[Core] Auto-cleanup after all update_script executions

Implements central solution for automatic cleanup after updates:
- Modified start() function in build.func to call cleanup_lxc after update_script
- Applies to ALL scripts automatically (no individual script changes needed)
- Prevents disk space growth from accumulated caches (yarn/npm/pnpm/composer/pip/etc)
- Aligns update behavior with install behavior (which already calls cleanup_lxc)

This fixes issue #10117 (Jotty disk space growth) and prevents similar issues
in all other scripts that use package managers.

Benefits:
- Single point of maintenance
- Consistent behavior across all update scripts
- Reduces disk usage after every update
- No need to manually add cleanup_lxc to 100+ update_script functions

Impact: All LXC update operations will now automatically clean caches after
successful completion, just like installations do.

CHANGELOG.md

@@ -10,6 +10,41 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-12-19
+
+### ❔ Uncategorized
+
+  - Update paymenter.json(#10133) [@DragoQC](https://github.com/DragoQC) ([#10134](https://github.com/community-scripts/ProxmoxVE/pull/10134))
+
+## 2025-12-18
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - [HOTFIX] Fix Scanopy release check [@vhsdream](https://github.com/vhsdream) ([#10097](https://github.com/community-scripts/ProxmoxVE/pull/10097))
+    - Fix cleanup issues in npm cache and rustup toolchain [@MickLesk](https://github.com/MickLesk) ([#10107](https://github.com/community-scripts/ProxmoxVE/pull/10107))
+    - Fix Zabbix 7.0 repository URL structure [@MickLesk](https://github.com/MickLesk) ([#10106](https://github.com/community-scripts/ProxmoxVE/pull/10106))
+
+  - #### ✨ New Features
+
+    - bump pihole to debian 13 [@mschabhuettl](https://github.com/mschabhuettl) ([#10118](https://github.com/community-scripts/ProxmoxVE/pull/10118))
+    - Immich: v2.4.0 [@vhsdream](https://github.com/vhsdream) ([#10095](https://github.com/community-scripts/ProxmoxVE/pull/10095))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - tools.func: hardening/Improve error handling and cleanup in shell functions [@MickLesk](https://github.com/MickLesk) ([#10116](https://github.com/community-scripts/ProxmoxVE/pull/10116))
+
+### 🧰 Tools
+
+  - qbittorrent-exporter ([#10090](https://github.com/community-scripts/ProxmoxVE/pull/10090))
+
+  - #### 🐞 Bug Fixes
+
+    - Improved error handling when a command does not exist [@wolle604](https://github.com/wolle604) ([#10089](https://github.com/community-scripts/ProxmoxVE/pull/10089))
+
 ## 2025-12-17
 
 ### 🚀 Updated Scripts
@@ -18,6 +53,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
+    - Semaphore: Fix release binary package fetching [@tremor021](https://github.com/tremor021) ([#10055](https://github.com/community-scripts/ProxmoxVE/pull/10055))
     - update github repo for endurain [@johanngrobe](https://github.com/johanngrobe) ([#10074](https://github.com/community-scripts/ProxmoxVE/pull/10074))
 
   - #### ✨ New Features
@@ -25,6 +61,19 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
     - use setup_hwaccel for robust hardware acceleration [@MickLesk](https://github.com/MickLesk) ([#10054](https://github.com/community-scripts/ProxmoxVE/pull/10054))
     - add hardware acceleration support for 17 additional apps [@MickLesk](https://github.com/MickLesk) ([#10061](https://github.com/community-scripts/ProxmoxVE/pull/10061))
 
+  - #### 🔧 Refactor
+
+    - Telegraf: Small refactor [@tremor021](https://github.com/tremor021) ([#10056](https://github.com/community-scripts/ProxmoxVE/pull/10056))
+    - Refactor: Salt [@tremor021](https://github.com/tremor021) ([#10057](https://github.com/community-scripts/ProxmoxVE/pull/10057))
+    - Refactor: Resilio Sync [@tremor021](https://github.com/tremor021) ([#10058](https://github.com/community-scripts/ProxmoxVE/pull/10058))
+    - Refactor: Reitti [@tremor021](https://github.com/tremor021) ([#10059](https://github.com/community-scripts/ProxmoxVE/pull/10059))
+    - Refactor: Redis [@tremor021](https://github.com/tremor021) ([#10060](https://github.com/community-scripts/ProxmoxVE/pull/10060))
+    - Refactor: Reactive-Resume [@tremor021](https://github.com/tremor021) ([#10062](https://github.com/community-scripts/ProxmoxVE/pull/10062))
+    - Refactor: RDTClient [@tremor021](https://github.com/tremor021) ([#10064](https://github.com/community-scripts/ProxmoxVE/pull/10064))
+    - Refactor: RabbitMQ [@tremor021](https://github.com/tremor021) ([#10065](https://github.com/community-scripts/ProxmoxVE/pull/10065))
+    - Qdrant: Code cleanup [@tremor021](https://github.com/tremor021) ([#10066](https://github.com/community-scripts/ProxmoxVE/pull/10066))
+    - Refactor: Pterodactyl Wings [@tremor021](https://github.com/tremor021) ([#10069](https://github.com/community-scripts/ProxmoxVE/pull/10069))
+
 ## 2025-12-16
 
 ### 🆕 New Scripts

ct/immich.sh

@@ -74,23 +74,28 @@ EOF
   STAGING_DIR=/opt/staging
   BASE_DIR=${STAGING_DIR}/base-images
   SOURCE_DIR=${STAGING_DIR}/image-source
-  cd /root
+  cd /tmp
   if [[ -f ~/.intel_version ]]; then
-    curl -fsSLO https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/machine-learning/Dockerfile
-    readarray -t INTEL_URLS < <(sed -n "/intel/p" ./Dockerfile | awk '{print $3}')
-    INTEL_RELEASE="$(grep "intel-opencl-icd" ./Dockerfile | awk -F '_' '{print $2}')"
+    curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
+    readarray -t INTEL_URLS < <(
+      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
+      sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
+    )
+    INTEL_RELEASE="$(grep "intel-opencl-icd_" ./Dockerfile | awk -F '_' '{print $2}')"
     if [[ "$INTEL_RELEASE" != "$(cat ~/.intel_version)" ]]; then
       msg_info "Updating Intel iGPU dependencies"
       for url in "${INTEL_URLS[@]}"; do
         curl -fsSLO "$url"
       done
       $STD apt-mark unhold libigdgmm12
+      $STD apt install -y ./libigdgmm12*.deb
+      rm ./libigdgmm12*.deb
       $STD apt install -y ./*.deb
       rm ./*.deb
       $STD apt-mark hold libigdgmm12
       msg_ok "Intel iGPU dependencies updated"
     fi
-    rm ~/Dockerfile
+    rm ./Dockerfile
   fi
   if [[ -f ~/.immich_library_revisions ]]; then
     libraries=("libjxl" "libheif" "libraw" "imagemagick" "libvips")
@@ -103,7 +108,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="2.3.1"
+  RELEASE="2.4.0"
   if check_for_gh_release "immich" "immich-app/immich" "${RELEASE}"; then
     msg_info "Stopping Services"
     systemctl stop immich-web

ct/linkwarden.sh

@@ -52,7 +52,7 @@ function update_script() {
     $STD yarn web:build
     $STD yarn prisma:deploy
     [ -d /opt/data.bak ] && mv /opt/data.bak /opt/linkwarden/data
-    rm -rf ~/.cargo/registry ~/.cargo/git ~/.cargo/.package-cache ~/.rustup
+    rm -rf ~/.cargo/registry ~/.cargo/git ~/.cargo/.package-cache
     rm -rf /root/.cache/yarn
     rm -rf /opt/linkwarden/.next/cache
     msg_ok "Updated ${APP}"

ct/pihole.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-512}"
 var_disk="${var_disk:-2}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"

ct/pterodactyl-wings.sh

@@ -23,29 +23,23 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [[ ! -f /usr/local/bin/wings ]]; then
+  if [[ ! -x /usr/local/bin/wings ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/pterodactyl/wings/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+
+  if check_for_gh_release "wings" "pterodactyl/wings"; then
     msg_info "Stopping Service"
     systemctl stop wings
     msg_ok "Stopped Service"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
     rm /usr/local/bin/wings
-    curl -fsSL "https://github.com/pterodactyl/wings/releases/download/v${RELEASE}/wings_linux_amd64" -o "/usr/local/bin/wings"
-    chmod u+x /usr/local/bin/wings
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated $APP to v${RELEASE}"
+    fetch_and_deploy_gh_release "wings" "pterodactyl/wings" "singlefile" "latest" "/usr/local/bin" "wings_linux_amd64"
 
     msg_info "Starting Service"
     systemctl start wings
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
-  else
-    msg_ok "No update required. ${APP} is already at v${RELEASE}"
   fi
   exit
 }

ct/rabbitmq.sh

@@ -29,16 +29,11 @@ function update_script() {
   fi
   if grep -q "dl.cloudsmith.io" /etc/apt/sources.list.d/rabbitmq.list; then
     rm -f /etc/apt/sources.list.d/rabbitmq.list
-    cat <<EOF >/etc/apt/sources.list.d/rabbitmq.list
-## Modern Erlang/OTP releases
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-erlang/debian/trixie trixie main
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-erlang/debian/trixie trixie main
-
-## Provides modern RabbitMQ releases
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-server/debian/trixie trixie main
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-server/debian/trixie trixie main
-EOF
-    $STD apt update
+    setup_deb822_repo \
+      "rabbitmq" \
+      "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" \
+      "https://deb1.rabbitmq.com/rabbitmq-server/debian/trixie" \
+      "trixie"
   fi
 
   msg_info "Stopping Service"

ct/rdtclient.sh

@@ -41,7 +41,7 @@ function update_script() {
     cp -R /opt/rdtc-backup/appsettings.json /opt/rdtc/
     if dpkg-query -W dotnet-sdk-8.0 >/dev/null 2>&1; then
       $STD apt remove --purge -y dotnet-sdk-8.0
-      $STD apt install -y dotnet-sdk-9.0
+      $STD apt install -y aspnetcore-runtime-9.0
     fi
     rm -rf /opt/rdtc-backup
 

ct/reactive-resume.sh

@@ -33,12 +33,11 @@ function update_script() {
     systemctl stop Reactive-Resume
     msg_ok "Stopped services"
 
-    cp /opt/"$APP"/.env /opt/rxresume.env
-
+    cp /opt/Reactive-Resume/.env /opt/rxresume.env
     fetch_and_deploy_gh_release "Reactive-Resume" "lazy-media/Reactive-Resume" "tarball" "latest" "/opt/Reactive-Resume"
 
-    msg_info "Updating $APP"
-    cd /opt/"$APP"
+    msg_info "Updating Reactive-Resume"
+    cd /opt/Reactive-Resume
     export PUPPETEER_SKIP_DOWNLOAD="true"
     export NEXT_TELEMETRY_DISABLED=1
     export CI="true"
@@ -46,8 +45,8 @@ function update_script() {
     $STD pnpm install --frozen-lockfile
     $STD pnpm run build
     $STD pnpm run prisma:generate
-    mv /opt/rxresume.env /opt/"$APP"/.env
-    msg_ok "Updated $APP"
+    mv /opt/rxresume.env /opt/Reactive-Resume/.env
+    msg_ok "Updated Reactive-Resume"
 
     msg_info "Updating Minio"
     systemctl stop minio

ct/redis.sh

@@ -27,9 +27,10 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
+
   msg_info "Updating $APP LXC"
   $STD apt update
-  $STD apt -y upgrade
+  $STD apt upgrade -y
   msg_ok "Updated $APP LXC"
   msg_ok "Updated successfully!"
   exit

ct/resiliosync.sh

@@ -27,9 +27,9 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-    msg_info "Updating ${APP} LXC"
+  msg_info "Updating Resilio Sync"
   $STD apt update
-    $STD apt -y upgrade
+  $STD apt upgrade -y
   msg_ok "Updated successfully!"
   exit
 }

ct/salt.sh

@@ -29,16 +29,14 @@ function update_script() {
     exit
   fi
 
-  RELEASE=$(curl -fsSL https://api.github.com/repos/saltstack/salt/releases/latest | jq -r .tag_name | sed 's/^v//')
-  if [[ ! -f /~.salt ]] || [[ "${RELEASE}" != "$(cat /~.salt)" ]]; then
-    msg_info "Updating $APP to ${RELEASE}"
+  RELEASE=$(get_latest_github_release "saltstack/salt")
+  if check_for_gh_release "salt" "saltstack/salt"; then
+    msg_info "Updating Salt"
     sed -i "s/^\(Pin: version \).*/\1${RELEASE}/" /etc/apt/preferences.d/salt-pin-1001
     $STD apt update
     $STD apt upgrade -y
     echo "${RELEASE}" >/~.salt
     msg_ok "Updated successfully!"
-  else
-    msg_ok "${APP} is already up to date (${RELEASE})"
   fi
   exit
 }

ct/scanopy.sh

@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  if check_for_gh_release "scanopy" "scanopy-io/scanopy"; then
+  if check_for_gh_release "scanopy" "scanopy/scanopy"; then
     msg_info "Stopping services"
     systemctl stop scanopy-daemon scanopy-server
     msg_ok "Stopped services"

ct/semaphore.sh

@@ -33,7 +33,7 @@ function update_script() {
     systemctl stop semaphore
     msg_ok "Stopped Service"
 
-    fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary"
+    fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary" "latest" "/opt/semaphore" "semaphore_*_linux_amd64.deb"
 
     msg_info "Starting Service"
     systemctl start semaphore

ct/telegraf.sh

@@ -34,7 +34,7 @@ function update_script() {
 
   msg_info "Updating Telegraf"
   $STD apt update
-  $STD apt upgrade telegraf -y
+  $STD apt upgrade -y telegraf
   msg_ok "Updated Telegraf"
 
   msg_info "Starting Service"

ct/zabbix.sh

@@ -67,10 +67,18 @@ function update_script() {
 
   rm -Rf /etc/apt/sources.list.d/zabbix.list
   cd /tmp
-  ZABBIX_DEB_URL="https://repo.zabbix.com/zabbix/${ZABBIX_VERSION}/debian/pool/main/z/zabbix-release/zabbix-release_latest+debian13_all.deb"
-  curl -fsSL "$ZABBIX_DEB_URL" -o /tmp/zabbix-release_latest+debian13_all.deb
-  $STD dpkg -i zabbix-release_latest+debian13_all.deb
-  rm -rf /tmp/zabbix-release_latest+debian13_all.deb
+
+  if [[ "$ZABBIX_VERSION" == "7.0" ]]; then
+    ZABBIX_DEB_URL="https://repo.zabbix.com/zabbix/${ZABBIX_VERSION}/debian/pool/main/z/zabbix-release/zabbix-release_latest_${ZABBIX_VERSION}+debian13_all.deb"
+    ZABBIX_DEB_FILE="zabbix-release_latest_${ZABBIX_VERSION}+debian13_all.deb"
+  else
+    ZABBIX_DEB_URL="https://repo.zabbix.com/zabbix/${ZABBIX_VERSION}/release/debian/pool/main/z/zabbix-release/zabbix-release_latest+debian13_all.deb"
+    ZABBIX_DEB_FILE="zabbix-release_latest+debian13_all.deb"
+  fi
+
+  curl -fsSL "$ZABBIX_DEB_URL" -o /tmp/"$ZABBIX_DEB_FILE"
+  $STD dpkg -i /tmp/"$ZABBIX_DEB_FILE"
+  rm -rf /tmp/zabbix-release_*.deb
   $STD apt update
 
   $STD apt install --only-upgrade zabbix-server-pgsql zabbix-frontend-php php8.4-pgsql

frontend/public/json/paymenter.json

@@ -11,7 +11,7 @@
   "interface_port": 80,
   "documentation": "https://paymenter.org/docs",
   "website": "https://paymenter.org/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/paymeter.webp",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/paymenter.webp",
   "config_path": "/opt/paymenter/.env",
   "description": "Paymenter is an open source webshop solution for hosting companies. It's developed to provide an more easy way to manage your hosting company.",
   "install_methods": [

frontend/public/json/pihole.json

@@ -23,7 +23,7 @@
                 "ram": 512,
                 "hdd": 2,
                 "os": "debian",
-                "version": "12"
+                "version": "13"
             }
         }
     ],

frontend/public/json/pterodactyl-wings.json

@@ -12,7 +12,7 @@
   "documentation": "https://pterodactyl.io/wings/1.0/installing.html",
   "website": "https://pterodactyl.io",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/pterodactyl.webp",
-  "config_path": "",
+  "config_path": "/etc/pterodactyl/config.yml",
   "description": "Pterodactyl Wings is Pterodactyl's server control plane, built for the rapidly changing gaming industry and designed to be highly performant and secure. Wings provides an HTTP API allowing you to interface directly with running server instances, fetch server logs, generate backups, and control all aspects of the server lifecycle.",
   "install_methods": [
     {

frontend/public/json/qbittorrent-exporter.json

@@ -0,0 +1,46 @@
+{
+  "name": "qbittorrent Exporter",
+  "slug": "qbittorrent-exporter",
+  "categories": [
+    9
+  ],
+  "date_created": "2025-12-18",
+  "type": "addon",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8090,
+  "documentation": "https://github.com/martabal/qbittorrent-exporter",
+  "website": "https://github.com/martabal/qbittorrent-exporter",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/qbittorrent.webp",
+  "config_path": "/opt/qbittorrent-exporter.env",
+  "description": "A fast and lightweight prometheus exporter for qBittorrent ",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "tools/addon/qbittorrent-exporter.sh",
+      "resources": {
+        "cpu": null,
+        "ram": null,
+        "hdd": null,
+        "os": null,
+        "version": null
+      }
+    },
+    {
+      "type": "alpine",
+      "script": "tools/addon/qbittorrent-exporter.sh",
+      "resources": {
+        "cpu": null,
+        "ram": null,
+        "hdd": null,
+        "os": null,
+        "version": null
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/versions.json

@@ -1,13 +1,33 @@
 [
   {
-    "name": "zabbix/zabbix",
-    "version": "7.0.22",
-    "date": "2025-12-17T10:10:49Z"
+    "name": "forgejo/forgejo",
+    "version": "v15.0.0-dev",
+    "date": "2025-12-19T11:43:47Z"
   },
   {
-    "name": "traefik/traefik",
-    "version": "v2.11.33",
-    "date": "2025-12-17T10:10:19Z"
+    "name": "fccview/jotty",
+    "version": "1.14.2",
+    "date": "2025-12-19T11:25:29Z"
+  },
+  {
+    "name": "readeck/readeck",
+    "version": "0.21.5",
+    "date": "2025-12-19T11:22:20Z"
+  },
+  {
+    "name": "release-argus/Argus",
+    "version": "0.28.3",
+    "date": "2025-12-19T11:05:10Z"
+  },
+  {
+    "name": "wazuh/wazuh",
+    "version": "coverity-w51-4.14.2",
+    "date": "2025-12-15T12:34:36Z"
+  },
+  {
+    "name": "TuroYT/snowshare",
+    "version": "v1.2.5",
+    "date": "2025-12-19T10:47:19Z"
   },
   {
     "name": "mattermost/mattermost",
@@ -15,19 +35,224 @@
     "date": "2025-12-17T09:26:24Z"
   },
   {
-    "name": "coollabsio/coolify",
-    "version": "v4.0.0-beta.455",
-    "date": "2025-12-17T09:24:10Z"
+    "name": "morpheus65535/bazarr",
+    "version": "v1.5.3",
+    "date": "2025-09-20T12:12:33Z"
   },
   {
-    "name": "TuroYT/snowshare",
-    "version": "v1.2.2",
-    "date": "2025-12-17T09:07:12Z"
+    "name": "Jackett/Jackett",
+    "version": "v0.24.487",
+    "date": "2025-12-19T05:55:55Z"
+  },
+  {
+    "name": "jhuckaby/Cronicle",
+    "version": "v0.9.102",
+    "date": "2025-12-19T03:45:13Z"
+  },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.80.10.rc.5",
+    "date": "2025-12-19T03:38:23Z"
+  },
+  {
+    "name": "javedh-dev/tracktor",
+    "version": "1.0.1",
+    "date": "2025-12-17T23:14:39Z"
+  },
+  {
+    "name": "mealie-recipes/mealie",
+    "version": "v3.8.0",
+    "date": "2025-12-19T01:37:16Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.5.1",
+    "date": "2025-12-19T00:27:05Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.1.0",
+    "date": "2025-11-23T12:13:34Z"
+  },
+  {
+    "name": "moghtech/komodo",
+    "version": "v1.19.5",
+    "date": "2025-09-27T20:59:46Z"
+  },
+  {
+    "name": "metabase/metabase",
+    "version": "v0.57.x",
+    "date": "2025-12-18T22:02:32Z"
+  },
+  {
+    "name": "chrisbenincasa/tunarr",
+    "version": "v1.0.7",
+    "date": "2025-12-18T21:27:26Z"
+  },
+  {
+    "name": "Stirling-Tools/Stirling-PDF",
+    "version": "v2.1.5",
+    "date": "2025-12-18T20:48:01Z"
+  },
+  {
+    "name": "scanopy/scanopy",
+    "version": "v0.12.4",
+    "date": "2025-12-18T19:25:47Z"
+  },
+  {
+    "name": "rcourtman/Pulse",
+    "version": "v4.36.2",
+    "date": "2025-12-03T22:46:29Z"
+  },
+  {
+    "name": "saltstack/salt",
+    "version": "v3007.10",
+    "date": "2025-12-18T18:14:16Z"
+  },
+  {
+    "name": "go-gitea/gitea",
+    "version": "v1.25.3",
+    "date": "2025-12-18T18:11:48Z"
+  },
+  {
+    "name": "karlomikus/bar-assistant",
+    "version": "v5.11.0",
+    "date": "2025-12-18T18:06:05Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.30.23",
+    "date": "2025-12-18T16:55:01Z"
+  },
+  {
+    "name": "YunoHost/yunohost",
+    "version": "debian/12.1.37",
+    "date": "2025-12-18T16:43:23Z"
+  },
+  {
+    "name": "ollama/ollama",
+    "version": "v0.13.5",
+    "date": "2025-12-18T16:39:08Z"
+  },
+  {
+    "name": "meilisearch/meilisearch",
+    "version": "latest",
+    "date": "2025-12-18T16:38:45Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.7",
+    "date": "2025-12-01T08:14:11Z"
+  },
+  {
+    "name": "paperless-ngx/paperless-ngx",
+    "version": "v2.20.3",
+    "date": "2025-12-18T16:10:13Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.123.7",
+    "date": "2025-12-17T14:01:25Z"
+  },
+  {
+    "name": "immich-app/immich",
+    "version": "v2.4.0",
+    "date": "2025-12-18T14:51:33Z"
+  },
+  {
+    "name": "docker/compose",
+    "version": "v5.0.1",
+    "date": "2025-12-18T14:22:38Z"
+  },
+  {
+    "name": "coollabsio/coolify",
+    "version": "v4.0.0-beta.458",
+    "date": "2025-12-18T12:23:23Z"
+  },
+  {
+    "name": "juanfont/headscale",
+    "version": "v0.27.1",
+    "date": "2025-11-11T19:32:29Z"
+  },
+  {
+    "name": "tailscale/tailscale",
+    "version": "v1.92.4",
+    "date": "2025-12-18T10:32:44Z"
+  },
+  {
+    "name": "Kozea/Radicale",
+    "version": "v3.5.10",
+    "date": "2025-12-18T07:14:13Z"
+  },
+  {
+    "name": "zabbix/zabbix",
+    "version": "7.4.6",
+    "date": "2025-12-18T07:00:26Z"
+  },
+  {
+    "name": "chrisvel/tududi",
+    "version": "v0.88.1",
+    "date": "2025-12-18T05:01:07Z"
+  },
+  {
+    "name": "comfyanonymous/ComfyUI",
+    "version": "v0.5.1",
+    "date": "2025-12-18T03:08:43Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.30.1",
+    "date": "2025-12-18T02:41:34Z"
+  },
+  {
+    "name": "goauthentik/authentik",
+    "version": "version/2025.10.3",
+    "date": "2025-12-16T18:00:53Z"
+  },
+  {
+    "name": "emqx/emqx",
+    "version": "6.1.0-alpha.2",
+    "date": "2025-12-17T20:15:23Z"
+  },
+  {
+    "name": "influxdata/influxdb",
+    "version": "v2.8.0",
+    "date": "2025-12-12T20:25:00Z"
+  },
+  {
+    "name": "HydroshieldMKII/Guardian",
+    "version": "v1.3.2",
+    "date": "2025-12-17T19:31:10Z"
+  },
+  {
+    "name": "coder/code-server",
+    "version": "v4.107.0",
+    "date": "2025-12-17T18:59:21Z"
+  },
+  {
+    "name": "neo4j/neo4j",
+    "version": "5.26.19",
+    "date": "2025-12-17T18:17:55Z"
+  },
+  {
+    "name": "semaphoreui/semaphore",
+    "version": "v2.16.47",
+    "date": "2025-12-17T15:36:28Z"
+  },
+  {
+    "name": "NodeBB/NodeBB",
+    "version": "v4.7.1",
+    "date": "2025-12-17T15:18:55Z"
   },
   {
     "name": "bunkerity/bunkerweb",
-    "version": "v1.6.7-rc1",
-    "date": "2025-12-17T08:57:07Z"
+    "version": "testing",
+    "date": "2025-12-16T11:13:20Z"
+  },
+  {
+    "name": "traefik/traefik",
+    "version": "v2.11.33",
+    "date": "2025-12-17T10:10:19Z"
   },
   {
     "name": "zitadel/zitadel",
@@ -39,11 +264,6 @@
     "version": "v0.105.1",
     "date": "2025-12-17T08:48:52Z"
   },
-  {
-    "name": "comfyanonymous/ComfyUI",
-    "version": "v0.5.0",
-    "date": "2025-12-17T08:46:11Z"
-  },
   {
     "name": "passbolt/passbolt_api",
     "version": "v5.8.0-test.3",
@@ -59,11 +279,6 @@
     "version": "v11.9.0",
     "date": "2025-12-17T08:26:50Z"
   },
-  {
-    "name": "BerriAI/litellm",
-    "version": "v1.80.10.rc.3",
-    "date": "2025-12-17T07:48:43Z"
-  },
   {
     "name": "firefly-iii/firefly-iii",
     "version": "v6.4.14",
@@ -74,36 +289,16 @@
     "version": "v25.4",
     "date": "2025-10-09T10:27:01Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.468",
-    "date": "2025-12-17T05:55:30Z"
-  },
   {
     "name": "nickheyer/discopanel",
     "version": "v1.0.16",
     "date": "2025-12-17T04:47:13Z"
   },
-  {
-    "name": "metabase/metabase",
-    "version": "v0.58.0-beta",
-    "date": "2025-12-17T03:57:33Z"
-  },
   {
     "name": "9001/copyparty",
     "version": "v1.19.23",
     "date": "2025-12-17T00:51:11Z"
   },
-  {
-    "name": "jeedom/core",
-    "version": "4.5",
-    "date": "2025-12-17T00:27:05Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.1.0",
-    "date": "2025-11-23T12:13:34Z"
-  },
   {
     "name": "esphome/esphome",
     "version": "2025.12.0",
@@ -119,16 +314,6 @@
     "version": "1.1.7",
     "date": "2025-12-16T21:44:58Z"
   },
-  {
-    "name": "tailscale/tailscale",
-    "version": "v1.92.3",
-    "date": "2025-12-16T21:19:10Z"
-  },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.7",
-    "date": "2025-12-01T08:14:11Z"
-  },
   {
     "name": "prometheus-pve/prometheus-pve-exporter",
     "version": "v3.7.0",
@@ -139,86 +324,31 @@
     "version": "v4.4.8",
     "date": "2025-12-09T16:29:50Z"
   },
-  {
-    "name": "goauthentik/authentik",
-    "version": "version/2025.10.3",
-    "date": "2025-12-16T18:00:53Z"
-  },
   {
     "name": "crafty-controller/crafty-4",
     "version": "v4.6.2",
     "date": "2025-12-16T17:54:19Z"
   },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v1.0.4",
-    "date": "2025-12-16T17:31:11Z"
-  },
   {
     "name": "fuma-nama/fumadocs",
     "version": "fumadocs-mdx@14.1.1",
     "date": "2025-12-16T15:32:59Z"
   },
-  {
-    "name": "meilisearch/meilisearch",
-    "version": "prototype-v1.30.0-support-aws-irsa.2",
-    "date": "2025-12-16T14:35:14Z"
-  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.542",
     "date": "2025-12-16T13:49:44Z"
   },
-  {
-    "name": "release-argus/Argus",
-    "version": "0.28.2",
-    "date": "2025-12-16T12:36:26Z"
-  },
   {
     "name": "prometheus/prometheus",
     "version": "v3.8.1",
     "date": "2025-12-16T09:59:22Z"
   },
-  {
-    "name": "rcourtman/Pulse",
-    "version": "v4.36.2",
-    "date": "2025-12-03T22:46:29Z"
-  },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.123.6",
-    "date": "2025-12-15T14:22:59Z"
-  },
   {
     "name": "sabnzbd/sabnzbd",
     "version": "4.5.5",
     "date": "2025-10-24T11:12:22Z"
   },
-  {
-    "name": "morpheus65535/bazarr",
-    "version": "v1.5.3",
-    "date": "2025-09-20T12:12:33Z"
-  },
-  {
-    "name": "ollama/ollama",
-    "version": "v0.13.4-rc2",
-    "date": "2025-12-16T02:57:20Z"
-  },
-  {
-    "name": "Stirling-Tools/Stirling-PDF",
-    "version": "v2.1.4",
-    "date": "2025-12-16T00:02:18Z"
-  },
-  {
-    "name": "scanopy/scanopy",
-    "version": "v0.12.1",
-    "date": "2025-12-15T22:21:36Z"
-  },
-  {
-    "name": "semaphoreui/semaphore",
-    "version": "v2.16.46",
-    "date": "2025-12-15T22:07:08Z"
-  },
   {
     "name": "azukaar/Cosmos-Server",
     "version": "v0.19.0",
@@ -264,11 +394,6 @@
     "version": "v0.16.3",
     "date": "2025-12-15T12:56:50Z"
   },
-  {
-    "name": "wazuh/wazuh",
-    "version": "coverity-w51-4.14.2",
-    "date": "2025-12-15T12:34:36Z"
-  },
   {
     "name": "LimeSurvey/LimeSurvey",
     "version": "6.16.2+251209",
@@ -364,11 +489,6 @@
     "version": "v4.4.0",
     "date": "2025-12-13T22:49:07Z"
   },
-  {
-    "name": "karlomikus/bar-assistant",
-    "version": "v5.10.0",
-    "date": "2025-12-13T20:17:27Z"
-  },
   {
     "name": "fosrl/pangolin",
     "version": "1.13.1",
@@ -404,41 +524,16 @@
     "version": "cli/v0.29.1",
     "date": "2025-12-13T13:55:51Z"
   },
-  {
-    "name": "chrisvel/tududi",
-    "version": "v0.88.0",
-    "date": "2025-12-13T09:36:24Z"
-  },
   {
     "name": "Dokploy/dokploy",
     "version": "v0.26.2",
     "date": "2025-12-13T07:48:09Z"
   },
-  {
-    "name": "mealie-recipes/mealie",
-    "version": "v3.7.0",
-    "date": "2025-12-13T01:20:58Z"
-  },
-  {
-    "name": "paperless-ngx/paperless-ngx",
-    "version": "v2.20.2",
-    "date": "2025-12-12T23:47:48Z"
-  },
-  {
-    "name": "fccview/jotty",
-    "version": "1.13.1",
-    "date": "2025-12-12T21:34:22Z"
-  },
   {
     "name": "mongodb/mongo",
     "version": "r7.0.27",
     "date": "2025-12-12T20:54:32Z"
   },
-  {
-    "name": "influxdata/influxdb",
-    "version": "v2.8.0",
-    "date": "2025-12-12T20:25:00Z"
-  },
   {
     "name": "homarr-labs/homarr",
     "version": "v1.46.0",
@@ -459,11 +554,6 @@
     "version": "4.1.2",
     "date": "2025-12-03T16:12:05Z"
   },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.30.0",
-    "date": "2025-12-12T14:03:52Z"
-  },
   {
     "name": "ventoy/Ventoy",
     "version": "v1.1.09",
@@ -484,11 +574,6 @@
     "version": "v8.3.7",
     "date": "2025-12-12T09:13:40Z"
   },
-  {
-    "name": "coder/code-server",
-    "version": "v4.106.3",
-    "date": "2025-12-01T22:06:12Z"
-  },
   {
     "name": "theonedev/onedev",
     "version": "v13.1.5",
@@ -504,11 +589,6 @@
     "version": "0.43.1",
     "date": "2025-12-11T22:45:52Z"
   },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.30.22",
-    "date": "2025-12-11T18:02:06Z"
-  },
   {
     "name": "pommee/goaway",
     "version": "v0.62.24",
@@ -519,11 +599,6 @@
     "version": "v2.13.2",
     "date": "2025-12-11T06:31:24Z"
   },
-  {
-    "name": "moghtech/komodo",
-    "version": "v1.19.5",
-    "date": "2025-09-27T20:59:46Z"
-  },
   {
     "name": "TwiN/gatus",
     "version": "v5.33.1",
@@ -584,11 +659,6 @@
     "version": "v1.144.0",
     "date": "2025-12-09T16:29:00Z"
   },
-  {
-    "name": "readeck/readeck",
-    "version": "0.21.4",
-    "date": "2025-12-09T15:25:28Z"
-  },
   {
     "name": "gelbphoenix/autocaliweb",
     "version": "v0.11.3",
@@ -684,11 +754,6 @@
     "version": "v0.28.0",
     "date": "2025-12-06T13:32:18Z"
   },
-  {
-    "name": "YunoHost/yunohost",
-    "version": "debian/13.0.2",
-    "date": "2025-12-06T10:46:12Z"
-  },
   {
     "name": "toniebox-reverse-engineering/teddycloud",
     "version": "tc_v0.6.5",
@@ -704,11 +769,6 @@
     "version": "v3.3.0",
     "date": "2025-12-06T06:18:23Z"
   },
-  {
-    "name": "HydroshieldMKII/Guardian",
-    "version": "v1.3.1",
-    "date": "2025-12-05T19:12:48Z"
-  },
   {
     "name": "community-scripts/ProxmoxVE-Local",
     "version": "v0.5.2",
@@ -719,11 +779,6 @@
     "version": "flowise@3.0.12",
     "date": "2025-12-05T15:02:01Z"
   },
-  {
-    "name": "emqx/emqx",
-    "version": "e6.1.0-streams.1",
-    "date": "2025-12-05T12:27:36Z"
-  },
   {
     "name": "transmission/transmission",
     "version": "4.0.1-beta.1",
@@ -799,16 +854,6 @@
     "version": "v6.2.4",
     "date": "2025-12-02T17:47:52Z"
   },
-  {
-    "name": "docker/compose",
-    "version": "v5.0.0",
-    "date": "2025-12-02T10:33:31Z"
-  },
-  {
-    "name": "neo4j/neo4j",
-    "version": "5.26.18",
-    "date": "2025-12-02T09:25:19Z"
-  },
   {
     "name": "syncthing/syncthing",
     "version": "v2.0.12",
@@ -849,11 +894,6 @@
     "version": "v2.4.7",
     "date": "2025-11-30T20:59:51Z"
   },
-  {
-    "name": "juanfont/headscale",
-    "version": "v0.27.1",
-    "date": "2025-11-11T19:32:29Z"
-  },
   {
     "name": "hargata/lubelog",
     "version": "v1.5.5",
@@ -879,11 +919,6 @@
     "version": "v25.9.0",
     "date": "2025-11-29T16:37:28Z"
   },
-  {
-    "name": "Kozea/Radicale",
-    "version": "v3.5.9",
-    "date": "2025-11-29T14:35:45Z"
-  },
   {
     "name": "authelia/authelia",
     "version": "v4.39.15",
@@ -929,16 +964,6 @@
     "version": "v1.7.8",
     "date": "2025-11-26T22:35:03Z"
   },
-  {
-    "name": "jhuckaby/Cronicle",
-    "version": "v0.9.101",
-    "date": "2025-11-26T17:14:35Z"
-  },
-  {
-    "name": "NodeBB/NodeBB",
-    "version": "v4.7.0",
-    "date": "2025-11-26T16:59:45Z"
-  },
   {
     "name": "NLnetLabs/unbound",
     "version": "release-1.24.2",
@@ -979,11 +1004,6 @@
     "version": "v2.5.0",
     "date": "2025-11-23T12:49:50Z"
   },
-  {
-    "name": "go-gitea/gitea",
-    "version": "v1.25.2",
-    "date": "2025-11-22T19:37:02Z"
-  },
   {
     "name": "TechnitiumSoftware/DnsServer",
     "version": "v14.2.0",
@@ -994,11 +1014,6 @@
     "version": "v5.6.1",
     "date": "2025-11-21T16:51:21Z"
   },
-  {
-    "name": "forgejo/forgejo",
-    "version": "v13.0.3",
-    "date": "2025-11-21T12:43:04Z"
-  },
   {
     "name": "seriousm4x/UpSnap",
     "version": "5.2.4",
@@ -1019,11 +1034,6 @@
     "version": "v2.1.11",
     "date": "2025-11-20T20:14:44Z"
   },
-  {
-    "name": "saltstack/salt",
-    "version": "v3007.9",
-    "date": "2025-11-20T17:58:32Z"
-  },
   {
     "name": "kimai/kimai",
     "version": "2.44.0",
@@ -1039,11 +1049,6 @@
     "version": "5.12.0",
     "date": "2025-11-20T06:18:58Z"
   },
-  {
-    "name": "immich-app/immich",
-    "version": "v2.3.1",
-    "date": "2025-11-20T03:10:27Z"
-  },
   {
     "name": "nextcloud/nextcloudpi",
     "version": "v1.56.0",
@@ -1179,11 +1184,6 @@
     "version": "v0.9.1",
     "date": "2025-11-06T02:26:53Z"
   },
-  {
-    "name": "javedh-dev/tracktor",
-    "version": "0.5.1",
-    "date": "2025-11-05T16:14:37Z"
-  },
   {
     "name": "getumbrel/umbrel",
     "version": "1.5.0",

install/immich-install.sh

@@ -99,10 +99,15 @@ if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   $STD apt install -y --no-install-recommends patchelf
   tmp_dir=$(mktemp -d)
   $STD pushd "$tmp_dir"
-  curl -fsSLO https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17384.11/intel-igc-core_1.0.17384.11_amd64.deb
-  curl -fsSLO https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17384.11/intel-igc-opencl_1.0.17384.11_amd64.deb
-  curl -fsSLO https://github.com/intel/compute-runtime/releases/download/24.31.30508.7/intel-opencl-icd_24.31.30508.7_amd64.deb
-  curl -fsSLO https://github.com/intel/compute-runtime/releases/download/24.31.30508.7/libigdgmm12_22.4.1_amd64.deb
+  curl -fsSLZ -O "https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17537.24/intel-igc-core_1.0.17537.24_amd64.deb" \
+    -O "https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17537.24/intel-igc-opencl_1.0.17537.24_amd64.deb" \
+    -O "https://github.com/intel/compute-runtime/releases/download/24.35.30872.36/intel-opencl-icd-legacy1_24.35.30872.36_amd64.deb" \
+    -O "https://github.com/intel/intel-graphics-compiler/releases/download/v2.22.2/intel-igc-core-2_2.22.2+20121_amd64.deb" \
+    -O "https://github.com/intel/intel-graphics-compiler/releases/download/v2.22.2/intel-igc-opencl-2_2.22.2+20121_amd64.deb" \
+    -O "https://github.com/intel/compute-runtime/releases/download/25.44.36015.5/intel-opencl-icd_25.44.36015.5-0_amd64.deb" \
+    -O "https://github.com/intel/compute-runtime/releases/download/25.44.36015.5/libigdgmm12_22.8.2_amd64.deb"
+  $STD apt install -y ./libigdgmm12*.deb
+  rm ./libigdgmm12*.deb
   $STD apt install -y ./*.deb
   $STD apt-mark hold libigdgmm12
   $STD popd
@@ -291,7 +296,7 @@ GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p "$INSTALL_DIR"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.3.1" "$SRC_DIR"
+fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.4.0" "$SRC_DIR"
 
 msg_info "Installing ${APPLICATION} (patience)"
 

install/linkwarden-install.sh

@@ -62,7 +62,7 @@ EOF
 $STD yarn prisma:generate
 $STD yarn web:build
 $STD yarn prisma:deploy
-rm -rf ~/.cargo/registry ~/.cargo/git ~/.cargo/.package-cache ~/.rustup
+rm -rf ~/.cargo/registry ~/.cargo/git ~/.cargo/.package-cache
 rm -rf /root/.cache/yarn
 rm -rf /opt/linkwarden/.next/cache
 msg_ok "Installed Linkwarden"

install/pterodactyl-wings-install.sh

@@ -21,13 +21,8 @@ $STD sh <(curl -fsSL https://get.docker.com)
 systemctl enable -q --now docker
 msg_ok "Installed Docker"
 
