Repository navigation

lss 2.0 stage 6: app modules - #26

Draft

VectoDE wants to merge 30 commits into

feat/lss-5from

feat/lss-6

Draft

lss 2.0 stage 6: app modules#26
VectoDE wants to merge 30 commits into
feat/lss-5from
feat/lss-6

Commits on Oct 15, 2026
- feat(apps): app modules as hardened Docker Compose stacks behind the web server
  
  VectoDE
  and
  claude
  committed
  e5202b7
- refactor(apps): publish apps through one web_proxy_route helper
  
  VectoDE
  and
  claude
  committed
  be8ecfe
- fix(apps): read the user namespace setting of Docker without jq
  
  VectoDE
  and
  claude
  committed
  5aef352
- fix(apps): Keycloak discovery behind Caddy, Collabora TLS check, Kuma start
  
  VectoDE
  and
  claude
  committed
  c593afa
- refactor(apps): SonarCloud findings in the installers and the certificate helper
  
  VectoDE
  and
  claude
  committed
  084ae8e
- test: expectations for route placeholders with host names
  
  VectoDE
  and
  claude
  committed
  616c6ea
- Merge remote-tracking branch 'origin/feat/lss-5' into feat/lss-6
  VectoDE
  committed
  b401216
- feat(apps): back up app data, check Nextcloud's certificate in Collabora, cover arm64
  
  VectoDE
  and
  claude
  committed
  65b906b
- fix(apps): Matomo idempotency, shared SELinux label for init volumes, S3 body hash
  
  VectoDE
  and
  claude
  committed
  0e3f182
Commits on Oct 16, 2026
- fix(container): retry pulling the images of a Compose project
  
  VectoDE
  and
  claude
  committed
  7137374
- style(minio): name the parameter of _minio_error
  
  VectoDE
  and
  claude
  committed
  2395b2d
- Merge remote-tracking branch 'origin/feat/lss-5' into feat/lss-6
  VectoDE
  committed
  d449ba2
- fix(wordpress): ask the REST API through rest_route and log in without the test cookie
  
  VectoDE
  and
  claude
  committed
  2bda346
- test(integration): trust the root Pebble issues from
  
  VectoDE
  and
  claude
  committed
  f5aea00
- fix(mail): let the Postfix master and Dovecot start their workers under SELinux
  
  VectoDE
  and
  claude
  committed
  4a7b524
- fix(collabora): say who refused the PDF conversion
  
  VectoDE
  and
  claude
  committed
  903a307
- fix(apps): write timer and service units with the real program path
  
  VectoDE
  and
  claude
  committed
  a53ec0b
- fix(modsecurity): stop ModSecurity 3 from refusing every multipart upload
  
  VectoDE
  and
  claude
  committed
  30f2a30
- docs(readme): resource figures of the apps and the office and devops profiles
  
  VectoDE
  and
  claude
  committed
  0a702a1
- fix(matomo): name the installer step that gets no answer
  
  VectoDE
  and
  claude
  committed
  6f4e5bd
- fix(firewall): run ufw again when it loses the iptables race with k3s
  
  VectoDE
  and
  claude
  committed
  c747211
- feat(web): rule exclusions of a route for ModSecurity; Matomo needs 953110 off
  
  VectoDE
  and
  claude
  committed
  f3a7fa3
- docs(readme): app figures as the maxima of every green run
  
  VectoDE
  and
  claude
  committed
  94f9ee1
- fix(mail): keep NoNewPrivileges for Postfix and Dovecot under SELinux
  
  VectoDE
  and
  claude
  committed
  b2d5ea1
- test(apps): the app stacks on arm64 in containers of every other system
  
  VectoDE
  and
  claude
  committed
  3907a3f
- fix(mail): own policy modules for the helpers of postfix.service
  
  VectoDE
  and
  claude
  committed
  ba9188e
- test(profiles): 70 minutes for one run of the profile with every module
  
  VectoDE
  and
  claude
  committed
  98e0fe4
- fix(service): sort the SELinux spawner rules the same in every locale
  
  VectoDE
  and
  claude
  committed
  f1a172a
Commits on Oct 28, 2026
- fix(nextcloud): wait for the entrypoint before occ installs Nextcloud
  VectoDE
  committed
  9ee4807
- fix(pkg): try apt again when an archive cannot be fetched
  VectoDE
  committed
  a724d53

Commits

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 28, 2026