Verify gateway build inputs after Coolify strips Git metadata #14

Merged
PlasticDigits merged 2 commits from bb/portal-mail-gateway-thr_ywz2dcyd3p into main 2026-10-31 04:50:35 +00:00
Owner

Coolify strips Git metadata before running the gateway build hook. Verify all five image inputs against the checksum manifest fetched from the immutable source commit, validate fixed filenames/hashes/uniqueness/regular files, and build only after they match. Use sequence labels so Coolify can append managed metadata without generating non-string mapping keys.

Independent review cleared final exact 44a2d3604b2051278aafcfa80fa4e19f4eb6c1d5. Nine build/provisioner tests and shell syntax passed; the whole current generated and raw Compose configurations validated after only the label correction. Relay, image inputs, resource limits, trust and two-network topology remain unchanged by the labels delta.

Runtime gateway/TLS/source-IP and issue #3 acceptance remain open. No main portal settings, worker attachments, SMTP AUTH, sender enablement or sends are included.

Coolify strips Git metadata before running the gateway build hook. Verify all five image inputs against the checksum manifest fetched from the immutable source commit, validate fixed filenames/hashes/uniqueness/regular files, and build only after they match. Use sequence labels so Coolify can append managed metadata without generating non-string mapping keys. Independent review cleared final exact `44a2d3604b2051278aafcfa80fa4e19f4eb6c1d5`. Nine build/provisioner tests and shell syntax passed; the whole current generated and raw Compose configurations validated after only the label correction. Relay, image inputs, resource limits, trust and two-network topology remain unchanged by the labels delta. Runtime gateway/TLS/source-IP and issue #3 acceptance remain open. No main portal settings, worker attachments, SMTP AUTH, sender enablement or sends are included.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/cl8y-wallet-security!14
No description provided.