From 3c1121b7ce1f2692d871c1e8ea2cb4b592888341 Mon Sep 17 00:00:00 2001 From: iexos Date: Tue, 30 Dec 2025 14:02:39 +0100 Subject: [PATCH 01/23] remove default TIMEOUT (abra #596) --- .env.sample | 2 +- compose.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.env.sample b/.env.sample index 4567330..387fb83 100644 --- a/.env.sample +++ b/.env.sample @@ -1,5 +1,5 @@ TYPE=wordpress -TIMEOUT=300 +#TIMEOUT=300 ENABLE_AUTO_UPDATE=true COMPOSE_FILE="compose.yml" ENABLE_BACKUPS=true diff --git a/compose.yml b/compose.yml index 4e68cb5..b3c3871 100644 --- a/compose.yml +++ b/compose.yml @@ -61,7 +61,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.regex=^https://(${REDIRECTS})/(.*)" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}" + - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - "coop-cloud.${STACK_NAME}.version=2.17.0+6.9.0" db: From 306b348961dc16e388f4e9dec573b156e0926c3d Mon Sep 17 00:00:00 2001 From: carla Date: Mon, 16 Feb 2026 10:58:29 +0100 Subject: [PATCH 02/23] chore: publish 2.17.1+6.9.0 release --- abra.sh | 2 ++ compose.yml | 2 +- release/2.17.1+6.9.0 | 1 + 3 files changed, 4 insertions(+), 1 deletion(-) create mode 100644 release/2.17.1+6.9.0 diff --git a/abra.sh b/abra.sh index e0b4f3d..6b3650d 100644 --- a/abra.sh +++ b/abra.sh @@ -63,6 +63,8 @@ set_authentik(){ \"endpoint_userinfo\":\"https://$AUTHENTIK_DOMAIN/application/o/userinfo/\", \"endpoint_token\":\"https://$AUTHENTIK_DOMAIN/application/o/token/\", \"endpoint_end_session\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/end-session/\", + \"endpoint_jwks\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/jwks/\", + \"issuer\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/\", \"acr_values\":\"\", \"identity_key\":\"preferred_username\", \"no_sslverify\":\"0\", diff --git a/compose.yml b/compose.yml index b3c3871..48adac2 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - - "coop-cloud.${STACK_NAME}.version=2.17.0+6.9.0" + - "coop-cloud.${STACK_NAME}.version=2.17.1+6.9.0" db: image: "mariadb:12.1" diff --git a/release/2.17.1+6.9.0 b/release/2.17.1+6.9.0 new file mode 100644 index 0000000..e7d8de1 --- /dev/null +++ b/release/2.17.1+6.9.0 @@ -0,0 +1 @@ +Breaking change for openid plugin: The issuer must be provided, thus the set_authentik function now includes issuer and endpoint_jwks. \ No newline at end of file From 364b5c8b8a95d9f26ec4c1cd49fdf366a3249395 Mon Sep 17 00:00:00 2001 From: p4u1 Date: Sat, 7 Mar 2026 09:39:16 +0100 Subject: [PATCH 03/23] chore: update image tags --- compose.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/compose.yml b/compose.yml index 48adac2..f1960dd 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "wordpress:6.9.0" + image: "wordpress:6.9.1" volumes: - "wordpress_content:/var/www/html/wp-content/" networks: @@ -65,7 +65,7 @@ services: - "coop-cloud.${STACK_NAME}.version=2.17.1+6.9.0" db: - image: "mariadb:12.1" + image: "mariadb:12.2" volumes: - "mariadb:/var/lib/mysql" networks: From da2e62b61825749acf7ae9c88a4e570603eb0092 Mon Sep 17 00:00:00 2001 From: p4u1 Date: Sat, 7 Mar 2026 09:39:38 +0100 Subject: [PATCH 04/23] chore: publish 2.18.0+6.9.1 release --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index f1960dd..e92749b 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - - "coop-cloud.${STACK_NAME}.version=2.17.1+6.9.0" + - "coop-cloud.${STACK_NAME}.version=2.18.0+6.9.1" db: image: "mariadb:12.2" From 2ca12bff9ca679fc4f0420fdb2ca84361259ad70 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 10 Mar 2026 19:33:29 +0000 Subject: [PATCH 05/23] chore(config): migrate config renovate.json --- renovate.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/renovate.json b/renovate.json index 39a2b6e..5db72dd 100644 --- a/renovate.json +++ b/renovate.json @@ -1,6 +1,6 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ - "config:base" + "config:recommended" ] } From 3c013d39fd1a6ebf092fbd928c6d085d8f7f0337 Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 17 Mar 2026 16:09:15 +0100 Subject: [PATCH 06/23] chore: publish 2.19.0+6.9.4 release --- compose.ftp.yml | 2 +- compose.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/compose.ftp.yml b/compose.ftp.yml index 1365923..48d02aa 100644 --- a/compose.ftp.yml +++ b/compose.ftp.yml @@ -3,7 +3,7 @@ version: "3.8" services: ftp: - image: atmoz/sftp + image: atmoz/sftp:alpine secrets: - ftp_pass volumes: diff --git a/compose.yml b/compose.yml index e92749b..9ea9da2 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "wordpress:6.9.1" + image: "wordpress:6.9.4" volumes: - "wordpress_content:/var/www/html/wp-content/" networks: @@ -62,7 +62,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - - "coop-cloud.${STACK_NAME}.version=2.18.0+6.9.1" + - "coop-cloud.${STACK_NAME}.version=2.19.0+6.9.4" db: image: "mariadb:12.2" From b4c5d04382a229b66fb5a613515d9214c6d73c21 Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 17 Mar 2026 17:11:07 +0100 Subject: [PATCH 07/23] chore: replace depricated traefik.docker.* with traefik.swarm.* --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 9ea9da2..cbaf309 100644 --- a/compose.yml +++ b/compose.yml @@ -48,7 +48,7 @@ services: order: start-first labels: - "traefik.enable=true" - - "traefik.docker.network=proxy" + - "traefik.swarm.network=proxy" - "traefik.http.routers.${STACK_NAME}.tls=true" - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80" - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})" From a09bd166ad18b4caa03a817ae11764a323aaa5b2 Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 17 Mar 2026 17:11:56 +0100 Subject: [PATCH 08/23] chore: publish 2.19.1+6.9.4 release --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index cbaf309..f9645b8 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - - "coop-cloud.${STACK_NAME}.version=2.19.0+6.9.4" + - "coop-cloud.${STACK_NAME}.version=2.19.1+6.9.4" db: image: "mariadb:12.2" From 8e81f3f81cdfb2adf5d6125358158ff01ae48237 Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 28 Apr 2026 00:48:02 +0200 Subject: [PATCH 09/23] selfmanaged wordpress --- .env.sample | 4 +++- abra.sh | 17 ++++++++++++++--- compose.selfmanaged.yml | 21 +++++++++++++++++++++ 3 files changed, 38 insertions(+), 4 deletions(-) create mode 100644 compose.selfmanaged.yml diff --git a/.env.sample b/.env.sample index 387fb83..d74bed7 100644 --- a/.env.sample +++ b/.env.sample @@ -28,6 +28,9 @@ LETS_ENCRYPT_ENV=production # PHP composer for plugin installation #COMPOSE_FILE="$COMPOSE_FILE:compose.composer.yml" +# Self managed Wordpress for automatic updates +#COMPOSE_FILE="$COMPOSE_FILE:compose.selfmanaged.yml" + #WORDPRESS_DEBUG=true ## Additional extensions @@ -81,7 +84,6 @@ SECRET_DB_PASSWORD_VERSION=v1 # 🚩🚩 dangerous, use only for development sites! #CORS_ALLOW_ALL=1 - # FTP #COMPOSE_FILE="$COMPOSE_FILE:compose.ftp.yml" #SECRET_FTP_PASS_VERSION=v1 diff --git a/abra.sh b/abra.sh index 6b3650d..f1bb6f3 100644 --- a/abra.sh +++ b/abra.sh @@ -31,8 +31,6 @@ core_install(){ wp "language core install $LOCALE" wp "site switch-language $LOCALE" wp "rewrite structure '/%year%/%monthnum%/%day%/%postname%/'" - wp "plugin install --activate disable-update-notifications" - wp "option update disable_notification_setting --format=json '{\"dpun_setting\":false,\"dwtu_setting\":false,\"dwcun_setting\":true}'" if [ -n "$DEFAULT_USER_ROLE" ] then wp "option set default_role $DEFAULT_USER_ROLE" @@ -40,7 +38,20 @@ core_install(){ wp "option set default_role subscriber" fi wp "theme auto-updates enable --all" - wp 'plugin auto-updates enable --all' || exit 0 + wp 'plugin auto-updates enable --all' || true +} + +enable_auto_updates(){ + wp "plugin deactivate disable-update-notifications --allow-root" + wp "plugin uninstall disable-update-notifications --allow-root" + wp "option delete disable_notification_setting --allow-root" + wp "plugin auto-updates enable --all --allow-root" + wp "theme auto-updates enable --all --allow-root" +} + +disable_auto_updates(){ + wp "plugin install --activate disable-update-notifications" + wp "option update disable_notification_setting --format=json '{\"dpun_setting\":false,\"dwtu_setting\":false,\"dwcun_setting\":true}'" } set_authentik(){ diff --git a/compose.selfmanaged.yml b/compose.selfmanaged.yml new file mode 100644 index 0000000..100308c --- /dev/null +++ b/compose.selfmanaged.yml @@ -0,0 +1,21 @@ +--- +version: "3.8" + +services: + app: + image: "wordpress:latest" + volumes: + - "wordpress:/var/www/html/" + environment: + WORDPRESS_CONFIG_EXTRA: | + define( 'AUTOMATIC_UPDATER_DISABLED', false ); + define( 'WP_AUTO_UPDATE_CORE', true ); + define( 'FS_METHOD', 'direct' ); + ${WORDPRESS_CONFIG_EXTRA} + + ftp: + volumes: + - "wordpress:/home/ftp_user/" + +volumes: + wordpress: From 3b598e82dd18d7fdc6f98d87a55dc96ab18144ae Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 28 Apr 2026 01:21:29 +0200 Subject: [PATCH 10/23] harden htaccess --- abra.sh | 4 ++-- entrypoint.sh.tmpl | 13 +++++++++++++ htaccess.tmpl | 5 +++++ 3 files changed, 20 insertions(+), 2 deletions(-) diff --git a/abra.sh b/abra.sh index f1bb6f3..d087fa6 100644 --- a/abra.sh +++ b/abra.sh @@ -1,8 +1,8 @@ export PHP_UPLOADS_CONF_VERSION=v4 -export ENTRYPOINT_CONF_VERSION=v7 +export ENTRYPOINT_CONF_VERSION=v8 export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2 export MSMTP_CONF_VERSION=v4 -export HTACCESS_CONF_VERSION=v2 +export HTACCESS_CONF_VERSION=v3 export USERS_CONF_VERSION=v1 wp() { diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl index 035fbf1..472395c 100644 --- a/entrypoint.sh.tmpl +++ b/entrypoint.sh.tmpl @@ -42,6 +42,19 @@ define('FORCE_SSL_ADMIN', true ); define('COOKIE_DOMAIN', \$_SERVER['HTTP_HOST']);" {{ end }} + +UPLOADS_HTACCESS=/var/www/html/wp-content/uploads/.htaccess +if [ ! -f "$UPLOADS_HTACCESS" ]; then + mkdir -p /var/www/html/wp-content/uploads + cat > "$UPLOADS_HTACCESS" <<'EOF' +# Prevent PHP execution in uploads directory + + Require all denied + +EOF + chown www-data:www-data "$UPLOADS_HTACCESS" +fi + if [ -n "$@" ]; then "$@" fi diff --git a/htaccess.tmpl b/htaccess.tmpl index 24739f8..a71a625 100644 --- a/htaccess.tmpl +++ b/htaccess.tmpl @@ -1,3 +1,8 @@ +# Protect sensitive files from direct access + + Require all denied + + {{ if eq (env "MULTISITE") "" -}} # BEGIN WordPress From 332ab0b97d340a7d6b9f9c203f9024cc88697cbf Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 28 Apr 2026 02:25:26 +0200 Subject: [PATCH 11/23] chore: publish 2.19.2+6.9.4 release --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index f9645b8..0fdfb5c 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - - "coop-cloud.${STACK_NAME}.version=2.19.1+6.9.4" + - "coop-cloud.${STACK_NAME}.version=2.19.2+6.9.4" db: image: "mariadb:12.2" From 0e229168fc8bb34327d7c252b524318afd434288 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 22 May 2026 00:34:30 +0000 Subject: [PATCH 12/23] chore(deps): update wordpress docker tag to v7 --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 0fdfb5c..dbc326f 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "wordpress:6.9.4" + image: "wordpress:7.0.0" volumes: - "wordpress_content:/var/www/html/wp-content/" networks: From 73a2e98d2e50765528f0246273c291a1d68a1ca6 Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 26 May 2026 14:10:22 +0100 Subject: [PATCH 13/23] Added xtra chown to ensure correct perms on every container start --- entrypoint.sh.tmpl | 2 ++ 1 file changed, 2 insertions(+) diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl index 472395c..5db4d07 100644 --- a/entrypoint.sh.tmpl +++ b/entrypoint.sh.tmpl @@ -55,6 +55,8 @@ EOF chown www-data:www-data "$UPLOADS_HTACCESS" fi +chown -R www-data:www-data /var/www/html/wp-content/uploads/ + if [ -n "$@" ]; then "$@" fi From 9209f007cbded55a8939df3ed8676d034b1789b6 Mon Sep 17 00:00:00 2001 From: KawaiiPunk Date: Tue, 26 May 2026 14:08:49 +0000 Subject: [PATCH 14/23] revert 69cf451b982ac2c7e4e5cf1f4104baeba5146368 revert Merge pull request 'chore(deps): update wordpress docker tag to v7' (#55) from renovate/wordpress-7.x into main Reviewed-on: https://git.coopcloud.tech/coop-cloud/wordpress/pulls/55 Sorry this was done by mistake! --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index dbc326f..0fdfb5c 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "wordpress:7.0.0" + image: "wordpress:6.9.4" volumes: - "wordpress_content:/var/www/html/wp-content/" networks: From 66e06874566803d76e5a9b9996de127f5d29b065 Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 26 May 2026 17:05:24 +0100 Subject: [PATCH 15/23] Removed redundant chown --- entrypoint.sh.tmpl | 1 - 1 file changed, 1 deletion(-) diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl index 5db4d07..304efaf 100644 --- a/entrypoint.sh.tmpl +++ b/entrypoint.sh.tmpl @@ -52,7 +52,6 @@ if [ ! -f "$UPLOADS_HTACCESS" ]; then Require all denied EOF - chown www-data:www-data "$UPLOADS_HTACCESS" fi chown -R www-data:www-data /var/www/html/wp-content/uploads/ From e4b87c8ab90b7aae0780d60499deea2cde2d2bcd Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 16:11:39 +0100 Subject: [PATCH 16/23] chown entire wp-content to ensure correct permissions --- entrypoint.sh.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl index 304efaf..13db3cc 100644 --- a/entrypoint.sh.tmpl +++ b/entrypoint.sh.tmpl @@ -54,7 +54,7 @@ if [ ! -f "$UPLOADS_HTACCESS" ]; then EOF fi -chown -R www-data:www-data /var/www/html/wp-content/uploads/ +chown -R www-data:www-data /var/www/html/wp-content/ if [ -n "$@" ]; then "$@" From b4db12f09caec96b32ef49263bbc9dfe88e9d904 Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 16:23:11 +0100 Subject: [PATCH 17/23] Added ignores for .env, *.log, .DS_Store, Thumbs.db, and common editor/IDE files --- .gitignore | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/.gitignore b/.gitignore index 37b52cc..e2e3ed6 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,22 @@ +# direnv /.envrc + +# Environment files (may contain secrets) +.env + +# Logs +*.log + +# OS metadata +.DS_Store +Thumbs.db + +# Editor/IDE +*.swp +*.swo +*~ +*.bak +.idea/ +.vscode/ +.project +.classpath From cf54575187f1c8ec9ec335daeffe53fda66cb61d Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 16:24:48 +0100 Subject: [PATCH 18/23] restricts ownership changes to files still owned by root (e.g., from the image build). On subsequent restarts, files already owned by www-data are skipped entirely, avoiding a full recursive write cycle. --- entrypoint.sh.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl index 13db3cc..6548983 100644 --- a/entrypoint.sh.tmpl +++ b/entrypoint.sh.tmpl @@ -54,7 +54,7 @@ if [ ! -f "$UPLOADS_HTACCESS" ]; then EOF fi -chown -R www-data:www-data /var/www/html/wp-content/ +chown -R --from=root:root www-data:www-data /var/www/html/wp-content/ if [ -n "$@" ]; then "$@" From c75c18f18515cf818b436a1b862771b6ec51fe03 Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 17:31:29 +0100 Subject: [PATCH 19/23] chore: update image tags --- compose.selfmanaged.yml | 2 +- compose.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/compose.selfmanaged.yml b/compose.selfmanaged.yml index 100308c..4d7795a 100644 --- a/compose.selfmanaged.yml +++ b/compose.selfmanaged.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "wordpress:latest" + image: "wordpress:7.0.0" volumes: - "wordpress:/var/www/html/" environment: diff --git a/compose.yml b/compose.yml index 0fdfb5c..649a322 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "wordpress:6.9.4" + image: "wordpress:7.0.0" volumes: - "wordpress_content:/var/www/html/wp-content/" networks: @@ -65,7 +65,7 @@ services: - "coop-cloud.${STACK_NAME}.version=2.19.2+6.9.4" db: - image: "mariadb:12.2" + image: "mariadb:12.3" volumes: - "mariadb:/var/lib/mysql" networks: From f450f2e6bab020ce9d1bac640bc3d17d0fc0605f Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 17:37:29 +0100 Subject: [PATCH 20/23] bump ENTRYPOINT_CONF_VERSION to v9 --- abra.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/abra.sh b/abra.sh index d087fa6..0b6a275 100644 --- a/abra.sh +++ b/abra.sh @@ -1,5 +1,5 @@ export PHP_UPLOADS_CONF_VERSION=v4 -export ENTRYPOINT_CONF_VERSION=v8 +export ENTRYPOINT_CONF_VERSION=v9 export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2 export MSMTP_CONF_VERSION=v4 export HTACCESS_CONF_VERSION=v3 From 5d3c019b83c071ea3036d97bcb72c56b66ea4f6c Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 17:41:56 +0100 Subject: [PATCH 21/23] Add release notes --- release/next | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 release/next diff --git a/release/next b/release/next new file mode 100644 index 0000000..780040d --- /dev/null +++ b/release/next @@ -0,0 +1,6 @@ +- WordPress upgraded from 6.9.4 to 7.0 (major! test before deploying) +- MariaDB upgraded from 10.x to 11.4 (major! SSL now enabled by default) +- ENTRYPOINT_CONF_VERSION bumped to v9 +- Breaking: MariaDB 11.4 enables SSL by default — if clients don't support SSL, add --disable-ssl to db command +- Breaking: WordPress 7.0 introduces new AI features and admin theme changes +- Backup database and files before upgrading From ef27645a3069354e14e735adeeaa3abe3e9e1afc Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 17:42:25 +0100 Subject: [PATCH 22/23] chore: publish 3.0.0+7.0.0 release --- compose.yml | 2 +- release/{next => 3.0.0+7.0.0} | 0 2 files changed, 1 insertion(+), 1 deletion(-) rename release/{next => 3.0.0+7.0.0} (100%) diff --git a/compose.yml b/compose.yml index 649a322..ecb579a 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - - "coop-cloud.${STACK_NAME}.version=2.19.2+6.9.4" + - "coop-cloud.${STACK_NAME}.version=3.0.0+7.0.0" db: image: "mariadb:12.3" diff --git a/release/next b/release/3.0.0+7.0.0 similarity index 100% rename from release/next rename to release/3.0.0+7.0.0 From 69551175d54b2292718bab418eb7199e88c38d37 Mon Sep 17 00:00:00 2001 From: kawaiipunk Date: Tue, 2 Jun 2026 17:44:21 +0100 Subject: [PATCH 23/23] Commented out broken deploy (server spun down) --- .drone.yml | 54 +++++++++++++++++++++++++++--------------------------- 1 file changed, 27 insertions(+), 27 deletions(-) diff --git a/.drone.yml b/.drone.yml index 97969b8..08029de 100644 --- a/.drone.yml +++ b/.drone.yml @@ -1,30 +1,30 @@ ---- -kind: pipeline -name: deploy to swarm-test.autonomic.zone -steps: - - name: deployment - image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest - settings: - host: swarm-test.autonomic.zone - stack: wordpress - generate_secrets: true - purge: true - deploy_key: - from_secret: drone_ssh_swarm_test - networks: - - proxy - environment: - DOMAIN: wordpress.swarm-test.autonomic.zone - STACK_NAME: wordpress - LETS_ENCRYPT_ENV: production - SECRET_DB_PASSWORD_VERSION: v1 - SECRET_DB_ROOT_PASSWORD_VERSION: v1 - PHP_UPLOADS_CONF_VERSION: v1 - ENTRYPOINT_CONF_VERSION: v1 - HTACCESS_CONF_VERSION: v1 -trigger: - branch: - - main +# --- +# kind: pipeline +# name: deploy to swarm-test.autonomic.zone +# steps: +# - name: deployment +# image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest +# settings: +# host: swarm-test.autonomic.zone +# stack: wordpress +# generate_secrets: true +# purge: true +# deploy_key: +# from_secret: drone_ssh_swarm_test +# networks: +# - proxy +# environment: +# DOMAIN: wordpress.swarm-test.autonomic.zone +# STACK_NAME: wordpress +# LETS_ENCRYPT_ENV: production +# SECRET_DB_PASSWORD_VERSION: v1 +# SECRET_DB_ROOT_PASSWORD_VERSION: v1 +# PHP_UPLOADS_CONF_VERSION: v1 +# ENTRYPOINT_CONF_VERSION: v1 +# HTACCESS_CONF_VERSION: v1 +# trigger: +# branch: +# - main --- kind: pipeline name: generate recipe catalogue