fix storyteller release selection for multi-stream tags

Add optional tag prefix filtering to GitHub/GitLab release helpers and use web-v2 for Storyteller install/update so latest non-web tags no longer break deployment.
2026-07-14 01:45:08 +02:00 · 2026-07-13 11:26:05 +02:00
92 changed files with 787 additions and 2575 deletions
@@ -1,47 +1,3 @@
-## 2026-06-30
-
-### 🚀 Updated Scripts
-
-  - #### 🔧 Refactor
-
-    - Refactor: Use heredoc when creating env files and creds/other [@tremor021](https://github.com/tremor021) ([#15469](https://github.com/community-scripts/ProxmoxVE/pull/15469))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - [tools/pve/*.sh] https://download.proxmox.com -> http://download.proxmox.com (PVE8 Only) [@galeksandrp](https://github.com/galeksandrp) ([#15498](https://github.com/community-scripts/ProxmoxVE/pull/15498))
-
-## 2026-06-29
-
-### 🆕 New Scripts
-
-  - Koffan ([#15467](https://github.com/community-scripts/ProxmoxVE/pull/15467))
- Etherpad ([#15468](https://github.com/community-scripts/ProxmoxVE/pull/15468))
- Flame ([#15464](https://github.com/community-scripts/ProxmoxVE/pull/15464))
-
-### 🚀 Updated Scripts
-
-  - chore(ct): sync snapotter defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#15472](https://github.com/community-scripts/ProxmoxVE/pull/15472))
-
-  - #### 🐞 Bug Fixes
-
-    - feat: update nginx proxy manager to trixie [@asylumexp](https://github.com/asylumexp) ([#15457](https://github.com/community-scripts/ProxmoxVE/pull/15457))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - [tools.func]: add edit_yaml_config function [@tremor021](https://github.com/tremor021) ([#15484](https://github.com/community-scripts/ProxmoxVE/pull/15484))
-
-## 2026-06-28
-
-### 🚀 Updated Scripts
-
-  - #### 💥 Breaking Changes
-
-    - remove: promtail as EOL and other fixes [@asylumexp](https://github.com/asylumexp) ([#15455](https://github.com/community-scripts/ProxmoxVE/pull/15455))
-
 ## 2026-06-27

 ### 🆕 New Scripts
@@ -1,182 +0,0 @@
-## 2026-07-11
-
-### 🆕 New Scripts
-
-  - LocalAGI ([#15687](https://github.com/community-scripts/ProxmoxVE/pull/15687))
-
-### 🚀 Updated Scripts
-
-  - fix(adventurelog): allow pnpm build scripts so install/update doesn't abort [@TowyTowy](https://github.com/TowyTowy) ([#15681](https://github.com/community-scripts/ProxmoxVE/pull/15681))
-
-  - #### 🐞 Bug Fixes
-
-    - fix(fileflows): install .NET 10 ASP.NET Core Runtime to match current release [@TowyTowy](https://github.com/TowyTowy) ([#15702](https://github.com/community-scripts/ProxmoxVE/pull/15702))
-    - Fix spacing on VLAN Input Box in haos-vm.sh [@pumrum](https://github.com/pumrum) ([#15696](https://github.com/community-scripts/ProxmoxVE/pull/15696))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - [tools.func]: Add function to handle deployment via GitLab release tags [@tremor021](https://github.com/tremor021) ([#15641](https://github.com/community-scripts/ProxmoxVE/pull/15641))
-
-## 2026-07-10
-
-### 🆕 New Scripts
-
-  - Squid ([#15605](https://github.com/community-scripts/ProxmoxVE/pull/15605))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Adapt to new artifact filename format for pocket id [@wollew](https://github.com/wollew) ([#15689](https://github.com/community-scripts/ProxmoxVE/pull/15689))
-    - Fireshare: Fix for install and upgrade to v1.7.3 [@tremor021](https://github.com/tremor021) ([#15673](https://github.com/community-scripts/ProxmoxVE/pull/15673))
-    - Endurain: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15674](https://github.com/community-scripts/ProxmoxVE/pull/15674))
-
-## 2026-07-09
-
-### 🚀 Updated Scripts
-
-  - fix(pihole): repair Unbound DNS-over-TLS (DoT) forwarding config [@TowyTowy](https://github.com/TowyTowy) ([#15654](https://github.com/community-scripts/ProxmoxVE/pull/15654))
-
-## 2026-07-08
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Opencloud: Bump version to 7.2.1 [@vhsdream](https://github.com/vhsdream) ([#15655](https://github.com/community-scripts/ProxmoxVE/pull/15655))
-    - BabyBuddy: Harden update script [@MickLesk](https://github.com/MickLesk) ([#15642](https://github.com/community-scripts/ProxmoxVE/pull/15642))
-
-## 2026-07-07
-
-### 🆕 New Scripts
-
-  - Forgejo-Runner ([#15046](https://github.com/community-scripts/ProxmoxVE/pull/15046))
-
-## 2026-07-06
-
-### 🚀 Updated Scripts
-
-  - Fix alignment in various ct end messages [@tremor021](https://github.com/tremor021) ([#15632](https://github.com/community-scripts/ProxmoxVE/pull/15632))
- Immich: Update libvips to 8.18.4 [@vhsdream](https://github.com/vhsdream) ([#15619](https://github.com/community-scripts/ProxmoxVE/pull/15619))
-
-  - #### 🐞 Bug Fixes
-
-    - Wizarr: Build JS and CSS static assets [@vhsdream](https://github.com/vhsdream) ([#15634](https://github.com/community-scripts/ProxmoxVE/pull/15634))
-    - RustDesk Server: Update URL format in rustdeskserver.sh [@tremor021](https://github.com/tremor021) ([#15626](https://github.com/community-scripts/ProxmoxVE/pull/15626))
-    - attempt to port docker-vm to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15611](https://github.com/community-scripts/ProxmoxVE/pull/15611))
-    - fix(plane): don't clobber global app var, breaking /usr/bin/update [@asylumexp](https://github.com/asylumexp) ([#15612](https://github.com/community-scripts/ProxmoxVE/pull/15612))
-
-  - #### 🔧 Refactor
-
-    - cliproxyapi: point setup message at /management.html [@austinpilz](https://github.com/austinpilz) ([#15628](https://github.com/community-scripts/ProxmoxVE/pull/15628))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: FlowiseAI [@MickLesk](https://github.com/MickLesk) ([#15624](https://github.com/community-scripts/ProxmoxVE/pull/15624))
-
-## 2026-07-05
-
-### 🆕 New Scripts
-
-  - excalidash ([#15604](https://github.com/community-scripts/ProxmoxVE/pull/15604))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix: homarr: cli [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15603](https://github.com/community-scripts/ProxmoxVE/pull/15603))
-    - immich: vacuum smart_search/face_search before VectorChord bump [@irishpadres](https://github.com/irishpadres) ([#15607](https://github.com/community-scripts/ProxmoxVE/pull/15607))
-
-## 2026-07-04
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Element Synapse: Fix heredoc syntax in elementsynapse-install.sh [@tremor021](https://github.com/tremor021) ([#15594](https://github.com/community-scripts/ProxmoxVE/pull/15594))
-    - Twenty: Fix backup restore [@tremor021](https://github.com/tremor021) ([#15586](https://github.com/community-scripts/ProxmoxVE/pull/15586))
-    - fix(endurain): update frontend dist path after upstream restructure [@joaovitoriasilva](https://github.com/joaovitoriasilva) ([#15590](https://github.com/community-scripts/ProxmoxVE/pull/15590))
-
-## 2026-07-03
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: handle mise monorepo_root rename correctly | bump to 3.0.1 [@MickLesk](https://github.com/MickLesk) ([#15557](https://github.com/community-scripts/ProxmoxVE/pull/15557))
-
-  - #### ✨ New Features
-
-    - Opencloud: bump to v7.2.0 [@vhsdream](https://github.com/vhsdream) ([#15575](https://github.com/community-scripts/ProxmoxVE/pull/15575))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - tools.func: fix corepack/pnpm install flow in setup_nodejs [@MickLesk](https://github.com/MickLesk) ([#15579](https://github.com/community-scripts/ProxmoxVE/pull/15579))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Removed deprecated parameter in Filebrowser Quantum configuration [@alpargatagazer](https://github.com/alpargatagazer) ([#15573](https://github.com/community-scripts/ProxmoxVE/pull/15573))
-
-## 2026-07-02
-
-### 🆕 New Scripts
-
-  - Rackula ([#15465](https://github.com/community-scripts/ProxmoxVE/pull/15465))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - typo: fix npm update to npm install for n8n [@MickLesk](https://github.com/MickLesk) ([#15545](https://github.com/community-scripts/ProxmoxVE/pull/15545))
-
-  - #### ✨ New Features
-
-    - Frigate: bump to v0.17.2 [@MickLesk](https://github.com/MickLesk) ([#15536](https://github.com/community-scripts/ProxmoxVE/pull/15536))
-
-  - #### 💥 Breaking Changes
-
-    - Revert "Immich v3.0.0" [@MickLesk](https://github.com/MickLesk) ([#15558](https://github.com/community-scripts/ProxmoxVE/pull/15558))
-    - Immich v3.0.0 [@vhsdream](https://github.com/vhsdream) ([#15153](https://github.com/community-scripts/ProxmoxVE/pull/15153))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: configure pnpm to allow all build scripts for environments [@MickLesk](https://github.com/MickLesk) ([#15532](https://github.com/community-scripts/ProxmoxVE/pull/15532))
-
-  - #### ✨ New Features
-
-    - feat(build.func): add var_ignore_disable to bypass disabled-script guard [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15544](https://github.com/community-scripts/ProxmoxVE/pull/15544))
-
-## 2026-07-01
-
-### 🆕 New Scripts
-
-  - iVentoy ([#15503](https://github.com/community-scripts/ProxmoxVE/pull/15503))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Stirling-PDF: patch libicudata execstack flag for LXC container compatibility [@MickLesk](https://github.com/MickLesk) ([#15531](https://github.com/community-scripts/ProxmoxVE/pull/15531))
-    - FlowiseAI: align install to use pnpm instead of npm to fix missing dependencies [@MickLesk](https://github.com/MickLesk) ([#15530](https://github.com/community-scripts/ProxmoxVE/pull/15530))
-    - Vaultwarden: handle version detection failure gracefully in update [@MickLesk](https://github.com/MickLesk) ([#15526](https://github.com/community-scripts/ProxmoxVE/pull/15526))
-    - homarr: fix: update-fail [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15512](https://github.com/community-scripts/ProxmoxVE/pull/15512))
-    - n8n: pin version to 2.27.5 [@tremor021](https://github.com/tremor021) ([#15516](https://github.com/community-scripts/ProxmoxVE/pull/15516))
-
-  - #### ✨ New Features
-
-    - [arm64] feat: iventory arm64 support [@asylumexp](https://github.com/asylumexp) ([#15521](https://github.com/community-scripts/ProxmoxVE/pull/15521))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: fix SDN vnet network parameter to use bridge instead of vnet [@MickLesk](https://github.com/MickLesk) ([#15527](https://github.com/community-scripts/ProxmoxVE/pull/15527))
-    - tools.func: use safe variable expansion in check_for_gh_release RETURN trap [@MickLesk](https://github.com/MickLesk) ([#15529](https://github.com/community-scripts/ProxmoxVE/pull/15529))
@@ -68,12 +68,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit



-
-
-
-
-
-



@@ -90,14 +84,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit


 <details>
-<summary><h4>July (11 entries)</h4></summary>
-
-[View July 2026 Changelog](.github/changelogs/2026/07.md)
-
-</details>
-
-<details>
-<summary><h4>June (30 entries)</h4></summary>
+<summary><h4>June (27 entries)</h4></summary>

 [View June 2026 Changelog](.github/changelogs/2026/06.md)

@@ -502,173 +489,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-07-13
-
-### 🚀 Updated Scripts
-
-  - fix(hyperion): keep service running after container reboot [@TowyTowy](https://github.com/TowyTowy) ([#15653](https://github.com/community-scripts/ProxmoxVE/pull/15653))
-
-  - #### 🐞 Bug Fixes
-
-    - Change sign-in URL to admin URL in affine.sh [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15741](https://github.com/community-scripts/ProxmoxVE/pull/15741))
-    - immich: use actual PostgreSQL version for VectorChord package lookup [@mnavon](https://github.com/mnavon) ([#15705](https://github.com/community-scripts/ProxmoxVE/pull/15705))
-    - fix storyteller release selection for stable web tags [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15736](https://github.com/community-scripts/ProxmoxVE/pull/15736))
-    - Docmost: Fix update procedure [@MickLesk](https://github.com/MickLesk) ([#15732](https://github.com/community-scripts/ProxmoxVE/pull/15732))
-    - fix(shinobi): remove obsolete --unsafe-perm npm flag [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15730](https://github.com/community-scripts/ProxmoxVE/pull/15730))
-
-  - #### 💥 Breaking Changes
-
-    - reitti: update to v5 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15635](https://github.com/community-scripts/ProxmoxVE/pull/15635))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - fix(build.func): parse script status without jq dependency [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15729](https://github.com/community-scripts/ProxmoxVE/pull/15729))
-
-  - #### 🔧 Refactor
-
-    - tools.func: some improvements (sql injection / command injection / guard) [@MickLesk](https://github.com/MickLesk) ([#15661](https://github.com/community-scripts/ProxmoxVE/pull/15661))
-
-## 2026-07-12
-
-### 🆕 New Scripts
-
-  - AFFiNE ([#15690](https://github.com/community-scripts/ProxmoxVE/pull/15690))
-
-### 🚀 Updated Scripts
-
-  - Immich: Bump version to 3.0.2 [@vhsdream](https://github.com/vhsdream) ([#15668](https://github.com/community-scripts/ProxmoxVE/pull/15668))
-
-### ❔ Uncategorized
-
-  - fix(immich): correct Python indentation error in ct/immich.sh heredoc patch [@Copilot](https://github.com/Copilot) ([#15723](https://github.com/community-scripts/ProxmoxVE/pull/15723))
-
-## 2026-07-11
-
-### 🆕 New Scripts
-
-  - LocalAGI ([#15687](https://github.com/community-scripts/ProxmoxVE/pull/15687))
-
-### 🚀 Updated Scripts
-
-  - fix(adventurelog): allow pnpm build scripts so install/update doesn't abort [@TowyTowy](https://github.com/TowyTowy) ([#15681](https://github.com/community-scripts/ProxmoxVE/pull/15681))
-
-  - #### 🐞 Bug Fixes
-
-    - fix(fileflows): install .NET 10 ASP.NET Core Runtime to match current release [@TowyTowy](https://github.com/TowyTowy) ([#15702](https://github.com/community-scripts/ProxmoxVE/pull/15702))
-    - Fix spacing on VLAN Input Box in haos-vm.sh [@pumrum](https://github.com/pumrum) ([#15696](https://github.com/community-scripts/ProxmoxVE/pull/15696))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - [tools.func]: Add function to handle deployment via GitLab release tags [@tremor021](https://github.com/tremor021) ([#15641](https://github.com/community-scripts/ProxmoxVE/pull/15641))
-
-## 2026-07-10
-
-### 🆕 New Scripts
-
-  - Squid ([#15605](https://github.com/community-scripts/ProxmoxVE/pull/15605))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Adapt to new artifact filename format for pocket id [@wollew](https://github.com/wollew) ([#15689](https://github.com/community-scripts/ProxmoxVE/pull/15689))
-    - Fireshare: Fix for install and upgrade to v1.7.3 [@tremor021](https://github.com/tremor021) ([#15673](https://github.com/community-scripts/ProxmoxVE/pull/15673))
-    - Endurain: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15674](https://github.com/community-scripts/ProxmoxVE/pull/15674))
-
-## 2026-07-09
-
-### 🚀 Updated Scripts
-
-  - fix(pihole): repair Unbound DNS-over-TLS (DoT) forwarding config [@TowyTowy](https://github.com/TowyTowy) ([#15654](https://github.com/community-scripts/ProxmoxVE/pull/15654))
-
-## 2026-07-08
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Opencloud: Bump version to 7.2.1 [@vhsdream](https://github.com/vhsdream) ([#15655](https://github.com/community-scripts/ProxmoxVE/pull/15655))
-    - BabyBuddy: Harden update script [@MickLesk](https://github.com/MickLesk) ([#15642](https://github.com/community-scripts/ProxmoxVE/pull/15642))
-
-## 2026-07-07
-
-### 🆕 New Scripts
-
-  - Forgejo-Runner ([#15046](https://github.com/community-scripts/ProxmoxVE/pull/15046))
-
-## 2026-07-06
-
-### 🚀 Updated Scripts
-
-  - Fix alignment in various ct end messages [@tremor021](https://github.com/tremor021) ([#15632](https://github.com/community-scripts/ProxmoxVE/pull/15632))
- Immich: Update libvips to 8.18.4 [@vhsdream](https://github.com/vhsdream) ([#15619](https://github.com/community-scripts/ProxmoxVE/pull/15619))
-
-  - #### 🐞 Bug Fixes
-
-    - Wizarr: Build JS and CSS static assets [@vhsdream](https://github.com/vhsdream) ([#15634](https://github.com/community-scripts/ProxmoxVE/pull/15634))
-    - RustDesk Server: Update URL format in rustdeskserver.sh [@tremor021](https://github.com/tremor021) ([#15626](https://github.com/community-scripts/ProxmoxVE/pull/15626))
-    - attempt to port docker-vm to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15611](https://github.com/community-scripts/ProxmoxVE/pull/15611))
-    - fix(plane): don't clobber global app var, breaking /usr/bin/update [@asylumexp](https://github.com/asylumexp) ([#15612](https://github.com/community-scripts/ProxmoxVE/pull/15612))
-
-  - #### 🔧 Refactor
-
-    - cliproxyapi: point setup message at /management.html [@austinpilz](https://github.com/austinpilz) ([#15628](https://github.com/community-scripts/ProxmoxVE/pull/15628))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: FlowiseAI [@MickLesk](https://github.com/MickLesk) ([#15624](https://github.com/community-scripts/ProxmoxVE/pull/15624))
-
-## 2026-07-05
-
-### 🆕 New Scripts
-
-  - excalidash ([#15604](https://github.com/community-scripts/ProxmoxVE/pull/15604))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix: homarr: cli [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15603](https://github.com/community-scripts/ProxmoxVE/pull/15603))
-    - immich: vacuum smart_search/face_search before VectorChord bump [@irishpadres](https://github.com/irishpadres) ([#15607](https://github.com/community-scripts/ProxmoxVE/pull/15607))
-
-## 2026-07-04
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Element Synapse: Fix heredoc syntax in elementsynapse-install.sh [@tremor021](https://github.com/tremor021) ([#15594](https://github.com/community-scripts/ProxmoxVE/pull/15594))
-    - Twenty: Fix backup restore [@tremor021](https://github.com/tremor021) ([#15586](https://github.com/community-scripts/ProxmoxVE/pull/15586))
-    - fix(endurain): update frontend dist path after upstream restructure [@joaovitoriasilva](https://github.com/joaovitoriasilva) ([#15590](https://github.com/community-scripts/ProxmoxVE/pull/15590))
-
-## 2026-07-03
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: handle mise monorepo_root rename correctly | bump to 3.0.1 [@MickLesk](https://github.com/MickLesk) ([#15557](https://github.com/community-scripts/ProxmoxVE/pull/15557))
-
-  - #### ✨ New Features
-
-    - Opencloud: bump to v7.2.0 [@vhsdream](https://github.com/vhsdream) ([#15575](https://github.com/community-scripts/ProxmoxVE/pull/15575))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - tools.func: fix corepack/pnpm install flow in setup_nodejs [@MickLesk](https://github.com/MickLesk) ([#15579](https://github.com/community-scripts/ProxmoxVE/pull/15579))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Removed deprecated parameter in Filebrowser Quantum configuration [@alpargatagazer](https://github.com/alpargatagazer) ([#15573](https://github.com/community-scripts/ProxmoxVE/pull/15573))
-
 ## 2026-07-02

 ### 🆕 New Scripts
@@ -677,29 +497,16 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 ### 🚀 Updated Scripts

-  - #### 🐞 Bug Fixes
-
-    - typo: fix npm update to npm install for n8n [@MickLesk](https://github.com/MickLesk) ([#15545](https://github.com/community-scripts/ProxmoxVE/pull/15545))
-
  - #### ✨ New Features

    - Frigate: bump to v0.17.2 [@MickLesk](https://github.com/MickLesk) ([#15536](https://github.com/community-scripts/ProxmoxVE/pull/15536))

-  - #### 💥 Breaking Changes
-
-    - Revert "Immich v3.0.0" [@MickLesk](https://github.com/MickLesk) ([#15558](https://github.com/community-scripts/ProxmoxVE/pull/15558))
-    - Immich v3.0.0 [@vhsdream](https://github.com/vhsdream) ([#15153](https://github.com/community-scripts/ProxmoxVE/pull/15153))
-
 ### 💾 Core

  - #### 🐞 Bug Fixes

    - tools.func: configure pnpm to allow all build scripts for environments [@MickLesk](https://github.com/MickLesk) ([#15532](https://github.com/community-scripts/ProxmoxVE/pull/15532))

-  - #### ✨ New Features
-
-    - feat(build.func): add var_ignore_disable to bypass disabled-script guard [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15544](https://github.com/community-scripts/ProxmoxVE/pull/15544))
-
 ## 2026-07-01

 ### 🆕 New Scripts
@@ -1149,4 +956,268 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

  - #### ✨ New Features

-    - [core] Implement backup and restore functions [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15067](https://github.com/community-scripts/ProxmoxVE/pull/15067))
+    - [core] Implement backup and restore functions [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15067](https://github.com/community-scripts/ProxmoxVE/pull/15067))
+
+## 2026-06-11
+
+### 🆕 New Scripts
+
+  - Clickhouse ([#15045](https://github.com/community-scripts/ProxmoxVE/pull/15045))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Manyfold: add new dependency [@MickLesk](https://github.com/MickLesk) ([#15040](https://github.com/community-scripts/ProxmoxVE/pull/15040))
+    - OpenArchiver: switch Rebuild Function [@MickLesk](https://github.com/MickLesk) ([#15042](https://github.com/community-scripts/ProxmoxVE/pull/15042))
+    - CLIProxyAPI: Save management password to creds file [@tremor021](https://github.com/tremor021) ([#15051](https://github.com/community-scripts/ProxmoxVE/pull/15051))
+    - Jotty: Fix wrong path test in config restore [@vhsdream](https://github.com/vhsdream) ([#15038](https://github.com/community-scripts/ProxmoxVE/pull/15038))
+    - Fix for cross-seed after node upgrade [@TorinFrancis](https://github.com/TorinFrancis) ([#15025](https://github.com/community-scripts/ProxmoxVE/pull/15025))
+
+  - #### 🔧 Refactor
+
+    - Alpine-Nextcloud: Upgrade PHP and dependencies in installation script [@MickLesk](https://github.com/MickLesk) ([#15039](https://github.com/community-scripts/ProxmoxVE/pull/15039))
+    - [arm64] porting stage 1: set script arm64 statuses to yes [@asylumexp](https://github.com/asylumexp) ([#15052](https://github.com/community-scripts/ProxmoxVE/pull/15052))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - misc scripts: add support for arm64 [@asylumexp](https://github.com/asylumexp) ([#12639](https://github.com/community-scripts/ProxmoxVE/pull/12639))
+
+  - #### 🔧 Refactor
+
+    - [arm64] remove logic for custom debian arm64 template [@asylumexp](https://github.com/asylumexp) ([#15050](https://github.com/community-scripts/ProxmoxVE/pull/15050))
+
+### 📚 Documentation
+
+  - (github): Revise script request template [@MickLesk](https://github.com/MickLesk) ([#15058](https://github.com/community-scripts/ProxmoxVE/pull/15058))
+
+## 2026-06-10
+
+### 🆕 New Scripts
+
+  - Baserow ([#14968](https://github.com/community-scripts/ProxmoxVE/pull/14968))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Koillection: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15033](https://github.com/community-scripts/ProxmoxVE/pull/15033))
+
+## 2026-06-09
+
+### 🆕 New Scripts
+
+  - paperclip ([#14990](https://github.com/community-scripts/ProxmoxVE/pull/14990))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - endurain: Install pytz package during backend setup [@MickLesk](https://github.com/MickLesk) ([#15014](https://github.com/community-scripts/ProxmoxVE/pull/15014))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Proxmox Backup Server - use deb822 [@MickLesk](https://github.com/MickLesk) ([#15013](https://github.com/community-scripts/ProxmoxVE/pull/15013))
+
+## 2026-06-08
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - security: Fix HTTP to HTTPS for all package and repository downloads [@MickLesk](https://github.com/MickLesk) ([#15009](https://github.com/community-scripts/ProxmoxVE/pull/15009))
+    - homelable: preserve MCP server config across updates [@ferr079](https://github.com/ferr079) ([#14996](https://github.com/community-scripts/ProxmoxVE/pull/14996))
+    - changedetection: migrate Python install to uv venv [@ferr079](https://github.com/ferr079) ([#14995](https://github.com/community-scripts/ProxmoxVE/pull/14995))
+
+  - #### 🔧 Refactor
+
+    - Update Flowwiseai to node 24 [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14999](https://github.com/community-scripts/ProxmoxVE/pull/14999))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - security: Fix MITM RCE vulnerability in microcode scripts (CVE) [@MickLesk](https://github.com/MickLesk) ([#15007](https://github.com/community-scripts/ProxmoxVE/pull/15007))
+
+## 2026-06-07
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: use actual installed PostgreSQL version for vchord package [@MickLesk](https://github.com/MickLesk) ([#14989](https://github.com/community-scripts/ProxmoxVE/pull/14989))
+
+  - #### 🔧 Refactor
+
+    - Navidrome: remove genereic filebrowser addon setup [@MickLesk](https://github.com/MickLesk) ([#14991](https://github.com/community-scripts/ProxmoxVE/pull/14991))
+
+## 2026-06-06
+
+### 🆕 New Scripts
+
+  - Spliit ([#14966](https://github.com/community-scripts/ProxmoxVE/pull/14966))
+- Tolgee ([#14965](https://github.com/community-scripts/ProxmoxVE/pull/14965))
+- XYOps ([#14967](https://github.com/community-scripts/ProxmoxVE/pull/14967))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Photoprism: Allow env variables with spaces [@Badintral](https://github.com/Badintral) ([#14969](https://github.com/community-scripts/ProxmoxVE/pull/14969))
+
+## 2026-06-05
+
+### 🆕 New Scripts
+
+  - MatterJS-Server ([#14951](https://github.com/community-scripts/ProxmoxVE/pull/14951))
+- CyberChef ([#14952](https://github.com/community-scripts/ProxmoxVE/pull/14952))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Jackett: Create missing .env file [@tremor021](https://github.com/tremor021) ([#14959](https://github.com/community-scripts/ProxmoxVE/pull/14959))
+    - OpenThread-BR: use systemd instead of init.d [@tomfrenzel](https://github.com/tomfrenzel) ([#14942](https://github.com/community-scripts/ProxmoxVE/pull/14942))
+
+  - #### ✨ New Features
+
+    - AMD IGPU support [@Learath](https://github.com/Learath) ([#14944](https://github.com/community-scripts/ProxmoxVE/pull/14944))
+
+  - #### 💥 Breaking Changes
+
+    - update authentik to 2026.5.2 [@thieneret](https://github.com/thieneret) ([#14846](https://github.com/community-scripts/ProxmoxVE/pull/14846))
+
+## 2026-06-04
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix status messages for several alpine scripts [@tremor021](https://github.com/tremor021) ([#14911](https://github.com/community-scripts/ProxmoxVE/pull/14911))
+    - ReactiveResume: Fix Service Path [@MickLesk](https://github.com/MickLesk) ([#14926](https://github.com/community-scripts/ProxmoxVE/pull/14926))
+    - Jellyfin: install intel-igc deps before intel-opencl-icd to fix dependency order [@MickLesk](https://github.com/MickLesk) ([#14927](https://github.com/community-scripts/ProxmoxVE/pull/14927))
+
+  - #### 🔧 Refactor
+
+    - OpenThread-BR: use official GitHub releases [@tomfrenzel](https://github.com/tomfrenzel) ([#14916](https://github.com/community-scripts/ProxmoxVE/pull/14916))
+    - Grist: remove extra text at the end of installation [@tremor021](https://github.com/tremor021) ([#14905](https://github.com/community-scripts/ProxmoxVE/pull/14905))
+
+### ❔ Uncategorized
+
+  - chore(ct): sync sparkyfitness defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#14925](https://github.com/community-scripts/ProxmoxVE/pull/14925))
+
+## 2026-06-03
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Glance: Use separate directory for configuration files [@tremor021](https://github.com/tremor021) ([#14906](https://github.com/community-scripts/ProxmoxVE/pull/14906))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - [core]: Fix alignment for `msg_` functions [@tremor021](https://github.com/tremor021) ([#14908](https://github.com/community-scripts/ProxmoxVE/pull/14908))
+
+## 2026-06-02
+
+### 🆕 New Scripts
+
+  - DDNS-Updater ([#14883](https://github.com/community-scripts/ProxmoxVE/pull/14883))
+- InvoiceShelf ([#14882](https://github.com/community-scripts/ProxmoxVE/pull/14882))
+- Certimate ([#14881](https://github.com/community-scripts/ProxmoxVE/pull/14881))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - OpenThread-BR: preserve config during update [@tomfrenzel](https://github.com/tomfrenzel) ([#14893](https://github.com/community-scripts/ProxmoxVE/pull/14893))
+    - infisical: fix update abort due to creds field mismatch (#14868) [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14870](https://github.com/community-scripts/ProxmoxVE/pull/14870))
+
+  - #### ✨ New Features
+
+    - feat(degoog): enable default valkey cache integration [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14871](https://github.com/community-scripts/ProxmoxVE/pull/14871))
+
+  - #### 🔧 Refactor
+
+    - chore: bump Node version in selected scripts [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14873](https://github.com/community-scripts/ProxmoxVE/pull/14873))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func: add support for Rust installation profile in setup_rust [@MickLesk](https://github.com/MickLesk) ([#14872](https://github.com/community-scripts/ProxmoxVE/pull/14872))
+
+### 📂 Github
+
+  - fix(workflow): only flag node drift when local is behind upstream [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14874](https://github.com/community-scripts/ProxmoxVE/pull/14874))
+
+## 2026-06-01
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(dispatcharr): forward nginx port for M3U URLs on new installs [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14862](https://github.com/community-scripts/ProxmoxVE/pull/14862))
+    - Set environment paths in service for apprise-api-install.sh [@SystemIdleProcess](https://github.com/SystemIdleProcess) ([#14805](https://github.com/community-scripts/ProxmoxVE/pull/14805))
+    - fix(fireshare): rebuild client on update to fix nginx 500 [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14848](https://github.com/community-scripts/ProxmoxVE/pull/14848))
+    - Fix Kan build failure (TS7016 nodemailer) [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14856](https://github.com/community-scripts/ProxmoxVE/pull/14856))
+    - fix(firefly): set Data Importer APP_URL for subdirectory install [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14847](https://github.com/community-scripts/ProxmoxVE/pull/14847))
+    - kan: extend fetch_and_deploy_gh_tag to use 'latest' tag [@MickLesk](https://github.com/MickLesk) ([#14853](https://github.com/community-scripts/ProxmoxVE/pull/14853))
+    - Glance: preserve glance.yml across updates [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14845](https://github.com/community-scripts/ProxmoxVE/pull/14845))
+    - NginxProxymanager: set Certbot version in npm.service environment variable (2.15.0) [@MickLesk](https://github.com/MickLesk) ([#14843](https://github.com/community-scripts/ProxmoxVE/pull/14843))
+    - [FileFlows] Fix service handling by using systemctl --all with quoted glob [@adrianmusante](https://github.com/adrianmusante) ([#14838](https://github.com/community-scripts/ProxmoxVE/pull/14838))
+
+  - #### ✨ New Features
+
+    - Kometa: also update Quickstart in update_script [@MickLesk](https://github.com/MickLesk) ([#14529](https://github.com/community-scripts/ProxmoxVE/pull/14529))
+
+## 2026-05-31
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Manyfold: regenerate Rails credentials on update to fix encryption mimatch [@MickLesk](https://github.com/MickLesk) ([#14817](https://github.com/community-scripts/ProxmoxVE/pull/14817))
+    - OpenThread-BR: use correct ipv6 configuration [@tomfrenzel](https://github.com/tomfrenzel) ([#14829](https://github.com/community-scripts/ProxmoxVE/pull/14829))
+
+  - #### 🔧 Refactor
+
+    - Webtrees: use PHP CLI for initial setup instead of curl to setup wizard [@MickLesk](https://github.com/MickLesk) ([#14818](https://github.com/community-scripts/ProxmoxVE/pull/14818))
+    - Kima-Hub: use curl_with_retry for ML model downloads to fix possible timeout issues [@MickLesk](https://github.com/MickLesk) ([#14816](https://github.com/community-scripts/ProxmoxVE/pull/14816))
+
+### 🧰 Tools
+
+  - #### 🔧 Refactor
+
+    - PBS4-Upgrade: update current PBS3 packages before switching to Trixie repos [@MickLesk](https://github.com/MickLesk) ([#14815](https://github.com/community-scripts/ProxmoxVE/pull/14815))
+
+## 2026-05-30
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Flatnotes: fix empty package name in pyproject.toml [@MickLesk](https://github.com/MickLesk) ([#14814](https://github.com/community-scripts/ProxmoxVE/pull/14814))
+
+## 2026-05-29
+
+### 🆕 New Scripts
+
+  - Kan ([#14776](https://github.com/community-scripts/ProxmoxVE/pull/14776))
+- Dynacat ([#14777](https://github.com/community-scripts/ProxmoxVE/pull/14777))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix lobehub docker path [@dannyyy](https://github.com/dannyyy) ([#14793](https://github.com/community-scripts/ProxmoxVE/pull/14793))
+    - karakeep: add more hdd space [@MickLesk](https://github.com/MickLesk) ([#14797](https://github.com/community-scripts/ProxmoxVE/pull/14797))
+    - Grist: Revert installation of EE [@tremor021](https://github.com/tremor021) ([#14784](https://github.com/community-scripts/ProxmoxVE/pull/14784))
+
+  - #### 🔧 Refactor
+
+    - Sure: Remove `$STD` for `systemctl enable -q` [@tremor021](https://github.com/tremor021) ([#14801](https://github.com/community-scripts/ProxmoxVE/pull/14801))
@@ -60,7 +60,6 @@ function update_script() {
    $STD .venv/bin/python -m manage migrate

    cd /opt/adventurelog/frontend
-    grep -q "^dangerouslyAllowAllBuilds:" ./pnpm-workspace.yaml 2>/dev/null || echo "dangerouslyAllowAllBuilds: true" >>./pnpm-workspace.yaml
    $STD pnpm i
    $STD pnpm build
    msg_ok "Updated AdventureLog"
@@ -1,127 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/toeverything/AFFiNE
-
-APP="AFFiNE"
-var_tags="${var_tags:-knowledge;notes;workspace}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/affine ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "affine_app" "toeverything/AFFiNE"; then
-    msg_info "Stopping Services"
-    systemctl stop affine-web affine-worker
-    msg_ok "Stopped Services"
-
-    create_backup /root/.affine/config /root/.affine/storage
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "affine_app" "toeverything/AFFiNE" "tarball" "latest" "/opt/affine"
-
-    msg_info "Rebuilding Application (Patience)"
-    cd /opt/affine
-    source /root/.profile
-    export PATH="/root/.cargo/bin:/root/.rbenv/shims:$PATH"
-
-    set -a && source /opt/affine/.env && set +a
-
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export VITE_CORE_COMMIT_SHA=$(cat ~/.affine_app)
-
-    # Initialize git repo (required for build process)
-    $STD git init -q
-    $STD git config user.email "build@local"
-    $STD git config user.name "Build"
-    $STD git add -A
-    $STD git commit -q -m "update"
-
-    # Force Turbo to run sequentially
-    mkdir -p /opt/affine/.turbo
-    cat <<TURBO >/opt/affine/.turbo/config.json
-{
-  "concurrency": 1
-}
-TURBO
-
-    $STD corepack enable
-    $STD corepack prepare yarn@4.12.0 --activate
-    $STD yarn config set enableTelemetry 0
-
-    export NODE_OPTIONS="--max-old-space-size=2048"
-    $STD yarn install
-    $STD npm install -g typescript
-
-    $STD yarn affine @affine/native build
-    $STD yarn affine @affine/server-native build
-
-    # Create architecture-specific symlinks
-    ln -sf /opt/affine/packages/backend/native/server-native.node \
-      /opt/affine/packages/backend/native/server-native.x64.node
-    ln -sf /opt/affine/packages/backend/native/server-native.node \
-      /opt/affine/packages/backend/native/server-native.arm64.node
-    ln -sf /opt/affine/packages/backend/native/server-native.node \
-      /opt/affine/packages/backend/native/server-native.armv7.node
-
-    $STD yarn affine init
-    $STD yarn affine build -p @affine/reader
-    $STD yarn affine build -p @affine/server
-
-    export NODE_OPTIONS="--max-old-space-size=4096"
-    $STD yarn affine build -p @affine/web
-    $STD yarn affine build -p @affine/admin
-
-    # Copy web assets
-    mkdir -p /opt/affine/packages/backend/server/static
-    cp -r /opt/affine/packages/frontend/apps/web/dist/* /opt/affine/packages/backend/server/static/
-    mkdir -p /opt/affine/packages/backend/server/static/admin
-    cp -r /opt/affine/packages/frontend/admin/dist/* /opt/affine/packages/backend/server/static/admin/
-
-    # Mobile manifest placeholder
-    mkdir -p /opt/affine/packages/backend/server/static/mobile
-    echo '{"publicPath":"/","js":[],"css":[],"gitHash":"","description":""}' \
-      >/opt/affine/packages/backend/server/static/mobile/assets-manifest.json
-
-    # Run migrations
-    cd /opt/affine/packages/backend/server
-    set -a && source /opt/affine/.env && set +a
-    $STD node ./scripts/self-host-predeploy.js
-
-    restore_backup
-
-    msg_info "Starting Services"
-    systemctl start affine-web affine-worker
-    msg_ok "Started Services"
-    msg_ok "Updated Successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3010/admin${CL}"
@@ -54,5 +54,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following IP:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
+echo -e "${INFO}${YW} Access it using the following IP:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -33,7 +33,7 @@ function update_script() {
  INSTALLED=$(cat ~/.airflow 2>/dev/null || echo "0")
  LATEST=$(curl -fsSL "https://pypi.org/pypi/apache-airflow/json" | jq -r '.info.version')

-  if [[ $INSTALLED == "$LATEST" ]]; then
+  if [[ "$INSTALLED" == "$LATEST" ]]; then
    msg_ok "Already on the latest version (${LATEST})"
    exit
  fi
@@ -71,5 +71,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -30,7 +30,7 @@ function update_script() {
    exit
  fi

-  read -r MAJOR MINOR PATCH <<<"$(sed 's/^version\///; s/\./ /g' "$HOME/.authentik")"
+  read -r MAJOR MINOR PATCH <<< "$(sed 's/^version\///; s/\./ /g' "$HOME/.authentik")"

  msg_info "Update dependencies"
  ensure_dependencies crossbuild-essential-$(arch_resolve) gcc-$(arch_resolve "x86-64" "aarch64")-linux-gnu cmake clang libunwind-18-dev
@@ -66,26 +66,26 @@ function update_script() {
  if check_for_gh_release "authentik" "goauthentik/authentik" "${AUTHENTIK_VERSION}"; then
    msg_info "Stopping Services"
    systemctl stop authentik-server authentik-worker
-    if [[ $(systemctl is-active authentik-ldap) == active ]]; then
-      systemctl stop authentik-ldap
-    fi
-    if [[ $(systemctl is-active authentik-rac) == active ]]; then
-      systemctl stop authentik-rac
-    fi
-    if [[ $(systemctl is-active authentik-radius) == active ]]; then
-      systemctl stop authentik-radius
-    fi
+	if [[ $(systemctl is-active authentik-ldap) == active ]]; then
+		systemctl stop authentik-ldap
+	fi
+	if [[ $(systemctl is-active authentik-rac) == active ]]; then
+		systemctl stop authentik-rac
+	fi
+	if [[ $(systemctl is-active authentik-radius) == active ]]; then
+		systemctl stop authentik-radius
+	fi
    msg_ok "Stopped Services"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik"

-    msg_info "Configuring rust"
-    cd /opt/authentik
-    $STD rustup install
-    $STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)"
-    msg_ok "Configured rust"
+	msg_info "Configuring rust"
+	cd /opt/authentik
+	$STD rustup install
+	$STD rustup default "$(sed -n 's/channel = "\(.*\)"/\1/p' rust-toolchain.toml)"
+	msg_ok "Configured rust"

-    msg_info "Updating web"
+	msg_info "Updating web"
    cd /opt/authentik/web
    export NODE_ENV="production"
    $STD npm install
@@ -99,18 +99,18 @@ function update_script() {
    export CC="$(arch_resolve "x86_64" "aarch64")-linux-gnu-gcc"
    $STD go mod download
    $STD go build -o /opt/authentik/authentik-server ./cmd/server
-    $STD go build -o /opt/authentik/ldap ./cmd/ldap
-    $STD go build -o /opt/authentik/rac ./cmd/rac
-    $STD go build -o /opt/authentik/radius ./cmd/radius
+	$STD go build -o /opt/authentik/ldap ./cmd/ldap
+	$STD go build -o /opt/authentik/rac ./cmd/rac
+	$STD go build -o /opt/authentik/radius ./cmd/radius
    msg_ok "Updated go proxy"

-    msg_info "Building worker"
-    export AWS_LC_FIPS_SYS_CC="clang"
-    cd /opt/authentik
-    $STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1
-    cp ./target/release/authentik /opt/authentik/authentik-worker
-    rm -r ./target
-    msg_ok "Built worker"
+	msg_info "Building worker"
+	export AWS_LC_FIPS_SYS_CC="clang"
+	cd /opt/authentik
+	$STD cargo build --package authentik --no-default-features --features core --locked --release --jobs 1
+	cp ./target/release/authentik /opt/authentik/authentik-worker
+	rm -r ./target
+	msg_ok "Built worker"

    msg_info "Updating python server"
    export UV_NO_BINARY_PACKAGE="cryptography lxml python-kadmin-rs xmlsec"
@@ -125,26 +125,26 @@ function update_script() {
    msg_ok "Updated python server"

    if [[ $MAJOR == 2026 && $MINOR -lt 5 ]]; then
-      msg_info "Updating Worker and Server config"
-      cp /etc/authentik/config.yml /etc/authentik/config.bak
-      yq -i ".postgresql.conn_max_age = 0" /etc/authentik/config.yml
-      yq -i ".postgresql.conn_health_checks = false" /etc/authentik/config.yml
-      yq -i '.listen.debug_tokio = "[::]:6669"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.console_subscriber = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.h2 = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.hyper_util = "warn"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.mio = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.notify = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.reqwest = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.runtime = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.rustls = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.sqlx = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.sqlx_postgres = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.tokio = "info"' /etc/authentik/config.yml
-      yq -i '.log.rust_log.tungstenite = "info"' /etc/authentik/config.yml
-      yq -i ".web.workers = 2" /etc/authentik/config.yml
-      mv /etc/default/authentik /etc/default/authentik.bak
-      cat <<EOF >/etc/default/authentik-server
+	  msg_info "Updating Worker and Server config"
+	  cp /etc/authentik/config.yml /etc/authentik/config.bak
+	  yq -i ".postgresql.conn_max_age = 0" /etc/authentik/config.yml
+	  yq -i ".postgresql.conn_health_checks = false" /etc/authentik/config.yml
+	  yq -i ".listen.debug_tokio = \"[::]:6669\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.console_subscriber = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.h2 = \"info\""  /etc/authentik/config.yml
+      yq -i ".log.rust_log.hyper_util = \"warn\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.mio = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.notify = \"info\"" /etc/authentik/config.yml
+	  yq -i ".log.rust_log.reqwest = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.runtime = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.rustls = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.sqlx = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.sqlx_postgres = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.tokio = \"info\"" /etc/authentik/config.yml
+      yq -i ".log.rust_log.tungstenite = \"info\"" /etc/authentik/config.yml
+	  yq -i ".web.workers = 2" /etc/authentik/config.yml
+	  mv /etc/default/authentik /etc/default/authentik.bak
+	  cat <<EOF >/etc/default/authentik-server
 TMPDIR=/dev/shm/
 UV_LINK_MODE=copy
 UV_PYTHON_DOWNLOADS=0
@@ -159,7 +159,7 @@ AUTHENTIK_LISTEN__HTTP="[::]:9000"
 AUTHENTIK_LISTEN__HTTPS="[::]:9443"
 AUTHENTIK_LISTEN__METRICS="[::]:9300"
 EOF
-      cat <<EOF >/etc/default/authentik-worker
+	  cat <<EOF >/etc/default/authentik-worker
 TMPDIR=/dev/shm/
 UV_LINK_MODE=copy
 UV_PYTHON_DOWNLOADS=0
@@ -174,11 +174,11 @@ AUTHENTIK_LISTEN__HTTP="[::]:8000"
 AUTHENTIK_LISTEN__HTTPS="[::]:8443"
 AUTHENTIK_LISTEN__METRICS="[::]:8300"
 EOF
-      msg_ok "Updated Worker and Server config!"
-      msg_warn "Please check /etc/default/authentik-worker and /etc/default/authentik-server config files for port configurations!"
+	  msg_ok "Updated Worker and Server config!"
+	  msg_warn "Please check /etc/default/authentik-worker and /etc/default/authentik-server config files for port configurations!"

