Update CHANGELOG.md (#15253)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.github/changelogs/2026/06.md

@@ -1,3 +1,147 @@
+## 2026-06-20
+
+### 🆕 New Scripts
+
+  - Apache-Airflow ([#15228](https://github.com/community-scripts/ProxmoxVE/pull/15228))
+- Plane ([#15227](https://github.com/community-scripts/ProxmoxVE/pull/15227))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix docker service crash [@asylumexp](https://github.com/asylumexp) ([#15243](https://github.com/community-scripts/ProxmoxVE/pull/15243))
+    - Nginxproxymanager: repair broken certbot pip before update [@MickLesk](https://github.com/MickLesk) ([#15224](https://github.com/community-scripts/ProxmoxVE/pull/15224))
+
+  - #### ✨ New Features
+
+    - [arm64] Port scripts between komga & mediamanager to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15245](https://github.com/community-scripts/ProxmoxVE/pull/15245))
+    - [arm64] port scripts between hyperhdr & kometa to arm64 [@asylumexp](https://github.com/asylumexp) ([#15234](https://github.com/community-scripts/ProxmoxVE/pull/15234))
+
+### 📂 Github
+
+  - add arm64 title check to autolabeler [@asylumexp](https://github.com/asylumexp) ([#15235](https://github.com/community-scripts/ProxmoxVE/pull/15235))
+
+### ❔ Uncategorized
+
+  - chore(ct): sync limesurvey defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15247](https://github.com/community-scripts/ProxmoxVE/pull/15247))
+
+## 2026-06-19
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - add avx2 check to influxdb3 [@asylumexp](https://github.com/asylumexp) ([#15208](https://github.com/community-scripts/ProxmoxVE/pull/15208))
+    - Step ca leaf data patch [@heinemannj](https://github.com/heinemannj) ([#15210](https://github.com/community-scripts/ProxmoxVE/pull/15210))
+    - Kimai: Add APP_SECRET env var [@tremor021](https://github.com/tremor021) ([#15199](https://github.com/community-scripts/ProxmoxVE/pull/15199))
+
+  - #### ✨ New Features
+
+    - [arm64] Port scripts between garage-hortusfox to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15207](https://github.com/community-scripts/ProxmoxVE/pull/15207))
+    - [arm64] Port scripts titled between A-F to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15181](https://github.com/community-scripts/ProxmoxVE/pull/15181))
+
+### 📂 Github
+
+  - fix (workflow): YAML syntax error in pocketbase stub generation [@Trollfjorden](https://github.com/Trollfjorden) ([#15174](https://github.com/community-scripts/ProxmoxVE/pull/15174))
+
+### ❔ Uncategorized
+
+  - chore(ct): sync coredns defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15182](https://github.com/community-scripts/ProxmoxVE/pull/15182))
+- chore(ct): sync gatus defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15184](https://github.com/community-scripts/ProxmoxVE/pull/15184))
+- chore(ct): sync bitmagnet defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15183](https://github.com/community-scripts/ProxmoxVE/pull/15183))
+
+## 2026-06-18
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - flowise: add deps / uv / python 3.11 [@MickLesk](https://github.com/MickLesk) ([#15177](https://github.com/community-scripts/ProxmoxVE/pull/15177))
+
+  - #### 💥 Breaking Changes
+
+    - refactor: crafty-controller [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15178](https://github.com/community-scripts/ProxmoxVE/pull/15178))
+
+## 2026-06-17
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - kasm: fix release detection [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15151](https://github.com/community-scripts/ProxmoxVE/pull/15151))
+
+  - #### ✨ New Features
+
+    - trek: update install and upgrade workflow for v3.1.0 [@MickLesk](https://github.com/MickLesk) ([#15165](https://github.com/community-scripts/ProxmoxVE/pull/15165))
+
+  - #### 💥 Breaking Changes
+
+    - TREK: Pin version [@tremor021](https://github.com/tremor021) ([#15156](https://github.com/community-scripts/ProxmoxVE/pull/15156))
+
+  - #### 🔧 Refactor
+
+    - chore(paperless-ngx): pin version to prevent v3 update [@tomfrenzel](https://github.com/tomfrenzel) ([#15171](https://github.com/community-scripts/ProxmoxVE/pull/15171))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - immich public proxy: replace npm install with npm ci for consistent dependency installation [@MickLesk](https://github.com/MickLesk) ([#15166](https://github.com/community-scripts/ProxmoxVE/pull/15166))
+
+## 2026-06-16
+
+### 🆕 New Scripts
+
+  - Feishin ([#15130](https://github.com/community-scripts/ProxmoxVE/pull/15130))
+- Kiwix ([#15131](https://github.com/community-scripts/ProxmoxVE/pull/15131))
+- Add runtime status guard and deleted script stubs [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15125](https://github.com/community-scripts/ProxmoxVE/pull/15125))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(degoog): use localhost for valkey url [@ethan-hgwr](https://github.com/ethan-hgwr) ([#15149](https://github.com/community-scripts/ProxmoxVE/pull/15149))
+    - Fix InvoiceShelf install/update Yarn package manager mismatch [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15141](https://github.com/community-scripts/ProxmoxVE/pull/15141))
+    - fix storyteller install failure with yarn 4 corepack [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15140](https://github.com/community-scripts/ProxmoxVE/pull/15140))
+    - fix: generate policy-compliant OpenObserve root password [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15137](https://github.com/community-scripts/ProxmoxVE/pull/15137))
+
+## 2026-06-15
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Watcharr: Clean install on update [@tremor021](https://github.com/tremor021) ([#15119](https://github.com/community-scripts/ProxmoxVE/pull/15119))
+    - Vaultwarden: extend version check for VaultWarden update [@MickLesk](https://github.com/MickLesk) ([#15105](https://github.com/community-scripts/ProxmoxVE/pull/15105))
+
+  - #### ✨ New Features
+
+    - degoog: add curl-impersonate to script [@MickLesk](https://github.com/MickLesk) ([#15117](https://github.com/community-scripts/ProxmoxVE/pull/15117))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func: extend mesa-vulkan-drivers and vulkan-tools to installation for ARC GPU's [@MickLesk](https://github.com/MickLesk) ([#15106](https://github.com/community-scripts/ProxmoxVE/pull/15106))
+
+  - #### 🔧 Refactor
+
+    - core: improve mirror selection and error handling [@MickLesk](https://github.com/MickLesk) ([#15108](https://github.com/community-scripts/ProxmoxVE/pull/15108))
+    - core: implement gateway validation for DHCP and static networks [@MickLesk](https://github.com/MickLesk) ([#15107](https://github.com/community-scripts/ProxmoxVE/pull/15107))
+
+## 2026-06-14
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Iinvoiceninja: fix nginx setup assets port [@MickLesk](https://github.com/MickLesk) ([#15090](https://github.com/community-scripts/ProxmoxVE/pull/15090))
+    - CheckMK: remove stale backup site before creating new backup during update [@MickLesk](https://github.com/MickLesk) ([#15088](https://github.com/community-scripts/ProxmoxVE/pull/15088))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Implement backup functions for scripts C-D [@tremor021](https://github.com/tremor021) ([#15096](https://github.com/community-scripts/ProxmoxVE/pull/15096))
+
 ## 2026-06-13
 
 ### 🆕 New Scripts

.github/workflows/autolabeler.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Install dependencies
         run: npm install minimatch
 
-      - name: Label PR based on file changes and PR template
+      - name: Label PR based on file changes, title, and PR template
         uses: actions/github-script@v7
         with:
           script: |
@@ -35,6 +35,7 @@ jobs:
 
             const prNumber = context.payload.pull_request.number;
             const prBody = context.payload.pull_request.body || "";
+            const prTitle = context.payload.pull_request.title || "";
 
             let labelsToAdd = new Set();
 
@@ -68,6 +69,11 @@ jobs:
               }
             }
 
+            // Add arm64 label if PR title contains "arm64"
+            if (/arm64/i.test(prTitle)) {
+              labelsToAdd.add("arm64");
+            }
+
             // Always parse template checkboxes to add content-type labels (bugfix, feature, etc.)
             const templateLabelMappings = {
               "🐞 **Bug fix**": "bugfix",

CHANGELOG.md

@@ -65,6 +65,9 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 
 
+
+
+
 
 
 
@@ -78,7 +81,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 
 <details>
-<summary><h4>June (13 entries)</h4></summary>
+<summary><h4>June (20 entries)</h4></summary>
 
 [View June 2026 Changelog](.github/changelogs/2026/06.md)
 
@@ -483,6 +486,35 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-06-21
+
+## 2026-06-20
+
+### 🆕 New Scripts
+
+  - Apache-Airflow ([#15228](https://github.com/community-scripts/ProxmoxVE/pull/15228))
+- Plane ([#15227](https://github.com/community-scripts/ProxmoxVE/pull/15227))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix docker service crash [@asylumexp](https://github.com/asylumexp) ([#15243](https://github.com/community-scripts/ProxmoxVE/pull/15243))
+    - Nginxproxymanager: repair broken certbot pip before update [@MickLesk](https://github.com/MickLesk) ([#15224](https://github.com/community-scripts/ProxmoxVE/pull/15224))
+
+  - #### ✨ New Features
+
+    - [arm64] Port scripts between komga & mediamanager to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15245](https://github.com/community-scripts/ProxmoxVE/pull/15245))
+    - [arm64] port scripts between hyperhdr & kometa to arm64 [@asylumexp](https://github.com/asylumexp) ([#15234](https://github.com/community-scripts/ProxmoxVE/pull/15234))
+
+### 📂 Github
+
+  - add arm64 title check to autolabeler [@asylumexp](https://github.com/asylumexp) ([#15235](https://github.com/community-scripts/ProxmoxVE/pull/15235))
+
+### ❔ Uncategorized
+
+  - chore(ct): sync limesurvey defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15247](https://github.com/community-scripts/ProxmoxVE/pull/15247))
+
 ## 2026-06-19
 
