fix(filebrowser_quantum): drop the doubled status-bar inset in the HA app

2.0 sets viewport-fit=cover and pads its header by env(safe-area-inset-top);
inside the ingress panel HA's toolbar already handles that inset. Rewrite it
to viewport-fit=auto on the ingress listener only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.claude/skills/hassio-addon-workflow/references/traps.md

@@ -220,14 +220,6 @@ Assistant **ignores** the add-on's `shm_size`, so the real size varies per insta
 on one host. Detect at runtime rather than assuming either way; keep the flag when the size
 cannot be determined, because the crash it prevents is worse than its overhead.
 
-**Not every Electron app accepts arbitrary Chromium switches.** Joplin parses its own argv
-against an allow-list and aborts on anything else: `--disable-dev-shm-usage` produced
-`An error occurred: Unknown flag: --disable-dev-shm-usage` and no app window
-(`packages/lib/utils/processStartFlags.ts`; it accepts `--no-sandbox`, `--ozone-platform=`,
-`--disable-gpu` and a few others). The build-time `grep` that "verified" the flag only proved
-the text was in the wrapper, not that the app tolerated it. Check the app's argument parser before
-passing a Chromium flag to anything that is not Chromium itself (joplin_desktop, PR #3112, fixed in the follow-up PR).
-
 ## CI and review bots
 
 **What CI actually gates** — checked against the workflows, because assuming costs a cycle.

README.md

@@ -56,7 +56,7 @@ If you want to do add the repository manually, please follow the procedure highl
 
 ### Number of addons
 
-- In the repository : 144
+- In the repository : 143
 - Installed : 286452
 
 ### Top 3
@@ -564,16 +564,6 @@ If you want to do add the repository manually, please follow the procedure highl
 ![amd64][amd64-badge]
 ![ingress][ingress-badge]
 
-✓ ![image](https://api.iconify.design/mdi/notebook-edit.svg) [Joplin Desktop](joplin_desktop/) : Joplin desktop note-taking app accessible via any modern web browser
-
-  ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fjoplin_desktop%2Fconfig.yaml)
-![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fjoplin_desktop%2Fupdater.json)
-![aarch64no][aarch64no-badge]
-![amd64][amd64-badge]
-![ingress][ingress-badge]
-![smb][smb-badge]
-![localdisks][localdisks-badge]
-
 ✓  [Joplin Server](joplin/) : Self-hosted open source note-taking application
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fjoplin%2Fconfig.yaml)

filebrowser_quantum/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.0.0.2 (2026-10-11)
-- Remove the empty band above the search bar in the Home Assistant app (portrait): 2.0 padded its header for the phone status bar, which HA already does. The top inset is set to 0 on ingress only.
-
 ## 2.0.0.1 (2026-10-11)
 - ⚠️ **Back up before updating.** FileBrowser 2.0 changes the config format and the database. This add-on converts both automatically, but you should first create a Home Assistant backup of the add-on, or copy `/addon_configs/*filebrowser_quantum*/` (`config.yaml` and `database.db`). Your 1.x `database.db` is left untouched, but downgrading after the migration loses any changes made in 2.0.
 - Fix startup on 2.0.0, for fresh installs and upgrades (#3109).
@@ -14,6 +11,7 @@
   - Users, shares and settings in `/config/database.db` are migrated to `/config/database.sqlite` on first start.
 - `http.trustProxyHeaders` is set to `true`, because the add-on always runs behind nginx on a subpath.
 - The container healthcheck now checks FileBrowser directly on port 8080 instead of an nginx stub.
+- Remove the empty band above the search bar in the Home Assistant app: 2.0 padded its header for the phone status bar, which HA already does. This applies to ingress only.
 - Direct access on port 8071 no longer passes on a client-supplied `X-Forwarded-For`, so the IP-based login lockout cannot be bypassed now that proxy headers are trusted. Ingress keeps the forwarded chain.
 
