Ensure mktemp parent directory exists

Removed outdated changelog entry for version 2.1.37-2.

.github/stargazer_countries.csv

@@ -1,4 +1,5 @@
 username,country
+0ln,
 0xf3f,
 1333481,United Kingdom
 13shaneo,
@@ -41,6 +42,7 @@ AlexCherrypi,
 AlexZeGamer,France
 Alexisbut,
 Alfiefe10,
+AlmightyHeretic,
 AmPlace,
 Amano13,New Zealand
 AmosGeorge,
@@ -361,6 +363,7 @@ Leolion2023,
 LifeofDan-EL,Nigeria
 Lizzardis,
 LoginByCall,
+Lolekpolek,
 LonelySoul7X,
 Lorsel,Italy
 Luca2165801154,
@@ -781,6 +784,7 @@ ared469,
 arethefreshest,
 arpit-mehra,
 artemave,France
+artemdanielov,
 arvin-chou,
 asaez85,
 ash286,
@@ -816,6 +820,7 @@ basschipper,Netherlands
 basuvi,
 baudneo,
 bav057,
+bavala3010,
 bb12ett,
 bccostin,
 bcutter,
@@ -915,6 +920,7 @@ carlosalexandremoraes,
 carloscpda,Spain
 carvan,
 cat-inGlasses,
+cb-96,
 cblakecode,United States
 cboehnke,
 cbyt3,
@@ -1046,6 +1052,7 @@ denvernbd,
 derailius,
 dethpickle,United States
 dev4jam,Australia
+devMikeUA,
 devchristof,France
 devorient,
 devstuff,United States
@@ -1091,6 +1098,7 @@ drcollatz,Germany
 dronisuav,
 drumstick93,
 drunkdev1991,
+dsantos21,
 dskaplan,
 dstengele,Germany
 dsx1123,United States
@@ -1337,6 +1345,7 @@ immenz,Germany
 indig0fox,United States
 indrajitr,United States
 indykoning,
+ingoau,Australia
 irgendwer112,
 irgendwer92,
 isobear23,
@@ -1428,6 +1437,7 @@ jordanwalk193,
 jorgoncalves,Portugal
 jorkdekok,
 josh-green,United Kingdom
+joshmeads,Canada
 josiah-eichelman,
 jpaulomt,
 jpoll962,
@@ -1648,6 +1658,7 @@ mijorepusic,Germany
 mikedrawback,United States
 mikegodin23,
 mikegsm,
+mikelis-urlovskis,
 mikelykzit,
 mikesplain,United States
 mikirodro,
@@ -1732,6 +1743,7 @@ nilava,India
 nima-1102,
 ninharp,
 nkm8,United States
+noodleboy91,
 norbertomartins,
 nordeep,
 novisys,
@@ -1990,6 +2002,7 @@ showlo0327,
 shqr,United States
 si458,
 siaua,
+siddhantladdha,
 silvertoes93,
 simion-chis,
 simpan,Sweden
@@ -2123,6 +2136,7 @@ tigroff,
 tillmannschatz,Germany
 tim-frensch,
 timTam97,Australia
+timebandit4711,
 timgreen,Australia
 timpalm,
 timvy,
@@ -2155,8 +2169,10 @@ tuantuansun,United States
 tufand,
 tuffelh,
 turdfurgeson78,
+turfle,Ukraine
 tutorempire,
 tvytrykush,
+twist3dimages,United States
 txitxo0,
 tyjtyj,
 tylerbenson,
@@ -2256,10 +2272,12 @@ yfranke,
 yg44g,
 yingfengstar,
 yngveskog,
+yo8aiv,United States
 yogitea,
 yonis37,
 yoshimo,
 yoswa,Netherlands
+youdontknowmu,
 yreiter,
 yribollen,
 ysqspdk,

.github/workflows/onpush_builder.yaml

@@ -199,7 +199,6 @@ jobs:
         with:
           args: |
             ${{ env.BUILD_ARGS }} \
-            --no-cache \            
             --${{ matrix.arch }} \
             --target "/data/${{ matrix.addon }}" \
             --image "${{ steps.check.outputs.image }}" \

.templates/00-global_var.sh

@@ -32,7 +32,13 @@ fi
 BLOCK_BEGIN="# --- BEGIN ADDON ENV (generated) ---"
 BLOCK_END="# --- END ADDON ENV (generated) ---"
 
-EXPORT_BLOCK_FILE="$(mktemp)"
+mktemp_safe() {
+    local tmpdir="${TMPDIR:-/tmp}"
+    mkdir -p "$tmpdir"
+    mktemp -p "$tmpdir"
+}
+
+EXPORT_BLOCK_FILE="$(mktemp_safe)"
 trap 'rm -f "$EXPORT_BLOCK_FILE"' EXIT
 
 {
@@ -148,7 +154,7 @@ is_shell_run_script() {
 inject_block_into_file() {
     local file="$1"
     local tmp
-    tmp="$(mktemp)"
+    tmp="$(mktemp_safe)"
 
     awk -v bfile="${EXPORT_BLOCK_FILE}" -v begin="${BLOCK_BEGIN}" -v end="${BLOCK_END}" '
         function print_block() {

.templates/00-smb_mounts.sh

@@ -1,9 +1,10 @@
 #!/usr/bin/with-contenv bashio
 # shellcheck shell=bash
-# shellcheck disable=
+# shellcheck disable=SC2086,SC2001,SC2015,SC2154
+
 set -e
 
-if ! bashio::supervisor.ping 2> /dev/null; then
+if ! bashio::supervisor.ping 2>/dev/null; then
     bashio::log.blue "Disabled : please use another method"
     exit 0
 fi
@@ -14,65 +15,72 @@ bashio::log.notice "This script is used to mount remote smb/cifs/nfs shares. Ins
 # DEFINE FUNCTIONS #
 ####################
 
-test_mount() {
+cleanup_cred() {
+    if [[ -n "${CRED_FILE:-}" && -f "${CRED_FILE:-}" ]]; then
+        rm -f "$CRED_FILE" || true
+    fi
+    CRED_FILE=""
+}
 
+test_mount() {
     # Set initial test
     MOUNTED=false
     ERROR_MOUNT=false
 
     # Exit if not mounted
-    if ! mountpoint -q /mnt/"$diskname"; then
+    if ! mountpoint -q "/mnt/$diskname"; then
         return 0
     fi
 
     # Exit if can't write
-    [[ -e "/mnt/$diskname/testaze" ]] && rm -r "/mnt/$diskname/testaze"
-    # shellcheck disable=SC2015
-    mkdir "/mnt/$diskname/testaze" && touch "/mnt/$diskname/testaze/testaze" && rm -r "/mnt/$diskname/testaze" || ERROR_MOUNT=true
+    [[ -e "/mnt/$diskname/testaze" ]] && rm -rf "/mnt/$diskname/testaze"
+    mkdir "/mnt/$diskname/testaze" && touch "/mnt/$diskname/testaze/testaze" && rm -rf "/mnt/$diskname/testaze" || ERROR_MOUNT=true
 
     # Only CIFS has the noserverino fallback
     if [[ "$ERROR_MOUNT" == "true" && "$FSTYPE" == "cifs" ]]; then
-        # Test write permissions
         if [[ "$MOUNTOPTIONS" == *"noserverino"* ]]; then
             bashio::log.fatal "Disk is mounted, however unable to write in the shared disk. Please check UID/GID for permissions, and if the share is rw"
         else
-            MOUNTOPTIONS="$MOUNTOPTIONS,noserverino"
+            MOUNTOPTIONS="${MOUNTOPTIONS},noserverino"
             echo "... testing with noserverino"
             mount_drive "$MOUNTOPTIONS"
             return 0
         fi
     fi
 
+    # CRITICAL: for non-CIFS too, do not claim success if mounted but not writable
+    if [[ "$ERROR_MOUNT" == "true" ]]; then
+        MOUNTED=false
+        bashio::log.fatal "Disk is mounted, however unable to write in the shared disk. Please check permissions/export options (rw), and UID/GID mapping."
+        return 0
+    fi
+
     # Set correctly mounted bit
     MOUNTED=true
     return 0
-
 }
 
 mount_drive() {
-
     # Define options
     MOUNTED=true
     MOUNTOPTIONS="$1"
 
-    # Try mounting (type depends on detected FSTYPE)
+    # Try mounting (type depends on (detected) FSTYPE)
     if [[ "$FSTYPE" == "cifs" ]]; then
-        mount -t cifs -o "$MOUNTOPTIONS" "$disk" /mnt/"$diskname" 2> ERRORCODE || MOUNTED=false
+        mount -t cifs -o "$MOUNTOPTIONS" "$disk" "/mnt/$diskname" 2>"$ERRORCODE_FILE" || MOUNTED=false
     elif [[ "$FSTYPE" == "nfs" ]]; then
-        mount -t nfs -o "$MOUNTOPTIONS" "$disk" /mnt/"$diskname" 2> ERRORCODE || MOUNTED=false
+        mount -t nfs -o "$MOUNTOPTIONS" "$disk" "/mnt/$diskname" 2>"$ERRORCODE_FILE" || MOUNTED=false
     fi
 
     # Test if successful
     if [[ "$MOUNTED" == "true" ]]; then
-        # shellcheck disable=SC2015
         test_mount
     fi
-
 }
 
-####################
+########################
 # MOUNT NETWORK SHARES #
-####################
+########################
 
 if bashio::config.has_value 'networkdisks'; then
 
@@ -83,16 +91,16 @@ if bashio::config.has_value 'networkdisks'; then
         bashio::log.warning "------------------------"
     fi
 
-    echo 'Mounting network share(s)...'
+    echo "Mounting network share(s)..."
 
     ####################
     # Define variables #
     ####################
 
-    # Set variables
-    MOREDISKS=$(bashio::config 'networkdisks')
-    USERNAME=$(bashio::config 'cifsusername')
-    PASSWORD=$(bashio::config 'cifspassword')
+    MOREDISKS="$(bashio::config 'networkdisks')"
+    USERNAME="$(bashio::config 'cifsusername')"
+    PASSWORD="$(bashio::config 'cifspassword')"
+
     SMBVERS=""
     SECVERS=""
     CHARSET=",iocharset=utf8"
@@ -103,15 +111,15 @@ if bashio::config.has_value 'networkdisks'; then
     MOREDISKS=${MOREDISKS// /"\040"}
 
     # Is domain set (CIFS only)
-    DOMAIN=""
     DOMAINCLIENT=""
+    CIFSDOMAIN=""
     if bashio::config.has_value 'cifsdomain'; then
-        echo "... using domain $(bashio::config 'cifsdomain')"
-        DOMAIN=",domain=$(bashio::config 'cifsdomain')"
-        DOMAINCLIENT="--workgroup=$(bashio::config 'cifsdomain')"
+        CIFSDOMAIN="$(bashio::config 'cifsdomain')"
+        echo "... using domain $CIFSDOMAIN"
+        DOMAINCLIENT="--workgroup=$CIFSDOMAIN"
     fi
 
-    # Is  UID/GID set (used for CIFS mount options)
+    # UID/GID (used for CIFS mount options)
     PUID=",uid=$(id -u)"
     PGID=",gid=$(id -g)"
     if bashio::config.has_value 'PUID' && bashio::config.has_value 'PGID'; then
@@ -124,15 +132,15 @@ if bashio::config.has_value 'networkdisks'; then
     # Mounting disks #
     ##################
 
-    # shellcheck disable=SC2086
-    for disk in ${MOREDISKS//,/ }; do # Separate comma separated values
+    for disk in ${MOREDISKS//,/ }; do
+        CRED_FILE=""
+        cleanup_cred
 
         # Clean name of network share
-        # shellcheck disable=SC2116,SC2001
-        disk=$(echo $disk | sed "s,/$,,") # Remove / at end of name
-        disk="${disk//"\040"/ }"          # replace \040 with space
+        disk="$(echo "$disk" | sed "s,/$,,")" # Remove trailing /
+        disk="${disk//"\040"/ }"             # replace \040 with space
 
-        # Detect filesystem type by pattern (CIFS: //ip/share ; NFS: ip:/export[/path] or nfs://ip:/export[/path])
+        # Detect filesystem type by pattern
         FSTYPE="cifs"
         if [[ "$disk" =~ ^nfs:// ]]; then
             FSTYPE="nfs"
@@ -143,119 +151,139 @@ if bashio::config.has_value 'networkdisks'; then
 
         # Determine server for reachability checks
         if [[ "$FSTYPE" == "cifs" ]]; then
-            server="$(echo "$disk" | grep -E -o "[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+")"
+            server="$(echo "$disk" | grep -E -o "[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+" | head -n 1)"
         else
             server="${disk%%:*}"
         fi
 
         diskname="$disk"
         diskname="${diskname//\\//}" # replace \ with /
-        diskname="${diskname##*/}"   # Get only last part of the name
+        diskname="${diskname##*/}"   # keep only last part of the name
+
+        # CRITICAL: per-disk error file (avoid collisions / missing file reads)
+        ERRORCODE_FILE="/tmp/mount_error_${diskname//[^a-zA-Z0-9._-]/_}.log"
+        : >"$ERRORCODE_FILE" || true
+
         MOUNTED=false
         SMBVERS_FORCE=""
         SECVERS_FORCE=""
+        SMBVERS=""
+        SECVERS=""
 
-        # Start
         echo "... mounting ($FSTYPE) $disk"
 
         # Data validation
         if [[ "$FSTYPE" == "cifs" ]]; then
-            if [[ ! "$disk" =~ ^.*+[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+[/]+.*+$ ]]; then
-                bashio::log.fatal "...... the structure of your \"networkdisks\" option : \"$disk\" doesn't seem correct, please use a structure like //123.12.12.12/sharedfolder,//123.12.12.12/sharedfolder2. If you don't use it, you can simply remove the text, this will avoid this error message in the future."
-                touch ERRORCODE
+            if [[ ! "$disk" =~ ^//[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/.+ ]]; then
+                bashio::log.fatal "...... the structure of your \"networkdisks\" option : \"$disk\" doesn't seem correct, please use a structure like //123.12.12.12/sharedfolder,//123.12.12.12/sharedfolder2."
+                echo "Invalid CIFS path structure: $disk" >"$ERRORCODE_FILE" || true
                 continue
             fi
         else
             if [[ ! "$disk" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+:/.+ ]]; then
                 bashio::log.fatal "...... invalid NFS path \"$disk\". Use a structure like 123.12.12.12:/export/path"
-                touch ERRORCODE
+                echo "Invalid NFS path structure: $disk" >"$ERRORCODE_FILE" || true
                 continue
             fi
         fi
 
         # Prepare mount point
-        mkdir -p /mnt/"$diskname"
-        chown root:root /mnt/"$diskname"
+        mkdir -p "/mnt/$diskname"
+        chown root:root "/mnt/$diskname"
+
+        # Create credentials file only for CIFS (avoids comma/special-char issues in -o)
+        if [[ "$FSTYPE" == "cifs" ]]; then
+            CRED_FILE="$(mktemp /tmp/cifs-cred.XXXXXX)"
+            chmod 600 "$CRED_FILE"
+            {
+                printf 'username=%s\n' "$USERNAME"
+                printf 'password=%s\n' "$PASSWORD"
+                if [[ -n "${CIFSDOMAIN:-}" ]]; then
+                    printf 'domain=%s\n' "$CIFSDOMAIN"
+                fi
+            } >"$CRED_FILE"
+        fi
 
