feat(debian-13-vm): add cloud-init selection dialog for default and advanced settings

Add select_cloud_init() function consistent with docker-vm.sh that prompts
the user to choose between Cloud-Init (genericcloud image) and nocloud
(with auto-login) in both default and advanced settings.

Previously, default settings hardcoded CLOUD_INIT=no without asking.

.github/workflows/update-versions-github.yml

@@ -89,9 +89,15 @@ jobs:
             slug=$(jq -r '.slug // empty' "$json_file" 2>/dev/null)
             [[ -z "$slug" ]] && continue
 
-            # Find corresponding install script
-            install_script="install/${slug}-install.sh"
-            [[ ! -f "$install_script" ]] && continue
+            # Find corresponding script (install script or addon script)
+            install_script=""
+            if [[ -f "install/${slug}-install.sh" ]]; then
+              install_script="install/${slug}-install.sh"
+            elif [[ -f "tools/addon/${slug}.sh" ]]; then
+              install_script="tools/addon/${slug}.sh"
+            else
+              continue
+            fi
 
             # Look for fetch_and_deploy_gh_release calls
             # Pattern: fetch_and_deploy_gh_release "app" "owner/repo" ["mode"] ["version"]

CHANGELOG.md

@@ -401,6 +401,65 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-02-11
+
+### 🆕 New Scripts
+
+  - Draw.io ([#11788](https://github.com/community-scripts/ProxmoxVE/pull/11788))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix: make donetick 0.1.71 compatible [@tomfrenzel](https://github.com/tomfrenzel) ([#11804](https://github.com/community-scripts/ProxmoxVE/pull/11804))
+    - Kasm: Support new version URL format without hash suffix [@MickLesk](https://github.com/MickLesk) ([#11787](https://github.com/community-scripts/ProxmoxVE/pull/11787))
+    - LibreTranslate: Remove Torch [@tremor021](https://github.com/tremor021) ([#11783](https://github.com/community-scripts/ProxmoxVE/pull/11783))
+    - Snowshare: fix update script [@TuroYT](https://github.com/TuroYT) ([#11726](https://github.com/community-scripts/ProxmoxVE/pull/11726))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: respect EDITOR variable for config editing [@ls-root](https://github.com/ls-root) ([#11693](https://github.com/community-scripts/ProxmoxVE/pull/11693))
+
+### 📚 Documentation
+
+  - Fix formatting in kutt.json notes section [@tiagodenoronha](https://github.com/tiagodenoronha) ([#11774](https://github.com/community-scripts/ProxmoxVE/pull/11774))
+
+## 2026-02-10
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: Pin version to 2.5.6 [@vhsdream](https://github.com/vhsdream) ([#11775](https://github.com/community-scripts/ProxmoxVE/pull/11775))
+    - Libretranslate: Fix setuptools [@tremor021](https://github.com/tremor021) ([#11772](https://github.com/community-scripts/ProxmoxVE/pull/11772))
+    - Element Synapse: prevent systemd invoke failure during apt install [@MickLesk](https://github.com/MickLesk) ([#11758](https://github.com/community-scripts/ProxmoxVE/pull/11758))
+
+  - #### ✨ New Features
+
+    - Refactor: Slskd & Soularr [@vhsdream](https://github.com/vhsdream) ([#11674](https://github.com/community-scripts/ProxmoxVE/pull/11674))
+
+### 🗑️ Deleted Scripts
+
+  - move paperless-exporter from LXC to addon ([#11737](https://github.com/community-scripts/ProxmoxVE/pull/11737))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - feat: improve storage parsing & add guestname [@carlosmaroot](https://github.com/carlosmaroot) ([#11752](https://github.com/community-scripts/ProxmoxVE/pull/11752))
+
+### 📂 Github
+
+  - Github-Version Workflow: include addon scripts in extraction [@MickLesk](https://github.com/MickLesk) ([#11757](https://github.com/community-scripts/ProxmoxVE/pull/11757))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - Snowshare: fix typo in config file path on website [@BirdMakingStuff](https://github.com/BirdMakingStuff) ([#11754](https://github.com/community-scripts/ProxmoxVE/pull/11754))
+
 ## 2026-02-09
 
 ### 🚀 Updated Scripts

ct/donetick.sh

@@ -35,13 +35,14 @@ function update_script() {
     msg_ok "Stopped Service"
 
     msg_info "Backing Up Configurations"
-    mv /opt/donetick/config/selfhosted.yml /opt/donetick/donetick.db /opt
+    mv /opt/donetick/config/selfhosted.yaml /opt/donetick/donetick.db /opt
     msg_ok "Backed Up Configurations"
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "donetick" "donetick/donetick" "prebuild" "latest" "/opt/donetick" "donetick_Linux_x86_64.tar.gz"
 
     msg_info "Restoring Configurations"
-    mv /opt/selfhosted.yml /opt/donetick/config
+    mv /opt/selfhosted.yaml /opt/donetick/config
+    sed -i '/capacitor:\/\/localhost/d' /opt/donetick/config/selfhosted.yaml
     mv /opt/donetick.db /opt/donetick
     msg_ok "Restored Configurations"
 

ct/drawio.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.drawio.com/
+
+APP="DrawIO"
+var_tags="${var_tags:-diagrams}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /var/lib/tomcat11/webapps/draw.war ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "drawio" "jgraph/drawio"; then
+    msg_info "Stopping service"
+    systemctl stop tomcat11
+    msg_ok "Service stopped"
+
+    msg_info "Updating Debian LXC"
+    $STD apt update
+    $STD apt upgrade -y
+    msg_ok "Updated Debian LXC"
+
+    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "drawio" "jgraph/drawio" "singlefile" "latest" "/var/lib/tomcat11/webapps" "draw.war"
+
+    msg_info "Starting service"
+    systemctl start tomcat11
+    msg_ok "Service started"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080/draw${CL}"

ct/headers/drawio

@@ -0,0 +1,6 @@
+    ____                      ________ 
+   / __ \_________ __      __/  _/ __ \
+  / / / / ___/ __ `/ | /| / // // / / /
+ / /_/ / /  / /_/ /| |/ |/ // // /_/ / 
+/_____/_/   \__,_/ |__/|__/___/\____/  
+                                       

ct/headers/prometheus-paperless-ngx-exporter

@@ -1,6 +0,0 @@
-    ____                            __  __                          ____                        __                     _   _________  __      ______                      __           
-   / __ \_________  ____ ___  ___  / /_/ /_  ___  __  _______      / __ \____ _____  ___  _____/ /__  __________      / | / / ____/ |/ /     / ____/  ______  ____  _____/ /____  _____
-  / /_/ / ___/ __ \/ __ `__ \/ _ \/ __/ __ \/ _ \/ / / / ___/_____/ /_/ / __ `/ __ \/ _ \/ ___/ / _ \/ ___/ ___/_____/  |/ / / __ |   /_____/ __/ | |/_/ __ \/ __ \/ ___/ __/ _ \/ ___/
- / ____/ /  / /_/ / / / / / /  __/ /_/ / / /  __/ /_/ (__  )_____/ ____/ /_/ / /_/ /  __/ /  / /  __(__  |__  )_____/ /|  / /_/ //   /_____/ /____>  </ /_/ / /_/ / /  / /_/  __/ /    
-/_/   /_/   \____/_/ /_/ /_/\___/\__/_/ /_/\___/\__,_/____/     /_/    \__,_/ .___/\___/_/  /_/\___/____/____/     /_/ |_/\____//_/|_|    /_____/_/|_/ .___/\____/_/   \__/\___/_/     
-                                                                           /_/                                                                      /_/                                

ct/immich.sh

@@ -105,7 +105,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="2.5.5"
+  RELEASE="2.5.6"
   if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}"; then
     if [[ $(cat ~/.immich) > "2.5.1" ]]; then
       msg_info "Enabling Maintenance Mode"

ct/kasm.sh

@@ -34,10 +34,19 @@ function update_script() {
   CURRENT_VERSION=$(readlink -f /opt/kasm/current | awk -F'/' '{print $4}')
   KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
   if [[ -z "$KASM_URL" ]]; then
+    SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
+    if [[ -n "$SERVICE_IMAGE_URL" ]]; then
+      KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+      KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+    fi
+  else
+    KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+  fi
+  
+  if [[ -z "$KASM_URL" ]] || [[ -z "$KASM_VERSION" ]]; then
     msg_error "Unable to detect latest Kasm release URL."
     exit 1
   fi
-  KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
   msg_info "Checked for new version"
 
   msg_info "Removing outdated docker-compose plugin"

ct/prometheus-paperless-ngx-exporter.sh

@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Andy Grunwald (andygrunwald)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/hansmi/prometheus-paperless-exporter
-
-APP="Prometheus-Paperless-NGX-Exporter"
-var_tags="${var_tags:-monitoring;alerting}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-256}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/systemd/system/prometheus-paperless-ngx-exporter.service ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter"; then
-    msg_info "Stopping Service"
-    systemctl stop prometheus-paperless-ngx-exporter
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter" "binary"
-
-    msg_info "Starting Service"
-    systemctl start prometheus-paperless-ngx-exporter
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8081/metrics${CL}"

ct/slskd.sh

@@ -3,7 +3,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/slskd/slskd, https://soularr.net
+# Source: https://github.com/slskd/slskd, https://github.com/mrusse/soularr
 
 APP="slskd"
 var_tags="${var_tags:-arr;p2p}"
@@ -24,50 +24,65 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -d /opt/slskd ]] || [[ ! -d /opt/soularr ]]; then
-    msg_error "No ${APP} Installation Found!"
+  if [[ ! -d /opt/slskd ]]; then
+    msg_error "No Slskd Installation Found!"
     exit
   fi
 
-  RELEASE=$(curl -s https://api.github.com/repos/slskd/slskd/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
-    msg_info "Stopping Service"
-    systemctl stop slskd soularr.timer soularr.service
-    msg_info "Stopped Service"
+  if check_for_gh_release "Slskd" "slskd/slskd"; then
+    msg_info "Stopping Service(s)"
+    systemctl stop slskd
+    [[ -f /etc/systemd/system/soularr.service ]] && systemctl stop soularr.timer soularr.service
+    msg_ok "Stopped Service(s)"
 
-    msg_info "Updating $APP to v${RELEASE}"
-    tmp_file=$(mktemp)
-    curl -fsSL "https://github.com/slskd/slskd/releases/download/${RELEASE}/slskd-${RELEASE}-linux-x64.zip" -o $tmp_file
-    $STD unzip -oj $tmp_file slskd -d /opt/${APP}
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated $APP to v${RELEASE}"
+    msg_info "Backing up config"
+    cp /opt/slskd/config/slskd.yml /opt/slskd.yml.bak
+    msg_ok "Backed up config"
 
-    msg_info "Starting Service"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Slskd" "slskd/slskd" "prebuild" "latest" "/opt/slskd" "slskd-*-linux-x64.zip"
+
+    msg_info "Restoring config"
+    mv /opt/slskd.yml.bak /opt/slskd/config/slskd.yml
+    msg_ok "Restored config"
+
+    msg_info "Starting Service(s)"
     systemctl start slskd
-    msg_ok "Started Service"
-    rm -rf $tmp_file
-  else
-    msg_ok "No ${APP} update required. ${APP} is already at v${RELEASE}"
+    [[ -f /etc/systemd/system/soularr.service ]] && systemctl start soularr.timer
+    msg_ok "Started Service(s)"
+    msg_ok "Updated Slskd successfully!"
   fi
-  msg_info "Updating Soularr"
-  cp /opt/soularr/config.ini /opt/config.ini.bak
-  cp /opt/soularr/run.sh /opt/run.sh.bak
-  cd /tmp
-  rm -rf /opt/soularr
-  curl -fsSL -o main.zip https://github.com/mrusse/soularr/archive/refs/heads/main.zip
-  $STD unzip main.zip
-  mv soularr-main /opt/soularr
-  cd /opt/soularr
-  $STD pip install -r requirements.txt
-  mv /opt/config.ini.bak /opt/soularr/config.ini
-  mv /opt/run.sh.bak /opt/soularr/run.sh
-  rm -rf /tmp/main.zip
-  msg_ok "Updated soularr"
+  [[ -d /opt/soularr ]] && if check_for_gh_release "Soularr" "mrusse/soularr"; then
+    if systemctl is-active soularr.timer >/dev/null; then
+      msg_info "Stopping Timer and Service"
+      systemctl stop soularr.timer soularr.service
+      msg_ok "Stopped Timer and Service"
+    fi
 
-  msg_info "Starting soularr timer"
-  systemctl start soularr.timer
-  msg_ok "Started soularr timer"
-  exit
+    msg_info "Backing up Soularr config"
+    cp /opt/soularr/config.ini /opt/soularr_config.ini.bak
+    cp /opt/soularr/run.sh /opt/soularr_run.sh.bak
+    msg_ok "Backed up Soularr config"
+
+    PYTHON_VERSION="3.11" setup_uv
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Soularr" "mrusse/soularr" "tarball" "latest" "/opt/soularr"
+    msg_info "Updating Soularr"
+    cd /opt/soularr
+    $STD uv venv -c venv
+    $STD source venv/bin/activate
+    $STD uv pip install -r requirements.txt
+    deactivate
+    msg_ok "Updated Soularr"
+
+    msg_info "Restoring Soularr config"
+    mv /opt/soularr_config.ini.bak /opt/soularr/config.ini
+    mv /opt/soularr_run.sh.bak /opt/soularr/run.sh
+    msg_ok "Restored Soularr config"
+
+    msg_info "Starting Soularr Timer"
+    systemctl restart soularr.timer
+    msg_ok "Started Soularr Timer"
+    msg_ok "Updated Soularr successfully!"
+  fi
 }
 
 start

ct/snowshare.sh

@@ -33,7 +33,15 @@ function update_script() {
     systemctl stop snowshare
     msg_ok "Stopped Service"
 
-    fetch_and_deploy_gh_release "snowshare" "TuroYT/snowshare" "tarball"
+    msg_info "Backing up uploads"
+    [ -d /opt/snowshare/uploads ] && cp -a /opt/snowshare/uploads /opt/.snowshare_uploads_backup
+    msg_ok "Uploads backed up"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "snowshare" "TuroYT/snowshare" "tarball"
+
+    msg_info "Restoring uploads"
+    [ -d /opt/.snowshare_uploads_backup ] && rm -rf /opt/snowshare/uploads && cp -a /opt/.snowshare_uploads_backup /opt/snowshare/uploads
+    msg_ok "Uploads restored"
 