 ### 🚀 Updated Scripts
@@ -1054,119 +1086,3 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
   - #### 🔧 Refactor
 
     - core: suppress MOTD for non-interactive shells [@MickLesk](https://github.com/MickLesk) ([#14638](https://github.com/community-scripts/ProxmoxVE/pull/14638))
-
-## 2026-05-21
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - snowshare: use mv instead of cp for uploads backup to prevent disk fill [@TuroYT](https://github.com/TuroYT) ([#14558](https://github.com/community-scripts/ProxmoxVE/pull/14558))
-    - Technitium DNS: download release before stopping the service on update [@w-gitops](https://github.com/w-gitops) ([#14616](https://github.com/community-scripts/ProxmoxVE/pull/14616))
-
-  - #### ✨ New Features
-
-    - Proxmox VE 9.2 support  [@MickLesk](https://github.com/MickLesk) ([#14624](https://github.com/community-scripts/ProxmoxVE/pull/14624))
-
-## 2026-05-20
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Update mylar3 to point to new Repo [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14606](https://github.com/community-scripts/ProxmoxVE/pull/14606))
-    - Ollama: Fix for latest version [@tremor021](https://github.com/tremor021) ([#14596](https://github.com/community-scripts/ProxmoxVE/pull/14596))
-
-  - #### ✨ New Features
-
-    - Profilarr v2: Update and Refactor whole Script [@MickLesk](https://github.com/MickLesk) ([#14584](https://github.com/community-scripts/ProxmoxVE/pull/14584))
-
-## 2026-05-19
-
-### 🆕 New Scripts
-
-  - LobeHub ([#14441](https://github.com/community-scripts/ProxmoxVE/pull/14441))
-
-### 🚀 Updated Scripts
-
-  - Update nodejs Versions [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14582](https://github.com/community-scripts/ProxmoxVE/pull/14582))
-
-  - #### 🐞 Bug Fixes
-
-    - ESPConnect: Fix paths to SSL certificates [@tremor021](https://github.com/tremor021) ([#14591](https://github.com/community-scripts/ProxmoxVE/pull/14591))
-    - ReactiveResume: set correct WorkingDirectory for systemd service [@MickLesk](https://github.com/MickLesk) ([#14579](https://github.com/community-scripts/ProxmoxVE/pull/14579))
-    - Sparkyfitness: add missing nginx template variable substitutions [@MickLesk](https://github.com/MickLesk) ([#14578](https://github.com/community-scripts/ProxmoxVE/pull/14578))
-    - Wanderer: include dev dependencies during build [@MickLesk](https://github.com/MickLesk) ([#14577](https://github.com/community-scripts/ProxmoxVE/pull/14577))
-    - Whisparr: switch from nightly to stable GitHub release [@MickLesk](https://github.com/MickLesk) ([#14581](https://github.com/community-scripts/ProxmoxVE/pull/14581))
-
-  - #### 🔧 Refactor
-
-    - Refactor: SonarQube [@tremor021](https://github.com/tremor021) ([#14594](https://github.com/community-scripts/ProxmoxVE/pull/14594))
-
-## 2026-05-18
-
-### 🆕 New Scripts
-
-  - ESPconnect ([#14444](https://github.com/community-scripts/ProxmoxVE/pull/14444))
-- degoog ([#14533](https://github.com/community-scripts/ProxmoxVE/pull/14533))
-- Webtrees ([#14532](https://github.com/community-scripts/ProxmoxVE/pull/14532))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Bichon: Support v1 migration [@tomfrenzel](https://github.com/tomfrenzel) ([#14524](https://github.com/community-scripts/ProxmoxVE/pull/14524))
-
-  - #### ✨ New Features
-
-    - Pangolin: bump to 1.18.4, fix missing statusHistory migration [@MickLesk](https://github.com/MickLesk) ([#14566](https://github.com/community-scripts/ProxmoxVE/pull/14566))
-
-## 2026-05-17
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - dashy: fix yarn-missing on update and back up full user-data [@lissy93](https://github.com/lissy93) ([#14548](https://github.com/community-scripts/ProxmoxVE/pull/14548))
-
-  - #### ✨ New Features
-
-    - tools.func: replace max-time with speed-limit stall detection in curl_download [@MickLesk](https://github.com/MickLesk) ([#14545](https://github.com/community-scripts/ProxmoxVE/pull/14545))
-
-## 2026-05-16
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Homelable: replace passlib with bcrypt for password hashing [@MickLesk](https://github.com/MickLesk) ([#14530](https://github.com/community-scripts/ProxmoxVE/pull/14530))
-    - dashy: fix: restore [@CrazyWolf13](https://github.com/CrazyWolf13) ([#14527](https://github.com/community-scripts/ProxmoxVE/pull/14527))
-    - Update Tinyauth source URL in installation script [@MehrunesSky](https://github.com/MehrunesSky) ([#14483](https://github.com/community-scripts/ProxmoxVE/pull/14483))
-    - Excalidraw: Fix build [@tremor021](https://github.com/tremor021) ([#14509](https://github.com/community-scripts/ProxmoxVE/pull/14509))
-
-  - #### ✨ New Features
-
-    - Update authentik version to 2026.2.3 [@thieneret](https://github.com/thieneret) ([#14517](https://github.com/community-scripts/ProxmoxVE/pull/14517))
-
-## 2026-05-15
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - OPNsense: replace undefined msg_warn with inline echo in alloc retry [@MickLesk](https://github.com/MickLesk) ([#14500](https://github.com/community-scripts/ProxmoxVE/pull/14500))
-    - Checkmk: detect OMD version suffix dynamically on update [@MickLesk](https://github.com/MickLesk) ([#14496](https://github.com/community-scripts/ProxmoxVE/pull/14496))
-
-  - #### ✨ New Features
-
-    - SearXNG: enable JSON format by default for API integrations [@MickLesk](https://github.com/MickLesk) ([#14498](https://github.com/community-scripts/ProxmoxVE/pull/14498))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Ollama use tools.func [@MickLesk](https://github.com/MickLesk) ([#14501](https://github.com/community-scripts/ProxmoxVE/pull/14501))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: fall back to silent mode when no TTY or whiptail unavailable [@MickLesk](https://github.com/MickLesk) ([#14497](https://github.com/community-scripts/ProxmoxVE/pull/14497))

ct/apache-airflow.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/apache/airflow
+
+APP="Apache-Airflow"
+var_tags="${var_tags:-workflow;scheduler;automation}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-16}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/airflow ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  INSTALLED=$(cat ~/.airflow 2>/dev/null || echo "0")
+  LATEST=$(curl -fsSL "https://pypi.org/pypi/apache-airflow/json" | jq -r '.info.version')
+
+  if [[ "$INSTALLED" == "$LATEST" ]]; then
+    msg_ok "Already on the latest version (${LATEST})"
+    exit
+  fi
+
+  msg_info "Stopping Services"
+  systemctl stop airflow-api-server airflow-scheduler airflow-dag-processor airflow-triggerer
+  msg_ok "Stopped Services"
+
+  create_backup /opt/airflow/.env
+
+  msg_info "Updating Apache Airflow to ${LATEST}"
+  $STD uv pip install --python /opt/airflow/.venv/bin/python \
+    "apache-airflow[postgres,fab]==${LATEST}" \
+    --constraint "https://raw.githubusercontent.com/apache/airflow/constraints-${LATEST}/constraints-3.12.txt"
+  echo "${LATEST}" >~/.airflow
+  msg_ok "Updated Apache Airflow to ${LATEST}"
+
+  restore_backup
+
+  msg_info "Running Database Migrations"
+  set -a && source /opt/airflow/.env && set +a
+  $STD /opt/airflow/.venv/bin/airflow db migrate
+  msg_ok "Ran Database Migrations"
+
+  msg_info "Starting Services"
+  systemctl start airflow-api-server airflow-scheduler airflow-dag-processor airflow-triggerer
+  msg_ok "Started Services"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"

ct/apprise-api.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-2}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -34,6 +34,7 @@ function update_script() {
     systemctl stop apprise-api
     msg_ok "Stopped Service"
 
+    export UV_PYTHON_INSTALL_DIR=/opt/uv-python
     PYTHON_VERSION="3.12" setup_uv
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "apprise" "caronc/apprise-api" "tarball"
 
