Notes

Shorter first-hand posts: one incident, one trap, one fix, newest first.

• Coolify quietly bakes your build secrets into the image layers

  Docker history on one of my images printed out a GitHub token, an OAuth token, and a handful of other secrets in plain text. Here is why, and the actual fix.

• A full VPS disk on Coolify: 1905 MB per rebuild, down to 31 MB

  The disk didn't fill for one reason. It filled for four, and only one of them was obvious.

• The Next.js standalone healthcheck trap on Coolify

  The build succeeded. The container came up. Coolify still called it unhealthy.

• serve -s makes every URL on a multi-page site come back 200

  Every URL returned 200. That was the problem.