Refresh nginx_webserver_proxy startup fix

.coderabbit.yaml

@@ -1,173 +0,0 @@
-# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
-#
-# CodeRabbit configuration for alexbelgium/hassio-addons
-# Goals:
-#   1. Triage and provide first-line help on issues (bug reports, feature requests).
-#   2. Review pull requests against this repository's add-on conventions and linters.
-# Docs: https://docs.coderabbit.ai/getting-started/configure-coderabbit
-language: "en-US"
-
-# Max 250 chars. Detailed context lives in path_instructions below.
-tone_instructions: "HA add-on repo with 120+ Docker add-ons for Home Assistant Supervisor. Be concise, practical and friendly; most contributors are hobbyists. Link to add-on READMEs and the repo wiki. Follow existing conventions over generic best practices."
-
-early_access: false
-enable_free_tier: true
-
-reviews:
-  # "chill" keeps reviews helpful without nitpicking the many small upstream
-  # version-bump PRs that dominate this repo.
-  profile: "chill"
-  # Don't block merges; this repo merges frequently and relies on CI gating.
-  request_changes_workflow: false
-  high_level_summary: true
-  high_level_summary_placeholder: "@coderabbitai summary"
-  auto_title_placeholder: "@coderabbitai"
-  review_status: true
-  commit_status: true
-  poem: false
-  collapse_walkthrough: false
-  changed_files_summary: true
-  sequence_diagrams: false
-  assess_linked_issues: true
-  related_issues: true
-  related_prs: true
-  suggested_labels: true
-  suggested_reviewers: true
-
-  # Auto-apply labels consistent with the repo's existing scheme.
-  labeling_instructions:
-    - label: "bug"
-      instructions: >-
-        Apply when the PR fixes incorrect behavior in an add-on (broken startup,
-        crash, regression) rather than adding functionality.
-    - label: "enhancement"
-      instructions: >-
-        Apply when the PR adds a new add-on, a new option/feature, or otherwise
-        extends functionality.
-
-  # Skip generated/vendored content and large data artifacts that produce noise.
-  path_filters:
-    - "!**/*.png"
-    - "!**/*.svg"
-    - "!**/*.jpg"
-    - "!**/*.jpeg"
-    - "!**/*.csv"
-    - "!**/Stats"
-    - "!**/Stats2"
-    - "!README.md"
-    - "!.github/stargazer_countries.csv"
-    - "!**/translations/**"
-
-  # Repository-specific review guidance keyed by file path.
-  path_instructions:
-    - path: "**/config.yaml"
-      instructions: >-
-        Home Assistant add-on metadata. Verify that `version` was bumped when the
-        upstream version changes, that `image` follows
-        `ghcr.io/alexbelgium/{slug}-{arch}`, and that `arch`, `schema`, `map` and
-        `ports` are internally consistent. The `env_vars` schema key enables
-        arbitrary env-var passthrough handled at runtime by 00-global_var.sh; do
-        not flag it as insecure by default. Versions legitimately vary in format
-        (semver, X.Y.Z-N patch counter, LSIO tags, date-based, nightly).
-    - path: "**/Dockerfile"
-      instructions: >-
-        Add-on Dockerfiles follow a 6-section pattern and pull shared scripts from
-        .templates/. `ARG BUILD_FROM` + `FROM ${BUILD_FROM}` is expected. Package
-        pinning is NOT required (Hadolint DL3008/DL3018 are intentionally ignored).
-        If the file has an `ARG BUILD_UPSTREAM` line it must match the upstream
-        version in config.yaml. Do not suggest generic pinning or multi-stage
-        rewrites that conflict with the shared-template convention.
-    - path: "**/rootfs/etc/cont-init.d/**"
-      instructions: >-
-        S6-overlay init scripts that run in lexicographic order. Respect the
-        numbering convention (20- folders, 32- nginx ingress, 80- app config,
-        90- misc, 99- launch). Check that scripts use bashio where appropriate and
-        fail safely. SC2002 is intentionally disabled in shellcheck.
-    - path: "**/rootfs/etc/services.d/**"
-      instructions: >-
-        S6-overlay supervised service definitions. Verify run/finish scripts are
-        executable and long-running services do not exit prematurely.
-    - path: "**/*.sh"
-      instructions: >-
-        Shell scripts are formatted with shfmt (4-space indent) and linted with
-        shellcheck (SC2002 disabled). Prefer bashio helpers in add-on scripts.
-    - path: "**/updater.json"
-      instructions: >-
-        Upstream tracking config for the addons_updater automation. Validate the
-        `source` is a supported type (github, dockerhub, pip, gitlab, bitbucket,
-        helm_chart, ...) and that `upstream_repo`/`slug` are coherent. Do not
-        hand-edit `upstream_version`; it is auto-populated.
-    - path: "**/CHANGELOG.md"
-      instructions: >-
-        Every changed add-on must update its CHANGELOG.md (CI enforces this).
-        Confirm the new entry matches the bumped version in config.yaml.
-    - path: ".github/workflows/**"
-      instructions: >-
-        GitHub Actions CI/CD. Be careful with permissions and pinned action
-        versions. Note that `[nobuild]` in a commit message intentionally skips
-        the builder workflow.
-
-  abort_on_close: true
-
-  auto_review:
-    enabled: true
-    auto_incremental_review: true
-    drafts: false
-    # Skip bot-generated upstream version bumps and explicit skip markers to
-    # save review budget; humans can still request a review with @coderabbitai.
-    ignore_title_keywords:
-      - "[nobuild]"
-      - "bump"
-      - "dependabot"
-    base_branches:
-      - "master"
-
-  finishing_touches:
-    docstrings:
-      enabled: true
-    unit_tests:
-      enabled: false
-
-  # Enable the linters that match this repo's CI so CodeRabbit surfaces the same
-  # issues reviewers and CI would flag.
-  tools:
-    shellcheck:
-      enabled: true
-    hadolint:
-      enabled: true
-    markdownlint:
-      enabled: true
-    yamllint:
-      enabled: true
-    actionlint:
-      enabled: true
-    gitleaks:
-      enabled: true
-    checkov:
-      enabled: true
-    languagetool:
-      enabled: true
-      level: "default"
-    github-checks:
-      enabled: true
-      timeout_ms: 120000
-
-# Issue triage & first-line help. CodeRabbit replies in issues and PRs; auto_reply
-# lets it respond without an explicit @coderabbitai mention, and the knowledge
-# base lets it reuse past issues/PRs/learnings for better triage.
-chat:
-  auto_reply: true
-
-knowledge_base:
-  opt_out: false
-  learnings:
-    scope: "auto"
-  issues:
-    scope: "auto"
-  pull_requests:
-    scope: "auto"
-
-# Match generated docstrings to the repo language.
-code_generation:
-  docstrings:
-    language: "en-US"

