avm/hassio-addons
1
0
Fork 0
mirror of https://github.com/alexbelgium/hassio-addons.git synced 2026-08-23 13:23:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(birdnet-pi): health-check the WebUI port, drop inert abc sudoers

Browse Source 
Standalone Docker (no Supervisor) disables nginx and serves the WebUI via
Caddy on 8081; nothing listens on port 80 when ssl=false, so the Docker
HEALTHCHECK failed and the container reported "unhealthy" although it worked.
Point HEALTH_PORT at 8081. HA mode is unaffected (Supervisor ignores Docker
health-checks).

Also drop rootfs/etc/sudoers.d/birdnet-abc-systemctl. A chroot boot harness
against the published image confirmed the standalone container already boots
and serves the WebUI (HTTP 200), and that nothing ever runs as the `abc`
user: pi has `NOPASSWD:ALL` and caddy has NOPASSWD:ALL via the pre-existing
010_caddy-nopasswd drop-in, so the abc rule was valid but inert.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
alexbelgium
2026-07-22 10:43:52 +02:00
parent 787909c8a7
commit 9bfad91d7b
4 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
birdnet-pi/CHANGELOG.md
View File

@@ -1,3 +1,5 @@
## 2026.07.22 (22-07-2026)
- Fix: health-check the WebUI port (8081) instead of port 80, so the standalone Docker container no longer reports "unhealthy" when ssl=false
## 2026.07.10 (10-07-2026) ## 2026.07.10 (10-07-2026)
- Minor bugs fixed - Minor bugs fixed
## 2026.06.01 (19-06-2026) ## 2026.06.01 (19-06-2026)

5
birdnet-pi/Dockerfile
View File

@@ -238,7 +238,10 @@ RUN \
mv /etc/nginx/nginx.conf.new /etc/nginx/nginx.conf; \ mv /etc/nginx/nginx.conf.new /etc/nginx/nginx.conf; \
fi fi
ENV HEALTH_PORT="80" \ # Health-check the actual WebUI port. In standalone Docker (no Supervisor) nginx
# is disabled and Caddy serves the UI on 8081; nothing listens on port 80 when
# ssl=false, which made the container report "unhealthy" even though it worked.
ENV HEALTH_PORT="8081" \
HEALTH_URL="" HEALTH_URL=""
HEALTHCHECK \ HEALTHCHECK \
--interval=5s \ --interval=5s \

2
birdnet-pi/config.yaml
View File

@@ -116,5 +116,5 @@ tmpfs: true
udev: true udev: true
url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-pi url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-pi
usb: true usb: true
version: 2026.07.10 version: 2026.07.22
video: true video: true

3
birdnet-pi/rootfs/etc/sudoers.d/birdnet-abc-systemctl
View File

@@ -1,3 +0,0 @@
# BirdNET-Pi's upstream restart_services.sh is executed by the LinuxServer abc user.
# Permit only the container-local systemctl replacement required to manage BirdNET services.
abc ALL=(root) NOPASSWD: /bin/systemctl, /usr/bin/systemctl