fix(install): fix Debian 13 LXC template root ownership bug

The Debian 13 LXC template has a bug where / is owned by nobody instead of root. This causes systemd-tmpfiles to fail with exit code 73 during package installation (e.g. authelia). Fix by checking and correcting / ownership at container setup.
Update CHANGELOG.md (#11274 )
2026-02-03 20:03:25 +01:00 · 2026-01-28 14:33:25 +01:00 · 2026-01-28 12:26:48 +00:00 · 2026-01-28 13:26:20 +01:00 · 2026-01-28 12:25:29 +00:00 · 2026-01-28 13:25:07 +01:00
18 changed files with 359 additions and 323 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -393,6 +393,34 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 ## 2026-01-28

+### 🚀 Updated Scripts
+
+  - #### ✨ New Features
+
+    - various scripts: use setup_meilisearch function [@MickLesk](https://github.com/MickLesk) ([#11259](https://github.com/community-scripts/ProxmoxVE/pull/11259))
+
+  - #### 🔧 Refactor
+
+    - Refactor: NPMPlus / Default Login [@MickLesk](https://github.com/MickLesk) ([#11262](https://github.com/community-scripts/ProxmoxVE/pull/11262))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - tools.func: prevent systemd-tmpfiles failure in unprivileged LXC during deb install [@MickLesk](https://github.com/MickLesk) ([#11271](https://github.com/community-scripts/ProxmoxVE/pull/11271))
+    - tools.func: fix php "wait_for" hint [@MickLesk](https://github.com/MickLesk) ([#11254](https://github.com/community-scripts/ProxmoxVE/pull/11254))
+
+  - #### ✨ New Features
+
+    - core: update dynamic values in LXC profile on update_motd_ip [@MickLesk](https://github.com/MickLesk) ([#11268](https://github.com/community-scripts/ProxmoxVE/pull/11268))
+    - tools.func: add new function - setup_meilisearch [@MickLesk](https://github.com/MickLesk) ([#11258](https://github.com/community-scripts/ProxmoxVE/pull/11258))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - fix: homarr: conf location [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11253](https://github.com/community-scripts/ProxmoxVE/pull/11253))
+
 ## 2026-01-27

 ### 🚀 Updated Scripts
--- a/ct/bar-assistant.sh
+++ b/ct/bar-assistant.sh
@@ -34,7 +34,7 @@ function update_script() {
    systemctl stop nginx
    msg_ok "Stopped nginx"

-    PHP_VERSION="8.4" PHP_FPM=YES PHP_MODULE="ffi,opcache,redis,zip,pdo-sqlite,bcmath,pdo,curl,dom,fpm" setup_php
+    PHP_VERSION="8.4" PHP_FPM=YES PHP_MODULE="ffi,redis,pdo-sqlite" setup_php

    msg_info "Backing up Bar Assistant"
    mv /opt/bar-assistant /opt/bar-assistant-backup
@@ -88,18 +88,8 @@ function update_script() {
    msg_ok "Started nginx"
  fi

-  if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
-    msg_info "Stopping Meilisearch"
-    systemctl stop meilisearch
-    msg_ok "Stopped Meilisearch"
+  setup_meilisearch

-    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
-
-    msg_info "Starting Meilisearch"
-    systemctl start meilisearch
-    msg_ok "Started Meilisearch"
-    msg_ok "Updated successfully!"
-  fi
  exit
 }

--- a/ct/karakeep.sh
+++ b/ct/karakeep.sh
@@ -61,6 +61,7 @@ function update_script() {
    fi
    MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
    NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
+    setup_meilisearch

    msg_info "Updating Karakeep"
    corepack enable
@@ -90,6 +91,7 @@ function update_script() {
    msg_ok "Started Services"
    msg_ok "Updated successfully!"
  fi
+
  exit
 }

--- a/ct/meilisearch.sh
+++ b/ct/meilisearch.sh
@@ -30,18 +30,7 @@ function update_script() {
    3>&1 1>&2 2>&3)

  if [ "$UPD" == "1" ]; then
-    if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
-      msg_info "Stopping Meilisearch"
-      systemctl stop meilisearch
-      msg_ok "Stopped Meilisearch"
-
-      fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
-
-      msg_info "Starting Meilisearch"
-      systemctl start meilisearch
-      msg_ok "Started Meilisearch"
-      msg_ok "Updated successfully!"
-    fi
+    setup_meilisearch
    exit
  fi

--- a/ct/open-archiver.sh
+++ b/ct/open-archiver.sh
@@ -28,6 +28,8 @@ function update_script() {
    exit
  fi

+  setup_meilisearch
+
  if check_for_gh_release "openarchiver" "LogicLabs-OU/OpenArchiver"; then
    msg_info "Stopping Services"
    systemctl stop openarchiver
@@ -54,6 +56,7 @@ function update_script() {
    msg_ok "Started Services"
    msg_ok "Updated successfully!"
  fi
+
  exit
 }

--- a/ct/paymenter.sh
+++ b/ct/paymenter.sh
@@ -31,7 +31,7 @@ function update_script() {

