aboutsummaryrefslogtreecommitdiff
path: root/Docker
AgeCommit message (Collapse)Author
2023-12-10Alpine 3.19 (#5933)Gravatar Alexandre Alapetite
https://alpinelinux.org/posts/Alpine-3.19.0-released.html Apache/2.4.58, PHP 8.2.13
2023-11-21Improve filtering of Cron env variables (#5898)Gravatar Alexandre Alapetite
Avoid keeping environment variables used for init. Improvement of https://github.com/FreshRSS/FreshRSS/pull/5795 Spotted when checking https://github.com/FreshRSS/FreshRSS/issues/5894
2023-11-18Fix PHP 7 compatibility strict_types (#5893)Gravatar Alexandre Alapetite
* Fix PHP 7 compatibility https://github.com/FreshRSS/FreshRSS/discussions/5892 * Multiple PHP 7 fixes * PHPStan
2023-11-10Document Traefik PathPrefix (#5845)Gravatar Alexandre Alapetite
2023-11-08Update WebSub documentation a bit (#5829)Gravatar Alexandre Alapetite
* Update WebSub documentation a bit * Marien prefers not to promote his hub too much :-)
2023-11-05Fix FreshRSS logo link on Docker HubGravatar Alexandre Alapetite
The link resolution does not seem to be supported automatically Follow-up of https://github.com/FreshRSS/FreshRSS/pull/5819
2023-11-05Try automatic update of Docker descriptionGravatar Alexandre Alapetite
Follow-up of https://github.com/FreshRSS/FreshRSS/pull/5819
2023-11-05add multi arch docker build (#5808)Gravatar Benjamin Reich
* Add multi arch container build Co-authored-by: EdJoPaTo <rfc-conform-git-commit-email@funny-long-domain-label-everyone-hates-as-it-is-too-long.edjopato.de> Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr> * using label from github action * dont remove static labels and split docker readme in seperate action * pin 3rd party action to a commit * enable pushing to dockerhub * Update .github/workflows/build-images.yml Co-authored-by: EdJoPaTo <github@edjopato.de> * remove not needed checkout * set github token permissions * Update .github/workflows/push-dockerhub-readme.yml * update docker readme to match new tags * Apply suggestions from code review * fix suffix for alpine image * fix suffix for alpine image * push images only at upstream repo * push images only at upstream repo * push images only at upstream repo * tag latest-alpine as alpine * tag latest-alpine as alpine * remove no needed falvor * keep falvor for build * Clean more things * Rename action To use same default name than https://github.com/actions/starter-workflows/blob/main/ci/docker-publish.yml * Rename readme action To use same default name than https://github.com/peter-evans/dockerhub-description/blob/main/.github/workflows/dockerhub-description.yml * Use default name for dockerhub-description https://github.com/peter-evans/dockerhub-description/blob/main/.github/workflows/dockerhub-description.yml Plus minor wording * Experiment with build-args * Debug * Add checkout back * Revert back to metadata-action * Remove quotes in version * Try to fix variables * Experiment with automatic label values again * Delete last Docker Hub hooks * Use only git SHA for org.opencontainers.image.revision https://specs.opencontainers.org/image-spec/annotations/#pre-defined-annotation-keys * Comment out semver for now Might be enabled later if desired * Enable major semver --------- Co-authored-by: EdJoPaTo <rfc-conform-git-commit-email@funny-long-domain-label-everyone-hates-as-it-is-too-long.edjopato.de> Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr> Co-authored-by: EdJoPaTo <github@edjopato.de>
2023-10-31Fix Docker CRON_MIN for env with special characters (#5795)Gravatar Alexandre Alapetite
fix https://github.com/FreshRSS/FreshRSS/issues/5792 regression from https://github.com/FreshRSS/FreshRSS/pull/5772
2023-10-30Require PHP 7.4+ (#5720)Gravatar Alexandre Alapetite
* Require PHP 7.4+ https://github.com/FreshRSS/FreshRSS/discussions/5474 * Update Docker oldest Alpine 3.13 with PHP 7.4.26 * Add missing packets to Docker oldest * Update to typed properties https://php.net/migration74.new-features#migration74.new-features.core.typed-properties * More types
