feat: add joyride

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -33,9 +33,6 @@ body:
       options:
         # The below comment is used to insert a new version with on-release.yml
         #NEXT_VERSION#
-        - 1.49.0
-        - 1.48.0
-        - 1.47.0
         - 1.46.0
         - 1.45.3
         - 1.45.2

.github/actions/extract-build-artifact/action.yaml

@@ -19,6 +19,11 @@ inputs:
 runs:
   using: "composite"
   steps:
+    - name: Prebuilt debian dependencies
+      uses: ./.github/actions/prebuilt-debian@dev
+      id: prebuilt-debian
+      with:
+        architecture: ${{ inputs.architecture }}
     - name: Start docker container for ${{ inputs.architecture }}
       run: |
         docker run --name homarr \
@@ -36,9 +41,12 @@ runs:
         docker cp homarr:/app/extraction-alpine.tar.gz ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-alpine-${{ inputs.architecture }}.tar.gz && \
         docker exec homarr rm /app/extraction-alpine.tar.gz
       shell: bash
-    - name: Copy source for debian build artifact
+    - name: Extract source from ${{ inputs.architecture }} container (debian)
       run: |
-        cp ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-alpine-${{ inputs.architecture }}.tar.gz ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-debian-${{ inputs.architecture }}.tar.gz
+        docker cp ${{ steps.prebuilt-debian.outputs.path }}/. homarr:/app/build && \
+        docker cp ${{ steps.prebuilt-debian.outputs.path }}/. homarr:/app/node_modules/better-sqlite3/build/Release && \
+        docker exec homarr tar -czf extraction-debian.tar.gz -C /app . && \
+        docker cp homarr:/app/extraction-debian.tar.gz ${{ runner.temp }}/extraction/${{ inputs.architecture }}/build-debian-${{ inputs.architecture }}.tar.gz
       shell: bash
     - name: Stop ${{ inputs.architecture }} container
       if: always()

.github/actions/prebuilt-debian/action.yaml

@@ -0,0 +1,42 @@
+name: Prebuilt dependencies for debian
+description: Provides prebuilt dependencies for debian based docker images
+inputs:
+  architecture:
+    description: Name of architecture, will be used to build docker image (e.g. amd64, arm64)
+    required: true
+outputs:
+  path:
+    description: Path to extracted prebuilt dependencies
+    value: ${{ runner.temp }}/prebuilts
+runs:
+  using: "composite"
+  steps:
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Build docker image for ${{ inputs.architecture }}
+      id: build
+      uses: docker/build-push-action@v6
+      with:
+        push: false
+        load: true
+        context: ./deployments/prebuilt-debian
+        platforms: linux/${{ inputs.architecture }}
+        tags: prebuilt-debian
+    - name: Start docker container for ${{ inputs.architecture }}
+      run: |
+        docker run --name prebuilt-debian \
+          --detach --rm prebuilt-debian
+      shell: bash
+    - name: Extract prebuilt dependencies from ${{ inputs.architecture }} container
+      run: |
+        mkdir -p ${{ runner.temp }}/prebuilts && \
+        docker cp prebuilt-debian:/app/node_modules/better-sqlite3/build/Release/better_sqlite3.node ${{ runner.temp }}/prebuilts/better_sqlite3.node
+      shell: bash
+    - name: Stop ${{ inputs.architecture }} container
+      if: always()
+      run: docker container remove --force --volumes prebuilt-debian
+      shell: bash

.github/renovate.json5

@@ -20,6 +20,7 @@
       matchPackageNames: [
         "@tree-sitter-grammars/tree-sitter-yaml",
         "bcrypt",
+        "better-sqlite3",
         "cpu-features",
         "esbuild",
         "sharp",

.github/workflows/on-pr-prebuilt-debian-validate.yml

@@ -0,0 +1,45 @@
+name: "[Deployments] Validate prebuilt debian dependencies"
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    branches: ["*"]
+    paths: [".github/actions/prebuilt-debian/**", "deployments/prebuilt-debian/**"]
+
+jobs:
+  prebuilt-debian-validate-amd64:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+      - name: Validate prebuilt dependencies for amd64
+        id: validate-amd64
+        uses: ./.github/actions/prebuilt-debian
+        with:
+          architecture: amd64
+
+      - name: Check extracted files for amd64
+        run: |
+          if [ ! -f "${{ steps.validate-amd64.outputs.path }}/better_sqlite3.node" ]; then
+            echo "better_sqlite3.node not found for amd64!"
+            exit 1
+          fi
+  prebuilt-debian-validate-arm64:
+    runs-on: ubuntu-24.04-
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+      - name: Validate prebuilt dependencies for arm64
+        id: validate-arm64
+        uses: ./.github/actions/prebuilt-debian
+        with:
+          architecture: arm64
+
+      - name: Check extracted files for arm64
+        run: |
+          if [ ! -f "${{ steps.validate-arm64.outputs.path }}/better_sqlite3.node" ]; then
+            echo "better_sqlite3.node not found for arm64!"
+            exit 1
+          fi

CHANGELOG.md

@@ -1,146 +1,3 @@
-## [1.50.1](https://github.com/homarr-labs/homarr/compare/v1.50.0...v1.50.1) (2026-01-16)
-
-### Bug Fixes
-
-* **deps:** update dependency ioredis to v5.9.0 ([#4827](https://github.com/homarr-labs/homarr/issues/4827)) ([155d4f2](https://github.com/homarr-labs/homarr/commit/155d4f2270b3b35c4ad696499b0aaa0b10100989))
-* **deps:** update dependency ioredis to v5.9.1 ([#4844](https://github.com/homarr-labs/homarr/issues/4844)) ([5d00642](https://github.com/homarr-labs/homarr/commit/5d006422688cf3fe7440ae3ab66ad3b2cc9286a8))
-* **deps:** update dependency ldapts to v8.1.3 ([#4841](https://github.com/homarr-labs/homarr/issues/4841)) ([7fa9907](https://github.com/homarr-labs/homarr/commit/7fa990712bddc88bbb3bbe01e758bfef7cb4dea3))
-* **deps:** update dependency react-error-boundary to ^6.0.2 ([#4821](https://github.com/homarr-labs/homarr/issues/4821)) ([e9ba102](https://github.com/homarr-labs/homarr/commit/e9ba102cf668c0ef54628d3dbc6e6cbda2d059b5))
-* **deps:** update dependency react-error-boundary to ^6.0.3 ([#4847](https://github.com/homarr-labs/homarr/issues/4847)) ([c24006d](https://github.com/homarr-labs/homarr/commit/c24006dca691f26a7187c0ba112d9ed2ec424bb0))
-* **deps:** update dependency sass to ^1.97.2 ([#4835](https://github.com/homarr-labs/homarr/issues/4835)) ([07ba531](https://github.com/homarr-labs/homarr/commit/07ba53165c90d675aa54c5ad3fca930fef5cd35e))
-* **deps:** update dependency typescript-eslint to ^8.52.0 ([#4830](https://github.com/homarr-labs/homarr/issues/4830)) ([fa8af6a](https://github.com/homarr-labs/homarr/commit/fa8af6a453b846af2305db3c318c8c1c303a3a88))
-* **deps:** update dependency undici to v7.17.0 ([#4826](https://github.com/homarr-labs/homarr/issues/4826)) ([21a91b1](https://github.com/homarr-labs/homarr/commit/21a91b1489ff1a1f0a1428a3f50f00db8932da72))
-* **deps:** update dependency undici to v7.18.0 ([#4829](https://github.com/homarr-labs/homarr/issues/4829)) ([b76ab29](https://github.com/homarr-labs/homarr/commit/b76ab2961d84081c9ef04d76193f21a1068e72d9))
-* **deps:** update dependency undici to v7.18.2 ([#4837](https://github.com/homarr-labs/homarr/issues/4837)) ([16733c2](https://github.com/homarr-labs/homarr/commit/16733c2a0efabcbc5b693a8b6f82833f6fc344b7))
-* **deps:** update dependency ws to ^8.19.0 ([#4833](https://github.com/homarr-labs/homarr/issues/4833)) ([629359e](https://github.com/homarr-labs/homarr/commit/629359e3e44ddad880842cfd576edb514f80d61a))
-* **deps:** update mantine monorepo to ^8.3.11 ([#4822](https://github.com/homarr-labs/homarr/issues/4822)) ([0364e10](https://github.com/homarr-labs/homarr/commit/0364e102cd6c0f560bc49e0b9ccd71df0b75eed6))
-* **deps:** update mantine monorepo to ^8.3.12 ([#4848](https://github.com/homarr-labs/homarr/issues/4848)) ([275a346](https://github.com/homarr-labs/homarr/commit/275a346afaaebfa894ef2193f70966986a138dbb))
-* **deps:** update tiptap monorepo to v3.15.0 ([#4832](https://github.com/homarr-labs/homarr/issues/4832)) ([ab3ee4f](https://github.com/homarr-labs/homarr/commit/ab3ee4f78a739bdb3b49a81652420df6ec143b62))
-* **deps:** update tiptap monorepo to v3.15.1 ([#4838](https://github.com/homarr-labs/homarr/issues/4838)) ([d479b63](https://github.com/homarr-labs/homarr/commit/d479b63a803f2295ccdf20fcd31c418a4aab148c))
-* **deps:** update tiptap monorepo to v3.15.2 ([#4842](https://github.com/homarr-labs/homarr/issues/4842)) ([55c2666](https://github.com/homarr-labs/homarr/commit/55c2666f9d27ca34b6d028070f0d7b84e4c40e97))
-* **deps:** update tiptap monorepo to v3.15.3 ([#4843](https://github.com/homarr-labs/homarr/issues/4843)) ([b26cf0e](https://github.com/homarr-labs/homarr/commit/b26cf0e65fd8150e241465628df2cb8b5a72088e))
-* **deps:** update turbo monorepo to ^2.7.3 ([#4831](https://github.com/homarr-labs/homarr/issues/4831)) ([50410fe](https://github.com/homarr-labs/homarr/commit/50410fedb3f33ed131f923257e61ae2dca4e0288))
-
-## [1.50.0](https://github.com/homarr-labs/homarr/compare/v1.49.1...v1.50.0) (2026-01-09)
-
-### Features
-
-* **auth:** extend API key authentication to tRPC endpoints ([#4732](https://github.com/homarr-labs/homarr/issues/4732)) ([0dc61a8](https://github.com/homarr-labs/homarr/commit/0dc61a88b8d12c61fd436adf0693c9fa5087a8c0))
-* **users:** add libravatar / gravatar support ([#4277](https://github.com/homarr-labs/homarr/issues/4277)) ([a2a3412](https://github.com/homarr-labs/homarr/commit/a2a34124ae11b0b9242b9c2579f7376768d35d52))
-
-### Bug Fixes
-
-* **deps:** update dependency @tabler/icons-react to ^3.36.0 ([#4707](https://github.com/homarr-labs/homarr/issues/4707)) ([35e0198](https://github.com/homarr-labs/homarr/commit/35e0198b5df2a315ea2efb584752c5af062f960d))
-* **deps:** update dependency @tabler/icons-react to ^3.36.1 ([#4812](https://github.com/homarr-labs/homarr/issues/4812)) ([dabb2bb](https://github.com/homarr-labs/homarr/commit/dabb2bb7821f6a68d41c4a931bb70c41fdd21a72))
-* **deps:** update dependency @tanstack/react-query to ^5.90.15 ([#4794](https://github.com/homarr-labs/homarr/issues/4794)) ([ea848bd](https://github.com/homarr-labs/homarr/commit/ea848bdd0bc1268675d00213bb86dc1d1b298162))
-* **deps:** update dependency @tanstack/react-query to ^5.90.16 ([#4799](https://github.com/homarr-labs/homarr/issues/4799)) ([413e846](https://github.com/homarr-labs/homarr/commit/413e846133f13a800f509273b8b87cf677f0024d))
-* **deps:** update dependency ldapts to v8.1.0 ([#4804](https://github.com/homarr-labs/homarr/issues/4804)) ([c8ecf5f](https://github.com/homarr-labs/homarr/commit/c8ecf5f0a13b1c74f24cebced76a60728eb2d543))
-* **deps:** update dependency ldapts to v8.1.2 ([#4805](https://github.com/homarr-labs/homarr/issues/4805)) ([9e63e34](https://github.com/homarr-labs/homarr/commit/9e63e3443af7946199999104024f00991cc1cba2))
-* **deps:** update dependency next-intl to v4.7.0 ([#4806](https://github.com/homarr-labs/homarr/issues/4806)) ([35042a7](https://github.com/homarr-labs/homarr/commit/35042a783ce5c381425bb96766adbefcac75bfdd))
-* **deps:** update dependency typescript-eslint to ^8.51.0 ([#4795](https://github.com/homarr-labs/homarr/issues/4795)) ([f0a2551](https://github.com/homarr-labs/homarr/commit/f0a2551fdf5b5e02ece789d473411ad3edcfb093))
-
-## [1.49.1](https://github.com/homarr-labs/homarr/compare/v1.49.0...v1.49.1) (2026-01-03)
-
-### Bug Fixes
-
-* **db:** connection issue do to missing host and name of db when connecting with host ([#4786](https://github.com/homarr-labs/homarr/issues/4786)) ([7d33225](https://github.com/homarr-labs/homarr/commit/7d3322576c3ed1b9917873bf707d77d2a4eef1a8))
-* **deps:** update dependency ldapts to v8.0.36 ([#4790](https://github.com/homarr-labs/homarr/issues/4790)) ([1842e5f](https://github.com/homarr-labs/homarr/commit/1842e5fff5c072c8da45a01be860e63d12d5062a))
-* **deps:** update dependency react-error-boundary to ^6.0.1 ([#4791](https://github.com/homarr-labs/homarr/issues/4791)) ([1b70973](https://github.com/homarr-labs/homarr/commit/1b70973084c9e9ebed34e8d7d9690a9e5530f60f))
-* **unraid:** temperature of disks can be null ([#4788](https://github.com/homarr-labs/homarr/issues/4788)) ([60f9d4e](https://github.com/homarr-labs/homarr/commit/60f9d4e6e69df2190171e5d8e263b2030447ab2e))
-
-## [1.49.0](https://github.com/homarr-labs/homarr/compare/v1.48.0...v1.49.0) (2026-01-02)
-
-### Features
-
-* unraid integration ([#4439](https://github.com/homarr-labs/homarr/issues/4439)) ([9b0dd6d](https://github.com/homarr-labs/homarr/commit/9b0dd6d6cebda4a541c8859506d89e9e9f782fa4))
-
-### Bug Fixes
-
-* add orphaned status for containers with invalid stats ([#4441](https://github.com/homarr-labs/homarr/issues/4441)) ([f04f537](https://github.com/homarr-labs/homarr/commit/f04f53759b6890d5d2dd683a9bf124d8ff12780b))
-* **deps:** update dependency @xterm/addon-fit to v0.11.0 ([#4756](https://github.com/homarr-labs/homarr/issues/4756)) ([1c727e5](https://github.com/homarr-labs/homarr/commit/1c727e59af4041e5e41da854633ccd3c030c1d18))
-* **deps:** update dependency @xterm/xterm to v6 ([#4757](https://github.com/homarr-labs/homarr/issues/4757)) ([fad478c](https://github.com/homarr-labs/homarr/commit/fad478c549cdbc616f921d9b444bff48b59e77a5))
-* **deps:** update dependency isomorphic-dompurify to ^2.35.0 ([#4779](https://github.com/homarr-labs/homarr/issues/4779)) ([236fa35](https://github.com/homarr-labs/homarr/commit/236fa35f7e0943be33bba153e7030ce4e3bb204e))
-* **deps:** update dependency jotai to ^2.16.1 ([#4772](https://github.com/homarr-labs/homarr/issues/4772)) ([d002700](https://github.com/homarr-labs/homarr/commit/d00270046a041a10c1c540cfa79c1eee477f3303))
-* **deps:** update dependency ldapts to v8.0.31 ([#4755](https://github.com/homarr-labs/homarr/issues/4755)) ([8b09693](https://github.com/homarr-labs/homarr/commit/8b096939e4e1da8e98791a8e05f108a136fe2810))
-* **deps:** update dependency ldapts to v8.0.32 ([#4762](https://github.com/homarr-labs/homarr/issues/4762)) ([49afb82](https://github.com/homarr-labs/homarr/commit/49afb8244615f67af0586aaacf77a509231ac6dc))
-* **deps:** update dependency ldapts to v8.0.34 ([#4765](https://github.com/homarr-labs/homarr/issues/4765)) ([809bf55](https://github.com/homarr-labs/homarr/commit/809bf559fe1b96df9a903dc790d138cad7368adb))
-* **deps:** update dependency ldapts to v8.0.35 ([#4768](https://github.com/homarr-labs/homarr/issues/4768)) ([e574dd7](https://github.com/homarr-labs/homarr/commit/e574dd70f1421e9254a289a0f02fd0b4d43e26ad))
-* **deps:** update dependency typescript-eslint to ^8.50.1 ([#4758](https://github.com/homarr-labs/homarr/issues/4758)) ([adaa803](https://github.com/homarr-labs/homarr/commit/adaa8039dd545109246ccd9fa15570739f755f62))
-* **deps:** update nextjs monorepo to v16.1.1 ([#4759](https://github.com/homarr-labs/homarr/issues/4759)) ([7712ab4](https://github.com/homarr-labs/homarr/commit/7712ab410b5094e5d84df75461e07efdfccc285b))
-* **deps:** update tanstack-query monorepo ([#4782](https://github.com/homarr-labs/homarr/issues/4782)) ([1e5d38f](https://github.com/homarr-labs/homarr/commit/1e5d38fd3ca4c68fa4c61b02757a3cff39839fdb))
-* **deps:** update testcontainers-node monorepo to ^11.11.0 ([#4781](https://github.com/homarr-labs/homarr/issues/4781)) ([e40a116](https://github.com/homarr-labs/homarr/commit/e40a11608cb21a75e6910028abf97e14b5275f56))
-* **deps:** update turbo monorepo to ^2.7.2 ([#4764](https://github.com/homarr-labs/homarr/issues/4764)) ([9191430](https://github.com/homarr-labs/homarr/commit/919143022969350f6ee7be2f53be2fe09a89bba3))
-
-## [1.48.0](https://github.com/homarr-labs/homarr/compare/v1.47.0...v1.48.0) (2025-12-26)
-
-### Features
-
-* enable dns caching by default ([#4706](https://github.com/homarr-labs/homarr/issues/4706)) ([fbb5298](https://github.com/homarr-labs/homarr/commit/fbb5298cb05b12eb2f19c121a1bc103caeb3e576))
-* **http:** add proxy support ([#4721](https://github.com/homarr-labs/homarr/issues/4721)) ([5a57115](https://github.com/homarr-labs/homarr/commit/5a57115ca073aea1c75a000fda6a23648c5488e4))
-
-### Bug Fixes
-
-* **deps:** update dependency @t3-oss/env-nextjs to ^0.13.10 ([#4710](https://github.com/homarr-labs/homarr/issues/4710)) ([689523a](https://github.com/homarr-labs/homarr/commit/689523a194ab48bdc072b1cdf65f07ade6cbc584))
-* **deps:** update dependency ldapts to v8.0.24 ([#4711](https://github.com/homarr-labs/homarr/issues/4711)) ([648f7e2](https://github.com/homarr-labs/homarr/commit/648f7e2c7743af81f4bced36b7e1e80c21e851e5))
-* **deps:** update dependency ldapts to v8.0.25 ([#4724](https://github.com/homarr-labs/homarr/issues/4724)) ([ef12b2b](https://github.com/homarr-labs/homarr/commit/ef12b2b5c2e1131138937fb6da61ce4c167fe0eb))
-* **deps:** update dependency ldapts to v8.0.27 ([#4737](https://github.com/homarr-labs/homarr/issues/4737)) ([8891ac4](https://github.com/homarr-labs/homarr/commit/8891ac42399e47fda6efc657b8ff2fe58aebca9e))
-* **deps:** update dependency ldapts to v8.0.28 ([#4743](https://github.com/homarr-labs/homarr/issues/4743)) ([75c5453](https://github.com/homarr-labs/homarr/commit/75c545344aae39550917331458c01a894b6a942f))
-* **deps:** update dependency ldapts to v8.0.29 ([#4747](https://github.com/homarr-labs/homarr/issues/4747)) ([5dd7400](https://github.com/homarr-labs/homarr/commit/5dd74006843ae72f63e631b14f0fd50c911d610b))
-* **deps:** update dependency ldapts to v8.0.30 ([#4749](https://github.com/homarr-labs/homarr/issues/4749)) ([96c2c0d](https://github.com/homarr-labs/homarr/commit/96c2c0d604737c64722fa21bf79965c806bf4da3))
-* **deps:** update dependency mysql2 to v3.16.0 ([#4731](https://github.com/homarr-labs/homarr/issues/4731)) ([f34bdce](https://github.com/homarr-labs/homarr/commit/f34bdce6446d4e62b54b96f63e91cfdddd51e901))
-* **deps:** update dependency next-intl to v4.6.1 ([#4730](https://github.com/homarr-labs/homarr/issues/4730)) ([f4d782a](https://github.com/homarr-labs/homarr/commit/f4d782abefb78e085ca3fc66034c0ca54fb21120))
-* **deps:** update dependency sass to ^1.97.0 ([#4726](https://github.com/homarr-labs/homarr/issues/4726)) ([88baad8](https://github.com/homarr-labs/homarr/commit/88baad8143f4ca830e50644d6bd1d1980ef1da82))
-* **deps:** update dependency sass to ^1.97.1 ([#4746](https://github.com/homarr-labs/homarr/issues/4746)) ([6b774f4](https://github.com/homarr-labs/homarr/commit/6b774f47d0a8bf731e7e1837a9d47e0dc53a1ff0))
-* **deps:** update dependency typescript-eslint to ^8.50.0 ([#4720](https://github.com/homarr-labs/homarr/issues/4720)) ([2dc8fea](https://github.com/homarr-labs/homarr/commit/2dc8feae7ea6174a1d826d8f0151ddc2c04c6aa6))
-* **deps:** update dependency zod to ^4.2.0 ([#4712](https://github.com/homarr-labs/homarr/issues/4712)) ([6e39524](https://github.com/homarr-labs/homarr/commit/6e39524f9d28d201c13738212d238726e1685832))
-* **deps:** update dependency zod to ^4.2.1 ([#4722](https://github.com/homarr-labs/homarr/issues/4722)) ([68dc684](https://github.com/homarr-labs/homarr/commit/68dc6844fdee53aca55b44dd7d19bf9d3a35c057))
-* **deps:** update nextjs monorepo to v16.1.0 ([#4739](https://github.com/homarr-labs/homarr/issues/4739)) ([99f2842](https://github.com/homarr-labs/homarr/commit/99f2842a5a102056c76ddc68cb5083791f324c3c))
-* **deps:** update tiptap monorepo to v3.14.0 ([#4744](https://github.com/homarr-labs/homarr/issues/4744)) ([adbe707](https://github.com/homarr-labs/homarr/commit/adbe707c73f462771c3d21cbbcc21e8245eea6f3))
-* **deps:** update trpc monorepo to ^11.8.1 ([#4750](https://github.com/homarr-labs/homarr/issues/4750)) ([93bf9ab](https://github.com/homarr-labs/homarr/commit/93bf9ab84b5387eefb8cc0b03057a4ccf0b13aa9))
-* **deps:** update turbo monorepo to ^2.7.0 ([#4745](https://github.com/homarr-labs/homarr/issues/4745)) ([5d659a3](https://github.com/homarr-labs/homarr/commit/5d659a3ebbf79266158cb57236de90e7883e7a4e))
-* **deps:** update turbo monorepo to ^2.7.1 ([#4751](https://github.com/homarr-labs/homarr/issues/4751)) ([d8db016](https://github.com/homarr-labs/homarr/commit/d8db0169a142c2ec302806fe946cb17431ccae6b))
-
-## [1.47.0](https://github.com/homarr-labs/homarr/compare/v1.46.0...v1.47.0) (2025-12-19)
-
-### Features
-
-* [#4452](https://github.com/homarr-labs/homarr/issues/4452) improve calendar design ([#4461](https://github.com/homarr-labs/homarr/issues/4461)) ([08e9f7d](https://github.com/homarr-labs/homarr/commit/08e9f7d8d85475788534b46e6cceb40a7231c09d))
-
-### Bug Fixes
-
-* **boards:** selection menu not shown to users without change access ([#4689](https://github.com/homarr-labs/homarr/issues/4689)) ([a0a11e3](https://github.com/homarr-labs/homarr/commit/a0a11e35707513fee45551e09c26ff633f636c32))
-* **deps:** update dependency dns-caching to ^0.2.9 ([#4648](https://github.com/homarr-labs/homarr/issues/4648)) ([6deab2e](https://github.com/homarr-labs/homarr/commit/6deab2ecec2dc4f5192b53213cb755a9853eb7c0))
-* **deps:** update dependency drizzle-orm to ^0.45.1 ([#4663](https://github.com/homarr-labs/homarr/issues/4663)) ([f635009](https://github.com/homarr-labs/homarr/commit/f63500961f11589a972a41dde9e4117b1f25141c))
-* **deps:** update dependency fast-xml-parser to ^5.3.3 ([#4683](https://github.com/homarr-labs/homarr/issues/4683)) ([611b65e](https://github.com/homarr-labs/homarr/commit/611b65e8bd420aaad580bf35071b651093623c95))
-* **deps:** update dependency isomorphic-dompurify to ^2.34.0 ([#4650](https://github.com/homarr-labs/homarr/issues/4650)) ([5d5c18b](https://github.com/homarr-labs/homarr/commit/5d5c18b3649d5fa1b2b933d443ccd5abcbb84e3a))
-* **deps:** update dependency jotai to ^2.16.0 ([#4655](https://github.com/homarr-labs/homarr/issues/4655)) ([4aef85b](https://github.com/homarr-labs/homarr/commit/4aef85ba60f4978da5a0b13c08e1799949fe4497))
-* **deps:** update dependency ldapts to v8.0.16 ([#4640](https://github.com/homarr-labs/homarr/issues/4640)) ([ada5597](https://github.com/homarr-labs/homarr/commit/ada5597cf3ab0bafb04e9176b431d257b36d1dc8))
-* **deps:** update dependency ldapts to v8.0.17 ([#4642](https://github.com/homarr-labs/homarr/issues/4642)) ([c09da85](https://github.com/homarr-labs/homarr/commit/c09da85f3a8450a70991ff0656228a9aa1364f89))
-* **deps:** update dependency ldapts to v8.0.18 ([#4653](https://github.com/homarr-labs/homarr/issues/4653)) ([4bd142e](https://github.com/homarr-labs/homarr/commit/4bd142e09c666cc84c67c93e2202e571565b766c))
-* **deps:** update dependency ldapts to v8.0.19 ([#4669](https://github.com/homarr-labs/homarr/issues/4669)) ([8ed771d](https://github.com/homarr-labs/homarr/commit/8ed771d30073809b08a6ace2c29b3de2675e37d1))
-* **deps:** update dependency ldapts to v8.0.20 ([#4684](https://github.com/homarr-labs/homarr/issues/4684)) ([703c8cc](https://github.com/homarr-labs/homarr/commit/703c8ccc060bb1775a72f405da1e169926b1ce5d))
-* **deps:** update dependency ldapts to v8.0.21 ([#4695](https://github.com/homarr-labs/homarr/issues/4695)) ([7f6eaa0](https://github.com/homarr-labs/homarr/commit/7f6eaa0b1f397a37b6acd15e0ccfea75ee2e0161))
-* **deps:** update dependency ldapts to v8.0.22 ([#4700](https://github.com/homarr-labs/homarr/issues/4700)) ([391d725](https://github.com/homarr-labs/homarr/commit/391d725191563ba5048593c14baf077a924cea44))
-* **deps:** update dependency ldapts to v8.0.23 ([#4701](https://github.com/homarr-labs/homarr/issues/4701)) ([db337b2](https://github.com/homarr-labs/homarr/commit/db337b2525762c96acd815bd4fdacfaabff5f0cf))
-* **deps:** update dependency next-intl to v4.6.0 ([#4691](https://github.com/homarr-labs/homarr/issues/4691)) ([1ff6fac](https://github.com/homarr-labs/homarr/commit/1ff6fac71bb9187d0eb703a7b6543daf8861efe8))
-* **deps:** update dependency sass to ^1.94.3 ([#4646](https://github.com/homarr-labs/homarr/issues/4646)) ([7e91d12](https://github.com/homarr-labs/homarr/commit/7e91d12439826eee76f118448c583294c3c46b42))
-* **deps:** update dependency sass to ^1.95.0 ([#4647](https://github.com/homarr-labs/homarr/issues/4647)) ([eb760da](https://github.com/homarr-labs/homarr/commit/eb760da8b30583575fb638995fc2f2acbd5b2961))
-* **deps:** update dependency sass to ^1.95.1 ([#4661](https://github.com/homarr-labs/homarr/issues/4661)) ([e327c66](https://github.com/homarr-labs/homarr/commit/e327c660b239840c4929f536eff3096342cc3433))
-* **deps:** update dependency sass to ^1.96.0 ([#4668](https://github.com/homarr-labs/homarr/issues/4668)) ([bdfc150](https://github.com/homarr-labs/homarr/commit/bdfc1501152450a1546962331037a6fc1c782e4e))
-* **deps:** update dependency swagger-ui-react to ^5.31.0 ([#4672](https://github.com/homarr-labs/homarr/issues/4672)) ([4d593f5](https://github.com/homarr-labs/homarr/commit/4d593f5b9d1f47ae2368f42131e8ef8d32f73fc9))
-* **deps:** update dependency typescript-eslint to ^8.49.0 ([#4645](https://github.com/homarr-labs/homarr/issues/4645)) ([220cb66](https://github.com/homarr-labs/homarr/commit/220cb669a13fead953ff42040b39e06d1dcc1fe2))
-* **deps:** update mantine monorepo to ^8.3.10 ([#4651](https://github.com/homarr-labs/homarr/issues/4651)) ([d0652f7](https://github.com/homarr-labs/homarr/commit/d0652f7cf5ac0e63a61adcfe43e53c4ed130e8fc))
-* **deps:** update react monorepo to v19.2.2 ([#4676](https://github.com/homarr-labs/homarr/issues/4676)) ([82e79f2](https://github.com/homarr-labs/homarr/commit/82e79f26274a289e1ce4f9331b6ba16f00f5a86c))
-* **deps:** update react monorepo to v19.2.3 ([#4680](https://github.com/homarr-labs/homarr/issues/4680)) ([4c71856](https://github.com/homarr-labs/homarr/commit/4c7185646d9d061d1aebf9194f9ef2f810fc3384))
-* **deps:** update testcontainers-node monorepo to ^11.10.0 ([#4659](https://github.com/homarr-labs/homarr/issues/4659)) ([c880ce9](https://github.com/homarr-labs/homarr/commit/c880ce9bd99a7056f20d450275fcbc37f9372f63))
-* **deps:** update trpc monorepo to ^11.8.0 ([#4697](https://github.com/homarr-labs/homarr/issues/4697)) ([1f44845](https://github.com/homarr-labs/homarr/commit/1f44845df489bb33bcfe943c6a05c0f157037ed6))
-* **downloads:** improve progress to only show 100 percent if fully completed ([#4621](https://github.com/homarr-labs/homarr/issues/4621)) ([1062745](https://github.com/homarr-labs/homarr/commit/10627453d5b5a17991bbe9b8d4bc23981b366c39))
-* **iframe-widget:** permission selection not applying to any origin ([#4616](https://github.com/homarr-labs/homarr/issues/4616)) ([479f083](https://github.com/homarr-labs/homarr/commit/479f083ab8ec405d1b8296b32a20262f6192a1f9))
-* **invites:** creation with custom expiration not working ([#4677](https://github.com/homarr-labs/homarr/issues/4677)) ([423da9e](https://github.com/homarr-labs/homarr/commit/423da9eeb88510a123bdd2447dc97b54c5f1dec4))
-* reference to prebuilt-debian action does not work ([47d7458](https://github.com/homarr-labs/homarr/commit/47d7458143d8801947cae1985745fa827b247dd1))
-* **stock-price:** use previous-close for change calculation ([#4674](https://github.com/homarr-labs/homarr/issues/4674)) ([17fc7a0](https://github.com/homarr-labs/homarr/commit/17fc7a043b4adbed9f14408e23c95ec5fba0c8b8))
-* **tdarr:** array parse error ([#4678](https://github.com/homarr-labs/homarr/issues/4678)) ([d86af07](https://github.com/homarr-labs/homarr/commit/d86af072bf136d76b02f3efa2c15520a4f63974e))
-
 ## [1.46.0](https://github.com/homarr-labs/homarr/compare/v1.45.3...v1.46.0) (2025-12-12)
 
 ### Features

CODEOWNERS

@@ -1,9 +1 @@
-# ── CODEOWNERS ───────────────────────────────────────
 * @homarr-labs/maintainers
-
-# Exempt Renovate‑managed files (no owners)
-package.json
-package-lock.json
-pnpm-lock.yaml
-Dockerfile
-docker-compose.yml

Dockerfile

@@ -45,6 +45,7 @@ COPY --from=builder /app/apps/nextjs/package.json .
 
 COPY --from=builder /app/apps/tasks/tasks.cjs ./apps/tasks/tasks.cjs
 COPY --from=builder /app/apps/websocket/wssServer.cjs ./apps/websocket/wssServer.cjs
+COPY --from=builder /app/node_modules/better-sqlite3/build/Release/better_sqlite3.node /app/build/better_sqlite3.node
 
 COPY --from=builder /app/packages/db/migrations ./db/migrations
 

apps/nextjs/package.json

@@ -23,6 +23,7 @@
     "@homarr/api": "workspace:^0.1.0",
     "@homarr/auth": "workspace:^0.1.0",
     "@homarr/boards": "workspace:^0.1.0",
+    "@homarr/certificates": "workspace:^0.1.0",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/cron-job-status": "workspace:^0.1.0",
@@ -48,24 +49,24 @@
     "@homarr/ui": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@homarr/widgets": "workspace:^0.1.0",
-    "@mantine/colors-generator": "^8.3.12",
-    "@mantine/core": "^8.3.12",
-    "@mantine/dropzone": "^8.3.12",
-    "@mantine/hooks": "^8.3.12",
-    "@mantine/modals": "^8.3.12",
-    "@mantine/tiptap": "^8.3.12",
+    "@mantine/colors-generator": "^8.3.10",
+    "@mantine/core": "^8.3.10",
+    "@mantine/dropzone": "^8.3.10",
+    "@mantine/hooks": "^8.3.10",
+    "@mantine/modals": "^8.3.10",
+    "@mantine/tiptap": "^8.3.10",
     "@million/lint": "1.0.14",
-    "@tabler/icons-react": "^3.36.1",
-    "@tanstack/react-query": "^5.90.16",
-    "@tanstack/react-query-devtools": "^5.91.2",
+    "@tabler/icons-react": "^3.35.0",
+    "@tanstack/react-query": "^5.90.12",
+    "@tanstack/react-query-devtools": "^5.91.1",
     "@tanstack/react-query-next-experimental": "^5.91.0",
-    "@trpc/client": "^11.8.1",
-    "@trpc/next": "^11.8.1",
-    "@trpc/react-query": "^11.8.1",
-    "@trpc/server": "^11.8.1",
+    "@trpc/client": "^11.8.0",
+    "@trpc/next": "^11.8.0",
+    "@trpc/react-query": "^11.8.0",
+    "@trpc/server": "^11.8.0",
     "@xterm/addon-canvas": "^0.7.0",
-    "@xterm/addon-fit": "0.11.0",
-    "@xterm/xterm": "^6.0.0",
+    "@xterm/addon-fit": "0.10.0",
+    "@xterm/xterm": "^5.5.0",
     "babel-plugin-react-compiler": "^1.0.0",
     "chroma-js": "^3.2.0",
     "clsx": "^2.1.1",
@@ -73,30 +74,31 @@
     "dotenv": "^17.2.3",
     "flag-icons": "^7.5.0",
     "glob": "^13.0.0",
-    "isomorphic-dompurify": "^2.35.0",
-    "jotai": "^2.16.1",
+    "isomorphic-dompurify": "^2.34.0",
+    "jotai": "^2.16.0",
     "mantine-react-table": "2.0.0-beta.9",
-    "next": "16.1.1",
+    "next": "16.0.10",
     "postcss-preset-mantine": "^1.18.0",
     "prismjs": "^1.30.0",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "react-error-boundary": "^6.0.3",
+    "react-error-boundary": "^6.0.0",
+    "react-joyride": "^2.9.3",
     "react-simple-code-editor": "^0.14.1",
-    "sass": "^1.97.2",
+    "sass": "^1.96.0",
     "superjson": "2.2.6",
     "swagger-ui-react": "^5.31.0",
     "use-deep-compare-effect": "^1.8.1",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/chroma-js": "3.1.2",
-    "@types/node": "^24.10.7",
+    "@types/node": "^24.10.4",
     "@types/prismjs": "^1.26.5",
-    "@types/react": "19.2.8",
+    "@types/react": "19.2.7",
     "@types/react-dom": "19.2.3",
     "@types/swagger-ui-react": "^5.18.0",
     "concurrently": "^9.2.1",

apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx

@@ -44,7 +44,7 @@ export const BoardContentHeaderActions = () => {
   const { hasChangeAccess } = useBoardPermissions(board);
 
   if (!hasChangeAccess) {
-    return <SelectBoardsMenu />;
+    return null; // Hide actions for user without access
   }
 
   return (

apps/nextjs/src/app/[locale]/layout.tsx

@@ -106,7 +106,6 @@ export default async function Layout(props: {
             forceDisableStatus: serverSettings.board.forceDisableStatus,
           },
           search: { defaultSearchEngineId: serverSettings.search.defaultSearchEngineId },
-          user: { enableGravatar: serverSettings.user.enableGravatar },
         }}
         {...innerProps}
       />

apps/nextjs/src/app/[locale]/manage/help/tours/page.tsx

@@ -0,0 +1,38 @@
+import { auth } from "@homarr/auth/next";
+import { getScopedI18n } from "@homarr/translation/server";
+import { createMetaTitle } from "~/metadata";
+import { ManageContainer } from "~/components/manage/manage-container";
+import { DynamicBreadcrumb } from "~/components/navigation/dynamic-breadcrumb";
+import { Title, SimpleGrid, Card } from "@mantine/core";
+
+export async function generateMetadata() {
+  const session = await auth();
+  if (!session?.user || !session.user.permissions.includes("admin")) {
+    return {};
+  }
+
+  const t = await getScopedI18n("management");
+
+  return {
+    title: createMetaTitle(t("metaTitle")),
+  };
+}
+
+export default async function ToursPage() {
+  const t = await getScopedI18n("tours");
+  return (
+    <ManageContainer>
+      <DynamicBreadcrumb/>
+      <Title>{t("page.title")}</Title>
+
+      <SimpleGrid cols={{ base: 1, sm: 2, lg: 5 }}>
+        <Card></Card>
+        <Card></Card>
+        <Card></Card>
+        <Card></Card>
+        <Card></Card>
+        <Card></Card>
+      </SimpleGrid>
+    </ManageContainer>
+  )
+}

apps/nextjs/src/app/[locale]/manage/layout.tsx

@@ -23,6 +23,7 @@ import {
   IconUserFilled,
   IconUsers,
   IconUsersGroup,
+  IconMotorbikeFilled
 } from "@tabler/icons-react";
 
 import { auth } from "@homarr/auth/next";
@@ -158,6 +159,11 @@ export default async function ManageLayout({ children }: PropsWithChildren) {
       label: t("items.help.label"),
       icon: IconHelpSquareRoundedFilled,
       items: [
+        {
+          label: t("items.help.items.tours"),
+          icon: IconMotorbikeFilled,
+          href: "/manage/help/tours"
+        },
         {
           label: t("items.help.items.documentation"),
           icon: IconBook2,

apps/nextjs/src/app/[locale]/manage/settings/_components/user-settings-form.tsx

@@ -1,26 +0,0 @@
-"use client";
-
-import { Switch } from "@mantine/core";
-
-import type { ServerSettings } from "@homarr/server-settings";
-import { useScopedI18n } from "@homarr/translation/client";
-
-import { CommonSettingsForm } from "./common-form";
-
-export const UserSettingsForm = ({ defaultValues }: { defaultValues: ServerSettings["user"] }) => {
-  const tUser = useScopedI18n("management.page.settings.section.user");
-
-  return (
-    <CommonSettingsForm settingKey="user" defaultValues={defaultValues}>
-      {(form) => (
-        <>
-          <Switch
-            {...form.getInputProps("enableGravatar", { type: "checkbox" })}
-            label={tUser("enableGravatar.label")}
-            description={tUser("enableGravatar.description")}
-          />
-        </>
-      )}
-    </CommonSettingsForm>
-  );
-};

apps/nextjs/src/app/[locale]/manage/settings/page.tsx

@@ -12,7 +12,6 @@ import { AppearanceSettingsForm } from "./_components/appearance-settings-form";
 import { BoardSettingsForm } from "./_components/board-settings-form";
 import { CultureSettingsForm } from "./_components/culture-settings-form";
 import { SearchSettingsForm } from "./_components/search-settings-form";
-import { UserSettingsForm } from "./_components/user-settings-form";
 
 export async function generateMetadata() {
   const t = await getScopedI18n("management");
@@ -43,10 +42,6 @@ export default async function SettingsPage() {
           <Title order={2}>{tSettings("section.board.title")}</Title>
           <BoardSettingsForm defaultValues={serverSettings.board} />
         </Stack>
-        <Stack>
-          <Title order={2}>{tSettings("section.user.title")}</Title>
-          <UserSettingsForm defaultValues={serverSettings.user} />
-        </Stack>
         <Stack>
           <Title order={2}>{tSettings("section.search.title")}</Title>
           <SearchSettingsForm defaultValues={serverSettings.search} />

apps/nextjs/src/app/[locale]/manage/tools/certificates/hostnames/page.tsx

@@ -16,7 +16,7 @@ import {
 import { IconCertificateOff } from "@tabler/icons-react";
 
 import { auth } from "@homarr/auth/next";
-import { getTrustedCertificateHostnamesAsync } from "@homarr/core/infrastructure/certificates";
+import { getTrustedCertificateHostnamesAsync } from "@homarr/certificates/server";
 import { getI18n } from "@homarr/translation/server";
 import { Link } from "@homarr/ui";
 

apps/nextjs/src/app/[locale]/manage/tools/certificates/page.tsx

@@ -5,8 +5,8 @@ import { IconAlertTriangle, IconCertificate, IconCertificateOff } from "@tabler/
 import dayjs from "dayjs";
 
 import { auth } from "@homarr/auth/next";
+import { loadCustomRootCertificatesAsync } from "@homarr/certificates/server";
 import { getMantineColor } from "@homarr/common";
-import { loadCustomRootCertificatesAsync } from "@homarr/core/infrastructure/certificates";
 import type { SupportedLanguage } from "@homarr/translation";
 import { getI18n } from "@homarr/translation/server";
 import { Link } from "@homarr/ui";

apps/nextjs/src/app/[locale]/manage/tools/docker/docker-table.tsx

@@ -76,7 +76,6 @@ const createColumns = (
     accessorKey: "ports",
     header: t("docker.field.ports.label"),
     Cell({ cell }) {
-      if (!cell.row.original.ports.length) return null;
       return (
         <OverflowBadge overflowCount={1} data={cell.row.original.ports.map((port) => port.PrivatePort.toString())} />
       );

apps/nextjs/src/app/[locale]/manage/users/create/_components/create-user-stepper.tsx

@@ -200,10 +200,7 @@ export const UserCreateStepperComponent = ({ initialGroups }: UserCreateStepperC
         <Stepper.Step label={t("step.review.label")} allowStepSelect={false} allowStepClick={false}>
           <Card p="xl" shadow="md" withBorder>
             <Stack maw={300} align="center" mx="auto">
-              <UserAvatar
-                size="xl"
-                user={{ name: generalForm.values.username, email: generalForm.values.email ?? null, image: null }}
-              />
+              <UserAvatar size="xl" user={{ name: generalForm.values.username, image: null }} />
               <Text tt="uppercase" fw="bolder" size="xl">
                 {generalForm.values.username}
               </Text>

apps/nextjs/src/app/[locale]/manage/users/groups/[id]/page.tsx

@@ -44,7 +44,7 @@ export default async function GroupsDetailPage(props: GroupsDetailPageProps) {
       <Card>
         {group.owner ? (
           <Group>
-            <UserAvatar user={group.owner} size={"lg"} />
+            <UserAvatar user={{ name: group.owner.name, image: group.owner.image }} size={"lg"} />
             <Stack align={"start"} gap={3}>
               <Text fw={"bold"}>{group.owner.name}</Text>
               <Text>{group.owner.email}</Text>

apps/nextjs/src/app/api/[...trpc]/route.ts

@@ -3,24 +3,21 @@ import { userAgent } from "next/server";
 import { createOpenApiFetchHandler } from "trpc-to-openapi";
 
 import { appRouter, createTRPCContext } from "@homarr/api";
-import { API_KEY_HEADER_NAME, getSessionFromApiKeyAsync } from "@homarr/auth/api-key";
-import { ipAddressFromHeaders } from "@homarr/common/server";
+import type { Session } from "@homarr/auth";
+import { hashPasswordAsync } from "@homarr/auth";
+import { createSessionAsync } from "@homarr/auth/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import { db } from "@homarr/db";
+import { db, eq } from "@homarr/db";
+import { apiKeys } from "@homarr/db/schema";
 
 const logger = createLogger({ module: "trpcOpenApiRoute" });
 
 const handlerAsync = async (req: NextRequest) => {
-  const apiKeyHeaderValue = req.headers.get(API_KEY_HEADER_NAME);
-  const ipAddress = ipAddressFromHeaders(req.headers);
+  const apiKeyHeaderValue = req.headers.get("ApiKey");
+  const ipAddress = req.headers.get("x-forwarded-for");
   const { ua } = userAgent(req);
-
-  logger.info(
-    `Creating OpenAPI fetch handler for user ${apiKeyHeaderValue ? "with an api key" : "without an api key"}`,
-  );
-
-  const session = await getSessionFromApiKeyAsync(db, apiKeyHeaderValue, ipAddress, ua);
+  const session: Session | null = await getSessionOrDefaultFromHeadersAsync(apiKeyHeaderValue, ipAddress, ua);
 
   // Fallback to JSON if no content type is set
   if (!req.headers.has("Content-Type")) {
@@ -38,6 +35,67 @@ const handlerAsync = async (req: NextRequest) => {
   });
 };
 
+const getSessionOrDefaultFromHeadersAsync = async (
+  apiKeyHeaderValue: string | null,
+  ipAdress: string | null,
+  userAgent: string,
+): Promise<Session | null> => {
+  logger.info(
+    `Creating OpenAPI fetch handler for user ${apiKeyHeaderValue ? "with an api key" : "without an api key"}`,
+  );
+
+  if (apiKeyHeaderValue === null) {
+    return null;
+  }
+
+  const [apiKeyId, apiKey] = apiKeyHeaderValue.split(".");
+
+  if (!apiKeyId || !apiKey) {
+    logger.warn("An attempt to authenticate over API has failed due to invalid API key format", {
+      ipAdress,
+      userAgent,
+    });
+    return null;
+  }
+
+  const apiKeyFromDb = await db.query.apiKeys.findFirst({
+    where: eq(apiKeys.id, apiKeyId),
+    columns: {
+      id: true,
+      apiKey: true,
+      salt: true,
+    },
+    with: {
+      user: {
+        columns: {
+          id: true,
+          name: true,
+          email: true,
+          emailVerified: true,
+        },
+      },
+    },
+  });
+
+  if (!apiKeyFromDb) {
+    logger.warn("An attempt to authenticate over API has failed", { ipAdress, userAgent });
+    return null;
+  }
+
+  const hashedApiKey = await hashPasswordAsync(apiKey, apiKeyFromDb.salt);
+
+  if (apiKeyFromDb.apiKey !== hashedApiKey) {
+    logger.warn("An attempt to authenticate over API has failed", { ipAdress, userAgent });
+    return null;
+  }
+
+  logger.info("Read session from API request and found user", {
+    name: apiKeyFromDb.user.name,
+    id: apiKeyFromDb.user.id,
+  });
+  return await createSessionAsync(db, apiKeyFromDb.user);
+};
+
 export {
   handlerAsync as DELETE,
   handlerAsync as GET,

apps/nextjs/src/app/api/trpc/[trpc]/route.ts

@@ -1,14 +1,10 @@
-import { userAgent } from "next/server";
 import { fetchRequestHandler } from "@trpc/server/adapters/fetch";
 
 import { appRouter, createTRPCContext } from "@homarr/api";
 import { trpcPath } from "@homarr/api/shared";
-import { API_KEY_HEADER_NAME, getSessionFromApiKeyAsync } from "@homarr/auth/api-key";
 import { auth } from "@homarr/auth/next";
-import { ipAddressFromHeaders } from "@homarr/common/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import { db } from "@homarr/db";
 
 const logger = createLogger({ module: "trpcRoute" });
 
@@ -32,20 +28,11 @@ export function OPTIONS() {
 }
 
 const handler = auth(async (req) => {
-  // Try API key auth first, fall back to session cookie
-  const apiKeyHeader = req.headers.get(API_KEY_HEADER_NAME);
-  const ipAddress = ipAddressFromHeaders(req.headers);
-
-  const { ua } = userAgent(req);
-
-  const apiKeySession = await getSessionFromApiKeyAsync(db, apiKeyHeader, ipAddress, ua);
-  const session = apiKeySession ?? req.auth;
-
   const response = await fetchRequestHandler({
     endpoint: trpcPath,
     router: appRouter,
     req,
-    createContext: () => createTRPCContext({ session, headers: req.headers }),
+    createContext: () => createTRPCContext({ session: req.auth, headers: req.headers }),
     onError({ error, path, type }) {
       logger.error(new ErrorWithMetadata("tRPC Error occured", { path, type }, { cause: error }));
     },

apps/nextjs/src/components/access/access-settings.tsx

@@ -26,7 +26,6 @@ interface UserAccessPermission<TPermission extends string> {
   user: {
     name: string | null;
     image: string | null;
-    email: string | null;
     id: string;
   };
 }
@@ -67,7 +66,6 @@ interface Props<TPermission extends string> {
       id: string;
       name: string | null;
       image: string | null;
-      email: string | null;
     } | null;
   };
   translate: (key: TPermission) => string;

apps/nextjs/src/components/access/context.tsx

@@ -1,6 +1,5 @@
 import { createContext, useContext } from "react";
-
-import type { TablerIcon } from "@homarr/ui";
+import type { TablerIcon } from "@tabler/icons-react";
 
 const AccessContext = createContext<{
   permissions: readonly string[];

apps/nextjs/src/components/access/user-access-form.tsx

@@ -21,7 +21,6 @@ export interface FormProps<TPermission extends string> {
       id: string;
       name: string | null;
       image: string | null;
-      email: string | null;
     } | null;
   };
   accessQueryData: AccessQueryData<TPermission>;
@@ -119,7 +118,6 @@ interface UserItemContentProps {
     id: string;
     name: string | null;
     image: string | null;
-    email: string | null;
   };
 }
 

apps/nextjs/src/components/access/user-select-modal.tsx

@@ -13,7 +13,7 @@ import { UserAvatar } from "@homarr/ui";
 interface InnerProps {
   presentUserIds: string[];
   excludeExternalProviders?: boolean;
-  onSelect: (props: { id: string; name: string; image: string; email: string | null }) => void | Promise<void>;
+  onSelect: (props: { id: string; name: string; image: string }) => void | Promise<void>;
   confirmLabel?: string;
 }
 
@@ -36,7 +36,6 @@ export const UserSelectModal = createModal<InnerProps>(({ actions, innerProps })
       id: currentUser.id,
       name: currentUser.name ?? "",
       image: currentUser.image ?? "",
-      email: currentUser.email ?? null,
     });
 
     setLoading(false);

apps/nextjs/src/components/board/items/actions/test/mocks/board-mock.ts

@@ -34,7 +34,6 @@ export class BoardMockBuilder {
         id: createId(),
         image: null,
         name: "User",
-        email: null,
       },
       groupPermissions: [],
       userPermissions: [],

apps/nextjs/src/components/no-results.tsx

@@ -1,6 +1,5 @@
 import { Anchor, Card, Stack, Text } from "@mantine/core";
-
-import type { TablerIcon } from "@homarr/ui";
+import type { TablerIcon } from "@tabler/icons-react";
 
 interface NoResultsProps {
   icon: TablerIcon;

apps/nextjs/src/components/user-avatar.tsx

@@ -3,21 +3,17 @@ import type { MantineSize } from "@mantine/core";
 import { auth } from "@homarr/auth/next";
 import { UserAvatar } from "@homarr/ui";
 
-interface CurrentUserAvatarProps {
+interface UserAvatarProps {
   size: MantineSize;
 }
 
-export const CurrentUserAvatar = async ({ size }: CurrentUserAvatarProps) => {
+export const CurrentUserAvatar = async ({ size }: UserAvatarProps) => {
   const currentSession = await auth();
 
-  return (
-    <UserAvatar
-      user={{
-        name: currentSession?.user.name ?? null,
-        image: currentSession?.user.image ?? null,
-        email: currentSession?.user.email ?? null,
-      }}
-      size={size}
-    />
-  );
+  const user = {
+    name: currentSession?.user.name ?? null,
+    image: currentSession?.user.image ?? null,
+  };
+
+  return <UserAvatar user={user} size={size} />;
 };

apps/tasks/package.json

@@ -41,15 +41,15 @@
     "dotenv": "^17.2.3",
     "fastify": "^5.6.2",
     "superjson": "2.2.6",
-    "undici": "7.18.2"
+    "undici": "7.16.0"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/node": "^24.10.7",
+    "@types/node": "^24.10.4",
     "dotenv-cli": "^11.0.0",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "prettier": "^3.7.4",
     "tsx": "4.20.4",

apps/tasks/src/overrides.ts

@@ -1,5 +1,6 @@
 import { setGlobalDispatcher } from "undici";
 
-import { UndiciHttpAgent } from "@homarr/core/infrastructure/http";
+import { LoggingAgent } from "@homarr/common/server";
 
-setGlobalDispatcher(new UndiciHttpAgent());
+const agent = new LoggingAgent();
+setGlobalDispatcher(agent);

apps/websocket/package.json

@@ -27,14 +27,14 @@
     "@homarr/validation": "workspace:^0.1.0",
     "dotenv": "^17.2.3",
     "tsx": "4.20.4",
-    "ws": "^8.19.0"
+    "ws": "^8.18.3"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/ws": "^8.18.1",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "prettier": "^3.7.4",
     "typescript": "^5.9.3"

deployments/prebuilt-debian/Dockerfile

@@ -0,0 +1,6 @@
+FROM node:24.12.0-trixie AS base
+WORKDIR /app
+COPY package.json .
+COPY pnpm-lock.yaml .
+RUN corepack enable pnpm && pnpm install --frozen-lockfile
+CMD ["sleep", "60s"]

deployments/prebuilt-debian/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "homarr-prebuilt-debian",
+  "private": true,
+  "dependencies": {
+    "better-sqlite3": "^12.5.0"
+  },
+  "packageManager": "pnpm@10.25.0",
+  "engines": {
+    "node": ">=24.12.0",
+    "pnpm": ">=10.25.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "better-sqlite3"
+    ]
+  }
+}

deployments/prebuilt-debian/pnpm-lock.yaml

@@ -0,0 +1,286 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      better-sqlite3:
+        specifier: ^12.5.0
+        version: 12.5.0
+
+packages:
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  better-sqlite3@12.5.0:
+    resolution: {integrity: sha512-WwCZ/5Diz7rsF29o27o0Gcc1Du+l7Zsv7SYtVPG0X3G/uUI1LqdxrQI7c9Hs2FWpqXXERjW9hp6g3/tH7DlVKg==}
+    engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x}
+
+  bindings@1.5.0:
+    resolution: {integrity: sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==}
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  chownr@1.1.4:
+    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
+
+  decompress-response@6.0.0:
+    resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
+    engines: {node: '>=10'}
+
+  deep-extend@0.6.0:
+    resolution: {integrity: sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==}
+    engines: {node: '>=4.0.0'}
+
+  detect-libc@2.1.2:
+    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
+    engines: {node: '>=8'}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  expand-template@2.0.3:
+    resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
+    engines: {node: '>=6'}
+
+  file-uri-to-path@1.0.0:
+    resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
+
+  fs-constants@1.0.0:
+    resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
+
+  github-from-package@0.0.0:
+    resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  ini@1.3.8:
+    resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
+
+  mimic-response@3.1.0:
+    resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
+    engines: {node: '>=10'}
+
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
+
+  mkdirp-classic@0.5.3:
+    resolution: {integrity: sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==}
+
+  napi-build-utils@2.0.0:
+    resolution: {integrity: sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==}
+
+  node-abi@3.85.0:
+    resolution: {integrity: sha512-zsFhmbkAzwhTft6nd3VxcG0cvJsT70rL+BIGHWVq5fi6MwGrHwzqKaxXE+Hl2GmnGItnDKPPkO5/LQqjVkIdFg==}
+    engines: {node: '>=10'}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  prebuild-install@7.1.3:
+    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  pump@3.0.3:
+    resolution: {integrity: sha512-todwxLMY7/heScKmntwQG8CXVkWUOdYxIvY2s0VWAAMh/nd8SoYiRaKjlr7+iCs984f2P8zvrfWcDDYVb73NfA==}
+
+  rc@1.2.8:
+    resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
+    hasBin: true
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  semver@7.7.3:
+    resolution: {integrity: sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  simple-concat@1.0.1:
+    resolution: {integrity: sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==}
+
+  simple-get@4.0.1:
+    resolution: {integrity: sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-json-comments@2.0.1:
+    resolution: {integrity: sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==}
+    engines: {node: '>=0.10.0'}
+
+  tar-fs@2.1.4:
+    resolution: {integrity: sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==}
+
+  tar-stream@2.2.0:
+    resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
+    engines: {node: '>=6'}
+
+  tunnel-agent@0.6.0:
+    resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+snapshots:
+
+  base64-js@1.5.1: {}
+
+  better-sqlite3@12.5.0:
+    dependencies:
+      bindings: 1.5.0
+      prebuild-install: 7.1.3
+
+  bindings@1.5.0:
+    dependencies:
+      file-uri-to-path: 1.0.0
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  chownr@1.1.4: {}
+
+  decompress-response@6.0.0:
+    dependencies:
+      mimic-response: 3.1.0
+
+  deep-extend@0.6.0: {}
+
+  detect-libc@2.1.2: {}
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  expand-template@2.0.3: {}
+
+  file-uri-to-path@1.0.0: {}
+
+  fs-constants@1.0.0: {}
+
+  github-from-package@0.0.0: {}
+
+  ieee754@1.2.1: {}
+
+  inherits@2.0.4: {}
+
+  ini@1.3.8: {}
+
+  mimic-response@3.1.0: {}
+
+  minimist@1.2.8: {}
+
+  mkdirp-classic@0.5.3: {}
+
+  napi-build-utils@2.0.0: {}
+
+  node-abi@3.85.0:
+    dependencies:
+      semver: 7.7.3
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  prebuild-install@7.1.3:
+    dependencies:
+      detect-libc: 2.1.2
+      expand-template: 2.0.3
+      github-from-package: 0.0.0
+      minimist: 1.2.8
+      mkdirp-classic: 0.5.3
+      napi-build-utils: 2.0.0
+      node-abi: 3.85.0
+      pump: 3.0.3
+      rc: 1.2.8
+      simple-get: 4.0.1
+      tar-fs: 2.1.4
+      tunnel-agent: 0.6.0
+
+  pump@3.0.3:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  rc@1.2.8:
+    dependencies:
+      deep-extend: 0.6.0
+      ini: 1.3.8
+      minimist: 1.2.8
+      strip-json-comments: 2.0.1
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  safe-buffer@5.2.1: {}
+
+  semver@7.7.3: {}
+
+  simple-concat@1.0.1: {}
+
+  simple-get@4.0.1:
+    dependencies:
+      decompress-response: 6.0.0
+      once: 1.4.0
+      simple-concat: 1.0.1
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-json-comments@2.0.1: {}
+
+  tar-fs@2.1.4:
+    dependencies:
+      chownr: 1.1.4
+      mkdirp-classic: 0.5.3
+      pump: 3.0.3
+      tar-stream: 2.2.0
+
+  tar-stream@2.2.0:
+    dependencies:
+      bl: 4.1.0
+      end-of-stream: 1.4.5
+      fs-constants: 1.0.0
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  tunnel-agent@0.6.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  util-deprecate@1.0.2: {}
+
+  wrappy@1.0.2: {}

docs/README.md

@@ -314,13 +314,6 @@
   <br/>  
   <p align="center">Unifi<br/>Controller</p>
 </a>
-</td>
-<td align="center">
-<a href="https://homarr.dev/docs/integrations/unraid" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg" alt="Unraid" width="90" height="90" />
-  <br/>  
-  <p align="center">Unraid</p>
-</a>
 </td></tr>
 </tbody>
 </table>

e2e/shared/e2e-db.ts

@@ -1,9 +1,9 @@
 import { mkdir } from "fs/promises";
 import path from "path";
-import { createClient } from "@libsql/client/node";
 import { createId } from "@paralleldrive/cuid2";
-import { drizzle, LibSQLDatabase } from "drizzle-orm/libsql";
-import { migrate } from "drizzle-orm/libsql/migrator";
+import Database from "better-sqlite3";
+import { BetterSQLite3Database, drizzle } from "drizzle-orm/better-sqlite3";
+import { migrate } from "drizzle-orm/better-sqlite3/migrator";
 
 import { DB_CASING } from "../../packages/core/src/infrastructure/db/constants";
 import * as sqliteSchema from "../../packages/db/schema/sqlite";
@@ -14,10 +14,7 @@ export const createSqliteDbFileAsync = async () => {
 
   const localDbUrl = path.join(localMountPath, "db", "db.sqlite");
 
-  const connection = createClient({
-    url: `file:${localDbUrl}`,
-  });
-
+  const connection = new Database(localDbUrl);
   const db = drizzle(connection, {
     schema: sqliteSchema,
     casing: DB_CASING,
@@ -33,4 +30,4 @@ export const createSqliteDbFileAsync = async () => {
   };
 };
 
-export type SqliteDatabase = LibSQLDatabase<typeof sqliteSchema>;
+export type SqliteDatabase = BetterSQLite3Database<typeof sqliteSchema>;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "homarr",
-  "version": "1.50.1",
+  "version": "1.46.0",
   "private": true,
   "scripts": {
     "build": "cross-env CI=true turbo build",
@@ -42,32 +42,33 @@
     "@semantic-release/github": "^12.0.2",
     "@semantic-release/npm": "^13.1.3",
     "@semantic-release/release-notes-generator": "^14.1.0",
-    "@testcontainers/redis": "^11.11.0",
-    "@turbo/gen": "^2.7.4",
+    "@testcontainers/redis": "^11.10.0",
+    "@turbo/gen": "^2.6.3",
     "@vitejs/plugin-react": "^5.1.2",
-    "@vitest/coverage-v8": "^4.0.17",
-    "@vitest/ui": "^4.0.17",
+    "@vitest/coverage-v8": "^4.0.15",
+    "@vitest/ui": "^4.0.15",
     "conventional-changelog-conventionalcommits": "^9.1.0",
     "cross-env": "^10.1.0",
-    "jsdom": "^27.4.0",
+    "jsdom": "^27.3.0",
     "json5": "^2.2.3",
     "prettier": "^3.7.4",
     "semantic-release": "^25.0.2",
-    "testcontainers": "^11.11.0",
-    "turbo": "^2.7.4",
+    "testcontainers": "^11.10.0",
+    "turbo": "^2.6.3",
     "typescript": "^5.9.3",
-    "vite-tsconfig-paths": "^6.0.4",
-    "vitest": "^4.0.17"
+    "vite-tsconfig-paths": "^5.1.4",
+    "vitest": "^4.0.15"
   },
-  "packageManager": "pnpm@10.28.0",
+  "packageManager": "pnpm@10.25.0",
   "engines": {
     "node": ">=24.12.0",
-    "pnpm": ">=10.28.0"
+    "pnpm": ">=10.25.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
       "@tree-sitter-grammars/tree-sitter-yaml",
       "bcrypt",
+      "better-sqlite3",
       "cpu-features",
       "esbuild",
       "sharp",
@@ -76,25 +77,25 @@
       "tree-sitter-json"
     ],
     "overrides": {
-      "@babel/helpers@<7.26.10": ">=7.28.6",
-      "@babel/runtime@<7.26.10": ">=7.28.6",
+      "@babel/helpers@<7.26.10": ">=7.28.4",
+      "@babel/runtime@<7.26.10": ">=7.28.4",
       "axios@>=1.0.0 <1.8.2": ">=1.13.2",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=4.0.1",
       "brace-expansion@>=1.0.0 <=1.1.11": ">=4.0.1",
-      "esbuild@<=0.24.2": ">=0.27.2",
+      "esbuild@<=0.24.2": ">=0.27.1",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
-      "hono@<4.6.5": ">=4.11.4",
+      "hono@<4.6.5": ">=4.11.0",
       "linkifyjs@<4.3.2": ">=4.3.2",
       "nanoid@>=4.0.0 <5.0.9": ">=5.1.6",
       "prismjs@<1.30.0": ">=1.30.0",
-      "proxmox-api>undici": "7.18.2",
+      "proxmox-api>undici": "7.16.0",
       "react-is": "^19.2.3",
-      "rollup@>=4.0.0 <4.22.4": ">=4.55.1",
+      "rollup@>=4.0.0 <4.22.4": ">=4.53.3",
       "sha.js@<=2.4.11": ">=2.4.12",
       "tar-fs@>=3.0.0 <3.0.9": ">=3.1.1",
       "tar-fs@>=2.0.0 <2.1.3": ">=3.1.1",
       "tmp@<=0.2.3": ">=0.2.5",
-      "vite@>=5.0.0 <=5.4.18": ">=7.3.1"
+      "vite@>=5.0.0 <=5.4.18": ">=7.2.7"
     },
     "patchedDependencies": {
       "@types/node-unifi": "patches/@types__node-unifi.patch",

packages/api/package.json

@@ -22,6 +22,7 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@homarr/auth": "workspace:^0.1.0",
+    "@homarr/certificates": "workspace:^0.1.0",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/cron-job-api": "workspace:^0.1.0",
@@ -41,18 +42,18 @@
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@kubernetes/client-node": "^1.4.0",
-    "@tanstack/react-query": "^5.90.16",
-    "@trpc/client": "^11.8.1",
-    "@trpc/react-query": "^11.8.1",
-    "@trpc/server": "^11.8.1",
-    "@trpc/tanstack-react-query": "^11.8.1",
+    "@tanstack/react-query": "^5.90.12",
+    "@trpc/client": "^11.8.0",
+    "@trpc/react-query": "^11.8.0",
+    "@trpc/server": "^11.8.0",
+    "@trpc/tanstack-react-query": "^11.8.0",
     "lodash.clonedeep": "^4.5.0",
-    "next": "16.1.1",
+    "next": "16.0.10",
     "react": "19.2.3",
     "react-dom": "19.2.3",
     "superjson": "2.2.6",
     "trpc-to-openapi": "^3.1.0",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",

packages/api/src/open-api.ts

@@ -1,7 +1,5 @@
 import { generateOpenApiDocument } from "trpc-to-openapi";
 
-import { API_KEY_HEADER_NAME } from "@homarr/auth/api-key";
-
 import { appRouter } from "./root";
 
 export const openApiDocument = (base: string) =>
@@ -13,7 +11,7 @@ export const openApiDocument = (base: string) =>
     securitySchemes: {
       apikey: {
         type: "apiKey",
-        name: API_KEY_HEADER_NAME,
+        name: "ApiKey",
         description: "API key which can be obtained in the Homarr administration dashboard",
         in: "header",
       },

packages/api/src/router/apiKeys.ts

@@ -22,7 +22,6 @@ export const apiKeysRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
       },

packages/api/src/router/app.ts

@@ -141,15 +141,13 @@ export const appRouter = createTRPCRouter({
     .output(z.void())
     .mutation(async ({ ctx, input }) => {
       await ctx.db.insert(apps).values(
-        await Promise.all(
-          input.map(async (app) => ({
-            id: createId(),
-            name: app.name,
-            description: app.description,
-            iconUrl: app.iconUrl ?? (await getIconForName(ctx.db, app.name))?.url ?? defaultIcon,
-            href: app.href,
-          })),
-        ),
+        input.map((app) => ({
+          id: createId(),
+          name: app.name,
+          description: app.description,
+          iconUrl: app.iconUrl ?? getIconForName(ctx.db, app.name).sync()?.url ?? defaultIcon,
+          href: app.href,
+        })),
       );
     }),
   update: permissionRequiredProcedure

packages/api/src/router/board.ts

@@ -6,8 +6,8 @@ import { constructBoardPermissions } from "@homarr/auth/shared";
 import { createId } from "@homarr/common";
 import type { DeviceType } from "@homarr/common/server";
 import type { Database, InferInsertModel, InferSelectModel, SQL } from "@homarr/db";
-import { and, asc, eq, inArray, isNull, like, not, or, sql } from "@homarr/db";
-import { createDbInsertCollection } from "@homarr/db/collection";
+import { and, asc, eq, handleTransactionsAsync, inArray, isNull, like, not, or, sql } from "@homarr/db";
+import { createDbInsertCollectionWithoutTransaction } from "@homarr/db/collection";
 import { getServerSettingByKeyAsync } from "@homarr/db/queries";
 import {
   boardGroupPermissions,
@@ -155,7 +155,6 @@ export const boardRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
         userPermissions: {
@@ -273,7 +272,7 @@ export const boardRouter = createTRPCRouter({
         },
       });
 
-      const createBoardCollection = createDbInsertCollection(["boards", "sections", "layouts"]);
+      const createBoardCollection = createDbInsertCollectionWithoutTransaction(["boards", "sections", "layouts"]);
 
       createBoardCollection.boards.push({
         id: boardId,
@@ -439,41 +438,86 @@ export const boardRouter = createTRPCRouter({
           })),
       );
 
-      await ctx.db.transaction(async (transaction) => {
-        transaction.insert(boards).values({
-          ...boardProps,
-          id: newBoardId,
-          name: input.name,
-          creatorId: ctx.session.user.id,
-        });
+      await handleTransactionsAsync(ctx.db, {
+        async handleAsync(db, schema) {
+          await db.transaction(async (transaction) => {
+            transaction.insert(schema.boards).values({
+              ...boardProps,
+              id: newBoardId,
+              name: input.name,
+              creatorId: ctx.session.user.id,
+            });
 
-        if (layoutsToInsert.length > 0) {
-          await transaction.insert(layouts).values(layoutsToInsert);
-        }
+            if (layoutsToInsert.length > 0) {
+              await transaction.insert(schema.layouts).values(layoutsToInsert);
+            }
 
-        if (sectionsToInsert.length > 0) {
-          await transaction.insert(sections).values(sectionsToInsert);
-        }
+            if (sectionsToInsert.length > 0) {
+              await transaction.insert(schema.sections).values(sectionsToInsert);
+            }
 
-        if (sectionLayoutsToInsert.length > 0) {
-          await transaction.insert(sectionLayouts).values(sectionLayoutsToInsert);
-        }
+            if (sectionLayoutsToInsert.length > 0) {
+              await transaction.insert(schema.sectionLayouts).values(sectionLayoutsToInsert);
+            }
 
-        if (sectionCollapseStatesToInsert.length > 0) {
-          await transaction.insert(sectionCollapseStates).values(sectionCollapseStatesToInsert);
-        }
+            if (sectionCollapseStatesToInsert.length > 0) {
+              await transaction.insert(schema.sectionCollapseStates).values(sectionCollapseStatesToInsert);
+            }
 
-        if (itemsToInsert.length > 0) {
-          await transaction.insert(items).values(itemsToInsert);
-        }
+            if (itemsToInsert.length > 0) {
+              await transaction.insert(schema.items).values(itemsToInsert);
+            }
 
-        if (itemLayoutsToInsert.length > 0) {
-          await transaction.insert(itemLayouts).values(itemLayoutsToInsert);
-        }
+            if (itemLayoutsToInsert.length > 0) {
+              await transaction.insert(schema.itemLayouts).values(itemLayoutsToInsert);
+            }
 
-        if (itemIntegrationsToInsert.length > 0) {
-          await transaction.insert(integrationItems).values(itemIntegrationsToInsert);
-        }
+            if (itemIntegrationsToInsert.length > 0) {
+              await transaction.insert(schema.integrationItems).values(itemIntegrationsToInsert);
+            }
+          });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .insert(boards)
+              .values({
+                ...boardProps,
+                id: newBoardId,
+                name: input.name,
+                creatorId: ctx.session.user.id,
+              })
+              .run();
+
+            if (layoutsToInsert.length > 0) {
+              transaction.insert(layouts).values(layoutsToInsert).run();
+            }
+
+            if (sectionsToInsert.length > 0) {
+              transaction.insert(sections).values(sectionsToInsert).run();
+            }
+
+            if (sectionLayoutsToInsert.length > 0) {
+              transaction.insert(sectionLayouts).values(sectionLayoutsToInsert).run();
+            }
+
+            if (sectionCollapseStatesToInsert.length > 0) {
+              transaction.insert(sectionCollapseStates).values(sectionCollapseStatesToInsert).run();
+            }
+
+            if (itemsToInsert.length > 0) {
+              transaction.insert(items).values(itemsToInsert).run();
+            }
+
+            if (itemLayoutsToInsert.length > 0) {
+              transaction.insert(itemLayouts).values(itemLayoutsToInsert).run();
+            }
+
+            if (itemIntegrationsToInsert.length > 0) {
+              transaction.insert(integrationItems).values(itemIntegrationsToInsert).run();
+            }
+          });
+        },
       });
     }),
   renameBoard: protectedProcedure.input(boardRenameSchema).mutation(async ({ ctx, input }) => {
@@ -711,189 +755,415 @@ export const boardRouter = createTRPCRouter({
 
     const dbBoard = await getFullBoardWithWhereAsync(ctx.db, eq(boards.id, input.id), ctx.session.user.id);
 
-    await ctx.db.transaction(async (transaction) => {
-      const addedSections = filterAddedItems(input.sections, dbBoard.sections);
+    await handleTransactionsAsync(ctx.db, {
+      async handleAsync(db, schema) {
+        await db.transaction(async (transaction) => {
+          const addedSections = filterAddedItems(input.sections, dbBoard.sections);
 
-      if (addedSections.length > 0) {
-        await transaction.insert(sections).values(
-          addedSections.map((section) => ({
-            id: section.id,
-            kind: section.kind,
-            yOffset: section.kind !== "dynamic" ? section.yOffset : null,
-            xOffset: section.kind === "dynamic" ? null : 0,
-            options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
-            name: "name" in section ? section.name : null,
-            boardId: dbBoard.id,
-          })),
-        );
+          if (addedSections.length > 0) {
+            await transaction.insert(schema.sections).values(
+              addedSections.map((section) => ({
+                id: section.id,
+                kind: section.kind,
+                yOffset: section.kind !== "dynamic" ? section.yOffset : null,
+                xOffset: section.kind === "dynamic" ? null : 0,
+                options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
+                name: "name" in section ? section.name : null,
+                boardId: dbBoard.id,
+              })),
+            );
 
-        if (addedSections.some((section) => section.kind === "dynamic")) {
-          await transaction.insert(sectionLayouts).values(
-            addedSections
-              .filter((section) => section.kind === "dynamic")
-              .flatMap((section) =>
-                section.layouts.map(
-                  (sectionLayout): InferInsertModel<typeof sectionLayouts> => ({
-                    layoutId: sectionLayout.layoutId,
-                    sectionId: section.id,
-                    parentSectionId: sectionLayout.parentSectionId,
-                    height: sectionLayout.height,
-                    width: sectionLayout.width,
-                    xOffset: sectionLayout.xOffset,
-                    yOffset: sectionLayout.yOffset,
+            if (addedSections.some((section) => section.kind === "dynamic")) {
+              await transaction.insert(schema.sectionLayouts).values(
+                addedSections
+                  .filter((section) => section.kind === "dynamic")
+                  .flatMap((section) =>
+                    section.layouts.map(
+                      (sectionLayout): InferInsertModel<typeof schema.sectionLayouts> => ({
+                        layoutId: sectionLayout.layoutId,
+                        sectionId: section.id,
+                        parentSectionId: sectionLayout.parentSectionId,
+                        height: sectionLayout.height,
+                        width: sectionLayout.width,
+                        xOffset: sectionLayout.xOffset,
+                        yOffset: sectionLayout.yOffset,
+                      }),
+                    ),
+                  ),
+              );
+            }
+          }
+
+          const addedItems = filterAddedItems(input.items, dbBoard.items);
+
+          if (addedItems.length > 0) {
+            await transaction.insert(schema.items).values(
+              addedItems.map((item) => ({
+                id: item.id,
+                kind: item.kind,
+                options: superjson.stringify(item.options),
+                advancedOptions: superjson.stringify(item.advancedOptions),
+                boardId: dbBoard.id,
+              })),
+            );
+            await transaction.insert(schema.itemLayouts).values(
+              addedItems.flatMap((item) =>
+                item.layouts.map(
+                  (layoutSection): InferInsertModel<typeof schema.itemLayouts> => ({
+                    layoutId: layoutSection.layoutId,
+                    sectionId: layoutSection.sectionId,
+                    itemId: item.id,
+                    height: layoutSection.height,
+                    width: layoutSection.width,
+                    xOffset: layoutSection.xOffset,
+                    yOffset: layoutSection.yOffset,
                   }),
                 ),
               ),
+            );
+          }
+
+          const inputIntegrationRelations = input.items.flatMap(({ integrationIds, id: itemId }) =>
+            integrationIds.map((integrationId) => ({
+              integrationId,
+              itemId,
+            })),
           );
-        }
-      }
-
-      const addedItems = filterAddedItems(input.items, dbBoard.items);
-
-      if (addedItems.length > 0) {
-        await transaction.insert(items).values(
-          addedItems.map((item) => ({
-            id: item.id,
-            kind: item.kind,
-            options: superjson.stringify(item.options),
-            advancedOptions: superjson.stringify(item.advancedOptions),
-            boardId: dbBoard.id,
-          })),
-        );
-        await transaction.insert(itemLayouts).values(
-          addedItems.flatMap((item) =>
-            item.layouts.map(
-              (layoutSection): InferInsertModel<typeof itemLayouts> => ({
-                layoutId: layoutSection.layoutId,
-                sectionId: layoutSection.sectionId,
-                itemId: item.id,
-                height: layoutSection.height,
-                width: layoutSection.width,
-                xOffset: layoutSection.xOffset,
-                yOffset: layoutSection.yOffset,
-              }),
-            ),
-          ),
-        );
-      }
-
-      const inputIntegrationRelations = input.items.flatMap(({ integrationIds, id: itemId }) =>
-        integrationIds.map((integrationId) => ({
-          integrationId,
-          itemId,
-        })),
-      );
-      const dbIntegrationRelations = dbBoard.items.flatMap(({ integrationIds, id: itemId }) =>
-        integrationIds.map((integrationId) => ({
-          integrationId,
-          itemId,
-        })),
-      );
-      const addedIntegrationRelations = inputIntegrationRelations.filter(
-        (inputRelation) =>
-          !dbIntegrationRelations.some(
-            (dbRelation) =>
-              dbRelation.itemId === inputRelation.itemId && dbRelation.integrationId === inputRelation.integrationId,
-          ),
-      );
-
-      if (addedIntegrationRelations.length > 0) {
-        await transaction.insert(integrationItems).values(
-          addedIntegrationRelations.map((relation) => ({
-            itemId: relation.itemId,
-            integrationId: relation.integrationId,
-          })),
-        );
-      }
-
-      const updatedItems = filterUpdatedItems(input.items, dbBoard.items);
-
-      for (const item of updatedItems) {
-        await transaction
-          .update(items)
-          .set({
-            kind: item.kind,
-            options: superjson.stringify(item.options),
-            advancedOptions: superjson.stringify(item.advancedOptions),
-          })
-          .where(eq(items.id, item.id));
-
-        for (const itemSectionLayout of item.layouts) {
-          await transaction
-            .update(itemLayouts)
-            .set({
-              height: itemSectionLayout.height,
-              width: itemSectionLayout.width,
-              xOffset: itemSectionLayout.xOffset,
-              yOffset: itemSectionLayout.yOffset,
-              sectionId: itemSectionLayout.sectionId,
-            })
-            .where(and(eq(itemLayouts.itemId, item.id), eq(itemLayouts.layoutId, itemSectionLayout.layoutId)));
-        }
-      }
-
-      const updatedSections = filterUpdatedItems(input.sections, dbBoard.sections);
-
-      for (const section of updatedSections) {
-        const prev = dbBoard.sections.find((dbSection) => dbSection.id === section.id);
-        await transaction
-          .update(sections)
-          .set({
-            yOffset: prev?.kind !== "dynamic" && "yOffset" in section ? section.yOffset : null,
-            xOffset: prev?.kind !== "dynamic" && "yOffset" in section ? 0 : null,
-            options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
-            name: prev?.kind === "category" && "name" in section ? section.name : null,
-          })
-          .where(eq(sections.id, section.id));
-
-        if (section.kind !== "dynamic") continue;
-
-        for (const sectionLayout of section.layouts) {
-          await transaction
-            .update(sectionLayouts)
-            .set({
-              height: sectionLayout.height,
-              width: sectionLayout.width,
-              xOffset: sectionLayout.xOffset,
-              yOffset: sectionLayout.yOffset,
-              parentSectionId: sectionLayout.parentSectionId,
-            })
-            .where(and(eq(sectionLayouts.sectionId, section.id), eq(sectionLayouts.layoutId, sectionLayout.layoutId)));
-        }
-      }
-
-      const removedIntegrationRelations = dbIntegrationRelations.filter(
-        (dbRelation) =>
-          !inputIntegrationRelations.some(
+          const dbIntegrationRelations = dbBoard.items.flatMap(({ integrationIds, id: itemId }) =>
+            integrationIds.map((integrationId) => ({
+              integrationId,
+              itemId,
+            })),
+          );
+          const addedIntegrationRelations = inputIntegrationRelations.filter(
             (inputRelation) =>
-              dbRelation.itemId === inputRelation.itemId && dbRelation.integrationId === inputRelation.integrationId,
-          ),
-      );
-
-      for (const relation of removedIntegrationRelations) {
-        await transaction
-          .delete(integrationItems)
-          .where(
-            and(
-              eq(integrationItems.itemId, relation.itemId),
-              eq(integrationItems.integrationId, relation.integrationId),
-            ),
+              !dbIntegrationRelations.some(
+                (dbRelation) =>
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
+              ),
           );
-      }
 
-      const removedItems = filterRemovedItems(input.items, dbBoard.items);
+          if (addedIntegrationRelations.length > 0) {
+            await transaction.insert(schema.integrationItems).values(
+              addedIntegrationRelations.map((relation) => ({
+                itemId: relation.itemId,
+                integrationId: relation.integrationId,
+              })),
+            );
+          }
 
-      const itemIds = removedItems.map((item) => item.id);
-      if (itemIds.length > 0) {
-        await transaction.delete(items).where(inArray(items.id, itemIds));
-      }
+          const updatedItems = filterUpdatedItems(input.items, dbBoard.items);
 
-      const removedSections = filterRemovedItems(input.sections, dbBoard.sections);
-      const sectionIds = removedSections.map((section) => section.id);
+          for (const item of updatedItems) {
+            await transaction
+              .update(schema.items)
+              .set({
+                kind: item.kind,
+                options: superjson.stringify(item.options),
+                advancedOptions: superjson.stringify(item.advancedOptions),
+              })
+              .where(eq(schema.items.id, item.id));
 
-      if (sectionIds.length > 0) {
-        await transaction.delete(sections).where(inArray(sections.id, sectionIds));
-      }
+            for (const itemSectionLayout of item.layouts) {
+              await transaction
+                .update(schema.itemLayouts)
+                .set({
+                  height: itemSectionLayout.height,
+                  width: itemSectionLayout.width,
+                  xOffset: itemSectionLayout.xOffset,
+                  yOffset: itemSectionLayout.yOffset,
+                  sectionId: itemSectionLayout.sectionId,
+                })
+                .where(
+                  and(
+                    eq(schema.itemLayouts.itemId, item.id),
+                    eq(schema.itemLayouts.layoutId, itemSectionLayout.layoutId),
+                  ),
+                );
+            }
+          }
+
+          const updatedSections = filterUpdatedItems(input.sections, dbBoard.sections);
+
+          for (const section of updatedSections) {
+            const prev = dbBoard.sections.find((dbSection) => dbSection.id === section.id);
+            await transaction
+              .update(schema.sections)
+              .set({
+                yOffset: prev?.kind !== "dynamic" && "yOffset" in section ? section.yOffset : null,
+                xOffset: prev?.kind !== "dynamic" && "yOffset" in section ? 0 : null,
+                options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
+                name: prev?.kind === "category" && "name" in section ? section.name : null,
+              })
+              .where(eq(schema.sections.id, section.id));
+
+            if (section.kind !== "dynamic") continue;
+
+            for (const sectionLayout of section.layouts) {
+              await transaction
+                .update(schema.sectionLayouts)
+                .set({
+                  height: sectionLayout.height,
+                  width: sectionLayout.width,
+                  xOffset: sectionLayout.xOffset,
+                  yOffset: sectionLayout.yOffset,
+                  parentSectionId: sectionLayout.parentSectionId,
+                })
+                .where(
+                  and(
+                    eq(schema.sectionLayouts.sectionId, section.id),
+                    eq(schema.sectionLayouts.layoutId, sectionLayout.layoutId),
+                  ),
+                );
+            }
+          }
+
+          const removedIntegrationRelations = dbIntegrationRelations.filter(
+            (dbRelation) =>
+              !inputIntegrationRelations.some(
+                (inputRelation) =>
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
+              ),
+          );
+
+          for (const relation of removedIntegrationRelations) {
+            await transaction
+              .delete(schema.integrationItems)
+              .where(
+                and(
+                  eq(integrationItems.itemId, relation.itemId),
+                  eq(integrationItems.integrationId, relation.integrationId),
+                ),
+              );
+          }
+
+          const removedItems = filterRemovedItems(input.items, dbBoard.items);
+
+          const itemIds = removedItems.map((item) => item.id);
+          if (itemIds.length > 0) {
+            await transaction.delete(schema.items).where(inArray(schema.items.id, itemIds));
+          }
+
+          const removedSections = filterRemovedItems(input.sections, dbBoard.sections);
+          const sectionIds = removedSections.map((section) => section.id);
+
+          if (sectionIds.length > 0) {
+            await transaction.delete(schema.sections).where(inArray(schema.sections.id, sectionIds));
+          }
+        });
+      },
+      handleSync(db) {
+        db.transaction((transaction) => {
+          const addedSections = filterAddedItems(input.sections, dbBoard.sections);
+
+          if (addedSections.length > 0) {
+            transaction
+              .insert(sections)
+              .values(
+                addedSections.map((section) => ({
+                  id: section.id,
+                  kind: section.kind,
+                  yOffset: section.kind !== "dynamic" ? section.yOffset : null,
+                  xOffset: section.kind === "dynamic" ? null : 0,
+                  options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
+                  name: "name" in section ? section.name : null,
+                  boardId: dbBoard.id,
+                })),
+              )
+              .run();
+
+            if (addedSections.some((section) => section.kind === "dynamic")) {
+              transaction
+                .insert(sectionLayouts)
+                .values(
+                  addedSections
+                    .filter((section) => section.kind === "dynamic")
+                    .flatMap((section) =>
+                      section.layouts.map(
+                        (sectionLayout): InferInsertModel<typeof sectionLayouts> => ({
+                          layoutId: sectionLayout.layoutId,
+                          sectionId: section.id,
+                          parentSectionId: sectionLayout.parentSectionId,
+                          height: sectionLayout.height,
+                          width: sectionLayout.width,
+                          xOffset: sectionLayout.xOffset,
+                          yOffset: sectionLayout.yOffset,
+                        }),
+                      ),
+                    ),
+                )
+                .run();
+            }
+          }
+
+          const addedItems = filterAddedItems(input.items, dbBoard.items);
+
+          if (addedItems.length > 0) {
+            transaction
+              .insert(items)
+              .values(
+                addedItems.map((item) => ({
+                  id: item.id,
+                  kind: item.kind,
+                  options: superjson.stringify(item.options),
+                  advancedOptions: superjson.stringify(item.advancedOptions),
+                  boardId: dbBoard.id,
+                })),
+              )
+              .run();
+            transaction
+              .insert(itemLayouts)
+              .values(
+                addedItems.flatMap((item) =>
+                  item.layouts.map(
+                    (layoutSection): InferInsertModel<typeof itemLayouts> => ({
+                      layoutId: layoutSection.layoutId,
+                      sectionId: layoutSection.sectionId,
+                      itemId: item.id,
+                      height: layoutSection.height,
+                      width: layoutSection.width,
+                      xOffset: layoutSection.xOffset,
+                      yOffset: layoutSection.yOffset,
+                    }),
+                  ),
+                ),
+              )
+              .run();
+          }
+
+          const inputIntegrationRelations = input.items.flatMap(({ integrationIds, id: itemId }) =>
+            integrationIds.map((integrationId) => ({
+              integrationId,
+              itemId,
+            })),
+          );
+          const dbIntegrationRelations = dbBoard.items.flatMap(({ integrationIds, id: itemId }) =>
+            integrationIds.map((integrationId) => ({
+              integrationId,
+              itemId,
+            })),
+          );
+          const addedIntegrationRelations = inputIntegrationRelations.filter(
+            (inputRelation) =>
+              !dbIntegrationRelations.some(
+                (dbRelation) =>
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
+              ),
+          );
+
+          if (addedIntegrationRelations.length > 0) {
+            transaction
+              .insert(integrationItems)
+              .values(
+                addedIntegrationRelations.map((relation) => ({
+                  itemId: relation.itemId,
+                  integrationId: relation.integrationId,
+                })),
+              )
+              .run();
+          }
+
+          const updatedItems = filterUpdatedItems(input.items, dbBoard.items);
+
+          for (const item of updatedItems) {
+            transaction
+              .update(items)
+              .set({
+                kind: item.kind,
+                options: superjson.stringify(item.options),
+                advancedOptions: superjson.stringify(item.advancedOptions),
+              })
+              .where(eq(items.id, item.id))
+              .run();
+
+            for (const itemSectionLayout of item.layouts) {
+              transaction
+                .update(itemLayouts)
+                .set({
+                  height: itemSectionLayout.height,
+                  width: itemSectionLayout.width,
+                  xOffset: itemSectionLayout.xOffset,
+                  yOffset: itemSectionLayout.yOffset,
+                  sectionId: itemSectionLayout.sectionId,
+                })
+                .where(and(eq(itemLayouts.itemId, item.id), eq(itemLayouts.layoutId, itemSectionLayout.layoutId)))
+                .run();
+            }
+          }
+
+          const updatedSections = filterUpdatedItems(input.sections, dbBoard.sections);
+
+          for (const section of updatedSections) {
+            const prev = dbBoard.sections.find((dbSection) => dbSection.id === section.id);
+            transaction
+              .update(sections)
+              .set({
+                yOffset: prev?.kind !== "dynamic" && "yOffset" in section ? section.yOffset : null,
+                xOffset: prev?.kind !== "dynamic" && "yOffset" in section ? 0 : null,
+                options: section.kind === "dynamic" ? superjson.stringify(section.options) : emptySuperJSON,
+                name: prev?.kind === "category" && "name" in section ? section.name : null,
+              })
+              .where(eq(sections.id, section.id))
+              .run();
+
+            if (section.kind !== "dynamic") continue;
+
+            for (const sectionLayout of section.layouts) {
+              transaction
+                .update(sectionLayouts)
+                .set({
+                  height: sectionLayout.height,
+                  width: sectionLayout.width,
+                  xOffset: sectionLayout.xOffset,
+                  yOffset: sectionLayout.yOffset,
+                  parentSectionId: sectionLayout.parentSectionId,
+                })
+                .where(
+                  and(eq(sectionLayouts.sectionId, section.id), eq(sectionLayouts.layoutId, sectionLayout.layoutId)),
+                )
+                .run();
+            }
+          }
+
+          const removedIntegrationRelations = dbIntegrationRelations.filter(
+            (dbRelation) =>
+              !inputIntegrationRelations.some(
+                (inputRelation) =>
+                  dbRelation.itemId === inputRelation.itemId &&
+                  dbRelation.integrationId === inputRelation.integrationId,
+              ),
+          );
+
+          for (const relation of removedIntegrationRelations) {
+            transaction
+              .delete(integrationItems)
+              .where(
+                and(
+                  eq(integrationItems.itemId, relation.itemId),
+                  eq(integrationItems.integrationId, relation.integrationId),
+                ),
+              )
+              .run();
+          }
+
+          const removedItems = filterRemovedItems(input.items, dbBoard.items);
+
+          const itemIds = removedItems.map((item) => item.id);
+          if (itemIds.length > 0) {
+            transaction.delete(items).where(inArray(items.id, itemIds)).run();
+          }
+
+          const removedSections = filterRemovedItems(input.sections, dbBoard.sections);
+          const sectionIds = removedSections.map((section) => section.id);
+
+          if (sectionIds.length > 0) {
+            transaction.delete(sections).where(inArray(sections.id, sectionIds)).run();
+          }
+        });
+      },
     });
   }),
   getBoardPermissions: protectedProcedure.input(byIdSchema).query(async ({ input, ctx }) => {
@@ -925,7 +1195,6 @@ export const boardRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
       },
@@ -971,35 +1240,81 @@ export const boardRouter = createTRPCRouter({
   saveUserBoardPermissions: protectedProcedure.input(boardSavePermissionsSchema).mutation(async ({ input, ctx }) => {
     await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.entityId), "full");
 
-    await ctx.db.transaction(async (transaction) => {
-      await transaction.delete(boardUserPermissions).where(eq(boardUserPermissions.boardId, input.entityId));
-      if (input.permissions.length === 0) {
-        return;
-      }
-      await transaction.insert(boardUserPermissions).values(
-        input.permissions.map((permission) => ({
-          userId: permission.principalId,
-          permission: permission.permission,
-          boardId: input.entityId,
-        })),
-      );
+    await handleTransactionsAsync(ctx.db, {
+      async handleAsync(db, schema) {
+        await db.transaction(async (transaction) => {
+          await transaction.delete(schema.boardUserPermissions).where(eq(boardUserPermissions.boardId, input.entityId));
+          if (input.permissions.length === 0) {
+            return;
+          }
+          await transaction.insert(schema.boardUserPermissions).values(
+            input.permissions.map((permission) => ({
+              userId: permission.principalId,
+              permission: permission.permission,
+              boardId: input.entityId,
+            })),
+          );
+        });
+      },
+      handleSync(db) {
+        db.transaction((transaction) => {
+          transaction.delete(boardUserPermissions).where(eq(boardUserPermissions.boardId, input.entityId)).run();
+          if (input.permissions.length === 0) {
+            return;
+          }
+          transaction
+            .insert(boardUserPermissions)
+            .values(
+              input.permissions.map((permission) => ({
+                userId: permission.principalId,
+                permission: permission.permission,
+                boardId: input.entityId,
+              })),
+            )
+            .run();
+        });
+      },
     });
   }),
   saveGroupBoardPermissions: protectedProcedure.input(boardSavePermissionsSchema).mutation(async ({ input, ctx }) => {
     await throwIfActionForbiddenAsync(ctx, eq(boards.id, input.entityId), "full");
 
-    await ctx.db.transaction(async (transaction) => {
-      await transaction.delete(boardGroupPermissions).where(eq(boardGroupPermissions.boardId, input.entityId));
-      if (input.permissions.length === 0) {
-        return;
-      }
-      await transaction.insert(boardGroupPermissions).values(
-        input.permissions.map((permission) => ({
-          groupId: permission.principalId,
-          permission: permission.permission,
-          boardId: input.entityId,
-        })),
-      );
+    await handleTransactionsAsync(ctx.db, {
+      async handleAsync(db, schema) {
+        await db.transaction(async (transaction) => {
+          await transaction
+            .delete(schema.boardGroupPermissions)
+            .where(eq(boardGroupPermissions.boardId, input.entityId));
+          if (input.permissions.length === 0) {
+            return;
+          }
+          await transaction.insert(schema.boardGroupPermissions).values(
+            input.permissions.map((permission) => ({
+              groupId: permission.principalId,
+              permission: permission.permission,
+              boardId: input.entityId,
+            })),
+          );
+        });
+      },
+      handleSync(db) {
+        db.transaction((transaction) => {
+          transaction.delete(boardGroupPermissions).where(eq(boardGroupPermissions.boardId, input.entityId)).run();
+          if (input.permissions.length === 0) {
+            return;
+          }
+          transaction
+            .insert(boardGroupPermissions)
+            .values(
+              input.permissions.map((permission) => ({
+                groupId: permission.principalId,
+                permission: permission.permission,
+                boardId: input.entityId,
+              })),
+            )
+            .run();
+        });
+      },
     });
   }),
   importOldmarrConfig: permissionRequiredProcedure
@@ -1222,7 +1537,6 @@ const getFullBoardWithWhereAsync = async (db: Database, where: SQL<unknown>, use
           id: true,
           name: true,
           image: true,
-          email: true,
         },
       },
       sections: {

packages/api/src/router/certificates/certificate-router.ts

@@ -3,10 +3,7 @@ import { TRPCError } from "@trpc/server";
 import { zfd } from "zod-form-data";
 import { z } from "zod/v4";
 
-import {
-  addCustomRootCertificateAsync,
-  removeCustomRootCertificateAsync,
-} from "@homarr/core/infrastructure/certificates";
+import { addCustomRootCertificateAsync, removeCustomRootCertificateAsync } from "@homarr/certificates/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { and, eq } from "@homarr/db";
 import { trustedCertificateHostnames } from "@homarr/db/schema";
@@ -91,7 +88,7 @@ export const certificateRouter = createTRPCRouter({
         hostname: input.hostname,
         thumbprint: input.thumbprint,
       });
-      await ctx.db
+      const dbResult = await ctx.db
         .delete(trustedCertificateHostnames)
         .where(
           and(
@@ -103,6 +100,7 @@ export const certificateRouter = createTRPCRouter({
       logger.info("Removed trusted hostname", {
         hostname: input.hostname,
         thumbprint: input.thumbprint,
+        count: dbResult.changes,
       });
     }),
   removeCertificate: permissionRequiredProcedure

packages/api/src/router/group.ts

@@ -3,7 +3,7 @@ import { z } from "zod/v4";
 
 import { createId } from "@homarr/common";
 import type { Database } from "@homarr/db";
-import { and, eq, like, not } from "@homarr/db";
+import { and, eq, handleTransactionsAsync, like, not } from "@homarr/db";
 import { getMaxGroupPositionAsync } from "@homarr/db/queries";
 import { groupMembers, groupPermissions, groups } from "@homarr/db/schema";
 import { everyoneGroup } from "@homarr/definitions";
@@ -252,10 +252,21 @@ export const groupRouter = createTRPCRouter({
     .mutation(async ({ input, ctx }) => {
       const positions = input.positions.map((id, index) => ({ id, position: index + 1 }));
 
-      await ctx.db.transaction(async (trx) => {
-        for (const { id, position } of positions) {
-          await trx.update(groups).set({ position }).where(eq(groups.id, id));
-        }
+      await handleTransactionsAsync(ctx.db, {
+        handleAsync: async (db, schema) => {
+          await db.transaction(async (trx) => {
+            for (const { id, position } of positions) {
+              await trx.update(schema.groups).set({ position }).where(eq(groups.id, id));
+            }
+          });
+        },
+        handleSync: (db) => {
+          db.transaction((trx) => {
+            for (const { id, position } of positions) {
+              trx.update(groups).set({ position }).where(eq(groups.id, id)).run();
+            }
+          });
+        },
       });
     }),
   savePermissions: permissionRequiredProcedure

packages/api/src/router/integration/integration-router.ts

@@ -5,7 +5,7 @@ import { createId, objectEntries } from "@homarr/common";
 import { decryptSecret, encryptSecret } from "@homarr/common/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import type { Database } from "@homarr/db";
-import { and, asc, eq, inArray, like, or } from "@homarr/db";
+import { and, asc, eq, handleTransactionsAsync, inArray, like, or } from "@homarr/db";
 import {
   apps,
   groupMembers,
@@ -476,7 +476,6 @@ export const integrationRouter = createTRPCRouter({
             id: true,
             name: true,
             image: true,
-            email: true,
           },
         },
       },
@@ -524,20 +523,45 @@ export const integrationRouter = createTRPCRouter({
     .mutation(async ({ input, ctx }) => {
       await throwIfActionForbiddenAsync(ctx, eq(integrations.id, input.entityId), "full");
 
-      await ctx.db.transaction(async (transaction) => {
-        await transaction
-          .delete(integrationUserPermissions)
-          .where(eq(integrationUserPermissions.integrationId, input.entityId));
-        if (input.permissions.length === 0) {
-          return;
-        }
-        await transaction.insert(integrationUserPermissions).values(
-          input.permissions.map((permission) => ({
-            userId: permission.principalId,
-            permission: permission.permission,
-            integrationId: input.entityId,
-          })),
-        );
+      await handleTransactionsAsync(ctx.db, {
+        async handleAsync(db, schema) {
+          await ctx.db.transaction(async (transaction) => {
+            await transaction
+              .delete(schema.integrationUserPermissions)
+              .where(eq(schema.integrationUserPermissions.integrationId, input.entityId));
+            if (input.permissions.length === 0) {
+              return;
+            }
+            await transaction.insert(schema.integrationUserPermissions).values(
+              input.permissions.map((permission) => ({
+                userId: permission.principalId,
+                permission: permission.permission,
+                integrationId: input.entityId,
+              })),
+            );
+          });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .delete(integrationUserPermissions)
+              .where(eq(integrationUserPermissions.integrationId, input.entityId))
+              .run();
+            if (input.permissions.length === 0) {
+              return;
+            }
+            transaction
+              .insert(integrationUserPermissions)
+              .values(
+                input.permissions.map((permission) => ({
+                  userId: permission.principalId,
+                  permission: permission.permission,
+                  integrationId: input.entityId,
+                })),
+              )
+              .run();
+          });
+        },
       });
     }),
   saveGroupIntegrationPermissions: protectedProcedure
@@ -545,20 +569,45 @@ export const integrationRouter = createTRPCRouter({
     .mutation(async ({ input, ctx }) => {
       await throwIfActionForbiddenAsync(ctx, eq(integrations.id, input.entityId), "full");
 
-      await ctx.db.transaction(async (transaction) => {
-        await transaction
-          .delete(integrationGroupPermissions)
-          .where(eq(integrationGroupPermissions.integrationId, input.entityId));
-        if (input.permissions.length === 0) {
-          return;
-        }
-        await transaction.insert(integrationGroupPermissions).values(
-          input.permissions.map((permission) => ({
-            groupId: permission.principalId,
-            permission: permission.permission,
-            integrationId: input.entityId,
-          })),
-        );
+      await handleTransactionsAsync(ctx.db, {
+        async handleAsync(db, schema) {
+          await db.transaction(async (transaction) => {
+            await transaction
+              .delete(schema.integrationGroupPermissions)
+              .where(eq(schema.integrationGroupPermissions.integrationId, input.entityId));
+            if (input.permissions.length === 0) {
+              return;
+            }
+            await transaction.insert(schema.integrationGroupPermissions).values(
+              input.permissions.map((permission) => ({
+                groupId: permission.principalId,
+                permission: permission.permission,
+                integrationId: input.entityId,
+              })),
+            );
+          });
+        },
+        handleSync(db) {
+          db.transaction((transaction) => {
+            transaction
+              .delete(integrationGroupPermissions)
+              .where(eq(integrationGroupPermissions.integrationId, input.entityId))
+              .run();
+            if (input.permissions.length === 0) {
+              return;
+            }
+            transaction
+              .insert(integrationGroupPermissions)
+              .values(
+                input.permissions.map((permission) => ({
+                  groupId: permission.principalId,
+                  permission: permission.permission,
+                  integrationId: input.entityId,
+                })),
+              )
+              .run();
+          });
+        },
       });
     }),
   searchInIntegration: protectedProcedure

packages/api/src/router/location.ts

@@ -1,7 +1,6 @@
 import { z } from "zod/v4";
 
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { withTimeoutAsync } from "@homarr/core/infrastructure/http/timeout";
+import { fetchWithTimeout } from "@homarr/common";
 
 import { createTRPCRouter, publicProcedure } from "../trpc";
 
@@ -37,12 +36,7 @@ export const locationRouter = createTRPCRouter({
     .input(locationSearchCityInput)
     .output(locationSearchCityOutput)
     .query(async ({ input }) => {
-      const res = await withTimeoutAsync(async (signal) => {
-        return await fetchWithTrustedCertificatesAsync(
-          `https://geocoding-api.open-meteo.com/v1/search?name=${input.query}`,
-          { signal },
-        );
-      });
+      const res = await fetchWithTimeout(`https://geocoding-api.open-meteo.com/v1/search?name=${input.query}`);
       return (await res.json()) as z.infer<typeof locationSearchCityOutput>;
     }),
 });

packages/api/src/router/medias/media-router.ts

@@ -39,7 +39,6 @@ export const mediaRouter = createTRPCRouter({
               id: true,
               name: true,
               image: true,
-              email: true,
             },
           },
         },

packages/api/src/router/test/app.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { apps } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey } from "@homarr/definitions";
 
 import { appRouter } from "../app";
@@ -21,7 +21,7 @@ const createDefaultSession = (permissions: GroupPermissionKey[] = []): Session =
 describe("all should return all apps", () => {
   test("should return all apps with session", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -55,7 +55,7 @@ describe("all should return all apps", () => {
   test("should throw UNAUTHORIZED if the user is not authenticated", async () => {
     // Arrange
     const caller = appRouter.createCaller({
-      db: await createDbAsync(),
+      db: createDb(),
       deviceType: undefined,
       session: null,
     });
@@ -71,7 +71,7 @@ describe("all should return all apps", () => {
 describe("byId should return an app by id", () => {
   test("should return an app by id when canUserSeeAppAsync returns true", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -103,7 +103,7 @@ describe("byId should return an app by id", () => {
 
   test("should throw NOT_FOUND error when canUserSeeAppAsync returns false", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -129,7 +129,7 @@ describe("byId should return an app by id", () => {
 
   test("should throw an error if the app does not exist", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -147,7 +147,7 @@ describe("byId should return an app by id", () => {
 describe("create should create a new app with all arguments", () => {
   test("should create a new app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -176,7 +176,7 @@ describe("create should create a new app with all arguments", () => {
 
   test("should create a new app only with required arguments", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -207,7 +207,7 @@ describe("create should create a new app with all arguments", () => {
 describe("update should update an app", () => {
   test("should update an app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -247,7 +247,7 @@ describe("update should update an app", () => {
 
   test("should throw an error if the app does not exist", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -273,7 +273,7 @@ describe("update should update an app", () => {
 describe("delete should delete an app", () => {
   test("should delete an app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/board.spec.ts

@@ -22,7 +22,7 @@ import {
   serverSettings,
   users,
 } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { BoardPermission, GroupPermissionKey } from "@homarr/definitions";
 
 import type { RouterOutputs } from "../..";
@@ -55,7 +55,7 @@ const createRandomUserAsync = async (db: Database) => {
 describe("getAllBoards should return all boards accessable to the current user", () => {
   test("without session it should return only public boards", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: null });
 
     const user1 = await createRandomUserAsync(db);
@@ -86,7 +86,7 @@ describe("getAllBoards should return all boards accessable to the current user",
 
   test("with session containing board-view-all permission it should return all boards", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({
       db,
       deviceType: undefined,
@@ -128,7 +128,7 @@ describe("getAllBoards should return all boards accessable to the current user",
 
   test("with session user beeing creator it should return all private boards of them", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const user1 = await createRandomUserAsync(db);
@@ -170,7 +170,7 @@ describe("getAllBoards should return all boards accessable to the current user",
     "with %s group board permission it should show board",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({
         db,
         deviceType: undefined,
@@ -236,7 +236,7 @@ describe("getAllBoards should return all boards accessable to the current user",
     "with %s user board permission it should show board",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({
         db,
         deviceType: undefined,
@@ -290,7 +290,7 @@ describe("getAllBoards should return all boards accessable to the current user",
 describe("createBoard should create a new board", () => {
   test("should create a new board with permission board-create", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = {
       ...defaultSession,
       user: {
@@ -333,7 +333,7 @@ describe("createBoard should create a new board", () => {
 
   test("should throw error when user has no board-create permission", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -347,7 +347,7 @@ describe("createBoard should create a new board", () => {
 describe("rename board should rename board", () => {
   test("should rename board", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -375,7 +375,7 @@ describe("rename board should rename board", () => {
 
   test("should throw error when similar board name exists", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     await db.insert(users).values({
@@ -402,7 +402,7 @@ describe("rename board should rename board", () => {
 
   test("should throw error when board not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -418,7 +418,7 @@ describe("changeBoardVisibility should change board visibility", () => {
     "should change board visibility to %s",
     async (visibility) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -453,7 +453,7 @@ describe("changeBoardVisibility should change board visibility", () => {
 describe("deleteBoard should delete board", () => {
   test("should delete board", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -480,7 +480,7 @@ describe("deleteBoard should delete board", () => {
 
   test("should throw error when board not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -495,7 +495,7 @@ describe("getHomeBoard should return home board", () => {
   test("should return user home board when user has one", async () => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const fullBoardProps = await createFullBoardAsync(db, "home");
@@ -519,7 +519,7 @@ describe("getHomeBoard should return home board", () => {
   test("should return global home board when user doesn't have one", async () => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const fullBoardProps = await createFullBoardAsync(db, "home");
@@ -540,7 +540,7 @@ describe("getHomeBoard should return home board", () => {
   });
   test("should throw error when home board not configured in serverSettings", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     await createFullBoardAsync(db, "home");
 
@@ -556,7 +556,7 @@ describe("getBoardByName should return board by name", () => {
   it.each([["default"], ["something"]])("should return board by name %s when present", async (name) => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const fullBoardProps = await createFullBoardAsync(db, name);
@@ -574,7 +574,7 @@ describe("getBoardByName should return board by name", () => {
 
   it("should throw error when not present", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     await createFullBoardAsync(db, "default");
 
@@ -590,7 +590,7 @@ describe("savePartialBoardSettings should save general settings", () => {
   it("should save general settings", async () => {
     // Arrange
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const newPageTitle = "newPageTitle";
@@ -647,7 +647,7 @@ describe("savePartialBoardSettings should save general settings", () => {
   });
 
   it("should throw error when board not found", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const actAsync = async () =>
@@ -666,7 +666,7 @@ describe("savePartialBoardSettings should save general settings", () => {
 describe("saveBoard should save full board", () => {
   it("should remove section when not present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, sectionId } = await createFullBoardAsync(db, "default");
@@ -703,7 +703,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should remove item when not present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, itemId, sectionId, layoutId } = await createFullBoardAsync(db, "default");
@@ -760,7 +760,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should remove integration reference when not present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const anotherIntegration = {
       id: createId(),
@@ -832,7 +832,7 @@ describe("saveBoard should save full board", () => {
     "should add section when present in input",
     async (partialSection) => {
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
       const { boardId, sectionId } = await createFullBoardAsync(db, "default");
@@ -884,7 +884,7 @@ describe("saveBoard should save full board", () => {
   );
   it("should add item when present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, sectionId, layoutId } = await createFullBoardAsync(db, "default");
@@ -956,7 +956,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should add integration reference when present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const integration = {
       id: createId(),
@@ -1024,7 +1024,7 @@ describe("saveBoard should save full board", () => {
     expect(spy).toHaveBeenCalledWith(expect.anything(), expect.anything(), "modify");
   });
   it("should update section when present in input", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, sectionId } = await createFullBoardAsync(db, "default");
@@ -1083,7 +1083,7 @@ describe("saveBoard should save full board", () => {
   });
   it("should update item when present in input", async () => {
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, itemId, sectionId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1147,7 +1147,7 @@ describe("saveBoard should save full board", () => {
     expect(spy).toHaveBeenCalledWith(expect.anything(), expect.anything(), "modify");
   });
   it("should fail when board not found", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const actAsync = async () =>
@@ -1164,7 +1164,7 @@ describe("saveBoard should save full board", () => {
 describe("getBoardPermissions should return board permissions", () => {
   test("should return board permissions", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
     const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -1220,11 +1220,11 @@ describe("getBoardPermissions should return board permissions", () => {
     expect(result.users).toEqual(
       expect.arrayContaining([
         {
-          user: { id: user1, name: null, image: null, email: null },
+          user: { id: user1, name: null, image: null },
           permission: "view",
         },
         {
-          user: { id: user2, name: null, image: null, email: null },
+          user: { id: user2, name: null, image: null },
           permission: "modify",
         },
       ]),
@@ -1239,7 +1239,7 @@ describe("saveUserBoardPermissions should save user board permissions", () => {
     "should save user board permissions",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -1281,7 +1281,7 @@ describe("saveGroupBoardPermissions should save group board permissions", () =>
     "should save group board permissions",
     async (permission) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
       const spy = vi.spyOn(boardAccess, "throwIfActionForbiddenAsync");
 
@@ -1339,7 +1339,7 @@ const createNewLayout = (columnCount: number) => ({
 describe("saveLayouts should save layout changes", () => {
   test("should add layout when not present in database", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1363,7 +1363,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should add items and dynamic sections generated from grid-algorithm when new layout is added", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId, sectionId, itemId } = await createFullBoardAsync(db, "default");
@@ -1394,7 +1394,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should update layout when present in input", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1420,7 +1420,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should update position of items when column count changes", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId, sectionId, itemId } = await createFullBoardAsync(db, "default");
@@ -1447,7 +1447,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should remove layout when not present in input", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { boardId, layoutId } = await createFullBoardAsync(db, "default");
@@ -1466,7 +1466,7 @@ describe("saveLayouts should save layout changes", () => {
   });
   test("should fail when board not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = boardRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     const { layoutId } = await createFullBoardAsync(db, "default");

packages/api/src/router/test/board/board-access.spec.ts

@@ -4,7 +4,7 @@ import * as authShared from "@homarr/auth/shared";
 import { createId } from "@homarr/common";
 import { eq } from "@homarr/db";
 import { boards, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { throwIfActionForbiddenAsync } from "../../board/board-access";
 
@@ -26,7 +26,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, true],
   ])("with permission %s should return %s when hasFullAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: true,
@@ -55,7 +55,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, true],
   ])("with permission %s should return %s when hasChangeAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -84,7 +84,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, true],
   ])("with permission %s should return %s when hasViewAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -113,7 +113,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
     ["view" as const, false],
   ])("with permission %s should return %s when hasViewAccess is false", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructBoardPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -138,7 +138,7 @@ describe("throwIfActionForbiddenAsync should check access to board and return bo
 
   test("should throw when board is not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
 
     // Act
     const act = () => throwIfActionForbiddenAsync({ db, session: null }, eq(boards.id, createId()), "full");

packages/api/src/router/test/group.spec.ts

@@ -5,7 +5,7 @@ import * as env from "@homarr/auth/env";
 import { createId } from "@homarr/common";
 import { eq } from "@homarr/db";
 import { groupMembers, groupPermissions, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey } from "@homarr/definitions";
 
 import { groupRouter } from "../group";
@@ -37,7 +37,7 @@ describe("paginated should return a list of groups with pagination", () => {
     "with 5 groups in database and pageSize set to 3 on page %s it should return %s groups",
     async (page, expectedCount) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
       await db.insert(groups).values(
@@ -61,7 +61,7 @@ describe("paginated should return a list of groups with pagination", () => {
 
   test("with 5 groups in database and pagesize set to 3 it should return total count 5", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values(
@@ -83,7 +83,7 @@ describe("paginated should return a list of groups with pagination", () => {
 
   test("groups should contain id, name, email and image of members", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const user = createDummyUser();
@@ -120,7 +120,7 @@ describe("paginated should return a list of groups with pagination", () => {
     "groups should be searchable by name with contains pattern, query %s should result in %s results",
     async (query, expectedCount, firstKey) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
       await db.insert(groups).values(
@@ -144,7 +144,7 @@ describe("paginated should return a list of groups with pagination", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -158,7 +158,7 @@ describe("paginated should return a list of groups with pagination", () => {
 describe("byId should return group by id including members and permissions", () => {
   test('should return group with id "1" with members and permissions', async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const user = createDummyUser();
@@ -203,7 +203,7 @@ describe("byId should return group by id including members and permissions", ()
 
   test("with group id 1 and group 2 in database it should throw NOT_FOUND error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -221,7 +221,7 @@ describe("byId should return group by id including members and permissions", ()
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -235,7 +235,7 @@ describe("byId should return group by id including members and permissions", ()
 describe("create should create group in database", () => {
   test("with valid input (64 character name) and non existing name it should be successful", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const name = "a".repeat(64);
@@ -259,7 +259,7 @@ describe("create should create group in database", () => {
 
   test("with more than 64 characters name it should fail while validation", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
     const longName = "a".repeat(65);
 
@@ -280,7 +280,7 @@ describe("create should create group in database", () => {
     ["test", " TeSt"],
   ])("with similar name %s it should fail to create %s", async (similarName, nameToCreate) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -298,7 +298,7 @@ describe("create should create group in database", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -315,7 +315,7 @@ describe("update should update name with value that is no duplicate", () => {
     ["first", " first", "first"],
   ])("update should update name from %s to %s normalized", async (initialValue, updateValue, expectedValue) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -350,7 +350,7 @@ describe("update should update name with value that is no duplicate", () => {
     [" seCond", "second"],
   ])("with similar name %s it should fail to update %s", async (updateValue, initialDuplicate) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -380,7 +380,7 @@ describe("update should update name with value that is no duplicate", () => {
 
   test("with non existing id it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -402,7 +402,7 @@ describe("update should update name with value that is no duplicate", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -420,7 +420,7 @@ describe("update should update name with value that is no duplicate", () => {
 describe("savePermissions should save permissions for group", () => {
   test("with existing group and permissions it should save permissions", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -451,7 +451,7 @@ describe("savePermissions should save permissions for group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -473,7 +473,7 @@ describe("savePermissions should save permissions for group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -491,7 +491,7 @@ describe("savePermissions should save permissions for group", () => {
 describe("transferOwnership should transfer ownership of group", () => {
   test("with existing group and user it should transfer ownership", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -529,7 +529,7 @@ describe("transferOwnership should transfer ownership of group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -551,7 +551,7 @@ describe("transferOwnership should transfer ownership of group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -569,7 +569,7 @@ describe("transferOwnership should transfer ownership of group", () => {
 describe("deleteGroup should delete group", () => {
   test("with existing group it should delete group", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     const groupId = createId();
@@ -600,7 +600,7 @@ describe("deleteGroup should delete group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(groups).values({
@@ -621,7 +621,7 @@ describe("deleteGroup should delete group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -638,7 +638,7 @@ describe("deleteGroup should delete group", () => {
 describe("addMember should add member to group", () => {
   test("with existing group and user it should add member", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["credentials"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
@@ -679,7 +679,7 @@ describe("addMember should add member to group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(users).values({
@@ -700,7 +700,7 @@ describe("addMember should add member to group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -716,7 +716,7 @@ describe("addMember should add member to group", () => {
 
   test("without credentials provider it should throw FORBIDDEN error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["ldap"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
@@ -755,7 +755,7 @@ describe("addMember should add member to group", () => {
 describe("removeMember should remove member from group", () => {
   test("with existing group and user it should remove member", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["credentials"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
@@ -799,7 +799,7 @@ describe("removeMember should remove member from group", () => {
 
   test("with non existing group it should throw not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });
 
     await db.insert(users).values({
@@ -820,7 +820,7 @@ describe("removeMember should remove member from group", () => {
 
   test("without admin permissions it should throw unauthorized error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: defaultSession });
 
     // Act
@@ -836,7 +836,7 @@ describe("removeMember should remove member from group", () => {
 
   test("without credentials provider it should throw FORBIDDEN error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(env, "env", "get");
     spy.mockReturnValue({ AUTH_PROVIDERS: ["ldap"] } as never);
     const caller = groupRouter.createCaller({ db, deviceType: undefined, session: adminSession });

packages/api/src/router/test/integration/integration-access.spec.ts

@@ -4,7 +4,7 @@ import * as authShared from "@homarr/auth/shared";
 import { createId } from "@homarr/common";
 import { eq } from "@homarr/db";
 import { integrations, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { throwIfActionForbiddenAsync } from "../../integration/integration-access";
 
@@ -26,7 +26,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, true],
   ])("with permission %s should return %s when hasFullAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: true,
@@ -56,7 +56,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, true],
   ])("with permission %s should return %s when hasInteractAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -87,7 +87,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, true],
   ])("with permission %s should return %s when hasUseAccess is true", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -118,7 +118,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
     ["use" as const, false],
   ])("with permission %s should return %s when hasUseAccess is false", async (permission, expectedResult) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(authShared, "constructIntegrationPermissions");
     spy.mockReturnValue({
       hasFullAccess: false,
@@ -145,7 +145,7 @@ describe("throwIfActionForbiddenAsync should check access to integration and ret
 
   test("should throw when integration is not found", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
 
     // Act
     const act = () => throwIfActionForbiddenAsync({ db, session: null }, eq(integrations.id, createId()), "full");

packages/api/src/router/test/integration/integration-router.spec.ts

@@ -5,7 +5,7 @@ import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { encryptSecret } from "@homarr/common/server";
 import { apps, integrations, integrationSecrets } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey } from "@homarr/definitions";
 
 import { integrationRouter } from "../../integration/integration-router";
@@ -30,7 +30,7 @@ vi.mock("../../integration/integration-test-connection", () => ({
 
 describe("all should return all integrations", () => {
   test("with any session should return all integrations", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -61,7 +61,7 @@ describe("all should return all integrations", () => {
 
 describe("byId should return an integration by id", () => {
   test("with full access should return an integration by id", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -88,7 +88,7 @@ describe("byId should return an integration by id", () => {
   });
 
   test("with full access should throw an error if the integration does not exist", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -100,7 +100,7 @@ describe("byId should return an integration by id", () => {
   });
 
   test("with full access should only return the public secret values", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -148,7 +148,7 @@ describe("byId should return an integration by id", () => {
 
   test("without full access should throw integration not found error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -174,7 +174,7 @@ describe("byId should return an integration by id", () => {
 
 describe("create should create a new integration", () => {
   test("with create integration access should create a new integration", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -209,7 +209,7 @@ describe("create should create a new integration", () => {
   });
 
   test("with create integration access should create a new integration when creating search engine", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -252,7 +252,7 @@ describe("create should create a new integration", () => {
   });
 
   test("with create integration access should create a new integration with new linked app", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -302,7 +302,7 @@ describe("create should create a new integration", () => {
   });
 
   test("with create integration access should create a new integration with existing linked app", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const appId = createId();
     await db.insert(apps).values({
       id: appId,
@@ -349,7 +349,7 @@ describe("create should create a new integration", () => {
 
   test("without create integration access should throw permission error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -372,7 +372,7 @@ describe("create should create a new integration", () => {
 
   test("without create app access should throw permission error with new linked app", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -403,7 +403,7 @@ describe("create should create a new integration", () => {
 
 describe("update should update an integration", () => {
   test("with full access should update an integration", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -486,7 +486,7 @@ describe("update should update an integration", () => {
   });
 
   test("with full access should throw an error if the integration does not exist", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -506,7 +506,7 @@ describe("update should update an integration", () => {
 
   test("without full access should throw permission error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -530,7 +530,7 @@ describe("update should update an integration", () => {
 
 describe("delete should delete an integration", () => {
   test("with full access should delete an integration", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,
@@ -564,7 +564,7 @@ describe("delete should delete an integration", () => {
 
   test("without full access should throw permission error", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = integrationRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/invite.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { invites, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { inviteRouter } from "../invite";
 
@@ -35,7 +35,7 @@ vi.mock("@homarr/auth/env", () => {
 describe("all should return all existing invites without sensitive informations", () => {
   test("invites should not contain sensitive informations", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -70,7 +70,7 @@ describe("all should return all existing invites without sensitive informations"
 
   test("invites should be sorted ascending by expiration date", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -110,7 +110,7 @@ describe("all should return all existing invites without sensitive informations"
 describe("create should create a new invite expiring on the specified date with a token and id returned to generate url", () => {
   test("creation should work with a date in the future, but less than 6 months.", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -142,7 +142,7 @@ describe("create should create a new invite expiring on the specified date with
 describe("delete should remove invite by id", () => {
   test("deletion should remove present invite", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,
@@ -180,7 +180,7 @@ describe("delete should remove invite by id", () => {
 
   test("deletion should throw with NOT_FOUND code when specified invite not present", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = inviteRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/serverSettings.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { serverSettings } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import { defaultServerSettings, defaultServerSettingsKeys } from "@homarr/server-settings";
 
 import { serverSettingsRouter } from "../serverSettings";
@@ -23,7 +23,7 @@ const defaultSession = {
 
 describe("getAll server settings", () => {
   test("getAll should throw error when unauthorized", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = serverSettingsRouter.createCaller({
       db,
       deviceType: undefined,
@@ -42,7 +42,7 @@ describe("getAll server settings", () => {
     await expect(actAsync()).rejects.toThrow();
   });
   test("getAll should return default server settings when nothing in database", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = serverSettingsRouter.createCaller({
       db,
       deviceType: undefined,
@@ -57,7 +57,7 @@ describe("getAll server settings", () => {
 
 describe("saveSettings", () => {
   test("saveSettings should update settings and return true when it updated only one", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = serverSettingsRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/user.spec.ts

@@ -5,7 +5,7 @@ import { createId } from "@homarr/common";
 import type { Database } from "@homarr/db";
 import { eq } from "@homarr/db";
 import { invites, onboarding, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import type { GroupPermissionKey, OnboardingStep } from "@homarr/definitions";
 
 import { userRouter } from "../user";
@@ -39,7 +39,7 @@ vi.mock("@homarr/auth/env", () => {
 
 describe("initUser should initialize the first user", () => {
   it("should create a user if none exists", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     await createOnboardingStepAsync(db, "user");
     const caller = userRouter.createCaller({
       db,
@@ -63,7 +63,7 @@ describe("initUser should initialize the first user", () => {
   });
 
   it("should not create a user if the password and confirmPassword do not match", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     await createOnboardingStepAsync(db, "user");
     const caller = userRouter.createCaller({
       db,
@@ -88,7 +88,7 @@ describe("initUser should initialize the first user", () => {
     ["ABC123+/-"], // does not contain lowercase
     ["abc123+/-"], // does not contain uppercase
   ])("should throw error that password requirements do not match for '%s' as password", async (password) => {
-    const db = await createDbAsync();
+    const db = createDb();
     await createOnboardingStepAsync(db, "user");
     const caller = userRouter.createCaller({
       db,
@@ -110,7 +110,7 @@ describe("initUser should initialize the first user", () => {
 describe("register should create a user with valid invitation", () => {
   test("register should create a user with valid invitation", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,
@@ -166,7 +166,7 @@ describe("register should create a user with valid invitation", () => {
     "register should throw an error with input %s and date %s if the invitation is invalid",
     async (partialInput, systemTime) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const caller = userRouter.createCaller({
         db,
         deviceType: undefined,
@@ -209,7 +209,7 @@ describe("register should create a user with valid invitation", () => {
 describe("editProfile shoud update user", () => {
   test("editProfile should update users and not update emailVerified when email not dirty", async () => {
     // arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,
@@ -246,7 +246,7 @@ describe("editProfile shoud update user", () => {
 
   test("editProfile should update users and update emailVerified when email dirty", async () => {
     // arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,
@@ -282,7 +282,7 @@ describe("editProfile shoud update user", () => {
 
 describe("delete should delete user", () => {
   test("delete should delete user", async () => {
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = userRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/test/widgets/app.spec.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test, vi } from "vitest";
 
 import type { Session } from "@homarr/auth";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import * as ping from "@homarr/ping";
 
 import { appRouter } from "../../widgets/app";
@@ -15,7 +15,7 @@ describe("ping should call sendPingRequestAsync with url and return result", ()
     // Arrange
     const spy = vi.spyOn(ping, "sendPingRequestAsync");
     const url = "http://localhost";
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
@@ -35,7 +35,7 @@ describe("ping should call sendPingRequestAsync with url and return result", ()
     // Arrange
     const spy = vi.spyOn(ping, "sendPingRequestAsync");
     const url = "http://localhost";
-    const db = await createDbAsync();
+    const db = createDb();
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,

packages/api/src/router/user.ts

@@ -174,7 +174,7 @@ export const userRouter = createTRPCRouter({
   // Is protected because also used in board access / integration access forms
   selectable: protectedProcedure
     .input(z.object({ excludeExternalProviders: z.boolean().default(false) }).optional())
-    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true, email: true })))
+    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true })))
     .meta({ openapi: { method: "GET", path: "/api/users/selectable", tags: ["users"], protect: true } })
     .query(({ ctx, input }) => {
       return ctx.db.query.users.findMany({
@@ -182,7 +182,6 @@ export const userRouter = createTRPCRouter({
           id: true,
           name: true,
           image: true,
-          email: true,
         },
         where: input?.excludeExternalProviders ? eq(users.provider, "credentials") : undefined,
       });
@@ -195,7 +194,7 @@ export const userRouter = createTRPCRouter({
         limit: z.number().min(1).max(100).default(10),
       }),
     )
-    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true, email: true })))
+    .output(z.array(selectUserSchema.pick({ id: true, name: true, image: true })))
     .meta({ openapi: { method: "POST", path: "/api/users/search", tags: ["users"], protect: true } })
     .query(async ({ input, ctx }) => {
       const dbUsers = await ctx.db.query.users.findMany({
@@ -203,7 +202,6 @@ export const userRouter = createTRPCRouter({
           id: true,
           name: true,
           image: true,
-          email: true,
         },
         where: like(users.name, `%${input.query}%`),
         limit: input.limit,
@@ -212,7 +210,6 @@ export const userRouter = createTRPCRouter({
         id: user.id,
         name: user.name ?? "",
         image: user.image,
-        email: user.email,
       }));
     }),
   getById: protectedProcedure

packages/api/src/router/widgets/health-monitoring.ts

@@ -9,7 +9,7 @@ import { createTRPCRouter, publicProcedure } from "../../trpc";
 
 export const healthMonitoringRouter = createTRPCRouter({
   getSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "mock"))
+    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "mock"))
     .query(async ({ ctx }) => {
       return await Promise.all(
         ctx.integrations.map(async (integration) => {
@@ -26,7 +26,7 @@ export const healthMonitoringRouter = createTRPCRouter({
       );
     }),
   subscribeSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "mock"))
+    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "mock"))
     .subscription(({ ctx }) => {
       return observable<{ integrationId: string; healthInfo: SystemHealthMonitoring; timestamp: Date }>((emit) => {
         const unsubscribes: (() => void)[] = [];

packages/api/src/router/widgets/notebook.ts

@@ -24,7 +24,7 @@ export const notebookRouter = createTRPCRouter({
         where: eq(items.id, input.itemId),
       });
 
-      if (item?.boardId !== input.boardId) {
+      if (!item || item.boardId !== input.boardId) {
         throw new TRPCError({
           code: "NOT_FOUND",
           message: "Specified item was not found",

packages/auth/api-key/constants.ts

@@ -1 +0,0 @@
-export const API_KEY_HEADER_NAME = "ApiKey";

packages/auth/api-key/get-api-key-session.ts

@@ -1,76 +0,0 @@
-import type { Session } from "next-auth";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import type { Database } from "@homarr/db";
-import { eq } from "@homarr/db";
-import { apiKeys } from "@homarr/db/schema";
-
-import { hashPasswordAsync } from "../security";
-import { createSessionAsync } from "../server";
-
-const logger = createLogger({ module: "apiKeyAuth" });
-
-/**
- * Validate an API key from the request header and return a session if valid.
- *
- * @param db - The database instance
- * @param apiKeyHeaderValue - The value of the ApiKey header (format: "id.token")
- * @param ipAddress - The IP address of the request (for logging)
- * @param userAgent - The user agent of the request (for logging)
- * @returns A session if the API key is valid, null otherwise
- */
-export const getSessionFromApiKeyAsync = async (
-  db: Database,
-  apiKeyHeaderValue: string | null,
-  ipAddress: string | null,
-  userAgent: string,
-): Promise<Session | null> => {
-  if (apiKeyHeaderValue === null) {
-    return null;
-  }
-
-  const [apiKeyId, apiKey] = apiKeyHeaderValue.split(".");
-
-  if (!apiKeyId || !apiKey) {
-    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_INVALID_FORMAT" });
-    return null;
-  }
-
-  const apiKeyFromDb = await db.query.apiKeys.findFirst({
-    where: eq(apiKeys.id, apiKeyId),
-    columns: {
-      id: true,
-      apiKey: true,
-      salt: true,
-    },
-    with: {
-      user: {
-        columns: {
-          id: true,
-          name: true,
-          email: true,
-          emailVerified: true,
-        },
-      },
-    },
-  });
-
-  if (!apiKeyFromDb) {
-    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_NOT_FOUND" });
-    return null;
-  }
-
-  const hashedApiKey = await hashPasswordAsync(apiKey, apiKeyFromDb.salt);
-
-  if (apiKeyFromDb.apiKey !== hashedApiKey) {
-    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_MISMATCH" });
-    return null;
-  }
-
-  logger.info("Successfully authenticated with api-key", {
-    name: apiKeyFromDb.user.name,
-    id: apiKeyFromDb.user.id,
-  });
-
-  return await createSessionAsync(db, apiKeyFromDb.user);
-};

packages/auth/api-key/index.ts

@@ -1,2 +0,0 @@
-export { getSessionFromApiKeyAsync } from "./get-api-key-session";
-export { API_KEY_HEADER_NAME } from "./constants";

packages/auth/api-key/test/get-api-key-session.spec.ts

@@ -1,133 +0,0 @@
-/* eslint-disable @typescript-eslint/no-non-null-assertion */
-import { describe, expect, test, vi } from "vitest";
-
-import { createId } from "@homarr/common";
-import { apiKeys, users } from "@homarr/db/schema";
-import { createDb } from "@homarr/db/test";
-
-import { createSaltAsync, hashPasswordAsync } from "../../security";
-import { getSessionFromApiKeyAsync } from "../get-api-key-session";
-
-// Mock the logger to avoid console output during tests
-vi.mock("@homarr/core/infrastructure/logs", () => ({
-  createLogger: () => ({
-    warn: vi.fn(),
-    info: vi.fn(),
-  }),
-}));
-
-const defaultUserId = createId();
-const defaultUsername = "testuser";
-const defaultApiKeyId = createId();
-const defaultIpAddress = "127.0.0.1";
-const defaultUserAgent = "test-agent";
-const defaultLogParams = [defaultIpAddress, defaultUserAgent] as const;
-
-describe("getSessionFromApiKeyAsync", () => {
-  test("should return null when api key header is null", async () => {
-    // Arrange
-    const { db } = await setupAsync();
-    const apiKey = null;
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, apiKey, ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test.each([
-    ["invalidformat", "no dot"],
-    ["keyid.", "missing token"],
-    [".token", "missing id"],
-  ])("should return null when api key format is invalid key=%s reason=%s", async (apiKey) => {
-    // Arrange
-    const { db } = await setupAsync();
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, apiKey, ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test("should return null when api key is not found in database", async () => {
-    // Arrange
-    const { db } = await setupAsync();
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, "nonexistent.token", ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test("should return null when api key token does not match", async () => {
-    // Arrange
-    const { db } = await setupAsync({ token: "correcttoken" });
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, `${defaultApiKeyId}.wrongtoken`, ...defaultLogParams);
-
-    // Assert
-    expect(result).toBeNull();
-  });
-
-  test("should return session when api key is valid", async () => {
-    // Arrange
-    const token = "validtesttoken123";
-    const { db } = await setupAsync({ token });
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, `${defaultApiKeyId}.${token}`, ...defaultLogParams);
-
-    // Assert
-    expect(result).not.toBeNull();
-    expect(result!.user.id).toEqual(defaultUserId);
-    expect(result!.user.name).toEqual(defaultUsername);
-  });
-
-  test("should work with null ip address", async () => {
-    // Arrange
-    const token = "validtesttoken456";
-    const { db } = await setupAsync({ token });
-
-    // Act
-    const result = await getSessionFromApiKeyAsync(db, `${defaultApiKeyId}.${token}`, null, defaultUserAgent);
-
-    // Assert
-    expect(result).not.toBeNull();
-    expect(result!.user.id).toEqual(defaultUserId);
-  });
-});
-
-interface SetupOptions {
-  /**
-   * If provided, inserts an API key into the database for testing.
-   */
-  token?: string;
-}
-
-const setupAsync = async (options?: SetupOptions) => {
-  const db = createDb();
-
-  await db.insert(users).values({
-    id: defaultUserId,
-    name: defaultUsername,
-    email: "test@example.com",
-  });
-
-  if (options?.token) {
-    const salt = await createSaltAsync();
-    await db.insert(apiKeys).values({
-      id: defaultApiKeyId,
-      apiKey: await hashPasswordAsync(options.token, salt),
-      salt,
-      userId: defaultUserId,
-    });
-  }
-
-  return {
-    db,
-  };
-};

packages/auth/package.json

@@ -8,7 +8,6 @@
     ".": "./index.ts",
     "./next": "./next.ts",
     "./security": "./security.ts",
-    "./api-key": "./api-key/index.ts",
     "./client": "./client.ts",
     "./server": "./server.ts",
     "./shared": "./shared.ts",
@@ -26,6 +25,7 @@
   "dependencies": {
     "@auth/core": "^0.41.1",
     "@auth/drizzle-adapter": "^1.11.1",
+    "@homarr/certificates": "workspace:^0.1.0",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
@@ -33,12 +33,12 @@
     "@homarr/validation": "workspace:^0.1.0",
     "bcrypt": "^6.0.0",
     "cookies": "^0.9.1",
-    "ldapts": "8.1.3",
-    "next": "16.1.1",
+    "ldapts": "8.0.23",
+    "next": "16.0.10",
     "next-auth": "5.0.0-beta.30",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",

packages/auth/permissions/test/integration-query-permissions.spec.ts

@@ -4,7 +4,7 @@ import { describe, expect, test, vi } from "vitest";
 import { createId } from "@homarr/common";
 import type { InferInsertModel } from "@homarr/db";
 import { boardGroupPermissions, boards, boardUserPermissions, groupMembers, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import * as integrationPermissions from "../integration-permissions";
 import { hasQueryAccessToIntegrationsAsync } from "../integration-query-permissions";
@@ -22,7 +22,7 @@ const createSession = (user: Partial<Session["user"]>): Session => ({
 describe("hasQueryAccessToIntegrationsAsync should check if the user has query access to the specified integrations", () => {
   test("should return true if the user has the board-view-all permission and the integrations are used anywhere", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({
       permissions: ["board-view-all"],
     });
@@ -50,7 +50,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has the board-view-all permission, the first integration is used and the second one he has use access", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({
       permissions: ["board-view-all"],
     });
@@ -84,7 +84,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has use access to all integrations", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
     spy.mockReturnValue({
@@ -116,7 +116,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has user permission to access to at least one board of each integration", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -168,7 +168,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user has user permission to access board of first integration but not of second one", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -215,7 +215,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has group permission to access to at least one board of each integration", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -269,7 +269,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user has group permission to access board of first integration but not of second one", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -318,7 +318,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user has user permission to access first board and group permission to access second one", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const spy = vi.spyOn(integrationPermissions, "constructIntegrationPermissions");
@@ -369,7 +369,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if one of the boards the integration is used is public", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     const integrations = [
       {
@@ -413,7 +413,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user is creator of the board the integration is used", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     await db.insert(users).values({ id: session.user.id });
     const integrations = [
@@ -458,7 +458,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user has no access to any of the integrations", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const session = createSession({});
     const integrations = [
       {
@@ -496,7 +496,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return false if the user is anonymous and the board is not public", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const integrations = [
       {
         id: "1",
@@ -534,7 +534,7 @@ describe("hasQueryAccessToIntegrationsAsync should check if the user has query a
 
   test("should return true if the user is anonymous and the board is public", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const integrations = [
       {
         id: "1",

packages/auth/providers/oidc/oidc-provider.ts

@@ -3,7 +3,7 @@ import type { OIDCConfig } from "@auth/core/providers";
 import type { Profile } from "@auth/core/types";
 import { customFetch } from "next-auth";
 
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/certificates/server";
 
 import { env } from "../../env";
 import { createRedirectUri } from "../../redirect";

packages/auth/providers/test/basic-authorization.spec.ts

@@ -2,7 +2,7 @@ import { describe, expect, test } from "vitest";
 
 import { createId } from "@homarr/common";
 import { users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { createSaltAsync, hashPasswordAsync } from "../../security";
 import { authorizeWithBasicCredentialsAsync } from "../credentials/authorization/basic-authorization";
@@ -12,7 +12,7 @@ const defaultUserId = createId();
 describe("authorizeWithBasicCredentials", () => {
   test("should authorize user with correct credentials", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
@@ -33,7 +33,7 @@ describe("authorizeWithBasicCredentials", () => {
 
   test("should not authorize user with incorrect credentials", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
@@ -54,7 +54,7 @@ describe("authorizeWithBasicCredentials", () => {
 
   test("should not authorize user with incorrect username", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
@@ -75,7 +75,7 @@ describe("authorizeWithBasicCredentials", () => {
 
   test("should not authorize user when password is not set", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     await db.insert(users).values({
       id: defaultUserId,
       name: "test",

packages/auth/providers/test/ldap-authorization.spec.ts

@@ -5,7 +5,7 @@ import { createId } from "@homarr/common";
 import type { Database } from "@homarr/db";
 import { and, eq } from "@homarr/db";
 import { groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { authorizeWithLdapCredentialsAsync } from "../credentials/authorization/ldap-authorization";
 import * as ldapClient from "../credentials/ldap-client";
@@ -123,7 +123,7 @@ describe("authorizeWithLdapCredentials", () => {
 
   test("should authorize user with correct credentials and create user", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(ldapClient, "LdapClient");
     spy.mockImplementation(function () {
       return {
@@ -161,7 +161,7 @@ describe("authorizeWithLdapCredentials", () => {
 
   test("should authorize user with correct credentials and create user with same email when credentials user already exists", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const spy = vi.spyOn(ldapClient, "LdapClient");
     spy.mockImplementation(function () {
       return {
@@ -230,7 +230,7 @@ describe("authorizeWithLdapCredentials", () => {
     });
 
     const userId = createId();
-    const db = await createDbAsync();
+    const db = createDb();
     await db.insert(users).values({
       id: userId,
       name: "test-old",
@@ -281,7 +281,7 @@ describe("authorizeWithLdapCredentials", () => {
         disconnectAsync: vi.fn(),
       } as unknown as ldapClient.LdapClient;
     });
-    const db = await createDbAsync();
+    const db = createDb();
     const userId = createId();
     await db.insert(users).values({
       id: userId,

packages/auth/test/adapter.spec.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test } from "vitest";
 
 import { users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 
 import { createAdapter } from "../adapter";
 
@@ -10,7 +10,7 @@ describe("createAdapter should create drizzle adapter", () => {
     "createAdapter getUserByEmail should return user for provider %s when this provider provided",
     async (provider) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const adapter = createAdapter(db, provider);
       const email = "test@example.com";
       await db.insert(users).values({ id: "1", name: "test", email, provider });
@@ -37,7 +37,7 @@ describe("createAdapter should create drizzle adapter", () => {
     "createAdapter getUserByEmail should return null if only for other providers than %s exist",
     async (requestedProvider, existingProviders) => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       const adapter = createAdapter(db, requestedProvider);
       const email = "test@example.com";
       for (const provider of existingProviders) {
@@ -54,7 +54,7 @@ describe("createAdapter should create drizzle adapter", () => {
 
   test("createAdapter getUserByEmail should throw error if provider is unknown", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const adapter = createAdapter(db, "unknown");
     const email = "test@example.com";
 

packages/auth/test/callbacks.spec.ts

@@ -4,7 +4,7 @@ import type { JWT } from "next-auth/jwt";
 import { describe, expect, test, vi } from "vitest";
 
 import { groupMembers, groupPermissions, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import * as definitions from "@homarr/definitions";
 
 import { createSessionCallback, getCurrentUserPermissionsAsync } from "../callbacks";
@@ -20,7 +20,7 @@ vi.mock("next/headers", () => ({
 describe("getCurrentUserPermissions", () => {
   test("should return empty permissions when non existing user requested", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
 
     await db.insert(groups).values({
       id: "2",
@@ -46,7 +46,7 @@ describe("getCurrentUserPermissions", () => {
 
   test("should return empty permissions when user has no groups", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const userId = "1";
 
     await db.insert(groups).values({
@@ -71,7 +71,7 @@ describe("getCurrentUserPermissions", () => {
 
   test("should return permissions for user", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     const getPermissionsWithChildrenMock = vi
       .spyOn(definitions, "getPermissionsWithChildren")
       .mockReturnValue(["board-create"]);
@@ -113,7 +113,7 @@ describe("session callback", () => {
       emailVerified: new Date("2023-01-13"),
     };
     const token: JWT = {};
-    const db = await createDbAsync();
+    const db = createDb();
     const callback = createSessionCallback(db);
 
     // Act

packages/auth/test/events.spec.ts

@@ -6,7 +6,7 @@ import { describe, expect, test, vi } from "vitest";
 import { eq } from "@homarr/db";
 import type { Database } from "@homarr/db";
 import { groupMembers, groups, users } from "@homarr/db/schema";
-import { createDbAsync } from "@homarr/db/test";
+import { createDb } from "@homarr/db/test";
 import { colorSchemeCookieKey, everyoneGroup } from "@homarr/definitions";
 
 import { createSignInEventHandler } from "../events";
@@ -39,7 +39,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   describe("signInEventHandler should add users to everyone group", () => {
     test("should add user to everyone group if he isn't already", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db, everyoneGroup);
       const eventHandler = createSignInEventHandler(db);
@@ -62,7 +62,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   describe("signInEventHandler should synchronize ldap groups", () => {
     test("should add missing group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       const eventHandler = createSignInEventHandler(db);
@@ -82,7 +82,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should remove group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       await db.insert(groupMembers).values({
@@ -106,7 +106,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should not remove group membership for everyone group", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db, everyoneGroup);
       await db.insert(groupMembers).values({
@@ -132,7 +132,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   describe("signInEventHandler should synchronize oidc groups", () => {
     test("should add missing group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       const eventHandler = createSignInEventHandler(db);
@@ -152,7 +152,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should remove group membership", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db);
       await db.insert(groupMembers).values({
@@ -176,7 +176,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     });
     test("should not remove group membership for everyone group", async () => {
       // Arrange
-      const db = await createDbAsync();
+      const db = createDb();
       await createUserAsync(db);
       await createGroupAsync(db, everyoneGroup);
       await db.insert(groupMembers).values({
@@ -205,7 +205,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
     ["oidc" as const, { name: "test" }, { preferred_username: "test@example.com", name: "test-new" }],
   ])("signInEventHandler should update username for %s provider", async (_provider, user, profile) => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     await createUserAsync(db);
     const eventHandler = createSignInEventHandler(db);
 
@@ -227,7 +227,7 @@ describe("createSignInEventHandler should create signInEventHandler", () => {
   });
   test("signInEventHandler should set color-scheme cookie", async () => {
     // Arrange
-    const db = await createDbAsync();
+    const db = createDb();
     await createUserAsync(db);
     const eventHandler = createSignInEventHandler(db);
 

packages/certificates/eslint.config.js

@@ -0,0 +1,9 @@
+import baseConfig from "@homarr/eslint-config/base";
+
+/** @type {import('typescript-eslint').Config} */
+export default [
+  {
+    ignores: [],
+  },
+  ...baseConfig,
+];

packages/certificates/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@homarr/certificates",
+  "version": "0.1.0",
+  "private": true,
+  "license": "Apache-2.0",
+  "type": "module",
+  "exports": {
+    "./server": "./src/server.ts"
+  },
+  "typesVersions": {
+    "*": {
+      "*": [
+        "src/*"
+      ]
+    }
+  },
+  "scripts": {
+    "clean": "rm -rf .turbo node_modules",
+    "format": "prettier --check . --ignore-path ../../.gitignore",
+    "lint": "eslint",
+    "typecheck": "tsc --noEmit"
+  },
+  "prettier": "@homarr/prettier-config",
+  "dependencies": {
+    "@homarr/common": "workspace:^0.1.0",
+    "@homarr/db": "workspace:^0.1.0",
+    "undici": "7.16.0"
+  },
+  "devDependencies": {
+    "@homarr/eslint-config": "workspace:^0.2.0",
+    "@homarr/prettier-config": "workspace:^0.1.0",
+    "@homarr/tsconfig": "workspace:^0.1.0",
+    "eslint": "^9.39.2",
+    "typescript": "^5.9.3"
+  }
+}

packages/certificates/src/server.ts

@@ -0,0 +1,141 @@
+import { X509Certificate } from "node:crypto";
+import fsSync from "node:fs";
+import fs from "node:fs/promises";
+import type { AgentOptions } from "node:https";
+import { Agent as HttpsAgent } from "node:https";
+import path from "node:path";
+import { checkServerIdentity, rootCertificates } from "node:tls";
+import axios from "axios";
+import type { RequestInfo, RequestInit, Response } from "undici";
+import { fetch } from "undici";
+
+import { env } from "@homarr/common/env";
+import { LoggingAgent } from "@homarr/common/server";
+import type { InferSelectModel } from "@homarr/db";
+import { db } from "@homarr/db";
+import type { trustedCertificateHostnames } from "@homarr/db/schema";
+
+const getCertificateFolder = () => {
+  if (env.NODE_ENV !== "production") return process.env.LOCAL_CERTIFICATE_PATH;
+  return process.env.LOCAL_CERTIFICATE_PATH ?? path.join("/appdata", "trusted-certificates");
+};
+
+export const loadCustomRootCertificatesAsync = async () => {
+  const folder = getCertificateFolder();
+
+  if (!folder) {
+    return [];
+  }
+
+  if (!fsSync.existsSync(folder)) {
+    await fs.mkdir(folder, { recursive: true });
+  }
+
+  const dirContent = await fs.readdir(folder);
+  return await Promise.all(
+    dirContent
+      .filter((file) => file.endsWith(".crt") || file.endsWith(".pem"))
+      .map(async (file) => ({
+        content: await fs.readFile(path.join(folder, file), "utf8"),
+        fileName: file,
+      })),
+  );
+};
+
+export const removeCustomRootCertificateAsync = async (fileName: string) => {
+  const folder = getCertificateFolder();
+  if (!folder) {
+    return null;
+  }
+
+  const existingFiles = await fs.readdir(folder, { withFileTypes: true });
+  if (!existingFiles.some((file) => file.isFile() && file.name === fileName)) {
+    throw new Error(`File ${fileName} does not exist`);
+  }
+
+  const fullPath = path.join(folder, fileName);
+  const content = await fs.readFile(fullPath, "utf8");
+
+  await fs.rm(fullPath);
+  try {
+    return new X509Certificate(content);
+  } catch {
+    return null;
+  }
+};
+
+export const addCustomRootCertificateAsync = async (fileName: string, content: string) => {
+  const folder = getCertificateFolder();
+  if (!folder) {
+    throw new Error(
+      "When you want to use custom certificates locally you need to set LOCAL_CERTIFICATE_PATH to an absolute path",
+    );
+  }
+
+  if (fileName.includes("/")) {
+    throw new Error("Invalid file name");
+  }
+
+  await fs.writeFile(path.join(folder, fileName), content);
+};
+
+export const getTrustedCertificateHostnamesAsync = async () => {
+  return await db.query.trustedCertificateHostnames.findMany();
+};
+
+export const getAllTrustedCertificatesAsync = async () => {
+  const customCertificates = await loadCustomRootCertificatesAsync();
+  return rootCertificates.concat(customCertificates.map((cert) => cert.content));
+};
+
+export const createCustomCheckServerIdentity = (
+  trustedHostnames: InferSelectModel<typeof trustedCertificateHostnames>[],
+): typeof checkServerIdentity => {
+  return (hostname, peerCertificate) => {
+    const matchingTrustedHostnames = trustedHostnames.filter(
+      (cert) => cert.thumbprint === peerCertificate.fingerprint256,
+    );
+
+    // We trust the certificate if we have a matching hostname
+    if (matchingTrustedHostnames.some((cert) => cert.hostname === hostname)) return undefined;
+
+    return checkServerIdentity(hostname, peerCertificate);
+  };
+};
+
+export const createCertificateAgentAsync = async (override?: {
+  ca: string | string[];
+  checkServerIdentity: typeof checkServerIdentity;
+}) => {
+  return new LoggingAgent({
+    connect: override ?? {
+      ca: await getAllTrustedCertificatesAsync(),
+      checkServerIdentity: createCustomCheckServerIdentity(await getTrustedCertificateHostnamesAsync()),
+    },
+  });
+};
+
+export const createHttpsAgentAsync = async (override?: Pick<AgentOptions, "ca" | "checkServerIdentity">) => {
+  return new HttpsAgent(
+    override ?? {
+      ca: await getAllTrustedCertificatesAsync(),
+      checkServerIdentity: createCustomCheckServerIdentity(await getTrustedCertificateHostnamesAsync()),
+    },
+  );
+};
+
+export const createAxiosCertificateInstanceAsync = async (
+  override?: Pick<AgentOptions, "ca" | "checkServerIdentity">,
+) => {
+  return axios.create({
+    httpsAgent: await createHttpsAgentAsync(override),
+  });
+};
+
+export const fetchWithTrustedCertificatesAsync = async (url: RequestInfo, options?: RequestInit): Promise<Response> => {
+  const agent = await createCertificateAgentAsync(undefined);
+  return fetch(url, {
+    ...options,
+    dispatcher: agent,
+  });
+};

packages/certificates/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "@homarr/tsconfig/base.json",
+  "compilerOptions": {
+    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
+  },
+  "include": ["*.ts", "src"],
+  "exclude": ["node_modules"]
+}

packages/cli/package.json

@@ -34,7 +34,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "esbuild": "^0.27.2",
+    "esbuild": "^0.27.1",
     "eslint": "^9.39.2",
     "typescript": "^5.9.3"
   }

packages/common/env.ts

@@ -24,10 +24,12 @@ export const env = createEnv({
         message: `SECRET_ENCRYPTION_KEY must only contain hex characters${errorSuffix}`,
       }),
     NO_EXTERNAL_CONNECTION: createBooleanSchema(false),
+    ENABLE_DNS_CACHING: createBooleanSchema(false),
   },
   runtimeEnv: {
     SECRET_ENCRYPTION_KEY: process.env.SECRET_ENCRYPTION_KEY,
     NODE_ENV: process.env.NODE_ENV,
     NO_EXTERNAL_CONNECTION: process.env.NO_EXTERNAL_CONNECTION,
+    ENABLE_DNS_CACHING: process.env.ENABLE_DNS_CACHING,
   },
 });

packages/common/package.json

@@ -8,6 +8,7 @@
     ".": "./index.ts",
     "./types": "./src/types.ts",
     "./server": "./src/server.ts",
+    "./init-dns": "./src/dns.ts",
     "./client": "./src/client.ts",
     "./env": "./env.ts"
   },
@@ -29,12 +30,13 @@
     "@homarr/core": "workspace:^0.1.0",
     "@paralleldrive/cuid2": "^3.1.0",
     "dayjs": "^1.11.19",
-    "next": "16.1.1",
+    "dns-caching": "^0.2.9",
+    "next": "16.0.10",
     "octokit": "^5.0.5",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "undici": "7.18.2",
-    "zod": "^4.2.1",
+    "undici": "7.16.0",
+    "zod": "^4.1.13",
     "zod-validation-error": "^5.0.0"
   },
   "devDependencies": {

packages/common/src/dns.ts

@@ -2,7 +2,7 @@ import { DnsCacheManager } from "dns-caching";
 
 import { createLogger } from "@homarr/core/infrastructure/logs";
 
-import { dnsEnv } from "./env";
+import { env } from "../env";
 
 // Add global type augmentation for homarr
 declare global {
@@ -23,6 +23,6 @@ global.homarr.dnsCacheManager ??= new DnsCacheManager({
   logger,
 });
 
-if (dnsEnv.ENABLE_DNS_CACHING) {
+if (env.ENABLE_DNS_CACHING) {
   global.homarr.dnsCacheManager.initialize();
 }

packages/common/src/errors/http/handlers/http-error-handler.ts

@@ -1,11 +1,11 @@
-import type { ILogger } from "@homarr/core/infrastructure/logs";
+import type { Logger } from "@homarr/core/infrastructure/logs";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 
 import type { AnyRequestError } from "../request-error";
 import type { ResponseError } from "../response-error";
 
 export abstract class HttpErrorHandler {
-  protected logger: ILogger;
+  protected logger: Logger;
 
   constructor(type: string) {
     this.logger = createLogger({ module: "httpErrorHandler", type });

packages/common/src/errors/parse/handlers/parse-error-handler.ts

@@ -1,10 +1,10 @@
-import type { ILogger } from "@homarr/core/infrastructure/logs";
+import type { Logger } from "@homarr/core/infrastructure/logs";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 
 import type { ParseError } from "../parse-error";
 
 export abstract class ParseErrorHandler {
-  protected logger: ILogger;
+  protected logger: Logger;
   constructor(type: string) {
     this.logger = createLogger({ module: "parseErrorHandler", type });
   }

packages/common/src/fetch-agent.ts

@@ -0,0 +1,41 @@
+import type { Dispatcher } from "undici";
+import { Agent } from "undici";
+
+import { createLogger } from "@homarr/core/infrastructure/logs";
+
+// The below import statement initializes dns-caching
+import "./dns";
+
+const logger = createLogger({ module: "fetchAgent" });
+
+export class LoggingAgent extends Agent {
+  constructor(...props: ConstructorParameters<typeof Agent>) {
+    super(...props);
+  }
+
+  dispatch(options: Dispatcher.DispatchOptions, handler: Dispatcher.DispatchHandler): boolean {
+    const path = options.path
+      .split("/")
+      .map((segment) => (segment.length >= 32 && !segment.startsWith("?") ? "REDACTED" : segment))
+      .join("/");
+    const url = new URL(`${options.origin as string}${path}`);
+
+    // The below code should prevent sensitive data from being logged as
+    // some integrations use query parameters for auth
+    url.searchParams.forEach((value, key) => {
+      if (value === "") return; // Skip empty values
+      if (/^-?\d{1,12}$/.test(value)) return; // Skip small numbers
+      if (value === "true" || value === "false") return; // Skip boolean values
+      if (/^[a-zA-Z]{1,12}$/.test(value)) return; // Skip short strings
+      if (/^\d{4}-\d{2}-\d{2}$/.test(value)) return; // Skip dates
+      if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value)) return; // Skip date times
+
+      url.searchParams.set(key, "REDACTED");
+    });
+
+    logger.debug(
+      `Dispatching request ${url.toString().replaceAll("=&", "&")} (${Object.keys(options.headers ?? {}).length} headers)`,
+    );
+    return super.dispatch(options, handler);
+  }
+}

packages/common/src/fetch-with-timeout.ts

@@ -0,0 +1,16 @@
+/**
+ * Same as fetch, but with a timeout of 10 seconds.
+ * https://stackoverflow.com/questions/46946380/fetch-api-request-timeout
+ * @param param0 fetch arguments
+ * @returns fetch response
+ */
+export const fetchWithTimeout = (...[url, requestInit]: Parameters<typeof fetch>) => {
+  const controller = new AbortController();
+
+  // 10 seconds timeout:
+  const timeoutId = setTimeout(() => controller.abort(), 10000);
+
+  return fetch(url, { signal: controller.signal, ...requestInit }).finally(() => {
+    clearTimeout(timeoutId);
+  });
+};

packages/common/src/index.ts

@@ -9,6 +9,7 @@ export * from "./id";
 export * from "./url";
 export * from "./number";
 export * from "./error";
+export * from "./fetch-with-timeout";
 export * from "./theme";
 export * from "./function";
 export * from "./id";

packages/common/src/server.ts

@@ -1,4 +1,5 @@
 export * from "./security";
 export * from "./encryption";
-export * from "./request";
+export * from "./user-agent";
+export * from "./fetch-agent";
 export * from "./errors";

packages/common/src/test/fetch-agent.spec.ts

@@ -1,13 +1,13 @@
 import type { Dispatcher } from "undici";
 import { describe, expect, test, vi } from "vitest";
 
-import { UndiciHttpAgent } from "@homarr/core/infrastructure/http";
+import * as logs from "@homarr/core/infrastructure/logs";
 
-import { TestLogger } from "../logs";
+import { LoggingAgent } from "../fetch-agent";
 
 vi.mock("undici", () => {
   return {
-    EnvHttpProxyAgent: class EnvHttpProxyAgent {
+    Agent: class Agent {
       dispatch(_options: Dispatcher.DispatchOptions, _handler: Dispatcher.DispatchHandler): boolean {
         return true;
       }
@@ -16,28 +16,37 @@ vi.mock("undici", () => {
   };
 });
 
+vi.mock("@homarr/core/infrastructure/logs", async () => {
+  const actual: typeof logs = await vi.importActual("@homarr/core/infrastructure/logs");
+  return {
+    ...actual,
+    createLogger: vi.fn().mockReturnValue({
+      debug: vi.fn(),
+    }),
+  };
+});
+
 const REDACTED = "REDACTED";
 
-describe("UndiciHttpAgent should log all requests", () => {
+const loggerMock = logs.createLogger({ module: "test" });
+
+describe("LoggingAgent should log all requests", () => {
   test("should log all requests", () => {
     // Arrange
-    const logger = new TestLogger();
-    const agent = new UndiciHttpAgent({ logger });
+    const debugSpy = vi.spyOn(loggerMock, "debug");
+    const agent = new LoggingAgent();
 
     // Act
     agent.dispatch({ origin: "https://homarr.dev", path: "/", method: "GET" }, {});
 
     // Assert
-    expect(logger.messages).toContainEqual({
-      level: "debug",
-      message: "Dispatching request https://homarr.dev/ (0 headers)",
-    });
+    expect(debugSpy).toHaveBeenCalledWith("Dispatching request https://homarr.dev/ (0 headers)");
   });
 
   test("should show amount of headers", () => {
     // Arrange
-    const logger = new TestLogger();
-    const agent = new UndiciHttpAgent({ logger });
+    const debugSpy = vi.spyOn(loggerMock, "debug");
+    const agent = new LoggingAgent();
 
     // Act
     agent.dispatch(
@@ -54,7 +63,7 @@ describe("UndiciHttpAgent should log all requests", () => {
     );
 
     // Assert
-    expect(logger.messages.at(-1)?.message).toContain("(2 headers)");
+    expect(debugSpy).toHaveBeenCalledWith(expect.stringContaining("(2 headers)"));
   });
 
   test.each([
@@ -72,14 +81,14 @@ describe("UndiciHttpAgent should log all requests", () => {
     [`/${"a".repeat(32)}/?param=123`, `/${REDACTED}/?param=123`],
   ])("should redact sensitive data in url https://homarr.dev%s", (path, expected) => {
     // Arrange
-    const logger = new TestLogger();
-    const agent = new UndiciHttpAgent({ logger });
+    const debugSpy = vi.spyOn(loggerMock, "debug");
+    const agent = new LoggingAgent();
 
     // Act
     agent.dispatch({ origin: "https://homarr.dev", path, method: "GET" }, {});
 
     // Assert
-    expect(logger.messages.at(-1)?.message).toContain(` https://homarr.dev${expected} `);
+    expect(debugSpy).toHaveBeenCalledWith(expect.stringContaining(` https://homarr.dev${expected} `));
   });
   test.each([
     ["empty", "/?empty"],
@@ -91,13 +100,13 @@ describe("UndiciHttpAgent should log all requests", () => {
     ["date times", "/?datetime=2022-01-01T00:00:00.000Z"],
   ])("should not redact values that are %s", (_reason, path) => {
     // Arrange
-    const logger = new TestLogger();
-    const agent = new UndiciHttpAgent({ logger });
+    const debugSpy = vi.spyOn(loggerMock, "debug");
+    const agent = new LoggingAgent();
 
     // Act
     agent.dispatch({ origin: "https://homarr.dev", path, method: "GET" }, {});
 
     // Assert
-    expect(logger.messages.at(-1)?.message).toContain(` https://homarr.dev${path} `);
+    expect(debugSpy).toHaveBeenCalledWith(expect.stringContaining(` https://homarr.dev${path} `));
   });
 });

packages/common/src/user-agent.ts

@@ -9,7 +9,3 @@ export const userAgent = (headers: Headers) => {
 };
 
 export type DeviceType = "console" | "mobile" | "tablet" | "smarttv" | "wearable" | "embedded" | undefined;
-
-export const ipAddressFromHeaders = (headers: Headers): string | null => {
-  return headers.get("x-forwarded-for");
-};

packages/core/package.json

@@ -13,14 +13,7 @@
     "./infrastructure/logs/error": "./src/infrastructure/logs/error.ts",
     "./infrastructure/db": "./src/infrastructure/db/index.ts",
     "./infrastructure/db/env": "./src/infrastructure/db/env.ts",
-    "./infrastructure/db/constants": "./src/infrastructure/db/constants.ts",
-    "./infrastructure/certificates": "./src/infrastructure/certificates/index.ts",
-    "./infrastructure/certificates/hostnames/db/sqlite": "./src/infrastructure/certificates/hostnames/db/sqlite.ts",
-    "./infrastructure/certificates/hostnames/db/mysql": "./src/infrastructure/certificates/hostnames/db/mysql.ts",
-    "./infrastructure/certificates/hostnames/db/postgresql": "./src/infrastructure/certificates/hostnames/db/postgresql.ts",
-    "./infrastructure/dns/init": "./src/infrastructure/dns/init.ts",
-    "./infrastructure/http": "./src/infrastructure/http/index.ts",
-    "./infrastructure/http/timeout": "./src/infrastructure/http/timeout.ts"
+    "./infrastructure/db/constants": "./src/infrastructure/db/constants.ts"
   },
   "typesVersions": {
     "*": {
@@ -37,21 +30,21 @@
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
-    "@libsql/client": "0.15.15",
-    "@t3-oss/env-nextjs": "^0.13.10",
-    "dns-caching": "^0.2.9",
+    "@t3-oss/env-nextjs": "^0.13.8",
+    "better-sqlite3": "^12.5.0",
     "drizzle-orm": "^0.45.1",
-    "ioredis": "5.9.1",
-    "mysql2": "3.16.0",
+    "ioredis": "5.8.2",
+    "mysql2": "3.15.3",
     "pg": "^8.16.3",
     "superjson": "2.2.6",
     "winston": "3.19.0",
-    "zod": "^4.2.1"
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
+    "@types/better-sqlite3": "7.6.13",
     "@types/pg": "^8.16.0",
     "eslint": "^9.39.2",
     "typescript": "^5.9.3"

packages/core/src/infrastructure/certificates/files/index.ts

@@ -1,74 +0,0 @@
-import { X509Certificate } from "node:crypto";
-import fsSync from "node:fs";
-import fs from "node:fs/promises";
-import path from "node:path";
-import { rootCertificates } from "node:tls";
-
-const getCertificateFolder = () => {
-  if (process.env.NODE_ENV !== "production") return process.env.LOCAL_CERTIFICATE_PATH;
-  return process.env.LOCAL_CERTIFICATE_PATH ?? path.join("/appdata", "trusted-certificates");
-};
-
-export const loadCustomRootCertificatesAsync = async () => {
-  const folder = getCertificateFolder();
-
-  if (!folder) {
-    return [];
-  }
-
-  if (!fsSync.existsSync(folder)) {
-    await fs.mkdir(folder, { recursive: true });
-  }
-
-  const dirContent = await fs.readdir(folder);
-  return await Promise.all(
-    dirContent
-      .filter((file) => file.endsWith(".crt") || file.endsWith(".pem"))
-      .map(async (file) => ({
-        content: await fs.readFile(path.join(folder, file), "utf8"),
-        fileName: file,
-      })),
-  );
-};
-
-export const getAllTrustedCertificatesAsync = async () => {
-  const customCertificates = await loadCustomRootCertificatesAsync();
-  return rootCertificates.concat(customCertificates.map((cert) => cert.content));
-};
-
-export const removeCustomRootCertificateAsync = async (fileName: string) => {
-  const folder = getCertificateFolder();
-  if (!folder) {
-    return null;
-  }
-
-  const existingFiles = await fs.readdir(folder, { withFileTypes: true });
-  if (!existingFiles.some((file) => file.isFile() && file.name === fileName)) {
-    throw new Error(`File ${fileName} does not exist`);
-  }
-
-  const fullPath = path.join(folder, fileName);
-  const content = await fs.readFile(fullPath, "utf8");
-
-  await fs.rm(fullPath);
-  try {
-    return new X509Certificate(content);
-  } catch {
-    return null;
-  }
-};
-
-export const addCustomRootCertificateAsync = async (fileName: string, content: string) => {
-  const folder = getCertificateFolder();
-  if (!folder) {
-    throw new Error(
-      "When you want to use custom certificates locally you need to set LOCAL_CERTIFICATE_PATH to an absolute path",
-    );
-  }
-
-  if (fileName.includes("/")) {
-    throw new Error("Invalid file name");
-  }
-
-  await fs.writeFile(path.join(folder, fileName), content);
-};

packages/core/src/infrastructure/certificates/hostnames/db/mysql.ts

@@ -1,15 +0,0 @@
-import { mysqlTable, primaryKey, text, varchar } from "drizzle-orm/mysql-core";
-
-export const trustedCertificateHostnames = mysqlTable(
-  "trusted_certificate_hostname",
-  {
-    hostname: varchar({ length: 256 }).notNull(),
-    thumbprint: varchar({ length: 128 }).notNull(),
-    certificate: text().notNull(),
-  },
-  (table) => ({
-    compoundKey: primaryKey({
-      columns: [table.hostname, table.thumbprint],
-    }),
-  }),
-);

packages/core/src/infrastructure/certificates/hostnames/db/postgresql.ts

@@ -1,15 +0,0 @@
-import { pgTable, primaryKey, text, varchar } from "drizzle-orm/pg-core";
-
-export const trustedCertificateHostnames = pgTable(
-  "trusted_certificate_hostname",
-  {
-    hostname: varchar({ length: 256 }).notNull(),
-    thumbprint: varchar({ length: 128 }).notNull(),
-    certificate: text().notNull(),
-  },
-  (table) => ({
-    compoundKey: primaryKey({
-      columns: [table.hostname, table.thumbprint],
-    }),
-  }),
-);

packages/core/src/infrastructure/certificates/hostnames/db/schema.ts

@@ -1,10 +0,0 @@
-import { createSchema } from "../../../db";
-import * as mysql from "./mysql";
-import * as postgresql from "./postgresql";
-import * as sqlite from "./sqlite";
-
-export const schema = createSchema({
-  "better-sqlite3": () => sqlite,
-  mysql2: () => mysql,
-  "node-postgres": () => postgresql,
-});

packages/core/src/infrastructure/certificates/hostnames/db/sqlite.ts

@@ -1,15 +0,0 @@
-import { primaryKey, sqliteTable, text } from "drizzle-orm/sqlite-core";
-
-export const trustedCertificateHostnames = sqliteTable(
-  "trusted_certificate_hostname",
-  {
-    hostname: text().notNull(),
-    thumbprint: text().notNull(),
-    certificate: text().notNull(),
-  },
-  (table) => ({
-    compoundKey: primaryKey({
-      columns: [table.hostname, table.thumbprint],
-    }),
-  }),
-);

packages/core/src/infrastructure/certificates/hostnames/index.ts

@@ -1,12 +0,0 @@
-import type { InferSelectModel } from "drizzle-orm";
-
-import { createDb } from "../../db";
-import { schema } from "./db/schema";
-
-const db = createDb(schema);
-
-export const getTrustedCertificateHostnamesAsync = async () => {
-  return await db.query.trustedCertificateHostnames.findMany();
-};
-
-export type TrustedCertificateHostname = InferSelectModel<typeof schema.trustedCertificateHostnames>;

packages/core/src/infrastructure/certificates/index.ts

@@ -1,7 +0,0 @@
-export { getTrustedCertificateHostnamesAsync } from "./hostnames";
-export {
-  addCustomRootCertificateAsync,
-  removeCustomRootCertificateAsync,
-  getAllTrustedCertificatesAsync,
-  loadCustomRootCertificatesAsync,
-} from "./files";

packages/core/src/infrastructure/db/drivers/mysql.ts

@@ -26,9 +26,7 @@ const createMysqlDbConnection = () => {
 
   return mysql.createPool({
     ...defaultOptions,
-    host: dbEnv.HOST,
     port: dbEnv.PORT,
-    database: dbEnv.NAME,
     user: dbEnv.USER,
     password: dbEnv.PASSWORD,
   });

packages/core/src/infrastructure/db/drivers/sqlite.ts

@@ -1,12 +1,10 @@
-import { createClient } from "@libsql/client/node";
-import { drizzle as drizzleSqlite } from "drizzle-orm/libsql";
+import Database from "better-sqlite3";
+import { drizzle as drizzleSqlite } from "drizzle-orm/better-sqlite3";
 
 import { dbEnv } from "../env";
 import type { SharedDrizzleConfig } from "./shared";
 
 export const createSqliteDb = <TSchema extends Record<string, unknown>>(config: SharedDrizzleConfig<TSchema>) => {
-  const connection = createClient({
-    url: dbEnv.URL ? `file:${dbEnv.URL}` : ":memory:",
-  });
+  const connection = new Database(dbEnv.URL);
   return drizzleSqlite<TSchema>(connection, config);
 };

packages/core/src/infrastructure/dns/env.ts

@@ -1,8 +0,0 @@
-import { createBooleanSchema, createEnv } from "../env";
-
-export const dnsEnv = createEnv({
-  server: {
-    ENABLE_DNS_CACHING: createBooleanSchema(true),
-  },
-  experimental__runtimeEnv: process.env,
-});