Add sub_filter for '/auth' in ingress.conf

birdnet-go-dev/rootfs/etc/nginx/servers/ingress.conf

@@ -49,6 +49,7 @@ server {
       sub_filter `/asset `%%ingress_entry%%/asset;
       sub_filter "'/asset" "'%%ingress_entry%%/asset";
       sub_filter \"/asset \"%%ingress_entry%%/asset;
+      sub_filter \"/auth \"%%ingress_entry%%/auth;
       sub_filter window.location.origin} window.location.origin}%%ingress_entry%%;
     }
 }

birdnet-go/rootfs/etc/nginx/servers/ingress.conf

@@ -49,6 +49,7 @@ server {
       sub_filter `/asset `%%ingress_entry%%/asset;
       sub_filter "'/asset" "'%%ingress_entry%%/asset";
       sub_filter \"/asset \"%%ingress_entry%%/asset;
+      sub_filter \"/auth \"%%ingress_entry%%/auth;
       sub_filter window.location.origin} window.location.origin}%%ingress_entry%%;
     }
 }

scrutiny_fa_original/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## v0.9.3.1 (2026-08-18)
-- Fix startup crash: `collector-once` failed with `s6-svwait: fatal: unable to subscribe to events for /run/service/scrutiny` because the add-on entrypoint never started real s6 supervision. Keep the upstream image's own `/init` as PID 1, same as `scrutiny_original` (#2991) and `scrutiny`/`scrutiny_fa` (#2878).
- 
 ## v0.9.3 (2026-08-13)
 - Update to latest version from analogj/scrutiny (changelog : https://github.com/analogj/scrutiny/releases)
  

scrutiny_fa_original/Dockerfile

@@ -33,8 +33,7 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 
 # Add rootfs
 COPY rootfs/ /
-RUN find . -type f \( -name "*.sh" -o -name "run" -o -name "finish" \) -print -exec chmod +x {} \; && \
-    if [ -d /command ]; then ln -sf /command/* /usr/bin/; fi
+RUN find . -type f \( -name "*.sh" -o -name "run" -o -name "finish" \) -print -exec chmod +x {} \;
 
 # Uses /bin for compatibility purposes
 # hadolint ignore=DL4005
@@ -62,35 +61,19 @@ RUN chmod 744 /ha_autoapps.sh && /ha_autoapps.sh "$PACKAGES" && rm /ha_autoapps.
 # 4 Entrypoint #
 ################
 
-# Keep the repository initialization hook, but return after it has prepared the
-# cont-init scripts. Upstream s6 remains responsible for supervising services.
+# Add entrypoint
 ENV S6_STAGE2_HOOK=/ha_entrypoint.sh
 COPY ha_entrypoint.sh /ha_entrypoint.sh
-RUN chmod 0755 /ha_entrypoint.sh && \
-    awk '!inserted && $0 == "if $PID1; then" { \
-        print "if ! $PID1; then"; \
-        print "  echo \"Initialization hook complete\""; \
-        print "  exit 0"; \
-        print "fi"; \
-        inserted=1 \
-    } { print }' /ha_entrypoint.sh > /ha_entrypoint.sh.tmp && \
-    mv /ha_entrypoint.sh.tmp /ha_entrypoint.sh && \
-    chmod 0755 /ha_entrypoint.sh
+RUN chmod 777 /ha_entrypoint.sh
 
 # Install bashio
 COPY bashio-standalone.sh /usr/local/lib/bashio-standalone.sh
 RUN chmod 0755 /usr/local/lib/bashio-standalone.sh
 
-RUN test -x /init && \
-    test -x /ha_entrypoint.sh && \
-    bash -n /ha_entrypoint.sh && \
-    grep -q 'Initialization hook complete' /ha_entrypoint.sh
-
 RUN sed -i "1a if ! bashio::require.unprotected; then bashio::addon.stop; fi" /etc/cont-init.d/90-run.sh
 
-# Scrutiny's image already includes s6-overlay and defines all services under
-# /etc/services.d. Keep /init as PID 1 so service readiness and s6-svc calls work.
-ENTRYPOINT [ "/init" ]
+ENTRYPOINT [ "/usr/bin/env" ]
+CMD [ "/ha_entrypoint.sh" ]
 
