Commit Graph

300 Commits

Author SHA1 Message Date
Alexandre
965a26e306 Merge pull request #2587 from alexbelgium/copilot/review-apparmor-permissions-addons
Replace blanket AppArmor `capability,` with specific per-addon capabilities
2026-03-17 09:09:09 +01:00
copilot-swe-agent[bot]
3c53e69161 Replace blanket capability, with specific capabilities in all AppArmor profiles
Remove overly permissive blanket `capability,` rule (grants ALL Linux
capabilities) from 107 addon AppArmor profiles. Replace with only the
specific capabilities each addon needs based on its config.yaml
`privileged` field.

Base capabilities for all addons: setuid, setgid, chown, fowner, dac_override
Additional capabilities mapped from config.yaml privileged list:
- SYS_ADMIN -> sys_admin
- DAC_READ_SEARCH -> dac_read_search
- NET_ADMIN -> net_admin
- NET_RAW -> net_raw
- SYS_RAWIO -> sys_rawio
- SYS_TIME -> sys_time
- SYS_RESOURCE -> sys_resource

Addons with full_access: true (portainer_agent) retain blanket capability.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-17 07:42:05 +00:00
Alexandre
3ae0bbb9ba nobuild corrext 2026-03-17 08:33:19 +01:00
Alexandre
92369f4607 nobuild 2026-03-17 08:31:13 +01:00
github-actions
8870083a45 GitHub bot: changelog 2026-03-17 07:29:21 +00:00
Alexandre
317d13c294 nobuild
Added TMP_DIR and updated NETALERTX_CONFIG_FILE and NETALERTX_DB_FILE paths.
2026-03-17 08:29:13 +01:00
Alexandre
34ea41913e Use /config for location to allow access 2026-03-17 08:27:07 +01:00
github-actions
0ed5974d1a GitHub bot: changelog 2026-03-17 06:06:28 +00:00
root
382988a9e7 lint issues 2026-03-16 16:15:40 -04:00
root
1ebaf6e011 Update with proper configuration 2026-03-16 15:04:32 -04:00
Alexandre
fb077a6216 nobuild revert 2026-03-08 08:26:54 +01:00
github-actions
7a5463f9bc GitHub bot: changelog 2026-03-07 20:31:41 +00:00
Alexandre
accc11db99 Update config.yaml 2026-03-07 21:29:27 +01:00
github-actions
8ea0ad30ea GitHub bot: changelog 2026-03-07 19:28:34 +00:00
Alexandre
e641b7fc80 Update version to 26.3.7-2 in config.yaml 2026-03-07 20:26:25 +01:00
alexbelgium
2e8c92ea0d Updater bot : netalertx updated to 26.3.7 2026-03-07 06:42:59 +01:00
copilot-swe-agent[bot]
8a0f15413c Add My Home Assistant repository button to all addon READMEs
Add the "Add repository to my Home Assistant" blue button to all
addon README files that were missing it. This makes it easier for
new HA users to add the repository with a single click.

Updated 59 addon READMEs:
- 51 with standard Installation section format
- 8 with non-standard or missing Installation sections

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-02-23 09:02:12 +00:00
github-actions
aa1425d0e5 GitHub bot: changelog 2026-02-18 07:01:29 +00:00
Alexandre
6b5e6f519c Update version to 26.2.6-4 in config.yaml 2026-02-18 07:59:28 +01:00
Alexandre
356e2e43e6 Refactor Nginx configuration for ingress handling 2026-02-18 07:58:17 +01:00
Alexandre
ef3a67006a Modify ingress script for nginx configuration
Update trusted condition in nginx configuration template.
2026-02-18 07:57:17 +01:00
Nate
4bcc93581b Fix bad link to portal
Added the .local to the url.  Original case was incorrect.
2026-02-17 23:42:40 -07:00
github-actions
327385053b GitHub bot: changelog 2026-02-17 14:45:10 +00:00
Alexandre
0e0896e6eb Update config.yaml 2026-02-17 15:42:52 +01:00
Alexandre
f87480ca86 Add sub_filter for server path in ingress.conf 2026-02-17 15:41:46 +01:00
github-actions
e35a059a87 GitHub bot: changelog 2026-02-17 10:00:17 +00:00
Alexandre
fb5987bf31 Update config.yaml 2026-02-17 10:58:15 +01:00
Alexandre
e678f59d92 Update 32-ingress.sh 2026-02-17 10:58:04 +01:00
github-actions
87233ed7df GitHub bot: changelog 2026-02-16 10:46:54 +00:00
Alexandre
fb8587c7d9 Update version to 26.2.6 in config.yaml 2026-02-16 11:45:02 +01:00
Alexandre
ff3a2e3929 Update upstream version to 26.2.6 2026-02-16 11:44:40 +01:00
Alexandre
107a48c65e Update updater.json 2026-02-16 11:42:48 +01:00
Alexandre
eb59fe3c99 Update version to 26.2.4 in config.yaml 2026-02-10 19:42:12 +01:00
Alexandre
70f3efe915 Update updater.json 2026-02-06 14:47:38 +01:00
Alexandre
521ab722f2 nobuild 2026-02-06 14:47:20 +01:00
github-actions
d5f05d6f52 GitHub bot: changelog 2026-02-04 15:20:25 +00:00
Alexandre
6f7fcdd1ee Update updater.json 2026-02-04 16:16:07 +01:00
Alexandre
9496dfb9de Update version to 26.2.4 in config.yaml 2026-02-04 16:15:52 +01:00
Alexandre
54c97ca5e9 Remove ha_entrypoint_modif.sh 2026-02-04 16:15:11 +01:00
GitHub Actions
bfa8f71ac5 Revert 'Updater bot : netalertx updated to 26.2.4' [nobuild] 2026-02-04 15:12:03 +00:00
alexbelgium
ad05d51bbe Updater bot : netalertx updated to 26.2.4 2026-02-04 16:04:13 +01:00
Alexandre
35f05b0e93 Fix script 2026-02-04 15:59:55 +01:00
GitHub Actions
4c2ee5450b Revert 'Updater bot : netalertx updated to 26.2.4' [nobuild] 2026-02-04 13:17:00 +00:00
alexbelgium
14e44e8992 Updater bot : netalertx updated to 26.2.4 2026-02-04 14:11:47 +01:00
Alexandre
97bc68f228 Chmod +x 2026-02-03 19:58:19 +01:00
Alexandre
f43020d85b Accept standalone bashio 2026-01-29 11:06:24 +01:00
Joachim Sokolowski
c727d45937 Update README.md
Typo: "for for" changed to single "for" on line 46
2026-01-20 18:40:31 +01:00
Alexandre
1f3eb13cb8 Clean 2026-01-20 14:27:06 +01:00
alexbelgium
f45eb895b2 Updater bot : netalertx updated to 26.1.17 2026-01-17 07:07:17 +01:00
Alexandre
77c148574e Normalize addon changelog dates 2026-01-10 22:29:58 +01:00