2023-10-29Export all environment variables to cron (#5772)Gravatar Alexandre Alapetite
fix https://github.com/FreshRSS/FreshRSS/issues/5770 Note, the syntax complying with https://www.shellcheck.net/wiki/SC2002 does not seem to work in ash / Alpine
2023-10-28Prepare Alpine OIDC (#5764)Gravatar Alexandre Alapetite
* Prepare Alpine OIDC * Prepare syntax for OpenID Connect in Alpine. * Update :newest Alpine development image to PHP 8.3 * Fix a little bug in test of OIDC_SCOPES * Changelog + syntax * shellchecks
2023-10-27OIDC_SCOPES compatibility colon (#5753)Gravatar Alexandre Alapetite
fix https://github.com/FreshRSS/FreshRSS/issues/5744
2023-10-25Use RemoteIPInternalProxy directive of remoteip Apache module (#5740)Gravatar Mossroy
* Use RemoteIPInternalProxy directive of remoteip Apache module instead of RemoteIPTrustedProxy directive To allow internal IPs to be trusted: for internal clients, and also for the case of chained internal reverse-proxies Fixes #5726 * One last reference forgotten --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2023-10-25Avoid a warning on non-numeric TRUSTED_PROXY en var (#5733)Gravatar Mossroy
* Update entrypoint.sh to avoid a warning on non-numeric TRUSTED_PROXY env var Fixes #5732 5732 * Use POSIX-compatible syntax * Fix POSIX syntax
2023-09-24docker-compose PostgreSQL 16 (#5661)Gravatar Alexandre Alapetite
https://www.postgresql.org/about/news/postgresql-16-released-2715/ Watch out, there are no auto-updates between major versions
2023-09-09Docker MySQL update doc (#5639)Gravatar Alexandre Alapetite
Remove obsolete parameter not needed anymore now that all our images are using PHP 8+
2023-07-30Rework trusted proxies (#5549)Gravatar Alexandre Alapetite
* Rework trusted proxies Fix https://github.com/FreshRSS/FreshRSS/issues/5502 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/3226 New environment variable `TRUSTED_PROXY`: set to 0 to disable, or to a list of trusted IP ranges compatible with https://httpd.apache.org/docs/current/mod/mod_remoteip.html#remoteiptrustedproxy New internal environment variable `CONN_REMOTE_ADDR` to remember the true IP address of the connection (e.g. last proxy), even when using mod_remoteip. Current working setups should not observe any significant change. * Minor whitespace * Safer trusted sources during install Rework of https://github.com/FreshRSS/FreshRSS/pull/5358 https://github.com/FreshRSS/FreshRSS/issues/5357 * Minor readme
2023-07-19Docker: Add DATA_PATH to cron env (#5531)Gravatar Zhaofeng Li
2023-07-16Add OIDC_X_FORWARDED_HEADERS environment variable (fixes #5516) (#5523)Gravatar otaconix
* Add OIDC_X_FORWARDED_HEADERS environment variable (fixes #5516) The mod_auth_oidc needs an additional directive (`OIDCXForwardedHeaders`) in case FreshRSS is running behind a reverse proxy, so it knows what host, protocol and port were used to access it. This information is then used in the `redirect_uri` when directing the user agent (browser) to the identity provider for authentication. Please note that, if you are running FreshRSS behind a reverse proxy that handles TLS, you may need to update your identity provider's configuration so it accepts `https://...` as a `redirect_uri`. * Add link to mod_auth_openidc's documentation for the OIDCXForwardedHeaders Apache configuration directive * Minor spelling --------- Co-authored-by: Stefan Zwanenburg <stefan@zwanenburg.info> Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2023-06-30Allow choosing the OIDC remote user claim and scopes to request from the ↵Gravatar otaconix
identity provider (#5481) * Allow choosing the OIDC remote user claim and scopes to request from the identity provider * Added comment to explain how checking whether an environment variable is set is done * Use apostrophe's instead of single quotes for verb contractions in docs * Move variables used for checking presence of environment variables inside IfDefine block
