nix-config/modules
Renovate Bot d486dc7e6b Update traefik Docker tag to v3.7.6 (#16)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.5` → `v3.7.6` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.5...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #16
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-02 19:36:17 +02:00
..
disko Add host srv03 2026-04-25 02:33:35 +02:00
administration.nix Add opkssh to administration module 2026-04-22 22:17:58 +02:00
android.nix Initial commit 2025-01-14 01:29:24 +01:00
auto-upgrade.nix Allow disabling automatic reboots in module 2026-04-27 23:50:54 +02:00
beszel-hub.nix Inline oci image versions and add image digests 2026-06-18 02:29:34 +02:00
bluetooth.nix Initial commit 2025-01-14 01:29:24 +01:00
boot-login.nix Initial commit 2025-01-14 01:29:24 +01:00
cli-essentials.nix Add dig to cli essentials 2026-06-18 01:29:27 +02:00
connectivity.nix Initial commit 2025-01-14 01:29:24 +01:00
creativity.nix Add lazy-apps 2025-06-08 01:07:03 +02:00
desktop-essentials.nix nixos: 25.11 -> 26.05 2026-06-14 01:08:20 +02:00
displaylink.nix Add displaylink module 2026-06-22 22:11:50 +02:00
distrobox.nix Initial commit 2025-01-14 01:29:24 +01:00
docker.nix Switch to docker_29 2026-06-10 22:20:52 +02:00
dockhand.nix Update fnsys/dockhand Docker tag to v1.0.36 (#14) 2026-06-29 22:46:53 +02:00
fingerprint.nix Initial commit 2025-01-14 01:29:24 +01:00
firmware.nix Initial commit 2025-01-14 01:29:24 +01:00
flatpak.nix Initial commit 2025-01-14 01:29:24 +01:00
fonts.nix Add fira fonts 2026-02-22 17:20:48 +01:00
gaming.nix Initial commit 2025-01-14 01:29:24 +01:00
gui-coding.nix Add DBeaver as lazy app 2026-05-04 01:49:50 +02:00
hawser.nix Update ghcr.io/finsys/hawser Docker tag to v0.2.46 (#15) 2026-06-29 22:46:57 +02:00
i3.nix nixos: 25.11 -> 26.05 2026-06-14 01:08:20 +02:00
intel-cpu.nix Add intel-cpu module 2026-03-27 01:21:16 +01:00
internet.nix Use packages from stable which were from unstable before 2025-05-27 22:01:39 +03:00
k3s.nix Configure clustering with k3s 2025-08-17 02:53:39 +02:00
laptop.nix Revert "Switch from zen kernel to latest kernel for laptops" 2026-04-22 22:16:56 +02:00
locale.nix Initial commit 2025-01-14 01:29:24 +01:00
logitech.nix Initial commit 2025-01-14 01:29:24 +01:00
netbird-client.nix Update netbird to v0.73.2 (#8) 2026-06-22 22:26:00 +02:00
netbird-docker.nix Update netbird to v0.73.2 (#8) 2026-06-22 22:26:00 +02:00
network-client.nix Remove firewall rules for wireguard and set rpfilter to loose 2026-03-11 23:13:30 +01:00
network-server.nix Disallow ping on servers 2026-01-04 22:17:30 +01:00
nix.nix Explicitly set nix package to use 2026-02-22 17:53:31 +01:00
office.nix Add pdfarranger to office module 2025-04-22 18:41:20 +03:00
opkssh.sample.nix Add sample for opkssh module 2026-03-27 01:29:56 +01:00
optical-media.nix Initial commit 2025-01-14 01:29:24 +01:00
pocket-id.nix Update ghcr.io/pocket-id/pocket-id Docker tag to v2.9.0 (#4) 2026-06-22 22:24:51 +02:00
qemu-guest.nix Add qemu-guest-utils module 2025-08-17 01:35:09 +02:00
security.nix Use packages from stable which were from unstable before 2025-05-27 22:01:39 +03:00
server-cli.nix Add more server-centered modules for cli and networking 2025-01-18 20:46:29 +02:00
sshd.nix Add fail2ban to sshd module 2026-03-11 22:53:54 +01:00
sync-clients.nix Initial commit 2025-01-14 01:29:24 +01:00
systemd-boot.nix Externalize systemd-boot module 2025-08-17 01:34:38 +02:00
teleport.nix Update teleport to teleport_17 2025-04-04 21:42:49 +03:00
timezone-imperatively.nix Add module to make timezone imperatively settable 2025-01-18 20:39:17 +02:00
traefik-oidc.nix Update traefik Docker tag to v3.7.6 (#16) 2026-07-02 19:36:17 +02:00
traefik.nix Update traefik Docker tag to v3.7.6 (#16) 2026-07-02 19:36:17 +02:00
typesetting.nix Remove texlive from system closure 2026-03-11 22:55:25 +01:00
video-and-sound.nix Add vlc to video-and-sound module 2025-02-18 12:01:20 +02:00
virtualization.nix Add virtiofsd to enable shared folder to qemu 2026-01-18 22:34:11 +01:00