Commit Graph

3290 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
80ea0c1151 perf(postgresql): tune postgres settings for improved Nextcloud performance
- shared_buffers: 128MB → 256MB (better hot-data caching)
- effective_cache_size: set to 1GB (planner hint, no memory allocated)
- work_mem: 4MB → 16MB (reduces disk spills in file listing / share queries)
- maintenance_work_mem: 64MB → 256MB (faster VACUUM and index builds)
- wal_buffers: auto → 16MB (reduces WAL write latency)
- checkpoint_timeout: 5min → 15min (spreads checkpoint I/O, reduces spikes)
- random_page_cost: 4.0 → 1.1 (SSD-appropriate; favours index scans)
- effective_io_concurrency: 1 → 200 (SSD-appropriate I/O prefetching)
- autovacuum_vacuum_scale_factor: 0.2 → 0.05 (vacuum sooner on large tables)
- autovacuum_analyze_scale_factor: 0.1 → 0.02 (keep planner stats fresh)

All changes are applied via sed in the existing postgresql.conf modification
block and are idempotent across container restarts (handles both commented
defaults on fresh installs and already-set values on restart).

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/0456b491-e148-4d26-9dc9-e1df9bfbf5d0

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 15:33:46 +00:00
copilot-swe-agent[bot]
fed426b635 Add Permissions-Policy header to headers.Caddyfile
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8ef03112-cdc4-46d1-b1f1-96c2a85e92c0

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 14:45:12 +00:00
Simon L.
558b53b2de Merge pull request #7928 from nextcloud/copilot/add-hardware-transcoding-talk-recording
talk-recording: allow to enable hardware transcoding for the container
2026-04-17 14:08:59 +02:00
copilot-swe-agent[bot]
1da363ea8c feat: add hardware transcoding support to talk-recording container
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18

Auto-detect /dev/dri in start.sh and export NEXTCLOUD_ENABLE_DRI_DEVICE automatically

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/751d0b0c-e529-4ea6-a316-5a53169a9ab6

fix: address code review feedback (nvidia check, file_exists, group_add comment)

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18

Use --device=/dev/dri instead of -v bind-mount in docs and compose

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4fa5e70a-b786-445e-946f-a0610751d855
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 13:49:00 +02:00
Erwan Hervé
52c3192f26 chore: add OCI standard labels to all Dockerfiles (#7899)
Signed-off-by: Erwan Hervé <erwan.herve@outlook.fr>
Signed-off-by: Erwan Hervé <62173453+Erwan-loot@users.noreply.github.com>
Co-authored-by: Simon L. <szaimen@e.mail.de>
2026-04-17 10:42:55 +02:00
copilot-swe-agent[bot]
1a22272441 talk: configure janus to use local TURN server for relay candidates
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/43a0bf9c-28e1-4cd4-ab0e-08999fafe3bf

Use NC_DOMAIN as janus TURN server address instead of 127.0.0.1

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/43a0bf9c-28e1-4cd4-ab0e-08999fafe3bf

Simplify janus TURN config: static creds, single file copy, sed+cat nat block

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/aadf3820-dfeb-462a-9ff9-145d0bf92cfc

talk: use ephemeral TURN credentials with random username and 3-month TTL for Janus

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/7626994e-6a81-44e5-8205-73ba9ebfd91f

adjust some paths

Signed-off-by: Simon L. <szaimen@e.mail.de>

talk: increase TURN username entropy from 64-bit to 128-bit (rand -hex 16)

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/d6de0472-9f63-416e-9003-8e224e25aaec
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 10:16:14 +02:00
Zoey
61024ddf9d set hsts header in the acme.Caddyfile
Signed-off-by: Zoey <zoey@z0ey.de>
2026-04-16 18:02:29 +02:00
Zoey
24bc70fce6 apply hsts header to all nextcloud routes
Signed-off-by: Zoey <zoey@z0ey.de>
2026-04-16 18:01:25 +02:00
Zoey
6f28dfc5e3 also set Origin-Agent-Cluster header
Signed-off-by: Zoey <zoey@z0ey.de>
2026-04-16 17:40:56 +02:00
Zoey
12e129f1f6 aio-interface: improve headers (#7690)
Signed-off-by: Zoey <zoey@z0ey.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
Co-authored-by: Simon L. <szaimen@e.mail.de>
Co-authored-by: Pablo Zmdl <pablo@nextcloud.com>
2026-04-16 17:20:50 +02:00
Simon L.
5e92b7d743 nextcloud-entrypoint: rewrite turn and stun logic to always add turn and stun server
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-16 16:18:27 +02:00
Simon L.
8722cc83f4 Merge pull request #7910 from nextcloud/enh/noid/add-server-id
nextcloud: add `server.config.php` that adds the serverid by using the hostname as key
2026-04-16 11:07:02 +02:00
Simon L.
1e5eb87582 nextcloud: add server.config.php that adds the serverid by using the hostname as key
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-16 10:51:31 +02:00
Simon L.
489fc3e761 Merge pull request #7916 from nextcloud/dependabot/docker/Containers/clamav/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/clamav
2026-04-16 10:50:29 +02:00
Simon L.
f5b125aba5 Merge pull request #7921 from nextcloud/dependabot/docker/Containers/watchtower/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/watchtower
2026-04-16 10:50:13 +02:00
Simon L.
27bcf3494f Merge pull request #7920 from nextcloud/dependabot/docker/Containers/talk/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/talk
2026-04-16 10:50:04 +02:00
Simon L.
201e2f303d Merge pull request #7919 from nextcloud/dependabot/docker/Containers/notify-push/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/notify-push
2026-04-16 10:50:01 +02:00
Simon L.
4f68cb5fb4 Merge pull request #7918 from nextcloud/dependabot/docker/Containers/imaginary/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/imaginary
2026-04-16 10:49:50 +02:00
Simon L.
c976683a9e Merge pull request #7917 from nextcloud/dependabot/docker/Containers/domaincheck/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/domaincheck
2026-04-16 10:49:47 +02:00
Simon L.
4b3292d3df Merge pull request #7915 from nextcloud/dependabot/docker/Containers/borgbackup/alpine-3.23.4
build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/borgbackup
2026-04-16 10:49:33 +02:00
dependabot[bot]
79f8302d82 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/watchtower
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:18:42 +00:00
dependabot[bot]
37d4c265e3 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/talk
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:18:27 +00:00
dependabot[bot]
22fd3e5c64 build(deps): bump alpine in /Containers/notify-push
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:18:21 +00:00
dependabot[bot]
acb00be975 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/imaginary
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:41 +00:00
dependabot[bot]
3b1eb6d5e3 build(deps): bump alpine in /Containers/domaincheck
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:35 +00:00
dependabot[bot]
6cc5754f7e build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/clamav
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:30 +00:00
dependabot[bot]
68f529c2bc build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/borgbackup
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:27 +00:00
dependabot[bot]
fc8d657ec0 build(deps): bump alpine from 3.23.3 to 3.23.4 in /Containers/alpine
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 04:17:21 +00:00
dependabot[bot]
ec1beb2fff build(deps): bump nats in /Containers/talk
Bumps nats from 2.12.6-scratch to 2.12.7-scratch.

---
updated-dependencies:
- dependency-name: nats
  dependency-version: 2.12.7-scratch
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-15 04:18:58 +00:00
Simon L.
eba5e11303 fix postgres
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-14 16:37:01 +02:00
Simon L.
4d8360d426 postgres: fix another detail
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-14 16:29:24 +02:00
Simon L.
6d372ab37f fix postgres container build
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-14 16:08:10 +02:00
Simon L.
2371cbc9b5 Merge pull request #7882 from nextcloud/enh/7622/update-nc-version
update bundled Nextcloud version to v33
2026-04-14 15:32:54 +02:00
Simon L.
c3d8e80b7c Merge pull request #7879 from nextcloud/revert-7585-revert-7485-enh/noid/more-strict-check
Re-introduce "mastercontainer: make check for correct volume name more strict"
2026-04-14 15:32:35 +02:00
Simon L.
6d47317d1e Merge pull request #7877 from nextcloud/enh/6921/update-postgres
postgres: update to v18
2026-04-14 15:32:23 +02:00
Pablo Zmdl
3f11a48657 Update Containers/apache/Caddyfile
Co-authored-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Pablo Zmdl <57864086+pabzm@users.noreply.github.com>
2026-04-10 14:56:44 +02:00
Pablo Zmdl
0a96759c72 Add an explanation why we disable the HTTP challenge in that Caddy instance
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-04-10 14:51:51 +02:00
dependabot[bot]
c2fd040d06 build(deps): bump php in /Containers/mastercontainer
Bumps php from 8.5.4-fpm-alpine3.23 to 8.5.5-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.5-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-10 04:17:04 +00:00
Simon L.
0b8eecd9e5 update bundled Nextcloud version to v33
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-09 14:56:10 +02:00
Simon L.
5079acfa21 Merge pull request #7823 from nextcloud/acme-shortlived-profile
use acme shortlived profile
2026-04-09 14:35:37 +02:00
Simon L.
3f9287f3e5 Revert "Revert "mastercontainer: make check for correct volume name more strict""
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-09 14:24:52 +02:00
Simon L.
e66259cb31 postgres: update to v18
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-09 14:13:35 +02:00
Simon L.
11fcb7d25e Merge pull request #7872 from nextcloud/dependabot/docker/Containers/fulltextsearch/elasticsearch-8.19.14
build(deps): bump elasticsearch from 8.19.13 to 8.19.14 in /Containers/fulltextsearch
2026-04-09 12:52:25 +02:00
Simon L.
12ad9b8c4d Merge pull request #7869 from nextcloud/dependabot/docker/Containers/watchtower/golang-1.26.2-alpine3.23
build(deps): bump golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23 in /Containers/watchtower
2026-04-09 12:52:01 +02:00
Simon L.
228a2a2372 Merge pull request #7868 from nextcloud/dependabot/docker/Containers/mastercontainer/docker-29.4.0-cli
build(deps): bump docker from 29.3.1-cli to 29.4.0-cli in /Containers/mastercontainer
2026-04-09 12:51:48 +02:00
Simon L.
dd53793f13 Merge pull request #7867 from nextcloud/dependabot/docker/Containers/imaginary/golang-1.26.2-alpine3.23
build(deps): bump golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23 in /Containers/imaginary
2026-04-09 12:51:37 +02:00
dependabot[bot]
088cfce5f3 build(deps): bump elasticsearch in /Containers/fulltextsearch
Bumps elasticsearch from 8.19.13 to 8.19.14.

---
updated-dependencies:
- dependency-name: elasticsearch
  dependency-version: 8.19.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-09 04:16:17 +00:00
szaimen
ccd94dfaf7 watchtower-update automated change
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-08 12:25:55 +00:00
dependabot[bot]
a2531182d1 build(deps): bump golang in /Containers/watchtower
Bumps golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.2-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 04:17:54 +00:00
dependabot[bot]
83a77ae625 build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.3.1-cli to 29.4.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.4.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 04:17:00 +00:00