Update CHANGELOG.md (#10297)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -12,6 +12,35 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2025-12-24
 
+### 🚀 Updated Scripts
+
+  - recyclarr: increase cron path [@Uncloak2](https://github.com/Uncloak2) ([#10272](https://github.com/community-scripts/ProxmoxVE/pull/10272))
+
+  - #### 🔧 Refactor
+
+    - Overseerr: Update dependencies [@tremor021](https://github.com/tremor021) ([#10275](https://github.com/community-scripts/ProxmoxVE/pull/10275))
+    - Refactor: Paperless-GPT [@tremor021](https://github.com/tremor021) ([#10274](https://github.com/community-scripts/ProxmoxVE/pull/10274))
+    - Refactor: Outline [@tremor021](https://github.com/tremor021) ([#10276](https://github.com/community-scripts/ProxmoxVE/pull/10276))
+    - Refactor: OTS [@tremor021](https://github.com/tremor021) ([#10277](https://github.com/community-scripts/ProxmoxVE/pull/10277))
+    - Refactor: OpenProject [@tremor021](https://github.com/tremor021) ([#10278](https://github.com/community-scripts/ProxmoxVE/pull/10278))
+    - Refactor: Open Archiver [@tremor021](https://github.com/tremor021) ([#10280](https://github.com/community-scripts/ProxmoxVE/pull/10280))
+    - Refactor: Tautulli [@tremor021](https://github.com/tremor021) ([#10241](https://github.com/community-scripts/ProxmoxVE/pull/10241))
+    - Refactor: PrivateBin [@tremor021](https://github.com/tremor021) ([#10256](https://github.com/community-scripts/ProxmoxVE/pull/10256))
+    - Refactor: Podman-Home Assistant [@tremor021](https://github.com/tremor021) ([#10258](https://github.com/community-scripts/ProxmoxVE/pull/10258))
+    - Refactor: Plant-it [@tremor021](https://github.com/tremor021) ([#10259](https://github.com/community-scripts/ProxmoxVE/pull/10259))
+    - Refactor: PatchMon [@tremor021](https://github.com/tremor021) ([#10260](https://github.com/community-scripts/ProxmoxVE/pull/10260))
+    - Refactor: Part-DB [@tremor021](https://github.com/tremor021) ([#10262](https://github.com/community-scripts/ProxmoxVE/pull/10262))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: correct local template discovery regex pattern [@MickLesk](https://github.com/MickLesk) ([#10282](https://github.com/community-scripts/ProxmoxVE/pull/10282))
+
+### ❔ Uncategorized
+
+  - Pocketbase: Add note for superuser account creation [@tremor021](https://github.com/tremor021) ([#10245](https://github.com/community-scripts/ProxmoxVE/pull/10245))
+
 ## 2025-12-23
 
 ### 🚀 Updated Scripts

ct/open-archiver.sh

@@ -34,7 +34,7 @@ function update_script() {
     msg_ok "Stopped Services"
 
     cp /opt/openarchiver/.env /opt/openarchiver.env
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "openarchiver" "LogicLabs-OU/OpenArchiver" "tarball" "latest" "/opt/openarchiver"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "openarchiver" "LogicLabs-OU/OpenArchiver" "tarball"
     mv /opt/openarchiver.env /opt/openarchiver/.env
 
     msg_info "Updating Open Archiver"

ct/paperless-gpt.sh

@@ -27,18 +27,19 @@ function update_script() {
     msg_error "No Paperless-GPT installation found!"
     exit
   fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/icereed/paperless-gpt/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+
+  if check_for_gh_release "paperless-gpt" "icereed/paperless-gpt"; then
     msg_info "Stopping Service"
     systemctl stop paperless-gpt
     msg_ok "Service Stopped"
 
-    msg_info "Updating Paperless-GPT to ${RELEASE}"
-    temp_file=$(mktemp)
-    curl -fsSL "https://github.com/icereed/paperless-gpt/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-    tar zxf $temp_file
-    rm -rf /opt/paperless-gpt
-    mv paperless-gpt-${RELEASE} /opt/paperless-gpt
+    if should_update_tool "node" "24"; then
+      NODE_VERSION="24" setup_nodejs
+    fi
+
+    fetch_and_deploy_gh_release "paperless-gpt" "icereed/paperless-gpt" "tarball"
+
+    msg_info "Updating Paperless-GPT"
     cd /opt/paperless-gpt/web-app
     $STD npm install
     $STD npm run build
@@ -47,16 +48,12 @@ function update_script() {
     export CC=musl-gcc
     CGO_ENABLED=1 go build -tags musl -o /dev/null github.com/mattn/go-sqlite3
     CGO_ENABLED=1 go build -tags musl -o paperless-gpt .
-    rm -f $temp_file
-    echo "${RELEASE}" >"/opt/paperless-gpt_version.txt"
-    msg_ok "Updated Paperless-GPT to ${RELEASE}"
+    msg_ok "Updated Paperless-GPT"
 
     msg_info "Starting Service"
     systemctl start paperless-gpt
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
-  else
-    msg_ok "No update required. ${APP} is already at ${RELEASE}"
   fi
   exit
 }

ct/part-db.sh

@@ -27,8 +27,9 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/Part-DB/Part-DB-server/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  
+  RELEASE=$(get_latest_github_release "Part-DB/Part-DB-server")
+  if check_for_gh_release "partdb" "Part-DB/Part-DB-server"; then
     msg_info "Stopping Service"
     systemctl stop apache2
     msg_ok "Stopped Service"
@@ -36,7 +37,7 @@ function update_script() {
     msg_info "Updating $APP to v${RELEASE}"
     cd /opt
     mv /opt/partdb/ /opt/partdb-backup
-    curl -fsSL "https://github.com/Part-DB/Part-DB-server/archive/refs/tags/v${RELEASE}.zip" -o $(basename "https://github.com/Part-DB/Part-DB-server/archive/refs/tags/v${RELEASE}.zip")
+    curl -fsSL "https://github.com/Part-DB/Part-DB-server/archive/refs/tags/v${RELEASE}.zip" -o "/opt/v${RELEASE}.zip"
     $STD unzip "v${RELEASE}.zip"
     mv /opt/Part-DB-server-${RELEASE}/ /opt/partdb
 
@@ -54,15 +55,13 @@ function update_script() {
     chown -R www-data:www-data /opt/partdb
     rm -r "/opt/v${RELEASE}.zip"
     rm -r /opt/partdb-backup
-    echo "${RELEASE}" >/opt/${APP}_version.txt
+    echo "${RELEASE}" >~/.partdb
     msg_ok "Updated $APP to v${RELEASE}"
 
     msg_info "Starting Service"
     systemctl start apache2
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
-  else
-    msg_ok "No update required. ${APP} is already at v${RELEASE}"
   fi
   exit
 }

ct/podman-homeassistant.sh

@@ -37,7 +37,7 @@ function update_script() {
   if [ "$UPD" == "1" ]; then
     msg_info "Updating ${APP} LXC"
     $STD apt update
-    $STD apt -y upgrade
+    $STD apt upgrade -y
     msg_ok "Updated successfully!"
 
     msg_info "Updating All Containers\n"
@@ -65,7 +65,7 @@ function update_script() {
     exit
   fi
   if [ "$UPD" == "3" ]; then
-    IP=$(hostname -I | awk '{print $1}')
+    import_local_ip
     msg_info "Installing FileBrowser"
     $STD curl -fsSL https://raw.githubusercontent.com/filebrowser/get/master/get.sh | bash
     $STD filebrowser config init -a '0.0.0.0'
@@ -74,23 +74,25 @@ function update_script() {
     msg_ok "Installed FileBrowser"
 
     msg_info "Creating Service"
-    service_path="/etc/systemd/system/filebrowser.service"
-    echo "[Unit]
-  Description=Filebrowser
-  After=network-online.target
-  [Service]
-    User=root
-    WorkingDirectory=/root/
-    ExecStart=/usr/local/bin/filebrowser -r /
-  [Install]
-    WantedBy=default.target" >$service_path
+    cat <<EOF >/etc/systemd/system/filebrowser.service
+[Unit]
+Description=Filebrowser
+After=network-online.target
 
-    $STD systemctl enable --now filebrowser
+[Service]
+User=root
+WorkingDirectory=/root/
+ExecStart=/usr/local/bin/filebrowser -r /
+
+[Install]
+WantedBy=default.target
+EOF
+    systemctl enable -q --now filebrowser
     msg_ok "Created Service"
 
     msg_ok "Completed Successfully!\n"
     echo -e "FileBrowser should be reachable by going to the following URL.
-         ${BL}http://$IP:8080${CL}   admin|helper-scripts.com\n"
+         ${BL}http://$LOCAL_IP:8080${CL}   admin|helper-scripts.com\n"
     exit
   fi
   if [ "$UPD" == "4" ]; then
@@ -99,7 +101,6 @@ function update_script() {
     msg_ok "Removed ALL Unused Images"
     exit
   fi
-
 }
 
 start

ct/tautulli.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

frontend/public/json/pocketbase.json

@@ -31,5 +31,10 @@
     "username": null,
     "password": null
   },
-  "notes": []
+  "notes": [
+    {
+      "text": "Type `/opt/pocketbase/pocketbase superuser create YOUREMAIL PASSWORD` to create your superuser account.",
+      "type": "info"
+    }
+  ]
 }

frontend/public/json/tautulli.json

@@ -12,7 +12,7 @@
   "documentation": "https://github.com/Tautulli/Tautulli/wiki",
   "website": "https://tautulli.com/",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/tautulli.webp",
-  "config_path": "",
+  "config_path": "/opt/Tautulli/config.ini",
   "description": "Tautulli allows you to monitor and track your Plex Media Server usage, such as viewing statistics and analysis of your media library. It can be used to monitor user activity, get notifications about new media added to your library, and even generate reports on your media usage.",
   "install_methods": [
     {
@@ -23,7 +23,7 @@
         "ram": 1024,
         "hdd": 4,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/versions.json

@@ -1,14 +1,54 @@
 [
   {
-    "name": "advplyr/audiobookshelf",
-    "version": "v2.32.1",
-    "date": "2025-12-23T23:28:06Z"
+    "name": "fuma-nama/fumadocs",
+    "version": "fumadocs-ui@16.4.0",
+    "date": "2025-12-24T10:16:33Z"
   },
   {
     "name": "rcourtman/Pulse",
     "version": "v5.0.0",
     "date": "2025-12-23T21:47:01Z"
   },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.521",
+    "date": "2025-12-24T05:52:23Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.40.0-rc1",
+    "date": "2025-12-24T03:37:37Z"
+  },
+  {
+    "name": "comfyanonymous/ComfyUI",
+    "version": "v0.6.0",
+    "date": "2025-12-24T03:32:16Z"
+  },
+  {
+    "name": "hyperion-project/hyperion.ng",
+    "version": "2.1.1",
+    "date": "2025-06-14T17:45:06Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.5.1",
+    "date": "2025-12-24T00:27:08Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.1.0",
+    "date": "2025-11-23T12:13:34Z"
+  },
+  {
+    "name": "Dolibarr/dolibarr",
+    "version": "22.0.4",
+    "date": "2025-12-23T23:58:16Z"
+  },
+  {
+    "name": "advplyr/audiobookshelf",
+    "version": "v2.32.1",
+    "date": "2025-12-23T23:28:06Z"
+  },
   {
     "name": "laurent22/joplin",
     "version": "server-v3.5.2",
@@ -74,6 +114,11 @@
     "version": "v3.8.1",
     "date": "2025-12-16T09:59:22Z"
   },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.7",
+    "date": "2025-12-01T08:14:11Z"
+  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.543",
@@ -109,11 +154,6 @@
     "version": "v2.0.12",
     "date": "2025-12-02T08:11:24Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.512",
-    "date": "2025-12-23T06:02:59Z"
-  },
   {
     "name": "theonedev/onedev",
     "version": "v13.1.6",
@@ -124,21 +164,6 @@
     "version": "v2.13.3",
     "date": "2025-12-23T01:18:58Z"
   },
-  {
-    "name": "hyperion-project/hyperion.ng",
-    "version": "2.1.1",
-    "date": "2025-06-14T17:45:06Z"
-  },
-  {
-    "name": "jeedom/core",
-    "version": "4.5.1",
-    "date": "2025-12-23T00:27:04Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.1.0",
-    "date": "2025-11-23T12:13:34Z"
-  },
   {
     "name": "Dispatcharr/Dispatcharr",
     "version": "v0.15.1",
@@ -214,11 +239,6 @@
     "version": "v6.4.14",
     "date": "2025-12-16T05:42:34Z"
   },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.7",
-    "date": "2025-12-01T08:14:11Z"
-  },
   {
     "name": "benjaminjonard/koillection",
     "version": "1.7.1",
@@ -239,11 +259,6 @@
     "version": "v0.35.0",
     "date": "2025-12-21T07:44:15Z"
   },
-  {
-    "name": "fuma-nama/fumadocs",
-    "version": "fumadocs-ui@16.3.2",
-    "date": "2025-12-21T05:23:55Z"
-  },
   {
     "name": "dedicatedcode/reitti",
     "version": "v3.0.1",
@@ -334,11 +349,6 @@
     "version": "v2.4.1",
     "date": "2025-12-19T15:50:12Z"
   },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.30.2",
-    "date": "2025-12-19T15:18:53Z"
-  },
   {
     "name": "raydak-labs/configarr",
     "version": "v1.19.0",
@@ -392,7 +402,7 @@
   {
     "name": "mealie-recipes/mealie",
     "version": "v3.8.0",
-    "date": "2025-12-19T01:37:16Z"
+    "date": "2025-12-19T01:37:04Z"
   },
   {
     "name": "moghtech/komodo",
@@ -459,11 +469,6 @@
     "version": "7.4.6",
     "date": "2025-12-18T07:00:26Z"
   },
-  {
-    "name": "comfyanonymous/ComfyUI",
-    "version": "v0.5.1",
-    "date": "2025-12-18T03:08:43Z"
-  },
   {
     "name": "goauthentik/authentik",
     "version": "version/2025.10.3",
@@ -1034,11 +1039,6 @@
     "version": "release-1.24.2",
     "date": "2025-11-26T11:22:30Z"
   },
-  {
-    "name": "Dolibarr/dolibarr",
-    "version": "22.0.3",
-    "date": "2025-11-25T17:25:41Z"
-  },
   {
     "name": "usememos/memos",
     "version": "v0.25.3",

install/open-archiver-install.sh

@@ -19,28 +19,12 @@ msg_ok "Installed dependendencies"
 
 NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
 PG_VERSION="17" setup_postgresql
+PG_DB_NAME="openarchiver_db" PG_DB_USER="openarchiver" setup_postgresql_db
 fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
 fetch_and_deploy_gh_release "openarchiver" "LogicLabs-OU/OpenArchiver" "tarball"
 JWT_KEY="$(openssl rand -hex 32)"
 SECRET_KEY="$(openssl rand -hex 32)"
-IP_ADDR=$(hostname -I | awk '{print $1}')
-
-msg_info "Setting up PostgreSQL"
-DB_NAME="openarchiver_db"
-DB_USER="openarchiver"
-DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-18)"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC';"
-{
-  echo "Open Archiver DB Credentials"
-  echo "Database Name: $DB_NAME"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-} >>~/openarchiver.creds
-msg_ok "Set up PostgreSQL"
+import_local_ip
 
 msg_info "Configuring MeiliSearch"
 curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml
@@ -76,10 +60,10 @@ mkdir -p /opt/openarchiver-data
 cd /opt/openarchiver
 cp .env.example .env
 sed -i "s|^NODE_ENV=.*|NODE_ENV=production|g" /opt/openarchiver/.env
-sed -i "s|^POSTGRES_DB=.*|POSTGRES_DB=openarchiver_db|g" /opt/openarchiver/.env
-sed -i "s|^POSTGRES_USER=.*|POSTGRES_USER=openarchiver|g" /opt/openarchiver/.env
-sed -i "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=$DB_PASS|g" /opt/openarchiver/.env
-sed -i "s|^DATABASE_URL=.*|DATABASE_URL=\"postgresql://openarchiver:$DB_PASS@localhost:5432/openarchiver_db\"|g" /opt/openarchiver/.env
+sed -i "s|^POSTGRES_DB=.*|POSTGRES_DB=$PG_DB_NAME|g" /opt/openarchiver/.env
+sed -i "s|^POSTGRES_USER=.*|POSTGRES_USER=$PG_DB_USER|g" /opt/openarchiver/.env
+sed -i "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=$PG_DB_PASS|g" /opt/openarchiver/.env
+sed -i "s|^DATABASE_URL=.*|DATABASE_URL=\"postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME\"|g" /opt/openarchiver/.env
 sed -i "s|^MEILI_HOST=.*|MEILI_HOST=http://localhost:7700|g" /opt/openarchiver/.env
 sed -i "s|^MEILI_MASTER_KEY=.*|MEILI_MASTER_KEY=$MASTER_KEY|g" /opt/openarchiver/.env
 sed -i "s|^REDIS_HOST=.*|REDIS_HOST=localhost|g" /opt/openarchiver/.env
@@ -88,7 +72,7 @@ sed -i "s|^STORAGE_LOCAL_ROOT_PATH=.*|STORAGE_LOCAL_ROOT_PATH=/opt/openarchiver-
 sed -i "s|^JWT_SECRET=.*|JWT_SECRET=$JWT_KEY|g" /opt/openarchiver/.env
 sed -i "s|^ENCRYPTION_KEY=.*|ENCRYPTION_KEY=$SECRET_KEY|g" /opt/openarchiver/.env
 sed -i "s|^TIKA_URL=.*|TIKA_URL=|g" /opt/openarchiver/.env
-sed -i "s|^ORIGIN=.*|ORIGIN=http://$IP_ADDR:3000|g" /opt/openarchiver/.env
+sed -i "s|^ORIGIN=.*|ORIGIN=http://$LOCAL_IP:3000|g" /opt/openarchiver/.env
 $STD pnpm install --shamefully-hoist --frozen-lockfile --prod=false
 $STD pnpm run build:oss
 $STD pnpm db:migrate

install/openproject-install.sh

@@ -14,28 +14,14 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y \
-  apt-transport-https \
-  ca-certificates
+$STD apt install -y apt-transport-https
 msg_ok "Installed Dependencies"
 
 PG_VERSION="17" setup_postgresql
-
-msg_info "Setting up PostgreSQL"
-DB_NAME=openproject
-DB_USER=openproject
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+PG_DB_NAME="openproject" PG_DB_USER="openproject" setup_postgresql_db
 API_KEY=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMPLATE template0;"
-{
-  echo "OpenProject-Credentials"
-  echo -e "OpenProject Database User: $DB_USER"
-  echo -e "OpenProject Database Password: $DB_PASS"
-  echo -e "OpenProject Database Name: $DB_NAME"
-  echo -e "OpenProject API Key: $API_KEY"
-} >>~/openproject.creds
-msg_ok "Set up PostgreSQL"
+echo "OpenProject API Key: $API_KEY" >>~/openproject.creds
+import_local_ip
 
 msg_info "Setting up OpenProject Repository"
 curl -fsSL "https://dl.packager.io/srv/opf/openproject/key" | gpg --dearmor >/etc/apt/trusted.gpg.d/packager-io.gpg
@@ -48,7 +34,6 @@ $STD apt install -y openproject
 msg_ok "Installed OpenProject"
 
 msg_info "Configuring OpenProject"
-IP_ADDR=$(hostname -I | cut -d' ' -f1)
 cat <<EOF >/etc/openproject/installer.dat
 openproject/edition default
 
@@ -56,13 +41,13 @@ postgres/retry retry
 postgres/autoinstall reuse
 postgres/db_host 127.0.0.1
 postgres/db_port 5432
-postgres/db_username ${DB_USER}
-postgres/db_password ${DB_PASS}
-postgres/db_name ${DB_NAME}
+postgres/db_username ${PG_DB_USER}
+postgres/db_password ${PG_DB_PASS}
+postgres/db_name ${PG_DB_NAME}
 server/autoinstall install
 server/variant apache2
 
-server/hostname ${IP_ADDR}
+server/hostname ${LOCAL_IP}
 server/server_path_prefix /openproject
 server/ssl no
 server/variant apache2
@@ -75,7 +60,6 @@ memcached/autoinstall install
 openproject/admin_email admin@example.net
 openproject/default_language en
 EOF
-
 $STD sudo openproject configure
 msg_ok "Configured OpenProject"
 

install/ots-install.sh

@@ -16,11 +16,11 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   redis-server \
-  nginx \
-  openssl
+  nginx
 msg_ok "Installed Dependencies"
 
 fetch_and_deploy_gh_release "ots" "Luzifer/ots" "prebuild" "latest" "/opt/ots" "ots_linux_amd64.tgz"
+create_self_signed_cert
 
 msg_info "Setup OTS"
 cat <<EOF >/opt/ots/.env
@@ -31,14 +31,6 @@ STORAGE_TYPE=redis
 EOF
 msg_ok "Setup OTS"
 
-msg_info "Generating Universal SSL Certificate"
-mkdir -p /etc/ssl/ots
-$STD openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
-  -keyout /etc/ssl/ots/key.pem \
-  -out /etc/ssl/ots/cert.pem \
-  -subj "/CN=ots"
-msg_ok "Certificate Generated"
-
 msg_info "Setting up nginx"
 cat <<EOF >/etc/nginx/sites-available/ots.conf
 server {
@@ -52,8 +44,8 @@ server {
   listen [::]:443 ssl;
   server_name ots;
 
-  ssl_certificate /etc/ssl/ots/cert.pem;
-  ssl_certificate_key /etc/ssl/ots/key.pem;
+  ssl_certificate /etc/ssl/ots/ots.crt;
+  ssl_certificate_key /etc/ssl/ots/ots.key;
 
   location / {
     add_header X-Robots-Tag noindex;

install/outline-install.sh

@@ -22,29 +22,12 @@ msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
 PG_VERSION="16" setup_postgresql
-
-msg_info "Set up PostgreSQL Database"
-DB_NAME="outline"
-DB_USER="outline"
-DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC';"
-{
-  echo "Outline-Credentials"
-  echo "Outline Database User: $DB_USER"
-  echo "Outline Database Password: $DB_PASS"
-  echo "Outline Database Name: $DB_NAME"
-} >>~/outline.creds
-msg_ok "Set up PostgreSQL Database"
-
+PG_DB_NAME="outline" PG_DB_USER="outline" setup_postgresql_db
 fetch_and_deploy_gh_release "outline" "outline/outline" "tarball"
+import_local_ip
 
 msg_info "Configuring Outline (Patience)"
 SECRET_KEY="$(openssl rand -hex 32)"
-LOCAL_IP="$(hostname -I | awk '{print $1}')"
 cd /opt/outline
 cp .env.sample .env
 export NODE_ENV=development

install/overseerr-install.sh

@@ -13,10 +13,6 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt install -y ca-certificates
-msg_ok "Installed Dependencies"
-
 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
 fetch_and_deploy_gh_release "overseerr" "sct/overseerr" "tarball"
 

install/paperless-gpt-install.sh

@@ -16,22 +16,17 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   gcc \
-  ca-certificates \
   musl-dev \
   mupdf \
   libc6-dev \
   musl-tools
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="22" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 setup_go
+fetch_and_deploy_gh_release "paperless-gpt" "icereed/paperless-gpt" "tarball"
 
 msg_info "Setup Paperless-GPT"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/icereed/paperless-gpt/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/icereed/paperless-gpt/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file"
-mv paperless-gpt-"${RELEASE}" /opt/paperless-gpt
 cd /opt/paperless-gpt/web-app
 $STD npm install
 $STD npm run build
@@ -40,21 +35,19 @@ go mod download
 export CC=musl-gcc
 CGO_ENABLED=1 go build -tags musl -o /dev/null github.com/mattn/go-sqlite3
 CGO_ENABLED=1 go build -tags musl -o paperless-gpt .
-rm -f "$temp_file"
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
 msg_ok "Setup Paperless-GPT"
 
 mkdir -p /opt/paperless-gpt-data
-read -p "${TAB3}Do you want to enter the Paperless local URL now? (y/n) " input_url
-if [[ "$input_url" =~ ^[Yy]$ ]]; then
-  read -p "${TAB3}Enter your Paperless-NGX instance URL (e.g., http://192.168.1.100:8000): " PAPERLESS_BASE_URL
+read -rp "${TAB3}Do you want to enter the Paperless local URL now? (y/n) " input_url
+if [[ $input_url =~ ^[Yy]$ ]]; then
+  read -rp "${TAB3}Enter your Paperless-NGX instance URL (e.g., http://192.168.1.100:8000): " PAPERLESS_BASE_URL
 else
   PAPERLESS_BASE_URL="http://your_paperless_ngx_url"
 fi
 
-read -p "${TAB3}Do you want to enter the Paperless API token now? (y/n) " input_token
-if [[ "$input_token" =~ ^[Yy]$ ]]; then
-  read -p "${TAB3}Enter your Paperless API token: " PAPERLESS_API_TOKEN
+read -rp "${TAB3}Do you want to enter the Paperless API token now? (y/n) " input_token
+if [[ $input_token =~ ^[Yy]$ ]]; then
+  read -rp "${TAB3}Enter your Paperless API token: " PAPERLESS_API_TOKEN
 else
   PAPERLESS_API_TOKEN="your_paperless_api_token"
 fi

install/part-db-install.sh

@@ -15,39 +15,20 @@ update_os
 
 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
 PG_VERSION="16" setup_postgresql
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="xsl,pgsql" setup_php
+PG_DB_NAME="partdb" PG_DB_USER="partdb" setup_postgresql_db
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="xsl,pgsql" PHP_POST_MAX_SIZE="100M" PHP_UPLOAD_MAX_FILESIZE="100M" setup_php
 setup_composer
 
-msg_info "Setting up PHP"
-PHPVER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION . "\n";')
-sed -i "s@post_max_size = 8M@post_max_size = 100M@g" /etc/php/${PHPVER}/apache2/php.ini
-sed -i "s@upload_max_filesize = 2M@upload_max_filesize = 100M@g" /etc/php/${PHPVER}/apache2/php.ini
-msg_ok "Setting up PHP"
-
-msg_info "Setting up PostgreSQL"
-DB_NAME=partdb
-DB_USER=partdb
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMPLATE template0;"
-{
-  echo "Part-DB Credentials"
-  echo "Part-DB Database User: $DB_USER"
-  echo "Part-DB Database Password: $DB_PASS"
-  echo "Part-DB Database Name: $DB_NAME"
-} >>~/partdb.creds
-msg_ok "Set up PostgreSQL"
-
 msg_info "Installing Part-DB (Patience)"
 cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/Part-DB/Part-DB-server/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+RELEASE=$(get_latest_github_release "Part-DB/Part-DB-server")
 curl -fsSL "https://github.com/Part-DB/Part-DB-server/archive/refs/tags/v${RELEASE}.zip" -o "/opt/v${RELEASE}.zip"
 $STD unzip "v${RELEASE}.zip"
 mv /opt/Part-DB-server-${RELEASE}/ /opt/partdb
 
 cd /opt/partdb/
 cp .env .env.local
-sed -i "s|DATABASE_URL=\"sqlite:///%kernel.project_dir%/var/app.db\"|DATABASE_URL=\"postgresql://${DB_USER}:${DB_PASS}@127.0.0.1:5432/${DB_NAME}?serverVersion=12.19&charset=utf8\"|" .env.local
+sed -i "s|DATABASE_URL=\"sqlite:///%kernel.project_dir%/var/app.db\"|DATABASE_URL=\"postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}?serverVersion=12.19&charset=utf8\"|" .env.local
 
 export COMPOSER_ALLOW_SUPERUSER=1
 $STD composer install --no-dev -o --no-interaction
@@ -64,7 +45,7 @@ ADMIN_PASS=$(grep -oP 'The initial password for the "admin" user is: \K\w+' ~/da
 } >>~/partdb.creds
 rm -rf ~/database-migration-output
 rm -rf "/opt/v${RELEASE}.zip"
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+echo "${RELEASE}" >~/.partdb
 msg_ok "Installed Part-DB"
 
 msg_info "Creating Service"

install/patchmon-install.sh

@@ -22,24 +22,9 @@ msg_ok "Installed Dependencies"
 
 NODE_VERSION="24" setup_nodejs
 PG_VERSION="17" setup_postgresql
-
-msg_info "Setup PostgreSQL Database"
-DB_NAME=patchmon_db
-DB_USER=patchmon_usr
-DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME TO $DB_USER;"
-{
-  echo "PatchMon Credentials"
-  echo "PatchMon Database Name: $DB_NAME"
-  echo "PatchMon Database User: $DB_USER"
-  echo "PatchMon Database Password: $DB_PASS"
-} >>~/patchmon.creds
-msg_ok "Setup PostgreSQL Database"
-
+PG_DB_NAME="patchmon_db" PG_DB_USER="patchmon_usr" setup_postgresql_db
 fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "tarball" "latest" "/opt/patchmon"
+import_local_ip
 
 msg_info "Configuring PatchMon"
 cd /opt/patchmon
@@ -50,12 +35,10 @@ $STD npm install --no-audit --no-fund --no-save --ignore-scripts
 cd /opt/patchmon/frontend
 $STD npm install --include=dev --no-audit --no-fund --no-save --ignore-scripts
 $STD npm run build
-
 JWT_SECRET="$(openssl rand -base64 64 | tr -d "=+/" | cut -c1-50)"
-LOCAL_IP="$(hostname -I | awk '{print $1}')"
 cat <<EOF >/opt/patchmon/backend/.env
 # Database Configuration
-DATABASE_URL="postgresql://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME"
+DATABASE_URL="postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME"
 PY_THRESHOLD=3M_DB_CONN_MAX_ATTEMPTS=30
 PM_DB_CONN_WAIT_INTERVAL=2
 
@@ -272,7 +255,6 @@ async function updateSettings() {
 
 updateSettings();
 EOF
-
 cd /opt/patchmon/backend
 $STD node update-settings.js
 msg_ok "Settings updated successfully"

install/plant-it-install.sh

@@ -20,24 +20,8 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 setup_mariadb
+MARIADB_DB_NAME="plantit" MARIADB_DB_USER="plantit_usr" setup_mariadb_db
 JAVA_VERSION="21" setup_java
-
-msg_info "Setting up MariaDB"
-JWT_SECRET=$(openssl rand -base64 24 | tr -d '/+=')
-DB_NAME=plantit
-DB_USER=plantit_usr
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-{
-    echo "Plant-it Credentials"
-    echo "Plant-it Database User: $DB_USER"
-    echo "Plant-it Database Password: $DB_PASS"
-    echo "Plant-it Database Name: $DB_NAME"
-} >>~/plant-it.creds
-msg_ok "Set up MariaDB"
-
 USE_ORIGINAL_FILENAME="true" fetch_and_deploy_gh_release "plant-it" "MDeLuise/plant-it" "singlefile" "0.10.0" "/opt/plant-it/backend" "server.jar"
 fetch_and_deploy_gh_release "plant-it-front" "MDeLuise/plant-it" "prebuild" "0.10.0" "/opt/plant-it/frontend" "client.tar.gz"
 
@@ -46,10 +30,10 @@ mkdir -p /opt/plant-it-data
 cat <<EOF >/opt/plant-it/backend/server.env
 MYSQL_HOST=localhost
 MYSQL_PORT=3306
-MYSQL_USERNAME=$DB_USER
-MYSQL_PSW=$DB_PASS
-MYSQL_DATABASE=$DB_NAME
-MYSQL_ROOT_PASSWORD=$DB_PASS
+MYSQL_USERNAME=$MARIADB_DB_USER
+MYSQL_PSW=$MARIADB_DB_PASS
+MYSQL_DATABASE=$MARIADB_DB_NAME
+MYSQL_ROOT_PASSWORD=$MARIADB_DB_PASS
 
 JWT_SECRET=$JWT_SECRET
 JWT_EXP=1
@@ -86,7 +70,7 @@ Restart=on-failure
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable --now -q plant-it
+systemctl enable -q --now plant-it
 
 cat <<EOF >/etc/nginx/nginx.conf
 events {

install/podman-homeassistant-install.sh

@@ -13,12 +13,8 @@ setting_up_container
 network_check
 update_os
 
-get_latest_release() {
-  curl -fsSL https://api.github.com/repos/$1/releases/latest | grep '"tag_name":' | cut -d'"' -f4
-}
-
-PORTAINER_LATEST_VERSION=$(get_latest_release "portainer/portainer")
-PORTAINER_AGENT_LATEST_VERSION=$(get_latest_release "portainer/agent")
+PORTAINER_LATEST_VERSION=$(get_latest_github_release "portainer/portainer")
+PORTAINER_AGENT_LATEST_VERSION=$(get_latest_github_release "portainer/agent")
 
 if $STD mount | grep 'on / type zfs' >null && echo "ZFS"; then
   msg_info "Enabling ZFS support."
@@ -44,8 +40,8 @@ EOF
 fi
 
 msg_info "Installing Podman"
-$STD apt -y install podman
-$STD systemctl enable --now podman.socket
+$STD apt install -y podman
+systemctl enable -q --now podman.socket
 echo -e 'unqualified-search-registries=["docker.io"]' >>/etc/containers/registries.conf
 msg_ok "Installed Podman"
 
@@ -97,7 +93,7 @@ $STD podman run -d \
 podman generate systemd \
   --new --name homeassistant \
   >/etc/systemd/system/homeassistant.service
-$STD systemctl enable --now homeassistant
+systemctl enable -q --now homeassistant
 msg_ok "Installed Home Assistant"
 
 motd_ssh

install/privatebin-install.sh

@@ -20,16 +20,9 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 PHP_VERSION="8.2" PHP_MODULE="common,fpm" setup_php
+create_self_signed_cert
 fetch_and_deploy_gh_release "privatebin" "PrivateBin/PrivateBin" "tarball"
 
-msg_info "Generating Universal SSL Certificate"
-mkdir -p /etc/ssl/privatebin
-$STD openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
-    -keyout /etc/ssl/privatebin/key.pem \
-    -out /etc/ssl/privatebin/cert.pem \
-    -subj "/CN=PrivateBin"
-msg_ok "Certificate Generated"
-
 msg_info "Configuring Environment"
 mkdir -p /opt/privatebin/data
 cp /opt/privatebin/cfg/conf.sample.php /opt/privatebin/cfg/conf.php
@@ -55,8 +48,8 @@ server {
     listen 443 ssl default_server;
     listen [::]:443 ssl default_server;
     
-    ssl_certificate /etc/ssl/privatebin/cert.pem;
-    ssl_certificate_key /etc/ssl/privatebin/key.pem;
+    ssl_certificate /etc/ssl/privatebin/privatebin.crt;
+    ssl_certificate_key /etc/ssl/privatebin/privatebin.key;
     
     root /opt/privatebin;
     index index.php;

install/recyclarr-install.sh

@@ -27,7 +27,7 @@ msg_ok "Configured Recyclarr"
 msg_info "Setting up Daily Sync Cron"
 cat <<EOF >/etc/cron.d/recyclarr
 # Run recyclarr sync daily
-@daily root recyclarr sync >> /root/.config/recyclarr/sync.log 2>&1
+@daily root /usr/local/bin/recyclarr sync >> /root/.config/recyclarr/sync.log 2>&1
 EOF
 chmod 644 /etc/cron.d/recyclarr
 msg_ok "Setup Daily Sync Cron"

install/tautulli-install.sh

@@ -14,20 +14,17 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y \
-  git \
-  pip \
-  python3 \
-  python3-dev \
-  python3-pip
-rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
+$STD apt install -y git
 msg_ok "Installed Dependencies"
 
+PYTHON_VERSION="3.13" setup_uv
+fetch_and_deploy_gh_release "Tautulli" "Tautulli/Tautulli" "tarball"
+
 msg_info "Installing Tautulli"
-cd /opt
-$STD git clone https://github.com/Tautulli/Tautulli.git
-$STD pip install -q -r /opt/Tautulli/requirements.txt
-$STD pip install pyopenssl
+cd /opt/Tautulli
+uv venv -q
+uv pip install -q -r requirements.txt
+uv pip install -q pyopenssl
 msg_ok "Installed Tautulli"
 
 msg_info "Creating Service"
@@ -41,7 +38,7 @@ WorkingDirectory=/opt/Tautulli/
 Restart=on-failure
 RestartSec=5
 Type=simple
-ExecStart=/usr/bin/python3 /opt/Tautulli/Tautulli.py
+ExecStart=/opt/Tautulli/.venv/bin/python3 /opt/Tautulli/Tautulli.py
 KillSignal=SIGINT
 TimeoutStopSec=20
 SyslogIdentifier=tautulli

misc/build.func

@@ -3743,12 +3743,9 @@ create_lxc_container() {
 
   msg_info "Searching for template '$TEMPLATE_SEARCH'"
 
-  # Build regex patterns outside awk/grep for clarity
-  SEARCH_PATTERN="^${TEMPLATE_SEARCH}"
-
   mapfile -t LOCAL_TEMPLATES < <(
     pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
-      awk -v search="${SEARCH_PATTERN}" -v pattern="${TEMPLATE_PATTERN}" '$1 ~ search && $1 ~ pattern {print $1}' |
+      awk -v search="${TEMPLATE_SEARCH}" -v pattern="${TEMPLATE_PATTERN}" '$1 ~ search && $1 ~ pattern {print $1}' |
       sed 's|.*/||' | sort -t - -k 2 -V
   )
 
@@ -3757,7 +3754,7 @@ create_lxc_container() {
   msg_ok "Template search completed"
 
   set +u
-  mapfile -t ONLINE_TEMPLATES < <(pveam available -section system 2>/dev/null | grep -E '\.(tar\.zst|tar\.xz|tar\.gz)$' | awk '{print $2}' | grep -E "${SEARCH_PATTERN}.*${TEMPLATE_PATTERN}" | sort -t - -k 2 -V 2>/dev/null || true)
+  mapfile -t ONLINE_TEMPLATES < <(pveam available -section system 2>/dev/null | grep -E '\.(tar\.zst|tar\.xz|tar\.gz)$' | awk '{print $2}' | grep -E "^${TEMPLATE_SEARCH}.*${TEMPLATE_PATTERN}" | sort -t - -k 2 -V 2>/dev/null || true)
   set -u
 
   ONLINE_TEMPLATE=""
@@ -3806,13 +3803,12 @@ create_lxc_container() {
       if [[ "$choice" =~ ^[0-9]+$ ]] && [[ "$choice" -ge 1 ]] && [[ "$choice" -le ${#AVAILABLE_VERSIONS[@]} ]]; then
         PCT_OSVERSION="${AVAILABLE_VERSIONS[$((choice - 1))]}"
         TEMPLATE_SEARCH="${PCT_OSTYPE}-${PCT_OSVERSION}"
-        SEARCH_PATTERN="^${TEMPLATE_SEARCH}-"
 
         mapfile -t ONLINE_TEMPLATES < <(
           pveam available -section system 2>/dev/null |
             grep -E '\.(tar\.zst|tar\.xz|tar\.gz)$' |
-            awk -F'\t' '{print $1}' |
-            grep -E "${SEARCH_PATTERN}.*${TEMPLATE_PATTERN}" |
+            awk '{print $2}' |
+            grep -E "^${TEMPLATE_SEARCH}-.*${TEMPLATE_PATTERN}" |
             sort -t - -k 2 -V 2>/dev/null || true
         )
 
@@ -3873,18 +3869,17 @@ create_lxc_container() {
 
           # Retry template search with new version
           TEMPLATE_SEARCH="${PCT_OSTYPE}-${PCT_OSVERSION:-}"
-          SEARCH_PATTERN="^${TEMPLATE_SEARCH}-"
 
           mapfile -t LOCAL_TEMPLATES < <(
             pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
-              awk -v search="${SEARCH_PATTERN}" -v pattern="${TEMPLATE_PATTERN}" '$1 ~ search && $1 ~ pattern {print $1}' |
+              awk -v search="${TEMPLATE_SEARCH}-" -v pattern="${TEMPLATE_PATTERN}" '$1 ~ search && $1 ~ pattern {print $1}' |
               sed 's|.*/||' | sort -t - -k 2 -V
           )
           mapfile -t ONLINE_TEMPLATES < <(
             pveam available -section system 2>/dev/null |
               grep -E '\.(tar\.zst|tar\.xz|tar\.gz)$' |
-              awk -F'\t' '{print $1}' |
-              grep -E "${SEARCH_PATTERN}.*${TEMPLATE_PATTERN}" |
+              awk '{print $2}' |
+              grep -E "^${TEMPLATE_SEARCH}-.*${TEMPLATE_PATTERN}" |
               sort -t - -k 2 -V 2>/dev/null || true
           )
           ONLINE_TEMPLATE=""