From 539259f4666193e05204cca0f4aa43b17454132c Mon Sep 17 00:00:00 2001
From: okxlin <61420215+okxlin@users.noreply.github.com>
Date: Tue, 28 Jul 2026 18:01:58 +0800
Subject: [PATCH] feat: add Yamtrack app

---
 apps/yamtrack/0.25.3/.env.sample          |   7 ++
 apps/yamtrack/0.25.3/data.yml             | 104 ++++++++++++++++++++++
 apps/yamtrack/0.25.3/data/.gitkeep        |   1 +
 apps/yamtrack/0.25.3/docker-compose.yml   |  59 ++++++++++++
 apps/yamtrack/0.25.3/scripts/init.sh      |  93 +++++++++++++++++++
 apps/yamtrack/0.25.3/scripts/uninstall.sh |   4 +
 apps/yamtrack/0.25.3/scripts/upgrade.sh   |   5 ++
 apps/yamtrack/README.md                   |  56 ++++++++++++
 apps/yamtrack/data.yml                    |  32 +++++++
 apps/yamtrack/latest/.env.sample          |   7 ++
 apps/yamtrack/latest/data.yml             | 104 ++++++++++++++++++++++
 apps/yamtrack/latest/data/.gitkeep        |   1 +
 apps/yamtrack/latest/docker-compose.yml   |  59 ++++++++++++
 apps/yamtrack/latest/scripts/init.sh      |  93 +++++++++++++++++++
 apps/yamtrack/latest/scripts/uninstall.sh |   4 +
 apps/yamtrack/latest/scripts/upgrade.sh   |   5 ++
 apps/yamtrack/logo.png                    | Bin 0 -> 4621 bytes
 17 files changed, 634 insertions(+)
 create mode 100644 apps/yamtrack/0.25.3/.env.sample
 create mode 100644 apps/yamtrack/0.25.3/data.yml
 create mode 100644 apps/yamtrack/0.25.3/data/.gitkeep
 create mode 100644 apps/yamtrack/0.25.3/docker-compose.yml
 create mode 100755 apps/yamtrack/0.25.3/scripts/init.sh
 create mode 100755 apps/yamtrack/0.25.3/scripts/uninstall.sh
 create mode 100755 apps/yamtrack/0.25.3/scripts/upgrade.sh
 create mode 100644 apps/yamtrack/README.md
 create mode 100644 apps/yamtrack/data.yml
 create mode 100644 apps/yamtrack/latest/.env.sample
 create mode 100644 apps/yamtrack/latest/data.yml
 create mode 100644 apps/yamtrack/latest/data/.gitkeep
 create mode 100644 apps/yamtrack/latest/docker-compose.yml
 create mode 100755 apps/yamtrack/latest/scripts/init.sh
 create mode 100755 apps/yamtrack/latest/scripts/uninstall.sh
 create mode 100755 apps/yamtrack/latest/scripts/upgrade.sh
 create mode 100644 apps/yamtrack/logo.png

diff --git a/apps/yamtrack/0.25.3/.env.sample b/apps/yamtrack/0.25.3/.env.sample
new file mode 100644
index 000000000..19611bfff
--- /dev/null
+++ b/apps/yamtrack/0.25.3/.env.sample
@@ -0,0 +1,7 @@
+CONTAINER_NAME=yamtrack
+PANEL_APP_BIND_ADDRESS=127.0.0.1
+PANEL_APP_PORT_HTTP=8000
+APP_DATA_DIR=./data
+YAMTRACK_SECRET=generate
+YAMTRACK_TIMEZONE=UTC
+YAMTRACK_REGISTRATION=True
diff --git a/apps/yamtrack/0.25.3/data.yml b/apps/yamtrack/0.25.3/data.yml
new file mode 100644
index 000000000..fdd1771e4
--- /dev/null
+++ b/apps/yamtrack/0.25.3/data.yml
@@ -0,0 +1,104 @@
+additionalProperties:
+  formFields:
+    - default: 127.0.0.1
+      edit: true
+      envKey: PANEL_APP_BIND_ADDRESS
+      labelEn: Bind Address
+      labelZh: 绑定地址
+      label:
+        en: Bind Address
+        zh: 绑定地址
+        zh-Hant: 綁定位址
+        ja: バインドアドレス
+        ko: 바인드 주소
+        ru: Адрес привязки
+        ms: Alamat ikatan
+        pt-br: Endereco de vinculacao
+      required: true
+      type: text
+    - default: 8000
+      edit: true
+      envKey: PANEL_APP_PORT_HTTP
+      labelEn: HTTP Port
+      labelZh: HTTP 端口
+      label:
+        en: HTTP Port
+        zh: HTTP 端口
+        zh-Hant: HTTP 埠
+        ja: HTTP ポート
+        ko: HTTP 포트
+        ru: HTTP-порт
+        ms: Port HTTP
+        pt-br: Porta HTTP
+      required: true
+      rule: paramPort
+      type: number
+    - default: ./data
+      edit: true
+      envKey: APP_DATA_DIR
+      labelEn: Data Directory
+      labelZh: 数据目录
+      label:
+        en: Data Directory
+        zh: 数据目录
+        zh-Hant: 資料目錄
+        ja: データディレクトリ
+        ko: 데이터 디렉터리
+        ru: Каталог данных
+        ms: Direktori data
+        pt-br: Diretorio de dados
+      required: true
+      type: text
+    - default: generate
+      edit: true
+      envKey: YAMTRACK_SECRET
+      labelEn: Application Secret
+      labelZh: 应用密钥
+      label:
+        en: Application Secret
+        zh: 应用密钥
+        zh-Hant: 應用程式金鑰
+        ja: アプリケーションシークレット
+        ko: 애플리케이션 비밀 키
+        ru: Секрет приложения
+        ms: Rahsia aplikasi
+        pt-br: Segredo do aplicativo
+      required: true
+      type: password
+    - default: UTC
+      edit: true
+      envKey: YAMTRACK_TIMEZONE
+      labelEn: Timezone
+      labelZh: 时区
+      label:
+        en: Timezone
+        zh: 时区
+        zh-Hant: 時區
+        ja: タイムゾーン
+        ko: 시간대
+        ru: Часовой пояс
+        ms: Zon waktu
+        pt-br: Fuso horario
+      required: true
+      type: text
+    - default: "True"
+      edit: true
+      envKey: YAMTRACK_REGISTRATION
+      labelEn: Allow Registration
+      labelZh: 允许用户注册
+      label:
+        en: Allow Registration
+        zh: 允许用户注册
+        zh-Hant: 允許使用者註冊
+        ja: ユーザー登録を許可
+        ko: 사용자 등록 허용
+        ru: Разрешить регистрацию
+        ms: Benarkan pendaftaran
+        pt-br: Permitir cadastro
+      required: true
+      type: select
+      values:
+        - label: "True"
+          value: "True"
+        - label: "False"
+          value: "False"
diff --git a/apps/yamtrack/0.25.3/data/.gitkeep b/apps/yamtrack/0.25.3/data/.gitkeep
new file mode 100644
index 000000000..8b1378917
--- /dev/null
+++ b/apps/yamtrack/0.25.3/data/.gitkeep
@@ -0,0 +1 @@
+
diff --git a/apps/yamtrack/0.25.3/docker-compose.yml b/apps/yamtrack/0.25.3/docker-compose.yml
new file mode 100644
index 000000000..4c651077b
--- /dev/null
+++ b/apps/yamtrack/0.25.3/docker-compose.yml
@@ -0,0 +1,59 @@
+services:
+  yamtrack:
+    image: "ghcr.io/fuzzygrim/yamtrack:0.25.3@sha256:00acf008bca8171226063bc0f8f08ef7ffe24a10bcebf8676cce335ce312c307"
+    container_name: ${CONTAINER_NAME}
+    restart: unless-stopped
+    depends_on:
+      yamtrack-redis:
+        condition: service_healthy
+    networks:
+      - 1panel-network
+      - yamtrack-internal
+    ports:
+      - "${PANEL_APP_BIND_ADDRESS}:${PANEL_APP_PORT_HTTP}:8000"
+    environment:
+      - TZ=${YAMTRACK_TIMEZONE}
+      - SECRET=${YAMTRACK_SECRET}
+      - REDIS_URL=redis://yamtrack-redis:6379
+      - REGISTRATION=${YAMTRACK_REGISTRATION}
+      - PUID=1000
+      - PGID=1000
+      - SOCIAL_PROVIDERS=
+      - SOCIALACCOUNT_ONLY=False
+    volumes:
+      - "${APP_DATA_DIR}/yamtrack:/yamtrack/db"
+    healthcheck:
+      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:8000/health/ || exit 1"]
+      interval: 10s
+      timeout: 10s
+      retries: 5
+      start_period: 60s
+    security_opt:
+      - no-new-privileges:true
+    labels:
+      createdBy: "Apps"
+
+  yamtrack-redis:
+    image: "redis:8-alpine@sha256:8096655e437712b07503796fb64d81359256cfcff0ab29d95a7da72863786efb"
+    container_name: ${CONTAINER_NAME}-redis
+    restart: unless-stopped
+    networks:
+      - yamtrack-internal
+    volumes:
+      - "${APP_DATA_DIR}/redis:/data"
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 5s
+    security_opt:
+      - no-new-privileges:true
+    labels:
+      createdBy: "Apps"
+
+networks:
+  1panel-network:
+    external: true
+  yamtrack-internal:
+    internal: true
diff --git a/apps/yamtrack/0.25.3/scripts/init.sh b/apps/yamtrack/0.25.3/scripts/init.sh
new file mode 100755
index 000000000..99a782973
--- /dev/null
+++ b/apps/yamtrack/0.25.3/scripts/init.sh
@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd -P)"
+ENV_FILE="${ENV_FILE:-${ROOT_DIR}/.env}"
+
+fail() {
+  printf '%s\n' "$1" >&2
+  exit 1
+}
+
+read_env_value() {
+  local key="$1"
+  local value=""
+  value="$(sed -n "s/^${key}=//p" "$ENV_FILE" | tail -n 1)"
+  case "$value" in
+    \"*\") value="${value#\"}"; value="${value%\"}" ;;
+    \'*\') value="${value#\'}"; value="${value%\'}" ;;
+  esac
+  printf '%s\n' "$value"
+}
+
+set_env_value() {
+  local key="$1"
+  local value="$2"
+  local temp_file
+  temp_file="$(mktemp "${ROOT_DIR}/.yamtrack-env.tmp.XXXXXX")"
+  awk -v key="$key" -v value="$value" '
+    BEGIN { written = 0 }
+    $0 ~ "^" key "=" {
+      if (!written) {
+        print key "=" value
+        written = 1
+      }
+      next
+    }
+    { print }
+    END {
+      if (!written) print key "=" value
+    }
+  ' "$ENV_FILE" > "$temp_file"
+  chmod 600 "$temp_file"
+  mv -f -- "$temp_file" "$ENV_FILE"
+}
+
+[[ -f "$ENV_FILE" ]] || fail "$ENV_FILE not found"
+[[ ! -L "$ENV_FILE" ]] || fail "$ENV_FILE must not be a symbolic link"
+
+data_dir_raw="$(read_env_value APP_DATA_DIR)"
+[[ -n "$data_dir_raw" ]] || data_dir_raw="./data"
+case "$data_dir_raw" in
