Features

• Added a read-only API endpoint to retrieve preview deployment runtime logs by application UUID and pull request ID, with line limits and optional timestamps. (#11884)

Fixes

• Fixed deployment status and metadata processing when remote command output contained leading or trailing whitespace.

What's Changed

• feat(api): expose runtime logs for preview deployments by @andrasbacsai in #11884

Full Changelog: v4.3.22...v4.3.23

Breaking Changes

• Removed host-path configuration for persistent volumes from the UI and API. API requests that include host_path are now rejected.

Features

• Added a pull request settings modal with refresh and deployment controls for preview deployments.
• Added real-time Sentinel synchronization status across server and application views.
• Added separate options to delete local and S3 archives when a volume backup schedule was removed.

Fixes

• Generated separate Traefik rules for comma-separated Docker Compose preview domains, which fixed broken preview routing (#11812, closed #7915).
• Fell back to the system DNS resolver when configured resolvers returned no address records (#11811, closed #11810).
• Preserved whitespace in streamed command output, which prevented Docker Compose argument injection from corrupting Dockerfiles (#11466, closed #11386).
• Preserved pull request filters in deployment history and showed the active filter.
• Redirected team switches to the dashboard to prevent invalid cross-team pages.

Improvements

• Made scheduled tasks, database backups, volume backups, and Docker cleanups execute only once per occurrence across distributed schedulers.
• Improved volume backup execution details and archive actions on mobile devices.
• Simplified persistent storage controls and kept volume actions on one line.

What's Changed

• fix(previews): split compose domains into Traefik labels by @andrasbacsai in #11812
• fix(dns): fall back to system resolver by @andrasbacsai in #11811
• fix(deployments): preserve whitespace in saved command output by @andrasbacsai in #11466
• chore: merge main into next by @github-actions[bot] in #11866

Full Changelog: v4.3.21...v4.3.22

Features

• Made restart limits opt-in for applications, preview deployments, and service applications. Existing resources that still used the previous limit of 10 restarts were reset to unlimited.

Fixes

• Hid application names, server names, deployment URLs, team member emails, and job IDs from the Helper deployment check unless detailed output was explicitly requested.

Improvements

• Updated the supported Traefik patch releases to 3.7.13, 3.6.25, and 2.11.57.

Full Changelog: v4.3.20...v4.3.21

Features

• Added an All option to the log viewer and accepted lines=all across application, database, and service log APIs. The existing -1 value remained available for compatibility.

Fixes

• Fixed scheduled backup deletion for service databases so it kept the database context and returned to the correct backup page.
• Preserved each service component’s stored application or database type when generating Traefik labels.
• Restored hourly Sentinel version checks for enabled, eligible servers while continuing to exclude build servers.

Improvements

• Ran Traefik version checks whenever Coolify checked for updates instead of only once a week.
• Updated Coolify Helper to 1.0.17 and moved the bundled MinIO client to a pinned AIStor release.

Full Changelog: v4.3.19...v4.3.20

Breaking Changes (well not breaking, but kinda, not sure haha)

• Made Sentinel mandatory on regular servers. Existing regular servers were enabled automatically, and the enable or disable setting became read-only in the UI and API. This is mandatory for upcoming features. Sentinel will have a bigger responsibility.

Features

• Restored each user's last active team after login and added a team picker when no saved team was available. (#11503)
• Moved service application and database settings into a modal and added Docker restart-limit settings, including API support for max_restart_count.
• Added indexing, redirect, and hostname regeneration controls to application, preview, and service domain editors.

Fixes

• Prevented duplicate two-factor challenge submissions and redirected stale authenticated submissions instead of returning HTTP 419. (#11223, closed #10670 and #10731)
• Accepted custom usernames in SCP-style SSH Git URLs across source setup, API creation, webhooks, clones, and repository links. (#11685, closed #11686)
• Accepted uppercase letters in existing S3-compatible bucket names. (closed #11536)
• Detected Docker Compose domain conflicts across service domains and treated HTTP and HTTPS forms as the same routing identity.
• Preserved inherited service ports instead of saving them as overrides, and ignored hostless URLs when deployments calculated port overrides.
• Saved Compose environment files atomically to prevent partial writes and truncated files.
• Made the "Restart Limit Reached" email notification toggle work. (closed #11705)
• Distinguished same-named application containers on different servers in the terminal.
• Fixed sidebar preference handling, application domain display, two-factor status display, and duplicate metrics status badges.

Improvements

• Pulled image-based Docker Compose services before stopping the current deployment, which reduced downtime and stopped deployments early when an image pull failed.
• Improved domain editing and queued DNS checks across applications, previews, and services. DNS checks now ran only after relevant hostname or scheme changes.
• Improved mobile application settings navigation, pinned domain save controls, compacted service domain cards, and made view controls consistent.
• Improved the environment variable editor, modal scrolling, button loading states, and backup settings layouts.
• Upgraded Sentinel from 0.0.22 to 1.0.1.

What's Changed

• fix: prevent duplicate 2FA challenge submissions causing HTTP 419 by @PRSFM in #11223
• feat(teams): persist active team and add team selection screen by @adiologydev in #11503
• fix: support generic SSH Git usernames by @Marmelatze in #11685

New Contributors

• @PRSFM made their first contribution in #11223
• @Marmelatze made their first contribution in #11685

Full Changelog: v4.3.18...v4.3.19

Features

• Added configurable alerts when scheduled database backups missed a set number of days. #11433 closed #11425.
• Streamed S3-only volume archives directly to S3 so those backups no longer needed temporary local disk space. #11642
• Added an instance setting for the CDN URL used to serve stored images such as profile avatars and project icons.

Improvements

• Refreshed the UI with WCAG-compliant contrast, a unified surface system, a full-height settings rail, and a rebuilt mobile navigation drawer. #11659 closed #11532.
• Preserved in-progress domain edits across refreshes, stacked domain rows on small screens, and moved preview deployment settings onto the Previews page.
• Paginated service backup history, showed S3 destination details, disabled Backup Now unless the database was running, added search on server resources, and let operators enable Sentinel from its logs page.

Fixes

• Allowed General application settings to be saved when an existing domain used a wildcard. #11683 closed #11641.
• Prevented duplicate Coolify Cloud subscription checkouts and recovered subscriptions after missed or out-of-order Stripe webhooks. #11666
• Preserved PATH in terminal sessions so SSH proxy commands such as cloudflared worked. #11638 closed #11611.
• Stopped the persistent storage PR suffix dropdown from clipping inside the volumes table. #11637 closed #11605.
• Returned scheduled task execution duration as a JSON number so the CLI could parse listings. #11636 closed #11616.
• Persisted S3 storage settings when creating a new volume backup schedule. #11635 closed #11627.
• Cleaned up preview deployments when a pull request closed after its base branch changed. #11634 closed #11609.
• Persisted the Make publicly available setting for service databases. #11633 closed #11345.
• Restored webhook delivery for always-send notifications, including SSL renewal, API token expiry, server force-enable/disable, and Hetzner deletion failures. #11528 closed #11507.
• Raised nginx request header buffers so large Cookie headers no longer returned HTTP 400 before reaching Coolify. #11404 closed #11403.
• Kept modal contents intact across Livewire re-renders instead of dropping the body and leaving a click-blocking overlay. #11294
• Routed Docker Compose domains using each service's ports, stored explicit ports as overrides through the API, and stopped multi-service Compose domains from inheriting the application port.
• Applied the same domain validation rules to the service API as the UI, including wildcards and oversized URLs.
• Limited instance public IP DNS hints to the localhost server so remote servers showed their own addresses.
• Preserved shell negation in sudo-wrapped commands on servers that use a non-root SSH user.
• Deferred inspection of PostgreSQL custom-format backup archives to pg_restore so valid dumps were not rejected.