  CURRENT_PHP=$(php -v 2>/dev/null | awk '/^PHP/{print $2}' | cut -d. -f1,2)
  if [[ "$CURRENT_PHP" != "8.3" ]]; then
-    PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="common,mysql,fpm,redis" setup_php
+    PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="mysql,redis" setup_php
    setup_composer
    sed -i 's|php8\.2-fpm\.sock|php8.3-fpm.sock|g' /etc/nginx/sites-available/paymenter.conf
    $STD systemctl reload nginx
--- a/frontend/public/json/homarr.json
+++ b/frontend/public/json/homarr.json
@@ -12,7 +12,7 @@
  "documentation": "https://homarr.dev/docs/getting-started/",
  "website": "https://homarr.dev/",
  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/homarr.webp",
-  "config_path": "/opt/homarr/.env",
+  "config_path": "/opt/homarr.env",
  "description": "Homarr is a sleek, modern dashboard that puts all of your apps and services at your fingertips.",
  "install_methods": [
    {
--- a/frontend/public/json/npmplus.json
+++ b/frontend/public/json/npmplus.json
@@ -39,8 +39,8 @@
    }
  ],
  "default_credentials": {
-    "username": "admin@example.org",
-    "password": null
+    "username": "admin@local.com",
+    "password": "helper-scripts.com"
  },
  "notes": [
    {
@@ -48,11 +48,7 @@
      "type": "info"
    },
    {
-      "text": "The initial starting process can be take 1-2min. ",
-      "type": "info"
-    },
-    {
-      "text": "Application credentials: `cat /opt/.npm_pwd` - if file not exist in LXC check docker logs for password with `docker logs npmplus`",
+      "text": "The initial starting process can take 1-2min. ",
      "type": "info"
    }
  ]
--- a/frontend/public/json/versions.json
+++ b/frontend/public/json/versions.json
@@ -1,4 +1,109 @@
 [
+  {
+    "name": "cockpit-project/cockpit",
+    "version": "355",
+    "date": "2026-01-28T11:14:44Z"
+  },
+  {
+    "name": "go-vikunja/vikunja",
+    "version": "v1.0.0",
+    "date": "2026-01-28T11:12:59Z"
+  },
+  {
+    "name": "glpi-project/glpi",
+    "version": "11.0.5",
+    "date": "2026-01-28T10:49:10Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.60.0-rc1",
+    "date": "2026-01-28T10:38:45Z"
+  },
+  {
+    "name": "toeverything/AFFiNE",
+    "version": "v2026.1.28-canary.910",
+    "date": "2026-01-28T10:02:45Z"
+  },
+  {
+    "name": "cross-seed/cross-seed",
+    "version": "v7.0.0-7",
+    "date": "2026-01-22T06:46:13Z"
+  },
+  {
+    "name": "SigNoz/signoz",
+    "version": "v0.109.2",
+    "date": "2026-01-28T08:26:01Z"
+  },
+  {
+    "name": "meilisearch/meilisearch",
+    "version": "latest",
+    "date": "2026-01-28T08:21:07Z"
+  },
+  {
+    "name": "emqx/emqx",
+    "version": "e5.10.3",
+    "date": "2026-01-28T07:50:24Z"
+  },
+  {
+    "name": "cloudreve/cloudreve",
+    "version": "4.12.1",
+    "date": "2026-01-28T07:29:16Z"
+  },
+  {
+    "name": "connorgallopo/Tracearr",
+    "version": "v1.4.10",
+    "date": "2026-01-28T06:37:35Z"
+  },
+  {
+    "name": "morpheus65535/bazarr",
+    "version": "v1.5.4",
+    "date": "2026-01-04T22:41:00Z"
+  },
+  {
+    "name": "donetick/donetick",
+    "version": "v0.1.64",
+    "date": "2025-10-03T05:18:24Z"
+  },
+  {
+    "name": "nickheyer/discopanel",
+    "version": "v1.0.27",
+    "date": "2026-01-28T04:32:34Z"
+  },
+  {
+    "name": "gotson/komga",
+    "version": "1.24.0",
+    "date": "2026-01-28T04:19:22Z"
+  },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.81.3.rc.3",
+    "date": "2026-01-28T04:13:53Z"
+  },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "v6.4.16",
+    "date": "2026-01-17T07:54:15Z"
+  },
+  {
+    "name": "chrisbenincasa/tunarr",
+    "version": "v1.2.0-dev.4",
+    "date": "2026-01-28T02:15:09Z"
+  },
+  {
+    "name": "release-argus/Argus",
+    "version": "0.29.3",
+    "date": "2026-01-28T02:07:24Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.5.2",
+    "date": "2026-01-28T00:27:07Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.1.0",
+    "date": "2025-11-23T12:13:34Z"
+  },
  {
    "name": "influxdata/influxdb",
    "version": "v2.8.0",
@@ -9,6 +114,11 @@
    "version": "v1.4.0",
    "date": "2026-01-27T23:43:03Z"
  },
+  {
+    "name": "transmission/transmission",
+    "version": "4.1.0",
+    "date": "2026-01-27T23:30:41Z"
+  },
  {
    "name": "immich-app/immich",
    "version": "v2.5.1",
@@ -24,11 +134,6 @@
    "version": "v0.157.0",
    "date": "2026-01-27T21:58:06Z"
  },
-  {
-    "name": "connorgallopo/Tracearr",
-    "version": "v1.4.9",
-    "date": "2026-01-27T21:31:48Z"
-  },
  {
    "name": "tailscale/tailscale",
    "version": "v1.94.1",
@@ -59,11 +164,6 @@
    "version": "v0.58.x",
    "date": "2026-01-27T20:00:09Z"
  },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "v6.4.16",
-    "date": "2026-01-17T07:54:15Z"
-  },
  {
    "name": "mongodb/mongo",
    "version": "r8.3.0-alpha3",
@@ -74,16 +174,16 @@
    "version": "n8n@2.4.6",