@@ -41,7 +42,9 @@ function update_script() {
     cd /opt/apprise
     cp ./requirements.txt /etc/requirements.txt
     $STD apt install -y nginx git
-    $STD uv pip install -r requirements.txt gunicorn supervisor --system
+    $STD uv venv /opt/apprise/.venv
+    $STD uv pip install -r requirements.txt gunicorn supervisor -p /opt/apprise/.venv/bin/python
+    ln -sf /opt/apprise/.venv/bin/supervisord /opt/apprise/.venv/bin/gunicorn /usr/local/bin/
     cp -fr apprise_api/static /usr/share/nginx/html/s/
     mv apprise_api/ webapp
     touch /etc/nginx/server-override.conf

ct/archivebox.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -39,13 +39,13 @@ function update_script() {
   msg_ok "Stopped Service"
 
   msg_info "Upgrading Playwright"
-  $STD uv pip install playwright --system
+  $STD uv pip install playwright --system --break-system-packages
   $STD playwright install-deps chromium
   msg_ok "Upgraded Playwright"
 
   msg_info "Updating ArchiveBox"
   cd /opt/archivebox/data
-  $STD uv pip install --system --upgrade --no-reinstall archivebox
+  $STD uv pip install --system --break-system-packages --upgrade --no-reinstall archivebox
   sudo -u archivebox archivebox init
   msg_ok "Updated ArchiveBox"
 

ct/headers/apache-airflow

@@ -0,0 +1,6 @@
+    ___                     __               ___    _      ______             
+   /   |  ____  ____ ______/ /_  ___        /   |  (_)____/ __/ /___ _      __
+  / /| | / __ \/ __ `/ ___/ __ \/ _ \______/ /| | / / ___/ /_/ / __ \ | /| / /
+ / ___ |/ /_/ / /_/ / /__/ / / /  __/_____/ ___ |/ / /  / __/ / /_/ / |/ |/ / 
+/_/  |_/ .___/\__,_/\___/_/ /_/\___/     /_/  |_/_/_/  /_/ /_/\____/|__/|__/  
+      /_/                                                                     

ct/headers/plane

@@ -0,0 +1,6 @@
+    ____  __               
+   / __ \/ /___ _____  ___ 
+  / /_/ / / __ `/ __ \/ _ \
+ / ____/ / /_/ / / / /  __/
+/_/   /_/\__,_/_/ /_/\___/ 
+                           

ct/hyperion.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 var_gpu="${var_gpu:-yes}"
 

ct/igotify.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/immich.sh

@@ -12,7 +12,7 @@ var_cpu="${var_cpu:-4}"
 var_ram="${var_ram:-6144}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 var_gpu="${var_gpu:-yes}"
 

ct/immichframe.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/influxdb.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/investbrain.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/invoiceshelf.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/ironclaw.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/isponsorblocktv.sh

@@ -13,7 +13,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/jackett.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-2}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/jellyfin.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-16}"
 var_os="${var_os:-ubuntu}"
 var_version="${var_version:-24.04}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 var_gpu="${var_gpu:-yes}"
 

ct/jellyseerr.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/jitsi-meet.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-12}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/jotty.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kan.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-12}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/karakeep.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-15}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kavita.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/keycloak.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kimai.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-7}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kitchenowl.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kiwix.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-ubuntu}"
 var_version="${var_version:-24.04}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kometa.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -44,7 +44,8 @@ function update_script() {
 
     msg_info "Updating Kometa"
     cd /opt/kometa
-    $STD uv pip install -r requirements.txt --system
+    [[ -d /opt/kometa/.venv ]] || $STD uv venv /opt/kometa/.venv
+    $STD uv pip install -r requirements.txt -p /opt/kometa/.venv/bin/python
     mkdir -p config/assets
     cp /opt/config.yml config/config.yml
     msg_ok "Updated Kometa"

ct/komga.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/kubo.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -33,7 +33,7 @@ function update_script() {
     systemctl stop ipfs
     msg_ok "Stopped service"
 
-    fetch_and_deploy_gh_release "kubo" "ipfs/kubo" "prebuild" "latest" "/usr/local/kubo" "kubo*linux-amd64.tar.gz"
+    fetch_and_deploy_gh_release "kubo" "ipfs/kubo" "prebuild" "latest" "/usr/local/kubo" "kubo*linux-$(arch_resolve).tar.gz"
 
     msg_info "Starting service"
     systemctl start ipfs

ct/kutt.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-2}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/languagetool.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-16}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/lazylibrarian.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/librechat.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-6144}"
 var_disk="${var_disk:-20}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/librenms.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/librespeed-rust.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -34,7 +34,7 @@ function update_script() {
     systemctl stop speedtest_rs
     msg_ok "Services Stopped"
 
-    fetch_and_deploy_gh_release "librespeed-rust" "librespeed/speedtest-rust" "binary" "latest" "/opt/librespeed-rust" "librespeed-rs-x86_64-unknown-linux-gnu.deb"
+    fetch_and_deploy_gh_release "librespeed-rust" "librespeed/speedtest-rust" "binary" "latest" "/opt/librespeed-rust" "librespeed-rs-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.deb"
 
     msg_info "Starting Service"
     systemctl start speedtest_rs

ct/libretranslate.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-20}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 var_gpu="${var_gpu:-yes}"
 

ct/lidarr.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -35,7 +35,7 @@ function update_script() {
     systemctl stop lidarr
     msg_ok "Service stopped"
 
-    fetch_and_deploy_gh_release "lidarr" "Lidarr/Lidarr" "prebuild" "latest" "/opt/Lidarr" "Lidarr.master*linux-core-x64.tar.gz"
+    fetch_and_deploy_gh_release "lidarr" "Lidarr/Lidarr" "prebuild" "latest" "/opt/Lidarr" "Lidarr.master*linux-core-$(arch_resolve "x64" "arm64").tar.gz"
     chmod 775 /opt/Lidarr
 
     msg_info "Starting service"

ct/limesurvey.sh

@@ -9,10 +9,10 @@ APP="LimeSurvey"
 var_tags="${var_tags:-os}"
 var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
+var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/linkding.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -46,7 +46,7 @@ function update_script() {
     cp -r /opt/linkding_data_backup/. /opt/linkding/data
     cp /opt/linkding_env_backup /opt/linkding/.env
     rm -rf /opt/linkding_data_backup /opt/linkding_env_backup
-    ln -sf /usr/lib/x86_64-linux-gnu/mod_icu.so /opt/linkding/libicu.so
+    ln -sf /usr/lib/$(arch_resolve "x86_64-linux-gnu" "aarch64-linux-gnu")/mod_icu.so /opt/linkding/libicu.so
     msg_ok "Restored Data"
 
     msg_info "Updating LinkDing"

ct/listmonk.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -37,7 +37,7 @@ function update_script() {
     mv /opt/listmonk/ /opt/listmonk-backup
     msg_ok "Backed up data"
 
-    fetch_and_deploy_gh_release "listmonk" "knadh/listmonk" "prebuild" "latest" "/opt/listmonk" "listmonk*linux_amd64.tar.gz"
+    fetch_and_deploy_gh_release "listmonk" "knadh/listmonk" "prebuild" "latest" "/opt/listmonk" "listmonk*linux_$(arch_resolve).tar.gz"
 
     msg_info "Configuring listmonk"
     mv /opt/listmonk-backup/config.toml /opt/listmonk/config.toml

ct/livebook.sh

@@ -12,7 +12,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_os="${var_os:-ubuntu}"
 var_version="${var_version:-24.04}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/lobehub.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-10240}"
 var_disk="${var_disk:-15}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/loki.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-512}"
 var_disk="${var_disk:-2}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/lychee.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/lyrionmusicserver.sh

@@ -13,7 +13,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-3}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -31,9 +31,10 @@ function update_script() {
     exit
   fi
 
-  DEB_URL=$(curl_with_retry 'https://lyrion.org/getting-started/' | grep -oP '<a\s[^>]*href="\K[^"]*amd64\.deb(?="[^>]*>)' | head -n 1)
+  DEB_ARCH=$(arch_resolve "amd64" "arm")
-  RELEASE=$(echo "$DEB_URL" | grep -oP 'lyrionmusicserver_\K[0-9.]+(?=_amd64\.deb)')
+  DEB_URL=$(curl_with_retry 'https://lyrion.org/getting-started/' | grep -oP "<a\s[^>]*href=\"\K[^\"]*${DEB_ARCH}\.deb(?=\"[^>]*>)" | head -n 1)
-  DEB_FILE="/tmp/lyrionmusicserver_${RELEASE}_amd64.deb"
+  RELEASE=$(echo "$DEB_URL" | grep -oP "lyrionmusicserver_\K[0-9.]+(?=_${DEB_ARCH}\.deb)")
+  DEB_FILE="/tmp/lyrionmusicserver_${RELEASE}_${DEB_ARCH}.deb"
   if [[ ! -f /opt/lyrion_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/lyrion_version.txt)" ]]; then
     msg_info "Updating $APP to ${RELEASE}"
     curl_with_retry "$DEB_URL" "$DEB_FILE"

ct/mail-archiver.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/managemydamnlife.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/manyfold.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-15}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/matomo.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-16}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/matter-server.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -41,7 +41,7 @@ function update_script() {
     echo "${MATTER_VERSION}" >~/.matter-server
     msg_ok "Updated Matter Server"
 
-    fetch_and_deploy_gh_release "chip-ota-provider-app" "home-assistant-libs/matter-linux-ota-provider" "singlefile" "latest" "/usr/local/bin" "chip-ota-provider-app-x86-64"
+    fetch_and_deploy_gh_release "chip-ota-provider-app" "home-assistant-libs/matter-linux-ota-provider" "singlefile" "latest" "/usr/local/bin" "chip-ota-provider-app-$(arch_resolve "x86-64" "aarch64")"
 
     msg_info "Starting Service"
     systemctl start matter-server

ct/matterjs-server.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/mediamanager.sh

