fix: remove legacy apps/websocket and apps/tasks, exclude build artifacts from tsconfig

- Remove apps/websocket/ (merged into custom server in server.ts)
- Remove apps/tasks/ (merged into custom server in server.ts)
- Exclude customServer.cjs and customServer.css from tsconfig to prevent
  tsc errors when build artifacts are present
- Update pnpm-lock.yaml (removed 138 unnecessary packages)

Co-authored-by: ajnart <49837342+ajnart@users.noreply.github.com>
Agent-Logs-Url: https://github.com/homarr-labs/homarr/sessions/bd83b347-563b-494e-b8c6-91fcc199dd79

.dockerignore

@@ -5,6 +5,7 @@ node_modules
 npm-debug.log
 README.md
 .next
+.turbo
 .git
 dev
 .build

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -33,6 +33,15 @@ body:
       options:
         # The below comment is used to insert a new version with on-release.yml
         #NEXT_VERSION#
+        - 1.56.0
+        - 1.55.0
+        - 1.54.0
+        - 1.53.0
+        - 1.52.0
+        - 1.51.0
+        - 1.50.1
+        - 1.50.0
+        - 1.49.1
         - 1.49.0
         - 1.48.0
         - 1.47.0

.github/workflows/deployment-docker-image.yml

@@ -65,7 +65,7 @@ jobs:
       - uses: actions/setup-node@v6
         if: env.SKIP_RELEASE == 'false'
         with:
-          node-version: 24.12.0
+          node-version: 24.14.0
           cache: "pnpm"
       - run: npm i -g pnpm
         if: env.SKIP_RELEASE == 'false'
@@ -128,7 +128,7 @@ jobs:
           images: "${{ env.GHCR_REPO }}"
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -167,7 +167,7 @@ jobs:
           images: "${{ env.GHCR_REPO }}"
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -228,8 +228,17 @@ jobs:
       DEPLOY_LATEST: ${{ github.ref_name == 'main' }}
       DEPLOY_BETA: ${{ github.ref_name == 'beta' }}
     steps:
+      - name: Obtain token
+        if: needs.release.outputs.skipped == 'false'
+        id: obtainToken
+        uses: actions/create-github-app-token@v2
+        with:
+          private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          permission-contents: write # required to publish the release
+
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -258,7 +267,7 @@ jobs:
       - name: Publish release
         if: needs.release.outputs.skipped == 'false'
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
         run: |
           gh release edit --repo ${{ github.repository }} ${{ needs.release.outputs.version }} --draft=false
 

.github/workflows/on-pr-prebuilt-debian-validate.yml

@@ -27,7 +27,7 @@ jobs:
             exit 1
           fi
   prebuilt-debian-validate-arm64:
-    runs-on: ubuntu-24.04-
+    runs-on: ubuntu-24.04-arm
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v6

.github/workflows/on-release.yml

@@ -2,7 +2,7 @@ permissions: {}
 
 on:
   release:
-    types: [published]
+    types: [released]
 
 jobs:
   trigger-docs-release:
@@ -37,6 +37,7 @@ jobs:
             }
           }
           EOF
+
   update-bug-report-template:
     name: Update Bug Report Template
     runs-on: ubuntu-latest
@@ -54,23 +55,20 @@ jobs:
         uses: actions/checkout@v6
         with:
           token: ${{ steps.obtainToken.outputs.token }}
+          ref: dev
       - name: Setup
         uses: ./tooling/github/setup
       - run: pnpm run scripts:update-bug-report-template
         env:
           NEXT_VERSION: ${{ github.event.release.tag_name }}
-      - name: Commit changes
-        run: |
-          git config --global user.email "175486441+homarr-releases[bot]@users.noreply.github.com"
-          git config --global user.name "Releases Homarr"
-          git checkout -b update-bug-report-template
-          git add .
-          git commit -m "chore: update bug report template"
 
       - name: Create Pull Request
         id: create-pull-request
         uses: peter-evans/create-pull-request@v8
         with:
+          add-paths: .github/ISSUE_TEMPLATE/bug_report.yml
+          commit-message: "chore: update bug report template"
+          author: Releases Homarr <175486441+homarr-releases[bot]@users.noreply.github.com>
           token: ${{ steps.obtainToken.outputs.token }}
           branch: update-bug-report-template
           base: dev

.gitignore

@@ -57,6 +57,7 @@ apps/tasks/tasks.cjs
 apps/tasks/tasks.css
 apps/websocket/wssServer.cjs
 apps/websocket/wssServer.css
+apps/nextjs/customServer.cjs
 apps/nextjs/.million/
 packages/cli/cli.cjs
 
@@ -67,4 +68,7 @@ e2e/shared/tmp
 apps/nextjs/public/images/background.png
 
 # next-intl
-en.d.json.ts
+en.d.json.ts
+
+# Custom server build artifacts
+apps/nextjs/customServer.css

.nvmrc

@@ -1 +1 @@
-24.12.0
+24.14.0

APPROACHES.md

@@ -0,0 +1,369 @@
+# Memory Optimization Approaches
+
+This document describes the approaches tried and considered for reducing the RAM footprint of Homarr's server processes.
+
+## Baseline Architecture (Before)
+
+Homarr runs **three separate Node.js processes**:
+
+| Process | Port | Purpose |
+|---|---|---|
+| `apps/nextjs` (Next.js) | 3000 | Web UI + API routes |
+| `apps/websocket` (WS server) | 3001 | tRPC WebSocket subscriptions |
+| `apps/tasks` (Tasks/Cron server) | 3002 | Cron job scheduling + management API |
+
+Each process loads its own V8 heap, duplicates shared dependencies (`@homarr/db`, `@homarr/auth`, etc.), and runs its own event loop.
+
+**Measured baseline (dev mode, idle):** ~2,954 MB total RSS
+
+---
+
+## Approach 1: Integrate WebSocket Server into Next.js Custom Server
+
+**Status:** ✅ Implemented
+
+Eliminates `apps/websocket` by handling WebSocket upgrades inside a [Next.js custom server](https://nextjs.org/docs/pages/guides/custom-server):
+
+```ts
+const app = next({ dev, hostname, port, dir });
+const upgradeHandler = app.getUpgradeHandler();
+
+server.on("upgrade", (req, socket, head) => {
+  if (req.url?.startsWith("/websockets")) {
+    wss.handleUpgrade(req, socket, head, (ws) => wss.emit("connection", ws, req));
+  } else {
+    upgradeHandler(req, socket, head); // HMR, etc.
+  }
+});
+```
+
+### PROs
+- Eliminates one V8 heap (~208 MB)
+- WebSocket runs on same port as HTTP (simpler networking/proxying)
+- Shared `@homarr/db` connection pool and module cache
+- `getUpgradeHandler()` properly delegates HMR to Next.js in dev mode
+
+### CONs
+- Custom server disables some Next.js optimizations (automatic static optimization still works with `output: "standalone"`)
+- WebSocket errors could affect the main server process
+- Slightly more complex startup code
+
+---
+
+## Approach 2: Integrate Tasks/Cron Server into Next.js Custom Server
+
+**Status:** ✅ Implemented (combined with Approach 1)
+
+Eliminates `apps/tasks` by running the Fastify tRPC cron API and job scheduler inside the same process:
+
+```ts
+async function startTasksServer() {
+  const tasksServer = fastify({ maxParamLength: 5000 });
+  tasksServer.register(fastifyTRPCPlugin, { ... });
+  await cleanupSessionsAsync();
+  await invalidateUpdateCheckerCacheAsync();
+  await jobGroup.initializeAsync();
+  await jobGroup.startAllAsync();
+  await tasksServer.listen({ port: CRON_JOB_API_PORT });
+  return tasksServer;
+}
+```
+
+### PROs
+- Eliminates another V8 heap (~328 MB)
+- Shared database connection pool across Next.js API routes and cron jobs
+- Single process to manage (simpler Docker, `run.sh`, monitoring)
+- Cron jobs can directly share in-memory state with the web server
+
+### CONs
+- A misbehaving cron job could affect web request latency
+- Fastify still binds to port 3002 for internal tRPC communication (minor overhead)
+- More dependencies in the custom server bundle
+
+---
+
+## Combined Result (Approaches 1 + 2)
+
+| Component | Separate (before) | Integrated (after) |
+|---|---|---|
+| WebSocket server | ~208 MB | — |
+| Tasks/Cron server | ~328 MB | — |
+| Next.js (incl. workers) | ~2,418 MB | — |
+| Custom Server (all-in-one) | — | ~2,007 MB |
+| **Total RSS** | **~2,954 MB** | **~2,007 MB** |
+| **Savings** | — | **~947 MB (~32%)** |
+
+---
+
+## Approach 3: Eliminate Fastify — Direct Function Calls for Cron API
+
+**Status:** 📋 Considered, not implemented
+
+Since the cron job API client (`cronJobApi`) is only used from Next.js API routes (same process now), we could replace the HTTP+tRPC client with direct function calls to `JobManager`:
+
+```ts
+// Before: HTTP call to localhost:3002/trpc
+await cronJobApi.trigger.mutate({ name: "myJob" });
+
+// After: direct call in same process
+await jobManager.triggerAsync("myJob");
+```
+
+### PROs
+- Eliminates Fastify dependency and port 3002 listener entirely
+- Zero network overhead for cron API calls
+- Simpler architecture (no internal HTTP, no API key needed)
+
+### CONs
+- Requires refactoring `packages/api/src/router/cron-jobs.ts` and `packages/cron-job-api`
+- Breaks the clean separation between Next.js API and tasks concerns
+- If the architecture ever splits back to separate processes, this would need to be reverted
+- API key authentication for cron operations would need a different mechanism
+
+---
+
+## Approach 4: Node.js `--max-old-space-size` Flag
+
+**Status:** 📋 Considered, available as user override
+
+Setting `NODE_OPTIONS=--max-old-space-size=N` limits V8 heap growth and forces more aggressive garbage collection.
+
+```dockerfile
+# Example: limit heap to 512 MB
+ENV NODE_OPTIONS="--max-old-space-size=512"
+```
+
+### PROs
+- Can reduce peak memory usage in constrained environments
+- Easy to configure via environment variable
+- No code changes required
+
+### CONs
+- Too low a value causes OOM crashes under load
+- Doesn't reduce actual memory *needed*, just forces earlier GC
+- Default Node.js behavior (~1.7 GB limit on 64-bit) is reasonable for most deployments
+- Different deployments have different memory constraints — no single good default
+
+**Recommendation:** Don't set a default in the Dockerfile. Document as a tuning option for users running on low-memory hosts (e.g., `docker run -e NODE_OPTIONS="--max-old-space-size=512"`).
+
+---
+
+## Approach 5: Next.js `output: "standalone"` (Already in Use)
+
+**Status:** ✅ Already configured
+
+The `next.config.ts` already uses `output: "standalone"`, which:
+- Traces only the files needed for production
+- Creates a minimal `.next/standalone` directory
+- Avoids shipping full `node_modules`
+
+This is already optimized and no further action needed.
+
+---
+
+## Approach 6: Shared Redis Connection Pooling
+
+**Status:** 📋 Considered, not implemented
+
+With all services in one process, Redis connection pools could be shared. Currently, each module may create its own Redis client instance.
+
+### PROs
+- Fewer open connections to Redis
+- Slightly less memory for connection buffers
+
+### CONs
+- Marginal memory savings (Redis connections are lightweight)
+- Requires auditing all Redis usage across packages
+- Risk of connection contention under high load
+
+---
+
+## Summary of Recommendations
+
+| Approach | Impact | Effort | Status |
+|---|---|---|---|
+| 1. Integrate WS server | ~208 MB saved | Low | ✅ Done |
+| 2. Integrate Tasks server | ~328 MB saved | Medium | ✅ Done |
+| 3. Eliminate Fastify | ~10-30 MB saved | High | 📋 Future |
+| 4. `--max-old-space-size` | Configurable | None | 📋 User option |
+| 5. Standalone output | Already optimal | None | ✅ Already done |
+| 6. Shared Redis pools | ~5-10 MB saved | Medium | 📋 Future |
+| 7. Redis-backed initial query data | Faster page loads | Medium | 📋 POC documented |
+| 8. Client-side rendering with ISR shell | Faster TTFB | High | 📋 POC documented |
+
+---
+
+## Approach 7: Redis-Backed TanStack Query Initial Data
+
+**Status:** 📋 POC documented
+
+### Problem
+
+Currently, the dashboard page (`/`) is fully server-rendered on every request:
+
+1. Server calls `api.board.getHomeBoard()` (database query)
+2. Server prefetches all widget data via `prefetchForKindAsync()` (multiple database/integration queries)
+3. Server renders the full React tree with hydration boundary
+4. Client hydrates and takes over
+
+Each page load triggers a cascade: **Client → Next.js Server → tRPC → Database → Back**. For data that doesn't change often (board layout, widget configurations), this is wasteful.
+
+### Approach
+
+Use Redis as a shared cache layer between cron jobs and page loads. Cron jobs already populate Redis with integration data. The idea is to:
+
+1. **Cron jobs write to Redis** (already happening via `createItemAndIntegrationChannel`)
+2. **Server reads from Redis first** instead of hitting the database for widget data
+3. **Pass Redis data as `initialData`** to TanStack Query on the client
+4. **Client-side queries take over** with stale-while-revalidate behavior
+
+```tsx
+// POC: In _creator.tsx, read from Redis cache first for widget prefetching
+import { createItemAndIntegrationChannel } from "@homarr/redis";
+
+// Instead of always calling the database:
+const cachedData = await redisChannel.getAsync();
+if (cachedData) {
+  // Use cached data as initial query data - skip the database call
+  queryClient.setQueryData(queryKey, cachedData.data);
+} else {
+  // Fall back to normal prefetch
+  await prefetchForKindAsync(kind, queryClient, items);
+}
+```
+
+On the client side, TanStack Query's `initialData` option lets us hydrate from cache:
+
+```tsx
+// Client component using cached initial data
+const { data } = useQuery({
+  queryKey: ["widget", widgetId],
+  queryFn: () => fetchWidgetData(widgetId),
+  initialData: cachedWidgetData, // From Redis via server props
+  staleTime: 30_000, // Consider fresh for 30s
+});
+```
+
+### How TanStack Query Initial Data Works
+
+From the [TanStack Query docs](https://tanstack.com/query/v5/docs/framework/react/guides/initial-query-data):
+
+- `initialData` pre-populates the query cache before the component mounts
+- The query still revalidates in the background (stale-while-revalidate)
+- Combined with `staleTime`, the query won't refetch until the data is considered stale
+- This means the page renders instantly with cached data, then silently updates
+
+### PROs
+- **Faster page loads**: Redis reads are ~1ms vs ~50-200ms for database queries with joins
+- **Reduced database load**: Most page views hit Redis instead of SQLite/MySQL/PostgreSQL
+- **Leverages existing infrastructure**: Cron jobs already write widget data to Redis channels
+- **Graceful degradation**: Falls back to normal database queries on cache miss
+- **Non-breaking**: Can be adopted incrementally per widget type
+- **Shared across users**: Non-personal data (board layout, widget data) is the same for all users viewing the same board
+
+### CONs
+- **Cache staleness**: Data may be up to one cron interval old (typically 1-5 minutes)
+- **Cache invalidation complexity**: Need to invalidate Redis when boards are edited
+- **Memory usage**: More data stored in Redis (marginal since it's already stored for pub/sub)
+- **Serialization overhead**: superjson parse/stringify on every cache read
+- **Testing complexity**: Need to test cache hit/miss/stale scenarios
+
+### Estimated Impact
+
+| Metric | Before | After (cache hit) | Improvement |
+|---|---|---|---|
+| Dashboard TTFB | ~200-500ms | ~50-100ms | 2-5x faster |
+| Database queries per page load | 5-20 (depending on widgets) | 0-2 (board + auth only) | ~90% reduction |
+| Redis reads per page load | 0 | 5-20 | Acceptable (~1ms each) |
+
+### Implementation Path
+
+1. Create a `createBoardCacheChannel(boardId)` in `@homarr/redis`
+2. Populate it when boards are saved and when cron jobs update widget data
+3. In `_creator.tsx`, check cache before `prefetchForKindAsync()`
+4. Set `staleTime` to match cron interval for each widget type
+5. Add cache invalidation when boards are edited (`board.saveBoard` mutation)
+
+---
+
+## Approach 8: Client-Side Rendering with ISR Static Shell
+
+**Status:** 📋 POC documented (not recommended for Homarr's use case)
+
+### Concept
+
+Instead of server-rendering the entire dashboard on each request, serve a **static HTML shell** via Next.js ISR (Incremental Static Regeneration) and let the client fetch all dynamic content via TanStack Query.
+
+```tsx
+// Hypothetical ISR dashboard page
+export const revalidate = 60; // Regenerate every 60 seconds
+
+export default function DashboardPage() {
+  // Return a static shell - no server-side data fetching
+  return (
+    <DashboardShell>
+      <Suspense fallback={<BoardSkeleton />}>
+        <ClientBoard /> {/* Fetches via useQuery on mount */}
+      </Suspense>
+    </DashboardShell>
+  );
+}
+```
+
+The client component would then fetch everything:
+
+```tsx
+"use client";
+
+function ClientBoard() {
+  const { data: board, isLoading } = clientApi.board.getHomeBoard.useQuery(undefined, {
+    initialData: undefined, // Could be populated from Redis via API route
+  });
+
+  if (isLoading) return <BoardSkeleton />;
+  return <BoardContent board={board} />;
+}
+```
+
+### How Next.js ISR Works
+
+- On first request, Next.js generates the page and caches it
+- Subsequent requests serve the cached HTML instantly (TTFB ~0ms for CDN)
+- After `revalidate` seconds, the next request triggers background regeneration
+- The stale page is served until the new one is ready (stale-while-revalidate)
+
+### PROs
+- **Near-instant TTFB**: Static HTML served from disk/CDN cache
+- **Reduced server CPU**: No React SSR on every request
+- **Scalable**: Static pages can be served by any CDN or reverse proxy
+- **Good for public boards**: Shared boards viewed by many users benefit most
+
+### CONs
+- **Layout shift (CLS)**: Dashboard appears empty then fills in — bad UX for dashboards
+- **No SSR for SEO**: Not relevant for Homarr (it's a private dashboard app)
+- **Slower perceived load**: Users see a skeleton for 200-500ms while queries run
+- **Authentication complexity**: ISR pages must be the same for all users. Homarr's dashboard is user-specific (permissions, board access), making ISR caching ineffective for the page itself
+- **Breaks existing hydration pattern**: The current `HydrationBoundary` + `dehydrate()` pattern works well and ensures no layout shift
+- **WebSocket subscriptions delayed**: Real-time updates don't start until client JS loads and connects
+
+### Benchmark Comparison (Theoretical)
+
+| Metric | Current (SSR) | Approach 7 (Redis initial data) | Approach 8 (ISR + CSR) |
+|---|---|---|---|
+| TTFB | 200-500ms | 50-100ms | ~10ms (static) |
+| Time to Interactive | 200-500ms | 50-100ms | 200-500ms (same) |
+| Largest Contentful Paint | 200-500ms | 50-100ms | 400-800ms (worse) |
+| Cumulative Layout Shift | ~0 | ~0 | 0.1-0.3 (worse) |
+| Server CPU per request | High | Low | Near zero |
+
+### Recommendation
+
+**Approach 7 (Redis-backed initial data) is recommended over Approach 8 (ISR)** for Homarr because:
+
+1. **Dashboards are personalized**: Board access depends on user permissions, making ISR page-level caching ineffective
+2. **No layout shift**: Users expect the dashboard to appear fully rendered
+3. **Existing infrastructure**: Redis + cron jobs already provide the cache layer needed
+4. **Incremental adoption**: Can be applied per-widget without changing the overall rendering strategy
+5. **ISR is designed for content sites**: Blog posts, documentation pages, product pages — not interactive dashboards with real-time WebSocket subscriptions
+
+ISR could still be useful for specific Homarr pages like `/manage/about` or documentation pages that don't depend on user state, but the main dashboard is not a good candidate.

