(100vw-
                 {{ $healthLabel }}
                 @if ($healthLabel === 'Not configured')
                     <x-helper label="About unconfigured healthchecks"
-                        helper="No healthcheck is configured, so Coolify can only report the container state. Traffic can still be routed to the container, but Coolify cannot verify that the application inside it is ready to receive requests." />
+                        helper="No healthcheck is configured, so MapleDeploy can only report the container state. Traffic can still be routed to the container, but MapleDeploy cannot verify that the application inside it is ready to receive requests." /> {{-- MapleDeploy branding --}}
                 @endif
             </span>
         </div>

resources/views/components/status/index.blade.php

@@ -24,7 +24,7 @@
     @if ($stoppedAfterRestartLimit)
         <x-status-badge status="Stopped after reaching restart limit ({{ $resource->restart_count }}/{{ $resource->max_restart_count }})."
             type="warning"
-            title="Container has crashed and Coolify stopped it after {{ $resource->restart_count }} restart attempts." />
+            title="Container has crashed and MapleDeploy stopped it after {{ $resource->restart_count }} restart attempts." /> {{-- MapleDeploy branding --}}
     @endif
     @if (!str($resource->status)->contains('exited') && $showRefreshButton)
         <x-status-badge as="button" wire:target="manualCheckStatus" wire:loading.attr="disabled"

resources/views/components/terminal/theme-selector.blade.php

@@ -14,7 +14,7 @@ class="terminal-theme-trigger flex h-8 items-center gap-2 rounded-md px-2.5 text
     </button>
 
     <div x-cloak x-show="themeOpen" x-transition.origin.top.right
-        class="console-theme-selector absolute top-11 right-0 z-50 max-h-80 w-56 overflow-y-auto rounded-lg border border-neutral-200 bg-white p-1 shadow-[0_18px_50px_rgba(0,0,0,0.18)] dark:border-white/[0.1] dark:bg-[#111113] dark:shadow-[0_18px_50px_rgba(0,0,0,0.55)]">
+        class="console-theme-selector absolute top-11 right-0 z-50 max-h-80 w-56 overflow-y-auto rounded-lg border border-neutral-200 bg-white p-1 shadow-[0_18px_50px_rgba(0,0,0,0.18)] dark:border-white/[0.1] dark:bg-[#13110f] dark:shadow-[0_18px_50px_rgba(0,0,0,0.55)]"> {{-- MapleDeploy branding: stone remap (was #111113) --}}
         @foreach ($themes as $theme)
             <button type="button"
                 class="flex h-8 w-full items-center gap-2 rounded-md px-2 text-left text-[11px] text-neutral-600 transition-colors hover:bg-neutral-100 hover:text-neutral-950 dark:text-white/65 dark:hover:bg-white/[0.07] dark:hover:text-white"
@@ -22,7 +22,7 @@ class="flex h-8 w-full items-center gap-2 rounded-md px-2 text-left text-[11px]
                 <span class="h-3 w-5 rounded-full border border-white/10"
                     style="background: {{ $theme['background'] }}"></span>
                 <span class="flex-1">{{ $theme['name'] }}</span>
-                <svg x-show="consoleTheme === '{{ $theme['key'] }}'" class="size-3 text-[#fcd452]"
+                <svg x-show="consoleTheme === '{{ $theme['key'] }}'" class="size-3 text-[#fde047]"
                     viewBox="0 0 12 12" fill="none" aria-hidden="true">
                     <path d="m2.5 6.25 2.1 2.1 4.9-5" stroke="currentColor" stroke-width="1.4"
                         stroke-linecap="round" stroke-linejoin="round" />

