Fixes

• Corrected internal routing and proxy labels for Docker Compose applications and previews to use each service's configured port, with the application port as a fallback.
• Restored the unsaved-changes indicator when switching label management to manual mode by updating Livewire. (#11612, closes #11265)
• Routed Telegram alerts for outdated Traefik versions to the configured topic instead of the main chat. (#11526)
• Corrected the file and directory deletion confirmation text. (#11541)

Improvements

• Ran stuck-resource cleanup in the background at 03:17 each day so it no longer blocked other scheduled tasks.
• Displayed the API token's one-time visibility warning directly beside the generated token.

What's Changed

• fix: update livewire to fix wire:dirty reactivity by @peaklabs-dev in #11612
• fix(ui): typo on storage delete modal by @ShadowArcanist in #11541
• fix(notifications): send traefik outdated alerts to the correct topic id by @DiyRex in #11526

Full Changelog: v4.3.15...v4.3.16

Features

• Added per-domain internal port overrides for applications, Docker Compose services, and preview deployments across Traefik and Caddy. Public domain URLs remained portless, while the UI showed effective ports and warned about unrecognized ports. (#11594)
• Consolidated service database, volume, and directory backups into one page with schedule editing, on-demand runs, combined history, live status, downloads, and imports. (#11574)
• Added domain management and DNS status checks for preview deployments.

Fixes

• Blocked read-only team members from directly invoking protected Livewire mutations for credentials, servers, applications, databases, and security resources. (#11596)
• Preserved every application domain in COOLIFY_URL and COOLIFY_FQDN, including multi-domain configurations with ports. (#11527, fixes #10824)
• Kept stopped containers visible after they reached their restart limit, prevented further automatic restarts, and added retry deployment and container removal actions. (#11566, closes #10624, #10906, and #11521)
• Rejected invalid build-time environment variable names before builds started and reported the offending key with rename guidance. (#11575)
• Prevented unauthorized users from receiving stored private keys and GitHub App secrets in Livewire state.
• Restricted web terminal SSH commands to approved hosts, keys, ports, and options.
• Preserved existing domains when switching an application to Docker Compose and waited for confirmation before loading its Compose file.
• Redirected immediately after resource deletion while cleanup continued after the response.

Improvements

• Improved the Docker Compose editor layout on mobile screens.
• Warned before removing a port required by a service domain.
• Warned that full PostgreSQL restores could overwrite administrator passwords.
• Reduced the remotely callable Livewire API and kept authorization checks on user-facing write actions. (#11578)

What's Changed

• fix(deployments): keep every domain intact in COOLIFY_URL and COOLIFY… by @DiyRex in #11527
• fix(applications): persist restart limit state for stopped containers by @andrasbacsai in #11566
• feat(backups): unify service backup management by @andrasbacsai in #11574
• Validate build-time environment variable names before writing the build .env file by @andrasbacsai in #11575
• refactor(livewire): make data-sync helpers private by @andrasbacsai in #11578
• feat(domains): support per-domain internal port overrides by @andrasbacsai in #11594
• fix(livewire): authorize exposed resource mutations by @andrasbacsai in #11596

New Contributors

• @DiyRex made their first contribution in #11527

Full Changelog: v4.3.14...v4.3.15