Coolify

This release adds built in traffic analytics for Traefik and Caddy, experimental support for SQLite as a database, readable container names with a configurable container prefix, third-party secret managers, Cloudflare DNS management, OpenID Connect sign-in, GitHub Actions runners on build servers, and Docker registry logins. It also includes many fixes.

Added

• Traffic analytics for Traefik and Caddy using the new Rust version of sentinel (#11292)
• Sentinel ingests the proxies JSON access logs and stores aggregate rollups only. Raw access logs are rotated on the server.
• Per-server toggle on the new server Analytics page, off by default. Enabling it restarts the proxy and Sentinel. Optional MaxMind license key; GeoIP works without one.
• Views: team dashboard widget, global Analytics page with server and application filters, per-server Analytics page, per-application and per-service Analytics tab.
• Metrics: requests, bandwidth, unique visitors, and p95 latency KPIs with sparklines, requests chart, status-code breakdown, interactive globe with country breakdown, device, path, host, referrer, and browser breakdowns, optional live refresh for the 24h range.
• Settings for top-N, sampling threshold, retention, and GeoIP. Nginx is out of scope.
• Caddy applications and services need a redeploy after the toggle changes so their logging labels are updated. Caddy needs caddy-docker-proxy 2.9 or newer.

• SQLite database (#11992)
• Add SQLite as a standalone database, based on a custom image (peakimages/sqlite).
• Connect a SQLite database to an application or Docker Compose application on the same server in one click. Coolify mounts its data volume, protects connected volumes, and lets you unlink applications.
• Back up and restore SQLite databases, including scheduled backups.

• Container name prefix for generated names (#11704)
• Optional prefix for the generated (rolling update) naming mode, set in the application's container settings or via custom_container_name_prefix in the API. It is slugified, limited to 30 characters, and unique per server. Rolling updates keep working compared to the custom container name (consistent mode) which loses rolling updates.

| | before | after | |---|---|---| | single container app (prefix: shop-api) | k9p2m4x7q1w3e5r6t8y0u2i4-20260908T141530 | shop-api-20260908T141530 | | compose service web (prefix: shop-api) | web-k9p2m4x7q1w3e5r6t8y0u2i4-20260908T141530 | web-shop-api-20260908T141530 |

• Split action buttons (#11409)
• Resource action menus show the primary action as a one-click button with secondary actions in a dropdown. This improves UX as the primary action is now only one click away, rather than two clicks and hidden inside a dropdown menu
• Autofocus on auth forms (#11324)
• Third-party secret managers (#11474)
• Doppler, Infisical, and HashiCorp Vault as secret sources for applications, services, and standalone databases.
• {{vault.KEY}} references are resolved during deployment and database start. Values are never stored in Coolify's database and are redacted from deployment logs.
• Key browsing, bulk import as references, autocomplete, provider validation, and clear deployment errors for missing secrets. Build reuse is skipped when build-time secret references may have changed.
• Team audit log (#11462, #11788)
• Searchable, filterable l