daenamnu/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2026-07-22 22:20:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,606 Commits 93 Branches 279 Tags
cc42d180ea436e08d3255bc55a3df64c130c25c2
Commit Graph
553 Commits
Author SHA1 Message Date
Pablo ZmdlandGitHub bf2810b33c build(deps): bump php from 8.5.7-fpm-alpine3.24 to 8.5.8-fpm-alpine3.24 in /Containers/mastercontainer (#8426) 2026-07-13 11:11:58 +02:00
dependabot[bot]andGitHub b287c7444b build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.6.0-cli to 29.6.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.6.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-09 04:10:02 +00:00
dependabot[bot]andGitHub e4b5967c30 build(deps): bump php in /Containers/mastercontainer 
Bumps php from 8.5.7-fpm-alpine3.24 to 8.5.8-fpm-alpine3.24.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.8-fpm-alpine3.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 04:08:30 +00:00
Pablo Zmdl 5729e4f7cf Make start.sh executable 
The error about not being allowed to execute /start.sh were due to the
file permissions mounted from the local disk

Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
 2026-07-07 10:13:49 +02:00
Simon L.andGitHub cd61f66467 add desec (#7995) 
## Summary
- Integrates Desec into the AIO interface which simplifies the domain
registration and domain setup.
- You can either create a new account directly or use an existing
account.
- You have a button that you can open where the process will be done.
After the process is done, the whole page reloads and you can continue
with the setup.
- Caddy and dnsmasq community containers will be activated during the
process which will take over the cert generation and enable split-brain
dns.
- Community containers will work automatically for example Vaultwarden
as the subdomains of the desec domain point automatically via a wildcard
dns entry towards the main desec domain.
- Playwright tests are added to ensure that the system works as expected
in the future
- the desec api is mocked via a small node js based file.
- the qa and other docs were updated to mention desec
 2026-06-23 15:05:42 +02:00
dependabot[bot]andGitHub 97dfbd1b48 build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.5.3-cli to 29.6.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.6.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 04:09:05 +00:00
Simon L.szaimenClaude Opus 4.8
 		f7987b26ac feat(desec): add deSEC account + domain registration backend 
Add the server-side deSEC (dedyn.io) free dynamic-DNS flow so users without a
domain can obtain one from the AIO interface.

- DesecManager drives the full flow against the deSEC API, matching its real
  semantics: account creation returns HTTP 202 + email verification (no token),
  a token is obtained via /auth/login/ only after the email is verified, domain
  registration handles 201/409, and a wildcard CNAME rrset is created for new
  accounts. Existing accounts can be used by supplying a password.
- The "awaiting verification" step is derived from the stored credentials (email
  + generated password but no token and no domain yet), not a separate flag.
  register() returns false for that state so the controller can re-render the
  awaiting-verification UI instead of surfacing it as an error.
- DesecController exposes POST /api/desec/register; DependencyInjection wires the
  manager; account credentials (email, generated password, token) are stored in
  the AIO configuration and DESEC_TOKEN is exposed to the caddy container.
- The dynamic-DNS record is refreshed with the current public IP on container
  start (DockerController) and via the cron path (Cron/UpdateDesecIp, cron.sh).
- Fix an undefined-variable bug in the desecToken/desecPassword config setters
  that prevented credentials from being persisted.

Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-06-18 13:19:16 +02:00
Simon L. 2ebbf41566 update remaining docker images to alpine 3.24 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-06-17 11:31:04 +02:00
Simon L.andGitHub bec4f533cb build(deps): bump php from 8.5.6-fpm-alpine3.23 to 8.5.7-fpm-alpine3.23 in /Containers/mastercontainer (#8270) 2026-06-09 14:21:39 +02:00
dependabot[bot]andGitHub 9c276df668 build(deps): bump php in /Containers/mastercontainer 
Bumps php from 8.5.6-fpm-alpine3.23 to 8.5.7-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.7-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 04:07:45 +00:00
dependabot[bot]andGitHub 25c7b8f7ef build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.5.2-cli to 29.5.3-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.3-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-05 04:06:24 +00:00
dependabot[bot]andGitHub 82f2e9dca1 build(deps): bump caddy in /Containers/mastercontainer 
Bumps caddy from 2.11.3-builder-alpine to 2.11.4-builder-alpine.

---
updated-dependencies:
- dependency-name: caddy
  dependency-version: 2.11.4-builder-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-03 21:57:41 +00:00
Simon L. 34aec1c790 caddy: re-introduce lets encrypt profiles 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-06-01 12:20:40 +02:00
Simon L. 28c8faf997 revert: caddy: use acme shortlived profile 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-06-01 11:40:31 +02:00
Ivan MihovandSimon L. d2d59eb207 Add dockhand.update: false to the Dockerfiles 
Signed-off-by: Ivan Mihov <ivan@mihov.me>
 2026-05-28 11:41:41 +02:00
dependabot[bot]andGitHub 1a2d168a7f build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.5.1-cli to 29.5.2-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.2-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-22 04:22:33 +00:00
dependabot[bot]andGitHub 20835baa0c build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.5.0-cli to 29.5.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-20 08:36:32 +00:00
Dimas D. Angga c6748dc450 fix(mastercontainer): run session-deduplicator as www-data 
The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.
 2026-05-20 09:32:49 +07:00
dependabot[bot]andGitHub ea9eca44c2 build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.4.3-cli to 29.5.0-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.5.0-cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-18 04:56:43 +00:00
Simon L.andGitHub 574a408d10 build(deps): bump caddy from 2.11.2-builder-alpine to 2.11.3-builder-alpine in /Containers/mastercontainer (#8087) 2026-05-13 11:26:30 +02:00
Simon L.andGitHub c55ae87002 build(deps): bump docker from 29.4.1-cli to 29.4.3-cli in /Containers/mastercontainer (#8075) 2026-05-13 11:25:23 +02:00
Simon L.andGitHub 3021f256ce build(deps): bump php from 8.5.5-fpm-alpine3.23 to 8.5.6-fpm-alpine3.23 in /Containers/mastercontainer (#8074) 2026-05-13 11:25:09 +02:00
dependabot[bot]andGitHub 70a0a4a361 build(deps): bump caddy in /Containers/mastercontainer 
Bumps caddy from 2.11.2-builder-alpine to 2.11.3-builder-alpine.

---
updated-dependencies:
- dependency-name: caddy
  dependency-version: 2.11.3-builder-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 04:20:59 +00:00
dependabot[bot]andGitHub df14efa1ef build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.4.1-cli to 29.4.3-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.4.3-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-11 04:24:27 +00:00
dependabot[bot]andGitHub f5d35f0197 build(deps): bump php in /Containers/mastercontainer 
Bumps php from 8.5.5-fpm-alpine3.23 to 8.5.6-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.6-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-11 04:24:24 +00:00
szaimenandgithub-actions[bot] 901cd8ccef php dependency updates 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-09 12:15:45 +00:00
Simon L.andGitHub ee8a5a185c mastercontainer: fix checking for AIO_LOG_LEVEL (#8035) 2026-05-04 10:36:45 +02:00
ZoeyandGitHub a1eaea85ed fix Cross-Origin-* headers not being sent 
Signed-off-by: Zoey <zoey@z0ey.de>
 2026-05-03 22:34:27 +02:00
Simon L. c545bffc53 mastercontainer: fix checking for AIO_LOG_LEVEL 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-30 16:07:48 +02:00
Simon L. 55790da3eb caddy: revert being able to adjust the log level for it for now 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-29 14:47:32 +02:00
Simon L. 4e8292b922 acme.Caddyfile: mute caddy warnings 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-28 21:38:41 +02:00
Simon L. d1a677909e allow to adjust the log level globally (mastercontainer) 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-24 10:34:44 +02:00
Simon L. 563a047a9a headers.Caddyfile: adjust the Permission Policy like suggested by @Zoey2936 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-21 14:10:55 +02:00
dependabot[bot]andGitHub ce2b4c6b87 build(deps): bump docker in /Containers/mastercontainer 
Bumps docker from 29.4.0-cli to 29.4.1-cli.

---
updated-dependencies:
- dependency-name: docker
  dependency-version: 29.4.1-cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-21 04:17:11 +00:00
Simon L. 5c016d5d35 mastercontainer: fix enabling opcache 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-20 16:28:57 +02:00
Simon L. d7030396cb mastercontianer: fix installation of opcache 
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-20 16:07:52 +02:00
copilot-swe-agent[bot]Simon L.szaimen
 		144c91ae02 ContainerDefinitionFetcher: cache the containers.json in apcu 
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9

perf: set apc.shm_size=32M explicitly in mastercontainer Dockerfile

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4af50c77-4ac1-4947-9b35-dc66d0d0cc8b

perf: revert all previous changes; cache containers.json in APCu

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/59281e92-7e5d-40ef-a152-78e0620eb949

perf: address review comments - clarify cache comment, restore readonly constructors

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/b8bc4ea2-eee0-4e3f-bd71-d1c5a38c93e9
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
 2026-04-20 13:59:51 +02:00
Simon L.andGitHub 2b5998e57d aio-interface: enable PHP OPcache and Twig template cache (#7950) 2026-04-20 13:55:33 +02:00
copilot-swe-agent[bot]Simon L.szaimen
 		3c17a6af36 aio-interface: enable PHP OPcache and Twig template cache 
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/2d974f3d-5f37-47e9-aa1f-00a43bcd9838
Signed-off-by: Simon L. <szaimen@e.mail.de>
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
Signed-off-by: Simon L. <szaimen@e.mail.de>
 2026-04-20 13:47:59 +02:00
copilot-swe-agent[bot]GitHubszaimen
 		98a8861690 Add missing Permissions-Policy directives to headers.Caddyfile 
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/5735ef2f-5264-43ad-a107-433f2770d05f

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
 2026-04-18 10:53:10 +00:00
copilot-swe-agent[bot]GitHubszaimen
 		fed426b635 Add Permissions-Policy header to headers.Caddyfile 
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8ef03112-cdc4-46d1-b1f1-96c2a85e92c0

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
 2026-04-17 14:45:12 +00:00
Simon L.andGitHub 558b53b2de Merge pull request #7928 from nextcloud/copilot/add-hardware-transcoding-talk-recording 
talk-recording: allow to enable hardware transcoding for the container
 2026-04-17 14:08:59 +02:00
copilot-swe-agent[bot]Simon L.szaimen
 		1da363ea8c feat: add hardware transcoding support to talk-recording container 
Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18

Auto-detect /dev/dri in start.sh and export NEXTCLOUD_ENABLE_DRI_DEVICE automatically

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/751d0b0c-e529-4ea6-a316-5a53169a9ab6

fix: address code review feedback (nvidia check, file_exists, group_add comment)

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/eaea217b-2995-4e47-a4ec-f7be19f98a18

Use --device=/dev/dri instead of -v bind-mount in docs and compose

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/4fa5e70a-b786-445e-946f-a0610751d855
Co-Authored-By: szaimen <42591237+szaimen@users.noreply.github.com>
 2026-04-17 13:49:00 +02:00
Erwan HervéGitHubSimon L.
 		52c3192f26 chore: add OCI standard labels to all Dockerfiles (#7899) 
Signed-off-by: Erwan Hervé <erwan.herve@outlook.fr>
Signed-off-by: Erwan Hervé <62173453+Erwan-loot@users.noreply.github.com>
Co-authored-by: Simon L. <szaimen@e.mail.de>
 2026-04-17 10:42:55 +02:00
ZoeyandGitHub 61024ddf9d set hsts header in the acme.Caddyfile 
Signed-off-by: Zoey <zoey@z0ey.de>
 2026-04-16 18:02:29 +02:00
ZoeyandGitHub 6f28dfc5e3 also set Origin-Agent-Cluster header 
Signed-off-by: Zoey <zoey@z0ey.de>
 2026-04-16 17:40:56 +02:00
ZoeyGitHubSimon L.Pablo Zmdl
 		12e129f1f6 aio-interface: improve headers (#7690) 
Signed-off-by: Zoey <zoey@z0ey.de>
Signed-off-by: Simon L. <szaimen@e.mail.de>
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
Co-authored-by: Simon L. <szaimen@e.mail.de>
Co-authored-by: Pablo Zmdl <pablo@nextcloud.com>
 2026-04-16 17:20:50 +02:00
Simon L.andGitHub c3d8e80b7c Merge pull request #7879 from nextcloud/revert-7585-revert-7485-enh/noid/more-strict-check 
Re-introduce "mastercontainer: make check for correct volume name more strict"
 2026-04-14 15:32:35 +02:00
dependabot[bot]andGitHub c2fd040d06 build(deps): bump php in /Containers/mastercontainer 
Bumps php from 8.5.4-fpm-alpine3.23 to 8.5.5-fpm-alpine3.23.

---
updated-dependencies:
- dependency-name: php
  dependency-version: 8.5.5-fpm-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-10 04:17:04 +00:00
Simon L.andGitHub 5079acfa21 Merge pull request #7823 from nextcloud/acme-shortlived-profile 
use acme shortlived profile
 2026-04-09 14:35:37 +02:00