style: auto-fix lint and format

The token must only be used for repositories that are registered in the
widget's saved options, matched by provider:identifier (not by fragile
cuid2 id). This prevents tokens from being sent to arbitrary providerUrl
values submitted by the caller.

The saved providerUrl is used in preference to the request's providerUrl
when a token is being applied.

.env.example

@@ -59,4 +59,11 @@ TURBO_TELEMETRY_DISABLED=1
 # ENABLE_KUBERNETES=true
 
 # Enable mock integration
-UNSAFE_ENABLE_MOCK_INTEGRATION=true
+UNSAFE_ENABLE_MOCK_INTEGRATION=true
+
+# Enable demo mode (seeds a demo user "demo"/"demo", a sample board and a mock integration)
+# DEMO_MODE=true
+
+# Whether demo mode is read-only. Defaults to true (the public demo blocks all mutations).
+# Set to false for writable preview deployments so the demo user can modify the dashboard.
+# DEMO_READ_ONLY=false

.github/workflows/code-quality.yml

@@ -25,7 +25,7 @@ env:
 
 jobs:
   lint-format-autofix:
-    if: github.event_name == 'pull_request'
+    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.id == github.repository_id
     runs-on: ubuntu-latest
     timeout-minutes: 5
     permissions:

CODEOWNERS

@@ -19,6 +19,14 @@ packages/integrations/src/anchor @ohmzi
 apps/docs/docs/integrations/archive-team-warrior @darbyjack
 packages/integrations/src/archive-team-warrior @darbyjack
 
+# Bazarr - introduced in https://github.com/homarr-labs/homarr/pull/6156 by @Ayush7614
+apps/docs/docs/integrations/bazarr @Ayush7614
+apps/docs/docs/widgets/bazarr @Ayush7614
+packages/api/src/router/widgets/bazarr.ts @Ayush7614
+packages/integrations/src/bazarr @Ayush7614
+packages/request-handler/src/bazarr.ts @Ayush7614
+packages/widgets/src/bazarr @Ayush7614
+
 # Audiobookshelf - introduced in https://github.com/homarr-labs/homarr/pull/5910 by @ajnart
 apps/docs/docs/integrations/audiobookshelf @ajnart
 packages/integrations/src/audiobookshelf @ajnart
@@ -159,6 +167,10 @@ packages/integrations/src/search-ch @Meierschlumpf
 apps/docs/docs/integrations/speedtest-tracker @kylegrieder
 packages/integrations/src/speedtest-tracker @kylegrieder
 
+# Synology - introduced in https://github.com/homarr-labs/homarr/pull/6121 by @mrjoshuap
+apps/docs/docs/integrations/synology @mrjoshuap
+packages/integrations/src/synology @mrjoshuap
+
 # Technitium DNS - introduced in https://github.com/homarr-labs/homarr/pull/5832 by @lopsch
 apps/docs/docs/integrations/technitium-dns @lopsch
 packages/integrations/src/technitium @lopsch
@@ -187,6 +199,14 @@ packages/integrations/src/unraid @manuel-rw
 apps/docs/docs/integrations/uptime-kuma @ajnart
 packages/integrations/src/uptime-kuma @ajnart
 
+# Traefik - by @Nerdy-Technician
+apps/docs/docs/integrations/traefik @Nerdy-Technician
+apps/docs/docs/widgets/traefik @Nerdy-Technician
+packages/api/src/router/widgets/traefik.ts @Nerdy-Technician
+packages/integrations/src/traefik @Nerdy-Technician
+packages/request-handler/src/traefik.ts @Nerdy-Technician
+packages/widgets/src/traefik @Nerdy-Technician
+
 # Exempt Renovate-managed files (no owners)
 package.json
 **/package.json

apps/docs/docs/integrations/bazarr/index.mdx

@@ -0,0 +1,54 @@
+---
+title: 'Bazarr'
+description: "Bazarr is a companion application to Sonarr and Radarr that manages and downloads subtitles."
+hide_title: true
+---
+
+import { IntegrationHeader } from '@site/src/components/integrations/header';
+import { IntegrationCapabilites } from '@site/src/components/integrations/widgets';
+import { AddingIntegration } from '@site/src/components/integrations/adding';
+import { IntegrationSecrets } from '@site/src/components/integrations/secrets';
+import { bazarrIntegration } from '.';
+import { bazarrWidget } from '@site/docs/widgets/bazarr';
+
+<IntegrationHeader
+  integration={bazarrIntegration}
+  categories={['Subtitles', 'Media']}
+/>
+
+Bazarr complements Sonarr and Radarr by managing subtitle downloads. The Homarr integration uses your Bazarr API key to fetch missing subtitle counts and health badges.
+
+### Screenshots
+
+import apiKeySettings from './img/api-key-settings.png';
+import widgetOverview from '@site/docs/widgets/bazarr/img/widget-overview.png';
+
+<div className="flex flex-col gap-4">
+  <div>
+    <p>API key location in Bazarr (<strong>Settings → General → Security</strong>):</p>
+    <img src={apiKeySettings} alt="bazarr-api-key-settings" width={128 * 4} />
+  </div>
+  <div>
+    <p>Bazarr widget on a Homarr board:</p>
+    <img src={widgetOverview} alt="bazarr-widget-on-board" width={128 * 4} />
+  </div>
+</div>
+
+### Widgets & Capabilities
+<IntegrationCapabilites
+    items={[{ widget: bazarrWidget }]}
+/>
+
+### Adding the integration
+<AddingIntegration />
+
+### Secrets
+You can find your Bazarr API key under **Settings → General → Security**.
+
+<IntegrationSecrets secrets={[{
+    credentials: ['apiKey'],
+    steps: [
+      "Open Bazarr and go to Settings → General → Security.",
+      "Copy the API key and paste it into Homarr when creating the integration.",
+    ],
+}]} />

apps/docs/docs/integrations/bazarr/index.ts

@@ -0,0 +1,9 @@
+import { IntegrationDefinition } from "@site/src/types";
+
+export const bazarrIntegration: IntegrationDefinition = {
+  name: "Bazarr",
+  description:
+    "Bazarr is a companion application to Sonarr and Radarr that manages and downloads subtitles for your media library.",
+  iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/bazarr.svg",
+  path: "../../integrations/bazarr",
+};

apps/docs/docs/integrations/synology/index.mdx

@@ -0,0 +1,96 @@
+---
+title: "Synology DiskStation"
+description: "Monitor CPU, memory, storage volumes, and system health from Synology DSM."
+hide_title: true
+---
+
+import { IntegrationHeader } from "@site/src/components/integrations/header";
+import { IntegrationCapabilites } from "@site/src/components/integrations/widgets";
+import { AddingIntegration } from "@site/src/components/integrations/adding";
+import { IntegrationSecrets } from "@site/src/components/integrations/secrets";
+import { synologyIntegration } from ".";
+import { systemResourcesWidget } from "@site/docs/widgets/system-resources";
+import { systemDisksWidget } from "@site/docs/widgets/system-disks";
+import { healthMonitoringWidget } from "@site/docs/widgets/health-monitoring";
+import Alert from "@theme/Admonition";
+
+<IntegrationHeader integration={synologyIntegration} categories={["NAS", "Hardware"]} />
+
+### Widgets & Capabilities
+
+<IntegrationCapabilites
+  items={[
+    { widget: healthMonitoringWidget },
+    { widget: systemResourcesWidget },
+    { widget: systemDisksWidget },
+  ]}
+/>
+
+### Supported metrics
+
+| Widget section               | DSM API source                                        | May be unavailable                                      |
+| ---------------------------- | ----------------------------------------------------- | ------------------------------------------------------- |
+| CPU ring / chart             | `SYNO.Core.System.Utilization`                        | —                                                       |
+| Memory ring / chart          | `SYNO.Core.System.Utilization`                        | —                                                       |
+| CPU temperature ring         | `SYNO.Core.System` system info                        | Models without a temperature sensor                     |
+| Network charts               | `SYNO.Core.System.Utilization` network totals         | Some DSM builds or permission configurations            |
+| Load average (info modal)    | `SYNO.Core.System.Utilization` CPU load fields        | —                                                       |
+| Storage volume usage         | `SYNO.Core.System` storage info / Storage Manager API | —                                                       |
+| SMART status and temperature | Storage Manager and SMART APIs                        | Disk-to-volume mapping may be incomplete on some setups |
+| Reboot / update indicator    | `SYNO.Core.System.Status` / upgrade APIs              | Permission-dependent                                    |
+| GPU                          | Not available                                         | Typical DiskStation models                              |
+
+### Adding the integration
+
+<AddingIntegration />
+
+<Alert type="info" title="Use the correct DSM URL">
+  Enter the HTTP or HTTPS URL of your Synology DSM web interface, for example <code>http://diskstation.local:5000</code>{" "}
+  or <code>https://diskstation.local:5001</code>. If DSM uses a self-signed certificate, add it under{" "}
+  <a href="/docs/management/certificates">Management &gt; Tools &gt; Certificates</a> so Homarr can connect securely.
+</Alert>
+
+### Secrets
+
+<IntegrationSecrets
+  secrets={[
+    {
+      credentials: ["username", "password"],
+      steps: [
+        "Create a dedicated DSM user with a strong password for Homarr.",
+        "Add the user to the default Administrators group so Homarr can read `SYNO.Core.System` metrics.",
+        "Under User Groups and Permissions, deny access to shared folders and most applications.",
+        "Allow login to DSM only, optionally restricted by source IP address.",
+        "Log in once with the service account in DSM to accept terms and conditions.",
+      ],
+      body: (
+        <>
+          <Alert type="caution" title="Administrators group required">
+            Homarr reads system, storage, and utilization data from APIs that require membership in the default
+            Administrators group.
+          </Alert>
+          <Alert type="warning" title="Two-factor authentication is not supported">
+            Accounts with 2-step verification enabled cannot authenticate with this integration. Use a dedicated service
+            account without 2FA.
+          </Alert>
+          <Alert type="tip" title="First-time setup">
+            If login fails during testing, temporarily disable automatic blocking for invalid logins under Control Panel
+            &gt; Security &gt; Protection, then re-enable it after Homarr connects successfully.
+          </Alert>
+        </>
+      ),
+    },
+  ]}
+/>
+
+### Storage volume selection
+
+Health Monitoring and System Disks widgets can filter Synology storage volumes when **every** selected integration is a Synology DiskStation. Leave **Visible storage volumes** empty to show all volumes, or pick specific volumes from the list. When multiple Synology integrations are connected, volumes are labeled with the integration name.
+
+<Alert type="note" title="Synology-only option">
+  The volume filter is hidden when the widget also uses non-Synology integrations such as TrueNAS or Unraid.
+</Alert>
+
+<Alert type="note" title="Volume ordering">
+  When no volume filter is configured, the first volume returned by DSM is not guaranteed to be `volume_1`.
+</Alert>

apps/docs/docs/integrations/synology/index.ts

@@ -0,0 +1,8 @@
+import { IntegrationDefinition } from "@site/src/types";
+
+export const synologyIntegration: IntegrationDefinition = {
+  name: "Synology DiskStation",
+  description: "Monitor CPU, memory, storage volumes, and system health from Synology DSM.",
+  iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/synology.svg",
+  path: "../../integrations/synology",
+};

apps/docs/docs/integrations/traefik/index.mdx

@@ -0,0 +1,57 @@
+---
+title: "Traefik"
+description: "Cloud-native reverse proxy and load balancer"
+hide_title: true
+---
+
+import { IntegrationHeader } from "@site/src/components/integrations/header";
+import { IntegrationCapabilites } from "@site/src/components/integrations/widgets";
+import { AddingIntegration } from "@site/src/components/integrations/adding";
+import { IntegrationSecrets } from "@site/src/components/integrations/secrets";
+import { traefikIntegration } from ".";
+import { traefikWidget } from "../../widgets/traefik";
+
+<IntegrationHeader integration={traefikIntegration} categories={["Reverse proxy", "Monitoring"]} />
+
+### Widgets & Capabilities
+
+<IntegrationCapabilites items={[{ widget: traefikWidget }]} />
+
+### Adding the integration
+
+<AddingIntegration />
+
+:::info URL configuration
+Use the URL where Traefik exposes its dashboard/API, for example `http://traefik:8080` or `https://traefik.example.com`. Homarr calls Traefik endpoints under `/api` automatically.
+:::
+
+:::warning API requirement
+Traefik must have the API enabled. For local or internal setups this is commonly exposed through `api.insecure=true`; for production setups, expose the `api@internal` service through an authenticated router.
+:::
+
+### Secrets
+
+<IntegrationSecrets
+  secrets={[
+    {
+      credentials: [],
+      steps: [
+        "Choose this option when the Traefik API is only reachable from a trusted internal network and does not require authentication.",
+      ],
+    },
+    {
+      credentials: ["username", "password"],
+      steps: [
+        "Use this option when your Traefik dashboard route is protected by Basic Auth.",
+        "Enter the same username and password required to open the Traefik dashboard.",
+      ],
+    },
+    {
+      credentials: ["apiKey"],
+      steps: [
+        "Use this option when your Traefik dashboard route accepts a bearer token.",
+        "Paste the token into the API Key field in Homarr.",
+      ],
+    },
+  ]}
+/>

apps/docs/docs/integrations/traefik/index.ts

@@ -0,0 +1,8 @@
+import { IntegrationDefinition } from "@site/src/types";
+
+export const traefikIntegration: IntegrationDefinition = {
+  name: "Traefik",
+  description: "Cloud-native reverse proxy and load balancer",
+  iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/traefik.svg",
+  path: "../../integrations/traefik",
+};

apps/docs/docs/management/api/index.mdx

@@ -70,4 +70,16 @@ API key authentication enables programmatic access for:
 - Automation scripts and CI/CD pipelines
 - Third-party integrations
 - Custom dashboards and monitoring tools
-- Container orchestration systems that need to sync app definitions
+- Container orchestration systems that need to sync app definitions
+
+## Board Automation
+
+The OpenAPI and MCP APIs include board management endpoints for common automation workflows:
+
+- Create, duplicate, rename and delete boards
+- Change board visibility
+- Update board visual and behavior settings
+- Set desktop and mobile home boards for the current user
+- Configure global board defaults such as public home boards and status behavior
+
+Use the interactive API reference to inspect the exact request body for each endpoint under the `boards` and `settings` tags.

apps/docs/docs/widgets/bazarr/index.mdx

@@ -0,0 +1,41 @@
+---
+title: 'Bazarr'
+description: 'Displays missing subtitle counts and health indicators from your Bazarr instance.'
+hide_title: true
+---
+
+import { WidgetHeader } from '@site/src/components/widgets/header';
+import { AddingWidget } from '@site/src/components/widgets/adding';
+import { WidgetConfig } from '@site/src/components/widgets/configuration';
+import { WidgetIntegrations } from '@site/src/components/widgets/integrations';
+import { bazarrWidget } from '.';
+import { bazarrIntegration } from '@site/docs/integrations/bazarr';
+
+<WidgetHeader
+  widget={bazarrWidget}
+  categories={['Subtitles', 'Media']}
+/>
+
+This widget shows subtitle status from your Bazarr instance, including missing episode and movie subtitles, provider issues, and health warnings.
+
+### Screenshots
+
+import widgetOverview from './img/widget-overview.png';
+
+<div className="flex flex-col gap-2">
+  <img src={widgetOverview} alt="bazarr-widget-overview" width={128 * 4} />
+</div>
+
+### Supported Integrations
+
+<WidgetIntegrations items={[{
+  integration: bazarrIntegration,
+  note: "Displays missing subtitle counts and health indicators"
+}]} />
+
+### Adding the widget
+
+<AddingWidget />
+
+### Configuration
+<WidgetConfig configuration={bazarrWidget.configuration} />

apps/docs/docs/widgets/bazarr/index.ts

@@ -0,0 +1,37 @@
+import { WidgetDefinition } from "@site/src/types";
+import { IconBadgeCc } from "@tabler/icons-react";
+
+export const bazarrWidget: WidgetDefinition = {
+  icon: IconBadgeCc,
+  name: "Bazarr",
+  description: "Displays missing subtitle counts and health indicators from your Bazarr instance.",
+  path: "../../widgets/bazarr",
+  configuration: {
+    items: [
+      {
+        name: "Show missing episodes",
+        description: "Displays the number of episodes with missing subtitles",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+      {
+        name: "Show missing movies",
+        description: "Displays the number of movies with missing subtitles",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+      {
+        name: "Show provider issues",
+        description: "Displays the number of subtitle providers with issues",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+      {
+        name: "Show health issues",
+        description: "Displays the number of Bazarr health issues",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+    ],
+  },
+};

apps/docs/docs/widgets/health-monitoring/index.mdx

@@ -1,61 +1,71 @@
 ---
-title: 'System Health Monitoring'
-description: 'Displays information showing the health and status of your system(s).'
+title: "System Health Monitoring"
+description: "Displays information showing the health and status of your system(s)."
 hide_title: true
 ---
 
-import { WidgetHeader } from '@site/src/components/widgets/header';
-import { AddingWidget } from '@site/src/components/widgets/adding';
-import { WidgetConfig } from '@site/src/components/widgets/configuration';
-import { WidgetIntegrations } from '@site/src/components/widgets/integrations';
+import { WidgetHeader } from "@site/src/components/widgets/header";
+import { AddingWidget } from "@site/src/components/widgets/adding";
+import { WidgetConfig } from "@site/src/components/widgets/configuration";
+import { WidgetIntegrations } from "@site/src/components/widgets/integrations";
 import { IconAd } from "@tabler/icons-react";
-import Tabs from '@theme/Tabs';
-import TabItem from '@theme/TabItem';
-import { healthMonitoringWidget } from '.';
-import { dashDotIntegration } from '@site/docs/integrations/dash-dot';
-import { openMediaVaultIntegration } from '@site/docs/integrations/open-media-vault';
-import { proxmoxIntegration } from '@site/docs/integrations/proxmox';
-import { glancesIntegration } from '@site/docs/integrations/glances';
+import Tabs from "@theme/Tabs";
+import TabItem from "@theme/TabItem";
+import { healthMonitoringWidget } from ".";
+import { dashDotIntegration } from "@site/docs/integrations/dash-dot";
+import { openMediaVaultIntegration } from "@site/docs/integrations/open-media-vault";
+import { proxmoxIntegration } from "@site/docs/integrations/proxmox";
+import { glancesIntegration } from "@site/docs/integrations/glances";
 
-
-<WidgetHeader
-  widget={healthMonitoringWidget}
-  categories={['Health monitoring']}
-/>
+<WidgetHeader widget={healthMonitoringWidget} categories={["Health monitoring"]} />
 
 This widget displays information about the health and status of your system(s), including CPU, memory, disk usage, and more.
 
 ### Screenshots
 
-import systemView from './img/system-view.png';
-import clusterView from './img/cluster-view.png';
-import { truenasIntegration } from '@site/docs/integrations/truenas';
+import systemView from "./img/system-view.png";
+import clusterView from "./img/cluster-view.png";
+import { truenasIntegration } from "@site/docs/integrations/truenas";
+import { synologyIntegration } from "@site/docs/integrations/synology";
 
 <img src={systemView} alt="health-monitoring system-view" width={256} height={256} />
 <img src={clusterView} alt="health-monitoring cluster-view" width={256} height={256} />
 
 ### Supported Integrations
 
-<WidgetIntegrations items={[{
-  integration: dashDotIntegration,
-  note: "Will display information on the system tab"
-}, {
-  integration: openMediaVaultIntegration,
-  note: "Will display information on the system tab"
-}, {
-  integration: truenasIntegration,
-  note: "Will display information on the system tab"
-}, {
-  integration: glancesIntegration,
-  note: "Will display information on the system tab"
-}, {
-  integration: proxmoxIntegration,
-  note: "Will display information on the cluster tab, only supports one integration at a time"
-}]} />
+<WidgetIntegrations
+  items={[
+    {
+      integration: dashDotIntegration,
+      note: "Will display information on the system tab",
+    },
+    {
+      integration: openMediaVaultIntegration,
+      note: "Will display information on the system tab",
+    },
+    {
+      integration: truenasIntegration,
+      note: "Will display information on the system tab",
+    },
+    {
+      integration: synologyIntegration,
+      note: "Will display information on the system tab",
+    },
+    {
+      integration: glancesIntegration,
+      note: "Will display information on the system tab",
+    },
+    {
+      integration: proxmoxIntegration,
+      note: "Will display information on the cluster tab, only supports one integration at a time",
+    },
+  ]}
+/>
 
 ### Adding the widget
 
 <AddingWidget />
 
 ### Configuration
+
 <WidgetConfig configuration={healthMonitoringWidget.configuration} />

apps/docs/docs/widgets/health-monitoring/index.ts

@@ -38,6 +38,13 @@ export const healthMonitoringWidget: WidgetDefinition = {
         values: { type: "boolean" },
         defaultValue: "yes",
       },
+      {
+        name: "Visible storage volumes",
+        description:
+          "Only available when all selected integrations are Synology. Leave empty to show all detected storage volumes.",
+        values: "List of storage volumes",
+        defaultValue: "Empty list",
+      },
       {
         name: "Default tab",
         description: "Tab that should be visible by default. Only used when multiple integrations are available.",

apps/docs/docs/widgets/media-missing/index.mdx

@@ -0,0 +1,65 @@
+---
+title: 'Media Missing & Queue'
+description: 'Track missing media and active downloads from Radarr and Sonarr'
+hide_title: true
+---
+
+import { WidgetHeader } from '@site/src/components/widgets/header';
+import { AddingWidget } from '@site/src/components/widgets/adding';
+import { WidgetConfig } from '@site/src/components/widgets/configuration';
+import { WidgetIntegrations } from '@site/src/components/widgets/integrations';
+import { mediaMissingWidget } from '.';
+import { radarrIntegration } from '@site/docs/integrations/radarr';
+import { sonarrIntegration } from '@site/docs/integrations/sonarr';
+
+<WidgetHeader
+  widget={mediaMissingWidget}
+  categories={['Media', 'Downloads']}
+/>
+
+Monitor which movies and episodes are missing from your library, and track what is currently being downloaded. The widget pulls data from Radarr and Sonarr and groups results by type in two tabs.
+
+### Screenshots
+
+import widgetMissing from './img/missing.png';
+import widgetQueued from './img/queued.png';
+import widgetCompact from './img/compact.png';
+
+<div className="flex gap-2 flex-wrap">
+  <img src={widgetMissing} alt="media-missing widget showing missing movies and episodes in a grid" width={360} />
+  <img src={widgetQueued} alt="media-missing tab showing download queue with progress bars" width={256} />
+  <img src={widgetCompact} alt="media-missing widget in a compact wide-and-short size" width={256} />
+</div>
+
+### Supported Integrations
+
+<WidgetIntegrations items={[{
+  integration: radarrIntegration,
+}, {
+  integration: sonarrIntegration,
+}]} />
+
+### Tabs
+
+| Tab | Description |
+|---|---|
+| **Missing** | Lists movies (Radarr) and episodes (Sonarr) that are monitored but not yet available in your library. |
+| **Queued** | Shows items currently being downloaded with a progress bar and estimated time remaining. |
+
+### Sizing
+
+The widget adapts to its container size, so it looks good at any grid size:
+
+- **Wide** — fits as many columns of cards as the width allows, filling larger widgets instead of stretching a single column.
+- **Short** — packs items into more, tighter columns so they stay visible in the limited height.
+- **Narrow (1×N)** — tab labels collapse to counts only and posters scale down.
+
+Each item shows its poster art (with the artwork bleeding softly behind the card), a type badge, and — on the queue — an animated progress bar with the estimated time remaining.
+
+### Adding the widget
+
+<AddingWidget />
+
+### Configuration
+
+<WidgetConfig configuration={mediaMissingWidget.configuration} />

apps/docs/docs/widgets/media-missing/index.ts

@@ -0,0 +1,31 @@
+import { WidgetDefinition } from "@site/src/types";
+import { IconMovie } from "@tabler/icons-react";
+
+export const mediaMissingWidget: WidgetDefinition = {
+  icon: IconMovie,
+  name: "Media Missing & Queue",
+  description: "Track missing media and active downloads from Radarr and Sonarr",
+  path: "../../widgets/media-missing",
+  configuration: {
+    items: [
+      {
+        name: "Show Missing",
+        description: "Display the missing media tab, listing movies or episodes not yet downloaded",
+        values: { type: "boolean" },
+        defaultValue: "true",
+      },
+      {
+        name: "Show Queued",
+        description: "Display the download queue tab with progress for each item",
+        values: { type: "boolean" },
+        defaultValue: "true",
+      },
+      {
+        name: "Page Size",
+        description: "Maximum number of items to fetch per integration",
+        values: { type: "string" },
+        defaultValue: "10",
+      },
+    ],
+  },
+};

apps/docs/docs/widgets/system-disks/index.mdx

@@ -0,0 +1,51 @@
+---
+title: "System disks"
+description: "Disk usage of your system"
+hide_title: true
+---
+
+import { WidgetHeader } from "@site/src/components/widgets/header";
+import { AddingWidget } from "@site/src/components/widgets/adding";
+import { WidgetConfig } from "@site/src/components/widgets/configuration";
+import { WidgetIntegrations } from "@site/src/components/widgets/integrations";
+import { systemDisksWidget } from ".";
+import { dashDotIntegration } from "@site/docs/integrations/dash-dot";
+import { openMediaVaultIntegration } from "@site/docs/integrations/open-media-vault";
+import { truenasIntegration } from "@site/docs/integrations/truenas";
+import { unraidIntegration } from "@site/docs/integrations/unraid";
+import { synologyIntegration } from "@site/docs/integrations/synology";
+
+<WidgetHeader widget={systemDisksWidget} categories={["Storage", "Disks"]} />
+
+This widget displays filesystem and SMART disk usage for supported server and NAS integrations.
+
+### Supported Integrations
+
+<WidgetIntegrations
+  items={[
+    {
+      integration: dashDotIntegration,
+    },
+    {
+      integration: openMediaVaultIntegration,
+    },
+    {
+      integration: truenasIntegration,
+    },
+    {
+      integration: unraidIntegration,
+    },
+    {
+      integration: synologyIntegration,
+      note: "Supports storage volume filtering when only Synology integrations are selected",
+    },
+  ]}
+/>
+
+### Adding the widget
+
+<AddingWidget />
+
+### Configuration
+
+<WidgetConfig configuration={systemDisksWidget.configuration} />

apps/docs/docs/widgets/system-disks/index.ts

@@ -0,0 +1,41 @@
+import { WidgetDefinition } from "@site/src/types";
+import { IconServer2 } from "@tabler/icons-react";
+
+export const systemDisksWidget: WidgetDefinition = {
+  icon: IconServer2,
+  name: "System disks",
+  description: "Disk usage of your system",
+  path: "../../widgets/system-disks",
+  configuration: {
+    items: [
+      {
+        name: "Show temperature if available",
+        description: "Display disk temperature when the integration provides it",
+        values: { type: "boolean" },
+        defaultValue: "Yes",
+      },
+      {
+        name: "Display mode",
+        description: "How disk usage values are shown",
+        values: {
+          type: "select",
+          options: ["Percentage (e.g., 76%)", "Absolute values (e.g., 800GB / 1TB)", "Free space percentage (e.g., 24% free)"],
+        },
+        defaultValue: "Percentage (e.g., 76%)",
+      },
+      {
+        name: "Show background usage bar",
+        description: "Fill the area below the usage value with a background bar",
+        values: { type: "boolean" },
+        defaultValue: "Yes",
+      },
+      {
+        name: "Visible storage volumes",
+        description:
+          "Only available when all selected integrations are Synology. Leave empty to show all detected storage volumes.",
+        values: "List of storage volumes",
+        defaultValue: "All volumes",
+      },
+    ],
+  },
+};

apps/docs/docs/widgets/system-resources/index.mdx

@@ -1,57 +1,69 @@
 ---
-title: 'System Resources'
-description: 'Displays CPU, RAM and network of your host in real time'
+title: "System Resources"
+description: "Displays CPU, RAM and network of your host in real time"
 hide_title: true
 ---
 
-import { WidgetHeader } from '@site/src/components/widgets/header';
-import { AddingWidget } from '@site/src/components/widgets/adding';
-import { WidgetConfig } from '@site/src/components/widgets/configuration';
-import { WidgetIntegrations } from '@site/src/components/widgets/integrations';
-import { systemResourcesWidget } from '.';
-import { dashDotIntegration } from '@site/docs/integrations/dash-dot';
-import { glancesIntegration } from '@site/docs/integrations/glances';
-import { openMediaVaultIntegration } from '@site/docs/integrations/open-media-vault';
-import { proxmoxIntegration } from '@site/docs/integrations/proxmox';
+import { WidgetHeader } from "@site/src/components/widgets/header";
+import { AddingWidget } from "@site/src/components/widgets/adding";
+import { WidgetConfig } from "@site/src/components/widgets/configuration";
+import { WidgetIntegrations } from "@site/src/components/widgets/integrations";
+import { systemResourcesWidget } from ".";
+import { dashDotIntegration } from "@site/docs/integrations/dash-dot";
+import { glancesIntegration } from "@site/docs/integrations/glances";
+import { openMediaVaultIntegration } from "@site/docs/integrations/open-media-vault";
+import { proxmoxIntegration } from "@site/docs/integrations/proxmox";
 
-
-<WidgetHeader
-  widget={systemResourcesWidget}
-  categories={['CPU', 'RAM', 'Memory', 'Network', 'Interface']}
-/>
+<WidgetHeader widget={systemResourcesWidget} categories={["CPU", "RAM", "Memory", "Network", "Interface"]} />
 
 Displays CPU, RAM and network of your host in real time
 
 ### Screenshots
 
-import network from './img/network.png';
-import cpu from './img/cpu.png';
-import memory from './img/memory.png';
-import cpuAndMemory from './img/cpu-and-memory.png';
-import { truenasIntegration } from '@site/docs/integrations/truenas';
+import network from "./img/network.png";
+import cpu from "./img/cpu.png";
+import memory from "./img/memory.png";
+import cpuAndMemory from "./img/cpu-and-memory.png";
+import { truenasIntegration } from "@site/docs/integrations/truenas";
+import { synologyIntegration } from "@site/docs/integrations/synology";
 
-<div className='flex gap-1'>
-  <div className='flex flex-col gap-1'>
+<div className="flex gap-1">
+  <div className="flex flex-col gap-1">
     <img src={network} alt="system-resources-widget network-only icon-label" width={256 + 4} height={128} />
-    <div className='flex gap-1'>
+    <div className="flex gap-1">
       <img src={cpu} alt="system-resources-widget cpu-only no-label item-title" width={128} height={128} />
       <img src={memory} alt="system-resources-widget memory-only text-label" width={128} height={128} />
     </div>
   </div>
-  <img src={cpuAndMemory} alt="system-resources-widget cpu-and-memory icon-text-label" width={256 + 4} height={256 + 4} />
+  <img
+    src={cpuAndMemory}
+    alt="system-resources-widget cpu-and-memory icon-text-label"
+    width={256 + 4}
+    height={256 + 4}
+  />
 </div>
 
 ### Supported Integrations
 
-<WidgetIntegrations items={[{
-  integration: dashDotIntegration
-}, {
-  integration: openMediaVaultIntegration
-}, {
-  integration: truenasIntegration
-}, {
-  integration: glancesIntegration
-}]} />
+<WidgetIntegrations
+  items={[
+    {
+      integration: dashDotIntegration,
+    },
+    {
+      integration: openMediaVaultIntegration,
+    },
+    {
+      integration: truenasIntegration,
+    },
+    {
+      integration: synologyIntegration,
+    },
+    {
+      integration: glancesIntegration,
+    },
+  ]}
+/>
 
 ### Adding the widget
 
@@ -59,4 +71,4 @@ import { truenasIntegration } from '@site/docs/integrations/truenas';
 
 ### Configuration
 
-<WidgetConfig configuration={systemResourcesWidget.configuration} />
+<WidgetConfig configuration={systemResourcesWidget.configuration} />

apps/docs/docs/widgets/traefik/index.mdx

@@ -0,0 +1,35 @@
+---
+title: "Traefik"
+description: "Displays Traefik router, service, middleware, and entry point counts."
+hide_title: true
+---
+
+import { WidgetHeader } from "@site/src/components/widgets/header";
+import { AddingWidget } from "@site/src/components/widgets/adding";
+import { WidgetConfig } from "@site/src/components/widgets/configuration";
+import { WidgetIntegrations } from "@site/src/components/widgets/integrations";
+import { traefikWidget } from ".";
+import { traefikIntegration } from "@site/docs/integrations/traefik";
+
+<WidgetHeader widget={traefikWidget} categories={["Monitoring", "Reverse proxy"]} />
+
+This widget displays a compact overview of your Traefik instance, including total routers, entry points, protocol-specific router/service/middleware counts, and warning or error totals when Traefik reports them.
+
+### Supported Integrations
+
+<WidgetIntegrations
+  items={[
+    {
+      integration: traefikIntegration,
+      note: "Reads data from Traefik's dashboard/API endpoints",
+    },
+  ]}
+/>
+
+### Adding the widget
+
+<AddingWidget />
+
+### Configuration
+
+<WidgetConfig configuration={traefikWidget.configuration} />

apps/docs/docs/widgets/traefik/index.ts

@@ -0,0 +1,31 @@
+import { WidgetDefinition } from "@site/src/types";
+import { IconRoute } from "@tabler/icons-react";
+
+export const traefikWidget: WidgetDefinition = {
+  icon: IconRoute,
+  name: "Traefik",
+  description: "Overview of Traefik routers, services, middlewares, and entry points.",
+  path: "../../widgets/traefik",
+  configuration: {
+    items: [
+      {
+        name: "Show TCP",
+        description: "Display TCP routers, services, and middlewares.",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+      {
+        name: "Show UDP",
+        description: "Display UDP routers and services.",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+      {
+        name: "Show entry points",
+        description: "Display the configured Traefik entry point names.",
+        values: { type: "boolean" },
+        defaultValue: "yes",
+      },
+    ],
+  },
+};

apps/docs/docsearch.config.js

@@ -1,18 +1,25 @@
 // Algolia DocSearch crawler for homarr.dev
 // Crawler ID: cd77a285-2756-4557-bf21-ee703748df15
-// DocSearch-managed crawlers: paste this in the Algolia crawler editor or send to DocSearch support.
-// Template: https://docsearch.algolia.com/docs/templates/#docusaurus-v3-template
-// Markdown indexing: https://www.algolia.com/doc/guides/algolia-ai/askai/guides/markdown-indexing
+// Paste this in the Algolia crawler editor.
 
 new Crawler({
   appId: "N69WSPZTID",
   apiKey: "YOUR_CRAWLER_ADMIN_API_KEY",
-  rateLimit: 8,
-  maxDepth: 10,
+  indexPrefix: "",
+  rateLimit: 32,
+  maxDepth: 4,
   startUrls: ["https://homarr.dev/"],
   sitemaps: ["https://homarr.dev/sitemap.xml"],
   ignoreCanonicalTo: true,
   discoveryPatterns: ["https://homarr.dev/**"],
+  exclusionPatterns: [
+    "https://homarr.dev/docs/tags/**",
+    "https://homarr.dev/blog/tags/**",
+    "https://homarr.dev/blog/authors/**",
+    "https://homarr.dev/blog/archive/**",
+    "https://homarr.dev/search/**",
+    "https://homarr.dev/docs/category/**",
+  ],
   actions: [
     {
       indexName: "Docusaurus",
@@ -105,7 +112,6 @@ new Crawler({
       advancedSyntax: true,
       attributeCriteriaComputedByMinProximity: true,
       removeWordsIfNoResults: "allOptional",
-      separatorsToIndex: "_",
     },
     markdown: {
       attributesForFaceting: ["lang", "language", "version", "docusaurus_tag"],
@@ -119,4 +125,10 @@ new Crawler({
       advancedSyntax: false,
     },
   },
+  apiKey: "YOUR_CRAWLER_ADMIN_API_KEY",
+  schedule: "on saturday",
+  renderJavaScript: false,
+  maxUrls: null,
+  cache: { enabled: false },
+  safetyChecks: { beforeIndexPublishing: { maxLostRecordsPercentage: 99 } },
 });

apps/docs/docusaurus.config.ts

@@ -8,7 +8,7 @@ const config: Config = {
   tagline: "A simple yet powerful dashboard for your server.",
   url: "https://homarr.dev",
   baseUrl: "/",
-  trailingSlash: true,
+  trailingSlash: undefined,
   favicon: "img/logo.png",
   organizationName: "homarr-labs",
   projectName: "homarr",
@@ -79,8 +79,27 @@ const config: Config = {
         sitemap: {
           changefreq: "weekly",
           priority: 0.5,
-          ignorePatterns: ["/tags/**"],
+          ignorePatterns: ["/tags/**", "/docs/category/**"],
           filename: "sitemap.xml",
+          createSitemapItems: async ({ routes, siteConfig, defaultCreateSitemapItems }) => {
+            const items = await defaultCreateSitemapItems({ routes, siteConfig });
+            return items.map((item) => {
+              const path = new URL(item.url).pathname;
+              if (path === "/" || path === "") {
+                return { ...item, priority: 1.0, changefreq: "weekly" };
+              }
+              if (path.startsWith("/docs/")) {
+                return { ...item, priority: 0.7, changefreq: "monthly" };
+              }
+              if (path.startsWith("/blog/")) {
+                return { ...item, priority: 0.3, changefreq: "never" };
+              }
+              if (path.startsWith("/about-us")) {
+                return { ...item, priority: 0.4, changefreq: "yearly" };
+              }
+              return item;
+            });
+          },
         },
       } satisfies Preset.Options,
     ],

apps/docs/static/api/open-api-schema.json

@@ -1 +1 @@
-{"openapi":"3.1.0","info":{"title":"Homarr API documentation","version":"1.0.0"},"servers":[{"url":"http://localhost:3000"}],"externalDocs":{"url":"https://homarr.dev"},"paths":{"/api/apps/paginated":{"get":{"operationId":"appRouter-getPaginated","tags":["apps"],"security":[{"apikey":[]}],"parameters":[{"in":"query","name":"search","schema":{"type":"string"}},{"in":"query","name":"pageSize","schema":{"default":10,"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991}},{"in":"query","name":"page","schema":{"default":1,"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991}}],"responses":{"200":{"description":"Successful response","content":{"application/json":{"schema":{"type":"object","properties":{"items":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"iconUrl":{"type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}]},"pingUrl":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["id","name","description","iconUrl","href","pingUrl"],"additionalProperties":false}},"totalCount":{"type":"number"}},"required":["items","totalCount"],"additionalProperties":false}}}},"400":{"description":"Invalid input data","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.BAD_REQUEST"}}}},"401":{"description":"Authorization not provided","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.UNAUTHORIZED"}}}},"403":{"description":"Insufficient access","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.FORBIDDEN"}}}},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.NOT_FOUND"}}}},"500":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.INTERNAL_SERVER_ERROR"}}}}}}},"/api/apps":{"get":{"operationId":"appRouter-all","tags":["apps"],"security":[{"apikey":[]}],"responses":{"200":{"description":"Successful response","content":{"application/json":{"schema":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"iconUrl":{"type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}]},"pingUrl":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["id","name","description","iconUrl","href","pingUrl"],"additionalProperties":false}}}}},"401":{"description":"Authorization not provided","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.UNAUTHORIZED"}}}},"403":{"description":"Insufficient access","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.FORBIDDEN"}}}},"500":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.INTERNAL_SERVER_ERROR"}}}}}},"post":{"operationId":"appRouter-create","tags":["apps"],"security":[{"apikey":[]}],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"name":{"type":"string","minLength":1,"maxLength":64},"description":{"anyOf":[{"type":"string","maxLength":512},{"type":"null"}]},"iconUrl":{"type":"string","minLength":1},"href":{"anyOf":[{"anyOf":[{"type":"string","pattern":"^(?!javascript)[a-zA-Z]*:\\/\\/"},{"type":"string","const":""}]},{"type":"null"}]},"pingUrl":{"anyOf":[{"anyOf":[{"type":"string","pattern":"^https?:\\/\\/"},{"type":"string","const":""}]},{"type":"null"}]}},"required":["name","description","iconUrl","href","pingUrl"]}}}},"responses":{"200":{"description":"Successful response","content":{"application/json":{"schema":{"allOf":[{"type":"object","properties":{"appId":{"type":"string"}},"required":["appId"],"additionalProperties":false},{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"iconUrl":{"type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}]},"pingUrl":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["id","name","description","iconUrl","href","pingUrl"],"additionalProperties":false}]}}}},"400":{"description":"Invalid input data","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.BAD_REQUEST"}}}},"401":{"description":"Authorization not provided","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.UNAUTHORIZED"}}}},"403":{"description":"Insufficient access","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.FORBIDDEN"}}}},"500":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.INTERNAL_SERVER_ERROR"}}}}}}},"/api/apps/search":{"get":{"operationId":"appRouter-search","tags":["apps"],"security":[{"apikey":[]}],"parameters":[{"in":"query","name":"query","schema":{"type":"string"},"required":true},{"in":"queLine truncated
+{"openapi":"3.1.0","info":{"title":"Homarr API documentation","version":"1.1.0"},"servers":[{"url":"http://localhost:3000"}],"externalDocs":{"url":"https://homarr.dev"},"paths":{"/api/apps/paginated":{"get":{"operationId":"appRouter-getPaginated","tags":["apps"],"security":[{"apikey":[]}],"parameters":[{"in":"query","name":"search","schema":{"type":"string"}},{"in":"query","name":"pageSize","schema":{"default":10,"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991}},{"in":"query","name":"page","schema":{"default":1,"type":"integer","exclusiveMinimum":0,"maximum":9007199254740991}}],"responses":{"200":{"description":"Successful response","content":{"application/json":{"schema":{"type":"object","properties":{"items":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"iconUrl":{"type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}]},"pingUrl":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["id","name","description","iconUrl","href","pingUrl"],"additionalProperties":false}},"totalCount":{"type":"number"}},"required":["items","totalCount"],"additionalProperties":false}}}},"400":{"description":"Invalid input data","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.BAD_REQUEST"}}}},"401":{"description":"Authorization not provided","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.UNAUTHORIZED"}}}},"403":{"description":"Insufficient access","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.FORBIDDEN"}}}},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.NOT_FOUND"}}}},"500":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.INTERNAL_SERVER_ERROR"}}}}}}},"/api/apps":{"get":{"operationId":"appRouter-all","tags":["apps"],"security":[{"apikey":[]}],"responses":{"200":{"description":"Successful response","content":{"application/json":{"schema":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"iconUrl":{"type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}]},"pingUrl":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["id","name","description","iconUrl","href","pingUrl"],"additionalProperties":false}}}}},"401":{"description":"Authorization not provided","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.UNAUTHORIZED"}}}},"403":{"description":"Insufficient access","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.FORBIDDEN"}}}},"500":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.INTERNAL_SERVER_ERROR"}}}}}},"post":{"operationId":"appRouter-create","tags":["apps"],"security":[{"apikey":[]}],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"name":{"type":"string","minLength":1,"maxLength":64},"description":{"anyOf":[{"type":"string","maxLength":512},{"type":"null"}]},"iconUrl":{"type":"string","minLength":1},"href":{"anyOf":[{"anyOf":[{"type":"string","pattern":"^(?!javascript)[a-zA-Z]*:\\/\\/"},{"type":"string","const":""}]},{"type":"null"}]},"pingUrl":{"anyOf":[{"anyOf":[{"type":"string","pattern":"^https?:\\/\\/"},{"type":"string","const":""}]},{"type":"null"}]}},"required":["name","description","iconUrl","href","pingUrl"]}}}},"responses":{"200":{"description":"Successful response","content":{"application/json":{"schema":{"allOf":[{"type":"object","properties":{"appId":{"type":"string"}},"required":["appId"],"additionalProperties":false},{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"iconUrl":{"type":"string"},"href":{"anyOf":[{"type":"string"},{"type":"null"}]},"pingUrl":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["id","name","description","iconUrl","href","pingUrl"],"additionalProperties":false}]}}}},"400":{"description":"Invalid input data","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.BAD_REQUEST"}}}},"401":{"description":"Authorization not provided","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.UNAUTHORIZED"}}}},"403":{"description":"Insufficient access","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.FORBIDDEN"}}}},"500":{"description":"Internal server error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/error.INTERNAL_SERVER_ERROR"}}}}}}},"/api/apps/search":{"get":{"operationId":"appRouter-search","tags":["apps"],"security":[{"apikey":[]}],"parameters":[{"in":"query","name":"query","schema":{"type":"string"},"required":true},{"in":"queLine truncated

apps/nextjs/src/app/[locale]/boards/(content)/_creator.tsx

@@ -79,14 +79,16 @@ export const createBoardContentPage = <TParams extends Record<string, unknown>>(
       const userId = session?.user.id ?? "anonymous";
 
       return (
-        <HydrationBoundary state={dehydrate(queryClient)}>
-          <IntegrationProvider integrations={integrations}>
-            <Suspense>
-              <QueryCacheHydration userId={userId} boardId={board.id} />
-            </Suspense>
-            <DynamicClientBoard />
-          </IntegrationProvider>
-        </HydrationBoundary>
+        <>
+          <Suspense>
+            <QueryCacheHydration userId={userId} boardId={board.id} />
+          </Suspense>
+          <HydrationBoundary state={dehydrate(queryClient)}>
+            <IntegrationProvider integrations={integrations}>
+              <DynamicClientBoard />
+            </IntegrationProvider>
+          </HydrationBoundary>
+        </>
       );
     },
     generateMetadataAsync: async ({ params }: { params: Promise<TParams> }): Promise<Metadata> => {
@@ -123,9 +125,9 @@ async function QueryCacheHydration({ userId, boardId }: { userId: string; boardI
     const serialized = await getQueryCacheAsync(userId, boardId);
     if (!serialized) return null;
 
-    const persisted = superjson.parse<PersistedClient>(serialized);
-    if (persisted.buster !== queryCacheBuster) return null;
-    if (!persisted?.clientState?.queries?.length) return null;
+    const persisted = superjson.parse<PersistedClient | undefined>(serialized);
+    if (!persisted || persisted.buster !== queryCacheBuster) return null;
+    if (!persisted.clientState?.queries?.length) return null;
 
     return <HydrationBoundary state={persisted.clientState} />;
   } catch (error) {

apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx

@@ -45,7 +45,9 @@ export const BoardContentHeaderActions = () => {
   const [isEditMode] = useEditMode();
   const board = useRequiredBoard();
   const { hasChangeAccess } = useBoardPermissions(board);
-  const { data: demoMode, isLoading } = clientApi.info.isDemoMode.useQuery();
+  // Fall back to read-only if the query has no data (e.g. errored) so we never expose
+  // edit/save/settings UI that would then fail server-side.
+  const { data: demoReadOnly = true, isLoading } = clientApi.info.isDemoReadOnly.useQuery();
 
   if (!hasChangeAccess || isLoading) {
     return <SelectBoardsMenu />;
@@ -55,9 +57,9 @@ export const BoardContentHeaderActions = () => {
     <>
       {isEditMode && <AddMenu />}
 
-      <EditModeMenu demoMode={demoMode ?? false} />
+      <EditModeMenu demoReadOnly={demoReadOnly} />
 
-      {!demoMode && (
+      {!demoReadOnly && (
         <OnboardingTour.Target id="board-settings">
           <HeaderButton href={`/boards/${board.name}/settings`}>
             <IconSettings stroke={1.5} />
@@ -158,7 +160,7 @@ const AddMenu = () => {
   );
 };
 
-const EditModeMenu = ({ demoMode }: { demoMode: boolean }) => {
+const EditModeMenu = ({ demoReadOnly }: { demoReadOnly: boolean }) => {
   const [isEditMode, { open, close }] = useEditMode();
   const board = useRequiredBoard();
   const utils = clientApi.useUtils();
@@ -188,11 +190,11 @@ const EditModeMenu = ({ demoMode }: { demoMode: boolean }) => {
 
   const toggle = useCallback(() => {
     if (isEditMode) {
-      if (demoMode) return discardDemoChanges();
+      if (demoReadOnly) return discardDemoChanges();
       return saveBoard(board);
     }
     open();
-  }, [board, isEditMode, demoMode, saveBoard, open, discardDemoChanges]);
+  }, [board, isEditMode, demoReadOnly, saveBoard, open, discardDemoChanges]);
 
   useHotkeys([[hotkeys.toggleBoardEdit, toggle]]);
   usePreventLeaveWithDirty(isEditMode);

apps/nextjs/src/app/[locale]/layout.tsx

@@ -142,7 +142,7 @@ export default async function Layout(props: {
         <SearchEngineOptimization />
         <CrowdinLiveTranslation locale={locale} />
       </head>
-      <body className={["font-sans", fontSans.variable].join(" ")}>
+      <body className={[fontSans.className, fontSans.variable].join(" ")} suppressHydrationWarning>
         <Analytics enabled={serverSettings.analytics.enableGeneral} />
         <StackedProvider>
           <Notifications pauseResetOnHover="notification" />

apps/nextjs/src/app/[locale]/manage/users/create/_components/create-user-stepper.tsx

@@ -17,6 +17,7 @@ import { showErrorNotification } from "@homarr/notifications";
 import { useI18n, useScopedI18n } from "@homarr/translation/client";
 import { UserAvatar } from "@homarr/ui";
 import { createCustomErrorParams } from "@homarr/validation/form/i18n";
+import { optionalEmailSchema } from "@homarr/validation/email";
 import { userPasswordSchema } from "@homarr/validation/user";
 
 import { GroupSelectModal } from "~/components/access/group-select-modal";
@@ -60,7 +61,7 @@ export const UserCreateStepperComponent = ({ initialGroups }: UserCreateStepperC
   const generalForm = useZodForm(
     z.object({
       username: z.string().min(1),
-      email: z.string().email().or(z.string().length(0).optional()),
+      email: optionalEmailSchema,
     }),
     {
       initialValues: {

apps/nextjs/src/components/access/inherit-access-table.tsx

@@ -30,7 +30,19 @@ export const InheritAccessTable = <TPermission extends string>({
           </TableTr>
         </TableThead>
         <TableTbody>
-          {accessQueryData.inherited.map(({ group, permission }) => {
+          {Array.from(
+            accessQueryData.inherited
+              .reduce((map, entry) => {
+                const existing = map.get(entry.group.id);
+                if (!existing) {
+                  map.set(entry.group.id, entry);
+                } else if (getPermissionsWithChildren([entry.permission]).includes(existing.permission)) {
+                  map.set(entry.group.id, entry);
+                }
+                return map;
+              }, new Map<string, (typeof accessQueryData.inherited)[number]>())
+              .values(),
+          ).map(({ group, permission }) => {
             const entityPermission =
               permission in mapPermissions
                 ? mapPermissions[permission]

apps/nextjs/src/components/board/items/widget-context-menu.tsx

@@ -2,10 +2,10 @@
 
 import type { MutableRefObject, ReactNode } from "react";
 import { useCallback, useEffect, useMemo, useState } from "react";
-import { Group, Menu, Switch, Text } from "@mantine/core";
+import { Group, Loader, Menu, Switch, Text } from "@mantine/core";
 import { IconCopy, IconLayoutKanban, IconRefresh, IconSettings, IconTrash } from "@tabler/icons-react";
 import type { QueryClient } from "@tanstack/react-query";
-import { useQueryClient } from "@tanstack/react-query";
+import { useIsFetching, useQueryClient } from "@tanstack/react-query";
 
 import { clientApi } from "@homarr/api/client";
 import { useSession } from "@homarr/auth/client";
@@ -50,8 +50,9 @@ export const WidgetContextMenu = ({ item, widgetStateRef, children }: WidgetCont
   const queryClient = useQueryClient();
 
   const widgetQueryKey = useMemo(() => [["widget", item.kind]], [item.kind]);
+  const isWidgetFetching = useIsFetching({ queryKey: widgetQueryKey }) > 0;
   const handleRefetch = useCallback(() => {
-    void queryClient.invalidateQueries({ queryKey: widgetQueryKey });
+    void queryClient.refetchQueries({ queryKey: widgetQueryKey, type: "all" });
   }, [queryClient, widgetQueryKey]);
 
   const options = useMemo(
@@ -223,11 +224,15 @@ export const WidgetContextMenu = ({ item, widgetStateRef, children }: WidgetCont
 
         <>
           {(toggleOptions.length > 0 || visibleWidgetActions.length > 0 || isEditMode) && <Menu.Divider />}
-          <Menu.Item closeMenuOnClick leftSection={<IconRefresh size={16} />} onClick={handleRefetch}>
+          <Menu.Item
+            leftSection={isWidgetFetching ? <Loader size={16} /> : <IconRefresh size={16} />}
+            onClick={handleRefetch}
+            disabled={isWidgetFetching}
+          >
             <Group justify="space-between" wrap="nowrap">
               {tMenu("refresh")}
               <Text size="xs" c="dimmed">
-                <WidgetCacheAge queryClient={queryClient} queryKey={widgetQueryKey} />
+                <WidgetCacheAge queryClient={queryClient} queryKey={widgetQueryKey} isFetching={isWidgetFetching} />
               </Text>
             </Group>
           </Menu.Item>
@@ -265,13 +270,24 @@ export const WidgetContextMenu = ({ item, widgetStateRef, children }: WidgetCont
   );
 };
 
-const WidgetCacheAge = ({ queryClient, queryKey }: { queryClient: QueryClient; queryKey: unknown[] }) => {
+const WidgetCacheAge = ({
+  queryClient,
+  queryKey,
+  isFetching,
+}: {
+  queryClient: QueryClient;
+  queryKey: unknown[];
+  isFetching: boolean;
+}) => {
+  // 1s tick for "just now" → "1s ago" label transition; isFetching prop handles refetch reactivity
   const [, setTick] = useState(0);
   useEffect(() => {
     const id = setInterval(() => setTick((n) => n + 1), 1000);
     return () => clearInterval(id);
   }, []);
 
+  if (isFetching) return <Loader size={12} />;
+
   const timestamps = queryClient
     .getQueryCache()
     .findAll({ queryKey })

deployments/prebuilt-debian/package.json

@@ -6,7 +6,7 @@
   },
   "engines": {
     "node": ">=24.18.0",
-    "pnpm": ">=11.9.0"
+    "pnpm": ">=11.10.0"
   },
-  "packageManager": "pnpm@11.9.0"
+  "packageManager": "pnpm@11.10.0"
 }

docs/README.md

@@ -340,20 +340,27 @@
 </a>
 </td>
 <td align="center">
+<a href="https://homarr.dev/docs/integrations/synology" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/synology.svg" alt="Synology DiskStation" width="90" height="90" />
+  <br/>  
+  <p align="center">Synology<br/>DiskStation</p>
+</a>
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/tdarr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/tdarr.png" alt="Tdarr" width="90" height="90" />
   <br/>  
   <p align="center">Tdarr</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/technitium-dns" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/selfhst/icons/svg/technitium.svg" alt="Technitium DNS" width="90" height="90" />
   <br/>  
   <p align="center">Technitium<br/>DNS</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/tracearr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/tracearr.svg" alt="Tracearr" width="90" height="90" />
   <br/>  
@@ -361,6 +368,13 @@
 </a>
 </td>
 <td align="center">
+<a href="https://homarr.dev/docs/integrations/traefik" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/traefik.svg" alt="Traefik" width="90" height="90" />
+  <br/>  
+  <p align="center">Traefik</p>
+</a>
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/transmission" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/transmission.svg" alt="Transmission" width="90" height="90" />
   <br/>  
@@ -387,8 +401,8 @@
   <br/>  
   <p align="center">Unifi<br/>Controller</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unraid" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg" alt="Unraid" width="90" height="90" />
   <br/>  

package.json

@@ -63,9 +63,9 @@
   },
   "engines": {
     "node": ">=24.18.0",
-    "pnpm": ">=11.9.0"
+    "pnpm": ">=11.10.0"
   },
-  "packageManager": "pnpm@11.9.0",
+  "packageManager": "pnpm@11.10.0",
   "dependencies": {
     "jsonpath-plus": "catalog:"
   }

packages/api/src/env.ts

@@ -6,9 +6,11 @@ export const env = createEnv({
   server: {
     KUBERNETES_SERVICE_ACCOUNT_NAME: z.string().optional(),
     DEMO_MODE: createBooleanSchema(false),
+    DEMO_READ_ONLY: createBooleanSchema(true),
   },
   runtimeEnv: {
     KUBERNETES_SERVICE_ACCOUNT_NAME: process.env.KUBERNETES_SERVICE_ACCOUNT_NAME,
     DEMO_MODE: process.env.DEMO_MODE,
+    DEMO_READ_ONLY: process.env.DEMO_READ_ONLY,
   },
 });

packages/api/src/mcp.ts

@@ -9,6 +9,8 @@ import { iconsRouter } from "./router/icons";
 import { infoRouter } from "./router/info";
 import { integrationRouter } from "./router/integration/integration-router";
 import { inviteRouter } from "./router/invite";
+import { bazarrRouter } from "./router/widgets/bazarr";
+import { serverSettingsRouter } from "./router/serverSettings";
 import { beszelRouter } from "./router/widgets/beszel";
 import { calendarRouter } from "./router/widgets/calendar";
 import { dnsHoleRouter } from "./router/widgets/dns-hole";
@@ -28,6 +30,8 @@ export const mcpRouter = createTRPCRouter({
   info: infoRouter,
   integration: integrationRouter,
   invite: inviteRouter,
+  bazarr: bazarrRouter,
+  serverSettings: serverSettingsRouter,
   beszel: beszelRouter,
   calendar: calendarRouter,
   dnsHole: dnsHoleRouter,

packages/api/src/open-api.ts

@@ -6,6 +6,7 @@ import { appRouter } from "./router/app";
 import { boardRouter } from "./router/board";
 import { infoRouter } from "./router/info";
 import { inviteRouter } from "./router/invite";
+import { serverSettingsRouter } from "./router/serverSettings";
 import { userRouter } from "./router/user";
 import { createTRPCRouter } from "./trpc";
 
@@ -14,13 +15,14 @@ export const openApiRouter = createTRPCRouter({
   boardRouter,
   infoRouter,
   inviteRouter,
+  serverSettingsRouter,
   userRouter,
 });
 
 export const openApiDocument = (base: string) =>
   generateOpenApiDocument(openApiRouter, {
     title: "Homarr API documentation",
-    version: "1.0.0",
+    version: "1.1.0",
     baseUrl: base,
     docsUrl: "https://homarr.dev",
     securitySchemes: {

packages/api/src/router/board.ts

@@ -35,6 +35,7 @@ import {
   everyoneGroup,
   getPermissionsWithChildren,
   getPermissionsWithParents,
+  widgetDefaultSizes,
   widgetKinds,
 } from "@homarr/definitions";
 import { importOldmarrAsync } from "@homarr/old-import";
@@ -330,7 +331,16 @@ export const boardRouter = createTRPCRouter({
     }),
   duplicateBoard: permissionRequiredProcedure
     .requiresPermission("board-create")
+    .meta({
+      openapi: { method: "POST", path: "/api/boards/{id}/duplicate", tags: ["boards"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Duplicate an existing board into a new board. Requires board-create permission and view permission on the source board. REQUIRED: id (source board ID), name (unique name for the new board). Returns { boardId }",
+      },
+    })
     .input(boardDuplicateSchema)
+    .output(z.object({ boardId: z.string() }))
     .mutation(async ({ ctx, input }) => {
       await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "view");
       await noBoardWithSimilarNameAsync(ctx.db, input.name);
@@ -544,33 +554,57 @@ export const boardRouter = createTRPCRouter({
           });
         },
       });
+
+      return { boardId: newBoardId };
     }),
-  renameBoard: protectedProcedure.input(boardRenameSchema).mutation(async ({ ctx, input }) => {
-    await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "full");
+  renameBoard: protectedProcedure
+    .meta({
+      openapi: { method: "PATCH", path: "/api/boards/{id}/name", tags: ["boards"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Rename a board by ID. Requires full permission on the board. REQUIRED: id (board ID), name (new unique board name)",
+      },
+    })
+    .input(boardRenameSchema)
+    .output(z.void())
+    .mutation(async ({ ctx, input }) => {
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "full");
 
-    await noBoardWithSimilarNameAsync(ctx.db, input.name, [input.id]);
+      await noBoardWithSimilarNameAsync(ctx.db, input.name, [input.id]);
 
-    await ctx.db.update(boards).set({ name: input.name }).where(eq(boards.id, input.id));
-  }),
-  changeBoardVisibility: protectedProcedure.input(boardChangeVisibilitySchema).mutation(async ({ ctx, input }) => {
-    await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "full");
-    const boardSettings = await getServerSettingByKeyAsync(ctx.db, "board");
+      await ctx.db.update(boards).set({ name: input.name }).where(eq(boards.id, input.id));
+    }),
+  changeBoardVisibility: protectedProcedure
+    .meta({
+      openapi: { method: "PATCH", path: "/api/boards/{id}/visibility", tags: ["boards"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Change board visibility. Requires full permission on the board. REQUIRED: id (board ID), visibility ('public' or 'private'). Home boards cannot be made private",
+      },
+    })
+    .input(boardChangeVisibilitySchema)
+    .output(z.void())
+    .mutation(async ({ ctx, input }) => {
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "full");
+      const boardSettings = await getServerSettingByKeyAsync(ctx.db, "board");
 
-    if (
-      input.visibility !== "public" &&
-      (boardSettings.homeBoardId === input.id || boardSettings.mobileHomeBoardId === input.id)
-    ) {
-      throw new TRPCError({
-        code: "BAD_REQUEST",
-        message: "Cannot make home board private",
-      });
-    }
+      if (
+        input.visibility !== "public" &&
+        (boardSettings.homeBoardId === input.id || boardSettings.mobileHomeBoardId === input.id)
+      ) {
+        throw new TRPCError({
+          code: "BAD_REQUEST",
+          message: "Cannot make home board private",
+        });
+      }
 
-    await ctx.db
-      .update(boards)
-      .set({ isPublic: input.visibility === "public" })
-      .where(eq(boards.id, input.id));
-  }),
+      await ctx.db
+        .update(boards)
+        .set({ isPublic: input.visibility === "public" })
+        .where(eq(boards.id, input.id));
+    }),
   deleteBoard: protectedProcedure
     .meta({
       openapi: { method: "DELETE", path: "/api/boards/{id}", tags: ["boards"], protect: true },
@@ -587,16 +621,38 @@ export const boardRouter = createTRPCRouter({
 
       await ctx.db.delete(boards).where(eq(boards.id, input.id));
     }),
-  setHomeBoard: protectedProcedure.input(z.object({ id: z.string() })).mutation(async ({ ctx, input }) => {
-    await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "view");
+  setHomeBoard: protectedProcedure
+    .meta({
+      openapi: { method: "PATCH", path: "/api/boards/{id}/home", tags: ["boards"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Set the current user's desktop home board. Requires view permission on the board. REQUIRED: id (board ID)",
+      },
+    })
+    .input(z.object({ id: z.string() }))
+    .output(z.void())
+    .mutation(async ({ ctx, input }) => {
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "view");
 
-    await ctx.db.update(users).set({ homeBoardId: input.id }).where(eq(users.id, ctx.session.user.id));
-  }),
-  setMobileHomeBoard: protectedProcedure.input(z.object({ id: z.string() })).mutation(async ({ ctx, input }) => {
-    await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "view");
+      await ctx.db.update(users).set({ homeBoardId: input.id }).where(eq(users.id, ctx.session.user.id));
+    }),
+  setMobileHomeBoard: protectedProcedure
+    .meta({
+      openapi: { method: "PATCH", path: "/api/boards/{id}/mobile-home", tags: ["boards"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Set the current user's mobile home board. Requires view permission on the board. REQUIRED: id (board ID)",
+      },
+    })
+    .input(z.object({ id: z.string() }))
+    .output(z.void())
+    .mutation(async ({ ctx, input }) => {
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "view");
 
-    await ctx.db.update(users).set({ mobileHomeBoardId: input.id }).where(eq(users.id, ctx.session.user.id));
-  }),
+      await ctx.db.update(users).set({ mobileHomeBoardId: input.id }).where(eq(users.id, ctx.session.user.id));
+    }),
   getHomeBoard: publicProcedure.query(async ({ ctx }) => {
     const userId = ctx.session?.user.id;
     const user = userId
@@ -752,7 +808,16 @@ export const boardRouter = createTRPCRouter({
     }
   }),
   savePartialBoardSettings: protectedProcedure
-    .input(boardSavePartialSettingsSchema.and(z.object({ id: z.string() })))
+    .meta({
+      openapi: { method: "PATCH", path: "/api/boards/{id}/settings", tags: ["boards"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Update visual and behavior settings for a board. Requires modify permission. REQUIRED: id (board ID). Optional fields include pageTitle, metaTitle, logoImageUrl, faviconImageUrl, backgroundImageUrl, colors, opacity, customCss, itemRadius, and disableStatus",
+      },
+    })
+    .input(boardSavePartialSettingsSchema.extend({ id: z.string() }))
+    .output(z.void())
     .mutation(async ({ ctx, input }) => {
       await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "modify");
 
@@ -1438,21 +1503,33 @@ export const boardRouter = createTRPCRouter({
           }
         }
 
+        const defaultSize = widgetDefaultSizes[input.kind as WidgetKind] ?? { width: 1, height: 1 };
+
+        const fitsAt = (x: number, y: number) => {
+          if (x + defaultSize.width > layout.columnCount) return false;
+          for (let dy = 0; dy < defaultSize.height; dy++) {
+            const row = occupied[y + dy];
+            if (!row) continue;
+            for (let dx = 0; dx < defaultSize.width; dx++) {
+              if (row[x + dx]) return false;
+            }
+          }
+          return true;
+        };
+
         let placed = false;
         for (let y = 0; y < 9999 && !placed; y++) {
           if (!occupied[y]) occupied.push(Array.from<boolean>({ length: layout.columnCount }).fill(false));
-          const occupiedRow = occupied[y];
-          if (!occupiedRow) continue;
           for (let x = 0; x < layout.columnCount && !placed; x++) {
-            if (!occupiedRow[x]) {
+            if (fitsAt(x, y)) {
               layoutRows.push({
                 itemId,
                 sectionId: emptySection.id,
                 layoutId: layout.id,
                 xOffset: x,
                 yOffset: y,
-                width: 1,
-                height: 1,
+                width: defaultSize.width,
+                height: defaultSize.height,
               });
               placed = true;
             }

packages/api/src/router/info.ts

@@ -1,7 +1,7 @@
 import z from "zod/v4";
 
 import packageJson from "../../../../package.json";
-import { createTRPCRouter, isDemoMode, publicProcedure, protectedProcedure } from "../trpc";
+import { createTRPCRouter, isDemoMode, isDemoReadOnly, publicProcedure, protectedProcedure } from "../trpc";
 
 export const infoRouter = createTRPCRouter({
   getInfo: protectedProcedure
@@ -20,4 +20,5 @@ export const infoRouter = createTRPCRouter({
       };
     }),
   isDemoMode: publicProcedure.query(() => isDemoMode),
+  isDemoReadOnly: publicProcedure.query(() => isDemoReadOnly),
 });

packages/api/src/router/serverSettings.ts

@@ -1,6 +1,14 @@
+import { TRPCError } from "@trpc/server";
 import { z } from "zod/v4";
 
-import { getServerSettingByKeyAsync, getServerSettingsAsync, updateServerSettingByKeyAsync } from "@homarr/db/queries";
+import { and, eq, inArray } from "@homarr/db";
+import {
+  getServerSettingByKeyAsync,
+  getServerSettingsAsync,
+  insertServerSettingByKeyAsync,
+  updateServerSettingByKeyAsync,
+} from "@homarr/db/queries";
+import { boards, serverSettings } from "@homarr/db/schema";
 import type { ServerSettings } from "@homarr/server-settings";
 import { defaultServerSettingsKeys } from "@homarr/server-settings";
 import { settingsInitSchema } from "@homarr/validation/settings";
@@ -8,6 +16,15 @@ import { settingsInitSchema } from "@homarr/validation/settings";
 import { createTRPCRouter, onboardingProcedure, permissionRequiredProcedure, publicProcedure } from "../trpc";
 import { nextOnboardingStepAsync } from "./onboard/onboard-queries";
 
+const boardServerSettingsSchema = z.object({
+  homeBoardId: z.string().nullable(),
+  mobileHomeBoardId: z.string().nullable(),
+  enableStatusByDefault: z.boolean(),
+  forceDisableStatus: z.boolean(),
+}) satisfies z.ZodType<ServerSettings["board"]>;
+
+const boardServerSettingsUpdateSchema = boardServerSettingsSchema.partial();
+
 export const serverSettingsRouter = createTRPCRouter({
   getCulture: publicProcedure.query(async ({ ctx }) => {
     return await getServerSettingByKeyAsync(ctx.db, "culture");
@@ -15,6 +32,67 @@ export const serverSettingsRouter = createTRPCRouter({
   getAll: permissionRequiredProcedure.requiresPermission("admin").query(async ({ ctx }) => {
     return await getServerSettingsAsync(ctx.db);
   }),
+  getBoardSettings: permissionRequiredProcedure
+    .requiresPermission("admin")
+    .meta({
+      openapi: { method: "GET", path: "/api/settings/board", tags: ["settings"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Get global board defaults, including desktop/mobile home board IDs and status behavior. Requires admin permission",
+      },
+    })
+    .input(z.void())
+    .output(boardServerSettingsSchema)
+    .query(async ({ ctx }) => {
+      return await getServerSettingByKeyAsync(ctx.db, "board");
+    }),
+  updateBoardSettings: permissionRequiredProcedure
+    .requiresPermission("admin")
+    .meta({
+      openapi: { method: "PATCH", path: "/api/settings/board", tags: ["settings"], protect: true },
+      mcp: {
+        enabled: true,
+        description:
+          "Update global board defaults. Requires admin permission. Optional fields: homeBoardId, mobileHomeBoardId, enableStatusByDefault, forceDisableStatus. Home board IDs must reference public boards or be null",
+      },
+    })
+    .input(boardServerSettingsUpdateSchema)
+    .output(boardServerSettingsSchema)
+    .mutation(async ({ ctx, input }) => {
+      const inputBoardIds = [input.homeBoardId, input.mobileHomeBoardId].filter(
+        (id) => id !== undefined && id !== null,
+      );
+
+      if (inputBoardIds.length > 0) {
+        const publicBoards = await ctx.db.query.boards.findMany({
+          columns: { id: true },
+          where: and(inArray(boards.id, inputBoardIds), eq(boards.isPublic, true)),
+        });
+        const publicBoardIds = new Set(publicBoards.map((board) => board.id));
+        const invalidBoardIds = inputBoardIds.filter((id) => !publicBoardIds.has(id));
+        if (invalidBoardIds.length > 0) {
+          throw new TRPCError({
+            code: "BAD_REQUEST",
+            message: `Board settings home board IDs must reference public boards: ${invalidBoardIds.join(", ")}`,
+          });
+        }
+      }
+
+      const current = await getServerSettingByKeyAsync(ctx.db, "board");
+      const next = { ...current, ...input };
+      const existing = await ctx.db.query.serverSettings.findFirst({
+        where: eq(serverSettings.settingKey, "board"),
+      });
+
+      if (existing) {
+        await updateServerSettingByKeyAsync(ctx.db, "board", next);
+      } else {
+        await insertServerSettingByKeyAsync(ctx.db, "board", next);
+      }
+
+      return next;
+    }),
   saveSettings: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(

packages/api/src/router/test/serverSettings.spec.ts

@@ -1,9 +1,9 @@
-import SuperJSON from "superjson";
+import { stringify } from "superjson";
 import { describe, expect, test, vi } from "vitest";
 
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
-import { serverSettings } from "@homarr/db/schema";
+import { boards, serverSettings } from "@homarr/db/schema";
 import { createDb } from "@homarr/db/test";
 import { defaultServerSettings, defaultServerSettingsKeys } from "@homarr/server-settings";
 
@@ -33,7 +33,7 @@ describe("getAll server settings", () => {
     await db.insert(serverSettings).values([
       {
         settingKey: defaultServerSettingsKeys[0],
-        value: SuperJSON.stringify(defaultServerSettings.analytics),
+        value: stringify(defaultServerSettings.analytics),
       },
     ]);
 
@@ -67,7 +67,7 @@ describe("saveSettings", () => {
     await db.insert(serverSettings).values([
       {
         settingKey: defaultServerSettingsKeys[0],
-        value: SuperJSON.stringify(defaultServerSettings.analytics),
+        value: stringify(defaultServerSettings.analytics),
       },
     ]);
 
@@ -82,7 +82,7 @@ describe("saveSettings", () => {
     expect(dbSettings).toStrictEqual([
       {
         settingKey: "analytics",
-        value: SuperJSON.stringify({
+        value: stringify({
           enableGeneral: true,
           instanceId: null,
         }),
@@ -90,3 +90,91 @@ describe("saveSettings", () => {
     ]);
   });
 });
+
+describe("board settings API", () => {
+  test("getBoardSettings should return board defaults", async () => {
+    const db = createDb();
+    const caller = serverSettingsRouter.createCaller({
+      db,
+      deviceType: undefined,
+      session: defaultSession,
+    });
+
+    await expect(caller.getBoardSettings()).resolves.toStrictEqual(defaultServerSettings.board);
+  });
+
+  test("updateBoardSettings should insert settings when defaults are not persisted", async () => {
+    const db = createDb();
+    const caller = serverSettingsRouter.createCaller({
+      db,
+      deviceType: undefined,
+      session: defaultSession,
+    });
+    const boardId = createId();
+    await db.insert(boards).values({ id: boardId, name: "default", isPublic: true });
+
+    const result = await caller.updateBoardSettings({
+      homeBoardId: boardId,
+      forceDisableStatus: true,
+    });
+
+    expect(result).toStrictEqual({
+      ...defaultServerSettings.board,
+      homeBoardId: boardId,
+      forceDisableStatus: true,
+    });
+    const dbSettings = await db.select().from(serverSettings);
+    expect(dbSettings).toStrictEqual([
+      {
+        settingKey: "board",
+        value: stringify(result),
+      },
+    ]);
+  });
+
+  test("updateBoardSettings should update existing settings", async () => {
+    const db = createDb();
+    const caller = serverSettingsRouter.createCaller({
+      db,
+      deviceType: undefined,
+      session: defaultSession,
+    });
+    const boardId = createId();
+    await db.insert(boards).values({ id: boardId, name: "default", isPublic: true });
+
+    await caller.updateBoardSettings({ homeBoardId: boardId });
+    const result = await caller.updateBoardSettings({
+      mobileHomeBoardId: boardId,
+      enableStatusByDefault: false,
+    });
+
+    expect(result).toStrictEqual({
+      ...defaultServerSettings.board,
+      homeBoardId: boardId,
+      mobileHomeBoardId: boardId,
+      enableStatusByDefault: false,
+    });
+    const dbSettings = await db.select().from(serverSettings);
+    expect(dbSettings).toStrictEqual([
+      {
+        settingKey: "board",
+        value: stringify(result),
+      },
+    ]);
+  });
+
+  test("updateBoardSettings should reject private home boards", async () => {
+    const db = createDb();
+    const caller = serverSettingsRouter.createCaller({
+      db,
+      deviceType: undefined,
+      session: defaultSession,
+    });
+    const boardId = createId();
+    await db.insert(boards).values({ id: boardId, name: "private", isPublic: false });
+
+    const actAsync = async () => await caller.updateBoardSettings({ homeBoardId: boardId });
+
+    await expect(actAsync()).rejects.toThrow("must reference public boards");
+  });
+});

packages/api/src/router/widgets/bazarr.ts

@@ -0,0 +1,21 @@
+import { bazarrBadgesRequestHandler } from "@homarr/request-handler/bazarr";
+
+import { createOneIntegrationMiddleware } from "../../middlewares/integration";
+import { createTRPCRouter, publicProcedure } from "../../trpc";
+
+export const bazarrRouter = createTRPCRouter({
+  getBadges: publicProcedure
+    .meta({
+      mcp: {
+        enabled: true,
+        description:
+          "Get missing subtitle counts, provider issues, and health warnings for a Bazarr integration. REQUIRED: integrationId from integration_all",
+      },
+    })
+    .concat(createOneIntegrationMiddleware("query", "bazarr"))
+    .query(async ({ ctx }) => {
+      const innerHandler = bazarrBadgesRequestHandler.handler(ctx.integration, {});
+      const data = await innerHandler.getDataAsync();
+      return data.data;
+    }),
+});

packages/api/src/router/widgets/beszel.ts

@@ -1,18 +1,24 @@
 import { TRPCError } from "@trpc/server";
+import { observable } from "@trpc/server/observable";
 import { z } from "zod/v4";
 
 import { createLogger } from "@homarr/core/infrastructure/logs";
+import { createIntegrationAsync } from "@homarr/integrations";
+import type { LiveStatsEvent } from "@homarr/integrations/types";
 import {
   beszelAlertsRequestHandler,
   beszelStatsRequestHandler,
   beszelSystemsRequestHandler,
 } from "@homarr/request-handler/beszel";
 
+import { settleIntegrationQueries } from "../../settle-integrations";
 import { createManyIntegrationMiddleware } from "../../middlewares/integration";
 import { createTRPCRouter, publicProcedure } from "../../trpc";
 
 const logger = createLogger({ module: "beszelRouter" });
 
+const errorMessage = (error: unknown) => (error instanceof Error ? error.message : String(error));
+
 export const beszelRouter = createTRPCRouter({
   getSystems: publicProcedure
     .meta({
@@ -26,8 +32,9 @@ export const beszelRouter = createTRPCRouter({
     .query(async ({ ctx }) => {
       const integrationIds = ctx.integrations.map((i) => i.id);
       logger.debug("getSystems called", { userId: ctx.session?.user?.id, integrationIds });
-      const settled = await Promise.allSettled(
-        ctx.integrations.map(async (integration) => {
+      const results = await settleIntegrationQueries(
+        ctx.integrations,
+        async (integration) => {
           const innerHandler = beszelSystemsRequestHandler.handler(integration, {});
           const { data, timestamp } = await innerHandler.getDataAsync();
           return {
@@ -37,25 +44,18 @@ export const beszelRouter = createTRPCRouter({
             systems: data,
             updatedAt: timestamp,
           };
-        }),
+        },
+        {
+          fallback: (integration, error) => ({
+            integrationId: integration.id,
+            integrationName: integration.name,
+            integrationUrl: integration.url,
+            systems: [],
+            updatedAt: new Date(0),
+            error: errorMessage(error),
+          }),
+        },
       );
-      const results = settled.map((result, index) => {
-        if (result.status === "fulfilled") return result.value;
-        const integration = ctx.integrations[index];
-        logger.warn("getSystems integration failed", {
-          userId: ctx.session?.user?.id,
-          integrationId: integration?.id,
-          error: result.reason,
-        });
-        return {
-          integrationId: integration?.id ?? "unknown",
-          integrationName: integration?.name ?? "unknown",
-          integrationUrl: integration?.url ?? "",
-          systems: [],
-          updatedAt: new Date(0),
-          error: result.reason instanceof Error ? result.reason.message : String(result.reason),
-        };
-      });
       logger.debug("getSystems completed", {
         userId: ctx.session?.user?.id,
         integrationIds,
@@ -88,8 +88,9 @@ export const beszelRouter = createTRPCRouter({
         includeHistory: input.includeHistory,
         maxHistoryItems: input.maxHistoryItems,
       });
-      const settled = await Promise.allSettled(
-        ctx.integrations.map(async (integration) => {
+      const results = await settleIntegrationQueries(
+        ctx.integrations,
+        async (integration) => {
           const alertsHandler = beszelAlertsRequestHandler.handler(integration, {
             includeHistory: input.includeHistory,
             maxHistoryItems: input.maxHistoryItems,
@@ -115,26 +116,19 @@ export const beszelRouter = createTRPCRouter({
             systemNameMap,
             updatedAt: alertsResult.timestamp,
           };
-        }),
+        },
+        {
+          fallback: (integration, error) => ({
+            integrationId: integration.id,
+            integrationName: integration.name,
+            alerts: [],
+            history: [],
+            systemNameMap: {},
+            updatedAt: new Date(0),
+            error: errorMessage(error),
+          }),
+        },
       );
-      const results = settled.map((result, index) => {
-        if (result.status === "fulfilled") return result.value;
-        const integration = ctx.integrations[index];
-        logger.warn("getAlerts integration failed", {
-          userId: ctx.session?.user?.id,
-          integrationId: integration?.id,
-          error: result.reason,
-        });
-        return {
-          integrationId: integration?.id ?? "unknown",
-          integrationName: integration?.name ?? "unknown",
-          alerts: [],
-          history: [],
-          systemNameMap: {},
-          updatedAt: new Date(0),
-          error: result.reason instanceof Error ? result.reason.message : String(result.reason),
-        };
-      });
       logger.debug("getAlerts completed", {
         userId: ctx.session?.user?.id,
         integrationIds,
@@ -197,8 +191,72 @@ export const beszelRouter = createTRPCRouter({
           systemStats: [],
           containerStats: [],
           updatedAt: new Date(0),
-          error: error instanceof Error ? error.message : String(error),
+          error: errorMessage(error),
         };
       }
     }),
+
+  subscribeSystemStats: publicProcedure
+    .concat(createManyIntegrationMiddleware("query", "beszel", "mock"))
+    .input(
+      z.object({
+        systemId: z.string(),
+      }),
+    )
+    .subscription(({ ctx, input }) => {
+      return observable<LiveStatsEvent>((emit) => {
+        const controller = new AbortController();
+        let isActive = true;
+
+        void (async () => {
+          const integration = ctx.integrations[0];
+          if (!integration) {
+            emit.error(
+              new TRPCError({ code: "BAD_REQUEST", message: "At least one Beszel integrationId is required" }),
+            );
+            return;
+          }
+
+          try {
+            const instance = await createIntegrationAsync(integration);
+            if (typeof instance.subscribeRealtimeMetrics === "function") {
+              await instance.subscribeRealtimeMetrics(
+                input.systemId,
+                (event) => {
+                  if (isActive) emit.next(event);
+                },
+                controller.signal,
+              );
+            } else {
+              emit.error(
+                new TRPCError({
+                  code: "METHOD_NOT_SUPPORTED",
+                  message: `Integration ${integration.kind} does not support realtime metrics`,
+                }),
+              );
+            }
+          } catch (error) {
+            if (isActive) {
+              emit.error(
+                error instanceof TRPCError
+                  ? error
+                  : new TRPCError({
+                      code: "INTERNAL_SERVER_ERROR",
+                      message: error instanceof Error ? error.message : String(error),
+                    }),
+              );
+            }
+          }
+
+          if (isActive) {
+            emit.complete();
+          }
+        })();
+
+        return () => {
+          isActive = false;
+          controller.abort();
+        };
+      });
+    }),
 });

packages/api/src/router/widgets/downloads.ts

@@ -49,6 +49,7 @@ export const downloadsRouter = createTRPCRouter({
           await integrationInstance.pauseQueueAsync();
         }),
       );
+      downloadClientRequestHandler.invalidateCache();
     }),
   pauseItem: protectedProcedure
     .concat(createDownloadClientIntegrationMiddleware("interact"))
@@ -60,6 +61,7 @@ export const downloadsRouter = createTRPCRouter({
           await integrationInstance.pauseItemAsync(input.item);
         }),
       );
+      downloadClientRequestHandler.invalidateCache();
     }),
   resume: protectedProcedure
     .meta({
@@ -77,6 +79,7 @@ export const downloadsRouter = createTRPCRouter({
           await integrationInstance.resumeQueueAsync();
         }),
       );
+      downloadClientRequestHandler.invalidateCache();
     }),
   resumeItem: protectedProcedure
     .concat(createDownloadClientIntegrationMiddleware("interact"))
@@ -88,6 +91,7 @@ export const downloadsRouter = createTRPCRouter({
           await integrationInstance.resumeItemAsync(input.item);
         }),
       );
+      downloadClientRequestHandler.invalidateCache();
     }),
   deleteItem: protectedProcedure
     .concat(createDownloadClientIntegrationMiddleware("interact"))
@@ -99,5 +103,6 @@ export const downloadsRouter = createTRPCRouter({
           await integrationInstance.deleteItemAsync(input.item, input.fromDisk);
         }),
       );
+      downloadClientRequestHandler.invalidateCache();
     }),
 });

packages/api/src/router/widgets/health-monitoring.ts

@@ -1,21 +1,31 @@
+import { createIntegrationAsync } from "@homarr/integrations";
+import { SynologyIntegration } from "@homarr/integrations";
 import { clusterInfoRequestHandler, systemInfoRequestHandler } from "@homarr/request-handler/health-monitoring";
 
 import { createManyIntegrationMiddleware, createOneIntegrationMiddleware } from "../../middlewares/integration";
 import { settleIntegrationQueries } from "../../settle-integrations";
 import { createTRPCRouter, publicProcedure } from "../../trpc";
 
+const healthMonitoringIntegrationKinds = [
+  "openmediavault",
+  "dashDot",
+  "truenas",
+  "unraid",
+  "glances",
+  "synology",
+  "mock",
+] as const;
+
 export const healthMonitoringRouter = createTRPCRouter({
   getSystemHealthStatus: publicProcedure
     .meta({
       mcp: {
         enabled: true,
         description:
-          "Get system health status (CPU, memory, disk, network) from NAS/server monitoring integrations. REQUIRED: integrationIds (array of TrueNAS/Unraid/Glances/OpenMediaVault/DashDot integration IDs from integration_all)",
+          "Get system health status (CPU, memory, disk, network) from NAS/server monitoring integrations. REQUIRED: integrationIds (array of TrueNAS/Synology/Unraid/Glances/OpenMediaVault/DashDot integration IDs from integration_all)",
       },
     })
-    .concat(
-      createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "glances", "mock"),
-    )
+    .concat(createManyIntegrationMiddleware("query", ...healthMonitoringIntegrationKinds))
     .query(async ({ ctx }) => {
       return await settleIntegrationQueries(ctx.integrations, async (integration) => {
         const { data, timestamp } = await systemInfoRequestHandler.handler(integration, {}).getDataAsync();
@@ -27,6 +37,23 @@ export const healthMonitoringRouter = createTRPCRouter({
         };
       });
     }),
+  listStorageVolumes: publicProcedure
+    .meta({
+      mcp: {
+        enabled: true,
+        description:
+          "List storage volumes from a Synology DiskStation integration for widget configuration. REQUIRED: integrationId from integration_all (Synology integration only)",
+      },
+    })
+    .concat(createOneIntegrationMiddleware("query", "synology"))
+    .query(async ({ ctx }) => {
+      const integrationInstance = await createIntegrationAsync(ctx.integration);
+      if (!(integrationInstance instanceof SynologyIntegration)) {
+        throw new Error("Expected Synology integration");
+      }
+
+      return await integrationInstance.listStorageVolumesAsync();
+    }),
   getClusterHealthStatus: publicProcedure
     .meta({
       mcp: {

packages/api/src/router/widgets/index.ts

@@ -9,6 +9,7 @@ export const widgetRouter = createTRPCRouter({
   coolify: lazy(() => import("./coolify").then((mod) => mod.coolifyRouter)),
   immich: lazy(() => import("./immich").then((mod) => mod.immichRouter)),
   paperlessNgx: lazy(() => import("./paperless-ngx").then((mod) => mod.paperlessNgxRouter)),
+  bazarr: lazy(() => import("./bazarr").then((mod) => mod.bazarrRouter)),
   notebook: lazy(() => import("./notebook").then((mod) => mod.notebookRouter)),
   weather: lazy(() => import("./weather").then((mod) => mod.weatherRouter)),
   app: lazy(() => import("./app").then((mod) => mod.appRouter)),
@@ -20,6 +21,7 @@ export const widgetRouter = createTRPCRouter({
   calendar: lazy(() => import("./calendar").then((mod) => mod.calendarRouter)),
   downloads: lazy(() => import("./downloads").then((mod) => mod.downloadsRouter)),
   mediaRequests: lazy(() => import("./media-requests").then((mod) => mod.mediaRequestsRouter)),
+  mediaOrganizer: lazy(() => import("./media-organizer").then((mod) => mod.mediaOrganizerRouter)),
   rssFeed: lazy(() => import("./rssFeed").then((mod) => mod.rssFeedRouter)),
   indexerManager: lazy(() => import("./indexer-manager").then((mod) => mod.indexerManagerRouter)),
   healthMonitoring: lazy(() => import("./health-monitoring").then((mod) => mod.healthMonitoringRouter)),
@@ -38,6 +40,7 @@ export const widgetRouter = createTRPCRouter({
   umami: lazy(() => import("./umami").then((mod) => mod.umamiRouter)),
   vpn: lazy(() => import("./vpn").then((mod) => mod.vpnRouter)),
   ups: lazy(() => import("./ups").then((mod) => mod.upsRouter)),
+  traefik: lazy(() => import("./traefik").then((mod) => mod.traefikRouter)),
   customApi: lazy(() => import("./custom-api").then((mod) => mod.customApiRouter)),
   secrets: lazy(() => import("./widget-secrets").then((mod) => mod.widgetSecretsRouter)),
 });

packages/api/src/router/widgets/media-organizer.ts

@@ -0,0 +1,33 @@
+import { z } from "zod/v4";
+
+import { getIntegrationKindsByCategory } from "@homarr/definitions";
+import { mediaOrganizerRequestHandler } from "@homarr/request-handler/media-organizer";
+
+import { createManyIntegrationMiddleware } from "../../middlewares/integration";
+import { createTRPCRouter, publicProcedure } from "../../trpc";
+
+export const mediaOrganizerRouter = createTRPCRouter({
+  getData: publicProcedure
+    .meta({
+      mcp: {
+        enabled: true,
+        description:
+          "Get missing and queued movies/episodes from Radarr and Sonarr. Requires query (use) access to each integration. REQUIRED: integrationIds (array of Radarr/Sonarr integration IDs from integration_all). OPTIONAL: pageSize (1-50, default 10)",
+      },
+    })
+    .concat(createManyIntegrationMiddleware("query", ...getIntegrationKindsByCategory("mediaOrganizer")))
+    .input(z.object({ pageSize: z.number().min(1).max(50).default(10) }))
+    .query(async ({ ctx, input }) => {
+      const results = await Promise.all(
+        ctx.integrations.map(async (integration) => {
+          const innerHandler = mediaOrganizerRequestHandler.handler(integration, { pageSize: input.pageSize });
+          const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
+          return {
+            integrationId: integration.id,
+            ...data,
+          };
+        }),
+      );
+      return results;
+    }),
+});

packages/api/src/router/widgets/releases.ts

@@ -45,7 +45,7 @@ export const releasesRouter = createTRPCRouter({
     )
     .query(async ({ ctx, input }) => {
       const tokensByProvider = new Map<string, string>();
-      let allowedRepoIds: Set<string> | null = null;
+      const savedRepos = new Map<string, { providerUrl?: string }>();
 
       if (input.itemId) {
         try {
@@ -54,9 +54,15 @@ export const releasesRouter = createTRPCRouter({
             await throwIfActionForbiddenAsync(ctx, eq(boards.id, item.boardId), "view");
 
             const options = SuperJSON.parse<Record<string, unknown>>(item.options);
-            const repos = options.repositories as Array<{ id?: string }> | undefined;
+            const repos = options.repositories as
+              | Array<{ provider?: string; identifier: string; providerUrl?: string }>
+              | undefined;
             if (repos) {
-              allowedRepoIds = new Set(repos.map((r) => r.id).filter((id): id is string => Boolean(id)));
+              for (const repo of repos) {
+                if (repo.provider && repo.identifier) {
+                  savedRepos.set(`${repo.provider}:${repo.identifier}`, { providerUrl: repo.providerUrl });
+                }
+              }
             }
 
             const secrets = await ctx.db.query.widgetSecrets.findMany({
@@ -78,16 +84,16 @@ export const releasesRouter = createTRPCRouter({
       return await Promise.all(
         input.repositories.map(async (repository) => {
           const repositoryId = repository.id ?? repository.identifier;
+          const savedRepo = savedRepos.get(`${repository.provider}:${repository.identifier}`);
           try {
-            const useToken = allowedRepoIds === null || allowedRepoIds.has(repositoryId);
             const response = await releasesRequestHandler
               .handler({
                 id: repositoryId,
                 provider: repository.provider,
                 identifier: repository.identifier,
                 versionRegex: formatVersionFilterRegex(repository.versionFilter),
-                providerUrl: repository.providerUrl,
-                token: useToken ? tokensByProvider.get(repository.provider) : undefined,
+                providerUrl: savedRepo?.providerUrl ?? repository.providerUrl,
+                token: savedRepo ? tokensByProvider.get(repository.provider) : undefined,
               })
               .getDataAsync();
 

packages/api/src/router/widgets/traefik.ts

@@ -0,0 +1,31 @@
+import { traefikRequestHandler } from "@homarr/request-handler/traefik";
+
+import { createManyIntegrationMiddleware } from "../../middlewares/integration";
+import { settleIntegrationQueries } from "../../settle-integrations";
+import { createTRPCRouter, publicProcedure } from "../../trpc";
+
+export const traefikRouter = createTRPCRouter({
+  getDashboard: publicProcedure
+    .meta({
+      mcp: {
+        enabled: true,
+        description:
+          "Retrieve Traefik dashboard data, including routers, services, middlewares, and entry points, for the given integration IDs.",
+      },
+    })
+    .concat(createManyIntegrationMiddleware("query", "traefik"))
+    .query(async ({ ctx }) => {
+      return await settleIntegrationQueries(ctx.integrations, async (integration) => {
+        const innerHandler = traefikRequestHandler.handler(integration, {});
+        const { data, timestamp } = await innerHandler.getDataAsync();
+
+        return {
+          integrationId: integration.id,
+          integrationName: integration.name,
+          integrationUrl: integration.url,
+          dashboard: data,
+          updatedAt: timestamp,
+        };
+      });
+    }),
+});

packages/api/src/settle-integrations.ts

@@ -9,9 +9,14 @@ interface IntegrationLike {
   kind: string;
 }
 
+interface Options<TIntegration extends IntegrationLike, TResult> {
+  fallback?: (integration: TIntegration, error: unknown) => TResult;
+}
+
 export async function settleIntegrationQueries<TIntegration extends IntegrationLike, TResult>(
   integrations: TIntegration[],
   fn: (integration: TIntegration) => Promise<TResult>,
+  options?: Options<TIntegration, TResult>,
 ): Promise<TResult[]> {
   const settled = await Promise.allSettled(integrations.map(async (integration) => fn(integration)));
   return settled.flatMap((result, index) => {
@@ -24,6 +29,7 @@ export async function settleIntegrationQueries<TIntegration extends IntegrationL
         { cause: result.reason },
       ),
     );
+    if (options?.fallback && integration) return [options.fallback(integration, result.reason)];
     return [];
   });
 }

packages/api/src/test/mcp.spec.ts

@@ -2,16 +2,20 @@ import { expect, test, vi } from "vitest";
 import { extractToolsFromProcedures } from "trpc-to-mcp";
 
 import { appRouter } from "../router/app";
+import { boardRouter } from "../router/board";
 import { infoRouter } from "../router/info";
 import { inviteRouter } from "../router/invite";
+import { serverSettingsRouter } from "../router/serverSettings";
 import { createTRPCRouter } from "../trpc";
 
 vi.mock("@homarr/auth", () => ({}));
 
 const mcpTestRouter = createTRPCRouter({
   app: appRouter,
+  board: boardRouter,
   info: infoRouter,
   invite: inviteRouter,
+  serverSettings: serverSettingsRouter,
 });
 
 test("MCP tools should be extractable from the router", () => {
@@ -28,8 +32,12 @@ test("MCP tools should contain expected procedures", () => {
   expect(toolNames).toContain("app_all");
   expect(toolNames).toContain("app_byId");
   expect(toolNames).toContain("app_create");
+  expect(toolNames).toContain("board_savePartialBoardSettings");
+  expect(toolNames).toContain("board_duplicateBoard");
   expect(toolNames).toContain("info_getInfo");
   expect(toolNames).toContain("invite_getAll");
+  expect(toolNames).toContain("serverSettings_getBoardSettings");
+  expect(toolNames).toContain("serverSettings_updateBoardSettings");
 });
 
 test("MCP tools should have descriptions", () => {

packages/api/src/test/open-api.spec.ts

@@ -14,3 +14,12 @@ test("OpenAPI documentation should be generated", () => {
   // Assert
   expect(act).not.toThrow();
 });
+
+test("OpenAPI documentation should expose board automation endpoints", () => {
+  const document = openApiDocument("https://homarr.dev");
+
+  expect(document.info.version).toBe("1.1.0");
+  expect(document.paths).toHaveProperty("/api/boards/{id}/settings");
+  expect(document.paths).toHaveProperty("/api/boards/{id}/duplicate");
+  expect(document.paths).toHaveProperty("/api/settings/board");
+});

packages/api/src/trpc.ts

@@ -95,8 +95,12 @@ export const createTRPCRouter = t.router;
 
 export const isDemoMode = env.DEMO_MODE;
 
+// The public "real demo" (demo + mock integrations) stays read-only, while preview
+// deployments run with DEMO_MODE + DEMO_READ_ONLY=false to allow mutations.
+export const isDemoReadOnly = env.DEMO_MODE && env.DEMO_READ_ONLY;
+
 const enforceDemoModeReadOnly = t.middleware(({ ctx, next, type }) => {
-  if (env.DEMO_MODE && type === "mutation") {
+  if (isDemoReadOnly && type === "mutation") {
     throw new TRPCError({
       code: "FORBIDDEN",
       message: "Mutations are disabled in demo mode",
@@ -105,7 +109,7 @@ const enforceDemoModeReadOnly = t.middleware(({ ctx, next, type }) => {
   return next({ ctx });
 });
 
-const baseProcedure = env.DEMO_MODE ? t.procedure.use(enforceDemoModeReadOnly) : t.procedure;
+const baseProcedure = isDemoReadOnly ? t.procedure.use(enforceDemoModeReadOnly) : t.procedure;
 
 /**
  * Public (unauthed) procedure

packages/auth/providers/credentials/authorization/ldap-authorization.ts

@@ -1,5 +1,5 @@
 import { CredentialsSignin } from "@auth/core/errors";
-import { z } from "zod/v4";
+import type { z } from "zod/v4";
 
 import { createId } from "@homarr/common";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -7,6 +7,7 @@ import type { Database, InferInsertModel } from "@homarr/db";
 import { and, eq } from "@homarr/db";
 import { users } from "@homarr/db/schema";
 import type { ldapSignInSchema } from "@homarr/validation/user";
+import { utf8EmailSchema } from "@homarr/validation/email";
 
 import { env } from "../../../env";
 import { LdapClient } from "../ldap-client";
@@ -52,8 +53,7 @@ export const authorizeWithLdapCredentialsAsync = async (
     throw new CredentialsSignin(`User not found in LDAP username="${credentials.name}"`);
   }
 
-  // Validate email
-  const mailResult = await z.string().email().safeParseAsync(ldapUser[env.AUTH_LDAP_USER_MAIL_ATTRIBUTE]);
+  const mailResult = await utf8EmailSchema.safeParseAsync(ldapUser[env.AUTH_LDAP_USER_MAIL_ATTRIBUTE]);
 
   if (!mailResult.success) {
     logger.error("User found in LDAP but with invalid or non-existing Email", {

packages/db/migrations/mysql/meta/_journal.json

@@ -295,13 +295,6 @@
       "when": 1780764500000,
       "tag": "0041_merge_custom_widget_url",
       "breakpoints": true
-    },
-    {
-      "idx": 42,
-      "version": "5",
-      "when": 1783176100870,
-      "tag": "0042_add_widget_secret",
-      "breakpoints": true
     }
   ]
 }

packages/db/migrations/postgresql/meta/_journal.json

@@ -57,13 +57,6 @@
       "when": 1780764500000,
       "tag": "0007_merge_custom_widget_url",
       "breakpoints": true
-    },
-    {
-      "idx": 8,
-      "version": "7",
-      "when": 1783176100870,
-      "tag": "0008_add_widget_secret",
-      "breakpoints": true
     }
   ]
 }

packages/db/migrations/sqlite/meta/_journal.json

@@ -281,13 +281,6 @@
       "when": 1780764500000,
       "tag": "0039_merge_custom_widget_url",
       "breakpoints": true
-    },
-    {
-      "idx": 40,
-      "version": "6",
-      "when": 1783176100870,
-      "tag": "0040_add_widget_secret",
-      "breakpoints": true
     }
   ]
 }

packages/definitions/src/docker-integration-match.ts

@@ -33,6 +33,8 @@ const integrationAliases: Partial<Record<IntegrationKind, readonly string[]>> =
   paperlessNgx: ["paperless-ngx", "paperless"],
   coolify: ["coolify"],
   truenas: ["truenas"],
+  bazarr: ["bazarr"],
+  synology: ["synology", "diskstation"],
 };
 
 export const matchIntegrationKind = (search: string): IntegrationKind | null => {

packages/definitions/src/docs/homarr-docs-sitemap.ts

@@ -60,8 +60,8 @@ export type HomarrDocumentationPath =
   | "/docs/tags/connections"
   | "/docs/tags/custom-widgets"
   | "/docs/tags/customization"
-  | "/docs/tags/data-sources"
   | "/docs/tags/data"
+  | "/docs/tags/data-sources"
   | "/docs/tags/database"
   | "/docs/tags/developer"
   | "/docs/tags/development"
@@ -99,8 +99,8 @@ export type HomarrDocumentationPath =
   | "/docs/tags/redis"
   | "/docs/tags/responsive"
   | "/docs/tags/roles"
-  | "/docs/tags/search-engines"
   | "/docs/tags/search"
+  | "/docs/tags/search-engines"
   | "/docs/tags/secrets"
   | "/docs/tags/security"
   | "/docs/tags/self-signed"
@@ -132,15 +132,6 @@ export type HomarrDocumentationPath =
   | "/docs/advanced/running-as-different-user"
   | "/docs/advanced/single-sign-on"
   | "/docs/advanced/styling"
-  | "/docs/category/advanced"
-  | "/docs/category/community"
-  | "/docs/category/developer-guides"
-  | "/docs/category/getting-started"
-  | "/docs/category/installation-1"
-  | "/docs/category/installation"
-  | "/docs/category/integrations"
-  | "/docs/category/management"
-  | "/docs/category/widgets"
   | "/docs/community/donate"
   | "/docs/community/faq"
   | "/docs/community/get-in-touch"
@@ -168,6 +159,7 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/archiveteam-warrior"
   | "/docs/integrations/aria2"
   | "/docs/integrations/audiobookshelf"
+  | "/docs/integrations/bazarr"
   | "/docs/integrations/beszel"
   | "/docs/integrations/coolify"
   | "/docs/integrations/dash-dot"
@@ -192,6 +184,7 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/opnsense"
   | "/docs/integrations/overseerr"
   | "/docs/integrations/paperless-ngx"
+  | "/docs/integrations/patchmon"
   | "/docs/integrations/peanut"
   | "/docs/integrations/pi-hole"
   | "/docs/integrations/plex"
@@ -205,9 +198,11 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/slskd"
   | "/docs/integrations/sonarr"
   | "/docs/integrations/speedtest-tracker"
+  | "/docs/integrations/synology"
   | "/docs/integrations/tdarr"
   | "/docs/integrations/technitium-dns"
   | "/docs/integrations/tracearr"
+  | "/docs/integrations/traefik"
   | "/docs/integrations/transmission"
   | "/docs/integrations/truenas"
   | "/docs/integrations/umami"
@@ -230,6 +225,7 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/anchor-note"
   | "/docs/widgets/app"
   | "/docs/widgets/audio-stats"
+  | "/docs/widgets/bazarr"
   | "/docs/widgets/beszel-alerts"
   | "/docs/widgets/beszel-system-grid"
   | "/docs/widgets/beszel-system-stats"
@@ -249,6 +245,7 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/immich-album-carousel"
   | "/docs/widgets/immich-server-stats"
   | "/docs/widgets/indexer-manager"
+  | "/docs/widgets/media-missing"
   | "/docs/widgets/media-releases"
   | "/docs/widgets/media-request-list"
   | "/docs/widgets/media-request-stats"
@@ -260,15 +257,18 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/notebook"
   | "/docs/widgets/notifications"
   | "/docs/widgets/paperless-ngx"
+  | "/docs/widgets/patchmon"
   | "/docs/widgets/releases"
   | "/docs/widgets/rss-feed"
   | "/docs/widgets/smart-home-entity-state"
   | "/docs/widgets/smart-home-execute-automation"
   | "/docs/widgets/speedtest-tracker"
   | "/docs/widgets/stock-price"
+  | "/docs/widgets/system-disks"
   | "/docs/widgets/system-resources"
   | "/docs/widgets/timetable"
   | "/docs/widgets/tracearr"
+  | "/docs/widgets/traefik"
   | "/docs/widgets/umami"
   | "/docs/widgets/ups"
   | "/docs/widgets/uptime-kuma"
@@ -289,6 +289,7 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/lidarr"
   | "/docs/integrations/readarr"
   | "/docs/integrations/prowlarr"
+  | "/docs/integrations/bazarr"
   | "/docs/integrations/jellyfin"
   | "/docs/integrations/emby"
   | "/docs/integrations/plex"
@@ -312,6 +313,7 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/ical"
   | "/docs/integrations/anchor"
   | "/docs/integrations/truenas"
+  | "/docs/integrations/synology"
   | "/docs/integrations/unraid"
   | "/docs/integrations/coolify"
   | "/docs/integrations/immich"
@@ -325,6 +327,7 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/gluetun"
   | "/docs/integrations/peanut"
   | "/docs/integrations/beszel"
+  | "/docs/integrations/traefik"
   | "/docs/widgets/clock"
   | "/docs/widgets/weather"
   | "/docs/widgets/app"
@@ -343,6 +346,7 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/media-request-list"
   | "/docs/widgets/media-request-stats"
   | "/docs/widgets/media-transcoding"
+  | "/docs/widgets/media-missing"
   | "/docs/widgets/minecraft-server-status"
   | "/docs/widgets/network-controller-summary"
   | "/docs/widgets/network-controller-status"
@@ -357,10 +361,12 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/notifications"
   | "/docs/widgets/system-resources"
   | "/docs/widgets/coolify"
+  | "/docs/widgets/system-disks"
   | "/docs/widgets/timetable"
   | "/docs/widgets/immich-server-stats"
   | "/docs/widgets/immich-album-carousel"
   | "/docs/widgets/paperless-ngx"
+  | "/docs/widgets/bazarr"
   | "/docs/widgets/tracearr"
   | "/docs/widgets/speedtest-tracker"
   | "/docs/widgets/uptime-kuma"
@@ -372,4 +378,5 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/beszel-system-grid"
   | "/docs/widgets/beszel-alerts"
   | "/docs/widgets/beszel-system-stats"
+  | "/docs/widgets/traefik"
   | "/docs/widgets/custom-api";

packages/definitions/src/docs/integration-doc-slugs.ts

@@ -13,6 +13,7 @@ export const integrationDocSlugs: Record<IntegrationKind, string | null> = {
   lidarr: "lidarr",
   readarr: "readarr",
   prowlarr: "prowlarr",
+  bazarr: "bazarr",
   jellyfin: "jellyfin",
   emby: "emby",
   plex: "plex",
@@ -36,6 +37,7 @@ export const integrationDocSlugs: Record<IntegrationKind, string | null> = {
   ical: "ical",
   anchor: "anchor",
   truenas: "truenas",
+  synology: "synology",
   unraid: "unraid",
   coolify: "coolify",
   immich: "immich",
@@ -49,6 +51,7 @@ export const integrationDocSlugs: Record<IntegrationKind, string | null> = {
   gluetun: "gluetun",
   peaNut: "peanut",
   beszel: "beszel",
+  traefik: "traefik",
   archiveTeamWarrior: null,
   mock: null,
 };

packages/definitions/src/docs/widget-doc-slugs.ts

@@ -19,6 +19,7 @@ export const widgetDocSlugs: Record<WidgetKind, string | null> = {
   "mediaRequests-requestList": "media-request-list",
   "mediaRequests-requestStats": "media-request-stats",
   mediaTranscoding: "media-transcoding",
+  mediaMissing: "media-missing",
   minecraftServerStatus: "minecraft-server-status",
   networkControllerSummary: "network-controller-summary",
   networkControllerStatus: "network-controller-status",
@@ -33,11 +34,12 @@ export const widgetDocSlugs: Record<WidgetKind, string | null> = {
   notifications: "notifications",
   systemResources: "system-resources",
   coolify: "coolify",
-  systemDisks: null,
+  systemDisks: "system-disks",
   timetable: "timetable",
   "immich-serverStats": "immich-server-stats",
   "immich-albumCarousel": "immich-album-carousel",
   paperlessNgx: "paperless-ngx",
+  bazarr: "bazarr",
   tracearr: "tracearr",
   speedtestTracker: "speedtest-tracker",
   uptimeKuma: "uptime-kuma",
@@ -50,5 +52,6 @@ export const widgetDocSlugs: Record<WidgetKind, string | null> = {
   beszelSystemGrid: "beszel-system-grid",
   beszelAlerts: "beszel-alerts",
   beszelSystemStats: "beszel-system-stats",
+  traefik: "traefik",
   customApi: "custom-api",
 };

packages/definitions/src/integration.ts

@@ -96,7 +96,7 @@ export const integrationDefs = {
     name: "Sonarr",
     secretKinds: [["apiKey"]],
     iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/sonarr.svg",
-    category: ["calendar"],
+    category: ["calendar", "mediaOrganizer"],
     documentationUrl: createDocumentationLink("/docs/integrations/sonarr"),
     defaultPort: 8989,
     apiKeySettingsPath: "/settings/general",
@@ -105,7 +105,7 @@ export const integrationDefs = {
     name: "Radarr",
     secretKinds: [["apiKey"]],
     iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/radarr.svg",
-    category: ["calendar"],
+    category: ["calendar", "mediaOrganizer"],
     documentationUrl: createDocumentationLink("/docs/integrations/radarr"),
     defaultPort: 7878,
     apiKeySettingsPath: "/settings/general",
@@ -137,6 +137,15 @@ export const integrationDefs = {
     defaultPort: 9696,
     apiKeySettingsPath: "/settings/general",
   },
+  bazarr: {
+    name: "Bazarr",
+    secretKinds: [["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/bazarr.svg",
+    category: ["subtitleManager"],
+    documentationUrl: createDocumentationLink("/docs/integrations/bazarr"),
+    defaultPort: 6767,
+    apiKeySettingsPath: "/settings/general",
+  },
   jellyfin: {
     name: "Jellyfin",
     secretKinds: [["username", "password"], ["apiKey"]],
@@ -321,6 +330,14 @@ export const integrationDefs = {
     documentationUrl: createDocumentationLink("/docs/integrations/truenas"),
     defaultPort: 80,
   },
+  synology: {
+    name: "Synology DiskStation",
+    secretKinds: [["username", "password"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/synology.svg",
+    category: ["healthMonitoring"],
+    documentationUrl: createDocumentationLink("/docs/integrations/synology"),
+    defaultPort: 5000,
+  },
   unraid: {
     name: "Unraid",
     secretKinds: [["apiKey"]],
@@ -425,6 +442,14 @@ export const integrationDefs = {
     category: ["vpn"],
     documentationUrl: createDocumentationLink("/docs/integrations/gluetun"),
   },
+  traefik: {
+    name: "Traefik",
+    secretKinds: [[], ["username", "password"], ["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/traefik.svg",
+    category: ["reverseProxy"],
+    documentationUrl: createDocumentationLink("/docs/integrations/traefik"),
+    defaultPort: 8080,
+  },
   archiveTeamWarrior: {
     name: "ArchiveTeam Warrior",
     secretKinds: [[], ["username", "password"]],
@@ -453,6 +478,7 @@ export const integrationDefs = {
       "smartHomeServer",
       "ups",
       "uptimeMonitoring",
+      "mediaOrganizer",
     ],
     documentationUrl: null,
   },
@@ -518,6 +544,7 @@ export const integrationCategories = [
   "dnsHole",
   "mediaService",
   "calendar",
+  "mediaOrganizer",
   "mediaSearch",
   "mediaRelease",
   "mediaRequest",
@@ -545,6 +572,8 @@ export const integrationCategories = [
   "documents",
   "mediaLibrary",
   "uptimeMonitoring",
+  "subtitleManager",
+  "reverseProxy",
 ] as const;
 
 export type IntegrationCategory = (typeof integrationCategories)[number];

packages/definitions/src/widget-integration-map.ts

@@ -20,6 +20,7 @@ export const widgetIntegrationSupport: Partial<Record<WidgetKind, readonly Integ
   "mediaRequests-requestList": getIntegrationKindsByCategory("mediaRequest"),
   "mediaRequests-requestStats": getIntegrationKindsByCategory("mediaRequest"),
   mediaTranscoding: getIntegrationKindsByCategory("mediaTranscoding"),
+  mediaMissing: getIntegrationKindsByCategory("mediaOrganizer"),
   networkControllerSummary: getIntegrationKindsByCategory("networkController"),
   networkControllerStatus: getIntegrationKindsByCategory("networkController"),
   indexerManager: getIntegrationKindsByCategory("indexerManager"),
@@ -27,12 +28,13 @@ export const widgetIntegrationSupport: Partial<Record<WidgetKind, readonly Integ
   firewall: getIntegrationKindsByCategory("firewall"),
   notifications: getIntegrationKindsByCategory("notifications"),
   mediaReleases: ["emby", "jellyfin", "plex"],
-  systemResources: ["dashDot", "openmediavault", "truenas", "unraid", "glances"],
-  systemDisks: ["dashDot", "openmediavault", "truenas", "unraid"],
+  systemResources: ["dashDot", "openmediavault", "truenas", "unraid", "glances", "synology"],
+  systemDisks: ["dashDot", "openmediavault", "truenas", "unraid", "synology"],
   coolify: ["coolify"],
   "immich-serverStats": ["immich"],
   "immich-albumCarousel": ["immich"],
   paperlessNgx: ["paperlessNgx"],
+  bazarr: ["bazarr"],
   tracearr: ["tracearr"],
   speedtestTracker: ["speedtestTracker"],
   uptimeKuma: ["uptimeKuma"],
@@ -40,6 +42,7 @@ export const widgetIntegrationSupport: Partial<Record<WidgetKind, readonly Integ
   vpn: getIntegrationKindsByCategory("vpn"),
   archiveTeamWarrior: ["archiveTeamWarrior"],
   anchorNote: ["anchor"],
+  traefik: ["traefik"],
 };
 
 export const getWidgetKindsForIntegration = (integrationKind: IntegrationKind): WidgetKind[] => {

packages/definitions/src/widget.ts

@@ -17,6 +17,7 @@ export const widgetKinds = [
   "mediaRequests-requestList",
   "mediaRequests-requestStats",
   "mediaTranscoding",
+  "mediaMissing",
   "minecraftServerStatus",
   "networkControllerSummary",
   "networkControllerStatus",
@@ -36,6 +37,7 @@ export const widgetKinds = [
   "immich-serverStats",
   "immich-albumCarousel",
   "paperlessNgx",
+  "bazarr",
   "tracearr",
   "speedtestTracker",
   "uptimeKuma",
@@ -48,6 +50,7 @@ export const widgetKinds = [
   "beszelSystemGrid",
   "beszelAlerts",
   "beszelSystemStats",
+  "traefik",
   "customApi",
 ] as const;
 export type WidgetKind = (typeof widgetKinds)[number];
@@ -56,4 +59,6 @@ export const widgetDefaultSizes: Partial<Record<WidgetKind, { width: number; hei
   uptimeKuma: { width: 2, height: 3 },
   audioStats: { width: 2, height: 2 },
   paperlessNgx: { width: 2, height: 2 },
+  mediaMissing: { width: 4, height: 3 },
+  bazarr: { width: 2, height: 2 },
 };

packages/integrations/src/base/creator.ts

@@ -2,6 +2,7 @@ import type { IntegrationKind } from "@homarr/definitions";
 
 import { AdGuardHomeIntegration } from "../adguard-home/adguard-home-integration";
 import { BeszelIntegration } from "../beszel/beszel-integration";
+import { BazarrIntegration } from "../bazarr/bazarr-integration";
 import { AnchorIntegration } from "../anchor/anchor-integration";
 import { AudiobookshelfIntegration } from "../audiobookshelf/audiobookshelf-integration";
 import { CoolifyIntegration } from "../coolify/coolify-integration";
@@ -45,6 +46,8 @@ import { ProxmoxIntegration } from "../proxmox/proxmox-integration";
 import { SeerrIntegration } from "../seerr/seerr-integration";
 import { SpeedtestTrackerIntegration } from "../speedtest-tracker/speedtest-tracker-integration";
 import { TracearrIntegration } from "../tracearr/tracearr-integration";
+import { TraefikIntegration } from "../traefik/traefik-integration";
+import { SynologyIntegration } from "../synology/synology-integration";
 import { TrueNasIntegration } from "../truenas/truenas-integration";
 import { UmamiIntegration } from "../umami/umami-integration";
 import { UptimeKumaIntegration } from "../uptime-kuma/uptime-kuma-integration";
@@ -110,6 +113,7 @@ export const integrationCreators = {
   gotify: GotifyIntegration,
   mock: MockIntegration,
   truenas: TrueNasIntegration,
+  synology: SynologyIntegration,
   unraid: UnraidIntegration,
   coolify: CoolifyIntegration,
   tracearr: TracearrIntegration,
@@ -125,6 +129,8 @@ export const integrationCreators = {
   uptimeKuma: UptimeKumaIntegration,
   peaNut: PeaNutIntegration,
   beszel: BeszelIntegration,
+  bazarr: BazarrIntegration,
+  traefik: TraefikIntegration,
 } satisfies Record<IntegrationKind, IntegrationInstance | [(input: IntegrationInput) => Promise<Integration>]>;
 
 type IntegrationInstanceOfKind<TKind extends keyof typeof integrationCreators> = {

packages/integrations/src/bazarr/bazarr-integration.ts

@@ -0,0 +1,45 @@
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import { TestConnectionError } from "../base/test-connection/test-connection-error";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type { BazarrBadges } from "./bazarr-types";
+import { bazarrBadgesSchema, bazarrSystemStatusSchema } from "./bazarr-types";
+
+export class BazarrIntegration extends Integration {
+  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
+    const response = await input.fetchAsync(this.url("/api/system/status"), {
+      headers: this.getAuthHeaders(),
+    });
+
+    if (!response.ok) {
+      return TestConnectionError.StatusResult(response);
+    }
+
+    bazarrSystemStatusSchema.parse(await response.json());
+    return { success: true };
+  }
+
+  public async getBadgesAsync(): Promise<BazarrBadges> {
+    const response = await fetchWithTrustedCertificatesAsync(this.url("/api/badges"), {
+      headers: this.getAuthHeaders(),
+      timeout: 10000,
+    });
+
+    if (!response.ok) {
+      throw new Error(
+        `Failed to fetch Bazarr badges for ${this.integration.name} (${this.integration.id}): ${response.statusText}`,
+      );
+    }
+
+    return bazarrBadgesSchema.parse(await response.json());
+  }
+
+  private getAuthHeaders(): Record<string, string> {
+    return {
+      "X-API-KEY": this.getSecretValue("apiKey"),
+      Accept: "application/json",
+    };
+  }
+}

packages/integrations/src/bazarr/bazarr-types.ts

@@ -0,0 +1,19 @@
+import { z } from "zod/v4";
+
+export const bazarrBadgesSchema = z.object({
+  episodes: z.number(),
+  movies: z.number(),
+  providers: z.number(),
+  status: z.number(),
+  sonarr_signalr: z.string(),
+  radarr_signalr: z.string(),
+  announcements: z.number(),
+});
+
+export type BazarrBadges = z.infer<typeof bazarrBadgesSchema>;
+
+export const bazarrSystemStatusSchema = z.object({
+  data: z.object({
+    bazarr_version: z.string(),
+  }),
+});

packages/integrations/src/beszel/beszel-integration.ts

@@ -20,6 +20,7 @@ import type {
   BeszelSystemdService,
   BeszelSystemStatsRecord,
   CreateAlertInput,
+  LiveStatsEvent,
   PocketBaseListResponse,
   UpdateAlertInput,
 } from "./beszel-types";
@@ -284,6 +285,125 @@ export class BeszelIntegration extends Integration {
     });
   }
 
+  /**
+   * Subscribe to real-time system and container stats via PocketBase SSE.
+   * Connects to the PocketBase Realtime API and parses incoming SSE events,
+   * filtering by systemId. This provides live-updating metrics (≤1s latency
+   * from agent) instead of polling the REST API every 5s.
+   */
+  public async subscribeRealtimeMetrics(
+    systemId: string,
+    onMessage: (event: LiveStatsEvent) => void,
+    signal: AbortSignal,
+  ): Promise<void> {
+    const session = await this.authenticateAsync();
+    const realtimeUrl = this.url("/api/realtime");
+
+    logger.debug("Opening Beszel SSE connection for realtime metrics", {
+      integrationId: this.integration.id,
+      systemId,
+      url: realtimeUrl.pathname,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(realtimeUrl, {
+      headers: { Authorization: session.token },
+      signal,
+    });
+
+    if (!response.ok) {
+      logger.warn("Beszel SSE connection failed", {
+        integrationId: this.integration.id,
+        systemId,
+        status: response.status,
+      });
+      throw new ResponseError(response);
+    }
+
+    const reader = response.body?.getReader();
+    if (!reader) throw new Error("No response body in SSE stream");
+
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let subscribed = false;
+
+    const processLine = async (line: string) => {
+      if (!line.startsWith("data: ")) return;
+
+      try {
+        const parsed = JSON.parse(line.slice(6)) as Record<string, unknown>;
+
+        // PB_CONNECT delivers the clientId — use it to POST our subscriptions
+        if (!subscribed && typeof parsed.clientId === "string") {
+          subscribed = true;
+          const subscribeResponse = await fetchWithTrustedCertificatesAsync(realtimeUrl, {
+            method: "POST",
+            headers: {
+              Authorization: session.token,
+              "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+              clientId: parsed.clientId,
+              subscriptions: ["system_stats", "container_stats"],
+            }),
+            signal,
+          });
+
+          if (!subscribeResponse.ok) {
+            logger.warn("Beszel SSE subscription POST failed", {
+              integrationId: this.integration.id,
+              systemId,
+              status: subscribeResponse.status,
+            });
+            throw new ResponseError(subscribeResponse);
+          }
+
+          logger.debug("Beszel SSE subscribed to collections", {
+            integrationId: this.integration.id,
+            systemId,
+            clientId: parsed.clientId,
+          });
+          return;
+        }
+
+        const record = parsed.record as Record<string, unknown> | undefined;
+        if (!record || record.system !== systemId) return;
+
+        if (Array.isArray(record.stats)) {
+          onMessage({
+            type: "container_stats",
+            record: record as unknown as BeszelContainerStatsRecord,
+          });
+        } else if (record.stats && typeof record.stats === "object") {
+          onMessage({
+            type: "system_stats",
+            record: record as unknown as BeszelSystemStatsRecord,
+          });
+        }
+      } catch (error) {
+        if (error instanceof ResponseError) throw error;
+        // skip malformed SSE data lines
+      }
+    };
+
+    try {
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+
+        buffer += decoder.decode(value, { stream: true });
+        const lines = buffer.split("\n");
+        buffer = lines.pop() ?? "";
+
+        for (const line of lines) {
+          await processLine(line);
+        }
+      }
+    } finally {
+      reader.releaseLock();
+      logger.debug("Beszel SSE connection closed", { integrationId: this.integration.id, systemId });
+    }
+  }
+
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
     const response = await input.fetchAsync(this.url("/api/collections/users/auth-with-password"), {
       method: "POST",

packages/integrations/src/beszel/beszel-types.ts

@@ -343,6 +343,22 @@ export interface UpdateAlertInput {
   min?: number;
 }
 
+/**
+ * Live SSE subscription event types for real-time Beszel metrics.
+ * Discriminated union — clients accumulate each type into its own buffer.
+ */
+export interface LiveSystemStatsEvent {
+  type: "system_stats";
+  record: BeszelSystemStatsRecord;
+}
+
+export interface LiveContainerStatsEvent {
+  type: "container_stats";
+  record: BeszelContainerStatsRecord;
+}
+
+export type LiveStatsEvent = LiveSystemStatsEvent | LiveContainerStatsEvent;
+
 export interface PocketBaseListResponse<T> {
   page: number;
   perPage: number;

packages/integrations/src/download-client/qbittorrent/qbittorrent-integration.ts

@@ -99,11 +99,14 @@ export class QBitTorrentIntegration extends Integration implements IDownloadClie
           password: this.getSecretValue("password"),
         };
 
-    return new QBittorrent({
+    const client = new QBittorrent({
       ...credentials,
       baseUrl: this.url("/").toString(),
       dispatcher: dispatcher ?? (await createCertificateAgentAsync()),
     });
+    // Populate version state so the library uses correct v5 endpoints (stop/start vs pause/resume)
+    await client.getAppVersion();
+    return client;
   }
 
   private static getTorrentState(state: string): DownloadClientItem["state"] {
@@ -125,6 +128,8 @@ export class QBitTorrentIntegration extends Integration implements IDownloadClie
         return "seeding";
       case "pausedDL":
       case "pausedUP":
+      case "stoppedDL":
+      case "stoppedUP":
         return "paused";
       case "stalledDL":
         return "stalled";

packages/integrations/src/gluetun/gluetun-types.ts

@@ -46,7 +46,7 @@ const gluetunServerSelectionSchema = z.object({
   isps: z.array(z.string()).nullable(),
   names: z.array(z.string()).nullable(),
   numbers: z.array(z.number()).nullable(),
-  hostnames: z.array(z.string()),
+  hostnames: z.array(z.string()).nullable(),
   owned_only: z.boolean(),
   free_only: z.boolean(),
   premium_only: z.boolean(),
@@ -65,7 +65,7 @@ const gluetunPortForwardingSchema = z.object({
   status_file_path: z.string(),
   up_command: z.string(),
   down_command: z.string(),
-  listening_port: z.number(),
+  listening_port: z.union([z.number(), z.array(z.number())]),
   username: z.string(),
   password: z.string(),
 });
@@ -98,7 +98,7 @@ const gluetunOpenvpnSettingsSchema = z.object({
 const gluetunWireguardSettingsSchema = z.object({
   private_key: z.string(),
   pre_shared_key: z.string(),
-  addresses: z.array(z.string()),
+  addresses: z.array(z.string()).nullable(),
   allowed_ips: z.array(z.string()),
   interface: z.string(),
   persistent_keep_alive_interval: z.number(),

packages/integrations/src/gluetun/test/gluetun-integration.spec.ts

@@ -124,6 +124,126 @@ const VPN_SETTINGS_PAYLOAD = {
   },
 };
 
+const ALT_VPN_SETTINGS_PAYLOAD = {
+  type: "openvpn",
+  provider: {
+    name: "custom",
+    server_selection: {
+      vpn: "openvpn",
+      countries: null,
+      categories: null,
+      regions: null,
+      cities: null,
+      isps: null,
+      names: null,
+      numbers: null,
+      hostnames: null,
+      owned_only: false,
+      free_only: false,
+      premium_only: false,
+      stream_only: false,
+      multi_hop_only: false,
+      port_forward_only: false,
+      secure_core_only: false,
+      tor_only: false,
+      openvpn: {
+        config_file_path: "/gluetun/custom.conf",
+        protocol: "tcp",
+        endpoint_ip: "0.0.0.0",
+        custom_port: 0,
+        pia_encryption_preset: "",
+      },
+      wireguard: {
+        endpoint_ip: "0.0.0.0",
+        endpoint_port: 0,
+        public_key: "",
+      },
+    },
+    port_forwarding: {
+      enabled: false,
+      provider: "",
+      status_file_path: "/tmp/gluetun/forwarded_port",
+      up_command: "",
+      down_command: "",
+      listening_port: [0],
+      ports_count: 0,
+      username: "",
+      password: "",
+    },
+  },
+  amneziawg: {
+    wireguard: {
+      private_key: "",
+      pre_shared_key: "",
+      addresses: null,
+      allowed_ips: ["0.0.0.0/0", "::/0"],
+      interface: "tun0",
+      persistent_keep_alive_interval: 0,
+      mtu: 0,
+      implementation: "userspace",
+    },
+    junk_packet_count: 0,
+    junk_packet_min: 0,
+    junk_packet_max: 0,
+    padding_s1: 0,
+    padding_s2: 0,
+    padding_s3: 0,
+    padding_s4: 0,
+    header_h1: "",
+    header_h2: "",
+    header_h3: "",
+    header_h4: "",
+    init_packet_i1: "",
+    init_packet_i2: "",
+    init_packet_i3: "",
+    init_packet_i4: "",
+    init_packet_i5: "",
+  },
+  openvpn: {
+    version: "2.6",
+    user: "",
+    password: "",
+    config_file_path: "/gluetun/custom.conf",
+    ciphers: null,
+    auth: "",
+    cert: "",
+    key: "",
+    encrypted_key: "",
+    key_passphrase: "",
+    pia_encryption_preset: "",
+    mssfix: 0,
+    interface: "tun0",
+    process_user: "nonrootuser",
+    verbosity: 1,
+    flags: null,
+  },
+  wireguard: {
+    private_key: "",
+    pre_shared_key: "",
+    addresses: null,
+    allowed_ips: ["0.0.0.0/0", "::/0"],
+    interface: "tun0",
+    persistent_keep_alive_interval: 0,
+    mtu: 0,
+    implementation: "auto",
+  },
+  pmtud: {
+    icmp_addresses: ["1.1.1.1", "8.8.8.8"],
+    tcp_addresses: [
+      "1.1.1.1:443",
+      "8.8.8.8:443",
+      "1.1.1.1:53",
+      "8.8.8.8:53",
+      "[2606:4700:4700::1111]:53",
+      "[2001:4860:4860::8888]:53",
+      "[2606:4700:4700::1111]:443",
+      "[2001:4860:4860::8888]:443",
+    ],
+  },
+  up_command: "",
+  down_command: "",
+};
+
 const jsonResponse = (body: unknown, init: ResponseInit = { status: 200 }): FetchResponse =>
   new Response(JSON.stringify(body), {
     ...init,
@@ -368,4 +488,54 @@ describe("gluetun schemas", () => {
   test("vpn settings schema rejects a non-string type", () => {
     expect(() => gluetunVpnSettingsSchema.parse({ ...VPN_SETTINGS_PAYLOAD, type: 1 })).toThrow();
   });
+
+  test("vpn settings schema parses the live gluetun-latest custom/OpenVPN payload", () => {
+    const parsed = gluetunVpnSettingsSchema.parse(ALT_VPN_SETTINGS_PAYLOAD);
+    expect(parsed.type).toBe("openvpn");
+    expect(parsed.provider.name).toBe("custom");
+  });
+
+  test("vpn settings schema accepts null server-selection hostnames", () => {
+    const payload = {
+      ...VPN_SETTINGS_PAYLOAD,
+      provider: {
+        ...VPN_SETTINGS_PAYLOAD.provider,
+        server_selection: {
+          ...VPN_SETTINGS_PAYLOAD.provider.server_selection,
+          hostnames: null,
+        },
+      },
+    };
+
+    expect(() => gluetunVpnSettingsSchema.parse(payload)).not.toThrow();
+  });
+
+  test("vpn settings schema accepts listening_port as a number or a list", () => {
+    const asList = {
+      ...VPN_SETTINGS_PAYLOAD,
+      provider: {
+        ...VPN_SETTINGS_PAYLOAD.provider,
+        port_forwarding: {
+          ...VPN_SETTINGS_PAYLOAD.provider.port_forwarding,
+          listening_port: [0],
+        },
+      },
+    };
+
+    // The happy-path fixture already exercises the scalar form (listening_port: 0).
+    expect(() => gluetunVpnSettingsSchema.parse(VPN_SETTINGS_PAYLOAD)).not.toThrow();
+    expect(() => gluetunVpnSettingsSchema.parse(asList)).not.toThrow();
+  });
+
+  test("vpn settings schema accepts null wireguard addresses", () => {
+    const payload = {
+      ...VPN_SETTINGS_PAYLOAD,
+      wireguard: {
+        ...VPN_SETTINGS_PAYLOAD.wireguard,
+        addresses: null,
+      },
+    };
+
+    expect(() => gluetunVpnSettingsSchema.parse(payload)).not.toThrow();
+  });
 });

packages/integrations/src/gotify/gotify-integration.ts

@@ -1,12 +1,13 @@
 import { ResponseError } from "@homarr/common/server";
 import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+import { ImageProxy } from "@homarr/image-proxy";
 
 import { Integration } from "../base/integration";
 import type { IntegrationTestingInput } from "../base/integration";
 import type { TestingResult } from "../base/test-connection/test-connection-service";
 import type { Notification } from "../interfaces/notifications/notification-types";
 import type { INotificationsIntegration } from "../interfaces/notifications/notifications-integration";
-import { gotifyMessagesResponseSchema } from "./gotify-schema";
+import { gotifyApplicationsResponseSchema, gotifyMessagesResponseSchema } from "./gotify-schema";
 
 export class GotifyIntegration extends Integration implements INotificationsIntegration {
   public async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
@@ -21,23 +22,90 @@ export class GotifyIntegration extends Integration implements INotificationsInte
     return { Authorization: `Basic ${credentials}` };
   }
 
+  private getMessagesUrl(applicationId: number) {
+    const url = this.externalUrl("/");
+    url.hash = `/messages/${applicationId}`;
+    return url.toString();
+  }
+
+  private async getApplicationsByIdAsync(): Promise<Map<number, { name: string; image?: string | null }>> {
+    try {
+      const response = await fetchWithTrustedCertificatesAsync(this.url("/application"), {
+        headers: this.getHeaders(),
+      });
+      if (!response.ok) throw new ResponseError(response);
+
+      const result = await gotifyApplicationsResponseSchema.safeParseAsync(await response.json());
+      if (!result.success) return new Map();
+
+      return new Map(result.data.map((application) => [application.id, application]));
+    } catch {
+      return new Map();
+    }
+  }
+
+  private async getApplicationIconUrlAsync(
+    imageProxy: ImageProxy,
+    imagePath: string | null | undefined,
+  ): Promise<string | undefined> {
+    const trimmedImagePath = imagePath?.trim();
+    if (!trimmedImagePath) return undefined;
+
+    try {
+      const imageUrl = this.getApplicationImageUrl(trimmedImagePath);
+      return await imageProxy.createImageAsync(imageUrl, this.getHeaders());
+    } catch {
+      return undefined;
+    }
+  }
+
+  private getApplicationImageUrl(imagePath: string) {
+    try {
+      return new URL(imagePath).toString();
+    } catch {
+      const path = imagePath.startsWith("/") ? imagePath : `/${imagePath}`;
+      return this.url(path as `/${string}`).toString();
+    }
+  }
+
   public async getNotificationsAsync(): Promise<Notification[]> {
-    const url = this.url("/message", { limit: 100 });
-    const response = await fetchWithTrustedCertificatesAsync(url, { headers: this.getHeaders() });
+    const [messagesResponse, applicationsById] = await Promise.all([
+      fetchWithTrustedCertificatesAsync(this.url("/message", { limit: 100 }), { headers: this.getHeaders() }),
+      this.getApplicationsByIdAsync(),
+    ]);
 
-    if (!response.ok) throw new ResponseError(response);
+    if (!messagesResponse.ok) throw new ResponseError(messagesResponse);
 
-    const result = await gotifyMessagesResponseSchema.safeParseAsync(await response.json());
-    if (!result.success) throw new Error(`Failed to parse Gotify response: ${result.error.message}`);
-    const parsed = result.data;
+    const messagesResult = await gotifyMessagesResponseSchema.safeParseAsync(await messagesResponse.json());
+    if (!messagesResult.success) throw new Error(`Failed to parse Gotify response: ${messagesResult.error.message}`);
 
-    return parsed.messages.map(
-      (message): Notification => ({
+    const imageProxy = new ImageProxy();
+    const iconUrlsByApplicationId = new Map<number, string | undefined>();
+    await Promise.all(
+      [...applicationsById.entries()].map(async ([applicationId, application]) => {
+        iconUrlsByApplicationId.set(
+          applicationId,
+          await this.getApplicationIconUrlAsync(imageProxy, application.image),
+        );
+      }),
+    );
+
+    return messagesResult.data.messages.map((message): Notification => {
+      const application = applicationsById.get(message.appid);
+
+      return {
         id: String(message.id),
         time: new Date(message.date),
         title: message.title,
         body: message.message,
-      }),
-    );
+        href: this.getMessagesUrl(message.appid),
+        source: application
+          ? {
+              name: application.name,
+              iconUrl: iconUrlsByApplicationId.get(message.appid),
+            }
+          : undefined,
+      };
+    });
   }
 }

packages/integrations/src/gotify/gotify-schema.ts

@@ -3,6 +3,7 @@ import { z } from "zod/v4";
 // See: https://gotify.net/api-docs#/message/getMessages
 export const gotifyMessageSchema = z.object({
   id: z.number(),
+  appid: z.number(),
   date: z.string(),
   title: z.string(),
   message: z.string(),
@@ -12,3 +13,11 @@ export const gotifyMessageSchema = z.object({
 export const gotifyMessagesResponseSchema = z.object({
   messages: z.array(gotifyMessageSchema),
 });
+
+export const gotifyApplicationSchema = z.object({
+  id: z.number(),
+  name: z.string(),
+  image: z.string().nullable().optional(),
+});
+
+export const gotifyApplicationsResponseSchema = z.array(gotifyApplicationSchema);

packages/integrations/src/index.ts

@@ -29,6 +29,7 @@ export { PiHoleIntegrationV6 } from "./pi-hole/v6/pi-hole-integration-v6";
 export { PlexIntegration } from "./plex/plex-integration";
 export { ProwlarrIntegration } from "./prowlarr/prowlarr-integration";
 export { TrueNasIntegration } from "./truenas/truenas-integration";
+export { SynologyIntegration } from "./synology/synology-integration";
 export { UnraidIntegration } from "./unraid/unraid-integration";
 export { OPNsenseIntegration } from "./opnsense/opnsense-integration";
 export { ICalIntegration } from "./ical/ical-integration";
@@ -41,6 +42,8 @@ export { NavidromeIntegration } from "./navidrome/navidrome-integration";
 export { UptimeKumaIntegration } from "./uptime-kuma/uptime-kuma-integration";
 export { UmamiIntegration } from "./umami/umami-integration";
 export { PeaNutIntegration } from "./peanut/peanut-integration";
+export { BazarrIntegration } from "./bazarr/bazarr-integration";
+export { TraefikIntegration } from "./traefik/traefik-integration";
 
 // Types
 export type { IntegrationInput } from "./base/integration";
@@ -80,6 +83,8 @@ export type { AudiobookshelfDashboardData } from "./audiobookshelf/audiobookshel
 export type { NavidromeDashboardData } from "./navidrome/navidrome-types";
 export type { UptimeKumaDashboardData } from "./uptime-kuma/uptime-kuma-types";
 export type { UmamiVisitorStats } from "./umami/umami-types";
+export type { BazarrBadges } from "./bazarr/bazarr-types";
+export type { TraefikDashboardData, TraefikProtocolSummary, TraefikResourceSummary } from "./traefik/traefik-types";
 export type {
   ArchiveTeamWarriorBandwidth,
   ArchiveTeamWarriorItem,

packages/integrations/src/interfaces/media-organizer/media-organizer-integration.ts

@@ -0,0 +1,6 @@
+import type { MissingMediaItem, QueuedMediaItem } from "./media-organizer-types";
+
+export interface IMediaOrganizerIntegration {
+  getMissingAsync(pageSize?: number): Promise<{ items: MissingMediaItem[]; totalCount: number }>;
+  getMediaQueueAsync(pageSize?: number): Promise<{ items: QueuedMediaItem[]; totalCount: number }>;
+}

packages/integrations/src/interfaces/media-organizer/media-organizer-types.ts

@@ -0,0 +1,26 @@
+export interface MissingMediaItem {
+  id: number;
+  title: string;
+  type: "movie" | "episode";
+  year?: number;
+  seasonNumber?: number;
+  episodeNumber?: number;
+  seriesTitle?: string;
+  imageUrl?: string | null;
+  link: string;
+}
+
+export interface QueuedMediaItem {
+  id: number;
+  title: string;
+  type: "movie" | "episode";
+  status: string;
+  timeLeft: string | null;
+  percentComplete: number;
+  year?: number;
+  seasonNumber?: number;
+  episodeNumber?: number;
+  seriesTitle?: string;
+  imageUrl?: string | null;
+  link: string;
+}

packages/integrations/src/interfaces/notifications/notification-types.ts

@@ -3,4 +3,9 @@ export interface Notification {
   time: Date;
   title: string;
   body: string;
+  href?: string;
+  source?: {
+    name: string;
+    iconUrl?: string;
+  };
 }

packages/integrations/src/media-organizer/radarr/radarr-integration.ts

@@ -10,11 +10,13 @@ import type { TestingResult } from "../../base/test-connection/test-connection-s
 import type { ICalendarIntegration } from "../../interfaces/calendar/calendar-integration";
 import type { CalendarEvent, CalendarLink } from "../../interfaces/calendar/calendar-types";
 import { radarrReleaseTypes } from "../../interfaces/calendar/calendar-types";
+import type { IMediaOrganizerIntegration } from "../../interfaces/media-organizer/media-organizer-integration";
+import type { MissingMediaItem, QueuedMediaItem } from "../../interfaces/media-organizer/media-organizer-types";
 import { mediaOrganizerPriorities } from "../media-organizer";
 
 const logger = createLogger({ module: "radarrIntegration" });
 
-export class RadarrIntegration extends Integration implements ICalendarIntegration {
+export class RadarrIntegration extends Integration implements ICalendarIntegration, IMediaOrganizerIntegration {
   /**
    * Gets the events in the Radarr calendar between two dates.
    * @param start The start date
@@ -111,6 +113,79 @@ export class RadarrIntegration extends Integration implements ICalendarIntegrati
     return bestImage.remoteUrl;
   };
 
+  async getMissingAsync(pageSize = 10): Promise<{ items: MissingMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/wanted/missing", {
+      page: 1,
+      pageSize,
+      sortKey: "title",
+      sortDirection: "ascending",
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(radarrMissingMovieSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map(
+        (movie): MissingMediaItem => ({
+          id: movie.id,
+          title: movie.title,
+          type: "movie",
+          year: movie.year,
+          imageUrl: movie.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: this.externalUrl(`/movie/${movie.titleSlug}`).toString(),
+        }),
+      ),
+    };
+  }
+
+  async getMediaQueueAsync(pageSize = 10): Promise<{ items: QueuedMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/queue", {
+      page: 1,
+      pageSize,
+      includeMovie: true,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(radarrQueueItemSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map((item): QueuedMediaItem => {
+        const sizeLeft = item.sizeleft ?? 0;
+        const sizeTotal = item.size ?? 0;
+        const percentComplete = sizeTotal > 0 ? Math.round(((sizeTotal - sizeLeft) / sizeTotal) * 100) : 0;
+        return {
+          id: item.id,
+          title: item.movie?.title ?? item.title,
+          type: "movie",
+          status: item.status,
+          timeLeft: item.timeleft ?? null,
+          percentComplete,
+          year: item.movie?.year,
+          imageUrl: item.movie?.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: item.movie?.titleSlug
+            ? this.externalUrl(`/movie/${item.movie.titleSlug}`).toString()
+            : this.externalUrl("/activity/queue").toString(),
+        };
+      }),
+    };
+  }
+
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
     const response = await input.fetchAsync(this.url("/api"), {
       headers: { "X-Api-Key": super.getSecretValue("apiKey") },
@@ -131,6 +206,41 @@ const radarrCalendarEventImageSchema = z.array(
   }),
 );
 
+const radarrMissingMovieSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  year: z.number().optional(),
+  titleSlug: z.string(),
+  images: z.array(
+    z.object({
+      coverType: z.string(),
+      remoteUrl: z.string().url(),
+    }),
+  ),
+});
+
+const radarrQueueItemSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  status: z.string(),
+  timeleft: z.string().optional(),
+  size: z.number().optional(),
+  sizeleft: z.number().optional(),
+  movie: z
+    .object({
+      title: z.string(),
+      year: z.number().optional(),
+      titleSlug: z.string(),
+      images: z.array(
+        z.object({
+          coverType: z.string(),
+          remoteUrl: z.string().url(),
+        }),
+      ),
+    })
+    .optional(),
+});
+
 const radarrCalendarEventSchema = z.object({
   title: z.string(),
   originalTitle: z.string(),

packages/integrations/src/media-organizer/sonarr/sonarr-integration.ts

@@ -9,11 +9,13 @@ import { TestConnectionError } from "../../base/test-connection/test-connection-
 import type { TestingResult } from "../../base/test-connection/test-connection-service";
 import type { ICalendarIntegration } from "../../interfaces/calendar/calendar-integration";
 import type { CalendarEvent, CalendarLink } from "../../interfaces/calendar/calendar-types";
+import type { IMediaOrganizerIntegration } from "../../interfaces/media-organizer/media-organizer-integration";
+import type { MissingMediaItem, QueuedMediaItem } from "../../interfaces/media-organizer/media-organizer-types";
 import { mediaOrganizerPriorities } from "../media-organizer";
 
 const logger = createLogger({ module: "sonarrIntegration" });
 
-export class SonarrIntegration extends Integration implements ICalendarIntegration {
+export class SonarrIntegration extends Integration implements ICalendarIntegration, IMediaOrganizerIntegration {
   /**
    * Gets the events in the Sonarr calendar between two dates.
    * @param start The start date
@@ -107,6 +109,88 @@ export class SonarrIntegration extends Integration implements ICalendarIntegrati
     return bestImage.remoteUrl;
   };
 
+  async getMissingAsync(pageSize = 10): Promise<{ items: MissingMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/wanted/missing", {
+      page: 1,
+      pageSize,
+      sortKey: "airDateUtc",
+      sortDirection: "ascending",
+      includeSeries: true,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(sonarrMissingEpisodeSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map(
+        (episode): MissingMediaItem => ({
+          id: episode.id,
+          title: episode.title,
+          type: "episode",
+          seasonNumber: episode.seasonNumber,
+          episodeNumber: episode.episodeNumber,
+          seriesTitle: episode.series?.title,
+          year: episode.series?.year,
+          imageUrl: episode.series?.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: episode.series?.titleSlug
+            ? this.externalUrl(`/series/${episode.series.titleSlug}`).toString()
+            : this.externalUrl("/wanted/missing").toString(),
+        }),
+      ),
+    };
+  }
+
+  async getMediaQueueAsync(pageSize = 10): Promise<{ items: QueuedMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/queue", {
+      page: 1,
+      pageSize,
+      includeSeries: true,
+      includeEpisode: true,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(sonarrQueueItemSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map((item): QueuedMediaItem => {
+        const sizeLeft = item.sizeleft ?? 0;
+        const sizeTotal = item.size ?? 0;
+        const percentComplete = sizeTotal > 0 ? Math.round(((sizeTotal - sizeLeft) / sizeTotal) * 100) : 0;
+        return {
+          id: item.id,
+          title: item.episode?.title ?? item.title,
+          type: "episode",
+          status: item.status,
+          timeLeft: item.timeleft ?? null,
+          percentComplete,
+          seasonNumber: item.episode?.seasonNumber,
+          episodeNumber: item.episode?.episodeNumber,
+          seriesTitle: item.series?.title,
+          imageUrl: item.series?.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: item.series?.titleSlug
+            ? this.externalUrl(`/series/${item.series.titleSlug}`).toString()
+            : this.externalUrl("/activity/queue").toString(),
+        };
+      }),
+    };
+  }
+
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
     const response = await input.fetchAsync(this.url("/api"), {
       headers: { "X-Api-Key": super.getSecretValue("apiKey") },
@@ -119,6 +203,54 @@ export class SonarrIntegration extends Integration implements ICalendarIntegrati
   }
 }
 
+const sonarrMissingEpisodeSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  seasonNumber: z.number(),
+  episodeNumber: z.number(),
+  series: z
+    .object({
+      title: z.string(),
+      year: z.number().optional(),
+      titleSlug: z.string(),
+      images: z.array(
+        z.object({
+          coverType: z.string(),
+          remoteUrl: z.string().url(),
+        }),
+      ),
+    })
+    .optional(),
+});
+
+const sonarrQueueItemSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  status: z.string(),
+  timeleft: z.string().optional(),
+  size: z.number().optional(),
+  sizeleft: z.number().optional(),
+  series: z
+    .object({
+      title: z.string(),
+      titleSlug: z.string(),
+      images: z.array(
+        z.object({
+          coverType: z.string(),
+          remoteUrl: z.string().url(),
+        }),
+      ),
+    })
+    .optional(),
+  episode: z
+    .object({
+      title: z.string(),
+      seasonNumber: z.number(),
+      episodeNumber: z.number(),
+    })
+    .optional(),
+});
+
 const sonarrCalendarEventImageSchema = z.array(
   z.object({
     // See https://github.com/Sonarr/Sonarr/blob/9e5ebdc6245d4714776b53127a1e6b63c25fbcb9/src/NzbDrone.Core/MediaCover/MediaCover.cs#L5-L14

packages/integrations/src/mock/data/beszel.ts

@@ -7,6 +7,7 @@ import type {
   BeszelSystemDetails,
   BeszelSystemStats,
   BeszelSystemStatsRecord,
+  LiveStatsEvent,
 } from "../../beszel/beszel-types";
 
 const GB = 1024 * 1024 * 1024;
@@ -332,7 +333,7 @@ export class BeszelMockService {
 
   public async subscribeRealtimeMetrics(
     systemId: string,
-    onMessage: (data: { stats: BeszelSystemStatsRecord; containerStats: BeszelContainerStatsRecord | null }) => void,
+    onMessage: (event: LiveStatsEvent) => void,
     signal: AbortSignal,
   ): Promise<void> {
     const sys = resolveSystem(systemId);
@@ -348,7 +349,7 @@ export class BeszelMockService {
         created: new Date().toISOString(),
         updated: new Date().toISOString(),
       };
-      onMessage({ stats: record, containerStats: null });
+      onMessage({ type: "system_stats", record });
     };
     if (signal.aborted) return;
     await new Promise<void>((resolve) => {

packages/integrations/src/mock/data/media-organizer.ts

@@ -0,0 +1,116 @@
+import type { IMediaOrganizerIntegration } from "../../interfaces/media-organizer/media-organizer-integration";
+import type { MissingMediaItem, QueuedMediaItem } from "../../interfaces/media-organizer/media-organizer-types";
+
+const missingItems: MissingMediaItem[] = [
+  {
+    id: 1,
+    title: "Dune: Part Two",
+    type: "movie",
+    year: 2024,
+    imageUrl: "https://image.tmdb.org/t/p/w300/1pdfLvkbY9ohJlCjQH2CZjjYVvJ.jpg",
+    link: "https://www.imdb.com/title/tt15239678/",
+  },
+  {
+    id: 2,
+    title: "The Batman Part II",
+    type: "movie",
+    year: 2026,
+    imageUrl: "https://image.tmdb.org/t/p/w300/74xTEgt7R36Fpooo50r9T25onhq.jpg",
+    link: "https://www.imdb.com/title/tt7126948/",
+  },
+  {
+    id: 3,
+    title: "The Last of Us",
+    type: "episode",
+    seasonNumber: 2,
+    episodeNumber: 5,
+    seriesTitle: "The Last of Us",
+    year: 2025,
+    imageUrl: "https://image.tmdb.org/t/p/w300/uKvVjHNqB5VmOrdxqAt2F7J78ED.jpg",
+    link: "https://www.imdb.com/title/tt3581920/",
+  },
+  {
+    id: 4,
+    title: "Andor",
+    type: "episode",
+    seasonNumber: 2,
+    episodeNumber: 3,
+    seriesTitle: "Andor",
+    year: 2025,
+    imageUrl: "https://image.tmdb.org/t/p/w300/59SVNwLfoMnZPPB6ukW6dlPxAdI.jpg",
+    link: "https://www.imdb.com/title/tt9253284/",
+  },
+  {
+    id: 5,
+    title: "Gladiator II",
+    type: "movie",
+    year: 2024,
+    imageUrl: "https://image.tmdb.org/t/p/w300/2cxhvwyEwRlysAmRH4iodkvo0z5.jpg",
+    link: "https://www.imdb.com/title/tt9218128/",
+  },
+];
+
+const queuedItems: QueuedMediaItem[] = [
+  {
+    id: 101,
+    title: "Oppenheimer",
+    type: "movie",
+    status: "downloading",
+    timeLeft: "1h 23m",
+    percentComplete: 62,
+    imageUrl: "https://image.tmdb.org/t/p/w300/8Gxv8gSFCU0XGDykEGv7zR1n2ua.jpg",
+    link: "https://www.imdb.com/title/tt15398776/",
+  },
+  {
+    id: 102,
+    title: "Shogun",
+    type: "episode",
+    seasonNumber: 1,
+    episodeNumber: 8,
+    seriesTitle: "Shogun",
+    status: "downloading",
+    timeLeft: "47m",
+    percentComplete: 81,
+    imageUrl: "https://image.tmdb.org/t/p/w300/7O4iVfOMQmdCSxhOg1WnzG1AgYT.jpg",
+    link: "https://www.imdb.com/title/tt2098771/",
+  },
+  {
+    id: 103,
+    title: "The Substance",
+    type: "movie",
+    status: "queued",
+    timeLeft: null,
+    percentComplete: 0,
+    imageUrl: "https://image.tmdb.org/t/p/w300/lqoMzCcZYEFK729d6qzt349fB4o.jpg",
+    link: "https://www.imdb.com/title/tt17526714/",
+  },
+  {
+    id: 104,
+    title: "House of the Dragon",
+    type: "episode",
+    seasonNumber: 2,
+    episodeNumber: 7,
+    seriesTitle: "House of the Dragon",
+    status: "importing",
+    timeLeft: "3m",
+    percentComplete: 99,
+    imageUrl: "https://image.tmdb.org/t/p/w300/z2yahl2uefxDCl0nogcRBstwruJ.jpg",
+    link: "https://www.imdb.com/title/tt11198330/",
+  },
+];
+
+export class MediaOrganizerMockService implements IMediaOrganizerIntegration {
+  async getMissingAsync(pageSize = 10) {
+    return {
+      items: missingItems.slice(0, pageSize),
+      totalCount: missingItems.length,
+    };
+  }
+
+  async getMediaQueueAsync(pageSize = 10) {
+    return {
+      items: queuedItems.slice(0, pageSize),
+      totalCount: queuedItems.length,
+    };
+  }
+}

packages/integrations/src/mock/mock-integration.ts

@@ -9,6 +9,7 @@ import type {
   ISystemHealthMonitoringIntegration,
 } from "../interfaces/health-monitoring/health-monitoring-integration";
 import type { IIndexerManagerIntegration } from "../interfaces/indexer-manager/indexer-manager-integration";
+import type { IMediaOrganizerIntegration } from "../interfaces/media-organizer/media-organizer-integration";
 import type { IMediaReleasesIntegration } from "../interfaces/media-releases";
 import type { IMediaRequestIntegration } from "../interfaces/media-requests/media-request-integration";
 import type { IMediaServerIntegration } from "../interfaces/media-server/media-server-integration";
@@ -21,6 +22,7 @@ import { ClusterHealthMonitoringMockService } from "./data/cluster-health-monito
 import { DnsHoleMockService } from "./data/dns-hole";
 import { DownloadClientMockService } from "./data/download";
 import { IndexerManagerMockService } from "./data/indexer-manager";
+import { MediaOrganizerMockService } from "./data/media-organizer";
 import { MediaReleasesMockService } from "./data/media-releases";
 import { MediaRequestMockService } from "./data/media-request";
 import { MediaServerMockService } from "./data/media-server";
@@ -41,6 +43,7 @@ export class MockIntegration
     IClusterHealthMonitoringIntegration,
     ISystemHealthMonitoringIntegration,
     IIndexerManagerIntegration,
+    IMediaOrganizerIntegration,
     IMediaReleasesIntegration,
     IMediaRequestIntegration,
     IMediaServerIntegration,
@@ -55,6 +58,7 @@ export class MockIntegration
   private static readonly clusterMonitoring = new ClusterHealthMonitoringMockService();
   private static readonly systemMonitoring = new SystemHealthMonitoringMockService();
   private static readonly indexerManager = new IndexerManagerMockService();
+  private static readonly mediaOrganizer = new MediaOrganizerMockService();
   private static readonly mediaReleases = new MediaReleasesMockService();
   private static readonly mediaRequest = new MediaRequestMockService();
   private static readonly mediaServer = new MediaServerMockService();
@@ -97,6 +101,10 @@ export class MockIntegration
   getIndexersAsync = MockIntegration.indexerManager.getIndexersAsync.bind(MockIntegration.indexerManager);
   testAllAsync = MockIntegration.indexerManager.testAllAsync.bind(MockIntegration.indexerManager);
 
+  // MediaOrganizerIntegration
+  getMissingAsync = MockIntegration.mediaOrganizer.getMissingAsync.bind(MockIntegration.mediaOrganizer);
+  getMediaQueueAsync = MockIntegration.mediaOrganizer.getMediaQueueAsync.bind(MockIntegration.mediaOrganizer);
+
   // MediaReleasesIntegration
   getMediaReleasesAsync = MockIntegration.mediaReleases.getMediaReleasesAsync.bind(MockIntegration.mediaReleases);
 

packages/integrations/src/overseerr/overseerr-integration.ts

@@ -132,11 +132,14 @@ export class OverseerrIntegration
       },
     );
 
-    const allRequests = await fetchWithTrustedCertificatesAsync(this.url("/api/v1/request", { take: 20 }), {
-      headers: {
-        "X-Api-Key": this.getSecretValue("apiKey"),
+    const allRequests = await fetchWithTrustedCertificatesAsync(
+      this.url("/api/v1/request", { take: 20, sort: "modified" }),
+      {
+        headers: {
+          "X-Api-Key": this.getSecretValue("apiKey"),
+        },
       },
-    });
+    );
 
     const pendingResults = (await getRequestsSchema.parseAsync(await pendingRequests.json())).results;
     const allResults = (await getRequestsSchema.parseAsync(await allRequests.json())).results;

packages/integrations/src/synology/synology-client.ts

@@ -0,0 +1,411 @@
+import type { Headers } from "undici";
+import type { z } from "zod";
+
+import { ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+import { createLogger } from "@homarr/core/infrastructure/logs";
+
+import type { SessionStore } from "../base/session-store";
+import {
+  AUTH_API_NAME,
+  INFO_API_NAME,
+  REQUEST_TIMEOUT_MS,
+  SESSION_ERROR_CODES,
+  synologyApiInfoResponseSchema,
+  synologyAuthResponseSchema,
+  synologyEnvelopeSchema,
+  synologyLegacyStorageDataSchema,
+  synologySmartInfoDataSchema,
+  synologyStorageLoadInfoDataSchema,
+  synologyStorageV2DataSchema,
+  synologySystemInfoDataSchema,
+  synologySystemStatusDataSchema,
+  synologyUpgradeCheckDataSchema,
+  synologyUpgradeStatusDataSchema,
+  synologyUtilizationDataSchema,
+  type SynologyDiskRecord,
+  type SynologyVolumeRecord,
+} from "./synology-types";
+
+const logger = createLogger({ module: "synologyClient" });
+
+const AUTH_SESSION_NAME = "DownloadStation";
+
+type ApiDefinition = {
+  cgiPath: string;
+  maxVersion: number;
+};
+
+type StoredSession = {
+  cookieHeader: string;
+};
+
+type SynologyClientOptions = {
+  integrationId: string;
+  baseUrl: string;
+  username: string;
+  password: string;
+  sessionStore: SessionStore<StoredSession>;
+};
+
+const apiDefinitionCache = new Map<string, ApiDefinition>();
+
+export class SynologyClient {
+  private readonly integrationId: string;
+  private readonly baseUrl: string;
+  private readonly username: string;
+  private readonly password: string;
+  private readonly sessionStore: SessionStore<StoredSession>;
+
+  constructor(options: SynologyClientOptions) {
+    this.integrationId = options.integrationId;
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.username = options.username;
+    this.password = options.password;
+    this.sessionStore = options.sessionStore;
+  }
+
+  public async getSystemInfoAsync() {
+    const response = await this.requestAsync("SYNO.Core.System", { method: "info" });
+    return synologySystemInfoDataSchema.parse(response.data);
+  }
+
+  public async getUtilizationAsync() {
+    const response = await this.requestAsync("SYNO.Core.System.Utilization", { method: "get" });
+    return synologyUtilizationDataSchema.parse(response.data);
+  }
+
+  public async getStorageVolumesAsync(): Promise<SynologyVolumeRecord[]> {
+    try {
+      const storageV2Response = await this.requestAsync("SYNO.Core.System", {
+        method: "info",
+        extraParams: { type: "storage_v2" },
+      });
+      const storageV2 = synologyStorageV2DataSchema.parse(storageV2Response.data);
+      const volumesFromV2 = this.mapStorageV2Volumes(storageV2);
+      if (volumesFromV2.length > 0) {
+        return volumesFromV2;
+      }
+    } catch (error) {
+      logger.debug("storage_v2 unavailable, falling back to legacy storage info", {
+        integrationId: this.integrationId,
+        error,
+      });
+    }
+
+    const legacyResponse = await this.requestAsync("SYNO.Core.System", {
+      method: "info",
+      extraParams: { type: "storage" },
+    });
+    const legacyStorage = synologyLegacyStorageDataSchema.parse(legacyResponse.data);
+    return this.mapLegacyVolumes(legacyStorage.vol_info ?? []);
+  }
+
+  public async getStorageLoadInfoAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Storage.CGI.Storage", { method: "load_info" });
+    if (!response) {
+      return null;
+    }
+    return synologyStorageLoadInfoDataSchema.parse(response.data);
+  }
+
+  public async getSmartInfoAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Storage.CGI.Smart", { method: "get_smart_info" });
+    if (!response) {
+      return null;
+    }
+    return synologySmartInfoDataSchema.parse(response.data);
+  }
+
+  public async getSystemStatusAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Core.System.Status", { method: "get" });
+    if (!response) {
+      return null;
+    }
+    return synologySystemStatusDataSchema.parse(response.data);
+  }
+
+  public async getUpgradeStatusAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Core.Upgrade", { method: "status" });
+    if (!response) {
+      return null;
+    }
+    return synologyUpgradeStatusDataSchema.parse(response.data);
+  }
+
+  public async getUpgradeCheckAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Core.Upgrade.Server", { method: "check" });
+    if (!response) {
+      return null;
+    }
+    return synologyUpgradeCheckDataSchema.parse(response.data);
+  }
+
+  public async testConnectionAsync() {
+    await this.getSystemInfoAsync();
+  }
+
+  private mapLegacyVolumes(volumes: z.infer<typeof synologyLegacyStorageDataSchema>["vol_info"]) {
+    return (volumes ?? [])
+      .map((volume) => this.mapVolumeRecord(volume.name, volume.used_size, volume.total_size, volume.status))
+      .filter((volume): volume is SynologyVolumeRecord => volume !== null);
+  }
+
+  private mapStorageV2Volumes(storage: z.infer<typeof synologyStorageV2DataSchema>) {
+    return (storage.volumes ?? [])
+      .map((volume) => {
+        const name = volume.id ?? volume.vol_path ?? volume.display_name;
+        if (!name) {
+          return null;
+        }
+        return this.mapVolumeRecord(
+          name,
+          volume.size?.used,
+          volume.size?.total,
+          volume.status,
+          volume.display_name,
+        );
+      })
+      .filter((volume): volume is SynologyVolumeRecord => volume !== null);
+  }
+
+  private mapVolumeRecord(
+    name: string,
+    usedValue: number | string | undefined,
+    totalValue: number | string | undefined,
+    status: string | undefined,
+    displayName?: string,
+  ): SynologyVolumeRecord | null {
+    const usedBytes = parseNumericValue(usedValue);
+    const totalBytes = parseNumericValue(totalValue);
+    if (usedBytes === null || totalBytes === null || totalBytes <= 0) {
+      return null;
+    }
+
+    return {
+      name,
+      displayName: displayName && displayName !== name ? displayName : undefined,
+      usedBytes,
+      totalBytes,
+      status,
+    };
+  }
+
+  public mapDisksFromLoadInfo(loadInfo: z.infer<typeof synologyStorageLoadInfoDataSchema>): SynologyDiskRecord[] {
+    return (loadInfo.disks ?? []).map((disk) => ({
+      identifier: disk.id ?? disk.name ?? disk.display_name ?? "unknown-disk",
+      name: disk.display_name ?? disk.name ?? disk.id ?? "unknown-disk",
+      status: disk.smart_status ?? disk.status,
+      temperature: parseOptionalNumericValue(disk.temp ?? disk.temperature),
+      volumeName: disk.volume_id ?? disk.vol_path,
+    }));
+  }
+
+  public mapDisksFromSmartInfo(smartInfo: z.infer<typeof synologySmartInfoDataSchema>): SynologyDiskRecord[] {
+    const disks = smartInfo.disks ?? smartInfo.items ?? [];
+    return disks.map((disk) => ({
+      identifier: disk.disk_id ?? disk.id ?? disk.name ?? "unknown-disk",
+      name: disk.name ?? disk.disk_id ?? disk.id ?? "unknown-disk",
+      status: disk.overall_status ?? disk.status,
+      temperature: parseOptionalNumericValue(disk.temp ?? disk.temperature),
+      volumeName: undefined,
+    }));
+  }
+
+  private async requestOptionalAsync(
+    apiName: string,
+    options: { method: string; extraParams?: Record<string, string> },
+  ) {
+    try {
+      return await this.requestAsync(apiName, options);
+    } catch (error) {
+      logger.debug("Optional Synology API request failed", {
+        integrationId: this.integrationId,
+        apiName,
+        method: options.method,
+        error,
+      });
+      return null;
+    }
+  }
+
+  private async requestAsync(
+    apiName: string,
+    options: { method: string; extraParams?: Record<string, string> },
+  ): Promise<z.infer<typeof synologyEnvelopeSchema>> {
+    return await this.withAuthenticatedSessionAsync(async (session) => {
+      const apiDefinition = await this.getApiDefinitionAsync(apiName);
+      const requestUrl = new URL(`${this.baseUrl}/webapi/${apiDefinition.cgiPath}`);
+      requestUrl.searchParams.set("api", apiName);
+      requestUrl.searchParams.set("version", String(apiDefinition.maxVersion));
+      requestUrl.searchParams.set("method", options.method);
+      for (const [key, value] of Object.entries(options.extraParams ?? {})) {
+        requestUrl.searchParams.set(key, value);
+      }
+
+      const response = await fetchWithTrustedCertificatesAsync(requestUrl, {
+        headers: {
+          Cookie: session.cookieHeader,
+          "User-Agent": "Homarr",
+        },
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+      });
+
+      if (!response.ok) {
+        throw new ResponseError(response);
+      }
+
+      const payload = synologyEnvelopeSchema.parse(await response.json());
+      if (!payload.success) {
+        const errorCode = payload.error?.code;
+        if (errorCode !== undefined && SESSION_ERROR_CODES.has(errorCode)) {
+          throw new SynologySessionError(errorCode);
+        }
+        throw new ResponseError({
+          status: 502,
+          url: requestUrl.toString(),
+        });
+      }
+
+      return payload;
+    });
+  }
+
+  private async withAuthenticatedSessionAsync<T>(callback: (session: StoredSession) => Promise<T>): Promise<T> {
+    const storedSession = await this.sessionStore.getAsync();
+    if (storedSession) {
+      try {
+        return await callback(storedSession);
+      } catch (error) {
+        if (!(error instanceof SynologySessionError)) {
+          throw error;
+        }
+        logger.debug("Synology session expired, re-authenticating", {
+          integrationId: this.integrationId,
+          errorCode: error.errorCode,
+        });
+        await this.sessionStore.clearAsync();
+      }
+    }
+
+    const session = await this.loginAsync();
+    await this.sessionStore.setAsync(session);
+    return await callback(session);
+  }
+
+  private async loginAsync(): Promise<StoredSession> {
+    const authDefinition = await this.getApiDefinitionAsync(AUTH_API_NAME);
+    const loginUrl = new URL(`${this.baseUrl}/webapi/${authDefinition.cgiPath}`);
+    loginUrl.searchParams.set("api", AUTH_API_NAME);
+    loginUrl.searchParams.set("version", String(authDefinition.maxVersion));
+    loginUrl.searchParams.set("method", "login");
+    const safeLoginUrl = loginUrl.toString();
+
+    const response = await fetchWithTrustedCertificatesAsync(loginUrl, {
+      method: "POST",
+      headers: {
+        "User-Agent": "Homarr",
+        "Content-Type": "application/x-www-form-urlencoded",
+      },
+      body: new URLSearchParams({
+        account: this.username,
+        passwd: this.password,
+        session: AUTH_SESSION_NAME,
+        format: "cookie",
+      }).toString(),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+
+    if (!response.ok) {
+      throw new ResponseError({ status: response.status, url: safeLoginUrl });
+    }
+
+    const payload = synologyAuthResponseSchema.parse(await response.json());
+    if (!payload.success) {
+      throw new ResponseError({
+        status: 401,
+        url: safeLoginUrl,
+      });
+    }
+
+    const cookieHeader = extractCookieHeader(response.headers);
+    if (!cookieHeader) {
+      throw new ResponseError({
+        status: 401,
+        url: safeLoginUrl,
+      });
+    }
+
+    return { cookieHeader };
+  }
+
+  private async getApiDefinitionAsync(apiName: string): Promise<ApiDefinition> {
+    const cacheKey = `${this.integrationId}:${apiName}`;
+    const cachedDefinition = apiDefinitionCache.get(cacheKey);
+    if (cachedDefinition) {
+      return cachedDefinition;
+    }
+
+    const infoUrl = new URL(`${this.baseUrl}/webapi/query.cgi`);
+    infoUrl.searchParams.set("api", INFO_API_NAME);
+    infoUrl.searchParams.set("version", "1");
+    infoUrl.searchParams.set("method", "query");
+    infoUrl.searchParams.set("query", apiName);
+
+    const response = await fetchWithTrustedCertificatesAsync(infoUrl, {
+      headers: {
+        "User-Agent": "Homarr",
+      },
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    const payload = synologyApiInfoResponseSchema.parse(await response.json());
+    const apiDefinition = payload.data?.[apiName];
+    if (!payload.success || !apiDefinition) {
+      throw new ResponseError({
+        status: 502,
+        url: infoUrl.toString(),
+      });
+    }
+
+    const definition = {
+      cgiPath: apiDefinition.path,
+      maxVersion: apiDefinition.maxVersion,
+    };
+    apiDefinitionCache.set(cacheKey, definition);
+    return definition;
+  }
+}
+
+class SynologySessionError extends Error {
+  constructor(public readonly errorCode: number) {
+    super(`Synology session error ${String(errorCode)}`);
+    this.name = SynologySessionError.name;
+  }
+}
+
+function extractCookieHeader(headers: Headers): string | null {
+  const cookies = headers.getSetCookie();
+  if (cookies.length === 0) {
+    return null;
+  }
+
+  return cookies.map((cookie) => cookie.split(";")[0]).join("; ");
+}
+
+function parseNumericValue(value: number | string | undefined): number | null {
+  if (value === undefined) {
+    return null;
+  }
+  const parsed = typeof value === "number" ? value : Number.parseFloat(value);
+  return Number.isFinite(parsed) ? parsed : null;
+}
+
+function parseOptionalNumericValue(value: number | string | undefined): number | null {
+  const parsed = parseNumericValue(value);
+  return parsed === null ? null : parsed;
+}

packages/integrations/src/synology/synology-integration.ts

@@ -0,0 +1,323 @@
+import type { z } from "zod";
+
+import { createLogger } from "@homarr/core/infrastructure/logs";
+
+import { HandleIntegrationErrors } from "../base/errors/decorator";
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import { createSessionStore } from "../base/session-store";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type { ISystemHealthMonitoringIntegration } from "../interfaces/health-monitoring/health-monitoring-integration";
+import type { SystemHealthMonitoring } from "../interfaces/health-monitoring/health-monitoring-types";
+import { SynologyClient } from "./synology-client";
+import type { SynologyDiskRecord, SynologyVolumeRecord } from "./synology-types";
+import type { synologySystemInfoDataSchema, synologyUtilizationDataSchema } from "./synology-types";
+
+const logger = createLogger({ module: "synologyIntegration" });
+
+type StoredSession = {
+  cookieHeader: string;
+};
+
+@HandleIntegrationErrors([])
+export class SynologyIntegration extends Integration implements ISystemHealthMonitoringIntegration {
+  private readonly sessionStore = createSessionStore<StoredSession>(this.integration);
+  private client?: SynologyClient;
+
+  protected async testingAsync(_input: IntegrationTestingInput): Promise<TestingResult> {
+    await this.getClient().testConnectionAsync();
+    return { success: true };
+  }
+
+  public async getSystemInfoAsync(): Promise<SystemHealthMonitoring> {
+    const client = this.getClient();
+
+    const [systemInfo, utilization, volumes] = await Promise.all([
+      client.getSystemInfoAsync(),
+      client.getUtilizationAsync(),
+      client.getStorageVolumesAsync(),
+    ]);
+
+    const [storageLoadInfoResult, smartInfoResult, systemStatusResult, upgradeStatusResult, upgradeCheckResult] =
+      await Promise.allSettled([
+        client.getStorageLoadInfoAsync(),
+        client.getSmartInfoAsync(),
+        client.getSystemStatusAsync(),
+        client.getUpgradeStatusAsync(),
+        client.getUpgradeCheckAsync(),
+      ]);
+
+    const storageLoadInfo = getSettledValue(storageLoadInfoResult);
+    const smartInfo = getSettledValue(smartInfoResult);
+    const systemStatus = getSettledValue(systemStatusResult);
+    const upgradeStatus = getSettledValue(upgradeStatusResult);
+    const upgradeCheck = getSettledValue(upgradeCheckResult);
+
+    const diskRecords = mergeDiskRecords(
+      storageLoadInfo ? client.mapDisksFromLoadInfo(storageLoadInfo) : [],
+      smartInfo ? client.mapDisksFromSmartInfo(smartInfo) : [],
+    );
+
+    const memory = mapMemoryBytes(utilization);
+    const network = mapNetworkTraffic(utilization);
+    const loadAverage = mapLoadAverage(utilization);
+    const smart = mapVolumeSmartEntries(volumes, diskRecords);
+    const rebootRequired = Boolean(systemStatus?.reboot_required ?? upgradeStatus?.reboot_required ?? false);
+    const availablePkgUpdates = upgradeCheck?.update_count ?? (upgradeCheck?.available ? 1 : 0);
+
+    return {
+      version: mapVersion(systemInfo),
+      cpuModelName: systemInfo.model ?? "Unknown CPU",
+      cpuUtilization: mapCpuUtilization(utilization),
+      memUsedInBytes: memory.usedBytes,
+      memAvailableInBytes: memory.availableBytes,
+      uptime: mapUptimeSeconds(systemInfo),
+      network,
+      loadAverage,
+      rebootRequired,
+      availablePkgUpdates,
+      cpuTemp: mapCpuTemperature(systemInfo),
+      fileSystem: mapFileSystemEntries(volumes),
+      smart,
+      gpu: [],
+    };
+  }
+
+  public async listStorageVolumesAsync(): Promise<{ value: string; label: string }[]> {
+    const volumes = await this.getClient().getStorageVolumesAsync();
+    const { id: integrationId, name: integrationName } = this.integration;
+    return volumes.map((volume) => ({
+      value: `${integrationId}:${volume.name}`,
+      label: `${volume.displayName ?? volume.name} (${integrationName})`,
+    }));
+  }
+
+  private getClient(): SynologyClient {
+    return (this.client ??= new SynologyClient({
+      integrationId: this.integration.id,
+      baseUrl: this.integration.url,
+      username: this.getSecretValue("username"),
+      password: this.getSecretValue("password"),
+      sessionStore: this.sessionStore,
+    }));
+  }
+}
+
+function getSettledValue<T>(result: PromiseSettledResult<T>): T | null {
+  if (result.status === "rejected") {
+    logger.debug("Optional Synology API call failed", { reason: result.reason });
+    return null;
+  }
+  return result.value;
+}
+
+function mapVersion(systemInfo: z.infer<typeof synologySystemInfoDataSchema>): string {
+  if (systemInfo.version_string) {
+    return systemInfo.version_string;
+  }
+  if (systemInfo.firmware_ver) {
+    return systemInfo.firmware_ver;
+  }
+  if (systemInfo.version !== undefined) {
+    return String(systemInfo.version);
+  }
+  return "Unknown";
+}
+
+function mapCpuUtilization(utilization: z.infer<typeof synologyUtilizationDataSchema>): number {
+  const userLoad = parseNumericValue(utilization.cpu?.user_load) ?? 0;
+  const systemLoad = parseNumericValue(utilization.cpu?.system_load) ?? 0;
+  const totalLoad = userLoad + systemLoad;
+  return Math.min(totalLoad, 100);
+}
+
+function mapMemoryBytes(utilization: z.infer<typeof synologyUtilizationDataSchema>) {
+  const memory = utilization.memory;
+  const totalRealKib = parseNumericValue(memory?.total_real);
+  const realUsagePercent = parseNumericValue(memory?.real_usage);
+
+  // DSM utilization API reports memory sizes in KiB, not bytes.
+  if (totalRealKib !== null && realUsagePercent !== null) {
+    const totalBytes = totalRealKib * 1024;
+    const usedBytes = Math.round((totalBytes * realUsagePercent) / 100);
+    return {
+      usedBytes,
+      availableBytes: Math.max(totalBytes - usedBytes, 0),
+    };
+  }
+
+  const availableKib = parseNumericValue(memory?.avail_real) ?? 0;
+  const cachedKib = parseNumericValue(memory?.cached) ?? 0;
+  const totalKib = totalRealKib ?? availableKib + cachedKib;
+  const usedKib = Math.max(totalKib - availableKib, 0);
+
+  return {
+    usedBytes: usedKib * 1024,
+    availableBytes: availableKib * 1024,
+  };
+}
+
+function mapNetworkTraffic(utilization: z.infer<typeof synologyUtilizationDataSchema>) {
+  const totalNetwork = utilization.network?.find((entry) => entry.device === "total");
+  if (!totalNetwork) {
+    return null;
+  }
+
+  const received = parseNumericValue(totalNetwork.rx);
+  const transmitted = parseNumericValue(totalNetwork.tx);
+  if (received === null || transmitted === null) {
+    return null;
+  }
+
+  return {
+    up: transmitted,
+    down: received,
+  };
+}
+
+function mapLoadAverage(utilization: z.infer<typeof synologyUtilizationDataSchema>) {
+  const oneMinute = parseNumericValue(utilization.cpu?.["1min_load"]);
+  const fiveMinute = parseNumericValue(utilization.cpu?.["5min_load"]);
+  const fifteenMinute = parseNumericValue(utilization.cpu?.["15min_load"]);
+
+  if (oneMinute === null && fiveMinute === null && fifteenMinute === null) {
+    return null;
+  }
+
+  return {
+    "1min": oneMinute ?? 0,
+    "5min": fiveMinute ?? 0,
+    "15min": fifteenMinute ?? 0,
+  };
+}
+
+function mapUptimeSeconds(systemInfo: z.infer<typeof synologySystemInfoDataSchema>): number {
+  if (typeof systemInfo.uptime === "number") {
+    return systemInfo.uptime;
+  }
+
+  if (!systemInfo.up_time) {
+    return 0;
+  }
+
+  const parts = systemInfo.up_time.split(":").map((part) => Number.parseInt(part, 10));
+  if (parts.length !== 3 || parts.some((part) => Number.isNaN(part))) {
+    return 0;
+  }
+
+  const [hours = 0, minutes = 0, seconds = 0] = parts;
+  return hours * 3600 + minutes * 60 + seconds;
+}
+
+function mapCpuTemperature(systemInfo: z.infer<typeof synologySystemInfoDataSchema>): number | undefined {
+  const temperature = parseNumericValue(systemInfo.sys_temp ?? systemInfo.temperature);
+  return temperature === null ? undefined : temperature;
+}
+
+function mapFileSystemEntries(volumes: SynologyVolumeRecord[]) {
+  return volumes.map((volume) => {
+    const availableBytes = Math.max(volume.totalBytes - volume.usedBytes, 0);
+    return {
+      deviceName: volume.name,
+      used: `${volume.usedBytes}`,
+      available: `${availableBytes}`,
+      percentage: (volume.usedBytes / volume.totalBytes) * 100,
+    };
+  });
+}
+
+function mapVolumeSmartEntries(volumes: SynologyVolumeRecord[], diskRecords: SynologyDiskRecord[]) {
+  return volumes.map((volume) => {
+    const matchingDisks = diskRecords.filter((disk) => diskBelongsToVolume(disk, volume.name));
+    const temperatures = matchingDisks
+      .map((disk) => disk.temperature)
+      .filter((temperature): temperature is number => temperature !== null);
+    const overallStatus = volume.status ?? pickWorstDiskStatus(matchingDisks);
+
+    return {
+      deviceName: volume.name,
+      healthy: isHealthyStatus(overallStatus),
+      overallStatus,
+      temperature: temperatures.length > 0 ? Math.max(...temperatures) : null,
+    };
+  });
+}
+
+function mergeDiskRecords(
+  loadInfoDisks: SynologyDiskRecord[],
+  smartInfoDisks: SynologyDiskRecord[],
+): SynologyDiskRecord[] {
+  const diskMap = new Map<string, SynologyDiskRecord>();
+
+  for (const disk of loadInfoDisks) {
+    diskMap.set(disk.identifier, disk);
+  }
+
+  for (const disk of smartInfoDisks) {
+    const existingDisk = diskMap.get(disk.identifier);
+    diskMap.set(disk.identifier, {
+      identifier: disk.identifier,
+      name: existingDisk?.name ?? disk.name,
+      status: disk.status ?? existingDisk?.status,
+      temperature: disk.temperature ?? existingDisk?.temperature ?? null,
+      volumeName: existingDisk?.volumeName ?? disk.volumeName,
+    });
+  }
+
+  return [...diskMap.values()];
+}
+
+function diskBelongsToVolume(disk: SynologyDiskRecord, volumeName: string): boolean {
+  if (!disk.volumeName) {
+    return false;
+  }
+
+  return (
+    disk.volumeName === volumeName ||
+    disk.volumeName.endsWith(volumeName) ||
+    volumeName.endsWith(disk.volumeName) ||
+    disk.volumeName.includes(volumeName) ||
+    volumeName.includes(disk.volumeName)
+  );
+}
+
+const UNHEALTHY_STATUS_TOKENS = ["critical", "error", "crash", "failed", "fail", "degraded", "warning"] as const;
+
+function getStatusSeverityIndex(status: string): number {
+  const normalizedStatus = status.toLowerCase();
+  const index = UNHEALTHY_STATUS_TOKENS.findIndex((token) => normalizedStatus.includes(token));
+  return index === -1 ? UNHEALTHY_STATUS_TOKENS.length : index;
+}
+
+function pickWorstDiskStatus(disks: SynologyDiskRecord[]): string {
+  const statuses = disks
+    .map((disk) => disk.status)
+    .filter((status): status is string => status !== undefined && status.length > 0);
+
+  if (statuses.length === 0) {
+    return "normal";
+  }
+
+  return statuses.reduce((worstStatus, currentStatus) =>
+    getStatusSeverityIndex(currentStatus) < getStatusSeverityIndex(worstStatus) ? currentStatus : worstStatus,
+  );
+}
+
+function isHealthyStatus(status: string | undefined): boolean {
+  if (!status) {
+    return true;
+  }
+
+  const normalizedStatus = status.toLowerCase();
+  return !["crash", "degraded", "fail", "failed", "warning", "error", "critical"].some((unhealthyToken) =>
+    normalizedStatus.includes(unhealthyToken),
+  );
+}
+
+function parseNumericValue(value: number | string | undefined): number | null {
+  if (value === undefined) {
+    return null;
+  }
+  const parsed = typeof value === "number" ? value : Number.parseFloat(value);
+  return Number.isFinite(parsed) ? parsed : null;
+}

packages/integrations/src/synology/synology-types.ts

@@ -0,0 +1,191 @@
+import { z } from "zod";
+
+export const REQUEST_TIMEOUT_MS = 5000;
+
+export const AUTH_API_NAME = "SYNO.API.Auth";
+export const INFO_API_NAME = "SYNO.API.Info";
+
+export const SESSION_ERROR_CODES = new Set([106, 107, 119]);
+
+export const synologyEnvelopeSchema = z.object({
+  success: z.boolean(),
+  data: z.unknown().optional(),
+  error: z
+    .object({
+      code: z.number(),
+    })
+    .optional(),
+});
+
+export const synologyApiDefinitionSchema = z.object({
+  path: z.string(),
+  maxVersion: z.number(),
+});
+
+export const synologyApiInfoResponseSchema = synologyEnvelopeSchema.extend({
+  data: z.record(z.string(), synologyApiDefinitionSchema).optional(),
+});
+
+export const synologyAuthResponseSchema = synologyEnvelopeSchema.extend({
+  data: z
+    .object({
+      sid: z.string().optional(),
+    })
+    .optional(),
+});
+
+const numericString = z.union([z.number(), z.string()]);
+
+export const synologySystemInfoDataSchema = z
+  .object({
+    up_time: z.string().optional(),
+    uptime: z.number().optional(),
+    version_string: z.string().optional(),
+    firmware_ver: z.string().optional(),
+    version: z.union([z.string(), z.number()]).optional(),
+    model: z.string().optional(),
+    sys_temp: numericString.optional(),
+    temperature: numericString.optional(),
+  })
+  .passthrough();
+
+export const synologyVolumeInfoSchema = z.object({
+  name: z.string(),
+  used_size: numericString.optional(),
+  total_size: numericString.optional(),
+  status: z.string().optional(),
+  vol_path: z.string().optional(),
+});
+
+export const synologyLegacyStorageDataSchema = z.object({
+  vol_info: z.array(synologyVolumeInfoSchema).optional(),
+});
+
+export const synologyStorageV2VolumeSchema = z
+  .object({
+    id: z.string().optional(),
+    vol_path: z.string().optional(),
+    display_name: z.string().optional(),
+    size: z
+      .object({
+        total: z.union([z.number(), z.string()]).optional(),
+        used: z.union([z.number(), z.string()]).optional(),
+      })
+      .optional(),
+    status: z.string().optional(),
+  })
+  .passthrough();
+
+export const synologyStorageV2DataSchema = z.object({
+  volumes: z.array(synologyStorageV2VolumeSchema).optional(),
+});
+
+export const synologyUtilizationCpuSchema = z.object({
+  user_load: numericString.optional(),
+  system_load: numericString.optional(),
+  other_load: numericString.optional(),
+  "1min_load": numericString.optional(),
+  "5min_load": numericString.optional(),
+  "15min_load": numericString.optional(),
+});
+
+export const synologyUtilizationMemorySchema = z.object({
+  real_usage: numericString.optional(),
+  avail_real: numericString.optional(),
+  cached: numericString.optional(),
+  total_real: numericString.optional(),
+});
+
+export const synologyUtilizationNetworkSchema = z.object({
+  device: z.string(),
+  rx: numericString.optional(),
+  tx: numericString.optional(),
+});
+
+export const synologyUtilizationDataSchema = z.object({
+  cpu: synologyUtilizationCpuSchema.optional(),
+  memory: synologyUtilizationMemorySchema.optional(),
+  network: z.array(synologyUtilizationNetworkSchema).optional(),
+});
+
+export const synologyStorageDiskSchema = z
+  .object({
+    id: z.string().optional(),
+    name: z.string().optional(),
+    display_name: z.string().optional(),
+    status: z.string().optional(),
+    temp: numericString.optional(),
+    temperature: numericString.optional(),
+    smart_status: z.string().optional(),
+    volume_id: z.string().optional(),
+    vol_path: z.string().optional(),
+  })
+  .passthrough();
+
+export const synologyStorageLoadInfoDataSchema = z
+  .object({
+    disks: z.array(synologyStorageDiskSchema).optional(),
+    volumes: z.array(synologyStorageV2VolumeSchema).optional(),
+    overview_data: z
+      .object({
+        volumes: z.array(synologyVolumeInfoSchema).optional(),
+      })
+      .optional(),
+  })
+  .passthrough();
+
+export const synologySmartDiskSchema = z
+  .object({
+    id: z.string().optional(),
+    disk_id: z.string().optional(),
+    name: z.string().optional(),
+    status: z.string().optional(),
+    temp: numericString.optional(),
+    temperature: numericString.optional(),
+    overall_status: z.string().optional(),
+  })
+  .passthrough();
+
+export const synologySmartInfoDataSchema = z
+  .object({
+    disks: z.array(synologySmartDiskSchema).optional(),
+    items: z.array(synologySmartDiskSchema).optional(),
+  })
+  .passthrough();
+
+export const synologySystemStatusDataSchema = z
+  .object({
+    reboot_required: z.boolean().optional(),
+    system_need_repair: z.boolean().optional(),
+  })
+  .passthrough();
+
+export const synologyUpgradeStatusDataSchema = z
+  .object({
+    reboot_required: z.boolean().optional(),
+    upgrade_ready: z.boolean().optional(),
+  })
+  .passthrough();
+
+export const synologyUpgradeCheckDataSchema = z
+  .object({
+    available: z.boolean().optional(),
+    update_count: z.number().optional(),
+  })
+  .passthrough();
+
+export type SynologyVolumeRecord = {
+  name: string;
+  displayName?: string;
+  usedBytes: number;
+  totalBytes: number;
+  status: string | undefined;
+};
+
+export type SynologyDiskRecord = {
+  identifier: string;
+  name: string;
+  status: string | undefined;
+  temperature: number | null;
+  volumeName: string | undefined;
+};

packages/integrations/src/synology/test/synology-integration.spec.ts

@@ -0,0 +1,585 @@
+// @vitest-environment node
+
+import { Response } from "undici";
+import { beforeEach, describe, expect, test, vi } from "vitest";
+
+vi.hoisted(() => {
+  process.env.CI = "true";
+  process.env.NODE_ENV = "test";
+  process.env.SECRET_ENCRYPTION_KEY = "0".repeat(64);
+});
+
+vi.mock("@homarr/core/infrastructure/http", () => ({
+  fetchWithTrustedCertificatesAsync: vi.fn(),
+}));
+
+vi.mock("@homarr/core/infrastructure/logs", () => ({
+  createLogger: () => ({
+    debug: vi.fn(),
+    info: vi.fn(),
+    warn: vi.fn(),
+    error: vi.fn(),
+  }),
+}));
+
+vi.mock("../../base/session-store", () => ({
+  createSessionStore: () => ({
+    getAsync: vi.fn().mockResolvedValue(null),
+    setAsync: vi.fn().mockResolvedValue(undefined),
+    clearAsync: vi.fn().mockResolvedValue(undefined),
+  }),
+}));
+
+import { ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import { IntegrationResponseError } from "../../base/errors/http/integration-response-error";
+
+import type { IntegrationSecret } from "../../base/types";
+import { SynologyIntegration } from "../synology-integration";
+
+const TEST_URL = "https://synology.example.com:5001";
+const mockFetch = vi.mocked(fetchWithTrustedCertificatesAsync);
+
+const createIntegration = (secrets: IntegrationSecret[] = []) =>
+  new SynologyIntegration({
+    id: "test-synology",
+    name: "Test Synology",
+    url: TEST_URL,
+    externalUrl: null,
+    decryptedSecrets: secrets.length
+      ? secrets
+      : [
+          { kind: "username", value: "homarr" },
+          { kind: "password", value: "secret-password" },
+        ],
+  });
+
+const apiDefinitions = {
+  "SYNO.API.Auth": { path: "auth.cgi", maxVersion: 7 },
+  "SYNO.API.Info": { path: "query.cgi", maxVersion: 1 },
+  "SYNO.Core.System": { path: "entry.cgi", maxVersion: 3 },
+  "SYNO.Core.System.Utilization": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Storage.CGI.Storage": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Storage.CGI.Smart": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Core.System.Status": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Core.Upgrade": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Core.Upgrade.Server": { path: "entry.cgi", maxVersion: 1 },
+};
+
+const systemInfoResponse = {
+  success: true as const,
+  data: {
+    up_time: "48:30:15",
+    version_string: "DSM 7.3-12345",
+    model: "DS920+",
+    sys_temp: 42,
+  },
+};
+
+const utilizationResponse = {
+  success: true,
+  data: {
+    cpu: {
+      user_load: 12,
+      system_load: 8,
+      "1min_load": 10,
+      "5min_load": 14,
+      "15min_load": 9,
+    },
+    memory: {
+      real_usage: 35,
+      total_real: 8 * 1024 * 1024,
+      avail_real: Math.round(8 * 1024 * 1024 * 0.65),
+      cached: 900_000,
+    },
+    network: [
+      { device: "total", rx: 4096, tx: 8192 },
+      { device: "eth0", rx: 4096, tx: 8192 },
+    ],
+  },
+};
+
+const storageV2Response = {
+  success: true,
+  data: {
+    volumes: [
+      {
+        id: "volume_1",
+        display_name: "Data Volume 1",
+        size: { total: 10_000_000_000, used: 4_000_000_000 },
+        status: "normal",
+      },
+      {
+        id: "volume_2",
+        display_name: "Data Volume 2",
+        size: { total: 20_000_000_000, used: 5_000_000_000 },
+        status: "degraded",
+      },
+    ],
+  },
+};
+
+const storageLoadInfoResponse = {
+  success: true,
+  data: {
+    disks: [
+      {
+        id: "sda",
+        display_name: "Drive 1",
+        temp: 38,
+        status: "normal",
+        volume_id: "volume_1",
+      },
+      {
+        id: "sdb",
+        display_name: "Drive 2",
+        temp: 44,
+        status: "normal",
+        volume_id: "volume_2",
+      },
+    ],
+  },
+};
+
+const smartInfoResponse = {
+  success: true,
+  data: {
+    disks: [
+      {
+        disk_id: "sda",
+        name: "Drive 1",
+        overall_status: "normal",
+        temp: 39,
+      },
+    ],
+  },
+};
+
+const systemStatusResponse = {
+  success: true,
+  data: {
+    reboot_required: true,
+  },
+};
+
+const upgradeStatusResponse = {
+  success: true,
+  data: {
+    reboot_required: false,
+  },
+};
+
+const upgradeCheckResponse = {
+  success: true,
+  data: {
+    available: true,
+    update_count: 2,
+  },
+};
+
+const toUrlString = (url: unknown): string => String(url);
+
+const getApiFromUrl = (url: string) => {
+  const parsedUrl = new URL(url);
+  return parsedUrl.searchParams.get("api");
+};
+
+const getMethodFromUrl = (url: string) => {
+  const parsedUrl = new URL(url);
+  return parsedUrl.searchParams.get("method");
+};
+
+const getTypeFromUrl = (url: string) => {
+  const parsedUrl = new URL(url);
+  return parsedUrl.searchParams.get("type");
+};
+
+const mockSuccessfulFlow = (options?: {
+  skipStorageV2?: boolean;
+  skipOptional?: boolean;
+  systemInfo?: {
+    success: boolean;
+    data: Record<string, unknown>;
+  };
+  utilization?: typeof utilizationResponse;
+  storageV2?: typeof storageV2Response;
+  storageLoadInfo?: typeof storageLoadInfoResponse;
+}) => {
+  mockFetch.mockImplementation((url) => {
+    const urlString = toUrlString(url);
+    const apiName = getApiFromUrl(urlString);
+    const method = getMethodFromUrl(urlString);
+    const type = getTypeFromUrl(urlString);
+
+    if (apiName === "SYNO.API.Info" && method === "query") {
+      const query = new URL(urlString).searchParams.get("query") ?? "SYNO.API.Auth";
+      const definition = apiDefinitions[query as keyof typeof apiDefinitions];
+      return Promise.resolve(
+        new Response(JSON.stringify({ success: true, data: { [query]: definition } }), {
+          status: 200,
+          headers: { "Content-Type": "application/json" },
+        }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.API.Auth" && method === "login") {
+      return Promise.resolve(
+        new Response(JSON.stringify({ success: true, data: { sid: "test-session-id" } }), {
+          status: 200,
+          headers: {
+            "Content-Type": "application/json",
+            "Set-Cookie": "id=test-session-id; Path=/; HttpOnly",
+          },
+        }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System" && method === "info" && type === "storage_v2") {
+      if (options?.skipStorageV2) {
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: false, error: { code: 103 } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+      return Promise.resolve(new Response(JSON.stringify(options?.storageV2 ?? storageV2Response), { status: 200 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    }
+
+    if (apiName === "SYNO.Core.System" && method === "info" && type === "storage") {
+      return Promise.resolve(
+        new Response(
+          JSON.stringify({
+            success: true,
+            data: {
+              vol_info: [
+                {
+                  name: "volume_1",
+                  used_size: 4_000_000_000,
+                  total_size: 10_000_000_000,
+                  status: "normal",
+                },
+              ],
+            },
+          }),
+          { status: 200 },
+        ),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System" && method === "info" && !type) {
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.systemInfo ?? systemInfoResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System.Utilization" && method === "get") {
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.utilization ?? utilizationResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (options?.skipOptional) {
+      return Promise.resolve(
+        new Response(JSON.stringify({ success: false, error: { code: 105 } }), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Storage.CGI.Storage" && method === "load_info") {
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.storageLoadInfo ?? storageLoadInfoResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Storage.CGI.Smart" && method === "get_smart_info") {
+      return Promise.resolve(new Response(JSON.stringify(smartInfoResponse), { status: 200 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    }
+
+    if (apiName === "SYNO.Core.System.Status" && method === "get") {
+      return Promise.resolve(
+        new Response(JSON.stringify(systemStatusResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.Upgrade" && method === "status") {
+      return Promise.resolve(
+        new Response(JSON.stringify(upgradeStatusResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.Upgrade.Server" && method === "check") {
+      return Promise.resolve(
+        new Response(JSON.stringify(upgradeCheckResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    return Promise.resolve(
+      new Response(JSON.stringify({ success: false, error: { code: 102 } }), { status: 200 }),
+    ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+  });
+};
+
+beforeEach(() => {
+  mockFetch.mockReset();
+});
+
+describe("SynologyIntegration.getSystemInfoAsync", () => {
+  test("maps all supported health monitoring fields", async () => {
+    mockSuccessfulFlow();
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.version).toBe("DSM 7.3-12345");
+    expect(result.cpuModelName).toBe("DS920+");
+    expect(result.cpuUtilization).toBe(20);
+    expect(result.memUsedInBytes).toBe(Math.round((8 * 1024 * 1024 * 1024 * 35) / 100));
+    expect(result.memAvailableInBytes).toBe(8 * 1024 * 1024 * 1024 - Math.round((8 * 1024 * 1024 * 1024 * 35) / 100));
+    expect(result.uptime).toBe(48 * 3600 + 30 * 60 + 15);
+    expect(result.cpuTemp).toBe(42);
+    expect(result.network).toEqual({ up: 8192, down: 4096 });
+    expect(result.loadAverage).toEqual({ "1min": 10, "5min": 14, "15min": 9 });
+    expect(result.rebootRequired).toBe(true);
+    expect(result.availablePkgUpdates).toBe(2);
+    expect(result.gpu).toEqual([]);
+    expect(result.fileSystem).toHaveLength(2);
+    expect(result.fileSystem[0]).toEqual({
+      deviceName: "volume_1",
+      used: "4000000000",
+      available: "6000000000",
+      percentage: 40,
+    });
+    expect(result.smart).toEqual([
+      {
+        deviceName: "volume_1",
+        healthy: true,
+        overallStatus: "normal",
+        temperature: 39,
+      },
+      {
+        deviceName: "volume_2",
+        healthy: false,
+        overallStatus: "degraded",
+        temperature: 44,
+      },
+    ]);
+  });
+
+  test("picks worst disk status when volume status is missing", async () => {
+    mockSuccessfulFlow({
+      storageV2: {
+        success: true,
+        data: {
+          volumes: [
+            {
+              id: "volume_1",
+              display_name: "Data Volume 1",
+              size: { total: 10_000_000_000, used: 4_000_000_000 },
+            },
+          ],
+        },
+      },
+      storageLoadInfo: {
+        success: true,
+        data: {
+          disks: [
+            {
+              id: "sda",
+              display_name: "Drive 1",
+              temp: 38,
+              status: "normal",
+              volume_id: "volume_1",
+            },
+            {
+              id: "sdb",
+              display_name: "Drive 2",
+              temp: 40,
+              status: "degraded",
+              volume_id: "volume_1",
+            },
+          ],
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.smart).toEqual([
+      {
+        deviceName: "volume_1",
+        healthy: false,
+        overallStatus: "degraded",
+        temperature: 40,
+      },
+    ]);
+  });
+
+  test("falls back to legacy storage info when storage_v2 is unavailable", async () => {
+    mockSuccessfulFlow({ skipStorageV2: true });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.fileSystem).toHaveLength(1);
+    expect(result.fileSystem[0]?.deviceName).toBe("volume_1");
+  });
+
+  test("continues when optional tier-2 calls fail", async () => {
+    mockSuccessfulFlow({ skipOptional: true });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.cpuUtilization).toBe(20);
+    expect(result.rebootRequired).toBe(false);
+    expect(result.availablePkgUpdates).toBe(0);
+    expect(result.smart.every((entry) => entry.temperature === null)).toBe(true);
+  });
+
+  test("converts memory values from KiB to bytes", async () => {
+    mockSuccessfulFlow({
+      utilization: {
+        ...utilizationResponse,
+        data: {
+          ...utilizationResponse.data,
+          memory: {
+            real_usage: 17,
+            total_real: 16_351_532,
+            avail_real: 426_568,
+          },
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    const totalBytes = 16_351_532 * 1024;
+    expect(result.memUsedInBytes).toBe(Math.round((totalBytes * 17) / 100));
+    expect(result.memAvailableInBytes).toBe(totalBytes - Math.round((totalBytes * 17) / 100));
+  });
+
+  test("caps cpu utilization at 100 when user and system load exceed 100", async () => {
+    mockSuccessfulFlow({
+      utilization: {
+        ...utilizationResponse,
+        data: {
+          ...utilizationResponse.data,
+          cpu: {
+            ...utilizationResponse.data.cpu,
+            user_load: 80,
+            system_load: 30,
+          },
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.cpuUtilization).toBe(100);
+  });
+
+  test("returns undefined cpu temperature when sensor is absent", async () => {
+    mockSuccessfulFlow({
+      systemInfo: {
+        success: true,
+        data: {
+          up_time: "01:00:00",
+          version_string: "DSM 7.3-12345",
+          model: "DS920+",
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+    expect(result.cpuTemp).toBeUndefined();
+  });
+});
+
+describe("SynologyIntegration.listStorageVolumesAsync", () => {
+  test("returns auto-detected volume names", async () => {
+    mockSuccessfulFlow();
+    const integration = createIntegration();
+    const volumes = await integration.listStorageVolumesAsync();
+
+    expect(volumes).toEqual([
+      { value: "test-synology:volume_1", label: "Data Volume 1 (Test Synology)" },
+      { value: "test-synology:volume_2", label: "Data Volume 2 (Test Synology)" },
+    ]);
+  });
+});
+
+describe("SynologyIntegration authentication", () => {
+  test("rejects two-factor authentication during login", async () => {
+    mockFetch.mockImplementation((url) => {
+      const urlString = toUrlString(url);
+      const apiName = getApiFromUrl(urlString);
+      const method = getMethodFromUrl(urlString);
+
+      if (apiName === "SYNO.API.Info" && method === "query") {
+        const query = new URL(urlString).searchParams.get("query") ?? "SYNO.API.Auth";
+        const definition = apiDefinitions[query as keyof typeof apiDefinitions];
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: true, data: { [query]: definition } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      if (apiName === "SYNO.API.Auth" && method === "login") {
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: false, error: { code: 403 } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      return Promise.resolve(new Response("{}", { status: 500 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    });
+
+    const integration = createIntegration();
+    await expect(integration.getSystemInfoAsync()).rejects.toThrow();
+  });
+
+  test("does not leak credentials in login error URLs", async () => {
+    mockFetch.mockImplementation((url, init) => {
+      const urlString = toUrlString(url);
+      const apiName = getApiFromUrl(urlString);
+      const method = getMethodFromUrl(urlString);
+
+      if (apiName === "SYNO.API.Info" && method === "query") {
+        const query = new URL(urlString).searchParams.get("query") ?? "SYNO.API.Auth";
+        const definition = apiDefinitions[query as keyof typeof apiDefinitions];
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: true, data: { [query]: definition } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      if (apiName === "SYNO.API.Auth" && method === "login") {
+        expect(init?.method).toBe("POST");
+        expect(init?.body).toContain("account=homarr");
+        expect(init?.body).toContain("passwd=secret-password");
+        expect(urlString).not.toContain("account=");
+        expect(urlString).not.toContain("passwd=");
+
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: false, error: { code: 403 } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      return Promise.resolve(new Response("{}", { status: 500 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    });
+
+    const integration = createIntegration();
+
+    try {
+      await integration.getSystemInfoAsync();
+      expect.unreachable("Expected login to fail");
+    } catch (error) {
+      expect(error).toBeInstanceOf(IntegrationResponseError);
+      const responseError = (error as IntegrationResponseError).cause;
+      expect(responseError).toBeInstanceOf(ResponseError);
+      expect(responseError.url).not.toContain("secret-password");
+      expect(responseError.url).not.toContain("passwd=");
+      expect(responseError.url).not.toContain("account=homarr");
+    }
+  });
+});

packages/integrations/src/traefik/traefik-integration.ts

@@ -0,0 +1,163 @@
+import { ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type {
+  TraefikDashboardData,
+  TraefikProtocolSummary,
+  TraefikResource,
+  TraefikResourceStatus,
+  TraefikResourceSummary,
+} from "./traefik-types";
+import { traefikResourcesSchema, traefikVersionSchema } from "./traefik-types";
+
+type ResourcePath =
+  | "/api/http/routers"
+  | "/api/http/services"
+  | "/api/http/middlewares"
+  | "/api/tcp/routers"
+  | "/api/tcp/services"
+  | "/api/tcp/middlewares"
+  | "/api/udp/routers"
+  | "/api/udp/services"
+  | "/api/entrypoints";
+
+export class TraefikIntegration extends Integration {
+  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
+    const response = await input.fetchAsync(this.url("/api/version"), { headers: this.getAuthHeaders() });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    traefikVersionSchema.parse(await response.json());
+    return { success: true };
+  }
+
+  public async getDashboardDataAsync(): Promise<TraefikDashboardData> {
+    const [
+      versionResult,
+      entryPointsResult,
+      httpRoutersResult,
+      httpServicesResult,
+      httpMiddlewaresResult,
+      tcpRoutersResult,
+      tcpServicesResult,
+      tcpMiddlewaresResult,
+      udpRoutersResult,
+      udpServicesResult,
+    ] = await Promise.allSettled([
+      this.getVersionAsync(),
+      this.getResourcesAsync("/api/entrypoints"),
+      this.getResourcesAsync("/api/http/routers"),
+      this.getResourcesAsync("/api/http/services"),
+      this.getResourcesAsync("/api/http/middlewares"),
+      this.getResourcesAsync("/api/tcp/routers"),
+      this.getResourcesAsync("/api/tcp/services"),
+      this.getResourcesAsync("/api/tcp/middlewares"),
+      this.getResourcesAsync("/api/udp/routers"),
+      this.getResourcesAsync("/api/udp/services"),
+    ]);
+    const version = versionResult.status === "fulfilled" ? versionResult.value : null;
+    const entryPoints = entryPointsResult.status === "fulfilled" ? entryPointsResult.value : [];
+    const httpRouters = httpRoutersResult.status === "fulfilled" ? httpRoutersResult.value : [];
+    const httpServices = httpServicesResult.status === "fulfilled" ? httpServicesResult.value : [];
+    const httpMiddlewares = httpMiddlewaresResult.status === "fulfilled" ? httpMiddlewaresResult.value : [];
+    const tcpRouters = tcpRoutersResult.status === "fulfilled" ? tcpRoutersResult.value : [];
+    const tcpServices = tcpServicesResult.status === "fulfilled" ? tcpServicesResult.value : [];
+    const tcpMiddlewares = tcpMiddlewaresResult.status === "fulfilled" ? tcpMiddlewaresResult.value : [];
+    const udpRouters = udpRoutersResult.status === "fulfilled" ? udpRoutersResult.value : [];
+    const udpServices = udpServicesResult.status === "fulfilled" ? udpServicesResult.value : [];
+
+    return {
+      version,
+      entryPoints: entryPoints.map((entryPoint, index) => entryPoint.name ?? `entrypoint-${index + 1}`),
+      http: this.createProtocolSummary(httpRouters, httpServices, httpMiddlewares),
+      tcp: this.createProtocolSummary(tcpRouters, tcpServices, tcpMiddlewares),
+      udp: {
+        routers: this.summarizeResources(udpRouters),
+        services: this.summarizeResources(udpServices),
+      },
+    };
+  }
+
+  private async getVersionAsync() {
+    const response = await this.fetchOkAsync("/api/version");
+    const version = traefikVersionSchema.parse(await response.json());
+    return version.Version ?? null;
+  }
+
+  private async getResourcesAsync(path: ResourcePath) {
+    const response = await this.fetchOkAsync(path);
+    return traefikResourcesSchema.parse(await response.json());
+  }
+
+  private createProtocolSummary(
+    routers: TraefikResource[],
+    services: TraefikResource[],
+    middlewares: TraefikResource[],
+  ): TraefikProtocolSummary {
+    return {
+      routers: this.summarizeResources(routers),
+      services: this.summarizeResources(services),
+      middlewares: this.summarizeResources(middlewares),
+    };
+  }
+
+  private summarizeResources(resources: TraefikResource[]): TraefikResourceSummary {
+    return resources.reduce<TraefikResourceSummary>(
+      (summary, resource) => {
+        const status = this.normalizeStatus(resource.status);
+        summary.total += 1;
+
+        if (status === "enabled") summary.enabled += 1;
+        if (status === "warning") summary.warnings += 1;
+        if (status === "error") summary.errors += 1;
+
+        return summary;
+      },
+      { total: 0, enabled: 0, warnings: 0, errors: 0 },
+    );
+  }
+
+  private normalizeStatus(status: string | undefined): TraefikResourceStatus {
+    if (!status) return "unknown";
+    const normalized = status.toLowerCase();
+
+    if (normalized === "enabled" || normalized === "disabled" || normalized === "warning" || normalized === "error") {
+      return normalized;
+    }
+
+    return "unknown";
+  }
+
+  private async fetchOkAsync(path: ResourcePath | "/api/version") {
+    const response = await fetchWithTrustedCertificatesAsync(this.url(path), {
+      headers: this.getAuthHeaders(),
+      timeout: 10_000,
+    });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    return response;
+  }
+
+  private getAuthHeaders(): Record<string, string> {
+    if (this.hasSecretValue("username") && this.hasSecretValue("password")) {
+      const credentials = Buffer.from(`${this.getSecretValue("username")}:${this.getSecretValue("password")}`).toString(
+        "base64",
+      );
+      return { Authorization: `Basic ${credentials}` };
+    }
+
+    if (this.hasSecretValue("apiKey")) {
+      return { Authorization: `Bearer ${this.getSecretValue("apiKey")}` };
+    }
+
+    return {};
+  }
+}

packages/integrations/src/traefik/traefik-types.ts

@@ -0,0 +1,43 @@
+import { z } from "zod";
+
+export const traefikResourceStatusSchema = z.enum(["enabled", "disabled", "warning", "error", "unknown"]);
+
+const traefikResourceSchema = z
+  .object({
+    name: z.string().optional(),
+    provider: z.string().optional(),
+    status: z.string().optional(),
+  })
+  .passthrough();
+
+export const traefikVersionSchema = z
+  .object({
+    Version: z.string().optional(),
+  })
+  .passthrough();
+
+export const traefikResourcesSchema = z.array(traefikResourceSchema);
+
+export interface TraefikResourceSummary {
+  total: number;
+  enabled: number;
+  warnings: number;
+  errors: number;
+}
+
+export interface TraefikProtocolSummary {
+  routers: TraefikResourceSummary;
+  services: TraefikResourceSummary;
+  middlewares: TraefikResourceSummary;
+}
+
+export interface TraefikDashboardData {
+  version: string | null;
+  entryPoints: string[];
+  http: TraefikProtocolSummary;
+  tcp: TraefikProtocolSummary;
+  udp: Omit<TraefikProtocolSummary, "middlewares">;
+}
+
+export type TraefikResource = z.infer<typeof traefikResourcesSchema>[number];
+export type TraefikResourceStatus = z.infer<typeof traefikResourceStatusSchema>;

packages/integrations/src/types.ts

@@ -1,4 +1,6 @@
 export * from "./interfaces/calendar/calendar-types";
+export * from "./interfaces/media-organizer/media-organizer-types";
+export type { IMediaOrganizerIntegration } from "./interfaces/media-organizer/media-organizer-integration";
 export * from "./interfaces/dns-hole-summary/dns-hole-summary-types";
 export * from "./interfaces/network-controller-summary/network-controller-summary-types";
 export * from "./interfaces/firewall-summary/firewall-summary-types";
@@ -24,3 +26,4 @@ export * from "./paperless-ngx/paperless-ngx-types";
 export * from "./umami/umami-types";
 export * from "./gluetun/gluetun-types";
 export * from "./beszel/beszel-types";
+export * from "./traefik/traefik-types";

packages/integrations/test/bazarr-unit.spec.ts

@@ -0,0 +1,110 @@
+// @vitest-environment node
+
+import { Response } from "undici";
+import { beforeEach, describe, expect, test, vi } from "vitest";
+
+import { createDb } from "@homarr/db/test";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import type { IntegrationSecret } from "../src/base/types";
+import { BazarrIntegration } from "../src/bazarr/bazarr-integration";
+
+vi.mock("@homarr/db", async (importActual) => {
+  const actual = await importActual<typeof import("@homarr/db")>();
+  return { ...actual, db: createDb() };
+});
+
+vi.mock("@homarr/core/infrastructure/certificates", async (importActual) => {
+  const actual = await importActual<typeof import("@homarr/core/infrastructure/certificates")>();
+  return {
+    ...actual,
+    getTrustedCertificateHostnamesAsync: vi.fn().mockResolvedValue([]),
+  };
+});
+
+vi.mock("@homarr/core/infrastructure/http", () => ({
+  fetchWithTrustedCertificatesAsync: vi.fn(),
+}));
+
+const TEST_URL = "https://bazarr.example.com";
+const API_KEY = "test-api-key";
+
+const mockFetch = vi.mocked(fetchWithTrustedCertificatesAsync);
+
+const createIntegration = (decryptedSecrets: IntegrationSecret[] = [{ kind: "apiKey", value: API_KEY }]) =>
+  new BazarrIntegration({
+    id: "test-bazarr",
+    name: "Test Bazarr",
+    url: TEST_URL,
+    externalUrl: null,
+    decryptedSecrets,
+  });
+
+beforeEach(() => {
+  mockFetch.mockReset();
+});
+
+describe("BazarrIntegration getBadgesAsync", () => {
+  test("maps badge counts from the Bazarr API", async () => {
+    mockFetch.mockImplementation(
+      () =>
+        Promise.resolve(
+          new Response(
+            JSON.stringify({
+              episodes: 12,
+              movies: 4,
+              providers: 1,
+              status: 2,
+              sonarr_signalr: "LIVE",
+              radarr_signalr: "",
+              announcements: 0,
+            }),
+            {
+              status: 200,
+              headers: { "content-type": "application/json" },
+            },
+          ),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>,
+    );
+
+    const badges = await createIntegration().getBadgesAsync();
+
+    expect(badges).toStrictEqual({
+      episodes: 12,
+      movies: 4,
+      providers: 1,
+      status: 2,
+      sonarr_signalr: "LIVE",
+      radarr_signalr: "",
+      announcements: 0,
+    });
+  });
+
+  test("sends the API key in the X-API-KEY header", async () => {
+    mockFetch.mockImplementation(
+      () =>
+        Promise.resolve(
+          new Response(
+            JSON.stringify({
+              episodes: 0,
+              movies: 0,
+              providers: 0,
+              status: 0,
+              sonarr_signalr: "",
+              radarr_signalr: "",
+              announcements: 0,
+            }),
+            {
+              status: 200,
+              headers: { "content-type": "application/json" },
+            },
+          ),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>,
+    );
+
+    await createIntegration().getBadgesAsync();
+
+    const [, requestInit] = mockFetch.mock.calls[0] ?? [];
+    expect(requestInit?.headers).toMatchObject({ "X-API-KEY": API_KEY });
+  });
+});

packages/old-import/src/user-schema.ts

@@ -1,5 +1,7 @@
 import { z } from "zod/v4";
 
+import { requiredNullableEmailSchema } from "@homarr/validation/email";
+
 const regexEncryptedSchema = z.string().regex(/^[a-f0-9]+\.[a-f0-9]+$/g);
 
 const encryptedSchema = z.custom<`${string}.${string}`>((value) => regexEncryptedSchema.safeParse(value).success);
@@ -7,7 +9,7 @@ const encryptedSchema = z.custom<`${string}.${string}`>((value) => regexEncrypte
 export const oldmarrImportUserSchema = z.object({
   id: z.string(),
   name: z.string(),
-  email: z.string().email().nullable(),
+  email: requiredNullableEmailSchema,
   emailVerified: z.date().nullable(),
   image: z.string().nullable(),
   isAdmin: z.boolean(),

packages/old-import/src/widgets/options.ts

@@ -165,6 +165,7 @@ const optionMapping: OptionMapping = {
       "sectionIndicatorColor" in oldOptions ? oldOptions.sectionIndicatorColor : undefined,
     showUptime: () => undefined,
     gpu: () => undefined,
+    visibleStorageVolumes: () => undefined,
     visibleClusterSections: (oldOptions) => {
       if (!("showNode" in oldOptions)) return undefined;
 

packages/request-handler/src/bazarr.ts

@@ -0,0 +1,15 @@
+import { createIntegrationAsync } from "@homarr/integrations";
+import type { BazarrBadges } from "@homarr/integrations";
+
+import { createIntegrationRequestHandler } from "./lib/integration-request-handler";
+
+export const bazarrBadgesRequestHandler = createIntegrationRequestHandler<
+  BazarrBadges,
+  "bazarr",
+  Record<string, never>
+>({
+  async requestAsync(integration) {
+    const integrationInstance = await createIntegrationAsync(integration);
+    return await integrationInstance.getBadgesAsync();
+  },
+});

packages/request-handler/src/beszel.ts

@@ -122,6 +122,9 @@ export const beszelStatsRequestHandler = createIntegrationRequestHandler<
   "beszel" | "mock",
   { systemId: string; timePeriod: string; includeDocker: boolean }
 >({
+  // No cache — the widget polls every 5s for live updates;
+  // a TTL here would serve stale records between polls.
+  cacheTtlMs: 0,
   async requestAsync(integration, input) {
     const start = performance.now();
     const config = timePeriodConfig[input.timePeriod] ?? { type: "1m", perPage: 60 };