Merge branch 'dev' into add-more-openapi

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -33,9 +33,6 @@ body:
       options:
         # The below comment is used to insert a new version with on-release.yml
         #NEXT_VERSION#
-        - 1.49.0
-        - 1.48.0
-        - 1.47.0
         - 1.46.0
         - 1.45.3
         - 1.45.2

.github/actions/extract-build-artifact/action.yaml

@@ -19,6 +19,11 @@ inputs:
 runs:
   using: "composite"
   steps:
+    - name: Prebuilt debian dependencies
+      uses: ./.github/actions/prebuilt-debian@dev
+      id: prebuilt-debian
+      with:
+        architecture: ${{ inputs.architecture }}
     - name: Start docker container for ${{ inputs.architecture }}
       run: |
         docker run --name homarr \
@@ -36,9 +41,12 @@ runs:
         docker cp homarr:/app/extraction-alpine.tar.gz ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-alpine-${{ inputs.architecture }}.tar.gz && \
         docker exec homarr rm /app/extraction-alpine.tar.gz
       shell: bash
-    - name: Copy source for debian build artifact
+    - name: Extract source from ${{ inputs.architecture }} container (debian)
       run: |
-        cp ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-alpine-${{ inputs.architecture }}.tar.gz ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-debian-${{ inputs.architecture }}.tar.gz
+        docker cp ${{ steps.prebuilt-debian.outputs.path }}/. homarr:/app/build && \
+        docker cp ${{ steps.prebuilt-debian.outputs.path }}/. homarr:/app/node_modules/better-sqlite3/build/Release && \
+        docker exec homarr tar -czf extraction-debian.tar.gz -C /app . && \
+        docker cp homarr:/app/extraction-debian.tar.gz ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-debian-${{ inputs.architecture }}.tar.gz
       shell: bash
     - name: Stop ${{ inputs.architecture }} container
       if: always()

.github/actions/prebuilt-debian/action.yaml

@@ -0,0 +1,42 @@
+name: Prebuilt dependencies for debian
+description: Provides prebuilt dependencies for debian based docker images
+inputs:
+  architecture:
+    description: Name of architecture, will be used to build docker image (e.g. amd64, arm64)
+    required: true
+outputs:
+  path:
+    description: Path to extracted prebuilt dependencies
+    value: ${{ runner.temp }}/prebuilts
+runs:
+  using: "composite"
+  steps:
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Build docker image for ${{ inputs.architecture }}
+      id: build
+      uses: docker/build-push-action@v6
+      with:
+        push: false
+        load: true
+        context: ./deployments/prebuilt-debian
+        platforms: linux/${{ inputs.architecture }}
+        tags: prebuilt-debian
+    - name: Start docker container for ${{ inputs.architecture }}
+      run: |
+        docker run --name prebuilt-debian \
+          --detach --rm prebuilt-debian
+      shell: bash
+    - name: Extract prebuilt dependencies from ${{ inputs.architecture }} container
+      run: |
+        mkdir -p ${{ runner.temp }}/prebuilts && \
+        docker cp prebuilt-debian:/app/node_modules/better-sqlite3/build/Release/better_sqlite3.node ${{ runner.temp }}/prebuilts/better_sqlite3.node
+      shell: bash
+    - name: Stop ${{ inputs.architecture }} container
+      if: always()
+      run: docker container remove --force --volumes prebuilt-debian
+      shell: bash

.github/renovate.json5

@@ -20,6 +20,7 @@
       matchPackageNames: [
         "@tree-sitter-grammars/tree-sitter-yaml",
         "bcrypt",
+        "better-sqlite3",
         "cpu-features",
         "esbuild",
         "sharp",

.github/workflows/on-pr-prebuilt-debian-validate.yml

@@ -0,0 +1,45 @@
+name: "[Deployments] Validate prebuilt debian dependencies"
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    branches: ["*"]
+    paths: [".github/actions/prebuilt-debian/**", "deployments/prebuilt-debian/**"]
+
+jobs:
+  prebuilt-debian-validate-amd64:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+      - name: Validate prebuilt dependencies for amd64
+        id: validate-amd64
+        uses: ./.github/actions/prebuilt-debian
+        with:
+          architecture: amd64
+
+      - name: Check extracted files for amd64
+        run: |
+          if [ ! -f "${{ steps.validate-amd64.outputs.path }}/better_sqlite3.node" ]; then
+            echo "better_sqlite3.node not found for amd64!"
+            exit 1
+          fi
+  prebuilt-debian-validate-arm64:
+    runs-on: ubuntu-24.04-
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+      - name: Validate prebuilt dependencies for arm64
+        id: validate-arm64
+        uses: ./.github/actions/prebuilt-debian
+        with:
+          architecture: arm64
+
+      - name: Check extracted files for arm64
+        run: |
+          if [ ! -f "${{ steps.validate-arm64.outputs.path }}/better_sqlite3.node" ]; then
+            echo "better_sqlite3.node not found for arm64!"
+            exit 1
+          fi

CHANGELOG.md

@@ -1,146 +1,3 @@
-## [1.50.1](https://github.com/homarr-labs/homarr/compare/v1.50.0...v1.50.1) (2026-01-16)
-
-### Bug Fixes
-
-* **deps:** update dependency ioredis to v5.9.0 ([#4827](https://github.com/homarr-labs/homarr/issues/4827)) ([155d4f2](https://github.com/homarr-labs/homarr/commit/155d4f2270b3b35c4ad696499b0aaa0b10100989))
-* **deps:** update dependency ioredis to v5.9.1 ([#4844](https://github.com/homarr-labs/homarr/issues/4844)) ([5d00642](https://github.com/homarr-labs/homarr/commit/5d006422688cf3fe7440ae3ab66ad3b2cc9286a8))
-* **deps:** update dependency ldapts to v8.1.3 ([#4841](https://github.com/homarr-labs/homarr/issues/4841)) ([7fa9907](https://github.com/homarr-labs/homarr/commit/7fa990712bddc88bbb3bbe01e758bfef7cb4dea3))
-* **deps:** update dependency react-error-boundary to ^6.0.2 ([#4821](https://github.com/homarr-labs/homarr/issues/4821)) ([e9ba102](https://github.com/homarr-labs/homarr/commit/e9ba102cf668c0ef54628d3dbc6e6cbda2d059b5))
-* **deps:** update dependency react-error-boundary to ^6.0.3 ([#4847](https://github.com/homarr-labs/homarr/issues/4847)) ([c24006d](https://github.com/homarr-labs/homarr/commit/c24006dca691f26a7187c0ba112d9ed2ec424bb0))
-* **deps:** update dependency sass to ^1.97.2 ([#4835](https://github.com/homarr-labs/homarr/issues/4835)) ([07ba531](https://github.com/homarr-labs/homarr/commit/07ba53165c90d675aa54c5ad3fca930fef5cd35e))
-* **deps:** update dependency typescript-eslint to ^8.52.0 ([#4830](https://github.com/homarr-labs/homarr/issues/4830)) ([fa8af6a](https://github.com/homarr-labs/homarr/commit/fa8af6a453b846af2305db3c318c8c1c303a3a88))
-* **deps:** update dependency undici to v7.17.0 ([#4826](https://github.com/homarr-labs/homarr/issues/4826)) ([21a91b1](https://github.com/homarr-labs/homarr/commit/21a91b1489ff1a1f0a1428a3f50f00db8932da72))
-* **deps:** update dependency undici to v7.18.0 ([#4829](https://github.com/homarr-labs/homarr/issues/4829)) ([b76ab29](https://github.com/homarr-labs/homarr/commit/b76ab2961d84081c9ef04d76193f21a1068e72d9))
-* **deps:** update dependency undici to v7.18.2 ([#4837](https://github.com/homarr-labs/homarr/issues/4837)) ([16733c2](https://github.com/homarr-labs/homarr/commit/16733c2a0efabcbc5b693a8b6f82833f6fc344b7))
-* **deps:** update dependency ws to ^8.19.0 ([#4833](https://github.com/homarr-labs/homarr/issues/4833)) ([629359e](https://github.com/homarr-labs/homarr/commit/629359e3e44ddad880842cfd576edb514f80d61a))
-* **deps:** update mantine monorepo to ^8.3.11 ([#4822](https://github.com/homarr-labs/homarr/issues/4822)) ([0364e10](https://github.com/homarr-labs/homarr/commit/0364e102cd6c0f560bc49e0b9ccd71df0b75eed6))
-* **deps:** update mantine monorepo to ^8.3.12 ([#4848](https://github.com/homarr-labs/homarr/issues/4848)) ([275a346](https://github.com/homarr-labs/homarr/commit/275a346afaaebfa894ef2193f70966986a138dbb))
-* **deps:** update tiptap monorepo to v3.15.0 ([#4832](https://github.com/homarr-labs/homarr/issues/4832)) ([ab3ee4f](https://github.com/homarr-labs/homarr/commit/ab3ee4f78a739bdb3b49a81652420df6ec143b62))
-* **deps:** update tiptap monorepo to v3.15.1 ([#4838](https://github.com/homarr-labs/homarr/issues/4838)) ([d479b63](https://github.com/homarr-labs/homarr/commit/d479b63a803f2295ccdf20fcd31c418a4aab148c))
-* **deps:** update tiptap monorepo to v3.15.2 ([#4842](https://github.com/homarr-labs/homarr/issues/4842)) ([55c2666](https://github.com/homarr-labs/homarr/commit/55c2666f9d27ca34b6d028070f0d7b84e4c40e97))
-* **deps:** update tiptap monorepo to v3.15.3 ([#4843](https://github.com/homarr-labs/homarr/issues/4843)) ([b26cf0e](https://github.com/homarr-labs/homarr/commit/b26cf0e65fd8150e241465628df2cb8b5a72088e))
-* **deps:** update turbo monorepo to ^2.7.3 ([#4831](https://github.com/homarr-labs/homarr/issues/4831)) ([50410fe](https://github.com/homarr-labs/homarr/commit/50410fedb3f33ed131f923257e61ae2dca4e0288))
-
-## [1.50.0](https://github.com/homarr-labs/homarr/compare/v1.49.1...v1.50.0) (2026-01-09)
-
-### Features
-
-* **auth:** extend API key authentication to tRPC endpoints ([#4732](https://github.com/homarr-labs/homarr/issues/4732)) ([0dc61a8](https://github.com/homarr-labs/homarr/commit/0dc61a88b8d12c61fd436adf0693c9fa5087a8c0))
-* **users:** add libravatar / gravatar support ([#4277](https://github.com/homarr-labs/homarr/issues/4277)) ([a2a3412](https://github.com/homarr-labs/homarr/commit/a2a34124ae11b0b9242b9c2579f7376768d35d52))
-
-### Bug Fixes
-
-* **deps:** update dependency @tabler/icons-react to ^3.36.0 ([#4707](https://github.com/homarr-labs/homarr/issues/4707)) ([35e0198](https://github.com/homarr-labs/homarr/commit/35e0198b5df2a315ea2efb584752c5af062f960d))
-* **deps:** update dependency @tabler/icons-react to ^3.36.1 ([#4812](https://github.com/homarr-labs/homarr/issues/4812)) ([dabb2bb](https://github.com/homarr-labs/homarr/commit/dabb2bb7821f6a68d41c4a931bb70c41fdd21a72))
-* **deps:** update dependency @tanstack/react-query to ^5.90.15 ([#4794](https://github.com/homarr-labs/homarr/issues/4794)) ([ea848bd](https://github.com/homarr-labs/homarr/commit/ea848bdd0bc1268675d00213bb86dc1d1b298162))
-* **deps:** update dependency @tanstack/react-query to ^5.90.16 ([#4799](https://github.com/homarr-labs/homarr/issues/4799)) ([413e846](https://github.com/homarr-labs/homarr/commit/413e846133f13a800f509273b8b87cf677f0024d))
-* **deps:** update dependency ldapts to v8.1.0 ([#4804](https://github.com/homarr-labs/homarr/issues/4804)) ([c8ecf5f](https://github.com/homarr-labs/homarr/commit/c8ecf5f0a13b1c74f24cebced76a60728eb2d543))
-* **deps:** update dependency ldapts to v8.1.2 ([#4805](https://github.com/homarr-labs/homarr/issues/4805)) ([9e63e34](https://github.com/homarr-labs/homarr/commit/9e63e3443af7946199999104024f00991cc1cba2))
-* **deps:** update dependency next-intl to v4.7.0 ([#4806](https://github.com/homarr-labs/homarr/issues/4806)) ([35042a7](https://github.com/homarr-labs/homarr/commit/35042a783ce5c381425bb96766adbefcac75bfdd))
-* **deps:** update dependency typescript-eslint to ^8.51.0 ([#4795](https://github.com/homarr-labs/homarr/issues/4795)) ([f0a2551](https://github.com/homarr-labs/homarr/commit/f0a2551fdf5b5e02ece789d473411ad3edcfb093))
-
-## [1.49.1](https://github.com/homarr-labs/homarr/compare/v1.49.0...v1.49.1) (2026-01-03)
-
-### Bug Fixes
-
-* **db:** connection issue do to missing host and name of db when connecting with host ([#4786](https://github.com/homarr-labs/homarr/issues/4786)) ([7d33225](https://github.com/homarr-labs/homarr/commit/7d3322576c3ed1b9917873bf707d77d2a4eef1a8))
-* **deps:** update dependency ldapts to v8.0.36 ([#4790](https://github.com/homarr-labs/homarr/issues/4790)) ([1842e5f](https://github.com/homarr-labs/homarr/commit/1842e5fff5c072c8da45a01be860e63d12d5062a))
-* **deps:** update dependency react-error-boundary to ^6.0.1 ([#4791](https://github.com/homarr-labs/homarr/issues/4791)) ([1b70973](https://github.com/homarr-labs/homarr/commit/1b70973084c9e9ebed34e8d7d9690a9e5530f60f))
-* **unraid:** temperature of disks can be null ([#4788](https://github.com/homarr-labs/homarr/issues/4788)) ([60f9d4e](https://github.com/homarr-labs/homarr/commit/60f9d4e6e69df2190171e5d8e263b2030447ab2e))
-
-## [1.49.0](https://github.com/homarr-labs/homarr/compare/v1.48.0...v1.49.0) (2026-01-02)
-
-### Features
-
-* unraid integration ([#4439](https://github.com/homarr-labs/homarr/issues/4439)) ([9b0dd6d](https://github.com/homarr-labs/homarr/commit/9b0dd6d6cebda4a541c8859506d89e9e9f782fa4))
-
-### Bug Fixes
-
-* add orphaned status for containers with invalid stats ([#4441](https://github.com/homarr-labs/homarr/issues/4441)) ([f04f537](https://github.com/homarr-labs/homarr/commit/f04f53759b6890d5d2dd683a9bf124d8ff12780b))
-* **deps:** update dependency @xterm/addon-fit to v0.11.0 ([#4756](https://github.com/homarr-labs/homarr/issues/4756)) ([1c727e5](https://github.com/homarr-labs/homarr/commit/1c727e59af4041e5e41da854633ccd3c030c1d18))
-* **deps:** update dependency @xterm/xterm to v6 ([#4757](https://github.com/homarr-labs/homarr/issues/4757)) ([fad478c](https://github.com/homarr-labs/homarr/commit/fad478c549cdbc616f921d9b444bff48b59e77a5))
-* **deps:** update dependency isomorphic-dompurify to ^2.35.0 ([#4779](https://github.com/homarr-labs/homarr/issues/4779)) ([236fa35](https://github.com/homarr-labs/homarr/commit/236fa35f7e0943be33bba153e7030ce4e3bb204e))
-* **deps:** update dependency jotai to ^2.16.1 ([#4772](https://github.com/homarr-labs/homarr/issues/4772)) ([d002700](https://github.com/homarr-labs/homarr/commit/d00270046a041a10c1c540cfa79c1eee477f3303))
-* **deps:** update dependency ldapts to v8.0.31 ([#4755](https://github.com/homarr-labs/homarr/issues/4755)) ([8b09693](https://github.com/homarr-labs/homarr/commit/8b096939e4e1da8e98791a8e05f108a136fe2810))
-* **deps:** update dependency ldapts to v8.0.32 ([#4762](https://github.com/homarr-labs/homarr/issues/4762)) ([49afb82](https://github.com/homarr-labs/homarr/commit/49afb8244615f67af0586aaacf77a509231ac6dc))
-* **deps:** update dependency ldapts to v8.0.34 ([#4765](https://github.com/homarr-labs/homarr/issues/4765)) ([809bf55](https://github.com/homarr-labs/homarr/commit/809bf559fe1b96df9a903dc790d138cad7368adb))
-* **deps:** update dependency ldapts to v8.0.35 ([#4768](https://github.com/homarr-labs/homarr/issues/4768)) ([e574dd7](https://github.com/homarr-labs/homarr/commit/e574dd70f1421e9254a289a0f02fd0b4d43e26ad))
-* **deps:** update dependency typescript-eslint to ^8.50.1 ([#4758](https://github.com/homarr-labs/homarr/issues/4758)) ([adaa803](https://github.com/homarr-labs/homarr/commit/adaa8039dd545109246ccd9fa15570739f755f62))
-* **deps:** update nextjs monorepo to v16.1.1 ([#4759](https://github.com/homarr-labs/homarr/issues/4759)) ([7712ab4](https://github.com/homarr-labs/homarr/commit/7712ab410b5094e5d84df75461e07efdfccc285b))
-* **deps:** update tanstack-query monorepo ([#4782](https://github.com/homarr-labs/homarr/issues/4782)) ([1e5d38f](https://github.com/homarr-labs/homarr/commit/1e5d38fd3ca4c68fa4c61b02757a3cff39839fdb))
-* **deps:** update testcontainers-node monorepo to ^11.11.0 ([#4781](https://github.com/homarr-labs/homarr/issues/4781)) ([e40a116](https://github.com/homarr-labs/homarr/commit/e40a11608cb21a75e6910028abf97e14b5275f56))
-* **deps:** update turbo monorepo to ^2.7.2 ([#4764](https://github.com/homarr-labs/homarr/issues/4764)) ([9191430](https://github.com/homarr-labs/homarr/commit/919143022969350f6ee7be2f53be2fe09a89bba3))
-
-## [1.48.0](https://github.com/homarr-labs/homarr/compare/v1.47.0...v1.48.0) (2025-12-26)
-
-### Features
-
-* enable dns caching by default ([#4706](https://github.com/homarr-labs/homarr/issues/4706)) ([fbb5298](https://github.com/homarr-labs/homarr/commit/fbb5298cb05b12eb2f19c121a1bc103caeb3e576))
-* **http:** add proxy support ([#4721](https://github.com/homarr-labs/homarr/issues/4721)) ([5a57115](https://github.com/homarr-labs/homarr/commit/5a57115ca073aea1c75a000fda6a23648c5488e4))
-
-### Bug Fixes
-
-* **deps:** update dependency @t3-oss/env-nextjs to ^0.13.10 ([#4710](https://github.com/homarr-labs/homarr/issues/4710)) ([689523a](https://github.com/homarr-labs/homarr/commit/689523a194ab48bdc072b1cdf65f07ade6cbc584))
-* **deps:** update dependency ldapts to v8.0.24 ([#4711](https://github.com/homarr-labs/homarr/issues/4711)) ([648f7e2](https://github.com/homarr-labs/homarr/commit/648f7e2c7743af81f4bced36b7e1e80c21e851e5))
-* **deps:** update dependency ldapts to v8.0.25 ([#4724](https://github.com/homarr-labs/homarr/issues/4724)) ([ef12b2b](https://github.com/homarr-labs/homarr/commit/ef12b2b5c2e1131138937fb6da61ce4c167fe0eb))
-* **deps:** update dependency ldapts to v8.0.27 ([#4737](https://github.com/homarr-labs/homarr/issues/4737)) ([8891ac4](https://github.com/homarr-labs/homarr/commit/8891ac42399e47fda6efc657b8ff2fe58aebca9e))
-* **deps:** update dependency ldapts to v8.0.28 ([#4743](https://github.com/homarr-labs/homarr/issues/4743)) ([75c5453](https://github.com/homarr-labs/homarr/commit/75c545344aae39550917331458c01a894b6a942f))
-* **deps:** update dependency ldapts to v8.0.29 ([#4747](https://github.com/homarr-labs/homarr/issues/4747)) ([5dd7400](https://github.com/homarr-labs/homarr/commit/5dd74006843ae72f63e631b14f0fd50c911d610b))
-* **deps:** update dependency ldapts to v8.0.30 ([#4749](https://github.com/homarr-labs/homarr/issues/4749)) ([96c2c0d](https://github.com/homarr-labs/homarr/commit/96c2c0d604737c64722fa21bf79965c806bf4da3))
-* **deps:** update dependency mysql2 to v3.16.0 ([#4731](https://github.com/homarr-labs/homarr/issues/4731)) ([f34bdce](https://github.com/homarr-labs/homarr/commit/f34bdce6446d4e62b54b96f63e91cfdddd51e901))
-* **deps:** update dependency next-intl to v4.6.1 ([#4730](https://github.com/homarr-labs/homarr/issues/4730)) ([f4d782a](https://github.com/homarr-labs/homarr/commit/f4d782abefb78e085ca3fc66034c0ca54fb21120))
-* **deps:** update dependency sass to ^1.97.0 ([#4726](https://github.com/homarr-labs/homarr/issues/4726)) ([88baad8](https://github.com/homarr-labs/homarr/commit/88baad8143f4ca830e50644d6bd1d1980ef1da82))
-* **deps:** update dependency sass to ^1.97.1 ([#4746](https://github.com/homarr-labs/homarr/issues/4746)) ([6b774f4](https://github.com/homarr-labs/homarr/commit/6b774f47d0a8bf731e7e1837a9d47e0dc53a1ff0))
-* **deps:** update dependency typescript-eslint to ^8.50.0 ([#4720](https://github.com/homarr-labs/homarr/issues/4720)) ([2dc8fea](https://github.com/homarr-labs/homarr/commit/2dc8feae7ea6174a1d826d8f0151ddc2c04c6aa6))
-* **deps:** update dependency zod to ^4.2.0 ([#4712](https://github.com/homarr-labs/homarr/issues/4712)) ([6e39524](https://github.com/homarr-labs/homarr/commit/6e39524f9d28d201c13738212d238726e1685832))
-* **deps:** update dependency zod to ^4.2.1 ([#4722](https://github.com/homarr-labs/homarr/issues/4722)) ([68dc684](https://github.com/homarr-labs/homarr/commit/68dc6844fdee53aca55b44dd7d19bf9d3a35c057))
-* **deps:** update nextjs monorepo to v16.1.0 ([#4739](https://github.com/homarr-labs/homarr/issues/4739)) ([99f2842](https://github.com/homarr-labs/homarr/commit/99f2842a5a102056c76ddc68cb5083791f324c3c))
-* **deps:** update tiptap monorepo to v3.14.0 ([#4744](https://github.com/homarr-labs/homarr/issues/4744)) ([adbe707](https://github.com/homarr-labs/homarr/commit/adbe707c73f462771c3d21cbbcc21e8245eea6f3))
-* **deps:** update trpc monorepo to ^11.8.1 ([#4750](https://github.com/homarr-labs/homarr/issues/4750)) ([93bf9ab](https://github.com/homarr-labs/homarr/commit/93bf9ab84b5387eefb8cc0b03057a4ccf0b13aa9))
-* **deps:** update turbo monorepo to ^2.7.0 ([#4745](https://github.com/homarr-labs/homarr/issues/4745)) ([5d659a3](https://github.com/homarr-labs/homarr/commit/5d659a3ebbf79266158cb57236de90e7883e7a4e))
-* **deps:** update turbo monorepo to ^2.7.1 ([#4751](https://github.com/homarr-labs/homarr/issues/4751)) ([d8db016](https://github.com/homarr-labs/homarr/commit/d8db0169a142c2ec302806fe946cb17431ccae6b))
-
-## [1.47.0](https://github.com/homarr-labs/homarr/compare/v1.46.0...v1.47.0) (2025-12-19)
-
-### Features
-
-* [#4452](https://github.com/homarr-labs/homarr/issues/4452) improve calendar design ([#4461](https://github.com/homarr-labs/homarr/issues/4461)) ([08e9f7d](https://github.com/homarr-labs/homarr/commit/08e9f7d8d85475788534b46e6cceb40a7231c09d))
-
-### Bug Fixes
-
-* **boards:** selection menu not shown to users without change access ([#4689](https://github.com/homarr-labs/homarr/issues/4689)) ([a0a11e3](https://github.com/homarr-labs/homarr/commit/a0a11e35707513fee45551e09c26ff633f636c32))
-* **deps:** update dependency dns-caching to ^0.2.9 ([#4648](https://github.com/homarr-labs/homarr/issues/4648)) ([6deab2e](https://github.com/homarr-labs/homarr/commit/6deab2ecec2dc4f5192b53213cb755a9853eb7c0))
-* **deps:** update dependency drizzle-orm to ^0.45.1 ([#4663](https://github.com/homarr-labs/homarr/issues/4663)) ([f635009](https://github.com/homarr-labs/homarr/commit/f63500961f11589a972a41dde9e4117b1f25141c))
-* **deps:** update dependency fast-xml-parser to ^5.3.3 ([#4683](https://github.com/homarr-labs/homarr/issues/4683)) ([611b65e](https://github.com/homarr-labs/homarr/commit/611b65e8bd420aaad580bf35071b651093623c95))
-* **deps:** update dependency isomorphic-dompurify to ^2.34.0 ([#4650](https://github.com/homarr-labs/homarr/issues/4650)) ([5d5c18b](https://github.com/homarr-labs/homarr/commit/5d5c18b3649d5fa1b2b933d443ccd5abcbb84e3a))
-* **deps:** update dependency jotai to ^2.16.0 ([#4655](https://github.com/homarr-labs/homarr/issues/4655)) ([4aef85b](https://github.com/homarr-labs/homarr/commit/4aef85ba60f4978da5a0b13c08e1799949fe4497))
-* **deps:** update dependency ldapts to v8.0.16 ([#4640](https://github.com/homarr-labs/homarr/issues/4640)) ([ada5597](https://github.com/homarr-labs/homarr/commit/ada5597cf3ab0bafb04e9176b431d257b36d1dc8))
-* **deps:** update dependency ldapts to v8.0.17 ([#4642](https://github.com/homarr-labs/homarr/issues/4642)) ([c09da85](https://github.com/homarr-labs/homarr/commit/c09da85f3a8450a70991ff0656228a9aa1364f89))
-* **deps:** update dependency ldapts to v8.0.18 ([#4653](https://github.com/homarr-labs/homarr/issues/4653)) ([4bd142e](https://github.com/homarr-labs/homarr/commit/4bd142e09c666cc84c67c93e2202e571565b766c))
-* **deps:** update dependency ldapts to v8.0.19 ([#4669](https://github.com/homarr-labs/homarr/issues/4669)) ([8ed771d](https://github.com/homarr-labs/homarr/commit/8ed771d30073809b08a6ace2c29b3de2675e37d1))
-* **deps:** update dependency ldapts to v8.0.20 ([#4684](https://github.com/homarr-labs/homarr/issues/4684)) ([703c8cc](https://github.com/homarr-labs/homarr/commit/703c8ccc060bb1775a72f405da1e169926b1ce5d))
-* **deps:** update dependency ldapts to v8.0.21 ([#4695](https://github.com/homarr-labs/homarr/issues/4695)) ([7f6eaa0](https://github.com/homarr-labs/homarr/commit/7f6eaa0b1f397a37b6acd15e0ccfea75ee2e0161))
-* **deps:** update dependency ldapts to v8.0.22 ([#4700](https://github.com/homarr-labs/homarr/issues/4700)) ([391d725](https://github.com/homarr-labs/homarr/commit/391d725191563ba5048593c14baf077a924cea44))
-* **deps:** update dependency ldapts to v8.0.23 ([#4701](https://github.com/homarr-labs/homarr/issues/4701)) ([db337b2](https://github.com/homarr-labs/homarr/commit/db337b2525762c96acd815bd4fdacfaabff5f0cf))
-* **deps:** update dependency next-intl to v4.6.0 ([#4691](https://github.com/homarr-labs/homarr/issues/4691)) ([1ff6fac](https://github.com/homarr-labs/homarr/commit/1ff6fac71bb9187d0eb703a7b6543daf8861efe8))
-* **deps:** update dependency sass to ^1.94.3 ([#4646](https://github.com/homarr-labs/homarr/issues/4646)) ([7e91d12](https://github.com/homarr-labs/homarr/commit/7e91d12439826eee76f118448c583294c3c46b42))
-* **deps:** update dependency sass to ^1.95.0 ([#4647](https://github.com/homarr-labs/homarr/issues/4647)) ([eb760da](https://github.com/homarr-labs/homarr/commit/eb760da8b30583575fb638995fc2f2acbd5b2961))
-* **deps:** update dependency sass to ^1.95.1 ([#4661](https://github.com/homarr-labs/homarr/issues/4661)) ([e327c66](https://github.com/homarr-labs/homarr/commit/e327c660b239840c4929f536eff3096342cc3433))
-* **deps:** update dependency sass to ^1.96.0 ([#4668](https://github.com/homarr-labs/homarr/issues/4668)) ([bdfc150](https://github.com/homarr-labs/homarr/commit/bdfc1501152450a1546962331037a6fc1c782e4e))
-* **deps:** update dependency swagger-ui-react to ^5.31.0 ([#4672](https://github.com/homarr-labs/homarr/issues/4672)) ([4d593f5](https://github.com/homarr-labs/homarr/commit/4d593f5b9d1f47ae2368f42131e8ef8d32f73fc9))
-* **deps:** update dependency typescript-eslint to ^8.49.0 ([#4645](https://github.com/homarr-labs/homarr/issues/4645)) ([220cb66](https://github.com/homarr-labs/homarr/commit/220cb669a13fead953ff42040b39e06d1dcc1fe2))
-* **deps:** update mantine monorepo to ^8.3.10 ([#4651](https://github.com/homarr-labs/homarr/issues/4651)) ([d0652f7](https://github.com/homarr-labs/homarr/commit/d0652f7cf5ac0e63a61adcfe43e53c4ed130e8fc))
-* **deps:** update react monorepo to v19.2.2 ([#4676](https://github.com/homarr-labs/homarr/issues/4676)) ([82e79f2](https://github.com/homarr-labs/homarr/commit/82e79f26274a289e1ce4f9331b6ba16f00f5a86c))
-* **deps:** update react monorepo to v19.2.3 ([#4680](https://github.com/homarr-labs/homarr/issues/4680)) ([4c71856](https://github.com/homarr-labs/homarr/commit/4c7185646d9d061d1aebf9194f9ef2f810fc3384))
-* **deps:** update testcontainers-node monorepo to ^11.10.0 ([#4659](https://github.com/homarr-labs/homarr/issues/4659)) ([c880ce9](https://github.com/homarr-labs/homarr/commit/c880ce9bd99a7056f20d450275fcbc37f9372f63))
-* **deps:** update trpc monorepo to ^11.8.0 ([#4697](https://github.com/homarr-labs/homarr/issues/4697)) ([1f44845](https://github.com/homarr-labs/homarr/commit/1f44845df489bb33bcfe943c6a05c0f157037ed6))
-* **downloads:** improve progress to only show 100 percent if fully completed ([#4621](https://github.com/homarr-labs/homarr/issues/4621)) ([1062745](https://github.com/homarr-labs/homarr/commit/10627453d5b5a17991bbe9b8d4bc23981b366c39))
-* **iframe-widget:** permission selection not applying to any origin ([#4616](https://github.com/homarr-labs/homarr/issues/4616)) ([479f083](https://github.com/homarr-labs/homarr/commit/479f083ab8ec405d1b8296b32a20262f6192a1f9))
-* **invites:** creation with custom expiration not working ([#4677](https://github.com/homarr-labs/homarr/issues/4677)) ([423da9e](https://github.com/homarr-labs/homarr/commit/423da9eeb88510a123bdd2447dc97b54c5f1dec4))
-* reference to prebuilt-debian action does not work ([47d7458](https://github.com/homarr-labs/homarr/commit/47d7458143d8801947cae1985745fa827b247dd1))
-* **stock-price:** use previous-close for change calculation ([#4674](https://github.com/homarr-labs/homarr/issues/4674)) ([17fc7a0](https://github.com/homarr-labs/homarr/commit/17fc7a043b4adbed9f14408e23c95ec5fba0c8b8))
-* **tdarr:** array parse error ([#4678](https://github.com/homarr-labs/homarr/issues/4678)) ([d86af07](https://github.com/homarr-labs/homarr/commit/d86af072bf136d76b02f3efa2c15520a4f63974e))
-
 ## [1.46.0](https://github.com/homarr-labs/homarr/compare/v1.45.3...v1.46.0) (2025-12-12)
 
 ### Features

CODEOWNERS

@@ -2,8 +2,8 @@
 * @homarr-labs/maintainers
 
 # Exempt Renovate‑managed files (no owners)
-package.json
+package.json          @homarr-labs/none
-package-lock.json
+package-lock.json     @homarr-labs/none
-pnpm-lock.yaml
+pnpm-lock.yaml        @homarr-labs/none
-Dockerfile
+Dockerfile            @homarr-labs/none
-docker-compose.yml
+docker-compose.yml    @homarr-labs/none

Dockerfile

@@ -45,6 +45,7 @@ COPY --from=builder /app/apps/nextjs/package.json .
 
 COPY --from=builder /app/apps/tasks/tasks.cjs ./apps/tasks/tasks.cjs
 COPY --from=builder /app/apps/websocket/wssServer.cjs ./apps/websocket/wssServer.cjs
+COPY --from=builder /app/node_modules/better-sqlite3/build/Release/better_sqlite3.node /app/build/better_sqlite3.node
 
 COPY --from=builder /app/packages/db/migrations ./db/migrations
 

apps/nextjs/package.json

@@ -48,24 +48,25 @@
     "@homarr/ui": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@homarr/widgets": "workspace:^0.1.0",
-    "@mantine/colors-generator": "^8.3.12",
+    "@mantine/colors-generator": "^8.3.10",
-    "@mantine/core": "^8.3.12",
+    "@mantine/core": "^8.3.10",
-    "@mantine/dropzone": "^8.3.12",
+    "@mantine/dropzone": "^8.3.10",
-    "@mantine/hooks": "^8.3.12",
+    "@mantine/hooks": "^8.3.10",
-    "@mantine/modals": "^8.3.12",
+    "@mantine/modals": "^8.3.10",
-    "@mantine/tiptap": "^8.3.12",
+    "@mantine/tiptap": "^8.3.10",
     "@million/lint": "1.0.14",
-    "@tabler/icons-react": "^3.36.1",
+    "@scalar/api-reference-react": "^0.8.11",
-    "@tanstack/react-query": "^5.90.16",
+    "@tabler/icons-react": "^3.35.0",
-    "@tanstack/react-query-devtools": "^5.91.2",
+    "@tanstack/react-query": "^5.90.12",
+    "@tanstack/react-query-devtools": "^5.91.1",
     "@tanstack/react-query-next-experimental": "^5.91.0",
-    "@trpc/client": "^11.8.1",
+    "@trpc/client": "^11.8.0",
-    "@trpc/next": "^11.8.1",
+    "@trpc/next": "^11.8.0",
-    "@trpc/react-query": "^11.8.1",
+    "@trpc/react-query": "^11.8.0",
-    "@trpc/server": "^11.8.1",
+    "@trpc/server": "^11.8.0",
     "@xterm/addon-canvas": "^0.7.0",
-    "@xterm/addon-fit": "0.11.0",
+    "@xterm/addon-fit": "0.10.0",
-    "@xterm/xterm": "^6.0.0",
+    "@xterm/xterm": "^5.5.0",
     "babel-plugin-react-compiler": "^1.0.0",
     "chroma-js": "^3.2.0",
     "clsx": "^2.1.1",
@@ -73,32 +74,30 @@
     "dotenv": "^17.2.3",
     "flag-icons": "^7.5.0",
     "glob": "^13.0.0",
-    "isomorphic-dompurify": "^2.35.0",
+    "isomorphic-dompurify": "^2.34.0",
-    "jotai": "^2.16.1",
+    "jotai": "^2.16.0",
     "mantine-react-table": "2.0.0-beta.9",
-    "next": "16.1.1",
+    "next": "16.0.10",
     "postcss-preset-mantine": "^1.18.0",
     "prismjs": "^1.30.0",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "react-error-boundary": "^6.0.3",
+    "react-error-boundary": "^6.0.0",
     "react-simple-code-editor": "^0.14.1",
-    "sass": "^1.97.2",
+    "sass": "^1.96.0",
     "superjson": "2.2.6",
-    "swagger-ui-react": "^5.31.0",
     "use-deep-compare-effect": "^1.8.1",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/chroma-js": "3.1.2",
-    "@types/node": "^24.10.7",
+    "@types/node": "^24.10.4",
     "@types/prismjs": "^1.26.5",
-    "@types/react": "19.2.8",
+    "@types/react": "19.2.7",
     "@types/react-dom": "19.2.3",
-    "@types/swagger-ui-react": "^5.18.0",
     "concurrently": "^9.2.1",
     "eslint": "^9.39.2",
     "node-loader": "^2.1.0",

apps/nextjs/src/app/[locale]/layout.tsx

@@ -106,7 +106,6 @@ export default async function Layout(props: {
             forceDisableStatus: serverSettings.board.forceDisableStatus,
           },
           search: { defaultSearchEngineId: serverSettings.search.defaultSearchEngineId },
-          user: { enableGravatar: serverSettings.user.enableGravatar },
         }}
         {...innerProps}
       />

apps/nextjs/src/app/[locale]/manage/settings/_components/user-settings-form.tsx

@@ -1,26 +0,0 @@
-"use client";
-
-import { Switch } from "@mantine/core";
-
-import type { ServerSettings } from "@homarr/server-settings";
-import { useScopedI18n } from "@homarr/translation/client";
-
-import { CommonSettingsForm } from "./common-form";
-
-export const UserSettingsForm = ({ defaultValues }: { defaultValues: ServerSettings["user"] }) => {
-  const tUser = useScopedI18n("management.page.settings.section.user");
-
-  return (
-    <CommonSettingsForm settingKey="user" defaultValues={defaultValues}>
-      {(form) => (
-        <>
-          <Switch
-            {...form.getInputProps("enableGravatar", { type: "checkbox" })}
-            label={tUser("enableGravatar.label")}
-            description={tUser("enableGravatar.description")}
-          />
-        </>
-      )}
-    </CommonSettingsForm>
-  );
-};

apps/nextjs/src/app/[locale]/manage/settings/page.tsx

@@ -12,7 +12,6 @@ import { AppearanceSettingsForm } from "./_components/appearance-settings-form";
 import { BoardSettingsForm } from "./_components/board-settings-form";
 import { CultureSettingsForm } from "./_components/culture-settings-form";
 import { SearchSettingsForm } from "./_components/search-settings-form";
-import { UserSettingsForm } from "./_components/user-settings-form";
 
 export async function generateMetadata() {
   const t = await getScopedI18n("management");
@@ -43,10 +42,6 @@ export default async function SettingsPage() {
           <Title order={2}>{tSettings("section.board.title")}</Title>
           <BoardSettingsForm defaultValues={serverSettings.board} />
         </Stack>
-        <Stack>
-          <Title order={2}>{tSettings("section.user.title")}</Title>
-          <UserSettingsForm defaultValues={serverSettings.user} />
-        </Stack>
         <Stack>
           <Title order={2}>{tSettings("section.search.title")}</Title>
           <SearchSettingsForm defaultValues={serverSettings.search} />

apps/nextjs/src/app/[locale]/manage/tools/api/components/swagger-ui.tsx

@@ -1,23 +0,0 @@
-"use client";
-
-import type { OpenAPIObject } from "openapi3-ts/oas31";
-import SwaggerUI from "swagger-ui-react";
-
-// workaround for CSS that cannot be processed by next.js, https://github.com/swagger-api/swagger-ui/issues/10045
-import "../swagger-ui-dark.css";
-import "../swagger-ui-overrides.css";
-import "../swagger-ui.css";
-
-interface SwaggerUIClientProps {
-  document: OpenAPIObject;
-}
-
-export const SwaggerUIClient = ({ document }: SwaggerUIClientProps) => {
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const requestInterceptor = (req: Record<string, any>) => {
-    req.credentials = "omit";
-    return req;
-  };
-
-  return <SwaggerUI requestInterceptor={requestInterceptor} spec={document} />;
-};

apps/nextjs/src/app/[locale]/manage/tools/api/page.tsx

@@ -1,6 +1,7 @@
 import { headers } from "next/headers";
 import { notFound } from "next/navigation";
 import { Stack, Tabs, TabsList, TabsPanel, TabsTab } from "@mantine/core";
+import { ApiReferenceReact } from "@scalar/api-reference-react";
 
 import { openApiDocument } from "@homarr/api";
 import { api } from "@homarr/api/server";
@@ -8,11 +9,14 @@ import { auth } from "@homarr/auth/next";
 import { extractBaseUrlFromHeaders } from "@homarr/common";
 import { getScopedI18n } from "@homarr/translation/server";
 
-import { SwaggerUIClient } from "~/app/[locale]/manage/tools/api/components/swagger-ui";
 import { createMetaTitle } from "~/metadata";
 import { ApiKeysManagement } from "./components/api-keys";
 
-export async function generateMetadata() {
+import "@scalar/api-reference-react/style.css";
+
+import { Metadata } from "next";
+
+export async function generateMetadata(): Promise<Metadata> {
   const session = await auth();
   if (!session?.user || !session.user.permissions.includes("admin")) {
     return {};
@@ -45,7 +49,21 @@ export default async function ApiPage() {
           <ApiKeysManagement apiKeys={apiKeys} />
         </TabsPanel>
         <TabsPanel value={"documentation"}>
-          <SwaggerUIClient document={document} />
+          <ApiReferenceReact
+            configuration={{
+              content: document,
+              layout: "classic",
+              showSidebar: false,
+              hideDarkModeToggle: true,
+              showDeveloperTools: "never",
+              hiddenClients: true,
+              darkMode: session.user.colorScheme === "dark",
+              authentication: {
+                preferredSecurityScheme: "apikey",
+              },
+              hideSearch: true,
+            }}
+          />
         </TabsPanel>
       </Tabs>
     </Stack>

apps/nextjs/src/app/[locale]/manage/tools/api/swagger-ui-overrides.css

@@ -1,4 +0,0 @@
-.swagger-ui .info {
-  margin: 0 !important;
-  margin-bottom: 20px !important;
-}

apps/nextjs/src/app/[locale]/manage/tools/docker/docker-table.tsx

@@ -76,7 +76,6 @@ const createColumns = (
     accessorKey: "ports",
     header: t("docker.field.ports.label"),
     Cell({ cell }) {
-      if (!cell.row.original.ports.length) return null;
       return (
         <OverflowBadge overflowCount={1} data={cell.row.original.ports.map((port) => port.PrivatePort.toString())} />
       );

apps/nextjs/src/app/[locale]/manage/users/create/_components/create-user-stepper.tsx

@@ -200,10 +200,7 @@ export const UserCreateStepperComponent = ({ initialGroups }: UserCreateStepperC
         <Stepper.Step label={t("step.review.label")} allowStepSelect={false} allowStepClick={false}>
           <Card p="xl" shadow="md" withBorder>
             <Stack maw={300} align="center" mx="auto">
-              <UserAvatar
+              <UserAvatar size="xl" user={{ name: generalForm.values.username, image: null }} />
-                size="xl"
-                user={{ name: generalForm.values.username, email: generalForm.values.email ?? null, image: null }}
-              />
               <Text tt="uppercase" fw="bolder" size="xl">
                 {generalForm.values.username}
               </Text>

apps/nextjs/src/app/[locale]/manage/users/groups/[id]/page.tsx

@@ -44,7 +44,7 @@ export default async function GroupsDetailPage(props: GroupsDetailPageProps) {
       <Card>
         {group.owner ? (
           <Group>
-            <UserAvatar user={group.owner} size={"lg"} />
+            <UserAvatar user={{ name: group.owner.name, image: group.owner.image }} size={"lg"} />
             <Stack align={"start"} gap={3}>
               <Text fw={"bold"}>{group.owner.name}</Text>
               <Text>{group.owner.email}</Text>

apps/nextjs/src/app/api/[...trpc]/route.ts

@@ -3,24 +3,21 @@ import { userAgent } from "next/server";
 import { createOpenApiFetchHandler } from "trpc-to-openapi";
 
 import { appRouter, createTRPCContext } from "@homarr/api";
-import { API_KEY_HEADER_NAME, getSessionFromApiKeyAsync } from "@homarr/auth/api-key";
+import type { Session } from "@homarr/auth";
-import { ipAddressFromHeaders } from "@homarr/common/server";
+import { hashPasswordAsync } from "@homarr/auth";
+import { createSessionAsync } from "@homarr/auth/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import { db } from "@homarr/db";
+import { db, eq } from "@homarr/db";
+import { apiKeys } from "@homarr/db/schema";
 
 const logger = createLogger({ module: "trpcOpenApiRoute" });
 
 const handlerAsync = async (req: NextRequest) => {
-  const apiKeyHeaderValue = req.headers.get(API_KEY_HEADER_NAME);
+  const apiKeyHeaderValue = req.headers.get("ApiKey");
-  const ipAddress = ipAddressFromHeaders(req.headers);
+  const ipAddress = req.headers.get("x-forwarded-for");
   const { ua } = userAgent(req);
-
+  const session: Session | null = await getSessionOrDefaultFromHeadersAsync(apiKeyHeaderValue, ipAddress, ua);
-  logger.info(
-    `Creating OpenAPI fetch handler for user ${apiKeyHeaderValue ? "with an api key" : "without an api key"}`,
-  );
-
-  const session = await getSessionFromApiKeyAsync(db, apiKeyHeaderValue, ipAddress, ua);
 
   // Fallback to JSON if no content type is set
   if (!req.headers.has("Content-Type")) {
@@ -38,6 +35,67 @@ const handlerAsync = async (req: NextRequest) => {
   });
 };
 
+const getSessionOrDefaultFromHeadersAsync = async (
+  apiKeyHeaderValue: string | null,
+  ipAdress: string | null,
+  userAgent: string,
+): Promise<Session | null> => {
+  logger.info(
+    `Creating OpenAPI fetch handler for user ${apiKeyHeaderValue ? "with an api key" : "without an api key"}`,
+  );
+
+  if (apiKeyHeaderValue === null) {
+    return null;
+  }
+
+  const [apiKeyId, apiKey] = apiKeyHeaderValue.split(".");
+
+  if (!apiKeyId || !apiKey) {
+    logger.warn("An attempt to authenticate over API has failed due to invalid API key format", {
+      ipAdress,
+      userAgent,
+    });
+    return null;
+  }
+
+  const apiKeyFromDb = await db.query.apiKeys.findFirst({
+    where: eq(apiKeys.id, apiKeyId),
+    columns: {
+      id: true,
+      apiKey: true,
+      salt: true,
+    },
+    with: {
+      user: {
+        columns: {
+          id: true,
+          name: true,
+          email: true,
+          emailVerified: true,
+        },
+      },
+    },
+  });
+
+  if (!apiKeyFromDb) {
+    logger.warn("An attempt to authenticate over API has failed", { ipAdress, userAgent });
+    return null;
+  }
+
+  const hashedApiKey = await hashPasswordAsync(apiKey, apiKeyFromDb.salt);
+
+  if (apiKeyFromDb.apiKey !== hashedApiKey) {
+    logger.warn("An attempt to authenticate over API has failed", { ipAdress, userAgent });
+    return null;
+  }
+
+  logger.info("Read session from API request and found user", {
+    name: apiKeyFromDb.user.name,
+    id: apiKeyFromDb.user.id,
+  });
+  return await createSessionAsync(db, apiKeyFromDb.user);
+};
+
 export {
   handlerAsync as DELETE,
   handlerAsync as GET,

apps/nextjs/src/app/api/trpc/[trpc]/route.ts

@@ -1,14 +1,10 @@
-import { userAgent } from "next/server";
 import { fetchRequestHandler } from "@trpc/server/adapters/fetch";
 
 import { appRouter, createTRPCContext } from "@homarr/api";
 import { trpcPath } from "@homarr/api/shared";
-import { API_KEY_HEADER_NAME, getSessionFromApiKeyAsync } from "@homarr/auth/api-key";
 import { auth } from "@homarr/auth/next";
-import { ipAddressFromHeaders } from "@homarr/common/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import { db } from "@homarr/db";
 
 const logger = createLogger({ module: "trpcRoute" });
 
@@ -32,20 +28,11 @@ export function OPTIONS() {
 }
 
 const handler = auth(async (req) => {
-  // Try API key auth first, fall back to session cookie
-  const apiKeyHeader = req.headers.get(API_KEY_HEADER_NAME);
-  const ipAddress = ipAddressFromHeaders(req.headers);
-
-  const { ua } = userAgent(req);
-
-  const apiKeySession = await getSessionFromApiKeyAsync(db, apiKeyHeader, ipAddress, ua);
-  const session = apiKeySession ?? req.auth;
-
   const response = await fetchRequestHandler({
     endpoint: trpcPath,
     router: appRouter,
     req,
-    createContext: () => createTRPCContext({ session, headers: req.headers }),
+    createContext: () => createTRPCContext({ session: req.auth, headers: req.headers }),
     onError({ error, path, type }) {
       logger.error(new ErrorWithMetadata("tRPC Error occured", { path, type }, { cause: error }));
     },

apps/nextjs/src/components/access/access-settings.tsx

@@ -26,7 +26,6 @@ interface UserAccessPermission<TPermission extends string> {
   user: {
     name: string | null;
     image: string | null;
-    email: string | null;
     id: string;
   };
 }
@@ -67,7 +66,6 @@ interface Props<TPermission extends string> {
       id: string;
       name: string | null;
       image: string | null;
-      email: string | null;
     } | null;
   };
   translate: (key: TPermission) => string;

apps/nextjs/src/components/access/context.tsx

@@ -1,6 +1,5 @@
 import { createContext, useContext } from "react";
-
+import type { TablerIcon } from "@tabler/icons-react";
-import type { TablerIcon } from "@homarr/ui";
 
 const AccessContext = createContext<{
   permissions: readonly string[];

apps/nextjs/src/components/access/user-access-form.tsx

@@ -21,7 +21,6 @@ export interface FormProps<TPermission extends string> {
       id: string;
       name: string | null;
       image: string | null;
-      email: string | null;
     } | null;
   };
   accessQueryData: AccessQueryData<TPermission>;
@@ -119,7 +118,6 @@ interface UserItemContentProps {
     id: string;
     name: string | null;
     image: string | null;
-    email: string | null;
   };
 }
 

apps/nextjs/src/components/access/user-select-modal.tsx

@@ -13,7 +13,7 @@ import { UserAvatar } from "@homarr/ui";
 interface InnerProps {
   presentUserIds: string[];
   excludeExternalProviders?: boolean;
-  onSelect: (props: { id: string; name: string; image: string; email: string | null }) => void | Promise<void>;
+  onSelect: (props: { id: string; name: string; image: string }) => void | Promise<void>;
   confirmLabel?: string;
 }
 
@@ -36,7 +36,6 @@ export const UserSelectModal = createModal<InnerProps>(({ actions, innerProps })
       id: currentUser.id,
       name: currentUser.name ?? "",
       image: currentUser.image ?? "",
-      email: currentUser.email ?? null,
     });
 
     setLoading(false);

apps/nextjs/src/components/board/items/actions/test/mocks/board-mock.ts

@@ -34,7 +34,6 @@ export class BoardMockBuilder {
         id: createId(),
         image: null,
         name: "User",
-        email: null,
       },
       groupPermissions: [],
       userPermissions: [],

apps/nextjs/src/components/no-results.tsx

@@ -1,6 +1,5 @@
 import { Anchor, Card, Stack, Text } from "@mantine/core";
-
+import type { TablerIcon } from "@tabler/icons-react";
-import type { TablerIcon } from "@homarr/ui";
 
 interface NoResultsProps {
   icon: TablerIcon;

apps/nextjs/src/components/user-avatar.tsx

@@ -3,21 +3,17 @@ import type { MantineSize } from "@mantine/core";
 import { auth } from "@homarr/auth/next";
 import { UserAvatar } from "@homarr/ui";
 
-interface CurrentUserAvatarProps {
+interface UserAvatarProps {
   size: MantineSize;
 }
 
-export const CurrentUserAvatar = async ({ size }: CurrentUserAvatarProps) => {
+export const CurrentUserAvatar = async ({ size }: UserAvatarProps) => {
   const currentSession = await auth();
 
-  return (
+  const user = {
-    <UserAvatar
-      user={{
     name: currentSession?.user.name ?? null,
     image: currentSession?.user.image ?? null,
-        email: currentSession?.user.email ?? null,
+  };
-      }}
+
-      size={size}
+  return <UserAvatar user={user} size={size} />;
-    />
-  );
 };

apps/tasks/package.json

@@ -41,15 +41,15 @@
     "dotenv": "^17.2.3",
     "fastify": "^5.6.2",
     "superjson": "2.2.6",
-    "undici": "7.18.2"
+    "undici": "7.16.0"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/node": "^24.10.7",
+    "@types/node": "^24.10.4",
     "dotenv-cli": "^11.0.0",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "prettier": "^3.7.4",
     "tsx": "4.20.4",

apps/websocket/package.json

@@ -27,14 +27,14 @@
     "@homarr/validation": "workspace:^0.1.0",
     "dotenv": "^17.2.3",
     "tsx": "4.20.4",
-    "ws": "^8.19.0"
+    "ws": "^8.18.3"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/ws": "^8.18.1",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "prettier": "^3.7.4",
     "typescript": "^5.9.3"

deployments/prebuilt-debian/Dockerfile

@@ -0,0 +1,6 @@
+FROM node:24.12.0-trixie AS base
+WORKDIR /app
+COPY package.json .
+COPY pnpm-lock.yaml .
+RUN corepack enable pnpm && pnpm install --frozen-lockfile
+CMD ["sleep", "60s"]

deployments/prebuilt-debian/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "homarr-prebuilt-debian",
+  "private": true,
+  "dependencies": {
+    "better-sqlite3": "^12.5.0"
+  },
+  "packageManager": "pnpm@10.25.0",
+  "engines": {
+    "node": ">=24.12.0",
+    "pnpm": ">=10.25.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "better-sqlite3"
+    ]
+  }
+}

deployments/prebuilt-debian/pnpm-lock.yaml

@@ -0,0 +1,286 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      better-sqlite3:
+        specifier: ^12.5.0
+        version: 12.5.0
+
+packages:
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  better-sqlite3@12.5.0:
+    resolution: {integrity: sha512-WwCZ/5Diz7rsF29o27o0Gcc1Du+l7Zsv7SYtVPG0X3G/uUI1LqdxrQI7c9Hs2FWpqXXERjW9hp6g3/tH7DlVKg==}
+    engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x}
+
+  bindings@1.5.0:
+    resolution: {integrity: sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==}
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  chownr@1.1.4:
+    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
+
+  decompress-response@6.0.0:
+    resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
+    engines: {node: '>=10'}
+
+  deep-extend@0.6.0:
+    resolution: {integrity: sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==}
+    engines: {node: '>=4.0.0'}
+
+  detect-libc@2.1.2:
+    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
+    engines: {node: '>=8'}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  expand-template@2.0.3:
+    resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
+    engines: {node: '>=6'}
+
+  file-uri-to-path@1.0.0:
+    resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
+
+  fs-constants@1.0.0:
+    resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
+
+  github-from-package@0.0.0:
+    resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  ini@1.3.8:
+    resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
+
+  mimic-response@3.1.0:
+    resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
+    engines: {node: '>=10'}
+
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
+
+  mkdirp-classic@0.5.3:
+    resolution: {integrity: sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==}
+
+  napi-build-utils@2.0.0:
+    resolution: {integrity: sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==}
+
+  node-abi@3.85.0:
+    resolution: {integrity: sha512-zsFhmbkAzwhTft6nd3VxcG0cvJsT70rL+BIGHWVq5fi6MwGrHwzqKaxXE+Hl2GmnGItnDKPPkO5/LQqjVkIdFg==}
+    engines: {node: '>=10'}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  prebuild-install@7.1.3:
+    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  pump@3.0.3:
+    resolution: {integrity: sha512-todwxLMY7/heScKmntwQG8CXVkWUOdYxIvY2s0VWAAMh/nd8SoYiRaKjlr7+iCs984f2P8zvrfWcDDYVb73NfA==}
+
+  rc@1.2.8:
+    resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
+    hasBin: true
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  semver@7.7.3:
+    resolution: {integrity: sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  simple-concat@1.0.1:
+    resolution: {integrity: sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==}
+
+  simple-get@4.0.1:
+    resolution: {integrity: sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-json-comments@2.0.1:
+    resolution: {integrity: sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==}
+    engines: {node: '>=0.10.0'}
+
+  tar-fs@2.1.4:
+    resolution: {integrity: sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==}
+
+  tar-stream@2.2.0:
+    resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
+    engines: {node: '>=6'}
+
+  tunnel-agent@0.6.0:
+    resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+snapshots:
+
+  base64-js@1.5.1: {}
+
+  better-sqlite3@12.5.0:
+    dependencies:
+      bindings: 1.5.0
+      prebuild-install: 7.1.3
+
+  bindings@1.5.0:
+    dependencies:
+      file-uri-to-path: 1.0.0
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  chownr@1.1.4: {}
+
+  decompress-response@6.0.0:
+    dependencies:
+      mimic-response: 3.1.0
+
+  deep-extend@0.6.0: {}
+
+  detect-libc@2.1.2: {}
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  expand-template@2.0.3: {}
+
+  file-uri-to-path@1.0.0: {}
+
+  fs-constants@1.0.0: {}
+
+  github-from-package@0.0.0: {}
+
+  ieee754@1.2.1: {}
+
+  inherits@2.0.4: {}
+
+  ini@1.3.8: {}
+
+  mimic-response@3.1.0: {}
+
+  minimist@1.2.8: {}
+
+  mkdirp-classic@0.5.3: {}
+
+  napi-build-utils@2.0.0: {}
+
+  node-abi@3.85.0:
+    dependencies:
+      semver: 7.7.3
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  prebuild-install@7.1.3:
+    dependencies:
+      detect-libc: 2.1.2
+      expand-template: 2.0.3
+      github-from-package: 0.0.0
+      minimist: 1.2.8
+      mkdirp-classic: 0.5.3
+      napi-build-utils: 2.0.0
+      node-abi: 3.85.0
+      pump: 3.0.3
+      rc: 1.2.8
+      simple-get: 4.0.1
+      tar-fs: 2.1.4
+      tunnel-agent: 0.6.0
+
+  pump@3.0.3:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  rc@1.2.8:
+    dependencies:
+      deep-extend: 0.6.0
+      ini: 1.3.8
+      minimist: 1.2.8
+      strip-json-comments: 2.0.1
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  safe-buffer@5.2.1: {}
+
+  semver@7.7.3: {}
+
+  simple-concat@1.0.1: {}
+
+  simple-get@4.0.1:
+    dependencies:
+      decompress-response: 6.0.0
+      once: 1.4.0
+      simple-concat: 1.0.1
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-json-comments@2.0.1: {}
+
+  tar-fs@2.1.4:
+    dependencies:
+      chownr: 1.1.4
+      mkdirp-classic: 0.5.3
+      pump: 3.0.3
+      tar-stream: 2.2.0
+
+  tar-stream@2.2.0:
+    dependencies:
+      bl: 4.1.0
+      end-of-stream: 1.4.5
+      fs-constants: 1.0.0
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  tunnel-agent@0.6.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  util-deprecate@1.0.2: {}
+
+  wrappy@1.0.2: {}

docs/README.md

@@ -314,13 +314,6 @@
   <br/>  
   <p align="center">Unifi<br/>Controller</p>
 </a>
-</td>
-<td align="center">
-<a href="https://homarr.dev/docs/integrations/unraid" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg" alt="Unraid" width="90" height="90" />
-  <br/>  
-  <p align="center">Unraid</p>
-</a>
 </td></tr>
 </tbody>
 </table>

e2e/shared/e2e-db.ts

@@ -1,9 +1,9 @@
 import { mkdir } from "fs/promises";
 import path from "path";
-import { createClient } from "@libsql/client/node";
 import { createId } from "@paralleldrive/cuid2";
-import { drizzle, LibSQLDatabase } from "drizzle-orm/libsql";
+import Database from "better-sqlite3";
-import { migrate } from "drizzle-orm/libsql/migrator";
+import { BetterSQLite3Database, drizzle } from "drizzle-orm/better-sqlite3";
+import { migrate } from "drizzle-orm/better-sqlite3/migrator";
 
 import { DB_CASING } from "../../packages/core/src/infrastructure/db/constants";
 import * as sqliteSchema from "../../packages/db/schema/sqlite";
@@ -14,10 +14,7 @@ export const createSqliteDbFileAsync = async () => {
 
   const localDbUrl = path.join(localMountPath, "db", "db.sqlite");
 
-  const connection = createClient({
+  const connection = new Database(localDbUrl);
-    url: `file:${localDbUrl}`,
-  });
-
   const db = drizzle(connection, {
     schema: sqliteSchema,
     casing: DB_CASING,
@@ -33,4 +30,4 @@ export const createSqliteDbFileAsync = async () => {
   };
 };
 
-export type SqliteDatabase = LibSQLDatabase<typeof sqliteSchema>;
+export type SqliteDatabase = BetterSQLite3Database<typeof sqliteSchema>;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "homarr",
-  "version": "1.50.1",
+  "version": "1.46.0",
   "private": true,
   "scripts": {
     "build": "cross-env CI=true turbo build",
@@ -42,32 +42,33 @@
     "@semantic-release/github": "^12.0.2",
     "@semantic-release/npm": "^13.1.3",
     "@semantic-release/release-notes-generator": "^14.1.0",
-    "@testcontainers/redis": "^11.11.0",
+    "@testcontainers/redis": "^11.10.0",
-    "@turbo/gen": "^2.7.4",
+    "@turbo/gen": "^2.6.3",
     "@vitejs/plugin-react": "^5.1.2",
-    "@vitest/coverage-v8": "^4.0.17",
+    "@vitest/coverage-v8": "^4.0.15",
-    "@vitest/ui": "^4.0.17",
+    "@vitest/ui": "^4.0.15",
     "conventional-changelog-conventionalcommits": "^9.1.0",
     "cross-env": "^10.1.0",
-    "jsdom": "^27.4.0",
+    "jsdom": "^27.3.0",
     "json5": "^2.2.3",
     "prettier": "^3.7.4",
     "semantic-release": "^25.0.2",
-    "testcontainers": "^11.11.0",
+    "testcontainers": "^11.10.0",
-    "turbo": "^2.7.4",
+    "turbo": "^2.6.3",
     "typescript": "^5.9.3",
-    "vite-tsconfig-paths": "^6.0.4",
+    "vite-tsconfig-paths": "^5.1.4",
-    "vitest": "^4.0.17"
+    "vitest": "^4.0.15"
   },
-  "packageManager": "pnpm@10.28.0",
+  "packageManager": "pnpm@10.25.0",
   "engines": {
     "node": ">=24.12.0",
-    "pnpm": ">=10.28.0"
+    "pnpm": ">=10.25.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
       "@tree-sitter-grammars/tree-sitter-yaml",
       "bcrypt",
+      "better-sqlite3",
       "cpu-features",
       "esbuild",
       "sharp",
@@ -76,25 +77,25 @@
       "tree-sitter-json"
     ],
     "overrides": {
-      "@babel/helpers@<7.26.10": ">=7.28.6",
+      "@babel/helpers@<7.26.10": ">=7.28.4",
-      "@babel/runtime@<7.26.10": ">=7.28.6",
+      "@babel/runtime@<7.26.10": ">=7.28.4",
       "axios@>=1.0.0 <1.8.2": ">=1.13.2",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=4.0.1",
       "brace-expansion@>=1.0.0 <=1.1.11": ">=4.0.1",
-      "esbuild@<=0.24.2": ">=0.27.2",
+      "esbuild@<=0.24.2": ">=0.27.1",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
-      "hono@<4.6.5": ">=4.11.4",
+      "hono@<4.6.5": ">=4.11.0",
       "linkifyjs@<4.3.2": ">=4.3.2",
       "nanoid@>=4.0.0 <5.0.9": ">=5.1.6",
       "prismjs@<1.30.0": ">=1.30.0",
-      "proxmox-api>undici": "7.18.2",
+      "proxmox-api>undici": "7.16.0",
       "react-is": "^19.2.3",
-      "rollup@>=4.0.0 <4.22.4": ">=4.55.1",
+      "rollup@>=4.0.0 <4.22.4": ">=4.53.3",
       "sha.js@<=2.4.11": ">=2.4.12",
       "tar-fs@>=3.0.0 <3.0.9": ">=3.1.1",
       "tar-fs@>=2.0.0 <2.1.3": ">=3.1.1",
       "tmp@<=0.2.3": ">=0.2.5",
-      "vite@>=5.0.0 <=5.4.18": ">=7.3.1"
+      "vite@>=5.0.0 <=5.4.18": ">=7.2.7"
     },
     "patchedDependencies": {
       "@types/node-unifi": "patches/@types__node-unifi.patch",

packages/api/package.json

@@ -41,18 +41,18 @@
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@kubernetes/client-node": "^1.4.0",
-    "@tanstack/react-query": "^5.90.16",
+    "@tanstack/react-query": "^5.90.12",
-    "@trpc/client": "^11.8.1",
+    "@trpc/client": "^11.8.0",
-    "@trpc/react-query": "^11.8.1",
+    "@trpc/react-query": "^11.8.0",
-    "@trpc/server": "^11.8.1",
+    "@trpc/server": "^11.8.0",
-    "@trpc/tanstack-react-query": "^11.8.1",
+    "@trpc/tanstack-react-query": "^11.8.0",
     "lodash.clonedeep": "^4.5.0",
-    "next": "16.1.1",
+    "next": "16.0.10",
     "react": "19.2.3",
     "react-dom": "19.2.3",
     "superjson": "2.2.6",
     "trpc-to-openapi": "^3.1.0",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",

packages/api/src/open-api.ts

@@ -1,7 +1,5 @@
 import { generateOpenApiDocument } from "trpc-to-openapi";
 