 ## 2.0.0 (2026-10-10)

filebrowser_quantum/config.yaml

@@ -117,4 +117,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.0.0.2"
+version: "2.0.0.1"

filebrowser_quantum/rootfs/etc/nginx/servers/ingress.conf

@@ -13,12 +13,12 @@ server {
        proxy_read_timeout 30m;
        proxy_pass         %%protocol%%://backend%%subpath%%;
 
-       # Three things the ingress panel needs that a plain browser tab does not.
+       # Two things the ingress panel needs that a plain browser tab does not.
        # Both are injected into the page's existing nonce-carrying inline script
        # rather than next to <div id="app">: FileBrowser sends
        # script-src 'self' 'nonce-<random>', so a standalone inline <script>
        # would be blocked. If upstream ever drops that
-       # window.__pwaDeferredPrompt line the filter stops matching and all three
+       # window.__pwaDeferredPrompt line the filter stops matching and both
        # behaviours revert, which is the state before either fix.
        #
        # 1. Opening a folder. The tool views (Tools -> File Size Analyzer and
@@ -106,12 +106,12 @@ server {
        # links inside a document FileBrowser renders in its own iframe -- the
        # pdf viewer, the srcdoc markdown/html preview, OnlyOffice -- because a
        # listener on this document never sees another document's clicks.
-       # 3. The status-bar inset. 2.0 pads its header by env(safe-area-inset-top)
-       # (--safe-area-top), but inside the Home Assistant app the panel already
-       # sits below HA's toolbar, which handles that inset, so in portrait it
-       # was applied twice: an empty band above the search bar. Zero it on
-       # <html>, which overrides the :root rule; the direct port is untouched.
-       sub_filter "window.__pwaDeferredPrompt = null;" "window.__pwaDeferredPrompt = null;document.documentElement.style.setProperty('--safe-area-top','0px');(function(){var o=window.open;window.open=function(u,n,f){try{var b=(window.globalVars||{}).baseURL;if(u&&n==='_blank'&&!f&&b){if(b.slice(-1)!=='/')b+='/';var t=new URL(u,location.href);if((t.protocol==='http:'||t.protocol==='https:')&&t.origin===location.origin&&(t.pathname.indexOf(b+'files/')===0||t.pathname.indexOf(b+'public/share/')===0)){location.assign(t.href);return window}}}catch(e){}return o.apply(window,arguments)};document.addEventListener('click',function(e){try{if(e.button||e.metaKey||e.ctrlKey||e.shiftKey||e.altKey)return;var a=e.target&&e.target.closest?e.target.closest('a'):null;if(!a||!a.href)return;var b=(window.globalVars||{}).baseURL;if(!b)return;if(b.slice(-1)!=='/')b+='/';var t=new URL(a.href,location.href);if(t.origin!==location.origin)return;if(!a.hasAttribute('download')&&t.searchParams.get('inline')!=='true'&&(t.pathname===b+'api/resources/download'||t.pathname===b+'public/api/resources/download')){a.download='';a.removeAttribute('target');return}if(a.target==='_blank'&&t.pathname.indexOf(b)===0&&navigator.userAgent.indexOf('Mobile/HomeAssistant')!==-1){a.removeAttribute('target')}}catch(err){}},true)})();";
+       # 2.0 asks for viewport-fit=cover and pads its header by
+       # env(safe-area-inset-top). In the Home Assistant app the panel already
+       # sits below HA's toolbar, which handles that inset, so it was applied
+       # twice (an empty band above the search bar). The direct port is untouched.
+       sub_filter "viewport-fit=cover" "viewport-fit=auto";
+       sub_filter "window.__pwaDeferredPrompt = null;" "window.__pwaDeferredPrompt = null;(function(){var o=window.open;window.open=function(u,n,f){try{var b=(window.globalVars||{}).baseURL;if(u&&n==='_blank'&&!f&&b){if(b.slice(-1)!=='/')b+='/';var t=new URL(u,location.href);if((t.protocol==='http:'||t.protocol==='https:')&&t.origin===location.origin&&(t.pathname.indexOf(b+'files/')===0||t.pathname.indexOf(b+'public/share/')===0)){location.assign(t.href);return window}}}catch(e){}return o.apply(window,arguments)};document.addEventListener('click',function(e){try{if(e.button||e.metaKey||e.ctrlKey||e.shiftKey||e.altKey)return;var a=e.target&&e.target.closest?e.target.closest('a'):null;if(!a||!a.href)return;var b=(window.globalVars||{}).baseURL;if(!b)return;if(b.slice(-1)!=='/')b+='/';var t=new URL(a.href,location.href);if(t.origin!==location.origin)return;if(!a.hasAttribute('download')&&t.searchParams.get('inline')!=='true'&&(t.pathname===b+'api/resources/download'||t.pathname===b+'public/api/resources/download')){a.download='';a.removeAttribute('target');return}if(a.target==='_blank'&&t.pathname.indexOf(b)===0&&navigator.userAgent.indexOf('Mobile/HomeAssistant')!==-1){a.removeAttribute('target')}}catch(err){}},true)})();";
   }
 
 }

joplin_desktop/CHANGELOG.md

@@ -1,8 +0,0 @@
-
-## 3.7.21.1 (2026-10-11)
-- Fix Joplin not opening ("An error occurred: Unknown flag: --disable-dev-shm-usage"): Joplin only accepts its own list of command-line flags, so the extra Chromium flag added in 3.7.21 is removed
-
-## 3.7.21 (2026-10-11)
-- Initial release: Joplin desktop streamed to the browser with Selkies, based on linuxserver/docker-joplin (amd64 only, as Joplin publishes no Linux arm64 build)
-- Shares the Selkies startup scripts with the webtop and claude_desktop add-ons (data location, GPU permissions, ingress, SSL)
-- Own SSL certificates (`use_own_certs`) now also apply when `data_location` is changed: the shared `90-ssl.sh` replaces whatever certificate path nginx holds instead of a fixed `/config/data/ssl/...` string, and warns instead of reporting success when it cannot

joplin_desktop/Dockerfile

@@ -1,129 +0,0 @@
-#============================#
-#  ALEXBELGIUM'S DOCKERFILE  #
-#============================#
-#           _.------.
-#       _.-`    ('>.-`"3.7.21""-.
-# '.--'`       _'`   _ .--.)
-#    -'         '-.-';`   `
-#    ' -      _.'  ``'--.
-#        '---`    .-'"3.7.21"`
-#               /`
-#=== Home Assistant Addon ===#
-
-#################
-# 1 Build Image #
-#################
-
-ARG BUILD_FROM
-ARG BUILD_VERSION
-FROM ${BUILD_FROM}
-
-##################
-# 2 Modify Image #
-##################
-
-# Set S6 wait time
-ENV S6_CMD_WAIT_FOR_SERVICES=1 \
-    S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 \
-    S6_SERVICES_GRACETIME=0
-
-USER root
-
-# load volume
-VOLUME [ "/sys/fs/cgroup" ]
-
-# Set shell
-SHELL ["/bin/bash", "-o", "pipefail", "-c"]
-
-# Allow UID and GID setting
-# hadolint ignore=SC2015,DL4006,SC2013,SC2086
-RUN \
-    # Change home folder location
-    usermod --home /config/data abc && \
-    \
-    # Set +e
-    if [[ -d /etc/services.d ]] && ls /etc/services.d/*/run 1> /dev/null 2>&1; then sed -i "1a set +e" /etc/services.d/*/run; fi
-
-# Global LSIO modifications
-COPY ha_lsio.sh /ha_lsio.sh
-ARG CONFIGLOCATION="/config/data"
-RUN chmod 744 /ha_lsio.sh && if grep -qr "lsio" /etc; then /ha_lsio.sh "$CONFIGLOCATION"; fi && rm /ha_lsio.sh
-
-##################
-# 3 Install apps #
-##################
-
-# Add rootfs
-COPY rootfs/ /
-RUN find . -type f \( -name "*.sh" -o -name "run" -o -name "finish" \) -print -exec chmod +x {} \;
-
-# Uses /bin for compatibility purposes
-# hadolint ignore=DL4005
-RUN if [ ! -f /bin/sh ] && [ -f /usr/bin/sh ]; then ln -s /usr/bin/sh /bin/sh; fi && \
-    if [ ! -f /bin/bash ] && [ -f /usr/bin/bash ]; then ln -s /usr/bin/bash /bin/bash; fi
-
-# Modules
-ARG MODULES="00-banner.sh 01-custom_script.sh 00-local_mounts.sh 00-smb_mounts.sh 90-dns_set.sh"
-
-# Automatic modules download
-COPY ha_automodules.sh /ha_automodules.sh
-RUN chmod 744 /ha_automodules.sh && /ha_automodules.sh "$MODULES" && rm /ha_automodules.sh
-
-# Manual apps
-ENV PACKAGES="nginx"
-
-# Automatic apps & bashio
-COPY ha_autoapps.sh /ha_autoapps.sh
-RUN chmod 744 /ha_autoapps.sh && /ha_autoapps.sh "$PACKAGES" && rm /ha_autoapps.sh
-
-################
-# 4 Entrypoint #
-################
-
-# Add entrypoint
-#ENV S6_STAGE2_HOOK=/ha_entrypoint.sh
-COPY ha_entrypoint.sh /ha_entrypoint.sh
-RUN chmod 777 /ha_entrypoint.sh
-
-# Install bashio
-COPY bashio-standalone.sh /usr/local/lib/bashio-standalone.sh
-RUN chmod 0755 /usr/local/lib/bashio-standalone.sh
-
-#WORKDIR /
-ENTRYPOINT [ "/usr/bin/env" ]
-CMD [ "/ha_entrypoint.sh" ]
-
-############
-# 5 Labels #
-############
-
-ARG BUILD_ARCH
-ARG BUILD_DATE
-ARG BUILD_DESCRIPTION
-ARG BUILD_NAME
-ARG BUILD_REF
-ARG BUILD_REPOSITORY
-ARG BUILD_VERSION
-ENV BUILD_VERSION="${BUILD_VERSION}"
-LABEL \
-    io.hass.name="${BUILD_NAME}" \
-    io.hass.description="${BUILD_DESCRIPTION}" \
-    io.hass.arch="${BUILD_ARCH}" \
-    io.hass.type="addon" \
-    io.hass.version=${BUILD_VERSION} \
-    maintainer="alexbelgium (https://github.com/alexbelgium)" \
-    org.opencontainers.image.title="${BUILD_NAME}" \
-    org.opencontainers.image.description="${BUILD_DESCRIPTION}" \
-    org.opencontainers.image.vendor="Home Assistant Add-ons" \
-    org.opencontainers.image.authors="alexbelgium (https://github.com/alexbelgium)" \
-    org.opencontainers.image.licenses="MIT" \
-    org.opencontainers.image.url="https://github.com/alexbelgium" \
-    org.opencontainers.image.source="https://github.com/${BUILD_REPOSITORY}" \
-    org.opencontainers.image.documentation="https://github.com/${BUILD_REPOSITORY}/blob/main/README.md" \
-    org.opencontainers.image.created=${BUILD_DATE} \
-    org.opencontainers.image.revision=${BUILD_REF} \
-    org.opencontainers.image.version=${BUILD_VERSION}
-
-####################
-# 6 HealthcheckNOT #
-####################

joplin_desktop/README.md

@@ -1,97 +0,0 @@
-# Home assistant add-on: Joplin Desktop
-
-
-I maintain this and other Home Assistant add-ons in my free time: keeping up with upstream changes, HA changes, and testing on real hardware takes a lot of time (and some money). I use around 5-10 of my >110 addons so regularly I install test machines (and purchase some test services such as vpn) that I don't use myself to troubleshoot and improve the addons
-
-If this add-on saves you time or makes your setup easier, I would be very grateful for your support!
-
-[![Buy me a coffee][donation-badge]](https://www.buymeacoffee.com/alexbelgium)
-[![Donate via PayPal][paypal-badge]](https://www.paypal.com/donate/?hosted_button_id=DZFULJZTP3UQA)
-
-## Addon informations
-
-![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fjoplin_desktop%2Fconfig.yaml)
-![Ingress](https://img.shields.io/badge/dynamic/yaml?label=Ingress&query=%24.ingress&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fjoplin_desktop%2Fconfig.yaml)
-![Arch](https://img.shields.io/badge/dynamic/yaml?color=success&label=Arch&query=%24.arch&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fjoplin_desktop%2Fconfig.yaml)
-
-[![Codacy Badge](https://app.codacy.com/project/badge/Grade/9c6cf10bdbba45ecb202d7f579b5be0e)](https://www.codacy.com/gh/alexbelgium/hassio-addons/dashboard?utm_source=github.com&utm_medium=referral&utm_content=alexbelgium/hassio-addons&utm_campaign=Badge_Grade)
-[![GitHub Super-Linter](https://img.shields.io/github/actions/workflow/status/alexbelgium/hassio-addons/weekly-supelinter.yaml?label=Lint%20code%20base)](https://github.com/alexbelgium/hassio-addons/actions/workflows/weekly-supelinter.yaml)
-[![Builder](https://img.shields.io/github/actions/workflow/status/alexbelgium/hassio-addons/onpush_builder.yaml?label=Builder)](https://github.com/alexbelgium/hassio-addons/actions/workflows/onpush_builder.yaml)
-
-[donation-badge]: https://img.shields.io/badge/Buy%20me%20a%20coffee-%23d32f2f?logo=buy-me-a-coffee&style=flat&logoColor=white
-[paypal-badge]: https://img.shields.io/badge/Donate%20via%20PayPal-0070BA?logo=paypal&style=flat&logoColor=white
-
-_Thanks to everyone having starred my repo! To star it click on the image below, then it will be on top right. Thanks!_
-
-[![Stargazers repo roster for @alexbelgium/hassio-addons](https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/.github/stars2.svg)](https://github.com/alexbelgium/hassio-addons/stargazers)
-
-![downloads evolution](https://raw.githubusercontent.com/alexbelgium/hassio-addons/master/joplin_desktop/stats.png)
-
-## About
-
-[Joplin](https://joplinapp.org) is an open source note-taking and to-do application. This add-on runs the full Joplin **desktop** app and streams it to your browser with Selkies, so you can use it from any device without installing anything.
-
-This addon is based on the docker image <https://github.com/linuxserver/docker-joplin>
-
-If you only need to sync your notes between your own Joplin apps, the [Joplin Server](https://github.com/alexbelgium/hassio-addons/tree/master/joplin) add-on is lighter. The two work together: point this desktop app at your Joplin Server in Joplin's synchronisation settings.
-
-Only amd64 is supported, because Joplin does not publish a Linux arm64 build.
-
-## Configuration
-
-The recommended way in is ingress (the sidebar panel). You can also enable the https port 3001 in the add-on network settings and open <https://homeassistant:3001>; the browser streaming features need HTTPS, so do not use the plain http port 3000 directly — it is only meant to sit behind your own TLS reverse proxy. If you open a port, set `PASSWORD`: the web interface then asks for user `abc` and that password. This basic authentication is only suitable on a trusted local network; for access from the internet use a reverse proxy with stronger authentication.
-
-Joplin's profile (notes, settings, plugins) is stored in `data_location`, by default `/config/data`, which is the add-on's own folder under `/addon_configs/` on your Home Assistant host. It is kept across restarts and updates and included in backups.
-
-Use the add-on `env_vars` option to pass extra environment variables (uppercase or lowercase names). See <https://github.com/alexbelgium/hassio-addons/wiki/Add-Environment-variables-to-your-Addon-2> for details.
-
-```yaml
-PUID: 1000 # user id of the desktop user and owner of the data folder
-PGID: 1000 # group id of the desktop user
-TZ: Europe/Paris # timezone, Country/City according to https://manpages.ubuntu.com/manpages/trusty/man3/DateTime::TimeZone::Catalog.3pm.html
-KEYBOARD: fr-fr-azerty # keyboard layout
-PASSWORD: "mypassword" # basic authentication on the web interface (user abc). Set it if you open port 3001; trusted local networks only
-DRINODE: /dev/dri/renderD128 # GPU device used for rendering and encoding, if the default does not work
-data_location: /config/data # where Joplin's profile is stored; must be in /config, /share, /data or /mnt
-additional_apps: "" # comma-separated apt packages to install at every start (not persistent otherwise)
-use_own_certs: false # use your own certificates from /ssl for the https port 3001
-certfile: fullchain.pem # certificate file in /ssl
-keyfile: privkey.pem # key file in /ssl
-DNS_server: 8.8.8.8 # keep blank to use your router's DNS
-localdisks: sda1 # put the hardware name of your drive to mount separated by commas, or its label. ex. sda1, sdb1, MYNAS... Add a folder to mount only it, ex. MYNAS/public mounts at /mnt/MYNAS/public
-networkdisks: "//SERVER/SHARE" # optional, list of smb servers to mount, separated by commas
-cifsusername: "username" # optional, smb username, same for all smb shares
-cifspassword: "password" # optional, smb password
-cifsdomain: "domain" # optional, allow setting the domain for the smb share
-```
-
-### Useful upstream variables
-
-These are read by the LinuxServer Selkies base image and can be set through `env_vars`. The full list is at <https://docs.linuxserver.io/images/docker-joplin>.
-
-| Variable | Effect |
-| --- | --- |
-| `RESTART_APP` | `true` restarts Joplin automatically if its window is closed |
-| `NO_DECOR` | any value removes window decorations, so Joplin fills the browser like a web app |
-| `NO_FULL` | any value stops the window manager from maximising the window |
-| `HARDEN_DESKTOP` | `true` disables the terminal, sudo, xdg-open and Selkies file transfers, keeping only Joplin |
-| `SELKIES_AUDIO_ENABLED`, `SELKIES_MICROPHONE_ENABLED` | `false` disables audio or microphone streaming |
-| `SELKIES_FRAMERATE` | streaming frame rate cap, e.g. `30` |
-
-## Installation
-
-
-The installation of this add-on is pretty straightforward and not different in comparison to installing any other add-on.
-
-1. Add my add-ons repository to your home assistant instance (in supervisor addons store at top right, or click button below if you have configured my HA)
-   [![Open your Home Assistant instance and show the add add-on repository dialog with a specific repository URL pre-filled.](https://my.home-assistant.io/badges/supervisor_add_addon_repository.svg)](https://my.home-assistant.io/redirect/supervisor_add_addon_repository/?repository_url=https%3A%2F%2Fgithub.com%2Falexbelgium%2Fhassio-addons)
-1. Install this add-on.
-1. Click the `Save` button to store your configuration.
-1. Set the add-on options to your preferences
-1. Start the add-on.
-1. Check the logs of the add-on to see if everything went well.
-1. Open the webUI and adapt the software options
-
-## Support
-
-Create an issue on github

joplin_desktop/apparmor.txt

@@ -1,72 +0,0 @@
-#include <tunables/global>
-
-profile joplin_desktop_addon flags=(attach_disconnected,mediate_deleted) {
-  #include <abstractions/base>
-
-  capability chown,
-  capability dac_override,
-  capability dac_read_search,
-  capability fowner,
-  capability setgid,
-  capability setuid,
-  capability sys_chroot,
-  capability sys_admin,
-  file,
-  signal,
-  mount,
-  umount,
-  remount,
-  network udp,
-  network tcp,
-  network dgram,
-  network stream,
-  network inet,
-  network inet6,
-  network netlink raw,
-  network unix dgram,
-
-
-# S6-Overlay
-  /init ix,
-  /run/{s6,s6-rc*,service}/** ix,
-  /package/** ix,
-  /command/** ix,
-  /run/{,**} rwk,
-  /dev/tty rw,
-  /bin/** ix,
-  /usr/bin/** ix,
-  /usr/lib/bashio/** ix,
-  /etc/s6/** rix,
-  /run/s6/** rix,
-  /etc/services.d/** rwix,
-  /etc/cont-init.d/** rwix,
-  /etc/cont-finish.d/** rwix,
-  /init rix,
-  /var/run/** mrwkl,
-  /var/run/ mrwkl,
-  /dev/i2c-1 mrwkl,
-  # Files required
-  /dev/fuse mrwkl,
-  /dev/sda1 mrwkl,
-  /dev/sdb1 mrwkl,
-  /dev/nvme0 mrwkl,
-  /dev/nvme0n1 mrwkl,
-  /dev/nvme1 mrwkl,
-  /dev/mmcblk0p1 mrwkl,
-  /dev/* mrwkl,
-  /udev/* mrwkl,
-  /tmp/** mrkwl,
-  /dev/fuse/** mrkwl,
-  /dev/** mrkwl,
-  /sys/firmware/** mrkwl,
-
-  # Data access
-  /data/** rw,
-
-  # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
-  ptrace (trace,read) peer=docker-default,
-
-  # docker daemon confinement requires explict allow rule for signal
-  signal (receive) set=(kill,term) peer=/usr/bin/docker,
-
-}

joplin_desktop/build.json

@@ -1,5 +0,0 @@
-{
-  "build_from": {
-    "amd64": "lscr.io/linuxserver/joplin:latest"
-  }
-}

joplin_desktop/config.yaml

@@ -1,107 +0,0 @@
-arch:
-  - amd64
-audio: true
-description: Joplin desktop note-taking app accessible via any modern web browser
-devices:
-  - /dev/dri
-  - /dev/dri/card0
-  - /dev/dri/card1
-  - /dev/dri/renderD128
-  - /dev/sda
-  - /dev/sdb
-  - /dev/sdc
-  - /dev/sdd
-  - /dev/sde
-  - /dev/sdf
-  - /dev/sdg
-  - /dev/nvme
-  - /dev/nvme0
-  - /dev/nvme0n1
-  - /dev/nvme0n1p1
-  - /dev/nvme0n1p2
-  - /dev/mmcblk
-  - /dev/sda1
-  - /dev/sdb1
-  - /dev/sdc1
-  - /dev/sdd1
-  - /dev/sde1
-  - /dev/sdf1
-  - /dev/sdg1
-  - /dev/sda2
-  - /dev/sdb2
-  - /dev/sdc2
-  - /dev/sdd2
-  - /dev/sde2
-  - /dev/sdf2
-  - /dev/sdg2
-  - /dev/sda3
-  - /dev/sdb3
-  - /dev/sda4
-  - /dev/sdb4
-  - /dev/sda5
-  - /dev/sda6
-  - /dev/sda7
-  - /dev/sda8
-  - /dev/nvme1
-  - /dev/nvme2
-environment:
-  FM_HOME: /config/data
-  HOME: /config/data
-  START_DOCKER: "false"
-  TITLE: Joplin
-image: ghcr.io/alexbelgium/joplin_desktop-{arch}
-ingress: true
-init: false
-map:
-  - app_config:rw
-  - media:rw
-  - share:rw
-  - ssl
-name: Joplin Desktop
-options:
-  env_vars: []
-  DNS_server: 8.8.8.8
-  PGID: 1000
-  PUID: 1000
-  additional_apps: ""
-  certfile: fullchain.pem
-  data_location: /config/data
-  keyfile: privkey.pem
-  use_own_certs: false
-panel_admin: false
-panel_icon: mdi:notebook-edit
-ports:
-  3000/tcp: null
-  3001/tcp: null
-ports_description:
-  3000/tcp: Web interface (http)
-  3001/tcp: Web interface (https)
-privileged:
-  - SYS_ADMIN
-  - DAC_READ_SEARCH
-schema:
-  env_vars:
-    - name: match(^[A-Za-z0-9_]+$)
-      value: str?
-  DNS_server: str?
-  DRINODE: list(/dev/dri/card0|/dev/dri/card1|/dev/dri/card2|/dev/dri/renderD128|/dev/dri/renderD129|)?
-  KEYBOARD: list(da-dk-qwerty|de-de-qwertz|en-gb-qwerty|en-us-qwerty|es-es-qwerty|fr-ch-qwertz|fr-fr-azerty|it-it-qwerty|ja-jp-qwerty|pt-br-qwerty|sv-se-qwerty|tr-tr-qwerty)?
-  PASSWORD: password?
-  PGID: int
-  PUID: int
-  TZ: match([A-Z][a-z]*./[A-Z][a-z]*.)?
-  additional_apps: str?
-  certfile: str
-  cifsdomain: str?
-  cifspassword: password?
-  cifsusername: str?
-  data_location: str?
-  keyfile: str
-  localdisks: str?
-  networkdisks: str?
-  use_own_certs: bool?
-slug: joplin_desktop
-udev: true
-url: https://github.com/alexbelgium/hassio-addons/tree/master/joplin_desktop
-version: "3.7.21.1"
-video: true

joplin_desktop/rootfs/etc/cont-init.d/20-folders.sh

@@ -1 +0,0 @@
-../../../../claude_desktop/rootfs/etc/cont-init.d/20-folders.sh

joplin_desktop/rootfs/etc/cont-init.d/21-gpu_permissions.sh

@@ -1 +0,0 @@
-../../../../claude_desktop/rootfs/etc/cont-init.d/21-gpu_permissions.sh

joplin_desktop/rootfs/etc/cont-init.d/80-configuration.sh

@@ -1 +0,0 @@
-../../../../claude_desktop/rootfs/etc/cont-init.d/80-configuration.sh

joplin_desktop/rootfs/etc/cont-init.d/90-ingress.sh

@@ -1 +0,0 @@
-../../../../claude_desktop/rootfs/etc/cont-init.d/90-ingress.sh

joplin_desktop/rootfs/etc/cont-init.d/90-ssl.sh

@@ -1 +0,0 @@
-../../../../webtop_kde/rootfs/etc/cont-init.d/90-ssl.sh

joplin_desktop/rootfs/etc/nginx/includes/mime.types

@@ -1 +0,0 @@
-../../../../../claude_desktop/rootfs/etc/nginx/includes/mime.types

joplin_desktop/rootfs/etc/nginx/includes/proxy_params.conf

@@ -1 +0,0 @@
-../../../../../claude_desktop/rootfs/etc/nginx/includes/proxy_params.conf

joplin_desktop/rootfs/etc/nginx/includes/resolver.conf

@@ -1 +0,0 @@
-../../../../../claude_desktop/rootfs/etc/nginx/includes/resolver.conf

joplin_desktop/rootfs/etc/nginx/includes/server_params.conf

@@ -1 +0,0 @@
-../../../../../claude_desktop/rootfs/etc/nginx/includes/server_params.conf

joplin_desktop/rootfs/etc/nginx/includes/ssl_params.conf

@@ -1 +0,0 @@
-../../../../../claude_desktop/rootfs/etc/nginx/includes/ssl_params.conf

joplin_desktop/rootfs/etc/nginx/includes/upstream.conf

@@ -1 +0,0 @@
-../../../../../claude_desktop/rootfs/etc/nginx/includes/upstream.conf

joplin_desktop/updater.json

@@ -1,9 +0,0 @@
-{
-  "github_fulltag": "false",
-  "last_update": "2026-10-11",
-  "repository": "alexbelgium/hassio-addons",
-  "slug": "joplin_desktop",
-  "source": "github",
-  "upstream_repo": "linuxserver/docker-joplin",
-  "upstream_version": "3.7.21"
-}