🎉 Release of add-on Cloudflared 2.0.2

README.md

@@ -86,10 +86,10 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-[addon-cloudflared]: https://github.com/brenner-tobias/addon-cloudflared/tree/v2.0.1
-[addon-doc-cloudflared]: https://github.com/brenner-tobias/addon-cloudflared/blob/v2.0.1/README.md
+[addon-cloudflared]: https://github.com/brenner-tobias/addon-cloudflared/tree/v2.0.2
+[addon-doc-cloudflared]: https://github.com/brenner-tobias/addon-cloudflared/blob/v2.0.2/README.md
 [cloudflared-issue]: https://github.com/brenner-tobias/addon-cloudflared/issues
-[cloudflared-version-shield]: https://img.shields.io/badge/version-v2.0.1-blue.svg
+[cloudflared-version-shield]: https://img.shields.io/badge/version-v2.0.2-blue.svg
 [cloudflared-aarch64-shield]: https://img.shields.io/badge/aarch64-yes-green.svg
 [cloudflared-amd64-shield]: https://img.shields.io/badge/amd64-yes-green.svg
 [cloudflared-armhf-shield]: https://img.shields.io/badge/armhf-yes-green.svg

cloudflared/CHANGELOG.md

@@ -1,10 +1,10 @@
 ## What’s changed
-## 📚 Documentation
 
-- Add Troubleshooting for 400: Bad Request error @elcajon (#105)
+## 🐛 Bug fixes
+
+- 🐛 Update AppArmor for Cloudflared service & s6-overlay v3 @elcajon (#108)
 
 ## ⬆️ Dependency updates
 
-- ⬆️ Update yq to 4.14.1-r2 @elcajon (#103)
-- ℹ️ Update Cloudflared to version 2022.5.3 @github-actions (#102)
-- ⬆️ Update base image to 11.1.2 @elcajon (#104)
+- ⬆️ Update Base image to v.12.0.0 @elcajon (#106)
+- ⬆️ Update Cloudflared to version 2022.6.1 @github-actions (#109)

cloudflared/apparmor.txt

@@ -5,26 +5,52 @@ profile cloudflared flags=(attach_disconnected,mediate_deleted) {
 
   # Capabilities
   file,
-  signal,
+  signal (send) set=(kill,term,int,hup,cont),
 
-  # S6-Overlay
+  # S6-Overlay from HA OS default apparmor profile
+  /init ix,
+  /bin/** ix,
+  /usr/bin/** ix,
+  /run/{s6,s6-rc*,service}/** ix,
+  /package/** ix,
+  /command/** ix,
   /etc/services.d/** rwix,
   /etc/cont-init.d/** rwix,
+  /etc/cont-finish.d/** rwix,
+  /run/{,**} rwk,
+  /dev/tty rw,
+  
+  # S6-Overlay from cloudflared add-on
+  /etc/s6-overlay/** rwix,
 
   # Bashio
   /usr/lib/bashio/** ix,
-  /tmp/** rw,
-
-  # Access to cloudflared files
-  /root/.cloudflared/** rw,
+  /tmp/** rwk,
+  
+  # Access to options.json and other files within your addon
+  /data/** rw,
 
   # Start new profile for cloudflared service
-  cloudflared cx,
+  #/usr/bin/cloudflared cx -> cloudflared,
 
   profile cloudflared flags=(attach_disconnected,mediate_deleted) {
     #include <abstractions/base>
 
+    # Access to options.json and other files within your addon
+    /data/** rw,
+
+    # Access to mapped volumes specified in config.json
+    /share/** rw,
+    /config/** rw,
+    /ssl/** rw,
+    
+    # Access to add-on generated config.yaml
+    /tmp/** rw,
+    
+    # Access required for service functionality
+    /usr/bin/cloudflared r,
+
     # Receive signals from S6-Overlay
     signal receive,
   }
-}
+}

cloudflared/config.yaml

@@ -42,4 +42,4 @@ schema:
   - str?
 slug: cloudflared
 url: https://github.com/brenner-tobias/addon-cloudflared/
-version: 2.0.1
+version: 2.0.2