Update CHANGELOG.md (#16494)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -521,6 +521,39 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-08-14
+
+### 🆕 New Scripts
+
+  - GoDoxy ([#16470](https://github.com/community-scripts/ProxmoxVE/pull/16470))
+- Mumble ([#16474](https://github.com/community-scripts/ProxmoxVE/pull/16474))
+- Fleet ([#16472](https://github.com/community-scripts/ProxmoxVE/pull/16472))
+- Newt ([#16473](https://github.com/community-scripts/ProxmoxVE/pull/16473))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(ampache): update to PHP 8.5 asset, auto-upgrade PHP on update [@CervezaStallone](https://github.com/CervezaStallone) ([#16484](https://github.com/community-scripts/ProxmoxVE/pull/16484))
+
+## 2026-08-13
+
+### 🆕 New Scripts
+
+  - SuggestArr ([#16449](https://github.com/community-scripts/ProxmoxVE/pull/16449))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(stirling-pdf): LibreOffice listener collides with unoserver on UNO port 2002, burning a core [@angusmaul](https://github.com/angusmaul) ([#16460](https://github.com/community-scripts/ProxmoxVE/pull/16460))
+    - fix(reitti): enable SNI for tile cache [@kylemd](https://github.com/kylemd) ([#16463](https://github.com/community-scripts/ProxmoxVE/pull/16463))
+    - [wanderer] refactor [@johanngrobe](https://github.com/johanngrobe) ([#16448](https://github.com/community-scripts/ProxmoxVE/pull/16448))
+
+  - #### ✨ New Features
+
+    - feat: Update koillection-install.sh to support API usage [@Crazy-Duck](https://github.com/Crazy-Duck) ([#16425](https://github.com/community-scripts/ProxmoxVE/pull/16425))
+
 ## 2026-08-12
 
 ### 🆕 New Scripts

ct/ampache.sh

@@ -39,7 +39,15 @@ function update_script() {
       /opt/ampache/public/play/.htaccess \
       /opt/ampache/advanced-config
 
-    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
+    if ! dpkg -l 2>/dev/null | grep -q "libapache2-mod-php8.5"; then
+      PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
+      sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
+        -e 's/post_max_size = .*/post_max_size = 100M/' \
+        -e 's/max_execution_time = .*/max_execution_time = 600/' \
+        -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.5/apache2/php.ini
+    fi
+
+    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.5.zip"
 
     restore_backup
     chmod 664 /opt/ampache/public/rest/.htaccess /opt/ampache/public/play/.htaccess

ct/fleet.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/fleetdm/fleet
+
+APP="Fleet"
+var_tags="${var_tags:-monitoring;device-management;security}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-ubuntu}"
+var_version="${var_version:-24.04}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /opt/fleet/fleet ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "fleet" "fleetdm/fleet"; then
+    msg_info "Stopping Service"
+    systemctl stop fleet
+    msg_ok "Stopped Service"
+
+    fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
+    chmod +x /opt/fleet/fleet
+
+    msg_info "Running Database Migrations"
+    set -a && source /opt/fleet/.env && set +a
+    $STD /opt/fleet/fleet prepare db --no-prompt
+    msg_ok "Ran Database Migrations"
+
+    msg_info "Starting Service"
+    systemctl start fleet
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
+echo -e "${INFO}${YW} Admin Email:${CL} ${BGN}admin@fleet.local${CL}"
+echo -e "${INFO}${YW} Admin Password:${CL} ${BGN}Check inside the container: cat /opt/fleet/.env${CL}"

ct/godoxy.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ) | Co-Authors: yusing
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/yusing/godoxy
+
+APP="GoDoxy"
+var_tags="${var_tags:-reverse-proxy;webserver;network}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-2}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /opt/godoxy/godoxy ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "godoxy" "yusing/godoxy"; then
+    msg_info "Stopping Service"
+    systemctl stop godoxy
+    msg_ok "Stopped Service"
+
+    create_backup \
+      /opt/godoxy/config \
+      /opt/godoxy/data \
+      /opt/godoxy/error_pages \
+      /etc/godoxy.env \
+      /etc/ssl/godoxy
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
+    restore_backup
+
+    msg_info "Starting Service"
+    systemctl start godoxy
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
+echo -e "${INFO}${YW}Login as admin; the generated password is stored in /etc/godoxy.env.${CL}"

