Update versions.json

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,6 +10,24 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-12-13
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Tunarr: Switch to prebuild archive [@tremor021](https://github.com/tremor021) ([#9920](https://github.com/community-scripts/ProxmoxVE/pull/9920))
+    - [HOTFIX] NetVisor: backup OIDC config before update [@vhsdream](https://github.com/vhsdream) ([#9895](https://github.com/community-scripts/ProxmoxVE/pull/9895))
+    - Update OPNsense download URL to version 14.3 [@jaredcarling42-design](https://github.com/jaredcarling42-design) ([#9899](https://github.com/community-scripts/ProxmoxVE/pull/9899))
+
+  - #### ✨ New Features
+
+    - Add optional TLS setup to Valkey installer [@pshankinclarke](https://github.com/pshankinclarke) ([#9789](https://github.com/community-scripts/ProxmoxVE/pull/9789))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Spoolman [@tremor021](https://github.com/tremor021) ([#9873](https://github.com/community-scripts/ProxmoxVE/pull/9873))
+
 ## 2025-12-12
 
 ### 🆕 New Scripts

ct/netvisor.sh

@@ -36,6 +36,9 @@ function update_script() {
 
     msg_info "Backing up configurations"
     cp /opt/netvisor/.env /opt/netvisor.env.bak
+    if [[ -f /opt/netvisor/oidc.toml ]]; then
+      cp /opt/netvisor/oidc.toml /opt/netvisor.oidc.toml
+    fi
     msg_ok "Backed up configurations"
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "netvisor" "netvisor-io/netvisor" "tarball" "latest" "/opt/netvisor"
@@ -49,7 +52,10 @@ function update_script() {
     TOOLCHAIN="$(grep "channel" /opt/netvisor/backend/rust-toolchain.toml | awk -F\" '{print $2}')"
     RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
 
-    cp /opt/netvisor.env.bak /opt/netvisor/.env
+    mv /opt/netvisor.env.bak /opt/netvisor/.env
+    if [[ -f /opt/netvisor.oidc.toml ]]; then
+      mv /opt/netvisor.oidc.toml /opt/netvisor/oidc.toml
+    fi
     LOCAL_IP="$(hostname -I | awk '{print $1}')"
     if ! grep -q "PUBLIC_URL" /opt/netvisor/.env; then
       sed -i "\|_PATH=|a\NETVISOR_PUBLIC_URL=http://${LOCAL_IP}:60072" /opt/netvisor/.env

ct/spoolman.sh

@@ -27,32 +27,29 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  RELEASE=$(curl -fsSL https://github.com/Donkie/Spoolman/releases/latest | grep "title>Release" | cut -d " " -f 4)
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
 
+  if check_for_gh_release "spoolman" "Donkie/Spoolman"; then
     msg_info "Stopping Service"
     systemctl stop spoolman
     msg_ok "Stopped Service"
 
-    msg_info "Updating ${APP} to ${RELEASE}"
-    cd /opt
-    rm -rf spoolman_bak
-    mv spoolman spoolman_bak
-    curl -fsSL "https://github.com/Donkie/Spoolman/releases/download/${RELEASE}/spoolman.zip" -o $(basename "https://github.com/Donkie/Spoolman/releases/download/${RELEASE}/spoolman.zip")
-    $STD unzip spoolman.zip -d spoolman
-    cd spoolman
+    msg_info "Creating Backup"
+    [ -d /opt/spoolman_bak ] && rm -rf /opt/spoolman_bak
+    mv /opt/spoolman /opt/spoolman_bak
+    msg_ok "Created Backup"
+
+    fetch_and_deploy_gh_release "spoolman" "Donkie/Spoolman" "prebuild" "latest" "/opt/spoolman" "spoolman.zip"
+
+    msg_info "Updating Spoolman"
+    cd /opt/spoolman
     $STD pip3 install -r requirements.txt
-    curl -fsSL "https://raw.githubusercontent.com/Donkie/Spoolman/master/.env.example" -o ".env"
-    rm -rf /opt/spoolman.zip
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated ${APP} to ${RELEASE}"
+    cp /opt/spoolman_bak/.env /opt/spoolman
+    msg_ok "Updated Spoolman"
 
     msg_info "Starting Service"
     systemctl start spoolman
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
-  else
-    msg_ok "No update required. ${APP} is already at ${RELEASE}"
   fi
   exit
 }

