fix: unlock file on delete

feat: script for auditing configuration access rights
fix: bottom bars overlapping on android 15
fix: wait before healthcheck on configuration reload

Author: nicolaspernoud

Dockerfile

@@ -7,7 +7,7 @@ ARG RUST_VERSION
 ARG FLUTTER_VERSION
 
 # Set up an environnement to cross-compile the app for musl to create a statically-linked binary
-FROM --platform=$BUILDPLATFORM rust:${RUST_VERSION} AS backend-builder
+FROM --platform=$BUILDPLATFORM rust:${RUST_VERSION}-bookworm AS backend-builder
 ARG TARGETPLATFORM
 RUN case "$TARGETPLATFORM" in \
     "linux/amd64") echo x86_64-unknown-linux-gnu > /rust_target.txt ;; \
@@ -17,9 +17,7 @@ RUN case "$TARGETPLATFORM" in \
     *) exit 1 ;; \
     esac
 RUN rustup target add $(cat /rust_target.txt)
-RUN apt update && apt install -y binutils-arm-linux-gnueabihf clang cmake gcc-aarch64-linux-gnu gcc-arm-linux-gnueabihf libc6-dev-i386 libcap2-bin libclang-dev musl-dev musl-tools
-RUN ln -s /usr/bin/arm-linux-gnueabihf-gcc /usr/bin/arm-linux-musleabihf-gcc
-RUN ln -s /usr/bin/aarch64-linux-gnu-gcc /usr/bin/aarch64-linux-musl-gcc
+RUN apt update && apt install -y clang cmake gcc-aarch64-linux-gnu gcc-arm-linux-gnueabihf libc6-dev-i386 libcap2-bin libclang-dev musl-dev musl-tools
 RUN ln -s /usr/include/asm-generic /usr/include/asm
 
 # Create appuser

README.md

@@ -55,3 +55,10 @@ unused-features analyze --bins --lib --tests && unused-features build-report --i
 ```
 flutter run -d chrome --web-hostname atrium.127.0.0.1.nip.io --web-port 3000 --web-browser-flag "--unsafely-treat-insecure-origin-as-secure=http://atrium.127.0.0.1.nip.io:3000"
 ```
+
+### Regenerate the frontend
+
+```
+mv frontend frontend_old
+flutter create --template=app --platforms="android,web" --description="Atrium's frontend app" --org="fr.ninico" --project-name="atrium" frontend
+```

backend/.cargo/config.toml

@@ -1,14 +1,8 @@
-[target.armv7-unknown-linux-musleabihf]
-linker = "arm-linux-gnueabihf-ld"
-
 [target.arm-unknown-linux-musleabihf]
-linker = "arm-linux-gnueabihf-ld"
+linker = "arm-linux-gnueabihf-gcc"
 
-[target.aarch64-unknown-linux-musl]
-linker = "aarch64-linux-gnu-gcc"
+[target.armv7-unknown-linux-gnueabihf]
+linker = "arm-linux-gnueabihf-gcc"
 
 [target.aarch64-unknown-linux-gnu]
 linker = "aarch64-linux-gnu-gcc"
-
-[target.armv7-unknown-linux-gnueabihf]
-linker = "arm-linux-gnueabihf-gcc"

backend/Cargo.toml

@@ -13,63 +13,63 @@ name = "atrium"
 
 [dependencies]
 argon2 = { features = ["alloc", "password-hash"], default-features = false, version = "0.5.3" }
-async_zip = { features = ["deflate", "tokio"], default-features = false, version = "0.0.17" }
+async_zip = { features = ["deflate", "tokio"], default-features = false, version = "0.0.18" }
 async-stream = "0.3.6"
 async-walkdir = "2.1.0"
-aws-lc-rs = { version = "1.13.2", default-features = false, features = ["bindgen"] }
+aws-lc-rs = { version = "1.13.3", default-features = false, features = ["bindgen"] }
 axum = { version = "0.8.4", features = ["http2", "json", "query", "tokio"], default-features = false }
 axum-extra = { version = "0.10.1", features = ["cookie-private", "typed-header"], default-features = false }
 axum-server = { version = "0.7.2", default-features = false, features = ["tls-rustls"] }
 base64ct = { version = "1.8.0", features = ["alloc"] }
 chacha20poly1305 = { version = "0.10.1", features = ["stream"], default-features = false }
 chrono = { default-features = false, version = "0.4.41" }
-filetime = "0.2.25"
+filetime = "0.2.26"
 futures = { default-features = false, version = "0.3.31" }
 futures-util = { default-features = false, version = "0.3.31" }
 headers = "0.4.1"
 http = "1.3.1"
 http-body-util = "0.1.3"
-hyper = { version = "1.6.0", default-features = false }
-hyper-hickory = { version = "0.7.0", default-features = false, features = ["system-config"] }
+hyper = { version = "1.7.0", default-features = false }
+hyper-hickory = { version = "0.8.0", default-features = false, features = ["system-config", "tokio"] }
 hyper-rustls = { version = "0.27.7", features = ["aws-lc-rs", "http1", "http2", "tls12", "webpki-tokio"], default-features = false }
-hyper-util = { version = "0.1.15", features = ["client-legacy", "http1", "tokio"], default-features = false }
+hyper-util = { version = "0.1.16", features = ["client-legacy", "http1", "tokio"], default-features = false }
 jsonwebtoken-aws-lc = { version = "9.3.0", default-features = false }
 maxminddb = "0.26.0"
 mime_guess = { default-features = false, version = "2.0.5" }
 oauth2 = { version = "5.0.0", default-features = false }
-percent-encoding = { default-features = false, version = "2.3.1" }
-quick-xml = "0.38.0"
+percent-encoding = { default-features = false, version = "2.3.2" }
+quick-xml = "0.38.3"
 rand = { default-features = false, version = "0.9.2", features = ["os_rng"] }
 rcgen = { version = "0.14.3", default-features = false, optional = true, features = ["aws_lc_rs", "crypto", "pem"] }
-rustls = { default-features = false, version = "0.23.29", features = ["aws_lc_rs"] }
+rustls = { default-features = false, version = "0.23.31", features = ["aws_lc_rs"] }
 rustls-acme = { version = "0.14.0", features = ["aws-lc-rs", "axum", "webpki-roots"], default-features = false }
 rustls-pki-types = { version = "1.12.0" }
 serde = { version = "1.0.219", default-features = false }
-serde_json = { default-features = false, version = "1.0.141" }
+serde_json = { default-features = false, version = "1.0.143" }
 serde_yaml_ng = "0.10.0"
 sha2 = { default-features = false, version = "0.10.9" }
-sysinfo = { default-features = false, version = "0.36.1", features = ["disk", "system"] }
+sysinfo = { default-features = false, version = "0.37.0", features = ["disk", "system"] }
 time = { default-features = false, version = "0.3.41" }
-tokio = { version = "1.46.1", features = ["full"], default-features = false }
+tokio = { version = "1.47.1", features = ["full"], default-features = false }
 tokio-stream = { version = "0.1.17", default-features = false }
-tokio-util = { version = "0.7.15", default-features = false }
+tokio-util = { version = "0.7.16", default-features = false }
 tower = { default-features = false, version = "0.5.2", features = ["util"] }
 tower-http = { version = "0.6.6", features = ["fs"], default-features = false }
 tower-service = "0.3.3"
-tracing = { default-features = false, version = "0.1.41" }
+tracing = { default-features = false, version = "0.1.41", features = ["attributes"] }
 tracing-appender = "0.2.3"
 tracing-subscriber = { version = "0.3.19", features = ["ansi", "env-filter", "local-time"], default-features = false }
 trim-in-place = "0.1.7"
 urlencoding = "2.1.3"
-uuid = { version = "1.17.0", features = ["fast-rng", "v4"], default-features = false }
+uuid = { version = "1.18.0", features = ["fast-rng", "v4"], default-features = false }
 
 [features]
 default = ["self_signed"]
 self_signed = ["dep:rcgen"]
 
 [dev-dependencies]
-async-tungstenite = { version = "0.30.0", features = ["tokio-runtime"] }
-reqwest = { version = "0.12.22", default-features = false, features = ["cookies", "json", "native-tls", "stream"] }
+async-tungstenite = { version = "0.31.0", features = ["tokio-runtime"] }
+reqwest = { version = "0.12.23", default-features = false, features = ["cookies", "json", "native-tls", "stream"] }
 tungstenite = "0.27.0"
 
 [profile.release_optimized]