Commit Graph

  • a1eaea85ed fix Cross-Origin-* headers not being sent Zoey 2026-05-03 22:34:27 +02:00
  • bc2105d668 build(deps): bump nats in /Containers/talk dependabot[bot] 2026-05-01 04:27:45 +00:00
  • c545bffc53 mastercontainer: fix checking for AIO_LOG_LEVEL Simon L. 2026-04-30 16:07:48 +02:00
  • dc27f8078f nextcloud: update to 33.0.3 (#8032) v13.0.0 Simon L. 2026-04-30 11:22:32 +02:00
  • 9f9846461e nextcloud: update to 33.0.3 Simon L. 2026-04-30 11:19:13 +02:00
  • 8e3141ab75 fix update-yaml script detail Simon L. 2026-04-29 18:41:12 +02:00
  • f060a334d3 collabora: fix log level info (#8030) Simon L. 2026-04-29 17:59:10 +02:00
  • 4417d1ca7a collabora: fix log level info Simon L. 2026-04-29 17:57:25 +02:00
  • cdc617d0b7 another fix for redis Simon L. 2026-04-29 17:31:35 +02:00
  • 71dbf98d48 fix detail Simon L. 2026-04-29 17:06:32 +02:00
  • 42e2d88b3e redis: fix log level (#8029) Simon L. 2026-04-29 17:02:03 +02:00
  • 4682355bfe redis: fix log level Simon L. 2026-04-29 16:57:46 +02:00
  • 13ac536b68 nextcloud: overwrite the log level every start (#8028) Simon L. 2026-04-29 15:02:35 +02:00
  • 9b9b3b638d nextcloud: overwrite the log level every start Simon L. 2026-04-29 15:01:17 +02:00
  • 7b6bda1f60 postgres: fix healthcheck (#8027) Simon L. 2026-04-29 14:55:57 +02:00
  • 764314524d caddy: revert being able to adjust the log level for it for now (#8021) Simon L. 2026-04-29 14:55:21 +02:00
  • 4910c3f012 postgres: fix healthcheck Simon L. 2026-04-29 14:54:36 +02:00
  • 55790da3eb caddy: revert being able to adjust the log level for it for now Simon L. 2026-04-29 14:32:49 +02:00
  • 035e270245 LLDAP: update image and tag and change it to ghcr.io Simon L. 2026-04-29 09:24:18 +02:00
  • 4e8292b922 acme.Caddyfile: mute caddy warnings Simon L. 2026-04-28 21:38:41 +02:00
  • ec5d23fd58 refactor: deduplicate resolveHostname into DataConst copilot-swe-agent[bot] 2026-04-28 19:22:10 +00:00
  • 3abbbfbc2b fix: improve IPv6 compatibility in containers and PHP AIO interface copilot-swe-agent[bot] 2026-04-28 19:10:13 +00:00
  • 6471aa815d feat: add no_new_privileges config for non-root containers copilot/add-no-new-privileges-config copilot-swe-agent[bot] 2026-04-28 18:30:12 +00:00
  • e746abd156 fix: improve pull-images explanation text with bandwidth/time info copilot/add-image-pull-button-aio copilot-swe-agent[bot] 2026-04-28 18:03:27 +00:00
  • 2121fec318 feat: add Pull new images button while containers are running copilot-swe-agent[bot] 2026-04-28 18:02:36 +00:00
  • 3c40859fe0 Remove 'already' from pull-images description for clarity copilot/add-autoupdate-images-button copilot-swe-agent[bot] 2026-04-28 18:01:56 +00:00
  • a05404ecf1 Add pull-images button for pulling updates while containers are running copilot-swe-agent[bot] 2026-04-28 18:01:16 +00:00
  • 877968d8e5 Fix: prevent nginx proxy read timeout from blocking AIO container startup copilot-swe-agent[bot] 2026-04-28 16:45:45 +00:00
  • e1b13cda63 refactor(nextcloud): extract inline OAuth2 client PHP into standalone script copilot/add-windmill-optional-container copilot-swe-agent[bot] 2026-04-28 16:37:23 +00:00
  • 50643afd6a allow to adjust the log level globally (#7902) Simon L. 2026-04-28 18:08:27 +02:00
