Commit Graph
74 Commits
Author SHA1 Message Date
Guillaume 96733f7019 feat(docling): protéger l'API par une clé générée (config.json)
Test / test (push) Canceled after 0s
2026-10-21 09:23:33 +00:00
Guillaume 57341fd621 feat(apps): ajouter Docling (logo)
Test / test (push) Canceled after 0s
2026-10-21 09:17:05 +00:00
Guillaume d3ea2ec934 feat(apps): ajouter Docling (metadata/description.md)
Test / test (push) Canceled after 0s
App Docling pour Open WebUI : extraction des PDF avec lecture des images par un modèle vision Ollama.
2026-10-21 09:15:56 +00:00
Guillaume 1ae28324ee feat(apps): ajouter Docling (docker-compose.json)
Test / test (push) Canceled after 0s
App Docling pour Open WebUI : extraction des PDF avec lecture des images par un modèle vision Ollama.
2026-10-21 09:15:55 +00:00
Guillaume 6ce0790bee feat(apps): ajouter Docling (config.json)
Test / test (push) Canceled after 0s
App Docling pour Open WebUI : extraction des PDF avec lecture des images par un modèle vision Ollama.
2026-10-21 09:15:54 +00:00
Guillaume 956d208b13 Actualiser apps/rustdesk-server/metadata/description.md
Test / test (push) Canceled after 0s
2026-10-01 15:28:34 +00:00
Guillaume adacaa226c Téléverser les fichiers vers "apps/rustdesk-server/metadata"
Test / test (push) Canceled after 0s
2026-10-01 15:19:59 +00:00
Guillaume 431db692c4 Supprimer apps/docker-compose.json
Test / test (push) Canceled after 0s
2026-10-01 15:19:12 +00:00
Guillaume 03951438dc Supprimer apps/description.md
Test / test (push) Canceled after 0s
2026-10-01 15:19:08 +00:00
Guillaume 561ad299e8 Supprimer apps/config.json
Test / test (push) Canceled after 0s
2026-10-01 15:19:03 +00:00
Guillaume 1ddcd026ad Ajouter apps/rustdesk-server/metadata/description.md
Test / test (push) Canceled after 0s
2026-10-01 15:17:09 +00:00
Guillaume 44044848cf Ajouter apps/rustdesk-server/docker-compose.json
Test / test (push) Canceled after 0s
2026-10-01 15:16:27 +00:00
Guillaume 26df50b15d Ajouter apps/rustdesk-server/config.json
Test / test (push) Canceled after 0s
2026-10-01 15:16:05 +00:00
Guillaume c508d50d00 Téléverser les fichiers vers "apps"
Test / test (push) Canceled after 0s
2026-10-01 15:10:27 +00:00
git-hermes 4b21030d28 fix(n8n-sandbox): remove unused port selector (#6)
Test / test (push) Canceled after 0s
Remove the misleading unused host-port setting while preserving internal Docker access on sandbox-api:8080.
2026-09-03 08:40:01 +00:00
git-hermes e2b6a35b26 fix(n8n-sandbox): remove unused port selector
Test / test (pull_request) Canceled after 0s
2026-09-03 10:37:49 +02:00
git-hermes 405524b036 fix(n8n-sandbox): keep Runtipi app status healthy (#5)
Test / test (push) Canceled after 0s
Keep the certificate bootstrap healthy and idle so Runtipi sees all managed containers running.
2026-09-03 08:34:21 +00:00
git-hermes 7a58959869 fix(n8n-sandbox): reset certificate readiness marker
Test / test (pull_request) Canceled after 0s
2026-09-03 10:31:24 +02:00
git-hermes 0a5476793e fix(n8n-sandbox): keep Runtipi app status healthy
Test / test (pull_request) Canceled after 0s
2026-09-03 10:28:42 +02:00
git-hermes 389d4e5b13 docs(n8n-sandbox): clarify post-install setup (#4)
Test / test (push) Canceled after 0s
Document the actual n8n override and optional SearXNG JSON configuration.
2026-09-03 08:06:39 +00:00
git-hermes bb8fdc64ba docs(n8n-sandbox): clarify post-install setup
Test / test (pull_request) Canceled after 0s
2026-09-03 10:03:59 +02:00
git-hermes 349adb2b95 fix(n8n-sandbox): secure runner and expose shared API key (#3)
Test / test (push) Canceled after 0s
Use mandatory HTTPS runner transport, expose the shared n8n API key in Runtipi, and publish tipi_version 2.
2026-09-02 16:07:13 +00:00
Hermes Agent cf81405a3f fix(n8n-sandbox): publish Runtipi update version
Test / test (pull_request) Canceled after 0s
2026-09-02 18:04:57 +02:00
Hermes Agent 95dd642243 feat(n8n-sandbox): expose shared API key in install form
Test / test (pull_request) Canceled after 0s
2026-09-02 17:58:07 +02:00
Hermes Agent 7df02cccdf fix(n8n-sandbox): secure runner HTTP endpoint 2026-09-02 17:46:56 +02:00
Guillaume 05e1056a36 chore(apps): remove macOS metadata (#2)
Test / test (push) Canceled after 0s
Remove tracked apps metadata and prevent it from returning.
2026-09-02 15:34:20 +00:00
Hermes Agent e91b993cad chore(apps): remove macOS metadata
Test / test (pull_request) Canceled after 0s
2026-09-02 17:32:07 +02:00
Guillaume cab772403d fix(apps): place n8n sandbox in app directory (#1)
Test / test (push) Canceled after 0s
Preserve the modern Runtipi YAML compose format and validate both modern and legacy app definitions.
2026-09-02 15:31:38 +00:00
Hermes Agent 0ded9c3a4d fix(apps): preserve modern n8n compose format
Test / test (pull_request) Canceled after 0s
2026-09-02 17:27:56 +02:00
Hermes Agent d24d0c194b fix(apps): normalize environment mappings
Test / test (pull_request) Canceled after 0s
2026-09-02 17:23:48 +02:00
Hermes Agent 8f3b7b3b2b fix(apps): place n8n sandbox in app directory
Test / test (pull_request) Canceled after 0s
2026-09-02 17:22:03 +02:00
Guillaume 267f8b0321 Téléverser les fichiers vers "apps"
Test / test (push) Canceled after 0s
2026-09-02 10:53:17 +00:00
Gui-GosandClaude Opus 4.6 2a6946cac4 refactor(nginx): single www volume with html/ subdirectory
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
- Removed separate html volume, use /var/www as single web root
- Moved html/ content into www/html/
- Updated default.conf root to /var/www/html
- Allows organizing multiple sites under /var/www (html, mon_site, etc.)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 14:39:43 +01:00
Gui-GosandClaude Opus 4.6 5c72b3f3f9 fix(nginx): use correct data/ prefix for volume paths
Test / test (push) Has been cancelled
Runtipi copies app data/ contents to APP_DATA_DIR/data/, not APP_DATA_DIR/.
Without the data/ prefix, Docker creates empty directories instead of
using the actual config files, causing nginx to crash on startup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 14:27:01 +01:00
Gui-GosandClaude Opus 4.6 29ea05eb4d fix(nginx): add required schemaVersion: 2 for env key/value format
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 14:08:51 +01:00
Gui-GosandClaude Opus 4.6 1306d16d42 fix(nginx): internalPort as string + add missing source field
Test / test (push) Has been cancelled
- internalPort: 80 (number) -> "80" (string) to match Runtipi schema
- Added missing source field required for app discovery

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 11:12:26 +01:00
Gui-GosandClaude Opus 4.6 29e8ea918f fix(nginx): add missing logo.jpg for app store discovery
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 11:10:38 +01:00
Gui-GosandClaude Opus 4.6 9e80ff91c3 fix(nginx): align id and service name with folder name
Test / test (push) Has been cancelled
- id: nginx-custom -> nginx (must match folder name for Runtipi discovery)
- tipiVersion: 1 -> tipi_version: 2 (correct key name and version)
- Removed min_tipi_version and $schema fields
- Service name: nginx-custom -> nginx

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 11:08:50 +01:00
Gui-GosandClaude Opus 4.6 430f6e2baa feat(nginx): add hardened nginx app with security improvements
Test / test (push) Has been cancelled
- Rate limiting (10 req/s per IP, burst 20)
- Modern security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
- Request body size limits (50m)
- Fixed header inheritance bug in static files location block
- Removed unused form fields (NGINX_INTERNAL_PORT, NGINX_ENABLE_ACCESS_LOG)
- SSL handled by Runtipi reverse proxy

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 11:00:24 +01:00
Gui-GosandClaude Opus 4.5 698bccf49d refactor(wazuh): use official templates for shared directory
Renovate / renovate (push) Has been cancelled
Test / test (push) Has been cancelled
Extract agent-template.conf and default/agent.conf from official
wazuh/wazuh-manager:4.14.1 image and store them in scripts/templates/.
The init-manager.sh script now copies these files instead of creating
them inline, ensuring consistency with official Wazuh configuration.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 11:33:31 +01:00
Gui-GosandClaude Opus 4.5 c46bf15214 fix(wazuh): create default shared files on first start
Test / test (push) Has been cancelled
When /var/ossec/etc/shared is mounted as an empty volume, create the
required agent-template.conf and default/agent.conf files automatically.
This fixes group creation errors after fresh deployments.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 11:09:23 +01:00
Gui-GosandClaude Opus 4.5 4b93b23606 fix(wazuh): persist agent groups between restarts
Test / test (push) Has been cancelled
Add manager-shared volume to mount /var/ossec/etc/shared for Wazuh
manager, ensuring agent groups are persisted across container restarts.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 10:20:29 +01:00
Gui-GosandClaude Sonnet 4.5 fe952bd43a docs: Remove unnecessary restart step in password change procedure
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Removed step 5 (manual restart via Runtipi interface) from the indexer
password change procedure. In Runtipi, clicking "Mettre à jour" already
restarts the application automatically, making the manual restart step
redundant.

Renumbered subsequent steps:
- Old step 6 → New step 5 (securityadmin.sh)
- Old step 7 → New step 6 (Update env vars)
- Old step 8 → New step 7 (Test passwords)

This simplifies the procedure and avoids confusion for users.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-06 14:26:02 +01:00
Gui-GosandClaude Sonnet 4.5 10299e5475 feat: Add MediaMTX streaming server app
Test / test (push) Has been cancelled
Add MediaMTX 1.15.6 - Modern, ready-to-use media streaming server

Features:
- Multi-protocol support: RTSP, RTMP, HLS, WebRTC, SRT
- Zero configuration required to start
- Automatic protocol conversion
- Built-in recording capabilities (fMP4 format)
- REST API for programmatic control
- Prometheus metrics endpoint
- Low resource consumption (Go-based)

Configuration:
- Main web UI port: 8889 (WebRTC)
- RTSP: 8554, RTMP: 1935, HLS: 8888
- API: 9997, Metrics: 9998
- Optional authentication for API
- Optional stream recording
- Resource limits: 2 CPU / 2GB RAM (limits), 1 CPU / 512MB RAM (reservations)

Volumes:
- recordings: Persistent storage for recorded streams
- config: Configuration files

Use cases:
- IP camera surveillance (RTSP/ONVIF)
- Live streaming events
- Broadcasting (OBS Studio, FFmpeg)
- WebRTC video conferencing
- IoT and drone video transmission

Documentation:
- Complete French documentation in description.md
- Usage examples for OBS, FFmpeg, VLC
- API reference and examples
- Troubleshooting guide

Note: logo.jpg needs to be added manually (see LOGO_README.txt)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-06 13:53:06 +01:00
Gui-GosandClaude Sonnet 4.5 a44b4c51ae docs: Use localhost instead of VOTRE_IP for API test command
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Changed the API password test command to use localhost:55000 instead
of VOTRE_IP:55000 for better clarity since the command is executed
from the server itself via SSH.

This is more consistent with other local testing commands.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-05 11:19:42 +01:00
Gui-GosandClaude Sonnet 4.5 e73b07e2ca docs: Fix docker exec commands to use command substitution instead of wildcards
Test / test (push) Has been cancelled
Docker exec does not interpret wildcards (*) in container names.
Replaced all `docker exec -it wazuh-runtipi_*-container-name` commands
with `docker exec -it $(docker ps --filter "name=container" --format "{{.Names}}")`.

This ensures the commands work correctly on all systems.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-05 11:04:10 +01:00
Gui-GosandClaude Sonnet 4.5 b51ae53262 docs: Simplify API password change steps 3-4
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Merged update and restart steps into one since they're done
together in Runtipi interface (Update then Restart button).

Renumbered step 5 to step 4 (verification).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-04 19:48:38 +01:00
Gui-GosandClaude Sonnet 4.5 796e9f4a93 docs: Simplify API password change to single manual method
Test / test (push) Has been cancelled
Removed the "one-liner" docker exec approach and kept only
the manual method (entering the container).

This is simpler and easier to follow:
1. Enter container
2. View current config with cat
3. Replace password with sed
4. Verify with grep
5. Exit

User preference: keep it straightforward with one clear method
instead of multiple alternatives.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-04 19:45:52 +01:00
Gui-GosandClaude Sonnet 4.5 65f171fe4f docs: Fix sed regex to match password without quotes in wazuh.yml
Test / test (push) Has been cancelled
The actual wazuh.yml file has passwords WITHOUT quotes:
  password: MyS3cr37P450r.*-

But the sed command was searching FOR quotes:
  password: "MyS3cr37P450r.*-"

This caused the sed command to not match and not replace anything.

Fixed by removing quotes from the sed pattern to match the actual
YAML format used by Wazuh.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-04 19:39:06 +01:00
Gui-GosandClaude Sonnet 4.5 810737da6f docs: Replace vi/nano with sed for wazuh.yml password edit
Test / test (push) Has been cancelled
The dashboard container doesn't have vi or nano installed.
Replaced manual editing instructions with automated sed command.

Changes:
- Added one-liner sed command to replace password directly
- Added verification command to check the change
- Kept manual alternative for troubleshooting
- Escaped special characters in regex (. and *)

This makes the password change procedure much simpler and
doesn't require installing additional tools in the container.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-04 19:29:40 +01:00