feat(silverbullet): add optional Runtime API install via Chromium

Adds an install-time prompt to optionally enable Silverbullet's Runtime API by installing Chromium and configuring SB_CHROME_PATH / SB_CHROME_DATA_DIR.

.github/DISCUSSION_TEMPLATE/request-script.yml

@@ -12,17 +12,13 @@ body:
         Requests may be closed if the application is out of scope, abandoned, too new, not publicly verifiable, or not suitable for a reliable Proxmox VE Helper-Scripts integration.
 
         General requirements:
-        - The application must be self-hosted.
+        - The application should be self-hosted.
-        - The project must have an official public source repository.
+        - The project should have an official public source repository.
-        - The project must provide official releases, tags, or release tarballs.
+        - The project should provide official releases, tags, or release tarballs.
-        - The project must be actively maintained.
+        - The project should be actively maintained.
-        - The official source repository must have at least 1,000 stars.
+        - The project should generally have at least 1,000 stars or a comparable public adoption signal.
-        - The latest official release or tag must not be older than 6 months.
+        - The latest official release or tag should not be older than 6 months.
-        - The project itself must be at least 6 months old.
+        - The project itself should be at least 6 months old.
-
-        Projects that do not meet these requirements may be closed without further evaluation.
-
-        Exceptions to the 1,000-star requirement are rare and require a clearly verifiable, significant public adoption signal.
 
   - type: input
     id: application-name
@@ -51,35 +47,6 @@ body:
     validations:
       required: true
 
-  - type: markdown
-    attributes:
-      value: |
-        ## ⚠️ Project Eligibility
-
-        Before continuing, verify that the requested project meets the minimum requirements below.
-
-        **Projects with fewer than 1,000 stars are generally not eligible for a script request.**
-
-        Exceptions are only considered where there is a clearly verifiable, significant public adoption signal.
-
-  - type: input
-    id: repository-stars
-    attributes:
-      label: Repository Stars
-      description: Enter the current number of stars of the official source repository.
-      placeholder: "e.g., 15,000"
-    validations:
-      required: true
-
-  - type: checkboxes
-    id: minimum-stars
-    attributes:
-      label: Minimum Adoption Requirement
-      description: Confirm that you have verified the project's public adoption.
-      options:
-        - label: The official source repository has at least 1,000 stars.
-          required: true
-
   - type: textarea
     id: app-description
     attributes:

CHANGELOG.md

@@ -504,26 +504,12 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-07-14
 
-### 🆕 New Scripts
-
-  - Grav ([#15773](https://github.com/community-scripts/ProxmoxVE/pull/15773))
-- Yuvomi ([#15772](https://github.com/community-scripts/ProxmoxVE/pull/15772))
-
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
-    - Wanderer: Clean deploy and install plugins for v0.20.0 update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15759](https://github.com/community-scripts/ProxmoxVE/pull/15759))
-    - Lychee: Preserve uploads and ownership during update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15768](https://github.com/community-scripts/ProxmoxVE/pull/15768))
-    - FileFlows: Handle update API 401, force update, and Node install [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15766](https://github.com/community-scripts/ProxmoxVE/pull/15766))
-    - BirdNET-Go: Match new upstream release asset naming [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15758](https://github.com/community-scripts/ProxmoxVE/pull/15758))
     - [Upstream Fix] Immich: Fix loader priority [@vhsdream](https://github.com/vhsdream) ([#15755](https://github.com/community-scripts/ProxmoxVE/pull/15755))
 
-  - #### ✨ New Features
-
-    - Bump OpenCloud version to v7.2.2 [@MickLesk](https://github.com/MickLesk) ([#15769](https://github.com/community-scripts/ProxmoxVE/pull/15769))
-    - Silverbullet: Add optional Runtime API install via Chromium [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15761](https://github.com/community-scripts/ProxmoxVE/pull/15761))
-
 ## 2026-07-13
 
 ### 🆕 New Scripts

ct/affine.sh

@@ -30,15 +30,14 @@ function update_script() {
     exit
   fi
 
-  RELEASE="v0.26.3"
+  if check_for_gh_release "affine_app" "toeverything/AFFiNE"; then
-  if check_for_gh_release "affine_app" "toeverything/AFFiNE" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     msg_info "Stopping Services"
     systemctl stop affine-web affine-worker
     msg_ok "Stopped Services"
 
     create_backup /root/.affine/config /root/.affine/storage
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "affine_app" "toeverything/AFFiNE" "tarball" "${RELEASE}" "/opt/affine"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "affine_app" "toeverything/AFFiNE" "tarball" "latest" "/opt/affine"
 
     msg_info "Rebuilding Application (Patience)"
     cd /opt/affine

ct/birdnet-go.sh

@@ -37,7 +37,7 @@ function update_script() {
     systemctl stop birdnet
     msg_ok "Stopped Service"
 
-    fetch_and_deploy_gh_release "birdnet" "tphakala/birdnet-go" "prebuild" "latest" "/opt/birdnet" "birdnet-go-linux-$(arch_resolve)*.tar.gz"
+    fetch_and_deploy_gh_release "birdnet" "tphakala/birdnet-go" "prebuild" "latest" "/opt/birdnet" "birdnet-go-linux-$(arch_resolve).tar.gz"
 
     msg_info "Deploying Binary"
     cp /opt/birdnet/birdnet-go /usr/local/bin/birdnet-go

ct/fileflows.sh

@@ -31,83 +31,50 @@ function update_script() {
     exit
   fi
 
-  local proceed=false
+  update_available=$(curl -fsSL -X 'GET' "http://localhost:19200/api/status/update-available" -H 'accept: application/json' | jq .UpdateAvailable)
+  if [[ "${update_available}" == "true" ]]; then
+    msg_info "Stopping Service"
+    systemctl --all stop 'fileflows*'
+    msg_info "Stopped Service"
 
-  if systemctl list-unit-files 'fileflows.service' --no-legend 2>/dev/null | grep -q '^fileflows\.service'; then
+    msg_info "Creating Backup"
-    tmp=$(mktemp)
+    ls /opt/*.tar.gz &>/dev/null && rm -f /opt/*.tar.gz
-    http_code=$(curl -sSL -X 'GET' "http://localhost:19200/api/status/update-available" -H 'accept: application/json' -o "$tmp" -w '%{http_code}' 2>/dev/null) || http_code="000"
+    backup_filename="/opt/${APP}_backup_$(date +%F).tar.gz"
-    if [[ "$http_code" == "200" ]]; then
+    tar -czf "$backup_filename" -C /opt/fileflows Data
-      update_available=$(jq -r '.UpdateAvailable // false' "$tmp" 2>/dev/null)
+    msg_ok "Backup Created"
-      rm -f "$tmp"
+
-      if [[ "${update_available}" == "true" ]]; then
+    # FileFlows tracks the latest release, whose .NET target can move (e.g. 8 -> 10);
-        proceed=true
+    # ensure the current ASP.NET Core Runtime so an existing install doesn't fail to
-      else
+    # start after updating to a newer .NET major version.
-        msg_ok "No update required. ${APP} is already at latest version"
+    msg_info "Ensuring ASP.NET Core Runtime"
-        exit
+    if [[ "$(arch_resolve)" == "arm64" ]]; then
-      fi
+      if [[ ! -x /usr/lib/dotnet10/dotnet ]]; then
-    else
+        curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-      rm -f "$tmp"
+        $STD bash /tmp/dotnet-install.sh --channel 10.0 --runtime aspnetcore --install-dir /usr/lib/dotnet10
-      if [[ "$http_code" == "401" ]]; then
+        ln -sf /usr/lib/dotnet10/dotnet /usr/bin/dotnet
-        msg_warn "Could not check for updates: API returned 401 (security may be enabled)."
+        rm -f /tmp/dotnet-install.sh
-      else
-        msg_warn "Could not check for updates: API unreachable (HTTP ${http_code})."
-      fi
-      if [[ "${FORCE_UPDATE:-}" == "1" ]]; then
-        proceed=true
-      else
-        read -r -p "${TAB3}Force update without version check? [y/N]: " CONFIRM
-        if [[ "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
-          proceed=true
-        else
-          msg_error "Update aborted."
-          exit
-        fi
       fi
+    elif ! is_package_installed "aspnetcore-runtime-10.0"; then
+      $STD apt remove -y aspnetcore-runtime-8.0 aspnetcore-runtime-9.0 2>/dev/null || true
+      setup_deb822_repo \
+        "microsoft" \
+        "https://packages.microsoft.com/keys/microsoft-2025.asc" \
+        "https://packages.microsoft.com/debian/13/prod/" \
+        "trixie"
+      $STD apt install -y aspnetcore-runtime-10.0
     fi
+    msg_ok "Ensured ASP.NET Core Runtime"
+
+    fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"
+
+    msg_info "Starting Service"
+    systemctl --all start 'fileflows*'
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
   else
-    proceed=true
+    msg_ok "No update required. ${APP} is already at latest version"
   fi
 
-  if [[ "$proceed" != "true" ]]; then
-    exit
-  fi
-
-  msg_info "Stopping Service"
-  systemctl --all stop 'fileflows*'
-  msg_ok "Stopped Service"
-
-  msg_info "Creating Backup"
-  ls /opt/*.tar.gz &>/dev/null && rm -f /opt/*.tar.gz
-  backup_filename="/opt/${APP}_backup_$(date +%F).tar.gz"
-  tar -czf "$backup_filename" -C /opt/fileflows Data
-  msg_ok "Backup Created"
-
-  msg_info "Ensuring ASP.NET Core Runtime"
-  if [[ "$(arch_resolve)" == "arm64" ]]; then
-    if [[ ! -x /usr/lib/dotnet10/dotnet ]]; then
-      curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-      $STD bash /tmp/dotnet-install.sh --channel 10.0 --runtime aspnetcore --install-dir /usr/lib/dotnet10
-      ln -sf /usr/lib/dotnet10/dotnet /usr/bin/dotnet
-      rm -f /tmp/dotnet-install.sh
-    fi
-  elif ! is_package_installed "aspnetcore-runtime-10.0"; then
-    $STD apt remove -y aspnetcore-runtime-8.0 aspnetcore-runtime-9.0 2>/dev/null || true
-    setup_deb822_repo \
-      "microsoft" \
-      "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-      "https://packages.microsoft.com/debian/13/prod/" \
-      "trixie"
-    $STD apt install -y aspnetcore-runtime-10.0
-  fi
-  msg_ok "Ensured ASP.NET Core Runtime"
-
-  fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"
-
-  msg_info "Starting Service"
-  systemctl --all start 'fileflows*'
-  msg_ok "Started Service"
-  msg_ok "Updated successfully!"
-
   exit
 }
 

ct/grav.sh

@@ -1,54 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -s https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Raffaele (rafspiny)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://getgrav.org/
-
-APP="Grav"
-var_tags="${var_tags:-cms}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-
-    if [[ ! -d "/opt/grav" ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    if check_for_gh_release "grav" "getgrav/grav"; then
-        msg_info "Creating Backup"
-        cd /opt/grav
-        bin/grav backup -nq
-        msg_ok "Backup Created"
-        bin/gpm self-upgrade -y
-        cd -
-        chown -R www-data:www-data /opt/grav
-        msg_ok "Update Successful"
-    fi
-    exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:80${CL}"

ct/headers/grav

@@ -1,6 +0,0 @@
-   ______                
-  / ____/________ __   __
- / / __/ ___/ __ `/ | / /
-/ /_/ / /  / /_/ /| |/ / 
-\____/_/   \__,_/ |___/  
-                         

ct/headers/yuvomi

@@ -1,6 +0,0 @@
-__  __                            _ 
-\ \/ /_  ___   ______  ____ ___  (_)
- \  / / / / | / / __ \/ __ `__ \/ / 
- / / /_/ /| |/ / /_/ / / / / / / /  
-/_/\__,_/ |___/\____/_/ /_/ /_/_/   
-                                    

ct/lychee.sh

@@ -31,38 +31,33 @@ function update_script() {
   fi
 
   if check_for_gh_release "lychee" "LycheeOrg/Lychee"; then
-    PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-
     msg_info "Stopping Services"
-    systemctl stop caddy php${PHP_VER}-fpm
+    systemctl stop caddy
     msg_ok "Stopped Services"
 
-    create_backup /opt/lychee/.env \
+    msg_info "Backing up Data"
-      /opt/lychee/storage \
+    cp /opt/lychee/.env /opt/lychee.env.bak
-      /opt/lychee/public/uploads \
+    cp -r /opt/lychee/storage /opt/lychee_storage_backup
-      /opt/lychee/public/dist
+    msg_ok "Backed up Data"
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "lychee" "LycheeOrg/Lychee" "prebuild" "latest" "/opt/lychee" "Lychee.zip"
 
-    restore_backup
+    msg_info "Restoring Data"
+    cp /opt/lychee.env.bak /opt/lychee/.env
+    rm -f /opt/lychee.env.bak
+    cp -r /opt/lychee_storage_backup/. /opt/lychee/storage
+    rm -rf /opt/lychee_storage_backup
+    msg_ok "Restored Data"
 
     msg_info "Updating Application"
     cd /opt/lychee
     $STD php artisan migrate --force
-    $STD php artisan config:clear
-    $STD php artisan cache:clear
     $STD php artisan optimize:clear
-    $STD php artisan optimize
+    chmod -R 775 /opt/lychee/storage /opt/lychee/bootstrap/cache
-    chown -R www-data:www-data /opt/lychee
-    chmod -R 775 /opt/lychee/storage /opt/lychee/bootstrap/cache \
-      /opt/lychee/public/dist /opt/lychee/public/uploads
-    if [[ "${VERBOSE:-no}" = "yes" ]]; then
-      php artisan lychee:diagnostics || true
-    fi
     msg_ok "Updated Application"
 
     msg_info "Starting Services"
-    systemctl start caddy php${PHP_VER}-fpm
+    systemctl start caddy
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/opencloud.sh

@@ -30,7 +30,7 @@ function update_script() {
     exit
   fi
 
-  RELEASE="v7.2.2"
+  RELEASE="v7.2.1"
   if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     msg_info "Stopping services"
     systemctl stop opencloud opencloud-wopi

ct/wanderer.sh

@@ -30,14 +30,12 @@ function update_script() {
     exit
   fi
 
-  if check_for_gh_release "wanderer" "open-wanderer/wanderer"; then
+  if check_for_gh_release "wanderer" "Flomp/wanderer"; then
     msg_info "Stopping service"
     systemctl stop wanderer-web
     msg_ok "Stopped service"
 
-    create_backup /opt/wanderer/source/search
+    fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
-    restore_backup
 
     msg_info "Updating wanderer"
     cd /opt/wanderer/source/db
@@ -46,13 +44,6 @@ function update_script() {
     cd /opt/wanderer/source/web
     $STD npm ci
     $STD npm run build
-    mkdir -p /opt/wanderer/data/plugins
-    [[ -e /data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /data/plugins
-    msg_info "Installing wanderer plugins"
-    for plugin in hammerhead komoot strava; do
-      fetch_and_deploy_gh_release "wanderer-plugin-${plugin}" "open-wanderer/wanderer" "prebuild" "${CHECK_UPDATE_RELEASE:-latest}" "/opt/wanderer/data/plugins" "wanderer-plugin-${plugin}.tar.gz" || msg_warn "Failed to install wanderer plugin: ${plugin}"
-    done
-    msg_ok "Installed wanderer plugins"
     msg_ok "Updated wanderer"
 
     msg_info "Starting service"

ct/yuvomi.sh

@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ulsklyc/yuvomi
-
-APP="Yuvomi"
-var_tags="${var_tags:-family;planner;calendar}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/yuvomi ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "yuvomi" "ulsklyc/yuvomi"; then
-    msg_info "Stopping Service"
-    systemctl stop yuvomi
-    msg_ok "Stopped Service"
-
-    create_backup /opt/yuvomi/data /opt/yuvomi/.env
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "yuvomi" "ulsklyc/yuvomi" "tarball"
-
-    msg_info "Installing Node.js Dependencies"
-    cd /opt/yuvomi
-    $STD npm ci --omit=dev
-    msg_ok "Installed Node.js Dependencies"
-
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start yuvomi
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"

install/affine-install.sh

@@ -30,7 +30,7 @@ PG_DB_NAME="affine" PG_DB_USER="affine" setup_postgresql_db
 NODE_VERSION="22" setup_nodejs
 setup_rust
 
