aboutsummaryrefslogtreecommitdiff
path: root/Docker
AgeCommit message (Collapse)Author
2023-02-06More robust application of access permissions (#5062)Gravatar Alexandre Alapetite
* More robust application of access permissions We were in particular missing directory traversal `+X` in our current recommendations. Extracted to own shell script so it can easily be invoked. Update access permissions in Docker to account to be more robust. #fix https://github.com/FreshRSS/FreshRSS/discussions/5037 * Minor simplification * Restrict mkdir permissions Default mkdir permissions are 0777, which is not good for security, so downgrade to 0770.
2023-01-19Safer timezone set (#5021)Gravatar Alexandre Alapetite
* Safer timezone set Add missing tzdata in Docker :newest Fallback to UTC if no timezone is defined at all #fix https://github.com/FreshRSS/FreshRSS/pull/4906#issuecomment-1386747169 * Better refactoring Show fallback timezone everywhere
2023-01-11API avoid logging passwords (#5001)Gravatar Alexandre Alapetite
* API avoid logging passwords * Strip passwords and tokens from API logs * Only log failed requests information when in debug mode * Remove debug SHA * Clean also Apache logs * Better comments * Redact also token parameters * shfmt * Simplify whitespace * redacted
2022-12-28chmod +x extensions (#4956)Gravatar Alexandre Alapetite
To ease adding custom extensions such as in https://github.com/FreshRSS/Extensions/issues/37#issuecomment-1363474585
2022-11-30Docker uniform timezone behaviour (#4905)Gravatar Alexandre Alapetite
* Docker Alpine timezone for :newest and :oldest Follow-up of https://github.com/FreshRSS/FreshRSS/pull/4903 Forgot the development images Newest and Oldest * Uniform timezone behaviour * shellcheck * A bit more documentation
2022-11-28Docker Alpine time zone (#4903)Gravatar Alexandre Alapetite
Allow setting the timezone with a `TZ` environment variable in our Alpine-based Docker images just like for our Debian-based Doker images. See https://github.com/FreshRSS/FreshRSS/discussions/4898#discussioncomment-4245991
2022-11-23Docker Alpine 3.17 (#4886)Gravatar Alexandre Alapetite
* Docker Alpine 3.17 Update alternative Docker image to Alpine 3.17 with PHP 8.1.12 (and still Apache 2.4.54) https://alpinelinux.org/posts/Alpine-3.17.0-released.html * Fix developer access rights Put developer in www-data group
2022-11-16Apache TraceEnable Off (#4863)Gravatar Alexandre Alapetite
I have just received an e-mail with a security concern. Although most likely an obsolete concern (old browsers with Java applets), and the Apache team saying that there is no problem, let's disable the TRACE method by default in our Docker images until we hear anybody actually wanting this feature. https://httpd.apache.org/docs/current/mod/core.html#traceenable https://owasp.org/www-community/attacks/Cross_Site_Tracing
2022-11-14Require PHP 7.2+ (#4848)Gravatar Alexandre Alapetite
Drop PHP 7.0- as planned https://github.com/FreshRSS/FreshRSS/discussions/3321#discussioncomment-835704
2022-06-19Docker Alpine updates (#4420)Gravatar Alexandre Alapetite
* Added PHP extensions `php-openssl` (used by PHPMailer) and php-xml (used by SimplePie) * Upgraded dev image `freshrss/freshrss:newest` to PHP 8.2.
2022-06-19Docker entrypoint fix buffering (#4417)Gravatar Alexandre Alapetite
Remove output buffering during auto-install of FreshRSS and auto-creation of the default user. We were only getting outputs at the end of each command, which was a problem for getting errors and progress, for instance when automatically importing a very large OPML
2022-05-31Docker readme volume for extensions (#4397)Gravatar Alexandre Alapetite
* Docker readme volume for extensions Forgotten from https://github.com/FreshRSS/FreshRSS/pull/4320 Keeping https://github.com/FreshRSS/FreshRSS/pull/2837 * Minor whitespace * No extension volume for development
2022-05-30Docker: Alpine 3.16 (#4391)Gravatar Alexandre Alapetite
https://alpinelinux.org/posts/Alpine-3.16.0-released.html Apache 2.4.53, PHP 8.0.19
2022-05-23Custom logo HTML (#4369)Gravatar Alexandre Alapetite
* Custom logo HTML Add option for custom HTML logo/title in the main Web UI view. Can potentially be different per user. #fix https://github.com/FreshRSS/FreshRSS/pull/3830/files#r850472247 * logo_html in main config With new `./data/config.custom.php` to provide custom values before install * Docker documentation * whitespace * Auto relax CSP to allow images for HTML logo * Documentation
2022-04-24Update Docker readme (#4320)Gravatar Alexandre Alapetite
* Update Docker readme #fix https://github.com/FreshRSS/FreshRSS/issues/3351 * A few more headers https://github.com/FreshRSS/FreshRSS/issues/3649 https://doc.traefik.io/traefik/middlewares/http/headers/ * Another docker logs example * More uniform * Minor details
2022-01-08Use typographic quotes (#4133)Gravatar Alexandre Alapetite
* Use typographic quotes * A few fixes * Fix * Fix not saved * Implement feedback * Detail * Revert spoken English fixes Left for a future dedicated discussion * More reverts * Final reverts * Final minor
2022-01-08Fix various typos and spelling errors in documentation, comments and code. ↵Gravatar Thomas Renes
(#4134)
2022-01-04Docker :newest Alpine PHP 8.1 (#4121)Gravatar Alexandre Alapetite
* Docker :newest Alpine PHP 8.1 Update our `:newest` development image to use PHP 8.1 in alpine:edge * Increase memory for tests
2021-12-20Docker fix missing .htaccess (#4074)Gravatar Alexandre Alapetite
Related to https://github.com/FreshRSS/FreshRSS/issues/4073 In our Docker configuration, `.htaccess` files are included only once at startup. The one for themes was missing.
2021-11-27Docker: Alpine 3.15 (#3996)Gravatar Alexandre Alapetite
Alpine 3.15 with PHP 8.0.13 and Apache 2.4.51 https://alpinelinux.org/posts/Alpine-3.15.0-released.html
2021-11-14Docker: Move logic to disable FreshRSS updates (#3973)Gravatar Alexandre Alapetite
Should be done during build and not during entrypoint, to avoid modifying a potential volume (e.g. mounting the source code as a volume is used during development).
2021-10-24Fix cron regression (#3933)Gravatar Alexandre Alapetite
#fix https://github.com/FreshRSS/FreshRSS/pull/3927/files#r735146297 The path `/var/www/FreshRSS/` might be a Docker volume, breaking files created there during Docker build
2021-10-24Docker: don't add crontab unless needed. (#3927)Gravatar Chris Francy
Adding the crontab as part of the image build makes it more complicated to add custom entries to the crontab. Adjusting the image and entrypoint to make it so that the crontab is only added when CRON_MIN is set simplifies having a custom crontab.
2021-10-23Improved markdownlint (#3918)Gravatar Alexandre Alapetite
* Improved markdownlint * Relaxed rules slighlty * `npm run markdownlint` for automatic tests * `npm run markdownlint_fix` for automatic syntax fixing * Applied the fixes on all our Markdown files
2021-10-23Remove references to Ubuntu image in Docker/Readme.md (#3917)Gravatar Chris Francy
FreshRSS switched to Debian as the parent For the Image but there were still a couple references in the README to Ubuntu.
2021-08-19Docker with Debian 11 (#3782)Gravatar Alexandre Alapetite
PHP 7.4.21, Apache/2.4.48
2021-08-14Use environment variables (#3756)Gravatar caminsha
* Add .env file for docker-compose (fix #3755) Adding a .env has the advantage that the configuration can be stored in a separate file and it'll be possible to just get the newest docker-compose.yml file. * Update documentation for the .env file * Update Docker/README.md Co-authored-by: Frans de Jonge <fransdejonge@gmail.com> Co-authored-by: Frans de Jonge <fransdejonge@gmail.com>
2021-07-25[docs] fix the cron container terminates upon start (#3718)Gravatar proletarius101
2021-07-24Alpine 3.14 (#3715)Gravatar Alexandre Alapetite
https://alpinelinux.org/posts/Alpine-3.14.0-released.html * Apache updated to Apache/2.4.48 (from 2.4.46) https://downloads.apache.org/httpd/CHANGES_2.4.48 * PHP updated to PHP 8.0.8 (from 8.0.2) https://www.php.net/ChangeLog-8.php#8.0.8
2021-06-07Drop PHP5 and IE11 (#3666)Gravatar Alexandre Alapetite
* Drop PHP5 and IE11 https://github.com/FreshRSS/FreshRSS/discussions/3321 Our Docker :oldest is now based on Alpine 3.5 (2016-12-22) * More uniform * More changelog
2021-03-15Quick update the doc for master renaming to edgeGravatar Alexandre Alapetite
2021-03-04Disable built-in update when using Docker (#3496)Gravatar Alexandre Alapetite
#fix https://github.com/FreshRSS/FreshRSS/issues/3495
2021-02-27Alpine oldest: php5-openssl (#3482)Gravatar Alexandre Alapetite
alpine:3.13 require php5-openssl for some https features. Otherwise, fail on e.g. the extension page: ``` file_get_contents(): php Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /var/www/FreshRSS/app/Controllers/extensionController.php on line 45 PHP Warning: file_get_contents(https://raw.githubusercontent.com/FreshRSS/Extensions/master/extensions.json): failed to open stream: No such file or directory in /var/www/FreshRSS/app/Controllers/extensionController.php on line 45 [error] --- Could not fetch available extension from GitHub ``` Does not seem required for newer Alpine versions using PHP7 / PHP8
2021-02-11Fix nginx config (#3438)Gravatar Creak
* Fix nginx config * Remove `proxy_cookie_path` * Add `proxy_set_header X-Forwarded-Prefix` for the subdirectory config * Add nginx config when hosted as domain root * Add `/` at the end of `proxy_pass`
2021-01-16Docker: Alpine 3.13 with PHP 8 (#3375)Gravatar Alexandre Alapetite
* Docker: Alppine 3.13 with PHP 8 PHP 8.0.1, Apache 2.4.46 Bug https://bugs.php.net/bug.php?id=78681 fixed in Alpine, so workaround removed from our Dockefile(s) Supports MySQL 8+ #fix https://github.com/FreshRSS/FreshRSS/issues/3191 * Changelog * Update CHANGELOG.md Co-authored-by: Frans de Jonge <fransdejonge@gmail.com> Co-authored-by: Frans de Jonge <fransdejonge@gmail.com>
2021-01-11Possiblity to autoinstall in Docker Compose (#3353)Gravatar Alexandre Alapetite
* Possiblity to autoinstall in Docker Compose #fix https://github.com/FreshRSS/FreshRSS/issues/3349 It is simply calling our existing CLI: do-install.php and create-user.php https://github.com/FreshRSS/FreshRSS/tree/master/cli FreshRSS will typically be ready a few seconds before the database, so introduce a tolerance when the database is not available / up (yet) by trying a few times to connect. Also useful to avoid service interruption when DB service is restarted. Example: ```yml freshrss-app: image: freshrss/freshrss container_name: freshrss-app hostname: freshrss-app restart: unless-stopped ports: - "8080:80" depends_on: - freshrss-db volumes: - data:/var/www/FreshRSS/data - extensions:/var/www/FreshRSS/extensions environment: CRON_MIN: '*/20' FRESHRSS_ENV: development FRESHRSS_INSTALL: |- --api_enabled --base_url https://rss.example.net --db-base freshrss --db-host freshrss-db --db-password freshrss --db-type pgsql --db-user freshrss --default_user admin --language en FRESHRSS_USER: |- --api_password freshrss --email user@example.net --language en --password freshrss --user admin TZ: Europe/Paris ``` * Minor type f in find * shellcheck
2021-01-07Docker: Environment variable to change Apache port (#3343)Gravatar Alexandre Alapetite
#fix https://github.com/FreshRSS/FreshRSS/issues/3341 New environment variable `LISTEN='0.0.0.0:8080'` ``` docker run -d --network host --uts host -e LISTEN='0.0.0.0:8080' -e TZ=Europe/Paris --name freshrss freshrss/freshrss ```
2020-12-30Docker new :newest image (#3294)Gravatar Alexandre Alapetite
* Docker new :Edge image New optional Docker image to test upcoming software versions, using Alpine:Edge Similar than https://github.com/FreshRSS/FreshRSS/pull/3274 (oldest image) but for newest. Usefull for e.g. testing PHP8 https://github.com/FreshRSS/FreshRSS/issues/3082 , MySQL 8 https://github.com/FreshRSS/FreshRSS/issues/3191 * Syntax if symlink already exists in future edge * Rename to newest Better match our "Oldest" version, and to avoid conflicts with the potential renaming of our master branch * Update Docker/Dockerfile-Newest Co-authored-by: Frans de Jonge <fransdejonge@gmail.com> Co-authored-by: Frans de Jonge <fransdejonge@gmail.com>
2020-12-12Docker image for oldest supported PHP version (#3274)Gravatar Alexandre Alapetite
Add a Docker file, which can be used to test FreshRSS with our oldest supported PHP version. See https://pkgs.alpinelinux.org/packages?name=php5&branch=v3.4&arch=x86_64 PHP 5.6.36-r0
2020-10-22Docker LogFormat Alpine (#3235)Gravatar Alexandre Alapetite
#fix https://github.com/FreshRSS/FreshRSS/issues/3233 In Alpine, we need to enable mod_logio.c to use %O. Revert to more standard %b https://httpd.apache.org/docs/2.4/mod/mod_log_config.html#logformat
2020-10-16Docker: Use Apache remoteip (#3226)Gravatar Alexandre Alapetite
#fix https://github.com/FreshRSS/FreshRSS/issues/3224 Log the client remote IP instead of the local proxy IP https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html
2020-08-30Remove Docker heathchecks (#3161)Gravatar Jucgshu
* Update Dockerfile Remove heathcheck * Update Dockerfile-Alpine Remove heathcheck * Update Dockerfile-QEMU-ARM Remove heathcheck
2020-08-29More changelog, Docker readmeGravatar Alexandre Alapetite
https://github.com/FreshRSS/FreshRSS/pull/3159
2020-08-29Docker use Debian instead of Ubuntu (#3159)Gravatar Alexandre Alapetite
#fix https://github.com/FreshRSS/FreshRSS/issues/3026 Ubuntu 19.10 has expired. I still cannot get Ubuntu 20.04 to work on ARM (Raspberry Pi) https://github.com/FreshRSS/FreshRSS/pull/2943 Move to Debian 10 Buster instead of our current Ubuntu 19.10 (which was based on Debian 10 Buster).
2020-08-29volume names include redundant prefix (#3108)Gravatar Germs2004
This proposed change includes tweaks to the names of the services and volumes, and adds an explicit label to the postgres and freshrss containers. Using a more generic "freshrss-db" instead of "freshrss_postgresql" seems more standard among other docker projects and makes it a bit easier to switch databases later. Removing the "freshrss_" prefix from the volume names solves a problem where the docker-compose automatically prepends a "project name" to volume names upon running "up". So if your docker-compose.yml file is stored in a folder named "freshrss", you would end up with a redundant volume name of "freshrss_freshrss_data". This also adds a restart policy to the db container.
2020-06-01Docker Alpine 3.12 (#3025)Gravatar Alexandre Alapetite
https://alpinelinux.org/posts/Alpine-3.12.0-released.html With PHP 7.3.18 (from 7.3.17) (and Apache 2.4.43 unchanged). No other significant change spotted
2020-05-25tec: Add a make lint command in the Makefile (#2996)Gravatar Marien Fressinaud
2020-05-14fixes #2931 (#2970)Gravatar Mike Vanbuskirk
2020-05-12Fix Docker FRESHRSS_ENV for cron (#2963)Gravatar Alexandre Alapetite
cron job was not passed the environment variable FRESHRSS_ENV as it should This resulted in messages during cron to not be logged according to FRESHRSS_ENV level
2020-05-06Fix tty error on cron with docker (#2954)Gravatar pofilo
* Fix tty error on cron with docker * remove interactive option in cron command
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-21 00:34:34 +0000