ct/tunarr.sh

@@ -40,7 +40,9 @@ function update_script() {
       msg_error "Backup failed: /usr/local/share/tunarr does not exist"
     fi
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "tunarr" "chrisbenincasa/tunarr" "singlefile" "latest" "/opt/tunarr" "*linux-x64"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "tunarr" "chrisbenincasa/tunarr" "prebuild" "latest" "/opt/tunarr" "*linux-x64.tar.gz"
+    cd /opt/tunarr
+    mv tunarr* tunarr
 
     msg_info "Starting Service"
     systemctl start tunarr

frontend/public/json/versions.json

@@ -1,4 +1,179 @@
 [
+  {
+    "name": "fuma-nama/fumadocs",
+    "version": "create-fumadocs-app@16.0.25",
+    "date": "2025-12-13T10:22:03Z"
+  },
+  {
+    "name": "chrisvel/tududi",
+    "version": "v0.88.0",
+    "date": "2025-12-13T09:36:24Z"
+  },
+  {
+    "name": "ollama/ollama",
+    "version": "v0.13.4-rc0",
+    "date": "2025-12-13T00:29:01Z"
+  },
+  {
+    "name": "netvisor-io/netvisor",
+    "version": "v0.11.8",
+    "date": "2025-12-13T08:38:03Z"
+  },
+  {
+    "name": "Dokploy/dokploy",
+    "version": "v0.26.2",
+    "date": "2025-12-13T07:48:09Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.445",
+    "date": "2025-12-13T05:56:19Z"
+  },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "v6.4.9",
+    "date": "2025-11-28T20:36:20Z"
+  },
+  {
+    "name": "release-argus/Argus",
+    "version": "0.28.0",
+    "date": "2025-12-13T04:44:37Z"
+  },
+  {
+    "name": "mealie-recipes/mealie",
+    "version": "v3.7.0",
+    "date": "2025-12-13T01:20:58Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.5",
+    "date": "2025-12-13T00:27:05Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.1.0",
+    "date": "2025-11-23T12:13:34Z"
+  },
+  {
+    "name": "paperless-ngx/paperless-ngx",
+    "version": "v2.20.2",
+    "date": "2025-12-12T23:47:48Z"
+  },
+  {
+    "name": "nickheyer/discopanel",
+    "version": "v1.0.13-dev",
+    "date": "2025-12-12T23:45:54Z"
+  },
+  {
+    "name": "fccview/jotty",
+    "version": "1.13.1",
+    "date": "2025-12-12T21:34:22Z"
+  },
+  {
+    "name": "chrisbenincasa/tunarr",
+    "version": "v1.0.1",
+    "date": "2025-12-12T21:09:19Z"
+  },
+  {
+    "name": "mongodb/mongo",
+    "version": "r7.0.27",
+    "date": "2025-12-12T20:54:32Z"
+  },
+  {
+    "name": "influxdata/influxdb",
+    "version": "v2.8.0",
+    "date": "2025-12-12T20:25:00Z"
+  },
+  {
+    "name": "TuroYT/snowshare",
+    "version": "v1.2.0",
+    "date": "2025-12-12T19:52:05Z"
+  },
+  {
+    "name": "homarr-labs/homarr",
+    "version": "v1.46.0",
+    "date": "2025-12-12T19:23:36Z"
+  },
+  {
+    "name": "metabase/metabase",
+    "version": "v0.57.x",
+    "date": "2025-12-12T19:08:53Z"
+  },
+  {
+    "name": "home-assistant/core",
+    "version": "2025.12.3",
+    "date": "2025-12-12T18:12:39Z"
+  },
+  {
+    "name": "docmost/docmost",
+    "version": "v0.24.0",
+    "date": "2025-12-12T18:05:49Z"
+  },
+  {
+    "name": "booklore-app/booklore",
+    "version": "v1.14.1",
+    "date": "2025-12-12T17:37:58Z"
+  },
+  {
+    "name": "esphome/esphome",
+    "version": "2025.11.5",
+    "date": "2025-12-09T17:54:33Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.7",
+    "date": "2025-12-01T08:14:11Z"
+  },
+  {
+    "name": "node-red/node-red",
+    "version": "4.1.2",
+    "date": "2025-12-03T16:12:05Z"
+  },
+  {
+    "name": "bunkerity/bunkerweb",
+    "version": "v1.6.6",
+    "date": "2025-11-24T15:30:21Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.30.0",
+    "date": "2025-12-12T14:03:52Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.123.5-exp.0",
+    "date": "2025-12-10T16:35:50Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.8",
+    "date": "2025-11-21T17:06:07Z"
+  },
+  {
+    "name": "zitadel/zitadel",
+    "version": "v4.7.5",
+    "date": "2025-12-12T13:54:02Z"
+  },
+  {
+    "name": "ventoy/Ventoy",
+    "version": "v1.1.09",
+    "date": "2025-12-12T13:06:36Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.2.0.102-2.2.0.102_canary_2025-12-12",
+    "date": "2025-12-12T12:03:15Z"
+  },
+  {
+    "name": "passbolt/passbolt_api",
+    "version": "v5.8.0-test.2",
+    "date": "2025-12-12T11:43:11Z"
+  },
+  {
+    "name": "Luligu/matterbridge",
+    "version": "3.4.3",
+    "date": "2025-12-12T11:35:00Z"
+  },
   {
     "name": "BerriAI/litellm",
     "version": "v1.80.9.dev6",
@@ -9,16 +184,6 @@
     "version": "4.0.1-rc.1",
     "date": "2025-12-12T10:52:28Z"
   },
-  {
-    "name": "zitadel/zitadel",
-    "version": "v4.7.4",
-    "date": "2025-12-12T10:25:19Z"
-  },
-  {
-    "name": "netvisor-io/netvisor",
-    "version": "v0.11.7",
-    "date": "2025-12-12T09:22:44Z"
-  },
   {
     "name": "karakeep-app/karakeep",
     "version": "v0.29.3",
@@ -29,16 +194,6 @@
     "version": "v8.3.7",
     "date": "2025-12-12T09:13:40Z"
   },
-  {
-    "name": "passbolt/passbolt_api",
-    "version": "v5.8.0-test.1",
-    "date": "2025-12-12T06:53:05Z"
-  },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.441",
-    "date": "2025-12-12T05:55:23Z"
-  },
   {
     "name": "coder/code-server",
     "version": "v4.106.3",
@@ -54,26 +209,6 @@
     "version": "v3.0.3",
     "date": "2025-12-12T02:39:27Z"
   },
-  {
-    "name": "jeedom/core",
-    "version": "4.5",
-    "date": "2025-12-12T00:27:07Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.1.0",
-    "date": "2025-11-23T12:13:34Z"
-  },
-  {
-    "name": "ollama/ollama",
-    "version": "v0.13.3-rc1",
-    "date": "2025-12-10T20:59:27Z"
-  },
-  {
-    "name": "metabase/metabase",
-    "version": "v0.57.6",
-    "date": "2025-12-11T23:31:19Z"
-  },
   {
     "name": "fosrl/pangolin",
     "version": "1.13.0",
@@ -94,11 +229,6 @@
     "version": "v4.0.0-beta.454",
     "date": "2025-12-11T20:37:05Z"
   },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v0.23.0-alpha.35",
-    "date": "2025-12-11T18:20:45Z"
-  },
   {
     "name": "msgbyte/tianji",
     "version": "v1.30.22",
@@ -110,20 +240,10 @@
     "date": "2025-12-11T16:47:51Z"
   },
   {
-    "name": "chrisvel/tududi",
-    "version": "v0.87",
-    "date": "2025-12-06T07:36:26Z"
-  },
-  {
-    "name": "joaovitoriasilva/endurain",
+    "name": "endurain-project/endurain",
     "version": "v0.16.2",
     "date": "2025-12-11T15:16:01Z"
   },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.7",
-    "date": "2025-12-01T08:14:11Z"
-  },
   {
     "name": "alam00000/bentopdf",
     "version": "v1.11.1",
@@ -169,11 +289,6 @@
     "version": "v1.8.0",
     "date": "2025-12-10T16:44:33Z"
   },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.123.5-exp.0",
-    "date": "2025-12-10T16:35:50Z"
-  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.541",
@@ -184,11 +299,6 @@
     "version": "v0.29.0",
     "date": "2025-11-04T15:00:07Z"
   },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.30.0-rc2",
-    "date": "2025-12-10T14:58:00Z"
-  },
   {
     "name": "rclone/rclone",
     "version": "v1.72.1",
@@ -199,11 +309,6 @@
     "version": "v25.4",
     "date": "2025-10-09T10:27:01Z"
   },
-  {
-    "name": "fuma-nama/fumadocs",
-    "version": "fumadocs-openapi@10.1.2",
-    "date": "2025-12-10T13:59:19Z"
-  },
   {
     "name": "evcc-io/evcc",
     "version": "0.211.1",
@@ -214,16 +319,6 @@
     "version": "353",
     "date": "2025-12-10T10:55:50Z"
   },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.8",
-    "date": "2025-11-21T17:06:07Z"
-  },
-  {
-    "name": "Dokploy/dokploy",
-    "version": "v0.26.1",
-    "date": "2025-12-10T06:53:36Z"
-  },
   {
     "name": "morpheus65535/bazarr",
     "version": "v1.5.3",
@@ -234,11 +329,6 @@
     "version": "v3.3.2-beta",
     "date": "2025-12-10T05:42:43Z"
   },
-  {
-    "name": "esphome/esphome",
-    "version": "2025.11.5",
-    "date": "2025-12-09T17:54:33Z"
-  },
   {
     "name": "miniflux/v2",
     "version": "2.2.15",
@@ -264,11 +354,6 @@
     "version": "v25.11.6",
     "date": "2025-12-09T21:08:17Z"
   },
-  {
-    "name": "fccview/jotty",
-    "version": "1.12.2",
-    "date": "2025-12-09T20:39:50Z"
-  },
   {
     "name": "valkey-io/valkey",
     "version": "9.0.1",
@@ -304,11 +389,6 @@
     "version": "v0.11.3",