ct/headers/fleet

@@ -0,0 +1,6 @@
+    ________          __ 
+   / ____/ /__  ___  / /_
+  / /_  / / _ \/ _ \/ __/
+ / __/ / /  __/  __/ /_  
+/_/   /_/\___/\___/\__/  
+                         

ct/headers/godoxy

@@ -0,0 +1,6 @@
+   ______      ____                  
+  / ____/___  / __ \____  _  ____  __
+ / / __/ __ \/ / / / __ \| |/_/ / / /
+/ /_/ / /_/ / /_/ / /_/ />  </ /_/ / 
+\____/\____/_____/\____/_/|_|\__, /  
+                            /____/   

ct/headers/mumble

@@ -0,0 +1,6 @@
+    __  ___                __    __   
+   /  |/  /_  ______ ___  / /_  / /__ 
+  / /|_/ / / / / __ `__ \/ __ \/ / _ \
+ / /  / / /_/ / / / / / / /_/ / /  __/
+/_/  /_/\__,_/_/ /_/ /_/_.___/_/\___/ 
+                                      

ct/headers/newt

@@ -0,0 +1,6 @@
+    _   __             __ 
+   / | / /__ _      __/ /_
+  /  |/ / _ \ | /| / / __/
+ / /|  /  __/ |/ |/ / /_  
+/_/ |_/\___/|__/|__/\__/  
+                          

ct/headers/suggestarr

@@ -0,0 +1,6 @@
+   _____                             __  ___             
+  / ___/__  ______ _____ ____  _____/ /_/   |  __________
+  \__ \/ / / / __ `/ __ `/ _ \/ ___/ __/ /| | / ___/ ___/
+ ___/ / /_/ / /_/ / /_/ /  __(__  ) /_/ ___ |/ /  / /    
+/____/\__,_/\__, /\__, /\___/____/\__/_/  |_/_/  /_/     
+           /____//____/                                  

ct/mumble.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.mumble.info/
+
+APP="Mumble"
+var_tags="${var_tags:-voice;chat;gaming}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/mumble/mumble-server.ini ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "mumble" "mumble-voip/mumble"; then
+    msg_info "Stopping Service"
+    systemctl stop mumble-server
+    msg_ok "Stopped Service"
+
+    create_backup /etc/mumble/mumble-server.ini /var/lib/mumble-server/mumble-server.sqlite
+
+    msg_info "Updating Mumble"
+    $STD apt update
+    $STD apt install -y mumble-server
+    cat <<EOF >~/.mumble
+$(get_latest_github_release "mumble-voip/mumble")
+EOF
+    msg_ok "Updated Mumble"
+
+    restore_backup
+
+    msg_info "Starting Service"
+    systemctl start mumble-server
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Connect using:${CL}"
+echo -e "${GATEWAY}${BGN}${IP}:64738${CL}"

ct/newt.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Arubinu
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/fosrl/newt
+
+APP="Newt"
+var_tags="${var_tags:-network;tunnel}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-256}"
+var_disk="${var_disk:-2}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/newt/newt.env ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "newt" "fosrl/newt"; then
+    msg_info "Stopping Service"
+    systemctl stop newt
+    msg_ok "Stopped Service"
+
+    fetch_and_deploy_gh_release "newt" "fosrl/newt" "singlefile" "latest" "/opt/newt" "newt_linux_$(arch_resolve)"
+    ln -sf /opt/newt/newt /usr/local/bin/newt
+
+    msg_info "Starting Service"
+    systemctl start newt
+    msg_ok "Started Service"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${INFO}${YW} Check the site status in your Pangolin dashboard.${CL}"

ct/reitti.sh

@@ -223,6 +223,8 @@ http {
       proxy_pass $upstream_url;
       proxy_set_header Host $proxy_host;
       proxy_set_header User-Agent "Reitti/1.0";
+      proxy_ssl_server_name on;
+      proxy_ssl_name $proxy_host;
       proxy_cache tiles;
       proxy_cache_key $upstream_url;
       proxy_cache_valid 200 30d;

ct/stirling-pdf.sh

@@ -43,8 +43,20 @@ function update_script() {
     find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
     msg_ok "Patched Native Libraries"
 