    "date": "2026-01-23T15:32:50Z"
  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.5.2",
+    "date": "2026-01-23T14:26:58Z"
+  },
  {
    "name": "typesense/typesense",
    "version": "v30.0",
    "date": "2026-01-27T18:02:25Z"
  },
-  {
-    "name": "go-vikunja/vikunja",
-    "version": "v1.0.0",
-    "date": "2026-01-27T17:17:34Z"
-  },
  {
    "name": "Dispatcharr/Dispatcharr",
    "version": "v0.18.1",
@@ -129,21 +229,6 @@
    "version": "@mattermost/client@11.3.0",
    "date": "2026-01-20T15:26:31Z"
  },
-  {
-    "name": "emqx/emqx",
-    "version": "e5.10.3-rc.4",
-    "date": "2026-01-27T10:25:24Z"
-  },
-  {
-    "name": "toeverything/AFFiNE",
-    "version": "v2026.1.27-canary.909",
-    "date": "2026-01-27T10:02:59Z"
-  },
-  {
-    "name": "meilisearch/meilisearch",
-    "version": "latest",
-    "date": "2026-01-27T09:33:08Z"
-  },
  {
    "name": "theonedev/onedev",
    "version": "v14.1.0",
@@ -164,31 +249,11 @@
    "version": "v0.11.0",
    "date": "2026-01-27T06:23:53Z"
  },
-  {
-    "name": "morpheus65535/bazarr",
-    "version": "v1.5.4",
-    "date": "2026-01-04T22:41:00Z"
-  },
  {
    "name": "ollama/ollama",
    "version": "v0.15.2",
    "date": "2026-01-27T00:52:57Z"
  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.1.0",
-    "date": "2025-11-23T12:13:34Z"
-  },
-  {
-    "name": "jeedom/core",
-    "version": "4.5.2",
-    "date": "2026-01-27T00:27:06Z"
-  },
-  {
-    "name": "transmission/transmission",
-    "version": "4.1.0",
-    "date": "2026-01-26T23:58:07Z"
-  },
  {
    "name": "webmin/webmin",
    "version": "2.621",
@@ -209,31 +274,16 @@
    "version": "v2.1.0",
    "date": "2025-08-29T12:56:13Z"
  },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v1.2.0-dev.3",
-    "date": "2026-01-26T21:56:05Z"
-  },
  {
    "name": "fccview/jotty",
    "version": "1.19.1",
    "date": "2026-01-26T21:30:39Z"
  },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.5.2",
-    "date": "2026-01-23T14:26:58Z"
-  },
  {
    "name": "Sportarr/Sportarr",
    "version": "v4.0.983.1057",
    "date": "2026-01-26T18:54:50Z"
  },
-  {
-    "name": "BerriAI/litellm",
-    "version": "v1.81.3.rc.2",
-    "date": "2026-01-26T18:18:16Z"
-  },
  {
    "name": "hargata/lubelog",
    "version": "v1.5.8",
@@ -464,11 +514,6 @@
    "version": "4.9.3.0",
    "date": "2026-01-08T16:08:34Z"
  },
-  {
-    "name": "nickheyer/discopanel",
-    "version": "v1.0.25",
-    "date": "2026-01-24T05:56:58Z"
-  },
  {
    "name": "TomBursch/kitchenowl",
    "version": "v0.7.6",
@@ -519,11 +564,6 @@
    "version": "2.233.0",
    "date": "2026-01-23T18:41:45Z"
  },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.50.3",
-    "date": "2026-01-23T16:09:10Z"
-  },
  {
    "name": "zitadel/zitadel",
    "version": "v4.10.0",
@@ -614,11 +654,6 @@
    "version": "v0.27.1",
    "date": "2025-11-11T19:32:29Z"
  },
-  {
-    "name": "cross-seed/cross-seed",
-    "version": "v7.0.0-7",
-    "date": "2026-01-22T06:46:13Z"
-  },
  {
    "name": "rabbitmq/rabbitmq-server",
    "version": "v4.2.3",
@@ -654,16 +689,6 @@
    "version": "v5.0.2",
    "date": "2026-01-21T07:42:38Z"
  },
-  {
-    "name": "SigNoz/signoz",
-    "version": "v0.108.0",
-    "date": "2026-01-21T06:45:16Z"
-  },
-  {
-    "name": "donetick/donetick",
-    "version": "v0.1.64",
-    "date": "2025-10-03T05:18:24Z"
-  },
  {
    "name": "paperless-ngx/paperless-ngx",
    "version": "v2.20.5",
@@ -879,11 +904,6 @@
    "version": "v3.6.7",
    "date": "2026-01-14T14:11:45Z"
  },
-  {
-    "name": "cloudreve/cloudreve",
-    "version": "4.11.1",
-    "date": "2026-01-14T08:40:47Z"
-  },
  {
    "name": "NginxProxyManager/nginx-proxy-manager",
    "version": "v2.13.6",
@@ -929,11 +949,6 @@
    "version": "v1.7.10",
    "date": "2026-01-12T20:50:50Z"
  },
-  {
-    "name": "release-argus/Argus",
-    "version": "0.29.2",
-    "date": "2026-01-12T18:56:44Z"
-  },
  {
    "name": "TryGhost/Ghost-CLI",
    "version": "v1.28.4",
@@ -1064,11 +1079,6 @@
    "version": "1.0.1",
    "date": "2026-01-07T13:54:40Z"
  },
-  {
-    "name": "cockpit-project/cockpit",
-    "version": "354",
-    "date": "2026-01-07T11:16:12Z"
-  },
  {
    "name": "Prowlarr/Prowlarr",
    "version": "v2.3.0.5236",
@@ -1364,11 +1374,6 @@
    "version": "v1.8.3",
    "date": "2025-12-04T21:07:00Z"
  },
-  {
-    "name": "glpi-project/glpi",
-    "version": "11.0.4",
-    "date": "2025-12-04T09:26:37Z"
-  },
  {
    "name": "WordPress/WordPress",
    "version": "6.9",
@@ -1399,11 +1404,6 @@
    "version": "v3.4.6",
    "date": "2025-11-29T02:43:00Z"
  },
-  {
-    "name": "gotson/komga",
-    "version": "1.23.6",
-    "date": "2025-11-28T03:52:50Z"
-  },
  {
    "name": "phpipam/phpipam",
    "version": "v1.7.4",
--- a/install/bar-assistant-install.sh
+++ b/install/bar-assistant-install.sh
@@ -23,10 +23,10 @@ $STD apt install -y \
  libvips
 msg_ok "Installed Dependencies"

-PHP_VERSION="8.4" PHP_FPM=YES PHP_MODULE="ffi,opcache,redis,zip,pdo-sqlite,bcmath,pdo,curl,dom,fpm" setup_php
+PHP_VERSION="8.4" PHP_FPM=YES PHP_MODULE="ffi,redis,pdo-sqlite" setup_php
 setup_composer
 NODE_VERSION="22" setup_nodejs
-fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+setup_meilisearch
 fetch_and_deploy_gh_release "bar-assistant" "karlomikus/bar-assistant" "tarball" "latest" "/opt/bar-assistant"
 fetch_and_deploy_gh_release "vue-salt-rim" "karlomikus/vue-salt-rim" "tarball" "latest" "/opt/vue-salt-rim"

@@ -36,49 +36,16 @@ sed -i.bak -E 's/^\s*;?\s*ffi\.enable\s*=.*/ffi.enable=true/' /etc/php/${PHPVER}
 $STD systemctl reload php${PHPVER}-fpm
 msg_info "configured PHP"

-msg_info "Configure MeiliSearch"
-curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml
-MASTER_KEY=$(openssl rand -base64 12)
-sed -i \
-  -e 's|^env =.*|env = "production"|' \
-  -e "s|^# master_key =.*|master_key = \"$MASTER_KEY\"|" \
-  -e 's|^db_path =.*|db_path = "/var/lib/meilisearch/data"|' \
-  -e 's|^dump_dir =.*|dump_dir = "/var/lib/meilisearch/dumps"|' \
-  -e 's|^snapshot_dir =.*|snapshot_dir = "/var/lib/meilisearch/snapshots"|' \
-  -e 's|^# no_analytics = true|no_analytics = true|' \
-  -e 's|^http_addr =.*|http_addr = "127.0.0.1:7700"|' \
-  /etc/meilisearch.toml
-msg_ok "Configured MeiliSearch"
-
-msg_info "Creating MeiliSearch service"
-cat <<EOF >/etc/systemd/system/meilisearch.service
-[Unit]
-Description=Meilisearch
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now meilisearch
-sleep 5
-msg_ok "Created Service MeiliSearch"
-
 msg_info "Installing Bar Assistant"
 cd /opt/bar-assistant
 cp /opt/bar-assistant/.env.dist /opt/bar-assistant/.env
 mkdir -p /opt/bar-assistant/resources/data
 curl -fsSL https://github.com/bar-assistant/data/archive/refs/heads/v5.tar.gz | tar -xz --strip-components=1 -C /opt/bar-assistant/resources/data
-MeiliSearch_API_KEY=$(curl -s -X GET 'http://127.0.0.1:7700/keys' -H "Authorization: Bearer $MASTER_KEY" | grep -o '"key":"[^"]*"' | head -n 1 | sed 's/"key":"//;s/"//')
-MeiliSearch_API_KEY_UID=$(curl -s -X GET 'http://127.0.0.1:7700/keys' -H "Authorization: Bearer $MASTER_KEY" | grep -o '"uid":"[^"]*"' | head -n 1 | sed 's/"uid":"//;s/"//')
 sed -i -e "s|^APP_URL=|APP_URL=http://${LOCAL_IP}/bar/|" \
  -e "s|^MEILISEARCH_HOST=|MEILISEARCH_HOST=http://127.0.0.1:7700|" \
-  -e "s|^MEILISEARCH_KEY=|MEILISEARCH_KEY=${MASTER_KEY}|" \
-  -e "s|^MEILISEARCH_API_KEY=|MEILISEARCH_API_KEY=${MeiliSearch_API_KEY}|" \
-  -e "s|^MEILISEARCH_API_KEY_UID=|MEILISEARCH_API_KEY_UID=${MeiliSearch_API_KEY_UID}|" \
+  -e "s|^MEILISEARCH_KEY=|MEILISEARCH_KEY=${MEILISEARCH_MASTER_KEY}|" \
+  -e "s|^MEILISEARCH_API_KEY=|MEILISEARCH_API_KEY=${MEILISEARCH_API_KEY}|" \
+  -e "s|^MEILISEARCH_API_KEY_UID=|MEILISEARCH_API_KEY_UID=${MEILISEARCH_API_KEY_UID}|" \
  /opt/bar-assistant/.env
 $STD composer install --no-interaction
 $STD php artisan key:generate
--- a/install/karakeep-install.sh
+++ b/install/karakeep-install.sh
@@ -25,20 +25,7 @@ msg_ok "Installed Dependencies"

 fetch_and_deploy_gh_release "monolith" "Y2Z/monolith" "singlefile" "latest" "/usr/bin" "monolith-gnu-linux-x86_64"
 fetch_and_deploy_gh_release "yt-dlp" "yt-dlp/yt-dlp-nightly-builds" "singlefile" "latest" "/usr/bin" "yt-dlp_linux"
-fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
-
-msg_info "Configuring Meilisearch"
-curl -fsSL "https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml" -o "/etc/meilisearch.toml"
-MASTER_KEY=$(openssl rand -base64 12)
-sed -i \
-  -e 's|^env =.*|env = "production"|' \
-  -e "s|^# master_key =.*|master_key = \"$MASTER_KEY\"|" \
-  -e 's|^db_path =.*|db_path = "/var/lib/meilisearch/data"|' \
-  -e 's|^dump_dir =.*|dump_dir = "/var/lib/meilisearch/dumps"|' \
-  -e 's|^snapshot_dir =.*|snapshot_dir = "/var/lib/meilisearch/snapshots"|' \
-  -e 's|^# no_analytics = true|no_analytics = true|' \
-  /etc/meilisearch.toml
-msg_ok "Configured Meilisearch"
+setup_meilisearch

 fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep" "tarball"
 cd /opt/karakeep
@@ -70,7 +57,7 @@ NEXTAUTH_SECRET="$karakeep_SECRET"
 NEXTAUTH_URL="http://localhost:3000"
 DATA_DIR=${DATA_DIR}
 MEILI_ADDR="http://127.0.0.1:7700"
-MEILI_MASTER_KEY="$MASTER_KEY"
+MEILI_MASTER_KEY="$MEILISEARCH_MASTER_KEY"
 BROWSER_WEB_URL="http://127.0.0.1:9222"
 DB_WAL_MODE=true

@@ -109,19 +96,6 @@ $STD pnpm migrate
 msg_ok "Database Migration Completed"

 msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/meilisearch.service
-[Unit]
-Description=Meilisearch
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
 cat <<EOF >/etc/systemd/system/karakeep-web.service
 [Unit]
 Description=karakeep Web
@@ -169,7 +143,7 @@ TimeoutStopSec=5
 WantedBy=multi-user.target
 EOF

-systemctl enable -q --now meilisearch karakeep-browser karakeep-workers karakeep-web
+systemctl enable -q --now karakeep-browser karakeep-workers karakeep-web
 msg_ok "Created Services"

 motd_ssh
--- a/install/meilisearch-install.sh
+++ b/install/meilisearch-install.sh
@@ -13,21 +13,7 @@ setting_up_container
 network_check
 update_os

-fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
-
-msg_info "Configuring ${APPLICATION}"
-curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml
-MASTER_KEY=$(openssl rand -base64 12)
-sed -i \
-  -e 's|^env =.*|env = "production"|' \
-  -e "s|^# master_key =.*|master_key = \"$MASTER_KEY\"|" \
-  -e 's|^db_path =.*|db_path = "/var/lib/meilisearch/data"|' \
-  -e 's|^dump_dir =.*|dump_dir = "/var/lib/meilisearch/dumps"|' \
-  -e 's|^snapshot_dir =.*|snapshot_dir = "/var/lib/meilisearch/snapshots"|' \
-  -e 's|^# no_analytics = true|no_analytics = true|' \
-  -e 's|^http_addr =.*|http_addr = "0.0.0.0:7700"|' \
-  /etc/meilisearch.toml
-msg_ok "Configured ${APPLICATION}"
+MEILISEARCH_BIND="0.0.0.0:7700" setup_meilisearch

 read -r -p "${TAB3}Do you want add meilisearch-ui? [y/n]: " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
@@ -41,27 +27,11 @@ if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
  cat <<EOF >/opt/meilisearch-ui/.env.local
 VITE_SINGLETON_MODE=true
 VITE_SINGLETON_HOST=http://${LOCAL_IP}:7700
-VITE_SINGLETON_API_KEY=${MASTER_KEY}
+VITE_SINGLETON_API_KEY=${MEILISEARCH_MASTER_KEY}
 EOF
  msg_ok "Configured ${APPLICATION}-ui"
-fi

-msg_info "Creating service"
-cat <<EOF >/etc/systemd/system/meilisearch.service
-[Unit]
-Description=Meilisearch
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now meilisearch
-
-if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
+  msg_info "Creating Meilisearch-UI service"
  cat <<EOF >/etc/systemd/system/meilisearch-ui.service
 [Unit]
 Description=Meilisearch UI Service
@@ -82,8 +52,8 @@ SyslogIdentifier=meilisearch-ui
 WantedBy=multi-user.target
 EOF
  systemctl enable -q --now meilisearch-ui
+  msg_ok "Created Meilisearch-UI service"
 fi
-msg_ok "Service created"

 motd_ssh
 customize
--- a/install/npmplus-install.sh
+++ b/install/npmplus-install.sh
@@ -59,8 +59,8 @@ read -r -p "${TAB3}Enter your ACME Email: " ACME_EMAIL_INPUT

 yq -i "
  .services.npmplus.environment |=
-    (map(select(. != \"TZ=*\" and . != \"ACME_EMAIL=*\")) +
-    [\"TZ=$TZ_INPUT\", \"ACME_EMAIL=$ACME_EMAIL_INPUT\"])
+    (map(select(. != \"TZ=*\" and . != \"ACME_EMAIL=*\" and . != \"INITIAL_ADMIN_EMAIL=*\" and . != \"INITIAL_ADMIN_PASSWORD=*\")) +
+    [\"TZ=$TZ_INPUT\", \"ACME_EMAIL=$ACME_EMAIL_INPUT\", \"INITIAL_ADMIN_EMAIL=admin@local.com\", \"INITIAL_ADMIN_PASSWORD=helper-scripts.com\"])
 " /opt/compose.yaml

 msg_info "Building and Starting NPMplus (Patience)"
@@ -86,39 +86,3 @@ msg_ok "Builded and started NPMplus"

 motd_ssh
 customize
-
-msg_info "Retrieving Default Login (Patience)"
-PASSWORD_FOUND=0
-
-for i in {1..60}; do
-  PASSWORD_LINE=$(
-    { awk '/Creating a new user:/{print; exit}' < <(docker logs "$CONTAINER_ID" 2>&1); } || true
-  )
-
-  if [[ -n "${PASSWORD_LINE:-}" ]]; then
-    PASSWORD="${PASSWORD_LINE#*password: }"
-    printf 'username: admin@example.org\npassword: %s\n' "$PASSWORD" >/opt/.npm_pwd
-    msg_ok "Saved default login to /opt/.npm_pwd"
-    PASSWORD_FOUND=1
-    break
-  fi
-  sleep 2
-done
-if [[ $PASSWORD_FOUND -eq 0 ]]; then
-  PASSWORD_LINE=$(
-    timeout 30s bash -c '
-      docker logs -f --since=0s --tail=0 "$1" 2>&1 | awk "/Creating a new user:/{print; exit}"
-    ' _ "$CONTAINER_ID" || true
-  )
-  if [[ -n "${PASSWORD_LINE:-}" ]]; then
-    PASSWORD="${PASSWORD_LINE#*password: }"
-    printf 'username: admin@example.org\npassword: %s\n' "$PASSWORD" >/opt/.npm_pwd
-    msg_ok "Saved default login to /opt/.npm_pwd (live)"
-    PASSWORD_FOUND=1
-  fi
-fi
-
-if [[ $PASSWORD_FOUND -eq 0 ]]; then
-  msg_error "Could not retrieve default login after 120s."
-  echo -e "\nYou can manually check the container logs with:\n  docker logs $CONTAINER_ID | grep 'Creating a new user:'\n"
-fi
--- a/install/open-archiver-install.sh
+++ b/install/open-archiver-install.sh
@@ -21,40 +21,11 @@ NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="openarchiver_db" PG_DB_USER="openarchiver" setup_postgresql_db

-fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+setup_meilisearch
 fetch_and_deploy_gh_release "openarchiver" "LogicLabs-OU/OpenArchiver" "tarball"
 JWT_KEY="$(openssl rand -hex 32)"
 SECRET_KEY="$(openssl rand -hex 32)"

-msg_info "Configuring MeiliSearch"
-curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml
-MASTER_KEY=$(openssl rand -base64 12)
-sed -i \
-  -e 's|^env =.*|env = "production"|' \
-  -e "s|^# master_key =.*|master_key = \"$MASTER_KEY\"|" \
-  -e 's|^db_path =.*|db_path = "/var/lib/meilisearch/data"|' \
-  -e 's|^dump_dir =.*|dump_dir = "/var/lib/meilisearch/dumps"|' \
-  -e 's|^snapshot_dir =.*|snapshot_dir = "/var/lib/meilisearch/snapshots"|' \
-  -e 's|^# no_analytics = true|no_analytics = true|' \
-  -e 's|^http_addr =.*|http_addr = "127.0.0.1:7700"|' \
-  /etc/meilisearch.toml
-
-cat <<EOF >/etc/systemd/system/meilisearch.service
-[Unit]
-Description=Meilisearch
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now meilisearch
-sleep 5
-msg_ok "Configured MeiliSearch"
-
 msg_info "Setting up Open Archiver"
 mkdir -p /opt/openarchiver-data
 cd /opt/openarchiver
@@ -65,7 +36,7 @@ sed -i "s|^POSTGRES_USER=.*|POSTGRES_USER=$PG_DB_USER|g" /opt/openarchiver/.env
 sed -i "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=$PG_DB_PASS|g" /opt/openarchiver/.env
 sed -i "s|^DATABASE_URL=.*|DATABASE_URL=\"postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME\"|g" /opt/openarchiver/.env
 sed -i "s|^MEILI_HOST=.*|MEILI_HOST=http://localhost:7700|g" /opt/openarchiver/.env
-sed -i "s|^MEILI_MASTER_KEY=.*|MEILI_MASTER_KEY=$MASTER_KEY|g" /opt/openarchiver/.env
+sed -i "s|^MEILI_MASTER_KEY=.*|MEILI_MASTER_KEY=$MEILISEARCH_MASTER_KEY|g" /opt/openarchiver/.env
 sed -i "s|^REDIS_HOST=.*|REDIS_HOST=localhost|g" /opt/openarchiver/.env
 sed -i "s|^REDIS_PASSWORD=.*|REDIS_PASSWORD=|g" /opt/openarchiver/.env
 sed -i "s|^STORAGE_LOCAL_ROOT_PATH=.*|STORAGE_LOCAL_ROOT_PATH=/opt/openarchiver-data|g" /opt/openarchiver/.env
--- a/install/privatebin-install.sh
+++ b/install/privatebin-install.sh
@@ -19,7 +19,7 @@ $STD apt install -y \
    openssl
 msg_ok "Installed Dependencies"

-PHP_VERSION="8.2" PHP_MODULE="common,fpm" setup_php
+PHP_VERSION="8.2" PHP_FPM="YES" setup_php
 create_self_signed_cert
 fetch_and_deploy_gh_release "privatebin" "PrivateBin/PrivateBin" "tarball"

--- a/misc/build.func
+++ b/misc/build.func
@@ -195,9 +195,11 @@ get_current_ip() {
 #
 # - Updates /etc/motd with current container IP
 # - Removes old IP entries to avoid duplicates
+# - Regenerates /etc/profile.d/00_lxc-details.sh with dynamic OS/IP info
 # ------------------------------------------------------------------------------
 update_motd_ip() {
  MOTD_FILE="/etc/motd"
+  PROFILE_FILE="/etc/profile.d/00_lxc-details.sh"

  if [ -f "$MOTD_FILE" ]; then
    # Remove existing IP Address lines to prevent duplication
@@ -207,6 +209,26 @@ update_motd_ip() {
    # Add the new IP address
    echo -e "${TAB}${NETWORK}${YW} IP Address: ${GN}${IP}${CL}" >>"$MOTD_FILE"
  fi
+
+  # Update dynamic LXC details profile if values changed (e.g., after OS upgrade)
+  # Only update if file exists and is from community-scripts
+  if [ -f "$PROFILE_FILE" ] && grep -q "community-scripts" "$PROFILE_FILE" 2>/dev/null; then
+    # Get current values
+    local current_os="$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '"') - Version: $(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '"')"
+    local current_hostname="$(hostname)"
+    local current_ip="$(hostname -I | awk '{print $1}')"
+    
+    # Update only if values actually changed
+    if ! grep -q "OS:.*$current_os" "$PROFILE_FILE" 2>/dev/null; then
+      sed -i "s|OS:.*|OS: \${GN}$current_os\${CL}\\\"|" "$PROFILE_FILE"
+    fi
+    if ! grep -q "Hostname:.*$current_hostname" "$PROFILE_FILE" 2>/dev/null; then
+      sed -i "s|Hostname:.*|Hostname: \${GN}$current_hostname\${CL}\\\"|" "$PROFILE_FILE"
+    fi
+    if ! grep -q "IP Address:.*$current_ip" "$PROFILE_FILE" 2>/dev/null; then
+      sed -i "s|IP Address:.*|IP Address: \${GN}$current_ip\${CL}\\\"|" "$PROFILE_FILE"
+    fi
+  fi
 }

 # ------------------------------------------------------------------------------
@@ -3310,6 +3332,7 @@ start() {
    set_std_mode
    ensure_profile_loaded
    update_script
+    update_motd_ip
    cleanup_lxc
  else
    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "${APP} LXC Update/Setting" --menu \
@@ -3336,6 +3359,7 @@ start() {
    esac
    ensure_profile_loaded
    update_script
+    update_motd_ip
    cleanup_lxc
  fi
 }
--- a/misc/install.func
+++ b/misc/install.func
@@ -79,6 +79,13 @@ EOF
 # ------------------------------------------------------------------------------
 setting_up_container() {
  msg_info "Setting up Container OS"
+
+  # Fix Debian 13 LXC template bug where / is owned by nobody
+  # Only attempt in privileged containers (unprivileged cannot chown /)
+  if [[ "$(stat -c '%U' /)" != "root" ]]; then
+    chown root:root / 2>/dev/null || true
+  fi
+
  for ((i = RETRY_NUM; i > 0; i--)); do
    if [ "$(hostname -I)" != "" ]; then
      break
--- a/misc/tools.func
+++ b/misc/tools.func
@@ -574,7 +574,8 @@ EOF
      msg_error "Failed to download PHP keyring"
      return 1
    }
-    dpkg -i /tmp/debsuryorg-archive-keyring.deb >/dev/null 2>&1 || {
+    # Don't use /dev/null redirection for dpkg as it may use background processes
+    dpkg -i /tmp/debsuryorg-archive-keyring.deb >>"$(get_active_logfile)" 2>&1 || {
      msg_error "Failed to install PHP keyring"
      rm -f /tmp/debsuryorg-archive-keyring.deb
      return 1
@@ -1844,8 +1845,9 @@ function fetch_and_deploy_gh_release() {
    }

    chmod 644 "$tmpdir/$filename"
-    $STD apt install -y "$tmpdir/$filename" || {
-      $STD dpkg -i "$tmpdir/$filename" || {
+    # SYSTEMD_OFFLINE=1 prevents systemd-tmpfiles failures in unprivileged LXC (Debian 13+/systemd 257+)
+    SYSTEMD_OFFLINE=1 $STD apt install -y "$tmpdir/$filename" || {
+      SYSTEMD_OFFLINE=1 $STD dpkg -i "$tmpdir/$filename" || {
        msg_error "Both apt and dpkg installation failed"
        rm -rf "$tmpdir"
        return 1
@@ -4528,7 +4530,8 @@ EOF
    # Ubuntu: Use ondrej/php PPA
    msg_info "Adding ondrej/php PPA for Ubuntu"
    $STD apt install -y software-properties-common
-    $STD add-apt-repository -y ppa:ondrej/php
+    # Don't use $STD for add-apt-repository as it uses background processes
+    add-apt-repository -y ppa:ondrej/php >>"$(get_active_logfile)" 2>&1
  else
    # Debian: Use Sury repository
    manage_tool_repository "php" "$PHP_VERSION" "" "https://packages.sury.org/debsuryorg-archive-keyring.deb" || {
@@ -4558,6 +4561,14 @@ EOF

  if [[ "$PHP_FPM" == "YES" ]]; then
    MODULE_LIST+=" php${PHP_VERSION}-fpm"
+    # Create systemd override for PHP-FPM to fix runtime directory issues in LXC containers
+    mkdir -p /etc/systemd/system/php${PHP_VERSION}-fpm.service.d/
+    cat <<EOF >/etc/systemd/system/php${PHP_VERSION}-fpm.service.d/override.conf
+[Service]
+RuntimeDirectory=php
+RuntimeDirectoryMode=0755
+EOF
+    $STD systemctl daemon-reload
  fi

  # install apache2 with PHP support if requested
@@ -5125,6 +5136,146 @@ function setup_ruby() {
  msg_ok "Setup Ruby $RUBY_VERSION"
 }

+# ------------------------------------------------------------------------------
+# Installs or updates MeiliSearch search engine.
+#
+# Description:
+#   - Fresh install: Downloads binary, creates config/service, starts
+#   - Update: Checks for new release, updates binary if available
+#   - Waits for service to be ready before returning
+#   - Exports API keys for use by caller
+#
+# Variables:
+#   MEILISEARCH_BIND     - Bind address (default: 127.0.0.1:7700)
+#   MEILISEARCH_ENV      - Environment: production/development (default: production)
+#   MEILISEARCH_DB_PATH  - Database path (default: /var/lib/meilisearch/data)
+#
+# Exports:
+#   MEILISEARCH_MASTER_KEY  - The master key for admin access
+#   MEILISEARCH_API_KEY     - The default search API key
+#   MEILISEARCH_API_KEY_UID - The UID of the default API key
+#
+# Example (install script):
+#   setup_meilisearch
+#
+# Example (CT update_script):
+#   setup_meilisearch
+# ------------------------------------------------------------------------------
+
+function setup_meilisearch() {
+  local MEILISEARCH_BIND="${MEILISEARCH_BIND:-127.0.0.1:7700}"
+  local MEILISEARCH_ENV="${MEILISEARCH_ENV:-production}"
+  local MEILISEARCH_DB_PATH="${MEILISEARCH_DB_PATH:-/var/lib/meilisearch/data}"
+  local MEILISEARCH_DUMP_DIR="${MEILISEARCH_DUMP_DIR:-/var/lib/meilisearch/dumps}"
+  local MEILISEARCH_SNAPSHOT_DIR="${MEILISEARCH_SNAPSHOT_DIR:-/var/lib/meilisearch/snapshots}"
+
+  # Get bind address for health checks
+  local MEILISEARCH_HOST="${MEILISEARCH_BIND%%:*}"
+  local MEILISEARCH_PORT="${MEILISEARCH_BIND##*:}"
+  [[ "$MEILISEARCH_HOST" == "0.0.0.0" ]] && MEILISEARCH_HOST="127.0.0.1"
+
+  # Update mode: MeiliSearch already installed
+  if [[ -f /usr/bin/meilisearch ]]; then
+    if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
+      msg_info "Updating MeiliSearch"
+      systemctl stop meilisearch
+      fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+      systemctl start meilisearch
+      msg_ok "Updated MeiliSearch"
+    fi
+    return 0
+  fi
+
+  # Fresh install
+  msg_info "Setup MeiliSearch"
+
+  # Install binary
+  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" || {
+    msg_error "Failed to install MeiliSearch binary"
+    return 1
+  }
+
+  # Download default config
+  curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml || {
+    msg_error "Failed to download MeiliSearch config"
+    return 1
+  }
+
+  # Generate master key
+  MEILISEARCH_MASTER_KEY=$(openssl rand -base64 12)
+  export MEILISEARCH_MASTER_KEY
+
+  # Configure
+  sed -i \
+    -e "s|^env =.*|env = \"${MEILISEARCH_ENV}\"|" \
+    -e "s|^# master_key =.*|master_key = \"${MEILISEARCH_MASTER_KEY}\"|" \
+    -e "s|^db_path =.*|db_path = \"${MEILISEARCH_DB_PATH}\"|" \
+    -e "s|^dump_dir =.*|dump_dir = \"${MEILISEARCH_DUMP_DIR}\"|" \
+    -e "s|^snapshot_dir =.*|snapshot_dir = \"${MEILISEARCH_SNAPSHOT_DIR}\"|" \
+    -e 's|^# no_analytics = true|no_analytics = true|' \
+    -e "s|^http_addr =.*|http_addr = \"${MEILISEARCH_BIND}\"|" \
+    /etc/meilisearch.toml
+
+  # Create data directories
+  mkdir -p "${MEILISEARCH_DB_PATH}" "${MEILISEARCH_DUMP_DIR}" "${MEILISEARCH_SNAPSHOT_DIR}"
+
+  # Create systemd service
+  cat <<EOF >/etc/systemd/system/meilisearch.service
+[Unit]
+Description=Meilisearch
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+  # Enable and start service
+  systemctl daemon-reload
+  systemctl enable -q --now meilisearch
+
+  # Wait for MeiliSearch to be ready (up to 30 seconds)
+  for i in {1..30}; do
+    if curl -s -o /dev/null -w "%{http_code}" "http://${MEILISEARCH_HOST}:${MEILISEARCH_PORT}/health" 2>/dev/null | grep -q "200"; then
+      break
+    fi
+    sleep 1
+  done
+
+  # Verify service is running
+  if ! systemctl is-active --quiet meilisearch; then
+    msg_error "MeiliSearch service failed to start"
+    return 1
+  fi
+
+  # Get API keys with retry logic
+  MEILISEARCH_API_KEY=""
+  for i in {1..10}; do
+    MEILISEARCH_API_KEY=$(curl -s -X GET "http://${MEILISEARCH_HOST}:${MEILISEARCH_PORT}/keys" \
+      -H "Authorization: Bearer ${MEILISEARCH_MASTER_KEY}" 2>/dev/null | \
+      grep -o '"key":"[^"]*"' | head -n 1 | sed 's/"key":"//;s/"//') || true
+    [[ -n "$MEILISEARCH_API_KEY" ]] && break
+    sleep 2
+  done
+
+  MEILISEARCH_API_KEY_UID=$(curl -s -X GET "http://${MEILISEARCH_HOST}:${MEILISEARCH_PORT}/keys" \
+    -H "Authorization: Bearer ${MEILISEARCH_MASTER_KEY}" 2>/dev/null | \
+    grep -o '"uid":"[^"]*"' | head -n 1 | sed 's/"uid":"//;s/"//') || true
+
+  export MEILISEARCH_API_KEY
+  export MEILISEARCH_API_KEY_UID
+
+  # Cache version
+  local MEILISEARCH_VERSION
+  MEILISEARCH_VERSION=$(/usr/bin/meilisearch --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1) || true
+  cache_installed_version "meilisearch" "${MEILISEARCH_VERSION:-unknown}"
+
+  msg_ok "Setup MeiliSearch ${MEILISEARCH_VERSION:-}"
+}
+
 # ------------------------------------------------------------------------------
 # Installs or upgrades ClickHouse database server.
 #
Author	SHA1	Message	Date
CanbiZ (MickLesk)	397baf0a2c	fix(install): fix Debian 13 LXC template root ownership bug The Debian 13 LXC template has a bug where / is owned by nobody instead of root. This causes systemd-tmpfiles to fail with exit code 73 during package installation (e.g. authelia). Fix by checking and correcting / ownership at container setup.	2026-01-28 14:33:25 +01:00
community-scripts-pr-app[bot]	07ad467f34	Update CHANGELOG.md (#11274 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 12:26:48 +00:00
CanbiZ (MickLesk)	ff4f5f6a0a	core: update dynamic values in LXC profile on update_motd_ip (#11268 ) * feat(build.func): update dynamic values in LXC profile on update_motd_ip - Updates only OS/Hostname/IP lines in /etc/profile.d/00_lxc-details.sh - Checks if values changed before updating (avoids unnecessary I/O) - Preserves user customizations (app name, GitHub link, custom lines) - Only updates if file exists and contains 'community-scripts' marker - Fixes outdated OS version display after in-place upgrades (e.g., Bookworm → Trixie) - Now reads OS name/version from /etc/os-release at login time Fixes community-scripts/ProxmoxVE issue with static MOTD after OS upgrade * add update_motd_ip in routine	2026-01-28 13:26:20 +01:00
community-scripts-pr-app[bot]	ea116222f4	Update CHANGELOG.md (#11273 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 12:25:29 +00:00
CanbiZ (MickLesk)	fa00a51110	fix(tools): prevent systemd-tmpfiles failure in unprivileged LXC during .deb install (#11271 ) Set SYSTEMD_OFFLINE=1 for apt/dpkg in binary mode to prevent systemd-tmpfiles 'unsafe path transition' errors in unprivileged containers (Debian 13+/systemd 257+).	2026-01-28 13:25:07 +01:00
community-scripts-pr-app[bot]	a259ae2b3e	Update versions.json (#11272 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 13:06:43 +01:00
CanbiZ (MickLesk)	03e660fdef	fix(tools.func): add PHP-FPM systemd override for LXC containers	2026-01-28 11:39:48 +01:00
CanbiZ (MickLesk)	3a5e2f9515	quickfix broken fpm install	2026-01-28 11:29:11 +01:00
community-scripts-pr-app[bot]	83b1a5e39b	Update CHANGELOG.md (#11267 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 10:10:27 +00:00
community-scripts-pr-app[bot]	01da983f72	Update CHANGELOG.md (#11266 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 10:10:15 +00:00
CanbiZ (MickLesk)	3a04923479	various scripts: use setup_meilisearch function (#11259 )	2026-01-28 11:09:56 +01:00
community-scripts-pr-app[bot]	ebb48f697c	Update CHANGELOG.md (#11265 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 10:09:46 +00:00
CanbiZ (MickLesk)	533ca924c9	tools.func: fix php "wait_for" hint (#11254 )	2026-01-28 11:09:30 +01:00
community-scripts-pr-app[bot]	3042162065	Update CHANGELOG.md (#11264 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 10:09:20 +00:00
CanbiZ (MickLesk)	ddd0164c54	tools.func: add new function - setup_meilisearch (#11258 )	2026-01-28 11:08:52 +01:00
community-scripts-pr-app[bot]	279e33c3a5	Update CHANGELOG.md (#11263 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 10:06:26 +00:00
CanbiZ (MickLesk)	6c1d1e1e71	Refactor: NPMPlus / Default Login (#11262 )	2026-01-28 11:06:02 +01:00
community-scripts-pr-app[bot]	0453673115	Update CHANGELOG.md (#11260 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 09:22:56 +00:00
CanbiZ (MickLesk)	497cefa850	fix(npmplus): graceful timeout for login retrieval (#11238 ) - Change msg_error to msg_warn when login not found - Add helpful user instructions for manual setup - Script now exits normally instead of appearing stuck - Resolves #10988	2026-01-28 10:22:32 +01:00
community-scripts-pr-app[bot]	ba279675a8	Update CHANGELOG.md (#11256 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-01-28 08:55:40 +00:00
Tobias	830c6923b5	fix: homarr: conf location (#11253 )	2026-01-28 09:55:14 +01:00