aio-interface: do not cache the containers, logs and setup screen as it shows credentials

Signed-off-by: Simon L. <szaimen@e.mail.de>
add warning notice to minio container that minio is not maintained any more (#8131 )
2026-05-21 10:50:10 +00:00 · 2026-05-21 12:14:46 +02:00 · 2026-05-18 19:18:01 +02:00 · 2026-05-18 19:16:13 +02:00 · 2026-05-18 19:15:33 +02:00 · 2026-05-18 18:55:18 +02:00
6 changed files with 22 additions and 5 deletions
--- a/.github/workflows/helm-release.yml
+++ b/.github/workflows/helm-release.yml
@@ -10,6 +10,8 @@ on:

 jobs:
  release:
+    # Do not run this workflow on forked repositories, as they might not have the `gh-pages` branch created, or might
+    # want to use it for other purposes than publishing helm charts
    if: github.repository == 'nextcloud/all-in-one'
    runs-on: ubuntu-latest
    steps:
--- a/community-containers/minio/readme.md
+++ b/community-containers/minio/readme.md
@@ -1,6 +1,9 @@
 ## Minio
 This container bundles minio s3 storage and auto-configures it for you.

+> [!CAUTION]
+> The Minio upstream project is no longer maintained. The container should still work in its current form...
+
 >[!WARNING]
 > Enabling this container will remove access to all the files formerly written to the data directory.
 > So only enable this on a clean instance directly after installing AIO.
--- a/manual-install/latest.yml
+++ b/manual-install/latest.yml
@@ -46,7 +46,6 @@ services:
      - APACHE_MAX_TIME=${NEXTCLOUD_MAX_TIME}
      - NOTIFY_PUSH_HOST=nextcloud-aio-notify-push
      - WHITEBOARD_HOST=nextcloud-aio-whiteboard
-      - HARP_HOST=nextcloud-aio-harp
    volumes:
      - nextcloud_aio_nextcloud:/var/www/html:ro
      - nextcloud_aio_apache:/mnt/data:rw
--- a/php/public/index.php
+++ b/php/public/index.php
@@ -181,8 +181,10 @@ $app->get('/containers', function (Request $request, Response $response, array $
        'community_containers' => $configurationManager->listAvailableCommunityContainers(),
        'community_containers_enabled' => $configurationManager->aioCommunityContainers,
        'bypass_container_update' => $bypass_container_update,
-    ]);
+    // Do not cache the page as it shows credentials
+    ])->withHeader('Cache-Control', 'no-store');
 })->setName('profile');
+
 $app->get('/login', function (Request $request, Response $response, array $args) use ($container) {
    $view = Twig::fromRequest($request);
    /** @var \AIO\Docker\DockerActionManager $dockerActionManager */
@@ -191,6 +193,7 @@ $app->get('/login', function (Request $request, Response $response, array $args)
        'is_login_allowed' => $dockerActionManager->isLoginAllowed(),
    ]);
 });
+
 $app->get('/setup', function (Request $request, Response $response, array $args) use ($container) {
    $view = Twig::fromRequest($request);
    /** @var \AIO\Data\Setup $setup */
@@ -209,8 +212,10 @@ $app->get('/setup', function (Request $request, Response $response, array $args)
        [
            'password' => $setup->Setup(),
        ]
-    );
+    // Do not cache the page as it shows credentials
+    )->withHeader('Cache-Control', 'no-store');
 });
+
 $app->get('/log', function (Request $request, Response $response, array $args) use ($container) {
    $params = $request->getQueryParams();
    $id = $params['id'] ?? '';
@@ -218,7 +223,13 @@ $app->get('/log', function (Request $request, Response $response, array $args) u
        throw new DI\NotFoundException();
    }
    $view = Twig::fromRequest($request);
-    return $view->render($response, 'log.twig', ['id' => $id]);
+    return $view->render(
+        $response, 'log.twig', 
+        [
+            'id' => $id
+        ]
+    // Do not cache the page as it might shows credentials
+    )->withHeader('Cache-Control', 'no-store');
 });

 // Auth Redirector
--- a/php/public/log-load.js
+++ b/php/public/log-load.js
--- a/php/templates/log.twig
+++ b/php/templates/log.twig
@@ -1,9 +1,11 @@
 <html lang="en">
    <head>
+        <title>AIO</title>
        <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
        <link rel="stylesheet" href="style.css">
        <link rel="stylesheet" href="logs.css">
-        <script src="log-view.js?v1"></script>
+        <link rel="icon" href="img/favicon.png">
+        <script src="log-load.js?v1"></script>
    </head>
    <body data-container-id="{{ id }}">
        <div id="floating-box">
Author	SHA1	Message	Date
Simon L.	1d546bbb59	aio-interface: do not cache the containers, logs and setup screen as it shows credentials Signed-off-by: Simon L. <szaimen@e.mail.de>	2026-05-21 12:14:46 +02:00
Simon L.	a3d84cce7b	add warning notice to minio container that minio is not maintained any more (#8131 )	2026-05-18 19:18:01 +02:00
Simon L.	535a0ffbd2	add a comment to clarify the reason for the condition added in PR 8145 (#8147 )	2026-05-18 19:16:13 +02:00
Simon L.	1d947355ab	Yaml updates (#8152 )	2026-05-18 19:15:33 +02:00
Gaetano Giunta	fdfd479db7	aio-interface: make sure ublock does not break the log viewer (#8148 )	2026-05-18 18:55:18 +02:00
gggeek	d4da301c9a	improve the notice about minio deprecation in the readme of the community container Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>	2026-05-18 15:57:15 +00:00
gggeek	4c0b28f70d	add warning notice to minio container that minio is not maintained any more Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>	2026-05-18 15:57:15 +00:00
gggeek	34429865fe	add a comment to clarify the reason for the condition added in PR 8145 Signed-off-by: Gaetano Giunta <giunta.gaetano@gmail.com>	2026-05-18 15:56:22 +00:00
szaimen	aa115110d5	Yaml updates Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-05-18 13:28:25 +00:00