Skip to content

garage: drop the garage-webui service - #50

Merged
phonkd merged 1 commit into
mainfrom
worktree-fix-garage-pnpm-insecure
Jul 25, 2026
Merged

garage: drop the garage-webui service#50
phonkd merged 1 commit into
mainfrom
worktree-fix-garage-pnpm-insecure

Conversation

@phonkd

@phonkd phonkd commented Jul 25, 2026

Copy link
Copy Markdown
Owner

garage-webui is unmaintained upstream and was removed from nixpkgs (2026-06-23). On the bumped nixos-26.05 lock its only build path pulls pnpm-9.15.9, now marked insecure (CVE-2026-48995 et al.), which broke deploy mono at eval time.

Rather than permit an insecure build-time pnpm or pin an override for a dead package, remove the web UI entirely: the s3-webui phonkds.module (traefik route + dashboard tile) and the systemd garage-webui service. Garage itself, its admin API, and the garage-admin secret are untouched.

garage-webui is unmaintained upstream and was removed from nixpkgs
(2026-06-23). On the bumped nixos-26.05 lock its only build path pulls
pnpm-9.15.9, now marked insecure (CVE-2026-48995 et al.), which broke
`deploy mono` at eval time.

Rather than permit an insecure build-time pnpm or pin an override for a
dead package, remove the web UI entirely: the s3-webui phonkds.module
(traefik route + dashboard tile) and the systemd garage-webui service.
Garage itself, its admin API, and the garage-admin secret are untouched.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings July 25, 2026 21:40
@phonkd
phonkd merged commit 8cc07f7 into main Jul 25, 2026
1 check passed

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Removes the (now unmaintained and nixpkgs-removed) garage-webui integration from the homelab Garage module to avoid evaluation/build failures caused by its dependency chain (notably an insecure pnpm).

Changes:

  • Drops the phonkds.modules.s3-webui Traefik route + dashboard tile for the Garage Web UI.
  • Removes the systemd.services.garage-webui unit (and its secret-reading startup script), leaving Garage itself and its admin API configuration intact.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants