Update tools.func

Update misc/tools.func to include Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg on multiple Debian repository blocks (bullseye, bookworm, trixie/sid and their -security entries) for non-free and non-free-firmware components. This ensures APT uses the specified keyring to verify repository metadata and improves reproducible/secure apt configuration.

.github/changelogs/2026/02.md

@@ -1,3 +1,182 @@
+## 2026-02-21
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Pangolin: restore config before db migration, use drizzle-kit push [@MickLesk](https://github.com/MickLesk) ([#12130](https://github.com/community-scripts/ProxmoxVE/pull/12130))
+    - PLANKA: fix msg's [@danielalanbates](https://github.com/danielalanbates) ([#12143](https://github.com/community-scripts/ProxmoxVE/pull/12143))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - MediaManager: Update documentation URL [@tremor021](https://github.com/tremor021) ([#12154](https://github.com/community-scripts/ProxmoxVE/pull/12154))
+
+## 2026-02-20
+
+### 🆕 New Scripts
+
+  - Sure ([#12114](https://github.com/community-scripts/ProxmoxVE/pull/12114))
+- Calibre-Web ([#12115](https://github.com/community-scripts/ProxmoxVE/pull/12115))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Zammad: fix Elasticsearch JVM config and add daemon-reload [@MickLesk](https://github.com/MickLesk) ([#12125](https://github.com/community-scripts/ProxmoxVE/pull/12125))
+    - Huntarr: add build-essential for native pip dependencies [@MickLesk](https://github.com/MickLesk) ([#12126](https://github.com/community-scripts/ProxmoxVE/pull/12126))
+    - Dokploy: fix update function [@vhsdream](https://github.com/vhsdream) ([#12116](https://github.com/community-scripts/ProxmoxVE/pull/12116))
+
+  - #### 💥 Breaking Changes
+
+    - recyclarr: adjust paths for v8.0 breaking changes [@MickLesk](https://github.com/MickLesk) ([#12129](https://github.com/community-scripts/ProxmoxVE/pull/12129))
+
+  - #### 🔧 Refactor
+
+    - Planka: migrate data paths to new v2 directory structure [@MickLesk](https://github.com/MickLesk) ([#12128](https://github.com/community-scripts/ProxmoxVE/pull/12128))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - fixen broken link to dawarich documentation [@RiX012](https://github.com/RiX012) ([#12103](https://github.com/community-scripts/ProxmoxVE/pull/12103))
+
+## 2026-02-19
+
+### 🆕 New Scripts
+
+  - TrueNAS-VM ([#12059](https://github.com/community-scripts/ProxmoxVE/pull/12059))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - add: patchmon breaking change msg [@CrazyWolf13](https://github.com/CrazyWolf13) ([#12075](https://github.com/community-scripts/ProxmoxVE/pull/12075))
+    - LibreNMS: Various fixes [@tremor021](https://github.com/tremor021) ([#12089](https://github.com/community-scripts/ProxmoxVE/pull/12089))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - truenas-vm: slug fix for source code link [@juronja](https://github.com/juronja) ([#12088](https://github.com/community-scripts/ProxmoxVE/pull/12088))
+
+## 2026-02-18
+
+### 🚀 Updated Scripts
+
+  - #### 💥 Breaking Changes
+
+    - [Fix] PatchMon: use `SERVER_PORT` in Nginx config if set in env [@vhsdream](https://github.com/vhsdream) ([#12053](https://github.com/community-scripts/ProxmoxVE/pull/12053))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: Execution ID & Telemetry Improvements [@MickLesk](https://github.com/MickLesk) ([#12041](https://github.com/community-scripts/ProxmoxVE/pull/12041))
+
+## 2026-02-17
+
+### 🆕 New Scripts
+
+  - Databasus ([#12018](https://github.com/community-scripts/ProxmoxVE/pull/12018))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - [Hotfix] Cleanuparr: backup config before update [@vhsdream](https://github.com/vhsdream) ([#12039](https://github.com/community-scripts/ProxmoxVE/pull/12039))
+    - fix: pterodactyl-panel add symlink [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11997](https://github.com/community-scripts/ProxmoxVE/pull/11997))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: call get_lxc_ip in start() before updates [@MickLesk](https://github.com/MickLesk) ([#12015](https://github.com/community-scripts/ProxmoxVE/pull/12015))
+
+  - #### ✨ New Features
+
+    - tools/pve: add data analytics / formatting / linting [@MickLesk](https://github.com/MickLesk) ([#12034](https://github.com/community-scripts/ProxmoxVE/pull/12034))
+    - core: smart recovery for failed installs | extend exit_codes  [@MickLesk](https://github.com/MickLesk) ([#11221](https://github.com/community-scripts/ProxmoxVE/pull/11221))
+
+  - #### 🔧 Refactor
+
+    - core: error-handler improvements | better exit_code handling | better tools.func source check [@MickLesk](https://github.com/MickLesk) ([#12019](https://github.com/community-scripts/ProxmoxVE/pull/12019))
+
+### 🧰 Tools
+
+  - #### 🔧 Refactor
+
+    - Immich Public Proxy: centralize and fix systemd service creation [@MickLesk](https://github.com/MickLesk) ([#12025](https://github.com/community-scripts/ProxmoxVE/pull/12025))
+
+### 📚 Documentation
+
+  - fix contribution/setup-fork [@andreasabeck](https://github.com/andreasabeck) ([#12047](https://github.com/community-scripts/ProxmoxVE/pull/12047))
+
+## 2026-02-16
+
+### 🆕 New Scripts
+
+  - RomM ([#11987](https://github.com/community-scripts/ProxmoxVE/pull/11987))
+- LinkDing ([#11976](https://github.com/community-scripts/ProxmoxVE/pull/11976))
+
+### 🚀 Updated Scripts
+
+  - Opencloud: Pin version to 5.1.0 [@vhsdream](https://github.com/vhsdream) ([#12004](https://github.com/community-scripts/ProxmoxVE/pull/12004))
+
+  - #### 🐞 Bug Fixes
+
+    - Tududi: Fix sed command for DB_FILE configuration [@tremor021](https://github.com/tremor021) ([#11988](https://github.com/community-scripts/ProxmoxVE/pull/11988))
+    - slskd: fix exit position [@MickLesk](https://github.com/MickLesk) ([#11963](https://github.com/community-scripts/ProxmoxVE/pull/11963))
+    - cryptpad: restore config earlier and run onlyoffice upgrade [@MickLesk](https://github.com/MickLesk) ([#11964](https://github.com/community-scripts/ProxmoxVE/pull/11964))
+    - jellyseerr/overseerr: Migrate update script to Seerr; prompt rerun [@MickLesk](https://github.com/MickLesk) ([#11965](https://github.com/community-scripts/ProxmoxVE/pull/11965))
+
+  - #### 🔧 Refactor
+
+    - core/vm's: ensure script state is sent on script exit  [@MickLesk](https://github.com/MickLesk) ([#11991](https://github.com/community-scripts/ProxmoxVE/pull/11991))
+    - Vaultwarden: export VW_VERSION as version number [@MickLesk](https://github.com/MickLesk) ([#11966](https://github.com/community-scripts/ProxmoxVE/pull/11966))
+    - Zabbix: Improve zabbix-agent service detection [@MickLesk](https://github.com/MickLesk) ([#11968](https://github.com/community-scripts/ProxmoxVE/pull/11968))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func: ensure /usr/local/bin PATH persists for pct enter sessions [@MickLesk](https://github.com/MickLesk) ([#11970](https://github.com/community-scripts/ProxmoxVE/pull/11970))
+
+  - #### 🔧 Refactor
+
+    - core: remove duplicate error handler from alpine-install.func [@MickLesk](https://github.com/MickLesk) ([#11971](https://github.com/community-scripts/ProxmoxVE/pull/11971))
+
+### 📂 Github
+
+  - github: add "website" label if "json" changed [@MickLesk](https://github.com/MickLesk) ([#11975](https://github.com/community-scripts/ProxmoxVE/pull/11975))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - Update Wishlist LXC webpage to include reverse proxy info [@summoningpixels](https://github.com/summoningpixels) ([#11973](https://github.com/community-scripts/ProxmoxVE/pull/11973))
+    - Update OpenCloud LXC webpage to include services ports [@summoningpixels](https://github.com/summoningpixels) ([#11969](https://github.com/community-scripts/ProxmoxVE/pull/11969))
+
+## 2026-02-15
+
+### 🆕 New Scripts
+
+  - ebusd ([#11942](https://github.com/community-scripts/ProxmoxVE/pull/11942))
+- add: seer script and migrations [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11930](https://github.com/community-scripts/ProxmoxVE/pull/11930))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix seerr URL in jellyseerr script [@lucacome](https://github.com/lucacome) ([#11951](https://github.com/community-scripts/ProxmoxVE/pull/11951))
+    - Fix jellyseer and overseer script replacement [@lucacome](https://github.com/lucacome) ([#11949](https://github.com/community-scripts/ProxmoxVE/pull/11949))
+    - Tautulli: Add setuptools < 81 [@tremor021](https://github.com/tremor021) ([#11943](https://github.com/community-scripts/ProxmoxVE/pull/11943))
+
+  - #### 💥 Breaking Changes
+
+    - Refactor: Patchmon [@vhsdream](https://github.com/vhsdream) ([#11888](https://github.com/community-scripts/ProxmoxVE/pull/11888))
+
 ## 2026-02-14
 
 ### 🚀 Updated Scripts

CHANGELOG.md

@@ -18,6 +18,9 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 
 
+
+
+
 <details>
 <summary><h2>📜 History</h2></summary>
 
@@ -27,7 +30,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 
 <details>
-<summary><h4>February (14 entries)</h4></summary>
+<summary><h4>February (21 entries)</h4></summary>
 
 [View February 2026 Changelog](.github/changelogs/2026/02.md)
 
@@ -404,8 +407,96 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-02-23
+
+### 🆕 New Scripts
+
+  - Frigate v16.4 [@MickLesk](https://github.com/MickLesk) ([#11887](https://github.com/community-scripts/ProxmoxVE/pull/11887))
+
+## 2026-02-22
+
+### 🆕 New Scripts
+
+  - Gramps-Web ([#12157](https://github.com/community-scripts/ProxmoxVE/pull/12157))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix: Apache Guacamole - bump to Temurin JDK 17 to resolve Debian 13 (Trixie) install failure [@Copilot](https://github.com/Copilot) ([#12161](https://github.com/community-scripts/ProxmoxVE/pull/12161))
+    - Docker-VM: add error handling for virt-customize finalization [@MickLesk](https://github.com/MickLesk) ([#12127](https://github.com/community-scripts/ProxmoxVE/pull/12127))
+    - [Fix] Sure: add Sidekiq service [@vhsdream](https://github.com/vhsdream) ([#12186](https://github.com/community-scripts/ProxmoxVE/pull/12186))
+
+  - #### ✨ New Features
+
+    - Refactor & Bump to v2: Plex [@MickLesk](https://github.com/MickLesk) ([#12179](https://github.com/community-scripts/ProxmoxVE/pull/12179))
+
+  - #### 🔧 Refactor
+
+    - karakeep: bump to node 24 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#12183](https://github.com/community-scripts/ProxmoxVE/pull/12183))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func: add GitHub API rate-limit detection and GITHUB_TOKEN support [@MickLesk](https://github.com/MickLesk) ([#12176](https://github.com/community-scripts/ProxmoxVE/pull/12176))
+
+### 🧰 Tools
+
+  - CR*NMASTER ([#12065](https://github.com/community-scripts/ProxmoxVE/pull/12065))
+
+  - #### 🔧 Refactor
+
+    - Update package management commands in clean-lxcs.sh [@heinemannj](https://github.com/heinemannj) ([#12166](https://github.com/community-scripts/ProxmoxVE/pull/12166))
+
+### ❔ Uncategorized
+
+  - calibre-web: Update logo URL [@MickLesk](https://github.com/MickLesk) ([#12178](https://github.com/community-scripts/ProxmoxVE/pull/12178))
+
+## 2026-02-21
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Pangolin: restore config before db migration, use drizzle-kit push [@MickLesk](https://github.com/MickLesk) ([#12130](https://github.com/community-scripts/ProxmoxVE/pull/12130))
+    - PLANKA: fix msg's [@danielalanbates](https://github.com/danielalanbates) ([#12143](https://github.com/community-scripts/ProxmoxVE/pull/12143))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - MediaManager: Update documentation URL [@tremor021](https://github.com/tremor021) ([#12154](https://github.com/community-scripts/ProxmoxVE/pull/12154))
+
 ## 2026-02-20
 
+### 🆕 New Scripts
+
+  - Sure ([#12114](https://github.com/community-scripts/ProxmoxVE/pull/12114))
+- Calibre-Web ([#12115](https://github.com/community-scripts/ProxmoxVE/pull/12115))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Zammad: fix Elasticsearch JVM config and add daemon-reload [@MickLesk](https://github.com/MickLesk) ([#12125](https://github.com/community-scripts/ProxmoxVE/pull/12125))
+    - Huntarr: add build-essential for native pip dependencies [@MickLesk](https://github.com/MickLesk) ([#12126](https://github.com/community-scripts/ProxmoxVE/pull/12126))
+    - Dokploy: fix update function [@vhsdream](https://github.com/vhsdream) ([#12116](https://github.com/community-scripts/ProxmoxVE/pull/12116))
+
+  - #### 💥 Breaking Changes
+
+    - recyclarr: adjust paths for v8.0 breaking changes [@MickLesk](https://github.com/MickLesk) ([#12129](https://github.com/community-scripts/ProxmoxVE/pull/12129))
+
+  - #### 🔧 Refactor
+
+    - Planka: migrate data paths to new v2 directory structure [@MickLesk](https://github.com/MickLesk) ([#12128](https://github.com/community-scripts/ProxmoxVE/pull/12128))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - fixen broken link to dawarich documentation [@RiX012](https://github.com/RiX012) ([#12103](https://github.com/community-scripts/ProxmoxVE/pull/12103))
+
 ## 2026-02-19
 
 ### 🆕 New Scripts
@@ -1286,210 +1377,4 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### ✨ New Features
 
-    - core: add IPv6 fallback support to get_current_ip functions | add check for SSH_KEYS_FILE in user_defaults [@MickLesk](https://github.com/MickLesk) ([#11067](https://github.com/community-scripts/ProxmoxVE/pull/11067))
-
-## 2026-01-22
-
-### 🆕 New Scripts
-
-  - Loki |  Alpine-Loki ([#11048](https://github.com/community-scripts/ProxmoxVE/pull/11048))
-
-### 🚀 Updated Scripts
-
-  - Immich: Increase RAM to 6GB [@vhsdream](https://github.com/vhsdream) ([#10965](https://github.com/community-scripts/ProxmoxVE/pull/10965))
-
-  - #### 🐞 Bug Fixes
-
-    - Jotty: Increase default disk size from 6 to 8 [@tremor021](https://github.com/tremor021) ([#11056](https://github.com/community-scripts/ProxmoxVE/pull/11056))
-    - Fix tags in several scripts [@s4dmach1ne](https://github.com/s4dmach1ne) ([#11050](https://github.com/community-scripts/ProxmoxVE/pull/11050))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - tools: use distro packages for MariaDB by default [@MickLesk](https://github.com/MickLesk) ([#11049](https://github.com/community-scripts/ProxmoxVE/pull/11049))
-
-## 2026-01-21
-
-### 🆕 New Scripts
-
-  - Byparr ([#11039](https://github.com/community-scripts/ProxmoxVE/pull/11039))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix: Snipe-IT update missing all user uploads (#11032) [@ruanmed](https://github.com/ruanmed) ([#11033](https://github.com/community-scripts/ProxmoxVE/pull/11033))
-    - yubal: fix for v0.2 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11006](https://github.com/community-scripts/ProxmoxVE/pull/11006))
-    - Joplin-Server: use yarn workspaces focus for faster builds [@MickLesk](https://github.com/MickLesk) ([#11027](https://github.com/community-scripts/ProxmoxVE/pull/11027))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - tools: add ubuntu PHP repository setup [@MickLesk](https://github.com/MickLesk) ([#11034](https://github.com/community-scripts/ProxmoxVE/pull/11034))
-
-  - #### 🔧 Refactor
-
-    - core: allow empty tags & improve template search [@MickLesk](https://github.com/MickLesk) ([#11020](https://github.com/community-scripts/ProxmoxVE/pull/11020))
-
-### 🌐 Website
-
-  - #### 📝 Script Information
-
-    - Joplin Server: Set disable flag to true in joplin-server.json [@tremor021](https://github.com/tremor021) ([#11008](https://github.com/community-scripts/ProxmoxVE/pull/11008))
-
-## 2026-01-20
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - dolibarr: switch mirror [@MickLesk](https://github.com/MickLesk) ([#11004](https://github.com/community-scripts/ProxmoxVE/pull/11004))
-    - checkmk: reordner base function [@MickLesk](https://github.com/MickLesk) ([#10990](https://github.com/community-scripts/ProxmoxVE/pull/10990))
-    - Homepage: preserve config directory during updates [@MickLesk](https://github.com/MickLesk) ([#10993](https://github.com/community-scripts/ProxmoxVE/pull/10993))
-    - DiscoPanel: add go for update build process [@miausalvaje](https://github.com/miausalvaje) ([#10991](https://github.com/community-scripts/ProxmoxVE/pull/10991))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: add retry logic for template lock in LXC container creation [@MickLesk](https://github.com/MickLesk) ([#11002](https://github.com/community-scripts/ProxmoxVE/pull/11002))
-    - core: implement ensure_profile_loaded function [@MickLesk](https://github.com/MickLesk) ([#10999](https://github.com/community-scripts/ProxmoxVE/pull/10999))
-    - core: add input validations for several functions [@MickLesk](https://github.com/MickLesk) ([#10995](https://github.com/community-scripts/ProxmoxVE/pull/10995))
-
-## 2026-01-19
-
-### 🆕 New Scripts
-
-  - yubal ([#10955](https://github.com/community-scripts/ProxmoxVE/pull/10955))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Apache-Guacamole: move jdbc cleanup after schema upgrade [@MickLesk](https://github.com/MickLesk) ([#10974](https://github.com/community-scripts/ProxmoxVE/pull/10974))
-    - Outline: prevent corepack interactive prompt blocking installation [@MickLesk](https://github.com/MickLesk) ([#10973](https://github.com/community-scripts/ProxmoxVE/pull/10973))
-    - firefly: prevent nested storage directories during update (#10967) [@MickLesk](https://github.com/MickLesk) ([#10972](https://github.com/community-scripts/ProxmoxVE/pull/10972))
-    - PeaNUT: change default port [@vhsdream](https://github.com/vhsdream) ([#10962](https://github.com/community-scripts/ProxmoxVE/pull/10962))
-    - Update/splunk enterprise [@rcastley](https://github.com/rcastley) ([#10949](https://github.com/community-scripts/ProxmoxVE/pull/10949))
-
-  - #### ✨ New Features
-
-    - Pangolin: use dynamic badger plugin version [@MickLesk](https://github.com/MickLesk) ([#10975](https://github.com/community-scripts/ProxmoxVE/pull/10975))
-    - Tautulli: add version detection and add proper update script [@MickLesk](https://github.com/MickLesk) ([#10976](https://github.com/community-scripts/ProxmoxVE/pull/10976))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Remove custom IP fetching in scripts [@tremor021](https://github.com/tremor021) ([#10954](https://github.com/community-scripts/ProxmoxVE/pull/10954))
-    - Refactor: Homepage [@tremor021](https://github.com/tremor021) ([#10950](https://github.com/community-scripts/ProxmoxVE/pull/10950))
-    - Refactor: hev-socks5-server [@tremor021](https://github.com/tremor021) ([#10945](https://github.com/community-scripts/ProxmoxVE/pull/10945))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: phpIPAM [@MickLesk](https://github.com/MickLesk) ([#10939](https://github.com/community-scripts/ProxmoxVE/pull/10939))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: add RFC 1123/952 compliant hostname/FQDN validation [@MickLesk](https://github.com/MickLesk) ([#10977](https://github.com/community-scripts/ProxmoxVE/pull/10977))
-    - [core]: Make LXC IP a global variable [@tremor021](https://github.com/tremor021) ([#10951](https://github.com/community-scripts/ProxmoxVE/pull/10951))
-
-### 🧰 Tools
-
-  - #### 🔧 Refactor
-
-    - Refactor: copyparty [@MickLesk](https://github.com/MickLesk) ([#10941](https://github.com/community-scripts/ProxmoxVE/pull/10941))
-
-## 2026-01-18
-
-### 🆕 New Scripts
-
-  - Termix ([#10887](https://github.com/community-scripts/ProxmoxVE/pull/10887))
-- ThingsBoard ([#10904](https://github.com/community-scripts/ProxmoxVE/pull/10904))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Fix Patchmon install script (escaping) [@christiaangoossens](https://github.com/christiaangoossens) ([#10920](https://github.com/community-scripts/ProxmoxVE/pull/10920))
-    - refactor: peanut entrypoint [@CrazyWolf13](https://github.com/CrazyWolf13) ([#10902](https://github.com/community-scripts/ProxmoxVE/pull/10902))
-
-  - #### 💥 Breaking Changes
-
-    - Update Patchmon default Nginx config (IPv6 and correct scheme) [@christiaangoossens](https://github.com/christiaangoossens) ([#10917](https://github.com/community-scripts/ProxmoxVE/pull/10917))
-
-  - #### 🔧 Refactor
-
-    - Refactor: FluidCalendar [@tremor021](https://github.com/tremor021) ([#10928](https://github.com/community-scripts/ProxmoxVE/pull/10928))
-
-### 🗑️ Deleted Scripts
-
-  - Remove iVentoy script [@tremor021](https://github.com/tremor021) ([#10924](https://github.com/community-scripts/ProxmoxVE/pull/10924))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: improve password handling and validation logic [@MickLesk](https://github.com/MickLesk) ([#10925](https://github.com/community-scripts/ProxmoxVE/pull/10925))
-
-  - #### 🔧 Refactor
-
-    - hwaccel: improve NVIDIA version matching and GPU selection UI [@MickLesk](https://github.com/MickLesk) ([#10901](https://github.com/community-scripts/ProxmoxVE/pull/10901))
-
-### 📂 Github
-
-  - Fix typo in the New Script request template [@tremor021](https://github.com/tremor021) ([#10891](https://github.com/community-scripts/ProxmoxVE/pull/10891))
-
-### 🌐 Website
-
-  - #### 🐞 Bug Fixes
-
-    - fix: preserve newest scripts pagination [@jgrubiox](https://github.com/jgrubiox) ([#10882](https://github.com/community-scripts/ProxmoxVE/pull/10882))
-
-### ❔ Uncategorized
-
-  - Update qui.json [@GalaxyCatD3v](https://github.com/GalaxyCatD3v) ([#10896](https://github.com/community-scripts/ProxmoxVE/pull/10896))
-
-## 2026-01-17
-
-### 🆕 New Scripts
-
-  - TRIP ([#10864](https://github.com/community-scripts/ProxmoxVE/pull/10864))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix sonarqube update version info (#10870) [@Karlito83](https://github.com/Karlito83) ([#10871](https://github.com/community-scripts/ProxmoxVE/pull/10871))
-    - WGDashboard: Update repo URL [@tremor021](https://github.com/tremor021) ([#10872](https://github.com/community-scripts/ProxmoxVE/pull/10872))
-
-### 🌐 Website
-
-  - #### 📝 Script Information
-
-    - Disable Palmer [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#10889](https://github.com/community-scripts/ProxmoxVE/pull/10889))
-
-## 2026-01-16
-
-### 🆕 New Scripts
-
-  - Flatnotes ([#10857](https://github.com/community-scripts/ProxmoxVE/pull/10857))
-- Unifi OS Server ([#10856](https://github.com/community-scripts/ProxmoxVE/pull/10856))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Jotty: increase RAM; cap heap size at 3GB during build [@vhsdream](https://github.com/vhsdream) ([#10868](https://github.com/community-scripts/ProxmoxVE/pull/10868))
-    - SnowShare: Increase default resources [@TuroYT](https://github.com/TuroYT) ([#10865](https://github.com/community-scripts/ProxmoxVE/pull/10865))
-    - postgresql: name of sources file fixed (update check) [@JamborJan](https://github.com/JamborJan) ([#10854](https://github.com/community-scripts/ProxmoxVE/pull/10854))
-    - immich: use dpkg-query to get intel-opencl-icd version [@MickLesk](https://github.com/MickLesk) ([#10848](https://github.com/community-scripts/ProxmoxVE/pull/10848))
-    - domain-monitor: fix: cron user [@CrazyWolf13](https://github.com/CrazyWolf13) ([#10846](https://github.com/community-scripts/ProxmoxVE/pull/10846))
-    - pihole/unbound: create unbound config before apt install to prevent port conflicts [@MickLesk](https://github.com/MickLesk) ([#10839](https://github.com/community-scripts/ProxmoxVE/pull/10839))
-    - zammad: use ln -sf to avoid failure when symlink exists [@MickLesk](https://github.com/MickLesk) ([#10840](https://github.com/community-scripts/ProxmoxVE/pull/10840))
-
-### ❔ Uncategorized
-
-  - qui: fix: category [@CrazyWolf13](https://github.com/CrazyWolf13) ([#10847](https://github.com/community-scripts/ProxmoxVE/pull/10847))
+    - core: add IPv6 fallback support to get_current_ip functions | add check for SSH_KEYS_FILE in user_defaults [@MickLesk](https://github.com/MickLesk) ([#11067](https://github.com/community-scripts/ProxmoxVE/pull/11067))

ct/apache-guacamole.sh

@@ -51,7 +51,7 @@ function update_script() {
     exit
   fi
 
-  JAVA_VERSION="11" setup_java
+  JAVA_VERSION="17" setup_java
 
   msg_info "Stopping Services"
   systemctl stop guacd tomcat

ct/calibre-web.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: mikolaj92
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/janeczku/calibre-web
+
+APP="calibre-web"
+var_tags="${var_tags:-media;books}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/calibre-web ]]; then
+    msg_error "No Calibre-Web Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "Calibre-Web" "janeczku/calibre-web"; then
+    msg_info "Stopping Service"
+    systemctl stop calibre-web
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Data"
+    cp -r /opt/calibre-web/app.db /opt/app.db_backup
+    cp -r /opt/calibre-web/data /opt/data_backup
+    msg_ok "Backed up Data"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
+    setup_uv
+
+    msg_info "Installing Dependencies"
+    cd /opt/calibre-web
+    $STD uv venv
+    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --upgrade pip setuptools wheel
+    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir -r requirements.txt
+    msg_ok "Installed Dependencies"
+
+    msg_info "Restoring Data"
+    cp /opt/app.db_backup /opt/calibre-web/app.db 2>/dev/null
+    cp -r /opt/data_backup /opt/calibre-web/data 2>/dev/null
+    rm -rf /opt/app.db_backup /opt/data_backup
+    msg_ok "Restored Data"
+
+    msg_info "Starting Service"
+    systemctl start calibre-web
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8083${CL}"

ct/dokploy.sh

@@ -30,7 +30,7 @@ function update_script() {
   fi
 
   msg_info "Updating Dokploy"
-  $STD bash <(curl -sSL https://dokploy.com/install.sh)
+  curl -sSL https://dokploy.com/install.sh | $STD bash -s update
   msg_ok "Updated Dokploy"
   msg_ok "Updated successfully!"
   exit

ct/frigate.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Authors: tteck (tteckster)
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Authors: MickLesk (CanbiZ) | Co-Author: remz1337
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://frigate.video/
 
@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-4}"
 var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-20}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-11}"
+var_version="${var_version:-12}"
 var_unprivileged="${var_unprivileged:-0}"
 var_gpu="${var_gpu:-yes}"
 
@@ -21,15 +21,15 @@ color
 catch_errors
 
 function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/systemd/system/frigate.service ]]; then
-    msg_error "No ${APP} Installation Found!"
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -f /etc/systemd/system/frigate.service ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+    msg_error "To update Frigate, create a new container and transfer your configuration."
     exit
-  fi
-  msg_error "To update Frigate, create a new container and transfer your configuration."
-  exit
 }
 
 start

ct/gramps-web.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.grampsweb.org/
+
+APP="gramps-web"
+var_tags="${var_tags:-genealogy;family;collaboration}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/gramps-web-api ]] || [[ ! -d /opt/gramps-web/frontend ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  PYTHON_VERSION="3.12" setup_uv
+  NODE_VERSION="22" setup_nodejs
+
+  if check_for_gh_release "gramps-web-api" "gramps-project/gramps-web-api"; then
+    msg_info "Stopping Service"
+    systemctl stop gramps-web
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gramps-web-api" "gramps-project/gramps-web-api" "tarball" "latest" "/opt/gramps-web-api"
+
+    msg_info "Updating Gramps Web API"
+    $STD uv venv -c -p python3.12 /opt/gramps-web/venv
+    source /opt/gramps-web/venv/bin/activate
+    $STD uv pip install --no-cache-dir --upgrade pip setuptools wheel
+    $STD uv pip install --no-cache-dir gunicorn
+    $STD uv pip install --no-cache-dir /opt/gramps-web-api
+    msg_ok "Updated Gramps Web API"
+
+    msg_info "Applying Database Migration"
+    cd /opt/gramps-web-api
+    GRAMPS_API_CONFIG=/opt/gramps-web/config/config.cfg \
+      ALEMBIC_CONFIG=/opt/gramps-web-api/alembic.ini \
+      GRAMPSHOME=/opt/gramps-web/data/gramps \
+      GRAMPS_DATABASE_PATH=/opt/gramps-web/data/gramps/grampsdb \
+      $STD /opt/gramps-web/venv/bin/python3 -m gramps_webapi user migrate
+    msg_ok "Applied Database Migration"
+
+    msg_info "Starting Service"
+    systemctl start gramps-web
+    msg_ok "Started Service"
+  fi
+
+  if check_for_gh_release "gramps-web" "gramps-project/gramps-web"; then
+    msg_info "Stopping Service"
+    systemctl stop gramps-web
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gramps-web" "gramps-project/gramps-web" "tarball" "latest" "/opt/gramps-web/frontend"
+
+    msg_info "Updating Gramps Web Frontend"
+    cd /opt/gramps-web/frontend
+    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+    $STD corepack enable
+    $STD npm install
+    $STD npm run build
+    msg_ok "Updated Gramps Web Frontend"
+
+    msg_info "Starting Service"
+    systemctl start gramps-web
+    msg_ok "Started Service"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5000${CL}"

ct/headers/calibre-web

@@ -0,0 +1,6 @@
+              ___ __                                 __  
+  _________ _/ (_) /_  ________       _      _____  / /_ 
+ / ___/ __ `/ / / __ \/ ___/ _ \_____| | /| / / _ \/ __ \
+/ /__/ /_/ / / / /_/ / /  /  __/_____/ |/ |/ /  __/ /_/ /
+\___/\__,_/_/_/_.___/_/   \___/      |__/|__/\___/_.___/ 
+                                                         

ct/headers/gramps-web

@@ -0,0 +1,6 @@
+                                                             __  
+   ____ __________ _____ ___  ____  _____     _      _____  / /_ 
+  / __ `/ ___/ __ `/ __ `__ \/ __ \/ ___/____| | /| / / _ \/ __ \
+ / /_/ / /  / /_/ / / / / / / /_/ (__  )_____/ |/ |/ /  __/ /_/ /
+ \__, /_/   \__,_/_/ /_/ /_/ .___/____/      |__/|__/\___/_.___/ 
+/____/                    /_/                                    

ct/headers/sure

@@ -0,0 +1,6 @@
+   _____               
+  / ___/__  __________ 
+  \__ \/ / / / ___/ _ \
+ ___/ / /_/ / /  /  __/
+/____/\__,_/_/   \___/ 
+                       

ct/huntarr.sh

@@ -35,7 +35,8 @@ function update_script() {
     msg_info "Stopping Service"
     systemctl stop huntarr
     msg_ok "Stopped Service"
-
+    
+    ensure_dependencies build-essential
     fetch_and_deploy_gh_release "huntarr" "plexguide/Huntarr.io" "tarball"
 
     msg_info "Updating Huntarr"

ct/karakeep.sh

@@ -60,7 +60,7 @@ function update_script() {
       $STD corepack disable
     fi
     MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-    NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
+    NODE_VERSION="24" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
     setup_meilisearch
 
     msg_info "Updating Karakeep"

ct/pangolin.sh

@@ -51,7 +51,6 @@ function update_script() {
     $STD npm run db:generate
     $STD npm run build
     $STD npm run build:cli
-    $STD npm run db:push
     cp -R .next/standalone ./
     chmod +x ./dist/cli.mjs
     cp server/db/names.json ./dist/names.json
@@ -64,6 +63,11 @@ function update_script() {
     rm -f /opt/pangolin_config_backup.tar.gz
     msg_ok "Restored config"
 
+    msg_info "Running database migrations"
+    cd /opt/pangolin
+    ENVIRONMENT=prod $STD npx drizzle-kit push --config drizzle.sqlite.config.ts
+    msg_ok "Ran database migrations"
+
     msg_info "Updating Badger plugin version"
     BADGER_VERSION=$(get_latest_github_release "fosrl/badger" "false")
     sed -i "s/version: \"v[0-9.]*\"/version: \"$BADGER_VERSION\"/g" /opt/pangolin/config/traefik/traefik_config.yml

ct/planka.sh

@@ -31,16 +31,24 @@ function update_script() {
   if check_for_gh_release "planka" "plankanban/planka"; then
     msg_info "Stopping Service"
     systemctl stop planka
-    msg_info "Stopped Service"
+    msg_ok "Stopped Service"
 
     msg_info "Backing up data"
     BK="/opt/planka-backup"
     mkdir -p "$BK"/{favicons,user-avatars,background-images,attachments}
     [ -f /opt/planka/.env ] && mv /opt/planka/.env "$BK"/
-    [ -d /opt/planka/public/favicons ] && cp -a /opt/planka/public/favicons/. "$BK/favicons/"
-    [ -d /opt/planka/public/user-avatars ] && cp -a /opt/planka/public/user-avatars/. "$BK/user-avatars/"
-    [ -d /opt/planka/public/background-images ] && cp -a /opt/planka/public/background-images/. "$BK/background-images/"
-    [ -d /opt/planka/private/attachments ] && cp -a /opt/planka/private/attachments/. "$BK/attachments/"
+    # Support both old (pre-v2) and new (v2) directory layouts
+    if [ -d /opt/planka/data/protected ]; then
+      [ -d /opt/planka/data/protected/favicons ] && cp -a /opt/planka/data/protected/favicons/. "$BK/favicons/"
+      [ -d /opt/planka/data/protected/user-avatars ] && cp -a /opt/planka/data/protected/user-avatars/. "$BK/user-avatars/"
+      [ -d /opt/planka/data/protected/background-images ] && cp -a /opt/planka/data/protected/background-images/. "$BK/background-images/"
+      [ -d /opt/planka/data/private/attachments ] && cp -a /opt/planka/data/private/attachments/. "$BK/attachments/"
+    else
+      [ -d /opt/planka/public/favicons ] && cp -a /opt/planka/public/favicons/. "$BK/favicons/"
+      [ -d /opt/planka/public/user-avatars ] && cp -a /opt/planka/public/user-avatars/. "$BK/user-avatars/"
+      [ -d /opt/planka/public/background-images ] && cp -a /opt/planka/public/background-images/. "$BK/background-images/"
+      [ -d /opt/planka/private/attachments ] && cp -a /opt/planka/private/attachments/. "$BK/attachments/"
+    fi
     rm -rf /opt/planka
     msg_ok "Backed up data"
 
@@ -53,15 +61,16 @@ function update_script() {
 
     msg_info "Restoring data"
     [ -f "$BK/.env" ] && mv "$BK/.env" /opt/planka/.env
-    mkdir -p /opt/planka/public/{favicons,user-avatars,background-images} /opt/planka/private/attachments
-    [ -d "$BK/favicons" ] && cp -a "$BK/favicons/." /opt/planka/public/favicons/
-    [ -d "$BK/user-avatars" ] && cp -a "$BK/user-avatars/." /opt/planka/public/user-avatars/
-    [ -d "$BK/background-images" ] && cp -a "$BK/background-images/." /opt/planka/public/background-images/
-    [ -d "$BK/attachments" ] && cp -a "$BK/attachments/." /opt/planka/private/attachments/
+    # Planka v2 uses unified data directory structure
+    mkdir -p /opt/planka/data/protected/{favicons,user-avatars,background-images} /opt/planka/data/private/attachments
+    [ -d "$BK/favicons" ] && cp -a "$BK/favicons/." /opt/planka/data/protected/favicons/
+    [ -d "$BK/user-avatars" ] && cp -a "$BK/user-avatars/." /opt/planka/data/protected/user-avatars/
+    [ -d "$BK/background-images" ] && cp -a "$BK/background-images/." /opt/planka/data/protected/background-images/
+    [ -d "$BK/attachments" ] && cp -a "$BK/attachments/." /opt/planka/data/private/attachments/
     rm -rf "$BK"
     msg_ok "Restored data"
 
-    msg_ok "Migrate Database"
+    msg_info "Migrate Database"
     cd /opt/planka
     $STD npm run db:upgrade
     $STD npm run db:migrate

ct/plex.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: tteck (tteckster) | MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://www.plex.tv/
 
@@ -24,28 +24,54 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [[ ! -f /etc/apt/sources.list.d/plexmediaserver.list ]] &&
-    [[ ! -f /etc/apt/sources.list.d/plexmediaserver.sources ]]; then
+
+  if ! dpkg -l plexmediaserver &>/dev/null; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  UPD=$(msg_menu "Plex Update Options" \
-    "1" "Update LXC" \
-    "2" "Install plexupdate")
-  if [ "$UPD" == "1" ]; then
-    msg_info "Updating ${APP} LXC"
-    $STD apt update
-    $STD apt -y upgrade
-    msg_ok "Updated ${APP} LXC"
-    msg_ok "Updated successfully!"
-    exit
+
+  # Migrate from old repository to new one if needed
+  if [[ -f /etc/apt/sources.list.d/plexmediaserver.sources ]]; then
+    local current_uri
+    current_uri=$(grep -oP '(?<=URIs: ).*' /etc/apt/sources.list.d/plexmediaserver.sources 2>/dev/null || true)
+    if [[ "$current_uri" == *"downloads.plex.tv/repo/deb"* ]]; then
+      msg_info "Migrating to new Plex repository"
+      rm -f /etc/apt/sources.list.d/plexmediaserver.sources
+      rm -f /usr/share/keyrings/PlexSign.asc
+      setup_deb822_repo \
+        "plexmediaserver" \
+        "https://downloads.plex.tv/plex-keys/PlexSign.v2.key" \
+        "https://repo.plex.tv/deb/" \
+        "public" \
+        "main"
+      msg_ok "Migrated to new Plex repository"
+    fi
+  elif [[ -f /etc/apt/sources.list.d/plexmediaserver.list ]]; then
+    msg_info "Migrating to new Plex repository (deb822)"
+    rm -f /etc/apt/sources.list.d/plexmediaserver.list
+    rm -f /etc/apt/sources.list.d/plex*
+    rm -f /usr/share/keyrings/PlexSign.asc
+    setup_deb822_repo \
+      "plexmediaserver" \
+      "https://downloads.plex.tv/plex-keys/PlexSign.v2.key" \
+      "https://repo.plex.tv/deb/" \
+      "public" \
+      "main"
+    msg_ok "Migrated to new Plex repository (deb822)"
   fi
-  if [ "$UPD" == "2" ]; then
-    set +e
-    bash -c "$(curl -fsSL https://raw.githubusercontent.com/mrworf/plexupdate/master/extras/installer.sh)"
-    msg_ok "Updated successfully!"
-    exit
+  if [[ -f /usr/local/bin/plexupdate ]] || [[ -d /opt/plexupdate ]]; then
+    msg_info "Removing legacy plexupdate"
+    rm -rf /opt/plexupdate /usr/local/bin/plexupdate
+    crontab -l 2>/dev/null | grep -v plexupdate | crontab - 2>/dev/null || true
+    msg_ok "Removed legacy plexupdate"
   fi
+
+  msg_info "Updating Plex Media Server"
+  $STD apt update
+  $STD apt install -y plexmediaserver
+  msg_ok "Updated Plex Media Server"
+  msg_ok "Updated successfully!"
+  exit
 }
 
 start

ct/recyclarr.sh

@@ -23,7 +23,7 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [[ ! -f /root/.config/recyclarr/recyclarr.yml ]]; then
+  if [[ ! -f /root/.config/recyclarr/recyclarr.yml ]] && [[ ! -d /root/.config/recyclarr/configs ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
@@ -33,6 +33,20 @@ function update_script() {
 
     fetch_and_deploy_gh_release "recyclarr" "recyclarr/recyclarr" "prebuild" "latest" "/usr/local/bin" "recyclarr-linux-x64.tar.xz"
 
+    # Migrate includes from configs/ to includes/ (recyclarr v8)
+    RECYCLARR_DIR="/root/.config/recyclarr"
+    mkdir -p "$RECYCLARR_DIR/includes"
+    if [[ -d "$RECYCLARR_DIR/configs" ]]; then
+      for item in "$RECYCLARR_DIR/configs"/*/; do
+        [[ -d "$item" ]] || continue
+        dir_name=$(basename "$item")
+        # Only move subdirs that look like include dirs (not the configs themselves)
+        if [[ "$dir_name" != "configs" ]] && [[ ! -d "$RECYCLARR_DIR/includes/$dir_name" ]]; then
+          mv "$item" "$RECYCLARR_DIR/includes/"
+        fi
+      done
+    fi
+
     msg_ok "Updated successfully!"
   fi
   exit

ct/sure.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://sure.am
+
+APP="Sure"
+var_tags="${var_tags:-finance}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-6}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/sure ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "Sure" "we-promise/sure"; then
+    if [[ ! -f /etc/systemd/system/sure-worker.service ]]; then
+      cat <<EOF >/etc/systemd/system/sure-worker.service
+[Unit]
+Description=Sure Background Worker (Sidekiq)
+After=network.target redis-server.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/sure
+Environment=RAILS_ENV=production
+Environment=BUNDLE_DEPLOYMENT=1
+Environment=BUNDLE_WITHOUT=development
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/bin:/usr/local/bin:/sbin:/bin
+EnvironmentFile=/etc/sure/.env
+ExecStart=/opt/sure/bin/bundle exec sidekiq -e production
+Restart=always
+RestartSec=5
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+EOF
+      systemctl enable -q sure-worker
+      msg_info "Stopping Service"
+      $STD systemctl stop sure
+      msg_ok "Stopped Service"
+    else
+      msg_info "Stopping services"
+      $STD systemctl stop sure-worker sure
+      msg_ok "Stopped services"
+    fi
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Sure" "we-promise/sure" "tarball" "latest" "/opt/sure"
+    RUBY_VERSION="$(cat /opt/sure/.ruby-version)" RUBY_INSTALL_RAILS=false setup_ruby
+
+    msg_info "Updating Sure"
+    source ~/.profile
+    cd /opt/sure
+    export RAILS_ENV=production
+    export BUNDLE_DEPLOYMENT=1
+    export BUNDLE_WITHOUT=development
+    $STD ./bin/bundle install
+    $STD ./bin/bundle exec bootsnap precompile --gemfile -j 0
+    $STD ./bin/bundle exec bootsnap precompile -j 0 app/ lib/
+    export SECRET_KEY_BASE_DUMMY=1 && $STD ./bin/rails assets:precompile
+    unset SECRET_KEY_BASE_DUMMY
+    msg_ok "Updated Sure"
+
+    msg_info "Starting Services"
+    $STD systemctl start sure sure-worker
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

frontend/public/json/calibre-web.json

@@ -0,0 +1,44 @@
+{
+  "name": "Calibre-Web",
+  "slug": "calibre-web",
+  "categories": [
+    4
+  ],
+  "date_created": "2026-02-20",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8083,
+  "documentation": "https://github.com/janeczku/calibre-web/wiki",
+  "website": "https://github.com/janeczku/calibre-web",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/calibre-web.webp",
+  "config_path": "/opt/calibre-web/app.db",
+  "description": "Web app for browsing, reading and downloading eBooks from a Calibre database. Provides an attractive interface with mobile support, user management, and eBook conversion capabilities.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/calibre-web.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "No credentials are set by this script. Complete setup and create credentials in the first-run wizard.",
+      "type": "info"
+    },
+    {
+      "text": "Upload your Calibre library metadata.db during first setup wizard.",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/cronmaster.json

@@ -0,0 +1,44 @@
+{
+  "name": "CR*NMASTER",
+  "slug": "cronmaster",
+  "categories": [
+    1
+  ],
+  "date_created": "2026-02-22",
+  "type": "addon",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://github.com/fccview/cronmaster",
+  "website": "https://github.com/fccview/cronmaster",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/cr-nmaster.webp",
+  "config_path": "/opt/cronmaster/.env",
+  "description": "Self-hosted cron job scheduler with web UI, live logs, auth and prebuilt binaries provided upstream.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "tools/addon/cronmaster.sh",
+      "resources": {
+        "cpu": null,
+        "ram": null,
+        "hdd": null,
+        "os": null,
+        "version": null
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Credentials are saved to: /root/cronmaster.creds",
+      "type": "info"
+    },
+    {
+      "text": "Update with: update_cronmaster",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/dawarich.json

@@ -9,7 +9,7 @@
   "updateable": true,
   "privileged": false,
   "interface_port": 3000,
-  "documentation": "https://dawarich.app/docs",
+  "documentation": "https://dawarich.app/docs/intro",
   "website": "https://dawarich.app/",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/dawarich.webp",
   "config_path": "/opt/dawarich/.env",

frontend/public/json/frigate.json

@@ -0,0 +1,44 @@
+{
+  "name": "Frigate",
+  "slug": "frigate",
+  "categories": [
+    15
+  ],
+  "date_created": "2026-02-23",
+  "type": "ct",
+  "updateable": false,
+  "privileged": false,
+  "config_path": "/config/config.yml",
+  "interface_port": 5000,
+  "documentation": "https://frigate.io/",
+  "website": "https://frigate.io/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/frigate-light.webp",
+  "description": "Frigate is a complete and local NVR (Network Video Recorder) with realtime AI object detection for CCTV cameras.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/frigate.sh",
+      "resources": {
+        "cpu": 4,
+        "ram": 4096,
+        "hdd": 20,
+        "os": "Debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "SemanticSearch is not pre-installed due to high resource requirements (8+ cores, 16-24GB RAM, GPU recommended). Manual configuration required if needed.",
+      "type": "info"
+    },
+    {
+      "text": "OpenVino detector may fail on older CPUs (pre-Haswell/AVX2). If you encounter 'Illegal instruction' errors, consider using alternative detectors.",
+      "type": "warning"
+    }
+  ]
+}

frontend/public/json/frigate.json.bak

@@ -1,44 +0,0 @@
-{
-  "name": "Frigate",
-  "slug": "frigate",
-  "categories": [
-    15
-  ],
-  "date_created": "2024-05-02",
-  "type": "ct",
-  "updateable": false,
-  "privileged": true,
-  "interface_port": 5000,
-  "documentation": "https://docs.frigate.video/",
-  "website": "https://frigate.video/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/frigate.webp",
-  "config_path": "",
-  "description": "Frigate is an open source NVR built around real-time AI object detection. All processing is performed locally on your own hardware, and your camera feeds never leave your home.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/frigate.sh",
-      "resources": {
-        "cpu": 4,
-        "ram": 4096,
-        "hdd": 20,
-        "os": "debian",
-        "version": "11"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "Discussions (explore more advanced methods): `https://github.com/tteck/Proxmox/discussions/2711`",
-      "type": "info"
-    },
-    {
-      "text": "go2rtc Interface port:`1984`",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-02-20T00:19:36Z",
+  "generated": "2026-02-23T06:26:10Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -88,9 +88,9 @@
     {
       "slug": "backrest",
       "repo": "garethgeorge/backrest",
-      "version": "v1.11.2",
+      "version": "v1.12.0",
       "pinned": false,
-      "date": "2026-01-27T06:27:56Z"
+      "date": "2026-02-22T06:49:49Z"
     },
     {
       "slug": "baikal",
@@ -116,16 +116,16 @@
     {
       "slug": "bentopdf",
       "repo": "alam00000/bentopdf",
-      "version": "v2.2.1",
+      "version": "v2.3.1",
       "pinned": false,
-      "date": "2026-02-14T16:33:47Z"
+      "date": "2026-02-21T09:04:27Z"
     },
     {
       "slug": "beszel",
       "repo": "henrygd/beszel",
-      "version": "v0.18.3",
+      "version": "v0.18.4",
       "pinned": false,
-      "date": "2026-02-01T19:02:42Z"
+      "date": "2026-02-20T21:10:52Z"
     },
     {
       "slug": "bichon",
@@ -183,19 +183,26 @@
       "pinned": false,
       "date": "2025-07-29T16:39:18Z"
     },
+    {
+      "slug": "calibre-web",
+      "repo": "janeczku/calibre-web",
+      "version": "0.6.26",
+      "pinned": false,
+      "date": "2026-02-06T21:17:44Z"
+    },
     {
       "slug": "checkmate",
       "repo": "bluewave-labs/Checkmate",
-      "version": "v3.3",
+      "version": "v3.4.0",
       "pinned": false,
-      "date": "2026-01-28T14:25:25Z"
+      "date": "2026-02-20T21:08:55Z"
     },
     {
       "slug": "cleanuparr",
       "repo": "Cleanuparr/Cleanuparr",
-      "version": "v2.6.3",
+      "version": "v2.7.0",
       "pinned": false,
-      "date": "2026-02-16T22:41:25Z"
+      "date": "2026-02-22T18:17:27Z"
     },
     {
       "slug": "cloudreve",
@@ -214,16 +221,16 @@
     {
       "slug": "commafeed",
       "repo": "Athou/commafeed",
-      "version": "6.2.0",
+      "version": "7.0.0",
       "pinned": false,
-      "date": "2026-02-09T19:44:58Z"
+      "date": "2026-02-21T21:54:15Z"
     },
     {
       "slug": "configarr",
       "repo": "raydak-labs/configarr",
-      "version": "v1.21.0",
+      "version": "v1.22.0",
       "pinned": false,
-      "date": "2026-02-17T22:59:07Z"
+      "date": "2026-02-20T21:55:46Z"
     },
     {
       "slug": "convertx",
@@ -246,6 +253,13 @@
       "pinned": false,
       "date": "2026-02-11T17:11:46Z"
     },
+    {
+      "slug": "cronmaster",
+      "repo": "fccview/cronmaster",
+      "version": "2.1.0",
+      "pinned": false,
+      "date": "2026-02-11T19:29:11Z"
+    },
     {
       "slug": "cryptpad",
       "repo": "cryptpad/cryptpad",
@@ -256,9 +270,9 @@
     {
       "slug": "databasus",
       "repo": "databasus/databasus",
-      "version": "v3.14.1",
+      "version": "v3.16.2",
       "pinned": false,
-      "date": "2026-02-18T10:43:45Z"
+      "date": "2026-02-22T21:10:12Z"
     },
     {
       "slug": "dawarich",
@@ -312,9 +326,9 @@
     {
       "slug": "drawio",
       "repo": "jgraph/drawio",
-      "version": "v29.3.6",
+      "version": "v29.5.2",
       "pinned": false,
-      "date": "2026-01-28T18:25:02Z"
+      "date": "2026-02-22T10:36:14Z"
     },
     {
       "slug": "duplicati",
@@ -368,16 +382,16 @@
     {
       "slug": "firefly",
       "repo": "firefly-iii/firefly-iii",
-      "version": "v6.4.22",
+      "version": "v6.4.23",
       "pinned": false,
-      "date": "2026-02-15T18:43:08Z"
+      "date": "2026-02-20T07:02:05Z"
     },
     {
       "slug": "fladder",
       "repo": "DonutWare/Fladder",
-      "version": "v0.9.0",
+      "version": "v0.10.1",
       "pinned": false,
-      "date": "2026-01-05T17:30:07Z"
+      "date": "2026-02-21T12:45:53Z"
     },
     {
       "slug": "flaresolverr",
@@ -410,16 +424,16 @@
     {
       "slug": "gatus",
       "repo": "TwiN/gatus",
-      "version": "v5.34.0",
+      "version": "v5.35.0",
       "pinned": false,
-      "date": "2026-01-03T03:12:12Z"
+      "date": "2026-02-20T20:58:03Z"
     },
     {
       "slug": "ghostfolio",
       "repo": "ghostfolio/ghostfolio",
-      "version": "2.240.0",
+      "version": "2.242.0",
       "pinned": false,
-      "date": "2026-02-18T20:08:56Z"
+      "date": "2026-02-22T10:01:44Z"
     },
     {
       "slug": "gitea",
@@ -463,6 +477,13 @@
       "pinned": false,
       "date": "2026-02-13T15:22:31Z"
     },
+    {
+      "slug": "gramps-web",
+      "repo": "gramps-project/gramps-web-api",
+      "version": "v3.7.1.1",
+      "pinned": false,
+      "date": "2026-01-30T09:15:46Z"
+    },
     {
       "slug": "grist",
       "repo": "gristlabs/grist-core",
@@ -522,9 +543,9 @@
     {
       "slug": "homarr",
       "repo": "homarr-labs/homarr",
-      "version": "v1.53.1",
+      "version": "v1.53.2",
       "pinned": false,
-      "date": "2026-02-13T19:47:11Z"
+      "date": "2026-02-20T19:41:55Z"
     },
     {
       "slug": "homebox",
@@ -585,16 +606,16 @@
     {
       "slug": "invoiceninja",
       "repo": "invoiceninja/invoiceninja",
-      "version": "v5.12.64",
+      "version": "v5.12.65",
       "pinned": false,
-      "date": "2026-02-18T07:59:44Z"
+      "date": "2026-02-21T01:03:52Z"
     },
     {
       "slug": "jackett",
       "repo": "Jackett/Jackett",
-      "version": "v0.24.1157",
+      "version": "v0.24.1184",
       "pinned": false,
-      "date": "2026-02-19T05:51:02Z"
+      "date": "2026-02-23T05:55:36Z"
     },
     {
       "slug": "jellystat",
@@ -641,9 +662,9 @@
     {
       "slug": "keycloak",
       "repo": "keycloak/keycloak",
-      "version": "26.5.3",
+      "version": "26.5.4",
       "pinned": false,
-      "date": "2026-02-10T07:30:08Z"
+      "date": "2026-02-20T09:19:45Z"
     },
     {
       "slug": "kimai",
@@ -704,9 +725,9 @@
     {
       "slug": "leantime",
       "repo": "Leantime/leantime",
-      "version": "v3.7.0",
+      "version": "v3.7.1",
       "pinned": false,
-      "date": "2026-02-18T00:02:31Z"
+      "date": "2026-02-22T01:25:16Z"
     },
     {
       "slug": "librenms",
@@ -725,9 +746,9 @@
     {
       "slug": "libretranslate",
       "repo": "LibreTranslate/LibreTranslate",
-      "version": "v1.9.0",
+      "version": "v1.9.3",
       "pinned": false,
-      "date": "2026-02-10T19:05:48Z"
+      "date": "2026-02-21T19:08:33Z"
     },
     {
       "slug": "lidarr",
@@ -788,9 +809,9 @@
     {
       "slug": "mail-archiver",
       "repo": "s1t5/mail-archiver",
-      "version": "2602.2",
+      "version": "2602.3",
       "pinned": false,
-      "date": "2026-02-17T09:46:52Z"
+      "date": "2026-02-22T20:24:18Z"
     },
     {
       "slug": "managemydamnlife",
@@ -823,9 +844,9 @@
     {
       "slug": "mediamtx",
       "repo": "bluenviron/mediamtx",
-      "version": "v1.16.1",
+      "version": "v1.16.2",
       "pinned": false,
-      "date": "2026-02-07T18:58:24Z"
+      "date": "2026-02-22T17:31:41Z"
     },
     {
       "slug": "meilisearch",
@@ -844,9 +865,9 @@
     {
       "slug": "metube",
       "repo": "alexta69/metube",
-      "version": "2026.02.19",
+      "version": "2026.02.22",
       "pinned": false,
-      "date": "2026-02-19T08:24:04Z"
+      "date": "2026-02-22T00:58:45Z"
     },
     {
       "slug": "miniflux",
@@ -977,9 +998,9 @@
     {
       "slug": "ots",
       "repo": "Luzifer/ots",
-      "version": "v1.21.1",
+      "version": "v1.21.2",
       "pinned": false,
-      "date": "2026-02-16T12:12:23Z"
+      "date": "2026-02-20T16:20:03Z"
     },
     {
       "slug": "outline",
@@ -1033,16 +1054,16 @@
     {
       "slug": "paperless-ngx",
       "repo": "paperless-ngx/paperless-ngx",
-      "version": "v2.20.7",
+      "version": "v2.20.8",
       "pinned": false,
-      "date": "2026-02-16T16:52:23Z"
+      "date": "2026-02-22T01:40:54Z"
     },
     {
       "slug": "patchmon",
       "repo": "PatchMon/PatchMon",
-      "version": "v1.4.1",
+      "version": "v1.4.2",
       "pinned": false,
-      "date": "2026-02-16T18:00:13Z"
+      "date": "2026-02-20T13:15:31Z"
     },
     {
       "slug": "paymenter",
@@ -1110,9 +1131,9 @@
     {
       "slug": "pocketbase",
       "repo": "pocketbase/pocketbase",
-      "version": "v0.36.4",
+      "version": "v0.36.5",
       "pinned": false,
-      "date": "2026-02-17T08:02:51Z"
+      "date": "2026-02-21T11:45:32Z"
     },
     {
       "slug": "pocketid",
@@ -1187,9 +1208,9 @@
     {
       "slug": "pulse",
       "repo": "rcourtman/Pulse",
-      "version": "v5.1.11",
+      "version": "v5.1.13",
       "pinned": false,
-      "date": "2026-02-19T20:20:44Z"
+      "date": "2026-02-22T12:40:41Z"
     },
     {
       "slug": "pve-scripts-local",
@@ -1208,23 +1229,23 @@
     {
       "slug": "qbittorrent-exporter",
       "repo": "martabal/qbittorrent-exporter",
-      "version": "v1.13.2",
+      "version": "v1.13.3",
       "pinned": false,
-      "date": "2025-12-13T22:59:03Z"
+      "date": "2026-02-22T13:01:42Z"
     },
     {
       "slug": "qdrant",
       "repo": "qdrant/qdrant",
-      "version": "v1.16.3",
+      "version": "v1.17.0",
       "pinned": false,
-      "date": "2025-12-19T17:45:42Z"
+      "date": "2026-02-20T11:11:50Z"
     },
     {
       "slug": "qui",
       "repo": "autobrr/qui",
-      "version": "v1.13.1",
+      "version": "v1.14.0",
       "pinned": false,
-      "date": "2026-01-28T20:12:50Z"
+      "date": "2026-02-21T22:23:46Z"
     },
     {
       "slug": "radarr",
@@ -1250,9 +1271,9 @@
     {
       "slug": "rdtclient",
       "repo": "rogerfar/rdt-client",
-      "version": "v2.0.121",
+      "version": "v2.0.123",
       "pinned": false,
-      "date": "2026-02-19T04:48:39Z"
+      "date": "2026-02-21T23:08:13Z"
     },
     {
       "slug": "reactive-resume",
@@ -1264,9 +1285,9 @@
     {
       "slug": "recyclarr",
       "repo": "recyclarr/recyclarr",
-      "version": "v7.5.2",
+      "version": "v8.2.1",
       "pinned": false,
-      "date": "2025-11-30T22:08:46Z"
+      "date": "2026-02-22T19:19:49Z"
     },
     {
       "slug": "reitti",
@@ -1313,9 +1334,9 @@
     {
       "slug": "scanopy",
       "repo": "scanopy/scanopy",
-      "version": "v0.14.6",
+      "version": "v0.14.7",
       "pinned": false,
-      "date": "2026-02-18T16:54:14Z"
+      "date": "2026-02-23T01:36:44Z"
     },
     {
       "slug": "scraparr",
@@ -1341,9 +1362,9 @@
     {
       "slug": "semaphore",
       "repo": "semaphoreui/semaphore",
-      "version": "v2.17.8",
+      "version": "v2.17.12",
       "pinned": false,
-      "date": "2026-02-18T19:46:43Z"
+      "date": "2026-02-20T09:16:50Z"
     },
     {
       "slug": "shelfmark",
@@ -1355,9 +1376,9 @@
     {
       "slug": "signoz",
       "repo": "SigNoz/signoz-otel-collector",
-      "version": "v0.142.0",
+      "version": "v0.142.1",
       "pinned": false,
-      "date": "2026-02-06T11:40:30Z"
+      "date": "2026-02-21T18:04:07Z"
     },
     {
       "slug": "silverbullet",
@@ -1397,9 +1418,9 @@
     {
       "slug": "speedtest-tracker",
       "repo": "alexjustesen/speedtest-tracker",
-      "version": "v1.13.9",
+      "version": "v1.13.10",
       "pinned": false,
-      "date": "2026-02-08T21:48:49Z"
+      "date": "2026-02-20T03:14:47Z"
     },
     {
       "slug": "spoolman",
@@ -1418,9 +1439,9 @@
     {
       "slug": "stirling-pdf",
       "repo": "Stirling-Tools/Stirling-PDF",
-      "version": "v2.5.1",
+      "version": "v2.5.2",
       "pinned": false,
-      "date": "2026-02-18T11:05:34Z"
+      "date": "2026-02-20T23:20:20Z"
     },
     {
       "slug": "streamlink-webui",
@@ -1436,6 +1457,13 @@
       "pinned": false,
       "date": "2025-09-19T22:23:28Z"
     },
+    {
+      "slug": "sure",
+      "repo": "we-promise/sure",
+      "version": "chart-v0.6.8-alpha.13",
+      "pinned": false,
+      "date": "2026-02-20T11:15:15Z"
+    },
     {
       "slug": "tandoor",
       "repo": "TandoorRecipes/recipes",
@@ -1502,9 +1530,9 @@
     {
       "slug": "traccar",
       "repo": "traccar/traccar",
-      "version": "v6.11.1",
+      "version": "v6.12.1",
       "pinned": false,
-      "date": "2025-12-07T19:19:08Z"
+      "date": "2026-02-22T18:47:37Z"
     },
     {
       "slug": "tracearr",

frontend/public/json/gramps-web.json

@@ -0,0 +1,44 @@
+{
+  "name": "Gramps Web",
+  "slug": "gramps-web",
+  "categories": [
+    12
+  ],
+  "date_created": "2026-02-22",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 5000,
+  "documentation": "https://www.grampsweb.org/install_setup/setup/",
+  "website": "https://www.grampsweb.org/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/gramps.webp",
+  "config_path": "/opt/gramps-web/config/config.cfg",
+  "description": "Gramps Web is a collaborative genealogy platform for browsing, editing and sharing family trees through a modern web interface.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/gramps-web.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 4096,
+        "hdd": 20,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "On first access, create the owner account via the built-in onboarding wizard.",
+      "type": "info"
+    },
+    {
+      "text": "The initial deployment compiles the frontend and can take several minutes.",
+      "type": "warning"
+    }
+  ]
+}

frontend/public/json/mediamanager.json

@@ -10,7 +10,7 @@
   "updateable": true,
   "privileged": false,
   "interface_port": 8000,
-  "documentation": "https://maxdorninger.github.io/MediaManager/introduction.html",
+  "documentation": "https://maxdorninger.github.io/MediaManager/latest/",
   "config_path": "/opt/mm/config/config.toml",
   "website": "https://github.com/maxdorninger/MediaManager",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/mediamanager.webp",

frontend/public/json/sure.json

@@ -0,0 +1,35 @@
+{
+  "name": "Sure",
+  "slug": "sure",
+  "categories": [
+    23
+  ],
+  "date_created": "2026-02-20",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://github.com/we-promise/sure",
+  "website": "https://sure.am",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/sure-finance.webp",
+  "config_path": "/etc/sure/.env",
+  "description": "The personal finance app for everyone. NOT affiliated with or endorsed by Maybe Finance Inc..",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/sure.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 6,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

install/apache-guacamole-install.sh

@@ -36,7 +36,7 @@ $STD apt install -y \
   libavformat-dev
 msg_ok "Installed Dependencies"
 