-      msg_info "Updating services"
-      cat <<EOF >/etc/systemd/system/authentik-server.service
+	  msg_info "Updating services"
+	  cat <<EOF >/etc/systemd/system/authentik-server.service
 [Unit]
 Description=authentik Go Server (API Gateway)
 After=network.target
@@ -198,7 +198,7 @@ EnvironmentFile=/etc/default/authentik-server
 WantedBy=multi-user.target
 EOF

-      cat <<EOF >/etc/systemd/system/authentik-worker.service
+	  cat <<EOF >/etc/systemd/system/authentik-worker.service
 [Unit]
 Description=authentik Worker
 After=network.target postgresql.service
@@ -217,21 +217,21 @@ RestartSec=5
 [Install]
 WantedBy=multi-user.target
 EOF
-      systemctl daemon-reload
-      msg_ok "Updated services"
-    fi
+	  systemctl daemon-reload
+	  msg_ok "Updated services"
+	fi
  fi

  msg_info "Starting Services"
  systemctl start authentik-server authentik-worker
  if [[ $(systemctl is-enabled authentik-ldap) == enabled ]]; then
-    systemctl start authentik-ldap
+  	systemctl start authentik-ldap
  fi
  if [[ $(systemctl is-enabled authentik-rac) == enabled ]]; then
-    systemctl start authentik-rac
+  	systemctl start authentik-rac
  fi
  if [[ $(systemctl is-enabled authentik-radius) == enabled ]]; then
-    systemctl start authentik-radius
+  	systemctl start authentik-radius
  fi
  msg_ok "Started Services"
  msg_ok "Updated successfully!"
@@ -270,5 +270,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}:9443${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:9443${CL}"
@@ -40,8 +40,7 @@ function update_script() {
    create_backup /opt/babybuddy/babybuddy/settings/production.py

    msg_info "Cleaning old files"
-    cd /opt/babybuddy || exit
-    find . -mindepth 1 -maxdepth 1 ! -name '.venv' -exec rm -rf -- {} +
+    find . -mindepth 1 -maxdepth 1 ! -name '.venv' -exec rm -rf {} +
    msg_ok "Cleaned old files"

    fetch_and_deploy_gh_release "babybuddy" "babybuddy/babybuddy" "tarball"
@@ -52,7 +51,6 @@ function update_script() {
    source .venv/bin/activate
    $STD uv pip install -r requirements.txt
    export DJANGO_SETTINGS_MODULE=babybuddy.settings.production
-    $STD python manage.py makemigrations
    $STD python manage.py migrate
    msg_ok "Updated ${APP}"

@@ -71,5 +71,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -75,5 +75,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -41,5 +41,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8123${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8123${CL}"
@@ -52,5 +52,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Authenticate your AI providers via the management panel at:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8317/management.html${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8317${CL}"
@@ -52,5 +52,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access cross-seed API using the following URL:${CL}"
+echo -e "${INFO}${YW} Access cross-seed API using the following URL:${CL}"
 echo -e "${GATEWAY}${BGN}http://${IP}:2468${CL}"
@@ -26,8 +26,8 @@ function update_script() {
  check_container_resources

  if [[ ! -d /opt/cyberchef ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
+      msg_error "No ${APP} Installation Found!"
+      exit
  fi

  if check_for_gh_release "cyberchef" "gchq/CyberChef"; then
@@ -58,5 +58,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
@@ -39,6 +39,7 @@ function update_script() {

    create_backup /opt/docmost/.env \
      /opt/docmost/data
+
    fetch_and_deploy_gh_release "docmost" "docmost/docmost" "tarball"

    restore_backup
@@ -53,11 +54,9 @@ function update_script() {
      sed -i '/^@Module({$/i @Global()' /opt/docmost/apps/server/src/core/core.module.ts
    fi

-    msg_info "Configuring Docmost"
-    cd /opt/docmost
    $STD pnpm install --force
    $STD pnpm build
-    msg_ok "Configured Docmost"
+    msg_ok "Updated ${APP}"

    msg_info "Starting Service"
    systemctl start docmost
@@ -34,22 +34,31 @@ function update_script() {
    systemctl stop endurain
    msg_ok "Stopped Service"

-    create_backup /opt/endurain/.env /opt/endurain/frontend/dist/env.js
+    msg_info "Creating Backup"
+    cp /opt/endurain/.env /opt/endurain.env
+    cp /opt/endurain/frontend/app/dist/env.js /opt/endurain.env.js
+    msg_ok "Created Backup"
+
    CLEAN_INSTALL=1 fetch_and_deploy_codeberg_release "endurain" "endurain-project/endurain" "tarball" "latest" "/opt/endurain"

    msg_info "Preparing Update"
    cd /opt/endurain
-    rm -rf /opt/endurain/{docs,example.env,screenshot_01.png} /opt/endurain/docker* /opt/endurain/*.yml
+    rm -rf \
+      /opt/endurain/{docs,example.env,screenshot_01.png} \
+      /opt/endurain/docker* \
+      /opt/endurain/*.yml
+    cp /opt/endurain.env /opt/endurain/.env
+    rm /opt/endurain.env
    msg_ok "Prepared Update"

    msg_info "Updating Frontend"
-    cd /opt/endurain/frontend
+    cd /opt/endurain/frontend/app
    $STD npm ci
    $STD npm run build
+    cp /opt/endurain.env.js /opt/endurain/frontend/app/dist/env.js
+    rm /opt/endurain.env.js
    msg_ok "Updated Frontend"

-    restore_backup
-
    msg_info "Updating Backend"
    cd /opt/endurain/backend
    UV_VERSION=$(grep -Po 'required-version\s*=\s*"\K[^"]+' pyproject.toml 2>/dev/null || echo "0.11.18")
@@ -61,5 +61,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:9001${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9001${CL}"
@@ -1,79 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ZimengXiong/ExcaliDash
-
-APP="ExcaliDash"
-var_tags="${var_tags:-documents;drawing;collaboration}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/excalidash ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "excalidash" "ZimengXiong/ExcaliDash"; then
-    msg_info "Stopping Service"
-    systemctl stop excalidash
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "excalidash" "ZimengXiong/ExcaliDash" "tarball"
-    ln -sf /opt/excalidash_data/.env /opt/excalidash/backend/.env
-    set -a && source /opt/excalidash_data/.env && set +a
-
-    msg_info "Configuring Database Provider (${DATABASE_PROVIDER:-sqlite})"
-    cd /opt/excalidash/backend
-    sed -i '/datasource db {/,/}/ s/provider = env("[^"]*")/provider = "'"${DATABASE_PROVIDER:-sqlite}"'"/' prisma/schema.prisma
-    mv prisma/migrations/"${DATABASE_PROVIDER:-sqlite}"/* prisma/migrations/
-    rm -rf prisma/migrations/postgresql prisma/migrations/sqlite
-    msg_ok "Configured Database Provider"
-
-    msg_info "Rebuilding Application"
-    $STD npm ci
-    $STD npx prisma generate
-    $STD npx tsc
-    cd /opt/excalidash/frontend
-    $STD npm ci
-    $STD npm run build
-    cp -r /opt/excalidash/frontend/dist/. /var/www/excalidash/
-    msg_ok "Rebuilt Application"
-
-    msg_info "Running Migrations"
-    cd /opt/excalidash/backend
-    $STD npx prisma migrate deploy
-    msg_ok "Ran Migrations"
-
-    msg_info "Starting Service"
-    systemctl start excalidash
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:6767${CL}"
@@ -75,5 +75,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:9180${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9180${CL}"
@@ -43,28 +43,6 @@ function update_script() {
    tar -czf "$backup_filename" -C /opt/fileflows Data
    msg_ok "Backup Created"

-    # FileFlows tracks the latest release, whose .NET target can move (e.g. 8 -> 10);
-    # ensure the current ASP.NET Core Runtime so an existing install doesn't fail to
-    # start after updating to a newer .NET major version.
-    msg_info "Ensuring ASP.NET Core Runtime"
-    if [[ "$(arch_resolve)" == "arm64" ]]; then
-      if [[ ! -x /usr/lib/dotnet10/dotnet ]]; then
-        curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-        $STD bash /tmp/dotnet-install.sh --channel 10.0 --runtime aspnetcore --install-dir /usr/lib/dotnet10
-        ln -sf /usr/lib/dotnet10/dotnet /usr/bin/dotnet
-        rm -f /tmp/dotnet-install.sh
-      fi
-    elif ! is_package_installed "aspnetcore-runtime-10.0"; then
-      $STD apt remove -y aspnetcore-runtime-8.0 aspnetcore-runtime-9.0 2>/dev/null || true
-      setup_deb822_repo \
-        "microsoft" \
-        "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-        "https://packages.microsoft.com/debian/13/prod/" \
-        "trixie"
-      $STD apt install -y aspnetcore-runtime-10.0
-    fi
-    msg_ok "Ensured ASP.NET Core Runtime"
-
    fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"

    msg_info "Starting Service"
@@ -35,22 +35,12 @@ function update_script() {
    systemctl stop fireshare
    msg_ok "Stopped Service"

-    create_backup /opt/fireshare/fireshare.env
+    mv /opt/fireshare/fireshare.env /opt
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "fireshare" "ShaneIsrael/fireshare" "tarball"
-    restore_backup
+    mv /opt/fireshare.env /opt/fireshare
    rm -f /usr/local/bin/fireshare

-    if ! grep -q "__FIRESHARE_PORT__" /etc/nginx/nginx.conf; then
-      cp /opt/fireshare/app/nginx/prod.conf /etc/nginx/nginx.conf
-      sed -i 's|root /processed/|root /opt/fireshare-processed/|g' /etc/nginx/nginx.conf
-      sed -i 's/^user[[:space:]]\+nginx;/user  root;/' /etc/nginx/nginx.conf
-      sed -i 's|root[[:space:]]\+/app/build;|root /opt/fireshare/app/client/build;|' /etc/nginx/nginx.conf
-      sed -i 's/__FIRESHARE_PORT__/80/g' /etc/nginx/nginx.conf
-      cp /opt/fireshare/app/nginx/error.html /etc/nginx/
-      cp /opt/fireshare/app/nginx/api_unavailable.html /etc/nginx/
-    fi
-    msg_info "Configuring Fireshare"
-
+    msg_info "Updating Fireshare"
    cd /opt/fireshare
    $STD uv venv --clear
    $STD .venv/bin/python -m ensurepip --upgrade
@@ -63,10 +53,13 @@ function update_script() {
    export VIDEO_DIRECTORY=/opt/fireshare-videos
    export PROCESSED_DIRECTORY=/opt/fireshare-processed
    $STD uv run flask db upgrade
+
+    msg_info "Building Fireshare Client"
    cd /opt/fireshare/app/client
    $STD npm install
    $STD npm run build
-    msg_ok "Configured Fireshare"
+    msg_ok "Built Fireshare Client"
+    msg_ok "Updated Fireshare"

    msg_info "Starting Service"
    systemctl start fireshare
@@ -36,7 +36,7 @@ function update_script() {
    msg_ok "Stopped Service"

    create_backup /opt/flame/.env \
-      /opt/flame/data
+                  /opt/flame/data
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "flame" "pawelmalak/flame" "tarball"
    restore_backup

@@ -65,5 +65,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:5005${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5005${CL}"
@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 tteck
+# Author: tteck (tteckster)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://flowiseai.com/ | Github: https://github.com/FlowiseAI/Flowise
+
+APP="FlowiseAI"
+var_tags="${var_tags:-low-code}"
+var_disk="${var_disk:-10}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /etc/systemd/system/flowise.service ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
+
+  msg_info "Updating FlowiseAI (this may take some time)"
+  systemctl stop flowise
+  $STD pnpm add -g flowise
+  if grep -q 'ExecStart=npx flowise start' /etc/systemd/system/flowise.service; then
+    sed -i 's|ExecStart=npx flowise start|ExecStart=flowise start|' /etc/systemd/system/flowise.service
+    systemctl daemon-reload
+  fi
+  systemctl start flowise
+  msg_ok "Updated FlowiseAI"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -60,5 +60,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}:8443${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:8443${CL}"
@@ -1,79 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Simon Friedrich (lengschder97)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://forgejo.org/
-
-APP="Forgejo-Runner"
-var_tags="${var_tags:-ci}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-var_nesting="${var_nesting:-1}"
-var_keyctl="${var_keyctl:-1}"
-
-export var_forgejo_instance="${var_forgejo_instance:-}"
-export var_forgejo_runner_token="${var_forgejo_runner_token:-}"
-export var_runner_labels="${var_runner_labels:-}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/local/bin/forgejo-runner ]]; then
-    msg_error "No ${APP} installation found!"
-    exit 1
-  fi
-
-  RELEASE=$(curl -fsSL https://data.forgejo.org/api/v1/repos/forgejo/runner/releases/latest | grep -oP '"tag_name":\s*"\K[^"]+' | sed 's/^v//')
-  if [[ "${RELEASE}" == "$(cat ~/.forgejo-runner 2>/dev/null)" ]]; then
-    msg_ok "No update required. ${APP} is already at v${RELEASE}"
-    exit
-  fi
-
-  msg_info "Stopping Services"
-  systemctl stop forgejo-runner
-  msg_ok "Stopped Services"
-
-  msg_info "Updating Forgejo Runner to v${RELEASE}"
-  curl -fsSL "https://code.forgejo.org/forgejo/runner/releases/download/v${RELEASE}/forgejo-runner-${RELEASE}-linux-$(arch_resolve)" -o /usr/local/bin/forgejo-runner
-  chmod +x /usr/local/bin/forgejo-runner
-  echo "${RELEASE}" >~/.forgejo-runner
-  msg_ok "Updated Forgejo Runner"
-
-  msg_info "Starting Services"
-  systemctl start forgejo-runner
-  msg_ok "Started Services"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-if [[ -n "${mode:-}" ]]; then
-  if [[ -z "${var_forgejo_instance:-}" ]]; then
-    msg_error "var_forgejo_instance is required for unattended installs."
-    exit 1
-  fi
-  if [[ -z "${var_forgejo_runner_token:-}" ]]; then
-    msg_error "var_forgejo_runner_token is required for unattended installs."
-    exit 1
-  fi
-fi
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} After first boot, check your Forgejo Instance for the new Runner.${CL}"
@@ -1,6 +0,0 @@
-    ___    _____________ _   ________
-   /   |  / ____/ ____(_) | / / ____/
-  / /| | / /_  / /_  / /  |/ / __/   
- / ___ |/ __/ / __/ / / /|  / /___   
-/_/  |_/_/   /_/   /_/_/ |_/_____/   
-                                     
@@ -1,6 +0,0 @@
-    ______                ___ ____             __  
-   / ____/  ___________ _/ (_) __ \____ ______/ /_ 
-  / __/ | |/_/ ___/ __ `/ / / / / / __ `/ ___/ __ \
- / /____>  </ /__/ /_/ / / / /_/ / /_/ (__  ) / / /
-/_____/_/|_|\___/\__,_/_/_/_____/\__,_/____/_/ /_/ 
-                                                   
@@ -0,0 +1,6 @@
+    ________              _           ___    ____
+   / ____/ /___ _      __(_)_______  /   |  /  _/
+  / /_  / / __ \ | /| / / / ___/ _ \/ /| |  / /  
+ / __/ / / /_/ / |/ |/ / (__  )  __/ ___ |_/ /   
+/_/   /_/\____/|__/|__/_/____/\___/_/  |_/___/   
+                                                 
@@ -1,6 +0,0 @@
-    ______                        _             ____                             
-   / ____/___  _________ ____    (_)___        / __ \__  ______  ____  ___  _____
-  / /_  / __ \/ ___/ __ `/ _ \  / / __ \______/ /_/ / / / / __ \/ __ \/ _ \/ ___/
- / __/ / /_/ / /  / /_/ /  __/ / / /_/ /_____/ _, _/ /_/ / / / / / / /  __/ /    
-/_/    \____/_/   \__, /\___/_/ /\____/     /_/ |_|\__,_/_/ /_/_/ /_/\___/_/     
-                 /____/    /___/                                                 
@@ -1,6 +0,0 @@
-    __               _____       ___ __   _ 
-   / /   ___  ____ _/ __/ |     / (_) /__(_)
-  / /   / _ \/ __ `/ /_ | | /| / / / //_/ / 
- / /___/  __/ /_/ / __/ | |/ |/ / / ,< / /  
-/_____/\___/\__,_/_/    |__/|__/_/_/|_/_/   
-                                            
@@ -1,6 +0,0 @@
-    __                     _____   __________
-   / /   ____  _________ _/ /   | / ____/  _/
-  / /   / __ \/ ___/ __ `/ / /| |/ / __ / /  
- / /___/ /_/ / /__/ /_/ / / ___ / /_/ // /   
-/_____/\____/\___/\__,_/_/_/  |_\____/___/   
-                                             
@@ -1,6 +0,0 @@
-   _____             _     __
-  / ___/____ ___  __(_)___/ /
-  \__ \/ __ `/ / / / / __  / 
- ___/ / /_/ / /_/ / / /_/ /  
-/____/\__, /\__,_/_/\__,_/   
-        /_/                  
@@ -30,6 +30,7 @@ function update_script() {
    exit
  fi

+  
  if check_for_gh_release "hev-socks5-server" "heiher/hev-socks5-server"; then
    msg_info "Stopping Service"
    systemctl stop hev-socks5-server
@@ -51,6 +52,6 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it with a SOCKS5 client using the following URL:${CL}"
+echo -e "${INFO}${YW} Access it with a SOCKS5 client using the following URL:${CL}"
 echo -e "${GATEWAY}${BGN}${IP}:1080${CL}"
 echo -e "${INFO}${YW} and the credentials stored at /root/hev.creds${CL}"
@@ -35,11 +35,6 @@ function update_script() {
    systemctl stop redis-server
    msg_ok "Services Stopped"

-    if ! grep -q "source /opt/homarr.env" /usr/bin/homarr 2>/dev/null; then
-      echo $'#!/bin/bash\nset -a\nsource /opt/homarr.env\nset +a\ncd /opt/homarr/apps/cli && timeout 10 node ./cli.cjs "$@"' >/usr/bin/homarr
-      chmod +x /usr/bin/homarr
-    fi
-
    if ! { grep -q '^REDIS_IS_EXTERNAL=' /opt/homarr/.env 2>/dev/null || grep -q '^REDIS_IS_EXTERNAL=' /opt/homarr.env 2>/dev/null; }; then
      msg_info "Fixing old structure"
      systemctl disable -q --now nginx
@@ -110,7 +110,7 @@ EOF
    msg_ok "Image-processing libraries up to date"
  fi

-  RELEASE="v3.0.2"
+  RELEASE="v2.7.5"
  if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    if [[ $(cat ~/.immich) > "2.5.1" ]]; then
      msg_info "Enabling Maintenance Mode"
@@ -124,17 +124,10 @@ EOF
    systemctl stop immich-web
    systemctl stop immich-ml
    msg_ok "Stopped Services"
-    VCHORD_RELEASE="1.1.1"
-    PG_VERSION=$(ls /etc/postgresql/ 2>/dev/null | sort -V | tail -1)
-    PG_VERSION=${PG_VERSION:-16}
+    VCHORD_RELEASE="0.5.3"
    [[ -f ~/.vchord_version ]] && mv ~/.vchord_version ~/.vectorchord
    if check_for_gh_release "VectorChord" "tensorchord/VectorChord" "${VCHORD_RELEASE}" "updated together with Immich after testing"; then
-      # dead tuples in smart_search/face_search make the REINDEX below fail with
-      # "missing chunk ... for toast value" on VectorChord 1.0.0 (#15588); must vacuum
-      # while still on the old extension version, a post-upgrade vacuum errors instead
-      $STD sudo -u postgres psql -d immich -c "VACUUM (ANALYZE) smart_search;"
-      $STD sudo -u postgres psql -d immich -c "VACUUM (ANALYZE) face_search;"
-      fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-${PG_VERSION}-vchord_*_$(arch_resolve).deb"
+      fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-16-vchord_*_$(arch_resolve).deb"
      systemctl restart postgresql
      $STD sudo -u postgres psql -d immich -c "ALTER EXTENSION vector UPDATE;"
      $STD sudo -u postgres psql -d immich -c "ALTER EXTENSION vchord UPDATE;"
@@ -147,7 +140,7 @@ EOF
    UPLOAD_DIR="$(sed -n '/^IMMICH_MEDIA_LOCATION/s/[^=]*=//p' /opt/immich/.env)"
    SRC_DIR="${INSTALL_DIR}/source"
    APP_DIR="${INSTALL_DIR}/app"
-    PLUGIN_DIR="${APP_DIR}/plugins/immich-plugin-core"
+    PLUGIN_DIR="${APP_DIR}/corePlugin"
    ML_DIR="${APP_DIR}/machine-learning"
    GEO_DIR="${INSTALL_DIR}/geodata"

@@ -175,21 +168,19 @@ EOF
    setup_uv
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "${RELEASE}" "$SRC_DIR"
    PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export CI=1
-    NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-    $STD corepack prepare "pnpm@${PNPM_VERSION}" --activate
-    export PATH="/root/.local/share/pnpm/bin:$PATH"
-    $STD pnpm config set --global dangerouslyAllowAllBuilds true
+    NODE_VERSION="24" NODE_MODULE="corepack,pnpm@${PNPM_VERSION}" setup_nodejs

    msg_info "Updating Immich web and microservices"
    cd "$SRC_DIR"/server
+    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+    export CI=1
+
    # server build
    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-    $STD pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter immich build
+    $STD pnpm --filter immich --frozen-lockfile build
    unset SHARP_IGNORE_GLOBAL_LIBVIPS
    export SHARP_FORCE_GLOBAL_LIBVIPS=true
-    $STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
+    $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"

    # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
    if [[ -f "$APP_DIR/helmet.json" ]]; then
@@ -199,50 +190,32 @@ EOF
    cp "$APP_DIR"/package.json "$APP_DIR"/bin
    sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin

-    # sdk, cli & web build
+    # openapi & web build
    cd "$SRC_DIR"
    echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
+    $STD pnpm --filter @immich/sdk --filter immich-web --frozen-lockfile --force install
    unset SHARP_FORCE_GLOBAL_LIBVIPS
    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-    $STD pnpm --filter @immich/sdk --filter immich-web --filter @immich/cli build
-    $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
+    $STD pnpm --filter @immich/sdk --filter immich-web build
    cp -a web/build "$APP_DIR"/www
    cp LICENSE "$APP_DIR"
+
+    # cli build
+    $STD pnpm --filter @immich/sdk --filter @immich/cli --frozen-lockfile install
+    $STD pnpm --filter @immich/sdk --filter @immich/cli build
+    $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
    [[ -f "$INSTALL_DIR"/start.sh ]] && mv "$INSTALL_DIR"/start.sh "$APP_DIR"/bin

    # plugins
    cd "$SRC_DIR"
-    export MISE_TRUSTED_CONFIG_PATHS="$SRC_DIR"/mise.toml
-    export MISE_DISABLE_TOOLS=github:jellyfin/jellyfin-ffmpeg
+    $STD mise trust --ignore ./mise.toml
+    $STD mise trust ./plugins/mise.toml
+    cd plugins
    $STD mise install
-    export PATH="$(mise bin-paths 2>/dev/null | tr '\n' ':')$PATH"
-    if ! command -v extism-js >/dev/null 2>&1; then
-      # extism-js ships as a bare gzip-compressed single binary (.gz) that
-      # fetch_and_deploy_gh_release cannot deploy; fetch + gunzip it directly.
-      EXTISM_ARCH="$(arch_resolve x86_64 aarch64)"
-      curl_download /tmp/extism-js.gz "https://github.com/extism/js-pdk/releases/download/v1.6.0/extism-js-${EXTISM_ARCH}-linux-v1.6.0.gz"
-      gunzip -f /tmp/extism-js.gz
-      install -m 0755 /tmp/extism-js /usr/local/bin/extism-js
-      rm -f /tmp/extism-js
-    fi
-    if ! command -v wasm-merge >/dev/null 2>&1; then
-      # extism-js needs binaryen's `wasm-merge` to build the plugin wasm. mise
-      # 2026.7.0's github backend no longer exposes `wasm-merge` on PATH (ubi only
-      # extracts a single binary), so install the pinned binaryen release from
-      # mise.toml directly. The extracted bin/ keeps libbinaryen.so alongside it.
-      BINARYEN_VERSION="$(grep -oiP 'binaryen"\s*=\s*"\Kversion_[0-9]+' "$SRC_DIR"/mise.toml | head -n1)"
-      [[ -z "$BINARYEN_VERSION" ]] && BINARYEN_VERSION="version_124"
-      BINARYEN_ARCH="$(arch_resolve x86_64 aarch64)"
-      curl_download /tmp/binaryen.tar.gz "https://github.com/WebAssembly/binaryen/releases/download/${BINARYEN_VERSION}/binaryen-${BINARYEN_VERSION}-${BINARYEN_ARCH}-linux.tar.gz"
-      tar -xzf /tmp/binaryen.tar.gz -C /opt
-      rm -f /tmp/binaryen.tar.gz
-      export PATH="/opt/binaryen-${BINARYEN_VERSION}/bin:$PATH"
-    fi
-    $STD mise exec -- pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter @immich/plugin-core install --frozen-lockfile
-    $STD mise exec -- pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter @immich/plugin-core build
+    $STD mise run build
    mkdir -p "$PLUGIN_DIR"
-    cp -r ./packages/plugin-core/dist "$PLUGIN_DIR"/dist
-    cp ./packages/plugin-core/manifest.json "$PLUGIN_DIR"
+    cp -r ./dist "$PLUGIN_DIR"/dist
+    cp ./manifest.json "$PLUGIN_DIR"
    msg_ok "Updated Immich server, web, cli and plugins"

    cd "$SRC_DIR"/machine-learning
@@ -258,13 +231,13 @@ EOF
      ML_PYTHON="python3.13"
      msg_info "Pre-installing Python ${ML_PYTHON} for machine-learning"
      for attempt in $(seq 1 3); do
-        $STD sudo --preserve-env=VIRTUAL_ENV -Pnu immich uv python install "${ML_PYTHON}" && break
+        $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv python install "${ML_PYTHON}" && break
        [[ $attempt -lt 3 ]] && msg_warn "Python download attempt $attempt failed, retrying..." && sleep 5
      done
      msg_ok "Pre-installed Python ${ML_PYTHON}"
      msg_info "Updating Intel OpenVINO machine-learning"
      for attempt in $(seq 1 3); do
-        $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -Pnu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
+        $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
        [[ $attempt -lt 3 ]] && msg_warn "uv sync attempt $attempt failed, retrying..." && sleep 10
      done
      patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-$(arch_resolve "x86_64" "aarch64")-linux-gnu.so"
@@ -273,13 +246,13 @@ EOF
      ML_PYTHON="python3.11"
      msg_info "Pre-installing Python ${ML_PYTHON} for machine-learning"
      for attempt in $(seq 1 3); do
-        $STD sudo --preserve-env=VIRTUAL_ENV -Pnu immich uv python install "${ML_PYTHON}" && break
+        $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv python install "${ML_PYTHON}" && break
        [[ $attempt -lt 3 ]] && msg_warn "Python download attempt $attempt failed, retrying..." && sleep 5
      done
      msg_ok "Pre-installed Python ${ML_PYTHON}"
      msg_info "Updating machine-learning"
      for attempt in $(seq 1 3); do
-        $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -Pnu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
+        $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -nu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
        [[ $attempt -lt 3 ]] && msg_warn "uv sync attempt $attempt failed, retrying..." && sleep 10
      done
      msg_ok "Updated machine-learning"
@@ -287,23 +260,6 @@ EOF
    cd "$SRC_DIR"
    cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
    [[ -f "$INSTALL_DIR"/ml_start.sh ]] && mv "$INSTALL_DIR"/ml_start.sh "$ML_DIR"
-    # Regenerate ml_start.sh if it is missing (e.g. lost by a previously interrupted update),
-    # otherwise immich-ml.service fails to start with status=203/EXEC
-    if [[ ! -f "$ML_DIR"/ml_start.sh ]]; then
-      cat <<EOF >"$ML_DIR"/ml_start.sh
-#!/usr/bin/env bash
-
-cd ${ML_DIR}
-. ${VIRTUAL_ENV}/bin/activate
-
-set -a
-. ${INSTALL_DIR}/.env
-set +a
-
-python3 -m immich_ml
-EOF
-      chmod +x "$ML_DIR"/ml_start.sh
-    fi
    [[ -f ~/.openvino ]] && sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
    ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
    cd "$APP_DIR"
@@ -330,27 +286,6 @@ EOF
      systemctl daemon-reload
    fi

-    # MickLesk temporary patch for HEIC thumbnail gen
-    msg_info "Patching media.repository.js"
-    MEDIA_REPO_JS="/opt/immich/app/dist/repositories/media.repository.js"
-    if [[ -f "$MEDIA_REPO_JS" ]]; then
-      python3 - <<'PY'
-from pathlib import Path
-p = Path('/opt/immich/app/dist/repositories/media.repository.js')
-s = p.read_text()
-old = "(0, sharp_1.default)(input).metadata()"
-new = "(0, sharp_1.default)(input, { unlimited: true, limitInputPixels: false }).metadata()"
-if new in s:
-    print('hotfix already there')
-elif old in s:
-    p.write_text(s.replace(old, new, 1))
-    print('hotfix applied')
-else:
-    print('pattern not found, skipped')
-PY
-    fi
-    msg_ok "Patched media.repository.js"
-
    # chown excluding upload dir contents (may be a mount with restricted permissions)
    chown immich:immich "$INSTALL_DIR"
    find "$INSTALL_DIR" -maxdepth 1 -mindepth 1 ! -name upload -exec chown -R immich:immich {} +
@@ -494,7 +429,7 @@ function compile_imagemagick() {

 function compile_libvips() {
  SOURCE=$SOURCE_DIR/libvips
-  LIBVIPS_REVISION="e01a4797cabe77d457fdfa7d776b7a7e7ca6d6a7"
+  LIBVIPS_REVISION="17ad2f62dda7e39985955da189183e594683d45e"
  if [[ "$LIBVIPS_REVISION" != "$(grep 'libvips' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
    msg_info "Recompiling libvips"
    [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
@@ -52,5 +52,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:26000${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:26000${CL}"
@@ -37,12 +37,12 @@ function update_script() {
  msg_ok "Updated Package Index"

  CANDIDATE=$(apt-cache policy kiwix-tools | awk '/Candidate:/{print $2}')
-  if [[ -z $CANDIDATE || $CANDIDATE == "(none)" ]]; then
+  if [[ -z "$CANDIDATE" || "$CANDIDATE" == "(none)" ]]; then
    msg_error "No Candidate Version Found for kiwix-tools"
    exit
  fi

-  if [[ $CURRENT == "$CANDIDATE" ]]; then
+  if [[ "$CURRENT" == "$CANDIDATE" ]]; then
    echo "${CURRENT}" >/root/.kiwix
    msg_ok "Already on latest version: ${CURRENT}"
    exit
@@ -71,5 +71,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -59,5 +59,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -83,5 +83,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access Kometa Quickstart:${CL}"
+echo -e "${INFO}${YW} Access Kometa Quickstart:${CL}"
 echo -e "${GATEWAY}${BGN}http://${IP}:7171${CL}"
@@ -1,57 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/perber/leafwiki
-
-APP="LeafWiki"
-var_tags="${var_tags:-wiki;markdown;notes}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/local/bin/leafwiki ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "leafwiki" "perber/leafwiki"; then
-    msg_info "Stopping Service"
-    systemctl stop leafwiki
-    msg_ok "Stopped Service"
-
-    create_backup /opt/leafwiki/data
-    fetch_and_deploy_gh_release "leafwiki" "perber/leafwiki" "singlefile" "latest" "/usr/local/bin" "leafwiki-v*-linux-$(arch_resolve)"
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start leafwiki
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: BillyOutlast
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mudler/LocalAGI
-
-APP="LocalAGI"
-var_tags="${var_tags:-ai}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-var_gpu="${var_gpu:-no}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/localagi ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "localagi" "mudler/LocalAGI"; then
-    msg_info "Stopping Service"
-    systemctl stop localagi
-    msg_ok "Stopped Service"
-
-    create_backup /opt/localagi/.env
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
-    restore_backup
-
-    msg_info "Building LocalAGI"
-    cd /opt/localagi/webui/react-ui
-    $STD bun install
-    $STD bun run build
-    cd /opt/localagi
-    $STD go build -o /usr/local/bin/localagi
-    msg_ok "Updated LocalAGI successfully"
-
-    msg_info "Starting Service"
-    systemctl start localagi
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-    exit
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -37,38 +37,38 @@ function update_script() {

  case $CHOICE in
  1)
-    msg_info "Stopping Loki"
-    systemctl stop loki
-    msg_ok "Stopped Loki"
+      msg_info "Stopping Loki"
+      systemctl stop loki
+      msg_ok "Stopped Loki"

-    msg_info "Updating Loki"
-    $STD apt update
-    $STD apt install -y --only-upgrade loki
-    msg_ok "Updated Loki"
+      msg_info "Updating Loki"
+      $STD apt update
+      $STD apt install -y --only-upgrade loki
+      msg_ok "Updated Loki"

-    msg_info "Starting Loki"
-    systemctl start loki
-    msg_ok "Started Loki"
-    msg_ok "Updated successfully!"
-    exit
-    ;;
-  2)
-    msg_info "Configuring Loki to listen on 0.0.0.0"
-    sed -i 's/http_listen_address:.*/http_listen_address: 0.0.0.0/' /etc/loki/config.yml
-    sed -i 's/http_listen_port:.*/http_listen_port: 3100/' /etc/loki/config.yml
-    systemctl restart loki
-    msg_ok "Configured Loki to listen on 0.0.0.0"
-    exit
-    ;;
-  3)
-    msg_info "Configuring Loki to listen on ${LOCAL_IP}"
-    sed -i "s/http_listen_address:.*/http_listen_address: $LOCAL_IP/" /etc/loki/config.yml
-    sed -i 's/http_listen_port:.*/http_listen_port: 3100/' /etc/loki/config.yml
-    systemctl restart loki
-    msg_ok "Configured Loki to listen on ${LOCAL_IP}"
-    exit
-    ;;
-  esac
+      msg_info "Starting Loki"
+      systemctl start loki
+      msg_ok "Started Loki"
+      msg_ok "Updated successfully!"
+      exit
+      ;;
+    2)
+      msg_info "Configuring Loki to listen on 0.0.0.0"
+      sed -i 's/http_listen_address:.*/http_listen_address: 0.0.0.0/' /etc/loki/config.yml
+      sed -i 's/http_listen_port:.*/http_listen_port: 3100/' /etc/loki/config.yml
+      systemctl restart loki
+      msg_ok "Configured Loki to listen on 0.0.0.0"
+      exit
+      ;;
+    3)
+      msg_info "Configuring Loki to listen on ${LOCAL_IP}"
+      sed -i "s/http_listen_address:.*/http_listen_address: $LOCAL_IP/" /etc/loki/config.yml
+      sed -i 's/http_listen_port:.*/http_listen_port: 3100/' /etc/loki/config.yml
+      systemctl restart loki
+      msg_ok "Configured Loki to listen on ${LOCAL_IP}"
+      exit
+      ;;
+    esac
  exit 0
 }

@@ -78,5 +78,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access loki using the following URL:${CL}"
+echo -e "${INFO}${YW} Access loki using the following URL:${CL}"
 echo -e "${GATEWAY}${BGN}http://${IP}:3100${CL}\n"
@@ -35,7 +35,7 @@ function update_script() {
  DEB_URL=$(curl_with_retry 'https://lyrion.org/getting-started/' | grep -oP "<a\s[^>]*href=\"\K[^\"]*${DEB_ARCH}\.deb(?=\"[^>]*>)" | head -n 1)
  RELEASE=$(echo "$DEB_URL" | grep -oP "lyrionmusicserver_\K[0-9.]+(?=_${DEB_ARCH}\.deb)")
  DEB_FILE="/tmp/lyrionmusicserver_${RELEASE}_${DEB_ARCH}.deb"
-  if [[ ! -f /opt/lyrion_version.txt ]] || [[ ${RELEASE} != "$(cat /opt/lyrion_version.txt)" ]]; then
+  if [[ ! -f /opt/lyrion_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/lyrion_version.txt)" ]]; then
    msg_info "Updating $APP to ${RELEASE}"
    curl_with_retry "$DEB_URL" "$DEB_FILE"
    $STD apt install "$DEB_FILE" -y
@@ -56,5 +56,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access the web interface at:${CL}"
+echo -e "${INFO}${YW} Access the web interface at:${CL}"
 echo -e "${GATEWAY}${BGN}http://${IP}:9000${CL}"
@@ -31,10 +31,10 @@ function update_script() {
  fi

  NODE_VERSION="24" setup_nodejs
-
+  
  CURRENT=$(cat /opt/matter-server/node_modules/matter-server/package.json | grep '"version"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
  LATEST=$(npm view matter-server version 2>/dev/null)
-  if [[ $CURRENT != "$LATEST" ]]; then
+  if [[ "$CURRENT" != "$LATEST" ]]; then
    msg_info "Stopping Service"
    systemctl stop matterjs-server
    msg_ok "Stopped Service"
@@ -60,5 +60,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:5580${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5580${CL}"
@@ -45,7 +45,7 @@ EOF
    systemctl daemon-reload
  fi

-  $STD npm install -g n8n@2.27.5
+  $STD npm update -g n8n@2.27.5
  systemctl restart n8n
  msg_ok "Updated n8n"
  msg_ok "Updated successfully!"
@@ -44,5 +44,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access NetBird by entering the container and running:${CL}"
+echo -e "${INFO}${YW} Access NetBird by entering the container and running:${CL}"
 echo -e "${GATEWAY}${BGN}netbird up${CL}"
@@ -30,7 +30,7 @@ function update_script() {
    exit
  fi

-  RELEASE="v7.2.1"
+  RELEASE="v7.0.0"
  if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    msg_info "Stopping services"
    systemctl stop opencloud opencloud-wopi
@@ -79,5 +79,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3100${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3100${CL}"
@@ -66,5 +66,5 @@ description
 msg_ok "Completed Successfully!\n"

 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8945${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8945${CL}"
@@ -38,10 +38,10 @@ function update_script() {
    msg_ok "Stopped Services"

    create_backup /opt/plane/.env \
-      /opt/plane/apps/admin/.env \
-      /opt/plane/apps/api/.env \
-      /opt/plane/apps/space/.env \
-      /opt/plane/apps/web/.env
+        /opt/plane/apps/admin/.env \
+        /opt/plane/apps/api/.env \
+        /opt/plane/apps/space/.env \
+       /opt/plane/apps/web/.env

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "plane" "makeplane/plane" "tarball"

@@ -86,5 +86,5 @@ description

 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
@@ -71,7 +71,7 @@ function update_script() {
      cp /opt/pocket-id/.env /opt/env
    fi

-    fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id_linux_$(arch_resolve)"
+    fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id-linux-$(arch_resolve)"
    mv /opt/env /opt/pocket-id/.env

    msg_info "Starting Service"
@@ -37,7 +37,7 @@ function update_script() {
    msg_ok "Stopped Services"

    create_backup /opt/postiz/.env \
-      /opt/postiz/uploads
+                  /opt/postiz/uploads

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "postiz" "gitroomhq/postiz-app" "tarball"

@@ -56,6 +56,7 @@ function update_script() {
    $STD pnpm run prisma-db-push
    msg_ok "Ran Database Migrations"

+
    mkdir -p /opt/postiz/uploads
    restore_backup

@@ -73,5 +74,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
@@ -77,5 +77,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
@@ -106,6 +106,13 @@ spring.servlet.multipart.max-file-size=5GB
 spring.servlet.multipart.max-request-size=5GB
 server.tomcat.max-part-count=100

+# Rqueue configuration
+rqueue.web.enable=false
+rqueue.job.enabled=false
+rqueue.message.durability.in-terminal-state=0
+rqueue.key.prefix=\${spring.cache.redis.key-prefix}
+rqueue.message.converter.provider.class=com.dedicatedcode.reitti.config.RQueueCustomMessageConverter
+
 # Application-specific settings
 reitti.server.advertise-uri=

@@ -161,81 +168,6 @@ PROPEOF
    msg_ok "Rewrote application.properties (backup: application.properties.bak)"
  fi

-  # Migrate v4 -> v5: Remove Rqueue configuration (replaced by Quartz Scheduler)
-  if grep -q "^rqueue\." /opt/reitti/application.properties 2>/dev/null; then
-    msg_info "Migrating to v5: Removing Rqueue configuration"
-    sed -i '/^# Rqueue configuration$/d; /^rqueue\./d' /opt/reitti/application.properties
-    msg_ok "Removed Rqueue configuration"
-  fi
-
-  # Migrate v4 -> v5: Update application.properties and nginx tile cache for v5 compatibility
-  if grep -q "^reitti\.process-data\.schedule=" /opt/reitti/application.properties 2>/dev/null; then
-    msg_info "Migrating to v5: Updating application.properties"
-    sed -i '/^reitti\.process-data\.schedule=/d' /opt/reitti/application.properties
-    sed -i 's/^reitti\.import\.processing-idle-start-time=.*/reitti.import.grace-time-seconds=30/' /opt/reitti/application.properties
-    sed -i 's/^spring\.datasource\.hikari\.maximum-pool-size=20$/spring.datasource.hikari.maximum-pool-size=30/' /opt/reitti/application.properties
-    grep -q "devices" /opt/reitti/application.properties || \
-      sed -i 's/^spring\.cache\.cache-names=\(.*\)$/spring.cache.cache-names=\1,devices,mapStyles,mapStyleJson/' /opt/reitti/application.properties
-    grep -q "org.quartz.core.ErrorLogger" /opt/reitti/application.properties || \
-      sed -i '/^logging\.level\.com\.dedicatedcode\.reitti=/a logging.level.org.quartz.core.ErrorLogger=FATAL' /opt/reitti/application.properties
-    grep -q "^spring.servlet.multipart.resolve-lazily=" /opt/reitti/application.properties || \
-      sed -i '/^spring\.servlet\.multipart\.max-request-size=/a spring.servlet.multipart.resolve-lazily=true' /opt/reitti/application.properties
-    grep -q "^spring.mvc.async.request-timeout=" /opt/reitti/application.properties || \
-      echo "spring.mvc.async.request-timeout=600000" >>/opt/reitti/application.properties
-    if ! grep -q "^spring.quartz" /opt/reitti/application.properties; then
-      cat >>/opt/reitti/application.properties <<'QUARTZEOF'
-
-# Quartz Scheduler configuration
-spring.quartz.job-store-type=jdbc
-spring.quartz.jdbc.initialize-schema=never
-spring.quartz.properties.org.quartz.jobStore.driverDelegateClass=org.quartz.impl.jdbcjobstore.PostgreSQLDelegate
-spring.quartz.properties.org.quartz.jobStore.isClustered=false
-spring.quartz.properties.org.quartz.jobStore.tablePrefix=qrtz_
-spring.quartz.properties.org.quartz.threadPool.threadCount=5
-QUARTZEOF
-    fi
-    grep -q "^reitti.import.staging.cleanup.cron=" /opt/reitti/application.properties || \
-      echo "reitti.import.staging.cleanup.cron=0 0 4 * * *" >>/opt/reitti/application.properties
-    grep -q "^reitti.batching.max-batch-size=" /opt/reitti/application.properties || \
-      printf "reitti.batching.max-batch-size=100\nreitti.batching.max-wait-time=5\n" >>/opt/reitti/application.properties
-    grep -q "^reitti.jobs.cleanup.cron=" /opt/reitti/application.properties || \
-      printf "reitti.jobs.cleanup.cron=0 0 4 * * ?\nreitti.jobs.cleanup.max-age-hours=24\n" >>/opt/reitti/application.properties
-    grep -q "^reitti.db-janitor.schedule=" /opt/reitti/application.properties || \
-      echo "reitti.db-janitor.schedule=0 0 4 * * ?" >>/opt/reitti/application.properties
-    msg_ok "Updated application.properties for v5"
-
-    if [[ -f /etc/nginx/nginx.conf ]]; then
-      msg_info "Migrating to v5: Updating nginx tile cache configuration"
-      cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak.v5
-      cat >/etc/nginx/nginx.conf <<'NGINXEOF'
-user www-data;
-
-events {
-  worker_connections 1024;
-}
-http {
-  resolver 1.1.1.1 8.8.8.8 valid=30s ipv6=off;
-  proxy_cache_path /var/cache/nginx/tiles levels=1:2 keys_zone=tiles:10m max_size=1g inactive=30d use_temp_path=off;
-  server {
-    listen 80;
-    location /custom/ {
-      set $upstream_url $http_x_reitti_upstream_url;
-      proxy_pass $upstream_url;
-      proxy_set_header Host $proxy_host;
-      proxy_set_header User-Agent "Reitti/1.0";
-      proxy_cache tiles;
-      proxy_cache_key $upstream_url;
-      proxy_cache_valid 200 30d;
-      proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
-    }
-  }
-}
-NGINXEOF
-      systemctl reload nginx
-      msg_ok "Updated nginx tile cache configuration"
-    fi
-  fi
-
  if check_for_gh_release "reitti" "dedicatedcode/reitti"; then
    msg_info "Stopping Service"
    systemctl stop reitti
@@ -247,12 +179,10 @@ NGINXEOF
    USE_ORIGINAL_FILENAME="true" fetch_and_deploy_gh_release "reitti" "dedicatedcode/reitti" "singlefile" "latest" "/opt/reitti" "reitti-app.jar"
    mv /opt/reitti/reitti-*.jar /opt/reitti/reitti.jar

-    msg_warn "v5 runs a one-time database migration on first start (GPS points → device table). This may take several minutes on large datasets — do not interrupt the container."
    msg_info "Starting Service"
    systemctl start reitti
    msg_ok "Started Service"
    msg_ok "Updated successfully!"
-    msg_warn "Post-upgrade: Verify each API token has a Device assigned in Settings → API Tokens. Tokens without a device cannot ingest location data in v5."
  fi
  exit
 }
@@ -60,4 +60,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:21114${CL}"
+echo -e "${GATEWAY}${BGN}${IP}:21114${CL}"
@@ -80,7 +80,7 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access Shlink Web Client using the following URL:${CL}"
+echo -e "${INFO}${YW} Access Shlink Web Client using the following URL:${CL}"
 echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
 echo -e "${INFO}${YW} Shlink HTTP API:${CL}"
 echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -59,5 +59,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:1349${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:1349${CL}"
@@ -72,5 +72,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -1,53 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: 007hacky007
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.squid-cache.org/
-
-APP="Squid"
-var_tags="${var_tags:-proxy}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/squid/squid.conf ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Squid"
-  $STD apt update
-  $STD apt upgrade -y
-  msg_ok "Updated Squid"
-
-  msg_info "Validating Squid Configuration"
-  $STD squid -k parse
-  msg_ok "Validated Squid Configuration"
-
-  msg_info "Restarting Squid"
-  systemctl restart squid
-  msg_ok "Restarted Squid"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Proxy endpoint:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}${IP}:3128${CL}"
@@ -52,5 +52,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -39,9 +39,12 @@ function update_script() {
    msg_ok "Stopped Services"

    create_backup /opt/twenty/.env \
-      /opt/twenty/packages/twenty-server/.local-storage
+                  /opt/twenty/packages/twenty-server/.local-storage
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "twenty" "twentyhq/twenty" "tarball"
-    restore_backup
+
+    msg_info "Restoring Configuration"
+    cp /opt/twenty.env.bak /opt/twenty/.env
+    msg_ok "Restored Configuration"

    msg_info "Building Application"
    cd /opt/twenty
@@ -63,6 +66,8 @@ function update_script() {
    $STD npx -y typeorm migration:run -d dist/database/typeorm/core/core.datasource
    msg_ok "Ran Database Migrations"

+    restore_backup
+
    msg_info "Starting Services"
    systemctl start twenty-server twenty-worker
    msg_ok "Started Services"
@@ -77,5 +82,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
@@ -50,38 +50,20 @@ function update_script() {
    $STD /usr/local/bin/uv sync --frozen
    $STD /usr/local/bin/uv run --frozen pybabel compile -d app/translations
    $STD npm --prefix app/static install
-    $STD npm --prefix app/static run build
+    $STD npm --prefix app/static run build:css
    mkdir -p ./.cache
    $STD tar -xf "$BACKUP_FILE" --directory=/
-    if grep -q 'bind' /opt/wizarr/start.sh; then
-      WIZARR_PORT=$(awk -F: '{print $2}' /opt/wizarr/start.sh | awk -F' ' '{print $1}' | tr -d '[:space:]')
+    if grep -q 'workers' /opt/wizarr/start.sh; then
+      sed -i 's/--workers 4//' /opt/wizarr/start.sh
    fi
-    sed -i -E -e 's/[[:space:]]+/ /g' \
-      -e 's/--workers 4//' \
-      -e 's/--bind 0.0.0.0:[0-9]+//' /opt/wizarr/start.sh
-    KEYS=("FLASK" "WORKERS" "HOST" "PORT")
-    for key in "${KEYS[@]}"; do
-      if ! grep -q "$key" /opt/wizarr/.env; then
-        cat <<EOF >/opt/wizarr/.env
-APP_URL=http://${LOCAL_IP}
-DISABLE_BUILTIN_AUTH=false
+    if ! grep -qE 'FLASK|WORKERS|VERSION' /opt/wizarr/.env; then
+      cat <<EOF >/opt/wizarr/.env
 FLASK_ENV=production
 GUNICORN_WORKERS=4
-HOST=0.0.0.0
-PORT=${WIZARR_PORT:-5690}
-LOG_LEVEL=info
-APP_VERSION=$(cat ~/.wizarr)
+APP_VERSION=$(sed 's/^20/v&/' ~/.wizarr)
 EOF
-      fi
-      continue
-    done
-    sed -i "s/_VERSION=.*$/_VERSION=$(cat ~/.wizarr)/" /opt/wizarr/.env
-    if grep -q 'abnormal' /etc/systemd/system/wizarr.service; then
-      sed -i 's/on-abnormal/always \
-RestartSec=10 \
-KillMode=mixed \
-TimeoutStopSec=10/' /etc/systemd/system/wizarr.service
-      systemctl daemon-reload
+    else
+      sed -i "s/_VERSION=v.*$/_VERSION=v$(cat ~/.wizarr)/" /opt/wizarr/.env
    fi
    rm -rf "$BACKUP_FILE"
    export FLASK_SKIP_SCHEDULER=true
@@ -69,5 +69,5 @@ description

 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:5522${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5522${CL}"
@@ -72,7 +72,6 @@ BODY_SIZE_LIMIT=Infinity
 ORIGIN='http://$LOCAL_IP:3000'
 EOF
 cd /opt/adventurelog/frontend
-grep -q "^dangerouslyAllowAllBuilds:" ./pnpm-workspace.yaml 2>/dev/null || echo "dangerouslyAllowAllBuilds: true" >>./pnpm-workspace.yaml
 $STD pnpm i
 $STD pnpm build
 msg_ok "Installed AdventureLog"
@@ -1,215 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/toeverything/AFFiNE
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  git \
-  pkg-config \
-  openssl \
-  libssl-dev \
-  libjemalloc2 \
-  redis-server \
-  nginx
-msg_ok "Installed Dependencies"
-
-PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
-PG_DB_NAME="affine" PG_DB_USER="affine" setup_postgresql_db
-NODE_VERSION="22" setup_nodejs
-setup_rust
-
-fetch_and_deploy_gh_release "affine_app" "toeverything/AFFiNE" "tarball" "latest" "/opt/affine"
-
-msg_info "Setting up Directories"
-rm -rf /root/.affine
-mkdir -p /root/.affine/{storage,config}
-msg_ok "Set up Directories"
-
-msg_info "Configuring Environment"
-SECRET_KEY=$(openssl rand -hex 32)
-cat <<EOF >/opt/affine/.env
-NODE_ENV=production
-AFFINE_SERVER_PORT=3010
-AFFINE_SERVER_HOST=${LOCAL_IP}
-AFFINE_SERVER_EXTERNAL_URL=http://${LOCAL_IP}
-DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}
-REDIS_SERVER_HOST=localhost
-REDIS_SERVER_PORT=6379
-AFFINE_INDEXER_ENABLED=false
-SECRET_KEY=${SECRET_KEY}
-EOF
-msg_ok "Configured Environment"
-
-msg_info "Building AFFiNE (Patience)"
-cd /opt/affine
-source /root/.profile
-export PATH="/root/.cargo/bin:$PATH"
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export VITE_CORE_COMMIT_SHA=$(cat ~/.affine_app)
-# # Initialize git repo (required for build process)
-$STD git init -q
-$STD git config user.email "build@local"
-$STD git config user.name "Build"
-$STD git add -A
-$STD git commit -q -m "initial"
-mkdir -p /opt/affine/.turbo
-cat <<TURBO >/opt/affine/.turbo/config.json
-{
-  "concurrency": 1
-}
-TURBO
-$STD corepack enable
-$STD corepack prepare yarn@4.12.0 --activate
-$STD yarn config set enableTelemetry 0
-export NODE_OPTIONS="--max-old-space-size=4096"
-export TSC_COMPILE_ON_ERROR=true
-$STD yarn install
-$STD npm install -g typescript
-$STD yarn affine @affine/native build
-$STD yarn affine @affine/server-native build
-
-# Create architecture-specific symlinks for server-native
-ln -sf /opt/affine/packages/backend/native/server-native.node \
-  /opt/affine/packages/backend/native/server-native.x64.node
-ln -sf /opt/affine/packages/backend/native/server-native.node \
-  /opt/affine/packages/backend/native/server-native.arm64.node
-ln -sf /opt/affine/packages/backend/native/server-native.node \
-  /opt/affine/packages/backend/native/server-native.armv7.node
-
-$STD yarn affine init
-$STD yarn affine build -p @affine/reader
-$STD yarn affine build -p @affine/server
-export NODE_OPTIONS="--max-old-space-size=4096"
-$STD yarn affine build -p @affine/web
-$STD yarn affine build -p @affine/admin
-mkdir -p /opt/affine/packages/backend/server/static
-cp -r /opt/affine/packages/frontend/apps/web/dist/* /opt/affine/packages/backend/server/static/
-mkdir -p /opt/affine/packages/backend/server/static/admin
-cp -r /opt/affine/packages/frontend/admin/dist/* /opt/affine/packages/backend/server/static/admin/
-# Create empty mobile manifest (server expects it but we don't build mobile)
-mkdir -p /opt/affine/packages/backend/server/static/mobile
-cat <<'MANIFEST' >/opt/affine/packages/backend/server/static/mobile/assets-manifest.json
-{"publicPath":"/","js":[],"css":[],"gitHash":"","description":""}
-MANIFEST
-msg_ok "Built AFFiNE"
-
-msg_info "Running Initial Migration"
-cd /opt/affine/packages/backend/server
-set -a && source /opt/affine/.env && set +a
-$STD node ./scripts/self-host-predeploy.js
-msg_ok "Ran Initial Migration"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/affine-web.service
-[Unit]
-Description=AFFiNE Web Server
-After=network.target postgresql.service redis-server.service
-Requires=postgresql.service redis-server.service
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/affine/packages/backend/server
-EnvironmentFile=/opt/affine/.env
-Environment=LD_PRELOAD=libjemalloc.so.2
-Environment=NODE_OPTIONS=--max-old-space-size=1024
-ExecStart=/usr/bin/node ./dist/main.js
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/affine-worker.service
-[Unit]
-Description=AFFiNE Background Worker
-After=network.target postgresql.service redis-server.service
-Requires=postgresql.service redis-server.service
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/affine/packages/backend/server
-EnvironmentFile=/opt/affine/.env
-Environment=LD_PRELOAD=libjemalloc.so.2
-Environment=NODE_OPTIONS=--max-old-space-size=1024
-ExecStart=/usr/bin/node ./dist/main.js --worker
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-systemctl enable -q --now redis-server affine-web affine-worker
-msg_ok "Created Services"
-
-msg_info "Creating Admin User"
-ADMIN_PASS=$(openssl rand -base64 12)
-for i in {1..30}; do
-  if curl -s http://localhost:3010/info >/dev/null 2>&1; then
-    break
-  fi
-  sleep 2
-done
-# Create admin via API
-ADMIN_RESPONSE=$(curl -s -X POST http://localhost:3010/api/setup/create-admin-user \
-  -H "Content-Type: application/json" \
-  -d "{\"email\":\"admin@affine.local\",\"password\":\"${ADMIN_PASS}\"}")
-if echo "$ADMIN_RESPONSE" | grep -q '"id"'; then
-  {
-    echo "AFFiNE Credentials"
-    echo "=================="
-    echo "Email: admin@affine.local"
-    echo "Password: ${ADMIN_PASS}"
-  } >~/affine.creds
-  msg_ok "Created Admin User"
-else
-  msg_warn "Admin creation skipped (may already exist)"
-fi
-
-msg_info "Configuring Nginx"
-cat <<EOF >/etc/nginx/sites-available/affine.conf
-upstream affine_backend {
-    server 127.0.0.1:3010;
-}
-
-server {
-    listen 80;
-    server_name _;
-
-    client_max_body_size 100M;
-
-    location / {
-        proxy_pass http://affine_backend;
-        proxy_http_version 1.1;
-        proxy_set_header Host \$host;
-        proxy_set_header X-Real-IP \$remote_addr;
-        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto \$scheme;
-        proxy_set_header Upgrade \$http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_redirect off;
-        proxy_buffering off;
-    }
-}
-EOF
-ln -sf /etc/nginx/sites-available/affine.conf /etc/nginx/sites-enabled/
-rm -f /etc/nginx/sites-enabled/default
-systemctl enable -q --now nginx
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -44,7 +44,7 @@ ADMIN_PASS="$(openssl rand -base64 18 | cut -c1-13)"
 echo "enable_registration_without_verification: true" >>/etc/matrix-synapse/homeserver.yaml
 echo "registration_shared_secret: ${SECRET}" >>/etc/matrix-synapse/homeserver.yaml

-cat <<EOF >>/etc/matrix-synapse/homeserver.yaml
+cat <<EOF >/etc/matrix-synapse/homeserver.yaml

 # MatrixRTC / Element Call configuration
 experimental_features:
@@ -55,7 +55,7 @@ DB_HOST=localhost
 DATABASE_URL=postgresql+psycopg://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}

 BACKEND_DIR="/opt/endurain/backend/app"
-FRONTEND_DIR="/opt/endurain/frontend/dist"
+FRONTEND_DIR="/opt/endurain/frontend/app/dist"
 DATA_DIR="/opt/endurain_data/data"
 LOGS_DIR="/opt/endurain_data/logs"

@@ -69,10 +69,10 @@ EOF
 msg_ok "Setup Endurain"

 msg_info "Building Frontend"
-cd /opt/endurain/frontend
+cd /opt/endurain/frontend/app
 $STD npm ci --prefer-offline
 $STD npm run build
-cat <<EOF >/opt/endurain/frontend/dist/env.js
+cat <<EOF >/opt/endurain/frontend/app/dist/env.js
 window.env = {
  ENDURAIN_HOST: "${ENDURAIN_HOST}"
 }
@@ -1,139 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ZimengXiong/ExcaliDash
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  nginx
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="20" setup_nodejs
-PG_VERSION="18" setup_postgresql
-PG_DB_NAME="excalidash" PG_DB_USER="excalidash" setup_postgresql_db
-
-fetch_and_deploy_gh_release "excalidash" "ZimengXiong/ExcaliDash" "tarball"
-
-msg_info "Configuring Database Provider"
-cd /opt/excalidash/backend
-sed -i '/datasource db {/,/}/ s/provider = env("[^"]*")/provider = "postgresql"/' prisma/schema.prisma
-sed -i '/datasource db {/,/}/ s/provider = "[^"]*"/provider = "postgresql"/' prisma/schema.prisma
-mv prisma/migrations/postgresql/* prisma/migrations/
-rm -rf prisma/migrations/sqlite prisma/migrations/postgresql
-msg_ok "Configured Database Provider"
-
-msg_info "Building Backend"
-cd /opt/excalidash/backend
-$STD npm ci
-$STD npx prisma generate
-$STD npx tsc
-msg_ok "Built Backend"
-
-msg_info "Building Frontend"
-cd /opt/excalidash/frontend
-$STD npm ci
-$STD npm run build
-msg_ok "Built Frontend"
-
-msg_info "Configuring Application"
-mkdir -p /opt/excalidash_data
-mkdir -p /var/www/excalidash
-cp -r /opt/excalidash/frontend/dist/. /var/www/excalidash/
-cat <<EOF >/opt/excalidash_data/.env
-DATABASE_PROVIDER=postgresql
-DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}
-PORT=8000
-NODE_ENV=production
-FRONTEND_URL=http://${LOCAL_IP}:6767
-AUTH_MODE=local
-TRUST_PROXY=false
-RUN_MIGRATIONS=false
-JWT_SECRET=$(openssl rand -hex 32)
-CSRF_SECRET=$(openssl rand -base64 32)
-EOF
-ln -sf /opt/excalidash_data/.env /opt/excalidash/backend/.env
-cd /opt/excalidash/backend
-set -a && source /opt/excalidash_data/.env && set +a
-$STD npx prisma migrate deploy
-msg_ok "Configured Application"
-
-msg_info "Configuring Nginx"
-cat <<EOF >/etc/nginx/sites-available/excalidash
-server {
-    listen 6767;
-    server_name _;
-    root /var/www/excalidash;
-    index index.html;
-    client_max_body_size 50M;
-
-    location /api/ {
-        proxy_pass http://127.0.0.1:8000/;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade \$http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host \$host;
-        proxy_set_header X-Real-IP \$remote_addr;
-        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto \$scheme;
-        proxy_read_timeout 300s;
-        proxy_send_timeout 300s;
-    }
-
-    location /socket.io/ {
-        proxy_pass http://127.0.0.1:8000/socket.io/;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade \$http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host \$host;
-        proxy_set_header X-Real-IP \$remote_addr;
-        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto \$scheme;
-        proxy_read_timeout 3600s;
-        proxy_send_timeout 3600s;
-    }
-
-    location / {
-        try_files \$uri \$uri/ /index.html;
-    }
-}
-EOF
-ln -sf /etc/nginx/sites-available/excalidash /etc/nginx/sites-enabled/excalidash
-rm -f /etc/nginx/sites-enabled/default
-systemctl reload nginx
-msg_ok "Configured Nginx"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/excalidash.service
-[Unit]
-Description=ExcaliDash Service
-After=network.target postgresql.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/excalidash/backend
-EnvironmentFile=/opt/excalidash/backend/.env
-ExecStart=/usr/bin/node dist/index.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now excalidash
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -26,8 +26,8 @@ msg_info "Installing ASP.NET Core Runtime"
 if [[ "$(arch_resolve)" == "arm64" ]]; then
  # packages.microsoft.com only ships amd64 debs for Debian; use dotnet-install on arm64
  curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-  $STD bash /tmp/dotnet-install.sh --channel 10.0 --runtime aspnetcore --install-dir /usr/lib/dotnet10
-  ln -sf /usr/lib/dotnet10/dotnet /usr/bin/dotnet
+  $STD bash /tmp/dotnet-install.sh --channel 8.0 --runtime aspnetcore --install-dir /usr/lib/dotnet8
+  ln -sf /usr/lib/dotnet8/dotnet /usr/bin/dotnet
  rm -f /tmp/dotnet-install.sh
 else
  setup_deb822_repo \
@@ -35,7 +35,7 @@ else
    "https://packages.microsoft.com/keys/microsoft-2025.asc" \
    "https://packages.microsoft.com/debian/13/prod/" \
    "trixie"
-  $STD apt install -y aspnetcore-runtime-10.0
+  $STD apt install -y aspnetcore-runtime-8.0
 fi
 msg_ok "Installed ASP.NET Core Runtime"

@@ -141,9 +141,6 @@ cp /opt/fireshare/app/nginx/prod.conf /etc/nginx/nginx.conf
 sed -i 's|root /processed/|root /opt/fireshare-processed/|g' /etc/nginx/nginx.conf
 sed -i 's/^user[[:space:]]\+nginx;/user  root;/' /etc/nginx/nginx.conf
 sed -i 's|root[[:space:]]\+/app/build;|root /opt/fireshare/app/client/build;|' /etc/nginx/nginx.conf
-sed -i 's/__FIRESHARE_PORT__/80/g' /etc/nginx/nginx.conf
-cp /opt/fireshare/app/nginx/error.html /etc/nginx/
-cp /opt/fireshare/app/nginx/api_unavailable.html /etc/nginx/
 systemctl start nginx

 cat <<EOF >~/fireshare.creds
@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 tteck
+# Author: tteck (tteckster)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://flowiseai.com/ | Github: https://github.com/FlowiseAI/Flowise
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  pkg-config
+msg_ok "Installed Dependencies"
+
+PYTHON_VERSION="3.11" setup_uv
+NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
+
+msg_info "Installing FlowiseAI (Patience)"
+PYTHON_BIN="$(uv python find 3.11)"
+export npm_config_python="$PYTHON_BIN"
+$STD pnpm add -g flowise
+mkdir -p /opt/flowiseai
+curl -fsSL "https://raw.githubusercontent.com/FlowiseAI/Flowise/main/packages/server/.env.example" -o "/opt/flowiseai/.env"
+msg_ok "Installed FlowiseAI"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/flowise.service
+[Unit]
+Description=FlowiseAI
+After=network.target
+
+[Service]
+EnvironmentFile=/opt/flowiseai/.env
+ExecStart=flowise start
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now flowise
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -1,114 +0,0 @@
-#!/usr/bin/env bash
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Simon Friedrich (lengschder97)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://forgejo.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-setup_yq
-
-if [[ -z "${var_forgejo_instance:-}" ]]; then
-  read -r -p "${TAB3}Forgejo Instance URL (e.g. https://codeberg.org): " var_forgejo_instance
-  var_forgejo_instance="${var_forgejo_instance:-https://codeberg.org}"
-fi
-
-if [[ -z "${var_forgejo_runner_uuid:-}" ]]; then
-  read -r -p "${TAB3}Forgejo Runner UUID: " var_forgejo_runner_uuid
-fi
-
-if [[ -z "${var_forgejo_runner_uuid:-}" ]]; then
-  msg_error "No runner UUID provided. Cannot continue."
-  exit 1
-fi
-
-if [[ -z "${var_forgejo_runner_token:-}" ]]; then
-  read -r -p "${TAB3}Forgejo Runner Token: " var_forgejo_runner_token
-fi
-
-if [[ -z "${var_forgejo_runner_token:-}" ]]; then
-  msg_error "No runner registration token provided. Cannot continue."
-  exit 1
-fi
-
-DEFAULT_RUNNER_LABELS="linux-amd64:docker://node:22-bookworm"
-if [[ -z "${var_runner_labels:-}" ]]; then
-  read -r -p "${TAB3}Additional runner labels (comma-separated, or leave blank for default only): " var_runner_labels
-fi
-if [[ -n "${var_runner_labels:-}" ]]; then
-  RUNNER_LABELS="${DEFAULT_RUNNER_LABELS},${var_runner_labels}"
-else
-  RUNNER_LABELS="${DEFAULT_RUNNER_LABELS}"
-fi
-
-export FORGEJO_INSTANCE="$var_forgejo_instance"
-export FORGEJO_RUNNER_TOKEN="$var_forgejo_runner_token"
-export FORGEJO_RUNNER_UUID="$var_forgejo_runner_uuid"
-export RUNNER_LABELS
-
-msg_info "Installing dependencies"
-$STD apt install -y \
-  git \
-  podman podman-docker
-msg_ok "Installed dependencies"
-
-msg_info "Enabling Podman socket"
-systemctl enable --now podman.socket
-msg_ok "Enabled Podman socket"
-
-msg_info "Installing Forgejo Runner"
-RUNNER_VERSION=$(curl -fsSL https://data.forgejo.org/api/v1/repos/forgejo/runner/releases/latest | jq -r .name | sed 's/^v//')
-curl -fsSL "https://code.forgejo.org/forgejo/runner/releases/download/v${RUNNER_VERSION}/forgejo-runner-${RUNNER_VERSION}-linux-$(arch_resolve)" -o /usr/local/bin/forgejo-runner
-chmod +x /usr/local/bin/forgejo-runner
-echo "${RUNNER_VERSION}" >~/.forgejo-runner
-msg_ok "Installed Forgejo Runner"
-
-msg_info "Registering Forgejo Runner"
-export DOCKER_HOST="unix:///run/podman/podman.sock"
-
-msg_info "Generating Forgejo Runner Configuration"
-mkdir -p /etc/forgejo-runner
-CONFIG_FILE="/etc/forgejo-runner/config.yaml"
-forgejo-runner generate-config > $CONFIG_FILE
-yq -i '
-  .container.docker_host = strenv(DOCKER_HOST) |
-  .server.connections.forgejo.url = strenv(FORGEJO_INSTANCE) |
-  .server.connections.forgejo.uuid = strenv(FORGEJO_RUNNER_UUID) |
-  .server.connections.forgejo.token = strenv(FORGEJO_RUNNER_TOKEN) |
-  .server.connections.forgejo.labels = (strenv(RUNNER_LABELS) | split(",") | map(select(length > 0)))
-  ' $CONFIG_FILE
-msg_ok "Generated Forgejo Runner Configuration"
-
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/forgejo-runner.service
-[Unit]
-Description=Forgejo Runner
-Documentation=https://forgejo.org/docs/latest/admin/actions/
-After=podman.socket
-Requires=podman.socket
-
-[Service]
-User=root
-WorkingDirectory=/root
-Environment=DOCKER_HOST=unix:///run/podman/podman.sock
-ExecStart=/usr/local/bin/forgejo-runner daemon -c $CONFIG_FILE
-Restart=on-failure
-RestartSec=10
-TimeoutSec=0
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now forgejo-runner
-msg_ok "Created Services"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -52,7 +52,7 @@ grep -q '^bind 127.0.0.1 -::1$' /etc/redis/redis.conf || echo "bind 127.0.0.1 -:
 rm -f /etc/nginx/nginx.conf
 mkdir -p /etc/nginx/templates
 cp /opt/homarr/nginx.conf /etc/nginx/templates/nginx.conf
-echo $'#!/bin/bash\nset -a\nsource /opt/homarr.env\nset +a\ncd /opt/homarr/apps/cli && node ./cli.cjs "$@"' >/usr/bin/homarr
+echo $'#!/bin/bash\ncd /opt/homarr/apps/cli && node ./cli.cjs "$@"' >/usr/bin/homarr
 chmod +x /usr/bin/homarr
 msg_ok "Copied config files"

@@ -24,12 +24,6 @@ msg_ok "Set up Hyperion repository"

 msg_info "Installing Hyperion"
 $STD apt install -y hyperion
-mkdir -p /etc/systemd/system/hyperion@.service.d
-cat <<EOF >/etc/systemd/system/hyperion@.service.d/override.conf
-[Unit]
-Requisite=
-EOF
-systemctl daemon-reload
 systemctl enable -q --now hyperion@root
 msg_ok "Installed Hyperion"

@@ -162,7 +162,7 @@ PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 ACTUAL_PG_VERSION=$(ls /etc/postgresql/ 2>/dev/null | sort -V | tail -1)
 ACTUAL_PG_VERSION=${ACTUAL_PG_VERSION:-16}

-VCHORD_RELEASE="1.1.1"
+VCHORD_RELEASE="0.5.3"
 fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-${ACTUAL_PG_VERSION}-vchord_*_$(arch_resolve).deb"

 sed -i "s/^#shared_preload.*/shared_preload_libraries = 'vchord.so'/" /etc/postgresql/${ACTUAL_PG_VERSION}/main/postgresql.conf
@@ -282,7 +282,7 @@ msg_ok "(4/5) Compiled imagemagick"

 msg_info "(5/5) Compiling libvips"
 SOURCE=$SOURCE_DIR/libvips
-LIBVIPS_REVISION="e01a4797cabe77d457fdfa7d776b7a7e7ca6d6a7"
+LIBVIPS_REVISION="17ad2f62dda7e39985955da189183e594683d45e"
 $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
 cd "$SOURCE"
 $STD git reset --hard "$LIBVIPS_REVISION"
@@ -306,20 +306,14 @@ INSTALL_DIR="/opt/${APPLICATION}"
 UPLOAD_DIR="${INSTALL_DIR}/upload"
 SRC_DIR="${INSTALL_DIR}/source"
 APP_DIR="${INSTALL_DIR}/app"
-PLUGIN_DIR="${APP_DIR}/plugins/immich-plugin-core"
+PLUGIN_DIR="${APP_DIR}/corePlugin"
 ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}

-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.0.2" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v2.7.5" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-# Provision the exact pnpm pinned in package.json's packageManager field via corepack instead
-# of `npm i -g pnpm@X`, which collides (EEXIST) with the corepack pnpm shim shipped by the
-$STD corepack prepare "pnpm@${PNPM_VERSION}" --activate
-export PATH="/root/.local/share/pnpm/bin:$PATH"
-$STD pnpm config set --global dangerouslyAllowAllBuilds true
+NODE_VERSION="24" NODE_MODULE="corepack,pnpm@${PNPM_VERSION}" setup_nodejs

 msg_info "Installing Immich (patience)"

@@ -329,10 +323,10 @@ export CI=1

 # server build
 export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-$STD pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter immich build
+$STD pnpm --filter immich --frozen-lockfile build
 unset SHARP_IGNORE_GLOBAL_LIBVIPS
 export SHARP_FORCE_GLOBAL_LIBVIPS=true
-$STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
+$STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"

 # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
 if [[ -f "$APP_DIR/helmet.json" ]]; then
@@ -342,35 +336,31 @@ fi
 cp "$APP_DIR"/package.json "$APP_DIR"/bin
 sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin

-# sdk, cli & web build
+# openapi & web build
 cd "$SRC_DIR"
 echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
+$STD pnpm --filter @immich/sdk --filter immich-web --frozen-lockfile --force install
 unset SHARP_FORCE_GLOBAL_LIBVIPS
 export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-$STD pnpm --filter @immich/sdk --filter immich-web --filter @immich/cli build
-$STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
+$STD pnpm --filter @immich/sdk --filter immich-web build
 cp -a web/build "$APP_DIR"/www
 cp LICENSE "$APP_DIR"
+
+# cli build
+$STD pnpm --filter @immich/sdk --filter @immich/cli --frozen-lockfile install
+$STD pnpm --filter @immich/sdk --filter @immich/cli build
+$STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
+
+# plugins
 cd "$SRC_DIR"
-export MISE_TRUSTED_CONFIG_PATHS="$SRC_DIR"/mise.toml
-export MISE_DISABLE_TOOLS=github:jellyfin/jellyfin-ffmpeg
+$STD mise trust --ignore ./mise.toml
+$STD mise trust ./plugins/mise.toml
+cd plugins
 $STD mise install
-export PATH="$(mise bin-paths 2>/dev/null | tr '\n' ':')$PATH"
-if ! command -v extism-js >/dev/null 2>&1; then
-  # extism-js is published as a bare gzip-compressed single binary (.gz), which
-  # fetch_and_deploy_gh_release cannot deploy (singlefile leaves it compressed,
-  # prebuild only handles zip/tar). Fetch + gunzip it directly.
-  EXTISM_ARCH="$(arch_resolve x86_64 aarch64)"
-  curl_download /tmp/extism-js.gz "https://github.com/extism/js-pdk/releases/download/v1.6.0/extism-js-${EXTISM_ARCH}-linux-v1.6.0.gz"
-  gunzip -f /tmp/extism-js.gz
-  install -m 0755 /tmp/extism-js /usr/local/bin/extism-js
-  rm -f /tmp/extism-js
-fi
-$STD mise exec -- pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter @immich/plugin-core install --frozen-lockfile
-$STD mise exec -- pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter @immich/plugin-core build
+$STD mise run build
 mkdir -p "$PLUGIN_DIR"
-cp -r ./packages/plugin-core/dist "$PLUGIN_DIR"/dist
-cp ./packages/plugin-core/manifest.json "$PLUGIN_DIR"
+cp -r ./dist "$PLUGIN_DIR"/dist
+cp ./manifest.json "$PLUGIN_DIR"
 msg_ok "Installed Immich Server, Web and Plugin Components"

 cd "$SRC_DIR"/machine-learning
@@ -386,13 +376,13 @@ if [[ -f ~/.openvino ]]; then
  ML_PYTHON="python3.13"
  msg_info "Pre-installing Python ${ML_PYTHON} for machine-learning"
  for attempt in $(seq 1 3); do
-    $STD sudo --preserve-env=VIRTUAL_ENV -Pnu immich uv python install "${ML_PYTHON}" && break
+    $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv python install "${ML_PYTHON}" && break
    [[ $attempt -lt 3 ]] && msg_warn "Python download attempt $attempt failed, retrying..." && sleep 5
  done
  msg_ok "Pre-installed Python ${ML_PYTHON}"
  msg_info "Installing Intel OpenVINO machine-learning"
  for attempt in $(seq 1 3); do
-    $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -Pnu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
+    $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
    [[ $attempt -lt 3 ]] && msg_warn "uv sync attempt $attempt failed, retrying..." && sleep 10
  done
  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-$(arch_resolve "x86_64" "aarch64")-linux-gnu.so"
@@ -401,13 +391,13 @@ else
  ML_PYTHON="python3.11"
  msg_info "Pre-installing Python ${ML_PYTHON} for machine-learning"
  for attempt in $(seq 1 3); do
-    $STD sudo --preserve-env=VIRTUAL_ENV -Pnu immich uv python install "${ML_PYTHON}" && break
+    $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv python install "${ML_PYTHON}" && break
    [[ $attempt -lt 3 ]] && msg_warn "Python download attempt $attempt failed, retrying..." && sleep 5
  done
  msg_ok "Pre-installed Python ${ML_PYTHON}"
  msg_info "Installing machine-learning"
  for attempt in $(seq 1 3); do
-    $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -Pnu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
+    $STD sudo --preserve-env=VIRTUAL_ENV,UV_HTTP_TIMEOUT -nu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p "${ML_PYTHON}" --managed-python && break
    [[ $attempt -lt 3 ]] && msg_warn "uv sync attempt $attempt failed, retrying..." && sleep 10
  done
  msg_ok "Installed machine-learning"
@@ -437,27 +427,6 @@ cd "$INSTALL_DIR"
 ln -s "$GEO_DIR" "$APP_DIR"
 msg_ok "Installed GeoNames data"

-# MickLesk temporary patch for HEIC thumbnail gen
-msg_info "Patching media.repository.js"
-MEDIA_REPO_JS="/opt/immich/app/dist/repositories/media.repository.js"
-if [[ -f "$MEDIA_REPO_JS" ]]; then
-  python3 - <<'PY'
-from pathlib import Path
-p = Path('/opt/immich/app/dist/repositories/media.repository.js')
-s = p.read_text()
-old = "(0, sharp_1.default)(input).metadata()"
-new = "(0, sharp_1.default)(input, { unlimited: true, limitInputPixels: false }).metadata()"
-if new in s:
-    print('hotfix already there')
-elif old in s:
-    p.write_text(s.replace(old, new, 1))
-    print('hotfix applied')
-else:
-    print('pattern not found, skipped')
-PY
-fi
-msg_ok "Patched media.repository.js"
-
 mkdir -p /var/log/immich
 touch /var/log/immich/{web.log,ml.log}
 msg_ok "Installed Immich"
@@ -1,55 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/perber/leafwiki
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "leafwiki" "perber/leafwiki" "singlefile" "latest" "/usr/local/bin" "leafwiki-v*-linux-$(arch_resolve)"
-
-msg_info "Configuring LeafWiki"
-mkdir -p /opt/leafwiki/data
-mkdir -p /etc/leafwiki
-JWT_SECRET=$(openssl rand -hex 32)
-ADMIN_PASS=$(openssl rand -base64 12 | tr -dc 'a-zA-Z0-9' | head -c12)
-cat <<EOF >/etc/leafwiki/.env
-LEAFWIKI_DATA_DIR=/opt/leafwiki/data
-LEAFWIKI_HOST=0.0.0.0
-LEAFWIKI_PORT=8080
-LEAFWIKI_JWT_SECRET=${JWT_SECRET}
-LEAFWIKI_ADMIN_PASSWORD=${ADMIN_PASS}
-LEAFWIKI_ALLOW_INSECURE=true
-EOF
-msg_ok "Configured LeafWiki"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/leafwiki.service
-[Unit]
-Description=LeafWiki
-After=network.target
-
-[Service]
-Type=simple
-User=root
-EnvironmentFile=/etc/leafwiki/.env
-ExecStart=/usr/local/bin/leafwiki
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now leafwiki
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -1,75 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: BillyOutlast
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mudler/LocalAGI
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-APP="LocalAGI"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y build-essential
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" setup_nodejs
-setup_go
-
-msg_info "Installing Bun"
-export BUN_INSTALL="/root/.bun"
-curl -fsSL https://bun.sh/install | $STD bash
-ln -sf /root/.bun/bin/bun /usr/local/bin/bun
-ln -sf /root/.bun/bin/bunx /usr/local/bin/bunx
-msg_ok "Installed Bun"
-
-fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
-
-msg_info "Configuring LocalAGI"
-mkdir -p /opt/localagi/pool
-cat <<'EOF' >/opt/localagi/.env
-LOCALAGI_MODEL=gemma-3-4b-it-qat
-LOCALAGI_MULTIMODAL_MODEL=moondream2-20250414
-LOCALAGI_IMAGE_MODEL=sd-1.5-ggml
-LOCALAGI_LLM_API_URL=http://127.0.0.1:11434/v1
-LOCALAGI_STATE_DIR=/opt/localagi/pool
-EOF
-msg_ok "Configured LocalAGI"
-
-msg_info "Setting up LocalAGI"
-cd /opt/localagi/webui/react-ui
-$STD bun install
-$STD bun run build
-cd /opt/localagi
-$STD go build -o /usr/local/bin/localagi
-msg_ok "Set up LocalAGI"
-
-msg_info "Creating LocalAGI systemd service"
-cat <<EOF >/etc/systemd/system/localagi.service
-[Unit]
-Description=LocalAGI
-After=network.target
-
-[Service]
-User=root
-Type=simple
-EnvironmentFile=/opt/localagi/.env
-
-WorkingDirectory=/opt/localagi
-ExecStart=/usr/local/bin/localagi
-Restart=on-failure
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now localagi
-msg_ok "Created LocalAGI systemd service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -64,7 +64,7 @@ $STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPA
 echo "$COOLPASS" >~/.coolpass
 msg_ok "Installed Collabora Online"

-fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v7.2.1" "/usr/bin" "opencloud-*-linux-$(arch_resolve)"
+fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v7.0.0" "/usr/bin" "opencloud-*-linux-$(arch_resolve)"
 mv /usr/bin/OpenCloud /usr/bin/opencloud

 msg_info "Configuring OpenCloud"
@@ -119,8 +119,7 @@ edns-packet-max=1232
 EOF

  if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-    cat <<EOF >>/etc/unbound/unbound.conf.d/pi-hole.conf
-server:
+    cat <<EOF >/etc/unbound/unbound.conf.d/pi-hole.conf
  tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"
 forward-zone:
  name: "."
@@ -85,8 +85,8 @@ VITE_SPACE_BASE_PATH=/spaces
 VITE_LIVE_BASE_URL=http://${LOCAL_IP}
 VITE_LIVE_BASE_PATH=/live"
 # Each Vite app needs its own .env for the build
-for frontend_app in web admin space; do
-    echo "$FRONTEND_ENV" >/opt/plane/apps/${frontend_app}/.env
+for app in web admin space; do
+    echo "$FRONTEND_ENV" >/opt/plane/apps/${app}/.env
 done
 export NODE_OPTIONS="--max-old-space-size=4096"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
@@ -14,7 +14,7 @@ network_check
 update_os

 read -r -p "${TAB3}What public URL do you want to use (e.g. pocketid.mydomain.com)? " public_url
-fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id_linux_$(arch_resolve)"
+fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id-linux-$(arch_resolve)"

 msg_info "Configuring Pocket ID"
 ENCRYPTION_KEY=$(openssl rand -base64 32)
@@ -30,30 +30,27 @@ mv /opt/reitti/reitti-*.jar /opt/reitti/reitti.jar

 msg_info "Installing Nginx Tile Cache"
 mkdir -p /var/cache/nginx/tiles
-cat <<'NGINXEOF' >/etc/nginx/nginx.conf
+cat <<EOF >/etc/nginx/nginx.conf
 user www-data;

 events {
  worker_connections 1024;
 }
 http {
-  resolver 1.1.1.1 8.8.8.8 valid=30s ipv6=off;
  proxy_cache_path /var/cache/nginx/tiles levels=1:2 keys_zone=tiles:10m max_size=1g inactive=30d use_temp_path=off;
  server {
    listen 80;
-    location /custom/ {
-      set $upstream_url $http_x_reitti_upstream_url;
-      proxy_pass $upstream_url;
-      proxy_set_header Host $proxy_host;
+    location / {
+      proxy_pass https://tile.openstreetmap.org/;
+      proxy_set_header Host tile.openstreetmap.org;
      proxy_set_header User-Agent "Reitti/1.0";
      proxy_cache tiles;
-      proxy_cache_key $upstream_url;
      proxy_cache_valid 200 30d;
      proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
    }
  }
 }
-NGINXEOF
+EOF
 chown -R www-data:www-data /var/cache/nginx
 chmod -R 750 /var/cache/nginx
 systemctl restart nginx
@@ -74,7 +71,6 @@ server.compression.mime-types=text/plain,application/json
 logging.level.root=INFO
 logging.level.org.hibernate.engine.jdbc.spi.SqlExceptionHelper=FATAL
 logging.level.com.dedicatedcode.reitti=INFO
-logging.level.org.quartz.core.ErrorLogger=FATAL

 # Internationalization
 spring.messages.basename=messages
@@ -86,7 +82,7 @@ spring.messages.fallback-to-system-locale=false
 spring.datasource.url=jdbc:postgresql://127.0.0.1:5432/$PG_DB_NAME
 spring.datasource.username=$PG_DB_USER
 spring.datasource.password=$PG_DB_PASS
-spring.datasource.hikari.maximum-pool-size=30
+spring.datasource.hikari.maximum-pool-size=20

 # Redis configuration
 spring.data.redis.host=127.0.0.1
@@ -96,23 +92,20 @@ spring.data.redis.password=
 spring.data.redis.database=0
 spring.cache.redis.key-prefix=

-spring.cache.cache-names=processed-visits,significant-places,users,magic-links,configurations,transport-mode-configs,avatarThumbnails,avatarData,user-settings,devices,mapStyles,mapStyleJson
+spring.cache.cache-names=processed-visits,significant-places,users,magic-links,configurations,transport-mode-configs,avatarThumbnails,avatarData,user-settings
 spring.cache.redis.time-to-live=1d

 # Upload configuration
 spring.servlet.multipart.max-file-size=5GB
 spring.servlet.multipart.max-request-size=5GB
-spring.servlet.multipart.resolve-lazily=true
 server.tomcat.max-part-count=100
-spring.mvc.async.request-timeout=600000

-# Quartz Scheduler configuration
-spring.quartz.job-store-type=jdbc
-spring.quartz.jdbc.initialize-schema=never
-spring.quartz.properties.org.quartz.jobStore.driverDelegateClass=org.quartz.impl.jdbcjobstore.PostgreSQLDelegate
-spring.quartz.properties.org.quartz.jobStore.isClustered=false
-spring.quartz.properties.org.quartz.jobStore.tablePrefix=qrtz_
-spring.quartz.properties.org.quartz.threadPool.threadCount=5
+# Rqueue configuration
+rqueue.web.enable=false
+rqueue.job.enabled=false
+rqueue.message.durability.in-terminal-state=0
+rqueue.key.prefix=\${spring.cache.redis.key-prefix}
+rqueue.message.converter.provider.class=com.dedicatedcode.reitti.config.RQueueCustomMessageConverter

 # Application-specific settings
 reitti.server.advertise-uri=
@@ -124,25 +117,18 @@ reitti.security.oidc.enabled=false
 reitti.security.oidc.registration.enabled=false

 reitti.import.batch-size=10000
-reitti.import.grace-time-seconds=30
-reitti.import.staging.cleanup.cron=0 0 4 * * *
-
-reitti.batching.max-batch-size=100
-reitti.batching.max-wait-time=5
+reitti.import.processing-idle-start-time=10

 reitti.geo-point-filter.max-speed-kmh=1000
 reitti.geo-point-filter.max-accuracy-meters=100
 reitti.geo-point-filter.history-lookback-hours=24
 reitti.geo-point-filter.window-size=50

+reitti.process-data.schedule=0 */10 * * * *
 reitti.process-data.refresh-views.schedule=0 0 4 * * *
 reitti.imports.schedule=0 5/10 * * * *
 reitti.imports.owntracks-recorder.schedule=\${reitti.imports.schedule}

-reitti.jobs.cleanup.cron=0 0 4 * * ?
-reitti.jobs.cleanup.max-age-hours=24
-reitti.db-janitor.schedule=0 0 4 * * ?
-
 # Geocoding service configuration
 reitti.geocoding.max-errors=10
 reitti.geocoding.photon.base-url=
@@ -54,7 +54,7 @@ cronKey=$(head -c 1024 </dev/urandom | sha256sum | awk '{print substr($1,1,29)}'
 sed -i -e 's/Shinobi/'"$cronKey"'/g' conf.json
 cp super.sample.json super.json
 $STD npm i npm -g
-$STD npm install
+$STD npm install --unsafe-perm
 $STD npm install pm2@latest -g
 chmod -R 755 .
 touch INSTALL/installed.txt
@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: 007hacky007
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.squid-cache.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Configuring Squid"
-mkdir -p /etc/squid
-cat <<EOF >/etc/squid/squid.conf
-acl localnet src 0.0.0.1-0.255.255.255
-acl localnet src 10.0.0.0/8
-acl localnet src 100.64.0.0/10
-acl localnet src 169.254.0.0/16
-acl localnet src 172.16.0.0/12
-acl localnet src 192.168.0.0/16
-acl localnet src fc00::/7
-acl localnet src fe80::/10
-
-acl SSL_ports port 443
-acl Safe_ports port 80
-acl Safe_ports port 21
-acl Safe_ports port 443
-acl Safe_ports port 70
-acl Safe_ports port 210
-acl Safe_ports port 1025-65535
-acl Safe_ports port 280
-acl Safe_ports port 488
-acl Safe_ports port 591
-acl Safe_ports port 777
-acl CONNECT method CONNECT
-
-http_access deny !Safe_ports
-http_access deny CONNECT !SSL_ports
-http_access allow localhost manager
-http_access deny manager
-
-auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords
-auth_param basic realm proxy
-acl authenticated proxy_auth REQUIRED
-http_access allow authenticated
-http_access deny all
-
-http_port 3128
-
-coredump_dir /var/spool/squid
-
-refresh_pattern ^ftp:        1440    20%    10080
-refresh_pattern ^gopher:     1440    0%     1440
-refresh_pattern -i (/cgi-bin/|\\?) 0  0%     0
-refresh_pattern .            0       20%    4320
-
-# Privacy / hardening
-httpd_suppress_version_string on
-visible_hostname $(hostname)
-forwarded_for delete
-request_header_access X-Forwarded-For deny all
-EOF
-msg_ok "Configured Squid"
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  squid \
-  apache2-utils
-msg_ok "Installed Dependencies"
-
-msg_info "Configuring Squid Authentication"
-touch /etc/squid/passwords
-chown proxy:proxy /etc/squid/passwords
-chmod 640 /etc/squid/passwords
-$STD squid -k parse
-msg_ok "Configured Squid Authentication"
-
-msg_info "Starting Service"
-systemctl enable -q --now squid
-msg_ok "Started Service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -27,17 +27,15 @@ cd /opt/wizarr
 $STD /usr/local/bin/uv sync --frozen
 $STD /usr/local/bin/uv run --frozen pybabel compile -d app/translations
 $STD npm --prefix app/static install
-$STD npm --prefix app/static run build
+$STD npm --prefix app/static run build:css
 mkdir -p ./.cache
 cat <<EOF >/opt/wizarr/.env
 FLASK_ENV=production
 GUNICORN_WORKERS=4
 APP_URL=http://${LOCAL_IP}
-HOST=0.0.0.0
-PORT=5690
 DISABLE_BUILTIN_AUTH=false
 LOG_LEVEL=INFO
-APP_VERSION=$(get_latest_github_release "wizarrrr/wizarr")
+APP_VERSION=v$(get_latest_github_release "wizarrrr/wizarr")
 EOF

 cat <<EOF >/opt/wizarr/start.sh
@@ -46,6 +44,7 @@ cat <<EOF >/opt/wizarr/start.sh
 uv run --frozen gunicorn \
    --config gunicorn.conf.py \
    --preload \
+    --bind 0.0.0.0:5690 \
    --umask 007 \
    run:app
 EOF
@@ -63,10 +62,7 @@ Type=simple
 WorkingDirectory=/opt/wizarr
 EnvironmentFile=/opt/wizarr/.env
 ExecStart=/opt/wizarr/start.sh
-Restart=always
-RestartSec=10
-KillMode=mixed
-TimeoutStopSec=10
+Restart=on-abnormal

 [Install]
 WantedBy=multi-user.target
@@ -3764,18 +3764,19 @@ runtime_script_status_guard() {
    return 0
  fi

-  local is_deleted is_disabled deleted_message disable_message info_url
-  if printf '%s' "$response" | grep -qE '"items":[[:space:]]*\[[[:space:]]*\]'; then
+  if ! command -v jq >/dev/null 2>&1; then
+    msg_warn "Missing jq for script status check. Continuing without status verification."
    return 0
  fi

-  # PocketBase returns a flat, fixed-field JSON blob; sed is enough here (no jq needed).
-  is_deleted=$(printf '%s' "$response" | sed -n 's/.*"is_deleted"[[:space:]]*:[[:space:]]*\(true\|false\).*/\1/p' | head -1)
-  is_disabled=$(printf '%s' "$response" | sed -n 's/.*"is_disabled"[[:space:]]*:[[:space:]]*\(true\|false\).*/\1/p' | head -1)
-  deleted_message=$(printf '%s' "$response" | sed -n 's/.*"deleted_message"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -1)
-  disable_message=$(printf '%s' "$response" | sed -n 's/.*"disable_message"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -1)
-  is_deleted=${is_deleted:-false}
-  is_disabled=${is_disabled:-false}
+  local has_record is_deleted is_disabled deleted_message disable_message info_url
+  has_record=$(printf '%s' "$response" | jq -r '.items | length')
+  [[ "$has_record" == "0" ]] && return 0
+
+  is_deleted=$(printf '%s' "$response" | jq -r '.items[0].is_deleted // false')
+  is_disabled=$(printf '%s' "$response" | jq -r '.items[0].is_disabled // false')
+  deleted_message=$(printf '%s' "$response" | jq -r '.items[0].deleted_message // ""')
+  disable_message=$(printf '%s' "$response" | jq -r '.items[0].disable_message // ""')
  info_url="https://community-scripts.org/scripts/${script_slug}"

  if [[ "$is_deleted" == "true" ]]; then
@@ -3787,17 +3788,6 @@ runtime_script_status_guard() {
  fi

  if [[ "$is_disabled" == "true" ]]; then
-    # Allow bypass via var_ignore_disable=true (still warn, but continue)
-    case "${var_ignore_disable:-}" in
-    1 | yes | true | on)
-      msg_warn "This script is currently disabled in community-scripts."
-      [[ -n "$disable_message" ]] && msg_warn "$disable_message"
-      msg_warn "Bypassing disable status via var_ignore_disable — continuing at your own risk."
-      msg_warn "More info: ${info_url}"
-      return 0
-      ;;
-    esac
-
    msg_error "This script is currently disabled in community-scripts."
    [[ -n "$disable_message" ]] && msg_error "$disable_message"
    [[ -z "$disable_message" ]] && msg_error "Updates and installs are temporarily disabled for this script."
@@ -36,10 +36,6 @@
 #
 # ==============================================================================

-# Guard against double-sourcing (core.func uses the same pattern)
-[[ -n "${_TOOLS_FUNC_LOADED:-}" ]] && return 0
-_TOOLS_FUNC_LOADED=1
-
 # ------------------------------------------------------------------------------
 # Debug helper - outputs to stderr when TOOLS_DEBUG is enabled
 # Usage: debug_log "message"
@@ -95,17 +91,16 @@ curl_with_retry() {
  while [[ $attempt -le $retries ]]; do
    debug_log "curl attempt $attempt/$retries: $url"

-    # Build curl command as array to avoid command injection via extra_opts
-    local -a curl_args=(curl -fsSL --connect-timeout "$connect_timeout" --max-time "$timeout")
-    [[ -n "$extra_opts" ]] && read -ra _extra <<<"$extra_opts" && curl_args+=("${_extra[@]}")
+    local curl_cmd="curl -fsSL --connect-timeout $connect_timeout --max-time $timeout"
+    [[ -n "$extra_opts" ]] && curl_cmd="$curl_cmd $extra_opts"

    if [[ "$output" == "-" ]]; then
-      if "${curl_args[@]}" "$url"; then
+      if $curl_cmd "$url"; then
        success=true
        break
      fi
    else
-      if "${curl_args[@]}" -o "$output" "$url"; then
+      if $curl_cmd -o "$output" "$url"; then
        success=true
        break
      fi
@@ -158,16 +153,15 @@ curl_api_with_retry() {
  while [[ $attempt -le $retries ]]; do
    debug_log "curl API attempt $attempt/$retries: $url"

-    # Build curl command as array to avoid command injection via extra_opts
-    local -a curl_args=(curl -fsSL --connect-timeout "$connect_timeout" --max-time "$timeout" -w '%{http_code}')
-    [[ -n "$extra_opts" ]] && read -ra _extra <<<"$extra_opts" && curl_args+=("${_extra[@]}")
+    local curl_cmd="curl -fsSL --connect-timeout $connect_timeout --max-time $timeout -w '%{http_code}'"
+    [[ -n "$extra_opts" ]] && curl_cmd="$curl_cmd $extra_opts"

    if [[ -n "$body_file" ]]; then
-      http_code=$("${curl_args[@]}" -o "$body_file" "$url" 2>/dev/null) || true
+      http_code=$($curl_cmd -o "$body_file" "$url" 2>/dev/null) || true
    else
      # Capture body and http_code separately
      local tmp_body="/tmp/curl_api_body_$$"
-      http_code=$("${curl_args[@]}" -o "$tmp_body" "$url" 2>/dev/null) || true
+      http_code=$($curl_cmd -o "$tmp_body" "$url" 2>/dev/null) || true
      if [[ -f "$tmp_body" ]]; then
        cat "$tmp_body"
        rm -f "$tmp_body"
@@ -310,10 +304,7 @@ edit_yaml_config() {
    return 1
  fi

-  # Escape sed metacharacters in value (| and &) to prevent injection
-  local escaped_value="${value//|/\\|}"
-  escaped_value="${escaped_value//&/\\&}"
-  sed -i "s|^\([[:space:]]*${key}[[:space:]]*:\).*|\1 ${escaped_value}|" "$file"
+  sed -i "s|^\([[:space:]]*${key}[[:space:]]*:\).*|\1 ${value}|" "$file"
 }

 # ------------------------------------------------------------------------------
@@ -1696,6 +1687,10 @@ is_ubuntu() {
  [[ "$(get_os_info id)" == "ubuntu" ]]
 }

+is_alpine() {
+  [[ "$(get_os_info id)" == "alpine" ]]
+}
+
 # ------------------------------------------------------------------------------
 # Get Debian/Ubuntu major version
 # ------------------------------------------------------------------------------
@@ -2459,10 +2454,8 @@ start_timer() {
 end_timer() {
  local start_time="$1"
  local label="${2:-Operation}"
-  local end_time
-  end_time=$(date +%s)
+  local end_time=$(date +%s)
  local duration=$((end_time - start_time))
-  echo "${label} took ${duration}s"
 }

 # ------------------------------------------------------------------------------
@@ -2566,199 +2559,6 @@ fetch_and_deploy_gh_tag() {
  return 0
 }

-# ------------------------------------------------------------------------------
-# Get the latest GitLab repository tag matching a glob pattern.
-#
-# Description:
-#   - Queries the GitLab repository tags API (up to 100 tags per page)
-#   - Filters tag names against a shell glob pattern (e.g. "web-v*" or "mobile-v*")
-#   - Always excludes pre-release tags (those containing alpha, beta, or rc)
-#   - Sorts matching tags with `sort -V` and returns the highest one
-#   - Supports GITLAB_TOKEN for private/rate-limited projects
-#
-# Usage:
-#     get_latest_gl_tag "owner/repo" "web-v*"
-#     get_latest_gl_tag "owner/repo" "mobile-v*"
-#     get_latest_gl_tag "owner/repo"          # returns newest tag (no filter)
-#
-# Arguments:
-#   $1 - GitLab repo path (namespace/project, e.g. "mygroup/myapp")
-#   $2 - Optional glob pattern to filter tag names (e.g. "web-v*")
-#
-# Returns:
-#   Latest matching tag name on stdout, or non-zero on failure
-# ------------------------------------------------------------------------------
-get_latest_gl_tag() {
-  local repo="$1"
-  local pattern="${2:-}"
-
-  local repo_encoded
-  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')
-
-  local api_base="https://gitlab.com/api/v4/projects/${repo_encoded}/repository/tags"
-  local api_timeout="--connect-timeout 10 --max-time 60"
-
-  local header=()
-  [[ -n "${GITLAB_TOKEN:-}" ]] && header=(-H "PRIVATE-TOKEN: $GITLAB_TOKEN")
-
-  # If a pattern is given, pass it as a regex search to reduce server-side results.
-  # GitLab ?search= supports anchored regex; convert leading glob prefix to regex anchor.
-  local search_param=""
-  if [[ -n "$pattern" ]]; then
-    # Strip trailing wildcard for the search hint (server-side prefix filter).
-    local prefix="${pattern%%\**}"
-    [[ -n "$prefix" ]] && search_param="?search=^${prefix}&per_page=100" || search_param="?per_page=100"
-  else
-    search_param="?per_page=100"
-  fi
-
-  local temp_file
-  temp_file=$(mktemp) || return 1
-
-  local http_code
-  http_code=$(curl $api_timeout -sSL -w "%{http_code}" -o "$temp_file" \
-    "${header[@]}" "${api_base}${search_param}" 2>/dev/null) || true
-
-  if [[ "$http_code" != "200" ]]; then
-    rm -f "$temp_file"
-    msg_error "GitLab tags API returned HTTP $http_code for $repo"
-    return 22
-  fi
-
-  local tag=""
-  if [[ -n "$pattern" ]]; then
-    # Client-side glob filter + pre-release exclusion, then version-sort to pick the highest match.
-    tag=$(jq -r '.[].name' "$temp_file" 2>/dev/null | while IFS= read -r t; do
-      case "$t" in
-      *alpha* | *beta* | *rc*) continue ;;
-      $pattern) echo "$t" ;;
-      esac
-    done | sort -V | tail -n1)
-  else
-    # No pattern: skip pre-release tags, take the first remaining (newest) one.
-    tag=$(jq -r '.[].name' "$temp_file" 2>/dev/null |
-      grep -Eiv '(alpha|beta|rc)' |
-      head -n1)
-  fi
-
-  rm -f "$temp_file"
-
-  if [[ -z "$tag" ]]; then
-    msg_error "No tags matching '${pattern:-*}' found for ${repo}"
-    return 250
-  fi
-
-  echo "$tag"
-}
-
-# ------------------------------------------------------------------------------
-# Fetches and deploys a GitLab tag-based source tarball.
-#
-# Description:
-#   - Resolves the latest tag matching the given glob pattern via get_latest_gl_tag
-#     (or uses the exact tag if one is provided instead of "latest")
-#   - Downloads the GitLab source tarball for that tag
-#   - Extracts it to the target directory
-#   - Writes the resolved tag to ~/.<app> for update-checking
-#
-# Usage:
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "web-v*"
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "mobile-v*" "/opt/myapp"
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "v*"          # any v-tag
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "web-v3.0*"   # narrow version range
-#
-# Arguments:
-#   $1 - App name (used for version file ~/.<app> and lowercase tarball name)
-#   $2 - GitLab repo path (namespace/project, e.g. "mygroup/myapp")
-#   $3 - Tag pattern: glob (e.g. "web-v*") or exact tag (e.g. "web-v3.0.0").
-#        Use "latest" to fetch the single newest tag with no pattern filter.
-#   $4 - Target directory (default: /opt/$app)
-#
-# Notes:
-#   - Supports CLEAN_INSTALL=1 to wipe target before extracting
-#   - Supports GITLAB_TOKEN for private/rate-limited projects
-#   - For repos that only publish tags, not formal GitLab Releases
-#     (use fetch_and_deploy_gl_release for proper Releases with assets)
-# ------------------------------------------------------------------------------
-fetch_and_deploy_gl_tag() {
-  local app="$1"
-  local repo="$2"
-  local tag_pattern="${3:-latest}"
-  local target="${4:-/opt/$app}"
-
-  local app_lc=""
-  app_lc="$(echo "${app,,}" | tr -d ' ')"
-  local version_file="$HOME/.${app_lc}"
-
-  local api_timeout="--connect-timeout 10 --max-time 60"
-  local download_timeout="--connect-timeout 15 --max-time 900"
-
-  local header=()
-  [[ -n "${GITLAB_TOKEN:-}" ]] && header=(-H "PRIVATE-TOKEN: $GITLAB_TOKEN")
-
-  # Resolve the tag: if caller passed a glob/latest, query the API.
-  # If caller passed an exact tag (no wildcards), use it directly.
-  local resolved_tag="$tag_pattern"
-  if [[ "$tag_pattern" == "latest" || "$tag_pattern" == *"*"* || "$tag_pattern" == *"?"* ]]; then
-    local glob_arg=""
-    [[ "$tag_pattern" != "latest" ]] && glob_arg="$tag_pattern"
-    resolved_tag=$(get_latest_gl_tag "$repo" "$glob_arg") || {
-      msg_error "Failed to determine latest tag matching '${tag_pattern}' for ${repo}"
-      return 250
-    }
-  fi
-
-  local current_version=""
-  [[ -f "$version_file" ]] && current_version=$(<"$version_file")
-
-  if [[ "$current_version" == "$resolved_tag" ]]; then
-    msg_ok "$app is already up-to-date ($resolved_tag)"
-    return 0
-  fi
-
-  local repo_encoded
-  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')
-
-  # GitLab source tarball URL (no release needed, works for any tag).
-  local version_safe="${resolved_tag//\//-}"
-  local tarball_url="https://gitlab.com/${repo}/-/archive/${resolved_tag}/${app_lc}-${version_safe}.tar.gz"
-
-  local tmpdir
-  tmpdir=$(mktemp -d) || return 1
-  local filename="${app_lc}-${version_safe}.tar.gz"
-
-  msg_info "Fetching GitLab tag: ${app} (${resolved_tag})"
-
-  curl $download_timeout -fsSL "${header[@]}" -o "$tmpdir/$filename" "$tarball_url" || {
-    msg_error "Download failed: $tarball_url"
-    rm -rf "$tmpdir"
-    return 7
-  }
-
-  mkdir -p "$target"
-  if [[ "${CLEAN_INSTALL:-0}" == "1" ]]; then
-    rm -rf "${target:?}/"*
-  fi
-
-  tar --no-same-owner -xzf "$tmpdir/$filename" -C "$tmpdir" || {
-    msg_error "Failed to extract tarball"
-    rm -rf "$tmpdir"
-    return 251
-  }
-
-  local unpack_dir
-  unpack_dir=$(find "$tmpdir" -mindepth 1 -maxdepth 1 -type d | head -n1)
-
-  shopt -s dotglob nullglob
-  cp -r "$unpack_dir"/* "$target/"
-  shopt -u dotglob nullglob
-
-  rm -rf "$tmpdir"
-  echo "$resolved_tag" >"$version_file"
-  msg_ok "Deployed ${app} ${resolved_tag} to ${target}"
-  return 0
-}
-
 # ------------------------------------------------------------------------------
 # Checks for new GitHub tag (for repos without releases).
 #
@@ -4679,9 +4479,7 @@ setup_composer() {
 #   - Uses stable distro packages by default
 #   - Migrates from get.docker.com to repository-based installation
 #   - Updates Docker Engine if newer version available
-#   - Interactive per-container update prompt (Y/N, 60 s auto-no)
-#   - Compose-managed containers: full restart via docker compose
-#   - Standalone containers: image pull only, no destructive stop/rm
+#   - Interactive container update with multi-select
 #   - Portainer installation and update support
 #   - Set DOCKER_NONINTERACTIVE=1 to skip interactive prompts (CI/unattended)
 # ------------------------------------------------------------------------------
@@ -4868,83 +4666,63 @@ EOF
    fi
  fi

-  # Container Update Check
-  # - Skipped entirely when running unattended / non-interactive
-  # - Compose-managed containers: offered via Y/N → docker compose pull + up -d
-  # - Standalone containers: offered via Y/N → image pull only (no stop/rm)
-  if [ "$docker_installed" = true ] && ! _docker_is_noninteractive; then
+  # Interactive Container Update Check
+  if [[ "${DOCKER_SKIP_UPDATES:-}" != "true" ]] && [ "$docker_installed" = true ] && ! _docker_is_noninteractive; then
    msg_info "Checking for container updates"

-    local name image compose_workdir compose_service current_digest latest_digest
-    local compose_updates=()
-    local standalone_updates=()
+    # Get list of running containers with update status
+    local containers_with_updates=()
+    local container_info=()
+    local index=1

-    while IFS= read -r line; do
-      name=$(echo "$line" | awk '{print $1}')
-      image=$(echo "$line" | awk '{print $2}')
+    while IFS= read -r container; do
+      local name=$(echo "$container" | awk '{print $1}')
+      local image=$(echo "$container" | awk '{print $2}')
+      local current_digest=$(docker inspect "$name" --format='{{.Image}}' 2>/dev/null | cut -d':' -f2 | cut -c1-12)

-      # Portainer containers are handled by the dedicated block above
-      [[ "$name" == "portainer" || "$name" == "portainer_agent" ]] && continue
+      # Pull latest image digest (ignore failures, e.g. local-only images or registry/permission issues)
+      docker pull "$image" >/dev/null 2>&1 || true
+      local latest_digest=$(docker inspect "$image" --format='{{.Id}}' 2>/dev/null | cut -d':' -f2 | cut -c1-12)

-      current_digest=$(docker inspect "$name" --format='{{.Image}}' 2>/dev/null | cut -d':' -f2 | cut -c1-12)
-      docker pull "$image" >/dev/null 2>&1 || continue
-      latest_digest=$(docker inspect "$image" --format='{{.Id}}' 2>/dev/null | cut -d':' -f2 | cut -c1-12)
-      [[ -z "$latest_digest" || "$current_digest" == "$latest_digest" ]] && continue
-
-      compose_workdir=$(docker inspect "$name" \
-        --format='{{index .Config.Labels "com.docker.compose.project.working_dir"}}' 2>/dev/null || true)
-      compose_service=$(docker inspect "$name" \
-        --format='{{index .Config.Labels "com.docker.compose.service"}}' 2>/dev/null || true)
-
-      if [[ -n "$compose_workdir" && -n "$compose_service" && -d "$compose_workdir" ]]; then
-        compose_updates+=("${name}|${image}|${compose_workdir}|${compose_service}")
-      else
-        standalone_updates+=("${name}|${image}")
+      if [ -n "$latest_digest" ] && [ "$current_digest" != "$latest_digest" ]; then
+        containers_with_updates+=("$name")
+        container_info+=("${index}) ${name} (${image})")
+        ((index++))
      fi
    done < <(docker ps --format '{{.Names}} {{.Image}}')

-    # Stop spinner before any interactive prompt
-    stop_spinner
+    if [ ${#containers_with_updates[@]} -gt 0 ]; then
+      echo ""
+      echo "${TAB3}Container updates available:"
+      for info in "${container_info[@]}"; do
+        echo "${TAB3}  $info"
+      done
+      echo ""
+      read -r -p "${TAB3}Select containers to update (e.g., 1,3,5 or 'all' or 'none'): " selection

-    if [[ ${#compose_updates[@]} -eq 0 && ${#standalone_updates[@]} -eq 0 ]]; then
-      msg_ok "All containers are up-to-date"
+      if [[ ${selection,,} == "all" ]]; then
+        for container in "${containers_with_updates[@]}"; do
+          msg_info "Updating container: $container"
+          docker stop "$container"
+          docker rm "$container"
+          # Note: This requires the original docker run command - best to recreate via compose
+          msg_ok "Stopped and removed $container (please recreate with updated image)"
+        done
+      elif [[ ${selection,,} != "none" ]]; then
+        IFS=',' read -ra SELECTED <<<"$selection"
+        for num in "${SELECTED[@]}"; do
+          num=$(echo "$num" | xargs) # trim whitespace
+          if [[ "$num" =~ ^[0-9]+$ ]] && [ "$num" -ge 1 ] && [ "$num" -le "${#containers_with_updates[@]}" ]; then
+            container="${containers_with_updates[$((num - 1))]}"
+            msg_info "Updating container: $container"
+            docker stop "$container"
+            docker rm "$container"
+            msg_ok "Stopped and removed $container (please recreate with updated image)"
+          fi
+        done
+      fi
    else
-      local reply
-      for entry in "${compose_updates[@]}"; do
-        IFS='|' read -r name image compose_workdir compose_service <<<"$entry"
-        reply=""
-        if read -r -t 60 -p "${TAB3}Update ${name} (${image}) via Compose? <y/N> (auto-no in 60s): " reply; then
-          echo ""
-        else
-          echo ""
-        fi
-        if [[ "${reply,,}" =~ ^(y|yes)$ ]]; then
-          msg_info "Updating $name"
-          if (cd "$compose_workdir" && $STD docker compose pull "$compose_service" && $STD docker compose up -d "$compose_service"); then
-            msg_ok "Updated $name"
-          else
-            msg_warn "Could not update $name — try manually in $compose_workdir"
-          fi
-        fi
-      done
-
-      for entry in "${standalone_updates[@]}"; do
-        IFS='|' read -r name image <<<"$entry"
-        reply=""
-        if read -r -t 60 -p "${TAB3}Pull new image for ${name} (${image})? <y/N> (auto-no in 60s): " reply; then
-          echo ""
-        else
-          echo ""
-        fi
-        if [[ "${reply,,}" =~ ^(y|yes)$ ]]; then
-          msg_info "Pulling new image for $name"
-          if $STD docker pull "$image"; then
-            msg_ok "New image available for $name — recreate the container to apply the update"
-          else
-            msg_warn "Failed to pull image for $name"
-          fi
-        fi
-      done
+      msg_ok "All containers are up-to-date"
    fi
  fi

@@ -6971,11 +6749,9 @@ setup_mariadb_db() {

  msg_info "Setting up MariaDB Database"

-  # Use --defaults-extra-file to pass credentials safely and escape identifiers
-  # to prevent SQL injection via DB name / user / password
-  $STD mariadb -u root -e "CREATE DATABASE \`${MARIADB_DB_NAME//\`/\`\`}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
-  $STD mariadb -u root -e "CREATE USER '${MARIADB_DB_USER//\'/\'\'}'@'localhost' IDENTIFIED BY '${MARIADB_DB_PASS//\'/\'\'}';"
-  $STD mariadb -u root -e "GRANT ALL ON \`${MARIADB_DB_NAME//\`/\`\`}\`.* TO '${MARIADB_DB_USER//\'/\'\'}'@'localhost';"
+  $STD mariadb -u root -e "CREATE DATABASE \`$MARIADB_DB_NAME\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
+  $STD mariadb -u root -e "CREATE USER '$MARIADB_DB_USER'@'localhost' IDENTIFIED BY '$MARIADB_DB_PASS';"
+  $STD mariadb -u root -e "GRANT ALL ON \`$MARIADB_DB_NAME\`.* TO '$MARIADB_DB_USER'@'localhost';"

  # Optional extra grants
  if [[ -n "${MARIADB_DB_EXTRA_GRANTS:-}" ]]; then
@@ -7691,13 +7467,6 @@ setup_nodejs() {
  local wants_corepack=0
  local node_setup_ok_msg=""

-  # Corepack must run fully non-interactive. Without this it prints
-  # "Corepack is about to download X. Do you want to continue? [Y/n]" and blocks
-  # the whole install waiting for keyboard input - both here and in the calling
-  # script's later `corepack prepare` / `corepack <pm>` calls, which run in this
-  # same shell and inherit the export.
-  export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-
  # ALWAYS clean up legacy installations first (nvm, etc.) to prevent conflicts
  cleanup_legacy_install "nodejs"

@@ -7852,48 +7621,17 @@ setup_nodejs() {

    IFS=',' read -ra MODULES <<<"$NODE_MODULE"

-    local corepack_spec="corepack@latest"
    for i in "${!MODULES[@]}"; do
      if [[ "${MODULES[$i]}" == "corepack" || "${MODULES[$i]}" == corepack@* ]]; then
        wants_corepack=1
-        [[ "${MODULES[$i]}" == corepack@* ]] && corepack_spec="${MODULES[$i]}"
      fi
      if [[ "${MODULES[$i]}" == "pnpm" ]]; then
        MODULES[$i]="pnpm@^10"
      fi
    done

-    # When corepack is requested, install and enable it FIRST. The corepack npm
-    # package owns the global yarn/pnpm/pnpx/yarnpkg bin shims, so a second
-    # `npm install -g yarn`/`pnpm` collides on /usr/bin/<tool> (EEXIST). With
-    # corepack ready we provision those package managers THROUGH corepack instead.
-    local corepack_ready=0
-    if ((wants_corepack)); then
-      msg_info "Installing corepack"
-      if $STD npm install -g "$corepack_spec" 2>/dev/null ||
-        $STD npm install -g --force "$corepack_spec" 2>/dev/null; then
-        msg_ok "Installed corepack"
-      else
-        msg_warn "Failed to install corepack"
-      fi
-      if [[ "$NODE_COREPACK_ENABLE" == "1" ]] && command -v corepack >/dev/null 2>&1; then
-        msg_info "Enabling corepack"
-        if $STD corepack enable 2>/dev/null; then
-          corepack_ready=1
-          msg_ok "Enabled corepack"
-        else
-          msg_warn "corepack enable failed"
-        fi
-      fi
-    fi
-
    local failed_modules=0
    for mod in "${MODULES[@]}"; do
-      # corepack itself is already handled above
-      if [[ "$mod" == "corepack" || "$mod" == corepack@* ]]; then
-        continue
-      fi
-
      local MODULE_NAME MODULE_REQ_VERSION MODULE_INSTALLED_VERSION
      if [[ "$mod" == @*/*@* ]]; then
        # Scoped package with version, e.g. @vue/cli-service@latest
@@ -7909,36 +7647,12 @@ setup_nodejs() {
        MODULE_REQ_VERSION="latest"
      fi

-      # Provision pnpm/yarn through corepack when it is active, so we never fight
-      # corepack over the /usr/bin/{yarn,pnpm} shim locations it owns.
-      if ((corepack_ready)) && [[ "$MODULE_NAME" == "pnpm" || "$MODULE_NAME" == "yarn" ]]; then
-        local corepack_pkg="$MODULE_NAME"
-        [[ "$MODULE_REQ_VERSION" != "latest" ]] && corepack_pkg="${MODULE_NAME}@${MODULE_REQ_VERSION}"
-        msg_info "Provisioning $MODULE_NAME via corepack"
-        if $STD corepack prepare "$corepack_pkg" --activate 2>/dev/null || command -v "$MODULE_NAME" >/dev/null 2>&1; then
-          msg_ok "Provisioned $MODULE_NAME via corepack"
-        else
-          msg_warn "Failed to provision $MODULE_NAME via corepack"
-          ((failed_modules++)) || true
-        fi
-        continue
-      fi
-
-      # For the npm-global path, drop any corepack-provided shim first so the
-      # bin link can be created without an EEXIST collision.
-      if [[ "$MODULE_NAME" == "pnpm" || "$MODULE_NAME" == "yarn" || "$MODULE_NAME" == "yarnpkg" ]]; then
-        rm -f /usr/bin/"$MODULE_NAME" /usr/local/bin/"$MODULE_NAME" 2>/dev/null || true
-      fi
-
      # Check if the module is already installed
      if $STD npm list -g --depth=0 "$MODULE_NAME" 2>&1 | grep -q "$MODULE_NAME@"; then
        MODULE_INSTALLED_VERSION="$(npm list -g --depth=0 "$MODULE_NAME" 2>&1 | grep "$MODULE_NAME@" | awk -F@ '{print $2}' 2>/dev/null | tr -d '[:space:]' || echo '')"
        if [[ "$MODULE_REQ_VERSION" != "latest" && "$MODULE_REQ_VERSION" != "$MODULE_INSTALLED_VERSION" ]]; then
          msg_info "Updating $MODULE_NAME to v$MODULE_REQ_VERSION"
-          # Retry with --force to overwrite corepack-provided shims (pnpm/yarn), which now
-          # ship with recent corepack and cause EEXIST on /usr/bin/<tool>
-          if $STD npm install -g "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null ||
-            $STD npm install -g --force "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null; then
+          if $STD npm install -g "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null; then
            msg_ok "Updated $MODULE_NAME"
          else
            msg_warn "Failed to update $MODULE_NAME to version $MODULE_REQ_VERSION"
@@ -7946,8 +7660,7 @@ setup_nodejs() {
          fi
        elif [[ "$MODULE_REQ_VERSION" == "latest" ]]; then
          msg_info "Updating $MODULE_NAME to latest version"
-          if $STD npm install -g "${MODULE_NAME}@latest" 2>/dev/null ||
-            $STD npm install -g --force "${MODULE_NAME}@latest" 2>/dev/null; then
+          if $STD npm install -g "${MODULE_NAME}@latest" 2>/dev/null; then
            msg_ok "Updated $MODULE_NAME"
          else
            msg_warn "Failed to update $MODULE_NAME to latest version"
@@ -7956,10 +7669,7 @@ setup_nodejs() {
        fi
      else
        msg_info "Installing $MODULE_NAME@$MODULE_REQ_VERSION"
-        # Retry with --force to overwrite corepack-provided shims (pnpm/yarn), which now
-        # ship with recent corepack and cause EEXIST on /usr/bin/<tool>
-        if $STD npm install -g "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null ||
-          $STD npm install -g --force "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null; then
+        if $STD npm install -g "${MODULE_NAME}@${MODULE_REQ_VERSION}" 2>/dev/null; then
          msg_ok "Installed $MODULE_NAME"
        else
          msg_warn "Failed to install $MODULE_NAME@$MODULE_REQ_VERSION"
@@ -7972,15 +7682,19 @@ setup_nodejs() {
    fi
  fi

-  # pnpm v10+ blocks dependency build scripts by default. Do NOT force
-  # `dangerouslyAllowAllBuilds` globally: pnpm implements that flag as an empty
-  # `neverBuiltDependencies`, which then clashes with any project that ships its
-  # own `onlyBuiltDependencies` (every create-t3-app based app, e.g. Split Pro)
-  # and aborts with ERR_PNPM_CONFIG_CONFLICT_BUILT_DEPENDENCIES. Instead relax the
-  # strict check so an unapproved build is a warning, not a fatal error; scripts
-  # that truly need every build script executed enable that themselves.
+  # pnpm v10+ blocks dependency build scripts by default (ERR_PNPM_IGNORED_BUILDS).
+  # In a container environment all installed packages are trusted, so we enable builds globally.
  if command -v pnpm >/dev/null 2>&1; then
-    pnpm config set --global strictDepBuilds false >/dev/null 2>&1 || true
+    pnpm config set --global dangerouslyAllowAllBuilds true >/dev/null 2>&1 || true
+  fi
+
+  if [[ "$NODE_COREPACK_ENABLE" == "1" ]] && ((wants_corepack)) && command -v corepack >/dev/null 2>&1; then
+    msg_info "Enabling corepack"
+    if $STD corepack enable 2>/dev/null; then
+      msg_ok "Enabled corepack"
+    else
+      msg_warn "corepack enable failed"
+    fi
  fi
 }

@@ -8605,14 +8319,8 @@ setup_postgresql_db() {
  fi

  msg_info "Setting up PostgreSQL Database"
-  # Escape single quotes in identifiers to prevent SQL injection
-  local _pg_user_escaped _pg_pass_escaped _pg_db_escaped
-  _pg_user_escaped="${PG_DB_USER//\'/\'\'}"
-  _pg_pass_escaped="${PG_DB_PASS//\'/\'\'}"
-  _pg_db_escaped="${PG_DB_NAME//\'/\'\'}"
-
-  $STD sudo -u postgres psql -c "CREATE ROLE $_pg_user_escaped WITH LOGIN PASSWORD '$_pg_pass_escaped';"
-  $STD sudo -u postgres psql -c "CREATE DATABASE $_pg_db_escaped WITH OWNER $_pg_user_escaped ENCODING 'UTF8' TEMPLATE template0;"
+  $STD sudo -u postgres psql -c "CREATE ROLE $PG_DB_USER WITH LOGIN PASSWORD '$PG_DB_PASS';"
+  $STD sudo -u postgres psql -c "CREATE DATABASE $PG_DB_NAME WITH OWNER $PG_DB_USER ENCODING 'UTF8' TEMPLATE template0;"

  # Configure pg_cron database BEFORE creating the extension (must be set before pg_cron loads)
  if [[ -n "${PG_DB_EXTENSIONS:-}" ]] && [[ ",${PG_DB_EXTENSIONS//[[:space:]]/}," == *",pg_cron,"* ]]; then
@@ -620,19 +620,12 @@ pve_check() {
 }

 arch_check() {
-  local arch
-  arch="$(dpkg --print-architecture)"
-  if [[ "$arch" != "amd64" && "$arch" != "arm64" ]]; then
-    msg_error "This script requires amd64 or arm64."
+  if [ "$(dpkg --print-architecture)" != "amd64" ]; then
+    echo -e "\n ${INFO}${YWB}This script will not work with PiMox! \n"
+    echo -e "\n ${YWB}Visit https://github.com/asylumexp/Proxmox for ARM64 support. \n"
    echo -e "Exiting..."
    sleep 2
-    exit 106
-  fi
-  if [[ "$arch" == "arm64" && "${var_arm64:-}" != "yes" ]]; then
-    echo -e "\n ${INFO}${YWB}This script does not yet support ARM64! \n"
-    echo -e "Exiting..."
-    sleep 2
-    exit 106
+    exit
  fi
 }

@@ -176,10 +176,11 @@ if [[ "${noauth_prompt,,}" =~ ^(y|yes)$ ]]; then
 server:
  port: $PORT
  sources:
-    - path: "$SRC_DIR"
+    - path: "$SRC_DIR"      
      name: "RootFS"
      config:
        denyByDefault: false
+        disableIndexing: false
        indexingIntervalMinutes: 240
        conditionals:
          rules:
@@ -203,6 +204,7 @@ server:
      name: "RootFS"
      config:
        denyByDefault: false
+        disableIndexing: false
        indexingIntervalMinutes: 240
        conditionals:
          rules:
@@ -11,6 +11,7 @@
 source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/api.func) 2>/dev/null
 source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/vm-core.func) 2>/dev/null
 source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/cloud-init.func) 2>/dev/null || true
+load_functions

 # ==============================================================================
 # SCRIPT VARIABLES
@@ -20,7 +21,6 @@ APP_TYPE="vm"
 NSAPP="docker-vm"
 var_os="debian"
 var_version="13"
-ARCH=$(dpkg --print-architecture)

 GEN_MAC=02:$(openssl rand -hex 5 | awk '{print toupper($0)}' | sed 's/\(..\)/\1:/g; s/.$//')
 RANDOM_UUID="$(cat /proc/sys/kernel/random/uuid)"
@@ -30,9 +30,6 @@ USE_CLOUD_INIT="no"
 OS_TYPE=""
 OS_VERSION=""
 THIN="discard=on,ssd=1,"
-var_arm64="yes"
-
-load_functions

 # ==============================================================================
 # ERROR HANDLING & CLEANUP
@@ -139,16 +136,11 @@ function default_settings() {

  VMID=$(get_valid_nextid)
  FORMAT=""
-  if [ "$ARCH" = "arm64" ]; then
-    MACHINE=""
-    CPU_TYPE=""
-  else
-    MACHINE=" -machine q35"
-    CPU_TYPE=" -cpu host"
-  fi
+  MACHINE=" -machine q35"
  DISK_CACHE=""
  DISK_SIZE="10G"
  HN="docker"
+  CPU_TYPE=" -cpu host"
  CORE_COUNT="2"
  RAM_SIZE="4096"
  BRG="vmbr0"
@@ -159,15 +151,11 @@ function default_settings() {
  METHOD="default"

  echo -e "${CONTAINERID}${BOLD}${DGN}Virtual Machine ID: ${BGN}${VMID}${CL}"
-  if [ "$ARCH" = "arm64" ]; then
-    echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}virt (ARM64)${CL}"
-  else
-    echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}Q35 (Modern)${CL}"
-  fi
+  echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}Q35 (Modern)${CL}"
  echo -e "${DISKSIZE}${BOLD}${DGN}Disk Size: ${BGN}${DISK_SIZE}${CL}"
  echo -e "${DISKSIZE}${BOLD}${DGN}Disk Cache: ${BGN}None${CL}"
  echo -e "${HOSTNAME}${BOLD}${DGN}Hostname: ${BGN}${HN}${CL}"
-  echo -e "${OS}${BOLD}${DGN}CPU Model: ${BGN}$([ "$ARCH" = "arm64" ] && echo "Default" || echo "Host")${CL}"
+  echo -e "${OS}${BOLD}${DGN}CPU Model: ${BGN}Host${CL}"
  echo -e "${CPUCORE}${BOLD}${DGN}CPU Cores: ${BGN}${CORE_COUNT}${CL}"
  echo -e "${RAMSIZE}${BOLD}${DGN}RAM Size: ${BGN}${RAM_SIZE}${CL}"
  echo -e "${BRIDGE}${BOLD}${DGN}Bridge: ${BGN}${BRG}${CL}"
@@ -209,11 +197,7 @@ function advanced_settings() {
  done

  # Machine Type
-  if [ "$ARCH" = "arm64" ]; then
-    FORMAT=""
-    MACHINE=""
-    echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}virt${CL}"
-  elif MACH=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "MACHINE TYPE" --radiolist --cancel-button Exit-Script "Choose Type" 10 58 2 \
+  if MACH=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "MACHINE TYPE" --radiolist --cancel-button Exit-Script "Choose Type" 10 58 2 \
    "q35" "Q35 (Modern, PCIe)" ON \
    "i440fx" "i440fx (Legacy, PCI)" OFF \
    3>&1 1>&2 2>&3); then
@@ -278,10 +262,7 @@ function advanced_settings() {
  fi

  # CPU Model
-  if [ "$ARCH" = "arm64" ]; then
-    CPU_TYPE=""
-    echo -e "${OS}${BOLD}${DGN}CPU Model: ${BGN}Default${CL}"
-  elif CPU_TYPE1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "CPU MODEL" --radiolist "Choose" --cancel-button Exit-Script 10 58 2 \
+  if CPU_TYPE1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "CPU MODEL" --radiolist "Choose" --cancel-button Exit-Script 10 58 2 \
    "1" "Host (Recommended)" ON \
    "0" "KVM64" OFF \
    3>&1 1>&2 2>&3); then
@@ -475,7 +475,7 @@ function advanced_settings() {
  done

  while true; do
-    if VLAN1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Vlan (leave blank for default)" 8 58 --title "VLAN" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
+    if VLAN1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Vlan(leave blank for default)" 8 58 --title "VLAN" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
      if [ -z "$VLAN1" ]; then
        VLAN1="Default"
        VLAN=""