Commit Graph
561 Commits
Author SHA1 Message Date
Simon L. c261306a9d fix(Mastercontainer): exit daily-backup.sh early if restore is running (#8514) 2026-08-05 12:17:53 +02:00
Simon L. 858c4df728 mastercontainer and nextcloud: replace sudo with su-exec (#8524) 2026-08-05 11:43:00 +02:00
Simon L. 52c735497b build(deps): bump docker from 29.6.2-cli to 29.7.0-cli in /Containers/mastercontainer (#8534) 2026-08-05 10:41:48 +02:00
dependabot[bot] 015147b2e7 build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.6.2-cli to 29.7.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.7.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-04 04:07:22 +00:00
dependabot[bot] 587c63497e build(deps): bump php in /Containers/mastercontainer
Bumps php from 8.5.8-fpm-alpine3.24 to 8.5.9-fpm-alpine3.24.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.9-fpm-alpine3.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-03 04:08:57 +00:00
Zoey c70e4b2ae4 replace sudo with su-exec
Signed-off-by: Zoey <zoey@z0ey.de>
2026-08-02 17:32:32 +02:00
copilot-swe-agent[bot] b03f28cb8e fix(Mastercontainer): exit daily-backup.sh early if restore is running
If the backup container is currently running in restore mode, the daily
backup script now exits immediately instead of waiting indefinitely for
the container to stop. This prevents the daily backup cron from
interrupting long-running restores.

Fixes: #8414

Assisted-by: GitHub Copilot:claude-sonnet-4
2026-07-31 09:37:54 +00:00
dependabot[bot] d170e2039f build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.6.1-cli to 29.6.2-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.6.2-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-20 04:09:45 +00:00
Pablo Zmdl bf2810b33c build(deps): bump php from 8.5.7-fpm-alpine3.24 to 8.5.8-fpm-alpine3.24 in /Containers/mastercontainer (#8426) 2026-07-13 11:11:58 +02:00
dependabot[bot] b287c7444b build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.6.0-cli to 29.6.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.6.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-09 04:10:02 +00:00
dependabot[bot] e4b5967c30 build(deps): bump php in /Containers/mastercontainer
Bumps php from 8.5.7-fpm-alpine3.24 to 8.5.8-fpm-alpine3.24.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.8-fpm-alpine3.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-08 04:08:30 +00:00
Pablo Zmdl 5729e4f7cf Make start.sh executable
The error about not being allowed to execute /start.sh were due to the
file permissions mounted from the local disk

Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
2026-07-07 10:13:49 +02:00
Simon L. cd61f66467 add desec (#7995)
## Summary
- Integrates Desec into the AIO interface which simplifies the domain
registration and domain setup.
- You can either create a new account directly or use an existing
account.
- You have a button that you can open where the process will be done.
After the process is done, the whole page reloads and you can continue
with the setup.
- Caddy and dnsmasq community containers will be activated during the
process which will take over the cert generation and enable split-brain
dns.
- Community containers will work automatically for example Vaultwarden
as the subdomains of the desec domain point automatically via a wildcard
dns entry towards the main desec domain.
- Playwright tests are added to ensure that the system works as expected
in the future
- the desec api is mocked via a small node js based file.
- the qa and other docs were updated to mention desec
2026-06-23 15:05:42 +02:00
dependabot[bot] 97dfbd1b48 build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.3-cli to 29.6.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.6.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 04:09:05 +00:00
f7987b26ac feat(desec): add deSEC account + domain registration backend
Add the server-side deSEC (dedyn.io) free dynamic-DNS flow so users without a
domain can obtain one from the AIO interface.

- DesecManager drives the full flow against the deSEC API, matching its real
  semantics: account creation returns HTTP 202 + email verification (no token),
  a token is obtained via /auth/login/ only after the email is verified, domain
  registration handles 201/409, and a wildcard CNAME rrset is created for new
  accounts. Existing accounts can be used by supplying a password.
- The "awaiting verification" step is derived from the stored credentials (email
  + generated password but no token and no domain yet), not a separate flag.
  register() returns false for that state so the controller can re-render the
  awaiting-verification UI instead of surfacing it as an error.
- DesecController exposes POST /api/desec/register; DependencyInjection wires the
  manager; account credentials (email, generated password, token) are stored in
  the AIO configuration and DESEC_TOKEN is exposed to the caddy container.
- The dynamic-DNS record is refreshed with the current public IP on container
  start (DockerController) and via the cron path (Cron/UpdateDesecIp, cron.sh).
- Fix an undefined-variable bug in the desecToken/desecPassword config setters
  that prevented credentials from being persisted.

Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-06-18 13:19:16 +02:00
Simon L. 2ebbf41566 update remaining docker images to alpine 3.24
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-06-17 11:31:04 +02:00
Simon L. bec4f533cb build(deps): bump php from 8.5.6-fpm-alpine3.23 to 8.5.7-fpm-alpine3.23 in /Containers/mastercontainer (#8270) 2026-06-09 14:21:39 +02:00
dependabot[bot] 9c276df668 build(deps): bump php in /Containers/mastercontainer
Bumps php from 8.5.6-fpm-alpine3.23 to 8.5.7-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.7-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 04:07:45 +00:00
dependabot[bot] 25c7b8f7ef build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.2-cli to 29.5.3-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.3-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-05 04:06:24 +00:00
dependabot[bot] 82f2e9dca1 build(deps): bump caddy in /Containers/mastercontainer
Bumps caddy from 2.11.3-builder-alpine to 2.11.4-builder-alpine.

---
updated-dependencies:
- dependency-name: caddy
  dependency-version: 2.11.4-builder-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 21:57:41 +00:00
Simon L. 34aec1c790 caddy: re-introduce lets encrypt profiles
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-06-01 12:20:40 +02:00
Simon L. 28c8faf997 revert: caddy: use acme shortlived profile
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-06-01 11:40:31 +02:00
Ivan Mihov d2d59eb207 Add dockhand.update: false to the Dockerfiles
Signed-off-by: Ivan Mihov <ivan@mihov.me>
2026-05-28 11:41:41 +02:00
dependabot[bot] 1a2d168a7f build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.1-cli to 29.5.2-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.2-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-22 04:22:33 +00:00
dependabot[bot] 20835baa0c build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.5.0-cli to 29.5.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-20 08:36:32 +00:00
Dimas D. Angga c6748dc450 fix(mastercontainer): run session-deduplicator as www-data
The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.
2026-05-20 09:32:49 +07:00
dependabot[bot] ea9eca44c2 build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.4.3-cli to 29.5.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 04:56:43 +00:00
Simon L. 574a408d10 build(deps): bump caddy from 2.11.2-builder-alpine to 2.11.3-builder-alpine in /Containers/mastercontainer (#8087) 2026-05-13 11:26:30 +02:00
Simon L. c55ae87002 build(deps): bump docker from 29.4.1-cli to 29.4.3-cli in /Containers/mastercontainer (#8075) 2026-05-13 11:25:23 +02:00
Simon L. 3021f256ce build(deps): bump php from 8.5.5-fpm-alpine3.23 to 8.5.6-fpm-alpine3.23 in /Containers/mastercontainer (#8074) 2026-05-13 11:25:09 +02:00
dependabot[bot] 70a0a4a361 build(deps): bump caddy in /Containers/mastercontainer
Bumps caddy from 2.11.2-builder-alpine to 2.11.3-builder-alpine.

---
updated-dependencies:
- dependency-name: caddy
  dependency-version: 2.11.3-builder-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-13 04:20:59 +00:00
dependabot[bot] df14efa1ef build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.4.1-cli to 29.4.3-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.4.3-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-11 04:24:27 +00:00
dependabot[bot] f5d35f0197 build(deps): bump php in /Containers/mastercontainer
Bumps php from 8.5.5-fpm-alpine3.23 to 8.5.6-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.6-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-11 04:24:24 +00:00
szaimen 901cd8ccef php dependency updates
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-09 12:15:45 +00:00
Simon L. ee8a5a185c mastercontainer: fix checking for AIO_LOG_LEVEL (#8035) 2026-05-04 10:36:45 +02:00
Zoey a1eaea85ed fix Cross-Origin-* headers not being sent
Signed-off-by: Zoey <zoey@z0ey.de>
2026-05-03 22:34:27 +02:00
Simon L. c545bffc53 mastercontainer: fix checking for AIO_LOG_LEVEL
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-30 16:07:48 +02:00
Simon L. 55790da3eb caddy: revert being able to adjust the log level for it for now
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-29 14:47:32 +02:00
Simon L. 4e8292b922 acme.Caddyfile: mute caddy warnings
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-28 21:38:41 +02:00
Simon L. d1a677909e allow to adjust the log level globally (mastercontainer)
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-24 10:34:44 +02:00
Simon L. 563a047a9a headers.Caddyfile: adjust the Permission Policy like suggested by @Zoey2936
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-21 14:10:55 +02:00
dependabot[bot] ce2b4c6b87 build(deps): bump docker in /Containers/mastercontainer
Bumps docker from 29.4.0-cli to 29.4.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.4.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-21 04:17:11 +00:00
Simon L. 5c016d5d35 mastercontainer: fix enabling opcache
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-20 16:28:57 +02:00
Simon L. d7030396cb mastercontianer: fix installation of opcache
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-20 16:07:52 +02:00
copilot-swe-agent[bot]andszaimen 144c91ae02 ContainerDefinitionFetcher: cache the containers.json in apcu
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9

perf: set apc.shm_size=32M explicitly in mastercontainer Dockerfile

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4af50c77-4ac1-4947-9b35-dc66d0d0cc8b

perf: revert all previous changes; cache containers.json in APCu

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/59281e92-7e5d-40ef-a152-78e0620eb949

perf: address review comments - clarify cache comment, restore readonly constructors

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-20 13:59:51 +02:00
Simon L. 2b5998e57d aio-interface: enable PHP OPcache and Twig template cache (#7950) 2026-04-20 13:55:33 +02:00
copilot-swe-agent[bot]andszaimen 3c17a6af36 aio-interface: enable PHP OPcache and Twig template cache
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/2d974f3d-5f37-47e9-aa1f-00a43bcd9838
Signed-off-by: Simon L. <szaimen@e.mail.de>
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
Signed-off-by: Simon L. <szaimen@e.mail.de>
2026-04-20 13:47:59 +02:00
copilot-swe-agent[bot]andszaimen 98a8861690 Add missing Permissions-Policy directives to headers.Caddyfile
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/5735ef2f-5264-43ad-a107-433f2770d05f

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-18 10:53:10 +00:00
copilot-swe-agent[bot]andszaimen fed426b635 Add Permissions-Policy header to headers.Caddyfile
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8ef03112-cdc4-46d1-b1f1-96c2a85e92c0

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
2026-04-17 14:45:12 +00:00
Simon L. 558b53b2de Merge pull request #7928 from nextcloud/copilot/add-hardware-transcoding-talk-recording
talk-recording: allow to enable hardware transcoding for the container
2026-04-17 14:08:59 +02:00