CHANGELOG.md

@@ -1,3 +1,241 @@
+## [1.56.0](https://github.com/homarr-labs/homarr/compare/v1.55.0...v1.56.0) (2026-03-13)
+
+### Features
+
+* add immich integration and widget ([#5165](https://github.com/homarr-labs/homarr/issues/5165)) ([cdd90b8](https://github.com/homarr-labs/homarr/commit/cdd90b8aa091e4d05a40af35ea87486b83bf4182))
+* **boards:** show supported integrations in widget selection ([#5187](https://github.com/homarr-labs/homarr/issues/5187)) ([dabe96b](https://github.com/homarr-labs/homarr/commit/dabe96bd5ea52110812934b1ec9c8dc9ecd77603))
+* expand cli ([#5159](https://github.com/homarr-labs/homarr/issues/5159)) ([aa36ce3](https://github.com/homarr-labs/homarr/commit/aa36ce3c4784c91024c4e8001c236e28f02396e7))
+* Tracearr integration ([#5060](https://github.com/homarr-labs/homarr/issues/5060)) ([f686001](https://github.com/homarr-labs/homarr/commit/f68600150ab1985d56f1bed45d8ac158a74ec443))
+
+### Bug Fixes
+
+* **boards:** duplication of boards fails with postgresql / mysql ([#5228](https://github.com/homarr-labs/homarr/issues/5228)) ([ba9c3f3](https://github.com/homarr-labs/homarr/commit/ba9c3f3e27659a5c06604d06192ccb8316658937))
+* **deps:** update dependency @tabler/icons-react to ^3.38.0 ([#5182](https://github.com/homarr-labs/homarr/issues/5182)) ([6aaaf31](https://github.com/homarr-labs/homarr/commit/6aaaf31d8b5495090081f8795844db00a7b0a2ed))
+* **deps:** update dependency @tabler/icons-react to ^3.39.0 ([#5209](https://github.com/homarr-labs/homarr/issues/5209)) ([22fd8e9](https://github.com/homarr-labs/homarr/commit/22fd8e9b95bcddd9a9a1fa599f1a42f4d502f205))
+* **deps:** update dependency @tabler/icons-react to ^3.40.0 ([#5220](https://github.com/homarr-labs/homarr/issues/5220)) ([12ad241](https://github.com/homarr-labs/homarr/commit/12ad241406d581c98826ed270d71faf50779c601))
+* **deps:** update dependency fast-xml-parser to ^5.4.2 ([#5190](https://github.com/homarr-labs/homarr/issues/5190)) ([5159d9f](https://github.com/homarr-labs/homarr/commit/5159d9f0e7263166f26ec770c55dd4e2944dfd72))
+* **deps:** update dependency fastify to ^5.8.1 ([#5202](https://github.com/homarr-labs/homarr/issues/5202)) ([b02e8cc](https://github.com/homarr-labs/homarr/commit/b02e8cc875df20ff4d007c527bb5682db960fae6))
+* **deps:** update dependency fastify to ^5.8.2 ([#5221](https://github.com/homarr-labs/homarr/issues/5221)) ([5c4f394](https://github.com/homarr-labs/homarr/commit/5c4f39450148fd91e2cecf70c20c8ec78ecebfd6))
+* **deps:** update dependency mysql2 to v3.19.0 ([#5206](https://github.com/homarr-labs/homarr/issues/5206)) ([324bfd9](https://github.com/homarr-labs/homarr/commit/324bfd90d1a2c6ca80610c549b84d93f4a695cab))
+* **deps:** update dependency pg to ^8.20.0 ([#5198](https://github.com/homarr-labs/homarr/issues/5198)) ([1c6e23a](https://github.com/homarr-labs/homarr/commit/1c6e23a4b6509e83667396a392b23655f8b614dd))
+* **deps:** update mantine monorepo to ^8.3.16 ([#5201](https://github.com/homarr-labs/homarr/issues/5201)) ([c7fa5cd](https://github.com/homarr-labs/homarr/commit/c7fa5cdbb3ffdf90dbc9c9dbef0551e2b0edfb4c))
+* **deps:** update tiptap monorepo to v3.20.1 ([#5215](https://github.com/homarr-labs/homarr/issues/5215)) ([d941ed5](https://github.com/homarr-labs/homarr/commit/d941ed58fa482f2e41d27b6b5088146a608b236e))
+* **deps:** update trpc monorepo to ^11.12.0 ([#5213](https://github.com/homarr-labs/homarr/issues/5213)) ([00dd32b](https://github.com/homarr-labs/homarr/commit/00dd32bbe124f02ad7ae5ecb4e298a6d3fb4f0b8))
+* **deps:** update turbo monorepo to ^2.8.14 ([#5113](https://github.com/homarr-labs/homarr/issues/5113)) ([8ee05e0](https://github.com/homarr-labs/homarr/commit/8ee05e0d491bfec9f768a3a915ad1c8abf433b5b))
+* **glances:** unable to parse uptime of 1 day ([#5226](https://github.com/homarr-labs/homarr/issues/5226)) ([3091ed6](https://github.com/homarr-labs/homarr/commit/3091ed6358d83249a94827f55a812323c1e80497))
+* **image-proxy:** hash full URL and headers deterministically ([#5184](https://github.com/homarr-labs/homarr/issues/5184)) ([9a878af](https://github.com/homarr-labs/homarr/commit/9a878af414e12691420edb945ed6f9f6255c7eae))
+* language changes when searching for some icons ([#5224](https://github.com/homarr-labs/homarr/issues/5224)) ([21225c9](https://github.com/homarr-labs/homarr/commit/21225c979edb9a2c9cc00c4649363c0aab8058f1))
+* **releases:** allow any icon url for repositories ([#5229](https://github.com/homarr-labs/homarr/issues/5229)) ([d3c2ad1](https://github.com/homarr-labs/homarr/commit/d3c2ad134f7a9972118abcfff5482ca6d6105406))
+* **security:** harden hashing in image-proxy ([#5188](https://github.com/homarr-labs/homarr/issues/5188)) ([5723da2](https://github.com/homarr-labs/homarr/commit/5723da21aae8b69642a39e4b5a05ad84fa8dd8ef))
+* **stock-price:** align sparkline color with displayed price change ([#5181](https://github.com/homarr-labs/homarr/issues/5181)) ([bbf0adf](https://github.com/homarr-labs/homarr/commit/bbf0adf31a1f08f3ca09b709efd1daa15cb8498c))
+* **system-disks:** format absolute denominator with human-readable size ([#5183](https://github.com/homarr-labs/homarr/issues/5183)) ([85c4601](https://github.com/homarr-labs/homarr/commit/85c460190ceedad83c40af81d5efa270bc464b94))
+* **true-nas:** ignore offline/exported pools ([#5225](https://github.com/homarr-labs/homarr/issues/5225)) ([451602d](https://github.com/homarr-labs/homarr/commit/451602d1e61256696f6bcb0cd76f09748345a940))
+
+## [1.55.0](https://github.com/homarr-labs/homarr/compare/v1.54.0...v1.55.0) (2026-03-06)
+
+### Features
+
+* add seerr integration ([#5139](https://github.com/homarr-labs/homarr/issues/5139)) ([0e29a2f](https://github.com/homarr-labs/homarr/commit/0e29a2fce172cbfda083b899c01b92bd8b6210b7))
+
+### Bug Fixes
+
+* **deps:** update dependency fast-xml-parser to ^5.4.1 ([#5150](https://github.com/homarr-labs/homarr/issues/5150)) ([eb2f85f](https://github.com/homarr-labs/homarr/commit/eb2f85f6f8c9d7d90c1aeec079225678dfef4dd0))
+* **deps:** update dependency ioredis to v5.10.0 ([#5169](https://github.com/homarr-labs/homarr/issues/5169)) ([1c06e56](https://github.com/homarr-labs/homarr/commit/1c06e562c33bd9f1387cb05a3dece7beedfe43c2))
+* **deps:** update dependency ldapts to v8.1.7 ([#5168](https://github.com/homarr-labs/homarr/issues/5168)) ([ec45aac](https://github.com/homarr-labs/homarr/commit/ec45aacc63766c51a99ead6130bade442124e70d))
+* **deps:** update dependency mysql2 to v3.17.5 ([#5140](https://github.com/homarr-labs/homarr/issues/5140)) ([66ad67e](https://github.com/homarr-labs/homarr/commit/66ad67eced587fd49a470395298477dc09cdd225))
+* **deps:** update dependency mysql2 to v3.18.0 ([#5141](https://github.com/homarr-labs/homarr/issues/5141)) ([52792af](https://github.com/homarr-labs/homarr/commit/52792af186a6eb3519aafdee5a7c0dd03a86a461))
+* **deps:** update dependency mysql2 to v3.18.1 ([#5152](https://github.com/homarr-labs/homarr/issues/5152)) ([8bf2a43](https://github.com/homarr-labs/homarr/commit/8bf2a43e065671c7c119ef1da5aa09d284db0ede))
+* **deps:** update dependency mysql2 to v3.18.2 ([#5164](https://github.com/homarr-labs/homarr/issues/5164)) ([4717a57](https://github.com/homarr-labs/homarr/commit/4717a5724d4a6286c0f2bb92cf1e1fe17903a13a))
+* **deps:** update dependency pg to ^8.19.0 ([#5153](https://github.com/homarr-labs/homarr/issues/5153)) ([0b0fb1c](https://github.com/homarr-labs/homarr/commit/0b0fb1c5798357d7bc847dfe577b26529be8aa5c))
+* **deps:** update dependency swagger-ui-react to ^5.32.0 ([#5167](https://github.com/homarr-labs/homarr/issues/5167)) ([ff11599](https://github.com/homarr-labs/homarr/commit/ff1159943c967b6fea44894765c2210c3cdd44cc))
+* **deps:** update dependency typescript-eslint to ^8.56.1 ([#5142](https://github.com/homarr-labs/homarr/issues/5142)) ([ac3b4e7](https://github.com/homarr-labs/homarr/commit/ac3b4e7de0460cab7723dcc1a5a8e14072a37d25))
+* **deps:** update trpc monorepo to ^11.11.0 ([#5174](https://github.com/homarr-labs/homarr/issues/5174)) ([bc2a532](https://github.com/homarr-labs/homarr/commit/bc2a532a03d8cb76270f52b766f1a7f46d704096))
+
+## [1.54.0](https://github.com/homarr-labs/homarr/compare/v1.53.2...v1.54.0) (2026-02-27)
+
+### Features
+
+* add glances integration ([#5102](https://github.com/homarr-labs/homarr/issues/5102)) ([91846bc](https://github.com/homarr-labs/homarr/commit/91846bc000b419b03925acc4b447efcc696ff009))
+* add slskd integration ([#5088](https://github.com/homarr-labs/homarr/issues/5088)) ([d999f37](https://github.com/homarr-labs/homarr/commit/d999f3797562a4c1d07a08b10ef4821c12390d2f))
+
+### Bug Fixes
+
+* **deps:** update dependency @ctrl/deluge to ^7.5.1 ([#5098](https://github.com/homarr-labs/homarr/issues/5098)) ([53d4625](https://github.com/homarr-labs/homarr/commit/53d46257ce2c257f2e083d0645178823afd45227))
+* **deps:** update dependency @ctrl/deluge to ^7.5.2 ([#5105](https://github.com/homarr-labs/homarr/issues/5105)) ([dacbcce](https://github.com/homarr-labs/homarr/commit/dacbcce179c21f8858f61633c4a72b248ec437b7))
+* **deps:** update dependency @ctrl/qbittorrent to ^9.11.1 ([#5097](https://github.com/homarr-labs/homarr/issues/5097)) ([193d4d2](https://github.com/homarr-labs/homarr/commit/193d4d2e2aabaffb019108c3150de3f92d84efe8))
+* **deps:** update dependency @ctrl/qbittorrent to ^9.11.2 ([#5106](https://github.com/homarr-labs/homarr/issues/5106)) ([ee62667](https://github.com/homarr-labs/homarr/commit/ee6266707f779e7a080b40b4ed3e0a8679bb2910))
+* **deps:** update dependency @tabler/icons-react to ^3.37.0 ([#5119](https://github.com/homarr-labs/homarr/issues/5119)) ([ba86019](https://github.com/homarr-labs/homarr/commit/ba860193d78f84fa9326a006caba4b3cc7c195c2))
+* **deps:** update dependency @tabler/icons-react to ^3.37.1 ([#5121](https://github.com/homarr-labs/homarr/issues/5121)) ([c3a4051](https://github.com/homarr-labs/homarr/commit/c3a40510075f56d7f156c877e1041b7bf36677b5))
+* **deps:** update dependency fast-xml-parser to ^5.3.7 ([#5122](https://github.com/homarr-labs/homarr/issues/5122)) ([6861839](https://github.com/homarr-labs/homarr/commit/6861839b65fffb0c8030ae7a6fd24105fdad6b95))
+* **deps:** update dependency glob to ^13.0.4 ([#5107](https://github.com/homarr-labs/homarr/issues/5107)) ([ea0a411](https://github.com/homarr-labs/homarr/commit/ea0a411c813c8dfcb17493e6a41d2ab96077adb6))
+* **deps:** update dependency glob to ^13.0.5 ([#5109](https://github.com/homarr-labs/homarr/issues/5109)) ([02ec089](https://github.com/homarr-labs/homarr/commit/02ec0898ef32f8b6ac540a9c005130f3e7312e65))
+* **deps:** update dependency glob to ^13.0.6 ([#5117](https://github.com/homarr-labs/homarr/issues/5117)) ([908bced](https://github.com/homarr-labs/homarr/commit/908bced0dfb158a9da155c97dbf982c2d544fc20))
+* **deps:** update dependency isomorphic-dompurify to v3 ([#5130](https://github.com/homarr-labs/homarr/issues/5130)) ([cfaf82c](https://github.com/homarr-labs/homarr/commit/cfaf82cd04e4659db50e6074fce4cc739ee2aaf8))
+* **deps:** update dependency jotai to ^2.18.0 ([#5115](https://github.com/homarr-labs/homarr/issues/5115)) ([4aad087](https://github.com/homarr-labs/homarr/commit/4aad0873baec97167460bad1c69c770aecb38bd0))
+* **deps:** update dependency mysql2 to v3.17.2 ([#5104](https://github.com/homarr-labs/homarr/issues/5104)) ([15c7fc5](https://github.com/homarr-labs/homarr/commit/15c7fc5ae809b671c8d774d39b7a7fdf893db611))
+* **deps:** update dependency mysql2 to v3.17.3 ([#5116](https://github.com/homarr-labs/homarr/issues/5116)) ([42e5326](https://github.com/homarr-labs/homarr/commit/42e53261ef956a0f5ad60ac45c623d3acd3d9530))
+* **deps:** update dependency mysql2 to v3.17.4 ([#5123](https://github.com/homarr-labs/homarr/issues/5123)) ([7ca38c3](https://github.com/homarr-labs/homarr/commit/7ca38c3a781d54f91d01844e077528345a9b190b))
+* **deps:** update dependency next-intl to v4.8.3 ([#5100](https://github.com/homarr-labs/homarr/issues/5100)) ([d67c2db](https://github.com/homarr-labs/homarr/commit/d67c2db886b92e7d0973bf17ff5059b8328acdf6))
+* **deps:** update dependency swagger-ui-react to ^5.31.1 ([#5101](https://github.com/homarr-labs/homarr/issues/5101)) ([210d46b](https://github.com/homarr-labs/homarr/commit/210d46b43ffeb956af3f983a82772609e42f08df))
+* **deps:** update dependency swagger-ui-react to ^5.31.2 ([#5124](https://github.com/homarr-labs/homarr/issues/5124)) ([51585c6](https://github.com/homarr-labs/homarr/commit/51585c6413ab3841f0bee1e736d726081912ab08))
+* **deps:** update dependency typescript-eslint to ^8.56.0 ([#5103](https://github.com/homarr-labs/homarr/issues/5103)) ([8bac6e1](https://github.com/homarr-labs/homarr/commit/8bac6e1c5a239108bc48fd877b3fc1ec8b445109))
+* **deps:** update mantine monorepo to ^8.3.15 ([#5099](https://github.com/homarr-labs/homarr/issues/5099)) ([b8f9b4c](https://github.com/homarr-labs/homarr/commit/b8f9b4cf1d870956806a68ad78a95af60c99975f))
+* **deps:** update testcontainers-node monorepo to ^11.12.0 ([#5110](https://github.com/homarr-labs/homarr/issues/5110)) ([e3c8174](https://github.com/homarr-labs/homarr/commit/e3c8174bdcb95de8e731c79c2b4bebce98d6dbce))
+* **deps:** update tiptap monorepo to v3.20.0 ([#5112](https://github.com/homarr-labs/homarr/issues/5112)) ([3d2bc82](https://github.com/homarr-labs/homarr/commit/3d2bc82a33a88a8f2d60fd61112f1f712e956670))
+
+## [1.53.2](https://github.com/homarr-labs/homarr/compare/v1.53.1...v1.53.2) (2026-02-20)
+
+### Bug Fixes
+
+* **analytics:** restrict publishing to every week ([#5028](https://github.com/homarr-labs/homarr/issues/5028)) ([8c4be2f](https://github.com/homarr-labs/homarr/commit/8c4be2fbe80e42472b8b17542a4282ec26d1fefe))
+* **deps:** update dependency @tanstack/react-query to ^5.90.21 ([#5067](https://github.com/homarr-labs/homarr/issues/5067)) ([1b8dde9](https://github.com/homarr-labs/homarr/commit/1b8dde98d2518d3d82895a26a58db7f42abf2a6e))
+* **deps:** update dependency dotenv to ^17.3.0 ([#5079](https://github.com/homarr-labs/homarr/issues/5079)) ([1e822fb](https://github.com/homarr-labs/homarr/commit/1e822fbe0c8224e6ba5b99e6516ea4437c9f36bb))
+* **deps:** update dependency dotenv to ^17.3.1 ([#5081](https://github.com/homarr-labs/homarr/issues/5081)) ([46ba48f](https://github.com/homarr-labs/homarr/commit/46ba48fb20b69b2876fc42ee862a64717e6428f7))
+* **deps:** update dependency drizzle-kit to ^0.31.9 ([#5059](https://github.com/homarr-labs/homarr/issues/5059)) ([db14d98](https://github.com/homarr-labs/homarr/commit/db14d98d1966dada5d74507e64e90f34fb4eee60))
+* **deps:** update dependency fast-xml-parser to ^5.3.6 ([#5089](https://github.com/homarr-labs/homarr/issues/5089)) ([ac5bc70](https://github.com/homarr-labs/homarr/commit/ac5bc70a5de9a4307c4165203ff26ee1a112ca81))
+* **deps:** update dependency glob to ^13.0.2 ([#5065](https://github.com/homarr-labs/homarr/issues/5065)) ([50601d5](https://github.com/homarr-labs/homarr/commit/50601d53792baae5a259adb4e4d3fefcc35d25df))
+* **deps:** update dependency glob to ^13.0.3 ([#5078](https://github.com/homarr-labs/homarr/issues/5078)) ([ba0ed77](https://github.com/homarr-labs/homarr/commit/ba0ed77bb036dd0e35db08ce9df98f133f835d53))
+* **deps:** update dependency ioredis to v5.9.3 ([#5076](https://github.com/homarr-labs/homarr/issues/5076)) ([4e1baa5](https://github.com/homarr-labs/homarr/commit/4e1baa570324be06eb442f2db08a8b152d9b416b))
+* **deps:** update dependency mysql2 to v3.17.0 ([#5066](https://github.com/homarr-labs/homarr/issues/5066)) ([fcb020c](https://github.com/homarr-labs/homarr/commit/fcb020c191b98a729508b7660fb484f29208c51c))
+* **deps:** update dependency mysql2 to v3.17.1 ([#5082](https://github.com/homarr-labs/homarr/issues/5082)) ([475f14d](https://github.com/homarr-labs/homarr/commit/475f14dc312c1b8cffbabe607c17be8b2d1d294c))
+* **deps:** update dependency react-error-boundary to ^6.1.1 ([#5086](https://github.com/homarr-labs/homarr/issues/5086)) ([bb9da30](https://github.com/homarr-labs/homarr/commit/bb9da3007e4f29fd7993bd9960e80e316a17bbf0))
+* **deps:** update dependency tsdav to ^2.1.8 ([#5090](https://github.com/homarr-labs/homarr/issues/5090)) ([840d110](https://github.com/homarr-labs/homarr/commit/840d1107ec3392b4581c931ef1efe2d9816ededd))
+* **deps:** update dependency typescript-eslint to ^8.55.0 ([#5061](https://github.com/homarr-labs/homarr/issues/5061)) ([56ecce2](https://github.com/homarr-labs/homarr/commit/56ecce254195c480eef9cefefd7bad98c49b9175))
+* **deps:** update trpc monorepo to ^11.10.0 ([#5062](https://github.com/homarr-labs/homarr/issues/5062)) ([bc7ec63](https://github.com/homarr-labs/homarr/commit/bc7ec63f8547e8f868ef5d56a1a8c5c893fda1e3))
+* **deps:** update turbo monorepo to ^2.8.5 ([#5064](https://github.com/homarr-labs/homarr/issues/5064)) ([c36e947](https://github.com/homarr-labs/homarr/commit/c36e947935246761cac26049ac24c56c8cc0990a))
+* **deps:** update turbo monorepo to ^2.8.7 ([#5071](https://github.com/homarr-labs/homarr/issues/5071)) ([c6c48ea](https://github.com/homarr-labs/homarr/commit/c6c48ea6e5f76303fd93022fd566a99af1ad829f))
+* **deps:** update turbo monorepo to ^2.8.8 ([#5084](https://github.com/homarr-labs/homarr/issues/5084)) ([dcae437](https://github.com/homarr-labs/homarr/commit/dcae437fc5cadc2e112037fa26f8351111c69869))
+* **deps:** update turbo monorepo to ^2.8.9 ([#5092](https://github.com/homarr-labs/homarr/issues/5092)) ([24560cb](https://github.com/homarr-labs/homarr/commit/24560cb93f17767b5ab8047c07f81a165e0fb769))
+
+## [1.53.1](https://github.com/homarr-labs/homarr/compare/v1.53.0...v1.53.1) (2026-02-13)
+
+### Bug Fixes
+
+* **deps:** update dependency @ianvs/prettier-plugin-sort-imports to ^4.7.1 ([#5021](https://github.com/homarr-labs/homarr/issues/5021)) ([5946e6c](https://github.com/homarr-labs/homarr/commit/5946e6c7193eded77b98c76aedff71a7bb912574))
+* **deps:** update dependency @octokit/auth-app to ^8.2.0 ([#5009](https://github.com/homarr-labs/homarr/issues/5009)) ([4a86361](https://github.com/homarr-labs/homarr/commit/4a86361134da404462b1a9f8ff98fe3504fade0d))
+* **deps:** update dependency dotenv to ^17.2.4 ([#5029](https://github.com/homarr-labs/homarr/issues/5029)) ([e8c7f45](https://github.com/homarr-labs/homarr/commit/e8c7f454768044540ee37d75fc73654b74315390))
+* **deps:** update dependency fast-xml-parser to ^5.3.5 ([#5050](https://github.com/homarr-labs/homarr/issues/5050)) ([30f561f](https://github.com/homarr-labs/homarr/commit/30f561f85ad2abb90ccb9fa3292155d51f1f379b))
+* **deps:** update dependency fastify to ^5.7.4 ([#5027](https://github.com/homarr-labs/homarr/issues/5027)) ([18e16d6](https://github.com/homarr-labs/homarr/commit/18e16d687f8137e5b5c55cf2385436b714a2d27b))
+* **deps:** update dependency glob to ^13.0.1 ([#5013](https://github.com/homarr-labs/homarr/issues/5013)) ([3b21c3e](https://github.com/homarr-labs/homarr/commit/3b21c3ef765add0f7cdc8f66ae8f1b7aac3cf51e))
+* **deps:** update dependency isomorphic-dompurify to ^2.36.0 ([#5041](https://github.com/homarr-labs/homarr/issues/5041)) ([e561fc5](https://github.com/homarr-labs/homarr/commit/e561fc550fab2207212ae108a5177a248795cf66))
+* **deps:** update dependency jotai to ^2.17.1 ([#5019](https://github.com/homarr-labs/homarr/issues/5019)) ([da96566](https://github.com/homarr-labs/homarr/commit/da965668d021ebebd8c8a7e2a4560577a6b0828b))
+* **deps:** update dependency ldapts to v8.1.5 ([#5004](https://github.com/homarr-labs/homarr/issues/5004)) ([c3932b1](https://github.com/homarr-labs/homarr/commit/c3932b18f03b86e8ee049c14ace63119fd2ab0d6))
+* **deps:** update dependency ldapts to v8.1.6 ([#5018](https://github.com/homarr-labs/homarr/issues/5018)) ([c92d487](https://github.com/homarr-labs/homarr/commit/c92d487ceaa9159579ef4352d763429887953bb5))
+* **deps:** update dependency mysql2 to v3.16.3 ([#5014](https://github.com/homarr-labs/homarr/issues/5014)) ([04b3598](https://github.com/homarr-labs/homarr/commit/04b35980f5997e744a455a847f28b1a676f9861e))
+* **deps:** update dependency next-intl to v4.8.2 ([#5005](https://github.com/homarr-labs/homarr/issues/5005)) ([b67fecd](https://github.com/homarr-labs/homarr/commit/b67fecd3963bc3112ab8ecd91385bbe13c982290))
+* **deps:** update dependency tsdav to ^2.1.7 ([#5033](https://github.com/homarr-labs/homarr/issues/5033)) ([d694b1a](https://github.com/homarr-labs/homarr/commit/d694b1a5410833a791d57fb3dd4650003510140e))
+* **deps:** update dependency video.js to ^8.23.7 ([#5034](https://github.com/homarr-labs/homarr/issues/5034)) ([6efabd4](https://github.com/homarr-labs/homarr/commit/6efabd436849b9fdea0d060fe7beaa9c67424c29))
+* **deps:** update tiptap monorepo to v3.19.0 ([#5012](https://github.com/homarr-labs/homarr/issues/5012)) ([ad41a91](https://github.com/homarr-labs/homarr/commit/ad41a918ef72f322015a02e9601c43728e680b34))
+* **deps:** update turbo monorepo to ^2.8.2 ([#5010](https://github.com/homarr-labs/homarr/issues/5010)) ([b479fea](https://github.com/homarr-labs/homarr/commit/b479fea6eb0b025b55668201160a5e57267de2e7))
+* **deps:** update turbo monorepo to ^2.8.3 ([#5016](https://github.com/homarr-labs/homarr/issues/5016)) ([f1d2f07](https://github.com/homarr-labs/homarr/commit/f1d2f07f3888e7567b56ae61a9d137255a2b8529))
+* **sections:** dynamic sections vanish when adding category ([#5046](https://github.com/homarr-labs/homarr/issues/5046)) ([60fcb71](https://github.com/homarr-labs/homarr/commit/60fcb71bd2616af3e99b20cbbcd1b0417a0fff76))
+* **seerr:** use reasonable limits for amount of returned entries ([#5001](https://github.com/homarr-labs/homarr/issues/5001)) ([be1a26a](https://github.com/homarr-labs/homarr/commit/be1a26a98d2ed9d25969ded5ae64705c001f71dd))
+
+## [1.53.0](https://github.com/homarr-labs/homarr/compare/v1.52.0...v1.53.0) (2026-02-06)
+
+### Features
+
+* **analytics:** consolidate server analytics into single comprehensive Umami event ([#4938](https://github.com/homarr-labs/homarr/issues/4938)) ([10848db](https://github.com/homarr-labs/homarr/commit/10848db595b2254b1485ea168d1c327b907d9ff8))
+
+### Bug Fixes
+
+* **deps:** update dependency @next/eslint-plugin-next to v16.1.5 ([#4959](https://github.com/homarr-labs/homarr/issues/4959)) ([ec40309](https://github.com/homarr-labs/homarr/commit/ec40309cde2280cf689856d4f78fb1500b583130))
+* **deps:** update dependency @paralleldrive/cuid2 to ^3.3.0 ([#4952](https://github.com/homarr-labs/homarr/issues/4952)) ([a9db68b](https://github.com/homarr-labs/homarr/commit/a9db68bd3eaea6a4564cd6842054ea60cc45e3a3))
+* **deps:** update dependency @tanstack/react-query-devtools to ^5.91.3 ([#4985](https://github.com/homarr-labs/homarr/issues/4985)) ([1115ad1](https://github.com/homarr-labs/homarr/commit/1115ad1364bca84dee33aa42499c986bdad2c528))
+* **deps:** update dependency fast-xml-parser to ^5.3.4 ([#4982](https://github.com/homarr-labs/homarr/issues/4982)) ([460d53c](https://github.com/homarr-labs/homarr/commit/460d53cafa1abeebf4dea7b1bb1e920267c2f9fe))
+* **deps:** update dependency fastify to ^5.7.2 ([#4955](https://github.com/homarr-labs/homarr/issues/4955)) ([0eab26c](https://github.com/homarr-labs/homarr/commit/0eab26cdace47c0b19519372a3daa6998e0c8207))
+* **deps:** update dependency jotai to ^2.17.0 ([#4972](https://github.com/homarr-labs/homarr/issues/4972)) ([e67483f](https://github.com/homarr-labs/homarr/commit/e67483fea56f0b06fa54e68b8dd62fd0b5dedadd))
+* **deps:** update dependency ldapts to v8.1.4 ([#4993](https://github.com/homarr-labs/homarr/issues/4993)) ([c2d9f18](https://github.com/homarr-labs/homarr/commit/c2d9f18e4ef28f063e4abf1175cd90ba746410b7))
+* **deps:** update dependency mysql2 to v3.16.2 ([#4961](https://github.com/homarr-labs/homarr/issues/4961)) ([5c6eafb](https://github.com/homarr-labs/homarr/commit/5c6eafb272436b78d4668d562d50001bca48e6d3))
+* **deps:** update dependency next-intl to v4.8.0 ([#4977](https://github.com/homarr-labs/homarr/issues/4977)) ([c3a7ab5](https://github.com/homarr-labs/homarr/commit/c3a7ab52ee3acbcf47255d5813317c3cf67ea49f))
+* **deps:** update dependency next-intl to v4.8.1 ([#4986](https://github.com/homarr-labs/homarr/issues/4986)) ([62b6939](https://github.com/homarr-labs/homarr/commit/62b6939b92f29618cc6d13a189b65df1922779ba))
+* **deps:** update dependency pg to ^8.18.0 ([#4989](https://github.com/homarr-labs/homarr/issues/4989)) ([c3071a3](https://github.com/homarr-labs/homarr/commit/c3071a3c95f3a30438050aa37c65950cccabf681))
+* **deps:** update dependency typescript-eslint to ^8.54.0 ([#4958](https://github.com/homarr-labs/homarr/issues/4958)) ([e88d126](https://github.com/homarr-labs/homarr/commit/e88d126355b96ac5060b552047c191f8b284461c))
+* **deps:** update dependency video.js to ^8.23.6 ([#4992](https://github.com/homarr-labs/homarr/issues/4992)) ([4209f7c](https://github.com/homarr-labs/homarr/commit/4209f7c70e75870f56b93a97f3b6053962ee3ff7))
+* **deps:** update mantine monorepo to ^8.3.14 ([#4998](https://github.com/homarr-labs/homarr/issues/4998)) ([0fafa50](https://github.com/homarr-labs/homarr/commit/0fafa505ac1c7f4ddb33ee5e8dedca9a883164ba))
+* **deps:** update nextjs monorepo to v16.1.6 ([#4969](https://github.com/homarr-labs/homarr/issues/4969)) ([7c3fe3d](https://github.com/homarr-labs/homarr/commit/7c3fe3d6d47879c67950b3dc4d7e39adbc06c146))
+* **deps:** update react monorepo to v19.2.4 ([#4960](https://github.com/homarr-labs/homarr/issues/4960)) ([d3e0b47](https://github.com/homarr-labs/homarr/commit/d3e0b47875998fc766e1c5f0481244fc659b0c49))
+* **deps:** update tiptap monorepo to v3.18.0 ([#4975](https://github.com/homarr-labs/homarr/issues/4975)) ([24e24dc](https://github.com/homarr-labs/homarr/commit/24e24dc634a9e5a25ab934541225996e62ac31be))
+* **deps:** update trpc monorepo to ^11.9.0 ([#4970](https://github.com/homarr-labs/homarr/issues/4970)) ([aeb6e0f](https://github.com/homarr-labs/homarr/commit/aeb6e0f40659bf1c514380a6c96858afdaf7e6db))
+* **deps:** update turbo monorepo to ^2.8.0 ([#4978](https://github.com/homarr-labs/homarr/issues/4978)) ([054ca57](https://github.com/homarr-labs/homarr/commit/054ca57188656ddac7aaa16f792269eaa2ef319b))
+* **deps:** update turbo monorepo to ^2.8.1 ([#4991](https://github.com/homarr-labs/homarr/issues/4991)) ([43b6246](https://github.com/homarr-labs/homarr/commit/43b6246876debccbe7239c8ee67753e17527e469))
+
+## [1.52.0](https://github.com/homarr-labs/homarr/compare/v1.51.0...v1.52.0) (2026-01-30)
+
+### Features
+
+* **installations:** support docker secrets file for encryption key ([#4946](https://github.com/homarr-labs/homarr/issues/4946)) ([9ba8213](https://github.com/homarr-labs/homarr/commit/9ba82133da2ae472952358f84d8ee1758c0f108a))
+
+### Bug Fixes
+
+* **deps:** update dependency @tanstack/react-query to ^5.90.20 ([#4939](https://github.com/homarr-labs/homarr/issues/4939)) ([840940b](https://github.com/homarr-labs/homarr/commit/840940bab663e728b8516ac48f913fef2b5c61b7))
+* **deps:** update dependency next to v16.1.5 [security] ([#4937](https://github.com/homarr-labs/homarr/issues/4937)) ([aeb1df1](https://github.com/homarr-labs/homarr/commit/aeb1df122926c7bed71bea9b21f1c42c45cc9b3e))
+* **deps:** update dependency pg to ^8.17.2 ([#4916](https://github.com/homarr-labs/homarr/issues/4916)) ([a50a29a](https://github.com/homarr-labs/homarr/commit/a50a29a778689efcca0afc2b640fdb497e6e7d98))
+* **deps:** update dependency prettier to ^3.8.1 ([#4925](https://github.com/homarr-labs/homarr/issues/4925)) ([a727b8e](https://github.com/homarr-labs/homarr/commit/a727b8e323b9fb7cba536909a51fabde0a992a69))
+* **deps:** update dependency sass to ^1.97.3 ([#4927](https://github.com/homarr-labs/homarr/issues/4927)) ([b1658a5](https://github.com/homarr-labs/homarr/commit/b1658a5d01b5c12f391af9d326ec98b3da000f9e))
+* **deps:** update dependency typescript-eslint to ^8.53.1 ([#4904](https://github.com/homarr-labs/homarr/issues/4904)) ([c58da00](https://github.com/homarr-labs/homarr/commit/c58da0095738352515d6d8c5e81b3c34c8726ffe))
+* **deps:** update mantine monorepo to ^8.3.13 ([#4911](https://github.com/homarr-labs/homarr/issues/4911)) ([f2eec74](https://github.com/homarr-labs/homarr/commit/f2eec748494480e773b45a309aa89ae3862e2b05))
+* **deps:** update nextjs monorepo to v16.1.4 ([#4909](https://github.com/homarr-labs/homarr/issues/4909)) ([99a2574](https://github.com/homarr-labs/homarr/commit/99a2574d80ad5a7dfe3b9c92d43bd4b9423bf22d))
+* **deps:** update tiptap monorepo to v3.16.0 ([#4912](https://github.com/homarr-labs/homarr/issues/4912)) ([2354510](https://github.com/homarr-labs/homarr/commit/23545101b61e456fd886eedb4b3d86b8cc606639))
+* **deps:** update tiptap monorepo to v3.17.0 ([#4940](https://github.com/homarr-labs/homarr/issues/4940)) ([d030261](https://github.com/homarr-labs/homarr/commit/d03026187cb6451d727167b02ac138f9c7ccc754))
+* **deps:** update tiptap monorepo to v3.17.1 ([#4945](https://github.com/homarr-labs/homarr/issues/4945)) ([b354085](https://github.com/homarr-labs/homarr/commit/b354085c7adfb6e5f3cad51b5b825426e072e874))
+* **deps:** update turbo monorepo to ^2.7.6 ([#4947](https://github.com/homarr-labs/homarr/issues/4947)) ([e078237](https://github.com/homarr-labs/homarr/commit/e078237e31d11029987c6c4370fd8f65023b87bc))
+
+## [1.51.0](https://github.com/homarr-labs/homarr/compare/v1.50.1...v1.51.0) (2026-01-23)
+
+### Features
+
+* **integrations:** add Coolify integration and widget ([#4789](https://github.com/homarr-labs/homarr/issues/4789)) ([81dac58](https://github.com/homarr-labs/homarr/commit/81dac580050a86e34135beef09b876089777f1c7))
+* **widgets:** add disks widget ([#4445](https://github.com/homarr-labs/homarr/issues/4445)) ([62caa71](https://github.com/homarr-labs/homarr/commit/62caa71a48c38f59f109666e83f26019586a5ca0))
+
+### Bug Fixes
+
+* **deps:** update dependency @tanstack/react-query to ^5.90.17 ([#4873](https://github.com/homarr-labs/homarr/issues/4873)) ([624bd55](https://github.com/homarr-labs/homarr/commit/624bd55b117b2b9f9109aecdeabf1515c567656e))
+* **deps:** update dependency @tanstack/react-query to ^5.90.19 ([#4888](https://github.com/homarr-labs/homarr/issues/4888)) ([fa84bd5](https://github.com/homarr-labs/homarr/commit/fa84bd569fdf6c9aecfcb9b4d8fb20d14215160b))
+* **deps:** update dependency better-sqlite3 to ^12.6.0 ([#4853](https://github.com/homarr-labs/homarr/issues/4853)) ([9d4fb9e](https://github.com/homarr-labs/homarr/commit/9d4fb9eb462a0297618c70f619618f94d8857e1f))
+* **deps:** update dependency better-sqlite3 to ^12.6.2 ([#4891](https://github.com/homarr-labs/homarr/issues/4891)) ([63a0793](https://github.com/homarr-labs/homarr/commit/63a0793c6ea02456a49a07635b927adf3a314ee0))
+* **deps:** update dependency fastify to ^5.7.0 ([#4882](https://github.com/homarr-labs/homarr/issues/4882)) ([b9bc9dd](https://github.com/homarr-labs/homarr/commit/b9bc9dd38d22f03a0faa59a68056192c3f1519d4))
+* **deps:** update dependency fastify to ^5.7.1 ([#4887](https://github.com/homarr-labs/homarr/issues/4887)) ([02e722a](https://github.com/homarr-labs/homarr/commit/02e722aa4531e816bb563628ebbb7e8b0cf93ce3))
+* **deps:** update dependency ioredis to v5.9.2 ([#4881](https://github.com/homarr-labs/homarr/issues/4881)) ([e3ba1ee](https://github.com/homarr-labs/homarr/commit/e3ba1ee931b0e53fb94bf0e50fae81eecfade237))
+* **deps:** update dependency jotai to ^2.16.2 ([#4869](https://github.com/homarr-labs/homarr/issues/4869)) ([2e58acc](https://github.com/homarr-labs/homarr/commit/2e58acc3bd5da474bfe0636a58b43759947ef2d2))
+* **deps:** update dependency mysql2 to v3.16.1 ([#4886](https://github.com/homarr-labs/homarr/issues/4886)) ([40ee667](https://github.com/homarr-labs/homarr/commit/40ee667832124075b0730a54a4b8019365ab8794))
+* **deps:** update dependency pg to ^8.17.0 ([#4874](https://github.com/homarr-labs/homarr/issues/4874)) ([b923891](https://github.com/homarr-labs/homarr/commit/b923891fac4cd61c5a1a8505d5bcfb737255196f))
+* **deps:** update dependency pg to ^8.17.1 ([#4877](https://github.com/homarr-labs/homarr/issues/4877)) ([fcd4171](https://github.com/homarr-labs/homarr/commit/fcd417198f4a1afc250455bf25594a32f61b1070))
+* **deps:** update dependency prettier to ^3.8.0 ([#4876](https://github.com/homarr-labs/homarr/issues/4876)) ([3ade915](https://github.com/homarr-labs/homarr/commit/3ade915d35540578a7f193baf99cbdbf89103b97))
+* **deps:** update dependency react-error-boundary to ^6.1.0 ([#4884](https://github.com/homarr-labs/homarr/issues/4884)) ([41b02b6](https://github.com/homarr-labs/homarr/commit/41b02b63d9a1f9b73cc54371bbc1b6161a4d76d0))
+* **deps:** update dependency typescript-eslint to ^8.53.0 ([#4863](https://github.com/homarr-labs/homarr/issues/4863)) ([e9020e6](https://github.com/homarr-labs/homarr/commit/e9020e68ecf9e33df983108e7ab239776874413c))
+* **deps:** update nextjs monorepo to v16.1.2 ([#4875](https://github.com/homarr-labs/homarr/issues/4875)) ([c6be8c5](https://github.com/homarr-labs/homarr/commit/c6be8c5475722e5a6dbc886e5e7f24ef8a04c470))
+* **deps:** update nextjs monorepo to v16.1.3 ([#4889](https://github.com/homarr-labs/homarr/issues/4889)) ([5a8e864](https://github.com/homarr-labs/homarr/commit/5a8e864630b61595b53a9e849973460ffdce5fd2))
+* **deps:** update turbo monorepo to ^2.7.4 ([#4861](https://github.com/homarr-labs/homarr/issues/4861)) ([0c38e2f](https://github.com/homarr-labs/homarr/commit/0c38e2f290fc6dcb9608b338ee38409afb3beabe))
+* **deps:** update turbo monorepo to ^2.7.5 ([#4892](https://github.com/homarr-labs/homarr/issues/4892)) ([c847f60](https://github.com/homarr-labs/homarr/commit/c847f6004dc4c166969ee1248ec64b7d27ba8362))
+
+### Performance Improvements
+
+* **memory:** lazy routers ([#4868](https://github.com/homarr-labs/homarr/issues/4868)) ([1623fba](https://github.com/homarr-labs/homarr/commit/1623fbaaeb41b16e13dcd401a00f70711a283bf9))
+
+## [1.50.1](https://github.com/homarr-labs/homarr/compare/v1.50.0...v1.50.1) (2026-01-16)
+
+### Bug Fixes
+
+* **deps:** update dependency ioredis to v5.9.0 ([#4827](https://github.com/homarr-labs/homarr/issues/4827)) ([155d4f2](https://github.com/homarr-labs/homarr/commit/155d4f2270b3b35c4ad696499b0aaa0b10100989))
+* **deps:** update dependency ioredis to v5.9.1 ([#4844](https://github.com/homarr-labs/homarr/issues/4844)) ([5d00642](https://github.com/homarr-labs/homarr/commit/5d006422688cf3fe7440ae3ab66ad3b2cc9286a8))
+* **deps:** update dependency ldapts to v8.1.3 ([#4841](https://github.com/homarr-labs/homarr/issues/4841)) ([7fa9907](https://github.com/homarr-labs/homarr/commit/7fa990712bddc88bbb3bbe01e758bfef7cb4dea3))
+* **deps:** update dependency react-error-boundary to ^6.0.2 ([#4821](https://github.com/homarr-labs/homarr/issues/4821)) ([e9ba102](https://github.com/homarr-labs/homarr/commit/e9ba102cf668c0ef54628d3dbc6e6cbda2d059b5))
+* **deps:** update dependency react-error-boundary to ^6.0.3 ([#4847](https://github.com/homarr-labs/homarr/issues/4847)) ([c24006d](https://github.com/homarr-labs/homarr/commit/c24006dca691f26a7187c0ba112d9ed2ec424bb0))
+* **deps:** update dependency sass to ^1.97.2 ([#4835](https://github.com/homarr-labs/homarr/issues/4835)) ([07ba531](https://github.com/homarr-labs/homarr/commit/07ba53165c90d675aa54c5ad3fca930fef5cd35e))
+* **deps:** update dependency typescript-eslint to ^8.52.0 ([#4830](https://github.com/homarr-labs/homarr/issues/4830)) ([fa8af6a](https://github.com/homarr-labs/homarr/commit/fa8af6a453b846af2305db3c318c8c1c303a3a88))
+* **deps:** update dependency undici to v7.17.0 ([#4826](https://github.com/homarr-labs/homarr/issues/4826)) ([21a91b1](https://github.com/homarr-labs/homarr/commit/21a91b1489ff1a1f0a1428a3f50f00db8932da72))
+* **deps:** update dependency undici to v7.18.0 ([#4829](https://github.com/homarr-labs/homarr/issues/4829)) ([b76ab29](https://github.com/homarr-labs/homarr/commit/b76ab2961d84081c9ef04d76193f21a1068e72d9))
+* **deps:** update dependency undici to v7.18.2 ([#4837](https://github.com/homarr-labs/homarr/issues/4837)) ([16733c2](https://github.com/homarr-labs/homarr/commit/16733c2a0efabcbc5b693a8b6f82833f6fc344b7))
+* **deps:** update dependency ws to ^8.19.0 ([#4833](https://github.com/homarr-labs/homarr/issues/4833)) ([629359e](https://github.com/homarr-labs/homarr/commit/629359e3e44ddad880842cfd576edb514f80d61a))
+* **deps:** update mantine monorepo to ^8.3.11 ([#4822](https://github.com/homarr-labs/homarr/issues/4822)) ([0364e10](https://github.com/homarr-labs/homarr/commit/0364e102cd6c0f560bc49e0b9ccd71df0b75eed6))
+* **deps:** update mantine monorepo to ^8.3.12 ([#4848](https://github.com/homarr-labs/homarr/issues/4848)) ([275a346](https://github.com/homarr-labs/homarr/commit/275a346afaaebfa894ef2193f70966986a138dbb))
+* **deps:** update tiptap monorepo to v3.15.0 ([#4832](https://github.com/homarr-labs/homarr/issues/4832)) ([ab3ee4f](https://github.com/homarr-labs/homarr/commit/ab3ee4f78a739bdb3b49a81652420df6ec143b62))
+* **deps:** update tiptap monorepo to v3.15.1 ([#4838](https://github.com/homarr-labs/homarr/issues/4838)) ([d479b63](https://github.com/homarr-labs/homarr/commit/d479b63a803f2295ccdf20fcd31c418a4aab148c))
+* **deps:** update tiptap monorepo to v3.15.2 ([#4842](https://github.com/homarr-labs/homarr/issues/4842)) ([55c2666](https://github.com/homarr-labs/homarr/commit/55c2666f9d27ca34b6d028070f0d7b84e4c40e97))
+* **deps:** update tiptap monorepo to v3.15.3 ([#4843](https://github.com/homarr-labs/homarr/issues/4843)) ([b26cf0e](https://github.com/homarr-labs/homarr/commit/b26cf0e65fd8150e241465628df2cb8b5a72088e))
+* **deps:** update turbo monorepo to ^2.7.3 ([#4831](https://github.com/homarr-labs/homarr/issues/4831)) ([50410fe](https://github.com/homarr-labs/homarr/commit/50410fedb3f33ed131f923257e61ae2dca4e0288))
+
 ## [1.50.0](https://github.com/homarr-labs/homarr/compare/v1.49.1...v1.50.0) (2026-01-09)
 
