[mass update] fix supporting multiple domains while enforcing ssl

2025-09-08 08:12:25 -07:00
6 changed files with 4 additions and 9 deletions
@@ -3,7 +3,7 @@ version: "3.8"

 services:
  app:
-    image: lukevella/rallly:4.5.10
+    image: lukevella/rallly:4.0.2
    hostname: 0.0.0.0
    networks:
      - proxy
@@ -43,9 +43,9 @@ services:
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        # Redirect from EXTRA_DOMAINS to DOMAIN
        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.5.10+4.5.10"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
+        - "coop-cloud.${STACK_NAME}.version=1.0.0+4.0.2"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
    healthcheck:
      test: "bash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/3000; exit $$?;'"
@@ -1 +0,0 @@
-We've updated Next.js and React to fix two additional vulnerabilities (CVE-2025-55183, CVE-2025-55184) that were discovered while security researchers examined the patches for React2Shell.
@@ -1 +0,0 @@
-This patch release delivers important security fixes and hardens permission checks across the app. We recommend upgrading as soon as possible.
@@ -1 +0,0 @@
-This is a critical security update that upgrades Next.js to address CVE-2025-66478. We strongly recommend all users upgrade to this version immediately.
@@ -1 +0,0 @@
-This release includes updates to dependencies, adds missing translations and fixes a bug where emails for scheduled events are not delivered to a participant's email address.
@@ -1 +0,0 @@
-This release fixes an issue where participants are not able to edit their response using the link they receive in their confirmation email when their session is expired or they are not logged in.
				`@@ -1 +0,0 @@`
				`We've updated Next.js and React to fix two additional vulnerabilities (CVE-2025-55183, CVE-2025-55184) that were discovered while security researchers examined the patches for React2Shell.`
				`@@ -1 +0,0 @@`
				`This patch release delivers important security fixes and hardens permission checks across the app. We recommend upgrading as soon as possible.`
				`@@ -1 +0,0 @@`
				`This is a critical security update that upgrades Next.js to address CVE-2025-66478. We strongly recommend all users upgrade to this version immediately.`
				`@@ -1 +0,0 @@`
				`This release includes updates to dependencies, adds missing translations and fixes a bug where emails for scheduled events are not delivered to a participant's email address.`
				`@@ -1 +0,0 @@`
				`This release fixes an issue where participants are not able to edit their response using the link they receive in their confirmation email when their session is expired or they are not logged in.`