formatting

pelican-panel: keep MARIADB_DB_NAME/USER as real shell vars
localhost
2026-08-10 22:59:16 +02:00 · 2026-08-10 17:52:44 +02:00 · 2026-08-10 17:51:11 +02:00 · 2026-08-10 17:49:06 +02:00 · 2026-08-10 17:48:56 +02:00 · 2026-08-10 17:47:15 +02:00
31 changed files with 1524 additions and 136 deletions
@@ -1,3 +1,142 @@
+## 2026-08-08
+
+### 🆕 New Scripts
+
+  - Ignis ([#16330](https://github.com/community-scripts/ProxmoxVE/pull/16330))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core - setup_nodejs: bypass npm allowScripts policy globally on npm >=11 [@MickLesk](https://github.com/MickLesk) ([#16280](https://github.com/community-scripts/ProxmoxVE/pull/16280))
+
+## 2026-08-07
+
+### 🆕 New Scripts
+
+  - NetworkOptimizer ([#16328](https://github.com/community-scripts/ProxmoxVE/pull/16328))
+- Orb ([#16329](https://github.com/community-scripts/ProxmoxVE/pull/16329))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - HortusFox: start applying db migrations [@tomfrenzel](https://github.com/tomfrenzel) ([#16324](https://github.com/community-scripts/ProxmoxVE/pull/16324))
+    - Docker: report container updates instead of prompting, stop auto-updating Portainer Agent, fix addon detection of legacy Portainer [@MickLesk](https://github.com/MickLesk) ([#16298](https://github.com/community-scripts/ProxmoxVE/pull/16298))
+    - Immich: retry mise install on transient npm download failures [@MickLesk](https://github.com/MickLesk) ([#16301](https://github.com/community-scripts/ProxmoxVE/pull/16301))
+    - changedetection: remove msttcorefonts to fix install hang [@austinpilz](https://github.com/austinpilz) ([#16319](https://github.com/community-scripts/ProxmoxVE/pull/16319))
+
+  - #### 🔧 Refactor
+
+    - core: extend new vars and pocketbase values [@MickLesk](https://github.com/MickLesk) ([#16313](https://github.com/community-scripts/ProxmoxVE/pull/16313))
+
+## 2026-08-06
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - paperless: change update abort message (endless spinner) [@MickLesk](https://github.com/MickLesk) ([#16299](https://github.com/community-scripts/ProxmoxVE/pull/16299))
+
+  - #### ✨ New Features
+
+    - Vikunja: remove version pin, v2.5.0 fixes the systemd syscall filter crash [@MickLesk](https://github.com/MickLesk) ([#16300](https://github.com/community-scripts/ProxmoxVE/pull/16300))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - build.func: filter templates by host architecture during search [@MickLesk](https://github.com/MickLesk) ([#16302](https://github.com/community-scripts/ProxmoxVE/pull/16302))
+
+## 2026-08-05
+
+### 🚀 Updated Scripts
+
+  - #### ✨ New Features
+
+    - NextcloudPI: Bump to Debian Trixie & Tweak broken SSH [@MickLesk](https://github.com/MickLesk) ([#15957](https://github.com/community-scripts/ProxmoxVE/pull/15957))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - fix(monitor-all): reduce polling CPU overhead [@jomplox](https://github.com/jomplox) ([#15907](https://github.com/community-scripts/ProxmoxVE/pull/15907))
+
+## 2026-08-04
+
+### 🆕 New Scripts
+
+  - Hister ([#16259](https://github.com/community-scripts/ProxmoxVE/pull/16259))
+- Obsidian-LiveSync ([#16233](https://github.com/community-scripts/ProxmoxVE/pull/16233))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Actual Budget: allow native module install scripts under npm 11 (Node24) [@MickLesk](https://github.com/MickLesk) ([#16277](https://github.com/community-scripts/ProxmoxVE/pull/16277))
+    - Heimdall-Dashboard: run full composer install on update, force production env [@MickLesk](https://github.com/MickLesk) ([#16278](https://github.com/community-scripts/ProxmoxVE/pull/16278))
+    - xyOps: rebuild xySat satellite during update [@MickLesk](https://github.com/MickLesk) ([#16279](https://github.com/community-scripts/ProxmoxVE/pull/16279))
+    - HAOS: remove non-ASCII dash from CPU model dialog text [@MickLesk](https://github.com/MickLesk) ([#16276](https://github.com/community-scripts/ProxmoxVE/pull/16276))
+    - fix: back up Termix db/data so the update stops destroying encryption keys [@LukeGus](https://github.com/LukeGus) ([#16275](https://github.com/community-scripts/ProxmoxVE/pull/16275))
+    - passwordpusher: dynamically read Ruby version from .ruby-version file [@Copilot](https://github.com/Copilot) ([#16242](https://github.com/community-scripts/ProxmoxVE/pull/16242))
+    - fix(salt): write version cache to ~/.salt, not /~.salt [@TowyTowy](https://github.com/TowyTowy) ([#16265](https://github.com/community-scripts/ProxmoxVE/pull/16265))
+    - AFFiNE: fix version and build type reported by the app itself [@MickLesk](https://github.com/MickLesk) ([#16251](https://github.com/community-scripts/ProxmoxVE/pull/16251))
+    - Passbolt: fetch GPG key from Passbolt's own host instead of the flaky keyserver [@MickLesk](https://github.com/MickLesk) ([#16248](https://github.com/community-scripts/ProxmoxVE/pull/16248))
+
+  - #### ✨ New Features
+
+    - Opencloud: Pin version to 7.4.0 [@vhsdream](https://github.com/vhsdream) ([#16257](https://github.com/community-scripts/ProxmoxVE/pull/16257))
+
+  - #### 🔧 Refactor
+
+    - Bump NodeJS Versions of several scripts [@MickLesk](https://github.com/MickLesk) ([#16230](https://github.com/community-scripts/ProxmoxVE/pull/16230))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - tools.func: never delete ubuntu.sources (or other distro base sources) as orphaned [@MickLesk](https://github.com/MickLesk) ([#16250](https://github.com/community-scripts/ProxmoxVE/pull/16250))
+    - tools.func: complete a stale/partial backup manifest instead of trusting it as-is [@MickLesk](https://github.com/MickLesk) ([#16252](https://github.com/community-scripts/ProxmoxVE/pull/16252))
+
+  - #### 🔧 Refactor
+
+    - Refactor: harmonize tools/addon and move boilerplate into core.func [@MickLesk](https://github.com/MickLesk) ([#16202](https://github.com/community-scripts/ProxmoxVE/pull/16202))
+
+## 2026-08-03
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Correction to link in Paperless-NGX update script [@jsspen](https://github.com/jsspen) ([#16241](https://github.com/community-scripts/ProxmoxVE/pull/16241))
+    - fix restore env in split pro [@johanngrobe](https://github.com/johanngrobe) ([#16228](https://github.com/community-scripts/ProxmoxVE/pull/16228))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: read all interactive prompts from /dev/tty, drain leftover input on read failure (hotfix) [@MickLesk](https://github.com/MickLesk) ([#16235](https://github.com/community-scripts/ProxmoxVE/pull/16235))
+
+## 2026-08-02
+
+### 🆕 New Scripts
+
+  - Portainer as Addon [@MickLesk](https://github.com/MickLesk) ([#16200](https://github.com/community-scripts/ProxmoxVE/pull/16200))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - LibreNMS: Ensure ipmitool dependency is installed [@tremor021](https://github.com/tremor021) ([#16219](https://github.com/community-scripts/ProxmoxVE/pull/16219))
+    - Bitfocus Companion: add libatomic1 dependency [@tremor021](https://github.com/tremor021) ([#16212](https://github.com/community-scripts/ProxmoxVE/pull/16212))
+    - fix(dispatcharr): add recordings and dvr queues to celery worker [@eXistC](https://github.com/eXistC) ([#16204](https://github.com/community-scripts/ProxmoxVE/pull/16204))
+    - add retry for uv - same as immich [@asylumexp](https://github.com/asylumexp) ([#16203](https://github.com/community-scripts/ProxmoxVE/pull/16203))
+    - Fix for cross-seed node version regression [@TorinFrancis](https://github.com/TorinFrancis) ([#16209](https://github.com/community-scripts/ProxmoxVE/pull/16209))
+
+  - #### 🔧 Refactor
+
+    - chore: remove portainer setup from several scripts (moved to addon) [@MickLesk](https://github.com/MickLesk) ([#16201](https://github.com/community-scripts/ProxmoxVE/pull/16201))
+
 ## 2026-08-01

 ### 🚀 Updated Scripts
@@ -86,6 +86,9 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit



+
+
+



@@ -99,7 +102,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit


 <details>
-<summary><h4>August (1 entries)</h4></summary>
+<summary><h4>August (8 entries)</h4></summary>

 [View August 2026 Changelog](.github/changelogs/2026/08.md)

@@ -518,6 +521,59 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

+## 2026-08-10
+
+### 🆕 New Scripts
+
+  - GitLab ([#16386](https://github.com/community-scripts/ProxmoxVE/pull/16386))
+- TeslaMate ([#16385](https://github.com/community-scripts/ProxmoxVE/pull/16385))
+- tor-snowflake ([#15684](https://github.com/community-scripts/ProxmoxVE/pull/15684))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - ErsatzTV: update ffmpeg to 8.1 version [@MickLesk](https://github.com/MickLesk) ([#16383](https://github.com/community-scripts/ProxmoxVE/pull/16383))
+
+### 🧰 Tools
+
+  - post-pdm-install ([#16368](https://github.com/community-scripts/ProxmoxVE/pull/16368))
+
+## 2026-08-09
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix: CouchDB Erlang cookie breaks vm.args (use hex) [@fudianchn](https://github.com/fudianchn) ([#16361](https://github.com/community-scripts/ProxmoxVE/pull/16361))
+    - SparkyFitness: Install Git for frontend builds [@MickLesk](https://github.com/MickLesk) ([#16352](https://github.com/community-scripts/ProxmoxVE/pull/16352))
+    - Byparr: Use invisible-playwright browser setup [@MickLesk](https://github.com/MickLesk) ([#16353](https://github.com/community-scripts/ProxmoxVE/pull/16353))
+    - Crafty Controller: Restore ownership after updates [@MickLesk](https://github.com/MickLesk) ([#16354](https://github.com/community-scripts/ProxmoxVE/pull/16354))
+    - Webtrees: Fix schema check in silent mode [@MickLesk](https://github.com/MickLesk) ([#16355](https://github.com/community-scripts/ProxmoxVE/pull/16355))
+    - SigNoz: Allow legacy metadata schema on ClickHouse 26 [@MickLesk](https://github.com/MickLesk) ([#16356](https://github.com/community-scripts/ProxmoxVE/pull/16356))
+
+### 🧰 Tools
+
+  - #### ✨ New Features
+
+    - Portainer: Update existing CE and BE installations [@MickLesk](https://github.com/MickLesk) ([#16357](https://github.com/community-scripts/ProxmoxVE/pull/16357))
+
+### 📚 Documentation
+
+  - github: update Star History links and image sources [@MickLesk](https://github.com/MickLesk) ([#16367](https://github.com/community-scripts/ProxmoxVE/pull/16367))
+
+## 2026-08-08
+
+### 🆕 New Scripts
+
+  - Ignis ([#16330](https://github.com/community-scripts/ProxmoxVE/pull/16330))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core - setup_nodejs: bypass npm allowScripts policy globally on npm >=11 [@MickLesk](https://github.com/MickLesk) ([#16280](https://github.com/community-scripts/ProxmoxVE/pull/16280))
+
 ## 2026-08-07

 ### 🆕 New Scripts
@@ -1154,94 +1210,4 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

    - Adapt to new artifact filename format for pocket id [@wollew](https://github.com/wollew) ([#15689](https://github.com/community-scripts/ProxmoxVE/pull/15689))
    - Fireshare: Fix for install and upgrade to v1.7.3 [@tremor021](https://github.com/tremor021) ([#15673](https://github.com/community-scripts/ProxmoxVE/pull/15673))
-    - Endurain: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15674](https://github.com/community-scripts/ProxmoxVE/pull/15674))
-
-## 2026-07-09
-
-### 🚀 Updated Scripts
-
-  - fix(pihole): repair Unbound DNS-over-TLS (DoT) forwarding config [@TowyTowy](https://github.com/TowyTowy) ([#15654](https://github.com/community-scripts/ProxmoxVE/pull/15654))
-
-## 2026-07-08
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Opencloud: Bump version to 7.2.1 [@vhsdream](https://github.com/vhsdream) ([#15655](https://github.com/community-scripts/ProxmoxVE/pull/15655))
-    - BabyBuddy: Harden update script [@MickLesk](https://github.com/MickLesk) ([#15642](https://github.com/community-scripts/ProxmoxVE/pull/15642))
-
-## 2026-07-07
-
-### 🆕 New Scripts
-
-  - Forgejo-Runner ([#15046](https://github.com/community-scripts/ProxmoxVE/pull/15046))
-
-## 2026-07-06
-
-### 🚀 Updated Scripts
-
-  - Fix alignment in various ct end messages [@tremor021](https://github.com/tremor021) ([#15632](https://github.com/community-scripts/ProxmoxVE/pull/15632))
- Immich: Update libvips to 8.18.4 [@vhsdream](https://github.com/vhsdream) ([#15619](https://github.com/community-scripts/ProxmoxVE/pull/15619))
-
-  - #### 🐞 Bug Fixes
-
-    - Wizarr: Build JS and CSS static assets [@vhsdream](https://github.com/vhsdream) ([#15634](https://github.com/community-scripts/ProxmoxVE/pull/15634))
-    - RustDesk Server: Update URL format in rustdeskserver.sh [@tremor021](https://github.com/tremor021) ([#15626](https://github.com/community-scripts/ProxmoxVE/pull/15626))
-    - attempt to port docker-vm to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15611](https://github.com/community-scripts/ProxmoxVE/pull/15611))
-    - fix(plane): don't clobber global app var, breaking /usr/bin/update [@asylumexp](https://github.com/asylumexp) ([#15612](https://github.com/community-scripts/ProxmoxVE/pull/15612))
-
-  - #### 🔧 Refactor
-
-    - cliproxyapi: point setup message at /management.html [@austinpilz](https://github.com/austinpilz) ([#15628](https://github.com/community-scripts/ProxmoxVE/pull/15628))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: FlowiseAI [@MickLesk](https://github.com/MickLesk) ([#15624](https://github.com/community-scripts/ProxmoxVE/pull/15624))
-
-## 2026-07-05
-
-### 🆕 New Scripts
-
-  - excalidash ([#15604](https://github.com/community-scripts/ProxmoxVE/pull/15604))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix: homarr: cli [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15603](https://github.com/community-scripts/ProxmoxVE/pull/15603))
-    - immich: vacuum smart_search/face_search before VectorChord bump [@irishpadres](https://github.com/irishpadres) ([#15607](https://github.com/community-scripts/ProxmoxVE/pull/15607))
-
-## 2026-07-04
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Element Synapse: Fix heredoc syntax in elementsynapse-install.sh [@tremor021](https://github.com/tremor021) ([#15594](https://github.com/community-scripts/ProxmoxVE/pull/15594))
-    - Twenty: Fix backup restore [@tremor021](https://github.com/tremor021) ([#15586](https://github.com/community-scripts/ProxmoxVE/pull/15586))
-    - fix(endurain): update frontend dist path after upstream restructure [@joaovitoriasilva](https://github.com/joaovitoriasilva) ([#15590](https://github.com/community-scripts/ProxmoxVE/pull/15590))
-
-## 2026-07-03
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: handle mise monorepo_root rename correctly | bump to 3.0.1 [@MickLesk](https://github.com/MickLesk) ([#15557](https://github.com/community-scripts/ProxmoxVE/pull/15557))
-
-  - #### ✨ New Features
-
-    - Opencloud: bump to v7.2.0 [@vhsdream](https://github.com/vhsdream) ([#15575](https://github.com/community-scripts/ProxmoxVE/pull/15575))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - tools.func: fix corepack/pnpm install flow in setup_nodejs [@MickLesk](https://github.com/MickLesk) ([#15579](https://github.com/community-scripts/ProxmoxVE/pull/15579))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Removed deprecated parameter in Filebrowser Quantum configuration [@alpargatagazer](https://github.com/alpargatagazer) ([#15573](https://github.com/community-scripts/ProxmoxVE/pull/15573))
+    - Endurain: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15674](https://github.com/community-scripts/ProxmoxVE/pull/15674))
@@ -172,8 +172,19 @@ dev_mode="trace,keep" bash -c "$(curl -fsSL https://raw.githubusercontent.com/co
 | `pause`      | Pauses execution at key points before customization          |
 | `breakpoint` | Drops to a shell at hardcoded `breakpoint` calls in scripts  |
 | `logs`       | Saves detailed build logs to `/var/log/community-scripts/`   |
-| `dryrun`     | Bypasses actual container creation (limited support)         |
 | `motd`       | Forces an update of the Message of the Day                   |
+| `net`        | Logs every engine fetch: HTTP status, duration and URL       |
+| `timing`     | Times each step and lists the slowest ones at the end        |
+
+Any flag also prints the resolved context first — where the engine came from,
+both roots and URLs, the app, platform and versions — and repaints the greens
+red, so a dev run is never mistaken for a normal install.
+
+Setting `dev_mode` without naming a flag (`dev_mode=`, `=1`, `=ask`) opens a
+picker before the install menu.
+
+`dryrun` was removed: it only intercepted the `silent()` wrapper, so `pct
+create` still ran and the container was still built.

 ---

@@ -171,11 +171,21 @@ This project runs on community contributions. Whether you want to write new scri
 </p>

 <p align="center">
-  <a href="https://star-history.com/#community-scripts/ProxmoxVE&Date">
+  <a href="https://www.star-history.com/?repos=community-scripts%2FProxmoxVE&type=date&legend=top-left">
    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date&theme=dark" />
-      <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date" />
-      <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date" width="700" />
+      <source
+        media="(prefers-color-scheme: dark)"
+        srcset="https://api.star-history.com/chart?repos=community-scripts/ProxmoxVE&type=date&theme=dark&legend=top-left&sealed_token=-lUy2KH6pJryUyLCbiWRwFz3ilXMDFVFHm0lJcqh-Hl5e0QNNKjINNcXzULhaZVpBugN_TDaxOawEAuzwBc5Sjqa2mCRw9K6TdCioKRDsS_qXUwhkLQSCMRSg1schCdl4rQD8qEj7PWBjin-fyHnDm7NnM6akZp59jndG7qV7PrvG8nLBgDIuuA-wAI3"
+      />
+      <source
+        media="(prefers-color-scheme: light)"
+        srcset="https://api.star-history.com/chart?repos=community-scripts/ProxmoxVE&type=date&legend=top-left&sealed_token=-lUy2KH6pJryUyLCbiWRwFz3ilXMDFVFHm0lJcqh-Hl5e0QNNKjINNcXzULhaZVpBugN_TDaxOawEAuzwBc5Sjqa2mCRw9K6TdCioKRDsS_qXUwhkLQSCMRSg1schCdl4rQD8qEj7PWBjin-fyHnDm7NnM6akZp59jndG7qV7PrvG8nLBgDIuuA-wAI3"
+      />
+      <img
+        alt="Star History Chart"
+        src="https://api.star-history.com/chart?repos=community-scripts/ProxmoxVE&type=date&legend=top-left&sealed_token=-lUy2KH6pJryUyLCbiWRwFz3ilXMDFVFHm0lJcqh-Hl5e0QNNKjINNcXzULhaZVpBugN_TDaxOawEAuzwBc5Sjqa2mCRw9K6TdCioKRDsS_qXUwhkLQSCMRSg1schCdl4rQD8qEj7PWBjin-fyHnDm7NnM6akZp59jndG7qV7PrvG8nLBgDIuuA-wAI3"
+        width="700"
+      />
    </picture>
  </a>
 </p>
@@ -81,7 +81,7 @@ function update_script() {
    msg_info "Configuring Byparr"
    cd /opt/Byparr
    $STD uv sync --link-mode copy
-    $STD uv run camoufox fetch
+    $STD uv run python -m invisible_playwright fetch
    msg_ok "Configured Byparr"

    msg_info "Starting Service"
@@ -44,6 +44,7 @@ function update_script() {

    CLEAN_INSTALL=1 fetch_and_deploy_gl_release "Crafty-Controller" "crafty-controller/crafty-4" "tarball" "latest" "/opt/crafty-controller/crafty/crafty-4"

+    chown -R crafty:crafty /opt/crafty-controller
    restore_backup

    msg_info "Updating TemurinJDK"
@@ -53,7 +54,6 @@ function update_script() {
    msg_ok "Updated TemurinJDK"

    msg_info "Updating Python dependencies"
-    chown -R crafty:crafty /opt/crafty-controller
    cd /opt/crafty-controller/crafty/crafty-4
    $STD sudo -u crafty bash -c '
      source /opt/crafty-controller/crafty/.venv/bin/activate
@@ -47,7 +47,7 @@ function update_script() {
    systemctl stop ersatzTV
    msg_ok "Stopped ErsatzTV"

-    fetch_and_deploy_gh_release "ersatztv-ffmpeg" "ErsatzTV/ErsatzTV-ffmpeg" "prebuild" "latest" "/opt/ErsatzTV-ffmpeg" "*-$(arch_resolve "linux64" "linuxarm64")-gpl-7.1.tar.xz"
+    fetch_and_deploy_gh_release "ersatztv-ffmpeg" "ErsatzTV/ErsatzTV-ffmpeg" "prebuild" "latest" "/opt/ErsatzTV-ffmpeg" "*-$(arch_resolve "linux64" "linuxarm64")-gpl-8.1.tar.xz"

    msg_info "Set ErsatzTV-ffmpeg links"
    chmod +x /opt/ErsatzTV-ffmpeg/bin/*
@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://about.gitlab.com/
+
+APP="GitLab"
+var_tags="${var_tags:-git;devtools}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-8192}"
+var_disk="${var_disk:-40}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/gitlab ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Updating GitLab (Patience)"
+  $STD apt update
+  $STD apt install -y gitlab-ce
+  msg_ok "Updated GitLab"
+
+  msg_info "Reconfiguring GitLab (Patience)"
+  $STD gitlab-ctl reconfigure
+  msg_ok "Reconfigured GitLab"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW}The initial root password is valid for 24 hours:${CL}"
+echo -e "${TAB}${DEFAULT}${BGN}cat /etc/gitlab/initial_root_password${CL}"
@@ -0,0 +1,6 @@
+   _______ __  __          __  
+  / ____(_) /_/ /   ____ _/ /_ 
+ / / __/ / __/ /   / __ `/ __ \
+/ /_/ / / /_/ /___/ /_/ / /_/ /
+\____/_/\__/_____/\__,_/_.___/ 
+                               
@@ -0,0 +1,6 @@
+    ____            _     
+   /  _/___ _____  (_)____
+   / // __ `/ __ \/ / ___/
+ _/ // /_/ / / / / (__  ) 
+/___/\__, /_/ /_/_/____/  
+    /____/                
@@ -0,0 +1,6 @@
+  ______          __      __  ___      __     
+ /_  __/__  _____/ /___ _/  |/  /___ _/ /____ 
+  / / / _ \/ ___/ / __ `/ /|_/ / __ `/ __/ _ \
+ / / /  __(__  ) / /_/ / /  / / /_/ / /_/  __/
+/_/  \___/____/_/\__,_/_/  /_/\__,_/\__/\___/ 
+                                              
@@ -0,0 +1,6 @@
+   __                                            ______      __      
+  / /_____  _____      _________  ____ _      __/ __/ /___ _/ /_____ 
+ / __/ __ \/ ___/_____/ ___/ __ \/ __ \ | /| / / /_/ / __ `/ //_/ _ \
+/ /_/ /_/ / /  /_____(__  ) / / / /_/ / |/ |/ / __/ / /_/ / ,< /  __/
+\__/\____/_/        /____/_/ /_/\____/|__/|__/_/ /_/\__,_/_/|_|\___/ 
+                                                                     
@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Nystik-gh/ignis
+
+APP="Ignis"
+var_tags="${var_tags:-notes;obsidian}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+var_arm64="${var_arm64:-yes}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/ignis ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "ignis" "Nystik-gh/ignis"; then
+    msg_info "Stopping Service"
+    systemctl stop ignis
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "ignis" "Nystik-gh/ignis" "tarball"
+
+    msg_info "Building Ignis"
+    cd /opt/ignis
+    export NODE_OPTIONS="--max-old-space-size=4096"
+    export IGNIS_BUILD="$(cat ~/.ignis)"
+    $STD npm ci --ignore-scripts
+    $STD npm run build
+    $STD npm install -g @electron/asar
+    msg_ok "Built Ignis"
+
+    msg_info "Checking Obsidian Web Assets"
+    OBSIDIAN_VERSION=$(grep -oP 'OBSIDIAN_VERSION=\K[0-9.]+' /opt/ignis/apps/ignis-server/Dockerfile | head -n1)
+    [[ -z "$OBSIDIAN_VERSION" ]] && OBSIDIAN_VERSION="$(cat /opt/ignis_data/obsidian.version 2>/dev/null)"
+    if [[ -n "$OBSIDIAN_VERSION" && "$OBSIDIAN_VERSION" != "$(cat /opt/ignis_data/obsidian.version 2>/dev/null)" ]]; then
+      rm -rf /opt/ignis_data/obsidian-app
+      mkdir -p /opt/ignis_data/obsidian-app
+      curl -fsSL -o /tmp/obsidian.asar.gz "https://github.com/obsidianmd/obsidian-releases/releases/download/v${OBSIDIAN_VERSION}/obsidian-${OBSIDIAN_VERSION}.asar.gz"
+      gunzip -f /tmp/obsidian.asar.gz
+      $STD asar extract /tmp/obsidian.asar /opt/ignis_data/obsidian-app
+      rm -f /tmp/obsidian.asar
+      echo "${OBSIDIAN_VERSION}" >/opt/ignis_data/obsidian.version
+    fi
+    msg_ok "Checked Obsidian Web Assets"
+
+    msg_info "Starting Service"
+    systemctl start ignis
+    systemctl reload nginx
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
@@ -50,12 +50,12 @@ function update_script() {
    cp -a /opt/pelican-panel/.env /opt/backup
    mkdir -p /opt/backup/storage/app/
    cp -a /opt/pelican-panel/storage/app/public /opt/backup/storage/app/
-    
+
    SQLITE_INSTALL=$(ls /opt/pelican-panel/database/*.sqlite 1>/dev/null 2>&1 && echo "true" || echo "false")
    $SQLITE_INSTALL && cp -r /opt/pelican-panel/database/*.sqlite /opt/backup
-    
+
    find /opt/pelican-panel -mindepth 1 -maxdepth 1 ! -name 'backup' ! -name 'plugins' -exec rm -rf {} +
-    
+
    fetch_and_deploy_gh_release "pelican-panel" "pelican-dev/panel" "prebuild" "latest" "/opt/pelican-panel" "panel.tar.gz"

    msg_info "Updating Pelican Panel"
@@ -30,6 +30,7 @@ function update_script() {
    exit
  fi

+  ensure_dependencies git
  if check_for_gh_release "sparkyfitness" "CodeWithCJ/SparkyFitness"; then
    msg_info "Stopping Services"
    systemctl stop sparkyfitness-server nginx
@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/teslamate-org/teslamate
+
+APP="TeslaMate"
+var_tags="${var_tags:-car;monitoring}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-16}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/teslamate ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "teslamate" "teslamate-org/teslamate"; then
+    msg_info "Stopping Service"
+    systemctl stop teslamate
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "teslamate" "teslamate-org/teslamate" "tarball"
+
+    msg_info "Building TeslaMate (Patience)"
+    cd /opt/teslamate
+    export MIX_ENV=prod
+    $STD mix local.hex --force
+    $STD mix local.rebar --force
+    $STD mix deps.get --only prod
+    $STD npm install --prefix ./assets
+    $STD npm run deploy --prefix ./assets
+    $STD mix do phx.digest, release --overwrite
+    msg_ok "Built TeslaMate"
+
+    msg_info "Starting Service"
+    systemctl start teslamate
+    systemctl restart grafana-server
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:4000${CL}"
+echo -e "${INFO}${YW}Grafana dashboards (admin/admin):${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: KernelSailor
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://snowflake.torproject.org/
+
+APP="tor-snowflake"
+var_tags="${var_tags:-privacy;proxy;tor}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+var_nesting="${var_nesting:-0}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  msg_info "Updating Container OS"
+  $STD apt update
+  $STD apt upgrade -y
+  msg_ok "Updated Container OS"
+
+  if [[ ! -d /opt/tor-snowflake ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if GITLAB_URL="https://gitlab.torproject.org" check_for_gl_release "tor-snowflake" "tpo/anti-censorship/pluggable-transports/snowflake"; then
+    msg_info "Stopping Service"
+    systemctl stop snowflake-proxy
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 GITLAB_URL="https://gitlab.torproject.org" fetch_and_deploy_gl_release "tor-snowflake" "tpo/anti-censorship/pluggable-transports/snowflake" "tarball"
+
+    msg_info "Building Snowflake"
+    cd /opt/tor-snowflake/proxy
+    $STD go build -o snowflake-proxy .
+    msg_ok "Built Snowflake"
+
+    msg_info "Starting Service"
+    systemctl start snowflake-proxy
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+
@@ -14,7 +14,7 @@ network_check
 update_os

 msg_info "Installing Apache CouchDB"
-ERLANG_COOKIE=$(openssl rand -base64 32)
+ERLANG_COOKIE=$(openssl rand -hex 32)
 ADMIN_PASS="$(openssl rand -base64 18 | cut -c1-13)"
 debconf-set-selections <<<"couchdb couchdb/cookie string $ERLANG_COOKIE"
 debconf-set-selections <<<"couchdb couchdb/mode select standalone"
@@ -58,7 +58,7 @@ fetch_and_deploy_gh_release "Byparr" "ThePhaseless/Byparr" "tarball" "latest"
 msg_info "Configuring Byparr"
 cd /opt/Byparr
 $STD uv sync --link-mode copy
-$STD uv run camoufox fetch
+$STD uv run python -m invisible_playwright fetch
 msg_ok "Configured Byparr"

 msg_info "Creating Service"
@@ -15,7 +15,7 @@ update_os

 setup_hwaccel
 fetch_and_deploy_gh_release "ersatztv" "ErsatzTV/ErsatzTV" "prebuild" "latest" "/opt/ErsatzTV" "*linux-$(arch_resolve "x64" "arm64").tar.gz"
-fetch_and_deploy_gh_release "ersatztv-ffmpeg" "ErsatzTV/ErsatzTV-ffmpeg" "prebuild" "latest" "/opt/ErsatzTV-ffmpeg" "*-$(arch_resolve "linux64" "linuxarm64")-gpl-7.1.tar.xz"
+fetch_and_deploy_gh_release "ersatztv-ffmpeg" "ErsatzTV/ErsatzTV-ffmpeg" "prebuild" "latest" "/opt/ErsatzTV-ffmpeg" "*-$(arch_resolve "linux64" "linuxarm64")-gpl-8.1.tar.xz"

 msg_info "Set ErsatzTV-ffmpeg links"
 chmod +x /opt/ErsatzTV-ffmpeg/bin/*
@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://about.gitlab.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  openssh-server \
+  perl \
+  tzdata
+msg_ok "Installed Dependencies"
+
+setup_deb822_repo \
+  "gitlab-ce" \
+  "https://packages.gitlab.com/gitlab/gitlab-ce/gpgkey" \
+  "https://packages.gitlab.com/gitlab/gitlab-ce/debian" \
+  "$(get_os_info codename)" \
+  "main"
+
+msg_info "Configuring GitLab"
+mkdir -p /etc/gitlab
+cat <<EOF >/etc/gitlab/gitlab.rb
+external_url 'http://${LOCAL_IP}'
+
+# Omnibus runs 'sysctl -e --system' during reconfigure, which fails in an
+# unprivileged LXC because most kernel keys are not writable.
+package['modify_kernel_parameters'] = false
+EOF
+msg_ok "Configured GitLab"
+
+msg_info "Installing GitLab CE (Patience)"
+$STD apt install -y gitlab-ce
+msg_ok "Installed GitLab CE"
+
+msg_info "Reconfiguring GitLab (Patience)"
+$STD gitlab-ctl reconfigure
+msg_ok "Reconfigured GitLab"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -0,0 +1,113 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Nystik-gh/ignis
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="22" setup_nodejs
+
+fetch_and_deploy_gh_release "ignis" "Nystik-gh/ignis" "tarball"
+
+msg_info "Building Ignis"
+cd /opt/ignis
+export NODE_OPTIONS="--max-old-space-size=4096"
+export IGNIS_BUILD="$(cat ~/.ignis)"
+$STD npm ci --ignore-scripts
+$STD npm run build
+$STD npm install -g @electron/asar
+msg_ok "Built Ignis"
+
+msg_info "Downloading Obsidian Web Assets"
+mkdir -p /opt/ignis_data/{obsidian-app,vaults,data}
+OBSIDIAN_VERSION=$(grep -oP 'OBSIDIAN_VERSION=\K[0-9.]+' /opt/ignis/apps/ignis-server/Dockerfile | head -n1)
+[[ -z "$OBSIDIAN_VERSION" ]] && OBSIDIAN_VERSION="1.12.7"
+curl -fsSL -o /tmp/obsidian.asar.gz "https://github.com/obsidianmd/obsidian-releases/releases/download/v${OBSIDIAN_VERSION}/obsidian-${OBSIDIAN_VERSION}.asar.gz"
+gunzip -f /tmp/obsidian.asar.gz
+$STD asar extract /tmp/obsidian.asar /opt/ignis_data/obsidian-app
+rm -f /tmp/obsidian.asar
+echo "${OBSIDIAN_VERSION}" >/opt/ignis_data/obsidian.version
+msg_ok "Downloaded Obsidian Web Assets"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/ignis.service
+[Unit]
+Description=Ignis (Obsidian in the browser)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/ignis
+Environment=NODE_ENV=production
+Environment=PORT=8080
+Environment=VAULT_ROOT=/opt/ignis_data/vaults
+Environment=DATA_ROOT=/opt/ignis_data/data
+Environment=OBSIDIAN_ASSETS_PATH=/opt/ignis_data/obsidian-app
+Environment=AUTO_CREATE_DEFAULT=true
+ExecStart=/usr/bin/node /opt/ignis/apps/ignis-server/server/index.js
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now ignis
+msg_ok "Created Service"
+
+msg_info "Generating Self-Signed Certificate"
+create_self_signed_cert "ignis"
+msg_ok "Generated Self-Signed Certificate"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/ignis.conf
+server {
+    listen 80 default_server;
+    server_name _;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl default_server;
+    http2 on;
+    server_name _;
+
+    ssl_certificate /etc/ssl/ignis/ignis.crt;
+    ssl_certificate_key /etc/ssl/ignis/ignis.key;
+
+    client_max_body_size 1024m;
+
+    location / {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 3600s;
+    }
+}
+EOF
+ln -sf /etc/nginx/sites-available/ignis.conf /etc/nginx/sites-enabled/ignis.conf
+rm -f /etc/nginx/sites-enabled/default
+systemctl restart nginx
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -27,6 +27,7 @@ msg_info "Installing Pelican Panel"
 cd /opt/pelican-panel
 $STD composer install --no-dev --optimize-autoloader --no-interaction
 $STD php artisan p:environment:setup
+echo "yes" | $STD php artisan p:environment:database --driver mariadb --host localhost --port 3306 --database "$MARIADB_DB_NAME" --username "$MARIADB_DB_USER" --password "$MARIADB_DB_PASS"
 $STD php artisan p:environment:queue-service --no-interaction
 echo "* * * * * php /opt/pelican-panel/artisan schedule:run >> /dev/null 2>&1" | crontab -u www-data -
 chown -R www-data:www-data /opt/pelican-panel
@@ -103,6 +103,9 @@ cat <<EOF >/etc/clickhouse-server/config.d/cluster.xml
        <shard>01</shard>
        <replica>01</replica>
    </macros>
+    <merge_tree>
+      <allow_dimensions_outside_sorting_key>1</allow_dimensions_outside_sorting_key>
+    </merge_tree>
 </clickhouse>
 EOF
 systemctl enable -q --now clickhouse-server
@@ -14,7 +14,7 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt install -y nginx
+$STD apt install -y git nginx
 msg_ok "Installed Dependencies"

 PG_VERSION="18" setup_postgresql
@@ -0,0 +1,183 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/teslamate-org/teslamate
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  erlang \
+  erlang-dev \
+  erlang-syntax-tools \
+  elixir \
+  mosquitto \
+  locales
+sed -i 's/^# *\(en_US.UTF-8\)/\1/' /etc/locale.gen
+$STD locale-gen
+systemctl enable -q --now mosquitto
+msg_ok "Installed Dependencies"
+
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="teslamate" PG_DB_USER="teslamate" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
+NODE_VERSION="22" setup_nodejs
+
+setup_deb822_repo \
+  "grafana" \
+  "https://apt.grafana.com/gpg.key" \
+  "https://apt.grafana.com" \
+  "stable" \
+  "main"
+
+msg_info "Installing Grafana"
+$STD apt install -y grafana
+msg_ok "Installed Grafana"
+
+fetch_and_deploy_gh_release "teslamate" "teslamate-org/teslamate" "tarball"
+
+msg_info "Building TeslaMate (Patience)"
+cd /opt/teslamate
+export MIX_ENV=prod
+$STD mix local.hex --force
+$STD mix local.rebar --force
+$STD mix deps.get --only prod
+$STD npm install --prefix ./assets
+$STD npm run deploy --prefix ./assets
+$STD mix do phx.digest, release --overwrite
+msg_ok "Built TeslaMate"
+
+msg_info "Configuring TeslaMate"
+cat <<EOF >/opt/teslamate.env
+HOME=/opt/teslamate
+LANG=en_US.UTF-8
+LC_CTYPE=en_US.UTF-8
+TZ=UTC
+PORT=4000
+ENCRYPTION_KEY=$(openssl rand -hex 32)
+DATABASE_USER=teslamate
+DATABASE_PASS=${PG_DB_PASS}
+DATABASE_NAME=teslamate
+DATABASE_HOST=127.0.0.1
+DATABASE_PORT=5432
+MQTT_HOST=127.0.0.1
+EOF
+chmod 600 /opt/teslamate.env
+msg_ok "Configured TeslaMate"
+
+msg_info "Provisioning Grafana"
+mkdir -p /etc/grafana/provisioning/{datasources,dashboards}
+cat <<EOF >/etc/grafana/provisioning/datasources/teslamate.yml
+apiVersion: 1
+
+datasources:
+  - name: TeslaMate
+    type: postgres
+    url: 127.0.0.1:5432
+    user: teslamate
+    access: proxy
+    isDefault: true
+    secureJsonData:
+      password: ${PG_DB_PASS}
+    jsonData:
+      postgresVersion: 1700
+      sslmode: disable
+      database: teslamate
+    version: 1
+    editable: true
+EOF
+
+cat <<EOF >/etc/grafana/provisioning/dashboards/teslamate.yml
+apiVersion: 1
+
+providers:
+  - name: "teslamate"
+    orgId: 1
+    folder: TeslaMate
+    folderUid: Nr4ofiDZk
+    type: file
+    disableDeletion: false
+    allowUiUpdates: true
+    updateIntervalSeconds: 86400
+    options:
+      path: /opt/teslamate/grafana/dashboards
+      foldersFromFilesStructure: false
+  - name: "teslamate_internal"
+    orgId: 1
+    folder: Internal
+    folderUid: Nr5ofiDZk
+    type: file
+    disableDeletion: false
+    allowUiUpdates: true
+    updateIntervalSeconds: 86400
+    options:
+      path: /opt/teslamate/grafana/dashboards/internal
+  - name: "teslamate_reports"
+    orgId: 1
+    folder: Reports
+    folderUid: Nr6ofiDZk
+    type: file
+    disableDeletion: false
+    allowUiUpdates: true
+    updateIntervalSeconds: 86400
+    options:
+      path: /opt/teslamate/grafana/dashboards/reports
+EOF
+
+cat <<EOF >/etc/grafana/grafana.ini
+[analytics]
+reporting_enabled = false
+check_for_updates = false
+check_for_plugin_updates = false
+
+[security]
+allow_embedding = true
+disable_gravatar = true
+
+[users]
+allow_sign_up = false
+
+[dashboards]
+default_home_dashboard_path = /opt/teslamate/grafana/dashboards/internal/home.json
+
+[date_formats]
+use_browser_locale = true
+EOF
+systemctl enable -q --now grafana-server
+msg_ok "Provisioned Grafana"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/teslamate.service
+[Unit]
+Description=TeslaMate
+Wants=network-online.target
+After=network-online.target postgresql.service mosquitto.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/teslamate
+EnvironmentFile=/opt/teslamate.env
+ExecStartPre=/opt/teslamate/_build/prod/rel/teslamate/bin/teslamate eval "TeslaMate.Release.migrate"
+ExecStart=/opt/teslamate/_build/prod/rel/teslamate/bin/teslamate start
+ExecStop=/opt/teslamate/_build/prod/rel/teslamate/bin/teslamate stop
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now teslamate
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: KernelSailor
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://snowflake.torproject.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+setup_go
+
+msg_info "Building Snowflake"
+GITLAB_URL="https://gitlab.torproject.org" fetch_and_deploy_gl_release "tor-snowflake" "tpo/anti-censorship/pluggable-transports/snowflake" "tarball"
+cd /opt/tor-snowflake/proxy
+$STD go build -o snowflake-proxy .
+msg_ok "Built Snowflake Proxy"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/snowflake-proxy.service
+[Unit]
+Description=Snowflake Proxy Service
+Documentation=https://snowflake.torproject.org/
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/tor-snowflake/proxy
+ExecStart=/opt/tor-snowflake/proxy/snowflake-proxy -verbose -unsafe-logging
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now snowflake-proxy
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -66,7 +66,7 @@ for i in {1..15}; do
  fi
  sleep 2
 done
-$STD mariadb -u webtrees -p"${MARIADB_DB_PASS}" -h 127.0.0.1 webtrees -e "SHOW TABLES LIKE 'wt_user';" | grep -q wt_user
+mariadb -u webtrees -p"${MARIADB_DB_PASS}" -h 127.0.0.1 webtrees -e "SHOW TABLES LIKE 'wt_user';" | grep -q wt_user
 msg_ok "Initialized Webtrees database schema"
 $STD sudo -u www-data php /opt/webtrees/index.php user Admin \
  --create \
@@ -7706,6 +7706,10 @@ setup_nodejs() {
    fi
  fi

+  if [[ "$(npm -v 2>/dev/null | cut -d. -f1)" -ge 11 ]]; then
+    $STD npm config set dangerously-allow-all-scripts true --location=global 2>/dev/null || true
+  fi
+
  # Set a safe default heap limit for Node.js builds if not explicitly provided.
  # Priority:
  #   1) NODE_OPTIONS (caller/user override)
@@ -27,6 +27,10 @@ APP_TYPE="addon"
 INSTALL_PATH="/opt/portainer"
 COMPOSE_FILE="${INSTALL_PATH}/compose.yaml"
 DEFAULT_PORT=9443
+PORTAINER_IMAGE=""
+COMPOSE_WORKDIR=""
+COMPOSE_SERVICE=""
+COMPOSE_CONFIG_FILES=""

 # Initialize all core functions (colors, formatting, icons, STD mode)
 load_functions
@@ -66,17 +70,166 @@ UPDATEEOF
 }

 # ==============================================================================
-# UPDATE
+# DETECT EXISTING INSTALLATION
 # ==============================================================================
-function update() {
+function detect_portainer() {
+  PORTAINER_IMAGE=""
+  COMPOSE_WORKDIR=""
+  COMPOSE_SERVICE=""
+  COMPOSE_CONFIG_FILES=""
+
+  if ! docker container inspect portainer &>/dev/null; then
+    return 0
+  fi
+
+  PORTAINER_IMAGE=$(docker inspect portainer --format '{{.Config.Image}}')
+  if [[ ! "$PORTAINER_IMAGE" =~ (^|/)portainer-(ce|ee)(:|@) ]]; then
+    msg_error "A container named 'portainer' exists but does not use an official Portainer CE or BE image."
+    exit 10
+  fi
+
+  COMPOSE_WORKDIR=$(docker inspect portainer --format '{{index .Config.Labels "com.docker.compose.project.working_dir"}}' 2>/dev/null || true)
+  COMPOSE_SERVICE=$(docker inspect portainer --format '{{index .Config.Labels "com.docker.compose.service"}}' 2>/dev/null || true)
+  COMPOSE_CONFIG_FILES=$(docker inspect portainer --format '{{index .Config.Labels "com.docker.compose.project.config_files"}}' 2>/dev/null || true)
+  if [[ "$COMPOSE_WORKDIR" == "<no value>" ]]; then
+    COMPOSE_WORKDIR=""
+  fi
+  if [[ "$COMPOSE_SERVICE" == "<no value>" ]]; then
+    COMPOSE_SERVICE=""
+  fi
+  if [[ "$COMPOSE_CONFIG_FILES" == "<no value>" ]]; then
+    COMPOSE_CONFIG_FILES=""
+  fi
+  return 0
+}
+
+# ==============================================================================
+# UPDATE COMPOSE INSTALLATION
+# ==============================================================================
+function update_compose() {
+  local workdir="$1"
+  local service="$2"
+  local config_files="$3"
+  local config
+  local -a configs=()
+  local -a compose_args=()
+
+  if [[ -n "$config_files" ]]; then
+    IFS=',' read -ra configs <<<"$config_files"
+    for config in "${configs[@]}"; do
+      compose_args+=(--file "$config")
+    done
+  fi
+
  msg_info "Pulling latest ${APP} image"
-  cd "$INSTALL_PATH"
-  $STD docker compose pull
+  if [[ -n "$service" ]]; then
+    (cd "$workdir" && $STD docker compose "${compose_args[@]}" pull "$service")
+  else
+    (cd "$workdir" && $STD docker compose pull)
+  fi
  msg_ok "Pulled latest image"

  msg_info "Restarting ${APP}"
-  $STD docker compose up -d --remove-orphans
+  if [[ -n "$service" ]]; then
+    (cd "$workdir" && $STD docker compose "${compose_args[@]}" up -d "$service")
+  else
+    (cd "$workdir" && $STD docker compose up -d --remove-orphans)
+  fi
  msg_ok "Restarted ${APP}"
+}
+
+# ==============================================================================
+# UPDATE STANDALONE INSTALLATION
+# ==============================================================================
+function update_standalone() {
+  local old_image_id latest_image_id restart_name restart_max network_mode container_port host_ip host_port source destination mode writable
+  local was_running privileged user
+  local -a run_args=(-d --name portainer)
+  local -a command=()
+
+  old_image_id=$(docker inspect portainer --format '{{.Image}}')
+  was_running=$(docker inspect portainer --format '{{.State.Running}}')
+  restart_name=$(docker inspect portainer --format '{{.HostConfig.RestartPolicy.Name}}')
+  restart_max=$(docker inspect portainer --format '{{.HostConfig.RestartPolicy.MaximumRetryCount}}')
+  network_mode=$(docker inspect portainer --format '{{.HostConfig.NetworkMode}}')
+  privileged=$(docker inspect portainer --format '{{.HostConfig.Privileged}}')
+  user=$(docker inspect portainer --format '{{.Config.User}}')
+
+  if [[ -n "$restart_name" && "$restart_name" != "no" ]]; then
+    if [[ "$restart_name" == "on-failure" && "$restart_max" -gt 0 ]]; then
+      run_args+=(--restart "${restart_name}:${restart_max}")
+    else
+      run_args+=(--restart "$restart_name")
+    fi
+  fi
+  [[ "$network_mode" != "default" ]] && run_args+=(--network "$network_mode")
+  [[ "$privileged" == "true" ]] && run_args+=(--privileged)
+  [[ -n "$user" ]] && run_args+=(--user "$user")
+
+  while IFS='|' read -r container_port host_ip host_port; do
+    [[ -z "$container_port" || -z "$host_port" ]] && continue
+    [[ "$host_ip" == *:* ]] && host_ip="[${host_ip}]"
+    if [[ -n "$host_ip" && "$host_ip" != "0.0.0.0" ]]; then
+      run_args+=(-p "${host_ip}:${host_port}:${container_port}")
+    else
+      run_args+=(-p "${host_port}:${container_port}")
+    fi
+  done < <(docker inspect portainer --format '{{range $port, $bindings := .HostConfig.PortBindings}}{{range $bindings}}{{printf "%s|%s|%s\n" $port .HostIp .HostPort}}{{end}}{{end}}')
+
+  while IFS='|' read -r source destination mode writable; do
+    [[ -z "$source" || -z "$destination" ]] && continue
+    if [[ "$writable" == "false" ]]; then
+      mode="${mode:+${mode},}ro"
+    fi
+    run_args+=(-v "${source}:${destination}${mode:+:${mode}}")
+  done < <(docker inspect portainer --format '{{range .Mounts}}{{if eq .Type "volume"}}{{.Name}}{{else}}{{.Source}}{{end}}|{{.Destination}}|{{.Mode}}|{{.RW}}{{println}}{{end}}')
+
+  while IFS= read -r environment; do
+    [[ -n "$environment" ]] && run_args+=(-e "$environment")
+  done < <(docker inspect portainer --format '{{range .Config.Env}}{{println .}}{{end}}')
+
+  while IFS= read -r argument; do
+    [[ -n "$argument" ]] && command+=("$argument")
+  done < <(docker inspect portainer --format '{{range .Config.Cmd}}{{println .}}{{end}}')
+
+  msg_info "Pulling latest ${APP} image"
+  $STD docker pull "$PORTAINER_IMAGE"
+  latest_image_id=$(docker image inspect "$PORTAINER_IMAGE" --format '{{.Id}}')
+  msg_ok "Pulled latest image"
+
+  if [[ "$old_image_id" == "$latest_image_id" ]]; then
+    msg_ok "${APP} is already up to date"
+    return 0
+  fi
+
+  msg_info "Recreating ${APP}"
+  [[ "$was_running" == "true" ]] && $STD docker stop portainer
+  $STD docker rm portainer
+  if ! $STD docker run "${run_args[@]}" "$PORTAINER_IMAGE" "${command[@]}"; then
+    msg_warn "Update failed, restoring the previous ${APP} image"
+    docker rm -f portainer &>/dev/null || true
+    if $STD docker run "${run_args[@]}" "$old_image_id" "${command[@]}"; then
+      [[ "$was_running" != "true" ]] && $STD docker stop portainer
+      msg_error "Failed to update ${APP}; restored the previous container."
+    else
+      msg_error "Failed to update or restore ${APP}."
+    fi
+    exit 10
+  fi
+  msg_ok "Recreated ${APP}"
+}
+
+# ==============================================================================
+# UPDATE
+# ==============================================================================
+function update() {
+  if [[ -f "$COMPOSE_FILE" ]]; then
+    update_compose "$INSTALL_PATH" "" ""
+  elif [[ -n "$COMPOSE_WORKDIR" && -n "$COMPOSE_SERVICE" && -d "$COMPOSE_WORKDIR" ]]; then
+    update_compose "$COMPOSE_WORKDIR" "$COMPOSE_SERVICE" "$COMPOSE_CONFIG_FILES"
+  else
+    update_standalone
+  fi

  ensure_update_script

@@ -99,26 +252,16 @@ function check_docker() {
  msg_ok "Docker $(docker --version | cut -d' ' -f3 | tr -d ',') and Docker Compose are available"
 }

-# ==============================================================================
-# CHECK EXISTING CONTAINER
-# ==============================================================================
-function check_existing_container() {
-  # Guards against clobbering a Portainer container not managed by this addon
-  # (e.g. Business/Enterprise Edition installed manually or via the legacy docker.sh flow)
-  if docker ps -a --format '{{.Names}}' | grep -q '^portainer$'; then
-    msg_error "A container named 'portainer' already exists but is not managed by this addon."
-    msg_error "This may be a Portainer Business/Enterprise Edition install or a manual setup."
-    msg_error "Remove/rename that container first, or manage it manually. Exiting."
-    exit 10
-  fi
-}
-
 # ==============================================================================
 # INSTALL
 # ==============================================================================
 function install() {
  check_docker
-  check_existing_container
+  detect_portainer
+  if [[ -n "$PORTAINER_IMAGE" ]]; then
+    msg_error "${APP} is already installed."
+    exit 10
+  fi

  msg_info "Creating install directory"
  mkdir -p "$INSTALL_PATH"
@@ -148,7 +291,9 @@ function install() {
 # Handle type=update (called from update script)
 if [[ "${type:-}" == "update" ]]; then
  header_info
-  if [[ -f "$COMPOSE_FILE" ]]; then
+  check_docker
+  detect_portainer
+  if [[ -f "$COMPOSE_FILE" || -n "$PORTAINER_IMAGE" ]]; then
    update
  else
    msg_error "${APP} is not installed. Nothing to update."
@@ -161,18 +306,20 @@ header_info
 get_lxc_ip

 check_docker
-check_existing_container
+detect_portainer

 # Check if already installed
-if [[ -f "$COMPOSE_FILE" ]]; then
+if [[ -f "$COMPOSE_FILE" || -n "$PORTAINER_IMAGE" ]]; then
  msg_warn "${APP} is already installed."
  echo ""

-  echo -n "${TAB}Uninstall ${APP}? (y/N): "
-  read -r uninstall_prompt
-  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
-    uninstall
-    exit 0
+  if [[ -f "$COMPOSE_FILE" ]]; then
+    echo -n "${TAB}Uninstall ${APP}? (y/N): "
+    read -r uninstall_prompt
+    if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
+      uninstall
+      exit 0
+    fi
  fi

  echo -n "${TAB}Update ${APP}? (y/N): "
@@ -0,0 +1,422 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+
+header_info() {
+  clear
+  cat <<"EOF"
+    ____  ____  __  ___   ____             __     ____           __        ____
+   / __ \/ __ \/  |/  /  / __ \____  _____/ /_   /  _/___  _____/ /_____ _/ / /
+  / /_/ / / / / /|_/ /  / /_/ / __ \/ ___/ __/   / // __ \/ ___/ __/ __ `/ / /
+ / ____/ /_/ / /  / /  / ____/ /_/ (__  ) /_   _/ // / / (__  ) /_/ /_/ / / /
+/_/   /_____/_/  /_/  /_/    \____/____/\__/  /___/_/ /_/____/\__/\__,_/_/_/
+
+EOF
+}
+
+RD=$(echo "\033[01;31m")
+YW=$(echo "\033[33m")
+GN=$(echo "\033[1;92m")
+CL=$(echo "\033[m")
+BFR="\\r\\033[K"
+HOLD="-"
+CM="${GN}✓${CL}"
+CROSS="${RD}✗${CL}"
+
+set -euo pipefail
+shopt -s inherit_errexit nullglob
+
+msg_info() {
+  local msg="$1"
+  echo -ne " ${HOLD} ${YW}${msg}..."
+}
+
+msg_ok() {
+  local msg="$1"
+  echo -e "${BFR} ${CM} ${GN}${msg}${CL}"
+}
+
+msg_error() {
+  local msg="$1"
+  echo -e "${BFR} ${CROSS} ${RD}${msg}${CL}"
+}
+
+# Telemetry
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pdm-install" "pve"
+
+if ! dpkg -s proxmox-datacenter-manager >/dev/null 2>&1; then
+  msg_error "This script is only intended for Proxmox Datacenter Manager"
+  exit 232
+fi
+
+repo_state() {
+  # $1 = component name (e.g. pdm-enterprise, pdm-no-subscription, pdm-test)
+  local repo="$1"
+  local file=""
+  local state="missing"
+  for f in /etc/apt/sources.list /etc/apt/sources.list.d/*.list /etc/apt/sources.list.d/*.sources; do
+    [[ -f "$f" ]] || continue
+    if grep -q "$repo" "$f"; then
+      file="$f"
+      if [[ "$f" == *.sources ]]; then
+        if grep -qiE '^Enabled:\s*(no|false)' "$f"; then
+          state="disabled"
+        else
+          state="active"
+        fi
+      else
+        if grep -qE "^[^#].*${repo}" "$f"; then
+          state="active"
+        elif grep -qE "^#.*${repo}" "$f"; then
+          state="disabled"
+        fi
+      fi
+      break
+    fi
+  done
+  echo "$state $file"
+}
+
+toggle_repo() {
+  # $1 = file, $2 = action (enable|disable)
+  local file="$1" action="$2"
+  if [[ "$file" == *.sources ]]; then
+    if [[ "$action" == "disable" ]]; then
+      if grep -qiE '^Enabled:' "$file"; then
+        sed -i 's/^Enabled:.*/Enabled: false/' "$file"
+      else
+        echo "Enabled: false" >>"$file"
+      fi
+    else
+      sed -i 's/^Enabled:.*/Enabled: true/' "$file"
+    fi
+  else
+    if [[ "$action" == "disable" ]]; then
+      sed -i '/^[^#]/s/^/# /' "$file"
+    else
+      sed -i 's/^# *//' "$file"
+    fi
+  fi
+}
+
+start_routines() {
+  header_info
+  VERSION="$(awk -F'=' '/^VERSION_CODENAME=/{ print $NF }' /etc/os-release)"
+
+  # ---- SOURCES ----
+  CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM SOURCES" --menu \
+    "This will set the correct Debian sources for Proxmox Datacenter Manager.\n\nCorrect sources?" 14 58 2 \
+    "yes" " " \
+    "no" " " 3>&2 2>&1 1>&3)
+  case $CHOICE in
+  yes)
+    msg_info "Correcting Debian Sources"
+    cat <<EOF >/etc/apt/sources.list.d/debian.sources
+Types: deb
+URIs: http://deb.debian.org/debian/
+Suites: ${VERSION} ${VERSION}-updates
+Components: main contrib non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: http://security.debian.org/debian-security/
+Suites: ${VERSION}-security
+Components: main contrib non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+EOF
+    rm -f /etc/apt/sources.list
+    msg_ok "Corrected Debian Sources"
+    ;;
+  no) msg_error "Selected no to Correcting Debian Sources" ;;
+  esac
+
+  # ---- PDM-ENTERPRISE ----
+  read -r state file <<<"$(repo_state pdm-enterprise)"
+  case $state in
+  active)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-ENTERPRISE" \
+      --menu "'pdm-enterprise' repository is currently ENABLED.\n\nIt requires a subscription and will fail apt update without one.\n\nWhat do you want to do?" 16 58 3 \
+      "disable" "Disable this repo" \
+      "keep" "Keep as is" \
+      "delete" "Delete repo file" \
+      3>&2 2>&1 1>&3)
+    case $CHOICE in
+    keep) msg_ok "Kept 'pdm-enterprise' repository" ;;
+    disable)
+      msg_info "Disabling 'pdm-enterprise' repository"
+      toggle_repo "$file" disable
+      msg_ok "Disabled 'pdm-enterprise' repository"
+      ;;
+    delete)
+      msg_info "Deleting 'pdm-enterprise' repository file"
+      rm -f "$file"
+      msg_ok "Deleted 'pdm-enterprise' repository file"
+      ;;
+    esac
+    ;;
+  disabled)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-ENTERPRISE" \
+      --menu "'pdm-enterprise' repository is currently DISABLED.\n\nWhat do you want to do?" 14 58 3 \
+      "keep" "Keep disabled" \
+      "enable" "Enable (subscription required)" \
+      "delete" "Delete repo file" \
+      3>&2 2>&1 1>&3)
+    case $CHOICE in
+    enable)
+      msg_info "Enabling 'pdm-enterprise' repository"
+      toggle_repo "$file" enable
+      msg_ok "Enabled 'pdm-enterprise' repository"
+      ;;
+    keep) msg_ok "Kept 'pdm-enterprise' repository disabled" ;;
+    delete)
+      msg_info "Deleting 'pdm-enterprise' repository file"
+      rm -f "$file"
+      msg_ok "Deleted 'pdm-enterprise' repository file"
+      ;;
+    esac
+    ;;
+  missing)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-ENTERPRISE" \
+      --menu "Add 'pdm-enterprise' repository?\n\nOnly for subscription customers." 14 58 2 \
+      "no" " " \
+      "yes" " " \
+      --default-item "no" \
+      3>&2 2>&1 1>&3)
+    case $CHOICE in
+    yes)
+      msg_info "Adding 'pdm-enterprise' repository"
+      cat <<EOF >/etc/apt/sources.list.d/pdm-enterprise.sources
+Types: deb
+URIs: https://enterprise.proxmox.com/debian/pdm
+Suites: ${VERSION}
+Components: pdm-enterprise
+Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+EOF
+      msg_ok "Added 'pdm-enterprise' repository"
+      ;;
+    no) msg_error "Selected no to Adding 'pdm-enterprise' repository" ;;
+    esac
+    ;;
+  esac
+
+  # ---- PDM-NO-SUBSCRIPTION ----
+  read -r state file <<<"$(repo_state pdm-no-subscription)"
+  case $state in
+  active)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-NO-SUBSCRIPTION" \
+      --menu "'pdm-no-subscription' repository is currently ENABLED.\n\nWhat do you want to do?" 14 58 3 \
+      "keep" "Keep as is" \
+      "disable" "Disable this repo" \
+      "delete" "Delete repo file" \
+      3>&2 2>&1 1>&3)
+    case $CHOICE in
+    keep) msg_ok "Kept 'pdm-no-subscription' repository" ;;
+    disable)
+      msg_info "Disabling 'pdm-no-subscription' repository"
+      toggle_repo "$file" disable
+      msg_ok "Disabled 'pdm-no-subscription' repository"
+      ;;
+    delete)
+      msg_info "Deleting 'pdm-no-subscription' repository file"
+      rm -f "$file"
+      msg_ok "Deleted 'pdm-no-subscription' repository file"
+      ;;
+    esac
+    ;;
+  disabled)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-NO-SUBSCRIPTION" \
+      --menu "'pdm-no-subscription' repository is currently DISABLED.\n\nWhat do you want to do?" 14 58 3 \
+      "enable" "Enable (recommended)" \
+      "keep" "Keep disabled" \
+      "delete" "Delete repo file" \
+      3>&2 2>&1 1>&3)
+    case $CHOICE in
+    enable)
+      msg_info "Enabling 'pdm-no-subscription' repository"
+      toggle_repo "$file" enable
+      msg_ok "Enabled 'pdm-no-subscription' repository"
+      ;;
+    keep) msg_ok "Kept 'pdm-no-subscription' repository disabled" ;;
+    delete)
+      msg_info "Deleting 'pdm-no-subscription' repository file"
+      rm -f "$file"
+      msg_ok "Deleted 'pdm-no-subscription' repository file"
+      ;;
+    esac
+    ;;
+  missing)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-NO-SUBSCRIPTION" \
+      --menu "The 'pdm-no-subscription' repository provides access to all open-source components of Proxmox Datacenter Manager.\n\nAdd 'pdm-no-subscription' repository?" 14 58 2 \
+      "yes" " " \
+      "no" " " \
+      3>&2 2>&1 1>&3)
+    case $CHOICE in
+    yes)
+      msg_info "Adding 'pdm-no-subscription' repository"
+      cat <<EOF >/etc/apt/sources.list.d/proxmox.sources
+Types: deb
+URIs: http://download.proxmox.com/debian/pdm
+Suites: ${VERSION}
+Components: pdm-no-subscription
+Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+EOF
+      msg_ok "Added 'pdm-no-subscription' repository"
+      ;;
+    no) msg_error "Selected no to Adding 'pdm-no-subscription' repository" ;;
+    esac
+    ;;
+  esac
+
+  # ---- PDM-TEST ----
+  read -r state file <<<"$(repo_state pdm-test)"
+  case $state in
+  active) msg_ok "'pdm-test' repository already active (skipped)" ;;
+  disabled) msg_ok "'pdm-test' repository already disabled (skipped)" ;;
+  missing)
+    CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "PDM-TEST" \
+      --menu "The 'pdm-test' repository is used by developers to test new features.\n\nAdd (disabled) 'pdm-test' repository?" 14 58 2 \
+      "yes" " " \
+      "no" " " 3>&2 2>&1 1>&3)
+    case $CHOICE in
+    yes)
+      msg_info "Adding 'pdm-test' repository (disabled)"
+      cat <<EOF >/etc/apt/sources.list.d/pdm-test.sources
+Types: deb
+URIs: http://download.proxmox.com/debian/pdm
+Suites: ${VERSION}
+Components: pdm-test
+Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+Enabled: false
+EOF
+      msg_ok "Added 'pdm-test' repository"
+      ;;
+    no) msg_error "Selected no to Adding 'pdm-test' repository" ;;
+    esac
+    ;;
+  esac
+
+  # ---- SUBSCRIPTION NAG ----
+  CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "SUBSCRIPTION NAG" --menu \
+    "Disable subscription nag in the PDM UI?" 14 58 2 "yes" " " "no" " " 3>&2 2>&1 1>&3)
+  case $CHOICE in
+  yes)
+    whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox --title "Support Subscriptions" \
+      "Supporting the software's development team is essential.\nPlease consider buying a subscription." 10 58
+    msg_info "Disabling subscription nag"
+    mkdir -p /usr/local/bin
+    cat <<'EOF' >/usr/local/bin/pdm-remove-nag.sh
+#!/bin/sh
+# PDM ships its web UI as a Yew/WASM app in a single JS bundle - there is no
+# proxmoxlib.js and no HTML template to patch, so the dialog is confirmed at
+# runtime instead. The nag gates the update refresh: its on_close callback is
+# what sends RefreshAll, so it must be close()d, never removed from the DOM.
+# Re-applied by the apt hook after every package update.
+BUNDLE=/usr/share/javascript/proxmox-datacenter-manager/js/pdm-ui_bundle.js
+if [ -s "$BUNDLE" ] && ! grep -q PDM_NO_MORE_NAGGING "$BUNDLE"; then
+    echo "Patching PDM subscription nag..."
+    cat >>"$BUNDLE" <<'JS'
+
+// PDM_NO_MORE_NAGGING
+(function () {
+  var MARK = 'data-pdm-nag';
+  var dismiss = function (d) {
+    if (d.getAttribute(MARK)) return;
+    d.setAttribute(MARK, '1');
+    var tries = 12;
+    var tick = function () {
+      if (!d.isConnected || tries-- <= 0) return;
+      try { d.close(); } catch (e) {}
+      setTimeout(tick, 120);
+    };
+    requestAnimationFrame(tick);
+  };
+  var scan = function () {
+    document.querySelectorAll('dialog.pwt-outer-dialog').forEach(function (d) {
+      if ((d.textContent || '').indexOf('pdm.proxmox.com') !== -1) dismiss(d);
+    });
+  };
+  var start = function () {
+    scan();
+    new MutationObserver(scan).observe(document.body, { childList: true, subtree: true });
+  };
+  if (document.body) { start(); } else {
+    document.addEventListener('DOMContentLoaded', start);
+  }
+})();
+JS
+fi
+EOF
+    chmod 755 /usr/local/bin/pdm-remove-nag.sh
+    /usr/local/bin/pdm-remove-nag.sh >/dev/null 2>&1
+
+    cat <<'EOF' >/etc/apt/apt.conf.d/no-nag-script
+DPkg::Post-Invoke { "/usr/local/bin/pdm-remove-nag.sh"; };
+EOF
+    chmod 644 /etc/apt/apt.conf.d/no-nag-script
+    msg_ok "Disabled subscription nag (clear browser cache!)"
+    ;;
+  no)
+    msg_error "Selected no to Disabling subscription nag"
+    rm -f /etc/apt/apt.conf.d/no-nag-script /usr/local/bin/pdm-remove-nag.sh 2>/dev/null
+    apt --reinstall install proxmox-datacenter-manager-ui &>/dev/null || msg_error "UI reinstall failed"
+    ;;
+  esac
+
+  # ---- UPDATE ----
+  CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "UPDATE" --menu \
+    "Update Proxmox Datacenter Manager now?" 11 58 2 "yes" " " "no" " " 3>&2 2>&1 1>&3)
+  case $CHOICE in
+  yes)
+    msg_info "Updating Proxmox Datacenter Manager (Patience)"
+    apt update &>/dev/null || msg_error "apt update failed"
+    apt -y dist-upgrade &>/dev/null || msg_error "apt dist-upgrade failed"
+    msg_ok "Updated Proxmox Datacenter Manager"
+    ;;
+  no) msg_error "Selected no to updating Proxmox Datacenter Manager" ;;
+  esac
+
+  # ---- REMINDER ----
+  whiptail --backtitle "Proxmox VE Helper Scripts" --title "Post-Install Reminder" --msgbox \
+    "IMPORTANT:
+
+Proxmox Datacenter Manager is still under active development. Do not rely on it as the only management path to your nodes.
+
+After completing these steps, it is strongly recommended to REBOOT.
+
+After the upgrade or post-install routines, always clear your browser cache or perform a hard reload (Ctrl+Shift+R) before using the PDM Web UI to avoid UI display issues." 20 80
+
+  # ---- REBOOT ----
+  CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "REBOOT" --menu \
+    "Reboot Proxmox Datacenter Manager now? (recommended)" 11 58 2 "yes" " " "no" " " 3>&2 2>&1 1>&3)
+  case $CHOICE in
+  yes)
+    msg_info "Rebooting Proxmox Datacenter Manager"
+    sleep 2
+    msg_ok "Completed Post Install Routines"
+    reboot
+    ;;
+  no)
+    msg_error "Selected no to reboot (Reboot recommended)"
+    msg_ok "Completed Post Install Routines"
+    ;;
+  esac
+}
+
+header_info
+echo -e "\nThis script will Perform Post Install Routines.\n"
+while true; do
+  read -rp "Start the Proxmox Datacenter Manager Post Install Script (y/n)? " yn
+  case $yn in
+  [Yy]*) break ;;
+  [Nn]*)
+    clear
+    exit
+    ;;
+  *) echo "Please answer yes or no." ;;
+  esac
+done
+
+start_routines
Author	SHA1	Message	Date
MickLesk	43f85ee8e5	formatting	2026-08-10 17:52:44 +02:00
MickLesk	ccb490d7dd	pelican-panel: keep MARIADB_DB_NAME/USER as real shell vars	2026-08-10 17:51:11 +02:00
MickLesk	bad9ae090b	localhost	2026-08-10 17:49:06 +02:00
MickLesk	23e6807d3d	add echo "yes"	2026-08-10 17:48:56 +02:00
MickLesk	de1b9c112f	pelican; use db setup	2026-08-10 17:47:15 +02:00
MickLesk	5c126e02b8	pelican-panel: create missing sqlite database file before install	2026-08-10 17:38:13 +02:00
MickLesk	1001309bde	Document the dev mode flags that exist dryrun was listed but is gone from core: it intercepted only the silent() wrapper, so pct create ran anyway and the container was built. net and timing were missing, as was the picker that dev_mode without a flag now opens.	2026-08-10 15:21:10 +02:00
community-scripts-pr-app[bot]	d9d34761d2	Update CHANGELOG.md (#16392 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-10 10:02:50 +00:00
CanbiZ (MickLesk)	b7bc9d7d06	ErsatzTV: update ffmpeg to 8.1 version (#16383 )	2026-08-10 12:02:24 +02:00
community-scripts-pr-app[bot]	5a75054083	Update CHANGELOG.md (#16391 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-10 07:11:43 +00:00
community-scripts-pr-app[bot]	c41d0149c4	Update CHANGELOG.md (#16390 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-10 07:11:23 +00:00
push-app-to-main[bot]	a631eafe27	GitLab (#16386 ) * Add gitlab (ct) * Update script messages for GitLab installation --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>	2026-08-10 09:11:15 +02:00
push-app-to-main[bot]	45cfab02a9	TeslaMate (#16385 ) * Add teslamate (ct) * Fix source command for build.func in teslamate.sh --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>	2026-08-10 09:10:56 +02:00
community-scripts-pr-app[bot]	3c9540f491	Update CHANGELOG.md (#16389 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-10 07:08:03 +00:00
push-app-to-main[bot]	72e0ac5cf7	tor-snowflake (#15684 ) * Add tor-snowflake (ct) * Change default var_arm64 value from 'no' to 'yes' * Remove empty line in tor-snowflake.sh * Change to helper function * Update tor-snowflake-install.sh * Update tor-snowflake.sh * license --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com> Co-authored-by: michel.roegl-brunner@htl-braunau.at <michel.roegl-brunner@htl-braunau.at>	2026-08-10 09:07:32 +02:00
community-scripts-pr-app[bot]	6ae19c8a22	Update CHANGELOG.md (#16381 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-10 00:05:16 +00:00
push-app-to-main[bot]	d734d2204f	Add post-pdm-install (pve) (#16368 ) Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>	2026-08-10 10:04:51 +10:00
community-scripts-pr-app[bot]	43e3f5215d	Update CHANGELOG.md (#16378 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 18:23:08 +00:00
CanbiZ (MickLesk)	3ed946390f	Portainer: Update existing CE and BE installations (#16357 )	2026-08-09 20:22:40 +02:00
community-scripts-pr-app[bot]	4626ec8845	Update CHANGELOG.md (#16377 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 18:09:09 +00:00
fudian	579c1b6b26	Fix: CouchDB Erlang cookie breaks vm.args (use hex) (#16361 ) * CouchDB: generate an Erlang-safe (hex) cookie ERLANG_COOKIE was generated with `openssl rand -base64 32`, whose output contains +, / and = (e.g. "+w2dDazB/CrIZMsZu8edX4hn55QeRXOCi+hom25Lmm8="). CouchDB writes the cookie into /opt/couchdb/etc/vm.args as `-setcookie '<cookie>'`, and those characters break Erlang's vm.args parsing, so couchdb.service fails to start on a fresh install (#16360). Use `openssl rand -hex 32` instead: a 64-char hex string is alphanumeric, needs no quoting, and is always a valid Erlang cookie. (Same 256-bit entropy as the base64 of 32 bytes.) Closes #16360 * Update install/apache-couchdb-install.sh --------- Co-authored-by: Sam Heinz <sam@samheinz.com>	2026-08-09 20:08:41 +02:00
community-scripts-pr-app[bot]	5264fc5897	Update CHANGELOG.md (#16374 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 16:50:47 +00:00
community-scripts-pr-app[bot]	6063f0747d	Update CHANGELOG.md (#16373 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 16:50:32 +00:00
CanbiZ (MickLesk)	5374826753	SparkyFitness: Install Git for frontend builds (#16352 )	2026-08-09 18:50:22 +02:00
community-scripts-pr-app[bot]	b32071de43	Update CHANGELOG.md (#16372 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 16:50:12 +00:00
CanbiZ (MickLesk)	af10e10f20	Byparr: Use invisible-playwright browser setup (#16353 )	2026-08-09 18:50:05 +02:00
CanbiZ (MickLesk)	ad09299de7	Crafty Controller: Restore ownership after updates (#16354 )	2026-08-09 18:49:50 +02:00
community-scripts-pr-app[bot]	5f71caac5b	Update CHANGELOG.md (#16371 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 16:49:48 +00:00
CanbiZ (MickLesk)	87db412709	Webtrees: Fix schema check in silent mode (#16355 )	2026-08-09 18:49:38 +02:00
CanbiZ (MickLesk)	83ad1c972d	SigNoz: Allow legacy metadata schema on ClickHouse 26 (#16356 )	2026-08-09 18:49:26 +02:00
community-scripts-pr-app[bot]	d11d3156db	Update CHANGELOG.md (#16369 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 14:19:55 +00:00
CanbiZ (MickLesk)	773b46c969	github: update Star History links and image sources (#16367 )	2026-08-09 16:19:29 +02:00
community-scripts-pr-app[bot]	d87e59f626	Update CHANGELOG.md (#16363 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 00:07:00 +00:00
community-scripts-pr-app[bot]	d69579d477	Archive old changelog entries (#16362 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-09 00:06:30 +00:00
community-scripts-pr-app[bot]	8386465a92	Update CHANGELOG.md (#16338 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-08 02:38:26 +00:00
push-app-to-main[bot]	bcec3c405a	Ignis (#16330 ) * Add ignis (ct) * Fix source line to always use community scripts URL Updated the source line to always fetch from the community scripts repository. * Apply suggestion from @tremor021 --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com> Co-authored-by: Slaviša Arežina <58952836+tremor021@users.noreply.github.com>	2026-08-08 12:37:57 +10:00
community-scripts-pr-app[bot]	4c8f5bd1f0	Update CHANGELOG.md (#16337 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-08-08 02:35:25 +00:00
CanbiZ (MickLesk)	d87fef0892	core - setup_nodejs: bypass npm allowScripts policy globally on npm >=11 (#16280 ) * setup_nodejs: bypass npm allowScripts policy globally on npm >=11 * Update misc/tools.func Co-authored-by: Sam Heinz <sam@samheinz.com> --------- Co-authored-by: Sam Heinz <sam@samheinz.com>	2026-08-08 12:35:03 +10:00