fix(heimdall): migrate PHP to 8.4 on update (#15767)

Legacy Debian 12 containers still had PHP 8.2 while Heimdall v2.8.1 requires PHP ^8.4. Run setup_php during update and use shared backup helpers for database and public data.

.github/DISCUSSION_TEMPLATE/request-script.yml

@@ -12,17 +12,13 @@ body:
         Requests may be closed if the application is out of scope, abandoned, too new, not publicly verifiable, or not suitable for a reliable Proxmox VE Helper-Scripts integration.
 
         General requirements:
-        - The application must be self-hosted.
-        - The project must have an official public source repository.
-        - The project must provide official releases, tags, or release tarballs.
-        - The project must be actively maintained.
-        - The official source repository must have at least 1,000 stars.
-        - The latest official release or tag must not be older than 6 months.
-        - The project itself must be at least 6 months old.
-
-        Projects that do not meet these requirements may be closed without further evaluation.
-
-        Exceptions to the 1,000-star requirement are rare and require a clearly verifiable, significant public adoption signal.
+        - The application should be self-hosted.
+        - The project should have an official public source repository.
+        - The project should provide official releases, tags, or release tarballs.
+        - The project should be actively maintained.
+        - The project should generally have at least 1,000 stars or a comparable public adoption signal.
+        - The latest official release or tag should not be older than 6 months.
+        - The project itself should be at least 6 months old.
 
   - type: input
     id: application-name
@@ -51,35 +47,6 @@ body:
     validations:
       required: true
 
-  - type: markdown
-    attributes:
-      value: |
-        ## ⚠️ Project Eligibility
-
-        Before continuing, verify that the requested project meets the minimum requirements below.
-
-        **Projects with fewer than 1,000 stars are generally not eligible for a script request.**
-
-        Exceptions are only considered where there is a clearly verifiable, significant public adoption signal.
-
-  - type: input
-    id: repository-stars
-    attributes:
-      label: Repository Stars
-      description: Enter the current number of stars of the official source repository.
-      placeholder: "e.g., 15,000"
-    validations:
-      required: true
-
-  - type: checkboxes
-    id: minimum-stars
-    attributes:
-      label: Minimum Adoption Requirement
-      description: Confirm that you have verified the project's public adoption.
-      options:
-        - label: The official source repository has at least 1,000 stars.
-          required: true
-
   - type: textarea
     id: app-description
     attributes:

CHANGELOG.md

@@ -506,8 +506,11 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ### 🚀 Updated Scripts
 
+  - Revert "fix(fileflows): handle update API 401, force update, and Node install" [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15764](https://github.com/community-scripts/ProxmoxVE/pull/15764))
+
   - #### 🐞 Bug Fixes
 
+    - fix(fileflows): handle update API 401, force update, and Node install [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14858](https://github.com/community-scripts/ProxmoxVE/pull/14858))
     - [Upstream Fix] Immich: Fix loader priority [@vhsdream](https://github.com/vhsdream) ([#15755](https://github.com/community-scripts/ProxmoxVE/pull/15755))
 
 ## 2026-07-13

ct/grav.sh

@@ -1,54 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -s https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Raffaele (rafspiny)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://getgrav.org/
-
-APP="Grav"
-var_tags="${var_tags:-cms}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-
-    if [[ ! -d "/opt/grav" ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    if check_for_gh_release "grav" "getgrav/grav"; then
-        msg_info "Creating Backup"
-        cd /opt/grav
-        bin/grav backup -nq
-        msg_ok "Backup Created"
-        bin/gpm self-upgrade -y
-        cd -
-        chown -R www-data:www-data /opt/grav
-        msg_ok "Update Successful"
-    fi
-    exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:80${CL}"

ct/headers/grav

@@ -1,6 +0,0 @@
-   ______                
-  / ____/________ __   __
- / / __/ ___/ __ `/ | / /
-/ /_/ / /  / /_/ /| |/ / 
-\____/_/   \__,_/ |___/  
-                         

ct/heimdall-dashboard.sh

@@ -35,14 +35,12 @@ function update_script() {
     sleep 1
     msg_ok "Stopped Service"
 
-    msg_info "Backing up Data"
-    cp -R /opt/Heimdall/database database-backup
-    cp -R /opt/Heimdall/public public-backup
-    sleep 1
-    msg_ok "Backed up Data"
-
+    create_backup /opt/Heimdall/database \
+                  /opt/Heimdall/public
+    PHP_VERSION="8.4" PHP_FPM="YES" setup_php
     setup_composer
     fetch_and_deploy_gh_release "Heimdall" "linuxserver/Heimdall" "tarball"
+    restore_backup
 
     msg_info "Updating Heimdall-Dashboard"
     cd /opt/Heimdall
@@ -50,18 +48,6 @@ function update_script() {
     $STD composer dump-autoload
     msg_ok "Updated Heimdall-Dashboard"
 
-    msg_info "Restoring Data"
-    cd ~
-    cp -R database-backup/* /opt/Heimdall/database
-    cp -R public-backup/* /opt/Heimdall/public
-    sleep 1
-    msg_ok "Restored Data"
-
-    msg_info "Cleaning Up"
-    rm -rf {public-backup,database-backup}
-    sleep 1
-    msg_ok "Cleaned Up"
-
     msg_info "Starting Service"
     systemctl start heimdall.service
     sleep 2

install/grav-install.sh

@@ -1,111 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Raffaele (rafspiny)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://getgrav.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  nginx \
-  logrotate
-msg_ok "Installed Dependencies"
-
-PHP_FPM="YES" setup_php
-
-fetch_and_deploy_gh_release "grav" "getgrav/grav" "prebuild" "latest" "/opt/grav" "grav-admin-v*zip"
-chown -R www-data:www-data /opt/grav
-
-msg_info "Configuring Nginx"
-PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_FPM_SOCK=$(find /run/php -maxdepth 1 -name "php*-fpm.sock" -type s | sort -V | tail -1)
-unlink /etc/nginx/sites-enabled/default
-rm -f /etc/nginx/sites-available/default
-cat <<EOF >/etc/nginx/sites-available/grav
-server {
-    listen 80;
-    server_name _;
-    root /opt/grav;
-    index index.html index.htm index.php;
-
-    location / {
-        try_files \$uri \$uri/ /index.html /index.htm /index.php\$is_args\$args;
-    }
-
-    ## Begin - Security
-    location ~* /(\.git|cache|bin|logs|backup|tests)/.*$ { return 403; }
-    location ~* /(system|vendor)/.*\.(txt|xml|md|html|json|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ { return 403; }
-    location ~* /user/.*\.(txt|md|json|yaml|yml|php|pl|py|cgi|twig|sh|bat)$ { return 403; }
-    location ~ /(LICENSE\.txt|composer\.lock|composer\.json|nginx\.conf|web\.config|htaccess\.txt|\.htaccess) { return 403; }
-    ## End - Security
-
-    ## Begin - API
-    location ^~ /api/ {
-        try_files \$uri \$uri/ /index.php\$is_args\$args;
-    }
-    ## End - API
-
-    # deny all direct access to these sensitive user folders, whatever the file type
-    location ~* /user/(accounts|config|env)/.*$ { return 403; }
-    # allow public media uploads under user/data to be served directly;
-    # this must come before the user/data deny so it wins the match
-    location ~* /user/data/.*\.(jpe?g|png|gif|webp|avif|bmp|ico|mp4|webm|ogg|ogv|mov|mp3|wav|m4a|flac|pdf)$ { try_files \$uri =404; }
-    # deny everything else under user/data
-    location ~* /user/data/.*$ { return 403; }
-
-
-    ## Begin - Caching
-    location ~* ^/forms-basic-captcha-image.jpg$ {
-        try_files \$uri \$uri/ /index.php\$is_args\$args;
-    }
-
-    location ~* \.(?:ico|css|js|gif|jpe?g|png)$ {
-        expires 30d;
-        add_header Vary Accept-Encoding;
-        log_not_found off;
-    }
-
-    location ~* ^.+\.(?:css|cur|js|jpe?g|gif|htc|ico|png|html|xml|otf|ttf|eot|woff|woff2|svg)$ {
-        access_log off;
-        expires 30d;
-        add_header Cache-Control public;
-        tcp_nodelay off;
-        open_file_cache max=3000 inactive=120s;
-        open_file_cache_valid 45s;
-        open_file_cache_min_uses 2;
-        open_file_cache_errors off;
-    }
-    ## End - Caching
-
-    location ~ ^(.+\.php)(.*)$ {
-        fastcgi_split_path_info ^(.+\.php)(.*)$;
-        if (!-f \$document_root\$fastcgi_script_name) { return 404; }
-        fastcgi_pass unix:${PHP_FPM_SOCK};
-        fastcgi_index index.php;
-        include /etc/nginx/fastcgi_params;
-        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
-    }
-
-    location ~ /\.ht {
-        deny all;
-    }
-}
-EOF
-ln -sf /etc/nginx/sites-available/grav /etc/nginx/sites-enabled/grav
-systemctl enable -q --now php${PHP_VER}-fpm
-$STD nginx -t
-systemctl enable -q --now nginx
-$STD nginx -s reload
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc