2fbb898c89
feat(ssl): regenerate SSL certs job
2025-02-03 22:37:12 +01:00
fba95c3729
fix(migration): store subjectAlternativeNames as a json array in the db
2025-02-03 22:35:00 +01:00
f871c1067b
Merge branch 'next' into feat-db-ssl
2025-02-03 22:20:51 +01:00
4c9aa24cd3
Merge branch 'main' into next
2025-02-03 22:17:11 +01:00
72a2f79d88
feat(ssl): improve ssl generation
...
- add default state and country
- rename parameters for more clarity
- set subjectAltName
- delete old certificate before creating new one
- Set CN and subjectAltNames in DB for automatic renewal
2025-02-03 22:11:29 +01:00
9d9fbd6859
feat(databases): add CA SSL crt location to Postgres URLs
2025-02-03 22:06:53 +01:00
498bf04559
feat(migration): add CN and alternative names to DB
2025-02-03 22:05:32 +01:00
5f357e3d92
fix(database): fix volume and file mounts and naming
...
- fix: Volume and file mounts are unmounted if there are more than 1
- rename the crt and key to server key and crt to follow best practices
- move crt and key to a more standardized location
2025-02-03 22:03:45 +01:00
f4575e531f
fix(backup): escape special characters in database backup commands
2025-02-03 21:49:13 +01:00
3cf758e2d0
fix(databases): fix database name users new uuid instead of DB one
2025-02-03 21:43:16 +01:00
a1e650e699
chore: rename ca crt folder to ssl
2025-02-03 21:42:28 +01:00
30343b0049
feat(ui): improve server advanced view
...
- use new path for CA certificate
- fix grammar
- added link to the docs
- added "valid until" to show expiration date
2025-02-03 21:40:41 +01:00
c45c64a1a1
fix(ui): always redirect to dashboard after team switch
2025-02-03 21:38:40 +01:00
035db67180
Merge pull request #5036 from sistracia/next
...
fix(api): domain check when updating domain
2025-02-03 21:28:42 +01:00
1e9a4aa5b6
fix(core): remove --remove-orphans flag from proxy startup command to prevent other proxy deletions (db)
2025-02-03 21:24:27 +01:00
773caf7fd5
feat(core): add name to default proxy configuration
2025-02-03 21:24:01 +01:00
2a03544593
fix(core): stopping database is not disabling db proxy
2025-02-03 21:23:43 +01:00
0ff7c468c8
fix(ui): skip SERVICE_FQDN and SERVICE_URL variables during update
2025-02-03 15:44:15 +01:00
cd2ee25564
fix(ui): update docker compose file helper text to clarify repository modification
2025-02-03 14:37:13 +01:00
4305ba5f06
fix(migration): ssl certificates table
...
- remove unique constraint
- add CA certificate boolean
- make sure that each certificate has a server_id so that we know which CA to use when renewing certificates
2025-02-02 14:56:26 +01:00
dea3b36193
feat(meta): add comprehensive SEO and social media meta tags
2025-02-02 14:20:41 +01:00
8be536d3ec
fix(core): increase HTTP/2 max concurrent streams to 250 (default)
2025-02-02 14:03:18 +01:00
43e8d17197
fix(api): domain check when updating domain
2025-02-02 14:52:05 +07:00
4eba1d2130
feat(ui): use new copy button component everywhere
2025-01-31 18:31:42 +01:00
6d0291a66f
feat(ui): new copy button component
2025-01-31 18:31:02 +01:00
ab1833b159
feat(ui): Add CA cert UI
...
- brief instructions and recommendations
- copy button to copy the CA file mount
- ability to display the CA certificate
- ability to save your own CA Cert or generate a new one
2025-01-31 18:29:06 +01:00
7406ee67c2
chore(ssl): rename CA cert to coolify-ca.crt because of conflicts
2025-01-31 18:27:20 +01:00
83f0f9fca4
fix(core): improve public repository URL parsing for branch and base directory
2025-01-31 18:17:00 +01:00
58c6e9c02d
change dev logo
2025-01-31 17:12:50 +01:00
dde6128fa8
replace logo
2025-01-31 17:08:40 +01:00
85c777d2a4
feat(ssl): use new improved helper for SSL generation
...
- use CA cert and key for SSL cert generation
- remove unused parameters
- add a few more echo with log output
2025-01-31 13:56:20 +01:00
02475c5232
feat(ssl): improve SSL helper
...
- improve function parameters
- set default validity to 1 year as resources need to be manually restarted to use the new certificates
- use the CA cert to sign certificates
2025-01-31 13:37:34 +01:00
fab7300a5f
feat(installer): create CA folder during installation
2025-01-31 12:36:26 +01:00
34216af497
fix(db): SSL certificates table and model
...
- server_id is a foreign id
- server_id must be unique as each server can only have 1 CA cert
- resource_id must be unique as each resource can only have 1 SSL cert
2025-01-31 12:35:34 +01:00
0915303769
feat(ssl): Add Coolify CA Certificate when adding a new server
2025-01-31 12:27:29 +01:00
503e1ffb67
feat(seeder): Call CA SSL seeder in prod and dev
2025-01-31 12:23:59 +01:00
90a93ce7e0
feat(ssl): add a Coolify CA Certificate to all servers
2025-01-31 12:23:00 +01:00
e1245f49f1
fix(ui): select component should not always uses title case
2025-01-31 11:57:30 +01:00
22c26cdf78
chore(migration): ssl cert and key should not be nullable
2025-01-30 19:52:49 +01:00
34188450eb
feat(ssl): improve SSL helper
...
- improve security by making certificates valid for only 90 days instead of 10 years
- add SubjectAltName
- remove unnecessary parameters
- use carbon immutable to make sure expiration date stays the same
2025-01-30 19:52:21 +01:00
d280f11b6b
feat(ssl): migrate to ECCcertificates using secp521r1
...
- Replace RSA 4096 with ECDSA secp521r1 for stronger security (256-bit vs 112-bit)
- Faster certificate generation (3-4x speed improvement)
- 75% smaller key sizes (0.8KB vs 3.2KB) improves storage and transmission
2025-01-30 19:21:18 +01:00
b53d3d07d9
fix(ssl): make default ssl mode require not verify-full as it does not need a ca cert
2025-01-30 19:09:37 +01:00
546001890c
chore(ssl): improve code in ssl helper
2025-01-30 14:37:12 +01:00
3632f29af8
feat(ssl): ssl generation helper
2025-01-30 14:17:12 +01:00
2ac9147532
chore(migration): remove unused columns
2025-01-30 14:16:52 +01:00
429453af36
fix(ui): make sure file mounts do not showing the encrypted values
2025-01-30 14:16:27 +01:00
edddbc8536
feat(migration): encrypt local file volumes content and paths
2025-01-30 13:54:00 +01:00
9f9349925a
fix(ssl): permission of ssl crt and key inside the container
2025-01-30 12:58:48 +01:00
be49502119
Merge branch 'coollabsio:main' into feat-db-ssl
2025-01-29 13:47:34 +01:00
b124904245
feat(db): setup ssl during Postgres start
...
- create ssl directory
- create a new certificate if one does not already exist
- add the certificates to the file store so that they are created as file mounts
- add SSL startup commands
2025-01-29 13:30:45 +01:00
peaklabs-dev