@simplehomelab/deployrr 6.0.0-rc3

package/apps/official/wg-easy/manifest.json

@@ -0,0 +1,118 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "wg-easy",
+    "pname": "WG-Easy",
+    "description": "WireGuard VPN server with a simple web-based management interface. Easily create, manage, and delete VPN clients with QR code support for mobile devices.",
+    "descriptionShort": "Wireguard VPN + Admin WebUI",
+    "icon": "sh-wireguard",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["vpn", "wireguard", "network", "security"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 51821,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "folders": {
+    "appdata": ["wireguard"]
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "WGEASY_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "WGEASY_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 51821,
+        "prompt": true,
+        "required": true,
+        "validation": { "type": "port", "min": 1, "max": 65535 }
+      },
+      {
+        "name": "WGEASY_DEFAULT_ADDRESS",
+        "description": "Default client IP range (all clients will get IPs in this range)",
+        "type": "string",
+        "default": "192.168.20.x",
+        "prompt": true,
+        "required": true
+      },
+      {
+        "name": "WGEASY_DEFAULT_DNS",
+        "description": "Default DNS servers for clients (comma-separated)",
+        "type": "string",
+        "default": "1.1.1.1,1.0.0.1",
+        "prompt": true,
+        "required": true
+      },
+      {
+        "name": "WGEASY_ALLOWED_IPS",
+        "description": "Allowed IPs range (0.0.0.0/0,::/0 allows access to all LAN devices)",
+        "type": "string",
+        "default": "0.0.0.0/0,::/0",
+        "prompt": true,
+        "required": true
+      }
+    ],
+    "secrets": [
+      {
+        "name": "wgeasy_password",
+        "description": "Password for WG-Easy WebUI",
+        "type": "prompt_password",
+        "addToCompose": true
+      }
+    ]
+  },
+
+  "hooks": {
+    "postInstall": {
+      "script": "files/post-install.sh",
+      "messages": [
+        {
+          "style": "warning",
+          "text": "Make sure UDP port 51820 is forwarded/reachable from your router to the WireGuard server."
+        }
+      ]
+    }
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "WG-Easy password is hashed using bcrypt. The password is stored in \\Z4$DOCKER_FOLDER/secrets/wgeasy_password\\Zn."
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_wg-easy_status",
+    "successMessage": "WG-Easy Setup Completed",
+    "telemetryAction": "wg-easy"
+  }
+}

package/apps/official/wikidocs/compose.yml

@@ -0,0 +1,19 @@
+services:
+  # Wikidocs - Flat-file Markdown Wiki
+  wikidocs:
+    image: zavy86/wikidocs
+    container_name: wikidocs
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks: 
+      - default
+    ports:
+      - "$WIKIDOCS_PORT:80"
+    volumes:
+      - '$DOCKERDIR/appdata/wikidocs:/datasets'
+    environment:
+      PUID: $PUID
+      PGID: $PGID
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/wikidocs/manifest.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "wikidocs",
+    "pname": "Wikidocs",
+    "description": "Wikidocs is a simple and lightweight flat-file wiki application that uses Markdown files. It requires no database and is easy to deploy and maintain.",
+    "descriptionShort": "Flat-file Markdown Wiki",
+    "icon": "sh-wikidocs",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["wiki", "documentation", "markdown"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["default"],
+    "webui": true,
+    "port": 82,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "WIKIDOCS_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "WIKIDOCS_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 82,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_wikidocs_status",
+    "successMessage": "Wikidocs Setup Completed",
+    "telemetryAction": "wikidocs"
+  }
+}

package/apps/official/wud/compose.yml

@@ -0,0 +1,22 @@
+services:
+  # WUD (What's Up Docker) - Docker Image Update Notification
+  wud:
+    image: fmartinou/whats-up-docker
+    container_name: wud
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - socket_proxy
+    ports:
+      - "$WUD_PORT:3000"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    environment:
+      # - WUD_TRIGGER_DISCORD_1_URL=https://discord.com/api/webhooks/123/456
+      # - WUD_TRIGGER_DISCORD_1_BOTUSERNAME=WUD
+      - WUD_WATCHER_LOCAL_CRON=0 1 * * *
+      - WUD_WATCHER_LOCAL_WATCHALL=true
+      # - WUD_WATCHER_MYREMOTEHOST_HOST=<remote host>
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/wud/manifest.json

@@ -0,0 +1,74 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "wud",
+    "pname": "What's Up Docker",
+    "description": "What's Up Docker (WUD) monitors Docker containers and notifies you when new images are available. It supports various notification methods including Discord, Slack, email, and more.",
+    "descriptionShort": "Docker image updates notification",
+    "icon": "sh-wud",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["docker", "monitoring", "notifications", "updates"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["apps", "all"],
+    "networks": ["socket_proxy"],
+    "webui": true,
+    "port": 3001,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites"],
+    "apps": []
+  },
+
+  "postInstall": {
+    "messages": [
+      {
+        "type": "note",
+        "text": "You may edit wud.yml to enable notifications."
+      }
+    ]
+  },
+
+  "traefik": {
+    "supported": true
+  },
+
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "WUD_PORT"
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "WUD_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 3001,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_wud_status",
+    "successMessage": "What's Up Docker Setup Completed",
+    "telemetryAction": "wud"
+  }
+}

package/apps/official/xpipe-webtop/compose.yml

@@ -0,0 +1,21 @@
+services:
+  # XPipe Webtop - Web Desktop Environment
+  xpipe-webtop:
+    image: ghcr.io/xpipe-io/xpipe-webtop:latest
+    container_name: xpipe-webtop
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    networks:
+      - default
+    # DEVICES-GPU-PLACEHOLDER-DO-NOT-DELETE
+    ports:
+      - "$XPIPEWEBTOP_PORT:3000" # HTTP
+      # - "3001:3001" # HTTPS
+    volumes:
+      - $DOCKERDIR/appdata/xpipe-webtop:/config
+      - /var/run/docker.sock:/var/run/docker.sock #optional
+    # environment:
+      # SUBFOLDER: / #optional
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/xpipe-webtop/manifest.json

@@ -0,0 +1,83 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+  "app": {
+    "sname": "xpipe-webtop",
+    "pname": "XPipe Webtop",
+    "description": "XPipe Webtop is a web-based desktop environment that provides a full Linux desktop accessible through your browser with XPipe connection management built-in.",
+    "descriptionShort": "Web desktop environment",
+    "icon": "sh-xpipe",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": [
+      "desktop",
+      "web",
+      "remote",
+      "xpipe"
+    ]
+  },
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": [
+      "core",
+      "all"
+    ],
+    "networks": [
+      "default"
+    ],
+    "webui": true,
+    "port": 3004,
+    "protocol": "http"
+  },
+  "requirements": {
+    "prerequisites": [
+      "prerequisites",
+      "add_gpu"
+    ],
+    "apps": []
+  },
+  "gpu": {
+    "required": false,
+    "usage": "Hardware-accelerated rendering",
+    "vendors": {
+      "intel": {
+        "pattern": "dri"
+      },
+      "amd": {
+        "pattern": "dri"
+      }
+    }
+  },
+  "traefik": {
+    "supported": true
+  },
+  "dashboard": {
+    "enabled": true,
+    "location": "local",
+    "showStats": true,
+    "portVariable": "XPIPEWEBTOP_PORT"
+  },
+  "env": {
+    "variables": [
+      {
+        "name": "XPIPEWEBTOP_PORT",
+        "description": "Web interface port",
+        "type": "port",
+        "default": 3004,
+        "prompt": true,
+        "required": true,
+        "validation": {
+          "type": "port",
+          "min": 1,
+          "max": 65535
+        }
+      }
+    ]
+  },
+  "status": {
+    "file": "06_xpipe-webtop_status",
+    "successMessage": "XPipe Webtop Setup Completed",
+    "telemetryAction": "xpipe-webtop"
+  }
+}

package/apps/official/zerotier/compose.yml

@@ -0,0 +1,17 @@
+services:
+  # ZeroTier - Private Network over Internet
+  zerotier:
+    image: zerotier/zerotier:latest
+    container_name: zerotier
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["core", "all"]
+    network_mode: host
+    cap_add:
+      - NET_ADMIN
+      - SYS_ADMIN
+    devices:
+      - /dev/net/tun
+    volumes:
+      - $DOCKERDIR/appdata/zerotier:/var/lib/zerotier-one

package/apps/official/zerotier/files/post-install.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# ZeroTier post-install script
+# Joins the ZeroTier network if NETWORKID was provided
+
+if [[ -n "$ZEROTIER_NETWORKID" ]]; then
+    echo "Connecting Docker Host to ZeroTier network $ZEROTIER_NETWORKID..."
+
+    # Wait a moment for the container to fully initialize
+    sleep 2
+
+    ZEROTIER_CONNECTION_STATUS="$(sudo docker exec zerotier zerotier-cli join "$ZEROTIER_NETWORKID" 2>/dev/null)"
+
+    if [[ "${ZEROTIER_CONNECTION_STATUS}" == "200"* ]]; then
+        echo -e "${GREEN}Successfully joined ZeroTier network.${ENDCOLOR}"
+        echo -e "${YELLOW}[NOTE]${ENDCOLOR} Remember to authorize this device in ZeroTier Central."
+    else
+        echo -e "${RED}[WARNING]${ENDCOLOR} Failed to join ZeroTier network. Status: $ZEROTIER_CONNECTION_STATUS"
+        echo "You can manually join later with: sudo docker exec zerotier zerotier-cli join $ZEROTIER_NETWORKID"
+    fi
+else
+    echo -e "${YELLOW}[NOTE]${ENDCOLOR} No Network ID provided. To join a network later, run:"
+    echo "sudo docker exec zerotier zerotier-cli join YOUR_NETWORK_ID"
+fi

package/apps/official/zerotier/manifest.json

@@ -0,0 +1,78 @@
+{
+  "$schema": "../../../apps/manifest-schema.json",
+  "version": "1.2",
+
+  "app": {
+    "sname": "zerotier",
+    "pname": "ZeroTier",
+    "description": "ZeroTier creates secure networks between on-premise, cloud, desktop, and mobile devices. It enables direct connections for remote access, gaming, and IoT without complex firewall configurations.",
+    "descriptionShort": "Private network over internet",
+    "icon": "sh-zerotier",
+    "category": "official",
+    "menuNumber": "06",
+    "tags": ["networking", "vpn", "security", "zerotier"]
+  },
+
+  "deployment": {
+    "type": "single",
+    "compose": "compose.yml",
+    "profiles": ["core", "all"],
+    "networks": [],
+    "webui": false,
+    "port": 0,
+    "protocol": "http"
+  },
+
+  "requirements": {
+    "prerequisites": ["prerequisites", "network_adapter"],
+    "apps": []
+  },
+
+  "hooks": {
+    "preInstall": {
+      "dialog": {
+        "type": "warning",
+        "title": "ZeroTier Host Networking",
+        "message": "\\n\\Z1NOTE!\\Zn\\n\\nZeroTier client will be installed in \\Z2host networking\\Zn mode.\\n\\nThis means all apps on the Docker host can be accessed using ZEROTIER-IP:PORT (e.g. \\Z4http://XXX.XXX.XXX.XXX:3050\\Zn for Deployrr Dashboard).\\n\\nIf you provide a Network ID, Deployrr will automatically connect your Docker host to the ZeroTier network after installation.\\n\\nDo you wish to proceed?"
+      }
+    },
+    "postInstall": {
+      "script": "files/post-install.sh",
+      "messages": [
+        {
+          "style": "note",
+          "text": "Remember to authorize this device in your ZeroTier Central dashboard at https://my.zerotier.com"
+        }
+      ]
+    }
+  },
+
+  "traefik": {
+    "supported": false
+  },
+
+  "dashboard": {
+    "enabled": false,
+    "location": "local",
+    "showStats": false,
+    "portVariable": ""
+  },
+
+  "env": {
+    "variables": [
+      {
+        "name": "ZEROTIER_NETWORKID",
+        "description": "ZeroTier Network ID (from my.zerotier.com)",
+        "type": "string",
+        "prompt": true,
+        "required": false
+      }
+    ]
+  },
+
+  "status": {
+    "file": "06_zerotier_status",
+    "successMessage": "ZeroTier Setup Completed",
+    "telemetryAction": "zerotier"
+  }
+}

package/apps/unofficial/9router/compose.yml

@@ -0,0 +1,30 @@
+services:
+  # 9Router - Universal AI Proxy & Smart Router
+  9router:
+    image: deployrr/9router:latest
+    container_name: 9router
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: [ "apps", "all" ]
+    networks:
+      - default
+    ports:
+      - "$NINEROUTER_PORT:20128"
+    volumes:
+      - $DOCKERDIR/appdata/9router/data:/app/data
+      - $DOCKERDIR/appdata/9router/usage:/root/.9router
+    environment:
+      - TZ=$TZ
+      - PUID=$PUID
+      - PGID=$PGID
+      - PORT=20128
+      - HOSTNAME=0.0.0.0
+      - NODE_ENV=production
+      - NEXT_PUBLIC_BASE_URL=http://localhost:20128
+      - JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - INITIAL_PASSWORD=INITIAL-PASSWORD-PLACEHOLDER
+      - API_KEY_SECRET=API-KEY-SECRET-PLACEHOLDER
+      - MACHINE_ID_SALT=MACHINE-ID-SALT-PLACEHOLDER
+      - REQUIRE_API_KEY=false
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/unofficial/9router/files/oauth-fix.patch

@@ -0,0 +1,32 @@
+diff --git a/src/shared/components/OAuthModal.js b/src/shared/components/OAuthModal.js
+index 43d4912..e766a5d 100644
+--- a/src/shared/components/OAuthModal.js
++++ b/src/shared/components/OAuthModal.js
+@@ -217,7 +217,7 @@ export default function OAuthModal({ isOpen, provider, providerInfo, onSuccess,
+       const isLocalhost = event.origin.includes("localhost") || event.origin.includes("127.0.0.1");
+       const isSameOrigin = event.origin === window.location.origin;
+       if (!isLocalhost && !isSameOrigin) return;
+-      
++
+       if (event.data?.type === "oauth_callback") {
+         handleCallback(event.data.data);
+       }
+@@ -272,6 +272,8 @@ export default function OAuthModal({ isOpen, provider, providerInfo, onSuccess,
+   // Handle manual URL input
+   const handleManualSubmit = async () => {
+     try {
++      if (callbackProcessedRef.current) return;
++      callbackProcessedRef.current = true;
+       setError(null);
+       const url = new URL(callbackUrl);
+       const code = url.searchParams.get("code");
+@@ -363,6 +365,9 @@ export default function OAuthModal({ isOpen, provider, providerInfo, onSuccess,
+             <div className="space-y-4">
+               <div>
+                 <p className="text-sm font-medium mb-2">Step 1: Open this URL in your browser</p>
++                <div className="bg-yellow-500/10 border border-yellow-500/20 text-yellow-600 dark:text-yellow-400 p-3 rounded-md mb-3 text-xs">
++                  <strong>Note:</strong> After authorizing, you will be redirected to a <code>localhost</code> page. This page may show a <strong>Connection Refused</strong> or <strong>404 error</strong>. This is expected! Simply copy the full URL from the address bar of that error page.
++                </div>
+                 <div className="flex gap-2">
+                   <Input value={authData?.authUrl || ""} readOnly className="flex-1 font-mono text-xs" />
+                   <Button variant="secondary" icon={copied === "auth_url" ? "check" : "content_copy"} onClick={() => copy(authData?.authUrl, "auth_url")}>

package/apps/unofficial/9router/files/pre-install.sh

@@ -0,0 +1,87 @@
+#!/bin/bash
+# 9Router pre-install hook
+# Clones the 9Router repo and builds the Docker image locally
+# Then injects secrets into the compose file
+
+APP_COMPOSE_FILE="$DOCKER_FOLDER/compose/$HOSTNAME/9router.yml"
+BUILD_DIR="$DOCKER_FOLDER/appdata/9router/build"
+IMAGE_NAME="deployrr/9router:latest"
+
+# Step 1: Check if image already exists
+f_print_substep "Checking for existing 9Router image..."
+if sudo docker image inspect "$IMAGE_NAME" &>/dev/null; then
+	f_print_substep "Image $IMAGE_NAME already exists"
+	f_print_substep "To rebuild, run: sudo docker rmi $IMAGE_NAME"
+else
+	# Step 2: Clone or update the 9Router repository
+	f_print_substep "Preparing 9Router source code..."
+	if [[ -d "$BUILD_DIR/.git" ]]; then
+		f_print_substep "Updating existing repository..."
+		sudo git -C "$BUILD_DIR" pull --ff-only 2>/dev/null || {
+			f_print_substep "Pull failed, re-cloning..."
+			sudo rm -rf "$BUILD_DIR"
+			sudo git clone --depth 1 https://github.com/decolua/9router.git "$BUILD_DIR"
+		}
+	else
+		f_print_substep "Cloning 9Router repository..."
+		sudo mkdir -p "$(dirname "$BUILD_DIR")"
+		sudo rm -rf "$BUILD_DIR"
+		sudo git clone --depth 1 https://github.com/decolua/9router.git "$BUILD_DIR"
+	fi
+
+	# Fix permissions so build context is readable
+	sudo chmod -R a+rX "$BUILD_DIR"
+
+	# Apply OAuth race condition fix
+	f_print_substep "Applying OAuth Race Condition patch..."
+	if [[ -f "$app_folder/files/oauth-fix.patch" ]]; then
+		sudo git -C "$BUILD_DIR" apply "$app_folder/files/oauth-fix.patch" 2>/dev/null || f_print_substep "Patch already applied or failed"
+	fi
+
+	# Step 3: Build the Docker image (using full paths, no cd needed)
+	f_print_substep "Building 9Router Docker image (this may take 3-5 minutes)..."
+	f_print_substep "Image name: $IMAGE_NAME"
+	if sudo docker build -t "$IMAGE_NAME" -f "$BUILD_DIR/Dockerfile" "$BUILD_DIR"; then
+		f_print_success "9Router image built successfully"
+	else
+		f_print_error "Failed to build 9Router image"
+		return 1
+	fi
+fi
+
+# Step 4: Inject secrets into compose file
+f_print_substep "Configuring 9Router secrets..."
+
+JWT_SECRET=$(sudo cat "$DOCKER_FOLDER/secrets/ninerouter_jwt_secret" 2>/dev/null)
+if [[ -n "$JWT_SECRET" ]]; then
+	sudo sed -i "s|JWT-SECRET-PLACEHOLDER|$JWT_SECRET|" "$APP_COMPOSE_FILE"
+	f_print_substep "JWT secret injected into compose file"
+else
+	f_print_error "JWT secret not found in secrets"
+	return 1
+fi
+
+INITIAL_PASSWORD=$(sudo cat "$DOCKER_FOLDER/secrets/ninerouter_password" 2>/dev/null)
+if [[ -n "$INITIAL_PASSWORD" ]]; then
+	sudo sed -i "s|INITIAL-PASSWORD-PLACEHOLDER|$INITIAL_PASSWORD|" "$APP_COMPOSE_FILE"
+	export INITIAL_PASSWORD  # Export so envsubst can substitute in post-install messages
+	f_print_substep "Initial password injected into compose file"
+else
+	f_print_error "Initial password not found in secrets"
+	return 1
+fi
+
+# Generate unique API key secret and machine ID salt
+API_KEY_SECRET=$(openssl rand -hex 16 2>/dev/null || head -c 32 /dev/urandom | xxd -p | head -c 32)
+MACHINE_ID_SALT=$(openssl rand -hex 16 2>/dev/null || head -c 32 /dev/urandom | xxd -p | head -c 32)
+sudo sed -i "s|API-KEY-SECRET-PLACEHOLDER|$API_KEY_SECRET|" "$APP_COMPOSE_FILE"
+sudo sed -i "s|MACHINE-ID-SALT-PLACEHOLDER|$MACHINE_ID_SALT|" "$APP_COMPOSE_FILE"
+f_print_substep "API key secret and machine ID salt generated"
+
+# Step 5: Set ownership of ALL volume-mounted directories
+f_print_substep "Setting directory ownership..."
+sudo mkdir -p "$DOCKER_FOLDER/appdata/9router/data"
+sudo mkdir -p "$DOCKER_FOLDER/appdata/9router/usage"
+sudo chown -R "$PUID:$PGID" "$DOCKER_FOLDER/appdata/9router/data"
+sudo chown -R "$PUID:$PGID" "$DOCKER_FOLDER/appdata/9router/usage"
+f_print_success "9Router pre-install completed"