 ### Features

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.12.0-alpine AS base
+FROM node:24.14.0-alpine AS base
 
 FROM base AS builder
 RUN apk add --no-cache libc6-compat
@@ -43,8 +43,7 @@ RUN mkdir -p /var/cache/nginx && \
 COPY --from=builder /app/apps/nextjs/next.config.ts .
 COPY --from=builder /app/apps/nextjs/package.json .
 
-COPY --from=builder /app/apps/tasks/tasks.cjs ./apps/tasks/tasks.cjs
-COPY --from=builder /app/apps/websocket/wssServer.cjs ./apps/websocket/wssServer.cjs
+COPY --from=builder /app/apps/nextjs/customServer.cjs ./apps/nextjs/customServer.cjs
 COPY --from=builder /app/node_modules/better-sqlite3/build/Release/better_sqlite3.node /app/build/better_sqlite3.node
 
 COPY --from=builder /app/packages/db/migrations ./db/migrations

apps/nextjs/package.json

@@ -4,12 +4,13 @@
   "private": true,
   "type": "module",
   "scripts": {
-    "build": "pnpm with-env next build",
+    "build": "pnpm with-env next build && pnpm build:custom-server",
+    "build:custom-server": "esbuild server.ts --bundle --platform=node --outfile=customServer.cjs --external:next --external:fastify --external:bcrypt --external:@opentelemetry/api --external:deasync --external:cpu-features --loader:.html=text --loader:.scss=text --loader:.node=text",
     "clean": "git clean -xdf .next .turbo node_modules",
-    "dev": "pnpm with-env next dev",
+    "dev": "pnpm with-env tsx ./server.ts",
     "format": "prettier --check . --ignore-path ../../.gitignore",
     "lint": "eslint",
-    "start": "pnpm with-env next start",
+    "start": "pnpm with-env node customServer.cjs",
     "typecheck": "tsc --noEmit",
     "with-env": "dotenv -e ../../.env --"
   },
@@ -25,7 +26,10 @@
     "@homarr/boards": "workspace:^0.1.0",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
+    "@homarr/cron-job-api": "workspace:^0.1.0",
     "@homarr/cron-job-status": "workspace:^0.1.0",
+    "@homarr/cron-jobs": "workspace:^0.1.0",
+    "@homarr/cron-jobs-core": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
     "@homarr/definitions": "workspace:^0.1.0",
     "@homarr/docker": "workspace:^0.1.0",
@@ -40,7 +44,9 @@
     "@homarr/notifications": "workspace:^0.1.0",
     "@homarr/old-import": "workspace:^0.1.0",
     "@homarr/old-schema": "workspace:^0.1.0",
+    "@homarr/ping": "workspace:^0.1.0",
     "@homarr/redis": "workspace:^0.1.0",
+    "@homarr/request-handler": "workspace:^0.1.0",
     "@homarr/server-settings": "workspace:^0.1.0",
     "@homarr/settings": "workspace:^0.1.0",
     "@homarr/spotlight": "workspace:^0.1.0",
@@ -48,21 +54,21 @@
     "@homarr/ui": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@homarr/widgets": "workspace:^0.1.0",
-    "@mantine/colors-generator": "^8.3.10",
-    "@mantine/core": "^8.3.10",
-    "@mantine/dropzone": "^8.3.10",
-    "@mantine/hooks": "^8.3.10",
-    "@mantine/modals": "^8.3.10",
-    "@mantine/tiptap": "^8.3.10",
+    "@mantine/colors-generator": "^8.3.16",
+    "@mantine/core": "^8.3.16",
+    "@mantine/dropzone": "^8.3.16",
+    "@mantine/hooks": "^8.3.16",
+    "@mantine/modals": "^8.3.16",
+    "@mantine/tiptap": "^8.3.16",
     "@million/lint": "1.0.14",
-    "@tabler/icons-react": "^3.36.1",
-    "@tanstack/react-query": "^5.90.16",
-    "@tanstack/react-query-devtools": "^5.91.2",
+    "@tabler/icons-react": "^3.40.0",
+    "@tanstack/react-query": "^5.90.21",
+    "@tanstack/react-query-devtools": "^5.91.3",
     "@tanstack/react-query-next-experimental": "^5.91.0",
-    "@trpc/client": "^11.8.1",
-    "@trpc/next": "^11.8.1",
-    "@trpc/react-query": "^11.8.1",
-    "@trpc/server": "^11.8.1",
+    "@trpc/client": "^11.12.0",
+    "@trpc/next": "^11.12.0",
+    "@trpc/react-query": "^11.12.0",
+    "@trpc/server": "^11.12.0",
     "@xterm/addon-canvas": "^0.7.0",
     "@xterm/addon-fit": "0.11.0",
     "@xterm/xterm": "^6.0.0",
@@ -70,23 +76,25 @@
     "chroma-js": "^3.2.0",
     "clsx": "^2.1.1",
     "dayjs": "^1.11.19",
-    "dotenv": "^17.2.3",
+    "dotenv": "^17.3.1",
+    "fastify": "^5.7.4",
     "flag-icons": "^7.5.0",
-    "glob": "^13.0.0",
-    "isomorphic-dompurify": "^2.35.0",
-    "jotai": "^2.16.1",
+    "glob": "^13.0.6",
+    "isomorphic-dompurify": "^3.1.0",
+    "jotai": "^2.18.1",
     "mantine-react-table": "2.0.0-beta.9",
-    "next": "16.1.1",
+    "next": "16.1.6",
     "postcss-preset-mantine": "^1.18.0",
     "prismjs": "^1.30.0",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
-    "react-error-boundary": "^6.0.1",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "react-error-boundary": "^6.1.1",
     "react-simple-code-editor": "^0.14.1",
-    "sass": "^1.97.1",
+    "sass": "^1.97.3",
     "superjson": "2.2.6",
-    "swagger-ui-react": "^5.31.0",
+    "swagger-ui-react": "^5.32.0",
     "use-deep-compare-effect": "^1.8.1",
+    "ws": "^8.19.0",
     "zod": "^4.2.1"
   },
   "devDependencies": {
@@ -94,15 +102,18 @@
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/chroma-js": "3.1.2",
-    "@types/node": "^24.10.4",
-    "@types/prismjs": "^1.26.5",
-    "@types/react": "19.2.7",
+    "@types/node": "^24.12.0",
+    "@types/prismjs": "^1.26.6",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "@types/swagger-ui-react": "^5.18.0",
+    "@types/ws": "^8.18.1",
     "concurrently": "^9.2.1",
-    "eslint": "^9.39.2",
+    "esbuild": "^0.27.3",
+    "eslint": "^9.39.4",
     "node-loader": "^2.1.0",
-    "prettier": "^3.7.4",
+    "prettier": "^3.8.1",
+    "tsx": "4.20.4",
     "typescript": "^5.9.3"
   }
 }