-fetch_and_deploy_gh_release "affine_app" "toeverything/AFFiNE" "tarball" "v0.26.3" "/opt/affine"
+fetch_and_deploy_gh_release "affine_app" "toeverything/AFFiNE" "tarball" "latest" "/opt/affine"
 
 msg_info "Setting up Directories"
 rm -rf /root/.affine

install/birdnet-go-install.sh

@@ -21,7 +21,7 @@ $STD apt install -y \
   ffmpeg
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "birdnet" "tphakala/birdnet-go" "prebuild" "latest" "/opt/birdnet" "birdnet-go-linux-$(arch_resolve)*.tar.gz"
+fetch_and_deploy_gh_release "birdnet" "tphakala/birdnet-go" "prebuild" "latest" "/opt/birdnet" "birdnet-go-linux-$(arch_resolve).tar.gz"
 
 msg_info "Setting up BirdNET-Go"
 cp /opt/birdnet/birdnet-go /usr/local/bin/birdnet-go

install/fileflows-install.sh

@@ -55,12 +55,9 @@ if [[ "$install_server" =~ ^[Ss]$ ]]; then
   msg_ok "Installed FileFlows Server"
 else
   msg_info "Installing FileFlows Node"
-  read -r -p "${TAB3}Enter FileFlows Server URL (e.g. http://192.168.1.10:19200): " server_url
-  while [[ -z "${server_url// /}" ]]; do
-    read -r -p "${TAB3}Enter FileFlows Server URL (e.g. http://192.168.1.10:19200): " server_url
-  done
   cd /opt/fileflows/Node
-  $STD dotnet FileFlows.Node.dll --server "$server_url" --systemd install --root true
+  $STD dotnet FileFlows.Node.dll
+  $STD dotnet FileFlows.Node.dll --systemd install --root true
   systemctl enable -q --now fileflows-node
   msg_ok "Installed FileFlows Node"
 fi

install/grav-install.sh

@@ -1,111 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Raffaele (rafspiny)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://getgrav.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  nginx \
-  logrotate
-msg_ok "Installed Dependencies"
-
-PHP_FPM="YES" setup_php
-
-fetch_and_deploy_gh_release "grav" "getgrav/grav" "prebuild" "latest" "/opt/grav" "grav-admin-v*zip"
-chown -R www-data:www-data /opt/grav
-
-msg_info "Configuring Nginx"
-PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_FPM_SOCK=$(find /run/php -maxdepth 1 -name "php*-fpm.sock" -type s | sort -V | tail -1)
-unlink /etc/nginx/sites-enabled/default
-rm -f /etc/nginx/sites-available/default
-cat <<EOF >/etc/nginx/sites-available/grav
-server {
-    listen 80;
-    server_name _;
-    root /opt/grav;
-    index index.html index.htm index.php;
-
-    location / {
-        try_files \$uri \$uri/ /index.html /index.htm /index.php\$is_args\$args;
-    }
-
-    ## Begin - Security
-    location ~* /(\.git|cache|bin|logs|backup|tests)/.*$ { return 403; }
-    location ~* /(system|vendor)/.*\.(txt|xml|md|html|json|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ { return 403; }
-    location ~* /user/.*\.(txt|md|json|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ { return 403; }
-    location ~ /(LICENSE\.txt|composer\.lock|composer\.json|nginx\.conf|web\.config|htaccess\.txt|\.htaccess) { return 403; }
-    ## End - Security
-
-    ## Begin - API
-    location ^~ /api/ {
-        try_files \$uri \$uri/ /index.php\$is_args\$args;
-    }
-    ## End - API
-
-    # deny all direct access to these sensitive user folders, whatever the file type
-    location ~* /user/(accounts|config|env)/.*$ { return 403; }
-    # allow public media uploads under user/data to be served directly;
-    # this must come before the user/data deny so it wins the match
-    location ~* /user/data/.*\.(jpe?g|png|gif|webp|avif|bmp|ico|mp4|webm|ogg|ogv|mov|mp3|wav|m4a|flac|pdf)$ { try_files \$uri =404; }
-    # deny everything else under user/data
-    location ~* /user/data/.*$ { return 403; }
-
-
-    ## Begin - Caching
-    location ~* ^/forms-basic-captcha-image.jpg$ {
-        try_files \$uri \$uri/ /index.php\$is_args\$args;
-    }
-
-    location ~* \.(?:ico|css|js|gif|jpe?g|png)$ {
-        expires 30d;
-        add_header Vary Accept-Encoding;
-        log_not_found off;
-    }
-
-    location ~* ^.+\.(?:css|cur|js|jpe?g|gif|htc|ico|png|html|xml|otf|ttf|eot|woff|woff2|svg)$ {
-        access_log off;
-        expires 30d;
-        add_header Cache-Control public;
-        tcp_nodelay off;
-        open_file_cache max=3000 inactive=120s;
-        open_file_cache_valid 45s;
-        open_file_cache_min_uses 2;
-        open_file_cache_errors off;
-    }
-    ## End - Caching
-
-    location ~ ^(.+\.php)(.*)$ {
-        fastcgi_split_path_info ^(.+\.php)(.*)$;
-        if (!-f \$document_root\$fastcgi_script_name) { return 404; }
-        fastcgi_pass unix:${PHP_FPM_SOCK};
-        fastcgi_index index.php;
-        include /etc/nginx/fastcgi_params;
-        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
-    }
-
-    location ~ /\.ht {
-        deny all;
-    }
-}
-EOF
-ln -sf /etc/nginx/sites-available/grav /etc/nginx/sites-enabled/grav
-systemctl enable -q --now php${PHP_VER}-fpm
-$STD nginx -t
-systemctl enable -q --now nginx
-$STD nginx -s reload
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc

install/opencloud-install.sh

@@ -64,7 +64,7 @@ $STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPA
 echo "$COOLPASS" >~/.coolpass
 msg_ok "Installed Collabora Online"
 
-fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v7.2.2" "/usr/bin" "opencloud-*-linux-$(arch_resolve)"
+fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v7.2.1" "/usr/bin" "opencloud-*-linux-$(arch_resolve)"
 mv /usr/bin/OpenCloud /usr/bin/opencloud
 
 msg_info "Configuring OpenCloud"

install/wanderer-install.sh

@@ -20,8 +20,7 @@ if [[ "$(arch_resolve)" == "arm64" ]]; then
 else
   fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
 fi
-mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data,data/plugins}
+mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data}
-[[ -e /data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /data/plugins
 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
 
 msg_info "Installing wanderer (patience)"
@@ -33,12 +32,6 @@ $STD npm ci
 $STD npm run build
 msg_ok "Installed wanderer"
 
-msg_info "Installing wanderer plugins"
-for plugin in hammerhead komoot strava; do
-  fetch_and_deploy_gh_release "wanderer-plugin-${plugin}" "open-wanderer/wanderer" "prebuild" "latest" "/opt/wanderer/data/plugins" "wanderer-plugin-${plugin}.tar.gz" || msg_warn "Failed to install wanderer plugin: ${plugin}"
-done
-msg_ok "Installed wanderer plugins"
-
 msg_info "Creating Service"
 MEILI_KEY=$(openssl rand -hex 32)
 POCKETBASE_KEY=$(openssl rand -hex 16)

install/yuvomi-install.sh

@@ -1,72 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ulsklyc/yuvomi
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  python3 \
-  make \
-  g++ \
-  libsqlcipher-dev
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" setup_nodejs
-
-fetch_and_deploy_gh_release "yuvomi" "ulsklyc/yuvomi" "tarball"
-
-msg_info "Installing Node.js Dependencies"
-cd /opt/yuvomi
-$STD npm ci --omit=dev
-msg_ok "Installed Node.js Dependencies"
-
-msg_info "Configuring Yuvomi"
-mkdir -p /opt/yuvomi/data /opt/yuvomi/backups
-SESSION_SECRET=$(openssl rand -hex 32)
-DB_ENCRYPT_KEY=$(openssl rand -hex 32)
-cat <<EOF >/opt/yuvomi/.env
-PORT=3000
-NODE_ENV=production
-DB_PATH=/opt/yuvomi/data/yuvomi.db
-DB_ENCRYPTION_KEY=${DB_ENCRYPT_KEY}
-SESSION_SECRET=${SESSION_SECRET}
-RATE_LIMIT_WINDOW_MS=60000
-RATE_LIMIT_MAX_ATTEMPTS=5
-RATE_LIMIT_BLOCK_DURATION_MS=900000
-EOF
-msg_ok "Configured Yuvomi"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/yuvomi.service
-[Unit]
-Description=Yuvomi Family Planner
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/yuvomi
-EnvironmentFile=/opt/yuvomi/.env
-ExecStart=/usr/bin/node server/index.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now yuvomi
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc