Commit graph

219 commits

Author SHA1 Message Date
ea4841403a Set default sway workspace 2026-07-02 19:56:43 +02:00
c7fb1dd4ce Use same broker as os for sway 2026-07-02 19:56:43 +02:00
b6909c162b Add screen dimming and switching off displays on idle 2026-07-02 19:56:43 +02:00
81a4822e2d Reorder pam swaylock rules
This enables entering a password in swaylock without providing
fingerprint.
2026-07-02 19:56:43 +02:00
74581599cd Lowercase app_id of Element 2026-07-02 19:56:43 +02:00
25139ece89 Configure swaylock and swayidle 2026-07-02 19:56:43 +02:00
30207ec5f0 Remove dependency on i3exit
Configure commands directly in sway.
2026-07-02 19:56:43 +02:00
3e3dff15f7 Migrate floating modifiers
`class` is an X11 attribute, sway uses `app_id`.
2026-07-02 19:56:43 +02:00
0458bdcced Add focus wrapping in sway
This enables cycling through tabbed windows endlessly.
2026-07-02 19:56:43 +02:00
591f8f4da7 Use rofi as output chooser for screencast
Slurp does not allow for selecting windows.
2026-07-02 19:56:43 +02:00
c2d242301c Add m15 configuration to kanshi 2026-07-02 19:56:43 +02:00
f46b9ab129 Configure vmVariant for more cores and memory
When testing the config in a vm, have more ressources available.
Otherwise oom errors can occur.
2026-07-02 19:56:43 +02:00
0c605d9684 Set default session to sway 2026-07-02 19:56:43 +02:00
716e54dd12 Add custom lightdm-gtk module for default session
The upstream module does not allow for setting a default session,
although this is possible in lightdm-gtk-greeter for more than two years
now.
2026-07-02 19:56:43 +02:00
531ae9b443 Start solaar minimized on startup 2026-07-02 19:56:43 +02:00
89eff861f3 Enable base and gtk wrapper features for sway 2026-07-02 19:56:43 +02:00
479ccf3fc3 Fix path for nixos wallpaper 2026-07-02 19:56:43 +02:00
cb17bea00c Configure xdg portals for sway 2026-07-02 19:56:43 +02:00
2ff0164960 Add initial sway configuration
Still misses configuration for login screen, lock screen and idle
management.
2026-07-02 19:56:43 +02:00
5fdf5b5d9d Update flake.lock 2026-07-02 19:56:43 +02:00
626ab7adfc Update netbird (#10)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) | minor | `v2.39.0` → `v2.90.3` |
| netbirdio/netbird | minor | `v0.73.2-rootless` → `v0.74.1-rootless` |
| netbirdio/netbird-server | minor | `0.73.2` → `0.74.1` |
| netbirdio/reverse-proxy | minor | `0.73.2` → `0.74.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>netbirdio/dashboard (netbirdio/dashboard)</summary>

### [`v2.90.3`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.3)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3)

#### What's Changed

- Show reason for peer login expiration events by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;694](https://github.com/netbirdio/dashboard/pull/694)
- Reload nginx after patching CSP header by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;687](https://github.com/netbirdio/dashboard/pull/687)
- Fix peer table page reset when switching kind by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;696](https://github.com/netbirdio/dashboard/pull/696)
- Feature/add provider session by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;695](https://github.com/netbirdio/dashboard/pull/695)
- Add Metrics settings tab with metrics push toggle by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;613](https://github.com/netbirdio/dashboard/pull/613)
- Feature/add skip tls verification by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;697](https://github.com/netbirdio/dashboard/pull/697)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3>

### [`v2.90.2`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.2)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2)

#### What's Changed

- Add Claude provider selector and Bedrock by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;691](https://github.com/netbirdio/dashboard/pull/691)
- Prevent gated useFetchApi hooks from overwriting shared cache entries by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;692](https://github.com/netbirdio/dashboard/pull/692)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2>

### [`v2.90.1`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.1)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1)

#### What's Changed

- The empty-state peer card now renders AddPeerDropdown by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;686](https://github.com/netbirdio/dashboard/pull/686)
- Support Vertex keyfile upload and agent config by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;688](https://github.com/netbirdio/dashboard/pull/688)
- Prefill Vertex endpoint by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;689](https://github.com/netbirdio/dashboard/pull/689)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1>

