fix(birdnet-pipy): wait for API (port 5002) before starting nginx to prevent 502 on ingress

Agent-Logs-Url: https://github.com/alexbelgium/hassio-addons/sessions/4e3f8d6e-aa60-49f1-9091-ec6eee21af29

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>

.github/stargazer_countries.csv

@@ -170,6 +170,7 @@ Davespire,
 DavidBabel,France
 DavidBrockmeier,United States
 DawnDevelop,
+Dbankhansen,
 DeHandigeGasten,Netherlands
 DeRossoMarco,
 Deanwhu7,
@@ -597,6 +598,7 @@ Rosscoer,
 RosutoHane,
 Roth-Development,
 RouNNdeL,Poland
+RougeComputer,
 RubenKelevra,Germany
 Rudi-Schmudi,
 RudyDevroey,
@@ -705,6 +707,7 @@ Thullalong69,Germany
 Tifeko,
 TiiMMY2CHAiiNZ,
 TimInTech,Germany
+Timbo74,
 Tohtli,
 Tokahiro,Germany
 TomCasavant,
@@ -754,6 +757,7 @@ X1pheR,Netherlands
 Xandistra,
 Xfox0ne,Austria
 XneddyX,
+XxCabbyoO,
 Yax,Poland
 YoYoost,
 YoshiiPlayzz,Germany
@@ -848,7 +852,7 @@ anggiaj,Indonesia
 angristan,France
 anipad,
 ankushg,United States
-antchagas,
+antchagas,Portugal
 anthurta,
 antiops,
 antoan12345,
@@ -925,6 +929,7 @@ bes-r,Netherlands
 bestnub,Germany
 beyercenter,
 bezigebever,
+bggsolar,Germany
 bgwolfe78,United States
 bhxfcna170JenniferLee,
 biazzotto,Brazil
@@ -1037,6 +1042,7 @@ chrisgrou,
 chrisguen,
 chrisnicho00,
 chrispenick,
+chrisphu,
 christarczon,
 christianklauss,Germany
 christoph00,
@@ -1438,6 +1444,7 @@ iWangJiaxiang,China
 iXanderz,
 iYUYUE,
 iainp999,United Kingdom
+iamjairo,Netherlands
 iamwdf,
 ian-peng,
 ianbecker,
@@ -1961,6 +1968,7 @@ parasav,
 parttimeentrepreneur,
 passionsfrucht,
 paszczaq,Poland
+patloh,Switzerland
 patpadgett,United States
 patrickcarmichael,United States
 patricklucescu,
@@ -2057,6 +2065,7 @@ quirbiefe,
 qun-media,
 r0rqual,United States
 rJUUSO,
+ralong777,
 ranjitrajkumar,Canada
 raphael1688,
 rapjul,
@@ -2471,6 +2480,7 @@ yingfengstar,
 yngveskog,
 yo8aiv,United States
 yogitea,
+yoheines,
 yonis37,
 yoshimo,
 yoswa,Netherlands

CLAUDE.md

@@ -0,0 +1,148 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Repository Overview
+
+This is a Home Assistant add-on repository containing 120+ Docker-based add-ons for the Home Assistant Supervisor. Each add-on is a self-contained directory with a Dockerfile, config schema, and S6-overlay init scripts. The repository uses GitHub Actions for CI/CD, linting, and automated upstream version tracking.
+
+## Add-On Directory Structure
+
+Most add-ons follow this common layout, though exceptions exist (e.g. some archived add-ons use `config.json` instead of `config.yaml`, some add-ons have `build.yaml` instead of `build.json` or no build file at all, and not every add-on includes a `rootfs/` tree):
+
+```
+addon_name/
+├── config.yaml          # HA add-on metadata, schema, ports, maps
+├── build.json           # Base Docker images per architecture (may be build.yaml, or absent)
+├── Dockerfile           # Multi-stage build (always uses shared .templates/ scripts)
+├── updater.json         # Upstream release tracking; required to enable automatic updates
+├── CHANGELOG.md         # Required; must be updated on every PR
+└── rootfs/              # Optional; absent in some add-ons
+    └── etc/
+        ├── cont-init.d/ # S6-overlay init scripts (numbered, run in order)
+        └── services.d/  # S6-overlay supervised services (some add-ons use
+                         # s6-overlay v3 layout at etc/s6-overlay/s6-rc.d/ instead)
+```
+
+## Dockerfile Convention
+
+Most Dockerfiles follow this 6-section pattern (some add-ons deviate slightly, e.g. using a pinned upstream image directly instead of `ARG BUILD_FROM`):
+
+1. **Build Image** – `ARG BUILD_FROM` + `FROM ${BUILD_FROM}`
+2. **Modify Image** – S6 env vars, LSIO modifications via `ha_lsio.sh`
+3. **Install Apps** – Copy `rootfs/`, download modules, install packages
+4. **Entrypoint** – Set `S6_STAGE2_HOOK=/ha_entrypoint.sh`
+5. **Labels** – Standard OCI + HA labels from build args
+6. **Healthcheck** – curl-based check suppressed from nginx/apache logs
+
+Shared build-time scripts are pulled from `.templates/` at build time:
+- `ha_automodules.sh` – Downloads module scripts listed in `ARG MODULES=`
+- `ha_autoapps.sh` – Installs packages listed in `ENV PACKAGES=`
+- `ha_entrypoint.sh` – S6 stage-2 hook; launches the cont-init stack at container start
+- `ha_lsio.sh` – Patches LinuxServer.io base images for HA compatibility
+- `bashio-standalone.sh` – Bashio library for scripts outside Supervisor context
+
+The `ARG MODULES=` line lists template scripts to download at build time (e.g., `00-banner.sh 01-custom_script.sh 00-smb_mounts.sh`). Commonly-used modules in `.templates/` (not exhaustive):
+- `00-global_var.sh` – Initialize global env vars from HA options
+- `00-local_mounts.sh` – Mount local disks (localdisks option)
+- `00-smb_mounts.sh` – SMB/CIFS network mount support
+- `01-config_yaml.sh` – Map HA options → app's `config.yaml`
+- `01-custom_script.sh` – Run user-provided custom scripts
+- `90-disable_ingress.sh` – Allow disabling HA ingress
+- `90-dns_set.sh` – Configure custom DNS
+- `91-universal_graphic_drivers.sh` – GPU driver detection
+- `19-json_repair.sh` – Validate/repair JSON config files
+
+## config.yaml Schema
+
+Key fields in every add-on's `config.yaml`:
+
+```yaml
+arch: [aarch64, amd64]
+image: ghcr.io/alexbelgium/{slug}-{arch}
+version: "X.Y.Z"          # upstream version (format varies; see Versioning section)
+ingress: true/false
+ingress_port: 8000
+map:
+  - addon_config:rw        # /addon_configs/<hostname>/
+  - share:rw
+  - media:rw
+  - ssl
+schema:
+  env_vars:                # Allows arbitrary env var passthrough
+    - name: match(^[A-Za-z0-9_]+$)
+      value: str?
+  PUID: int
+  PGID: int
+  TZ: str?
+  networkdisks: str?       # SMB mounts
+  localdisks: str?         # Local disk mounts
+```
+
+The `env_vars` schema key enables the env-var passthrough mechanism. At runtime the `00-global_var.sh` cont-init module reads `/data/options.json` and exports each key as an environment variable (writing to `/.env` and `/etc/environment`). `ha_entrypoint.sh` is the S6 stage-2 hook that launches the cont-init stack but does not itself perform the JSON-to-env conversion.
+
+## Versioning
+
+Add-on versions in `config.yaml` closely follow the upstream release tag and do not conform to a single fixed format. Common patterns include:
+
+- `X.Y.Z` – plain upstream semver (e.g. `0.137.0`)
+- `X.Y.Z-N` – upstream version with a local patch counter (e.g. `0.6.26-2`)
+- LSIO-style tags (e.g. `1.43.1.10611-1e34174b1-ls301`)
+- Date-based versions (e.g. `2026.02.28`)
+- Nightly builds (e.g. `nightly-20260321-397`)
+
+When an upstream version is bumped, update `version` in `config.yaml`. If the add-on's `Dockerfile` contains an `ARG BUILD_UPSTREAM` line, update that value too — it is the canonical place that records the upstream version at build time (it is **not** stored in `build.json`/`build.yaml`). Some add-ons do not use `BUILD_UPSTREAM` at all. The `updater.json` file tracks which upstream source/repo to monitor and records the last seen version.
+
+## updater.json Format
+
+```json
+{
+  "source": "github",           // github|dockerhub|pip|gitlab|bitbucket|helm_chart|...
+  "upstream_repo": "owner/repo",
+  "upstream_version": "1.2.3",  // auto-populated by addons_updater
+  "slug": "addon_slug",
+  "last_update": "2025-01-01",
+  "github_beta": false,
+  "github_fulltag": false,      // true = keep "v3.0.1-ls67", false = strip to "3.0.1"
+  "github_tagfilter": "",       // require this text in release tag
+  "github_exclude": "",         // exclude releases containing this text
+  "paused": false
+}
+```
+
+## CI/CD Workflows
+
+**On push to master** (`onpush_builder.yaml`): Detects changed add-ons by watching `config.*` files, then sanitizes text files (Unicode spaces → ASCII, CRLF → LF) and restores shell script permissions. Auto-commits fixes with `[nobuild]` to skip rebuild loop.
+
+**On PR** (`onpr_check-pr.yaml`): Validates CHANGELOG.md was updated, runs HA addon-linter, and tests Docker build for all changed add-ons.
+
+**Weekly** (`lint.yml`): Runs Super-Linter across the repo, fixes shell formatting with shfmt (4-space indent), opens PRs for automated fixes.
+
+**Weekly** (`weekly_addons_updater`): Runs the `addons_updater` container to bump add-on versions to match upstream.
+
+Adding `[nobuild]` anywhere in a commit message skips the builder workflow.
+
+## Linting Rules
+
+| Tool | Config | Key ignores |
+|------|--------|------------|
+| Hadolint | `.hadolint.yaml` | DL3002, DL3006-9, DL3018 (no pinning required) |
+| ShellCheck | `.shellcheckrc` | SC2002 |
+| Markdownlint | `.markdownlint.yaml` | MD013 (line length), MD025, MD033, MD041 |
+| shfmt | (CI enforced) | 4-space indent |
+
+## PR Requirements
+
+1. Update `CHANGELOG.md` in every changed add-on (CI validates this).
+2. Bump `version` in `config.yaml`.
+3. All linting must pass (Hadolint, ShellCheck, Markdownlint, HA addon-linter).
+4. Docker build must succeed for all declared architectures.
+
+## S6-Overlay Init Script Naming
+
+Scripts in `rootfs/etc/cont-init.d/` run in lexicographic order. Common numbering conventions (many add-ons use other prefixes too):
+- `20-*` – Directory/folder setup
+- `32-*` – Nginx ingress configuration (e.g. `32-nginx_ingress.sh`)
+- `80-*` – Application configuration
+- `90-*` – Misc pre-startup tasks (ssl, vpn, custom run)
+- `99-*` – Final startup / launch

README.md

@@ -112,12 +112,13 @@ If you want to do add the repository manually, please follow the procedure highl
 ![smb][smb-badge]
 ![localdisks][localdisks-badge]
 
-✓  [Bazarr NAS](bazarr/) : Companion application to Sonarr and Radarr to download subtitles
+✓ ![image](https://api.iconify.design/mdi/subtitles-outline.svg) [Bazarr NAS](bazarr/) : Companion application to Sonarr and Radarr to download subtitles
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fbazarr%2Fconfig.yaml)
 ![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fbazarr%2Fupdater.json)
 ![aarch64][aarch64-badge]
 ![amd64][amd64-badge]
+![ingress][ingress-badge]
 ![smb][smb-badge]
 ![localdisks][localdisks-badge]
 

bazarr/CHANGELOG.md

@@ -1,4 +1,11 @@
 
+## 1.5.6-4 (2026-04-22)
+- Fix Bazarr crash on startup: base_url must start with '/' for Flask blueprint registration
+
+## 1.5.6-3
+- Add Ingress support with nginx reverse proxy for sidebar integration
+- Add connection_mode option (ingress_noauth/noingress_auth/ingress_auth)
+
 ## 1.5.6 (2026-02-28)
 - Update to latest version from linuxserver/docker-bazarr (changelog : https://github.com/linuxserver/docker-bazarr/releases)
 

bazarr/Dockerfile

@@ -47,14 +47,14 @@ RUN if [ ! -f /bin/sh ] && [ -f /usr/bin/sh ]; then ln -s /usr/bin/sh /bin/sh; f
     if [ ! -f /bin/bash ] && [ -f /usr/bin/bash ]; then ln -s /usr/bin/bash /bin/bash; fi
 
 # Modules
-ARG MODULES="00-banner.sh 01-custom_script.sh 00-local_mounts.sh 00-smb_mounts.sh"
+ARG MODULES="00-banner.sh 01-custom_script.sh 90-disable_ingress.sh 00-local_mounts.sh 00-smb_mounts.sh"
 
 # Automatic modules download
 COPY ha_automodules.sh /ha_automodules.sh
 RUN chmod 744 /ha_automodules.sh && /ha_automodules.sh "$MODULES" && rm /ha_automodules.sh
 
 # Manual apps
-ENV PACKAGES=""
+ENV PACKAGES="nginx"
 
 # Automatic apps & bashio
 COPY ha_autoapps.sh /ha_autoapps.sh

bazarr/README.md

@@ -48,18 +48,26 @@ Configurations can be done through the app webUI, except for the following optio
 | `PGID` | int | `0` | Group ID for file permissions |
 | `PUID` | int | `0` | User ID for file permissions |
 | `TZ` | str | | Timezone (e.g., `Europe/London`) |
+| `connection_mode` | list | `ingress_noauth` | Connection mode (ingress_noauth/noingress_auth/ingress_auth) |
 | `localdisks` | str | | Local drives to mount (e.g., `sda1,sdb1,MYNAS`) |
 | `networkdisks` | str | | SMB shares to mount (e.g., `//SERVER/SHARE`) |
 | `cifsusername` | str | | SMB username for network shares |
 | `cifspassword` | str | | SMB password for network shares |
 | `cifsdomain` | str | | SMB domain for network shares |
 
+### Connection Modes
+
+- `ingress_noauth` - Default, disables authentication for seamless ingress integration
+- `noingress_auth` - Disables ingress for external URL, enables authentication
+- `ingress_auth` - Enables both ingress and authentication
+
 ### Example Configuration
 
 ```yaml
 PGID: 0
 PUID: 0
 TZ: "Europe/London"
+connection_mode: "ingress_noauth"
 localdisks: "sda1,sdb1"
 networkdisks: "//192.168.1.100/media,//nas.local/subtitles"
 cifsusername: "mediauser"

bazarr/config.yaml

@@ -72,6 +72,8 @@ environment:
   PGID: "0"
   PUID: "0"
 image: ghcr.io/alexbelgium/bazarr-{arch}
+ingress: true
+ingress_entry: bazarr
 init: false
 map:
   - addon_config:rw
@@ -84,6 +86,9 @@ options:
   env_vars: []
   PGID: 0
   PUID: 0
+  connection_mode: ingress_noauth
+panel_admin: false
+panel_icon: mdi:subtitles-outline
 ports:
   6767/tcp: 6767
 ports_description:
@@ -101,10 +106,11 @@ schema:
   cifsdomain: str?
   cifspassword: str?
   cifsusername: str?
+  connection_mode: list(ingress_noauth|noingress_auth|ingress_auth)
   localdisks: str?
   networkdisks: str?
 slug: bazarr_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/bazarr
-version: "1.5.6"
+version: "1.5.6-4"
 webui: "[PROTO:ssl]://[HOST]:[PORT:6767]"

bazarr/rootfs/etc/cont-init.d/32-nginx_ingress.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/with-contenv bashio
+# shellcheck shell=bash
+set -e
+
+#################
+# NGINX SETTING #
+#################
+declare ingress_interface
+declare ingress_port
+
+ingress_port=$(bashio::addon.ingress_port)
+ingress_interface=$(bashio::addon.ip_address)
+ingress_entry=$(bashio::addon.ingress_entry)
+sed -i "s/%%port%%/${ingress_port}/g" /etc/nginx/servers/ingress.conf
+sed -i "s/%%interface%%/${ingress_interface}/g" /etc/nginx/servers/ingress.conf
+sed -i "s|%%ingress_entry%%|${ingress_entry}|g" /etc/nginx/servers/ingress.conf
+
+##################
+# CONFIG SETTING #
+##################
+
+# Values
+slug=bazarr
+CONFIG_LOCATION=/config/config/config.yaml
+
+if [ -f "$CONFIG_LOCATION" ]; then
+
+    # Define addon mode
+    connection_mode="$(bashio::config "connection_mode")"
+    bashio::log.green "---------------------------"
+    bashio::log.green "Connection_mode is $connection_mode"
+    bashio::log.green "---------------------------"
+    case "$connection_mode" in
+        # Ingress mode, authentication is disabled
+        ingress_noauth)
+            bashio::log.green "Ingress is enabled, authentication is disabled"
+            bashio::log.yellow "WARNING : Make sure that the port is not exposed externally by your router to avoid a security risk !"
+            # Set base_url (must start with / for Flask blueprint registration)
+            sed -i "s|  base_url:.*|  base_url: /$slug|" "$CONFIG_LOCATION"
+            # Disable auth
+            sed -i '/^auth:/,/^[^ ]/{ s/  type:.*/  type: null/ }' "$CONFIG_LOCATION"
+            ;;
+        # Ingress mode, with authentication
+        ingress_auth)
+            bashio::log.green "Ingress is enabled, and external authentication is enabled"
+            # Set base_url (must start with / for Flask blueprint registration)
+            sed -i "s|  base_url:.*|  base_url: /$slug|" "$CONFIG_LOCATION"
+            # Enable Bazarr auth when leaving ingress_noauth
+            sed -i '/^auth:/,/^[^ ]/{ s/  type:.*/  type: form/ }' "$CONFIG_LOCATION"
+            ;;
+        # No ingress mode, with authentication
+        noingress_auth)
+            bashio::log.green "Disabling ingress and enabling authentication"
+            bashio::log.yellow "WARNING : Ingress is disabled so the app won't be available from HA itself !"
+            sed -i "s/  base_url:.*/  base_url: ''/" "$CONFIG_LOCATION"
+            # Enable Bazarr auth when leaving ingress_noauth
+            sed -i '/^auth:/,/^[^ ]/{ s/  type:.*/  type: form/ }' "$CONFIG_LOCATION"
+            ;;
+    esac
+
+fi

bazarr/rootfs/etc/nginx/includes/mime.types

@@ -0,0 +1,96 @@
+types {
+    text/html                                        html htm shtml;
+    text/css                                         css;
+    text/xml                                         xml;
+    image/gif                                        gif;
+    image/jpeg                                       jpeg jpg;
+    application/javascript                           js;
+    application/atom+xml                             atom;
+    application/rss+xml                              rss;
+
+    text/mathml                                      mml;
+    text/plain                                       txt;
+    text/vnd.sun.j2me.app-descriptor                 jad;
+    text/vnd.wap.wml                                 wml;
+    text/x-component                                 htc;
+
+    image/png                                        png;
+    image/svg+xml                                    svg svgz;
+    image/tiff                                       tif tiff;
+    image/vnd.wap.wbmp                               wbmp;
+    image/webp                                       webp;
+    image/x-icon                                     ico;
+    image/x-jng                                      jng;
+    image/x-ms-bmp                                   bmp;
+
+    font/woff                                        woff;
+    font/woff2                                       woff2;
+
+    application/java-archive                         jar war ear;
+    application/json                                 json;
+    application/mac-binhex40                         hqx;
+    application/msword                               doc;
+    application/pdf                                  pdf;
+    application/postscript                           ps eps ai;
+    application/rtf                                  rtf;
+    application/vnd.apple.mpegurl                    m3u8;
+    application/vnd.google-earth.kml+xml             kml;
+    application/vnd.google-earth.kmz                 kmz;
+    application/vnd.ms-excel                         xls;
+    application/vnd.ms-fontobject                    eot;
+    application/vnd.ms-powerpoint                    ppt;
+    application/vnd.oasis.opendocument.graphics      odg;
+    application/vnd.oasis.opendocument.presentation  odp;
+    application/vnd.oasis.opendocument.spreadsheet   ods;
+    application/vnd.oasis.opendocument.text          odt;
+    application/vnd.openxmlformats-officedocument.presentationml.presentation
+                                                     pptx;
+    application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
+                                                     xlsx;
+    application/vnd.openxmlformats-officedocument.wordprocessingml.document
+                                                     docx;
+    application/vnd.wap.wmlc                         wmlc;
+    application/x-7z-compressed                      7z;
+    application/x-cocoa                              cco;
+    application/x-java-archive-diff                  jardiff;
+    application/x-java-jnlp-file                     jnlp;
+    application/x-makeself                           run;
+    application/x-perl                               pl pm;
+    application/x-pilot                              prc pdb;
+    application/x-rar-compressed                     rar;
+    application/x-redhat-package-manager             rpm;
+    application/x-sea                                sea;
+    application/x-shockwave-flash                    swf;
+    application/x-stuffit                            sit;
+    application/x-tcl                                tcl tk;
+    application/x-x509-ca-cert                       der pem crt;
+    application/x-xpinstall                          xpi;
+    application/xhtml+xml                            xhtml;
+    application/xspf+xml                             xspf;
+    application/zip                                  zip;
+
+    application/octet-stream                         bin exe dll;
+    application/octet-stream                         deb;
+    application/octet-stream                         dmg;
+    application/octet-stream                         iso img;
+    application/octet-stream                         msi msp msm;
+
+    audio/midi                                       mid midi kar;
+    audio/mpeg                                       mp3;
+    audio/ogg                                        ogg;
+    audio/x-m4a                                      m4a;
+    audio/x-realaudio                                ra;
+
+    video/3gpp                                       3gpp 3gp;
+    video/mp2t                                       ts;
+    video/mp4                                        mp4;
+    video/mpeg                                       mpeg mpg;
+    video/quicktime                                  mov;
+    video/webm                                       webm;
+    video/x-flv                                      flv;
+    video/x-m4v                                      m4v;
+    video/x-mng                                      mng;
+    video/x-ms-asf                                   asx asf;
+    video/x-ms-wmv                                   wmv;
+    video/x-msvideo                                  avi;
+}

bazarr/rootfs/etc/nginx/includes/proxy_params.conf

@@ -0,0 +1,16 @@
+proxy_http_version          1.1;
+proxy_ignore_client_abort   off;
+proxy_read_timeout          86400s;
+proxy_redirect              off;
+proxy_send_timeout          86400s;
+proxy_max_temp_file_size    0;
+
+proxy_hide_header X-Frame-Options;
+proxy_set_header Accept-Encoding "";
+proxy_set_header Connection $connection_upgrade;
+proxy_set_header Upgrade $http_upgrade;
+proxy_set_header Host $http_host;
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+proxy_set_header X-Forwarded-Proto $scheme;
+proxy_set_header X-NginX-Proxy true;
+proxy_set_header X-Real-IP $remote_addr; 

bazarr/rootfs/etc/nginx/includes/resolver.conf

@@ -0,0 +1 @@
+resolver 127.0.0.11 ipv6=off;

bazarr/rootfs/etc/nginx/includes/server_params.conf

@@ -0,0 +1,5 @@
+server_name     $hostname;
+
+add_header X-Content-Type-Options nosniff;
+add_header X-XSS-Protection "1; mode=block";
+add_header X-Robots-Tag none;

bazarr/rootfs/etc/nginx/includes/ssl_params.conf

@@ -0,0 +1,9 @@
+ssl_protocols TLSv1.2;
+ssl_prefer_server_ciphers on;
+ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA;
+ssl_ecdh_curve secp384r1;
+ssl_session_timeout  10m;
+ssl_session_cache shared:SSL:10m;
+ssl_session_tickets off;
+ssl_stapling on;
+ssl_stapling_verify on;

bazarr/rootfs/etc/nginx/includes/upstream.conf

@@ -0,0 +1,3 @@
+upstream backend {
+    server 127.0.0.1:8080;
+}

bazarr/rootfs/etc/nginx/nginx.conf

@@ -0,0 +1,57 @@
+
+# Run nginx in foreground.
+daemon off;
+
+# This is run inside Docker.
+user root;
+
+# Pid storage location.
+pid /var/run/nginx.pid;
+
+# Set number of worker processes.
+worker_processes 1;
+
+# Enables the use of JIT for regular expressions to speed-up their processing.
+pcre_jit on;
+
+# Write error log to Hass.io add-on log.
+error_log /proc/1/fd/1 error;
+
+# Load allowed environment vars
+env HASSIO_TOKEN;
+
+# Load dynamic modules.
+include /etc/nginx/modules/*.conf;
+
+# Max num of simultaneous connections by a worker process.
+events {
+    worker_connections 512;
+}
+
+http {
+    include /etc/nginx/includes/mime.types;
+
+    log_format hassio '[$time_local] $status '
+                        '$http_x_forwarded_for($remote_addr) '
+                        '$request ($http_user_agent)';
+
+    access_log              /proc/1/fd/1 hassio;
+    client_max_body_size    4G;
+    default_type            application/octet-stream;
+    gzip                    on;
+    keepalive_timeout       65;
+    sendfile                on;
+    server_tokens           off;
+    tcp_nodelay             on;
+    tcp_nopush              on;
+
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        ''      close;
+    }
+
+    include /etc/nginx/includes/resolver.conf;
+    include /etc/nginx/includes/upstream.conf;
+
+    include /etc/nginx/servers/*.conf;
+} 

bazarr/rootfs/etc/nginx/servers/ingress.conf

@@ -0,0 +1,29 @@
+server {
+    listen %%interface%%:%%port%% default_server;
+
+    #include /etc/nginx/includes/server_params.conf;
+    #include /etc/nginx/includes/proxy_params.conf;
+
+    client_max_body_size 0;
+
+   location / {
+       add_header Access-Control-Allow-Origin *;
+       proxy_connect_timeout 30m;
+       proxy_send_timeout 30m;
+       proxy_read_timeout 30m;
+       proxy_pass         http://127.0.0.1:6767;
+
+       # Allow websocket
+       proxy_http_version 1.1;
+       proxy_set_header Upgrade $http_upgrade;
+       proxy_set_header Connection $http_connection;
+       #auth_basic off;
+
+       # Correct base_url
+       proxy_set_header Accept-Encoding "";
+       sub_filter_once off;
+       sub_filter_types *;
+       sub_filter /bazarr %%ingress_entry%%/bazarr;
+  }
+
+}

bazarr/rootfs/etc/services.d/nginx/finish

@@ -0,0 +1,8 @@
+#!/usr/bin/execlineb -S0
+# ==============================================================================
+# Take down the S6 supervision tree when Nginx fails
+# ==============================================================================
+if { s6-test ${1} -ne 0 }
+if { s6-test ${1} -ne 256 }
+
+s6-svscanctl -t /var/run/s6/services

bazarr/rootfs/etc/services.d/nginx/run

@@ -0,0 +1,28 @@
+#!/usr/bin/with-contenv bashio
+# shellcheck shell=bash
+set -e
+# ==============================================================================
+
+# Set variables
+slug=bazarr
+port=6767
+CONFIG_LOCATION=/config/config/config.yaml
+
+# Wait for bazarr to become available
+bashio::net.wait_for "$port" localhost 900
+
+# Set base_url
+if [ -f "$CONFIG_LOCATION" ]; then
+    if ! bashio::config.true "ingress_disabled"; then
+        if ! bashio::config.has_value "connection_mode" || [ "$(bashio::config 'connection_mode')" != "noingress_auth" ]; then
+            if ! grep -q "base_url.*$slug" "$CONFIG_LOCATION"; then
+                bashio::log.warning "BaseUrl not set properly, restarting"
+                sed -i "s/  base_url:.*/  base_url: $slug/" "$CONFIG_LOCATION"
+                bashio::addon.restart
+            fi
+        fi
+    fi
+fi
+
+bashio::log.info "Starting NGinx..."
+exec nginx

birdnet-pipy/CHANGELOG.md

@@ -1,3 +1,12 @@
+
+## 0.6.6-1 (2026-04-23)
+- Fix 502 Bad Gateway on ingress: nginx now waits for the API server (port 5002) to be ready before starting. Previously, nginx started immediately while the ML model was still loading, causing all API calls to fail with 502 until the model finished loading.
+
+
+- Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
+
+## 0.6.4 (2026-04-18)
+- Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
 ## 0.6.3-3 (2026-04-17)
 - Enable Core API access (`homeassistant_api: true`) so the addon can call HA Core's `update.install` service. Required for in-app self-update — Supervisor blocks `/store/addons/<self>/update`, so the backend routes through Core.
 
@@ -10,7 +19,7 @@
 - Removes incidental brittleness from byte-level `sub_filter` matches in minified JS bundles (the old `/stream/` rule had inadvertently double-prefixed the literal `api.get("/stream/config")` string).
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
 
-## 0.6.2-2 (11-04-2026)
+## 0.6.2-2 (2026-04-11)
 - Minor bugs fixed
 
 ## 0.6.2 (2026-04-11)
@@ -36,21 +45,21 @@
 
 ## 0.5.6 (2026-03-07)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
-## 0.5.5-2 (04-03-2026)
+## 0.5.5-2 (2026-03-04)
 - Minor bugs fixed
 
 ## 0.5.5 (2026-03-02)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
-## 0.5.4-3 (26-02-2026)
+## 0.5.4-3 (2026-02-26)
 - Minor bugs fixed
-## 0.5.4-2 (23-02-2026)
+## 0.5.4-2 (2026-02-23)
 - Fix Icecast service failing to connect to PulseAudio on HAOS by respecting PULSE_SERVER env var and setting up socket symlink and auth cookie for icecast2 user
 
 ## 0.5.4 (2026-02-21)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
-## 0.5.0-6 (15-02-2026)
+## 0.5.0-6 (2026-02-15)
 - Minor bugs fixed
-## 0.5.0-5 (15-02-2026)
+## 0.5.0-5 (2026-02-15)
 - Minor bugs fixed
 ## 0.5.0-4 (2026-02-15)
 - Disable nginx service when ingress is not active
@@ -66,31 +75,20 @@
 
 ## 0.4.0 (2026-02-07)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
-## 0.3.2-6 (01-02-2026)
+## 0.3.2-6 (2026-02-01)
 - Minor bugs fixed
-## 0.3.2-5 (01-02-2026)
+## 0.3.2-5 (2026-02-01)
 - Minor bugs fixed
-## 0.3.2-4 (31-01-2026)
+## 0.3.2-4 (2026-01-31)
 - Minor bugs fixed
-## 0.3.2-2 (31-01-2026)
+## 0.3.2-2 (2026-01-31)
 - Minor bugs fixed
 
 ## 0.3.2-3 (2026-01-30)
 - Build frontend with /birdnet/ base path and serve under /birdnet/ for ingress compatibility.
 ## 0.3.2 (2026-01-30)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
-## 0.6.6 (30-01-2026)
-- Minor bugs fixed
-## 0.6.5 (30-01-2026)
-- Minor bugs fixed
-## 0.6.3 (29-01-2026)
-- Minor bugs fixed
-## 0.6.2 (29-01-2026)
-- Use upstream nginx.conf and generate ingress config at startup
-## 0.6.1 (29-01-2026)
-- Minor bugs fixed
-## 0.2 (29-01-2026)
-- Minor bugs fixed
+
 # Changelog
 
 ## 0.1.0

birdnet-pipy/config.yaml

@@ -96,4 +96,4 @@ schema:
   ssl: bool?
 slug: birdnet-pipy
 url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-pipy
-version: "0.6.3-3"
+version: "0.6.6-1"

birdnet-pipy/rootfs/etc/services.d/nginx/run

@@ -2,4 +2,9 @@
 # shellcheck shell=bash
 set -euo pipefail
 
+# Wait for the API server to be ready before exposing the ingress. Without
+# this, nginx starts immediately while the model is still loading (can take
+# minutes), causing every frontend API call to return a 502 Bad Gateway.
+bashio::net.wait_for 5002 127.0.0.1 300
+
 nginx

birdnet-pipy/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-04-13",
+  "last_update": "2026-04-21",
   "repository": "alexbelgium/hassio-addons",
   "slug": "birdnet-pipy",
   "source": "github",
   "upstream_repo": "Suncuss/BirdNET-PiPy",
-  "upstream_version": "0.6.3"
+  "upstream_version": "0.6.6"
 }

bitwarden/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.35.7 (2026-04-18)
+- Update to latest version from dani-garcia/bitwarden_rs (changelog : https://github.com/dani-garcia/bitwarden_rs/releases)
+
 ## 1.35.4 (2026-02-28)
 - Update to latest version from dani-garcia/bitwarden_rs (changelog : https://github.com/dani-garcia/bitwarden_rs/releases)
 

bitwarden/config.yaml

@@ -28,5 +28,5 @@ schema:
 slug: bitwarden
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/bitwarden
-version: "1.35.4"
+version: "1.35.7"
 webui: "[PROTO:ssl]://[HOST]:[PORT:7277]"

bitwarden/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-02-28",
+  "last_update": "2026-04-18",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "bitwarden",
   "source": "github",
   "upstream_repo": "dani-garcia/bitwarden_rs",
-  "upstream_version": "1.35.4"
+  "upstream_version": "1.35.7"
 }

browser_brave/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.89.137-ls91 (2026-04-18)
+- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
+
 ## 1.89.132-ls89 (2026-04-11)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
 

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.89.132-ls89"
+version: "1.89.137-ls91"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-04-11",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.89.132-ls89"
+  "upstream_version": "1.89.137-ls91"
 }

browser_chromium/CHANGELOG.md

@@ -1,2 +1,5 @@
+
+## version-858340b9 (2026-04-18)
+- Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
 ## version-76e3a185 (10-04-2026)
 - Minor bugs fixed

browser_chromium/config.yaml

@@ -71,5 +71,5 @@ slug: chromium
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "version-76e3a185"
+version: "version-858340b9"
 video: true

browser_chromium/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-04-11",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "chromium",
   "source": "github",
   "upstream_repo": "linuxserver/docker-chromium",
-  "upstream_version": "version-76e3a185"
+  "upstream_version": "version-858340b9"
 }

browserless_chrome/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.47.0 (2026-04-18)
+- Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
+
 ## 2.46.0 (2026-03-28)
 - Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
 

browserless_chrome/config.yaml

@@ -86,5 +86,5 @@ schema:
 slug: browserless_chrome
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/browserless_chrome
-version: "2.46.0"
+version: "2.47.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]/docs"

browserless_chrome/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "v",
-  "last_update": "2026-03-28",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "browserless_chrome",
   "source": "github",
   "upstream_repo": "browserless/chrome",
-  "upstream_version": "2.46.0"
+  "upstream_version": "2.47.0"
 }

changedetection.io/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 0.54.9 (2026-04-18)
+- Update to latest version from linuxserver/docker-changedetection.io (changelog : https://github.com/linuxserver/docker-changedetection.io/releases)
+
 ## 0.54.8 (2026-04-06)
 - Update to latest version from linuxserver/docker-changedetection.io (changelog : https://github.com/linuxserver/docker-changedetection.io/releases)
 

changedetection.io/config.yaml

@@ -34,4 +34,4 @@ schema:
 slug: changedetection.io
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/changedetection.io
-version: "0.54.8"
+version: "0.54.9"

changedetection.io/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "false",
-  "last_update": "2026-04-06",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "changedetection.io",
   "source": "github",
   "upstream_repo": "linuxserver/docker-changedetection.io",
-  "upstream_version": "0.54.8"
+  "upstream_version": "0.54.9"
 }

cleanuparr/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.9.8 (2026-04-18)
+- Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
+
 ## 2.9.5 (2026-04-11)
 - Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
 

cleanuparr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="2.9.5"
+ARG BUILD_UPSTREAM="2.9.8"
 
 #################
 # 1 Build Image #

cleanuparr/config.yaml

@@ -91,5 +91,5 @@ schema:
   TZ: str?
 slug: cleanuparr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cleanuparr
-version: "2.9.5"
+version: "2.9.8"
 webui: "[PROTO:ssl]://[HOST]:[PORT:11011]"

cleanuparr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-04-11",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cleanuparr",
   "source": "github",
   "upstream_repo": "Cleanuparr/Cleanuparr",
-  "upstream_version": "2.9.5"
+  "upstream_version": "2.9.8"
 }

cloudcommander/CHANGELOG.md

@@ -1,3 +1,6 @@
+
+## 19.13.0 (2026-04-18)
+- Update to latest version from coderaiser/cloudcmd (changelog : https://github.com/coderaiser/cloudcmd/releases)
 ## 19.12.1-2 (11-04-2026)
 - Minor bugs fixed
 

cloudcommander/config.yaml

@@ -104,4 +104,4 @@ schema:
 slug: cloudcommander
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cloudcommander
-version: "19.12.1-2"
+version: "19.13.0"

cloudcommander/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-04-11",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cloudcommander",
   "source": "github",
   "upstream_repo": "coderaiser/cloudcmd",
-  "upstream_version": "19.12.1"
+  "upstream_version": "19.13.0"
 }

codex/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.10.11 (2026-04-18)
+- Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
+
 ## 1.10.9 (2026-04-11)
 - Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
 

codex/config.yaml

@@ -101,4 +101,4 @@ schema:
 slug: codex
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.10.9"
+version: "1.10.11"

codex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-04-11",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "codex",
   "source": "github",
   "upstream_repo": "ajslater/codex",
-  "upstream_version": "1.10.9"
+  "upstream_version": "1.10.11"
 }

emby_beta/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 4.10.0.10 (2026-04-18)
+- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
+
 ## 4.10.0.8 (2026-04-04)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
 ## streaming your media (beta version) 4.10.0.6 (21-03-2026)

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.10.0.8"
+ARG BUILD_UPSTREAM="4.10.0.10"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.10.0.8"
+version: "4.10.0.10"
 video: true

emby_beta/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-04-04",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.10.0.8"
+  "upstream_version": "4.10.0.10"
 }

epicgamesfree/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## debian-2026-04-17 (2026-04-17)
+- Update to latest version from charlocharlie/epicgames-freegames
+
 ## debian-2026-04-10 (2026-04-10)
 - Update to latest version from charlocharlie/epicgames-freegames
 

epicgamesfree/config.yaml

@@ -88,5 +88,5 @@ schema:
 slug: epicgamesfree
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "debian-2026-04-10"
+version: "debian-2026-04-17"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]"

epicgamesfree/updater.json

@@ -2,10 +2,10 @@
   "dockerhub_by_date": true,
   "dockerhub_list_size": 2,
   "github_exclude": "-",
-  "last_update": "2026-04-10",
+  "last_update": "2026-04-17",
   "repository": "alexbelgium/hassio-addons",
   "slug": "epicgamesfree",
   "source": "dockerhub",
   "upstream_repo": "charlocharlie/epicgames-freegames",
-  "upstream_version": "debian-2026-04-10"
+  "upstream_version": "debian-2026-04-17"
 }

filebrowser/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.63.2 (2026-04-18)
+- Update to latest version from filebrowser/filebrowser (changelog : https://github.com/filebrowser/filebrowser/releases)
+
 ## 2.63.1 (2026-04-06)
 - Update to latest version from filebrowser/filebrowser (changelog : https://github.com/filebrowser/filebrowser/releases)
 

filebrowser/config.yaml

@@ -123,4 +123,4 @@ schema:
 slug: filebrowser
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.63.1"
+version: "2.63.2"

filebrowser/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "true",
-  "last_update": "2026-04-06",
+  "last_update": "2026-04-18",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser",
   "source": "github",
   "upstream_repo": "filebrowser/filebrowser",
-  "upstream_version": "2.63.1"
+  "upstream_version": "2.63.2"
 }

flexget/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 3.19.12 (2026-04-18)
+- Update to latest version from wiserain/flexget
+
 ## 3.19.10 (2026-04-11)
 - Update to latest version from wiserain/flexget
 

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.19.10"
+version: "3.19.12"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-04-11",
+  "last_update": "2026-04-18",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.19.10"
+  "upstream_version": "3.19.12"
 }