Simon L.
c261306a9d
fix(Mastercontainer): exit daily-backup.sh early if restore is running ( #8514 )
2026-08-05 12:17:53 +02:00
Simon L.
858c4df728
mastercontainer and nextcloud: replace sudo with su-exec ( #8524 )
2026-08-05 11:43:00 +02:00
Simon L.
52c735497b
build(deps): bump docker from 29.6.2-cli to 29.7.0-cli in /Containers/mastercontainer ( #8534 )
2026-08-05 10:41:48 +02:00
dependabot[bot]
015147b2e7
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.6.2-cli to 29.7.0-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.7.0-cli
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-04 04:07:22 +00:00
dependabot[bot]
587c63497e
build(deps): bump php in /Containers/mastercontainer
...
Bumps php from 8.5.8-fpm-alpine3.24 to 8.5.9-fpm-alpine3.24.
---
updated-dependencies:
- dependency-name: php
dependency-version: 8.5.9-fpm-alpine3.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-03 04:08:57 +00:00
Zoey
c70e4b2ae4
replace sudo with su-exec
...
Signed-off-by: Zoey <zoey@z0ey.de >
2026-08-02 17:32:32 +02:00
copilot-swe-agent[bot]
b03f28cb8e
fix(Mastercontainer): exit daily-backup.sh early if restore is running
...
If the backup container is currently running in restore mode, the daily
backup script now exits immediately instead of waiting indefinitely for
the container to stop. This prevents the daily backup cron from
interrupting long-running restores.
Fixes : #8414
Assisted-by: GitHub Copilot:claude-sonnet-4
2026-07-31 09:37:54 +00:00
dependabot[bot]
d170e2039f
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.6.1-cli to 29.6.2-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.6.2-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-20 04:09:45 +00:00
Pablo Zmdl
bf2810b33c
build(deps): bump php from 8.5.7-fpm-alpine3.24 to 8.5.8-fpm-alpine3.24 in /Containers/mastercontainer ( #8426 )
2026-07-13 11:11:58 +02:00
dependabot[bot]
b287c7444b
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.6.0-cli to 29.6.1-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.6.1-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 04:10:02 +00:00
dependabot[bot]
e4b5967c30
build(deps): bump php in /Containers/mastercontainer
...
Bumps php from 8.5.7-fpm-alpine3.24 to 8.5.8-fpm-alpine3.24.
---
updated-dependencies:
- dependency-name: php
dependency-version: 8.5.8-fpm-alpine3.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-08 04:08:30 +00:00
Pablo Zmdl
5729e4f7cf
Make start.sh executable
...
The error about not being allowed to execute /start.sh were due to the
file permissions mounted from the local disk
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com >
2026-07-07 10:13:49 +02:00
Simon L.
cd61f66467
add desec ( #7995 )
...
## Summary
- Integrates Desec into the AIO interface which simplifies the domain
registration and domain setup.
- You can either create a new account directly or use an existing
account.
- You have a button that you can open where the process will be done.
After the process is done, the whole page reloads and you can continue
with the setup.
- Caddy and dnsmasq community containers will be activated during the
process which will take over the cert generation and enable split-brain
dns.
- Community containers will work automatically for example Vaultwarden
as the subdomains of the desec domain point automatically via a wildcard
dns entry towards the main desec domain.
- Playwright tests are added to ensure that the system works as expected
in the future
- the desec api is mocked via a small node js based file.
- the qa and other docs were updated to mention desec
2026-06-23 15:05:42 +02:00
dependabot[bot]
97dfbd1b48
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.5.3-cli to 29.6.0-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.6.0-cli
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 04:09:05 +00:00
f7987b26ac
feat(desec): add deSEC account + domain registration backend
...
Add the server-side deSEC (dedyn.io) free dynamic-DNS flow so users without a
domain can obtain one from the AIO interface.
- DesecManager drives the full flow against the deSEC API, matching its real
semantics: account creation returns HTTP 202 + email verification (no token),
a token is obtained via /auth/login/ only after the email is verified, domain
registration handles 201/409, and a wildcard CNAME rrset is created for new
accounts. Existing accounts can be used by supplying a password.