@@ -12,7 +12,7 @@ var_ram="${var_ram:-3072}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
+var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/nginxproxymanager.sh

@@ -108,8 +108,13 @@ EOF
   cd /root
   if [ -d /opt/certbot ]; then
     msg_info "Updating Certbot"
-    $STD /opt/certbot/bin/pip install --upgrade pip setuptools wheel
+    CERTBOT_PYTHON="/opt/certbot/bin/python"
-    $STD /opt/certbot/bin/pip install --upgrade certbot certbot-dns-cloudflare
+    if ! "$CERTBOT_PYTHON" -m pip --version &>/dev/null; then
+      msg_info "Repairing Certbot pip"
+      $STD "$CERTBOT_PYTHON" -m ensurepip --upgrade
+    fi
+    $STD "$CERTBOT_PYTHON" -m pip install --upgrade pip setuptools wheel
+    $STD "$CERTBOT_PYTHON" -m pip install --upgrade certbot certbot-dns-cloudflare
     msg_ok "Updated Certbot"
   fi
 

ct/plane.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: onionrings29
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://plane.so | GitHub: https://github.com/makeplane/plane
+
+APP="Plane"
+var_tags="${var_tags:-project-management}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-6144}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/plane ]]; then
+    msg_error "No Plane Installation Found!"
+    exit 1
+  fi
+
+  if check_for_gh_release "plane" "makeplane/plane"; then
+    msg_info "Stopping Services"
+    systemctl stop plane-api plane-worker plane-beat plane-live plane-space
+    msg_ok "Stopped Services"
+
+    create_backup /opt/plane/.env \
+        /opt/plane/apps/admin/.env \
+        /opt/plane/apps/api/.env \
+        /opt/plane/apps/space/.env \
+       /opt/plane/apps/web/.env
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "plane" "makeplane/plane" "tarball"
+
+    restore_backup
+
+    msg_info "Rebuilding Frontend (Patience)"
+    cd /opt/plane
+    export NODE_OPTIONS="--max-old-space-size=4096"
+    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+    $STD corepack enable pnpm
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm turbo run build --filter=web --filter=admin --filter=space --filter=live
+    msg_ok "Rebuilt Frontend"
+
+    msg_info "Updating Python Dependencies"
+    cd /opt/plane/apps/api
+    export VIRTUAL_ENV=/opt/plane-venv
+    $STD uv pip install --upgrade -r requirements/production.txt
+    msg_ok "Updated Python Dependencies"
+
+    msg_info "Running Migrations"
+    cd /opt/plane/apps/api
+    set -a
+    source /opt/plane/apps/api/.env
+    set +a
+    $STD /opt/plane-venv/bin/python manage.py migrate
+    $STD /opt/plane-venv/bin/python manage.py collectstatic --noinput
+    $STD /opt/plane-venv/bin/python manage.py configure_instance
+    msg_ok "Ran Migrations"
+
+    msg_info "Starting Services"
+    systemctl start plane-api plane-worker plane-beat plane-live plane-space
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

install/apache-airflow-install.sh

@@ -0,0 +1,141 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/apache/airflow
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  libpq-dev \
+  libssl-dev \
+  libffi-dev \
+  python3-dev
+msg_ok "Installed Dependencies"
+
+UV_PYTHON="3.12" setup_uv
+PG_VERSION="16" setup_postgresql
+PG_DB_NAME="airflow" PG_DB_USER="airflow" setup_postgresql_db
+
+msg_info "Installing Apache Airflow"
+AIRFLOW_VERSION="3.2.1"
+mkdir -p /opt/airflow/{dags,logs,plugins}
+cd /opt/airflow
+$STD uv venv --python 3.12
+$STD uv pip install --python /opt/airflow/.venv/bin/python \
+  "apache-airflow[postgres,fab]==${AIRFLOW_VERSION}" \
+  --constraint "https://raw.githubusercontent.com/apache/airflow/constraints-${AIRFLOW_VERSION}/constraints-3.12.txt"
+echo "${AIRFLOW_VERSION}" >~/.airflow
+msg_ok "Installed Apache Airflow"
+
+msg_info "Configuring Application"
+FERNET_KEY=$(/opt/airflow/.venv/bin/python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())")
+SECRET_KEY=$(openssl rand -hex 32)
+ADMIN_PASS=$(openssl rand -base64 12 | tr -dc 'a-zA-Z0-9' | cut -c1-12)
+cat <<EOF >/opt/airflow/.env
+AIRFLOW_HOME=/opt/airflow
+AIRFLOW__DATABASE__SQL_ALCHEMY_CONN=postgresql+psycopg2://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}
+AIRFLOW__CORE__EXECUTOR=LocalExecutor
+AIRFLOW__CORE__FERNET_KEY=${FERNET_KEY}
+AIRFLOW__CORE__DAGS_FOLDER=/opt/airflow/dags
+AIRFLOW__CORE__LOAD_EXAMPLES=false
+AIRFLOW__CORE__AUTH_MANAGER=airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
+AIRFLOW__API__AUTH_BACKENDS=airflow.api.auth.backend.basic_auth,airflow.api.auth.backend.session
+AIRFLOW__WEBSERVER__SECRET_KEY=${SECRET_KEY}
+AIRFLOW__WEBSERVER__BASE_URL=http://${LOCAL_IP}:8080
+AIRFLOW_ADMIN_PASSWORD=${ADMIN_PASS}
+EOF
+set -a && source /opt/airflow/.env && set +a
+$STD /opt/airflow/.venv/bin/airflow db migrate
+$STD /opt/airflow/.venv/bin/airflow users create \
+  --username admin \
+  --firstname Admin \
+  --lastname User \
+  --role Admin \
+  --email admin@example.com \
+  --password "${ADMIN_PASS}"
+msg_ok "Configured Application"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/airflow-api-server.service
+[Unit]
+Description=Apache Airflow API Server
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+EnvironmentFile=/opt/airflow/.env
+ExecStart=/opt/airflow/.venv/bin/airflow api-server --port 8080
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/airflow-scheduler.service
+[Unit]
+Description=Apache Airflow Scheduler
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+EnvironmentFile=/opt/airflow/.env
+ExecStart=/opt/airflow/.venv/bin/airflow scheduler
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/airflow-dag-processor.service
+[Unit]
+Description=Apache Airflow DAG Processor
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+EnvironmentFile=/opt/airflow/.env
+ExecStart=/opt/airflow/.venv/bin/airflow dag-processor
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/airflow-triggerer.service
+[Unit]
+Description=Apache Airflow Triggerer
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+EnvironmentFile=/opt/airflow/.env
+ExecStart=/opt/airflow/.venv/bin/airflow triggerer
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now airflow-api-server airflow-scheduler airflow-dag-processor airflow-triggerer
+msg_ok "Created Services"
+
+motd_ssh
+customize
+cleanup_lxc

install/apprise-api-install.sh

@@ -19,13 +19,16 @@ $STD apt install -y \
   git
 msg_ok "Installed Dependencies" 
 
+export UV_PYTHON_INSTALL_DIR=/opt/uv-python
 PYTHON_VERSION="3.12" setup_uv
 fetch_and_deploy_gh_release "apprise" "caronc/apprise-api" "tarball"
 
 msg_info "Setup Apprise-API"
 cd /opt/apprise
 cp ./requirements.txt /etc/requirements.txt
-$STD uv pip install -r requirements.txt gunicorn supervisor --system
+$STD uv venv /opt/apprise/.venv
+$STD uv pip install -r requirements.txt gunicorn supervisor -p /opt/apprise/.venv/bin/python
+ln -sf /opt/apprise/.venv/bin/supervisord /opt/apprise/.venv/bin/gunicorn /usr/local/bin/
 cp -fr apprise_api/static /usr/share/nginx/html/s/
 mv apprise_api/ webapp
 touch /etc/nginx/server-override.conf

install/archivebox-install.sh

@@ -37,7 +37,7 @@ NODE_VERSION="22" NODE_MODULE="@postlight/parser@latest,single-file-cli@latest"
 PYTHON_VERSION="3.13" setup_uv
 
 msg_info "Installing Playwright"
-$STD uv pip install playwright --system
+$STD uv pip install playwright --system --break-system-packages
 $STD playwright install-deps chromium
 msg_ok "Installed Playwright"
 
@@ -46,7 +46,7 @@ mkdir -p /opt/archivebox/{data,.npm,.cache,.local}
 $STD adduser --system --shell /bin/bash --gecos 'Archive Box User' --group --disabled-password --home /home/archivebox archivebox
 chown -R archivebox:archivebox /opt/archivebox/{data,.npm,.cache,.local}
 chmod -R 755 /opt/archivebox/data
-$STD uv pip install archivebox --system
+$STD uv pip install archivebox --system --break-system-packages
 cd /opt/archivebox/data
 expect <<EOF
 set timeout -1

install/docker-install.sh

@@ -58,7 +58,7 @@ if [[ -n "$socket" ]]; then
   cat <<EOF >/etc/systemd/system/docker.service.d/override.conf
 [Service]
 ExecStart=
-ExecStart=/usr/bin/dockerd
+ExecStart=$(command -v dockerd || echo /usr/sbin/dockerd)
 EOF
 
   $STD systemctl daemon-reexec

install/igotify-install.sh

@@ -23,7 +23,7 @@ setup_deb822_repo \
 $STD apt install -y aspnetcore-runtime-10.0
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "igotify" "androidseb25/iGotify-Notification-Assistent" "prebuild" "latest" "/opt/igotify" "iGotify-Notification-Service-amd64-v*.zip"
+fetch_and_deploy_gh_release "igotify" "androidseb25/iGotify-Notification-Assistent" "prebuild" "latest" "/opt/igotify" "iGotify-Notification-Service-$(arch_resolve)-v*.zip"
 
 msg_info "Creating Service"
 cat <<EOF >/opt/igotify/.env

install/immich-install.sh

@@ -124,13 +124,23 @@ msg_ok "Dependencies Installed"
 
 msg_info "Installing Mise"
 curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
-echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" >/etc/apt/sources.list.d/mise.list
+echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=$(arch_resolve)] https://mise.jdx.dev/deb stable main" >/etc/apt/sources.list.d/mise.list
 $STD apt update
 $STD apt install -y mise
 msg_ok "Installed Mise"
 
 msg_info "Configuring Debian Testing Repo"
-sed -i 's/ trixie-updates/ trixie-updates testing/g' /etc/apt/sources.list.d/debian.sources
+if [[ -f /etc/apt/sources.list.d/debian.sources ]]; then
+  sed -i 's/ trixie-updates/ trixie-updates testing/g' /etc/apt/sources.list.d/debian.sources
+else
+  cat <<EOF >/etc/apt/sources.list.d/testing.sources
+Types: deb
+URIs: http://deb.debian.org/debian
+Suites: testing
+Components: main
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+EOF
+fi
 cat <<EOF >/etc/apt/preferences.d/preferences
 Package: *
 Pin: release a=unstable
@@ -153,7 +163,7 @@ ACTUAL_PG_VERSION=$(ls /etc/postgresql/ 2>/dev/null | sort -V | tail -1)
 ACTUAL_PG_VERSION=${ACTUAL_PG_VERSION:-16}
 
 VCHORD_RELEASE="0.5.3"
-fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-${ACTUAL_PG_VERSION}-vchord_*_amd64.deb"
+fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-${ACTUAL_PG_VERSION}-vchord_*_$(arch_resolve).deb"
 
 sed -i "s/^#shared_preload.*/shared_preload_libraries = 'vchord.so'/" /etc/postgresql/${ACTUAL_PG_VERSION}/main/postgresql.conf
 systemctl restart postgresql.service
@@ -376,7 +386,7 @@ if [[ -f ~/.openvino ]]; then
     $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
     [[ $attempt -lt 3 ]] && msg_warn "uv sync attempt $attempt failed, retrying..." && sleep 10
   done
-  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-x86_64-linux-gnu.so"
+  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-$(arch_resolve "x86_64" "aarch64")-linux-gnu.so"
   msg_ok "Installed Intel OpenVINO machine-learning"
 else
   ML_PYTHON="python3.11"

install/immichframe-install.sh

@@ -14,18 +14,26 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-setup_deb822_repo \
+if [[ "$(arch_resolve)" == "arm64" ]]; then
-  "microsoft" \
+  $STD apt install -y libicu-dev libssl-dev gettext-base
-  "https://packages.microsoft.com/keys/microsoft-2025.asc" \
+  curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-  "https://packages.microsoft.com/debian/13/prod/" \
+  $STD bash /tmp/dotnet-install.sh --channel 8.0 --install-dir /usr/lib/dotnet8
-  "trixie" \
+  ln -sf /usr/lib/dotnet8/dotnet /usr/bin/dotnet
-  "main"
+  rm -f /tmp/dotnet-install.sh
-$STD apt install -y \
+else
-  libicu-dev \
+  setup_deb822_repo \
-  libssl-dev \
+    "microsoft" \
-  gettext-base \
+    "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-  dotnet-sdk-8.0 \
+    "https://packages.microsoft.com/debian/13/prod/" \
-  aspnetcore-runtime-8.0
+    "trixie" \
+    "main"
+  $STD apt install -y \
+    libicu-dev \
+    libssl-dev \
+    gettext-base \
+    dotnet-sdk-8.0 \
+    aspnetcore-runtime-8.0
+fi
 msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" setup_nodejs
@@ -36,7 +44,7 @@ mkdir -p /opt/immichframe
 cd /tmp/immichframe
 $STD dotnet publish ImmichFrame.WebApi/ImmichFrame.WebApi.csproj \
   --configuration Release \
-  --runtime linux-x64 \
+  --runtime "$(arch_resolve "linux-x64" "linux-arm64")" \
   --self-contained false \
   --output /opt/immichframe
 cd /tmp/immichframe/immichFrame.Web

install/influxdb-install.sh

@@ -32,7 +32,7 @@ fi
 
 msg_info "Installing InfluxDB v${INFLUX}"
 if [[ $INFLUX == "3" ]]; then
-  if ! grep -qm1 'avx2' /proc/cpuinfo; then
+  if [[ "$(arch_resolve)" == "amd64" ]] && ! grep -qm1 'avx2' /proc/cpuinfo; then
     msg_error "InfluxDB v3 requires AVX2 support, which is not available on this system."
     exit 106
   fi
@@ -43,9 +43,9 @@ elif [[ $INFLUX == "2" ]]; then
   systemctl enable -q --now influxdb
 else
   $STD apt install -y influxdb
-  download_file "https://dl.influxdata.com/chronograf/releases/chronograf_1.10.8_amd64.deb" "${HOME}/chronograf_1.10.8_amd64.deb"
+  download_file "https://dl.influxdata.com/chronograf/releases/chronograf_1.10.8_$(arch_resolve).deb" "${HOME}/chronograf_1.10.8_$(arch_resolve).deb"
-  $STD dpkg -i "${HOME}/chronograf_1.10.8_amd64.deb"
+  $STD dpkg -i "${HOME}/chronograf_1.10.8_$(arch_resolve).deb"
-  rm -rf "${HOME}/chronograf_1.10.8_amd64.deb"
+  rm -rf "${HOME}/chronograf_1.10.8_$(arch_resolve).deb"
   systemctl enable -q --now influxdb
 fi
 msg_ok "Installed InfluxDB"

install/investbrain-install.sh

@@ -17,6 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y \
   nginx \
   supervisor \
+  cron \
   redis-server \
   libfreetype-dev \
   libjpeg62-turbo-dev \

install/invoiceshelf-install.sh

@@ -19,7 +19,7 @@ msg_ok "Installed Dependencies"
 
 PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULES="bcmath,gd,intl,xml,zip,pdo_pgsql,mbstring,curl,exif" setup_php
 setup_composer
-NODE_VERSION="24" NODE_MODULE="yarn" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="invoiceshelf" PG_DB_USER="invoiceshelf" setup_postgresql_db
 
@@ -38,14 +38,14 @@ sed -i "s|^DB_DATABASE=.*|DB_DATABASE=${PG_DB_NAME}|" .env
 sed -i "s|^DB_USERNAME=.*|DB_USERNAME=${PG_DB_USER}|" .env
 sed -i "s|^DB_PASSWORD=.*|DB_PASSWORD=${PG_DB_PASS}|" .env
 COMPOSER_ALLOW_SUPERUSER=1 $STD composer install --no-dev --optimize-autoloader --no-interaction
-$STD php artisan key:generate
+$STD php artisan key:generate --force
 if command -v corepack >/dev/null 2>&1; then
   $STD corepack enable
-  $STD corepack yarn install
+  $STD corepack pnpm install
-  $STD corepack yarn build
+  $STD corepack pnpm run build
 else
-  $STD yarn install
+  $STD pnpm install
-  $STD yarn build
+  $STD pnpm run build
 fi
 mkdir -p storage/framework/{cache,sessions,views} storage/logs bootstrap/cache
 chown -R www-data:www-data /opt/invoiceshelf

install/isponsorblocktv-install.sh

@@ -13,9 +13,9 @@ setting_up_container
 network_check
 update_os
 
-ISBTV_BINARY="iSponsorBlockTV-x86_64-linux-v1"
+ISBTV_BINARY="$(arch_resolve "iSponsorBlockTV-x86_64-linux-v1" "iSponsorBlockTV-aarch64-linux")"
 if grep -q ' avx ' /proc/cpuinfo 2>/dev/null && grep -q ' avx2 ' /proc/cpuinfo 2>/dev/null && grep -q ' movbe ' /proc/cpuinfo 2>/dev/null; then
-  ISBTV_BINARY="iSponsorBlockTV-x86_64-linux"
+  ISBTV_BINARY="$(arch_resolve "iSponsorBlockTV-x86_64-linux" "iSponsorBlockTV-aarch64-linux")"
 fi
 
 fetch_and_deploy_gh_release "isponsorblocktv" "dmunozv04/iSponsorBlockTV" "singlefile" "latest" "/opt/isponsorblocktv" "${ISBTV_BINARY}"

install/jackett-install.sh

@@ -13,7 +13,11 @@ setting_up_container
 network_check
 update_os
 
-fetch_and_deploy_gh_release "jackett" "Jackett/Jackett" "prebuild" "latest" "/opt/Jackett" "Jackett.Binaries.LinuxAMDx64.tar.gz"
+msg_info "Installing Dependencies"
+$STD apt-get install -y libicu-dev
+msg_ok "Installed Dependencies"
+
+fetch_and_deploy_gh_release "jackett" "Jackett/Jackett" "prebuild" "latest" "/opt/Jackett" "Jackett.Binaries.Linux$(arch_resolve "AMDx64" "ARM64").tar.gz"
 
 cat <<EOF >/opt/.env
 DisableRootWarning=true

install/jellyfin-install.sh

@@ -18,7 +18,7 @@ msg_custom "ℹ️" "${GN}" "If NVIDIA GPU passthrough is detected, you'll be as
 msg_info "Installing Dependencies"
 ensure_dependencies libjemalloc2
 if [[ ! -f /usr/lib/libjemalloc.so ]]; then
-  ln -sf /usr/lib/x86_64-linux-gnu/libjemalloc.so.2 /usr/lib/libjemalloc.so
+  ln -sf "/usr/lib/$(arch_resolve "x86_64-linux-gnu" "aarch64-linux-gnu")/libjemalloc.so.2" /usr/lib/libjemalloc.so
 fi
 msg_ok "Installed Dependencies"
 

install/karakeep-install.sh

@@ -24,7 +24,7 @@ $STD apt install -y \
   ffmpeg
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "monolith" "Y2Z/monolith" "singlefile" "latest" "/usr/bin" "monolith-gnu-linux-x86_64"
+fetch_and_deploy_gh_release "monolith" "Y2Z/monolith" "singlefile" "latest" "/usr/bin" "monolith-gnu-linux-$(arch_resolve "x86_64" "aarch64")"
 fetch_and_deploy_gh_release "yt-dlp" "yt-dlp/yt-dlp-nightly-builds" "singlefile" "latest" "/usr/bin" "yt-dlp_linux"
 fetch_and_deploy_gh_release "deno" "denoland/deno" "prebuild" "latest" "/usr/local/bin" "deno-$(uname -m)-unknown-linux-gnu.zip"
 setup_meilisearch
@@ -35,7 +35,7 @@ MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.
 NODE_VERSION="24" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
 
 msg_info "Installing external JavaScript Extension for yt-dlp"
-$STD pip install -U yt-dlp-ejs
+$STD pip install -U yt-dlp-ejs --break-system-packages
 mkdir -p ~/.config/pip
 cat <<EOF >~/.config/pip/pip.conf
 [global]

install/kasm-install.sh

@@ -13,7 +13,28 @@ setting_up_container
 network_check
 update_os
 
-setup_docker
+msg_info "Installing Docker"
+if [[ "$(arch_resolve)" == "arm64" ]]; then
+  setup_deb822_repo "docker" \
+    "https://download.docker.com/linux/$(get_os_info id)/gpg" \
+    "https://download.docker.com/linux/$(get_os_info id)" \
+    "$(get_os_info codename)" \
+    "stable"
+  $STD apt install -y \
+    docker-ce=5:28.5.2-1~debian.13~trixie \
+    docker-ce-cli=5:28.5.2-1~debian.13~trixie \
+    containerd.io=1.7.29-1~debian.13~trixie \
+    docker-buildx-plugin docker-compose-plugin
+  runc_tmp=$(mktemp -d)
+  (cd "$runc_tmp" && apt-get download runc && dpkg-deb -x runc_*.deb x)
+  dpkg-divert --local --rename --add /usr/bin/runc
+  install -m755 "$runc_tmp"/x/usr/sbin/runc /usr/bin/runc
+  rm -rf "$runc_tmp"
+  systemctl restart containerd docker
+else
+  $STD sh <(curl -fsSL https://get.docker.com/)
+fi
+msg_ok "Installed Docker"
 
 msg_info "Detecting latest Kasm Workspaces release"
 KASM_URL=$(curl -s https://kasm.com/downloads \
@@ -51,7 +72,7 @@ curl_download "/opt/kasm_release_${KASM_VERSION}.tar.gz" "$KASM_URL"
 cd /opt
 tar -xf "kasm_release_${KASM_VERSION}.tar.gz"
 chmod +x /opt/kasm_release/install.sh
-printf 'y\ny\ny\n4\n' | bash /opt/kasm_release/install.sh >~/kasm-install.output 2>&1
+printf 'y\ny\ny\n4\n' | bash /opt/kasm_release/install.sh --ignore-dep-failures >~/kasm-install.output 2>&1
 awk '
   /^Kasm UI Login Credentials$/ {capture=1}
   capture {print}

install/kavita-install.sh

@@ -13,7 +13,11 @@ setting_up_container
 network_check
 update_os
 
-fetch_and_deploy_gh_release "Kavita" "Kareadita/Kavita" "prebuild" "latest" "/opt/Kavita" "kavita-linux-x64.tar.gz"
+msg_info "Installing Dependencies"
+$STD apt-get install -y libicu-dev
+msg_ok "Installed Dependencies"
+
+fetch_and_deploy_gh_release "Kavita" "Kareadita/Kavita" "prebuild" "latest" "/opt/Kavita" "kavita-linux-$(arch_resolve "x64" "arm64").tar.gz"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/kavita.service

install/keycloak-install.sh

@@ -42,7 +42,7 @@ ExecStart=/opt/keycloak/bin/kc.sh start
 ExecStop=/opt/keycloak/bin/kc.sh stop
 Restart=always
 RestartSec=3
-Environment="JAVA_HOME=/usr/lib/jvm/temurin-21-jdk-amd64"
+Environment="JAVA_HOME=/usr/lib/jvm/temurin-21-jdk-$(arch_resolve)"
 Environment="KC_DB=postgres"
 Environment="KC_DB_USERNAME=$DB_USER"
 Environment="KC_DB_PASSWORD=$DB_PASS"

install/kometa-install.sh

@@ -18,7 +18,8 @@ fetch_and_deploy_gh_release "kometa" "Kometa-Team/Kometa" "tarball"
 
 msg_info "Setup Kometa"
 cd /opt/kometa
-$STD uv pip install -r requirements.txt --system
+$STD uv venv /opt/kometa/.venv
+$STD uv pip install -r requirements.txt -p /opt/kometa/.venv/bin/python
 mkdir -p config/assets
 cp config/config.yml.template config/config.yml
 msg_ok "Setup Kometa"
@@ -47,7 +48,7 @@ After=network-online.target
 [Service]
 Type=simple
 WorkingDirectory=/opt/kometa
-ExecStart=/usr/bin/python3 kometa.py
+ExecStart=/opt/kometa/.venv/bin/python kometa.py
 Restart=always
 RestartSec=30
 

install/komga-install.sh

@@ -22,7 +22,7 @@ $STD apt -y install \
 msg_ok "Installed dependencies"
 
 JAVA_VERSION="23" setup_java
-fetch_and_deploy_gh_release "kepubify" "pgaskin/kepubify" "singlefile" "latest" "/usr/bin" "kepubify-linux-64bit"
+fetch_and_deploy_gh_release "kepubify" "pgaskin/kepubify" "singlefile" "latest" "/usr/bin" "kepubify-linux-$(arch_resolve "64bit" "arm64")"
 USE_ORIGINAL_FILENAME="true" fetch_and_deploy_gh_release "komga-org" "gotson/komga" "singlefile" "latest" "/opt/komga" "komga*.jar"
 mv /opt/komga/komga-*.jar /opt/komga/komga.jar
 
@@ -35,7 +35,7 @@ After=syslog.target network.target
 [Service]
 Type=simple
 WorkingDirectory=/opt/komga/
-Environment=LD_LIBRARY_PATH=/usr/lib/x86_64-linux-gnu
+Environment=LD_LIBRARY_PATH=/usr/lib/$(arch_resolve "x86_64-linux-gnu" "aarch64-linux-gnu")
 ExecStart=/usr/bin/java --enable-native-access=ALL-UNNAMED -jar -Xmx2g komga.jar
 TimeoutStopSec=20
 KillMode=process

install/kubo-install.sh

@@ -14,9 +14,10 @@ setting_up_container
 network_check
 update_os
 
-fetch_and_deploy_gh_release "kubo" "ipfs/kubo" "prebuild" "latest" "/usr/local/kubo" "kubo*linux-amd64.tar.gz"
+fetch_and_deploy_gh_release "kubo" "ipfs/kubo" "prebuild" "latest" "/usr/local/kubo" "kubo*linux-$(arch_resolve).tar.gz"
 
 msg_info "Configuring IPFS"
+export HOME="${HOME:-/root}"
 $STD ln -s /usr/local/kubo/ipfs /usr/local/bin/ipfs
 $STD ipfs init
 ipfs config Addresses.API /ip4/0.0.0.0/tcp/5001

install/lazylibrarian-install.sh

@@ -27,16 +27,16 @@ msg_info "Setup Python3"
 $STD apt install -y \
     pip \
     python3-irc
-$STD pip install jaraco.stream
+$STD pip install --break-system-packages jaraco.stream
-$STD pip install python-Levenshtein
+$STD pip install --break-system-packages python-Levenshtein
-$STD pip install soupsieve
+$STD pip install --break-system-packages soupsieve
-$STD pip install pypdf
+$STD pip install --break-system-packages pypdf
 msg_ok "Setup Python3"
 
 msg_info "Installing LazyLibrarian"
 $STD git clone https://gitlab.com/LazyLibrarian/LazyLibrarian /opt/LazyLibrarian
 cd /opt/LazyLibrarian
-$STD pip install .
+$STD pip install --break-system-packages .
 msg_ok "Installed LazyLibrarian"
 
 msg_info "Creating Service"

install/librespeed-rust-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-fetch_and_deploy_gh_release "librespeed-rust" "librespeed/speedtest-rust" "binary" "latest" "/opt/librespeed-rust" "librespeed-rs-x86_64-unknown-linux-gnu.deb"
+fetch_and_deploy_gh_release "librespeed-rust" "librespeed/speedtest-rust" "binary" "latest" "/opt/librespeed-rust" "librespeed-rs-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.deb"
 
 msg_info "Enabling Service"
 systemctl enable -q --now speedtest_rs

install/lidarr-install.sh

@@ -17,10 +17,11 @@ msg_info "Installing Dependencies"
 $STD apt install -y \
   sqlite3 \
   libchromaprint-tools \
+  libicu-dev \
   mediainfo
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "lidarr" "Lidarr/Lidarr" "prebuild" "latest" "/opt/Lidarr" "Lidarr.master*linux-core-x64.tar.gz"
+fetch_and_deploy_gh_release "lidarr" "Lidarr/Lidarr" "prebuild" "latest" "/opt/Lidarr" "Lidarr.master*linux-core-$(arch_resolve "x64" "arm64").tar.gz"
 
 msg_info "Configuring Lidarr"
 mkdir -p /var/lib/lidarr/

install/linkding-install.sh

@@ -33,7 +33,7 @@ msg_info "Building Frontend"
 cd /opt/linkding
 $STD npm ci
 $STD npm run build
-ln -sf /usr/lib/x86_64-linux-gnu/mod_icu.so /opt/linkding/libicu.so
+ln -sf /usr/lib/$(arch_resolve "x86_64-linux-gnu" "aarch64-linux-gnu")/mod_icu.so /opt/linkding/libicu.so
 msg_ok "Built Frontend"
 
 msg_info "Setting up LinkDing"

install/listmonk-install.sh

@@ -29,7 +29,7 @@ $STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMP
 } >>~/listmonk.creds
 msg_ok "Configured PostgreSQL"
 
-fetch_and_deploy_gh_release "listmonk" "knadh/listmonk" "prebuild" "latest" "/opt/listmonk" "listmonk*linux_amd64.tar.gz"
+fetch_and_deploy_gh_release "listmonk" "knadh/listmonk" "prebuild" "latest" "/opt/listmonk" "listmonk*linux_$(arch_resolve).tar.gz"
 
 msg_info "Configuring listmonk"
 mkdir -p /opt/listmonk/uploads

install/lyrionmusicserver-install.sh

@@ -14,9 +14,10 @@ network_check
 update_os
 
 msg_info "Setup Lyrion Music Server"
-DEB_URL=$(curl_with_retry 'https://lyrion.org/getting-started/' | grep -oP '<a\s[^>]*href="\K[^"]*amd64\.deb(?="[^>]*>)' | head -n 1)
+DEB_ARCH=$(arch_resolve "amd64" "arm")
-RELEASE=$(echo "$DEB_URL" | grep -oP 'lyrionmusicserver_\K[0-9.]+(?=_amd64\.deb)')
+DEB_URL=$(curl_with_retry 'https://lyrion.org/getting-started/' | grep -oP "<a\s[^>]*href=\"\K[^\"]*${DEB_ARCH}\.deb(?=\"[^>]*>)" | head -n 1)
-DEB_FILE="/tmp/lyrionmusicserver_${RELEASE}_amd64.deb"
+RELEASE=$(echo "$DEB_URL" | grep -oP "lyrionmusicserver_\K[0-9.]+(?=_${DEB_ARCH}\.deb)")
+DEB_FILE="/tmp/lyrionmusicserver_${RELEASE}_${DEB_ARCH}.deb"
 curl_with_retry "$DEB_URL" "$DEB_FILE"
 $STD apt install "$DEB_FILE" -y
 rm -f "$DEB_FILE"

install/mail-archiver-install.sh

@@ -22,8 +22,14 @@ setup_deb822_repo \
   "main"
 $STD apt install -y \
   dotnet-sdk-10.0 \
-  aspnetcore-runtime-8.0 \
   libgssapi-krb5-2
+if [[ "$(arch_resolve)" == "arm64" ]]; then
+  curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
+  $STD bash /tmp/dotnet-install.sh --channel 8.0 --runtime aspnetcore --install-dir /usr/lib/dotnet
+  rm -f /tmp/dotnet-install.sh
+else
+  $STD apt install -y aspnetcore-runtime-8.0
+fi
 msg_ok "Installed Dependencies"
 
 PG_VERSION="17" setup_postgresql

install/matter-server-install.sh

@@ -39,7 +39,7 @@ $STD uv pip install --python /opt/matter-server/.venv/bin/python "python-matter-
 echo "${MATTER_VERSION}" >~/.matter-server
 msg_ok "Set up Matter Server"
 
-fetch_and_deploy_gh_release "chip-ota-provider-app" "home-assistant-libs/matter-linux-ota-provider" "singlefile" "latest" "/usr/local/bin" "chip-ota-provider-app-x86-64"
+fetch_and_deploy_gh_release "chip-ota-provider-app" "home-assistant-libs/matter-linux-ota-provider" "singlefile" "latest" "/usr/local/bin" "chip-ota-provider-app-$(arch_resolve "x86-64" "aarch64")"
 
