feat(coolify): set up a Coolify server over SSH - #4326

Open

RyanGroch wants to merge 87 commits into

dyad-sh:mainfrom

RyanGroch:coolify-server-setup

Commits on Aug 26, 2026

feat(coolify): set up a Coolify server over SSH

RyanGroch
and
claude
committed
f6e215a
fix(coolify): address review feedback on the SSH setup flow

RyanGroch
and
claude
committed
6a520b7
fix(coolify): refuse reserved subdomains and reset the setup singleton

RyanGroch
and
claude
committed
3286851
fix(coolify): narrow the API token and stop waiting on impossible certificates

RyanGroch
and
claude
committed
22df869
fix(coolify): mint the scopes Dyad asks users for, and tidy the HTTPS step

RyanGroch
and
claude
committed
c1159c7
test(coolify): pin the scope list, and say when the domain is coming off

RyanGroch
and
claude
committed
78b7878
test(coolify): pin both spellings of the scope list

RyanGroch
and
claude
committed
a1f7865
fix(coolify): refuse to install onto a server nobody looked at

RyanGroch
and
claude
committed
aaacc14
fix(coolify): show a running install first, and gate on a check that passed

RyanGroch
and
claude
committed
19c2536
test(coolify): pin the mark a refusal carries, and reunite a doc with its schema

RyanGroch
and
claude
committed
f02927a
fix(coolify): show a setup error unless the machine already has it

RyanGroch
and
claude
committed
f734715
test(coolify): hold the placement that keeps a refusal audible

RyanGroch
and
claude
committed
6a65068
fix(coolify): remember a server by its port as well as its address

RyanGroch
and
claude
committed
3e7d899
fix(coolify): decide what a check saw only once it has finished

RyanGroch
and
claude
committed
cfdd662
test(coolify): hold the panel's half of the re-check rule

RyanGroch
and
claude
committed
a16ff7b
feat(coolify): forget the instance when signing out of it

RyanGroch
and
claude
committed
c76978e
fix(coolify): hear about a run that ends while the panel is mounting

RyanGroch
and
claude
committed
ef8a034
refactor(coolify): keep the admin account as one thing in settings

RyanGroch
and
claude
committed
9edcc36
fix(coolify): stop a locked admin password from breaking every settings write

RyanGroch
and
claude
committed
ec6bdf8
fix(coolify): actually forget a token that will not decrypt

RyanGroch
and
claude
committed
48c3b54
fix(coolify): keep the overtaken-read count from belonging to one caller

RyanGroch
and
claude
committed
b8092ef
fix(coolify): keep each Coolify address with what it opens

RyanGroch
and
claude
committed
197d6bf
fix(coolify): do not ask for an acknowledgement over an empty panel

RyanGroch
and
claude
committed
c602dc7
feat(coolify): treat a server Dyad set up as a Coolify it is holding

RyanGroch
and
claude
committed
98a2371
fix(coolify): keep a server that is installed when its seeder gives up

RyanGroch
and
claude
committed
38eb0c8
fix(coolify): say when the credentials could not be read

RyanGroch
and
claude
committed
32e17e2
fix(coolify): do not take a custom domain on trust when DNS went unanswered

RyanGroch
and
claude
committed
2286ea5
fix(coolify): stop reporting a lost connection as an unsupported Coolify

RyanGroch
and
claude
committed
55c2080
fix(coolify): give each credential block its own field ids

RyanGroch
and
claude
committed
0a2be44
fix(coolify): tell apart the answers a domain lookup cannot give

RyanGroch
and
claude
committed
2160a90
fix(coolify): give each refusal the remedy that fits it

RyanGroch
and
claude
committed
c5178e0
fix(coolify): stop the family refusal claiming what it did not establish

RyanGroch
and
claude
committed
9a5efeb
fix(coolify): stop a server that will not answer reporting itself as a fault

RyanGroch
and
claude
committed
f179121
fix(coolify): put the password down before the installer uses it

RyanGroch
and
claude
committed
e2eadd9
fix(coolify): stop accepting a domain there was nothing to compare

RyanGroch
and
claude
committed
0d895f4
feat(coolify): ask before keeping a token for an unencrypted address

RyanGroch
and
claude
committed
591f38a
fix(coolify): do not take an earlier server's account down with a failed run

RyanGroch
and
claude
committed
270d00d
fix(coolify): know this run's own record when its password went unreadable

RyanGroch
and
claude
committed
e5c97d9
fix(coolify): name the password when putting an account back

RyanGroch
and
claude
committed
d9c244e
fix(coolify): hold a token for an unencrypted address rather than undoing it

RyanGroch
and
claude
committed
e1e396c
test(coolify): prove the agreement is what stores the token

RyanGroch
and
claude
committed
fb92f3a
fix(coolify): do not install over an account Dyad is holding

RyanGroch
and
claude
committed
9c6a2e3
fix(coolify): tell a token Dyad will drop from one it could not make

RyanGroch
and
claude
committed
9ea9aed
fix(coolify): let the refusal to install again be acted on

RyanGroch
and
claude
committed
9215eb8
refactor(coolify): ask the machine whether a run may start

RyanGroch
and
claude
committed
a9d7f27
fix(coolify): refresh what a run wrote once it settles

RyanGroch
and
claude
committed
7bc4e03
fix(coolify): do not read "cannot tell" as "nothing was installed"

RyanGroch
and
claude
committed
d57c9ac
fix(coolify): say what failed before saying what it means

RyanGroch
and
claude
committed
d58d5dc
test(coolify): make these observe what they are named for

RyanGroch
and
claude
committed
1ccbfe1

Commits on Aug 27, 2026

test(coolify): wait a turn, and let the shared helper do the comparing

RyanGroch
and
claude
committed
8f2124c
fix(coolify): do not ask for a step Dyad already took

RyanGroch
and
claude
committed
fe85335
fix(coolify): ask whether the API was opened, not whether a token was kept

RyanGroch
and
claude
committed
481ef6d
test(coolify): give the fixture a shape the app can produce

RyanGroch
and
claude
committed
2290357
test(coolify): hold the answer to the shape the channel promises

RyanGroch
and
claude
committed
c4f1fe8
fix(coolify): blame the step that actually stopped answering

RyanGroch
and
claude
committed
cc41f5e
fix(coolify): point at the password, not away from it

RyanGroch
and
claude
committed
fd9c26f
fix(coolify): say when a password is held but unreadable

RyanGroch
and
claude
committed
5a939e7

Commits on Aug 28, 2026

docs(coolify): the panel says this now

RyanGroch
and
claude
committed
aadd2e2
test(coolify): check the sentence the handler writes, not the one the test did

RyanGroch
and
claude
committed
599ae98
fix(coolify): keep ssh2 off the app's startup path

RyanGroch
and
claude
committed
0a24525
fix(coolify): say when the temporary domain will not come back off

RyanGroch
and
claude
committed
4a448bf
fix(coolify): do not call a slow answer an old Coolify

RyanGroch
and
claude
committed
c16e127
feat(coolify): show that Install was pressed

RyanGroch
and
claude
committed
a3a65b5
fix(coolify): load ssh2 when connecting, not when the app starts

RyanGroch
and
claude
committed
2a9a77d
fix(coolify): trim the sentence, not its last clause

RyanGroch
and
claude
committed
e349b0e
fix(coolify): tell other windows when a held token is kept

RyanGroch
and
claude
committed
0ca1f95
fix(coolify): say what a stopped run left behind

RyanGroch
and
claude
committed
aa71944
fix(coolify): confirm the API flag was written, not just assigned

RyanGroch
and
claude
committed
71993a6
fix(coolify): make the leftover-domain warning actually reach the user

RyanGroch
and
claude
committed
7cc32c5
fix(coolify): check the failure is one of ours before saying it is

RyanGroch
and
claude
committed
dc2c813
fix(coolify): only say the domain was applied if it was

RyanGroch
and
claude
committed
9edadde
fix(coolify): do not call a failed negotiation a changed identity

RyanGroch
and
claude
committed
874c9ad
fix(coolify): stop offering an install that is always refused

RyanGroch
and
claude
committed
8718a1b
fix(coolify): say it on every screen the run can be watched from

RyanGroch
and
claude
committed
46ea488
fix(coolify): ask whether the domain save was taken

RyanGroch
and
claude
committed
d360e13
fix(coolify): do not require the prompt psysh happens to print

RyanGroch
and
claude
committed
504f059
fix(coolify): say when a stopped install left something on the server

RyanGroch
and
claude
committed
271cfa9
docs(coolify): the prompt is modelled, not required

RyanGroch
and
claude
committed
f77d9eb

Commits on Aug 29, 2026

fix(coolify): do not start an install it cannot record the password for

RyanGroch
and
claude
committed
2b94c98
fix(coolify): read unreadable memory as unknown, not as enough

RyanGroch
and
claude
committed
0548ea8
test(coolify): pin the domain rule on its own

RyanGroch
and
claude
committed
bce43e1
fix(coolify): do not call a version it could not read an old one

RyanGroch
and
claude
committed
5f18892
fix(coolify): say the details are coming while they are read

RyanGroch
and
claude
committed
f88aae5
docs(coolify): put each comment back over what it describes

RyanGroch
and
claude
committed
fa34bd7
fix(coolify): read every tinker answer the same way

RyanGroch
and
claude
committed
5295706
docs(coolify): move four comments back to what they describe

RyanGroch
and
claude
committed
255cd07
fix(coolify): the fifth reader, and the two beside the token

RyanGroch
and
claude
committed
bb38a4c