fix(powerdns): fix SQLite directory permissions for pdns user

The /opt/poweradmin/ directory was owned by www-data:www-data (755),
but pdns runs as the 'pdns' user which had no write access to the
directory. SQLite requires write access to the database directory to
create journal/WAL files (powerdns.db-journal, powerdns.db-wal).
Without this, pdns fails to start.

Changes:
- Set directory group to 'pdns' instead of 'www-data' so pdns user
  can create SQLite journal/WAL files (via group write 775)
- Apply same permissions fix in update_script (ct/powerdns.sh)
- Fix msg_info -> msg_ok for 'Created Service' completion message

Fixes #12572

ct/headers/papra

@@ -1,6 +0,0 @@
-    ____                        
-   / __ \____ _____  _________ _
-  / /_/ / __ `/ __ \/ ___/ __ `/
- / ____/ /_/ / /_/ / /  / /_/ / 
-/_/    \__,_/ .___/_/   \__,_/  
-           /_/                  

ct/papra.sh

@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/papra-hq/papra
-
-APP="Papra"
-var_tags="${var_tags:-document-management}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/papra ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "papra" "papra-hq/papra"; then
-    msg_info "Stopping Service"
-    systemctl stop papra
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration"
-    cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
-    msg_ok "Backed up Configuration"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball"
-
-    msg_info "Building Application"
-    cd /opt/papra
-    cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm --filter "@papra/app-client..." run build
-    $STD pnpm --filter "@papra/app-server..." run build
-    ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
-    rm -f /opt/papra_env.bak
-    msg_ok "Built Application"
-
-    msg_info "Starting Service"
-    systemctl start papra
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:1221${CL}"

ct/powerdns.sh

@@ -47,7 +47,10 @@ function update_script() {
     cp /opt/poweradmin_powerdns.db.bak /opt/poweradmin/powerdns.db
     rm -rf /opt/poweradmin/install
     rm -f /opt/poweradmin_settings.php.bak /opt/poweradmin_powerdns.db.bak
-    chown -R www-data:www-data /opt/poweradmin
+    chown -R www-data:pdns /opt/poweradmin
+    chmod 775 /opt/poweradmin
+    chown pdns:pdns /opt/poweradmin/powerdns.db
+    chmod 664 /opt/poweradmin/powerdns.db
     msg_ok "Updated Poweradmin"
 
     msg_info "Restarting Services"

frontend/public/json/papra.json

@@ -1,56 +0,0 @@
-{
-  "name": "Papra",
-  "slug": "papra",
-  "categories": [
-    12
-  ],
-  "date_created": "2025-12-30",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 1221,
-  "documentation": "https://github.com/CorentinTh/papra",
-  "website": "https://github.com/CorentinTh/papra",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/papra.webp",
-  "config_path": "/opt/papra/.env",
-  "description": "Papra is a modern, self-hosted document management system with full-text search, OCR support, and automatic document processing. Built with Node.js and featuring a clean web interface for organizing and managing your documents.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/papra.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 2048,
-        "hdd": 10,
-        "os": "debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "First visit will prompt you to create an account",
-      "type": "info"
-    },
-    {
-      "text": "Tesseract OCR is pre-installed for all languages",
-      "type": "info"
-    },
-    {
-      "text": "Documents are stored in /opt/papra/app-data/documents",
-      "type": "info"
-    },
-    {
-      "text": "Ingestion folder available at /opt/papra/ingestion for automatic document import",
-      "type": "info"
-    },
-    {
-      "text": "Email functionality runs in dry-run mode by default",
-      "type": "warning"
-    }
-  ]
-}

install/papra-install.sh

@@ -1,79 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/papra-hq/papra
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  tesseract-ocr \
-  tesseract-ocr-all
-msg_ok "Installed Dependencies"
-
-RELEASE=$(curl -fsSL https://api.github.com/repos/papra-hq/papra/releases | grep -oP '"tag_name":\s*"\K@papra/app@[^"]+' | head -n1)
-fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball" "${RELEASE}" "/opt/papra"
-
-pnpm_version=$(grep -oP '"packageManager":\s*"pnpm@\K[^"]+' /opt/papra/package.json)
-NODE_VERSION="24" NODE_MODULE="pnpm@$pnpm_version" setup_nodejs
-
-msg_info "Installing Papra (Patience)"
-cd /opt/papra
-$STD pnpm install --frozen-lockfile
-$STD pnpm --filter "@papra/app-client..." run build
-$STD pnpm --filter "@papra/app-server..." run build
-ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
-msg_ok "Installed Papra"
-
-msg_info "Configuring Papra"
-mkdir -p /opt/papra_data/{db,documents,ingestion}
-[[ ! -f /opt/papra_data/.secret ]] && openssl rand -hex 32 >/opt/papra_data/.secret
-cat <<EOF >/opt/papra/apps/papra-server/.env
-NODE_ENV=production
-SERVER_SERVE_PUBLIC_DIR=true
-PORT=1221
-DATABASE_URL=file:/opt/papra_data/db/db.sqlite
-DOCUMENT_STORAGE_FILESYSTEM_ROOT=/opt/papra_data/documents
-PAPRA_CONFIG_DIR=/opt/papra_data
-AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_TELEMETRY=0
-CLIENT_BASE_URL=http://${LOCAL_IP}:1221
-SERVER_BASE_URL=http://${LOCAL_IP}:1221
-EMAILS_DRY_RUN=true
-INGESTION_FOLDER_IS_ENABLED=true
-INGESTION_FOLDER_ROOT_PATH=/opt/papra_data/ingestion
-EOF
-msg_ok "Configured Papra"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/papra.service
-[Unit]
-Description=Papra Document Management
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/papra/apps/papra-server
-EnvironmentFile=/opt/papra/apps/papra-server/.env
-ExecStartPre=/usr/bin/pnpm run migrate:up
-ExecStart=/usr/bin/node dist/index.js
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now papra
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/powerdns-install.sh

@@ -131,12 +131,13 @@ cat <<EOF >/etc/apache2/sites-enabled/poweradmin.conf
 </VirtualHost>
 EOF
 $STD a2enmod rewrite headers
-chown -R www-data:www-data /opt/poweradmin
+chown -R www-data:pdns /opt/poweradmin
+chmod 775 /opt/poweradmin
 chown pdns:pdns /opt/poweradmin/powerdns.db
 chmod 664 /opt/poweradmin/powerdns.db
 usermod -aG pdns www-data
 $STD systemctl restart pdns apache2
-msg_info "Created Service"
+msg_ok "Created Service"
 
 motd_ssh
 customize