Add PostGIS extension check to Reitti update_script

Automatically enable PostGIS extension on existing installations if missing. Checks if extension is already enabled before attempting to create it. Fixes existing Reitti installations that were created before PostGIS was added to the initial setup (commit b6312b87d). Users no longer need to manually run 'CREATE EXTENSION postgis;'
Add idempotency check for Debian 13 certbot fix
2026-02-05 04:43:26 +01:00 · 2026-01-05 15:15:59 +01:00 · 2026-01-05 15:00:25 +01:00 · 2026-01-05 14:59:30 +01:00 · 2026-01-05 14:57:40 +01:00 · 2026-01-05 14:56:49 +01:00
7 changed files with 119 additions and 63 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,12 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 ## 2026-01-05

+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Upgrade evcc LXC to Debian 13 [@heinemannj](https://github.com/heinemannj) ([#10548](https://github.com/community-scripts/ProxmoxVE/pull/10548))
+
 ## 2026-01-04

 ### 🚀 Updated Scripts
--- a/ct/evcc.sh
+++ b/ct/evcc.sh
@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"

 header_info "$APP"
--- a/ct/nginxproxymanager.sh
+++ b/ct/nginxproxymanager.sh
@@ -157,18 +157,39 @@ EOF
  [ -f /etc/apt/trusted.gpg.d/openresty-archive-keyring.gpg ] && rm -f /etc/apt/trusted.gpg.d/openresty-archive-keyring.gpg
  [ -f /etc/apt/sources.list.d/openresty.list ] && rm -f /etc/apt/sources.list.d/openresty.list
  [ ! -f /etc/apt/trusted.gpg.d/openresty.gpg ] && curl -fsSL https://openresty.org/package/pubkey.gpg | gpg --dearmor --yes -o /etc/apt/trusted.gpg.d/openresty.gpg
-  [ ! -f /etc/apt/sources.list.d/openresty.sources ] && cat <<'EOF' >/etc/apt/sources.list.d/openresty.sources
+  if [ ! -f /etc/apt/sources.list.d/openresty.sources ]; then
+    DEBIAN_VERSION=$(grep -E '^VERSION_CODENAME=' /etc/os-release | cut -d'=' -f2)
+    # Openresty only has bookworm, not trixie - map newer versions to bookworm
+    case "$DEBIAN_VERSION" in
+      trixie|sid) OPENRESTY_SUITE="bookworm" ;;
+      *) OPENRESTY_SUITE="$DEBIAN_VERSION" ;;
+    esac
+    cat <<EOF >/etc/apt/sources.list.d/openresty.sources
 Types: deb
 URIs: http://openresty.org/package/debian/
-Suites: bookworm
+Suites: ${OPENRESTY_SUITE}
 Components: openresty
 Signed-By: /etc/apt/trusted.gpg.d/openresty.gpg
 EOF
+  fi
  $STD apt update
  $STD apt -y install openresty
  if [ -d /opt/certbot ]; then
    $STD /opt/certbot/bin/pip install --upgrade pip setuptools wheel
    $STD /opt/certbot/bin/pip install --upgrade certbot certbot-dns-cloudflare
+    
+    # Fix for Debian 13 Trixie - certbot-dns-multi needed to prevent "API isn't healthy" error
+    if [[ $(grep -E '^VERSION_ID=' /etc/os-release) == *"13"* ]]; then
+      if ! /opt/certbot/bin/pip list 2>/dev/null | grep -q certbot-dns-multi; then
+        msg_info "Applying Debian 13 Certbot Fix"
+        $STD apt-get install -y golang build-essential git
+        $STD /opt/certbot/bin/pip install --no-cache-dir setuptools-golang==2.9.0
+        export CGO_ENABLED=1
+        export GO111MODULE=on
+        $STD /opt/certbot/bin/pip install --no-build-isolation --no-cache-dir certbot-dns-multi
+        msg_ok "Applied Debian 13 Certbot Fix"
+      fi
+    fi
  fi
  msg_ok "Updated Certbot"

--- a/ct/reitti.sh
+++ b/ct/reitti.sh
@@ -28,6 +28,15 @@ function update_script() {
    exit
  fi

+  # Enable PostGIS extension if not already enabled
+  if systemctl is-active --quiet postgresql; then
+    if ! sudo -u postgres psql -d reitti -tAc "SELECT 1 FROM pg_extension WHERE extname='postgis'" 2>/dev/null | grep -q 1; then
+      msg_info "Enabling PostGIS extension"
+      sudo -u postgres psql -d reitti -c "CREATE EXTENSION IF NOT EXISTS postgis;" &>/dev/null
+      msg_ok "Enabled PostGIS extension"
+    fi
+  fi
+
  if [ ! -d /var/cache/nginx/tiles ]; then
    msg_info "Installing Nginx Tile Cache"
    mkdir -p /var/cache/nginx/tiles
--- a/frontend/public/json/evcc.json
+++ b/frontend/public/json/evcc.json
@@ -23,7 +23,7 @@
                "ram": 1024,
                "hdd": 4,
                "os": "debian",
-                "version": "12"
+                "version": "13"
            }
        }
    ],
--- a/frontend/public/json/versions.json
+++ b/frontend/public/json/versions.json
@@ -1,9 +1,64 @@
 [
+  {
+    "name": "theonedev/onedev",
+    "version": "v14.0.2",
+    "date": "2026-01-05T10:59:42Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v11.1.2",
+    "date": "2025-12-17T09:26:24Z"
+  },
+  {
+    "name": "maxdorninger/MediaManager",
+    "version": "v1.12.1",
+    "date": "2026-01-05T09:06:22Z"
+  },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "develop-20251228",
+    "date": "2025-12-28T05:59:54Z"
+  },
  {
    "name": "morpheus65535/bazarr",
    "version": "v1.5.4",
    "date": "2026-01-04T22:41:00Z"
  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.726",
+    "date": "2026-01-05T06:02:39Z"
+  },
+  {
+    "name": "jason5ng32/MyIP",
+    "version": "v5.2.0",
+    "date": "2026-01-05T05:56:57Z"
+  },
+  {
+    "name": "booklore-app/booklore",
+    "version": "v1.16.5",
+    "date": "2026-01-05T02:26:15Z"
+  },
+  {
+    "name": "louislam/uptime-kuma",
+    "version": "2.0.2",
+    "date": "2025-10-22T17:03:54Z"
+  },
+  {
+    "name": "hyperion-project/hyperion.ng",
+    "version": "2.1.1",
+    "date": "2025-06-14T17:45:06Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.1.0",
+    "date": "2025-11-23T12:13:34Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.5.2",
+    "date": "2026-01-05T00:27:03Z"
+  },
  {
    "name": "Part-DB/Part-DB-server",
    "version": "v2.4.0",
@@ -24,21 +79,11 @@
    "version": "v0.13.0",
    "date": "2026-01-04T19:42:58Z"
  },
-  {
-    "name": "booklore-app/booklore",
-    "version": "v1.16.4",
-    "date": "2026-01-04T18:36:03Z"
-  },
  {
    "name": "actualbudget/actual",
    "version": "v26.1.0",
    "date": "2026-01-04T17:07:30Z"
  },
-  {
-    "name": "maxdorninger/MediaManager",
-    "version": "v1.12.0",
-    "date": "2026-01-04T14:04:01Z"
-  },
  {
    "name": "dedicatedcode/reitti",
    "version": "v3.1.0",
@@ -54,16 +99,6 @@
    "version": "v1.0.13",
    "date": "2026-01-04T12:59:19Z"
  },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.717",
-    "date": "2026-01-04T05:59:17Z"
-  },
-  {
-    "name": "theonedev/onedev",
-    "version": "v14.0.1",
-    "date": "2026-01-04T05:40:48Z"
-  },
  {
    "name": "tobychui/zoraxy",
    "version": "v3.3.1-rc1",
@@ -74,16 +109,6 @@
    "version": "v0.16.0",
    "date": "2026-01-04T01:18:19Z"
  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.1.0",
-    "date": "2025-11-23T12:13:34Z"
-  },
-  {
-    "name": "jeedom/core",
-    "version": "4.5.2",
-    "date": "2026-01-04T00:27:05Z"
-  },
  {
    "name": "nickheyer/discopanel",
    "version": "v1.0.19",
@@ -166,8 +191,8 @@
  },
  {
    "name": "livebook-dev/livebook",
-    "version": "nightly",
-    "date": "2026-01-02T12:46:49Z"
+    "version": "v0.18.2",
+    "date": "2025-12-15T19:17:42Z"
  },
  {
    "name": "gotify/server",
@@ -179,11 +204,6 @@
    "version": "n8n@2.1.5",
    "date": "2026-01-02T09:10:15Z"
  },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "develop-20251228",
-    "date": "2025-12-28T05:59:54Z"
-  },
  {
    "name": "alexta69/metube",
    "version": "2026.01.02",
@@ -344,11 +364,6 @@
    "version": "2.45.0",
    "date": "2025-12-28T06:32:47Z"
  },
-  {
-    "name": "hyperion-project/hyperion.ng",
-    "version": "2.1.1",
-    "date": "2025-06-14T17:45:06Z"
-  },
  {
    "name": "laurent22/joplin",
    "version": "server-v3.5.2",
@@ -534,11 +549,6 @@
    "version": "v1.1.10",
    "date": "2025-12-21T13:13:01Z"
  },
-  {
-    "name": "jason5ng32/MyIP",
-    "version": "v5.1.1",
-    "date": "2025-12-21T12:59:32Z"
-  },
  {
    "name": "pocketbase/pocketbase",
    "version": "v0.35.0",
@@ -569,11 +579,6 @@
    "version": "v11.9.1",
    "date": "2025-12-20T09:14:25Z"
  },
-  {
-    "name": "louislam/uptime-kuma",
-    "version": "2.0.2",
-    "date": "2025-10-22T17:03:54Z"
-  },
  {
    "name": "pelican-dev/panel",
    "version": "v1.0.0-beta30",
@@ -609,11 +614,6 @@
    "version": "v15.0.0-dev",
    "date": "2025-12-19T11:43:47Z"
  },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v11.1.2",
-    "date": "2025-12-17T09:26:24Z"
-  },
  {
    "name": "jhuckaby/Cronicle",
    "version": "v0.9.102",
--- a/install/nginxproxymanager-install.sh
+++ b/install/nginxproxymanager-install.sh
@@ -36,15 +36,35 @@ msg_info "Setting up Certbot"
 $STD python3 -m venv /opt/certbot
 $STD /opt/certbot/bin/pip install --upgrade pip setuptools wheel
 $STD /opt/certbot/bin/pip install certbot certbot-dns-cloudflare
+
+# Fix for Debian 13 Trixie - certbot-dns-multi needed to prevent "API isn't healthy" error
+if [[ $(grep -E '^VERSION_ID=' /etc/os-release) == *"13"* ]]; then
+  if ! /opt/certbot/bin/pip list 2>/dev/null | grep -q certbot-dns-multi; then
+    msg_info "Applying Debian 13 Certbot Fix"
+    $STD apt-get install -y golang build-essential git
+    $STD /opt/certbot/bin/pip install --no-cache-dir setuptools-golang==2.9.0
+    export CGO_ENABLED=1
+    export GO111MODULE=on
+    $STD /opt/certbot/bin/pip install --no-build-isolation --no-cache-dir certbot-dns-multi
+    msg_ok "Applied Debian 13 Certbot Fix"
+  fi
+fi
+
 ln -sf /opt/certbot/bin/certbot /usr/local/bin/certbot
 msg_ok "Set up Certbot"

 msg_info "Installing Openresty"
 curl -fsSL "https://openresty.org/package/pubkey.gpg" | gpg --dearmor -o /etc/apt/trusted.gpg.d/openresty.gpg
-cat <<'EOF' >/etc/apt/sources.list.d/openresty.sources
+DEBIAN_VERSION=$(grep -E '^VERSION_CODENAME=' /etc/os-release | cut -d'=' -f2)
+# Openresty only has bookworm, not trixie - map newer versions to bookworm
+case "$DEBIAN_VERSION" in
+  trixie|sid) OPENRESTY_SUITE="bookworm" ;;
+  *) OPENRESTY_SUITE="$DEBIAN_VERSION" ;;
+esac
+cat <<EOF >/etc/apt/sources.list.d/openresty.sources
 Types: deb
 URIs: http://openresty.org/package/debian/
-Suites: bookworm
+Suites: ${OPENRESTY_SUITE}
 Components: openresty
 Signed-By: /etc/apt/trusted.gpg.d/openresty.gpg
 EOF
Author	SHA1	Message	Date
CanbiZ	6f358d7e5d	Add PostGIS extension check to Reitti update_script Automatically enable PostGIS extension on existing installations if missing. Checks if extension is already enabled before attempting to create it. Fixes existing Reitti installations that were created before PostGIS was added to the initial setup (commit `b6312b87d`). Users no longer need to manually run 'CREATE EXTENSION postgis;'	2026-01-05 15:15:59 +01:00
CanbiZ	e44a8e8af8	Add idempotency check for Debian 13 certbot fix Only apply certbot-dns-multi fix if not already installed. Checks pip list for certbot-dns-multi before installing golang deps. Prevents unnecessary reinstallation on repeated update runs.	2026-01-05 15:00:25 +01:00
CanbiZ	b42f9fabe1	Fix NPM API health issues on Debian 13 with certbot-dns-multi On Debian 13 Trixie, NPM shows 'API isn't healthy' after upgrade. Install certbot-dns-multi with golang dependencies to fix this. Changes: - Install golang, build-essential, git on Debian 13 - Install setuptools-golang==2.9.0 in certbot venv - Set CGO_ENABLED=1 and GO111MODULE=on for pip install - Install certbot-dns-multi with --no-build-isolation flag - Applied to both fresh install and update_script() Credit: @i4mr000t and @CrazyWolf13 Source: https://v64.tech/t/nginx-proxy-manager-dnschallenge-ipv64-debian-13-fail/4177/7 Fixes: #7489 - NPM Web UI broken after Debian 13 upgrade	2026-01-05 14:59:30 +01:00
CanbiZ	259f14b8e9	Fix openresty suite mapping for Debian 13 Openresty doesn't have trixie packages yet, only bookworm. Map trixie and sid to use bookworm packages which are compatible. Available openresty suites: bookworm, bullseye, buster, stretch, jessie Fixes 404 errors when installing/updating on Debian 13 Trixie	2026-01-05 14:57:40 +01:00
CanbiZ	0fb5fc5ce0	Fix Nginx Proxy Manager for Debian 13 Trixie - Detect Debian version dynamically from /etc/os-release - Replace hardcoded 'bookworm' with VERSION_CODENAME in openresty sources - Fixes both install and update_script() functions - Ensures openresty repository matches container's Debian version Fixes: Nginx Proxy Manager update fails on Debian 13 with 404 errors Previously: Only worked on Debian 12 Bookworm due to hardcoded suite name	2026-01-05 14:56:49 +01:00
community-scripts-pr-app[bot]	32927d903e	Update versions.json (#10553 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-05 13:07:43 +01:00
community-scripts-pr-app[bot]	66808d03a8	Update CHANGELOG.md (#10550 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-05 08:44:36 +00:00
Joerg Heinemann	b59e04fa94	Upgrade evcc LXC to Debian 13 (#10548 )	2026-01-05 09:44:15 +01:00