Update CHANGELOG.md

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,8 +10,26 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-12-13
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - [HOTFIX] NetVisor: backup OIDC config before update [@vhsdream](https://github.com/vhsdream) ([#9895](https://github.com/community-scripts/ProxmoxVE/pull/9895))
+    - Update OPNsense download URL to version 14.3 [@jaredcarling42-design](https://github.com/jaredcarling42-design) ([#9899](https://github.com/community-scripts/ProxmoxVE/pull/9899))
+
+  - #### ✨ New Features
+
+    - Add optional TLS setup to Valkey installer [@pshankinclarke](https://github.com/pshankinclarke) ([#9789](https://github.com/community-scripts/ProxmoxVE/pull/9789))
+
 ## 2025-12-12
 
+### 🆕 New Scripts
+
+  - Wallabag ([#9904](https://github.com/community-scripts/ProxmoxVE/pull/9904))
+- InvoiceNinja ([#9905](https://github.com/community-scripts/ProxmoxVE/pull/9905))
+
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes

ct/headers/invoiceninja

@@ -0,0 +1,6 @@
+    ____                 _           _   ___         _      
+   /  _/___ _   ______  (_)_______  / | / (_)___    (_)___ _
+   / // __ \ | / / __ \/ / ___/ _ \/  |/ / / __ \  / / __ `/
+ _/ // / / / |/ / /_/ / / /__/  __/ /|  / / / / / / / /_/ / 
+/___/_/ /_/|___/\____/_/\___/\___/_/ |_/_/_/ /_/_/ /\__,_/  
+                                              /___/         

ct/headers/wallabag

@@ -0,0 +1,6 @@
+ _       __      ____      __               
+| |     / /___ _/ / /___ _/ /_  ____ _____ _
+| | /| / / __ `/ / / __ `/ __ \/ __ `/ __ `/
+| |/ |/ / /_/ / / / /_/ / /_/ / /_/ / /_/ / 
+|__/|__/\__,_/_/_/\__,_/_.___/\__,_/\__, /  
+                                   /____/   

ct/invoiceninja.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://invoiceninja.com/
+
+APP="InvoiceNinja"
+var_tags="${var_tags:-invoicing;business}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/invoiceninja ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "invoiceninja" "invoiceninja/invoiceninja"; then
+    msg_info "Stopping Services"
+    systemctl stop supervisor nginx php8.4-fpm
+    msg_ok "Stopped Services"
+
+    msg_info "Creating Backup"
+    mkdir -p /tmp/invoiceninja_backup
+    cp /opt/invoiceninja/.env /tmp/invoiceninja_backup/
+    cp -r /opt/invoiceninja/storage /tmp/invoiceninja_backup/ 2>/dev/null || true
+    cp -r /opt/invoiceninja/public/storage /tmp/invoiceninja_backup/public_storage 2>/dev/null || true
+    msg_ok "Created Backup"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "invoiceninja" "invoiceninja/invoiceninja" "prebuild" "latest" "/opt/invoiceninja" "invoiceninja.tar.gz"
+
+    msg_info "Restoring Data"
+    cp /tmp/invoiceninja_backup/.env /opt/invoiceninja/
+    cp -r /tmp/invoiceninja_backup/storage/* /opt/invoiceninja/storage/ 2>/dev/null || true
+    cp -r /tmp/invoiceninja_backup/public_storage/* /opt/invoiceninja/public/storage/ 2>/dev/null || true
+    rm -rf /tmp/invoiceninja_backup
+    msg_ok "Restored Data"
+
+    msg_info "Running Migrations"
+    cd /opt/invoiceninja
+    $STD php artisan migrate --force
+    $STD php artisan config:clear
+    $STD php artisan cache:clear
+    $STD php artisan optimize
+    chown -R www-data:www-data /opt/invoiceninja
+    chmod -R 755 /opt/invoiceninja/storage
+    msg_ok "Ran Migrations"
+
+    msg_info "Starting Services"
+    systemctl start php8.4-fpm nginx supervisor
+    msg_ok "Started Services"
+
+    msg_ok "Updated Successfully"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080/setup${CL}"