-msg_info "Installing Pterodactyl Wings"
-RELEASE=$(curl -fsSL https://api.github.com/repos/pterodactyl/wings/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/pterodactyl/wings/releases/download/v${RELEASE}/wings_linux_amd64" -o "/usr/local/bin/wings"
-chmod u+x /usr/local/bin/wings
+fetch_and_deploy_gh_release "wings" "pterodactyl/wings" "singlefile" "latest" "/usr/local/bin" "wings_linux_amd64"
 mkdir -p /etc/pterodactyl
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
-msg_ok "Installed Pterodactyl Wings"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/wings.service

install/qdrant-install.sh

@@ -16,13 +16,12 @@ update_os
 fetch_and_deploy_gh_release "qdrant" "qdrant/qdrant" "binary" "latest" "/usr/bin/qdrant"
 
 msg_info "Creating Qdrant Configuration"
-mkdir -p /var/lib/qdrant/storage
-mkdir -p /var/lib/qdrant/snapshots
 mkdir -p /etc/qdrant
+mkdir -p /var/lib/qdrant/{storage,snapshots}
 chown -R root:root /var/lib/qdrant
 chmod -R 755 /var/lib/qdrant
 
-cat >/etc/qdrant/config.yaml <<EOF
+cat <<EOF >/etc/qdrant/config.yaml
 log_level: INFO
 
 storage:
@@ -38,7 +37,7 @@ EOF
 msg_ok "Created Qdrant Configuration"
 
 msg_info "Creating Qdrant Service"
-cat >/etc/systemd/system/qdrant.service <<EOF
+cat <<EOF >/etc/systemd/system/qdrant.service
 [Unit]
 Description=Qdrant Vector Search Engine
 After=network-online.target

install/rabbitmq-install.sh

@@ -15,51 +15,34 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y \
-  lsb-release \
-  apt-transport-https \
-  make
+$STD apt install -y apt-transport-https
 msg_ok "Installed Dependencies"
 
-msg_info "Adding RabbitMQ signing key"
-curl -fsSL "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" | gpg --dearmor >/usr/share/keyrings/com.rabbitmq.team.gpg
-msg_ok "Signing keys added"
+setup_deb822_repo \
+  "rabbitmq" \
+  "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" \
+  "https://deb1.rabbitmq.com/rabbitmq-server/debian/trixie" \
+  "trixie"
 
-msg_info "Adding RabbitMQ repository"
-cat <<EOF >/etc/apt/sources.list.d/rabbitmq.list
-## Modern Erlang/OTP releases
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-erlang/debian/bookworm bookworm main
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-erlang/debian/bookworm bookworm main
+msg_info "Setting up RabbitMQ"
+$STD apt install -y \
+  erlang-base erlang-asn1 erlang-crypto erlang-eldap erlang-ftp \
+  erlang-inets erlang-mnesia erlang-os-mon erlang-parsetools \
+  erlang-public-key erlang-runtime-tools erlang-snmp erlang-ssl \
+  erlang-syntax-tools erlang-tftp erlang-tools erlang-xmerl
+$STD apt install -y --fix-missing rabbitmq-server
+msg_ok "Setup RabbitMQ "
 
-## Provides modern RabbitMQ releases
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-server/debian/bookworm bookworm main
-deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-server/debian/bookworm bookworm main
-EOF
-msg_ok "RabbitMQ repository added"
-
-msg_info "Updating package list"
-$STD apt update -y
-msg_ok "Package list updated"
-
-msg_info "Installing Erlang & RabbitMQ server"
-$STD apt install -y erlang-base \
-  erlang-asn1 erlang-crypto erlang-eldap erlang-ftp erlang-inets \
-  erlang-mnesia erlang-os-mon erlang-parsetools erlang-public-key \
-  erlang-runtime-tools erlang-snmp erlang-ssl \
-  erlang-syntax-tools erlang-tftp erlang-tools erlang-xmerl \
-  rabbitmq-server
-msg_ok "RabbitMQ server installed"
-
-msg_info "Starting RabbitMQ service"
+msg_info "Starting Service"
 systemctl enable -q --now rabbitmq-server
-msg_ok "RabbitMQ service started"
+msg_ok "Started Service"
 
-msg_info "Enabling RabbitMQ management plugin"
+msg_info "Enabling RabbitMQ Management Plugin"
 $STD rabbitmq-plugins enable rabbitmq_management
 $STD rabbitmqctl enable_feature_flag all
-msg_ok "RabbitMQ management plugin enabled"
+msg_ok "Enabled RabbitMQ Management Plugin"
 
-msg_info "Create User"
+msg_info "Creating User"
 $STD rabbitmqctl add_user proxmox proxmox
 $STD rabbitmqctl set_user_tags proxmox administrator
 $STD rabbitmqctl set_permissions -p / proxmox ".*" ".*" ".*"

install/rdtclient-install.sh

@@ -13,20 +13,21 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing ASP.NET Core Runtime"
-curl -fsSL "https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb" -o packages-microsoft-prod.deb
-$STD dpkg -i packages-microsoft-prod.deb
-$STD apt update
-$STD apt install -y dotnet-sdk-9.0
-msg_ok "Installed ASP.NET Core Runtime"
+msg_info "Installing Dependencies"
+setup_deb822_repo \
+  "microsoft" \
+  "https://packages.microsoft.com/keys/microsoft-2025.asc" \
+  "https://packages.microsoft.com/debian/13/prod/" \
+  "trixie"
+$STD apt install -y aspnetcore-runtime-9.0
+msg_ok "Installed Dependencies"
 
 fetch_and_deploy_gh_release "rdt-client" "rogerfar/rdt-client" "prebuild" "latest" "/opt/rdtc" "RealDebridClient.zip"
 
-msg_info "Configuring rdtclient"
+msg_info "Setting up rdtclient"
 cd /opt/rdtc
 mkdir -p data/{db,downloads}
 sed -i 's#/data/db/#/opt/rdtc&#g' /opt/rdtc/appsettings.json
-rm -f ~/packages-microsoft-prod.deb
 msg_ok "Configured rdtclient"
 
 msg_info "Creating Service"
@@ -43,7 +44,7 @@ User=root
 [Install]
 WantedBy=multi-user.target
 EOF
-$STD systemctl enable -q --now rdtc
+systemctl enable -q --now rdtc
 msg_ok "Created Service"
 
 motd_ssh

install/reactive-resume-install.sh

@@ -19,30 +19,19 @@ curl -fsSL https://dl.min.io/server/minio/release/linux-amd64/minio.deb -o minio
 $STD dpkg -i minio.deb
 msg_ok "Installed Dependencies"
 
+import_local_ip
 PG_VERSION="16" setup_postgresql
-NODE_VERSION="22" NODE_MODULE="pnpm@latest" setup_nodejs
-
-msg_info "Setting up Database"
-DB_USER="rxresume"
-DB_NAME="rxresume"
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD sudo -u postgres psql -c "CREATE USER $DB_USER WITH ENCRYPTED PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME to $DB_USER;"
-$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
-msg_ok "Set up Database"
+PG_DB_NAME="rxresume" PG_DB_USER="rxresume" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
+NODE_VERSION="24" NODE_MODULE="pnpm@latest" setup_nodejs
+fetch_and_deploy_gh_release "Reactive-Resume" "lazy-media/Reactive-Resume"
 
+msg_info "Setting up Reactive-Resume"
 MINIO_PASS=$(openssl rand -base64 48)
 ACCESS_TOKEN=$(openssl rand -base64 48)
 REFRESH_TOKEN=$(openssl rand -base64 48)
 CHROME_TOKEN=$(openssl rand -hex 32)
-LOCAL_IP=$(hostname -I | awk '{print $1}')
 TAG=$(curl -fsSL https://api.github.com/repos/browserless/browserless/tags?per_page=1 | grep "name" | awk '{print substr($2, 3, length($2)-4) }')
-
-fetch_and_deploy_gh_release "Reactive-Resume" "lazy-media/Reactive-Resume"
-
-msg_info "Installing $APPLICATION"
-cd /opt/"$APPLICATION"
+cd /opt/Reactive-Resume
 export CI="true"
 export PUPPETEER_SKIP_DOWNLOAD="true"
 export NODE_ENV="production"
@@ -50,7 +39,7 @@ export NEXT_TELEMETRY_DISABLED=1
 $STD pnpm install --frozen-lockfile
 $STD pnpm run build
 $STD pnpm run prisma:generate
-msg_ok "Installed $APPLICATION"
+msg_ok "Setup Reactive-Resume"
 
 msg_info "Installing Browserless (Patience)"
 cd /tmp
@@ -76,13 +65,14 @@ MINIO_ROOT_PASSWORD="${MINIO_PASS}"
 MINIO_VOLUMES=/opt/minio
 MINIO_OPTS="--address :9000 --console-address 127.0.0.1:9001"
 EOF
-cat <<EOF >/opt/"$APPLICATION"/.env
+
+cat <<EOF >/opt/Reactive-Resume/.env
 NODE_ENV=production
 PORT=3000
 # for use behind a reverse proxy, use your FQDN for PUBLIC_URL and STORAGE_URL
 PUBLIC_URL=http://${LOCAL_IP}:3000
 STORAGE_URL=http://${LOCAL_IP}:9000/rxresume
-DATABASE_URL=postgresql://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}?schema=public
+DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}?schema=public
 ACCESS_TOKEN_SECRET=${ACCESS_TOKEN}
 REFRESH_TOKEN_SECRET=${REFRESH_TOKEN}
 CHROME_PORT=8080
@@ -110,19 +100,13 @@ STORAGE_SKIP_BUCKET_CHECK=false
 # GOOGLE_CLIENT_SECRET=
 # GOOGLE_CALLBACK_URL=http://localhost:5173/api/auth/google/callback
 EOF
+
 cat <<EOF >/opt/browserless/.env
 DEBUG=browserless*,-**:verbose
 HOST=localhost
 PORT=8080
 TOKEN=${CHROME_TOKEN}
 EOF
-{
-  echo "${APPLICATION} Credentials"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-  echo "Database Name: $DB_NAME"
-  echo "Minio Root Password: ${MINIO_PASS}"
-} >>~/"$APPLICATION".creds
 rm -f /tmp/v"$TAG".zip
 rm -f /tmp/minio.deb
 msg_ok "Configured applications"
@@ -137,15 +121,15 @@ WorkingDirectory=/usr/local/bin
 EnvironmentFile=/opt/minio/.env
 EOF
 
-cat <<EOF >/etc/systemd/system/"$APPLICATION".service
+cat <<EOF >/etc/systemd/system/Reactive-Resume.service
 [Unit]
-Description=${APPLICATION} Service
+Description=Reactive-Resume Service
 After=network.target postgresql.service minio.service
 Wants=postgresql.service minio.service
 
 [Service]
-WorkingDirectory=/opt/${APPLICATION}
-EnvironmentFile=/opt/${APPLICATION}/.env
+WorkingDirectory=/opt/Reactive-Resume
+EnvironmentFile=/opt/Reactive-Resume/.env
 ExecStart=/usr/bin/pnpm run start
 Restart=always
 
@@ -156,7 +140,7 @@ EOF
 cat <<EOF >/etc/systemd/system/browserless.service
 [Unit]
 Description=Browserless service
-After=network.target ${APPLICATION}.service
+After=network.target Reactive-Resume.service
 
 [Service]
 WorkingDirectory=/opt/browserless
@@ -168,7 +152,7 @@ Restart=unless-stopped
 WantedBy=multi-user.target
 EOF
 systemctl daemon-reload
-systemctl enable -q --now minio.service "$APPLICATION".service browserless.service
+systemctl enable -q --now minio.service Reactive-Resume.service browserless.service
 msg_ok "Created Services"
 
 motd_ssh

install/redis-install.sh

@@ -14,25 +14,22 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y \
-  apt-transport-https \
-  lsb-release
+$STD apt install -y apt-transport-https
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Redis"
-curl -fsSL "https://packages.redis.io/gpg" | gpg --dearmor >/usr/share/keyrings/redis-archive-keyring.gpg
-cat <<EOF >/etc/apt/sources.list.d/redis.sources
-Types: deb
-URIs: https://packages.redis.io/deb
-Suites: $(lsb_release -cs)
-Components: main
-Signed-By: /usr/share/keyrings/redis-archive-keyring.gpg
-EOF
-$STD apt update
+msg_info "Setting up Redis Repository"
+setup_deb822_repo \
+  "redis" \
+  "https://packages.redis.io/gpg" \
+  "https://packages.redis.io/deb" \
+  "trixie"
+msg_ok "Setup Redis Repository"
+
+msg_info "Setting up Redis"
 $STD apt install -y redis
 sed -i 's/^bind .*/bind 0.0.0.0/' /etc/redis/redis.conf
 systemctl enable -q --now redis-server
-msg_ok "Installed Redis"
+msg_ok "Setup Redis"
 
 motd_ssh
 customize

install/reitti-install.sh

@@ -23,25 +23,7 @@ msg_ok "Installed Dependencies"
 
 JAVA_VERSION="24" setup_java
 PG_VERSION="17" PG_MODULES="postgis" setup_postgresql
-
-msg_info "Setting up PostgreSQL"
-DB_NAME="reitti_db"
-DB_USER="reitti"
-DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC';"
-$STD sudo -u postgres psql -d "$DB_NAME" -c "CREATE EXTENSION IF NOT EXISTS postgis;"
-$STD sudo -u postgres psql -d "$DB_NAME" -c "CREATE EXTENSION IF NOT EXISTS postgis_topology;"
-{
-  echo "Reitti Credentials"
-  echo "Database Name: $DB_NAME"
-  echo "Database User: $DB_USER"
-  echo "Database Password: $DB_PASS"
-} >>~/reitti.creds
-msg_ok "PostgreSQL Setup Completed"
+PG_DB_NAME="reitti_db" PG_DB_USER="reitti" setup_postgresql_db
 
 msg_info "Configuring RabbitMQ"
 RABBIT_USER="reitti"
@@ -71,9 +53,9 @@ cat <<EOF >/opt/reitti/application.properties
 reitti.server.advertise-uri=http://127.0.0.1:8080
 
 # PostgreSQL Database Connection
-spring.datasource.url=jdbc:postgresql://127.0.0.1:5432/$DB_NAME
-spring.datasource.username=$DB_USER
-spring.datasource.password=$DB_PASS
+spring.datasource.url=jdbc:postgresql://127.0.0.1:5432/$PG_DB_NAME
+spring.datasource.username=$PG_DB_USER
+spring.datasource.password=$PG_DB_PASS
 spring.datasource.driver-class-name=org.postgresql.Driver
 
 # Flyway Database Migrations
@@ -132,7 +114,7 @@ Restart=on-failure
 WantedBy=multi-user.target
 EOF
 
-cat <<'EOF' >/etc/systemd/system/photon.service
+cat <<EOF >/etc/systemd/system/photon.service
 [Unit]
 Description=Photon Geocoding Service (Germany, OpenSearch)
 After=network.target

install/resiliosync-install.sh

@@ -14,16 +14,13 @@ network_check
 update_os
 
 msg_info "Setting up Resilio Sync Repository"
-curl -fsSL "https://linux-packages.resilio.com/resilio-sync/key.asc" >/usr/share/keyrings/resilio-sync-archive-keyring.asc
-cat <<EOF >/etc/apt/sources.list.d/resilio-sync.sources
-Types: deb
-URIs: http://linux-packages.resilio.com/resilio-sync/deb
-Suites: resilio-sync
-Components: non-free
-Signed-By: /usr/share/keyrings/resilio-sync-archive-keyring.asc
-EOF
-$STD apt update
-msg_ok "Resilio Sync Repository Setup"
+setup_deb822_repo \
+  "resilio" \
+  "https://linux-packages.resilio.com/resilio-sync/key.asc" \
+  "http://linux-packages.resilio.com/resilio-sync/deb" \
+  "resilio-sync" \
+  "non-free"
+msg_ok "Setup Resilio Sync Repository"
 
 msg_info "Installing Resilio Sync"
 $STD apt install -y resilio-sync

install/salt-install.sh

@@ -13,19 +13,16 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt install -y jq
-msg_ok "Installed Dependencies"
-
-msg_info "Setup Salt Repo"
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://packages.broadcom.com/artifactory/api/security/keypair/SaltProjectKey/public -o /etc/apt/keyrings/salt-archive-keyring.pgp
-curl -fsSL https://github.com/saltstack/salt-install-guide/releases/latest/download/salt.sources -o /etc/apt/sources.list.d/salt.sources
-$STD apt update
+msg_info "Setting up Salt Repo"
+setup_deb822_repo \
+  "salt" \
+  "https://packages.broadcom.com/artifactory/api/security/keypair/SaltProjectKey/public" \
+  "https://packages.broadcom.com/artifactory/saltproject-deb" \
+  "stable"
 msg_ok "Setup Salt Repo"
 
 msg_info "Installing Salt"
-RELEASE=$(curl -fsSL https://api.github.com/repos/saltstack/salt/releases/latest | jq -r .tag_name | sed 's/^v//')
+RELEASE=$(get_latest_github_release "saltstack/salt")
 cat <<EOF >/etc/apt/preferences.d/salt-pin-1001
 Package: salt-*
 Pin: version ${RELEASE}

install/semaphore-install.sh

@@ -15,22 +15,15 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt install -y git
+setup_deb822_repo \
+  "ansible" \
+  "https://keyserver.ubuntu.com/pks/lookup?fingerprint=on&op=get&search=0x6125E2A8C77F2818FB7BD15B93C4A3FD7BB9C367" \
+  "http://ppa.launchpad.net/ansible/ansible/ubuntu" \
+  "jammy"
+$STD apt install -y ansible
 msg_ok "Installed Dependencies"
 
-msg_info "Setting up Ansible"
-curl -fsSL "https://keyserver.ubuntu.com/pks/lookup?fingerprint=on&op=get&search=0x6125E2A8C77F2818FB7BD15B93C4A3FD7BB9C367" | gpg --dearmor -o /usr/share/keyrings/ansible-archive-keyring.gpg
-cat <<EOF >/etc/apt/sources.list.d/ansible.sources
-Types: deb
-URIs: http://ppa.launchpad.net/ansible/ansible/ubuntu
-Suites: jammy
-Components: main
-Signed-By: /usr/share/keyrings/ansible-archive-keyring.gpg
-EOF
-$STD apt update
-$STD apt install -y ansible
-msg_ok "Set up Ansible"
-
-fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary"
+fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary" "latest" "/opt/semaphore" "semaphore_*_linux_amd64.deb"
 
 msg_info "Configuring Semaphore"
 mkdir -p /opt/semaphore
@@ -70,7 +63,6 @@ RestartSec=10s
 [Install]
 WantedBy=multi-user.target
 EOF
-
 systemctl enable -q --now semaphore
 msg_ok "Created Service"
 

install/speedtest-tracker-install.sh

@@ -71,8 +71,6 @@ SESSION_LIFETIME=120
 
 SPEEDTEST_SCHEDULE="0 */6 * * *"
 SPEEDTEST_SERVERS=
-SPEEDTEST_EXTERNAL_IP_URL=https://ipecho.net/plain
-SPEEDTEST_INTERNET_CHECK_HOSTNAME=1.1.1.1
 PRUNE_RESULTS_OLDER_THAN=0
 
 DISPLAY_TIMEZONE=${TIMEZONE}

install/telegraf-install.sh

@@ -13,27 +13,17 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Adding Telegraf key and repository"
-curl -fsSL -O https://repos.influxdata.com/influxdata-archive.key
-gpg --show-keys --with-fingerprint --with-colons ./influxdata-archive.key 2>&1 |
-  grep -q '^fpr:\+24C975CBA61A024EE1B631787C3D57159FC2F927:$' &&
-  cat influxdata-archive.key |
-  gpg --dearmor |
-    tee /etc/apt/keyrings/influxdata-archive.gpg >/dev/null
-cat <<EOF | sudo tee /etc/apt/sources.list.d/influxdata.sources >/dev/null
-Types: deb
-URIs: https://repos.influxdata.com/debian
-Suites: stable
-Components: main
-Signed-By: /etc/apt/keyrings/influxdata-archive.gpg
-EOF
-msg_ok "Added Telegraf Repository"
+msg_info "Setting up Telegraf repository"
+setup_deb822_repo \
+  "telegraf" \
+  "https://repos.influxdata.com/influxdata-archive.key" \
+  "https://repos.influxdata.com/debian" \
+  "stable"
+msg_ok "Setup Telegraf Repository"
 
-msg_info "Installing Telegraf"
-$STD apt update
-$STD apt install telegraf -y
-rm /influxdata-archive.key
-msg_ok "Installed Telegraf"
+msg_info "Setting up Telegraf"
+$STD apt install -y telegraf
+msg_ok "Setup Telegraf"
 
 motd_ssh
 customize

install/zabbix-install.sh

@@ -31,9 +31,17 @@ esac
 
 msg_info "Installing Zabbix $ZABBIX_VERSION"
 cd /tmp
-ZABBIX_DEB_URL="https://repo.zabbix.com/zabbix/${ZABBIX_VERSION}/debian/pool/main/z/zabbix-release/zabbix-release_latest+debian13_all.deb"
-curl -fsSL "$ZABBIX_DEB_URL" -o /tmp/zabbix-release_latest+debian13_all.deb
-$STD dpkg -i /tmp/zabbix-release_latest+debian13_all.deb
+
+if [[ "$ZABBIX_VERSION" == "7.0" ]]; then
+  ZABBIX_DEB_URL="https://repo.zabbix.com/zabbix/${ZABBIX_VERSION}/debian/pool/main/z/zabbix-release/zabbix-release_latest_${ZABBIX_VERSION}+debian13_all.deb"
+  ZABBIX_DEB_FILE="zabbix-release_latest_${ZABBIX_VERSION}+debian13_all.deb"
+else
+  ZABBIX_DEB_URL="https://repo.zabbix.com/zabbix/${ZABBIX_VERSION}/release/debian/pool/main/z/zabbix-release/zabbix-release_latest+debian13_all.deb"
+  ZABBIX_DEB_FILE="zabbix-release_latest+debian13_all.deb"
+fi
+
+curl -fsSL "$ZABBIX_DEB_URL" -o /tmp/"$ZABBIX_DEB_FILE"
+$STD dpkg -i /tmp/"$ZABBIX_DEB_FILE"
 $STD apt update
 $STD apt install -y zabbix-server-pgsql zabbix-frontend-php php8.4-pgsql zabbix-apache-conf zabbix-sql-scripts
 zcat /usr/share/zabbix/sql-scripts/postgresql/server.sql.gz | sudo -u "$PG_DB_USER" psql "$PG_DB_NAME" &>/dev/null
@@ -104,7 +112,7 @@ fi
 
 systemctl restart zabbix-server apache2
 systemctl enable -q --now zabbix-server $AGENT_SERVICE apache2
-rm -rf /tmp/zabbix-release_latest+debian13_all.deb
+rm -rf /tmp/zabbix-release_*.deb
 msg_ok "Started Services"
 
 motd_ssh

misc/build.func

@@ -2626,8 +2626,8 @@ configure_ssh_settings() {
 #
 # - Entry point of script
 # - On Proxmox host: calls install_script
-# - In silent mode: runs update_script
-# - Otherwise: shows update/setting menu
+# - In silent mode: runs update_script with automatic cleanup
+# - Otherwise: shows update/setting menu and runs update_script with cleanup
 # ------------------------------------------------------------------------------
 start() {
   source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
@@ -2638,6 +2638,7 @@ start() {
     VERBOSE="no"
     set_std_mode
     update_script
+    cleanup_lxc
   else
     CHOICE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "${APP} LXC Update/Setting" --menu \
       "Support/Update functions for ${APP} LXC. Choose an option:" \
@@ -2662,6 +2663,7 @@ start() {
       ;;
     esac
     update_script
+    cleanup_lxc
   fi
 }
 

misc/core.func

@@ -815,8 +815,11 @@ cleanup_lxc() {
       xargs -0 -n1 truncate -s 0 2>/dev/null || true
   fi
 
-  # Node.js npm
-  if command -v npm &>/dev/null; then $STD npm cache clean --force || true; fi
+  # Node.js npm - directly remove cache directory
+  # npm cache clean/verify can fail with ENOTEMPTY errors, so we skip them
+  if command -v npm &>/dev/null; then
+    rm -rf /root/.npm/_cacache /root/.npm/_logs 2>/dev/null || true
+  fi
   # Node.js yarn
   if command -v yarn &>/dev/null; then $STD yarn cache clean || true; fi
   # Node.js pnpm

misc/tools.func

@@ -334,9 +334,9 @@ remove_old_tool_version() {
     $STD apt purge -y nodejs npm >/dev/null 2>&1 || true
     # Clean up npm global modules
     if command -v npm >/dev/null 2>&1; then
-      npm list -g 2>/dev/null | grep -oE '^  \S+' | awk '{print $1}' | while read -r module; do
+      npm list -g 2>/dev/null | grep -oE '^  \S+' | awk '{print $1}' 2>/dev/null | while read -r module; do
         npm uninstall -g "$module" >/dev/null 2>&1 || true
-      done
+      done || true
     fi
     cleanup_legacy_install "nodejs"
     cleanup_tool_keyrings "nodesource"
@@ -1167,7 +1167,7 @@ cleanup_orphaned_sources() {
 
     # Extract Signed-By path from .sources file
     local keyring_path
-    keyring_path=$(grep -E '^Signed-By:' "$sources_file" 2>/dev/null | awk '{print $2}')
+    keyring_path=$(grep -E '^Signed-By:' "$sources_file" 2>/dev/null | awk '{print $2}' 2>/dev/null || true)
 
     # If keyring doesn't exist, remove the .sources file
     if [[ -n "$keyring_path" ]] && [[ ! -f "$keyring_path" ]]; then
@@ -2073,7 +2073,7 @@ function setup_adminer() {
       return 1
     }
     local VERSION
-    VERSION=$(dpkg -s adminer 2>/dev/null | grep '^Version:' | awk '{print $2}')
+    VERSION=$(dpkg -s adminer 2>/dev/null | grep '^Version:' | awk '{print $2}' 2>/dev/null || echo 'unknown')
     cache_installed_version "adminer" "${VERSION:-unknown}"
     msg_ok "Setup Adminer (Debian/Ubuntu)"
   fi
@@ -2591,7 +2591,7 @@ function setup_hwaccel() {
 
   # Detect CPU vendor (relevant for AMD APUs)
   local cpu_vendor
-  cpu_vendor=$(lscpu 2>/dev/null | grep -i 'Vendor ID' | awk '{print $3}' || echo "")
+  cpu_vendor=$(lscpu 2>/dev/null | grep -i 'Vendor ID' | awk '{print $3}' 2>/dev/null || echo "")
 
   if [[ -z "$gpu_vendor" && -z "$cpu_vendor" ]]; then
     msg_warn "No GPU or CPU vendor detected - skipping hardware acceleration setup"
@@ -3699,7 +3699,7 @@ function setup_nodejs() {
 
       # Check if the module is already installed
       if $STD npm list -g --depth=0 "$MODULE_NAME" 2>&1 | grep -q "$MODULE_NAME@"; then
-        MODULE_INSTALLED_VERSION="$($STD npm list -g --depth=0 "$MODULE_NAME" 2>&1 | grep "$MODULE_NAME@" | awk -F@ '{print $2}' | tr -d '[:space:]')"
+        MODULE_INSTALLED_VERSION="$(npm list -g --depth=0 "$MODULE_NAME" 2>&1 | grep "$MODULE_NAME@" | awk -F@ '{print $2}' 2>/dev/null | tr -d '[:space:]' || echo '')"
         if [[ "$MODULE_REQ_VERSION" != "latest" && "$MODULE_REQ_VERSION" != "$MODULE_INSTALLED_VERSION" ]]; then
           msg_info "Updating $MODULE_NAME from v$MODULE_INSTALLED_VERSION to v$MODULE_REQ_VERSION"
           if ! $STD npm install -g "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null; then
@@ -3818,7 +3818,7 @@ EOF
 
   # Get available PHP version from repository
   local AVAILABLE_PHP_VERSION=""
-  AVAILABLE_PHP_VERSION=$(apt-cache show "php${PHP_VERSION}" 2>/dev/null | grep -m1 "^Version:" | awk '{print $2}' | cut -d- -f1) || true
+  AVAILABLE_PHP_VERSION=$(apt-cache show "php${PHP_VERSION}" 2>/dev/null | grep -m1 "^Version:" | awk '{print $2}' 2>/dev/null | cut -d- -f1 || true)
 
   if [[ -z "$AVAILABLE_PHP_VERSION" ]]; then
     msg_error "PHP ${PHP_VERSION} not found in configured repositories"
@@ -4620,7 +4620,7 @@ function setup_rust() {
 
       # Check if already installed
       if echo "$CRATE_LIST" | grep -q "^${NAME} "; then
-        INSTALLED_VER=$(echo "$CRATE_LIST" | grep "^${NAME} " | head -1 | awk '{print $2}' | tr -d 'v:')
+        INSTALLED_VER=$(echo "$CRATE_LIST" | grep "^${NAME} " | head -1 | awk '{print $2}' 2>/dev/null | tr -d 'v:' || echo '')
 
         if [[ -n "$VER" && "$VER" != "$INSTALLED_VER" ]]; then
           msg_info "Upgrading $NAME from v$INSTALLED_VER to v$VER"
@@ -4635,7 +4635,7 @@ function setup_rust() {
             msg_error "Failed to upgrade $NAME"
             return 1
           }
-          local NEW_VER=$(cargo install --list 2>/dev/null | grep "^${NAME} " | head -1 | awk '{print $2}' | tr -d 'v:')
+          local NEW_VER=$(cargo install --list 2>/dev/null | grep "^${NAME} " | head -1 | awk '{print $2}' 2>/dev/null | tr -d 'v:' || echo 'unknown')
           msg_ok "Upgraded $NAME to v$NEW_VER"
         else
           msg_ok "$NAME v$INSTALLED_VER already installed"
@@ -4653,7 +4653,7 @@ function setup_rust() {
             msg_error "Failed to install $NAME"
             return 1
           }
-          local NEW_VER=$(cargo install --list 2>/dev/null | grep "^${NAME} " | head -1 | awk '{print $2}' | tr -d 'v:')
+          local NEW_VER=$(cargo install --list 2>/dev/null | grep "^${NAME} " | head -1 | awk '{print $2}' 2>/dev/null | tr -d 'v:' || echo 'unknown')
           msg_ok "Installed $NAME v$NEW_VER"
         fi
       fi
@@ -4975,7 +4975,7 @@ function setup_docker() {
   # Install or upgrade Docker
   if [ "$docker_installed" = true ]; then
     msg_info "Checking for Docker updates"
-    DOCKER_LATEST_VERSION=$(apt-cache policy docker-ce | grep Candidate | awk '{print $2}' | cut -d':' -f2 | cut -d'-' -f1)
+    DOCKER_LATEST_VERSION=$(apt-cache policy docker-ce | grep Candidate | awk '{print $2}' 2>/dev/null | cut -d':' -f2 | cut -d'-' -f1 || echo '')
 
     if [ "$DOCKER_CURRENT_VERSION" != "$DOCKER_LATEST_VERSION" ]; then
       msg_info "Updating Docker $DOCKER_CURRENT_VERSION → $DOCKER_LATEST_VERSION"

tools/addon/qbittorrent-exporter.sh

@@ -0,0 +1,241 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: CrazyWolf13
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/martabal/qbittorrent-exporter
+
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+
+# Enable error handling
+set -Eeuo pipefail
+trap 'error_handler' ERR
+
+load_functions
+# ==============================================================================
+# CONFIGURATION
+# ==============================================================================
+VERBOSE=${var_verbose:-no}
+APP="qbittorrent-exporter"
+APP_TYPE="tools"
+INSTALL_PATH="/opt/qbittorrent-exporter"
+CONFIG_PATH="/opt/qbittorrent-exporter.env"
+header_info
+ensure_usr_local_bin_persist
+
+# ==============================================================================
+# OS DETECTION
+# ==============================================================================
+if [[ -f "/etc/alpine-release" ]]; then
+  OS="Alpine"
+  SERVICE_PATH="/etc/init.d/qbittorrent-exporter"
+elif grep -qE 'ID=debian|ID=ubuntu' /etc/os-release; then
+  OS="Debian"
+  SERVICE_PATH="/etc/systemd/system/qbittorrent-exporter.service"
+else
+  echo -e "${CROSS} Unsupported OS detected. Exiting."
+  exit 1
+fi
+
+# ==============================================================================
+# UNINSTALL
+# ==============================================================================
+function uninstall() {
+  msg_info "Uninstalling qBittorrent-Exporter"
+  if [[ "$OS" == "Alpine" ]]; then
+    rc-service qbittorrent-exporter stop &>/dev/null
+    rc-update del qbittorrent-exporter &>/dev/null
+    rm -f "$SERVICE_PATH"
+  else
+    systemctl disable -q --now qbittorrent-exporter
+    rm -f "$SERVICE_PATH"
+  fi
+  rm -rf "$INSTALL_PATH" "$CONFIG_PATH"
+  rm -f "/usr/local/bin/update_qbittorrent-exporter"
+  rm -f "$HOME/.qbittorrent-exporter"
+  msg_ok "qBittorrent-Exporter has been uninstalled"
+}
+
+# ==============================================================================
+# UPDATE
+# ==============================================================================
+function update() {
+  if check_for_gh_release "qbittorrent-exporter" "martabal/qbittorrent-exporter"; then
+    msg_info "Stopping service"
+    if [[ "$OS" == "Alpine" ]]; then
+      rc-service qbittorrent-exporter stop &>/dev/null
+    else
+      systemctl stop qbittorrent-exporter
+    fi
+    msg_ok "Stopped service"
+
+    fetch_and_deploy_gh_release "qbittorrent-exporter" "martabal/qbittorrent-exporter" "tarball" "latest"
+    setup_go
+
+    msg_info "Building qBittorrent-Exporter"
+    cd /opt/qbittorrent-exporter
+    $STD /usr/local/bin/go build -o ./qbittorrent-exporter
+    msg_ok "Built qBittorrent-Exporter"
+
+    msg_info "Starting service"
+    if [[ "$OS" == "Alpine" ]]; then
+      rc-service qbittorrent-exporter start &>/dev/null
+    else
+      systemctl start qbittorrent-exporter
+    fi
+    msg_ok "Started service"
+    msg_ok "Updated successfully"
+    exit
+  fi
+}
+
+# ==============================================================================
+# INSTALL
+# ==============================================================================
+function install() {
+  read -erp "Enter URL of qBittorrent, example: (http://127.0.0.1:8080): " QBITTORRENT_BASE_URL
+  read -erp "Enter qBittorrent username: " QBITTORRENT_USERNAME
+  read -rsp "Enter qBittorrent password: " QBITTORRENT_PASSWORD
+  printf "\n"
+
+  fetch_and_deploy_gh_release "qbittorrent-exporter" "martabal/qbittorrent-exporter" "tarball" "latest"
+  setup_go
+  msg_info "Building qBittorrent-Exporter on ${OS}"
+  cd /opt/qbittorrent-exporter
+  $STD /usr/local/bin/go build -o ./qbittorrent-exporter
+  msg_ok "Built qBittorrent-Exporter"
+
+  msg_info "Creating configuration"
+  cat <<EOF >"$CONFIG_PATH"
+# https://github.com/martabal/qbittorrent-exporter?tab=readme-ov-file#parameters
+QBITTORRENT_BASE_URL="${QBITTORRENT_BASE_URL}"
+QBITTORRENT_USERNAME="${QBITTORRENT_USERNAME}"
+QBITTORRENT_PASSWORD="${QBITTORRENT_PASSWORD}"
+EOF
+  msg_ok "Created configuration"
+
+  msg_info "Creating service"
+  if [[ "$OS" == "Debian" ]]; then
+    cat <<EOF >"$SERVICE_PATH"
+[Unit]
+Description=qbittorrent-exporter
+After=network.target
+
+[Service]
+User=root
+WorkingDirectory=/opt/qbittorrent-exporter
+EnvironmentFile=$CONFIG_PATH
+ExecStart=/opt/qbittorrent-exporter/qbittorrent-exporter
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    systemctl daemon-reload
+    systemctl enable -q --now qbittorrent-exporter
+  else
+    cat <<EOF >"$SERVICE_PATH"
+#!/sbin/openrc-run
+
+name="qbittorrent-exporter"
+description="qBittorrent Exporter for Prometheus"
+command="${INSTALL_PATH}/qbittorrent-exporter"
+command_background=true
+directory="/opt/qbittorrent-exporter"
+pidfile="/run/\${RC_SVCNAME}.pid"
+output_log="/var/log/qbittorrent-exporter.log"
+error_log="/var/log/qbittorrent-exporter.log"
+
+depend() {
+    need net
+    after firewall
+}
+
+start_pre() {
+    if [ -f "$CONFIG_PATH" ]; then
+        export \$(grep -v '^#' $CONFIG_PATH | xargs)
+    fi
+}
+EOF
+    chmod +x "$SERVICE_PATH"
+    $STD rc-update add qbittorrent-exporter default
+    $STD rc-service qbittorrent-exporter start
+  fi
+  msg_ok "Created and started service"
+
+  # Create update script
+  msg_info "Creating update script"
+  ensure_usr_local_bin_persist
+  cat <<'UPDATEEOF' >/usr/local/bin/update_qbittorrent-exporter
+#!/usr/bin/env bash
+# qbittorrent-exporter Update Script
+type=update bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/qbittorrent-exporter.sh)"
+UPDATEEOF
+  chmod +x /usr/local/bin/update_qbittorrent-exporter
+  msg_ok "Created update script (/usr/local/bin/update_qbittorrent-exporter)"
+
+  echo ""
+  msg_ok "qBittorrent-Exporter installed successfully"
+  msg_ok "Metrics: ${BL}http://${LOCAL_IP}:8090/metrics${CL}"
+  msg_ok "Config: ${BL}${CONFIG_PATH}${CL}"
+}
+
+# ==============================================================================
+# MAIN
+# ==============================================================================
+header_info
+ensure_usr_local_bin_persist
+import_local_ip
+
+# Handle type=update (called from update script)
+if [[ "${type:-}" == "update" ]]; then
+  if [[ -d "$INSTALL_PATH" && -f "$INSTALL_PATH/qbittorrent-exporter" ]]; then
+    update
+  else
+    msg_error "qBittorrent-Exporter is not installed. Nothing to update."
+    exit 1
+  fi
+  exit 0
+fi
+
+# Check if already installed
+if [[ -d "$INSTALL_PATH" && -f "$INSTALL_PATH/qbittorrent-exporter" ]]; then
+  msg_warn "qBittorrent-Exporter is already installed."
+  echo ""
+
+  echo -n "${TAB}Uninstall qBittorrent-Exporter? (y/N): "
+  read -r uninstall_prompt
+  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
+    uninstall
+    exit 0
+  fi
+
+  echo -n "${TAB}Update qBittorrent-Exporter? (y/N): "
+  read -r update_prompt
+  if [[ "${update_prompt,,}" =~ ^(y|yes)$ ]]; then
+    update
+    exit 0
+  fi
+
+  msg_warn "No action selected. Exiting."
+  exit 0
+fi
+
+# Fresh installation
+msg_warn "qBittorrent-Exporter is not installed."
+echo ""
+echo -e "${TAB}${INFO} This will install:"
+echo -e "${TAB}  - qBittorrent Exporter (Go binary)"
+echo -e "${TAB}  - Systemd/OpenRC service"
+echo ""
+
+echo -n "${TAB}Install qBittorrent-Exporter? (y/N): "
+read -r install_prompt
+if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
+  install
+else
+  msg_warn "Installation cancelled. Exiting."
+  exit 0
+fi

tools/pve/execute.sh

@@ -50,7 +50,12 @@ function execute_in() {
   container=$1
   name=$(pct exec "$container" hostname)
   echo -e "${BL}[Info]${GN} Execute inside${BL} ${name}${GN} with output: ${CL}"
+    if !   pct exec "$container" -- bash -c "command -v ${custom_command} >/dev/null 2>&1"
+      then
+        echo -e "${BL}[Info]${GN} Skipping ${name} ${RD}$container has no command: ${custom_command}"
+      else
         pct exec "$container" -- bash -c "${custom_command}" | tee
+    fi
 }
 
 for container in $(pct list | awk '{if(NR>1) print $1}'); do