v5.8

Author: SimpleHomelab

.gitignore

@@ -1,8 +1,8 @@
 *
 */
 
-!deployrr_v5.7.1.app 
-!deployrr_v5.7.1-arm.app 
+!deployrr_v5.8.app 
+!deployrr_v5.8-arm.app 
 
 !.gitignore
 !announcement

APPS.md

@@ -70,6 +70,7 @@
 - **Authelia**: An authentication and authorization server providing 2-factor authentication and single sign-on (SSO).
 - **Socket Proxy**: A configurable proxy for Docker Socket.
 - **OAuth**: OAuth login from several providers, including Google OAuth 2.0.
+- **TinyAuth**: Lightweight self-hosted Single Sign-On, 2-FA, and OAuth.
 - **CrowdSec**: An open-source and collaborative security solution.
 - **CrowdSec Firewall Bouncer**: A CrowdSec bouncer for blocking IPs in your firewall.
 

CHANGELOG.md

@@ -1,5 +1,26 @@
 <h3>Releases</h3>
 
+<h5>v5.8 - May 12, 2025</h5>
+Total Supported Apps: 140+
+<ul>
+<li>NEW: Added TinyAuth - Lightweight self-hosted Single Sign-On and OAuth solution.</li>
+<li>NEW: Added YAML Yoda - YAML validation tool integrated into health checks. Helps identify YAML issues in compose files.</li>
+<li>NEW: Added SMB and NFS mount options under new Mounts menu.</li>
+<li>NEW: Added Docker Login under Docker menu.</li>
+<li>NEW: Redesigned Manage Auth interface for better auth provider selection.</li>
+<li>ENHANCEMENT: Added HTTP/3 support to Traefik (not fully tested).</li>
+<li>ENHANCEMENT: Added allowed hosts to Homepage and Deployrr Dashboard.</li>
+<li>ENHANCEMENT: Auto-add file provider for Deployrr Dashboard after Traefik setup.</li>
+<li>ENHANCEMENT: Updated transmission download path to match Arr apps.</li>
+<li>ENHANCEMENT: Improved UX. Menus won't rewrite/clear terminal message history.</li>
+<li>FIX: Various Docker aliases and .bashrc integration fixes.</li>
+<li>FIX: Improved auth provider validation in Manage Auth.</li>
+<li>FIX: Removed obsolete Deployarr Dashboard includes.</li>
+<li>FIX: Pin reset/reminder email was not being sent.</li>
+<li>VISUAL: Updated Deployrr icon in dashboard.</li>
+<li>A few other minor improvements and bug fixes.</li>
+</ul>
+
 <h5>v5.7.1 - April 15, 2025</h5>
 <ul>
 <li>NEW: Deployarr is now Deployrr (finally got the spelling right!). Many changes to reflect this. Minor release to ensure nothing breaks but major functionality remains the same.</li>

README.md

@@ -15,7 +15,7 @@ Deployrr revolutionizes homelab setup by automating the deployment and configura
 - **Enterprise-Grade Security**:
   - Socket-Proxy protection
   - CrowdSec integration
-  - Multiple authentication options (Authentik, Authelia, Google OAuth)
+  - Multiple authentication options (Authentik, Authelia, TinyAuth, Google OAuth)
 - **Professional Networking**:
   - Advanced Traefik reverse proxy configuration
   - Flexible exposure modes (Internal, External, or Hybrid)
@@ -24,6 +24,7 @@ Deployrr revolutionizes homelab setup by automating the deployment and configura
   - Intuitive stack management interface
   - Automated backup and restoration
   - Comprehensive monitoring and logging
+  - Remote share mounting (SMB, NFS, Rclone)
 
 ## Quick Start
 
@@ -35,7 +36,7 @@ bash -c "$(curl -fsSL https://www.deployrr.app/install.sh)"
 ![Deployrr Stats](images/v5/deployrr%20stats%20apr%202025.png)
 
 # Supported Apps
-Deployrr can automatically setup Socket Proxy, Traefik (fetch LE SSL certificates), Authentik, Authelia, Portainer, Plex, Jellyfin, Starr Apps, Gluetun, Dozzle, Uptime-Kuma, Homepage, CrowdSec, and other apps. 
+Deployrr can automatically setup Socket Proxy, Traefik (fetch LE SSL certificates), Authentik, Authelia, TinyAuth, Portainer, Plex, Jellyfin, Starr Apps, Gluetun, Dozzle, Uptime-Kuma, Homepage, CrowdSec, and other apps. 
 
 [Full List of Apps](APPS.md)
 

compose/deployarr-dashboard.yml

@@ -1,7 +1,7 @@
 services:
   # Deployrr Dashboard - Homepage based Dashboard for Deployrr
   deployrr-dashboard:
-    image: ghcr.io/gethomepage/homepage:v0.9.13
+    image: ghcr.io/gethomepage/homepage:v1.2.0 #v0.9.13
     container_name: deployrr-dashboard
     security_opt:
       - no-new-privileges:true
@@ -19,4 +19,5 @@ services:
       TZ: $TZ
       PUID: $PUID
       PGID: $PGID
+      HOMEPAGE_ALLOWED_HOSTS: "*"
     # DOCKER-LABELS-PLACEHOLDER

compose/deployrr-dashboard.yml

@@ -18,4 +18,5 @@ services:
       TZ: $TZ
       PUID: $PUID
       PGID: $PGID
+      HOMEPAGE_ALLOWED_HOSTS: "*"
     # DOCKER-LABELS-PLACEHOLDER

compose/homepage.yml

@@ -0,0 +1,45 @@
+services:
+  # TinyAuth - Self-Hosted Single Sign-On, 2-FA, and OAuth
+  tinyauth:
+    container_name: tinyauth
+    image: ghcr.io/steveiliop56/tinyauth:v3
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    networks:
+      - default
+      - t3_proxy
+    # ports:
+    #   - "$TINYAUTH_PORT:3000"
+    volumes:
+    - $DOCKERDIR/appdata/tinyauth/users_file:/tinyauth/users_file
+    environment:
+      - SECRET_FILE=/run/secrets/tinyauth_secret
+      - APP_URL=https://tinyauth.$DOMAINNAME_1
+      - USERS_FILE=users_file # user:hashed-password, one per line
+      - LOG_LEVEL=0
+      - LOGIN_MAX_RETRIES=3
+      - LOGIN_TIMEOUT=300
+      - DISABLE_CONTINUE=true
+      # - OAUTH_WHITELIST=${OAUTH_WHITELIST}
+      # # Github OAuth2
+      # - GITHUB_CLIENT_ID=${GITHUB_CLIENT_ID}
+      # - GITHUB_CLIENT_SECRET_FILE=/run/secrets/tinyauth_github_secret
+      # # Google OAuth2
+      # - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}
+      # - GOOGLE_CLIENT_SECRET_FILE=/run/secrets/tinyauth_google_secret
+    secrets:
+      - tinyauth_secret
+      # - tinyauth_github_secret
+      # - tinyauth_google_secret
+    labels:
+      - "traefik.enable=true"
+      ## HTTP Routers
+      - "traefik.http.routers.tinyauth-rtr.entrypoints=websecure-internal,websecure-external"
+      - "traefik.http.routers.tinyauth-rtr.rule=Host(`tinyauth.$DOMAINNAME_1`)"
+      ## Middlewares
+      - "traefik.http.routers.tinyauth-rtr.middlewares=chain-no-auth@file"  # Should be chain-no-auth and not chain-tinyauth
+      ## HTTP Services
+      - "traefik.http.routers.tinyauth-rtr.service=tinyauth-svc"
+      - "traefik.http.services.tinyauth-svc.loadbalancer.server.port=3000"

compose/tinyauth.yml

@@ -21,6 +21,8 @@ services:
       - --entrypoints.websecure-external.address=:444
       - --entrypoints.websecure-internal.address=:443
       - --entrypoints.traefik.address=:8080
+      - --entrypoints.websecure-external.http3=true
+      - --entrypoints.websecure-internal.http3=true
       - --entrypoints.web-external.http.redirections.entrypoint.to=websecure-external
       - --entrypoints.web-external.http.redirections.entrypoint.scheme=https
       - --entrypoints.web-external.http.redirections.entrypoint.permanent=true

compose/traefik.yml

@@ -15,8 +15,8 @@ services:
       - "51413:51413/udp"
     volumes:
       - $DOCKERDIR/appdata/transmission:/config
-      - $DOWNLOADSDIR/torrents:/downloads
-      - $DOWNLOADSDIR:/watch
+      - $DOWNLOADSDIR/torrents:/data/downloads
+      - $DOWNLOADSDIR:/data/watch
     environment:
       - PUID=$PUID
       - PGID=$PGID