  • 4f4ef8f1d6 add our own entrypoint to fts and collabora Simon L. 2026-04-28 15:32:07 +02:00
  • 8925baf12f nc entrypoint: improve Windmill OAuth failure diagnostic message copilot-swe-agent[bot] 2026-04-28 12:31:37 +00:00
  • b3f66b4c50 nc entrypoint: replace fake windmill_admin_token with real NC OAuth2 SSO setup copilot-swe-agent[bot] 2026-04-28 12:29:43 +00:00
  • e1e85c5ca9 nc entrypoint: include HTTP status in Windmill auth failure message copilot-swe-agent[bot] 2026-04-28 12:04:58 +00:00
  • 1ee3db8195 nc entrypoint: set windmill_admin_token and verify API auth against Windmill copilot-swe-agent[bot] 2026-04-28 12:03:44 +00:00
  • 56afde115d windmill: secret protection, socket-only postgres, volume rename/backup copilot-swe-agent[bot] 2026-04-28 11:30:53 +00:00
  • b205e46976 windmill: move dump to dedicated volume, remove unix_http_server, simplify upgrade path copilot-swe-agent[bot] 2026-04-28 11:23:20 +00:00
  • e077aea86d Fix windmill postgres upgrade reliability: persistent-volume staging dir, tighten sentinels, supervisorctl copilot-swe-agent[bot] 2026-04-28 11:15:38 +00:00
  • 4acc5b87e3 nextcloud: fix intermittent 502 Bad Gateway: PHP-FPM request_terminate_timeout + process_idle_timeout (#8013) Simon L. 2026-04-28 10:00:59 +02:00
  • 753ea8d3fd build(deps): bump nats from 2.12.7-scratch to 2.12.8-scratch in /Containers/talk (#8014) Simon L. 2026-04-28 09:38:19 +02:00
  • dbda18b67d build(deps): bump nats in /Containers/talk dependabot[bot] 2026-04-28 04:46:51 +00:00
  • 461f9e14c1 Apply suggestion from @szaimen Simon L. 2026-04-27 17:57:47 +02:00
  • 457a0d9fef Apply suggestion from @szaimen Simon L. 2026-04-27 17:56:07 +02:00
  • ffd9dd2da8 refactor: move request_terminate_timeout to Dockerfile; remove 502 docs section copilot-swe-agent[bot] 2026-04-27 15:54:49 +00:00
  • 2bc3c4e7ec refine: improve sed pattern specificity and remove hardcoded timeout from docs copilot-swe-agent[bot] 2026-04-27 15:32:37 +00:00
  • 46eb2dfc7d fix: prevent 502 Bad Gateway via PHP-FPM worker pool exhaustion and cold-start latency copilot-swe-agent[bot] 2026-04-27 15:31:14 +00:00
  • c60861d79c Replace pg_upgrade with pg_dump/restore for windmill postgres major-version upgrade copilot-swe-agent[bot] 2026-04-27 14:54:28 +00:00
  • 0dd6ab3f2c build(deps): bump actions/setup-node in /.github/workflows dependabot[bot] 2026-04-27 14:26:15 +00:00
  • 1823336f89 Pin exact postgres/windmill versions, add auto pg_upgrade, extend healthcheck copilot-swe-agent[bot] 2026-04-27 14:26:08 +00:00
  • 119f68b6ee aio-interface: also reset the borg backup cache when resetting the backup path (#7998) Simon L. 2026-04-27 14:36:05 +02:00
  • cd2d06fca6 aio-interface: only set the placeholder for timezone and not the value automatically because it is confusing (#7999) Simon L. 2026-04-27 14:32:24 +02:00
  • 6c3403d95d domain-check: replace curl with GuzzleHttp\Client in ConfigurationManager (#7994) Simon L. 2026-04-27 14:31:53 +02:00
  • 8b40127b0e fulltextsearch: update Elasticsearch to v9 (#8004) Simon L. 2026-04-27 14:30:10 +02:00
  • 8d77f3340a PHP dependency updates (#8011) Simon L. 2026-04-27 14:29:30 +02:00