 ############
 # 5 Labels #

scrutiny_fa_original/config.yaml

@@ -45,4 +45,4 @@ schema:
 slug: scrutiny_fa_original
 udev: true
 url: https://github.com/analogj/scrutiny
-version: "v0.9.3.1"
+version: "v0.9.3"

scrutiny_original/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## v0.9.3.1 (2026-08-18)
-- Fix startup crash: `collector-once` failed with `s6-svwait: fatal: unable to subscribe to events for /run/service/scrutiny` because the add-on entrypoint never started real s6 supervision. Keep the upstream image's own `/init` as PID 1 (same fix already shipped for `scrutiny`/`scrutiny_fa` in #2878). Closes #2989.
- 
 ## v0.9.3 (2026-08-13)
 - Update to latest version from analogj/scrutiny (changelog : https://github.com/analogj/scrutiny/releases)
  

scrutiny_original/Dockerfile

@@ -33,8 +33,7 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 
 # Add rootfs
 COPY rootfs/ /
-RUN find . -type f \( -name "*.sh" -o -name "run" -o -name "finish" \) -print -exec chmod +x {} \; && \
-    if [ -d /command ]; then ln -sf /command/* /usr/bin/; fi
+RUN find . -type f \( -name "*.sh" -o -name "run" -o -name "finish" \) -print -exec chmod +x {} \;
 
 # Uses /bin for compatibility purposes
 # hadolint ignore=DL4005
@@ -62,33 +61,17 @@ RUN chmod 744 /ha_autoapps.sh && /ha_autoapps.sh "$PACKAGES" && rm /ha_autoapps.
 # 4 Entrypoint #
 ################
 
-# Keep the repository initialization hook, but return after it has prepared the
-# cont-init scripts. Upstream s6 remains responsible for supervising services.
+# Add entrypoint
 ENV S6_STAGE2_HOOK=/ha_entrypoint.sh
 COPY ha_entrypoint.sh /ha_entrypoint.sh
-RUN chmod 0755 /ha_entrypoint.sh && \
-    awk '!inserted && $0 == "if $PID1; then" { \
-        print "if ! $PID1; then"; \
-        print "  echo \"Initialization hook complete\""; \
-        print "  exit 0"; \
-        print "fi"; \
-        inserted=1 \
-    } { print }' /ha_entrypoint.sh > /ha_entrypoint.sh.tmp && \
-    mv /ha_entrypoint.sh.tmp /ha_entrypoint.sh && \
-    chmod 0755 /ha_entrypoint.sh
+RUN chmod 777 /ha_entrypoint.sh
 
 # Install bashio
 COPY bashio-standalone.sh /usr/local/lib/bashio-standalone.sh
 RUN chmod 0755 /usr/local/lib/bashio-standalone.sh
 
-RUN test -x /init && \
-    test -x /ha_entrypoint.sh && \
-    bash -n /ha_entrypoint.sh && \
-    grep -q 'Initialization hook complete' /ha_entrypoint.sh
-
-# Scrutiny's image already includes s6-overlay and defines all services under
-# /etc/services.d. Keep /init as PID 1 so service readiness and s6-svc calls work.
-ENTRYPOINT [ "/init" ]
+ENTRYPOINT [ "/usr/bin/env" ]
+CMD [ "/ha_entrypoint.sh" ]
 
 ############
 # 5 Labels #

scrutiny_original/config.yaml

@@ -113,4 +113,4 @@ schema:
 slug: scrutiny_original
 udev: true
 url: https://github.com/analogj/scrutiny
-version: "v0.9.3.1"
+version: "v0.9.3"

seerr/CHANGELOG.md

@@ -1,8 +1,4 @@
  
-## 3.4.1.2 (2026-08-18)
-
-- Fixed **Discover** in the sidebar still failing through ingress after 3.4.1.1 (#2975). The trailing slash added in 3.4.1.1 was also applied to the copy of the link inside Seerr's JavaScript bundle, and Next.js' client-side router strips a trailing slash before navigating: it then sent the click to a URL Home Assistant does not route, so it either landed on the same `404: Not Found` or threw `Invariant: attempted to hard navigate to the same URL` and did nothing at all. The bundle is no longer rewritten, so **Discover** routes inside the app exactly like **Requests**, **Issues** and **Settings** already did. The server-rendered link keeps its trailing slash. Only ingress was affected; the directly published port 5055 always worked.
-
 ## 3.4.1.1 (2026-08-16)
 
