JuliusFreudenberger/nix-config
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions
225 commits 2 branches 0 tags 889 KiB
Commit graph

109 commits

Author SHA1 Message Date
Renovate Bot
00728571d6 Update traefik Docker tag to v3.7.7 (#18) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.6` → `v3.7.7` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.7...v3.7.7)

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377).

**Bug fixes:**

- **\[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#&#8203;13398](https://github.com/traefik/traefik/pull/13398) [@&#8203;dfeinblatt](https://github.com/dfeinblatt))
- **\[rules]** Fix consistency between HostSNI(*) and Host(*) ([#&#8203;13460](https://github.com/traefik/traefik/pull/13460) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#&#8203;13462](https://github.com/traefik/traefik/pull/13462) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix handle empty unknown-length bodies in mirroring ([#&#8203;13399](https://github.com/traefik/traefik/pull/13399) [@&#8203;amazon7737](https://github.com/amazon7737))
- **\[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#&#8203;13458](https://github.com/traefik/traefik/pull/13458) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#&#8203;13466](https://github.com/traefik/traefik/pull/13466) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#&#8203;13477](https://github.com/traefik/traefik/pull/13477) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#&#8203;13478](https://github.com/traefik/traefik/pull/13478) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s]** Fix panic when endpointslice port value or name is nil ([#&#8203;13481](https://github.com/traefik/traefik/pull/13481) [@&#8203;kevinpollet](https://github.com/kevinpollet))

**Documentation:**

- Fix version in migration guide ([#&#8203;13434](https://github.com/traefik/traefik/pull/13434) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- Fix changelog v2.11.51 ([#&#8203;13430](https://github.com/traefik/traefik/pull/13430) [@&#8203;mmatur](https://github.com/mmatur))
- Add v3.7 to supported version docs ([#&#8203;13118](https://github.com/traefik/traefik/pull/13118) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- Fix some function names in comments ([#&#8203;13443](https://github.com/traefik/traefik/pull/13443) [@&#8203;blackflytech](https://github.com/blackflytech))
- Add [@&#8203;nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#&#8203;13451](https://github.com/traefik/traefik/pull/13451) [@&#8203;emilevauge](https://github.com/emilevauge))
- Add [@&#8203;amazon7737](https://github.com/amazon7737) as a current maintainer ([#&#8203;13450](https://github.com/traefik/traefik/pull/13450) [@&#8203;emilevauge](https://github.com/emilevauge))
- **\[middleware]** Clarify buffering middleware defaults ([#&#8203;13401](https://github.com/traefik/traefik/pull/13401) [@&#8203;amazon7737](https://github.com/amazon7737))
- Fix grammar in TLS, TCP service, and routing reference docs ([#&#8203;13461](https://github.com/traefik/traefik/pull/13461) [@&#8203;almightymoon](https://github.com/almightymoon))
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#&#8203;13472](https://github.com/traefik/traefik/pull/13472) [@&#8203;kevinpollet](https://github.com/kevinpollet))

### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.7)

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377).

**Bug fixes:**

- **\[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#&#8203;13398](https://github.com/traefik/traefik/pull/13398) [@&#8203;dfeinblatt](https://github.com/dfeinblatt))
- **\[rules]** Fix consistency between HostSNI(*) and Host(*) ([#&#8203;13460](https://github.com/traefik/traefik/pull/13460) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#&#8203;13462](https://github.com/traefik/traefik/pull/13462) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix handle empty unknown-length bodies in mirroring ([#&#8203;13399](https://github.com/traefik/traefik/pull/13399) [@&#8203;amazon7737](https://github.com/amazon7737))
- **\[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#&#8203;13458](https://github.com/traefik/traefik/pull/13458) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#&#8203;13466](https://github.com/traefik/traefik/pull/13466) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#&#8203;13477](https://github.com/traefik/traefik/pull/13477) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#&#8203;13478](https://github.com/traefik/traefik/pull/13478) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s]** Fix panic when endpointslice port value or name is nil ([#&#8203;13481](https://github.com/traefik/traefik/pull/13481) [@&#8203;kevinpollet](https://github.com/kevinpollet))

**Documentation:**

- Fix version in migration guide ([#&#8203;13434](https://github.com/traefik/traefik/pull/13434) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- Fix changelog v2.11.51 ([#&#8203;13430](https://github.com/traefik/traefik/pull/13430) [@&#8203;mmatur](https://github.com/mmatur))
- Add v3.7 to supported version docs ([#&#8203;13118](https://github.com/traefik/traefik/pull/13118) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- Fix some function names in comments ([#&#8203;13443](https://github.com/traefik/traefik/pull/13443) [@&#8203;blackflytech](https://github.com/blackflytech))
- Add [@&#8203;nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#&#8203;13451](https://github.com/traefik/traefik/pull/13451) [@&#8203;emilevauge](https://github.com/emilevauge))
- Add [@&#8203;amazon7737](https://github.com/amazon7737) as a current maintainer ([#&#8203;13450](https://github.com/traefik/traefik/pull/13450) [@&#8203;emilevauge](https://github.com/emilevauge))
- **\[middleware]** Clarify buffering middleware defaults ([#&#8203;13401](https://github.com/traefik/traefik/pull/13401) [@&#8203;amazon7737](https://github.com/amazon7737))
- Fix grammar in TLS, TCP service, and routing reference docs ([#&#8203;13461](https://github.com/traefik/traefik/pull/13461) [@&#8203;almightymoon](https://github.com/almightymoon))
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#&#8203;13472](https://github.com/traefik/traefik/pull/13472) [@&#8203;kevinpollet](https://github.com/kevinpollet))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #18
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-09 13:27:39 +02:00
JuliusFreudenberger
cb8bf9a66b Migrate lightdm module to new options 
The old services.xserver.displayManager are moved out of xserver
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
bb8559f665 Use greetd and regreet instead of lightdm 
LightDM brings problems with setting up the session which leads to
kanshi, swayidle and such services to not get the correct environment
variables like `WAYLAND_DISPLAY`.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
81a4822e2d Reorder pam swaylock rules 
This enables entering a password in swaylock without providing
fingerprint.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
591f8f4da7 Use rofi as output chooser for screencast 
Slurp does not allow for selecting windows.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
0c605d9684 Set default session to sway 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
716e54dd12 Add custom lightdm-gtk module for default session 
The upstream module does not allow for setting a default session,
although this is possible in lightdm-gtk-greeter for more than two years
now.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
cb17bea00c Configure xdg portals for sway 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
2ff0164960 Add initial sway configuration 
Still misses configuration for login screen, lock screen and idle
management.
 2026-07-02 19:56:43 +02:00
Renovate Bot
626ab7adfc Update netbird (#10) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) | minor | `v2.39.0` → `v2.90.3` |
| netbirdio/netbird | minor | `v0.73.2-rootless` → `v0.74.1-rootless` |
| netbirdio/netbird-server | minor | `0.73.2` → `0.74.1` |
| netbirdio/reverse-proxy | minor | `0.73.2` → `0.74.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>netbirdio/dashboard (netbirdio/dashboard)</summary>

### [`v2.90.3`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.3)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3)

#### What's Changed

- Show reason for peer login expiration events by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;694](https://github.com/netbirdio/dashboard/pull/694)
- Reload nginx after patching CSP header by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;687](https://github.com/netbirdio/dashboard/pull/687)
- Fix peer table page reset when switching kind by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;696](https://github.com/netbirdio/dashboard/pull/696)
- Feature/add provider session by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;695](https://github.com/netbirdio/dashboard/pull/695)
- Add Metrics settings tab with metrics push toggle by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;613](https://github.com/netbirdio/dashboard/pull/613)
- Feature/add skip tls verification by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;697](https://github.com/netbirdio/dashboard/pull/697)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3>

### [`v2.90.2`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.2)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2)

#### What's Changed

- Add Claude provider selector and Bedrock by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;691](https://github.com/netbirdio/dashboard/pull/691)
- Prevent gated useFetchApi hooks from overwriting shared cache entries by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;692](https://github.com/netbirdio/dashboard/pull/692)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2>

### [`v2.90.1`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.1)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1)

#### What's Changed

- The empty-state peer card now renders AddPeerDropdown by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;686](https://github.com/netbirdio/dashboard/pull/686)
- Support Vertex keyfile upload and agent config by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;688](https://github.com/netbirdio/dashboard/pull/688)
- Prefill Vertex endpoint by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;689](https://github.com/netbirdio/dashboard/pull/689)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1>

### [`v2.90.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0)

#### What's Changed

- Fix CSP blocking OIDC token endpoint by [@&#8203;maxbrc](https://github.com/maxbrc) in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)
- Agent Network by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;684](https://github.com/netbirdio/dashboard/pull/684)

#### New Contributors

- [@&#8203;maxbrc](https://github.com/maxbrc) made their first contribution in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0>

### [`v2.80.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.80.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0)

#### What's Changed

- Add Logout URL to the Identity Provider dialog by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- Edit banner to IPv6 kh link by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;662](https://github.com/netbirdio/dashboard/pull/662)
- Insert link to remote jobs documentation by [@&#8203;semp26](https://github.com/semp26) in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)
- DNS Zones & Setup modal improvements by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;669](https://github.com/netbirdio/dashboard/pull/669)
- Update banner by [@&#8203;heisbrot](https://github.com/heisbrot) in [#&#8203;672](https://github.com/netbirdio/dashboard/pull/672)
- Update announcements.json by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;673](https://github.com/netbirdio/dashboard/pull/673)
- Merge NetBird cloud edition into the dashboard by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;674](https://github.com/netbirdio/dashboard/pull/674)
- Restrict cloud/licensed-only API calls in open-source mode by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;675](https://github.com/netbirdio/dashboard/pull/675)
- Preserve inactivity expiration on partial peer updates by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;676](https://github.com/netbirdio/dashboard/pull/676)

#### New Contributors

- [@&#8203;TechHutTV](https://github.com/TechHutTV) made their first contribution in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- [@&#8203;semp26](https://github.com/semp26) made their first contribution in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #10
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-02 19:40:00 +02:00
Renovate Bot
d486dc7e6b Update traefik Docker tag to v3.7.6 (#16) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.5` → `v3.7.6` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.5...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #16
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-02 19:36:17 +02:00
Renovate Bot
1c73483c13 Update ghcr.io/finsys/hawser Docker tag to v0.2.46 (#15) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.45` → `0.2.46` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.46`](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #15
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-29 22:46:57 +02:00
Renovate Bot
2348ba1d59 Update fnsys/dockhand Docker tag to v1.0.36 (#14) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) | patch | `v1.0.35` → `v1.0.36` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/dockhand (fnsys/dockhand)</summary>

### [`v1.0.36`](https://github.com/Finsys/dockhand/releases/tag/v1.0.36)

[Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.35...v1.0.36)

#### What's new in v1.0.36

- ✨ sidebar shows an amber update indicator when a newer Dockhand image is available ([#&#8203;1146](https://github.com/Finsys/dockhand/issues/1146))
- 🐛 Tag image modal too narrow for images identified only by SHA ([#&#8203;1205](https://github.com/Finsys/dockhand/issues/1205))
- 🐛 self-hosted ntfy: accept raw `tk_...` access tokens in `?auth=` ([#&#8203;1209](https://github.com/Finsys/dockhand/issues/1209))
- 🐛 dashboard: a single failed DB stats query no longer poisons the whole environment tile ([#&#8203;1210](https://github.com/Finsys/dockhand/issues/1210))
- 🐛 UI dates and times now honor the configured default timezone instead of the browser's timezone ([#&#8203;1183](https://github.com/Finsys/dockhand/issues/1183))
- 🐛 add missing `reset-mfa.sh` emergency script referenced by the manual ([#&#8203;1214](https://github.com/Finsys/dockhand/issues/1214))
- 🐛 registry browser: copy between registries no longer duplicates the host ([#&#8203;1220](https://github.com/Finsys/dockhand/issues/1220))
- ⚡ published image carries standard OCI annotations (source, url, title, description, vendor, licenses) ([#&#8203;1217](https://github.com/Finsys/dockhand/issues/1217))
- ✨ scanner: configurable network mode and DNS servers for vulnerability scans ([#&#8203;1219](https://github.com/Finsys/dockhand/issues/1219))
- ✨ template tiles now show a `Project` link that opens the upstream project page ([#&#8203;1211](https://github.com/Finsys/dockhand/issues/1211))
- ⚡ cron picker: hour shows just `HH` (was `HH:00`), minute granularity bumped from 15 to 5 ([#&#8203;1198](https://github.com/Finsys/dockhand/issues/1198))
- ✨ grid buttons: configurable size and optional semantic colors ([#&#8203;1072](https://github.com/Finsys/dockhand/issues/1072))
- 🐛 copy buttons (git deploy logs, API tokens) now work over plain HTTP ([#&#8203;1222](https://github.com/Finsys/dockhand/issues/1222))
- 🐛 Podman pod-infra containers no longer trigger update-check warnings ([#&#8203;1221](https://github.com/Finsys/dockhand/issues/1221))
- 🐛 terminal exec works even when the browser sends a cookie with stray `%` characters ([#&#8203;1224](https://github.com/Finsys/dockhand/issues/1224))

#### Docker image

```bash
docker pull fnsys/dockhand:v1.0.36
```

Also available as `fnsys/dockhand:latest`

[View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #14
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-29 22:46:53 +02:00
Renovate Bot
d07800b183 Update traefik:v3.7.5 Docker digest to e4d9815 (#9) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | digest | `d685879` → `e4d9815` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #9
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-24 19:08:48 +02:00
Renovate Bot
9881eb04c3 Update fnsys/dockhand Docker tag to v1.0.35 (#2) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| fnsys/dockhand | patch | `v1.0.32` → `v1.0.35` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:26:50 +02:00
Renovate Bot
0b10a3ddc3 Update ghcr.io/finsys/hawser Docker tag to v0.2.45 (#3) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.42` → `0.2.45` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.45`](https://github.com/Finsys/hawser/releases/tag/v0.2.45)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.44...v0.2.45)

#### Changelog

- [`82a86a1`](82a86a16e3) feat: hash-verified file deletion sync and stack dir cleanup ([#&#8203;966](https://github.com/Finsys/hawser/issues/966), [#&#8203;1162](https://github.com/Finsys/hawser/issues/1162))
- [`0997f71`](0997f7161d) fix: log client disconnect in events stream at debug level
- [`f38f847`](f38f847ca8) fix: stack removal deletes only files explicitly listed by dockhand
- [`2c1675f`](2c1675f16b) fix: use ln -sf so newer docker-compose packages work

### [`v0.2.44`](https://github.com/Finsys/hawser/releases/tag/v0.2.44)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.43...v0.2.44)

#### Changelog

- [`3cbc419`](3cbc419eee) fix: use clean env for compose subprocess to prevent inherited .env override ([#&#8203;1113](https://github.com/Finsys/hawser/issues/1113))

### [`v0.2.43`](https://github.com/Finsys/hawser/releases/tag/v0.2.43)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.42...v0.2.43)

#### Changelog

- Bump Go to 1.26 in go.mod, CI workflows, and Dockerfile.dev
- Bump docker-compose to 5.1.4-r0 in Dockerfile
- Expand token security documentation with generation examples ([#&#8203;60](https://github.com/Finsys/hawser/issues/60))
- Remove unused edge /info endpoint

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:26:31 +02:00
Renovate Bot
5de6a829e6 Update netbird to v0.73.2 (#8) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| netbirdio/netbird | minor | `0.72.4-rootless` → `v0.73.2-rootless` |
| netbirdio/netbird-server | minor | `0.72.4` → `0.73.2` |
| netbirdio/reverse-proxy | minor | `0.72.4` → `0.73.2` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #8
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:26:00 +02:00
Renovate Bot
51286912e9 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.9.0 (#4) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.8.0` → `v2.9.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.9.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v290)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0)

##### Bug Fixes

- issues with loading new font ([#&#8203;1496](https://github.com/pocket-id/pocket-id/pull/1496) by [@&#8203;MelvinSnijders](https://github.com/MelvinSnijders))
- PAR parameters not respected by authorize page ([3d9d4de](3d9d4de619) by [@&#8203;stonith404](https://github.com/stonith404))
- add responsive css for api/user/group/client page add buttons ([#&#8203;1508](https://github.com/pocket-id/pocket-id/pull/1508) by [@&#8203;James18232](https://github.com/James18232))
- load Gloock font from static path instead of inline ([89b4abb](89b4abb8b5) by [@&#8203;stonith404](https://github.com/stonith404))
- update terminology from public key code exchange to proof key co… ([#&#8203;1515](https://github.com/pocket-id/pocket-id/pull/1515) by [@&#8203;maxwassiljew](https://github.com/maxwassiljew))
- callback URL validation not validated if prompt=none ([8a75774](8a75774971) by [@&#8203;stonith404](https://github.com/stonith404))
- passkey card not rounded ([84678c3](84678c3a7b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add AI Usage Policy to CONTRIBUTING.md ([fea933b](fea933b62d) by [@&#8203;stonith404](https://github.com/stonith404))
- add PR template ([bf9f76b](bf9f76bbd5) by [@&#8203;stonith404](https://github.com/stonith404))
- add "needs more upvotes" label as default ([fc42f62](fc42f6211d) by [@&#8203;stonith404](https://github.com/stonith404))
- fix link to watchtower repo ([#&#8203;1500](https://github.com/pocket-id/pocket-id/pull/1500) by [@&#8203;wollew](https://github.com/wollew))

##### Features

- add support for Pushed Authorization Requests (RFC9126) ([#&#8203;1404](https://github.com/pocket-id/pocket-id/pull/1404) by [@&#8203;Zenithar](https://github.com/Zenithar))

##### Other

- fix linter issues ([4f97cd4](4f97cd4188) by [@&#8203;stonith404](https://github.com/stonith404))
- update AAGUIDs ([#&#8203;1511](https://github.com/pocket-id/pocket-id/pull/1511) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- run svelte check and unit tests in breaking branches ([83b45f6](83b45f682d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([2726ddd](2726ddd0c2) by [@&#8203;stonith404](https://github.com/stonith404))
- bump vite from 8.0.13 to 8.0.16 ([#&#8203;1521](https://github.com/pocket-id/pocket-id/pull/1521) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- npm dependabot not run from root ([c0d96a0](c0d96a0b13) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong assertion ([effd2a1](effd2a146f) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 4 updates across multiple ecosystems ([#&#8203;1523](https://github.com/pocket-id/pocket-id/pull/1523) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #4
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:24:51 +02:00
JuliusFreudenberger
0be79ce62d Add displaylink module 2026-06-22 22:11:50 +02:00
JuliusFreudenberger
6f7f13d7ff Remove unused oci container modules 2026-06-18 02:30:33 +02:00
JuliusFreudenberger
7d3ce606ca Inline oci image versions and add image digests 2026-06-18 02:29:34 +02:00
JuliusFreudenberger
c96522fdfc Add dig to cli essentials 2026-06-18 01:29:27 +02:00
JuliusFreudenberger
2945488b18 netbird: 0.7{1,2}.2 -> 0.72.4 2026-06-18 01:27:50 +02:00
JuliusFreudenberger
f7a7a84e49 Remove pkgs.shadow for netbird client 
This was incorporated in release 26.05.
 2026-06-18 01:27:01 +02:00
JuliusFreudenberger
e5757374d2 Make host and docker setupKeys optional for netbird-client module 2026-06-18 01:26:44 +02:00
JuliusFreudenberger
9c993f204e Use netbird from nixpkgs stable again 
Version in 26.05 is recent enough, so including unstable into the
closure is not necessary anymore.
 2026-06-15 08:05:53 +02:00
JuliusFreudenberger
7d45fe1534 nixos: 25.11 -> 26.05 2026-06-14 01:08:20 +02:00
JuliusFreudenberger
a8cdec9d9a traefik: 3.6.14 -> 3.7.5 2026-06-11 23:21:13 +02:00
JuliusFreudenberger
0f29ecacfd pocket-id: 2.6.2 -> 2.8.0 2026-06-11 23:21:13 +02:00
JuliusFreudenberger
80437389dc Add networkmanager_dmenu to i3 2026-06-11 23:21:13 +02:00
JuliusFreudenberger
5c9999132b Add beszel module 2026-06-11 21:40:28 +02:00
JuliusFreudenberger
dd07cccf69 Update dockhand 2026-06-10 22:23:20 +02:00
JuliusFreudenberger
7050aefa29 Update netbird server and dashboard 2026-06-10 22:21:18 +02:00
JuliusFreudenberger
668ac68f2c Switch to docker_29 
docker version 28 is marked insecure.
 2026-06-10 22:20:52 +02:00
JuliusFreudenberger
3a0fe99688 Add option for docker subnet for netbird webproxy network 
The same subnet on different routing peers makes problems for the
reverse proxy feature. Therefore add the possibility to set a different
subnet on different hosts.
 2026-05-21 00:47:36 +02:00
JuliusFreudenberger
b6e7e0a7dc Update netbird client image tag 2026-05-21 00:47:22 +02:00
JuliusFreudenberger
10efb5bdf3 Add extraPorts option to netbird-docker 2026-05-21 00:45:31 +02:00
JuliusFreudenberger
403aea8947 Update netbird docker image tags 2026-05-21 00:45:17 +02:00
JuliusFreudenberger
30ec055957 Enable server routing features on netbird-server 2026-05-15 10:49:49 +02:00
JuliusFreudenberger
46c276db41 Enable systemd-resolved for netbird clients 
This enables resolving of internal and external domains from withing
containers.
 2026-05-15 10:49:13 +02:00
JuliusFreudenberger
768d9b4989 Add hawser module 2026-05-15 10:47:38 +02:00
JuliusFreudenberger
c9326284d3 Use netbird url for GeoLite city database download in pocket-id 2026-05-04 01:50:25 +02:00
JuliusFreudenberger
7a7901ab59 Add DBeaver as lazy app 2026-05-04 01:49:50 +02:00
JuliusFreudenberger
cb0104fbad Update dockhand module to new reverse proxy setup with netbird 2026-04-30 23:16:06 +02:00
JuliusFreudenberger
496bbb8271 Add combined module for netbird client native and in container 
Native will be used for SSH access, the container is rootless and will
be used for reverse proxying services.
 2026-04-30 23:06:41 +02:00
JuliusFreudenberger
90b63bd24f Rename traefik network to traefik 
Webproxy is the name intended for the network where the netbird
container used for proxying resides.
 2026-04-30 23:04:04 +02:00
JuliusFreudenberger
f894c27799 Pass docker group id as string for dockhand 2026-04-27 23:54:37 +02:00
JuliusFreudenberger
4881f836c9 Allow disabling automatic reboots in module 2026-04-27 23:50:54 +02:00
JuliusFreudenberger
81f4554dd7 Add dependencies between netbird and traefik containers 
When setting the explicit ip of the traefik container in the webproxy
network, this resolves the ip of the traefik container changing between
restarts.
 2026-04-27 23:09:34 +02:00
JuliusFreudenberger
d1cfaf7acf Add netbird-docker volume 2026-04-25 23:58:32 +02:00