tiennm99/coolify
1
0
Fork 0
mirror of https://github.com/tiennm99/coolify.git synced 2026-08-24 16:26:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,370 Commits 3 Branches 0 Tags
0312cc8ffbe41a94de925a3fcf0fad5c4cb61567
Commit Graph
16370 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andras BacsaiandGitHub 12f8f80eb1 fix(api): add team authorization to domains_by_server endpoint (#8616) 2026-02-25 11:54:29 +01:00
Andras Bacsai 8e2f0836da chore: prepare for PR 2026-02-25 11:52:18 +01:00
Andras BacsaiandGitHub 57848c25e9 fix(docker): centralize command escaping in executeInDocker helper (#8615) 2026-02-25 11:51:23 +01:00
Andras Bacsai 992b922df3 chore: prepare for PR 2026-02-25 11:50:57 +01:00
Andras Bacsai 0580af0d34 feat(healthchecks): add command health checks with input validation 
Add support for command-based health checks in addition to HTTP-based checks:
- New health_check_type field supporting 'http' and 'cmd' values
- New health_check_command field with strict regex validation
- Updated allowedFields in create_application and update_by_uuid endpoints
- Validation rules include max 1000 characters and safe character whitelist
- Added feature tests for health check API endpoints
- Added unit tests for GithubAppPolicy and SharedEnvironmentVariablePolicy
 2026-02-25 11:38:09 +01:00
Andras Bacsai 609cb4190e fix(health-checks): sanitize and validate CMD healthcheck commands 
- Add regex validation to restrict allowed characters (alphanumeric, spaces, and specific safe symbols)
- Enforce maximum 1000 character limit on healthcheck commands
- Strip newlines and carriage returns to prevent command injection
- Change input field from textarea to text input in UI
- Add warning callout about prohibited shell operators
- Add comprehensive validation tests for both valid and malicious command patterns
 2026-02-25 11:28:33 +01:00
Andras BacsaiandGitHub 24abd51238 fix(auth): prevent cross-tenant IDOR in resource cloning (#8613) 2026-02-25 11:21:52 +01:00
Andras Bacsai 1759a1631c chore: prepare for PR 2026-02-25 11:18:46 +01:00
Andras Bacsai 65d4005493 Merge remote-tracking branch 'origin/next' into 7765-healthcheck-investigation 
# Conflicts:
#	app/Livewire/Project/Shared/HealthChecks.php
 2026-02-25 11:02:38 +01:00
Andras BacsaiandGitHub 03a8621516 fix(health-checks): prevent command injection in health check commands (#8611) 2026-02-25 10:59:00 +01:00
Andras Bacsai 30c0b37689 chore: prepare for PR 2026-02-25 10:58:29 +01:00
Aditya TripathiandGitHub 036f565785 Merge branch 'next' into feat/healthcheck-cmd 2026-02-24 22:22:02 +05:30
Andras BacsaiandGitHub cb759b2846 fix(api): correct permission requirements for POST endpoints (#8600) 2026-02-24 14:57:51 +01:00
Andras Bacsai d8419fad93 chore: prepare for PR 2026-02-24 14:57:32 +01:00
Tjeerd SmidandGitHub 175e5b3c6d Merge branch 'next' into fix/rollback-uses-correct-commit 2026-02-24 13:18:46 +01:00
Andras BacsaiandGitHub 279322d50f fix(input): prevent eye icon flash on password fields before Alpine.js loads (#8599) 2026-02-24 12:57:22 +01:00
Andras BacsaiandGitHub f39a1da7be fix(auth): prevent CSRF redirect loop during 2FA challenge (#8596) 2026-02-24 12:57:10 +01:00
Andras Bacsai 448e922e6c chore: prepare for PR 2026-02-24 12:56:54 +01:00
Andras BacsaiandGitHub 78e584a136 feat(service): upgrade beszel and beszel-agent to v0.18 (#8513) 2026-02-24 12:56:36 +01:00
Andras BacsaiandGitHub 912e5f6db2 feat(service): disable pterodactyl panel and pterodactyl wings (#8512) 2026-02-24 12:55:52 +01:00
Andras BacsaiandGitHub f8de374f77 feat(service): disable plane (#8580) 2026-02-24 12:55:29 +01:00
Andras Bacsai 2986d7604e chore: prepare for PR 2026-02-24 10:17:16 +01:00
FiruandGitHub 7ad6bbafcd chore(templates): bump databasus image version 2026-02-24 11:25:17 +08:00
ShadowArcanist b36d67288b feat(service): disable plane 
The latest version of plane v1.2.2 have security fixed but our template is using v1.0.0 which is 5 months behind the current latest. New version v1.2.2 doesn't work with our existing template so disabling it for now to prevent users from deploying a vulnerable version of plane
 2026-02-24 02:34:35 +05:30
Maurits de Ruiter 8cc10ab10a fix: enable preview deployment page for deploy key applications 2026-02-23 21:08:43 +01:00
ShadowArcanist 2b04153dec chore(repo): improve enhancement bounty issue template 2026-02-24 00:50:46 +05:30
ShadowArcanist 84224d6366 chore(repo): improve bug report issue template 2026-02-24 00:49:45 +05:30
ShadowArcanist 4776a57231 chore(repo): improve development guide 2026-02-24 00:46:28 +05:30
ShadowArcanist 555b46a7d8 chore(repo): improve contributor guidelines 2026-02-24 00:45:33 +05:30
Tjeerd Smid 1935403053 fix: application rollback uses correct commit sha 
- setGitImportSettings() now accepts optional $commit parameter
 - Uses passed commit over application's git_commit_sha (typically HEAD)
 - Fixes rollback deploying latest instead of selected commit
 - Also fixes shallow clone "bad object" error on rollback

Fixes #8445
 2026-02-23 20:13:07 +01:00
peaklabs-dev 7cf13db84f chore(repo): improve contributor PR template 2026-02-23 19:44:34 +01:00
Andras BacsaiandGitHub 021605dbf0 fix(deploy): split BuildKit and secrets detection (#8565) 2026-02-23 15:20:25 +01:00
Andras Bacsai ec14b55f0a chore: prepare for PR 2026-02-23 14:28:28 +01:00
Andras BacsaiandGitHub 2310ad5f7f chore(ui): widen project heading nav spacing (#8564) 2026-02-23 14:17:38 +01:00
Andras Bacsai 6cacd2f0ff chore: prepare for PR 2026-02-23 14:17:15 +01:00
Andras BacsaiandGitHub 46923f7e77 fix(applications): treat zero private_key_id as deploy key (#8563) 2026-02-23 14:16:11 +01:00
Andras Bacsai 620da191b1 chore: prepare for PR 2026-02-23 14:15:13 +01:00
Andras Bacsai d71d91d63e fix(version): update coolify version to 4.0.0-beta.464 and nightly version to 4.0.0-beta.465 2026-02-23 13:47:26 +01:00
Andras BacsaiandGitHub 1f3fca5f71 fix(database): chown redis/keydb configs when custom conf set (#8561) 2026-02-23 13:26:58 +01:00
Andras Bacsai 76a6960f44 chore: prepare for PR 2026-02-23 13:26:01 +01:00
Andras BacsaiandGitHub f68d60a373 chore(horizon): make max time configurable (#8560) 2026-02-23 13:25:13 +01:00
Andras Bacsai b7b0dfeddd chore: prepare for PR 2026-02-23 13:24:49 +01:00
Andras BacsaiandGitHub 133241bac1 fix(service): resolve team lookup via service relationship (#8559) 2026-02-23 13:24:01 +01:00
Andras Bacsai 61a54afe2b fix(service): resolve team lookup via service relationship 
Update service application/database team accessors to traverse the service relation chain and add coverage to prevent null team regressions.
 2026-02-23 13:23:12 +01:00
Andras BacsaiandGitHub 58acdccfc9 fix(team): include webhook notifications in enabled check (#8557) 2026-02-23 13:03:05 +01:00
Andras Bacsai bf51ed905f chore: prepare for PR 2026-02-23 13:02:06 +01:00
Andras BacsaiandGitHub c30d94f089 chore(scheduler): fix scheduled job duration metric (#8551) 2026-02-23 12:20:15 +01:00
Andras Bacsai cb0f5cc812 chore: prepare for PR 2026-02-23 12:19:57 +01:00
Andras Bacsai ffb408f214 Create docker-compose-maxio.dev.yml 2026-02-23 12:18:50 +01:00
Andras BacsaiandGitHub 0c8b9b75f4 fix(traefik): respect force https in service labels (#8550) 2026-02-23 12:16:12 +01:00