RocketQuack
4e5f84fa29
chore: remove comments about why BuildKit is being used to parse apps.json
2026-04-15 13:52:31 +02:00
OmarElaraby26
ae275df161
fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount
...
APPS_JSON_BASE64 is stored in image layer metadata, permanently exposing
private repo tokens (GitHub PATs) to anyone with image pull access.
Replace --build-arg with --mount=type=secret so that apps.json is only
available during the RUN step and never committed to any layer.
Refs: https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
2026-04-05 22:24:53 +02:00
Trusted Computer
51e3fa8a46
fix: copy security_headers.conf before chown
2026-03-24 18:48:20 -07:00
Rocket-Quack
00c3475943
build(docker images): add nginx security headers snippet in production and custom images
2026-03-17 15:54:01 +01:00
Trusted Computer
2c43d34646
feat: add chromium pdf generator support
2026-02-19 09:10:18 -08:00
trustedcomputer
8b3def7162
feat: add chromium pdf generator support
2026-02-16 06:51:59 -08:00
Daniel Radl
7784c78fb7
Merge pull request #1802 from david-loe/patch-1
...
Update Python and Node.js versions in Containerfile
Drop frappe `v14` compatibility
2026-02-07 17:07:05 +01:00
david-loe
4de2ce5307
Update FRAPPE_BRANCH to version-16
2026-02-07 09:57:45 +01:00
david-loe
abd0554e65
changed _V14 to _PREV
2026-02-07 09:56:19 +01:00
RocketQuack
99d9a1dc38
feat: add nginx-proxy with acme companion as an alternative to traefik ( #1800 )
...
* refactor: move core nginx files into more recognizable folder structure
* chore: include HTTPS_PUBLISH_PORT in example .env
* feat: add nginx-proxy and acme-companion compose overrides
* docs: add NGINX_PROXY_HOSTS to example.env
* docs: add nginx-proxy overrides
* docs: split docs, variables for usage of traefik or nginx-proxy
* docs: update override notes for traefik proxy on separate stack
* docs: split TLS/SSL overview and add own caddy guide
* docs: add nginx-proxy + acme companion guide
* docs: add nginx-proxy and acme single-server setup guide
2026-02-06 09:56:28 +05:30
david-loe
4a29d63c52
Update Frappe branch version to 16
2026-01-31 09:08:17 +01:00
david-loe
fbf00c802d
Update Python, Node, and Frappe versions in Containerfile
2026-01-31 09:06:00 +01:00
david-loe
30efa35347
Update Python and Node.js versions in Containerfile
2026-01-30 16:48:12 +01:00
Akhil Narang
e30f03ccba
fix: use python 3.14 and node 24 for bench image
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-24 18:23:52 +05:30
Copilot
a5d472ba89
Fix MIME type detection by adding media-types package to Docker images ( #1725 )
...
* Initial plan
* Add media-types package to fix MIME type detection in Docker images
Co-authored-by: ankush <9079960+ankush@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: ankush <9079960+ankush@users.noreply.github.com>
2025-10-21 12:47:23 +05:30
gp
31ed5daa68
chore: Update EOL NodeJS to 20.19.2 ( #1638 )
2025-05-29 17:33:28 +05:30
Md Hussain Nagaria
0f57e9815e
chore: change short link
2025-04-21 18:27:22 +02:00
Revant Nandgaonkar
02e24c9d2d
build: add pkg-config deb package in build layer ( #1590 )
...
* build: add pkg-config deb package in build layer
* ci: only use tonistiigi/binfmt for image push
* revert: arm64 builds
* ci: copy build_bench to docker-build-push
* ci: set driver-opts network=host for buildx action
2025-03-15 19:07:33 +05:30
Revant Nandgaonkar
a919f44505
docs: quick build command ( #1500 )
...
* docs: quick build command
* chore: fix pre-commit lint for md file
2024-10-27 14:45:41 +05:30
Revant Nandgaonkar
8ac69bb501
feat: allow layered custom image build ( #1497 )
...
speed up build time
pull builder image
pack built assets into base image
2024-10-25 14:08:24 +05:30
Revant Nandgaonkar
727ce423ec
chore: add link to FAQ in production container ( #1493 )
...
* chore: add link to FAQ in production container prompt
* chore: add message link to FAQ in production container
* docs: add link to FAQ in README
2024-10-15 11:38:00 +05:30
gp
9af0cfdf81
Fix: LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format ( #1435 )
2024-07-22 13:45:50 +05:30
gp
74b2bca9bf
Fix: WARN: FromAsCasing: 'as' and 'FROM' keywords' casing do not match ( #1426 )
2024-07-04 02:49:10 +05:30
Sudhegan Shyam
3b0ffc3bb9
add build library for arm64 binaries ( #1379 )
...
* add build library for arm64 binaries
* update git ignore
* move arm64 lib to base layer
2024-04-26 04:46:07 +05:30
Dhafer Soudani
76a3d5df80
fix: add missing file package for bench restore ( #1359 )
...
Co-authored-by: dhafer <dhafer.souadni@ensi-uma.tn>
2024-03-22 11:27:00 +05:30
HENRY Florian
e582a2448d
fix: add file cmd because restore bench need it since frappe commit: 50d21677b872ff89d2912c7b57467757a35f549a ( #1343 )
2024-02-29 17:45:56 +05:30
0xD0M1M0
961453812c
fix: Fix gpg and less ( #1321 )
...
* fix: Add gpg and less
Add gpg so backup "bench --site yoursite.com backup --with-files --compress" does not fail if encryption is enabled
Add "less": fixes #1301
* fix: Add gpg and less
Add gpg so backup "bench --site yoursite.com backup --with-files --compress" does not fail if encryption is enabled
Add "less": fixes frappe#1301
* fix: Update documentation
update documentation to resemble current status
* fix: trailing whitespace
---------
Co-authored-by: Revant Nandgaonkar <revant.one@gmail.com>
2024-01-28 11:53:14 +05:30
Revant Nandgaonkar
f605addb71
refactor: prepare for v15 ( #1243 )
...
* chore: resolve merge conflict
* ci: changes for version 15
* chore: upgrade python and nodejs
* ci: fix v15 build
* fix: add redis_socketio for backward compatibility
* ci: fix v15 build
* ci: fix test endpoint
changed to erpnext.templates.pages.search_help.get_help_results_sections
2023-10-20 18:40:10 +05:30
Faris Ansari
2b4b39a65b
fix: set node version to 18 for frappe develop ( #1166 )
2023-07-02 17:20:33 +05:30
Revant Nandgaonkar
779f8be4fe
fix: add python 3.11 and nodejs 18 ( #1163 )
...
used for frappe develop branch
2023-06-28 15:53:35 +05:30
Revant Nandgaonkar
e6c0e7263b
ci: refactor ( #1158 )
...
* ci: refactor
use debian bookworm
use updated wkhtmltopdf
override python and nodejs versions
* ci: fix bench and test
* ci: remove comments from example.env
* docs: add maintenance section
2023-06-26 11:54:37 +05:30
Revant Nandgaonkar
e9fa75d144
fix: use stable bench branch ( #1138 )
...
#1137
2023-05-10 15:47:37 +05:30
Revant Nandgaonkar
98ea4212a4
fix: default config for production ( #1088 )
...
reported here https://discuss.frappe.io/t/frappe-docker-2023-production-setup-password-reset-email-link-added-with-port-8000/101844
2023-03-05 18:48:37 +05:30
Salah Aldin Fateh
1962ac2eec
Remove unnecessary WORKDIR ( #1057 )
2023-01-25 17:27:30 +05:30
Salah Aldin Fateh
f0d94819a3
add read perms to nginx-entrypoint ( #1053 )
...
* add read perms to nginx-entrypoint
* chore: set file permission for custom image
accepted as per suggestion from users
not required for linux runners
Co-authored-by: Revant Nandgaonkar <revant.one@gmail.com>
2023-01-21 16:48:53 +05:30
Revant Nandgaonkar
e9f28c9932
fix: set exec for nginx entrypoint ( #1051 )
...
for OS that mess up permission
2023-01-20 13:25:21 +05:30
Revant Nandgaonkar
bb1e4bb341
feat: add restic ( #1044 )
...
* feat: add restic
allows incremental snapshot backups
remove custom push-backup script
* ci: remove .git dir to skip fetch_details_from_tag
fixes https://github.com/frappe/frappe_docker/actions/runs/3938883301/jobs/6738091655
2023-01-18 11:31:18 +05:30
Revant Nandgaonkar
455a523205
fix: add weasyprint dependencies ( #1047 )
...
* fix: add weasyprint dependencies
fixes #1045
* ci: fix trigger to test pr
* fix: add weasyprint deps to bench
2023-01-17 17:12:27 +05:30
Revant Nandgaonkar
7b193e3392
fix: remove git remotes for erpnext ( #1041 )
...
fix github rate limit error on bench install-app
2023-01-16 12:29:30 +05:30
Revant Nandgaonkar
e6088af885
refactor: build only one frappe/erpnext image ( #1032 )
...
* ci: skip frappe builds
* refactor: build only one frappe/erpnext image
* fix: lint nginx entrypoint script
* docs: update and organize docs
* docs: fix lint errors
* fix(custom): pass base64 encoded apps json
* ci: update dependabot
* docs: update contributing
* docs: remove info about multi image setup
* fix: initiate empty common_site_config.json
default config has host keys set to localhost
causes connection errors
* docs: add details for pwd volumes
* fix: symlink assets instead of copy
* fix: nginx private files
* ci: skip docker compose v2 install for ubuntu-latest
* fix: organize layers
* feat: allow remove git remote for custom image
* docs: allow remove git remote for custom image
* fix: remove duplicate --apps_path
2023-01-16 04:20:09 +05:30
Bernhard Sirlinger
8f7b234a12
feat: make client_max_body_size configurable via env ( #1029 )
2022-12-27 03:12:22 +05:30
Bernhard Sirlinger
75e44ba902
feat: make proxy read timeout configurable via env ( #975 )
2022-12-25 13:23:55 +05:30
dependabot[bot]
a5667b0774
chore(deps): bump nginxinc/nginx-unprivileged in /images/nginx ( #1026 )
...
Bumps nginxinc/nginx-unprivileged from 1.23.2-alpine to 1.23.3-alpine.
---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-21 19:58:16 +05:30
Revant Nandgaonkar
009877d67c
fix: create config directory in worker image ( #1014 )
...
* fix: add git to worker image
* fix: create config directory in worker image
2022-12-10 13:52:37 +05:30
Revant Nandgaonkar
63902fd427
fix(frappe-socketio): use package.json from frappe repo ( #996 )
...
fixes #994
2022-11-05 14:43:33 +05:30
Peter Dave Hello
bfd847eaca
Prevent leaving pip install cache in Docker image ( #985 )
2022-10-28 18:45:44 +05:30
Babuuu
83f7db0c50
Use docker --chown command instead of RUN chown ( #979 )
...
The `RUN chown -R frappe:frappe /home/frappe` command was taking too long for me, over 6 minutes before I gave up and killed it. docker chown is faster, and it helps avoid creating a new layer.
2022-10-24 17:52:22 +05:30
dependabot[bot]
35b944d850
chore(deps): bump nginxinc/nginx-unprivileged in /images/nginx ( #978 )
...
Bumps nginxinc/nginx-unprivileged from 1.23.1-alpine to 1.23.2-alpine.
---
updated-dependencies:
- dependency-name: nginxinc/nginx-unprivileged
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-21 21:49:32 +05:30
Revant Nandgaonkar
8e7f8b3b71
fix: install correct nodejs as per frappe version ( #970 )
...
fixes #967 , #969
2022-10-19 14:22:07 +05:30
Revant Nandgaonkar
ba68887e40
fix: install node and python envs for v13 ( #963 )
...
fixes #962
2022-10-16 13:38:16 +05:30