Simon L.
ef87e82f13
talk: improve startup ordering, NATS tuning, signaling timeouts, and healthcheck depth ( #7945 )
2026-04-20 14:01:49 +02:00
copilot-swe-agent[bot]
144c91ae02
ContainerDefinitionFetcher: cache the containers.json in apcu
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9
perf: set apc.shm_size=32M explicitly in mastercontainer Dockerfile
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4af50c77-4ac1-4947-9b35-dc66d0d0cc8b
perf: revert all previous changes; cache containers.json in APCu
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/59281e92-7e5d-40ef-a152-78e0620eb949
perf: address review comments - clarify cache comment, restore readonly constructors
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-20 13:59:51 +02:00
copilot-swe-agent[bot]
5ead361c04
talk: improve startup ordering, NATS tuning, signaling timeouts, and healthcheck depth
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/7fd39619-0f63-494c-902c-746f00d17d02
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 13:58:56 +02:00
Simon L.
2b5998e57d
aio-interface: enable PHP OPcache and Twig template cache ( #7950 )
2026-04-20 13:55:33 +02:00
copilot-swe-agent[bot]
3c17a6af36
aio-interface: enable PHP OPcache and Twig template cache
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/2d974f3d-5f37-47e9-aa1f-00a43bcd9838
Signed-off-by: Simon L. <szaimen@e.mail.de >
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 13:47:59 +02:00
Simon L.
a465baa259
aio-interface: Complete Permissions-Policy header with all MDN-listed directives ( #7953 )
2026-04-20 13:40:31 +02:00
Simon L.
457f7bfee9
imaginary: improve healthcheck and start.sh ( #7949 )
2026-04-20 13:40:19 +02:00
copilot-swe-agent[bot]
aade77437c
imaginary: improve healthcheck and start.sh
...
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-20 13:30:53 +02:00
Simon L.
ccda322888
aio-interface: combine all disable-*.js files into a single disable-containers.js ( #7958 )
2026-04-20 13:24:50 +02:00
Simon L.
c428bc3b71
aio-interface: preserve login session across container restarts after cookie name change ( #7964 )
2026-04-20 13:23:38 +02:00
copilot-swe-agent[bot]
479f68d69e
aio-interface: combine all disable-*.js files into disable-containers.js
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/a5859e89-d042-4dd5-82e9-9ceed4e22c70
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 13:15:46 +02:00
Simon L.
e1ae6444e5
increase version of click-handlers
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 13:08:47 +02:00
Simon L.
47ee453719
aio-interface: correct variable shadowing in show-password event handler ( #7963 )
2026-04-20 13:08:08 +02:00
copilot-swe-agent[bot]
e378f7faca
aio-interface: preserve login session across container restarts after cookie name change
...
The session cookie was recently renamed from `PHPSESSID` to
`__Host-Http-PHPSESSID` (commit 3871179a ). When watchtower updates the
mastercontainer, the browser still holds the old `PHPSESSID` cookie, but the
new code only looks for `__Host-Http-PHPSESSID`. The old cookie is ignored, a
fresh unauthenticated session is created, and the user is logged out.
Fix: before starting the new session in index.php, check if the old `PHPSESSID`
cookie exists and carries an authenticated session. If it does, destroy the old
session and mark the new one as authenticated via `SetAuthState(true)`.
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/cba0ea31-e257-4ec1-82ae-dd66f0f34d98
---
refactor: address review comments - use constant for session key and activity interval
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/cba0ea31-e257-4ec1-82ae-dd66f0f34d98
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-20 13:05:41 +02:00
copilot-swe-agent[bot]
4679c6c38d
fix: correct variable shadowing in show-password event handler
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/1927b3c2-7484-4876-b037-79d94f2ecb6a
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-20 10:09:04 +00:00
Simon L.
91e9e58c39
jellyfin: allow Jellyfin to resolve lldap hostname while running in host network mode ( #7941 )
2026-04-20 11:42:19 +02:00
Simon L.
5624dde376
alpine: fix labels
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 11:32:33 +02:00
copilot-swe-agent[bot]
d0b0bde4c8
jellyfin: allow Jellyfin to resolve lldap hostname while running in host network mode
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/3bd90eb7-e6f2-4647-9e78-4f9349300a29
fix: use gethostbyname for lldap IP and fix community-container depends_on skip logic
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/67d6ed5f-8bdc-4b9b-a33c-9ff73305c799
fix: ensure lldap starts before jellyfin via depends_on
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/448ec7d3-f71e-4499-a4a4-67314434a77c
Update ContainerDefinitionFetcher.php
Signed-off-by: Simon L. <szaimen@e.mail.de >
fix: protect standard container dependencies from being skipped for community containers
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/cdd6a51b-75a3-4f43-9d00-85b1df2f880f
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-20 11:22:24 +02:00
copilot-swe-agent[bot]
310429c5fd
fix: add shm_size=128M to nextcloud container to match apc.shm_size
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/0b44e4a1-dccc-4541-b4cb-07fceaa046ca
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-19 22:03:09 +00:00
copilot-swe-agent[bot]
98a8861690
Add missing Permissions-Policy directives to headers.Caddyfile
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/5735ef2f-5264-43ad-a107-433f2770d05f
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-18 10:53:10 +00:00
Simon L.
d2ecff2e06
aio-interface: offer system prune button ( #7677 )
2026-04-18 12:08:01 +02:00
copilot-swe-agent[bot]
29bac9dbf9
fix(fulltextsearch): clarify healthcheck to explicitly accept green/yellow cluster status
...