- The "awaiting verification" step is derived from the stored credentials (email
+ generated password but no token and no domain yet), not a separate flag.
register() returns false for that state so the controller can re-render the
awaiting-verification UI instead of surfacing it as an error.
- DesecController exposes POST /api/desec/register; DependencyInjection wires the
manager; account credentials (email, generated password, token) are stored in
the AIO configuration and DESEC_TOKEN is exposed to the caddy container.
- The dynamic-DNS record is refreshed with the current public IP on container
start (DockerController) and via the cron path (Cron/UpdateDesecIp, cron.sh).
- Fix an undefined-variable bug in the desecToken/desecPassword config setters
that prevented credentials from being persisted.
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-06-18 13:19:16 +02:00
Simon L.
2ebbf41566
update remaining docker images to alpine 3.24
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-06-17 11:31:04 +02:00
Simon L.
bec4f533cb
build(deps): bump php from 8.5.6-fpm-alpine3.23 to 8.5.7-fpm-alpine3.23 in /Containers/mastercontainer ( #8270 )
2026-06-09 14:21:39 +02:00
dependabot[bot]
9c276df668
build(deps): bump php in /Containers/mastercontainer
...
Bumps php from 8.5.6-fpm-alpine3.23 to 8.5.7-fpm-alpine3.23.
---
updated-dependencies:
- dependency-name: php
dependency-version: 8.5.7-fpm-alpine3.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 04:07:45 +00:00
dependabot[bot]
25c7b8f7ef
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.5.2-cli to 29.5.3-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.5.3-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-05 04:06:24 +00:00
dependabot[bot]
82f2e9dca1
build(deps): bump caddy in /Containers/mastercontainer
...
Bumps caddy from 2.11.3-builder-alpine to 2.11.4-builder-alpine.
---
updated-dependencies:
- dependency-name: caddy
dependency-version: 2.11.4-builder-alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 21:57:41 +00:00
Simon L.
34aec1c790
caddy: re-introduce lets encrypt profiles
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-06-01 12:20:40 +02:00
Simon L.
28c8faf997
revert: caddy: use acme shortlived profile
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-06-01 11:40:31 +02:00
Ivan Mihov
d2d59eb207
Add dockhand.update: false to the Dockerfiles
...
Signed-off-by: Ivan Mihov <ivan@mihov.me >
2026-05-28 11:41:41 +02:00
dependabot[bot]
1a2d168a7f
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.5.1-cli to 29.5.2-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.5.2-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 04:22:33 +00:00
dependabot[bot]
20835baa0c
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.5.0-cli to 29.5.1-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.5.1-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-20 08:36:32 +00:00
Dimas D. Angga
c6748dc450
fix(mastercontainer): run session-deduplicator as www-data
...
The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.
2026-05-20 09:32:49 +07:00
dependabot[bot]
ea9eca44c2
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.4.3-cli to 29.5.0-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.5.0-cli
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 04:56:43 +00:00
Simon L.
574a408d10
build(deps): bump caddy from 2.11.2-builder-alpine to 2.11.3-builder-alpine in /Containers/mastercontainer ( #8087 )
2026-05-13 11:26:30 +02:00
Simon L.
c55ae87002
build(deps): bump docker from 29.4.1-cli to 29.4.3-cli in /Containers/mastercontainer ( #8075 )
2026-05-13 11:25:23 +02:00
Simon L.
3021f256ce
build(deps): bump php from 8.5.5-fpm-alpine3.23 to 8.5.6-fpm-alpine3.23 in /Containers/mastercontainer ( #8074 )
2026-05-13 11:25:09 +02:00
dependabot[bot]
70a0a4a361
build(deps): bump caddy in /Containers/mastercontainer
...
Bumps caddy from 2.11.2-builder-alpine to 2.11.3-builder-alpine.
---
updated-dependencies:
- dependency-name: caddy
dependency-version: 2.11.3-builder-alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 04:20:59 +00:00
dependabot[bot]
df14efa1ef
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.4.1-cli to 29.4.3-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.4.3-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-11 04:24:27 +00:00
dependabot[bot]
f5d35f0197
build(deps): bump php in /Containers/mastercontainer
...
Bumps php from 8.5.5-fpm-alpine3.23 to 8.5.6-fpm-alpine3.23.
---
updated-dependencies:
- dependency-name: php
dependency-version: 8.5.6-fpm-alpine3.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-11 04:24:24 +00:00
szaimen
901cd8ccef
php dependency updates
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-09 12:15:45 +00:00
Simon L.
ee8a5a185c
mastercontainer: fix checking for AIO_LOG_LEVEL ( #8035 )
2026-05-04 10:36:45 +02:00
Zoey
a1eaea85ed
fix Cross-Origin-* headers not being sent
...
Signed-off-by: Zoey <zoey@z0ey.de >
2026-05-03 22:34:27 +02:00
Simon L.
c545bffc53
mastercontainer: fix checking for AIO_LOG_LEVEL
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-30 16:07:48 +02:00
Simon L.
55790da3eb
caddy: revert being able to adjust the log level for it for now
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-29 14:47:32 +02:00
Simon L.
4e8292b922
acme.Caddyfile: mute caddy warnings
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-28 21:38:41 +02:00
Simon L.
d1a677909e
allow to adjust the log level globally (mastercontainer)
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-24 10:34:44 +02:00
Simon L.
563a047a9a
headers.Caddyfile: adjust the Permission Policy like suggested by @Zoey2936
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-21 14:10:55 +02:00
dependabot[bot]
ce2b4c6b87
build(deps): bump docker in /Containers/mastercontainer
...
Bumps docker from 29.4.0-cli to 29.4.1-cli.
---
updated-dependencies:
- dependency-name: docker
dependency-version: 29.4.1-cli
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-21 04:17:11 +00:00
Simon L.
5c016d5d35
mastercontainer: fix enabling opcache
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 16:28:57 +02:00
Simon L.
d7030396cb
mastercontianer: fix installation of opcache
...
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 16:07:52 +02:00
copilot-swe-agent[bot] and szaimen
144c91ae02
ContainerDefinitionFetcher: cache the containers.json in apcu
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9
perf: set apc.shm_size=32M explicitly in mastercontainer Dockerfile
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4af50c77-4ac1-4947-9b35-dc66d0d0cc8b
perf: revert all previous changes; cache containers.json in APCu
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/59281e92-7e5d-40ef-a152-78e0620eb949
perf: address review comments - clarify cache comment, restore readonly constructors
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-20 13:59:51 +02:00
Simon L.
2b5998e57d
aio-interface: enable PHP OPcache and Twig template cache ( #7950 )
2026-04-20 13:55:33 +02:00
copilot-swe-agent[bot] and szaimen
3c17a6af36
aio-interface: enable PHP OPcache and Twig template cache
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/2d974f3d-5f37-47e9-aa1f-00a43bcd9838
Signed-off-by: Simon L. <szaimen@e.mail.de >
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com >
Signed-off-by: Simon L. <szaimen@e.mail.de >
2026-04-20 13:47:59 +02:00
copilot-swe-agent[bot] and szaimen
98a8861690
Add missing Permissions-Policy directives to headers.Caddyfile
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/5735ef2f-5264-43ad-a107-433f2770d05f
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-18 10:53:10 +00:00
copilot-swe-agent[bot] and szaimen
fed426b635
Add Permissions-Policy header to headers.Caddyfile
...
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8ef03112-cdc4-46d1-b1f1-96c2a85e92c0
Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com >
2026-04-17 14:45:12 +00:00
Simon L.
558b53b2de
Merge pull request #7928 from nextcloud/copilot/add-hardware-transcoding-talk-recording
...
talk-recording: allow to enable hardware transcoding for the container
2026-04-17 14:08:59 +02:00