Update beszel.sh

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.github/changelogs/2025/12.md

@@ -794,3 +794,15 @@
   - #### 📝 Script Information
 
     - update selfhst icon-URLs to use @master path [@MickLesk](https://github.com/MickLesk) ([#9543](https://github.com/community-scripts/ProxmoxVE/pull/9543))
+
+
+## 2025-12-31
+
+### 🚀 Updated Scripts
+
+  - fix(wazuh): add LXC rootcheck exclusion to prevent false positives [@brettlyons](https://github.com/brettlyons) ([#10436](https://github.com/community-scripts/ProxmoxVE/pull/10436))
+
+  - #### 🐞 Bug Fixes
+
+    - Increase BentoPDF RAM requirement from 2GB to 4GB [@Copilot](https://github.com/Copilot) ([#10449](https://github.com/community-scripts/ProxmoxVE/pull/10449))
+    - fix(swizzin): Use HTTPS and add curl error handling [@fmcglinn](https://github.com/fmcglinn) ([#10440](https://github.com/community-scripts/ProxmoxVE/pull/10440))

.github/changelogs/2026/01.md

@@ -684,3 +684,157 @@
   - #### 🐞 Bug Fixes
 
     - Fix MariaDB runtime directory persistence on container reboot [@Copilot](https://github.com/Copilot) ([#10468](https://github.com/community-scripts/ProxmoxVE/pull/10468))
+
+
+## 2026-01-31
+
+### 🆕 New Scripts
+
+  - shelfmark ([#11371](https://github.com/community-scripts/ProxmoxVE/pull/11371))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix: yubal: add git [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11394](https://github.com/community-scripts/ProxmoxVE/pull/11394))
+
+## 2026-01-30
+
+### 🆕 New Scripts
+
+  - languagetool ([#11370](https://github.com/community-scripts/ProxmoxVE/pull/11370))
+- Ampache ([#11369](https://github.com/community-scripts/ProxmoxVE/pull/11369))
+
+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Refactor: remove redundant PHP_MODULE entries in several scripts [@MickLesk](https://github.com/MickLesk) ([#11362](https://github.com/community-scripts/ProxmoxVE/pull/11362))
+    - Refactor: Koillection [@MickLesk](https://github.com/MickLesk) ([#11361](https://github.com/community-scripts/ProxmoxVE/pull/11361))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: meilisearch - add data migration for version upgrades [@MickLesk](https://github.com/MickLesk) ([#11356](https://github.com/community-scripts/ProxmoxVE/pull/11356))
+
+  - #### ✨ New Features
+
+    - [tools] Add `fetch_and_deploy_from_url()` [@tremor021](https://github.com/tremor021) ([#11376](https://github.com/community-scripts/ProxmoxVE/pull/11376))
+    - core: php - improve module handling and prevent installation failures [@MickLesk](https://github.com/MickLesk) ([#11358](https://github.com/community-scripts/ProxmoxVE/pull/11358))
+
+## 2026-01-29
+
+### 🆕 New Scripts
+
+  - Alpine-Valkey [@MickLesk](https://github.com/MickLesk) ([#11320](https://github.com/community-scripts/ProxmoxVE/pull/11320))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: Pin version to 2.5.2 [@vhsdream](https://github.com/vhsdream) ([#11335](https://github.com/community-scripts/ProxmoxVE/pull/11335))
+    - Kollection: Update to php 8.5 [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11315](https://github.com/community-scripts/ProxmoxVE/pull/11315))
+    - Notifiarr: change installation check from apt to systemd service [@MickLesk](https://github.com/MickLesk) ([#11319](https://github.com/community-scripts/ProxmoxVE/pull/11319))
+
+  - #### ✨ New Features
+
+    - [FEAT] Immich: Enable Maintenance Mode before update [@vhsdream](https://github.com/vhsdream) ([#11342](https://github.com/community-scripts/ProxmoxVE/pull/11342))
+    - jellyfin: add logrotate instead of reducing log level [@MickLesk](https://github.com/MickLesk) ([#11326](https://github.com/community-scripts/ProxmoxVE/pull/11326))
+    - core: Add config file handling options | Fix Vikunja update with interactive overwrite [@MickLesk](https://github.com/MickLesk) ([#11317](https://github.com/community-scripts/ProxmoxVE/pull/11317))
+    - Immich: v2.5.0 [@vhsdream](https://github.com/vhsdream) ([#11240](https://github.com/community-scripts/ProxmoxVE/pull/11240))
+
+  - #### 💥 Breaking Changes
+
+    - fix: vikunja v1 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11308](https://github.com/community-scripts/ProxmoxVE/pull/11308))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Byparr [@vhsdream](https://github.com/vhsdream) ([#11338](https://github.com/community-scripts/ProxmoxVE/pull/11338))
+    - cloudflare: Remove deprecated DNS-over-HTTPS proxy option [@MickLesk](https://github.com/MickLesk) ([#11068](https://github.com/community-scripts/ProxmoxVE/pull/11068))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - build.func: Replace storage variable with searchdomain variable [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11322](https://github.com/community-scripts/ProxmoxVE/pull/11322))
+
+### 📂 Github
+
+  - Add workflow to lock closed issues [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11316](https://github.com/community-scripts/ProxmoxVE/pull/11316))
+
+## 2026-01-28
+
+### 🆕 New Scripts
+
+  - nodecast-tv ([#11287](https://github.com/community-scripts/ProxmoxVE/pull/11287))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Ubuntu 25.04 VM - Change default start from yes to no [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11292](https://github.com/community-scripts/ProxmoxVE/pull/11292))
+
+  - #### ✨ New Features
+
+    - various scripts: use setup_meilisearch function [@MickLesk](https://github.com/MickLesk) ([#11259](https://github.com/community-scripts/ProxmoxVE/pull/11259))
+
+  - #### 🔧 Refactor
+
+    - Refactor: NPMPlus / Default Login [@MickLesk](https://github.com/MickLesk) ([#11262](https://github.com/community-scripts/ProxmoxVE/pull/11262))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: sed patch for ram [@lavacano](https://github.com/lavacano) ([#11285](https://github.com/community-scripts/ProxmoxVE/pull/11285))
+    - Fix installer loop caused by invalid whiptail menu separator [@Mesteriis](https://github.com/Mesteriis) ([#11237](https://github.com/community-scripts/ProxmoxVE/pull/11237))
+    - core: fix Debian 13 LXC template root ownership bug [@MickLesk](https://github.com/MickLesk) ([#11277](https://github.com/community-scripts/ProxmoxVE/pull/11277))
+    - tools.func: prevent systemd-tmpfiles failure in unprivileged LXC during deb install [@MickLesk](https://github.com/MickLesk) ([#11271](https://github.com/community-scripts/ProxmoxVE/pull/11271))
+    - tools.func: fix php "wait_for" hint [@MickLesk](https://github.com/MickLesk) ([#11254](https://github.com/community-scripts/ProxmoxVE/pull/11254))
+
+  - #### ✨ New Features
+
+    - core: update dynamic values in LXC profile on update_motd_ip [@MickLesk](https://github.com/MickLesk) ([#11268](https://github.com/community-scripts/ProxmoxVE/pull/11268))
+    - tools.func: add new function - setup_meilisearch [@MickLesk](https://github.com/MickLesk) ([#11258](https://github.com/community-scripts/ProxmoxVE/pull/11258))
+
+### 📂 Github
+
+  - github: add GitHub-based versions.json updater [@MickLesk](https://github.com/MickLesk) ([#10021](https://github.com/community-scripts/ProxmoxVE/pull/10021))
+
+### 🌐 Website
+
+  - #### ✨ New Features
+
+    - Frontend: use github-versions.json for version display [@MickLesk](https://github.com/MickLesk) ([#11281](https://github.com/community-scripts/ProxmoxVE/pull/11281))
+
+  - #### 📝 Script Information
+
+    - fix: homarr: conf location [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11253](https://github.com/community-scripts/ProxmoxVE/pull/11253))
+
+## 2026-01-27
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: update libraw [@vhsdream](https://github.com/vhsdream) ([#11233](https://github.com/community-scripts/ProxmoxVE/pull/11233))
+
+  - #### ✨ New Features
+
+    - grist: enable optional enterprise features toggle [@MickLesk](https://github.com/MickLesk) ([#11239](https://github.com/community-scripts/ProxmoxVE/pull/11239))
+
+  - #### 🔧 Refactor
+
+    - Termix: use nginx.conf from upstream repo [@MickLesk](https://github.com/MickLesk) ([#11228](https://github.com/community-scripts/ProxmoxVE/pull/11228))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - feat: add NVIDIA driver install prompt for GPU-enabled containers [@devdecrux](https://github.com/devdecrux) ([#11184](https://github.com/community-scripts/ProxmoxVE/pull/11184))
+
+### 📚 Documentation
+
+  - doc setup_deb822_repo arg order [@chrnie](https://github.com/chrnie) ([#11215](https://github.com/community-scripts/ProxmoxVE/pull/11215))
+- changelog: archive old entries to year/month files [@MickLesk](https://github.com/MickLesk) ([#11225](https://github.com/community-scripts/ProxmoxVE/pull/11225))

.github/workflows/lock-issue.yaml

@@ -0,0 +1,76 @@
+name: Lock closed issues
+
+on:
+  schedule:
+    - cron: "0 0 * * *"  # Run daily at midnight
+  workflow_dispatch:
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  lock:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Lock old issues and PRs
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const daysBeforeLock = 3;
+            const cutoffDate = new Date('2026-01-27T00:00:00Z');
+            const lockDate = new Date();
+            lockDate.setDate(lockDate.getDate() - daysBeforeLock);
+            
+            // Exclude patterns (case-insensitive)
+            const excludePatterns = [
+              /automated pr/i,
+              /\[bot\]/i,
+              /dependabot/i
+            ];
+            
+            // Search for closed, unlocked issues older than 3 days
+            const issues = await github.rest.search.issuesAndPullRequests({
+              q: `repo:${context.repo.owner}/${context.repo.repo} is:closed is:unlocked updated:<${lockDate.toISOString().split('T')[0]}`,
+              per_page: 50
+            });
+            
+            console.log(`Found ${issues.data.items.length} issues/PRs to process`);
+            
+            for (const item of issues.data.items) {
+              // Skip excluded items
+              const shouldExclude = excludePatterns.some(pattern => pattern.test(item.title));
+              if (shouldExclude) {
+                console.log(`Skipped #${item.number}: "${item.title}" (matches exclude pattern)`);
+                continue;
+              }
+              
+              const createdAt = new Date(item.created_at);
+              const isNew = createdAt >= cutoffDate;
+              
+              try {
+                // Add comment only for new issues (created after 2026-01-27)
+                if (isNew) {
+                  const comment = item.pull_request
+                    ? 'This pull request has been automatically locked. Please open a new issue for related bugs.'
+                    : 'This issue has been automatically locked. Please open a new issue for related bugs and reference this issue if needed.';
+                  
+                  await github.rest.issues.createComment({
+                    ...context.repo,
+                    issue_number: item.number,
+                    body: comment
+                  });
+                }
+                
+                // Lock the issue/PR
+                await github.rest.issues.lock({
+                  ...context.repo,
+                  issue_number: item.number,
+                  lock_reason: 'resolved'
+                });
+                
+                console.log(`Locked #${item.number} (${item.pull_request ? 'PR' : 'Issue'})`);
+              } catch (error) {
+                console.log(`Failed to lock #${item.number}: ${error.message}`);
+              }
+            }

CHANGELOG.md

@@ -391,18 +391,493 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-01-29
+
+
+<details>
+<summary><h2>📜 History</h2></summary>
+
+
+<details>
+<summary><h3>2026</h3></summary>
+
+
+<details>
+<summary><h4>January (31 entries)</h4></summary>
+
+[View January 2026 Changelog](.github/changelogs/2026/01.md)
+
+</details>
+
+</details>
+
+<details>
+<summary><h3>2025</h3></summary>
+
+
+<details>
+<summary><h4>December (31 entries)</h4></summary>
+
+[View December 2025 Changelog](.github/changelogs/2025/12.md)
+
+</details>
+
+<details>
+<summary><h4>November (29 entries)</h4></summary>
+
+[View November 2025 Changelog](.github/changelogs/2025/11.md)
+
+</details>
+
+<details>
+<summary><h4>October (30 entries)</h4></summary>
+
+[View October 2025 Changelog](.github/changelogs/2025/10.md)
+
+</details>
+
+<details>
+<summary><h4>September (29 entries)</h4></summary>
+
+[View September 2025 Changelog](.github/changelogs/2025/09.md)
+
+</details>
+
+<details>
+<summary><h4>August (30 entries)</h4></summary>
+
+[View August 2025 Changelog](.github/changelogs/2025/08.md)
+
+</details>
+
+<details>
+<summary><h4>July (29 entries)</h4></summary>
+
+[View July 2025 Changelog](.github/changelogs/2025/07.md)
+
+</details>
+
+<details>
+<summary><h4>June (29 entries)</h4></summary>
+
+[View June 2025 Changelog](.github/changelogs/2025/06.md)
+
+</details>
+
+<details>
+<summary><h4>May (30 entries)</h4></summary>
+
+[View May 2025 Changelog](.github/changelogs/2025/05.md)
+
+</details>
+
+<details>
+<summary><h4>April (25 entries)</h4></summary>
+
+[View April 2025 Changelog](.github/changelogs/2025/04.md)
+
+</details>
+
+<details>
+<summary><h4>March (30 entries)</h4></summary>
+
+[View March 2025 Changelog](.github/changelogs/2025/03.md)
+
+</details>
+
+<details>
+<summary><h4>February (26 entries)</h4></summary>
+
+[View February 2025 Changelog](.github/changelogs/2025/02.md)
+
+</details>
+
+<details>
+<summary><h4>January (27 entries)</h4></summary>
+
+[View January 2025 Changelog](.github/changelogs/2025/01.md)
+
+</details>
+
+</details>
+
+<details>
+<summary><h3>2024</h3></summary>
+
+
+<details>
+<summary><h4>December (22 entries)</h4></summary>
+
+[View December 2024 Changelog](.github/changelogs/2024/12.md)
+
+</details>
+
+<details>
+<summary><h4>November (15 entries)</h4></summary>
+
+[View November 2024 Changelog](.github/changelogs/2024/11.md)
+
+</details>
+
+<details>
+<summary><h4>October (9 entries)</h4></summary>
+
+[View October 2024 Changelog](.github/changelogs/2024/10.md)
+
+</details>
+
+<details>
+<summary><h4>September (1 entries)</h4></summary>
+
+[View September 2024 Changelog](.github/changelogs/2024/09.md)
+
+</details>
+
+<details>
+<summary><h4>August (2 entries)</h4></summary>
+
+[View August 2024 Changelog](.github/changelogs/2024/08.md)
+
+</details>
+
+<details>
+<summary><h4>July (0 entries)</h4></summary>
+
+[View July 2024 Changelog](.github/changelogs/2024/07.md)
+
+</details>
+
+<details>
+<summary><h4>June (8 entries)</h4></summary>
+
+[View June 2024 Changelog](.github/changelogs/2024/06.md)
+
+</details>
+
+<details>
+<summary><h4>May (16 entries)</h4></summary>
+
+[View May 2024 Changelog](.github/changelogs/2024/05.md)
+
+</details>
+
+<details>
+<summary><h4>April (14 entries)</h4></summary>
+
+[View April 2024 Changelog](.github/changelogs/2024/04.md)
+
+</details>
+
+<details>
+<summary><h4>March (5 entries)</h4></summary>
+
+[View March 2024 Changelog](.github/changelogs/2024/03.md)
+
+</details>
+
+<details>
+<summary><h4>February (9 entries)</h4></summary>
+
+[View February 2024 Changelog](.github/changelogs/2024/02.md)
+
+</details>
+
+<details>
+<summary><h4>January (9 entries)</h4></summary>
+
+[View January 2024 Changelog](.github/changelogs/2024/01.md)
+
+</details>
+
+</details>
+
+<details>
+<summary><h3>2023</h3></summary>
+
+
+<details>
+<summary><h4>December (3 entries)</h4></summary>
+
+[View December 2023 Changelog](.github/changelogs/2023/12.md)
+
+</details>
+
+<details>
+<summary><h4>November (3 entries)</h4></summary>
+
+[View November 2023 Changelog](.github/changelogs/2023/11.md)
+
+</details>
+
+<details>
+<summary><h4>October (7 entries)</h4></summary>
+
+[View October 2023 Changelog](.github/changelogs/2023/10.md)
+
+</details>
+
+<details>
+<summary><h4>September (10 entries)</h4></summary>
+
+[View September 2023 Changelog](.github/changelogs/2023/09.md)
+
+</details>
+
+<details>
+<summary><h4>August (7 entries)</h4></summary>
+
+[View August 2023 Changelog](.github/changelogs/2023/08.md)
+
+</details>
+
+<details>
+<summary><h4>July (5 entries)</h4></summary>
+
+[View July 2023 Changelog](.github/changelogs/2023/07.md)
+
+</details>
+
+<details>
+<summary><h4>June (5 entries)</h4></summary>
+
+[View June 2023 Changelog](.github/changelogs/2023/06.md)
+
+</details>
+
+<details>
+<summary><h4>May (8 entries)</h4></summary>
+
+[View May 2023 Changelog](.github/changelogs/2023/05.md)
+
+</details>
+
+<details>
+<summary><h4>April (8 entries)</h4></summary>
+
+[View April 2023 Changelog](.github/changelogs/2023/04.md)
+
+</details>
+
+<details>
+<summary><h4>March (8 entries)</h4></summary>
+
+[View March 2023 Changelog](.github/changelogs/2023/03.md)
+
+</details>
+
+<details>
+<summary><h4>February (6 entries)</h4></summary>
+
+[View February 2023 Changelog](.github/changelogs/2023/02.md)
+
+</details>
+
+<details>
+<summary><h4>January (15 entries)</h4></summary>
+
+[View January 2023 Changelog](.github/changelogs/2023/01.md)
+
+</details>
+
+</details>
+
+<details>
+<summary><h3>2022</h3></summary>
+
+
+<details>
+<summary><h4>December (7 entries)</h4></summary>
+
+[View December 2022 Changelog](.github/changelogs/2022/12.md)
+
+</details>
+
+<details>
+<summary><h4>November (7 entries)</h4></summary>
+
+[View November 2022 Changelog](.github/changelogs/2022/11.md)
+
+</details>
+
+<details>
+<summary><h4>October (2 entries)</h4></summary>
+
+[View October 2022 Changelog](.github/changelogs/2022/10.md)
+
+</details>
+
+<details>
+<summary><h4>September (9 entries)</h4></summary>
+
+[View September 2022 Changelog](.github/changelogs/2022/09.md)
+
+</details>
+
+<details>
+<summary><h4>August (7 entries)</h4></summary>
+
+[View August 2022 Changelog](.github/changelogs/2022/08.md)
+
+</details>
+
+<details>
+<summary><h4>July (10 entries)</h4></summary>
+
+[View July 2022 Changelog](.github/changelogs/2022/07.md)
+
+</details>
+
+<details>
+<summary><h4>June (1 entries)</h4></summary>
+
+[View June 2022 Changelog](.github/changelogs/2022/06.md)
+
+</details>
+
+<details>
+<summary><h4>May (8 entries)</h4></summary>
+
+[View May 2022 Changelog](.github/changelogs/2022/05.md)
+
+</details>
+
+<details>
+<summary><h4>April (13 entries)</h4></summary>
+
+[View April 2022 Changelog](.github/changelogs/2022/04.md)
+
+</details>
+
+<details>
+<summary><h4>March (20 entries)</h4></summary>
+
+[View March 2022 Changelog](.github/changelogs/2022/03.md)
+
+</details>
+
+<details>
+<summary><h4>February (15 entries)</h4></summary>
+
+[View February 2022 Changelog](.github/changelogs/2022/02.md)
+
+</details>
+
+<details>
+<summary><h4>January (3 entries)</h4></summary>
+
+[View January 2022 Changelog](.github/changelogs/2022/01.md)
+
+</details>
+
+</details>
+
+</details>
+
+## 2026-02-01
 