What's Changed

• fix(notifications): add missing toWebhook methods to notifications by @ousamabenyounes in #11528
• fix(docker): raise nginx request header buffers above the 8k default by @bosund in #11404
• fix(service): persist service database public access by @peaklabs-dev in #11633
• fix(ui): keep modal content across re-renders by @devrim-1283 in #11294
• fix(storage): persist S3 settings for new volume backups by @andrasbacsai in #11635
• fix(terminal): preserve PATH for SSH proxy commands by @andrasbacsai in #11638
• fix(api): return task execution duration as float by @andrasbacsai in #11636
• fix(webhooks): handle closed PRs after base branch changes by @andrasbacsai in #11634
• fix(storage): prevent PR suffix dropdown clipping by @andrasbacsai in #11637
• feat(backups): stream S3-only volume archives directly by @andrasbacsai in #11642
• feat(backups): alert when scheduled backups are missing by @andrasbacsai in #11433
• fix(stripe): prevent duplicate subscription checkouts by @andrasbacsai in #11666
• feat(ui): WCAG contrast pass, neutral oklch surface system, and mobile nav overhaul by @adiologydev in #11659
• fix(application): allow general saves with wildcard domains by @andrasbacsai in #11683

New Contributors

• @ousamabenyounes made their first contribution in #11528
• @bosund made their first contribution in #11404

Full Changelog: v4.3.17...v4.3.18

Fixes

• Corrected notification and deployment log links to use the configured instance URL. #11623
• Cleaned up orphaned helper containers when helper images used unqualified names, nested registry paths, tags, or digests. #11540 closed #11511.
• Preserved Docker restart policies when applications, previews, databases, and service applications were stopped without removing their containers.
• Fixed type errors when stopping applications and adding scheduled tasks.
• Kept Docker Compose domains in sync when noindex settings changed.
• Prevented removed Docker Compose service domains from being regenerated by magic service URL variables.
• Preserved generated Compose variables during bulk environment variable replacement and reported blocked deletions correctly.
• Cleared stale Traefik version data after proxies stopped or changed.
• Prevented invalid repository URLs from producing malformed commit links.

Improvements

• Removed app-only restart-limit enforcement from database resources so databases continued to follow their configured Docker restart behavior.
• Made missing required environment variables directly accessible from a service's disabled Deploy action.
• Hid Coolify-managed Compose variables from the developer environment variable view to prevent accidental edits.

What's Changed

• fix: build notification and deployment log links from the instance url by @peaklabs-dev in #11623
• fix(docker): reap orphaned helper containers regardless of registry by @kashik0i in #11540

New Contributors

• @kashik0i made their first contribution in #11540

Full Changelog: v4.3.16...v4.3.17

Fixes

• Corrected internal routing and proxy labels for Docker Compose applications and previews to use each service's configured port, with the application port as a fallback.
• Restored the unsaved-changes indicator when switching label management to manual mode by updating Livewire. (#11612, closes #11265)
• Routed Telegram alerts for outdated Traefik versions to the configured topic instead of the main chat. (#11526)
• Corrected the file and directory deletion confirmation text. (#11541)

Improvements

• Ran stuck-resource cleanup in the background at 03:17 each day so it no longer blocked other scheduled tasks.
• Displayed the API token's one-time visibility warning directly beside the generated token.

What's Changed

• fix: update livewire to fix wire:dirty reactivity by @peaklabs-dev in #11612
• fix(ui): typo on storage delete modal by @ShadowArcanist in #11541
• fix(notifications): send traefik outdated alerts to the correct topic id by @DiyRex in #11526

Full Changelog: v4.3.15...v4.3.16

Features

• Added per-domain internal port overrides for applications, Docker Compose services, and preview deployments across Traefik and Caddy. Public domain URLs remained portless, while the UI showed effective ports and warned about unrecognized ports. (#11594)
• Consolidated service database, volume, and directory backups into one page with schedule editing, on-demand runs, combined history, live status, downloads, and imports. (#11574)
• Added domain management and DNS status checks for preview deployments.

Fixes

• Blocked read-only team members from directly invoking protected Livewire mutations for credentials, servers, applications, databases, and security resources. (#11596)
• Preserved every application domain in COOLIFY_URL and COOLIFY_FQDN, including multi-domain configurations with ports. (#11527, fixes #10824)
• Kept stopped containers visible after they reached their restart limit, prevented further automatic restarts, and added retry deployment and container removal actions. (#11566, closes #10624, #10906, and #11521)
• Rejected invalid build-time environment variable names before builds started and reported the offending key with rename guidance. (#11575)
• Prevented unauthorized users from receiving stored private keys and GitHub App secrets in Livewire state.
• Restricted web terminal SSH commands to approved hosts, keys, ports, and options.
• Preserved existing domains when switching an application to Docker Compose and waited for confirmation before loading its Compose file.
• Redirected immediately after resource deletion while cleanup continued after the response.

Improvements

• Improved the Docker Compose editor layout on mobile screens.
• Warned before removing a port required by a service domain.
• Warned that full PostgreSQL restores could overwrite administrator passwords.
• Reduced the remotely callable Livewire API and kept authorization checks on user-facing write actions. (#11578)

What's Changed

• fix(deployments): keep every domain intact in COOLIFY_URL and COOLIFY… by @DiyRex in #11527
• fix(applications): persist restart limit state for stopped containers by @andrasbacsai in #11566
• feat(backups): unify service backup management by @andrasbacsai in #11574
• Validate build-time environment variable names before writing the build .env file by @andrasbacsai in #11575
• refactor(livewire): make data-sync helpers private by @andrasbacsai in #11578
• feat(domains): support per-domain internal port overrides by @andrasbacsai in #11594
• fix(livewire): authorize exposed resource mutations by @andrasbacsai in #11596

New Contributors

• @DiyRex made their first contribution in #11527

Full Changelog: v4.3.14...v4.3.15

Fixes

• Fixed standalone Docker destination setup on non-Swarm servers by creating networks with Docker's default bridge driver instead of the Swarm-only overlay driver.

Full Changelog: v4.3.13...v4.3.14

Features

• Added a one-click Executor service template with persistent storage and health checks (#11530).

Improvements

• Served profile avatars and project icons directly from configured S3 storage or an optional CDN, with local routes as a fallback.

Fixes

• Fixed missing service logos in global search and the service catalog by retrying a remote source before showing the default icon.
• Gave Sentinel startup migrations enough time to finish before Docker health checks could restart the container.
• Fixed stale Livewire keys and refresh races that could leave domain, storage, file, log, proxy, and scheduled job controls unresponsive after list changes.
• Preserved PostgreSQL init script identity when files were renamed.
• Rejected single-label hostnames in application and service domains while continuing to accept IP addresses.
• Preserved custom application container names during consistent deployments and removed containers left under legacy generated names.
• Fixed navigation after deleting or converting services, backups, scheduled tasks, sources, storage, and destinations.

What's Changed

• feat(services): add Executor one-click deployment template by @andrasbacsai in #11530

Full Changelog: v4.3.12...v4.3.13

Fixes

• Applied authentication rate limits per real client behind reverse proxies and Cloudflare, preventing visitors from sharing one rate-limit bucket (#11515).
• Reset a server's unreachable counter after a successful connection check, preventing stale failures and false unreachable alerts (#11417, closes #11416).
• Corrected placeholder alignment in code editor fields (#11514, closes #11420).
• Queued Cloud registration verification emails with retries, making delivery more reliable.

What's Changed

• fix(server): reset unreachable_count after successful connection check by @mrcleanandfresh in #11417
• fix(ui): monaco editor placeholder alignment by @peaklabs-dev in #11514
• fix(auth): rate limit by proxy-aware client IP by @peaklabs-dev in #11515

New Contributors

• @mrcleanandfresh made their first contribution in #11417

Full Changelog: v4.3.11...v4.3.12

Features

• Added asynchronous DNS validation for application and service domains.
• Added one-click service templates for HashiCorp Vault and Obsidian LiveSync CouchDB.

Fixes

• Restored proxy connections to project networks after host reboots (#11476, fixes #11436).
• Applied custom Docker options when applications used custom container names, honored selected rollback tags, and respected Compose stop grace periods (#11479, #11480, #11498).
• Restored custom-format PostgreSQL backups with pg_restore (#11481, fixes #11459).
• Removed persistent volumes when deleting application previews (#11455, fixes #11441).
• Made Docker cleanup safe to retry and prevented missing resources from failing deletion (#11463).
• Fixed registry pushes by updating the helper image's Docker CLI, Compose, and Buildx versions (#11461, fixes #11437).
• Fixed service log lookup when Docker label values contained commas (#11477, fixes #11454).
• Allowed system-wide GitHub Apps to work across teams and accepted Coolify CUIDs when updating their private keys through the API (#11453, #11468).
• Allowed teams with unused private keys or system-wide Git sources to be deleted without removing shared sources (#11499, #11500, fixes #11494).
• Restored clickable commit links in deployment logs (#11495, fixes #11482).
• Cleared stale Traefik branch-upgrade warnings after the suggested branch was applied (#11496, fixes #11490).
• Kept private-key edit dialogs working after multiple keys were deleted (#11497, fixes #11487).
• Fixed terminal container selection when identical container names existed on different servers.
• Refreshed service configuration after required environment variables changed.
• Redacted dotted GitHub tokens from exported logs and prevented wide tables from overflowing their containers.

