chore(release): 1.37.0 [skip ci]

chore(release): automatic release v1.37.0
revert(deps): update actions/setup-node action to v5 (#4058 )
2025-09-12 19:19:10 +00:00 · 2025-09-12 19:18:10 +00:00 · 2025-09-12 21:16:25 +02:00 · 2025-09-12 19:13:23 +00:00 · 2025-09-12 19:22:10 +02:00 · 2025-09-12 19:18:20 +02:00
181 changed files with 16169 additions and 4913 deletions
@@ -34,6 +34,10 @@ DB_URL='FULL_PATH_TO_YOUR_SQLITE_DB_FILE'
 # DB_PASSWORD='password'
 # DB_NAME='name-of-database'

+# The following is an example on how to use the node-postgres driver:
+# DB_DRIVER='node-postgres'
+# DB_URL='postgres://user:password@host:port/database'
+
 # The below path can be used to store trusted certificates, it is not required and can be left empty.
 # If it is empty, it will default to `/appdata/trusted-certificates` in production.
 # If it is used, please use the full path to the directory where the certificates are stored.
@@ -31,6 +31,14 @@ body:
      label: Version
      description: What version of Homarr are you running?
      options:
+        # The below comment is used to insert a new version with on-release.yml
+        #NEXT_VERSION#
+        - 1.36.1
+        - 1.36.0
+        - 1.35.1
+        - 1.35.0
+        - 1.34.0
+        - 1.33.0
        - 1.32.0
        - 1.31.0
        - 1.30.1
@@ -6,6 +6,11 @@
      matchPackagePatterns: ["^@homarr/"],
      enabled: false,
    },
+    // Reenable once https://github.com/privatenumber/tsx/issues/737 is fixed
+    {
+      matchPackagePatterns: ["tsx"],
+      enabled: false,
+    },
    {
      matchUpdateTypes: ["minor", "patch", "pin", "digest"],
      automerge: true,
@@ -14,6 +14,6 @@ jobs:
  validate-pull-request-title:
    runs-on: ubuntu-latest
    steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@v6
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -60,7 +60,7 @@ jobs:
      - uses: actions/setup-node@v4
        if: env.SKIP_RELEASE == 'false'
        with:
-          node-version: 22.18.0
+          node-version: 22.19.0
      - run: npm i -g pnpm
        if: env.SKIP_RELEASE == 'false'
      - name: Install dependencies
@@ -0,0 +1,82 @@
+permissions: {}
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  trigger-docs-release:
+    name: Trigger Documentation Release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Obtain token
+        id: obtainToken
+        uses: tibdex/github-app-token@v2
+        with:
+          private_key: ${{ secrets.HOMARR_DOCS_RELEASE_APP_PRIVATE_KEY }}
+          app_id: ${{ vars.HOMARR_DOCS_RELEASE_APP_ID }}
+          installation_retrieval_mode: repository
+          installation_retrieval_payload: homarr-labs/documentation
+      - name: Trigger documentation release
+        env:
+          GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
+          SOURCE_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          curl -X POST \
+            -H "Authorization: token $GITHUB_TOKEN" \
+            -H "Accept: application/vnd.github+json" \
+            https://api.github.com/repos/homarr-labs/documentation/dispatches \
+            -d @- <<EOF
+          {
+            "event_type": "trigger-release",
+            "client_payload": {
+              "tag": "${SOURCE_TAG}"
+            }
+          }
+          EOF
+  update-bug-report-template:
+    name: Update Bug Report Template
+    runs-on: ubuntu-latest
+    steps:
+      - name: Obtain token
+        id: obtainToken
+        uses: tibdex/github-app-token@v2
+        with:
+          private_key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
+          app_id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          token: ${{ steps.obtainToken.outputs.token }}
+      - name: Setup
+        uses: ./tooling/github/setup
+      - run: pnpm run scripts:update-bug-report-template
+        env:
+          NEXT_VERSION: ${{ github.event.release.tag_name }}
+      - name: Commit changes
+        run: |
+          git config --global user.email "175486441+homarr-releases[bot]@users.noreply.github.com"
+          git config --global user.name "Releases Homarr"
+          git add .
+          git commit -m "chore: update bug report template"
+
+      - name: Create Pull Request
+        id: create-pull-request
+        uses: peter-evans/create-pull-request@v7
+        with:
+          token: ${{ steps.obtainToken.outputs.token }}
+          branch: update-bug-report-template
+          base: dev
+          title: "chore: update bug report template"
+          delete-branch: true
+          body: |
+            This PR automatically updates the bug report template of Homarr in the .github/ISSUE_TEMPLATE/bug_report.yml
+
+      - name: Install GitHub CLI
+        run: sudo apt-get install -y gh
+
+      - name: Enable auto-merge
+        env:
+          GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
+        run: |
+          gh pr merge ${{steps.create-pull-request.outputs.pull-request-number}} --auto --squash
@@ -0,0 +1,26 @@
+permissions:
+  statuses: write
+
+on:
+  pull_request:
+    branches-ignore: "renovate/*"
+    types: [opened, synchronize]
+
+jobs:
+  skip-stability-days:
+    name: Skip Stability Days
+    runs-on: ubuntu-latest
+    steps:
+      - name: Add status check
+        env:
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+        run: |
+          gh api \
+          --method POST \
+          -H "Accept: application/vnd.github+json" \
+          -H "X-GitHub-Api-Version: 2022-11-28" \
+          /repos/${{github.repository}}/statuses/${{github.event.pull_request.head.sha}} \
+          -f 'state=success' \
+          -f 'target_url=https://docs.renovatebot.com/configuration-options#minimumreleaseage' \
+          -f 'description=Skipped for non renovate branches' \
+          -f 'context=renovate/stability-days'
@@ -1 +1 @@
-22.18.0
+22.19.0
@@ -0,0 +1,13 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="db:migration:postgresql:generate" type="js.build_tools.npm">
+    <package-json value="$PROJECT_DIR$/package.json" />
+    <command value="run" />
+    <scripts>
+      <script value="db:migration:postgresql:generate" />
+    </scripts>
+    <node-interpreter value="project" />
+    <package-manager value="pnpm" />
+    <envs />
+    <method v="2" />
+  </configuration>
+</component>
@@ -1,3 +1,125 @@
+## [1.37.0](https://github.com/homarr-labs/homarr/compare/v1.36.1...v1.37.0) (2025-09-12)
+
+### Features
+
+* **integration:** add github app authentication ([#3968](https://github.com/homarr-labs/homarr/issues/3968)) ([bfcbffb](https://github.com/homarr-labs/homarr/commit/bfcbffbdc6499ac5f10bfbf2f5db141eef955049))
+* **integrations:** add truenas ([#3745](https://github.com/homarr-labs/homarr/issues/3745)) ([dc08bac](https://github.com/homarr-labs/homarr/commit/dc08bacebfe22ee528565259605787720a522b6b))
+
+### Bug Fixes
+
+* **adguard-integration:** parse error with protection_disabled_duration field ([#4018](https://github.com/homarr-labs/homarr/issues/4018)) ([eb5af11](https://github.com/homarr-labs/homarr/commit/eb5af116436ddd11b7ff094e882355f951ca622a))
+* **api:** page is crashing ([#4039](https://github.com/homarr-labs/homarr/issues/4039)) ([a843f60](https://github.com/homarr-labs/homarr/commit/a843f6043b0ed90c5a205b697497490631e0dd19))
+* **boards:** issues with old-import board name containing spaces ([#4052](https://github.com/homarr-labs/homarr/issues/4052)) ([f7471b6](https://github.com/homarr-labs/homarr/commit/f7471b6c63f80618d0b91b16fb5545e0a3760cbe))
+* **deps:** update dependency @ctrl/deluge to ^7.2.0 ([#4009](https://github.com/homarr-labs/homarr/issues/4009)) ([e70074b](https://github.com/homarr-labs/homarr/commit/e70074b2191df1dac1e9aa94dbb0cec7073193c9))
+* **deps:** update dependency @ctrl/qbittorrent to ^9.7.0 ([#4010](https://github.com/homarr-labs/homarr/issues/4010)) ([32b2a09](https://github.com/homarr-labs/homarr/commit/32b2a09ab4e9826b0640d47e1d443682b5fbcff5))
+* **deps:** update dependency @ctrl/transmission to ^7.3.0 ([#4011](https://github.com/homarr-labs/homarr/issues/4011)) ([bc94e34](https://github.com/homarr-labs/homarr/commit/bc94e34ada04458901389f3d7ba18e76849fe6d4))
+* **deps:** update dependency @extractus/feed-extractor to v7.1.7 ([#4034](https://github.com/homarr-labs/homarr/issues/4034)) ([fbb86c4](https://github.com/homarr-labs/homarr/commit/fbb86c452d3b8d8cde5357e369fbc14349b71c81))
+* **deps:** update dependency @gitbeaker/rest to ^43.5.0 ([#4023](https://github.com/homarr-labs/homarr/issues/4023)) ([4fc38bc](https://github.com/homarr-labs/homarr/commit/4fc38bcd5bbed0b3ede2e742c0677bdfbab47295))
+* **deps:** update dependency dotenv to ^17.2.2 ([#4024](https://github.com/homarr-labs/homarr/issues/4024)) ([1323bb2](https://github.com/homarr-labs/homarr/commit/1323bb276fc8120dd62385b4c79cc630b2078949))
+* **deps:** update dependency fastify to ^5.6.0 ([#4042](https://github.com/homarr-labs/homarr/issues/4042)) ([a149d8c](https://github.com/homarr-labs/homarr/commit/a149d8c3c112740c9c563463ab72e89c77b9a4ec))
+* **deps:** update dependency mysql2 to v3.14.4 ([#4013](https://github.com/homarr-labs/homarr/issues/4013)) ([8bf278f](https://github.com/homarr-labs/homarr/commit/8bf278f603ff37e68d7bed41c4c5f6e6351fe94e))
+* **deps:** update dependency next-intl to v4.3.6 ([#4035](https://github.com/homarr-labs/homarr/issues/4035)) ([a1b5f5c](https://github.com/homarr-labs/homarr/commit/a1b5f5ceea96b18bda8aa7cee7002b10dc4b428c))
+* **deps:** update dependency next-intl to v4.3.7 ([#4038](https://github.com/homarr-labs/homarr/issues/4038)) ([cd90eaa](https://github.com/homarr-labs/homarr/commit/cd90eaae9da566393114a02765f57f1e6f55fe1c))
+* **deps:** update dependency sass to ^1.92.0 ([#4025](https://github.com/homarr-labs/homarr/issues/4025)) ([2eef4a8](https://github.com/homarr-labs/homarr/commit/2eef4a8304f0ab5b99313e6e8904582303dd1883))
+* **deps:** update dependency sass to ^1.92.1 ([#4031](https://github.com/homarr-labs/homarr/issues/4031)) ([8231efa](https://github.com/homarr-labs/homarr/commit/8231efa28195389f4b83a06d137ea6b4b2f49eee))
+* **deps:** update dependency swagger-ui-react to ^5.28.1 ([#4029](https://github.com/homarr-labs/homarr/issues/4029)) ([ecf1bd9](https://github.com/homarr-labs/homarr/commit/ecf1bd98b74c8e8fca03bcd210fb118382ce2d36))
+* **deps:** update dependency typescript-eslint to ^8.42.0 ([#4022](https://github.com/homarr-labs/homarr/issues/4022)) ([99179e4](https://github.com/homarr-labs/homarr/commit/99179e4e7d957f5616a24c63982af957613db427))
+* **deps:** update trpc monorepo to ^11.5.1 ([#4045](https://github.com/homarr-labs/homarr/issues/4045)) ([a7976e9](https://github.com/homarr-labs/homarr/commit/a7976e9d700793d8f48529bc5c1f11f8bca724ce))
+* **iframe:** disable scrolling not working ([#4017](https://github.com/homarr-labs/homarr/issues/4017)) ([7ac2a81](https://github.com/homarr-labs/homarr/commit/7ac2a81f945c44745917fe4eb8318fdfff3deb14))
+* **plex-integration:** unknown badge shown for added tv-shows ([#4032](https://github.com/homarr-labs/homarr/issues/4032)) ([4d57c7c](https://github.com/homarr-labs/homarr/commit/4d57c7ca13bdf78b5ac9d0710cd486ad1f41d4d4))
+* **update-checker:** cached through updates ([#4046](https://github.com/homarr-labs/homarr/issues/4046)) ([26eb2c0](https://github.com/homarr-labs/homarr/commit/26eb2c08c94bd9d440a3c9e914fc9af4ffd48301))
+* **video-widget:** hls videos not working ([#4015](https://github.com/homarr-labs/homarr/issues/4015)) ([de33439](https://github.com/homarr-labs/homarr/commit/de33439b22d3f5f2ff5856054cfa31a4f78ee088))
+
+### Reverts
+
+* **deps:** update actions/setup-node action to v5 ([#4058](https://github.com/homarr-labs/homarr/issues/4058)) ([7862612](https://github.com/homarr-labs/homarr/commit/78626121ddfa5462eaad7a6933733ec03a83c04a))
+
+## [1.36.1](https://github.com/homarr-labs/homarr/compare/v1.36.0...v1.36.1) (2025-09-05)
+
+### Bug Fixes
+
+* **dns:** disable caching by default ([#4007](https://github.com/homarr-labs/homarr/issues/4007)) ([10668ee](https://github.com/homarr-labs/homarr/commit/10668ee359940c1e24b543a7a20fe400474e12bf))
+
+## [1.36.0](https://github.com/homarr-labs/homarr/compare/v1.35.1...v1.36.0) (2025-09-05)
+
+### Features
+
+* **kubernetes:** add Talos providers ([#3979](https://github.com/homarr-labs/homarr/issues/3979)) ([3e59c20](https://github.com/homarr-labs/homarr/commit/3e59c20dba543634a6a79359f83c13fa81e7ccf3))
+* **rss-widget:** add hide description option ([#4000](https://github.com/homarr-labs/homarr/issues/4000)) ([b2eb2c3](https://github.com/homarr-labs/homarr/commit/b2eb2c32f6995563feb3c8b4a100be3bfe1d3d80))
+* **widget:** show name in edit modal ([#3970](https://github.com/homarr-labs/homarr/issues/3970)) ([d317cac](https://github.com/homarr-labs/homarr/commit/d317cacbe83394dd3f6de3e74b53f683654e91d1))
+
+### Bug Fixes
+
+* add dns caching ([#3736](https://github.com/homarr-labs/homarr/issues/3736)) ([fb6b5e8](https://github.com/homarr-labs/homarr/commit/fb6b5e88ff3a5e85d06885aed1f2a99788e04f2c))
+* **deps:** tsx breaks imports like dns-caching ([#3998](https://github.com/homarr-labs/homarr/issues/3998)) ([0476543](https://github.com/homarr-labs/homarr/commit/047654351ab50a730551e61ce98065c9bb7ca3fa))
+* **deps:** update dependency @ianvs/prettier-plugin-sort-imports to ^4.6.3 ([#3976](https://github.com/homarr-labs/homarr/issues/3976)) ([2b1a3de](https://github.com/homarr-labs/homarr/commit/2b1a3de8dffdd9f089b82e4bcfb304f156f60670))
+* **deps:** update dependency @ianvs/prettier-plugin-sort-imports to ^4.7.0 ([#3977](https://github.com/homarr-labs/homarr/issues/3977)) ([a3dde2e](https://github.com/homarr-labs/homarr/commit/a3dde2e7ee40fcfddced43f4b5c124010f0410db))
+* **deps:** update dependency @testcontainers/postgresql to ^11.5.1 ([#3948](https://github.com/homarr-labs/homarr/issues/3948)) ([9f3e68f](https://github.com/homarr-labs/homarr/commit/9f3e68fdfee5936727c97d0d99e174cd368de260))
+* **deps:** update dependency dayjs to ^1.11.15 ([#3975](https://github.com/homarr-labs/homarr/issues/3975)) ([032f7ff](https://github.com/homarr-labs/homarr/commit/032f7ffd29eddd200d5434ba1c65b8cd5800c8ff))
+* **deps:** update dependency dayjs to ^1.11.18 ([#3982](https://github.com/homarr-labs/homarr/issues/3982)) ([5e92e66](https://github.com/homarr-labs/homarr/commit/5e92e66803ddf9256fce8a92aec06dabe2491edc))
+* **deps:** update dependency drizzle-orm to ^0.44.5 ([#3962](https://github.com/homarr-labs/homarr/issues/3962)) ([ea4960e](https://github.com/homarr-labs/homarr/commit/ea4960e11332af0062df964258d9e24def0984e7))
+* **deps:** update dependency next-intl to v4.3.5 ([#3937](https://github.com/homarr-labs/homarr/issues/3937)) ([81a7f3e](https://github.com/homarr-labs/homarr/commit/81a7f3e93dfd52eea2c87cae8f2d66dd312f7055))
+* **deps:** update dependency sass to ^1.91.0 ([#3965](https://github.com/homarr-labs/homarr/issues/3965)) ([0e5f43c](https://github.com/homarr-labs/homarr/commit/0e5f43c1c38a7e0186d86c29a73477f943eeb416))
+* **deps:** update dependency swagger-ui-react to ^5.28.0 ([#3985](https://github.com/homarr-labs/homarr/issues/3985)) ([d2e9b5e](https://github.com/homarr-labs/homarr/commit/d2e9b5e983e2f277da30e98ad313e1afd35d70d3))
+* **deps:** update dependency tsx to v4.20.5 ([#3938](https://github.com/homarr-labs/homarr/issues/3938)) ([93186c3](https://github.com/homarr-labs/homarr/commit/93186c3be1fdcf6c215efcd8d7236fc44fc74d77))
+* **deps:** update dependency typescript-eslint to ^8.41.0 ([#3963](https://github.com/homarr-labs/homarr/issues/3963)) ([be0e783](https://github.com/homarr-labs/homarr/commit/be0e78371eb98740f313b1abd20413cbafa68a20))
+* **deps:** update dependency undici to v7.15.0 ([#3949](https://github.com/homarr-labs/homarr/issues/3949)) ([f166d15](https://github.com/homarr-labs/homarr/commit/f166d153fee521ef31a5328f082b4f52fbfd7239))
+* **deps:** update dependency zod to ^4.1.1 ([#3950](https://github.com/homarr-labs/homarr/issues/3950)) ([94eb677](https://github.com/homarr-labs/homarr/commit/94eb6772b9216b6377f6306b2a88c2bfe58bfb59))
+* **deps:** update dependency zod to ^4.1.5 ([#3961](https://github.com/homarr-labs/homarr/issues/3961)) ([9165422](https://github.com/homarr-labs/homarr/commit/916542210d9bfbb40abf27123f4989ec15dcd45b))
+* **deps:** update dependency zod-form-data to ^3.0.1 ([#3986](https://github.com/homarr-labs/homarr/issues/3986)) ([75683c2](https://github.com/homarr-labs/homarr/commit/75683c206d06da3b54c5ab0605b2a4b37674bbd6))
+* **deps:** update mantine monorepo to ^8.2.7 ([#3939](https://github.com/homarr-labs/homarr/issues/3939)) ([5d90809](https://github.com/homarr-labs/homarr/commit/5d908093ce3c8b395547681ae0a428afd08a255d))
+* **deps:** update mantine monorepo to ^8.2.8 ([#4004](https://github.com/homarr-labs/homarr/issues/4004)) ([eef6b86](https://github.com/homarr-labs/homarr/commit/eef6b86ad647fe955bdb125f504b4a98a79baf03))
+* **deps:** update nextjs monorepo to v15.5.1 ([#3971](https://github.com/homarr-labs/homarr/issues/3971)) ([a1def95](https://github.com/homarr-labs/homarr/commit/a1def958525816ec41198407d6d84ef9384be58f))
+* **deps:** update nextjs monorepo to v15.5.2 ([#3972](https://github.com/homarr-labs/homarr/issues/3972)) ([b0fe8a9](https://github.com/homarr-labs/homarr/commit/b0fe8a9f653e09cb3f861f39f06bb8d4e8dae006))
+* **deps:** update tanstack-query monorepo to ^5.85.6 ([#3996](https://github.com/homarr-labs/homarr/issues/3996)) ([4e4483c](https://github.com/homarr-labs/homarr/commit/4e4483c42d9edd3187981e57694721ff5337be8e))
+* **deps:** update tanstack-query monorepo to ^5.87.1 ([#3997](https://github.com/homarr-labs/homarr/issues/3997)) ([d7146d8](https://github.com/homarr-labs/homarr/commit/d7146d82d14885cffb24e14e7e5a610fdeec1b03))
+* **deps:** update trpc monorepo to ^11.5.0 ([#3951](https://github.com/homarr-labs/homarr/issues/3951)) ([88eed15](https://github.com/homarr-labs/homarr/commit/88eed15fafbc68c1c669c28ff576aca503acd585))
+* **header:** avatar menu flashes  when opening on mobile ([#3999](https://github.com/homarr-labs/homarr/issues/3999)) ([9cb8261](https://github.com/homarr-labs/homarr/commit/9cb8261ddc5701ff5d5786ea1fba823e1e9317b2))
+* **widgets:** improve integration selection ([#3969](https://github.com/homarr-labs/homarr/issues/3969)) ([65b9ddd](https://github.com/homarr-labs/homarr/commit/65b9ddd771a573330b4c40966f10bd1fc36a6e1d))
+
+## [1.35.1](https://github.com/homarr-labs/homarr/compare/v1.35.0...v1.35.1) (2025-09-03)
+
+### Bug Fixes
+
+* **db:** increase integration kind limit from 16 to 64 characters ([8ff29b8](https://github.com/homarr-labs/homarr/commit/8ff29b82e5133ba0b8eaf2cf88de9bca31128a68))
+
+## [1.35.0](https://github.com/homarr-labs/homarr/compare/v1.34.0...v1.35.0) (2025-08-29)
+
+### Features
+
+* **app-widget:** show description in widget ([#3876](https://github.com/homarr-labs/homarr/issues/3876)) ([c346167](https://github.com/homarr-labs/homarr/commit/c3461677e82f52bd43bd3c4ecc867b4a6ae2bee8))
+* **db:** support postgresql database ([#3643](https://github.com/homarr-labs/homarr/issues/3643)) ([5168cba](https://github.com/homarr-labs/homarr/commit/5168cba8e4ccfb8a1c348c80706b2e7a987bb152))
+* **env:** improve support for instances without internet connection ([#3915](https://github.com/homarr-labs/homarr/issues/3915)) ([10feaa3](https://github.com/homarr-labs/homarr/commit/10feaa37ce1a3ecd28246db9b2f1b0414d0a75e6))
+
+### Bug Fixes
+
+* **api:** document generation not working with nextjs ([#3920](https://github.com/homarr-labs/homarr/issues/3920)) ([97bc092](https://github.com/homarr-labs/homarr/commit/97bc092aea72dce19f5d1626054ecae69cf01aac))
+* **security:** deepsource issues ([#3919](https://github.com/homarr-labs/homarr/issues/3919)) ([84f1e78](https://github.com/homarr-labs/homarr/commit/84f1e787013468cab7f2f0e2bcdd1f012d4e0747))
+* system resources widget opacity support for transparent backgrounds ([#3835](https://github.com/homarr-labs/homarr/issues/3835)) ([a4aa2ae](https://github.com/homarr-labs/homarr/commit/a4aa2aea904081ff49e9cfc173c35770a019c587))
+
+## [1.34.0](https://github.com/homarr-labs/homarr/compare/v1.33.0...v1.34.0) (2025-08-22)
+
+### Features
+
+* **app-widget:** add layout option ([#3875](https://github.com/homarr-labs/homarr/issues/3875)) ([acd09c8](https://github.com/homarr-labs/homarr/commit/acd09c8c02c13daac6e5b2432bb72640f075cec6))
+* **app-widget:** multiline description ([#3873](https://github.com/homarr-labs/homarr/issues/3873)) ([950636e](https://github.com/homarr-labs/homarr/commit/950636e81d4a934183f27694829dd3af05e5373f))
+
+### Bug Fixes
+
+* **deps:** update dependency drizzle-zod to ^0.8.3 ([#3866](https://github.com/homarr-labs/homarr/issues/3866)) ([dc43a01](https://github.com/homarr-labs/homarr/commit/dc43a015c43d13ae01a0f32be654c756f41eb352))
+* **deps:** update dependency mantine-form-zod-resolver to ^1.3.0 ([#3868](https://github.com/homarr-labs/homarr/issues/3868)) ([72cdba7](https://github.com/homarr-labs/homarr/commit/72cdba79cbbaa03f35c90dd71a3703bacbe57558))
+* **deps:** update dependency trpc-to-openapi to ^3.0.1 ([#3761](https://github.com/homarr-labs/homarr/issues/3761)) ([2457f9e](https://github.com/homarr-labs/homarr/commit/2457f9e4a754221e8674a95d721ffc77573a4633))
+* **deps:** update dependency typescript-eslint to ^8.40.0 ([#3884](https://github.com/homarr-labs/homarr/issues/3884)) ([1a8e40e](https://github.com/homarr-labs/homarr/commit/1a8e40e1f9dbd4dbcf4ec0c54aef3297bc4cea7f))
+* **deps:** update dependency undici to v7.14.0 ([#3879](https://github.com/homarr-labs/homarr/issues/3879)) ([d7b2298](https://github.com/homarr-labs/homarr/commit/d7b2298d1488ef8d38558864cf359fc23bc5bb26))
+* **deps:** update dependency zod to ^4.0.17 ([#3867](https://github.com/homarr-labs/homarr/issues/3867)) ([82fcdae](https://github.com/homarr-labs/homarr/commit/82fcdae7e5cbc326f0051beb56c3a3805623e2a0))
+* **deps:** update dependency zod-validation-error to v4 ([#3670](https://github.com/homarr-labs/homarr/issues/3670)) ([09fdb16](https://github.com/homarr-labs/homarr/commit/09fdb167a76db2caf3f9aa253b516ee28baba3dd))
+* **deps:** update mantine monorepo to ^8.2.5 ([#3874](https://github.com/homarr-labs/homarr/issues/3874)) ([7e700b2](https://github.com/homarr-labs/homarr/commit/7e700b2732e2f0abff13d79191addb04097ca9bc))
+* **deps:** update nextjs monorepo to v15.4.7 ([#3886](https://github.com/homarr-labs/homarr/issues/3886)) ([683e817](https://github.com/homarr-labs/homarr/commit/683e817493eb1b391751fe36b59d9b95a760324c))
+* **deps:** update nextjs monorepo to v15.5.0 ([#3896](https://github.com/homarr-labs/homarr/issues/3896)) ([1451c3c](https://github.com/homarr-labs/homarr/commit/1451c3c41e08945eb31d025d187ff466c5104a05))
+* **deps:** update tanstack-query monorepo to ^5.85.4 ([#3889](https://github.com/homarr-labs/homarr/issues/3889)) ([7685438](https://github.com/homarr-labs/homarr/commit/76854387903b48b3af7be466972cf7b9c165acc5))
+* **deps:** update tanstack-query monorepo to ^5.85.5 ([#3890](https://github.com/homarr-labs/homarr/issues/3890)) ([fad7207](https://github.com/homarr-labs/homarr/commit/fad7207efe553111334b21739717b9813dea0b56))
+* **nextcloud:** integration ignores trusted certificates ([#3893](https://github.com/homarr-labs/homarr/issues/3893)) ([498acdc](https://github.com/homarr-labs/homarr/commit/498acdcdc190de457dc95e5b13f43e1b2c31f624))
+
 ## [1.33.0](https://github.com/homarr-labs/homarr/compare/v1.32.0...v1.33.0) (2025-08-15)

 ### Features
@@ -1,4 +1,4 @@
-FROM node:22.18.0-alpine AS base
+FROM node:22.19.0-alpine AS base

 FROM base AS builder
 RUN apk add --no-cache libc6-compat
@@ -1,18 +1,18 @@
 # Security Policy
+
 This policy is relevant if you found potential vulnerabilities in an audit.
 We consider something as a vulnerability if it...
+
 1. puts users or user data at risk
 2. enables third parties to gain control or access (e.g. [RATs](https://en.wikipedia.org/wiki/Remote_desktop_software#RAT), [privilege escalation](https://en.wikipedia.org/wiki/Privilege_escalation), ...)
 3. abuses the system in an unintended way (e.g. crypto mining, proxy, ...)

 ## Supported Versions

-| Version | Supported          |
-| ------- | ------------------ |
-| >1.0.0  | :white_check_mark: |
-| <1.0.0  | :x:                |
+We only fix security issues in the [latest stable version](https://github.com/homarr-labs/homarr/releases/latest). Meaning security issues in prior versions will not be fixed and users have to upgrade to the latest version to receive them.

 ## Reporting a Vulnerability
+
 We use [GitHub's system for reporting vulnerabilities](https://docs.github.com/en/enterprise-cloud@latest/code-security/security-advisories/working-with-repository-security-advisories/creating-a-repository-security-advisory).
 Click [**here to report an advisory**](https://github.com/homarr-labs/homarr/security/advisories/new). Our team will get notified and will get back to you within 1-6 business days.

@@ -42,9 +42,11 @@ const nextConfig: NextConfig = {
        headers: [
          {
            key: "Content-Security-Policy",
+            // worker-src / media-src with blob: is necessary for video.js, see https://github.com/homarr-labs/homarr/issues/3912 and https://stackoverflow.com/questions/65792855/problem-with-video-js-and-content-security-policy-csp
            value: `
              default-src 'self';
              script-src * 'unsafe-inline' 'unsafe-eval';
+              worker-src * blob:;
              base-uri 'self';
              connect-src *;
              style-src * 'unsafe-inline'; 
@@ -53,7 +55,7 @@ const nextConfig: NextConfig = {
              form-action 'self';
              img-src * data:;
              font-src * data:;
-              media-src * data:;
+              media-src * data: blob:;
            `
              .replace(/\s{2,}/g, " ")
              .trim(),
@@ -50,57 +50,57 @@
    "@homarr/ui": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
    "@homarr/widgets": "workspace:^0.1.0",
-    "@mantine/colors-generator": "^8.2.4",
-    "@mantine/core": "^8.2.4",
-    "@mantine/dropzone": "^8.2.4",
-    "@mantine/hooks": "^8.2.4",
-    "@mantine/modals": "^8.2.4",
-    "@mantine/tiptap": "^8.2.4",
+    "@mantine/colors-generator": "^8.2.8",
+    "@mantine/core": "^8.2.8",
+    "@mantine/dropzone": "^8.2.8",
+    "@mantine/hooks": "^8.2.8",
+    "@mantine/modals": "^8.2.8",
+    "@mantine/tiptap": "^8.2.8",
    "@million/lint": "1.0.14",
    "@tabler/icons-react": "^3.34.1",
-    "@tanstack/react-query": "^5.85.3",
-    "@tanstack/react-query-devtools": "^5.85.3",
-    "@tanstack/react-query-next-experimental": "^5.85.3",
-    "@trpc/client": "^11.4.4",
-    "@trpc/next": "^11.4.4",
-    "@trpc/react-query": "^11.4.4",
-    "@trpc/server": "^11.4.4",
+    "@tanstack/react-query": "^5.87.1",
+    "@tanstack/react-query-devtools": "^5.87.1",
+    "@tanstack/react-query-next-experimental": "^5.87.1",
+    "@trpc/client": "^11.5.1",
+    "@trpc/next": "^11.5.1",
+    "@trpc/react-query": "^11.5.1",
+    "@trpc/server": "^11.5.1",
    "@xterm/addon-canvas": "^0.7.0",
    "@xterm/addon-fit": "0.10.0",
    "@xterm/xterm": "^5.5.0",
    "chroma-js": "^3.1.2",
    "clsx": "^2.1.1",
-    "dayjs": "^1.11.13",
-    "dotenv": "^17.2.1",
+    "dayjs": "^1.11.18",
+    "dotenv": "^17.2.2",
    "flag-icons": "^7.5.0",
    "glob": "^11.0.3",
    "jotai": "^2.13.1",
    "mantine-react-table": "2.0.0-beta.9",
-    "next": "15.4.6",
+    "next": "15.5.2",
    "postcss-preset-mantine": "^1.18.0",
    "prismjs": "^1.30.0",
    "react": "19.1.1",
    "react-dom": "19.1.1",
    "react-error-boundary": "^6.0.0",
    "react-simple-code-editor": "^0.14.1",
-    "sass": "^1.90.0",
+    "sass": "^1.92.1",
    "superjson": "2.2.2",
-    "swagger-ui-react": "^5.27.1",
+    "swagger-ui-react": "^5.28.1",
    "use-deep-compare-effect": "^1.8.1",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/chroma-js": "3.1.1",
-    "@types/node": "^22.17.2",
+    "@types/node": "^22.18.1",
    "@types/prismjs": "^1.26.5",
-    "@types/react": "19.1.10",
-    "@types/react-dom": "19.1.7",
+    "@types/react": "19.1.12",
+    "@types/react-dom": "19.1.9",
    "@types/swagger-ui-react": "^5.18.0",
-    "concurrently": "^9.2.0",
-    "eslint": "^9.33.0",
+    "concurrently": "^9.2.1",
+    "eslint": "^9.35.0",
    "node-loader": "^2.1.0",
    "prettier": "^3.6.2",
    "typescript": "^5.9.2"
@@ -61,6 +61,10 @@ const getBoardAndPermissionsAsync = async (params: Awaited<Props["params"]>) =>
      notFound();
    }

+    if (error instanceof TRPCError && error.code === "BAD_REQUEST") {
+      notFound();
+    }
+
    throw error;
  }
 };
@@ -45,6 +45,10 @@ export const createBoardLayout = <TParams extends Params>({
        notFound();
      }

+      if (error instanceof TRPCError && error.code === "BAD_REQUEST") {
+        notFound();
+      }
+
      throw error;
    });
    const colorScheme = await getCurrentColorSchemeAsync();
@@ -1,3 +1,4 @@
+import { Fragment } from "react";
 import Link from "next/link";
 import { redirect } from "next/navigation";
 import { ActionIcon, ActionIconGroup, Anchor, Avatar, Card, Group, Stack, Text, Title } from "@mantine/core";
@@ -98,7 +99,12 @@ const AppCard = async ({ app }: AppCardProps) => {
            </Text>
            {app.description && (
              <Text size="sm" c="gray.6" lineClamp={4}>
-                {app.description}
+                {app.description.split("\n").map((line, index) => (
+                  <Fragment key={index}>
+                    {line}
+                    <br />
+                  </Fragment>
+                ))}
              </Text>
            )}
            {app.href && (
@@ -1,9 +1,11 @@
 import {
+  IconCode,
  IconGrid3x3,
  IconKey,
  IconMessage,
  IconPassword,
  IconPasswordUser,
+  IconPlug,
  IconServer,
  IconUser,
 } from "@tabler/icons-react";
@@ -21,4 +23,7 @@ export const integrationSecretIcons = {
  topic: IconMessage,
  opnsenseApiKey: IconKey,
  opnsenseApiSecret: IconPassword,
+  githubAppId: IconCode,
+  githubInstallationId: IconPlug,
+  privateKey: IconKey,
 } satisfies Record<IntegrationSecretKind, TablerIcon>;
@@ -1,7 +1,7 @@
 "use client";

 import type { ChangeEventHandler, FocusEventHandler } from "react";
-import { PasswordInput, TextInput } from "@mantine/core";
+import { PasswordInput, Textarea, TextInput } from "@mantine/core";

 import { integrationSecretKindObject } from "@homarr/definitions";
 import type { IntegrationSecretKind } from "@homarr/definitions";
@@ -14,9 +14,9 @@ interface IntegrationSecretInputProps {
  label?: string;
  kind: IntegrationSecretKind;
  value?: string;
-  onChange: ChangeEventHandler<HTMLInputElement>;
-  onFocus?: FocusEventHandler<HTMLInputElement>;
-  onBlur?: FocusEventHandler<HTMLInputElement>;
+  onChange: ChangeEventHandler<HTMLInputElement | HTMLTextAreaElement>;
+  onFocus?: FocusEventHandler<HTMLInputElement | HTMLTextAreaElement>;
+  onBlur?: FocusEventHandler<HTMLInputElement | HTMLTextAreaElement>;
  error?: string;
 }

@@ -31,6 +31,19 @@ export const IntegrationSecretInput = (props: IntegrationSecretInputProps) => {
 const PublicSecretInput = ({ kind, ...props }: IntegrationSecretInputProps) => {
  const t = useI18n();
  const Icon = integrationSecretIcons[kind];
+  const { multiline } = integrationSecretKindObject[kind];
+  if (multiline) {
+    return (
+      <Textarea
+        {...props}
+        label={props.label ?? t(`integration.secrets.kind.${kind}.label`)}
+        w="100%"
+        leftSection={<Icon size={20} stroke={1.5} />}
+        autosize
+        minRows={2}
+      />
+    );
+  }

  return (
    <TextInput
@@ -45,6 +58,21 @@ const PublicSecretInput = ({ kind, ...props }: IntegrationSecretInputProps) => {
 const PrivateSecretInput = ({ kind, ...props }: IntegrationSecretInputProps) => {
  const t = useI18n();
  const Icon = integrationSecretIcons[kind];
+  const { multiline } = integrationSecretKindObject[kind];
+
+  if (multiline) {
+    return (
+      <Textarea
+        {...props}
+        label={props.label ?? t(`integration.secrets.kind.${kind}.label`)}
+        description={t("integration.secrets.secureNotice")}
+        w="100%"
+        leftSection={<Icon size={20} stroke={1.5} />}
+        autosize
+        minRows={2}
+      />
+    );
+  }

  return (
    <PasswordInput
@@ -10,7 +10,7 @@ import type { IntegrationKind, WidgetKind } from "@homarr/definitions";
 import { useModalAction } from "@homarr/modals";
 import { showSuccessNotification } from "@homarr/notifications";
 import { useSettings } from "@homarr/settings";
-import { useScopedI18n } from "@homarr/translation/client";
+import { useI18n } from "@homarr/translation/client";
 import type { BoardItemAdvancedOptions } from "@homarr/validation/shared";
 import { loadWidgetDynamic, reduceWidgetOptionsWithDefaultValues, widgetImports } from "@homarr/widgets";
 import { WidgetError } from "@homarr/widgets/errors";
@@ -31,7 +31,7 @@ interface WidgetPreviewPageContentProps {

 export const WidgetPreviewPageContent = ({ kind, integrationData }: WidgetPreviewPageContentProps) => {
  const settings = useSettings();
-  const t = useScopedI18n("widgetPreview");
+  const t = useI18n();
  const { openModal: openWidgetEditModal } = useModalAction(WidgetEditModal);
  const { openModal: openPreviewDimensionsModal } = useModalAction(PreviewDimensionsModal);
  const currentDefinition = useMemo(() => widgetImports[kind].definition, [kind]);
@@ -55,20 +55,27 @@ export const WidgetPreviewPageContent = ({ kind, integrationData }: WidgetPrevie
  });

  const handleOpenEditWidgetModal = useCallback(() => {
-    openWidgetEditModal({
-      kind,
-      value: state,
-      onSuccessfulEdit: (value) => {
-        setState(value);
+    openWidgetEditModal(
+      {
+        kind,
+        value: state,
+        onSuccessfulEdit: (value) => {
+          setState(value);
+        },
+        integrationData: integrationData.filter(
+          (integration) =>
+            "supportedIntegrations" in currentDefinition &&
+            (currentDefinition.supportedIntegrations as string[]).some((kind) => kind === integration.kind),
+        ),
+        integrationSupport: "supportedIntegrations" in currentDefinition,
+        settings,
      },
-      integrationData: integrationData.filter(
-        (integration) =>
-          "supportedIntegrations" in currentDefinition &&
-          (currentDefinition.supportedIntegrations as string[]).some((kind) => kind === integration.kind),
-      ),
-      integrationSupport: "supportedIntegrations" in currentDefinition,
-      settings,
-    });
+      {
+        title(t) {
+          return `${t("item.edit.title")} - ${t(`widget.${kind}.name`)}`;
+        },
+      },
+    );
  }, [currentDefinition, integrationData, kind, openWidgetEditModal, settings, state]);

  const Comp = loadWidgetDynamic(kind);
@@ -76,7 +83,7 @@ export const WidgetPreviewPageContent = ({ kind, integrationData }: WidgetPrevie
  const toggleEditMode = useCallback(() => {
    setEditMode((editMode) => !editMode);
    showSuccessNotification({
-      message: editMode ? t("toggle.disabled") : t("toggle.enabled"),
+      message: editMode ? t("widgetPreview.toggle.disabled") : t("widgetPreview.toggle.enabled"),
    });
  }, [editMode, t]);

@@ -49,36 +49,43 @@ export const BoardItemMenu = ({
  if (!isEditMode || isPending) return null;

  const openEditModal = () => {
-    openModal({
-      kind: item.kind,
-      value: {
-        advancedOptions: item.advancedOptions,
-        options: item.options,
-        integrationIds: item.integrationIds,
+    openModal(
+      {
+        kind: item.kind,
+        value: {
+          advancedOptions: item.advancedOptions,
+          options: item.options,
+          integrationIds: item.integrationIds,
+        },
+        onSuccessfulEdit: ({ options, integrationIds, advancedOptions }) => {
+          updateItemOptions({
+            itemId: item.id,
+            newOptions: options,
+          });
+          updateItemAdvancedOptions({
+            itemId: item.id,
+            newAdvancedOptions: advancedOptions,
+          });
+          updateItemIntegrations({
+            itemId: item.id,
+            newIntegrations: integrationIds,
+          });
+          refResetErrorBoundaryOnNextRender.current = true;
+        },
+        integrationData: (integrationData ?? []).filter(
+          (integration) =>
+            "supportedIntegrations" in currentDefinition &&
+            (currentDefinition.supportedIntegrations as string[]).some((kind) => kind === integration.kind),
+        ),
+        integrationSupport: "supportedIntegrations" in currentDefinition,
+        settings,
      },
-      onSuccessfulEdit: ({ options, integrationIds, advancedOptions }) => {
-        updateItemOptions({
-          itemId: item.id,
-          newOptions: options,
-        });
-        updateItemAdvancedOptions({
-          itemId: item.id,
-          newAdvancedOptions: advancedOptions,
-        });
-        updateItemIntegrations({
-          itemId: item.id,
-          newIntegrations: integrationIds,
-        });
-        refResetErrorBoundaryOnNextRender.current = true;
+      {
+        title(t) {
+          return `${t("item.edit.title")} - ${t(`widget.${item.kind}.name`)}`;
+        },
      },
-      integrationData: (integrationData ?? []).filter(
-        (integration) =>
-          "supportedIntegrations" in currentDefinition &&
-          (currentDefinition.supportedIntegrations as string[]).some((kind) => kind === integration.kind),
-      ),
-      integrationSupport: "supportedIntegrations" in currentDefinition,
-      settings,
-    });
+    );
  };

  const openRemoveModal = () => {
@@ -17,7 +17,7 @@ interface Props {

 export const MainHeader = ({ logo, actions, hasNavigation = true }: Props) => {
  return (
-    <AppShellHeader>
+    <AppShellHeader maw="100vw" style={{ overflowX: "hidden" }}>
      <Group h="100%" gap="xl" px="md" justify="apart" wrap="nowrap">
        <Group h="100%" align="center" style={{ flex: 1 }} wrap="nowrap">
          {hasNavigation && <ClientBurger />}
@@ -21,6 +21,7 @@
  "prettier": "@homarr/prettier-config",
  "dependencies": {
    "@homarr/analytics": "workspace:^0.1.0",
+    "@homarr/auth": "workspace:^0.1.0",
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/cron-job-api": "workspace:^0.1.0",
    "@homarr/cron-jobs": "workspace:^0.1.0",
@@ -32,23 +33,24 @@
    "@homarr/log": "workspace:^",
    "@homarr/ping": "workspace:^0.1.0",
    "@homarr/redis": "workspace:^0.1.0",
+    "@homarr/request-handler": "workspace:^0.1.0",
    "@homarr/server-settings": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
    "@homarr/widgets": "workspace:^0.1.0",
-    "dayjs": "^1.11.13",
-    "dotenv": "^17.2.1",
-    "fastify": "^5.5.0",
+    "dayjs": "^1.11.18",
+    "dotenv": "^17.2.2",
+    "fastify": "^5.6.0",
    "superjson": "2.2.2",
-    "undici": "7.13.0"
+    "undici": "7.15.0"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/node": "^22.17.2",
+    "@types/node": "^22.18.1",
    "dotenv-cli": "^10.0.0",
    "esbuild": "^0.25.9",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "prettier": "^3.6.2",
    "tsx": "4.20.4",
    "typescript": "^5.9.2"
@@ -26,7 +26,6 @@ export class JobManager implements IJobManager {
    logger.info(`Updating cron job interval name="${name}" expression="${cron}"`);
    const job = this.jobGroup.getJobRegistry().get(name);
    if (!job) throw new Error(`Job ${name} not found`);
-    if (job.cronExpression === "never") throw new Error(`Job ${name} cannot be updated as it is set to "never"`);
    if (!validateCron(cron)) {
      throw new Error(`Invalid cron expression: ${cron}`);
    }
@@ -45,7 +44,6 @@ export class JobManager implements IJobManager {
    logger.info(`Disabling cron job name="${name}"`);
    const job = this.jobGroup.getJobRegistry().get(name);
    if (!job) throw new Error(`Job ${name} not found`);
-    if (job.cronExpression === "never") throw new Error(`Job ${name} cannot be disabled as it is set to "never"`);

    await this.updateConfigurationAsync(name, { isEnabled: false });
    await this.jobGroup.stopAsync(name);
@@ -1,5 +1,5 @@
 // This import has to be the first import in the file so that the agent is overridden before any other modules are imported.
-import "./undici-log-agent-override";
+import "./overrides";

 import type { FastifyTRPCPluginOptions } from "@trpc/server/adapters/fastify";
 import { fastifyTRPCPlugin } from "@trpc/server/adapters/fastify";
@@ -13,6 +13,7 @@ import { db } from "@homarr/db";
 import { logger } from "@homarr/log";

 import { JobManager } from "./job-manager";
+import { onStartAsync } from "./on-start";

 const server = fastify({
  maxParamLength: 5000,
@@ -32,6 +33,7 @@ server.register(fastifyTRPCPlugin, {
 });

 void (async () => {
+  await onStartAsync();
  await jobGroup.initializeAsync();
  await jobGroup.startAllAsync();

@@ -0,0 +1,7 @@
+import { invalidateUpdateCheckerCacheAsync } from "./invalidate-update-checker-cache";
+import { cleanupSessionsAsync } from "./session-cleanup";
+
+export async function onStartAsync() {
+  await cleanupSessionsAsync();
+  await invalidateUpdateCheckerCacheAsync();
+}
@@ -0,0 +1,18 @@
+import { logger } from "@homarr/log";
+import { updateCheckerRequestHandler } from "@homarr/request-handler/update-checker";
+
+const localLogger = logger.child({ module: "invalidateUpdateCheckerCache" });
+
+/**
+ * Invalidates the update checker cache on startup to ensure fresh data.
+ * It is important as we want to avoid showing pending updates after the update to latest version.
+ */
+export async function invalidateUpdateCheckerCacheAsync() {
+  try {
+    const handler = updateCheckerRequestHandler.handler({});
+    await handler.invalidateAsync();
+    localLogger.debug("Update checker cache invalidated");
+  } catch (error) {
+    localLogger.error(new Error("Failed to invalidate update checker cache", { cause: error }));
+  }
+}
@@ -0,0 +1,39 @@
+import { env } from "@homarr/auth/env";
+import { db, eq, inArray } from "@homarr/db";
+import { sessions, users } from "@homarr/db/schema";
+import { supportedAuthProviders } from "@homarr/definitions";
+import { logger } from "@homarr/log";
+
+const localLogger = logger.child({ module: "sessionCleanup" });
+
+/**
+ * Deletes sessions for users that have inactive auth providers.
+ * Sessions from other providers are deleted so they can no longer be used.
+ */
+export async function cleanupSessionsAsync() {
+  try {
+    const currentAuthProviders = env.AUTH_PROVIDERS;
+
+    const inactiveAuthProviders = supportedAuthProviders.filter((provider) => !currentAuthProviders.includes(provider));
+    const subQuery = db
+      .select({ id: users.id })
+      .from(users)
+      .where(inArray(users.provider, inactiveAuthProviders))
+      .as("sq");
+    const sessionsWithInactiveProviders = await db
+      .select({ userId: sessions.userId })
+      .from(sessions)
+      .rightJoin(subQuery, eq(sessions.userId, subQuery.id));
+
+    const userIds = sessionsWithInactiveProviders.map(({ userId }) => userId).filter((value) => value !== null);
+    await db.delete(sessions).where(inArray(sessions.userId, userIds));
+
+    if (sessionsWithInactiveProviders.length > 0) {
+      localLogger.info(`Deleted sessions for inactive providers count=${userIds.length}`);
+    } else {
+      localLogger.debug("No sessions to delete");
+    }
+  } catch (error) {
+    localLogger.error(new Error("Failed to clean up sessions", { cause: error }));
+  }
+}
@@ -25,7 +25,7 @@
    "@homarr/log": "workspace:^",
    "@homarr/redis": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "^17.2.1",
+    "dotenv": "^17.2.2",
    "tsx": "4.20.4",
    "ws": "^8.18.3"
  },
@@ -35,7 +35,7 @@
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/ws": "^8.18.1",
    "esbuild": "^0.25.9",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "prettier": "^3.6.2",
    "typescript": "^5.9.2"
  }
@@ -26,5 +26,29 @@ services:
    volumes:
      - mysql_data:/var/lib/mysql

+  postgresql:
+    image: postgres
+    restart: always
+    # set shared memory limit when using docker compose
+    shm_size: 128mb
+    # or set shared memory limit when deploy via swarm stack
+    #volumes:
+    #  - type: tmpfs
+    #    target: /dev/shm
+    #    tmpfs:
+    #      size: 134217728 # 128*2^20 bytes = 128Mb
+    environment:
+      POSTGRES_PASSWORD: homarr
+      POSTGRES_USER: homarr
+      POSTGRES_DB: homarrdb
+      PGDATA: /var/lib/postgresql/data/pgdata
+    volumes:
+      - postgresql_data:/var/lib/postgresql/data
+    ports:
+      - 5432:5432
+    # if already run PostgreSQL, change port number to use container's service
+    #  - 2345:5432
+
 volumes:
-  mysql_data:
+  mysql_data:
+  postgresql_data:
@@ -293,6 +293,13 @@
 </a>
 </td>
 <td align="center">
+<a href="https://homarr.dev/docs/integrations/truenas" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/truenas.svg" alt="TrueNAS" width="90" height="90" />
+  <br/>  
+  <p align="center">TrueNAS</p>
+</a>
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unifi-controller" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/unifi.png" alt="Unifi Controller" width="90" height="90" />
  <br/>  
@@ -1,6 +1,6 @@
 {
  "name": "homarr",
-  "version": "1.33.0",
+  "version": "1.37.0",
  "private": true,
  "scripts": {
    "build": "cross-env CI=true turbo build",
@@ -9,6 +9,8 @@
    "cli": "pnpm with-env tsx packages/cli/index.ts",
    "db:migration:mysql:generate": "pnpm -F db migration:mysql:generate",
    "db:migration:mysql:run": "pnpm -F db migration:mysql:run",
+    "db:migration:postgresql:generate": "pnpm -F db migration:postgresql:generate",
+    "db:migration:postgresql:run": "pnpm -F db migration:postgresql:run",
    "db:migration:sqlite:generate": "pnpm -F db migration:sqlite:generate",
    "db:migration:sqlite:run": "pnpm -F db migration:sqlite:run",
    "db:push": "pnpm -F db push:sqlite",
@@ -22,13 +24,14 @@
    "lint:ws": "pnpm dlx sherif@latest",
    "package:new": "turbo gen init",
    "release": "semantic-release",
+    "scripts:update-bug-report-template": "tsx ./scripts/update-bug-report-template.mts",
+    "scripts:update-readme-integrations": "tsx ./scripts/update-integration-list.mts",
    "start": "concurrently \"pnpm with-env node apps/tasks/tasks.cjs\" \"pnpm with-env node apps/websocket/wssServer.cjs\" \"pnpm -F nextjs start\"",
    "test": "cross-env NODE_ENV=development CI=true vitest run --exclude e2e --coverage.enabled ",
    "test:e2e": "cross-env NODE_ENV=development CI=true vitest e2e",
    "test:ui": "cross-env NODE_ENV=development CI=true vitest --exclude e2e --ui --coverage.enabled",
    "typecheck": "turbo typecheck",
-    "with-env": "dotenv -e .env --",
-    "scripts:update-readme-integrations": "tsx ./scripts/update-integration-list.mts"
+    "with-env": "dotenv -e .env --"
  },
  "prettier": "@homarr/prettier-config",
  "devDependencies": {
@@ -36,28 +39,28 @@
    "@semantic-release/changelog": "^6.0.3",
    "@semantic-release/commit-analyzer": "^13.0.1",
    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^11.0.4",
+    "@semantic-release/github": "^11.0.5",
    "@semantic-release/npm": "^12.0.2",
-    "@semantic-release/release-notes-generator": "^14.0.3",
+    "@semantic-release/release-notes-generator": "^14.1.0",
    "@testcontainers/redis": "^11.5.1",
    "@turbo/gen": "^2.5.6",
-    "@vitejs/plugin-react": "^5.0.0",
+    "@vitejs/plugin-react": "^5.0.2",
    "@vitest/coverage-v8": "^3.2.4",
    "@vitest/ui": "^3.2.4",
    "conventional-changelog-conventionalcommits": "^9.1.0",
    "cross-env": "^10.0.0",
    "jsdom": "^26.1.0",
    "prettier": "^3.6.2",
-    "semantic-release": "^24.2.7",
+    "semantic-release": "^24.2.8",
    "testcontainers": "^11.5.1",
    "turbo": "^2.5.6",
    "typescript": "^5.9.2",
    "vite-tsconfig-paths": "^5.1.4",
    "vitest": "^3.2.4"
  },
-  "packageManager": "pnpm@10.14.0",
+  "packageManager": "pnpm@10.15.1",
  "engines": {
-    "node": ">=22.18.0"
+    "node": ">=22.19.0"
  },
  "pnpm": {
    "onlyBuiltDependencies": [
@@ -72,10 +75,28 @@
      "tree-sitter-json"
    ],
    "overrides": {
-      "proxmox-api>undici": "7.13.0"
+      "@babel/helpers@<7.26.10": ">=7.28.4",
+      "@babel/runtime@<7.26.10": ">=7.28.4",
+      "axios@>=1.0.0 <1.8.2": ">=1.12.1",
+      "brace-expansion@>=2.0.0 <=2.0.1": ">=4.0.1",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=4.0.1",
+      "esbuild@<=0.24.2": ">=0.25.9",
+      "form-data@>=4.0.0 <4.0.4": ">=4.0.4",
+      "hono@<4.6.5": ">=4.9.6",
+      "linkifyjs@<4.3.2": ">=4.3.2",
+      "nanoid@>=4.0.0 <5.0.9": ">=5.1.5",
+      "prismjs@<1.30.0": ">=1.30.0",
+      "proxmox-api>undici": "7.15.0",
+      "rollup@>=4.0.0 <4.22.4": ">=4.50.1",
+      "sha.js@<=2.4.11": ">=2.4.12",
+      "tar-fs@>=3.0.0 <3.0.9": ">=3.1.0",
+      "tar-fs@>=2.0.0 <2.1.3": ">=3.1.0",
+      "tmp@<=0.2.3": ">=0.2.5",
+      "vite@>=5.0.0 <=5.4.18": ">=7.1.5"
    },
    "patchedDependencies": {
-      "@types/node-unifi": "patches/@types__node-unifi.patch"
+      "@types/node-unifi": "patches/@types__node-unifi.patch",
+      "trpc-to-openapi": "patches/trpc-to-openapi.patch"
    },
    "allowUnusedPatches": true,
    "ignoredBuiltDependencies": [
@@ -32,7 +32,7 @@
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -42,24 +42,24 @@
    "@homarr/server-settings": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
    "@kubernetes/client-node": "^1.3.0",
-    "@tanstack/react-query": "^5.85.3",
-    "@trpc/client": "^11.4.4",
-    "@trpc/react-query": "^11.4.4",
-    "@trpc/server": "^11.4.4",
-    "@trpc/tanstack-react-query": "^11.4.4",
+    "@tanstack/react-query": "^5.87.1",
+    "@trpc/client": "^11.5.1",
+    "@trpc/react-query": "^11.5.1",
+    "@trpc/server": "^11.5.1",
+    "@trpc/tanstack-react-query": "^11.5.1",
    "lodash.clonedeep": "^4.5.0",
-    "next": "15.4.6",
+    "next": "15.5.2",
    "react": "19.1.1",
    "react-dom": "19.1.1",
    "superjson": "2.2.2",
-    "trpc-to-openapi": "^3.0.0",
-    "zod": "^4.0.14"
+    "trpc-to-openapi": "^3.0.1",
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "prettier": "^3.6.2",
    "typescript": "^5.9.2"
  }
@@ -25,16 +25,6 @@ export const testConnectionAsync = async (
    integrationUrl: integration.url,
  });

-  const formSecrets = integration.secrets
-    .filter((secret) => secret.value !== null)
-    .map((secret) => ({
-      ...secret,
-      // We ensured above that the value is not null
-      // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-      value: secret.value!,
-      source: "form" as const,
-    }));
-
  const decryptedDbSecrets = dbSecrets
    .map((secret) => {
      try {
@@ -55,6 +45,15 @@ export const testConnectionAsync = async (
    })
    .filter((secret) => secret !== null);

+  const formSecrets = integration.secrets
+    .map((secret) => ({
+      ...secret,
+      // If the value is not defined in the form (because we only changed other values) we use the existing value from the db if it exists
+      value: secret.value ?? decryptedDbSecrets.find((dbSecret) => dbSecret.kind === secret.kind)?.value ?? null,
+      source: "form" as const,
+    }))
+    .filter((secret): secret is SourcedIntegrationSecret<"form"> => secret.value !== null);
+
  const sourcedSecrets = [...formSecrets, ...decryptedDbSecrets];
  const secretKinds = getSecretKindOption(integration.kind, sourcedSecrets);

@@ -89,10 +88,10 @@ export const testConnectionAsync = async (
  return result;
 };

-interface SourcedIntegrationSecret {
+interface SourcedIntegrationSecret<TSource extends string = "db" | "form"> {
  kind: IntegrationSecretKind;
  value: string;
-  source: "db" | "form";
+  source: TSource;
 }

 const getSecretKindOption = (kind: IntegrationKind, sourcedSecrets: SourcedIntegrationSecret[]) => {
@@ -111,7 +110,9 @@ const getSecretKindOption = (kind: IntegrationKind, sourcedSecrets: SourcedInteg
  }

  const onlyFormSecretsKindOptions = matchingSecretKindOptions.filter((secretKinds) =>
-    sourcedSecrets.filter((secret) => secretKinds.includes(secret.kind)).every((secret) => secret.source === "form"),
+    secretKinds.every((secretKind) =>
+      sourcedSecrets.find((secret) => secret.kind === secretKind && secret.source === "form"),
+    ),
  );

  if (onlyFormSecretsKindOptions.length >= 1) {
@@ -184,12 +184,23 @@ function getProviders(versionInfo: VersionInfo, nodes: V1NodeList) {
  if (versionInfo.gitVersion.includes("aks")) providers.add("AKS");

  nodes.items.forEach((node) => {
-    const nodeProviderLabel =
-      node.metadata?.labels?.["node.kubernetes.io/instance-type"] ?? node.metadata?.labels?.provider ?? "";
+    const labels = node.metadata?.labels ?? {};
+    const nodeProviderLabel = labels["node.kubernetes.io/instance-type"] ?? labels.provider ?? "";
+
    if (nodeProviderLabel.includes("aws")) providers.add("EKS");
    if (nodeProviderLabel.includes("azure")) providers.add("AKS");
    if (nodeProviderLabel.includes("gce")) providers.add("GKE");
    if (nodeProviderLabel.includes("k3s")) providers.add("k3s");
+
+    const nodeInfo = node.status?.nodeInfo;
+    if (nodeInfo) {
+      const osImage = nodeInfo.osImage.toLowerCase();
+      const kernelVersion = nodeInfo.kernelVersion.toLowerCase();
+
+      if (osImage.includes("talos") || kernelVersion.includes("talos")) {
+        providers.add("Talos");
+      }
+    }
  });

  return Array.from(providers).join(", ");
@@ -265,4 +265,77 @@ describe("testConnectionAsync should run test connection of integration", () =>
      ],
    });
  });
+
+  test("with input of existing github app", async () => {
+    // Arrange
+    const factorySpy = vi.spyOn(homarrIntegrations, "createIntegrationAsync");
+    const optionsSpy = vi.spyOn(homarrDefinitions, "getAllSecretKindOptions");
+    factorySpy.mockReturnValue(
+      Promise.resolve({
+        testConnectionAsync: async () => await Promise.resolve({ success: true }),
+      } as homarrIntegrations.PiHoleIntegrationV6),
+    );
+    optionsSpy.mockReturnValue([[], ["githubAppId", "githubInstallationId", "privateKey"]]);
+
+    const integration = {
+      id: "new",
+      name: "GitHub",
+      url: "https://api.github.com",
+      kind: "github" as const,
+      secrets: [
+        {
+          kind: "githubAppId" as const,
+          value: "345",
+        },
+        {
+          kind: "githubInstallationId" as const,
+          value: "456",
+        },
+        {
+          kind: "privateKey" as const,
+          value: null,
+        },
+      ],
+    };
+
+    const dbSecrets = [
+      {
+        kind: "githubAppId" as const,
+        value: "123.encrypted" as const,
+      },
+      {
+        kind: "githubInstallationId" as const,
+        value: "234.encrypted" as const,
+      },
+      {
+        kind: "privateKey" as const,
+        value: "privateKey.encrypted" as const,
+      },
+    ];
+
+    // Act
+    await testConnectionAsync(integration, dbSecrets);
+
+    // Assert
+    expect(factorySpy).toHaveBeenCalledWith({
+      id: "new",
+      name: "GitHub",
+      url: "https://api.github.com",
+      kind: "github" as const,
+      decryptedSecrets: [
+        expect.objectContaining({
+          kind: "githubAppId",
+          value: "345",
+        }),
+        expect.objectContaining({
+          kind: "githubInstallationId",
+          value: "456",
+        }),
+        expect.objectContaining({
+          kind: "privateKey",
+          value: "privateKey",
+        }),
+      ],
+    });
+  });
 });
@@ -9,7 +9,7 @@ import { createTRPCRouter, publicProcedure } from "../../trpc";

 export const healthMonitoringRouter = createTRPCRouter({
  getSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "mock"))
+    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "mock"))
    .query(async ({ ctx }) => {
      return await Promise.all(
        ctx.integrations.map(async (integration) => {
@@ -26,7 +26,7 @@ export const healthMonitoringRouter = createTRPCRouter({
      );
    }),
  subscribeSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "mock"))
+    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "mock"))
    .subscription(({ ctx }) => {
      return observable<{ integrationId: string; healthInfo: SystemHealthMonitoring; timestamp: Date }>((emit) => {
        const unsubscribes: (() => void)[] = [];
@@ -35,11 +35,11 @@
    "bcrypt": "^6.0.0",
    "cookies": "^0.9.1",
    "ldapts": "8.0.9",
-    "next": "15.4.6",
+    "next": "15.5.2",
    "next-auth": "5.0.0-beta.29",
    "react": "19.1.1",
    "react-dom": "19.1.1",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
@@ -47,7 +47,7 @@
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/bcrypt": "6.0.0",
    "@types/cookies": "0.9.1",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "prettier": "^3.6.2",
    "typescript": "^5.9.2"
  }
@@ -32,7 +32,7 @@
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -24,13 +24,13 @@
  "dependencies": {
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
-    "undici": "7.13.0"
+    "undici": "7.15.0"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -28,14 +28,14 @@
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "^17.2.1"
+    "dotenv": "^17.2.2"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
    "esbuild": "^0.25.9",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -1,7 +1,7 @@
 import { randomBytes } from "crypto";
 import { z } from "zod/v4";

-import { createEnv } from "@homarr/core/infrastructure/env";
+import { createBooleanSchema, createEnv } from "@homarr/core/infrastructure/env";

 const errorSuffix = `, please generate a 64 character secret in hex format or use the following: "${randomBytes(32).toString("hex")}"`;

@@ -23,9 +23,13 @@ export const env = createEnv({
      .regex(/^[0-9a-fA-F]{64}$/, {
        message: `SECRET_ENCRYPTION_KEY must only contain hex characters${errorSuffix}`,
      }),
+    NO_EXTERNAL_CONNECTION: createBooleanSchema(false),
+    ENABLE_DNS_CACHING: createBooleanSchema(false),
  },
  runtimeEnv: {
    SECRET_ENCRYPTION_KEY: process.env.SECRET_ENCRYPTION_KEY,
    NODE_ENV: process.env.NODE_ENV,
+    NO_EXTERNAL_CONNECTION: process.env.NO_EXTERNAL_CONNECTION,
+    ENABLE_DNS_CACHING: process.env.ENABLE_DNS_CACHING,
  },
 });
@@ -8,6 +8,7 @@
    ".": "./index.ts",
    "./types": "./src/types.ts",
    "./server": "./src/server.ts",
+    "./init-dns": "./src/dns.ts",
    "./client": "./src/client.ts",
    "./env": "./env.ts"
  },
@@ -29,19 +30,21 @@
    "@homarr/core": "workspace:^0.1.0",
    "@homarr/log": "workspace:^0.1.0",
    "@paralleldrive/cuid2": "^2.2.2",
-    "dayjs": "^1.11.13",
-    "next": "15.4.6",
+    "dayjs": "^1.11.18",
+    "dns-caching": "^0.2.5",
+    "next": "15.5.2",
+    "octokit": "^5.0.3",
    "react": "19.1.1",
    "react-dom": "19.1.1",
-    "undici": "7.13.0",
-    "zod": "^4.0.14",
-    "zod-validation-error": "^3.5.3"
+    "undici": "7.15.0",
+    "zod": "^4.1.5",
+    "zod-validation-error": "^4.0.1"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -0,0 +1,26 @@
+import { DnsCacheManager } from "dns-caching";
+
+import { logger } from "@homarr/log";
+
+import { env } from "../env";
+
+// Add global type augmentation for homarr
+declare global {
+  var homarr: {
+    dnsCacheManager?: DnsCacheManager;
+    // add other properties if needed
+  };
+}
+
+// Initialize global.homarr if not present
+// eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+global.homarr ??= {};
+global.homarr.dnsCacheManager ??= new DnsCacheManager({
+  cacheMaxEntries: 1000,
+  forceMinTtl: 5 * 60 * 1000, // 5 minutes
+  logger,
+});
+
+if (env.ENABLE_DNS_CACHING) {
+  global.homarr.dnsCacheManager.initialize();
+}
@@ -3,3 +3,4 @@ export * from "./fetch-http-error-handler";
 export * from "./ofetch-http-error-handler";
 export * from "./axios-http-error-handler";
 export * from "./tsdav-http-error-handler";
+export * from "./octokit-http-error-handler";
@@ -0,0 +1,44 @@
+import { FetchError } from "node-fetch";
+
+import { logger } from "@homarr/log";
+
+import { RequestError } from "../request-error";
+import type { AnyRequestError } from "../request-error";
+import type { ResponseError } from "../response-error";
+import { matchErrorCode } from "./fetch-http-error-handler";
+import { HttpErrorHandler } from "./http-error-handler";
+
+/**
+ * node-fetch was a defacto standard to use fetch in nodejs.
+ *
+ * It is for example used within the cross-fetch package which is used in tsdav.
+ */
+export class NodeFetchHttpErrorHandler extends HttpErrorHandler {
+  constructor(private type = "node-fetch") {
+    super();
+  }
+
+  handleRequestError(error: unknown): AnyRequestError | undefined {
+    if (!(error instanceof FetchError)) return undefined;
+    if (error.code === undefined) return undefined;
+
+    logger.debug(`Received ${this.type} request error`, {
+      code: error.code,
+      message: error.message,
+    });
+
+    const requestErrorInput = matchErrorCode(error.code);
+    if (!requestErrorInput) return undefined;
+
+    return new RequestError(requestErrorInput, {
+      cause: error,
+    });
+  }
+
+  /**
+   * Response errors do not exist for fetch as it does not throw errors for non successful responses.
+   */
+  handleResponseError(_: unknown): ResponseError | undefined {
+    return undefined;
+  }
+}
@@ -0,0 +1,24 @@
+import { RequestError as OctokitRequestError } from "octokit";
+
+import type { AnyRequestError } from "../request-error";
+import { ResponseError } from "../response-error";
+import { HttpErrorHandler } from "./http-error-handler";
+
+export class OctokitHttpErrorHandler extends HttpErrorHandler {
+  /**
+   * I wasn't able to get a request error triggered. Therefore we ignore them for now
+   * and just forward them as unknown errors
+   */
+  handleRequestError(_: unknown): AnyRequestError | undefined {
+    return undefined;
+  }
+
+  handleResponseError(error: unknown): ResponseError | undefined {
+    if (!(error instanceof OctokitRequestError)) return undefined;
+
+    return new ResponseError({
+      status: error.status,
+      url: error.response?.url,
+    });
+  }
+}
@@ -2,12 +2,12 @@ import { logger } from "@homarr/log";

 import type { AnyRequestError } from "../request-error";
 import { ResponseError } from "../response-error";
-import { FetchHttpErrorHandler } from "./fetch-http-error-handler";
 import { HttpErrorHandler } from "./http-error-handler";
+import { NodeFetchHttpErrorHandler } from "./node-fetch-http-error-handler";

 export class TsdavHttpErrorHandler extends HttpErrorHandler {
  handleRequestError(error: unknown): AnyRequestError | undefined {
-    return new FetchHttpErrorHandler("tsdav").handleRequestError(error);
+    return new NodeFetchHttpErrorHandler("tsdav").handleRequestError(error);
  }

  handleResponseError(error: unknown): ResponseError | undefined {
@@ -16,7 +16,7 @@ export class TsdavHttpErrorHandler extends HttpErrorHandler {
    // https://github.com/natelindev/tsdav/blob/bf33f04b1884694d685ee6f2b43fe9354b12d167/src/account.ts#L86
    if (error.message !== "Invalid credentials") return undefined;

-    logger.debug("Received Tsdav response error", {
+    logger.debug("Received tsdav response error", {
      status: 401,
    });

@@ -3,6 +3,9 @@ import { Agent } from "undici";

 import { logger } from "@homarr/log";

+// The below import statement initializes dns-caching
+import "./dns";
+
 export class LoggingAgent extends Agent {
  constructor(...props: ConstructorParameters<typeof Agent>) {
    super(...props);
@@ -26,13 +26,13 @@
  "dependencies": {
    "@t3-oss/env-nextjs": "^0.13.8",
    "ioredis": "5.7.0",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -29,21 +29,21 @@
    "@homarr/core": "workspace:^0.1.0",
    "@homarr/cron-jobs": "workspace:^0.1.0",
    "@homarr/log": "workspace:^0.1.0",
-    "@tanstack/react-query": "^5.85.3",
-    "@trpc/client": "^11.4.4",
-    "@trpc/server": "^11.4.4",
-    "@trpc/tanstack-react-query": "^11.4.4",
+    "@tanstack/react-query": "^5.87.1",
+    "@trpc/client": "^11.5.1",
+    "@trpc/server": "^11.5.1",
+    "@trpc/tanstack-react-query": "^11.5.1",
    "node-cron": "^4.2.1",
    "react": "19.1.1",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/node-cron": "^3.0.11",
-    "@types/react": "19.1.10",
-    "eslint": "^9.33.0",
+    "@types/react": "19.1.12",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -29,7 +29,7 @@
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -33,7 +33,7 @@
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/node-cron": "^3.0.11",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -72,8 +72,6 @@ const createCallback = <TAllowedNames extends string, TName extends TAllowedName
          where: (cronJobConfigurations, { eq }) => eq(cronJobConfigurations.name, name),
        });

-        if (defaultCronExpression === "never") return null;
-
        const scheduledTask = createTask(
          configuration?.cronExpression ?? defaultCronExpression,
          () => void catchingCallbackAsync(),
@@ -120,7 +118,7 @@ export const createCronJobCreator = <TAllowedNames extends string = string>(
    options: CreateCronJobOptions = { runOnStart: false },
  ) => {
    creatorOptions.logger.logDebug(`Validating cron expression '${defaultCronExpression}' for job: ${name}`);
-    if (defaultCronExpression !== "never" && !validate(defaultCronExpression)) {
+    if (!validate(defaultCronExpression)) {
      throw new Error(`Invalid cron expression '${defaultCronExpression}' for job '${name}'`);
    }
    creatorOptions.logger.logDebug(`Cron job expression '${defaultCronExpression}' for job ${name} is valid`);
@@ -132,8 +130,6 @@ export const createCronJobCreator = <TAllowedNames extends string = string>(
    // This is a type guard to check if the cron expression is valid and give the user a type hint
    return returnValue as unknown as ValidateCron<TExpression> extends true
      ? typeof returnValue
-      : TExpression extends "never"
-        ? typeof returnValue
-        : "Invalid cron expression";
+      : "Invalid cron expression";
  };
 };
@@ -8,4 +8,3 @@ export const EVERY_10_MINUTES = checkCron("*/10 * * * *") satisfies string;
 export const EVERY_HOUR = checkCron("0 * * * *") satisfies string;
 export const EVERY_DAY = checkCron("0 0 * * */1") satisfies string;
 export const EVERY_WEEK = checkCron("0 0 * * 1") satisfies string;
-export const NEVER = "never";
@@ -45,7 +45,6 @@ export const createJobGroupCreator = <TAllowedNames extends string = string>(
          }

          const scheduledTask = await job.createTaskAsync();
-          if (!scheduledTask) continue;

          tasks.set(job.name, scheduledTask);
        }
@@ -44,7 +44,7 @@
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -21,7 +21,6 @@ import { refreshNotificationsJob } from "./jobs/integrations/notifications";
 import { minecraftServerStatusJob } from "./jobs/minecraft-server-status";
 import { pingJob } from "./jobs/ping";
 import { rssFeedsJob } from "./jobs/rss-feeds";
-import { sessionCleanupJob } from "./jobs/session-cleanup";
 import { updateCheckerJob } from "./jobs/update-checker";
 import { createCronJobGroup } from "./lib";

@@ -39,7 +38,6 @@ export const jobGroup = createCronJobGroup({
  rssFeeds: rssFeedsJob,
  indexerManager: indexerManagerJob,
  healthMonitoring: healthMonitoringJob,
-  sessionCleanup: sessionCleanupJob,
  updateChecker: updateCheckerJob,
  mediaTranscoding: mediaTranscodingJob,
  minecraftServerStatus: minecraftServerStatusJob,
@@ -1,4 +1,5 @@
 import { sendServerAnalyticsAsync } from "@homarr/analytics";
+import { env } from "@homarr/common/env";
 import { EVERY_WEEK } from "@homarr/cron-jobs-core/expressions";
 import { db } from "@homarr/db";
 import { getServerSettingByKeyAsync } from "@homarr/db/queries";
@@ -9,6 +10,7 @@ export const analyticsJob = createCronJob("analytics", EVERY_WEEK, {
  runOnStart: true,
  preventManualExecution: true,
 }).withCallback(async () => {
+  if (env.NO_EXTERNAL_CONNECTION) return;
  const analyticSetting = await getServerSettingByKeyAsync(db, "analytics");

  if (!analyticSetting.enableGeneral) {
@@ -1,4 +1,5 @@
 import { createId, splitToNChunks, Stopwatch } from "@homarr/common";
+import { env } from "@homarr/common/env";
 import { EVERY_WEEK } from "@homarr/cron-jobs-core/expressions";
 import type { InferInsertModel } from "@homarr/db";
 import { db, handleTransactionsAsync, inArray, sql } from "@homarr/db";
@@ -12,6 +13,8 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
  runOnStart: true,
  expectedMaximumDurationInMillis: 10 * 1000,
 }).withCallback(async () => {
+  if (env.NO_EXTERNAL_CONNECTION) return;
+
  logger.info("Updating icon repository cache...");
  const stopWatch = new Stopwatch();
  const repositoryIconGroups = await fetchIconsAsync();
@@ -1,38 +0,0 @@
-import { env } from "@homarr/auth/env";
-import { NEVER } from "@homarr/cron-jobs-core/expressions";
-import { db, eq, inArray } from "@homarr/db";
-import { sessions, users } from "@homarr/db/schema";
-import { supportedAuthProviders } from "@homarr/definitions";
-import { logger } from "@homarr/log";
-
-import { createCronJob } from "../lib";
-
-/**
- * Deletes sessions for users that have inactive auth providers.
- * Sessions from other providers are deleted so they can no longer be used.
- */
-export const sessionCleanupJob = createCronJob("sessionCleanup", NEVER, {
-  runOnStart: true,
-}).withCallback(async () => {
-  const currentAuthProviders = env.AUTH_PROVIDERS;
-
-  const inactiveAuthProviders = supportedAuthProviders.filter((provider) => !currentAuthProviders.includes(provider));
-  const subQuery = db
-    .select({ id: users.id })
-    .from(users)
-    .where(inArray(users.provider, inactiveAuthProviders))
-    .as("sq");
-  const sessionsWithInactiveProviders = await db
-    .select({ userId: sessions.userId })
-    .from(sessions)
-    .rightJoin(subQuery, eq(sessions.userId, subQuery.id));
-
-  const userIds = sessionsWithInactiveProviders.map(({ userId }) => userId).filter((value) => value !== null);
-  await db.delete(sessions).where(inArray(sessions.userId, userIds));
-
-  if (sessionsWithInactiveProviders.length > 0) {
-    logger.info(`Deleted sessions for inactive providers count=${userIds.length}`);
-  } else {
-    logger.debug("No sessions to delete");
-  }
-});
@@ -2,7 +2,7 @@ import type { InferInsertModel } from "drizzle-orm";

 import { objectEntries } from "@homarr/common";

-import type { HomarrDatabase, HomarrDatabaseMysql } from "./driver";
+import type { HomarrDatabase, HomarrDatabaseMysql, HomarrDatabasePostgresql } from "./driver";
 import { env } from "./env";
 import * as schema from "./schema";

@@ -10,6 +10,14 @@ type TableKey = {
  [K in keyof typeof schema]: (typeof schema)[K] extends { _: { brand: "Table" } } ? K : never;
 }[keyof typeof schema];

+export function isMysql(): boolean {
+  return env.DB_DRIVER === "mysql2";
+}
+
+export function isPostgresql(): boolean {
+  return env.DB_DRIVER === "node-postgres";
+}
+
 export const createDbInsertCollectionForTransaction = <TTableKey extends TableKey>(
  tablesInInsertOrder: TTableKey[],
 ) => {
@@ -35,8 +43,10 @@ export const createDbInsertCollectionForTransaction = <TTableKey extends TableKe
        }
      });
    },
-    insertAllAsync: async (db: HomarrDatabaseMysql) => {
-      await db.transaction(async (transaction) => {
+    // We allow any database that supports async passed here but then fallback to mysql to prevent typescript errors
+    insertAllAsync: async (db: HomarrDatabaseMysql | HomarrDatabasePostgresql) => {
+      const innerDb = db as HomarrDatabaseMysql;
+      await innerDb.transaction(async (transaction) => {
        for (const [key, values] of objectEntries(context)) {
          if (values.length >= 1) {
            // Below is actually the mysqlSchema when the driver is mysql
@@ -56,12 +66,18 @@ export const createDbInsertCollectionWithoutTransaction = <TTableKey extends Tab
  return {
    ...collection,
    insertAllAsync: async (db: HomarrDatabase) => {
-      if (env.DB_DRIVER !== "mysql2") {
-        insertAll(db);
-        return;
+      switch (env.DB_DRIVER) {
+        case "mysql2":
+        case "node-postgres":
+          // For mysql2 and node-postgres, we can use the async insertAllAsync method
+          await insertAllAsync(db as unknown as HomarrDatabaseMysql | HomarrDatabasePostgresql);
+          return;
+        default:
+          // For better-sqlite3, we need to use the synchronous insertAll method
+          // default assumes better-sqlite3. It's original implementation.
+          insertAll(db);
+          break;
      }
-
-      await insertAllAsync(db as unknown as HomarrDatabaseMysql);
    },
  };
 };
@@ -0,0 +1,20 @@
+import type { Config } from "drizzle-kit";
+
+import { env } from "../env";
+
+export default {
+  dialect: "postgresql",
+  schema: "./schema",
+  casing: "snake_case",
+
+  dbCredentials: env.DB_URL
+    ? { url: env.DB_URL }
+    : {
+        host: env.DB_HOST,
+        port: env.DB_PORT,
+        user: env.DB_USER,
+        password: env.DB_PASSWORD,
+        database: env.DB_NAME,
+      },
+  out: "./migrations/postgresql",
+} satisfies Config;
@@ -5,17 +5,22 @@ import type { BetterSQLite3Database } from "drizzle-orm/better-sqlite3";
 import { drizzle as drizzleSqlite } from "drizzle-orm/better-sqlite3";
 import type { MySql2Database } from "drizzle-orm/mysql2";
 import { drizzle as drizzleMysql } from "drizzle-orm/mysql2";
+import type { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { drizzle as drizzlePg } from "drizzle-orm/node-postgres";
 import type { Pool as MysqlConnectionPool } from "mysql2";
 import mysql from "mysql2";
+import { Pool as PostgresPool } from "pg";

 import { logger } from "@homarr/log";

 import { env } from "./env";
 import * as mysqlSchema from "./schema/mysql";
+import * as pgSchema from "./schema/postgresql";
 import * as sqliteSchema from "./schema/sqlite";

 export type HomarrDatabase = BetterSQLite3Database<typeof sqliteSchema>;
 export type HomarrDatabaseMysql = MySql2Database<typeof mysqlSchema>;
+export type HomarrDatabasePostgresql = NodePgDatabase<typeof pgSchema>;

 const init = () => {
  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
@@ -24,6 +29,9 @@ const init = () => {
      case "mysql2":
        initMySQL2();
        break;
+      case "node-postgres":
+        initNodePostgres();
+        break;
      default:
        initBetterSqlite();
        break;
@@ -31,7 +39,7 @@ const init = () => {
  }
 };

-export let connection: BetterSqlite3Connection | MysqlConnectionPool;
+export let connection: BetterSqlite3Connection | MysqlConnectionPool | PostgresPool;
 export let database: HomarrDatabase;

 class WinstonDrizzleLogger implements Logger {
@@ -73,4 +81,33 @@ const initMySQL2 = () => {
  }) as unknown as HomarrDatabase;
 };

+const initNodePostgres = () => {
+  if (!env.DB_HOST) {
+    connection = new PostgresPool({
+      connectionString: env.DB_URL,
+      max: 0,
+      idleTimeoutMillis: 60000,
+      allowExitOnIdle: false,
+    });
+  } else {
+    connection = new PostgresPool({
+      host: env.DB_HOST,
+      database: env.DB_NAME,
+      port: env.DB_PORT,
+      user: env.DB_USER,
+      password: env.DB_PASSWORD,
+      max: 0,
+      idleTimeoutMillis: 60000,
+      allowExitOnIdle: false,
+    });
+  }
+
+  database = drizzlePg({
+    logger: new WinstonDrizzleLogger(),
+    schema: pgSchema,
+    casing: "snake_case",
+    client: connection,
+  }) as unknown as HomarrDatabase;
+};
+
 init();
@@ -6,6 +6,7 @@ import { createEnv } from "@homarr/core/infrastructure/env";
 const drivers = {
  betterSqlite3: "better-sqlite3",
  mysql2: "mysql2",
+  nodePostgres: "node-postgres",
 } as const;

 const isDriver = (driver: (typeof drivers)[keyof typeof drivers]) => process.env.DB_DRIVER === driver;
@@ -21,7 +22,7 @@ export const env = createEnv({
   */
  server: {
    DB_DRIVER: z
-      .union([z.literal(drivers.betterSqlite3), z.literal(drivers.mysql2)], {
+      .union([z.literal(drivers.betterSqlite3), z.literal(drivers.mysql2), z.literal(drivers.nodePostgres)], {
        message: `Invalid database driver, supported are ${Object.keys(drivers).join(", ")}`,
      })
      .default(drivers.betterSqlite3),
@@ -42,7 +43,7 @@ export const env = createEnv({
            .regex(/\d+/)
            .transform(Number)
            .refine((number) => number >= 1)
-            .default(3306),
+            .default(isDriver(drivers.mysql2) ? 3306 : 5432),
          DB_USER: z.string(),
          DB_PASSWORD: z.string(),
          DB_NAME: z.string(),
@@ -7,6 +7,6 @@ export * from "drizzle-orm";
 export const db = database;

 export type Database = typeof db;
-export type { HomarrDatabaseMysql } from "./driver";
+export type { HomarrDatabaseMysql, HomarrDatabasePostgresql } from "./driver";

 export { handleDiffrentDbDriverOperationsAsync as handleTransactionsAsync } from "./transactions";
@@ -0,0 +1,43 @@
+import SuperJSON from "superjson";
+
+import { eq } from "../..";
+import type { Database } from "../..";
+import { items } from "../../schema";
+
+/**
+ * To support showing the description in the widget itself we replaced
+ * the tooltip show option with display mode.
+ */
+export async function migrateAppWidgetShowDescriptionTooltipToDisplayModeAsync(db: Database) {
+  const existingAppItems = await db.query.items.findMany({
+    where: (table, { eq }) => eq(table.kind, "app"),
+  });
+
+  const itemsToUpdate = existingAppItems
+    .map((item) => ({
+      id: item.id,
+      options: SuperJSON.parse<{ showDescriptionTooltip?: boolean }>(item.options),
+    }))
+    .filter((item) => item.options.showDescriptionTooltip !== undefined);
+
+  console.log(
+    `Migrating app items with showDescriptionTooltip to descriptionDisplayMode count=${itemsToUpdate.length}`,
+  );
+
+  await Promise.all(
+    itemsToUpdate.map(async (item) => {
+      const { showDescriptionTooltip, ...options } = item.options;
+      await db
+        .update(items)
+        .set({
+          options: SuperJSON.stringify({
+            ...options,
+            descriptionDisplayMode: showDescriptionTooltip ? "tooltip" : "hidden",
+          }),
+        })
+        .where(eq(items.id, item.id));
+    }),
+  );
+
+  console.log(`Migrated app items with showDescriptionTooltip to descriptionDisplayMode count=${itemsToUpdate.length}`);
+}
@@ -1,8 +1,10 @@
 import type { Database } from "../..";
 import { migrateReleaseWidgetProviderToOptionsAsync } from "./0000_release_widget_provider_to_options";
 import { migrateOpnsenseCredentialsAsync } from "./0001_opnsense_credentials";
+import { migrateAppWidgetShowDescriptionTooltipToDisplayModeAsync } from "./0002_app_widget_show_description_tooltip_to_display_mode";

 export const applyCustomMigrationsAsync = async (db: Database) => {
  await migrateReleaseWidgetProviderToOptionsAsync(db);
  await migrateOpnsenseCredentialsAsync(db);
+  await migrateAppWidgetShowDescriptionTooltipToDisplayModeAsync(db);
 };
@@ -0,0 +1 @@
+ALTER TABLE `integrationSecret` MODIFY COLUMN `kind` varchar(64) NOT NULL;
@@ -246,6 +246,13 @@
      "when": 1754929897145,
      "tag": "0034_increase-blob-size",
      "breakpoints": true
+    },
+    {
+      "idx": 35,
+      "version": "5",
+      "when": 1756701556908,
+      "tag": "0035_increase-secret-kind-length",
+      "breakpoints": true
    }
  ]
 }
@@ -0,0 +1,322 @@
+CREATE TABLE "account" (
+	"user_id" varchar(64) NOT NULL,
+	"type" text NOT NULL,
+	"provider" varchar(64) NOT NULL,
+	"provider_account_id" varchar(64) NOT NULL,
+	"refresh_token" text,
+	"access_token" text,
+	"expires_at" integer,
+	"token_type" text,
+	"scope" text,
+	"id_token" text,
+	"session_state" text,
+	CONSTRAINT "account_provider_provider_account_id_pk" PRIMARY KEY("provider","provider_account_id")
+);
+--> statement-breakpoint
+CREATE TABLE "apiKey" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"api_key" text NOT NULL,
+	"salt" text NOT NULL,
+	"user_id" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"icon_url" text NOT NULL,
+	"href" text,
+	"ping_url" text
+);
+--> statement-breakpoint
+CREATE TABLE "boardGroupPermission" (
+	"board_id" varchar(64) NOT NULL,
+	"group_id" varchar(64) NOT NULL,
+	"permission" varchar(128) NOT NULL,
+	CONSTRAINT "boardGroupPermission_board_id_group_id_permission_pk" PRIMARY KEY("board_id","group_id","permission")
+);
+--> statement-breakpoint
+CREATE TABLE "boardUserPermission" (
+	"board_id" varchar(64) NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	"permission" varchar(128) NOT NULL,
+	CONSTRAINT "boardUserPermission_board_id_user_id_permission_pk" PRIMARY KEY("board_id","user_id","permission")
+);
+--> statement-breakpoint
+CREATE TABLE "board" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" varchar(256) NOT NULL,
+	"is_public" boolean DEFAULT false NOT NULL,
+	"creator_id" varchar(64),
+	"page_title" text,
+	"meta_title" text,
+	"logo_image_url" text,
+	"favicon_image_url" text,
+	"background_image_url" text,
+	"background_image_attachment" text DEFAULT 'fixed' NOT NULL,
+	"background_image_repeat" text DEFAULT 'no-repeat' NOT NULL,
+	"background_image_size" text DEFAULT 'cover' NOT NULL,
+	"primary_color" text DEFAULT '#fa5252' NOT NULL,
+	"secondary_color" text DEFAULT '#fd7e14' NOT NULL,
+	"opacity" integer DEFAULT 100 NOT NULL,
+	"custom_css" text,
+	"icon_color" text,
+	"item_radius" text DEFAULT 'lg' NOT NULL,
+	"disable_status" boolean DEFAULT false NOT NULL,
+	CONSTRAINT "board_name_unique" UNIQUE("name")
+);
+--> statement-breakpoint
+CREATE TABLE "cron_job_configuration" (
+	"name" varchar(256) PRIMARY KEY NOT NULL,
+	"cron_expression" varchar(32) NOT NULL,
+	"is_enabled" boolean DEFAULT true NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "groupMember" (
+	"group_id" varchar(64) NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	CONSTRAINT "groupMember_group_id_user_id_pk" PRIMARY KEY("group_id","user_id")
+);
+--> statement-breakpoint
+CREATE TABLE "groupPermission" (
+	"group_id" varchar(64) NOT NULL,
+	"permission" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "group" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" varchar(64) NOT NULL,
+	"owner_id" varchar(64),
+	"home_board_id" varchar(64),
+	"mobile_home_board_id" varchar(64),
+	"position" smallint NOT NULL,
+	CONSTRAINT "group_name_unique" UNIQUE("name")
+);
+--> statement-breakpoint
+CREATE TABLE "iconRepository" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"slug" varchar(150) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "icon" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" varchar(250) NOT NULL,
+	"url" text NOT NULL,
+	"checksum" text NOT NULL,
+	"icon_repository_id" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "integrationGroupPermissions" (
+	"integration_id" varchar(64) NOT NULL,
+	"group_id" varchar(64) NOT NULL,
+	"permission" varchar(128) NOT NULL,
+	CONSTRAINT "integration_group_permission__pk" PRIMARY KEY("integration_id","group_id","permission")
+);
+--> statement-breakpoint
+CREATE TABLE "integration_item" (
+	"item_id" varchar(64) NOT NULL,
+	"integration_id" varchar(64) NOT NULL,
+	CONSTRAINT "integration_item_item_id_integration_id_pk" PRIMARY KEY("item_id","integration_id")
+);
+--> statement-breakpoint
+CREATE TABLE "integrationSecret" (
+	"kind" varchar(16) NOT NULL,
+	"value" text NOT NULL,
+	"updated_at" timestamp NOT NULL,
+	"integration_id" varchar(64) NOT NULL,
+	CONSTRAINT "integrationSecret_integration_id_kind_pk" PRIMARY KEY("integration_id","kind")
+);
+--> statement-breakpoint
+CREATE TABLE "integrationUserPermission" (
+	"integration_id" varchar(64) NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	"permission" varchar(128) NOT NULL,
+	CONSTRAINT "integrationUserPermission_integration_id_user_id_permission_pk" PRIMARY KEY("integration_id","user_id","permission")
+);
+--> statement-breakpoint
+CREATE TABLE "integration" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"url" text NOT NULL,
+	"kind" varchar(128) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "invite" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"token" varchar(512) NOT NULL,
+	"expiration_date" timestamp NOT NULL,
+	"creator_id" varchar(64) NOT NULL,
+	CONSTRAINT "invite_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "item_layout" (
+	"item_id" varchar(64) NOT NULL,
+	"section_id" varchar(64) NOT NULL,
+	"layout_id" varchar(64) NOT NULL,
+	"x_offset" integer NOT NULL,
+	"y_offset" integer NOT NULL,
+	"width" integer NOT NULL,
+	"height" integer NOT NULL,
+	CONSTRAINT "item_layout_item_id_section_id_layout_id_pk" PRIMARY KEY("item_id","section_id","layout_id")
+);
+--> statement-breakpoint
+CREATE TABLE "item" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"board_id" varchar(64) NOT NULL,
+	"kind" text NOT NULL,
+	"options" text DEFAULT '{"json": {}}' NOT NULL,
+	"advanced_options" text DEFAULT '{"json": {}}' NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "layout" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" varchar(32) NOT NULL,
+	"board_id" varchar(64) NOT NULL,
+	"column_count" smallint NOT NULL,
+	"breakpoint" smallint DEFAULT 0 NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "media" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" varchar(512) NOT NULL,
+	"content" "bytea" NOT NULL,
+	"content_type" text NOT NULL,
+	"size" integer NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"creator_id" varchar(64)
+);
+--> statement-breakpoint
+CREATE TABLE "onboarding" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"step" varchar(64) NOT NULL,
+	"previous_step" varchar(64)
+);
+--> statement-breakpoint
+CREATE TABLE "search_engine" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"icon_url" text NOT NULL,
+	"name" varchar(64) NOT NULL,
+	"short" varchar(8) NOT NULL,
+	"description" text,
+	"url_template" text,
+	"type" varchar(64) DEFAULT 'generic' NOT NULL,
+	"integration_id" varchar(64),
+	CONSTRAINT "search_engine_short_unique" UNIQUE("short")
+);
+--> statement-breakpoint
+CREATE TABLE "section_collapse_state" (
+	"user_id" varchar(64) NOT NULL,
+	"section_id" varchar(64) NOT NULL,
+	"collapsed" boolean DEFAULT false NOT NULL,
+	CONSTRAINT "section_collapse_state_user_id_section_id_pk" PRIMARY KEY("user_id","section_id")
+);
+--> statement-breakpoint
+CREATE TABLE "section_layout" (
+	"section_id" varchar(64) NOT NULL,
+	"layout_id" varchar(64) NOT NULL,
+	"parent_section_id" varchar(64),
+	"x_offset" integer NOT NULL,
+	"y_offset" integer NOT NULL,
+	"width" integer NOT NULL,
+	"height" integer NOT NULL,
+	CONSTRAINT "section_layout_section_id_layout_id_pk" PRIMARY KEY("section_id","layout_id")
+);
+--> statement-breakpoint
+CREATE TABLE "section" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"board_id" varchar(64) NOT NULL,
+	"kind" text NOT NULL,
+	"x_offset" integer,
+	"y_offset" integer,
+	"name" text,
+	"options" text DEFAULT '{"json": {}}'
+);
+--> statement-breakpoint
+CREATE TABLE "serverSetting" (
+	"setting_key" varchar(64) PRIMARY KEY NOT NULL,
+	"value" text DEFAULT '{"json": {}}' NOT NULL,
+	CONSTRAINT "serverSetting_settingKey_unique" UNIQUE("setting_key")
+);
+--> statement-breakpoint
+CREATE TABLE "session" (
+	"session_token" varchar(512) PRIMARY KEY NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	"expires" timestamp NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "trusted_certificate_hostname" (
+	"hostname" varchar(256) NOT NULL,
+	"thumbprint" varchar(128) NOT NULL,
+	"certificate" text NOT NULL,
+	CONSTRAINT "trusted_certificate_hostname_hostname_thumbprint_pk" PRIMARY KEY("hostname","thumbprint")
+);
+--> statement-breakpoint
+CREATE TABLE "user" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"name" text,
+	"email" text,
+	"email_verified" timestamp,
+	"image" text,
+	"password" text,
+	"salt" text,
+	"provider" varchar(64) DEFAULT 'credentials' NOT NULL,
+	"home_board_id" varchar(64),
+	"mobile_home_board_id" varchar(64),
+	"default_search_engine_id" varchar(64),
+	"open_search_in_new_tab" boolean DEFAULT false NOT NULL,
+	"color_scheme" varchar(5) DEFAULT 'dark' NOT NULL,
+	"first_day_of_week" smallint DEFAULT 1 NOT NULL,
+	"ping_icons_enabled" boolean DEFAULT false NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "verificationToken" (
+	"identifier" varchar(64) NOT NULL,
+	"token" varchar(512) NOT NULL,
+	"expires" timestamp NOT NULL,
+	CONSTRAINT "verificationToken_identifier_token_pk" PRIMARY KEY("identifier","token")
+);
+--> statement-breakpoint
+ALTER TABLE "account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "apiKey" ADD CONSTRAINT "apiKey_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "boardGroupPermission" ADD CONSTRAINT "boardGroupPermission_board_id_board_id_fk" FOREIGN KEY ("board_id") REFERENCES "public"."board"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "boardGroupPermission" ADD CONSTRAINT "boardGroupPermission_group_id_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."group"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "boardUserPermission" ADD CONSTRAINT "boardUserPermission_board_id_board_id_fk" FOREIGN KEY ("board_id") REFERENCES "public"."board"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "boardUserPermission" ADD CONSTRAINT "boardUserPermission_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "board" ADD CONSTRAINT "board_creator_id_user_id_fk" FOREIGN KEY ("creator_id") REFERENCES "public"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "groupMember" ADD CONSTRAINT "groupMember_group_id_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."group"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "groupMember" ADD CONSTRAINT "groupMember_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "groupPermission" ADD CONSTRAINT "groupPermission_group_id_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."group"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "group" ADD CONSTRAINT "group_owner_id_user_id_fk" FOREIGN KEY ("owner_id") REFERENCES "public"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "group" ADD CONSTRAINT "group_home_board_id_board_id_fk" FOREIGN KEY ("home_board_id") REFERENCES "public"."board"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "group" ADD CONSTRAINT "group_mobile_home_board_id_board_id_fk" FOREIGN KEY ("mobile_home_board_id") REFERENCES "public"."board"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "icon" ADD CONSTRAINT "icon_icon_repository_id_iconRepository_id_fk" FOREIGN KEY ("icon_repository_id") REFERENCES "public"."iconRepository"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integrationGroupPermissions" ADD CONSTRAINT "integrationGroupPermissions_integration_id_integration_id_fk" FOREIGN KEY ("integration_id") REFERENCES "public"."integration"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integrationGroupPermissions" ADD CONSTRAINT "integrationGroupPermissions_group_id_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "public"."group"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integration_item" ADD CONSTRAINT "integration_item_item_id_item_id_fk" FOREIGN KEY ("item_id") REFERENCES "public"."item"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integration_item" ADD CONSTRAINT "integration_item_integration_id_integration_id_fk" FOREIGN KEY ("integration_id") REFERENCES "public"."integration"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integrationSecret" ADD CONSTRAINT "integrationSecret_integration_id_integration_id_fk" FOREIGN KEY ("integration_id") REFERENCES "public"."integration"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integrationUserPermission" ADD CONSTRAINT "integrationUserPermission_integration_id_integration_id_fk" FOREIGN KEY ("integration_id") REFERENCES "public"."integration"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "integrationUserPermission" ADD CONSTRAINT "integrationUserPermission_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "invite" ADD CONSTRAINT "invite_creator_id_user_id_fk" FOREIGN KEY ("creator_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "item_layout" ADD CONSTRAINT "item_layout_item_id_item_id_fk" FOREIGN KEY ("item_id") REFERENCES "public"."item"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "item_layout" ADD CONSTRAINT "item_layout_section_id_section_id_fk" FOREIGN KEY ("section_id") REFERENCES "public"."section"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "item_layout" ADD CONSTRAINT "item_layout_layout_id_layout_id_fk" FOREIGN KEY ("layout_id") REFERENCES "public"."layout"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "item" ADD CONSTRAINT "item_board_id_board_id_fk" FOREIGN KEY ("board_id") REFERENCES "public"."board"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "layout" ADD CONSTRAINT "layout_board_id_board_id_fk" FOREIGN KEY ("board_id") REFERENCES "public"."board"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "media" ADD CONSTRAINT "media_creator_id_user_id_fk" FOREIGN KEY ("creator_id") REFERENCES "public"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "search_engine" ADD CONSTRAINT "search_engine_integration_id_integration_id_fk" FOREIGN KEY ("integration_id") REFERENCES "public"."integration"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "section_collapse_state" ADD CONSTRAINT "section_collapse_state_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "section_collapse_state" ADD CONSTRAINT "section_collapse_state_section_id_section_id_fk" FOREIGN KEY ("section_id") REFERENCES "public"."section"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "section_layout" ADD CONSTRAINT "section_layout_section_id_section_id_fk" FOREIGN KEY ("section_id") REFERENCES "public"."section"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "section_layout" ADD CONSTRAINT "section_layout_layout_id_layout_id_fk" FOREIGN KEY ("layout_id") REFERENCES "public"."layout"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "section_layout" ADD CONSTRAINT "section_layout_parent_section_id_section_id_fk" FOREIGN KEY ("parent_section_id") REFERENCES "public"."section"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "section" ADD CONSTRAINT "section_board_id_board_id_fk" FOREIGN KEY ("board_id") REFERENCES "public"."board"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "user" ADD CONSTRAINT "user_home_board_id_board_id_fk" FOREIGN KEY ("home_board_id") REFERENCES "public"."board"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "user" ADD CONSTRAINT "user_mobile_home_board_id_board_id_fk" FOREIGN KEY ("mobile_home_board_id") REFERENCES "public"."board"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "user" ADD CONSTRAINT "user_default_search_engine_id_search_engine_id_fk" FOREIGN KEY ("default_search_engine_id") REFERENCES "public"."search_engine"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "userId_idx" ON "account" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "integration_secret__kind_idx" ON "integrationSecret" USING btree ("kind");--> statement-breakpoint
+CREATE INDEX "integration_secret__updated_at_idx" ON "integrationSecret" USING btree ("updated_at");--> statement-breakpoint
+CREATE INDEX "integration__kind_idx" ON "integration" USING btree ("kind");--> statement-breakpoint
+CREATE INDEX "user_id_idx" ON "session" USING btree ("user_id");
@@ -0,0 +1 @@
+ALTER TABLE "integrationSecret" ALTER COLUMN "kind" SET DATA TYPE varchar(64);
@@ -0,0 +1,20 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1754853510707,
+      "tag": "0000_initial",
+      "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1756701573101,
+      "tag": "0001_increase-secret-kind-length",
+      "breakpoints": true
+    }
+  ]
+}
@@ -0,0 +1,45 @@
+import { drizzle } from "drizzle-orm/node-postgres";
+import { migrate } from "drizzle-orm/node-postgres/migrator";
+import { Pool } from "pg";
+
+import type { Database } from "../..";
+import { env } from "../../env";
+import * as pgSchema from "../../schema/postgresql";
+import { applyCustomMigrationsAsync } from "../custom";
+import { seedDataAsync } from "../seed";
+
+const migrationsFolder = process.argv[2] ?? ".";
+
+const migrateAsync = async () => {
+  const pool = new Pool(
+    env.DB_URL
+      ? { connectionString: env.DB_URL }
+      : {
+          host: env.DB_HOST,
+          database: env.DB_NAME,
+          port: env.DB_PORT,
+          user: env.DB_USER,
+          password: env.DB_PASSWORD,
+        },
+  );
+
+  const db = drizzle({
+    schema: pgSchema,
+    casing: "snake_case",
+    client: pool,
+  });
+
+  await migrate(db, { migrationsFolder });
+  await seedDataAsync(db as unknown as Database);
+  await applyCustomMigrationsAsync(db as unknown as Database);
+};
+
+migrateAsync()
+  .then(() => {
+    console.log("Migration complete");
+    process.exit(0);
+  })
+  .catch((err) => {
+    console.log("Migration failed", err);
+    process.exit(1);
+  });
@@ -15,9 +15,8 @@ import {
  insertServerSettingByKeyAsync,
  updateServerSettingByKeyAsync,
 } from "../queries/server-setting";
-import { integrations, onboarding, searchEngines } from "../schema";
+import { groups, integrations, onboarding, searchEngines } from "../schema";
 import type { Integration } from "../schema";
-import { groups } from "../schema/mysql";

 export const seedDataAsync = async (db: Database) => {
  await seedEveryoneGroupAsync(db);
@@ -16,8 +16,9 @@
  "main": "./index.ts",
  "types": "./index.ts",
  "scripts": {
-    "build": "pnpm run build:sqlite && pnpm run build:mysql",
+    "build": "pnpm run build:sqlite && pnpm run build:mysql && pnpm run build:postgresql",
    "build:mysql": "esbuild migrations/mysql/migrate.ts --bundle --platform=node --outfile=migrations/mysql/migrate.cjs",
+    "build:postgresql": "esbuild migrations/postgresql/migrate.ts --bundle --platform=node --outfile=migrations/postgresql/migrate.cjs",
    "build:sqlite": "esbuild migrations/sqlite/migrate.ts --bundle --platform=node --outfile=migrations/sqlite/migrate.cjs",
    "clean": "rm -rf .turbo node_modules",
    "format": "prettier --check . --ignore-path ../../.gitignore",
@@ -26,10 +27,14 @@
    "migration:mysql:drop": "pnpm with-env drizzle-kit drop --config ./configs/mysql.config.ts",
    "migration:mysql:generate": "pnpm with-env drizzle-kit generate --config ./configs/mysql.config.ts",
    "migration:mysql:run": "pnpm with-env drizzle-kit migrate --config ./configs/mysql.config.ts && pnpm run seed && pnpm run migration:custom",
+    "migration:postgresql:drop": "pnpm with-env drizzle-kit drop --config ./configs/postgresql.config.ts",
+    "migration:postgresql:generate": "pnpm with-env drizzle-kit generate --config ./configs/postgresql.config.ts",
+    "migration:postgresql:run": "pnpm with-env drizzle-kit migrate --config ./configs/postgresql.config.ts && pnpm run seed  && pnpm run migration:custom",
    "migration:sqlite:drop": "pnpm with-env drizzle-kit drop --config ./configs/sqlite.config.ts",
    "migration:sqlite:generate": "pnpm with-env drizzle-kit generate --config ./configs/sqlite.config.ts",
    "migration:sqlite:run": "pnpm with-env drizzle-kit migrate --config ./configs/sqlite.config.ts && pnpm run seed && pnpm run migration:custom",
    "push:mysql": "pnpm with-env drizzle-kit push --config ./configs/mysql.config.ts",
+    "push:postgresql": "pnpm with-env drizzle-kit push --config ./configs/postgresql.config.ts",
    "push:sqlite": "pnpm with-env drizzle-kit push --config ./configs/sqlite.config.ts",
    "seed": "pnpm with-env tsx ./migrations/run-seed.ts",
    "studio": "pnpm with-env drizzle-kit studio --config ./configs/sqlite.config.ts",
@@ -44,15 +49,17 @@
    "@homarr/definitions": "workspace:^0.1.0",
    "@homarr/log": "workspace:^0.1.0",
    "@homarr/server-settings": "workspace:^0.1.0",
-    "@mantine/core": "^8.2.4",
+    "@mantine/core": "^8.2.8",
    "@paralleldrive/cuid2": "^2.2.2",
    "@testcontainers/mysql": "^11.5.1",
+    "@testcontainers/postgresql": "^11.5.1",
    "better-sqlite3": "^12.2.0",
-    "dotenv": "^17.2.1",
+    "dotenv": "^17.2.2",
    "drizzle-kit": "^0.31.4",
-    "drizzle-orm": "^0.44.4",
-    "drizzle-zod": "^0.8.2",
-    "mysql2": "3.14.3",
+    "drizzle-orm": "^0.44.5",
+    "drizzle-zod": "^0.8.3",
+    "mysql2": "3.14.4",
+    "pg": "^8.16.3",
    "superjson": "2.2.2"
  },
  "devDependencies": {
@@ -60,9 +67,10 @@
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/better-sqlite3": "7.6.13",
+    "@types/pg": "^8.15.5",
    "dotenv-cli": "^10.0.0",
    "esbuild": "^0.25.9",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "prettier": "^3.6.2",
    "tsx": "4.20.4",
    "typescript": "^5.9.2"
@@ -1,11 +1,20 @@
 import type { InferSelectModel } from "drizzle-orm";

+import { env } from "../env";
 import * as mysqlSchema from "./mysql";
+import * as pgSchema from "./postgresql";
 import * as sqliteSchema from "./sqlite";

+export type PostgreSqlSchema = typeof pgSchema;
+export type MySqlSchema = typeof mysqlSchema;
 type Schema = typeof sqliteSchema;

-const schema = process.env.DB_DRIVER === "mysql2" ? (mysqlSchema as unknown as Schema) : sqliteSchema;
+const schema =
+  env.DB_DRIVER === "mysql2"
+    ? (mysqlSchema as unknown as Schema)
+    : env.DB_DRIVER === "node-postgres"
+      ? (pgSchema as unknown as Schema)
+      : sqliteSchema;

 // Sadly we can't use export * from here as we have multiple possible exports
 export const {
@@ -208,7 +208,7 @@ export const integrations = mysqlTable(
 export const integrationSecrets = mysqlTable(
  "integrationSecret",
  {
-    kind: varchar({ length: 16 }).$type<IntegrationSecretKind>().notNull(),
+    kind: varchar({ length: 64 }).$type<IntegrationSecretKind>().notNull(),
    value: text().$type<`${string}.${string}`>().notNull(),
    updatedAt: timestamp()
      .$onUpdateFn(() => new Date())
@@ -528,6 +528,7 @@ export const userRelations = relations(users, ({ one, many }) => ({
  groups: many(groupMembers),
  ownedGroups: many(groups),
  invites: many(invites),
+  medias: many(medias),
  defaultSearchEngine: one(searchEngines, {
    fields: [users.defaultSearchEngineId],
    references: [searchEngines.id],
@@ -0,0 +1,775 @@
+import type { AdapterAccount } from "@auth/core/adapters";
+import type { MantineSize } from "@mantine/core";
+import type { DayOfWeek } from "@mantine/dates";
+import { relations } from "drizzle-orm";
+import type { AnyPgColumn } from "drizzle-orm/pg-core";
+import {
+  boolean,
+  customType,
+  index,
+  integer,
+  pgTable,
+  primaryKey,
+  smallint,
+  text,
+  timestamp,
+  varchar,
+} from "drizzle-orm/pg-core";
+
+import {
+  backgroundImageAttachments,
+  backgroundImageRepeats,
+  backgroundImageSizes,
+  emptySuperJSON,
+} from "@homarr/definitions";
+import type {
+  BackgroundImageAttachment,
+  BackgroundImageRepeat,
+  BackgroundImageSize,
+  BoardPermission,
+  ColorScheme,
+  GroupPermissionKey,
+  IntegrationKind,
+  IntegrationPermission,
+  IntegrationSecretKind,
+  OnboardingStep,
+  SearchEngineType,
+  SectionKind,
+  SupportedAuthProvider,
+  WidgetKind,
+} from "@homarr/definitions";
+
+const customBlob = customType<{ data: Buffer }>({
+  dataType() {
+    return "bytea";
+  },
+});
+
+export const apiKeys = pgTable("apiKey", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  apiKey: text().notNull(),
+  salt: text().notNull(),
+  userId: varchar({ length: 64 })
+    .notNull()
+    .references((): AnyPgColumn => users.id, {
+      onDelete: "cascade",
+    }),
+});
+
+export const users = pgTable("user", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: text(),
+  email: text(),
+  emailVerified: timestamp(),
+  image: text(),
+  password: text(),
+  salt: text(),
+  provider: varchar({ length: 64 }).$type<SupportedAuthProvider>().default("credentials").notNull(),
+  homeBoardId: varchar({ length: 64 }).references((): AnyPgColumn => boards.id, {
+    onDelete: "set null",
+  }),
+  mobileHomeBoardId: varchar({ length: 64 }).references((): AnyPgColumn => boards.id, {
+    onDelete: "set null",
+  }),
+  defaultSearchEngineId: varchar({ length: 64 }).references(() => searchEngines.id, {
+    onDelete: "set null",
+  }),
+  openSearchInNewTab: boolean().default(false).notNull(),
+  colorScheme: varchar({ length: 5 }).$type<ColorScheme>().default("dark").notNull(),
+  firstDayOfWeek: smallint().$type<DayOfWeek>().default(1).notNull(), // Defaults to Monday
+  pingIconsEnabled: boolean().default(false).notNull(),
+});
+
+export const accounts = pgTable(
+  "account",
+  {
+    userId: varchar({ length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "cascade" }),
+    type: text().$type<AdapterAccount["type"]>().notNull(),
+    provider: varchar({ length: 64 }).notNull(),
+    providerAccountId: varchar({ length: 64 }).notNull(),
+    refresh_token: text(),
+    access_token: text(),
+    expires_at: integer(),
+    token_type: text(),
+    scope: text(),
+    id_token: text(),
+    session_state: text(),
+  },
+  (account) => ({
+    compoundKey: primaryKey({
+      columns: [account.provider, account.providerAccountId],
+    }),
+    userIdIdx: index("userId_idx").on(account.userId),
+  }),
+);
+
+export const sessions = pgTable(
+  "session",
+  {
+    sessionToken: varchar({ length: 512 }).notNull().primaryKey(),
+    userId: varchar({ length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "cascade" }),
+    expires: timestamp().notNull(),
+  },
+  (session) => ({
+    userIdIdx: index("user_id_idx").on(session.userId),
+  }),
+);
+
+export const verificationTokens = pgTable(
+  "verificationToken",
+  {
+    identifier: varchar({ length: 64 }).notNull(),
+    token: varchar({ length: 512 }).notNull(),
+    expires: timestamp().notNull(),
+  },
+  (verificationToken) => ({
+    compoundKey: primaryKey({
+      columns: [verificationToken.identifier, verificationToken.token],
+    }),
+  }),
+);
+
+export const groupMembers = pgTable(
+  "groupMember",
+  {
+    groupId: varchar({ length: 64 })
+      .notNull()
+      .references(() => groups.id, { onDelete: "cascade" }),
+    userId: varchar({ length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "cascade" }),
+  },
+  (groupMember) => ({
+    compoundKey: primaryKey({
+      columns: [groupMember.groupId, groupMember.userId],
+    }),
+  }),
+);
+
+export const groups = pgTable("group", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: varchar({ length: 64 }).unique().notNull(),
+  ownerId: varchar({ length: 64 }).references(() => users.id, {
+    onDelete: "set null",
+  }),
+  homeBoardId: varchar({ length: 64 }).references(() => boards.id, {
+    onDelete: "set null",
+  }),
+  mobileHomeBoardId: varchar({ length: 64 }).references(() => boards.id, {
+    onDelete: "set null",
+  }),
+  position: smallint().notNull(),
+});
+
+export const groupPermissions = pgTable("groupPermission", {
+  groupId: varchar({ length: 64 })
+    .notNull()
+    .references(() => groups.id, { onDelete: "cascade" }),
+  permission: text().$type<GroupPermissionKey>().notNull(),
+});
+
+export const invites = pgTable("invite", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  token: varchar({ length: 512 }).notNull().unique(),
+  expirationDate: timestamp().notNull(),
+  creatorId: varchar({ length: 64 })
+    .notNull()
+    .references(() => users.id, { onDelete: "cascade" }),
+});
+
+export const medias = pgTable("media", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: varchar({ length: 512 }).notNull(),
+  content: customBlob().notNull(),
+  contentType: text().notNull(),
+  size: integer().notNull(),
+  createdAt: timestamp({ mode: "date" }).notNull().defaultNow(),
+  creatorId: varchar({ length: 64 }).references(() => users.id, { onDelete: "set null" }),
+});
+
+export const integrations = pgTable(
+  "integration",
+  {
+    id: varchar({ length: 64 }).notNull().primaryKey(),
+    name: text().notNull(),
+    url: text().notNull(),
+    kind: varchar({ length: 128 }).$type<IntegrationKind>().notNull(),
+  },
+  (integrations) => ({
+    kindIdx: index("integration__kind_idx").on(integrations.kind),
+  }),
+);
+
+export const integrationSecrets = pgTable(
+  "integrationSecret",
+  {
+    kind: varchar({ length: 64 }).$type<IntegrationSecretKind>().notNull(),
+    value: text().$type<`${string}.${string}`>().notNull(),
+    updatedAt: timestamp()
+      .$onUpdateFn(() => new Date())
+      .notNull(),
+    integrationId: varchar({ length: 64 })
+      .notNull()
+      .references(() => integrations.id, { onDelete: "cascade" }),
+  },
+  (integrationSecret) => ({
+    compoundKey: primaryKey({
+      columns: [integrationSecret.integrationId, integrationSecret.kind],
+    }),
+    kindIdx: index("integration_secret__kind_idx").on(integrationSecret.kind),
+    updatedAtIdx: index("integration_secret__updated_at_idx").on(integrationSecret.updatedAt),
+  }),
+);
+
+export const integrationUserPermissions = pgTable(
+  "integrationUserPermission",
+  {
+    integrationId: varchar({ length: 64 })
+      .notNull()
+      .references(() => integrations.id, { onDelete: "cascade" }),
+    userId: varchar({ length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "cascade" }),
+    permission: varchar({ length: 128 }).$type<IntegrationPermission>().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.integrationId, table.userId, table.permission],
+    }),
+  }),
+);
+
+export const integrationGroupPermissions = pgTable(
+  "integrationGroupPermissions",
+  {
+    integrationId: varchar({ length: 64 })
+      .notNull()
+      .references(() => integrations.id, { onDelete: "cascade" }),
+    groupId: varchar({ length: 64 })
+      .notNull()
+      .references(() => groups.id, { onDelete: "cascade" }),
+    permission: varchar({ length: 128 }).$type<IntegrationPermission>().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.integrationId, table.groupId, table.permission],
+      name: "integration_group_permission__pk",
+    }),
+  }),
+);
+
+export const boards = pgTable("board", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: varchar({ length: 256 }).unique().notNull(),
+  isPublic: boolean().default(false).notNull(),
+  creatorId: varchar({ length: 64 }).references(() => users.id, {
+    onDelete: "set null",
+  }),
+  pageTitle: text(),
+  metaTitle: text(),
+  logoImageUrl: text(),
+  faviconImageUrl: text(),
+  backgroundImageUrl: text(),
+  backgroundImageAttachment: text()
+    .$type<BackgroundImageAttachment>()
+    .default(backgroundImageAttachments.defaultValue)
+    .notNull(),
+  backgroundImageRepeat: text().$type<BackgroundImageRepeat>().default(backgroundImageRepeats.defaultValue).notNull(),
+  backgroundImageSize: text().$type<BackgroundImageSize>().default(backgroundImageSizes.defaultValue).notNull(),
+  primaryColor: text().default("#fa5252").notNull(),
+  secondaryColor: text().default("#fd7e14").notNull(),
+  opacity: integer().default(100).notNull(),
+  customCss: text(),
+  iconColor: text(),
+  itemRadius: text().$type<MantineSize>().default("lg").notNull(),
+  disableStatus: boolean().default(false).notNull(),
+});
+
+export const boardUserPermissions = pgTable(
+  "boardUserPermission",
+  {
+    boardId: varchar({ length: 64 })
+      .notNull()
+      .references(() => boards.id, { onDelete: "cascade" }),
+    userId: varchar({ length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "cascade" }),
+    permission: varchar({ length: 128 }).$type<BoardPermission>().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.boardId, table.userId, table.permission],
+    }),
+  }),
+);
+
+export const boardGroupPermissions = pgTable(
+  "boardGroupPermission",
+  {
+    boardId: varchar({ length: 64 })
+      .notNull()
+      .references(() => boards.id, { onDelete: "cascade" }),
+    groupId: varchar({ length: 64 })
+      .notNull()
+      .references(() => groups.id, { onDelete: "cascade" }),
+    permission: varchar({ length: 128 }).$type<BoardPermission>().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.boardId, table.groupId, table.permission],
+    }),
+  }),
+);
+
+export const layouts = pgTable("layout", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: varchar({ length: 32 }).notNull(),
+  boardId: varchar({ length: 64 })
+    .notNull()
+    .references(() => boards.id, { onDelete: "cascade" }),
+  columnCount: smallint().notNull(),
+  breakpoint: smallint().notNull().default(0),
+});
+
+export const itemLayouts = pgTable(
+  "item_layout",
+  {
+    itemId: varchar({ length: 64 })
+      .notNull()
+      .references(() => items.id, { onDelete: "cascade" }),
+    sectionId: varchar({ length: 64 })
+      .notNull()
+      .references(() => sections.id, { onDelete: "cascade" }),
+    layoutId: varchar({ length: 64 })
+      .notNull()
+      .references(() => layouts.id, { onDelete: "cascade" }),
+    xOffset: integer().notNull(),
+    yOffset: integer().notNull(),
+    width: integer().notNull(),
+    height: integer().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.itemId, table.sectionId, table.layoutId],
+    }),
+  }),
+);
+
+export const sectionLayouts = pgTable(
+  "section_layout",
+  {
+    sectionId: varchar({ length: 64 })
+      .notNull()
+      .references(() => sections.id, { onDelete: "cascade" }),
+    layoutId: varchar({ length: 64 })
+      .notNull()
+      .references(() => layouts.id, { onDelete: "cascade" }),
+    parentSectionId: varchar({ length: 64 }).references((): AnyPgColumn => sections.id, {
+      onDelete: "cascade",
+    }),
+    xOffset: integer().notNull(),
+    yOffset: integer().notNull(),
+    width: integer().notNull(),
+    height: integer().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.sectionId, table.layoutId],
+    }),
+  }),
+);
+
+export const sections = pgTable("section", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  boardId: varchar({ length: 64 })
+    .notNull()
+    .references(() => boards.id, { onDelete: "cascade" }),
+  kind: text().$type<SectionKind>().notNull(),
+  xOffset: integer(),
+  yOffset: integer(),
+  name: text(),
+  options: text().default(emptySuperJSON),
+});
+
+export const sectionCollapseStates = pgTable(
+  "section_collapse_state",
+  {
+    userId: varchar({ length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "cascade" }),
+    sectionId: varchar({ length: 64 })
+      .notNull()
+      .references(() => sections.id, { onDelete: "cascade" }),
+    collapsed: boolean().default(false).notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.userId, table.sectionId],
+    }),
+  }),
+);
+
+export const items = pgTable("item", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  boardId: varchar({ length: 64 })
+    .notNull()
+    .references(() => boards.id, { onDelete: "cascade" }),
+  kind: text().$type<WidgetKind>().notNull(),
+  options: text().default(emptySuperJSON).notNull(),
+  advancedOptions: text().default(emptySuperJSON).notNull(),
+});
+
+export const apps = pgTable("app", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: text().notNull(),
+  description: text(),
+  iconUrl: text().notNull(),
+  href: text(),
+  pingUrl: text(),
+});
+
+export const integrationItems = pgTable(
+  "integration_item",
+  {
+    itemId: varchar({ length: 64 })
+      .notNull()
+      .references(() => items.id, { onDelete: "cascade" }),
+    integrationId: varchar({ length: 64 })
+      .notNull()
+      .references(() => integrations.id, { onDelete: "cascade" }),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.itemId, table.integrationId],
+    }),
+  }),
+);
+
+export const icons = pgTable("icon", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  name: varchar({ length: 250 }).notNull(),
+  url: text().notNull(),
+  checksum: text().notNull(),
+  iconRepositoryId: varchar({ length: 64 })
+    .notNull()
+    .references(() => iconRepositories.id, { onDelete: "cascade" }),
+});
+
+export const iconRepositories = pgTable("iconRepository", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  slug: varchar({ length: 150 }).notNull(),
+});
+
+export const serverSettings = pgTable("serverSetting", {
+  settingKey: varchar({ length: 64 }).notNull().unique().primaryKey(),
+  value: text().default(emptySuperJSON).notNull(),
+});
+
+export const apiKeyRelations = relations(apiKeys, ({ one }) => ({
+  user: one(users, {
+    fields: [apiKeys.userId],
+    references: [users.id],
+  }),
+}));
+
+export const searchEngines = pgTable("search_engine", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  iconUrl: text().notNull(),
+  name: varchar({ length: 64 }).notNull(),
+  short: varchar({ length: 8 }).unique().notNull(),
+  description: text(),
+  urlTemplate: text(),
+  type: varchar({ length: 64 }).$type<SearchEngineType>().notNull().default("generic"),
+  integrationId: varchar({ length: 64 }).references(() => integrations.id, { onDelete: "cascade" }),
+});
+
+export const onboarding = pgTable("onboarding", {
+  id: varchar({ length: 64 }).notNull().primaryKey(),
+  step: varchar({ length: 64 }).$type<OnboardingStep>().notNull(),
+  previousStep: varchar({ length: 64 }).$type<OnboardingStep>(),
+});
+
+export const trustedCertificateHostnames = pgTable(
+  "trusted_certificate_hostname",
+  {
+    hostname: varchar({ length: 256 }).notNull(),
+    thumbprint: varchar({ length: 128 }).notNull(),
+    certificate: text().notNull(),
+  },
+  (table) => ({
+    compoundKey: primaryKey({
+      columns: [table.hostname, table.thumbprint],
+    }),
+  }),
+);
+
+export const cronJobConfigurations = pgTable("cron_job_configuration", {
+  name: varchar({ length: 256 }).notNull().primaryKey(),
+  cronExpression: varchar({ length: 32 }).notNull(),
+  isEnabled: boolean().default(true).notNull(),
+});
+
+export const accountRelations = relations(accounts, ({ one }) => ({
+  user: one(users, {
+    fields: [accounts.userId],
+    references: [users.id],
+  }),
+}));
+
+export const userRelations = relations(users, ({ one, many }) => ({
+  accounts: many(accounts),
+  boards: many(boards),
+  boardPermissions: many(boardUserPermissions),
+  groups: many(groupMembers),
+  ownedGroups: many(groups),
+  invites: many(invites),
+  medias: many(medias),
+  defaultSearchEngine: one(searchEngines, {
+    fields: [users.defaultSearchEngineId],
+    references: [searchEngines.id],
+  }),
+}));
+
+export const mediaRelations = relations(medias, ({ one }) => ({
+  creator: one(users, {
+    fields: [medias.creatorId],
+    references: [users.id],
+  }),
+}));
+
+export const iconRelations = relations(icons, ({ one }) => ({
+  repository: one(iconRepositories, {
+    fields: [icons.iconRepositoryId],
+    references: [iconRepositories.id],
+  }),
+}));
+
+export const iconRepositoryRelations = relations(iconRepositories, ({ many }) => ({
+  icons: many(icons),
+}));
+
+export const inviteRelations = relations(invites, ({ one }) => ({
+  creator: one(users, {
+    fields: [invites.creatorId],
+    references: [users.id],
+  }),
+}));
+
+export const sessionRelations = relations(sessions, ({ one }) => ({
+  user: one(users, {
+    fields: [sessions.userId],
+    references: [users.id],
+  }),
+}));
+
+export const groupMemberRelations = relations(groupMembers, ({ one }) => ({
+  group: one(groups, {
+    fields: [groupMembers.groupId],
+    references: [groups.id],
+  }),
+  user: one(users, {
+    fields: [groupMembers.userId],
+    references: [users.id],
+  }),
+}));
+
+export const groupRelations = relations(groups, ({ one, many }) => ({
+  permissions: many(groupPermissions),
+  boardPermissions: many(boardGroupPermissions),
+  members: many(groupMembers),
+  owner: one(users, {
+    fields: [groups.ownerId],
+    references: [users.id],
+  }),
+  homeBoard: one(boards, {
+    fields: [groups.homeBoardId],
+    references: [boards.id],
+    relationName: "groupRelations__board__homeBoardId",
+  }),
+  mobileHomeBoard: one(boards, {
+    fields: [groups.mobileHomeBoardId],
+    references: [boards.id],
+    relationName: "groupRelations__board__mobileHomeBoardId",
+  }),
+}));
+
+export const groupPermissionRelations = relations(groupPermissions, ({ one }) => ({
+  group: one(groups, {
+    fields: [groupPermissions.groupId],
+    references: [groups.id],
+  }),
+}));
+
+export const boardUserPermissionRelations = relations(boardUserPermissions, ({ one }) => ({
+  user: one(users, {
+    fields: [boardUserPermissions.userId],
+    references: [users.id],
+  }),
+  board: one(boards, {
+    fields: [boardUserPermissions.boardId],
+    references: [boards.id],
+  }),
+}));
+
+export const boardGroupPermissionRelations = relations(boardGroupPermissions, ({ one }) => ({
+  group: one(groups, {
+    fields: [boardGroupPermissions.groupId],
+    references: [groups.id],
+  }),
+  board: one(boards, {
+    fields: [boardGroupPermissions.boardId],
+    references: [boards.id],
+  }),
+}));
+
+export const integrationRelations = relations(integrations, ({ many }) => ({
+  secrets: many(integrationSecrets),
+  items: many(integrationItems),
+  userPermissions: many(integrationUserPermissions),
+  groupPermissions: many(integrationGroupPermissions),
+}));
+
+export const integrationUserPermissionRelations = relations(integrationUserPermissions, ({ one }) => ({
+  user: one(users, {
+    fields: [integrationUserPermissions.userId],
+    references: [users.id],
+  }),
+  integration: one(integrations, {
+    fields: [integrationUserPermissions.integrationId],
+    references: [integrations.id],
+  }),
+}));
+
+export const integrationGroupPermissionRelations = relations(integrationGroupPermissions, ({ one }) => ({
+  group: one(groups, {
+    fields: [integrationGroupPermissions.groupId],
+    references: [groups.id],
+  }),
+  integration: one(integrations, {
+    fields: [integrationGroupPermissions.integrationId],
+    references: [integrations.id],
+  }),
+}));
+
+export const integrationSecretRelations = relations(integrationSecrets, ({ one }) => ({
+  integration: one(integrations, {
+    fields: [integrationSecrets.integrationId],
+    references: [integrations.id],
+  }),
+}));
+
+export const boardRelations = relations(boards, ({ many, one }) => ({
+  sections: many(sections),
+  items: many(items),
+  creator: one(users, {
+    fields: [boards.creatorId],
+    references: [users.id],
+  }),
+  userPermissions: many(boardUserPermissions),
+  groupPermissions: many(boardGroupPermissions),
+  layouts: many(layouts),
+  groupHomes: many(groups, {
+    relationName: "groupRelations__board__homeBoardId",
+  }),
+  mobileHomeBoard: many(groups, {
+    relationName: "groupRelations__board__mobileHomeBoardId",
+  }),
+}));
+
+export const sectionRelations = relations(sections, ({ many, one }) => ({
+  board: one(boards, {
+    fields: [sections.boardId],
+    references: [boards.id],
+  }),
+  collapseStates: many(sectionCollapseStates),
+  layouts: many(sectionLayouts, {
+    relationName: "sectionLayoutRelations__section__sectionId",
+  }),
+  children: many(sectionLayouts, {
+    relationName: "sectionLayoutRelations__section__parentSectionId",
+  }),
+}));
+
+export const sectionCollapseStateRelations = relations(sectionCollapseStates, ({ one }) => ({
+  user: one(users, {
+    fields: [sectionCollapseStates.userId],
+    references: [users.id],
+  }),
+  section: one(sections, {
+    fields: [sectionCollapseStates.sectionId],
+    references: [sections.id],
+  }),
+}));
+
+export const itemRelations = relations(items, ({ one, many }) => ({
+  integrations: many(integrationItems),
+  layouts: many(itemLayouts),
+  board: one(boards, {
+    fields: [items.boardId],
+    references: [boards.id],
+  }),
+}));
+
+export const integrationItemRelations = relations(integrationItems, ({ one }) => ({
+  integration: one(integrations, {
+    fields: [integrationItems.integrationId],
+    references: [integrations.id],
+  }),
+  item: one(items, {
+    fields: [integrationItems.itemId],
+    references: [items.id],
+  }),
+}));
+
+export const searchEngineRelations = relations(searchEngines, ({ one, many }) => ({
+  integration: one(integrations, {
+    fields: [searchEngines.integrationId],
+    references: [integrations.id],
+  }),
+  usersWithDefault: many(users),
+}));
+
+export const itemLayoutRelations = relations(itemLayouts, ({ one }) => ({
+  item: one(items, {
+    fields: [itemLayouts.itemId],
+    references: [items.id],
+  }),
+  section: one(sections, {
+    fields: [itemLayouts.sectionId],
+    references: [sections.id],
+  }),
+  layout: one(layouts, {
+    fields: [itemLayouts.layoutId],
+    references: [layouts.id],
+  }),
+}));
+
+export const sectionLayoutRelations = relations(sectionLayouts, ({ one }) => ({
+  section: one(sections, {
+    fields: [sectionLayouts.sectionId],
+    references: [sections.id],
+    relationName: "sectionLayoutRelations__section__sectionId",
+  }),
+  layout: one(layouts, {
+    fields: [sectionLayouts.layoutId],
+    references: [layouts.id],
+  }),
+  parentSection: one(sections, {
+    fields: [sectionLayouts.parentSectionId],
+    references: [sections.id],
+    relationName: "sectionLayoutRelations__section__parentSectionId",
+  }),
+}));
+
+export const layoutRelations = relations(layouts, ({ one, many }) => ({
+  items: many(itemLayouts),
+  sections: many(sectionLayouts),
+  board: one(boards, {
+    fields: [layouts.boardId],
+    references: [boards.id],
+  }),
+}));
@@ -0,0 +1,46 @@
+import path from "path";
+import { PostgreSqlContainer } from "@testcontainers/postgresql";
+import { drizzle } from "drizzle-orm/node-postgres";
+import { migrate } from "drizzle-orm/node-postgres/migrator";
+import { Pool } from "pg";
+import { describe, test } from "vitest";
+
+import * as pgSchema from "../schema/postgresql";
+
+describe("PostgreSql Migration", () => {
+  test("should add all tables and keys specified in migration files", async () => {
+    const container = new PostgreSqlContainer("postgres:latest");
+    const postgreSqlContainer = await container.start();
+
+    const pool = new Pool({
+      user: postgreSqlContainer.getUsername(),
+      database: postgreSqlContainer.getDatabase(),
+      password: postgreSqlContainer.getPassword(),
+      port: postgreSqlContainer.getPort(),
+      host: postgreSqlContainer.getHost(),
+      keepAlive: true,
+      max: 0,
+      idleTimeoutMillis: 60000,
+      allowExitOnIdle: false,
+    });
+
+    const database = drizzle({
+      schema: pgSchema,
+      casing: "snake_case",
+      client: pool,
+    });
+
+    // Run migrations and check if it works
+    await migrate(database, {
+      migrationsFolder: path.join(__dirname, "..", "migrations", "postgresql"),
+    });
+
+    // Check if users table exists
+    await database.query.users.findMany();
+
+    // Close the pool to release resources
+    await pool.end();
+    // Stop the container
+    await postgreSqlContainer.stop();
+  }, 40_000);
+});
@@ -1,15 +1,17 @@
 /* eslint-disable @typescript-eslint/no-non-null-assertion */
 import type { Column, InferSelectModel } from "drizzle-orm";
 import type { ForeignKey as MysqlForeignKey, MySqlTableWithColumns } from "drizzle-orm/mysql-core";
+import type { PgTableWithColumns, ForeignKey as PostgresqlForeignKey } from "drizzle-orm/pg-core";
 import type { ForeignKey as SqliteForeignKey, SQLiteTableWithColumns } from "drizzle-orm/sqlite-core";
 import { expect, expectTypeOf, test } from "vitest";

 import { objectEntries } from "@homarr/common";

 import * as mysqlSchema from "../schema/mysql";
+import * as postgresqlSchema from "../schema/postgresql";
 import * as sqliteSchema from "../schema/sqlite";

-// We need the following two types as there is currently no support for Buffer in mysql and
+// We need the following three types as there is currently no support for Buffer in mysql & pg and
 // so we use a custom type which results in the config beeing different
 type FixedMysqlConfig = {
  [key in keyof MysqlConfig]: {
@@ -22,6 +24,22 @@ type FixedMysqlConfig = {
  };
 };

+type FixedPostgresqlConfig = {
+  [key in keyof PostgreisqlConfig]: {
+    [column in keyof PostgreisqlConfig[key]]: {
+      [property in Exclude<
+        keyof PostgreisqlConfig[key][column],
+        "dataType" | "data"
+      >]: PostgreisqlConfig[key][column][property];
+    } & {
+      dataType: PostgreisqlConfig[key][column]["data"] extends Buffer
+        ? "buffer"
+        : PostgreisqlConfig[key][column]["dataType"];
+      data: PostgreisqlConfig[key][column]["data"] extends Buffer ? Buffer : PostgreisqlConfig[key][column]["data"];
+    };
+  };
+};
+
 type FixedSqliteConfig = {
  [key in keyof SqliteConfig]: {
    [column in keyof SqliteConfig[key]]: {
@@ -117,6 +135,91 @@ test("schemas should match", () => {
  });
 });

+test("schemas should match for postgresql", () => {
+  expectTypeOf<SqliteTables>().toEqualTypeOf<PostgresqlTables>();
+  expectTypeOf<PostgresqlTables>().toEqualTypeOf<SqliteTables>();
+  expectTypeOf<FixedSqliteConfig>().toEqualTypeOf<FixedPostgresqlConfig>();
+  expectTypeOf<FixedPostgresqlConfig>().toEqualTypeOf<FixedSqliteConfig>();
+
+  objectEntries(sqliteSchema).forEach(([tableName, sqliteTable]) => {
+    // keys of sqliteSchema and postgresqlSchema are the same, so we can safely use tableName as key
+    // skipcq: JS-E1007
+    const postgresqlTable = postgresqlSchema[tableName];
+    Object.entries(sqliteTable).forEach(([columnName, sqliteColumn]: [string, object]) => {
+      if (!("isUnique" in sqliteColumn)) return;
+      if (!("uniqueName" in sqliteColumn)) return;
+      if (!("primary" in sqliteColumn)) return;
+
+      const postgresqlColumn = postgresqlTable[columnName as keyof typeof postgresqlTable] as object;
+      if (!("isUnique" in postgresqlColumn)) return;
+      if (!("uniqueName" in postgresqlColumn)) return;
+      if (!("primary" in postgresqlColumn)) return;
+
+      expect(
+        sqliteColumn.isUnique,
+        `expect unique of column ${columnName} in table ${tableName} to be the same for both schemas`,
+      ).toEqual(postgresqlColumn.isUnique);
+      expect(
+        sqliteColumn.uniqueName,
+        `expect uniqueName of column ${columnName} in table ${tableName} to be the same for both schemas`,
+      ).toEqual(postgresqlColumn.uniqueName);
+      expect(
+        sqliteColumn.primary,
+        `expect primary of column ${columnName} in table ${tableName} to be the same for both schemas`,
+      ).toEqual(postgresqlColumn.primary);
+    });
+
+    const sqliteForeignKeys = sqliteTable[Symbol.for("drizzle:SQLiteInlineForeignKeys") as keyof typeof sqliteTable] as
+      | SqliteForeignKey[]
+      | undefined;
+    const postgresqlForeignKeys = postgresqlTable[
+      Symbol.for("drizzle:PgInlineForeignKeys") as keyof typeof postgresqlTable
+    ] as PostgresqlForeignKey[] | undefined;
+    if (!sqliteForeignKeys && !postgresqlForeignKeys) return;
+
+    expect(postgresqlForeignKeys, `postgresql foreign key for ${tableName} to be defined`).toBeDefined();
+    expect(sqliteForeignKeys, `sqlite foreign key for ${tableName} to be defined`).toBeDefined();
+
+    expect(
+      sqliteForeignKeys!.length,
+      `expect number of foreign keys in table ${tableName} to be the same for both schemas`,
+    ).toEqual(postgresqlForeignKeys?.length);
+
+    sqliteForeignKeys?.forEach((sqliteForeignKey) => {
+      sqliteForeignKey.getName();
+      const postgresqlForeignKey = postgresqlForeignKeys!.find((key) => key.getName() === sqliteForeignKey.getName());
+      expect(
+        postgresqlForeignKey,
+        `expect foreign key ${sqliteForeignKey.getName()} to be defined in postgresql schema`,
+      ).toBeDefined();
+
+      // In PostgreSql, onDelete is "no action" by default, so it is treated as undefined to match Sqlite.
+      expect(
+        sqliteForeignKey.onDelete,
+        `expect foreign key (${sqliteForeignKey.getName()}) onDelete to be the same for both schemas`,
+      ).toEqual(postgresqlForeignKey!.onDelete === "no action" ? undefined : postgresqlForeignKey!.onDelete);
+
+      // In PostgreSql, onUpdate is "no action" by default, so it is treated as undefined to match Sqlite.
+      expect(
+        sqliteForeignKey.onUpdate,
+        `expect foreign key (${sqliteForeignKey.getName()}) onUpdate to be the same for both schemas`,
+      ).toEqual(postgresqlForeignKey!.onUpdate === "no action" ? undefined : postgresqlForeignKey!.onUpdate);
+
+      sqliteForeignKey.reference().foreignColumns.forEach((column) => {
+        expect(
+          postgresqlForeignKey!.reference().foreignColumns.map((column) => column.name),
+          `expect foreign key (${sqliteForeignKey.getName()}) columns to be the same for both schemas`,
+        ).toContainEqual(column.name);
+      });
+
+      expect(
+        Object.keys(sqliteForeignKey.reference().foreignTable),
+        `expect foreign key (${sqliteForeignKey.getName()}) table to be the same for both schemas`,
+      ).toEqual(Object.keys(postgresqlForeignKey!.reference().foreignTable).filter((key) => key !== "enableRLS"));
+    });
+  });
+});
+
 type SqliteTables = {
  // eslint-disable-next-line @typescript-eslint/no-explicit-any
  [K in keyof typeof sqliteSchema]: (typeof sqliteSchema)[K] extends SQLiteTableWithColumns<any>
@@ -130,6 +233,13 @@ type MysqlTables = {
    : never;
 };

+type PostgresqlTables = {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  [K in keyof typeof postgresqlSchema]: (typeof postgresqlSchema)[K] extends PgTableWithColumns<any>
+    ? InferSelectModel<(typeof postgresqlSchema)[K]>
+    : never;
+};
+
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 type InferColumnConfig<T extends Column<any, object>> =
  T extends Column<infer C, object> ? Omit<C, "columnType" | "enumValues" | "driverParam"> : never;
@@ -155,3 +265,14 @@ type MysqlConfig = {
      }
    : never;
 };
+
+type PostgreisqlConfig = {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  [K in keyof typeof postgresqlSchema]: (typeof postgresqlSchema)[K] extends PgTableWithColumns<any>
+    ? {
+        [C in keyof (typeof postgresqlSchema)[K]["_"]["config"]["columns"]]: InferColumnConfig<
+          (typeof postgresqlSchema)[K]["_"]["config"]["columns"][C]
+        >;
+      }
+    : never;
+};
@@ -1,11 +1,10 @@
+import { isMysql, isPostgresql } from "./collection";
 import type { HomarrDatabase, HomarrDatabaseMysql } from "./driver";
-import { env } from "./env";
-import * as mysqlSchema from "./schema/mysql";
-
-type MysqlSchema = typeof mysqlSchema;
+import type { MySqlSchema } from "./schema";
+import * as schema from "./schema";

 interface HandleTransactionInput {
-  handleAsync: (db: HomarrDatabaseMysql, schema: MysqlSchema) => Promise<void>;
+  handleAsync: (db: HomarrDatabaseMysql, schema: MySqlSchema) => Promise<void>;
  handleSync: (db: HomarrDatabase) => void;
 }

@@ -15,10 +14,10 @@ interface HandleTransactionInput {
 * But it can also generally be used when dealing with different database drivers.
 */
 export const handleDiffrentDbDriverOperationsAsync = async (db: HomarrDatabase, input: HandleTransactionInput) => {
-  if (env.DB_DRIVER !== "mysql2") {
+  if (isMysql() || isPostgresql()) {
+    // Schema type is always the correct one based on env variables
+    await input.handleAsync(db as unknown as HomarrDatabaseMysql, schema as unknown as MySqlSchema);
+  } else {
    input.handleSync(db);
-    return;
  }
-
-  await input.handleAsync(db as unknown as HomarrDatabaseMysql, mysqlSchema);
 };
@@ -25,13 +25,13 @@
  "dependencies": {
    "@homarr/common": "workspace:^0.1.0",
    "fast-xml-parser": "^5.2.5",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "tsx": "4.20.4",
    "typescript": "^5.9.2"
  }
@@ -4,16 +4,19 @@ import type { AtLeastOneOf } from "@homarr/common/types";
 import { createDocumentationLink } from "./docs";

 export const integrationSecretKindObject = {
-  apiKey: { isPublic: false },
-  username: { isPublic: true },
-  password: { isPublic: false },
-  tokenId: { isPublic: true },
-  realm: { isPublic: true },
-  personalAccessToken: { isPublic: false },
-  topic: { isPublic: true },
-  opnsenseApiKey: { isPublic: false },
-  opnsenseApiSecret: { isPublic: false },
-} satisfies Record<string, { isPublic: boolean }>;
+  apiKey: { isPublic: false, multiline: false },
+  username: { isPublic: true, multiline: false },
+  password: { isPublic: false, multiline: false },
+  tokenId: { isPublic: true, multiline: false },
+  realm: { isPublic: true, multiline: false },
+  personalAccessToken: { isPublic: false, multiline: false },
+  topic: { isPublic: true, multiline: false },
+  opnsenseApiKey: { isPublic: false, multiline: false },
+  opnsenseApiSecret: { isPublic: false, multiline: false },
+  privateKey: { isPublic: false, multiline: true },
+  githubAppId: { isPublic: true, multiline: false },
+  githubInstallationId: { isPublic: true, multiline: false },
+} satisfies Record<string, { isPublic: boolean; multiline: boolean }>;

 export const integrationSecretKinds = objectKeys(integrationSecretKindObject);

@@ -211,7 +214,7 @@ export const integrationDefs = {
  },
  github: {
    name: "Github",
-    secretKinds: [[], ["personalAccessToken"]],
+    secretKinds: [[], ["personalAccessToken"], ["githubAppId", "githubInstallationId", "privateKey"]],
    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/github.svg",
    category: ["releasesProvider"],
    defaultUrl: "https://api.github.com",
@@ -259,7 +262,7 @@ export const integrationDefs = {
  },
  gitHubContainerRegistry: {
    name: "GitHub Container Registry",
-    secretKinds: [[], ["personalAccessToken"]],
+    secretKinds: [[], ["personalAccessToken"], ["githubAppId", "githubInstallationId", "privateKey"]],
    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/github.svg",
    category: ["releasesProvider"],
    defaultUrl: "https://api.github.com",
@@ -280,6 +283,13 @@ export const integrationDefs = {
    category: ["notifications"],
    documentationUrl: createDocumentationLink("/docs/integrations/ntfy"),
  },
+  truenas: {
+    name: "TrueNAS",
+    secretKinds: [["username", "password"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/truenas.svg",
+    category: ["healthMonitoring"],
+    documentationUrl: createDocumentationLink("/docs/integrations/truenas"),
+  },
  // This integration only returns mock data, it is used during development (but can also be used in production by directly going to the create page)
  mock: {
    name: "Mock",
@@ -32,8 +32,8 @@
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/dockerode": "^3.3.42",
-    "eslint": "^9.33.0",
+    "@types/dockerode": "^3.3.43",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -26,15 +26,15 @@
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/translation": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "@mantine/form": "^8.2.4",
-    "mantine-form-zod-resolver": "^1.2.1",
-    "zod": "^4.0.14"
+    "@mantine/form": "^8.2.8",
+    "mantine-form-zod-resolver": "^1.3.0",
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -29,15 +29,15 @@
    "@homarr/notifications": "workspace:^0.1.0",
    "@homarr/translation": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "@mantine/core": "^8.2.4",
+    "@mantine/core": "^8.2.8",
    "react": "19.1.1",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -97,7 +97,13 @@ export const AppForm = ({
      <Stack>
        <TextInput {...form.getInputProps("name")} withAsterisk label={t("app.field.name.label")} />
        <IconPicker {...form.getInputProps("iconUrl")} />
-        <Textarea {...form.getInputProps("description")} label={t("app.field.description.label")} />
+        <Textarea
+          {...form.getInputProps("description")}
+          label={t("app.field.description.label")}
+          autosize
+          minRows={2}
+          resize="vertical"
+        />
        <TextInput {...form.getInputProps("href")} label={t("app.field.url.label")} />

        <Checkbox
@@ -31,7 +31,7 @@
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -33,7 +33,7 @@
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/bcrypt": "6.0.0",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -25,10 +25,10 @@
  },
  "prettier": "@homarr/prettier-config",
  "dependencies": {
-    "@ctrl/deluge": "^7.1.1",
-    "@ctrl/qbittorrent": "^9.6.0",
-    "@ctrl/transmission": "^7.2.0",
-    "@gitbeaker/rest": "^43.4.0",
+    "@ctrl/deluge": "^7.2.0",
+    "@ctrl/qbittorrent": "^9.7.0",
+    "@ctrl/transmission": "^7.3.0",
+    "@gitbeaker/rest": "^43.5.0",
    "@homarr/certificates": "workspace:^0.1.0",
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
@@ -40,14 +40,15 @@
    "@homarr/translation": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
    "@jellyfin/sdk": "^0.11.0",
+    "@octokit/auth-app": "^8.1.0",
    "maria2": "^0.4.1",
    "node-ical": "^0.20.1",
    "octokit": "^5.0.3",
    "proxmox-api": "1.1.1",
    "tsdav": "^2.1.5",
-    "undici": "7.13.0",
+    "undici": "7.15.0",
    "xml2js": "^0.6.2",
-    "zod": "^4.0.14"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
@@ -55,7 +56,7 @@
    "@homarr/tsconfig": "workspace:^0.1.0",
    "@types/node-unifi": "^2.5.1",
    "@types/xml2js": "^0.4.14",
-    "eslint": "^9.33.0",
+    "eslint": "^9.35.0",
    "typescript": "^5.9.2"
  }
 }
@@ -23,7 +23,6 @@ export const statusResponseSchema = z.object({
  dns_addresses: z.array(z.string()),
  dns_port: z.number().positive(),
  http_port: z.number().positive(),
-  protection_disabled_duration: z.number(),
  protection_enabled: z.boolean(),
  dhcp_available: z.boolean(),
  running: z.boolean(),
@@ -38,6 +38,7 @@ import { PlexIntegration } from "../plex/plex-integration";
 import { ProwlarrIntegration } from "../prowlarr/prowlarr-integration";
 import { ProxmoxIntegration } from "../proxmox/proxmox-integration";
 import { QuayIntegration } from "../quay/quay-integration";
+import { TrueNasIntegration } from "../truenas/truenas-integration";
 import { UnifiControllerIntegration } from "../unifi-controller/unifi-controller-integration";
 import type { Integration, IntegrationInput } from "./integration";

@@ -114,6 +115,7 @@ export const integrationCreators = {
  quay: QuayIntegration,
  ntfy: NTFYIntegration,
  mock: MockIntegration,
+  truenas: TrueNasIntegration,
 } satisfies Record<IntegrationKind, IntegrationInstance | [(input: IntegrationInput) => Promise<Integration>]>;

 type IntegrationInstanceOfKind<TKind extends keyof typeof integrationCreators> = {
@@ -1,6 +1,7 @@
 import {
  AxiosHttpErrorHandler,
  FetchHttpErrorHandler,
+  OctokitHttpErrorHandler,
  OFetchHttpErrorHandler,
  TsdavHttpErrorHandler,
 } from "@homarr/common/server";
@@ -11,3 +12,4 @@ export const integrationFetchHttpErrorHandler = new IntegrationHttpErrorHandler(
 export const integrationOFetchHttpErrorHandler = new IntegrationHttpErrorHandler(new OFetchHttpErrorHandler());
 export const integrationAxiosHttpErrorHandler = new IntegrationHttpErrorHandler(new AxiosHttpErrorHandler());
 export const integrationTsdavHttpErrorHandler = new IntegrationHttpErrorHandler(new TsdavHttpErrorHandler());
+export const integrationOctokitHttpErrorHandler = new IntegrationHttpErrorHandler(new OctokitHttpErrorHandler());
@@ -1,11 +1,14 @@
+import { createAppAuth } from "@octokit/auth-app";
 import { Octokit, RequestError } from "octokit";
+import type { fetch } from "undici";

 import { fetchWithTrustedCertificatesAsync } from "@homarr/certificates/server";
 import { logger } from "@homarr/log";

+import { HandleIntegrationErrors } from "../base/errors/decorator";
+import { integrationOctokitHttpErrorHandler } from "../base/errors/http";
 import type { IntegrationTestingInput } from "../base/integration";
 import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
 import type { TestingResult } from "../base/test-connection/test-connection-service";
 import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
 import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
@@ -18,23 +21,21 @@ import type {

 const localLogger = logger.child({ module: "GitHubContainerRegistryIntegration" });

+@HandleIntegrationErrors([integrationOctokitHttpErrorHandler])
 export class GitHubContainerRegistryIntegration extends Integration implements ReleasesProviderIntegration {
  private static readonly userAgent = "Homarr-Lab/Homarr:GitHubContainerRegistryIntegration";

  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const headers: RequestInit["headers"] = {
-      "User-Agent": GitHubContainerRegistryIntegration.userAgent,
-    };
+    const api = this.getApi(input.fetchAsync);

-    if (this.hasSecretValue("personalAccessToken"))
-      headers.Authorization = `Bearer ${this.getSecretValue("personalAccessToken")}`;
-
-    const response = await input.fetchAsync(this.url("/octocat"), {
-      headers,
-    });
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
+    if (this.hasSecretValue("personalAccessToken")) {
+      await api.rest.users.getAuthenticated();
+    } else if (this.hasSecretValue("githubAppId")) {
+      await api.rest.apps.getInstallation({
+        installation_id: Number(this.getSecretValue("githubInstallationId")),
+      });
+    } else {
+      await api.request("GET /octocat");
    }

    return {
@@ -131,15 +132,38 @@ export class GitHubContainerRegistryIntegration extends Integration implements R
    }
  }

-  private getApi() {
+  private getAuthProperties(): Pick<OctokitOptions, "auth" | "authStrategy"> {
+    if (this.hasSecretValue("personalAccessToken"))
+      return {
+        auth: this.getSecretValue("personalAccessToken"),
+      };
+
+    if (this.hasSecretValue("githubAppId"))
+      return {
+        authStrategy: createAppAuth,
+        auth: {
+          appId: this.getSecretValue("githubAppId"),
+          installationId: this.getSecretValue("githubInstallationId"),
+          privateKey: this.getSecretValue("privateKey"),
+        } satisfies Parameters<typeof createAppAuth>[0],
+      };
+
+    return {};
+  }
+
+  private getApi(customFetch?: typeof fetch) {
    return new Octokit({
      baseUrl: this.url("/").origin,
      request: {
-        fetch: fetchWithTrustedCertificatesAsync,
+        fetch: customFetch ?? fetchWithTrustedCertificatesAsync,
      },
      userAgent: GitHubContainerRegistryIntegration.userAgent,
-      throttle: { enabled: false }, // Disable throttling for this integration, Octokit will retry by default after a set time, thus delaying the repsonse to the user in case of errors. Errors will be shown to the user, no need to retry the request.
-      ...(this.hasSecretValue("personalAccessToken") ? { auth: this.getSecretValue("personalAccessToken") } : {}),
+      // Disable throttling for this integration, Octokit will retry by default after a set time,
+      // thus delaying the repsonse to the user in case of errors. Errors will be shown to the user, no need to retry the request.
+      throttle: { enabled: false },
+      ...this.getAuthProperties(),
    });
  }
 }
+
+type OctokitOptions = Exclude<ConstructorParameters<typeof Octokit>[0], undefined>;
@@ -1 +1 @@
 .18.0
 .19.0
				`@@ -0,0 +1 @@`
				ALTER TABLE `integrationSecret` MODIFY COLUMN `kind` varchar(64) NOT NULL;
				`@@ -0,0 +1 @@`
				`ALTER TABLE "integrationSecret" ALTER COLUMN "kind" SET DATA TYPE varchar(64);`