fix: garage ports on host mode

chore: add moritz as maintainer
chore: publish 5.1.0+v3.6.11 release (#98 )
2026-04-17 03:24:08 -03:00 · 2026-03-25 00:17:14 +01:00 · 2026-03-24 21:00:50 +00:00 · 2026-03-24 11:49:05 +01:00 · 2026-03-21 18:35:26 +01:00 · 2026-03-21 18:34:29 +01:00
7 changed files with 21 additions and 8 deletions
@@ -5,7 +5,7 @@
 > https://docs.traefik.io

 <!-- metadata -->
-* **Maintainer**: [@p4u1](https://git.coopcloud.tech/p4u1), [@decentral1se](https://git.coopcloud.tech/decentral1se), [@javielico](https://git.coopcloud.tech/javielico)
+* **Maintainer**: [@p4u1](https://git.coopcloud.tech/p4u1), [@decentral1se](https://git.coopcloud.tech/decentral1se), [@javielico](https://git.coopcloud.tech/javielico), [@moritz](https://git.coopcloud.tech/moritz)
 * **Status**: `stable`
 * **Category**: Utilities
 * **Features**: ?
@@ -1,3 +1,3 @@
-export TRAEFIK_YML_VERSION=v29
-export FILE_PROVIDER_YML_VERSION=v11
+export TRAEFIK_YML_VERSION=v30
+export FILE_PROVIDER_YML_VERSION=v12
 export ENTRYPOINT_VERSION=v5
@@ -4,4 +4,7 @@ services:
    environment:
      - GARAGE_RPC_ENABLED
    ports:
-      - "3901:3901"
+      - target: 3901
+        published: 3901
+        protocol: tcp
+        mode: host
@@ -3,7 +3,7 @@ version: "3.8"

 services:
  app:
-    image: "traefik:v3.6.10"
+    image: "traefik:v3.6.11"
    # Note(decentral1se): *please do not* add any additional ports here.
    # Doing so could break new installs with port conflicts. Please use
    # the usual `compose.$app.yml` approach for any additional ports
@@ -55,12 +55,12 @@ services:
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        - "traefik.http.routers.${STACK_NAME}.service=api@internal"
        - "traefik.http.routers.${STACK_NAME}.middlewares=security@file"
-        - "coop-cloud.${STACK_NAME}.version=4.0.0+v3.6.10"
+        - "coop-cloud.${STACK_NAME}.version=5.1.0+v3.6.11"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
        - "backupbot.backup=${ENABLE_BACKUPS:-true}"

  socket-proxy:
-    image: lscr.io/linuxserver/socket-proxy:3.2.10-r0-ls65
+    image: lscr.io/linuxserver/socket-proxy:3.2.14
    deploy:
      endpoint_mode: dnsrr
    environment:
@@ -0,0 +1,10 @@
+/!\ BREAKING CHANGE: Change metrics endpoint to use https instead of http 8082
+                     to prevent sending BASIC_AUTH in plaintext
+
+The metrics endpoint changed from http on port 8082 to the web-secure
+endpoint to prevent sending BASIC_AUTH credentials plaintext. If metrics is
+enabled you need to configure a FQDN for it by setting METRICS_FQDN in your
+.env. You should also update the scrape config files in prometheus for
+Traefik metrics from port 8082 to the new FQDN.
+
+All changes: https://git.coopcloud.tech/coop-cloud/traefik/compare/5.0.0+v3.6.10...4.0.0+v3.6.10
@@ -0,0 +1 @@
+Patched CVES: CVE-2026-32595 and CVE-2026-32305
@@ -1 +0,0 @@
-* The metrics endpoint changed from http on port 8082 to the web-secure endpoint to prevent sending BASIC_AUTH credentials plaintext. If metrics is enabled you need to configure a FQDN for it by setting METRICS_FQDN in your .env. You should also update the scrape config files in prometheus for Traefik metrics from port 8082 to the new FQDN.
Author	SHA1	Message	Date
fauno	295ad3d999	fix: garage ports on host mode	2026-04-17 03:24:08 -03:00
decentral1se	74193326fb	chore: add moritz as maintainer	2026-03-25 00:17:14 +01:00
p4u1	57a6aed540	chore: publish 5.1.0+v3.6.11 release (#98 ) Reviewed-on: coop-cloud/traefik#98 Reviewed-by: decentral1se <decentral1se@noreply.git.coopcloud.tech>	2026-03-24 21:00:50 +00:00
moritz	ff138864d4	chore: publish 5.1.0+v3.6.11 release	2026-03-24 11:49:05 +01:00
decentral1se	7370ecfa9d	chore: bump config	2026-03-21 18:35:26 +01:00
decentral1se	57e5c49c81	fix: bump config	2026-03-21 18:34:29 +01:00
decentral1se	063d194119	chore: prep for 5.0.0+v3.6.10 (#96 ) coop-cloud/traefik#95 Reviewed-on: coop-cloud/traefik#96 Reviewed-by: p4u1 <p4u1@noreply.git.coopcloud.tech> Co-authored-by: decentral1se <cellarspoon@riseup.net> Co-committed-by: decentral1se <cellarspoon@riseup.net>	2026-03-21 17:29:39 +00:00
				`@@ -0,0 +1 @@`
				`Patched CVES: CVE-2026-32595 and CVE-2026-32305`
				`@@ -1 +0,0 @@`
				`* The metrics endpoint changed from http on port 8082 to the web-secure endpoint to prevent sending BASIC_AUTH credentials plaintext. If metrics is enabled you need to configure a FQDN for it by setting METRICS_FQDN in your .env. You should also update the scrape config files in prometheus for Traefik metrics from port 8082 to the new FQDN.`