Refactor bootstrap error handling with helper

Extract repeated fatal-error logic into a `_bootstrap_die` helper across alpine-install.func, build.func, and install.func. The helper uses `msg_error` when available, falling back to stderr, then exits with code 115. Inline error blocks are replaced with cleaner one-liner `|| _bootstrap_die` calls.

.github/dependabot.yml

@@ -0,0 +1,17 @@
+# Keeps the GitHub Actions referenced in .github/workflows up to date.
+# https://docs.github.com/code-security/dependabot/working-with-dependabot/dependabot-options-reference
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+    # One PR per week for all action bumps instead of one PR per action.
+    groups:
+      github-actions:
+        patterns:
+          - "*"

.github/workflows/auto-update-app-headers.yml

@@ -20,21 +20,21 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Generate a token for PR approval and merge
         id: generate-token-merge
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.APP_ID_APPROVE_AND_MERGE }}
           private-key: ${{ secrets.APP_KEY_APPROVE_AND_MERGE }}
 
       # Step 1: Checkout repository
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v7
 
       # Step 2: Disable file mode changes detection
       - name: Disable file mode changes

.github/workflows/autolabeler.yml

@@ -16,13 +16,13 @@ jobs:
       CONFIG_PATH: .github/autolabeler-config.json
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install dependencies
         run: npm install minimatch
 
       - name: Label PR based on file changes, title, and PR template
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs').promises;

.github/workflows/changelog-archive.yml

@@ -19,25 +19,25 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Generate a token for PR approval and merge
         id: generate-token-merge
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.APP_ID_APPROVE_AND_MERGE }}
           private-key: ${{ secrets.APP_KEY_APPROVE_AND_MERGE }}
 
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Archive old changelog entries
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs').promises;

.github/workflows/changelog-pr.yml

@@ -19,20 +19,20 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Generate a token for PR approval and merge
         id: generate-token-merge
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.APP_ID_APPROVE_AND_MERGE }}
           private-key: ${{ secrets.APP_KEY_APPROVE_AND_MERGE }}
 
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -53,7 +53,7 @@ jobs:
 
       - name: Get categorized pull requests
         id: get-categorized-prs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             async function main() {
@@ -213,7 +213,7 @@ jobs:
             return await main();
 
       - name: Update CHANGELOG.md
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs').promises;

.github/workflows/check-node-versions.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: main
 
@@ -242,7 +242,7 @@ jobs:
             checked=$((checked + 1))
 
             # Extract our NODE_VERSION
-            our_version=$(grep -oP 'NODE_VERSION="(\d+)"' "$script" | head -1 | grep -oP '\d+' || echo "")
+            our_version=$(grep -oP 'NODE_VERSION=\K"?\d+' "$script" | head -1 | grep -oP '\d+' || echo "")
             if [[ -z "$our_version" ]]; then
               if grep -q 'NODE_VERSION=\$(' "$script"; then
                 our_version="dynamic"

.github/workflows/close-invalid-pr-template.yml

@@ -15,7 +15,7 @@ jobs:
       contents: read
     steps:
       - name: Close PR if it does not follow the PR template
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const pr = context.payload.pull_request;
@@ -45,7 +45,7 @@ jobs:
             }
 
             const labels = pr.labels.map((label) => label.name);
-            const skipLabels = ["automated pr", "keep open"];
+            const skipLabels = ["automated pr", "keep-open"];
 
             if (skipLabels.some((label) => labels.includes(label))) {
               core.info(`PR #${prNumber} has a skip label (${labels.join(", ")}) — skipping template validation.`);
@@ -136,7 +136,7 @@ jobs:
               ``,
               `> Use the template sections, fill in the description, check all prerequisite boxes, and select at least one type of change.`,
               ``,
-              `Maintainers can add the \`keep open\` label to exempt a PR from this check.`,
+              `Maintainers can add the \`keep-open\` label to exempt a PR from this check.`,
               ``,
               `Thank you for contributing! 🙏`,
             ].join("\n");

.github/workflows/close-new-script-prs.yml

@@ -14,7 +14,7 @@ jobs:
       contents: read
     steps:
       - name: Close PR if unauthorized new script submission
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const pr = context.payload.pull_request;

.github/workflows/close-tteck-issues.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Auto-close if tteck script detected
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const issue = context.payload.issue;

.github/workflows/close_issue_in_dev.yaml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout target repo (merge commit)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: community-scripts/ProxmoxVE
           ref: ${{ github.event.pull_request.merge_commit_sha }}

.github/workflows/delete-merged-branches.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Delete branches of merged PRs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const owner = context.repo.owner;

.github/workflows/delete-pocketbase-entry-on-removal.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: self-hosted
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/github-release.yml

@@ -13,7 +13,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Clean CHANGELOG (remove HTML header)
         run: sed -n '/^## /,$p' CHANGELOG.md > changelog_cleaned.md

.github/workflows/lock-issue.yaml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Lock old issues and PRs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const daysBeforeLock = 7;

.github/workflows/pocketbase-ai-bot.yml

@@ -26,7 +26,7 @@ jobs:
     steps:
       - name: Mint GitHub App token (bot identity)
         id: app-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.PB_BOT_APP_ID }}
           private-key: ${{ secrets.PB_BOT_APP_PRIVATE_KEY }}

.github/workflows/push-json-to-pocketbase.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: self-hosted
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/stale_pr_close.yml

@@ -16,7 +16,7 @@ jobs:
       contents: read
     steps:
       - name: Handle stale PRs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const now = new Date();

.github/workflows/trigger_github_pages_redirect.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Create redirect page
         run: |
@@ -33,9 +33,9 @@ jobs:
           </html>
           EOF
 
-      - uses: actions/upload-pages-artifact@v3
+      - uses: actions/upload-pages-artifact@v5
         with:
           path: site
 
       - name: Deploy
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/update-script-timestamp-on-sh-change.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: self-hosted
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

CHANGELOG.md

@@ -508,6 +508,48 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-07-29
+
+## 2026-07-28
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Create search directory in wanderer-install.sh [@Isnubi](https://github.com/Isnubi) ([#16134](https://github.com/community-scripts/ProxmoxVE/pull/16134))
+    - npmplus: Remove duplicate msg_info for container recreation [@MickLesk](https://github.com/MickLesk) ([#16122](https://github.com/community-scripts/ProxmoxVE/pull/16122))
+    - fix Node.js version drift [@asylumexp](https://github.com/asylumexp) ([#16111](https://github.com/community-scripts/ProxmoxVE/pull/16111))
+    - UmlautAdaptarr: use the Debian 13 Microsoft repo with its 2025 signing key [@angusmaul](https://github.com/angusmaul) ([#16077](https://github.com/community-scripts/ProxmoxVE/pull/16077))
+    - fix(bazarr): store data in /var/lib/bazarr instead of inside /opt/bazarr [@angusmaul](https://github.com/angusmaul) ([#16098](https://github.com/community-scripts/ProxmoxVE/pull/16098))
+    - Cloudflare-DDNS: store API token in a 600 env file and build the binary at install time [@angusmaul](https://github.com/angusmaul) ([#16100](https://github.com/community-scripts/ProxmoxVE/pull/16100))
+
+  - #### ✨ New Features
+
+    - tools.func:  add nginx site helper and PHP socket resolver  [@MickLesk](https://github.com/MickLesk) ([#16118](https://github.com/community-scripts/ProxmoxVE/pull/16118))
+
+  - #### 💥 Breaking Changes
+
+    - Migrate Musicseerr to DroppedNeedle [@vhsdream](https://github.com/vhsdream) ([#15751](https://github.com/community-scripts/ProxmoxVE/pull/15751))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: fix read prompt input directly from /dev/tty [@MickLesk](https://github.com/MickLesk) ([#16126](https://github.com/community-scripts/ProxmoxVE/pull/16126))
+
+### 🧰 Tools
+
+  - actual-budget-prometheus-exporter ([#16109](https://github.com/community-scripts/ProxmoxVE/pull/16109))
+
+  - #### 🐞 Bug Fixes
+
+    - fix: prometheus-paperless-exporter incompatibility with paperless v3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16119](https://github.com/community-scripts/ProxmoxVE/pull/16119))
+
+### 📂 Github
+
+  - fix keep-open for close invalid pr [@asylumexp](https://github.com/asylumexp) ([#16105](https://github.com/community-scripts/ProxmoxVE/pull/16105))
+- Bump GitHub Actions across workflows  [@MickLesk](https://github.com/MickLesk) ([#16091](https://github.com/community-scripts/ProxmoxVE/pull/16091))
+
 ## 2026-07-27
 
 ### 🆕 New Scripts

ct/bazarr.sh

@@ -28,6 +28,31 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
+
+  if ! grep -qE -- "bazarr\.py.*[[:space:]](-c|--config)([[:space:]]|=)" /etc/systemd/system/bazarr.service 2>/dev/null; then
+    if [[ -d /opt/bazarr/data && ! -L /opt/bazarr/data && -n "$(ls -A /var/lib/bazarr/ 2>/dev/null)" ]]; then
+      msg_error "/opt/bazarr/data and /var/lib/bazarr both contain data - refusing to merge them. Keep the copy you want in /var/lib/bazarr, remove /opt/bazarr/data, then run the update again."
+      exit 1
+    fi
+
+    msg_info "Moving Bazarr data to /var/lib/bazarr"
+    systemctl stop bazarr
+    if [[ -L /opt/bazarr/data ]]; then
+      rm -f /opt/bazarr/data
+    elif [[ -d /opt/bazarr/data ]]; then
+      if ! cp -a /opt/bazarr/data/. /var/lib/bazarr/; then
+        systemctl start bazarr
+        msg_error "Could not copy /opt/bazarr/data to /var/lib/bazarr - nothing was removed."
+        exit 1
+      fi
+      rm -rf /opt/bazarr/data
+    fi
+    sed -i -E "s|^(ExecStart=.*bazarr\.py.*)$|\1 -c /var/lib/bazarr|" /etc/systemd/system/bazarr.service
+    systemctl daemon-reload
+    systemctl start bazarr
+    msg_ok "Moved Bazarr data to /var/lib/bazarr"
+  fi
+
   if check_for_gh_release "bazarr" "morpheus65535/bazarr"; then
     msg_info "Stopping Service"
     systemctl stop bazarr

ct/cloudflare-ddns.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-3}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 
@@ -24,11 +24,35 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [[ ! -f /etc/systemd/system/cloudflare-ddns.service ]]; then
+
+  if [[ ! -f /usr/local/bin/ddns ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  msg_error "There is no update function for ${APP}."
+
+  if check_for_gh_release "cloudflare-ddns" "favonia/cloudflare-ddns"; then
+    msg_info "Stopping Service"
+    systemctl stop cloudflare-ddns
+    msg_ok "Stopped Service"
+
+    setup_go
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "cloudflare-ddns" "favonia/cloudflare-ddns" "tarball"
+
+    msg_info "Updating ${APP}"
+    cd /opt/cloudflare-ddns
+    export CGO_ENABLED=0 GOOS=linux
+    $STD go build -trimpath -ldflags="-s -w" -o /usr/local/bin/ddns ./cmd/ddns
+    msg_ok "Updated ${APP}"
+
+    msg_info "Removing Build Dependencies"
+    rm -rf /usr/local/go /usr/local/bin/go /usr/local/bin/gofmt /root/go /root/.cache/go-build /opt/cloudflare-ddns
+    msg_ok "Removed Build Dependencies"
+
+    msg_info "Starting Service"
+    systemctl start cloudflare-ddns
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
   exit
 }
 

ct/cross-seed.sh

@@ -25,7 +25,7 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  NODE_VERSION="24" setup_nodejs
+  NODE_VERSION="26" setup_nodejs
   ensure_dependencies build-essential
 
   if command -v cross-seed &>/dev/null; then

ct/dispatcharr.sh

@@ -100,7 +100,7 @@ server {
     }
 }
 EOF
-    systemctl reload nginx
+    nginx_enable_site dispatcharr.conf
     msg_ok "Migrated Nginx Configuration"
   fi
 

ct/docmost.sh

@@ -27,8 +27,8 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  if ! command -v node >/dev/null || [[ "$(/usr/bin/env node -v | grep -oP '^v\K[0-9]+')" != "22" ]]; then
+  if ! command -v node >/dev/null || [[ "$(/usr/bin/env node -v | grep -oP '^v\K[0-9]+')" != "26" ]]; then
-    NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+    NODE_VERSION="26" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
   fi
   export NODE_OPTIONS="--max_old_space_size=4096"
 

ct/droppedneedle.sh

@@ -0,0 +1,147 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: michelroegl-brunner | Co-Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://droppedneedle.com/ | Github: https://github.com/DroppedNeedle/DroppedNeedle
+
+APP="DroppedNeedle"
+var_tags="${var_tags:-arr;media}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/droppedneedle && ! -d /opt/musicseerr ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  MIGRATING=false
+  [[ -d /opt/musicseerr ]] && MIGRATING=true
+
+  if [[ "$MIGRATING" == "true" ]] || check_for_gh_release "droppedneedle" "DroppedNeedle/DroppedNeedle"; then
+    if [[ "$MIGRATING" == "true" ]]; then
+      msg_warn "Migrating Musicseerr to DroppedNeedle"
+      msg_info "Stopping Musicseerr Service"
+      systemctl disable -q --now musicseerr
+      msg_ok "Stopped Musicseerr Service"
+      DATA_DIR="/opt/musicseerr/backend"
+    else
+      msg_info "Stopping Service"
+      systemctl stop droppedneedle
+      msg_ok "Stopped Service"
+      DATA_DIR="/opt/droppedneedle/backend"
+    fi
+
+    create_backup "$DATA_DIR/config" "$DATA_DIR/cache"
+
+    PYTHON_VERSION="3.13" setup_uv
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "droppedneedle" "DroppedNeedle/DroppedNeedle" "tarball"
+    NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
+
+    msg_info "Building Frontend"
+    cd /opt/droppedneedle/frontend
+    export NODE_OPTIONS="--max-old-space-size=3072"
+    rm -rf node_modules build
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm run build
+    msg_ok "Built Frontend"
+
+    msg_info "Updating Application"
+    mkdir -p /opt/droppedneedle/backend/config /opt/droppedneedle/backend/cache
+    $STD uv venv --clear /opt/droppedneedle/venv
+    $STD uv pip install -r /opt/droppedneedle/backend/requirements.txt --python=/opt/droppedneedle/venv/bin/python
+    rm -rf /opt/droppedneedle/backend/static
+    cp -r /opt/droppedneedle/frontend/build /opt/droppedneedle/backend/static
+    msg_ok "Updated Application"
+
+    restore_backup
+
+    if [[ "$MIGRATING" == "true" ]]; then
+      msg_info "Migrating Musicseerr Data"
+      rm -rf /opt/droppedneedle/backend/config /opt/droppedneedle/backend/cache
+      cp -a /opt/musicseerr/backend/config /opt/droppedneedle/backend/config
+      cp -a /opt/musicseerr/backend/cache /opt/droppedneedle/backend/cache
+      msg_ok "Migrated Musicseerr Data"
+
+      msg_info "Replacing systemd Service"
+      cat <<EOF >/etc/systemd/system/droppedneedle.service
+[Unit]
+Description=DroppedNeedle Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/droppedneedle/backend
+Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
+Environment=PORT=8688
+# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
+ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+      rm -f /etc/systemd/system/musicseerr.service
+      msg_ok "Replaced systemd Service"
+    elif ! grep -q 'SLSKD' /etc/systemd/system/droppedneedle.service; then
+      sed -i '\|=8688$|a# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>' /etc/systemd/system/droppedneedle.service
+    fi
+
+    systemctl daemon-reload
+    if [[ "$MIGRATING" == "true" ]]; then
+      msg_info "Enabling DroppedNeedle Service"
+      systemctl enable -q --now droppedneedle
+      msg_ok "Enabled DroppedNeedle Service"
+
+      sed -i 's/musicseerr/droppedneedle/g' /bin/update
+      rm -rf /opt/musicseerr
+
+      msg_info "Waiting up to 1min for backend to boot and retrieve Admin Username"
+      for i in {1..30}; do
+        username=$(/opt/droppedneedle/venv/bin/python -c 'import sqlite3; conn = sqlite3.connect("/opt/droppedneedle/backend/cache/library.db"); c = conn.cursor(); c.execute("SELECT username FROM auth_users WHERE role=\"admin\""); admin=c.fetchone(); print(admin[0]) if (admin and admin[0]) else None' 2>/dev/null || true)
+        if [[ -n "$username" ]]; then
+          break
+        fi
+        sleep 2
+      done
+      if [[ -n "$username" ]]; then
+        msg_ok "Admin Username retrieved (Admin Username is: ${username})"
+      else
+        msg_warn "Failed to retrieve Admin Username. The backend might still be starting."
+      fi
+      msg_ok "Migrated successfully!"
+    else
+      msg_info "Starting Service"
+      systemctl start droppedneedle
+      msg_ok "Started Service"
+      msg_ok "Updated successfully!"
+    fi
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8688${CL}"

ct/feishin.sh

@@ -59,9 +59,7 @@ function update_script() {
 
     envsubst </opt/feishin/settings.js.template >/etc/nginx/conf.d/settings.js
     envsubst '${PUBLIC_PATH}' </opt/feishin/ng.conf.template >/etc/nginx/sites-available/feishin
-    ln -sf /etc/nginx/sites-available/feishin /etc/nginx/sites-enabled/feishin
+    nginx_enable_site feishin
-    rm -f /etc/nginx/sites-enabled/default
-    systemctl restart nginx
     msg_ok "Published Web Assets"
 
     msg_ok "Updated successfully!"

ct/headers/droppedneedle

@@ -0,0 +1,6 @@
+    ____                                  ___   __              ____   
+   / __ \_________  ____  ____  ___  ____/ / | / /__  ___  ____/ / /__ 
+  / / / / ___/ __ \/ __ \/ __ \/ _ \/ __  /  |/ / _ \/ _ \/ __  / / _ \
+ / /_/ / /  / /_/ / /_/ / /_/ /  __/ /_/ / /|  /  __/  __/ /_/ / /  __/
+/_____/_/   \____/ .___/ .___/\___/\__,_/_/ |_/\___/\___/\__,_/_/\___/ 
+                /_/   /_/                                              

ct/musicseerr.sh

@@ -1,85 +1,17 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
-# Author: michelroegl-brunner
+# Author: michelroegl-brunner | Co-Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://musicseerr.com/ | Github: https://github.com/HabiRabbu/Musicseerr
 
 APP="MusicSeerr"
-var_tags="${var_tags:-arr;media}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
 variables
 color
-catch_errors
 
-function update_script() {
+msg_error "This script is no longer available."
-  header_info
+msg_warn "MusicSeerr has been renamed to DroppedNeedle."
-  check_container_storage
+msg_warn "Run the DroppedNeedle script to migrate an existing installation:"
-  check_container_resources
+echo 'bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/droppedneedle.sh)"'
-
+exit 1
-  if [[ ! -d /opt/musicseerr ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "musicseerr" "HabiRabbu/Musicseerr"; then
-    msg_info "Stopping Service"
-    systemctl stop musicseerr
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Data"
-    cp -a /opt/musicseerr/backend/config /opt/musicseerr_config_backup
-    cp -a /opt/musicseerr/backend/cache /opt/musicseerr_cache_backup
-    msg_ok "Backed up Data"
-
-    PYTHON_VERSION="3.13" setup_uv
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "musicseerr" "HabiRabbu/Musicseerr" "tarball"
-    NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
-
-    msg_info "Building Frontend"
-    cd /opt/musicseerr/frontend
-    export NODE_OPTIONS="--max-old-space-size=3072"
-    rm -rf node_modules build
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm run build
-    msg_ok "Built Frontend"
-
-    msg_info "Updating Application"
-    mkdir -p /opt/musicseerr/backend/config /opt/musicseerr/backend/cache
-    $STD uv venv --clear /opt/musicseerr/venv
-    $STD uv pip install -r /opt/musicseerr/backend/requirements.txt --python=/opt/musicseerr/venv/bin/python
-    rm -rf /opt/musicseerr/backend/static
-    cp -r /opt/musicseerr/frontend/build /opt/musicseerr/backend/static
-    msg_ok "Updated Application"
-
-    msg_info "Restoring Data"
-    rm -rf /opt/musicseerr/backend/config /opt/musicseerr/backend/cache
-    cp -a /opt/musicseerr_config_backup/. /opt/musicseerr/backend/config/
-    cp -a /opt/musicseerr_cache_backup/. /opt/musicseerr/backend/cache/
-    rm -rf /opt/musicseerr_config_backup /opt/musicseerr_cache_backup
-    msg_ok "Restored Data"
-
-    msg_info "Starting Service"
-    systemctl start musicseerr
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8688${CL}"

ct/npmplus.sh

@@ -21,8 +21,6 @@ color
 catch_errors
 
 function update_script() {
-  header_info "$APP"
-
   msg_info "Updating Alpine OS"
   $STD apk -U upgrade
   msg_ok "System updated"
@@ -30,10 +28,8 @@ function update_script() {
   msg_info "Pulling latest NPMplus container image"
   cd /opt
   $STD docker compose pull
-  msg_info "Recreating container"
   $STD docker compose up -d
   msg_ok "Updated NPMplus container"
-
   msg_ok "Updated successfully!"
   exit
 }

ct/outline.sh

@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
+  NODE_VERSION="26" NODE_MODULE="corepack" setup_nodejs
 
   if check_for_gh_release "outline" "outline/outline"; then
     msg_info "Stopping Services"

ct/oxicloud.sh

@@ -31,6 +31,8 @@ function update_script() {
     exit
   fi
 
+  NODE_VERSION="26" setup_nodejs
+
   if check_for_gh_release "OxiCloud" "DioCrafts/OxiCloud"; then
     msg_info "Stopping OxiCloud"
     systemctl stop oxicloud

ct/paymenter.sh

@@ -34,8 +34,9 @@ function update_script() {
   if [[ "$CURRENT_PHP" != "8.3" ]]; then
     PHP_VERSION="8.3" PHP_FPM="YES" setup_php
     setup_composer
-    sed -i 's|php8\.2-fpm\.sock|php8.3-fpm.sock|g' /etc/nginx/sites-available/paymenter.conf
+    PHP_SOCK=$(get_php_fpm_socket)
-    $STD systemctl reload nginx
+    sed -i "s|fastcgi_pass unix:.*|fastcgi_pass unix:${PHP_SOCK};|" /etc/nginx/sites-available/paymenter.conf
+    nginx_enable_site paymenter.conf
   fi
 
   if check_for_gh_release "paymenter" "paymenter/paymenter"; then

ct/ps5-mqtt.sh

@@ -28,6 +28,9 @@ function update_script() {
     msg_error "No ${APP} installation found!"
     exit
   fi
+
+  NODE_VERSION="24" NODE_MODULE="playactor" setup_nodejs
+
   if check_for_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt"; then
     msg_info "Stopping service"
     systemctl stop ps5-mqtt

ct/rackula.sh

@@ -62,9 +62,9 @@ function update_script() {
     msg_ok "Updated Configuration"
 
     msg_info "Starting Services"
-    $STD nginx -t
     systemctl daemon-reload
-    systemctl start nginx rackula-api
+    nginx_enable_site rackula
+    systemctl start rackula-api
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/romm.sh

@@ -75,7 +75,7 @@ function update_script() {
       systemctl reload angie
     elif [[ -f /etc/nginx/sites-available/romm ]]; then
       sed -i "s|alias .*/library/;|alias ${ROMM_BASE}/library/;|" /etc/nginx/sites-available/romm
-      systemctl reload nginx
+      nginx_enable_site romm
     fi
     msg_ok "Updated ROMM"
 

ct/sparkyfitness.sh

@@ -93,7 +93,8 @@ EOF
     msg_ok "Refreshed SparkyFitness Service"
 
     msg_info "Starting Services"
-    $STD systemctl start sparkyfitness-server nginx
+    $STD systemctl start sparkyfitness-server
+    nginx_enable_site sparkyfitness
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/sync-in.sh

@@ -30,6 +30,8 @@ function update_script() {
     exit
   fi
 
+  NODE_VERSION="24" setup_nodejs
+
   if check_for_gh_release "sync-in" "Sync-in/server"; then
     msg_info "Stopping Service"
     systemctl stop sync-in

ct/termix.sh

@@ -30,7 +30,7 @@ function update_script() {
     exit
   fi
 
-  NODE_VERSION="24" setup_nodejs
+  NODE_VERSION="26" setup_nodejs
 
   if check_for_gh_tag "guacd" "apache/guacamole-server"; then
     msg_info "Stopping guacd"

ct/umlautadaptarr.sh

@@ -29,6 +29,18 @@ function update_script() {
     exit
   fi
 
+  if grep -qs "packages.microsoft.com/debian/12" /etc/apt/sources.list.d/microsoft*.sources; then
+    msg_info "Migrating Microsoft Repository to Debian 13"
+    setup_deb822_repo \
+      "microsoft" \
+      "https://packages.microsoft.com/keys/microsoft-2025.asc" \
+      "https://packages.microsoft.com/debian/13/prod/" \
+      "trixie" \
+      "main"
+    rm -f /usr/share/keyrings/microsoft-prod.gpg
+    msg_ok "Migrated Microsoft Repository to Debian 13"
+  fi
+
   if check_for_gh_release "UmlautAdaptarr" "PCJones/Umlautadaptarr"; then
     msg_info "Stopping Service"
     systemctl stop umlautadaptarr

install/2fauth-install.sh

@@ -49,6 +49,7 @@ chmod -R 755 /opt/2fauth
 msg_ok "Setup 2fauth"
 
 msg_info "Configure Service"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/conf.d/2fauth.conf
 server {
         listen 80;
@@ -67,7 +68,7 @@ server {
         error_page 404 /index.php;
 
         location ~ \.php\$ {
-                fastcgi_pass unix:/var/run/php/php${PHP_VERSION}-fpm.sock;
+                fastcgi_pass unix:${PHP_SOCK};
                 fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
                 include fastcgi_params;
         }

install/affine-install.sh

@@ -207,9 +207,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/affine.conf /etc/nginx/sites-enabled/
+nginx_enable_site affine.conf
-rm -f /etc/nginx/sites-enabled/default
-systemctl enable -q --now nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/babybuddy-install.sh

@@ -89,10 +89,7 @@ server {
 }
 EOF
 
-ln -sf /etc/nginx/sites-available/babybuddy /etc/nginx/sites-enabled/babybuddy
+nginx_enable_site babybuddy
-rm /etc/nginx/sites-enabled/default
-systemctl enable -q --now nginx
-service nginx reload
 msg_ok "Configured NGINX"
 
 motd_ssh

install/bar-assistant-install.sh

@@ -73,6 +73,7 @@ $STD npm run build
 msg_ok "Installed Salt Rim"
 
 msg_info "Creating Service"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/barassistant.conf
 server {
     listen 80 default_server;
@@ -126,7 +127,7 @@ server {
     error_page 404 /index.php;
 
     location ~ ^/index\.php(/|$) {
-        fastcgi_pass unix:/var/run/php/php$PHPVER-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
         include fastcgi_params;
         fastcgi_hide_header X-Powered-By;
@@ -148,9 +149,7 @@ server {
 }
 EOF
 
-ln -s /etc/nginx/sites-available/barassistant.conf /etc/nginx/sites-enabled/
+nginx_enable_site barassistant.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Created Service"
 
 motd_ssh

install/bazarr-install.sh

@@ -36,7 +36,7 @@ UMask=0002
 Restart=on-failure
 RestartSec=5
 Type=simple
-ExecStart=/opt/bazarr/venv/bin/python3 /opt/bazarr/bazarr.py
+ExecStart=/opt/bazarr/venv/bin/python3 /opt/bazarr/bazarr.py -c /var/lib/bazarr
 KillSignal=SIGINT
 TimeoutStopSec=20
 SyslogIdentifier=bazarr

install/checkmate-install.sh

@@ -122,9 +122,7 @@ server {
   }
 }
 EOF
-ln -sf /etc/nginx/sites-available/checkmate /etc/nginx/sites-enabled/checkmate
+nginx_enable_site checkmate
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Configured Nginx Reverse Proxy"
 
 motd_ssh

install/cloudflare-ddns-install.sh

@@ -13,8 +13,6 @@ setting_up_container
 network_check
 update_os
 
-setup_go
-
 var_cf_api_token="default"
 read -rp "${TAB3}Enter the Cloudflare API token: " var_cf_api_token
 
@@ -53,23 +51,50 @@ while true; do
 done
 msg_ok "Configured Application"
 
+setup_go
+fetch_and_deploy_gh_release "cloudflare-ddns" "favonia/cloudflare-ddns" "tarball"
+
+msg_info "Building ${APPLICATION}"
+cd /opt/cloudflare-ddns
+export CGO_ENABLED=0 GOOS=linux
+$STD go build -trimpath -ldflags="-s -w" -o /usr/local/bin/ddns ./cmd/ddns
+msg_ok "Built ${APPLICATION}"
+
+# The binary is statically linked (CGO_ENABLED=0), so Go is only a build-time
+# dependency. Removing it keeps the container small; update_script reinstalls it
+# via setup_go when a rebuild is needed.
+msg_info "Removing Build Dependencies"
+rm -rf /usr/local/go /usr/local/bin/go /usr/local/bin/gofmt /root/go /root/.cache/go-build /opt/cloudflare-ddns
+msg_ok "Removed Build Dependencies"
+
 msg_info "Setting up service"
-mkdir -p /root/go
+useradd --system --no-create-home --shell /usr/sbin/nologin cloudflare-ddns 2>/dev/null || true
+cat <<EOF >/etc/cloudflare-ddns.env
+CLOUDFLARE_API_TOKEN=${var_cf_api_token}
+DOMAINS=${var_cf_domains}
+PROXIED=${var_cf_proxied}
+IP6_PROVIDER=${var_cf_ip6_provider}
+EOF
+chown root:root /etc/cloudflare-ddns.env
+chmod 600 /etc/cloudflare-ddns.env
 cat <<EOF >/etc/systemd/system/cloudflare-ddns.service
 [Unit]
-Description=Cloudflare DDNS Service (Go run)
+Description=Cloudflare DDNS Service
-After=network.target
+After=network-online.target
+Wants=network-online.target
 
 [Service]
-Environment="CLOUDFLARE_API_TOKEN=${var_cf_api_token}"
+Type=simple
-Environment="DOMAINS=${var_cf_domains}"
+User=cloudflare-ddns
-Environment="PROXIED=${var_cf_proxied}"
+Group=cloudflare-ddns
-Environment="IP6_PROVIDER=${var_cf_ip6_provider}"
+EnvironmentFile=/etc/cloudflare-ddns.env
-Environment="GOPATH=/root/go"
+ExecStart=/usr/local/bin/ddns
-Environment="GOCACHE=/tmp/go-build"
-ExecStart=/usr/local/bin/go run github.com/favonia/cloudflare-ddns/cmd/ddns@latest
 Restart=always
 RestartSec=300
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+PrivateTmp=true
 
 [Install]
 WantedBy=multi-user.target

install/cross-seed-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y build-essential
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="26" setup_nodejs
 
 msg_info "Setup Cross-Seed"
 $STD npm install cross-seed@latest -g

install/databasus-install.sh

@@ -185,11 +185,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/databasus /etc/nginx/sites-enabled/databasus
+nginx_enable_site databasus
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-$STD systemctl enable -q --now nginx
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/dawarich-install.sh

@@ -174,9 +174,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/dawarich.conf /etc/nginx/sites-enabled/
+nginx_enable_site dawarich.conf
-rm -f /etc/nginx/sites-enabled/default
-systemctl enable -q --now nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/discourse-install.sh

@@ -207,10 +207,7 @@ server {
   }
 }
 EOF
-ln -sf /etc/nginx/sites-available/discourse /etc/nginx/sites-enabled/discourse
+nginx_enable_site discourse
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl enable --now nginx
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/dispatcharr-install.sh

@@ -139,9 +139,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/dispatcharr.conf /etc/nginx/sites-enabled/dispatcharr.conf
+nginx_enable_site dispatcharr.conf
-rm -f /etc/nginx/sites-enabled/default
-systemctl restart nginx
 msg_ok "Configured Nginx"
 
 msg_info "Creating Services"

install/docmost-install.sh

@@ -19,7 +19,7 @@ $STD apt install -y \
   make
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+NODE_VERSION="26" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="docmost_db" PG_DB_USER="docmost_user" setup_postgresql_db
 fetch_and_deploy_gh_release "docmost" "docmost/docmost" "tarball"

install/droppedneedle-install.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: michelroegl-brunner | Co-Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://droppedneedle.com/ | Github: https://github.com/DroppedNeedle/DroppedNeedle
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+PYTHON_VERSION="3.13" setup_uv
+fetch_and_deploy_gh_release "droppedneedle" "DroppedNeedle/DroppedNeedle" "tarball"
+NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
+
+msg_info "Building Frontend"
+cd /opt/droppedneedle/frontend
+export NODE_OPTIONS="--max-old-space-size=3072"
+$STD pnpm install --frozen-lockfile
+$STD pnpm run build
+msg_ok "Built Frontend"
+
+msg_info "Setting up Application"
+mkdir -p /opt/droppedneedle/backend/config /opt/droppedneedle/backend/cache
+$STD uv venv /opt/droppedneedle/venv
+$STD uv pip install -r /opt/droppedneedle/backend/requirements.txt --python=/opt/droppedneedle/venv/bin/python
+rm -rf /opt/droppedneedle/backend/static
+cp -r /opt/droppedneedle/frontend/build /opt/droppedneedle/backend/static
+msg_ok "Set up Application"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/droppedneedle.service
+[Unit]
+Description=DroppedNeedle Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/droppedneedle/backend
+Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
+Environment=PORT=8688
+# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
+ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now droppedneedle
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/espconnect-install.sh

@@ -46,11 +46,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/espconnect /etc/nginx/sites-enabled/espconnect
+nginx_enable_site espconnect
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q nginx
-systemctl restart nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/excalidash-install.sh

@@ -108,9 +108,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/excalidash /etc/nginx/sites-enabled/excalidash
+nginx_enable_site excalidash
-rm -f /etc/nginx/sites-enabled/default
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 msg_info "Creating Service"

install/feishin-install.sh

@@ -57,10 +57,7 @@ set +a
 envsubst </opt/feishin/settings.js.template >/etc/nginx/conf.d/settings.js
 envsubst '${PUBLIC_PATH}' </opt/feishin/ng.conf.template >/etc/nginx/sites-available/feishin
 
-ln -sf /etc/nginx/sites-available/feishin /etc/nginx/sites-enabled/feishin
+nginx_enable_site feishin
-rm -f /etc/nginx/sites-enabled/default
-systemctl enable -q --now nginx
-systemctl reload nginx
 msg_ok "Published Web Assets"
 
 motd_ssh

install/geopulse-install.sh

@@ -178,10 +178,7 @@ server {
     error_log /var/log/geopulse/nginx/error.log;
 }
 EOF
-ln -sf /etc/nginx/sites-available/geopulse.conf /etc/nginx/sites-enabled/
+nginx_enable_site geopulse.conf
-rm -f /etc/nginx/sites-enabled/default
-systemctl enable -q --now nginx
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 msg_info "Creating Admin Helper"

install/grav-install.sh

@@ -26,9 +26,7 @@ chown -R www-data:www-data /opt/grav
 
 msg_info "Configuring Nginx"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_FPM_SOCK=$(find /run/php -maxdepth 1 -name "php*-fpm.sock" -type s | sort -V | tail -1)
+PHP_FPM_SOCK=$(get_php_fpm_socket)
-unlink /etc/nginx/sites-enabled/default
-rm -f /etc/nginx/sites-available/default
 cat <<EOF >/etc/nginx/sites-available/grav
 server {
     listen 80;
@@ -99,11 +97,8 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/grav /etc/nginx/sites-enabled/grav
 systemctl enable -q --now php${PHP_VER}-fpm
-$STD nginx -t
+nginx_enable_site grav
-systemctl enable -q --now nginx
-$STD nginx -s reload
 msg_ok "Configured Nginx"
 
 motd_ssh

install/investbrain-install.sh

@@ -115,6 +115,7 @@ chmod -R 775 /opt/investbrain/bootstrap/cache
 msg_ok "Installed Investbrain"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/investbrain.conf
 server {
     listen 8000 default_server;
@@ -135,7 +136,7 @@ server {
     }
 
     location ~ \.php\$ {
-        fastcgi_pass unix:/var/run/php/php${PHP_VERSION}-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
         include fastcgi_params;
         fastcgi_hide_header X-Powered-By;
@@ -150,9 +151,7 @@ server {
     access_log /var/log/nginx/investbrain_access.log;
 }
 EOF
-ln -sf /etc/nginx/sites-available/investbrain.conf /etc/nginx/sites-enabled/
+nginx_enable_site investbrain.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 msg_info "Setting up Supervisor"

install/invoiceninja-install.sh

@@ -110,6 +110,7 @@ chown -R www-data:www-data /opt/invoiceninja
 msg_ok "Set up Database"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<'EOF' >/etc/nginx/sites-available/invoiceninja
 server {
     listen 8080;
@@ -130,7 +131,7 @@ server {
     }
 
     location = /index.php {
-        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
+        fastcgi_pass unix:__PHP_SOCK__;
         fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
         include fastcgi_params;
         fastcgi_param HTTP_X_FORWARDED_HOST $http_host;
@@ -151,9 +152,8 @@ server {
 }
 EOF
 
-ln -sf /etc/nginx/sites-available/invoiceninja /etc/nginx/sites-enabled/
+sed -i "s|__PHP_SOCK__|${PHP_SOCK}|" /etc/nginx/sites-available/invoiceninja
-rm -f /etc/nginx/sites-enabled/default
+nginx_enable_site invoiceninja
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 msg_info "Setting up Queue Worker"

install/invoiceshelf-install.sh

@@ -56,10 +56,11 @@ msg_ok "Set up InvoiceShelf"
 
 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
     root * /opt/invoiceshelf/public
-    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
+    php_fastcgi unix/${PHP_SOCK}
     file_server
     encode gzip
 }

install/kitchenowl-install.sh

@@ -86,7 +86,6 @@ systemctl enable -q --now kitchenowl
 msg_ok "Created and Started Service"
 
 msg_info "Configuring Nginx"
-rm -f /etc/nginx/sites-enabled/default
 cat <<'EOF' >/etc/nginx/sites-available/kitchenowl.conf
 server {
     listen 80;
@@ -134,9 +133,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/kitchenowl.conf /etc/nginx/sites-enabled/
+nginx_enable_site kitchenowl.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/koel-install.sh

@@ -129,6 +129,7 @@ $STD systemctl restart php8.4-fpm
 msg_ok "Tuned PHP-FPM"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<'EOF' >/etc/nginx/sites-available/koel
 server {
     listen 80;
@@ -156,7 +157,7 @@ server {
 
     location ~ \.php$ {
         try_files $uri $uri/ /index.php?$args;
-        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
+        fastcgi_pass unix:__PHP_SOCK__;
         fastcgi_index index.php;
         fastcgi_split_path_info ^(.+\.php)(/.+)$;
         fastcgi_intercept_errors on;
@@ -171,9 +172,8 @@ server {
     }
 }
 EOF
-rm -f /etc/nginx/sites-enabled/default
+sed -i "s|__PHP_SOCK__|${PHP_SOCK}|" /etc/nginx/sites-available/koel
-ln -sf /etc/nginx/sites-available/koel /etc/nginx/sites-enabled/koel
+nginx_enable_site koel
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 msg_info "Setting up Cron Job"

install/librenms-install.sh

@@ -80,7 +80,7 @@ sed -i "s/listen = \/run\/php\/php8.4-fpm.sock/listen = \/run\/php-fpm-librenms.
 msg_ok "Configured PHP-FPM"
 
 msg_info "Configure Nginx"
-cat <<EOF >/etc/nginx/sites-enabled/librenms
+cat <<EOF >/etc/nginx/sites-available/librenms
 server {
  listen      80;
  server_name ${LOCAL_IP};
@@ -103,8 +103,7 @@ server {
  }
 }
 EOF
-rm /etc/nginx/sites-enabled/default
+nginx_enable_site librenms
-$STD systemctl reload nginx
 systemctl restart php8.4-fpm
 msg_ok "Configured Nginx"
 

install/linkding-install.sh

@@ -115,10 +115,8 @@ server {
     }
 }
 EOF
-$STD rm -f /etc/nginx/sites-enabled/default
+systemctl enable -q --now linkding linkding-tasks
-$STD ln -sf /etc/nginx/sites-available/linkding /etc/nginx/sites-enabled/linkding
+nginx_enable_site linkding
-systemctl enable -q --now nginx linkding linkding-tasks
-systemctl restart nginx
 msg_ok "Created Services"
 
 motd_ssh

install/lychee-install.sh

@@ -56,10 +56,11 @@ chown -R www-data:www-data /opt/lychee
 
 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
     root * /opt/lychee/public
-    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
+    php_fastcgi unix/${PHP_SOCK}
     file_server
     encode gzip
 }

install/manyfold-install.sh

@@ -134,9 +134,7 @@ server {
     }
 }
 EOF
-ln -s /etc/nginx/sites-available/manyfold.conf /etc/nginx/sites-enabled/
+nginx_enable_site manyfold.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Created Services"
 
 motd_ssh

install/mastodon-install.sh

@@ -262,12 +262,8 @@ server {
   }
 }
 EOF
-ln -sf /etc/nginx/sites-available/mastodon /etc/nginx/sites-enabled/mastodon
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
 systemctl enable -q --now redis-server
-systemctl enable -q --now nginx
+nginx_enable_site mastodon
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/matomo-install.sh

@@ -45,12 +45,13 @@ msg_ok "Set up Matomo"
 
 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
     root * /opt/matomo
     @blocked path /config /config/* /tmp /tmp/* /.* /.*/*
     respond @blocked 403
-    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
+    php_fastcgi unix/${PHP_SOCK}
     file_server
     encode gzip
 }

install/musicseerr-install.sh

@@ -1,59 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: michelroegl-brunner
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://musicseerr.com/ | Github: https://github.com/HabiRabbu/Musicseerr
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PYTHON_VERSION="3.13" setup_uv
-fetch_and_deploy_gh_release "musicseerr" "HabiRabbu/Musicseerr" "tarball"
-NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
-
-msg_info "Building Frontend"
-cd /opt/musicseerr/frontend
-export NODE_OPTIONS="--max-old-space-size=3072"
-$STD pnpm install --frozen-lockfile
-$STD pnpm run build
-msg_ok "Built Frontend"
-
-msg_info "Setting up Application"
-mkdir -p /opt/musicseerr/backend/config /opt/musicseerr/backend/cache
-$STD uv venv /opt/musicseerr/venv
-$STD uv pip install -r /opt/musicseerr/backend/requirements.txt --python=/opt/musicseerr/venv/bin/python
-rm -rf /opt/musicseerr/backend/static
-cp -r /opt/musicseerr/frontend/build /opt/musicseerr/backend/static
-msg_ok "Set up Application"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/musicseerr.service
-[Unit]
-Description=MusicSeerr Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/musicseerr/backend
-Environment=ROOT_APP_DIR=/opt/musicseerr/backend
-Environment=PORT=8688
-ExecStart=/opt/musicseerr/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now musicseerr
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/netboot-xyz-install.sh

@@ -59,7 +59,6 @@ USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-multiarch-im
 USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-checksums" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-sha256-checksums.txt"
 
 msg_info "Configuring Webserver"
-rm -f /etc/nginx/sites-enabled/default
 cat <<'EOF' >/etc/nginx/sites-available/netboot-xyz
 server {
     listen 80 default_server;
@@ -83,8 +82,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/netboot-xyz /etc/nginx/sites-enabled/netboot-xyz
+nginx_enable_site netboot-xyz
-$STD systemctl reload nginx
 msg_ok "Configured Webserver"
 
 msg_info "Configuring TFTP Server"

install/omnitools-install.sh

@@ -55,11 +55,7 @@ server {
 }
 EOF
 
-ln -sf /etc/nginx/sites-available/omnitools /etc/nginx/sites-enabled/omnitools
+nginx_enable_site omnitools
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now nginx
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/ots-install.sh

@@ -62,9 +62,7 @@ server {
 }
 EOF
 
-ln -s /etc/nginx/sites-available/ots.conf /etc/nginx/sites-enabled/
+nginx_enable_site ots.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Configured nginx"
 
 msg_info "Creating Services"

install/outline-install.sh

@@ -20,7 +20,7 @@ $STD apt install -y \
   redis
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
+NODE_VERSION="26" NODE_MODULE="corepack" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="outline" PG_DB_USER="outline" setup_postgresql_db
 

install/oxicloud-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y build-essential
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="26" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="oxicloud" PG_DB_USER="oxicloud" setup_postgresql_db
 fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "tarball" "latest" "/opt/oxicloud"

install/paymenter-install.sh

@@ -57,6 +57,7 @@ $STD php artisan app:user:create paymenter admin admin@paymenter.org paymenter 1
 msg_ok "Created Admin User"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/paymenter.conf
 server {
     listen 80;
@@ -72,7 +73,7 @@ server {
 
     location ~ \.php\$ {
         include snippets/fastcgi-php.conf;
-        fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
         include fastcgi_params;
     }
@@ -82,9 +83,7 @@ server {
     }
 }
 EOF
-ln -s /etc/nginx/sites-available/paymenter.conf /etc/nginx/sites-enabled/
+nginx_enable_site paymenter.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 chown -R www-data:www-data /opt/paymenter/*
 msg_ok "Configured Nginx"
 

install/plane-install.sh

@@ -376,9 +376,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/plane.conf /etc/nginx/sites-enabled/plane.conf
+nginx_enable_site plane.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/postiz-install.sh

@@ -236,11 +236,7 @@ server {
   }
 }
 EOF
-ln -sf /etc/nginx/sites-available/postiz /etc/nginx/sites-enabled/postiz
+nginx_enable_site postiz
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q nginx
-systemctl reload -q nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/poznote-install.sh

@@ -29,6 +29,7 @@ chown -R www-data:www-data /var/www/html
 msg_ok "Deployed Poznote"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/poznote
 server {
     listen 8040;
@@ -41,7 +42,7 @@ server {
 
     location ~ \.php$ {
         include fastcgi_params;
-        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
         fastcgi_param DOCUMENT_ROOT \$document_root;
     }
@@ -51,11 +52,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/poznote /etc/nginx/sites-enabled/poznote
+nginx_enable_site poznote
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now nginx
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/privatebin-install.sh

@@ -37,6 +37,7 @@ systemctl restart php8.2-fpm
 msg_ok "Configured PHP"
 
 msg_info "Configuring Universal Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/privatebin.conf
 server {
     listen 80 default_server;
@@ -60,7 +61,7 @@ server {
 
     location ~ \.php\$ {
         include snippets/fastcgi-php.conf;
-        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
         include fastcgi_params;
     }
@@ -75,9 +76,7 @@ server {
     add_header X-XSS-Protection "1; mode=block";
 }
 EOF
-ln -s /etc/nginx/sites-available/privatebin.conf /etc/nginx/sites-enabled/
+nginx_enable_site privatebin.conf
-rm -f /etc/nginx/sites-enabled/default
-systemctl reload nginx
 msg_ok "Nginx Configured"
 
 motd_ssh

install/ps5-mqtt-install.sh

@@ -19,7 +19,7 @@ $STD apt install -y \
   ca-certificates
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="22" NODE_MODULE="playactor" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="playactor" setup_nodejs
 fetch_and_deploy_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt" "tarball"
 
 msg_info "Configuring PS5-MQTT"

install/rackula-install.sh

@@ -55,9 +55,7 @@ msg_ok "Set up Rackula"
 
 msg_info "Configuring nginx"
 cp /opt/rackula/config/nginx.conf /etc/nginx/sites-available/rackula
-rm -f /etc/nginx/sites-enabled/default
+nginx_enable_site rackula
-ln -sf /etc/nginx/sites-available/rackula /etc/nginx/sites-enabled/rackula
-$STD nginx -t
 msg_ok "Configured nginx"
 
 msg_info "Creating Services"

install/shlink-install.sh

@@ -93,10 +93,7 @@ server {
     }
 }
 EOF
-  ln -sf /etc/nginx/sites-available/shlink-web-client /etc/nginx/sites-enabled/shlink-web-client
+  nginx_enable_site shlink-web-client
-  rm -f /etc/nginx/sites-enabled/default
-  systemctl enable -q nginx
-  $STD systemctl restart nginx
   msg_ok "Set up Web Client"
 fi
 

install/snipeit-install.sh

@@ -40,6 +40,7 @@ $STD php artisan key:generate --force
 msg_ok "Configured Snipe-IT"
 
 msg_info "Creating Service"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/conf.d/snipeit.conf
 server {
         listen 80;
@@ -55,7 +56,7 @@ server {
         location ~ \.php\$ {
                 include fastcgi.conf;
                 include snippets/fastcgi-php.conf;
-                fastcgi_pass unix:/run/php/php8.3-fpm.sock;
+                fastcgi_pass unix:${PHP_SOCK};
                 fastcgi_split_path_info ^(.+\.php)(/.+)\$;
                 fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
                 include fastcgi_params;

install/solidtime-install.sh

@@ -68,10 +68,11 @@ msg_ok "Set up SolidTime"
 
 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
     root * /opt/solidtime/public
-    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
+    php_fastcgi unix/${PHP_SOCK}
     file_server
     encode gzip
 }

install/sparkyfitness-install.sh

@@ -91,11 +91,7 @@ sed \
   -e 's|root /usr/share/nginx/html;|root /var/www/sparkyfitness;|g' \
   -e 's|server_name localhost;|server_name _;|g' \
   "/opt/sparkyfitness/docker/nginx.conf" >/etc/nginx/sites-available/sparkyfitness
-ln -sf /etc/nginx/sites-available/sparkyfitness /etc/nginx/sites-enabled/sparkyfitness
+nginx_enable_site sparkyfitness
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-$STD systemctl enable -q --now nginx
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/speedtest-tracker-install.sh

@@ -120,6 +120,7 @@ EOF
 msg_ok "Set up Scheduler"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/speedtest-tracker
 server {
     listen 80;
@@ -143,7 +144,7 @@ server {
     error_page 404 /index.php;
 
     location ~ \.php$ {
-        fastcgi_pass unix:/var/run/php/php8.4-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
         include fastcgi_params;
     }
@@ -154,9 +155,7 @@ server {
 }
 EOF
 
-ln -sf /etc/nginx/sites-available/speedtest-tracker /etc/nginx/sites-enabled/
+nginx_enable_site speedtest-tracker
-rm -f /etc/nginx/sites-enabled/default
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/sync-in-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-NODE_VERSION="22" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 setup_mariadb
 MARIADB_DB_NAME="sync_in" MARIADB_DB_USER="sync_in" setup_mariadb_db
 

install/termix-install.sh

@@ -54,7 +54,7 @@ cd /opt
 rm -rf /opt/guacamole-server
 msg_ok "Built Guacamole Server (guacd)"
 
-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="26" setup_nodejs
 fetch_and_deploy_gh_release "termix" "Termix-SSH/Termix" "tarball"
 
 msg_info "Building Frontend"

install/umlautadaptarr-install.sh

@@ -16,9 +16,9 @@ update_os
 msg_info "Installing Dependencies"
 setup_deb822_repo \
   "microsoft" \
-  "https://packages.microsoft.com/keys/microsoft.asc" \
+  "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-  "https://packages.microsoft.com/debian/12/prod/" \
+  "https://packages.microsoft.com/debian/13/prod/" \
-  "bookworm" \
+  "trixie" \
   "main"
 $STD apt install -y \
   dotnet-sdk-8.0 \

install/wallabag-install.sh

@@ -93,6 +93,7 @@ chmod -R 755 /opt/wallabag/{var,web/assets}
 msg_ok "Installed Wallabag"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<'EOF' >/etc/nginx/sites-available/wallabag
 server {
     listen 8000;
@@ -110,7 +111,7 @@ server {
     }
 
     location ~ ^/app\.php(/|$) {
-        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
+        fastcgi_pass unix:__PHP_SOCK__;
         fastcgi_split_path_info ^(.+\.php)(/.*)$;
         include fastcgi_params;
         fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
@@ -131,9 +132,8 @@ server {
 }
 EOF
 
-ln -sf /etc/nginx/sites-available/wallabag /etc/nginx/sites-enabled/
+sed -i "s|__PHP_SOCK__|${PHP_SOCK}|" /etc/nginx/sites-available/wallabag
-rm -f /etc/nginx/sites-enabled/default
+nginx_enable_site wallabag
-$STD systemctl reload nginx
 msg_ok "Configured Nginx"
 
 msg_info "Enabling Services"

install/wanderer-install.sh

@@ -23,6 +23,7 @@ fi
 mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data,data/plugins}
 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
 mkdir -p /opt/wanderer/source/db/data
+mkdir -p /opt/wanderer/source/search
 [[ -e /opt/wanderer/source/db/data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /opt/wanderer/source/db/data/plugins
 
 msg_info "Installing wanderer (patience)"

install/warracker-install.sh

@@ -69,10 +69,7 @@ sed -i \
     -e "s|/var/www/html|/opt/warracker/frontend|g" \
     -e "s/client_max_body_size __NGINX_MAX_BODY_SIZE_CONFIG_VALUE__/client_max_body_size 32M/" \
     /etc/nginx/sites-available/warracker.conf
-ln -s /etc/nginx/sites-available/warracker.conf /etc/nginx/sites-enabled/warracker.conf
+nginx_enable_site warracker.conf
-rm /etc/nginx/sites-enabled/default
-systemctl restart nginx
-
 msg_ok "Configured Nginx"
 
 msg_info "Creating systemd services"

install/webtrees-install.sh

@@ -32,10 +32,11 @@ msg_ok "Set up Webtrees"
 
 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
     root * /opt/webtrees
-    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
+    php_fastcgi unix/${PHP_SOCK}
     file_server
     encode gzip
 }

install/yourls-install.sh

@@ -48,6 +48,7 @@ chown -R www-data:www-data /opt/yourls
 msg_ok "Configured YOURLS"
 
 msg_info "Configuring Nginx"
+PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/yourls
 server {
     listen 80 default_server;
@@ -62,7 +63,7 @@ server {
     location ~ \.php\$ {
         try_files \$uri =404;
         fastcgi_split_path_info ^(.+\.php)(/.+)\$;
-        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
+        fastcgi_pass unix:${PHP_SOCK};
         fastcgi_index index.php;
         include fastcgi_params;
         fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
@@ -79,11 +80,7 @@ server {
     }
 }
 EOF
-ln -sf /etc/nginx/sites-available/yourls /etc/nginx/sites-enabled/yourls
+nginx_enable_site yourls
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now nginx
-systemctl reload nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/zammad-install.sh

@@ -65,9 +65,7 @@ msg_ok "Installed Zammad"
 msg_info "Setup Services"
 cp /opt/zammad/contrib/nginx/zammad.conf /etc/nginx/sites-available/zammad.conf
 sed -i "s/server_name localhost;/server_name $LOCAL_IP;/g" /etc/nginx/sites-available/zammad.conf
-ln -sf /etc/nginx/sites-available/zammad.conf /etc/nginx/sites-enabled/
+nginx_enable_site zammad.conf
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
 msg_ok "Created Service"
 
 motd_ssh

misc/alpine-install.func

@@ -10,8 +10,29 @@ fi
 # must write local failure artifacts instead of talking to the telemetry API
 # (the host is the single telemetry reporter).
 export TELEMETRY_CONTEXT="container"
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+# A freshly booted container may not have DNS up yet. `source <(curl ...)` hides
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+# curl's exit code, so a failed download would silently source an empty stream.
+_bootstrap_die() {
+  if declare -f msg_error >/dev/null 2>&1; then
+    msg_error "$1"
+  else
+    echo "FATAL: $1" >&2
+  fi
+  exit 115
+}
+
+_bootstrap_source() {
+  local url="$1" probe="$2" content
+  content=$(curl -fsSL --connect-timeout 10 --retry 5 --retry-connrefused --retry-delay 2 "$url") ||
+    _bootstrap_die "Failed to download ${url##*/}"
+  source /dev/stdin <<<"$content"
+  declare -f "$probe" >/dev/null 2>&1 ||
+    _bootstrap_die "${url##*/} loaded but incomplete (missing ${probe})"
+}
+
+_FUNC_BASE="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc"
+_bootstrap_source "$_FUNC_BASE/core.func" load_functions
+_bootstrap_source "$_FUNC_BASE/error_handler.func" catch_errors
 load_functions
 catch_errors
 

misc/build.func

@@ -88,19 +88,38 @@ variables() {
   fi
 }
 
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func)
+# `source <(curl ...)` hides the download exit code, so a failed fetch would
+# silently source an empty stream and leave the helpers undefined.
+_bootstrap_die() {
+  if declare -f msg_error >/dev/null 2>&1; then
+    msg_error "$1"
+  else
+    echo "FATAL: $1" >&2
+  fi
+  exit 115
+}
 
-if command -v curl >/dev/null 2>&1; then
+_bootstrap_source() {
-  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+  local url="$1" probe="$2" content=""
-  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+  if command -v curl >/dev/null 2>&1; then
-  load_functions
+    content=$(curl -fsSL --connect-timeout 10 --retry 5 --retry-connrefused --retry-delay 2 "$url") || content=""
-  catch_errors
+  elif command -v wget >/dev/null 2>&1; then
-elif command -v wget >/dev/null 2>&1; then
+    content=$(wget -qO- --tries=5 --timeout=10 "$url") || content=""
-  source <(wget -qO- https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+  else
-  source <(wget -qO- https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+    _bootstrap_die "Neither curl nor wget available"
-  load_functions
+  fi
-  catch_errors
+  [[ -n "$content" ]] || _bootstrap_die "Failed to download ${url##*/}"
-fi
+  source /dev/stdin <<<"$content"
+  declare -f "$probe" >/dev/null 2>&1 ||
+    _bootstrap_die "${url##*/} loaded but incomplete (missing ${probe})"
+}
+
+_FUNC_BASE="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc"
+_bootstrap_source "$_FUNC_BASE/api.func" post_to_api
+_bootstrap_source "$_FUNC_BASE/core.func" load_functions
+_bootstrap_source "$_FUNC_BASE/error_handler.func" catch_errors
+load_functions
+catch_errors
 
 # ==============================================================================
 # SECTION 2: PRE-FLIGHT CHECKS & SYSTEM VALIDATION
@@ -5337,7 +5356,7 @@ EOF
 
     local response=""
     local read_rc
-    read -t 60 -r response
+    read -t 60 -r response </dev/tty
     read_rc=$?
     if [[ $read_rc -eq 0 ]]; then
       case "${response:-1}" in

misc/install.func

@@ -37,8 +37,29 @@ fi
 # (the host is the single telemetry reporter).
 export TELEMETRY_CONTEXT="container"
 
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+# A freshly booted container may not have DNS up yet. `source <(curl ...)` hides
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+# curl's exit code, so a failed download would silently source an empty stream.
+_bootstrap_die() {
+  if declare -f msg_error >/dev/null 2>&1; then
+    msg_error "$1"
+  else
+    echo "FATAL: $1" >&2
+  fi
+  exit 115
+}
+
+_bootstrap_source() {
+  local url="$1" probe="$2" content
+  content=$(curl -fsSL --connect-timeout 10 --retry 5 --retry-connrefused --retry-delay 2 "$url") ||
+    _bootstrap_die "Failed to download ${url##*/}"
+  source /dev/stdin <<<"$content"
+  declare -f "$probe" >/dev/null 2>&1 ||
+    _bootstrap_die "${url##*/} loaded but incomplete (missing ${probe})"
+}
+
+_FUNC_BASE="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc"
+_bootstrap_source "$_FUNC_BASE/core.func" load_functions
+_bootstrap_source "$_FUNC_BASE/error_handler.func" catch_errors
 load_functions
 catch_errors