resources/views/components/top-user-menu.blade.php

@@ -13,7 +13,7 @@
     appearanceOpen: false,
     theme: localStorage.getItem('theme') === 'purple' ? 'custom' : (localStorage.getItem('theme') || 'dark'),
     pageWidth: localStorage.getItem('pageWidth') || 'full',
-    themeColor: localStorage.getItem('themeColor') || '#6b16ed',
+    themeColor: localStorage.getItem('themeColor') || '#d52b1f',
     themeColorFrame: null,
     avatarUrl: @js($user?->avatar_path ? route('profile.avatar', ['v' => $user->updated_at->timestamp]) : null),
     openPanel() {
@@ -35,9 +35,9 @@
         const isDark = type === 'dark' || type === 'custom' || (type === 'system' && prefersDark);
         document.documentElement.classList.toggle('dark', isDark);
         document.documentElement.dataset.theme = type === 'custom' ? 'custom' : (isDark ? 'dark' : 'light');
-        document.documentElement.style.setProperty('--theme-base-color', localStorage.themeColor || '#6b16ed');
+        document.documentElement.style.setProperty('--theme-base-color', localStorage.themeColor || '#d52b1f');
         document.documentElement.style.setProperty('--theme-accent-foreground', window.themeAccentForeground(this.themeColor));
-        document.querySelector('meta[name=theme-color]')?.setAttribute('content', isDark ? '#101010' : '#ffffff');
+        document.querySelector('meta[name=theme-color]')?.setAttribute('content', isDark ? '#12100e' : '#ffffff'); // MapleDeploy branding: stone remap (was #101010)
     },
     setWidth(width) {
         this.pageWidth = width;
@@ -192,26 +192,7 @@ class="size-3.5 text-coollabs dark:text-warning" viewBox="0 0 12 12" fill="none"
                 Documentation
             </span>
         </a>
-        <x-modal-input title="How can we help?">
-            <x-slot:content>
-                <div class="listbox-option cursor-pointer" @click="closePanel()">
-                    <span class="flex items-center gap-2">
-                        <x-reicon name="feedback" class="size-4 opacity-80" />
-                        Feedback
-                    </span>
-                </div>
-            </x-slot:content>
-            <livewire:help />
-        </x-modal-input>
-        @if (isSubscribed() || !isCloud())
-            <a href="https://coolify.io/sponsorships" target="_blank" rel="noopener noreferrer"
-                class="listbox-option">
-                <span class="flex items-center gap-2">
-                    <x-reicon name="sponsor" class="size-4 text-pink-500" />
-                    Sponsor us
-                </span>
-            </a>
-        @endif
+        {{-- MapleDeploy branding: feedback modal (deleted Help component) and sponsor link removed --}}
 
         <div class="my-1 h-px bg-neutral-200 dark:bg-white/[0.07]"></div>
 

resources/views/components/version.blade.php

@@ -1,10 +1,8 @@
+{{-- MapleDeploy branding: show version without linking to upstream releases.
+     CI appends a .YYYYMMDDHHmm build timestamp to the upstream base version;
+     display only the base so the top bar doesn't overflow, keep the full
+     build string discoverable via the tooltip. --}}
 @php($version = config('constants.coolify.version'))
+@php($displayVersion = preg_replace('/\.\d{12}$/', '', $version))
 
-@if (str_contains($version, '-dev.'))
-    <span {{ $attributes->merge(['class' => 'text-xs opacity-90']) }}>v{{ $version }}</span>
-@else
-    <a {{ $attributes->merge(['class' => 'text-xs cursor-pointer opacity-90 hover:opacity-100 dark:hover:text-white hover:text-black']) }}
-        href="https://github.com/coollabsio/coolify/releases/tag/v{{ config('constants.coolify.version') }}" target="_blank">
-        v{{ $version }}
-    </a>
-@endif
+<span title="v{{ $version }}" {{ $attributes->merge(['class' => 'text-xs opacity-90 dark:text-neutral-500']) }}>v{{ $displayVersion }}</span>

resources/views/emails/api-token-expiring.blade.php

@@ -1,5 +1,5 @@
 <x-emails.layout>
-Your Coolify API token ({{ $tokenName }}) expires on {{ $expiresAt }}.
+Your MapleDeploy API token ({{ $tokenName }}) expires on {{ $expiresAt }}. {{-- MapleDeploy branding --}}
 
 Rotate this token before it expires. API calls using this token will start failing once the expiration time is reached.
 

resources/views/emails/before-trial-conversion.blade.php

@@ -1,7 +1,7 @@
 <x-emails.layout>
 We would like to inform you that a {{ config('constants.limits.trial_period') }} days of trial has been added to all subscription plans.
 
-You can try out Coolify, without payment information for free. If you like it, you can upgrade to a paid plan at any time.
+You can try out MapleDeploy, without payment information for free. If you like it, you can upgrade to a paid plan at any time.
 
 [Click here](https://app.coolify.io/subscription/new) to start your trial.
 </x-emails.layout>

resources/views/emails/container-restarted.blade.php

@@ -2,6 +2,7 @@
 A resource ({{ $containerName }}) has been restarted automatically on {{ $serverName }}, because it was stopped unexpectedly.
 
 @if ($containerName === 'coolify-proxy')
+{{-- Note: Coolify Proxy is the technical component name, not a branding reference --}}
 Coolify Proxy should run on your server as you have FQDNs set up in one of your resources.
 
 If you don't want to use Coolify Proxy, please remove FQDN from your resources or set Proxy type to Custom(None).

resources/views/emails/help.blade.php

@@ -1,5 +0,0 @@
-{{ $description }}
-
-{{ Illuminate\Mail\Markdown::parse('---') }}
-
-{{-- {{ Illuminate\Mail\Markdown::parse($debug) }} --}}

resources/views/emails/hetzner-deletion-failed.blade.php

@@ -6,7 +6,7 @@
 {{ $errorMessage }}
 </pre>
 
-The server has been removed from Coolify, but may still exist in your Hetzner Cloud account.
+The server has been removed from MapleDeploy, but may still exist in your Hetzner Cloud account.
 