### [`v2.90.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0)

#### What's Changed

- Fix CSP blocking OIDC token endpoint by [@&#8203;maxbrc](https://github.com/maxbrc) in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)
- Agent Network by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;684](https://github.com/netbirdio/dashboard/pull/684)

#### New Contributors

- [@&#8203;maxbrc](https://github.com/maxbrc) made their first contribution in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0>

### [`v2.80.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.80.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0)

#### What's Changed

- Add Logout URL to the Identity Provider dialog by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- Edit banner to IPv6 kh link by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;662](https://github.com/netbirdio/dashboard/pull/662)
- Insert link to remote jobs documentation by [@&#8203;semp26](https://github.com/semp26) in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)
- DNS Zones & Setup modal improvements by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;669](https://github.com/netbirdio/dashboard/pull/669)
- Update banner by [@&#8203;heisbrot](https://github.com/heisbrot) in [#&#8203;672](https://github.com/netbirdio/dashboard/pull/672)
- Update announcements.json by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;673](https://github.com/netbirdio/dashboard/pull/673)
- Merge NetBird cloud edition into the dashboard by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;674](https://github.com/netbirdio/dashboard/pull/674)
- Restrict cloud/licensed-only API calls in open-source mode by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;675](https://github.com/netbirdio/dashboard/pull/675)
- Preserve inactivity expiration on partial peer updates by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;676](https://github.com/netbirdio/dashboard/pull/676)

#### New Contributors

- [@&#8203;TechHutTV](https://github.com/TechHutTV) made their first contribution in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- [@&#8203;semp26](https://github.com/semp26) made their first contribution in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #10
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-02 19:40:00 +02:00
d486dc7e6b Update traefik Docker tag to v3.7.6 (#16)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.5` → `v3.7.6` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.5...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #16
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-02 19:36:17 +02:00
1c73483c13 Update ghcr.io/finsys/hawser Docker tag to v0.2.46 (#15)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.45` → `0.2.46` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.46`](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #15
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-29 22:46:57 +02:00
2348ba1d59 Update fnsys/dockhand Docker tag to v1.0.36 (#14)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) | patch | `v1.0.35` → `v1.0.36` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/dockhand (fnsys/dockhand)</summary>

### [`v1.0.36`](https://github.com/Finsys/dockhand/releases/tag/v1.0.36)

[Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.35...v1.0.36)

#### What's new in v1.0.36

-  sidebar shows an amber update indicator when a newer Dockhand image is available ([#&#8203;1146](https://github.com/Finsys/dockhand/issues/1146))
- 🐛 Tag image modal too narrow for images identified only by SHA ([#&#8203;1205](https://github.com/Finsys/dockhand/issues/1205))
- 🐛 self-hosted ntfy: accept raw `tk_...` access tokens in `?auth=` ([#&#8203;1209](https://github.com/Finsys/dockhand/issues/1209))
- 🐛 dashboard: a single failed DB stats query no longer poisons the whole environment tile ([#&#8203;1210](https://github.com/Finsys/dockhand/issues/1210))
- 🐛 UI dates and times now honor the configured default timezone instead of the browser's timezone ([#&#8203;1183](https://github.com/Finsys/dockhand/issues/1183))
- 🐛 add missing `reset-mfa.sh` emergency script referenced by the manual ([#&#8203;1214](https://github.com/Finsys/dockhand/issues/1214))
- 🐛 registry browser: copy between registries no longer duplicates the host ([#&#8203;1220](https://github.com/Finsys/dockhand/issues/1220))
-  published image carries standard OCI annotations (source, url, title, description, vendor, licenses) ([#&#8203;1217](https://github.com/Finsys/dockhand/issues/1217))
-  scanner: configurable network mode and DNS servers for vulnerability scans ([#&#8203;1219](https://github.com/Finsys/dockhand/issues/1219))
-  template tiles now show a `Project` link that opens the upstream project page ([#&#8203;1211](https://github.com/Finsys/dockhand/issues/1211))
-  cron picker: hour shows just `HH` (was `HH:00`), minute granularity bumped from 15 to 5 ([#&#8203;1198](https://github.com/Finsys/dockhand/issues/1198))
-  grid buttons: configurable size and optional semantic colors ([#&#8203;1072](https://github.com/Finsys/dockhand/issues/1072))
- 🐛 copy buttons (git deploy logs, API tokens) now work over plain HTTP ([#&#8203;1222](https://github.com/Finsys/dockhand/issues/1222))
- 🐛 Podman pod-infra containers no longer trigger update-check warnings ([#&#8203;1221](https://github.com/Finsys/dockhand/issues/1221))
- 🐛 terminal exec works even when the browser sends a cookie with stray `%` characters ([#&#8203;1224](https://github.com/Finsys/dockhand/issues/1224))

#### Docker image

```bash
docker pull fnsys/dockhand:v1.0.36
```

Also available as `fnsys/dockhand:latest`

[View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #14
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-29 22:46:53 +02:00
edd26dc18f Migrate Renovate config (#11)
The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed.

  You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon.

🔕 **Ignore**: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid.

 Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions).

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

Reviewed-on: #11
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-24 19:11:13 +02:00
d07800b183 Update traefik:v3.7.5 Docker digest to e4d9815 (#9)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | digest | `d685879` → `e4d9815` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #9
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-24 19:08:48 +02:00
71b29125f8 Switch to fastfetch and use top-level engrampa for home-config 2026-06-24 19:07:05 +02:00
2d7cff9743 Add best-practices to renovate config 2026-06-24 19:06:30 +02:00
9881eb04c3 Update fnsys/dockhand Docker tag to v1.0.35 (#2)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| fnsys/dockhand | patch | `v1.0.32` → `v1.0.35` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:26:50 +02:00
0b10a3ddc3 Update ghcr.io/finsys/hawser Docker tag to v0.2.45 (#3)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.42` → `0.2.45` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.45`](https://github.com/Finsys/hawser/releases/tag/v0.2.45)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.44...v0.2.45)

#### Changelog

- [`82a86a1`](82a86a16e3) feat: hash-verified file deletion sync and stack dir cleanup ([#&#8203;966](https://github.com/Finsys/hawser/issues/966), [#&#8203;1162](https://github.com/Finsys/hawser/issues/1162))
- [`0997f71`](0997f7161d) fix: log client disconnect in events stream at debug level
- [`f38f847`](f38f847ca8) fix: stack removal deletes only files explicitly listed by dockhand
- [`2c1675f`](2c1675f16b) fix: use ln -sf so newer docker-compose packages work

### [`v0.2.44`](https://github.com/Finsys/hawser/releases/tag/v0.2.44)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.43...v0.2.44)

#### Changelog

- [`3cbc419`](3cbc419eee) fix: use clean env for compose subprocess to prevent inherited .env override ([#&#8203;1113](https://github.com/Finsys/hawser/issues/1113))

### [`v0.2.43`](https://github.com/Finsys/hawser/releases/tag/v0.2.43)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.42...v0.2.43)

#### Changelog

- Bump Go to 1.26 in go.mod, CI workflows, and Dockerfile.dev
- Bump docker-compose to 5.1.4-r0 in Dockerfile
- Expand token security documentation with generation examples ([#&#8203;60](https://github.com/Finsys/hawser/issues/60))
- Remove unused edge /info endpoint

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:26:31 +02:00
5de6a829e6 Update netbird to v0.73.2 (#8)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| netbirdio/netbird | minor | `0.72.4-rootless` → `v0.73.2-rootless` |
| netbirdio/netbird-server | minor | `0.72.4` → `0.73.2` |
| netbirdio/reverse-proxy | minor | `0.72.4` → `0.73.2` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #8
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:26:00 +02:00
51286912e9 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.9.0 (#4)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.8.0` → `v2.9.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.9.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v290)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0)

##### Bug Fixes

- issues with loading new font ([#&#8203;1496](https://github.com/pocket-id/pocket-id/pull/1496) by [@&#8203;MelvinSnijders](https://github.com/MelvinSnijders))
- PAR parameters not respected by authorize page ([3d9d4de](3d9d4de619) by [@&#8203;stonith404](https://github.com/stonith404))
- add responsive css for api/user/group/client page add buttons ([#&#8203;1508](https://github.com/pocket-id/pocket-id/pull/1508) by [@&#8203;James18232](https://github.com/James18232))
- load Gloock font from static path instead of inline ([89b4abb](89b4abb8b5) by [@&#8203;stonith404](https://github.com/stonith404))
- update terminology from public key code exchange to proof key co… ([#&#8203;1515](https://github.com/pocket-id/pocket-id/pull/1515) by [@&#8203;maxwassiljew](https://github.com/maxwassiljew))
- callback URL validation not validated if prompt=none ([8a75774](8a75774971) by [@&#8203;stonith404](https://github.com/stonith404))
- passkey card not rounded ([84678c3](84678c3a7b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add AI Usage Policy to CONTRIBUTING.md ([fea933b](fea933b62d) by [@&#8203;stonith404](https://github.com/stonith404))
- add PR template ([bf9f76b](bf9f76bbd5) by [@&#8203;stonith404](https://github.com/stonith404))
- add "needs more upvotes" label as default ([fc42f62](fc42f6211d) by [@&#8203;stonith404](https://github.com/stonith404))
- fix link to watchtower repo ([#&#8203;1500](https://github.com/pocket-id/pocket-id/pull/1500) by [@&#8203;wollew](https://github.com/wollew))

##### Features

- add support for Pushed Authorization Requests (RFC9126) ([#&#8203;1404](https://github.com/pocket-id/pocket-id/pull/1404) by [@&#8203;Zenithar](https://github.com/Zenithar))

##### Other

- fix linter issues ([4f97cd4](4f97cd4188) by [@&#8203;stonith404](https://github.com/stonith404))
- update AAGUIDs ([#&#8203;1511](https://github.com/pocket-id/pocket-id/pull/1511) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- run svelte check and unit tests in breaking branches ([83b45f6](83b45f682d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([2726ddd](2726ddd0c2) by [@&#8203;stonith404](https://github.com/stonith404))
- bump vite from 8.0.13 to 8.0.16 ([#&#8203;1521](https://github.com/pocket-id/pocket-id/pull/1521) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- npm dependabot not run from root ([c0d96a0](c0d96a0b13) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong assertion ([effd2a1](effd2a146f) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 4 updates across multiple ecosystems ([#&#8203;1523](https://github.com/pocket-id/pocket-id/pull/1523) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #4
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:24:51 +02:00
a51405ea0b Group netbird updates
Regex matches /netbirdio/.
2026-06-22 22:20:41 +02:00
47fc44c46e Fix regex
currentDigest instead of digest, similar to currentValue
2026-06-22 22:12:01 +02:00
0be79ce62d Add displaylink module 2026-06-22 22:11:50 +02:00
1645234f28 Merge pull request 'Configure Renovate' (#1) from renovate/configure into main
Reviewed-on: #1
2026-06-22 21:40:49 +02:00
2f4e529738 Run renovate on a schedule and enable autodiscover 2026-06-18 02:41:51 +02:00
31fe3ff223 Do not impose hourly PR limit
New systems are not built on branches, so no CI can be overwhelmed.
2026-06-18 02:36:10 +02:00
6f7f13d7ff Remove unused oci container modules 2026-06-18 02:30:33 +02:00
7d3ce606ca Inline oci image versions and add image digests 2026-06-18 02:29:34 +02:00
fdbc96135e Add digest to oci image matcher 2026-06-18 02:06:56 +02:00
ddfe28de8d Add custom manager for oci image references
Found at https://gist.github.com/itz-Jana/2627b87f47a0141dd98636276bd2a1f6
2026-06-18 01:48:44 +02:00
8ae895ac29 Add nix support to renovate.json 2026-06-18 01:39:16 +02:00
aabaa70595 Add renovate.json 2026-06-18 01:36:26 +02:00
c96522fdfc Add dig to cli essentials 2026-06-18 01:29:27 +02:00
4250c76fde Add vm busch-nixos-native 2026-06-18 01:28:44 +02:00
2945488b18 netbird: 0.7{1,2}.2 -> 0.72.4 2026-06-18 01:27:50 +02:00
f7a7a84e49 Remove pkgs.shadow for netbird client
This was incorporated in release 26.05.
2026-06-18 01:27:01 +02:00
e5757374d2 Make host and docker setupKeys optional for netbird-client module 2026-06-18 01:26:44 +02:00
8325d3d86a Remove pkgs-unstable as specialArgs in flake.nix 2026-06-18 01:25:19 +02:00