Repository navigation
New version - #1253
Merged
Merged
New version#1253
Conversation
Single-node Wazuh 4.14.8 (manager, indexer, dashboard) adapted from the official wazuh-docker single-node setup: - internal TLS PKI generated on first deploy by wazuh-certs-generator into a named volume (no host files) - indexer internal users hashed from generated passwords before the security index is initialized; no default credentials - dashboard served over HTTP behind Traefik on the template domain - agent ports 1514/1515 published on the host (raw TCP, can't go through Traefik) Closes #440 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
feat: add Wazuh template
* feat: add Cachkey template * fix(cachkey): name the public service after the template, env as array * fix(cachkey): unique internal API service name, APP_URL note
* feat: template SEO titles and descriptions * feat: add configText for 55 templates * feat: add newConfig flag to 55 templates
* chore(umami): update to v3.4.0 * fix(umami): generate the database password instead of hardcoding "umami" --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add OpenWA template * fix(openwa): load dashboard over plain HTTP via CSP_UPGRADE_INSECURE_REQUESTS
…sole domain (#1215) * feat: update appwrite template to 2.4.0 with MariaDB, node-24/26, console domain * feat: enable DocumentsDB and VectorsDB by default in appwrite 2.4.0 template * feat: update appwrite template to 2.4.0 with MariaDB, node-24/26, console domain * fix(appwrite): repair 2.4.0 template structure and console setup - Restore [config] table so config.env/config.isolated parse correctly (the env block had been swallowed into config.mounts[0], leaving the deployment with no environment variables) - Add missing mongo-entrypoint.sh mount so the mongodb service can start - Remove the mariadb [[config.domains]] entry: it exposed the DB on main_domain and duplicated the appwrite-console route - Route the dedicated console domain via config.domains and drop the broken HostRegexp Traefik labels; set _APP_CONSOLE_URL/HOSTNAMES - Bump appwrite-console image to 1.2.55-self-hosted (2.4.0 console) - Restore the pinned appwrite-builds volume name - Drop the removed Appwrite Assistant env/service * feat(appwrite): apply remaining 2.4.0 hardening (clickhouse logs, browser) - ClickHouse: add the two 2.4.0 config mounts (clickhouse-config.xml for system-log retention, clickhouse-init.sh to backfill TTLs on existing tables) plus CLICKHOUSE_ALWAYS_RUN_INITDB_SCRIPTS=1; the files are generated via [[config.mounts]] and bind-mounted from ../files/ - Browser: bump appwrite/browser 0.3.4 -> 0.3.6, set ALLOWED_HOSTS=appwrite and public DNS resolvers to block SSRF to internal services - Bump appwrite/geo 0.3.1 -> 0.3.2 (matches 2.4.0) * feat(appwrite): bump template to 2.5.0 Update the Appwrite blueprint to the 2.5.0 release (published 2026-10-13), which only moves images with no new environment variables: - appwrite/appwrite 2.4.0 -> 2.5.0 across all services - appwrite/new console 1.2.55-self-hosted -> 1.2.74-self-hosted - openruntimes/executor 0.29.0 -> 1.1.2 Brings project passkeys, interval-based function schedules, and runtime containers that survive executor restarts. --------- Co-authored-by: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
* chore: remove duplicate appwrite-2 template (appwrite already provides this) * chore: remove duplicate appwrite-2 template The appwrite template is on 2.x (2.5.0 after #1215), so appwrite-2 is a duplicate. The original removal was undone by a later merge of main. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com> Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
0.18.1 fixes GHSA-jwvh-6phv-j9jh, whose affected range this blueprint was squarely inside: it sets STORAGE_PROVIDER=sqlite, and the advisory covers every release from 0.8.0 through 0.18.0 on a server store. The blueprint also seeds two accounts, admin and user. Where those two go to different people who share a browser profile, that is the shape the defect needs: the second to sign in received the first one's browser copy of the workspace, with its saved connection passwords and its query history. Both passwords come from this template's own generated secrets, so by default the two logins belong to one deployer and nothing crosses a privacy boundary; it is handing USER_PASSWORD to someone else that opens it. 0.18.2 then adds a run of fixes across the PostgreSQL family, the wire-compatible engines, MySQL, MongoDB, Redis and Oracle. meta.json also said twenty-six drivers. Databend became a connection type of its own in 0.18.1, where it had been reached as a relative of the MySQL type, so the count is twenty-seven. The fifty-four named engines are unchanged, because Databend only moved from one side of that sum to the other. One line is added beside the bump, because testing the upgrade turned up a lockout the blueprint could not recover from. Since 0.18.0 ADMIN_PASSWORD seeds the account table only while it is empty, so an operator who edits it in Dokploy's Environment panel gets 401 on the new password while the old one, which the panel no longer shows, still works. The app logs the way out, "set ADMIN_PASSWORD_RESET=true and restart", but the compose environment list is an allowlist: typing that variable into the same panel never reached the container, so the advice could not be followed without editing the blueprint itself. ADMIN_PASSWORD_RESET is now passed through with an empty default. Measured on 0.18.2 with this file: empty leaves the container with the variable defined and blank, both accounts sign in normally and neither reset line appears in the log; with it set to true the new password returns 200 and the old one 401; with the flag removed again the new password keeps working. There is no USER equivalent in the application, which the comment says, so that account is changed from Studio's own Accounts screen. Co-authored-by: yusuf-gundogdu <devgundogdu86@gmail.com>
* feat: add Wise MCP template * chore(wise-mcp): bump to 1.1.0 * chore(wise-mcp): use the latest image tag
) * fix(senddock): report the floating image tag in template metadata The compose file tracks ghcr.io/arkhe-systems/senddock:latest, but meta.json still named 0.8.0 as the version. Nothing derives that field from the image, so the gallery badge and the softwareVersion in the page metadata froze at 0.8.0 while a fresh install already pulled 0.8.3, which reads as a template shipping a release with defects that were fixed since. Declaring latest matches what the other blueprints do when the image is not pinned to a fixed tag, and it cannot drift again on the next release. * fix(senddock): pin image to 0.8.3 and report that version Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: remove status-page, no longer in use * chore: remove unused domain (status-page removed) * fix(uptimekit): pin dash 5.2.1 and clickhouse 26.8-alpine instead of latest Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(uptimekit): select the bundled ClickHouse as time-series backend UptimeKit 5.x defaults TIMESERIES_BACKEND to timescale, which needs the TimescaleDB extension that postgres:18-alpine doesn't ship, so dash crash-looped. The template already bundles ClickHouse. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add HiveMQ Community Edition broker blueprint * refactor: mount HiveMQ CE initialization script * fix: eliminate HiveMQ CE configuration warnings
* feat(blueprint): add template for eclipse mosquitto MQTT broker * fix: safely regenerate Mosquitto password file on startup
* feat: add standalone Harbor initialization source * feat: add Harbor Dokploy blueprint and validation * docs: record GitHub publication and remote build validation * chore: scope Harbor contribution for upstream review * chore(harbor): keep the PR inside blueprints/ Drop the repo-level validate-harbor workflow and the .gitignore entry; the blueprint's own tools/ and tests/ still document how it was validated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Add Cypht 2.13.0 webmail aggregator with MariaDB for accounts and settings and Redis for sessions and cache.
Signed-off-by: Victor Luna <victor.luna.mullisaca@gmail.com>
* fix(convex): update GHCR image path from get-convex to convex & bump convex version * fix(convex): set meta version to the pinned image commit Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
3Dokploy is a live, read-only, isometric 3D view of the Dokploy it runs on: projects as buildings, services as racks, deploys on carts. Claude-Session: https://claude.ai/code/session_01KxDD5rKN6o74v1MFAaGiMe Co-authored-by: suleyman <24796754+suleyman@users.noreply.github.com>
* feat: add WUD monitoring template * feat(wud): exclude Dokploy infrastructure by default
* feat: add TryPost social media scheduler template * docs: record TryPost deployment and integration tests
* feat: add Dossier template * docs: note Dossier dashboard timezone limitation * fix(dossier): derive the password hash at startup so the template deploys DOSSIER_PASSWORD must be an argon2id hash and the template shipped it empty behind a :? guard, so the deploy always failed. The template now generates DOSSIER_ADMIN_PASSWORD and the container hashes it with the bundled hash-password tool before starting; a user-provided DOSSIER_PASSWORD hash still takes precedence. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add Shoutrrr social media scheduler template * docs: record Shoutrrr deployment verification * docs: clarify Shoutrrr health checks and polling units
* feat: add Legejo template * feat(legejo): pass the whole environment and list the optional variables --------- Co-authored-by: Markus Rådberg <3110202+jularboolean@users.noreply.github.com>
* feat: add Falco template * fix: verify Falco template in Dokploy * fix: make Telegram optional in Falco template * fix(falco): default MONITORED_HOST so the template deploys out of the box Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* libredb-studio: bump to 1.0.0 * fix(libredb-studio): match meta.json version to the 1.0.0 image Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mauricio Siu <siumauricio@icloud.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* add emaki-video-starter docker-compose.yml * add emaki-video-starter template.toml * add emaki-video-starter meta.json * add emaki-video-starter emaki-video-starter.png
built with Refined Cloudflare Pages Action⚡ Cloudflare Pages Deployment
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What is this PR about?
New PR of [Template Name]
Checklist
Before submitting this PR, please make sure that:
Issues related (if applicable)
Close automatically the related issues using the keywords:
closes #ISSUE_NUMBERScreenshots or Videos