Commit Graph

3754 Commits

Author SHA1 Message Date
peaklabs-dev
852be5fd93 feat(ssl): check for SSL renewal twice daily 2025-02-05 22:11:10 +01:00
peaklabs-dev
806d9af569 feat(ssl): improve SSL generation and security a lot
- rename some variables for better clarity
- format subjectAltNames correctly
- setup extensions more securely and improve them a lot
- use finally block to remove tempConfig
2025-02-05 22:09:37 +01:00
peaklabs-dev
951a454cbc fix(ssl): regenerating certs for a specific DB
- fix: add mount path to make file mounts work correctly
- fix: get CA cert of the server not some random cert
2025-02-05 21:22:54 +01:00
peaklabs-dev
ba24630c28 fix(ssl): make sure when regenerating the CA cert it is not overwritten with a server cert 2025-02-05 21:13:30 +01:00
peaklabs-dev
7666cec462 fix(ssl): wrong ssl cert is loaded to the server and UI error when regenerating SSL 2025-02-05 21:10:37 +01:00
peaklabs-dev
1003858632 feat(ssl): Add openssl.conf to configure SSL extension properly 2025-02-05 18:06:38 +01:00
peaklabs-dev
a3c4f86e80 fix(ssl): do not remove SSL directory 2025-02-05 18:03:55 +01:00
peaklabs-dev
e81ed1aad8 feat(ssl): Add full MariaDB SSL support 2025-02-04 21:08:20 +01:00
peaklabs-dev
8f2b45c8b5 fix(ssl): use 1 instead of on for mysql 2025-02-04 20:52:23 +01:00
peaklabs-dev
80fc7c7b97 fix(ssl): use mountPath parameter not a hardcoded path 2025-02-04 18:31:09 +01:00
peaklabs-dev
3f857c6dac feat(ssl): Add full MySQL SSL Support 2025-02-04 18:29:35 +01:00
peaklabs-dev
d6a39f2ed3 fix(ssl): always create ca crt on disk even if it is already there 2025-02-04 16:57:40 +01:00
peaklabs-dev
da148f93a6 feat(ssl): regenerate CA cert and all other certs logic 2025-02-04 16:55:36 +01:00
peaklabs-dev
3c62130e86 fix(ssl): improve SSL cert file mounts
- If SSL is disabled, delete the SSL crt and file mounts in the DB
- If SSL is disabled, delete the SSL folder
- If SSL is enabled, make sure the file mounts are added inside the helper
- remove old file mounts first to make sure the ssl crt content is always up to date and no duplicates are added
2025-02-04 16:34:24 +01:00
peaklabs-dev
6de76ca3f8 fix(deletion): fix DB deletion
- delete file mounts, volume mounts, envs, ssl crts, backups and detach tags correctly when deleting
2025-02-04 15:32:56 +01:00
Andras Bacsai
1c12cb98d9 feat(deployment): ensure private key is stored in filesystem before deployment 2025-02-04 15:23:28 +01:00
Andras Bacsai
d632eb2be9 refactor: simplify service start and restart workflows 2025-02-04 14:34:34 +01:00
Andras Bacsai
65a7610e48 Merge pull request #5029 from IARayan/IARayan-bitbucket-preview-deployment-fix-pullrequest-update
fix: Handle pullrequest:updated for reliable preview deployments
2025-02-04 13:55:16 +01:00
Andras Bacsai
186a3fc75b Merge pull request #5038 from Vann-Dev/main
feat(api): add applications logs api
2025-02-04 13:33:30 +01:00
Andras Bacsai
8033a89dee fix(ui): simplify service templates loading logic 2025-02-04 13:30:27 +01:00
Andras Bacsai
fbb6ce3fce fix(core): enhance Slack deployment success notification formatting 2025-02-04 12:44:31 +01:00
Andras Bacsai
df129b83b3 fix(core): update Slack notification formatting to use bold correctly 2025-02-04 12:40:04 +01:00
Andras Bacsai
3da921e2ac fix(core): improve deployment failure Slack notification formatting 2025-02-04 12:36:39 +01:00
Vann
2e652490c1 chore: add openapi response 2025-02-04 02:56:15 +00:00
peaklabs-dev
fd5b7492f8 chore(ui): improve valid until handling 2025-02-03 23:21:09 +01:00
peaklabs-dev
53510928d2 feat(ssl): regenerate certificate and valid until UI 2025-02-03 22:54:31 +01:00
peaklabs-dev
cd335e9e00 fix(ssl): make sure the subjectAlternativeNames are unique and stored correctly 2025-02-03 22:42:15 +01:00
peaklabs-dev
2fbb898c89 feat(ssl): regenerate SSL certs job 2025-02-03 22:37:12 +01:00
peaklabs-dev
fba95c3729 fix(migration): store subjectAlternativeNames as a json array in the db 2025-02-03 22:35:00 +01:00
🏔️ Peak
f871c1067b Merge branch 'next' into feat-db-ssl 2025-02-03 22:20:51 +01:00
peaklabs-dev
72a2f79d88 feat(ssl): improve ssl generation
- add default state and country
- rename parameters for more clarity
- set subjectAltName
- delete old certificate before creating new one
- Set CN and subjectAltNames in DB for automatic renewal
2025-02-03 22:11:29 +01:00
peaklabs-dev
9d9fbd6859 feat(databases): add CA SSL crt location to Postgres URLs 2025-02-03 22:06:53 +01:00
peaklabs-dev
498bf04559 feat(migration): add CN and alternative names to DB 2025-02-03 22:05:32 +01:00
peaklabs-dev
5f357e3d92 fix(database): fix volume and file mounts and naming
- fix: Volume and file mounts are unmounted if there are more than 1
- rename the crt and key to server key and crt to follow best practices
- move crt and key to a more standardized location
2025-02-03 22:03:45 +01:00
Andras Bacsai
f4575e531f fix(backup): escape special characters in database backup commands 2025-02-03 21:49:13 +01:00
peaklabs-dev
a1e650e699 chore: rename ca crt folder to ssl 2025-02-03 21:42:28 +01:00
Andras Bacsai
c45c64a1a1 fix(ui): always redirect to dashboard after team switch 2025-02-03 21:38:40 +01:00
Andras Bacsai
035db67180 Merge pull request #5036 from sistracia/next
fix(api): domain check when updating domain
2025-02-03 21:28:42 +01:00
Andras Bacsai
1e9a4aa5b6 fix(core): remove --remove-orphans flag from proxy startup command to prevent other proxy deletions (db) 2025-02-03 21:24:27 +01:00
Andras Bacsai
2a03544593 fix(core): stopping database is not disabling db proxy 2025-02-03 21:23:43 +01:00
Andras Bacsai
0ff7c468c8 fix(ui): skip SERVICE_FQDN and SERVICE_URL variables during update 2025-02-03 15:44:15 +01:00
Vann
11a5ec7c38 feat: add lines query parameter 2025-02-02 13:43:31 +00:00
Vann
7b60d76b77 feat: remove ansi color from log 2025-02-02 10:01:01 +00:00
sistracia
43e8d17197 fix(api): domain check when updating domain 2025-02-02 14:52:05 +07:00
Vann
e7988fc295 feat: container logs 2025-02-01 17:21:38 +00:00
Van-Dev
b1d6167e89 feat: add application api route 2025-02-01 22:09:59 +07:00
Islam Adel
2c80595e45 Merge branch 'next' into IARayan-bitbucket-preview-deployment-fix-pullrequest-update 2025-02-01 16:59:08 +02:00
Islam Adel
672a5d0bc5 fix: Handle pullrequest:updated for reliable preview deployments
The repo:push payload lacks the destination branch name, using push.changes.0.new.name instead. While sufficient for updates, this causes failures in preview deployments when a PR receives new commits—Coolify looks for git_branch in the applications table but finds the source branch instead.

By also processing pullrequest:updated, we ensure preview deployments remain in sync. However, this event triggers on various actions (e.g., PR title changes, reviewer updates), causing extra redeploys. Since Coolify doesn’t store commit hashes for preview deployments, handling these extra redeploys is our best workaround for Bitbucket.
2025-02-01 12:24:23 +02:00
peaklabs-dev
7406ee67c2 chore(ssl): rename CA cert to coolify-ca.crt because of conflicts 2025-01-31 18:27:20 +01:00
Andras Bacsai
83f0f9fca4 fix(core): improve public repository URL parsing for branch and base directory 2025-01-31 18:17:00 +01:00