minor fix

Set both install and update scripts to deploy Vikunja v2.3.0 instead of latest. The update flow now checks against this pinned release and includes context that v2.4.0 is temporarily avoided due to an upstream startup failure caused by the packaged systemd SystemCallFilter.

CHANGELOG.md

@@ -508,8 +508,44 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-07-27
+
+### 🆕 New Scripts
+
+  - PasswordPusher ([#16031](https://github.com/community-scripts/ProxmoxVE/pull/16031))
+
 ## 2026-07-26
 
+### 🆕 New Scripts
+
+  - Satisfactory ([#16023](https://github.com/community-scripts/ProxmoxVE/pull/16023))
+- OmniTools ([#16032](https://github.com/community-scripts/ProxmoxVE/pull/16032))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Apache Tika: Remove software-properties-common from Apache Tika install [@andygrunwald](https://github.com/andygrunwald) ([#16054](https://github.com/community-scripts/ProxmoxVE/pull/16054))
+    - Fix inventree missing db engine (upstream issue / postinstall)  [@MickLesk](https://github.com/MickLesk) ([#16022](https://github.com/community-scripts/ProxmoxVE/pull/16022))
+    - OPNsense VM: answer console password prompt explicitly, add inter-key delay [@MickLesk](https://github.com/MickLesk) ([#16021](https://github.com/community-scripts/ProxmoxVE/pull/16021))
+    - [endurain] add node update to update script [@johanngrobe](https://github.com/johanngrobe) ([#16014](https://github.com/community-scripts/ProxmoxVE/pull/16014))
+
+  - #### 🔧 Refactor
+
+    - Apache Tika: Switch from Debian Bookworm to Debian Trixie and replace manual install of OpenJDK with setup_java [@andygrunwald](https://github.com/andygrunwald) ([#16036](https://github.com/community-scripts/ProxmoxVE/pull/16036))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: improve OS mismatch message [@MickLesk](https://github.com/MickLesk) ([#16035](https://github.com/community-scripts/ProxmoxVE/pull/16035))
+
+### 🧰 Tools
+
+  - #### 🔧 Refactor
+
+    - Improve command description for disabling pve-enterprise repo [@Marcondiro](https://github.com/Marcondiro) ([#16020](https://github.com/community-scripts/ProxmoxVE/pull/16020))
+
 ## 2026-07-25
 
 ### 🚀 Updated Scripts

ct/apache-tika.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-10}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 

ct/endurain.sh

@@ -34,6 +34,8 @@ function update_script() {
     systemctl stop endurain
     msg_ok "Stopped Service"
 
+    NODE_VERSION="24" setup_nodejs
+
     create_backup /opt/endurain/.env /opt/endurain/frontend/dist/env.js
     CLEAN_INSTALL=1 fetch_and_deploy_codeberg_release "endurain" "endurain-project/endurain" "tarball" "latest" "/opt/endurain"
 

ct/headers/mastodon

@@ -1,6 +0,0 @@
-    __  ___           __            __          
-   /  |/  /___ ______/ /_____  ____/ /___  ____ 
-  / /|_/ / __ `/ ___/ __/ __ \/ __  / __ \/ __ \
- / /  / / /_/ (__  ) /_/ /_/ / /_/ / /_/ / / / /
-/_/  /_/\__,_/____/\__/\____/\__,_/\____/_/ /_/ 
-                                                

ct/headers/omnitools

@@ -0,0 +1,6 @@
+   ____                  _ ______            __    
+  / __ \____ ___  ____  (_)_  __/___  ____  / /____
+ / / / / __ `__ \/ __ \/ / / / / __ \/ __ \/ / ___/
+/ /_/ / / / / / / / / / / / / / /_/ / /_/ / (__  ) 
+\____/_/ /_/ /_/_/ /_/_/ /_/  \____/\____/_/____/  
+                                                   