-import { API_KEY_HEADER_NAME } from "@homarr/auth/api-key";
-
 import { appRouter } from "./root";
 
 export const openApiDocument = (base: string) =>
@@ -13,7 +11,7 @@ export const openApiDocument = (base: string) =>
     securitySchemes: {
       apikey: {
         type: "apiKey",
-        name: API_KEY_HEADER_NAME,
+        name: "ApiKey",
         description: "API key which can be obtained in the Homarr administration dashboard",
         in: "header",
       },

packages/api/src/root.ts

@@ -11,6 +11,7 @@ import { importRouter } from "./router/import/import-router";
 import { infoRouter } from "./router/info";
 import { integrationRouter } from "./router/integration/integration-router";
 import { inviteRouter } from "./router/invite";
+import { itemsRouter } from "./router/item/item-router";
 import { kubernetesRouter } from "./router/kubernetes/router/kubernetes-router";
 import { locationRouter } from "./router/location";
 import { logRouter } from "./router/log";
@@ -49,6 +50,7 @@ export const appRouter = createTRPCRouter({
   updateChecker: updateCheckerRouter,
   certificates: certificateRouter,
   info: infoRouter,
+  item: itemsRouter,
 });
 
 // export type definition of API

packages/api/src/router/apiKeys.ts

@@ -22,7 +22,6 @@ export const apiKeysRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
       },

packages/api/src/router/app.ts

@@ -141,15 +141,13 @@ export const appRouter = createTRPCRouter({
     .output(z.void())
     .mutation(async ({ ctx, input }) => {
       await ctx.db.insert(apps).values(
-        await Promise.all(
+        input.map((app) => ({
-          input.map(async (app) => ({
           id: createId(),
           name: app.name,
           description: app.description,
-            iconUrl: app.iconUrl ?? (await getIconForName(ctx.db, app.name))?.url ?? defaultIcon,
+          iconUrl: app.iconUrl ?? getIconForName(ctx.db, app.name).sync()?.url ?? defaultIcon,
           href: app.href,
         })),
-        ),
       );
     }),
   update: permissionRequiredProcedure

packages/api/src/router/board.ts

@@ -6,8 +6,8 @@ import { constructBoardPermissions } from "@homarr/auth/shared";
 import { createId } from "@homarr/common";
 import type { DeviceType } from "@homarr/common/server";
 import type { Database, InferInsertModel, InferSelectModel, SQL } from "@homarr/db";
-import { and, asc, eq, inArray, isNull, like, not, or, sql } from "@homarr/db";
+import { and, asc, eq, handleTransactionsAsync, inArray, isNull, like, not, or, sql } from "@homarr/db";
-import { createDbInsertCollection } from "@homarr/db/collection";
+import { createDbInsertCollectionWithoutTransaction } from "@homarr/db/collection";
 import { getServerSettingByKeyAsync } from "@homarr/db/queries";
 import {
   boardGroupPermissions,
@@ -155,7 +155,6 @@ export const boardRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
         userPermissions: {
@@ -273,7 +272,7 @@ export const boardRouter = createTRPCRouter({
         },
       });
 
-      const createBoardCollection = createDbInsertCollection(["boards", "sections", "layouts"]);
+      const createBoardCollection = createDbInsertCollectionWithoutTransaction(["boards", "sections", "layouts"]);
 
       createBoardCollection.boards.push({
         id: boardId,
@@ -439,8 +438,10 @@ export const boardRouter = createTRPCRouter({
           })),
       );
 
-      await ctx.db.transaction(async (transaction) => {
+      await handleTransactionsAsync(ctx.db, {
-        transaction.insert(boards).values({
+        async handleAsync(db, schema) {
+          await db.transaction(async (transaction) => {
+            transaction.insert(schema.boards).values({
               ...boardProps,
               id: newBoardId,
               name: input.name,
@@ -448,33 +449,76 @@ export const boardRouter = createTRPCRouter({
             });
 
             if (layoutsToInsert.length > 0) {
-          await transaction.insert(layouts).values(layoutsToInsert);
+              await transaction.insert(schema.layouts).values(layoutsToInsert);
             }
 
             if (sectionsToInsert.length > 0) {
-          await transaction.insert(sections).values(sectionsToInsert);
+              await transaction.insert(schema.sections).values(sectionsToInsert);
             }
 
             if (sectionLayoutsToInsert.length > 0) {
-          await transaction.insert(sectionLayouts).values(sectionLayoutsToInsert);
+              await transaction.insert(schema.sectionLayouts).values(sectionLayoutsToInsert);
             }
 
             if (sectionCollapseStatesToInsert.length > 0) {
-          await transaction.insert(sectionCollapseStates).values(sectionCollapseStatesToInsert);
+              await transaction.insert(schema.sectionCollapseStates).values(sectionCollapseStatesToInsert);
             }
 
             if (itemsToInsert.length > 0) {
-          await transaction.insert(items).values(itemsToInsert);
+              await transaction.insert(schema.items).values(itemsToInsert);
             }
 
             if (itemLayoutsToInsert.length > 0) {
-          await transaction.insert(itemLayouts).values(itemLayoutsToInsert);
+              await transaction.insert(schema.itemLayouts).values(itemLayoutsToInsert);
             }
 
             if (itemIntegrationsToInsert.length > 0) {
-          await transaction.insert(integrationItems).values(itemIntegrationsToInsert);
+              await transaction.insert(schema.integrationItems).values(itemIntegrationsToInsert);
             }
           });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .insert(boards)
+              .values({
+                ...boardProps,
+                id: newBoardId,
+                name: input.name,
+                creatorId: ctx.session.user.id,
+              })
+              .run();
+
+            if (layoutsToInsert.length > 0) {
+              transaction.insert(layouts).values(layoutsToInsert).run();
+            }
+
+            if (sectionsToInsert.length > 0) {
+              transaction.insert(sections).values(sectionsToInsert).run();
+            }
+
+            if (sectionLayoutsToInsert.length > 0) {
+              transaction.insert(sectionLayouts).values(sectionLayoutsToInsert).run();
+            }
+
+            if (sectionCollapseStatesToInsert.length > 0) {
+              transaction.insert(sectionCollapseStates).values(sectionCollapseStatesToInsert).run();
+            }
+
+            if (itemsToInsert.length > 0) {
+              transaction.insert(items).values(itemsToInsert).run();
+            }
+
+            if (itemLayoutsToInsert.length > 0) {
+              transaction.insert(itemLayouts).values(itemLayoutsToInsert).run();
+            }
+
+            if (itemIntegrationsToInsert.length > 0) {
+              transaction.insert(integrationItems).values(itemIntegrationsToInsert).run();
+            }
+          });
+        },
+      });
     }),
   renameBoard: protectedProcedure.input(boardRenameSchema).mutation(async ({ ctx, input }) => {
     await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "full");
@@ -711,11 +755,13 @@ export const boardRouter = createTRPCRouter({
 
     const dbBoard = await getFullBoardWithWhereAsync(ctx.db, eq(boards.id, input.id), ctx.session.user.id);
 
-    await ctx.db.transaction(async (transaction) => {
+    await handleTransactionsAsync(ctx.db, {
+      async handleAsync(db, schema) {
+        await db.transaction(async (transaction) => {
           const addedSections = filterAddedItems(input.sections, dbBoard.sections);
 
           if (addedSections.length > 0) {
-        await transaction.insert(sections).values(
+            await transaction.insert(schema.sections).values(
               addedSections.map((section) => ({
                 id: section.id,
                 kind: section.kind,
@@ -728,12 +774,12 @@ export const boardRouter = createTRPCRouter({
             );
 
             if (addedSections.some((section) => section.kind === "dynamic")) {
-          await transaction.insert(sectionLayouts).values(
+              await transaction.insert(schema.sectionLayouts).values(
                 addedSections
                   .filter((section) => section.kind === "dynamic")
                   .flatMap((section) =>
                     section.layouts.map(
-                  (sectionLayout): InferInsertModel<typeof sectionLayouts> => ({
+                      (sectionLayout): InferInsertModel<typeof schema.sectionLayouts> => ({
                         layoutId: sectionLayout.layoutId,
                         sectionId: section.id,
                         parentSectionId: sectionLayout.parentSectionId,
@@ -751,7 +797,7 @@ export const boardRouter = createTRPCRouter({
           const addedItems = filterAddedItems(input.items, dbBoard.items);
 
           if (addedItems.length > 0) {
-        await transaction.insert(items).values(
+            await transaction.insert(schema.items).values(
               addedItems.map((item) => ({
                 id: item.id,
                 kind: item.kind,
@@ -760,10 +806,10 @@ export const boardRouter = createTRPCRouter({
                 boardId: dbBoard.id,
               })),
             );
-        await transaction.insert(itemLayouts).values(
+            await transaction.insert(schema.itemLayouts).values(
               addedItems.flatMap((item) =>
                 item.layouts.map(
-              (layoutSection): InferInsertModel<typeof itemLayouts> => ({
+                  (layoutSection): InferInsertModel<typeof schema.itemLayouts> => ({
                     layoutId: layoutSection.layoutId,
                     sectionId: layoutSection.sectionId,
                     itemId: item.id,
@@ -793,12 +839,13 @@ export const boardRouter = createTRPCRouter({
             (inputRelation) =>
               !dbIntegrationRelations.some(
                 (dbRelation) =>
-              dbRelation.itemId === inputRelation.itemId && dbRelation.integrationId === inputRelation.integrationId,
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
               ),
           );
 
           if (addedIntegrationRelations.length > 0) {
-        await transaction.insert(integrationItems).values(
+            await transaction.insert(schema.integrationItems).values(
               addedIntegrationRelations.map((relation) => ({
                 itemId: relation.itemId,
                 integrationId: relation.integrationId,
@@ -810,17 +857,17 @@ export const boardRouter = createTRPCRouter({
 
           for (const item of updatedItems) {
             await transaction
-          .update(items)
+              .update(schema.items)
               .set({
                 kind: item.kind,
                 options: superjson.stringify(item.options),
                 advancedOptions: superjson.stringify(item.advancedOptions),
               })
-          .where(eq(items.id, item.id));
+              .where(eq(schema.items.id, item.id));
 
             for (const itemSectionLayout of item.layouts) {
               await transaction
-            .update(itemLayouts)
+                .update(schema.itemLayouts)
                 .set({
                   height: itemSectionLayout.height,
                   width: itemSectionLayout.width,
@@ -828,7 +875,12 @@ export const boardRouter = createTRPCRouter({
                   yOffset: itemSectionLayout.yOffset,
                   sectionId: itemSectionLayout.sectionId,
                 })
-            .where(and(eq(itemLayouts.itemId, item.id), eq(itemLayouts.layoutId, itemSectionLayout.layoutId)));
+                .where(
+                  and(
+                    eq(schema.itemLayouts.itemId, item.id),
+                    eq(schema.itemLayouts.layoutId, itemSectionLayout.layoutId),
+                  ),
+                );
             }
           }
 
@@ -837,20 +889,20 @@ export const boardRouter = createTRPCRouter({
           for (const section of updatedSections) {
             const prev = dbBoard.sections.find((dbSection) => dbSection.id === section.id);
             await transaction
-          .update(sections)
+              .update(schema.sections)
               .set({
                 yOffset: prev?.kind !== "dynamic" && "yOffset" in section ? section.yOffset : null,
                 xOffset: prev?.kind !== "dynamic" && "yOffset" in section ? 0 : null,
                 options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
                 name: prev?.kind === "category" && "name" in section ? section.name : null,
               })
-          .where(eq(sections.id, section.id));
+              .where(eq(schema.sections.id, section.id));
 
             if (section.kind !== "dynamic") continue;
 
             for (const sectionLayout of section.layouts) {
               await transaction
-            .update(sectionLayouts)
+                .update(schema.sectionLayouts)
                 .set({
                   height: sectionLayout.height,
                   width: sectionLayout.width,
@@ -858,7 +910,12 @@ export const boardRouter = createTRPCRouter({
                   yOffset: sectionLayout.yOffset,
                   parentSectionId: sectionLayout.parentSectionId,
                 })
-            .where(and(eq(sectionLayouts.sectionId, section.id), eq(sectionLayouts.layoutId, sectionLayout.layoutId)));
+                .where(
+                  and(
+                    eq(schema.sectionLayouts.sectionId, section.id),
+                    eq(schema.sectionLayouts.layoutId, sectionLayout.layoutId),
+                  ),
+                );
             }
           }
 
@@ -866,13 +923,14 @@ export const boardRouter = createTRPCRouter({
             (dbRelation) =>
               !inputIntegrationRelations.some(
                 (inputRelation) =>
-              dbRelation.itemId === inputRelation.itemId && dbRelation.integrationId === inputRelation.integrationId,
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
               ),
           );
 
           for (const relation of removedIntegrationRelations) {
             await transaction
-          .delete(integrationItems)
+              .delete(schema.integrationItems)
               .where(
                 and(
                   eq(integrationItems.itemId, relation.itemId),
@@ -885,16 +943,228 @@ export const boardRouter = createTRPCRouter({
 
           const itemIds = removedItems.map((item) => item.id);
           if (itemIds.length > 0) {
-        await transaction.delete(items).where(inArray(items.id, itemIds));
+            await transaction.delete(schema.items).where(inArray(schema.items.id, itemIds));
           }
 
           const removedSections = filterRemovedItems(input.sections, dbBoard.sections);
           const sectionIds = removedSections.map((section) => section.id);
 
           if (sectionIds.length > 0) {
-        await transaction.delete(sections).where(inArray(sections.id, sectionIds));
+            await transaction.delete(schema.sections).where(inArray(schema.sections.id, sectionIds));
           }
         });
+      },
+      handleSync(db) {
+        db.transaction((transaction) => {
+          const addedSections = filterAddedItems(input.sections, dbBoard.sections);
+
+          if (addedSections.length > 0) {
+            transaction
+              .insert(sections)
+              .values(
+                addedSections.map((section) => ({
+                  id: section.id,
+                  kind: section.kind,
+                  yOffset: section.kind !== "dynamic" ? section.yOffset : null,
+                  xOffset: section.kind === "dynamic" ? null : 0,
+                  options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
+                  name: "name" in section ? section.name : null,
+                  boardId: dbBoard.id,
+                })),
+              )
+              .run();
+
+            if (addedSections.some((section) => section.kind === "dynamic")) {
+              transaction
+                .insert(sectionLayouts)
+                .values(
+                  addedSections
+                    .filter((section) => section.kind === "dynamic")
+                    .flatMap((section) =>
+                      section.layouts.map(
+                        (sectionLayout): InferInsertModel<typeof sectionLayouts> => ({
+                          layoutId: sectionLayout.layoutId,
+                          sectionId: section.id,
+                          parentSectionId: sectionLayout.parentSectionId,
+                          height: sectionLayout.height,
+                          width: sectionLayout.width,
+                          xOffset: sectionLayout.xOffset,
+                          yOffset: sectionLayout.yOffset,
+                        }),
+                      ),
+                    ),
+                )
+                .run();
+            }
+          }
+
+          const addedItems = filterAddedItems(input.items, dbBoard.items);
+
+          if (addedItems.length > 0) {
+            transaction
+              .insert(items)
+              .values(
+                addedItems.map((item) => ({
+                  id: item.id,
+                  kind: item.kind,
+                  options: superjson.stringify(item.options),
+                  advancedOptions: superjson.stringify(item.advancedOptions),
+                  boardId: dbBoard.id,
+                })),
+              )
+              .run();
+            transaction
+              .insert(itemLayouts)
+              .values(
+                addedItems.flatMap((item) =>
+                  item.layouts.map(
+                    (layoutSection): InferInsertModel<typeof itemLayouts> => ({
+                      layoutId: layoutSection.layoutId,
+                      sectionId: layoutSection.sectionId,
+                      itemId: item.id,
+                      height: layoutSection.height,
+                      width: layoutSection.width,
+                      xOffset: layoutSection.xOffset,
+                      yOffset: layoutSection.yOffset,
+                    }),
+                  ),
+                ),
+              )
+              .run();
+          }
+
+          const inputIntegrationRelations = input.items.flatMap(({ integrationIds, id: itemId }) =>
+            integrationIds.map((integrationId) => ({
+              integrationId,
+              itemId,
+            })),
+          );
+          const dbIntegrationRelations = dbBoard.items.flatMap(({ integrationIds, id: itemId }) =>
+            integrationIds.map((integrationId) => ({
+              integrationId,
+              itemId,
+            })),
+          );
+          const addedIntegrationRelations = inputIntegrationRelations.filter(
+            (inputRelation) =>
+              !dbIntegrationRelations.some(
+                (dbRelation) =>
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
+              ),
+          );
+
+          if (addedIntegrationRelations.length > 0) {
+            transaction
+              .insert(integrationItems)
+              .values(
+                addedIntegrationRelations.map((relation) => ({
+                  itemId: relation.itemId,
+                  integrationId: relation.integrationId,
+                })),
+              )
+              .run();
+          }
+
+          const updatedItems = filterUpdatedItems(input.items, dbBoard.items);
+
+          for (const item of updatedItems) {
+            transaction
+              .update(items)
+              .set({
+                kind: item.kind,
+                options: superjson.stringify(item.options),
+                advancedOptions: superjson.stringify(item.advancedOptions),
+              })
+              .where(eq(items.id, item.id))
+              .run();
+
+            for (const itemSectionLayout of item.layouts) {
+              transaction
+                .update(itemLayouts)
+                .set({
+                  height: itemSectionLayout.height,
+                  width: itemSectionLayout.width,
+                  xOffset: itemSectionLayout.xOffset,
+                  yOffset: itemSectionLayout.yOffset,
+                  sectionId: itemSectionLayout.sectionId,
+                })
+                .where(and(eq(itemLayouts.itemId, item.id), eq(itemLayouts.layoutId, itemSectionLayout.layoutId)))
+                .run();
+            }
+          }
+
+          const updatedSections = filterUpdatedItems(input.sections, dbBoard.sections);
+
+          for (const section of updatedSections) {
+            const prev = dbBoard.sections.find((dbSection) => dbSection.id === section.id);
+            transaction
+              .update(sections)
+              .set({
+                yOffset: prev?.kind !== "dynamic" && "yOffset" in section ? section.yOffset : null,
+                xOffset: prev?.kind !== "dynamic" && "yOffset" in section ? 0 : null,
+                options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
+                name: prev?.kind === "category" && "name" in section ? section.name : null,
+              })
+              .where(eq(sections.id, section.id))
+              .run();
+
+            if (section.kind !== "dynamic") continue;
+
+            for (const sectionLayout of section.layouts) {
+              transaction
+                .update(sectionLayouts)
+                .set({
+                  height: sectionLayout.height,
+                  width: sectionLayout.width,
+                  xOffset: sectionLayout.xOffset,
+                  yOffset: sectionLayout.yOffset,
+                  parentSectionId: sectionLayout.parentSectionId,
+                })
+                .where(
+                  and(eq(sectionLayouts.sectionId, section.id), eq(sectionLayouts.layoutId, sectionLayout.layoutId)),
+                )
+                .run();
+            }
+          }
+
+          const removedIntegrationRelations = dbIntegrationRelations.filter(
+            (dbRelation) =>
+              !inputIntegrationRelations.some(
+                (inputRelation) =>
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
+              ),
+          );
+
+          for (const relation of removedIntegrationRelations) {
+            transaction
+              .delete(integrationItems)
+              .where(
+                and(
+                  eq(integrationItems.itemId, relation.itemId),
+                  eq(integrationItems.integrationId, relation.integrationId),
+                ),
+              )
+              .run();
+          }
+
+          const removedItems = filterRemovedItems(input.items, dbBoard.items);
+
+          const itemIds = removedItems.map((item) => item.id);
+          if (itemIds.length > 0) {
+            transaction.delete(items).where(inArray(items.id, itemIds)).run();
+          }
+
+          const removedSections = filterRemovedItems(input.sections, dbBoard.sections);
+          const sectionIds = removedSections.map((section) => section.id);
+
+          if (sectionIds.length > 0) {
+            transaction.delete(sections).where(inArray(sections.id, sectionIds)).run();
+          }
+        });
+      },
+    });
   }),
   getBoardPermissions: protectedProcedure.input(byIdSchema).query(async ({ input, ctx }) => {
     await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.id), "full");
@@ -925,7 +1195,6 @@ export const boardRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
       },
@@ -971,12 +1240,14 @@ export const boardRouter = createTRPCRouter({
   saveUserBoardPermissions: protectedProcedure.input(boardSavePermissionsSchema).mutation(async ({ input, ctx }) => {
     await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.entityId), "full");
 
-    await ctx.db.transaction(async (transaction) => {
+    await handleTransactionsAsync(ctx.db, {
-      await transaction.delete(boardUserPermissions).where(eq(boardUserPermissions.boardId, input.entityId));
+      async handleAsync(db, schema) {
+        await db.transaction(async (transaction) => {
+          await transaction.delete(schema.boardUserPermissions).where(eq(boardUserPermissions.boardId, input.entityId));
           if (input.permissions.length === 0) {
             return;
           }
-      await transaction.insert(boardUserPermissions).values(
+          await transaction.insert(schema.boardUserPermissions).values(
             input.permissions.map((permission) => ({
               userId: permission.principalId,
               permission: permission.permission,
@@ -984,16 +1255,40 @@ export const boardRouter = createTRPCRouter({
             })),
           );
         });
+      },
+      handleSync(db) {
+        db.transaction((transaction) => {
+          transaction.delete(boardUserPermissions).where(eq(boardUserPermissions.boardId, input.entityId)).run();
+          if (input.permissions.length === 0) {
+            return;
+          }
+          transaction
+            .insert(boardUserPermissions)
+            .values(
+              input.permissions.map((permission) => ({
+                userId: permission.principalId,
+                permission: permission.permission,
+                boardId: input.entityId,
+              })),
+            )
+            .run();
+        });
+      },
+    });
   }),
   saveGroupBoardPermissions: protectedProcedure.input(boardSavePermissionsSchema).mutation(async ({ input, ctx }) => {
     await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.entityId), "full");
 
-    await ctx.db.transaction(async (transaction) => {
+    await handleTransactionsAsync(ctx.db, {
-      await transaction.delete(boardGroupPermissions).where(eq(boardGroupPermissions.boardId, input.entityId));
+      async handleAsync(db, schema) {
+        await db.transaction(async (transaction) => {
+          await transaction
+            .delete(schema.boardGroupPermissions)
+            .where(eq(boardGroupPermissions.boardId, input.entityId));
           if (input.permissions.length === 0) {
             return;
           }
-      await transaction.insert(boardGroupPermissions).values(
+          await transaction.insert(schema.boardGroupPermissions).values(
             input.permissions.map((permission) => ({
               groupId: permission.principalId,
               permission: permission.permission,
@@ -1001,6 +1296,26 @@ export const boardRouter = createTRPCRouter({
             })),
           );
         });
+      },
+      handleSync(db) {
+        db.transaction((transaction) => {
+          transaction.delete(boardGroupPermissions).where(eq(boardGroupPermissions.boardId, input.entityId)).run();
+          if (input.permissions.length === 0) {
+            return;
+          }
+          transaction
+            .insert(boardGroupPermissions)
+            .values(
+              input.permissions.map((permission) => ({
+                groupId: permission.principalId,
+                permission: permission.permission,
+                boardId: input.entityId,
+              })),
+            )
+            .run();
+        });
+      },
+    });
   }),
   importOldmarrConfig: permissionRequiredProcedure
     .requiresPermission("board-create")
@@ -1222,7 +1537,6 @@ const getFullBoardWithWhereAsync = async (db: Database, where: SQL<unknown>, use
           id: true,
           name: true,
           image: true,
-          email: true,
         },
       },
       sections: {

packages/api/src/router/board/board-access.ts

@@ -17,6 +17,7 @@ export const throwIfActionForbiddenAsync = async (
   ctx: { db: Database; session: Session | null },
   boardWhere: SQL<unknown>,
   permission: BoardPermission,
+  error?: TRPCError,
 ) => {
   const { db, session } = ctx;
   const groupsOfCurrentUser = await db.query.groupMembers.findMany({
@@ -40,7 +41,7 @@ export const throwIfActionForbiddenAsync = async (
   });
 
   if (!board) {
-    notAllowed();
+    notAllowed(error);
   }
 
   const { hasViewAccess, hasChangeAccess, hasFullAccess } = constructBoardPermissions(board, session);
@@ -57,14 +58,18 @@ export const throwIfActionForbiddenAsync = async (
     return; // As view access is required and user has view access, allow
   }
 
-  notAllowed();
+  notAllowed(error);
 };
 
 /**
  * This method returns NOT_FOUND to prevent snooping on board existence
  * A function is used to use the method without return statement
  */
-function notAllowed(): never {
+function notAllowed(error?: TRPCError): never {
+  if (error) {
+    throw error;
+  }
+
   throw new TRPCError({
     code: "NOT_FOUND",
     message: "Board not found",

packages/api/src/router/certificates/certificate-router.ts

@@ -91,7 +91,7 @@ export const certificateRouter = createTRPCRouter({
         hostname: input.hostname,
         thumbprint: input.thumbprint,
       });
-      await ctx.db
+      const dbResult = await ctx.db
         .delete(trustedCertificateHostnames)
         .where(
           and(
@@ -103,6 +103,7 @@ export const certificateRouter = createTRPCRouter({
       logger.info("Removed trusted hostname", {
         hostname: input.hostname,
         thumbprint: input.thumbprint,
+        count: dbResult.changes,
       });
     }),
   removeCertificate: permissionRequiredProcedure

packages/api/src/router/group.ts

@@ -3,10 +3,11 @@ import { z } from "zod/v4";
 
 import { createId } from "@homarr/common";
 import type { Database } from "@homarr/db";
-import { and, eq, like, not } from "@homarr/db";
+import { and, eq, handleTransactionsAsync, like, not } from "@homarr/db";
 import { getMaxGroupPositionAsync } from "@homarr/db/queries";
 import { groupMembers, groupPermissions, groups } from "@homarr/db/schema";
-import { everyoneGroup } from "@homarr/definitions";
+import { selectGroupSchema, selectUserSchema } from "@homarr/db/validationSchemas";
+import { everyoneGroup, groupPermissionKeys } from "@homarr/definitions";
 import { byIdSchema, paginatedSchema } from "@homarr/validation/common";
 import {
   groupCreateSchema,
@@ -22,7 +23,20 @@ import { throwIfCredentialsDisabled } from "./invite/checks";
 import { nextOnboardingStepAsync } from "./onboard/onboard-queries";
 
 export const groupRouter = createTRPCRouter({
-  getAll: permissionRequiredProcedure.requiresPermission("admin").query(async ({ ctx }) => {
+  getAll: permissionRequiredProcedure
+    .requiresPermission("admin")
+    .input(z.void())
+    .output(
+      z.array(
+        selectGroupSchema.and(
+          z.object({ members: z.array(selectUserSchema.pick({ id: true, name: true, email: true, image: true })) }),
+        ),
+      ),
+    )
+    .meta({
+      openapi: { method: "GET", path: "/api/groups", tags: ["groups"], protect: true, summary: "Retrieve all groups" },
+    })
+    .query(async ({ ctx }) => {
       const dbGroups = await ctx.db.query.groups.findMany({
         with: {
           members: {
@@ -49,6 +63,25 @@ export const groupRouter = createTRPCRouter({
   getPaginated: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(paginatedSchema)
+    .output(
+      z.object({
+        items: z.array(
+          selectGroupSchema.and(
+            z.object({ members: z.array(selectUserSchema.pick({ id: true, name: true, email: true, image: true })) }),
+          ),
+        ),
+        totalCount: z.number(),
+      }),
+    )
+    .meta({
+      openapi: {
+        method: "GET",
+        path: "/api/groups/paginated",
+        tags: ["groups"],
+        protect: true,
+        summary: "Retrieve groups with pagination",
+      },
+    })
     .query(async ({ input, ctx }) => {
       const whereQuery = input.search ? like(groups.name, `%${input.search.trim()}%`) : undefined;
       const groupCount = await ctx.db.$count(groups, whereQuery);
@@ -84,6 +117,24 @@ export const groupRouter = createTRPCRouter({
   getById: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(byIdSchema)
+    .output(
+      selectGroupSchema.and(
+        z.object({
+          owner: selectUserSchema.pick({ id: true, name: true, image: true, email: true }).nullable(),
+          members: z.array(selectUserSchema.pick({ id: true, name: true, email: true, image: true, provider: true })),
+          permissions: z.array(z.enum(groupPermissionKeys)),
+        }),
+      ),
+    )
+    .meta({
+      openapi: {
+        method: "GET",
+        path: "/api/groups/{id}",
+        tags: ["groups"],
+        protect: true,
+        summary: "Retrieve group details",
+      },
+    })
     .query(async ({ input, ctx }) => {
       const group = await ctx.db.query.groups.findFirst({
         where: eq(groups.id, input.id),
@@ -201,6 +252,10 @@ export const groupRouter = createTRPCRouter({
   createGroup: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(groupCreateSchema)
+    .output(z.string())
+    .meta({
+      openapi: { method: "POST", path: "/api/groups", tags: ["groups"], protect: true, summary: "Create group" },
+    })
     .mutation(async ({ input, ctx }) => {
       await checkSimilarNameAndThrowAsync(ctx.db, input.name);
 
@@ -219,6 +274,10 @@ export const groupRouter = createTRPCRouter({
   updateGroup: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(groupUpdateSchema)
+    .output(z.void())
+    .meta({
+      openapi: { method: "PUT", path: "/api/groups/{id}", tags: ["groups"], protect: true, summary: "Update group" },
+    })
     .mutation(async ({ input, ctx }) => {
       await throwIfGroupNotFoundAsync(ctx.db, input.id);
       await throwIfGroupNameIsReservedAsync(ctx.db, input.id);
@@ -252,11 +311,22 @@ export const groupRouter = createTRPCRouter({
     .mutation(async ({ input, ctx }) => {
       const positions = input.positions.map((id, index) => ({ id, position: index + 1 }));
 
-      await ctx.db.transaction(async (trx) => {
+      await handleTransactionsAsync(ctx.db, {
+        handleAsync: async (db, schema) => {
+          await db.transaction(async (trx) => {
             for (const { id, position } of positions) {
-          await trx.update(groups).set({ position }).where(eq(groups.id, id));
+              await trx.update(schema.groups).set({ position }).where(eq(groups.id, id));
             }
           });
+        },
+        handleSync: (db) => {
+          db.transaction((trx) => {
+            for (const { id, position } of positions) {
+              trx.update(groups).set({ position }).where(eq(groups.id, id)).run();
+            }
+          });
+        },
+      });
     }),
   savePermissions: permissionRequiredProcedure
     .requiresPermission("admin")
@@ -292,6 +362,10 @@ export const groupRouter = createTRPCRouter({
   deleteGroup: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(byIdSchema)
+    .output(z.void())
+    .meta({
+      openapi: { method: "DELETE", path: "/api/groups/{id}", tags: ["groups"], protect: true, summary: "Delete group" },
+    })
     .mutation(async ({ input, ctx }) => {
       await throwIfGroupNotFoundAsync(ctx.db, input.id);
       await throwIfGroupNameIsReservedAsync(ctx.db, input.id);
@@ -301,6 +375,16 @@ export const groupRouter = createTRPCRouter({
   addMember: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(groupUserSchema)
+    .output(z.void())
+    .meta({
+      openapi: {
+        method: "POST",
+        path: "/api/groups/{groupId}/members/{userId}",
+        tags: ["groups"],
+        protect: true,
+        summary: "Add member to group",
+      },
+    })
     .mutation(async ({ input, ctx }) => {
       await throwIfGroupNotFoundAsync(ctx.db, input.groupId);
       await throwIfGroupNameIsReservedAsync(ctx.db, input.groupId);
@@ -317,6 +401,8 @@ export const groupRouter = createTRPCRouter({
         });
       }
 
+      // TODO: Create another pr to only allow adding users with provider=credentials
+
       await ctx.db.insert(groupMembers).values({
         groupId: input.groupId,
         userId: input.userId,
@@ -325,6 +411,16 @@ export const groupRouter = createTRPCRouter({
   removeMember: permissionRequiredProcedure
     .requiresPermission("admin")
     .input(groupUserSchema)
+    .output(z.void())
+    .meta({
+      openapi: {
+        method: "DELETE",
+        path: "/api/groups/{groupId}/members/{userId}",
+        tags: ["groups"],
+        protect: true,
+        summary: "Remove member from group",
+      },
+    })
     .mutation(async ({ input, ctx }) => {
       await throwIfGroupNotFoundAsync(ctx.db, input.groupId);
       await throwIfGroupNameIsReservedAsync(ctx.db, input.groupId);

packages/api/src/router/integration/integration-router.ts

@@ -5,7 +5,7 @@ import { createId, objectEntries } from "@homarr/common";
 import { decryptSecret, encryptSecret } from "@homarr/common/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import type { Database } from "@homarr/db";
-import { and, asc, eq, inArray, like, or } from "@homarr/db";
+import { and, asc, eq, handleTransactionsAsync, inArray, like, or } from "@homarr/db";
 import {
   apps,
   groupMembers,
@@ -476,7 +476,6 @@ export const integrationRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
       },
@@ -524,14 +523,16 @@ export const integrationRouter = createTRPCRouter({
     .mutation(async ({ input, ctx }) => {
       await throwIfActionForbiddenAsync(ctx, eq(integrations.id, input.entityId), "full");
 
+      await handleTransactionsAsync(ctx.db, {
+        async handleAsync(db, schema) {
           await ctx.db.transaction(async (transaction) => {
             await transaction
-          .delete(integrationUserPermissions)
+              .delete(schema.integrationUserPermissions)
-          .where(eq(integrationUserPermissions.integrationId, input.entityId));
+              .where(eq(schema.integrationUserPermissions.integrationId, input.entityId));
             if (input.permissions.length === 0) {
               return;
             }
-        await transaction.insert(integrationUserPermissions).values(
+            await transaction.insert(schema.integrationUserPermissions).values(
               input.permissions.map((permission) => ({
                 userId: permission.principalId,
                 permission: permission.permission,
@@ -539,20 +540,45 @@ export const integrationRouter = createTRPCRouter({
               })),
             );
           });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .delete(integrationUserPermissions)
+              .where(eq(integrationUserPermissions.integrationId, input.entityId))
+              .run();
+            if (input.permissions.length === 0) {
+              return;
+            }
+            transaction
+              .insert(integrationUserPermissions)
+              .values(
+                input.permissions.map((permission) => ({
+                  userId: permission.principalId,
+                  permission: permission.permission,
+                  integrationId: input.entityId,
+                })),
+              )
+              .run();
+          });
+        },
+      });
     }),
   saveGroupIntegrationPermissions: protectedProcedure
     .input(integrationSavePermissionsSchema)
     .mutation(async ({ input, ctx }) => {
       await throwIfActionForbiddenAsync(ctx, eq(integrations.id, input.entityId), "full");
 
-      await ctx.db.transaction(async (transaction) => {
+      await handleTransactionsAsync(ctx.db, {
+        async handleAsync(db, schema) {
+          await db.transaction(async (transaction) => {
             await transaction
-          .delete(integrationGroupPermissions)
+              .delete(schema.integrationGroupPermissions)
-          .where(eq(integrationGroupPermissions.integrationId, input.entityId));
+              .where(eq(schema.integrationGroupPermissions.integrationId, input.entityId));
             if (input.permissions.length === 0) {
               return;
             }
-        await transaction.insert(integrationGroupPermissions).values(
+            await transaction.insert(schema.integrationGroupPermissions).values(
               input.permissions.map((permission) => ({
                 groupId: permission.principalId,
                 permission: permission.permission,
@@ -560,6 +586,29 @@ export const integrationRouter = createTRPCRouter({
               })),
             );
           });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .delete(integrationGroupPermissions)
+              .where(eq(integrationGroupPermissions.integrationId, input.entityId))
+              .run();
+            if (input.permissions.length === 0) {
+              return;
+            }
+            transaction
+              .insert(integrationGroupPermissions)
+              .values(
+                input.permissions.map((permission) => ({
+                  groupId: permission.principalId,
+                  permission: permission.permission,
+                  integrationId: input.entityId,
+                })),
+              )
+              .run();
+          });
+        },
+      });
     }),
   searchInIntegration: protectedProcedure
     .concat(createOneIntegrationMiddleware("query", ...getIntegrationKindsByCategory("search")))

packages/api/src/router/item/item-router.ts

@@ -0,0 +1,366 @@
+import { TRPCError } from "@trpc/server";
+import SuperJSON from "superjson";
+import z from "zod";
+
+import { createId, objectEntries } from "@homarr/common";
+import type { InferInsertModel } from "@homarr/db";
+import { and, eq, handleTransactionsAsync } from "@homarr/db";
+import { createDbInsertCollectionWithoutTransaction } from "@homarr/db/collection";
+import { boards, itemLayouts, items } from "@homarr/db/schema";
+import { selectItemLayoutSchema, selectitemSchema } from "@homarr/db/validationSchemas";
+import type { WidgetKind } from "@homarr/definitions";
+import { widgetKinds } from "@homarr/definitions";
+import { byIdSchema } from "@homarr/validation/common";
+import { zodEnumFromArray } from "@homarr/validation/enums";
+import { itemAdvancedOptionsSchema } from "@homarr/validation/shared";
+
+import { reduceWidgetOptionsWithDefaultValues, widgetImports } from "../../../../widgets/src";
+import type { WidgetOptionDefinition } from "../../../../widgets/src/options";
+import { convertIntersectionToZodObject } from "../../schema-merger";
+import { createTRPCRouter, protectedProcedure } from "../../trpc";
+import { throwIfActionForbiddenAsync } from "../board/board-access";
+
+const createItemOptionsSchema = (kind: WidgetKind): z.ZodObject =>
+  z.object(
+    objectEntries(
+      widgetImports[kind].definition.createOptions({
+        enableStatusByDefault: true,
+        firstDayOfWeek: 1,
+        forceDisableStatus: false,
+      }),
+    ).reduce(
+      (previous, [key, value]: [string, WidgetOptionDefinition]) => {
+        previous[key] = value.validate;
+        return previous;
+      },
+      {} as Record<string, z.ZodType>,
+    ),
+  );
+
+const outputItemSchema = z.union([
+  ...widgetKinds.map((kind) =>
+    z
+      .object({
+        kind: z.literal(kind),
+        options: createItemOptionsSchema(kind),
+        advancedOptions: itemAdvancedOptionsSchema,
+        layouts: z.array(selectItemLayoutSchema.omit({ itemId: true })),
+      })
+      .and(
+        selectitemSchema.pick({
+          id: true,
+          boardId: true,
+        }),
+      ),
+  ),
+]);
+
+const manageItemSchema = z.object({
+  boardId: z.string(),
+  kind: zodEnumFromArray(widgetKinds),
+  options: z.record(z.string(), z.unknown().optional()),
+  advancedOptions: itemAdvancedOptionsSchema,
+  layouts: z.array(selectItemLayoutSchema.omit({ itemId: true })),
+});
+
+export const itemsRouter = createTRPCRouter({
+  getAll: protectedProcedure
+    .input(
+      z.object({
+        boardId: z.string(),
+      }),
+    )
+    .output(z.array(outputItemSchema))
+    .meta({
+      openapi: {
+        method: "GET",
+        path: "/api/boards/{boardId}/items",
+        tags: ["items"],
+        protect: true,
+        summary: "Retrieve all items for board",
+      },
+    })
+    .query(async ({ ctx, input }) => {
+      const board = await ctx.db.query.boards.findFirst({
+        where: (fields, { eq }) => eq(fields.id, input.boardId),
+        with: {
+          items: {
+            with: {
+              layouts: true,
+            },
+          },
+        },
+      });
+
+      const error = new TRPCError({
+        code: "NOT_FOUND",
+        message: "Board not found",
+      });
+
+      if (!board) throw error;
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.boardId), "view", error);
+
+      return board.items.map((item) => ({
+        ...item,
+        options: reduceWidgetOptionsWithDefaultValues(
+          item.kind,
+          {
+            enableStatusByDefault: true,
+            firstDayOfWeek: 1,
+            forceDisableStatus: false,
+          },
+          SuperJSON.parse(item.options),
+        ),
+        advancedOptions: itemAdvancedOptionsSchema.parse(SuperJSON.parse(item.advancedOptions)),
+        layouts: item.layouts.map(({ itemId: _, ...layout }) => layout),
+      }));
+    }),
+  createItem: protectedProcedure
+    .input(manageItemSchema)
+    .output(outputItemSchema)
+    .meta({
+      openapi: {
+        method: "POST",
+        path: "/api/items",
+        tags: ["items"],
+        protect: true,
+        summary: "Create item on board",
+        description: "Options available can be viewed in response options object. Input options are optional",
+      },
+    })
+    .mutation(async ({ ctx, input }) => {
+      const board = await ctx.db.query.boards.findFirst({
+        where: (fields, { eq }) => eq(fields.id, input.boardId),
+      });
+
+      const error = new TRPCError({
+        code: "NOT_FOUND",
+        message: "Board not found",
+      });
+
+      if (!board) throw error;
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, board.id), "modify", error);
+
+      const itemOptionsSchema = createItemOptionsSchema(input.kind);
+      const fullOptions = reduceWidgetOptionsWithDefaultValues(
+        input.kind,
+        { enableStatusByDefault: true, firstDayOfWeek: 1, forceDisableStatus: false },
+        input.options,
+      );
+      const result = await itemOptionsSchema.safeParseAsync(fullOptions);
+      if (!result.success) {
+        throw new TRPCError({
+          code: "BAD_REQUEST",
+          message: "Failed to parse item options",
+          cause: result.error,
+        });
+      }
+
+      const item = {
+        id: createId(),
+        boardId: input.boardId,
+        kind: input.kind,
+        advancedOptions: input.advancedOptions,
+        options: result.data,
+      };
+
+      const itemInsert: InferInsertModel<typeof items> = {
+        ...item,
+        advancedOptions: SuperJSON.stringify(item.advancedOptions),
+        options: SuperJSON.stringify(item.options),
+      };
+      const layoutInserts: InferInsertModel<typeof itemLayouts>[] = input.layouts.map((layout) => ({
+        ...layout,
+        itemId: item.id,
+      }));
+
+      const insertCollection = createDbInsertCollectionWithoutTransaction(["items", "itemLayouts"]);
+      insertCollection.items.push(itemInsert);
+      insertCollection.itemLayouts.push(...layoutInserts);
+      await insertCollection.insertAllAsync(ctx.db);
+
+      return {
+        ...item,
+        layouts: layoutInserts,
+      };
+    }),
+  getItem: protectedProcedure
+    .input(byIdSchema)
+    .output(outputItemSchema)
+    .meta({
+      openapi: {
+        method: "GET",
+        path: "/api/items/{id}",
+        tags: ["items"],
+        protect: true,
+        summary: "Retrieve item from a board",
+      },
+    })
+    .query(async ({ ctx, input }) => {
+      const item = await ctx.db.query.items.findFirst({
+        where: (fields, { eq }) => eq(fields.id, input.id),
+        with: {
+          layouts: true,
+        },
+      });
+
+      const error = new TRPCError({
+        code: "NOT_FOUND",
+        message: "Item not found",
+      });
+
+      if (!item) throw error;
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, item.boardId), "view", error);
+
+      return {
+        ...item,
+        options: reduceWidgetOptionsWithDefaultValues(
+          item.kind,
+          {
+            enableStatusByDefault: true,
+            firstDayOfWeek: 1,
+            forceDisableStatus: false,
+          },
+          SuperJSON.parse(item.options),
+        ),
+        advancedOptions: itemAdvancedOptionsSchema.parse(SuperJSON.parse(item.advancedOptions)),
+        layouts: item.layouts.map(({ itemId: _, ...layout }) => layout),
+      };
+    }),
+  updateItem: protectedProcedure
+    .input(convertIntersectionToZodObject(manageItemSchema.omit({ boardId: true, kind: true }).and(byIdSchema)))
+    .output(outputItemSchema)
+    .meta({
+      openapi: {
+        method: "PUT",
+        path: "/api/items/{id}",
+        tags: ["items"],
+        protect: true,
+        summary: "Update an item on the board",
+      },
+    })
+    .mutation(async ({ ctx, input }) => {
+      const item = await ctx.db.query.items.findFirst({
+        where: (fields, { eq }) => eq(fields.id, input.id),
+        with: {
+          layouts: true,
+        },
+      });
+
+      const error = new TRPCError({
+        code: "NOT_FOUND",
+        message: "Item not found",
+      });
+      if (!item) throw error;
+
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, item.boardId), "modify", error);
+
+      const previousOptions = SuperJSON.parse<Record<string, unknown>>(item.options);
+      const combinedOptions = {
+        ...previousOptions,
+        ...input.options,
+      };
+      const itemOptionsSchema = createItemOptionsSchema(item.kind);
+      const fullOptions = reduceWidgetOptionsWithDefaultValues(
+        item.kind,
+        { enableStatusByDefault: true, firstDayOfWeek: 1, forceDisableStatus: false },
+        combinedOptions,
+      );
+      const optionsResult = await itemOptionsSchema.safeParseAsync(fullOptions);
+      if (!optionsResult.success) {
+        throw new TRPCError({
+          code: "BAD_REQUEST",
+          message: "Failed to parse item options",
+          cause: optionsResult.error,
+        });
+      }
+
+      await handleTransactionsAsync(ctx.db, {
+        async handleAsync(db, schema) {
+          await db.transaction(async (transaction) => {
+            await transaction
+              .update(schema.items)
+              .set({
+                advancedOptions: SuperJSON.stringify(input.advancedOptions),
+                options: SuperJSON.stringify(optionsResult),
+              })
+              .where(eq(schema.items.id, input.id));
+
+            for (const itemLayout of input.layouts) {
+              await transaction
+                .update(schema.itemLayouts)
+                .set({
+                  height: itemLayout.height,
+                  width: itemLayout.width,
+                  sectionId: itemLayout.sectionId,
+                  xOffset: itemLayout.xOffset,
+                  yOffset: itemLayout.yOffset,
+                })
+                .where(
+                  and(eq(schema.itemLayouts.itemId, input.id), eq(schema.itemLayouts.layoutId, itemLayout.layoutId)),
+                );
+            }
+          });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .update(items)
+              .set({
+                advancedOptions: SuperJSON.stringify(input.advancedOptions),
+                options: SuperJSON.stringify(optionsResult),
+              })
+              .where(eq(items.id, input.id));
+
+            for (const itemLayout of input.layouts) {
+              transaction
+                .update(itemLayouts)
+                .set({
+                  height: itemLayout.height,
+                  width: itemLayout.width,
+                  sectionId: itemLayout.sectionId,
+                  xOffset: itemLayout.xOffset,
+                  yOffset: itemLayout.yOffset,
+                })
+                .where(and(eq(itemLayouts.itemId, input.id), eq(itemLayouts.layoutId, itemLayout.layoutId)));
+            }
+          });
+        },
+      });
+
+      return {
+        id: input.id,
+        kind: item.kind,
+        boardId: item.boardId,
+        advancedOptions: input.advancedOptions,
+        options: optionsResult,
+        layouts: input.layouts,
+      };
+    }),
+  deleteItem: protectedProcedure
+    .input(byIdSchema)
+    .output(z.void())
+    .meta({
+      openapi: {
+        method: "DELETE",
+        path: "/api/items/{id}",
+        tags: ["items"],
+        protect: true,
+        summary: "Delete an item from board",
+      },
+    })
+    .mutation(async ({ ctx, input }) => {
+      const item = await ctx.db.query.items.findFirst({
+        where: (fields, { eq }) => eq(fields.id, input.id),
+      });
+      const error = new TRPCError({
+        code: "NOT_FOUND",
+        message: "Item not found",
+      });
+      if (!item) throw error;
+
+      await throwIfActionForbiddenAsync(ctx, eq(boards.id, item.boardId), "modify", error);
+
+      await ctx.db.delete(items).where(eq(items.id, input.id));
+    }),
+});

packages/api/src/router/location.ts

@@ -1,7 +1,6 @@
 import { z } from "zod/v4";
 
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+import { fetchWithTimeoutAsync } from "@homarr/core/infrastructure/http/timeout";
-import { withTimeoutAsync } from "@homarr/core/infrastructure/http/timeout";
 
 import { createTRPCRouter, publicProcedure } from "../trpc";
 
@@ -37,12 +36,7 @@ export const locationRouter = createTRPCRouter({
     .input(locationSearchCityInput)
     .output(locationSearchCityOutput)
     .query(async ({ input }) => {
-      const res = await withTimeoutAsync(async (signal) => {
+      const res = await fetchWithTimeoutAsync(`https://geocoding-api.open-meteo.com/v1/search?name=${input.query}`);
-        return await fetchWithTrustedCertificatesAsync(
-          `https://geocoding-api.open-meteo.com/v1/search?name=${input.query}`,
-          { signal },
-        );
-      });
       return (await res.json()) as z.infer<typeof locationSearchCityOutput>;
     }),
 });

packages/api/src/router/medias/media-router.ts

@@ -39,7 +39,6 @@ export const mediaRouter = createTRPCRouter({
               id: true,
               name: true,
               image: true,
-              email: true,
             },
           },
         },

packages/api/src/router/test/app.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { apps } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey } from "@homarr/definitions";
 
 import { appRouter } from "../app";
@@ -21,7 +21,7 @@ const createDefaultSession = (permissions: GroupPermissionKey[] = []): Session =
 describe("all should return all apps", () => {
   test("should return all apps with session", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -55,7 +55,7 @@ describe("all should return all apps", () => {
   test("should throw UNAUTHORIZED if the user is not authenticated", async () => {
     // Arrange
     const caller = appRouter.createCaller({
-      db: await createDbAsync(),
+      db: createDb(),
       deviceType: undefined,
       session: null,
     });
@@ -71,7 +71,7 @@ describe("all should return all apps", () => {
 describe("byId should return an app by id", () => {
   test("should return an app by id when canUserSeeAppAsync returns true", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -103,7 +103,7 @@ describe("byId should return an app by id", () => {
 
   test("should throw NOT_FOUND error when canUserSeeAppAsync returns false", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -129,7 +129,7 @@ describe("byId should return an app by id", () => {
 
   test("should throw an error if the app does not exist", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -147,7 +147,7 @@ describe("byId should return an app by id", () => {
 describe("create should create a new app with all arguments", () => {
   test("should create a new app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -176,7 +176,7 @@ describe("create should create a new app with all arguments", () => {
 
   test("should create a new app only with required arguments", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -207,7 +207,7 @@ describe("create should create a new app with all arguments", () => {
 describe("update should update an app", () => {
   test("should update an app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -247,7 +247,7 @@ describe("update should update an app", () => {
 
   test("should throw an error if the app does not exist", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -273,7 +273,7 @@ describe("update should update an app", () => {
 describe("delete should delete an app", () => {
   test("should delete an app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/board.spec.ts

@@ -22,7 +22,7 @@ import {
   serverSettings,
   users,
 } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { BoardPermission, GroupPermissionKey } from "@homarr/definitions";
 
 import type { RouterOutputs } from "../..";
@@ -55,7 +55,7 @@ const createRandomUserAsync = async (db: Database) => {
 describe("getAllBoards should return all boards accessable to the current user", () => {
   test("without session it should return only public boards", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: null });
 
     const user1 = await createRandomUserAsync(db);
@@ -86,7 +86,7 @@ describe("getAllBoards should return all boards accessable to the current user",
 
   test("with session containing board-view-all permission it should return all boards", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({
       db,
       deviceType: undefined,
@@ -128,7 +128,7 @@ describe("getAllBoards should return all boards accessable to the current user",
 
   test("with session user beeing creator it should return all private boards of them", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const user1 = await createRandomUserAsync(db);
@@ -170,7 +170,7 @@ describe("getAllBoards should return all boards accessable to the current user",
     "with %s group board permission it should show board",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({
         db,
         deviceType: undefined,
@@ -236,7 +236,7 @@ describe("getAllBoards should return all boards accessable to the current user",
     "with %s user board permission it should show board",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({
         db,
         deviceType: undefined,
@@ -290,7 +290,7 @@ describe("getAllBoards should return all boards accessable to the current user",
 describe("createBoard should create a new board", () => {
   test("should create a new board with permission board-create", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = {
       ...defaultSession,
       user: {
@@ -333,7 +333,7 @@ describe("createBoard should create a new board", () => {
 
   test("should throw error when user has no board-create permission", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -347,7 +347,7 @@ describe("createBoard should create a new board", () => {
 describe("rename board should rename board", () => {
   test("should rename board", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -375,7 +375,7 @@ describe("rename board should rename board", () => {
 
   test("should throw error when similar board name exists", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     await db.insert(users).values({
@@ -402,7 +402,7 @@ describe("rename board should rename board", () => {
 
   test("should throw error when board not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -418,7 +418,7 @@ describe("changeBoardVisibility should change board visibility", () => {
     "should change board visibility to %s",
     async (visibility) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -453,7 +453,7 @@ describe("changeBoardVisibility should change board visibility", () => {
 describe("deleteBoard should delete board", () => {
   test("should delete board", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -480,7 +480,7 @@ describe("deleteBoard should delete board", () => {
 
   test("should throw error when board not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -495,7 +495,7 @@ describe("getHomeBoard should return home board", () => {
   test("should return user home board when user has one", async () => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const fullBoardProps = await createFullBoardAsync(db, "home");
@@ -519,7 +519,7 @@ describe("getHomeBoard should return home board", () => {
   test("should return global home board when user doesn't have one", async () => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const fullBoardProps = await createFullBoardAsync(db, "home");
@@ -540,7 +540,7 @@ describe("getHomeBoard should return home board", () => {
   });
   test("should throw error when home board not configured in serverSettings", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     await createFullBoardAsync(db, "home");
 
@@ -556,7 +556,7 @@ describe("getBoardByName should return board by name", () => {
   it.each([["default"], ["something"]])("should return board by name %s when present", async (name) => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const fullBoardProps = await createFullBoardAsync(db, name);
@@ -574,7 +574,7 @@ describe("getBoardByName should return board by name", () => {
 
   it("should throw error when not present", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     await createFullBoardAsync(db, "default");
 
@@ -590,7 +590,7 @@ describe("savePartialBoardSettings should save general settings", () => {
   it("should save general settings", async () => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const newPageTitle = "newPageTitle";
@@ -647,7 +647,7 @@ describe("savePartialBoardSettings should save general settings", () => {
   });
 
   it("should throw error when board not found", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const actAsync = async () =>
@@ -666,7 +666,7 @@ describe("savePartialBoardSettings should save general settings", () => {
 describe("saveBoard should save full board", () => {
   it("should remove section when not present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, sectionId } = await createFullBoardAsync(db, "default");
@@ -703,7 +703,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should remove item when not present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, itemId, sectionId, layoutId } = await createFullBoardAsync(db, "default");
@@ -760,7 +760,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should remove integration reference when not present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const anotherIntegration = {
       id: createId(),
@@ -832,7 +832,7 @@ describe("saveBoard should save full board", () => {
     "should add section when present in input",
     async (partialSection) => {
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
       const { boardId, sectionId } = await createFullBoardAsync(db, "default");
@@ -884,7 +884,7 @@ describe("saveBoard should save full board", () => {
   );
   it("should add item when present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, sectionId, layoutId } = await createFullBoardAsync(db, "default");
@@ -956,7 +956,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should add integration reference when present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const integration = {
       id: createId(),
@@ -1024,7 +1024,7 @@ describe("saveBoard should save full board", () => {
     expect(spy).toHaveBeenCalledWith(expect.anything(), expect.anything(), "modify");
   });
   it("should update section when present in input", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, sectionId } = await createFullBoardAsync(db, "default");
@@ -1083,7 +1083,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should update item when present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, itemId, sectionId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1147,7 +1147,7 @@ describe("saveBoard should save full board", () => {
     expect(spy).toHaveBeenCalledWith(expect.anything(), expect.anything(), "modify");
   });
   it("should fail when board not found", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const actAsync = async () =>
@@ -1164,7 +1164,7 @@ describe("saveBoard should save full board", () => {
 describe("getBoardPermissions should return board permissions", () => {
   test("should return board permissions", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -1220,11 +1220,11 @@ describe("getBoardPermissions should return board permissions", () => {
     expect(result.users).toEqual(
       expect.arrayContaining([
         {
-          user: { id: user1, name: null, image: null, email: null },
+          user: { id: user1, name: null, image: null },
           permission: "view",
         },
         {
-          user: { id: user2, name: null, image: null, email: null },
+          user: { id: user2, name: null, image: null },
           permission: "modify",
         },
       ]),
@@ -1239,7 +1239,7 @@ describe("saveUserBoardPermissions should save user board permissions", () => {
     "should save user board permissions",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -1281,7 +1281,7 @@ describe("saveGroupBoardPermissions should save group board permissions", () =>
     "should save group board permissions",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -1339,7 +1339,7 @@ const createNewLayout = (columnCount: number) => ({
 describe("saveLayouts should save layout changes", () => {
   test("should add layout when not present in database", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1363,7 +1363,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should add items and dynamic sections generated from grid-algorithm when new layout is added", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId, sectionId, itemId } = await createFullBoardAsync(db, "default");
@@ -1394,7 +1394,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should update layout when present in input", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1420,7 +1420,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should update position of items when column count changes", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId, sectionId, itemId } = await createFullBoardAsync(db, "default");
@@ -1447,7 +1447,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should remove layout when not present in input", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1466,7 +1466,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should fail when board not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { layoutId } = await createFullBoardAsync(db, "default");

packages/api/src/router/test/board/board-access.spec.ts

@@ -4,7 +4,7 @@ import * as authShared from "@homarr/auth/shared";
 import { createId } from "@homarr/common";
 import { eq } from "@homarr/db";
 import { boards, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { throwIfActionForbiddenAsync } from "../../board/board-access";
 
@@ -26,7 +26,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, true],
   ])("with permission %s should return %s when hasFullAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: true,
@@ -55,7 +55,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, true],
   ])("with permission %s should return %s when hasChangeAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -84,7 +84,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, true],
   ])("with permission %s should return %s when hasViewAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -113,7 +113,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, false],
   ])("with permission %s should return %s when hasViewAccess is false", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -138,7 +138,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
 
   test("should throw when board is not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
 
     // Act
     const act = () => throwIfActionForbiddenAsync({ db, session: null }, eq(boards.id, createId()), "full");

packages/api/src/router/test/group.spec.ts

@@ -5,7 +5,7 @@ import * as env from "@homarr/auth/env";
 import { createId } from "@homarr/common";
 import { eq } from "@homarr/db";
 import { groupMembers, groupPermissions, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey } from "@homarr/definitions";
 
 import { groupRouter } from "../group";
@@ -37,7 +37,7 @@ describe("paginated should return a list of groups with pagination", () => {
     "with 5 groups in database and pageSize set to 3 on page %s it should return %s groups",
     async (page, expectedCount) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
       await db.insert(groups).values(
@@ -61,7 +61,7 @@ describe("paginated should return a list of groups with pagination", () => {
 
   test("with 5 groups in database and pagesize set to 3 it should return total count 5", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values(
@@ -83,7 +83,7 @@ describe("paginated should return a list of groups with pagination", () => {
 
   test("groups should contain id, name, email and image of members", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const user = createDummyUser();
@@ -120,7 +120,7 @@ describe("paginated should return a list of groups with pagination", () => {
     "groups should be searchable by name with contains pattern, query %s should result in %s results",
     async (query, expectedCount, firstKey) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
       await db.insert(groups).values(
@@ -144,7 +144,7 @@ describe("paginated should return a list of groups with pagination", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -158,7 +158,7 @@ describe("paginated should return a list of groups with pagination", () => {
 describe("byId should return group by id including members and permissions", () => {
   test('should return group with id "1" with members and permissions', async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const user = createDummyUser();
@@ -203,7 +203,7 @@ describe("byId should return group by id including members and permissions", ()
 
   test("with group id 1 and group 2 in database it should throw NOT_FOUND error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -221,7 +221,7 @@ describe("byId should return group by id including members and permissions", ()
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -235,7 +235,7 @@ describe("byId should return group by id including members and permissions", ()
 describe("create should create group in database", () => {
   test("with valid input (64 character name) and non existing name it should be successful", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const name = "a".repeat(64);
@@ -259,7 +259,7 @@ describe("create should create group in database", () => {
 
   test("with more than 64 characters name it should fail while validation", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
     const longName = "a".repeat(65);
 
@@ -280,7 +280,7 @@ describe("create should create group in database", () => {
     ["test", " TeSt"],
   ])("with similar name %s it should fail to create %s", async (similarName, nameToCreate) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -298,7 +298,7 @@ describe("create should create group in database", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -315,7 +315,7 @@ describe("update should update name with value that is no duplicate", () => {
     ["first", " first", "first"],
   ])("update should update name from %s to %s normalized", async (initialValue, updateValue, expectedValue) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -350,7 +350,7 @@ describe("update should update name with value that is no duplicate", () => {
     [" seCond", "second"],
   ])("with similar name %s it should fail to update %s", async (updateValue, initialDuplicate) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -380,7 +380,7 @@ describe("update should update name with value that is no duplicate", () => {
 
   test("with non existing id it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -402,7 +402,7 @@ describe("update should update name with value that is no duplicate", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -420,7 +420,7 @@ describe("update should update name with value that is no duplicate", () => {
 describe("savePermissions should save permissions for group", () => {
   test("with existing group and permissions it should save permissions", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -451,7 +451,7 @@ describe("savePermissions should save permissions for group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -473,7 +473,7 @@ describe("savePermissions should save permissions for group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -491,7 +491,7 @@ describe("savePermissions should save permissions for group", () => {
 describe("transferOwnership should transfer ownership of group", () => {
   test("with existing group and user it should transfer ownership", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -529,7 +529,7 @@ describe("transferOwnership should transfer ownership of group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -551,7 +551,7 @@ describe("transferOwnership should transfer ownership of group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -569,7 +569,7 @@ describe("transferOwnership should transfer ownership of group", () => {
 describe("deleteGroup should delete group", () => {
   test("with existing group it should delete group", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -600,7 +600,7 @@ describe("deleteGroup should delete group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -621,7 +621,7 @@ describe("deleteGroup should delete group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -638,7 +638,7 @@ describe("deleteGroup should delete group", () => {
 describe("addMember should add member to group", () => {
   test("with existing group and user it should add member", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["credentials"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
@@ -679,7 +679,7 @@ describe("addMember should add member to group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(users).values({
@@ -700,7 +700,7 @@ describe("addMember should add member to group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -716,7 +716,7 @@ describe("addMember should add member to group", () => {
 
   test("without credentials provider it should throw FORBIDDEN error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["ldap"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
@@ -755,7 +755,7 @@ describe("addMember should add member to group", () => {
 describe("removeMember should remove member from group", () => {
   test("with existing group and user it should remove member", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["credentials"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
@@ -799,7 +799,7 @@ describe("removeMember should remove member from group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(users).values({
@@ -820,7 +820,7 @@ describe("removeMember should remove member from group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -836,7 +836,7 @@ describe("removeMember should remove member from group", () => {
 
   test("without credentials provider it should throw FORBIDDEN error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["ldap"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });

packages/api/src/router/test/integration/integration-access.spec.ts

@@ -4,7 +4,7 @@ import * as authShared from "@homarr/auth/shared";
 import { createId } from "@homarr/common";
 import { eq } from "@homarr/db";
 import { integrations, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { throwIfActionForbiddenAsync } from "../../integration/integration-access";
 
@@ -26,7 +26,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, true],
   ])("with permission %s should return %s when hasFullAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: true,
@@ -56,7 +56,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, true],
   ])("with permission %s should return %s when hasInteractAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -87,7 +87,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, true],
   ])("with permission %s should return %s when hasUseAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -118,7 +118,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, false],
   ])("with permission %s should return %s when hasUseAccess is false", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -145,7 +145,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
 
   test("should throw when integration is not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
 
     // Act
     const act = () => throwIfActionForbiddenAsync({ db, session: null }, eq(integrations.id, createId()), "full");

packages/api/src/router/test/integration/integration-router.spec.ts

@@ -5,7 +5,7 @@ import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { encryptSecret } from "@homarr/common/server";
 import { apps, integrations, integrationSecrets } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey } from "@homarr/definitions";
 
 import { integrationRouter } from "../../integration/integration-router";
@@ -30,7 +30,7 @@ vi.mock("../../integration/integration-test-connection", () => ({
 
 describe("all should return all integrations", () => {
   test("with any session should return all integrations", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -61,7 +61,7 @@ describe("all should return all integrations", () => {
 
 describe("byId should return an integration by id", () => {
   test("with full access should return an integration by id", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -88,7 +88,7 @@ describe("byId should return an integration by id", () => {
   });
 
   test("with full access should throw an error if the integration does not exist", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -100,7 +100,7 @@ describe("byId should return an integration by id", () => {
   });
 
   test("with full access should only return the public secret values", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -148,7 +148,7 @@ describe("byId should return an integration by id", () => {
 
   test("without full access should throw integration not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -174,7 +174,7 @@ describe("byId should return an integration by id", () => {
 
 describe("create should create a new integration", () => {
   test("with create integration access should create a new integration", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -209,7 +209,7 @@ describe("create should create a new integration", () => {
   });
 
   test("with create integration access should create a new integration when creating search engine", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -252,7 +252,7 @@ describe("create should create a new integration", () => {
   });
 
   test("with create integration access should create a new integration with new linked app", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -302,7 +302,7 @@ describe("create should create a new integration", () => {
   });
 
   test("with create integration access should create a new integration with existing linked app", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const appId = createId();
     await db.insert(apps).values({
       id: appId,
@@ -349,7 +349,7 @@ describe("create should create a new integration", () => {
 
   test("without create integration access should throw permission error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -372,7 +372,7 @@ describe("create should create a new integration", () => {
 
   test("without create app access should throw permission error with new linked app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -403,7 +403,7 @@ describe("create should create a new integration", () => {
 
 describe("update should update an integration", () => {
   test("with full access should update an integration", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -486,7 +486,7 @@ describe("update should update an integration", () => {
   });
 
   test("with full access should throw an error if the integration does not exist", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -506,7 +506,7 @@ describe("update should update an integration", () => {
 
   test("without full access should throw permission error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -530,7 +530,7 @@ describe("update should update an integration", () => {
 
 describe("delete should delete an integration", () => {
   test("with full access should delete an integration", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -564,7 +564,7 @@ describe("delete should delete an integration", () => {
 
   test("without full access should throw permission error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/invite.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { invites, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { inviteRouter } from "../invite";
 
@@ -35,7 +35,7 @@ vi.mock("@homarr/auth/env", () => {
 describe("all should return all existing invites without sensitive informations", () => {
   test("invites should not contain sensitive informations", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -70,7 +70,7 @@ describe("all should return all existing invites without sensitive informations"
 
   test("invites should be sorted ascending by expiration date", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -110,7 +110,7 @@ describe("all should return all existing invites without sensitive informations"
 describe("create should create a new invite expiring on the specified date with a token and id returned to generate url", () => {
   test("creation should work with a date in the future, but less than 6 months.", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -142,7 +142,7 @@ describe("create should create a new invite expiring on the specified date with
 describe("delete should remove invite by id", () => {
   test("deletion should remove present invite", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -180,7 +180,7 @@ describe("delete should remove invite by id", () => {
 
   test("deletion should throw with NOT_FOUND code when specified invite not present", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/serverSettings.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { serverSettings } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import { defaultServerSettings, defaultServerSettingsKeys } from "@homarr/server-settings";
 
 import { serverSettingsRouter } from "../serverSettings";
@@ -23,7 +23,7 @@ const defaultSession = {
 
 describe("getAll server settings", () => {
   test("getAll should throw error when unauthorized", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = serverSettingsRouter.createCaller({
       db,
       deviceType: undefined,
@@ -42,7 +42,7 @@ describe("getAll server settings", () => {
     await expect(actAsync()).rejects.toThrow();
   });
   test("getAll should return default server settings when nothing in database", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = serverSettingsRouter.createCaller({
       db,
       deviceType: undefined,
@@ -57,7 +57,7 @@ describe("getAll server settings", () => {
 
 describe("saveSettings", () => {
   test("saveSettings should update settings and return true when it updated only one", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = serverSettingsRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/user.spec.ts

@@ -5,7 +5,7 @@ import { createId } from "@homarr/common";
 import type { Database } from "@homarr/db";
 import { eq } from "@homarr/db";
 import { invites, onboarding, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey, OnboardingStep } from "@homarr/definitions";
 
 import { userRouter } from "../user";
@@ -39,7 +39,7 @@ vi.mock("@homarr/auth/env", () => {
 
 describe("initUser should initialize the first user", () => {
   it("should create a user if none exists", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     await createOnboardingStepAsync(db, "user");
     const caller = userRouter.createCaller({
       db,
@@ -63,7 +63,7 @@ describe("initUser should initialize the first user", () => {
   });
 
   it("should not create a user if the password and confirmPassword do not match", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     await createOnboardingStepAsync(db, "user");
     const caller = userRouter.createCaller({
       db,
@@ -88,7 +88,7 @@ describe("initUser should initialize the first user", () => {
     ["ABC123+/-"], // does not contain lowercase
     ["abc123+/-"], // does not contain uppercase
   ])("should throw error that password requirements do not match for '%s' as password", async (password) => {
-    const db = await createDbAsync();
+    const db = createDb();
     await createOnboardingStepAsync(db, "user");
     const caller = userRouter.createCaller({
       db,
@@ -110,7 +110,7 @@ describe("initUser should initialize the first user", () => {
 describe("register should create a user with valid invitation", () => {
   test("register should create a user with valid invitation", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,
@@ -166,7 +166,7 @@ describe("register should create a user with valid invitation", () => {
     "register should throw an error with input %s and date %s if the invitation is invalid",
     async (partialInput, systemTime) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = userRouter.createCaller({
         db,
         deviceType: undefined,
@@ -209,7 +209,7 @@ describe("register should create a user with valid invitation", () => {
 describe("editProfile shoud update user", () => {
   test("editProfile should update users and not update emailVerified when email not dirty", async () => {
     // arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,
@@ -246,7 +246,7 @@ describe("editProfile shoud update user", () => {
 
   test("editProfile should update users and update emailVerified when email dirty", async () => {
     // arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,
@@ -282,7 +282,7 @@ describe("editProfile shoud update user", () => {
 
 describe("delete should delete user", () => {
   test("delete should delete user", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/widgets/app.spec.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test, vi } from "vitest";
 
 import type { Session } from "@homarr/auth";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import * as ping from "@homarr/ping";
 
 import { appRouter } from "../../widgets/app";
@@ -15,7 +15,7 @@ describe("ping should call sendPingRequestAsync with url and return result", ()
     // Arrange
     const spy = vi.spyOn(ping, "sendPingRequestAsync");
     const url = "http://localhost";
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -35,7 +35,7 @@ describe("ping should call sendPingRequestAsync with url and return result", ()
     // Arrange
     const spy = vi.spyOn(ping, "sendPingRequestAsync");
     const url = "http://localhost";
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/user.ts

@@ -174,7 +174,7 @@ export const userRouter = createTRPCRouter({
   // Is protected because also used in board access / integration access forms
   selectable: protectedProcedure
     .input(z.object({ excludeExternalProviders: z.boolean().default(false) }).optional())
-    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true, email: true })))
+    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true })))
     .meta({ openapi: { method: "GET", path: "/api/users/selectable", tags: ["users"], protect: true } })
     .query(({ ctx, input }) => {
       return ctx.db.query.users.findMany({
@@ -182,7 +182,6 @@ export const userRouter = createTRPCRouter({
           id: true,
           name: true,
           image: true,
-          email: true,
         },
         where: input?.excludeExternalProviders ? eq(users.provider, "credentials") : undefined,
       });
@@ -195,7 +194,7 @@ export const userRouter = createTRPCRouter({
         limit: z.number().min(1).max(100).default(10),
       }),
     )
-    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true, email: true })))
+    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true })))
     .meta({ openapi: { method: "POST", path: "/api/users/search", tags: ["users"], protect: true } })
     .query(async ({ input, ctx }) => {
       const dbUsers = await ctx.db.query.users.findMany({
@@ -203,7 +202,6 @@ export const userRouter = createTRPCRouter({
           id: true,
           name: true,
           image: true,
-          email: true,
         },
         where: like(users.name, `%${input.query}%`),
         limit: input.limit,
@@ -212,7 +210,6 @@ export const userRouter = createTRPCRouter({
         id: user.id,
         name: user.name ?? "",
         image: user.image,
-        email: user.email,
       }));
     }),
   getById: protectedProcedure

packages/api/src/router/widgets/health-monitoring.ts

@@ -9,7 +9,7 @@ import { createTRPCRouter, publicProcedure } from "../../trpc";
 
 export const healthMonitoringRouter = createTRPCRouter({
   getSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "mock"))
+    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "mock"))
     .query(async ({ ctx }) => {
       return await Promise.all(
         ctx.integrations.map(async (integration) => {
@@ -26,7 +26,7 @@ export const healthMonitoringRouter = createTRPCRouter({
       );
     }),
   subscribeSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "mock"))
+    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "mock"))
     .subscription(({ ctx }) => {
       return observable<{ integrationId: string; healthInfo: SystemHealthMonitoring; timestamp: Date }>((emit) => {
         const unsubscribes: (() => void)[] = [];

packages/api/src/router/widgets/notebook.ts

@@ -24,7 +24,7 @@ export const notebookRouter = createTRPCRouter({
         where: eq(items.id, input.itemId),
       });
 
-      if (item?.boardId !== input.boardId) {
+      if (!item || item.boardId !== input.boardId) {
         throw new TRPCError({
           code: "NOT_FOUND",
           message: "Specified item was not found",

packages/auth/api-key/constants.ts

@@ -1 +0,0 @@
-export const API_KEY_HEADER_NAME = "ApiKey";

packages/auth/api-key/get-api-key-session.ts

@@ -1,76 +0,0 @@
-import type { Session } from "next-auth";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import type { Database } from "@homarr/db";
-import { eq } from "@homarr/db";
-import { apiKeys } from "@homarr/db/schema";
-
-import { hashPasswordAsync } from "../security";
-import { createSessionAsync } from "../server";
-
-const logger = createLogger({ module: "apiKeyAuth" });
-
-/**
- * Validate an API key from the request header and return a session if valid.
- *
- * @param db - The database instance
- * @param apiKeyHeaderValue - The value of the ApiKey header (format: "id.token")
- * @param ipAddress - The IP address of the request (for logging)
- * @param userAgent - The user agent of the request (for logging)
- * @returns A session if the API key is valid, null otherwise
- */
-export const getSessionFromApiKeyAsync = async (
-  db: Database,
-  apiKeyHeaderValue: string | null,
-  ipAddress: string | null,
-  userAgent: string,
-): Promise<Session | null> => {
-  if (apiKeyHeaderValue === null) {
-    return null;
-  }
-
-  const [apiKeyId, apiKey] = apiKeyHeaderValue.split(".");
-
-  if (!apiKeyId || !apiKey) {
-    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_INVALID_FORMAT" });
-    return null;
-  }
-
-  const apiKeyFromDb = await db.query.apiKeys.findFirst({
-    where: eq(apiKeys.id, apiKeyId),
-    columns: {
-      id: true,
-      apiKey: true,
-      salt: true,
-    },
-    with: {
-      user: {
-        columns: {
-          id: true,
-          name: true,
-          email: true,
-          emailVerified: true,
-        },
-      },
-    },
-  });
-
-  if (!apiKeyFromDb) {
-    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_NOT_FOUND" });
-    return null;
-  }
-
-  const hashedApiKey = await hashPasswordAsync(apiKey, apiKeyFromDb.salt);
-
-  if (apiKeyFromDb.apiKey !== hashedApiKey) {
-    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_MISMATCH" });
-    return null;
-  }
-
-  logger.info("Successfully authenticated with api-key", {
-    name: apiKeyFromDb.user.name,
-    id: apiKeyFromDb.user.id,
-  });
-
-  return await createSessionAsync(db, apiKeyFromDb.user);
-};

packages/auth/api-key/index.ts

@@ -1,2 +0,0 @@
-export { getSessionFromApiKeyAsync } from "./get-api-key-session";
-export { API_KEY_HEADER_NAME } from "./constants";

packages/auth/api-key/test/get-api-key-session.spec.ts

@@ -1,133 +0,0 @@
-/* eslint-disable @typescript-eslint/no-non-null-assertion */
-import { describe, expect, test, vi } from "vitest";
-
-import { createId } from "@homarr/common";
-import { apiKeys, users } from "@homarr/db/schema";
-import { createDb } from "@homarr/db/test";
-
-import { createSaltAsync, hashPasswordAsync } from "../../security";
-import { getSessionFromApiKeyAsync } from "../get-api-key-session";
-
-// Mock the logger to avoid console output during tests
-vi.mock("@homarr/core/infrastructure/logs", () => ({
-  createLogger: () => ({
-    warn: vi.fn(),
-    info: vi.fn(),
-  }),
-}));
-
-const defaultUserId = createId();
-const defaultUsername = "testuser";
-const defaultApiKeyId = createId();
-const defaultIpAddress = "127.0.0.1";
-const defaultUserAgent = "test-agent";
-const defaultLogParams = [defaultIpAddress, defaultUserAgent] as const;
-
-describe("getSessionFromApiKeyAsync", () => {
-  test("should return null when api key header is null", async () => {
-    // Arrange
-    const { db } = await setupAsync();
-    const apiKey = null;
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, apiKey, ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test.each([
-    ["invalidformat", "no dot"],
-    ["keyid.", "missing token"],
-    [".token", "missing id"],
-  ])("should return null when api key format is invalid key=%s reason=%s", async (apiKey) => {
-    // Arrange
-    const { db } = await setupAsync();
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, apiKey, ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test("should return null when api key is not found in database", async () => {
-    // Arrange
-    const { db } = await setupAsync();
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, "nonexistent.token", ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test("should return null when api key token does not match", async () => {
-    // Arrange
-    const { db } = await setupAsync({ token: "correcttoken" });
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, `${defaultApiKeyId}.wrongtoken`, ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test("should return session when api key is valid", async () => {
-    // Arrange
-    const token = "validtesttoken123";
-    const { db } = await setupAsync({ token });
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, `${defaultApiKeyId}.${token}`, ...defaultLogParams);
-
-    // Assert
-    expect(result).not.toBeNull();
-    expect(result!.user.id).toEqual(defaultUserId);
-    expect(result!.user.name).toEqual(defaultUsername);
-  });
-
-  test("should work with null ip address", async () => {
-    // Arrange
-    const token = "validtesttoken456";
-    const { db } = await setupAsync({ token });
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, `${defaultApiKeyId}.${token}`, null, defaultUserAgent);
-
-    // Assert
-    expect(result).not.toBeNull();
-    expect(result!.user.id).toEqual(defaultUserId);
-  });
-});
-
-interface SetupOptions {
-  /**
-   * If provided, inserts an API key into the database for testing.
-   */
-  token?: string;
-}
-
-const setupAsync = async (options?: SetupOptions) => {
-  const db = createDb();
-
-  await db.insert(users).values({
-    id: defaultUserId,
-    name: defaultUsername,
-    email: "test@example.com",
-  });
-
-  if (options?.token) {
-    const salt = await createSaltAsync();
-    await db.insert(apiKeys).values({
-      id: defaultApiKeyId,
-      apiKey: await hashPasswordAsync(options.token, salt),
-      salt,
-      userId: defaultUserId,
-    });
-  }
-
-  return {
-    db,
-  };
-};

packages/auth/package.json

@@ -8,7 +8,6 @@
     ".": "./index.ts",
     "./next": "./next.ts",
     "./security": "./security.ts",
-    "./api-key": "./api-key/index.ts",
     "./client": "./client.ts",
     "./server": "./server.ts",
     "./shared": "./shared.ts",
@@ -33,12 +32,12 @@
     "@homarr/validation": "workspace:^0.1.0",
     "bcrypt": "^6.0.0",
     "cookies": "^0.9.1",
-    "ldapts": "8.1.3",
+    "ldapts": "8.0.23",
-    "next": "16.1.1",
+    "next": "16.0.10",
     "next-auth": "5.0.0-beta.30",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",

packages/auth/permissions/test/integration-query-permissions.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import { createId } from "@homarr/common";
 import type { InferInsertModel } from "@homarr/db";
 import { boardGroupPermissions, boards, boardUserPermissions, groupMembers, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import * as integrationPermissions from "../integration-permissions";
 import { hasQueryAccessToIntegrationsAsync } from "../integration-query-permissions";
@@ -22,7 +22,7 @@ const createSession = (user: Partial<Session["user"]>): Session => ({
 describe("hasQueryAccessToIntegrationsAsync should check if the user has query access to the specified integrations", () => {
   test("should return true if the user has the board-view-all permission and the integrations are used anywhere", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({
       permissions: ["board-view-all"],
     });
@@ -50,7 +50,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has the board-view-all permission, the first integration is used and the second one he has use access", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({
       permissions: ["board-view-all"],
     });
@@ -84,7 +84,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has use access to all integrations", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
     spy.mockReturnValue({
@@ -116,7 +116,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has user permission to access to at least one board of each integration", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -168,7 +168,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user has user permission to access board of first integration but not of second one", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -215,7 +215,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has group permission to access to at least one board of each integration", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -269,7 +269,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user has group permission to access board of first integration but not of second one", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -318,7 +318,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has user permission to access first board and group permission to access second one", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -369,7 +369,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if one of the boards the integration is used is public", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     const integrations = [
       {
@@ -413,7 +413,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user is creator of the board the integration is used", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const integrations = [
@@ -458,7 +458,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user has no access to any of the integrations", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     const integrations = [
       {
@@ -496,7 +496,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user is anonymous and the board is not public", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const integrations = [
       {
         id: "1",
@@ -534,7 +534,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user is anonymous and the board is public", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const integrations = [
       {
         id: "1",

packages/auth/providers/test/basic-authorization.spec.ts

@@ -2,7 +2,7 @@ import { describe, expect, test } from "vitest";
 
 import { createId } from "@homarr/common";
 import { users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { createSaltAsync, hashPasswordAsync } from "../../security";
 import { authorizeWithBasicCredentialsAsync } from "../credentials/authorization/basic-authorization";
@@ -12,7 +12,7 @@ const defaultUserId = createId();
 describe("authorizeWithBasicCredentials", () => {
   test("should authorize user with correct credentials", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
@@ -33,7 +33,7 @@ describe("authorizeWithBasicCredentials", () => {
 
   test("should not authorize user with incorrect credentials", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
@@ -54,7 +54,7 @@ describe("authorizeWithBasicCredentials", () => {
 
   test("should not authorize user with incorrect username", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
@@ -75,7 +75,7 @@ describe("authorizeWithBasicCredentials", () => {
 
   test("should not authorize user when password is not set", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     await db.insert(users).values({
       id: defaultUserId,
       name: "test",

packages/auth/providers/test/ldap-authorization.spec.ts

@@ -5,7 +5,7 @@ import { createId } from "@homarr/common";
 import type { Database } from "@homarr/db";
 import { and, eq } from "@homarr/db";
 import { groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { authorizeWithLdapCredentialsAsync } from "../credentials/authorization/ldap-authorization";
 import * as ldapClient from "../credentials/ldap-client";
@@ -123,7 +123,7 @@ describe("authorizeWithLdapCredentials", () => {
 
   test("should authorize user with correct credentials and create user", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(ldapClient, "LdapClient");
     spy.mockImplementation(function () {
       return {
@@ -161,7 +161,7 @@ describe("authorizeWithLdapCredentials", () => {
 
   test("should authorize user with correct credentials and create user with same email when credentials user already exists", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(ldapClient, "LdapClient");
     spy.mockImplementation(function () {
       return {
@@ -230,7 +230,7 @@ describe("authorizeWithLdapCredentials", () => {
     });
 
     const userId = createId();
-    const db = await createDbAsync();
+    const db = createDb();
     await db.insert(users).values({
       id: userId,
       name: "test-old",
@@ -281,7 +281,7 @@ describe("authorizeWithLdapCredentials", () => {
         disconnectAsync: vi.fn(),
       } as unknown as ldapClient.LdapClient;
     });
-    const db = await createDbAsync();
+    const db = createDb();
     const userId = createId();
     await db.insert(users).values({
       id: userId,

packages/auth/test/adapter.spec.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test } from "vitest";
 
 import { users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { createAdapter } from "../adapter";
 
@@ -10,7 +10,7 @@ describe("createAdapter should create drizzle adapter", () => {
     "createAdapter getUserByEmail should return user for provider %s when this provider provided",
     async (provider) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const adapter = createAdapter(db, provider);
       const email = "test@example.com";
       await db.insert(users).values({ id: "1", name: "test", email, provider });
@@ -37,7 +37,7 @@ describe("createAdapter should create drizzle adapter", () => {
     "createAdapter getUserByEmail should return null if only for other providers than %s exist",
     async (requestedProvider, existingProviders) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const adapter = createAdapter(db, requestedProvider);
       const email = "test@example.com";
       for (const provider of existingProviders) {
@@ -54,7 +54,7 @@ describe("createAdapter should create drizzle adapter", () => {
 
   test("createAdapter getUserByEmail should throw error if provider is unknown", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const adapter = createAdapter(db, "unknown");
     const email = "test@example.com";
 

packages/auth/test/callbacks.spec.ts

@@ -4,7 +4,7 @@ import type { JWT } from "next-auth/jwt";
 import { describe, expect, test, vi } from "vitest";
 
 import { groupMembers, groupPermissions, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import * as definitions from "@homarr/definitions";
 
 import { createSessionCallback, getCurrentUserPermissionsAsync } from "../callbacks";
@@ -20,7 +20,7 @@ vi.mock("next/headers", () => ({
 describe("getCurrentUserPermissions", () => {
   test("should return empty permissions when non existing user requested", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
 
     await db.insert(groups).values({
       id: "2",
@@ -46,7 +46,7 @@ describe("getCurrentUserPermissions", () => {
 
   test("should return empty permissions when user has no groups", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const userId = "1";
 
     await db.insert(groups).values({
@@ -71,7 +71,7 @@ describe("getCurrentUserPermissions", () => {
 
   test("should return permissions for user", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const getPermissionsWithChildrenMock = vi
       .spyOn(definitions, "getPermissionsWithChildren")
       .mockReturnValue(["board-create"]);
@@ -113,7 +113,7 @@ describe("session callback", () => {
       emailVerified: new Date("2023-01-13"),
     };
     const token: JWT = {};
-    const db = await createDbAsync();
+    const db = createDb();
     const callback = createSessionCallback(db);
 
     // Act

packages/auth/test/events.spec.ts

@@ -6,7 +6,7 @@ import { describe, expect, test, vi } from "vitest";
 import { eq } from "@homarr/db";
 import type { Database } from "@homarr/db";
 import { groupMembers, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import { colorSchemeCookieKey, everyoneGroup } from "@homarr/definitions";
 
 import { createSignInEventHandler } from "../events";
@@ -39,7 +39,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   describe("signInEventHandler should add users to everyone group", () => {
     test("should add user to everyone group if he isn't already", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db, everyoneGroup);
       const eventHandler = createSignInEventHandler(db);
@@ -62,7 +62,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   describe("signInEventHandler should synchronize ldap groups", () => {
     test("should add missing group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       const eventHandler = createSignInEventHandler(db);
@@ -82,7 +82,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should remove group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       await db.insert(groupMembers).values({
@@ -106,7 +106,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should not remove group membership for everyone group", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db, everyoneGroup);
       await db.insert(groupMembers).values({
@@ -132,7 +132,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   describe("signInEventHandler should synchronize oidc groups", () => {
     test("should add missing group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       const eventHandler = createSignInEventHandler(db);
@@ -152,7 +152,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should remove group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       await db.insert(groupMembers).values({
@@ -176,7 +176,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should not remove group membership for everyone group", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db, everyoneGroup);
       await db.insert(groupMembers).values({
@@ -205,7 +205,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     ["oidc" as const, { name: "test" }, { preferred_username: "test@example.com", name: "test-new" }],
   ])("signInEventHandler should update username for %s provider", async (_provider, user, profile) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     await createUserAsync(db);
     const eventHandler = createSignInEventHandler(db);
 
@@ -227,7 +227,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   });
   test("signInEventHandler should set color-scheme cookie", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     await createUserAsync(db);
     const eventHandler = createSignInEventHandler(db);
 

packages/cli/package.json

@@ -34,7 +34,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "typescript": "^5.9.3"
   }

packages/common/package.json

@@ -29,12 +29,12 @@
     "@homarr/core": "workspace:^0.1.0",
     "@paralleldrive/cuid2": "^3.1.0",
     "dayjs": "^1.11.19",
-    "next": "16.1.1",
+    "next": "16.0.10",
     "octokit": "^5.0.5",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "undici": "7.18.2",
+    "undici": "7.16.0",
-    "zod": "^4.2.1",
+    "zod": "^4.1.13",
     "zod-validation-error": "^5.0.0"
   },
   "devDependencies": {

packages/common/src/server.ts

@@ -1,4 +1,4 @@
 export * from "./security";
 export * from "./encryption";
-export * from "./request";
+export * from "./user-agent";
 export * from "./errors";

packages/common/src/user-agent.ts

@@ -9,7 +9,3 @@ export const userAgent = (headers: Headers) => {
 };
 
 export type DeviceType = "console" | "mobile" | "tablet" | "smarttv" | "wearable" | "embedded" | undefined;
-
-export const ipAddressFromHeaders = (headers: Headers): string | null => {
-  return headers.get("x-forwarded-for");
-};

packages/core/package.json

@@ -37,21 +37,22 @@
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
-    "@libsql/client": "0.15.15",
+    "@t3-oss/env-nextjs": "^0.13.8",
-    "@t3-oss/env-nextjs": "^0.13.10",
+    "better-sqlite3": "^12.5.0",
     "dns-caching": "^0.2.9",
     "drizzle-orm": "^0.45.1",
-    "ioredis": "5.9.1",
+    "ioredis": "5.8.2",
-    "mysql2": "3.16.0",
+    "mysql2": "3.15.3",
     "pg": "^8.16.3",
     "superjson": "2.2.6",
     "winston": "3.19.0",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
+    "@types/better-sqlite3": "7.6.13",
     "@types/pg": "^8.16.0",
     "eslint": "^9.39.2",
     "typescript": "^5.9.3"

packages/core/src/infrastructure/db/drivers/mysql.ts

@@ -26,9 +26,7 @@ const createMysqlDbConnection = () => {
 
   return mysql.createPool({
     ...defaultOptions,
-    host: dbEnv.HOST,
     port: dbEnv.PORT,
-    database: dbEnv.NAME,
     user: dbEnv.USER,
     password: dbEnv.PASSWORD,
   });

packages/core/src/infrastructure/db/drivers/sqlite.ts

@@ -1,12 +1,10 @@
-import { createClient } from "@libsql/client/node";
+import Database from "better-sqlite3";
-import { drizzle as drizzleSqlite } from "drizzle-orm/libsql";
+import { drizzle as drizzleSqlite } from "drizzle-orm/better-sqlite3";
 
 import { dbEnv } from "../env";
 import type { SharedDrizzleConfig } from "./shared";
 
 export const createSqliteDb = <TSchema extends Record<string, unknown>>(config: SharedDrizzleConfig<TSchema>) => {
-  const connection = createClient({
+  const connection = new Database(dbEnv.URL);
-    url: dbEnv.URL ? `file:${dbEnv.URL}` : ":memory:",
-  });
   return drizzleSqlite<TSchema>(connection, config);
 };

packages/core/src/infrastructure/dns/env.ts

@@ -2,7 +2,7 @@ import { createBooleanSchema, createEnv } from "../env";
 
 export const dnsEnv = createEnv({
   server: {
-    ENABLE_DNS_CACHING: createBooleanSchema(true),
+    ENABLE_DNS_CACHING: createBooleanSchema(false),
   },
   experimental__runtimeEnv: process.env,
 });

packages/core/src/infrastructure/http/http-agent.ts

@@ -1,5 +1,5 @@
 import type { Dispatcher } from "undici";
-import { EnvHttpProxyAgent } from "undici";
+import { Agent } from "undici";
 
 import type { ILogger } from "@homarr/core/infrastructure/logs";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -7,15 +7,16 @@ import { createLogger } from "@homarr/core/infrastructure/logs";
 // The below import statement initializes dns-caching
 import "@homarr/core/infrastructure/dns/init";
 
-interface HttpAgentOptions extends EnvHttpProxyAgent.Options {
+interface HttpAgentOptions extends Agent.Options {
   logger?: ILogger;
 }
 
-export class UndiciHttpAgent extends EnvHttpProxyAgent {
+export class UndiciHttpAgent extends Agent {
   private logger: ILogger;
 
   constructor(props?: HttpAgentOptions) {
     super(props);
+
     this.logger = props?.logger ?? createLogger({ module: "httpAgent" });
   }
 

packages/core/src/infrastructure/http/request.ts

@@ -42,13 +42,12 @@ export const createCertificateAgentAsync = async (override?: {
 };
 
 export const createHttpsAgentAsync = async (override?: Pick<AgentOptions, "ca" | "checkServerIdentity">) => {
-  return new HttpsAgent({
+  return new HttpsAgent(
+    override ?? {
       ca: await getAllTrustedCertificatesAsync(),
       checkServerIdentity: createCustomCheckServerIdentity(await getTrustedCertificateHostnamesAsync()),
-    // Override the ca and checkServerIdentity if provided
+    },
-    ...override,
+  );
-    proxyEnv: process.env,
-  });
 };
 
 export const createAxiosCertificateInstanceAsync = async (

packages/core/src/test/infrastructure/http/http-agent.spec.ts

@@ -7,7 +7,7 @@ import { TestLogger } from "../logs";
 
 vi.mock("undici", () => {
   return {
-    EnvHttpProxyAgent: class EnvHttpProxyAgent {
+    Agent: class Agent {
       dispatch(_options: Dispatcher.DispatchOptions, _handler: Dispatcher.DispatchHandler): boolean {
         return true;
       }

packages/cron-job-api/package.json

@@ -28,20 +28,20 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/cron-jobs": "workspace:^0.1.0",
-    "@tanstack/react-query": "^5.90.16",
+    "@tanstack/react-query": "^5.90.12",
-    "@trpc/client": "^11.8.1",
+    "@trpc/client": "^11.8.0",
-    "@trpc/server": "^11.8.1",
+    "@trpc/server": "^11.8.0",
-    "@trpc/tanstack-react-query": "^11.8.1",
+    "@trpc/tanstack-react-query": "^11.8.0",
     "node-cron": "^4.2.1",
     "react": "19.2.3",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/node-cron": "^3.0.11",
-    "@types/react": "19.2.8",
+    "@types/react": "19.2.7",
     "eslint": "^9.39.2",
     "typescript": "^5.9.3"
   }

packages/cron-jobs/src/jobs/icons-updater.ts

@@ -3,7 +3,7 @@ import { env } from "@homarr/common/env";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { EVERY_WEEK } from "@homarr/cron-jobs-core/expressions";
 import type { InferInsertModel } from "@homarr/db";
-import { db, inArray, sql } from "@homarr/db";
+import { db, handleTransactionsAsync, inArray, sql } from "@homarr/db";
 import { iconRepositories, icons } from "@homarr/db/schema";
 import { fetchIconsAsync } from "@homarr/icons";
 
@@ -89,19 +89,21 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
     (iconRepository) => !repositoryIconGroups.some((group) => group.slug === iconRepository.slug),
   );
 
+  await handleTransactionsAsync(db, {
+    async handleAsync(db, schema) {
       await db.transaction(async (transaction) => {
         if (newIconRepositories.length >= 1) {
-      await transaction.insert(iconRepositories).values(newIconRepositories);
+          await transaction.insert(schema.iconRepositories).values(newIconRepositories);
         }
 
         if (newIcons.length >= 1) {
           // We only insert 5000 icons at a time to avoid SQLite limitations
           for (const chunck of splitToNChunks(newIcons, Math.ceil(newIcons.length / 5000))) {
-        await transaction.insert(icons).values(chunck);
+            await transaction.insert(schema.icons).values(chunck);
           }
         }
         if (deadIcons.length >= 1) {
-      await transaction.delete(icons).where(
+          await transaction.delete(schema.icons).where(
             inArray(
               // Combine iconRepositoryId and checksum to allow same icons on different repositories
               sql`concat(${icons.iconRepositoryId}, '.', ${icons.checksum})`,
@@ -111,7 +113,7 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
         }
 
         if (deadIconRepositories.length >= 1) {
-      await transaction.delete(iconRepositories).where(
+          await transaction.delete(schema.iconRepositories).where(
             inArray(
               iconRepositories.id,
               deadIconRepositories.map((iconRepository) => iconRepository.id),
@@ -121,6 +123,48 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
 
         countDeleted += deadIcons.length;
       });
+    },
+    handleSync() {
+      db.transaction((transaction) => {
+        if (newIconRepositories.length >= 1) {
+          transaction.insert(iconRepositories).values(newIconRepositories).run();
+        }
+
+        if (newIcons.length >= 1) {
+          // We only insert 5000 icons at a time to avoid SQLite limitations
+          for (const chunck of splitToNChunks(newIcons, Math.ceil(newIcons.length / 5000))) {
+            transaction.insert(icons).values(chunck).run();
+          }
+        }
+        if (deadIcons.length >= 1) {
+          transaction
+            .delete(icons)
+            .where(
+              inArray(
+                // Combine iconRepositoryId and checksum to allow same icons on different repositories
+                sql`concat(${icons.iconRepositoryId}, '.', ${icons.checksum})`,
+                deadIcons.map((icon) => `${icon.iconRepositoryId}.${icon.checksum}`),
+              ),
+            )
+            .run();
+        }
+
+        if (deadIconRepositories.length >= 1) {
+          transaction
+            .delete(iconRepositories)
+            .where(
+              inArray(
+                iconRepositories.id,
+                deadIconRepositories.map((iconRepository) => iconRepository.id),
+              ),
+            )
+            .run();
+        }
+
+        countDeleted += deadIcons.length;
+      });
+    },
+  });
 
   logger.info("Updated icons in database", {
     duration: stopWatch.getElapsedInHumanWords(),

packages/db/collection.ts

@@ -1,15 +1,26 @@
 import type { InferInsertModel } from "drizzle-orm";
 
 import { objectEntries } from "@homarr/common";
+import { dbEnv } from "@homarr/core/infrastructure/db/env";
 
-import type { HomarrDatabase, HomarrTransaction } from "./driver";
+import type { HomarrDatabase, HomarrDatabaseMysql, HomarrDatabasePostgresql } from "./driver";
 import * as schema from "./schema";
 
 type TableKey = {
   [K in keyof typeof schema]: (typeof schema)[K] extends { _: { brand: "Table" } } ? K : never;
 }[keyof typeof schema];
 
-export const createDbInsertCollection = <TTableKey extends TableKey>(tablesInInsertOrder: TTableKey[]) => {
+export function isMysql(): boolean {
+  return dbEnv.DRIVER === "mysql2";
+}
+
+export function isPostgresql(): boolean {
+  return dbEnv.DRIVER === "node-postgres";
+}
+
+export const createDbInsertCollectionForTransaction = <TTableKey extends TableKey>(
+  tablesInInsertOrder: TTableKey[],
+) => {
   const context = tablesInInsertOrder.reduce(
     (acc, key) => {
       acc[key] = [];
@@ -20,10 +31,25 @@ export const createDbInsertCollection = <TTableKey extends TableKey>(tablesInIns
 
   return {
     ...context,
-    insertAllAsync: async (db: HomarrDatabase | HomarrTransaction) => {
+    insertAll: (db: HomarrDatabase) => {
-      await db.transaction(async (transaction) => {
+      db.transaction((transaction) => {
         for (const [key, values] of objectEntries(context)) {
           if (values.length >= 1) {
+            transaction
+              .insert(schema[key])
+              .values(values as never)
+              .run();
+          }
+        }
+      });
+    },
+    // We allow any database that supports async passed here but then fallback to mysql to prevent typescript errors
+    insertAllAsync: async (db: HomarrDatabaseMysql | HomarrDatabasePostgresql) => {
+      const innerDb = db as HomarrDatabaseMysql;
+      await innerDb.transaction(async (transaction) => {
+        for (const [key, values] of objectEntries(context)) {
+          if (values.length >= 1) {
+            // Below is actually the mysqlSchema when the driver is mysql
             await transaction.insert(schema[key] as never).values(values as never);
           }
         }
@@ -31,3 +57,27 @@ export const createDbInsertCollection = <TTableKey extends TableKey>(tablesInIns
     },
   };
 };
+
+export const createDbInsertCollectionWithoutTransaction = <TTableKey extends TableKey>(
+  tablesInInsertOrder: TTableKey[],
+) => {
+  const { insertAll, insertAllAsync, ...collection } = createDbInsertCollectionForTransaction(tablesInInsertOrder);
+
+  return {
+    ...collection,
+    insertAllAsync: async (db: HomarrDatabase) => {
+      switch (dbEnv.DRIVER) {
+        case "mysql2":
+        case "node-postgres":
+          // For mysql2 and node-postgres, we can use the async insertAllAsync method
+          await insertAllAsync(db as unknown as HomarrDatabaseMysql | HomarrDatabasePostgresql);
+          return;
+        default:
+          // For better-sqlite3, we need to use the synchronous insertAll method
+          // default assumes better-sqlite3. It's original implementation.
+          insertAll(db);
+          break;
+      }
+    },
+  };
+};

packages/db/configs/sqlite.config.ts

@@ -7,6 +7,6 @@ export default {
   dialect: "sqlite",
   schema: "./schema",
   casing: DB_CASING,
-  dbCredentials: { url: `file:${dbEnv.URL}` },
+  dbCredentials: { url: dbEnv.URL },
   out: "./migrations/sqlite",
 } satisfies Config;

packages/db/driver.ts

@@ -1,5 +1,4 @@
-import type { ExtractTablesWithRelations } from "drizzle-orm";
+import type { BetterSQLite3Database } from "drizzle-orm/better-sqlite3";
-import type { LibSQLDatabase, LibSQLTransaction } from "drizzle-orm/libsql";
 import type { MySql2Database } from "drizzle-orm/mysql2";
 import type { NodePgDatabase } from "drizzle-orm/node-postgres";
 
@@ -7,7 +6,6 @@ import type * as mysqlSchema from "./schema/mysql";
 import type * as pgSchema from "./schema/postgresql";
 import type * as sqliteSchema from "./schema/sqlite";
 
-export type HomarrDatabase = LibSQLDatabase<typeof sqliteSchema>;
+export type HomarrDatabase = BetterSQLite3Database<typeof sqliteSchema>;
-export type HomarrTransaction = LibSQLTransaction<typeof sqliteSchema, ExtractTablesWithRelations<typeof sqliteSchema>>;
 export type HomarrDatabaseMysql = MySql2Database<typeof mysqlSchema>;
 export type HomarrDatabasePostgresql = NodePgDatabase<typeof pgSchema>;

packages/db/index.ts

@@ -8,3 +8,5 @@ export type { HomarrDatabaseMysql, HomarrDatabasePostgresql } from "./driver";
 export const db = createDb(schema);
 
 export type Database = typeof db;
+
+export { handleDiffrentDbDriverOperationsAsync as handleTransactionsAsync } from "./transactions";

packages/db/migrations/sqlite/migrate.ts

@@ -1,4 +1,4 @@
-import { migrate } from "drizzle-orm/libsql/migrator";
+import { migrate } from "drizzle-orm/better-sqlite3/migrator";
 
 import { createSharedDbConfig, createSqliteDb } from "@homarr/core/infrastructure/db";
 
@@ -12,7 +12,7 @@ const migrateAsync = async () => {
   const config = createSharedDbConfig(sqliteSchema);
   const db = createSqliteDb(config);
 
-  await migrate(db, { migrationsFolder });
+  migrate(db, { migrationsFolder });
 
   await seedDataAsync(db);
   await applyCustomMigrationsAsync(db);

packages/db/package.json

@@ -47,16 +47,16 @@
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/definitions": "workspace:^0.1.0",
     "@homarr/server-settings": "workspace:^0.1.0",
-    "@libsql/client": "0.15.15",
+    "@mantine/core": "^8.3.10",
-    "@mantine/core": "^8.3.12",
     "@paralleldrive/cuid2": "^3.1.0",
-    "@testcontainers/mysql": "^11.11.0",
+    "@testcontainers/mysql": "^11.10.0",
-    "@testcontainers/postgresql": "^11.11.0",
+    "@testcontainers/postgresql": "^11.10.0",
+    "better-sqlite3": "^12.5.0",
     "dotenv": "^17.2.3",
     "drizzle-kit": "^0.31.8",
     "drizzle-orm": "^0.45.1",
     "drizzle-zod": "^0.8.3",
-    "mysql2": "3.16.0",
+    "mysql2": "3.15.3",
     "pg": "^8.16.3",
     "superjson": "2.2.6"
   },
@@ -64,9 +64,10 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
+    "@types/better-sqlite3": "7.6.13",
     "@types/pg": "^8.16.0",
     "dotenv-cli": "^11.0.0",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "prettier": "^3.7.4",
     "tsx": "4.20.4",

packages/db/test/db-mock.ts

@@ -1,17 +1,15 @@
-import { createClient } from "@libsql/client/node";
+import Database from "better-sqlite3";
-import { drizzle } from "drizzle-orm/libsql";
+import { drizzle } from "drizzle-orm/better-sqlite3";
-import { migrate } from "drizzle-orm/libsql/migrator";
+import { migrate } from "drizzle-orm/better-sqlite3/migrator";
 
 import { DB_CASING } from "@homarr/core/infrastructure/db/constants";
 
 import * as sqliteSchema from "../schema/sqlite";
 
-export const createDbAsync = async (debug?: boolean) => {
+export const createDb = (debug?: boolean) => {
-  const sqlite = createClient({
+  const sqlite = new Database(":memory:");
-    url: ":memory:",
-  });
   const db = drizzle(sqlite, { schema: sqliteSchema, logger: debug, casing: DB_CASING });
-  await migrate(db, {
+  migrate(db, {
     migrationsFolder: "./packages/db/migrations/sqlite",
   });
 

packages/db/transactions.ts

@@ -0,0 +1,23 @@
+import { isMysql, isPostgresql } from "./collection";
+import type { HomarrDatabase, HomarrDatabaseMysql } from "./driver";
+import type { MySqlSchema } from "./schema";
+import * as schema from "./schema";
+
+interface HandleTransactionInput {
+  handleAsync: (db: HomarrDatabaseMysql, schema: MySqlSchema) => Promise<void>;
+  handleSync: (db: HomarrDatabase) => void;
+}
+
+/**
+ * The below method is mostly used to handle transactions in different database drivers.
+ * As better-sqlite3 transactions have to be synchronous, we have to implement them in a different way.
+ * But it can also generally be used when dealing with different database drivers.
+ */
+export const handleDiffrentDbDriverOperationsAsync = async (db: HomarrDatabase, input: HandleTransactionInput) => {
+  if (isMysql() || isPostgresql()) {
+    // Schema type is always the correct one based on env variables
+    await input.handleAsync(db as unknown as HomarrDatabaseMysql, schema as unknown as MySqlSchema);
+  } else {
+    input.handleSync(db);
+  }
+};

packages/db/validationSchemas.ts

@@ -1,9 +1,12 @@
-import { createSelectSchema } from "drizzle-zod";
+import { createInsertSchema, createSelectSchema } from "drizzle-zod";
 
-import { apps, boards, groups, invites, searchEngines, serverSettings, users } from "./schema";
+import { apps, boards, groups, invites, itemLayouts, items, searchEngines, serverSettings, users } from "./schema";
 
 export const selectAppSchema = createSelectSchema(apps);
 export const selectBoardSchema = createSelectSchema(boards);
+export const selectitemSchema = createSelectSchema(items);
+export const insertItemSchema = createInsertSchema(items);
+export const selectItemLayoutSchema = createSelectSchema(itemLayouts);
 export const selectGroupSchema = createSelectSchema(groups);
 export const selectInviteSchema = createSelectSchema(invites);
 export const selectSearchEnginesSchema = createSelectSchema(searchEngines);

packages/definitions/package.json

@@ -25,7 +25,7 @@
   "dependencies": {
     "@homarr/common": "workspace:^0.1.0",
     "fast-xml-parser": "^5.3.3",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",

packages/definitions/src/docs/homarr-docs-sitemap.ts

@@ -188,7 +188,6 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/transmission"
   | "/docs/integrations/truenas"
   | "/docs/integrations/unifi-controller"
-  | "/docs/integrations/unraid"
   | "/docs/management/api"
   | "/docs/management/apps"
   | "/docs/management/boards"

packages/definitions/src/integration.ts

@@ -298,13 +298,6 @@ export const integrationDefs = {
     category: ["healthMonitoring"],
     documentationUrl: createDocumentationLink("/docs/integrations/truenas"),
   },
-  unraid: {
-    name: "Unraid",
-    secretKinds: [["apiKey"]],
-    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg",
-    category: ["healthMonitoring"],
-    documentationUrl: createDocumentationLink("/docs/integrations/unraid"),
-  },
   // This integration only returns mock data, it is used during development (but can also be used in production by directly going to the create page)
   mock: {
     name: "Mock",

packages/form/package.json

@@ -26,9 +26,9 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "@mantine/form": "^8.3.12",
+    "@mantine/form": "^8.3.10",
     "mantine-form-zod-resolver": "^1.3.0",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",