Update CHANGELOG.md (#10893)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,8 +10,178 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2026-01-18
+
+## 2026-01-17
+
+### 🆕 New Scripts
+
+  - TRIP ([#10864](https://github.com/community-scripts/ProxmoxVE/pull/10864))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix sonarqube update version info (#10870) [@Karlito83](https://github.com/Karlito83) ([#10871](https://github.com/community-scripts/ProxmoxVE/pull/10871))
+    - WGDashboard: Update repo URL [@tremor021](https://github.com/tremor021) ([#10872](https://github.com/community-scripts/ProxmoxVE/pull/10872))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - Disable Palmer [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#10889](https://github.com/community-scripts/ProxmoxVE/pull/10889))
+
+## 2026-01-16
+
+### 🆕 New Scripts
+
+  - Flatnotes ([#10857](https://github.com/community-scripts/ProxmoxVE/pull/10857))
+- Unifi OS Server ([#10856](https://github.com/community-scripts/ProxmoxVE/pull/10856))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Jotty: increase RAM; cap heap size at 3GB during build [@vhsdream](https://github.com/vhsdream) ([#10868](https://github.com/community-scripts/ProxmoxVE/pull/10868))
+    - SnowShare: Increase default resources [@TuroYT](https://github.com/TuroYT) ([#10865](https://github.com/community-scripts/ProxmoxVE/pull/10865))
+    - postgresql: name of sources file fixed (update check) [@JamborJan](https://github.com/JamborJan) ([#10854](https://github.com/community-scripts/ProxmoxVE/pull/10854))
+    - immich: use dpkg-query to get intel-opencl-icd version [@MickLesk](https://github.com/MickLesk) ([#10848](https://github.com/community-scripts/ProxmoxVE/pull/10848))
+    - domain-monitor: fix: cron user [@CrazyWolf13](https://github.com/CrazyWolf13) ([#10846](https://github.com/community-scripts/ProxmoxVE/pull/10846))
+    - pihole/unbound: create unbound config before apt install to prevent port conflicts [@MickLesk](https://github.com/MickLesk) ([#10839](https://github.com/community-scripts/ProxmoxVE/pull/10839))
+    - zammad: use ln -sf to avoid failure when symlink exists [@MickLesk](https://github.com/MickLesk) ([#10840](https://github.com/community-scripts/ProxmoxVE/pull/10840))
+
+### ❔ Uncategorized
+
+  - qui: fix: category [@CrazyWolf13](https://github.com/CrazyWolf13) ([#10847](https://github.com/community-scripts/ProxmoxVE/pull/10847))
+
+## 2026-01-15
+
+### 🆕 New Scripts
+
+  - Qui ([#10829](https://github.com/community-scripts/ProxmoxVE/pull/10829))
+
+### 🚀 Updated Scripts
+
+  - #### ✨ New Features
+
+    - Refactor: FreshRSS + Bump to Debian 13 [@MickLesk](https://github.com/MickLesk) ([#10824](https://github.com/community-scripts/ProxmoxVE/pull/10824))
+
+## 2026-01-14
+
+### 🆕 New Scripts
+
+  - Kutt ([#10812](https://github.com/community-scripts/ProxmoxVE/pull/10812))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Switch Ollama install to .tar.zst and add zstd dependency [@MickLesk](https://github.com/MickLesk) ([#10814](https://github.com/community-scripts/ProxmoxVE/pull/10814))
+    - Immich: Install libde265-dev from Debian Testing [@vhsdream](https://github.com/vhsdream) ([#10810](https://github.com/community-scripts/ProxmoxVE/pull/10810))
+    - nginxproxymanager: allow updates now the build is fixed [@durzo](https://github.com/durzo) ([#10796](https://github.com/community-scripts/ProxmoxVE/pull/10796))
+    - Fixed Apache Guacamole installer [@horvatbenjamin](https://github.com/horvatbenjamin) ([#10798](https://github.com/community-scripts/ProxmoxVE/pull/10798))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: Improve NVIDIA GPU setup (5000x Series) [@MickLesk](https://github.com/MickLesk) ([#10807](https://github.com/community-scripts/ProxmoxVE/pull/10807))
+
+### 🧰 Tools
+
+  - Fix whiptail dialog hanging in Proxmox web console [@comk22](https://github.com/comk22) ([#10794](https://github.com/community-scripts/ProxmoxVE/pull/10794))
+
+### 🌐 Website
+
+  - #### 🐞 Bug Fixes
+
+    - Add search filtering to CommandDialog for improved script search functionality [@BramSuurdje](https://github.com/BramSuurdje) ([#10800](https://github.com/community-scripts/ProxmoxVE/pull/10800))
+
+## 2026-01-13
+
+### 🆕 New Scripts
+
+  - Investbrain ([#10774](https://github.com/community-scripts/ProxmoxVE/pull/10774))
+- Fladder ([#10768](https://github.com/community-scripts/ProxmoxVE/pull/10768))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: Fix Intel version check; install legacy Intel packages during new install [@vhsdream](https://github.com/vhsdream) ([#10787](https://github.com/community-scripts/ProxmoxVE/pull/10787))
+    - Openwrt: Remove default VLAN for LAN [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#10782](https://github.com/community-scripts/ProxmoxVE/pull/10782))
+    - Refactor: Joplin Server [@tremor021](https://github.com/tremor021) ([#10769](https://github.com/community-scripts/ProxmoxVE/pull/10769))
+    - Fix Zammad nginx configuration causing installation failure [@Copilot](https://github.com/Copilot) ([#10757](https://github.com/community-scripts/ProxmoxVE/pull/10757))
+
+  - #### 🔧 Refactor
+
+    - Backrest: Bump to Trixie [@tremor021](https://github.com/tremor021) ([#10758](https://github.com/community-scripts/ProxmoxVE/pull/10758))
+    - Refactor: Caddy [@tremor021](https://github.com/tremor021) ([#10759](https://github.com/community-scripts/ProxmoxVE/pull/10759))
+    - Refactor: Leantime [@tremor021](https://github.com/tremor021) ([#10760](https://github.com/community-scripts/ProxmoxVE/pull/10760))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - update_lxcs.sh: Add the option to skip stopped LXC [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#10783](https://github.com/community-scripts/ProxmoxVE/pull/10783))
+
+## 2026-01-12
+
+### 🆕 New Scripts
+
+  - Jellystat ([#10628](https://github.com/community-scripts/ProxmoxVE/pull/10628))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - InfluxSB: fix If / fi [@chrnie](https://github.com/chrnie) ([#10753](https://github.com/community-scripts/ProxmoxVE/pull/10753))
+    - Cockpit: Downgrade to Debian 12 Bookworm (45Drives Issue) [@MickLesk](https://github.com/MickLesk) ([#10717](https://github.com/community-scripts/ProxmoxVE/pull/10717))
+
+  - #### ✨ New Features
+
+    - InfluxDB: add setup for influxdb v3 [@victorlap](https://github.com/victorlap) ([#10736](https://github.com/community-scripts/ProxmoxVE/pull/10736))
+    - Apache Guacamole: add schema upgrades and extension updates [@MickLesk](https://github.com/MickLesk) ([#10746](https://github.com/community-scripts/ProxmoxVE/pull/10746))
+    - Apache Tomcat: update support and refactor install script + debian 13 [@MickLesk](https://github.com/MickLesk) ([#10739](https://github.com/community-scripts/ProxmoxVE/pull/10739))
+    - Apache Guacamole: Function Bump + update_script [@MickLesk](https://github.com/MickLesk) ([#10728](https://github.com/community-scripts/ProxmoxVE/pull/10728))
+    - Apache CouchDB: bump to debian 13 and add update support [@MickLesk](https://github.com/MickLesk) ([#10721](https://github.com/community-scripts/ProxmoxVE/pull/10721))
+    - Apache Cassandra: bump to debian 13 and add update support [@MickLesk](https://github.com/MickLesk) ([#10720](https://github.com/community-scripts/ProxmoxVE/pull/10720))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Booklore [@MickLesk](https://github.com/MickLesk) ([#10742](https://github.com/community-scripts/ProxmoxVE/pull/10742))
+    - Bump Argus to Debian 13 [@MickLesk](https://github.com/MickLesk) ([#10718](https://github.com/community-scripts/ProxmoxVE/pull/10718))
+    - Refactor Docker/Dockge & Bump to Debian 13 [@MickLesk](https://github.com/MickLesk) ([#10719](https://github.com/community-scripts/ProxmoxVE/pull/10719))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: remove duplicated pve_version in advanced installs [@MickLesk](https://github.com/MickLesk) ([#10743](https://github.com/community-scripts/ProxmoxVE/pull/10743))
+
+  - #### ✨ New Features
+
+    - core: add storage validation & fix GB/MB display [@MickLesk](https://github.com/MickLesk) ([#10745](https://github.com/community-scripts/ProxmoxVE/pull/10745))
+    - core: validate container ID before pct create to prevent failures [@MickLesk](https://github.com/MickLesk) ([#10729](https://github.com/community-scripts/ProxmoxVE/pull/10729))
+
+  - #### 🔧 Refactor
+
+    - Enforce non-interactive apt mode in DB setup scripts [@MickLesk](https://github.com/MickLesk) ([#10714](https://github.com/community-scripts/ProxmoxVE/pull/10714))
+
 ## 2026-01-11
 
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix Invoice Ninja Error 500 by restoring file ownership after artisan commands [@Copilot](https://github.com/Copilot) ([#10709](https://github.com/community-scripts/ProxmoxVE/pull/10709))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Infisical [@tremor021](https://github.com/tremor021) ([#10693](https://github.com/community-scripts/ProxmoxVE/pull/10693))
+    - Refactor: HortusFox [@tremor021](https://github.com/tremor021) ([#10697](https://github.com/community-scripts/ProxmoxVE/pull/10697))
+    - Refactor: Homer [@tremor021](https://github.com/tremor021) ([#10698](https://github.com/community-scripts/ProxmoxVE/pull/10698))
+
 ## 2026-01-10
 
 ### 🚀 Updated Scripts

ct/apache-cassandra.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -20,15 +20,19 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -f /etc/systemd/system/cassandra.service ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    msg_error "Currently we don't provide an update function for this ${APP}."
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /etc/init.d/cassandra ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+  msg_info "Updating Apache Cassandra"
+  $STD apt update
+  $STD apt install -y --only-upgrade cassandra cassandra-tools
+  msg_ok "Updated Apache Cassandra"
+  msg_ok "Updated successfully!"
+  exit
 }
 
 start

ct/apache-couchdb.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-10}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -20,15 +20,19 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -f /etc/systemd/system/couchdb.service ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    msg_error "Currently we don't provide an update function for this ${APP}."
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /usr/lib/systemd/system/couchdb.service ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+  msg_info "Updating Apache CouchDB"
+  $STD apt-get update
+  $STD apt-get install -y --only-upgrade couchdb
+  msg_ok "Updated Apache CouchDB"
+  msg_ok "Updated successfully!"
+  exit
 }
 