apps/nextjs/server.ts

@@ -0,0 +1,318 @@
+// Must be imported first to set up globalThis.AsyncLocalStorage for Next.js
+import "next/dist/server/node-environment-baseline";
+
+// Set up undici HTTP agent override (from tasks app)
+import { setGlobalDispatcher } from "undici";
+import { UndiciHttpAgent } from "@homarr/core/infrastructure/http";
+setGlobalDispatcher(new UndiciHttpAgent());
+
+import { createServer } from "http";
+import path from "path";
+import next from "next";
+import { parse } from "url";
+import { applyWSSHandler } from "@trpc/server/adapters/ws";
+import { WebSocketServer } from "ws";
+import type { FastifyTRPCPluginOptions } from "@trpc/server/adapters/fastify";
+import { fastifyTRPCPlugin } from "@trpc/server/adapters/fastify";
+import fastify from "fastify";
+
+import { appRouter, createTRPCContext } from "@homarr/api/websocket";
+import { getSessionFromToken, sessionTokenCookieName } from "@homarr/auth";
+import { env as authEnv } from "@homarr/auth/env";
+import { parseCookies } from "@homarr/common";
+import { createLogger } from "@homarr/core/infrastructure/logs";
+import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
+import type { JobRouter } from "@homarr/cron-job-api";
+import { jobRouter } from "@homarr/cron-job-api";
+import { CRON_JOB_API_KEY_HEADER, CRON_JOB_API_PATH, CRON_JOB_API_PORT } from "@homarr/cron-job-api/constants";
+import { jobGroup } from "@homarr/cron-jobs";
+import { db, eq, inArray } from "@homarr/db";
+import { cronJobConfigurations, sessions, users } from "@homarr/db/schema";
+import { supportedAuthProviders } from "@homarr/definitions";
+import { updateCheckerRequestHandler } from "@homarr/request-handler/update-checker";
+import { schedule, validate as validateCron } from "node-cron";
+
+const logger = createLogger({ module: "customServer" });
+
+// --- JobManager (from apps/tasks/src/job-manager.ts) ---
+import type { IJobManager } from "@homarr/cron-job-api";
+import type { jobGroup as CronJobGroup, JobGroupKeys } from "@homarr/cron-jobs";
+import type { Database, InferInsertModel } from "@homarr/db";
+
+class JobManager implements IJobManager {
+  constructor(
+    private db: Database,
+    private jobGroup: typeof CronJobGroup,
+  ) {}
+
+  public async startAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.startAsync(name);
+  }
+  public async triggerAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.runManuallyAsync(name);
+  }
+  public async stopAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.stopAsync(name);
+  }
+  public async updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void> {
+    logger.info("Updating cron job interval", { name, expression: cron });
+    const job = this.jobGroup.getJobRegistry().get(name);
+    if (!job) throw new Error(`Job ${name} not found`);
+    if (!validateCron(cron)) {
+      throw new Error(`Invalid cron expression: ${cron}`);
+    }
+    if (job.preventCustomInterval && cron !== job.cronExpression) {
+      throw new Error(`Custom cron expressions are not allowed for job ${name}`);
+    }
+
+    await this.updateConfigurationAsync(name, { cronExpression: cron });
+    await this.jobGroup.getTask(name)?.destroy();
+
+    this.jobGroup.setTask(
+      name,
+      schedule(cron, () => void job.executeAsync(), {
+        name,
+      }),
+    );
+    logger.info("Cron job interval updated", { name, expression: cron });
+  }
+  public async disableAsync(name: JobGroupKeys): Promise<void> {
+    logger.info("Disabling cron job", { name });
+    const job = this.jobGroup.getJobRegistry().get(name);
+    if (!job) throw new Error(`Job ${name} not found`);
+
+    await this.updateConfigurationAsync(name, { isEnabled: false });
+    await this.jobGroup.stopAsync(name);
+    logger.info("Cron job disabled", { name });
+  }
+  public async enableAsync(name: JobGroupKeys): Promise<void> {
+    logger.info("Enabling cron job", { name });
+    await this.updateConfigurationAsync(name, { isEnabled: true });
+    await this.jobGroup.startAsync(name);
+    logger.info("Cron job enabled", { name });
+  }
+
+  private async updateConfigurationAsync(
+    name: JobGroupKeys,
+    configuration: Omit<Partial<InferInsertModel<typeof cronJobConfigurations>>, "name">,
+  ) {
+    const existingConfig = await this.db.query.cronJobConfigurations.findFirst({
+      where: (table, { eq }) => eq(table.name, name),
+    });
+
+    if (existingConfig) {
+      await this.db
+        .update(cronJobConfigurations)
+        .set({ ...configuration, name: undefined })
+        .where(eq(cronJobConfigurations.name, name));
+      return;
+    }
+
+    const job = this.jobGroup.getJobRegistry().get(name);
+    if (!job) throw new Error(`Job ${name} not found`);
+
+    await this.db.insert(cronJobConfigurations).values({
+      name,
+      cronExpression: configuration.cronExpression ?? job.cronExpression,
+      isEnabled: configuration.isEnabled ?? true,
+    });
+  }
+
+  public async getAllAsync(): Promise<
+    {
+      name: JobGroupKeys;
+      cron: string;
+      preventManualExecution: boolean;
+      preventCustomInterval: boolean;
+      isEnabled: boolean;
+    }[]
+  > {
+    const configurations = await this.db.query.cronJobConfigurations.findMany();
+
+    return [...this.jobGroup.getJobRegistry().entries()].map(([name, job]) => {
+      const config = configurations.find((config) => config.name === name);
+      return {
+        name,
+        cron: config?.cronExpression ?? job.cronExpression,
+        preventManualExecution: job.preventManualExecution,
+        preventCustomInterval: job.preventCustomInterval,
+        isEnabled: config?.isEnabled ?? true,
+      };
+    });
+  }
+}
+
+// --- On-start functions (from apps/tasks/src/on-start/) ---
+async function cleanupSessionsAsync() {
+  try {
+    const currentAuthProviders = authEnv.AUTH_PROVIDERS;
+    const inactiveAuthProviders = supportedAuthProviders.filter((provider) => !currentAuthProviders.includes(provider));
+    const subQuery = db
+      .select({ id: users.id })
+      .from(users)
+      .where(inArray(users.provider, inactiveAuthProviders))
+      .as("sq");
+    const sessionsWithInactiveProviders = await db
+      .select({ userId: sessions.userId })
+      .from(sessions)
+      .rightJoin(subQuery, eq(sessions.userId, subQuery.id));
+
+    const userIds = sessionsWithInactiveProviders.map(({ userId }) => userId).filter((value) => value !== null);
+    await db.delete(sessions).where(inArray(sessions.userId, userIds));
+
+    if (sessionsWithInactiveProviders.length > 0) {
+      logger.info("Deleted sessions for inactive providers", { count: userIds.length });
+    }
+  } catch (error) {
+    logger.error(new Error("Failed to clean up sessions", { cause: error }));
+  }
+}
+
+async function invalidateUpdateCheckerCacheAsync() {
+  try {
+    const handler = updateCheckerRequestHandler.handler({});
+    await handler.invalidateAsync();
+    logger.debug("Update checker cache invalidated");
+  } catch (error) {
+    logger.error(new Error("Failed to invalidate update checker cache", { cause: error }));
+  }
+}
+
+// --- Tasks/Cron Fastify server setup ---
+async function startTasksServer() {
+  const tasksLogger = createLogger({ module: "tasksMain" });
+
+  const tasksServer = fastify({ maxParamLength: 5000 });
+  tasksServer.register(fastifyTRPCPlugin, {
+    prefix: CRON_JOB_API_PATH,
+    trpcOptions: {
+      router: jobRouter,
+      createContext: ({ req }) => ({
+        manager: new JobManager(db, jobGroup),
+        apiKey: req.headers[CRON_JOB_API_KEY_HEADER] as string | undefined,
+      }),
+      onError({ path, error }) {
+        tasksLogger.error(new ErrorWithMetadata("Error in tasks tRPC handler", { path }, { cause: error }));
+      },
+    } satisfies FastifyTRPCPluginOptions<JobRouter>["trpcOptions"],
+  });
+
+  // Run on-start tasks
+  await cleanupSessionsAsync();
+  await invalidateUpdateCheckerCacheAsync();
+
+  // Initialize and start cron jobs
+  await jobGroup.initializeAsync();
+  await jobGroup.startAllAsync();
+
+  try {
+    await tasksServer.listen({ port: CRON_JOB_API_PORT });
+    tasksLogger.info("Tasks web server started successfully", { port: CRON_JOB_API_PORT });
+  } catch (err) {
+    tasksLogger.error(
+      new ErrorWithMetadata("Failed to start tasks web server", { port: CRON_JOB_API_PORT }, { cause: err }),
+    );
+  }
+
+  return tasksServer;
+}
+
+// --- Main server setup ---
+const dev = process.env.NODE_ENV !== "production";
+const hostname = process.env.HOSTNAME || "localhost";
+const port = parseInt(process.env.PORT || "3000", 10);
+// Resolve the directory of this file so Next.js can find the app/pages dirs
+const dir = path.resolve(__dirname);
+
+const app = next({ dev, hostname, port, dir });
+const handle = app.getRequestHandler();
+const upgradeHandler = app.getUpgradeHandler();
+
+app.prepare().then(async () => {
+  const server = createServer((req, res) => {
+    const parsedUrl = parse(req.url!, true);
+    handle(req, res, parsedUrl);
+  });
+
+  // Create WebSocket server in noServer mode so we handle upgrade manually
+  const wss = new WebSocketServer({ noServer: true });
+
+  const wssHandler = applyWSSHandler({
+    wss,
+    router: appRouter,
+    // eslint-disable-next-line no-restricted-syntax
+    createContext: async ({ req }) => {
+      try {
+        const headers = Object.entries(req.headers).map(
+          ([key, value]) => [key, typeof value === "string" ? value : value?.[0]] as [string, string],
+        );
+        const nextHeaders = new Headers(headers);
+
+        const store = parseCookies(nextHeaders.get("cookie") ?? "");
+        const sessionToken = store[sessionTokenCookieName];
+
+        const session = await getSessionFromToken(db, sessionToken);
+
+        return createTRPCContext({
+          headers: nextHeaders,
+          session,
+        });
+      } catch (error) {
+        logger.error(error);
+        return createTRPCContext({
+          headers: new Headers(),
+          session: null,
+        });
+      }
+    },
+    keepAlive: {
+      enabled: true,
+      pingMs: 30000,
+      pongWaitMs: 5000,
+    },
+  });
+
+  // Handle upgrade requests: route /websockets to our WS server,
+  // delegate everything else (e.g. HMR _next/webpack-hmr) to Next.js
+  server.on("upgrade", (req, socket, head) => {
+    if (req.url?.startsWith("/websockets")) {
+      wss.handleUpgrade(req, socket, head, (ws) => {
+        wss.emit("connection", ws, req);
+      });
+    } else {
+      upgradeHandler(req, socket, head);
+    }
+  });
+
+  wss.on("connection", (websocket, incomingMessage) => {
+    logger.info(`➕ Connection (${wss.clients.size}) ${incomingMessage.method} ${incomingMessage.url}`);
+    websocket.once("close", (code, reason) => {
+      logger.info(`➖ Connection (${wss.clients.size}) ${code} ${reason.toString()}`);
+    });
+  });
+
+  // Start the integrated tasks/cron server
+  const tasksServer = await startTasksServer();
+
+  server.once("error", (err) => {
+    logger.error(new ErrorWithMetadata("Server error", {}, { cause: err }));
+    wssHandler.broadcastReconnectNotification();
+    wss.close();
+    tasksServer.close().catch((closeError) => logger.error("Failed to close tasks server", closeError));
+    server.close(() => process.exit(1));
+  });
+
+  server.listen(port, () => {
+    logger.info(`✅ Custom server ready on http://${hostname}:${port}`);
+    logger.info(`✅ WebSocket Server integrated on ws://${hostname}:${port}/websockets`);
+    logger.info(`✅ Tasks/Cron server integrated on port ${CRON_JOB_API_PORT}`);
+  });
+
+  process.on("SIGTERM", () => {
+    logger.info("SIGTERM");
+    wssHandler.broadcastReconnectNotification();
+    wss.close();
+    tasksServer.close().catch((closeError) => logger.error("Failed to close tasks server", closeError));
+    server.close();
+  });
+});

apps/nextjs/src/app/[locale]/_client-providers/trpc.tsx

@@ -32,13 +32,12 @@ const getWebSocketProtocol = () => {
 };
 
 const constructWebsocketUrl = () => {
-  const fallback = `${getWebSocketProtocol()}://localhost:3001/websockets`;
   if (typeof window === "undefined") {
-    return fallback;
+    return `${getWebSocketProtocol()}://localhost:3000/websockets`;
   }
 
   if (env.NODE_ENV === "development") {
-    return fallback;
+    return `${getWebSocketProtocol()}://localhost:3000/websockets`;
   }
 
   return `${getWebSocketProtocol()}://${window.location.hostname}:${window.location.port}/websockets`;

apps/nextjs/src/app/[locale]/init/_steps/settings/init-settings.tsx

@@ -1,6 +1,5 @@
 "use client";
 
-import { startTransition } from "react";
 import { Button, Card, Group, Stack, Switch, Text } from "@mantine/core";
 import { IconArrowRight } from "@tabler/icons-react";
 import type { z } from "zod/v4";
@@ -24,16 +23,6 @@ export const InitSettings = () => {
   });
   const form = useZodForm(settingsInitSchema, { initialValues: defaultServerSettings });
 
-  form.watch("analytics.enableGeneral", ({ value }) => {
-    if (!value) {
-      startTransition(() => {
-        form.setFieldValue("analytics.enableWidgetData", false);
-        form.setFieldValue("analytics.enableIntegrationData", false);
-        form.setFieldValue("analytics.enableUserData", false);
-      });
-    }
-  });
-
   const handleSubmitAsync = async (values: z.infer<typeof settingsInitSchema>) => {
     await mutateAsync(values);
   };
@@ -47,24 +36,6 @@ export const InitSettings = () => {
 
             <Stack gap="xs">
               <AnalyticsRow kind="general" {...form.getInputProps("analytics.enableGeneral", { type: "checkbox" })} />
-
-              <Stack gap="xs" ps="md" w="100%">
-                <AnalyticsRow
-                  kind="integrationData"
-                  disabled={!form.values.analytics.enableGeneral}
-                  {...form.getInputProps("analytics.enableWidgetData", { type: "checkbox" })}
-                />
-                <AnalyticsRow
-                  kind="widgetData"
-                  disabled={!form.values.analytics.enableGeneral}
-                  {...form.getInputProps("analytics.enableIntegrationData", { type: "checkbox" })}
-                />
-                <AnalyticsRow
-                  kind="usersData"
-                  disabled={!form.values.analytics.enableGeneral}
-                  {...form.getInputProps("analytics.enableUserData", { type: "checkbox" })}
-                />
-              </Stack>
             </Stack>
           </Stack>
         </Card>

apps/nextjs/src/app/[locale]/manage/settings/_components/analytics.settings.tsx

@@ -24,15 +24,6 @@ export const AnalyticsSettings = ({ initialData }: AnalyticsSettingsProps) => {
         return;
       }
 
-      if (
-        !updatedValues.enableGeneral &&
-        (updatedValues.enableWidgetData || updatedValues.enableIntegrationData || updatedValues.enableUserData)
-      ) {
-        updatedValues.enableIntegrationData = false;
-        updatedValues.enableUserData = false;
-        updatedValues.enableWidgetData = false;
-      }
-
       void mutateAsync({
         settingsKey: "analytics",
         value: updatedValues,
@@ -54,30 +45,6 @@ export const AnalyticsSettings = ({ initialData }: AnalyticsSettingsProps) => {
         <LoadingOverlay visible={isPending} zIndex={1000} overlayProps={{ radius: "sm", blur: 2 }} />
         <Stack>
           <SwitchSetting form={form} formKey="enableGeneral" title={t("general.title")} text={t("general.text")} />
-          <SwitchSetting
-            form={form}
-            formKey="enableIntegrationData"
-            ms="xl"
-            title={t("integrationData.title")}
-            text={t("integrationData.text")}
-            disabled={!form.values.enableGeneral}
-          />
-          <SwitchSetting
-            form={form}
-            formKey="enableWidgetData"
-            ms="xl"
-            title={t("widgetData.title")}
-            text={t("widgetData.text")}
-            disabled={!form.values.enableGeneral}
-          />
-          <SwitchSetting
-            form={form}
-            formKey="enableUserData"
-            ms="xl"
-            title={t("usersData.title")}
-            text={t("usersData.text")}
-            disabled={!form.values.enableGeneral}
-          />
         </Stack>
       </Card>
     </>

apps/nextjs/src/app/[locale]/manage/tools/tasks/_components/tasks-table.tsx

@@ -117,6 +117,8 @@ const createColumns = (
     header: tTasks("field.interval.label"),
     size: 200,
     Cell({ row }) {
+      if (row.original.preventCustomInterval) return null;
+
       const handleIntervalChange = (newCron: string | null) => {
         if (!newCron || newCron === row.original.cron) return;
 

apps/nextjs/src/app/[locale]/widgets/[kind]/_content.tsx

@@ -105,7 +105,7 @@ export const WidgetPreviewPageContent = ({ kind, integrationData }: WidgetPrevie
             <ErrorBoundary
               onReset={reset}
               fallbackRender={({ resetErrorBoundary, error }) => (
-                <WidgetError kind={kind} error={error as unknown} resetErrorBoundary={resetErrorBoundary} />
+                <WidgetError kind={kind} error={error} resetErrorBoundary={resetErrorBoundary} />
               )}
             >
               <Comp

apps/nextjs/src/components/board/items/item-content.tsx

@@ -108,7 +108,7 @@ const InnerContent = ({ item, ...dimensions }: InnerContentProps) => {
           fallbackRender={({ resetErrorBoundary, error }) => (
             <>
               <BoardItemMenu offset={4} item={newItem} resetErrorBoundary={resetErrorBoundary} />
-              <WidgetError kind={item.kind} error={error as unknown} resetErrorBoundary={resetErrorBoundary} />
+              <WidgetError kind={item.kind} error={error} resetErrorBoundary={resetErrorBoundary} />
             </>
           )}
         >

apps/nextjs/src/components/board/items/item-menu.tsx

@@ -3,6 +3,7 @@ import { ActionIcon, Menu } from "@mantine/core";
 import { IconCopy, IconDotsVertical, IconLayoutKanban, IconPencil, IconTrash } from "@tabler/icons-react";
 
 import { clientApi } from "@homarr/api/client";
+import { useSession } from "@homarr/auth/client";
 import { useEditMode } from "@homarr/boards/edit-mode";
 import { useConfirmModal, useModalAction } from "@homarr/modals";
 import { useSettings } from "@homarr/settings";
@@ -15,15 +16,20 @@ import { useSectionContext } from "../sections/section-context";
 import { useItemActions } from "./item-actions";
 import { ItemMoveModal } from "./item-move-modal";
 
-export const BoardItemMenu = ({
-  offset,
-  item,
-  resetErrorBoundary,
-}: {
+interface BoardItemMenuProps {
   offset: number;
   item: SectionItem;
   resetErrorBoundary?: () => void;
-}) => {
+}
+
+export const BoardItemMenu = (props: BoardItemMenuProps) => {
+  const { data: session } = useSession();
+  if (!session) return null;
+
+  return <BoardItemMenuInner {...props} />;
+};
+
+const BoardItemMenuInner = ({ offset, item, resetErrorBoundary }: BoardItemMenuProps) => {
   const refResetErrorBoundaryOnNextRender = useRef(false);
   const tItem = useScopedI18n("item");
   const t = useI18n();

apps/nextjs/src/components/board/items/item-select-modal.tsx

@@ -1,9 +1,10 @@
 import { useMemo, useState } from "react";
-import { Button, Card, Center, Grid, Input, Stack, Text } from "@mantine/core";
+import { Avatar, Button, Card, Center, Grid, Group, Input, Stack, Text, Tooltip } from "@mantine/core";
 import { IconSearch } from "@tabler/icons-react";
 
 import { objectEntries } from "@homarr/common";
-import type { WidgetKind } from "@homarr/definitions";
+import { getIconUrl, getIntegrationName } from "@homarr/definitions";
+import type { IntegrationKind, WidgetKind } from "@homarr/definitions";
 import { createModal } from "@homarr/modals";
 import { useI18n } from "@homarr/translation/client";
 import type { TablerIcon } from "@homarr/ui";
@@ -21,6 +22,10 @@ export const ItemSelectModal = createModal<void>(({ actions }) => {
       objectEntries(widgetImports)
         .map(([kind, value]) => ({
           kind,
+          supportedIntegrations:
+            "supportedIntegrations" in value.definition
+              ? value.definition.supportedIntegrations.filter((integration) => integration !== "mock")
+              : [],
           icon: value.definition.icon,
           name: t(`widget.${kind}.name`),
           description: t(`widget.${kind}.description`),
@@ -74,6 +79,7 @@ const WidgetItem = ({
 }: {
   item: {
     kind: WidgetKind;
+    supportedIntegrations: IntegrationKind[];
     name: string;
     description: string;
     icon: TablerIcon;
@@ -97,7 +103,8 @@ const WidgetItem = ({
               {item.description}
             </Text>
           </Stack>
-          <Button onClick={onSelect} variant="light" size="xs" mt="auto" radius="md" fullWidth>
+          <SupportedIntegrations mt="auto" integrations={item.supportedIntegrations} />
+          <Button onClick={onSelect} variant="light" size="xs" radius="md" fullWidth>
             {t(`item.create.addToBoard`)}
           </Button>
         </Stack>
@@ -105,3 +112,48 @@ const WidgetItem = ({
     </Grid.Col>
   );
 };
+
+interface SupportedIntegrationsProps {
+  integrations: IntegrationKind[];
+  mt: string;
+}
+
+const SupportedIntegrations = ({ integrations, mt }: SupportedIntegrationsProps) => {
+  if (integrations.length === 0) {
+    return null;
+  }
+
+  // When there are 8 or more integrations, we show 6 and a "+X" avatar. Otherwise, we show all integrations.
+  const countToShow = integrations.length >= 8 ? 6 : 7;
+  const moreCount = integrations.length - countToShow;
+
+  return (
+    <Center mt={mt}>
+      <Tooltip.Group openDelay={300} closeDelay={100}>
+        <Group gap={2}>
+          {integrations.slice(0, countToShow).map((integration) => (
+            <Tooltip key={integration} label={getIntegrationName(integration)} withArrow>
+              <Avatar src={getIconUrl(integration)} size="xs" radius="xl" />
+            </Tooltip>
+          ))}
+          {moreCount > 0 && (
+            <Tooltip
+              withArrow
+              label={
+                <>
+                  {integrations.slice(countToShow).map((integration) => (
+                    <div key={integration}>{getIntegrationName(integration)}</div>
+                  ))}
+                </>
+              }
+            >
+              <Avatar radius="xl" size="xs">
+                +{moreCount}
+              </Avatar>
+            </Tooltip>
+          )}
+        </Group>
+      </Tooltip.Group>
+    </Center>
+  );
+};

apps/nextjs/src/components/board/sections/category/category-actions.ts

@@ -58,6 +58,7 @@ export const useCategoryActions = () => {
               ...section,
               yOffset: section.yOffset + 2,
             })),
+          ...previous.sections.filter((section) => section.kind !== "category" && section.kind !== "empty"),
         ] satisfies Section[],
       }));
     },

apps/nextjs/tsconfig.json

@@ -14,5 +14,5 @@
     "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
   },
   "include": [".", ".next/types/**/*.ts"],
-  "exclude": ["node_modules", ".next"]
+  "exclude": ["node_modules", ".next", "customServer.cjs", "customServer.css"]
 }

apps/tasks/eslint.config.js

@@ -1,9 +0,0 @@
-import baseConfig from "@homarr/eslint-config/base";
-
-/** @type {import('typescript-eslint').Config} */
-export default [
-  {
-    ignores: ["tasks.cjs"],
-  },
-  ...baseConfig,
-];

apps/tasks/package.json

@@ -1,58 +0,0 @@
-{
-  "name": "@homarr/tasks",
-  "version": "0.1.0",
-  "private": true,
-  "license": "Apache-2.0",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
-  },
-  "main": "./src/main.ts",
-  "types": "./src/main.ts",
-  "scripts": {
-    "build": "esbuild src/main.ts --bundle --platform=node --loader:.scss=text --external:*.node --external:@opentelemetry/api --external:deasync --external:bcrypt --outfile=tasks.cjs",
-    "clean": "rm -rf .turbo node_modules",
-    "dev": "pnpm with-env tsx ./src/main.ts",
-    "format": "prettier --check . --ignore-path ../../.gitignore",
-    "lint": "eslint",
-    "typecheck": "tsc --noEmit",
-    "with-env": "dotenv -e ../../.env --"
-  },
-  "prettier": "@homarr/prettier-config",
-  "dependencies": {
-    "@homarr/analytics": "workspace:^0.1.0",
-    "@homarr/auth": "workspace:^0.1.0",
-    "@homarr/common": "workspace:^0.1.0",
-    "@homarr/core": "workspace:^",
-    "@homarr/cron-job-api": "workspace:^0.1.0",
-    "@homarr/cron-jobs": "workspace:^0.1.0",
-    "@homarr/cron-jobs-core": "workspace:^0.1.0",
-    "@homarr/db": "workspace:^0.1.0",
-    "@homarr/definitions": "workspace:^0.1.0",
-    "@homarr/icons": "workspace:^0.1.0",
-    "@homarr/integrations": "workspace:^0.1.0",
-    "@homarr/ping": "workspace:^0.1.0",
-    "@homarr/redis": "workspace:^0.1.0",
-    "@homarr/request-handler": "workspace:^0.1.0",
-    "@homarr/server-settings": "workspace:^0.1.0",
-    "@homarr/validation": "workspace:^0.1.0",
-    "@homarr/widgets": "workspace:^0.1.0",
-    "dayjs": "^1.11.19",
-    "dotenv": "^17.2.3",
-    "fastify": "^5.6.2",
-    "superjson": "2.2.6",
-    "undici": "7.16.0"
-  },
-  "devDependencies": {
-    "@homarr/eslint-config": "workspace:^0.2.0",
-    "@homarr/prettier-config": "workspace:^0.1.0",
-    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/node": "^24.10.4",
-    "dotenv-cli": "^11.0.0",
-    "esbuild": "^0.27.2",
-    "eslint": "^9.39.2",
-    "prettier": "^3.7.4",
-    "tsx": "4.20.4",
-    "typescript": "^5.9.3"
-  }
-}

apps/tasks/src/job-manager.ts

@@ -1,117 +0,0 @@
-import { schedule, validate as validateCron } from "node-cron";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import type { IJobManager } from "@homarr/cron-job-api";
-import type { jobGroup as cronJobGroup, JobGroupKeys } from "@homarr/cron-jobs";
-import type { Database, InferInsertModel } from "@homarr/db";
-import { eq } from "@homarr/db";
-import { cronJobConfigurations } from "@homarr/db/schema";
-
-const logger = createLogger({ module: "jobManager" });
-
-export class JobManager implements IJobManager {
-  constructor(
-    private db: Database,
-    private jobGroup: typeof cronJobGroup,
-  ) {}
-
-  public async startAsync(name: JobGroupKeys): Promise<void> {
-    await this.jobGroup.startAsync(name);
-  }
-  public async triggerAsync(name: JobGroupKeys): Promise<void> {
-    await this.jobGroup.runManuallyAsync(name);
-  }
-  public async stopAsync(name: JobGroupKeys): Promise<void> {
-    await this.jobGroup.stopAsync(name);
-  }
-  public async updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void> {
-    logger.info("Updating cron job interval", { name, expression: cron });
-    const job = this.jobGroup.getJobRegistry().get(name);
-    if (!job) throw new Error(`Job ${name} not found`);
-    if (!validateCron(cron)) {
-      throw new Error(`Invalid cron expression: ${cron}`);
-    }
-    await this.updateConfigurationAsync(name, { cronExpression: cron });
-    await this.jobGroup.getTask(name)?.destroy();
-
-    this.jobGroup.setTask(
-      name,
-      schedule(cron, () => void job.executeAsync(), {
-        name,
-      }),
-    );
-    logger.info("Cron job interval updated", { name, expression: cron });
-  }
-  public async disableAsync(name: JobGroupKeys): Promise<void> {
-    logger.info("Disabling cron job", { name });
-    const job = this.jobGroup.getJobRegistry().get(name);
-    if (!job) throw new Error(`Job ${name} not found`);
-
-    await this.updateConfigurationAsync(name, { isEnabled: false });
-    await this.jobGroup.stopAsync(name);
-    logger.info("Cron job disabled", { name });
-  }
-  public async enableAsync(name: JobGroupKeys): Promise<void> {
-    logger.info("Enabling cron job", { name });
-    await this.updateConfigurationAsync(name, { isEnabled: true });
-    await this.jobGroup.startAsync(name);
-    logger.info("Cron job enabled", { name });
-  }
-
-  private async updateConfigurationAsync(
-    name: JobGroupKeys,
-    configuration: Omit<Partial<InferInsertModel<typeof cronJobConfigurations>>, "name">,
-  ) {
-    const existingConfig = await this.db.query.cronJobConfigurations.findFirst({
-      where: (table, { eq }) => eq(table.name, name),
-    });
-
-    logger.debug("Updating cron job configuration", {
-      name,
-      configuration: JSON.stringify(configuration),
-      exists: Boolean(existingConfig),
-    });
-
-    if (existingConfig) {
-      await this.db
-        .update(cronJobConfigurations)
-        // prevent updating the name, as it is the primary key
-        .set({ ...configuration, name: undefined })
-        .where(eq(cronJobConfigurations.name, name));
-      logger.debug("Cron job configuration updated", {
-        name,
-        configuration: JSON.stringify(configuration),
-      });
-      return;
-    }
-
-    const job = this.jobGroup.getJobRegistry().get(name);
-    if (!job) throw new Error(`Job ${name} not found`);
-
-    await this.db.insert(cronJobConfigurations).values({
-      name,
-      cronExpression: configuration.cronExpression ?? job.cronExpression,
-      isEnabled: configuration.isEnabled ?? true,
-    });
-    logger.debug("Cron job configuration updated", {
-      name,
-      configuration: JSON.stringify(configuration),
-    });
-  }
-
-  public async getAllAsync(): Promise<
-    { name: JobGroupKeys; cron: string; preventManualExecution: boolean; isEnabled: boolean }[]
-  > {
-    const configurations = await this.db.query.cronJobConfigurations.findMany();
-
-    return [...this.jobGroup.getJobRegistry().entries()].map(([name, job]) => {
-      const config = configurations.find((config) => config.name === name);
-      return {
-        name,
-        cron: config?.cronExpression ?? job.cronExpression,
-        preventManualExecution: job.preventManualExecution,
-        isEnabled: config?.isEnabled ?? true,
-      };
-    });
-  }
-}

apps/tasks/src/main.ts

@@ -1,52 +0,0 @@
-// This import has to be the first import in the file so that the agent is overridden before any other modules are imported.
-import "./overrides";
-
-import type { FastifyTRPCPluginOptions } from "@trpc/server/adapters/fastify";
-import { fastifyTRPCPlugin } from "@trpc/server/adapters/fastify";
-import fastify from "fastify";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import type { JobRouter } from "@homarr/cron-job-api";
-import { jobRouter } from "@homarr/cron-job-api";
-import { CRON_JOB_API_KEY_HEADER, CRON_JOB_API_PATH, CRON_JOB_API_PORT } from "@homarr/cron-job-api/constants";
-import { jobGroup } from "@homarr/cron-jobs";
-import { db } from "@homarr/db";
-
-import { JobManager } from "./job-manager";
-import { onStartAsync } from "./on-start";
-
-const logger = createLogger({ module: "tasksMain" });
-
-const server = fastify({
-  maxParamLength: 5000,
-});
-server.register(fastifyTRPCPlugin, {
-  prefix: CRON_JOB_API_PATH,
-  trpcOptions: {
-    router: jobRouter,
-    createContext: ({ req }) => ({
-      manager: new JobManager(db, jobGroup),
-      apiKey: req.headers[CRON_JOB_API_KEY_HEADER] as string | undefined,
-    }),
-    onError({ path, error }) {
-      logger.error(new ErrorWithMetadata("Error in tasks tRPC handler", { path }, { cause: error }));
-    },
-  } satisfies FastifyTRPCPluginOptions<JobRouter>["trpcOptions"],
-});
-
-void (async () => {
-  await onStartAsync();
-  await jobGroup.initializeAsync();
-  await jobGroup.startAllAsync();
-
-  try {
-    await server.listen({ port: CRON_JOB_API_PORT });
-    logger.info("Tasks web server started successfully", { port: CRON_JOB_API_PORT });
-  } catch (err) {
-    logger.error(
-      new ErrorWithMetadata("Failed to start tasks web server", { port: CRON_JOB_API_PORT }, { cause: err }),
-    );
-    process.exit(1);
-  }
-})();

apps/tasks/src/on-start/index.ts

@@ -1,7 +0,0 @@
-import { invalidateUpdateCheckerCacheAsync } from "./invalidate-update-checker-cache";
-import { cleanupSessionsAsync } from "./session-cleanup";
-
-export async function onStartAsync() {
-  await cleanupSessionsAsync();
-  await invalidateUpdateCheckerCacheAsync();
-}

apps/tasks/src/on-start/invalidate-update-checker-cache.ts

@@ -1,18 +0,0 @@
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { updateCheckerRequestHandler } from "@homarr/request-handler/update-checker";
-
-const logger = createLogger({ module: "invalidateUpdateCheckerCache" });
-
-/**
- * Invalidates the update checker cache on startup to ensure fresh data.
- * It is important as we want to avoid showing pending updates after the update to latest version.
- */
-export async function invalidateUpdateCheckerCacheAsync() {
-  try {
-    const handler = updateCheckerRequestHandler.handler({});
-    await handler.invalidateAsync();
-    logger.debug("Update checker cache invalidated");
-  } catch (error) {
-    logger.error(new Error("Failed to invalidate update checker cache", { cause: error }));
-  }
-}

apps/tasks/src/on-start/session-cleanup.ts

@@ -1,41 +0,0 @@
-import { env } from "@homarr/auth/env";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { db, eq, inArray } from "@homarr/db";
-import { sessions, users } from "@homarr/db/schema";
-import { supportedAuthProviders } from "@homarr/definitions";
-
-const logger = createLogger({ module: "sessionCleanup" });
-
-/**
- * Deletes sessions for users that have inactive auth providers.
- * Sessions from other providers are deleted so they can no longer be used.
- */
-export async function cleanupSessionsAsync() {
-  try {
-    const currentAuthProviders = env.AUTH_PROVIDERS;
-
-    const inactiveAuthProviders = supportedAuthProviders.filter((provider) => !currentAuthProviders.includes(provider));
-    const subQuery = db
-      .select({ id: users.id })
-      .from(users)
-      .where(inArray(users.provider, inactiveAuthProviders))
-      .as("sq");
-    const sessionsWithInactiveProviders = await db
-      .select({ userId: sessions.userId })
-      .from(sessions)
-      .rightJoin(subQuery, eq(sessions.userId, subQuery.id));
-
-    const userIds = sessionsWithInactiveProviders.map(({ userId }) => userId).filter((value) => value !== null);
-    await db.delete(sessions).where(inArray(sessions.userId, userIds));
-
-    if (sessionsWithInactiveProviders.length > 0) {
-      logger.info("Deleted sessions for inactive providers", {
-        count: userIds.length,
-      });
-    } else {
-      logger.debug("No sessions to delete");
-    }
-  } catch (error) {
-    logger.error(new Error("Failed to clean up sessions", { cause: error }));
-  }
-}

apps/tasks/src/overrides.ts

@@ -1,5 +0,0 @@
-import { setGlobalDispatcher } from "undici";
-
-import { UndiciHttpAgent } from "@homarr/core/infrastructure/http";
-
-setGlobalDispatcher(new UndiciHttpAgent());

apps/tasks/tsconfig.json

@@ -1,13 +0,0 @@
-{
-  "extends": "@homarr/tsconfig/base.json",
-  "compilerOptions": {
-    "baseUrl": ".",
-    "paths": {
-      "~/*": ["src/*"],
-      "@homarr/node-unifi": ["../../node_modules/@types/node-unifi"]
-    },
-    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
-  },
-  "include": ["."],
-  "exclude": ["node_modules"]
-}

apps/websocket/eslint.config.js

@@ -1,9 +0,0 @@
-import baseConfig from "@homarr/eslint-config/base";
-
-/** @type {import('typescript-eslint').Config} */
-export default [
-  {
-    ignores: ["wssServer.cjs"],
-  },
-  ...baseConfig,
-];

apps/websocket/package.json

@@ -1,42 +0,0 @@
-{
-  "name": "@homarr/websocket",
-  "version": "0.1.0",
-  "private": true,
-  "license": "Apache-2.0",
-  "type": "module",
-  "main": "./src/main.ts",
-  "types": "./src/main.ts",
-  "scripts": {
-    "build": "esbuild src/main.ts --bundle --platform=node --outfile=wssServer.cjs --external:bcrypt --external:@opentelemetry/api --external:deasync --external:cpu-features --loader:.html=text --loader:.scss=text --loader:.node=text",
-    "clean": "rm -rf .turbo node_modules",
-    "dev": "pnpm with-env tsx ./src/main.ts",
-    "format": "prettier --check . --ignore-path ../../.gitignore",
-    "lint": "eslint",
-    "typecheck": "tsc --noEmit",
-    "with-env": "dotenv -e ../../.env --"
-  },
-  "prettier": "@homarr/prettier-config",
-  "dependencies": {
-    "@homarr/api": "workspace:^0.1.0",
-    "@homarr/auth": "workspace:^0.1.0",
-    "@homarr/common": "workspace:^0.1.0",
-    "@homarr/core": "workspace:^",
-    "@homarr/db": "workspace:^0.1.0",
-    "@homarr/definitions": "workspace:^0.1.0",
-    "@homarr/redis": "workspace:^0.1.0",
-    "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "^17.2.3",
-    "tsx": "4.20.4",
-    "ws": "^8.18.3"
-  },
-  "devDependencies": {
-    "@homarr/eslint-config": "workspace:^0.2.0",
-    "@homarr/prettier-config": "workspace:^0.1.0",
-    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/ws": "^8.18.1",
-    "esbuild": "^0.27.2",
-    "eslint": "^9.39.2",
-    "prettier": "^3.7.4",
-    "typescript": "^5.9.3"
-  }
-}

apps/websocket/src/main.ts

@@ -1,66 +0,0 @@
-import { applyWSSHandler } from "@trpc/server/adapters/ws";
-import { WebSocketServer } from "ws";
-
-import { appRouter, createTRPCContext } from "@homarr/api/websocket";
-import { getSessionFromToken, sessionTokenCookieName } from "@homarr/auth";
-import { parseCookies } from "@homarr/common";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { db } from "@homarr/db";
-
-const logger = createLogger({ module: "websocketMain" });
-
-const wss = new WebSocketServer({
-  port: 3001,
-});
-const handler = applyWSSHandler({
-  wss,
-  router: appRouter,
-  // ignore error on next line because the createContext must be set with this name
-  // eslint-disable-next-line no-restricted-syntax
-  createContext: async ({ req }) => {
-    try {
-      const headers = Object.entries(req.headers).map(
-        ([key, value]) => [key, typeof value === "string" ? value : value?.[0]] as [string, string],
-      );
-      const nextHeaders = new Headers(headers);
-
-      const store = parseCookies(nextHeaders.get("cookie") ?? "");
-      const sessionToken = store[sessionTokenCookieName];
-
-      const session = await getSessionFromToken(db, sessionToken);
-
-      return createTRPCContext({
-        headers: nextHeaders,
-        session,
-      });
-    } catch (error) {
-      logger.error(error);
-      return createTRPCContext({
-        headers: new Headers(),
-        session: null,
-      });
-    }
-  },
-  // Enable heartbeat messages to keep connection open (disabled by default)
-  keepAlive: {
-    enabled: true,
-    // server ping message interval in milliseconds
-    pingMs: 30000,
-    // connection is terminated if pong message is not received in this many milliseconds
-    pongWaitMs: 5000,
-  },
-});
-
-wss.on("connection", (websocket, incomingMessage) => {
-  logger.info(`➕ Connection (${wss.clients.size}) ${incomingMessage.method} ${incomingMessage.url}`);
-  websocket.once("close", (code, reason) => {
-    logger.info(`➖ Connection (${wss.clients.size}) ${code} ${reason.toString()}`);
-  });
-});
-logger.info("✅ WebSocket Server listening on ws://localhost:3001");
-
-process.on("SIGTERM", () => {
-  logger.info("SIGTERM");
-  handler.broadcastReconnectNotification();
-  wss.close();
-});

apps/websocket/tsconfig.json

@@ -1,13 +0,0 @@
-{
-  "extends": "@homarr/tsconfig/base.json",
-  "compilerOptions": {
-    "baseUrl": ".",
-    "paths": {
-      "~/*": ["src/*"],
-      "@homarr/node-unifi": ["../../node_modules/@types/node-unifi"]
-    },
-    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
-  },
-  "include": ["."],
-  "exclude": ["node_modules"]
-}

deployments/prebuilt-debian/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.12.0-trixie AS base
+FROM node:24.14.0-trixie AS base
 WORKDIR /app
 COPY package.json .
 COPY pnpm-lock.yaml .

deployments/prebuilt-debian/package.json

@@ -2,12 +2,12 @@
   "name": "homarr-prebuilt-debian",
   "private": true,
   "dependencies": {
-    "better-sqlite3": "^12.5.0"
+    "better-sqlite3": "^12.6.2"
   },
-  "packageManager": "pnpm@10.27.0",
+  "packageManager": "pnpm@10.32.0",
   "engines": {
-    "node": ">=24.12.0",
-    "pnpm": ">=10.27.0"
+    "node": ">=24.14.0",
+    "pnpm": ">=10.32.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [

deployments/prebuilt-debian/pnpm-lock.yaml

@@ -9,16 +9,16 @@ importers:
   .:
     dependencies:
       better-sqlite3:
-        specifier: ^12.5.0
-        version: 12.5.0
+        specifier: ^12.6.2
+        version: 12.6.2
 
 packages:
 
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
-  better-sqlite3@12.5.0:
-    resolution: {integrity: sha512-WwCZ/5Diz7rsF29o27o0Gcc1Du+l7Zsv7SYtVPG0X3G/uUI1LqdxrQI7c9Hs2FWpqXXERjW9hp6g3/tH7DlVKg==}
+  better-sqlite3@12.6.2:
+    resolution: {integrity: sha512-8VYKM3MjCa9WcaSAI3hzwhmyHVlH8tiGFwf0RlTsZPWJ1I5MkzjiudCo4KC4DxOaL/53A5B1sI/IbldNFDbsKA==}
     engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x}
 
   bindings@1.5.0:
@@ -147,7 +147,7 @@ snapshots:
 
   base64-js@1.5.1: {}
 
-  better-sqlite3@12.5.0:
+  better-sqlite3@12.6.2:
     dependencies:
       bindings: 1.5.0
       prebuild-install: 7.1.3

docs/README.md

@@ -78,6 +78,13 @@
 </a>
 </td>
 <td align="center">
+<a href="https://homarr.dev/docs/integrations/coolify" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/coolify.svg" alt="Coolify" width="90" height="90" />
+  <br/>  
+  <p align="center">Coolify</p>
+</a>
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/dash-dot" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/dashdot.png" alt="Dash." width="90" height="90" />
   <br/>  
@@ -97,15 +104,15 @@
   <br/>  
   <p align="center">Docker<br/>Hub</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/emby" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/emby.svg" alt="Emby" width="90" height="90" />
   <br/>  
   <p align="center">Emby</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/github" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/github.svg" alt="Github" width="90" height="90" />
   <br/>  
@@ -127,6 +134,13 @@
 </a>
 </td>
 <td align="center">
+<a href="null" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/glances.svg" alt="Glances" width="90" height="90" />
+  <br/>  
+  <p align="center">Glances</p>
+</a>
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/home-assistant" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/home-assistant.svg" alt="Home Assistant" width="90" height="90" />
   <br/>  
@@ -139,6 +153,13 @@
   <br/>  
   <p align="center">iCal</p>
 </a>
+</td></tr>
+<tr><td align="center">
+<a href="https://homarr.dev/docs/integrations/immich" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/immich.svg" alt="Immich" width="90" height="90" />
+  <br/>  
+  <p align="center">Immich</p>
+</a>
 </td>
 <td align="center">
 <a href="https://homarr.dev/docs/integrations/jellyfin" target="_blank" rel="noreferrer noopener">
@@ -153,8 +174,8 @@
   <br/>  
   <p align="center">Jellyseerr</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/lidarr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/lidarr.svg" alt="Lidarr" width="90" height="90" />
   <br/>  
@@ -181,8 +202,8 @@
   <br/>  
   <p align="center">NPM</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/ntfy" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ntfy.svg" alt="ntfy" width="90" height="90" />
   <br/>  
@@ -202,8 +223,8 @@
   <br/>  
   <p align="center">OpenMediaVault</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/opnsense" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/opnsense.svg" alt="OPNsense" width="90" height="90" />
   <br/>  
@@ -230,8 +251,8 @@
   <br/>  
   <p align="center">Plex</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/prowlarr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/prowlarr.svg" alt="Prowlarr" width="90" height="90" />
   <br/>  
@@ -251,8 +272,8 @@
   <br/>  
   <p align="center">qBittorrent</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/quay" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/quay.png" alt="Quay" width="90" height="90" />
   <br/>  
@@ -279,6 +300,20 @@
   <br/>  
   <p align="center">SABnzbd</p>
 </a>
+</td></tr>
+<tr><td align="center">
+<a href="https://homarr.dev/docs/integrations/seerr" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/seerr.svg" alt="Seerr" width="90" height="90" />
+  <br/>  
+  <p align="center">Seerr</p>
+</a>
+</td>
+<td align="center">
+<a href="https://homarr.dev/docs/integrations/slskd" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/slskd.svg" alt="Slskd" width="90" height="90" />
+  <br/>  
+  <p align="center">Slskd</p>
+</a>
 </td>
 <td align="center">
 <a href="https://homarr.dev/docs/integrations/sonarr" target="_blank" rel="noreferrer noopener">
@@ -295,27 +330,34 @@
 </a>
 </td>
 <td align="center">
+<a href="https://homarr.dev/docs/integrations/tracearr" target="_blank" rel="noreferrer noopener">
+  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/tracearr.svg" alt="Tracearr" width="90" height="90" />
+  <br/>  
+  <p align="center">Tracearr</p>
+</a>
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/transmission" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/transmission.svg" alt="Transmission" width="90" height="90" />
   <br/>  
   <p align="center">Transmission</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/truenas" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/truenas.svg" alt="TrueNAS" width="90" height="90" />
   <br/>  
   <p align="center">TrueNAS</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unifi-controller" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/unifi.png" alt="Unifi Controller" width="90" height="90" />
   <br/>  
   <p align="center">Unifi<br/>Controller</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unraid" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg" alt="Unraid" width="90" height="90" />
   <br/>  

e2e/health-checks.spec.ts

@@ -15,7 +15,7 @@ describe("Health checks", () => {
     // Assert
     expect(readyResponse.status).toBe(200);
     expect(liveResponse.status).toBe(200);
-  }, 20_000);
+  }, 60_000);
 
   test("ready and live should return 200 OK with external redis", async () => {
     // Arrange
@@ -42,5 +42,5 @@ describe("Health checks", () => {
       liveResponse.status,
       `Expected live to return OK statusCode=${liveResponse.status} content=${await liveResponse.text()}`,
     ).toBe(200);
-  }, 20_000);
+  }, 60_000);
 });

e2e/home.spec.ts

@@ -12,5 +12,5 @@ describe("Home", () => {
 
     // Assert
     expect(homeResponse.status).toBe(200);
-  }, 20_000);
+  }, 60_000);
 });

e2e/shared/create-homarr-container.ts

@@ -18,6 +18,11 @@ export const createHomarrContainer = (
     .withExposedPorts(7575)
     .withEnvironment({
       ...options.environment,
+      // We disable external connections due to the following reasons:
+      // - No icons have to be downloaded (11k)
+      // - No analytics data is sent
+      // - It is just faster and makes the tests more reliable (better performance)
+      NO_EXTERNAL_CONNECTION: true.toString(),
       SECRET_ENCRYPTION_KEY: "0".repeat(64),
     })
     .withBindMounts(

nginx.conf

@@ -7,9 +7,9 @@ http {
         listen 7575;
         listen [::]:7575;
 
-        # Route websockets traffic to port 3001
+        # Route websockets traffic to port 3000 (integrated custom server)
         location /websockets {
-            proxy_pass http://${HOSTNAME}:3001;
+            proxy_pass http://${HOSTNAME}:3000;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "Upgrade";

package.json

@@ -1,6 +1,6 @@
 {
   "name": "homarr",
-  "version": "1.50.0",
+  "version": "1.56.0",
   "private": true,
   "scripts": {
     "build": "cross-env CI=true turbo build",
@@ -17,6 +17,9 @@
     "db:studio": "pnpm -F db studio",
     "dev": "turbo dev --parallel",
     "docker:dev": "docker compose -f ./development/development.docker-compose.yml up",
+    "docker:build": "docker build -t homarr:test .",
+    "docker:test": "bash scripts/docker-test.sh",
+    "docker:test:skip-build": "bash scripts/docker-test.sh --skip-build",
     "format": "turbo format --continue -- --cache --cache-location node_modules/.cache/.prettiercache",
     "format:fix": "turbo format --continue -- --write --cache --cache-location node_modules/.cache/.prettiercache",
     "lint": "turbo lint --continue -- --cache --cache-location node_modules/.cache/.eslintcache",
@@ -26,7 +29,7 @@
     "release": "semantic-release",
     "scripts:update-bug-report-template": "tsx ./scripts/update-bug-report-template.mts",
     "scripts:update-readme-integrations": "tsx ./scripts/update-integration-list.mts",
-    "start": "concurrently \"pnpm with-env node apps/tasks/tasks.cjs\" \"pnpm with-env node apps/websocket/wssServer.cjs\" \"pnpm -F nextjs start\"",
+    "start": "pnpm -F nextjs start",
     "test": "cross-env NODE_ENV=development CI=true vitest run --exclude e2e --coverage.enabled ",
     "test:e2e": "cross-env NODE_ENV=development CI=true vitest e2e",
     "test:ui": "cross-env NODE_ENV=development CI=true vitest --exclude e2e --ui --coverage.enabled",
@@ -39,30 +42,30 @@
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/commit-analyzer": "^13.0.1",
     "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.2",
-    "@semantic-release/npm": "^13.1.3",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "^14.1.0",
-    "@testcontainers/redis": "^11.11.0",
-    "@turbo/gen": "^2.7.2",
-    "@vitejs/plugin-react": "^5.1.2",
-    "@vitest/coverage-v8": "^4.0.16",
-    "@vitest/ui": "^4.0.16",
-    "conventional-changelog-conventionalcommits": "^9.1.0",
+    "@testcontainers/redis": "^11.12.0",
+    "@turbo/gen": "^2.8.15",
+    "@vitejs/plugin-react": "^5.1.4",
+    "@vitest/coverage-v8": "^4.0.18",
+    "@vitest/ui": "^4.0.18",
+    "conventional-changelog-conventionalcommits": "^9.3.0",
     "cross-env": "^10.1.0",
-    "jsdom": "^27.4.0",
+    "jsdom": "^28.1.0",
     "json5": "^2.2.3",
-    "prettier": "^3.7.4",
-    "semantic-release": "^25.0.2",
-    "testcontainers": "^11.11.0",
-    "turbo": "^2.7.2",
+    "prettier": "^3.8.1",
+    "semantic-release": "^25.0.3",
+    "testcontainers": "^11.12.0",
+    "turbo": "^2.8.15",
     "typescript": "^5.9.3",
-    "vite-tsconfig-paths": "^6.0.3",
-    "vitest": "^4.0.16"
+    "vite-tsconfig-paths": "^6.1.1",
+    "vitest": "^4.0.18"
   },
-  "packageManager": "pnpm@10.27.0",
+  "packageManager": "pnpm@10.32.0",
   "engines": {
-    "node": ">=24.12.0",
-    "pnpm": ">=10.27.0"
+    "node": ">=24.14.0",
+    "pnpm": ">=10.32.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
@@ -77,25 +80,25 @@
       "tree-sitter-json"
     ],
     "overrides": {
-      "@babel/helpers@<7.26.10": ">=7.28.4",
-      "@babel/runtime@<7.26.10": ">=7.28.4",
-      "axios@>=1.0.0 <1.8.2": ">=1.13.2",
-      "brace-expansion@>=2.0.0 <=2.0.1": ">=4.0.1",
-      "brace-expansion@>=1.0.0 <=1.1.11": ">=4.0.1",
-      "esbuild@<=0.24.2": ">=0.27.2",
+      "@babel/helpers@<7.26.10": ">=7.28.6",
+      "@babel/runtime@<7.26.10": ">=7.28.6",
+      "axios@>=1.0.0 <1.8.2": ">=1.13.6",
+      "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.4",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.4",
+      "esbuild@<=0.24.2": ">=0.27.3",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
-      "hono@<4.6.5": ">=4.11.3",
+      "hono@<4.6.5": ">=4.12.7",
       "linkifyjs@<4.3.2": ">=4.3.2",
       "nanoid@>=4.0.0 <5.0.9": ">=5.1.6",
       "prismjs@<1.30.0": ">=1.30.0",
-      "proxmox-api>undici": "7.16.0",
-      "react-is": "^19.2.3",
-      "rollup@>=4.0.0 <4.22.4": ">=4.54.0",
+      "proxmox-api>undici": "7.19.2",
+      "react-is": "^19.2.4",
+      "rollup@>=4.0.0 <4.22.4": ">=4.59.0",
       "sha.js@<=2.4.11": ">=2.4.12",
-      "tar-fs@>=3.0.0 <3.0.9": ">=3.1.1",
-      "tar-fs@>=2.0.0 <2.1.3": ">=3.1.1",
+      "tar-fs@>=3.0.0 <3.0.9": ">=3.1.2",
+      "tar-fs@>=2.0.0 <2.1.3": ">=3.1.2",
       "tmp@<=0.2.3": ">=0.2.5",
-      "vite@>=5.0.0 <=5.4.18": ">=7.3.0"
+      "vite@>=5.0.0 <=5.4.18": ">=7.3.1"
     },
     "patchedDependencies": {
       "@types/node-unifi": "patches/@types__node-unifi.patch",

packages/analytics/package.json

@@ -22,8 +22,11 @@
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
+    "@homarr/auth": "workspace:^0.1.0",
+    "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
+    "@homarr/docker": "workspace:^0.1.0",
     "@homarr/server-settings": "workspace:^0.1.0",
     "@umami/node": "^0.4.0",
     "superjson": "2.2.6"
@@ -32,7 +35,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/analytics/src/send-server-analytics.ts

@@ -1,17 +1,52 @@
 import type { UmamiEventData } from "@umami/node";
 import { Umami } from "@umami/node";
 
+import { isProviderEnabled } from "@homarr/auth/server";
+import { Stopwatch } from "@homarr/common";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { count, db } from "@homarr/db";
+import { isMysql, isPostgresql } from "@homarr/db/collection";
 import { getServerSettingByKeyAsync } from "@homarr/db/queries";
-import { integrations, items, users } from "@homarr/db/schema";
-import type { defaultServerSettings } from "@homarr/server-settings";
+import {
+  apiKeys,
+  apps,
+  boards,
+  cronJobConfigurations,
+  groups,
+  iconRepositories,
+  icons,
+  integrations,
+  invites,
+  itemLayouts,
+  items,
+  layouts,
+  medias,
+  searchEngines,
+  sectionLayouts,
+  sections,
+  users,
+} from "@homarr/db/schema";
+import { env as dockerEnv } from "@homarr/docker/env";
 
-import { Stopwatch } from "../../common/src";
+import packageJson from "../../../package.json";
 import { UMAMI_HOST_URL, UMAMI_WEBSITE_ID } from "./constants";
 
 const logger = createLogger({ module: "analytics" });
 
+const getDatabaseType = (): "mysql" | "postgresql" | "sqlite" => {
+  if (isMysql()) return "mysql";
+  if (isPostgresql()) return "postgresql";
+  return "sqlite";
+};
+
+const getEnabledAuthProviders = (): string[] => {
+  const providers: string[] = [];
+  if (isProviderEnabled("credentials")) providers.push("credentials");
+  if (isProviderEnabled("oidc")) providers.push("oidc");
+  if (isProviderEnabled("ldap")) providers.push("ldap");
+  return providers;
+};
+
 export const sendServerAnalyticsAsync = async () => {
   const stopWatch = new Stopwatch();
   const analyticsSettings = await getServerSettingByKeyAsync(db, "analytics");
@@ -27,67 +62,48 @@ export const sendServerAnalyticsAsync = async () => {
     websiteId: UMAMI_WEBSITE_ID,
   });
 
-  await sendIntegrationDataAsync(umamiInstance, analyticsSettings);
-  await sendWidgetDataAsync(umamiInstance, analyticsSettings);
-  await sendUserDataAsync(umamiInstance, analyticsSettings);
+  const enabledAuthProviders = getEnabledAuthProviders();
 
-  logger.info(`Sent all analytics in ${stopWatch.getElapsedInHumanWords()}`);
-};
+  const analyticsData: UmamiEventData = {
+    homarrVersion: packageJson.version,
+    databaseType: getDatabaseType(),
+    dockerEnabled: dockerEnv.ENABLE_DOCKER ? 1 : 0,
+    kubernetesEnabled: dockerEnv.ENABLE_KUBERNETES ? 1 : 0,
+    authCredentials: enabledAuthProviders.includes("credentials") ? 1 : 0,
+    authOidc: enabledAuthProviders.includes("oidc") ? 1 : 0,
+    authLdap: enabledAuthProviders.includes("ldap") ? 1 : 0,
+    countUsers: await db.$count(users),
+    countBoards: await db.$count(boards),
+    countGroups: await db.$count(groups),
+    countApps: await db.$count(apps),
+    countWidgets: await db.$count(items),
+    countSections: await db.$count(sections),
+    countIntegrations: await db.$count(integrations),
+    countSearchEngines: await db.$count(searchEngines),
+    countIconRepositories: await db.$count(iconRepositories),
+    countIcons: await db.$count(icons),
+    countApiKeys: await db.$count(apiKeys),
+    countInvites: await db.$count(invites),
+    countMedias: await db.$count(medias),
+    countLayouts: await db.$count(layouts),
+    countItemLayouts: await db.$count(itemLayouts),
+    countSectionLayouts: await db.$count(sectionLayouts),
+    countCronJobConfigs: await db.$count(cronJobConfigurations),
+  };
 
-const sendWidgetDataAsync = async (umamiInstance: Umami, analyticsSettings: typeof defaultServerSettings.analytics) => {
-  if (!analyticsSettings.enableWidgetData) {
-    return;
-  }
-  const widgetCount = await db.$count(items);
-
-  const response = await umamiInstance.track("server-widget-data", {
-    countWidgets: widgetCount,
-  });
-  if (response.ok) {
-    return;
-  }
-
-  logger.warn("Unable to send track event data to Umami instance");
-};
-
-const sendUserDataAsync = async (umamiInstance: Umami, analyticsSettings: typeof defaultServerSettings.analytics) => {
-  if (!analyticsSettings.enableUserData) {
-    return;
-  }
-  const userCount = await db.$count(users);
-
-  const response = await umamiInstance.track("server-user-data", {
-    countUsers: userCount,
-  });
-  if (response.ok) {
-    return;
-  }
-
-  logger.warn("Unable to send track event data to Umami instance");
-};
-
-const sendIntegrationDataAsync = async (
-  umamiInstance: Umami,
-  analyticsSettings: typeof defaultServerSettings.analytics,
-) => {
-  if (!analyticsSettings.enableIntegrationData) {
-    return;
-  }
   const integrationKinds = await db
     .select({ kind: integrations.kind, count: count(integrations.id) })
     .from(integrations)
     .groupBy(integrations.kind);
 
-  const map: UmamiEventData = {};
-
   integrationKinds.forEach((integrationKind) => {
-    map[integrationKind.kind] = integrationKind.count;
+    analyticsData[`integration_${integrationKind.kind}`] = integrationKind.count;
   });
 
-  const response = await umamiInstance.track("server-integration-data-kind", map);
-  if (response.ok) {
-    return;
+  const response = await umamiInstance.track("server-analytics-v2", analyticsData);
+  if (!response.ok) {
+    logger.warn("Unable to send analytics to Umami instance");
   }
 
-  logger.warn("Unable to send track event data to Umami instance");
+  logger.info(`Sent analytics in ${stopWatch.getElapsedInHumanWords()}`);
 };

packages/api/package.json

@@ -41,15 +41,15 @@
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@kubernetes/client-node": "^1.4.0",
-    "@tanstack/react-query": "^5.90.16",
-    "@trpc/client": "^11.8.1",
-    "@trpc/react-query": "^11.8.1",
-    "@trpc/server": "^11.8.1",
-    "@trpc/tanstack-react-query": "^11.8.1",
+    "@tanstack/react-query": "^5.90.21",
+    "@trpc/client": "^11.12.0",
+    "@trpc/react-query": "^11.12.0",
+    "@trpc/server": "^11.12.0",
+    "@trpc/tanstack-react-query": "^11.12.0",
     "lodash.clonedeep": "^4.5.0",
-    "next": "16.1.1",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
+    "next": "16.1.6",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
     "superjson": "2.2.6",
     "trpc-to-openapi": "^3.1.0",
     "zod": "^4.2.1"
@@ -58,8 +58,8 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
-    "prettier": "^3.7.4",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
     "typescript": "^5.9.3"
   }
 }

packages/api/src/root.ts

@@ -1,54 +1,32 @@
-import { apiKeysRouter } from "./router/apiKeys";
-import { appRouter as innerAppRouter } from "./router/app";
-import { boardRouter } from "./router/board";
-import { certificateRouter } from "./router/certificates/certificate-router";
-import { cronJobsRouter } from "./router/cron-jobs";
-import { dockerRouter } from "./router/docker/docker-router";
-import { groupRouter } from "./router/group";
-import { homeRouter } from "./router/home";
-import { iconsRouter } from "./router/icons";
-import { importRouter } from "./router/import/import-router";
-import { infoRouter } from "./router/info";
-import { integrationRouter } from "./router/integration/integration-router";
-import { inviteRouter } from "./router/invite";
-import { kubernetesRouter } from "./router/kubernetes/router/kubernetes-router";
-import { locationRouter } from "./router/location";
-import { logRouter } from "./router/log";
-import { mediaRouter } from "./router/medias/media-router";
-import { onboardRouter } from "./router/onboard/onboard-router";
-import { searchEngineRouter } from "./router/search-engine/search-engine-router";
-import { sectionRouter } from "./router/section/section-router";
-import { serverSettingsRouter } from "./router/serverSettings";
-import { updateCheckerRouter } from "./router/update-checker";
-import { userRouter } from "./router/user";
-import { widgetRouter } from "./router/widgets";
+import { lazy } from "@trpc/server";
+
 import { createTRPCRouter } from "./trpc";
 
 export const appRouter = createTRPCRouter({
-  user: userRouter,
-  group: groupRouter,
-  invite: inviteRouter,
-  integration: integrationRouter,
-  board: boardRouter,
-  section: sectionRouter,
-  app: innerAppRouter,
-  searchEngine: searchEngineRouter,
-  widget: widgetRouter,
-  location: locationRouter,
-  log: logRouter,
-  icon: iconsRouter,
-  import: importRouter,
-  onboard: onboardRouter,
-  home: homeRouter,
-  docker: dockerRouter,
-  kubernetes: kubernetesRouter,
-  serverSettings: serverSettingsRouter,
-  cronJobs: cronJobsRouter,
-  apiKeys: apiKeysRouter,
-  media: mediaRouter,
-  updateChecker: updateCheckerRouter,
-  certificates: certificateRouter,
-  info: infoRouter,
+  user: lazy(() => import("./router/user").then((mod) => mod.userRouter)),
+  group: lazy(() => import("./router/group").then((mod) => mod.groupRouter)),
+  invite: lazy(() => import("./router/invite").then((mod) => mod.inviteRouter)),
+  integration: lazy(() => import("./router/integration/integration-router").then((mod) => mod.integrationRouter)),
+  board: lazy(() => import("./router/board").then((mod) => mod.boardRouter)),
+  section: lazy(() => import("./router/section/section-router").then((mod) => mod.sectionRouter)),
+  app: lazy(() => import("./router/app").then((mod) => mod.appRouter)),
+  searchEngine: lazy(() => import("./router/search-engine/search-engine-router").then((mod) => mod.searchEngineRouter)),
+  widget: lazy(() => import("./router/widgets").then((mod) => mod.widgetRouter)),
+  location: lazy(() => import("./router/location").then((mod) => mod.locationRouter)),
+  log: lazy(() => import("./router/log").then((mod) => mod.logRouter)),
+  icon: lazy(() => import("./router/icons").then((mod) => mod.iconsRouter)),
+  import: lazy(() => import("./router/import/import-router").then((mod) => mod.importRouter)),
+  onboard: lazy(() => import("./router/onboard/onboard-router").then((mod) => mod.onboardRouter)),
+  home: lazy(() => import("./router/home").then((mod) => mod.homeRouter)),
+  docker: lazy(() => import("./router/docker/docker-router").then((mod) => mod.dockerRouter)),
+  kubernetes: lazy(() => import("./router/kubernetes/router/kubernetes-router").then((mod) => mod.kubernetesRouter)),
+  serverSettings: lazy(() => import("./router/serverSettings").then((mod) => mod.serverSettingsRouter)),
+  cronJobs: lazy(() => import("./router/cron-jobs").then((mod) => mod.cronJobsRouter)),
+  apiKeys: lazy(() => import("./router/apiKeys").then((mod) => mod.apiKeysRouter)),
+  media: lazy(() => import("./router/medias/media-router").then((mod) => mod.mediaRouter)),
+  updateChecker: lazy(() => import("./router/update-checker").then((mod) => mod.updateCheckerRouter)),
+  certificates: lazy(() => import("./router/certificates/certificate-router").then((mod) => mod.certificateRouter)),
+  info: lazy(() => import("./router/info").then((mod) => mod.infoRouter)),
 });
 
 // export type definition of API

packages/api/src/router/app.ts

@@ -1,7 +1,9 @@
 import { TRPCError } from "@trpc/server";
 import { z } from "zod/v4";
 
+import type { Session } from "@homarr/auth";
 import { createId } from "@homarr/common";
+import type { Database, InferSelectModel } from "@homarr/db";
 import { asc, eq, inArray, like } from "@homarr/db";
 import { apps } from "@homarr/db/schema";
 import { selectAppSchema } from "@homarr/db/validationSchemas";
@@ -11,7 +13,7 @@ import { byIdSchema, paginatedSchema } from "@homarr/validation/common";
 
 import { convertIntersectionToZodObject } from "../schema-merger";
 import { createTRPCRouter, permissionRequiredProcedure, protectedProcedure, publicProcedure } from "../trpc";
-import { canUserSeeAppAsync } from "./app/app-access-control";
+import { AppAccessControl } from "./app/app-access-control";
 
 const defaultIcon = "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/homarr.svg";
 
@@ -89,9 +91,8 @@ export const appRouter = createTRPCRouter({
     .output(selectAppSchema)
     .meta({ openapi: { method: "GET", path: "/api/apps/{id}", tags: ["apps"], protect: true } })
     .query(async ({ ctx, input }) => {
-      const app = await ctx.db.query.apps.findFirst({
-        where: eq(apps.id, input.id),
-      });
+      const repository = new AppRepository(ctx.db, ctx.session?.user ?? null);
+      const app = await repository.getByIdAsync(input.id);
 
       if (!app) {
         throw new TRPCError({
@@ -100,20 +101,11 @@ export const appRouter = createTRPCRouter({
         });
       }
 
-      const canUserSeeApp = await canUserSeeAppAsync(ctx.session?.user ?? null, app.id);
-      if (!canUserSeeApp) {
-        throw new TRPCError({
-          code: "NOT_FOUND",
-          message: "App not found",
-        });
-      }
-
       return app;
     }),
   byIds: publicProcedure.input(z.array(z.string())).query(async ({ ctx, input }) => {
-    return await ctx.db.query.apps.findMany({
-      where: inArray(apps.id, input),
-    });
+    const repository = new AppRepository(ctx.db, ctx.session?.user ?? null);
+    return await repository.getByIdsAsync(input);
   }),
   create: permissionRequiredProcedure
     .requiresPermission("app-create")
@@ -187,3 +179,30 @@ export const appRouter = createTRPCRouter({
       await ctx.db.delete(apps).where(eq(apps.id, input.id));
     }),
 });
+
+type App = InferSelectModel<typeof apps>;
+
+export class AppRepository {
+  private readonly accessControl: AppAccessControl;
+
+  constructor(
+    private db: Database,
+    user: Session["user"] | null,
+  ) {
+    this.accessControl = new AppAccessControl(db, user);
+  }
+
+  public async getByIdAsync(id: string): Promise<App | null> {
+    const apps = await this.getByIdsAsync([id]);
+    return apps[0] ?? null;
+  }
+
+  public async getByIdsAsync(ids: string[]): Promise<App[]> {
+    const canUserSeeApps = await this.accessControl.canUserSeeAppsAsync(ids);
+    const dbApps = await this.db.query.apps.findMany({
+      where: inArray(apps.id, ids),
+    });
+
+    return canUserSeeApps ? dbApps : [];
+  }
+}

packages/api/src/router/app/app-access-control.ts

@@ -1,45 +1,52 @@
 import SuperJSON from "superjson";
 
 import type { Session } from "@homarr/auth";
-import { db, eq, or } from "@homarr/db";
+import type { Database } from "@homarr/db";
+import { eq, or } from "@homarr/db";
 import { items } from "@homarr/db/schema";
 
 import type { WidgetComponentProps } from "../../../../widgets/src";
 
-export const canUserSeeAppAsync = async (user: Session["user"] | null, appId: string) => {
-  return await canUserSeeAppsAsync(user, [appId]);
-};
+export class AppAccessControl {
+  constructor(
+    private db: Database,
+    private user: Session["user"] | null,
+  ) {}
 
-export const canUserSeeAppsAsync = async (user: Session["user"] | null, appIds: string[]) => {
-  if (user) return true;
+  async canUserSeeAppAsync(appId: string) {
+    return await this.canUserSeeAppsAsync([appId]);
+  }
 
-  const appIdsOnPublicBoards = await getAllAppIdsOnPublicBoardsAsync();
-  return appIds.every((appId) => appIdsOnPublicBoards.includes(appId));
-};
+  async canUserSeeAppsAsync(appIds: string[]) {
+    // Currently any user can see all apps if they are logged in
+    if (this.user) return true;
 
-const getAllAppIdsOnPublicBoardsAsync = async () => {
-  const itemsWithApps = await db.query.items.findMany({
-    where: or(eq(items.kind, "app"), eq(items.kind, "bookmarks")),
-    with: {
-      board: {
-        columns: {
-          isPublic: true,
+    const appIdsOnPublicBoards = await this.getAllAppIdsOnPublicBoardsAsync();
+    return appIds.every((appId) => appIdsOnPublicBoards.includes(appId));
+  }
+
+  private async getAllAppIdsOnPublicBoardsAsync() {
+    const itemsWithApps = await this.db.query.items.findMany({
+      where: or(eq(items.kind, "app"), eq(items.kind, "bookmarks")),
+      with: {
+        board: {
+          columns: {
+            isPublic: true,
+          },
         },
       },
-    },
-  });
+    });
+
+    return itemsWithApps
+      .filter((item) => item.board.isPublic)
+      .flatMap((item) => {
+        if (item.kind === "app") {
+          const parsedOptions = SuperJSON.parse<WidgetComponentProps<"app">["options"]>(item.options);
+          return [parsedOptions.appId];
+        }
 
-  return itemsWithApps
-    .filter((item) => item.board.isPublic)
-    .flatMap((item) => {
-      if (item.kind === "app") {
-        const parsedOptions = SuperJSON.parse<WidgetComponentProps<"app">["options"]>(item.options);
-        return [parsedOptions.appId];
-      } else if (item.kind === "bookmarks") {
         const parsedOptions = SuperJSON.parse<WidgetComponentProps<"bookmarks">["options"]>(item.options);
         return parsedOptions.items;
-      }
-
-      throw new Error("Failed to get app ids from board. Invalid item kind: 'test'");
-    });
-};
+      });
+  }
+}

packages/api/src/router/board.ts

@@ -442,7 +442,7 @@ export const boardRouter = createTRPCRouter({
       await handleTransactionsAsync(ctx.db, {
         async handleAsync(db, schema) {
           await db.transaction(async (transaction) => {
-            transaction.insert(schema.boards).values({
+            await transaction.insert(schema.boards).values({
               ...boardProps,
               id: newBoardId,
               name: input.name,

packages/api/src/router/integration/integration-router.ts

@@ -43,15 +43,15 @@ import { mapTestConnectionError } from "./map-test-connection-error";
 const logger = createLogger({ module: "integrationRouter" });
 
 export const integrationRouter = createTRPCRouter({
-  all: publicProcedure.query(async ({ ctx }) => {
+  all: protectedProcedure.query(async ({ ctx }) => {
     const groupsOfCurrentUser = await ctx.db.query.groupMembers.findMany({
-      where: eq(groupMembers.userId, ctx.session?.user.id ?? ""),
+      where: eq(groupMembers.userId, ctx.session.user.id),
     });
 
     const integrations = await ctx.db.query.integrations.findMany({
       with: {
         userPermissions: {
-          where: eq(integrationUserPermissions.userId, ctx.session?.user.id ?? ""),
+          where: eq(integrationUserPermissions.userId, ctx.session.user.id),
         },
         groupPermissions: {
           where: inArray(
@@ -85,15 +85,15 @@ export const integrationRouter = createTRPCRouter({
           integrationKinds.indexOf(integrationA.kind) - integrationKinds.indexOf(integrationB.kind),
       );
   }),
-  allThatSupportSearch: publicProcedure.query(async ({ ctx }) => {
+  allThatSupportSearch: protectedProcedure.query(async ({ ctx }) => {
     const groupsOfCurrentUser = await ctx.db.query.groupMembers.findMany({
-      where: eq(groupMembers.userId, ctx.session?.user.id ?? ""),
+      where: eq(groupMembers.userId, ctx.session.user.id),
     });
 
     const integrationsFromDb = await ctx.db.query.integrations.findMany({
       with: {
         userPermissions: {
-          where: eq(integrationUserPermissions.userId, ctx.session?.user.id ?? ""),
+          where: eq(integrationUserPermissions.userId, ctx.session.user.id),
         },
         groupPermissions: {
           where: inArray(
@@ -133,7 +133,7 @@ export const integrationRouter = createTRPCRouter({
           integrationKinds.indexOf(integrationA.kind) - integrationKinds.indexOf(integrationB.kind),
       );
   }),
-  allOfGivenCategory: publicProcedure
+  allOfGivenCategory: protectedProcedure
     .input(
       z.object({
         category: z.enum(integrationCategories),
@@ -141,7 +141,7 @@ export const integrationRouter = createTRPCRouter({
     )
     .query(async ({ ctx, input }) => {
       const groupsOfCurrentUser = await ctx.db.query.groupMembers.findMany({
-        where: eq(groupMembers.userId, ctx.session?.user.id ?? ""),
+        where: eq(groupMembers.userId, ctx.session.user.id),
       });
 
       const intergrationKinds = getIntegrationKindsByCategory(input.category);
@@ -149,7 +149,7 @@ export const integrationRouter = createTRPCRouter({
       const integrationsFromDb = await ctx.db.query.integrations.findMany({
         with: {
           userPermissions: {
-            where: eq(integrationUserPermissions.userId, ctx.session?.user.id ?? ""),
+            where: eq(integrationUserPermissions.userId, ctx.session.user.id),
           },
           groupPermissions: {
             where: inArray(

packages/api/src/router/kubernetes/router/kubernetes-router.ts

@@ -1,22 +1,15 @@
+import { lazy } from "@trpc/server";
+
 import { createTRPCRouter } from "../../../trpc";
-import { clusterRouter } from "./cluster";
-import { configMapsRouter } from "./configMaps";
-import { ingressesRouter } from "./ingresses";
-import { namespacesRouter } from "./namespaces";
-import { nodesRouter } from "./nodes";
-import { podsRouter } from "./pods";
-import { secretsRouter } from "./secrets";
-import { servicesRouter } from "./services";
-import { volumesRouter } from "./volumes";
 
 export const kubernetesRouter = createTRPCRouter({
-  nodes: nodesRouter,
-  cluster: clusterRouter,
-  namespaces: namespacesRouter,
-  ingresses: ingressesRouter,
-  services: servicesRouter,
-  pods: podsRouter,
-  secrets: secretsRouter,
-  configMaps: configMapsRouter,
-  volumes: volumesRouter,
+  nodes: lazy(() => import("./nodes").then((mod) => mod.nodesRouter)),
+  cluster: lazy(() => import("./cluster").then((mod) => mod.clusterRouter)),
+  namespaces: lazy(() => import("./namespaces").then((mod) => mod.namespacesRouter)),
+  ingresses: lazy(() => import("./ingresses").then((mod) => mod.ingressesRouter)),
+  services: lazy(() => import("./services").then((mod) => mod.servicesRouter)),
+  pods: lazy(() => import("./pods").then((mod) => mod.podsRouter)),
+  secrets: lazy(() => import("./secrets").then((mod) => mod.secretsRouter)),
+  configMaps: lazy(() => import("./configMaps").then((mod) => mod.configMapsRouter)),
+  volumes: lazy(() => import("./volumes").then((mod) => mod.volumesRouter)),
 });

packages/api/src/router/test/app.spec.ts

@@ -13,6 +13,14 @@ import * as appAccessControl from "../app/app-access-control";
 // Mock the auth module to return an empty session
 vi.mock("@homarr/auth", () => ({ auth: () => ({}) as Session }));
 
+const createFakeAccessControl = (canAccess: boolean) =>
+  vi.fn(
+    class {
+      canUserSeeAppAsync = async (_: string) => await Promise.resolve(canAccess);
+      canUserSeeAppsAsync = async (_: string[]) => await Promise.resolve(canAccess);
+    } as unknown as typeof appAccessControl.AppAccessControl,
+  );
+
 const createDefaultSession = (permissions: GroupPermissionKey[] = []): Session => ({
   user: { id: createId(), permissions, colorScheme: "light" },
   expires: new Date().toISOString(),
@@ -77,7 +85,7 @@ describe("byId should return an app by id", () => {
       deviceType: undefined,
       session: null,
     });
-    vi.spyOn(appAccessControl, "canUserSeeAppAsync").mockReturnValue(Promise.resolve(true));
+    vi.spyOn(appAccessControl, "AppAccessControl").mockImplementation(createFakeAccessControl(true));
 
     await db.insert(apps).values([
       {
@@ -118,7 +126,7 @@ describe("byId should return an app by id", () => {
         href: "https://mantine.dev",
       },
     ]);
-    vi.spyOn(appAccessControl, "canUserSeeAppAsync").mockReturnValue(Promise.resolve(false));
+    vi.spyOn(appAccessControl, "AppAccessControl").mockImplementation(createFakeAccessControl(false));
 
     // Act
     const actAsync = async () => await caller.byId({ id: "2" });

packages/api/src/router/test/widgets/app.spec.ts

@@ -1,6 +1,9 @@
 import { describe, expect, test, vi } from "vitest";
 
 import type { Session } from "@homarr/auth";
+import { createId } from "@homarr/common";
+import type { InferInsertModel } from "@homarr/db";
+import { apps } from "@homarr/db/schema";
 import { createDb } from "@homarr/db/test";
 import * as ping from "@homarr/ping";
 
@@ -9,22 +12,31 @@ import { appRouter } from "../../widgets/app";
 // Mock the auth module to return an empty session
 vi.mock("@homarr/auth", () => ({ auth: () => ({}) as Session }));
 vi.mock("@homarr/ping", () => ({ sendPingRequestAsync: async () => await Promise.resolve(null) }));
+vi.mock("../../app/app-access-control", () => ({
+  AppAccessControl: vi.fn(
+    class {
+      canUserSeeAppAsync = async (_: string) => await Promise.resolve(true);
+      canUserSeeAppsAsync = async (_: string[]) => await Promise.resolve(true);
+    },
+  ),
+}));
 
 describe("ping should call sendPingRequestAsync with url and return result", () => {
   test("ping with error response should return error and url", async () => {
     // Arrange
-    const spy = vi.spyOn(ping, "sendPingRequestAsync");
+    vi.spyOn(ping, "sendPingRequestAsync").mockImplementation(() => Promise.resolve({ error: "error" }));
     const url = "http://localhost";
     const db = createDb();
+    const app = createApp({ url });
+    await db.insert(apps).values(app);
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
       session: null,
     });
-    spy.mockImplementation(() => Promise.resolve({ error: "error" }));
 
     // Act
-    const result = await caller.ping({ url });
+    const result = await caller.ping({ id: app.id });
 
     // Assert
     expect(result.url).toBe(url);
@@ -33,21 +45,32 @@ describe("ping should call sendPingRequestAsync with url and return result", ()
 
   test("ping with success response should return statusCode and url", async () => {
     // Arrange
-    const spy = vi.spyOn(ping, "sendPingRequestAsync");
+    vi.spyOn(ping, "sendPingRequestAsync").mockImplementation(() =>
+      Promise.resolve({ statusCode: 200, durationMs: 123 }),
+    );
     const url = "http://localhost";
     const db = createDb();
+    const app = createApp({ url });
+    await db.insert(apps).values(app);
     const caller = appRouter.createCaller({
       db,
       deviceType: undefined,
       session: null,
     });
-    spy.mockImplementation(() => Promise.resolve({ statusCode: 200, durationMs: 123 }));
 
     // Act
-    const result = await caller.ping({ url });
+    const result = await caller.ping({ id: app.id });
 
     // Assert
     expect(result.url).toBe(url);
     expect("statusCode" in result).toBe(true);
   });
 });
+
+const createApp = ({ url }: { url: string }) =>
+  ({
+    id: createId(),
+    iconUrl: "",
+    name: "Test App",
+    href: url,
+  }) satisfies InferInsertModel<typeof apps>;

packages/api/src/router/test/widgets/rssFeed.spec.ts

@@ -0,0 +1,221 @@
+import SuperJSON from "superjson";
+import { describe, expect, test } from "vitest";
+
+import type { Session } from "@homarr/auth";
+import { createId } from "@homarr/common";
+import type { InferInsertModel } from "@homarr/db";
+import {
+  boardGroupPermissions,
+  boards,
+  boardUserPermissions,
+  groupMembers,
+  groups,
+  items,
+  users,
+} from "@homarr/db/schema";
+import { createDb } from "@homarr/db/test";
+import type { GroupPermissionKey } from "@homarr/definitions";
+
+import type { WidgetComponentProps } from "../../../../../widgets/src/definition";
+import { canAccessAllFeedsAsync, restrictUrlsAsync } from "../../widgets/rssFeed";
+
+const createSession = (permissions: GroupPermissionKey[] = []): Session => ({
+  user: {
+    id: "user-id",
+    colorScheme: "light",
+    permissions,
+  },
+  expires: new Date().toISOString(),
+});
+
+describe("rssFeedRouter", () => {
+  describe("canAccessAllFeedsAsync", () => {
+    test("should return false for unauthenticated users", async () => {
+      // Arrange
+      const { callback } = setupAccessCheck();
+
+      // Act
+      const result = await callback(/* session: */ null);
+
+      // Assert
+      expect(result).toBe(false);
+    });
+    test.each([["board-create" as const], ["board-modify-all" as const]])(
+      "should return true for users with %s permission",
+      async (permission) => {
+        // Arrange
+        const { callback } = setupAccessCheck();
+        const session = createSession([permission]);
+
+        // Act
+        const result = await callback(session);
+
+        // Assert
+        expect(result).toBe(true);
+      },
+    );
+    test("should return false for authenticated users without any boards or permissions", async () => {
+      // Arrange
+      const { callback, db } = setupAccessCheck();
+      const session = createSession();
+      await db.insert(users).values({
+        id: session.user.id,
+      });
+
+      // Act
+      const result = await callback(session);
+
+      // Assert
+      expect(result).toBe(false);
+    });
+    test("should return true for authenticated users that own at least one board", async () => {
+      // Arrange
+      const { callback, db } = setupAccessCheck();
+      const session = createSession();
+      await db.insert(users).values({
+        id: session.user.id,
+      });
+      await db.insert(boards).values({
+        id: createId(),
+        name: "test",
+        creatorId: session.user.id,
+      });
+
+      // Act
+      const result = await callback(session);
+
+      // Assert
+      expect(result).toBe(true);
+    });
+    test.each([["modify" as const], ["full" as const]])(
+      "should return true for authenticated users that have %s permissions on at least one board",
+      async (permission) => {
+        // Arrange
+        const { callback, db } = setupAccessCheck();
+        const session = createSession();
+        await db.insert(users).values({
+          id: session.user.id,
+        });
+        const boardId = createId();
+        await db.insert(boards).values({
+          id: boardId,
+          name: "test",
+        });
+        await db.insert(boardUserPermissions).values({
+          boardId,
+          permission,
+          userId: session.user.id,
+        });
+
+        // Act
+        const result = await callback(session);
+
+        // Assert
+        expect(result).toBe(true);
+      },
+    );
+    test.each([["modify" as const], ["full" as const]])(
+      "should return true for authenticated users that have %s permissions through group on at least one board",
+      async (permission) => {
+        // Arrange
+        const { callback, db } = setupAccessCheck();
+        const session = createSession();
+        await db.insert(users).values({
+          id: session.user.id,
+        });
+        const boardId = createId();
+        await db.insert(boards).values({
+          id: boardId,
+          name: "test",
+        });
+        const groupId = createId();
+        await db.insert(groups).values({
+          id: groupId,
+          name: "test-group",
+          position: 0,
+        });
+        await db.insert(groupMembers).values({
+          groupId,
+          userId: session.user.id,
+        });
+        await db.insert(boardGroupPermissions).values({
+          boardId,
+          groupId,
+          permission,
+        });
+
+        // Act
+        const result = await callback(session);
+
+        // Assert
+        expect(result).toBe(true);
+      },
+    );
+  });
+
+  describe("restrictUrlsAsync", () => {
+    test("should return empty array if there are no rss feed items in the database", async () => {
+      // Arrange
+      const { callback } = await setupUrlRestrictionAsync([]);
+
+      // Act
+      const result = await callback(["http://example.com/feed"]);
+
+      // Assert
+      expect(result).toEqual([]);
+    });
+
+    test("should return only the URLs that are present in the database", async () => {
+      // Arrange
+      const { callback } = await setupUrlRestrictionAsync(["http://example.com/feed"]);
+
+      // Act
+      const result = await callback(["http://example.com/feed", "http://not-in-db.com/feed"]);
+
+      // Assert
+      expect(result).toEqual(["http://example.com/feed"]);
+    });
+  });
+});
+
+function setupAccessCheck() {
+  const db = createDb();
+
+  return {
+    callback: (session: Session | null) => canAccessAllFeedsAsync(db, session),
+    db,
+  };
+}
+
+async function setupUrlRestrictionAsync(dbUrls: string[]) {
+  const db = createDb();
+  const boardId = createId();
+  await db.insert(boards).values({
+    id: boardId,
+    name: "test",
+  });
+  if (dbUrls.length >= 1) {
+    await db.insert(items).values(
+      dbUrls.map(
+        (url) =>
+          ({
+            id: createId(),
+            kind: "rssFeed",
+            boardId,
+            options: SuperJSON.stringify({
+              feedUrls: [url],
+              enableRtl: false,
+              hideDescription: false,
+              textLinesClamp: 3,
+              maximumAmountPosts: 5,
+            } satisfies WidgetComponentProps<"rssFeed">["options"]),
+          }) satisfies InferInsertModel<typeof items>,
+      ),
+    );
+  }
+
+  return {
+    callback: (urls: string[]) => restrictUrlsAsync(db, urls),
+    db,
+  };
+}

packages/api/src/router/widgets/app.ts

@@ -1,43 +1,97 @@
+import { TRPCError } from "@trpc/server";
 import { observable } from "@trpc/server/observable";
 import { z } from "zod/v4";
 
+import { getServerSettingByKeyAsync } from "@homarr/db/queries";
 import { sendPingRequestAsync } from "@homarr/ping";
 import { pingChannel, pingUrlChannel } from "@homarr/redis";
 
 import { createTRPCRouter, publicProcedure } from "../../trpc";
+import { AppRepository } from "../app";
 
 export const appRouter = createTRPCRouter({
-  ping: publicProcedure.input(z.object({ url: z.string() })).query(async ({ input }) => {
-    const pingResult = await sendPingRequestAsync(input.url);
+  ping: publicProcedure.input(z.object({ id: z.string() })).query(async ({ ctx, input }) => {
+    const boardSettings = await getServerSettingByKeyAsync(ctx.db, "board");
+    if (boardSettings.forceDisableStatus) {
+      throw new TRPCError({
+        code: "FORBIDDEN",
+        message: "Ping functionality is disabled by server settings",
+      });
+    }
+
+    const repository = new AppRepository(ctx.db, ctx.session?.user ?? null);
+    const app = await repository.getByIdAsync(input.id);
+
+    if (!app) {
+      throw new TRPCError({
+        code: "NOT_FOUND",
+        message: "App not found",
+      });
+    }
+
+    const pingUrl = app.pingUrl ?? app.href;
+
+    if (!pingUrl) {
+      throw new TRPCError({
+        code: "CONFLICT",
+        message: "No URL to ping configured for this app",
+      });
+    }
+
+    const pingResult = await sendPingRequestAsync(pingUrl);
 
     return {
-      url: input.url,
+      url: pingUrl,
       ...pingResult,
     };
   }),
   updatedPing: publicProcedure
     .input(
       z.object({
-        url: z.string(),
+        id: z.string(),
       }),
     )
-    .subscription(async ({ input }) => {
-      await pingUrlChannel.addAsync(input.url);
+    .subscription(async ({ ctx, input }) => {
+      const boardSettings = await getServerSettingByKeyAsync(ctx.db, "board");
+      if (boardSettings.forceDisableStatus) {
+        throw new TRPCError({
+          code: "FORBIDDEN",
+          message: "Ping functionality is disabled by server settings",
+        });
+      }
 
-      const pingResult = await sendPingRequestAsync(input.url);
+      const repository = new AppRepository(ctx.db, ctx.session?.user ?? null);
+      const app = await repository.getByIdAsync(input.id);
+
+      if (!app) {
+        throw new TRPCError({
+          code: "NOT_FOUND",
+          message: "App not found",
+        });
+      }
+
+      const pingUrl = app.pingUrl ?? app.href;
+
+      if (!pingUrl) {
+        throw new TRPCError({
+          code: "CONFLICT",
+          message: "No URL to ping configured for this app",
+        });
+      }
+
+      await pingUrlChannel.addAsync(pingUrl);
 
       return observable<{ url: string; statusCode: number; durationMs: number } | { url: string; error: string }>(
         (emit) => {
-          emit.next({ url: input.url, ...pingResult });
           const unsubscribe = pingChannel.subscribe((message) => {
             // Only emit if same url
-            if (message.url !== input.url) return;
+            if (message.url !== pingUrl) return;
             emit.next(message);
           });
 
           return () => {
             unsubscribe();
-            void pingUrlChannel.removeAsync(input.url);
+            void pingUrlChannel.removeAsync(pingUrl);
           };
         },
       );

packages/api/src/router/widgets/coolify.ts

@@ -0,0 +1,50 @@
+import { observable } from "@trpc/server/observable";
+
+import type { CoolifyInstanceInfo } from "@homarr/integrations/types";
+import { coolifyRequestHandler } from "@homarr/request-handler/coolify";
+
+import { createManyIntegrationMiddleware } from "../../middlewares/integration";
+import { createTRPCRouter, publicProcedure } from "../../trpc";
+
+export const coolifyRouter = createTRPCRouter({
+  getInstancesInfo: publicProcedure
+    .concat(createManyIntegrationMiddleware("query", "coolify"))
+    .query(async ({ ctx }) => {
+      const results = await Promise.all(
+        ctx.integrations.map(async (integration) => {
+          const innerHandler = coolifyRequestHandler.handler(integration, {});
+          const { data, timestamp } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
+
+          return {
+            integrationId: integration.id,
+            integrationName: integration.name,
+            integrationUrl: integration.url,
+            instanceInfo: data,
+            updatedAt: timestamp,
+          };
+        }),
+      );
+
+      return results;
+    }),
+  subscribeInstancesInfo: publicProcedure
+    .concat(createManyIntegrationMiddleware("query", "coolify"))
+    .subscription(({ ctx }) => {
+      return observable<{ integrationId: string; instanceInfo: CoolifyInstanceInfo; timestamp: Date }>((emit) => {
+        const unsubscribes = ctx.integrations.map((integration) => {
+          const innerHandler = coolifyRequestHandler.handler(integration, {});
+          return innerHandler.subscribe((instanceInfo) => {
+            emit.next({
+              integrationId: integration.id,
+              instanceInfo,
+              timestamp: new Date(),
+            });
+          });
+        });
+
+        return () => {
+          unsubscribes.forEach((unsubscribe) => unsubscribe());
+        };
+      });
+    }),
+});

packages/api/src/router/widgets/health-monitoring.ts

@@ -9,7 +9,9 @@ import { createTRPCRouter, publicProcedure } from "../../trpc";
 
 export const healthMonitoringRouter = createTRPCRouter({
   getSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "mock"))
+    .concat(
+      createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "glances", "mock"),
+    )
     .query(async ({ ctx }) => {
       return await Promise.all(
         ctx.integrations.map(async (integration) => {
@@ -26,7 +28,9 @@ export const healthMonitoringRouter = createTRPCRouter({
       );
     }),
   subscribeSystemHealthStatus: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "mock"))
+    .concat(
+      createManyIntegrationMiddleware("query", "openmediavault", "dashDot", "truenas", "unraid", "glances", "mock"),
+    )
     .subscription(({ ctx }) => {
       return observable<{ integrationId: string; healthInfo: SystemHealthMonitoring; timestamp: Date }>((emit) => {
         const unsubscribes: (() => void)[] = [];

packages/api/src/router/widgets/immich.ts

@@ -0,0 +1,42 @@
+import { z } from "zod/v4";
+
+import { getIntegrationKindsByCategory } from "@homarr/definitions";
+import {
+  immichAlbumRequestHandler,
+  immichAlbumsRequestHandler,
+  immichStatsRequestHandler,
+} from "@homarr/request-handler/immich";
+
+import type { IntegrationAction } from "../../middlewares/integration";
+import { createOneIntegrationMiddleware } from "../../middlewares/integration";
+import { createTRPCRouter, publicProcedure } from "../../trpc";
+
+const createImmichIntegrationMiddleware = (action: IntegrationAction) =>
+  createOneIntegrationMiddleware(action, ...getIntegrationKindsByCategory("photoService"));
+
+export const immichRouter = createTRPCRouter({
+  getServerStats: publicProcedure.concat(createImmichIntegrationMiddleware("query")).query(async ({ ctx }) => {
+    const innerHandler = immichStatsRequestHandler.handler(ctx.integration, {});
+    const data = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
+    return data.data;
+  }),
+
+  getAlbum: publicProcedure
+    .concat(createImmichIntegrationMiddleware("query"))
+    .input(
+      z.object({
+        albumId: z.string(),
+      }),
+    )
+    .query(async ({ ctx, input }) => {
+      const innerHandler = immichAlbumRequestHandler.handler(ctx.integration, { albumId: input.albumId });
+      const data = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
+      return data.data;
+    }),
+
+  getAlbums: publicProcedure.concat(createImmichIntegrationMiddleware("query")).query(async ({ ctx }) => {
+    const innerHandler = immichAlbumsRequestHandler.handler(ctx.integration, {});
+    const data = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
+    return data.data;
+  }),
+});

packages/api/src/router/widgets/index.ts

@@ -1,46 +1,30 @@
+import { lazy } from "@trpc/server";
+
 import { createTRPCRouter } from "../../trpc";
-import { appRouter } from "./app";
-import { calendarRouter } from "./calendar";
-import { dnsHoleRouter } from "./dns-hole";
-import { downloadsRouter } from "./downloads";
-import { firewallRouter } from "./firewall";
-import { healthMonitoringRouter } from "./health-monitoring";
-import { indexerManagerRouter } from "./indexer-manager";
-import { mediaReleaseRouter } from "./media-release";
-import { mediaRequestsRouter } from "./media-requests";
-import { mediaServerRouter } from "./media-server";
-import { mediaTranscodingRouter } from "./media-transcoding";
-import { minecraftRouter } from "./minecraft";
-import { networkControllerRouter } from "./network-controller";
-import { notebookRouter } from "./notebook";
-import { notificationsRouter } from "./notifications";
-import { optionsRouter } from "./options";
-import { releasesRouter } from "./releases";
-import { rssFeedRouter } from "./rssFeed";
-import { smartHomeRouter } from "./smart-home";
-import { stockPriceRouter } from "./stocks";
-import { weatherRouter } from "./weather";
 
 export const widgetRouter = createTRPCRouter({
-  notebook: notebookRouter,
-  weather: weatherRouter,
-  app: appRouter,
-  dnsHole: dnsHoleRouter,
-  smartHome: smartHomeRouter,
-  stockPrice: stockPriceRouter,
-  mediaServer: mediaServerRouter,
-  mediaRelease: mediaReleaseRouter,
-  calendar: calendarRouter,
-  downloads: downloadsRouter,
-  mediaRequests: mediaRequestsRouter,
-  rssFeed: rssFeedRouter,
-  indexerManager: indexerManagerRouter,
-  healthMonitoring: healthMonitoringRouter,
-  mediaTranscoding: mediaTranscodingRouter,
-  minecraft: minecraftRouter,
-  options: optionsRouter,
-  releases: releasesRouter,
-  networkController: networkControllerRouter,
-  firewall: firewallRouter,
-  notifications: notificationsRouter,
+  coolify: lazy(() => import("./coolify").then((mod) => mod.coolifyRouter)),
+  immich: lazy(() => import("./immich").then((mod) => mod.immichRouter)),
+  notebook: lazy(() => import("./notebook").then((mod) => mod.notebookRouter)),
+  weather: lazy(() => import("./weather").then((mod) => mod.weatherRouter)),
+  app: lazy(() => import("./app").then((mod) => mod.appRouter)),
+  dnsHole: lazy(() => import("./dns-hole").then((mod) => mod.dnsHoleRouter)),
+  smartHome: lazy(() => import("./smart-home").then((mod) => mod.smartHomeRouter)),
+  stockPrice: lazy(() => import("./stocks").then((mod) => mod.stockPriceRouter)),
+  mediaServer: lazy(() => import("./media-server").then((mod) => mod.mediaServerRouter)),
+  mediaRelease: lazy(() => import("./media-release").then((mod) => mod.mediaReleaseRouter)),
+  calendar: lazy(() => import("./calendar").then((mod) => mod.calendarRouter)),
+  downloads: lazy(() => import("./downloads").then((mod) => mod.downloadsRouter)),
+  mediaRequests: lazy(() => import("./media-requests").then((mod) => mod.mediaRequestsRouter)),
+  rssFeed: lazy(() => import("./rssFeed").then((mod) => mod.rssFeedRouter)),
+  indexerManager: lazy(() => import("./indexer-manager").then((mod) => mod.indexerManagerRouter)),
+  healthMonitoring: lazy(() => import("./health-monitoring").then((mod) => mod.healthMonitoringRouter)),
+  mediaTranscoding: lazy(() => import("./media-transcoding").then((mod) => mod.mediaTranscodingRouter)),
+  minecraft: lazy(() => import("./minecraft").then((mod) => mod.minecraftRouter)),
+  options: lazy(() => import("./options").then((mod) => mod.optionsRouter)),
+  releases: lazy(() => import("./releases").then((mod) => mod.releasesRouter)),
+  networkController: lazy(() => import("./network-controller").then((mod) => mod.networkControllerRouter)),
+  firewall: lazy(() => import("./firewall").then((mod) => mod.firewallRouter)),
+  notifications: lazy(() => import("./notifications").then((mod) => mod.notificationsRouter)),
+  tracearr: lazy(() => import("./tracearr").then((mod) => mod.tracearrRouter)),
 });

packages/api/src/router/widgets/rssFeed.ts

@@ -1,20 +1,30 @@
+import SuperJSON from "superjson";
 import { z } from "zod/v4";
 
+import type { Session } from "@homarr/auth";
+import type { Database } from "@homarr/db";
+import { eq } from "@homarr/db";
+import { items, users } from "@homarr/db/schema";
 import { rssFeedsRequestHandler } from "@homarr/request-handler/rss-feeds";
 
+import type { WidgetComponentProps } from "../../../../widgets/src";
 import { createTRPCRouter, publicProcedure } from "../../trpc";
 
 export const rssFeedRouter = createTRPCRouter({
   getFeeds: publicProcedure
     .input(
       z.object({
-        urls: z.array(z.string()),
+        urls: z.array(z.string()).max(100),
         maximumAmountPosts: z.number(),
       }),
     )
-    .query(async ({ input }) => {
+    .query(async ({ ctx, input }) => {
+      const urls = (await canAccessAllFeedsAsync(ctx.db, ctx.session))
+        ? input.urls
+        : await restrictUrlsAsync(ctx.db, input.urls);
+
       const rssFeeds = await Promise.all(
-        input.urls.map(async (url) => {
+        urls.map(async (url) => {
           const innerHandler = rssFeedsRequestHandler.handler({
             url,
             count: input.maximumAmountPosts,
@@ -35,3 +45,63 @@ export const rssFeedRouter = createTRPCRouter({
         });
     }),
 });
+
+export async function canAccessAllFeedsAsync(db: Database, session: Session | null) {
+  // Unauthenticated users can never access all feeds
+  if (!session) return false;
+  // Users with those permissions can modify a board and therefore add a rss feed widget with any feed url
+  if (session.user.permissions.includes("board-create") || session.user.permissions.includes("board-modify-all")) {
+    return true;
+  }
+
+  const user = await db.query.users.findFirst({
+    where: eq(users.id, session.user.id),
+    with: {
+      boards: {
+        columns: { id: true },
+      },
+      boardPermissions: true,
+      groups: {
+        with: {
+          group: {
+            with: { boardPermissions: true },
+          },
+        },
+      },
+    },
+  });
+
+  // Should never happen as the user is authenticated, but just in case
+  if (!user) return false;
+
+  // If user is owner of any board he has full access and can therefore create widgets with any feed url
+  if (user.boards.length >= 1) return true;
+
+  // If user has direct permissions on any board that allow modifying it, he can add a rss feed widget with any feed url
+  if (user.boardPermissions.some(({ permission }) => permission === "modify" || permission === "full")) {
+    return true;
+  }
+
+  // If user is in a group that has permissions on any board that allow modifying it, he can add a rss feed widget with any feed url
+  if (
+    user.groups.some(({ group }) =>
+      group.boardPermissions.some(({ permission }) => permission === "modify" || permission === "full"),
+    )
+  ) {
+    return true;
+  }
+
+  // Fallback to not allowing access to all feeds
+  return false;
+}
+
+export async function restrictUrlsAsync(db: Database, urls: string[]) {
+  const rssFeedItems = await db.query.items.findMany({
+    where: eq(items.kind, "rssFeed"),
+  });
+
+  const configuredUrls = rssFeedItems
+    .map((item) => SuperJSON.parse<WidgetComponentProps<"rssFeed">["options"]>(item.options))
+    .flatMap((options) => options.feedUrls);
+  return urls.filter((url) => configuredUrls.includes(url));
+}

packages/api/src/router/widgets/tracearr.ts

@@ -0,0 +1,48 @@
+import { observable } from "@trpc/server/observable";
+
+import type { TracearrDashboardData } from "@homarr/integrations/types";
+import { tracearrRequestHandler } from "@homarr/request-handler/tracearr";
+
+import { createManyIntegrationMiddleware } from "../../middlewares/integration";
+import { createTRPCRouter, publicProcedure } from "../../trpc";
+
+export const tracearrRouter = createTRPCRouter({
+  getDashboard: publicProcedure.concat(createManyIntegrationMiddleware("query", "tracearr")).query(async ({ ctx }) => {
+    const results = await Promise.all(
+      ctx.integrations.map(async (integration) => {
+        const innerHandler = tracearrRequestHandler.handler(integration, {});
+        const { data, timestamp } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
+
+        return {
+          integrationId: integration.id,
+          integrationName: integration.name,
+          integrationUrl: integration.url,
+          dashboard: data,
+          updatedAt: timestamp,
+        };
+      }),
+    );
+
+    return results;
+  }),
+  subscribeToDashboard: publicProcedure
+    .concat(createManyIntegrationMiddleware("query", "tracearr"))
+    .subscription(({ ctx }) => {
+      return observable<{ integrationId: string; dashboard: TracearrDashboardData; timestamp: Date }>((emit) => {
+        const unsubscribes = ctx.integrations.map((integration) => {
+          const innerHandler = tracearrRequestHandler.handler(integration, {});
+          return innerHandler.subscribe((dashboard) => {
+            emit.next({
+              integrationId: integration.id,
+              dashboard,
+              timestamp: new Date(),
+            });
+          });
+        });
+
+        return () => {
+          unsubscribes.forEach((unsubscribe) => unsubscribe());
+        };
+      });
+    }),
+});

packages/auth/package.json

@@ -33,11 +33,11 @@
     "@homarr/validation": "workspace:^0.1.0",
     "bcrypt": "^6.0.0",
     "cookies": "^0.9.1",
-    "ldapts": "8.1.2",
-    "next": "16.1.1",
+    "ldapts": "8.1.7",
+    "next": "16.1.6",
     "next-auth": "5.0.0-beta.30",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
     "zod": "^4.2.1"
   },
   "devDependencies": {
@@ -46,8 +46,8 @@
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/bcrypt": "6.0.0",
     "@types/cookies": "0.9.2",
-    "eslint": "^9.39.2",
-    "prettier": "^3.7.4",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
     "typescript": "^5.9.3"
   }
 }

packages/boards/package.json

@@ -25,14 +25,14 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@homarr/api": "workspace:^0.1.0",
-    "react": "19.2.3",
-    "react-dom": "19.2.3"
+    "react": "19.2.4",
+    "react-dom": "19.2.4"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cli/package.json

@@ -19,7 +19,9 @@
     "clean": "rm -rf .turbo node_modules",
     "format": "prettier --check . --ignore-path ../../.gitignore",
     "lint": "eslint",
-    "typecheck": "tsc --noEmit"
+    "run": "pnpm with-env node cli.cjs",
+    "typecheck": "tsc --noEmit",
+    "with-env": "dotenv -e .env --"
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
@@ -28,14 +30,14 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "^17.2.3"
+    "dotenv": "^17.3.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "esbuild": "^0.27.2",
-    "eslint": "^9.39.2",
+    "esbuild": "^0.27.3",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cli/src/commands/integrations-delete.ts

@@ -0,0 +1,39 @@
+import { command, string } from "@drizzle-team/brocli";
+
+import { db, eq } from "@homarr/db";
+import { integrations } from "@homarr/db/schema";
+
+export const integrationsDelete = command({
+  name: "delete",
+  desc: "Delete an integration by id or name",
+  options: {
+    id: string("id").alias("i").desc("ID of the integration"),
+    name: string("name").alias("n").desc("Name of the integration"),
+  },
+  // eslint-disable-next-line no-restricted-syntax
+  handler: async (options) => {
+    if (!options.id && !options.name) {
+      console.error("Either --id or --name must be provided");
+      return;
+    }
+
+    let entry;
+    if (options.id) {
+      entry = await db.query.integrations.findFirst({
+        where: eq(integrations.id, options.id),
+      });
+    } else if (options.name) {
+      entry = await db.query.integrations.findFirst({
+        where: eq(integrations.name, options.name),
+      });
+    }
+
+    if (!entry) {
+      console.error("Integration not found");
+      return;
+    }
+
+    await db.delete(integrations).where(eq(integrations.id, entry.id));
+    console.log(`Integration ${entry.name} (${entry.id}) deleted`);
+  },
+});

packages/cli/src/commands/integrations-list.ts

@@ -0,0 +1,21 @@
+import { command } from "@drizzle-team/brocli";
+
+import { db } from "@homarr/db";
+
+export const integrationsList = command({
+  name: "list",
+  desc: "List all integrations (id and name)",
+  // eslint-disable-next-line no-restricted-syntax
+  handler: async () => {
+    const all = await db.query.integrations.findMany();
+    if (all.length === 0) {
+      console.log("No integrations found");
+      return;
+    }
+
+    console.log("ID\t\t\t\tName");
+    for (const i of all) {
+      console.log(`${i.id}\t${i.name}`);
+    }
+  },
+});

packages/cli/src/commands/integrations.ts

@@ -0,0 +1,10 @@
+import { command } from "@drizzle-team/brocli";
+
+import { integrationsDelete } from "./integrations-delete";
+import { integrationsList } from "./integrations-list";
+
+export const integrationsRoot = command({
+  name: "integrations",
+  desc: "Group of commands to manage integrations",
+  subcommands: [integrationsList, integrationsDelete],
+});

packages/cli/src/commands/users-delete.ts

@@ -0,0 +1,39 @@
+import { command, string } from "@drizzle-team/brocli";
+
+import { db, eq } from "@homarr/db";
+import { users } from "@homarr/db/schema";
+
+export const usersDelete = command({
+  name: "delete",
+  desc: "Delete a user by id or username",
+  options: {
+    id: string("id").alias("i").desc("ID of the user"),
+    username: string("username").alias("u").desc("Name of the user"),
+  },
+  // eslint-disable-next-line no-restricted-syntax
+  handler: async (options) => {
+    if (!options.id && !options.username) {
+      console.error("Either --id or --username must be provided");
+      return;
+    }
+
+    let user;
+    if (options.id) {
+      user = await db.query.users.findFirst({
+        where: eq(users.id, options.id),
+      });
+    } else if (options.username) {
+      user = await db.query.users.findFirst({
+        where: eq(users.name, options.username),
+      });
+    }
+
+    if (!user) {
+      console.error("User not found");
+      return;
+    }
+
+    await db.delete(users).where(eq(users.id, user.id));
+    console.log(`User ${user.name ?? user.id} (${user.id}) deleted`);
+  },
+});

packages/cli/src/commands/users-list.ts

@@ -0,0 +1,22 @@
+import { command } from "@drizzle-team/brocli";
+
+import { db } from "@homarr/db";
+
+export const usersList = command({
+  name: "list",
+  desc: "List all users (id, username, email)",
+  // eslint-disable-next-line no-restricted-syntax
+  handler: async () => {
+    const allUsers = await db.query.users.findMany();
+
+    if (allUsers.length === 0) {
+      console.log("No users found");
+      return;
+    }
+
+    console.log("ID\t\t\t\tUsername\tEmail");
+    for (const user of allUsers) {
+      console.log(`${user.id}\t${user.name ?? ""}\t${user.email ?? ""}`);
+    }
+  },
+});

packages/cli/src/commands/users-update-password.ts

@@ -0,0 +1,50 @@
+import { command, string } from "@drizzle-team/brocli";
+
+import { hashPasswordAsync } from "@homarr/auth";
+import { db, eq } from "@homarr/db";
+import { sessions, users } from "@homarr/db/schema";
+
+export const usersUpdatePassword = command({
+  name: "update-password",
+  desc: "Update the password for a user (credentials provider only)",
+  options: {
+    id: string("id").alias("i").desc("ID of the user"),
+    username: string("username").alias("u").desc("Name of the user"),
+    password: string("password").alias("p").required().desc("New password"),
+  },
+  // eslint-disable-next-line no-restricted-syntax
+  handler: async (options) => {
+    if (!process.env.AUTH_PROVIDERS?.toLowerCase().includes("credentials")) {
+      console.error("Credentials provider is not enabled");
+      return;
+    }
+
+    if (!options.id && !options.username) {
+      console.error("Either --id or --username must be provided");
+      return;
+    }
+
+    const user = await db.query.users.findFirst({
+      // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+      where: options.id ? eq(users.id, options.id) : eq(users.name, options.username!),
+    });
+
+    if (!user?.salt) {
+      console.error("User not found or has no credentials record");
+      return;
+    }
+
+    await db
+      .update(users)
+      .set({
+        password: await hashPasswordAsync(options.password, user.salt),
+      })
+      .where(eq(users.id, user.id));
+
+    // invalidate existing sessions
+    await db.delete(sessions).where(eq(sessions.userId, user.id));
+    console.log(`All sessions for user ${user.name ?? user.id} have been deleted`);
+
+    console.log("Password updated successfully");
+  },
+});

packages/cli/src/commands/users.ts

@@ -0,0 +1,11 @@
+import { command } from "@drizzle-team/brocli";
+
+import { usersDelete } from "./users-delete";
+import { usersList } from "./users-list";
+import { usersUpdatePassword } from "./users-update-password";
+
+export const usersRoot = command({
+  name: "users",
+  desc: "Group of commands to manage users",
+  subcommands: [usersList, usersDelete, usersUpdatePassword],
+});

packages/cli/src/index.ts

@@ -1,10 +1,12 @@
 import { run } from "@drizzle-team/brocli";
 
 import { fixUsernames } from "./commands/fix-usernames";
+import { integrationsRoot } from "./commands/integrations";
 import { recreateAdmin } from "./commands/recreate-admin";
 import { resetPassword } from "./commands/reset-password";
+import { usersRoot } from "./commands/users";
 
-const commands = [resetPassword, fixUsernames, recreateAdmin];
+const commands = [usersRoot, integrationsRoot, resetPassword, fixUsernames, recreateAdmin];
 
 void run(commands, {
   name: "homarr-cli",

packages/common/package.json

@@ -27,13 +27,14 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@homarr/core": "workspace:^0.1.0",
-    "@paralleldrive/cuid2": "^3.1.0",
+    "@paralleldrive/cuid2": "^3.3.0",
+    "cookie": "1.1.1",
     "dayjs": "^1.11.19",
-    "next": "16.1.1",
+    "next": "16.1.6",
     "octokit": "^5.0.5",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
-    "undici": "7.16.0",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "undici": "7.18.2",
     "zod": "^4.2.1",
     "zod-validation-error": "^5.0.0"
   },
@@ -41,7 +42,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/common/src/cookie.ts

@@ -1,10 +1,10 @@
 import type { SerializeOptions } from "cookie";
-import { parse, serialize } from "cookie";
+import { parseCookie, stringifySetCookie } from "cookie";
 
 export function parseCookies(cookieString: string) {
-  return parse(cookieString);
+  return parseCookie(cookieString);
 }
 
 export function setClientCookie(name: string, value: string, options: SerializeOptions = {}) {
-  document.cookie = serialize(name, value, options);
+  document.cookie = stringifySetCookie(name, value, options);
 }

packages/common/src/date.ts

@@ -6,6 +6,17 @@ dayjs.extend(isBetween);
 
 const validUnits = ["h", "d", "w", "M", "y"] as UnitTypeShort[];
 
+export function formatDuration(milliseconds: number) {
+  const totalSeconds = Math.floor(milliseconds / 1000);
+  const hours = Math.floor(totalSeconds / 3600);
+  const minutes = Math.floor((totalSeconds % 3600) / 60);
+  const seconds = totalSeconds % 60;
+  if (hours > 0) {
+    return `${hours}:${String(minutes).padStart(2, "0")}:${String(seconds).padStart(2, "0")}`;
+  }
+  return `${minutes}:${String(seconds).padStart(2, "0")}`;
+}
+
 export const isDateWithin = (date: Date, relativeDate: string): boolean => {
   if (relativeDate.length < 2) {
     throw new Error("Relative date must be at least 2 characters long");

packages/core/package.json

@@ -38,12 +38,12 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@t3-oss/env-nextjs": "^0.13.10",
-    "better-sqlite3": "^12.5.0",
+    "better-sqlite3": "^12.6.2",
     "dns-caching": "^0.2.9",
     "drizzle-orm": "^0.45.1",
-    "ioredis": "5.8.2",
-    "mysql2": "3.16.0",
-    "pg": "^8.16.3",
+    "ioredis": "5.10.0",
+    "mysql2": "3.19.1",
+    "pg": "^8.20.0",
     "superjson": "2.2.6",
     "winston": "3.19.0",
     "zod": "^4.2.1"
@@ -53,8 +53,8 @@
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/better-sqlite3": "7.6.13",
-    "@types/pg": "^8.16.0",
-    "eslint": "^9.39.2",
+    "@types/pg": "^8.18.0",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cron-job-api/package.json

@@ -28,12 +28,12 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/cron-jobs": "workspace:^0.1.0",
-    "@tanstack/react-query": "^5.90.16",
-    "@trpc/client": "^11.8.1",
-    "@trpc/server": "^11.8.1",
-    "@trpc/tanstack-react-query": "^11.8.1",
+    "@tanstack/react-query": "^5.90.21",
+    "@trpc/client": "^11.12.0",
+    "@trpc/server": "^11.12.0",
+    "@trpc/tanstack-react-query": "^11.12.0",
     "node-cron": "^4.2.1",
-    "react": "19.2.3",
+    "react": "19.2.4",
     "zod": "^4.2.1"
   },
   "devDependencies": {
@@ -41,8 +41,8 @@
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/node-cron": "^3.0.11",
-    "@types/react": "19.2.7",
-    "eslint": "^9.39.2",
+    "@types/react": "19.2.14",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cron-job-api/src/index.ts

@@ -17,7 +17,15 @@ export interface IJobManager {
   updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void>;
   disableAsync(name: JobGroupKeys): Promise<void>;
   enableAsync(name: JobGroupKeys): Promise<void>;
-  getAllAsync(): Promise<{ name: JobGroupKeys; cron: string; preventManualExecution: boolean; isEnabled: boolean }[]>;
+  getAllAsync(): Promise<
+    {
+      name: JobGroupKeys;
+      cron: string;
+      preventManualExecution: boolean;
+      preventCustomInterval: boolean;
+      isEnabled: boolean;
+    }[]
+  >;
 }
 
 const t = initTRPC

packages/cron-job-status/package.json

@@ -29,7 +29,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cron-jobs-core/package.json

@@ -34,7 +34,7 @@
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/node-cron": "^3.0.11",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cron-jobs-core/src/creator.ts

@@ -19,6 +19,7 @@ export interface CreateCronJobCreatorOptions<TAllowedNames extends string> {
 interface CreateCronJobOptions {
   runOnStart?: boolean;
   preventManualExecution?: boolean;
+  preventCustomInterval?: boolean;
   expectedMaximumDurationInMillis?: number;
   beforeStart?: () => MaybePromise<void>;
 }
@@ -78,14 +79,14 @@ const createCallback = <TAllowedNames extends string, TName extends TAllowedName
           where: (cronJobConfigurations, { eq }) => eq(cronJobConfigurations.name, name),
         });
 
-        const scheduledTask = createTask(
-          configuration?.cronExpression ?? defaultCronExpression,
-          () => void catchingCallbackAsync(),
-          {
-            name,
-            timezone: creatorOptions.timezone,
-          },
-        );
+        const cronExpression = options.preventCustomInterval
+          ? defaultCronExpression
+          : (configuration?.cronExpression ?? defaultCronExpression);
+
+        const scheduledTask = createTask(cronExpression, () => void catchingCallbackAsync(), {
+          name,
+          timezone: creatorOptions.timezone,
+        });
         creatorOptions.logger.logDebug("The scheduled task for cron job was created", {
           name,
           cronExpression: defaultCronExpression,
@@ -114,6 +115,7 @@ const createCallback = <TAllowedNames extends string, TName extends TAllowedName
         await catchingCallbackAsync();
       },
       preventManualExecution: options.preventManualExecution ?? false,
+      preventCustomInterval: options.preventCustomInterval ?? false,
     };
   };
 };

packages/cron-jobs/package.json

@@ -44,7 +44,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/cron-jobs/src/index.ts

@@ -18,6 +18,7 @@ import { mediaServerJob } from "./jobs/integrations/media-server";
 import { mediaTranscodingJob } from "./jobs/integrations/media-transcoding";
 import { networkControllerJob } from "./jobs/integrations/network-controller";
 import { refreshNotificationsJob } from "./jobs/integrations/notifications";
+import { tracearrJob } from "./jobs/integrations/tracearr";
 import { minecraftServerStatusJob } from "./jobs/minecraft-server-status";
 import { pingJob } from "./jobs/ping";
 import { rssFeedsJob } from "./jobs/rss-feeds";
@@ -50,6 +51,7 @@ export const jobGroup = createCronJobGroup({
   firewallInterfaces: firewallInterfacesJob,
   refreshNotifications: refreshNotificationsJob,
   weather: weatherJob,
+  tracearr: tracearrJob,
 });
 
 export type JobGroupKeys = ReturnType<(typeof jobGroup)["getKeys"]>[number];

packages/cron-jobs/src/jobs/analytics.ts

@@ -9,6 +9,7 @@ import { createCronJob } from "../lib";
 export const analyticsJob = createCronJob("analytics", EVERY_WEEK, {
   runOnStart: true,
   preventManualExecution: true,
+  preventCustomInterval: true,
 }).withCallback(async () => {
   if (env.NO_EXTERNAL_CONNECTION) return;
   const analyticSetting = await getServerSettingByKeyAsync(db, "analytics");

packages/cron-jobs/src/jobs/integrations/health-monitoring.ts

@@ -1,4 +1,5 @@
 import { EVERY_5_SECONDS } from "@homarr/cron-jobs-core/expressions";
+import { coolifyRequestHandler } from "@homarr/request-handler/coolify";
 import { clusterInfoRequestHandler, systemInfoRequestHandler } from "@homarr/request-handler/health-monitoring";
 import { createRequestIntegrationJobHandler } from "@homarr/request-handler/lib/cached-request-integration-job-handler";
 
@@ -9,16 +10,20 @@ export const healthMonitoringJob = createCronJob("healthMonitoring", EVERY_5_SEC
     (integration, itemOptions: Record<string, never>) => {
       const { kind } = integration;
 
-      if (kind !== "proxmox" && kind !== "mock") {
+      if (kind !== "proxmox" && kind !== "mock" && kind !== "coolify") {
         return systemInfoRequestHandler.handler({ ...integration, kind }, itemOptions);
       }
+      if (kind === "coolify") {
+        return coolifyRequestHandler.handler({ ...integration, kind }, itemOptions);
+      }
       return clusterInfoRequestHandler.handler({ ...integration, kind }, itemOptions);
     },
     {
-      widgetKinds: ["healthMonitoring", "systemResources"],
+      widgetKinds: ["healthMonitoring", "systemResources", "coolify"],
       getInput: {
         healthMonitoring: () => ({}),
         systemResources: () => ({}),
+        coolify: () => ({}),
       },
     },
   ),

packages/cron-jobs/src/jobs/integrations/tracearr.ts

@@ -0,0 +1,14 @@
+import { EVERY_5_SECONDS } from "@homarr/cron-jobs-core/expressions";
+import { createRequestIntegrationJobHandler } from "@homarr/request-handler/lib/cached-request-integration-job-handler";
+import { tracearrRequestHandler } from "@homarr/request-handler/tracearr";
+
+import { createCronJob } from "../../lib";
+
+export const tracearrJob = createCronJob("tracearr", EVERY_5_SECONDS).withCallback(
+  createRequestIntegrationJobHandler(tracearrRequestHandler.handler, {
+    widgetKinds: ["tracearr"],
+    getInput: {
+      tracearr: () => ({}),
+    },
+  }),
+);

packages/db/package.json

@@ -47,17 +47,17 @@
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/definitions": "workspace:^0.1.0",
     "@homarr/server-settings": "workspace:^0.1.0",
-    "@mantine/core": "^8.3.10",
-    "@paralleldrive/cuid2": "^3.1.0",
-    "@testcontainers/mysql": "^11.11.0",
-    "@testcontainers/postgresql": "^11.11.0",
-    "better-sqlite3": "^12.5.0",
-    "dotenv": "^17.2.3",
-    "drizzle-kit": "^0.31.8",
+    "@mantine/core": "^8.3.16",
+    "@paralleldrive/cuid2": "^3.3.0",
+    "@testcontainers/mysql": "^11.12.0",
+    "@testcontainers/postgresql": "^11.12.0",
+    "better-sqlite3": "^12.6.2",
+    "dotenv": "^17.3.1",
+    "drizzle-kit": "^0.31.9",
     "drizzle-orm": "^0.45.1",
     "drizzle-zod": "^0.8.3",
-    "mysql2": "3.16.0",
-    "pg": "^8.16.3",
+    "mysql2": "3.19.1",
+    "pg": "^8.20.0",
     "superjson": "2.2.6"
   },
   "devDependencies": {
@@ -65,11 +65,11 @@
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/better-sqlite3": "7.6.13",
-    "@types/pg": "^8.16.0",
+    "@types/pg": "^8.18.0",
     "dotenv-cli": "^11.0.0",
-    "esbuild": "^0.27.2",
-    "eslint": "^9.39.2",
-    "prettier": "^3.7.4",
+    "esbuild": "^0.27.3",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
     "tsx": "4.20.4",
     "typescript": "^5.9.3"
   }

packages/definitions/package.json

@@ -24,14 +24,14 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@homarr/common": "workspace:^0.1.0",
-    "fast-xml-parser": "^5.3.3",
+    "fast-xml-parser": "^5.4.2",
     "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "tsx": "4.20.4",
     "typescript": "^5.9.3"
   }

packages/definitions/src/docs/homarr-docs-sitemap.ts

@@ -36,6 +36,7 @@ export type HomarrDocumentationPath =
   | "/blog/tags/update"
   | "/blog/tags/version"
   | "/blog/translations"
+  | "/carbon-test"
   | "/search"
   | "/docs/tags"
   | "/docs/tags/active-directory"
@@ -108,7 +109,9 @@ export type HomarrDocumentationPath =
   | "/docs/tags/variables"
   | "/docs/advanced/command-line"
   | "/docs/advanced/command-line/fix-usernames"
+  | "/docs/advanced/command-line/integrations"
   | "/docs/advanced/command-line/password-recovery"
+  | "/docs/advanced/command-line/users"
   | "/docs/advanced/development/getting-started"
   | "/docs/advanced/development/kubernetes"
   | "/docs/advanced/environment-variables"
@@ -160,8 +163,10 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/github-containerregistry"
   | "/docs/integrations/github"
   | "/docs/integrations/gitlab"
+  | "/docs/integrations/glances"
   | "/docs/integrations/home-assistant"
   | "/docs/integrations/ical"
+  | "/docs/integrations/immich"
   | "/docs/integrations/jellyfin"
   | "/docs/integrations/jellyseerr"
   | "/docs/integrations/kubernetes"
@@ -183,8 +188,11 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/radarr"
   | "/docs/integrations/readarr"
   | "/docs/integrations/sabnzbd"
+  | "/docs/integrations/seerr"
+  | "/docs/integrations/slskd"
   | "/docs/integrations/sonarr"
   | "/docs/integrations/tdarr"
+  | "/docs/integrations/tracearr"
   | "/docs/integrations/transmission"
   | "/docs/integrations/truenas"
   | "/docs/integrations/unifi-controller"
@@ -210,6 +218,8 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/firewall"
   | "/docs/widgets/health-monitoring"
   | "/docs/widgets/iframe"
+  | "/docs/widgets/immich-album-carousel"
+  | "/docs/widgets/immich-server-stats"
   | "/docs/widgets/indexer-manager"
   | "/docs/widgets/media-releases"
   | "/docs/widgets/media-request-list"
@@ -227,6 +237,7 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/smart-home-execute-automation"
   | "/docs/widgets/stock-price"
   | "/docs/widgets/system-resources"
+  | "/docs/widgets/tracearr"
   | "/docs/widgets/video"
   | "/docs/widgets/weather"
   | ""

packages/definitions/src/integration.ts

@@ -73,6 +73,13 @@ export const integrationDefs = {
     category: ["downloadClient", "torrent", "miscellaneous"],
     documentationUrl: createDocumentationLink("/docs/integrations/aria2"),
   },
+  slskd: {
+    name: "Slskd",
+    secretKinds: [["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/slskd.svg",
+    category: ["downloadClient", "miscellaneous"],
+    documentationUrl: createDocumentationLink("/docs/integrations/slskd"),
+  },
   sonarr: {
     name: "Sonarr",
     secretKinds: [["apiKey"]],
@@ -136,6 +143,13 @@ export const integrationDefs = {
     category: ["mediaSearch", "mediaRequest", "search"],
     documentationUrl: createDocumentationLink("/docs/integrations/jellyseerr"),
   },
+  seerr: {
+    name: "Seerr",
+    secretKinds: [["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/seerr.svg",
+    category: ["mediaSearch", "mediaRequest", "search"],
+    documentationUrl: createDocumentationLink("/docs/integrations/seerr"),
+  },
   overseerr: {
     name: "Overseerr",
     secretKinds: [["apiKey"]],
@@ -178,6 +192,13 @@ export const integrationDefs = {
     category: ["healthMonitoring"],
     documentationUrl: createDocumentationLink("/docs/integrations/dash-dot"),
   },
+  glances: {
+    name: "Glances",
+    secretKinds: [[]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/glances.svg",
+    category: ["healthMonitoring"],
+    documentationUrl: null,
+  },
   tdarr: {
     name: "Tdarr",
     secretKinds: [[], ["apiKey"]],
@@ -305,6 +326,28 @@ export const integrationDefs = {
     category: ["healthMonitoring"],
     documentationUrl: createDocumentationLink("/docs/integrations/unraid"),
   },
+  coolify: {
+    name: "Coolify",
+    secretKinds: [["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/coolify.svg",
+    category: ["healthMonitoring"],
+    // @ts-expect-error - docs page will be created when integration is merged
+    documentationUrl: createDocumentationLink("/docs/integrations/coolify"),
+  },
+  immich: {
+    name: "Immich",
+    secretKinds: [["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/immich.svg",
+    category: ["photoService"],
+    documentationUrl: createDocumentationLink("/docs/integrations/immich"),
+  },
+  tracearr: {
+    name: "Tracearr",
+    secretKinds: [["apiKey"]],
+    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/tracearr.svg",
+    category: ["mediaMonitoring"],
+    documentationUrl: createDocumentationLink("/docs/integrations/tracearr"),
+  },
   // This integration only returns mock data, it is used during development (but can also be used in production by directly going to the create page)
   mock: {
     name: "Mock",
@@ -391,6 +434,8 @@ export const integrationCategories = [
   "releasesProvider",
   "notifications",
   "firewall",
+  "photoService",
+  "mediaMonitoring",
 ] as const;
 
 export type IntegrationCategory = (typeof integrationCategories)[number];

packages/definitions/src/widget.ts

@@ -29,5 +29,10 @@ export const widgetKinds = [
   "firewall",
   "notifications",
   "systemResources",
+  "coolify",
+  "systemDisks",
+  "immich-serverStats",
+  "immich-albumCarousel",
+  "tracearr",
 ] as const;
 export type WidgetKind = (typeof widgetKinds)[number];

packages/docker/package.json

@@ -32,8 +32,8 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/dockerode": "^3.3.47",
-    "eslint": "^9.39.2",
+    "@types/dockerode": "^4.0.1",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/form/package.json

@@ -26,7 +26,7 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "@mantine/form": "^8.3.10",
+    "@mantine/form": "^8.3.16",
     "mantine-form-zod-resolver": "^1.3.0",
     "zod": "^4.2.1"
   },
@@ -34,7 +34,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/forms-collection/package.json

@@ -30,15 +30,15 @@
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/ui": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "@mantine/core": "^8.3.10",
-    "react": "19.2.3",
+    "@mantine/core": "^8.3.16",
+    "react": "19.2.4",
     "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/forms-collection/src/icon-picker/icon-picker.tsx

@@ -22,6 +22,7 @@ import { IconUpload } from "@tabler/icons-react";
 
 import { clientApi } from "@homarr/api/client";
 import { useSession } from "@homarr/auth/client";
+import { supportedLanguages } from "@homarr/translation";
 import { useScopedI18n } from "@homarr/translation/client";
 
 import { UploadMedia } from "../upload-media/upload-media";
@@ -137,7 +138,9 @@ export const IconPicker = ({
           <InputBase
             flex={1}
             rightSection={<Combobox.Chevron />}
-            leftSection={previewUrl ? <img src={previewUrl} alt="" style={{ width: 20, height: 20 }} /> : null}
+            leftSection={
+              shouldShowPreview(previewUrl) ? <img src={previewUrl} alt="" style={{ width: 20, height: 20 }} /> : null
+            }
             value={search}
             onChange={(event) => {
               combobox.openDropdown();
@@ -204,3 +207,11 @@ export const IconPicker = ({
     </Combobox>
   );
 };
+
+// This regex is used to prevent loading a preview like en or /en which would trigger a language change
+// See https://github.com/homarr-labs/homarr/issues/3070
+const localizationPathRegex = new RegExp(`^/?(${supportedLanguages.join("|")})(/.*)?$`, "i" /* ignore casing */);
+const shouldShowPreview = (value: string | null): value is string => {
+  if (!value) return false;
+  return !localizationPathRegex.test(value);
+};

packages/icons/package.json

@@ -31,7 +31,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/image-proxy/package.json

@@ -32,7 +32,7 @@
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
     "@types/bcrypt": "6.0.0",
-    "eslint": "^9.39.2",
+    "eslint": "^9.39.4",
     "typescript": "^5.9.3"
   }
 }

packages/image-proxy/src/index.ts

@@ -1,6 +1,7 @@
-import bcrypt from "bcrypt";
+import { createHmac, hkdfSync } from "node:crypto";
 
 import { createId } from "@homarr/common";
+import { env } from "@homarr/common/env";
 import { decryptSecret, encryptSecret } from "@homarr/common/server";
 import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -9,29 +10,22 @@ import { createGetSetChannel } from "@homarr/redis";
 
 const logger = createLogger({ module: "imageProxy" });
 
-const createHashChannel = (hash: `${string}.${string}`) => createGetSetChannel<string>(`image-proxy:hash:${hash}`);
+const createHmacChannel = (hmac: `${string}.${string}`) => createGetSetChannel<string>(`image-proxy:hmac:${hmac}`);
 const createUrlByIdChannel = (id: string) =>
   createGetSetChannel<{
     url: `${string}.${string}`;
     headers: `${string}.${string}`;
   }>(`image-proxy:url:${id}`);
-const saltChannel = createGetSetChannel<string>("image-proxy:salt");
 
 export class ImageProxy {
-  private static salt: string | null = null;
-  private async getOrCreateSaltAsync(): Promise<string> {
-    if (ImageProxy.salt) return ImageProxy.salt;
-    const existingSalt = await saltChannel.getAsync();
-    if (existingSalt) {
-      ImageProxy.salt = existingSalt;
-      return existingSalt;
-    }
+  private static hmacKey: Buffer<ArrayBuffer> | null = null;
 
-    const salt = await bcrypt.genSalt(10);
-    logger.debug("Generated new salt for image proxy", { salt });
-    ImageProxy.salt = salt;
-    await saltChannel.setAsync(salt);
-    return salt;
+  /**
+   * Generate secure key for image-proxy from encryption key
+   */
+  private static getHmacKey(): Buffer<ArrayBuffer> {
+    this.hmacKey ??= Buffer.from(hkdfSync("sha256", env.SECRET_ENCRYPTION_KEY, "", "image-proxy", 32));
+    return this.hmacKey;
   }
 
   public async createImageAsync(url: string, headers?: Record<string, string>): Promise<string> {
@@ -106,20 +100,18 @@ export class ImageProxy {
   }
 
   private async getExistingIdAsync(url: string, headers: Record<string, string> | undefined): Promise<string | null> {
-    const salt = await this.getOrCreateSaltAsync();
-    const urlHash = await bcrypt.hash(url, salt);
-    const headerHash = await bcrypt.hash(JSON.stringify(headers ?? null), salt);
+    const urlHash = this.hashSecret(url);
+    const headerHash = this.hashSecret(JSON.stringify(headers ?? null));
 
-    const channel = createHashChannel(`${urlHash}.${headerHash}`);
+    const channel = createHmacChannel(`${urlHash}.${headerHash}`);
     return await channel.getAsync();
   }
 
   private async storeImageAsync(id: string, url: string, headers: Record<string, string> | undefined): Promise<void> {
-    const salt = await this.getOrCreateSaltAsync();
-    const urlHash = await bcrypt.hash(url, salt);
-    const headerHash = await bcrypt.hash(JSON.stringify(headers ?? null), salt);
+    const urlHash = this.hashSecret(url);
+    const headerHash = this.hashSecret(JSON.stringify(headers ?? null));
 
-    const hashChannel = createHashChannel(`${urlHash}.${headerHash}`);
+    const hashChannel = createHmacChannel(`${urlHash}.${headerHash}`);
     const urlHeaderChannel = createUrlByIdChannel(id);
     await urlHeaderChannel.setAsync({
       url: encryptSecret(url),
@@ -134,6 +126,10 @@ export class ImageProxy {
     });
   }
 
+  private hashSecret(value: string): string {
+    return createHmac("sha256", ImageProxy.getHmacKey()).update(value).digest("hex");
+  }
+
   private redactUrl(url: string): string {
     const urlObject = new URL(url);