Fix issue #2777

nginx_webserver_proxy/CHANGELOG.md

@@ -1,13 +1,13 @@
-## 2.14.0 (10-05-2026)
-- Minor bugs fixed
 # Changelog
 
-## Unreleased
+## 2.14.1
-
+- Fix startup failure on aarch64/HAos: "/usr/bin/env: 'bash': Permission denied" (#2777)
-- Fix Codacy style warnings: add blank lines around lists in README
+- Add s6-overlay/env/with-contenv exec rules to AppArmor profile
 
 ## 2.14.0 
+- Minor bugs fixed
 
+## 2.14.0
 - Initial release wrapping jc21/nginx-proxy-manager:latest
 - NPM Admin UI on port 81; HTTP on port 80; HTTPS on port 443
 - Configurable static file server via NPM's default_host nginx config

nginx_webserver_proxy/apparmor.txt

@@ -73,6 +73,19 @@ profile nginx-proxy-manager flags=(attach_disconnected,mediate_deleted) {
   /var/tmp/ r,
   /var/tmp/** rwk,
 
+  # s6-overlay boot chain and add-on entrypoint.
+  # The run.sh shebang is "#!/usr/bin/with-contenv bash", and with-contenv
+  # execs "/usr/bin/env bash". Without these rules AppArmor denies the exec
+  # with: "/usr/bin/env: 'bash': Permission denied" (issue #2777).
+  /init ix,
+  /usr/bin/env ix,
+  /usr/bin/with-contenv ix,
+  /npm-addon-init.sh ix,
+  /command/** ix,
+  /package/** ix,
+  /run/{s6,s6-rc,service}/** rwix,
+  /etc/s6-overlay/** rwix,
+
   # Basic system access
   /bin/bash ix,
   /bin/sh ix,

nginx_webserver_proxy/config.yaml

@@ -1,7 +1,7 @@
 name: "Nginx Proxy Manager + Static Web Server"
 slug: nginx_webserver_proxy
 description: "Nginx Proxy Manager with a built-in configurable static file server. Manage reverse proxies via NPM UI on port 81 while serving files from HA storage on port 80."
-version: "2.14.0"
+version: "2.14.1"
 url: "https://github.com/alexbelgium/hassio-addons/tree/master/nginx_webserver_proxy"
 arch:
   - amd64