diff --git a/ALL_README.md b/ALL_README.md
index a01b345..152f2e7 100644
--- a/ALL_README.md
+++ b/ALL_README.md
@@ -1,6 +1,7 @@
# All available README files by language
- [Read the README in English](README.md)
+- [Lea el README en español](README_es.md)
- [Irakurri README euskaraz](README_eu.md)
- [Lire le README en français](README_fr.md)
- [Le o README en galego](README_gl.md)
diff --git a/README.md b/README.md
index 41c2ee2..26e7f2d 100644
--- a/README.md
+++ b/README.md
@@ -18,7 +18,7 @@ It shall NOT be edited by hand.
SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released.
-**Shipped version:** 5.7.1~ynh1
+**Shipped version:** 5.7.5~ynh1
## Screenshots
diff --git a/README_es.md b/README_es.md
new file mode 100644
index 0000000..2088b16
--- /dev/null
+++ b/README_es.md
@@ -0,0 +1,47 @@
+
+
+# SimpleX para Yunohost
+
+[](https://dash.yunohost.org/appci/app/simplex)  
+
+[](https://install-app.yunohost.org/?app=simplex)
+
+*[Leer este README en otros idiomas.](./ALL_README.md)*
+
+> *Este paquete le permite instalarSimpleX rapidamente y simplement en un servidor YunoHost.*
+> *Si no tiene YunoHost, visita [the guide](https://yunohost.org/install) para aprender como instalarla.*
+
+## Descripción general
+
+SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released.
+
+**Versión actual:** 5.7.5~ynh1
+
+## Capturas
+
+
+
+## Documentaciones y recursos
+
+- Sitio web oficial:
+- Documentación administrador oficial:
+- Repositorio del código fuente oficial de la aplicación :
+- Catálogo YunoHost:
+- Reportar un error:
+
+## Información para desarrolladores
+
+Por favor enviar sus correcciones a la [`branch testing`](https://github.com/YunoHost-Apps/simplex_ynh/tree/testing
+
+Para probar la rama `testing`, sigue asÍ:
+
+```bash
+sudo yunohost app install https://github.com/YunoHost-Apps/simplex_ynh/tree/testing --debug
+o
+sudo yunohost app upgrade simplex -u https://github.com/YunoHost-Apps/simplex_ynh/tree/testing --debug
+```
+
+**Mas informaciones sobre el empaquetado de aplicaciones:**
diff --git a/README_eu.md b/README_eu.md
index 7ee47fd..3c9102b 100644
--- a/README_eu.md
+++ b/README_eu.md
@@ -18,7 +18,7 @@ EZ editatu eskuz.
SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released.
-**Paketatutako bertsioa:** 5.7.1~ynh1
+**Paketatutako bertsioa:** 5.7.5~ynh1
## Pantaila-argazkiak
diff --git a/README_fr.md b/README_fr.md
index 90347f5..4148a6c 100644
--- a/README_fr.md
+++ b/README_fr.md
@@ -18,7 +18,7 @@ Il NE doit PAS être modifié à la main.
SimpleX - la première plate-forme de messagerie qui n'a aucun identifiant d'utilisateur d'aucune sorte - 100 % privée de par sa conception !
-**Version incluse :** 5.7.1~ynh1
+**Version incluse :** 5.7.5~ynh1
## Captures d’écran
diff --git a/README_gl.md b/README_gl.md
index 6ef4acb..a2ec650 100644
--- a/README_gl.md
+++ b/README_gl.md
@@ -18,7 +18,7 @@ NON debe editarse manualmente.
SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released.
-**Versión proporcionada:** 5.7.1~ynh1
+**Versión proporcionada:** 5.7.5~ynh1
## Capturas de pantalla
diff --git a/README_zh_Hans.md b/README_zh_Hans.md
index 05545f1..8c9c9ff 100644
--- a/README_zh_Hans.md
+++ b/README_zh_Hans.md
@@ -18,7 +18,7 @@
SimpleX - the first messaging platform operating without user identifiers of any kind - 100% private by design! iOS and Android apps are released.
-**分发版本:** 5.7.1~ynh1
+**分发版本:** 5.7.5~ynh1
## 截图
diff --git a/conf/xftp.systemd.service b/conf/xftp.systemd.service
index 12c0092..66f3256 100644
--- a/conf/xftp.systemd.service
+++ b/conf/xftp.systemd.service
@@ -14,5 +14,40 @@ KillSignal=SIGINT
TimeoutStopSec=infinity
AmbientCapabilities=CAP_NET_BIND_SERVICE
+
+# Sandboxing options to harden security
+# Depending on specificities of your service/app, you may need to tweak these
+# .. but this should be a good baseline
+# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+DevicePolicy=closed
+ProtectClock=yes
+ProtectHostname=yes
+ProtectProc=invisible
+ProtectSystem=full
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+LockPersonality=yes
+SystemCallArchitectures=native
+SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged
+
+# Denying access to capabilities that should not be relevant for webapps
+# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html
+CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
+CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
+CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT
+CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK
+CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM
+CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
+CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
+CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
+CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
+
[Install]
WantedBy=multi-user.target
diff --git a/manifest.toml b/manifest.toml
index 8fc163d..908bb74 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -5,7 +5,7 @@ name = "SimpleX"
description.en = "Messaging platform operating without user identifiers"
description.fr = "Plate-forme de messagerie fonctionnant sans identifiants d'utilisateurs"
-version = "5.7.1~ynh1"
+version = "5.7.5~ynh1"
maintainers = []
@@ -36,19 +36,19 @@ ram.runtime = "50M"
[resources.sources]
[resources.sources.main]
- amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.6.2/smp-server_amd64"
- amd64.sha256 = "d711cc5bddddf4abd01d971d7d4cda879bc4d4d2beb455154031589ffcb0c891"
- arm64.url = "https://github.com/skyuk3000/simplex_ynh/releases/download/5.2.0/smp-server_arm64"
- arm64.sha256 = "2a5a6f34230443212d3166ec7c706440eb2748c6cd2b4e47526a4ccf45717584"
+ amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/smp-server_amd64"
+ amd64.sha256 = "b507e3b7c381eefa96ec1f9f7648ded78cc971827e90f5a137335045d67425e8"
+ arm64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/smp-server_arm64"
+ arm64.sha256 = "525a7f3d2a361cf3344cfff2358c615b827418eb98d6c390d183b7e40fb008d4"
in_subdir = false
extract = false
rename = "smp-server"
[resources.sources.xftp]
- amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.6.2/xftp-server_amd64"
- amd64.sha256 = "6febc49aa989a02ad8cfc27b657c30acc425878e88a995beca864afeaaff7b3e"
- arm64.url = "https://github.com/skyuk3000/simplex_ynh/releases/download/5.2.0/xftp-server_arm64"
- arm64.sha256 = "a8f4118610efca9bd7b2d687c04f95a9cf52114d1941c8f94441d80c1c04d92a"
+ amd64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/xftp-server_amd64"
+ amd64.sha256 = "f4182dd6ad65862705bc7fdd2c10f5e38a5483344e832ec84b7a2fc288c74ef6"
+ arm64.url = "https://github.com/YunoHost-Apps/simplex_ynh/releases/download/v5.7.5/xftp-server_arm64"
+ arm64.sha256 = "b406b793383b0dd202d6bd60f9d0054d2c4249ac34e4d87c731bb131019c1561"
in_subdir = false
extract = false
rename = "xftp-server"
diff --git a/scripts/install b/scripts/install
index 3764039..bb41f98 100755
--- a/scripts/install
+++ b/scripts/install
@@ -61,7 +61,7 @@ chown -R $app:$app "/etc/opt/simplex-xftp"
#=================================================
#ynh_script_progression --message="Adding a configuration file..." --weight=1
-#ynh_add_config --template="../conf/file-server.ini" --destination="/etc/opt/simplex-xftp/file-server.ini"
+#ynh_add_config --template="file-server.ini" --destination="/etc/opt/simplex-xftp/file-server.ini"
#chmod 400 "/etc/opt/simplex-xftp/file-server.ini"
#chown $app:$app "/etc/opt/simplex-xftp/file-server.ini"