  • dac2ccd195 php dependency updates szaimen 2026-04-27 12:28:00 +00:00
  • d63f0afc63 Remove WINDMILL_ENABLED from apache start.sh, simplify windmill cert config, add cache invalidation on image update copilot-swe-agent[bot] 2026-04-27 09:45:42 +00:00
  • 9f90afbc5e Add Windmill as optional container, served on /windmill subpath copilot-swe-agent[bot] 2026-04-27 09:41:09 +00:00
  • 51124784c2 Serve windmill on /windmill subpath instead of port 3100; add to disable-containers.js copilot-swe-agent[bot] 2026-04-27 09:30:29 +00:00
  • f08103ca15 Fix rootless windmill container: use uid=1000, fix tmpfs modes, CA certs, WINDMILL_DIR copilot-swe-agent[bot] 2026-04-27 09:16:25 +00:00
  • 670e0df676 fix: use explicit numeric USER 101 in domaincheck Dockerfile copilot/set-containers-read-only-rootfs copilot-swe-agent[bot] 2026-04-27 08:43:09 +00:00
  • 5d2bb1bcc4 fix: correct domaincheck user UID from 100 to 101 (lighttpd claims 100) copilot-swe-agent[bot] 2026-04-27 08:38:08 +00:00
  • cf96673911 feat: add read_only rootfs and rootless user to remaining containers copilot-swe-agent[bot] 2026-04-27 08:30:44 +00:00
  • c7d980e7bc build(deps): bump haproxy from 3.3.6-alpine to 3.3.7-alpine in /Containers/docker-socket-proxy (#8007) Simon L. 2026-04-27 10:24:58 +02:00
  • 024e404c8d build(deps): bump haproxy in /Containers/docker-socket-proxy dependabot[bot] 2026-04-27 04:20:12 +00:00
  • 312acddf27 Changes before error encountered copilot-swe-agent[bot] 2026-04-27 02:12:13 +00:00
  • 5cbdb00ff4 WIP: windmill derived image builds successfully, adding rootless + read-only copilot-swe-agent[bot] 2026-04-27 02:10:58 +00:00
  • 4b27d6954f WIP: implementing windmill container changes copilot-swe-agent[bot] 2026-04-27 01:58:39 +00:00
  • eea59927f8 feat: add skip_cosign_check URL parameter to temporarily bypass cosign verification copilot/add-image-signature-validation copilot-swe-agent[bot] 2026-04-27 01:29:36 +00:00
  • c962fcc10c fix: extend signature verification and docs to cover Docker Hub nextcloud/all-in-one image copilot-swe-agent[bot] 2026-04-27 01:20:12 +00:00
  • 2a2e69f047 docs: document how to verify image signature in readme copilot-swe-agent[bot] 2026-04-27 01:17:50 +00:00
  • e5aaacf07e feat: verify mastercontainer image signature before starting watchtower copilot-swe-agent[bot] 2026-04-27 01:14:47 +00:00
  • f41fe58455 feat: verify cosign image signatures before pulling ghcr.io/nextcloud-releases images copilot-swe-agent[bot] 2026-04-27 01:02:12 +00:00
  • 4c47d20d83 fix: add persist-credentials: false to all checkout steps (artipacked) copilot/remove-zizmor-yaml-fix-workflows copilot-swe-agent[bot] 2026-04-27 00:54:33 +00:00
  • aae2112623 fix: remove zizmor.yml and fix all workflow security issues copilot-swe-agent[bot] 2026-04-27 00:47:36 +00:00
  • d30132f02a plan: fix all zizmor issues and remove zizmor.yml copilot-swe-agent[bot] 2026-04-27 00:46:18 +00:00
  • aa831bc8a5 fulltextsearch: update elasticsearch from v8 to v9, switch apt-get to microdnf copilot-swe-agent[bot] 2026-04-27 00:29:17 +00:00
  • 6b342b0b8d feat: create wildcard CNAME rrset after new deSEC account domain registration copilot/improve-user-accessibility copilot-swe-agent[bot] 2026-04-27 00:03:59 +00:00
  • 8727df147d Add disclaimer and clarify migration steps for snap installation Simon L. 2026-04-26 19:59:36 +02:00
  • d58a34b605 Revert "feat: show deSEC password field only after email-already-registered failure, via POST /containers and Twig (no sessions, no query params)" Simon L. 2026-04-26 18:37:19 +02:00
  • 44b257a2b5 feat: show deSEC password field only after email-already-registered failure, via POST /containers and Twig (no sessions, no query params) copilot-swe-agent[bot] 2026-04-26 16:36:06 +00:00
  • 2b78dcc9cc Revert "feat: hide deSEC password field until email-already-registered 422 error" Simon L. 2026-04-26 18:25:43 +02:00
  • 11d8050085 Revert "refactor: move deSEC password-reveal logic from JS to Twig (PRG pattern)" Simon L. 2026-04-26 18:25:39 +02:00
  • a747ab1c5e migration.md: add snap-to-AIO migration procedure using temporary Docker container (#8003) Simon L. 2026-04-26 18:11:17 +02:00
  • f28d94c30c migration.md: add snap-to-AIO migration procedure using temporary Docker container copilot-swe-agent[bot] 2026-04-26 15:50:48 +00:00
  • 1c6ca098d5 refactor: move deSEC password-reveal logic from JS to Twig (PRG pattern) copilot-swe-agent[bot] 2026-04-25 16:43:49 +00:00
  • 5343353bb5 feat: clear manually-entered deSEC password after successful login copilot-swe-agent[bot] 2026-04-25 16:35:22 +00:00
  • f0fb065dc2 feat: hide deSEC password field until email-already-registered 422 error copilot-swe-agent[bot] 2026-04-25 16:32:31 +00:00
  • b71afd933b refactor: extract deSEC registration form into includes/desec-register.twig copilot-swe-agent[bot] 2026-04-25 16:26:23 +00:00
  • 24f8a126cb feat: allow using existing deSEC account by supplying a password copilot-swe-agent[bot] 2026-04-25 16:21:46 +00:00
  • 6dc1cd6ebd adjust community-container readme Simon L. 2026-04-25 17:09:23 +02:00
  • 1f813aacc3 timezone: only set the placeholder and not the value automatically because it is confusing Simon L. 2026-04-25 16:41:15 +02:00
  • 670e38969c docs: add Pangolin to reverse proxy guide (#7996) Simon L. 2026-04-25 16:25:04 +02:00
  • ae5a21eadf docs: add Pangolin to reverse proxy guide copilot-swe-agent[bot] 2026-04-25 12:11:56 +00:00
  • d772c14f55 domain-check: replace curl with GuzzleHttp\Client in ConfigurationManager copilot-swe-agent[bot] 2026-04-24 19:20:45 +00:00
  • 172c72f735 aio-interface: also reset the borg backup cache when resetting the backup path copilot-swe-agent[bot] 2026-04-25 12:50:27 +00:00
  • b0b997ac42 refactor: move remaining DesecController helpers into DesecManager copilot-swe-agent[bot] 2026-04-25 12:44:26 +00:00
  • fb6112f174 refactor: extract DesecManager from DesecController copilot-swe-agent[bot] 2026-04-25 12:37:53 +00:00
  • ce857a5588 docs: recommend deSEC by default over Tailscale across all files copilot-swe-agent[bot] 2026-04-25 12:25:38 +00:00
  • 6b362f2f5d docs: mention deSEC feature in readme, reverse-proxy, local-instance and QA docs copilot-swe-agent[bot] 2026-04-25 12:24:03 +00:00
  • 03e3b90ced refactor(DesecController): extract helper methods and add docblocks copilot-swe-agent[bot] 2026-04-25 12:13:22 +00:00