diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index def4b66504e93b94da6c01d3729b1cf39525e3e4..8386cd99f10eeddaab1781fc04a7fa682835be05 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -43,7 +43,7 @@ build:
         exit 1
       fi
       cd "release"
-      unsigned_build=$(ls *.apk | grep "unsigned")
+      unsigned_build=$(ls *.apk | grep "release")
       cp $unsigned_build $UNSIGNED_APK
   artifacts:
     paths:
diff --git a/app/build.gradle b/app/build.gradle
index 36abb3ecd4e835b467f3b89db15453a64e5c6d37..e8e46ba1765645f89a9fd30eaef595f8a31fddfa 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -110,6 +110,7 @@ android {
         }
 
         release {
+            signingConfig = signingConfigs.debug
             minifyEnabled true
             proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules-release.pro'
 
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index bce6ab210e2241e39c9ee64f6d53c8f4b1247e7d..8955302a5d130aa290ce809f98afe45c190db5f0 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -31,6 +31,9 @@
     <!-- android.permission.eDrive -->
     <uses-permission android:name="foundation.e.permission.ADD_ACCOUNT"/>
 
+    <permission android:name="${applicationId}.permission.SYNC_ADAPTER"
+        android:protectionLevel="signature" />
+
     <!-- android.permission-group.LOCATION -->
     <!-- getting the WiFi name (for "sync in Wifi only") requires
       - coarse location (Android 8.1)
@@ -226,7 +229,7 @@
         <service
             android:name=".syncadapter.CalendarsSyncAdapterService"
             android:exported="true"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter"/>
             </intent-filter>
@@ -237,7 +240,7 @@
         <service
             android:name=".syncadapter.JtxSyncAdapterService"
             android:exported="true"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter"/>
             </intent-filter>
@@ -248,7 +251,7 @@
         <service
             android:name=".syncadapter.OpenTasksSyncAdapterService"
             android:exported="true"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter"/>
             </intent-filter>
@@ -259,7 +262,7 @@
         <service
             android:name=".syncadapter.TasksOrgSyncAdapterService"
             android:exported="true"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter"/>
             </intent-filter>
@@ -281,6 +284,7 @@
         <!-- account type "DAVx⁵ Address book" -->
         <service
             android:name=".syncadapter.AddressBookAuthenticatorService"
+            android:permission="${applicationId}.permission.SYNC_ADAPTER"
             android:exported="true">   <!-- Since Android 11, this must be true so that Google Contacts shows the address book accounts -->
             <intent-filter>
                 <action android:name="android.accounts.AccountAuthenticator"/>
@@ -298,7 +302,7 @@
         <service
             android:name=".syncadapter.AddressBooksSyncAdapterService"
             android:exported="true"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter"/>
             </intent-filter>
@@ -310,7 +314,7 @@
         <service
             android:name=".syncadapter.ContactsSyncAdapterService"
             android:exported="true"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter"/>
             </intent-filter>
@@ -340,7 +344,7 @@
             android:name=".syncadapter.MurenaCalendarsSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
 	    </intent-filter>
@@ -354,7 +358,7 @@
             android:name=".syncadapter.MurenaTasksSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -368,7 +372,7 @@
             android:name=".syncadapter.MurenaNotesSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -382,7 +386,7 @@
             android:name=".syncadapter.MurenaEmailSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -396,7 +400,7 @@
             android:name=".syncadapter.MurenaMediaSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -410,7 +414,7 @@
             android:name=".syncadapter.MurenaAppDataSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -425,7 +429,7 @@
             android:name=".syncadapter.MurenaMeteredEdriveSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -452,7 +456,7 @@
             android:name=".syncadapter.MurenaAddressBooksSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -466,7 +470,7 @@
             android:name=".syncadapter.MurenaContactsSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -496,7 +500,7 @@
             android:name=".syncadapter.GoogleCalendarsSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -510,7 +514,7 @@
             android:name=".syncadapter.GoogleTasksSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -537,7 +541,7 @@
             android:name=".syncadapter.GoogleAddressBooksSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -551,7 +555,7 @@
             android:name=".syncadapter.GoogleContactsSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -568,7 +572,7 @@
             android:name=".syncadapter.GoogleEmailSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -595,7 +599,7 @@
             android:name=".syncadapter.YahooCalendarsSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -609,7 +613,7 @@
             android:name=".syncadapter.YahooTasksSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -623,7 +627,7 @@
             android:name=".syncadapter.YahooEmailSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -650,7 +654,7 @@
             android:name=".syncadapter.YahooAddressBooksSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -664,7 +668,7 @@
             android:name=".syncadapter.YahooContactsSyncAdapterService"
             android:exported="true"
             android:process=":sync"
-            tools:ignore="ExportedService">
+            android:permission="${applicationId}.permission.SYNC_ADAPTER">
             <intent-filter>
                 <action android:name="android.content.SyncAdapter" />
             </intent-filter>
@@ -681,7 +685,7 @@
             android:name="com.owncloud.android.services.AccountManagerService"
             android:enabled="true"
             android:exported="true"
-            tools:ignore="ExportedService" />
+            android:permission="android.permission.MANAGE_ACCOUNTS" />
 
         <!-- Callback from authentication screen -->
         <activity android:name="net.openid.appauth.RedirectUriReceiverActivity"
@@ -719,7 +723,8 @@
 
         <receiver
             android:name=".receiver.BootCompletedReceiver"
-            android:exported="true">
+            android:exported="true"
+            android:permission="android.permission.RECEIVE_BOOT_COMPLETED">
             <intent-filter>
                 <action android:name="android.intent.action.BOOT_COMPLETED" />
             </intent-filter>
@@ -728,7 +733,8 @@
         <receiver
             android:name=".receiver.AccountRemovedReceiver"
             android:enabled="true"
-            android:exported="true">
+            android:exported="true"
+            android:permission="android.permission.MANAGE_ACCOUNTS">
             <intent-filter>
                 <action android:name="android.accounts.action.ACCOUNT_REMOVED"/>
             </intent-filter>
@@ -750,8 +756,14 @@
     <queries>
         <!-- system providers (listing them is technically not required, but some apps like the
         Huawei calendar take this as indication of whether these providers are accessed) -->
-        <provider android:authorities="com.android.calendar"/>
-        <provider android:authorities="com.android.contacts"/>
+        <provider
+            android:authorities="com.android.calendar"
+            android:exported="true"
+            />
+        <provider
+            android:authorities="com.android.contacts"
+            android:exported="true"
+            />
 
         <!-- task providers -->
         <package android:name="at.techbee.jtx" />
@@ -782,7 +794,10 @@
             <action android:name="android.support.customtabs.action.CustomTabsService" />
         </intent>
 
-        <provider android:authorities="foundation.e.mail.provider.AppContentProvider" />
+        <provider
+            android:authorities="foundation.e.mail.provider.AppContentProvider"
+            android:exported="true"
+            />
     </queries>
 
 </manifest>
\ No newline at end of file