2023-06-14Docker quiet Apache a2enmod (#5464)Gravatar Alexandre Alapetite
Quiet output for a2enmod, a2dismod, a2disconf, a2dissite, a2ensite to avoid many messages the following, which are not even relevant because Apache is not yet started at this stage: ``` To activate the new configuration, you need to run: systemctl restart apache2 ``` Related to https://github.com/FreshRSS/FreshRSS/pull/5463
2023-06-14Docker: Debian 12 (#5461)Gravatar Alexandre Alapetite
https://www.debian.org/releases/bookworm/ With PHP 8.2.5 and Apache 2.4.57
2023-06-13Fix OpenID Connect crash on ARM (#5463)Gravatar Alexandre Alapetite
Only enable the Apache auth_openidc module when actually used Fix https://github.com/FreshRSS/FreshRSS/issues/5460 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/5351
2023-06-12Add OpenID Connect (#5351)Gravatar Aaron Schif
* Add OIDC * Update documentation. * Update apache conf adding IfModule * Use IfDefine for OIDC in apache conf * Fix non-oidc support * Fix typing * Use IfDefine to enable OIDC * Add OIDC support to all dockerfiles * Re add apache Require option * Fixes and documentation * A few more fixes * A bit more doc * Change type of environment variable * Update readme * Correct apache config for OIDC support. * Fix README formatting * Update oidc control path * Fix oidc endpoint being cached * A bit more review * Simplify ExpiresActive * Add session refresh and improve caching * Allow more different setups * A bit more documentation * A bit more readme --------- Co-authored-by: Aaron Schif <aschif@netdevgroup.com> Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr> Co-authored-by: maTh <math-home@web.de>
2023-06-09Docker example of PostgreSQL tuning (#5446)Gravatar Alexandre Alapetite
Provide example of how to easily tune selected PostgreSQL settings https://wiki.postgresql.org/wiki/Tuning_Your_PostgreSQL_Server
2023-05-28Improve Dev Container (#5423)Gravatar Alexandre Alapetite
* Improve Dev Container PHPStan was failing in Dev Container * Update Docker to Alpine Linux 3.18 * New DATA_PATH environment variable * README
2023-05-10Update Docker image Alpine 3.18 (#5383)Gravatar Alexandre Alapetite
https://alpinelinux.org/posts/Alpine-3.18.0-released.html Minor updates with Apache 2.4.57 and PHP 8.1.19
2023-05-07docs: language table added (#5375)Gravatar maTh
* docs: language table added * Update 05_Configuration.md * Update 05_Configuration.md * french docs * Unicode quote and a few fixes (Same search&replace aslo applied to a few other files) --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2023-03-30Document automated Docker build from git (#5237)Gravatar Alexandre Alapetite
* Document automated Docker build from git Fix https://github.com/FreshRSS/FreshRSS/issues/5236 Contributes to https://github.com/FreshRSS/FreshRSS/issues/4089 * Rolling
2023-03-26[Docker] Listening for IPv6 connections (#5180)Gravatar Rufubi
* Listen for IPv6 connections * Added information about LISTEN6 variable * Make LISTEN variable a comma-separated list of values * Removed debug commands * Revert changes --------- Co-authored-by: Rufubi <>
2023-03-13docs: fix nginx configuration (#5194)Gravatar witchcraze
Update nginx nginx configuration in `Hosted in a subdirectory type.`
2023-03-07Add docker-compose instructions for ARM64 (#5175)Gravatar Rebecca Scott
* Add docker-compose instructions for ARM64 * Update Docker/README.md * Update Docker/README.md --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2023-02-06More robust application of access permissions (#5062)Gravatar Alexandre Alapetite
* More robust application of access permissions We were in particular missing directory traversal `+X` in our current recommendations. Extracted to own shell script so it can easily be invoked. Update access permissions in Docker to account to be more robust. #fix https://github.com/FreshRSS/FreshRSS/discussions/5037 * Minor simplification * Restrict mkdir permissions Default mkdir permissions are 0777, which is not good for security, so downgrade to 0770.
2023-01-19Safer timezone set (#5021)Gravatar Alexandre Alapetite
* Safer timezone set Add missing tzdata in Docker :newest Fallback to UTC if no timezone is defined at all #fix https://github.com/FreshRSS/FreshRSS/pull/4906#issuecomment-1386747169 * Better refactoring Show fallback timezone everywhere
2023-01-11API avoid logging passwords (#5001)Gravatar Alexandre Alapetite
* API avoid logging passwords * Strip passwords and tokens from API logs * Only log failed requests information when in debug mode * Remove debug SHA * Clean also Apache logs * Better comments * Redact also token parameters * shfmt * Simplify whitespace * redacted
2022-12-28chmod +x extensions (#4956)Gravatar Alexandre Alapetite
To ease adding custom extensions such as in https://github.com/FreshRSS/Extensions/issues/37#issuecomment-1363474585
2022-11-30Docker uniform timezone behaviour (#4905)Gravatar Alexandre Alapetite
* Docker Alpine timezone for :newest and :oldest Follow-up of https://github.com/FreshRSS/FreshRSS/pull/4903 Forgot the development images Newest and Oldest * Uniform timezone behaviour * shellcheck * A bit more documentation
2022-11-28Docker Alpine time zone (#4903)Gravatar Alexandre Alapetite
Allow setting the timezone with a `TZ` environment variable in our Alpine-based Docker images just like for our Debian-based Doker images. See https://github.com/FreshRSS/FreshRSS/discussions/4898#discussioncomment-4245991
2022-11-23Docker Alpine 3.17 (#4886)Gravatar Alexandre Alapetite
* Docker Alpine 3.17 Update alternative Docker image to Alpine 3.17 with PHP 8.1.12 (and still Apache 2.4.54) https://alpinelinux.org/posts/Alpine-3.17.0-released.html * Fix developer access rights Put developer in www-data group
2022-11-16Apache TraceEnable Off (#4863)Gravatar Alexandre Alapetite
I have just received an e-mail with a security concern. Although most likely an obsolete concern (old browsers with Java applets), and the Apache team saying that there is no problem, let's disable the TRACE method by default in our Docker images until we hear anybody actually wanting this feature. https://httpd.apache.org/docs/current/mod/core.html#traceenable https://owasp.org/www-community/attacks/Cross_Site_Tracing
2022-11-14Require PHP 7.2+ (#4848)Gravatar Alexandre Alapetite
Drop PHP 7.0- as planned https://github.com/FreshRSS/FreshRSS/discussions/3321#discussioncomment-835704
2022-06-19Docker Alpine updates (#4420)Gravatar Alexandre Alapetite
* Added PHP extensions `php-openssl` (used by PHPMailer) and php-xml (used by SimplePie) * Upgraded dev image `freshrss/freshrss:newest` to PHP 8.2.
2022-06-19Docker entrypoint fix buffering (#4417)Gravatar Alexandre Alapetite
Remove output buffering during auto-install of FreshRSS and auto-creation of the default user. We were only getting outputs at the end of each command, which was a problem for getting errors and progress, for instance when automatically importing a very large OPML
2022-05-31Docker readme volume for extensions (#4397)Gravatar Alexandre Alapetite
* Docker readme volume for extensions Forgotten from https://github.com/FreshRSS/FreshRSS/pull/4320 Keeping https://github.com/FreshRSS/FreshRSS/pull/2837 * Minor whitespace * No extension volume for development
2022-05-30Docker: Alpine 3.16 (#4391)Gravatar Alexandre Alapetite
https://alpinelinux.org/posts/Alpine-3.16.0-released.html Apache 2.4.53, PHP 8.0.19
2022-05-23Custom logo HTML (#4369)Gravatar Alexandre Alapetite
* Custom logo HTML Add option for custom HTML logo/title in the main Web UI view. Can potentially be different per user. #fix https://github.com/FreshRSS/FreshRSS/pull/3830/files#r850472247 * logo_html in main config With new `./data/config.custom.php` to provide custom values before install * Docker documentation * whitespace * Auto relax CSP to allow images for HTML logo * Documentation
2022-04-24Update Docker readme (#4320)Gravatar Alexandre Alapetite
* Update Docker readme #fix https://github.com/FreshRSS/FreshRSS/issues/3351 * A few more headers https://github.com/FreshRSS/FreshRSS/issues/3649 https://doc.traefik.io/traefik/middlewares/http/headers/ * Another docker logs example * More uniform * Minor details
2022-01-08Use typographic quotes (#4133)Gravatar Alexandre Alapetite
* Use typographic quotes * A few fixes * Fix * Fix not saved * Implement feedback * Detail * Revert spoken English fixes Left for a future dedicated discussion * More reverts * Final reverts * Final minor
2022-01-08Fix various typos and spelling errors in documentation, comments and code. ↵Gravatar Thomas Renes
(#4134)
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-11 05:53:49 +0000