From f47a200c0bd8f30a12c8950c929fe2e6d6b46948 Mon Sep 17 00:00:00 2001 From: p4u1 Date: Wed, 1 Jul 2026 10:41:22 +0000 Subject: [PATCH 01/18] fix: ensure large uploads work (#107) * [x] I have deployed and tested my changes * [x] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [x] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes) --------- Co-authored-by: f Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/107 Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: p4u1 Co-committed-by: p4u1 --- .env.sample | 7 +++++++ abra.sh | 2 +- compose.yml | 2 ++ traefik.yml.tmpl | 4 ++++ 4 files changed, 14 insertions(+), 1 deletion(-) diff --git a/.env.sample b/.env.sample index bc877f0..9389641 100644 --- a/.env.sample +++ b/.env.sample @@ -15,6 +15,13 @@ LOG_MAX_AGE=1 # This is here so later lines can extend it; you likely don't wanna edit COMPOSE_FILE="compose.yml" +# Increase read timeout (or change it to 0s) to ensure large file +# uploads work. +# +# https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#opt-transport-respondingTimeouts-readTimeout +READ_TIMEOUT=60s +WRITE_TIMEOUT=0s + ##################################################################### # General settings # ##################################################################### diff --git a/abra.sh b/abra.sh index 9a1fab8..3c8cad5 100644 --- a/abra.sh +++ b/abra.sh @@ -1,3 +1,3 @@ -export TRAEFIK_YML_VERSION=v31 +export TRAEFIK_YML_VERSION=v31a export FILE_PROVIDER_YML_VERSION=v12 export ENTRYPOINT_VERSION=v5 diff --git a/compose.yml b/compose.yml index e4c44fa..c41d847 100644 --- a/compose.yml +++ b/compose.yml @@ -34,6 +34,8 @@ services: - DASHBOARD_ENABLED - LOG_LEVEL - ${LOG_MAX_AGE:-0} + - READ_TIMEOUT=${READ_TIMEOUT:-60s} + - WRITE_TIMEOUT=${WRITE_TIMEOUT:-0s} healthcheck: test: ["CMD", "traefik", "healthcheck"] interval: 30s diff --git a/traefik.yml.tmpl b/traefik.yml.tmpl index 0ad4a07..087fdf4 100644 --- a/traefik.yml.tmpl +++ b/traefik.yml.tmpl @@ -33,6 +33,10 @@ entrypoints: to: web-secure web-secure: address: ":443" + transport: + respondingTimeouts: + readTimeout: {{ env "READ_TIMEOUT" }} + writeTimeout: {{ env "WRITE_TIMEOUT" }} http: encodedCharacters: allowEncodedSlash: true From 81869a049e38853107c67a5edbc7d6efe845b5ce Mon Sep 17 00:00:00 2001 From: decentral1se Date: Wed, 1 Jul 2026 12:52:06 +0200 Subject: [PATCH 02/18] fix: matrix-federation entrypoint on :8448 to match published port MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit compose.matrix.yml publishes container port 8448, but the entrypoint was on :9001 — federation traffic hit no listener. :9001 also collided with the minio-console entrypoint. https://git.coopcloud.tech/coop-cloud/traefik/commit/e94da633715e538e5e8c864ba97777ff958714d7 Thx for @notplants. --- abra.sh | 2 +- traefik.yml.tmpl | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/abra.sh b/abra.sh index 3c8cad5..d5c01aa 100644 --- a/abra.sh +++ b/abra.sh @@ -1,3 +1,3 @@ -export TRAEFIK_YML_VERSION=v31a +export TRAEFIK_YML_VERSION=v32 export FILE_PROVIDER_YML_VERSION=v12 export ENTRYPOINT_VERSION=v5 diff --git a/traefik.yml.tmpl b/traefik.yml.tmpl index 087fdf4..28277b9 100644 --- a/traefik.yml.tmpl +++ b/traefik.yml.tmpl @@ -100,7 +100,7 @@ entrypoints: {{- end }} {{- if eq (env "MATRIX_FEDERATION_ENABLED") "1" }} matrix-federation: - address: ":9001" + address: ":8448" {{- end }} {{- if eq (env "NEXTCLOUD_TALK_HPB_ENABLED") "1" }} nextcloud-talk-hpb: From ad8a7f1bd958d8ddab003d8001763040d9a62d4f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 1 Jul 2026 17:41:09 +0000 Subject: [PATCH 03/18] chore(deps): update lscr.io/linuxserver/socket-proxy docker tag to v3.4.1 (#117) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [lscr.io/linuxserver/socket-proxy](https://github.com/linuxserver/docker-socket-proxy/packages) ([source](https://github.com/linuxserver/docker-socket-proxy)) | patch | `3.4.0` -> `3.4.1` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/117 Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index c41d847..88f0eb3 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "backupbot.backup=${ENABLE_BACKUPS:-true}" socket-proxy: - image: lscr.io/linuxserver/socket-proxy:3.4.0 + image: lscr.io/linuxserver/socket-proxy:3.4.1 deploy: endpoint_mode: dnsrr environment: From adeaf5afa3744e8b3253bcc7bfb30773b0e0b9be Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 10 Jul 2026 08:07:00 +0000 Subject: [PATCH 04/18] chore(deps): update lscr.io/linuxserver/socket-proxy docker tag to v3.4.2 (#120) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [lscr.io/linuxserver/socket-proxy](https://github.com/linuxserver/docker-socket-proxy/packages) ([source](https://github.com/linuxserver/docker-socket-proxy)) | patch | `3.4.1` -> `3.4.2` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/120 Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 88f0eb3..7976cce 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "backupbot.backup=${ENABLE_BACKUPS:-true}" socket-proxy: - image: lscr.io/linuxserver/socket-proxy:3.4.1 + image: lscr.io/linuxserver/socket-proxy:3.4.2 deploy: endpoint_mode: dnsrr environment: From ef0d154bb15826187503a993f69e8897a66b9d24 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 10 Jul 2026 08:09:03 +0000 Subject: [PATCH 05/18] chore(deps): update traefik docker tag to v3.7.7 (#118) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://github.com/containous/traefik) | patch | `v3.7.5` -> `v3.7.7` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/118 Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 7976cce..95b84e4 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "traefik:v3.7.5" + image: "traefik:v3.7.7" # Note(decentral1se): *please do not* add any additional ports here. # Doing so could break new installs with port conflicts. Please use # the usual `compose.$app.yml` approach for any additional ports From 25c219f844f9d276a659090f37195e604a9a28c5 Mon Sep 17 00:00:00 2001 From: p4u1 Date: Fri, 10 Jul 2026 10:27:21 +0200 Subject: [PATCH 06/18] chore: publish 6.0.0+v3.7.7 release --- compose.yml | 2 +- release/6.0.0+v3.7.7 | 13 +++++++++++++ release/next | 1 - 3 files changed, 14 insertions(+), 2 deletions(-) create mode 100644 release/6.0.0+v3.7.7 delete mode 100644 release/next diff --git a/compose.yml b/compose.yml index 95b84e4..1787cac 100644 --- a/compose.yml +++ b/compose.yml @@ -57,7 +57,7 @@ services: - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}" - "traefik.http.routers.${STACK_NAME}.service=api@internal" - "traefik.http.routers.${STACK_NAME}.middlewares=security@file" - - "coop-cloud.${STACK_NAME}.version=5.1.1+v3.6.15" + - "coop-cloud.${STACK_NAME}.version=6.0.0+v3.7.7" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - "backupbot.backup=${ENABLE_BACKUPS:-true}" diff --git a/release/6.0.0+v3.7.7 b/release/6.0.0+v3.7.7 new file mode 100644 index 0000000..204e5b7 --- /dev/null +++ b/release/6.0.0+v3.7.7 @@ -0,0 +1,13 @@ +!Breaking: Starting with v3.6.16, the Docker provider requires Docker API version v1.40 or above (Docker Engine v19.03). Users running older (end of life) versions of Docker Engine should update their Docker Engine or use the DOCKER_API_VERSION environment variable to override the API version used by Traefik. + +letsencrypt: Avoid HTTP-01 challenge if `LETS_ENCRYPT_DNS_CHALLENGE_ENABLED` is set, in order to rely on DNS-01 challenges for servers not exposed to the internet. + +matrix-federation: Entrypoint was changed to :8448 to match published port + +fix: ensure large uploads work. You can now set the following env vars: +- READ_TIMEOUT +- WRITE_TIMEOUT + +cloudflare: Add Cloudflare as DNS provider + +For more information take a look at the migration guide: https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377 diff --git a/release/next b/release/next deleted file mode 100644 index 08d5a07..0000000 --- a/release/next +++ /dev/null @@ -1 +0,0 @@ -letsencrypt: Avoid HTTP-01 challenge if `LETS_ENCRYPT_DNS_CHALLENGE_ENABLED` is set, in order to rely on DNS-01 challenges for servers not exposed to the internet. From 37a73bb7912e1fda0a06abf3bc5e6c3f6e032607 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 17 Jul 2026 13:02:48 +0000 Subject: [PATCH 07/18] chore(deps): update traefik docker tag to v3.7.8 (#121) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://github.com/containous/traefik) | patch | `v3.7.7` -> `v3.7.8` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/121 Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 1787cac..5ff848e 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "traefik:v3.7.7" + image: "traefik:v3.7.8" # Note(decentral1se): *please do not* add any additional ports here. # Doing so could break new installs with port conflicts. Please use # the usual `compose.$app.yml` approach for any additional ports From 4f1b71c8d664930ab96d17cb5e3625c2e3861252 Mon Sep 17 00:00:00 2001 From: f Date: Fri, 17 Jul 2026 13:04:51 +0000 Subject: [PATCH 08/18] fix(anubis): prevent forward warning on logs (#116) > trustForwardHeader is not configured: this creates an inconsistent > security behavior where some X-Forwarded headers (e.g. > X-Forwarded-For, X-Forwarded-Proto) are removed but others (e.g. > X-Forwarded-Prefix) are forwarded untouched. Please set it to false to > remove all X-Forwarded headers, or true to trust them all. * [x] I have deployed and tested my changes * [ ] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [ ] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes) Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/116 Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Co-authored-by: f Co-committed-by: f --- compose.anubis.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/compose.anubis.yml b/compose.anubis.yml index adb4411..f490e9b 100644 --- a/compose.anubis.yml +++ b/compose.anubis.yml @@ -5,6 +5,7 @@ services: deploy: labels: - "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check" + - "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true" anubis: image: "ghcr.io/techarohq/anubis:v1.25.0" environment: From 8a73e4e21a80b2deaf793a12421810da12e32953 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 25 Jul 2026 07:29:58 +0000 Subject: [PATCH 09/18] chore(deps): update ghcr.io/techarohq/anubis docker tag to v1.26.0 (#123) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/techarohq/anubis](https://images.chainguard.dev/directory/image/static/overview) ([source](https://github.com/chainguard-images/images/tree/HEAD/images/static)) | minor | `v1.25.0` -> `v1.26.0` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/123 Reviewed-by: d1 <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.anubis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.anubis.yml b/compose.anubis.yml index f490e9b..1bc4b41 100644 --- a/compose.anubis.yml +++ b/compose.anubis.yml @@ -7,7 +7,7 @@ services: - "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check" - "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true" anubis: - image: "ghcr.io/techarohq/anubis:v1.25.0" + image: "ghcr.io/techarohq/anubis:v1.26.0" environment: BIND: ":8080" TARGET: " " From e5229b9ad2479ee625f03afdcdba9fc15b01a375 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 25 Jul 2026 09:27:16 +0000 Subject: [PATCH 10/18] chore(deps): update traefik docker tag to v3.7.9 (#124) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://github.com/containous/traefik) | patch | `v3.7.8` -> `v3.7.9` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/124 Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Reviewed-by: d1 <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 5ff848e..009ea21 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "traefik:v3.7.8" + image: "traefik:v3.7.9" # Note(decentral1se): *please do not* add any additional ports here. # Doing so could break new installs with port conflicts. Please use # the usual `compose.