.github/addon_submitters.json

@@ -8,7 +8,6 @@
   "manyfold": "ToledoEM",
   "navidrome": "baldarn",
   "netalertx": "jokob-sk",
-  "nginx proxy manager": "ToledoEM",
   "openproject": "baldarn",
   "resiliosync": "tyjtyj",
   "spotweb": "woutercoppens",

.github/workflows/daily_stale.yml

@@ -8,8 +8,8 @@
 name: Mark stale issues and pull requests
 
 on:
-  schedule:
-  - cron: '0 12 * * 0'
+  #schedule:
+  #- cron: '0 12 * * 0'
   workflow_dispatch:
 
 jobs:

addons_updater/apparmor.txt

@@ -2,7 +2,6 @@
 
 profile addon_updater flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  capability sys_chroot,
 
   # Capabilities
   file,

arpspoof/apparmor.txt

@@ -9,7 +9,6 @@ profile arpspoof_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

aurral/apparmor.txt

@@ -2,7 +2,6 @@
 
 profile aurral flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  capability sys_chroot,
 
   file,
   signal (send) set=(kill,term,int,hup,cont),

autobrr/apparmor.txt

@@ -9,7 +9,6 @@ profile autobrr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

baikal/apparmor.txt

@@ -9,7 +9,6 @@ profile baikal_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

battybirdnet-pi/apparmor.txt

@@ -9,7 +9,6 @@ profile battybirdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

bazarr/apparmor.txt

@@ -10,7 +10,6 @@ profile bazarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

bentopdf/apparmor.txt

@@ -2,7 +2,6 @@
 
 profile bentopdf flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  capability sys_chroot,
 
   # Capabilities
   file,

binance-trading-bot/apparmor.txt

@@ -9,7 +9,6 @@ profile db21ed7f_binance-trading-bot flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

birdnet-go/apparmor.txt

@@ -9,7 +9,6 @@ profile db21ed7f_birdnet-go flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   capability sys_resource,
   file,

birdnet-pi/apparmor.txt

@@ -9,7 +9,6 @@ profile birdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

birdnet-pipy/apparmor.txt

@@ -8,7 +8,6 @@ profile birdnet-pipy_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

bitwarden/apparmor.txt

@@ -8,7 +8,6 @@ profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

booksonic_air/apparmor.txt

@@ -9,7 +9,6 @@ profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

browser_brave/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 1.91.175-ls106 (2026-06-20)
-- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
- 
 ## 1.91.172-ls105 (2026-06-13)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
  

browser_brave/apparmor.txt

@@ -1,72 +0,0 @@
-#include <tunables/global>
-
-profile browser_brave_addon flags=(attach_disconnected,mediate_deleted) {
-  #include <abstractions/base>
-
-  capability chown,
-  capability dac_override,
-  capability dac_read_search,
-  capability fowner,
-  capability setgid,
-  capability setuid,
-  capability sys_chroot,
-  capability sys_admin,
-  file,
-  signal,
-  mount,
-  umount,
-  remount,
-  network udp,
-  network tcp,
-  network dgram,
-  network stream,
-  network inet,
-  network inet6,
-  network netlink raw,
-  network unix dgram,
-
-
-# S6-Overlay
-  /init ix,
-  /run/{s6,s6-rc*,service}/** ix,
-  /package/** ix,
-  /command/** ix,
-  /run/{,**} rwk,
-  /dev/tty rw,
-  /bin/** ix,
-  /usr/bin/** ix,
-  /usr/lib/bashio/** ix,
-  /etc/s6/** rix,
-  /run/s6/** rix,
-  /etc/services.d/** rwix,
-  /etc/cont-init.d/** rwix,
-  /etc/cont-finish.d/** rwix,
-  /init rix,
-  /var/run/** mrwkl,
-  /var/run/ mrwkl,
-  /dev/i2c-1 mrwkl,
-  # Files required
-  /dev/fuse mrwkl,
-  /dev/sda1 mrwkl,
-  /dev/sdb1 mrwkl,
-  /dev/nvme0 mrwkl,
-  /dev/nvme0n1 mrwkl,
-  /dev/nvme1 mrwkl,
-  /dev/mmcblk0p1 mrwkl,
-  /dev/* mrwkl,
-  /udev/* mrwkl,
-  /tmp/** mrkwl,
-  /dev/fuse/** mrkwl,
-  /dev/** mrkwl,
-  /sys/firmware/** mrkwl,
-
-  # Data access
-  /data/** rw,
-
-  # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
-  ptrace (trace,read) peer=docker-default,
-
-  # docker daemon confinement requires explict allow rule for signal
-  signal (receive) set=(kill,term) peer=/usr/bin/docker,
-
-}

browser_brave/apparmor.txt

@@ -0,0 +1 @@
+../browser_chromium/apparmor.txt

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.91.175-ls106"
+version: "1.91.172-ls105"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-13",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.91.175-ls106"
+  "upstream_version": "1.91.172-ls105"
 }

browser_chromium/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## version-b9b82d3e (2026-06-20)
-- Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
- 
 ## version-cca5154d (2026-06-11)
 - Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
 ## version-89f88890 (2026-06-05)

browser_chromium/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile browser_chromium_addon flags=(attach_disconnected,mediate_deleted) {
+profile chromium_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile browser_chromium_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

browser_chromium/config.yaml

@@ -71,5 +71,5 @@ slug: chromium
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "version-b9b82d3e"
+version: "version-cca5154d"
 video: true

browser_chromium/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-11",
   "repository": "alexbelgium/hassio-addons",
   "slug": "chromium",
   "source": "github",
   "upstream_repo": "linuxserver/docker-chromium",
-  "upstream_version": "version-b9b82d3e"
+  "upstream_version": "version-cca5154d"
 }

browserless_chrome/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.54.0 (2026-06-20)
-- Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
- 
 ## 2.52.2 (2026-06-17)
 - Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
  

browserless_chrome/apparmor.txt

@@ -9,7 +9,6 @@ profile browserlesschrome_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

browserless_chrome/config.yaml

@@ -86,5 +86,5 @@ schema:
 slug: browserless_chrome
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/browserless_chrome
-version: "2.54.0"
+version: "2.52.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]/docs"