 start

ct/apache-guacamole.sh

@@ -27,8 +27,196 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  setup_mariadb
-  msg_error "Currently we don't provide an update function for this ${APP}."
+
+  # Fetch latest versions
+  LATEST_TOMCAT=$(curl -fsSL https://dlcdn.apache.org/tomcat/tomcat-9/ | grep -oP '(?<=href=")v[^"/]+(?=/")' | sed 's/^v//' | sort -V | tail -n1)
+  LATEST_SERVER=$(curl -fsSL https://api.github.com/repos/apache/guacamole-server/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
+  LATEST_CLIENT=$(curl -fsSL https://api.github.com/repos/apache/guacamole-client/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
+  LATEST_MYSQL_CONNECTOR=$(curl -fsSL "https://repo1.maven.org/maven2/com/mysql/mysql-connector-j/maven-metadata.xml" | grep -oP '<latest>\K[^<]+')
+
+  # Read current versions from ~/.guacamole_*
+  CURRENT_TOMCAT=$(cat ~/.guacamole_tomcat 2>/dev/null || echo "unknown")
+  CURRENT_SERVER=$(cat ~/.guacamole_server 2>/dev/null || echo "unknown")
+  CURRENT_CLIENT=$(cat ~/.guacamole_client 2>/dev/null || echo "unknown")
+  CURRENT_MYSQL_CONNECTOR=$(cat ~/.guacamole_mysql_connector 2>/dev/null || echo "unknown")
+
+  UPDATE_NEEDED=false
+  [[ "$CURRENT_TOMCAT" != "$LATEST_TOMCAT" ]] && UPDATE_NEEDED=true
+  [[ "$CURRENT_SERVER" != "$LATEST_SERVER" ]] && UPDATE_NEEDED=true
+  [[ "$CURRENT_CLIENT" != "$LATEST_CLIENT" ]] && UPDATE_NEEDED=true
+  [[ "$CURRENT_MYSQL_CONNECTOR" != "$LATEST_MYSQL_CONNECTOR" ]] && UPDATE_NEEDED=true
+
+  if [[ "$UPDATE_NEEDED" == "false" ]]; then
+    msg_ok "All components are up to date"
+    exit
+  fi
+
+  JAVA_VERSION="11" setup_java
+
+  msg_info "Stopping Services"
+  systemctl stop guacd tomcat
+  msg_ok "Stopped Services"
+
+  # Update Tomcat
+  if [[ "$CURRENT_TOMCAT" != "$LATEST_TOMCAT" ]]; then
+    msg_info "Updating Tomcat (${CURRENT_TOMCAT} → ${LATEST_TOMCAT})"
+    cp -a /opt/apache-guacamole/tomcat9/conf /tmp/tomcat-conf-backup
+    curl -fsSL "https://dlcdn.apache.org/tomcat/tomcat-9/v${LATEST_TOMCAT}/bin/apache-tomcat-${LATEST_TOMCAT}.tar.gz" | tar -xz -C /opt/apache-guacamole/tomcat9 --strip-components=1 --exclude='conf/*'
+    cp -a /tmp/tomcat-conf-backup/* /opt/apache-guacamole/tomcat9/conf/
+    rm -rf /tmp/tomcat-conf-backup
+    chown -R tomcat: /opt/apache-guacamole/tomcat9
+    echo "${LATEST_TOMCAT}" >~/.guacamole_tomcat
+    msg_ok "Updated Tomcat"
+  else
+    msg_ok "Tomcat already up to date (${CURRENT_TOMCAT})"
+  fi
+
+  # Update Guacamole Server
+  if [[ "$CURRENT_SERVER" != "$LATEST_SERVER" ]]; then
+    msg_info "Updating Guacamole Server (${CURRENT_SERVER} → ${LATEST_SERVER})"
+    rm -rf /opt/apache-guacamole/server/*
+    curl -fsSL "https://api.github.com/repos/apache/guacamole-server/tarball/refs/tags/${LATEST_SERVER}" | tar -xz --strip-components=1 -C /opt/apache-guacamole/server
+    cd /opt/apache-guacamole/server
+    export CPPFLAGS="-Wno-error=deprecated-declarations"
+    $STD autoreconf -fi
+    $STD ./configure --with-init-dir=/etc/init.d --enable-allow-freerdp-snapshots
+    $STD make
+    $STD make install
+    $STD ldconfig
+    echo "${LATEST_SERVER}" >~/.guacamole_server
+    msg_ok "Updated Guacamole Server"
+
+    # Auth JDBC follows server version
+    msg_info "Updating Guacamole Auth JDBC"
+    rm -f /etc/guacamole/extensions/guacamole-auth-jdbc-mysql-*.jar
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_SERVER}/binary/guacamole-auth-jdbc-${LATEST_SERVER}.tar.gz" -o "/tmp/guacamole-auth-jdbc.tar.gz"
+    $STD tar -xf /tmp/guacamole-auth-jdbc.tar.gz -C /tmp
+    mv /tmp/guacamole-auth-jdbc-"${LATEST_SERVER}"/mysql/guacamole-auth-jdbc-mysql-"${LATEST_SERVER}".jar /etc/guacamole/extensions/
+    rm -rf /tmp/guacamole-auth-jdbc*
+    echo "${LATEST_SERVER}" >~/.guacamole_auth_jdbc
+    msg_ok "Updated Guacamole Auth JDBC"
+  else
+    msg_ok "Guacamole Server already up to date (${CURRENT_SERVER})"
+  fi
+
+  # Update Guacamole Client
+  if [[ "$CURRENT_CLIENT" != "$LATEST_CLIENT" ]]; then
+    msg_info "Updating Guacamole Client (${CURRENT_CLIENT} → ${LATEST_CLIENT})"
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_CLIENT}/binary/guacamole-${LATEST_CLIENT}.war" -o "/opt/apache-guacamole/tomcat9/webapps/guacamole.war"
+    echo "${LATEST_CLIENT}" >~/.guacamole_client
+    msg_ok "Updated Guacamole Client"
+  else
+    msg_ok "Guacamole Client already up to date (${CURRENT_CLIENT})"
+  fi
+
+  # Update MySQL Connector
+  if [[ "$CURRENT_MYSQL_CONNECTOR" != "$LATEST_MYSQL_CONNECTOR" ]]; then
+    msg_info "Updating MySQL Connector (${CURRENT_MYSQL_CONNECTOR} → ${LATEST_MYSQL_CONNECTOR})"
+    curl -fsSL "https://repo1.maven.org/maven2/com/mysql/mysql-connector-j/${LATEST_MYSQL_CONNECTOR}/mysql-connector-j-${LATEST_MYSQL_CONNECTOR}.jar" -o "/etc/guacamole/lib/mysql-connector-j.jar"
+    echo "${LATEST_MYSQL_CONNECTOR}" >~/.guacamole_mysql_connector
+    msg_ok "Updated MySQL Connector"
+  else
+    msg_ok "MySQL Connector already up to date (${CURRENT_MYSQL_CONNECTOR})"
+  fi
+
+  # Apply SQL Schema Upgrades (CRITICAL!)
+  if [[ "$CURRENT_SERVER" != "$LATEST_SERVER" ]]; then
+    msg_info "Applying MySQL Schema Upgrades"
+    cd /tmp/guacamole-auth-jdbc-"${LATEST_SERVER}"/mysql/schema/upgrade/
+    UPGRADE_FILES=($(ls -1 upgrade-pre-*.sql 2>/dev/null | sort -V))
+
+    if [[ ${#UPGRADE_FILES[@]} -gt 0 ]]; then
+      for SQL_FILE in "${UPGRADE_FILES[@]}"; do
+        FILE_VERSION=$(echo ${SQL_FILE} | grep -oP 'upgrade-pre-\K[0-9\.]+(?=\.)')
+        # Apply upgrade if file version is newer than current but older/equal to target
+        if [[ $(echo -e "${FILE_VERSION}\n${CURRENT_SERVER}" | sort -V | head -n1) == "${CURRENT_SERVER}" && "${FILE_VERSION}" != "${CURRENT_SERVER}" ]]; then
+          msg_info "Applying schema patch: ${SQL_FILE}"
+          mysql -u root guacamole_db <"${SQL_FILE}" 2>/dev/null
+          if [[ $? -eq 0 ]]; then
+            msg_ok "Applied ${SQL_FILE}"
+          else
+            msg_warn "Failed to apply ${SQL_FILE} (may already be applied)"
+          fi
+        fi
+      done
+    fi
+    msg_ok "MySQL Schema updated"
+  fi
+
+  # Check and upgrade optional extensions
+  # TOTP Extension
+  if [[ -f /etc/guacamole/extensions/guacamole-auth-totp-*.jar ]]; then
+    msg_info "Updating TOTP Extension"
+    rm -f /etc/guacamole/extensions/guacamole-auth-totp-*.jar
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_SERVER}/binary/guacamole-auth-totp-${LATEST_SERVER}.tar.gz" -o "/tmp/guacamole-auth-totp.tar.gz"
+    $STD tar -xf /tmp/guacamole-auth-totp.tar.gz -C /tmp
+    mv /tmp/guacamole-auth-totp-"${LATEST_SERVER}"/guacamole-auth-totp-"${LATEST_SERVER}".jar /etc/guacamole/extensions/
+    chmod 664 /etc/guacamole/extensions/guacamole-auth-totp-"${LATEST_SERVER}".jar
+    rm -rf /tmp/guacamole-auth-totp*
+    msg_ok "Updated TOTP Extension"
+  fi
+
+  # DUO Extension
+  if [[ -f /etc/guacamole/extensions/guacamole-auth-duo-*.jar ]]; then
+    msg_info "Updating DUO Extension"
+    rm -f /etc/guacamole/extensions/guacamole-auth-duo-*.jar
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_SERVER}/binary/guacamole-auth-duo-${LATEST_SERVER}.tar.gz" -o "/tmp/guacamole-auth-duo.tar.gz"
+    $STD tar -xf /tmp/guacamole-auth-duo.tar.gz -C /tmp
+    mv /tmp/guacamole-auth-duo-"${LATEST_SERVER}"/guacamole-auth-duo-"${LATEST_SERVER}".jar /etc/guacamole/extensions/
+    chmod 664 /etc/guacamole/extensions/guacamole-auth-duo-"${LATEST_SERVER}".jar
+    rm -rf /tmp/guacamole-auth-duo*
+    msg_ok "Updated DUO Extension"
+  fi
+
+  # LDAP Extension
+  if [[ -f /etc/guacamole/extensions/guacamole-auth-ldap-*.jar ]]; then
+    msg_info "Updating LDAP Extension"
+    rm -f /etc/guacamole/extensions/guacamole-auth-ldap-*.jar
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_SERVER}/binary/guacamole-auth-ldap-${LATEST_SERVER}.tar.gz" -o "/tmp/guacamole-auth-ldap.tar.gz"
+    $STD tar -xf /tmp/guacamole-auth-ldap.tar.gz -C /tmp
+    mv /tmp/guacamole-auth-ldap-"${LATEST_SERVER}"/guacamole-auth-ldap-"${LATEST_SERVER}".jar /etc/guacamole/extensions/
+    chmod 664 /etc/guacamole/extensions/guacamole-auth-ldap-"${LATEST_SERVER}".jar
+    rm -rf /tmp/guacamole-auth-ldap*
+    msg_ok "Updated LDAP Extension"
+  fi
+
+  # Quick Connect Extension
+  if [[ -f /etc/guacamole/extensions/guacamole-auth-quickconnect-*.jar ]]; then
+    msg_info "Updating Quick Connect Extension"
+    rm -f /etc/guacamole/extensions/guacamole-auth-quickconnect-*.jar
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_SERVER}/binary/guacamole-auth-quickconnect-${LATEST_SERVER}.tar.gz" -o "/tmp/guacamole-auth-quickconnect.tar.gz"
+    $STD tar -xf /tmp/guacamole-auth-quickconnect.tar.gz -C /tmp
+    mv /tmp/guacamole-auth-quickconnect-"${LATEST_SERVER}"/guacamole-auth-quickconnect-"${LATEST_SERVER}".jar /etc/guacamole/extensions/
+    chmod 664 /etc/guacamole/extensions/guacamole-auth-quickconnect-"${LATEST_SERVER}".jar
+    rm -rf /tmp/guacamole-auth-quickconnect*
+    msg_ok "Updated Quick Connect Extension"
+  fi
+
+  # History Recording Storage Extension
+  if [[ -f /etc/guacamole/extensions/guacamole-history-recording-storage-*.jar ]]; then
+    msg_info "Updating History Recording Storage Extension"
+    rm -f /etc/guacamole/extensions/guacamole-history-recording-storage-*.jar
+    curl -fsSL "https://downloads.apache.org/guacamole/${LATEST_SERVER}/binary/guacamole-history-recording-storage-${LATEST_SERVER}.tar.gz" -o "/tmp/guacamole-history-recording-storage.tar.gz"
+    $STD tar -xf /tmp/guacamole-history-recording-storage.tar.gz -C /tmp
+    mv /tmp/guacamole-history-recording-storage-"${LATEST_SERVER}"/guacamole-history-recording-storage-"${LATEST_SERVER}".jar /etc/guacamole/extensions/
+    chmod 664 /etc/guacamole/extensions/guacamole-history-recording-storage-"${LATEST_SERVER}".jar
+    rm -rf /tmp/guacamole-history-recording-storage*
+    msg_ok "Updated History Recording Storage Extension"
+  fi
+
+  # Reset permissions and prepare for service start
+  msg_info "Resetting permissions"
+  mkdir -p /var/guacamole
+  chown daemon:daemon /var/guacamole
+  mkdir -p /home/daemon/.config/freerdp
+  chown daemon:daemon /home/daemon/.config/freerdp
+  msg_ok "Permissions reset"
+
+  msg_info "Starting Services"
+  systemctl daemon-reload
+  systemctl start tomcat guacd
+  msg_ok "Started Services"
+  msg_ok "Updated successfully!"
   exit
 }
 

ct/apache-tomcat.sh

@@ -11,7 +11,7 @@ var_disk="${var_disk:-5}"
 var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-1024}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -20,15 +20,79 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if ! ls -d /opt/tomcat-* >/dev/null 2>&1; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    msg_error "Currently we don't provide an update function for this ${APP}."
+  header_info
+  check_container_storage
+  check_container_resources
+
+  TOMCAT_DIR=$(ls -d /opt/tomcat-* 2>/dev/null | head -n1)
+  if [[ -z "$TOMCAT_DIR" || ! -d "$TOMCAT_DIR" ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+
+  # Detect major version and current version from install path (e.g., /opt/tomcat-11 -> 11)
+  TOMCAT_MAJOR=$(basename "$TOMCAT_DIR" | grep -oP 'tomcat-\K[0-9]+')
+  if [[ -z "$TOMCAT_MAJOR" ]]; then
+    msg_error "Cannot determine Tomcat major version from path: $TOMCAT_DIR"
+    exit
+  fi
+  CURRENT_VERSION=$(grep -oP 'Apache Tomcat Version \K[0-9.]+' "$TOMCAT_DIR/RELEASE-NOTES" 2>/dev/null || echo "unknown")
+  LATEST_VERSION=$(curl -fsSL "https://dlcdn.apache.org/tomcat/tomcat-${TOMCAT_MAJOR}/" | grep -oP 'v[0-9]+\.[0-9]+\.[0-9]+(-M[0-9]+)?/' | sort -V | tail -n1 | sed 's/\/$//; s/v//')
+
+  if [[ -z "$LATEST_VERSION" ]]; then
+    msg_error "Failed to fetch latest version for Tomcat ${TOMCAT_MAJOR}"
+    exit
+  fi
+
+  if [[ "$CURRENT_VERSION" == "$LATEST_VERSION" ]]; then
+    msg_ok "${APP} ${CURRENT_VERSION} is already up to date"
+    exit
+  fi
+
+  msg_info "Stopping Tomcat service"
+  systemctl stop tomcat
+  msg_ok "Stopped Tomcat service"
+
+  msg_info "Backing up configuration and applications"
+  BACKUP_DIR="/tmp/tomcat-backup-$$"
+  mkdir -p "$BACKUP_DIR"
+  cp -a "$TOMCAT_DIR/conf" "$BACKUP_DIR/conf"
+  cp -a "$TOMCAT_DIR/webapps" "$BACKUP_DIR/webapps"
+  [[ -d "$TOMCAT_DIR/lib" ]] && cp -a "$TOMCAT_DIR/lib" "$BACKUP_DIR/lib"
+  msg_ok "Backed up configuration and applications"
+
+  msg_info "Downloading Tomcat ${LATEST_VERSION}"
+  TOMCAT_URL="https://dlcdn.apache.org/tomcat/tomcat-${TOMCAT_MAJOR}/v${LATEST_VERSION}/bin/apache-tomcat-${LATEST_VERSION}.tar.gz"
+  curl -fsSL "$TOMCAT_URL" -o /tmp/tomcat-update.tar.gz
+  msg_ok "Downloaded Tomcat ${LATEST_VERSION}"
+
+  msg_info "Installing update"
+  rm -rf "${TOMCAT_DIR:?}"/*
+  tar --strip-components=1 -xzf /tmp/tomcat-update.tar.gz -C "$TOMCAT_DIR"
+  rm -f /tmp/tomcat-update.tar.gz
+  msg_ok "Installed update"
+
+  msg_info "Restoring configuration and applications"
+  cp -a "$BACKUP_DIR/conf"/* "$TOMCAT_DIR/conf/"
+  cp -a "$BACKUP_DIR/webapps"/* "$TOMCAT_DIR/webapps/" 2>/dev/null || true
+  if [[ -d "$BACKUP_DIR/lib" ]]; then
+    for jar in "$BACKUP_DIR/lib"/*.jar; do
+      [[ -f "$jar" ]] || continue
+      jar_name=$(basename "$jar")
+      if [[ ! -f "$TOMCAT_DIR/lib/$jar_name" ]]; then
+        cp "$jar" "$TOMCAT_DIR/lib/"
+      fi
+    done
+  fi
+  rm -rf "$BACKUP_DIR"
+  chown -R root:root "$TOMCAT_DIR"
+  msg_ok "Restored configuration and applications"
+
+  msg_info "Starting Tomcat service"
+  systemctl start tomcat
+  msg_ok "Started Tomcat service"
+  msg_ok "Updated successfully!"
+  exit
 }
 
 start

ct/argus.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-512}"
 var_disk="${var_disk:-3}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/backrest.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-512}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/booklore.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-3}"
 var_ram="${var_ram:-3072}"
 var_disk="${var_disk:-7}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -28,15 +28,29 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  setup_mariadb
+
   if check_for_gh_release "booklore" "booklore-app/BookLore"; then
+    JAVA_VERSION="21" setup_java
+    NODE_VERSION="22" setup_nodejs
+    setup_mariadb
+    setup_yq
+
     msg_info "Stopping Service"
     systemctl stop booklore
-    msg_info "Stopped Service"
+    msg_ok "Stopped Service"
 
-    msg_info "backup old install"
+    if grep -qE "^BOOKLORE_(DATA_PATH|BOOKDROP_PATH|BOOKS_PATH|PORT)=" /opt/booklore_storage/.env 2>/dev/null; then
+      msg_info "Migrating old environment variables"
+      sed -i 's/^BOOKLORE_DATA_PATH=/APP_PATH_CONFIG=/g' /opt/booklore_storage/.env
+      sed -i 's/^BOOKLORE_BOOKDROP_PATH=/APP_BOOKDROP_FOLDER=/g' /opt/booklore_storage/.env
+      sed -i '/^BOOKLORE_BOOKS_PATH=/d' /opt/booklore_storage/.env
+      sed -i '/^BOOKLORE_PORT=/d' /opt/booklore_storage/.env
+      msg_ok "Migrated old environment variables"
+    fi
+
+    msg_info "Backing up old installation"
     mv /opt/booklore /opt/booklore_bak
-    msg_ok "backup done"
+    msg_ok "Backed up old installation"
 
     fetch_and_deploy_gh_release "booklore" "booklore-app/BookLore" "tarball"
 
@@ -46,12 +60,9 @@ function update_script() {
     $STD npm run build --configuration=production
     msg_ok "Built Frontend"
 
-    JAVA_VERSION="21" setup_java
-    setup_yq
-
     msg_info "Building Backend"
     cd /opt/booklore/booklore-api
-    APP_VERSION=$(curl -fsSL https://api.github.com/repos/booklore-app/BookLore/releases/latest | yq '.tag_name' | sed 's/^v//')
+    APP_VERSION=$(get_latest_github_release "booklore-app/BookLore")
     yq eval ".app.version = \"${APP_VERSION}\"" -i src/main/resources/application.yaml
     $STD ./gradlew clean build --no-daemon
     mkdir -p /opt/booklore/dist

ct/caddy.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-512}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -29,21 +29,19 @@ function update_script() {
   fi
 
   msg_info "Updating Caddy LXC"
-  $STD apt-get update
-  $STD apt-get -y upgrade
+  $STD apt update
+  $STD apt upgrade -y
   msg_ok "Updated Caddy LXC"
 
   if command -v xcaddy >/dev/null 2>&1; then
-    setup_go
-    msg_info "Updating xCaddy"
-    cd /opt
-    RELEASE=$(curl -fsSL https://api.github.com/repos/caddyserver/xcaddy/releases/latest | grep "tag_name" | awk -F '"' '{print $4}')
-    VERSION="${RELEASE#v}"
-    curl -fsSL "https://github.com/caddyserver/xcaddy/releases/download/${RELEASE}/xcaddy_${VERSION}_linux_amd64.deb" -o "xcaddy_${VERSION}_linux_amd64.deb"
-    $STD dpkg -i "xcaddy_${VERSION}_linux_amd64.deb"
-    rm -f "xcaddy_${VERSION}_linux_amd64.deb"
-    $STD xcaddy build
-    msg_ok "Updated xCaddy"
+    if check_for_gh_release "xcaddy" "caddyserver/xcaddy"; then
+      setup_go
+      fetch_and_deploy_gh_release "xcaddy" "caddyserver/xcaddy" "binary"
+
+      msg_info "Updating xCaddy"
+      $STD xcaddy build
+      msg_ok "Updated xCaddy"
+    fi
   fi
   msg_ok "Updated successfully!"
   exit

ct/cockpit.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
+var_version="${var_version:-12}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/docker.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -24,33 +24,20 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  get_latest_release() {
-    curl -fsSL https://api.github.com/repos/"$1"/releases/latest | grep '"tag_name":' | cut -d'"' -f4
-  }
-
   msg_info "Updating base system"
-  $STD apt-get update
-  $STD apt-get -y upgrade
+  $STD apt update
+  $STD apt upgrade -y 
   msg_ok "Base system updated"
 
   msg_info "Updating Docker Engine"
-  $STD apt-get install --only-upgrade -y docker-ce docker-ce-cli containerd.io
+  $STD apt install --only-upgrade -y docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-buildx-plugin
   msg_ok "Docker Engine updated"
 
-  if [[ -f /usr/local/lib/docker/cli-plugins/docker-compose ]]; then
-    COMPOSE_BIN="/usr/local/lib/docker/cli-plugins/docker-compose"
-    COMPOSE_NEW_VERSION=$(get_latest_release "docker/compose")
-    msg_info "Updating Docker Compose to $COMPOSE_NEW_VERSION"
-    curl -fsSL "https://github.com/docker/compose/releases/download/${COMPOSE_NEW_VERSION}/docker-compose-$(uname -s)-$(uname -m)" \
-      -o "$COMPOSE_BIN"
-    chmod +x "$COMPOSE_BIN"
-    msg_ok "Docker Compose updated"
-  fi
-
   if docker ps -a --format '{{.Image}}' | grep -q '^portainer/portainer-ce:latest$'; then
     msg_info "Updating Portainer"
     $STD docker pull portainer/portainer-ce:latest
-    $STD docker stop portainer && docker rm portainer
+    $STD docker stop portainer
+    $STD docker rm portainer
     $STD docker volume create portainer_data >/dev/null 2>&1
     $STD docker run -d \
       -p 8000:8000 \
@@ -66,7 +53,8 @@ function update_script() {
   if docker ps -a --format '{{.Names}}' | grep -q '^portainer_agent$'; then
     msg_info "Updating Portainer Agent"
     $STD docker pull portainer/agent:latest
-    $STD docker stop portainer_agent && docker rm portainer_agent
+    $STD docker stop portainer_agent
+    $STD docker rm portainer_agent
     $STD docker run -d \
       -p 9001:9001 \
       --name=portainer_agent \

ct/dockge.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-18}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -27,11 +27,17 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  msg_info "Updating ${APP}"
+
+  msg_info "Updating base system"
+  $STD apt update
+  $STD apt upgrade -y
+  msg_ok "Base system updated"
+
+  msg_info "Updating Dockge"
   cd /opt/dockge
   $STD docker compose pull
   $STD docker compose up -d
-  msg_ok "Updated ${APP}"
+  msg_ok "Updated Dockge"
   msg_ok "Updated successfully!"
   exit
 }

ct/domain-monitor.sh

@@ -29,8 +29,12 @@ function update_script() {
   fi
   setup_mariadb
 
-  if ! grep -Fq "root /usr/bin/php /opt/domain-monitor/cron/check_domains.php" /etc/crontab; then
-    echo "0 0 * * * root /usr/bin/php /opt/domain-monitor/cron/check_domains.php" >>/etc/crontab
+  if grep -Fq "root /usr/bin/php /opt/domain-monitor/cron/check_domains.php" /etc/crontab; then
+    sed -i 's|root /usr/bin/php /opt/domain-monitor/cron/check_domains.php|www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php|' /etc/crontab
+  fi
+
+  if ! grep -Fq "www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php" /etc/crontab; then
+    echo "0 0 * * * www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php" >> /etc/crontab
   fi
 
   if check_for_gh_release "domain-monitor" "Hosteroid/domain-monitor"; then

ct/fladder.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: wendyliga
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/DonutWare/Fladder
+
+APP="Fladder"
+var_tags="${var_tags:-media}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/fladder ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "Fladder" "DonutWare/Fladder"; then
+    msg_info "Stopping Service"
+    systemctl stop nginx
+    msg_ok "Stopped Service"
+
+    if [[ -f /opt/fladder/assets/config/config.json ]]; then
+      msg_info "Backing up configuration"
+      cp /opt/fladder/assets/config/config.json /tmp/fladder_config.json.bak
+      msg_ok "Configuration backed up"
+    fi
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Fladder" "DonutWare/Fladder" "prebuild" "latest" "/opt/fladder" "Fladder-Web-*.zip"
+
+    if [[ -f /tmp/fladder_config.json.bak ]]; then
+      msg_info "Restoring configuration"
+      mkdir -p /opt/fladder/assets/config
+      cp /tmp/fladder_config.json.bak /opt/fladder/assets/config/config.json
+      rm -f /tmp/fladder_config.json.bak
+      msg_ok "Configuration restored"
+    fi
+
+    msg_info "Starting Service"
+    systemctl start nginx
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following IP:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/flatnotes.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: luismco
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/dullage/flatnotes
+
+APP="Flatnotes"
+var_tags="${var_tags:-notes}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/flatnotes ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "flatnotes" "dullage/flatnotes"; then
+    msg_info "Stopping Service"
+    systemctl stop flatnotes
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Configuration and Data"
+    cp /opt/flatnotes/.env /opt/flatnotes.env
+    cp -r /opt/flatnotes/data /opt/flatnotes_data_backup
+    msg_ok "Backed up Configuration and Data"
+
+    fetch_and_deploy_gh_release "flatnotes" "dullage/flatnotes"
+
+    msg_info "Updating Frontend"
+    cd /opt/flatnotes/client
+    $STD npm install
+    $STD npm run build
+    msg_ok "Updated Frontend"
+
+    msg_info "Updating Backend"
+    cd /opt/flatnotes
+    rm -f uv.lock
+    $STD /usr/local/bin/uvx migrate-to-uv
+    $STD /usr/local/bin/uv sync
+    msg_ok "Updated Backend"
+
+    msg_info "Restoring Configuration and Data"
+    cp /opt/flatnotes.env /opt/flatnotes/.env
+    cp -r /opt/flatnotes_data_backup/. /opt/flatnotes/data
+    rm -f /opt/flatnotes.env
+    rm -r /opt/flatnotes_data_backup
+    msg_ok "Restored Configuration and Data"
+
+    msg_info "Starting Service"
+    systemctl start flatnotes
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
+

ct/freshrss.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -33,11 +33,44 @@ function update_script() {
     chmod +x /opt/freshrss/cli/sensitive-log.sh
     systemctl restart apache2
     msg_ok "Fixed wrong permissions"
-    exit
-  else
-    msg_error "FreshRSS should be updated via the user interface."
-    exit
   fi
+
+  if check_for_gh_release "freshrss" "FreshRSS/FreshRSS"; then
+    msg_info "Stopping Apache2"
+    systemctl stop apache2
+    msg_ok "Stopped Apache2"
+
+    msg_info "Backing up FreshRSS"
+    mv /opt/freshrss /opt/freshrss-backup
+    msg_ok "Backup Created"
+
+    fetch_and_deploy_gh_release "freshrss" "FreshRSS/FreshRSS" "tarball"
+
+    msg_info "Restoring data and configuration"
+    if [[ -d /opt/freshrss-backup/data ]]; then
+      cp -a /opt/freshrss-backup/data/. /opt/freshrss/data/
+    fi
+    if [[ -d /opt/freshrss-backup/extensions ]]; then
+      cp -a /opt/freshrss-backup/extensions/. /opt/freshrss/extensions/
+    fi
+    msg_ok "Data Restored"
+
+    msg_info "Setting permissions"
+    chown -R www-data:www-data /opt/freshrss
+    chmod -R g+rX /opt/freshrss
+    chmod -R g+w /opt/freshrss/data/
+    msg_ok "Permissions Set"
+
+    msg_info "Starting Apache2"
+    systemctl start apache2
+    msg_ok "Started Apache2"
+
+    msg_info "Cleaning up backup"
+    rm -rf /opt/freshrss-backup
+    msg_ok "Cleaned up backup"
+    msg_ok "Updated successfully!"
+  fi
+  exit
 }
 
 start

ct/headers/fladder

@@ -0,0 +1,6 @@
+    ________          __    __         
+   / ____/ /___ _____/ /___/ /__  _____
+  / /_  / / __ `/ __  / __  / _ \/ ___/
+ / __/ / / /_/ / /_/ / /_/ /  __/ /    
+/_/   /_/\__,_/\__,_/\__,_/\___/_/     
+                                       

ct/headers/flatnotes

@@ -0,0 +1,6 @@
+    ________      __              __           
+   / ____/ /___ _/ /_____  ____  / /____  _____
+  / /_  / / __ `/ __/ __ \/ __ \/ __/ _ \/ ___/
+ / __/ / / /_/ / /_/ / / / /_/ / /_/  __(__  ) 
+/_/   /_/\__,_/\__/_/ /_/\____/\__/\___/____/  
+                                               

ct/headers/investbrain

@@ -0,0 +1,6 @@
+    ____                     __  __               _     
+   /  _/___ _   _____  _____/ /_/ /_  _________ _(_)___ 
+   / // __ \ | / / _ \/ ___/ __/ __ \/ ___/ __ `/ / __ \
+ _/ // / / / |/ /  __(__  ) /_/ /_/ / /  / /_/ / / / / /
+/___/_/ /_/|___/\___/____/\__/_.___/_/   \__,_/_/_/ /_/ 
+                                                        

ct/headers/kutt

@@ -0,0 +1,6 @@
+    __ __      __  __ 
+   / //_/_  __/ /_/ /_
+  / ,< / / / / __/ __/
+ / /| / /_/ / /_/ /_  
+/_/ |_\__,_/\__/\__/  
+                      

ct/headers/qui

@@ -0,0 +1,6 @@
+   ____        _ 
+  / __ \__  __(_)
+ / / / / / / / / 
+/ /_/ / /_/ / /  
+\___\_\__,_/_/   
+                 

ct/headers/trip

@@ -0,0 +1,6 @@
+  __________  ________ 
+ /_  __/ __ \/  _/ __ \
+  / / / /_/ // // /_/ /
+ / / / _, _// // ____/ 
+/_/ /_/ |_/___/_/      
+                       

ct/headers/unifi-os-server

@@ -0,0 +1,6 @@
+   __  __      _ _______       ____  _____      _____                          
+  / / / /___  (_) ____(_)     / __ \/ ___/     / ___/___  ______   _____  _____
+ / / / / __ \/ / /_  / /_____/ / / /\__ \______\__ \/ _ \/ ___/ | / / _ \/ ___/
+/ /_/ / / / / / __/ / /_____/ /_/ /___/ /_____/__/ /  __/ /   | |/ /  __/ /    
+\____/_/ /_/_/_/   /_/      \____//____/     /____/\___/_/    |___/\___/_/     
+                                                                               

ct/homer.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-512}"
 var_disk="${var_disk:-2}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -27,36 +27,31 @@ function update_script() {
         msg_error "No ${APP} Installation Found!"
         exit
     fi
-    msg_info "Stopping Service"
-    systemctl stop homer
-    msg_ok "Stopped Service"
 
-    msg_info "Backing up assets directory"
-    cd ~
-    mkdir -p assets-backup
-    cp -R /opt/homer/assets/. assets-backup
-    msg_ok "Backed up assets directory"
+    if check_for_gh_release "homer" "bastienwirtz/homer"; then
+      msg_info "Stopping Service"
+      systemctl stop homer
+      msg_ok "Stopped Service"
 
-    msg_info "Updating ${APP}"
-    rm -rf /opt/homer/*
-    cd /opt/homer
-    curl -fsSL "https://github.com/bastienwirtz/homer/releases/latest/download/homer.zip" -o $(basename "https://github.com/bastienwirtz/homer/releases/latest/download/homer.zip")
-    $STD unzip homer.zip
-    msg_ok "Updated ${APP}"
+      msg_info "Backing up assets directory"
+      cd ~
+      mkdir -p assets-backup
+      cp -R /opt/homer/assets/. assets-backup
+      msg_ok "Backed up assets directory"
 
-    msg_info "Restoring assets directory"
-    cd ~
-    cp -Rf assets-backup/. /opt/homer/assets/
-    msg_ok "Restored assets directory"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "homer" "bastienwirtz/homer" "prebuild" "latest" "/opt/homer" "homer.zip"
 
-    msg_info "Cleaning"
-    rm -rf assets-backup /opt/homer/homer.zip
-    msg_ok "Cleaned"
-
-    msg_info "Starting Service"
-    systemctl start homer
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
+      msg_info "Restoring assets directory"
+      cd ~
+      cp -Rf assets-backup/. /opt/homer/assets/
+      rm -rf assets-backup
+      msg_ok "Restored assets directory"
+    
+      msg_info "Starting Service"
+      systemctl start homer
+      msg_ok "Started Service"
+      msg_ok "Updated successfully!"
+    fi
     exit
 }
 

ct/immich.sh

@@ -57,9 +57,12 @@ EOF
     fi
     $STD apt update
     msg_ok "Added Debian Testing repo"
-    msg_info "Installing libmimalloc3"
-    $STD apt install -t testing --no-install-recommends libmimalloc3
-    msg_ok "Installed libmimalloc3"
+  fi
+
+  if ! dpkg -l "libmimalloc3" | grep -q '3.1' || ! dpkg -l "libde265-dev" | grep -q '1.0.16'; then
+    msg_info "Installing/upgrading Testing repo packages"
+    $STD apt install -t testing libmimalloc3 libde265-dev -y
+    msg_ok "Installed/upgraded Testing repo packages"
   fi
 
   if [[ ! -f /etc/apt/sources.list.d/mise.list ]]; then
@@ -93,6 +96,7 @@ EOF
       $STD apt install -y ./*.deb
       rm ./*.deb
       $STD apt-mark hold libigdgmm12
+      dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
       msg_ok "Intel iGPU dependencies updated"
     fi
     rm ./Dockerfile

ct/infisical.sh

@@ -33,6 +33,7 @@ function update_script() {
   msg_ok "Service stopped"
 
   msg_info "Creating backup"
+  [[ -f /opt/infisical_backup.sql ]] && rm -f /opt/infisical_backup.sql
   DB_PASS=$(grep -Po '(?<=^Database Password:\s).*' ~/infisical.creds | head -n1)
   PGPASSWORD=$DB_PASS pg_dump -U infisical -h localhost -d infisical_db > /opt/infisical_backup.sql
   msg_ok "Created backup"

ct/influxdb.sh

@@ -43,4 +43,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP} and Port 8888 for v1 or Port 8086 (v2)${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP} and Port 8888 for v1, Port 8086 for v2 or Port 8181 for v3${CL}"

ct/investbrain.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Benito Rodríguez (b3ni)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/investbrainapp/investbrain
+
+APP="Investbrain"
+var_tags="${var_tags:-finance;portfolio;investing}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/investbrain ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "Investbrain" "investbrainapp/investbrain"; then
+    PHP_VERSION="8.4"
+    msg_info "Stopping Services"
+    systemctl stop nginx php${PHP_VERSION}-fpm
+    $STD supervisorctl stop all
+    msg_ok "Services Stopped"
+
+    setup_composer
+    NODE_VERSION="22" setup_nodejs
+    PG_VERSION="17" setup_postgresql
+
+    msg_info "Creating Backup"
+    rm -f /opt/.env.backup
+    rm -rf /opt/investbrain_backup
+    cp /opt/investbrain/.env /opt/.env.backup
+    cp -r /opt/investbrain/storage /opt/investbrain_backup
+    msg_ok "Created Backup"
+
+    fetch_and_deploy_gh_release "Investbrain" "investbrainapp/investbrain" "tarball" "latest" "/opt/investbrain"
+
+    msg_info "Updating Investbrain"
+    cd /opt/investbrain
+    rm -rf /opt/investbrain/storage
+    cp /opt/.env.backup /opt/investbrain/.env
+    cp -r /opt/investbrain_backup/ /opt/investbrain/storage
+    export COMPOSER_ALLOW_SUPERUSER=1
+    $STD /usr/local/bin/composer install --no-interaction --no-dev --optimize-autoloader
+    $STD npm install
+    $STD npm run build
+    $STD php artisan storage:link
+    $STD php artisan migrate --force
+    $STD php artisan cache:clear
+    $STD php artisan view:clear
+    $STD php artisan route:clear
+    $STD php artisan event:clear
+    $STD php artisan route:cache
+    $STD php artisan event:cache
+    chown -R www-data:www-data /opt/investbrain
+    chmod -R 775 /opt/investbrain/storage /opt/investbrain/bootstrap/cache
+    rm -rf /opt/.env.backup /opt/investbrain_backup
+    msg_ok "Updated Investbrain"
+
+    msg_info "Starting Services"
+    systemctl start php${PHP_VERSION}-fpm nginx
+    $STD supervisorctl start all
+    msg_ok "Services Started"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"

ct/joplin-server.sh

@@ -35,10 +35,12 @@ function update_script() {
     systemctl stop joplin-server
     msg_ok "Stopped Services"
 
-    fetch_and_deploy_gh_release "joplin-server" "laurent22/joplin" "tarball" "latest"
+    cp /opt/joplin-server/.env /opt
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "joplin-server" "laurent22/joplin" "tarball"
+    mv /opt/.env /opt/joplin-server
 
     msg_info "Updating Joplin-Server"
-    cd /opt/joplin-server 
+    cd /opt/joplin-server
     sed -i "/onenote-converter/d" packages/lib/package.json
     $STD yarn config set --home enableTelemetry 0
     export BUILD_SEQUENCIAL=1

ct/jotty.sh

@@ -8,7 +8,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 APP="jotty"
 var_tags="${var_tags:-tasks;notes}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-3072}"
+var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -45,6 +45,8 @@ function update_script() {
 
     msg_info "Updating jotty"
     cd /opt/jotty
+    unset NODE_OPTIONS
+    export NODE_OPTIONS="--max-old-space-size=3072"
     $STD yarn --frozen-lockfile
     $STD yarn next telemetry disable
     $STD yarn build
@@ -55,7 +57,7 @@ function update_script() {
     cp -r .next/static .next/standalone/.next/
 
     mv .next/standalone /tmp/jotty_standalone
-    rm -rf * .next .git .gitignore .yarn
+    rm -rf ./* .next .git .gitignore .yarn
     mv /tmp/jotty_standalone/* .
     mv /tmp/jotty_standalone/.[!.]* . 2>/dev/null || true
     rm -rf /tmp/jotty_standalone

ct/kutt.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: tomfrenzel
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/thedevs-network/kutt
+
+APP="Kutt"
+var_tags="${var_tags:-sharing}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-2}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/kutt ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "kutt" "thedevs-network/kutt"; then
+    msg_info "Stopping services"
+    systemctl stop kutt
+    msg_ok "Stopped services"
+
+    msg_info "Backing up data"
+    mkdir -p /opt/kutt-backup
+    [ -d /opt/kutt/custom ] && cp -r /opt/kutt/custom /opt/kutt-backup/
+    [ -d /opt/kutt/db ] && cp -r /opt/kutt/db /opt/kutt-backup/
+    cp /opt/kutt/.env /opt/kutt-backup/
+    msg_ok "Backed up data"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "kutt" "thedevs-network/kutt" "tarball" "latest"
+
+    msg_info "Restoring data"
+    [ -d /opt/kutt-backup/custom ] && cp -r /opt/kutt-backup/custom /opt/kutt/
+    [ -d /opt/kutt-backup/db ] && cp -r /opt/kutt-backup/db /opt/kutt/
+    [ -f /opt/kutt-backup/.env ] && cp /opt/kutt-backup/.env /opt/kutt/
+    rm -rf /opt/kutt-backup
+    msg_ok "Restored data"
+
+    msg_info "Configuring Kutt"
+    cd /opt/kutt
+    $STD npm install
+    $STD npm run migrate
+    msg_ok "Configured Kutt"
+
+    msg_info "Starting services"
+    systemctl start kutt
+    msg_ok "Started services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP} or https://<your-Kutt-domain>${CL}"

ct/nginxproxymanager.sh

@@ -49,11 +49,10 @@ function update_script() {
 
   NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
 
-  #RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
-    #grep "tag_name" |
-    #awk '{print substr($2, 3, length($2)-4) }')
+  RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
+    grep "tag_name" |
+    awk '{print substr($2, 3, length($2)-4) }')
 
-  RELEASE="2.13.5"
   CLEAN_INSTALL=1 fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager" "tarball" "v${RELEASE}" "/opt/nginxproxymanager"
   
   msg_info "Stopping Services"

ct/ollama.sh

@@ -32,17 +32,22 @@ function update_script() {
     if [[ ! -f /opt/Ollama_version.txt ]]; then
       touch /opt/Ollama_version.txt
     fi
+    if ! command -v zstd &>/dev/null; then
+      msg_info "Installing zstd"
+      $STD apt install -y zstd
+      msg_ok "Installed zstd"
+    fi
     msg_info "Stopping Services"
     systemctl stop ollama
     msg_ok "Services Stopped"
 
-    TMP_TAR=$(mktemp --suffix=.tgz)
-    curl -fL# -C - -o "${TMP_TAR}" "https://github.com/ollama/ollama/releases/download/${RELEASE}/ollama-linux-amd64.tgz"
+    TMP_TAR=$(mktemp --suffix=.tar.zst)
+    curl -fL# -C - -o "${TMP_TAR}" "https://github.com/ollama/ollama/releases/download/${RELEASE}/ollama-linux-amd64.tar.zst"
     msg_info "Updating Ollama to ${RELEASE}"
     rm -rf /usr/local/lib/ollama
     rm -rf /usr/local/bin/ollama
     mkdir -p /usr/local/lib/ollama
-    tar -xzf "${TMP_TAR}" -C /usr/local/lib/ollama
+    tar --zstd -xf "${TMP_TAR}" -C /usr/local/lib/ollama
     ln -sf /usr/local/lib/ollama/bin/ollama /usr/local/bin/ollama
     rm -f "${TMP_TAR}"
     echo "${RELEASE}" >/opt/Ollama_version.txt

ct/openwebui.sh

@@ -92,12 +92,17 @@ EOF
     OLLAMA_VERSION=$(ollama -v | awk '{print $NF}')
     RELEASE=$(curl -s https://api.github.com/repos/ollama/ollama/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
     if [ "$OLLAMA_VERSION" != "$RELEASE" ]; then
+      if ! command -v zstd &>/dev/null; then
+        msg_info "Installing zstd"
+        $STD apt install -y zstd
+        msg_ok "Installed zstd"
+      fi
       msg_info "Ollama update available: v$OLLAMA_VERSION -> v$RELEASE"
       msg_info "Downloading Ollama v$RELEASE \n"
-      curl -fS#LO https://ollama.com/download/ollama-linux-amd64.tgz
+      curl -fS#LO https://github.com/ollama/ollama/releases/download/v${RELEASE}/ollama-linux-amd64.tar.zst
       msg_ok "Download Complete"
 
-      if [ -f "ollama-linux-amd64.tgz" ]; then
+      if [ -f "ollama-linux-amd64.tar.zst" ]; then
 
         msg_info "Stopping Ollama Service"
         systemctl stop ollama
@@ -106,8 +111,8 @@ EOF
         msg_info "Installing Ollama"
         rm -rf /usr/lib/ollama
         rm -rf /usr/bin/ollama
-        tar -C /usr -xzf ollama-linux-amd64.tgz
-        rm -rf ollama-linux-amd64.tgz
+        tar --zstd -C /usr -xf ollama-linux-amd64.tar.zst
+        rm -rf ollama-linux-amd64.tar.zst
         msg_ok "Installed Ollama"
 
         msg_info "Starting Ollama Service"

ct/postgresql.sh

@@ -23,7 +23,7 @@ function update_script() {
     header_info
     check_container_storage
     check_container_resources
-    if [[ ! -f /etc/apt/sources.list.d/pgdg.list ]]; then
+    if ! command -v psql >/dev/null 2>&1; then
         msg_error "No ${APP} Installation Found!"
         exit
     fi

ct/qui.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (Canbiz)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/autobrr/qui
+
+APP="Qui"
+var_tags="${var_tags:-torrent}"
+var_disk="${var_disk:-10}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /usr/local/bin/qui ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "Qui" "autobrr/qui"; then
+    msg_info "Stopping Service"
+    systemctl stop qui
+    msg_ok "Stopped Service"
+
+    fetch_and_deploy_gh_release "qui" "autobrr/qui" "prebuild" "latest" "/tmp/qui" "qui_*_linux_x86_64.tar.gz"
+
+    msg_info "Updating qui"
+    mv /tmp/qui/qui /usr/local/bin/qui
+    chmod +x /usr/local/bin/qui
+    rm -rf /tmp/qui
+    msg_ok "Updated qui"
+
+    msg_info "Starting Service"
+    systemctl start qui
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:7476${CL}"

ct/snowshare.sh

@@ -7,9 +7,9 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 
 APP="SnowShare"
 var_tags="${var_tags:-file-sharing}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-5}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-20}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"

ct/sonarqube.sh

@@ -44,6 +44,7 @@ function update_script() {
     curl -fsSL "https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-${RELEASE}.zip" -o $temp_file
     unzip -q "$temp_file" -d /opt
     mv /opt/sonarqube-${RELEASE} /opt/sonarqube
+    echo "${RELEASE}" > ~/.sonarqube
     msg_ok "Updated SonarQube"
 
     msg_info "Restoring Backup"

ct/trip.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: CrazyWolf13
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/itskovacs/TRIP
+
+APP="TRIP"
+var_tags="${var_tags:-maps;travel}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/trip ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "trip" "itskovacs/TRIP"; then
+    msg_info "Stopping Service"
+    systemctl stop trip
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "trip" "itskovacs/TRIP" "tarball"
+
+    msg_info "Updating Frontend"
+    cd /opt/trip/src
+    $STD npm install
+    $STD npm run build
+    mkdir -p /opt/trip/frontend
+    cp -r /opt/trip/src/dist/trip/browser/* /opt/trip/frontend/
+    msg_ok "Updated Frontend"
+
+    msg_info "Updating Backend"
+    cd /opt/trip/backend
+    $STD uv pip install --python /opt/trip/.venv/bin/python -r trip/requirements.txt
+    msg_ok "Updated Backend"
+
+    msg_info "Starting Service"
+    systemctl start trip
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"

ct/unifi-os-server.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://ui.com/
+
+APP="UniFi-OS-Server"
+var_tags="${var_tags:-network}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-0}"
+var_tun="${var_tun:-yes}"
+var_nesting="${var_nesting:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /usr/local/sbin/unifi-os-server.bin && ! -d /data/unifi ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  msg_custom "🚀" "${GN}" "The app offers a built-in updater. Please use it."
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:11443${CL}"

ct/wireguard.sh

@@ -28,20 +28,19 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  if ! dpkg -s git >/dev/null 2>&1; then
-    msg_info "Installing git"
-    $STD apt update
-    $STD apt install -y git
-    msg_ok "Installed git"
-  fi
-  apt update
-  apt -y upgrade
+  
+  ensure_dependencies git
+
+  msg_info "Updating LXC"
+  $STD apt update
+  $STD apt upgrade -y
   if [[ -d /etc/wgdashboard ]]; then
     sleep 2
     cd /etc/wgdashboard/src
-    ./wgd.sh update
-    ./wgd.sh start
+    $STD ./wgd.sh update
+    $STD ./wgd.sh start
   fi
+  msg_ok "Updated LXC"
   msg_ok "Updated successfully!"
   exit
 }

frontend/public/json/apache-cassandra.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://cassandra.apache.org/doc/latest/",
@@ -23,7 +23,7 @@
         "ram": 2048,
         "hdd": 4,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/apache-couchdb.json

@@ -1,19 +1,19 @@
 {
-  "name": "Apache-CouchDB",
+  "name": "Apache CouchDB",
   "slug": "apache-couchdb",
   "categories": [
     8
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 5984,
   "documentation": "https://docs.couchdb.org/en/stable/",
   "website": "https://couchdb.apache.org/",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/couchdb.webp",
   "config_path": "etc/default.ini",
-  "description": "Apache-CouchDB Seamless multi-master sync, that scales from Big Data to Mobile, with an Intuitive HTTP/JSON API and designed for Reliability.",
+  "description": "Apache CouchDB Seamless multi-master sync, that scales from Big Data to Mobile, with an Intuitive HTTP/JSON API and designed for Reliability.",
   "install_methods": [
     {
       "type": "default",
@@ -23,7 +23,7 @@
         "ram": 4096,
         "hdd": 10,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],
@@ -33,7 +33,7 @@
   },
   "notes": [
     {
-      "text": "Show Login Credentials: `cat CouchDB.creds`",
+      "text": "Login Credentials: `cat ~/couchdb.creds`",
       "type": "info"
     }
   ]

frontend/public/json/apache-guacamole.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-12-19",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8080,
   "documentation": "https://guacamole.apache.org/doc/gug/",

frontend/public/json/apache-tomcat.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-03-04",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8080,
   "documentation": "https://cwiki.apache.org/confluence/display/TOMCAT",
@@ -23,7 +23,7 @@
         "ram": 1024,
         "hdd": 5,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/argus.json

@@ -20,10 +20,10 @@
       "script": "ct/argus.sh",
       "resources": {
         "cpu": 1,
-        "ram": 256,
+        "ram": 512,
         "hdd": 3,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/backrest.json

@@ -12,7 +12,7 @@
   "documentation": "https://garethgeorge.github.io/backrest/introduction/getting-started",
   "website": "https://garethgeorge.github.io/backrest",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/backrest.webp",
-  "config_path": "/opt/backrest/config/config.json",
+  "config_path": "/opt/backrest/config/config.json | /opt/backrest/.env",
   "description": "Backrest is a web-accessible backup solution built on top of restic and providing a WebUI which wraps the restic CLI and makes it easy to create repos, browse snapshots, and restore files. Additionally, Backrest can run in the background and take an opinionated approach to scheduling snapshots and orchestrating repo health operations.",
   "install_methods": [
     {
@@ -23,7 +23,7 @@
         "ram": 512,
         "hdd": 8,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/booklore.json

@@ -23,7 +23,7 @@
         "ram": 3072,
         "hdd": 7,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/caddy.json

@@ -23,7 +23,7 @@
         "ram": 512,
         "hdd": 6,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     },
     {

frontend/public/json/cockpit.json

@@ -23,7 +23,7 @@
         "ram": 1024,
         "hdd": 4,
         "os": "debian",
-        "version": "13"
+        "version": "12"
       }
     }
   ],

frontend/public/json/docker.json

@@ -23,7 +23,7 @@
         "ram": 2048,
         "hdd": 4,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     },
     {

frontend/public/json/dockge.json

@@ -23,7 +23,7 @@
         "ram": 2048,
         "hdd": 18,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/fladder.json

@@ -0,0 +1,35 @@
+{
+  "name": "Fladder",
+  "slug": "fladder",
+  "categories": [
+    13
+  ],
+  "date_created": "2026-01-13",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 80,
+  "documentation": "https://github.com/DonutWare/Fladder/blob/develop/INSTALL.md#ubuntudebian",
+  "website": "https://github.com/DonutWare/Fladder",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/fladder.webp",
+  "config_path": "/opt/fladder/assets/config/config.json",
+  "description": "Fladder is a simple Jellyfin frontend built on top of Flutter. It provides a modern interface to stream and sync content locally, manage libraries, support multiple profiles, and offers direct, transcode and offline playback with media segments skipping.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/fladder.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 4,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/flatnotes.json

@@ -0,0 +1,35 @@
+{
+    "name": "Flatnotes",
+    "slug": "flatnotes",
+    "categories": [
+        12
+    ],
+    "date_created": "2026-01-16",
+    "type": "ct",
+    "updateable": true,
+    "privileged": false,
+    "interface_port": 8080,
+    "documentation": "https://github.com/dullage/flatnotes/wiki",
+    "website": "https://github.com/dullage/flatnotes",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/flatnotes.webp",
+    "config_path": "/opt/flatnotes/.env",
+    "description": "A self-hosted, database-less note-taking web app that utilises a flat folder of markdown files for storage.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/flatnotes.sh",
+            "resources": {
+                "cpu": 1,
+                "ram": 1024,
+                "hdd": 4,
+                "os": "debian",
+                "version": "13"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": null,
+        "password": null
+    },
+    "notes": []
+}

frontend/public/json/freshrss.json

@@ -23,7 +23,7 @@
         "ram": 1024,
         "hdd": 4,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/investbrain.json

@@ -0,0 +1,40 @@
+{
+  "name": "Investbrain",
+  "slug": "investbrain",
+  "categories": [
+    23
+  ],
+  "date_created": "2026-01-13",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8000,
+  "documentation": "https://github.com/investbrainapp/investbrain",
+  "website": "https://investbra.in",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/investbrain.webp",
+  "config_path": "/opt/investbrain/.env",
+  "description": "Investbrain is a smart open-source investment tracker that helps you manage, track, and make informed decisions about your investments.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/investbrain.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 4,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Database credentials: `cat ~/investbrain.creds`",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/jellystat.json

@@ -0,0 +1,48 @@
+{
+  "name": "Jellystat",
+  "slug": "jellystat",
+  "categories": [
+    9
+  ],
+  "date_created": "2026-01-12",
+  "type": "addon",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://github.com/CyferShepard/Jellystat",
+  "website": "https://github.com/CyferShepard/Jellystat",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/jellystat.webp",
+  "config_path": "/opt/jellystat/.env",
+  "description": "A free and open source statistics app for Jellyfin",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "tools/addon/jellystat.sh",
+      "resources": {
+        "cpu": null,
+        "ram": null,
+        "hdd": null,
+        "os": null,
+        "version": null
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Requires Node.js 20+ and PostgreSQL (auto-installed if missing)",
+      "type": "info"
+    },
+    {
+      "text": "Default PostgreSQL credentials: jellystat / jellystat",
+      "type": "info"
+    },
+    {
+      "text": "Update with: update_jellystat",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/jotty.json

@@ -20,7 +20,7 @@
       "script": "ct/jotty.sh",
       "resources": {
         "cpu": 2,
-        "ram": 3072,
+        "ram": 4096,
         "hdd": 6,
         "os": "debian",
         "version": "13"

frontend/public/json/kutt.json

@@ -0,0 +1,40 @@
+{
+  "name": "Kutt",
+  "slug": "kutt",
+  "categories": [
+    21
+  ],
+  "date_created": "2026-01-14",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 443,
+  "documentation": "https://github.com/thedevs-network/kutt/",
+  "config_path": "/opt/kutt/.env",
+  "website": "https://kutt.it",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kutt.webp",
+  "description": "Kutt is a modern URL shortener with support for custom domains. Create and edit links, view statistics, manage users, and more.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/kutt.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 1024,
+        "hdd": 2,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Kutt needs so be served with an SSL certificate for its login to work. During install, you will be prompted to choose if you want to have Caddy installed for SSL termination or if you want to use your own reverse proxy (in that case point your reverse porxy to port 3000).",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/palmr.json

@@ -9,7 +9,7 @@
   "updateable": true,
   "privileged": false,
   "interface_port": 3000,
-  "disable": false,
+  "disable": true,
   "documentation": "https://palmr.kyantech.com.br/docs/3.1-beta",
   "config_path": "/opt/palmr/apps/server/.env, /opt/palmr/apps/web/.env",
   "website": "https://palmr.kyantech.com.br/",

frontend/public/json/qui.json

@@ -0,0 +1,35 @@
+{
+  "name": "Qui",
+  "slug": "qui",
+  "categories": [
+    11
+  ],
+  "date_created": "2026-01-15",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 7476,
+  "documentation": "https://github.com/autobrr/qui",
+  "website": "https://github.com/autobrr/qui",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/qui.webp",
+  "config_path": "/root/.config/qui/config.toml",
+  "description": "Qui is a modern, self-hosted web interface for managing multiple qBittorrent instances with support for 10k+ torrents. It provides a clean and responsive interface for monitoring and controlling your qBittorrent downloads across multiple servers.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/qui.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 1024,
+        "hdd": 10,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/snowshare.json

@@ -19,9 +19,9 @@
       "type": "default",
       "script": "ct/snowshare.sh",
       "resources": {
-        "cpu": 1,
-        "ram": 1024,
-        "hdd": 5,
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 20,
         "os": "Debian",
         "version": "13"
       }

frontend/public/json/trip.json

@@ -0,0 +1,35 @@
+{
+  "name": "TRIP",
+  "slug": "trip",
+  "categories": [
+    21
+  ],
+  "date_created": "2026-01-17",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8000,
+  "documentation": "https://itskovacs.github.io/trip/docs/intro",
+  "website": "https://github.com/itskovacs/TRIP",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/trip.webp",
+  "config_path": "/opt/trip.env",
+  "description": "Minimalist POI Map Tracker and Trip Planner. Self-hosted.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/trip.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 1024,
+        "hdd": 4,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/unifi-os-server.json

@@ -0,0 +1,35 @@
+{
+    "name": "Unifi OS Server",
+    "slug": "unifi-os-server",
+    "categories": [
+        4
+    ],
+    "date_created": "2026-01-16",
+    "type": "ct",
+    "updateable": true,
+    "privileged": true,
+    "interface_port": 11443,
+    "documentation": "https://help.ui.com/hc/en-us",
+    "website": "https://www.ui.com/",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ubiquiti-unifi.webp",
+    "config_path": "",
+    "description": "Unifi OS Server is the operating system that powers Ubiquiti's UniFi line of network devices. It provides a centralized platform for managing and monitoring UniFi access points, switches, and security gateways, offering features such as network configuration, device provisioning, and performance analytics.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/unifi-os-server.sh",
+            "resources": {
+                "cpu": 2,
+                "ram": 4096,
+                "hdd": 20,
+                "os": "debian",
+                "version": "13"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": null,
+        "password": null
+    },
+    "notes": []
+}

frontend/src/components/command-menu.tsx

@@ -194,7 +194,20 @@ function CommandMenu() {
         </TooltipProvider>
       </div>
 
-      <CommandDialog open={open} onOpenChange={setOpen}>
+      <CommandDialog
+        open={open}
+        onOpenChange={setOpen}
+        filter={(value: string, search: string) => {
+          const searchLower = search.toLowerCase().trim();
+          if (!searchLower)
+            return 1;
+          const valueLower = value.toLowerCase();
+          const searchWords = searchLower.split(/\s+/).filter(Boolean);
+          // All search words must appear somewhere in the value (name + description)
+          const allWordsMatch = searchWords.every((word: string) => valueLower.includes(word));
+          return allWordsMatch ? 1 : 0;
+        }}
+      >
         <DialogTitle className="sr-only">Search scripts</DialogTitle>
         <CommandInput placeholder="Search for a script..." />
         <CommandList>
@@ -204,7 +217,7 @@ function CommandMenu() {
               {scripts.map(script => (
                 <CommandItem
                   key={`script:${script.slug}`}
-                  value={`${script.name}-${script.type}`}
+                  value={`${script.name} ${script.type} ${script.description || ""}`}
                   onSelect={() => {
                     setOpen(false);
                     router.push(`/scripts?id=${script.slug}`);

frontend/src/components/ui/command.tsx

@@ -24,13 +24,18 @@ const Command = React.forwardRef<
 ));
 Command.displayName = CommandPrimitive.displayName;
 
-type CommandDialogProps = {} & DialogProps;
+type CommandDialogProps = {
+  filter?: (value: string, search: string, keywords?: string[]) => number;
+} & DialogProps;
 
-function CommandDialog({ children, ...props }: CommandDialogProps) {
+function CommandDialog({ children, filter, ...props }: CommandDialogProps) {
   return (
     <Dialog {...props}>
       <DialogContent className="overflow-hidden p-0 shadow-lg">
-        <Command className="[&_[cmdk-group-heading]]:px-2 [&_[cmdk-group-heading]]:font-medium [&_[cmdk-group-heading]]:text-muted-foreground [&_[cmdk-group]:not([hidden])_~[cmdk-group]]:pt-0 [&_[cmdk-group]]:px-2 [&_[cmdk-input-wrapper]_svg]:h-5 [&_[cmdk-input-wrapper]_svg]:w-5 [&_[cmdk-input]]:h-12 [&_[cmdk-item]]:px-2 [&_[cmdk-item]]:py-3 [&_[cmdk-item]_svg]:h-5 [&_[cmdk-item]_svg]:w-5">
+        <Command
+          filter={filter}
+          className="[&_[cmdk-group-heading]]:px-2 [&_[cmdk-group-heading]]:font-medium [&_[cmdk-group-heading]]:text-muted-foreground [&_[cmdk-group]:not([hidden])_~[cmdk-group]]:pt-0 [&_[cmdk-group]]:px-2 [&_[cmdk-input-wrapper]_svg]:h-5 [&_[cmdk-input-wrapper]_svg]:w-5 [&_[cmdk-input]]:h-12 [&_[cmdk-item]]:px-2 [&_[cmdk-item]]:py-3 [&_[cmdk-item]_svg]:h-5 [&_[cmdk-item]_svg]:w-5"
+        >
           {children}
         </Command>
       </DialogContent>

install/alpine-wireguard-install.sh

@@ -54,7 +54,7 @@ if [[ "$INSTALL_WGD" =~ ^[Yy]$ ]]; then
     python3-dev
   msg_ok "Installed additional dependencies for WGDashboard"
   msg_info "Installing WGDashboard"
-  git clone -q https://github.com/donaldzou/WGDashboard.git /etc/wgdashboard
+  git clone -q https://github.com/WGDashboard/WGDashboard.git /etc/wgdashboard
   cd /etc/wgdashboard/src
   chmod u+x wgd.sh
   $STD ./wgd.sh install

install/apache-cassandra-install.sh

@@ -13,22 +13,16 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
-msg_ok "Installed Dependencies"
-
-msg_info "Installing Eclipse Temurin (Patience)"
-curl -fsSL "https://packages.adoptium.net/artifactory/api/gpg/key/public" | gpg --dearmor >/etc/apt/trusted.gpg.d/adoptium.gpg
-echo 'deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/adoptium.gpg] https://packages.adoptium.net/artifactory/deb bookworm main' >/etc/apt/sources.list.d/adoptium.list
-$STD apt-get update
-$STD apt-get install -y temurin-11-jdk
-msg_ok "Installed Eclipse Temurin"
+JAVA_VERSION="11" setup_java
 
 msg_info "Installing Apache Cassandra"
-curl -fsSL "https://downloads.apache.org/cassandra/KEYS" | gpg --dearmor >/etc/apt/trusted.gpg.d/cassandra.gpg
-echo "deb https://debian.cassandra.apache.org 41x main" >/etc/apt/sources.list.d/cassandra.sources.list
-$STD apt-get update
-$STD apt-get install -y cassandra cassandra-tools
+setup_deb822_repo \
+  "cassandra" \
+  "https://downloads.apache.org/cassandra/KEYS" \
+  "https://debian.cassandra.apache.org" \
+  "41x" \
+  "main"
+$STD apt install -y cassandra cassandra-tools
 sed -i -e 's/^rpc_address: localhost/#rpc_address: localhost/g' -e 's/^# rpc_interface: eth1/rpc_interface: eth0/g' /etc/cassandra/cassandra.yaml
 msg_ok "Installed Apache Cassandra"
 

install/apache-couchdb-install.sh

@@ -13,10 +13,6 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
-msg_ok "Installed Dependencies"
-
 msg_info "Installing Apache CouchDB"
 ERLANG_COOKIE=$(openssl rand -base64 32)
 ADMIN_PASS="$(openssl rand -base64 18 | cut -c1-13)"
@@ -25,14 +21,19 @@ debconf-set-selections <<<"couchdb couchdb/mode select standalone"
 debconf-set-selections <<<"couchdb couchdb/bindaddress string 0.0.0.0"
 debconf-set-selections <<<"couchdb couchdb/adminpass password $ADMIN_PASS"
 debconf-set-selections <<<"couchdb couchdb/adminpass_again password $ADMIN_PASS"
-curl -fsSL https://couchdb.apache.org/repo/keys.asc | gpg --dearmor -o /usr/share/keyrings/couchdb-archive-keyring.gpg
-VERSION_CODENAME="$(awk -F'=' '/^VERSION_CODENAME=/{ print $NF }' /etc/os-release)"
-echo "deb [signed-by=/usr/share/keyrings/couchdb-archive-keyring.gpg] https://apache.jfrog.io/artifactory/couchdb-deb/ ${VERSION_CODENAME} main" >/etc/apt/sources.list.d/couchdb.sources.list
-$STD apt-get update
-$STD apt-get install -y couchdb
-echo -e "CouchDB Erlang Cookie: \e[32m$ERLANG_COOKIE\e[0m" >>~/CouchDB.creds
-echo -e "CouchDB Admin Password: \e[32m$ADMIN_PASS\e[0m" >>~/CouchDB.creds
-msg_ok "Installed Apache CouchDB."
+setup_deb822_repo \
+  "couchdb" \
+  "https://couchdb.apache.org/repo/keys.asc" \
+  "https://apache.jfrog.io/artifactory/couchdb-deb" \
+  "$(get_os_info codename)" \
+  "main"
+$STD apt install -y couchdb
+{
+  echo "CouchDB Credentials"
+  echo "CouchDB Erlang Cookie: $ERLANG_COOKIE"
+  echo "CouchDB Admin Password: $ADMIN_PASS"
+} >>~/couchdb.creds
+msg_ok "Installed Apache CouchDB"
 
 motd_ssh
 customize

install/apache-guacamole-install.sh

@@ -15,12 +15,11 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   build-essential \
-  jq \
   libcairo2-dev \
-  libturbojpeg0 \
+  libjpeg62-turbo-dev \
   libpng-dev \
   libtool-bin \
-  libossp-uuid-dev \
+  uuid-dev \
   libvncserver-dev \
   freerdp3-dev \
   libssh2-1-dev \
@@ -34,71 +33,61 @@ $STD apt install -y \
   libswscale-dev \
   libavcodec-dev \
   libavutil-dev \
-  libavformat-dev \
-  default-jdk
+  libavformat-dev
 msg_ok "Installed Dependencies"
 
+JAVA_VERSION="11" setup_java
 setup_mariadb
+MARIADB_DB_NAME="guacamole_db" MARIADB_DB_USER="guacamole_user" setup_mariadb_db
 
 msg_info "Setup Apache Tomcat"
-RELEASE=$(curl -fsSL https://dlcdn.apache.org/tomcat/tomcat-9/ | grep -oP '(?<=href=")v[^"/]+(?=/")' | sed 's/^v//' | sort -V | tail -n1)
-mkdir -p /opt/apache-guacamole/tomcat9
-mkdir -p /opt/apache-guacamole/server
-curl -fsSL "https://dlcdn.apache.org/tomcat/tomcat-9/v${RELEASE}/bin/apache-tomcat-${RELEASE}.tar.gz" | tar -xz -C /opt/apache-guacamole/tomcat9 --strip-components=1
+TOMCAT_VERSION=$(curl -fsSL https://dlcdn.apache.org/tomcat/tomcat-9/ | grep -oP '(?<=href=")v[^"/]+(?=/")' | sed 's/^v//' | sort -V | tail -n1)
+mkdir -p /opt/apache-guacamole/{tomcat9,server}
+curl -fsSL "https://dlcdn.apache.org/tomcat/tomcat-9/v${TOMCAT_VERSION}/bin/apache-tomcat-${TOMCAT_VERSION}.tar.gz" | tar -xz -C /opt/apache-guacamole/tomcat9 --strip-components=1
 useradd -r -d /opt/apache-guacamole/tomcat9 -s /bin/false tomcat
 chown -R tomcat: /opt/apache-guacamole/tomcat9
 chmod -R g+r /opt/apache-guacamole/tomcat9/conf
 chmod g+x /opt/apache-guacamole/tomcat9/conf
-msg_ok "Setup Apache Tomcat"
+echo "${TOMCAT_VERSION}" >~/.guacamole_tomcat
+msg_ok "Setup Apache Tomcat ${TOMCAT_VERSION}"
 
 msg_info "Setup Apache Guacamole"
 mkdir -p /etc/guacamole/{extensions,lib}
-RELEASE_SERVER=$(curl -fsSL https://api.github.com/repos/apache/guacamole-server/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
-curl -fsSL "https://api.github.com/repos/apache/guacamole-server/tarball/refs/tags/${RELEASE_SERVER}" | tar -xz --strip-components=1 -C /opt/apache-guacamole/server
+GUAC_SERVER_VERSION=$(curl -fsSL https://api.github.com/repos/apache/guacamole-server/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
+GUAC_CLIENT_VERSION=$(curl -fsSL https://api.github.com/repos/apache/guacamole-client/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
+MYSQL_CONNECTOR_VERSION=$(curl -fsSL "https://repo1.maven.org/maven2/com/mysql/mysql-connector-j/maven-metadata.xml" | grep -oP '<latest>\K[^<]+')
+curl -fsSL "https://api.github.com/repos/apache/guacamole-server/tarball/refs/tags/${GUAC_SERVER_VERSION}" | tar -xz --strip-components=1 -C /opt/apache-guacamole/server
 cd /opt/apache-guacamole/server
 export CPPFLAGS="-Wno-error=deprecated-declarations"
 $STD autoreconf -fi
-$STD ./configure --with-init-dir=/etc/init.d --enable-allow-freerdp-snapshots --disable-guaclog
+$STD ./configure --with-init-dir=/etc/init.d --enable-allow-freerdp-snapshots
 $STD make
 $STD make install
 $STD ldconfig
-RELEASE_CLIENT=$(curl -fsSL https://api.github.com/repos/apache/guacamole-client/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
-curl -fsSL "https://downloads.apache.org/guacamole/${RELEASE_CLIENT}/binary/guacamole-${RELEASE_CLIENT}.war" -o "/opt/apache-guacamole/tomcat9/webapps/guacamole.war"
+echo "${GUAC_SERVER_VERSION}" >~/.guacamole_server
+curl -fsSL "https://downloads.apache.org/guacamole/${GUAC_CLIENT_VERSION}/binary/guacamole-${GUAC_CLIENT_VERSION}.war" -o "/opt/apache-guacamole/tomcat9/webapps/guacamole.war"
+echo "${GUAC_CLIENT_VERSION}" >~/.guacamole_client
+curl -fsSL "https://repo1.maven.org/maven2/com/mysql/mysql-connector-j/${MYSQL_CONNECTOR_VERSION}/mysql-connector-j-${MYSQL_CONNECTOR_VERSION}.jar" -o "/etc/guacamole/lib/mysql-connector-j.jar"
+echo "${MYSQL_CONNECTOR_VERSION}" >~/.guacamole_mysql_connector
 cd /root
-curl -fsSL "https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-j-9.3.0.tar.gz" -o "/root/mysql-connector-j-9.3.0.tar.gz"
-$STD tar -xf ~/mysql-connector-j-9.3.0.tar.gz
-mv ~/mysql-connector-j-9.3.0/mysql-connector-j-9.3.0.jar /etc/guacamole/lib/
-curl -fsSL "https://downloads.apache.org/guacamole/${RELEASE_SERVER}/binary/guacamole-auth-jdbc-${RELEASE_SERVER}.tar.gz" -o "/root/guacamole-auth-jdbc-${RELEASE_SERVER}.tar.gz"
-$STD tar -xf ~/guacamole-auth-jdbc-"$RELEASE_SERVER".tar.gz
-mv ~/guacamole-auth-jdbc-"$RELEASE_SERVER"/mysql/guacamole-auth-jdbc-mysql-"$RELEASE_SERVER".jar /etc/guacamole/extensions/
-rm -rf ~/mysql-connector-j-9.3.0{,.tar.gz}
+curl -fsSL "https://downloads.apache.org/guacamole/${GUAC_SERVER_VERSION}/binary/guacamole-auth-jdbc-${GUAC_SERVER_VERSION}.tar.gz" -o "/root/guacamole-auth-jdbc-${GUAC_SERVER_VERSION}.tar.gz"
+$STD tar -xf ~/guacamole-auth-jdbc-"$GUAC_SERVER_VERSION".tar.gz
+mv ~/guacamole-auth-jdbc-"$GUAC_SERVER_VERSION"/mysql/guacamole-auth-jdbc-mysql-"$GUAC_SERVER_VERSION".jar /etc/guacamole/extensions/
+echo "${GUAC_SERVER_VERSION}" >~/.guacamole_auth_jdbc
 msg_ok "Setup Apache Guacamole"
 
-msg_info "Setup Database"
-DB_NAME=guacamole_db
-DB_USER=guacamole_user
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-{
-  echo "Guacamole-Credentials"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-  echo "Database Name: $DB_NAME"
-} >>~/guacamole.creds
-cd guacamole-auth-jdbc-"${RELEASE_SERVER}"/mysql/schema
-cat *.sql | mariadb -u root ${DB_NAME}
+msg_info "Importing Database Schema"
+cd ~/guacamole-auth-jdbc-"${GUAC_SERVER_VERSION}"/mysql/schema
+cat *.sql | mariadb -u root ${MARIADB_DB_NAME}
 {
   echo "mysql-hostname: 127.0.0.1"
   echo "mysql-port: 3306"
-  echo "mysql-database: $DB_NAME"
-  echo "mysql-username: $DB_USER"
-  echo "mysql-password: $DB_PASS"
-
+  echo "mysql-database: $MARIADB_DB_NAME"
+  echo "mysql-username: $MARIADB_DB_USER"
+  echo "mysql-password: $MARIADB_DB_PASS"
 } >>/etc/guacamole/guacamole.properties
-rm -rf ~/guacamole-auth-jdbc-"$RELEASE_SERVER"{,.tar.gz}
-msg_ok "Setup Database"
+rm -rf ~/guacamole-auth-jdbc-"$GUAC_SERVER_VERSION"{,.tar.gz}
+msg_ok "Imported Database Schema"
 
 msg_info "Setup Service"
 cat <<EOF >/etc/guacamole/guacd.conf
@@ -143,7 +132,7 @@ PIDFile=/var/run/guacd.pid
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl -q enable --now mysql tomcat guacd
+systemctl enable -q --now mysql tomcat guacd
 msg_ok "Setup Service"
 
 motd_ssh

install/apache-tomcat-install.sh

@@ -13,19 +13,6 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  lsb-release \
-  apt-transport-https
-msg_ok "Installed Dependencies"
-
-msg_info "Setting up Adoptium Repository"
-mkdir -p /etc/apt/keyrings
-curl -fsSL "https://packages.adoptium.net/artifactory/api/gpg/key/public" | gpg --dearmor >/etc/apt/trusted.gpg.d/adoptium.gpg
-echo "deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main" >/etc/apt/sources.list.d/adoptium.list
-$STD apt-get update
-msg_ok "Set up Adoptium Repository"
-
 read -r -p "${TAB3}Which Tomcat version would you like to install? (9, 10.1, 11): " version
 case $version in
 9)
@@ -33,25 +20,8 @@ case $version in
   echo "Which LTS Java version would you like to use? (8, 11, 17, 21): "
   read -r jdk_version
   case $jdk_version in
-  8)
-    msg_info "Installing Temurin JDK 8 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-8-jdk
-    msg_ok "Setup Temurin JDK 8 (LTS)"
-    ;;
-  11)
-    msg_info "Installing Temurin JDK 11 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-11-jdk
-    msg_ok "Setup Temurin JDK 11 (LTS)"
-    ;;
-  17)
-    msg_info "Installing Temurin JDK 17 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -qqy temurin-17-jdk
-    msg_ok "Setup Temurin JDK 17 (LTS)"
-    ;;
-  21)
-    msg_info "Installing Temurin JDK 21 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-21-jdk
-    msg_ok "Setup Temurin JDK 21 (LTS)"
+  8 | 11 | 17 | 21)
+    JAVA_VERSION="$jdk_version" setup_java
     ;;
   *)
     msg_error "Invalid JDK version selected. Please enter 8, 11, 17 or 21."
@@ -61,26 +31,14 @@ case $version in
   ;;
 10 | 10.1)
   TOMCAT_VERSION="10"
-  echo "Which LTS Java version would you like to use? (11, 17): "
+  echo "Which LTS Java version would you like to use? (11, 17, 21): "
   read -r jdk_version
   case $jdk_version in
-  11)
-    msg_info "Installing Temurin JDK 11 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-11-jdk
-    msg_ok "Setup Temurin JDK 11"
-    ;;
-  17)
-    msg_info "Installing Temurin JDK 17 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-17-jdk
-    msg_ok "Setup Temurin JDK 17"
-    ;;
-  21)
-    msg_info "Installing Temurin JDK 21 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-21-jdk
-    msg_ok "Setup Temurin JDK 21 (LTS)"
+  11 | 17 | 21)
+    JAVA_VERSION="$jdk_version" setup_java
     ;;
   *)
-    msg_error "Invalid JDK version selected. Please enter 11 or 17."
+    msg_error "Invalid JDK version selected. Please enter 11, 17 or 21."
     exit 1
     ;;
   esac
@@ -90,15 +48,8 @@ case $version in
   echo "Which LTS Java version would you like to use? (17, 21): "
   read -r jdk_version
   case $jdk_version in
-  17)
-    msg_info "Installing Temurin JDK 17 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -qqy temurin-17-jdk
-    msg_ok "Setup Temurin JDK 17"
-    ;;
-  21)
-    msg_info "Installing Temurin JDK 21 (LTS) for Tomcat $TOMCAT_VERSION"
-    $STD apt-get install -y temurin-21-jdk
-    msg_ok "Setup Temurin JDK 21 (LTS)"
+  17 | 21)
+    JAVA_VERSION="$jdk_version" setup_java
     ;;
   *)
     msg_error "Invalid JDK version selected. Please enter 17 or 21."

install/backrest-install.sh

@@ -16,6 +16,13 @@ update_os
 fetch_and_deploy_gh_release "backrest" "garethgeorge/backrest" "prebuild" "latest" "/opt/backrest/bin" "backrest_Linux_x86_64.tar.gz"
 
 msg_info "Creating Service"
+cat <<EOF >/opt/backrest/.env
+BACKREST_PORT=9898
+BACKREST_CONFIG=/opt/backrest/config/config.json
+BACKREST_DATA=/opt/backrest/data
+XDG_CACHE_HOME=/opt/backrest/cache
+EOF
+
 cat <<EOF >/etc/systemd/system/backrest.service
 [Unit]
 Description=Backrest
@@ -24,10 +31,7 @@ After=network.target
 [Service]
 Type=simple
 ExecStart=/opt/backrest/bin/backrest
-Environment="BACKREST_PORT=9898"
-Environment="BACKREST_CONFIG=/opt/backrest/config/config.json"
-Environment="BACKREST_DATA=/opt/backrest/data"
-Environment="XDG_CACHE_HOME=/opt/backrest/cache"
+EnvironmentFile=/opt/backrest/.env
 
 [Install]
 WantedBy=multi-user.target

install/booklore-install.sh

@@ -14,30 +14,15 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y nginx
+$STD apt install -y nginx
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "booklore" "booklore-app/BookLore" "tarball"
 JAVA_VERSION="21" setup_java
 NODE_VERSION="22" setup_nodejs
 setup_mariadb
 setup_yq
-
-msg_info "Setting up database"
-DB_NAME=booklore_db
-DB_USER=booklore_user
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost';"
-$STD mariadb -u root -e "GRANT SELECT ON \`mysql\`.\`time_zone_name\` TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-{
-  echo "BookLore Database Credentials"
-  echo "Database: $DB_NAME"
-  echo "Username: $DB_USER"
-  echo "Password: $DB_PASS"
-} >>~/booklore.creds
-msg_ok "Set up database"
+MARIADB_DB_NAME="booklore_db" MARIADB_DB_USER="booklore_user" MARIADB_DB_EXTRA_GRANTS="GRANT SELECT ON \`mysql\`.\`time_zone_name\`" setup_mariadb_db
+fetch_and_deploy_gh_release "booklore" "booklore-app/BookLore" "tarball"
 
 msg_info "Building Frontend"
 cd /opt/booklore/booklore-ui
@@ -46,22 +31,22 @@ $STD npm run build --configuration=production
 msg_ok "Built Frontend"
 
 msg_info "Creating Environment"
-mkdir -p /opt/booklore_storage{/data,/books,/bookdrop}
+mkdir -p /opt/booklore_storage/{data,books,bookdrop}
 cat <<EOF >/opt/booklore_storage/.env
-DATABASE_URL=jdbc:mariadb://localhost:3306/$DB_NAME
-DATABASE_USERNAME=$DB_USER
-DATABASE_PASSWORD=$DB_PASS
-BOOKLORE_PORT=6060 
+# Database Configuration
+DATABASE_URL=jdbc:mariadb://localhost:3306/${MARIADB_DB_NAME}
+DATABASE_USERNAME=${MARIADB_DB_USER}
+DATABASE_PASSWORD=${MARIADB_DB_PASS}
 
-BOOKLORE_DATA_PATH=/opt/booklore_storage/data
-BOOKLORE_BOOKS_PATH=/opt/booklore_storage/books
-BOOKLORE_BOOKDROP_PATH=/opt/booklore_storage/bookdrop
+# App Configuration (Spring Boot mapping from app.* properties)
+APP_PATH_CONFIG=/opt/booklore_storage/data
+APP_BOOKDROP_FOLDER=/opt/booklore_storage/bookdrop
 EOF
 msg_ok "Created Environment"
 
 msg_info "Building Backend"
 cd /opt/booklore/booklore-api
-APP_VERSION=$(curl -fsSL https://api.github.com/repos/booklore-app/BookLore/releases/latest | yq '.tag_name' | sed 's/^v//')
+APP_VERSION=$(get_latest_github_release "booklore-app/BookLore")
 yq eval ".app.version = \"${APP_VERSION}\"" -i src/main/resources/application.yaml
 $STD ./gradlew clean build --no-daemon
 mkdir -p /opt/booklore/dist
@@ -73,22 +58,24 @@ fi
 cp "$JAR_PATH" /opt/booklore/dist/app.jar
 msg_ok "Built Backend"
 
-msg_info "Configure Nginx"
+msg_info "Configuring Nginx"
 rm -rf /usr/share/nginx/html
 ln -s /opt/booklore/booklore-ui/dist/booklore/browser /usr/share/nginx/html
+rm -f /etc/nginx/sites-enabled/default
 cp /opt/booklore/nginx.conf /etc/nginx/nginx.conf
 sed -i 's/listen \${BOOKLORE_PORT};/listen 6060;/' /etc/nginx/nginx.conf
 sed -i 's/listen \[::\]:${BOOKLORE_PORT};/listen [::]:6060;/' /etc/nginx/nginx.conf
 systemctl restart nginx
 msg_ok "Configured Nginx"
 
-msg_info "Creating Systemd Service"
+msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/booklore.service
 [Unit]
 Description=BookLore Java Service
-After=network.target
+After=network.target mariadb.service
 
 [Service]
+Type=simple
 User=root
 WorkingDirectory=/opt/booklore/dist
 ExecStart=/usr/bin/java -jar /opt/booklore/dist/app.jar
@@ -102,7 +89,7 @@ RestartSec=5
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now booklore
-msg_ok "Created BookLore Service"
+msg_ok "Created Service"
 
 motd_ssh
 customize

install/caddy-install.sh

@@ -14,29 +14,28 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
+$STD apt install -y \
   debian-keyring \
   debian-archive-keyring \
   apt-transport-https
 msg_ok "Installed Dependencies"
 
 msg_info "Installing Caddy"
-curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
-curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' >/etc/apt/sources.list.d/caddy-stable.list
-$STD apt-get update
-$STD apt-get install -y caddy
+setup_deb822_repo \
+  "caddy" \
+  "https://dl.cloudsmith.io/public/caddy/stable/gpg.key" \
+  "https://dl.cloudsmith.io/public/caddy/stable/deb/debian" \
+  "any-version"
+$STD apt install -y caddy
 msg_ok "Installed Caddy"
 
 read -r -p "${TAB3}Would you like to install xCaddy Addon? <y/N> " prompt
 if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
   setup_go
+  fetch_and_deploy_gh_release "xcaddy" "caddyserver/xcaddy" "binary"
+
   msg_info "Setup xCaddy"
-  $STD apt-get install -y git
-  cd /opt
-  RELEASE=$(curl -fsSL https://api.github.com/repos/caddyserver/xcaddy/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-  curl -fsSL "https://github.com/caddyserver/xcaddy/releases/download/${RELEASE}/xcaddy_${RELEASE:1}_linux_amd64.deb" -o "xcaddy_${RELEASE:1}_linux_amd64.deb"
-  $STD dpkg -i xcaddy_"${RELEASE:1}"_linux_amd64.deb
-  rm -rf /opt/xcaddy*
+  $STD apt install -y git
   $STD xcaddy build
   msg_ok "Setup xCaddy"
 fi

install/docker-install.sh

@@ -13,32 +13,17 @@ setting_up_container
 network_check
 update_os
 
-get_latest_release() {
-  curl -fsSL https://api.github.com/repos/"$1"/releases/latest | grep '"tag_name":' | cut -d'"' -f4
-}
+DOCKER_LATEST_VERSION=$(get_latest_github_release "moby/moby")
+PORTAINER_LATEST_VERSION=$(get_latest_github_release "portainer/portainer")
+PORTAINER_AGENT_LATEST_VERSION=$(get_latest_github_release "portainer/agent")
 
-DOCKER_LATEST_VERSION=$(get_latest_release "moby/moby")
-PORTAINER_LATEST_VERSION=$(get_latest_release "portainer/portainer")
-PORTAINER_AGENT_LATEST_VERSION=$(get_latest_release "portainer/agent")
-DOCKER_COMPOSE_LATEST_VERSION=$(get_latest_release "docker/compose")
-
-msg_info "Installing Docker $DOCKER_LATEST_VERSION"
+msg_info "Installing Docker $DOCKER_LATEST_VERSION (with Compose, Buildx)"
 DOCKER_CONFIG_PATH='/etc/docker/daemon.json'
 mkdir -p $(dirname $DOCKER_CONFIG_PATH)
 echo -e '{\n  "log-driver": "journald"\n}' >/etc/docker/daemon.json
 $STD sh <(curl -fsSL https://get.docker.com)
 msg_ok "Installed Docker $DOCKER_LATEST_VERSION"
 
-read -r -p "${TAB3}Install Docker Compose v2 plugin? <y/N> " prompt_compose
-if [[ ${prompt_compose,,} =~ ^(y|yes)$ ]]; then
-  msg_info "Installing Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
-  mkdir -p /usr/local/lib/docker/cli-plugins
-  curl -fsSL "https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_LATEST_VERSION}/docker-compose-$(uname -s)-$(uname -m)" \
-    -o /usr/local/lib/docker/cli-plugins/docker-compose
-  chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
-  msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
-fi
-
 read -r -p "${TAB3}Would you like to add Portainer (UI)? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   msg_info "Installing Portainer $PORTAINER_LATEST_VERSION"

install/dockge-install.sh

@@ -13,27 +13,15 @@ setting_up_container
 network_check
 update_os
 
-get_latest_release() {
-  curl -fsSL https://api.github.com/repos/$1/releases/latest | grep '"tag_name":' | cut -d'"' -f4
-}
+DOCKER_LATEST_VERSION=$(get_latest_github_release "moby/moby")
 
-DOCKER_LATEST_VERSION=$(get_latest_release "moby/moby")
-DOCKER_COMPOSE_LATEST_VERSION=$(get_latest_release "docker/compose")
-
-msg_info "Installing Docker $DOCKER_LATEST_VERSION"
+msg_info "Installing Docker $DOCKER_LATEST_VERSION (with Compose, Buildx)"
 DOCKER_CONFIG_PATH='/etc/docker/daemon.json'
 mkdir -p $(dirname $DOCKER_CONFIG_PATH)
 echo -e '{\n  "log-driver": "journald"\n}' >/etc/docker/daemon.json
 $STD sh <(curl -fsSL https://get.docker.com)
 msg_ok "Installed Docker $DOCKER_LATEST_VERSION"
 
-msg_info "Installing Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
-DOCKER_CONFIG=${DOCKER_CONFIG:-$HOME/.docker}
-mkdir -p $DOCKER_CONFIG/cli-plugins
-curl -fsSL https://github.com/docker/compose/releases/download/$DOCKER_COMPOSE_LATEST_VERSION/docker-compose-linux-x86_64 -o ~/.docker/cli-plugins/docker-compose
-chmod +x $DOCKER_CONFIG/cli-plugins/docker-compose
-msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
-
 msg_info "Installing Dockge"
 mkdir -p /opt/{dockge,stacks}
 curl -fsSL "https://raw.githubusercontent.com/louislam/dockge/master/compose.yaml" -o "/opt/dockge/compose.yaml"

install/domain-monitor-install.sh

@@ -43,7 +43,7 @@ sed -i -e "s|^APP_ENV=.*|APP_ENV=production|" \
   -e "s|^DB_USERNAME=.*|DB_USERNAME=$MARIADB_DB_USER|" \
   -e "s|^DB_PASSWORD=.*|DB_PASSWORD=$MARIADB_DB_PASS|" \
   -e "s|^DB_DATABASE=.*|DB_DATABASE=$MARIADB_DB_NAME|" .env
-echo "0 0 * * * root /usr/bin/php /opt/domain-monitor/cron/check_domains.php" >>/etc/crontab
+echo "0 0 * * * www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php" >>/etc/crontab
 
 cat <<EOF >/etc/apache2/sites-enabled/000-default.conf
 <VirtualHost *:80>

install/fladder-install.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: wendyliga
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/DonutWare/Fladder
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+msg_ok "Installed Dependencies"
+
+fetch_and_deploy_gh_release "Fladder" "DonutWare/Fladder" "prebuild" "latest" "/opt/fladder" "Fladder-Web-*.zip"
+
+msg_info "Configuring Nginx"
+cat <<EOF >/etc/nginx/conf.d/fladder.conf
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+
+    server_name _;
+
+    root /opt/fladder;
+    index index.html;
+
+    location / {
+        try_files \$uri \$uri/ /index.html;
+    }
+}
+EOF
+rm -f /etc/nginx/sites-enabled/default
+rm -f /etc/nginx/sites-available/default
+systemctl enable -q --now nginx
+systemctl reload nginx
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc

install/flatnotes-install.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: luismco
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/dullage/flatnotes
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "flatnotes" "dullage/flatnotes"
+USE_UVX=YES setup_uv
+setup_nodejs
+
+msg_info "Installing Backend"
+cd /opt/flatnotes
+$STD /usr/local/bin/uvx migrate-to-uv
+$STD /usr/local/bin/uv sync
+mkdir /opt/flatnotes/data
+msg_ok "Installed Backend"
+
+msg_info "Installing Frontend"
+cd /opt/flatnotes/client
+$STD npm install
+$STD npm run build
+msg_ok "Installed Frontend"
+
+
+msg_info "Creating Service"
+cat <<EOF >/opt/flatnotes/.env
+FLATNOTES_AUTH_TYPE='none'
+FLATNOTES_PATH='/opt/flatnotes/data/'
+#FLATNOTES_USERNAME='username'
+#FLATNOTES_PASSWORD='password'
+#FLATNOTES_SECRET_KEY='secret-key'
+EOF
+cat <<EOF >/etc/systemd/system/flatnotes.service
+[Unit]
+Description=Flatnotes
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/flatnotes
+EnvironmentFile=/opt/flatnotes/.env
+ExecStart=/opt/flatnotes/.venv/bin/python -m uvicorn main:app --app-dir server --host 0.0.0.0 --port 8080 --proxy-headers
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now flatnotes
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/freshrss-install.sh

@@ -13,22 +13,9 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.2" PHP_MODULE="curl,xml,mbstring,intl,zip,pgsql,gmp" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.4" PHP_MODULE="curl,common,xml,mbstring,intl,zip,pgsql,gmp" PHP_APACHE="YES" setup_php
 PG_VERSION="16" setup_postgresql
-
-msg_info "Setting up PostgreSQL"
-DB_NAME=freshrss
-DB_USER=freshrss
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMPLATE template0;"
-{
-  echo "FreshRSS Credentials"
-  echo "FreshRSS Database User: $DB_USER"
-  echo "FreshRSS Database Password: $DB_PASS"
-  echo "FreshRSS Database Name: $DB_NAME"
-} >>~/freshrss.creds
-msg_ok "Set up PostgreSQL"
+PG_DB_NAME="freshrss" PG_DB_USER="freshrss_usr" setup_postgresql_db
 
 fetch_and_deploy_gh_release "freshrss" "FreshRSS/FreshRSS" "tarball"
 
@@ -65,7 +52,7 @@ cat <<EOF >/etc/apache2/sites-available/freshrss.conf
 </VirtualHost>
 EOF
 $STD a2ensite freshrss
-$STD a2enmod rewrite
+$STD a2enmod rewrite deflate expires headers mime setenvif
 $STD a2dissite 000-default.conf
 $STD systemctl reload apache2
 msg_ok "Created Service"

install/homer-install.sh

@@ -13,32 +13,25 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y pip
-msg_ok "Installed Dependencies"
-
-msg_info "Installing Homer"
-mkdir -p /opt/homer
-cd /opt/homer
-curl -fsSL "https://github.com/bastienwirtz/homer/releases/latest/download/homer.zip" -o "homer.zip"
-$STD unzip homer.zip
-rm -rf homer.zip
-cp assets/config.yml.dist assets/config.yml
-msg_ok "Installed Homer"
+fetch_and_deploy_gh_release "homer" "bastienwirtz/homer" "prebuild" "latest" "/opt/homer" "homer.zip"
+cp /opt/homer/assets/config.yml.dist /opt/homer/assets/config.yml
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/homer.service
 [Unit]
 Description=Homer Dashboard
 After=network-online.target
+Wants=network-online.target
+
 [Service]
 Type=simple
 WorkingDirectory=/opt/homer
 ExecStart=python3 -m http.server 8010
+
 [Install]
 WantedBy=multi-user.target
 EOF
-$STD systemctl enable --now homer
+systemctl enable -q --now homer
 msg_ok "Created Service"
 
 motd_ssh

install/hortusfox-install.sh

@@ -13,37 +13,18 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt install -y apache2
-msg_ok "Installed Dependencies"
-
 setup_mariadb
+MARIADB_DB_NAME="hortusfox" MARIADB_DB_USER="hortusfox" setup_mariadb_db
 PHP_MODULE="exif,mysql" PHP_APACHE="YES" PHP_FPM="NO" PHP_VERSION="8.3" setup_php
 setup_composer
-
-msg_info "Setting up database"
-DB_NAME=hortusfox
-DB_USER=hortusfox
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-{
-  echo "HortusFox Database Credentials"
-  echo "Database: $DB_NAME"
-  echo "Username: $DB_USER"
-  echo "Password: $DB_PASS"
-} >>~/hortusfox.creds
-msg_ok "Set up database"
-
 fetch_and_deploy_gh_release "hortusfox" "danielbrendel/hortusfox-web" "tarball"
 
 msg_info "Configuring .env"
 cp /opt/hortusfox/.env.example /opt/hortusfox/.env
 sed -i "s|^DB_HOST=.*|DB_HOST=localhost|" /opt/hortusfox/.env
-sed -i "s|^DB_USER=.*|DB_USER=$DB_USER|" /opt/hortusfox/.env
-sed -i "s|^DB_PASSWORD=.*|DB_PASSWORD=$DB_PASS|" /opt/hortusfox/.env
-sed -i "s|^DB_DATABASE=.*|DB_DATABASE=$DB_NAME|" /opt/hortusfox/.env
+sed -i "s|^DB_USER=.*|DB_USER=$MARIADB_DB_USER|" /opt/hortusfox/.env
+sed -i "s|^DB_PASSWORD=.*|DB_PASSWORD=$MARIADB_DB_PASS|" /opt/hortusfox/.env
+sed -i "s|^DB_DATABASE=.*|DB_DATABASE=$MARIADB_DB_NAME|" /opt/hortusfox/.env
 sed -i "s|^DB_ENABLE=.*|DB_ENABLE=true|" /opt/hortusfox/.env
 sed -i "s|^APP_TIMEZONE=.*|APP_TIMEZONE=Europe/Berlin|" /opt/hortusfox/.env
 msg_ok ".env configured"
@@ -58,20 +39,20 @@ $STD php asatru migrate:fresh
 msg_ok "Migration finished"
 
 msg_info "Setting up HortusFox"
-$STD mariadb -u root -D $DB_NAME -e "INSERT IGNORE INTO AppModel (workspace, language, created_at) VALUES ('Default Workspace', 'en', NOW());"
+$STD mariadb -u root -D $MARIADB_DB_NAME -e "INSERT IGNORE INTO AppModel (workspace, language, created_at) VALUES ('Default Workspace', 'en', NOW());"
 $STD php asatru plants:attributes
 $STD php asatru calendar:classes
 ADMIN_EMAIL="admin@example.com"
 ADMIN_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)"
 ADMIN_HASH=$(php -r "echo password_hash('$ADMIN_PASS', PASSWORD_BCRYPT);")
-$STD mariadb -u root -D $DB_NAME -e "INSERT IGNORE INTO UserModel (name, email, password, admin) VALUES ('Admin', '$ADMIN_EMAIL', '$ADMIN_HASH', 1);"
+$STD mariadb -u root -D $MARIADB_DB_NAME -e "INSERT IGNORE INTO UserModel (name, email, password, admin) VALUES ('Admin', '$ADMIN_EMAIL', '$ADMIN_HASH', 1);"
 {
   echo ""
   echo "HortusFox-Admin-Creds:"
   echo "E-Mail: $ADMIN_EMAIL"
   echo "Passwort: $ADMIN_PASS"
 } >>~/hortusfox.creds
-$STD mariadb -u root -D $DB_NAME -e "INSERT IGNORE INTO LocationsModel (name, active, created_at) VALUES ('Home', 1, NOW());"
+$STD mariadb -u root -D $MARIADB_DB_NAME -e "INSERT IGNORE INTO LocationsModel (name, active, created_at) VALUES ('Home', 1, NOW());"
 msg_ok "Set up HortusFox"
 
 msg_info "Configuring Apache vHost"

install/immich-install.sh

@@ -29,7 +29,6 @@ $STD apt install --no-install-recommends -y \
   libltdl-dev \
   libgdk-pixbuf-2.0-dev \
   libbrotli-dev \
-  libde265-dev \
   libexif-dev \
   libexpat1-dev \
   libglib2.0-dev \
@@ -99,20 +98,21 @@ if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   $STD apt install -y --no-install-recommends patchelf
   tmp_dir=$(mktemp -d)
   $STD pushd "$tmp_dir"
-  curl -fsSLZ -O "https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17537.24/intel-igc-core_1.0.17537.24_amd64.deb" \
-    -O "https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17537.24/intel-igc-opencl_1.0.17537.24_amd64.deb" \
-    -O "https://github.com/intel/compute-runtime/releases/download/24.35.30872.36/intel-opencl-icd-legacy1_24.35.30872.36_amd64.deb" \
-    -O "https://github.com/intel/intel-graphics-compiler/releases/download/v2.22.2/intel-igc-core-2_2.22.2+20121_amd64.deb" \
-    -O "https://github.com/intel/intel-graphics-compiler/releases/download/v2.22.2/intel-igc-opencl-2_2.22.2+20121_amd64.deb" \
-    -O "https://github.com/intel/compute-runtime/releases/download/25.44.36015.5/intel-opencl-icd_25.44.36015.5-0_amd64.deb" \
-    -O "https://github.com/intel/compute-runtime/releases/download/25.44.36015.5/libigdgmm12_22.8.2_amd64.deb"
+  curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
+  readarray -t INTEL_URLS < <(
+    sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
+    sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
+  )
+  for url in "${INTEL_URLS[@]}"; do
+    curl -fsSLO "$url"
+  done
   $STD apt install -y ./libigdgmm12*.deb
   rm ./libigdgmm12*.deb
   $STD apt install -y ./*.deb
   $STD apt-mark hold libigdgmm12
   $STD popd
   rm -rf "$tmp_dir"
-  dpkg -l | grep "intel-opencl-icd" | awk '{print $3}' >~/.intel_version
+  dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
   msg_ok "Installed OpenVINO dependencies"
 fi
 
@@ -129,9 +129,9 @@ Pin-Priority: 450
 EOF
 $STD apt update
 msg_ok "Configured Debian Testing repo"
-msg_info "Installing libmimalloc3"
-$STD apt install -t testing --no-install-recommends -yqq libmimalloc3
-msg_ok "Installed libmimalloc3"
+msg_info "Installing packages from Debian Testing repo"
+$STD apt install -t testing --no-install-recommends -yqq libmimalloc3 libde265-dev
+msg_ok "Installed packages from Debian Testing repo"
 
 PNPM_VERSION="$(curl -fsSL "https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/package.json" | jq -r '.packageManager | split("@")[1]')"
 NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs

install/infisical-install.sh

@@ -16,11 +16,12 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   apt-transport-https \
-  ca-certificates \
   redis
 msg_ok "Installed Dependencies"
 
 PG_VERSION="17" setup_postgresql
+PG_DB_NAME="infisical_db" PG_DB_USER="infisical" setup_postgresql_db
+import_local_ip
 
 msg_info "Setting up Infisical Repository"
 setup_deb822_repo \
@@ -30,34 +31,16 @@ setup_deb822_repo \
   "stable"
 msg_ok "Setup Infisical repository"
 
-msg_info "Configuring PostgreSQL"
-DB_NAME="infisical_db"
-DB_USER="infisical"
-DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC';"
-{
-  echo "Infiscal Credentials"
-  echo "Database Name: $DB_NAME"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-} >>~/infisical.creds
-msg_ok "Configured PostgreSQL"
-
 msg_info "Setting up Infisical"
 AUTH_SECRET="$(openssl rand -base64 32 | tr -d '\n')"
 ENC_KEY="$(openssl rand -hex 16 | tr -d '\n')"
-IP_ADDR=$(hostname -I | awk '{print $1}')
 $STD apt install -y infisical-core
 mkdir -p /etc/infisical
 cat <<EOF >/etc/infisical/infisical.rb
 infisical_core['ENCRYPTION_KEY'] = '$ENC_KEY'
 infisical_core['AUTH_SECRET'] = '$AUTH_SECRET'
-infisical_core['HOST'] = '$IP_ADDR'
-infisical_core['DB_CONNECTION_URI'] = 'postgres://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}'
+infisical_core['HOST'] = '$LOCAL_IP'
+infisical_core['DB_CONNECTION_URI'] = 'postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}'
 infisical_core['REDIS_URL'] = 'redis://localhost:6379'
 EOF
 $STD infisical-ctl reconfigure

install/influxdb-install.sh

@@ -21,23 +21,29 @@ setup_deb822_repo \
   "stable"
 msg_ok "Set up InfluxDB Repository"
 
-read -r -p "${TAB3}Which version of InfluxDB to install? (1 or 2) " prompt
-if [[ $prompt == "2" ]]; then
+read -r -p "${TAB3}Which version of InfluxDB to install? (1, 2 or 3) " prompt
+if [[ $prompt == "3" ]]; then
+  INFLUX="3"
+elif [[ $prompt == "2" ]]; then
   INFLUX="2"
 else
   INFLUX="1"
 fi
 
-msg_info "Installing InfluxDB"
-if [[ $INFLUX == "2" ]]; then
+msg_info "Installing InfluxDB v${INFLUX}"
+if [[ $INFLUX == "3" ]]; then
+  $STD apt install -y influxdb3-core
+  systemctl enable -q --now influxdb3-core
+elif [[ $INFLUX == "2" ]]; then
   $STD apt install -y influxdb2
+  systemctl enable -q --now influxdb
 else
   $STD apt install -y influxdb
   download_file "https://dl.influxdata.com/chronograf/releases/chronograf_1.10.8_amd64.deb" "${HOME}/chronograf_1.10.8_amd64.deb"
   $STD dpkg -i "${HOME}/chronograf_1.10.8_amd64.deb"
   rm -rf "${HOME}/chronograf_1.10.8_amd64.deb"
+  systemctl enable -q --now influxdb
 fi
-systemctl enable -q --now influxdb
 msg_ok "Installed InfluxDB"
 
 read -r -p "${TAB3}Would you like to add Telegraf? <y/N> " prompt

install/investbrain-install.sh

@@ -0,0 +1,182 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Benito Rodríguez (b3ni)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/investbrainapp/investbrain
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nginx \
+  supervisor \
+  redis-server \
+  libfreetype-dev \
+  libjpeg62-turbo-dev \
+  libpng-dev \
+  zlib1g-dev \
+  libzip-dev \
+  libicu-dev \
+  libpq-dev
+msg_ok "Installed Dependencies"
+
+export PHP_VERSION="8.4"
+PHP_FPM=YES PHP_MODULE="gd,zip,intl,pdo,pgsql,pdo-pgsql,bcmath,opcache,mbstring,redis" setup_php
+setup_composer
+NODE_VERSION="22" setup_nodejs
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="investbrain" PG_DB_USER="investbrain" setup_postgresql_db
+import_local_ip
+
+fetch_and_deploy_gh_release "Investbrain" "investbrainapp/investbrain" "tarball" "latest" "/opt/investbrain"
+
+msg_info "Installing Investbrain"
+APP_KEY=$(openssl rand -base64 32)
+cd /opt/investbrain
+cat <<EOF >/opt/investbrain/.env
+APP_KEY=base64:${APP_KEY}
+APP_PORT=8000
+APP_URL=http://${LOCAL_IP}:8000
+ASSET_URL=http://${LOCAL_IP}:8000
+
+LOG_CHANNEL=daily
+LOG_LEVEL=warning
+
+REGISTRATION_ENABLED=true
+
+AI_CHAT_ENABLED=false
+OPENAI_API_KEY=
+OPENAI_ORGANIZATION=
+
+MARKET_DATA_PROVIDER=yahoo
+ALPHAVANTAGE_API_KEY=
+FINNHUB_API_KEY=
+ALPACA_API_KEY=
+ALPACA_API_SECRET=
+TWELVEDATA_API_SECRET=
+
+MARKET_DATA_REFRESH=30
+DAILY_CHANGE_TIME=
+
+DB_CONNECTION=pgsql
+DB_HOST=127.0.0.1
+DB_PORT=5432
+DB_DATABASE=${PG_DB_NAME}
+DB_USERNAME=${PG_DB_USER}
+DB_PASSWORD=${PG_DB_PASS}
+
+REDIS_CLIENT=phpredis
+REDIS_HOST=127.0.0.1
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+CACHE_STORE=redis
+CACHE_PREFIX=
+
+SESSION_DRIVER=redis
+SESSION_LIFETIME=120
+
+QUEUE_CONNECTION=redis
+
+MAIL_MAILER=log
+MAIL_HOST=127.0.0.1
+MAIL_PORT=2525
+MAIL_FROM_ADDRESS="investbrain@${LOCAL_IP}"
+
+VITE_APP_NAME=Investbrain
+EOF
+export COMPOSER_ALLOW_SUPERUSER=1
+$STD /usr/local/bin/composer install --no-interaction --no-dev --optimize-autoloader
+$STD npm install
+$STD npm run build
+mkdir -p /opt/investbrain/storage/{framework/cache,framework/sessions,framework/views,app,logs}
+$STD php artisan migrate --force
+$STD php artisan storage:link
+$STD php artisan cache:clear
+$STD php artisan view:clear
+$STD php artisan route:clear
+$STD php artisan event:clear
+$STD php artisan route:cache
+$STD php artisan event:cache
+chown -R www-data:www-data /opt/investbrain
+chmod -R 775 /opt/investbrain/bootstrap/cache
+msg_ok "Installed Investbrain"
+
+msg_info "Configuring Nginx"
+cat <<EOF >/etc/nginx/sites-available/investbrain.conf
+server {
+    listen 8000 default_server;
+    listen [::]:8000 default_server;
+    server_name _;
+
+    root /opt/investbrain/public;
+    index index.php;
+
+    client_max_body_size 50M;
+    charset utf-8;
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    location / {
+        try_files \$uri \$uri/ /index.php?\$query_string;
+    }
+
+    location ~ \.php\$ {
+        fastcgi_pass unix:/var/run/php/php${PHP_VERSION}-fpm.sock;
+        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_hide_header X-Powered-By;
+        fastcgi_read_timeout 300;
+    }
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+
+    error_log /var/log/nginx/investbrain_error.log;
+    access_log /var/log/nginx/investbrain_access.log;
+}
+EOF
+ln -sf /etc/nginx/sites-available/investbrain.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
+msg_ok "Configured Nginx"
+
+msg_info "Setting up Supervisor"
+cat <<EOF >/etc/supervisor/conf.d/investbrain.conf
+[program:investbrain-queue]
+process_name=%%(program_name)s_%%(process_num)02d
+command=php /opt/investbrain/artisan queue:work --sleep=3 --tries=1 --memory=256 --timeout=3600
+user=www-data
+autostart=true
+autorestart=true
+redirect_stderr=true
+stdout_logfile=/opt/investbrain/storage/logs/queue.log
+stdout_logfile_maxbytes=50MB
+stdout_logfile_backups=10
+numprocs=1
+EOF
+$STD supervisorctl reread
+$STD supervisorctl update
+$STD supervisorctl start all
+msg_ok "Setup Supervisor"
+
+msg_info "Setting up Cron for Scheduler"
+cat <<EOF >/etc/cron.d/investbrain-scheduler
+* * * * * www-data php /opt/investbrain/artisan schedule:run >> /dev/null 2>&1
+EOF
+chmod 644 /etc/cron.d/investbrain-scheduler
+$STD systemctl restart cron
+msg_ok "Setup Cron for Scheduler"
+
+motd_ssh
+customize
+cleanup_lxc

install/invoiceninja-install.sh

@@ -106,6 +106,7 @@ $STD php artisan migrate --force
 $STD php artisan db:seed --force
 $STD php artisan ninja:post-update
 $STD php artisan optimize
+chown -R www-data:www-data /opt/invoiceninja
 msg_ok "Set up Database"
 
 msg_info "Configuring Nginx"

install/joplin-server-install.sh

@@ -20,6 +20,7 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 PG_VERSION="17" setup_postgresql
+PG_DB_NAME="joplin" PG_DB_USER="joplin" setup_postgresql_db
 NODE_VERSION=24 NODE_MODULE="yarn,npm,pm2" setup_nodejs
 mkdir -p /opt/pm2
 export PM2_HOME=/opt/pm2
@@ -27,28 +28,10 @@ $STD pm2 install pm2-logrotate
 $STD pm2 set pm2-logrotate:max_size 100MB
 $STD pm2 set pm2-logrotate:retain 5
 $STD pm2 set pm2-logrotate:compress tr
-
-msg_info "Setting up PostgreSQL Database"
-DB_NAME=joplin
-DB_USER=joplin
-DB_PASS="$(openssl rand -base64 18 | cut -c1-13)"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
-{
-  echo "Joplin-Credentials"
-  echo "Joplin Database User: $DB_USER"
-  echo "Joplin Database Password: $DB_PASS"
-  echo "Joplin Database Name: $DB_NAME"
-} >>~/joplin.creds
-msg_ok "Set up PostgreSQL Database"
-
-fetch_and_deploy_gh_release "joplin-server" "laurent22/joplin" "tarball" "latest"
+fetch_and_deploy_gh_release "joplin-server" "laurent22/joplin" "tarball"
+import_local_ip
 
 msg_info "Setting up Joplin Server (Patience)"
-LOCAL_IP=$(hostname -I | awk '{print $1}')
 cd /opt/joplin-server
 sed -i "/onenote-converter/d" packages/lib/package.json
 $STD yarn config set --home enableTelemetry 0
@@ -61,9 +44,9 @@ NODE_ENV=production
 APP_BASE_URL=http://$LOCAL_IP:22300
 APP_PORT=22300
 DB_CLIENT=pg
-POSTGRES_PASSWORD=$DB_PASS
-POSTGRES_DATABASE=$DB_NAME
-POSTGRES_USER=$DB_USER
+POSTGRES_PASSWORD=$PG_DB_PASS
+POSTGRES_DATABASE=$PG_DB_NAME
+POSTGRES_USER=$PG_DB_USER
 POSTGRES_PORT=5432
 POSTGRES_HOST=localhost
 EOF

install/jotty-install.sh

@@ -18,6 +18,8 @@ fetch_and_deploy_gh_release "jotty" "fccview/jotty" "tarball" "latest" "/opt/jot
 
 msg_info "Installing ${APPLICATION}"
 cd /opt/jotty
+unset NODE_OPTIONS
+export NODE_OPTIONS="--max-old-space-size=3072"
 $STD yarn --frozen-lockfile
 $STD yarn next telemetry disable
 $STD yarn build
@@ -28,7 +30,7 @@ mkdir -p .next/standalone/.next
 cp -r .next/static .next/standalone/.next/
 
 mv .next/standalone /tmp/jotty_standalone
-rm -rf * .next .git .gitignore .yarn
+rm -rf ./* .next .git .gitignore .yarn
 mv /tmp/jotty_standalone/* .
 mv /tmp/jotty_standalone/.[!.]* . 2>/dev/null || true
 rm -rf /tmp/jotty_standalone

install/kutt-install.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: tomfrenzel
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/thedevs-network/kutt
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+echo "${TAB3}How would you like to handle SSL termination?"
+echo "${TAB3}[i]-Internal (self-signed SSL Certificate)   [e]-External (use your own reverse proxy)"
+read -rp "${TAB3}Enter your choice <i/e> (default: i): " ssl_choice
+ssl_choice=${ssl_choice:-i}
+case "${ssl_choice,,}" in
+i)
+  import_local_ip
+  DEFAULT_HOST="$LOCAL_IP"
+
+  msg_info "Configuring Caddy"
+  $STD apt install -y caddy
+  cat <<EOF >/etc/caddy/Caddyfile
+$LOCAL_IP {
+    reverse_proxy localhost:3000
+}
+EOF
+  systemctl restart caddy
+  msg_ok "Configured Caddy"
+  ;;
+e)
+  read -r -p "${TAB3}Enter the hostname you want to use for Kutt (eg. kutt.example.com): " custom_host
+  if [[ "$custom_host" ]]; then
+    DEFAULT_HOST="$custom_host"
+  fi
+  ;;
+esac
+
+NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "kutt" "thedevs-network/kutt" "tarball"
+
+msg_info "Configuring Kutt"
+cd /opt/kutt
+cp .example.env ".env"
+sed -i "s|JWT_SECRET=|JWT_SECRET=$(openssl rand -base64 32)|g" ".env"
+sed -i "s|DEFAULT_DOMAIN=.*|DEFAULT_DOMAIN=$DEFAULT_HOST|g" ".env"
+$STD npm install
+$STD npm run migrate
+msg_ok "Configured Kutt"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/kutt.service
+[Unit]
+Description=Kutt server
+After=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/kutt
+ExecStart=/usr/bin/npm start
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now kutt
+msg_ok "Created Services"
+
+motd_ssh
+customize
+cleanup_lxc

install/leantime-install.sh

@@ -15,22 +15,7 @@ update_os
 
 PHP_VERSION="8.4" PHP_MODULE="mysql" PHP_APACHE="YES" PHP_FPM="YES" setup_php
 setup_mariadb
-
-msg_info "Setting up Database"
-DB_NAME=leantime
-DB_USER=leantime
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mysql -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mysql -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED WITH mysql_native_password AS PASSWORD('$DB_PASS');"
-$STD mysql -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-{
-  echo "Leantime Credentials"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-  echo "Database Name: $DB_NAME"
-} >>~/leantime.creds
-msg_ok "Set up Database"
-
+MARIADB_DB_NAME="leantime" MARIADB_DB_USER="leantime" setup_mariadb_db
 fetch_and_deploy_gh_release "leantime" "Leantime/leantime" "prebuild" "latest" "/opt/leantime" Leantime*.tar.gz
 
 msg_info "Setup Leantime"
@@ -58,9 +43,9 @@ cat <<EOF >/etc/apache2/sites-enabled/000-default.conf
 </VirtualHost>
 EOF
 mv "/opt/leantime/config/sample.env" "/opt/leantime/config/.env"
-sed -i -e "s|^LEAN_DB_DATABASE.*|LEAN_DB_DATABASE = '$DB_NAME'|" \
-  -e "s|^LEAN_DB_USER.*|LEAN_DB_USER = '$DB_USER'|" \
-  -e "s|^LEAN_DB_PASSWORD.*|LEAN_DB_PASSWORD = '$DB_PASS'|" \
+sed -i -e "s|^LEAN_DB_DATABASE.*|LEAN_DB_DATABASE = '$MARIADB_DB_NAME'|" \
+  -e "s|^LEAN_DB_USER.*|LEAN_DB_USER = '$MARIADB_DB_USER'|" \
+  -e "s|^LEAN_DB_PASSWORD.*|LEAN_DB_PASSWORD = '$MARIADB_DB_PASS'|" \
   -e "s|^LEAN_SESSION_PASSWORD.*|LEAN_SESSION_PASSWORD = '$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)'|" \
   "/opt/leantime/config/.env"
 $STD a2enmod -q proxy_fcgi setenvif rewrite

install/nginxproxymanager-install.sh

@@ -54,12 +54,11 @@ msg_ok "Installed Openresty"
 
 NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
 
-# RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
-#  grep "tag_name" |
-#  awk '{print substr($2, 3, length($2)-4) }')
-RELEASE="2.13.5"
+RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
+  grep "tag_name" |
+  awk '{print substr($2, 3, length($2)-4) }')
 
-fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager" "tarball" "v2.13.5"
+fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager" "tarball" "v${RELEASE}"
 
 msg_info "Setting up Environment"
 ln -sf /usr/bin/python3 /usr/bin/python

install/ollama-install.sh

@@ -16,7 +16,8 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   build-essential \
-  pkg-config
+  pkg-config \
+  zstd
 msg_ok "Installed Dependencies"
 
 msg_info "Setting up Intel® Repositories"
@@ -67,11 +68,11 @@ RELEASE=$(curl -fsSL https://api.github.com/repos/ollama/ollama/releases/latest
 OLLAMA_INSTALL_DIR="/usr/local/lib/ollama"
 BINDIR="/usr/local/bin"
 mkdir -p $OLLAMA_INSTALL_DIR
-OLLAMA_URL="https://github.com/ollama/ollama/releases/download/${RELEASE}/ollama-linux-amd64.tgz"
-TMP_TAR="/tmp/ollama.tgz"
+OLLAMA_URL="https://github.com/ollama/ollama/releases/download/${RELEASE}/ollama-linux-amd64.tar.zst"
+TMP_TAR="/tmp/ollama.tar.zst"
 echo -e "\n"
 if curl -fL# -C - -o "$TMP_TAR" "$OLLAMA_URL"; then
-  if tar -xzf "$TMP_TAR" -C "$OLLAMA_INSTALL_DIR"; then
+  if tar --zstd -xf "$TMP_TAR" -C "$OLLAMA_INSTALL_DIR"; then
     ln -sf "$OLLAMA_INSTALL_DIR/bin/ollama" "$BINDIR/ollama"
     echo "${RELEASE}" >/opt/Ollama_version.txt
     msg_ok "Installed Ollama ${RELEASE}"

install/openwebui-install.sh

@@ -14,7 +14,9 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y ffmpeg
+$STD apt install -y \
+  ffmpeg \
+  zstd
 msg_ok "Installed Dependencies"
 
 setup_hwaccel
@@ -69,9 +71,10 @@ EOF
   msg_ok "Installed Intel® oneAPI Base Toolkit"
 
   msg_info "Installing Ollama"
-  curl -fsSLO -C - https://ollama.com/download/ollama-linux-amd64.tgz
-  tar -C /usr -xzf ollama-linux-amd64.tgz
-  rm -rf ollama-linux-amd64.tgz
+  OLLAMA_RELEASE=$(curl -fsSL https://api.github.com/repos/ollama/ollama/releases/latest | grep "tag_name" | awk -F '"' '{print $4}')
+  curl -fsSLO -C - https://github.com/ollama/ollama/releases/download/${OLLAMA_RELEASE}/ollama-linux-amd64.tar.zst
+  tar --zstd -C /usr -xf ollama-linux-amd64.tar.zst
+  rm -rf ollama-linux-amd64.tar.zst
   cat <<EOF >/etc/systemd/system/ollama.service
 [Unit]
 Description=Ollama Service

install/pihole-install.sh

@@ -69,7 +69,7 @@ read -r -p "${TAB3}Would you like to add Unbound? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   read -r -p "${TAB3}Unbound is configured as a recursive DNS server by default, would you like it to be configured as a forwarding DNS server (using DNS-over-TLS (DoT)) instead? <y/N> " prompt
   msg_info "Installing Unbound"
-  $STD apt install -y unbound
+  mkdir -p /etc/unbound/unbound.conf.d
   cat <<EOF >/etc/unbound/unbound.conf.d/pi-hole.conf
 server:
   verbosity: 0
@@ -142,6 +142,7 @@ forward-zone:
   #forward-addr: 2620:fe::9@853#dns.quad9.net
 EOF
   fi
+  $STD apt install -y unbound
   cat <<EOF >/etc/dnsmasq.d/01-pihole.conf
 server=127.0.0.1#5335
 server=8.8.8.8
@@ -149,7 +150,7 @@ server=8.8.4.4
 EOF
 
   sed -i -E '/^\s*upstreams\s*=\s*\[/,/^\s*\]/c\  upstreams = [\n    "127.0.0.1#5335",\n    "8.8.4.4"\n  ]' /etc/pihole/pihole.toml
-  systemctl enable -q --now unbound
+  systemctl restart unbound
   systemctl restart pihole-FTL.service
   msg_ok "Installed Unbound"
 fi

install/qui-install.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (Canbiz)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/autobrr/qui
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "qui" "autobrr/qui" "prebuild" "latest" "/usr/local/bin" "qui_*_linux_x86_64.tar.gz"
+chmod +x /usr/local/bin/qui
+ln -sf /usr/local/bin/qui /usr/bin/qui
+ln -sf /usr/local/bin/qui /opt/qui
+
+msg_info "Creating Qui Service"
+cat <<EOF >/etc/systemd/system/qui.service
+[Unit]
+Description=Qui - qBittorrent Web UI
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/qui serve
+Restart=on-failure
+RestartSec=5s
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now qui
+msg_ok "Created Qui Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/trip-install.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: CrazyWolf13
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/itskovacs/TRIP
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="22" setup_nodejs
+PYTHON_VERSION="3.12" setup_uv
+fetch_and_deploy_gh_release "trip" "itskovacs/TRIP" "tarball"
+
+msg_info "Building Frontend"
+cd /opt/trip/src
+$STD npm install
+$STD npm run build
+msg_ok "Built Frontend"
+
+msg_info "Setting up Backend"
+cd /opt/trip/backend
+$STD uv venv /opt/trip/.venv
+$STD uv pip install --python /opt/trip/.venv/bin/python -r trip/requirements.txt
+msg_ok "Set up Backend"
+
+msg_info "Configuring Application"
+mkdir -p /opt/trip/frontend
+cp -r /opt/trip/src/dist/trip/browser/* /opt/trip/frontend/
+mkdir -p /opt/trip_storage/{attachments,backups,assets}
+
+cat <<EOF >/opt/trip.env
+# TRIP Configuration
+# https://itskovacs.github.io/trip/docs/getting-started/configuration/
+ATTACHMENTS_FOLDER=/opt/trip_storage/attachments
+BACKUPS_FOLDER=/opt/trip_storage/backups
+ASSETS_FOLDER=/opt/trip_storage/assets
+FRONTEND_FOLDER=/opt/trip/frontend
+SQLITE_FILE=/opt/trip_storage/trip.sqlite
+EOF
+msg_ok "Configured Application"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/trip.service
+[Unit]
+Description=TRIP - Minimalist POI Map Tracker and Trip Planner
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/trip/backend
+EnvironmentFile=/opt/trip.env
+ExecStart=/opt/trip/.venv/bin/fastapi run /opt/trip/backend/trip/main.py --host 0.0.0.0 --port 8000
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now trip
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/unbound-install.sh

@@ -14,11 +14,7 @@ network_check
 update_os
 
 msg_info "Installing Unbound"
-$STD apt install -y \
-  unbound \
-  unbound-host
-msg_info "Installed Unbound"
-
+mkdir -p /etc/unbound/unbound.conf.d
 cat <<EOF >/etc/unbound/unbound.conf.d/unbound.conf
 server:
   interface: 0.0.0.0
@@ -52,13 +48,17 @@ server:
   logfile: /var/log/unbound.log
 EOF
 
+$STD apt install -y \
+  unbound \
+  unbound-host
+
 touch /var/log/unbound.log
 chown unbound:unbound /var/log/unbound.log
 sleep 5
 systemctl restart unbound
 msg_ok "Installed Unbound"
 
-msg_ok "Configuring Logrotate"
+msg_info "Configuring Logrotate"
 cat <<EOF >/etc/logrotate.d/unbound
 /var/log/unbound.log {
   daily
@@ -74,7 +74,6 @@ cat <<EOF >/etc/logrotate.d/unbound
   endscript
 }
 EOF
-
 systemctl restart logrotate
 msg_ok "Configured Logrotate"
 

install/unifi-os-server-install.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://ui.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+if [[ "${CTTYPE:-1}" != "0" ]]; then
+  msg_error "UniFi OS Server requires a privileged LXC container."
+  msg_error "Recreate the container with unprivileged=0."
+  exit 1
+fi
+
+if [[ ! -e /dev/net/tun ]]; then
+  msg_error "Missing /dev/net/tun in container."
+  msg_error "Enable TUN/TAP (var_tun=yes) or add /dev/net/tun passthrough."
+  exit 1
+fi
+
+msg_info "Installing dependencies"
+$STD apt install -y \
+  podman \
+  uidmap \
+  slirp4netns
+msg_ok "Installed dependencies"
+
+msg_info "Installing sysctl wrapper (ignore non-critical errors)"
+cat <<'EOF' >/usr/local/sbin/sysctl
+#!/bin/sh
+/usr/sbin/sysctl "$@" || true
+exit 0
+EOF
+chmod +x /usr/local/sbin/sysctl
+export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+msg_ok "Sysctl wrapper installed"
+
+msg_info "Fetching latest UniFi OS Server"
+API_URL="https://fw-update.ui.com/api/firmware-latest"
+TEMP_JSON="$(mktemp)"
+if ! curl -fsSL "$API_URL" -o "$TEMP_JSON"; then
+  rm -f "$TEMP_JSON"
+  msg_error "Failed to fetch data from Ubiquiti API"
+  exit 1
+fi
+LATEST=$(jq -r '
+  ._embedded.firmware
+  | map(select(.product == "unifi-os-server"))
+  | map(select(.platform == "linux-x64"))
+  | sort_by(.version_major, .version_minor, .version_patch)
+  | last
+' "$TEMP_JSON")
+UOS_VERSION=$(echo "$LATEST" | jq -r '.version' | sed 's/^v//')
+UOS_URL=$(echo "$LATEST" | jq -r '._links.data.href')
+rm -f "$TEMP_JSON"
+if [[ -z "$UOS_URL" || -z "$UOS_VERSION" || "$UOS_URL" == "null" ]]; then
+  msg_error "Failed to parse UniFi OS Server version or download URL"
+  exit 1
+fi
+msg_ok "Found UniFi OS Server ${UOS_VERSION}"
+
+msg_info "Downloading UniFi OS Server installer"
+mkdir -p /usr/local/sbin
+curl -fsSL "$UOS_URL" -o /usr/local/sbin/unifi-os-server.bin
+chmod +x /usr/local/sbin/unifi-os-server.bin
+msg_ok "Downloaded UniFi OS Server installer"
+
+msg_info "Installing UniFi OS Server (this takes a few minutes)"
+$STD /usr/local/sbin/unifi-os-server.bin <<<"y"
+msg_ok "UniFi OS Server installed"
+
+motd_ssh
+customize
+cleanup_lxc