+    if [[ -f /etc/systemd/system/libreoffice-listener.service ]]; then
+      msg_info "Removing Conflicting LibreOffice Listener"
+      systemctl disable -q --now libreoffice-listener
+      rm -f /etc/systemd/system/libreoffice-listener.service
+      sed -i '/^Requires=libreoffice-listener.service$/d' /etc/systemd/system/stirlingpdf.service /etc/systemd/system/unoserver.service
+      sed -i 's/^After=syslog.target network.target libreoffice-listener.service$/After=syslog.target network.target unoserver.service/' /etc/systemd/system/stirlingpdf.service
+      sed -i 's/^After=libreoffice-listener.service$/After=network.target/' /etc/systemd/system/unoserver.service
+      systemctl daemon-reload
+      systemctl reset-failed libreoffice-listener.service 2>/dev/null || true
+      msg_ok "Removed Conflicting LibreOffice Listener"
+    fi
+
     msg_info "Stopping Services"
-    systemctl stop stirlingpdf libreoffice-listener unoserver
+    systemctl stop stirlingpdf unoserver
     msg_ok "Stopped Services"
 
     if [[ -f ~/.Stirling-PDF-login ]]; then
@@ -59,7 +71,7 @@ function update_script() {
     msg_ok "Font Cache Updated"
 
     msg_info "Starting Services"
-    systemctl start stirlingpdf libreoffice-listener unoserver
+    systemctl start unoserver stirlingpdf
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/suggestarr.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/giuseppe99barchetta/SuggestArr
+
+APP="SuggestArr"
+var_tags="${var_tags:-arr;media}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/suggestarr ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr"; then
+    msg_info "Stopping Service"
+    systemctl stop suggestarr
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"
+
+    msg_info "Building Frontend"
+    cd /opt/suggestarr/client
+    $STD npm install
+    $STD npm run build
+    mkdir -p /opt/suggestarr/static
+    cp -r /opt/suggestarr/client/dist/* /opt/suggestarr/static/
+    cp -r /opt/suggestarr/client/node_modules/swagger-ui-dist /opt/suggestarr/static/swagger-ui
+    msg_ok "Built Frontend"
+
+    msg_info "Updating Python Environment"
+    cd /opt/suggestarr
+    $STD uv venv --python 3.12 /opt/suggestarr/.venv
+    $STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_service/requirements.txt
+    msg_ok "Updated Python Environment"
+
+    msg_info "Starting Service"
+    systemctl start suggestarr
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:5000${CL}"

ct/wanderer.sh

@@ -25,17 +25,111 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -f /opt/wanderer/start.sh ]]; then
+  if [[ ! -d /opt/wanderer/source ]]; then
     msg_error "No wanderer Installation Found!"
     exit
   fi
 
