wger: keep SECRET_KEY when JWT generation fails, log its errors

Generate each secret only when missing instead of rewriting the file, so a
failed key generation no longer rotates SECRET_KEY on every boot.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

README.md

@@ -57,18 +57,18 @@ If you want to do add the repository manually, please follow the procedure highl
 ### Number of addons
 
 - In the repository : 145
-- Installed : 264114
+- Installed : 286452
 
 ### Top 3
 
-1. Arpspoof (109618x)
+1. Arpspoof (108875x)
-2. Filebrowser (15629x)
+2. Portainer (19645x)
-3. Portainer (19645x)
+3. Filebrowser (14721x)
 
 ### Architectures used
 
-- amd64: 80%
+- amd64: 79%
-- aarch64: 20%
+- aarch64: 21%
 
 ### Star History
 
@@ -83,7 +83,7 @@ If you want to do add the repository manually, please follow the procedure highl
 ## Add-ons provided by this repository
 
 
-✓  [Arpspoof (109618x)](arpspoof/) : block internet connection for local network devices
+✓  [Arpspoof (108875x)](arpspoof/) : block internet connection for local network devices
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Farpspoof%2Fconfig.yaml)
 ![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Farpspoof%2Fupdater.json)
@@ -390,7 +390,7 @@ If you want to do add the repository manually, please follow the procedure highl
 ![smb][smb-badge]
 ![localdisks][localdisks-badge]
 
-✓ ![image](https://api.iconify.design/mdi/file-search.svg) [Filebrowser (15629x)](filebrowser/) : filebrowser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit your files
+✓ ![image](https://api.iconify.design/mdi/file-search.svg) [Filebrowser (14721x)](filebrowser/) : filebrowser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit your files
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Ffilebrowser%2Fconfig.yaml)
 ![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Ffilebrowser%2Fupdater.json)

browser_brave/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 1.97.59-ls138 (2026-10-17)
-- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
- 
 ## 1.97.57-ls137 (2026-10-16)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
  

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.97.59-ls138"
+version: "1.97.57-ls137"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.97.59-ls138"
+  "upstream_version": "1.97.57-ls137"
 }

browserless_chrome/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.57.1 (2026-10-17)
-- Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
- 
 ## 2.57.0 (2026-10-03)
 - Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
  

browserless_chrome/config.yaml

@@ -86,5 +86,5 @@ schema:
 slug: browserless_chrome
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/browserless_chrome
-version: "2.57.1"
+version: "2.57.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]/docs"

browserless_chrome/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "v",
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-03",
   "repository": "alexbelgium/hassio-addons",
   "slug": "browserless_chrome",
   "source": "github",
   "upstream_repo": "browserless/chrome",
-  "upstream_version": "2.57.1"
+  "upstream_version": "2.57.0"
 }

cleanuparr/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.10.11 (2026-10-17)
-- Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
- 
 ## 2.10.10 (2026-10-16)
 - Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
  

cleanuparr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="2.10.11"
+ARG BUILD_UPSTREAM="2.10.10"
 
 #################
 # 1 Build Image #

cleanuparr/config.yaml

@@ -91,4 +91,4 @@ schema:
   TZ: str?
 slug: cleanuparr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cleanuparr
-version: "2.10.11"
+version: "2.10.10"

cleanuparr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cleanuparr",
   "source": "github",
   "upstream_repo": "Cleanuparr/Cleanuparr",
-  "upstream_version": "2.10.11"
+  "upstream_version": "2.10.10"
 }

emby_beta/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 4.11.0.8 (2026-10-17)
-- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
- 
 ## 4.11.0.7 (2026-10-16)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
  

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.11.0.8"
+ARG BUILD_UPSTREAM="4.11.0.7"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.11.0.8"
+version: "4.11.0.7"
 video: true

emby_beta/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.11.0.8"
+  "upstream_version": "4.11.0.7"
 }

flexget/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 3.22.4 (2026-10-17)
-- Update to latest version from wiserain/flexget
 
 ## 3.22.2 (2026-10-10)
 - Update to latest version from wiserain/flexget (fixes #3102)

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.22.4"
+version: "3.22.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,10 +1,10 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-10",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.22.4",
+  "upstream_version": "3.22.2",
   "github_exclude": "ci"
 }

free_games_claimer/CHANGELOG.md

@@ -1,8 +1,4 @@
  
-## 2.2.3 (2026-10-17)
-- Update to latest version from P-Adamiec/Free-Games-Claimer-Remaster (changelog : https://github.com/P-Adamiec/Free-Games-Claimer-Remaster/releases)
-- Upstream tag : 1.16
- 
 ## 2.2.2 (2026-10-16)
 - Update to latest version from P-Adamiec/Free-Games-Claimer-Remaster (changelog : https://github.com/P-Adamiec/Free-Games-Claimer-Remaster/releases)
 - Upstream tag : 1.15

free_games_claimer/Dockerfile

@@ -17,7 +17,7 @@ ARG BUILD_REF
 ARG BUILD_REPOSITORY
 ARG BUILD_VERSION
 ARG UPSTREAM_REPOSITORY="P-Adamiec/Free-Games-Claimer-Remaster"
-ARG BUILD_UPSTREAM="1.16"
+ARG BUILD_UPSTREAM="1.15"
 
 ENV S6_CMD_WAIT_FOR_SERVICES="1" \
     S6_CMD_WAIT_FOR_SERVICES_MAXTIME="0" \

free_games_claimer/config.yaml

@@ -96,5 +96,5 @@ schema:
 slug: free_games_claimer
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.2.3"
+version: "2.2.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:6080]"

free_games_claimer/updater.json

@@ -3,11 +3,11 @@
   "dockerhub_list_size": 2,
   "github_exclude": "d",
   "github_fulltag": false,
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "free_games_claimer",
   "source": "github",
   "upstream_repo": "P-Adamiec/Free-Games-Claimer-Remaster",
-  "upstream_version": "1.16"
+  "upstream_version": "1.15"
 }

immich/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.3.3 (2026-10-17)
-- Update to latest version from ghcr.io/imagegenius/immich:3
- 
 ## 3.3.1.1 (2026-10-16)
 - Update to latest version from ghcr.io/imagegenius/immich:3
 - Upstream tag : 3.3.1

immich/config.yaml

@@ -141,6 +141,6 @@ slug: immich
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "3.3.3"
+version: "3.3.1.1"
 video: true
 webui: http://[HOST]:[PORT:8080]

immich/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "immich",
   "source": "container",
-  "upstream_digest": "sha256:aab11b5515e8520acf0edcc19880d5841065d1bf60ddbc99d2c013afda674fa4",
+  "upstream_digest": "sha256:77b7fb083a2bac99410b1f238af14d1b999509d6b2f6c625bbb292704d7402e0",
   "upstream_repo": "ghcr.io/imagegenius/immich:3",
-  "upstream_version": "3.3.3"
+  "upstream_version": "3.3.1"
 }

immich_cuda/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.3.3 (2026-10-17)
-- Update to latest version from ghcr.io/imagegenius/immich:3-cuda
- 
 ## 3.3.1.1 (2026-10-16)
 - Update to latest version from ghcr.io/imagegenius/immich:3-cuda
 - Upstream tag : 3.3.1

immich_cuda/config.yaml

@@ -139,6 +139,6 @@ slug: immich_cuda
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "3.3.3"
+version: "3.3.1.1"
 video: true
 webui: http://[HOST]:[PORT:8080]

immich_cuda/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "immich",
   "source": "container",
-  "upstream_digest": "sha256:56fa20a4ec62bb9c4f8bf8a62f24d75bbd679ba10a52d902a04a722f5caa4c53",
+  "upstream_digest": "sha256:8d8e0433e8b808421f279c1ad6936f140f454e97387f2c94994bc84721b86745",
   "upstream_repo": "ghcr.io/imagegenius/immich:3-cuda",
-  "upstream_version": "3.3.3"
+  "upstream_version": "3.3.1"
 }

immich_noml/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.3.3 (2026-10-17)
-- Update to latest version from ghcr.io/imagegenius/immich:3-noml
- 
 ## 3.3.1.1 (2026-10-16)
 - Update to latest version from ghcr.io/imagegenius/immich:3-noml
 - Upstream tag : 3.3.1

immich_noml/config.yaml

@@ -140,6 +140,6 @@ slug: immich_noml
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "3.3.3"
+version: "3.3.1.1"
 video: true
 webui: http://[HOST]:[PORT:8080]

immich_noml/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "immich",
   "source": "container",
-  "upstream_digest": "sha256:c04bdd76f1f4fc7eb9045da63698ef94117b63f19c62fe28b634f49db47c42c9",
+  "upstream_digest": "sha256:fa48bf7ac27e511fabe920ceffab1c04e503ed5dc003e8db0287afcab5dc6b72",
   "upstream_repo": "ghcr.io/imagegenius/immich:3-noml",
-  "upstream_version": "3.3.3"
+  "upstream_version": "3.3.1"
 }

immich_openvino/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.3.3 (2026-10-17)
-- Update to latest version from ghcr.io/imagegenius/immich:3-openvino
- 
 ## 3.3.1.1 (2026-10-16)
 - Update to latest version from ghcr.io/imagegenius/immich:3-openvino
 - Upstream tag : 3.3.1

immich_openvino/config.yaml

@@ -140,6 +140,6 @@ slug: immich_openvino
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "3.3.3"
+version: "3.3.1.1"
 video: true
 webui: http://[HOST]:[PORT:8080]

immich_openvino/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "immich",
   "source": "container",
-  "upstream_digest": "sha256:73d75a0c0e64ffded990d026b7d343b27b6e7e76fa3bdaf3bd636af46d3cd4c2",
+  "upstream_digest": "sha256:497a6777fa1cd7ee1e689eebcfe5ed1204bb8a625ea193e9fa05d2404228b6d9",
   "upstream_repo": "ghcr.io/imagegenius/immich:3-openvino",
-  "upstream_version": "3.3.3"
+  "upstream_version": "3.3.1"
 }

jackett/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 0.24.2864 (2026-10-17)
-- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
- 
 ## 0.24.2856 (2026-10-16)
 - Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
  

jackett/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: jackett_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/jackett
-version: "0.24.2864"
+version: "0.24.2856"
 webui: http://[HOST]:[PORT:9117]

jackett/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "jackett",
   "source": "github",
   "upstream_repo": "linuxserver/docker-jackett",
-  "upstream_version": "0.24.2864"
+  "upstream_version": "0.24.2856"
 }

nzbget/CHANGELOG.md

@@ -1,8 +1,4 @@
  
-## v26.3.268 (2026-10-17)
-- Update to latest version from linuxserver/docker-nzbget (changelog : https://github.com/linuxserver/docker-nzbget/releases)
-- Upstream tag : v26.3-ls268
- 
 ## v26.3.267 (2026-10-10)
 - Update to latest version from linuxserver/docker-nzbget (changelog : https://github.com/linuxserver/docker-nzbget/releases)
 - Upstream tag : v26.3-ls267

nzbget/config.yaml

@@ -104,4 +104,4 @@ schema:
 slug: nzbget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v26.3.268"
+version: "v26.3.267"

nzbget/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-10-17",
+  "last_update": "2026-10-10",
   "repository": "alexbelgium/hassio-addons",
   "slug": "nzbget",
   "source": "github",
   "upstream_repo": "linuxserver/docker-nzbget",
-  "upstream_version": "v26.3-ls268"
+  "upstream_version": "v26.3-ls267"
 }

wger/CHANGELOG.md

@@ -1,4 +1,9 @@
- 
+## 2.8.0-dev.1.1 (2026-10-16)
+
+- Fix blank dashboard and non-working menus caused by 404s on frontend assets (bootstrap, htmx, fontawesome, react components). Upstream's entrypoint only collects static files when `DJANGO_DEBUG` is explicitly `False`, which the add-on never set; it is now set in the image (#3123).
+- Set `DJANGO_DEBUG=False` in the default `env_vars` option for new installs; the image keeps it as a fallback for existing installs, whose options are not updated.
+- Generate `SECRET_KEY`, `JWT_PRIVATE_KEY` and `JWT_PUBLIC_KEY` on first start and store them in `/data/secrets.env`. This fixes the wger mobile app login failing with a 500 error, and keeps web sessions across restarts. Values set through `env_vars` still take precedence.
+
 ## 2.8.0-dev.1 (2026-10-10)
 - Update to latest version from wger/server
  

wger/Dockerfile

@@ -29,12 +29,15 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 
 
 # The upstream image no longer ships database defaults; settings/main.py reads
-# DJANGO_DB_ENGINE and DJANGO_DB_DATABASE with no fallback, so they must be set here
+# DJANGO_DB_ENGINE and DJANGO_DB_DATABASE with no fallback, so they must be set here.
+# DJANGO_DEBUG=False must be explicit: upstream's entrypoint only runs collectstatic
+# when the variable is literally "False", otherwise node/fontawesome assets 404
 ENV SYNC_EXERCISES_ON_STARTUP=True \
     DOWNLOAD_EXERCISE_IMAGES_ON_STARTUP=True \
     FROM_EMAIL='wger Workout Manager <wger@example.com>' \
     DJANGO_DB_ENGINE="django.db.backends.sqlite3" \
     DJANGO_DB_DATABASE="/data/database.sqlite" \
+    DJANGO_DEBUG=False \
     DJANGO_PERFORM_MIGRATIONS=True \
     DJANGO_MEDIA_ROOT="/data/media" \
     DJANGO_STATIC_ROOT="/data/static"

wger/config.yaml

@@ -10,7 +10,9 @@ map:
   - ssl:ro
 name: Wger
 options:
-  env_vars: []
+  env_vars:
+    - name: DJANGO_DEBUG
+      value: "False"
   CONFIG_LOCATION: /config/config.yaml
 ports:
   80/tcp: 9927
@@ -24,5 +26,5 @@ schema:
 slug: wger
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.8.0-dev.1"
+version: "2.8.0-dev.1.1"
 webui: "[PROTO:ssl]://[HOST]:[PORT:80]"

wger/rootfs/etc/cont-init.d/90-run.sh

@@ -68,21 +68,32 @@ prepare_writable_dir /data/static
 prepare_writable_dir /data/media
 migrate_database
 
+echo "... generate persistent secrets"
+# Without JWT keys the mobile app login fails with a 500, and without SECRET_KEY
+# sessions are lost at every restart. Generated once, env_vars still override them.
+grep -qs '^SECRET_KEY=' /data/secrets.env ||
+    echo "SECRET_KEY=$(python3 -c 'import secrets; print(secrets.token_urlsafe(50))')" >> /data/secrets.env
+grep -qs '^JWT_PRIVATE_KEY=' /data/secrets.env ||
+    (cd /home/wger/src && sudo -u wger -E HOME=/home/wger python3 manage.py generate-jwt-keys | grep '^JWT_') >> /data/secrets.env ||
+    bashio::log.warning "Unable to generate JWT keys"
+chmod 600 /data/secrets.env
+
 echo "... add env variables"
 (
     set -o posix
     export -p
 ) > /data/env.sh
 
-if [ -f /.env ]; then
+for envfile in /data/secrets.env /.env; do
+    [ -f "$envfile" ] || continue
     while IFS= read -r line; do
         [[ -z "$line" || "$line" =~ ^[[:space:]]*# ]] && continue
         var="${line%%=*}"
         [[ "$var" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || continue
         sed -i "/^export[[:space:]]\+$var=/d" /data/env.sh
         echo "export $line" >> /data/env.sh
-    done < /.env
+    done < "$envfile"
-fi
+done
 
 chown wger /data/env.sh || bashio::log.warning "Unable to set /data/env.sh ownership to wger"
 chmod 0644 /data/env.sh || bashio::log.warning "Unable to make /data/env.sh readable"