Possible privacy improvements

[apollo13]

When using brand icons the requests to cdn.jsdelivr.net send out the referer header. I am wondering if you'd be open to set a refererr-policy (https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/img#referrerpolicy) of no-referrer to not tell the CDN which site is using that image.

[github-actions[bot]]

This discussion has been automatically closed due to inactivity. See our contributing guidelines for more details.

[alexislefebvre]

My workaround is to host all images, to avoid external requests. I use homepage through docker compose.

1. Create a directory on your server, mine is /var/docker/homepage/icons
2. Mount the directory so that homepage can access it, something like this: /var/docker/homepage/icons/:/app/public/icons:ro
3. In that directory (on the host), download one icon, e.g. wget https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/docker.png
4. In the conf of homepage, use this icon by replacing icon: docker with icon: /icons/docker.png
5. Restart the container if the images are not loading

It's a bit of work but if you don’t change your icons every day you won’t have to do it often.

You can also create:

• a mdi directory to store icons with the mdi- prefix, e.g. replace mdi-server with /icons/mdi/server.svg and get the icon from https://cdn.jsdelivr.net/npm/@mdi/svg@latest/svg/server.svg. update: they look bad, maybe some style is missing, but I prefer that to external requets
• a sh directory to store icons with the sh- prefix, e.g. replace sh-munin with /icon/sh/munin.png and get the icon from https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/munin.png