Bot Updating Package Versions

fix perms on generated priv-fullchain-bundle.pem

Dockerfile

@@ -104,6 +104,7 @@ RUN \
     certbot-dns-domeneshop \
     certbot-dns-dreamhost \
     certbot-dns-duckdns \
+    certbot-dns-dynudns \
     certbot-dns-freedns \
     certbot-dns-gehirn \
     certbot-dns-glesys \
@@ -144,6 +145,8 @@ RUN \
   sed -i \
     's|#ssl_trusted_certificate /config/keys/cert.crt;|ssl_trusted_certificate /config/keys/cert.crt;|' \
     /defaults/nginx/ssl.conf.sample && \
+  echo "**** remove stream.conf ****" && \
+  rm -f /etc/nginx/conf.d/stream.conf && \
   echo "**** correct ip6tables legacy issue ****" && \
   rm \
     /sbin/ip6tables && \

Dockerfile.aarch64

@@ -104,6 +104,7 @@ RUN \
     certbot-dns-domeneshop \
     certbot-dns-dreamhost \
     certbot-dns-duckdns \
+    certbot-dns-dynudns \
     certbot-dns-freedns \
     certbot-dns-gehirn \
     certbot-dns-glesys \
@@ -144,6 +145,8 @@ RUN \
   sed -i \
     's|#ssl_trusted_certificate /config/keys/cert.crt;|ssl_trusted_certificate /config/keys/cert.crt;|' \
     /defaults/nginx/ssl.conf.sample && \
+  echo "**** remove stream.conf ****" && \
+  rm -f /etc/nginx/conf.d/stream.conf && \
   echo "**** correct ip6tables legacy issue ****" && \
   rm \
     /sbin/ip6tables && \

Jenkinsfile

@@ -268,8 +268,15 @@ pipeline {
               set -e
               TEMPDIR=$(mktemp -d)
               docker pull ghcr.io/linuxserver/jenkins-builder:latest
-              docker run --rm -e CONTAINER_NAME=${CONTAINER_NAME} -e GITHUB_BRANCH=master -v ${TEMPDIR}:/ansible/jenkins ghcr.io/linuxserver/jenkins-builder:latest 
+              # Cloned repo paths for templating:
-              # Stage 1 - Jenkinsfile update
+              # ${TEMPDIR}/docker-${CONTAINER_NAME}: Cloned branch master of ${LS_USER}/${LS_REPO} for running the jenkins builder on
+              # ${TEMPDIR}/repo/${LS_REPO}: Cloned branch master of ${LS_USER}/${LS_REPO} for commiting various templated file changes and pushing back to Github
+              # ${TEMPDIR}/docs/docker-documentation: Cloned docs repo for pushing docs updates to Github
+              # ${TEMPDIR}/unraid/docker-templates: Cloned docker-templates repo to check for logos
+              # ${TEMPDIR}/unraid/templates: Cloned templates repo for commiting unraid template changes and pushing back to Github
+              git clone --branch master --depth 1 https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/docker-${CONTAINER_NAME}
+              docker run --rm -v ${TEMPDIR}/docker-${CONTAINER_NAME}:/tmp -e LOCAL=true ghcr.io/linuxserver/jenkins-builder:latest 
+              echo "Starting Stage 1 - Jenkinsfile update"
               if [[ "$(md5sum Jenkinsfile | awk '{ print $1 }')" != "$(md5sum ${TEMPDIR}/docker-${CONTAINER_NAME}/Jenkinsfile | awk '{ print $1 }')" ]]; then
                 mkdir -p ${TEMPDIR}/repo
                 git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/repo/${LS_REPO}
@@ -281,13 +288,13 @@ pipeline {
                 git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master
                 git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master
                 echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER}
-                echo "Updating Jenkinsfile"
+                echo "Updating Jenkinsfile and exiting build, new one will trigger based on commit"
                 rm -Rf ${TEMPDIR}
                 exit 0
               else
                 echo "Jenkinsfile is up to date."
               fi
-              # Stage 2 - Delete old templates
+              echo "Starting Stage 2 - Delete old templates"
               OLD_TEMPLATES=".github/ISSUE_TEMPLATE.md .github/ISSUE_TEMPLATE/issue.bug.md .github/ISSUE_TEMPLATE/issue.feature.md .github/workflows/call_invalid_helper.yml .github/workflows/stale.yml Dockerfile.armhf"
               for i in ${OLD_TEMPLATES}; do
                 if [[ -f "${i}" ]]; then
@@ -306,13 +313,13 @@ pipeline {
                 git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master
                 git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master
                 echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER}
-                echo "Deleting old and deprecated templates"
+                echo "Deleting old/deprecated templates and exiting build, new one will trigger based on commit"
                 rm -Rf ${TEMPDIR}
                 exit 0
               else
                 echo "No templates to delete"
               fi
-              # Stage 3 - Update templates
+              echo "Starting Stage 3 - Update templates"
               CURRENTHASH=$(grep -hs ^ ${TEMPLATED_FILES} | md5sum | cut -c1-8)
               cd ${TEMPDIR}/docker-${CONTAINER_NAME}
               NEWHASH=$(grep -hs ^ ${TEMPLATED_FILES} | md5sum | cut -c1-8)
@@ -336,9 +343,14 @@ pipeline {
                 git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master
                 git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master
                 echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER}
+                echo "Updating templates and exiting build, new one will trigger based on commit"
+                rm -Rf ${TEMPDIR}
+                exit 0
               else
                 echo "false" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER}
+                echo "No templates to update"
               fi
+              echo "Starting Stage 4 - External repo updates: Docs, Unraid Template and Readme Sync to Docker Hub"
               mkdir -p ${TEMPDIR}/docs
               git clone https://github.com/linuxserver/docker-documentation.git ${TEMPDIR}/docs/docker-documentation
               if [[ "${BRANCH_NAME}" == "${GH_DEFAULT_BRANCH}"  ]] && [[ (! -f ${TEMPDIR}/docs/docker-documentation/docs/images/docker-${CONTAINER_NAME}.md) || ("$(md5sum ${TEMPDIR}/docs/docker-documentation/docs/images/docker-${CONTAINER_NAME}.md | awk '{ print $1 }')" != "$(md5sum ${TEMPDIR}/docker-${CONTAINER_NAME}/.jenkins-external/docker-${CONTAINER_NAME}.md | awk '{ print $1 }')") ]]; then
@@ -346,6 +358,7 @@ pipeline {
                 cd ${TEMPDIR}/docs/docker-documentation
                 GH_DOCS_DEFAULT_BRANCH=$(git remote show origin | grep "HEAD branch:" | sed 's|.*HEAD branch: ||')
                 git add docs/images/docker-${CONTAINER_NAME}.md
+                echo "Updating docs repo"
                 git commit -m 'Bot Updating Documentation'
                 git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/docker-documentation.git ${GH_DOCS_DEFAULT_BRANCH} --rebase
                 git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/docker-documentation.git ${GH_DOCS_DEFAULT_BRANCH} || \
@@ -353,6 +366,8 @@ pipeline {
                   sleep $((RANDOM % MAXWAIT)) && \
                   git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/docker-documentation.git ${GH_DOCS_DEFAULT_BRANCH} --rebase && \
                   git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/docker-documentation.git ${GH_DOCS_DEFAULT_BRANCH})
+              else
+                echo "Docs update not needed, skipping"
               fi
               mkdir -p ${TEMPDIR}/unraid
               git clone https://github.com/linuxserver/docker-templates.git ${TEMPDIR}/unraid/docker-templates
@@ -363,6 +378,7 @@ pipeline {
                 sed -i "s|master/linuxserver.io/img/linuxserver-ls-logo.png|master/linuxserver.io/img/${CONTAINER_NAME}-icon.png|" ${TEMPDIR}/docker-${CONTAINER_NAME}/.jenkins-external/${CONTAINER_NAME}.xml
               fi
               if [[ "${BRANCH_NAME}" == "${GH_DEFAULT_BRANCH}" ]] && [[ (! -f ${TEMPDIR}/unraid/templates/unraid/${CONTAINER_NAME}.xml) || ("$(md5sum ${TEMPDIR}/unraid/templates/unraid/${CONTAINER_NAME}.xml | awk '{ print $1 }')" != "$(md5sum ${TEMPDIR}/docker-${CONTAINER_NAME}/.jenkins-external/${CONTAINER_NAME}.xml | awk '{ print $1 }')") ]]; then
+                echo "Updating Unraid template"
                 cd ${TEMPDIR}/unraid/templates/
                 GH_TEMPLATES_DEFAULT_BRANCH=$(git remote show origin | grep "HEAD branch:" | sed 's|.*HEAD branch: ||')
                 if grep -wq "${CONTAINER_NAME}" ${TEMPDIR}/unraid/templates/unraid/ignore.list; then
@@ -382,16 +398,27 @@ pipeline {
                   sleep $((RANDOM % MAXWAIT)) && \
                   git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/templates.git ${GH_TEMPLATES_DEFAULT_BRANCH} --rebase && \
                   git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/templates.git ${GH_TEMPLATES_DEFAULT_BRANCH})
+              else
+                echo "No updates to Unraid template needed, skipping"
               fi
-              # Stage 4 - Sync Readme to Docker Hub
               if [[ "${BRANCH_NAME}" == "${GH_DEFAULT_BRANCH}" ]]; then
-                if [[ $(cat ${TEMPDIR}/docker-${CONTAINER_NAME}/README.md | wc -m) > 25000 ]]; then
+                if [[ $(cat ${TEMPDIR}/docker-${CONTAINER_NAME}/README.md | wc -m) -gt 25000 ]]; then
                   echo "Readme is longer than 25,000 characters. Syncing the lite version to Docker Hub"
                   DH_README_SYNC_PATH="${TEMPDIR}/docker-${CONTAINER_NAME}/.jenkins-external/README.lite"
                 else
                   echo "Syncing readme to Docker Hub"
                   DH_README_SYNC_PATH="${TEMPDIR}/docker-${CONTAINER_NAME}/README.md"
                 fi
+                if curl -s https://hub.docker.com/v2/namespaces/${DOCKERHUB_IMAGE%%/*}/repositories/${DOCKERHUB_IMAGE##*/}/tags | jq -r '.message' | grep -q 404; then
+                  echo "Docker Hub endpoint doesn't exist. Creating endpoint first."
+                  DH_TOKEN=$(curl -d '{"username":"linuxserverci", "password":"'${DOCKERHUB_TOKEN}'"}' -H "Content-Type: application/json" -X POST https://hub.docker.com/v2/users/login | jq -r '.token')
+                  curl -s \
+                    -H "Authorization: JWT ${DH_TOKEN}" \
+                    -H "Content-Type: application/json" \
+                    -X POST \
+                    -d '{"name":"'${DOCKERHUB_IMAGE##*/}'", "namespace":"'${DOCKERHUB_IMAGE%%/*}'"}' \
+                    https://hub.docker.com/v2/repositories/ || :
+                fi
                 DH_TOKEN=$(curl -d '{"username":"linuxserverci", "password":"'${DOCKERHUB_TOKEN}'"}' -H "Content-Type: application/json" -X POST https://hub.docker.com/v2/users/login | jq -r '.token')
                 curl -s \
                   -H "Authorization: JWT ${DH_TOKEN}" \
@@ -456,14 +483,16 @@ pipeline {
       }
       steps{
         sh '''curl -H "Content-Type: application/json" -H "Private-Token: ${GITLAB_TOKEN}" -X POST https://gitlab.com/api/v4/projects \
-        -d '{"namespace_id":'${GITLAB_NAMESPACE}',\
+          -d '{"namespace_id":'${GITLAB_NAMESPACE}',\
-             "name":"'${LS_REPO}'",
+            "name":"'${LS_REPO}'",
-             "mirror":true,\
+            "mirror":true,\
-             "import_url":"https://github.com/linuxserver/'${LS_REPO}'.git",\
+            "import_url":"https://github.com/linuxserver/'${LS_REPO}'.git",\
-             "issues_access_level":"disabled",\
+            "issues_access_level":"disabled",\
-             "merge_requests_access_level":"disabled",\
+            "merge_requests_access_level":"disabled",\
-             "repository_access_level":"enabled",\
+            "repository_access_level":"enabled",\
-             "visibility":"public"}' '''
+            "visibility":"public"}' '''
+        sh '''curl -H "Private-Token: ${GITLAB_TOKEN}" -X PUT "https://gitlab.com/api/v4/projects/Linuxserver.io%2F${LS_REPO}" \
+          -d "mirror=true&import_url=https://github.com/linuxserver/${LS_REPO}.git" '''
       } 
     }
     /* ###############

README.md

@@ -227,7 +227,7 @@ Containers are configured using parameters passed at runtime (such as those abov
 | `-e VALIDATION=http` | Certbot validation method to use, options are `http` or `dns` (`dns` method also requires `DNSPLUGIN` variable set). |
 | `-e SUBDOMAINS=www,` | Subdomains you'd like the cert to cover (comma separated, no spaces) ie. `www,ftp,cloud`. For a wildcard cert, set this *exactly* to `wildcard` (wildcard cert is available via `dns` validation only) |
 | `-e CERTPROVIDER=` | Optionally define the cert provider. Set to `zerossl` for ZeroSSL certs (requires existing [ZeroSSL account](https://app.zerossl.com/signup) and the e-mail address entered in `EMAIL` env var). Otherwise defaults to Let's Encrypt. |
-| `-e DNSPLUGIN=cloudflare` | Required if `VALIDATION` is set to `dns`. Options are `acmedns`, `aliyun`, `azure`, `bunny`, `cloudflare`, `cpanel`, `desec`, `digitalocean`, `directadmin`, `dnsimple`, `dnsmadeeasy`, `dnspod`, `do`, `domeneshop`, `dreamhost`, `duckdns`, `freedns`, `gandi`, `gehirn`, `glesys`, `godaddy`, `google`, `google-domains`, `he`, `hetzner`, `infomaniak`, `inwx`, `ionos`, `linode`, `loopia`, `luadns`, `namecheap`, `netcup`, `njalla`, `nsone`, `ovh`, `porkbun`, `rfc2136`, `route53`, `sakuracloud`, `standalone`, `transip`, and `vultr`. Also need to enter the credentials into the corresponding ini (or json for some plugins) file under `/config/dns-conf`. |
+| `-e DNSPLUGIN=cloudflare` | Required if `VALIDATION` is set to `dns`. Options are `acmedns`, `aliyun`, `azure`, `bunny`, `cloudflare`, `cpanel`, `desec`, `digitalocean`, `directadmin`, `dnsimple`, `dnsmadeeasy`, `dnspod`, `do`, `domeneshop`, `dreamhost`, `duckdns`, `dynudns`, `freedns`, `gandi`, `gehirn`, `glesys`, `godaddy`, `google`, `google-domains`, `he`, `hetzner`, `infomaniak`, `inwx`, `ionos`, `linode`, `loopia`, `luadns`, `namecheap`, `netcup`, `njalla`, `nsone`, `ovh`, `porkbun`, `rfc2136`, `route53`, `sakuracloud`, `standalone`, `transip`, and `vultr`. Also need to enter the credentials into the corresponding ini (or json for some plugins) file under `/config/dns-conf`. |
 | `-e PROPAGATION=` | Optionally override (in seconds) the default propagation time for the dns plugins. |
 | `-e EMAIL=` | Optional e-mail address used for cert expiration notifications (Required for ZeroSSL). |
 | `-e ONLY_SUBDOMAINS=false` | If you wish to get certs only for certain subdomains, but not the main domain (main domain may be hosted on another machine and cannot be validated), set this to `true` |
@@ -400,6 +400,11 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **23.03.24:** - Fix perms on the generated `priv-fullchain-bundle.pem`.
+* **14.03.24:** - [Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) authelia-location.conf, authelia-server.conf - Update Authelia conf samples with support for 4.38.
+* **11.03.24:** - Restore support for DynuDNS using `certbot-dns-dynudns`.
+* **06.03.24:** - [Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) site-confs/default.conf - Cleanup default site conf.
+* **04.03.24:** - Remove `stream.conf` inside the container to allow users to include their own block in `nginx.conf`.
 * **23.01.24:** - Rebase to Alpine 3.19 with php 8.3, add root periodic crontabs for logrotate.
 * **01.01.24:** - Add GleSYS DNS plugin.
 * **11.12.23:** - Deprecate certbot-dns-dynu to resolve dependency conflicts with other plugins.

package_versions.txt

@@ -4,7 +4,7 @@ PyJWT                           2.8.0                  python
 PyNamecheap                     0.0.3                  python                   
 PyYAML                          6.0.1                  python                   
 Simple Launcher                 1.1.0.14               dotnet  (+5 duplicates)  
-acme                            2.9.0                  python                   
+acme                            2.10.0                 python                   
 alpine-baselayout               3.4.3-r2               apk                      
 alpine-baselayout-data          3.4.3-r2               apk                      
 alpine-keys                     2.4-r1                 apk                      
@@ -23,57 +23,58 @@ azure-mgmt-core                 1.4.0                  python
 azure-mgmt-dns                  8.1.0                  python                   
 bash                            5.2.21-r0              apk                      
 beautifulsoup4                  4.12.3                 python                   
-boto3                           1.34.55                python                   
+boto3                           1.34.77                python                   
-botocore                        1.34.55                python                   
+botocore                        1.34.77                python                   
 brotli-libs                     1.1.0-r1               apk                      
 bs4                             0.0.2                  python                   
 busybox                         1.36.1-r15             apk                      
 busybox-binsh                   1.36.1-r15             apk                      
 c-ares                          1.24.0-r1              apk                      
 c-client                        2007f-r15              apk                      
-ca-certificates                 20230506-r0            apk                      
+ca-certificates                 20240226-r0            apk                      
-ca-certificates-bundle          20230506-r0            apk                      
+ca-certificates-bundle          20240226-r0            apk                      
 cachetools                      5.3.3                  python                   
-certbot                         2.9.0                  python                   
+certbot                         2.10.0                 python                   
 certbot-dns-acmedns             0.1.0                  python                   
 certbot-dns-aliyun              2.0.0                  python                   
-certbot-dns-azure               2.4.0                  python                   
+certbot-dns-azure               2.5.0                  python                   
 certbot-dns-bunny               0.0.9                  python                   
-certbot-dns-cloudflare          2.9.0                  python                   
+certbot-dns-cloudflare          2.10.0                 python                   
 certbot-dns-cpanel              0.4.0                  python                   
 certbot-dns-desec               1.2.1                  python                   
-certbot-dns-digitalocean        2.9.0                  python                   
+certbot-dns-digitalocean        2.10.0                 python                   
 certbot-dns-directadmin         1.0.4                  python                   
-certbot-dns-dnsimple            2.9.0                  python                   
+certbot-dns-dnsimple            2.10.0                 python                   
-certbot-dns-dnsmadeeasy         2.9.0                  python                   
+certbot-dns-dnsmadeeasy         2.10.0                 python                   
 certbot-dns-dnspod              0.1.0                  python                   
 certbot-dns-do                  0.31.0                 python                   
 certbot-dns-domeneshop          0.2.9                  python                   
 certbot-dns-dreamhost           1.0                    python                   
 certbot-dns-duckdns             1.3                    python                   
+certbot-dns-dynudns             0.0.6                  python                   
 certbot-dns-freedns             0.1.0                  python                   
-certbot-dns-gehirn              2.9.0                  python                   
+certbot-dns-gehirn              2.10.0                 python                   
 certbot-dns-glesys              2.1.0                  python                   
 certbot-dns-godaddy             2.8.0                  python                   
-certbot-dns-google              2.9.0                  python                   
+certbot-dns-google              2.10.0                 python                   
 certbot-dns-google-domains      0.1.11                 python                   
 certbot-dns-he                  1.0.0                  python                   
 certbot-dns-hetzner             2.0.0                  python                   
 certbot-dns-infomaniak          0.2.2                  python                   
 certbot-dns-inwx                2.2.0                  python                   
 certbot-dns-ionos               2024.1.8               python                   
-certbot-dns-linode              2.9.0                  python                   
+certbot-dns-linode              2.10.0                 python                   
 certbot-dns-loopia              1.0.1                  python                   
-certbot-dns-luadns              2.9.0                  python                   
+certbot-dns-luadns              2.10.0                 python                   
 certbot-dns-namecheap           1.0.0                  python                   
 certbot-dns-netcup              1.4.3                  python                   
 certbot-dns-njalla              1.0.0                  python                   
-certbot-dns-nsone               2.9.0                  python                   
+certbot-dns-nsone               2.10.0                 python                   
-certbot-dns-ovh                 2.9.0                  python                   
+certbot-dns-ovh                 2.10.0                 python                   
 certbot-dns-porkbun             0.8                    python                   
-certbot-dns-rfc2136             2.9.0                  python                   
+certbot-dns-rfc2136             2.10.0                 python                   
-certbot-dns-route53             2.9.0                  python                   
+certbot-dns-route53             2.10.0                 python                   
-certbot-dns-sakuracloud         2.9.0                  python                   
+certbot-dns-sakuracloud         2.10.0                 python                   
 certbot-dns-standalone          1.1                    python                   
 certbot-dns-transip             0.5.2                  python                   
 certbot-dns-vultr               1.1.0                  python                   
@@ -82,7 +83,7 @@ certifi                         2024.2.2               python
 cffi                            1.16.0                 python                   
 charset-normalizer              3.3.2                  python                   
 cloudflare                      2.19.2                 python                   
-composer                        2.7.1                  binary                   
+composer                        2.7.2                  binary                   
 configobj                       5.0.8                  python                   
 coreutils                       9.4-r2                 apk                      
 coreutils-env                   9.4-r2                 apk                      
@@ -99,7 +100,7 @@ domeneshop                      0.4.3                  python
 fail2ban                        1.0.2                  python                   
 fail2ban                        1.0.2-r3               apk                      
 fail2ban-pyc                    1.0.2-r3               apk                      
-filelock                        3.13.1                 python                   
+filelock                        3.13.3                 python                   
 fontconfig                      2.14.2-r4              apk                      
 freetype                        2.13.2-r0              apk                      
 future                          1.0.0                  python                   
@@ -113,12 +114,12 @@ gnupg-gpgconf                   2.4.4-r0               apk
 gnupg-keyboxd                   2.4.4-r0               apk                      
 gnupg-utils                     2.4.4-r0               apk                      
 gnupg-wks-client                2.4.4-r0               apk                      
-gnutls                          3.8.3-r0               apk                      
+gnutls                          3.8.4-r0               apk                      
-google-api-core                 2.17.1                 python                   
+google-api-core                 2.18.0                 python                   
-google-api-python-client        2.120.0                python                   
+google-api-python-client        2.125.0                python                   
-google-auth                     2.28.1                 python                   
+google-auth                     2.29.0                 python                   
 google-auth-httplib2            0.2.0                  python                   
-googleapis-common-protos        1.62.0                 python                   
+googleapis-common-protos        1.63.0                 python                   
 gpg                             2.4.4-r0               apk                      
 gpg-agent                       2.4.4-r0               apk                      
 gpg-wks-server                  2.4.4-r0               apk                      
@@ -148,7 +149,7 @@ libcurl                         8.5.0-r0               apk
 libdav1d                        1.3.0-r1               apk                      
 libedit                         20230828.3.1-r3        apk                      
 libevent                        2.1.12-r7              apk                      
-libexpat                        2.6.0-r0               apk                      
+libexpat                        2.6.2-r0               apk                      
 libffi                          3.4.4-r3               apk                      
 libgcc                          13.2.1_git20231014-r0  apk                      
 libgcrypt                       1.10.3-r0              apk                      
@@ -196,13 +197,13 @@ libzip                          1.10.1-r0              apk
 linux-pam                       1.5.3-r7               apk                      
 logrotate                       3.21.0-r1              apk                      
 loopialib                       0.2.0                  python                   
-lxml                            5.1.0                  python                   
+lxml                            5.2.1                  python                   
 lz4-libs                        1.9.4-r5               apk                      
 marshmallow                     3.21.1                 python                   
 memcached                       1.6.22-r0              apk                      
 mock                            5.1.0                  python                   
 mpdecimal                       2.5.1-r2               apk                      
-msal                            1.27.0                 python                   
+msal                            1.28.0                 python                   
 msal-extensions                 1.1.0                  python                   
 musl                            1.2.4_git20230717-r4   apk                      
 musl-utils                      1.2.4_git20230717-r4   apk                      
@@ -235,79 +236,80 @@ npth                            1.6-r4                 apk
 oniguruma                       6.9.9-r0               apk                      
 openssl                         3.1.4-r5               apk                      
 p11-kit                         0.25.3-r0              apk                      
-packaging                       23.2                   python                   
+packaging                       24.0                   python                   
 parsedatetime                   2.6                    python                   
 pcre                            8.45-r3                apk                      
 pcre2                           10.42-r2               apk                      
 perl                            5.38.2-r0              apk                      
 perl-error                      0.17029-r2             apk                      
 perl-git                        2.43.0-r0              apk                      
-php83                           8.3.3-r0               apk                      
+php83                           8.3.4-r0               apk                      
-php83-bcmath                    8.3.3-r0               apk                      
+php83-bcmath                    8.3.4-r0               apk                      
-php83-bz2                       8.3.3-r0               apk                      
+php83-bz2                       8.3.4-r0               apk                      
-php83-common                    8.3.3-r0               apk                      
+php83-common                    8.3.4-r0               apk                      
-php83-ctype                     8.3.3-r0               apk                      
+php83-ctype                     8.3.4-r0               apk                      
-php83-curl                      8.3.3-r0               apk                      
+php83-curl                      8.3.4-r0               apk                      
-php83-dom                       8.3.3-r0               apk                      
+php83-dom                       8.3.4-r0               apk                      
-php83-exif                      8.3.3-r0               apk                      
+php83-exif                      8.3.4-r0               apk                      
-php83-fileinfo                  8.3.3-r0               apk                      
+php83-fileinfo                  8.3.4-r0               apk                      
-php83-fpm                       8.3.3-r0               apk                      
+php83-fpm                       8.3.4-r0               apk                      
-php83-ftp                       8.3.3-r0               apk                      
+php83-ftp                       8.3.4-r0               apk                      
-php83-gd                        8.3.3-r0               apk                      
+php83-gd                        8.3.4-r0               apk                      
-php83-gmp                       8.3.3-r0               apk                      
+php83-gmp                       8.3.4-r0               apk                      
-php83-iconv                     8.3.3-r0               apk                      
+php83-iconv                     8.3.4-r0               apk                      
-php83-imap                      8.3.3-r0               apk                      
+php83-imap                      8.3.4-r0               apk                      
-php83-intl                      8.3.3-r0               apk                      
+php83-intl                      8.3.4-r0               apk                      
-php83-ldap                      8.3.3-r0               apk                      
+php83-ldap                      8.3.4-r0               apk                      
-php83-mbstring                  8.3.3-r0               apk                      
+php83-mbstring                  8.3.4-r0               apk                      
-php83-mysqli                    8.3.3-r0               apk                      
+php83-mysqli                    8.3.4-r0               apk                      
-php83-mysqlnd                   8.3.3-r0               apk                      
+php83-mysqlnd                   8.3.4-r0               apk                      
-php83-opcache                   8.3.3-r0               apk                      
+php83-opcache                   8.3.4-r0               apk                      
-php83-openssl                   8.3.3-r0               apk                      
+php83-openssl                   8.3.4-r0               apk                      
-php83-pdo                       8.3.3-r0               apk                      
+php83-pdo                       8.3.4-r0               apk                      
-php83-pdo_mysql                 8.3.3-r0               apk                      
+php83-pdo_mysql                 8.3.4-r0               apk                      
-php83-pdo_odbc                  8.3.3-r0               apk                      
+php83-pdo_odbc                  8.3.4-r0               apk                      
-php83-pdo_pgsql                 8.3.3-r0               apk                      
+php83-pdo_pgsql                 8.3.4-r0               apk                      
-php83-pdo_sqlite                8.3.3-r0               apk                      
+php83-pdo_sqlite                8.3.4-r0               apk                      
-php83-pear                      8.3.3-r0               apk                      
+php83-pear                      8.3.4-r0               apk                      
 php83-pecl-apcu                 5.1.23-r0              apk                      
 php83-pecl-igbinary             3.2.15-r0              apk                      
 php83-pecl-mcrypt               1.0.7-r0               apk                      
 php83-pecl-memcached            3.2.0-r0               apk                      
 php83-pecl-msgpack              2.2.0-r1               apk                      
 php83-pecl-redis                6.0.2-r0               apk                      
-php83-pgsql                     8.3.3-r0               apk                      
+php83-pgsql                     8.3.4-r0               apk                      
-php83-phar                      8.3.3-r0               apk                      
+php83-phar                      8.3.4-r0               apk                      
-php83-posix                     8.3.3-r0               apk                      
+php83-posix                     8.3.4-r0               apk                      
-php83-session                   8.3.3-r0               apk                      
+php83-session                   8.3.4-r0               apk                      
-php83-simplexml                 8.3.3-r0               apk                      
+php83-simplexml                 8.3.4-r0               apk                      
-php83-soap                      8.3.3-r0               apk                      
+php83-soap                      8.3.4-r0               apk                      
-php83-sockets                   8.3.3-r0               apk                      
+php83-sockets                   8.3.4-r0               apk                      
-php83-sodium                    8.3.3-r0               apk                      
+php83-sodium                    8.3.4-r0               apk                      
-php83-sqlite3                   8.3.3-r0               apk                      
+php83-sqlite3                   8.3.4-r0               apk                      
-php83-tokenizer                 8.3.3-r0               apk                      
+php83-tokenizer                 8.3.4-r0               apk                      
-php83-xml                       8.3.3-r0               apk                      
+php83-xml                       8.3.4-r0               apk                      
-php83-xmlreader                 8.3.3-r0               apk                      
+php83-xmlreader                 8.3.4-r0               apk                      
-php83-xmlwriter                 8.3.3-r0               apk                      
+php83-xmlwriter                 8.3.4-r0               apk                      
-php83-xsl                       8.3.3-r0               apk                      
+php83-xsl                       8.3.4-r0               apk                      
-php83-zip                       8.3.3-r0               apk                      
+php83-zip                       8.3.4-r0               apk                      
 pinentry                        1.2.1-r1               apk                      
 pip                             24.0                   python                   
 pkb-client                      1.2                    python                   
 popt                            1.19-r3                apk                      
 portalocker                     2.8.2                  python                   
 procps-ng                       4.0.4-r0               apk                      
+proto-plus                      1.23.0                 python                   
 protobuf                        4.25.3                 python                   
 publicsuffixlist                0.9.4                  python                   
-pyOpenSSL                       24.0.0                 python                   
+pyOpenSSL                       24.1.0                 python                   
 pyRFC3339                       1.1                    python                   
 pyacmedns                       0.4                    python                   
-pyasn1                          0.5.1                  python                   
+pyasn1                          0.6.0                  python                   
-pyasn1-modules                  0.3.0                  python                   
+pyasn1_modules                  0.4.0                  python                   
 pyc                             3.11.8-r0              apk                      
-pycparser                       2.21                   python                   
+pycparser                       2.22                   python                   
 pyotp                           2.9.0                  python                   
-pyparsing                       3.1.1                  python                   
+pyparsing                       3.1.2                  python                   
 python-dateutil                 2.9.0.post0            python                   
 python-digitalocean             1.17.0                 python                   
 python-transip                  0.6.0                  python                   
@@ -318,9 +320,9 @@ pytz                            2024.1                 python
 readline                        8.2.1-r2               apk                      
 requests                        2.31.0                 python                   
 requests-file                   2.0.0                  python                   
-requests-mock                   1.11.0                 python                   
+requests-mock                   1.12.1                 python                   
 rsa                             4.9                    python                   
-s3transfer                      0.10.0                 python                   
+s3transfer                      0.10.1                 python                   
 scanelf                         1.3.7-r2               apk                      
 setuptools                      65.5.0                 python                   
 shadow                          4.14.2-r0              apk                      
@@ -330,15 +332,15 @@ soupsieve                       2.5                    python
 sqlite-libs                     3.44.2-r0              apk                      
 ssl_client                      1.36.1-r15             apk                      
 tiff                            4.6.0-r0               apk                      
-tldextract                      5.1.1                  python                   
+tldextract                      5.1.2                  python                   
 typing-inspect                  0.9.0                  python                   
 typing_extensions               4.10.0                 python                   
 tzdata                          2024a-r0               apk                      
 unixodbc                        2.3.12-r0              apk                      
 uritemplate                     4.1.1                  python                   
-urllib3                         2.0.7                  python                   
+urllib3                         2.2.1                  python                   
 utmps-libs                      0.1.2.2-r0             apk                      
-wheel                           0.42.0                 python                   
+wheel                           0.43.0                 python                   
 whois                           5.5.20-r0              apk                      
 xz-libs                         5.4.5-r0               apk                      
 zlib                            1.3.1-r0               apk                      

readme-vars.yml

@@ -50,7 +50,7 @@ opt_param_usage_include_env: true
 opt_param_env_vars:
   - { env_var: "SUBDOMAINS", env_value: "www,", desc: "Subdomains you'd like the cert to cover (comma separated, no spaces) ie. `www,ftp,cloud`. For a wildcard cert, set this *exactly* to `wildcard` (wildcard cert is available via `dns` validation only)" }
   - { env_var: "CERTPROVIDER", env_value: "", desc: "Optionally define the cert provider. Set to `zerossl` for ZeroSSL certs (requires existing [ZeroSSL account](https://app.zerossl.com/signup) and the e-mail address entered in `EMAIL` env var). Otherwise defaults to Let's Encrypt." }
-  - { env_var: "DNSPLUGIN", env_value: "cloudflare", desc: "Required if `VALIDATION` is set to `dns`. Options are `acmedns`, `aliyun`, `azure`, `bunny`, `cloudflare`, `cpanel`, `desec`, `digitalocean`, `directadmin`, `dnsimple`, `dnsmadeeasy`, `dnspod`, `do`, `domeneshop`, `dreamhost`, `duckdns`, `freedns`, `gandi`, `gehirn`, `glesys`, `godaddy`, `google`, `google-domains`, `he`, `hetzner`, `infomaniak`, `inwx`, `ionos`, `linode`, `loopia`, `luadns`, `namecheap`, `netcup`, `njalla`, `nsone`, `ovh`, `porkbun`, `rfc2136`, `route53`, `sakuracloud`, `standalone`, `transip`, and `vultr`. Also need to enter the credentials into the corresponding ini (or json for some plugins) file under `/config/dns-conf`." }
+  - { env_var: "DNSPLUGIN", env_value: "cloudflare", desc: "Required if `VALIDATION` is set to `dns`. Options are `acmedns`, `aliyun`, `azure`, `bunny`, `cloudflare`, `cpanel`, `desec`, `digitalocean`, `directadmin`, `dnsimple`, `dnsmadeeasy`, `dnspod`, `do`, `domeneshop`, `dreamhost`, `duckdns`, `dynudns`, `freedns`, `gandi`, `gehirn`, `glesys`, `godaddy`, `google`, `google-domains`, `he`, `hetzner`, `infomaniak`, `inwx`, `ionos`, `linode`, `loopia`, `luadns`, `namecheap`, `netcup`, `njalla`, `nsone`, `ovh`, `porkbun`, `rfc2136`, `route53`, `sakuracloud`, `standalone`, `transip`, and `vultr`. Also need to enter the credentials into the corresponding ini (or json for some plugins) file under `/config/dns-conf`." }
   - { env_var: "PROPAGATION", env_value: "", desc: "Optionally override (in seconds) the default propagation time for the dns plugins." }
   - { env_var: "EMAIL", env_value: "", desc: "Optional e-mail address used for cert expiration notifications (Required for ZeroSSL)." }
   - { env_var: "ONLY_SUBDOMAINS", env_value: "false", desc: "If you wish to get certs only for certain subdomains, but not the main domain (main domain may be hosted on another machine and cannot be validated), set this to `true`" }
@@ -168,6 +168,11 @@ app_setup_block: |
 
 # changelog
 changelogs:
+  - { date: "23.03.24:", desc: "Fix perms on the generated `priv-fullchain-bundle.pem`." }
+  - { date: "14.03.24:", desc: "[Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) authelia-location.conf, authelia-server.conf - Update Authelia conf samples with support for 4.38." }
+  - { date: "11.03.24:", desc: "Restore support for DynuDNS using `certbot-dns-dynudns`." }
+  - { date: "06.03.24:", desc: "[Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) site-confs/default.conf - Cleanup default site conf." }
+  - { date: "04.03.24:", desc: "Remove `stream.conf` inside the container to allow users to include their own block in `nginx.conf`." }
   - { date: "23.01.24:", desc: "Rebase to Alpine 3.19 with php 8.3, add root periodic crontabs for logrotate." }
   - { date: "01.01.24:", desc: "Add GleSYS DNS plugin." }
   - { date: "11.12.23:", desc: "Deprecate certbot-dns-dynu to resolve dependency conflicts with other plugins." }

root/defaults/dns-conf/dynu-credentials.ini

@@ -0,0 +1,3 @@
+# Instructions: https://github.com/DustyRah/certbot-dns-dynudns
+# Replace with your API token from your dynudns account.
+dns_dynu_auth_token = AbCbASsd!@34

root/defaults/etc/letsencrypt/renewal-hooks/deploy/10-default

@@ -5,4 +5,5 @@ cd /config/keys/letsencrypt || exit 1
 openssl pkcs12 -export -out privkey.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -passout pass:
 sleep 1
 cat {privkey,fullchain}.pem >priv-fullchain-bundle.pem
+chmod 600 priv-fullchain-bundle.pem
 chown -R abc:abc /config/etc/letsencrypt

root/defaults/nginx/authelia-location.conf.sample

@@ -1,10 +1,15 @@
-## Version 2023/04/27 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authelia-location.conf.sample
+## Version 2024/03/14 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authelia-location.conf.sample
 # Make sure that your authelia container is in the same user defined bridge network and is named authelia
 # Rename /config/nginx/proxy-confs/authelia.subdomain.conf.sample to /config/nginx/proxy-confs/authelia.subdomain.conf
-# Make sure that the authelia configuration.yml has 'path: "authelia"' defined
+# For authelia 4.37 and below, make sure that the authelia configuration.yml has 'path: "authelia"' defined
+# For authelia 4.38 and above, make sure that the authelia configuration.yml has 'address: "tcp://:9091/authelia"' defined
 
 ## Send a subrequest to Authelia to verify if the user is authenticated and has permission to access the resource
-auth_request /authelia/api/verify;
+## For authelia 4.37 and below, use the following line
+# auth_request /authelia/api/verify;
+## For authelia 4.38 and above, use the following line
+auth_request /authelia/api/authz/auth-request;
+
 ## If the subreqest returns 200 pass to the backend, if the subrequest returns 401 redirect to the portal
 error_page 401 = @authelia_proxy_signin;
 

root/defaults/nginx/authelia-server.conf.sample

@@ -1,18 +1,20 @@
-## Version 2023/04/27 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authelia-server.conf.sample
+## Version 2024/03/16 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authelia-server.conf.sample
 # Make sure that your authelia container is in the same user defined bridge network and is named authelia
 # Rename /config/nginx/proxy-confs/authelia.subdomain.conf.sample to /config/nginx/proxy-confs/authelia.subdomain.conf
-# Make sure that the authelia configuration.yml has 'path: "authelia"' defined
+# For authelia 4.37 and below, make sure that the authelia configuration.yml has 'path: "authelia"' defined
+# For authelia 4.38 and above, make sure that the authelia configuration.yml has 'address: "tcp://:9091/authelia"' defined
 
 # location for authelia subfolder requests
 location ^~ /authelia {
     auth_request off; # requests to this subfolder must be accessible without authentication
+
     include /config/nginx/proxy.conf;
     include /config/nginx/resolver.conf;
     set $upstream_authelia authelia;
     proxy_pass http://$upstream_authelia:9091;
 }
 
-# location for authelia auth requests
+# location for authelia 4.37 and below auth requests
 location = /authelia/api/verify {
     internal;
 
@@ -29,6 +31,23 @@ location = /authelia/api/verify {
     proxy_set_header Content-Length "";
 }
 
+# location for authelia 4.38 and above auth requests
+location = /authelia/api/authz/auth-request {
+    internal;
+
+    include /config/nginx/proxy.conf;
+    include /config/nginx/resolver.conf;
+    set $upstream_authelia authelia;
+    proxy_pass http://$upstream_authelia:9091;
+
+    ## Include the Set-Cookie header if present
+    auth_request_set $set_cookie $upstream_http_set_cookie;
+    add_header Set-Cookie $set_cookie;
+
+    proxy_pass_request_body off;
+    proxy_set_header Content-Length "";
+}
+
 # virtual location for authelia 401 redirects
 location @authelia_proxy_signin {
     internal;

root/defaults/nginx/authentik-location.conf.sample

@@ -4,6 +4,7 @@
 
 ## Send a subrequest to Authentik to verify if the user is authenticated and has permission to access the resource
 auth_request /outpost.goauthentik.io/auth/nginx;
+
 ## If the subreqest returns 200 pass to the backend, if the subrequest returns 401 redirect to the portal
 error_page 401 = @goauthentik_proxy_signin;
 

root/defaults/nginx/authentik-server.conf.sample

@@ -5,6 +5,7 @@
 # location for authentik subfolder requests
 location ^~ /outpost.goauthentik.io {
     auth_request off; # requests to this subfolder must be accessible without authentication
+
     include /config/nginx/proxy.conf;
     include /config/nginx/resolver.conf;
     set $upstream_authentik authentik-server;

root/defaults/nginx/site-confs/default.conf.sample

@@ -1,4 +1,4 @@
-## Version 2023/11/27 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample
+## Version 2024/03/06 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample
 
 # redirect all traffic to https
 server {
@@ -48,7 +48,7 @@ server {
         # enable for Authentik (requires authentik-server.conf in the server block)
         #include /config/nginx/authentik-location.conf;
 
-        try_files $uri $uri/ /index.html /index.php$is_args$args;
+        try_files $uri $uri/ /index.html /index.htm /index.php$is_args$args;
     }
 
     location ~ ^(.+\.php)(.*)$ {
@@ -65,8 +65,8 @@ server {
         # enable for Authentik (requires authentik-server.conf in the server block)
         #include /config/nginx/authentik-location.conf;
 
-        try_files $fastcgi_script_name =404;
         fastcgi_split_path_info ^(.+\.php)(.*)$;
+        if (!-f $document_root$fastcgi_script_name) { return 404; }
         fastcgi_pass 127.0.0.1:9000;
         fastcgi_index index.php;
         include /etc/nginx/fastcgi_params;

root/etc/s6-overlay/s6-rc.d/init-certbot-config/run

@@ -23,6 +23,13 @@ for i in "${SANED_VARS[@]}"; do
     export echo "${i}"="$(echo "${!i}" | tr '[:upper:]' '[:lower:]')"
 done
 
+# Check for and install requested DNS plugins
+if grep -q "universal-package-install" <<< "${DOCKER_MODS}" && grep -q "certbot-dns" <<< "${INSTALL_PIP_PACKAGES}"; then
+    echo "**** Installing requested dns plugins ****"
+    /etc/s6-overlay/s6-rc.d/init-mod-universal-package-install-add-package/run
+    /etc/s6-overlay/s6-rc.d/init-mods-package-install/run
+fi
+
 # check to make sure DNSPLUGIN is selected if dns validation is used
 CERTBOT_DNS_AUTHENTICATORS=$(certbot plugins --authenticators 2>/dev/null | sed -e 's/^Entry point: EntryPoint(name='\''cpanel'\''/Entry point: EntryPoint(name='\''dns-cpanel'\''/' -e '/EntryPoint(name='\''dns-/!d' -e 's/^Entry point: EntryPoint(name='\''dns-\([^ ]*\)'\'',/\1/' | sort)
 if [[ "${VALIDATION}" = "dns" ]] && ! echo "${CERTBOT_DNS_AUTHENTICATORS}" | grep -q "${DNSPLUGIN}"; then