Commit Graph

33091 Commits

Author SHA1 Message Date
Alexandre
965a26e306 Merge pull request #2587 from alexbelgium/copilot/review-apparmor-permissions-addons
Replace blanket AppArmor `capability,` with specific per-addon capabilities
2026-03-17 09:09:09 +01:00
copilot-swe-agent[bot]
3c53e69161 Replace blanket capability, with specific capabilities in all AppArmor profiles
Remove overly permissive blanket `capability,` rule (grants ALL Linux
capabilities) from 107 addon AppArmor profiles. Replace with only the
specific capabilities each addon needs based on its config.yaml
`privileged` field.

Base capabilities for all addons: setuid, setgid, chown, fowner, dac_override
Additional capabilities mapped from config.yaml privileged list:
- SYS_ADMIN -> sys_admin
- DAC_READ_SEARCH -> dac_read_search
- NET_ADMIN -> net_admin
- NET_RAW -> net_raw
- SYS_RAWIO -> sys_rawio
- SYS_TIME -> sys_time
- SYS_RESOURCE -> sys_resource

Addons with full_access: true (portainer_agent) retain blanket capability.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-17 07:42:05 +00:00
Alexandre
3ae0bbb9ba nobuild corrext 2026-03-17 08:33:19 +01:00
copilot-swe-agent[bot]
8156916179 Initial plan 2026-03-17 07:33:06 +00:00
Alexandre
92369f4607 nobuild 2026-03-17 08:31:13 +01:00
github-actions
8870083a45 GitHub bot: changelog 2026-03-17 07:29:21 +00:00
Alexandre
317d13c294 nobuild
Added TMP_DIR and updated NETALERTX_CONFIG_FILE and NETALERTX_DB_FILE paths.
2026-03-17 08:29:13 +01:00
Alexandre
34ea41913e Use /config for location to allow access 2026-03-17 08:27:07 +01:00
github-actions
0ed5974d1a GitHub bot: changelog 2026-03-17 06:06:28 +00:00
Alexandre
66be252470 Merge pull request #2585 from adamoutler/master
Fix: correct multiple configuration issues in NetAlertX
2026-03-17 07:03:54 +01:00
root
382988a9e7 lint issues 2026-03-16 16:15:40 -04:00
root
1ebaf6e011 Update with proper configuration 2026-03-16 15:04:32 -04:00
Alexandre
71b96dcb8e Merge pull request #2584 from alexbelgium/copilot/fix-openvpn-startup-issue
Fix Transmission OpenVPN startup failure caused by systemd-resolved in containers
2026-03-16 09:21:41 +01:00
copilot-swe-agent[bot]
b481580aa4 Bump transmission_openvpn version to v5.4.0-2 with changelog for DNS fix
Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-16 07:48:44 +00:00
Alexandre
352e3eca85 Merge pull request #2580 from alexbelgium/copilot/fix-internal-proxies-regex
fix(guacamole): use valid regex for PROXY_ALLOWED_IPS_REGEX default
2026-03-16 08:45:47 +01:00
github-actions
06ece60f76 GitHub bot: changelog 2026-03-16 07:36:39 +00:00
copilot-swe-agent[bot]
54c7a2ba10 Fix: Replace update-resolv-conf script that uses systemd-resolved with direct resolv.conf modification
The upstream haugene/transmission-openvpn v5.4.0 image uses systemd-resolved
via D-Bus in its update-resolv-conf script, which fails in HA containers
that lack systemd/D-Bus with 'sd_bus_open_system: No such file or directory'.

This adds a custom update-resolv-conf script that directly modifies
/etc/resolv.conf by parsing OpenVPN's foreign_option_* environment variables.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-16 07:33:22 +00:00
copilot-swe-agent[bot]
d1a40b3065 Initial plan 2026-03-16 07:26:24 +00:00
Alexandre
21d642c1d1 Update version to 1.0.32.0-3 in config.yaml 2026-03-16 08:25:56 +01:00
Alexandre
bcf8c383ae Update 99-run.sh 2026-03-16 08:25:21 +01:00
Alexandre
7b0c6c7ff2 Merge pull request #2583 from alexbelgium/copilot/add-multi-account-support
feat(immich_frame): add multi-account support
2026-03-16 08:14:56 +01:00
copilot-swe-agent[bot]
52aad31742 fix(immich_frame): address code review - null safety, file permissions, YAML escaping
Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-16 06:02:04 +00:00
copilot-swe-agent[bot]
dcb1a08a8f feat(immich_frame): add multi-account support via Accounts list option
- Add Accounts list schema to config.yaml for multi-account support
- Make ApiKey and ImmichServerUrl optional when using Accounts list
- Generate Settings.yaml from addon options in 99-run.sh
- Fix /app/Config symlink direction for proper config persistence
- Set IMMICHFRAME_CONFIG_PATH for reliable config discovery
- Update README with multi-account documentation and examples
- Bump version to 1.0.32.0-2

