Commit Graph

8333 Commits

Author SHA1 Message Date
Pablo Zmdl
1c3eba5030 Run PHP commands as www-data
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 14:51:53 +02:00
Pablo Zmdl
33be747932 Strip ANSI codes from command output before sending it to the browser
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 14:50:27 +02:00
Pablo Zmdl
1b122ac01b Fix readline line from streaming response
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 14:04:52 +02:00
Pablo Zmdl
33c96e0b86 Remove broken code
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 14:03:37 +02:00
Pablo Zmdl
a622a78bba Fix syntax errors
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 13:45:30 +02:00
Pablo Zmdl
fc0060b8de Ensure all HTTP requests are proxied, even with streaming
When requesting a streamed response, Guzzle apparently doesn't use curl, and thus we have to specify the unix socket proxy differently.

We can't specify it when creating the client, though (Guzzle complains).

Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 13:36:50 +02:00
Pablo Zmdl
22044fde9c Read streamed output line by line, not via buffer
This way the code doesn't wait for a buffer to be filled, and we don't need to
implement logic ourselves that is provided by a present library already.

Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 13:36:50 +02:00
Pablo Zmdl
7741123e89 Refactor creating and using addToStreamingResponseBody()
This way we stick to having one implementation of the function, not three.

Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-05-28 13:36:50 +02:00
copilot-swe-agent[bot]
b526cd5b51 Extract Nextcloud major upgrade logic to script and add UI button
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8cd11b09-5073-4e27-8e59-9afffaf96c1f

Rename sendNotification to execCommandInContainer and reuse for upgrade method

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/88744552-9d64-4de2-9f64-5a98a5e3b200

Add $cmd array validation to execCommandInContainer

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/45d5228c-7834-404e-ba54-90b5c8c207c8

Apply suggestion from @szaimen

Signed-off-by: Simon L. <szaimen@e.mail.de>

Apply suggestion from @szaimen

Signed-off-by: Simon L. <szaimen@e.mail.de>

Apply suggestion from @szaimen

Signed-off-by: Simon L. <szaimen@e.mail.de>

Apply suggestion from @szaimen

Signed-off-by: Simon L. <szaimen@e.mail.de>

Set installLatestMajor when upgrade-to-latest-major button is clicked

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/7b977c85-9b74-4027-a536-152e49a01976

Extract getLatestMajorVersion() to avoid duplicating the version string

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/d5ec921f-8629-4f6e-949a-e8f89f1eb85f

Address PR review comments and hardcode updater channel to stable

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/c40941ff-2bf8-4a57-82be-2a0bd22b19a2

Restore sendNotification(), update cron files, extract getPlainStreamingCallback()

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/a5b6cd86-d278-4771-8a11-976c4a862966

Remove getPlainStreamingCallback, unify on getAddToStreamingResponseBody

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/15a4b815-076b-469f-95b2-c61df688a28d

Revert "Remove getPlainStreamingCallback, unify on getAddToStreamingResponseBody"

This reverts commit 6846c3a99549703121461f910cc26e6c116e0dc4.
2026-05-28 13:36:50 +02:00
Simon L.
7a499f3d0a Add "dockhand.update": "false" to all managed containers (#8184) 2026-05-28 11:56:24 +02:00
Simon L.
e52f3944ee FTS: require authentication for all Elasticsearch API access (#8205) 2026-05-28 11:54:40 +02:00
copilot-swe-agent[bot]
a50f28424d fix: enable elasticsearch security to require authentication for all API access
- Enable xpack.security in Elasticsearch (was explicitly disabled)
- Add ELASTIC_PASSWORD env var so the built-in elastic user gets the password
- Disable HTTP SSL to keep plain HTTP while still enforcing basic auth
- Disable transport SSL (single-node setup)
- Update healthcheck to authenticate with elastic credentials
2026-05-28 11:41:59 +02:00
Ivan Mihov
26c74fd556 Add a note regardign dockhand update and a link to the documentation
Signed-off-by: Ivan Mihov <ivan@mihov.me>
2026-05-28 11:41:41 +02:00
Ivan Mihov
d2d59eb207 Add dockhand.update: false to the Dockerfiles
Signed-off-by: Ivan Mihov <ivan@mihov.me>
2026-05-28 11:41:41 +02:00
Ivan Mihov
21649225d0 Add "dockhand.update": "false" to all managed containers
Signed-off-by: Ivan Mihov <ivan@mihov.me>
2026-05-28 11:41:41 +02:00
Simon L.
9cfaad674c update tags of playwright workflows (#8211) 2026-05-28 11:40:21 +02:00
Simon L.
0b0f848377 update tags of playwright workflows
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-05-28 11:35:29 +02:00
Simon L.
79b24149dc Helm Chart updates (#8206) helm-chart-13.1.0 2026-05-27 17:42:29 +02:00
szaimen
24c88f3fd2 Helm Chart updates
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-27 14:54:04 +00:00
Simon L.
2082fb6bbc improve community-container readmes by adding links to upstream sw and describing what each one does (#8150) 2026-05-26 13:07:35 +02:00
Simon L.
f976c55726 increase to v13.1.0
Signed-off-by: Simon L. <szaimen@e.mail.de>
v13.1.0
2026-05-22 12:48:13 +02:00
Simon L.
1514c05435 Fix docker registry and community containers (#8091) 2026-05-22 12:43:12 +02:00
Simon L.
55c08cab00 aio-interface: do not cache the containers, logs and setup screen as it shows credentials (#8161) 2026-05-22 12:22:32 +02:00
Simon L.
2b1ec334e8 build(deps): bump docker from 29.5.1-cli to 29.5.2-cli in /Containers/mastercontainer (#8192) 2026-05-22 10:11:10 +02:00
Simon L.
99704807d0 PHP dependency updates (#8190) 2026-05-22 10:10:56 +02:00
Simon L.
dabb7d0224 server.config.php: fix serverid closing bracket
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-05-22 10:06:32 +02:00
dependabot[bot]
1a2d168a7f build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.1-cli to 29.5.2-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.2-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-22 04:22:33 +00:00
lonode
abaea7b4c2 change case
Signed-off-by: lonode <32384862+lonode@users.noreply.github.com>
2026-05-21 17:42:21 +02:00
szaimen
a1c818bc38 php dependency updates
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-21 13:01:02 +00:00
Simon L.
1d546bbb59 aio-interface: do not cache the containers, logs and setup screen as it shows credentials
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-05-21 12:14:46 +02:00
Simon L.
5a474d92d9 notify-push: fix startup on ipv6 disabled servers (#8188) 2026-05-21 12:06:28 +02:00
Simon L.
795baf903b server.config.php: downstream sync serverid upstream change (#8187) 2026-05-21 12:01:49 +02:00
Simon L.
b4c0266461 notify-push: fix startup on ipv6 disabled servers
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-05-21 10:53:49 +02:00
Simon L.
3a988938b2 server.config.php: downstream sync serverid upstream change
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-05-21 10:48:37 +02:00
Simon L.
7c0df4f701 build(deps): bump nats from 2.14.0-scratch to 2.14.1-scratch in /Containers/talk (#8185) 2026-05-21 10:40:41 +02:00
dependabot[bot]
1d27e165e6 build(deps): bump nats in /Containers/talk
Bumps nats from 2.14.0-scratch to 2.14.1-scratch.

---
updated-dependencies:
- dependency-name: nats
  dependency-version: 2.14.1-scratch
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-21 04:23:15 +00:00
Anvil5465
22d2db35b1 Update community-containers/fail2ban/readme.md
Signed-off-by: Anvil5465 <119350594+Anvil5465@users.noreply.github.com>
2026-05-20 17:03:57 -04:00
Simon L.
a75d1c48bf Small improvements to /app/readme (#8179) 2026-05-20 17:15:51 +02:00
Simon L.
74b98b369e PHP dependency updates (#8180) 2026-05-20 16:36:42 +02:00
Simon L.
74dee77fac Add top-level .editorconfig; improve app/.editorconfig (#8178) 2026-05-20 15:54:33 +02:00
szaimen
70100ba5ef php dependency updates
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-20 13:42:43 +00:00
Gaetano Giunta
de72608519 Use proper name for AIP and Nextcloud in readme file
Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>
2026-05-20 11:12:51 +00:00
Gaetano Giunta
02c9a7475b Small improvements to /app/readme
Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>
2026-05-20 11:02:14 +00:00
Gaetano Giunta
c2e48d3524 add a comment to .editorconfig
Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>
2026-05-20 10:56:10 +00:00
Gaetano Giunta
b615acf413 tabs to spaces for php/psalm.xml
Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>
2026-05-20 10:55:39 +00:00
Gaetano Giunta
379b3d9e5a add top-level .editorconfig; improve app/.editorconfig
Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>
2026-05-20 10:46:15 +00:00
Simon L.
abbe6a85cf build(deps): bump docker from 29.5.0-cli to 29.5.1-cli in /Containers/mastercontainer (#8177) 2026-05-20 10:50:58 +02:00
dependabot[bot]
20835baa0c build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.0-cli to 29.5.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-20 08:36:32 +00:00
Simon L.
a32568cc9c mastercontainer: run session-deduplicator as www-data (#8175) 2026-05-20 10:20:56 +02:00
Dimas D. Angga
c6748dc450 fix(mastercontainer): run session-deduplicator as www-data
The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.
2026-05-20 09:32:49 +07:00