Improvements

• Showed a toast with retry guidance when infrastructure-related Livewire requests failed.
• Distinguished proxy restarts from proxy updates in server status indicators.
• Made stuck-resource cleanup scalable, scheduled it automatically, and made resource deletion metadata updates atomic.

New Contributors

• @erick260392 made their first contribution in #11468
• @iamomiid made their first contribution in #11479

Full Changelog: v4.3.10...v4.3.11

Features

• Added configurable SMTP EHLO domains for instance and team email delivery (#11398, closes #11388).
• Added API endpoints for viewing and updating instance-wide SMTP and Resend settings.
• Added manual upgrade controls to the Updates page and mobile navigation.

Fixes

• Applied the configured sender name and address to SMTP, Resend, test, transactional, and password-reset emails (#11393, closes #6073).
• Respected disabled SMTP encryption in test emails (#11384, closes #5877 and #6442).
• Prevented Proton SMTP from folding long From headers (#11400, closes #11380).
• Restricted API token visibility and revocation to the active team, and stopped expiration warnings for users who had left that team (#11396, closes #11390).
• Persisted the target image and version before container recreation so upgrades kept the installed version aligned (#11401, closes #11389).
• Restored generated Caddy labels for applications with configured domains (#11397, closes #11394).
• Allowed domains to be added to services with an empty Compose environment section (#11407, closes #11381).
• Marked failed or timed-out Docker cleanup executions as finished and recorded their errors (#11408, closes #11383).
• Required explicit confirmation before invitation magic links were redeemed, preventing link scanners and previews from consuming invitations (#11413, closes #11375).
• Aligned team-scoped API responses and project access checks across sources, servers, projects, and environments (#11405).
• Prevented newly introduced static settings from appearing as pending deployment changes after upgrades (#11430, closes #11426).
• Completed local resource deletion even when remote Docker or backup cleanup failed.
• Made team membership, invitation, token revocation, and source deletion changes roll back safely when part of the operation failed.
• Released page scroll locking before destructive confirmation actions ran, preventing stuck interfaces.

Improvements

• Preserved the current page and query parameters when switching teams.
• Showed warnings for pending proxy updates and unavailable Sentinel instances in server status indicators.
• Limited team deletion to owners, assigned an owner to existing ownerless teams, and made blocking resources easier to find from the danger zone.

Full Changelog: v4.3.9...v4.3.10

Release candidate

This is the first release candidate for Coolify v4.4. It is intended for testing and validation before the stable v4.4 release.

Do not use this release candidate in production without appropriate testing. Please report regressions through GitHub Issues.

Changes in next

These notes include only changes currently unique to next compared with main.

OpenID Connect and authentication

• Added first-class OpenID Connect (OIDC) authentication, including discovery, JWKS signing-key resolution, token validation, PKCE support, and identity linking.
• Added OIDC configuration and registration-policy controls to instance settings.
• Added an option to automatically join OIDC users to the root team.
• Improved OAuth login handling and profile indication for SSO accounts.

Integration tokens

• Added team-scoped integration-token management under Security settings.
• Added create, edit, permission, and authorization handling for integration tokens.

Settings and server management

• Improved email-provider configuration and enforced mutually exclusive provider selection.
• Added notification-channel enable/disable handling for Discord, email, Pushover, Slack, Telegram, and webhooks.
• Improved Docker prerequisite and package installation, including Alpine Linux package handling.
• Improved log-drain toggle rollback behavior and SSH multiplexing controls.

Additional improvements

• Improved settings navigation and action-button state handling.
• Updated bundled service templates.
• Added broader automated coverage for OIDC, OAuth registration, integration tokens, email providers, server packages, and related settings.

Comparison: main...next

Features

• Added an instance setting to control forced HTTPS redirects for the dashboard.

Fixes

• Prevented DNS validation from hanging on unresponsive resolvers by adding five-second query timeouts (#11378, closes #11351).
• Preserved active deployments when shared SSH multiplexing connections were refreshed or cleaned up (#11377, closes #11372).
• Restored GitLab push and merge-request deployments that could fail with an HTTP 500 response (#11284, closes #11262).
• Allowed long-running volume backups to run for up to ten hours while preserving custom timeouts on existing schedules (#11358, closes #11273).
• Prevented SSL-enabled database containers from being left stopped during certificate ownership repair and container replacement (#11315, #11352, closes #11312).
• Prevented OAuth provider settings from being erased when OAuth settings were re-seeded (#8210).
• Enforced team-scoped authorization for scheduled tasks, preventing cross-team access and execution (#11239, closes #11238).
• Prevented large bind-mounted files and oversized remote output from exhausting memory while services, tasks, logs, volumes, and configuration were read (#10960).
• Made upgrades recover correctly when status data was temporarily unavailable after restart (#11350, closes #11347).
• Prevented stuck container removal from blocking deployments; cleanup was deferred and retried instead.
• Enabled compression for the dashboard over HTTPS (#10828, closes #10802).
• Corrected S3 error email links so they pointed to the configured instance instead of localhost (#8633).
• Fixed highlighted-button, spinner, and keyboard-shortcut contrast across custom themes (#11279).
• Fixed account menus remaining open after clicking outside an expanded Appearance panel (#11374, closes #11373).
• Centered icon tooltips over their triggers (#11382).

Improvements

• Surfaced pending proxy configuration and outdated Traefik states with actionable warning indicators.
• Made server warnings clearer, improved deployment-log scrolling, and corrected spacing in database backup settings.
• Clarified proxy-label generation choices (#11362).
• Clarified that saving Sentinel settings restarted Sentinel.
• Made database and OAuth seed operations transactional to preserve existing data when seeding failed (#11360).

What's Changed

• feat: add configurable Horizon dashboard access by @SelimSalihovic in #9354
• fix(upgrade): handle missing status after restart by @andrasbacsai in #11350
• fix(databases): redirect stdin for the SSL cert chown by @MarkosTech in #11315
• fix: compress dashboard over HTTPS by @Prains in #10828
• fix(notification): update storage email link in S3 error by @NrwPlay in #8633
• fix(databases): chown SSL certs before container replacement by @andrasbacsai in #11352
• fix(ui): improve highlighted button and spinner contrast by @fsioni in #11279
• fix(webhook): restore GitLab source deployments by @drewmt in #11284
• fix(services): avoid loading bind-mount file contents by @andrasbacsai in #10960
• fix(backups): support long-running volume backups by @andrasbacsai in #11358
• fix(security): enforce team-scoped authorization for scheduled tasks by @HelgeSverre in #11239
• fix(oauth): prevent data loss during OAuth settings re-seed by @ryzenixx in #8210
• fix: wrap seeders in db transactions by @peaklabs-dev in #11360
• chore(ui): improve clarity of generate proxy label options by @peaklabs-dev in #11362
• fix(ui): close account menu on outside click when appearance is expanded by @rohittiwari-dev in #11374
• fix(ui): center icon tooltips over their trigger by @peaklabs-dev in #11382
• fix(ssh): preserve sessions when recycling mux connections by @andrasbacsai in #11377
• fix(dns): time out validation queries after five seconds by @andrasbacsai in #11378

New Contributors

• @SelimSalihovic made their first contribution in #9354
• @MarkosTech made their first contribution in #11315
• @Prains made their first contribution in #10828
• @NrwPlay made their first contribution in #8633
• @fsioni made their first contribution in #11279
• @HelgeSverre made their first contribution in #11239
• @ryzenixx made their first contribution in #8210

Full Changelog: v4.3.8...v4.3.9

Features

• Added configurable HTTPS redirects for service applications across the dashboard, API, and MCP.

Fixes

• Prevented members from accessing deployment, database, service, and other mutable controls, and clarified disabled control styling.
• Fixed confirmation modal checkboxes that generated malformed Livewire bindings (#11335).
• Kept table page-size dropdowns visible and usable near the bottom of the viewport (#11349, fixes #11336).
• Persisted PostgreSQL public-access changes so they no longer reverted after refreshes or proxy restarts (#11348, fixes #11345).
• Corrected Traefik redirect capture groups and selected the proper Docker network for routed Compose applications and services.
• Reconciled proxy networks from running containers, improving routing when cached resource status was stale.