browserless_chrome/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "v",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-17",
   "repository": "alexbelgium/hassio-addons",
   "slug": "browserless_chrome",
   "source": "github",
   "upstream_repo": "browserless/chrome",
-  "upstream_version": "2.54.0"
+  "upstream_version": "2.52.2"
 }

calibre/apparmor.txt

@@ -10,7 +10,6 @@ profile calibre_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

calibre_web/apparmor.txt

@@ -10,7 +10,6 @@ profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

changedetection.io/apparmor.txt

@@ -8,7 +8,6 @@ profile addon_db21ed7f_changedetection.io_nas flags=(attach_disconnected,mediate
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

cleanuparr/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 2.9.14 (2026-06-20)
-- Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
 
 ## 2.9.13 (2026-05-16)
 - Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)

cleanuparr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="2.9.14"
+ARG BUILD_UPSTREAM="2.9.13"
 
 #################
 # 1 Build Image #

cleanuparr/apparmor.txt

@@ -8,7 +8,6 @@ profile cleanuparr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

cleanuparr/config.yaml

@@ -91,5 +91,5 @@ schema:
   TZ: str?
 slug: cleanuparr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cleanuparr
-version: "2.9.14"
+version: "2.9.13"
 webui: "[PROTO:ssl]://[HOST]:[PORT:11011]"

cleanuparr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-06-20",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cleanuparr",
   "source": "github",
   "upstream_repo": "Cleanuparr/Cleanuparr",
-  "upstream_version": "2.9.14"
+  "upstream_version": "2.9.13"
 }

cloudcommander/apparmor.txt

@@ -9,7 +9,6 @@ profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

codex/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.0.0 (2026-06-20)
-- Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
- 
 ## 1.12.8 (2026-06-17)
 - Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
 

codex/apparmor.txt

@@ -9,7 +9,6 @@ profile db21ed7f_codex flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

codex/config.yaml

@@ -101,4 +101,4 @@ schema:
 slug: codex
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.0.0"
+version: "1.12.8"

codex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-17",
   "repository": "alexbelgium/hassio-addons",
   "slug": "codex",
   "source": "github",
   "upstream_repo": "ajslater/codex",
-  "upstream_version": "2.0.0"
+  "upstream_version": "1.12.8"
 }

collabora/apparmor.txt

@@ -8,7 +8,6 @@ profile collabora_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

comixed/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile comixed_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile comixed_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

elasticsearch/CHANGELOG.md

@@ -1,7 +1,3 @@
-## 8.14.3-3 (2026-06-19)
-- Fix startup failing with `chroot: cannot change root directory` by allowing `capability sys_chroot` in the AppArmor profile (#2709)
-- Fix AppArmor profile name (was `inadyn_addon`, colliding with several other add-ons); renamed to `elasticsearch_addon`
-
 ## 8.14.3-2 (2025-11-18)
 - 8.14.3-1 (2025-11-18)
   - Added `env_vars` option to support custom environment variables from the add-on configuration.

elasticsearch/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile elasticsearch_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile elasticsearch_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

elasticsearch/config.yaml

@@ -90,4 +90,4 @@ slug: elasticsearch
 startup: services
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/elasticsearch
-version: 8.14.3-3
+version: 8.14.3-1

emby/apparmor.txt

@@ -9,7 +9,6 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

emby_beta/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 4.10.0.15 (2026-06-20)
-- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
 ## 4.10.0.14 (2026-06-05)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
 

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.10.0.15"
+ARG BUILD_UPSTREAM="4.10.0.14"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile emby_beta_addon flags=(attach_disconnected,mediate_deleted) {
+profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile emby_beta_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.10.0.15"
+version: "4.10.0.14"
 video: true

emby_beta/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-05",
   "repository": "alexbelgium/hassio-addons",
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.10.0.15"
+  "upstream_version": "4.10.0.14"
 }

enedisgateway2mqtt/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile enedisgateway2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile enedisgateway2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

enedisgateway2mqtt_dev/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile enedisgateway2mqtt_dev_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile enedisgateway2mqtt_dev_addon flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

ente/apparmor.txt

@@ -9,7 +9,6 @@ profile ente_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

epicgamesfree/apparmor.txt

@@ -8,7 +8,6 @@ profile epicgamesfree_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

filebrowser/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile filebrowser_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile filebrowser_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

filebrowser_quantum/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 1.4.0 (2026-06-20)
-- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
 ## 1.3.3-8 (2026-06-03)
 - Add `default_user_scope` option: sets the FileBrowser source path and default user scope (must be an existing absolute directory path, defaults to `/`)
 

filebrowser_quantum/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile filebrowser_quantum_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile filebrowser_quantum_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

filebrowser_quantum/config.yaml

@@ -114,4 +114,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.4.0"
+version: "1.3.3-8"

filebrowser_quantum/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "false",
-  "last_update": "2026-06-20",
+  "last_update": "2026-05-19",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser_quantum",
   "source": "github",
   "upstream_repo": "gtsteffaniak/filebrowser",
-  "upstream_version": "1.4.0"
+  "upstream_version": "1.3.3"
 }

fireflyiii/apparmor.txt

@@ -8,7 +8,6 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

fireflyiii_data_importer/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile fireflyiii_data_importer_addon flags=(attach_disconnected,mediate_deleted) {
+profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile fireflyiii_data_importer_addon flags=(attach_disconnected,mediate_delete
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

fireflyiii_fints_importer/apparmor.txt

@@ -8,7 +8,6 @@ profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

flaresolverr/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile flaresolverr_addon flags=(attach_disconnected,mediate_deleted) {
+profile joplin flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile flaresolverr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

flexget/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.19.24 (2026-06-20)
-- Update to latest version from wiserain/flexget
- 
 ## 3.19.23 (2026-06-06)
 - Update to latest version from wiserain/flexget
 

flexget/apparmor.txt

@@ -8,7 +8,6 @@ profile flexget_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.19.24"
+version: "3.19.23"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-06",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.19.24"
+  "upstream_version": "3.19.23"
 }

free_games_claimer/apparmor.txt

@@ -8,7 +8,6 @@ profile free_games_claimer_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

gazpar2mqtt/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile gazpar2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile gazpar2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

gitea/CHANGELOG.md

@@ -1,11 +1,3 @@
-## 1.26.2-3 (19-06-2026)
-- Minor bugs fixed
-
-## 1.26.2-2 (2026-06-19)
-- Expose app.ini in the addon_config folder so users can edit it directly via the HA file editor
-
-## 1.26.2-1 (2026-06-19)
-- Fix SSH authentication failing with `chroot("/var/empty"): Operation not permitted [preauth]` by allowing `capability sys_chroot` in the AppArmor profile, which sshd needs for privilege-separation (#2653)
 
 ## 1.26.2 (2026-05-22)
 - Update to latest version from go-gitea/gitea (changelog : https://github.com/go-gitea/gitea/releases)

gitea/README.md

@@ -1,3 +1,4 @@
+## ⚠ Open Request : [✨ [REQUEST] Access to Gitea app.ini (opened 2025-06-10)](https://github.com/alexbelgium/hassio-addons/issues/1907) by [@UplandJacob](https://github.com/UplandJacob)
 # Home assistant add-on: Gitea
 
