From 5b11b6cf15a1c7fc14b416912f89b2147998c42a Mon Sep 17 00:00:00 2001
From: "push-app-to-main[bot]"
 <203845782+push-app-to-main[bot]@users.noreply.github.com>
Date: Fri, 5 Jun 2026 13:55:33 +0200
Subject: [PATCH] Add cyberchef (ct) (#14952)

Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
---
 ct/cyberchef.sh              | 62 ++++++++++++++++++++++++++++++++++++
 ct/headers/cyberchef         |  6 ++++
 install/cyberchef-install.sh | 43 +++++++++++++++++++++++++
 3 files changed, 111 insertions(+)
 create mode 100644 ct/cyberchef.sh
 create mode 100644 ct/headers/cyberchef
 create mode 100644 install/cyberchef-install.sh

diff --git a/ct/cyberchef.sh b/ct/cyberchef.sh
new file mode 100644
index 000000000..5e164602c
--- /dev/null
+++ b/ct/cyberchef.sh
@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: ethan-hgwr
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/gchq/CyberChef
+
+APP="CyberChef"
+var_tags="${var_tags:-security;data;tools}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/cyberchef ]]; then
+      msg_error "No ${APP} Installation Found!"
+      exit
+  fi
+
+  if check_for_gh_release "cyberchef" "gchq/CyberChef"; then
+    msg_info "Stopping Service"
+    systemctl stop caddy
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "cyberchef" "gchq/CyberChef" "tarball"
+
+    msg_info "Building CyberChef"
+    cd /opt/cyberchef
+    $STD npm ci --ignore-scripts
+    $STD npm run postinstall
+    $STD npm run build
+    msg_ok "Built CyberChef"
+
+    msg_info "Starting Service"
+    systemctl start caddy
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
diff --git a/ct/headers/cyberchef b/ct/headers/cyberchef
new file mode 100644
index 000000000..9f76a9c2a
--- /dev/null
+++ b/ct/headers/cyberchef
@@ -0,0 +1,6 @@
+   ______      __              ________         ____
+  / ____/_  __/ /_  ___  _____/ ____/ /_  ___  / __/
+ / /   / / / / __ \/ _ \/ ___/ /   / __ \/ _ \/ /_  
+/ /___/ /_/ / /_/ /  __/ /  / /___/ / / /  __/ __/  
+\____/\__, /_.___/\___/_/   \____/_/ /_/\___/_/     
+     /____/                                         
diff --git a/install/cyberchef-install.sh b/install/cyberchef-install.sh
new file mode 100644
index 000000000..91a792f24
--- /dev/null
+++ b/install/cyberchef-install.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: ethan-hgwr
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/gchq/CyberChef
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y caddy
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+fetch_and_deploy_gh_release "cyberchef" "gchq/CyberChef" "tarball"
+
+msg_info "Building CyberChef (Patience)"
+cd /opt/cyberchef
+$STD npm ci --ignore-scripts
+$STD npm run postinstall
+$STD npm run build
+msg_ok "Built CyberChef"
+
+msg_info "Configuring Caddy"
+cat <<EOF >/etc/caddy/Caddyfile
+:80 {
+    root * /opt/cyberchef/build/prod
+    file_server
+}
+EOF
+systemctl enable -q --now caddy
+systemctl reload caddy
+msg_ok "Configured Caddy"
+
+motd_ssh
+customize
+cleanup_lxc