+  /*) fail "APP_DATA_DIR must be relative to the application version directory" ;;
+  *$'\n'* | *$'\r'* | *\\* | *'$'* | *'#'* | *'"'* | *"'") fail "APP_DATA_DIR contains unsupported characters" ;;
+esac
+
+data_dir_abs="$(realpath -m -- "${ROOT_DIR}/${data_dir_raw#./}")"
+case "$data_dir_abs" in
+  "${ROOT_DIR}"/*) ;;
+  *) fail "APP_DATA_DIR must stay inside the application version directory" ;;
+esac
+[[ "$data_dir_abs" != "/" ]] || fail "APP_DATA_DIR must not be the filesystem root"
+[[ ! -e "$data_dir_abs" || -d "$data_dir_abs" ]] || fail "APP_DATA_DIR must be a directory"
+
+timezone="$(read_env_value YAMTRACK_TIMEZONE)"
+[[ "$timezone" =~ ^[A-Za-z0-9_+/-]+$ ]] || fail "YAMTRACK_TIMEZONE is invalid"
+
+registration="$(read_env_value YAMTRACK_REGISTRATION)"
+[[ "$registration" == "True" || "$registration" == "False" ]] || fail "YAMTRACK_REGISTRATION must be True or False"
+
+secret="$(read_env_value YAMTRACK_SECRET)"
+if [[ -z "$secret" || "$secret" == "generate" ]]; then
+  command -v openssl >/dev/null 2>&1 || fail "openssl is required to generate YAMTRACK_SECRET"
+  secret="$(openssl rand -hex 32)"
+fi
+[[ ${#secret} -ge 50 ]] || fail "YAMTRACK_SECRET must contain at least 50 characters"
+[[ "$secret" =~ ^[A-Za-z0-9._~!@%+=:,/-]+$ ]] || fail "YAMTRACK_SECRET contains unsupported dotenv characters"
+
+install -d -m 0750 -- "$data_dir_abs" "$data_dir_abs/yamtrack" "$data_dir_abs/redis"
+resolved_data_dir="$(realpath -e -- "$data_dir_abs")"
+case "$resolved_data_dir" in
+  "${ROOT_DIR}"/*) ;;
+  *) fail "APP_DATA_DIR resolves outside the application version directory" ;;
+esac
+
+if [[ "$(id -u)" -eq 0 ]]; then
+  chown 1000:1000 "$data_dir_abs/yamtrack"
+  chown 999:1000 "$data_dir_abs/redis"
+else
+  [[ "$(stat -c '%u:%g' "$data_dir_abs/yamtrack")" == "1000:1000" ]] || fail "Yamtrack init must run as root to prepare the data directory"
+  [[ "$(stat -c '%u:%g' "$data_dir_abs/redis")" == "999:1000" ]] || fail "Yamtrack init must run as root to prepare the Redis directory"
+fi
+chmod 750 "$data_dir_abs/yamtrack" "$data_dir_abs/redis"
+set_env_value YAMTRACK_SECRET "$secret"
diff --git a/apps/yamtrack/0.25.3/scripts/uninstall.sh b/apps/yamtrack/0.25.3/scripts/uninstall.sh
new file mode 100755
index 000000000..e1b2df0f6
--- /dev/null
+++ b/apps/yamtrack/0.25.3/scripts/uninstall.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+docker-compose down
diff --git a/apps/yamtrack/0.25.3/scripts/upgrade.sh b/apps/yamtrack/0.25.3/scripts/upgrade.sh
new file mode 100755
index 000000000..e73ce2436
--- /dev/null
+++ b/apps/yamtrack/0.25.3/scripts/upgrade.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+exec "${SCRIPT_DIR}/init.sh"
diff --git a/apps/yamtrack/README.md b/apps/yamtrack/README.md
new file mode 100644
index 000000000..5f2606dc4
--- /dev/null
+++ b/apps/yamtrack/README.md
@@ -0,0 +1,56 @@
+# Yamtrack
+
+## 产品介绍
+
+Yamtrack 是一个自托管媒体追踪器，可在同一界面管理电影、电视、动漫、游戏、书籍、漫画和桌游的观看或游玩进度。
+
+## 主要功能
+
+- 搜索并追踪多种媒体类型、评分、状态和进度
+- 从 Trakt、Simkl、AniList、MyAnimeList 等服务导入记录
+- 支持 Jellyfin、Plex 和 Emby webhook
+- 提供统计、列表、日历和通知功能
+
+## 访问说明
+
+安装后通过 1Panel 反向代理访问 Yamtrack，或在可信局域网场景下修改绑定地址后使用表单中的 HTTP 端口直接访问。首次打开时创建账户；完成后如不需要其他用户注册，请在应用参数中关闭注册。
+
+## 部署说明
+
+- 本应用包使用上游默认的 SQLite + Redis 拓扑。SQLite 数据保存在 `data/yamtrack`，Redis 数据保存在 `data/redis`。
+- 默认端口只绑定到 `127.0.0.1`。请使用 1Panel 反向代理提供 HTTPS 访问；需要直接从局域网访问时再修改绑定地址。
+- 首次安装默认允许注册。创建首个账户后，如不需要其他用户注册，请在应用参数中关闭注册并重建容器。
+- 升级、迁移或卸载前，请备份整个数据目录。卸载脚本不会删除持久化数据。
+
+## 安全说明
+
+- `0.25.3` 镜像中的 PyJWT 版本存在仅影响混合对称/非对称 JWT 验证配置的安全问题。本应用包不启用或暴露社交登录配置，并明确保持 `SOCIAL_PROVIDERS` 为空。不要在此版本中手动启用 OIDC 或其他社交登录；应先升级到包含 PyJWT 2.13.0 或更高版本的上游发行版。
+- Redis 不发布主机端口，只能通过应用内部网络访问。
+- Yamtrack 内部提供 HTTP 服务。对不受信任网络开放时，应由 1Panel 反向代理终止 TLS，并配置访问控制、请求大小和速率限制。
+
+## Introduction
+
+Yamtrack is a self-hosted media tracker for movies, television, anime, games, books, comics, and board games.
+
+## Features
+
+- Track ratings, status, and progress across multiple media types
+- Import history from Trakt, Simkl, AniList, MyAnimeList, and other services
+- Receive Jellyfin, Plex, and Emby webhooks
+- Browse statistics, lists, calendars, and notifications
+
+## Deployment And Security
+
+- This package follows the upstream SQLite and Redis topology. SQLite data is stored under `data/yamtrack`, while Redis data is stored under `data/redis`.
+- The host port binds to `127.0.0.1` by default. Use a 1Panel reverse proxy for HTTPS, or explicitly change the bind address for direct LAN access.
+- Registration is enabled initially so the first account can be created. Disable registration in the app settings afterward unless additional signups are required.
+- Social authentication is deliberately disabled. Do not manually enable `SOCIAL_PROVIDERS` on version `0.25.3`; upgrade to an upstream release containing PyJWT 2.13.0 or newer first.
+- Redis is isolated on an internal network and has no published host port.
+- Back up the complete data directory before upgrades or migrations. Uninstalling the app does not delete persistent data.
+
+## References
+
+- Source: <https://github.com/FuzzyGrim/Yamtrack>
+- Documentation: <https://github.com/FuzzyGrim/Yamtrack/tree/dev/docs>
+- Environment variables: <https://github.com/FuzzyGrim/Yamtrack/blob/dev/docs/env-variables.md>
+- License: <https://github.com/FuzzyGrim/Yamtrack/blob/dev/LICENSE>
diff --git a/apps/yamtrack/data.yml b/apps/yamtrack/data.yml
new file mode 100644
index 000000000..d2869aafb
--- /dev/null
+++ b/apps/yamtrack/data.yml
@@ -0,0 +1,32 @@
+name: Yamtrack
+tags:
+  - 多媒体
+  - 工具
+title: 自托管的电影、电视、游戏、书籍和漫画追踪器
+description: 自托管的电影、电视、游戏、书籍和漫画追踪器
+additionalProperties:
+  key: yamtrack
+  name: Yamtrack
+  tags:
+    - Media
+    - Tool
+  shortDescZh: 自托管的电影、电视、游戏、书籍和漫画追踪器
+  shortDescEn: A self-hosted tracker for movies, TV, games, books, and comics
+  description:
+    en: A self-hosted media tracker for movies, television, anime, games, books, and comics
+    zh: 用于追踪电影、电视、动漫、游戏、书籍和漫画的自托管媒体应用
+    zh-Hant: 用於追蹤電影、電視、動漫、遊戲、書籍和漫畫的自託管媒體應用
+    ja: 映画、テレビ、アニメ、ゲーム、書籍、コミックを記録するセルフホスト型メディアトラッカー
+    ko: 영화, TV, 애니메이션, 게임, 도서 및 만화를 기록하는 자체 호스팅 미디어 추적기
+    ru: Самостоятельно размещаемый трекер фильмов, сериалов, аниме, игр, книг и комиксов
+    ms: Penjejak media hos kendiri untuk filem, televisyen, anime, permainan, buku dan komik
+    pt-br: Rastreador de midia auto-hospedado para filmes, televisao, anime, jogos, livros e quadrinhos
+  type: website
+  crossVersionUpdate: true
+  limit: 1
+  website: https://github.com/FuzzyGrim/Yamtrack
+  github: https://github.com/FuzzyGrim/Yamtrack
+  document: https://github.com/FuzzyGrim/Yamtrack/tree/dev/docs
+  architectures:
+    - amd64
+    - arm64
diff --git a/apps/yamtrack/latest/.env.sample b/apps/yamtrack/latest/.env.sample
new file mode 100644
index 000000000..19611bfff
--- /dev/null
+++ b/apps/yamtrack/latest/.env.sample
@@ -0,0 +1,7 @@
+CONTAINER_NAME=yamtrack
+PANEL_APP_BIND_ADDRESS=127.0.0.1
+PANEL_APP_PORT_HTTP=8000
+APP_DATA_DIR=./data
+YAMTRACK_SECRET=generate
+YAMTRACK_TIMEZONE=UTC
+YAMTRACK_REGISTRATION=True
diff --git a/apps/yamtrack/latest/data.yml b/apps/yamtrack/latest/data.yml
new file mode 100644
index 000000000..fdd1771e4
--- /dev/null
+++ b/apps/yamtrack/latest/data.yml
@@ -0,0 +1,104 @@
+additionalProperties:
+  formFields:
+    - default: 127.0.0.1
+      edit: true
+      envKey: PANEL_APP_BIND_ADDRESS
+      labelEn: Bind Address
+      labelZh: 绑定地址
+      label:
+        en: Bind Address
+        zh: 绑定地址
+        zh-Hant: 綁定位址
+        ja: バインドアドレス
+        ko: 바인드 주소
+        ru: Адрес привязки
+        ms: Alamat ikatan
+        pt-br: Endereco de vinculacao
+      required: true
+      type: text
+    - default: 8000
+      edit: true
+      envKey: PANEL_APP_PORT_HTTP
+      labelEn: HTTP Port
+      labelZh: HTTP 端口
+      label:
+        en: HTTP Port
+        zh: HTTP 端口
+        zh-Hant: HTTP 埠
+        ja: HTTP ポート
+        ko: HTTP 포트
+        ru: HTTP-порт
+        ms: Port HTTP
+        pt-br: Porta HTTP
+      required: true
+      rule: paramPort
+      type: number
+    - default: ./data
+      edit: true
+      envKey: APP_DATA_DIR
+      labelEn: Data Directory
+      labelZh: 数据目录
+      label:
+        en: Data Directory
+        zh: 数据目录
+        zh-Hant: 資料目錄
+        ja: データディレクトリ
+        ko: 데이터 디렉터리
+        ru: Каталог данных
+        ms: Direktori data
+        pt-br: Diretorio de dados
+      required: true
+      type: text
+    - default: generate
+      edit: true
+      envKey: YAMTRACK_SECRET
+      labelEn: Application Secret
+      labelZh: 应用密钥
+      label:
+        en: Application Secret
+        zh: 应用密钥
+        zh-Hant: 應用程式金鑰
+        ja: アプリケーションシークレット
+        ko: 애플리케이션 비밀 키
+        ru: Секрет приложения
+        ms: Rahsia aplikasi
+        pt-br: Segredo do aplicativo
+      required: true
+      type: password
+    - default: UTC
+      edit: true
+      envKey: YAMTRACK_TIMEZONE
+      labelEn: Timezone
+      labelZh: 时区
+      label:
+        en: Timezone
+        zh: 时区
+        zh-Hant: 時區
+        ja: タイムゾーン
+        ko: 시간대
+        ru: Часовой пояс
+        ms: Zon waktu
+        pt-br: Fuso horario
+      required: true
+      type: text
+    - default: "True"
+      edit: true
+      envKey: YAMTRACK_REGISTRATION
+      labelEn: Allow Registration
+      labelZh: 允许用户注册
+      label:
+        en: Allow Registration
+        zh: 允许用户注册
+        zh-Hant: 允許使用者註冊
+        ja: ユーザー登録を許可
+        ko: 사용자 등록 허용
+        ru: Разрешить регистрацию
+        ms: Benarkan pendaftaran
+        pt-br: Permitir cadastro
+      required: true
+      type: select
+      values:
+        - label: "True"
+          value: "True"
+        - label: "False"
+          value: "False"
diff --git a/apps/yamtrack/latest/data/.gitkeep b/apps/yamtrack/latest/data/.gitkeep
new file mode 100644
index 000000000..8b1378917
--- /dev/null
+++ b/apps/yamtrack/latest/data/.gitkeep
@@ -0,0 +1 @@
+
diff --git a/apps/yamtrack/latest/docker-compose.yml b/apps/yamtrack/latest/docker-compose.yml
new file mode 100644
index 000000000..d5886316d
--- /dev/null
+++ b/apps/yamtrack/latest/docker-compose.yml
@@ -0,0 +1,59 @@
+services:
+  yamtrack:
+    image: "ghcr.io/fuzzygrim/yamtrack:latest@sha256:00acf008bca8171226063bc0f8f08ef7ffe24a10bcebf8676cce335ce312c307"
+    container_name: ${CONTAINER_NAME}
+    restart: unless-stopped
+    depends_on:
+      yamtrack-redis:
+        condition: service_healthy
+    networks:
+      - 1panel-network
+      - yamtrack-internal
+    ports:
+      - "${PANEL_APP_BIND_ADDRESS}:${PANEL_APP_PORT_HTTP}:8000"
+    environment:
+      - TZ=${YAMTRACK_TIMEZONE}
+      - SECRET=${YAMTRACK_SECRET}
+      - REDIS_URL=redis://yamtrack-redis:6379
+      - REGISTRATION=${YAMTRACK_REGISTRATION}
+      - PUID=1000
+      - PGID=1000
+      - SOCIAL_PROVIDERS=
+      - SOCIALACCOUNT_ONLY=False
+    volumes:
+      - "${APP_DATA_DIR}/yamtrack:/yamtrack/db"
+    healthcheck:
+      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:8000/health/ || exit 1"]
+      interval: 10s
+      timeout: 10s
+      retries: 5
+      start_period: 60s
+    security_opt:
+      - no-new-privileges:true
+    labels:
+      createdBy: "Apps"
+
+  yamtrack-redis:
+    image: "redis:8-alpine@sha256:8096655e437712b07503796fb64d81359256cfcff0ab29d95a7da72863786efb"
+    container_name: ${CONTAINER_NAME}-redis
+    restart: unless-stopped
+    networks:
+      - yamtrack-internal
+    volumes:
+      - "${APP_DATA_DIR}/redis:/data"
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 5s
+    security_opt:
+      - no-new-privileges:true
+    labels:
+      createdBy: "Apps"
+
+networks:
+  1panel-network:
+    external: true
+  yamtrack-internal:
+    internal: true
diff --git a/apps/yamtrack/latest/scripts/init.sh b/apps/yamtrack/latest/scripts/init.sh
new file mode 100755
index 000000000..99a782973
--- /dev/null
+++ b/apps/yamtrack/latest/scripts/init.sh
@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd -P)"
+ENV_FILE="${ENV_FILE:-${ROOT_DIR}/.env}"
+
+fail() {
+  printf '%s\n' "$1" >&2
+  exit 1
+}
+
+read_env_value() {