     "date": "2025-12-09T14:41:10Z"
   },
-  {
-    "name": "release-argus/Argus",
-    "version": "0.27.0",
-    "date": "2025-12-09T14:33:38Z"
-  },
   {
     "name": "wizarrrr/wizarr",
     "version": "v2025.12.0",
@@ -329,11 +409,6 @@
     "version": "v1.4.7",
     "date": "2025-12-09T11:44:49Z"
   },
-  {
-    "name": "mongodb/mongo",
-    "version": "r7.0.27-rc0",
-    "date": "2025-12-09T04:34:48Z"
-  },
   {
     "name": "alexta69/metube",
     "version": "2025.12.09",
@@ -354,11 +429,6 @@
     "version": "4.5.5",
     "date": "2025-10-24T11:12:22Z"
   },
-  {
-    "name": "home-assistant/core",
-    "version": "2025.12.2",
-    "date": "2025-12-08T21:36:42Z"
-  },
   {
     "name": "hansmi/prometheus-paperless-exporter",
     "version": "v0.0.9",
@@ -369,16 +439,6 @@
     "version": "v1.37.0",
     "date": "2025-12-08T20:36:16Z"
   },
-  {
-    "name": "TuroYT/snowshare",
-    "version": "v1.1.2",
-    "date": "2025-12-08T20:29:51Z"
-  },
-  {
-    "name": "homarr-labs/homarr",
-    "version": "v1.45.3",
-    "date": "2025-12-08T16:11:16Z"
-  },
   {
     "name": "AdguardTeam/AdGuardHome",
     "version": "v0.107.71",
@@ -389,26 +449,11 @@
     "version": "2.2.1",
     "date": "2025-12-08T12:01:34Z"
   },
-  {
-    "name": "ventoy/Ventoy",
-    "version": "v1.1.08",
-    "date": "2025-12-08T10:13:51Z"
-  },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "v6.4.9",
-    "date": "2025-11-28T20:36:20Z"
-  },
   {
     "name": "maxdorninger/MediaManager",
     "version": "v1.10.0",
     "date": "2025-12-07T23:41:51Z"
   },
-  {
-    "name": "nickheyer/discopanel",
-    "version": "v1.0.12-dev",
-    "date": "2025-12-07T22:56:11Z"
-  },
   {
     "name": "Part-DB/Part-DB-server",
     "version": "v2.3.0",
@@ -494,11 +539,6 @@
     "version": "v1.3.1",
     "date": "2025-12-05T19:12:48Z"
   },
-  {
-    "name": "booklore-app/booklore",
-    "version": "v1.13.2",
-    "date": "2025-12-05T16:03:08Z"
-  },
   {
     "name": "community-scripts/ProxmoxVE-Local",
     "version": "v0.5.2",
@@ -514,16 +554,6 @@
     "version": "e6.1.0-streams.1",
     "date": "2025-12-05T12:27:36Z"
   },
-  {
-    "name": "Luligu/matterbridge",
-    "version": "3.4.2",
-    "date": "2025-12-05T12:20:54Z"
-  },
-  {
-    "name": "node-red/node-red",
-    "version": "4.1.2",
-    "date": "2025-12-03T16:12:05Z"
-  },
   {
     "name": "traefik/traefik",
     "version": "v3.6.4",
@@ -569,11 +599,6 @@
     "version": "11.0.4",
     "date": "2025-12-04T09:26:37Z"
   },
-  {
-    "name": "bunkerity/bunkerweb",
-    "version": "v1.6.6",
-    "date": "2025-11-24T15:30:21Z"
-  },
   {
     "name": "gtsteffaniak/filebrowser",
     "version": "v1.2.0-experimental-sql-indexing",
@@ -619,11 +644,6 @@
     "version": "v0.17.0",
     "date": "2025-12-03T00:15:51Z"
   },
-  {
-    "name": "mealie-recipes/mealie",
-    "version": "v3.6.1",
-    "date": "2025-12-02T22:54:10Z"
-  },
   {
     "name": "apache/tomcat",
     "version": "10.1.50",
@@ -644,11 +664,6 @@
     "version": "v5.0.86-docker",
     "date": "2025-12-02T21:16:02Z"
   },
-  {
-    "name": "influxdata/influxdb",
-    "version": "v2.8.0",
-    "date": "2025-12-02T20:22:32Z"
-  },
   {
     "name": "WordPress/WordPress",
     "version": "6.9",
@@ -689,11 +704,6 @@
     "version": "3000.7.0",
     "date": "2025-12-01T23:29:47Z"
   },
-  {
-    "name": "paperless-ngx/paperless-ngx",
-    "version": "v2.20.1",
-    "date": "2025-12-01T22:45:34Z"
-  },
   {
     "name": "C4illin/ConvertX",
     "version": "v0.16.0",
@@ -844,11 +854,6 @@
     "version": "v4.7.0",
     "date": "2025-11-26T16:59:45Z"
   },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.2.0.2-2.2.0.2_beta_2025-11-26",
-    "date": "2025-11-26T14:20:54Z"
-  },
   {
     "name": "inventree/InvenTree",
     "version": "1.1.6",
@@ -1364,11 +1369,6 @@
     "version": "v0.18.3",
     "date": "2025-09-19T16:16:11Z"
   },
-  {
-    "name": "docmost/docmost",
-    "version": "v0.23.2",
-    "date": "2025-09-18T17:18:59Z"
-  },
   {
     "name": "eclipse-mosquitto/mosquitto",
     "version": "2.1.0-test1",

install/spoolman-install.sh

@@ -17,12 +17,10 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   build-essential \
-  make \
-  libpq-dev \
-  ca-certificates
+  libpq-dev
 msg_ok "Installed Dependencies"
 
-msg_info "Setup Python3"
+msg_info "Setting up Python3"
 $STD apt install -y \
   python3-dev \
   python3-setuptools \
@@ -30,17 +28,13 @@ $STD apt install -y \
   python3-pip
 msg_ok "Setup Python3"
 
-msg_info "Installing Spoolman"
-RELEASE=$(curl -fsSL https://github.com/Donkie/Spoolman/releases/latest | grep "title>Release" | cut -d " " -f 4)
-cd /opt
-curl -fsSL "https://github.com/Donkie/Spoolman/releases/download/$RELEASE/spoolman.zip" -o "spoolman.zip"
-$STD unzip spoolman.zip -d spoolman
-rm -rf spoolman.zip
-cd spoolman
+fetch_and_deploy_gh_release "spoolman" "Donkie/Spoolman" "prebuild" "latest" "/opt/spoolman" "spoolman.zip"
+
+msg_info "Setting up Spoolman"
+cd /opt/spoolman
 $STD pip3 install --upgrade --ignore-installed -r requirements.txt
-curl -fsSL "https://raw.githubusercontent.com/Donkie/Spoolman/master/.env.example" -o ".env"
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
-msg_ok "Installed Spoolman"
+cp .env.example .env
+msg_ok "Setup Spoolman"
 
 msg_info "Creating Service"
 cat <<'EOF' >/etc/systemd/system/spoolman.service

install/tunarr-install.sh

@@ -61,7 +61,9 @@ else
 fi
 msg_ok "Installed and Set Up Intel Hardware Acceleration"
 