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-16 06:00:59 +00:00
copilot-swe-agent[bot]
c8cf6e0953 Initial plan 2026-03-16 05:50:33 +00:00
github-actions
4133525441 Github bot : image compressed 2026-03-15 23:11:54 +00:00
github-actions[bot]
f394339b77 Update stargazer map & cache 2026-03-15 01:20:58 +00:00
github-actions
d870a1e8c9 GitHub bot: changelog 2026-03-14 00:49:36 +00:00
alexbelgium
ed5f906f9c Updater bot : zzz_archived_code-server updated to 4.111.0 2026-03-14 01:31:29 +01:00
alexbelgium
e7366785e3 Updater bot : webtop_kde updated to 4.16-r0-ls95 2026-03-14 01:31:10 +01:00
alexbelgium
99eb3a946a Updater bot : unpackerr updated to v0.15.2 2026-03-14 01:30:32 +01:00
alexbelgium
0258f32944 Updater bot : transmission_openvpn updated to v5.4.0 2026-03-14 01:30:25 +01:00
alexbelgium
071a729712 Updater bot : tdarr updated to 2.62.01 2026-03-14 01:30:18 +01:00
alexbelgium
66904c5472 Updater bot : signalk updated to 2.23.0 2026-03-14 01:30:00 +01:00
alexbelgium
9d77d2b300 Updater bot : scrutiny_fa updated to v1.46.2 2026-03-14 01:29:52 +01:00
alexbelgium
7bc55b645e Updater bot : scrutiny updated to v1.46.2 2026-03-14 01:29:48 +01:00
alexbelgium
0b074c06f8 Updater bot : prowlarr updated to nightly-2.3.3.5300-ls226 2026-03-14 01:29:25 +01:00
alexbelgium
b9222a94b2 Updater bot : openproject updated to 17.2.0 2026-03-14 01:29:07 +01:00
alexbelgium
8c1f5c6229 Updater bot : mealie updated to v3.12.0 2026-03-14 01:28:33 +01:00
alexbelgium
9af940965f Updater bot : maintainerr updated to 3.1.0 2026-03-14 01:28:28 +01:00
alexbelgium
34039a4b25 Updater bot : jackett updated to 0.24.1356 2026-03-14 01:28:05 +01:00
alexbelgium
eda772ef65 Updater bot : gitea updated to 1.25.5 2026-03-14 01:27:36 +01:00
alexbelgium
2ec119148e Updater bot : flexget updated to 3.19.1 2026-03-14 01:27:26 +01:00
alexbelgium
e1f007d2b7 Updater bot : fireflyiii_data_importer updated to 2.2.1 2026-03-14 01:27:20 +01:00
alexbelgium
45b0b622d4 Updater bot : filebrowser_quantum updated to 1.2.2 2026-03-14 01:27:14 +01:00
alexbelgium
4d2ea1aa3d Updater bot : epicgamesfree updated to debian-2026-03-09 2026-03-14 01:27:06 +01:00
alexbelgium
1f719b72d5 Updater bot : emby_beta updated to 4.10.0.5 2026-03-14 01:26:55 +01:00
alexbelgium
d47371d285 Updater bot : collabora updated to 25.4.9.2 2026-03-14 01:26:47 +01:00
alexbelgium
40a18a404b Updater bot : codex updated to 1.9.24 2026-03-14 01:26:43 +01:00
alexbelgium
271eaacc58 Updater bot : cleanuparr updated to 2.8.1 2026-03-14 01:26:37 +01:00
alexbelgium
ab521a99b9 Updater bot : changedetection.io updated to 0.54.5 2026-03-14 01:26:33 +01:00