         # Quickly try to mount with defaults
         if [[ "$FSTYPE" == "cifs" ]]; then
-            mount_drive "rw,file_mode=0775,dir_mode=0775,username=${USERNAME},password=${PASSWORD},nobrl,mfsymlinks${SMBVERS}${SECVERS}${PUID}${PGID}${CHARSET}${DOMAIN}"
-        elif [[ "$FSTYPE" == "nfs" ]]; then
+            mount_drive "rw,file_mode=0775,dir_mode=0775,credentials=${CRED_FILE},nobrl,mfsymlinks${SMBVERS}${SECVERS}${PUID}${PGID}${CHARSET}"
+        else
             mount_drive "rw,nfsvers=4.2,proto=tcp,hard,timeo=600,retrans=2"
         fi
 
         # Deeper analysis if failed
-        if [ "$MOUNTED" = false ]; then
+        if [[ "$MOUNTED" == "false" ]]; then
 
             if [[ "$FSTYPE" == "cifs" ]]; then
-
                 # Does server exist (SMB port 445)
-                output="$(nmap -F $server -T5 -oG -)"
-                if ! echo "$output" | grep 445/open &> /dev/null; then
-                    if echo "$output" | grep /open &> /dev/null; then
-                        bashio::log.fatal "...... $server is reachable but SMB port not opened, stopping script"
-                        touch ERRORCODE
+                if command -v nmap >/dev/null 2>&1; then
+                    output="$(nmap -F "$server" -T5 -oG - 2>/dev/null || true)"
+                    if ! echo "$output" | grep -q "445/open"; then
+                        if echo "$output" | grep -q "/open"; then
+                            bashio::log.fatal "...... $server is reachable but SMB port not opened, stopping script"
+                        else
+                            bashio::log.fatal "...... fatal : $server not reachable, is it correct"
+                        fi
+                        cleanup_cred
                         continue
                     else
-                        bashio::log.fatal "...... fatal : $server not reachable, is it correct"
-                        touch ERRORCODE
+                        echo "...... $server is confirmed reachable"
+                    fi
+                else
+                    bashio::log.warning "...... nmap not available; skipping SMB port reachability test"
+                fi
+
+                # Are credentials correct (use server, not share path)
+                if command -v smbclient >/dev/null 2>&1; then
+                    OUTPUT="$(smbclient -t 2 -L "$server" -U "$USERNAME"%"$PASSWORD" -c "exit" $DOMAINCLIENT 2>&1 || true)"
+
+                    if echo "$OUTPUT" | grep -q "LOGON_FAILURE"; then
+                        bashio::log.fatal "...... incorrect Username, Password, or Domain! Script will stop."
+                        if ! smbclient -t 2 -L "$server" -N $DOMAINCLIENT -c "exit" &>/dev/null; then
+                            bashio::log.fatal "...... perhaps a workgroup must be specified"
+                        fi
+                        cleanup_cred
                         continue
+                    elif echo "$OUTPUT" | grep -q "tree connect failed" || echo "$OUTPUT" | grep -q "NT_STATUS_CONNECTION_DISCONNECTED"; then
+                        echo "... using SMBv1"
+                        bashio::log.warning "...... share reachable only with legacy SMBv1 (NT1) negotiation. Forcing SMBv1 options."
+                        SMBVERS_FORCE=",vers=1.0"
+                        SECVERS_FORCE=",sec=ntlm"
+                    elif ! echo "$OUTPUT" | grep -q "Disk"; then
+                        echo "... testing path"
+                        bashio::log.fatal "...... no shares found. Invalid or inaccessible SMB path?"
+                    else
+                        echo "...... credentials are valid"
                     fi
                 else
-                    echo "...... $server is confirmed reachable"
+                    bashio::log.warning "...... smbclient not available; skipping SMB credential test"
                 fi
 
-                # Are credentials correct
-                OUTPUT="$(smbclient -t 2 -L "$disk" -U "$USERNAME"%"$PASSWORD" -c "exit" $DOMAINCLIENT 2>&1 || true)"
-                if echo "$OUTPUT" | grep -q "LOGON_FAILURE"; then
-                    bashio::log.fatal "...... incorrect Username, Password, or Domain! Script will stop."
-                    touch ERRORCODE
-                    # Should there be a workgroup
-                    if ! smbclient -t 2 -L $disk -N $DOMAINCLIENT -c "exit" &> /dev/null; then
-                        bashio::log.fatal "...... perhaps a workgroup must be specified"
-                        touch ERRORCODE
-                    fi
-                    continue
-                elif echo "$OUTPUT" | grep -q "tree connect failed" || echo "$OUTPUT" | grep -q "NT_STATUS_CONNECTION_DISCONNECTED"; then
-                    echo "... using SMBv1"
-                    bashio::log.warning "...... share reachable only with legacy SMBv1 (NT1) negotiation. Forcing SMBv1 options."
-                    SMBVERS_FORCE=",vers=1.0"
-                    SECVERS_FORCE=",sec=ntlm"
-                elif ! echo "$OUTPUT" | grep -q "Disk"; then
-                    echo "... testing path"
-                    bashio::log.fatal "...... no shares found. Invalid or inaccessible SMB path?"
-                else
-                    echo "...... credentials are valid"
+                # Extract SMB dialect from nmap and map to mount.cifs vers=
+                SMBRAW=""
+                if command -v nmap >/dev/null 2>&1; then
+                    SMBRAW="$(
+                        nmap --script smb-protocols -p 445 "$server" 2>/dev/null \
+                            | awk '/SMB2_DIALECT_/ {print $NF}' \
+                            | sed 's/SMB2_DIALECT_//' \
+                            | tr -d '_' \
+                            | sort -V | tail -n 1 || true
+                    )"
                 fi
 
-                # Extracting SMB versions and normalize output
-                # shellcheck disable=SC2210,SC2094
-                SMBVERS="$(nmap --script smb-protocols "$server" -p 445 2> 1 | awk '/  [0-9]/' | awk '{print $NF}' | cut -c -3 | sort -V | tail -n 1 || true)"
-                # Avoid :
-                SMBVERS="${SMBVERS/:/.}"
-                # Manage output
-                if [ -n "$SMBVERS" ]; then
-                    case $SMBVERS in
-                        "202" | "200" | "20")
-                            SMBVERS="2.0"
-                            ;;
-                        21)
-                            SMBVERS="2.1"
-                            ;;
-                        302)
-                            SMBVERS="3.02"
-                            ;;
-                        311)
-                            SMBVERS="3.1.1"
-                            ;;
-                        "3.1")
-                            echo "SMB 3.1 detected, converting to 3.0"
-                            SMBVERS="3.0"
-                            ;;
-                    esac
-                    echo "...... SMB version detected : $SMBVERS"
-                    SMBVERS=",vers=$SMBVERS"
-                elif smbclient -t 2 -L "$server" -m NT1 -N $DOMAINCLIENT &> /dev/null; then
+                SMBVERS=""
+                case "$SMBRAW" in
+                    311) SMBVERS=",vers=3.1.1" ;;
+                    302) SMBVERS=",vers=3.02" ;;
+                    300) SMBVERS=",vers=3.0" ;;
+                    210) SMBVERS=",vers=2.1" ;;
+                    202|200) SMBVERS=",vers=2.0" ;;
+                    *) SMBVERS="" ;;
+                esac
+
+                if [[ -n "$SMBVERS" ]]; then
+                    echo "...... SMB version detected : ${SMBVERS#,vers=}"
+                elif command -v smbclient >/dev/null 2>&1 && smbclient -t 2 -L "$server" -m NT1 -N $DOMAINCLIENT &>/dev/null; then
                     echo "...... SMB version : only SMBv1 is supported, this can lead to issues"
                     SECVERS=",sec=ntlm"
                     SMBVERS=",vers=1.0"
@@ -264,94 +292,95 @@ if bashio::config.has_value 'networkdisks'; then
                     SMBVERS=""
                 fi
 
-                # Apply forced SMBv1 options when initial connection required NT1 fallback
+                # Apply forced SMBv1 options when needed
                 if [[ -n "$SMBVERS_FORCE" ]]; then
-                    if [[ -z "$SMBVERS" ]]; then
-                        SMBVERS="$SMBVERS_FORCE"
-                    fi
-                    if [[ -z "$SECVERS" ]]; then
-                        SECVERS="$SECVERS_FORCE"
-                    fi
+                    [[ -z "$SMBVERS" ]] && SMBVERS="$SMBVERS_FORCE"
+                    [[ -z "$SECVERS" ]] && SECVERS="$SECVERS_FORCE"
                 fi
 
-                # Ensure the Samba client allows SMBv1 when those options are required
+                # Ensure Samba client allows SMBv1 when required
                 if [[ "${SMBVERS}${SMBVERS_FORCE}" == *"vers=1.0"* ]]; then
                     if [[ -f /etc/samba/smb.conf ]]; then
                         bashio::log.warning "...... enabling SMBv1 support in Samba client configuration"
                         sed -i '/\[global\]/!b;n;/client min protocol = NT1/!a\
-        client min protocol = NT1' /etc/samba/smb.conf
+        client min protocol = NT1' /etc/samba/smb.conf || true
                     fi
                 fi
 
-                # Test with different security versions
-                #######################################
-                for SECVERS in "$SECVERS" ",sec=ntlmv2" ",sec=ntlmssp" ",sec=ntlmsspi" ",sec=krb5i" ",sec=krb5" ",sec=ntlm" ",sec=ntlmv2i"; do
-                    if [ "$MOUNTED" = false ]; then
-                        mount_drive "rw,file_mode=0775,dir_mode=0775,username=${USERNAME},password=${PASSWORD},nobrl${SMBVERS}${SECVERS}${PUID}${PGID}${CHARSET}${DOMAIN}"
+                # Try with different security modes (do not overwrite SECVERS base accidentally)
+                SECVERS_BASE="$SECVERS"
+                for SECTRY in "$SECVERS_BASE" ",sec=ntlmv2" ",sec=ntlmssp" ",sec=ntlmsspi" ",sec=krb5i" ",sec=krb5" ",sec=ntlm" ",sec=ntlmv2i"; do
+                    if [[ "$MOUNTED" == "false" ]]; then
+                        mount_drive "rw,file_mode=0775,dir_mode=0775,credentials=${CRED_FILE},nobrl,mfsymlinks${SMBVERS}${SECTRY}${PUID}${PGID}${CHARSET}"
                     fi
                 done
 
-            elif [[ "$FSTYPE" == "nfs" ]]; then
-                # Add NFS-specific port check (2049) similar to SMB (445)
-                output="$(nmap -F $server -T5 -oG -)"
-                if ! echo "$output" | grep -E '(2049|111)/open' &> /dev/null; then
-                    bashio::log.fatal "...... $server is reachable but NFS ports not open"
-                    continue
+            else
+                # NFS: check ports (111/2049) and try common versions
+                if command -v nmap >/dev/null 2>&1; then
+                    output="$(nmap -F "$server" -T5 -oG - 2>/dev/null || true)"
+                    if ! echo "$output" | grep -Eq '(2049|111)/open'; then
+                        bashio::log.fatal "...... $server is reachable but NFS ports not open"
+                        continue
+                    fi
+                else
+                    bashio::log.warning "...... nmap not available; skipping NFS port reachability test"
                 fi
-                # NFS fallback attempts: try common versions until one works
+
                 for NFVER in 4.2 4.1 4 3; do
-                    if [ "$MOUNTED" = false ]; then
+                    if [[ "$MOUNTED" == "false" ]]; then
                         mount_drive "rw,nfsvers=${NFVER},proto=tcp"
                     fi
                 done
             fi
         fi
 
-        # Messages
-        if [ "$MOUNTED" = true ]; then
-
+        # Messages / finalization
+        if [[ "$MOUNTED" == "true" ]]; then
             bashio::log.info "...... $disk successfully mounted to /mnt/$diskname with options ${MOUNTOPTIONS/$PASSWORD/XXXXXXXXXX}"
-            # Remove errorcode
-            if [ -f ERRORCODE ]; then
-                rm ERRORCODE
-            fi
+            rm -f "$ERRORCODE_FILE" 2>/dev/null || true
 
-            # Alert if smbv1
-            if [[ "$FSTYPE" == "cifs" && "$MOUNTOPTIONS" == *"1.0"* ]]; then
+            if [[ "$FSTYPE" == "cifs" && "$MOUNTOPTIONS" == *"vers=1.0"* ]]; then
                 bashio::log.warning ""
-                bashio::log.warning "Your smb system requires smbv1. This is an obsolete protocol. Please correct this to prevent issues."
+                bashio::log.warning "Your SMB system requires SMBv1. This is an obsolete protocol. Please correct this to prevent issues."
                 bashio::log.warning ""
             fi
 
+            cleanup_cred
         else
             # Mounting failed messages
             if [[ "$FSTYPE" == "cifs" ]]; then
-                bashio::log.fatal "Error, unable to mount $disk to /mnt/$diskname with username $USERNAME, $PASSWORD. Please check your remote share path, username, password, domain, try putting 0 in UID and GID"
+                bashio::log.fatal "Error, unable to mount $disk to /mnt/$diskname with username $USERNAME. Please check remote share path, username, password, domain; try UID/GID 0."
                 bashio::log.fatal "Here is some debugging info :"
-                smbclient -t 2 -L $disk -U "$USERNAME%$PASSWORD" -c "exit"
+                if command -v smbclient >/dev/null 2>&1; then
+                    smbclient -t 2 -L "$server" -U "$USERNAME%$PASSWORD" -c "exit" $DOMAINCLIENT || true
+                else
+                    bashio::log.warning "smbclient not available; cannot print SMB debugging info"
+                fi
+
+                # last-ditch try: minimal options (still uses credentials file)
                 SMBVERS=""
                 SECVERS=""
                 PUID=""
                 PGID=""
                 CHARSET=""
-                mount_drive "rw,file_mode=0775,dir_mode=0775,username=${USERNAME},password=${PASSWORD},nobrl${SMBVERS}${SECVERS}${PUID}${PGID}${CHARSET}${DOMAIN}"
-            elif [[ "$FSTYPE" == "nfs" ]]; then
-                bashio::log.fatal "Error, unable to mount NFS share $disk to /mnt/$diskname. Please check the export path and that NFS server allows this client (and NFSv4)."
-                # last-ditch try with very basic options
+                mount_drive "rw,file_mode=0775,dir_mode=0775,credentials=${CRED_FILE},nobrl,mfsymlinks${SMBVERS}${SECVERS}${PUID}${PGID}${CHARSET}"
+            else
+                bashio::log.fatal "Error, unable to mount NFS share $disk to /mnt/$diskname. Please check the export path and that the NFS server allows this client (and NFSv4)."
                 mount_drive "rw"
             fi
 
-            bashio::log.fatal "Error read : $(< ERRORCODE), addon will stop in 1 min"
+            ERR_READ="$(cat "$ERRORCODE_FILE" 2>/dev/null || true)"
+            bashio::log.fatal "Error read : ${ERR_READ:-unknown error}, addon will stop in 1 min"
 
             # clean folder
-            umount "/mnt/$diskname" 2> /dev/null || true
-            rmdir "/mnt/$diskname" || true
+            umount "/mnt/$diskname" 2>/dev/null || true
+            rmdir "/mnt/$diskname" 2>/dev/null || true
+            cleanup_cred
+            rm -f "$ERRORCODE_FILE" 2>/dev/null || true
 
             # Stop addon
             bashio::addon.stop
-
         fi
-
     done
-
 fi

README.md

@@ -57,18 +57,18 @@ If you want to do add the repository manually, please follow the procedure highl
 ### Number of addons
 
 - In the repository : 118
-- Installed : 76650
+- Installed : 80968
 
 ### Top 3
 
-1. Filebrowser (10195x)
-2. Portainer (7365x)
-3. Myelectricaldata (4201x)
+1. Filebrowser (11483x)
+2. Portainer (9930x)
+3. Myelectricaldata (4238x)
 
 ### Architectures used
 
-- amd64: 63%
-- aarch64: 37%
+- amd64: 61%
+- aarch64: 39%
 - %%STATS_ARMV7%%
 
 ### Stars evolution
@@ -261,7 +261,7 @@ If you want to do add the repository manually, please follow the procedure highl
 ![amd64][amd64-badge]
 ![ingress][ingress-badge]
 
-✓ ![image](https://api.iconify.design/mdi/file-search.svg) [Filebrowser (10195x)](filebrowser/) : filebrowser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit your files
+✓ ![image](https://api.iconify.design/mdi/file-search.svg) [Filebrowser (11483x)](filebrowser/) : filebrowser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit your files
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Ffilebrowser%2Fconfig.yaml)
 ![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Ffilebrowser%2Fupdater.json)
@@ -624,7 +624,7 @@ If you want to do add the repository manually, please follow the procedure highl
 ![aarch64][aarch64-badge]
 ![amd64][amd64-badge]
 
-✓ ![image](https://api.iconify.design/mdi/docker.svg) [Portainer (7365x)](portainer/) : Manage your Docker environment with ease
+✓ ![image](https://api.iconify.design/mdi/docker.svg) [Portainer (9930x)](portainer/) : Manage your Docker environment with ease
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fportainer%2Fconfig.yaml)
 ![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fportainer%2Fupdater.json)
@@ -632,7 +632,7 @@ If you want to do add the repository manually, please follow the procedure highl
 ![amd64][amd64-badge]
 ![ingress][ingress-badge]
 
-✓  [Portainer (7365x) Agent](portainer_agent/) : An agent used to manage all the resources in a Swarm cluster
+✓  [Portainer (9930x) Agent](portainer_agent/) : An agent used to manage all the resources in a Swarm cluster
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fportainer_agent%2Fconfig.yaml)
 ![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fportainer_agent%2Fupdater.json)

battybirdnet-pi/updater.json

@@ -1,5 +1,6 @@
 {
   "last_update": "27-07-2024",
+  "paused": true,
   "repository": "alexbelgium/hassio-addons",
   "slug": "BattyBirdNET-pi",
   "source": "github",

bazarr/CHANGELOG.md

@@ -1,3 +1,9 @@
+
+## 1.5.4-1 (08-01-2026)
+- ⚠ MAJOR CHANGE : switch to the new config logic from homeassistant. Your configuration files will have migrated from /config/addons_config/bazarr to a folder only accessible from my Filebrowser addon called /addon_configs/xxx-bazarr. This avoids the addon to mess with your homeassistant configuration folder, and allows to backup the options. Migration of data should be automatic. Please be sure to update all your links however ! For more information, see here : https://developers.home-assistant.io/blog/2023/11/06/public-addon-config/
+
+## 1.5.4 (08-01-2026)
+- Update to latest version from linuxserver/docker-bazarr (changelog : https://github.com/linuxserver/docker-bazarr/releases)
 - The Home Assistant project has deprecated support for the armv7, armhf and i386 architectures. Support wil be fully dropped in the upcoming Home Assistant 2025.12 release
 
 - Added support for configuring extra environment variables via the `env_vars` add-on option alongside config.yaml. See https://github.com/alexbelgium/hassio-addons/wiki/Add-Environment-variables-to-your-Addon-2 for details.

bazarr/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="1.5.3"
+ARG BUILD_UPSTREAM="1.5.4"
 FROM ${BUILD_FROM}
 
 ##################
@@ -30,7 +30,7 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 
 # Global LSIO modifications
 ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_lsio.sh" "/ha_lsio.sh"
-ARG CONFIGLOCATION="/config/addons_config/bazarr"
+ARG CONFIGLOCATION="/config"
 RUN chmod 744 /ha_lsio.sh && if grep -qr "lsio" /etc; then /ha_lsio.sh "$CONFIGLOCATION"; fi && rm /ha_lsio.sh
 
 ##################

bazarr/config.yaml

@@ -74,7 +74,8 @@ environment:
 image: ghcr.io/alexbelgium/bazarr-{arch}
 init: false
 map:
-  - config:rw
+  - addon_config:rw
+  - homeassistant_config:rw
   - share:rw
   - media:rw
   - ssl
@@ -105,5 +106,5 @@ schema:
 slug: bazarr_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/bazarr
-version: 1.5.3
+version: "1.5.4-1"
 webui: "[PROTO:ssl]://[HOST]:[PORT:6767]"

bazarr/rootfs/etc/cont-init.d/20-folders.sh

@@ -1,4 +1,6 @@
-#!/bin/bash
+#!/usr/bin/with-contenv bashio
+# shellcheck shell=bash
+set -e
 
 if [ ! -d /share/storage/movies ]; then
     echo "Creating /share/storage/movies"
@@ -18,16 +20,14 @@ if [ ! -d /share/downloads ]; then
     chown -R "$PUID:$PGID" /share/downloads
 fi
 
-if [ -d /config/bazarr ] && [ ! -d /config/addons_config/bazarr ]; then
-    echo "Moving to new location /config/addons_config/bazarr"
-    mkdir -p /config/addons_config/bazarr
-    chown -R "$PUID:$PGID" /config/addons_config/bazarr
-    mv /config/bazarr/* /config/addons_config/bazarr/
-    rm -r /config/bazarr
+slug=bazarr
+
+if [ -d "/homeassistant/addons_config/$slug" ]; then
+    echo "Migrating /homeassistant/addons_config/$slug to /addon_configs/xxx-$slug"
+    cp -rnf /homeassistant/addons_config/"$slug"/. /config/ || true
+    mv /homeassistant/addons_config/"$slug" /homeassistant/addons_config/"$slug"_migrated
 fi
 
-if [ ! -d /config/addons_config/bazarr ]; then
-    echo "Creating /config/addons_config/bazarr"
-    mkdir -p /config/addons_config/bazarr
-    chown -R "$PUID:$PGID" /config/addons_config/bazarr
+if [ -d /config/addons_config ]; then
+    rm -rf /config/addons_config
 fi

bazarr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "27-09-2025",
+  "last_update": "08-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "bazarr",
   "source": "github",
   "upstream_repo": "linuxserver/docker-bazarr",
-  "upstream_version": "1.5.3"
+  "upstream_version": "1.5.4"
 }

bitwarden/CHANGELOG.md

@@ -1,3 +1,6 @@
+
+## 1.35.1 (03-01-2026)
+- Update to latest version from dani-garcia/bitwarden_rs (changelog : https://github.com/dani-garcia/bitwarden_rs/releases)
 ## 1.35.0-6 (28-12-2025)
 - Minor bugs fixed
 ## 1.35.0-4 (28-12-2025)

bitwarden/config.yaml

@@ -28,5 +28,5 @@ schema:
 slug: bitwarden
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/bitwarden
-version: 1.35.0-6
+version: "1.35.1"
 webui: "[PROTO:ssl]://[HOST]:[PORT:7277]"

bitwarden/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "28-12-2025",
+  "last_update": "03-01-2026",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "bitwarden",
   "source": "github",
   "upstream_repo": "dani-garcia/bitwarden_rs",
-  "upstream_version": "1.35.0"
+  "upstream_version": "1.35.1"
 }

cloudcommander/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 19.1.0 (03-01-2026)
+- Update to latest version from coderaiser/cloudcmd (changelog : https://github.com/coderaiser/cloudcmd/releases)
+
 ## 19.0.17 (27-12-2025)
 - Update to latest version from coderaiser/cloudcmd (changelog : https://github.com/coderaiser/cloudcmd/releases)
 

cloudcommander/config.yaml

@@ -104,4 +104,4 @@ schema:
 slug: cloudcommander
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cloudcommander
-version: "19.0.17"
+version: "19.1.0"

cloudcommander/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "27-12-2025",
+  "last_update": "03-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cloudcommander",
   "source": "github",
   "upstream_repo": "coderaiser/cloudcmd",
-  "upstream_version": "19.0.17"
+  "upstream_version": "19.1.0"
 }

ente/CHANGELOG.md

@@ -1,3 +1,5 @@
+## 4.4.15 (03-01-2026)
+- Minor bugs fixed
 
 ## 4.4.13 (20-12-2025)
 - Update to latest version from ente-io/ente (changelog : https://github.com/ente-io/ente/releases)

ente/Dockerfile

@@ -1,116 +1,138 @@
 #============================#
-#  ALEXBELGIUM'S DOCKERFILE  #
+# ALEXBELGIUM'S DOCKERFILE  #
 #============================#
-#=== Home Assistant Add‑on – ENTE (server + web UI) ===#
+# Home Assistant Add-on – ENTE (server + web UI)
 
 ########################################################
-# 0 Build the ente‑web static front‑end (multi‑stage) #
+# 0) Build the ente-web static front-end (multi-stage) #
 ########################################################
-FROM node:22-alpine AS web-builder
+FROM node:22-bookworm-slim AS web-builder
 
-# ---- build‑time selector; set `--build-arg ENTE_WEB_TAG=v3.6.0` if you
-#      want a specific release instead of main
-ARG ENTE_WEB_TAG=main          
+# Build-time selector; set `--build-arg ENTE_WEB_TAG=vX.Y.Z` if you want a specific release
+ARG ENTE_WEB_TAG=main
 
-# ---- tools we need to build (git, yarn)
 ENV RUSTUP_HOME=/usr/local/rustup \
     CARGO_HOME=/usr/local/cargo \
-    PATH=/usr/local/cargo/bin:$PATH
+    PATH=/usr/local/cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
-RUN apk add --no-cache \
-      git curl ca-certificates build-base \
- && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stable \
- && rustup target add wasm32-unknown-unknown \
- && npm install -g wasm-pack@0.13.1
+# Tools needed to build (git, rust, wasm-pack, yarn classic)
+RUN set -eux; \
+    apt-get update; \
+    apt-get install -y --no-install-recommends \
+      git \
+      curl \
+      ca-certificates \
+      build-essential \
+      pkg-config \
+      python3 \
+    ; \
+    rm -rf /var/lib/apt/lists/*; \
+    \
+    curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stable; \
+    rustup target add wasm32-unknown-unknown; \
+    \
+    corepack enable; \
+    corepack prepare yarn@1.22.22 --activate; \
+    npm install -g wasm-pack@0.13.1
 
-# ---- pull the web source
+# Pull the web source
 WORKDIR /src
 RUN git clone --depth 1 --branch "${ENTE_WEB_TAG}" https://github.com/ente-io/ente.git .
 
-# ---- build web workspace (lives in ./web)
+# Build web workspace (lives in ./web)
 WORKDIR /src/web
 ENV NEXT_PUBLIC_ENTE_ENDPOINT=ENTE_API_ORIGIN_PLACEHOLDER \
     NEXT_PUBLIC_ENTE_ALBUMS_ENDPOINT=ENTE_ALBUMS_ORIGIN_PLACEHOLDER
-RUN yarn config set network-timeout 900000 -g \
- && yarn install --frozen-lockfile \
- && yarn build:photos \
- && yarn build:accounts \
- && yarn build:auth \
- && yarn build:cast
+
+RUN set -eux; \
+    yarn config set network-timeout 900000 -g; \
+    yarn install --frozen-lockfile; \
+    yarn build:photos; \
+    yarn build:accounts; \
+    yarn build:auth; \
+    yarn build:cast
 
 #################
-# 1 Base image #
+# 1) Base image #
 #################
 FROM ghcr.io/ente-io/server:latest
 
 ##################
-# 2 Tune image #
+# 2) Tune image  #
 ##################
-ENV  S6_CMD_WAIT_FOR_SERVICES=1 \
-     S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 \
-     S6_SERVICES_GRACETIME=0
+ENV S6_CMD_WAIT_FOR_SERVICES=1 \
+    S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 \
+    S6_SERVICES_GRACETIME=0
+
 USER root
 
 # --- LSIO helper ---
 ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_lsio.sh" /ha_lsio.sh
 ARG CONFIGLOCATION="/config"
-RUN chmod 744 /ha_lsio.sh && \
-    if grep -qr "lsio" /etc; then /ha_lsio.sh "$CONFIGLOCATION"; fi && \
+RUN set -eux; \
+    chmod 744 /ha_lsio.sh; \
+    if grep -qr "lsio" /etc; then /ha_lsio.sh "$CONFIGLOCATION"; fi; \
     rm /ha_lsio.sh
 
-# --- MinIO, psql client etc. ---
+# --- MinIO, psql client etc.
 RUN set -eux; \
-    BUILD_ARCH=$(uname -m) \
-    && echo "${BUILD_ARCH}" \
-    && BUILD_ARCH=${BUILD_ARCH:-x86} \
-    && if [[ "${BUILD_ARCH}" == *aarch64* ]]; then ARCH="arm64"; fi \
-    && if [[ "${BUILD_ARCH}" == *armv8* ]]; then ARCH="arm64"; fi \
-    && if [[ "${BUILD_ARCH}" == *arm64* ]]; then ARCH="arm64"; fi \
-    && if [[ "${BUILD_ARCH}" == *x86* ]]; then ARCH="amd64"; fi \
-    && apk add --no-cache \
-        bash curl ca-certificates wget jq tini postgresql15-client; \
-    curl -fsSL https://dl.min.io/server/minio/release/linux-"$ARCH"/minio -o /usr/local/bin/minio; \
-    curl -fsSL https://dl.min.io/client/mc/release/linux-"$ARCH"/mc -o /usr/local/bin/mc; \
+    BUILD_ARCH="$(uname -m)"; \
+    echo "${BUILD_ARCH}"; \
+    ARCH="amd64"; \
+    if echo "${BUILD_ARCH}" | grep -Eq 'aarch64|armv8|arm64'; then ARCH="arm64"; fi; \
+    apk add --no-cache bash curl ca-certificates wget jq tini postgresql15-client; \
+    curl -fsSL "https://dl.min.io/server/minio/release/linux-${ARCH}/minio" -o /usr/local/bin/minio; \
+    curl -fsSL "https://dl.min.io/client/mc/release/linux-${ARCH}/mc" -o /usr/local/bin/mc; \
     chmod +x /usr/local/bin/minio /usr/local/bin/mc
-RUN apk add --no-cache \
-        lsb-release curl gnupg wget tini jq sudo \
-        postgresql postgresql-client
 
-# ---------- ente‑web bundle ----------
+RUN apk add --no-cache \
+    lsb-release curl gnupg wget tini jq sudo \
+    postgresql postgresql-client
+
+# ---------- ente-web bundle ----------
 RUN apk add --no-cache nginx
 
-# static files built in the previous stage
+# Static files built in the previous stage
 COPY --from=web-builder /src/web/apps/photos/out    /www/photos
 COPY --from=web-builder /src/web/apps/accounts/out  /www/accounts
 COPY --from=web-builder /src/web/apps/auth/out      /www/auth
 COPY --from=web-builder /src/web/apps/cast/out      /www/cast
 
-##################
-# 3 Install add‑on helpers #
-##################
+############################
+# 3) Install add-on helpers #
+############################
 COPY rootfs/ /
+
 ARG MODULES="00-banner.sh 01-custom_script.sh 00-global_var.sh 00-local_mounts.sh 00-smb_mounts.sh"
 ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_automodules.sh" /ha_automodules.sh
-RUN chmod 744 /ha_automodules.sh && /ha_automodules.sh "$MODULES" && rm /ha_automodules.sh
+RUN set -eux; \
+    chmod 744 /ha_automodules.sh; \
+    /ha_automodules.sh "$MODULES"; \
+    rm /ha_automodules.sh
 
 ENV PACKAGES="sudo jq yamllint nginx"
 ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_autoapps.sh" /ha_autoapps.sh
-RUN chmod 744 /ha_autoapps.sh && /ha_autoapps.sh "$PACKAGES" && rm /ha_autoapps.sh
+RUN set -eux; \
+    chmod 744 /ha_autoapps.sh; \
+    /ha_autoapps.sh "$PACKAGES"; \
+    rm /ha_autoapps.sh
 
-
-################
-# 4 Entrypoint #
-################
-ENV  S6_STAGE2_HOOK=/ha_entrypoint.sh
-ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_entrypoint.sh"       /ha_entrypoint.sh
+###############
+# 4) Entrypoint
+###############
+ENV S6_STAGE2_HOOK=/ha_entrypoint.sh
+ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_entrypoint.sh" /ha_entrypoint.sh
 ADD "https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.templates/ha_entrypoint_modif.sh" /ha_entrypoint_modif.sh
-RUN chmod 777 /ha_entrypoint.sh /ha_entrypoint_modif.sh && \
-    /ha_entrypoint_modif.sh && rm /ha_entrypoint_modif.sh
+RUN set -eux; \
+    chmod 777 /ha_entrypoint.sh /ha_entrypoint_modif.sh; \
+    /ha_entrypoint_modif.sh; \
+    rm /ha_entrypoint_modif.sh
+
 ENTRYPOINT ["/usr/bin/env"]
-CMD        ["/ha_entrypoint.sh"]
+CMD ["/ha_entrypoint.sh"]
 
 ############
-# 5 Labels #
+# 5) Labels
 ############
 ARG BUILD_VERSION BUILD_ARCH BUILD_DATE BUILD_NAME BUILD_DESCRIPTION BUILD_REF BUILD_REPOSITORY
 LABEL \
@@ -130,6 +152,6 @@ LABEL \
   org.opencontainers.image.version=${BUILD_VERSION}
 
 #################
-# 6 Finish line #
+# 6) Finish line
 #################
 EXPOSE 3000 3001 3002 3003 3004

ente/config.yaml

@@ -120,6 +120,6 @@ schema:
 slug: ente
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "4.4.12"
+version: "4.4.15"
 video: true
 webui: http://[HOST]:[PORT:3000]

ente/updater.json

@@ -5,5 +5,5 @@
   "slug": "ente",
   "source": "github",
   "upstream_repo": "ente-io/ente",
-  "upstream_version": "4.4.13"
+  "upstream_version": "4.4.15"
 }

filebrowser/CHANGELOG.md

@@ -1,4 +1,10 @@
 
+## 2.53.1 (08-01-2026)
+- Update to latest version from filebrowser/filebrowser (changelog : https://github.com/filebrowser/filebrowser/releases)
+
+## 2.53.0 (03-01-2026)
+- Update to latest version from filebrowser/filebrowser (changelog : https://github.com/filebrowser/filebrowser/releases)
+
 ## 2.52.0 (20-12-2025)
 - Update to latest version from filebrowser/filebrowser (changelog : https://github.com/filebrowser/filebrowser/releases)
 

filebrowser/config.yaml

@@ -123,4 +123,4 @@ schema:
 slug: filebrowser
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.52.0"
+version: "2.53.1"

filebrowser/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "true",
-  "last_update": "20-12-2025",
+  "last_update": "08-01-2026",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser",
   "source": "github",
   "upstream_repo": "filebrowser/filebrowser",
-  "upstream_version": "2.52.0"
+  "upstream_version": "2.53.1"
 }

filebrowser_quantum/CHANGELOG.md

@@ -1,4 +1,10 @@
 
+## 1.1.6b0 (08-01-2026)
+- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
+
+## 1.1.5b0 (03-01-2026)
+- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
+
 ## 1.2.0 (28-12-2025)
 - Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
 # Changelog

filebrowser_quantum/config.yaml

@@ -110,4 +110,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.2.0"
+version: "1.1.6b0"

filebrowser_quantum/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "true",
-  "last_update": "28-12-2025",
+  "last_update": "08-01-2026",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser_quantum",
   "source": "github",
   "upstream_repo": "gtsteffaniak/filebrowser",
-  "upstream_version": "1.2.0"
+  "upstream_version": "1.1.6b0"
 }

fireflyiii/CHANGELOG.md

@@ -1,4 +1,10 @@
 
+## 6.4.15 (08-01-2026)
+- Update to latest version from firefly-iii/firefly-iii (changelog : https://github.com/firefly-iii/firefly-iii/releases)
+
+## 20260101.1 (03-01-2026)
+- Update to latest version from firefly-iii/firefly-iii (changelog : https://github.com/firefly-iii/firefly-iii/releases)
+
 ## 6.4.14 (20-12-2025)
 - Update to latest version from firefly-iii/firefly-iii (changelog : https://github.com/firefly-iii/firefly-iii/releases)
 

fireflyiii/config.yaml

@@ -104,5 +104,5 @@ slug: fireflyiii
 startup: services
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "6.4.14"
+version: "6.4.15"
 webui: "[PROTO:ssl]://[HOST]:[PORT:8080]"

fireflyiii/updater.json

@@ -1,9 +1,9 @@
 {
-  "github_exclude": "2025",
-  "last_update": "20-12-2025",
+  "github_exclude": "develop",
+  "last_update": "08-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "fireflyiii",
   "source": "github",
   "upstream_repo": "firefly-iii/firefly-iii",
-  "upstream_version": "6.4.14"
+  "upstream_version": "6.4.15"
 }

fireflyiii_data_importer/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.0.0 (08-01-2026)
+- Update to latest version from firefly-iii/data-importer (changelog : https://github.com/firefly-iii/data-importer/releases)
+
 ## 1.9.1 (08-11-2025)
 - Update to latest version from firefly-iii/data-importer (changelog : https://github.com/firefly-iii/data-importer/releases)
 - Added support for configuring extra environment variables via the `env_vars` add-on option alongside config.yaml. See https://github.com/alexbelgium/hassio-addons/wiki/Add-Environment-variables-to-your-Addon-2 for details.

fireflyiii_data_importer/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="1.9.1"
+ARG BUILD_UPSTREAM="2.0.0"
 FROM ${BUILD_FROM}
 
 ##################

fireflyiii_data_importer/config.yaml

@@ -101,5 +101,5 @@ schema:
 slug: fireflyiii_data_importer
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.9.1"
+version: "2.0.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:8080]"

fireflyiii_data_importer/updater.json

@@ -1,9 +1,9 @@
 {
   "github_exclude": "develop",
-  "last_update": "08-11-2025",
+  "last_update": "08-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "fireflyiii_data_importer",
   "source": "github",
   "upstream_repo": "firefly-iii/data-importer",
-  "upstream_version": "1.9.1"
+  "upstream_version": "2.0.0"
 }

flexget/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 3.18.34 (03-01-2026)
+- Update to latest version from wiserain/flexget
+
 ## 3.18.33 (27-12-2025)
 - Update to latest version from wiserain/flexget
 

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.18.33"
+version: "3.18.34"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "27-12-2025",
+  "last_update": "03-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.18.33"
+  "upstream_version": "3.18.34"
 }

gazpar2mqtt/rootfs/templates/config.yaml

@@ -1,4 +1,4 @@
 GRDF_USERNAME: username #your GRDF login (ex : myemail@email.com)
 GRDF_PASSWORD: password #your GRDF password
-MQTT_HOST: 127.0.0.1 #hostname or ip adress of the MQTT broker.
+MQTT_HOST: 127.0.0.1 #hostname or ip address of the MQTT broker.
 # OPTIONAL VARIABLES : see https://github.com/ssenart/gazpar2mqtt

grav/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.7.49.5 (08-01-2026)
+- Update to latest version from linuxserver/docker-grav (changelog : https://github.com/linuxserver/docker-grav/releases)
+
 ## 1.8.0 (29-11-2025)
 - Update to latest version from linuxserver/docker-grav (changelog : https://github.com/linuxserver/docker-grav/releases)
 

grav/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="1.8.0"
+ARG BUILD_UPSTREAM="1.7.49.5"
 FROM ${BUILD_FROM}
 
 ##################

grav/config.yaml

@@ -89,5 +89,5 @@ schema:
 slug: grav
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.8.0"
+version: "1.7.49.5"
 webui: "[PROTO:ssl]://[HOST]:[PORT:80]"

grav/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": false,
-  "last_update": "29-11-2025",
+  "last_update": "08-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "grav",
   "source": "github",
   "upstream_repo": "linuxserver/docker-grav",
-  "upstream_version": "1.8.0"
+  "upstream_version": "1.7.49.5"
 }

jackett/CHANGELOG.md

@@ -1,4 +1,10 @@
 
+## 0.24.766 (08-01-2026)
+- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
+
+## 0.24.671 (03-01-2026)
+- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
+
 ## 0.24.590 (28-12-2025)
 - Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
 

jackett/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: jackett_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/jackett
-version: "0.24.590"
+version: "0.24.766"
 webui: http://[HOST]:[PORT:9117]

jackett/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "28-12-2025",
+  "last_update": "08-01-2026",
   "repository": "alexbelgium/hassio-addons",
   "slug": "jackett",
   "source": "github",
   "upstream_repo": "linuxserver/docker-jackett",
-  "upstream_version": "0.24.590"
+  "upstream_version": "0.24.766"
 }

joal/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 2.1.37-4 (08-01-2026)
+- Automatic login with ingress
+- Align configuration mapping with addon_config and homeassistant_config
+- Migrate legacy /homeassistant/addons_config/joal data to the addon config folder
 
 ## 2.1.37 (23-12-2025)
 - Update to latest version from anthonyraymond/joal (changelog : https://github.com/anthonyraymond/joal/releases)

joal/config.yaml

@@ -5,8 +5,10 @@ description: An open source command line RatioMaster with WebUI
 hassio_api: true
 image: ghcr.io/alexbelgium/joal-{arch}
 ingress: true
+ingress_entry: entry
 map:
-  - config:rw
+  - addon_config:rw
+  - homeassistant_config:rw
 name: Joal
 options:
   env_vars: []
@@ -32,4 +34,4 @@ schema:
 slug: joal
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.1.37"
+version: 2.1.37-4

joal/rootfs/etc/cont-init.d/99-run.sh

@@ -33,15 +33,25 @@ bashio::log.info "Joal updated"
 # SYMLINK CONFIG #
 ##################
 
+slug=joal
+
+# Migrate legacy config location
+if [ -d "/homeassistant/addons_config/$slug" ] \
+    && [ ! -f "/homeassistant/addons_config/$slug/migrated" ] \
+    && [ -n "$(find "/homeassistant/addons_config/$slug" -mindepth 1 -maxdepth 1 -print -quit)" ]; then
+    bashio::log.info "Migrating /homeassistant/addons_config/$slug to /addon_configs/xxx-$slug"
+    cp -rnf /homeassistant/addons_config/"$slug"/* /config/ || true
+    mv /homeassistant/addons_config/"$slug" /homeassistant/addons_config/"$slug"_migrated
+fi
+
 # If config doesn't exist, create it
-if [ ! -f /config/addons_config/joal/config.yaml ]; then
+if [ ! -f /config/config.json ]; then
     bashio::log.info "Symlinking config files"
-    mkdir -p /config/addons_config/joal
-    cp /data/joal/config.yaml /config/addons_config/joal/config.yaml
+    cp /data/joal/config.json /config/config.json
 fi
 
 # Refresh symlink
-ln -sf /config/addons_config/joal/config.yaml /data/joal/config.yaml
+ln -sf /config/config.json /data/joal/config.json
 
 ###############
 # SET VARIABLES #
@@ -76,6 +86,12 @@ ingress_interface=$(bashio::addon.ip_address)
 #  bashio::log.info "Ingress url not set. Connection must be done manually."
 #fi
 
+# AUTO AUTHENTIFICATION
+sed -i "s|%%TOKEN%%|$TOKEN|g" /etc/nginx/servers/ingress.conf
+sed -i "s|%%UIPATH%%|$UIPATH|g" /etc/nginx/servers/ingress.conf
+sed -i "s|%%PORT%%|8123|g" /etc/nginx/servers/ingress.conf
+sed -i "s|%%INGRESS_URL%%|$ingress_url|g" /etc/nginx/servers/ingress.conf
+
 # NGINX
 sed -i "s/%%port%%/${ingress_port}/g" /etc/nginx/servers/ingress.conf
 sed -i "s/%%interface%%/${ingress_interface}/g" /etc/nginx/servers/ingress.conf

joal/rootfs/etc/nginx/servers/ingress.conf

@@ -1,4 +1,3 @@
-
 server {
     listen %%interface%%:%%port%% default_server;
 
@@ -7,6 +6,21 @@ server {
     
     client_max_body_size 0;
 
+   location /entry {
+      # Improve ip handling
+      proxy_hide_header X-Powered-By;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header Accept-Encoding "";
+      proxy_read_timeout 90;
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Forwarded-Host $http_host;
+      absolute_redirect off;
+      add_header Access-Control-Allow-Origin *;
+      return 302 %%INGRESS_URL%%/?ui_credentials=%7B%22host%22%3A%22$http_host%%INGRESS_URL%%/%22%2C%22port%22%3A%22%%PORT%%%22%2C%22pathPrefix%22%3A%22%%UIPATH%%%22%2C%22secretToken%22%3A%22%%TOKEN%%%22%7D;
+  }
+
    location / {
        add_header Access-Control-Allow-Origin *;
        proxy_connect_timeout 30m;