 - Fixed `404: Not Found` when clicking **Discover** in the sidebar through ingress (#2975). Seerr's Discover link points at `/`, which nginx rewrote to the ingress entry without a trailing slash; Home Assistant only routes ingress on `/api/hassio_ingress/<token>/…`, so the request was rejected by Home Assistant before reaching the add-on. Only ingress was affected; the directly published port 5055 always worked.

seerr/config.yaml

@@ -96,4 +96,4 @@ schema:
 slug: seerr
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/seerr
-version: "3.4.1.2"
+version: "3.4.1.1"

seerr/rootfs/etc/nginx/servers/ingress.conf

@@ -43,40 +43,17 @@ server {
 
         sub_filter_once off;
 
-        # Do not rewrite every response type blindly. text/html is implicit and
-        # must not be listed - nginx pre-seeds it and warns "duplicate MIME type"
-        # on every config load if it appears here as well.
-        sub_filter_types application/javascript text/javascript application/json;
+        # Do not rewrite every response type blindly.
+        sub_filter_types text/html application/javascript text/javascript application/json;
 
-        # Seerr's "Discover" sidebar entry, the header logo and the 404 and
-        # error pages are all <Link href="/">. The server-rendered anchor has to
-        # carry the ingress prefix *with* a trailing slash: Home Assistant routes
-        # ingress on "/api/hassio_ingress/{token}/{path:.*}", so a slash-less
-        # entry matches no route and Home Assistant answers its own plain-text
-        # "404: Not Found" before the request ever reaches this add-on (#2975).
+        # The trailing slash is required: Home Assistant routes ingress on
+        # "/api/hassio_ingress/{token}/{path:.*}", so the bare entry without it
+        # matches no route and Home Assistant answers its own plain-text
+        # "404: Not Found" before the request ever reaches this add-on. Seerr's
+        # Discover link is href="/", so without the slash every click on it 404s.
         sub_filter 'href="/"' 'href="$app/"';
         sub_filter 'href="/login"' 'href="$app/login"';
-
-        # A matching rule for 'href:"/"' - the form those same links take once
-        # compiled into the JS bundle - used to sit here. It is gone on purpose
-        # and must not come back: it fed the ingress prefix into Next.js' own
-        # route table, and next/link resolves a pushed href through
-        # normalizePathTrailingSlash(), which drops a trailing slash while
-        # `trailingSlash` is false (Seerr sets no override). Next therefore hard
-        # navigated to the slash-less URL and recreated the same 404; on the root
-        # page it instead threw "Invariant: attempted to hard navigate to the
-        # same URL" and the click did nothing. That is the state PR #2976 left
-        # #2975 in. Left alone the href stays "/", which removeTrailingSlash()
-        # preserves, so the router matches its own "/" route and transitions
-        # in-app - the path every other sidebar entry ("/requests", "/issues",
-        # "/users", "/settings") already takes. Prefixing belongs in the rendered
-        # anchor, never in the router's route table.
-        #
-        # Note that none of these rules are response-type scoped - sub_filter_types
-        # includes JavaScript - so the anchor rule above avoids the bundle only
-        # because the compiled output spells the prop 'href:"/"' and not
-        # 'href="/"'. These are textual substitutions over someone else's minified
-        # output: recheck them whenever Seerr or Next.js is upgraded.
+        sub_filter 'href:"/"' 'href:"$app/"';
         sub_filter '\/_next' '%%ingress_entry_escaped%%\/_next';
         sub_filter '/_next' '$app/_next';
         sub_filter '/api/v1' '$app/api/v1';