From d9b7255a0b60a3f5831587d0bfa50deeaafe226b Mon Sep 17 00:00:00 2001
From: Tom Frenzel <40773830+tomfrenzel@users.noreply.github.com>
Date: Sat, 13 Jun 2026 20:40:19 +0200
Subject: [PATCH] HomeBox: Support v0.26.0 (#15086)

---
 ct/homebox.sh              | 10 ++++++----
 install/homebox-install.sh |  2 ++
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/ct/homebox.sh b/ct/homebox.sh
index c87879060..bc36c2547 100644
--- a/ct/homebox.sh
+++ b/ct/homebox.sh
@@ -39,14 +39,16 @@ function update_script() {
     systemctl stop homebox
     msg_ok "Stopped Service"
 
-    if [ -f /opt/homebox ] && [ -x /opt/homebox ]; then
-      rm -f /opt/homebox
-    fi
-    fetch_and_deploy_gh_release "homebox" "sysadminsmedia/homebox" "prebuild" "latest" "/opt/homebox" "homebox_Linux_x86_64.tar.gz"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "homebox" "sysadminsmedia/homebox" "prebuild" "latest" "/opt/homebox" "homebox_Linux_x86_64.tar.gz"
     chmod +x /opt/homebox/homebox
     [ -f /opt/.env ] && mv /opt/.env /opt/homebox/.env
     [ -d /opt/.data ] && mv /opt/.data /opt/homebox/.data
 
+    if ! grep -q "HBOX_AUTH_API_KEY_PEPPER" /opt/homebox/.env; then
+      AUTH_KEY=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)
+      echo "HBOX_AUTH_API_KEY_PEPPER=${AUTH_KEY}" >>/opt/homebox/.env
+    fi
+
     msg_info "Starting Service"
     systemctl start homebox
     msg_ok "Started Service"
diff --git a/install/homebox-install.sh b/install/homebox-install.sh
index 70d370249..065a16874 100644
--- a/install/homebox-install.sh
+++ b/install/homebox-install.sh
@@ -18,11 +18,13 @@ fetch_and_deploy_gh_release "homebox" "sysadminsmedia/homebox" "prebuild" "lates
 
 msg_info "Configuring Homebox"
 chmod +x /opt/homebox/homebox
+AUTH_KEY="$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)"
 cat <<EOF >/opt/homebox/.env
 # For possible environment variables check here: https://homebox.software/en/configure-homebox
 HBOX_MODE=production
 HBOX_WEB_PORT=7745
 HBOX_WEB_HOST=0.0.0.0
+HBOX_AUTH_API_KEY_PEPPER=${AUTH_KEY}
 EOF
 msg_ok "Configured Homebox"