ct/netvisor.sh

@@ -36,6 +36,9 @@ function update_script() {
 
     msg_info "Backing up configurations"
     cp /opt/netvisor/.env /opt/netvisor.env.bak
+    if [[ -f /opt/netvisor/oidc.toml ]]; then
+      cp /opt/netvisor/oidc.toml /opt/netvisor.oidc.toml
+    fi
     msg_ok "Backed up configurations"
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "netvisor" "netvisor-io/netvisor" "tarball" "latest" "/opt/netvisor"
@@ -49,7 +52,10 @@ function update_script() {
     TOOLCHAIN="$(grep "channel" /opt/netvisor/backend/rust-toolchain.toml | awk -F\" '{print $2}')"
     RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
 
-    cp /opt/netvisor.env.bak /opt/netvisor/.env
+    mv /opt/netvisor.env.bak /opt/netvisor/.env
+    if [[ -f /opt/netvisor.oidc.toml ]]; then
+      mv /opt/netvisor.oidc.toml /opt/netvisor/oidc.toml
+    fi
     LOCAL_IP="$(hostname -I | awk '{print $1}')"
     if ! grep -q "PUBLIC_URL" /opt/netvisor/.env; then
       sed -i "\|_PATH=|a\NETVISOR_PUBLIC_URL=http://${LOCAL_IP}:60072" /opt/netvisor/.env

ct/wallabag.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://wallabag.org/
+
+APP="Wallabag"
+var_tags="${var_tags:-productivity;read-it-later}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-6}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/wallabag ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "wallabag" "wallabag/wallabag"; then
+    msg_info "Stopping Services"
+    systemctl stop nginx php8.3-fpm
+    msg_ok "Stopped Services"
+
+    msg_info "Creating Backup"
+    cp /opt/wallabag/app/config/parameters.yml /tmp/wallabag_parameters.yml.bak
+    msg_ok "Created Backup"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wallabag" "wallabag/wallabag" "prebuild" "latest" "/opt/wallabag" "wallabag-*.tar.gz"
+
+    msg_info "Restoring Configuration"
+    cp /tmp/wallabag_parameters.yml.bak /opt/wallabag/app/config/parameters.yml
+    rm -f /tmp/wallabag_parameters.yml.bak
+    msg_ok "Restored Configuration"
+
+    msg_info "Running Migrations"
+    cd /opt/wallabag
+    $STD php bin/console cache:clear --env=prod
+    $STD php bin/console doctrine:migrations:migrate --env=prod --no-interaction
+    chown -R www-data:www-data /opt/wallabag
+    chmod -R 755 /opt/wallabag/{var,web/assets}
+    msg_ok "Ran Migrations"
+
+    msg_info "Starting Services"
+    systemctl start php8.3-fpm nginx
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"

frontend/public/json/invoiceninja.json

@@ -0,0 +1,48 @@
+{
+  "name": "InvoiceNinja",
+  "slug": "invoiceninja",
+  "categories": [
+    3
+  ],
+  "date_created": "2025-12-12",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8080,
+  "documentation": "https://invoiceninja.github.io/selfhost.html",
+  "config_path": "/opt/invoiceninja/.env",
+  "website": "https://invoiceninja.com/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/invoice-ninja.webp",
+  "description": "Invoice Ninja is a free, open-source invoicing, quotes, expenses and time-tracking application for freelancers and businesses. Features include recurring invoices, online payments, client portal, and multi-company support.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/invoiceninja.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "First visit http://IP:8080/setup to complete the initial configuration",
+      "type": "info"
+    },
+    {
+      "text": "Database credentials are stored in ~/invoiceninja.creds",
+      "type": "info"
+    },
+    {
+      "text": "Configure SMTP settings in /opt/invoiceninja/.env for email functionality",
+      "type": "warning"
+    }
+  ]
+}

frontend/public/json/versions.json

@@ -1,4 +1,124 @@
 [
+  {
+    "name": "paperless-ngx/paperless-ngx",
+    "version": "v2.20.2",
+    "date": "2025-12-12T23:47:48Z"
+  },
+  {
+    "name": "netvisor-io/netvisor",
+    "version": "v0.11.8",
+    "date": "2025-12-12T22:41:59Z"
+  },
+  {
+    "name": "fccview/jotty",
+    "version": "1.13.1",
+    "date": "2025-12-12T21:34:22Z"
+  },
+  {
+    "name": "nickheyer/discopanel",
+    "version": "v1.0.13-dev",
+    "date": "2025-12-12T21:12:14Z"
+  },
+  {
+    "name": "chrisbenincasa/tunarr",
+    "version": "v1.0.1",
+    "date": "2025-12-12T21:09:19Z"
+  },
+  {
+    "name": "mongodb/mongo",
+    "version": "r7.0.27",
+    "date": "2025-12-12T20:54:32Z"
+  },
+  {
+    "name": "influxdata/influxdb",
+    "version": "v2.8.0",
+    "date": "2025-12-12T20:25:00Z"
+  },
+  {
+    "name": "TuroYT/snowshare",
+    "version": "v1.2.0",
+    "date": "2025-12-12T19:52:05Z"
+  },
+  {
+    "name": "homarr-labs/homarr",
+    "version": "v1.46.0",
+    "date": "2025-12-12T19:23:36Z"
+  },
+  {
+    "name": "metabase/metabase",
+    "version": "v0.57.x",
+    "date": "2025-12-12T19:08:53Z"
+  },
+  {
+    "name": "home-assistant/core",
+    "version": "2025.12.3",
+    "date": "2025-12-12T18:12:39Z"
+  },
+  {
+    "name": "docmost/docmost",
+    "version": "v0.24.0",
+    "date": "2025-12-12T18:05:49Z"
+  },
+  {
+    "name": "booklore-app/booklore",
+    "version": "v1.14.1",
+    "date": "2025-12-12T17:37:58Z"
+  },
+  {
+    "name": "esphome/esphome",
+    "version": "2025.11.5",
+    "date": "2025-12-09T17:54:33Z"
+  },
+  {
+    "name": "node-red/node-red",
+    "version": "4.1.2",
+    "date": "2025-12-03T16:12:05Z"
+  },
+  {
+    "name": "bunkerity/bunkerweb",
+    "version": "v1.6.6",
+    "date": "2025-11-24T15:30:21Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.30.0",
+    "date": "2025-12-12T14:03:52Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.123.5-exp.0",
+    "date": "2025-12-10T16:35:50Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.8",
+    "date": "2025-11-21T17:06:07Z"
+  },
+  {
+    "name": "zitadel/zitadel",
+    "version": "v4.7.5",
+    "date": "2025-12-12T13:54:02Z"
+  },
+  {
+    "name": "ventoy/Ventoy",
+    "version": "v1.1.09",
+    "date": "2025-12-12T13:06:36Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.2.0.102-2.2.0.102_canary_2025-12-12",
+    "date": "2025-12-12T12:03:15Z"
+  },
+  {
+    "name": "passbolt/passbolt_api",
+    "version": "v5.8.0-test.2",
+    "date": "2025-12-12T11:43:11Z"
+  },
+  {
+    "name": "Luligu/matterbridge",
+    "version": "3.4.3",
+    "date": "2025-12-12T11:35:00Z"
+  },
   {
     "name": "BerriAI/litellm",
     "version": "v1.80.9.dev6",
@@ -9,16 +129,6 @@
     "version": "4.0.1-rc.1",
     "date": "2025-12-12T10:52:28Z"
   },
-  {
-    "name": "zitadel/zitadel",
-    "version": "v4.7.4",
-    "date": "2025-12-12T10:25:19Z"
-  },
-  {
-    "name": "netvisor-io/netvisor",
-    "version": "v0.11.7",
-    "date": "2025-12-12T09:22:44Z"
-  },
   {