ct/headers/passwordpusher

@@ -0,0 +1,6 @@
+    ____                                          ______             __             
+   / __ \____ ____________      ______  _________/ / __ \__  _______/ /_  ___  _____
+  / /_/ / __ `/ ___/ ___/ | /| / / __ \/ ___/ __  / /_/ / / / / ___/ __ \/ _ \/ ___/
+ / ____/ /_/ (__  |__  )| |/ |/ / /_/ / /  / /_/ / ____/ /_/ (__  ) / / /  __/ /    
+/_/    \__,_/____/____/ |__/|__/\____/_/   \__,_/_/    \__,_/____/_/ /_/\___/_/     
+                                                                                    

ct/headers/satisfactory

@@ -0,0 +1,6 @@
+   _____       __  _      ____           __                  
+  / ___/____ _/ /_(_)____/ __/___ ______/ /_____  _______  __
+  \__ \/ __ `/ __/ / ___/ /_/ __ `/ ___/ __/ __ \/ ___/ / / /
+ ___/ / /_/ / /_/ (__  ) __/ /_/ / /__/ /_/ /_/ / /  / /_/ / 
+/____/\__,_/\__/_/____/_/  \__,_/\___/\__/\____/_/   \__, /  
+                                                    /____/   

ct/omnitools.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Majiiin
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/iib0011/omni-tools
+
+APP="OmniTools"
+var_tags="${var_tags:-utilities;tools;converter}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/omnitools ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  NODE_VERSION="24" setup_nodejs
+
+  if check_for_gh_release "omnitools" "iib0011/omni-tools"; then
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "omnitools" "iib0011/omni-tools" "tarball"
+
+    msg_info "Building OmniTools"
+    cd /opt/omnitools
+    export HUSKY=0
+    $STD npm ci
+    $STD npm run build
+    msg_ok "Built OmniTools"
+
+    msg_info "Publishing Web Assets"
+    rm -rf /usr/share/nginx/html
+    mkdir -p /usr/share/nginx/html
+    cp -a /opt/omnitools/dist/. /usr/share/nginx/html/
+    rm -rf /opt/omnitools/node_modules
+    systemctl reload nginx
+    msg_ok "Published Web Assets"
+    msg_ok "Updated successfully!"
+  fi
+
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/passwordpusher.sh

@@ -3,13 +3,13 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mastodon/mastodon
+# Source: https://github.com/pglombardo/PasswordPusher
 
-APP="Mastodon"
-var_tags="${var_tags:-social;fediverse;activitypub}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
+APP="PasswordPusher"
+var_tags="${var_tags:-security;sharing;password}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_arm64="${var_arm64:-yes}"
@@ -25,35 +25,31 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -d /opt/mastodon ]]; then
+  if [[ ! -d /opt/passwordpusher ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
 
-  if check_for_gh_release "mastodon" "mastodon/mastodon"; then
-    msg_info "Stopping Services"
-    systemctl stop mastodon-web mastodon-sidekiq mastodon-streaming
-    msg_ok "Stopped Services"
+  if check_for_gh_release "passwordpusher" "pglombardo/PasswordPusher"; then
+    msg_info "Stopping Service"
+    systemctl stop passwordpusher
+    msg_ok "Stopped Service"
 
-    create_backup /opt/mastodon/public/system /opt/mastodon/.env.production
+    create_backup /opt/passwordpusher/storage /opt/passwordpusher/.env.production
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
-    sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
-    sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "passwordpusher" "pglombardo/PasswordPusher" "tarball"
 
-    msg_info "Installing Ruby Dependencies"
-    cd /opt/mastodon
+    msg_info "Installing Gem Dependencies"
+    cd /opt/passwordpusher
     export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
     $STD bundle config set --local without 'development test'
     $STD bundle config set --local deployment 'true'
-    $STD bundle install -j"$(nproc)"
-    msg_ok "Installed Ruby Dependencies"
+    $STD bundle install
+    msg_ok "Installed Gem Dependencies"
 
-    msg_info "Installing Node.js Dependencies"
-    $STD yarn install
-    msg_ok "Installed Node.js Dependencies"
-
-    restore_backup
+    msg_info "Installing JS Dependencies"
+    $STD yarn install --frozen-lockfile
+    msg_ok "Installed JS Dependencies"
 
     msg_info "Running Database Migrations"
     RAILS_ENV=production $STD bundle exec rails db:migrate
@@ -63,9 +59,11 @@ function update_script() {
     RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
     msg_ok "Precompiled Assets"
 
-    msg_info "Starting Services"
-    systemctl start mastodon-web mastodon-sidekiq mastodon-streaming
-    msg_ok "Started Services"
+    restore_backup
+
+    msg_info "Starting Service"
+    systemctl start passwordpusher
+    msg_ok "Started Service"
     msg_ok "Updated successfully!"
   fi
   exit
@@ -78,4 +76,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:5100${CL}"

ct/satisfactory.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: n8flx
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.satisfactorygame.com/
+
+APP="Satisfactory"
+var_tags="${var_tags:-gaming;server}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-8192}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -x /opt/steamcmd/steamcmd.sh || ! -d /opt/satisfactory/server ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Stopping Satisfactory"
+  systemctl stop satisfactory
+  msg_ok "Stopped Satisfactory"
+
+  create_backup /home/steam/.config/Epic/FactoryGame/Saved
+
+  msg_info "Updating Satisfactory"
+  if $STD runuser -u steam -- /opt/steamcmd/steamcmd.sh \
+    +force_install_dir /opt/satisfactory/server \
+    +login anonymous \
+    +app_update 1690800 -beta public validate \
+    +quit; then
+    msg_ok "Updated Satisfactory"
+  else
+    restore_backup
+    systemctl start satisfactory
+    msg_error "Failed to update Satisfactory"
+    exit 1
+  fi
+
+  restore_backup
+
+  msg_info "Starting Satisfactory"
+  systemctl start satisfactory
+  msg_ok "Started Satisfactory"
+  msg_ok "Updated Successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Add the server in Satisfactory Server Manager:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}${IP}:7777${CL}"
+echo -e "${INFO}${YW} Required ports:${CL} ${BGN}7777 TCP/UDP and 8888 TCP${CL}"

ct/vikunja.sh

@@ -29,9 +29,9 @@ function update_script() {
     exit
   fi
 
-  RELEASE="$( [[ -f "$HOME/.vikunja" ]] && cat "$HOME/.vikunja" 2>/dev/null || [[ -f /opt/Vikunja_version ]] && cat /opt/Vikunja_version 2>/dev/null || true)"
-  if [[ -z "$RELEASE" ]] || [[ "$RELEASE" == "unstable" ]] || dpkg --compare-versions "${RELEASE:-0.0.0}" lt "1.0.0"; then
-    msg_warn "You are upgrading from Vikunja '$RELEASE'."
+  INSTALLED_VERSION="$( [[ -f "$HOME/.vikunja" ]] && cat "$HOME/.vikunja" 2>/dev/null || [[ -f /opt/Vikunja_version ]] && cat /opt/Vikunja_version 2>/dev/null || true)"
+  if [[ -z "$INSTALLED_VERSION" ]] || [[ "$INSTALLED_VERSION" == "unstable" ]] || dpkg --compare-versions "${INSTALLED_VERSION:-0.0.0}" lt "1.0.0"; then
+    msg_warn "You are upgrading from Vikunja '$INSTALLED_VERSION'."
     msg_warn "This requires MANUAL config changes in /etc/vikunja/config.yml."
     msg_warn "See: https://vikunja.io/changelog/whats-new-in-vikunja-1.0.0/#config-changes"
 
@@ -46,7 +46,8 @@ function update_script() {
     [[ "$CONFIRM2" =~ ^[yY]$ ]] || exit 0
   fi
 
-  if check_for_gh_release "vikunja" "go-vikunja/vikunja"; then
+  RELEASE="v2.3.0"
+  if check_for_gh_release "vikunja" "go-vikunja/vikunja" "${RELEASE}" "v2.4.0 is killed at startup by the systemd SystemCallFilter shipped in the .deb (upstream go-vikunja/vikunja#3252); pinned until a fixed release is out"; then
     echo
     msg_warn "The package update may include config file changes."
     echo -e "${TAB}${YW}How do you want to handle /etc/vikunja/config.yml?${CL}"
@@ -65,7 +66,7 @@ function update_script() {
     systemctl stop vikunja
     msg_ok "Stopped Service"
 
-    fetch_and_deploy_gh_release "vikunja" "go-vikunja/vikunja" "binary" "latest" "" "vikunja-*-$(arch_resolve "x86_64" "aarch64").deb"
+    fetch_and_deploy_gh_release "vikunja" "go-vikunja/vikunja" "binary" "${RELEASE}" "" "vikunja-*-$(arch_resolve "x86_64" "aarch64").deb"
     $STD systemctl daemon-reload
 
     msg_info "Starting Service"

install/apache-tika-install.sh

@@ -15,7 +15,6 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
-  software-properties-common \
   gdal-bin \
   tesseract-ocr \
   tesseract-ocr-eng \
@@ -33,10 +32,7 @@ $STD apt-get install -y \
   cabextract
 msg_ok "Installed Dependencies"
 
-msg_info "Setup OpenJDK"
-$STD apt-get install -y \
-  openjdk-17-jre-headless
-msg_ok "Setup OpenJDK"
+JAVA_VERSION="21" setup_java
 
 msg_info "Installing Apache Tika"
 mkdir -p /opt/apache-tika

install/inventree-install.sh

@@ -30,6 +30,11 @@ msg_ok "Installed InvenTree"
 msg_info "Configuring InvenTree"
 if [[ -f /etc/inventree/config.yaml ]]; then
   sed -i "s|site_url:.*|site_url: http://${LOCAL_IP}|" /etc/inventree/config.yaml
+  if ! grep -q "^  engine:" /etc/inventree/config.yaml; then
+    mkdir -p /home/inventree/data
+    chown inventree:inventree /home/inventree/data
+    sed -i "/^database:$/a\\  engine: sqlite3\\n  name: '/home/inventree/data/database.sqlite3'" /etc/inventree/config.yaml
+  fi
 fi
 $STD inventree run invoke update
 msg_ok "Configured InvenTree"

install/mastodon-install.sh

@@ -1,275 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mastodon/mastodon
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  git \
-  imagemagick \
-  libvips-tools \
-  libpq-dev \
-  libxslt1-dev \
-  file \
-  protobuf-compiler \
-  pkg-config \
-  autoconf \
-  bison \
-  build-essential \
-  libssl-dev \
-  libyaml-dev \
-  libreadline-dev \
-  zlib1g-dev \
-  libffi-dev \
-  libgdbm-dev \
-  libidn-dev \
-  libicu-dev \
-  libjemalloc-dev \
-  libjemalloc2 \
-  redis-server \
-  nginx
-msg_ok "Installed Dependencies"
-
-setup_ffmpeg
-NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-$STD corepack enable
-
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="mastodon_production" PG_DB_USER="mastodon" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
-$STD sudo -u postgres psql -c "ALTER USER mastodon CREATEDB;"
-
-RUBY_VERSION="4.0.5" RUBY_INSTALL_RAILS="false" setup_ruby
-export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
-
-fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
-sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
-sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
-
-msg_info "Installing Ruby Dependencies"
-cd /opt/mastodon
-$STD bundle config set --local without 'development test'
-$STD bundle config set --local deployment 'true'
-$STD bundle install -j"$(nproc)"
-msg_ok "Installed Ruby Dependencies"
-
-msg_info "Installing Node.js Dependencies"
-$STD yarn install
-msg_ok "Installed Node.js Dependencies"
-
-msg_info "Configuring Mastodon"
-SECRET_KEY_BASE=$(RAILS_ENV=production bundle exec rails secret)
-OTP_SECRET=$(RAILS_ENV=production bundle exec rails secret)
-
-VAPID_OUTPUT=$(RAILS_ENV=production bundle exec rails mastodon:webpush:generate_vapid_key 2>/dev/null)
-VAPID_PRIVATE_KEY=$(echo "$VAPID_OUTPUT" | grep "^VAPID_PRIVATE_KEY=" | cut -d= -f2-)
-VAPID_PUBLIC_KEY=$(echo "$VAPID_OUTPUT" | grep "^VAPID_PUBLIC_KEY=" | cut -d= -f2-)
-
-ENCRYPT_OUTPUT=$(RAILS_ENV=production bundle exec rails db:encryption:init 2>/dev/null)
-AR_DET_KEY=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=" | cut -d= -f2-)
-AR_SALT=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=" | cut -d= -f2-)
-AR_PRIMARY=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=" | cut -d= -f2-)
-
-mkdir -p /opt/mastodon/public/system
-cat <<EOF >/opt/mastodon/.env.production
-LOCAL_DOMAIN=${LOCAL_IP}
-LOCAL_HTTPS=false
-REDIS_HOST=127.0.0.1
-REDIS_PORT=6379
-DB_HOST=127.0.0.1
-DB_USER=mastodon
-DB_NAME=mastodon_production
-DB_PASS=${PG_DB_PASS}
-DB_PORT=5432
-RAILS_ENV=production
-NODE_ENV=production
-RAILS_SERVE_STATIC_FILES=true
-BIND=0.0.0.0
-SECRET_KEY_BASE=${SECRET_KEY_BASE}
-OTP_SECRET=${OTP_SECRET}
-VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY}
-VAPID_PUBLIC_KEY=${VAPID_PUBLIC_KEY}
-ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=${AR_DET_KEY}
-ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=${AR_SALT}
-ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=${AR_PRIMARY}
-SMTP_SERVER=
-SMTP_PORT=587
-SMTP_FROM_ADDRESS=notifications@${LOCAL_IP}
-EOF
-msg_ok "Configured Mastodon"
-
-msg_info "Setting up Database"
-RAILS_ENV=production $STD bundle exec rails db:setup
-msg_ok "Set up Database"
-
-msg_info "Precompiling Assets (Patience)"
-RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
-msg_ok "Precompiled Assets"
-
-msg_info "Creating Admin Account"
-if ! ADMIN_OUTPUT=$(EMAIL_DOMAIN_ALLOWLIST="${LOCAL_IP}" RAILS_ENV=production bundle exec bin/tootctl accounts create admin \
-  --email "admin@${LOCAL_IP}" \
-  --confirmed \
-  --approve \
-  --role Owner); then
-  msg_error "Failed to create Mastodon admin account"
-  exit 1
-fi
-ADMIN_PASS=$(echo "$ADMIN_OUTPUT" | sed -n 's/^New password: //p')
-if [[ -z "$ADMIN_PASS" ]]; then
-  msg_error "Failed to retrieve Mastodon admin password"
-  exit 1
-fi
-RAILS_ENV=production $STD bundle exec bin/tootctl settings registrations approved
-cat <<EOF > ~/mastodon.creds
-  Mastodon Admin Credentials
-  URL:      http://${LOCAL_IP}
-  Email:    admin@${LOCAL_IP}
-  Password: ${ADMIN_PASS}
-EOF
-msg_ok "Created Admin Account"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/mastodon-web.service
-[Unit]
-Description=mastodon-web
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/mastodon
-Environment=RAILS_ENV=production
-Environment=PORT=3000
-Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-ExecStart=/root/.rbenv/shims/bundle exec puma -C config/puma.rb
-ExecReload=/bin/kill -SIGUSR1 \$MAINPID
-TimeoutSec=15
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/mastodon-sidekiq.service
-[Unit]
-Description=mastodon-sidekiq
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/mastodon
-Environment=RAILS_ENV=production
-Environment=DB_POOL=25
-Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-ExecStart=/root/.rbenv/shims/bundle exec sidekiq -c 25
-TimeoutSec=15
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/mastodon-streaming.service
-[Unit]
-Description=mastodon-streaming
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/mastodon
-Environment=NODE_ENV=production
-Environment=PORT=4000
-ExecStart=/usr/bin/node ./streaming
-TimeoutSec=15
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now mastodon-web mastodon-sidekiq mastodon-streaming
-msg_ok "Created Services"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/mastodon
-map $http_upgrade $connection_upgrade {
-  default upgrade;
-  ''      close;
-}
-
-upstream mastodon_web {
-  server 127.0.0.1:3000 fail_timeout=0;
-}
-
-upstream mastodon_streaming {
-  server 127.0.0.1:4000 fail_timeout=0;
-}
-
-server {
-  listen 80;
-  server_name _;
-  client_max_body_size 99m;
-  root /opt/mastodon/public;
-
-  gzip on;
-  gzip_types text/plain application/json application/javascript text/css image/svg+xml;
-
-  location / {
-    try_files $uri @proxy;
-  }
-
-  location ~ ^/assets/ {
-    add_header Cache-Control "public, max-age=2419200, must-revalidate";
-    try_files $uri =404;
-  }
-
-  location ^~ /api/v1/streaming {
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_pass http://mastodon_streaming;
-    proxy_buffering off;
-    proxy_redirect off;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-    tcp_nodelay on;
-  }
-
-  location @proxy {
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_pass http://mastodon_web;
-    proxy_buffering on;
-    proxy_redirect off;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-  }
-}
-EOF
-ln -sf /etc/nginx/sites-available/mastodon /etc/nginx/sites-enabled/mastodon
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now redis-server
-systemctl enable -q --now nginx
-systemctl reload nginx
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc

install/omnitools-install.sh

@@ -0,0 +1,67 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Majiiin
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/iib0011/omni-tools
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+fetch_and_deploy_gh_release "omnitools" "iib0011/omni-tools" "tarball"
+
+msg_info "Building OmniTools"
+cd /opt/omnitools
+export HUSKY=0
+$STD npm ci
+$STD npm run build
+msg_ok "Built OmniTools"
+
+msg_info "Publishing Web Assets"
+rm -rf /usr/share/nginx/html
+mkdir -p /usr/share/nginx/html
+cp -a /opt/omnitools/dist/. /usr/share/nginx/html/
+rm -rf /opt/omnitools/node_modules
+msg_ok "Published Web Assets"
+
+msg_info "Configuring Nginx"
+sed -i \
+  's/application\/javascript.*js;/application\/javascript                js mjs;/' \
+  /etc/nginx/mime.types
+
+cat <<'EOF' >/etc/nginx/sites-available/omnitools
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}
+EOF
+
+ln -sf /etc/nginx/sites-available/omnitools /etc/nginx/sites-enabled/omnitools
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q --now nginx
+systemctl reload nginx
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc

install/passwordpusher-install.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/pglombardo/PasswordPusher
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  default-libmysqlclient-dev \
+  git \
+  libpq-dev \
+  libsqlite3-dev \
+  pkg-config
+msg_ok "Installed Dependencies"
+
+RUBY_VERSION="4.0.5" RUBY_INSTALL_RAILS="false" setup_ruby
+NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
+export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
+
+fetch_and_deploy_gh_release "passwordpusher" "pglombardo/PasswordPusher" "tarball"
+
+msg_info "Installing Gem Dependencies"
+cd /opt/passwordpusher
+$STD bundle config set --local without 'development test'
+$STD bundle config set --local deployment 'true'
+$STD bundle install
+msg_ok "Installed Gem Dependencies"
+
+msg_info "Installing JS Dependencies"
+$STD yarn install --frozen-lockfile
+msg_ok "Installed JS Dependencies"
+
+msg_info "Configuring PasswordPusher"
+mkdir -p /opt/passwordpusher/storage/db
+SECRET_KEY_BASE=$(bundle exec rails secret)
+MASTER_KEY=$(openssl rand -hex 32)
+cat <<EOF >/opt/passwordpusher/.env.production
+SECRET_KEY_BASE=${SECRET_KEY_BASE}
+PWPUSH_MASTER_KEY=${MASTER_KEY}
+PWP__FILES__STORAGE=local
+RAILS_LOG_TO_STDOUT=true
+PORT=5100
+EOF
+msg_ok "Configured PasswordPusher"
+
+msg_info "Setting up Database"
+RAILS_ENV=production $STD bundle exec rails db:setup
+msg_ok "Set up Database"
+
+msg_info "Precompiling Assets"
+RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
+msg_ok "Precompiled Assets"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/passwordpusher.service
+[Unit]
+Description=Password Pusher
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/passwordpusher
+Environment=RAILS_ENV=production
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+EnvironmentFile=/opt/passwordpusher/.env.production
+ExecStart=/root/.rbenv/shims/bundle exec puma -C config/puma.rb -e production
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now passwordpusher
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/satisfactory-install.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: n8flx
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.satisfactorygame.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  lib32gcc-s1 \
+  lib32stdc++6
+msg_ok "Installed Dependencies"
+
+msg_info "Creating Steam User and Application Directories"
+useradd --system \
+  --create-home \
+  --home-dir /home/steam \
+  --shell /usr/sbin/nologin \
+  steam
+mkdir -p /opt/satisfactory/server /opt/steamcmd
+chown -R steam:steam /opt/satisfactory /opt/steamcmd /home/steam
+msg_ok "Created Steam User and Application Directories"
+
+fetch_and_deploy_from_url \
+  "https://steamcdn-a.akamaihd.net/client/installer/steamcmd_linux.tar.gz" \
+  "/opt/steamcmd"
+chown -R steam:steam /opt/steamcmd
+
+msg_info "Installing Satisfactory Dedicated Server"
+$STD runuser -u steam -- /opt/steamcmd/steamcmd.sh \
+  +force_install_dir /opt/satisfactory/server \
+  +login anonymous \
+  +app_update 1690800 -beta public validate \
+  +quit
+msg_ok "Installed Satisfactory Dedicated Server"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/satisfactory.service
+[Unit]
+Description=Satisfactory Dedicated Server
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=steam
+Group=steam
+WorkingDirectory=/opt/satisfactory/server
+Environment=LANG=C.UTF-8
+Environment=HOME=/home/steam
+ExecStart=/opt/satisfactory/server/FactoryServer.sh -log
+Restart=on-failure
+RestartSec=10
+KillSignal=SIGINT
+TimeoutStopSec=120
+StandardOutput=journal+console
+StandardError=journal+console
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now satisfactory
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/vikunja-install.sh

@@ -13,7 +13,8 @@ setting_up_container
 network_check
 update_os
 
-fetch_and_deploy_gh_release "vikunja" "go-vikunja/vikunja" "binary" "latest" "" "vikunja-*-$(arch_resolve "x86_64" "aarch64").deb"
+RELEASE="v2.3.0"
+fetch_and_deploy_gh_release "vikunja" "go-vikunja/vikunja" "binary" "${RELEASE}" "" "vikunja-*-$(arch_resolve "x86_64" "aarch64").deb"
 
 msg_info "Setting up Vikunja"
 sed -i 's|^# \(service:\)|\1|' /etc/vikunja/config.yml

misc/build.func

@@ -3858,6 +3858,13 @@ check_container_os_guard() {
     return 0
   fi
 
+  local downgraded_target=0
+  if [[ "$cur_os" == "$rec_os" ]] && [[ "$cur_ver" != "$rec_ver" ]]; then
+    if [[ "$(printf '%s\n%s\n' "$cur_ver" "$rec_ver" | sort -V | tail -n1)" == "$cur_ver" ]]; then
+      downgraded_target=1
+    fi
+  fi
+
   case "${var_ignore_os_mismatch:-}" in
   1 | yes | true | on)
     msg_warn "Container OS is ${cur_os} ${cur_ver} but the script recommends ${rec_os} ${rec_ver} — continuing via var_ignore_os_mismatch (may break, no support)."
@@ -3873,10 +3880,19 @@ check_container_os_guard() {
     return 0
   fi
 
+  local mismatch_detail remediation
+  if [[ "$downgraded_target" -eq 1 ]]; then
+    mismatch_detail="Your container runs ${cur_os} ${cur_ver}, which is newer than what this script now targets (${rec_os} ${rec_ver}).\n\nThe target was likely lowered on purpose, e.g. because ${APP:-the app} had problems on newer OS versions - check the GitHub issues for ${APP:-this app} for details.\n\nContinuing on ${cur_ver} often still works, but isn't guaranteed. If you are unsure, ask in our Discord (https://discord.gg/3AnUqsXnmK) before continuing."
+    remediation="This script now targets the older ${rec_os} ${rec_ver}. Check the GitHub issues for ${APP:-this app}, or ask in Discord (https://discord.gg/3AnUqsXnmK) if you are unsure"
+  else
+    mismatch_detail="This container runs ${cur_os} ${cur_ver}, but this script now targets ${rec_os} ${rec_ver}.\n\nUpdating on the older base OS may fail or leave ${APP:-the application} broken (e.g. required runtime versions are not available).\n\nRecommended: upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again."
+    remediation="Upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again"
+  fi
+
   if [[ "${PHS_SILENT:-0}" != "1" ]] && command -v whiptail &>/dev/null && [ -t 0 ] && [[ "$TERM" != "dumb" ]]; then
     local choice
     choice=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "OS VERSION MISMATCH" --menu \
-      "This container runs ${cur_os} ${cur_ver}, but this script now targets ${rec_os} ${rec_ver}.\n\nUpdating on the older base OS may fail or leave ${APP:-the application} broken (e.g. required runtime versions are not available).\n\nRecommended: upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again.\n\nIf you continue anyway, it may break — no support is provided in that case.\n\nContinue anyway?" \
+      "${mismatch_detail}\n\nIf you continue anyway, it may break — no support is provided in that case.\n\nContinue anyway?" \
       20 70 3 \
       "1" "No  (cancel update)" \
       "2" "Yes (continue this time)" \
@@ -3899,7 +3915,7 @@ check_container_os_guard() {
   fi
 
   msg_error "Container OS ${cur_os} ${cur_ver} does not match the recommended ${rec_os} ${rec_ver} — skipping update."
-  msg_error "Upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again — or bypass this check (may break, no support) with: echo \"${rec_os} ${rec_ver}\" > ${ignore_file}"
+  msg_error "${remediation} — or bypass this check (may break, no support) with: echo \"${rec_os} ${rec_ver}\" > ${ignore_file}"
   return 1
 }
 

tools/pve/post-pve-install.sh

@@ -300,7 +300,7 @@ EOF
       --title "PVE-ENTERPRISE" \
       --menu "'pve-enterprise' repository already exists.\n\nWhat do you want to do?" 14 58 2 \
       "keep" "Keep as is" \
-      "disable" "Comment out (disable) this repo" \
+      "disable" "Disable this repo (set Enabled: false)" \
       "delete" "Delete this repo file" \
       3>&2 2>&1 1>&3)
     case $CHOICE in

vm/opnsense-vm.sh

@@ -810,6 +810,8 @@ msg_ok "Starting OPNsense VM (Patience this takes 20-30 minutes)"
 qm start $VMID
 sleep 90
 send_line_to_vm "root"
+sleep 2
+send_line_to_vm ""
 send_line_to_vm "fetch https://raw.githubusercontent.com/opnsense/update/master/src/bootstrap/opnsense-bootstrap.sh.in"
 if [ -n "$WAN_BRG" ]; then
   msg_info "Adding WAN interface"