-fetch_and_deploy_gh_release "tunarr" "chrisbenincasa/tunarr" "singlefile" "latest" "/opt/tunarr" "*linux-x64"
+fetch_and_deploy_gh_release "tunarr" "chrisbenincasa/tunarr" "prebuild" "latest" "/opt/tunarr" "*linux-x64.tar.gz"
+cd /opt/tunarr
+mv tunarr* tunarr
 fetch_and_deploy_gh_release "ersatztv-ffmpeg" "ErsatzTV/ErsatzTV-ffmpeg" "prebuild" "latest" "/opt/ErsatzTV-ffmpeg" "*-linux64-gpl-7.1.tar.xz"
 
 msg_info "Set ErsatzTV-ffmpeg links"

install/valkey-install.sh

@@ -32,10 +32,46 @@ echo "# Memory-optimized settings for small-scale deployments" >> /etc/valkey/va
 echo "maxmemory ${MAXMEMORY_MB}mb" >> /etc/valkey/valkey.conf
 echo "maxmemory-policy allkeys-lru" >> /etc/valkey/valkey.conf
 echo "maxmemory-samples 10" >> /etc/valkey/valkey.conf
+msg_ok "Installed Valkey"
+
+echo
+read -r -p "${TAB3}Enable TLS for Valkey (Sentinel mode does not supported)? [y/N]: " prompt
+if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
+    read -r -p "${TAB3}Use TLS-only mode (disable TCP port 6379)? [y/N]: " tls_only
+    msg_info "Configuring TLS for Valkey..."
+
+    create_self_signed_cert "Valkey"
+    TLS_DIR="/etc/ssl/valkey"
+    TLS_CERT="$TLS_DIR/valkey.crt"
+    TLS_KEY="$TLS_DIR/valkey.key"
+    chown valkey:valkey "$TLS_CERT" "$TLS_KEY"
+
+    if [[ ${tls_only,,} =~ ^(y|yes)$ ]]; then
+    {
+      echo ""
+      echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
+      echo "port 0"
+      echo "tls-port 6379"
+      echo "tls-cert-file $TLS_DIR/valkey.crt"
+      echo "tls-key-file $TLS_DIR/valkey.key"
+      echo "tls-auth-clients no"
+    } >> /etc/valkey/valkey.conf
+    msg_ok "Enabled TLS-only mode on port 6379"
+    else
+    {
+      echo ""
+      echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
+      echo "tls-port 6380"
+      echo "tls-cert-file $TLS_DIR/valkey.crt"
+      echo "tls-key-file $TLS_DIR/valkey.key"
+      echo "tls-auth-clients no"
+    } >> /etc/valkey/valkey.conf
+    msg_ok "Enabled TLS on port 6380 and TCP on 6379"
+    fi
+fi
 
 systemctl enable -q --now valkey-server
 systemctl restart valkey-server
-msg_ok "Installed Valkey"
 
 motd_ssh
 customize

vm/opnsense-vm.sh

@@ -578,7 +578,7 @@ fi
 msg_ok "Using ${CL}${BL}$STORAGE${CL} ${GN}for Storage Location."
 msg_ok "Virtual Machine ID is ${CL}${BL}$VMID${CL}."
 msg_info "Retrieving the URL for the OPNsense Qcow2 Disk Image"
-URL="https://download.freebsd.org/releases/VM-IMAGES/14.2-RELEASE/amd64/Latest/FreeBSD-14.2-RELEASE-amd64.qcow2.xz"
+URL="https://download.freebsd.org/releases/VM-IMAGES/14.3-RELEASE/amd64/Latest/FreeBSD-14.3-RELEASE-amd64.qcow2.xz"
 msg_ok "Download URL: ${CL}${BL}${URL}${CL}"
 curl -f#SL -o "$(basename "$URL")" "$URL"
 echo -en "\e[1A\e[0K"