$app.yml` approach for any additional ports From 0ff4ef759bea353a2803edb0c4963d1de5f43811 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 27 Jul 2026 19:20:28 +0000 Subject: [PATCH 11/18] chore(deps): update ghcr.io/techarohq/anubis docker tag to v1.26.2 (#125) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/techarohq/anubis](https://images.chainguard.dev/directory/image/static/overview) ([source](https://github.com/chainguard-images/images/tree/HEAD/images/static)) | patch | `v1.26.0` -> `v1.26.2` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/125 Reviewed-by: d1 <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.anubis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.anubis.yml b/compose.anubis.yml index 1bc4b41..cbb259f 100644 --- a/compose.anubis.yml +++ b/compose.anubis.yml @@ -7,7 +7,7 @@ services: - "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check" - "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true" anubis: - image: "ghcr.io/techarohq/anubis:v1.26.0" + image: "ghcr.io/techarohq/anubis:v1.26.2" environment: BIND: ":8080" TARGET: " " From 1a18a99b8fc4748586d13fe8d861e7d2ec68c23e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 30 Jul 2026 20:34:52 +0000 Subject: [PATCH 12/18] chore(deps): update lscr.io/linuxserver/socket-proxy docker tag to v3.4.3 (#129) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [lscr.io/linuxserver/socket-proxy](https://github.com/linuxserver/docker-socket-proxy/packages) ([source](https://github.com/linuxserver/docker-socket-proxy)) | patch | `3.4.2` -> `3.4.3` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/129 Reviewed-by: d1 <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index 009ea21..db0f43b 100644 --- a/compose.yml +++ b/compose.yml @@ -62,7 +62,7 @@ services: - "backupbot.backup=${ENABLE_BACKUPS:-true}" socket-proxy: - image: lscr.io/linuxserver/socket-proxy:3.4.2 + image: lscr.io/linuxserver/socket-proxy:3.4.3 deploy: endpoint_mode: dnsrr environment: From d48982ae9c3dbde36beb3c4461ef7ca2903c8f53 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 1 Aug 2026 13:03:17 +0000 Subject: [PATCH 13/18] chore(deps): update traefik docker tag to v3.7.10 (#130) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://github.com/containous/traefik) | patch | `v3.7.9` -> `v3.7.10` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/130 Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Reviewed-by: d1 <2+decentral1se@noreply.git.coopcloud.tech> Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.yml b/compose.yml index db0f43b..b0f6456 100644 --- a/compose.yml +++ b/compose.yml @@ -3,7 +3,7 @@ version: "3.8" services: app: - image: "traefik:v3.7.9" + image: "traefik:v3.7.10" # Note(decentral1se): *please do not* add any additional ports here. # Doing so could break new installs with port conflicts. Please use # the usual `compose.$app.yml` approach for any additional ports From 5fc35796ea9c270816c591eac066bf3b70e82ad8 Mon Sep 17 00:00:00 2001 From: f Date: Mon, 3 Aug 2026 09:38:13 +0000 Subject: [PATCH 14/18] feat: anubis metrics (#127) * [x] I have deployed and tested my changes * [ ] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [ ] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes) Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/127 Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Co-authored-by: f Co-committed-by: f --- .env.sample | 3 +++ README.md | 3 +++ abra.sh | 1 + anubis.yml.tmpl | 7 +++++++ compose.anubis-metrics.yml | 11 +++++++++++ compose.anubis.yml | 9 +++++++++ 6 files changed, 34 insertions(+) create mode 100644 anubis.yml.tmpl create mode 100644 compose.anubis-metrics.yml diff --git a/.env.sample b/.env.sample index 9389641..8e8b10c 100644 --- a/.env.sample +++ b/.env.sample @@ -223,5 +223,8 @@ WRITE_TIMEOUT=0s #ANUBIS_SERVE_ROBOTS_TXT=true #ANUBIS_SLOG_LEVEL=INFO +## Anubis metrics +#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis-metrics.yml" + ## Enable onion service support #ONION_ENABLED=1 diff --git a/README.md b/README.md index b845d48..35fbcdb 100644 --- a/README.md +++ b/README.md @@ -72,6 +72,9 @@ After deploying these changes, go to each recipe that supports Anubis and follow the process there. **Enabling Anubis here is not enough for protection your apps.** +If you want to collect Prometheus metrics for Anubis, for instance with +[monitoring-ng](/monitoring-ng), uncomment the "Anubis metrics" section. + ## Enabling onion service Uncomment the line in the config setting `ONION_ENABLED=1`. This will create a new entrypoint on port 9052 which can be used to bypass forced SSL. For more details, see the [onion recipe](https://recipes.coopcloud.tech/onion). diff --git a/abra.sh b/abra.sh index d5c01aa..8c8cb8d 100644 --- a/abra.sh +++ b/abra.sh @@ -1,3 +1,4 @@ export TRAEFIK_YML_VERSION=v32 export FILE_PROVIDER_YML_VERSION=v12 export ENTRYPOINT_VERSION=v5 +export ANUBIS_YML_VERSION=v1 diff --git a/anubis.yml.tmpl b/anubis.yml.tmpl new file mode 100644 index 0000000..7526aa9 --- /dev/null +++ b/anubis.yml.tmpl @@ -0,0 +1,7 @@ +bots: +- import: (data)/meta/default-config.yaml +{{ if eq (env "ANUBIS_METRICS_ENABLED") "true" }} +metrics: + bind: ":9090" + network: "tcp" +{{ end }} diff --git a/compose.anubis-metrics.yml b/compose.anubis-metrics.yml new file mode 100644 index 0000000..de5baa7 --- /dev/null +++ b/compose.anubis-metrics.yml @@ -0,0 +1,11 @@ +--- +version: "3.8" +services: + anubis: + environment: + ANUBIS_METRICS_ENABLED: "true" + deploy: + labels: + - "prometheus.io/scrape=true" + - "prometheus.io/port=9090" + - "prometheus.io/path=/metrics" diff --git a/compose.anubis.yml b/compose.anubis.yml index cbb259f..1ff960c 100644 --- a/compose.anubis.yml +++ b/compose.anubis.yml @@ -19,6 +19,10 @@ services: OG_CACHE_CONSIDER_HOST: "${ANUBIS_OG_CACHE_CONSIDER_HOST}" SERVE_ROBOTS_TXT: "${ANUBIS_SERVE_ROBOTS_TXT}" SLOG_LEVEL: "${ANUBIS_SLOG_LEVEL:-INFO}" + POLICY_FNAME: "/data/cfg/botPolicy.yaml" + configs: + - source: anubis_yml + target: /data/cfg/botPolicy.yaml networks: - proxy deploy: @@ -29,3 +33,8 @@ services: - "traefik.http.routers.anubis.entrypoints=web-secure" - "traefik.http.services.anubis.loadbalancer.server.port=8080" - "traefik.http.routers.anubis.service=anubis" +configs: + anubis_yml: + name: ${STACK_NAME}_anubis_yml_${ANUBIS_YML_VERSION} + file: anubis.yml.tmpl + template_driver: golang From 796434a9fe2aa7338df316dcbf1bc189f0d1e8fa Mon Sep 17 00:00:00 2001 From: decentral1se Date: Mon, 3 Aug 2026 14:04:57 +0200 Subject: [PATCH 15/18] chore: remove as maintainer --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 35fbcdb..6e141b9 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ > https://docs.traefik.io -* **Maintainer**: [@p4u1](https://git.coopcloud.tech/p4u1), [@decentral1se](https://git.coopcloud.tech/decentral1se), [@javielico](https://git.coopcloud.tech/javielico), Local-IT: [@moritz](https://git.coopcloud.tech/moritz), [@msimon](https://git.coopcloud.tech/simon), [@carla](https://git.coopcloud.tech/carla) +* **Maintainer**: [@p4u1](https://git.coopcloud.tech/p4u1), [@javielico](https://git.coopcloud.tech/javielico), Local-IT: [@moritz](https://git.coopcloud.tech/moritz), [@msimon](https://git.coopcloud.tech/simon), [@carla](https://git.coopcloud.tech/carla) * **Status**: `stable` * **Category**: Utilities * **Features**: ? From 063e6b4a5a05c1915aa86c61772f6de15b23f0d9 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 10 Aug 2026 14:36:07 +0000 Subject: [PATCH 16/18] chore(deps): update ghcr.io/techarohq/anubis docker tag to v1.27.0 (#131) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/techarohq/anubis](https://images.chainguard.dev/directory/image/static/overview) ([source](https://github.com/chainguard-images/images/tree/HEAD/images/static)) | minor | `v1.26.2` -> `v1.27.0` | > :exclamation: **Important** > > Release Notes retrieval for this PR were skipped because no github.com credentials were available. > If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes). --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/131 Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- compose.anubis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/compose.anubis.yml b/compose.anubis.yml index 1ff960c..e51dd35 100644 --- a/compose.anubis.yml +++ b/compose.anubis.yml @@ -7,7 +7,7 @@ services: - "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check" - "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true" anubis: - image: "ghcr.io/techarohq/anubis:v1.26.2" + image: "ghcr.io/techarohq/anubis:v1.27.0" environment: BIND: ":8080" TARGET: " " From 7c8a44bd2673164844465daf8a41fe74aa78ca21 Mon Sep 17 00:00:00 2001 From: Javielico <103+javielico@noreply.git.coopcloud.tech> Date: Thu, 13 Aug 2026 14:10:09 +0000 Subject: [PATCH 17/18] Open ports 5432 for PGSQL new recipe (#133) Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/133 Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Co-authored-by: Javielico <103+javielico@noreply.git.coopcloud.tech> --- .env.sample | 4 ++++ compose.pgsql.yml | 12 ++++++++++++ 2 files changed, 16 insertions(+) create mode 100644 compose.pgsql.yml diff --git a/.env.sample b/.env.sample index 8e8b10c..046c2ad 100644 --- a/.env.sample +++ b/.env.sample @@ -159,6 +159,10 @@ WRITE_TIMEOUT=0s #COMPOSE_FILE="$COMPOSE_FILE:compose.smtp.yml" #SMTP_ENABLED=1 +## PGSQL recipe open port 5432 +#COMPOSE_FILE="$COMPOSE_FILE:compose.pgsql.yml" +#PGSQL_ENABLED=1 + ## Compy #COMPOSE_FILE="$COMPOSE_FILE:compose.compy.yml" #COMPY_ENABLED=1 diff --git a/compose.pgsql.yml b/compose.pgsql.yml new file mode 100644 index 0000000..c7d3f9e --- /dev/null +++ b/compose.pgsql.yml @@ -0,0 +1,12 @@ +--- +version: "3.8" + +services: + app: + environment: + - PGSQL_ENABLED + ports: + - target: 5432 + published: 5432 + protocol: tcp + mode: host \ No newline at end of file From 14f0d953a40339de8c7c2154cbec98381ea32257 Mon Sep 17 00:00:00 2001 From: javielico Date: Thu, 13 Aug 2026 16:21:30 +0100 Subject: [PATCH 18/18] chore: publish 6.1.0+v3.7.10 release --- compose.yml | 2 +- release/6.1.0+v3.7.10 | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) create mode 100644 release/6.1.0+v3.7.10 diff --git a/compose.yml b/compose.yml index b0f6456..b442dd7 100644 --- a/compose.yml +++ b/compose.yml @@ -57,7 +57,7 @@ services: - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}" - "traefik.http.routers.${STACK_NAME}.service=api@internal" - "traefik.http.routers.${STACK_NAME}.middlewares=security@file" - - "coop-cloud.${STACK_NAME}.version=6.0.0+v3.7.7" + - "coop-cloud.${STACK_NAME}.version=6.1.0+v3.7.10" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - "backupbot.backup=${ENABLE_BACKUPS:-true}" diff --git a/release/6.1.0+v3.7.10 b/release/6.1.0+v3.7.10 new file mode 100644 index 0000000..6ef23d1 --- /dev/null +++ b/release/6.1.0+v3.7.10 @@ -0,0 +1 @@ +Adds option ability to open ports for PGSQL recipe, new version of anubis, and ability to add anubis metrics on this release. \ No newline at end of file