 
@@ -61,15 +62,6 @@ DOMAIN: "homeassistant.local"
 ROOT_URL: "http://homeassistant.local:3000"
 ```
 
-### Direct app.ini Access
-
-The Gitea `app.ini` configuration file is exposed in the add-on's config folder (`/addon_configs/gitea/app.ini` on the host), making it directly editable via the HA file editor or Studio Code add-on.
-
-- **On first run**: complete the Gitea setup wizard, then restart the add-on. The generated `app.ini` will be copied to the addon_config folder automatically.
-- **On subsequent runs**: edit `/addon_configs/gitea/app.ini` directly for any Gitea setting not covered by the options above. The add-on options (SSL, DOMAIN, ROOT_URL, APP_NAME) are still applied on top of your file each restart.
-
-See the [Gitea configuration cheat sheet](https://docs.gitea.com/administration/config-cheat-sheet) for all available options.
-
 ### Custom Scripts and Environment Variables
 
 This addon supports custom scripts and environment variables through the `addon_config` mapping:

gitea/apparmor.txt

@@ -8,7 +8,6 @@ profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

gitea/config.yaml

@@ -97,5 +97,5 @@ schema:
 slug: gitea
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/gitea
-version: "1.26.2-3"
+version: "1.26.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]"

gitea/rootfs/etc/cont-init.d/99-run.sh

@@ -2,32 +2,7 @@
 # shellcheck shell=bash
 set -e
 
-############################
-# EXPOSE APP.INI IN CONFIG #
-############################
-
-# Ensure the gitea conf directory exists
-mkdir -p /data/gitea/conf
-
-# If a real file (not a symlink) exists, move it to /config.
-# This covers both the initial migration from older installs and the post-wizard
-# case where Gitea's atomic SaveTo replaces the symlink with the completed config.
-# Always overwrite /config/app.ini so the installed settings are never discarded.
-if [ -f "/data/gitea/conf/app.ini" ] && [ ! -L "/data/gitea/conf/app.ini" ]; then
-    bashio::log.info "Moving app.ini to addon_config folder for direct access"
-    cp /data/gitea/conf/app.ini /config/app.ini
-    rm /data/gitea/conf/app.ini
-fi
-
-# Symlink /data/gitea/conf/app.ini -> /config/app.ini so the file is visible in the
-# addon_config folder (accessible via the HA file editor). When Gitea's first-run
-# wizard writes the config it lands in /config/app.ini via this symlink.
-if [ ! -L "/data/gitea/conf/app.ini" ]; then
-    ln -s /config/app.ini /data/gitea/conf/app.ini
-    bashio::log.info "app.ini is now accessible in your addon_config folder"
-fi
-
-for file in /config/app.ini /etc/templates/app.ini; do
+for file in /data/gitea/conf/app.ini /etc/templates/app.ini; do
 
     if [ ! -f "$file" ]; then
         continue

grampsweb/apparmor.txt

@@ -8,7 +8,6 @@ profile grampsweb_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

grav/apparmor.txt

@@ -8,7 +8,6 @@ profile grav_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

guacamole/apparmor.txt

@@ -8,7 +8,6 @@ profile guacamole_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

immich/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile immich_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile immich_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

immich_frame/apparmor.txt

@@ -8,7 +8,6 @@ profile db21ed7f_immich_frame flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

immich_power_tools/apparmor.txt

@@ -8,7 +8,6 @@ profile db21ed7f_immich_power_tools flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

inadyn/apparmor.txt

@@ -8,7 +8,6 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

jackett/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 0.24.2080 (2026-06-20)
-- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
- 
 ## 0.24.2075 (2026-06-17)
 - Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
  

jackett/apparmor.txt

@@ -9,7 +9,6 @@ profile jackett_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

jackett/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: jackett_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/jackett
-version: "0.24.2080"
+version: "0.24.2075"
 webui: http://[HOST]:[PORT:9117]

jackett/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-17",
   "repository": "alexbelgium/hassio-addons",
   "slug": "jackett",
   "source": "github",
   "upstream_repo": "linuxserver/docker-jackett",
-  "upstream_version": "0.24.2080"
+  "upstream_version": "0.24.2075"
 }

jellyfin/apparmor.txt

@@ -10,7 +10,6 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
   capability net_admin,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

joal/apparmor.txt

@@ -8,7 +8,6 @@ profile joal_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

joplin/apparmor.txt

@@ -8,7 +8,6 @@ profile joplin flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_time,
   file,
   signal,

kometa/apparmor.txt

@@ -9,7 +9,6 @@ profile kometa_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

librespeed/apparmor.txt

@@ -8,7 +8,6 @@ profile librespeed_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

lidarr/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile lidarr_addon flags=(attach_disconnected,mediate_deleted) {
+profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile lidarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

linkwarden/apparmor.txt

@@ -8,7 +8,6 @@ profile linkwarden_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

maintainerr/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.15.1 (2026-06-20)
-- Update to latest version from maintainerr/maintainerr (changelog : https://github.com/maintainerr/maintainerr/releases)
- 
 ## 3.15.0 (2026-06-11)
 - Update to latest version from maintainerr/maintainerr (changelog : https://github.com/maintainerr/maintainerr/releases)
  

maintainerr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="3.15.1"
+ARG BUILD_UPSTREAM="3.15.0"
 
 ############################
 # 0) Tools stage           #

maintainerr/apparmor.txt

@@ -8,7 +8,6 @@ profile maintainerr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

maintainerr/config.yaml

@@ -88,5 +88,5 @@ schema:
   TZ: str?
 slug: maintainerr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/maintainerr
-version: "3.15.1"
+version: "3.15.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:6246]"