Improvements

• Made GitHub repository and branch selectors searchable and preselected each repository’s default branch.
• Improved active-deployment indicator contrast with solid surfaces in every state.

What's Changed

• fix(modal): use checkbox ids for Livewire bindings by @andrasbacsai in #11335
• fix(postgresql): persist selected public access state by @andrasbacsai in #11348
• fix(table): keep page-size dropdown within viewport by @andrasbacsai in #11349

Full Changelog: v4.3.7...v4.3.8

Fixes

• Created complete PostgreSQL, MySQL, and MariaDB dumps when “All databases” was selected, preserved multi-database selections, and honored the chosen storage when deleting backups (#11331, closes #11325).
• Restored backup pages for applications configured with directory-only backup targets (#11332, closes #11307).
• Made deployment cancellation reliable across the API, MCP, and preview cleanup flows, and advanced the next queued deployment after cancellation (#11330, closes #11327).
• Fixed PostgreSQL and volume backups to S3-compatible storage on servers using non-root SSH users (#11329, closes #11304).
• Preserved ports and existing entries when editing application and service domains or S3 endpoint URLs (#11328, closes #11320).
• Prevented Docker cleanup from accidentally deleting images marked with the coolify.managed=true label (#8831, closes #8822).
• Kept table dropdowns visible and correctly positioned inside scrolling or overflowing containers.

Improvements

• Stored locally uploaded profile pictures and project icons in persistent private storage so they survived upgrades.
• Improved clipboard copying for API tokens and other read-only fields.

What's Changed

• fix(docker): docker cleanup correctly checks the coolify.managed label by @dionvanhecke in #8831
• fix(domains): preserve ports in split URL inputs by @andrasbacsai in #11328
• fix(sudo): preserve substitutions in backup shell commands by @andrasbacsai in #11329
• fix(deployments): advance queue after cancellations by @andrasbacsai in #11330
• fix(backups): render form for directory-only targets by @andrasbacsai in #11332
• fix(backups): honor full dumps and selected storage deletion by @andrasbacsai in #11331

New Contributors

• @dionvanhecke made their first contribution in #8831

Full Changelog: v4.3.6...v4.3.7

Features

• Added full-width and centered page layout preferences.
• Added searchable breadcrumb switching for applications, databases, and services.
• Added an Admin navigation link for root users.
• Added the installed Coolify version to the mobile sidebar.

Fixes

• Correctly marked missing resources as stopped when Sentinel reported a complete empty container snapshot.
• Fixed dropdown sizing and positioning, including trigger-width matching and viewport overflow.
• Fixed horizontal scrolling and row borders in the database backup execution table.
• Displayed a clear empty state when no database backup executions existed.
• Added missing Turkish translations for Authentik and Zitadel sign-in (#9938).
• Improved loading indicator contrast in dark mode.

Improvements

• Replaced page-size selectors with clearer dropdown controls while retaining custom page sizes.
• Sorted resources alphabetically in breadcrumb switchers.
• Refined desktop header borders and breadcrumb search styling.

What's Changed

• fix(lang): add missing keys for Authentik and Zitadel OAuth by @onurdilmen in #9938

New Contributors

• @onurdilmen made their first contribution in #9938

Full Changelog: v4.3.5...v4.3.6

Fixes

• Fixed listboxes and table menus losing their Alpine and Livewire scope during UI updates, preventing dropdown positioning errors and broken menus (#11311; closed #11308, #11309, and #11310).

What's Changed

• fix(ui): prevent floating dropdown Alpine scope errors by @andrasbacsai in #11311

Full Changelog: v4.3.4...v4.3.5

Features

• Added project icons to dashboard cards and shared-variable project views.

Fixes

• Restored clickable deployment-log download actions (#11306; closed #11301).
• Fixed an error that prevented eligible teams’ danger zones from loading (#11305; closed #11303).
• Added subscription access for Coolify Cloud team admins, correctly positioned the mobile account menu, and preserved the server-limit adjustment modal during updates.

Improvements

• Standardized pagination, page-size controls, and responsive filter and sorting menus across resource lists.
• Constrained the deployment log viewer’s desktop height for easier navigation.

What's Changed

• fix(team): prevent danger zone source loading error by @andrasbacsai in #11305
• fix(deployment): restore deployment log download actions by @andrasbacsai in #11306

Full Changelog: v4.3.3...v4.3.4

Features

• Added custom project icons with local and S3-backed storage.
• Added configurable CPU limits for volume-backup compression.

Fixes

• Fixed the What’s New dialog failing to open from the account menu (#11261, fixes #11219).
• Fixed PostgreSQL instances with SSL certificates failing to start because of private-key ownership (#11286, fixes #5450).
• Fixed S3 connection tests using saved settings instead of current form values (#11297, fixes #11289).
• Fixed inconsistent MinIO client versions across Coolify images (#11291, fixes #11288).
• Fixed search-indexing table headers overflowing domain tables (#11275, fixes #11263).
• Fixed Sentinel restarting after it had been disabled (#11298, fixes #11280).
• Allowed more startup time before Coolify health checks marked the container unhealthy (#11299, fixes #11277).
• Fixed databases disappearing from counts and resource operations when different database types shared the same numeric ID (#11300, fixes #11285).
• Fixed Traefik network labels for Docker Compose services without a user-selected network.
• Fixed PostgreSQL custom-format backup uploads being rejected by SQL safety validation.
• Fixed Compose environment variables that referenced themselves becoming uneditable.
• Fixed stopped resources retaining stale running states.
• Fixed deployment logs losing the manually selected follow mode and showing filtered lines.
• Fixed S3 endpoint normalization, validation feedback, and partial numeric host editing.

Improvements

• Made volume and full-database backups faster by using parallel gzip compression when available.
• Prevented deletion of Compose-managed persistent volumes and improved persistent-volume management.
• Improved mobile application links, backup screens, loading states, and validation feedback.
• Clarified application image-retention cleanup options.

What's Changed

• fix(ui): resolve "Could not find Livewire component in DOM tree" on What's New click by @BasimNasserMu in #11261
• fix(database): set PostgreSQL SSL certificate ownership by @andrasbacsai in #11286
• fix(docker): keep MinIO client versions consistent by @JuanTorchia in #11291
• fix(storage): validate S3 connection with current form values by @andrasbacsai in #11297
• fix(domains): prevent search indexing header overflow by @andrasbacsai in #11275
• fix(sentinel): prevent restart after Sentinel is disabled by @andrasbacsai in #11298
• fix(healthcheck): allow more time for Coolify startup by @andrasbacsai in #11299
• fix(resources): preserve records sharing IDs across model types by @andrasbacsai in #11300

New Contributors

• @BasimNasserMu made their first contribution in #11261

Full Changelog: v4.3.2...v4.3.3

Features

• Added a one-click Jean Server template with configurable tokens and allowed origins (#11248).

Fixes

• Allowed long-running backups and scheduled tasks to honor their configured SSH timeouts, including S3 uploads (#11183, closed #8435).
• Restored built-in Coolify database backups and other scheduled jobs whose legacy records used ID 0 (#11249, closed #10623).
• Corrected application and database container memory charts to display megabytes instead of raw bytes (#11247, closed #11246).
• Replaced deprecated Docker stop flags with version-aware options for older and newer Docker engines (#11251, closed #11244).
• Made upgrades wait for the restarted instance and target version before reporting success, including upgrades from older releases.
• Stopped suggesting unconfigured www counterpart domains and corrected domain guidance and mobile domain visibility.
• Prevented nested controls in new-resource cards from accidentally triggering deployment.

Improvements

• Unified application, service, database, and server headings with responsive action menus.
• Made resource, environment, and new-resource cards fully clickable, and displayed domains in resource grids (#11231, #11227).
• Improved API token input and empty states (#11226, #11224).
• Clarified health check wording (#11232).
• Reduced layout shifts and added smoother notification event selector transitions.

What's Changed

• fix(ui): no api tokens state by @peaklabs-dev in #11224
• fix(ui): api token input by @peaklabs-dev in #11226
• fix(ux): make new resource card clickable by @peaklabs-dev in #11227
• fix(ui): resource table rows and cards by @peaklabs-dev in #11231
• fix(ui): healthcheck wording by @peaklabs-dev in #11232
• fix(backups): forward configured timeouts to the ssh timeout wrapper by @himanshu-ntml in #11183
• fix(metrics): convert container memory samples from bytes to MB by @andrasbacsai in #11247
• fix(backups): include id 0 when paging scheduled jobs by @andrasbacsai in #11249
• feat(services): add Jean Server one-click template by @andrasbacsai in #11248
• fix(docker): replace deprecated stop flags with version-aware ones by @andrasbacsai in #11251

Full Changelog: v4.3.1...v4.3.2

Coolify v4.3.1

Features

• Added persistent “Changes pending” warnings to the desktop and mobile navigation bars, including change counts and direct access to configuration differences.

Fixes

• Ensured HTTP Basic Auth updates made through the Applications API regenerated managed deployment labels while preserving custom labels (#11196, closed #11191).
• Fixed a 500 error on volume backup pages when database backup execution logs were present (#11210).
• Removed duplicate borders from CPU and memory metrics tooltips (#11213, closed #11212).
• Repaired environment and project settings page headers (#11204).
• Corrected the German password-reset email translation (#9680).
• Updated error pages to use the correct Coolify-branded background glow.

Improvements

• Redesigned terminal target selection and improved filtering and mobile controls (#11203).

What's Changed

• fix(release): preserve tags when publishing draft releases by @andrasbacsai in #11199
• feat(workflows): add pull request branch management workflow by @ShadowArcanist in #11193
• fix(lang): correct german translation for password reset email by @EchterTimo in #9680
• fix(ui): remove duplicate metrics tooltip border by @nexmoe in #11213
• fix(models): add datetime cast for finished_at in ScheduledDatabaseBackupExecution by @ejscheepers in #11210
• fix(ui): environment settings broken header & project settings header by @yk-sgr in #11204
• fix(ui): terminal page design by @yk-sgr in #11203
• fix(api): regenerate basic auth labels after updates by @drewmt in #11196

New Contributors

• @EchterTimo made their first contribution in #9680
• @nexmoe made their first contribution in #11213
• @yk-sgr made their first contribution in #11204
• @drewmt made their first contribution in #11196

Full Changelog: v4.3.0...v4.3.1

Let us know what you think about the new UI here: #11195

Breaking Changes

• Team members with the Member role became read-only. They could still view team resources and configuration, but could no longer create, update, delete, deploy, start, stop, or otherwise modify resources. Review team roles and promote users who still require write access (v4.2.0).
• State-changing API endpoints began requiring POST; legacy GET requests now return 405 Method Not Allowed. This affected /enable, /disable, /deploy, server validation, application/database/service lifecycle actions, and service-application lifecycle actions (v4.2.0).
• Changed proxy router names for Compose services containing dots or hyphens to use a stable suffix; custom references to previous router names must be updated (#11040).
• Removed confirmation dialogs for deploy, redeploy, and force-deploy actions; these actions began immediately when selected (#11023).

Features

• Added a redesigned interface with clearer navigation, improved domain management, DNS checks, and automatic Cloudflare DNS setup (#11119).
• Added scheduled backups for persistent volumes and directory mounts, with local or S3-compatible storage, retention controls, on-demand runs, history, and API management (#10946, closed #7701).
• Added per-domain search engine indexing controls (#10908).
• Added support for deploying private repositories from self-hosted GitLab instances (#10538).
• Added diagnostics and deployment controls to the Coolify MCP server (#11000).
• Added profile pictures backed by local or S3-compatible storage.
• Added Buzz, Celld, InfluxDB, Stalwart, and Termix one-click services (#11020, #11155, #11103, #10984, #11090).
• Added an early development preview of the next-generation infrastructure experience (#10987).
• Added team-member two-factor authentication status to the team view (#11192).

Fixes

• Fixed S3 storage connections on servers without IPv6 (#11061, closed #11059).
• Fixed backup uploads to S3 endpoints that also resolved to IPv6 (#11028).
• Fixed Compose domains and environment variables for service names containing dots or hyphens (#11040, closed #10658).
• Fixed application duplication, rollback image handling, and protection of sensitive API settings (#11003).
• Fixed errors after deleting GitHub or GitLab source apps (#11105).
• Fixed clearing all resource domains so it no longer caused a type error (#11083, closed #11030 and #11079).
• Fixed www redirects for applications using Traefik.
• Fixed Firefly III health checks (#10475).
• Fixed the top bar appearing beneath open service action menus (#11197).

Improvements

• Simplified new-resource creation with clearer choices and updated icons (#11140).
• Improved dashboard metrics, status visibility, global search, mobile layouts, accessibility, and theme customization.
• Combined database and storage backup schedules into one easier-to-manage page.
• Shared the service template catalog across app nodes and made template downloads more reliable (#11094).
• Reduced LiteLLM's default resource usage (#10698).
• Updated SparkyFitness, OpnForm, and Forgejo service templates (#9927, #10600, #10639).
• Updated Traefik security patch versions and added Traefik 3.7 support (#11029).
• Updated Cloudflare Tunnel to address two critical security vulnerabilities (#11145).

What's Changed

• feat(backups): add scheduled storage volume backups by @andrasbacsai in #10946
• internal stuffs by @andrasbacsai in #10992
• feat(v5): add Inertia React infrastructure management by @andrasbacsai in #10987
• feat: GitLab App source by @MikeChongCan in #10538
• fix(api): secure proxy config, clone volumes, and rollback tags by @andrasbacsai in #11003
• feat(services): add Buzz one-click service template by @andrasbacsai in #11020
• refactor(ui): remove deploy confirmation modals by @andrasbacsai in #11023
• ci(images): add edge tag for v4.x SHA builds by @andrasbacsai in #11022
• fix(traefik): track v3.7 and security patch updates by @andrasbacsai in #11029
• fix(domains): allow clearing resource domains without TypeError by @andrasbacsai in #11083
• feat(services): shared Redis cache for service templates by @andrasbacsai in #11094
• fix(sources): prevent 500 when deleting GitLab/GitHub apps by @andrasbacsai in #11105
• fix(backups): pin all resolved addresses in one CURLOPT_RESOLVE entry by @dwiyantop in #11061
• fix(backups): pin a single bracket-free IP for mc --resolve by @ntwcklng in #11028
• feat(mcp): add resource diagnostics and deployment controls by @andrasbacsai in #11000
• fix(compose): normalize service-name keys for domains and env vars by @andrasbacsai in #11040
• feat(ui): Shadow UI redesign, domain management, and DNS autoconfigure by @andrasbacsai in #11119
• feat(ui): revamp new resource page by @ShadowArcanist in #11140
• chore(docker): bump cloudflared to 2026.7.3 (fixes 2 CRITICAL CVEs) by @JuanTorchia in #11145
• feat(service): add Celld one-click service template by @andrasbacsai in #11155
• feat(resources): add cross-server resource migration (dev-only) by @andrasbacsai in #11165
• feat(servers): add cross-instance server migration by @andrasbacsai in #11075
• fix(service): use the correct health check path for firefly by @halilim in #10475
• feat(service): update forgejo from v8 to v15 by @dasrecht in #10639
• feat(service): add termix template by @ShadowArcanist in #11090
• feat(service): upgrade opnform to v2.0 by @chiragchhatrala in #10600
• feat(service): add InfluxDB by @HeapReaper in #11103
• feat(service): add stalwart mail server by @vlad6tz in #10984
• perf(service): tune litellm defaults to lower RAM/CPU usage by @tiennm99 in #10698
• feat(service): update sparkyfitness from v0.15 to version 1.6.1 by @apedley in #9927
• feat(domains): add per-domain noindex support by @albertorizzi in #10908
• fix(installer): minor grammatical error by @TehBrian in #9209
• v4.3 by @andrasbacsai in #11106
• internal updates by @andrasbacsai in #11187
• internal changes only by @andrasbacsai in #11188
• internal changes by @andrasbacsai in #11189
• feat(ui): show two-factor status of team members by @dimon1936 in #11186
• feat(ui): show two-factor status of team members (#11186) by @andrasbacsai in #11192
• fix(ui): raise top bar above open service actions by @andrasbacsai in #11197

New Contributors

• @MikeChongCan made their first contribution in #10538
• @dwiyantop made their first contribution in #11061
• @ntwcklng made their first contribution in #11028
• @JuanTorchia made their first contribution in #11145
• @chiragchhatrala made their first contribution in #10600
• @vlad6tz made their first contribution in #10984
• @apedley made their first contribution in #9927
• @TehBrian made their first contribution in #9209
• @dimon1936 made their first contribution in #11186

Full Changelog: v4.2.0...v4.3.0

⚠️ Breaking Change

1. Team members with the Member role now have read-only access. They can continue to view team resources and configuration, but can no longer create, update, delete, deploy, start, stop, or otherwise modify resources. Review your team roles before upgrading and promote users who still require write access.

