coolify

nprasad2077/coolify

1 Fork 0

mirror of https://github.com/coollabsio/coolify.git synced 2026-11-04 10:42:23 +00:00

Commit Graph

Author	SHA1	Message	Date
Andras Bacsai	1a2a5362ad	fix(security): secure remote command secrets and clone volume data	2026-10-27 09:47:18 +01:00
Andras Bacsai	e7465000b3	fix(api): key unauthenticated rate limits by Cloudflare client IP Use auth_rate_limit_ip() rather than $request->ip() for the api, 5 and feedback rate limiters. On cloud, each client behind Cloudflare now gets its own bucket instead of sharing the proxy's bucket. Self-hosted instances ignore the CF-Connecting-IP header. Add feature tests for per-client sentinel push buckets on cloud and for ignoring the header on self-hosted. Add scripts/restore-backup-vm.sh, which restores an instance backup into an offline KVM VM to test database migrations. Bump the v4 version in other/nightly/versions.json to sha-1e9add3.	2026-09-29 13:06:44 +02:00

Author

SHA1

Message

Date

Andras Bacsai

1a2a5362ad

fix(security): secure remote command secrets and clone volume data

2026-10-27 09:47:18 +01:00

Andras Bacsai

e7465000b3

fix(api): key unauthenticated rate limits by Cloudflare client IP

Use auth_rate_limit_ip() rather than $request->ip() for the api, 5 and
feedback rate limiters. On cloud, each client behind Cloudflare now gets
its own bucket instead of sharing the proxy's bucket. Self-hosted
instances ignore the CF-Connecting-IP header.

Add feature tests for per-client sentinel push buckets on cloud and for
ignoring the header on self-hosted.

Add scripts/restore-backup-vm.sh, which restores an instance backup into
an offline KVM VM to test database migrations. Bump the v4 version in
other/nightly/versions.json to sha-1e9add3.

2026-09-29 13:06:44 +02:00