 ### 🚀 Updated Scripts
 
+  - #### 🐞 Bug Fixes
+
+    - [Hotfix] Bunkerweb update [@vhsdream](https://github.com/vhsdream) ([#11402](https://github.com/community-scripts/ProxmoxVE/pull/11402))
+
   - #### ✨ New Features
 
+    - Immich Refactor #2 [@vhsdream](https://github.com/vhsdream) ([#11375](https://github.com/community-scripts/ProxmoxVE/pull/11375))
+
+  - #### 🔧 Refactor
+
+    - WordPress: Refactor [@tremor021](https://github.com/tremor021) ([#11408](https://github.com/community-scripts/ProxmoxVE/pull/11408))
+    - Refactor: Whisparr [@tremor021](https://github.com/tremor021) ([#11411](https://github.com/community-scripts/ProxmoxVE/pull/11411))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - [tools]: Update `fetch_and_deply_from_url()` [@tremor021](https://github.com/tremor021) ([#11410](https://github.com/community-scripts/ProxmoxVE/pull/11410))
+
+### 🌐 Website
+
+  - #### ✨ New Features
+
+    - feat(frontend): add contribution CTA to empty search state [@ls-root](https://github.com/ls-root) ([#11412](https://github.com/community-scripts/ProxmoxVE/pull/11412))
+
+## 2026-01-31
+
+### 🆕 New Scripts
+
+  - shelfmark ([#11371](https://github.com/community-scripts/ProxmoxVE/pull/11371))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix: yubal: add git [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11394](https://github.com/community-scripts/ProxmoxVE/pull/11394))
+
+## 2026-01-30
+
+### 🆕 New Scripts
+
+  - languagetool ([#11370](https://github.com/community-scripts/ProxmoxVE/pull/11370))
+- Ampache ([#11369](https://github.com/community-scripts/ProxmoxVE/pull/11369))
+
+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Refactor: remove redundant PHP_MODULE entries in several scripts [@MickLesk](https://github.com/MickLesk) ([#11362](https://github.com/community-scripts/ProxmoxVE/pull/11362))
+    - Refactor: Koillection [@MickLesk](https://github.com/MickLesk) ([#11361](https://github.com/community-scripts/ProxmoxVE/pull/11361))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: meilisearch - add data migration for version upgrades [@MickLesk](https://github.com/MickLesk) ([#11356](https://github.com/community-scripts/ProxmoxVE/pull/11356))
+
+  - #### ✨ New Features
+
+    - [tools] Add `fetch_and_deploy_from_url()` [@tremor021](https://github.com/tremor021) ([#11376](https://github.com/community-scripts/ProxmoxVE/pull/11376))
+    - core: php - improve module handling and prevent installation failures [@MickLesk](https://github.com/MickLesk) ([#11358](https://github.com/community-scripts/ProxmoxVE/pull/11358))
+
+## 2026-01-29
+
+### 🆕 New Scripts
+
+  - Alpine-Valkey [@MickLesk](https://github.com/MickLesk) ([#11320](https://github.com/community-scripts/ProxmoxVE/pull/11320))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: Pin version to 2.5.2 [@vhsdream](https://github.com/vhsdream) ([#11335](https://github.com/community-scripts/ProxmoxVE/pull/11335))
+    - Kollection: Update to php 8.5 [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11315](https://github.com/community-scripts/ProxmoxVE/pull/11315))
+    - Notifiarr: change installation check from apt to systemd service [@MickLesk](https://github.com/MickLesk) ([#11319](https://github.com/community-scripts/ProxmoxVE/pull/11319))
+
+  - #### ✨ New Features
+
+    - [FEAT] Immich: Enable Maintenance Mode before update [@vhsdream](https://github.com/vhsdream) ([#11342](https://github.com/community-scripts/ProxmoxVE/pull/11342))
+    - jellyfin: add logrotate instead of reducing log level [@MickLesk](https://github.com/MickLesk) ([#11326](https://github.com/community-scripts/ProxmoxVE/pull/11326))
     - core: Add config file handling options | Fix Vikunja update with interactive overwrite [@MickLesk](https://github.com/MickLesk) ([#11317](https://github.com/community-scripts/ProxmoxVE/pull/11317))
+    - Immich: v2.5.0 [@vhsdream](https://github.com/vhsdream) ([#11240](https://github.com/community-scripts/ProxmoxVE/pull/11240))
 
   - #### 💥 Breaking Changes
 
     - fix: vikunja v1 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11308](https://github.com/community-scripts/ProxmoxVE/pull/11308))
 
+  - #### 🔧 Refactor
+
+    - Refactor: Byparr [@vhsdream](https://github.com/vhsdream) ([#11338](https://github.com/community-scripts/ProxmoxVE/pull/11338))
+    - cloudflare: Remove deprecated DNS-over-HTTPS proxy option [@MickLesk](https://github.com/MickLesk) ([#11068](https://github.com/community-scripts/ProxmoxVE/pull/11068))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - build.func: Replace storage variable with searchdomain variable [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11322](https://github.com/community-scripts/ProxmoxVE/pull/11322))
+
+### 📂 Github
+
+  - Add workflow to lock closed issues [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#11316](https://github.com/community-scripts/ProxmoxVE/pull/11316))
+
 ## 2026-01-28
 
 ### 🆕 New Scripts
@@ -1136,91 +1611,4 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ### ❔ Uncategorized
 
-  - Extend guidance for changing the immich upload location for #10447 [@jshprentz](https://github.com/jshprentz) ([#10475](https://github.com/community-scripts/ProxmoxVE/pull/10475))
-
-## 2026-01-01
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(sabnzbd): update script now migrates old service files to use venv Python [@vidonnus](https://github.com/vidonnus) ([#10466](https://github.com/community-scripts/ProxmoxVE/pull/10466))
-    - fix(bazarr): update script now migrates old service files to use venv Python [@vidonnus](https://github.com/vidonnus) ([#10459](https://github.com/community-scripts/ProxmoxVE/pull/10459))
-    - fix #10453 broken sonarqube update [@Karlito83](https://github.com/Karlito83) ([#10456](https://github.com/community-scripts/ProxmoxVE/pull/10456))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - Fix MariaDB runtime directory persistence on container reboot [@Copilot](https://github.com/Copilot) ([#10468](https://github.com/community-scripts/ProxmoxVE/pull/10468))
-
-## 2025-12-31
-
-### 🚀 Updated Scripts
-
-  - fix(wazuh): add LXC rootcheck exclusion to prevent false positives [@brettlyons](https://github.com/brettlyons) ([#10436](https://github.com/community-scripts/ProxmoxVE/pull/10436))
-
-  - #### 🐞 Bug Fixes
-
-    - Increase BentoPDF RAM requirement from 2GB to 4GB [@Copilot](https://github.com/Copilot) ([#10449](https://github.com/community-scripts/ProxmoxVE/pull/10449))
-    - fix(swizzin): Use HTTPS and add curl error handling [@fmcglinn](https://github.com/fmcglinn) ([#10440](https://github.com/community-scripts/ProxmoxVE/pull/10440))
-
-## 2025-12-30
-
-### 🚀 Updated Scripts
-
-  - #### ✨ New Features
-
-    - Unlink default nginx config [@iLikeToCode](https://github.com/iLikeToCode) ([#10432](https://github.com/community-scripts/ProxmoxVE/pull/10432))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Firefly [@tremor021](https://github.com/tremor021) ([#10421](https://github.com/community-scripts/ProxmoxVE/pull/10421))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: GoAway [@MickLesk](https://github.com/MickLesk) ([#10429](https://github.com/community-scripts/ProxmoxVE/pull/10429))
-
-## 2025-12-29
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - syncthing: check for deb822 source [@MickLesk](https://github.com/MickLesk) ([#10414](https://github.com/community-scripts/ProxmoxVE/pull/10414))
-    - speedtest-tracker: add external IP URL and internet check hostname in .env [@MickLesk](https://github.com/MickLesk) ([#10078](https://github.com/community-scripts/ProxmoxVE/pull/10078))
-    - Pelican-panel: prevent composer superuser prompt [@MickLesk](https://github.com/MickLesk) ([#10418](https://github.com/community-scripts/ProxmoxVE/pull/10418))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - add libmfx-gen1.2 for intel gpu hwaccel [@jcnix](https://github.com/jcnix) ([#10400](https://github.com/community-scripts/ProxmoxVE/pull/10400))
-
-## 2025-12-28
-
-### 🆕 New Scripts
-
-  - Mail-Archiver ([#10393](https://github.com/community-scripts/ProxmoxVE/pull/10393))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Fix mongodb update logic [@durzo](https://github.com/durzo) ([#10388](https://github.com/community-scripts/ProxmoxVE/pull/10388))
-    - fix pulse downloading incorrect tarball [@durzo](https://github.com/durzo) ([#10383](https://github.com/community-scripts/ProxmoxVE/pull/10383))
-
-  - #### 🔧 Refactor
-
-    - Linkwarden: enable Corepack and prepare Yarn v4 before running yarn [@MickLesk](https://github.com/MickLesk) ([#10390](https://github.com/community-scripts/ProxmoxVE/pull/10390))
-    - metube: use pnpm + corepack for frontend build [@MickLesk](https://github.com/MickLesk) ([#10392](https://github.com/community-scripts/ProxmoxVE/pull/10392))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - Set default LANG in locale configuration [@jamezpolley](https://github.com/jamezpolley) ([#10378](https://github.com/community-scripts/ProxmoxVE/pull/10378))
-
-### ❔ Uncategorized
-
-  - Updated Frontend Debian and Ubuntu VM notes so links can be copied quickly. [@mzb2xeo](https://github.com/mzb2xeo) ([#10379](https://github.com/community-scripts/ProxmoxVE/pull/10379))
+  - Extend guidance for changing the immich upload location for #10447 [@jshprentz](https://github.com/jshprentz) ([#10475](https://github.com/community-scripts/ProxmoxVE/pull/10475))

ct/2fauth.sh

@@ -41,7 +41,7 @@ function update_script() {
     msg_ok "Backup Created"
 
     if ! dpkg -l | grep -q 'php8.4'; then
-      PHP_VERSION="8.4" PHP_MODULE="common,ctype,fileinfo,mysql,cli,tokenizer,dom,redis,session,openssl" PHP_FPM="YES" setup_php
+      PHP_VERSION="8.4" PHP_FPM="YES" setup_php
       sed -i 's/php8\.[0-9]/php8.4/g' /etc/nginx/conf.d/2fauth.conf
     fi
     fetch_and_deploy_gh_release "2fauth" "Bubka/2FAuth" "tarball"

ct/alpine-loki.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
+# Copyright (c) 2021-2026 community-scripts ORG
 # Author: hoholms
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/grafana/loki

ct/alpine-valkey.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: pshankinclarke (lazarillo)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://valkey.io/
+
+APP="Alpine-Valkey"
+var_tags="${var_tags:-alpine;database}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-256}"
+var_disk="${var_disk:-1}"
+var_os="${var_os:-alpine}"
+var_version="${var_version:-3.23}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  if ! apk -e info newt >/dev/null 2>&1; then
+    apk add -q newt
+  fi
+  LXCIP=$(ip a s dev eth0 | awk '/inet / {print $2}' | cut -d/ -f1)
+  while true; do
+    CHOICE=$(
+      whiptail --backtitle "Proxmox VE Helper Scripts" --title "Valkey Management" --menu "Select option" 11 58 3 \
+        "1" "Update Valkey" \
+        "2" "Allow 0.0.0.0 for listening" \
+        "3" "Allow only ${LXCIP} for listening" 3>&2 2>&1 1>&3
+    )
+    exit_status=$?
+    if [ $exit_status == 1 ]; then
+      clear
+      exit-script
+    fi
+    header_info
+    case $CHOICE in
+    1)
+      msg_info "Updating Valkey"
+      apk update && apk upgrade valkey
+      rc-service valkey restart
+      msg_ok "Updated Valkey"
+      msg_ok "Updated successfully!"
+      exit
+      ;;
+    2)
+      msg_info "Setting Valkey to listen on all interfaces"
+      sed -i 's/^bind .*/bind 0.0.0.0/' /etc/valkey/valkey.conf
+      rc-service valkey restart
+      msg_ok "Valkey now listens on all interfaces!"
+      exit
+      ;;
+    3)
+      msg_info "Setting Valkey to listen only on ${LXCIP}"
+      sed -i "s/^bind .*/bind ${LXCIP}/" /etc/valkey/valkey.conf
+      rc-service valkey restart
+      msg_ok "Valkey now listens only on ${LXCIP}!"
+      exit
+      ;;
+    esac
+  done
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${APP} should be reachable on port 6379.
+         ${BL}valkey-cli -h ${IP} -p 6379${CL} \n"

ct/ampache.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (Canbiz)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/ampache/ampache
+
+APP="Ampache"
+var_tags="${var_tags:-music}"
+var_disk="${var_disk:-5}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-2048}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/ampache ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "Ampache" "ampache/ampache"; then
+    msg_info "Stopping Service"
+    systemctl stop apache2
+    msg_ok "Stopped Service"
+
+    msg_info "Creating Backup"
+    cp /opt/ampache/config/ampache.cfg.php /tmp/ampache.cfg.php.backup
+    cp /opt/ampache/public/rest/.htaccess /tmp/ampache_rest.htaccess.backup
+    cp /opt/ampache/public/play/.htaccess /tmp/ampache_play.htaccess.backup
+    rm -rf /opt/ampache_backup
+    mv /opt/ampache /opt/ampache_backup
+    msg_ok "Created Backup"
+
+    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
+
+    msg_info "Restoring Backup"
+    cp /tmp/ampache.cfg.php.backup /opt/ampache/config/ampache.cfg.php
+    cp /tmp/ampache_rest.htaccess.backup /opt/ampache/public/rest/.htaccess
+    cp /tmp/ampache_play.htaccess.backup /opt/ampache/public/play/.htaccess
+    chmod 664 /opt/ampache/public/rest/.htaccess /opt/ampache/public/play/.htaccess
+    chown -R www-data:www-data /opt/ampache
+    rm -f /tmp/ampache*.backup
+    msg_ok "Restored Configuration"
+
+    msg_info "Starting Service"
+    systemctl start apache2
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+    msg_custom "⚠️" "${YW}" "Complete database update by visiting: http://${LOCAL_IP}/update.php"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}/install.php${CL}"

ct/baikal.sh

@@ -37,7 +37,7 @@ function update_script() {
     mv /opt/baikal /opt/baikal-backup
     msg_ok "Backed up data"
 
-    PHP_APACHE="YES" PHP_MODULE="pgsql,curl" PHP_VERSION="8.3" setup_php
+    PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
     setup_composer
     fetch_and_deploy_gh_release "baikal" "sabre-io/Baikal" "tarball"
 

ct/bar-assistant.sh

@@ -34,7 +34,7 @@ function update_script() {
     systemctl stop nginx
     msg_ok "Stopped nginx"
 
-    PHP_VERSION="8.4" PHP_FPM=YES PHP_MODULE="ffi,redis,pdo-sqlite" setup_php
+    PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="pdo-sqlite" setup_php
 
     msg_info "Backing up Bar Assistant"
     mv /opt/bar-assistant /opt/bar-assistant-backup

ct/beszel.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) community-scripts ORG
+# Copyright (c) 2021-2026 community-scripts ORG
 # Author: Michelle Zitzerman (Sinofage)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://beszel.dev/

ct/bookstack.sh

@@ -39,7 +39,7 @@ function update_script() {
     msg_ok "Backup finished"
 
     fetch_and_deploy_gh_release "bookstack" "BookStackApp/BookStack" "tarball"
-    PHP_MODULE="ldap,tidy,bz2,mysqli" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
+    PHP_VERSION="8.3" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="ldap,tidy,mysqli" setup_php
     setup_composer
 
     msg_info "Restoring backup"

ct/bunkerweb.sh

@@ -30,7 +30,7 @@ function update_script() {
 
   if check_for_gh_release "bunkerweb" "bunkerity/bunkerweb"; then
     msg_info "Updating BunkerWeb"
-    RELEASE=$(get_latest_github_release "bunkerweb" "bunkerity/bunkerweb")
+    RELEASE=$(get_latest_github_release "bunkerity/bunkerweb")
     cat <<EOF >/etc/apt/preferences.d/bunkerweb
 Package: bunkerweb
 Pin: version ${RELEASE}

ct/byparr.sh

@@ -35,6 +35,54 @@ function update_script() {
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Byparr" "ThePhaseless/Byparr" "tarball" "latest"
 
+    if ! dpkg -l | grep -q ffmpeg; then
+      msg_info "Installing dependencies"
+      $STD apt install -y --no-install-recommends \
+        ffmpeg \
+        libatk1.0-0 \
+        libcairo-gobject2 \
+        libcairo2 \
+        libdbus-glib-1-2 \
+        libfontconfig1 \
+        libfreetype6 \
+        libgdk-pixbuf-xlib-2.0-0 \
+        libglib2.0-0 \
+        libgtk-3-0 \
+        libpango-1.0-0 \
+        libpangocairo-1.0-0 \
+        libpangoft2-1.0-0 \
+        libx11-6 \
+        libx11-xcb1 \
+        libxcb-shm0 \
+        libxcb1 \
+        libxcomposite1 \
+        libxcursor1 \
+        libxdamage1 \
+        libxext6 \
+        libxfixes3 \
+        libxi6 \
+        libxrender1 \
+        libxt6 \
+        libxtst6 \
+        xvfb \
+        fonts-noto-color-emoji \
+        fonts-unifont \
+        xfonts-cyrillic \
+        xfonts-scalable \
+        fonts-liberation \
+        fonts-ipafont-gothic \
+        fonts-wqy-zenhei \
+        fonts-tlwg-loma-otf
+      $STD apt autoremove -y chromium
+      msg_ok "Installed dependencies"
+    fi
+
+    msg_info "Configuring Byparr"
+    cd /opt/Byparr
+    $STD uv sync --link-mode copy
+    $STD uv run camoufox fetch
+    msg_ok "Configured Byparr"
+
     msg_info "Starting Service"
     systemctl start byparr
     msg_ok "Started Service"

ct/fladder.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
+# Copyright (c) 2021-2026 community-scripts ORG
 # Author: wendyliga
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/DonutWare/Fladder

ct/grocy.sh

@@ -29,7 +29,7 @@ function update_script() {
   fi
   php_ver=$(php -v | head -n 1 | awk '{print $2}')
   if [[ ! $php_ver == "8.3"* ]]; then
-    PHP_VERSION="8.3" PHP_MODULE="sqlite3,bz2" PHP_APACHE="yes" setup_php
+    PHP_VERSION="8.3" PHP_APACHE="YES" setup_php
   fi
   if check_for_gh_release "grocy" "grocy/grocy"; then
     msg_info "Updating grocy"

ct/headers/alpine-valkey

@@ -0,0 +1,6 @@
+    ___    __      _                _    __      ____             
+   /   |  / /___  (_)___  ___      | |  / /___ _/ / /_____  __  __
+  / /| | / / __ \/ / __ \/ _ \_____| | / / __ `/ / //_/ _ \/ / / /
+ / ___ |/ / /_/ / / / / /  __/_____/ |/ / /_/ / / ,< /  __/ /_/ / 
+/_/  |_/_/ .___/_/_/ /_/\___/      |___/\__,_/_/_/|_|\___/\__, /  
+        /_/                                              /____/   

ct/headers/ampache

@@ -0,0 +1,6 @@
+    ___                               __       
+   /   |  ____ ___  ____  ____ ______/ /_  ___ 
+  / /| | / __ `__ \/ __ \/ __ `/ ___/ __ \/ _ \
+ / ___ |/ / / / / / /_/ / /_/ / /__/ / / /  __/
+/_/  |_/_/ /_/ /_/ .___/\__,_/\___/_/ /_/\___/ 
+                /_/                            

ct/headers/languagetool

@@ -0,0 +1,6 @@
+    __                                           ______            __
+   / /   ____ _____  ____ ___  ______ _____ ____/_  __/___  ____  / /
+  / /   / __ `/ __ \/ __ `/ / / / __ `/ __ `/ _ \/ / / __ \/ __ \/ / 
+ / /___/ /_/ / / / / /_/ / /_/ / /_/ / /_/ /  __/ / / /_/ / /_/ / /  
+/_____/\__,_/_/ /_/\__, /\__,_/\__,_/\__, /\___/_/  \____/\____/_/   
+                  /____/            /____/                           

ct/headers/shelfmark

@@ -0,0 +1,6 @@
+         __         ______                     __  
+   _____/ /_  ___  / / __/___ ___  ____ ______/ /__
+  / ___/ __ \/ _ \/ / /_/ __ `__ \/ __ `/ ___/ //_/
+ (__  ) / / /  __/ / __/ / / / / / /_/ / /  / ,<   
+/____/_/ /_/\___/_/_/ /_/ /_/ /_/\__,_/_/  /_/|_|  
+                                                   

ct/immich.sh

@@ -52,9 +52,7 @@ Package: *
 Pin:release a=testing
 Pin-Priority: 450
 EOF
-    if [[ -f /etc/apt/preferences.d/immich ]]; then
-      rm /etc/apt/preferences.d/immich
-    fi
+    [[ -f /etc/apt/preferences.d/immich ]] && rm /etc/apt/preferences.d/immich
     $STD apt update
     msg_ok "Added Debian Testing repo"
   fi
@@ -68,7 +66,7 @@ EOF
   if [[ ! -f /etc/apt/sources.list.d/mise.list ]]; then
     msg_info "Installing Mise"
     curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
-    echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" | tee /etc/apt/sources.list.d/mise.list
+    echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" >/etc/apt/sources.list.d/mise.list
     $STD apt update
     $STD apt install -y mise
     msg_ok "Installed Mise"
@@ -112,25 +110,29 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="2.4.1"
+  RELEASE="2.5.2"
   if check_for_gh_release "immich" "immich-app/immich" "${RELEASE}"; then
+    if [[ $(cat ~/.immich) > "2.5.1" ]]; then
+      msg_info "Enabling Maintenance Mode"
+      cd /opt/immich/app/bin
+      $STD ./immich-admin enable-maintenance-mode
+      export MAINT_MODE=1
+      $STD cd -
+      msg_ok "Enabled Maintenance Mode"
+    fi
     msg_info "Stopping Services"
     systemctl stop immich-web
     systemctl stop immich-ml
     msg_ok "Stopped Services"
     VCHORD_RELEASE="0.5.3"
-    if [[ ! -f ~/.vchord_version ]] || [[ "$VCHORD_RELEASE" != "$(cat ~/.vchord_version)" ]]; then
-      msg_info "Upgrading VectorChord"
-      curl -fsSL "https://github.com/tensorchord/vectorchord/releases/download/${VCHORD_RELEASE}/postgresql-16-vchord_${VCHORD_RELEASE}-1_amd64.deb" -o vchord.deb
-      $STD apt install -y ./vchord.deb
+    [[ -f ~/.vchord_version ]] && mv ~/.vchord_version ~/.vectorchord
+    if check_for_gh_release "VectorChord" "tensorchord/VectorChord" "${VCHORD_RELEASE}"; then
+      fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-16-vchord_*_amd64.deb"
       systemctl restart postgresql
       $STD sudo -u postgres psql -d immich -c "ALTER EXTENSION vector UPDATE;"
       $STD sudo -u postgres psql -d immich -c "ALTER EXTENSION vchord UPDATE;"
       $STD sudo -u postgres psql -d immich -c "REINDEX INDEX face_index;"
       $STD sudo -u postgres psql -d immich -c "REINDEX INDEX clip_index;"
-      echo "$VCHORD_RELEASE" >~/.vchord_version
-      rm ./vchord.deb
-      msg_ok "Upgraded VectorChord to v${VCHORD_RELEASE}"
     fi
     if ! dpkg -l | grep -q ccache; then
       $STD apt install -yqq ccache
@@ -144,7 +146,7 @@ EOF
     ML_DIR="${APP_DIR}/machine-learning"
     GEO_DIR="${INSTALL_DIR}/geodata"
 
-    cp "$ML_DIR"/ml_start.sh "$INSTALL_DIR"
+    [[ -f "$ML_DIR"/ml_start.sh ]] && cp "$ML_DIR"/ml_start.sh "$INSTALL_DIR"
     if grep -qs "set -a" "$APP_DIR"/bin/start.sh; then
       cp "$APP_DIR"/bin/start.sh "$INSTALL_DIR"
     else
@@ -167,7 +169,7 @@ EOF
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v${RELEASE}" "$SRC_DIR"
 
-    msg_info "Updating ${APP} web and microservices"
+    msg_info "Updating Immich web and microservices"
     cd "$SRC_DIR"/server
     export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
     export CI=1
@@ -180,7 +182,7 @@ EOF
     export SHARP_FORCE_GLOBAL_LIBVIPS=true
     $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
     cp "$APP_DIR"/package.json "$APP_DIR"/bin
-    sed -i 's|^start|./start|' "$APP_DIR"/bin/immich-admin
+    sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin
 
     # openapi & web build
     cd "$SRC_DIR"
@@ -196,8 +198,7 @@ EOF
     $STD pnpm --filter @immich/sdk --filter @immich/cli --frozen-lockfile install
     $STD pnpm --filter @immich/sdk --filter @immich/cli build
     $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
-    cd "$APP_DIR"
-    mv "$INSTALL_DIR"/start.sh "$APP_DIR"/bin
+    [[ -f "$INSTALL_DIR"/start.sh ]] && mv "$INSTALL_DIR"/start.sh "$APP_DIR"/bin
 
     # plugins
     cd "$SRC_DIR"
@@ -209,7 +210,7 @@ EOF
     mkdir -p "$PLUGIN_DIR"
     cp -r ./dist "$PLUGIN_DIR"/dist
     cp ./manifest.json "$PLUGIN_DIR"
-    msg_ok "Updated ${APP} server, web, cli and plugins"
+    msg_ok "Updated Immich server, web, cli and plugins"
 
     cd "$SRC_DIR"/machine-learning
     mkdir -p "$ML_DIR" && chown -R immich:immich "$ML_DIR"
@@ -217,20 +218,19 @@ EOF
     export VIRTUAL_ENV="${ML_DIR}"/ml-venv
     if [[ -f ~/.openvino ]]; then
       msg_info "Updating HW-accelerated machine-learning"
-      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --active -n -p python3.11 --managed-python
-      patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.11/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-311-x86_64-linux-gnu.so"
+      $STD uv add --no-sync --optional openvino onnxruntime-openvino==1.20.0 --active -n -p python3.12 --managed-python
+      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.12 --managed-python
+      patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.12/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-312-x86_64-linux-gnu.so"
       msg_ok "Updated HW-accelerated machine-learning"
     else
       msg_info "Updating machine-learning"
-      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra cpu --active -n -p python3.11 --managed-python
+      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p python3.11 --managed-python
       msg_ok "Updated machine-learning"
     fi
     cd "$SRC_DIR"
     cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
-    mv "$INSTALL_DIR"/ml_start.sh "$ML_DIR"
-    if [[ -f ~/.openvino ]]; then
-      sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
-    fi
+    [[ -f "$INSTALL_DIR"/ml_start.sh ]] && mv "$INSTALL_DIR"/ml_start.sh "$ML_DIR"
+    [[ -f ~/.openvino ]] && sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
     ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
     cd "$APP_DIR"
     grep -rl /usr/src | xargs -n1 sed -i "s|\/usr/src|$INSTALL_DIR|g"
@@ -239,10 +239,39 @@ EOF
     ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$APP_DIR"/upload
     ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$ML_DIR"/upload
     ln -s "$GEO_DIR" "$APP_DIR"
+    [[ ! -f /usr/bin/immich ]] && ln -sf "$APP_DIR"/cli/bin/immich /usr/bin/immich
+    [[ ! -f /usr/bin/immich-admin ]] && ln -sf "$APP_DIR"/bin/immich-admin /usr/bin/immich-admin
 
     chown -R immich:immich "$INSTALL_DIR"
-    msg_ok "Updated ${APP} to v${RELEASE}"
+    if [[ "${MAINT_MODE:-0}" == 1 ]]; then
+      msg_info "Disabling Maintenance Mode"
+      cd /opt/immich/app/bin
+      $STD ./immich-admin disable-maintenance-mode
+      unset MAINT_MODE
+      $STD cd -
+      msg_ok "Disabled Maintenance Mode"
+    fi
     systemctl restart immich-ml immich-web
+    msg_ok "Updated successfully!"
+    msg_info "Checking health of Immich-web & Immich-ml services"
+    sleep 5
+    web=0
+    until curl -fs localhost:2283/api/server/ping | grep -q "pong" || [[ $web -gt 1 ]]; do
+      msg_warn "Problem detected with Immich-web service, restarting..."
+      systemctl restart immich-web && sleep 5
+      [[ $(curl -fs localhost:2283/api/server/ping | grep "pong") ]] && break
+      ((web++))
+    done
+    [[ $web -lt 1 ]] && msg_ok "Immich-web service is reachable!" || msg_error "Please check '/var/log/immich/web.log' for more details"
+
+    ml=0
+    until [[ $(curl -fs localhost:3003/ping) == "pong" ]] || [[ $ml -gt 1 ]]; do
+      msg_warn "Problem detected with Immich-ml service, restarting..."
+      systemctl restart immich-ml && sleep 5
+      [[ $(curl -fs localhost:3003/ping) == "pong" ]] && break
+      ((ml++))
+    done
+    [[ $ml -lt 1 ]] && msg_ok "Immich-ml service is reachable!" || msg_error "Please check '/var/log/immich/ml.log' for more details"
   fi
   exit
 }
@@ -254,7 +283,7 @@ function compile_libjxl() {
   : "${LIBJXL_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libjxl.json)}"
   if [[ "$LIBJXL_REVISION" != "$(grep 'libjxl' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libjxl"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
     $STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
     cd "$SOURCE"
     $STD git reset --hard "$LIBJXL_REVISION"
@@ -301,7 +330,7 @@ function compile_libheif() {
   : "${LIBHEIF_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libheif.json)}"
   if [[ "${update:-}" ]] || [[ "$LIBHEIF_REVISION" != "$(grep 'libheif' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libheif"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
     $STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
     cd "$SOURCE"
     $STD git reset --hard "$LIBHEIF_REVISION"
@@ -317,7 +346,7 @@ function compile_libheif() {
       -DWITH_X265=OFF \
       -DWITH_EXAMPLES=OFF \
       ..
-    $STD make install -j "$(nproc)"
+    $STD make install -j"$(nproc)"
     ldconfig /usr/local/lib
     $STD make clean
     cd "$STAGING_DIR"
@@ -332,7 +361,7 @@ function compile_libraw() {
   : "${LIBRAW_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libraw.json)}"
   if [[ "$LIBRAW_REVISION" != "$(grep 'libraw' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libraw"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
     $STD git clone https://github.com/libraw/libraw.git "$SOURCE"
     cd "$SOURCE"
     $STD git reset --hard "$LIBRAW_REVISION"
@@ -354,7 +383,7 @@ function compile_imagemagick() {
   if [[ "$IMAGEMAGICK_REVISION" != "$(grep 'imagemagick' ~/.immich_library_revisions | awk '{print $2}')" ]] ||
     ! grep -q 'DMAGICK_LIBRAW' /usr/local/lib/ImageMagick-7*/config-Q16HDRI/configure.xml; then
     msg_info "Recompiling ImageMagick"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
     $STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
     cd "$SOURCE"
     $STD git reset --hard "$IMAGEMAGICK_REVISION"
@@ -374,7 +403,7 @@ function compile_libvips() {
   : "${LIBVIPS_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libvips.json)}"
   if [[ "$LIBVIPS_REVISION" != "$(grep 'libvips' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libvips"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
     $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
     cd "$SOURCE"
     $STD git reset --hard "$LIBVIPS_REVISION"

ct/kimai.sh

@@ -32,7 +32,7 @@ function update_script() {
   fi
   setup_mariadb
 
-  PHP_VERSION="8.4" PHP_MODULE="mysql" PHP_APACHE="YES" setup_php
+  PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
   setup_composer
 
   if check_for_gh_release "kimai" "kimai/kimai"; then

ct/koillection.sh

@@ -32,6 +32,8 @@ function update_script() {
     systemctl stop apache2
     msg_ok "Stopped Service"
 
+    PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
+    
     msg_info "Creating a backup"
     mv /opt/koillection/ /opt/koillection-backup
     msg_ok "Backup created"
@@ -42,15 +44,28 @@ function update_script() {
     cd /opt/koillection 
     cp -r /opt/koillection-backup/.env.local /opt/koillection
     cp -r /opt/koillection-backup/public/uploads/. /opt/koillection/public/uploads/
+    
+    # Ensure APP_RUNTIME is in .env.local for CLI commands (upgrades from older versions)
+    if ! grep -q "APP_RUNTIME" /opt/koillection/.env.local 2>/dev/null; then
+      echo 'APP_RUNTIME="Symfony\Component\Runtime\SymfonyRuntime"' >> /opt/koillection/.env.local
+    fi
+    
     export COMPOSER_ALLOW_SUPERUSER=1
+    export APP_RUNTIME='Symfony\Component\Runtime\SymfonyRuntime'
     $STD composer install --no-dev -o --no-interaction --classmap-authoritative
     $STD php bin/console doctrine:migrations:migrate --no-interaction
     $STD php bin/console app:translations:dump
     cd assets/ 
     $STD yarn install
     $STD yarn build
+    mkdir -p /opt/koillection/public/uploads
     chown -R www-data:www-data /opt/koillection/public/uploads
     rm -r /opt/koillection-backup
+    
+    # Ensure APP_RUNTIME is set in Apache config (for upgrades from older versions)
+    if ! grep -q "APP_RUNTIME" /etc/apache2/sites-available/koillection.conf 2>/dev/null; then
+      sed -i '/<VirtualHost/a\    SetEnv APP_RUNTIME "Symfony\\Component\\Runtime\\SymfonyRuntime"' /etc/apache2/sites-available/koillection.conf
+    fi
     msg_ok "Updated Koillection"
 
     msg_info "Starting Service"

ct/languagetool.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://languagetool.org/
+
+APP="LanguageTool"
+var_tags="${var_tags:-spellcheck}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-16}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/LanguageTool ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  RELEASE=$(curl -fsSL https://languagetool.org/download/ | grep -oP 'LanguageTool-\K[0-9]+\.[0-9]+(\.[0-9]+)?(?=\.zip)' | sort -V | tail -n1)
+  if [[ "${RELEASE}" != "$(cat ~/.languagetool 2>/dev/null)" ]] || [[ ! -f ~/.languagetool ]]; then
+    msg_info "Stopping Service"
+    systemctl stop language-tool
+    msg_ok "Stopped Service"
+
+    msg_info "Creating Backup"
+    cp /opt/LanguageTool/server.properties /opt/server.properties
+    msg_ok "Created Backup"
+
+    msg_info "Updating LanguageTool"
+    rm -rf /opt/LanguageTool
+    download_file "https://languagetool.org/download/LanguageTool-stable.zip" /tmp/LanguageTool-stable.zip
+    unzip -q /tmp/LanguageTool-stable.zip -d /opt
+    mv /opt/LanguageTool-*/ /opt/LanguageTool/
+    mv /opt/server.properties /opt/LanguageTool/server.properties
+    rm -f /tmp/LanguageTool-stable.zip
+    echo "${RELEASE}" >~/.languagetool
+    msg_ok "Updated LanguageTool"
+
+    msg_info "Starting Service"
+    systemctl start language-tool
+    msg_ok "Started Service"
+    msg_ok "Updated successfuly!"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8081/v2${CL}"

ct/linkstack.sh

@@ -28,7 +28,7 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  PHP_VERSION="8.3" PHP_MODULE="sqlite3" PHP_APACHE="YES" setup_php
+  PHP_VERSION="8.3" PHP_APACHE="YES" setup_php
   msg_warn "LinkStack should be updated via the user interface."
   exit
 }

ct/loki.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
+# Copyright (c) 2021-2026 community-scripts ORG
 # Author: hoholms
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/grafana/loki

ct/paymenter.sh

@@ -31,7 +31,7 @@ function update_script() {
 
   CURRENT_PHP=$(php -v 2>/dev/null | awk '/^PHP/{print $2}' | cut -d. -f1,2)
   if [[ "$CURRENT_PHP" != "8.3" ]]; then
-    PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="mysql,redis" setup_php
+    PHP_VERSION="8.3" PHP_FPM="YES" setup_php
     setup_composer
     sed -i 's|php8\.2-fpm\.sock|php8.3-fpm.sock|g' /etc/nginx/sites-available/paymenter.conf
     $STD systemctl reload nginx

ct/pelican-panel.sh

@@ -35,7 +35,7 @@ function update_script() {
   if [[ "$CURRENT_PHP" != "8.4" ]]; then
     msg_info "Migrating PHP $CURRENT_PHP to 8.4"
     $STD apt remove -y php"${CURRENT_PHP//./}"*
-    PHP_VERSION="8.4" PHP_MODULE="mysql,sqlite3" PHP_APACHE="YES" PHP_FPM="YES" setup_php
+    PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" setup_php
     msg_ok "Migrated PHP $CURRENT_PHP to 8.4"
   fi
 

ct/projectsend.sh

@@ -36,7 +36,7 @@ function update_script() {
 
     php_ver=$(php -v | head -n 1 | awk '{print $2}')
     if [[ ! $php_ver == "8.4"* ]]; then
-      PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="pdo,mysql,gettext,fileinfo" setup_php
+      PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
     fi
 
     mv /opt/projectsend/includes/sys.config.php /opt/sys.config.php

ct/shelfmark.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/calibrain/shelfmark
+
+APP="shelfmark"
+var_tags="${var_tags:-ebooks}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/shelfmark ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  NODE_VERSION="22" setup_nodejs
+  PYTHON_VERSION="3.12" setup_uv
+
+  if check_for_gh_release "shelfmark" "calibrain/shelfmark"; then
+    msg_info "Stopping Service(s)"
+    systemctl stop shelfmark
+    [[ -f /etc/systemd/system/chromium.service ]] && systemctl stop chromium
+    msg_ok "Stopped Service(s)"
+
+    [[ -f /etc/systemd/system/flaresolverr.service ]] && if check_for_gh_release "flaresolverr" "Flaresolverr/Flaresolverr"; then
+      msg_info "Stopping FlareSolverr service"
+      systemctl stop flaresolverr
+      msg_ok "Stopped FlareSolverr service"
+      
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
+      
+      msg_info "Starting FlareSolverr Service"
+      systemctl start flaresolverr
+      msg_ok "Started FlareSolverr Service"
+      msg_ok "Updated FlareSolverr"
+    fi
+    
+    cp /opt/shelfmark/start.sh /opt/start.sh.bak
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "shelfmark" "calibrain/shelfmark" "tarball" "latest" "/opt/shelfmark"
+    RELEASE_VERSION=$(cat "$HOME/.shelfmark")
+
+    msg_info "Updating Shelfmark"
+    sed -i "s/^RELEASE_VERSION=.*/RELEASE_VERSION=$RELEASE_VERSION/" /etc/shelfmark/.env
+    cd /opt/shelfmark/src/frontend
+    $STD npm ci
+    $STD npm run build
+    mv /opt/shelfmark/src/frontend/dist /opt/shelfmark/frontend-dist
+    cd /opt/shelfmark
+    $STD uv venv -c ./venv
+    $STD source ./venv/bin/activate
+    $STD uv pip install -r ./requirements-base.txt
+    if [[ $(sed -n '/_BYPASS=/s/[^=]*=//p' /etc/shelfmark/.env) == "true" ]] && [[ $(sed -n '/BYPASSER=/s/[^=]*=//p' /etc/shelfmark/.env) == "false" ]]; then
+      $STD uv pip install -r ./requirements-shelfmark.txt
+    fi
+    mv /opt/start.sh.bak /opt/shelfmark/start.sh
+    msg_ok "Updated Shelfmark"
+
+    msg_info "Starting Service(s)"
+    systemctl start shelfmark
+    [[ -f /etc/systemd/system/chromium.service ]] && systemctl start chromium
+    msg_ok "Started Service(s)"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8084${CL}"

ct/snipeit.sh

@@ -42,7 +42,7 @@ function update_script() {
     msg_ok "Created Backup"
 
     fetch_and_deploy_gh_release "snipe-it" "grokability/snipe-it" "tarball"
-    [[ "$(php -v 2>/dev/null)" == PHP\ 8.2* ]] && PHP_VERSION="8.3" PHP_MODULE="common,ctype,ldap,fileinfo,iconv,mysql,soap,xsl" PHP_FPM="YES" setup_php
+    [[ "$(php -v 2>/dev/null)" == PHP\ 8.2* ]] && PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="ldap,soap,xsl" setup_php
     sed -i 's/php8.2/php8.3/g' /etc/nginx/conf.d/snipeit.conf
     setup_composer
 

ct/speedtest-tracker.sh

@@ -30,7 +30,7 @@ function update_script() {
   fi
 
   if check_for_gh_release "speedtest-tracker" "alexjustesen/speedtest-tracker"; then
-    PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="common,sqlite3,redis" setup_php
+    PHP_VERSION="8.4" PHP_FPM="YES" setup_php
     setup_composer
     NODE_VERSION="22" setup_nodejs
     setcap cap_net_raw+ep /bin/ping

ct/tracearr.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
+# Copyright (c) 2021-2026 community-scripts ORG
 # Author: durzo
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/connorgallopo/Tracearr

ct/wazuh.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2025 community-scripts ORG
+# Copyright (c) 2021-2026 community-scripts ORG
 # Author: Omar Minaya
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://wazuh.com/

ct/whisparr.sh

@@ -27,11 +27,8 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  msg_info "Updating Whisparr"
-  $STD apt update
-  $STD apt -y upgrade
-  msg_ok "Updated Whisparr"
-  msg_ok "Updated successfully!"
+  
+  msg_custom "🚀" "${GN}" "The app offers a built-in updater. Please use it."
   exit
 }
 

ct/yubal.sh

@@ -29,6 +29,8 @@ function update_script() {
     exit
   fi
 
+  ensure_dependencies git
+
   if check_for_gh_release "yubal" "guillevc/yubal"; then
     msg_info "Stopping Services"
     systemctl stop yubal

frontend/public/json/ampache.json

@@ -0,0 +1,48 @@
+{
+    "name": "Ampache",
+    "slug": "ampache",
+    "categories": [
+        13
+    ],
+    "date_created": "2026-01-30",
+    "type": "ct",
+    "updateable": true,
+    "privileged": false,
+    "interface_port": 80,
+    "documentation": "https://github.com/ampache/ampache/wiki",
+    "website": "https://ampache.org/",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ampache.webp",
+    "config_path": "/opt/ampache/config/ampache.cfg.php",
+    "description": "Ampache is a web-based audio streaming application and file manager that allows you to access your music & videos from anywhere. It features a powerful music catalog, multiple user support, transcoding, streaming, and more.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/ampache.sh",
+            "resources": {
+                "cpu": 4,
+                "ram": 2048,
+                "hdd": 5,
+                "os": "debian",
+                "version": "13"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": null,
+        "password": null
+    },
+    "notes": [
+        {
+            "text": "Complete the web-based setup at http://IP/install.php",
+            "type": "info"
+        },
+        {
+            "text": "Database credentials are stored in `~/ampache.creds` - use only the MySQL username and password from this file",
+            "type": "info"
+        },
+        {
+            "text": "During installation, only check 'Create Tables' - leave 'Create Database' and 'Create Database User' unchecked",
+            "type": "info"
+        }
+    ]
+}

frontend/public/json/cloudflared.json

@@ -33,7 +33,11 @@
   },
   "notes": [
     {
-      "text": "With an option to configure cloudflared as a DNS-over-HTTPS (DoH) proxy",
+      "text": "After install, run: cloudflared tunnel login && cloudflared tunnel create <NAME>",
+      "type": "info"
+    },
+    {
+      "text": "Or create tunnel via Cloudflare Zero Trust Dashboard",
       "type": "info"
     }
   ]

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-01-29T06:16:13Z",
+  "generated": "2026-02-01T12:08:49Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -29,6 +29,13 @@
       "pinned": false,
       "date": "2025-03-20T03:06:11Z"
     },
+    {
+      "slug": "ampache",
+      "repo": "ampache/ampache",
+      "version": "7.8.0",
+      "pinned": false,
+      "date": "2025-12-22T04:23:45Z"
+    },
     {
       "slug": "argus",
       "repo": "release-argus/Argus",
@@ -53,9 +60,9 @@
     {
       "slug": "autobrr",
       "repo": "autobrr/autobrr",
-      "version": "v1.72.0",
+      "version": "v1.72.1",
       "pinned": false,
-      "date": "2026-01-27T20:53:54Z"
+      "date": "2026-01-30T12:57:58Z"
     },
     {
       "slug": "autocaliweb",
@@ -102,9 +109,9 @@
     {
       "slug": "bentopdf",
       "repo": "alam00000/bentopdf",
-      "version": "v1.16.1",
+      "version": "v2.0.0",
       "pinned": false,
-      "date": "2026-01-26T08:27:11Z"
+      "date": "2026-01-31T10:13:47Z"
     },
     {
       "slug": "beszel",
@@ -137,9 +144,9 @@
     {
       "slug": "bookstack",
       "repo": "BookStackApp/BookStack",
-      "version": "v25.12.2",
+      "version": "v25.12.3",
       "pinned": false,
-      "date": "2026-01-24T14:01:03Z"
+      "date": "2026-01-29T15:29:25Z"
     },
     {
       "slug": "byparr",
@@ -179,9 +186,9 @@
     {
       "slug": "comfyui",
       "repo": "comfyanonymous/ComfyUI",
-      "version": "v0.11.0",
+      "version": "v0.11.1",
       "pinned": false,
-      "date": "2026-01-27T06:23:53Z"
+      "date": "2026-01-29T07:52:21Z"
     },
     {
       "slug": "commafeed",
@@ -228,16 +235,16 @@
     {
       "slug": "dawarich",
       "repo": "Freika/dawarich",
-      "version": "1.0.1",
+      "version": "1.0.4",
       "pinned": false,
-      "date": "2026-01-24T15:35:14Z"
+      "date": "2026-02-01T11:37:27Z"
     },
     {
       "slug": "discopanel",
       "repo": "nickheyer/discopanel",
-      "version": "v1.0.27",
+      "version": "v1.0.32",
       "pinned": false,
-      "date": "2026-01-28T04:32:34Z"
+      "date": "2026-01-31T22:24:53Z"
     },
     {
       "slug": "dispatcharr",
@@ -368,9 +375,9 @@
     {
       "slug": "ghostfolio",
       "repo": "ghostfolio/ghostfolio",
-      "version": "2.233.0",
+      "version": "2.234.0",
       "pinned": false,
-      "date": "2026-01-23T18:41:45Z"
+      "date": "2026-01-30T19:00:22Z"
     },
     {
       "slug": "gitea",
@@ -403,9 +410,9 @@
     {
       "slug": "gokapi",
       "repo": "Forceu/Gokapi",
-      "version": "v2.2.0",
+      "version": "v2.2.2",
       "pinned": false,
-      "date": "2026-01-28T23:59:22Z"
+      "date": "2026-01-31T21:11:27Z"
     },
     {
       "slug": "gotify",
@@ -473,16 +480,16 @@
     {
       "slug": "homarr",
       "repo": "homarr-labs/homarr",
-      "version": "v1.51.0",
+      "version": "v1.52.0",
       "pinned": false,
-      "date": "2026-01-23T19:29:49Z"
+      "date": "2026-01-30T19:41:22Z"
     },
     {
       "slug": "homebox",
       "repo": "sysadminsmedia/homebox",
-      "version": "v0.22.3",
+      "version": "v0.23.0",
       "pinned": false,
-      "date": "2025-12-26T22:31:20Z"
+      "date": "2026-01-30T17:41:01Z"
     },
     {
       "slug": "homepage",
@@ -508,16 +515,9 @@
     {
       "slug": "huntarr",
       "repo": "plexguide/Huntarr.io",
-      "version": "9.0.5",
+      "version": "9.1.5",
       "pinned": false,
-      "date": "2026-01-26T03:34:21Z"
-    },
-    {
-      "slug": "immich",
-      "repo": "immich-app/immich",
-      "version": "v2.4.1",
-      "pinned": true,
-      "date": "2025-12-19T15:50:12Z"
+      "date": "2026-01-31T22:55:29Z"
     },
     {
       "slug": "inspircd",
@@ -536,16 +536,16 @@
     {
       "slug": "invoiceninja",
       "repo": "invoiceninja/invoiceninja",
-      "version": "v5.12.50",
+      "version": "v5.12.52",
       "pinned": false,
-      "date": "2026-01-26T05:28:47Z"
+      "date": "2026-02-01T02:08:10Z"
     },
     {
       "slug": "jackett",
       "repo": "Jackett/Jackett",
-      "version": "v0.24.980",
+      "version": "v0.24.1003",
       "pinned": false,
-      "date": "2026-01-29T05:04:22Z"
+      "date": "2026-02-01T05:55:30Z"
     },
     {
       "slug": "joplin-server",
@@ -592,9 +592,9 @@
     {
       "slug": "kimai",
       "repo": "kimai/kimai",
-      "version": "2.47.0",
+      "version": "2.48.0",
       "pinned": false,
-      "date": "2026-01-25T09:01:46Z"
+      "date": "2026-01-31T18:10:59Z"
     },
     {
       "slug": "koel",
@@ -641,9 +641,9 @@
     {
       "slug": "leantime",
       "repo": "Leantime/leantime",
-      "version": "v3.6.1",
+      "version": "v3.6.2",
       "pinned": false,
-      "date": "2026-01-29T02:53:11Z"
+      "date": "2026-01-29T16:37:00Z"
     },
     {
       "slug": "librenms",
@@ -732,9 +732,9 @@
     {
       "slug": "manyfold",
       "repo": "manyfold3d/manyfold",
-      "version": "v0.131.0",
+      "version": "v0.132.0",
       "pinned": false,
-      "date": "2026-01-09T15:00:15Z"
+      "date": "2026-01-29T13:53:21Z"
     },
     {
       "slug": "mealie",
@@ -753,9 +753,9 @@
     {
       "slug": "mediamtx",
       "repo": "bluenviron/mediamtx",
-      "version": "v1.15.6",
+      "version": "v1.16.0",
       "pinned": false,
-      "date": "2025-12-28T16:38:35Z"
+      "date": "2026-01-31T15:38:51Z"
     },
     {
       "slug": "meilisearch",
@@ -767,16 +767,16 @@
     {
       "slug": "memos",
       "repo": "usememos/memos",
-      "version": "v0.25.3",
+      "version": "v0.26.0",
       "pinned": false,
-      "date": "2025-11-25T15:40:41Z"
+      "date": "2026-01-31T15:28:09Z"
     },
     {
       "slug": "metube",
       "repo": "alexta69/metube",
-      "version": "2026.01.11",
+      "version": "2026.02.01",
       "pinned": false,
-      "date": "2026-01-11T18:43:56Z"
+      "date": "2026-02-01T00:20:00Z"
     },
     {
       "slug": "miniflux",
@@ -942,9 +942,9 @@
     {
       "slug": "paperless-ngx",
       "repo": "paperless-ngx/paperless-ngx",
-      "version": "v2.20.5",
+      "version": "v2.20.6",
       "pinned": false,
-      "date": "2026-01-21T00:12:33Z"
+      "date": "2026-01-31T07:30:27Z"
     },
     {
       "slug": "patchmon",
@@ -1012,9 +1012,9 @@
     {
       "slug": "pocketbase",
       "repo": "pocketbase/pocketbase",
-      "version": "v0.36.1",
+      "version": "v0.36.2",
       "pinned": false,
-      "date": "2026-01-18T17:09:58Z"
+      "date": "2026-02-01T08:12:42Z"
     },
     {
       "slug": "pocketid",
@@ -1096,9 +1096,9 @@
     {
       "slug": "pve-scripts-local",
       "repo": "community-scripts/ProxmoxVE-Local",
-      "version": "v0.5.5",
+      "version": "v0.5.6",
       "pinned": false,
-      "date": "2026-01-13T17:03:32Z"
+      "date": "2026-01-29T15:08:44Z"
     },
     {
       "slug": "qbittorrent",
@@ -1131,9 +1131,9 @@
     {
       "slug": "rclone",
       "repo": "rclone/rclone",
-      "version": "v1.72.1",
+      "version": "v1.73.0",
       "pinned": false,
-      "date": "2025-12-10T14:55:44Z"
+      "date": "2026-01-30T22:12:03Z"
     },
     {
       "slug": "rdtclient",
@@ -1212,6 +1212,13 @@
       "pinned": false,
       "date": "2026-01-12T16:26:38Z"
     },
+    {
+      "slug": "shelfmark",
+      "repo": "FlareSolverr/FlareSolverr",
+      "version": "v3.4.6",
+      "pinned": false,
+      "date": "2025-11-29T02:43:00Z"
+    },
     {
       "slug": "signoz",
       "repo": "SigNoz/signoz-otel-collector",
@@ -1236,9 +1243,9 @@
     {
       "slug": "snowshare",
       "repo": "TuroYT/snowshare",
-      "version": "v1.2.11",
+      "version": "v1.2.12",
       "pinned": false,
-      "date": "2026-01-22T13:26:11Z"
+      "date": "2026-01-30T13:35:56Z"
     },
     {
       "slug": "sonarr",
@@ -1271,9 +1278,9 @@
     {
       "slug": "stirling-pdf",
       "repo": "Stirling-Tools/Stirling-PDF",
-      "version": "v2.4.1",
+      "version": "v2.4.3",
       "pinned": false,
-      "date": "2026-01-29T00:04:47Z"
+      "date": "2026-01-31T22:19:14Z"
     },
     {
       "slug": "streamlink-webui",
@@ -1292,9 +1299,9 @@
     {
       "slug": "tandoor",
       "repo": "TandoorRecipes/recipes",
-      "version": "2.4.0",
+      "version": "2.4.1",
       "pinned": false,
-      "date": "2026-01-28T17:07:16Z"
+      "date": "2026-01-30T06:52:26Z"
     },
     {
       "slug": "tasmoadmin",
@@ -1348,9 +1355,9 @@
     {
       "slug": "tianji",
       "repo": "msgbyte/tianji",
-      "version": "v1.31.8",
+      "version": "v1.31.9",
       "pinned": false,
-      "date": "2026-01-19T16:13:13Z"
+      "date": "2026-01-31T18:22:40Z"
     },
     {
       "slug": "traccar",
@@ -1390,9 +1397,9 @@
     {
       "slug": "trip",
       "repo": "itskovacs/TRIP",
-      "version": "1.37.0",
+      "version": "1.38.0",
       "pinned": false,
-      "date": "2026-01-28T22:19:14Z"
+      "date": "2026-01-31T15:56:30Z"
     },
     {
       "slug": "tududi",
@@ -1404,9 +1411,9 @@
     {
       "slug": "tunarr",
       "repo": "chrisbenincasa/tunarr",
-      "version": "v1.1.8",
+      "version": "v1.1.11",
       "pinned": false,
-      "date": "2026-01-28T23:21:21Z"
+      "date": "2026-01-30T22:34:30Z"
     },
     {
       "slug": "uhf",
@@ -1457,6 +1464,13 @@
       "pinned": false,
       "date": "2026-01-19T13:29:43Z"
     },
+    {
+      "slug": "vikunja",
+      "repo": "go-vikunja/vikunja",
+      "version": "v1.0.0",
+      "pinned": false,
+      "date": "2026-01-28T11:12:59Z"
+    },
     {
       "slug": "wallabag",
       "repo": "wallabag/wallabag",
@@ -1537,9 +1551,9 @@
     {
       "slug": "yubal",
       "repo": "guillevc/yubal",
-      "version": "v0.3.0",
+      "version": "v0.3.1",
       "pinned": false,
-      "date": "2026-01-26T23:05:35Z"
+      "date": "2026-01-29T12:45:35Z"
     },
     {
       "slug": "zigbee2mqtt",
@@ -1558,9 +1572,9 @@
     {
       "slug": "zitadel",
       "repo": "zitadel/zitadel",
-      "version": "v4.10.0",
+      "version": "v4.10.1",
       "pinned": false,
-      "date": "2026-01-23T13:17:07Z"
+      "date": "2026-01-30T06:52:53Z"
     },
     {
       "slug": "zoraxy",

frontend/public/json/jellyfin.json

@@ -43,6 +43,10 @@
     {
       "text": "For NVIDIA graphics cards, you'll need to install the same drivers in the container that you did on the host. In the container, run the driver installation script and add the CLI arg --no-kernel-module",
       "type": "info"
+    },
+    {
+      "text": "Log rotation is configured in /etc/logrotate.d/jellyfin. To reduce verbosity, change MinimumLevel in /etc/jellyfin/logging.json to Warning or Error (disables fail2ban auth logging).",
+      "type": "info"
     }
   ]
 }

frontend/public/json/languagetool.json

@@ -0,0 +1,40 @@
+{
+  "name": "LanguageTool",
+  "slug": "languagetool",
+  "categories": [
+    0
+  ],
+  "date_created": "2026-01-30",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8081,
+  "documentation": "https://dev.languagetool.org/",
+  "config_path": "/opt/LanguageTool/server.properties",
+  "website": "https://languagetool.org/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/languagetool.webp",
+  "description": "LanguageTool is an Open Source proofreading software for English, Spanish, French, German, Portuguese, Polish, Dutch, and more than 20 other languages. It finds many errors that a simple spell checker cannot detect.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/languagetool.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 4096,
+        "hdd": 16,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "API is available at `http://<LXC_IP>:8081/v2`.",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/shelfmark.json

@@ -0,0 +1,40 @@
+{
+  "name": "Shelfmark",
+  "slug": "shelfmark",
+  "categories": [
+    13
+  ],
+  "date_created": "2026-01-31",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8084,
+  "documentation": "https://github.com/calibrain/shelfmark/tree/main/docs",
+  "website": "https://github.com/calibrain/shelfmark",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp",
+  "config_path": "/etc/shelfmark",
+  "description": "Shelfmark is a unified web interface for searching and aggregating books and audiobook downloads from multiple sources - all in one place.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/shelfmark.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "The configuration at `/etc/shelfmark/.env` is for bootstrapping the initial install. Customize the configuration via the Shelfmark UI.",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/valkey.json

@@ -25,6 +25,17 @@
         "os": "Debian",
         "version": "13"
       }
+    },
+    {
+      "type": "alpine",
+      "script": "ct/alpine-valkey.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 256,
+        "hdd": 1,
+        "os": "alpine",
+        "version": "3.23"
+      }
     }
   ],
   "default_credentials": {
@@ -35,6 +46,10 @@
     {
       "text": "Show Login Credentials, type `cat ~/valkey.creds` in the LXC console",
       "type": "info"
+    },
+    {
+      "text": "Alpines Valkey package is compiled without TLS support. For TLS, use the Debian-based valkey script instead.",
+      "type": "info"
     }
   ]
 }

frontend/src/components/command-menu.tsx

@@ -1,5 +1,5 @@
 import { useRouter } from "next/navigation";
-import { Sparkles } from "lucide-react";
+import { ArrowRightIcon, Sparkles } from "lucide-react";
 import Image from "next/image";
 import React from "react";
 
@@ -21,6 +21,7 @@ import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "./ui/t
 import { DialogTitle } from "./ui/dialog";
 import { Button } from "./ui/button";
 import { Badge } from "./ui/badge";
+import Link from "next/link";
 
 export function formattedBadge(type: string) {
   switch (type) {
@@ -211,7 +212,27 @@ function CommandMenu() {
         <DialogTitle className="sr-only">Search scripts</DialogTitle>
         <CommandInput placeholder="Search for a script..." />
         <CommandList>
-          <CommandEmpty>{isLoading ? "Loading..." : "No scripts found."}</CommandEmpty>
+          <CommandEmpty>
+            {isLoading ? (
+              "Searching..."
+            ) : (
+              <div className="flex flex-col items-center justify-center py-6 text-center">
+                <p className="text-sm text-muted-foreground">No scripts match your search.</p>
+                <div className="mt-4">
+                  <p className="text-xs text-muted-foreground mb-2">Want to add a new script?</p>
+                  <Button variant="outline" size="sm" asChild>
+                    <Link
+                      href={`https://github.com/community-scripts/${basePath}/tree/main/docs/contribution/GUIDE.md`}
+                      target="_blank"
+                      rel="noopener noreferrer"
+                    >
+                      Documentation <ArrowRightIcon className="ml-2 h-4 w-4" />
+                    </Link>
+                  </Button>
+                </div>
+              </div>
+            )}
+          </CommandEmpty>
           {Object.entries(uniqueScriptsByCategory).map(([categoryName, scripts]) => (
             <CommandGroup key={`category:${categoryName}`} heading={categoryName}>
               {scripts.map(script => (

install/2fauth-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y nginx
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.4" PHP_MODULE="common,ctype,fileinfo,mysql,tokenizer,dom,redis" PHP_FPM="YES" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" setup_php
 setup_composer
 setup_mariadb
 MARIADB_DB_NAME="2fauth_db" MARIADB_DB_USER="2fauth" setup_mariadb_db

install/alpine-valkey-install.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: pshankinclarke (lazarillo)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://valkey.io/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Valkey"
+$STD apk add valkey valkey-openrc valkey-cli
+sed -i 's/^bind .*/bind 0.0.0.0/' /etc/valkey/valkey.conf
+
+PASS="$(head -c 100 /dev/urandom | tr -dc 'a-zA-Z0-9' | head -c32)"
+echo "requirepass $PASS" >>/etc/valkey/valkey.conf
+echo "$PASS" >~/valkey.creds
+chmod 600 ~/valkey.creds
+
+MEMTOTAL_MB=$(free -m | grep ^Mem: | awk '{print $2}')
+MAXMEMORY_MB=$((MEMTOTAL_MB * 75 / 100))
+
+{
+  echo ""
+  echo "# Memory-optimized settings for small-scale deployments"
+  echo "maxmemory ${MAXMEMORY_MB}mb"
+  echo "maxmemory-policy allkeys-lru"
+  echo "maxmemory-samples 10"
+} >>/etc/valkey/valkey.conf
+msg_ok "Installed Valkey"
+
+# Note: Alpine's valkey package is compiled without TLS support
+# For TLS, use the Debian-based valkey script instead
+
+$STD rc-update add valkey default
+$STD rc-service valkey start
+
+motd_ssh
+customize
+cleanup_lxc

install/ampache-install.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (Canbiz)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/ampache/ampache
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing dependencies"
+$STD apt install -y \
+  flac \
+  vorbis-tools \
+  lame \
+  ffmpeg \
+  inotify-tools \
+  libavcodec-extra \
+  libmp3lame-dev \
+  libtheora-dev \
+  libvorbis-dev \
+  libvpx-dev
+msg_ok "Installed dependencies"
+
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
+setup_mariadb
+MARIADB_DB_USER="ampache" MARIADB_DB_NAME="ampache" setup_mariadb_db
+
+fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
+
+msg_info "Setting up Ampache"
+rm -rf /var/www/html
+ln -s /opt/ampache/public /var/www/html
+mv /opt/ampache/public/rest/.htaccess.dist /opt/ampache/public/rest/.htaccess
+mv /opt/ampache/public/play/.htaccess.dist /opt/ampache/public/play/.htaccess
+cp /opt/ampache/config/ampache.cfg.php.dist /opt/ampache/config/ampache.cfg.php
+chmod 664 /opt/ampache/public/rest/.htaccess /opt/ampache/public/play/.htaccess
+msg_ok "Set up Ampache"
+
+msg_info "Configuring Database Connection"
+sed -i -e 's|^database_hostname = .*|database_hostname = "localhost"|' \
+  -e 's|^database_name = .*|database_name = "ampache"|' \
+  -e 's|^database_username = .*|database_username = "ampache"|' \
+  -e "s|^database_password = .*|database_password = \"${MARIADB_DB_PASS}\"|" /opt/ampache/config/ampache.cfg.php
+chown -R www-data:www-data /opt/ampache
+msg_ok "Configured Database Connection"
+
+msg_info "Importing Database Schema"
+mariadb -u ampache -p"${MARIADB_DB_PASS}" ampache </opt/ampache/resources/sql/ampache.sql
+msg_ok "Imported Database Schema"
+
+msg_info "Configuring PHP"
+sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
+  -e 's/post_max_size = .*/post_max_size = 100M/' \
+  -e 's/max_execution_time = .*/max_execution_time = 600/' \
+  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.4/apache2/php.ini
+$STD a2enmod rewrite
+$STD systemctl restart apache2
+msg_ok "Configured PHP"
+
+motd_ssh
+customize
+cleanup_lxc

install/baikal-install.sh

@@ -18,7 +18,7 @@ $STD apt install -y git
 msg_ok "Installed Dependencies"
 
 PG_VERSION="16" setup_postgresql
-PHP_APACHE="YES" PHP_MODULE="pgsql,curl" PHP_VERSION="8.3" setup_php
+PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
 setup_composer
 fetch_and_deploy_gh_release "baikal" "sabre-io/Baikal" "tarball"
 PG_DB_NAME="baikal_db" PG_DB_USER="baikal_user" PG_DB_PASS="$(openssl rand -base64 12)" setup_postgresql_db

install/bar-assistant-install.sh

@@ -23,7 +23,7 @@ $STD apt install -y \
   libvips
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.4" PHP_FPM=YES PHP_MODULE="ffi,redis,pdo-sqlite" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="pdo-sqlite" setup_php
 setup_composer
 NODE_VERSION="22" setup_nodejs
 setup_meilisearch

install/bookstack-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y make
 msg_ok "Installed Dependencies"
 
-PHP_MODULE="ldap,tidy,bz2,mysqli" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
+PHP_VERSION="8.3" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="ldap,tidy,mysqli" setup_php
 setup_composer
 setup_mariadb
 MARIADB_DB_NAME="bookstack_db" MARIADB_DB_USER="bookstack_user" setup_mariadb_db

install/byparr-install.sh

@@ -14,17 +14,52 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt -y install \
-    xauth \
-    xvfb \
-    scrot \
-    chromium \
-    chromium-driver \
-    ca-certificates
+$STD apt -y install --no-install-recommends \
+  ffmpeg \
+  libatk1.0-0 \
+  libcairo-gobject2 \
+  libcairo2 \
+  libdbus-glib-1-2 \
+  libfontconfig1 \
+  libfreetype6 \
+  libgdk-pixbuf-xlib-2.0-0 \
+  libglib2.0-0 \
+  libgtk-3-0 \
+  libpango-1.0-0 \
+  libpangocairo-1.0-0 \
+  libpangoft2-1.0-0 \
+  libx11-6 \
+  libx11-xcb1 \
+  libxcb-shm0 \
+  libxcb1 \
+  libxcomposite1 \
+  libxcursor1 \
+  libxdamage1 \
+  libxext6 \
+  libxfixes3 \
+  libxi6 \
+  libxrender1 \
+  libxt6 \
+  libxtst6 \
+  xvfb \
+  fonts-noto-color-emoji \
+  fonts-unifont \
+  xfonts-cyrillic \
+  xfonts-scalable \
+  fonts-liberation \
+  fonts-ipafont-gothic \
+  fonts-wqy-zenhei \
+  fonts-tlwg-loma-otf
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "Byparr" "ThePhaseless/Byparr" "tarball" "latest"
 setup_uv
+fetch_and_deploy_gh_release "Byparr" "ThePhaseless/Byparr" "tarball" "latest"
+
+msg_info "Configuring Byparr"
+cd /opt/Byparr
+$STD uv sync --link-mode copy
+$STD uv run camoufox fetch
+msg_ok "Configured Byparr"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/byparr.service

install/cloudflared-install.sh

@@ -23,41 +23,6 @@ setup_deb822_repo \
 $STD apt install -y cloudflared
 msg_ok "Installed Cloudflared"
 
-read -r -p "${TAB3}Would you like to configure cloudflared as a DNS-over-HTTPS (DoH) proxy? <y/N> " prompt
-if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-  msg_info "Creating Service"
-  cat <<EOF >/usr/local/etc/cloudflared/config.yml
-proxy-dns: true
-proxy-dns-address: 0.0.0.0
-proxy-dns-port: 53
-proxy-dns-max-upstream-conns: 5
-proxy-dns-upstream:
-  - https://1.1.1.1/dns-query
-  - https://1.0.0.1/dns-query
-  #- https://8.8.8.8/dns-query
-  #- https://8.8.4.4/dns-query
-  #- https://9.9.9.9/dns-query
-  #- https://149.112.112.112/dns-query
-EOF
-  cat <<EOF >/etc/systemd/system/cloudflared.service
-[Unit]
-Description=cloudflared DNS-over-HTTPS (DoH) proxy
-After=syslog.target network-online.target
-
-[Service]
-Type=simple
-ExecStart=/usr/local/bin/cloudflared --config /usr/local/etc/cloudflared/config.yml
-Restart=on-failure
-RestartSec=10
-KillMode=process
-
-[Install]
-WantedBy=multi-user.target
-EOF
-  systemctl enable -q --now cloudflared
-  msg_ok "Created Service"
-fi
-
 motd_ssh
 customize
 cleanup_lxc

install/domain-monitor-install.sh

@@ -26,7 +26,7 @@ $STD apt install -y --no-install-recommends \
   pkg-config
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="mysql" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" setup_php
 setup_composer
 setup_mariadb
 MARIADB_DB_NAME="domain_monitor" MARIADB_DB_USER="domainmonitor" setup_mariadb_db

install/firefly-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="mysql" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 setup_composer
 setup_mariadb
 MARIADB_DB_NAME="firefly" MARIADB_DB_USER="firefly" setup_mariadb_db

install/freshrss-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_MODULE="curl,common,xml,mbstring,intl,zip,pgsql,gmp" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="freshrss" PG_DB_USER="freshrss_usr" setup_postgresql_db
 

install/grocy-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y apt-transport-https
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.3" PHP_MODULE="sqlite3,bz2" PHP_APACHE="yes" setup_php
+PHP_VERSION="8.3" PHP_APACHE="YES" setup_php
 fetch_and_deploy_gh_release "grocy" "grocy/grocy" "prebuild" "latest" "/var/www/html" "grocy*.zip"
 
 msg_info "Configuring grocy"

install/heimdall-dashboard-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y apt-transport-https
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.4" PHP_MODULE="bz2,sqlite3" PHP_FPM="YES" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" setup_php
 setup_composer
 fetch_and_deploy_gh_release "Heimdall" "linuxserver/Heimdall" "tarball"
 

install/hortusfox-install.sh

@@ -15,7 +15,7 @@ update_os
 
 setup_mariadb
 MARIADB_DB_NAME="hortusfox" MARIADB_DB_USER="hortusfox" setup_mariadb_db
-PHP_MODULE="exif,mysql" PHP_APACHE="YES" PHP_FPM="NO" PHP_VERSION="8.3" setup_php
+PHP_VERSION="8.3" PHP_APACHE="YES" setup_php
 setup_composer
 fetch_and_deploy_gh_release "hortusfox" "danielbrendel/hortusfox-web" "tarball"
 

install/immich-install.sh

@@ -13,6 +13,42 @@ setting_up_container
 network_check
 update_os
 
+echo ""
+echo ""
+echo -e "🤖 ${BL}Immich Machine Learning Options${CL}"
+echo "─────────────────────────────────────────"
+echo "Please choose your machine-learning type:"
+echo ""
+echo " 1) CPU only (default)"
+echo " 2) Intel OpenVINO (requires GPU passthrough)"
+echo ""
+
+read -r -p "${TAB3}Select machine-learning type [1]: " ML_TYPE
+ML_TYPE="${ML_TYPE:-1}"
+if [[ "$ML_TYPE" == "2" ]]; then
+  msg_info "Installing OpenVINO dependencies"
+  touch ~/.openvino
+  $STD apt install -y --no-install-recommends patchelf
+  tmp_dir=$(mktemp -d)
+  $STD pushd "$tmp_dir"
+  curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
+  readarray -t INTEL_URLS < <(
+    sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
+    sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
+  )
+  for url in "${INTEL_URLS[@]}"; do
+    curl -fsSLO "$url"
+  done
+  $STD apt install -y ./libigdgmm12*.deb
+  rm ./libigdgmm12*.deb
+  $STD apt install -y ./*.deb
+  $STD apt-mark hold libigdgmm12
+  $STD popd
+  rm -rf "$tmp_dir"
+  dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
+  msg_ok "Installed OpenVINO dependencies"
+fi
+
 setup_uv
 
 msg_info "Installing dependencies"
@@ -86,36 +122,11 @@ msg_ok "Dependencies Installed"
 
 msg_info "Installing Mise"
 curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
-echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" | tee /etc/apt/sources.list.d/mise.list
+echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" >/etc/apt/sources.list.d/mise.list
 $STD apt update
 $STD apt install -y mise
 msg_ok "Installed Mise"
 
-read -r -p "${TAB3}Install OpenVINO dependencies for Intel HW-accelerated machine-learning? y/N " prompt
-if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-  msg_info "Installing OpenVINO dependencies"
-  touch ~/.openvino
-  $STD apt install -y --no-install-recommends patchelf
-  tmp_dir=$(mktemp -d)
-  $STD pushd "$tmp_dir"
-  curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
-  readarray -t INTEL_URLS < <(
-    sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
-    sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
-  )
-  for url in "${INTEL_URLS[@]}"; do
-    curl -fsSLO "$url"
-  done
-  $STD apt install -y ./libigdgmm12*.deb
-  rm ./libigdgmm12*.deb
-  $STD apt install -y ./*.deb
-  $STD apt-mark hold libigdgmm12
-  $STD popd
-  rm -rf "$tmp_dir"
-  dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
-  msg_ok "Installed OpenVINO dependencies"
-fi
-
 msg_info "Configuring Debian Testing Repo"
 sed -i 's/ trixie-updates/ trixie-updates testing/g' /etc/apt/sources.list.d/debian.sources
 cat <<EOF >/etc/apt/preferences.d/preferences
@@ -137,28 +148,12 @@ PNPM_VERSION="$(curl -fsSL "https://raw.githubusercontent.com/immich-app/immich/
 NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
 PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 
-msg_info "Setting up Postgresql Database"
 VCHORD_RELEASE="0.5.3"
-curl -fsSL "https://github.com/tensorchord/VectorChord/releases/download/${VCHORD_RELEASE}/postgresql-16-vchord_${VCHORD_RELEASE}-1_amd64.deb" -o vchord.deb
-$STD apt install -y ./vchord.deb
-rm vchord.deb
-echo "$VCHORD_RELEASE" >~/.vchord_version
-DB_NAME="immich"
-DB_USER="immich"
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c18)
+fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-16-vchord_*_amd64.deb"
+
 sed -i -e "/^#shared_preload/s/^#//;/^shared_preload/s/''/'vchord.so'/" /etc/postgresql/16/main/postgresql.conf
 systemctl restart postgresql.service
-$STD sudo -u postgres psql -c "CREATE USER $DB_USER WITH ENCRYPTED PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME to $DB_USER;"
-$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
-{
-  echo "${APPLICATION} DB Credentials"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-  echo "Database Name: $DB_NAME"
-} >>~/"$APPLICATION".creds
-msg_ok "Set up Postgresql Database"
+PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_GRANT_SUPERUSER="true" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
 
 msg_info "Compiling Custom Photo-processing Library (extreme patience)"
 LD_LIBRARY_PATH=/usr/local/lib
@@ -228,7 +223,7 @@ $STD cmake --preset=release-noplugins \
   -DWITH_X265=OFF \
   -DWITH_EXAMPLES=OFF \
   ..
-$STD make install -j "$(nproc)"
+$STD make install -j"$(nproc)"
 ldconfig /usr/local/lib
 $STD make clean
 cd "$STAGING_DIR"
@@ -293,12 +288,11 @@ APP_DIR="${INSTALL_DIR}/app"
 PLUGIN_DIR="${APP_DIR}/corePlugin"
 ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
-mkdir -p "$INSTALL_DIR"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.4.1" "$SRC_DIR"
+fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.5.2" "$SRC_DIR"
 
-msg_info "Installing ${APPLICATION} (patience)"
+msg_info "Installing Immich (patience)"
 
 cd "$SRC_DIR"/server
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
@@ -312,7 +306,7 @@ unset SHARP_IGNORE_GLOBAL_LIBVIPS
 export SHARP_FORCE_GLOBAL_LIBVIPS=true
 $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
 cp "$APP_DIR"/package.json "$APP_DIR"/bin
-sed -i 's|^start|./start|' "$APP_DIR"/bin/immich-admin
+sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin
 
 # openapi & web build
 cd "$SRC_DIR"
@@ -347,19 +341,18 @@ mkdir -p "$ML_DIR" && chown -R immich:immich "$INSTALL_DIR"
 export VIRTUAL_ENV="${ML_DIR}/ml-venv"
 if [[ -f ~/.openvino ]]; then
   msg_info "Installing HW-accelerated machine-learning"
-  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --active -n -p python3.11 --managed-python
-  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.11/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-311-x86_64-linux-gnu.so"
+  $STD uv add --no-sync --optional openvino onnxruntime-openvino==1.20.0 --active -n -p python3.12 --managed-python
+  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.12 --managed-python
+  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.12/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-312-x86_64-linux-gnu.so"
   msg_ok "Installed HW-accelerated machine-learning"
 else
   msg_info "Installing machine-learning"
-  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra cpu --active -n -p python3.11 --managed-python
+  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p python3.11 --managed-python
   msg_ok "Installed machine-learning"
 fi
 cd "$SRC_DIR"
 cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
-if [[ -f ~/.openvino ]]; then
-  sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
-fi
+[[ -f ~/.openvino ]] && sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
 ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
 
 cd "$APP_DIR"
@@ -384,7 +377,7 @@ msg_ok "Installed GeoNames data"
 
 mkdir -p /var/log/immich
 touch /var/log/immich/{web.log,ml.log}
-msg_ok "Installed ${APPLICATION}"
+msg_ok "Installed Immich"
 
 msg_info "Modifying user, creating env file, scripts & services"
 usermod -aG video,render immich
@@ -393,11 +386,12 @@ cat <<EOF >"${INSTALL_DIR}"/.env
 TZ=$(cat /etc/timezone)
 IMMICH_VERSION=release
 NODE_ENV=production
+IMMICH_ALLOW_SETUP=true
 
 DB_HOSTNAME=127.0.0.1
-DB_USERNAME=${DB_USER}
-DB_PASSWORD=${DB_PASS}
-DB_DATABASE_NAME=${DB_NAME}
+DB_USERNAME=${PG_DB_USER}
+DB_PASSWORD=${PG_DB_PASS}
+DB_DATABASE_NAME=${PG_DB_NAME}
 DB_VECTOR_EXTENSION=vectorchord
 
 REDIS_HOSTNAME=127.0.0.1
@@ -432,9 +426,11 @@ set +a
 /usr/bin/node ${APP_DIR}/dist/main.js "\$@"
 EOF
 chmod +x "$ML_DIR"/ml_start.sh "$APP_DIR"/bin/start.sh
-cat <<EOF >/etc/systemd/system/"${APPLICATION}"-web.service
+ln -sf "$APP_DIR"/cli/bin/immich /usr/bin/immich
+ln -sf "$APP_DIR"/bin/immich-admin /usr/bin/immich-admin
+cat <<EOF >/etc/systemd/system/immich-web.service
 [Unit]
-Description=${APPLICATION} Web Service
+Description=Immich Web Service
 After=network.target
 Requires=redis-server.service
 Requires=postgresql.service
@@ -456,9 +452,9 @@ StandardError=append:/var/log/immich/web.log
 [Install]
 WantedBy=multi-user.target
 EOF
-cat <<EOF >/etc/systemd/system/"${APPLICATION}"-ml.service
+cat <<EOF >/etc/systemd/system/immich-ml.service
 [Unit]
-Description=${APPLICATION} Machine-Learning
+Description=Immich Machine-Learning
 After=network.target
 
 [Service]
@@ -478,9 +474,29 @@ StandardError=append:/var/log/immich/ml.log
 WantedBy=multi-user.target
 EOF
 chown -R immich:immich "$INSTALL_DIR" /var/log/immich
-systemctl enable -q --now "$APPLICATION"-ml.service "$APPLICATION"-web.service
+systemctl enable -q --now immich-ml.service immich-web.service
 msg_ok "Modified user, created env file, scripts and services"
 
+msg_info "Checking health of Immich-web & Immich-ml services"
+sleep 5
+web=0
+until curl -fs localhost:2283/api/server/ping | grep -q "pong" || [[ $web -gt 1 ]]; do
+  msg_warn "Problem detected with Immich-web service, restarting..."
+  systemctl restart immich-web && sleep 5
+  [[ $(curl -fs localhost:2283/api/server/ping | grep "pong") ]] && break
+  ((web++))
+done
+[[ $web -lt 1 ]] && msg_ok "Immich-web service is reachable!" || msg_error "Please check '/var/log/immich/web.log' for more details"
+
+ml=0
+until [[ $(curl -fs localhost:3003/ping) == "pong" ]] || [[ $ml -gt 1 ]]; do
+  msg_warn "Problem detected with Immich-ml service, restarting..."
+  systemctl restart immich-ml && sleep 5
+  [[ $(curl -fs localhost:3003/ping) == "pong" ]] && break
+  ((ml++))
+done
+[[ $ml -lt 1 ]] && msg_ok "Immich-ml service is reachable!" || msg_error "Please check '/var/log/immich/ml.log' for more details"
+
 motd_ssh
 customize
 cleanup_lxc

install/investbrain-install.sh

@@ -28,7 +28,7 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 export PHP_VERSION="8.4"
-PHP_FPM=YES PHP_MODULE="gd,zip,intl,pdo,pgsql,pdo-pgsql,bcmath,opcache,mbstring,redis" setup_php
+PHP_FPM="YES" PHP_MODULE="pdo-pgsql" setup_php
 setup_composer
 NODE_VERSION="22" setup_nodejs
 PG_VERSION="17" setup_postgresql

install/invoiceninja-install.sh

@@ -35,7 +35,7 @@ msg_ok "Installed Dependencies"
 
 setup_mariadb
 MARIADB_DB_NAME="invoiceninja" MARIADB_DB_USER="invoiceninja" setup_mariadb_db
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="bcmath,curl,gd,gmp,imagick,intl,mbstring,mysql,soap,xml,zip" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="soap" setup_php
 
 fetch_and_deploy_gh_release "invoiceninja" "invoiceninja/invoiceninja" "prebuild" "latest" "/opt/invoiceninja" "invoiceninja.tar.gz"
 

install/jellyfin-install.sh

@@ -39,8 +39,19 @@ EOF
 
 $STD apt update
 $STD apt install -y jellyfin
-sed -i 's/"MinimumLevel": "Information"/"MinimumLevel": "Error"/g' /etc/jellyfin/logging.json
-
+# Configure log rotation to prevent disk fill (keeps fail2ban compatibility) (PR: #1690 / Issue: #11224)
+cat <<EOF >/etc/logrotate.d/jellyfin
+/var/log/jellyfin/*.log {
+    daily
+    rotate 3
+    maxsize 100M
+    missingok
+    notifempty
+    compress
+    delaycompress
+    copytruncate
+}
+EOF
 chown -R jellyfin:adm /etc/jellyfin
 sleep 10
 systemctl restart jellyfin

install/kimai-install.sh

@@ -22,7 +22,7 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 setup_mariadb
-PHP_VERSION="8.4" PHP_MODULE="mysql" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 setup_composer
 
 msg_info "Setting up database"

install/koel-install.sh

@@ -23,7 +23,7 @@ msg_ok "Installed Dependencies"
 
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="koel" PG_DB_USER="koel" setup_postgresql_db
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="bz2,exif,imagick,pgsql,sqlite3" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" setup_php
 NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
 setup_composer
 

install/koillection-install.sh

@@ -13,24 +13,11 @@ setting_up_container
 network_check
 update_os
 
-NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="yarn" setup_nodejs
 PG_VERSION="16" setup_postgresql
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="apcu,ctype,dom,fileinfo,iconv,pgsql" setup_php
+PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
 setup_composer
-
-msg_info "Setting up PostgreSQL"
-DB_NAME=koillection
-DB_USER=koillection
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMPLATE template0;"
-{
-  echo "Koillection Credentials"
-  echo "Koillection Database User: $DB_USER"
-  echo "Koillection Database Password: $DB_PASS"
-  echo "Koillection Database Name: $DB_NAME"
-} >>~/koillection.creds
-msg_ok "Set up PostgreSQL"
+PG_DB_NAME="koillection" PG_DB_USER="koillection" setup_postgresql_db
 
 fetch_and_deploy_gh_release "koillection" "benjaminjonard/koillection" "tarball"
 
@@ -41,17 +28,20 @@ APP_SECRET=$(openssl rand -base64 32)
 sed -i -e "s|^APP_ENV=.*|APP_ENV=prod|" \
   -e "s|^APP_DEBUG=.*|APP_DEBUG=0|" \
   -e "s|^APP_SECRET=.*|APP_SECRET=${APP_SECRET}|" \
-  -e "s|^DB_NAME=.*|DB_NAME=${DB_NAME}|" \
-  -e "s|^DB_USER=.*|DB_USER=${DB_USER}|" \
-  -e "s|^DB_PASSWORD=.*|DB_PASSWORD=${DB_PASS}|" \
+  -e "s|^DB_NAME=.*|DB_NAME=${PG_DB_NAME}|" \
+  -e "s|^DB_USER=.*|DB_USER=${PG_DB_USER}|" \
+  -e "s|^DB_PASSWORD=.*|DB_PASSWORD=${PG_DB_PASS}|" \
   /opt/koillection/.env.local
+echo 'APP_RUNTIME="Symfony\Component\Runtime\SymfonyRuntime"' >> /opt/koillection/.env.local
 export COMPOSER_ALLOW_SUPERUSER=1
+export APP_RUNTIME='Symfony\Component\Runtime\SymfonyRuntime'
 $STD composer install --no-dev -o --no-interaction --classmap-authoritative
 $STD php bin/console doctrine:migrations:migrate --no-interaction
 $STD php bin/console app:translations:dump
 cd assets/
 $STD yarn install
 $STD yarn build
+mkdir -p /opt/koillection/public/uploads
 chown -R www-data:www-data /opt/koillection/public/uploads
 msg_ok "Configured Koillection"
 
@@ -60,6 +50,7 @@ cat <<EOF >/etc/apache2/sites-available/koillection.conf
 <VirtualHost *:80>
     ServerName koillection
     DocumentRoot /opt/koillection/public
+    SetEnv APP_RUNTIME "Symfony\\Component\\Runtime\\SymfonyRuntime"
     <Directory /opt/koillection/public>
         Options Indexes FollowSymLinks
         AllowOverride All

install/languagetool-install.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://languagetool.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing dependencies"
+$STD apt install -y fasttext
+msg_ok "Installed dependencies"
+
+JAVA_VERSION="21" setup_java
+
+msg_info "Setting up LanguageTool"
+RELEASE=$(curl -fsSL https://languagetool.org/download/ | grep -oP 'LanguageTool-\K[0-9]+\.[0-9]+(\.[0-9]+)?(?=\.zip)' | sort -V | tail -n1)
+download_file "https://languagetool.org/download/LanguageTool-stable.zip" /tmp/LanguageTool-stable.zip
+unzip -q /tmp/LanguageTool-stable.zip -d /opt
+mv /opt/LanguageTool-*/ /opt/LanguageTool/
+download_file "https://dl.fbaipublicfiles.com/fasttext/supervised-models/lid.176.bin" /opt/lid.176.bin
+rm -f /tmp/LanguageTool-stable.zip
+msg_ok "Setup LanguageTool"
+
+ngram_dir=""
+lang_code=""
+max_attempts=3
+attempt=0
+
+while [[ $attempt -lt $max_attempts ]]; do
+  read -r -p "${TAB3}Enter language code (en, de, es, fr, nl) to download ngrams or press ENTER to skip: " lang_code
+
+  if [[ -z "$lang_code" ]]; then
+    break
+  fi
+
+  if [[ "$lang_code" =~ [[:space:]] ]]; then
+    ((attempt++))
+    remaining=$((max_attempts - attempt))
+    if [[ $remaining -gt 0 ]]; then
+      msg_error "Please enter only ONE language code. You have $remaining attempt(s) remaining."
+    else
+      msg_error "Maximum attempts reached. Continuing without ngrams."
+      lang_code=""
+    fi
+    continue
+  fi
+  break
+done
+
+if [[ -n "$lang_code" ]]; then
+  if [[ "$lang_code" =~ ^(en|de|es|fr|nl)$ ]]; then
+    msg_info "Searching for $lang_code ngrams..."
+    filename=$(curl -fsSL https://languagetool.org/download/ngram-data/ | grep -oP "ngrams-${lang_code}-[0-9]+\.zip" | sort -uV | tail -n1)
+
+    if [[ -n "$filename" ]]; then
+      msg_info "Downloading $filename"
+      download_file "https://languagetool.org/download/ngram-data/${filename}" "/tmp/${filename}"
+
+      mkdir -p /opt/ngrams
+      msg_info "Extracting $lang_code ngrams to /opt/ngrams"
+      unzip -q "/tmp/${filename}" -d /opt/ngrams
+      rm "/tmp/${filename}"
+
+      ngram_dir="/opt/ngrams"
+      msg_ok "Installed $lang_code ngrams"
+    else
+      msg_info "No ngram file found for ${lang_code}"
+    fi
+  else
+    msg_error "Invalid language code: $lang_code"
+  fi
+fi
+
+cat <<EOF >/opt/LanguageTool/server.properties
+fasttextModel=/opt/lid.176.bin
+fasttextBinary=/usr/bin/fasttext
+EOF
+if [[ -n "$ngram_dir" ]]; then
+  echo "languageModel=/opt/ngrams" >> /opt/LanguageTool/server.properties
+fi
+echo "${RELEASE}" >~/.languagetool
+msg_ok "Setup LanguageTool"
+
+msg_info "Creating Service"
+cat <<'EOF' >/etc/systemd/system/language-tool.service
+[Unit]
+Description=LanguageTool Service
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/LanguageTool
+ExecStart=java -cp languagetool-server.jar org.languagetool.server.HTTPServer --config server.properties --public --allow-origin "*"
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now language-tool
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/leantime-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_MODULE="mysql" PHP_APACHE="YES" PHP_FPM="YES" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" setup_php
 setup_mariadb
 MARIADB_DB_NAME="leantime" MARIADB_DB_USER="leantime" setup_mariadb_db
 fetch_and_deploy_gh_release "leantime" "Leantime/leantime" "prebuild" "latest" "/opt/leantime" Leantime*.tar.gz

install/librenms-install.sh

@@ -38,7 +38,7 @@ $STD apt install -y \
   python3-pip
 msg_ok "Installed Python Dependencies"
 
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="gmp,mysql,snmp" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="snmp" setup_php
 setup_mariadb
 setup_composer
 PYTHON_VERSION="3.13" setup_uv

install/limesurvey-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.3" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="imap,ldap,mysql" setup_php
+PHP_VERSION="8.3" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="imap,ldap" setup_php
 setup_mariadb
 
 msg_info "Configuring MariaDB Database"

install/linkstack-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.3" PHP_MODULE="sqlite3" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.3" PHP_APACHE="YES" setup_php
 fetch_and_deploy_gh_release "linkstack" "linkstackorg/linkstack" "prebuild" "latest" "/var/www/html/" "linkstack.zip"
 
 msg_info "Configuring LinkStack"

install/monica-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.2" PHP_APACHE="YES" PHP_MODULE="dom,gmp,iconv,mysqli,pdo-mysql,redis,tokenizer" setup_php
+PHP_VERSION="8.2" PHP_APACHE="YES" PHP_MODULE="mysqli,pdo-mysql" setup_php
 setup_composer
 setup_mariadb
 MARIADB_DB_NAME="monica" MARIADB_DB_USER="monica" setup_mariadb_db

install/part-db-install.sh

@@ -16,7 +16,7 @@ update_os
 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="partdb" PG_DB_USER="partdb" setup_postgresql_db
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="xsl,pgsql" PHP_POST_MAX_SIZE="100M" PHP_UPLOAD_MAX_FILESIZE="100M" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="xsl" PHP_POST_MAX_SIZE="100M" PHP_UPLOAD_MAX_FILESIZE="100M" setup_php
 setup_composer
 
 msg_info "Installing Part-DB (Patience)"

install/paymenter-install.sh

@@ -21,7 +21,7 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 setup_mariadb
-PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="common,mysql,redis" setup_php
+PHP_VERSION="8.3" PHP_FPM="YES" setup_php
 setup_composer
 fetch_and_deploy_gh_release "paymenter" "paymenter/paymenter" "prebuild" "latest" "/opt/paymenter" "paymenter.tar.gz"
 chmod -R 755 /opt/paymenter/storage/* /opt/paymenter/bootstrap/cache/

install/pelican-panel-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_MODULE="mysql,sqlite3" PHP_APACHE="YES" PHP_FPM="YES" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" setup_php
 setup_composer
 setup_mariadb
 MARIADB_DB_NAME="panel" MARIADB_DB_USER="pelican" setup_mariadb_db

install/projectsend-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="pdo,mysql,gettext,fileinfo" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 setup_mariadb
 MARIADB_DB_NAME="projectsend" MARIADB_DB_USER="projectsend" setup_mariadb_db
 fetch_and_deploy_gh_release "projectsend" "projectsend/projectsend" "prebuild" "latest" "/opt/projectsend" "projectsend-r*.zip"

install/shelfmark-install.sh

@@ -0,0 +1,216 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/calibrain/shelfmark
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  unrar-free
+ln -sf /usr/bin/unrar-free /usr/bin/unrar
+msg_ok "Installed Dependencies"
+
+mkdir -p /etc/shelfmark
+cat <<EOF >/etc/shelfmark/.env
+DOCKERMODE=false
+CONFIG_DIR=/etc/shelfmark
+TMP_DIR=/tmp/shelfmark
+ENABLE_LOGGING=true
+FLASK_HOST=0.0.0.0
+FLASK_PORT=8084
+# SESSION_COOKIES_SECURE=true
+# CWA_DB_PATH=
+USE_CF_BYPASS=true
+USING_EXTERNAL_BYPASSER=false
+# EXT_BYPASSER_URL=
+# EXT_BYPASSER_PATH=/v1
+EOF
+
+echo ""
+echo ""
+echo -e "${BL}Shelfmark Deployment Type${CL}"
+echo "─────────────────────────────────────────"
+echo "Please choose your deployment type:"
+echo ""
+echo " 1) Use Shelfmark's internal captcha bypasser (default)"
+echo " 2) Install FlareSolverr in this LXC"
+echo " 3) Use an existing Flaresolverr/Byparr LXC"
+echo " 4) Disable captcha bypassing altogether (not recommended)"
+echo ""
+
+read -r -p "${TAB3}Select deployment type [1]: " DEPLOYMENT_TYPE
+DEPLOYMENT_TYPE="${DEPLOYMENT_TYPE:-1}"
+
+case "$DEPLOYMENT_TYPE" in
+1)
+  msg_ok "Using Shelfmark's internal captcha bypasser"
+  ;;
+2)
+  msg_ok "Proceeding with FlareSolverr installation"
+  ;;
+3)
+  echo ""
+  echo -e "${BL}Use an existing FlareSolverr/Byparr LXC${CL}"
+  echo "─────────────────────────────────────────"
+  echo "Enter the URL/IP address with port of your Flaresolverr/Byparr instance"
+  echo "Example: http://flaresoverr.homelab.lan:8191 or"
+  echo "http://192.168.10.99:8191"
+  echo ""
+  read -r -p "FlareSolverr/Byparr URL: " BYPASSER_URL
+
+  if [[ -z "$BYPASSER_URL" ]]; then
+    msg_warn "No Flaresolverr/Byparr URL provided. Falling back to Shelfmark's internal bypasser."
+  else
+    BYPASSER_URL="${BYPASSER_URL%/}"
+    msg_ok "FlareSolverr/Byparr URL: ${BYPASSER_URL}"
+  fi
+  ;;
+4)
+  msg_warn "Disabling captcha bypass. This may cause the majority of searches and downloads to fail."
+  ;;
+*)
+  msg_warn "Invalid selection. Reverting to default (internal bypasser)!"
+  ;;
+esac
+
+if [[ "$DEPLOYMENT_TYPE" == "2" ]]; then
+  fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
+  msg_info "Installing FlareSolverr (patience)"
+  $STD apt install -y xvfb
+  setup_deb822_repo \
+    "google-chrome" \
+    "https://dl.google.com/linux/linux_signing_key.pub" \
+    "https://dl.google.com/linux/chrome/deb/" \
+    "stable"
+  $STD apt install -y google-chrome-stable
+  rm /etc/apt/sources.list.d/google-chrome.list
+  sed -i -e '/BYPASSER=/s/false/true/' \
+    -e 's/^# EXT_/EXT_/' \
+    -e "s|_URL=.*|_URL=http://localhost:8191|" /etc/shelfmark/.env
+  msg_ok "Installed FlareSolverr"
+elif [[ "$DEPLOYMENT_TYPE" == "3" ]]; then
+  sed -i -e '/BYPASSER=/s/false/true/' \
+    -e 's/^# EXT_/EXT_/' \
+    -e "s|_URL=.*|_URL=${BYPASSER_URL}|" /etc/shelfmark/.env
+elif [[ "$DEPLOYMENT_TYPE" == "4" ]]; then
+  sed -i '/_BYPASS=/s/true/false/' /etc/shelfmark/.env
+else
+  DEPLOYMENT_TYPE="1"
+  CHROME_VERSION=$(curl -fsSL https://raw.githubusercontent.com/calibrain/shelfmark/refs/heads/main/Dockerfile | sed -n '/chromium=/s/[^=]*=//p' | awk '{print $1}')
+  msg_info "Installing internal bypasser dependencies"
+  $STD apt install -y --no-install-recommends \
+    xvfb \
+    ffmpeg \
+    chromium-common=${CHROME_VERSION} \
+    chromium=${CHROME_VERSION} \
+    chromium-driver=${CHROME_VERSION} \
+    python3-tk
+  msg_ok "Installed internal bypasser dependencies"
+fi
+
+NODE_VERSION="22" setup_nodejs
+PYTHON_VERSION="3.12" setup_uv
+
+fetch_and_deploy_gh_release "shelfmark" "calibrain/shelfmark" "tarball" "latest" "/opt/shelfmark"
+RELEASE_VERSION=$(cat "$HOME/.shelfmark")
+
+msg_info "Building Shelfmark frontend"
+cd /opt/shelfmark/src/frontend
+echo "RELEASE_VERSION=${RELEASE_VERSION}" >>/etc/shelfmark/.env
+$STD npm ci
+$STD npm run build
+mv /opt/shelfmark/src/frontend/dist /opt/shelfmark/frontend-dist
+msg_ok "Built Shelfmark frontend"
+
+msg_info "Configuring Shelfmark"
+cd /opt/shelfmark
+$STD uv venv ./venv
+$STD source ./venv/bin/activate
+$STD uv pip install -r ./requirements-base.txt
+[[ "$DEPLOYMENT_TYPE" == "1" ]] && $STD uv pip install -r ./requirements-shelfmark.txt
+mkdir -p {/var/log/shelfmark,/tmp/shelfmark}
+msg_ok "Configured Shelfmark"
+
+msg_info "Creating Services and start script"
+cat <<EOF >/etc/systemd/system/shelfmark.service
+[Unit]
+Description=Shelfmark server
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/shelfmark
+EnvironmentFile=/etc/shelfmark/.env
+ExecStart=/usr/bin/bash /opt/shelfmark/start.sh
+Restart=always
+RestartSec=10
+KillMode=mixed
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+if [[ "$DEPLOYMENT_TYPE" == "1" ]]; then
+  cat <<EOF >/etc/systemd/system/chromium.service
+[Unit]
+Description=Chromium Headless Browser
+After=network.target
+
+[Service]
+User=root
+ExecStart=/usr/bin/chromium --headless --no-sandbox --disable-gpu --disable-dev-shm-usage --remote-debugging-address=127.0.0.1 --remote-debugging-port=9222 --hide-scrollbars
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+  systemctl enable -q --now chromium
+fi
+if [[ "$DEPLOYMENT_TYPE" == "2" ]]; then
+  cat <<EOF >/etc/systemd/system/flaresolverr.service
+[Unit]
+Description=FlareSolverr
+After=network.target
+[Service]
+SyslogIdentifier=flaresolverr
+Restart=always
+RestartSec=5
+Type=simple
+Environment="LOG_LEVEL=info"
+Environment="CAPTCHA_SOLVER=none"
+WorkingDirectory=/opt/flaresolverr
+ExecStart=/opt/flaresolverr/flaresolverr
+TimeoutStopSec=30
+[Install]
+WantedBy=multi-user.target
+EOF
+  systemctl enable -q --now flaresolverr
+fi
+
+cat <<EOF >/opt/shelfmark/start.sh
+#!/usr/bin/env bash
+
+source /opt/shelfmark/venv/bin/activate
+set -a
+source /etc/shelfmark/.env
+set +a
+
+gunicorn --worker-class geventwebsocket.gunicorn.workers.GeventWebSocketWorker --workers 1 -t 300 -b 0.0.0.0:8084 shelfmark.main:app
+EOF
+chmod +x /opt/shelfmark/start.sh
+
+systemctl enable -q --now shelfmark
+msg_ok "Created Services and start script"
+
+motd_ssh
+customize
+cleanup_lxc

install/snipeit-install.sh

@@ -19,7 +19,7 @@ $STD apt install -y \
   nginx
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.3" PHP_MODULE="common,ctype,ldap,fileinfo,iconv,mysql,soap,xsl" PHP_FPM="YES" setup_php
+PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="ldap,soap,xsl" setup_php
 setup_composer
 fetch_and_deploy_gh_release "snipe-it" "grokability/snipe-it" "tarball"
 setup_mariadb

install/speedtest-tracker-install.sh

@@ -20,7 +20,7 @@ $STD apt install -y \
 setcap cap_net_raw+ep /bin/ping
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="common,sqlite3,redis" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" setup_php
 setup_composer
 NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "speedtest-tracker" "alexjustesen/speedtest-tracker" "tarball"

install/wallabag-install.sh

@@ -22,7 +22,7 @@ msg_ok "Installed Dependencies"
 
 setup_mariadb
 MARIADB_DB_NAME="wallabag" MARIADB_DB_USER="wallabag" setup_mariadb_db
-PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="bcmath,bz2,curl,gd,imagick,intl,mbstring,mysql,redis,tidy,xml,zip" setup_php
+PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="tidy" setup_php
 setup_composer
 NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "wallabag" "wallabag/wallabag" "prebuild" "latest" "/opt/wallabag" "wallabag-*.tar.gz"

install/wallos-install.sh

@@ -14,7 +14,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="imagick,bz2,sqlite3" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 fetch_and_deploy_gh_release "wallos" "ellite/Wallos" "tarball"
 
 msg_info "Installing Wallos (Patience)"

install/wavelog-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_MODULE="mysql" PHP_APACHE="YES" PHP_MAX_EXECUTION_TIME="600" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MAX_EXECUTION_TIME="600" setup_php
 setup_mariadb
 MARIADB_DB_NAME="wavelog" MARIADB_DB_USER="waveloguser" setup_mariadb_db
 fetch_and_deploy_gh_release "wavelog" "wavelog/wavelog" "tarball"

install/whisparr-install.sh

@@ -17,22 +17,20 @@ msg_info "Installing Dependencies"
 $STD apt install -y sqlite3
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Whisparr"
+fetch_and_deploy_from_url "https://whisparr.servarr.com/v1/update/nightly/updatefile?os=linux&runtime=netcore&arch=x64" /opt/Whisparr
+
+msg_info "Configuring Whisparr"
 mkdir -p /var/lib/whisparr/
 chmod 775 /var/lib/whisparr/
-cd /var/lib/whisparr/
-$STD curl -fsSL 'https://whisparr.servarr.com/v1/update/nightly/updatefile?os=linux&runtime=netcore&arch=x64' -o whisparr.tar.gz
-$STD tar -xvzf whisparr.tar.gz
-mv Whisparr /opt
 chmod 775 /opt/Whisparr
-rm -rf Whisparr.develop.*.tar.gz
-msg_ok "Installed Whisparr"
+msg_ok "Configured Whisparr"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/whisparr.service
 [Unit]
 Description=whisparr Daemon
 After=syslog.target network.target
+
 [Service]
 UMask=0002
 Type=simple
@@ -40,10 +38,11 @@ ExecStart=/opt/Whisparr/Whisparr -nobrowser -data=/var/lib/whisparr/
 TimeoutStopSec=20
 KillMode=process
 Restart=on-failure
+
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable --now -q whisparr
+systemctl enable -q --now whisparr
 msg_ok "Created Service"
 
 motd_ssh

install/wordpress-install.sh

@@ -13,15 +13,13 @@ setting_up_container
 network_check
 update_os
 
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="common,snmp,imap,mysql" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_APACHE="YES" PHP_MODULE="snmp,imap" setup_php
 setup_mariadb
 MARIADB_DB_NAME="wordpress_db" MARIADB_DB_USER="wordpress" setup_mariadb_db
+fetch_and_deploy_from_url "https://wordpress.org/latest.zip" /var/www/html/wordpress
 
 msg_info "Installing Wordpress (Patience)"
-cd /var/www/html
-curl -fsSL "https://wordpress.org/latest.zip" -o "latest.zip"
-$STD unzip latest.zip
-chown -R www-data:www-data wordpress/
+chown -R www-data:www-data /var/www/html/wordpress
 cd /var/www/html/wordpress
 find . -type d -exec chmod 755 {} \;
 find . -type f -exec chmod 644 {} \;
@@ -30,7 +28,6 @@ sed -i -e "s|^define( 'DB_NAME', '.*' );|define( 'DB_NAME', '$MARIADB_DB_NAME' )
   -e "s|^define( 'DB_USER', '.*' );|define( 'DB_USER', '$MARIADB_DB_USER' );|" \
   -e "s|^define( 'DB_PASSWORD', '.*' );|define( 'DB_PASSWORD', '$MARIADB_DB_PASS' );|" \
   /var/www/html/wordpress/wp-config.php
-rm -rf /var/www/html/latest.zip
 msg_ok "Installed Wordpress"
 
 msg_info "Setup Services"

install/yubal-install.sh

@@ -19,7 +19,8 @@ $STD apt install -y \
   libssl-dev \
   libffi-dev \
   python3-dev \
-  ffmpeg
+  ffmpeg \
+  git
 msg_ok "Installed Dependencies"
 
 msg_info "Installing Bun"

misc/build.func

@@ -990,7 +990,7 @@ base_settings() {
   fi
 
   MTU=${var_mtu:-""}
-  SD=${var_storage:-""}
+  SD=${var_searchdomain:-""}
   NS=${var_ns:-""}
   MAC=${var_mac:-""}
   VLAN=${var_vlan:-""}

misc/tools.func

@@ -4460,6 +4460,8 @@ function setup_nodejs() {
 #   - Adds Sury PHP repo if needed
 #   - Installs default and user-defined modules
 #   - Patches php.ini for CLI, Apache, and FPM as needed
+#   - Handles built-in modules gracefully (e.g., opcache in PHP 8.5+)
+#   - Skips unavailable packages without failing
 #
 # Variables:
 #   PHP_VERSION                - PHP version to install (default: 8.4)
@@ -4470,6 +4472,17 @@ function setup_nodejs() {
 #   PHP_UPLOAD_MAX_FILESIZE    - (default: 128M)
 #   PHP_POST_MAX_SIZE          - (default: 128M)
 #   PHP_MAX_EXECUTION_TIME     - (default: 300)
+#
+# Notes on modules:
+#   - Base modules (always installed): bcmath, cli, curl, gd, intl, mbstring,
+#     readline, xml, zip, common
+#   - Extended modules (commonly needed): mysql, sqlite3, pgsql, redis,
+#     imagick, bz2, ldap, soap, imap, gmp, apcu
+#   - Some modules are built-in depending on PHP version:
+#     * PHP 8.5+: opcache is built-in (no separate package)
+#     * All versions: ctype, fileinfo, iconv, tokenizer, phar, posix, etc.
+#       are part of php-common
+#   - Unavailable modules are skipped with a warning, not an error
 # ------------------------------------------------------------------------------
 
 function setup_php() {
@@ -4481,23 +4494,69 @@ function setup_php() {
   DISTRO_ID=$(awk -F= '/^ID=/{print $2}' /etc/os-release | tr -d '"')
   DISTRO_CODENAME=$(awk -F= '/^VERSION_CODENAME=/{print $2}' /etc/os-release)
 
-  local DEFAULT_MODULES="bcmath,cli,curl,gd,intl,mbstring,opcache,readline,xml,zip"
-  local COMBINED_MODULES
+  # Parse version for compatibility checks
+  local PHP_MAJOR="${PHP_VERSION%%.*}"
+  local PHP_MINOR="${PHP_VERSION#*.}"
+  PHP_MINOR="${PHP_MINOR%%.*}"
+
+  # Modules that are ALWAYS part of php-common (no separate package needed)
+  # These are either built-in or virtual packages provided by php-common
+  local BUILTIN_MODULES="calendar,ctype,exif,ffi,fileinfo,ftp,gettext,iconv,pdo,phar,posix,shmop,sockets,sysvmsg,sysvsem,sysvshm,tokenizer"
+
+  # Modules that became built-in in specific PHP versions
+  # PHP 8.5+: opcache is now part of the core
+  local BUILTIN_85=""
+  if [[ "$PHP_MAJOR" -gt 8 ]] || [[ "$PHP_MAJOR" -eq 8 && "$PHP_MINOR" -ge 5 ]]; then
+    BUILTIN_85="opcache"
+  fi
+
+  # Base modules - essential for most PHP applications
+  # Note: 'common' provides many built-in extensions
+  local BASE_MODULES="cli,common,bcmath,curl,dom,gd,gmp,intl,mbstring,readline,xml,zip"
+
+  # Add opcache only for PHP < 8.5 (it's built-in starting from 8.5)
+  if [[ "$PHP_MAJOR" -lt 8 ]] || [[ "$PHP_MAJOR" -eq 8 && "$PHP_MINOR" -lt 5 ]]; then
+    BASE_MODULES="${BASE_MODULES},opcache"
+  fi
+
+  # Extended default modules - commonly needed by web applications
+  # These cover ~90% of typical use cases without bloat
+  local EXTENDED_MODULES="mysql,sqlite3,pgsql,redis,imagick,bz2,apcu"
+
+  local COMBINED_MODULES="${BASE_MODULES},${EXTENDED_MODULES}"
 
   local PHP_MEMORY_LIMIT="${PHP_MEMORY_LIMIT:-512M}"
   local PHP_UPLOAD_MAX_FILESIZE="${PHP_UPLOAD_MAX_FILESIZE:-128M}"
   local PHP_POST_MAX_SIZE="${PHP_POST_MAX_SIZE:-128M}"
   local PHP_MAX_EXECUTION_TIME="${PHP_MAX_EXECUTION_TIME:-300}"
 
-  # Merge default + user-defined modules
+  # Merge with user-defined modules
   if [[ -n "$PHP_MODULE" ]]; then
-    COMBINED_MODULES="${DEFAULT_MODULES},${PHP_MODULE}"
-  else
-    COMBINED_MODULES="${DEFAULT_MODULES}"
+    COMBINED_MODULES="${COMBINED_MODULES},${PHP_MODULE}"
   fi
 
+  # Filter out built-in modules (they don't have separate packages)
+  local FILTERED_MODULES=""
+  IFS=',' read -ra ALL_MODULES <<<"$COMBINED_MODULES"
+  for mod in "${ALL_MODULES[@]}"; do
+    mod=$(echo "$mod" | tr -d '[:space:]')
+    [[ -z "$mod" ]] && continue
+
+    # Skip if it's a known built-in module
+    if echo ",$BUILTIN_MODULES,$BUILTIN_85," | grep -qi ",$mod,"; then
+      continue
+    fi
+
+    # Add to filtered list
+    if [[ -z "$FILTERED_MODULES" ]]; then
+      FILTERED_MODULES="$mod"
+    else
+      FILTERED_MODULES="${FILTERED_MODULES},$mod"
+    fi
+  done
+
   # Deduplicate
-  COMBINED_MODULES=$(echo "$COMBINED_MODULES" | tr ',' '\n' | awk '!seen[$0]++' | paste -sd, -)
+  COMBINED_MODULES=$(echo "$FILTERED_MODULES" | tr ',' '\n' | awk '!seen[$0]++' | paste -sd, -)
 
   # Get current PHP-CLI version
   local CURRENT_PHP=""
@@ -4555,16 +4614,41 @@ EOF
     return 1
   fi
 
-  # Build module list - without version pinning (preferences.d handles it)
+  # Build module list - verify each package exists before adding
   local MODULE_LIST="php${PHP_VERSION}"
+  local SKIPPED_MODULES=""
 
   IFS=',' read -ra MODULES <<<"$COMBINED_MODULES"
   for mod in "${MODULES[@]}"; do
-    MODULE_LIST+=" php${PHP_VERSION}-${mod}"
+    mod=$(echo "$mod" | tr -d '[:space:]')
+    [[ -z "$mod" ]] && continue
+
+    local pkg_name="php${PHP_VERSION}-${mod}"
+
+    # Check if package exists in repository
+    if apt-cache show "$pkg_name" &>/dev/null; then
+      MODULE_LIST+=" $pkg_name"
+    else
+      # Package doesn't exist - could be built-in or renamed
+      if [[ -z "$SKIPPED_MODULES" ]]; then
+        SKIPPED_MODULES="$mod"
+      else
+        SKIPPED_MODULES="${SKIPPED_MODULES}, $mod"
+      fi
+    fi
   done
 
+  # Log skipped modules (informational, not an error)
+  if [[ -n "$SKIPPED_MODULES" ]]; then
+    msg_info "Skipping unavailable/built-in modules: $SKIPPED_MODULES"
+  fi
+
   if [[ "$PHP_FPM" == "YES" ]]; then
-    MODULE_LIST+=" php${PHP_VERSION}-fpm"
+    if apt-cache show "php${PHP_VERSION}-fpm" &>/dev/null; then
+      MODULE_LIST+=" php${PHP_VERSION}-fpm"
+    else
+      msg_warn "php${PHP_VERSION}-fpm not available"
+    fi
     # Create systemd override for PHP-FPM to fix runtime directory issues in LXC containers
     mkdir -p /etc/systemd/system/php${PHP_VERSION}-fpm.service.d/
     cat <<EOF >/etc/systemd/system/php${PHP_VERSION}-fpm.service.d/override.conf
@@ -4591,38 +4675,31 @@ EOF
 
   # Install PHP packages (pinning via preferences.d ensures correct version)
   msg_info "Installing PHP ${PHP_VERSION} packages"
-  if ! install_packages_with_retry $MODULE_LIST; then
-    msg_warn "Failed to install PHP packages, attempting individual installation"
+
+  # First attempt: Install all verified packages at once
+  if ! $STD apt install -y $MODULE_LIST 2>/dev/null; then
+    msg_warn "Bulk installation failed, attempting individual installation"
 
     # Install main package first (critical)
-    install_packages_with_retry "php${PHP_VERSION}" || {
+    if ! $STD apt install -y "php${PHP_VERSION}" 2>/dev/null; then
       msg_error "Failed to install php${PHP_VERSION}"
       return 1
-    }
+    fi
 
     # Try to install Apache module individually if requested
     if [[ "$PHP_APACHE" == "YES" ]]; then
-      install_packages_with_retry "libapache2-mod-php${PHP_VERSION}" || {
+      $STD apt install -y "libapache2-mod-php${PHP_VERSION}" 2>/dev/null || {
         msg_warn "Could not install libapache2-mod-php${PHP_VERSION}"
       }
     fi
 
-    # Try to install modules individually - skip those that don't exist
-    for pkg in "${MODULES[@]}"; do
-      if apt-cache search "^php${PHP_VERSION}-${pkg}\$" 2>/dev/null | grep -q "^php${PHP_VERSION}-${pkg}"; then
-        install_packages_with_retry "php${PHP_VERSION}-${pkg}" || {
-          msg_warn "Could not install php${PHP_VERSION}-${pkg}"
-        }
-      fi
+    # Try to install each package individually
+    for pkg in $MODULE_LIST; do
+      [[ "$pkg" == "php${PHP_VERSION}" ]] && continue  # Already installed
+      $STD apt install -y "$pkg" 2>/dev/null || {
+        msg_warn "Could not install $pkg - continuing without it"
+      }
     done
-
-    if [[ "$PHP_FPM" == "YES" ]]; then
-      if apt-cache search "^php${PHP_VERSION}-fpm\$" 2>/dev/null | grep -q "^php${PHP_VERSION}-fpm"; then
-        install_packages_with_retry "php${PHP_VERSION}-fpm" || {
-          msg_warn "Could not install php${PHP_VERSION}-fpm"
-        }
-      fi
-    fi
   fi
   cache_installed_version "php" "$PHP_VERSION"
 
@@ -5182,9 +5259,169 @@ function setup_meilisearch() {
   if [[ -f /usr/bin/meilisearch ]]; then
     if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
       msg_info "Updating MeiliSearch"
+
+      # Get current and new version for compatibility check
+      local CURRENT_VERSION NEW_VERSION
+      CURRENT_VERSION=$(/usr/bin/meilisearch --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1) || CURRENT_VERSION="0.0.0"
+      NEW_VERSION="${CHECK_UPDATE_RELEASE#v}"
+
+      # Extract major.minor for comparison (Meilisearch requires dump/restore between minor versions)
+      local CURRENT_MAJOR_MINOR NEW_MAJOR_MINOR
+      CURRENT_MAJOR_MINOR=$(echo "$CURRENT_VERSION" | cut -d. -f1,2)
+      NEW_MAJOR_MINOR=$(echo "$NEW_VERSION" | cut -d. -f1,2)
+
+      # Determine if migration is needed (different major.minor = incompatible DB format)
+      local NEEDS_MIGRATION=false
+      if [[ "$CURRENT_MAJOR_MINOR" != "$NEW_MAJOR_MINOR" ]]; then
+        NEEDS_MIGRATION=true
+        msg_info "MeiliSearch version change detected (${CURRENT_VERSION} → ${NEW_VERSION}), preparing data migration"
+      fi
+
+      # Read config values for dump/restore
+      local MEILI_HOST MEILI_PORT MEILI_MASTER_KEY MEILI_DUMP_DIR
+      MEILI_HOST="${MEILISEARCH_HOST:-127.0.0.1}"
+      MEILI_PORT="${MEILISEARCH_PORT:-7700}"
+      MEILI_DUMP_DIR="${MEILISEARCH_DUMP_DIR:-/var/lib/meilisearch/dumps}"
+      MEILI_MASTER_KEY=$(grep -E "^master_key\s*=" /etc/meilisearch.toml 2>/dev/null | sed 's/.*=\s*"\(.*\)"/\1/' | tr -d ' ')
+
+      # Create dump before update if migration is needed
+      local DUMP_UID=""
+      if [[ "$NEEDS_MIGRATION" == "true" ]] && [[ -n "$MEILI_MASTER_KEY" ]]; then
+        msg_info "Creating MeiliSearch data dump before upgrade"
+
+        # Trigger dump creation
+        local DUMP_RESPONSE
+        DUMP_RESPONSE=$(curl -s -X POST "http://${MEILI_HOST}:${MEILI_PORT}/dumps" \
+          -H "Authorization: Bearer ${MEILI_MASTER_KEY}" \
+          -H "Content-Type: application/json" 2>/dev/null) || true
+
+        # The initial response only contains taskUid, not dumpUid
+        # dumpUid is only available after the task completes
+        local TASK_UID
+        TASK_UID=$(echo "$DUMP_RESPONSE" | grep -oP '"taskUid":\s*\K[0-9]+' || true)
+
+        if [[ -n "$TASK_UID" ]]; then
+          msg_info "Waiting for dump task ${TASK_UID} to complete..."
+          local MAX_WAIT=120
+          local WAITED=0
+          local TASK_RESULT=""
+          
+          while [[ $WAITED -lt $MAX_WAIT ]]; do
+            TASK_RESULT=$(curl -s "http://${MEILI_HOST}:${MEILI_PORT}/tasks/${TASK_UID}" \
+              -H "Authorization: Bearer ${MEILI_MASTER_KEY}" 2>/dev/null) || true
+            
+            local TASK_STATUS
+            TASK_STATUS=$(echo "$TASK_RESULT" | grep -oP '"status":\s*"\K[^"]+' || true)
+            
+            if [[ "$TASK_STATUS" == "succeeded" ]]; then
+              # Extract dumpUid from the completed task details
+              DUMP_UID=$(echo "$TASK_RESULT" | grep -oP '"dumpUid":\s*"\K[^"]+' || true)
+              if [[ -n "$DUMP_UID" ]]; then
+                msg_ok "MeiliSearch dump created successfully: ${DUMP_UID}"
+              else
+                msg_warn "Dump task succeeded but could not extract dumpUid"
+              fi
+              break
+            elif [[ "$TASK_STATUS" == "failed" ]]; then
+              local ERROR_MSG
+              ERROR_MSG=$(echo "$TASK_RESULT" | grep -oP '"message":\s*"\K[^"]+' || echo "Unknown error")
+              msg_warn "MeiliSearch dump failed: ${ERROR_MSG}"
+              break
+            fi
+            sleep 2
+            WAITED=$((WAITED + 2))
+          done
+
+          if [[ $WAITED -ge $MAX_WAIT ]]; then
+            msg_warn "MeiliSearch dump timed out after ${MAX_WAIT}s"
+          fi
+        else
+          msg_warn "Could not trigger MeiliSearch dump (no taskUid in response)"
+          msg_info "Response was: ${DUMP_RESPONSE:-empty}"
+        fi
+      fi
+
+      # If migration is needed but dump failed, we have options:
+      # 1. Abort the update (safest, but annoying)
+      # 2. Backup data directory and proceed (allows manual recovery)
+      # 3. Just proceed and hope for the best (dangerous)
+      # We choose option 2: backup and proceed with warning
+      if [[ "$NEEDS_MIGRATION" == "true" ]] && [[ -z "$DUMP_UID" ]]; then
+        local MEILI_DB_PATH
+        MEILI_DB_PATH=$(grep -E "^db_path\s*=" /etc/meilisearch.toml 2>/dev/null | sed 's/.*=\s*"\(.*\)"/\1/' | tr -d ' ')
+        MEILI_DB_PATH="${MEILI_DB_PATH:-/var/lib/meilisearch/data}"
+        
+        if [[ -d "$MEILI_DB_PATH" ]] && [[ -n "$(ls -A "$MEILI_DB_PATH" 2>/dev/null)" ]]; then
+          local BACKUP_PATH="${MEILI_DB_PATH}.backup.$(date +%Y%m%d%H%M%S)"
+          msg_warn "Backing up MeiliSearch data to ${BACKUP_PATH}"
+          mv "$MEILI_DB_PATH" "$BACKUP_PATH"
+          mkdir -p "$MEILI_DB_PATH"
+          msg_info "Data backed up. After update, you may need to reindex your data."
+          msg_info "Old data is preserved at: ${BACKUP_PATH}"
+        fi
+      fi
+
+      # Stop service and update binary
       systemctl stop meilisearch
       fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
-      systemctl start meilisearch
+
+      # If migration needed and dump was created, remove old data and import dump
+      if [[ "$NEEDS_MIGRATION" == "true" ]] && [[ -n "$DUMP_UID" ]]; then
+        local MEILI_DB_PATH
+        MEILI_DB_PATH=$(grep -E "^db_path\s*=" /etc/meilisearch.toml 2>/dev/null | sed 's/.*=\s*"\(.*\)"/\1/' | tr -d ' ')
+        MEILI_DB_PATH="${MEILI_DB_PATH:-/var/lib/meilisearch/data}"
+
+        msg_info "Removing old MeiliSearch database for migration"
+        rm -rf "${MEILI_DB_PATH:?}"/*
+
+        # Import dump using CLI flag (this is the supported method)
+        local DUMP_FILE="${MEILI_DUMP_DIR}/${DUMP_UID}.dump"
+        if [[ -f "$DUMP_FILE" ]]; then
+          msg_info "Importing dump: ${DUMP_FILE}"
+          
+          # Start meilisearch with --import-dump flag
+          # This is a one-time import that happens during startup
+          /usr/bin/meilisearch --config-file-path /etc/meilisearch.toml --import-dump "$DUMP_FILE" &
+          local MEILI_PID=$!
+          
+          # Wait for meilisearch to become healthy (import happens during startup)
+          msg_info "Waiting for MeiliSearch to import and start..."
+          local MAX_WAIT=300
+          local WAITED=0
+          while [[ $WAITED -lt $MAX_WAIT ]]; do
+            if curl -sf "http://${MEILI_HOST}:${MEILI_PORT}/health" &>/dev/null; then
+              msg_ok "MeiliSearch is healthy after import"
+              break
+            fi
+            # Check if process is still running
+            if ! kill -0 $MEILI_PID 2>/dev/null; then
+              msg_warn "MeiliSearch process exited during import"
+              break
+            fi
+            sleep 3
+            WAITED=$((WAITED + 3))
+          done
+          
+          # Stop the manual process
+          kill $MEILI_PID 2>/dev/null || true
+          sleep 2
+          
+          # Start via systemd for proper management
+          systemctl start meilisearch
+          
+          if systemctl is-active --quiet meilisearch; then
+            msg_ok "MeiliSearch migrated successfully"
+          else
+            msg_warn "MeiliSearch failed to start after migration - check logs with: journalctl -u meilisearch"
+          fi
+        else
+          msg_warn "Dump file not found: ${DUMP_FILE}"
+          systemctl start meilisearch
+        fi
+      else
+        systemctl start meilisearch
+      fi
+
       msg_ok "Updated MeiliSearch"
     fi
     return 0
@@ -6009,3 +6246,152 @@ EOF
 
   msg_ok "Docker setup completed"
 }
+
+# ------------------------------------------------------------------------------
+# Fetch and deploy from URL
+# Downloads an archive (zip, tar.gz, or .deb) from a URL and extracts/installs it
+#
+# Usage: fetch_and_deploy_from_url "url" "directory"
+#   url       - URL to the archive (zip, tar.gz, or .deb)
+#   directory - Destination path where the archive will be extracted
+#               (not used for .deb packages)
+#
+# Examples:
+#   fetch_and_deploy_from_url "https://example.com/app.tar.gz" "/opt/myapp"
+#   fetch_and_deploy_from_url "https://example.com/app.zip" "/opt/myapp"
+#   fetch_and_deploy_from_url "https://example.com/package.deb" ""
+# ------------------------------------------------------------------------------
+function fetch_and_deploy_from_url() {
+  local url="$1"
+  local directory="$2"
+
+  if [[ -z "$url" ]]; then
+    msg_error "URL parameter is required"
+    return 1
+  fi
+
+  local filename="${url##*/}"
+
+  msg_info "Downloading from $url"
+
+  local tmpdir
+  tmpdir=$(mktemp -d) || {
+    msg_error "Failed to create temporary directory"
+    return 1
+  }
+
+  curl -fsSL -o "$tmpdir/$filename" "$url" || {
+    msg_error "Download failed: $url"
+    rm -rf "$tmpdir"
+    return 1
+  }
+
+  # Auto-detect archive type using file description
+  local file_desc
+  file_desc=$(file -b "$tmpdir/$filename")
+  
+  local archive_type="unknown"
+  
+  if [[ "$file_desc" =~ gzip.*compressed|gzip\ compressed\ data ]]; then
+    archive_type="tar"
+  elif [[ "$file_desc" =~ Zip.*archive|ZIP\ archive ]]; then
+    archive_type="zip"
+  elif [[ "$file_desc" =~ Debian.*package|Debian\ binary\ package ]]; then
+    archive_type="deb"
+  elif [[ "$file_desc" =~ POSIX.*tar.*archive|tar\ archive ]]; then
+    archive_type="tar"
+  else
+    msg_error "Unsupported or unknown archive type: $file_desc"
+    rm -rf "$tmpdir"
+    return 1
+  fi
+
+  msg_info "Detected archive type: $archive_type (file type: $file_desc)"
+
+  if [[ "$archive_type" == "deb" ]]; then
+    msg_info "Installing .deb package"
+
+    chmod 644 "$tmpdir/$filename"
+    $STD apt install -y "$tmpdir/$filename" || {
+      $STD dpkg -i "$tmpdir/$filename" || {
+        msg_error "Both apt and dpkg installation failed"
+        rm -rf "$tmpdir"
+        return 1
+      }
+    }
+
+    rm -rf "$tmpdir"
+    msg_ok "Successfully installed .deb package"
+    return 0
+  fi
+
+  if [[ -z "$directory" ]]; then
+    msg_error "Directory parameter is required for archive extraction"
+    rm -rf "$tmpdir"
+    return 1
+  fi
+
+  msg_info "Extracting archive to $directory"
+
+  mkdir -p "$directory"
+
+  if [[ "${CLEAN_INSTALL:-0}" == "1" ]]; then
+    rm -rf "${directory:?}/"*
+  fi
+
+  local unpack_tmp
+  unpack_tmp=$(mktemp -d)
+
+  if [[ "$archive_type" == "zip" ]]; then
+    ensure_dependencies unzip
+    unzip -q "$tmpdir/$filename" -d "$unpack_tmp" || {
+      msg_error "Failed to extract ZIP archive"
+      rm -rf "$tmpdir" "$unpack_tmp"
+      return 1
+    }
+  elif [[ "$archive_type" == "tar" ]]; then
+    tar --no-same-owner -xf "$tmpdir/$filename" -C "$unpack_tmp" || {
+      msg_error "Failed to extract TAR archive"
+      rm -rf "$tmpdir" "$unpack_tmp"
+      return 1
+    }
+  fi
+
+  local top_entries
+  top_entries=$(find "$unpack_tmp" -mindepth 1 -maxdepth 1)
+
+  if [[ "$(echo "$top_entries" | wc -l)" -eq 1 && -d "$top_entries" ]]; then
+    local inner_dir="$top_entries"
+    shopt -s dotglob nullglob
+    if compgen -G "$inner_dir/*" >/dev/null; then
+      cp -r "$inner_dir"/* "$directory/" || {
+        msg_error "Failed to copy contents from $inner_dir to $directory"
+        rm -rf "$tmpdir" "$unpack_tmp"
+        return 1
+      }
+    else
+      msg_error "Inner directory is empty: $inner_dir"
+      rm -rf "$tmpdir" "$unpack_tmp"
+      return 1
+    fi
+    shopt -u dotglob nullglob
+  else
+    shopt -s dotglob nullglob
+    if compgen -G "$unpack_tmp/*" >/dev/null; then
+      cp -r "$unpack_tmp"/* "$directory/" || {
+        msg_error "Failed to copy contents to $directory"
+        rm -rf "$tmpdir" "$unpack_tmp"
+        return 1
+      }
+    else
+      msg_error "Unpacked archive is empty"
+      rm -rf "$tmpdir" "$unpack_tmp"
+      return 1
+    fi
+    shopt -u dotglob nullglob
+  fi
+
+  rm -rf "$tmpdir" "$unpack_tmp"
+  msg_ok "Successfully deployed archive to $directory"
+  return 0
+}

tools/pve/post-pve-install.sh

@@ -595,7 +595,7 @@ EOF
   no)
     whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox --title "Support Subscriptions" "Supporting the software's development team is essential. Check their official website's Support Subscriptions for pricing. Without their dedicated work, we wouldn't have this exceptional software." 10 58
     msg_error "Selected no to Disabling subscription nag"
-    rm /etc/apt/apt.conf.d/no-nag-script 2>/dev/null
+    [[ -f /etc/apt/apt.conf.d/no-nag-script ]] && rm /etc/apt/apt.conf.d/no-nag-script
     ;;
   esac
   apt --reinstall install proxmox-widget-toolkit &>/dev/null || msg_error "Widget toolkit reinstall failed"