JuliusFreudenberger/nix-config
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions
233 commits 3 branches 0 tags 1 MiB
Commit graph

114 commits

Author SHA1 Message Date
Renovate Bot
b140534490 Update netbird 2026-07-15 15:20:21 +02:00
Renovate Bot
3540050284 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.11.0 (#21) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.10.0` → `v2.11.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.11.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2110)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0)

##### Bug Fixes

- postgres migration [`2025082`](20250822) remove public schema references ([#&#8203;1582](https://github.com/pocket-id/pocket-id/pull/1582) by [@&#8203;MarcoScabbiolo](https://github.com/MarcoScabbiolo))
- allow insecure callback URLs by default until next major release ([d9ead47](d9ead47d19) by [@&#8203;stonith404](https://github.com/stonith404))
- sort signup tokens by creation date explicitly ([77398a5](77398a558d) by [@&#8203;stonith404](https://github.com/stonith404))
- login code mobile ux ([#&#8203;1584](https://github.com/pocket-id/pocket-id/pull/1584) by [@&#8203;James18232](https://github.com/James18232))
- `INTERNAL_APP_URL` not reflected in UI URLs ([316cf47](316cf47ceb) by [@&#8203;stonith404](https://github.com/stonith404))
- ignore tab URL hashes in navigation history ([a3f27ec](a3f27ec2ec) by [@&#8203;stonith404](https://github.com/stonith404))
- block link-local addresses in SSRF protection ([9714296](9714296efb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- update README ([ff5e565](ff5e565eeb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Features

- add support for CIDR and IP address lists in `TRUST_PROXY` ([187cd8d](187cd8ddcd) by [@&#8203;stonith404](https://github.com/stonith404))

##### Other

- manage instance ID in the KV table ([#&#8203;1579](https://github.com/pocket-id/pocket-id/pull/1579) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1578](https://github.com/pocket-id/pocket-id/pull/1578) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- remove low demand issue closer ([bb03660](bb03660bd7) by [@&#8203;stonith404](https://github.com/stonith404))

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #21
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-13 13:13:51 +02:00
Renovate Bot
b88ad7be39 Update fnsys/dockhand Docker tag to v1.0.37 (#20) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) | patch | `v1.0.36` → `v1.0.37` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/dockhand (fnsys/dockhand)</summary>

### [`v1.0.37`](https://github.com/Finsys/dockhand/releases/tag/v1.0.37)

[Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.36...v1.0.37)

#### What's new in v1.0.37

- ✨ Prometheus metrics at /metrics for env state and internals, gated by EXPORT\_METRICS ([#&#8203;339](https://github.com/Finsys/dockhand/issues/339))
- ✨ export scan results as SARIF 2.1.0, manual export and API for DefectDojo/Dependency-Track/GitHub ([#&#8203;415](https://github.com/Finsys/dockhand/issues/415))
- ✨ bump bundled docker-compose to 5.2.0-r0 to clear known CVEs
- ✨ Vulnerabilities dashboard: aggregated CVE findings ([#&#8203;1038](https://github.com/Finsys/dockhand/issues/1038))
- ✨ update container images directly from the Stack view ([#&#8203;1073](https://github.com/Finsys/dockhand/issues/1073))
- ✨ stacks list shows an update indicator for stacks with image updates ([#&#8203;504](https://github.com/Finsys/dockhand/issues/504))
- 🐛 copying an image to another registry keeps its tag instead of defaulting to latest ([#&#8203;1243](https://github.com/Finsys/dockhand/issues/1243))
- 🐛 `more-than-current image` re-scans the current image so a stale cached scan doesn't block ([#&#8203;1022](https://github.com/Finsys/dockhand/issues/1022))
- ✨ application logs now include the log level (INFO/WARN/ERROR) in the prefix ([#&#8203;1166](https://github.com/Finsys/dockhand/issues/1166))
- ✨ option to suppress the "What's New" popup ([#&#8203;1235](https://github.com/Finsys/dockhand/issues/1235))
- 🐛 ntfy notifications now forward the `email` query parameter so ntfy can send email ([#&#8203;1231](https://github.com/Finsys/dockhand/issues/1231))
- ✨ default scanner images bumped to grype v0.115.0 and trivy 0.71.2 ([#&#8203;1241](https://github.com/Finsys/dockhand/issues/1241))
- 🐛 the "Latest" update-check result now stays visible and doesn't revert ([#&#8203;1019](https://github.com/Finsys/dockhand/issues/1019))
- ✨ a stack with container label `dockhand.adopt=false` excluded from adoption ([#&#8203;998](https://github.com/Finsys/dockhand/issues/998))
- 🐛 dashboard daemon info shows the real host hostname, not Dockhand's container id ([#&#8203;1265](https://github.com/Finsys/dockhand/issues/1265))
- ✨ file editor prompts to save/discard unsaved changes before closing ([#&#8203;1264](https://github.com/Finsys/dockhand/issues/1264))
- 🐛 `GET /api/containers/check-updates` now lists pending updates (POST still triggers a check) ([#&#8203;1266](https://github.com/Finsys/dockhand/issues/1266))
- ✨ sidebar menu customizable (order and visibility of items) ([#&#8203;1252](https://github.com/Finsys/dockhand/issues/1252))
- 🐛 activity and audit date filters respect the configured timezone instead of UTC ([#&#8203;1269](https://github.com/Finsys/dockhand/issues/1269))
- ✨ git deploy progress shows the changed files before the deploy starts ([#&#8203;1260](https://github.com/Finsys/dockhand/issues/1260))

#### Docker image

```bash
docker pull fnsys/dockhand:v1.0.37
```

Also available as `fnsys/dockhand:latest`

[View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #20
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-12 19:11:57 +02:00
Renovate Bot
624ff9e2ed Update ghcr.io/pocket-id/pocket-id Docker tag to v2.10.0 (#19) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.9.0` → `v2.10.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.10.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2100)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0)

##### Bug Fixes

- login code null submission and login code length check ([#&#8203;1512](https://github.com/pocket-id/pocket-id/pull/1512) by [@&#8203;James18232](https://github.com/James18232))
- don't reject `offline_access`scope ([2ed7035](2ed703540d) by [@&#8203;stonith404](https://github.com/stonith404))
- CSP error with `response_mode=form_post` ([16b5c16](16b5c16a66) by [@&#8203;stonith404](https://github.com/stonith404))
- various bugs in observability / OTel ([#&#8203;1564](https://github.com/pocket-id/pocket-id/pull/1564) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- restore behavior that unknown scopes get ignored ([34e9a6d](34e9a6d198) by [@&#8203;stonith404](https://github.com/stonith404))
- re-check api permissions on access token refresh ([e8cb0c8](e8cb0c831c) by [@&#8203;stonith404](https://github.com/stonith404))
- merge requested scopes instead of replacing them ([5e2cc6f](5e2cc6f40e) by [@&#8203;stonith404](https://github.com/stonith404))
- device authorization resolve resource creating device\_code ([2f55b7c](2f55b7cbc3) by [@&#8203;stonith404](https://github.com/stonith404))
- add missing burst to rate limit ([f3b6ceb](f3b6ceb876) by [@&#8203;stonith404](https://github.com/stonith404))
- disable one time access token exchange for disabled users ([c85a4e6](c85a4e63da) by [@&#8203;stonith404](https://github.com/stonith404))
- /authorize endpoint crashes when list of scopes is empty ([#&#8203;1575](https://github.com/pocket-id/pocket-id/pull/1575) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- mobile layout improvements ([2910c51](2910c517bb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add link to API docs ([968d072](968d07229e) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong OpenAPI documentation ([da3677f](da3677f33d) by [@&#8203;stonith404](https://github.com/stonith404))

##### Features

- upgrade shadcn components ([80509c8](80509c83ee) by [@&#8203;stonith404](https://github.com/stonith404))
- improve error handling on authorize page ([8689ddd](8689ddd72b) by [@&#8203;stonith404](https://github.com/stonith404))
- add ability to skip consent for client ([d467855](d467855870) by [@&#8203;stonith404](https://github.com/stonith404))
- prompt admin with PKCE client support hint ([#&#8203;1499](https://github.com/pocket-id/pocket-id/pull/1499) by [@&#8203;James18232](https://github.com/James18232))
- login code input boxes ([#&#8203;1545](https://github.com/pocket-id/pocket-id/pull/1545) by [@&#8203;James18232](https://github.com/James18232))
- drop TOFU support for callback URL ([931a6c2](931a6c2adb) by [@&#8203;stonith404](https://github.com/stonith404))
- add OAuth APIs with scoped permissions ([#&#8203;1542](https://github.com/pocket-id/pocket-id/pull/1542) by [@&#8203;stonith404](https://github.com/stonith404))
- add support for unencrypted OIDC request parameter ([25dcad7](25dcad757a) by [@&#8203;stonith404](https://github.com/stonith404))
- add description field to oidc clients ([#&#8203;1547](https://github.com/pocket-id/pocket-id/pull/1547) by [@&#8203;seanmckenzie428](https://github.com/seanmckenzie428))
- add tab bar navigation for crowded pages ([28a553f](28a553f63b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Other

- close low-demand feature requests ([35987b9](35987b9c8d) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 2 updates across multiple ecosystems ([#&#8203;1528](https://github.com/pocket-id/pocket-id/pull/1528) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- fix locators after shadcn upgrade ([dbbe2a4](dbbe2a403a) by [@&#8203;stonith404](https://github.com/stonith404))
- use fosite for OAuth 2.0 logic ([#&#8203;1520](https://github.com/pocket-id/pocket-id/pull/1520) by [@&#8203;stonith404](https://github.com/stonith404))
- wrap last two migrations into transaction ([cf9a319](cf9a31986f) by [@&#8203;stonith404](https://github.com/stonith404))
- remove dead code ([519cda0](519cda0eef) by [@&#8203;stonith404](https://github.com/stonith404))
- update vulnerable dependencies ([e538ea0](e538ea0bf1) by [@&#8203;stonith404](https://github.com/stonith404))
- fix flaky test ([7eaaea7](7eaaea717b) by [@&#8203;stonith404](https://github.com/stonith404))
- add AGENTS.md ([d0243fe](d0243fe396) by [@&#8203;stonith404](https://github.com/stonith404))
- use goreleaser for binaries and static image builds ([#&#8203;1478](https://github.com/pocket-id/pocket-id/pull/1478) by [@&#8203;kmendell](https://github.com/kmendell))
- add support for Docker Hub ([99ab38d](99ab38dc79) by [@&#8203;stonith404](https://github.com/stonith404))
- remove static next image tag ([49305ed](49305ed1f9) by [@&#8203;stonith404](https://github.com/stonith404))
- don't build unnecessary binaries for `next` image ([4b957a0](4b957a0106) by [@&#8203;stonith404](https://github.com/stonith404))
- change Depot project ([cdc2374](cdc23744ae) by [@&#8203;stonith404](https://github.com/stonith404))
- don't tag `next` image with current version ([cf54786](cf54786cc3) by [@&#8203;stonith404](https://github.com/stonith404))
- add exempt user to PR quality checks ([254ae88](254ae88cda) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate API key functionality to single `apikey` module ([9fce987](9fce987106) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate Webauthn functionality to single `webauthn` module ([58fcf7c](58fcf7cbe6) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate signup functionality to single `usersignup` module ([ecad31c](ecad31cae2) by [@&#8203;stonith404](https://github.com/stonith404))
- make API key renewal date picker navigation date-independent ([#&#8203;1560](https://github.com/pocket-id/pocket-id/pull/1560) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ([#&#8203;1556](https://github.com/pocket-id/pocket-id/pull/1556) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1563](https://github.com/pocket-id/pocket-id/pull/1563) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- use go-kit for sending emails ([#&#8203;1565](https://github.com/pocket-id/pocket-id/pull/1565) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- update AAGUIDs ([#&#8203;1567](https://github.com/pocket-id/pocket-id/pull/1567) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- move Pocket ID specific logic from Fosite into Pocket ID repo ([9a94aa0](9a94aa0694) by [@&#8203;stonith404](https://github.com/stonith404))
- update Fosite version ([337fc6f](337fc6fd1e) by [@&#8203;stonith404](https://github.com/stonith404))
- pass transaction to `resolveResource` ([7667377](7667377c98) by [@&#8203;stonith404](https://github.com/stonith404))
- remove redundant dtos ([fa2d08c](fa2d08cb6d) by [@&#8203;stonith404](https://github.com/stonith404))
- rename migrations ([c72da58](c72da58eaf) by [@&#8203;stonith404](https://github.com/stonith404))
- remove duplicate fosite config properties ([190914f](190914fd72) by [@&#8203;stonith404](https://github.com/stonith404))
- fix migration version in `database.json` ([a5f2192](a5f2192d67) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong migration name ([ce7d3a7](ce7d3a7e1d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([59a6868](59a6868ecd) by [@&#8203;stonith404](https://github.com/stonith404))
- upgrade go version ([f62d476](f62d476c56) by [@&#8203;stonith404](https://github.com/stonith404))

##### Performance Improvements

- include permissions in api list response ([8035a4c](8035a4c8d5) by [@&#8203;stonith404](https://github.com/stonith404))

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #19
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-12 19:11:30 +02:00
JuliusFreudenberger
eca13ae292 Add gvfs and udisks2 to sway module 2026-07-10 22:08:01 +02:00
Renovate Bot
00728571d6 Update traefik Docker tag to v3.7.7 (#18) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.6` → `v3.7.7` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.7...v3.7.7)

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377).

**Bug fixes:**

- **\[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#&#8203;13398](https://github.com/traefik/traefik/pull/13398) [@&#8203;dfeinblatt](https://github.com/dfeinblatt))
- **\[rules]** Fix consistency between HostSNI(*) and Host(*) ([#&#8203;13460](https://github.com/traefik/traefik/pull/13460) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#&#8203;13462](https://github.com/traefik/traefik/pull/13462) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix handle empty unknown-length bodies in mirroring ([#&#8203;13399](https://github.com/traefik/traefik/pull/13399) [@&#8203;amazon7737](https://github.com/amazon7737))
- **\[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#&#8203;13458](https://github.com/traefik/traefik/pull/13458) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#&#8203;13466](https://github.com/traefik/traefik/pull/13466) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#&#8203;13477](https://github.com/traefik/traefik/pull/13477) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#&#8203;13478](https://github.com/traefik/traefik/pull/13478) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s]** Fix panic when endpointslice port value or name is nil ([#&#8203;13481](https://github.com/traefik/traefik/pull/13481) [@&#8203;kevinpollet](https://github.com/kevinpollet))

**Documentation:**

- Fix version in migration guide ([#&#8203;13434](https://github.com/traefik/traefik/pull/13434) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- Fix changelog v2.11.51 ([#&#8203;13430](https://github.com/traefik/traefik/pull/13430) [@&#8203;mmatur](https://github.com/mmatur))
- Add v3.7 to supported version docs ([#&#8203;13118](https://github.com/traefik/traefik/pull/13118) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- Fix some function names in comments ([#&#8203;13443](https://github.com/traefik/traefik/pull/13443) [@&#8203;blackflytech](https://github.com/blackflytech))
- Add [@&#8203;nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#&#8203;13451](https://github.com/traefik/traefik/pull/13451) [@&#8203;emilevauge](https://github.com/emilevauge))
- Add [@&#8203;amazon7737](https://github.com/amazon7737) as a current maintainer ([#&#8203;13450](https://github.com/traefik/traefik/pull/13450) [@&#8203;emilevauge](https://github.com/emilevauge))
- **\[middleware]** Clarify buffering middleware defaults ([#&#8203;13401](https://github.com/traefik/traefik/pull/13401) [@&#8203;amazon7737](https://github.com/amazon7737))
- Fix grammar in TLS, TCP service, and routing reference docs ([#&#8203;13461](https://github.com/traefik/traefik/pull/13461) [@&#8203;almightymoon](https://github.com/almightymoon))
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#&#8203;13472](https://github.com/traefik/traefik/pull/13472) [@&#8203;kevinpollet](https://github.com/kevinpollet))

### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.7)

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377).

**Bug fixes:**

- **\[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#&#8203;13398](https://github.com/traefik/traefik/pull/13398) [@&#8203;dfeinblatt](https://github.com/dfeinblatt))
- **\[rules]** Fix consistency between HostSNI(*) and Host(*) ([#&#8203;13460](https://github.com/traefik/traefik/pull/13460) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#&#8203;13462](https://github.com/traefik/traefik/pull/13462) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix handle empty unknown-length bodies in mirroring ([#&#8203;13399](https://github.com/traefik/traefik/pull/13399) [@&#8203;amazon7737](https://github.com/amazon7737))
- **\[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#&#8203;13458](https://github.com/traefik/traefik/pull/13458) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#&#8203;13466](https://github.com/traefik/traefik/pull/13466) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#&#8203;13477](https://github.com/traefik/traefik/pull/13477) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#&#8203;13478](https://github.com/traefik/traefik/pull/13478) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s]** Fix panic when endpointslice port value or name is nil ([#&#8203;13481](https://github.com/traefik/traefik/pull/13481) [@&#8203;kevinpollet](https://github.com/kevinpollet))

**Documentation:**

- Fix version in migration guide ([#&#8203;13434](https://github.com/traefik/traefik/pull/13434) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- Fix changelog v2.11.51 ([#&#8203;13430](https://github.com/traefik/traefik/pull/13430) [@&#8203;mmatur](https://github.com/mmatur))
- Add v3.7 to supported version docs ([#&#8203;13118](https://github.com/traefik/traefik/pull/13118) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- Fix some function names in comments ([#&#8203;13443](https://github.com/traefik/traefik/pull/13443) [@&#8203;blackflytech](https://github.com/blackflytech))
- Add [@&#8203;nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#&#8203;13451](https://github.com/traefik/traefik/pull/13451) [@&#8203;emilevauge](https://github.com/emilevauge))
- Add [@&#8203;amazon7737](https://github.com/amazon7737) as a current maintainer ([#&#8203;13450](https://github.com/traefik/traefik/pull/13450) [@&#8203;emilevauge](https://github.com/emilevauge))
- **\[middleware]** Clarify buffering middleware defaults ([#&#8203;13401](https://github.com/traefik/traefik/pull/13401) [@&#8203;amazon7737](https://github.com/amazon7737))
- Fix grammar in TLS, TCP service, and routing reference docs ([#&#8203;13461](https://github.com/traefik/traefik/pull/13461) [@&#8203;almightymoon](https://github.com/almightymoon))
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#&#8203;13472](https://github.com/traefik/traefik/pull/13472) [@&#8203;kevinpollet](https://github.com/kevinpollet))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #18
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-09 13:27:39 +02:00
JuliusFreudenberger
cb8bf9a66b Migrate lightdm module to new options 
The old services.xserver.displayManager are moved out of xserver
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
bb8559f665 Use greetd and regreet instead of lightdm 
LightDM brings problems with setting up the session which leads to
kanshi, swayidle and such services to not get the correct environment
variables like `WAYLAND_DISPLAY`.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
81a4822e2d Reorder pam swaylock rules 
This enables entering a password in swaylock without providing
fingerprint.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
591f8f4da7 Use rofi as output chooser for screencast 
Slurp does not allow for selecting windows.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
0c605d9684 Set default session to sway 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
716e54dd12 Add custom lightdm-gtk module for default session 
The upstream module does not allow for setting a default session,
although this is possible in lightdm-gtk-greeter for more than two years
now.
 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
cb17bea00c Configure xdg portals for sway 2026-07-02 19:56:43 +02:00
JuliusFreudenberger
2ff0164960 Add initial sway configuration 
Still misses configuration for login screen, lock screen and idle
management.
 2026-07-02 19:56:43 +02:00
Renovate Bot
626ab7adfc Update netbird (#10) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) | minor | `v2.39.0` → `v2.90.3` |
| netbirdio/netbird | minor | `v0.73.2-rootless` → `v0.74.1-rootless` |
| netbirdio/netbird-server | minor | `0.73.2` → `0.74.1` |
| netbirdio/reverse-proxy | minor | `0.73.2` → `0.74.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>netbirdio/dashboard (netbirdio/dashboard)</summary>

### [`v2.90.3`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.3)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3)

#### What's Changed

- Show reason for peer login expiration events by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;694](https://github.com/netbirdio/dashboard/pull/694)
- Reload nginx after patching CSP header by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;687](https://github.com/netbirdio/dashboard/pull/687)
- Fix peer table page reset when switching kind by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;696](https://github.com/netbirdio/dashboard/pull/696)
- Feature/add provider session by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;695](https://github.com/netbirdio/dashboard/pull/695)
- Add Metrics settings tab with metrics push toggle by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;613](https://github.com/netbirdio/dashboard/pull/613)
- Feature/add skip tls verification by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;697](https://github.com/netbirdio/dashboard/pull/697)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3>

### [`v2.90.2`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.2)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2)

#### What's Changed

- Add Claude provider selector and Bedrock by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;691](https://github.com/netbirdio/dashboard/pull/691)
- Prevent gated useFetchApi hooks from overwriting shared cache entries by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;692](https://github.com/netbirdio/dashboard/pull/692)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2>

### [`v2.90.1`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.1)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1)

#### What's Changed

- The empty-state peer card now renders AddPeerDropdown by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;686](https://github.com/netbirdio/dashboard/pull/686)
- Support Vertex keyfile upload and agent config by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;688](https://github.com/netbirdio/dashboard/pull/688)
- Prefill Vertex endpoint by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;689](https://github.com/netbirdio/dashboard/pull/689)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1>

### [`v2.90.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0)

#### What's Changed

- Fix CSP blocking OIDC token endpoint by [@&#8203;maxbrc](https://github.com/maxbrc) in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)
- Agent Network by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;684](https://github.com/netbirdio/dashboard/pull/684)

#### New Contributors

- [@&#8203;maxbrc](https://github.com/maxbrc) made their first contribution in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0>

### [`v2.80.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.80.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0)

#### What's Changed

- Add Logout URL to the Identity Provider dialog by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- Edit banner to IPv6 kh link by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;662](https://github.com/netbirdio/dashboard/pull/662)
- Insert link to remote jobs documentation by [@&#8203;semp26](https://github.com/semp26) in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)
- DNS Zones & Setup modal improvements by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;669](https://github.com/netbirdio/dashboard/pull/669)
- Update banner by [@&#8203;heisbrot](https://github.com/heisbrot) in [#&#8203;672](https://github.com/netbirdio/dashboard/pull/672)
- Update announcements.json by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;673](https://github.com/netbirdio/dashboard/pull/673)
- Merge NetBird cloud edition into the dashboard by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;674](https://github.com/netbirdio/dashboard/pull/674)
- Restrict cloud/licensed-only API calls in open-source mode by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;675](https://github.com/netbirdio/dashboard/pull/675)
- Preserve inactivity expiration on partial peer updates by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;676](https://github.com/netbirdio/dashboard/pull/676)

#### New Contributors

- [@&#8203;TechHutTV](https://github.com/TechHutTV) made their first contribution in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- [@&#8203;semp26](https://github.com/semp26) made their first contribution in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #10
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-02 19:40:00 +02:00
Renovate Bot
d486dc7e6b Update traefik Docker tag to v3.7.6 (#16) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.5` → `v3.7.6` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.5...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #16
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-07-02 19:36:17 +02:00
Renovate Bot
1c73483c13 Update ghcr.io/finsys/hawser Docker tag to v0.2.46 (#15) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.45` → `0.2.46` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.46`](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #15
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-29 22:46:57 +02:00
Renovate Bot
2348ba1d59 Update fnsys/dockhand Docker tag to v1.0.36 (#14) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) | patch | `v1.0.35` → `v1.0.36` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/dockhand (fnsys/dockhand)</summary>

### [`v1.0.36`](https://github.com/Finsys/dockhand/releases/tag/v1.0.36)

[Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.35...v1.0.36)

#### What's new in v1.0.36

- ✨ sidebar shows an amber update indicator when a newer Dockhand image is available ([#&#8203;1146](https://github.com/Finsys/dockhand/issues/1146))
- 🐛 Tag image modal too narrow for images identified only by SHA ([#&#8203;1205](https://github.com/Finsys/dockhand/issues/1205))
- 🐛 self-hosted ntfy: accept raw `tk_...` access tokens in `?auth=` ([#&#8203;1209](https://github.com/Finsys/dockhand/issues/1209))
- 🐛 dashboard: a single failed DB stats query no longer poisons the whole environment tile ([#&#8203;1210](https://github.com/Finsys/dockhand/issues/1210))
- 🐛 UI dates and times now honor the configured default timezone instead of the browser's timezone ([#&#8203;1183](https://github.com/Finsys/dockhand/issues/1183))
- 🐛 add missing `reset-mfa.sh` emergency script referenced by the manual ([#&#8203;1214](https://github.com/Finsys/dockhand/issues/1214))
- 🐛 registry browser: copy between registries no longer duplicates the host ([#&#8203;1220](https://github.com/Finsys/dockhand/issues/1220))
- ⚡ published image carries standard OCI annotations (source, url, title, description, vendor, licenses) ([#&#8203;1217](https://github.com/Finsys/dockhand/issues/1217))
- ✨ scanner: configurable network mode and DNS servers for vulnerability scans ([#&#8203;1219](https://github.com/Finsys/dockhand/issues/1219))
- ✨ template tiles now show a `Project` link that opens the upstream project page ([#&#8203;1211](https://github.com/Finsys/dockhand/issues/1211))
- ⚡ cron picker: hour shows just `HH` (was `HH:00`), minute granularity bumped from 15 to 5 ([#&#8203;1198](https://github.com/Finsys/dockhand/issues/1198))
- ✨ grid buttons: configurable size and optional semantic colors ([#&#8203;1072](https://github.com/Finsys/dockhand/issues/1072))
- 🐛 copy buttons (git deploy logs, API tokens) now work over plain HTTP ([#&#8203;1222](https://github.com/Finsys/dockhand/issues/1222))
- 🐛 Podman pod-infra containers no longer trigger update-check warnings ([#&#8203;1221](https://github.com/Finsys/dockhand/issues/1221))
- 🐛 terminal exec works even when the browser sends a cookie with stray `%` characters ([#&#8203;1224](https://github.com/Finsys/dockhand/issues/1224))

#### Docker image

```bash
docker pull fnsys/dockhand:v1.0.36
```

Also available as `fnsys/dockhand:latest`

[View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #14
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-29 22:46:53 +02:00
Renovate Bot
d07800b183 Update traefik:v3.7.5 Docker digest to e4d9815 (#9) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | digest | `d685879` → `e4d9815` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #9
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-24 19:08:48 +02:00
Renovate Bot
9881eb04c3 Update fnsys/dockhand Docker tag to v1.0.35 (#2) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| fnsys/dockhand | patch | `v1.0.32` → `v1.0.35` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:26:50 +02:00
Renovate Bot
0b10a3ddc3 Update ghcr.io/finsys/hawser Docker tag to v0.2.45 (#3) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.42` → `0.2.45` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.45`](https://github.com/Finsys/hawser/releases/tag/v0.2.45)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.44...v0.2.45)

#### Changelog

- [`82a86a1`](82a86a16e3) feat: hash-verified file deletion sync and stack dir cleanup ([#&#8203;966](https://github.com/Finsys/hawser/issues/966), [#&#8203;1162](https://github.com/Finsys/hawser/issues/1162))
- [`0997f71`](0997f7161d) fix: log client disconnect in events stream at debug level
- [`f38f847`](f38f847ca8) fix: stack removal deletes only files explicitly listed by dockhand
- [`2c1675f`](2c1675f16b) fix: use ln -sf so newer docker-compose packages work

### [`v0.2.44`](https://github.com/Finsys/hawser/releases/tag/v0.2.44)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.43...v0.2.44)

#### Changelog

- [`3cbc419`](3cbc419eee) fix: use clean env for compose subprocess to prevent inherited .env override ([#&#8203;1113](https://github.com/Finsys/hawser/issues/1113))

### [`v0.2.43`](https://github.com/Finsys/hawser/releases/tag/v0.2.43)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.42...v0.2.43)

#### Changelog

- Bump Go to 1.26 in go.mod, CI workflows, and Dockerfile.dev
- Bump docker-compose to 5.1.4-r0 in Dockerfile
- Expand token security documentation with generation examples ([#&#8203;60](https://github.com/Finsys/hawser/issues/60))
- Remove unused edge /info endpoint

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:26:31 +02:00
Renovate Bot
5de6a829e6 Update netbird to v0.73.2 (#8) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| netbirdio/netbird | minor | `0.72.4-rootless` → `v0.73.2-rootless` |
| netbirdio/netbird-server | minor | `0.72.4` → `0.73.2` |
| netbirdio/reverse-proxy | minor | `0.72.4` → `0.73.2` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #8
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:26:00 +02:00
Renovate Bot
51286912e9 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.9.0 (#4) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.8.0` → `v2.9.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.9.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v290)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0)

##### Bug Fixes

- issues with loading new font ([#&#8203;1496](https://github.com/pocket-id/pocket-id/pull/1496) by [@&#8203;MelvinSnijders](https://github.com/MelvinSnijders))
- PAR parameters not respected by authorize page ([3d9d4de](3d9d4de619) by [@&#8203;stonith404](https://github.com/stonith404))
- add responsive css for api/user/group/client page add buttons ([#&#8203;1508](https://github.com/pocket-id/pocket-id/pull/1508) by [@&#8203;James18232](https://github.com/James18232))
- load Gloock font from static path instead of inline ([89b4abb](89b4abb8b5) by [@&#8203;stonith404](https://github.com/stonith404))
- update terminology from public key code exchange to proof key co… ([#&#8203;1515](https://github.com/pocket-id/pocket-id/pull/1515) by [@&#8203;maxwassiljew](https://github.com/maxwassiljew))
- callback URL validation not validated if prompt=none ([8a75774](8a75774971) by [@&#8203;stonith404](https://github.com/stonith404))
- passkey card not rounded ([84678c3](84678c3a7b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add AI Usage Policy to CONTRIBUTING.md ([fea933b](fea933b62d) by [@&#8203;stonith404](https://github.com/stonith404))
- add PR template ([bf9f76b](bf9f76bbd5) by [@&#8203;stonith404](https://github.com/stonith404))
- add "needs more upvotes" label as default ([fc42f62](fc42f6211d) by [@&#8203;stonith404](https://github.com/stonith404))
- fix link to watchtower repo ([#&#8203;1500](https://github.com/pocket-id/pocket-id/pull/1500) by [@&#8203;wollew](https://github.com/wollew))

##### Features

- add support for Pushed Authorization Requests (RFC9126) ([#&#8203;1404](https://github.com/pocket-id/pocket-id/pull/1404) by [@&#8203;Zenithar](https://github.com/Zenithar))

##### Other

- fix linter issues ([4f97cd4](4f97cd4188) by [@&#8203;stonith404](https://github.com/stonith404))
- update AAGUIDs ([#&#8203;1511](https://github.com/pocket-id/pocket-id/pull/1511) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- run svelte check and unit tests in breaking branches ([83b45f6](83b45f682d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([2726ddd](2726ddd0c2) by [@&#8203;stonith404](https://github.com/stonith404))
- bump vite from 8.0.13 to 8.0.16 ([#&#8203;1521](https://github.com/pocket-id/pocket-id/pull/1521) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- npm dependabot not run from root ([c0d96a0](c0d96a0b13) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong assertion ([effd2a1](effd2a146f) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 4 updates across multiple ecosystems ([#&#8203;1523](https://github.com/pocket-id/pocket-id/pull/1523) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #4
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
 2026-06-22 22:24:51 +02:00
JuliusFreudenberger
0be79ce62d Add displaylink module 2026-06-22 22:11:50 +02:00
JuliusFreudenberger
6f7f13d7ff Remove unused oci container modules 2026-06-18 02:30:33 +02:00
JuliusFreudenberger
7d3ce606ca Inline oci image versions and add image digests 2026-06-18 02:29:34 +02:00
JuliusFreudenberger
c96522fdfc Add dig to cli essentials 2026-06-18 01:29:27 +02:00
JuliusFreudenberger
2945488b18 netbird: 0.7{1,2}.2 -> 0.72.4 2026-06-18 01:27:50 +02:00
JuliusFreudenberger
f7a7a84e49 Remove pkgs.shadow for netbird client 
This was incorporated in release 26.05.
 2026-06-18 01:27:01 +02:00
JuliusFreudenberger
e5757374d2 Make host and docker setupKeys optional for netbird-client module 2026-06-18 01:26:44 +02:00
JuliusFreudenberger
9c993f204e Use netbird from nixpkgs stable again 
Version in 26.05 is recent enough, so including unstable into the
closure is not necessary anymore.
 2026-06-15 08:05:53 +02:00
JuliusFreudenberger
7d45fe1534 nixos: 25.11 -> 26.05 2026-06-14 01:08:20 +02:00
JuliusFreudenberger
a8cdec9d9a traefik: 3.6.14 -> 3.7.5 2026-06-11 23:21:13 +02:00
JuliusFreudenberger
0f29ecacfd pocket-id: 2.6.2 -> 2.8.0 2026-06-11 23:21:13 +02:00
JuliusFreudenberger
80437389dc Add networkmanager_dmenu to i3 2026-06-11 23:21:13 +02:00
JuliusFreudenberger
5c9999132b Add beszel module 2026-06-11 21:40:28 +02:00
JuliusFreudenberger
dd07cccf69 Update dockhand 2026-06-10 22:23:20 +02:00
JuliusFreudenberger
7050aefa29 Update netbird server and dashboard 2026-06-10 22:21:18 +02:00
JuliusFreudenberger
668ac68f2c Switch to docker_29 
docker version 28 is marked insecure.
 2026-06-10 22:20:52 +02:00
JuliusFreudenberger
3a0fe99688 Add option for docker subnet for netbird webproxy network 
The same subnet on different routing peers makes problems for the
reverse proxy feature. Therefore add the possibility to set a different
subnet on different hosts.
 2026-05-21 00:47:36 +02:00
JuliusFreudenberger
b6e7e0a7dc Update netbird client image tag 2026-05-21 00:47:22 +02:00
JuliusFreudenberger
10efb5bdf3 Add extraPorts option to netbird-docker 2026-05-21 00:45:31 +02:00
JuliusFreudenberger
403aea8947 Update netbird docker image tags 2026-05-21 00:45:17 +02:00
JuliusFreudenberger
30ec055957 Enable server routing features on netbird-server 2026-05-15 10:49:49 +02:00
JuliusFreudenberger
46c276db41 Enable systemd-resolved for netbird clients 
This enables resolving of internal and external domains from withing
containers.
 2026-05-15 10:49:13 +02:00
JuliusFreudenberger
768d9b4989 Add hawser module 2026-05-15 10:47:38 +02:00
JuliusFreudenberger
c9326284d3 Use netbird url for GeoLite city database download in pocket-id 2026-05-04 01:50:25 +02:00
JuliusFreudenberger
7a7901ab59 Add DBeaver as lazy app 2026-05-04 01:49:50 +02:00
JuliusFreudenberger
cb0104fbad Update dockhand module to new reverse proxy setup with netbird 2026-04-30 23:16:06 +02:00
JuliusFreudenberger
496bbb8271 Add combined module for netbird client native and in container 
Native will be used for SSH access, the container is rootless and will
be used for reverse proxying services.
 2026-04-30 23:06:41 +02:00