     msg_info "Updating Snowshare"
     cd /opt/snowshare

frontend/public/json/drawio.json

@@ -0,0 +1,35 @@
+{
+  "name": "Draw.IO",
+  "slug": "drawio",
+  "categories": [
+    12
+  ],
+  "date_created": "2026-02-11",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8080,
+  "documentation": "https://www.drawio.com/doc/",
+  "website": "https://www.drawio.com/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/draw-io.webp",
+  "config_path": "",
+  "description": "draw.io is a configurable diagramming and whiteboarding application, jointly owned and developed by draw.io Ltd (previously named JGraph) and draw.io AG.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/drawio.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 2048,
+        "hdd": 4,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-02-09T12:16:55Z",
+  "generated": "2026-02-11T18:22:25Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -15,6 +15,13 @@
       "pinned": false,
       "date": "2025-12-08T14:34:55Z"
     },
+    {
+      "slug": "adguardhome-sync",
+      "repo": "bakito/adguardhome-sync",
+      "version": "v0.8.2",
+      "pinned": false,
+      "date": "2025-10-24T17:13:47Z"
+    },
     {
       "slug": "adventurelog",
       "repo": "seanmorley15/adventurelog",
@@ -200,16 +207,16 @@
     {
       "slug": "comfyui",
       "repo": "comfyanonymous/ComfyUI",
-      "version": "v0.12.3",
+      "version": "v0.13.0",
       "pinned": false,
-      "date": "2026-02-05T07:04:07Z"
+      "date": "2026-02-10T20:27:38Z"
     },
     {
       "slug": "commafeed",
       "repo": "Athou/commafeed",
-      "version": "6.1.1",
+      "version": "6.2.0",
       "pinned": false,
-      "date": "2026-01-26T15:14:16Z"
+      "date": "2026-02-09T19:44:58Z"
     },
     {
       "slug": "configarr",
@@ -235,16 +242,16 @@
     {
       "slug": "cronicle",
       "repo": "jhuckaby/Cronicle",
-      "version": "v0.9.105",
+      "version": "v0.9.106",
       "pinned": false,
-      "date": "2026-02-05T18:16:11Z"
+      "date": "2026-02-11T17:11:46Z"
     },
     {
       "slug": "cryptpad",
       "repo": "cryptpad/cryptpad",
-      "version": "2025.9.0",
+      "version": "2026.2.0",
       "pinned": false,
-      "date": "2025-10-22T10:06:29Z"
+      "date": "2026-02-11T15:39:05Z"
     },
     {
       "slug": "dawarich",
@@ -256,44 +263,51 @@
     {
       "slug": "discopanel",
       "repo": "nickheyer/discopanel",
-      "version": "v1.0.35",
+      "version": "v1.0.36",
       "pinned": false,
-      "date": "2026-02-02T05:20:12Z"
+      "date": "2026-02-09T21:15:44Z"
     },
     {
       "slug": "dispatcharr",
       "repo": "Dispatcharr/Dispatcharr",
-      "version": "v0.18.1",
+      "version": "v0.19.0",
       "pinned": false,
-      "date": "2026-01-27T17:09:11Z"
+      "date": "2026-02-10T21:18:10Z"
     },
     {
       "slug": "docmost",
       "repo": "docmost/docmost",
-      "version": "v0.25.2",
+      "version": "v0.25.3",
       "pinned": false,
-      "date": "2026-02-06T19:50:55Z"
+      "date": "2026-02-10T02:58:23Z"
     },
     {
       "slug": "domain-locker",
       "repo": "Lissy93/domain-locker",
-      "version": "v0.1.2",
+      "version": "v0.1.3",
       "pinned": false,
-      "date": "2025-11-14T22:08:23Z"
+      "date": "2026-02-11T10:03:32Z"
     },
     {
       "slug": "domain-monitor",
       "repo": "Hosteroid/domain-monitor",
-      "version": "v1.1.2",
+      "version": "v1.1.3",
       "pinned": false,
-      "date": "2026-02-09T06:29:34Z"
+      "date": "2026-02-11T15:48:18Z"
     },
     {
       "slug": "donetick",
       "repo": "donetick/donetick",
-      "version": "v0.1.64",
+      "version": "v0.1.71",
       "pinned": false,
-      "date": "2025-10-03T05:18:24Z"
+      "date": "2026-02-11T06:01:13Z"
+    },
+    {
+      "slug": "drawio",
+      "repo": "jgraph/drawio",
+      "version": "v29.3.6",
+      "pinned": false,
+      "date": "2026-01-28T18:25:02Z"
     },
     {
       "slug": "duplicati",
@@ -319,9 +333,9 @@
     {
       "slug": "endurain",
       "repo": "endurain-project/endurain",
-      "version": "v0.17.3",
+      "version": "v0.17.4",
       "pinned": false,
-      "date": "2026-01-23T22:02:05Z"
+      "date": "2026-02-11T04:54:22Z"
     },
     {
       "slug": "ersatztv",
@@ -533,6 +547,13 @@
       "pinned": false,
       "date": "2026-02-07T04:44:20Z"
     },
+    {
+      "slug": "immich-public-proxy",
+      "repo": "alangrainger/immich-public-proxy",
+      "version": "v1.15.1",
+      "pinned": false,
+      "date": "2026-01-26T08:04:27Z"
+    },
     {
       "slug": "inspircd",
       "repo": "inspircd/inspircd",
@@ -557,9 +578,16 @@
     {
       "slug": "jackett",
       "repo": "Jackett/Jackett",
-      "version": "v0.24.1074",
+      "version": "v0.24.1094",
       "pinned": false,
-      "date": "2026-02-09T06:01:19Z"
+      "date": "2026-02-11T06:01:16Z"
+    },
+    {
+      "slug": "jellystat",
+      "repo": "CyferShepard/Jellystat",
+      "version": "V1.1.8",
+      "pinned": false,
+      "date": "2026-02-08T08:15:00Z"
     },
     {
       "slug": "joplin-server",
@@ -599,9 +627,9 @@
     {
       "slug": "keycloak",
       "repo": "keycloak/keycloak",
-      "version": "26.5.2",
+      "version": "26.5.3",
       "pinned": false,
-      "date": "2026-01-23T14:26:58Z"
+      "date": "2026-02-10T07:30:08Z"
     },
     {
       "slug": "kimai",
@@ -634,9 +662,9 @@
     {
       "slug": "kometa",
       "repo": "Kometa-Team/Kometa",
-      "version": "v2.2.2",
+      "version": "v2.3.0",
       "pinned": false,
-      "date": "2025-10-06T21:31:07Z"
+      "date": "2026-02-09T21:26:56Z"
     },
     {
       "slug": "komga",
@@ -683,9 +711,9 @@
     {
       "slug": "libretranslate",
       "repo": "LibreTranslate/LibreTranslate",
-      "version": "v1.8.4",
+      "version": "v1.9.0",
       "pinned": false,
-      "date": "2026-02-02T17:45:16Z"
+      "date": "2026-02-10T19:05:48Z"
     },
     {
       "slug": "lidarr",
@@ -718,9 +746,9 @@
     {
       "slug": "lubelogger",
       "repo": "hargata/lubelog",
-      "version": "v1.5.8",
+      "version": "v1.6.0",
       "pinned": false,
-      "date": "2026-01-26T18:18:03Z"
+      "date": "2026-02-10T20:16:32Z"
     },
     {
       "slug": "mafl",
@@ -739,9 +767,9 @@
     {
       "slug": "mail-archiver",
       "repo": "s1t5/mail-archiver",
-      "version": "2601.3",
+      "version": "2602.1",
       "pinned": false,
-      "date": "2026-01-25T12:52:24Z"
+      "date": "2026-02-11T06:23:11Z"
     },
     {
       "slug": "managemydamnlife",
@@ -753,9 +781,9 @@
     {
       "slug": "manyfold",
       "repo": "manyfold3d/manyfold",
-      "version": "v0.132.0",
+      "version": "v0.132.1",
       "pinned": false,
-      "date": "2026-01-29T13:53:21Z"
+      "date": "2026-02-09T22:02:28Z"
     },
     {
       "slug": "mealie",
@@ -767,9 +795,9 @@
     {
       "slug": "mediamanager",
       "repo": "maxdorninger/MediaManager",
-      "version": "v1.12.2",
+      "version": "v1.12.3",
       "pinned": false,
-      "date": "2026-02-08T19:18:29Z"
+      "date": "2026-02-11T16:45:40Z"
     },
     {
       "slug": "mediamtx",
@@ -816,9 +844,9 @@
     {
       "slug": "myip",
       "repo": "jason5ng32/MyIP",
-      "version": "v5.2.0",
+      "version": "v5.2.1",
       "pinned": false,
-      "date": "2026-01-05T05:56:57Z"
+      "date": "2026-02-10T07:38:47Z"
     },
     {
       "slug": "mylar3",
@@ -837,9 +865,9 @@
     {
       "slug": "navidrome",
       "repo": "navidrome/navidrome",
-      "version": "v0.60.2",
+      "version": "v0.60.3",
       "pinned": false,
-      "date": "2026-02-07T19:42:33Z"
+      "date": "2026-02-10T23:55:04Z"
     },
     {
       "slug": "netbox",
@@ -848,6 +876,13 @@
       "pinned": false,
       "date": "2026-02-03T13:54:26Z"
     },
+    {
+      "slug": "nextcloud-exporter",
+      "repo": "xperimental/nextcloud-exporter",
+      "version": "v0.9.0",
+      "pinned": false,
+      "date": "2025-10-12T20:03:10Z"
+    },
     {
       "slug": "nginx-ui",
       "repo": "0xJacky/nginx-ui",
@@ -1012,16 +1047,16 @@
     {
       "slug": "pelican-panel",
       "repo": "pelican-dev/panel",
-      "version": "v1.0.0-beta31",
+      "version": "v1.0.0-beta32",
       "pinned": false,
-      "date": "2026-01-18T22:43:24Z"
+      "date": "2026-02-09T22:15:44Z"
     },
     {
       "slug": "pelican-wings",
       "repo": "pelican-dev/wings",
-      "version": "v1.0.0-beta22",
+      "version": "v1.0.0-beta23",
       "pinned": false,
-      "date": "2026-01-18T22:38:36Z"
+      "date": "2026-02-09T22:10:26Z"
     },
     {
       "slug": "pf2etools",
@@ -1037,12 +1072,19 @@
       "pinned": false,
       "date": "2025-12-01T05:07:31Z"
     },
+    {
+      "slug": "pihole-exporter",
+      "repo": "eko/pihole-exporter",
+      "version": "v1.2.0",
+      "pinned": false,
+      "date": "2025-07-29T19:15:37Z"
+    },
     {
       "slug": "planka",
       "repo": "plankanban/planka",
-      "version": "v2.0.0-rc.4",
+      "version": "v2.0.0",
       "pinned": false,
-      "date": "2025-09-04T12:41:17Z"
+      "date": "2026-02-11T13:50:10Z"
     },
     {
       "slug": "plant-it",
@@ -1131,9 +1173,9 @@
     {
       "slug": "pulse",
       "repo": "rcourtman/Pulse",
-      "version": "v5.1.5",
+      "version": "v5.1.9",
       "pinned": false,
-      "date": "2026-02-08T12:19:53Z"
+      "date": "2026-02-11T15:34:40Z"
     },
     {
       "slug": "pve-scripts-local",
@@ -1149,6 +1191,13 @@
       "pinned": false,
       "date": "2025-11-19T23:54:34Z"
     },
+    {
+      "slug": "qbittorrent-exporter",
+      "repo": "martabal/qbittorrent-exporter",
+      "version": "v1.13.2",
+      "pinned": false,
+      "date": "2025-12-13T22:59:03Z"
+    },
     {
       "slug": "qdrant",
       "repo": "qdrant/qdrant",
@@ -1236,16 +1285,16 @@
     {
       "slug": "scanopy",
       "repo": "scanopy/scanopy",
-      "version": "v0.14.3",
+      "version": "v0.14.4",
       "pinned": false,
-      "date": "2026-02-04T01:41:01Z"
+      "date": "2026-02-10T03:57:28Z"
     },
     {
       "slug": "scraparr",
       "repo": "thecfu/scraparr",
-      "version": "v2.2.5",
+      "version": "v3.0.1",
       "pinned": false,
-      "date": "2025-10-07T12:34:31Z"
+      "date": "2026-02-11T17:42:23Z"
     },
     {
       "slug": "seelf",
@@ -1282,6 +1331,13 @@
       "pinned": false,
       "date": "2026-01-16T12:08:28Z"
     },
+    {
+      "slug": "slskd",
+      "repo": "slskd/slskd",
+      "version": "0.24.3",
+      "pinned": false,
+      "date": "2026-01-15T14:40:15Z"
+    },
     {
       "slug": "snipeit",
       "repo": "grokability/snipe-it",
@@ -1292,9 +1348,9 @@
     {
       "slug": "snowshare",
       "repo": "TuroYT/snowshare",
-      "version": "v1.3.3",
+      "version": "v1.3.5",
       "pinned": false,
-      "date": "2026-02-09T10:52:12Z"
+      "date": "2026-02-11T10:24:51Z"
     },
     {
       "slug": "sonarr",
@@ -1418,9 +1474,9 @@
     {
       "slug": "tracearr",
       "repo": "connorgallopo/Tracearr",
-      "version": "v1.4.12",
+      "version": "v1.4.17",
       "pinned": false,
-      "date": "2026-01-28T23:29:37Z"
+      "date": "2026-02-11T01:33:21Z"
     },
     {
       "slug": "tracktor",
@@ -1432,9 +1488,9 @@
     {
       "slug": "traefik",
       "repo": "traefik/traefik",
-      "version": "v3.6.7",
+      "version": "v3.6.8",
       "pinned": false,
-      "date": "2026-01-14T14:11:45Z"
+      "date": "2026-02-11T16:44:37Z"
     },
     {
       "slug": "trilium",
@@ -1446,9 +1502,9 @@
     {
       "slug": "trip",
       "repo": "itskovacs/TRIP",
-      "version": "1.39.0",
+      "version": "1.40.0",
       "pinned": false,
-      "date": "2026-02-07T16:59:51Z"
+      "date": "2026-02-10T20:12:53Z"
     },
     {
       "slug": "tududi",
@@ -1509,9 +1565,9 @@
     {
       "slug": "vaultwarden",
       "repo": "dani-garcia/vaultwarden",
-      "version": "1.35.2",
+      "version": "1.35.3",
       "pinned": false,
-      "date": "2026-01-09T18:37:04Z"
+      "date": "2026-02-10T20:37:03Z"
     },
     {
       "slug": "victoriametrics",
@@ -1537,9 +1593,9 @@
     {
       "slug": "wallos",
       "repo": "ellite/Wallos",
-      "version": "v4.6.0",
+      "version": "v4.6.1",
       "pinned": false,
-      "date": "2025-12-20T15:57:51Z"
+      "date": "2026-02-10T21:06:46Z"
     },
     {
       "slug": "wanderer",
@@ -1572,9 +1628,9 @@
     {
       "slug": "wavelog",
       "repo": "wavelog/wavelog",
-      "version": "2.2.2",
+      "version": "2.3",
       "pinned": false,
-      "date": "2025-12-31T16:53:34Z"
+      "date": "2026-02-11T15:46:40Z"
     },
     {
       "slug": "wealthfolio",
@@ -1590,6 +1646,13 @@
       "pinned": false,
       "date": "2025-11-11T14:30:28Z"
     },
+    {
+      "slug": "wger",
+      "repo": "wger-project/wger",
+      "version": "2.4",
+      "pinned": false,
+      "date": "2026-01-18T12:12:02Z"
+    },
     {
       "slug": "wikijs",
       "repo": "requarks/wiki",
@@ -1600,9 +1663,9 @@
     {
       "slug": "wishlist",
       "repo": "cmintey/wishlist",
-      "version": "v0.59.0",
+      "version": "v0.60.0",
       "pinned": false,
-      "date": "2026-01-19T16:42:14Z"
+      "date": "2026-02-10T04:05:26Z"
     },
     {
       "slug": "wizarr",
@@ -1628,9 +1691,9 @@
     {
       "slug": "yubal",
       "repo": "guillevc/yubal",
-      "version": "v0.4.2",
+      "version": "v0.5.0",
       "pinned": false,
-      "date": "2026-02-08T21:35:13Z"
+      "date": "2026-02-09T22:11:32Z"
     },
     {
       "slug": "zigbee2mqtt",
@@ -1642,9 +1705,9 @@
     {
       "slug": "zipline",
       "repo": "diced/zipline",
-      "version": "v4.4.1",
+      "version": "v4.4.2",
       "pinned": false,
-      "date": "2026-01-20T01:29:01Z"
+      "date": "2026-02-11T04:58:54Z"
     },
     {
       "slug": "zitadel",

frontend/public/json/kutt.json

@@ -33,7 +33,7 @@
   },
   "notes": [
     {
-      "text": "Kutt needs so be served with an SSL certificate for its login to work. During install, you will be prompted to choose if you want to have Caddy installed for SSL termination or if you want to use your own reverse proxy (in that case point your reverse porxy to port 3000).",
+      "text": "Kutt needs so be served with an SSL certificate for its login to work. During install, you will be prompted to choose if you want to have Caddy installed for SSL termination or if you want to use your own reverse proxy (in that case point your reverse proxy to port 3000).",
       "type": "info"
     }
   ]

frontend/public/json/prometheus-paperless-ngx-exporter.json

@@ -1,44 +1,35 @@
 {
-    "name": "Prometheus Paperless NGX Exporter",
-    "slug": "prometheus-paperless-ngx-exporter",
-    "categories": [
-        9
-    ],
-    "date_created": "2025-02-07",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 8081,
-    "documentation": null,
-    "website": "https://github.com/hansmi/prometheus-paperless-exporter",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/paperless-ngx.webp",
-    "config_path": "",
-    "description": "Prometheus metrics exporter for Paperless-NGX, a document management system transforming physical documents into a searchable online archive. The exporter relies on Paperless' REST API.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/prometheus-paperless-ngx-exporter.sh",
-            "resources": {
-                "cpu": 1,
-                "ram": 256,
-                "hdd": 2,
-                "os": "debian",
-                "version": "13"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "Please adjust the Paperless URL in the systemd unit file: /etc/systemd/system/prometheus-paperless-ngx-exporter.service",
-            "type": "info"
-        },
-        {
-            "text": "Please adjust the Paperless authentication token in the configuration file: /etc/prometheus-paperless-ngx-exporter/paperless_auth_token_file",
-            "type": "info"
-        }
-    ]
+  "name": "Prometheus Paperless NGX Exporter",
+  "slug": "prometheus-paperless-ngx-exporter",
+  "categories": [
+    9
+  ],
+  "date_created": "2025-02-07",
+  "type": "addon",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8081,
+  "documentation": "https://github.com/hansmi/prometheus-paperless-exporter",
+  "website": "https://github.com/hansmi/prometheus-paperless-exporter",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/paperless-ngx.webp",
+  "config_path": "/etc/prometheus-paperless-ngx-exporter/config.env",
+  "description": "Prometheus metrics exporter for Paperless-NGX, a document management system transforming physical documents into a searchable online archive. The exporter relies on Paperless' REST API.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "tools/addon/prometheus-paperless-ngx-exporter.sh",
+      "resources": {
+        "cpu": null,
+        "ram": null,
+        "hdd": null,
+        "os": null,
+        "version": null
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
 }

frontend/public/json/slskd.json

@@ -1,5 +1,5 @@
 {
-  "name": "slskd",
+  "name": "Slskd",
   "slug": "slskd",
   "categories": [
     11
@@ -35,10 +35,6 @@
     {
       "text": "See /opt/slskd/config/slskd.yml to add your Soulseek credentials",
       "type": "info"
-    },
-    {
-      "text": "This LXC includes Soularr; it needs to be configured (/opt/soularr/config.ini) before it will work",
-      "type": "info"
     }
   ]
 }

frontend/public/json/snowshare.json

@@ -10,7 +10,7 @@
   "privileged": false,
   "interface_port": 3000,
   "documentation": "https://github.com/TuroYT/snowshare",
-  "config_path": "/opt/snowshare/.env",
+  "config_path": "/opt/snowshare.env",
   "website": "https://github.com/TuroYT/snowshare",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/snowshare.png",
   "description": "A modern, secure file and link sharing platform built with Next.js, Prisma, and NextAuth. Share URLs, code snippets, and files with customizable expiration, privacy, and QR codes.",

install/drawio-install.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.drawio.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+setup_hwaccel
+
+msg_info "Installing Dependencies"
+$STD apt install -y tomcat11
+msg_ok "Installed Dependencies"
+
+USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "drawio" "jgraph/drawio" "singlefile" "latest" "/var/lib/tomcat11/webapps" "draw.war"
+
+motd_ssh
+customize
+cleanup_lxc

install/elementsynapse-install.sh

@@ -31,8 +31,10 @@ setup_deb822_repo "matrix-org" \
   "main"
 echo "matrix-synapse-py3 matrix-synapse/server-name string $servername" | debconf-set-selections
 echo "matrix-synapse-py3 matrix-synapse/report-stats boolean false" | debconf-set-selections
+echo "exit 101" >/usr/sbin/policy-rc.d
+chmod +x /usr/sbin/policy-rc.d
 $STD apt install matrix-synapse-py3 -y
-systemctl stop matrix-synapse
+rm -f /usr/sbin/policy-rc.d
 sed -i 's/127.0.0.1/0.0.0.0/g' /etc/matrix-synapse/homeserver.yaml
 sed -i 's/'\''::1'\'', //g' /etc/matrix-synapse/homeserver.yaml
 SECRET=$(openssl rand -hex 32)

install/immich-install.sh

@@ -289,7 +289,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v2.5.5" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v2.5.6" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1]' ${SRC_DIR}/package.json)"
 NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
 

install/kasm-install.sh

@@ -20,10 +20,19 @@ msg_ok "Installed Docker"
 msg_info "Detecting latest Kasm Workspaces release"
 KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
 if [[ -z "$KASM_URL" ]]; then
+  SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
+  if [[ -n "$SERVICE_IMAGE_URL" ]]; then
+    KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+    KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+  fi
+else
+  KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+fi
+
+if [[ -z "$KASM_URL" ]] || [[ -z "$KASM_VERSION" ]]; then
   msg_error "Unable to detect latest Kasm release URL."
   exit 1
 fi
-KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
 msg_ok "Detected Kasm Workspaces version $KASM_VERSION"
 
 msg_warn "WARNING: This script will run an external installer from a third-party source (https://www.kasmweb.com/)."

install/libretranslate-install.sh

@@ -37,18 +37,13 @@ PYTHON_VERSION="3.12" setup_uv
 fetch_and_deploy_gh_release "libretranslate" "LibreTranslate/LibreTranslate" "tarball"
 
 msg_info "Setup LibreTranslate (Patience)"
-TORCH_VERSION=$(grep -Eo '"torch ==[0-9]+\.[0-9]+\.[0-9]+' /opt/libretranslate/pyproject.toml |
-  tail -n1 | sed 's/.*==//')
-if [[ -z "$TORCH_VERSION" ]]; then
-  TORCH_VERSION="2.5.0"
-fi
 cd /opt/libretranslate
 $STD uv venv --clear .venv --python 3.12
 $STD source .venv/bin/activate
-$STD uv pip install --upgrade pip setuptools
+$STD uv pip install --upgrade pip
+$STD uv pip install "setuptools<81"
 $STD uv pip install Babel==2.12.1
 $STD .venv/bin/python scripts/compile_locales.py
-$STD uv pip install "torch==${TORCH_VERSION}" --extra-index-url https://download.pytorch.org/whl/cpu
 $STD uv pip install "numpy<2"
 $STD uv pip install .
 $STD uv pip install libretranslate

install/prometheus-paperless-ngx-exporter-install.sh

@@ -1,47 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Andy Grunwald (andygrunwald)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/hansmi/prometheus-paperless-exporter
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter" "binary"
-
-msg_info "Configuring Prometheus Paperless NGX Exporter"
-mkdir -p /etc/prometheus-paperless-ngx-exporter
-echo "SECRET_AUTH_TOKEN" >/etc/prometheus-paperless-ngx-exporter/paperless_auth_token_file
-msg_ok "Configured Prometheus Paperless NGX Exporter"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/prometheus-paperless-ngx-exporter.service
-[Unit]
-Description=Prometheus Paperless NGX Exporter
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-User=root
-Restart=always
-Type=simple
-ExecStart=/usr/bin/prometheus-paperless-exporter \
-    --paperless_url=http://paperless.example.org \
-    --paperless_auth_token_file=/etc/prometheus-paperless-ngx-exporter/paperless_auth_token_file
-ExecReload=/bin/kill -HUP \$MAINPID
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now prometheus-paperless-ngx-exporter
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/slskd-install.sh

@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/slskd/slskd/, https://soularr.net
+# Source: https://github.com/slskd/slskd/, https://github.com/mrusse/soularr
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -13,71 +13,71 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  python3-pip
-msg_ok "Installed Dependencies"
+fetch_and_deploy_gh_release "Slskd" "slskd/slskd" "prebuild" "latest" "/opt/slskd" "slskd-*-linux-x64.zip"
 
-msg_info "Setup ${APPLICATION}"
-tmp_file=$(mktemp)
-RELEASE=$(curl -s https://api.github.com/repos/slskd/slskd/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/slskd/slskd/releases/download/${RELEASE}/slskd-${RELEASE}-linux-x64.zip" -o $tmp_file
-$STD unzip $tmp_file -d /opt/${APPLICATION}
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+msg_info "Configuring Slskd"
 JWT_KEY=$(openssl rand -base64 44)
 SLSKD_API_KEY=$(openssl rand -base64 44)
-cp /opt/${APPLICATION}/config/slskd.example.yml /opt/${APPLICATION}/config/slskd.yml
+cp /opt/slskd/config/slskd.example.yml /opt/slskd/config/slskd.yml
 sed -i \
-  -e "\|web:|,\|cidr|s|^#||" \
-  -e "\|https:|,\|5031|s|false|true|" \
+  -e '/web:/,/cidr/s/^# //' \
+  -e '/https:/,/port: 5031/s/false/true/' \
+  -e '/port: 5030/,/socket/s/,.*$//' \
+  -e '/content_path:/,/authentication/s/false/true/' \
   -e "\|api_keys|,\|cidr|s|<some.*$|$SLSKD_API_KEY|; \
     s|role: readonly|role: readwrite|; \
     s|0.0.0.0/0,::/0|& # Replace this with your subnet|" \
-  -e "\|soulseek|,\|write_queue|s|^#||" \
   -e "\|jwt:|,\|ttl|s|key: ~|key: $JWT_KEY|" \
-  -e "s|^   picture|#   picture|" \
-  /opt/${APPLICATION}/config/slskd.yml
-msg_ok "Setup ${APPLICATION}"
+  -e '/soulseek/,/write_queue/s/^# //' \
+  -e 's/^.*picture/#&/' /opt/slskd/config/slskd.yml
+msg_ok "Configured Slskd"
 
-msg_info "Installing Soularr"
-rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
-cd /tmp
-curl -fsSL -o main.zip https://github.com/mrusse/soularr/archive/refs/heads/main.zip
-$STD unzip main.zip
-mv soularr-main /opt/soularr
-cd /opt/soularr
-$STD pip install -r requirements.txt
-sed -i \
-  -e "\|[Slskd]|,\|host_url|s|yourslskdapikeygoeshere|$SLSKD_API_KEY|" \
-  -e "/host_url/s/slskd/localhost/" \
-  /opt/soularr/config.ini
-sed -i \
-  -e "/#This\|#Default\|INTERVAL/{N;d;}" \
-  -e "/while\|#Pass/d" \
-  -e "\|python|s|app|opt/soularr|; s|python|python3|" \
-  -e "/dt/,+2d" \
-  /opt/soularr/run.sh
-sed -i -E "/(soularr.py)/s/.{5}$//; /if/,/fi/s/.{4}//" /opt/soularr/run.sh
-chmod +x /opt/soularr/run.sh
-msg_ok "Installed Soularr"
+read -rp "${TAB3}Do you want to install Soularr? y/N " soularr
+if [[ ${soularr,,} =~ ^(y|yes)$ ]]; then
+  PYTHON_VERSION="3.11" setup_uv
+  fetch_and_deploy_gh_release "Soularr" "mrusse/soularr" "tarball" "latest" "/opt/soularr"
+  cd /opt/soularr
+  $STD uv venv venv
+  $STD source venv/bin/activate
+  $STD uv pip install -r requirements.txt
+  sed -i \
+    -e "\|[Slskd]|,\|host_url|s|yourslskdapikeygoeshere|$SLSKD_API_KEY|" \
+    -e "/host_url/s/slskd/localhost/" \
+    /opt/soularr/config.ini
+  cat <<EOF >/opt/soularr/run.sh
+#!/usr/bin/env bash
 
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/${APPLICATION}.service
+if ps aux | grep "[s]oularr.py" >/dev/null; then
+  echo "Soularr is already running. Exiting..."
+  exit 1
+else
+  source /opt/soularr/venv/bin/activate
+  uv run python3 -u /opt/soularr/soularr.py --config-dir /opt/soularr
+fi
+EOF
+  chmod +x /opt/soularr/run.sh
+  deactivate
+  msg_ok "Installed Soularr"
+fi
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/slskd.service
 [Unit]
-Description=${APPLICATION} Service
+Description=Slskd Service
 After=network.target
 Wants=network.target
 
 [Service]
-WorkingDirectory=/opt/${APPLICATION}
-ExecStart=/opt/${APPLICATION}/slskd --config /opt/${APPLICATION}/config/slskd.yml
+WorkingDirectory=/opt/slskd
+ExecStart=/opt/slskd/slskd --config /opt/slskd/config/slskd.yml
 Restart=always
 
 [Install]
 WantedBy=multi-user.target
 EOF
 
-cat <<EOF >/etc/systemd/system/soularr.timer
+if [[ -d /opt/soularr ]]; then
+  cat <<EOF >/etc/systemd/system/soularr.timer
 [Unit]
 Description=Soularr service timer
 RefuseManualStart=no
@@ -85,15 +85,15 @@ RefuseManualStop=no
 
 [Timer]
 Persistent=true
-# run every 5 minutes
-OnCalendar=*-*-* *:0/5:00
+# run every 10 minutes
+OnCalendar=*-*-* *:0/10:00
 Unit=soularr.service
 
 [Install]
 WantedBy=timers.target
 EOF
 
-cat <<EOF >/etc/systemd/system/soularr.service
+  cat <<EOF >/etc/systemd/system/soularr.service
 [Unit]
 Description=Soularr service
 After=network.target slskd.service
@@ -106,10 +106,9 @@ ExecStart=/bin/bash -c /opt/soularr/run.sh
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now ${APPLICATION}
-systemctl enable -q soularr.timer
-rm -rf $tmp_file
-rm -rf /tmp/main.zip
+  msg_warn "Add your Lidarr API key to Soularr in '/opt/soularr/config.ini', then run 'systemctl enable --now soularr.timer'"
+fi
+systemctl enable -q --now slskd
 msg_ok "Created Services"
 
 motd_ssh

misc/build.func

@@ -3078,10 +3078,10 @@ settings_menu() {
 
     case "$choice" in
     1) diagnostics_menu ;;
-    2) nano /usr/local/community-scripts/default.vars ;;
+    2) ${EDITOR:-nano} /usr/local/community-scripts/default.vars ;;
     3)
       if [ -f "$(get_app_defaults_path)" ]; then
-        nano "$(get_app_defaults_path)"
+        ${EDITOR:-nano} "$(get_app_defaults_path)"
       else
         # Back was selected (no app.vars available)
         return
@@ -3351,19 +3351,21 @@ msg_menu() {
     return 0
   fi
 
-  # Display menu
-  echo ""
-  msg_custom "📋" "${BL}" "${title}"
-  echo ""
-  for i in "${!tags[@]}"; do
-    local marker="  "
-    [[ $i -eq 0 ]] && marker="* "
-    printf "${TAB3}${marker}%s) %s\n" "${tags[$i]}" "${descs[$i]}"
-  done
-  echo ""
+  # Display menu to /dev/tty so it doesn't get captured by command substitution
+  {
+    echo ""
+    msg_custom "📋" "${BL}" "${title}"
+    echo ""
+    for i in "${!tags[@]}"; do
+      local marker="  "
+      [[ $i -eq 0 ]] && marker="* "
+      printf "${TAB3}${marker}%s) %s\n" "${tags[$i]}" "${descs[$i]}"
+    done
+    echo ""
+  } >/dev/tty
 
   local selection=""
-  read -r -t 10 -p "${TAB3}Select [default=${default_tag}, timeout 10s]: " selection || true
+  read -r -t 10 -p "${TAB3}Select [default=${default_tag}, timeout 10s]: " selection </dev/tty >/dev/tty || true
 
   # Validate selection
   if [[ -n "$selection" ]]; then

tools/addon/prometheus-paperless-ngx-exporter.sh

@@ -0,0 +1,188 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Andy Grunwald (andygrunwald)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/hansmi/prometheus-paperless-exporter
+
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+
+# Enable error handling
+set -Eeuo pipefail
+trap 'error_handler' ERR
+load_functions
+
+# ==============================================================================
+# CONFIGURATION
+# ==============================================================================
+VERBOSE=${var_verbose:-no}
+APP="prometheus-paperless-ngx-exporter"
+APP_TYPE="tools"
+BINARY_PATH="/usr/bin/prometheus-paperless-exporter"
+CONFIG_PATH="/etc/prometheus-paperless-ngx-exporter/config.env"
+SERVICE_PATH="/etc/systemd/system/prometheus-paperless-ngx-exporter.service"
+AUTH_TOKEN_FILE="/etc/prometheus-paperless-ngx-exporter/paperless_auth_token_file"
+
+# ==============================================================================
+# OS DETECTION
+# ==============================================================================
+if ! grep -qE 'ID=debian|ID=ubuntu' /etc/os-release 2>/dev/null; then
+  echo -e "${CROSS} Unsupported OS detected. This script only supports Debian and Ubuntu."
+  exit 1
+fi
+
+# ==============================================================================
+# UNINSTALL
+# ==============================================================================
+function uninstall() {
+  msg_info "Uninstalling Prometheus-Paperless-NGX-Exporter"
+  systemctl disable -q --now prometheus-paperless-ngx-exporter
+
+  if dpkg -l | grep -q prometheus-paperless-exporter; then
+    $STD apt-get remove -y prometheus-paperless-exporter || $STD dpkg -r prometheus-paperless-exporter
+  fi
+
+  rm -f "$SERVICE_PATH"
+  rm -rf /etc/prometheus-paperless-ngx-exporter
+  rm -f "/usr/local/bin/update_prometheus-paperless-ngx-exporter"
+  rm -f "$HOME/.prometheus-paperless-ngx-exporter"
+  msg_ok "Prometheus-Paperless-NGX-Exporter has been uninstalled"
+}
+
+# ==============================================================================
+# UPDATE
+# ==============================================================================
+function update() {
+  if check_for_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter"; then
+    msg_info "Stopping service"
+    systemctl stop prometheus-paperless-ngx-exporter
+    msg_ok "Stopped service"
+
+    fetch_and_deploy_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter" "binary" "latest"
+
+    msg_info "Starting service"
+    systemctl start prometheus-paperless-ngx-exporter
+    msg_ok "Started service"
+    msg_ok "Updated successfully!"
+    exit
+  fi
+}
+
+# ==============================================================================
+# INSTALL
+# ==============================================================================
+function install() {
+  read -erp "Enter URL of Paperless-NGX, example: (http://127.0.0.1:8000): " PAPERLESS_URL
+  read -rsp "Enter Paperless-NGX authentication token: " PAPERLESS_AUTH_TOKEN
+  printf "\n"
+
+  fetch_and_deploy_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter" "binary" "latest"
+
+  msg_info "Creating configuration"
+  mkdir -p /etc/prometheus-paperless-ngx-exporter
+  cat <<EOF >"$CONFIG_PATH"
+# https://github.com/hansmi/prometheus-paperless-exporter
+PAPERLESS_URL="${PAPERLESS_URL}"
+EOF
+  echo "${PAPERLESS_AUTH_TOKEN}" >"$AUTH_TOKEN_FILE"
+  chmod 600 "$AUTH_TOKEN_FILE"
+  msg_ok "Created configuration"
+
+  msg_info "Creating service"
+  cat <<EOF >"$SERVICE_PATH"
+[Unit]
+Description=Prometheus Paperless NGX Exporter
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+User=root
+EnvironmentFile=$CONFIG_PATH
+ExecStart=$BINARY_PATH \\
+    --paperless_url=\${PAPERLESS_URL} \\
+    --paperless_auth_token_file=$AUTH_TOKEN_FILE
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+  systemctl daemon-reload
+  systemctl enable -q --now prometheus-paperless-ngx-exporter
+  msg_ok "Created and started service"
+
+  # Create update script
+  msg_info "Creating update script"
+  ensure_usr_local_bin_persist
+  cat <<'UPDATEEOF' >/usr/local/bin/update_prometheus-paperless-ngx-exporter
+#!/usr/bin/env bash
+# prometheus-paperless-ngx-exporter Update Script
+type=update bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/prometheus-paperless-ngx-exporter.sh)"
+UPDATEEOF
+  chmod +x /usr/local/bin/update_prometheus-paperless-ngx-exporter
+  msg_ok "Created update script (/usr/local/bin/update_prometheus-paperless-ngx-exporter)"
+
+  echo ""
+  msg_ok "Prometheus-Paperless-NGX-Exporter installed successfully"
+  msg_ok "Metrics: ${BL}http://${LOCAL_IP}:8081/metrics${CL}"
+  msg_ok "Config: ${BL}${CONFIG_PATH}${CL}"
+}
+
+# ==============================================================================
+# MAIN
+# ==============================================================================
+header_info
+ensure_usr_local_bin_persist
+get_lxc_ip
+
+# Handle type=update (called from update script)
+if [[ "${type:-}" == "update" ]]; then
+  if [[ -f "$BINARY_PATH" ]]; then
+    update
+  else
+    msg_error "Prometheus-Paperless-NGX-Exporter is not installed. Nothing to update."
+    exit 1
+  fi
+  exit 0
+fi
+
+# Check if already installed
+if [[ -f "$BINARY_PATH" ]]; then
+  msg_warn "Prometheus-Paperless-NGX-Exporter is already installed."
+  echo ""
+
+  echo -n "${TAB}Uninstall Prometheus-Paperless-NGX-Exporter? (y/N): "
+  read -r uninstall_prompt
+  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
+    uninstall
+    exit 0
+  fi
+
+  echo -n "${TAB}Update Prometheus-Paperless-NGX-Exporter? (y/N): "
+  read -r update_prompt
+  if [[ "${update_prompt,,}" =~ ^(y|yes)$ ]]; then
+    update
+    exit 0
+  fi
+
+  msg_warn "No action selected. Exiting."
+  exit 0
+fi
+
+# Fresh installation
+msg_warn "Prometheus-Paperless-NGX-Exporter is not installed."
+echo ""
+echo -e "${TAB}${INFO} This will install:"
+echo -e "${TAB}  - Prometheus Paperless NGX Exporter (binary)"
+echo -e "${TAB}  - Systemd service"
+echo ""
+
+echo -n "${TAB}Install Prometheus-Paperless-NGX-Exporter? (y/N): "
+read -r install_prompt
+if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
+  install
+else
+  msg_warn "Installation cancelled. Exiting."
+  exit 0
+fi

tools/headers/prometheus-paperless-ngx-exporter

@@ -0,0 +1,6 @@
+                                     __  __                                                      __                                                                       __           
+    ____  _________  ____ ___  ___  / /_/ /_  ___  __  _______      ____  ____ _____  ___  _____/ /__  __________      ____  ____ __  __      ___  _  ______  ____  _____/ /____  _____
+   / __ \/ ___/ __ \/ __ `__ \/ _ \/ __/ __ \/ _ \/ / / / ___/_____/ __ \/ __ `/ __ \/ _ \/ ___/ / _ \/ ___/ ___/_____/ __ \/ __ `/ |/_/_____/ _ \| |/_/ __ \/ __ \/ ___/ __/ _ \/ ___/
+  / /_/ / /  / /_/ / / / / / /  __/ /_/ / / /  __/ /_/ (__  )_____/ /_/ / /_/ / /_/ /  __/ /  / /  __(__  |__  )_____/ / / / /_/ />  </_____/  __/>  </ /_/ / /_/ / /  / /_/  __/ /    
+ / .___/_/   \____/_/ /_/ /_/\___/\__/_/ /_/\___/\__,_/____/     / .___/\__,_/ .___/\___/_/  /_/\___/____/____/     /_/ /_/\__, /_/|_|      \___/_/|_/ .___/\____/_/   \__/\___/_/     
+/_/                                                             /_/         /_/                                           /____/                    /_/                                

tools/pve/update-apps.sh

@@ -131,7 +131,7 @@ function detect_service() {
 
 function backup_container() {
   msg_info "Creating backup for container $1"
-  vzdump $1 --compress zstd --storage $STORAGE_CHOICE -notes-template "community-scripts backup updater" >/dev/null 2>&1
+  vzdump $1 --compress zstd --storage $STORAGE_CHOICE -notes-template "{{guestname}} - community-scripts backup updater" >/dev/null 2>&1
   status=$?
 
   if [ $status -eq 0 ]; then
@@ -151,11 +151,11 @@ function get_backup_storages() {
     split($0, a, ":")
     type = a[1]
     name = a[2]
-    sub(/^ +/, "", name)
+    gsub(/^[ \t]+|[ \t]+$/, "", name)
     has_content = 0
     has_backup = 0
 }
-/^ +content/ {
+/^[ \t]*content/ {
     has_content = 1
     if ($0 ~ /backup/) has_backup = 1
 }

vm/debian-13-vm.sh

@@ -201,6 +201,17 @@ function exit-script() {
   exit
 }
 
+function select_cloud_init() {
+  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "CLOUD-INIT" \
+    --yesno "Enable Cloud-Init for VM configuration?\n\nCloud-Init allows automatic configuration of:\n- User accounts and passwords\n- SSH keys\n- Network settings (DHCP/Static)\n- DNS configuration\n\nYou can also configure these settings later in Proxmox UI.\n\nNote: Without Cloud-Init, the nocloud image will be used with console auto-login." --defaultno 18 68); then
+    CLOUD_INIT="yes"
+    echo -e "${CLOUD}${BOLD}${DGN}Cloud-Init: ${BGN}yes${CL}"
+  else
+    CLOUD_INIT="no"
+    echo -e "${CLOUD}${BOLD}${DGN}Cloud-Init: ${BGN}no${CL}"
+  fi
+}
+
 function default_settings() {
   VMID=$(get_valid_nextid)
   FORMAT=",efitype=4m"
@@ -216,7 +227,6 @@ function default_settings() {
   VLAN=""
   MTU=""
   START_VM="yes"
-  CLOUD_INIT="no"
   METHOD="default"
   echo -e "${CONTAINERID}${BOLD}${DGN}Virtual Machine ID: ${BGN}${VMID}${CL}"
   echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}i440fx${CL}"
@@ -230,7 +240,7 @@ function default_settings() {
   echo -e "${MACADDRESS}${BOLD}${DGN}MAC Address: ${BGN}${MAC}${CL}"
   echo -e "${VLANTAG}${BOLD}${DGN}VLAN: ${BGN}Default${CL}"
   echo -e "${DEFAULT}${BOLD}${DGN}Interface MTU Size: ${BGN}Default${CL}"
-  echo -e "${CLOUD}${BOLD}${DGN}Configure Cloud-init: ${BGN}no${CL}"
+  select_cloud_init
   echo -e "${GATEWAY}${BOLD}${DGN}Start VM when completed: ${BGN}yes${CL}"
   echo -e "${CREATING}${BOLD}${DGN}Creating a Debian 13 VM using the above default settings${CL}"
 }
@@ -400,13 +410,7 @@ function advanced_settings() {
     exit-script
   fi
 
-  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "CLOUD-INIT" --yesno "Configure the VM with Cloud-init?" --defaultno 10 58); then
-    echo -e "${CLOUD}${BOLD}${DGN}Configure Cloud-init: ${BGN}yes${CL}"
-    CLOUD_INIT="yes"
-  else
-    echo -e "${CLOUD}${BOLD}${DGN}Configure Cloud-init: ${BGN}no${CL}"
-    CLOUD_INIT="no"
-  fi
+  select_cloud_init
 
   if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "START VIRTUAL MACHINE" --yesno "Start VM when completed?" 10 58); then
     echo -e "${GATEWAY}${BOLD}${DGN}Start VM when completed: ${BGN}yes${CL}"
@@ -473,6 +477,17 @@ else
 fi
 msg_ok "Using ${CL}${BL}$STORAGE${CL} ${GN}for Storage Location."
 msg_ok "Virtual Machine ID is ${CL}${BL}$VMID${CL}."
+
+# ==============================================================================
+# PREREQUISITES
+# ==============================================================================
+if ! command -v virt-customize &>/dev/null; then
+  msg_info "Installing libguestfs-tools"
+  apt-get update >/dev/null 2>&1
+  apt-get install -y libguestfs-tools >/dev/null 2>&1
+  msg_ok "Installed libguestfs-tools"
+fi
+
 msg_info "Retrieving the URL for the Debian 13 Qcow2 Disk Image"
 if [ "$CLOUD_INIT" == "yes" ]; then
   URL=https://cloud.debian.org/images/cloud/trixie/latest/debian-13-genericcloud-amd64.qcow2
@@ -486,6 +501,50 @@ echo -en "\e[1A\e[0K"
 FILE=$(basename $URL)
 msg_ok "Downloaded ${CL}${BL}${FILE}${CL}"
 
+# ==============================================================================
+# IMAGE CUSTOMIZATION
+# ==============================================================================
+msg_info "Customizing ${FILE} image"
+
+WORK_FILE=$(mktemp --suffix=.qcow2)
+cp "$FILE" "$WORK_FILE"
+
+# Set hostname
+virt-customize -q -a "$WORK_FILE" --hostname "${HN}" >/dev/null 2>&1
+
+# Prepare for unique machine-id on first boot
+virt-customize -q -a "$WORK_FILE" --run-command "truncate -s 0 /etc/machine-id" >/dev/null 2>&1
+virt-customize -q -a "$WORK_FILE" --run-command "rm -f /var/lib/dbus/machine-id" >/dev/null 2>&1
+
+# Disable systemd-firstboot to prevent interactive prompts blocking the console
+virt-customize -q -a "$WORK_FILE" --run-command "systemctl disable systemd-firstboot.service 2>/dev/null; rm -f /etc/systemd/system/sysinit.target.wants/systemd-firstboot.service; ln -sf /dev/null /etc/systemd/system/systemd-firstboot.service" >/dev/null 2>&1 || true
+
+# Pre-seed firstboot settings so it won't prompt even if triggered
+virt-customize -q -a "$WORK_FILE" --run-command "echo 'Etc/UTC' > /etc/timezone && ln -sf /usr/share/zoneinfo/Etc/UTC /etc/localtime" >/dev/null 2>&1 || true
+virt-customize -q -a "$WORK_FILE" --run-command "touch /etc/locale.conf" >/dev/null 2>&1 || true
+
+if [ "$CLOUD_INIT" == "yes" ]; then
+  # Cloud-Init handles SSH and login
+  virt-customize -q -a "$WORK_FILE" --run-command "sed -i 's/^#*PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config" >/dev/null 2>&1 || true
+  virt-customize -q -a "$WORK_FILE" --run-command "sed -i 's/^#*PasswordAuthentication.*/PasswordAuthentication yes/' /etc/ssh/sshd_config" >/dev/null 2>&1 || true
+else
+  # Configure auto-login on serial console (ttyS0) and virtual console (tty1)
+  virt-customize -q -a "$WORK_FILE" --run-command "mkdir -p /etc/systemd/system/serial-getty@ttyS0.service.d" >/dev/null 2>&1 || true
+  virt-customize -q -a "$WORK_FILE" --run-command 'cat > /etc/systemd/system/serial-getty@ttyS0.service.d/autologin.conf << EOF
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --autologin root --noclear %I \$TERM
+EOF' >/dev/null 2>&1 || true
+  virt-customize -q -a "$WORK_FILE" --run-command "mkdir -p /etc/systemd/system/getty@tty1.service.d" >/dev/null 2>&1 || true
+  virt-customize -q -a "$WORK_FILE" --run-command 'cat > /etc/systemd/system/getty@tty1.service.d/autologin.conf << EOF
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --autologin root --noclear %I \$TERM
+EOF' >/dev/null 2>&1 || true
+fi
+
+msg_ok "Customized image"
+
 STORAGE_TYPE=$(pvesm status -storage "$STORAGE" | awk 'NR>1 {print $2}')
 case $STORAGE_TYPE in
 nfs | dir)
@@ -512,7 +571,7 @@ msg_info "Creating a Debian 13 VM"
 qm create $VMID -agent 1${MACHINE} -tablet 0 -localtime 1 -bios ovmf${CPU_TYPE} -cores $CORE_COUNT -memory $RAM_SIZE \
   -name $HN -tags community-script -net0 virtio,bridge=$BRG,macaddr=$MAC$VLAN$MTU -onboot 1 -ostype l26 -scsihw virtio-scsi-pci
 pvesm alloc $STORAGE $VMID $DISK0 4M 1>&/dev/null
-qm importdisk $VMID ${FILE} $STORAGE ${DISK_IMPORT:-} 1>&/dev/null
+qm importdisk $VMID ${WORK_FILE} $STORAGE ${DISK_IMPORT:-} 1>&/dev/null
 if [ "$CLOUD_INIT" == "yes" ]; then
   qm set $VMID \
     -efidisk0 ${DISK0_REF}${FORMAT} \
@@ -527,6 +586,10 @@ else
     -boot order=scsi0 \
     -serial0 socket >/dev/null
 fi
+
+# Clean up work file
+rm -f "$WORK_FILE"
+
 DESCRIPTION=$(
   cat <<EOF
 <div align='center'>