mirror of
https://github.com/alexbelgium/hassio-addons.git
synced 2026-08-28 07:43:31 +02:00
* feat(portainer_be): add Portainer Business Edition add-on Adds a new `portainer_be` add-on based on the existing Portainer (CE) add-on, requested in #873. Business Edition has no public GitHub release tarball like CE, so the binary and web assets are pulled from the official multi-arch `portainer/portainer-ee` image via a multi-stage build and placed under /opt/portainer, mirroring CE's layout exactly. All runtime scripts, nginx/ingress config, options schema, SSL and password handling are unchanged from CE, so behaviour is identical apart from the edition. Users obtain a free (up to 3 nodes) Business Edition license key by registering with Portainer and enter it in the web UI on first launch. - config.yaml: slug portainer_be, BE image name, BE description/name - Dockerfile: multi-stage COPY from portainer/portainer-ee (no CE tarball) - updater.json: dockerhub source tracking portainer/portainer-ee - apparmor.txt: unique profile name (portainer_be_addon) - CHANGELOG/README/DOCS: BE-specific, documents the license-key step Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * fix(portainer_be): address PR review feedback - nginx finish: move shebang to byte 0 (leading blank line prevented S6 from recognising the interpreter, so the finish hook could fail to tear down the supervision tree) [Codex P2] - ingress: tighten CSP to `frame-ancestors 'self'` to match the adjacent X-Frame-Options SAMEORIGIN; HA ingress embeds same-origin so the panel keeps working [CodeRabbit] - README: correct login note (password is the configured option value, never printed to logs); drop MD012 consecutive blank lines [CodeRabbit] - DOCS: fix "environement" -> "environment" typo [CodeRabbit] Skipped: nginx SSL "idempotency" finding — /etc/nginx lives in the read-only image layer and cont-init re-renders from the pristine template on every container start, so in-place sed edits never accumulate or need restoring. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * revert(portainer_be): keep CSP frame-ancestors * for ingress compatibility Reverts the frame-ancestors 'self' change from the previous commit. The wildcard is required for the Home Assistant ingress iframe to embed the Portainer UI; tightening it breaks the ingress panel. Matches the CE add-on. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
57 lines
1.3 KiB
Nginx Configuration File
57 lines
1.3 KiB
Nginx Configuration File
# Run nginx in foreground.
|
|
daemon off;
|
|
|
|
# This is run inside Docker.
|
|
user root;
|
|
|
|
# Pid storage location.
|
|
pid /var/run/nginx.pid;
|
|
|
|
# Set number of worker processes.
|
|
worker_processes 1;
|
|
|
|
# Enables the use of JIT for regular expressions to speed-up their processing.
|
|
pcre_jit on;
|
|
|
|
# Write error log to Hass.io add-on log.
|
|
error_log /proc/1/fd/1 error;
|
|
|
|
# Load allowed environment vars
|
|
env HASSIO_TOKEN;
|
|
|
|
# Load dynamic modules.
|
|
include /etc/nginx/modules/*.conf;
|
|
|
|
# Max num of simultaneous connections by a worker process.
|
|
events {
|
|
worker_connections 512;
|
|
}
|
|
|
|
http {
|
|
include /etc/nginx/includes/mime.types;
|
|
|
|
log_format hassio '[$time_local] $status '
|
|
'$http_x_forwarded_for($remote_addr) '
|
|
'$request ($http_user_agent)';
|
|
|
|
access_log /proc/1/fd/1 hassio;
|
|
client_max_body_size 4G;
|
|
default_type application/octet-stream;
|
|
gzip on;
|
|
keepalive_timeout 65;
|
|
sendfile on;
|
|
server_tokens off;
|
|
tcp_nodelay on;
|
|
tcp_nopush on;
|
|
|
|
map $http_upgrade $connection_upgrade {
|
|
default upgrade;
|
|
'' close;
|
|
}
|
|
|
|
include /etc/nginx/includes/resolver.conf;
|
|
include /etc/nginx/includes/upstream.conf;
|
|
|
|
include /etc/nginx/servers/*.conf;
|
|
}
|