     "name": "karakeep-app/karakeep",
     "version": "v0.29.3",
@@ -29,11 +139,6 @@
     "version": "v8.3.7",
     "date": "2025-12-12T09:13:40Z"
   },
-  {
-    "name": "passbolt/passbolt_api",
-    "version": "v5.8.0-test.1",
-    "date": "2025-12-12T06:53:05Z"
-  },
   {
     "name": "Jackett/Jackett",
     "version": "v0.24.441",
@@ -69,11 +174,6 @@
     "version": "v0.13.3-rc1",
     "date": "2025-12-10T20:59:27Z"
   },
-  {
-    "name": "metabase/metabase",
-    "version": "v0.57.6",
-    "date": "2025-12-11T23:31:19Z"
-  },
   {
     "name": "fosrl/pangolin",
     "version": "1.13.0",
@@ -94,11 +194,6 @@
     "version": "v4.0.0-beta.454",
     "date": "2025-12-11T20:37:05Z"
   },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v0.23.0-alpha.35",
-    "date": "2025-12-11T18:20:45Z"
-  },
   {
     "name": "msgbyte/tianji",
     "version": "v1.30.22",
@@ -115,7 +210,7 @@
     "date": "2025-12-06T07:36:26Z"
   },
   {
-    "name": "joaovitoriasilva/endurain",
+    "name": "endurain-project/endurain",
     "version": "v0.16.2",
     "date": "2025-12-11T15:16:01Z"
   },
@@ -169,11 +264,6 @@
     "version": "v1.8.0",
     "date": "2025-12-10T16:44:33Z"
   },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.123.5-exp.0",
-    "date": "2025-12-10T16:35:50Z"
-  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.541",
@@ -184,11 +274,6 @@
     "version": "v0.29.0",
     "date": "2025-11-04T15:00:07Z"
   },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.30.0-rc2",
-    "date": "2025-12-10T14:58:00Z"
-  },
   {
     "name": "rclone/rclone",
     "version": "v1.72.1",
@@ -214,11 +299,6 @@
     "version": "353",
     "date": "2025-12-10T10:55:50Z"
   },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.8",
-    "date": "2025-11-21T17:06:07Z"
-  },
   {
     "name": "Dokploy/dokploy",
     "version": "v0.26.1",
@@ -234,11 +314,6 @@
     "version": "v3.3.2-beta",
     "date": "2025-12-10T05:42:43Z"
   },
-  {
-    "name": "esphome/esphome",
-    "version": "2025.11.5",
-    "date": "2025-12-09T17:54:33Z"
-  },
   {
     "name": "miniflux/v2",
     "version": "2.2.15",
@@ -264,11 +339,6 @@
     "version": "v25.11.6",
     "date": "2025-12-09T21:08:17Z"
   },
-  {
-    "name": "fccview/jotty",
-    "version": "1.12.2",
-    "date": "2025-12-09T20:39:50Z"
-  },
   {
     "name": "valkey-io/valkey",
     "version": "9.0.1",
@@ -329,11 +399,6 @@
     "version": "v1.4.7",
     "date": "2025-12-09T11:44:49Z"
   },
-  {
-    "name": "mongodb/mongo",
-    "version": "r7.0.27-rc0",
-    "date": "2025-12-09T04:34:48Z"
-  },
   {
     "name": "alexta69/metube",
     "version": "2025.12.09",
@@ -354,11 +419,6 @@
     "version": "4.5.5",
     "date": "2025-10-24T11:12:22Z"
   },
-  {
-    "name": "home-assistant/core",
-    "version": "2025.12.2",
-    "date": "2025-12-08T21:36:42Z"
-  },
   {
     "name": "hansmi/prometheus-paperless-exporter",
     "version": "v0.0.9",
@@ -369,16 +429,6 @@
     "version": "v1.37.0",
     "date": "2025-12-08T20:36:16Z"
   },
-  {
-    "name": "TuroYT/snowshare",
-    "version": "v1.1.2",
-    "date": "2025-12-08T20:29:51Z"
-  },
-  {
-    "name": "homarr-labs/homarr",
-    "version": "v1.45.3",
-    "date": "2025-12-08T16:11:16Z"
-  },
   {
     "name": "AdguardTeam/AdGuardHome",
     "version": "v0.107.71",
@@ -389,11 +439,6 @@
     "version": "2.2.1",
     "date": "2025-12-08T12:01:34Z"
   },
-  {
-    "name": "ventoy/Ventoy",
-    "version": "v1.1.08",
-    "date": "2025-12-08T10:13:51Z"
-  },
   {
     "name": "firefly-iii/firefly-iii",
     "version": "v6.4.9",
@@ -404,11 +449,6 @@
     "version": "v1.10.0",
     "date": "2025-12-07T23:41:51Z"
   },
-  {
-    "name": "nickheyer/discopanel",
-    "version": "v1.0.12-dev",
-    "date": "2025-12-07T22:56:11Z"
-  },
   {
     "name": "Part-DB/Part-DB-server",
     "version": "v2.3.0",
@@ -494,11 +534,6 @@
     "version": "v1.3.1",
     "date": "2025-12-05T19:12:48Z"
   },
-  {
-    "name": "booklore-app/booklore",
-    "version": "v1.13.2",
-    "date": "2025-12-05T16:03:08Z"
-  },
   {
     "name": "community-scripts/ProxmoxVE-Local",
     "version": "v0.5.2",
@@ -514,16 +549,6 @@
     "version": "e6.1.0-streams.1",
     "date": "2025-12-05T12:27:36Z"
   },
-  {
-    "name": "Luligu/matterbridge",
-    "version": "3.4.2",
-    "date": "2025-12-05T12:20:54Z"
-  },
-  {
-    "name": "node-red/node-red",
-    "version": "4.1.2",
-    "date": "2025-12-03T16:12:05Z"
-  },
   {
     "name": "traefik/traefik",
     "version": "v3.6.4",
@@ -569,11 +594,6 @@
     "version": "11.0.4",
     "date": "2025-12-04T09:26:37Z"
   },
-  {
-    "name": "bunkerity/bunkerweb",
-    "version": "v1.6.6",
-    "date": "2025-11-24T15:30:21Z"
-  },
   {
     "name": "gtsteffaniak/filebrowser",
     "version": "v1.2.0-experimental-sql-indexing",
@@ -622,7 +642,7 @@
   {
     "name": "mealie-recipes/mealie",
     "version": "v3.6.1",
-    "date": "2025-12-02T22:54:10Z"
+    "date": "2025-12-02T23:08:41Z"
   },
   {
     "name": "apache/tomcat",
@@ -644,11 +664,6 @@
     "version": "v5.0.86-docker",
     "date": "2025-12-02T21:16:02Z"
   },
-  {
-    "name": "influxdata/influxdb",
-    "version": "v2.8.0",
-    "date": "2025-12-02T20:22:32Z"
-  },
   {
     "name": "WordPress/WordPress",
     "version": "6.9",
@@ -689,11 +704,6 @@
     "version": "3000.7.0",
     "date": "2025-12-01T23:29:47Z"
   },
-  {
-    "name": "paperless-ngx/paperless-ngx",
-    "version": "v2.20.1",
-    "date": "2025-12-01T22:45:34Z"
-  },
   {
     "name": "C4illin/ConvertX",
     "version": "v0.16.0",
@@ -844,11 +854,6 @@
     "version": "v4.7.0",
     "date": "2025-11-26T16:59:45Z"
   },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.2.0.2-2.2.0.2_beta_2025-11-26",
-    "date": "2025-11-26T14:20:54Z"
-  },
   {
     "name": "inventree/InvenTree",
     "version": "1.1.6",
@@ -1364,11 +1369,6 @@
     "version": "v0.18.3",
     "date": "2025-09-19T16:16:11Z"
   },
-  {
-    "name": "docmost/docmost",
-    "version": "v0.23.2",
-    "date": "2025-09-18T17:18:59Z"
-  },
   {
     "name": "eclipse-mosquitto/mosquitto",
     "version": "2.1.0-test1",

frontend/public/json/wallabag.json

@@ -0,0 +1,40 @@
+{
+  "name": "Wallabag",
+  "slug": "wallabag",
+  "categories": [
+    12
+  ],
+  "date_created": "2025-12-12",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "config_path": "/opt/wallabag/app/config/parameters.yml",
+  "interface_port": 8000,
+  "documentation": "https://doc.wallabag.org/",
+  "website": "https://wallabag.org/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/wallabag.webp",
+  "description": "Wallabag is a self-hosted read-it-later application. Save web articles to read them later, offline, in a clean and distraction-free interface. Features tagging, full-text search, and browser/mobile app integrations.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/wallabag.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 6,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Database credentials are stored in ~/wallabag.creds",
+      "type": "info"
+    }
+  ]
+}

install/invoiceninja-install.sh

@@ -0,0 +1,168 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://invoiceninja.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nginx \
+  supervisor
+msg_ok "Installed Dependencies"
+
+setup_mariadb
+MARIADB_DB_NAME="invoiceninja" MARIADB_DB_USER="invoiceninja" setup_mariadb_db
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="bcmath,curl,gd,gmp,imagick,intl,mbstring,mysql,soap,xml,zip" setup_php
+import_local_ip
+fetch_and_deploy_gh_release "invoiceninja" "invoiceninja/invoiceninja" "prebuild" "latest" "/opt/invoiceninja" "invoiceninja.tar.gz"
+
+msg_info "Configuring InvoiceNinja"
+cd /opt/invoiceninja
+APP_KEY=$(php artisan key:generate --show)
+cat <<EOF >/opt/invoiceninja/.env
+APP_NAME="Invoice Ninja"
+APP_ENV=production
+APP_KEY=${APP_KEY}
+APP_DEBUG=false
+APP_URL=http://${LOCAL_IP}:8080
+
+DB_CONNECTION=mysql
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_DATABASE=${MARIADB_DB_NAME}
+DB_USERNAME=${MARIADB_DB_USER}
+DB_PASSWORD=${MARIADB_DB_PASS}
+
+MULTI_DB_ENABLED=false
+DEMO_MODE=false
+
+BROADCAST_DRIVER=log
+LOG_CHANNEL=stack
+CACHE_DRIVER=file
+QUEUE_CONNECTION=database
+SESSION_DRIVER=file
+SESSION_LIFETIME=120
+
+MAIL_MAILER=log
+MAIL_HOST=null
+MAIL_PORT=null
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="noreply@localhost"
+MAIL_FROM_NAME="Invoice Ninja"
+
+REQUIRE_HTTPS=false
+NINJA_ENVIRONMENT=selfhost
+PDF_GENERATOR=snappdf
+
+TRUSTED_PROXIES=*
+INTERNAL_QUEUE_ENABLED=false
+EOF
+
+mkdir -p /opt/invoiceninja/bootstrap/cache
+mkdir -p /opt/invoiceninja/storage/{app/public,framework/{cache/data,sessions,views},logs}
+chown -R www-data:www-data /opt/invoiceninja
+chmod -R 775 /opt/invoiceninja/storage /opt/invoiceninja/bootstrap/cache
+msg_ok "Configured InvoiceNinja"
+
+msg_info "Setting up Database"
+cd /opt/invoiceninja
+$STD php artisan config:clear
+$STD php artisan cache:clear
+$STD php artisan route:clear
+$STD php artisan view:clear
+$STD php artisan migrate --force
+$STD php artisan db:seed --force
+$STD php artisan optimize
+msg_ok "Set up Database"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/invoiceninja
+server {
+    listen 8080;
+    server_name _;
+    root /opt/invoiceninja/public;
+    index index.php;
+
+    client_max_body_size 50M;
+    charset utf-8;
+
+    gzip on;
+    gzip_types application/javascript application/x-javascript text/javascript text/plain application/xml application/json;
+    gzip_proxied no-cache no-store private expired auth;
+    gzip_min_length 1000;
+
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+    }
+
+    location = /index.php {
+        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
+        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_read_timeout 300;
+    }
+
+    location ~ \.php$ {
+        return 403;
+    }
+
+    location ~ /\.ht {
+        deny all;
+    }
+
+    error_log /var/log/nginx/invoiceninja_error.log;
+    access_log /var/log/nginx/invoiceninja_access.log;
+}
+EOF
+
+ln -sf /etc/nginx/sites-available/invoiceninja /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
+msg_ok "Configured Nginx"
+
+msg_info "Setting up Queue Worker"
+cat <<'EOF' >/etc/supervisor/conf.d/invoiceninja-worker.conf
+[program:invoiceninja-worker]
+process_name=%(program_name)s_%(process_num)02d
+command=php /opt/invoiceninja/artisan queue:work --sleep=3 --tries=3 --max-time=3600
+autostart=true
+autorestart=true
+stopasgroup=true
+killasgroup=true
+user=www-data
+numprocs=2
+redirect_stderr=true
+stdout_logfile=/var/log/invoiceninja-worker.log
+stopwaitsecs=3600
+EOF
+
+touch /var/log/invoiceninja-worker.log
+chown www-data:www-data /var/log/invoiceninja-worker.log
+$STD supervisorctl reread
+$STD supervisorctl update
+msg_ok "Set up Queue Worker"
+
+msg_info "Setting up Cron"
+cat <<'EOF' >/etc/cron.d/invoiceninja
+* * * * * www-data cd /opt/invoiceninja && php artisan schedule:run >> /dev/null 2>&1
+EOF
+msg_ok "Set up Cron"
+
+msg_info "Enabling Services"
+systemctl enable -q --now php8.4-fpm nginx supervisor
+msg_ok "Enabled Services"
+
+motd_ssh
+customize
+cleanup_lxc

install/valkey-install.sh

@@ -32,10 +32,46 @@ echo "# Memory-optimized settings for small-scale deployments" >> /etc/valkey/va
 echo "maxmemory ${MAXMEMORY_MB}mb" >> /etc/valkey/valkey.conf
 echo "maxmemory-policy allkeys-lru" >> /etc/valkey/valkey.conf
 echo "maxmemory-samples 10" >> /etc/valkey/valkey.conf
+msg_ok "Installed Valkey"
+
+echo
+read -r -p "${TAB3}Enable TLS for Valkey (Sentinel mode does not supported)? [y/N]: " prompt
+if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
+    read -r -p "${TAB3}Use TLS-only mode (disable TCP port 6379)? [y/N]: " tls_only
+    msg_info "Configuring TLS for Valkey..."
+
+    create_self_signed_cert "Valkey"
+    TLS_DIR="/etc/ssl/valkey"
+    TLS_CERT="$TLS_DIR/valkey.crt"
+    TLS_KEY="$TLS_DIR/valkey.key"
+    chown valkey:valkey "$TLS_CERT" "$TLS_KEY"
+
+    if [[ ${tls_only,,} =~ ^(y|yes)$ ]]; then
+    {
+      echo ""
+      echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
+      echo "port 0"
+      echo "tls-port 6379"
+      echo "tls-cert-file $TLS_DIR/valkey.crt"
+      echo "tls-key-file $TLS_DIR/valkey.key"
+      echo "tls-auth-clients no"
+    } >> /etc/valkey/valkey.conf
+    msg_ok "Enabled TLS-only mode on port 6379"
+    else
+    {
+      echo ""
+      echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
+      echo "tls-port 6380"
+      echo "tls-cert-file $TLS_DIR/valkey.crt"
+      echo "tls-key-file $TLS_DIR/valkey.key"
+      echo "tls-auth-clients no"
+    } >> /etc/valkey/valkey.conf
+    msg_ok "Enabled TLS on port 6380 and TCP on 6379"
+    fi
+fi
 
 systemctl enable -q --now valkey-server
 systemctl restart valkey-server
-msg_ok "Installed Valkey"
 
 motd_ssh
 customize

install/wallabag-install.sh

@@ -0,0 +1,148 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://wallabag.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nginx \
+  redis-server \
+  imagemagick
+msg_ok "Installed Dependencies"
+
+import_local_ip
+setup_mariadb
+MARIADB_DB_NAME="wallabag" MARIADB_DB_USER="wallabag" setup_mariadb_db
+PHP_VERSION="8.3" PHP_FPM="YES" PHP_MODULE="bcmath,bz2,curl,gd,imagick,intl,mbstring,mysql,redis,tidy,xml,zip" setup_php
+setup_composer
+NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "wallabag" "wallabag/wallabag" "prebuild" "latest" "/opt/wallabag" "wallabag-*.tar.gz"
+
+msg_info "Configuring Wallabag"
+cd /opt/wallabag
+SECRET_KEY="$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)"
+cat <<EOF >/opt/wallabag/app/config/parameters.yml
+parameters:
+    database_driver: pdo_mysql
+    database_host: 127.0.0.1
+    database_port: 3306
+    database_name: ${MARIADB_DB_NAME}
+    database_user: ${MARIADB_DB_USER}
+    database_password: ${MARIADB_DB_PASS}
+    database_path: null
+    database_table_prefix: wallabag_
+    database_socket: null
+    database_charset: utf8mb4
+
+    domain_name: http://${LOCAL_IP}:8000
+    server_name: Wallabag
+
+    mailer_dsn: null
+
+    locale: en
+
+    secret: ${SECRET_KEY}
+
+    twofactor_auth: false
+    twofactor_sender: no-reply@wallabag.org
+
+    fosuser_registration: true
+    fosuser_confirmation: false
+
+    fos_oauth_server_access_token_lifetime: 3600
+    fos_oauth_server_refresh_token_lifetime: 1209600
+
+    from_email: no-reply@wallabag.org
+
+    rss_limit: 50
+
+    rabbitmq_host: localhost
+    rabbitmq_port: 5672
+    rabbitmq_user: guest
+    rabbitmq_password: guest
+    rabbitmq_prefetch_count: 10
+
+    redis_scheme: tcp
+    redis_host: localhost
+    redis_port: 6379
+    redis_path: null
+    redis_password: null
+
+    sentry_dsn: null
+EOF
+chown -R www-data:www-data /opt/wallabag
+msg_ok "Configured Wallabag"
+
+msg_info "Installing Wallabag (Patience)"
+export COMPOSER_ALLOW_SUPERUSER=1
+export SYMFONY_ENV=prod
+cd /opt/wallabag
+$STD php bin/console wallabag:install --env=prod --no-interaction
+$STD php bin/console cache:clear --env=prod
+chown -R www-data:www-data /opt/wallabag
+chmod -R 755 /opt/wallabag/{var,web/assets}
+msg_ok "Installed Wallabag"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/wallabag
+server {
+    listen 8000;
+    server_name _;
+    root /opt/wallabag/web;
+
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-Content-Type-Options "nosniff";
+
+    index app.php;
+    charset utf-8;
+
+    location / {
+        try_files $uri /app.php$is_args$args;
+    }
+
+    location ~ ^/app\.php(/|$) {
+        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
+        fastcgi_split_path_info ^(.+\.php)(/.*)$;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+        fastcgi_param DOCUMENT_ROOT $realpath_root;
+        internal;
+    }
+
+    location ~ \.php$ {
+        return 404;
+    }
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+
+    error_log /var/log/nginx/wallabag_error.log;
+    access_log /var/log/nginx/wallabag_access.log;
+}
+EOF
+
+ln -sf /etc/nginx/sites-available/wallabag /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
+msg_ok "Configured Nginx"
+
+msg_info "Enabling Services"
+systemctl enable -q --now redis-server
+systemctl enable -q --now php8.3-fpm
+systemctl enable -q --now nginx
+msg_ok "Enabled Services"
+
+motd_ssh
+customize
+cleanup_lxc

vm/opnsense-vm.sh

@@ -578,7 +578,7 @@ fi
 msg_ok "Using ${CL}${BL}$STORAGE${CL} ${GN}for Storage Location."
 msg_ok "Virtual Machine ID is ${CL}${BL}$VMID${CL}."
 msg_info "Retrieving the URL for the OPNsense Qcow2 Disk Image"
-URL="https://download.freebsd.org/releases/VM-IMAGES/14.2-RELEASE/amd64/Latest/FreeBSD-14.2-RELEASE-amd64.qcow2.xz"
+URL="https://download.freebsd.org/releases/VM-IMAGES/14.3-RELEASE/amd64/Latest/FreeBSD-14.3-RELEASE-amd64.qcow2.xz"
 msg_ok "Download URL: ${CL}${BL}${URL}${CL}"
 curl -f#SL -o "$(basename "$URL")" "$URL"
 echo -en "\e[1A\e[0K"