+  local key="$1"
+  local value=""
+  value="$(sed -n "s/^${key}=//p" "$ENV_FILE" | tail -n 1)"
+  case "$value" in
+    \"*\") value="${value#\"}"; value="${value%\"}" ;;
+    \'*\') value="${value#\'}"; value="${value%\'}" ;;
+  esac
+  printf '%s\n' "$value"
+}
+
+set_env_value() {
+  local key="$1"
+  local value="$2"
+  local temp_file
+  temp_file="$(mktemp "${ROOT_DIR}/.yamtrack-env.tmp.XXXXXX")"
+  awk -v key="$key" -v value="$value" '
+    BEGIN { written = 0 }
+    $0 ~ "^" key "=" {
+      if (!written) {
+        print key "=" value
+        written = 1
+      }
+      next
+    }
+    { print }
+    END {
+      if (!written) print key "=" value
+    }
+  ' "$ENV_FILE" > "$temp_file"
+  chmod 600 "$temp_file"
+  mv -f -- "$temp_file" "$ENV_FILE"
+}
+
+[[ -f "$ENV_FILE" ]] || fail "$ENV_FILE not found"
+[[ ! -L "$ENV_FILE" ]] || fail "$ENV_FILE must not be a symbolic link"
+
+data_dir_raw="$(read_env_value APP_DATA_DIR)"
+[[ -n "$data_dir_raw" ]] || data_dir_raw="./data"
+case "$data_dir_raw" in
+  /*) fail "APP_DATA_DIR must be relative to the application version directory" ;;
+  *$'\n'* | *$'\r'* | *\\* | *'$'* | *'#'* | *'"'* | *"'") fail "APP_DATA_DIR contains unsupported characters" ;;
+esac
+
+data_dir_abs="$(realpath -m -- "${ROOT_DIR}/${data_dir_raw#./}")"
+case "$data_dir_abs" in
+  "${ROOT_DIR}"/*) ;;
+  *) fail "APP_DATA_DIR must stay inside the application version directory" ;;
+esac
+[[ "$data_dir_abs" != "/" ]] || fail "APP_DATA_DIR must not be the filesystem root"
+[[ ! -e "$data_dir_abs" || -d "$data_dir_abs" ]] || fail "APP_DATA_DIR must be a directory"
+
+timezone="$(read_env_value YAMTRACK_TIMEZONE)"
+[[ "$timezone" =~ ^[A-Za-z0-9_+/-]+$ ]] || fail "YAMTRACK_TIMEZONE is invalid"
+
+registration="$(read_env_value YAMTRACK_REGISTRATION)"
+[[ "$registration" == "True" || "$registration" == "False" ]] || fail "YAMTRACK_REGISTRATION must be True or False"
+
+secret="$(read_env_value YAMTRACK_SECRET)"
+if [[ -z "$secret" || "$secret" == "generate" ]]; then
+  command -v openssl >/dev/null 2>&1 || fail "openssl is required to generate YAMTRACK_SECRET"
+  secret="$(openssl rand -hex 32)"
+fi
+[[ ${#secret} -ge 50 ]] || fail "YAMTRACK_SECRET must contain at least 50 characters"
+[[ "$secret" =~ ^[A-Za-z0-9._~!@%+=:,/-]+$ ]] || fail "YAMTRACK_SECRET contains unsupported dotenv characters"
+
+install -d -m 0750 -- "$data_dir_abs" "$data_dir_abs/yamtrack" "$data_dir_abs/redis"
+resolved_data_dir="$(realpath -e -- "$data_dir_abs")"
+case "$resolved_data_dir" in
+  "${ROOT_DIR}"/*) ;;
+  *) fail "APP_DATA_DIR resolves outside the application version directory" ;;
+esac
+
+if [[ "$(id -u)" -eq 0 ]]; then
+  chown 1000:1000 "$data_dir_abs/yamtrack"
+  chown 999:1000 "$data_dir_abs/redis"
+else
+  [[ "$(stat -c '%u:%g' "$data_dir_abs/yamtrack")" == "1000:1000" ]] || fail "Yamtrack init must run as root to prepare the data directory"
+  [[ "$(stat -c '%u:%g' "$data_dir_abs/redis")" == "999:1000" ]] || fail "Yamtrack init must run as root to prepare the Redis directory"
+fi
+chmod 750 "$data_dir_abs/yamtrack" "$data_dir_abs/redis"
+set_env_value YAMTRACK_SECRET "$secret"
diff --git a/apps/yamtrack/latest/scripts/uninstall.sh b/apps/yamtrack/latest/scripts/uninstall.sh
new file mode 100755
index 000000000..e1b2df0f6
--- /dev/null
+++ b/apps/yamtrack/latest/scripts/uninstall.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+docker-compose down
diff --git a/apps/yamtrack/latest/scripts/upgrade.sh b/apps/yamtrack/latest/scripts/upgrade.sh
new file mode 100755
index 000000000..e73ce2436
--- /dev/null
+++ b/apps/yamtrack/latest/scripts/upgrade.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+exec "${SCRIPT_DIR}/init.sh"
diff --git a/apps/yamtrack/logo.png b/apps/yamtrack/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..020a9fd8f7ce94af7a4a37e06b3f51303b8b3b76
GIT binary patch
literal 4621
zcmZWs1yq#H_g;3F4(XCuK)P{3B$p0pL1|c75G19WU8x17rBOlzq@+s_kZz>~1w=x+
zdx78T7w7!H|2g-)^UO2Py>sV1GxMG|N>4|Pl!%cC0059`s4E*_+qT~i0SN1Dfm!0%
z2K-n-TLA#5j3dUtaj|_I4+AwtK>0A!8UO$S=xG_MXgNIP;uHLjv2t=_8Fntde|b(`
zfm=NMSpOdeOJeO`F(;qEUm6bX-~4~{T>m%8E#BXOSi?sB_Phdr0j%tA9?Sf}|K{Q3
z{iFZG|JMH*y~Xo4z(!$n{>5XJ|A614e<}a<|DXB0fZxjBN&ckzt13ZG>_YyO_g7*6
zR{KxL?}`4wzrpqOHI~6HpM#r^n_uYi^788HTKujI27}q$+~O4!fhno-3yX=0OG-$|
zo}QhZoSa@<TwveW?K@IZaxgf;?)>~h{hrSD_O|eCaUKETg&#jOb@V)a{P=`Kzs}4E
zibBuM&l{UQ+?KfO;N+5?nRWkx2|E|>z~GROn0Rkr|A*$5<Ktu9`$jXfvmvO^wY9aC
z)z$s|gUP8WBV#jD3#+K-F|F<GJ3Bj-Rn;+Z@iH)_?A*M$`T3I4GDQ`25vat-=g(8q
zU!Qt<_w@FvYHGbLEJ{gBAD@_P|J3m^CH3depDOD299`VB_3s}X9K^;azOSe(D0+tq
z3;*@&*Y4iltL&V>5aiO*^7ELus_GguOY6^HM!ULu!XnT)d2g0iRxIH*4^7R>%HQi7
zKCEkKw0eZFv9musI(qZAV0~lb`}euXsOOT>az(`@a*E34R`76iR6<g+tGnme__&9c
zPe4$}<0no(e=d!VjaApyjeP!s-2>Ws_lrx)hK5IGzkT!e^;cHY>>n8D=<Kw$e{yww
zZER-ACn)0UA2>8T92phu;^yAc+Lm8XSoNk$5qmJ)JPma21LhVcFR#vUE`Z;bzd}hN
zhd(!O;S=IvKqpB;tGLAMqZOY-gK4<ecNm+GU+kI29Yp2#Je0`PSsP3(Rk49NjF5AU
zcQGIY0u=AT)%6-(`^_zl>h2`lB{=cErYxq*LotVW=9Xu)`WDLDOIPz7<O%YrVh``2
zhO&a8@64cu4~+UDBWwSsCPjNb9tvF1$I8*uW^K0_X#$?-aiwHMH7@NR4+*poGetuc
z^r#J~_4SqY1&s3^#kJfSpVk=ethv3MI2-=`Yr3snT}%3_`RoemgUh)9tDyOS=Wu)Y
zd_l?TFE)-s(tX0@TJNLk>e^ZlZ)ZW`BZhJKQoQJEi`i+LyzrLPv7&g`j$SI{ouD<c
z4BBgp^s(-h*0Ef)fy)nwI?ePv7=DqsvFn!NwL`ulX{dZ_=57$h^uPo&J&w<mrEIrU
zEmioTYfPG8HHfQCr%q&Zhgp!nC2}_YtI&2ELcNSG!fU@G?Nq5pAYKEN9xp}0go#iY
zpLFQ%83qtOYigB$XrFw%oAsCjw->@J!EN4~JYK1bPe%wNit@6i%jNNvBnzb41*ERM
zR@AenVVP#!1*g7tY2NrW%VA5|cJmh5f&79|;Cm$DHu9l*&`0}$?Bzp}V^A|k(T<r+
z-?b{5gaDW+A}qJGBi2hs0B&7yTUxAVW&;5~apjPjp1q<y#ZjQ3K9$hi3Mxzm6Ohbq
z2YnXIKCwXJLWp561qRpGNCcj_d{kfD)CtXRQ>@60f>AKd<EDfnzO@b}hg6VO@Nj8~
zk6;d~@n|E4csvwW=Y-l8<6}f+J<_LH(SXTIEiFn@?em-DxaQ~SbyuKsP(qu34KKL+
zBcU=VoiIaYnh{MPp^C2>+kq_lJkSdr+OmL%1<HM+Kl^Z{<g^dcu;O6<P=~6^;{fDy
zkO~ESjXcGn$eTqd5x#K8$qQ4W15qI@Vfkr~^u7*na8&l+a0+0oDv{{WsR1KHTrc-^
zYfJGXw5>0F9=BXMO|H@=F>@2BSSl_~){H;GZSRH`ydHgj890F0jc<GIn4NvM?wx4;
z`gTP238JS`D|G&rEL*&a08cDkbNM%`ltZgVJl^+w2I&l*-aiFkBXwb?(KEy)lWP5I
z=()t+L2IdpjgE=CLiBMh-g_!x&7ADVc4EQpULqeb9{BW4h-4zQQV0Q42EQE7cMrAU
z7h?>P)zUZni`zd^c7(-g%Niew$X>epsXmg?Nz(x?PI#p*IicrNM5Z=WD=2nrB$VeV
zqu1kJfAGvhm}u@tRb@=XjgCQF7I%fu1n(FO$I7P>B0o0@7`=4BYe;W6|DL(VUx!eF
z>z5KzLz=y1)0G1KlqHC9`qb@!*=uEr3sH3LZx}3TJX)z?Zz4msi0^XuS4~HBp}w%z
zXTEdorM}}`SkY3-KGC4j=2$O65^@+dCNAycDmCw$qb$_QJaE3{r}eg6*W#$R^$mMO
zP=mpP#|-TNzSmQ~<bF(MV49Sc@u_?S`uK&4K31Oi3toV1e{|~tSiGDVR$uJQ+KYf>
ze)K*%Po26p^tr3;@a1KM34;>s?c2~UbKSHa@^E)Yz>6lv_7=pl(H#;5vd1}Bu<O@{
zSr)Duk)ABg<<IOn_7f<xt5fImrH5j^&g7tGdrs#)aZB`l`VFmH2VR6>8+$m8Nz3P7
z(sHwLzyl>kZ$h?B7+s!Gyw1tA2>v8%AL*rSsq6_2z0t2baVJsan0kWR&?rBBrEd%9
z$!9_(DbLdSs^F<~-1pg|K)>Ub)(0*H)o8iA&m19h3Bt9k*ZanJP;v6Tg2xg`vmQEa
zG|^vpq#H$vpyBRd9-iU=m9dz#NXdF$p>d%ubhpwT7am)2&f)D0Qqq;HLyi41jmI}Y
zTlq@B2UB12`m}MGl%fmguIeYZT>~n5v#jg5liLD>zH!y)A50FNq%1V8^~QKm0|#FJ
zU@Bjdc7_-nLGkfdATLd~m`51YsHUL&zlQIt3@C6sIk`_i-ua_+-<3PntTS79Xozzr
z?(KM0_tW5)4eyTIpZh4-^(e#1P5RjBwOVxhvjZ#Jn}0mab>&Zlv2Kf?eZOH=%pAXV
zA1~+#hKdi~2l!xA%CpnXeeLToZS7IFM6xfEIuE!;SS`{zj!iMO5|z=V$QQ@e@g%Hd
z0{8?=_}+-xrY&mOkMbK0>n$a3rmcuKY7^!@LVFilW8;sjSNNGA?Z6?%{qcI%bPt2Z
zh!mC;UtuldGI3>H2C;Yd>!H_IAE^^CIn~`{F`rYhAGS9XeIr*Lje`<Tf-HhxZ&NP}
z^qs<O@leI=KTCxwe1E+!<WEAC+-sO}-egH^TVz+9N)n#H>=cq1{(K+idK+~^>Sny+
zmU`IvGentMc|LK}^=X+mhNAyQ0rVs_c->WxRAHXmJvI^S%?-=o7~wv;5YaqCd3l)L
zW*HhoTWR(p-!K)fC~}LFZMxhwI8(SN5F(GWR;JnKDZ5jWLn--|?LkWHgJ8f4^eqrX
zE=&4;Y$n%t%ZfF{VHE9zHV$4WD>e*hV)tj<qe(9j;Oro5HoYyZkzCnJNOIpxTt~I`
z9X?fdeEW=cEn9e3hPlxG73I=?s7tIS@MAAa;pe7j9P127gsAldh^Y|+D;|6y9gN<5
z+Ia)fe5UPTLM|*{M!3*Vhr^QNX{+=_d~)F}LUJ#^Z>POTI|H+a-y4Zp;J7hJ`n?e_
zT@m-<)T)^FMV^5yX9AtaDciz9#9T(XD7r;w<!U6^RLk6?Fba022k<hWLRM4*wmEAX
zUgv~Oi>}G^-8k3nl2e$Tty#QNHS9$R#26+@g@)uWXap}z-N=mCeX1<QK(^eoIMK*R
zJOemmhg@>6#Oyvjg^RhKeFRWH84dM(CVYlMkgbF!wuOQif$v8(<4Oee;9Ltgh(%tm
zf~?sc)CR;{9NhsQ1@t^5BXc*mk%T2suuiFwF3epbdp~qLO<oh|7n1lR%Z^w&1b->1
z4NS7OHlDT7WX9rSNfn5_|3&iS?mK<qbQ4W_c!nYo#BnoHy8@X=wt`LHa02Sbmg54!
zzN&XR!Jc;3+TtTrfK3s?I4N>JynR_v9sQ_K*PyFC*m6$}2Nun?H5M~cNKv#D1cU|D
z#5(nj)J%r5`eg$a;&Npiaf$6M$itB#hdrfwl=joGgb)kfYpNVi#H)mevGJ7Xl2#%S
zP_F#}N<fpNr_56k0F+a|EvD&Zn66F>!y)js38Ij5?y_;_S6ITufdY`IX{InE!bQg|
zaB~sOGh~^t1UQ#JVy2w-?AVx%3&t1`L#UWGVt?m(5*cCcr?wE0Nn8s9t*?;ysr=vl
z8LFGH!xRe)8|uJWB!pnAxL*GgJ@ZG6W2Kh_i{K2Y)lKOfj$Qn_I5)#g6d-zDyQCHp
zIodoYJm3T?$~>un*!6EDTAb2EDVMrwG)tvYjyn<kBtL}vT%z7iJZpekPiS}@5*bOV
zZARNo|5~B>p4nujzeTQx*`4}Sn#0B1T_FPfLe9x-7NSBA+@{KmW6k@z(s9oQ?A?*m
z`uL!$%wEThs*v5QuJLTdZd`5gb3@g1bv{uRMK>ObWxb$vj)(n;OnG#jh5%p_I@IIB
zL-v#^vUm84w8^JIz}Kc(7xHMyMY+aj?l;4}{IK4)c0r#-P=~ms-l}LdCI@cAXMTcK
ztQ7CbOdhjX(Wr)()#6jmW`xjb4V!3c=+n~}tKXfG{q(I&&MTxL9u?-vek8@_f!(r1
z{dKB!5U^8Lky_M{fNMKm|J{t2R$w-fSKfJEHPz_}o|JESn)C^PSBC)|5gEzUZQym$
zoS~^Oh=|VWr^3CJ2H+z<!tl1IY)qAgCw533vK6g1u9=lO@-xILEgk3(dI^7C<)CI!
zQb)9a4l=XkcXoHVQ6GG7HgiyWDH~}taC?mfq#cx&7aN@KwM=$JcxZ2XnC|J#>TR-G
zj@%LROP%jZT6@f_l?kLjk+!%(;6$5hQ6b?$TG1L&{^!7G$&9uOqALHmvnPqLu|Q-$
z_^rAB{zdWk)sY?f4-Wt|uRGjvof>%An6=C~=d-dcGSl?3=vc2ExrSRY9a5DRt~LfY
z#exrxyJaTAX<-oc#}$_G&~N!f35qCUu4ba|AF8bO#%CGOEZ-Z17LJH$<x!}tDH`ue
z$`2R`|Lyae!Zh`mVEB1(-hkORu-y0sh&MLRQdt5IBcrJvu-DIec)dRC#0`fKb@a@P
z(nfEh*$qv!Q0(^z_>^&@s?bP?1EGB$%6f7CDpl3Bc`vVR(DPijJw0o1a1DCaO2vVC
zXZvJh)jeWKNazWNV*p-tp|ArfsW)Sc^JGzTd@?0HXU-^n)+=L$dr76E^{7IA4TmLq
zXJTJ-eGQwV(_o~81u$IP6M91Cziy=lhX+NWm&Ju9>DG*`Y!N}}FOR$|<%J9E$fnG1
zpmIhZeittZzNIOROn)-!Syn^d_u+D9#h&?IFVk*dCPvkIOb3Q8(UP2&FPQ@v<T2_u
zI=!I=ckb?SxckrFrR{MKQY;`ew?X&04@Itm$qZFaek8rXR|O63&?q+D1ZU+_O7=*5
zf5-+8qT$S`LJ2mOwk*3;jH#7@zkJ6F2oMCZ{A8WOj+2%Ikw~UoUj;?Ue4@xQo5bbo
zZQMpyC8#ALfR2|%D`zfU>}I_}{NXWKn#z)?nXiO#XoXRrTa-25)%z0M>dDrxvhO5c
zD#37q=j}rlEY_lFhaZKHr4s0cO5Su#=1dZGYpC)Ikh=3?$}fjhj<25k{PECF+N&)*
z{-yMT@Zz8b;33WRRCJq1vqxr;z$5VsRAOai>Co1ZdhK%3mG_i0*JY98HJ+H@!A>HT
zy%YAI@}a+>v8Mst2jb@LYUki&3-R=GvxPXgdD;K~zF9x_NeG@k;Nj`l9T?PDHUNM)
zh=pv3sW_<aB~gQ@Aj(K+2Li-VZ3r2d9`EfO>}2Z1A3&<-XbJ(==_ow+6~&XWQvftn
Lbd<{#t)Kl5`0-&K

literal 0
HcmV?d00001