fix(apps): stabilize saleor and netbird launch

core/archipelago/src/container/docker_packages.rs

@@ -147,7 +147,9 @@ impl DockerPackageScanner {
             let metadata = get_app_metadata(&app_id);
 
             // Resolve UI address: separate UI containers > static map > dynamic ports
-            let lan_address = if let Some(ui_address) = ui_containers.get(&app_id) {
+            let lan_address = if app_id == "netbird" {
+                reachable_lan_address(&app_id, netbird_configured_launch_url().await).await
+            } else if let Some(ui_address) = ui_containers.get(&app_id) {
                 // Apps with separate UI containers (e.g. archy-bitcoin-ui, archy-lnd-ui)
                 debug!("Using UI container for {}: {}", app_id, ui_address);
                 reachable_lan_address(&app_id, Some(ui_address.clone())).await
@@ -497,7 +499,7 @@ fn get_app_metadata(app_id: &str) -> AppMetadata {
         },
         "saleor" => AppMetadata {
             title: "Saleor".to_string(),
-            description: "Composable commerce platform with GraphQL API and dashboard".to_string(),
+            description: "Composable commerce platform with GraphQL API and dashboard. Admin email: admin@example.com; password is stored on the node at /var/lib/archipelago/secrets/saleor-admin-password".to_string(),
             icon: "/assets/img/app-icons/saleor.svg".to_string(),
             repo: "https://github.com/saleor/saleor".to_string(),
             tier: "",
@@ -688,6 +690,18 @@ fn extract_lan_address(ports: &[String]) -> Option<String> {
     None
 }
 
+async fn netbird_configured_launch_url() -> Option<String> {
+    let env = tokio::fs::read_to_string("/var/lib/archipelago/netbird/dashboard.env")
+        .await
+        .ok()?;
+    env.lines()
+        .find_map(|line| line.strip_prefix("NETBIRD_MGMT_API_ENDPOINT="))
+        .map(str::trim)
+        .filter(|s| !s.is_empty())
+        .map(ToOwned::to_owned)
+        .or_else(|| PodmanClient::lan_address_for("netbird"))
+}
+
 async fn reachable_lan_address(app_id: &str, candidate: Option<String>) -> Option<String> {
     let url = candidate?;
     if !requires_reachable_launch(app_id) {