2. State-changing API endpoints now require POST. Legacy GET requests return 405 Method Not Allowed. Update API clients and deploy webhooks that use these endpoints:

• /enable
• /disable
• /deploy
• /servers/{uuid}/validate
• /applications/{uuid}/start
• /applications/{uuid}/restart
• /applications/{uuid}/stop
• /databases/{uuid}/start
• /databases/{uuid}/restart
• /databases/{uuid}/stop
• /services/{uuid}/start
• /services/{uuid}/restart
• /services/{uuid}/stop
• /services/{uuid}/applications/{app_uuid}/start
• /services/{uuid}/applications/{app_uuid}/restart
• /services/{uuid}/applications/{app_uuid}/stop

Features

• Added scheduled persistent-volume and application-storage backups, including retention controls, manual execution, and API schedule deletion. (#10946, fixes #7701)
• Added API endpoints for database, service, and container logs, including optional timestamps. (#6293)
• Added API endpoints to move applications, databases, and services between authorized environments. (#8968)
• Added a configurable Docker registry URL. (#9017)
• Added API management for service applications and service databases, including lifecycle actions and logs. (#9249)
• Added tag management and tag assignment during application, database, and service creation. (#9275)
• Added Hetzner firewall, internal network, and backup options during server creation. (#9646, fixes #9619)
• Added preview deployment settings to application API endpoints. (#10188)
• Added REST API endpoints for listing, creating, inspecting, and deleting destinations. (#10405)
• Added Vultr cloud server provisioning and power controls. (#10533)
• Added an Inngest one-click service template. (#10612)
• Added a per-team toggle for the MCP server. (#10771)
• Added internal endpoint controls with protected DNS resolution for webhooks. (#10835)
• Added DigitalOcean Droplet provisioning. (#10871)
• Added scheduled ClickHouse backups and cloud administration commands.
• Added dedicated server, cloud credential, cloud-init, and private-key management flows.
• Added application settings to application API responses.

Fixes

• Enforced authorization policies consistently across the API and Livewire, restricted sensitive operations to admins, and protected secrets from team members. (#8628)
• Populated Docker Compose domains correctly for applications created through the API. (#9300, fixes #9211)
• Hid sensitive API fields by default while allowing privileged tokens with sensitive-read access to retrieve them. (#9893)
• Prevented force=false deployment requests from incorrectly forcing cache-busting rebuilds. (#9909)
• Ensured closed pull-request previews were cleaned up even when status updates failed. (#10180, fixes #9495)
• Preserved full public Git repository URLs for non-GitHub hosts. (#10274)
• Allowed the source-commit build setting through the application API. (#10551, fixes #10280)
• Limited Grafana-specific service fields to Grafana images. (#10562, fixes #10556)
• Corrected GitHub Enterprise App installation paths. (#10576, fixes #10573)
• Corrected GitHub API URL derivation while preserving custom API URLs. (#10610)
• Corrected Convex origin variables and exposed its HTTP Actions port. (#10646, fixes #7232, #7989)
• Validated invitation magic-link tokens while preserving database-session login flows. (#10651, fixes #10633)
• Accepted underscores in HTTP(S) domain hostnames used by the API. (#10663, fixes #10597)
• Interpolated Railpack build-time environment variables correctly. (#10768, fixes #10736)
• Validated environment-variable keys before saving them. (#10773)
• Preserved deployment-key command metadata without exposing private-key commands in logs. (#10795)
• Hardened database backup imports and file handling. (#10796)
• Aligned resource-creation permissions across the application. (#10799)
• Improved team resource route handling. (#10829)
• Improved storage mount-path handling. (#10831)
• Improved S3 storage selection, validation, and error handling. (#10832)
• Strengthened outbound URL validation. (#10833)
• Corrected additional release regressions and compatibility issues. (#10834, fixes #9204)
• Improved application URL validation and preserved case-sensitive paths. (#10836)
• Avoided invalid service preview environment-variable lookups. (#10837, fixes #10830)
• Isolated Railpack Buildx commands from Docker client environment settings. (#10840, fixes #10769)
• Preserved file-volume state during service parsing. (#10843, fixes #10525)
• Removed Ray debugging hooks from production runtime paths. (#10847, fixes #6407)
• Preserved intentionally empty service environment-variable values. (#10850, fixes #10827)
• Honored skip flags when synchronizing pull-request preview deployments. (#10873, fixes #10870)
• Clarified and enforced build-server hosting restrictions. (#10961, fixes #10898)
• Hardened Vultr provisioning cleanup, cloud-provider retries, Gmail identity normalization, and cloud server status handling.
• Fixed application configuration-change detection after settings updates.
• Fixed backup storage defaults and required valid S3 selections.

Improvements

• Added responsive resource navigation, mobile lifecycle actions, and consistent status badges.
• Improved private-key creation and prevented deletion of keys still used by servers.
• Improved cloud server provisioning by retaining instances awaiting public IP assignment and separating provider checks from SSH checks.
• Updated EspoCRM configuration for version 10 compatibility. (#10848)
• Updated the Alexandrie service template to version 8.10.0. (#10864)
• Updated the Gitea Runner template. (#10566)
• Improved contributor documentation and issue templates. (#8577)
• Updated Laravel, Vite, Symfony, Guzzle, phpseclib, WebAuthn, and NGINX dependencies. (#10665, #10680, #10683, #10710, #10711, #10738, #10739, #10901)

Breaking Changes

• Required POST for state-changing API operations such as start, stop, restart, deploy, enable, disable, and server validation; equivalent GET requests now return 405 Method Not Allowed.

Related issue references:

• (#10872, fixes #5293, #6407, #6488, #6518, #6881, #7232, #7989, #8104, #9204, #9211, #9495, #9619, #9860, #9943, #10280, #10525, #10556, #10573, #10597, #10632, #10633, #10692, #10732, #10736, #10769, #10827, #10830, #10870)

What's Changed

Security & Fixes

• Fixed private submodule authentication during deployments (#8900, fixes #2731)
• Fixed deploy keys overwriting server root SSH keys (#10440, fixes #10203)
• Improved fork pull request safety for preview deployments (#10457, fixes #10342)
• Hardened API token team checks (#10505)
• Improved image, branch, proxy, and deployment input validation (#10501, #10502, #10503, #10504)
• Fixed generated Compose environment variables breaking preview deployments (#10186, fixes #7552)
• Fixed registry image tags being pushed for preview deployments (#10185, fixes #7616)
• Fixed Git repository imports for large repositories (#10528, fixes #5251)
• Fixed GitLab SSH webhook matching with custom ports (#10479, fixes #10450)
• Fixed log copying on non-HTTPS instances (#8942)
• Fixed unsafe HTML showing in the log viewer (#10346, fixes #10345)
• Fixed deployment and container log timestamps to use the server timezone (#10165, fixes #8003)
• Fixed in-progress form edits being wiped by live updates (#10321, fixes #6062, #6354, #9695)
• Fixed skipped service database backup links (#10527, fixes #10526)
• Fixed S3 backup storage validation before scheduling (#10389)
• Fixed current team deletion errors (#10353, fixes #10351)
• Fixed self-hosted server cleanup preserving server IPs (#10480, fixes #10471)
• Fixed API server private key updates (#10416)
• Fixed SSH usernames with dots (#9951)
• Fixed stale page loading cloak after navigation (#10518, fixes #10506)
• Fixed password field keyboard focus order (#10519, fixes #10486)
• Fixed Railpack Buildx cache metadata persistence (#10511, fixes #10507)

New Services & Templates

• Added Healthchecks as a one-click service (#10335)
• Fixed Garage startup by using the correct RPC secret length (#10425)
• Updated Chatwoot support for private API inbox webhooks (#10426)
• Fixed Hermes Agent with Web UI image tag (#10445)
• Updated Gitea runner to v1.0.7 (#10500)
• Fixed ownCloud trusted-domain login issues (#10508, fixes #9944)

Improvements

• Made exposed ports optional for portless apps (#9182, fixes #9170)
• Added configurable application restart loop limits (#9231, fixes #8669)
• Added standalone database health check settings (#10481, fixes #10444)
• Added resource details with easier access to UUIDs (#9756)
• Added destination resource listings (#9757)
• Added environment variable search (#10421, fixes #10413)
• Moved Sentinel into its own tab and improved metrics refresh (#9544)
• Improved the configuration changes modal for redeployments (#10461, fixes #10367)
• Added scrollable modals for smaller screens (#9647, fixes #9618)
• Kept long-running terminal sessions connected (#10482)
• Added mobile terminal controls (#10498)
• Added custom Docker DNS option support (#10516)
• Improved the GitHub App setup flow (#10524)
• Updated the team invitation flow (#10510)

What's Changed

• fix(livewire): stop broadcast handlers from wiping in-progress form by @adiologydev in #10321
• fix(service): set correct image tag for hermes-agent-with-webui by @ShadowArcanist in #10445
• fix(service): Chatwoot Support allowlisted private API inbox webhooks by @kunumigab in #10426
• chore(deps): bump symfony/polyfill-intl-idn from 1.37.0 to 1.38.1 by @dependabot[bot] in #10442
• chore(deps): bump ws from 8.19.0 to 8.20.1 in /docker/coolify-realtime by @dependabot[bot] in #10424
• fix(team): prevent 500 when deleting the current team by @Firsak in #10353
• fix(webhook): skip preview deployments for fork PRs by @ShadowArcanist in #10457
• fix(webhook): match GitLab SSH repos with custom ports by @andrasbacsai in #10479
• fix(cleanup): preserve self-hosted server IPs by @andrasbacsai in #10480
• feat(database): configure standalone health checks by @andrasbacsai in #10481
• fix(terminal): keep long-running sessions connected by @andrasbacsai in #10482
• fix(backups): validate S3 storage before scheduling by @andrasbacsai in #10389
• fix(deployments): filter generated compose service env vars by @andrasbacsai in #10186
• feat(terminal): add mobile shell controls by @andrasbacsai in #10498
• chore(deps): bump ws from 8.19.0 to 8.20.1 in /docker/coolify-realtime by @dependabot[bot] in #10456
• fix(deployments): skip registry image tag for previews by @andrasbacsai in #10185
• fix(git): ensure ssh credentials are propagated to submodule operations by @andrasbacsai in #8900
• fix(api): validate token team context by @andrasbacsai in #10505
• Improve proxy configuration validation by @andrasbacsai in #10503
• Improve application branch validation by @andrasbacsai in #10502
• Improve application image validation by @andrasbacsai in #10501
• Improve deployment input handling by @andrasbacsai in #10504
• chore(service): Update Gitea runner image to version 1.0.7 by @Twest2 in #10500
• fix(service): Garage doesn't start due to RPC secret being wrong length by @derdaele in #10425
• feat(service): add Healthchecks as a service by @viticodotdev in #10335
• Update team invitation flow by @andrasbacsai in #10510
• fix(deploy): persist Railpack Buildx metadata by @andrasbacsai in #10511
• fix(forms): focus password fields before visibility toggles by @andrasbacsai in #10519
• fix(navigation): remove stale cloak after Livewire navigation by @andrasbacsai in #10518
• Improve GitHub App setup flow by @andrasbacsai in #10524
• fix(service): owncloud login doesn't work by @abesmon in #10508
• fix(ui): configuration changes modal doesn't go away after redeployment for git based compose apps by @ShadowArcanist in #10461
• fix(dev): testing host downloads wrong arch docker binaries on linux by @ShadowArcanist in #10462
• fix(logs): use server timezone in deployment and container logs by @ShadowArcanist in #10165
• feat(ui): add resource details view by @ShadowArcanist in #9756
• feat: support --dns custom Docker option by @tikimo in #10516
• feat(application): make ports_exposes optional for portless apps by @ShadowArcanist in #9182
• feat(applications): add configurable restart loop limit by @ShadowArcanist in #9231
• feat(ui): move sentinel to new tab by @ShadowArcanist in #9544
• feat(destination): show resources that are deployed on the destination by @ShadowArcanist in #9757
• fix(modal): add missing scrolling behavior for better user experience… by @JanThiel in #9647
• fix(server): allow dots in ssh username by @ShadowArcanist in #9951
• fix(ui): models and slide-overs to use the same Close (x) icon button styles by @gianpaj in #9393
• fix(logs): handle missing clipboard API in non-HTTPS contexts by @devrim-1283 in #8942
• fix(scheduled-jobs): link skipped service database backups by @andrasbacsai in #10527
• fix(git): force HTTP/1.1 for repository imports by @andrasbacsai in #10528
• fix(logs): html tags is removed in log viewer by @alexzvn in #10346
• feat(ui): add search functionality for environment variables by @rohittiwari-dev in #10421
• fix(api): apply private_key_uuid in update_server by @yaroslavnovykov in #10416
• fix(git): write deploy key to per-deployment path, not root's id_rsa by @ofaruksahintr in #10440
• v4.1.2 by @andrasbacsai in #10452

New Contributors

• @Firsak made their first contribution in #10353
• @viticodotdev made their first contribution in #10335
• @abesmon made their first contribution in #10508
• @tikimo made their first contribution in #10516
• @JanThiel made their first contribution in #9647
• @gianpaj made their first contribution in #9393
• @yaroslavnovykov made their first contribution in #10416
• @ofaruksahintr made their first contribution in #10440

Full Changelog: v4.1.1...v4.1.2

What's Changed

Security & Fixes

• Restricted source and private key selection to the current team (#10348)
• Restricted environment deletion to the current team (#10349)
• Restricted server and network selection to the current team (#10352)
• Fixed source selection during repository setup (#10354)
• Hardened API token permission handling (#10355)
• Fixed service pages opening in the correct project and environment (#10358)
• Matched manual webhooks to the exact repository only (#10361)
• Improved GitHub App setup, installation, and reinstall flow (#10362)

New Services & Templates

• Added Cloudflare DDNS template (#8099)
• Added EMQX service template (#9568)
• Added OpenObserve template (#10279, closes #6328)
• Added Hermes Agent and WebUI one-click service (#10283)

Improvements

• Pinned Ryot, Jellyfin, Audiobookshelf, Grocy, and Mealie to stable image versions (#10116)
• Updated Gitea Runner to v1.0.6 (#10282)
• Improved the configuration changes modal readability and spacing (#10365)

What's Changed (Github)

• fix(source): scope private key and source selection to current team by @andrasbacsai in #10348
• fix(destination): scope server and network selection to current team by @andrasbacsai in #10352
• fix(environment): scope DeleteEnvironment lookups to current team by @andrasbacsai in #10349
• Fix source selection flow by @andrasbacsai in #10354
• Harden token permission handling by @andrasbacsai in #10355
• Refine service resource routing by @andrasbacsai in #10358
• fix(webhook): match manual webhook repositories exactly by @andrasbacsai in #10361
• fix(github): improve GitHub App setup and installation flow by @andrasbacsai in #10362
• fix(ui): improve configuration changes modal values, colors and spacing by @ShadowArcanist in #10365
• feat(templates): add Hermes Agent + WebUI one-click service by @toanalien in #10283
• chore(service): bumped gitea-runner version by @michalzarddev in #10282
• feat(service): add openobserve template by @afurculita in #10279
• feat(service): add EMQX by @MohmmadQunibi in #9568
• feat(template): add cloudflare-ddns template by @nktnet1 in #8099
• chore(service): pin services to static version instead of using latest tag by @kiterwork in #10116
• v4.1.1 by @andrasbacsai in #10357

New Contributors

• @toanalien made their first contribution in #10283
• @afurculita made their first contribution in #10279
• @MohmmadQunibi made their first contribution in #9568
• @kiterwork made their first contribution in #10116

Full Changelog: v4.1.0...v4.1.1

Features

• Added Railpack as a beta build pack option with build-time environment support, config merging, examples, and deployment smoke coverage (#9117, resolves #5282).
• Added configurable application stop grace periods for manual stops, previews, and deployments (#9746, fixes #5620).
• Added structured audit logging for API mutations, webhook events, authentication, and authorization outcomes (#9842).
• Added per-server configurable SSH connection timeouts and exposed the setting through the API and UI (#9844).
• Added deployment skipping for webhook commits and PR/MR titles containing [skip ci] or [skip cd] (#9861).
• Added instance-level MCP support with read-only tools for Coolify resources and API/UI enablement controls (#9862).
• Added application deployment configuration diff tracking so pending changes and build-impacting changes are surfaced before redeploy (#10183, fixes #8357).
• Added a collapsible sidebar with persisted state, tooltips, and a compact team menu (#9945).
• Added a Gitea runner service template (#9961).

Fixes

• Fixed OAuth user matching by normalizing email addresses before lookup (#9488, fixes #9487).
• Fixed SMTP notification validation by setting a default encryption value (#9543).
• Fixed database backup max storage validation to allow decimal values (#9801, fixes #9794).
• Fixed Dockerfile build pack builds by using BuildKit-supported host networking (#9811, fixes #9804).
• Fixed generated HEX magic environment secrets so encoded values have the expected length (#9820).
• Fixed server reachability notifications by dispatching them through an event path without blocking retry loops (#9843, fixes #9830).
• Fixed large file-volume editing in the UI by blocking editable payloads over 5 MiB (#9851, fixes #4701).
• Fixed deployment commit resolution to use the application git_commit_sha when no commit is explicitly provided (#9865, closes #9204).
• Fixed database imports to allow .dmp files (#9869).
• Fixed invalid or undecryptable Sentinel tokens by regenerating them automatically (#9874).
• Fixed scheduled task server resolution when relationships are missing (#9922, fixes #9916).
• Fixed preview image tags so different commits on the same PR do not reuse shared tags (#10066, fixes #5538).
• Fixed custom nginx configuration updates from the API by correctly decoding payloads and supporting clearing the value (#10067, fixes #9975).
• Fixed API token expiration warnings so sent-warning state persists and failed notifications can retry (#10184).
• Fixed terminal reliability with heartbeat handling, idle timeouts, reconnect replay, and preserved scrollback.
• Fixed deployment and log views so auto-scroll pauses when users scroll up and resumes at the bottom.
• Fixed realtime server dependencies by replacing Axios with the native HTTP client (#10065).
• Fixed nginx Docker images to use patched official packages and HTTPS package repositories (#10026).
• Fixed Docmost templates to require a mail driver before startup.

Improvements

• Improved Railpack behavior with Docker buildx validation, safer shell argument handling, scoped build-time variables, better port handling, and updated helper versions (#9117, resolves #5282).
• Improved MCP resource listing performance and changed enable/disable routes to POST for state-changing actions (#9862).
• Improved standalone database lookup coverage for KeyDB, Dragonfly, and ClickHouse (#9862).
• Suppressed noisy Horizon failed-job entries for expected deployment and timeout failures on cloud instances (#9871).
• Synced service templates from next and disabled the stale LiteQueen template (#9884, #10006).
• Bumped follow-redirects in the realtime Docker package to 1.16.0 (#9690).
• Bumped phpseclib/phpseclib to 3.0.52 (#9952).
• Improved Vite dev-server host, port, and CORS configuration for local development.
• Improved collapsed sidebar spacing, deployment indicator alignment, and environment-variable dirty indicators.

Breaking Changes

• Removed the deprecated Docker Compose application API endpoint; service creation should use POST /api/v1/services instead.
• Changed MCP enable/disable endpoints from GET to POST (#9862).

What's Changed

• fix: normalize oauth emails before matching users by @tristanbob in #9488
• fix(validation): allow decimals for database backups max storage by @ShadowArcanist in #9801
• fix: use --network host for Dockerfile buildpack builds by @nehemiyawicks in #9811
• build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docker/coolify-realtime by @dependabot[bot] in #9690
• feat(observability): add structured audit log channel for API and webhook events by @andrasbacsai in #9842
• fix(server): reliably dispatch reachability notifications via event by @andrasbacsai in #9843
• feat(server): add configurable SSH connection timeout per server by @andrasbacsai in #9844
• fix(storages): block UI editing of file volumes exceeding 5 MiB by @andrasbacsai in #9851
• feat(webhook): skip deployment on [skip ci]/[skip cd] commit markers by @andrasbacsai in #9861
• docs(design): migrate design system from .ai/ to DESIGN.md by @andrasbacsai in #9863
• fix(deployments): use app git_commit_sha when commit not explicitly set by @andrasbacsai in #9865
• fix(backup): add .dmp to allowed extensions for database import by @odinfono in #9869
• fix(notifications): set default SMTP encryption value to prevent false validation error by @ShadowArcanist in #9543
• chore(templates): sync service-templates from next by @andrasbacsai in #9884
• fix(sentinel): auto-regenerate invalid or undecryptable tokens by @andrasbacsai in #9874
• feat(horizon): suppress failed job entries for deployment/timeout errors on cloud by @andrasbacsai in #9871
• feat(mcp): add instance-level MCP server toggle via API and UI by @andrasbacsai in #9862
• fix(scheduled-task): guard against undefined relationships in server() method by @andrasbacsai in #9922
• feat(ui): add collapsible sidebar with tooltip and team menu by @andrasbacsai in #9945
• fix(magic env) HEX secrets creating double the length of their name by @yipfram in #9820
• fix(docker): use HTTPS for nginx apk repository by @andrasbacsai in #10026
• feat(buildpack): add railpack as a build pack option by @adiologydev in #9117
• build(deps): bump phpseclib/phpseclib from 3.0.51 to 3.0.52 by @dependabot[bot] in #9952
• fix(realtime): remove axios dependency by @andrasbacsai in #10065
• chore(service): disable litequeen by @ShadowArcanist in #10006
• feat(service): gitea runner by @michalzarddev in #9961
• fix(deployment): include commit in preview image tags by @andrasbacsai in #10066
• fix(applications): decode custom nginx API payloads by @andrasbacsai in #10067
• feat(applications): add configurable stop grace period by @hendricius in #9746
• fix(api-tokens): persist expiration warning state by @andrasbacsai in #10184
• feat(deployments): track application configuration diffs by @andrasbacsai in #10183
• v4.1.0 by @andrasbacsai in #9841

New Contributors

• @tristanbob made their first contribution in #9488
• @nehemiyawicks made their first contribution in #9811
• @odinfono made their first contribution in #9869
• @michalzarddev made their first contribution in #9961

Full Changelog: v4.0.0...v4.1.0

Finally releasing v4.0.

It was long overdue because we have been in beta for a long time. Thousands of companies and people have been using Coolify in production for 1-2 years.

Of course, this does not mean it has no bugs, it has many, but we fix them every day.

v5 is coming together, but we are not rushing it.

The biggest feature will be full scalability in the core, so you will have cloud infrastructure, but with your own servers.

I already have a working solution for the core and it is soo cool. Can't wait to start showing them to you.

By the way, doing v5 does not mean we won't continue to support v4.
We just want to push what is possible with servers and automations.

Thank you to everyone who helped me reach this point 💜

Let's make cool stuff! 🫰

So the release notes:

What's Changed

Security & Fixes

• Fixed Rallly service environment variable defaults (#9041, fixes #9615)
• Fixed Logto upgrade failure caused by missing database migration step (#9376)
• Fixed Jitsi Meet not working — rebuilt template with stable image and proper UDP/secrets (#9594, fixes #4813)
• Fixed Twenty deployment failure from unhealthy worker dependency (#9603, fixes #9574)
• Fixed mobile info popup not opening on tap and bubbling clicks to parent (#9809, closes #4834)
• Fixed SPA navigation race conditions causing stale state, broken buttons, and unsaved changes (#9742, closes #9732)

New Services & Templates

• Added Cap captcha service template (#9729)
• Re-enabled Plane service with updated docker-compose (#9641, fixes #8338)
• Updated Beszel and Beszel Agent to 0.18.7 (#9775)
• Disabled Cal.com template — project went closed source (#9776)

Improvements

• Added healthcheck to Langfuse worker (#9772)

What's Changed (Github)

• fix(navigation): replace wire:navigate.hover with wire:navigate by @andrasbacsai in #9742
• fix(helper): stop info icon click from propagating to parent on mobile by @andrasbacsai in #9809
• feat(service): disable calcom by @ShadowArcanist in #9776
• chore(service): update beszel to 0.18.7 by @ShadowArcanist in #9775
• feat(service): add healthcheck to langfuse-worker by @GauthierPLM in #9772
• feat(services): add Cap to templates by @tiagozip in #9729
• feat(service): enable plane by @DarkMaper in #9641
• fix(service): twenty fails to deploy due to dependency unhealthy by @ShadowArcanist in #9603
• fix(service): Jitsi Meet doesn't work by @miqonee in #9594
• fix(service): add missing database alteration step for Logto latest image by @FabioHAraujo in #9376
• fix(service): rally invalid next public url by @zupolgec in #9041
• v4.0.0 by @andrasbacsai in #9818

New Contributors

• @tiagozip made their first contribution in #9729
• @DarkMaper made their first contribution in #9641
• @miqonee made their first contribution in #9594
• @zupolgec made their first contribution in #9041

Full Changelog: v4.0.0-beta.474...v4.0.0