 Please check your Hetzner Cloud console and manually delete the server if needed to avoid ongoing charges.
 

resources/views/emails/server-lost-connection.blade.php

@@ -1,5 +1,5 @@
 <x-emails.layout>
-Coolify cannot connect to your server ({{ $name }}). Please check your server and make sure it is running.
+MapleDeploy cannot connect to your server ({{ $name }}). Please check your server and make sure it is running. {{-- MapleDeploy branding --}}
 
 All automations & integrations are turned off!
 

resources/views/emails/server-patches-error.blade.php

@@ -9,5 +9,5 @@
 
 ---
 
-You can manage your server and view more details in your [Coolify Dashboard]({{ $server_url }}).
+You can manage your server and view more details in your [MapleDeploy dashboard]({{ $server_url }}).
 </x-emails.layout>

resources/views/emails/server-patches.blade.php

@@ -41,7 +41,7 @@
 
 1. Review the available updates
 2. Plan maintenance window if critical packages are involved
-3. Apply updates through the Coolify dashboard
+3. Apply updates through the MapleDeploy dashboard
 4. Monitor services after updates are applied
 @else
 Your server is up to date! No packages require updating at this time.
@@ -49,5 +49,5 @@
 
 ---
 
-You can manage server patches in your [Coolify Dashboard]({{ $server_url }}).
+You can manage server patches in your [MapleDeploy dashboard]({{ $server_url }}).
 </x-emails.layout>

resources/views/emails/subscription-invoice-failed.blade.php

@@ -1,5 +1,6 @@
+{{-- MapleDeploy branding: upstream cloud references removed --}}
 <x-emails.layout>
-Your last invoice has failed to be paid for Coolify Cloud.
+Your last invoice has failed to be paid for MapleDeploy.
 
-Please update payment details [here]({{ $stripeCustomerPortal }}).
+Please update your payment details [here]({{ $stripeCustomerPortal }}).
 </x-emails.layout>

resources/views/emails/trial-ended.blade.php

@@ -1,5 +1,6 @@
+{{-- MapleDeploy branding: upstream cloud references removed --}}
 <x-emails.layout>
-Your trial ended. All automations and integrations are disabled for all of your servers.
+Your trial has ended. All automations and integrations are disabled for your servers.
 
-Please update payment details [here]({{ $stripeCustomerPortal }}) or in [Coolify Cloud](https://app.coolify.io) to continue using our services.
+Please update your payment details [here]({{ $stripeCustomerPortal }}) to continue using MapleDeploy.
 </x-emails.layout>

resources/views/errors/419.blade.php

@@ -13,9 +13,9 @@
             primary-label="Back to login">
             <x-forms.collapsible title="Using a reverse proxy or Cloudflare Tunnel?" class="error-proxy-help">
                 <ul>
-                    <li>Set your domain in <strong>Settings &rarr; FQDN</strong> to match the URL you use to access Coolify.</li>
-                    <li>Cloudflare users: disable <strong>Browser Integrity Check</strong> and <strong>Under Attack Mode</strong> for your Coolify domain, as these can interrupt login sessions.</li>
-                    <li>If you can still access Coolify via <code>localhost</code>, log in there first to configure your FQDN.</li>
+                    <li>Set your domain in <strong>Settings &rarr; FQDN</strong> to match the URL you use to access MapleDeploy.</li> {{-- MapleDeploy branding --}}
+                    <li>Cloudflare users: disable <strong>Browser Integrity Check</strong> and <strong>Under Attack Mode</strong> for your MapleDeploy domain, as these can interrupt login sessions.</li> {{-- MapleDeploy branding --}}
+                    <li>If you can still access MapleDeploy via <code>localhost</code>, log in there first to configure your FQDN.</li> {{-- MapleDeploy branding --}}
                 </ul>
             </x-forms.collapsible>
         </x-error-page>

resources/views/invitation/accept.blade.php

@@ -1,9 +1,9 @@
 <x-layout-simple>
-    <x-auth.shell title="Coolify" description="Review your invitation to join a team.">
+    <x-auth.shell title="MapleDeploy" description="Review your invitation to join a team.">
         <div class="flex flex-col gap-4">
             <div class="auth-guidance">
                 <x-reicon name="teams" class="mt-0.5 size-4 shrink-0" />
-                <p>You have been invited to collaborate on Coolify.</p>
+                <p>You have been invited to collaborate on MapleDeploy.</p> {{-- MapleDeploy branding --}}
             </div>
 
             <dl class="divide-y divide-neutral-200 rounded-lg border border-neutral-200 text-sm dark:divide-white/10 dark:border-white/10">