Merge remote-tracking branch 'origin/dev' into feat/beszel-fixes

apps/docs/docs/advanced/single-sign-on/index.mdx

@@ -124,6 +124,8 @@ Homarr supports multiple authentication options, from internal userbase (credent
 
     Roles are fetched from group claims. This can also be changed to roles for example added to a azure app registration by using the `AUTH_OIDC_GROUPS_ATTRIBUTE`.
 
+    If you'd rather manage group memberships for OIDC users locally (instead of via the IdP), set `AUTH_OIDC_GROUPS_LOCAL_MANAGEMENT=true`. While enabled, Homarr stops syncing OIDC users' group memberships from the groups claim, and admins can add/remove OIDC users on a group's members page. If you turn this back to `false`, the next login of each user resumes the regular sync and reconciles their groups with the IdP's claim again, which may remove memberships that were added manually while local management was enabled.
+
     <details>
       <summary>
         Example Setup
@@ -197,6 +199,7 @@ Homarr supports multiple authentication options, from internal userbase (credent
     | ``AUTH_OIDC_AUTO_LOGIN``    | Automatically redirect to OIDC login                       | false         |
     | ``AUTH_OIDC_SCOPE_OVERWRITE`` | Overwrite default scopes (openid, profile, email)        | openid email profile groups           |
     | ``AUTH_OIDC_GROUPS_ATTRIBUTE`` | Attribute used for groups (roles) claim                  | groups        |
+    | ``AUTH_OIDC_GROUPS_LOCAL_MANAGEMENT`` | Stop syncing group memberships of OIDC users from the groups claim and manage them locally via the group members page instead | false |
     | ``AUTH_OIDC_NAME_ATTRIBUTE_OVERWRITE`` | Overwrite name attribute. By default it will use preferred_username if it does not contain a `@` and otherwise name. | ---          |
     | ``AUTH_OIDC_FORCE_USERINFO`` | Force userinfo endpoint to be used for user information.    | false         |
     | ``AUTH_OIDC_ENABLE_DANGEROUS_ACCOUNT_LINKING`` | Enable account linking for OIDC provider. This will link the OIDC accounts by email. Be sure that you have verified emails to prevent stealing accounts. | false |

apps/docs/docs/widgets/dns-hole-controls/index.ts

@@ -1,16 +1,17 @@
 import { WidgetDefinition } from "@site/src/types";
 import { IconDeviceGamepad } from "@tabler/icons-react";
+import { integrations } from "../dns-hole-summary";
 
 export const dnsHoleControlsWidget: WidgetDefinition = {
   icon: IconDeviceGamepad,
   name: "DNS Hole Controls",
-  description: "Control PiHole or AdGuard from your dashboard",
+  description: `Control the blocking feature of your ${integrations} from your dashboard`,
   path: "../../widgets/dns-hole-controls",
   configuration: {
     items: [
       {
         name: "Show Toggle All Buttons",
-        description: "Show or not the 2 buttons that may be redundant when having only one DNS-hole.",
+        description: "Show or not the 2 buttons that may be redundant when having only one DNS Hole.",
         values: { type: "boolean" },
         defaultValue: "yes",
       },

apps/docs/docs/widgets/dns-hole-summary/index.ts

@@ -1,10 +1,12 @@
 import { WidgetDefinition } from "@site/src/types";
 import { IconAd } from "@tabler/icons-react";
 
+export const integrations = "Pi-hole, AdGuard Home or Technitium DNS";
+
 export const dnsHoleSummaryWidget: WidgetDefinition = {
   icon: IconAd,
   name: "DNS Hole Summary",
-  description: "Displays the summary of your DNS Hole",
+  description: `Displays the summary of your ${integrations} blocks and queries statistics`,
   path: "../../widgets/dns-hole-summary",
   configuration: {
     items: [
@@ -19,7 +21,7 @@ export const dnsHoleSummaryWidget: WidgetDefinition = {
       },
       {
         name: "Use Pi-Hole colors",
-        description: "Color the tiles using the background color, that is used by default in PiHole.",
+        description: `Color the tiles using the background color, that is used by default in ${integrations}.`,
         values: { type: "boolean" },
         defaultValue: "yes",
       },