 msg_info "Configuring Network"
 cat <<EOF >/etc/sysctl.d/99-matter.conf

install/plane-install.sh

@@ -0,0 +1,386 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: onionrings29
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://plane.so
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nginx \
+  build-essential \
+  libpq-dev \
+  libxml2-dev \
+  libxslt1-dev \
+  libxmlsec1-dev \
+  libxmlsec1-openssl \
+  pkg-config \
+  python3-dev \
+  python3-venv \
+  redis-server \
+  erlang-base \
+  erlang-{asn1,crypto,eldap,ftp,inets,mnesia,os-mon,parsetools} \
+  erlang-{public-key,runtime-tools,snmp,ssl,syntax-tools,tftp,tools,xmerl} \
+  rabbitmq-server
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+PG_VERSION="16" setup_postgresql
+PG_DB_NAME="plane" PG_DB_USER="plane" setup_postgresql_db
+
+msg_info "Configuring RabbitMQ"
+RABBITMQ_PASS=$(openssl rand -base64 24 | tr -dc 'a-zA-Z0-9' | head -c16)
+$STD rabbitmqctl add_vhost plane
+$STD rabbitmqctl add_user plane "${RABBITMQ_PASS}"
+$STD rabbitmqctl set_permissions -p plane plane ".*" ".*" ".*"
+msg_ok "Configured RabbitMQ"
+
+msg_info "Installing MinIO"
+curl -fsSL https://dl.min.io/server/minio/release/linux-amd64/minio -o /usr/local/bin/minio
+chmod +x /usr/local/bin/minio
+mkdir -p /opt/minio/data
+MINIO_ACCESS_KEY=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
+MINIO_SECRET_KEY=$(openssl rand -base64 36 | tr -dc 'a-zA-Z0-9' | head -c32)
+cat <<EOF >/etc/default/minio
+MINIO_ROOT_USER="${MINIO_ACCESS_KEY}"
+MINIO_ROOT_PASSWORD="${MINIO_SECRET_KEY}"
+MINIO_VOLUMES="/opt/minio/data"
+EOF
+cat <<EOF >/etc/systemd/system/minio.service
+[Unit]
+Description=MinIO Object Storage
+After=network.target
+
+[Service]
+Type=simple
+EnvironmentFile=/etc/default/minio
+ExecStart=/usr/local/bin/minio server \$MINIO_VOLUMES --console-address ":9090"
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now minio
+msg_ok "Installed MinIO"
+
+fetch_and_deploy_gh_release "plane" "makeplane/plane" "tarball"
+
+msg_info "Building Frontend Apps (Patience)"
+cd /opt/plane
+FRONTEND_ENV="VITE_API_BASE_URL=http://${LOCAL_IP}
+VITE_WEB_BASE_URL=http://${LOCAL_IP}
+VITE_ADMIN_BASE_URL=http://${LOCAL_IP}
+VITE_ADMIN_BASE_PATH=/god-mode
+VITE_SPACE_BASE_URL=http://${LOCAL_IP}
+VITE_SPACE_BASE_PATH=/spaces
+VITE_LIVE_BASE_URL=http://${LOCAL_IP}
+VITE_LIVE_BASE_PATH=/live"
+# Each Vite app needs its own .env for the build
+for app in web admin space; do
+  echo "$FRONTEND_ENV" >/opt/plane/apps/${app}/.env
+done
+export NODE_OPTIONS="--max-old-space-size=4096"
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+$STD corepack enable pnpm
+$STD pnpm install --frozen-lockfile
+$STD pnpm turbo run build --filter=web --filter=admin --filter=space --filter=live
+msg_ok "Built Frontend Apps"
+
+msg_info "Setting up Python API"
+setup_uv
+$STD uv venv /opt/plane-venv
+export VIRTUAL_ENV=/opt/plane-venv
+$STD uv pip install -r /opt/plane/apps/api/requirements/production.txt
+msg_ok "Set up Python API"
+
+msg_info "Configuring Plane"
+SECRET_KEY=$(openssl rand -hex 32)
+MACHINE_SIG=$(echo -n "$(hostname)-$(date +%s)" | sha256sum | head -c64)
+LIVE_SECRET=$(openssl rand -hex 16)
+cat <<EOF >/opt/plane/apps/api/.env
+DEBUG=0
+CORS_ALLOWED_ORIGINS=http://${LOCAL_IP}
+
+POSTGRES_USER=plane
+POSTGRES_PASSWORD=${PG_DB_PASS}
+POSTGRES_HOST=localhost
+POSTGRES_DB=plane
+POSTGRES_PORT=5432
+DATABASE_URL=postgresql://plane:${PG_DB_PASS}@localhost:5432/plane
+
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_URL=redis://localhost:6379/
+
+RABBITMQ_HOST=localhost
+RABBITMQ_PORT=5672
+RABBITMQ_USER=plane
+RABBITMQ_PASSWORD=${RABBITMQ_PASS}
+RABBITMQ_VHOST=plane
+AMQP_URL=amqp://plane:${RABBITMQ_PASS}@localhost:5672/plane
+
+AWS_REGION=us-east-1
+AWS_ACCESS_KEY_ID=${MINIO_ACCESS_KEY}
+AWS_SECRET_ACCESS_KEY=${MINIO_SECRET_KEY}
+AWS_S3_ENDPOINT_URL=http://localhost:9000
+AWS_S3_BUCKET_NAME=uploads
+FILE_SIZE_LIMIT=104857600
+
+USE_MINIO=1
+MINIO_ENDPOINT_SSL=0
+SECRET_KEY=${SECRET_KEY}
+MACHINE_SIGNATURE=${MACHINE_SIG}
+
+WEB_URL=http://${LOCAL_IP}
+ADMIN_BASE_URL=http://${LOCAL_IP}
+ADMIN_BASE_PATH=/god-mode
+SPACE_BASE_URL=http://${LOCAL_IP}
+SPACE_BASE_PATH=/spaces
+APP_BASE_URL=http://${LOCAL_IP}
+APP_BASE_PATH=
+LIVE_BASE_URL=http://${LOCAL_IP}
+LIVE_BASE_PATH=/live
+
+GUNICORN_WORKERS=2
+LIVE_SERVER_SECRET_KEY=${LIVE_SECRET}
+API_KEY_RATE_LIMIT=60/minute
+EOF
+cat <<EOF >/opt/plane/.env
+API_BASE_URL=http://localhost:8000
+LIVE_SERVER_SECRET_KEY=${LIVE_SECRET}
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_URL=redis://localhost:6379/
+PORT=3100
+EOF
+msg_ok "Configured Plane"
+
+msg_info "Running Database Migrations"
+cd /opt/plane/apps/api
+set -a
+source /opt/plane/apps/api/.env
+set +a
+$STD /opt/plane-venv/bin/python manage.py migrate
+$STD /opt/plane-venv/bin/python manage.py collectstatic --noinput
+$STD /opt/plane-venv/bin/python manage.py configure_instance
+$STD /opt/plane-venv/bin/python manage.py register_instance "${MACHINE_SIG}"
+msg_ok "Ran Database Migrations"
+
+msg_info "Creating Services and MinIO Bucket"
+curl -fsSL https://dl.min.io/client/mc/release/linux-amd64/mc -o /usr/local/bin/mcli
+chmod +x /usr/local/bin/mcli
+$STD /usr/local/bin/mcli alias set plane http://localhost:9000 "${MINIO_ACCESS_KEY}" "${MINIO_SECRET_KEY}"
+$STD /usr/local/bin/mcli mb plane/uploads --ignore-existing
+$STD /usr/local/bin/mcli anonymous set download plane/uploads
+
+cat <<EOF >/etc/systemd/system/plane-api.service
+[Unit]
+Description=Plane API
+After=network.target postgresql.service redis-server.service rabbitmq-server.service minio.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/plane/apps/api
+EnvironmentFile=/opt/plane/apps/api/.env
+ExecStart=/opt/plane-venv/bin/gunicorn -w 2 -k uvicorn.workers.UvicornWorker plane.asgi:application --bind 0.0.0.0:8000 --max-requests 1200 --max-requests-jitter 1000 --access-logfile -
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/plane-worker.service
+[Unit]
+Description=Plane Celery Worker
+After=plane-api.service
+Requires=plane-api.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/plane/apps/api
+EnvironmentFile=/opt/plane/apps/api/.env
+ExecStart=/opt/plane-venv/bin/celery -A plane worker -l info
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/plane-beat.service
+[Unit]
+Description=Plane Celery Beat
+After=plane-api.service
+Requires=plane-api.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/plane/apps/api
+EnvironmentFile=/opt/plane/apps/api/.env
+ExecStart=/opt/plane-venv/bin/celery -A plane beat -l info
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/plane-live.service
+[Unit]
+Description=Plane Live Server
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/plane
+EnvironmentFile=/opt/plane/.env
+ExecStart=/usr/bin/node apps/live/dist/start.mjs
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/plane-space.service
+[Unit]
+Description=Plane Space Server
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/plane/apps/space
+Environment=PORT=3002
+Environment=NODE_ENV=production
+ExecStart=/opt/plane/apps/space/node_modules/.bin/react-router-serve ./build/server/index.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl daemon-reload
+systemctl enable -q --now plane-api plane-worker plane-beat plane-live plane-space
+{
+  echo "RabbitMQ User: plane"
+  echo "RabbitMQ Password: ${RABBITMQ_PASS}"
+  echo "MinIO Access Key: ${MINIO_ACCESS_KEY}"
+  echo "MinIO Secret Key: ${MINIO_SECRET_KEY}"
+  echo "Secret Key: ${SECRET_KEY}"
+  echo "Config: /opt/plane/apps/api/.env"
+} >>~/plane.creds
+msg_ok "Created Services and MinIO Bucket"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/plane.conf
+upstream plane-api {
+    server 127.0.0.1:8000;
+}
+
+upstream plane-live {
+    server 127.0.0.1:3100;
+}
+
+upstream plane-space {
+    server 127.0.0.1:3002;
+}
+
+upstream plane-minio {
+    server 127.0.0.1:9000;
+}
+
+server {
+    listen 80 default_server;
+    server_name _;
+    client_max_body_size 100M;
+
+    location /api/ {
+        proxy_pass http://plane-api;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location /auth/ {
+        proxy_pass http://plane-api;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location /static/ {
+        alias /opt/plane/apps/api/plane/static-assets/collected-static/;
+    }
+
+    location /live/ {
+        proxy_pass http://plane-live;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location = /uploads {
+        proxy_pass http://plane-minio;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+
+    location /uploads/ {
+        proxy_pass http://plane-minio;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+
+    location /spaces/ {
+        proxy_pass http://plane-space;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location /spaces {
+        return 301 /spaces/;
+    }
+
+    location /god-mode/ {
+        alias /opt/plane/apps/admin/build/client/;
+        try_files $uri $uri/ /god-mode/index.html;
+    }
+
+    location /god-mode {
+        return 301 /god-mode/;
+    }
+
+    location / {
+        root /opt/plane/apps/web/build/client;
+        try_files $uri $uri/ /index.html;
+    }
+}
+EOF
+ln -sf /etc/nginx/sites-available/plane.conf /etc/nginx/sites-enabled/plane.conf
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc

misc/tools.func

@@ -764,8 +764,11 @@ manage_tool_repository() {
     local distro_codename
     distro_codename=$(get_os_info codename)
 
-    # Suite mapping with fallback for newer releases not yet supported by upstream
+    if [[ "$distro_id" == "debian" && "$(dpkg --print-architecture)" == "arm64" ]]; then
-    if [[ "$distro_id" == "debian" ]]; then
+      distro_id="ubuntu" 
+      suite="noble"
+      repo_url="https://repo.mongodb.org/apt/ubuntu"
+    elif [[ "$distro_id" == "debian" ]]; then
       case "$distro_codename" in
       trixie | forky | sid)
         # Testing/unstable releases fallback to latest stable suite
@@ -6742,7 +6745,11 @@ setup_meilisearch() {
 
       # Stop service and update binary
       systemctl stop meilisearch
-      fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+      if [[ "$(arch_resolve)" == "arm64" ]]; then
+        fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "singlefile" "latest" "/usr/bin" "meilisearch-linux-aarch64"
+      else
+        fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+      fi
 
       # If migration needed and dump was created, remove old data and import dump
       if [[ "$NEEDS_MIGRATION" == "true" ]] && [[ -n "$DUMP_UID" ]]; then
@@ -6810,11 +6817,18 @@ setup_meilisearch() {
   # Fresh install
   msg_info "Setup MeiliSearch"
 
-  # Install binary
+  # Install binary (meilisearch publishes only an amd64 .deb; arm64 uses the raw linux-aarch64 binary)
-  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" || {
+  if [[ "$(arch_resolve)" == "arm64" ]]; then
-    msg_error "Failed to install MeiliSearch binary"
+    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "singlefile" "latest" "/usr/bin" "meilisearch-linux-aarch64" || {
-    return 250
+      msg_error "Failed to install MeiliSearch binary"
-  }
+      return 250
+    }
+  else
+    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" || {
+      msg_error "Failed to install MeiliSearch binary"
+      return 250
+    }
+  fi
 
   # Download default config
   curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml || {