Commit Graph

3290 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
49a24272f6 perf(apache): improve performance of the Apache container
- nextcloud.conf: increase BrotliCompressionQuality from 0 to 4
- nextcloud.conf: add mod_deflate fallback for non-Brotli clients
- nextcloud.conf: enable HTTP/2 cleartext (h2c) via mod_http2 IfModule block
- nextcloud.conf: remove Options Indexes and duplicate Options line
- nextcloud.conf: remove deprecated Satisfy Any directive
- nextcloud.conf: add KeepAlive On / KeepAliveTimeout 5 / MaxKeepAliveRequests 100
- nextcloud.conf: add EnableSendfile On / EnableMMAP Off
- Dockerfile: enable mod_http2 LoadModule via sed
- Dockerfile: tune mpm_event (MaxRequestWorkers 400, ServerLimit 16,
  ThreadsPerChild 25, StartServers 2, MinSpareThreads 25, MaxSpareThreads 75)
- Caddyfile: add encode gzip zstd for response compression
- supervisord.conf: remove duplicate nodaemon=true

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/a79198ed-cd31-4e15-9074-b3d3f3f92069

fix(apache): disable HTTP/2, disable Caddy gzip, restore MaxRequestWorkers 5000

- Caddyfile: remove `encode gzip zstd` (disable gzip/zstd compression in Caddy)
- nextcloud.conf: remove HTTP/2 `<IfModule mod_http2.c>` block (disable h2c in Apache)
- Dockerfile: remove mod_http2.so LoadModule sed line
- Dockerfile: restore MaxRequestWorkers 5000, ServerLimit 200, and original comments

Kept from previous commit:
- BrotliCompressionQuality raised from 0 to 4
- mod_deflate fallback for non-Brotli clients
- KeepAlive On / KeepAliveTimeout 5 / MaxKeepAliveRequests 100
- EnableSendfile On / EnableMMAP Off
- ThreadsPerChild 25, StartServers 2, MinSpareThreads 25, MaxSpareThreads 75
- supervisord.conf: remove duplicate nodaemon=true

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/66a07d0e-2276-4b0e-b17d-53c733530d07

fix(apache): prevent double-encoding, add explanatory comments

- Add SetEnvIfNoCase Accept-Encoding \bbr\b no-gzip inside mod_brotli block
  so mod_deflate is skipped for clients that already get Brotli-compressed
  responses, preventing double-encoding.
- Expand all comments to explain the purpose/benefit of each added directive.

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/98098727-e2c1-4504-b0d5-47c8b06b794d

docs(apache/Dockerfile): add explanatory comments to all new directives

- Add comment block before the sed/LoadModule block explaining why mpm_event
  is chosen and why mod_brotli is enabled alongside the deflate fallback.
- Add per-line comments for ThreadsPerChild, StartServers, MinSpareThreads,
  and MaxSpareThreads explaining the rationale for each value.

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/2dc7afc9-b8a1-4b0a-ba13-0ad89e5c2d37

fix(apache): disable EnableSendfile to allow output filters (Brotli/deflate) on static files

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/54995b4a-7b5d-4e8e-a92a-684d32b42bd4

docs(apache/nextcloud.conf): add per-directive comments to KeepAlive block

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/329da0e6-b5dd-4cdd-8c05-9ae0bf25ebfd

reduce MaxSpareThreads from 75 to 50

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/f253e0c7-a192-4bda-96c2-c12a7e1cb81b

raise MaxKeepAliveRequests from 100 to 500 for Nextcloud sync clients

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/89da74d6-b0d3-4d19-909d-dee06cbad060

remove deflate fallback — all Nextcloud-supported browsers have Brotli

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/def9ae64-6793-4c8f-ba0c-e36ef6f8f28f

Apply suggestion from @szaimen

Signed-off-by: Simon L. <szaimen@e.mail.de>
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-20 15:57:02 +02:00
copilot-swe-agent[bot]
fed426b635 Add Permissions-Policy header to headers.Caddyfile
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8ef03112-cdc4-46d1-b1f1-96c2a85e92c0

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 14:45:12 +00:00
Simon L.
558b53b2de Merge pull request #7928 from nextcloud/copilot/add-hardware-transcoding-talk-recording
talk-recording: allow to enable hardware transcoding for the container
2026-04-17 14:08:59 +02:00
copilot-swe-agent[bot]
1da363ea8c feat: add hardware transcoding support to talk-recording container
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18

Auto-detect /dev/dri in start.sh and export NEXTCLOUD_ENABLE_DRI_DEVICE automatically

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/751d0b0c-e529-4ea6-a316-5a53169a9ab6

fix: address code review feedback (nvidia check, file_exists, group_add comment)

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18

Use --device=/dev/dri instead of -v bind-mount in docs and compose

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4fa5e70a-b786-445e-946f-a0610751d855
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 13:49:00 +02:00
Erwan Hervé
52c3192f26 chore: add OCI standard labels to all Dockerfiles (#7899)
Signed-off-by: Erwan Hervé <erwan.herve@outlook.fr>
Signed-off-by: Erwan Hervé <62173453+Erwan-loot@users.noreply.github.com>
Co-authored-by: Simon L. <szaimen@e.mail.de>
2026-04-17 10:42:55 +02:00
copilot-swe-agent[bot]
1a22272441 talk: configure janus to use local TURN server for relay candidates
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/43a0bf9c-28e1-4cd4-ab0e-08999fafe3bf

Use NC_DOMAIN as janus TURN server address instead of 127.0.0.1

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/43a0bf9c-28e1-4cd4-ab0e-08999fafe3bf

Simplify janus TURN config: static creds, single file copy, sed+cat nat block

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/aadf3820-dfeb-462a-9ff9-145d0bf92cfc

talk: use ephemeral TURN credentials with random username and 3-month TTL for Janus

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/7626994e-6a81-44e5-8205-73ba9ebfd91f

adjust some paths

Signed-off-by: Simon L. <szaimen@e.mail.de>

talk: increase TURN username entropy from 64-bit to 128-bit (rand -hex 16)

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/d6de0472-9f63-416e-9003-8e224e25aaec
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 10:16:14 +02:00
Zoey
61024ddf9d set hsts header in the acme.Caddyfile
Signed-off-by: Zoey <zoey@z0ey.de>
2026-04-16 18:02:29 +02:00
Zoey
24bc70fce6 apply hsts header to all nextcloud routes
Signed-off-by: Zoey <zoey@z0ey.de>
2026-04-16 18:01:25 +02:00
Zoey
6f28dfc5e3 also set Origin-Agent-Cluster header
Signed-off-by: Zoey <zoey@z0ey.de>
2026-04-16 17:40:56 +02:00
Zoey
12e129f1f6 aio-interface: improve headers (#7690)
Signed-off-by: Zoey <zoey@z0ey.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
Co-authored-by: Simon L. <szaimen@e.mail.de>
Co-authored-by: Pablo Zmdl <pablo@nextcloud.com>
2026-04-16 17:20:50 +02:00
Simon L.
5e92b7d743 nextcloud-entrypoint: rewrite turn and stun logic to always add turn and stun server
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-16 16:18:27 +02:00
Simon L.
8722cc83f4 Merge pull request #7910 from nextcloud/enh/noid/add-server-id
nextcloud: add `server.config.php` that adds the serverid by using the hostname as key
2026-04-16 11:07:02 +02:00
Simon L.
1e5eb87582 nextcloud: add server.config.php that adds the serverid by using the hostname as key
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-16 10:51:31 +02:00
Simon L.
489fc3e761 Merge pull request #7916 from nextcloud/dependabot/docker/Containers/clamav/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/clamav
2026-04-16 10:50:29 +02:00
Simon L.
f5b125aba5 Merge pull request #7921 from nextcloud/dependabot/docker/Containers/watchtower/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/watchtower
2026-04-16 10:50:13 +02:00
Simon L.
27bcf3494f Merge pull request #7920 from nextcloud/dependabot/docker/Containers/talk/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/talk
2026-04-16 10:50:04 +02:00
Simon L.
201e2f303d Merge pull request #7919 from nextcloud/dependabot/docker/Containers/notify-push/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/notify-push
2026-04-16 10:50:01 +02:00
Simon L.
4f68cb5fb4 Merge pull request #7918 from nextcloud/dependabot/docker/Containers/imaginary/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/imaginary
2026-04-16 10:49:50 +02:00
Simon L.
c976683a9e Merge pull request #7917 from nextcloud/dependabot/docker/Containers/domaincheck/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/domaincheck
2026-04-16 10:49:47 +02:00
Simon L.
4b3292d3df Merge pull request #7915 from nextcloud/dependabot/docker/Containers/borgbackup/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/borgbackup
2026-04-16 10:49:33 +02:00
dependabot[bot]
79f8302d82 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/watchtower
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:18:42 +00:00
dependabot[bot]
37d4c265e3 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/talk
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:18:27 +00:00
dependabot[bot]
22fd3e5c64 build(deps): bump alpine in /Containers/notify-push
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:18:21 +00:00
dependabot[bot]
acb00be975 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/imaginary
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:41 +00:00
dependabot[bot]
3b1eb6d5e3 build(deps): bump alpine in /Containers/domaincheck
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:35 +00:00
dependabot[bot]
6cc5754f7e build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/clamav
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:30 +00:00
dependabot[bot]
68f529c2bc build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/borgbackup
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:27 +00:00
dependabot[bot]
fc8d657ec0 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/alpine
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:21 +00:00
dependabot[bot]
ec1beb2fff build(deps): bump nats in /Containers/talk
Bumps nats from 2.12.6-scratch to 2.12.7-scratch.

---
updated-dependencies:
- dependency-name: nats
  dependency-version: 2.12.7-scratch
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-15 04:18:58 +00:00
Simon L.
eba5e11303 fix postgres
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-14 16:37:01 +02:00
Simon L.
4d8360d426 postgres: fix another detail
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-14 16:29:24 +02:00
Simon L.
6d372ab37f fix postgres container build
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-14 16:08:10 +02:00
Simon L.
2371cbc9b5 Merge pull request #7882 from nextcloud/enh/7622/update-nc-version
update bundled Nextcloud version to v33
2026-04-14 15:32:54 +02:00
Simon L.
c3d8e80b7c Merge pull request #7879 from nextcloud/revert-7585-revert-7485-enh/noid/more-strict-check
Re-introduce "mastercontainer: make check for correct volume name more strict"
2026-04-14 15:32:35 +02:00
Simon L.
6d47317d1e Merge pull request #7877 from nextcloud/enh/6921/update-postgres
postgres: update to v18
2026-04-14 15:32:23 +02:00
Pablo Zmdl
3f11a48657 Update Containers/apache/Caddyfile
Co-authored-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Pablo Zmdl <57864086+pabzm@users.noreply.github.com>
2026-04-10 14:56:44 +02:00
Pablo Zmdl
0a96759c72 Add an explanation why we disable the HTTP challenge in that Caddy instance
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-04-10 14:51:51 +02:00
dependabot[bot]
c2fd040d06 build(deps): bump php in /Containers/mastercontainer
Bumps php from 8.5.4-fpm-alpine3.23 to 8.5.5-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.5-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-10 04:17:04 +00:00
Simon L.
0b8eecd9e5 update bundled Nextcloud version to v33
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-09 14:56:10 +02:00
Simon L.
5079acfa21 Merge pull request #7823 from nextcloud/acme-shortlived-profile
use acme shortlived profile
2026-04-09 14:35:37 +02:00
Simon L.
3f9287f3e5 Revert "Revert "mastercontainer: make check for correct volume name more strict""
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-09 14:24:52 +02:00
Simon L.
e66259cb31 postgres: update to v18
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-09 14:13:35 +02:00
Simon L.
11fcb7d25e Merge pull request #7872 from nextcloud/dependabot/docker/Containers/fulltextsearch/elasticsearch-8.19.14
build(deps): bump elasticsearch from 8.19.13 to 8.19.14 in /Containers/fulltextsearch
2026-04-09 12:52:25 +02:00
Simon L.
12ad9b8c4d Merge pull request #7869 from nextcloud/dependabot/docker/Containers/watchtower/golang-1.26.2-alpine3.23
build(deps): bump golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23 in /Containers/watchtower
2026-04-09 12:52:01 +02:00
Simon L.
228a2a2372 Merge pull request #7868 from nextcloud/dependabot/docker/Containers/mastercontainer/docker-29.4.0-cli
build(deps): bump docker from 29.3.1-cli to 29.4.0-cli in /Containers/mastercontainer
2026-04-09 12:51:48 +02:00
Simon L.
dd53793f13 Merge pull request #7867 from nextcloud/dependabot/docker/Containers/imaginary/golang-1.26.2-alpine3.23
build(deps): bump golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23 in /Containers/imaginary
2026-04-09 12:51:37 +02:00
dependabot[bot]
088cfce5f3 build(deps): bump elasticsearch in /Containers/fulltextsearch
Bumps elasticsearch from 8.19.13 to 8.19.14.

---
updated-dependencies:
- dependency-name: elasticsearch
  dependency-version: 8.19.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-09 04:16:17 +00:00
szaimen
ccd94dfaf7 watchtower-update automated change
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-08 12:25:55 +00:00
dependabot[bot]
a2531182d1 build(deps): bump golang in /Containers/watchtower
Bumps golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.2-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 04:17:54 +00:00
dependabot[bot]
83a77ae625 build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.3.1-cli to 29.4.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.4.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 04:17:00 +00:00