Mauricio Siu eb1f11b908 fix(security): service access is authoritative for service-scoped wss ops ...

When a container is opened from a service page (serviceId present), gate on
service access alone — matching application.readLogs — instead of requiring the
docker permission first. This unblocks a member who has the service but not the
canAccessToDocker permission (or the server it runs on) from reading its logs /
opening its terminal. Generic Docker-overview ops (no serviceId) still require
docker permission + server access.

2026-07-20 01:15:18 -06:00

..

__test__

fix(security): service access is authoritative for service-scoped wss ops

2026-07-20 01:15:18 -06:00

components

fix(security): check service access before server in wss authz, and pass serviceId from log views

2026-07-20 00:48:20 -06:00

docker

…

drizzle

feat: optionally include encryption key in web server backups

2026-07-10 03:05:28 -06:00

hooks

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

lib

fix: validate API key name length to prevent opaque 500

2026-07-12 18:15:05 +05:30

pages

[autofix.ci] apply automated fixes

2026-07-20 06:48:40 +00:00

public

Remove unused localization files for various languages in the Dokploy application, including common and settings JSON files for Azerbaijani, German, English, Spanish, Persian, French, Indonesian, Italian, Japanese, Korean, Kazakh, Malayalam, Dutch, Norwegian, and Polish. This cleanup helps streamline the localization process by eliminating empty files.

2026-07-19 20:11:20 -06:00

scripts

🚀 Release v0.29.5 (#4475)

2026-05-22 17:21:12 -06:00

server

fix(security): service access is authoritative for service-scoped wss ops

2026-07-20 01:15:18 -06:00

styles

fix(ui): prevent scrollbar layout shift

2026-07-06 10:39:16 +03:00

templates

fix: replace traefik.me with sslip.io for auto-generated domains

2026-05-08 19:04:24 -06:00

types

[autofix.ci] apply automated fixes

2025-07-14 15:30:24 +09:00

utils

feat(validation): enhance destination path validation in file upload schema

2026-05-09 00:57:12 -06:00

.dockerignore

…

.env.example

Fix newline at end of .env.example file

2025-11-25 12:02:52 -05:00

.env.production.example

chore(env): remove hardcoded DATABASE_URL from production example file

2026-01-21 16:56:30 +01:00

.gitignore

…

components.json

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

esbuild.config.ts

fix(esbuild): update path for migrate-auth-secret script

2026-05-11 11:34:21 -06:00

logo.png

…

migration.ts

refactor(db): centralize database URL configuration by importing dbUrl from constants

2026-01-21 17:33:06 +01:00

next.config.mjs

chore(dependencies): update zod version across multiple packages to 3.25.76 and remove unused i18next dependencies

2026-02-16 02:09:33 -06:00

package.json

refactor(auth): simplify SSO configuration by removing unnecessary validation settings

2026-07-13 03:56:16 -06:00

postcss.config.cjs

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

reset-2fa.ts

refactor(auth): replace findAdmin with findOwner in user management logic and update role-based permissions in the dashboard

2025-12-07 02:51:03 -06:00

reset-password.ts

refactor(auth): replace findAdmin with findOwner in user management logic and update role-based permissions in the dashboard

2025-12-07 02:51:03 -06:00

setup.ts

chore: Reorder and clean up imports, update openapi schema, and improve

2026-02-16 14:01:00 +05:30

tsconfig.json

chore(dependencies): update zod version across multiple packages to 3.25.76 and remove unused i18next dependencies

2026-02-16 02:09:33 -06:00

tsconfig.server.json

refactor: remove save on build on next app and integrate turbopack

2024-10-24 23:13:24 -06:00

wait-for-postgres.ts

feat(dokploy): add wait-for-postgres script and update Dockerfile and package.json

2026-02-08 15:43:58 -06:00