Use filter_path=status to get a minimal JSON response and explicitly match
only green or yellow status (single-node clusters run yellow by design).
This is clearer and more robust than the inverted grep approach.
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/a036678d-a9f5-4db3-8cc6-3e3d52f4e97f
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 15:36:26 +00:00
copilot-swe-agent[bot]
7cd0450dae
perf(nextcloud): tune OPcache, APCu, realpath_cache, output_buffering, and Redis session settings
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/623eef77-7b4e-428b-b06f-e0c7403f8cf6
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 15:36:12 +00:00
copilot-swe-agent[bot]
b5dad7927a
perf(fulltextsearch): improve elasticsearch healthcheck and add performance tuning settings
...
- Replace TCP-only nc healthcheck with HTTP cluster health API check via curl,
so the container is only marked healthy when ES is actually ready (not just
when the TCP port is open during startup)
- Add indices.fielddata.cache.size=20% to cap field-data cache and prevent
unbounded heap growth / OOM kills on large datasets
- Add indices.memory.index_buffer_size=20% to improve bulk indexing throughput
by buffering more data in memory before flushing to disk
- Add thread_pool.write.queue_size=1000 to avoid rejected indexing requests
when Nextcloud's background jobs submit many files simultaneously
Changes applied to: Containers/fulltextsearch/healthcheck.sh,
php/containers.json, manual-install/latest.yml
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/a036678d-a9f5-4db3-8cc6-3e3d52f4e97f
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 15:35:13 +00:00
copilot-swe-agent[bot]
fcc4d9502d
docs(postgresql): clarify work_mem memory allocation semantics in comment
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/0456b491-e148-4d26-9dc9-e1df9bfbf5d0
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 15:34:43 +00:00
Simon L.
ebca410220
Merge pull request #7943 from nextcloud/copilot/improve-collabora-container-performance
...
collabora: Add shm_size and tmpfs to improve the performance
2026-04-17 17:34:30 +02:00
copilot-swe-agent[bot]
80ea0c1151
perf(postgresql): tune postgres settings for improved Nextcloud performance
...
- shared_buffers: 128MB → 256MB (better hot-data caching)
- effective_cache_size: set to 1GB (planner hint, no memory allocated)
- work_mem: 4MB → 16MB (reduces disk spills in file listing / share queries)
- maintenance_work_mem: 64MB → 256MB (faster VACUUM and index builds)
- wal_buffers: auto → 16MB (reduces WAL write latency)
- checkpoint_timeout: 5min → 15min (spreads checkpoint I/O, reduces spikes)
- random_page_cost: 4.0 → 1.1 (SSD-appropriate; favours index scans)
- effective_io_concurrency: 1 → 200 (SSD-appropriate I/O prefetching)
- autovacuum_vacuum_scale_factor: 0.2 → 0.05 (vacuum sooner on large tables)
- autovacuum_analyze_scale_factor: 0.1 → 0.02 (keep planner stats fresh)
All changes are applied via sed in the existing postgresql.conf modification
block and are idempotent across container restarts (handles both commented
defaults on fresh installs and already-set values on restart).
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/0456b491-e148-4d26-9dc9-e1df9bfbf5d0
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 15:33:46 +00:00
Simon L.
56462e7945
Merge pull request #7942 from nextcloud/copilot/adjust-headers-caddyfile
...
aio-interface: Add Permissions-Policy header
2026-04-17 17:13:34 +02:00
copilot-swe-agent[bot]
8dea787518
Add shm_size and tmpfs to collabora container for performance improvement
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/352eb94e-be98-422a-96d9-39da7e4443cd
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 15:04:58 +00:00
Simon L.
60c3515870
Merge pull request #7940 from nextcloud/copilot/remove-collabora-warning-docs
...
docker-rootles.md: Remove outdated Collabora warning
2026-04-17 16:58:14 +02:00
copilot-swe-agent[bot]
fed426b635
Add Permissions-Policy header to headers.Caddyfile
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8ef03112-cdc4-46d1-b1f1-96c2a85e92c0
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 14:45:12 +00:00
copilot-swe-agent[bot]
f15b32c758
Remove outdated Collabora warning from docker-rootless.md
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/3dcfae77-d290-4a68-bf70-50ca6e4ad75a
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 14:43:39 +00:00
Simon L.
f25f588295
aio-interface: offer system prune button
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
Co-Authored-By: Pablo Zmdl <57864086+pabzm@users.noreply.github.com >
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-17 14:33:53 +02:00
Simon L.
cbdd75d668
Merge pull request #7934 from nextcloud/rp-npm-npmplus
...
rp-docs: update reverse proxy docs for NPM and NPMplus
2026-04-17 14:21:15 +02:00
Zoey
45fa1a0721
Update reverse-proxy.md
...
Co-authored-by: Simon L. <szaimen@e.mail.de >
Signed-off-by: Zoey <zoey@z0ey.de >
2026-04-17 14:14:07 +02:00
Simon L.
2e3c951afb
Merge pull request #7939 from nextcloud/dependabot/github_actions/dot-github/workflows/actions/upload-artifact-7.0.1
...
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in /.github/workflows
2026-04-17 14:09:42 +02:00
Simon L.
e942f8fe39
Merge pull request #7938 from nextcloud/dependabot/github_actions/dot-github/workflows/peter-evans/create-pull-request-8.1.1
...
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 in /.github/workflows
2026-04-17 14:09:28 +02:00
Simon L.
558b53b2de
Merge pull request #7928 from nextcloud/copilot/add-hardware-transcoding-talk-recording
...
talk-recording: allow to enable hardware transcoding for the container
2026-04-17 14:08:59 +02:00
dependabot[bot]
2ad25415ed
build(deps): bump actions/upload-artifact in /.github/workflows
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](bbbca2ddaa...043fb46d1a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 12:06:30 +00:00
dependabot[bot]
cd589abd3e
build(deps): bump peter-evans/create-pull-request in /.github/workflows
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](c0f553fe54...5f6978faf0 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 12:06:25 +00:00
copilot-swe-agent[bot]
1da363ea8c
feat: add hardware transcoding support to talk-recording container
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18
Auto-detect /dev/dri in start.sh and export NEXTCLOUD_ENABLE_DRI_DEVICE automatically
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/751d0b0c-e529-4ea6-a316-5a53169a9ab6
fix: address code review feedback (nvidia check, file_exists, group_add comment)
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18
Use --device=/dev/dri instead of -v bind-mount in docs and compose
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4fa5e70a-b786-445e-946f-a0610751d855
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 13:49:00 +02:00
Erwan Hervé
52c3192f26
chore: add OCI standard labels to all Dockerfiles ( #7899 )
...
Signed-off-by: Erwan Hervé <erwan.herve@outlook.fr >
Signed-off-by: Erwan Hervé <62173453+Erwan-loot@users.noreply.github.com >
Co-authored-by: Simon L. <szaimen@e.mail.de >
2026-04-17 10:42:55 +02:00
Simon L.
e46f4a7e19
Merge pull request #7933 from nextcloud/copilot/adjust-janus-config-talk-container-again
...
talk: configure janus to use local TURN server for relay candidates
2026-04-17 10:18:43 +02:00
copilot-swe-agent[bot]
1a22272441
talk: configure janus to use local TURN server for relay candidates
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/43a0bf9c-28e1-4cd4-ab0e-08999fafe3bf
Use NC_DOMAIN as janus TURN server address instead of 127.0.0.1
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/43a0bf9c-28e1-4cd4-ab0e-08999fafe3bf
Simplify janus TURN config: static creds, single file copy, sed+cat nat block
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/aadf3820-dfeb-462a-9ff9-145d0bf92cfc
talk: use ephemeral TURN credentials with random username and 3-month TTL for Janus
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/7626994e-6a81-44e5-8205-73ba9ebfd91f
adjust some paths
Signed-off-by: Simon L. <szaimen@e.mail.de >
talk: increase TURN username entropy from 64-bit to 128-bit (rand -hex 16)
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/d6de0472-9f63-416e-9003-8e224e25aaec
Signed-off-by: Simon L. <szaimen@e.mail.de >
Signed-off-by: Simon L. <szaimen@e.mail.de >
Signed-off-by: Simon L. <szaimen@e.mail.de >
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 10:16:14 +02:00
Zoey
74899f8c61
update reverse proxy docs for NPM and NPMplus
...
Signed-off-by: Zoey <zoey@z0ey.de >
2026-04-16 22:07:31 +02:00
Simon L.
4f929a8141
Merge pull request #7932 from nextcloud/szaimen-patch-3
...
Readme: Update backup details
2026-04-16 18:46:28 +02:00
Simon L.
0baf2132a9
Update backup details in readme.md
...
Clarified backup information for Nextcloud AIO instance.
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-16 18:44:55 +02:00
Simon L.
2e4e144086
Merge pull request #7930 from nextcloud/hsts-header
...
Improve Hsts headers
2026-04-16 18:20:02 +02:00
Zoey
61024ddf9d
set hsts header in the acme.Caddyfile
...
Signed-off-by: Zoey <zoey@z0ey.de >
2026-04-16 18:02:29 +02:00
Zoey
24bc70fce6
apply hsts header to all nextcloud routes
...
Signed-off-by: Zoey <zoey@z0ey.de >
2026-04-16 18:01:25 +02:00