+  if [[ ! -f /etc/systemd/system/meilisearch.service ]]; then
+    msg_info "Migrating MeiliSearch"
+    systemctl stop wanderer-web
+
+    rm -rf /opt/wanderer/source/search
+    MEILI_MASTER_KEY_VAL=$(grep -oP '^MEILI_MASTER_KEY=\K.*' /opt/wanderer/.env)
+    cat <<EOF >/etc/meilisearch.toml
+env = "production"
+master_key = "$MEILI_MASTER_KEY_VAL"
+db_path = "/opt/wanderer/data/meili_data"
+dump_dir = "/var/lib/meilisearch/dumps"
+snapshot_dir = "/var/lib/meilisearch/snapshots"
+no_analytics = true
+http_addr = "127.0.0.1:7700"
+EOF
+    mkdir -p /var/lib/meilisearch/dumps /var/lib/meilisearch/snapshots
+
+    cat <<EOF >/etc/systemd/system/meilisearch.service
+[Unit]
+Description=Meilisearch
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    systemctl daemon-reload
+    systemctl enable -q --now meilisearch
+
+    sed -i \
+      -e "s|^MEILI_HTTP_ADDR=.*|MEILI_HTTP_ADDR=127.0.0.1:7700|" \
+      -e "s|^MEILI_URL=.*|MEILI_URL=http://127.0.0.1:7700|" \
+      /opt/wanderer/.env
+
+    msg_ok "Migrated Meilisearch"
+  fi
+
+  setup_meilisearch
+
+  if [[ -f /opt/wanderer/start.sh ]]; then
+    msg_info "Migrating wanderer services"
+    systemctl stop wanderer-web
+    rm -f /opt/wanderer/start.sh
+    rm -rf /opt/wanderer/source/search
+
+    cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
+[Unit]
+Description=wanderer PocketBase
+Wants=network.target
+After=network.target
+PartOf=wanderer-web.service
+StartLimitIntervalSec=10
+StartLimitBurst=5
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/wanderer/source/db
+EnvironmentFile=/opt/wanderer/.env
+ExecStart=/opt/wanderer/source/db/pocketbase serve --http=\${PB_URL} --dir=\${PB_DB_LOCATION}
+Restart=always
+RestartSec=1
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+    cat <<EOF >/etc/systemd/system/wanderer-web.service
+[Unit]
+Description=wanderer
+Wants=network.target meilisearch.service wanderer-pocketbase.service
+After=network.target meilisearch.service wanderer-pocketbase.service
+StartLimitIntervalSec=10
+StartLimitBurst=5
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/wanderer/source/web
+EnvironmentFile=/opt/wanderer/.env
+ExecStart=/usr/bin/node build
+Restart=always
+RestartSec=1
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    systemctl daemon-reload
+    systemctl enable -q wanderer-pocketbase
+    systemctl start wanderer-web
+    msg_ok "Migrated wanderer services"
+  fi
+
   if check_for_gh_release "wanderer" "open-wanderer/wanderer"; then
     msg_info "Stopping service"
     systemctl stop wanderer-web
     msg_ok "Stopped service"
 
-    create_backup /opt/wanderer/source/search
+    create_backup /opt/wanderer/source
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
     restore_backup
 
@@ -60,19 +154,6 @@ function update_script() {
     msg_ok "Started service"
     msg_ok "Update Successful"
   fi
-  if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
-    msg_info "Stopping service"
-    systemctl stop wanderer-web
-    msg_ok "Stopped service"
-
-    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
-    grep -q -- '--upgrade-db' /opt/wanderer/start.sh || sed -i 's|meilisearch --master-key|meilisearch --upgrade-db --master-key|' /opt/wanderer/start.sh
-
-    msg_info "Starting service"
-    systemctl start wanderer-web
-    msg_ok "Started service"
-    msg_ok "Update Successful"
-  fi
   exit
 }
 

install/ampache-install.sh

@@ -27,11 +27,11 @@ $STD apt install -y \
   libvpx-dev
 msg_ok "Installed dependencies"
 
-PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
 setup_mariadb
 MARIADB_DB_USER="ampache" MARIADB_DB_NAME="ampache" setup_mariadb_db
 
-fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
+fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.5.zip"
 
 msg_info "Setting up Ampache"
 rm -rf /var/www/html
@@ -58,7 +58,7 @@ msg_info "Configuring PHP"
 sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
   -e 's/post_max_size = .*/post_max_size = 100M/' \
   -e 's/max_execution_time = .*/max_execution_time = 600/' \
-  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.4/apache2/php.ini
+  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.5/apache2/php.ini
 $STD a2enmod rewrite
 $STD systemctl restart apache2
 msg_ok "Configured PHP"

install/fleet-install.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/fleetdm/fleet
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y redis-server mysql-server
+msg_ok "Installed Dependencies"
+
+MYSQL_DB_NAME="fleet" MYSQL_DB_USER="fleet" setup_mysql_db
+fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
+
+msg_info "Configuring Application"
+chmod +x /opt/fleet/fleet
+PRIVATE_KEY=$(openssl rand -hex 32)
+cat <<EOF >/opt/fleet/.env
+FLEET_MYSQL_ADDRESS=127.0.0.1:3306
+FLEET_MYSQL_DATABASE=fleet
+FLEET_MYSQL_USERNAME=fleet
+FLEET_MYSQL_PASSWORD=${MYSQL_DB_PASS}
+FLEET_SERVER_ADDRESS=0.0.0.0:8080
+FLEET_SERVER_TLS=false
+FLEET_SERVER_PRIVATE_KEY=${PRIVATE_KEY}
+FLEET_REDIS_ADDRESS=127.0.0.1:6379
+FLEET_LOGGING_JSON=true
+EOF
+msg_ok "Configured Application"
+
+msg_info "Running Database Migrations"
+set -a && source /opt/fleet/.env && set +a
+$STD /opt/fleet/fleet prepare db --no-prompt
+msg_ok "Ran Database Migrations"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/fleet.service
+[Unit]
+Description=Fleet
+After=network.target mysql.service redis-server.service
+Requires=mysql.service redis-server.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/fleet
+EnvironmentFile=/opt/fleet/.env
+ExecStart=/opt/fleet/fleet serve
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now fleet redis-server
+msg_ok "Created Service"
+
+msg_info "Initializing Fleet"
+FLEET_ADMIN_EMAIL="admin@fleet.local"
+FLEET_ADMIN_PASS="$(openssl rand -hex 8)1!"
+ELAPSED=0
+until curl -sf "http://127.0.0.1:8080/healthz" >/dev/null 2>&1; do
+  sleep 2
+  ELAPSED=$((ELAPSED + 2))
+  [[ $ELAPSED -ge 60 ]] && break
+done
+SETUP_RESPONSE=$(curl -s -X POST "http://127.0.0.1:8080/api/v1/setup" \
+  -H "Content-Type: application/json" \
+  -d "{\"admin\":{\"admin\":true,\"email\":\"${FLEET_ADMIN_EMAIL}\",\"name\":\"Admin\",\"password\":\"${FLEET_ADMIN_PASS}\"},\"org_info\":{\"org_name\":\"Fleet\",\"org_logo_url\":\"\"},\"server_url\":\"http://127.0.0.1:8080\"}")
+FLEET_TOKEN=$(echo "${SETUP_RESPONSE}" | grep -o '"token":"[^"]*"' | cut -d'"' -f4) || true
+if [[ -n "${FLEET_TOKEN}" ]]; then
+  curl -s -X PATCH "http://127.0.0.1:8080/api/latest/fleet/config" \
+    -H "Content-Type: application/json" \
+    -H "Authorization: Bearer ${FLEET_TOKEN}" \
+    -d "{\"server_settings\":{\"server_url\":\"http://${LOCAL_IP}:8080\"}}" >/dev/null
+fi
+cat <<EOF >>/opt/fleet/.env
+FLEET_ADMIN_EMAIL=${FLEET_ADMIN_EMAIL}
+FLEET_ADMIN_PASSWORD=${FLEET_ADMIN_PASS}
+EOF
+msg_ok "Initialized Fleet"
+
+motd_ssh
+customize
+cleanup_lxc

install/godoxy-install.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# Co-Authors: yusing
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/yusing/godoxy
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
+
+msg_info "Generating Self-Signed Certificate"
+create_self_signed_cert "godoxy"
+msg_ok "Generated Self-Signed Certificate"
+
+msg_info "Configuring GoDoxy"
+mkdir -p \
+  /opt/godoxy/config/middlewares \
+  /opt/godoxy/data \
+  /opt/godoxy/error_pages
+
+cat <<EOF >/opt/godoxy/config/config.yml
+autocert:
+  provider: local
+  cert_path: /etc/ssl/godoxy/godoxy.crt
+  key_path: /etc/ssl/godoxy/godoxy.key
+
+providers:
+  include:
+    - routes.yml
+
+webui:
+  aliases:
+    - "${LOCAL_IP}"
+EOF
+
+cat <<'EOF' >/opt/godoxy/config/routes.yml
+{}
+EOF
+
+cat <<EOF >/etc/godoxy.env
+GODOXY_API_USER="admin"
+GODOXY_API_PASSWORD="$(openssl rand -hex 16)"
+GODOXY_API_JWT_SECRET="$(openssl rand -base64 32)"
+EOF
+chmod 600 /etc/godoxy.env
+msg_ok "Configured GoDoxy"
+
+msg_info "Creating Service"
+cat <<'EOF' >/etc/systemd/system/godoxy.service
+[Unit]
+Description=GoDoxy Reverse Proxy
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+Group=root
+WorkingDirectory=/opt/godoxy
+EnvironmentFile=/etc/godoxy.env
+ExecStart=/opt/godoxy/godoxy
+Restart=on-failure
+RestartSec=5
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=full
+ReadWritePaths=/opt/godoxy /etc/ssl/godoxy
+UMask=0077
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now godoxy
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/koillection-install.sh

@@ -38,6 +38,7 @@ export APP_RUNTIME='Symfony\Component\Runtime\SymfonyRuntime'
 $STD composer install --no-dev -o --no-interaction --classmap-authoritative
 $STD php bin/console doctrine:migrations:migrate --no-interaction
 $STD php bin/console app:translations:dump
+$STD php bin/console lexik:jwt:generate-keypair --skip-if-exists
 cd assets/
 $STD yarn install
 $STD yarn build
@@ -51,6 +52,7 @@ cat <<EOF >/etc/apache2/sites-available/koillection.conf
     ServerName koillection
     DocumentRoot /opt/koillection/public
     SetEnv APP_RUNTIME "Symfony\\Component\\Runtime\\SymfonyRuntime"
+    SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=\$1
     <Directory /opt/koillection/public>
         Options Indexes FollowSymLinks
         AllowOverride All

install/mumble-install.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.mumble.info/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Mumble"
+$STD apt install -y mumble-server
+cat <<EOF >~/.mumble
+$(get_latest_github_release "mumble-voip/mumble")
+EOF
+msg_ok "Installed Mumble"
+
+msg_info "Configuring Mumble"
+mkdir -p /var/lib/mumble-server
+cat <<EOF >/etc/mumble/mumble-server.ini
+database=/var/lib/mumble-server/mumble-server.sqlite
+sqlite_wal=2
+port=64738
+users=100
+bandwidth=558000
+allowping=true
+obfuscate=true
+ice="tcp -h 127.0.0.1 -p 6502"
+icesecretwrite=$(tr -d '-' </proc/sys/kernel/random/uuid)
+EOF
+chown -R mumble-server:mumble-server /var/lib/mumble-server
+chown root:mumble-server /etc/mumble/mumble-server.ini
+chmod 640 /etc/mumble/mumble-server.ini
+msg_ok "Configured Mumble"
+
+msg_info "Setting SuperUser Password"
+MUMBLE_PASSWORD=$(tr -d '-' </proc/sys/kernel/random/uuid)
+mumble-server -ini /etc/mumble/mumble-server.ini -supw "$MUMBLE_PASSWORD"
+chown -R mumble-server:mumble-server /var/lib/mumble-server
+msg_ok "Set SuperUser password: ${MUMBLE_PASSWORD}"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/mumble-server.service
+[Unit]
+Description=Mumble Server
+After=network.target
+
+[Service]
+Type=simple
+User=mumble-server
+Group=mumble-server
+ExecStart=/usr/bin/mumble-server -ini /etc/mumble/mumble-server.ini -fg
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now mumble-server
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/newt-install.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Arubinu
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/fosrl/newt
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "newt" "fosrl/newt" "singlefile" "latest" "/opt/newt" "newt_linux_$(arch_resolve)"
+ln -sf /opt/newt/newt /usr/local/bin/newt
+
+if [[ -z "${NEWT_ID:-}" ]]; then
+  read -rp "Newt ID (from your Pangolin dashboard): " NEWT_ID
+fi
+if [[ -z "${NEWT_SECRET:-}" ]]; then
+  read -rsp "Newt Secret: " NEWT_SECRET
+  echo
+fi
+if [[ -z "${PANGOLIN_ENDPOINT:-}" ]]; then
+  read -rp "Pangolin endpoint (e.g. https://pangolin.example.com): " PANGOLIN_ENDPOINT
+fi
+
+if [[ -z "$NEWT_ID" || -z "$NEWT_SECRET" || -z "$PANGOLIN_ENDPOINT" ]]; then
+  msg_error "Newt ID, Secret and Endpoint are all required. Aborting."
+  exit 1
+fi
+
+msg_info "Configuring Newt"
+mkdir -p /etc/newt
+cat <<EOF >/etc/newt/newt.env
+NEWT_ID=${NEWT_ID}
+NEWT_SECRET=${NEWT_SECRET}
+PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}
+EOF
+chmod 600 /etc/newt/newt.env
+msg_ok "Configured Newt"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/newt.service
+[Unit]
+Description=Newt (Pangolin tunnel client)
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+EnvironmentFile=/etc/newt/newt.env
+ExecStart=/usr/local/bin/newt
+Restart=always
+RestartSec=2
+UMask=0077
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now newt
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/reitti-install.sh

@@ -46,6 +46,8 @@ http {
       proxy_pass $upstream_url;
       proxy_set_header Host $proxy_host;
       proxy_set_header User-Agent "Reitti/1.0";
+      proxy_ssl_server_name on;
+      proxy_ssl_name $proxy_host;
       proxy_cache tiles;
       proxy_cache_key $upstream_url;
       proxy_cache_valid 200 30d;

install/stirling-pdf-install.sh

@@ -132,27 +132,12 @@ $STD fc-cache -fv
 msg_ok "Font Cache Updated"
 
 msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/libreoffice-listener.service
+# unoserver starts and supervises its own LibreOffice on UNO port 2002, so a separate
-[Unit]
+# listener on that port only collides with it. Do not reintroduce one.
-Description=LibreOffice Headless Listener Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-Group=root
-ExecStart=/usr/lib/libreoffice/program/soffice --headless --invisible --nodefault --nofirststartwizard --nolockcheck --nologo --accept="socket,host=127.0.0.1,port=2002;urp;StarOffice.ComponentContext"
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
 cat <<EOF >/etc/systemd/system/stirlingpdf.service
 [Unit]
 Description=Stirling-PDF service
-After=syslog.target network.target libreoffice-listener.service
+After=syslog.target network.target unoserver.service
-Requires=libreoffice-listener.service
 
 [Service]
 SuccessExitStatus=143
@@ -173,8 +158,7 @@ EOF
 cat <<EOF >/etc/systemd/system/unoserver.service
 [Unit]
 Description=UnoServer RPC Interface
-After=libreoffice-listener.service
+After=network.target
-Requires=libreoffice-listener.service
 
 [Service]
 Type=simple
@@ -186,9 +170,8 @@ EnvironmentFile=/opt/Stirling-PDF/.env
 WantedBy=multi-user.target
 EOF
 
-systemctl enable -q --now libreoffice-listener
-systemctl enable -q --now stirlingpdf
 systemctl enable -q --now unoserver
+systemctl enable -q --now stirlingpdf
 msg_ok "Created Service"
 
 motd_ssh

install/suggestarr-install.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/giuseppe99barchetta/SuggestArr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y build-essential
+msg_ok "Installed Dependencies"
+
+UV_PYTHON="3.12" setup_uv
+NODE_VERSION="22" setup_nodejs
+
+fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"
+
+msg_info "Building Frontend"
+cd /opt/suggestarr/client
+$STD npm install
+$STD npm run build
+mkdir -p /opt/suggestarr/static
+cp -r /opt/suggestarr/client/dist/* /opt/suggestarr/static/
+cp -r /opt/suggestarr/client/node_modules/swagger-ui-dist /opt/suggestarr/static/swagger-ui
+msg_ok "Built Frontend"
+
+msg_info "Setting up Python Environment"
+cd /opt/suggestarr
+$STD uv venv --python 3.12 /opt/suggestarr/.venv
+$STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_service/requirements.txt
+msg_ok "Set up Python Environment"
+
+msg_info "Configuring SuggestArr"
+mkdir -p /opt/suggestarr_data
+cat <<EOF >/opt/suggestarr.env
+SUGGESTARR_PORT=5000
+LOG_LEVEL=info
+CONFIG_DIR=/opt/suggestarr_data
+EOF
+chmod 600 /opt/suggestarr.env
+msg_ok "Configured SuggestArr"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/suggestarr.service
+[Unit]
+Description=SuggestArr
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/suggestarr
+EnvironmentFile=/opt/suggestarr.env
+ExecStart=/opt/suggestarr/.venv/bin/uvicorn api_service.app:asgi_app --host 0.0.0.0 --port 5000 --log-level info
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now suggestarr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/wanderer-install.sh

@@ -15,15 +15,10 @@ update_os
 
 setup_go
 NODE_VERSION="22" setup_nodejs
-if [[ "$(arch_resolve)" == "arm64" ]]; then
-  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "singlefile" "latest" "/usr/local/bin" "meilisearch-linux-aarch64"
-else
-  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
-fi
 mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data,data/plugins}
+MEILISEARCH_DB_PATH="/opt/wanderer/data/meili_data" setup_meilisearch
 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
 mkdir -p /opt/wanderer/source/db/data
-mkdir -p /opt/wanderer/source/search
 [[ -e /opt/wanderer/source/db/data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /opt/wanderer/source/db/data/plugins
 
 msg_info "Installing wanderer (patience)"
@@ -42,14 +37,13 @@ done
 msg_ok "Installed wanderer plugins"
 
 msg_info "Creating Service"
-MEILI_KEY=$(openssl rand -hex 32)
 POCKETBASE_KEY=$(openssl rand -hex 16)
 
 cat <<EOF >/opt/wanderer/.env
 ORIGIN=http://${LOCAL_IP}:3000
-MEILI_HTTP_ADDR=${LOCAL_IP}:7700
+MEILI_HTTP_ADDR=127.0.0.1:7700
-MEILI_URL=http://${LOCAL_IP}:7700
+MEILI_URL=http://127.0.0.1:7700
-MEILI_MASTER_KEY=${MEILI_KEY}
+MEILI_MASTER_KEY=${MEILISEARCH_MASTER_KEY}
 PB_URL=${LOCAL_IP}:8090
 PUBLIC_POCKETBASE_URL=http://${LOCAL_IP}:8090
 PUBLIC_VALHALLA_URL=https://valhalla1.openstreetmap.de
@@ -58,20 +52,6 @@ PB_DB_LOCATION=/opt/wanderer/data/pb_data
 MEILI_DB_PATH=/opt/wanderer/data/meili_data
 EOF
 
-cat <<EOF >/opt/wanderer/start.sh
-#!/usr/bin/env bash
-
-trap "kill 0" EXIT
-
-cd /opt/wanderer/source/search && meilisearch --upgrade-db --master-key \$MEILI_MASTER_KEY &
-sleep 1
-cd /opt/wanderer/source/db && ./pocketbase serve --http=\$PB_URL --dir=\$PB_DB_LOCATION &
-cd /opt/wanderer/source/web && node build &
-
-wait -n
-EOF
-chmod +x /opt/wanderer/start.sh
-
 cat <<'EOF' >/usr/local/bin/wanderer-pb
 #!/usr/bin/env bash
 set -a
@@ -82,17 +62,40 @@ exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
 EOF
 chmod +x /usr/local/bin/wanderer-pb
 
-cat <<EOF >/etc/systemd/system/wanderer-web.service
+cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
 [Unit]
-Description=wanderer
+Description=wanderer PocketBase
+Wants=network.target
 After=network.target
+PartOf=wanderer-web.service
 StartLimitIntervalSec=10
 StartLimitBurst=5
 
 [Service]
 Type=simple
+WorkingDirectory=/opt/wanderer/source/db
 EnvironmentFile=/opt/wanderer/.env
-ExecStart=/usr/bin/bash /opt/wanderer/start.sh
+ExecStart=/opt/wanderer/source/db/pocketbase serve --http=\${PB_URL} --dir=\${PB_DB_LOCATION}
+Restart=always
+RestartSec=1
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/wanderer-web.service
+[Unit]
+Description=wanderer
+Wants=network.target meilisearch.service wanderer-pocketbase.service
+After=network.target meilisearch.service wanderer-pocketbase.service
+StartLimitIntervalSec=10
+StartLimitBurst=5
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/wanderer/source/web
+EnvironmentFile=/opt/wanderer/.env
+ExecStart=/usr/bin/node build
 Restart=always
 RestartSec=1
 
@@ -100,7 +103,7 @@ RestartSec=1
 WantedBy=multi-user.target
 EOF
 sleep 1
-systemctl enable -q --now wanderer-web
+systemctl enable -q --now wanderer-pocketbase wanderer-web
 msg_ok "Created Service"
 
 motd_ssh