-JAVA_VERSION="11" setup_java
+JAVA_VERSION="17" setup_java
 setup_mariadb
 MARIADB_DB_NAME="guacamole_db" MARIADB_DB_USER="guacamole_user" setup_mariadb_db
 

install/calibre-web-install.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: mikolaj92
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/janeczku/calibre-web
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  python3 \
+  python3-dev \
+  libldap2-dev \
+  libsasl2-dev \
+  libssl-dev \
+  imagemagick \
+  libpango-1.0-0 \
+  libharfbuzz0b \
+  libpangoft2-1.0-0 \
+  fonts-liberation
+msg_ok "Installed Dependencies"
+
+msg_info "Installing Calibre (for eBook conversion)"
+$STD apt install -y calibre
+msg_ok "Installed Calibre"
+
+fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
+setup_uv
+
+msg_info "Installing Python Dependencies"
+cd /opt/calibre-web
+$STD uv venv
+$STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --upgrade pip setuptools wheel
+$STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir -r requirements.txt
+msg_ok "Installed Python Dependencies"
+
+msg_info "Creating Service"
+mkdir -p /opt/calibre-web/data
+cat <<EOF >/etc/systemd/system/calibre-web.service
+[Unit]
+Description=Calibre-Web Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/calibre-web
+ExecStart=/opt/calibre-web/.venv/bin/python /opt/calibre-web/cps.py
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now calibre-web
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/frigate-install.sh

@@ -1,8 +1,8 @@
 #!/usr/bin/env bash
 
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# Co-Author: remz1337
+# Copyright (c) 2021-2026 community-scripts ORG
+# Authors: MickLesk (CanbiZ)
+# Co-Authors: remz1337
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://frigate.video/
 
@@ -14,60 +14,221 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies (Patience)"
-$STD apt-get install -y {git,ca-certificates,automake,build-essential,xz-utils,libtool,ccache,pkg-config,libgtk-3-dev,libavcodec-dev,libavformat-dev,libswscale-dev,libv4l-dev,libxvidcore-dev,libx264-dev,libjpeg-dev,libpng-dev,libtiff-dev,gfortran,openexr,libatlas-base-dev,libssl-dev,libtbb2,libtbb-dev,libdc1394-22-dev,libopenexr-dev,libgstreamer-plugins-base1.0-dev,libgstreamer1.0-dev,gcc,gfortran,libopenblas-dev,liblapack-dev,libusb-1.0-0-dev,jq,moreutils}
+source /etc/os-release
+if [[ "$VERSION_ID" != "12" ]]; then
+  msg_error "Frigate requires Debian 12 (Bookworm) due to Python 3.11 dependencies"
+  exit 1
+fi
+
+msg_info "Converting APT sources to DEB822 format"
+if [ -f /etc/apt/sources.list ]; then
+  cat >/etc/apt/sources.list.d/debian.sources <<'EOF'
+Types: deb
+URIs: http://deb.debian.org/debian
+Suites: bookworm
+Components: main contrib
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: http://deb.debian.org/debian
+Suites: bookworm-updates
+Components: main contrib
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: http://security.debian.org
+Suites: bookworm-security
+Components: main contrib
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+EOF
+  mv /etc/apt/sources.list /etc/apt/sources.list.bak
+  $STD apt update
+fi
+msg_ok "Converted APT sources"
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  xz-utils \
+  python3 \
+  python3-dev \
+  python3-pip \
+  gcc \
+  pkg-config \
+  libhdf5-dev \
+  build-essential \
+  automake \
+  libtool \
+  ccache \
+  libusb-1.0-0-dev \
+  apt-transport-https \
+  cmake \
+  git \
+  libgtk-3-dev \
+  libavcodec-dev \
+  libavformat-dev \
+  libswscale-dev \
+  libv4l-dev \
+  libxvidcore-dev \
+  libx264-dev \
+  libjpeg-dev \
+  libpng-dev \
+  libtiff-dev \
+  gfortran \
+  openexr \
+  libssl-dev \
+  libtbbmalloc2 \
+  libtbb-dev \
+  libdc1394-dev \
+  libopenexr-dev \
+  libgstreamer-plugins-base1.0-dev \
+  libgstreamer1.0-dev \
+  tclsh \
+  libopenblas-dev \
+  liblapack-dev \
+  make \
+  moreutils
 msg_ok "Installed Dependencies"
 
-msg_info "Setup Python3"
-$STD apt-get install -y {python3,python3-dev,python3-setuptools,python3-distutils,python3-pip}
-$STD pip install --upgrade pip
-msg_ok "Setup Python3"
-
-NODE_VERSION="22" setup_nodejs
-
-msg_info "Installing go2rtc"
-mkdir -p /usr/local/go2rtc/bin
-cd /usr/local/go2rtc/bin
-curl -fsSL "https://github.com/AlexxIT/go2rtc/releases/latest/download/go2rtc_linux_amd64" -o "go2rtc"
-chmod +x go2rtc
-$STD ln -svf /usr/local/go2rtc/bin/go2rtc /usr/local/bin/go2rtc
-msg_ok "Installed go2rtc"
-
 setup_hwaccel
 
-msg_info "Installing Frigate v0.14.1 (Perseverance)"
-cd ~
-mkdir -p /opt/frigate/models
-curl -fsSL "https://github.com/blakeblackshear/frigate/archive/refs/tags/v0.14.1.tar.gz" -o "frigate.tar.gz"
-tar -xzf frigate.tar.gz -C /opt/frigate --strip-components 1
-rm -rf frigate.tar.gz
-cd /opt/frigate
-$STD pip3 wheel --wheel-dir=/wheels -r /opt/frigate/docker/main/requirements-wheels.txt
-cp -a /opt/frigate/docker/main/rootfs/. /
 export TARGETARCH="amd64"
-echo 'libc6 libraries/restart-without-asking boolean true' | debconf-set-selections
-$STD /opt/frigate/docker/main/install_deps.sh
-$STD apt update
-$STD ln -svf /usr/lib/btbn-ffmpeg/bin/ffmpeg /usr/local/bin/ffmpeg
-$STD ln -svf /usr/lib/btbn-ffmpeg/bin/ffprobe /usr/local/bin/ffprobe
+export CCACHE_DIR=/root/.ccache
+export CCACHE_MAXSIZE=2G
+export APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE=DontWarn
+export PIP_BREAK_SYSTEM_PACKAGES=1
+export NVIDIA_VISIBLE_DEVICES=all
+export NVIDIA_DRIVER_CAPABILITIES="compute,video,utility"
+export TOKENIZERS_PARALLELISM=true
+export TRANSFORMERS_NO_ADVISORY_WARNINGS=1
+export OPENCV_FFMPEG_LOGLEVEL=8
+export HAILORT_LOGGER_PATH=NONE
+
+fetch_and_deploy_gh_release "frigate" "blakeblackshear/frigate" "tarball" "v0.16.4" "/opt/frigate"
+
+msg_info "Building Nginx"
+$STD bash /opt/frigate/docker/main/build_nginx.sh
+sed -e '/s6-notifyoncheck/ s/^#*/#/' -i /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run
+ln -sf /usr/local/nginx/sbin/nginx /usr/local/bin/nginx
+msg_ok "Built Nginx"
+
+msg_info "Building SQLite Extensions"
+$STD bash /opt/frigate/docker/main/build_sqlite_vec.sh
+msg_ok "Built SQLite Extensions"
+
+fetch_and_deploy_gh_release "go2rtc" "AlexxIT/go2rtc" "singlefile" "latest" "/usr/local/go2rtc/bin" "go2rtc_linux_amd64"
+
+msg_info "Installing Tempio"
+sed -i 's|/rootfs/usr/local|/usr/local|g' /opt/frigate/docker/main/install_tempio.sh
+$STD bash /opt/frigate/docker/main/install_tempio.sh
+ln -sf /usr/local/tempio/bin/tempio /usr/local/bin/tempio
+msg_ok "Installed Tempio"
+
+msg_info "Building libUSB"
+fetch_and_deploy_gh_release "libusb" "libusb/libusb" "tarball" "v1.0.26" "/opt/libusb"
+cd /opt/libusb
+$STD ./bootstrap.sh
+$STD ./configure CC='ccache gcc' CCX='ccache g++' --disable-udev --enable-shared
+$STD make -j "$(nproc)"
+cd /opt/libusb/libusb
+mkdir -p /usr/local/lib /usr/local/include/libusb-1.0 /usr/local/lib/pkgconfig
+$STD bash ../libtool --mode=install /usr/bin/install -c libusb-1.0.la /usr/local/lib
+install -c -m 644 libusb.h /usr/local/include/libusb-1.0
+cd /opt/libusb/
+install -c -m 644 libusb-1.0.pc /usr/local/lib/pkgconfig
+ldconfig
+msg_ok "Built libUSB"
+
+msg_info "Installing Python Dependencies"
+$STD pip3 install -r /opt/frigate/docker/main/requirements.txt
+msg_ok "Installed Python Dependencies"
+
+msg_info "Building Python Wheels (Patience)"
+mkdir -p /wheels
+sed -i 's|^SQLITE3_VERSION=.*|SQLITE3_VERSION="version-3.46.0"|g' /opt/frigate/docker/main/build_pysqlite3.sh
+$STD bash /opt/frigate/docker/main/build_pysqlite3.sh
+for i in {1..3}; do
+  $STD pip3 wheel --wheel-dir=/wheels -r /opt/frigate/docker/main/requirements-wheels.txt --default-timeout=300 --retries=3 && break
+  [[ $i -lt 3 ]] && sleep 10
+done
+msg_ok "Built Python Wheels"
+
+NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
+
+msg_info "Downloading Inference Models"
+mkdir -p /models /openvino-model
+wget -q -O /edgetpu_model.tflite https://github.com/google-coral/test_data/raw/release-frogfish/ssdlite_mobiledet_coco_qat_postprocess_edgetpu.tflite
+wget -q -O /models/cpu_model.tflite https://github.com/google-coral/test_data/raw/release-frogfish/ssdlite_mobiledet_coco_qat_postprocess.tflite
+cp /opt/frigate/labelmap.txt /labelmap.txt
+msg_ok "Downloaded Inference Models"
+
+msg_info "Downloading Audio Model"
+wget -q -O /tmp/yamnet.tar.gz https://www.kaggle.com/api/v1/models/google/yamnet/tfLite/classification-tflite/1/download
+$STD tar xzf /tmp/yamnet.tar.gz -C /
+mv /1.tflite /cpu_audio_model.tflite
+cp /opt/frigate/audio-labelmap.txt /audio-labelmap.txt
+rm -f /tmp/yamnet.tar.gz
+msg_ok "Downloaded Audio Model"
+
+msg_info "Installing HailoRT Runtime"
+$STD bash /opt/frigate/docker/main/install_hailort.sh
+cp -a /opt/frigate/docker/main/rootfs/. /
+sed -i '/^.*unset DEBIAN_FRONTEND.*$/d' /opt/frigate/docker/main/install_deps.sh
+echo "libedgetpu1-max libedgetpu/accepted-eula boolean true" | debconf-set-selections
+echo "libedgetpu1-max libedgetpu/install-confirm-max boolean true" | debconf-set-selections
+$STD bash /opt/frigate/docker/main/install_deps.sh
 $STD pip3 install -U /wheels/*.whl
 ldconfig
+msg_ok "Installed HailoRT Runtime"
+
+msg_info "Installing OpenVino"
+$STD pip3 install -r /opt/frigate/docker/main/requirements-ov.txt
+msg_ok "Installed OpenVino"
+
+msg_info "Building OpenVino Model"
+cd /models
+wget -q http://download.tensorflow.org/models/object_detection/ssdlite_mobilenet_v2_coco_2018_05_09.tar.gz
+$STD tar -zxf ssdlite_mobilenet_v2_coco_2018_05_09.tar.gz --no-same-owner
+if $STD python3 /opt/frigate/docker/main/build_ov_model.py; then
+  cp /models/ssdlite_mobilenet_v2.xml /openvino-model/
+  cp /models/ssdlite_mobilenet_v2.bin /openvino-model/
+  wget -q https://github.com/openvinotoolkit/open_model_zoo/raw/master/data/dataset_classes/coco_91cl_bkgr.txt -O /openvino-model/coco_91cl_bkgr.txt
+  sed -i 's/truck/car/g' /openvino-model/coco_91cl_bkgr.txt
+  msg_ok "Built OpenVino Model"
+else
+  msg_warn "OpenVino build failed (CPU may not support required instructions). Frigate will use CPU model."
+fi
+
+msg_info "Building Frigate Application (Patience)"
+cd /opt/frigate
 $STD pip3 install -r /opt/frigate/docker/main/requirements-dev.txt
-$STD /opt/frigate/.devcontainer/initialize.sh
+$STD bash /opt/frigate/.devcontainer/initialize.sh
 $STD make version
 cd /opt/frigate/web
 $STD npm install
 $STD npm run build
 cp -r /opt/frigate/web/dist/* /opt/frigate/web/
-cp -r /opt/frigate/config/. /config
 sed -i '/^s6-svc -O \.$/s/^/#/' /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/frigate/run
+msg_ok "Built Frigate Application"
+
+msg_info "Configuring Frigate"
+mkdir -p /config /media/frigate
+cp -r /opt/frigate/config/. /config
+
+curl -fsSL "https://github.com/intel-iot-devkit/sample-videos/raw/master/person-bicycle-car-detection.mp4" -o "/media/frigate/person-bicycle-car-detection.mp4"
+
+echo "tmpfs   /tmp/cache      tmpfs   defaults        0       0" >>/etc/fstab
+
+cat <<EOF >/etc/frigate.env
+DEFAULT_FFMPEG_VERSION="7.0"
+INCLUDED_FFMPEG_VERSIONS="7.0:5.0"
+EOF
+
 cat <<EOF >/config/config.yml
 mqtt:
   enabled: false
 cameras:
   test:
     ffmpeg:
-      #hwaccel_args: preset-vaapi
       inputs:
         - path: /media/frigate/person-bicycle-car-detection.mp4
           input_args: -re -stream_loop -1 -fflags +genpts
@@ -78,96 +239,42 @@ cameras:
       height: 1080
       width: 1920
       fps: 5
+auth:
+  enabled: false
+detect:
+  enabled: false
 EOF
-ln -sf /config/config.yml /opt/frigate/config/config.yml
-if [[ "$CTTYPE" == "0" ]]; then
-  sed -i -e 's/^kvm:x:104:$/render:x:104:root,frigate/' -e 's/^render:x:105:root$/kvm:x:105:/' /etc/group
-else
-  sed -i -e 's/^kvm:x:104:$/render:x:104:frigate/' -e 's/^render:x:105:$/kvm:x:105:/' /etc/group
-fi
-echo "tmpfs   /tmp/cache      tmpfs   defaults        0       0" >>/etc/fstab
-msg_ok "Installed Frigate"
 
-if grep -q -o -m1 -E 'avx[^ ]*' /proc/cpuinfo; then
-  msg_ok "AVX Support Detected"
-  msg_info "Installing Openvino Object Detection Model (Resilience)"
-  $STD pip install -r /opt/frigate/docker/main/requirements-ov.txt
-  cd /opt/frigate/models
-  export ENABLE_ANALYTICS=NO
-  $STD /usr/local/bin/omz_downloader --name ssdlite_mobilenet_v2 --num_attempts 2
-  $STD /usr/local/bin/omz_converter --name ssdlite_mobilenet_v2 --precision FP16 --mo /usr/local/bin/mo
-  cd /
-  cp -r /opt/frigate/models/public/ssdlite_mobilenet_v2 openvino-model
-  curl -fsSL "https://github.com/openvinotoolkit/open_model_zoo/raw/master/data/dataset_classes/coco_91cl_bkgr.txt" -o "openvino-model/coco_91cl_bkgr.txt"
-  sed -i 's/truck/car/g' openvino-model/coco_91cl_bkgr.txt
+if grep -q -o -m1 -E 'avx[^ ]*|sse4_2' /proc/cpuinfo; then
   cat <<EOF >>/config/config.yml
+ffmpeg:
+  hwaccel_args: auto
 detectors:
-  ov:
+  detector01:
     type: openvino
-    device: CPU
-    model:
-      path: /openvino-model/FP16/ssdlite_mobilenet_v2.xml
 model:
   width: 300
   height: 300
   input_tensor: nhwc
   input_pixel_format: bgr
+  path: /openvino-model/ssdlite_mobilenet_v2.xml
   labelmap_path: /openvino-model/coco_91cl_bkgr.txt
 EOF
-  msg_ok "Installed Openvino Object Detection Model"
 else
   cat <<EOF >>/config/config.yml
+ffmpeg:
+  hwaccel_args: auto
 model:
   path: /cpu_model.tflite
 EOF
 fi
-
-msg_info "Installing Coral Object Detection Model (Patience)"
-cd /opt/frigate
-export CCACHE_DIR=/root/.ccache
-export CCACHE_MAXSIZE=2G
-curl -fsSL "https://github.com/libusb/libusb/archive/v1.0.26.zip" -o "v1.0.26.zip"
-$STD unzip v1.0.26.zip
-rm v1.0.26.zip
-cd libusb-1.0.26
-$STD ./bootstrap.sh
-$STD ./configure --disable-udev --enable-shared
-$STD make -j $(nproc --all)
-cd /opt/frigate/libusb-1.0.26/libusb
-mkdir -p /usr/local/lib
-$STD /bin/bash ../libtool --mode=install /usr/bin/install -c libusb-1.0.la '/usr/local/lib'
-mkdir -p /usr/local/include/libusb-1.0
-$STD /usr/bin/install -c -m 644 libusb.h '/usr/local/include/libusb-1.0'
-ldconfig
-cd /
-curl -fsSL "https://github.com/google-coral/test_data/raw/release-frogfish/ssdlite_mobiledet_coco_qat_postprocess_edgetpu.tflite" -o "edgetpu_model.tflite"
-curl -fsSL "https://github.com/google-coral/test_data/raw/release-frogfish/ssdlite_mobiledet_coco_qat_postprocess.tflite" -o "cpu_model.tflite"
-cp /opt/frigate/labelmap.txt /labelmap.txt
-curl -fsSL "https://www.kaggle.com/api/v1/models/google/yamnet/tfLite/classification-tflite/1/download" -o "yamnet-tflite-classification-tflite-v1.tar.gz"
-tar xzf yamnet-tflite-classification-tflite-v1.tar.gz
-rm -rf yamnet-tflite-classification-tflite-v1.tar.gz
-mv 1.tflite cpu_audio_model.tflite
-cp /opt/frigate/audio-labelmap.txt /audio-labelmap.txt
-mkdir -p /media/frigate
-curl -fsSL "https://github.com/intel-iot-devkit/sample-videos/raw/master/person-bicycle-car-detection.mp4" -o "/media/frigate/person-bicycle-car-detection.mp4"
-msg_ok "Installed Coral Object Detection Model"
-
-msg_info "Building Nginx with Custom Modules"
-$STD /opt/frigate/docker/main/build_nginx.sh
-sed -e '/s6-notifyoncheck/ s/^#*/#/' -i /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run
-ln -sf /usr/local/nginx/sbin/nginx /usr/local/bin/nginx
-msg_ok "Built Nginx"
-
-msg_info "Installing Tempio"
-sed -i 's|/rootfs/usr/local|/usr/local|g' /opt/frigate/docker/main/install_tempio.sh
-$STD /opt/frigate/docker/main/install_tempio.sh
-ln -sf /usr/local/tempio/bin/tempio /usr/local/bin/tempio
-msg_ok "Installed Tempio"
+msg_ok "Configured Frigate"
 
 msg_info "Creating Services"
 cat <<EOF >/etc/systemd/system/create_directories.service
 [Unit]
-Description=Create necessary directories for logs
+Description=Create necessary directories for Frigate logs
+Before=frigate.service go2rtc.service nginx.service
 
 [Service]
 Type=oneshot
@@ -176,13 +283,11 @@ ExecStart=/bin/bash -c '/bin/mkdir -p /dev/shm/logs/{frigate,go2rtc,nginx} && /b
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now create_directories
-sleep 3
+
 cat <<EOF >/etc/systemd/system/go2rtc.service
 [Unit]
-Description=go2rtc service
-After=network.target
-After=create_directories.service
+Description=go2rtc streaming service
+After=network.target create_directories.service
 StartLimitIntervalSec=0
 
 [Service]
@@ -190,7 +295,8 @@ Type=simple
 Restart=always
 RestartSec=1
 User=root
-ExecStartPre=+rm /dev/shm/logs/go2rtc/current
+EnvironmentFile=/etc/frigate.env
+ExecStartPre=+rm -f /dev/shm/logs/go2rtc/current
 ExecStart=/bin/bash -c "bash /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/go2rtc/run 2> >(/usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S ' >&2) | /usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S '"
 StandardOutput=file:/dev/shm/logs/go2rtc/current
 StandardError=file:/dev/shm/logs/go2rtc/current
@@ -198,13 +304,11 @@ StandardError=file:/dev/shm/logs/go2rtc/current
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now go2rtc
-sleep 3
+
 cat <<EOF >/etc/systemd/system/frigate.service
 [Unit]
-Description=Frigate service
-After=go2rtc.service
-After=create_directories.service
+Description=Frigate NVR service
+After=go2rtc.service create_directories.service
 StartLimitIntervalSec=0
 
 [Service]
@@ -212,8 +316,8 @@ Type=simple
 Restart=always
 RestartSec=1
 User=root
-# Environment=PLUS_API_KEY=
-ExecStartPre=+rm /dev/shm/logs/frigate/current
+EnvironmentFile=/etc/frigate.env
+ExecStartPre=+rm -f /dev/shm/logs/frigate/current
 ExecStart=/bin/bash -c "bash /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/frigate/run 2> >(/usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S ' >&2) | /usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S '"
 StandardOutput=file:/dev/shm/logs/frigate/current
 StandardError=file:/dev/shm/logs/frigate/current
@@ -221,13 +325,11 @@ StandardError=file:/dev/shm/logs/frigate/current
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now frigate
-sleep 3
+
 cat <<EOF >/etc/systemd/system/nginx.service
 [Unit]
-Description=Nginx service
-After=frigate.service
-After=create_directories.service
+Description=Nginx reverse proxy for Frigate
+After=frigate.service create_directories.service
 StartLimitIntervalSec=0
 
 [Service]
@@ -235,7 +337,7 @@ Type=simple
 Restart=always
 RestartSec=1
 User=root
-ExecStartPre=+rm /dev/shm/logs/nginx/current
+ExecStartPre=+rm -f /dev/shm/logs/nginx/current
 ExecStart=/bin/bash -c "bash /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run 2> >(/usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S ' >&2) | /usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S '"
 StandardOutput=file:/dev/shm/logs/nginx/current
 StandardError=file:/dev/shm/logs/nginx/current
@@ -243,8 +345,20 @@ StandardError=file:/dev/shm/logs/nginx/current
 [Install]
 WantedBy=multi-user.target
 EOF
+
+systemctl daemon-reload
+systemctl enable -q --now create_directories
+sleep 2
+systemctl enable -q --now go2rtc
+sleep 2
+systemctl enable -q --now frigate
+sleep 2
 systemctl enable -q --now nginx
-msg_ok "Configured Services"
+msg_ok "Created Services"
+
+msg_info "Cleaning Up"
+rm -rf /opt/libusb /wheels /models/*.tar.gz
+msg_ok "Cleaned Up"
 
 motd_ssh
 customize

install/gramps-web-install.sh

@@ -0,0 +1,118 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.grampsweb.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  appstream \
+  build-essential \
+  ffmpeg \
+  gettext \
+  gobject-introspection \
+  gir1.2-gexiv2-0.10 \
+  gir1.2-gtk-3.0 \
+  gir1.2-osmgpsmap-1.0 \
+  gir1.2-pango-1.0 \
+  git \
+  graphviz \
+  libcairo2-dev \
+  libgirepository1.0-dev \
+  libglib2.0-dev \
+  libicu-dev \
+  libopencv-dev \
+  pkg-config \
+  poppler-utils \
+  python3-dev \
+  tesseract-ocr
+msg_ok "Installed Dependencies"
+
+PYTHON_VERSION="3.12" setup_uv
+NODE_VERSION="22" setup_nodejs
+
+fetch_and_deploy_gh_release "gramps-web-api" "gramps-project/gramps-web-api" "tarball" "latest" "/opt/gramps-web-api"
+fetch_and_deploy_gh_release "gramps-web" "gramps-project/gramps-web" "tarball" "latest" "/opt/gramps-web/frontend"
+
+msg_info "Setting up Gramps Web"
+mkdir -p \
+  /opt/gramps-web/config \
+  /opt/gramps-web/data/cache/export \
+  /opt/gramps-web/data/cache/persistent \
+  /opt/gramps-web/data/cache/report \
+  /opt/gramps-web/data/cache/request \
+  /opt/gramps-web/data/cache/thumbnail \
+  /opt/gramps-web/data/gramps/grampsdb \
+  /opt/gramps-web/data/indexdir \
+  /opt/gramps-web/data/media \
+  /opt/gramps-web/data/users
+
+SECRET_KEY="$(openssl rand -hex 32)"
+cat <<EOF >/opt/gramps-web/config/config.cfg
+TREE="Gramps Web"
+SECRET_KEY="${SECRET_KEY}"
+BASE_URL="http://${LOCAL_IP}:5000"
+USER_DB_URI="sqlite:////opt/gramps-web/data/users/users.sqlite"
+SEARCH_INDEX_DB_URI="sqlite:////opt/gramps-web/data/indexdir/search_index.db"
+MEDIA_BASE_DIR="/opt/gramps-web/data/media"
+STATIC_PATH="/opt/gramps-web/frontend/dist"
+THUMBNAIL_CACHE_CONFIG={"CACHE_TYPE":"FileSystemCache","CACHE_DIR":"/opt/gramps-web/data/cache/thumbnail","CACHE_THRESHOLD":1000,"CACHE_DEFAULT_TIMEOUT":0}
+REQUEST_CACHE_CONFIG={"CACHE_TYPE":"FileSystemCache","CACHE_DIR":"/opt/gramps-web/data/cache/request","CACHE_THRESHOLD":1000,"CACHE_DEFAULT_TIMEOUT":0}
+PERSISTENT_CACHE_CONFIG={"CACHE_TYPE":"FileSystemCache","CACHE_DIR":"/opt/gramps-web/data/cache/persistent","CACHE_THRESHOLD":0,"CACHE_DEFAULT_TIMEOUT":0}
+REPORT_DIR="/opt/gramps-web/data/cache/report"
+EXPORT_DIR="/opt/gramps-web/data/cache/export"
+EOF
+$STD uv venv -c -p python3.12 /opt/gramps-web/venv
+source /opt/gramps-web/venv/bin/activate
+$STD uv pip install --no-cache-dir --upgrade pip setuptools wheel
+$STD uv pip install --no-cache-dir gunicorn
+$STD uv pip install --no-cache-dir /opt/gramps-web-api
+cd /opt/gramps-web/frontend
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+$STD corepack enable
+$STD npm install
+$STD npm run build
+cd /opt/gramps-web-api
+GRAMPS_API_CONFIG=/opt/gramps-web/config/config.cfg \
+  ALEMBIC_CONFIG=/opt/gramps-web-api/alembic.ini \
+  GRAMPSHOME=/opt/gramps-web/data/gramps \
+  GRAMPS_DATABASE_PATH=/opt/gramps-web/data/gramps/grampsdb \
+  $STD /opt/gramps-web/venv/bin/python3 -m gramps_webapi user migrate
+msg_ok "Set up Gramps Web"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/gramps-web.service
+[Unit]
+Description=Gramps Web Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/gramps-web-api
+Environment=GRAMPS_API_CONFIG=/opt/gramps-web/config/config.cfg
+Environment=GRAMPSHOME=/opt/gramps-web/data/gramps
+Environment=GRAMPS_DATABASE_PATH=/opt/gramps-web/data/gramps/grampsdb
+Environment=PATH=/opt/gramps-web/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/opt/gramps-web/venv/bin/gunicorn -w 2 -b 0.0.0.0:5000 gramps_webapi.wsgi:app --timeout 120 --limit-request-line 8190
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now gramps-web
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/huntarr-install.sh

@@ -13,6 +13,10 @@ setting_up_container
 network_check
 update_os
 
+msg_info "Installing Dependencies"
+$STD apt install -y build-essential
+msg_ok "Installed Dependencies"
+
 PYTHON_VERSION="3.12" setup_uv
 fetch_and_deploy_gh_release "huntarr" "plexguide/Huntarr.io" "tarball"
 

install/karakeep-install.sh

@@ -30,7 +30,7 @@ setup_meilisearch
 fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep" "tarball"
 cd /opt/karakeep
 MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
 
 msg_info "Installing karakeep"
 export PUPPETEER_SKIP_DOWNLOAD="true"

install/planka-install.sh

@@ -50,6 +50,7 @@ cp .env.sample .env
 sed -i "s#http://localhost:1337#http://$LOCAL_IP:1337#g" /opt/planka/.env
 sed -i "s#postgres@localhost#planka:$DB_PASS@localhost#g" /opt/planka/.env
 sed -i "s#notsecretkey#$SECRET_KEY#g" /opt/planka/.env
+mkdir -p /opt/planka/data/protected/{favicons,user-avatars,background-images} /opt/planka/data/private/attachments
 $STD npm run db:init
 msg_ok "Configured PLANKA"
 

install/plex-install.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: tteck (tteckster) | MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://www.plex.tv/
 
@@ -16,19 +16,16 @@ update_os
 setup_hwaccel
 
 msg_info "Setting Up Plex Media Server Repository"
-curl -fsSL https://downloads.plex.tv/plex-keys/PlexSign.key | tee /usr/share/keyrings/PlexSign.asc >/dev/null
-cat <<EOF >/etc/apt/sources.list.d/plexmediaserver.sources
-Types: deb
-URIs: https://downloads.plex.tv/repo/deb/
-Suites: public
-Components: main
-Signed-By: /usr/share/keyrings/PlexSign.asc
-EOF
+setup_deb822_repo \
+  "plexmediaserver" \
+  "https://downloads.plex.tv/plex-keys/PlexSign.v2.key" \
+  "https://repo.plex.tv/deb/" \
+  "public" \
+  "main"
 msg_ok "Set Up Plex Media Server Repository"
 
 msg_info "Installing Plex Media Server"
-$STD apt update
-$STD apt -o Dpkg::Options::="--force-confold" install -y plexmediaserver
+$STD apt install -y plexmediaserver
 if [[ "$CTTYPE" == "0" ]]; then
   sed -i -e 's/^ssl-cert:x:104:plex$/render:x:104:root,plex/' -e 's/^render:x:108:root$/ssl-cert:x:108:plex/' /etc/group
 else

install/recyclarr-install.sh

@@ -20,7 +20,7 @@ msg_ok "Installed Dependencies"
 fetch_and_deploy_gh_release "recyclarr" "recyclarr/recyclarr" "prebuild" "latest" "/usr/local/bin" "recyclarr-linux-x64.tar.xz"
 
 msg_info "Configuring Recyclarr"
-mkdir -p /root/.config/recyclarr
+mkdir -p /root/.config/recyclarr/{configs,includes}
 $STD recyclarr config create
 msg_ok "Configured Recyclarr"
 

install/sure-install.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://sure.am
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  redis-server \
+  pkg-config \
+  libpq-dev \
+  libvips
+msg_ok "Installed Dependencies"
+
+fetch_and_deploy_gh_release "Sure" "we-promise/sure" "tarball" "latest" "/opt/sure"
+
+PG_VERSION="$(sed -n '/postgres:/s/[^[:digit:]]*//p' /opt/sure/compose.example.yml)" setup_postgresql
+PG_DB_NAME=sure_production PG_DB_USER=sure_user setup_postgresql_db
+RUBY_VERSION="$(cat /opt/sure/.ruby-version)" RUBY_INSTALL_RAILS=false setup_ruby
+
+msg_info "Building Sure"
+cd /opt/sure
+export RAILS_ENV=production
+export BUNDLE_DEPLOYMENT=1
+export BUNDLE_WITHOUT=development
+$STD ./bin/bundle install
+$STD ./bin/bundle exec bootsnap precompile --gemfile -j 0
+$STD ./bin/bundle exec bootsnap precompile -j 0 app/ lib/
+export SECRET_KEY_BASE_DUMMY=1 && $STD ./bin/rails assets:precompile
+unset SECRET_KEY_BASE_DUMMY
+msg_ok "Built Sure"
+
+msg_info "Configuring Sure"
+KEY="$(openssl rand -hex 64)"
+mkdir -p /etc/sure
+mv /opt/sure/.env.example /etc/sure/.env
+sed -i -e "/^SECRET_KEY_BASE=/s/secret-value/${KEY}/" \
+  -e 's/_KEY_BASE=.*$/&\n\nRAILS_FORCE_SSL=false \
+\
+# Change to true when using a reverse proxy \
+RAILS_ASSUME_SSL=false/' \
+  -e "/POSTGRES_PASSWORD=/s/postgres/${PG_DB_PASS}/" \
+  -e "/POSTGRES_USER=/s/postgres/${PG_DB_USER}\\
+POSTGRES_DB=${PG_DB_NAME}/" \
+  -e "s|^APP_DOMAIN=|&${LOCAL_IP}|" /etc/sure/.env
+msg_ok "Configured Sure"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/sure.service
+[Unit]
+Description=Sure Service
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/sure
+Environment=RAILS_ENV=production
+Environment=BUNDLE_DEPLOYMENT=1
+Environment=BUNDLE_WITHOUT=development
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/bin:\$PATH
+EnvironmentFile=/etc/sure/.env
+ExecStartPre=/opt/sure/bin/rails db:prepare
+ExecStart=/opt/sure/bin/rails server
+Restart=always
+RestartSec=5
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/sure-worker.service
+[Unit]
+Description=Sure Background Worker (Sidekiq)
+After=network.target redis-server.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/sure
+Environment=RAILS_ENV=production
+Environment=BUNDLE_DEPLOYMENT=1
+Environment=BUNDLE_WITHOUT=development
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/bin:/usr/local/bin:/sbin:/bin
+EnvironmentFile=/etc/sure/.env
+ExecStart=/opt/sure/bin/bundle exec sidekiq -e production
+Restart=always
+RestartSec=5
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+EOF
+$STD systemctl enable -q --now sure sure-worker
+msg_ok "Created Services"
+
+motd_ssh
+customize
+cleanup_lxc

install/zammad-install.sh

@@ -28,9 +28,10 @@ setup_deb822_repo \
   "stable" \
   "main"
 $STD apt install -y elasticsearch
-echo "-Xms2g" >>/etc/elasticsearch/jvm.options
-echo "-Xmx2g" >>/etc/elasticsearch/jvm.options
+sed -i 's/^-Xms.*/-Xms2g/' /etc/elasticsearch/jvm.options
+sed -i 's/^-Xmx.*/-Xmx2g/' /etc/elasticsearch/jvm.options
 $STD /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment -b
+systemctl daemon-reload
 systemctl enable -q elasticsearch
 systemctl restart -q elasticsearch
 msg_ok "Setup Elasticsearch"

misc/tools.func

@@ -1306,7 +1306,7 @@ setup_deb822_repo() {
 
   if grep -q "BEGIN PGP" "$tmp_gpg" 2>/dev/null; then
     # ASCII-armored — dearmor to binary
-    gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" < "$tmp_gpg" || {
+    gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" <"$tmp_gpg" || {
       msg_error "Failed to dearmor GPG key for ${name}"
       rm -f "$tmp_gpg"
       return 1
@@ -1567,31 +1567,54 @@ check_for_gh_release() {
 
   ensure_dependencies jq
 
+  # Build auth header if token is available
+  local header_args=()
+  [[ -n "${GITHUB_TOKEN:-}" ]] && header_args=(-H "Authorization: Bearer $GITHUB_TOKEN")
+
   # Try /latest endpoint for non-pinned versions (most efficient)
-  local releases_json=""
+  local releases_json="" http_code=""
 
   if [[ -z "$pinned_version_in" ]]; then
-    releases_json=$(curl -fsSL --max-time 20 \
+    http_code=$(curl -sSL --max-time 20 -w "%{http_code}" -o /tmp/gh_check.json \
       -H 'Accept: application/vnd.github+json' \
       -H 'X-GitHub-Api-Version: 2022-11-28' \
-      "https://api.github.com/repos/${source}/releases/latest" 2>/dev/null)
+      "${header_args[@]}" \
+      "https://api.github.com/repos/${source}/releases/latest" 2>/dev/null) || true
 
-    if [[ $? -eq 0 ]] && [[ -n "$releases_json" ]]; then
-      # Wrap single release in array for consistent processing
-      releases_json="[$releases_json]"
+    if [[ "$http_code" == "200" ]] && [[ -s /tmp/gh_check.json ]]; then
+      releases_json="[$(</tmp/gh_check.json)]"
+    elif [[ "$http_code" == "403" ]]; then
+      msg_error "GitHub API rate limit exceeded (HTTP 403)."
+      msg_error "To increase the limit, export a GitHub token before running the script:"
+      msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
+      rm -f /tmp/gh_check.json
+      return 1
     fi
+    rm -f /tmp/gh_check.json
   fi
 
   # If no releases yet (pinned version OR /latest failed), fetch up to 100
   if [[ -z "$releases_json" ]]; then
-    # Fetch releases and exclude drafts/prereleases
-    releases_json=$(curl -fsSL --max-time 20 \
+    http_code=$(curl -sSL --max-time 20 -w "%{http_code}" -o /tmp/gh_check.json \
       -H 'Accept: application/vnd.github+json' \
       -H 'X-GitHub-Api-Version: 2022-11-28' \
-      "https://api.github.com/repos/${source}/releases?per_page=100") || {
-      msg_error "Unable to fetch releases for ${app}"
+      "${header_args[@]}" \
+      "https://api.github.com/repos/${source}/releases?per_page=100" 2>/dev/null) || true
+
+    if [[ "$http_code" == "200" ]] && [[ -s /tmp/gh_check.json ]]; then
+      releases_json=$(</tmp/gh_check.json)
+    elif [[ "$http_code" == "403" ]]; then
+      msg_error "GitHub API rate limit exceeded (HTTP 403)."
+      msg_error "To increase the limit, export a GitHub token before running the script:"
+      msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
+      rm -f /tmp/gh_check.json
       return 1
-    }
+    else
+      msg_error "Unable to fetch releases for ${app} (HTTP ${http_code})"
+      rm -f /tmp/gh_check.json
+      return 1
+    fi
+    rm -f /tmp/gh_check.json
   fi
 
   mapfile -t raw_tags < <(jq -r '.[] | select(.draft==false and .prerelease==false) | .tag_name' <<<"$releases_json")
@@ -2410,7 +2433,11 @@ _gh_scan_older_releases() {
       # Check with explicit pattern first, then arch heuristic, then any .deb
       if [[ -n "$asset_pattern" ]]; then
         has_match=$(echo "$releases_list" | jq -r --arg pat "$asset_pattern" ".[$i].assets[].name" | while read -r name; do
-          case "$name" in $asset_pattern) echo true; break ;; esac
+          case "$name" in $asset_pattern)
+            echo true
+            break
+            ;;
+          esac
         done)
       fi
       if [[ "$has_match" != "true" ]]; then
@@ -2422,7 +2449,11 @@ _gh_scan_older_releases() {
 
     elif [[ "$mode" == "prebuild" || "$mode" == "singlefile" ]]; then
       has_match=$(echo "$releases_list" | jq -r ".[$i].assets[].name" | while read -r name; do
-        case "$name" in $asset_pattern) echo true; break ;; esac
+        case "$name" in $asset_pattern)
+          echo true
+          break
+          ;;
+        esac
       done)
     fi
 
@@ -2481,25 +2512,36 @@ function fetch_and_deploy_gh_release() {
     return 1
   fi
 
-  local max_retries=3 retry_delay=2 attempt=1 success=false resp http_code
+  local max_retries=3 retry_delay=2 attempt=1 success=false http_code
 
   while ((attempt <= max_retries)); do
-    resp=$(curl $api_timeout -fsSL -w "%{http_code}" -o /tmp/gh_rel.json "${header[@]}" "$api_url") && success=true && break
-    sleep "$retry_delay"
+    http_code=$(curl $api_timeout -sSL -w "%{http_code}" -o /tmp/gh_rel.json "${header[@]}" "$api_url" 2>/dev/null) || true
+    if [[ "$http_code" == "200" ]]; then
+      success=true
+      break
+    elif [[ "$http_code" == "403" ]]; then
+      if ((attempt < max_retries)); then
+        msg_warn "GitHub API rate limit hit, retrying in ${retry_delay}s... (attempt $attempt/$max_retries)"
+        sleep "$retry_delay"
+        retry_delay=$((retry_delay * 2))
+      fi
+    else
+      sleep "$retry_delay"
+    fi
     ((attempt++))
   done
 
   if ! $success; then
-    msg_error "Failed to fetch release metadata from $api_url after $max_retries attempts"
+    if [[ "$http_code" == "403" ]]; then
+      msg_error "GitHub API rate limit exceeded (HTTP 403)."
+      msg_error "To increase the limit, export a GitHub token before running the script:"
+      msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
+    else
+      msg_error "Failed to fetch release metadata from $api_url after $max_retries attempts (HTTP $http_code)"
+    fi
     return 1
   fi
 
-  http_code="${resp:(-3)}"
-  [[ "$http_code" != "200" ]] && {
-    msg_error "GitHub API returned HTTP $http_code"
-    return 1
-  }
-
   local json tag_name
   json=$(</tmp/gh_rel.json)
   tag_name=$(echo "$json" | jq -r '.tag_name // .name // empty')
@@ -2599,12 +2641,19 @@ function fetch_and_deploy_gh_release() {
         assets=$(echo "$json" | jq -r '.assets[].browser_download_url')
         if [[ -n "$asset_pattern" ]]; then
           for u in $assets; do
-            case "${u##*/}" in $asset_pattern) url_match="$u"; break ;; esac
+            case "${u##*/}" in $asset_pattern)
+              url_match="$u"
+              break
+              ;;
+            esac
           done
         fi
         if [[ -z "$url_match" ]]; then
           for u in $assets; do
-            if [[ "$u" =~ ($arch|amd64|x86_64|aarch64|arm64).*\.deb$ ]]; then url_match="$u"; break; fi
+            if [[ "$u" =~ ($arch|amd64|x86_64|aarch64|arm64).*\.deb$ ]]; then
+              url_match="$u"
+              break
+            fi
           done
         fi
         if [[ -z "$url_match" ]]; then
@@ -2673,7 +2722,11 @@ function fetch_and_deploy_gh_release() {
         msg_info "Fetching GitHub release: $app ($version)"
         for u in $(echo "$json" | jq -r '.assets[].browser_download_url'); do
           filename_candidate="${u##*/}"
-          case "$filename_candidate" in $pattern) asset_url="$u"; break ;; esac
+          case "$filename_candidate" in $pattern)
+            asset_url="$u"
+            break
+            ;;
+          esac
         done
       fi
     fi
@@ -2785,7 +2838,11 @@ function fetch_and_deploy_gh_release() {
         msg_info "Fetching GitHub release: $app ($version)"
         for u in $(echo "$json" | jq -r '.assets[].browser_download_url'); do
           filename_candidate="${u##*/}"
-          case "$filename_candidate" in $pattern) asset_url="$u"; break ;; esac
+          case "$filename_candidate" in $pattern)
+            asset_url="$u"
+            break
+            ;;
+          esac
         done
       fi
     fi
@@ -3635,20 +3692,22 @@ _setup_intel_arc() {
     # Add non-free repos
     _add_debian_nonfree "$os_codename"
 
-    # Arc requires latest drivers - fetch from GitHub
-    # Order matters: libigdgmm first (dependency), then IGC, then compute-runtime
-    msg_info "Fetching Intel compute-runtime for Arc support"
+    # For Trixie/Sid: Fetch latest drivers from GitHub (Debian repo packages may be too old or missing)
+    # For Bookworm: Use repo packages (GitHub latest requires libstdc++6 >= 13.1, unavailable on Bookworm)
+    if [[ "$os_codename" == "trixie" || "$os_codename" == "sid" ]]; then
+      msg_info "Fetching Intel compute-runtime from GitHub for Arc support"
 
-    # libigdgmm - bundled in compute-runtime releases (Debian version often too old)
-    fetch_and_deploy_gh_release "libigdgmm12" "intel/compute-runtime" "binary" "latest" "" "libigdgmm12_*_amd64.deb" || true
+      # libigdgmm - bundled in compute-runtime releases
+      fetch_and_deploy_gh_release "libigdgmm12" "intel/compute-runtime" "binary" "latest" "" "libigdgmm12_*_amd64.deb" || true
 
-    # Intel Graphics Compiler (note: packages have -2 suffix)
-    fetch_and_deploy_gh_release "intel-igc-core" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-core-2_*_amd64.deb" || true
-    fetch_and_deploy_gh_release "intel-igc-opencl" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-opencl-2_*_amd64.deb" || true
+      # Intel Graphics Compiler (note: packages have -2 suffix)
+      fetch_and_deploy_gh_release "intel-igc-core" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-core-2_*_amd64.deb" || true
+      fetch_and_deploy_gh_release "intel-igc-opencl" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-opencl-2_*_amd64.deb" || true
 
-    # Compute Runtime (depends on IGC and gmmlib)
-    fetch_and_deploy_gh_release "intel-opencl-icd" "intel/compute-runtime" "binary" "latest" "" "intel-opencl-icd_*_amd64.deb" || true
-    fetch_and_deploy_gh_release "intel-level-zero-gpu" "intel/compute-runtime" "binary" "latest" "" "libze-intel-gpu1_*_amd64.deb" || true
+      # Compute Runtime (depends on IGC and gmmlib)
+      fetch_and_deploy_gh_release "intel-opencl-icd" "intel/compute-runtime" "binary" "latest" "" "intel-opencl-icd_*_amd64.deb" || true
+      fetch_and_deploy_gh_release "intel-level-zero-gpu" "intel/compute-runtime" "binary" "latest" "" "libze-intel-gpu1_*_amd64.deb" || true
+    fi
 
     $STD apt -y install \
       intel-media-va-driver-non-free \
@@ -3657,6 +3716,9 @@ _setup_intel_arc() {
       libmfx-gen1.2 \
       vainfo \
       intel-gpu-tools 2>/dev/null || msg_warn "Some Intel Arc packages failed"
+
+    # Bookworm has compatible versions of these packages in repos
+    [[ "$os_codename" == "bookworm" ]] && $STD apt -y install intel-opencl-icd libigdgmm12 2>/dev/null || true
   fi
 
   msg_ok "Intel Arc GPU configured"
@@ -4028,6 +4090,7 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bullseye bullseye-updates
 Components: non-free
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   bookworm)
@@ -4036,6 +4099,7 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bookworm bookworm-updates
 Components: non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   trixie | sid)
@@ -4044,11 +4108,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: trixie trixie-updates
 Components: non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: trixie-security
 Components: non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   esac
@@ -4071,11 +4137,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bullseye bullseye-updates
 Components: non-free
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: bullseye-security
 Components: non-free
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   bookworm)
@@ -4084,11 +4152,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bookworm bookworm-updates
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: bookworm-security
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   trixie | sid)
@@ -4097,11 +4167,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: trixie trixie-updates
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: trixie-security
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   esac
@@ -4609,8 +4681,8 @@ EOF
   # First, check if there's an old/broken repository that needs cleanup
   if [[ -f /etc/apt/sources.list.d/mariadb.sources ]] || [[ -f /etc/apt/sources.list.d/mariadb.list ]]; then
     local OLD_REPO_VERSION=""
-    OLD_REPO_VERSION=$(grep -oP 'repo/\K[0-9]+\.[0-9]+(\.[0-9]+)?' /etc/apt/sources.list.d/mariadb.sources 2>/dev/null || \
-                       grep -oP 'repo/\K[0-9]+\.[0-9]+(\.[0-9]+)?' /etc/apt/sources.list.d/mariadb.list 2>/dev/null || echo "")
+    OLD_REPO_VERSION=$(grep -oP 'repo/\K[0-9]+\.[0-9]+(\.[0-9]+)?' /etc/apt/sources.list.d/mariadb.sources 2>/dev/null ||
+      grep -oP 'repo/\K[0-9]+\.[0-9]+(\.[0-9]+)?' /etc/apt/sources.list.d/mariadb.list 2>/dev/null || echo "")
 
     # Check if old repo points to a different version
     if [[ -n "$OLD_REPO_VERSION" ]] && [[ "${OLD_REPO_VERSION%.*}" != "${MARIADB_VERSION%.*}" ]]; then
@@ -5510,7 +5582,7 @@ EOF
 
     # Try to install each package individually
     for pkg in $MODULE_LIST; do
-      [[ "$pkg" == "php${PHP_VERSION}" ]] && continue  # Already installed
+      [[ "$pkg" == "php${PHP_VERSION}" ]] && continue # Already installed
       $STD apt install -y "$pkg" 2>/dev/null || {
         msg_warn "Could not install $pkg - continuing without it"
       }
@@ -6120,14 +6192,14 @@ function setup_meilisearch() {
           local MAX_WAIT=120
           local WAITED=0
           local TASK_RESULT=""
-          
+
           while [[ $WAITED -lt $MAX_WAIT ]]; do
             TASK_RESULT=$(curl -s "http://${MEILI_HOST}:${MEILI_PORT}/tasks/${TASK_UID}" \
               -H "Authorization: Bearer ${MEILI_MASTER_KEY}" 2>/dev/null) || true
-            
+
             local TASK_STATUS
             TASK_STATUS=$(echo "$TASK_RESULT" | grep -oP '"status":\s*"\K[^"]+' || true)
-            
+
             if [[ "$TASK_STATUS" == "succeeded" ]]; then
               # Extract dumpUid from the completed task details
               DUMP_UID=$(echo "$TASK_RESULT" | grep -oP '"dumpUid":\s*"\K[^"]+' || true)
@@ -6165,7 +6237,7 @@ function setup_meilisearch() {
         local MEILI_DB_PATH
         MEILI_DB_PATH=$(grep -E "^db_path\s*=" /etc/meilisearch.toml 2>/dev/null | sed 's/.*=\s*"\(.*\)"/\1/' | tr -d ' ')
         MEILI_DB_PATH="${MEILI_DB_PATH:-/var/lib/meilisearch/data}"
-        
+
         if [[ -d "$MEILI_DB_PATH" ]] && [[ -n "$(ls -A "$MEILI_DB_PATH" 2>/dev/null)" ]]; then
           local BACKUP_PATH="${MEILI_DB_PATH}.backup.$(date +%Y%m%d%H%M%S)"
           msg_warn "Backing up MeiliSearch data to ${BACKUP_PATH}"
@@ -6193,12 +6265,12 @@ function setup_meilisearch() {
         local DUMP_FILE="${MEILI_DUMP_DIR}/${DUMP_UID}.dump"
         if [[ -f "$DUMP_FILE" ]]; then
           msg_info "Importing dump: ${DUMP_FILE}"
-          
+
           # Start meilisearch with --import-dump flag
           # This is a one-time import that happens during startup
           /usr/bin/meilisearch --config-file-path /etc/meilisearch.toml --import-dump "$DUMP_FILE" &
           local MEILI_PID=$!
-          
+
           # Wait for meilisearch to become healthy (import happens during startup)
           msg_info "Waiting for MeiliSearch to import and start..."
           local MAX_WAIT=300
@@ -6216,14 +6288,14 @@ function setup_meilisearch() {
             sleep 3
             WAITED=$((WAITED + 3))
           done
-          
+
           # Stop the manual process
           kill $MEILI_PID 2>/dev/null || true
           sleep 2
-          
+
           # Start via systemd for proper management
           systemctl start meilisearch
-          
+
           if systemctl is-active --quiet meilisearch; then
             msg_ok "MeiliSearch migrated successfully"
           else
@@ -6311,14 +6383,14 @@ EOF
   MEILISEARCH_API_KEY=""
   for i in {1..10}; do
     MEILISEARCH_API_KEY=$(curl -s -X GET "http://${MEILISEARCH_HOST}:${MEILISEARCH_PORT}/keys" \
-      -H "Authorization: Bearer ${MEILISEARCH_MASTER_KEY}" 2>/dev/null | \
+      -H "Authorization: Bearer ${MEILISEARCH_MASTER_KEY}" 2>/dev/null |
       grep -o '"key":"[^"]*"' | head -n 1 | sed 's/"key":"//;s/"//') || true
     [[ -n "$MEILISEARCH_API_KEY" ]] && break
     sleep 2
   done
 
   MEILISEARCH_API_KEY_UID=$(curl -s -X GET "http://${MEILISEARCH_HOST}:${MEILISEARCH_PORT}/keys" \
-    -H "Authorization: Bearer ${MEILISEARCH_MASTER_KEY}" 2>/dev/null | \
+    -H "Authorization: Bearer ${MEILISEARCH_MASTER_KEY}" 2>/dev/null |
     grep -o '"uid":"[^"]*"' | head -n 1 | sed 's/"uid":"//;s/"//') || true
 
   export MEILISEARCH_API_KEY
@@ -7104,9 +7176,9 @@ function fetch_and_deploy_from_url() {
   # Auto-detect archive type using file description
   local file_desc
   file_desc=$(file -b "$tmpdir/$filename")
-  
+
   local archive_type="unknown"
-  
+
   if [[ "$file_desc" =~ gzip.*compressed|gzip\ compressed\ data ]]; then
     archive_type="tar"
   elif [[ "$file_desc" =~ Zip.*archive|ZIP\ archive ]]; then

tools/addon/cronmaster.sh

@@ -0,0 +1,229 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/fccview/cronmaster
+
+if ! command -v curl &>/dev/null; then
+  printf "\r\e[2K%b" '\033[93m Setup Source \033[m' >&2
+  apt-get update >/dev/null 2>&1
+  apt-get install -y curl >/dev/null 2>&1
+fi
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
+
+# Enable error handling
+set -Eeuo pipefail
+trap 'error_handler' ERR
+load_functions
+init_tool_telemetry "" "addon"
+
+# ==============================================================================
+# CONFIGURATION
+# ==============================================================================
+APP="CronMaster"
+APP_TYPE="addon"
+INSTALL_PATH="/opt/cronmaster"
+CONFIG_PATH="/opt/cronmaster/.env"
+SERVICE_PATH="/etc/systemd/system/cronmaster.service"
+DEFAULT_PORT=3000
+
+# ==============================================================================
+# HEADER
+# ==============================================================================
+function header_info {
+  clear
+  cat <<"EOF"
+   ______                __  ___           __
+  / ____/________  ____ /  |/  /___ ______/ /____  _____
+ / /   / ___/ __ \/ __ \/ /|_/ / __ `/ ___/ __/ _ \/ ___/
+/ /___/ /  / /_/ / / / / /  / / /_/ (__  ) /_/  __/ /
+\____/_/   \____/_/ /_/_/  /_/\__,_/____/\__/\___/_/
+
+EOF
+}
+
+# ==============================================================================
+# OS DETECTION
+# ==============================================================================
+if ! grep -qE 'ID=debian|ID=ubuntu' /etc/os-release 2>/dev/null; then
+  echo -e "${CROSS} Unsupported OS detected. This script only supports Debian and Ubuntu."
+  exit 1
+fi
+
+# ==============================================================================
+# UNINSTALL
+# ==============================================================================
+function uninstall() {
+  msg_info "Uninstalling ${APP}"
+  systemctl disable --now cronmaster.service &>/dev/null || true
+  rm -f "$SERVICE_PATH"
+  rm -rf "$INSTALL_PATH"
+  rm -f "/usr/local/bin/update_cronmaster"
+  rm -f "$HOME/.cronmaster"
+  rm -f "/root/cronmaster.creds"
+  msg_ok "${APP} has been uninstalled"
+}
+
+# ==============================================================================
+# UPDATE
+# ==============================================================================
+function update() {
+  if check_for_gh_release "cronmaster" "fccview/cronmaster"; then
+    msg_info "Stopping service"
+    systemctl stop cronmaster.service &>/dev/null || true
+    msg_ok "Stopped service"
+
+    msg_info "Backing up configuration"
+    cp "$CONFIG_PATH" /tmp/cronmaster.env.bak 2>/dev/null || true
+    msg_ok "Backed up configuration"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "cronmaster" "fccview/cronmaster" "prebuild" "latest" "$INSTALL_PATH" "cronmaster_*_prebuild.tar.gz"
+
+    msg_info "Restoring configuration"
+    cp /tmp/cronmaster.env.bak "$CONFIG_PATH" 2>/dev/null || true
+    rm -f /tmp/cronmaster.env.bak
+    msg_ok "Restored configuration"
+
+    msg_info "Starting service"
+    systemctl start cronmaster
+    msg_ok "Started service"
+    msg_ok "Updated successfully"
+    exit
+  fi
+}
+
+# ==============================================================================
+# INSTALL
+# ==============================================================================
+function install() {
+  # Setup Node.js (only installs if not present or different version)
+  if command -v node &>/dev/null; then
+    msg_ok "Node.js already installed ($(node -v))"
+  else
+    NODE_VERSION="22" setup_nodejs
+  fi
+
+  fetch_and_deploy_gh_release "cronmaster" "fccview/cronmaster" "prebuild" "latest" "$INSTALL_PATH" "cronmaster_*_prebuild.tar.gz"
+
+  local AUTH_PASS
+  AUTH_PASS="$(openssl rand -base64 18 | cut -c1-13)"
+
+  msg_info "Creating configuration"
+  cat <<EOF >"$CONFIG_PATH"
+NODE_ENV=production
+AUTH_PASSWORD=${AUTH_PASS}
+PORT=${DEFAULT_PORT}
+HOSTNAME=0.0.0.0
+NEXT_TELEMETRY_DISABLED=1
+EOF
+  chmod 600 "$CONFIG_PATH"
+  msg_ok "Created configuration"
+
+  msg_info "Creating service"
+  cat <<EOF >"$SERVICE_PATH"
+[Unit]
+Description=CronMaster Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=${INSTALL_PATH}
+EnvironmentFile=${CONFIG_PATH}
+ExecStart=/usr/bin/node ${INSTALL_PATH}/server.js
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+  systemctl enable -q --now cronmaster
+  msg_ok "Created and started service"
+
+  # Create update script
+  msg_info "Creating update script"
+  ensure_usr_local_bin_persist
+  cat <<EOF >/usr/local/bin/update_cronmaster
+#!/usr/bin/env bash
+# CronMaster Update Script
+type=update bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/cronmaster.sh)"
+EOF
+  chmod +x /usr/local/bin/update_cronmaster
+  msg_ok "Created update script (/usr/local/bin/update_cronmaster)"
+
+  # Save credentials
+  local CREDS_FILE="/root/cronmaster.creds"
+  cat <<EOF >"$CREDS_FILE"
+CronMaster Credentials
+======================
+Password: ${AUTH_PASS}
+
+Web UI: http://${LOCAL_IP}:${DEFAULT_PORT}
+EOF
+  echo ""
+  msg_ok "${APP} is reachable at: ${BL}http://${LOCAL_IP}:${DEFAULT_PORT}${CL}"
+  msg_ok "Credentials saved to: ${BL}${CREDS_FILE}${CL}"
+  echo ""
+}
+
+# ==============================================================================
+# MAIN
+# ==============================================================================
+header_info
+ensure_usr_local_bin_persist
+get_lxc_ip
+
+# Handle type=update (called from update script)
+if [[ "${type:-}" == "update" ]]; then
+  if [[ -d "$INSTALL_PATH" ]]; then
+    update
+  else
+    msg_error "${APP} is not installed. Nothing to update."
+    exit 1
+  fi
+  exit 0
+fi
+
+# Check if already installed
+if [[ -d "$INSTALL_PATH" && -n "$(ls -A "$INSTALL_PATH" 2>/dev/null)" ]]; then
+  msg_warn "${APP} is already installed."
+  echo ""
+
+  echo -n "${TAB}Uninstall ${APP}? (y/N): "
+  read -r uninstall_prompt
+  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
+    uninstall
+    exit 0
+  fi
+
+  echo -n "${TAB}Update ${APP}? (y/N): "
+  read -r update_prompt
+  if [[ "${update_prompt,,}" =~ ^(y|yes)$ ]]; then
+    update
+    exit 0
+  fi
+
+  msg_warn "No action selected. Exiting."
+  exit 0
+fi
+
+# Fresh installation
+msg_warn "${APP} is not installed."
+echo ""
+echo -e "${TAB}${INFO} This will install:"
+echo -e "${TAB}  - Node.js 22"
+echo -e "${TAB}  - CronMaster (prebuild)"
+echo ""
+
+echo -n "${TAB}Install ${APP}? (y/N): "
+read -r install_prompt
+if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
+  install
+else
+  msg_warn "Installation cancelled. Exiting."
+  exit 0
+fi

tools/headers/cronmaster

@@ -0,0 +1,6 @@
+   ______                 __  ___           __           
+  / ____/________  ____  /  |/  /___ ______/ /____  _____
+ / /   / ___/ __ \/ __ \/ /|_/ / __ `/ ___/ __/ _ \/ ___/
+/ /___/ /  / /_/ / / / / /  / / /_/ (__  ) /_/  __/ /    
+\____/_/   \____/_/ /_/_/  /_/\__,_/____/\__/\___/_/     
+                                                         

tools/pve/clean-lxcs.sh

@@ -12,6 +12,7 @@ function header_info() {
  / /   / / _ \/ __ `/ __ \   / /   |   / /
 / /___/ /  __/ /_/ / / / /  / /___/   / /___
 \____/_/\___/\__,_/_/ /_/  /_____/_/|_\____/
+
 EOF
 }
 
@@ -74,10 +75,10 @@ function run_lxc_clean() {
       find /var/cache -type f -delete 2>/dev/null
       find /var/log -type f -delete 2>/dev/null
       find /tmp -mindepth 1 -delete 2>/dev/null
-      apt-get -y --purge autoremove
-      apt-get -y autoclean
+      apt -y --purge autoremove
+      apt -y autoclean
       rm -rf /var/lib/apt/lists/*
-      apt-get update
+      apt update
     fi
   '
 }

vm/docker-vm.sh

@@ -525,9 +525,9 @@ fi
 
 msg_info "Finalizing image (hostname, SSH config)"
 # Set hostname and prepare for unique machine-id
-virt-customize -q -a "$WORK_FILE" --hostname "${HN}" >/dev/null 2>&1
-virt-customize -q -a "$WORK_FILE" --run-command "truncate -s 0 /etc/machine-id" >/dev/null 2>&1
-virt-customize -q -a "$WORK_FILE" --run-command "rm -f /var/lib/dbus/machine-id" >/dev/null 2>&1
+virt-customize -q -a "$WORK_FILE" --hostname "${HN}" >/dev/null 2>&1 || true
+virt-customize -q -a "$WORK_FILE" --run-command "truncate -s 0 /etc/machine-id" >/dev/null 2>&1 || true
+virt-customize -q -a "$WORK_FILE" --run-command "rm -f /var/lib/dbus/machine-id" >/dev/null 2>&1 || true
 
 # Configure SSH for Cloud-Init
 if [ "$USE_CLOUD_INIT" = "yes" ]; then
@@ -552,7 +552,7 @@ msg_ok "Finalized image"
 
 # Create first-boot Docker install script (fallback if virt-customize failed)
 if [ "$DOCKER_PREINSTALLED" = "no" ]; then
-  virt-customize -q -a "$WORK_FILE" --run-command 'cat > /root/install-docker.sh << "DOCKERSCRIPT"
+  if virt-customize -q -a "$WORK_FILE" --run-command 'cat > /root/install-docker.sh << "DOCKERSCRIPT"
 #!/bin/bash
 exec > /var/log/install-docker.log 2>&1
 echo "[$(date)] Starting Docker installation"
@@ -581,9 +581,9 @@ systemctl restart docker
 touch /root/.docker-installed
 echo "[$(date)] Docker installation completed"
 DOCKERSCRIPT
-chmod +x /root/install-docker.sh' >/dev/null 2>&1
+chmod +x /root/install-docker.sh' >/dev/null 2>&1; then
 
-  virt-customize -q -a "$WORK_FILE" --run-command 'cat > /etc/systemd/system/install-docker.service << "DOCKERSERVICE"
+    virt-customize -q -a "$WORK_FILE" --run-command 'cat > /etc/systemd/system/install-docker.service << "DOCKERSERVICE"
 [Unit]
 Description=Install Docker on First Boot
 After=network-online.target
@@ -598,7 +598,11 @@ RemainAfterExit=yes
 [Install]
 WantedBy=multi-user.target
 DOCKERSERVICE
-systemctl enable install-docker.service' >/dev/null 2>&1
+systemctl enable install-docker.service' >/dev/null 2>&1 || true
+  else
+    msg_warn "virt-customize failed for this image. Docker must be installed manually after first boot:"
+    msg_warn "  curl -fsSL https://get.docker.com | sh"
+  fi
 fi
 
 # Resize disk to target size