komodo: migrate env vars to v2 and update source

Update Komodo addon script: switch source GitHub URL to moghtech, create a timestamped backup of the compose env before updating, and add migrations for Komodo v2. Migrate image tag from 'latest' to ':2', rename DB credential variables (KOMODO_DB_* -> KOMODO_DATABASE_*), remove the deprecated KOMODO_PASSKEY, and ensure COMPOSE_KOMODO_BACKUPS_PATH is set. Adjust install routine to stop generating/setting PASSKEY and to use the new DATABASE variable names.

.gitattributes

@@ -4,29 +4,35 @@
 *.sh linguist-detectable=true
 *.bash linguist-language=Shell
 *.func linguist-language=Shell
-*.func linguist-detectable=true
 *.install linguist-language=Shell
 
 # ---------------------------------------
-# Exclude header art from stats
+# Treat Golang files as Go (for /api/)
+api/**/*.go linguist-language=Go
+
 # ---------------------------------------
-ct/headers/* linguist-documentation
+# Treat frontend as JavaScript/TypeScript (optional)
+frontend/**/*.ts linguist-language=TypeScript
+frontend/**/*.js linguist-language=JavaScript
 
 # ---------------------------------------
 # Exclude documentation from stats
-# ---------------------------------------
 *.md linguist-documentation
+docs/** linguist-documentation
 README.md linguist-documentation
 CONTRIBUTING.md linguist-documentation
 SECURITY.md linguist-documentation
 
 # ---------------------------------------
 # Exclude generated/config files
-# ---------------------------------------
+*.json linguist-generated
+frontend/public/json/*.json linguist-generated=false
+*.lock linguist-generated
+*.yml linguist-generated
+*.yaml linguist-generated
 .github/** linguist-generated
 .vscode/** linguist-generated
 
 # ---------------------------------------
 # Standard text handling
-# ---------------------------------------
 * text=auto eol=lf

.github/CODEOWNERS

@@ -12,3 +12,6 @@
 
 # Set default reviewers
 *                                                                           @community-scripts/Contributor
+
+# All changes in frontend
+/frontend/                                                                  @community-scripts/Frontend-Dev

.github/changelogs/2026/03.md

@@ -1,190 +1,3 @@
-## 2026-03-31
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Graylog: set vm.max_map_count on host for OpenSearch [@MickLesk](https://github.com/MickLesk) ([#13441](https://github.com/community-scripts/ProxmoxVE/pull/13441))
-    - Koillection: ensure newline before appending to .env.local [@MickLesk](https://github.com/MickLesk) ([#13440](https://github.com/community-scripts/ProxmoxVE/pull/13440))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - core: skip empty gateway value in network config [@MickLesk](https://github.com/MickLesk) ([#13442](https://github.com/community-scripts/ProxmoxVE/pull/13442))
-
-## 2026-03-30
-
-### 🆕 New Scripts
-
-  - Bambuddy ([#13411](https://github.com/community-scripts/ProxmoxVE/pull/13411))
-
-### 🚀 Updated Scripts
-
-  - #### 💥 Breaking Changes
-
-    - Rename: BirdNET > BirdNET-Go [@MickLesk](https://github.com/MickLesk) ([#13410](https://github.com/community-scripts/ProxmoxVE/pull/13410))
-
-## 2026-03-29
-
-### 🆕 New Scripts
-
-  - YOURLS ([#13379](https://github.com/community-scripts/ProxmoxVE/pull/13379))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(victoriametrics): use jq to filter releases [@Joery-M](https://github.com/Joery-M) ([#13393](https://github.com/community-scripts/ProxmoxVE/pull/13393))
-    - Ollama: add error handling for Intel GPG key imports [@MickLesk](https://github.com/MickLesk) ([#13397](https://github.com/community-scripts/ProxmoxVE/pull/13397))
-    - Immich: ignore Redis connection error on maintenance mode disable [@MickLesk](https://github.com/MickLesk) ([#13398](https://github.com/community-scripts/ProxmoxVE/pull/13398))
-    - NPM: unmask openresty after migration from package [@MickLesk](https://github.com/MickLesk) ([#13399](https://github.com/community-scripts/ProxmoxVE/pull/13399))
-
-## 2026-03-28
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Fix: Update gokapi binary name for v2.2.4+ and add migration step [@krazos](https://github.com/krazos) ([#13377](https://github.com/community-scripts/ProxmoxVE/pull/13377))
-    - Fix: update gokapi asset matching for v2.2.4+ naming convention [@krazos](https://github.com/krazos) ([#13369](https://github.com/community-scripts/ProxmoxVE/pull/13369))
-    - Tandoor Recipes: Add missing env variable [@tremor021](https://github.com/tremor021) ([#13365](https://github.com/community-scripts/ProxmoxVE/pull/13365))
-
-  - #### ✨ New Features
-
-    - FileFlows: add option to install Node [@tremor021](https://github.com/tremor021) ([#13368](https://github.com/community-scripts/ProxmoxVE/pull/13368))
-
-## 2026-03-27
-
-### 🆕 New Scripts
-
-  - Matter-Server ([#13355](https://github.com/community-scripts/ProxmoxVE/pull/13355))
-- GeoPulse ([#13320](https://github.com/community-scripts/ProxmoxVE/pull/13320))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - RevealJS: Switch from gulp to vite [@tremor021](https://github.com/tremor021) ([#13336](https://github.com/community-scripts/ProxmoxVE/pull/13336))
-
-  - #### ✨ New Features
-
-    - Dispatcharr add custom Postgres port support for upgrade [@MickLesk](https://github.com/MickLesk) ([#13347](https://github.com/community-scripts/ProxmoxVE/pull/13347))
-    - Immich: bump to v2.6.3 [@MickLesk](https://github.com/MickLesk) ([#13324](https://github.com/community-scripts/ProxmoxVE/pull/13324))
-
-### 🧰 Tools
-
-  - #### ✨ New Features
-
-    - Refactor/Feature-Bump/Security: Update-Cron-LXCs (Now Local Mode!) [@MickLesk](https://github.com/MickLesk) ([#13339](https://github.com/community-scripts/ProxmoxVE/pull/13339))
-
-## 2026-03-26
-
-### 🆕 New Scripts
-
-  - BirdNET ([#13313](https://github.com/community-scripts/ProxmoxVE/pull/13313))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: Bump to 2.6.2 | use start.sh in service, ensure DB_HOSTNAME in .env | Fix Rights Issue with ZFS Shares [@MickLesk](https://github.com/MickLesk) ([#13199](https://github.com/community-scripts/ProxmoxVE/pull/13199))
-
-  - #### ✨ New Features
-
-    - SparkyFitness: add garmin microservice as addon [@tomfrenzel](https://github.com/tomfrenzel) ([#12642](https://github.com/community-scripts/ProxmoxVE/pull/12642))
-    - Frigate: bump to v0.17.1 & change build order [@MickLesk](https://github.com/MickLesk) ([#13304](https://github.com/community-scripts/ProxmoxVE/pull/13304))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: pin npm to 11.11.0 to work around Node.js 22.22.2 regression [@MickLesk](https://github.com/MickLesk) ([#13296](https://github.com/community-scripts/ProxmoxVE/pull/13296))
-
-  - #### ✨ New Features
-
-    - core: APT/APK Mirror Fallback for CDN Failures [@MickLesk](https://github.com/MickLesk) ([#13316](https://github.com/community-scripts/ProxmoxVE/pull/13316))
-    - core/tools: replace generic return 1 exit_codes with more specific exit_codes [@MickLesk](https://github.com/MickLesk) ([#13311](https://github.com/community-scripts/ProxmoxVE/pull/13311))
-
-  - #### 🔧 Refactor
-
-    - core: use /usr/bin/install to prevent function shadowing [@MickLesk](https://github.com/MickLesk) ([#13299](https://github.com/community-scripts/ProxmoxVE/pull/13299))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - SparkyFitness-Garmin: fix app name [@tomfrenzel](https://github.com/tomfrenzel) ([#13325](https://github.com/community-scripts/ProxmoxVE/pull/13325))
-
-## 2026-03-25
-
-### 🚀 Updated Scripts
-
-  - #### ✨ New Features
-
-    - Komodo v2: migrate env vars to v2 and update source [@MickLesk](https://github.com/MickLesk) ([#13262](https://github.com/community-scripts/ProxmoxVE/pull/13262))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - core: make shell command substitutions safe with || true [@MickLesk](https://github.com/MickLesk) ([#13279](https://github.com/community-scripts/ProxmoxVE/pull/13279))
-
-## 2026-03-24
-
-### 🆕 New Scripts
-
-  - Homebrew (Addon) ([#13249](https://github.com/community-scripts/ProxmoxVE/pull/13249))
-- NextExplorer ([#13252](https://github.com/community-scripts/ProxmoxVE/pull/13252))
-
-### 🚀 Updated Scripts
-
-  - #### ✨ New Features
-
-    - Turnkey: modernize turnkey.sh with shared libraries  [@MickLesk](https://github.com/MickLesk) ([#13242](https://github.com/community-scripts/ProxmoxVE/pull/13242))
-
-  - #### 🔧 Refactor
-
-    - chore: replace helper-scripts.com with community-scripts.com [@MickLesk](https://github.com/MickLesk) ([#13244](https://github.com/community-scripts/ProxmoxVE/pull/13244))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: Booklore [@MickLesk](https://github.com/MickLesk) ([#13265](https://github.com/community-scripts/ProxmoxVE/pull/13265))
-
-## 2026-03-23
-
-### 🚀 Updated Scripts
-
-  - #### 🔧 Refactor
-
-    - core: harden shell scripts against injection and insecure permissions [@MickLesk](https://github.com/MickLesk) ([#13239](https://github.com/community-scripts/ProxmoxVE/pull/13239))
-
-## 2026-03-22
-
-### 🆕 New Scripts
-
-  - versitygw ([#13180](https://github.com/community-scripts/ProxmoxVE/pull/13180))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Adventurelog: pin DRF <3.15 to fix coreapi module removal [@MickLesk](https://github.com/MickLesk) ([#13194](https://github.com/community-scripts/ProxmoxVE/pull/13194))
-
-  - #### ✨ New Features
-
-    - ConvertX: add libreoffice-writer for ODT/document conversions [@MickLesk](https://github.com/MickLesk) ([#13196](https://github.com/community-scripts/ProxmoxVE/pull/13196))
-
-  - #### 🔧 Refactor
-
-    - iSponsorblockTV: add AVX CPU check before installation [@MickLesk](https://github.com/MickLesk) ([#13197](https://github.com/community-scripts/ProxmoxVE/pull/13197))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: guard against empty IPv6 address in static mode [@MickLesk](https://github.com/MickLesk) ([#13195](https://github.com/community-scripts/ProxmoxVE/pull/13195))
-
 ## 2026-03-21
 
 ### 🚀 Updated Scripts

.github/changelogs/2026/04.md

@@ -1,197 +0,0 @@
-## 2026-04-11
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: Ensure newline before appending IMMICH_HELMET_FILE to .env [@MickLesk](https://github.com/MickLesk) ([#13667](https://github.com/community-scripts/ProxmoxVE/pull/13667))
-
-  - #### ✨ New Features
-
-    - BentoPDF: replace http-server with nginx to fix WASM initialization timeout [@MickLesk](https://github.com/MickLesk) ([#13625](https://github.com/community-scripts/ProxmoxVE/pull/13625))
-    - Element Synapse: Add MatrixRTC configuration for Element Call support [@MickLesk](https://github.com/MickLesk) ([#13665](https://github.com/community-scripts/ProxmoxVE/pull/13665))
-    - RomM: Use ROMM_BASE_PATH from .env for symlinks and nginx config [@MickLesk](https://github.com/MickLesk) ([#13666](https://github.com/community-scripts/ProxmoxVE/pull/13666))
-    - Immich: Pin version to 2.7.4 [@vhsdream](https://github.com/vhsdream) ([#13661](https://github.com/community-scripts/ProxmoxVE/pull/13661))
-
-  - #### 🔧 Refactor
-
-    - Crafty Controller: Wait for credentials file instead of fixed sleep [@MickLesk](https://github.com/MickLesk) ([#13670](https://github.com/community-scripts/ProxmoxVE/pull/13670))
-    - Refactor: Alpine-Wakapi [@tremor021](https://github.com/tremor021) ([#13656](https://github.com/community-scripts/ProxmoxVE/pull/13656))
-
-## 2026-04-10
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix: ensure trailing newline in redis.conf before appending bind directive [@Copilot](https://github.com/Copilot) ([#13647](https://github.com/community-scripts/ProxmoxVE/pull/13647))
-
-  - #### ✨ New Features
-
-    - Immich: Pin version to 2.7.3 [@vhsdream](https://github.com/vhsdream) ([#13631](https://github.com/community-scripts/ProxmoxVE/pull/13631))
-    - Homarr: bind Redis to localhost only [@MickLesk](https://github.com/MickLesk) ([#13552](https://github.com/community-scripts/ProxmoxVE/pull/13552))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: prevent script crash when entering GitHub token after rate limit [@MickLesk](https://github.com/MickLesk) ([#13638](https://github.com/community-scripts/ProxmoxVE/pull/13638))
-
-### 🧰 Tools
-
-  - #### 🔧 Refactor
-
-    - addons: Filebrowser & Filebrowser-Quantum get warning if host install [@MickLesk](https://github.com/MickLesk) ([#13639](https://github.com/community-scripts/ProxmoxVE/pull/13639))
-
-## 2026-04-09
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - boostack: add: git [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13620](https://github.com/community-scripts/ProxmoxVE/pull/13620))
-
-  - #### ✨ New Features
-
-    - Update OPNsense version from 25.7 to 26.1 [@tdn131](https://github.com/tdn131) ([#13626](https://github.com/community-scripts/ProxmoxVE/pull/13626))
-    - CheckMK: Bump Default OS to 13 (trixie) + dynamic codename + fix RELEASE-Tag Fetching [@MickLesk](https://github.com/MickLesk) ([#13610](https://github.com/community-scripts/ProxmoxVE/pull/13610))
-
-## 2026-04-08
-
-### 🆕 New Scripts
-
-  - IronClaw | Alpine-IronClaw ([#13591](https://github.com/community-scripts/ProxmoxVE/pull/13591))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - immich: disable upgrade-insecure-requests CSP directive [@MickLesk](https://github.com/MickLesk) ([#13600](https://github.com/community-scripts/ProxmoxVE/pull/13600))
-    - Immich: v2.7.2 [@vhsdream](https://github.com/vhsdream) ([#13579](https://github.com/community-scripts/ProxmoxVE/pull/13579))
-    - Update flaresolverr-install.sh [@maztheman](https://github.com/maztheman) ([#13584](https://github.com/community-scripts/ProxmoxVE/pull/13584))
-
-  - #### ✨ New Features
-
-    - bambuddy: add mkdir before data restore & add ffmpeg dependency [@MickLesk](https://github.com/MickLesk) ([#13601](https://github.com/community-scripts/ProxmoxVE/pull/13601))
-
-  - #### 🔧 Refactor
-
-    - feat: update UHF Server script to use setup_ffmpeg [@zackwithak13](https://github.com/zackwithak13) ([#13564](https://github.com/community-scripts/ProxmoxVE/pull/13564))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: add script page badges to descriptions | change donate URL [@MickLesk](https://github.com/MickLesk) ([#13596](https://github.com/community-scripts/ProxmoxVE/pull/13596))
-
-## 2026-04-07
-
-### 🗑️ Deleted Scripts
-
-  - Remove low-install-count CT scripts and installers [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#13570](https://github.com/community-scripts/ProxmoxVE/pull/13570))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: improve resilience for top Proxmox error codes (209, 215, 118, 206) [@MickLesk](https://github.com/MickLesk) ([#13575](https://github.com/community-scripts/ProxmoxVE/pull/13575))
-
-## 2026-04-06
-
-### 🆕 New Scripts
-
-  - OpenThread Border Router ([#13536](https://github.com/community-scripts/ProxmoxVE/pull/13536))
-- Homelable ([#13539](https://github.com/community-scripts/ProxmoxVE/pull/13539))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Papra: check env before copy [@MickLesk](https://github.com/MickLesk) ([#13553](https://github.com/community-scripts/ProxmoxVE/pull/13553))
-    - changedetection: fix: typing_extensions error [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13548](https://github.com/community-scripts/ProxmoxVE/pull/13548))
-    - kasm: fix: fetch latest version [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13547](https://github.com/community-scripts/ProxmoxVE/pull/13547))
-
-## 2026-04-05
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Grist: remove install:ee step (private repo, not needed for grist-core) [@MickLesk](https://github.com/MickLesk) ([#13526](https://github.com/community-scripts/ProxmoxVE/pull/13526))
-    - Nginx Proxy Manager: ensure /tmp/nginx/body exists via openresty service  [@MickLesk](https://github.com/MickLesk) ([#13528](https://github.com/community-scripts/ProxmoxVE/pull/13528))
-    - MotionEye: run as root to enable SMB share support [@MickLesk](https://github.com/MickLesk) ([#13527](https://github.com/community-scripts/ProxmoxVE/pull/13527))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - core: silent() function - use return instead of exit to allow || true error handling [@MickLesk](https://github.com/MickLesk) ([#13529](https://github.com/community-scripts/ProxmoxVE/pull/13529))
-
-## 2026-04-04
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - komodo: set `PERIPHERY_CORE_PUBLIC_KEYS` to default value if absent [@4ndv](https://github.com/4ndv) ([#13519](https://github.com/community-scripts/ProxmoxVE/pull/13519))
-
-## 2026-04-03
-
-### 🆕 New Scripts
-
-  - netboot.xyz ([#13480](https://github.com/community-scripts/ProxmoxVE/pull/13480))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - OpenWRT-VM: use poweroff instead of halt to properly stop VM [@MickLesk](https://github.com/MickLesk) ([#13504](https://github.com/community-scripts/ProxmoxVE/pull/13504))
-    - NginxProxyManager: fix openresty restart by setting user root before reload [@MickLesk](https://github.com/MickLesk) ([#13500](https://github.com/community-scripts/ProxmoxVE/pull/13500))
-
-  - #### ✨ New Features
-
-    - Crafty Controller: add Java 25 for Minecraft 1.26.1+ [@MickLesk](https://github.com/MickLesk) ([#13502](https://github.com/community-scripts/ProxmoxVE/pull/13502))
-    - Wealthfolio: update to v3.2.1 and Node.js 24 [@afadil](https://github.com/afadil) ([#13486](https://github.com/community-scripts/ProxmoxVE/pull/13486))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core.func: prevent profile.d scripts from aborting on non-zero exit [@MickLesk](https://github.com/MickLesk) ([#13503](https://github.com/community-scripts/ProxmoxVE/pull/13503))
-
-  - #### ✨ New Features
-
-    - APT Proxy: Support full URLs (http/https with custom ports) [@MickLesk](https://github.com/MickLesk) ([#13474](https://github.com/community-scripts/ProxmoxVE/pull/13474))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - PVE LXC-Updater: pipe apt list through cat to prevent pager hang [@MickLesk](https://github.com/MickLesk) ([#13501](https://github.com/community-scripts/ProxmoxVE/pull/13501))
-
-## 2026-04-02
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Grist: Guard backup restore for empty docs/db files [@MickLesk](https://github.com/MickLesk) ([#13472](https://github.com/community-scripts/ProxmoxVE/pull/13472))
-    - fix(zigbee2mqtt): suppress grep error when pnpm-workspace.yaml is absent on update [@Copilot](https://github.com/Copilot) ([#13476](https://github.com/community-scripts/ProxmoxVE/pull/13476))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Cron LXC Updater: Add full PATH for cron environment [@MickLesk](https://github.com/MickLesk) ([#13473](https://github.com/community-scripts/ProxmoxVE/pull/13473))
-
-## 2026-04-01
-
-### 🆕 New Scripts
-
-  - DrawDB ([#13454](https://github.com/community-scripts/ProxmoxVE/pull/13454))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Filebrowser: make noauth setup use correct database [@MickLesk](https://github.com/MickLesk) ([#13457](https://github.com/community-scripts/ProxmoxVE/pull/13457))

.github/pull_request_template.md

@@ -22,6 +22,6 @@ Fixes #
 - [ ] ✨ **New feature** – Adds new, non-breaking functionality.
 - [ ] 💥 **Breaking change** – Alters existing functionality in a way that may require updates.
 - [ ] 🆕 **New script** – A fully functional and tested script or script set.
-- [ ] 🌍 **Website update** – Changes to script metadata (PocketBase/website data).
+- [ ] 🌍 **Website update** – Changes to website-related JSON files or metadata.
 - [ ] 🔧 **Refactoring / Code Cleanup** – Improves readability or maintainability without changing functionality.
 - [ ] 📝 **Documentation update** – Changes to `README`, `AppName.md`, `CONTRIBUTING.md`, or other docs.

.github/workflows/close-tteck-issues.yaml

@@ -21,7 +21,7 @@ jobs:
               const message = `Hello, it looks like you are referencing the **old tteck repo**.
 
             This repository is no longer used for active scripts.
-            **Please update your bookmarks** and use: [https://community-scripts.com](https://community-scripts.com)
+            **Please update your bookmarks** and use: [https://helper-scripts.com](https://helper-scripts.com)
                     
             Also make sure your Bash command starts with:
             \`\`\`bash

.github/workflows/pocketbase-bot.yml

@@ -31,8 +31,6 @@ jobs:
           ACTOR: ${{ github.event.comment.user.login }}
           ACTOR_ASSOCIATION: ${{ github.event.comment.author_association }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          FRONTEND_URL: ${{ secrets.FRONTEND_URL }}
-          REVALIDATE_SECRET: ${{ secrets.REVALIDATE_SECRET }}
         run: |
           node << 'ENDSCRIPT'
           (async function () {
@@ -115,6 +113,7 @@ jobs:
             }
 
             // ── Permission check ───────────────────────────────────────────────
+            // author_association: OWNER = repo/org owner, MEMBER = org member (includes Contributors team)
             const association = process.env.ACTOR_ASSOCIATION;
             if (association !== 'OWNER' && association !== 'MEMBER') {
               await addReaction('-1');
@@ -129,11 +128,18 @@ jobs:
             await addReaction('eyes');
 
             // ── Parse command ──────────────────────────────────────────────────
+            // Formats (first line of comment):
+            //   /pocketbase <slug> field=value [field=value ...]    ← field updates (simple values)
+            //   /pocketbase <slug> set <field>                       ← value from code block below
+            //   /pocketbase <slug> note list|add|edit|remove ...     ← note management
+            //   /pocketbase <slug> method list                        ← list install methods
+            //   /pocketbase <slug> method <type> cpu=N ram=N hdd=N   ← edit install method resources
             const commentBody = process.env.COMMENT_BODY || '';
             const lines = commentBody.trim().split('\n');
             const firstLine = lines[0].trim();
             const withoutCmd = firstLine.replace(/^\/pocketbase\s+/, '').trim();
 
+            // Extract code block content from comment body (```...``` or ```lang\n...```)
             function extractCodeBlock(body) {
               const m = body.match(/```[^\n]*\n([\s\S]*?)```/);
               return m ? m[1].trim() : null;
@@ -141,8 +147,6 @@ jobs:
             const codeBlockValue = extractCodeBlock(commentBody);
 
             const HELP_TEXT =
-              '**Show current state:**\n' +
-              '```\n/pocketbase <slug> info\n```\n\n' +
               '**Field update (simple):** `/pocketbase <slug> field=value [field=value ...]`\n\n' +
               '**Field update (HTML/multiline) — value from code block:**\n' +
               '````\n' +
@@ -158,16 +162,12 @@ jobs:
               '/pocketbase <slug> note edit <type> "<old text>" "<new text>"\n' +
               '/pocketbase <slug> note remove <type> "<text>"\n' +
               '```\n\n' +
-              '**Install method management:**\n' +
+              '**Install method resources:**\n' +
               '```\n' +
               '/pocketbase <slug> method list\n' +
+              '/pocketbase <slug> method <type> hdd=10\n' +
               '/pocketbase <slug> method <type> cpu=4 ram=2048 hdd=20\n' +
-              '/pocketbase <slug> method <type> config_path="/opt/app/.env"\n' +
-              '/pocketbase <slug> method <type> os=debian version=13\n' +
-              '/pocketbase <slug> method add <type> cpu=2 ram=2048 hdd=8 os=debian version=13\n' +
-              '/pocketbase <slug> method remove <type>\n' +
-              '```\n' +
-              'Method fields: `cpu` `ram` `hdd` `os` `version` `config_path` `script`\n\n' +
+              '```\n\n' +
               '**Editable fields:** `name` `description` `logo` `documentation` `website` `project_url` `github` ' +
               '`config_path` `port` `default_user` `default_passwd` ' +
               '`updateable` `privileged` `has_arm` `is_dev` ' +
@@ -189,7 +189,8 @@ jobs:
               process.exit(0);
             }
 
-            // ── PocketBase: authenticate ───────────────────────────────────────
+            // ── Allowed fields and their types ─────────────────────────────────
+            // ── PocketBase: authenticate (shared by all paths) ─────────────────
             const raw = process.env.POCKETBASE_URL.replace(/\/$/, '');
             const apiBase = /\/api$/i.test(raw) ? raw : raw + '/api';
             const coll = process.env.POCKETBASE_COLLECTION;
@@ -209,7 +210,7 @@ jobs:
             }
             const token = JSON.parse(authRes.body).token;
 
-            // ── PocketBase: find record by slug ────────────────────────────────
+            // ── PocketBase: find record by slug (shared by all paths) ──────────
             const recordsUrl = apiBase + '/collections/' + encodeURIComponent(coll) + '/records';
             const filter = "(slug='" + slug.replace(/'/g, "''") + "')";
             const listRes = await request(recordsUrl + '?filter=' + encodeURIComponent(filter) + '&perPage=1', {
@@ -227,164 +228,57 @@ jobs:
               process.exit(0);
             }
 
-            // ── Shared helpers ─────────────────────────────────────────────────
-
-            // Key=value parser: handles unquoted and "quoted" values
-            function parseKVPairs(str) {
-              const fields = {};
-              let pos = 0;
-              while (pos < str.length) {
-                while (pos < str.length && /\s/.test(str[pos])) pos++;
-                if (pos >= str.length) break;
-                let keyStart = pos;
-                while (pos < str.length && str[pos] !== '=' && !/\s/.test(str[pos])) pos++;
-                const key = str.substring(keyStart, pos).trim();
-                if (!key || pos >= str.length || str[pos] !== '=') { pos++; continue; }
-                pos++;
-                let value;
-                if (pos < str.length && str[pos] === '"') {
-                  pos++;
-                  let valStart = pos;
-                  while (pos < str.length && str[pos] !== '"') {
-                    if (str[pos] === '\\') pos++;
-                    pos++;
-                  }
-                  value = str.substring(valStart, pos).replace(/\\"/g, '"');
-                  if (pos < str.length) pos++;
-                } else {
-                  let valStart = pos;
-                  while (pos < str.length && !/\s/.test(str[pos])) pos++;
-                  value = str.substring(valStart, pos);
-                }
-                fields[key] = value;
-              }
-              return fields;
-            }
-
-            // Token parser for note commands: unquoted-word OR "quoted string"
-            function parseTokens(str) {
-              const tokens = [];
-              let pos = 0;
-              while (pos < str.length) {
-                while (pos < str.length && /\s/.test(str[pos])) pos++;
-                if (pos >= str.length) break;
-                if (str[pos] === '"') {
-                  pos++;
-                  let start = pos;
-                  while (pos < str.length && str[pos] !== '"') {
-                    if (str[pos] === '\\') pos++;
-                    pos++;
-                  }
-                  tokens.push(str.substring(start, pos).replace(/\\"/g, '"'));
-                  if (pos < str.length) pos++;
-                } else {
-                  let start = pos;
-                  while (pos < str.length && !/\s/.test(str[pos])) pos++;
-                  tokens.push(str.substring(start, pos));
-                }
-              }
-              return tokens;
-            }
-
-            // Read JSON blob from record (handles parsed objects and strings)
-            function readJsonBlob(val) {
-              if (Array.isArray(val)) return val;
-              try { return JSON.parse(val || '[]'); } catch (e) { return []; }
-            }
-
-            // Frontend cache revalidation (silent, best-effort)
-            async function revalidate(s) {
-              const frontendUrl = process.env.FRONTEND_URL;
-              const secret = process.env.REVALIDATE_SECRET;
-              if (!frontendUrl || !secret) return;
-              try {
-                await request(frontendUrl.replace(/\/$/, '') + '/api/revalidate', {
-                  method: 'POST',
-                  headers: { 'Authorization': 'Bearer ' + secret, 'Content-Type': 'application/json' },
-                  body: JSON.stringify({ tags: ['scripts', 'script-' + s] })
-                });
-              } catch (e) { console.warn('Revalidation skipped:', e.message); }
-            }
-
-            // Format notes list for display
-            function formatNotesList(arr) {
-              if (arr.length === 0) return '*None*';
-              return arr.map(function (n, i) {
-                return (i + 1) + '. **`' + (n.type || '?') + '`**: ' + (n.text || '');
-              }).join('\n');
-            }
-
-            // Format install methods list for display
-            function formatMethodsList(arr) {
-              if (arr.length === 0) return '*None*';
-              return arr.map(function (im, i) {
-                const r = im.resources || {};
-                const parts = [
-                  (r.os || '?') + ' ' + (r.version || '?'),
-                  (r.cpu != null ? r.cpu : '?') + 'C / ' + (r.ram != null ? r.ram : '?') + ' MB / ' + (r.hdd != null ? r.hdd : '?') + ' GB'
-                ];
-                if (im.config_path) parts.push('config: `' + im.config_path + '`');
-                if (im.script) parts.push('script: `' + im.script + '`');
-                return (i + 1) + '. **`' + (im.type || '?') + '`** — ' + parts.join(', ');
-              }).join('\n');
-            }
-
             // ── Route: dispatch to subcommand handler ──────────────────────────
-            const infoMatch   = rest.match(/^info$/i);
             const noteMatch   = rest.match(/^note\s+(list|add|edit|remove)\b/i);
             const methodMatch = rest.match(/^method\b/i);
             const setMatch    = rest.match(/^set\s+(\S+)/i);
 
-            if (infoMatch) {
-              // ── INFO SUBCOMMAND ──────────────────────────────────────────────
-              const notesArr   = readJsonBlob(record.notes_json);
-              const methodsArr = readJsonBlob(record.install_methods_json);
-
-              const out = [];
-              out.push('ℹ️ **PocketBase Bot**: Info for **`' + slug + '`**\n');
-
-              out.push('**Basic info:**');
-              out.push('- **Name:** ' + (record.name || '—'));
-              out.push('- **Slug:** `' + slug + '`');
-              out.push('- **Port:** ' + (record.port != null ? '`' + record.port + '`' : '—'));
-              out.push('- **Updateable:** ' + (record.updateable ? 'Yes' : 'No'));
-              out.push('- **Privileged:** ' + (record.privileged ? 'Yes' : 'No'));
-              out.push('- **ARM:** ' + (record.has_arm ? 'Yes' : 'No'));
-              if (record.is_dev) out.push('- **Dev:** Yes');
-              if (record.is_disabled) out.push('- **Disabled:** Yes' + (record.disable_message ? ' — ' + record.disable_message : ''));
-              if (record.is_deleted) out.push('- **Deleted:** Yes' + (record.deleted_message ? ' — ' + record.deleted_message : ''));
-              out.push('');
-
-              out.push('**Links:**');
-              out.push('- **Website:** ' + (record.website || '—'));
-              out.push('- **Docs:** ' + (record.documentation || '—'));
-              out.push('- **Logo:** ' + (record.logo ? '[link](' + record.logo + ')' : '—'));
-              out.push('- **GitHub:** ' + (record.github || '—'));
-              if (record.config_path) out.push('- **Config:** `' + record.config_path + '`');
-              out.push('');
-
-              out.push('**Credentials:**');
-              out.push('- **User:** ' + (record.default_user || '—'));
-              out.push('- **Password:** ' + (record.default_passwd ? '*(set)*' : '—'));
-              out.push('');
-
-              out.push('**Install methods** (' + methodsArr.length + '):');
-              out.push(formatMethodsList(methodsArr));
-              out.push('');
-
-              out.push('**Notes** (' + notesArr.length + '):');
-              out.push(formatNotesList(notesArr));
-
-              await addReaction('+1');
-              await postComment(out.join('\n'));
-
-            } else if (noteMatch) {
-              // ── NOTE SUBCOMMAND ──────────────────────────────────────────────
+            if (noteMatch) {
+              // ── NOTE SUBCOMMAND (reads/writes notes_json on script record) ────
               const noteAction  = noteMatch[1].toLowerCase();
               const noteArgsStr = rest.substring(noteMatch[0].length).trim();
-              let notesArr = readJsonBlob(record.notes_json);
 
-              async function patchNotes(arr) {
+              // Parse notes_json from the already-fetched script record
+              // PocketBase may return JSON fields as already-parsed objects
+              let notesArr = [];
+              try {
+                const rawNotes = record.notes_json;
+                notesArr = Array.isArray(rawNotes) ? rawNotes : JSON.parse(rawNotes || '[]');
+              } catch (e) { notesArr = []; }
+
+              // Token parser: unquoted-word OR "quoted string" (supports \" escapes)
+              function parseNoteTokens(str) {
+                const tokens = [];
+                let pos = 0;
+                while (pos < str.length) {
+                  while (pos < str.length && /\s/.test(str[pos])) pos++;
+                  if (pos >= str.length) break;
+                  if (str[pos] === '"') {
+                    pos++;
+                    let start = pos;
+                    while (pos < str.length && str[pos] !== '"') {
+                      if (str[pos] === '\\') pos++;
+                      pos++;
+                    }
+                    tokens.push(str.substring(start, pos).replace(/\\"/g, '"'));
+                    if (pos < str.length) pos++;
+                  } else {
+                    let start = pos;
+                    while (pos < str.length && !/\s/.test(str[pos])) pos++;
+                    tokens.push(str.substring(start, pos));
+                  }
+                }
+                return tokens;
+              }
+
+              function formatNotesList(arr) {
+                if (arr.length === 0) return '*None*';
+                return arr.map(function (n, i) {
+                  return (i + 1) + '. **`' + (n.type || '?') + '`**: ' + (n.text || '');
+                }).join('\n');
+              }
+
+              async function patchNotesJson(arr) {
                 const res = await request(recordsUrl + '/' + record.id, {
                   method: 'PATCH',
                   headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -392,7 +286,7 @@ jobs:
                 });
                 if (!res.ok) {
                   await addReaction('-1');
-                  await postComment('❌ **PocketBase Bot**: Failed to update notes:\n```\n' + res.body + '\n```');
+                  await postComment('❌ **PocketBase Bot**: Failed to update `notes_json`:\n```\n' + res.body + '\n```');
                   process.exit(1);
                 }
               }
@@ -405,7 +299,7 @@ jobs:
                 );
 
               } else if (noteAction === 'add') {
-                const tokens = parseTokens(noteArgsStr);
+                const tokens = parseNoteTokens(noteArgsStr);
                 if (tokens.length < 2) {
                   await addReaction('-1');
                   await postComment(
@@ -417,8 +311,7 @@ jobs:
                 const noteType = tokens[0].toLowerCase();
                 const noteText = tokens.slice(1).join(' ');
                 notesArr.push({ type: noteType, text: noteText });
-                await patchNotes(notesArr);
-                await revalidate(slug);
+                await patchNotesJson(notesArr);
                 await addReaction('+1');
                 await postComment(
                   '✅ **PocketBase Bot**: Added note to **`' + slug + '`**\n\n' +
@@ -428,7 +321,7 @@ jobs:
                 );
 
               } else if (noteAction === 'edit') {
-                const tokens = parseTokens(noteArgsStr);
+                const tokens = parseNoteTokens(noteArgsStr);
                 if (tokens.length < 3) {
                   await addReaction('-1');
                   await postComment(
@@ -453,8 +346,7 @@ jobs:
                   process.exit(0);
                 }
                 notesArr[idx].text = newText;
-                await patchNotes(notesArr);
-                await revalidate(slug);
+                await patchNotesJson(notesArr);
                 await addReaction('+1');
                 await postComment(
                   '✅ **PocketBase Bot**: Edited note in **`' + slug + '`**\n\n' +
@@ -465,7 +357,7 @@ jobs:
                 );
 
               } else if (noteAction === 'remove') {
-                const tokens = parseTokens(noteArgsStr);
+                const tokens = parseNoteTokens(noteArgsStr);
                 if (tokens.length < 2) {
                   await addReaction('-1');
                   await postComment(
@@ -489,8 +381,7 @@ jobs:
                   );
                   process.exit(0);
                 }
-                await patchNotes(notesArr);
-                await revalidate(slug);
+                await patchNotesJson(notesArr);
                 await addReaction('+1');
                 await postComment(
                   '✅ **PocketBase Bot**: Removed note from **`' + slug + '`**\n\n' +
@@ -501,36 +392,36 @@ jobs:
               }
 
             } else if (methodMatch) {
-              // ── METHOD SUBCOMMAND ────────────────────────────────────────────
+              // ── METHOD SUBCOMMAND (reads/writes install_methods_json on script record) ──
               const methodArgs     = rest.replace(/^method\s*/i, '').trim();
               const methodListMode = !methodArgs || methodArgs.toLowerCase() === 'list';
-              let methodsArr = readJsonBlob(record.install_methods_json);
 
-              // Method field classification
-              const RESOURCE_KEYS = { cpu: 'number', ram: 'number', hdd: 'number', os: 'string', version: 'string' };
-              const METHOD_KEYS   = { config_path: 'string', script: 'string' };
-              const ALL_METHOD_KEYS = Object.assign({}, RESOURCE_KEYS, METHOD_KEYS);
+              // Parse install_methods_json from the already-fetched script record
+              // PocketBase may return JSON fields as already-parsed objects
+              let methodsArr = [];
+              try {
+                const rawMethods = record.install_methods_json;
+                methodsArr = Array.isArray(rawMethods) ? rawMethods : JSON.parse(rawMethods || '[]');
+              } catch (e) { methodsArr = []; }
 
-              function applyMethodChanges(method, parsed) {
-                if (!method.resources) method.resources = {};
-                for (const [k, v] of Object.entries(parsed)) {
-                  if (RESOURCE_KEYS[k]) {
-                    method.resources[k] = RESOURCE_KEYS[k] === 'number' ? parseInt(v, 10) : v;
-                  } else if (METHOD_KEYS[k]) {
-                    method[k] = v === '' ? null : v;
-                  }
-                }
+              function formatMethodsList(arr) {
+                if (arr.length === 0) return '*None*';
+                return arr.map(function (im, i) {
+                  const r = im.resources || {};
+                  return (i + 1) + '. **`' + (im.type || '?') + '`** — CPU: `' + (r.cpu != null ? r.cpu : '?') +
+                    '` · RAM: `' + (r.ram != null ? r.ram : '?') + ' MB` · HDD: `' + (r.hdd != null ? r.hdd : '?') + ' GB`';
+                }).join('\n');
               }
 
-              async function patchMethods(arr) {
+              async function patchInstallMethodsJson(arr) {
                 const res = await request(recordsUrl + '/' + record.id, {
                   method: 'PATCH',
                   headers: { 'Authorization': token, 'Content-Type': 'application/json' },
-                  body: JSON.stringify({ install_methods_json: arr })
+                  body: JSON.stringify({ install_methods_json: JSON.stringify(arr) })
                 });
                 if (!res.ok) {
                   await addReaction('-1');
-                  await postComment('❌ **PocketBase Bot**: Failed to update install methods:\n```\n' + res.body + '\n```');
+                  await postComment('❌ **PocketBase Bot**: Failed to update `install_methods_json`:\n```\n' + res.body + '\n```');
                   process.exit(1);
                 }
               }
@@ -541,122 +432,70 @@ jobs:
                   'ℹ️ **PocketBase Bot**: Install methods for **`' + slug + '`** (' + methodsArr.length + ' total)\n\n' +
                   formatMethodsList(methodsArr)
                 );
-
               } else {
-                // Check for add / remove sub-actions
-                const addMatch    = methodArgs.match(/^add\s+(\S+)(?:\s+(.+))?$/i);
-                const removeMatch = methodArgs.match(/^remove\s+(\S+)$/i);
-
-                if (addMatch) {
-                  // ── METHOD ADD ───────────────────────────────────────────────
-                  const newType = addMatch[1];
-                  if (methodsArr.some(function (im) { return (im.type || '').toLowerCase() === newType.toLowerCase(); })) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: Install method `' + newType + '` already exists for `' + slug + '`.\n\nUse `/pocketbase ' + slug + ' method list` to see all methods.');
-                    process.exit(0);
-                  }
-                  const newMethod = { type: newType, resources: { cpu: 1, ram: 512, hdd: 4, os: 'debian', version: '13' } };
-                  if (addMatch[2]) {
-                    const parsed = parseKVPairs(addMatch[2]);
-                    const unknown = Object.keys(parsed).filter(function (k) { return !ALL_METHOD_KEYS[k]; });
-                    if (unknown.length > 0) {
-                      await addReaction('-1');
-                      await postComment('❌ **PocketBase Bot**: Unknown method field(s): `' + unknown.join('`, `') + '`\n\n**Allowed:** `' + Object.keys(ALL_METHOD_KEYS).join('`, `') + '`');
-                      process.exit(0);
-                    }
-                    applyMethodChanges(newMethod, parsed);
-                  }
-                  methodsArr.push(newMethod);
-                  await patchMethods(methodsArr);
-                  await revalidate(slug);
-                  await addReaction('+1');
+                // Parse: <type> cpu=N ram=N hdd=N
+                const methodParts = methodArgs.match(/^(\S+)\s+(.+)$/);
+                if (!methodParts) {
+                  await addReaction('-1');
                   await postComment(
-                    '✅ **PocketBase Bot**: Added install method **`' + newType + '`** to **`' + slug + '`**\n\n' +
-                    formatMethodsList([newMethod]) + '\n\n' +
-                    '*Executed by @' + actor + '*'
-                  );
-
-                } else if (removeMatch) {
-                  // ── METHOD REMOVE ────────────────────────────────────────────
-                  const removeType = removeMatch[1].toLowerCase();
-                  const removed = methodsArr.filter(function (im) { return (im.type || '').toLowerCase() === removeType; });
-                  if (removed.length === 0) {
-                    await addReaction('-1');
-                    const available = methodsArr.map(function (im) { return im.type || '?'; });
-                    await postComment('❌ **PocketBase Bot**: No install method `' + removeType + '` found.\n\n**Available:** `' + (available.length ? available.join('`, `') : '(none)') + '`');
-                    process.exit(0);
-                  }
-                  methodsArr = methodsArr.filter(function (im) { return (im.type || '').toLowerCase() !== removeType; });
-                  await patchMethods(methodsArr);
-                  await revalidate(slug);
-                  await addReaction('+1');
-                  await postComment(
-                    '✅ **PocketBase Bot**: Removed install method **`' + removed[0].type + '`** from **`' + slug + '`**\n\n' +
-                    '*Executed by @' + actor + '*'
-                  );
-
-                } else {
-                  // ── METHOD EDIT ──────────────────────────────────────────────
-                  const editParts = methodArgs.match(/^(\S+)\s+(.+)$/);
-                  if (!editParts) {
-                    await addReaction('-1');
-                    await postComment(
-                      '❌ **PocketBase Bot**: Invalid `method` syntax.\n\n' +
-                      '**Usage:**\n```\n/pocketbase ' + slug + ' method list\n' +
-                      '/pocketbase ' + slug + ' method <type> cpu=4 ram=2048 hdd=20\n' +
-                      '/pocketbase ' + slug + ' method <type> config_path="/opt/app/.env"\n' +
-                      '/pocketbase ' + slug + ' method add <type> cpu=2 ram=2048 hdd=8\n' +
-                      '/pocketbase ' + slug + ' method remove <type>\n```'
-                    );
-                    process.exit(0);
-                  }
-                  const targetType = editParts[1].toLowerCase();
-                  const parsed = parseKVPairs(editParts[2]);
-
-                  const unknown = Object.keys(parsed).filter(function (k) { return !ALL_METHOD_KEYS[k]; });
-                  if (unknown.length > 0) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: Unknown method field(s): `' + unknown.join('`, `') + '`\n\n**Allowed:** `' + Object.keys(ALL_METHOD_KEYS).join('`, `') + '`');
-                    process.exit(0);
-                  }
-                  if (Object.keys(parsed).length === 0) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: No valid `key=value` pairs found.\n\n**Allowed:** `' + Object.keys(ALL_METHOD_KEYS).join('`, `') + '`');
-                    process.exit(0);
-                  }
-
-                  const idx = methodsArr.findIndex(function (im) { return (im.type || '').toLowerCase() === targetType; });
-                  if (idx === -1) {
-                    await addReaction('-1');
-                    const available = methodsArr.map(function (im) { return im.type || '?'; });
-                    await postComment(
-                      '❌ **PocketBase Bot**: No install method `' + targetType + '` found for `' + slug + '`.\n\n' +
-                      '**Available:** `' + (available.length ? available.join('`, `') : '(none)') + '`\n\n' +
-                      'Use `/pocketbase ' + slug + ' method list` to see all methods.'
-                    );
-                    process.exit(0);
-                  }
-
-                  applyMethodChanges(methodsArr[idx], parsed);
-                  await patchMethods(methodsArr);
-                  await revalidate(slug);
-
-                  const changesLines = Object.entries(parsed)
-                    .map(function ([k, v]) {
-                      const unit = k === 'ram' ? ' MB' : k === 'hdd' ? ' GB' : '';
-                      return '- `' + k + '` → `' + v + unit + '`';
-                    }).join('\n');
-                  await addReaction('+1');
-                  await postComment(
-                    '✅ **PocketBase Bot**: Updated install method **`' + methodsArr[idx].type + '`** for **`' + slug + '`**\n\n' +
-                    '**Changes applied:**\n' + changesLines + '\n\n' +
-                    '*Executed by @' + actor + '*'
+                    '❌ **PocketBase Bot**: Invalid `method` syntax.\n\n' +
+                    '**Usage:**\n```\n/pocketbase ' + slug + ' method list\n/pocketbase ' + slug + ' method <type> hdd=10\n/pocketbase ' + slug + ' method <type> cpu=4 ram=2048 hdd=20\n```'
                   );
+                  process.exit(0);
                 }
+                const targetType   = methodParts[1].toLowerCase();
+                const resourcesStr = methodParts[2];
+
+                // Parse resource fields (only cpu/ram/hdd allowed)
+                const RESOURCE_FIELDS = { cpu: true, ram: true, hdd: true };
+                const resourceChanges = {};
+                const rePairs = /([a-z]+)=(\d+)/gi;
+                let m;
+                while ((m = rePairs.exec(resourcesStr)) !== null) {
+                  const key = m[1].toLowerCase();
+                  if (RESOURCE_FIELDS[key]) resourceChanges[key] = parseInt(m[2], 10);
+                }
+                if (Object.keys(resourceChanges).length === 0) {
+                  await addReaction('-1');
+                  await postComment('❌ **PocketBase Bot**: No valid resource fields found. Use `cpu=N`, `ram=N`, `hdd=N`.');
+                  process.exit(0);
+                }
+
+                // Find matching method by type name (case-insensitive)
+                const idx = methodsArr.findIndex(function (im) {
+                  return (im.type || '').toLowerCase() === targetType;
+                });
+                if (idx === -1) {
+                  await addReaction('-1');
+                  const availableTypes = methodsArr.map(function (im) { return im.type || '?'; });
+                  await postComment(
+                    '❌ **PocketBase Bot**: No install method with type `' + targetType + '` found for `' + slug + '`.\n\n' +
+                    '**Available types:** `' + (availableTypes.length ? availableTypes.join('`, `') : '(none)') + '`\n\n' +
+                    'Use `/pocketbase ' + slug + ' method list` to see all methods.'
+                  );
+                  process.exit(0);
+                }
+
+                if (!methodsArr[idx].resources) methodsArr[idx].resources = {};
+                if (resourceChanges.cpu != null) methodsArr[idx].resources.cpu = resourceChanges.cpu;
+                if (resourceChanges.ram != null) methodsArr[idx].resources.ram = resourceChanges.ram;
+                if (resourceChanges.hdd != null) methodsArr[idx].resources.hdd = resourceChanges.hdd;
+
+                await patchInstallMethodsJson(methodsArr);
+
+                const changesLines = Object.entries(resourceChanges)
+                  .map(function ([k, v]) { return '- `' + k + '` → `' + v + (k === 'ram' ? ' MB' : k === 'hdd' ? ' GB' : '') + '`'; })
+                  .join('\n');
+                await addReaction('+1');
+                await postComment(
+                  '✅ **PocketBase Bot**: Updated install method **`' + methodsArr[idx].type + '`** for **`' + slug + '`**\n\n' +
+                  '**Changes applied:**\n' + changesLines + '\n\n' +
+                  '*Executed by @' + actor + '*'
+                );
               }
 
             } else if (setMatch) {
-              // ── SET SUBCOMMAND (value from code block) ───────────────────────
+              // ── SET SUBCOMMAND (multi-line / HTML / special chars via code block) ──
               const fieldName = setMatch[1].toLowerCase();
               const SET_ALLOWED = {
                 name: 'string', description: 'string', logo: 'string',
@@ -692,7 +531,6 @@ jobs:
                 await postComment('❌ **PocketBase Bot**: PATCH failed for `' + slug + '`:\n```\n' + setPatchRes.body + '\n```');
                 process.exit(1);
               }
-              await revalidate(slug);
               const preview = codeBlockValue.length > 300 ? codeBlockValue.substring(0, 300) + '…' : codeBlockValue;
               await addReaction('+1');
               await postComment(
@@ -703,6 +541,11 @@ jobs:
 
             } else {
               // ── FIELD=VALUE PATH ─────────────────────────────────────────────
+              const fieldsStr = rest;
+
+              // Skipped: slug, script_created/updated, created (auto), categories/
+              // install_methods/notes/type (relations), github_data/install_methods_json/
+              // notes_json (auto-generated), execute_in (select relation), last_update_commit (auto)
               const ALLOWED_FIELDS = {
                 name:             'string',
                 description:      'string',
@@ -725,7 +568,39 @@ jobs:
                 deleted_message:  'string',
               };
 
-              const parsedFields = parseKVPairs(rest);
+              // Field=value parser (handles quoted values and empty=null)
+              function parseFields(str) {
+                const fields = {};
+                let pos = 0;
+                while (pos < str.length) {
+                  while (pos < str.length && /\s/.test(str[pos])) pos++;
+                  if (pos >= str.length) break;
+                  let keyStart = pos;
+                  while (pos < str.length && str[pos] !== '=' && !/\s/.test(str[pos])) pos++;
+                  const key = str.substring(keyStart, pos).trim();
+                  if (!key || pos >= str.length || str[pos] !== '=') { pos++; continue; }
+                  pos++;
+                  let value;
+                  if (str[pos] === '"') {
+                    pos++;
+                    let valStart = pos;
+                    while (pos < str.length && str[pos] !== '"') {
+                      if (str[pos] === '\\') pos++;
+                      pos++;
+                    }
+                    value = str.substring(valStart, pos).replace(/\\"/g, '"');
+                    if (pos < str.length) pos++;
+                  } else {
+                    let valStart = pos;
+                    while (pos < str.length && !/\s/.test(str[pos])) pos++;
+                    value = str.substring(valStart, pos);
+                  }
+                  fields[key] = value;
+                }
+                return fields;
+              }
+
+              const parsedFields = parseFields(fieldsStr);
 
               const unknownFields = Object.keys(parsedFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
               if (unknownFields.length > 0) {
@@ -780,7 +655,6 @@ jobs:
                 await postComment('❌ **PocketBase Bot**: PATCH failed for `' + slug + '`:\n```\n' + patchRes.body + '\n```');
                 process.exit(1);
               }
-              await revalidate(slug);
               await addReaction('+1');
               const changesLines = Object.entries(payload)
                 .map(function ([k, v]) { return '- `' + k + '` → `' + JSON.stringify(v) + '`'; })

.github/workflows/push-json-to-pocketbase.yml

@@ -170,6 +170,7 @@ jobs:
               website: data.website,
               logo: data.logo,
               description: data.description,
+              config_path: data.config_path,
               default_user: (data.default_credentials && data.default_credentials.username) || data.default_user || null,
               default_passwd: (data.default_credentials && data.default_credentials.password) || data.default_passwd || null,
               is_dev: false

.gitignore

@@ -2,14 +2,32 @@
 .DS_Store
 Thumbs.db
 
-# Editor & IDE files
+# Editor & IDE files (keeping .vscode settings but ignoring unnecessary metadata)
 !.vscode/
 .vscode/*.workspace
 .vscode/*.tmp
 
-# Log files
+# Log and Cache files
 logs/
 *.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Python-specific exclusions
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.venv/
+venv/
+env/
+*.env
+
+# API and Backend specific exclusions
+api/.env
+api/__pycache__/
+api/*.sqlite3
 
 # Install scripts and temporary files
 install/tmp/
@@ -23,7 +41,7 @@ vm/*.vmdk
 vm/*.iso
 vm/*.bak
 
-# Miscellaneous temporary files
+# Miscellaneous temporary or unnecessary files
 *.bak
 *.swp
 *.swo
@@ -31,7 +49,22 @@ vm/*.bak
 *.tmp
 *.backup
 
-# JSON temporary files
-json/
+# JSON configuration backups
 json/*.bak
 json/*.tmp
+json/.vscode/
+
+# Ignore compiled binaries or packaged artifacts
+*.exe
+*.dll
+*.bin
+*.deb
+*.rpm
+*.tar.gz
+*.zip
+*.tgz
+
+# Ignore repository metadata or Git itself
+.git/
+.gitignore
+.vscode/settings.json

.vscode/.editorconfig

@@ -0,0 +1,16 @@
+; editorconfig.org
+root = true
+
+[*]
+charset                     = utf-8
+continuation_indent_size    = 2
+end_of_line                 = lf
+indent_size                 = 2
+indent_style                = space
+insert_final_newline        = true
+max_line_length             = 120
+tab_width                   = 2
+; trim_trailing_whitespace    = true ; disabled until files are cleaned up
+
+[*.md]
+trim_trailing_whitespace    = false

CONTRIBUTING.md

@@ -1,137 +0,0 @@
-# Contributing to Proxmox VE Helper-Scripts
-
-Welcome! We're glad you want to contribute. This guide covers everything you need to add new scripts, improve existing ones, or help in other ways.
-
-For detailed coding standards and full documentation, visit **[community-scripts.org/docs](https://community-scripts.org/docs)**.
-
----
-
-## How Can I Help?
-
-> [!IMPORTANT]
-> **New scripts** must always be submitted to [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) first — not to this repository.
-> PRs with new scripts opened directly against ProxmoxVE **will be closed without review**.
-> **Bug fixes, improvements, and features for existing scripts** go here (ProxmoxVE).
-
-| I want to…                                  | Where to go                                                                                  |
-| :------------------------------------------ | :------------------------------------------------------------------------------------------- |
-| **Add a brand-new script**                  | [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) — testing repo for new scripts |
-| **Fix a bug or improve an existing script** | This repo (ProxmoxVE) — open a PR here                                                       |
-| **Add a feature to an existing script**     | This repo (ProxmoxVE) — open a PR here                                                       |
-| Report a bug or broken script               | [Open an Issue](https://github.com/community-scripts/ProxmoxVE/issues)                       |
-| Request a new script or feature             | [Start a Discussion](https://github.com/community-scripts/ProxmoxVE/discussions)             |
-| Report a security vulnerability             | [Security Policy](SECURITY.md)                                                               |
-| Chat with contributors                      | [Discord](https://discord.gg/3AnUqsXnmK)                                                     |
-
----
-
-## Prerequisites
-
-Before writing scripts, we recommend setting up:
-
-- **Visual Studio Code** with these extensions:
-  - [Shell Syntax](https://marketplace.visualstudio.com/items?itemName=bmalehorn.shell-syntax)
-  - [ShellCheck](https://marketplace.visualstudio.com/items?itemName=timonwong.shellcheck)
-  - [Shell Format](https://marketplace.visualstudio.com/items?itemName=foxundermoon.shell-format)
-
----
-
-## Script Structure
-
-Every script consists of two files:
-
-| File                         | Purpose                                                 |
-| :--------------------------- | :------------------------------------------------------ |
-| `ct/AppName.sh`              | Container creation, variable setup, and update handling |
-| `install/AppName-install.sh` | Application installation logic                          |
-
-Use existing scripts in [`ct/`](ct/) and [`install/`](install/) as reference. Full coding standards and annotated templates are at **[community-scripts.org/docs/contribution](https://community-scripts.org/docs/contribution)**.
-
----
-
-## Contribution Process
-
-### Adding a new script
-
-New scripts are **not accepted directly in this repository**. The workflow is:
-
-1. Fork [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) and clone it
-2. Create a branch: `git switch -c feat/myapp`
-3. Write your two script files:
-   - `ct/myapp.sh`
-   - `install/myapp-install.sh`
-4. Test thoroughly in ProxmoxVED — run the script against a real Proxmox instance
-5. Open a PR in **ProxmoxVED** for review and testing
-6. Once accepted and verified there, the script will be promoted to ProxmoxVE by maintainers
-
-Follow the coding standards at [community-scripts.org/docs/contribution](https://community-scripts.org/docs/contribution).
-
----
-
-### Fixing a bug or improving an existing script
-
-Changes to scripts that already exist in ProxmoxVE go directly here:
-
-1. Fork **this repository** (ProxmoxVE) and clone it:
-
-   ```bash
-   git clone https://github.com/YOUR_USERNAME/ProxmoxVE
-   cd ProxmoxVE
-   ```
-
-2. Create a branch:
-
-   ```bash
-   git switch -c fix/myapp-description
-   ```
-
-3. Make your changes to the relevant files in `ct/` and/or `install/`
-
-4. Open a PR from your fork to `community-scripts/ProxmoxVE/main`
-
-Your PR should only contain the files you changed. Do not include unrelated modifications.
-
----
-
-## Code Standards
-
-Key rules at a glance:
-
-- One script per service — keep them focused
-- Naming convention: lowercase, hyphen-separated (`my-app.sh`)
-- Shebang: `#!/usr/bin/env bash`
-- Quote all variables: `"$VAR"` not `$VAR`
-- Use lowercase variable names
-- Do not hardcode credentials or sensitive values
-
-Full standards and examples: **[community-scripts.org/docs/contribution](https://community-scripts.org/docs/contribution)**
-
----
-
-## Developer Mode & Debugging
-
-Set the `dev_mode` variable to enable debugging features when testing. Flags can be combined (comma-separated):
-
-```bash
-dev_mode="trace,keep" bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/myapp.sh)"
-```
-
-| Flag         | Description                                                  |
-| :----------- | :----------------------------------------------------------- |
-| `trace`      | Enables `set -x` for maximum verbosity during execution      |
-| `keep`       | Prevents the container from being deleted if the build fails |
-| `pause`      | Pauses execution at key points before customization          |
-| `breakpoint` | Drops to a shell at hardcoded `breakpoint` calls in scripts  |
-| `logs`       | Saves detailed build logs to `/var/log/community-scripts/`   |
-| `dryrun`     | Bypasses actual container creation (limited support)         |
-| `motd`       | Forces an update of the Message of the Day                   |
-
----
-
-## Notes
-
-- **Website metadata** (name, description, logo, tags) is managed via the website — use the "Report Issue" link on any script page to request changes. Do not submit metadata changes via repo files.
-- **JSON files** in `json/` define script properties used by the website. See existing files for structure reference.
-- Keep PRs small and focused. One fix or feature per PR is ideal.
-- PRs with **new scripts** opened against ProxmoxVE will be closed — submit them to [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) instead.
-- PRs that fail CI checks will not be merged.

README.md

@@ -1,209 +1,283 @@
 <div align="center">
-  <img src="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png" height="112px" alt="Proxmox VE Helper-Scripts Logo" />
-
+  <img src="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png" height="120px" alt="Proxmox VE Helper-Scripts Logo" />
+  
   <h1>Proxmox VE Helper-Scripts</h1>
-  <p><strong>One-command installations for services, containers, and VMs on Proxmox VE</strong><br/>
-  A community project — built on the foundation of <a href="https://github.com/tteck">@tteck</a>'s original work</p>
+  <p><em>A Community Legacy in Memory of @tteck</em></p>
 
   <p>
-    <a href="https://community-scripts.org"><img src="https://img.shields.io/badge/Website-community--scripts.org-4c9b3f?style=flat-square" /></a>
-    <a href="https://discord.gg/3AnUqsXnmK"><img src="https://img.shields.io/badge/Discord-Join_us-7289da?style=flat-square&logo=discord&logoColor=white" /></a>
-    <a href="https://github.com/community-scripts/ProxmoxVE/stargazers"><img src="https://img.shields.io/github/stars/community-scripts/ProxmoxVE?style=flat-square&label=Stars&color=f5a623" /></a>
-    <a href="https://github.com/community-scripts/ProxmoxVE/blob/main/CHANGELOG.md"><img src="https://img.shields.io/badge/Changelog-view-6c5ce7?style=flat-square" /></a>
-    <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue?style=flat-square" /></a>
+    <a href="https://helper-scripts.com">
+      <img src="https://img.shields.io/badge/🌐_Website-Visit-4c9b3f?style=for-the-badge&labelColor=2d3748" alt="Website" />
+    </a>
+    <a href="https://discord.gg/3AnUqsXnmK">
+      <img src="https://img.shields.io/badge/💬_Discord-Join-7289da?style=for-the-badge&labelColor=2d3748" alt="Discord" />
+    </a>
+    <a href="https://ko-fi.com/community_scripts">
+      <img src="https://img.shields.io/badge/❤️_Support-Donate-FF5F5F?style=for-the-badge&labelColor=2d3748" alt="Donate" />
+    </a>
   </p>
+
+  <p>
+    <a href="https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/README.md">
+      <img src="https://img.shields.io/badge/🤝_Contribute-Guidelines-ff4785?style=for-the-badge&labelColor=2d3748" alt="Contribute" />
+    </a>
+    <a href="https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/USER_SUBMITTED_GUIDES.md">
+      <img src="https://img.shields.io/badge/📚_Guides-Read-0077b5?style=for-the-badge&labelColor=2d3748" alt="Guides" />
+    </a>
+    <a href="https://github.com/community-scripts/ProxmoxVE/blob/main/CHANGELOG.md">
+      <img src="https://img.shields.io/badge/📋_Changelog-View-6c5ce7?style=for-the-badge&labelColor=2d3748" alt="Changelog" />
+    </a>
+  </p>
+
+  <br />
+
+ **Simplify your Proxmox VE setup with community-driven automation scripts**  
+ Originally created by tteck, now maintained and expanded by the community
+
+</div>
+
+<br />
+
+<div align="center">
+  <sub>🙌 <strong>Shoutout to</strong></sub>
+  <br />
+  <br />
+  <a href="https://selfh.st/">
+    <img src="https://img.shields.io/badge/selfh.st-Icons_for_Self--Hosted-2563eb?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMjQiIGhlaWdodD0iMjQiIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cGF0aCBkPSJNMTIgMkM2LjQ4IDIgMiA2LjQ4IDIgMTJzNC40OCAxMCAxMCAxMCAxMC00LjQ4IDEwLTEwUzE3LjUyIDIgMTIgMnptMCAxOGMtNC40MSAwLTgtMy41OS04LThzMy41OS04IDgtOCA4IDMuNTkgOCA4LTMuNTkgOC04IDh6IiBmaWxsPSJ3aGl0ZSIvPjwvc3ZnPg==&labelColor=1e3a8a" alt="selfh.st Icons" />
+  </a>
+  <br />
+  <sub><a href="https://github.com/selfhst/icons">View on GitHub</a> • Consistent, beautiful icons for 5000+ self-hosted apps</sub>
 </div>
 
 ---
 
-## What is this?
+## 🎯 Key Features
 
-**Simplify your Proxmox VE setup with community-driven automation scripts.**
+<div align="center">
 
-Install and configure popular self-hosted services with a single command — no manual package hunting, no config file archaeology. Paste a command into your Proxmox shell, answer a few prompts, and your container or VM is up and running.
-
-The collection covers hundreds of services across categories like home automation, media servers, networking tools, databases, monitoring stacks, and more.
-
----
-
-## Requirements
-
-| Component      | Details                                          |
-| -------------- | ------------------------------------------------ |
-| **Proxmox VE** | Version 8.4, 9.0, or 9.1                         |
-| **Host OS**    | Proxmox VE (Debian-based)                        |
-| **Access**     | Root shell access on the Proxmox host            |
-| **Network**    | Internet connection required during installation |
-
----
-
-## Getting Started
-
-The fastest way to find and run scripts:
-
-1. Go to **[community-scripts.org](https://community-scripts.org)**
-2. Search for the service you want (e.g. "Home Assistant", "Nginx Proxy Manager", "Jellyfin")
-3. Copy the one-line install command from the script page
-4. Open your **Proxmox Shell** and paste it
-5. Choose between **Default** or **Advanced** setup and follow the prompts
-
-Each script page documents what the container includes, default resource allocation, and post-install notes.
-
----
-
-## How Scripts Work
-
-Every script follows the same pattern:
-
-**Default mode** — Picks sensible resource defaults (CPU, RAM, storage) and asks only the minimum required questions. Most installs finish in under five minutes.
-
-**Advanced mode** — Gives you full control over container settings, networking, storage backends, and application-level configuration before anything is installed.
-
-After installation, each container ships with a **post-install helper** accessible from the Proxmox shell. It handles common tasks like:
-
-- Applying updates to the installed service
-- Changing application settings without manually editing config files
-- Basic troubleshooting and log access
-
----
-
-## What's Included
-
-The repository covers a wide range of categories. A few examples:
-
-| Category        | Examples                                            |
-| --------------- | --------------------------------------------------- |
-| Home Automation | Home Assistant, Zigbee2MQTT, ESPHome, Node-RED      |
-| Media           | Jellyfin, Plex, Radarr, Sonarr, Immich              |
-| Networking      | AdGuard Home, Nginx Proxy Manager, Pi-hole, Traefik |
-| Monitoring      | Grafana, Prometheus, Uptime Kuma, Netdata           |
-| Databases       | PostgreSQL, MariaDB, Redis, InfluxDB                |
-| Security        | Vaultwarden, CrowdSec, Authentik                    |
-| Dev & Tools     | Gitea, Portainer, VS Code Server, n8n               |
-
-> Browse the full list at **[community-scripts.org/categories](https://community-scripts.org/categories)** — new scripts are added regularly.
-
----
-
-## Contributing
-
-This project runs on community contributions. Whether you want to write new scripts, improve existing ones, or just report a bug — every bit helps.
-
-### Where to start
-
-| I want to…                            | Go here                                                                                           |
-| ------------------------------------- | ------------------------------------------------------------------------------------------------- |
-| Add a **new** script                  | [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) — new scripts are tested here first |
-| Fix or improve an **existing** script | [Contributing Guidelines](CONTRIBUTING.md) — open a PR in this repo                               |
-| Report a bug or broken script         | [Issues](https://github.com/community-scripts/ProxmoxVE/issues)                                   |
-| Request a new script or feature       | [Discussions](https://github.com/community-scripts/ProxmoxVE/discussions)                         |
-| Report a security vulnerability       | [Security Policy](SECURITY.md)                                                                    |
-| Get help or chat with other users     | [Discord](https://discord.gg/3AnUqsXnmK)                                                          |
-
-### Before you open a PR
-
-- **New scripts go to [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED), not here.** PRs with new scripts opened directly against this repo will be closed.
-- Bug fixes and improvements to existing scripts belong in this repo — read the [Contributing Guidelines](CONTRIBUTING.md) first.
-- Keep PRs focused. One fix or feature per PR.
-- Document what your script installs and any non-obvious decisions in the corresponding JSON metadata file.
-
----
-
-## Core Team
-
-<table align="center">
+<table>
   <tr>
-    <td align="center">
-      <a href="https://github.com/MickLesk">
-        <img src="https://github.com/MickLesk.png" width="80" height="80" style="border-radius:50%" alt="MickLesk" /><br/>
-        <sub><b>MickLesk</b></sub>
+    <td align="center" width="25%">
+      <h3>⚡ Quick Setup</h3>
+      <p>One-command installations for popular services and containers</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>⚙️ Flexible Config</h3>
+      <p>Simple mode for beginners, advanced options for power users</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>🔄 Auto Updates</h3>
+      <p>Keep your installations current with built-in update mechanisms</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>🛠️ Easy Management</h3>
+      <p>Post-install scripts for configuration and troubleshooting</p>
+    </td>
+  </tr>
+  <tr>
+    <td align="center" width="25%">
+      <h3>👥 Community Driven</h3>
+      <p>Actively maintained with contributions from users worldwide</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>📖 Well Documented</h3>
+      <p>Comprehensive guides and community support</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>🔒 Secure</h3>
+      <p>Regular security updates and best practices</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>⚡ Performance</h3>
+      <p>Optimized configurations for best performance</p>
+    </td>
+  </tr>
+</table>
+
+</div>
+
+---
+
+## 📋 Requirements
+
+<div align="center">
+
+<table>
+  <tr>
+    <td align="center" width="33%">
+      <h3>🖥️ Proxmox VE</h3>
+      <p>Version: 8.4.x | 9.0.x | 9.1.x</p>
+    </td>
+    <td align="center" width="33%">
+      <h3>🐧 Operating System</h3>
+      <p>Debian-based with Proxmox Tools</p>
+    </td>
+    <td align="center" width="33%">
+      <h3>🌐 Network</h3>
+      <p>Internet connection required</p>
+    </td>
+  </tr>
+</table>
+
+</div>
+
+---
+
+## 📥 Getting Started
+
+Choose your preferred installation method:
+
+### Method 1: One-Click Web Installer
+
+The fastest way to get started:
+
+1. Visit **[community-scripts.org](https://community-scripts.org/)** 🌐
+2. Search for your desired script (e.g., "Home Assistant", "Docker")
+3. Copy the bash command displayed on the script page
+4. Open your **Proxmox Shell** and paste the command
+5. Press Enter and follow the interactive prompts
+
+### Method 2: PVEScripts-Local
+
+Install a convenient script manager directly in your Proxmox UI:
+
+```bash
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/pve-scripts-local.sh)"
+```
+
+This adds a menu to your Proxmox interface for easy script access without visiting the website.
+
+📖 **Learn more:** [ProxmoxVE-Local Repository](https://github.com/community-scripts/ProxmoxVE-Local)
+
+---
+
+## 💬 Join the Community
+
+<div align="center">
+
+<table>
+  <tr>
+    <td align="center" width="33%">
+      <h3>💬 Discord</h3>
+      <p>Real-time chat, support, and discussions</p>
+      <a href="https://discord.gg/3AnUqsXnmK">
+        <img src="https://img.shields.io/badge/Join-7289da?style=for-the-badge&logo=discord&logoColor=white" alt="Discord" />
       </a>
     </td>
-    <td align="center">
-      <a href="https://github.com/michelroegl-brunner">
-        <img src="https://github.com/michelroegl-brunner.png" width="80" height="80" style="border-radius:50%" alt="michelroegl-brunner" /><br/>
-        <sub><b>michelroegl-brunner</b></sub>
+    <td align="center" width="33%">
+      <h3>💭 Discussions</h3>
+      <p>Feature requests, Q&A, and ideas</p>
+      <a href="https://github.com/community-scripts/ProxmoxVE/discussions">
+        <img src="https://img.shields.io/badge/Discuss-238636?style=for-the-badge&logo=github&logoColor=white" alt="Discussions" />
       </a>
     </td>
-    <td align="center">
-      <a href="https://github.com/BramSuurdje">
-        <img src="https://github.com/BramSuurdje.png" width="80" height="80" style="border-radius:50%" alt="BramSuurdje" /><br/>
-        <sub><b>BramSuurdje</b></sub>
-      </a>
-    </td>
-    <td align="center">
-      <a href="https://github.com/CrazyWolf13">
-        <img src="https://github.com/CrazyWolf13.png" width="80" height="80" style="border-radius:50%" alt="CrazyWolf13" /><br/>
-        <sub><b>CrazyWolf13</b></sub>
-      </a>
-    </td>
-    <td align="center">
-      <a href="https://github.com/tremor021">
-        <img src="https://github.com/tremor021.png" width="80" height="80" style="border-radius:50%" alt="tremor021" /><br/>
-        <sub><b>tremor021</b></sub>
-      </a>
-    </td>
-    <td align="center">
-      <a href="https://github.com/vhsdream">
-        <img src="https://github.com/vhsdream.png" width="80" height="80" style="border-radius:50%" alt="vhsdream" /><br/>
-        <sub><b>vhsdream</b></sub>
+    <td align="center" width="33%">
+      <h3>🐛 Issues</h3>
+      <p>Bug reports and issue tracking</p>
+      <a href="https://github.com/community-scripts/ProxmoxVE/issues">
+        <img src="https://img.shields.io/badge/Report-d73a4a?style=for-the-badge&logo=github&logoColor=white" alt="Issues" />
       </a>
     </td>
   </tr>
 </table>
 
+</div>
+
 ---
 
-## Project Activity
+## 🛠️ Contribute
 
+<div align="center">
+
+<table>
+  <tr>
+    <td align="center" width="25%">
+      <h3>💻 Code</h3>
+      <p>Add new scripts or improve existing ones</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>📝 Documentation</h3>
+      <p>Write guides, improve READMEs, translate content</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>🧪 Testing</h3>
+      <p>Test scripts and report compatibility issues</p>
+    </td>
+    <td align="center" width="25%">
+      <h3>💡 Ideas</h3>
+      <p>Suggest features or workflow improvements</p>
+    </td>
+  </tr>
+</table>
+
+</div>
+
+<div align="center">
+  <br />
+  
+  👉 Check our **[Contributing Guidelines](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/README.md)** to get started
+  
+</div>
+
+---
+
+## ❤️ Support the Project
+
+This project is maintained by volunteers in memory of tteck. Your support helps us maintain infrastructure, improve documentation, and give back to important causes.
+
+**🎗️ 30% of all donations go directly to cancer research and hospice care**
+
+<div align="center">
+
+<a href="https://ko-fi.com/community_scripts">
+  <img src="https://img.shields.io/badge/☕_Buy_us_a_coffee-Support_on_Ko--fi-FF5F5F?style=for-the-badge&labelColor=2d3748" alt="Support on Ko-fi" />
+</a>
+
+<br />
+<sub>Every contribution helps keep this project alive and supports meaningful causes</sub>
+
+</div>
+
+---
+
+## 📈 Project Statistics
 <p align="center">
   <img
     src="https://repobeats.axiom.co/api/embed/57edde03e00f88d739bdb5b844ff7d07dd079375.svg"
-    alt="Repository activity"
-    width="700"
+    alt="Repobeats analytics"
+    width="650"
   />
 </p>
 
 <p align="center">
   <a href="https://star-history.com/#community-scripts/ProxmoxVE&Date">
     <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date&theme=dark" />
-      <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date" />
-      <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date" width="700" />
+      <source
+        media="(prefers-color-scheme: dark)"
+        srcset="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date&theme=dark"
+      />
+      <source
+        media="(prefers-color-scheme: light)"
+        srcset="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date"
+      />
+      <img
+        alt="Star History Chart"
+        src="https://api.star-history.com/svg?repos=community-scripts/ProxmoxVE&type=Date"
+        width="650"
+      />
     </picture>
   </a>
 </p>
 
 ---
 
-## Support the Project
+## 📜 License
 
-This project is maintained by volunteers. All infrastructure costs come out of pocket, and the work is done in people's spare time.
-
-**30% of all donations are forwarded directly to cancer research and hospice care** — a cause that was important to tteck.
-
-<div align="center">
-  <a href="https://ko-fi.com/community_scripts">
-    <img src="https://img.shields.io/badge/Support_on_Ko--fi-FF5F5F?style=for-the-badge&logo=ko-fi&logoColor=white" alt="Support on Ko-fi" />
-  </a>
-  &nbsp;
-  <a href="https://community-scripts.org/donate">
-    <img src="https://img.shields.io/badge/Donate-community--scripts.org%2Fdonate-4c9b3f?style=for-the-badge" alt="Donate via community-scripts.org" />
-  </a>
-</div>
-
----
-
-## License
-
-This project is licensed under the [MIT License](LICENSE) — free to use, modify, and redistribute for personal and commercial purposes.
-
-See the full license text in [LICENSE](LICENSE).
+This project is licensed under the **[MIT License](LICENSE)** - feel free to use, modify, and distribute.
 
 ---
 
 <div align="center">
-  <sub>Built on the foundation of <a href="https://github.com/tteck">tteck</a>'s original work · <a href="https://github.com/tteck/Proxmox">Original Repository</a></sub><br/>
-  <sub>Maintained and expanded by the community · In memory of tteck</sub><br/>
+  <sub>Made with ❤️ by the Proxmox community in memory of tteck</sub>
+  <br />
   <sub><i>Proxmox® is a registered trademark of <a href="https://www.proxmox.com/en/about/company">Proxmox Server Solutions GmbH</a></i></sub>
 </div>

ct/alpine-ironclaw.sh

@@ -1,71 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/nearai/ironclaw
-
-APP="Alpine-IronClaw"
-var_tags="${var_tags:-ai;agent;alpine}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-alpine}"
-var_version="${var_version:-3.23}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/local/bin/ironclaw ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "ironclaw-bin" "nearai/ironclaw"; then
-    msg_info "Stopping Service"
-    rc-service ironclaw stop 2>/dev/null || true
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration"
-    cp /root/.ironclaw/.env /root/ironclaw.env.bak
-    msg_ok "Backed up Configuration"
-
-    fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
-      "ironclaw-$(uname -m)-unknown-linux-musl.tar.gz"
-    chmod +x /usr/local/bin/ironclaw
-
-    msg_info "Restoring Configuration"
-    cp /root/ironclaw.env.bak /root/.ironclaw/.env
-    rm -f /root/ironclaw.env.bak
-    msg_ok "Restored Configuration"
-
-    msg_info "Starting Service"
-    rc-service ironclaw start
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Complete setup by running:${CL}"
-echo -e "${TAB}${BGN}ironclaw onboard${CL}"
-echo -e "${INFO}${YW} Then start the service:${CL}"
-echo -e "${TAB}${BGN}rc-service ironclaw start${CL}"
-echo -e "${INFO}${YW} Access the Web UI at:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
-echo -e "${INFO}${YW} Auth token and database credentials:${CL}"
-echo -e "${TAB}${BGN}cat /root/.ironclaw/.env${CL}"

ct/alpine-wakapi.sh

@@ -22,6 +22,8 @@ catch_errors
 
 function update_script() {
   header_info
+  check_container_storage
+  check_container_resources
   if [[ ! -d /opt/wakapi ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
@@ -42,10 +44,12 @@ function update_script() {
     cp /opt/wakapi/config.yml /opt/wakapi/wakapi_db.db /opt/wakapi-backup/
     msg_ok "Created backup"
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wakapi" "muety/wakapi" "prebuild" "latest" "/opt/wakapi" "wakapi_linux_amd64.zip"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wakapi" "muety/wakapi" "tarball"
 
     msg_info "Configuring Wakapi"
     cd /opt/wakapi
+    $STD go mod download
+    $STD go build -o wakapi
     cp /opt/wakapi-backup/config.yml /opt/wakapi/
     cp /opt/wakapi-backup/wakapi_db.db /opt/wakapi/
     rm -rf /opt/wakapi-backup

ct/bambuddy.sh

@@ -1,90 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Adrian-RDA
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/maziggy/bambuddy
-
-APP="Bambuddy"
-var_tags="${var_tags:-media;3d-printing}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/bambuddy ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  ensure_dependencies ffmpeg
-
-  if check_for_gh_release "bambuddy" "maziggy/bambuddy"; then
-    msg_info "Stopping Service"
-    systemctl stop bambuddy
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration and Data"
-    cp /opt/bambuddy/.env /opt/bambuddy.env.bak
-    cp -r /opt/bambuddy/data /opt/bambuddy_data_bak
-    [[ -f /opt/bambuddy/bambuddy.db ]] && cp /opt/bambuddy/bambuddy.db /opt/bambuddy.db.bak
-    [[ -f /opt/bambuddy/bambutrack.db ]] && cp /opt/bambuddy/bambutrack.db /opt/bambutrack.db.bak
-    [[ -d /opt/bambuddy/archive ]] && cp -r /opt/bambuddy/archive /opt/bambuddy_archive_bak
-    msg_ok "Backed up Configuration and Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bambuddy" "maziggy/bambuddy" "tarball" "latest" "/opt/bambuddy"
-
-    msg_info "Updating Python Dependencies"
-    cd /opt/bambuddy
-    $STD uv venv
-    $STD uv pip install -r requirements.txt
-    msg_ok "Updated Python Dependencies"
-
-    msg_info "Rebuilding Frontend"
-    cd /opt/bambuddy/frontend
-    $STD npm install
-    $STD npm run build
-    msg_ok "Rebuilt Frontend"
-
-    msg_info "Restoring Configuration and Data"
-    mkdir -p /opt/bambuddy/data
-    cp /opt/bambuddy.env.bak /opt/bambuddy/.env
-    cp -r /opt/bambuddy_data_bak/. /opt/bambuddy/data/
-    [[ -f /opt/bambuddy.db.bak ]] && cp /opt/bambuddy.db.bak /opt/bambuddy/bambuddy.db
-    [[ -f /opt/bambutrack.db.bak ]] && cp /opt/bambutrack.db.bak /opt/bambuddy/bambutrack.db
-    if [[ -d /opt/bambuddy_archive_bak ]]; then
-      mkdir -p /opt/bambuddy/archive
-      cp -r /opt/bambuddy_archive_bak/. /opt/bambuddy/archive/
-    fi
-    rm -f /opt/bambuddy.env.bak /opt/bambuddy.db.bak /opt/bambutrack.db.bak
-    rm -rf /opt/bambuddy_data_bak /opt/bambuddy_archive_bak
-    msg_ok "Restored Configuration and Data"
-
-    msg_info "Starting Service"
-    systemctl start bambuddy
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"

ct/bentopdf.sh

@@ -42,6 +42,7 @@ function update_script() {
     msg_info "Updating BentoPDF"
     cd /opt/bentopdf
     $STD npm ci --no-audit --no-fund
+    $STD npm install http-server -g
     if [[ -f /opt/production.env ]]; then
       mv /opt/production.env ./.env.production
     else
@@ -51,97 +52,15 @@ function update_script() {
     export SIMPLE_MODE=true
     export VITE_USE_CDN=true
     $STD npm run build:all
-    if [[ ! -f /opt/bentopdf/dist/config.json ]]; then
-      cat <<'EOF' >/opt/bentopdf/dist/config.json
-{}
-EOF
-    fi
     msg_ok "Updated BentoPDF"
 
     msg_info "Starting Service"
-    ensure_dependencies nginx openssl
-    if [[ ! -f /etc/ssl/private/bentopdf-selfsigned.key || ! -f /etc/ssl/certs/bentopdf-selfsigned.crt ]]; then
-      CERT_CN="$(hostname -I | awk '{print $1}')"
-      $STD openssl req -x509 -nodes -newkey rsa:2048 -days 3650 \
-      -keyout /etc/ssl/private/bentopdf-selfsigned.key \
-      -out /etc/ssl/certs/bentopdf-selfsigned.crt \
-      -subj "/CN=${CERT_CN}"
+    if grep -q '8080' /etc/systemd/system/bentopdf.service; then
+      sed -i -e 's|/bentopdf|/bentopdf/dist|' \
+        -e 's|npx.*|npx http-server -g -b -d false -r --no-dotfiles|' \
+        /etc/systemd/system/bentopdf.service
+      systemctl daemon-reload
     fi
-    cat <<'EOF' >/etc/nginx/sites-available/bentopdf
-server {
-    listen 8080;
-    server_name _;
-    return 301 https://$host:8443$request_uri;
-  }
-
-  server {
-    listen 8443 ssl;
-    server_name _;
-    ssl_certificate /etc/ssl/certs/bentopdf-selfsigned.crt;
-    ssl_certificate_key /etc/ssl/private/bentopdf-selfsigned.key;
-    root /opt/bentopdf/dist;
-    index index.html;
-
-    # Required for LibreOffice WASM (Word/Excel/PowerPoint to PDF via SharedArrayBuffer)
-    add_header Cross-Origin-Opener-Policy "same-origin" always;
-    add_header Cross-Origin-Embedder-Policy "require-corp" always;
-    add_header Cross-Origin-Resource-Policy "cross-origin" always;
-    add_header X-Content-Type-Options "nosniff" always;
-    add_header X-Frame-Options "SAMEORIGIN" always;
-
-    gzip_static on;
-
-    location ~* /libreoffice-wasm/soffice\.wasm\.gz$ {
-      gzip off;
-      types {} default_type application/wasm;
-      add_header Content-Encoding gzip;
-      add_header Vary "Accept-Encoding";
-      add_header Cache-Control "public, immutable";
-    }
-
-    location ~* /libreoffice-wasm/soffice\.data\.gz$ {
-      gzip off;
-      types {} default_type application/octet-stream;
-      add_header Content-Encoding gzip;
-      add_header Vary "Accept-Encoding";
-      add_header Cache-Control "public, immutable";
-    }
-
-    location ~* \.wasm$ {
-      types {} default_type application/wasm;
-      expires 1y;
-      add_header Cache-Control "public, immutable";
-    }
-
-    location ~* \.(wasm\.gz|data\.gz|data)$ {
-      expires 1y;
-      add_header Cache-Control "public, immutable";
-    }
-
-    location / {
-        try_files $uri $uri/ $uri.html =404;
-    }
-
-    error_page 404 /404.html;
-}
-EOF
-    rm -f /etc/nginx/sites-enabled/default
-    ln -sf /etc/nginx/sites-available/bentopdf /etc/nginx/sites-enabled/bentopdf
-    cat <<'EOF' >/etc/systemd/system/bentopdf.service
-[Unit]
-Description=BentoPDF Service
-After=network.target
-
-[Service]
-Type=simple
-ExecStart=/usr/sbin/nginx -g "daemon off;"
-ExecReload=/bin/kill -HUP $MAINPID
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-    systemctl daemon-reload
     systemctl start bentopdf
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
@@ -156,4 +75,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:8443${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"

ct/birdnet-go.sh

@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/tphakala/birdnet-go
-
-APP="BirdNET-Go"
-var_tags="${var_tags:-monitoring;ai;nature}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-12}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-var_gpu="${var_gpu:-no}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/local/bin/birdnet-go ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "birdnet" "tphakala/birdnet-go"; then
-    msg_info "Stopping Service"
-    systemctl stop birdnet
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "birdnet" "tphakala/birdnet-go" "prebuild" "latest" "/opt/birdnet" "birdnet-go-linux-amd64.tar.gz"
-
-    msg_info "Deploying Binary"
-    cp /opt/birdnet/birdnet-go /usr/local/bin/birdnet-go
-    chmod +x /usr/local/bin/birdnet-go
-    cp -r /opt/birdnet/libtensorflowlite_c.so /usr/local/lib/ || true
-    ldconfig
-    msg_ok "Deployed Binary"
-
-    msg_info "Starting Service"
-    systemctl start birdnet
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"

ct/booklore.sh

@@ -0,0 +1,113 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/booklore-app/BookLore
+
+APP="BookLore"
+var_tags="${var_tags:-books;library}"
+var_cpu="${var_cpu:-3}"
+var_ram="${var_ram:-3072}"
+var_disk="${var_disk:-7}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/booklore ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "booklore" "booklore-app/BookLore"; then
+    JAVA_VERSION="25" setup_java
+    NODE_VERSION="22" setup_nodejs
+    setup_mariadb
+    setup_yq
+    ensure_dependencies ffmpeg
+
+    msg_info "Stopping Service"
+    systemctl stop booklore
+    msg_ok "Stopped Service"
+
+    if grep -qE "^BOOKLORE_(DATA_PATH|BOOKDROP_PATH|BOOKS_PATH|PORT)=" /opt/booklore_storage/.env 2>/dev/null; then
+      msg_info "Migrating old environment variables"
+      sed -i 's/^BOOKLORE_DATA_PATH=/APP_PATH_CONFIG=/g' /opt/booklore_storage/.env
+      sed -i 's/^BOOKLORE_BOOKDROP_PATH=/APP_BOOKDROP_FOLDER=/g' /opt/booklore_storage/.env
+      sed -i '/^BOOKLORE_BOOKS_PATH=/d' /opt/booklore_storage/.env
+      sed -i '/^BOOKLORE_PORT=/d' /opt/booklore_storage/.env
+      msg_ok "Migrated old environment variables"
+    fi
+
+    msg_info "Backing up old installation"
+    mv /opt/booklore /opt/booklore_bak
+    msg_ok "Backed up old installation"
+
+    fetch_and_deploy_gh_release "booklore" "booklore-app/BookLore" "tarball"
+
+    msg_info "Building Frontend"
+    cd /opt/booklore/booklore-ui
+    $STD npm install --force
+    $STD npm run build --configuration=production
+    msg_ok "Built Frontend"
+
+    msg_info "Embedding Frontend into Backend"
+    mkdir -p /opt/booklore/booklore-api/src/main/resources/static
+    cp -r /opt/booklore/booklore-ui/dist/booklore/browser/* /opt/booklore/booklore-api/src/main/resources/static/
+    msg_ok "Embedded Frontend into Backend"
+
+    msg_info "Building Backend"
+    cd /opt/booklore/booklore-api
+    APP_VERSION=$(get_latest_github_release "booklore-app/BookLore")
+    yq eval ".app.version = \"${APP_VERSION}\"" -i src/main/resources/application.yaml
+    $STD ./gradlew clean build -x test --no-daemon
+    mkdir -p /opt/booklore/dist
+    JAR_PATH=$(find /opt/booklore/booklore-api/build/libs -maxdepth 1 -type f -name "booklore-api-*.jar" ! -name "*plain*" | head -n1)
+    if [[ -z "$JAR_PATH" ]]; then
+      msg_error "Backend JAR not found"
+      exit
+    fi
+    cp "$JAR_PATH" /opt/booklore/dist/app.jar
+    msg_ok "Built Backend"
+
+    if systemctl is-active --quiet nginx 2>/dev/null; then
+      msg_info "Removing Nginx (no longer needed)"
+      systemctl disable --now nginx
+      $STD apt-get purge -y nginx nginx-common
+      msg_ok "Removed Nginx"
+    fi
+
+    if ! grep -q "^SERVER_PORT=" /opt/booklore_storage/.env 2>/dev/null; then
+      echo "SERVER_PORT=6060" >>/opt/booklore_storage/.env
+    fi
+
+    sed -i 's|ExecStart=.*|ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -XX:MaxRAMPercentage=75.0 -XX:+ExitOnOutOfMemoryError -jar /opt/booklore/dist/app.jar|' /etc/systemd/system/booklore.service
+    systemctl daemon-reload
+
+    msg_info "Starting Service"
+    systemctl start booklore
+    rm -rf /opt/booklore_bak
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6060${CL}"

ct/bookstack.sh

@@ -29,7 +29,6 @@ function update_script() {
     exit
   fi
   setup_mariadb
-  ensure_dependencies git
   if check_for_gh_release "bookstack" "BookStackApp/BookStack"; then
     msg_info "Stopping Apache2"
     systemctl stop apache2

ct/bytestash.sh

@@ -29,41 +29,28 @@ function update_script() {
     exit
   fi
   if check_for_gh_release "bytestash" "jordan-dalby/ByteStash"; then
-    msg_info "Stopping Services"
-    systemctl stop bytestash-backend bytestash-frontend
-    msg_ok "Services Stopped"
+    read -rp "${TAB3}Did you make a backup via application WebUI? (y/n): " backuped
+    if [[ "$backuped" =~ ^[Yy]$ ]]; then
+      msg_info "Stopping Services"
+      systemctl stop bytestash-backend bytestash-frontend
+      msg_ok "Services Stopped"
 
-    msg_info "Backing up data"
-    tmp_dir="/opt/bytestash-data-backup"
-    mkdir -p "$tmp_dir"
-    if [[ -d /opt/bytestash/data ]]; then
-      cp -r /opt/bytestash/data "$tmp_dir"/data
-    elif [[ -d /opt/data ]]; then
-      cp -r /opt/data "$tmp_dir"/data
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bytestash" "jordan-dalby/ByteStash" "tarball"
+
+      msg_info "Configuring ByteStash"
+      cd /opt/bytestash/server
+      $STD npm install
+      cd /opt/bytestash/client
+      $STD npm install
+      msg_ok "Updated ByteStash"
+
+      msg_info "Starting Services"
+      systemctl start bytestash-backend bytestash-frontend
+      msg_ok "Started Services"
+    else
+      msg_error "PLEASE MAKE A BACKUP FIRST!"
+      exit
     fi
-    msg_ok "Data backed up"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bytestash" "jordan-dalby/ByteStash" "tarball"
-
-    msg_info "Restoring data"
-    if [[ -d "$tmp_dir"/data ]]; then
-      mkdir -p /opt/bytestash/data
-      cp -r "$tmp_dir"/data/* /opt/bytestash/data/
-      rm -rf "$tmp_dir"
-    fi
-    msg_ok "Data restored"
-
-    msg_info "Configuring ByteStash"
-    cd /opt/bytestash/server
-    $STD npm install
-    cd /opt/bytestash/client
-    $STD npm install
-    msg_ok "Updated ByteStash"
-
-    msg_info "Starting Services"
-    systemctl start bytestash-backend bytestash-frontend
-    msg_ok "Started Services"
-
     msg_ok "Updated successfully!"
   fi
   exit

ct/changedetection.sh

@@ -34,11 +34,11 @@ function update_script() {
   NODE_VERSION="24" setup_nodejs
 
   msg_info "Updating ${APP}"
-  $STD pip3 install changedetection.io --upgrade --break-system-packages --ignore-installed typing_extensions
+  $STD pip3 install changedetection.io --upgrade
   msg_ok "Updated ${APP}"
 
   msg_info "Updating Playwright"
-  $STD pip3 install playwright --upgrade --break-system-packages
+  $STD pip3 install playwright --upgrade
   msg_ok "Updated Playwright"
 
   if [[ -f /etc/systemd/system/browserless.service ]]; then

ct/checkmk.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
+var_version="${var_version:-12}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -29,11 +29,10 @@ function update_script() {
   fi
 
   RELEASE=$(curl -fsSL https://api.github.com/repos/checkmk/checkmk/tags | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -Ev 'rc|b' | sort -V | tail -n 1)
-  RELEASE="${RELEASE%%+*}"
   msg_info "Updating ${APP} to v${RELEASE}"
   $STD omd stop monitoring
   $STD omd cp monitoring monitoringbackup
-  curl -fsSL "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-raw-${RELEASE}_0.$(get_os_info codename)_amd64.deb" -o "/opt/checkmk.deb"
+  curl -fsSL "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-raw-${RELEASE}_0.bookworm_amd64.deb" -o "/opt/checkmk.deb"
   $STD apt-get install -y /opt/checkmk.deb
   $STD omd --force -V ${RELEASE}.cre update --conflict=install monitoring
   $STD omd start monitoring

ct/daemonsync.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 tteck
+# Author: tteck (tteckster)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://daemonsync.me/
+
+APP="Daemon Sync"
+var_tags="${var_tags:-sync}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /var ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  msg_info "Updating LXC"
+  $STD apt update
+  $STD apt -y upgrade
+  msg_ok "Updated LXC"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8084${CL}"

ct/dispatcharr.sh

@@ -70,7 +70,7 @@ function update_script() {
       source /opt/dispatcharr/.env
       set +o allexport
       if [[ -n "$POSTGRES_DB" ]] && [[ -n "$POSTGRES_USER" ]] && [[ -n "$POSTGRES_PASSWORD" ]]; then
-        PGPASSWORD=$POSTGRES_PASSWORD pg_dump -U "$POSTGRES_USER" -h "${POSTGRES_HOST:-localhost}" -p "${POSTGRES_PORT:-5432}" "$POSTGRES_DB" >/tmp/dispatcharr_db_$(date +%F).sql
+        PGPASSWORD=$POSTGRES_PASSWORD pg_dump -U $POSTGRES_USER -h ${POSTGRES_HOST:-localhost} $POSTGRES_DB >/tmp/dispatcharr_db_$(date +%F).sql
         msg_info "Database backup created"
       fi
     fi

ct/domain-monitor.sh

@@ -34,7 +34,7 @@ function update_script() {
   fi
 
   if ! grep -Fq "www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php" /etc/crontab; then
-    echo "0 0 * * * www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php" >>/etc/crontab
+    echo "0 0 * * * www-data /usr/bin/php /opt/domain-monitor/cron/check_domains.php" >> /etc/crontab
   fi
 
   if check_for_gh_release "domain-monitor" "Hosteroid/domain-monitor"; then
@@ -52,7 +52,6 @@ function update_script() {
     msg_info "Updating Domain Monitor"
     cd /opt/domain-monitor
     $STD composer install
-    chown -R www-data:www-data /opt/domain-monitor
     msg_ok "Updated Domain Monitor"
 
     msg_info "Restoring backup"

ct/drawdb.sh

@@ -1,53 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/drawdb-io/drawdb
-
-APP="DrawDB"
-var_tags="${var_tags:-database;dev-tools}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-6144}"
-var_disk="${var_disk:-5}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/drawdb ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_tag "drawdb" "drawdb-io/drawdb"; then
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_tag "drawdb" "drawdb-io/drawdb" "latest" "/opt/drawdb"
-
-    msg_info "Rebuilding Frontend"
-    cd /opt/drawdb
-    $STD npm ci
-    NODE_OPTIONS="--max-old-space-size=4096" $STD npm run build
-    sed -i '/<head>/a <script>if(!crypto.randomUUID){crypto.randomUUID=function(){return([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,function(c){return(c^(crypto.getRandomValues(new Uint8Array(1))[0]&(15>>c/4))).toString(16)})}};</script>' /opt/drawdb/dist/index.html
-    msg_ok "Rebuilt Frontend"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/fileflows.sh

@@ -29,11 +29,11 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-
+  
   update_available=$(curl -fsSL -X 'GET' "http://localhost:19200/api/status/update-available" -H 'accept: application/json' | jq .UpdateAvailable)
   if [[ "${update_available}" == "true" ]]; then
     msg_info "Stopping Service"
-    systemctl stop fileflows*
+    systemctl stop fileflows
     msg_info "Stopped Service"
 
     msg_info "Creating Backup"
@@ -45,7 +45,7 @@ function update_script() {
     fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"
 
     msg_info "Starting Service"
-    systemctl start fileflows*
+    systemctl start fileflows
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
   else

ct/geopulse.sh

@@ -1,71 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/tess1o/geopulse
-
-APP="GeoPulse"
-var_tags="${var_tags:-location;tracking;gps}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/geopulse/backend/geopulse-backend ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "geopulse-backend" "tess1o/geopulse"; then
-    msg_info "Stopping Service"
-    systemctl stop geopulse-backend
-    msg_ok "Stopped Service"
-
-    if [[ "$(uname -m)" == "aarch64" ]]; then
-      if grep -qi "raspberry\|bcm" /proc/cpuinfo 2>/dev/null; then
-        BINARY_PATTERN="geopulse-backend-native-arm64-compat-*"
-      else
-        BINARY_PATTERN="geopulse-backend-native-arm64-[!c]*"
-      fi
-    else
-      if grep -q avx2 /proc/cpuinfo && grep -q bmi2 /proc/cpuinfo && grep -q fma /proc/cpuinfo; then
-        BINARY_PATTERN="geopulse-backend-native-amd64-[!c]*"
-      else
-        BINARY_PATTERN="geopulse-backend-native-amd64-compat-*"
-      fi
-    fi
-
-    fetch_and_deploy_gh_release "geopulse-backend" "tess1o/geopulse" "singlefile" "latest" "/opt/geopulse/backend" "${BINARY_PATTERN}"
-    fetch_and_deploy_gh_release "geopulse-frontend" "tess1o/geopulse" "prebuild" "latest" "/var/www/geopulse" "geopulse-frontend-*.tar.gz"
-
-    msg_info "Starting Service"
-    systemctl start geopulse-backend
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
-echo -e "${INFO}${YW} To create an admin account, run:${CL}"
-echo -e "${TAB}${BGN}/usr/local/bin/create-geopulse-admin${CL}"

ct/gokapi.sh

@@ -32,16 +32,7 @@ function update_script() {
     systemctl stop gokapi
     msg_ok "Stopped Service"
 
-    fetch_and_deploy_gh_release "gokapi" "Forceu/Gokapi" "prebuild" "latest" "/opt/gokapi" "*linux*amd64.zip"
-
-    # Migrate from pre-v2.2.4 binary name (gokapi-linux_amd64 -> gokapi)
-    if [[ -f /opt/gokapi/gokapi-linux_amd64 ]]; then
-      rm -f /opt/gokapi/gokapi-linux_amd64
-    fi
-    if grep -q "gokapi-linux_amd64" /etc/systemd/system/gokapi.service 2>/dev/null; then
-      sed -i 's|gokapi-linux_amd64|gokapi|g' /etc/systemd/system/gokapi.service
-      systemctl daemon-reload
-    fi
+    fetch_and_deploy_gh_release "gokapi" "Forceu/Gokapi" "prebuild" "latest" "/opt/gokapi" "gokapi-linux_amd64.zip"
 
     msg_info "Starting Service"
     systemctl start gokapi

ct/graylog.sh

@@ -64,12 +64,6 @@ function update_script() {
 }
 
 start
-
-if [[ $(sysctl -n vm.max_map_count 2>/dev/null) -lt 262144 ]]; then
-  sysctl -w vm.max_map_count=262144 >/dev/null 2>&1
-  echo "vm.max_map_count=262144" >/etc/sysctl.d/graylog.conf
-fi
-
 build_container
 description
 

ct/grist.sh

@@ -46,13 +46,12 @@ function update_script() {
     msg_info "Updating Grist"
     mkdir -p /opt/grist/docs
     cp -n /opt/grist_bak/.env /opt/grist/.env
-    if ls /opt/grist_bak/docs/* &>/dev/null; then
-      cp -r /opt/grist_bak/docs/* /opt/grist/docs/
-    fi
-    [[ -f /opt/grist_bak/grist-sessions.db ]] && cp /opt/grist_bak/grist-sessions.db /opt/grist/grist-sessions.db
-    [[ -f /opt/grist_bak/landing.db ]] && cp /opt/grist_bak/landing.db /opt/grist/landing.db
+    cp -r /opt/grist_bak/docs/* /opt/grist/docs/
+    cp /opt/grist_bak/grist-sessions.db /opt/grist/grist-sessions.db
+    cp /opt/grist_bak/landing.db /opt/grist/landing.db
     cd /opt/grist
     $STD yarn install
+    $STD yarn run install:ee
     $STD yarn run build:prod
     $STD yarn run install:python
     msg_ok "Updated Grist"

ct/headers/alpine-ironclaw

@@ -1,6 +0,0 @@
-    ___    __      _                  ____                 ________              
-   /   |  / /___  (_)___  ___        /  _/________  ____  / ____/ /___ __      __
-  / /| | / / __ \/ / __ \/ _ \______ / // ___/ __ \/ __ \/ /   / / __ `/ | /| / /
- / ___ |/ / /_/ / / / / /  __/_____// // /  / /_/ / / / / /___/ / /_/ /| |/ |/ / 
-/_/  |_/_/ .___/_/_/ /_/\___/     /___/_/   \____/_/ /_/\____/_/\__,_/ |__/|__/  
-        /_/                                                                      

ct/headers/bambuddy

@@ -1,6 +0,0 @@
-    ____                  __              __    __     
-   / __ )____ _____ ___  / /_  __  ______/ /___/ /_  __
-  / __  / __ `/ __ `__ \/ __ \/ / / / __  / __  / / / /
- / /_/ / /_/ / / / / / / /_/ / /_/ / /_/ / /_/ / /_/ / 
-/_____/\__,_/_/ /_/ /_/_.___/\__,_/\__,_/\__,_/\__, /  
-                                              /____/   

ct/headers/birdnet-go

@@ -1,6 +0,0 @@
-    ____  _          ___   ______________    ______    
-   / __ )(_)________/ / | / / ____/_  __/   / ____/___ 
-  / __  / / ___/ __  /  |/ / __/   / /_____/ / __/ __ \
- / /_/ / / /  / /_/ / /|  / /___  / /_____/ /_/ / /_/ /
-/_____/_/_/   \__,_/_/ |_/_____/ /_/      \____/\____/ 
-                                                       

ct/headers/booklore

@@ -0,0 +1,6 @@
+    ____              __   __                  
+   / __ )____  ____  / /__/ /   ____  ________ 
+  / __  / __ \/ __ \/ //_/ /   / __ \/ ___/ _ \
+ / /_/ / /_/ / /_/ / ,< / /___/ /_/ / /  /  __/
+/_____/\____/\____/_/|_/_____/\____/_/   \___/ 
+                                               

ct/headers/daemonsync

@@ -0,0 +1,6 @@
+    ____                                      _____                 
+   / __ \____ ____  ____ ___  ____  ____     / ___/__  ______  _____
+  / / / / __ `/ _ \/ __ `__ \/ __ \/ __ \    \__ \/ / / / __ \/ ___/
+ / /_/ / /_/ /  __/ / / / / / /_/ / / / /   ___/ / /_/ / / / / /__  
+/_____/\__,_/\___/_/ /_/ /_/\____/_/ /_/   /____/\__, /_/ /_/\___/  
+                                                /____/              

ct/headers/drawdb

@@ -1,6 +0,0 @@
-    ____                      ____  ____ 
-   / __ \_________ __      __/ __ \/ __ )
-  / / / / ___/ __ `/ | /| / / / / / __  |
- / /_/ / /  / /_/ /| |/ |/ / /_/ / /_/ / 
-/_____/_/   \__,_/ |__/|__/_____/_____/  
-                                         

ct/headers/geopulse

@@ -1,6 +0,0 @@
-   ______           ____        __        
-  / ____/__  ____  / __ \__  __/ /_______ 
- / / __/ _ \/ __ \/ /_/ / / / / / ___/ _ \
-/ /_/ /  __/ /_/ / ____/ /_/ / (__  )  __/
-\____/\___/\____/_/    \__,_/_/____/\___/ 
-                                          

ct/headers/homelable

@@ -1,6 +0,0 @@
-    __  __                     __      __    __   
-   / / / /___  ____ ___  ___  / /___ _/ /_  / /__ 
-  / /_/ / __ \/ __ `__ \/ _ \/ / __ `/ __ \/ / _ \
- / __  / /_/ / / / / / /  __/ / /_/ / /_/ / /  __/
-/_/ /_/\____/_/ /_/ /_/\___/_/\__,_/_.___/_/\___/ 
-                                                  

ct/headers/ironclaw

@@ -1,6 +0,0 @@
-    ____                 ________              
-   /  _/________  ____  / ____/ /___ __      __
-   / // ___/ __ \/ __ \/ /   / / __ `/ | /| / /
- _/ // /  / /_/ / / / / /___/ / /_/ /| |/ |/ / 
-/___/_/   \____/_/ /_/\____/_/\__,_/ |__/|__/  
-                                               

ct/headers/matter-server

@@ -1,6 +0,0 @@
-    __  ___      __  __                 _____                          
-   /  |/  /___ _/ /_/ /____  _____     / ___/___  ______   _____  _____
-  / /|_/ / __ `/ __/ __/ _ \/ ___/_____\__ \/ _ \/ ___/ | / / _ \/ ___/
- / /  / / /_/ / /_/ /_/  __/ /  /_____/__/ /  __/ /   | |/ /  __/ /    
-/_/  /_/\__,_/\__/\__/\___/_/        /____/\___/_/    |___/\___/_/     
-                                                                       

ct/headers/netboot-xyz

@@ -1,6 +0,0 @@
-               __  __                __                  
-   ____  ___  / /_/ /_  ____  ____  / /_  _  ____  ______
-  / __ \/ _ \/ __/ __ \/ __ \/ __ \/ __/ | |/_/ / / /_  /
- / / / /  __/ /_/ /_/ / /_/ / /_/ / /__ _>  </ /_/ / / /_
-/_/ /_/\___/\__/_.___/\____/\____/\__(_)_/|_|\__, / /___/
-                                            /____/       

ct/headers/openthread-br

@@ -1,6 +0,0 @@
-   ____                 ________                        __      ____  ____ 
-  / __ \____  ___  ____/_  __/ /_  ________  ____ _____/ /     / __ )/ __ \
- / / / / __ \/ _ \/ __ \/ / / __ \/ ___/ _ \/ __ `/ __  /_____/ __  / /_/ /
-/ /_/ / /_/ /  __/ / / / / / / / / /  /  __/ /_/ / /_/ /_____/ /_/ / _, _/ 
-\____/ .___/\___/_/ /_/_/ /_/ /_/_/   \___/\__,_/\__,_/     /_____/_/ |_|  
-    /_/                                                                    

ct/headers/pf2etools

@@ -0,0 +1,6 @@
+    ____  _______      ______            __    
+   / __ \/ __/__ \ ___/_  __/___  ____  / /____
+  / /_/ / /_ __/ // _ \/ / / __ \/ __ \/ / ___/
+ / ____/ __// __//  __/ / / /_/ / /_/ / (__  ) 
+/_/   /_/  /____/\___/_/  \____/\____/_/____/  
+                                               

ct/headers/typesense

@@ -0,0 +1,6 @@
+  ______                _____                    
+ /_  __/_  ______  ___ / ___/___  ____  ________ 
+  / / / / / / __ \/ _ \\__ \/ _ \/ __ \/ ___/ _ \
+ / / / /_/ / /_/ /  __/__/ /  __/ / / (__  )  __/
+/_/  \__, / .___/\___/____/\___/_/ /_/____/\___/ 
+    /____/_/                                     

ct/headers/verdaccio

@@ -0,0 +1,6 @@
+ _    __              __                _     
+| |  / /__  _________/ /___ ___________(_)___ 
+| | / / _ \/ ___/ __  / __ `/ ___/ ___/ / __ \
+| |/ /  __/ /  / /_/ / /_/ / /__/ /__/ / /_/ /
+|___/\___/_/   \__,_/\__,_/\___/\___/_/\____/ 
+                                              

ct/headers/yourls

@@ -1,6 +0,0 @@
-__  ______  __  ______  __   _____
-\ \/ / __ \/ / / / __ \/ /  / ___/
- \  / / / / / / / /_/ / /   \__ \ 
- / / /_/ / /_/ / _, _/ /______/ / 
-/_/\____/\____/_/ |_/_____/____/  
-                                  

ct/homarr.sh

@@ -65,8 +65,6 @@ EOF
 
     msg_info "Updating Homarr"
     cp /opt/homarr/redis.conf /etc/redis/redis.conf
-    sed -i -e '$a\' /etc/redis/redis.conf
-    grep -q '^bind 127.0.0.1 -::1$' /etc/redis/redis.conf || echo "bind 127.0.0.1 -::1" >> /etc/redis/redis.conf
     rm /etc/nginx/nginx.conf
     cp /opt/homarr/nginx.conf /etc/nginx/templates/nginx.conf
     msg_ok "Updated Homarr"

ct/homeassistant.sh

@@ -73,7 +73,7 @@ function update_script() {
     $STD curl -fsSL https://github.com/filebrowser/filebrowser/releases/download/v2.23.0/linux-amd64-filebrowser.tar.gz | tar -xzv -C /usr/local/bin
     $STD filebrowser config init -a '0.0.0.0'
     $STD filebrowser config set -a '0.0.0.0'
-    $STD filebrowser users add admin community-scripts.org --perm.admin
+    $STD filebrowser users add admin helper-scripts.com --perm.admin
     msg_ok "Installed FileBrowser"
 
     msg_info "Creating Service"
@@ -93,7 +93,7 @@ WantedBy=default.target" >$service_path
 
     msg_ok "Completed successfully!\n"
     echo -e "FileBrowser should be reachable by going to the following URL.
-         ${BL}http://$LOCAL_IP:8080${CL}   admin|community-scripts.org\n"
+         ${BL}http://$LOCAL_IP:8080${CL}   admin|helper-scripts.com\n"
     exit
   fi
 }

ct/homelable.sh

@@ -1,78 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Pouzor/homelable
-
-APP="Homelable"
-var_tags="${var_tags:-monitoring;network;visualization}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/homelable ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "homelable" "Pouzor/homelable"; then
-    msg_info "Stopping Service"
-    systemctl stop homelable
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration and Data"
-    cp /opt/homelable/backend/.env /opt/homelable.env.bak
-    cp -r /opt/homelable/data /opt/homelable_data_bak
-    msg_ok "Backed up Configuration and Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "homelable" "Pouzor/homelable" "tarball" "latest" "/opt/homelable"
-
-    msg_info "Updating Python Dependencies"
-    cd /opt/homelable/backend
-    $STD uv venv /opt/homelable/backend/.venv
-    $STD uv pip install --python /opt/homelable/backend/.venv/bin/python -r requirements.txt
-    msg_ok "Updated Python Dependencies"
-
-    msg_info "Rebuilding Frontend"
-    cd /opt/homelable/frontend
-    $STD npm ci
-    $STD npm run build
-    msg_ok "Rebuilt Frontend"
-
-    msg_info "Restoring Configuration and Data"
-    cp /opt/homelable.env.bak /opt/homelable/backend/.env
-    cp -r /opt/homelable_data_bak/. /opt/homelable/data/
-    rm -f /opt/homelable.env.bak
-    rm -rf /opt/homelable_data_bak
-    msg_ok "Restored Configuration and Data"
-
-    msg_info "Starting Service"
-    systemctl start homelable
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/immich.sh

@@ -109,7 +109,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="v2.7.5"
+  RELEASE="v2.6.1"
   if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     if [[ $(cat ~/.immich) > "2.5.1" ]]; then
       msg_info "Enabling Maintenance Mode"
@@ -181,12 +181,6 @@ EOF
     unset SHARP_IGNORE_GLOBAL_LIBVIPS
     export SHARP_FORCE_GLOBAL_LIBVIPS=true
     $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
-
-    # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
-    if [[ -f "$APP_DIR/helmet.json" ]]; then
-      jq '.contentSecurityPolicy.directives["upgrade-insecure-requests"] = null' "$APP_DIR/helmet.json" >"$APP_DIR/helmet.json.tmp" && mv "$APP_DIR/helmet.json.tmp" "$APP_DIR/helmet.json"
-    fi
-
     cp "$APP_DIR"/package.json "$APP_DIR"/bin
     sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin
 
@@ -220,10 +214,7 @@ EOF
 
     cd "$SRC_DIR"/machine-learning
     mkdir -p "$ML_DIR"
-    # chown excluding upload dir contents (may be a mount with restricted permissions)
-    chown immich:immich "$INSTALL_DIR"
-    find "$INSTALL_DIR" -maxdepth 1 -mindepth 1 ! -name upload -exec chown -R immich:immich {} +
-    chown immich:immich "${UPLOAD_DIR:-$INSTALL_DIR/upload}" 2>/dev/null || true
+    chown -R immich:immich "$INSTALL_DIR"
     chown immich:immich ./uv.lock
     export VIRTUAL_ENV="${ML_DIR}"/ml-venv
     export UV_HTTP_TIMEOUT=300
@@ -272,28 +263,11 @@ EOF
     [[ ! -f /usr/bin/immich ]] && ln -sf "$APP_DIR"/cli/bin/immich /usr/bin/immich
     [[ ! -f /usr/bin/immich-admin ]] && ln -sf "$APP_DIR"/bin/immich-admin /usr/bin/immich-admin
 
-    if ! grep -q '^DB_HOSTNAME=' "$INSTALL_DIR"/.env; then
-      sed -i '/^DB_DATABASE_NAME/a DB_HOSTNAME=127.0.0.1' "$INSTALL_DIR"/.env
-    fi
-    if ! grep -q 'HELMET_FILE' "$INSTALL_DIR"/.env; then
-      sed -i -e '$a\' "$INSTALL_DIR"/.env
-      echo "IMMICH_HELMET_FILE=true" >>"$INSTALL_DIR"/.env
-    fi
-
-    if grep -q 'ExecStart=/usr/bin/node' /etc/systemd/system/immich-web.service; then
-      sed -i '/^EnvironmentFile=/d' /etc/systemd/system/immich-web.service
-      sed -i "s|^ExecStart=.*|ExecStart=${APP_DIR}/bin/start.sh|" /etc/systemd/system/immich-web.service
-      systemctl daemon-reload
-    fi
-
-    # chown excluding upload dir contents (may be a mount with restricted permissions)
-    chown immich:immich "$INSTALL_DIR"
-    find "$INSTALL_DIR" -maxdepth 1 -mindepth 1 ! -name upload -exec chown -R immich:immich {} +
-    chown immich:immich "${UPLOAD_DIR:-$INSTALL_DIR/upload}" 2>/dev/null || true
+    chown -R immich:immich "$INSTALL_DIR"
     if [[ "${MAINT_MODE:-0}" == 1 ]]; then
       msg_info "Disabling Maintenance Mode"
       cd /opt/immich/app/bin
-      $STD ./immich-admin disable-maintenance-mode || true
+      $STD ./immich-admin disable-maintenance-mode
       unset MAINT_MODE
       $STD cd -
       msg_ok "Disabled Maintenance Mode"
@@ -309,8 +283,7 @@ function compile_libjxl() {
   SOURCE=${SOURCE_DIR}/libjxl
   JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
   JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
-  LIBJXL_REVISION="794a5dcf0d54f9f0b20d288a12e87afb91d20dfc"
-  # : "${LIBJXL_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libjxl.json)}"
+  : "${LIBJXL_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libjxl.json)}"
   if [[ "$LIBJXL_REVISION" != "$(grep 'libjxl' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libjxl"
     [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
@@ -354,8 +327,7 @@ function compile_libjxl() {
 function compile_libheif() {
   SOURCE=${SOURCE_DIR}/libheif
   ensure_dependencies libaom-dev
-  LIBHEIF_REVISION="35dad50a9145332a7bfdf1ff6aef6801fb613d68"
-  # : "${LIBHEIF_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libheif.json)}"
+  : "${LIBHEIF_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libheif.json)}"
   if [[ "${update:-}" ]] || [[ "$LIBHEIF_REVISION" != "$(grep 'libheif' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libheif"
     [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"
@@ -386,8 +358,7 @@ function compile_libheif() {
 
 function compile_libraw() {
   SOURCE=${SOURCE_DIR}/libraw
-  LIBRAW_REVISION="0b56545a4f828743f28a4345cdfdd4c49f9f9a2a"
-  # : "${LIBRAW_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libraw.json)}"
+  : "${LIBRAW_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libraw.json)}"
   if [[ "$LIBRAW_REVISION" != "$(grep 'libraw' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
     msg_info "Recompiling libraw"
     [[ -d "$SOURCE" ]] && rm -rf "$SOURCE"

ct/ironclaw.sh

@@ -1,71 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/nearai/ironclaw
-
-APP="IronClaw"
-var_tags="${var_tags:-ai;agent;security}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/local/bin/ironclaw ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "ironclaw-bin" "nearai/ironclaw"; then
-    msg_info "Stopping Service"
-    systemctl stop ironclaw
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration"
-    cp /root/.ironclaw/.env /root/ironclaw.env.bak
-    msg_ok "Backed up Configuration"
-
-    fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
-      "ironclaw-$(uname -m)-unknown-linux-$([[ -f /etc/alpine-release ]] && echo "musl" || echo "gnu").tar.gz"
-    chmod +x /usr/local/bin/ironclaw
-
-    msg_info "Restoring Configuration"
-    cp /root/ironclaw.env.bak /root/.ironclaw/.env
-    rm -f /root/ironclaw.env.bak
-    msg_ok "Restored Configuration"
-
-    msg_info "Starting Service"
-    systemctl start ironclaw
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Complete setup by running:${CL}"
-echo -e "${TAB}${BGN}ironclaw onboard${CL}"
-echo -e "${INFO}${YW} Then start the service:${CL}"
-echo -e "${TAB}${BGN}systemctl start ironclaw${CL}"
-echo -e "${INFO}${YW} Access the Web UI at:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
-echo -e "${INFO}${YW} Auth token and database credentials:${CL}"
-echo -e "${TAB}${BGN}cat /root/.ironclaw/.env${CL}"

ct/kasm.sh

@@ -15,7 +15,6 @@ var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-0}"
 var_fuse="${var_fuse:-yes}"
 var_tun="${var_tun:-yes}"
-var_kasm_version="${var_kasm_version:-}"
 
 header_info "$APP"
 variables
@@ -33,21 +32,18 @@ function update_script() {
 
   msg_info "Checking for new version"
   CURRENT_VERSION=$(readlink -f /opt/kasm/current | awk -F'/' '{print $4}')
-  KASM_VERSION=$(curl -s https://kasm.com/downloads | grep -oP '<h1[^>]*>.*?</h1>' | sed -E 's/<\/?h1[^>]*>//g' | grep -oP '\d+\.\d+\.\d+')
-  KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION:-var_kasm_version}.tar.gz"
+  KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
+  if [[ -z "$KASM_URL" ]]; then
+    SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
+    if [[ -n "$SERVICE_IMAGE_URL" ]]; then
+      KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+      KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+    fi
+  else
+    KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+  fi
   
-  # KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
-  # if [[ -z "$KASM_URL" ]]; then
-  #   SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
-  #   if [[ -n "$SERVICE_IMAGE_URL" ]]; then
-  #     KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-  #     KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
-  #   fi
-  # else
-  #   KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-  # fi
-  
-  if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
+  if [[ -z "$KASM_URL" ]] || [[ -z "$KASM_VERSION" ]]; then
     msg_error "Unable to detect latest Kasm release URL."
     exit 250
   fi

ct/koillection.sh

@@ -48,9 +48,7 @@ function update_script() {
     
     # Ensure APP_RUNTIME is in .env.local for CLI commands (upgrades from older versions)
     if ! grep -q "APP_RUNTIME" /opt/koillection/.env.local 2>/dev/null; then
-      # Ensure file ends with newline before appending to avoid concatenation
-      [[ -s /opt/koillection/.env.local && -n "$(tail -c 1 /opt/koillection/.env.local)" ]] && echo "" >>/opt/koillection/.env.local
-      echo 'APP_RUNTIME="Symfony\Component\Runtime\SymfonyRuntime"' >>/opt/koillection/.env.local
+      echo 'APP_RUNTIME="Symfony\Component\Runtime\SymfonyRuntime"' >> /opt/koillection/.env.local
     fi
     
     export COMPOSER_ALLOW_SUPERUSER=1

ct/lyrionmusicserver.sh

@@ -30,16 +30,16 @@ function update_script() {
     exit
   fi
 
-  DEB_URL=$(curl_with_retry 'https://lyrion.org/getting-started/' | grep -oP '<a\s[^>]*href="\K[^"]*amd64\.deb(?="[^>]*>)' | head -n 1)
+  DEB_URL=$(curl -s 'https://lyrion.org/getting-started/' | grep -oP '<a\s[^>]*href="\K[^"]*amd64\.deb(?="[^>]*>)' | head -n 1)
   RELEASE=$(echo "$DEB_URL" | grep -oP 'lyrionmusicserver_\K[0-9.]+(?=_amd64\.deb)')
   DEB_FILE="/tmp/lyrionmusicserver_${RELEASE}_amd64.deb"
   if [[ ! -f /opt/lyrion_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/lyrion_version.txt)" ]]; then
     msg_info "Updating $APP to ${RELEASE}"
-    curl_with_retry "$DEB_URL" "$DEB_FILE"
+    curl -fsSL -o "$DEB_FILE" "$DEB_URL"
     $STD apt install "$DEB_FILE" -y
-    systemctl restart lyrionmusicserver
-    rm -f "$DEB_FILE"
-    echo "${RELEASE}" >/opt/lyrion_version.txt
+    systemctl restart lyrion
+    $STD rm -f "$DEB_FILE"
+    echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated $APP to ${RELEASE}"
     msg_ok "Updated successfully!"
   else

ct/matter-server.sh

@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/matter-js/python-matter-server
-
-APP="Matter-Server"
-var_tags="${var_tags:-matter;iot;smart-home}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/matter-server ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "matter-server" "matter-js/python-matter-server"; then
-    msg_info "Stopping Service"
-    systemctl stop matter-server
-    msg_ok "Stopped Service"
-
-    msg_info "Updating Matter Server"
-    MATTER_VERSION=$(get_latest_github_release "matter-js/python-matter-server")
-    $STD uv pip install --python /opt/matter-server/.venv/bin/python --upgrade "python-matter-server[server]==${MATTER_VERSION}"
-    echo "${MATTER_VERSION}" >~/.matter-server
-    msg_ok "Updated Matter Server"
-
-    fetch_and_deploy_gh_release "chip-ota-provider-app" "home-assistant-libs/matter-linux-ota-provider" "singlefile" "latest" "/usr/local/bin" "chip-ota-provider-app-x86-64"
-
-    msg_info "Starting Service"
-    systemctl start matter-server
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Matter Server WebSocket API is running on port 5580.${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}ws://${IP}:5580/ws${CL}"

ct/mealie.sh

@@ -40,7 +40,7 @@ function update_script() {
     cp -f /opt/mealie/mealie.env /opt/mealie.env
     msg_ok "Backup completed"
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
 
     msg_info "Installing Python Dependencies with uv"
     cd /opt/mealie
@@ -49,10 +49,9 @@ function update_script() {
 
     msg_info "Building Frontend"
     MEALIE_VERSION=$(<$HOME/.mealie)
-    SITE_SETTINGS=$(find /opt/mealie/frontend -name "site-settings.vue" -path "*/admin/*" | head -1)
-    $STD sed -i "s|https://github.com/mealie-recipes/mealie/commit/|https://github.com/mealie-recipes/mealie/releases/tag/|g" "$SITE_SETTINGS"
-    $STD sed -i "s|value: data.buildId,|value: \"v${MEALIE_VERSION}\",|g" "$SITE_SETTINGS"
-    $STD sed -i "s|value: data.production ? i18n.t(\"about.production\") : i18n.t(\"about.development\"),|value: \"bare-metal\",|g" "$SITE_SETTINGS"
+    $STD sed -i "s|https://github.com/mealie-recipes/mealie/commit/|https://github.com/mealie-recipes/mealie/releases/tag/|g" /opt/mealie/frontend/pages/admin/site-settings.vue
+    $STD sed -i "s|value: data.buildId,|value: \"v${MEALIE_VERSION}\",|g" /opt/mealie/frontend/pages/admin/site-settings.vue
+    $STD sed -i "s|value: data.production ? i18n.t(\"about.production\") : i18n.t(\"about.development\"),|value: \"bare-metal\",|g" /opt/mealie/frontend/pages/admin/site-settings.vue
     export NUXT_TELEMETRY_DISABLED=1
     cd /opt/mealie/frontend
     $STD yarn install --prefer-offline --frozen-lockfile --non-interactive --production=false --network-timeout 1000000
@@ -98,3 +97,4 @@ msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
 echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9000${CL}"
+

ct/metube.sh

@@ -62,7 +62,6 @@ function update_script() {
       $STD corepack enable
       $STD corepack prepare pnpm --activate || true
     fi
-    echo 'onlyBuiltDependencies=*' >> .npmrc
     $STD pnpm install --frozen-lockfile
     $STD pnpm run build
     msg_ok "Built Frontend"

ct/netboot-xyz.sh

@@ -1,89 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://netboot.xyz
-
-APP="netboot.xyz"
-var_tags="${var_tags:-network;pxe;boot}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-NSAPP="netboot-xyz"
-var_install="${NSAPP}-install"
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f ~/.netboot-xyz ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "netboot-xyz" "netbootxyz/netboot.xyz"; then
-    msg_info "Backing up Configuration"
-    cp /var/www/html/boot.cfg /opt/netboot-xyz-boot.cfg.bak
-    msg_ok "Backed up Configuration"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "netboot-xyz" "netbootxyz/netboot.xyz" "prebuild" "latest" "/var/www/html" "menus.tar.gz"
-
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-efi" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-efi-dsk" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.efi.dsk"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-snp" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-snp.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-snp-dsk" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-snp.efi.dsk"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-snponly" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-snponly.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-dsk" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal.efi.dsk"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-snp" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal-snp.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-snp-dsk" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal-snp.efi.dsk"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-snponly" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal-snponly.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-kpxe" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.kpxe"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-undionly" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-undionly.kpxe"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-kpxe" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal.kpxe"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-lkrn" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.lkrn"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-linux-bin" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-linux.bin"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-dsk" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.dsk"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-pdsk" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.pdsk"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-arm64" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-arm64.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-arm64-snp" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-arm64-snp.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-arm64-snponly" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-arm64-snponly.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-arm64" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal-arm64.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-arm64-snp" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal-arm64-snp.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-metal-arm64-snponly" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-metal-arm64-snponly.efi"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-iso" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.iso"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-img" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz.img"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-arm64-iso" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-arm64.iso"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-arm64-img" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-arm64.img"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-multiarch-iso" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-multiarch.iso"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-multiarch-img" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-multiarch.img"
-    USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-checksums" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-sha256-checksums.txt"
-
-    msg_info "Restoring Configuration"
-    cp /opt/netboot-xyz-boot.cfg.bak /var/www/html/boot.cfg
-    rm -f /opt/netboot-xyz-boot.cfg.bak
-    msg_ok "Restored Configuration"
-
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/nginxproxymanager.sh

@@ -28,6 +28,11 @@ function update_script() {
     exit
   fi
 
+  if [[ $(grep -E '^VERSION_ID=' /etc/os-release) == *"12"* ]]; then
+    msg_error "Wrong Debian version detected!"
+    msg_error "Please create a snapshot first. You must upgrade your LXC to Debian Trixie before updating. Visit: https://github.com/community-scripts/ProxmoxVE/discussions/7489"
+    exit
+  fi
 
   if command -v node &>/dev/null; then
     CURRENT_NODE_VERSION=$(node --version | cut -d'v' -f2 | cut -d'.' -f1)
@@ -86,16 +91,13 @@ Wants=network-online.target
 
 [Service]
 Type=simple
-ExecStartPre=-/bin/mkdir -p /tmp/nginx/body /run/nginx
 ExecStartPre=/usr/local/openresty/nginx/sbin/nginx -t
 ExecStart=/usr/local/openresty/nginx/sbin/nginx -g 'daemon off;'
 
 [Install]
 WantedBy=multi-user.target
 EOF
-    sed -i 's/user npm/user root/g; s/^pid/#pid/g' /usr/local/openresty/nginx/conf/nginx.conf
     systemctl daemon-reload
-    systemctl unmask openresty 2>/dev/null || true
     systemctl restart openresty
     msg_ok "Built OpenResty"
   fi

ct/opencloud.sh

@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  RELEASE="v6.0.0"
+  RELEASE="v5.2.0"
   if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     msg_info "Stopping services"
     systemctl stop opencloud opencloud-wopi

ct/openthread-br.sh

@@ -1,87 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://openthread.io/guides/border-router
-
-APP="OpenThread-BR"
-var_tags="${var_tags:-thread;iot;border-router;matter}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-0}"
-var_tun="${var_tun:-yes}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/ot-br-posix ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  cd /opt/ot-br-posix
-  LOCAL_COMMIT=$(git rev-parse HEAD)
-  $STD git fetch --depth 1 origin main
-  REMOTE_COMMIT=$(git rev-parse origin/main)
-
-  if [[ "${LOCAL_COMMIT}" == "${REMOTE_COMMIT}" ]]; then
-    msg_ok "Already up to date (${LOCAL_COMMIT:0:7})"
-    exit
-  fi
-
-  msg_info "Stopping Services"
-  systemctl stop otbr-web
-  systemctl stop otbr-agent
-  msg_ok "Stopped Services"
-
-  msg_info "Updating Source"
-  $STD git reset --hard origin/main
-  $STD git submodule update --depth 1 --init --recursive
-  msg_ok "Updated Source"
-
-  msg_info "Rebuilding OpenThread Border Router (Patience)"
-  cd /opt/ot-br-posix/build
-  $STD cmake -GNinja \
-    -DBUILD_TESTING=OFF \
-    -DCMAKE_INSTALL_PREFIX=/usr \
-    -DOTBR_DBUS=ON \
-    -DOTBR_MDNS=openthread \
-    -DOTBR_REST=ON \
-    -DOTBR_WEB=ON \
-    -DOTBR_BORDER_ROUTING=ON \
-    -DOTBR_BACKBONE_ROUTER=ON \
-    -DOT_FIREWALL=ON \
-    -DOT_POSIX_NAT64_CIDR="192.168.255.0/24" \
-    ..
-  $STD ninja
-  $STD ninja install
-  msg_ok "Rebuilt OpenThread Border Router"
-
-  msg_info "Starting Services"
-  systemctl start otbr-agent
-  systemctl start otbr-web
-  msg_ok "Started Services"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/papra.sh

@@ -35,37 +35,14 @@ function update_script() {
     msg_ok "Stopped Service"
 
     msg_info "Backing up Configuration"
-    if [[ -f /opt/papra/apps/papra-server/.env ]]; then
-      cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
-    fi
+    cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
     msg_ok "Backed up Configuration"
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball"
 
     msg_info "Building Application"
     cd /opt/papra
-    if [[ -f /opt/papra_env.bak ]]; then
-      cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
-    else
-      msg_warn ".env missing, regenerating from defaults"
-      LOCAL_IP=$(hostname -I | awk '{print $1}')
-      cat <<EOF >/opt/papra/apps/papra-server/.env
-NODE_ENV=production
-SERVER_SERVE_PUBLIC_DIR=true
-PORT=1221
-DATABASE_URL=file:/opt/papra_data/db/db.sqlite
-DOCUMENT_STORAGE_FILESYSTEM_ROOT=/opt/papra_data/documents
-PAPRA_CONFIG_DIR=/opt/papra_data
-AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_TELEMETRY=0
-CLIENT_BASE_URL=http://${LOCAL_IP}:1221
-SERVER_BASE_URL=http://${LOCAL_IP}:1221
-EMAILS_DRY_RUN=true
-INGESTION_FOLDER_IS_ENABLED=true
-INGESTION_FOLDER_ROOT_PATH=/opt/papra_data/ingestion
-EOF
-    fi
+    cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
     $STD pnpm install --frozen-lockfile
     $STD pnpm --filter "@papra/app-client..." run build
     $STD pnpm --filter "@papra/app-server..." run build

ct/pf2etools.sh

@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: TheRealVira
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://pf2etools.com/ | Github: https://github.com/Pf2eToolsOrg/Pf2eTools
+
+APP="Pf2eTools"
+var_tags="${var_tags:-wiki}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-6}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d "/opt/${APP}" ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "pf2etools" "Pf2eToolsOrg/Pf2eTools"; then
+    msg_info "Updating System"
+    $STD apt update
+    $STD apt -y upgrade
+    msg_ok "Updated System"
+
+    rm -rf /opt/Pf2eTools
+    fetch_and_deploy_gh_release "pf2etools" "Pf2eToolsOrg/Pf2eTools" "tarball" "latest" "/opt/Pf2eTools"
+
+    msg_info "Updating ${APP}"
+    cd /opt/Pf2eTools
+    $STD npm install
+    $STD npm run build
+    chown -R www-data: "/opt/${APP}"
+    chmod -R 755 "/opt/${APP}"
+    msg_ok "Updated ${APP}"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/podman-homeassistant.sh

@@ -68,7 +68,7 @@ function update_script() {
     $STD curl -fsSL https://raw.githubusercontent.com/filebrowser/get/master/get.sh | bash
     $STD filebrowser config init -a '0.0.0.0'
     $STD filebrowser config set -a '0.0.0.0'
-    $STD filebrowser users add admin community-scripts.org --perm.admin
+    $STD filebrowser users add admin helper-scripts.com --perm.admin
     msg_ok "Installed FileBrowser"
 
     msg_info "Creating Service"
@@ -90,7 +90,7 @@ EOF
 
     msg_ok "Completed successfully!\n"
     echo -e "FileBrowser should be reachable by going to the following URL.
-         ${BL}http://$LOCAL_IP:8080${CL}   admin|community-scripts.org\n"
+         ${BL}http://$LOCAL_IP:8080${CL}   admin|helper-scripts.com\n"
     exit
   fi
   if [ "$UPD" == "4" ]; then

ct/reitti.sh

@@ -37,136 +37,39 @@ function update_script() {
     fi
   fi
 
-  # Migrate v3 -> v4: Remove RabbitMQ (no longer required) / Photon / Spring Settings
-  if systemctl is-enabled --quiet rabbitmq-server 2>/dev/null; then
-    msg_info "Migrating to v4: Removing RabbitMQ"
-    systemctl stop rabbitmq-server
-    systemctl disable rabbitmq-server
-    $STD apt-get purge -y rabbitmq-server erlang-base
-    $STD apt-get autoremove -y
-    msg_ok "Removed RabbitMQ"
+  if [ ! -d /var/cache/nginx/tiles ]; then
+    msg_info "Installing Nginx Tile Cache"
+    mkdir -p /var/cache/nginx/tiles
+    $STD apt install -y nginx
+    cat <<EOF >/etc/nginx/nginx.conf
+user www-data;
+
+events {
+  worker_connections 1024;
+}
+http {
+  proxy_cache_path /var/cache/nginx/tiles levels=1:2 keys_zone=tiles:10m max_size=1g inactive=30d use_temp_path=off;
+  server {
+    listen 80;
+    location / {
+      proxy_pass https://tile.openstreetmap.org/;
+      proxy_set_header Host tile.openstreetmap.org;
+      proxy_set_header User-Agent "Reitti/1.0";
+      proxy_cache tiles;
+      proxy_cache_valid 200 30d;
+      proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
+    }
+  }
+}
+EOF
+    chown -R www-data:www-data /var/cache/nginx
+    chmod -R 750 /var/cache/nginx
+    systemctl restart nginx
+    echo "reitti.ui.tiles.cache.url=http://127.0.0.1" >> /opt/reitti/application.properties
+    systemctl restart reitti
+    msg_info "Installed Nginx Tile Cache"
   fi
-
-  if systemctl is-enabled --quiet photon 2>/dev/null; then
-    msg_info "Migrating to v4: Removing Photon service"
-    systemctl stop photon
-    systemctl disable photon
-    rm -f /etc/systemd/system/photon.service
-    systemctl daemon-reload
-    msg_ok "Removed Photon service"
-  fi
-
-  if grep -q "spring.rabbitmq\|PHOTON_BASE_URL\|PROCESSING_WAIT_TIME\|DANGEROUS_LIFE" /opt/reitti/application.properties 2>/dev/null; then
-    msg_info "Migrating to v4: Rewriting application.properties"
-    local DB_URL DB_USER DB_PASS
-    DB_URL=$(grep '^spring.datasource.url=' /opt/reitti/application.properties | cut -d'=' -f2-)
-    DB_USER=$(grep '^spring.datasource.username=' /opt/reitti/application.properties | cut -d'=' -f2-)
-    DB_PASS=$(grep '^spring.datasource.password=' /opt/reitti/application.properties | cut -d'=' -f2-)
-    cp /opt/reitti/application.properties /opt/reitti/application.properties.bak
-    cat <<PROPEOF >/opt/reitti/application.properties
-# Server configuration
-server.port=8080
-server.servlet.context-path=/
-server.forward-headers-strategy=framework
-server.compression.enabled=true
-server.compression.min-response-size=1024
-server.compression.mime-types=text/plain,application/json
-
-# Logging configuration
-logging.level.root=INFO
-logging.level.org.hibernate.engine.jdbc.spi.SqlExceptionHelper=FATAL
-logging.level.com.dedicatedcode.reitti=INFO
-
-# Internationalization
-spring.messages.basename=messages
-spring.messages.encoding=UTF-8
-spring.messages.cache-duration=3600
-spring.messages.fallback-to-system-locale=false
-
-# PostgreSQL configuration
-spring.datasource.url=${DB_URL}
-spring.datasource.username=${DB_USER}
-spring.datasource.password=${DB_PASS}
-spring.datasource.hikari.maximum-pool-size=20
-
-# Redis configuration
-spring.data.redis.host=127.0.0.1
-spring.data.redis.port=6379
-spring.data.redis.username=
-spring.data.redis.password=
-spring.data.redis.database=0
-spring.cache.redis.key-prefix=
-
-spring.cache.cache-names=processed-visits,significant-places,users,magic-links,configurations,transport-mode-configs,avatarThumbnails,avatarData,user-settings
-spring.cache.redis.time-to-live=1d
-
-# Upload configuration
-spring.servlet.multipart.max-file-size=5GB
-spring.servlet.multipart.max-request-size=5GB
-server.tomcat.max-part-count=100
-
-# Rqueue configuration
-rqueue.web.enable=false
-rqueue.job.enabled=false
-rqueue.message.durability.in-terminal-state=0
-rqueue.key.prefix=\${spring.cache.redis.key-prefix}
-rqueue.message.converter.provider.class=com.dedicatedcode.reitti.config.RQueueCustomMessageConverter
-
-# Application-specific settings
-reitti.server.advertise-uri=
-
-reitti.security.local-login.disable=false
-
-# OIDC / Security Settings
-reitti.security.oidc.enabled=false
-reitti.security.oidc.registration.enabled=false
-
-reitti.import.batch-size=10000
-reitti.import.processing-idle-start-time=10
-
-reitti.geo-point-filter.max-speed-kmh=1000
-reitti.geo-point-filter.max-accuracy-meters=100
-reitti.geo-point-filter.history-lookback-hours=24
-reitti.geo-point-filter.window-size=50
-
-reitti.process-data.schedule=0 */10 * * * *
-reitti.process-data.refresh-views.schedule=0 0 4 * * *
-reitti.imports.schedule=0 5/10 * * * *
-reitti.imports.owntracks-recorder.schedule=\${reitti.imports.schedule}
-
-# Geocoding service configuration
-reitti.geocoding.max-errors=10
-reitti.geocoding.photon.base-url=
-
-# Tiles Configuration
-reitti.ui.tiles.cache.url=http://127.0.0.1
-reitti.ui.tiles.default.service=https://tile.openstreetmap.org/{z}/{x}/{y}.png
-reitti.ui.tiles.default.attribution=&copy; <a href="https://www.openstreetmap.org/copyright">OpenStreetMap</a> contributors
-
-# Data management configuration
-reitti.data-management.enabled=false
-reitti.data-management.preview-cleanup.cron=0 0 4 * * *
-
-reitti.storage.path=data/
-reitti.storage.cleanup.cron=0 0 4 * * *
-
-# Location data density normalization
-reitti.location.density.target-points-per-minute=4
-
-# Logging buffer
-reitti.logging.buffer-size=1000
-reitti.logging.max-buffer-size=10000
-
-spring.config.import=optional:oidc.properties
-PROPEOF
-    # Update reitti.service dependencies
-    if [[ -f /etc/systemd/system/reitti.service ]]; then
-      sed -i 's/ rabbitmq-server\.service//g; s/ photon\.service//g' /etc/systemd/system/reitti.service
-      systemctl daemon-reload
-    fi
-    msg_ok "Rewrote application.properties (backup: application.properties.bak)"
-  fi
-
+  
   if check_for_gh_release "reitti" "dedicatedcode/reitti"; then
     msg_info "Stopping Service"
     systemctl stop reitti
@@ -180,6 +83,55 @@ PROPEOF
 
     msg_info "Starting Service"
     systemctl start reitti
+    chown -R www-data:www-data /var/cache/nginx
+    chmod -R 750 /var/cache/nginx
+    systemctl restart nginx
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  
+  if check_for_gh_release "photon" "komoot/photon"; then
+    if [[ -f "$HOME/.photon" ]] && [[ "$(cat "$HOME/.photon")" == 0.7 ]]; then
+      CURRENT_VERSION="$(<"$HOME/.photon")"
+      echo
+      echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+      echo "Photon v1 upgrade detected (breaking change)"
+      echo
+      echo "Your current version: $CURRENT_VERSION"
+      echo
+      echo "Photon v1 requires a manual migration before updating."
+      echo
+      echo "You need to:"
+      echo "  1. Remove existing geocoding data (not actual reitti data):"
+      echo "     rm -rf /opt/photon_data"
+      echo
+      echo "  2. Follow the inial setup guide again:"
+      echo "     https://github.com/community-scripts/ProxmoxVE/discussions/8737"
+      echo
+      echo "  3. Re-download and import Photon data for v1"
+      echo
+      read -rp "Do you want to continue anyway? (y/N): " CONTINUE
+      echo
+        
+      if [[ ! "$CONTINUE" =~ ^[Yy]$ ]]; then
+        msg_info "Migration required. Update cancelled."
+        exit 0
+      fi
+        
+      msg_warn "Continuing without migration may break Photon in the future!"
+    fi
+  
+    msg_info "Stopping Service"
+    systemctl stop photon
+    msg_ok "Stopped Service"
+
+    rm -f /opt/photon/photon.jar
+    USE_ORIGINAL_FILENAME="true" fetch_and_deploy_gh_release "photon" "komoot/photon" "singlefile" "latest" "/opt/photon" "photon-*.jar"
+    mv /opt/photon/photon-*.jar /opt/photon/photon.jar
+
+    msg_info "Starting Service"
+    systemctl start photon
+    systemctl restart nginx
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
   fi

ct/revealjs.sh

@@ -40,7 +40,7 @@ function update_script() {
     cd /opt/revealjs
     $STD npm install
     cp -f /opt/index.html /opt/revealjs
-    sed -i 's/"vite"/"vite --host"/g' package.json
+    sed -i '25s/localhost/0.0.0.0/g' /opt/revealjs/gulpfile.js
     rm -f /opt/index.html
     msg_ok "Updated RevealJS"
 

ct/romm.sh

@@ -54,12 +54,8 @@ function update_script() {
     # Merge static assets into dist folder
     cp -rf /opt/romm/frontend/assets/* /opt/romm/frontend/dist/assets/
     mkdir -p /opt/romm/frontend/dist/assets/romm
-    ROMM_BASE=$(grep '^ROMM_BASE_PATH=' /opt/romm/.env | cut -d'=' -f2)
-    ROMM_BASE=${ROMM_BASE:-/var/lib/romm}
-    ln -sfn "$ROMM_BASE"/resources /opt/romm/frontend/dist/assets/romm/resources
-    ln -sfn "$ROMM_BASE"/assets /opt/romm/frontend/dist/assets/romm/assets
-    sed -i "s|alias .*/library/;|alias ${ROMM_BASE}/library/;|" /etc/nginx/sites-available/romm
-    systemctl reload nginx
+    ln -sfn /var/lib/romm/resources /opt/romm/frontend/dist/assets/romm/resources
+    ln -sfn /var/lib/romm/assets /opt/romm/frontend/dist/assets/romm/assets
     msg_ok "Updated ROMM"
 
     msg_info "Starting Services"

ct/semaphore.sh

@@ -50,7 +50,7 @@ function update_script() {
         /opt/semaphore/config.json
       SEM_PW=$(cat ~/semaphore.creds)
       systemctl start semaphore
-      $STD semaphore user add --admin --login admin --email admin@community-scripts.org --name Administrator --password "${SEM_PW}" --config /opt/semaphore/config.json
+      $STD semaphore user add --admin --login admin --email admin@helper-scripts.com --name Administrator --password "${SEM_PW}" --config /opt/semaphore/config.json
 
       msg_ok "Moved from BoltDB to SQLite"
     fi

ct/sonarqube.sh

@@ -43,7 +43,6 @@ function update_script() {
     RELEASE=$(get_latest_github_release "SonarSource/sonarqube")
     curl -fsSL "https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-${RELEASE}.zip" -o $temp_file
     unzip -q "$temp_file" -d /opt
-    rm -f "$temp_file"
     mv /opt/sonarqube-${RELEASE} /opt/sonarqube
     echo "${RELEASE}" > ~/.sonarqube
     msg_ok "Updated SonarQube"

ct/tandoor.sh

@@ -33,10 +33,6 @@ function update_script() {
     exit
   fi
 
-  if ! grep -q "^ALLOWED_HOSTS=" /opt/tandoor/.env; then
-    echo "ALLOWED_HOSTS=${LOCAL_IP}" >>/opt/tandoor/.env
-  fi
-
   if check_for_gh_release "tandoor" "TandoorRecipes/recipes"; then
     msg_info "Stopping Service"
     systemctl stop tandoor

ct/typesense.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: tlissak | Co-Author MickLesk
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://typesense.org/
+
+APP="TypeSense"
+var_tags="${var_tags:-database}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /etc/typesense/typesense-server.ini ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "typesense" "typesense/typesense"; then
+    msg_info "Updating Typesense"
+    $STD apt update
+    $STD apt -y upgrade
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following IP:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}${IP}:8108${CL}"

ct/uhf.sh

@@ -38,14 +38,8 @@ function update_script() {
     $STD apt -y upgrade
     msg_ok "Updated LXC"
 
-    msg_info "Updating UHF Server"
-    if dpkg -l ffmpeg 2>&1 | grep -q "ii"; then
-      apt remove ffmpeg -y && apt autoremove -y
-    fi
-    setup_ffmpeg
     fetch_and_deploy_gh_release "comskip" "swapplications/comskip" "prebuild" "latest" "/opt/comskip" "comskip-x64-*.zip"
     fetch_and_deploy_gh_release "uhf-server" "swapplications/uhf-server-dist" "prebuild" "latest" "/opt/uhf-server" "UHF.Server-linux-x64-*.zip"
-    msg_ok "Updated UHF Server"
 
     msg_info "Starting Service"
     systemctl start uhf-server

ct/verdaccio.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: BrynnJKnight
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://verdaccio.org/ | Github: https://github.com/verdaccio/verdaccio
+
+APP="Verdaccio"
+var_tags="${var_tags:-dev-tools;npm;registry}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /etc/systemd/system/verdaccio.service ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Updating LXC Container"
+  $STD apt update
+  $STD apt upgrade -y
+  msg_ok "Updated LXC Container"
+
+  NODE_VERSION="24" NODE_MODULE="verdaccio" setup_nodejs
+  systemctl restart verdaccio
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4873${CL}"

ct/victoriametrics.sh

@@ -34,26 +34,24 @@ function update_script() {
     [[ -f /etc/systemd/system/victoriametrics-logs.service ]] && systemctl stop victoriametrics-logs
     msg_ok "Stopped Service"
 
-    victoriametrics_release=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaMetrics/releases" |
-      jq -r '.[] | select(.assets[].name | match("^victoria-metrics-linux-amd64-v[0-9.]+.tar.gz$")) | .tag_name' |
-      head -n 1)
+    victoriametrics_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaMetrics/releases/latest" |
+      jq -r '.assets[].name' |
+      grep -E '^victoria-metrics-linux-amd64-v[0-9.]+\.tar\.gz$')
+    vmutils_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaMetrics/releases/latest" |
+      jq -r '.assets[].name' |
+      grep -E '^vmutils-linux-amd64-v[0-9.]+\.tar\.gz$')
 
-    msg_debug "Using release $victoriametrics_release"
-
-    victoriametrics_filename="victoria-metrics-linux-amd64-${victoriametrics_release}.tar.gz"
-    vmutils_filename="vmutils-linux-amd64-${victoriametrics_release}.tar.gz"
-
-    fetch_and_deploy_gh_release "victoriametrics" "VictoriaMetrics/VictoriaMetrics" "prebuild" "$victoriametrics_release" "/opt/victoriametrics" "$victoriametrics_filename"
-    fetch_and_deploy_gh_release "vmutils" "VictoriaMetrics/VictoriaMetrics" "prebuild" "$victoriametrics_release" "/opt/victoriametrics" "$vmutils_filename"
+    fetch_and_deploy_gh_release "victoriametrics" "VictoriaMetrics/VictoriaMetrics" "prebuild" "latest" "/opt/victoriametrics" "$victoriametrics_filename"
+    fetch_and_deploy_gh_release "vmutils" "VictoriaMetrics/VictoriaMetrics" "prebuild" "latest" "/opt/victoriametrics" "$vmutils_filename"
 
     if [[ -f /etc/systemd/system/victoriametrics-logs.service ]]; then
       vmlogs_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaLogs/releases/latest" |
         jq -r '.assets[].name' |
-        grep -E '^victoria-logs-linux-amd64-v[0-9.]+\.tar\.gz$')
+        grep -E '^victoria-logs-linux-amd64-v[0-9.]+\.tar\.gz$')  
       vlutils_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaLogs/releases/latest" |
         jq -r '.assets[].name' |
         grep -E '^vlutils-linux-amd64-v[0-9.]+\.tar\.gz$')
-
+        
       fetch_and_deploy_gh_release "victorialogs" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "$vmlogs_filename"
       fetch_and_deploy_gh_release "vlutils" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "$vlutils_filename"
     fi

ct/wealthfolio.sh

@@ -29,8 +29,6 @@ function update_script() {
     exit
   fi
 
-  NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
-
   if grep -q '^WF_CORS_ALLOW_ORIGINS=\*$' /opt/wealthfolio/.env; then
     sed -i "s|^WF_CORS_ALLOW_ORIGINS=\*$|WF_CORS_ALLOW_ORIGINS=http://${LOCAL_IP}:8080|" /opt/wealthfolio/.env
   fi

ct/yourls.sh

@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://yourls.org/
-
-APP="YOURLS"
-var_tags="${var_tags:-url-shortener;php}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/yourls/yourls-loader.php ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "yourls" "YOURLS/YOURLS"; then
-    msg_info "Stopping Service"
-    systemctl stop nginx
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration"
-    cp -r /opt/yourls/user /opt/yourls_user.bak
-    msg_ok "Backed up Configuration"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "yourls" "YOURLS/YOURLS" "tarball"
-    chown -R www-data:www-data /opt/yourls
-
-    msg_info "Restoring Configuration"
-    cp -r /opt/yourls_user.bak/. /opt/yourls/user/
-    rm -rf /opt/yourls_user.bak
-    msg_ok "Restored Configuration"
-
-    msg_info "Starting Service"
-    systemctl start nginx
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} First, complete the database setup at:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}/admin/install.php${CL}"
-echo -e "${INFO}${YW} Admin credentials are in the install log:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}grep -A2 'admin' /opt/yourls/user/config.php${CL}"

ct/zerobyte.sh

@@ -38,7 +38,6 @@ function update_script() {
     cp /opt/zerobyte/.env /opt/zerobyte.env.bak
     msg_ok "Backed up Configuration"
     
-    ensure_dependencies git
     NODE_VERSION="24" setup_nodejs
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "zerobyte" "nicotsx/zerobyte" "tarball"
 

ct/zigbee2mqtt.sh

@@ -50,7 +50,7 @@ function update_script() {
     rm -rf /opt/zigbee2mqtt/data
     mv /opt/z2m_backup/data /opt/zigbee2mqtt
     cd /opt/zigbee2mqtt
-    grep -q "^packageImportMethod" ./pnpm-workspace.yaml 2>/dev/null || echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
+    grep -q "^packageImportMethod" ./pnpm-workspace.yaml || echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
     $STD pnpm install --frozen-lockfile
     $STD pnpm build
     rm -rf /opt/z2m_backup

docs/DEV_MODE.md

@@ -0,0 +1,532 @@
+# Dev Mode - Debugging & Development Guide
+
+Development modes provide powerful debugging and testing capabilities for container creation and installation processes.
+
+## Quick Start
+
+```bash
+# Single mode
+export dev_mode="motd"
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/wallabag.sh)"
+
+# Multiple modes (comma-separated)
+export dev_mode="motd,keep,trace"
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/wallabag.sh)"
+
+# Combine with verbose output
+export var_verbose="yes"
+export dev_mode="pause,logs"
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/wallabag.sh)"
+```
+
+## Available Modes
+
+### 1. **motd** - Early SSH/MOTD Setup
+
+Sets up SSH access and MOTD **before** the main application installation.
+
+**Use Case**:
+
+- Quick access to container for manual debugging
+- Continue installation manually if something goes wrong
+- Verify container networking before main install
+
+**Behavior**:
+
+```
+✔ Container created
+✔ Network configured
+[DEV] Setting up MOTD and SSH before installation
+✔ [DEV] MOTD/SSH ready - container accessible
+# Container is now accessible via SSH while installation proceeds
+```
+
+**Combined with**: `keep`, `breakpoint`, `logs`
+
+---
+
+### 2. **keep** - Preserve Container on Failure
+
+Never delete the container when installation fails. Skips cleanup prompt.
+
+**Use Case**:
+
+- Repeated tests of the same installation
+- Debugging failed installations
+- Manual fix attempts
+
+**Behavior**:
+
+```
+✖ Installation failed in container 107 (exit code: 1)
+✔ Container creation log: /tmp/create-lxc-107-abc12345.log
+✔ Installation log: /tmp/install-lxc-107-abc12345.log
+
+🔧 [DEV] Keep mode active - container 107 preserved
+root@proxmox:~#
+```
+
+**Container remains**: `pct enter 107` to access and debug
+
+**Combined with**: `motd`, `trace`, `logs`
+
+---
+
+### 3. **trace** - Bash Command Tracing
+
+Enables `set -x` for complete command-line tracing. Shows every command before execution.
+
+**Use Case**:
+
+- Deep debugging of installation logic
+- Understanding script flow
+- Identifying where errors occur exactly
+
+**Behavior**:
+
+```
++(/opt/wallabag/bin/console): /opt/wallabag/bin/console cache:warmup
++(/opt/wallabag/bin/console): env APP_ENV=prod /opt/wallabag/bin/console cache:warmup
++(/opt/wallabag/bin/console): [[ -d /opt/wallabag/app/cache ]]
++(/opt/wallabag/bin/console): rm -rf /opt/wallabag/app/cache/*
+```
+
+**⚠️ Warning**: Exposes passwords and secrets in log output! Only use in isolated environments.
+
+**Log Output**: All trace output saved to logs (see `logs` mode)
+
+**Combined with**: `keep`, `pause`, `logs`
+
+---
+
+### 4. **pause** - Step-by-Step Execution
+
+Pauses after each major step (`msg_info`). Requires manual Enter press to continue.
+
+**Use Case**:
+
+- Inspect container state between steps
+- Understand what each step does
+- Identify which step causes problems
+
+**Behavior**:
+
+```
+⏳ Setting up Container OS
+[PAUSE] Press Enter to continue...
+⏳ Updating Container OS
+[PAUSE] Press Enter to continue...
+⏳ Installing Dependencies
+[PAUSE] Press Enter to continue...
+```
+
+**Between pauses**: You can open another terminal and inspect the container
+
+```bash
+# In another terminal while paused
+pct enter 107
+root@container:~# df -h  # Check disk usage
+root@container:~# ps aux # Check running processes
+```
+
+**Combined with**: `motd`, `keep`, `logs`
+
+---
+
+### 5. **breakpoint** - Interactive Shell on Error
+
+Opens interactive shell inside the container when an error occurs instead of cleanup prompt.
+
+**Use Case**:
+
+- Live debugging in the actual container
+- Manual command testing
+- Inspect container state at point of failure
+
+**Behavior**:
+
+```
+✖ Installation failed in container 107 (exit code: 1)
+✔ Container creation log: /tmp/create-lxc-107-abc12345.log
+✔ Installation log: /tmp/install-lxc-107-abc12345.log
+
+🐛 [DEV] Breakpoint mode - opening shell in container 107
+Type 'exit' to return to host
+root@wallabag:~#
+
+# Now you can debug:
+root@wallabag:~# tail -f /root/.install-abc12345.log
+root@wallabag:~# mysql -u root -p$PASSWORD wallabag
+root@wallabag:~# apt-get install -y strace
+root@wallabag:~# exit
+
+Container 107 still running. Remove now? (y/N): n
+🔧 Container 107 kept for debugging
+```
+
+**Combined with**: `keep`, `logs`, `trace`
+
+---
+
+### 6. **logs** - Persistent Logging
+
+Saves all logs to `/var/log/community-scripts/` with timestamps. Logs persist even on successful installation.
+
+**Use Case**:
+
+- Post-mortem analysis
+- Performance analysis
+- Automated testing with log collection
+- CI/CD integration
+
+**Behavior**:
+
+```
+Logs location: /var/log/community-scripts/
+
+create-lxc-abc12345-20251117_143022.log    (host-side creation)
+install-abc12345-20251117_143022.log       (container-side installation)
+```
+
+**Access logs**:
+
+```bash
+# View creation log
+tail -f /var/log/community-scripts/create-lxc-*.log
+
+# Search for errors
+grep ERROR /var/log/community-scripts/*.log
+
+# Analyze performance
+grep "msg_info\|msg_ok" /var/log/community-scripts/create-*.log
+```
+
+**With trace mode**: Creates detailed trace of all commands
+
+```bash
+grep "^+" /var/log/community-scripts/install-*.log
+```
+
+**Combined with**: All other modes (recommended for CI/CD)
+
+---
+
+### 7. **dryrun** - Simulation Mode
+
+Shows all commands that would be executed without actually running them.
+
+**Use Case**:
+
+- Test script logic without making changes
+- Verify command syntax
+- Understand what will happen
+- Pre-flight checks
+
+**Behavior**:
+
+```
+[DRYRUN] apt-get update
+[DRYRUN] apt-get install -y curl
+[DRYRUN] mkdir -p /opt/wallabag
+[DRYRUN] cd /opt/wallabag
+[DRYRUN] git clone https://github.com/wallabag/wallabag.git .
+```
+
+**No actual changes made**: Container/system remains unchanged
+
+**Combined with**: `trace` (shows dryrun trace), `logs` (shows what would run)
+
+---
+
+## Mode Combinations
+
+### Development Workflow
+
+```bash
+# First test: See what would happen
+export dev_mode="dryrun,logs"
+bash -c "$(curl ...)"
+
+# Then test with tracing and pauses
+export dev_mode="pause,trace,logs"
+bash -c "$(curl ...)"
+
+# Finally full debug with early SSH access
+export dev_mode="motd,keep,breakpoint,logs"
+bash -c "$(curl ...)"
+```
+
+### CI/CD Integration
+
+```bash
+# Automated testing with full logging
+export dev_mode="logs"
+export var_verbose="yes"
+bash -c "$(curl ...)"
+
+# Capture logs for analysis
+tar czf installation-logs-$(date +%s).tar.gz /var/log/community-scripts/
+```
+
+### Production-like Testing
+
+```bash
+# Keep containers for manual verification
+export dev_mode="keep,logs"
+for i in {1..5}; do
+  bash -c "$(curl ...)"
+done
+
+# Inspect all created containers
+pct list
+pct enter 100
+```
+
+### Live Debugging
+
+```bash
+# SSH in early, step through installation, debug on error
+export dev_mode="motd,pause,breakpoint,keep"
+bash -c "$(curl ...)"
+```
+
+---
+
+## Environment Variables Reference
+
+### Dev Mode Variables
+
+- `dev_mode` (string): Comma-separated list of modes
+  - Format: `"motd,keep,trace"`
+  - Default: Empty (no dev modes)
+
+### Output Control
+
+- `var_verbose="yes"`: Show all command output (disables silent mode)
+  - Pairs well with: `trace`, `pause`, `logs`
+
+### Examples with vars
+
+```bash
+# Maximum verbosity and debugging
+export var_verbose="yes"
+export dev_mode="motd,trace,pause,logs"
+bash -c "$(curl ...)"
+
+# Silent debug (logs only)
+export dev_mode="keep,logs"
+bash -c "$(curl ...)"
+
+# Interactive debugging
+export var_verbose="yes"
+export dev_mode="motd,breakpoint"
+bash -c "$(curl ...)"
+```
+
+---
+
+## Troubleshooting with Dev Mode
+
+### "Installation failed at step X"
+
+```bash
+export dev_mode="pause,logs"
+# Step through until the failure point
+# Check container state between pauses
+pct enter 107
+```
+
+### "Password/credentials not working"
+
+```bash
+export dev_mode="motd,keep,trace"
+# With trace mode, see exact password handling (be careful with logs!)
+# Use motd to SSH in and test manually
+ssh root@container-ip
+```
+
+### "Permission denied errors"
+
+```bash
+export dev_mode="breakpoint,keep"
+# Get shell at failure point
+# Check file permissions, user context, SELinux status
+ls -la /path/to/file
+whoami
+```
+
+### "Networking issues"
+
+```bash
+export dev_mode="motd"
+# SSH in with motd mode before main install
+ssh root@container-ip
+ping 8.8.8.8
+nslookup example.com
+```
+
+### "Need to manually complete installation"
+
+```bash
+export dev_mode="motd,keep"
+# Container accessible via SSH while installation runs
+# After failure, SSH in and manually continue
+ssh root@container-ip
+# ... manual commands ...
+exit
+# Then use 'keep' mode to preserve container for inspection
+```
+
+---
+
+## Log Files Locations
+
+### Default (without `logs` mode)
+
+- Host creation: `/tmp/create-lxc-<SESSION_ID>.log`
+- Container install: Copied to `/tmp/install-lxc-<CTID>-<SESSION_ID>.log` on failure
+
+### With `logs` mode
+
+- Host creation: `/var/log/community-scripts/create-lxc-<SESSION_ID>-<TIMESTAMP>.log`
+- Container install: `/var/log/community-scripts/install-<SESSION_ID>-<TIMESTAMP>.log`
+
+### View logs
+
+```bash
+# Tail in real-time
+tail -f /var/log/community-scripts/*.log
+
+# Search for errors
+grep -r "exit code [1-9]" /var/log/community-scripts/
+
+# Filter by session
+grep "ed563b19" /var/log/community-scripts/*.log
+```
+
+---
+
+## Best Practices
+
+### ✅ DO
+
+- Use `logs` mode for CI/CD and automated testing
+- Use `motd` for early SSH access during long installations
+- Use `pause` when learning the installation flow
+- Use `trace` when debugging logic issues (watch for secrets!)
+- Combine modes for comprehensive debugging
+- Archive logs after successful tests
+
+### ❌ DON'T
+
+- Use `trace` in production or with untrusted networks (exposes secrets)
+- Leave `keep` mode enabled for unattended scripts (containers accumulate)
+- Use `dryrun` and expect actual changes
+- Commit `dev_mode` exports to production deployment scripts
+- Use `breakpoint` in non-interactive environments (will hang)
+
+---
+
+## Examples
+
+### Example 1: Debug a Failed Installation
+
+```bash
+# Initial test to see the failure
+export dev_mode="keep,logs"
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/wallabag.sh)"
+
+# Container 107 kept, check logs
+tail /var/log/community-scripts/install-*.log
+
+# SSH in to debug
+pct enter 107
+root@wallabag:~# cat /root/.install-*.log | tail -100
+root@wallabag:~# apt-get update  # Retry the failing command
+root@wallabag:~# exit
+
+# Re-run with manual step-through
+export dev_mode="motd,pause,keep"
+bash -c "$(curl ...)"
+```
+
+### Example 2: Verify Installation Steps
+
+```bash
+export dev_mode="pause,logs"
+export var_verbose="yes"
+bash -c "$(curl ...)"
+
+# Press Enter through each step
+# Monitor container in another terminal
+# pct enter 107
+# Review logs in real-time
+```
+
+### Example 3: CI/CD Pipeline Integration
+
+```bash
+#!/bin/bash
+export dev_mode="logs"
+export var_verbose="no"
+
+for app in wallabag nextcloud wordpress; do
+  echo "Testing $app installation..."
+  APP="$app" bash -c "$(curl ...)" || {
+    echo "FAILED: $app"
+    tar czf logs-$app.tar.gz /var/log/community-scripts/
+    exit 1
+  }
+  echo "SUCCESS: $app"
+done
+
+echo "All installations successful"
+tar czf all-logs.tar.gz /var/log/community-scripts/
+```
+
+---
+
+## Advanced Usage
+
+### Custom Log Analysis
+
+```bash
+# Extract all errors
+grep "ERROR\|exit code [1-9]" /var/log/community-scripts/*.log
+
+# Performance timeline
+grep "^$(date +%Y-%m-%d)" /var/log/community-scripts/*.log | grep "msg_"
+
+# Memory usage during install
+grep "free\|available" /var/log/community-scripts/*.log
+```
+
+### Integration with External Tools
+
+```bash
+# Send logs to Elasticsearch
+curl -X POST "localhost:9200/installation-logs/_doc" \
+  -H 'Content-Type: application/json' \
+  -d @/var/log/community-scripts/install-*.log
+
+# Archive for compliance
+tar czf installation-records-$(date +%Y%m).tar.gz \
+  /var/log/community-scripts/
+gpg --encrypt installation-records-*.tar.gz
+```
+
+---
+
+## Support & Issues
+
+When reporting installation issues, always include:
+
+```bash
+# Collect all relevant information
+export dev_mode="logs"
+# Run the failing installation
+# Then provide:
+tar czf debug-logs.tar.gz /var/log/community-scripts/
+```
+
+Include the `debug-logs.tar.gz` when reporting issues for better diagnostics.

docs/EXIT_CODES.md

@@ -0,0 +1,298 @@
+# Exit Code Reference
+
+Comprehensive documentation of all exit codes used in ProxmoxVE scripts.
+
+## Table of Contents
+
+- [Generic/Shell Errors (1-255)](#genericshell-errors)
+- [Package Manager Errors (100-101, 255)](#package-manager-errors)
+- [Node.js/npm Errors (243-254)](#nodejsnpm-errors)
+- [Python/pip Errors (210-212)](#pythonpip-errors)
+- [Database Errors (231-254)](#database-errors)
+- [Proxmox Custom Codes (200-231)](#proxmox-custom-codes)
+
+---
+
+## Generic/Shell Errors
+
+Standard Unix/Linux exit codes used across all scripts.
+
+| Code    | Description                             | Common Causes                             | Solutions                                      |
+| ------- | --------------------------------------- | ----------------------------------------- | ---------------------------------------------- |
+| **1**   | General error / Operation not permitted | Permission denied, general failure        | Check user permissions, run as root if needed  |
+| **2**   | Misuse of shell builtins                | Syntax error in script                    | Review script syntax, check bash version       |
+| **126** | Command cannot execute                  | Permission problem, not executable        | `chmod +x script.sh` or check file permissions |
+| **127** | Command not found                       | Missing binary, wrong PATH                | Install required package, check PATH variable  |
+| **128** | Invalid argument to exit                | Invalid exit code passed                  | Use exit codes 0-255 only                      |
+| **130** | Terminated by Ctrl+C (SIGINT)           | User interrupted script                   | Expected behavior, no action needed            |
+| **137** | Killed (SIGKILL)                        | Out of memory, forced termination         | Check memory usage, increase RAM allocation    |
+| **139** | Segmentation fault                      | Memory access violation, corrupted binary | Reinstall package, check system stability      |
+| **143** | Terminated (SIGTERM)                    | Graceful shutdown signal                  | Expected during container stops                |
+
+---
+
+## Package Manager Errors
+
+APT, DPKG, and package installation errors.
+
+| Code    | Description                | Common Causes                           | Solutions                                         |
+| ------- | -------------------------- | --------------------------------------- | ------------------------------------------------- |
+| **100** | APT: Package manager error | Broken packages, dependency conflicts   | `apt --fix-broken install`, `dpkg --configure -a` |
+| **101** | APT: Configuration error   | Malformed sources.list, bad repo config | Check `/etc/apt/sources.list`, run `apt update`   |
+| **255** | DPKG: Fatal internal error | Corrupted package database              | `dpkg --configure -a`, restore from backup        |
+
+---
+
+## Node.js/npm Errors
+
+Node.js runtime and package manager errors.
+
+| Code    | Description                                | Common Causes                  | Solutions                                      |
+| ------- | ------------------------------------------ | ------------------------------ | ---------------------------------------------- |
+| **243** | Node.js: Out of memory                     | JavaScript heap exhausted      | Increase `--max-old-space-size`, optimize code |
+| **245** | Node.js: Invalid command-line option       | Wrong Node.js flags            | Check Node.js version, verify CLI options      |
+| **246** | Node.js: Internal JavaScript Parse Error   | Syntax error in JS code        | Review JavaScript syntax, check dependencies   |
+| **247** | Node.js: Fatal internal error              | Node.js runtime crash          | Update Node.js, check for known bugs           |
+| **248** | Node.js: Invalid C++ addon / N-API failure | Native module incompatibility  | Rebuild native modules, update packages        |
+| **249** | Node.js: Inspector error                   | Debug/inspect protocol failure | Disable inspector, check port conflicts        |
+| **254** | npm/pnpm/yarn: Unknown fatal error         | Package manager crash          | Clear cache, reinstall package manager         |
+
+---
+
+## Python/pip Errors
+
+Python runtime and package installation errors.
+
+| Code    | Description                          | Common Causes                           | Solutions                                                |
+| ------- | ------------------------------------ | --------------------------------------- | -------------------------------------------------------- |
+| **210** | Python: Virtualenv missing or broken | venv not created, corrupted environment | `python3 -m venv venv`, recreate virtualenv              |
+| **211** | Python: Dependency resolution failed | Conflicting package versions            | Use `pip install --upgrade`, check requirements.txt      |
+| **212** | Python: Installation aborted         | EXTERNALLY-MANAGED, permission denied   | Use `--break-system-packages` or venv, check permissions |
+
+---
+
+## Database Errors
+
+### PostgreSQL (231-234)
+
+| Code    | Description             | Common Causes                      | Solutions                                             |
+| ------- | ----------------------- | ---------------------------------- | ----------------------------------------------------- |
+| **231** | Connection failed       | Server not running, wrong socket   | `systemctl start postgresql`, check connection string |
+| **232** | Authentication failed   | Wrong credentials                  | Verify username/password, check `pg_hba.conf`         |
+| **233** | Database does not exist | Database not created               | `CREATE DATABASE`, restore from backup                |
+| **234** | Fatal error in query    | Syntax error, constraint violation | Review SQL syntax, check constraints                  |
+
+### MySQL/MariaDB (241-244)
+
+| Code    | Description             | Common Causes                      | Solutions                                            |
+| ------- | ----------------------- | ---------------------------------- | ---------------------------------------------------- |
+| **241** | Connection failed       | Server not running, wrong socket   | `systemctl start mysql`, check connection parameters |
+| **242** | Authentication failed   | Wrong credentials                  | Verify username/password, grant privileges           |
+| **243** | Database does not exist | Database not created               | `CREATE DATABASE`, restore from backup               |
+| **244** | Fatal error in query    | Syntax error, constraint violation | Review SQL syntax, check constraints                 |
+
+### MongoDB (251-254)
+
+| Code    | Description           | Common Causes        | Solutions                                  |
+| ------- | --------------------- | -------------------- | ------------------------------------------ |
+| **251** | Connection failed     | Server not running   | `systemctl start mongod`, check port 27017 |
+| **252** | Authentication failed | Wrong credentials    | Verify username/password, create user      |
+| **253** | Database not found    | Database not created | Database auto-created on first write       |
+| **254** | Fatal query error     | Invalid query syntax | Review MongoDB query syntax                |
+
+---
+
+## Proxmox Custom Codes
+
+Custom exit codes specific to ProxmoxVE scripts.
+
+### Container Creation Errors (200-209)
+
+| Code    | Description                                    | Common Causes                                           | Solutions                                               |
+| ------- | ---------------------------------------------- | ------------------------------------------------------- | ------------------------------------------------------- |
+| **200** | Failed to create lock file                     | Permission denied, disk full                            | Check `/tmp` permissions, free disk space               |
+| **203** | Missing CTID variable                          | Script configuration error                              | Set CTID in script or via prompt                        |
+| **204** | Missing PCT_OSTYPE variable                    | Template selection failed                               | Verify template availability                            |
+| **205** | Invalid CTID (<100)                            | CTID below minimum value                                | Use CTID ≥ 100 (1-99 reserved for Proxmox)              |
+| **206** | CTID already in use                            | Container/VM with same ID exists                        | Check `pct list` and `/etc/pve/lxc/`, use different ID  |
+| **207** | Password contains unescaped special characters | Special chars like `-`, `/`, `\`, `*` at start/end      | Avoid leading special chars, use alphanumeric passwords |
+| **208** | Invalid configuration                          | DNS format (`.home` vs `home`), MAC format (`-` vs `:`) | Remove leading dots from DNS, use `:` in MAC addresses  |
+| **209** | Container creation failed                      | Multiple possible causes                                | Check logs in `/tmp/pct_create_*.log`, verify template  |
+
+### Cluster & Storage Errors (210, 214, 217)
+
+| Code    | Description                       | Common Causes                      | Solutions                                                   |
+| ------- | --------------------------------- | ---------------------------------- | ----------------------------------------------------------- |
+| **210** | Cluster not quorate               | Cluster nodes down, network issues | Check cluster status: `pvecm status`, fix node connectivity |
+| **211** | Timeout waiting for template lock | Concurrent download in progress    | Wait for other download to complete (60s timeout)           |
+| **214** | Not enough storage space          | Disk full, quota exceeded          | Free disk space, increase storage allocation                |
+| **217** | Storage does not support rootdir  | Wrong storage type selected        | Use storage supporting containers (dir, zfspool, lvm-thin)  |
+
+### Container Verification Errors (215-216)
+
+| Code    | Description                      | Common Causes                    | Solutions                                                 |
+| ------- | -------------------------------- | -------------------------------- | --------------------------------------------------------- |
+| **215** | Container created but not listed | Ghost state, incomplete creation | Check `/etc/pve/lxc/CTID.conf`, remove manually if needed |
+| **216** | RootFS entry missing in config   | Incomplete container creation    | Delete container, retry creation                          |
+
+### Template Errors (218, 220-223, 225)
+
+| Code    | Description                               | Common Causes                                    | Solutions                                                   |
+| ------- | ----------------------------------------- | ------------------------------------------------ | ----------------------------------------------------------- |
+| **218** | Template file corrupted or incomplete     | Download interrupted, file <1MB, invalid archive | Delete template, run `pveam update && pveam download`       |
+| **220** | Unable to resolve template path           | Template storage not accessible                  | Check storage availability, verify permissions              |
+| **221** | Template file exists but not readable     | Permission denied                                | `chmod 644 template.tar.zst`, check storage permissions     |
+| **222** | Template download failed after 3 attempts | Network issues, storage problems                 | Check internet connectivity, verify storage space           |
+| **223** | Template not available after download     | Storage sync issue, I/O delay                    | Wait a few seconds, verify storage is mounted               |
+| **225** | No template available for OS/Version      | Unsupported OS version, catalog outdated         | Run `pveam update`, check `pveam available -section system` |
+
+### LXC Stack Errors (231)
+
+| Code    | Description                    | Common Causes                               | Solutions                                    |
+| ------- | ------------------------------ | ------------------------------------------- | -------------------------------------------- |
+| **231** | LXC stack upgrade/retry failed | Outdated `pve-container`, Debian 13.1 issue | See [Debian 13.1 Fix Guide](#debian-131-fix) |
+
+---
+
+## Special Case: Debian 13.1 "unsupported version" Error
+
+### Problem
+
+```
+TASK ERROR: unable to create CT 129 - unsupported debian version '13.1'
+```
+
+### Root Cause
+
+Outdated `pve-container` package doesn't recognize Debian 13 (Trixie).
+
+### Solutions
+
+#### Option 1: Full System Upgrade (Recommended)
+
+```bash
+apt update
+apt full-upgrade -y
+reboot
+```
+
+Verify fix:
+
+```bash
+dpkg -l pve-container
+# PVE 8: Should show 5.3.3+
+# PVE 9: Should show 6.0.13+
+```
+
+#### Option 2: Update Only pve-container
+
+```bash
+apt update
+apt install --only-upgrade pve-container -y
+```
+
+**Warning:** If Proxmox fails to boot after this, your system was inconsistent. Perform Option 1 instead.
+
+#### Option 3: Verify Repository Configuration
+
+Many users disable Enterprise repos but forget to add no-subscription repos.
+
+**For PVE 9 (Trixie):**
+
+```bash
+cat /etc/apt/sources.list.d/pve-no-subscription.list
+```
+
+Should contain:
+
+```
+deb http://download.proxmox.com/debian/pve trixie pve-no-subscription
+deb http://download.proxmox.com/debian/ceph-squid trixie no-subscription
+```
+
+**For PVE 8 (Bookworm):**
+
+```
+deb http://download.proxmox.com/debian/pve bookworm pve-no-subscription
+deb http://download.proxmox.com/debian/ceph-quincy bookworm no-subscription
+```
+
+Then:
+
+```bash
+apt update
+apt full-upgrade -y
+```
+
+### Reference
+
+Official discussion: [GitHub #8126](https://github.com/community-scripts/ProxmoxVE/discussions/8126)
+
+---
+
+## Troubleshooting Tips
+
+### Finding Error Details
+
+1. **Check logs:**
+
+   ```bash
+   tail -n 50 /tmp/pct_create_*.log
+   ```
+
+2. **Enable verbose mode:**
+
+   ```bash
+   bash -x script.sh  # Shows every command executed
+   ```
+
+3. **Check container status:**
+
+   ```bash
+   pct list
+   pct status CTID
+   ```
+
+4. **Verify storage:**
+   ```bash
+   pvesm status
+   df -h
+   ```
+
+### Common Patterns
+
+- **Exit 0 with error message:** Configuration validation failed (check DNS, MAC, password format)
+- **Exit 206 but container not visible:** Ghost container state - check `/etc/pve/lxc/` manually
+- **Exit 209 generic error:** Check `/tmp/pct_create_*.log` for specific `pct create` failure reason
+- **Exit 218 or 222:** Template issues - delete and re-download template
+
+---
+
+## Quick Reference Chart
+
+| Exit Code Range | Category           | Typical Issue                               |
+| --------------- | ------------------ | ------------------------------------------- |
+| 1-2, 126-143    | Shell/System       | Permissions, signals, missing commands      |
+| 100-101, 255    | Package Manager    | APT/DPKG errors, broken packages            |
+| 200-209         | Container Creation | CTID, password, configuration               |
+| 210-217         | Storage/Cluster    | Disk space, quorum, storage type            |
+| 218-225         | Templates          | Download, corruption, availability          |
+| 231-254         | Databases/Runtime  | PostgreSQL, MySQL, MongoDB, Node.js, Python |
+
+---
+
+## Contributing
+
+Found an undocumented exit code or have a solution to share? Please:
+
+1. Open an issue on [GitHub](https://github.com/community-scripts/ProxmoxVE/issues)
+2. Include:
+   - Exit code number
+   - Error message
+   - Steps to reproduce
+   - Solution that worked for you
+
+---
+
+_Last updated: November 2025_
+_ProxmoxVE Version: 2.x_

docs/README.md

@@ -0,0 +1,298 @@
+# 📚 ProxmoxVE Documentation
+
+Complete guide to all ProxmoxVE documentation - quickly find what you need.
+
+---
+
+## 🎯 **Quick Navigation by Goal**
+
+### 👤 **I want to...**
+
+**Contribute a new application**
+→ Start with: [contribution/README.md](contribution/README.md)
+→ Then: [ct/DETAILED_GUIDE.md](ct/DETAILED_GUIDE.md) + [install/DETAILED_GUIDE.md](install/DETAILED_GUIDE.md)
+
+**Understand the architecture**
+→ Read: [TECHNICAL_REFERENCE.md](TECHNICAL_REFERENCE.md)
+→ Then: [misc/README.md](misc/README.md)
+
+**Debug a failed installation**
+→ Check: [EXIT_CODES.md](EXIT_CODES.md)
+→ Then: [DEV_MODE.md](DEV_MODE.md)
+→ See also: [misc/error_handler.func/](misc/error_handler.func/)
+
+**Configure system defaults**
+→ Read: [guides/DEFAULTS_SYSTEM_GUIDE.md](guides/DEFAULTS_SYSTEM_GUIDE.md)
+
+**Deploy containers automatically**
+→ Read: [guides/UNATTENDED_DEPLOYMENTS.md](guides/UNATTENDED_DEPLOYMENTS.md)
+
+**Develop a function library**
+→ Study: [misc/](misc/) documentation
+
+---
+
+## 👤 **Quick Start by Role**
+
+### **I'm a...**
+
+**New Contributor**
+→ Start: [contribution/README.md](contribution/README.md)
+→ Then: Choose your path below
+
+**Container Creator**
+→ Read: [ct/README.md](ct/README.md)
+→ Deep Dive: [ct/DETAILED_GUIDE.md](ct/DETAILED_GUIDE.md)
+→ Reference: [misc/build.func/](misc/build.func/)
+
+**Installation Script Developer**
+→ Read: [install/README.md](install/README.md)
+→ Deep Dive: [install/DETAILED_GUIDE.md](install/DETAILED_GUIDE.md)
+→ Reference: [misc/tools.func/](misc/tools.func/)
+
+**VM Provisioner**
+→ Read: [vm/README.md](vm/README.md)
+→ Reference: [misc/cloud-init.func/](misc/cloud-init.func/)
+
+**Tools Developer**
+→ Read: [tools/README.md](tools/README.md)
+→ Reference: [misc/build.func/](misc/build.func/)
+
+**API Integrator**
+→ Read: [api/README.md](api/README.md)
+→ Reference: [misc/api.func/](misc/api.func/)
+
+**System Operator**
+→ Start: [EXIT_CODES.md](EXIT_CODES.md)
+→ Then: [guides/DEFAULTS_SYSTEM_GUIDE.md](guides/DEFAULTS_SYSTEM_GUIDE.md)
+→ Automate: [guides/UNATTENDED_DEPLOYMENTS.md](guides/UNATTENDED_DEPLOYMENTS.md)
+→ Debug: [DEV_MODE.md](DEV_MODE.md)
+
+**Architect**
+→ Read: [TECHNICAL_REFERENCE.md](TECHNICAL_REFERENCE.md)
+→ Deep Dive: [misc/README.md](misc/README.md)
+
+---
+
+## 📂 **Documentation Structure**
+
+### Project-Mirrored Directories
+
+Each major project directory has documentation:
+
+```
+ProxmoxVE/
+├─ ct/                 ↔ docs/ct/ (README.md + DETAILED_GUIDE.md)
+├─ install/           ↔ docs/install/ (README.md + DETAILED_GUIDE.md)
+├─ vm/                ↔ docs/vm/ (README.md)
+├─ tools/            ↔ docs/tools/ (README.md)
+├─ api/              ↔ docs/api/ (README.md)
+├─ misc/             ↔ docs/misc/ (9 function libraries)
+└─ [system-wide]     ↔ docs/guides/ (configuration & deployment guides)
+```
+
+### Core Documentation
+
+| Document | Purpose | Audience |
+|----------|---------|----------|
+| [contribution/README.md](contribution/README.md) | How to contribute | Contributors |
+| [ct/DETAILED_GUIDE.md](ct/DETAILED_GUIDE.md) | Create ct scripts | Container developers |
+| [install/DETAILED_GUIDE.md](install/DETAILED_GUIDE.md) | Create install scripts | Installation developers |
+| [TECHNICAL_REFERENCE.md](TECHNICAL_REFERENCE.md) | Architecture deep-dive | Architects, advanced users |
+| [guides/DEFAULTS_SYSTEM_GUIDE.md](guides/DEFAULTS_SYSTEM_GUIDE.md) | Configuration system | Operators, power users |
+| [guides/CONFIGURATION_REFERENCE.md](guides/CONFIGURATION_REFERENCE.md) | Configuration options reference | Advanced users |
+| [guides/UNATTENDED_DEPLOYMENTS.md](guides/UNATTENDED_DEPLOYMENTS.md) | Automated deployments | DevOps, automation |
+| [EXIT_CODES.md](EXIT_CODES.md) | Exit code reference | Troubleshooters |
+| [DEV_MODE.md](DEV_MODE.md) | Debugging tools | Developers |
+
+---
+
+## 📂 **Directory Guide**
+
+### [ct/](ct/) - Container Scripts
+Documentation for `/ct` - Container creation scripts that run on the Proxmox host.
+
+**Includes**:
+- Overview of container creation process
+- Deep dive: [DETAILED_GUIDE.md](ct/DETAILED_GUIDE.md) - Complete reference with examples
+- Reference to [misc/build.func/](misc/build.func/)
+- Quick start for creating new containers
+
+### [install/](install/) - Installation Scripts
+Documentation for `/install` - Scripts that run inside containers to install applications.
+
+**Includes**:
+- Overview of 10-phase installation pattern
+- Deep dive: [DETAILED_GUIDE.md](install/DETAILED_GUIDE.md) - Complete reference with examples
+- Reference to [misc/tools.func/](misc/tools.func/)
+- Alpine vs Debian differences
+
+### [vm/](vm/) - Virtual Machine Scripts
+Documentation for `/vm` - VM creation scripts using cloud-init provisioning.
+
+**Includes**:
+- Overview of VM provisioning
+- Link to [misc/cloud-init.func/](misc/cloud-init.func/)
+- VM vs Container comparison
+- Cloud-init examples
+
+### [tools/](tools/) - Tools & Utilities
+Documentation for `/tools` - Management tools and add-ons.
+
+**Includes**:
+- Overview of tools structure
+- Integration points
+- Contributing new tools
+- Common operations
+
+### [api/](api/) - API Integration
+Documentation for `/api` - Telemetry and API backend.
+
+**Includes**:
+- API overview
+- Integration methods
+- API endpoints
+- Privacy information
+
+### [misc/](misc/) - Function Libraries
+Documentation for `/misc` - 9 core function libraries with complete references.
+
+**Contains**:
+- **build.func/** - Container orchestration (7 files)
+- **core.func/** - Utilities and messaging (5 files)
+- **error_handler.func/** - Error handling (5 files)
+- **api.func/** - API integration (5 files)
+- **install.func/** - Container setup (5 files)
+- **tools.func/** - Package installation (6 files)
+- **alpine-install.func/** - Alpine setup (5 files)
+- **alpine-tools.func/** - Alpine tools (5 files)
+- **cloud-init.func/** - VM provisioning (5 files)
+
+---
+
+## 🎓 **Learning Paths**
+
+### Path 1: First-Time Contributor (2-3 hours)
+
+1. [contribution/README.md](contribution/README.md) - Quick Start
+2. Pick your area:
+   - Containers → [ct/README.md](ct/README.md) + [ct/DETAILED_GUIDE.md](ct/DETAILED_GUIDE.md)
+   - Installation → [install/README.md](install/README.md) + [install/DETAILED_GUIDE.md](install/DETAILED_GUIDE.md)
+   - VMs → [vm/README.md](vm/README.md)
+3. Study existing similar script
+4. Create your contribution
+5. Submit PR
+
+### Path 2: Intermediate Developer (4-6 hours)
+
+1. [TECHNICAL_REFERENCE.md](TECHNICAL_REFERENCE.md)
+2. Dive into function libraries:
+   - [misc/build.func/README.md](misc/build.func/README.md)
+   - [misc/tools.func/README.md](misc/tools.func/README.md)
+   - [misc/install.func/README.md](misc/install.func/README.md)
+3. Study advanced examples
+4. Create complex applications
+
+### Path 3: Advanced Architect (8+ hours)
+
+1. All of Intermediate Path
+2. Study all 9 function libraries in depth
+3. [guides/DEFAULTS_SYSTEM_GUIDE.md](guides/DEFAULTS_SYSTEM_GUIDE.md) - Configuration system
+4. [DEV_MODE.md](DEV_MODE.md) - Debugging and development
+5. Design new features or function libraries
+
+### Path 4: Troubleshooter (30 minutes - 1 hour)
+
+1. [EXIT_CODES.md](EXIT_CODES.md) - Find error code
+2. [DEV_MODE.md](DEV_MODE.md) - Run with debugging
+3. Check relevant function library docs
+4. Review logs and fix
+
+---
+
+## 📊 **By the Numbers**
+
+| Metric | Count |
+|--------|:---:|
+| **Documentation Files** | 63 |
+| **Total Lines** | 15,000+ |
+| **Function Libraries** | 9 |
+| **Functions Documented** | 150+ |
+| **Code Examples** | 50+ |
+| **Flowcharts** | 15+ |
+| **Do/Don't Sections** | 20+ |
+| **Real-World Examples** | 30+ |
+
+---
+
+## 🔍 **Find It Fast**
+
+### By Feature
+- **How do I create a container?** → [ct/DETAILED_GUIDE.md](ct/DETAILED_GUIDE.md)
+- **How do I create an install script?** → [install/DETAILED_GUIDE.md](install/DETAILED_GUIDE.md)
+- **How do I create a VM?** → [vm/README.md](vm/README.md)
+- **How do I install Node.js?** → [misc/tools.func/](misc/tools.func/)
+- **How do I debug?** → [DEV_MODE.md](DEV_MODE.md)
+
+### By Error
+- **Exit code 206?** → [EXIT_CODES.md](EXIT_CODES.md)
+- **Network failed?** → [misc/install.func/](misc/install.func/)
+- **Package error?** → [misc/tools.func/](misc/tools.func/)
+
+### By Role
+- **Contributor** → [contribution/README.md](contribution/README.md)
+- **Operator** → [guides/DEFAULTS_SYSTEM_GUIDE.md](guides/DEFAULTS_SYSTEM_GUIDE.md)
+- **Automation** → [guides/UNATTENDED_DEPLOYMENTS.md](guides/UNATTENDED_DEPLOYMENTS.md)
+- **Developer** → [TECHNICAL_REFERENCE.md](TECHNICAL_REFERENCE.md)
+- **Architect** → [misc/README.md](misc/README.md)
+
+---
+
+## ✅ **Documentation Features**
+
+- ✅ **Project-mirrored structure** - Organized like the actual project
+- ✅ **Complete function references** - Every function documented
+- ✅ **Real-world examples** - Copy-paste ready code
+- ✅ **Visual flowcharts** - ASCII diagrams of workflows
+- ✅ **Integration guides** - How components connect
+- ✅ **Troubleshooting** - Common issues and solutions
+- ✅ **Best practices** - DO/DON'T sections throughout
+- ✅ **Learning paths** - Structured curriculum by role
+- ✅ **Quick references** - Fast lookup by error code
+- ✅ **Comprehensive navigation** - This page
+
+---
+
+## 🚀 **Start Here**
+
+**New to ProxmoxVE?** → [contribution/README.md](contribution/README.md)
+
+**Looking for something specific?** → Choose your role above or browse by directory
+
+**Need to debug?** → [EXIT_CODES.md](EXIT_CODES.md)
+
+**Want to understand architecture?** → [TECHNICAL_REFERENCE.md](TECHNICAL_REFERENCE.md)
+
+---
+
+## 🤝 **Contributing Documentation**
+
+Found an error? Want to improve docs?
+
+1. See: [contribution/README.md](contribution/README.md) for full contribution guide
+2. Open issue: [GitHub Issues](https://github.com/community-scripts/ProxmoxVE/issues)
+3. Or submit PR with improvements
+
+---
+
+## 📝 **Status**
+
+- **Last Updated**: December 2025
+- **Version**: 2.3 (Consolidated & Reorganized)
+- **Completeness**: ✅ 100% - All components documented
+- **Quality**: ✅ Production-ready
+- **Structure**: ✅ Clean and organized
+
+---
+
+**Welcome to ProxmoxVE! Start with [CONTRIBUTION_GUIDE.md](CONTRIBUTION_GUIDE.md) or choose your role above.** 🚀

docs/TECHNICAL_REFERENCE.md

@@ -0,0 +1,897 @@
+# Technical Reference: Configuration System Architecture
+
+> **For Developers and Advanced Users**
+>
+> _Deep dive into how the defaults and configuration system works_
+
+---
+
+## Table of Contents
+
+1. [System Architecture](#system-architecture)
+2. [File Format Specifications](#file-format-specifications)
+3. [Function Reference](#function-reference)
+4. [Variable Precedence](#variable-precedence)
+5. [Data Flow Diagrams](#data-flow-diagrams)
+6. [Security Model](#security-model)
+7. [Implementation Details](#implementation-details)
+
+---
+
+## System Architecture
+
+### Component Overview
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│                    Installation Script                       │
+│  (pihole-install.sh, docker-install.sh, etc.)              │
+└────────────────────┬────────────────────────────────────────┘
+                     │
+                     v
+┌─────────────────────────────────────────────────────────────┐
+│                   build.func Library                         │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  variables()                                         │   │
+│  │  - Initialize NSAPP, var_install, etc.             │   │
+│  └──────────────────────────────────────────────────────┘   │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  install_script()                                    │   │
+│  │  - Display mode menu                                │   │
+│  │  - Route to appropriate workflow                    │   │
+│  └──────────────────────────────────────────────────────┘   │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  base_settings()                                     │   │
+│  │  - Apply built-in defaults                          │   │
+│  │  - Read environment variables (var_*)               │   │
+│  └──────────────────────────────────────────────────────┘   │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  load_vars_file()                                    │   │
+│  │  - Safe file parsing (NO source/eval)              │   │
+│  │  - Whitelist validation                             │   │
+│  │  - Value sanitization                               │   │
+│  └──────────────────────────────────────────────────────┘   │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  default_var_settings()                              │   │
+│  │  - Load user defaults                               │   │
+│  │  - Display summary                                  │   │
+│  └──────────────────────────────────────────────────────┘   │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  maybe_offer_save_app_defaults()                     │   │
+│  │  - Offer to save current settings                   │   │
+│  │  - Handle updates vs. new saves                     │   │
+│  └──────────────────────────────────────────────────────┘   │
+└─────────────────────────────────────────────────────────────┘
+                     │
+                     v
+┌─────────────────────────────────────────────────────────────┐
+│           Configuration Files (on Disk)                      │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  /usr/local/community-scripts/default.vars          │   │
+│  │  (User global defaults)                             │   │
+│  └──────────────────────────────────────────────────────┘   │
+│  ┌──────────────────────────────────────────────────────┐   │
+│  │  /usr/local/community-scripts/defaults/*.vars       │   │
+│  │  (App-specific defaults)                            │   │
+│  └──────────────────────────────────────────────────────┘   │
+└─────────────────────────────────────────────────────────────┘
+```
+
+---
+
+## File Format Specifications
+
+### User Defaults: `default.vars`
+
+**Location**: `/usr/local/community-scripts/default.vars`
+
+**MIME Type**: `text/plain`
+
+**Encoding**: UTF-8 (no BOM)
+
+**Format Specification**:
+
+```
+# File Format: Simple key=value pairs
+# Purpose: Store global user defaults
+# Security: Sanitized values, whitelist validation
+
+# Comments and blank lines are ignored
+# Line format: var_name=value
+# No spaces around the equals sign
+# String values do not need quoting (but may be quoted)
+
+[CONTENT]
+var_cpu=4
+var_ram=2048
+var_disk=20
+var_hostname=mydefault
+var_brg=vmbr0
+var_gateway=192.168.1.1
+```
+
+**Formal Grammar**:
+
+```
+FILE       := (BLANK_LINE | COMMENT_LINE | VAR_LINE)*
+BLANK_LINE := \n
+COMMENT_LINE := '#' [^\n]* \n
+VAR_LINE   := VAR_NAME '=' VAR_VALUE \n
+VAR_NAME   := 'var_' [a-z_]+
+VAR_VALUE  := [^\n]*  # Any printable characters except newline
+```
+
+**Constraints**:
+
+| Constraint        | Value                    |
+| ----------------- | ------------------------ |
+| Max file size     | 64 KB                    |
+| Max line length   | 1024 bytes               |
+| Max variables     | 100                      |
+| Allowed var names | `var_[a-z_]+`            |
+| Value validation  | Whitelist + Sanitization |
+
+**Example Valid File**:
+
+```bash
+# Global User Defaults
+# Created: 2024-11-28
+
+# Resource defaults
+var_cpu=4
+var_ram=2048
+var_disk=20
+
+# Network defaults
+var_brg=vmbr0
+var_gateway=192.168.1.1
+var_mtu=1500
+var_vlan=100
+
+# System defaults
+var_timezone=Europe/Berlin
+var_hostname=default-container
+
+# Storage
+var_container_storage=local
+var_template_storage=local
+
+# Security
+var_ssh=yes
+var_protection=0
+var_unprivileged=1
+```
+
+### App Defaults: `<app>.vars`
+
+**Location**: `/usr/local/community-scripts/defaults/<appname>.vars`
+
+**Format**: Identical to `default.vars`
+
+**Naming Convention**: `<nsapp>.vars`
+
+- `nsapp` = lowercase app name with spaces removed
+- Examples:
+  - `pihole` → `pihole.vars`
+  - `opnsense` → `opnsense.vars`
+  - `docker compose` → `dockercompose.vars`
+
+**Example App Defaults**:
+
+```bash
+# App-specific defaults for PiHole (pihole)
+# Generated on 2024-11-28T15:32:00Z
+# These override user defaults when installing pihole
+
+var_unprivileged=1
+var_cpu=2
+var_ram=1024
+var_disk=10
+var_brg=vmbr0
+var_net=veth
+var_gateway=192.168.1.1
+var_hostname=pihole
+var_timezone=Europe/Berlin
+var_container_storage=local
+var_template_storage=local
+var_tags=dns,pihole
+```
+
+---
+
+## Function Reference
+
+### `load_vars_file()`
+
+**Purpose**: Safely load variables from .vars files without using `source` or `eval`
+
+**Signature**:
+
+```bash
+load_vars_file(filepath)
+```
+
+**Parameters**:
+
+| Param    | Type   | Required | Example                                     |
+| -------- | ------ | -------- | ------------------------------------------- |
+| filepath | String | Yes      | `/usr/local/community-scripts/default.vars` |
+
+**Returns**:
+
+- `0` on success
+- `1` on error (file missing, parse error, etc.)
+
+**Environment Side Effects**:
+
+- Sets all parsed `var_*` variables as shell variables
+- Does NOT unset variables if file missing (safe)
+- Does NOT affect other variables
+
+**Implementation Pattern**:
+
+```bash
+load_vars_file() {
+  local file="$1"
+
+  # File must exist
+  [ -f "$file" ] || return 0
+
+  # Parse line by line (not with source/eval)
+  local line key val
+  while IFS='=' read -r key val || [ -n "$key" ]; do
+    # Skip comments and empty lines
+    [[ "$key" =~ ^[[:space:]]*# ]] && continue
+    [[ -z "$key" ]] && continue
+
+    # Validate key is in whitelist
+    _is_whitelisted_key "$key" || continue
+
+    # Sanitize and export value
+    val="$(_sanitize_value "$val")"
+    [ $? -eq 0 ] && export "$key=$val"
+  done < "$file"
+
+  return 0
+}
+```
+
+**Usage Examples**:
+
+```bash
+# Load user defaults
+load_vars_file "/usr/local/community-scripts/default.vars"
+
+# Load app-specific defaults
+load_vars_file "$(get_app_defaults_path)"
+
+# Check if successful
+if load_vars_file "$vars_path"; then
+  echo "Settings loaded successfully"
+else
+  echo "Failed to load settings"
+fi
+
+# Values are now available as variables
+echo "Using $var_cpu cores"
+echo "Allocating ${var_ram} MB RAM"
+```
+
+---
+
+### `get_app_defaults_path()`
+
+**Purpose**: Get the full path for app-specific defaults file
+
+**Signature**:
+
+```bash
+get_app_defaults_path()
+```
+
+**Parameters**: None
+
+**Returns**:
+
+- String: Full path to app defaults file
+
+**Implementation**:
+
+```bash
+get_app_defaults_path() {
+  local n="${NSAPP:-${APP,,}}"
+  echo "/usr/local/community-scripts/defaults/${n}.vars"
+}
+```
+
+**Usage Examples**:
+
+```bash
+# Get app defaults path
+app_defaults="$(get_app_defaults_path)"
+echo "App defaults at: $app_defaults"
+
+# Check if app defaults exist
+if [ -f "$(get_app_defaults_path)" ]; then
+  echo "App defaults available"
+fi
+
+# Load app defaults
+load_vars_file "$(get_app_defaults_path)"
+```
+
+---
+
+### `default_var_settings()`
+
+**Purpose**: Load and display user global defaults
+
+**Signature**:
+
+```bash
+default_var_settings()
+```
+
+**Parameters**: None
+
+**Returns**:
+
+- `0` on success
+- `1` on error
+
+**Workflow**:
+
+```
+1. Find default.vars location
+   (usually /usr/local/community-scripts/default.vars)
+
+2. Create if missing
+
+3. Load variables from file
+
+4. Map var_verbose → VERBOSE variable
+
+5. Call base_settings (apply to container config)
+
+6. Call echo_default (display summary)
+```
+
+**Implementation Pattern**:
+
+```bash
+default_var_settings() {
+  local VAR_WHITELIST=(
+    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu
+    var_gateway var_hostname var_ipv6_method var_mac var_mtu
+    var_net var_ns var_pw var_ram var_tags var_tun var_unprivileged
+    var_verbose var_vlan var_ssh var_ssh_authorized_key
+    var_container_storage var_template_storage
+  )
+
+  # Ensure file exists
+  _ensure_default_vars
+
+  # Find and load
+  local dv="$(_find_default_vars)"
+  load_vars_file "$dv"
+
+  # Map verbose flag
+  if [[ -n "${var_verbose:-}" ]]; then
+    case "${var_verbose,,}" in
+      1 | yes | true | on) VERBOSE="yes" ;;
+      *) VERBOSE="${var_verbose}" ;;
+    esac
+  fi
+
+  # Apply and display
+  base_settings "$VERBOSE"
+  echo_default
+}
+```
+
+---
+
+### `maybe_offer_save_app_defaults()`
+
+**Purpose**: Offer to save current settings as app-specific defaults
+
+**Signature**:
+
+```bash
+maybe_offer_save_app_defaults()
+```
+
+**Parameters**: None
+
+**Returns**: None (side effects only)
+
+**Behavior**:
+
+1. After advanced installation completes
+2. Offers user: "Save as App Defaults for <APP>?"
+3. If yes:
+   - Saves to `/usr/local/community-scripts/defaults/<app>.vars`
+   - Only whitelisted variables included
+   - Previous defaults backed up (if exists)
+4. If no:
+   - No action taken
+
+**Flow**:
+
+```bash
+maybe_offer_save_app_defaults() {
+  local app_vars_path="$(get_app_defaults_path)"
+
+  # Build current settings from memory
+  local new_tmp="$(_build_current_app_vars_tmp)"
+
+  # Check if already exists
+  if [ -f "$app_vars_path" ]; then
+    # Show diff and ask: Update? Keep? View Diff?
+    _show_app_defaults_diff_menu "$new_tmp" "$app_vars_path"
+  else
+    # New defaults - just save
+    if whiptail --yesno "Save as App Defaults for $APP?" 10 60; then
+      mv "$new_tmp" "$app_vars_path"
+      chmod 644 "$app_vars_path"
+    fi
+  fi
+}
+```
+
+---
+
+### `_sanitize_value()`
+
+**Purpose**: Remove dangerous characters/patterns from configuration values
+
+**Signature**:
+
+```bash
+_sanitize_value(value)
+```
+
+**Parameters**:
+
+| Param | Type   | Required |
+| ----- | ------ | -------- |
+| value | String | Yes      |
+
+**Returns**:
+
+- `0` (success) + sanitized value on stdout
+- `1` (failure) + nothing if dangerous
+
+**Dangerous Patterns**:
+
+| Pattern   | Threat               | Example              |
+| --------- | -------------------- | -------------------- |
+| `$(...)`  | Command substitution | `$(rm -rf /)`        |
+| `` ` ` `` | Command substitution | `` `whoami` ``       |
+| `;`       | Command separator    | `value; rm -rf /`    |
+| `&`       | Background execution | `value & malicious`  |
+| `<(`      | Process substitution | `<(cat /etc/passwd)` |
+
+**Implementation**:
+
+```bash
+_sanitize_value() {
+  case "$1" in
+  *'$('* | *'`'* | *';'* | *'&'* | *'<('*)
+    echo ""
+    return 1  # Reject dangerous value
+    ;;
+  esac
+  echo "$1"
+  return 0
+}
+```
+
+**Usage Examples**:
+
+```bash
+# Safe value
+_sanitize_value "192.168.1.1"  # Returns: 192.168.1.1 (status: 0)
+
+# Dangerous value
+_sanitize_value "$(whoami)"     # Returns: (empty) (status: 1)
+
+# Usage in code
+if val="$(_sanitize_value "$user_input")"; then
+  export var_hostname="$val"
+else
+  msg_error "Invalid value: contains dangerous characters"
+fi
+```
+
+---
+
+### `_is_whitelisted_key()`
+
+**Purpose**: Check if variable name is in allowed whitelist
+
+**Signature**:
+
+```bash
+_is_whitelisted_key(key)
+```
+
+**Parameters**:
+
+| Param | Type   | Required | Example   |
+| ----- | ------ | -------- | --------- |
+| key   | String | Yes      | `var_cpu` |
+
+**Returns**:
+
+- `0` if key is whitelisted
+- `1` if key is NOT whitelisted
+
+**Implementation**:
+
+```bash
+_is_whitelisted_key() {
+  local k="$1"
+  local w
+  for w in "${VAR_WHITELIST[@]}"; do
+    [ "$k" = "$w" ] && return 0
+  done
+  return 1
+}
+```
+
+**Usage Examples**:
+
+```bash
+# Check if variable can be saved
+if _is_whitelisted_key "var_cpu"; then
+  echo "var_cpu can be saved"
+fi
+
+# Reject unknown variables
+if ! _is_whitelisted_key "var_custom"; then
+  msg_error "var_custom is not supported"
+fi
+```
+
+---
+
+## Variable Precedence
+
+### Loading Order
+
+When a container is being created, variables are resolved in this order:
+
+```
+Step 1: Read ENVIRONMENT VARIABLES
+   ├─ Check if var_cpu is already set in shell environment
+   ├─ Check if var_ram is already set
+   └─ ...all var_* variables
+
+Step 2: Load APP-SPECIFIC DEFAULTS
+   ├─ Check if /usr/local/community-scripts/defaults/pihole.vars exists
+   ├─ Load all var_* from that file
+   └─ These override built-ins but NOT environment variables
+
+Step 3: Load USER GLOBAL DEFAULTS
+   ├─ Check if /usr/local/community-scripts/default.vars exists
+   ├─ Load all var_* from that file
+   └─ These override built-ins but NOT app-specific
+
+Step 4: Use BUILT-IN DEFAULTS
+   └─ Hardcoded in script (lowest priority)
+```
+
+### Precedence Examples
+
+**Example 1: Environment Variable Wins**
+
+```bash
+# Shell environment has highest priority
+$ export var_cpu=16
+$ bash pihole-install.sh
+
+# Result: Container gets 16 cores
+# (ignores app defaults, user defaults, built-ins)
+```
+
+**Example 2: App Defaults Override User Defaults**
+
+```bash
+# User Defaults: var_cpu=4
+# App Defaults: var_cpu=2
+$ bash pihole-install.sh
+
+# Result: Container gets 2 cores
+# (app-specific setting takes precedence)
+```
+
+**Example 3: All Defaults Missing (Built-ins Used)**
+
+```bash
+# No environment variables set
+# No app defaults file
+# No user defaults file
+$ bash pihole-install.sh
+
+# Result: Uses built-in defaults
+# (var_cpu might be 2 by default)
+```
+
+### Implementation in Code
+
+```bash
+# Typical pattern in build.func
+
+base_settings() {
+  # Priority 1: Environment variables (already set if export used)
+  CT_TYPE=${var_unprivileged:-"1"}          # Use existing or default
+
+  # Priority 2: Load app defaults (may override above)
+  if [ -f "$(get_app_defaults_path)" ]; then
+    load_vars_file "$(get_app_defaults_path)"
+  fi
+
+  # Priority 3: Load user defaults
+  if [ -f "/usr/local/community-scripts/default.vars" ]; then
+    load_vars_file "/usr/local/community-scripts/default.vars"
+  fi
+
+  # Priority 4: Apply built-in defaults (lowest)
+  CORE_COUNT=${var_cpu:-"${APP_CPU_DEFAULT:-2}"}
+  RAM_SIZE=${var_ram:-"${APP_RAM_DEFAULT:-1024}"}
+
+  # Result: var_cpu has been set through precedence chain
+}
+```
+
+---
+
+## Data Flow Diagrams
+
+### Installation Flow: Advanced Settings
+
+```
+┌──────────────┐
+│  Start Script│
+└──────┬───────┘
+       │
+       v
+┌──────────────────────────────┐
+│ Display Installation Mode    │
+│ Menu (5 options)             │
+└──────┬───────────────────────┘
+       │ User selects "Advanced Settings"
+       v
+┌──────────────────────────────────┐
+│ Call: base_settings()            │
+│ (Apply built-in defaults)        │
+└──────┬───────────────────────────┘
+       │
+       v
+┌──────────────────────────────────┐
+│ Call: advanced_settings()        │
+│ (Show 19-step wizard)            │
+│ - Ask CPU, RAM, Disk, Network... │
+└──────┬───────────────────────────┘
+       │
+       v
+┌──────────────────────────────────┐
+│ Show Summary                     │
+│ Review all chosen values         │
+└──────┬───────────────────────────┘
+       │ User confirms
+       v
+┌──────────────────────────────────┐
+│ Create Container                 │
+│ Using current variable values    │
+└──────┬───────────────────────────┘
+       │
+       v
+┌──────────────────────────────────┐
+│ Installation Complete            │
+└──────┬───────────────────────────┘
+       │
+       v
+┌──────────────────────────────────────┐
+│ Offer: Save as App Defaults?         │
+│ (Save current settings)              │
+└──────┬───────────────────────────────┘
+       │
+       ├─ YES → Save to defaults/<app>.vars
+       │
+       └─ NO  → Exit
+```
+
+### Variable Resolution Flow
+
+```
+CONTAINER CREATION STARTED
+         │
+         v
+   ┌─────────────────────┐
+   │ Check ENVIRONMENT   │
+   │ for var_cpu, var_..│
+   └──────┬──────────────┘
+          │ Found? Use them (Priority 1)
+          │ Not found? Continue...
+          v
+   ┌──────────────────────────┐
+   │ Load App Defaults        │
+   │ /defaults/<app>.vars     │
+   └──────┬───────────────────┘
+          │ File exists? Parse & load (Priority 2)
+          │ Not found? Continue...
+          v
+   ┌──────────────────────────┐
+   │ Load User Defaults       │
+   │ /default.vars            │
+   └──────┬───────────────────┘
+          │ File exists? Parse & load (Priority 3)
+          │ Not found? Continue...
+          v
+   ┌──────────────────────────┐
+   │ Use Built-in Defaults    │
+   │ (Hardcoded values)       │
+   └──────┬───────────────────┘
+          │
+          v
+   ┌──────────────────────────┐
+   │ All Variables Resolved   │
+   │ Ready for container      │
+   │ creation                 │
+   └──────────────────────────┘
+```
+
+---
+
+## Security Model
+
+### Threat Model
+
+| Threat                       | Mitigation                                        |
+| ---------------------------- | ------------------------------------------------- |
+| **Arbitrary Code Execution** | No `source` or `eval`; manual parsing only        |
+| **Variable Injection**       | Whitelist of allowed variable names               |
+| **Command Substitution**     | `_sanitize_value()` blocks `$()`, backticks, etc. |
+| **Path Traversal**           | Files locked to `/usr/local/community-scripts/`   |
+| **Permission Escalation**    | Files created with restricted permissions         |
+| **Information Disclosure**   | Sensitive variables not logged                    |
+
+### Security Controls
+
+#### 1. Input Validation
+
+```bash
+# Only specific variables allowed
+if ! _is_whitelisted_key "$key"; then
+  skip_this_variable
+fi
+
+# Values sanitized
+if ! val="$(_sanitize_value "$value")"; then
+  reject_entire_line
+fi
+```
+
+#### 2. Safe File Parsing
+
+```bash
+# ❌ DANGEROUS (OLD)
+source /path/to/config.conf
+# Could execute: rm -rf / or any code
+
+# ✅ SAFE (NEW)
+load_vars_file "/path/to/config.conf"
+# Only reads var_name=value pairs, no execution
+```
+
+#### 3. Whitelisting
+
+```bash
+# Only these variables can be configured
+var_cpu, var_ram, var_disk, var_brg, ...
+var_hostname, var_pw, var_ssh, ...
+
+# NOT allowed:
+var_malicious, var_hack, custom_var, ...
+```
+
+#### 4. Value Constraints
+
+```bash
+# No command injection patterns
+if [[ "$value" =~ ($|`|;|&|<\() ]]; then
+  reject_value
+fi
+```
+
+---
+
+## Implementation Details
+
+### Module: `build.func`
+
+**Load Order** (in actual scripts):
+
+1. `#!/usr/bin/env bash` - Shebang
+2. `source /dev/stdin <<<$(curl ... api.func)` - API functions
+3. `source /dev/stdin <<<$(curl ... build.func)` - Build functions
+4. `variables()` - Initialize variables
+5. `check_root()` - Security check
+6. `install_script()` - Main flow
+
+**Key Sections**:
+
+```bash
+# Section 1: Initialization & Variables
+- variables()
+- NSAPP, var_install, INTEGER pattern, etc.
+
+# Section 2: Storage Management
+- storage_selector()
+- ensure_storage_selection_for_vars_file()
+
+# Section 3: Base Settings
+- base_settings()          # Apply defaults to all var_*
+- echo_default()           # Display current settings
+
+# Section 4: Variable Loading
+- load_vars_file()         # Safe parsing
+- _is_whitelisted_key()    # Validation
+- _sanitize_value()        # Threat mitigation
+
+# Section 5: Defaults Management
+- default_var_settings()   # Load user defaults
+- get_app_defaults_path()  # Get app defaults path
+- maybe_offer_save_app_defaults()  # Save option
+
+# Section 6: Installation Flow
+- install_script()         # Main entry point
+- advanced_settings()      # 20-step wizard
+```
+
+### Regex Patterns Used
+
+| Pattern                | Purpose               | Example Match           |
+| ---------------------- | --------------------- | ----------------------- |
+| `^[0-9]+([.][0-9]+)?$` | Integer validation    | `4`, `192.168`          |
+| `^var_[a-z_]+$`        | Variable name         | `var_cpu`, `var_ssh`    |
+| `*'$('*`               | Command substitution  | `$(whoami)`             |
+| `*\`\*`                | Backtick substitution | `` `cat /etc/passwd` `` |
+
+---
+
+## Appendix: Migration Reference
+
+### Old Pattern (Deprecated)
+
+```bash
+# ❌ OLD: config-file.func
+source config-file.conf          # Executes arbitrary code
+if [ "$USE_DEFAULTS" = "yes" ]; then
+  apply_settings_directly
+fi
+```
+
+### New Pattern (Current)
+
+```bash
+# ✅ NEW: load_vars_file()
+if load_vars_file "$(get_app_defaults_path)"; then
+  echo "Settings loaded securely"
+fi
+```
+
+### Function Mapping
+
+| Old              | New                               | Location   |
+| ---------------- | --------------------------------- | ---------- |
+| `read_config()`  | `load_vars_file()`                | build.func |
+| `write_config()` | `_build_current_app_vars_tmp()`   | build.func |
+| None             | `maybe_offer_save_app_defaults()` | build.func |
+| None             | `get_app_defaults_path()`         | build.func |
+
+---
+
+**End of Technical Reference**

docs/api/README.md

@@ -0,0 +1,146 @@
+# API Integration Documentation (/api)
+
+This directory contains comprehensive documentation for API integration and the `/api` directory.
+
+## Overview
+
+The `/api` directory contains the Proxmox Community Scripts API backend for diagnostic reporting, telemetry, and analytics integration.
+
+## Key Components
+
+### Main API Service
+Located in `/api/main.go`:
+- RESTful API for receiving telemetry data
+- Installation statistics tracking
+- Error reporting and analytics
+- Performance monitoring
+
+### Integration with Scripts
+The API is integrated into all installation scripts via `api.func`:
+- Sends installation start/completion events
+- Reports errors and exit codes
+- Collects anonymous usage statistics
+- Enables project analytics
+
+## Documentation Structure
+
+API documentation covers:
+- API endpoint specifications
+- Integration methods
+- Data formats and schemas
+- Error handling
+- Privacy and data handling
+
+## Key Resources
+
+- **[misc/api.func/](../misc/api.func/)** - API function library documentation
+- **[misc/api.func/README.md](../misc/api.func/README.md)** - Quick reference
+- **[misc/api.func/API_FUNCTIONS_REFERENCE.md](../misc/api.func/API_FUNCTIONS_REFERENCE.md)** - Complete function reference
+
+## API Functions
+
+The `api.func` library provides:
+
+### `post_to_api()`
+Send container installation data to API.
+
+**Usage**:
+```bash
+post_to_api CTID STATUS APP_NAME
+```
+
+### `post_update_to_api()`
+Report application update status.
+
+**Usage**:
+```bash
+post_update_to_api CTID APP_NAME VERSION
+```
+
+### `get_error_description()`
+Get human-readable error description from exit code.
+
+**Usage**:
+```bash
+ERROR_DESC=$(get_error_description EXIT_CODE)
+```
+
+## API Integration Points
+
+### In Container Creation (`ct/AppName.sh`)
+- Called by build.func to report container creation
+- Sends initial container setup data
+- Reports success or failure
+
+### In Installation Scripts (`install/appname-install.sh`)
+- Called at start of installation
+- Called on installation completion
+- Called on error conditions
+
+### Data Collected
+- Container/VM ID
+- Application name and version
+- Installation duration
+- Success/failure status
+- Error codes (if failure)
+- Anonymous usage metrics
+
+## Privacy
+
+All API data:
+- ✅ Anonymous (no personal data)
+- ✅ Aggregated for statistics
+- ✅ Used only for project improvement
+- ✅ No tracking of user identities
+- ✅ Can be disabled if desired
+
+## API Architecture
+
+```
+Installation Scripts
+    │
+    ├─ Call: api.func functions
+    │
+    └─ POST to: https://api.community-scripts.org
+                │
+                ├─ Receives data
+                ├─ Validates format
+                ├─ Stores metrics
+                └─ Aggregates statistics
+                    │
+                    └─ Used for:
+                       ├─ Download tracking
+                       ├─ Error trending
+                       ├─ Feature usage stats
+                       └─ Project health monitoring
+```
+
+## Common API Tasks
+
+- **Enable API reporting** → Built-in by default, no configuration needed
+- **Disable API** → Set `api_disable="yes"` before running
+- **View API data** → Visit https://community-scripts.org/stats
+- **Report API errors** → [GitHub Issues](https://github.com/community-scripts/ProxmoxVE/issues)
+
+## Debugging API Issues
+
+If API calls fail:
+1. Check internet connectivity
+2. Verify API endpoint availability
+3. Review error codes in [EXIT_CODES.md](../EXIT_CODES.md)
+4. Check API function logs
+5. Report issues on GitHub
+
+## API Endpoint
+
+**Base URL**: `https://api.community-scripts.org`
+
+**Endpoints**:
+- `POST /install` - Report container installation
+- `POST /update` - Report application update
+- `GET /stats` - Public statistics
+
+---
+
+**Last Updated**: December 2025
+**Maintainers**: community-scripts team

docs/contribution/AI.md

@@ -0,0 +1,868 @@
+# 🤖 AI Contribution Guidelines for ProxmoxVE
+
+> **This documentation is intended for all AI assistants (GitHub Copilot, Claude, ChatGPT, etc.) contributing to this project.**
+
+## 🎯 Core Principles
+
+### 1. **Maximum Use of `tools.func` Functions**
+
+We have an extensive library of helper functions. **NEVER** implement your own solutions when a function already exists!
+
+### 2. **No Pointless Variables**
+
+Only create variables when they:
+
+- Are used multiple times
+- Improve readability
+- Are intended for configuration
+
+### 3. **Consistent Script Structure**
+
+All scripts follow an identical structure. Deviations are not acceptable.
+
+### 4. **Bare-Metal Installation**
+
+We do **NOT use Docker** for our installation scripts. All applications are installed directly on the system.
+
+---
+
+## 📁 Script Types and Their Structure
+
+### CT Script (`ct/AppName.sh`)
+
+```bash
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: AuthorName (GitHubUsername)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://application-url.com
+
+APP="AppName"
+var_tags="${var_tags:-tag1;tag2;tag3}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/appname ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "appname" "YourUsername/YourRepo"; then
+    msg_info "Stopping Service"
+    systemctl stop appname
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Data"
+    cp -r /opt/appname/data /opt/appname_data_backup
+    msg_ok "Backed up Data"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+
+    # Build steps...
+
+    msg_info "Restoring Data"
+    cp -r /opt/appname_data_backup/. /opt/appname/data
+    rm -rf /opt/appname_data_backup
+    msg_ok "Restored Data"
+
+    msg_info "Starting Service"
+    systemctl start appname
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:PORT${CL}"
+```
+
+### Install Script (`install/AppName-install.sh`)
+
+```bash
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: AuthorName (GitHubUsername)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://application-url.com
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  dependency1 \
+  dependency2
+msg_ok "Installed Dependencies"
+
+# Runtime Setup (ALWAYS use our functions!)
+NODE_VERSION="22" setup_nodejs
+# or
+PG_VERSION="16" setup_postgresql
+# or
+setup_uv
+# etc.
+
+fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+
+msg_info "Setting up Application"
+cd /opt/appname
+# Build/Setup Schritte...
+msg_ok "Set up Application"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/appname.service
+[Unit]
+Description=AppName Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/appname
+ExecStart=/path/to/executable
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now appname
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
+```
+
+---
+
+## 🔧 Available Helper Functions
+
+### Release Management
+
+| Function                      | Description                         | Example                                                       |
+| ----------------------------- | ----------------------------------- | ------------------------------------------------------------- |
+| `fetch_and_deploy_gh_release` | Fetches and installs GitHub Release | `fetch_and_deploy_gh_release "app" "owner/repo"`              |
+| `check_for_gh_release`        | Checks for new version              | `if check_for_gh_release "app" "YourUsername/YourRepo"; then` |
+
+**Modes for `fetch_and_deploy_gh_release`:**
+
+```bash
+# Tarball/Source (Standard)
+fetch_and_deploy_gh_release "appname" "owner/repo"
+
+# Binary (.deb)
+fetch_and_deploy_gh_release "appname" "owner/repo" "binary"
+
+# Prebuilt Archive
+fetch_and_deploy_gh_release "appname" "owner/repo" "prebuild" "latest" "/opt/appname" "filename.tar.gz"
+
+# Single Binary
+fetch_and_deploy_gh_release "appname" "owner/repo" "singlefile" "latest" "/opt/appname" "binary-linux-amd64"
+```
+
+**Clean Install Flag:**
+
+```bash
+CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo"
+```
+
+### Runtime/Language Setup
+
+| Function       | Variable(s)                   | Example                                              |
+| -------------- | ----------------------------- | ---------------------------------------------------- |
+| `setup_nodejs` | `NODE_VERSION`, `NODE_MODULE` | `NODE_VERSION="22" setup_nodejs`                     |
+| `setup_uv`     | `PYTHON_VERSION`              | `PYTHON_VERSION="3.12" setup_uv`                     |
+| `setup_go`     | `GO_VERSION`                  | `GO_VERSION="1.22" setup_go`                         |
+| `setup_rust`   | `RUST_VERSION`, `RUST_CRATES` | `RUST_CRATES="monolith" setup_rust`                  |
+| `setup_ruby`   | `RUBY_VERSION`                | `RUBY_VERSION="3.3" setup_ruby`                      |
+| `setup_java`   | `JAVA_VERSION`                | `JAVA_VERSION="21" setup_java`                       |
+| `setup_php`    | `PHP_VERSION`, `PHP_MODULES`  | `PHP_VERSION="8.3" PHP_MODULES="redis,gd" setup_php` |
+
+### Database Setup
+
+| Function              | Variable(s)                          | Example                                                     |
+| --------------------- | ------------------------------------ | ----------------------------------------------------------- |
+| `setup_postgresql`    | `PG_VERSION`, `PG_MODULES`           | `PG_VERSION="16" setup_postgresql`                          |
+| `setup_postgresql_db` | `PG_DB_NAME`, `PG_DB_USER`           | `PG_DB_NAME="mydb" PG_DB_USER="myuser" setup_postgresql_db` |
+| `setup_mariadb_db`    | `MARIADB_DB_NAME`, `MARIADB_DB_USER` | `MARIADB_DB_NAME="mydb" setup_mariadb_db`                   |
+| `setup_mysql`         | `MYSQL_VERSION`                      | `setup_mysql`                                               |
+| `setup_mongodb`       | `MONGO_VERSION`                      | `setup_mongodb`                                             |
+| `setup_clickhouse`    | -                                    | `setup_clickhouse`                                          |
+
+### Tools & Utilities
+
+| Function            | Description                        |
+| ------------------- | ---------------------------------- |
+| `setup_adminer`     | Installs Adminer for DB management |
+| `setup_composer`    | Install PHP Composer               |
+| `setup_ffmpeg`      | Install FFmpeg                     |
+| `setup_imagemagick` | Install ImageMagick                |
+| `setup_gs`          | Install Ghostscript                |
+| `setup_hwaccel`     | Configure hardware acceleration    |
+
+### Helper Utilities
+
+| Function                      | Description                  | Example                                   |
+| ----------------------------- | ---------------------------- | ----------------------------------------- |
+| `import_local_ip`             | Sets `$LOCAL_IP` variable    | `import_local_ip`                         |
+| `ensure_dependencies`         | Checks/installs dependencies | `ensure_dependencies curl jq`             |
+| `install_packages_with_retry` | APT install with retry       | `install_packages_with_retry nginx redis` |
+
+---
+
+## ❌ Anti-Patterns (NEVER use!)
+
+### 1. Pointless Variables
+
+```bash
+# ❌ WRONG - unnecessary variables
+APP_NAME="myapp"
+APP_DIR="/opt/${APP_NAME}"
+APP_USER="root"
+APP_PORT="3000"
+cd $APP_DIR
+
+# ✅ CORRECT - use directly
+cd /opt/myapp
+```
+
+### 2. Custom Download Logic
+
+```bash
+# ❌ WRONG - custom wget/curl logic
+RELEASE=$(curl -s https://api.github.com/repos/YourUsername/YourRepo/releases/latest | jq -r '.tag_name')
+wget https://github.com/YourUsername/YourRepo/archive/${RELEASE}.tar.gz
+tar -xzf ${RELEASE}.tar.gz
+mv repo-${RELEASE} /opt/myapp
+
+# ✅ CORRECT - use our function
+fetch_and_deploy_gh_release "myapp" "YourUsername/YourRepo" "tarball" "latest" "/opt/myapp"
+```
+
+### 3. Custom Version-Check Logic
+
+```bash
+# ❌ WRONG - custom version check
+CURRENT=$(cat /opt/myapp/version.txt)
+LATEST=$(curl -s https://api.github.com/repos/YourUsername/YourRepo/releases/latest | jq -r '.tag_name')
+if [[ "$CURRENT" != "$LATEST" ]]; then
+  # update...
+fi
+
+# ✅ CORRECT - use our function
+if check_for_gh_release "myapp" "YourUsername/YourRepo"; then
+  # update...
+fi
+```
+
+### 4. Docker-based Installation
+
+```bash
+# ❌ WRONG - using Docker
+docker pull myapp/myapp:latest
+docker run -d --name myapp myapp/myapp:latest
+
+# ✅ CORRECT - Bare-Metal Installation
+fetch_and_deploy_gh_release "myapp" "YourUsername/YourRepo"
+npm install && npm run build
+```
+
+### 5. Custom Runtime Installation
+
+```bash
+# ❌ WRONG - custom Node.js installation
+curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
+apt install -y nodejs
+
+# ✅ CORRECT - use our function
+NODE_VERSION="22" setup_nodejs
+```
+
+### 6. Redundant echo Statements
+
+```bash
+# ❌ WRONG - custom logging messages
+echo "Installing dependencies..."
+apt install -y curl
+echo "Done!"
+
+# ✅ CORRECT - use msg_info/msg_ok
+msg_info "Installing Dependencies"
+$STD apt install -y curl
+msg_ok "Installed Dependencies"
+```
+
+### 7. Missing $STD Usage
+
+```bash
+# ❌ WRONG - apt without $STD
+apt install -y nginx
+
+# ✅ CORRECT - with $STD for silent output
+$STD apt install -y nginx
+```
+
+### 8. Wrapping `tools.func` Functions in msg Blocks
+
+```bash
+# ❌ WRONG - tools.func functions have their own msg_info/msg_ok!
+msg_info "Installing Node.js"
+NODE_VERSION="22" setup_nodejs
+msg_ok "Installed Node.js"
+
+msg_info "Updating Application"
+CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+msg_ok "Updated Application"
+
+# ✅ CORRECT - call directly without msg wrapper
+NODE_VERSION="22" setup_nodejs
+
+CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+```
+
+**Functions with built-in messages (NEVER wrap in msg blocks):**
+
+- `fetch_and_deploy_gh_release`
+- `check_for_gh_release`
+- `setup_nodejs`
+- `setup_postgresql` / `setup_postgresql_db`
+- `setup_mariadb` / `setup_mariadb_db`
+- `setup_mongodb`
+- `setup_mysql`
+- `setup_ruby`
+- `setup_go`
+- `setup_java`
+- `setup_php`
+- `setup_uv`
+- `setup_rust`
+- `setup_composer`
+- `setup_ffmpeg`
+- `setup_imagemagick`
+- `setup_gs`
+- `setup_adminer`
+- `setup_hwaccel`
+
+### 9. Creating Unnecessary System Users
+
+```bash
+# ❌ WRONG - LXC containers run as root, no separate user needed
+useradd -m -s /usr/bin/bash appuser
+chown -R appuser:appuser /opt/appname
+sudo -u appuser npm install
+
+# ✅ CORRECT - run directly as root
+cd /opt/appname
+$STD npm install
+```
+
+### 10. Using `export` in .env Files
+
+```bash
+# ❌ WRONG - export is unnecessary in .env files
+cat <<EOF >/opt/appname/.env
+export DATABASE_URL=postgres://...
+export SECRET_KEY=abc123
+export NODE_ENV=production
+EOF
+
+# ✅ CORRECT - simple KEY=VALUE format (files are sourced with set -a)
+cat <<EOF >/opt/appname/.env
+DATABASE_URL=postgres://...
+SECRET_KEY=abc123
+NODE_ENV=production
+EOF
+```
+
+### 11. Using External Shell Scripts
+
+```bash
+# ❌ WRONG - external script that gets executed
+cat <<'EOF' >/opt/appname/install_script.sh
+#!/bin/bash
+cd /opt/appname
+npm install
+npm run build
+EOF
+chmod +x /opt/appname/install_script.sh
+$STD bash /opt/appname/install_script.sh
+rm -f /opt/appname/install_script.sh
+
+# ✅ CORRECT - run commands directly
+cd /opt/appname
+$STD npm install
+$STD npm run build
+```
+
+### 12. Using `sudo` in LXC Containers
+
+```bash
+# ❌ WRONG - sudo is unnecessary in LXC (already root)
+sudo -u postgres psql -c "CREATE DATABASE mydb;"
+sudo -u appuser npm install
+
+# ✅ CORRECT - use functions or run directly as root
+PG_DB_NAME="mydb" PG_DB_USER="myuser" setup_postgresql_db
+
+cd /opt/appname
+$STD npm install
+```
+
+### 13. Unnecessary `systemctl daemon-reload`
+
+```bash
+# ❌ WRONG - daemon-reload is only needed when MODIFYING existing services
+cat <<EOF >/etc/systemd/system/appname.service
+# ... service config ...
+EOF
+systemctl daemon-reload  # Unnecessary for new services!
+systemctl enable -q --now appname
+
+# ✅ CORRECT - new services don't need daemon-reload
+cat <<EOF >/etc/systemd/system/appname.service
+# ... service config ...
+EOF
+systemctl enable -q --now appname
+```
+
+### 14. Creating Custom Credentials Files
+
+```bash
+# ❌ WRONG - custom credentials file is not part of the standard template
+msg_info "Saving Credentials"
+cat <<EOF >~/appname.creds
+Database User: ${DB_USER}
+Database Pass: ${DB_PASS}
+EOF
+msg_ok "Saved Credentials"
+
+# ✅ CORRECT - credentials are stored in .env or shown in final message only
+# If you use setup_postgresql_db / setup_mariadb_db, a standard ~/[appname].creds is created automatically
+```
+
+### 15. Wrong Footer Pattern
+
+```bash
+# ❌ WRONG - old cleanup pattern with msg blocks
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"
+
+# ✅ CORRECT - use cleanup_lxc function
+motd_ssh
+customize
+cleanup_lxc
+```
+
+### 16. Manual Database Creation Instead of Functions
+
+```bash
+# ❌ WRONG - manual database creation
+DB_USER="myuser"
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE mydb WITH OWNER $DB_USER;"
+$STD sudo -u postgres psql -d mydb -c "CREATE EXTENSION IF NOT EXISTS postgis;"
+
+# ✅ CORRECT - use setup_postgresql_db function
+# This sets PG_DB_USER, PG_DB_PASS, PG_DB_NAME automatically
+PG_DB_NAME="mydb" PG_DB_USER="myuser" PG_DB_EXTENSIONS="postgis" setup_postgresql_db
+```
+
+### 17. Writing Files Without Heredocs
+
+```bash
+# ❌ WRONG - echo / printf / tee
+echo "# Config" > /opt/app/config.yml
+echo "port: 3000" >> /opt/app/config.yml
+
+printf "# Config\nport: 3000\n" > /opt/app/config.yml
+cat config.yml | tee /opt/app/config.yml
+```
+
+```bash
+# ✅ CORRECT - always use a single heredoc
+cat <<EOF >/opt/app/config.yml
+# Config
+port: 3000
+EOF
+```
+
+---
+
+## 📝 Important Rules
+
+### Variable Declarations (CT Script)
+
+```bash
+# Standard declarations (ALWAYS present)
+APP="AppName"
+var_tags="${var_tags:-tag1;tag2}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+```
+
+### Update-Script Pattern
+
+```bash
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  # 1. Check if installation exists
+  if [[ ! -d /opt/appname ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  # 2. Check for update
+  if check_for_gh_release "appname" "YourUsername/YourRepo"; then
+    # 3. Stop service
+    msg_info "Stopping Service"
+    systemctl stop appname
+    msg_ok "Stopped Service"
+
+    # 4. Backup data (if present)
+    msg_info "Backing up Data"
+    cp -r /opt/appname/data /opt/appname_data_backup
+    msg_ok "Backed up Data"
+
+    # 5. Perform clean install
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+
+    # 6. Rebuild (if needed)
+    cd /opt/appname
+    $STD npm install
+    $STD npm run build
+
+    # 7. Restore data
+    msg_info "Restoring Data"
+    cp -r /opt/appname_data_backup/. /opt/appname/data
+    rm -rf /opt/appname_data_backup
+    msg_ok "Restored Data"
+
+    # 8. Start service
+    msg_info "Starting Service"
+    systemctl start appname
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit  # IMPORTANT: Always end with exit!
+}
+```
+
+### Systemd Service Pattern
+
+```bash
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/appname.service
+[Unit]
+Description=AppName Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/appname
+Environment=NODE_ENV=production
+ExecStart=/usr/bin/node /opt/appname/server.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now appname
+msg_ok "Created Service"
+```
+
+### Installation Script Footer
+
+```bash
+# ALWAYS at the end of the install script:
+motd_ssh
+customize
+cleanup_lxc
+```
+
+---
+
+## 📖 Reference: Good Example Scripts
+
+Look at these recent well-implemented applications as reference:
+
+### Container Scripts (Latest 10)
+
+- [ct/thingsboard.sh](../ct/thingsboard.sh) - IoT platform with proper update_script
+- [ct/unifi-os-server.sh](../ct/unifi-os-server.sh) - Complex setup with podman
+- [ct/trip.sh](../ct/trip.sh) - Simple Ruby app
+- [ct/fladder.sh](../ct/fladder.sh) - Media app with database
+- [ct/qui.sh](../ct/qui.sh) - Lightweight utility
+- [ct/kutt.sh](../ct/kutt.sh) - Node.js with PostgreSQL
+- [ct/flatnotes.sh](../ct/flatnotes.sh) - Python notes app
+- [ct/investbrain.sh](../ct/investbrain.sh) - Finance app
+- [ct/gwn-manager.sh](../ct/gwn-manager.sh) - Network management
+- [ct/sportarr.sh](../ct/sportarr.sh) - Specialized \*Arr variant
+
+### Install Scripts (Latest)
+
+- [install/unifi-os-server-install.sh](../install/unifi-os-server-install.sh) - Complex setup with API integration
+- [install/trip-install.sh](../install/trip-install.sh) - Rails application setup
+- [install/mail-archiver-install.sh](../install/mail-archiver-install.sh) - Email-related service
+
+**Key things to notice:**
+
+- Proper error handling with `catch_errors`
+- Use of `check_for_gh_release` and `fetch_and_deploy_gh_release`
+- Correct backup/restore patterns in `update_script`
+- Footer always ends with `motd_ssh`, `customize`, `cleanup_lxc`
+- Website metadata requested via the website (Report issue on script page) if needed
+
+---
+
+## Website Metadata (Reference)
+
+Website metadata (name, slug, description, logo, categories, etc.) is **not** added as files in the repo. Contributors request or update it via the **website**: go to the script's page and use the **Report issue** button; the flow will guide you. The structure below is a **reference** for what metadata exists (e.g. for the form or when describing what you need).
+
+### JSON Structure (Reference)
+
+```json
+{
+  "name": "AppName",
+  "slug": "appname",
+  "categories": [1],
+  "date_created": "2026-01-16",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://docs.appname.com/",
+  "website": "https://appname.com/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/appname.webp",
+  "config_path": "/opt/appname/.env",
+  "description": "Short description of the application and its purpose.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/appname.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}
+```
+
+### Required Fields
+
+| Field                 | Type    | Description                                        |
+| --------------------- | ------- | -------------------------------------------------- |
+| `name`                | string  | Display name of the application                    |
+| `slug`                | string  | Lowercase, no spaces, used for filenames           |
+| `categories`          | array   | Category ID(s) - see category list below           |
+| `date_created`        | string  | Creation date (YYYY-MM-DD)                         |
+| `type`                | string  | `ct` for container, `vm` for virtual machine       |
+| `updateable`          | boolean | Whether update_script is implemented               |
+| `privileged`          | boolean | Whether container needs privileged mode            |
+| `interface_port`      | number  | Primary web interface port (or `null`)             |
+| `documentation`       | string  | Link to official docs                              |
+| `website`             | string  | Link to official website                           |
+| `logo`                | string  | URL to application logo (preferably selfhst icons) |
+| `config_path`         | string  | Path to main config file (or empty string)         |
+| `description`         | string  | Brief description of the application               |
+| `install_methods`     | array   | Installation configurations                        |
+| `default_credentials` | object  | Default username/password (or null)                |
+| `notes`               | array   | Additional notes/warnings                          |
+
+### Categories
+
+| ID  | Category                  |
+| --- | ------------------------- |
+| 0   | Miscellaneous             |
+| 1   | Proxmox & Virtualization  |
+| 2   | Operating Systems         |
+| 3   | Containers & Docker       |
+| 4   | Network & Firewall        |
+| 5   | Adblock & DNS             |
+| 6   | Authentication & Security |
+| 7   | Backup & Recovery         |
+| 8   | Databases                 |
+| 9   | Monitoring & Analytics    |
+| 10  | Dashboards & Frontends    |
+| 11  | Files & Downloads         |
+| 12  | Documents & Notes         |
+| 13  | Media & Streaming         |
+| 14  | \*Arr Suite               |
+| 15  | NVR & Cameras             |
+| 16  | IoT & Smart Home          |
+| 17  | ZigBee, Z-Wave & Matter   |
+| 18  | MQTT & Messaging          |
+| 19  | Automation & Scheduling   |
+| 20  | AI / Coding & Dev-Tools   |
+| 21  | Webservers & Proxies      |
+| 22  | Bots & ChatOps            |
+| 23  | Finance & Budgeting       |
+| 24  | Gaming & Leisure          |
+| 25  | Business & ERP            |
+
+### Notes Format
+
+```json
+"notes": [
+    {
+        "text": "Change the default password after first login!",
+        "type": "warning"
+    },
+    {
+        "text": "Requires at least 4GB RAM for optimal performance.",
+        "type": "info"
+    }
+]
+```
+
+**Note types:** `info`, `warning`, `error`
+
+### Examples with Credentials
+
+```json
+"default_credentials": {
+    "username": "admin",
+    "password": "admin"
+}
+```
+
+Or no credentials:
+
+```json
+"default_credentials": {
+    "username": null,
+    "password": null
+}
+```
+
+---
+
+## 🔍 Checklist Before PR Creation
+
+- [ ] No Docker installation used
+- [ ] `fetch_and_deploy_gh_release` used for GitHub releases
+- [ ] `check_for_gh_release` used for update checks
+- [ ] `setup_*` functions used for runtimes (nodejs, postgresql, etc.)
+- [ ] **`tools.func` functions NOT wrapped in msg_info/msg_ok blocks**
+- [ ] No redundant variables (only when used multiple times)
+- [ ] `$STD` before all apt/npm/build commands
+- [ ] `msg_info`/`msg_ok`/`msg_error` for logging (only for custom code)
+- [ ] Correct script structure followed (see templates)
+- [ ] Update function present and functional (CT scripts)
+- [ ] Data backup implemented in update function (if applicable)
+- [ ] `motd_ssh`, `customize`, `cleanup_lxc` at the end of install scripts
+- [ ] No custom download/version-check logic
+- [ ] All links point to `community-scripts/ProxmoxVE` (not `ProxmoxVED`!)
+- [ ] Website metadata requested via the website (Report issue) if needed
+- [ ] Category IDs are valid (0-25)
+- [ ] Default OS version is Debian 13 or newer (unless special requirement)
+- [ ] Default resources are reasonable for the application
+
+---
+
+## 💡 Tips for AI Assistants
+
+1. **ALWAYS search `tools.func` first** before implementing custom solutions
+2. **Use recent scripts as reference** (Thingsboard, UniFi OS, Trip, Flatnotes, etc.)
+3. **Ask when uncertain** instead of introducing wrong patterns
+4. **Test via GitHub** - push to your fork and test with curl (not local bash)
+   ```bash
+   bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"
+   # Wait 10-30 seconds after pushing - GitHub takes time to update files
+   ```
+5. **Consistency > Creativity** - follow established patterns strictly
+6. **Check the templates** - they show the correct structure
+7. **Don't wrap tools.func functions** - they handle their own msg_info/msg_ok output
+8. **Minimal variables** - only create variables that are truly reused multiple times
+9. **Always use $STD** - ensures silent/non-interactive execution
+10. **Reference good examples** - look at recent additions in each category
+
+---
+
+## 🍒 Important: Cherry-Picking Your Files for PR Submission
+
+⚠️ **CRITICAL**: When you submit your PR, you must use git cherry-pick to send ONLY your 2 files!
+
+Why? Because `setup-fork.sh` modifies 600+ files to update links. If you commit all changes, your PR will be impossible to merge.
+
+**See**: [README.md - Cherry-Pick Section](README.md#-cherry-pick-submitting-only-your-changes) for complete instructions on:
+
+- Creating a clean submission branch
+- Cherry-picking only your files (ct/myapp.sh, install/myapp-install.sh)
+- Verifying your PR has only 2 file changes (not 600+)
+
+**Quick reference**:
+
+```bash
+# Create clean branch from upstream
+git fetch upstream
+git checkout -b submit/myapp upstream/main
+
+# Cherry-pick your commit(s) or manually add your 2 files
+# Then push to your fork and create PR
+```
+
+---
+
+## 📚 Further Documentation
+
+- [CONTRIBUTING.md](CONTRIBUTING.md) - General contribution guidelines
+- [GUIDE.md](GUIDE.md) - Detailed developer documentation
+- [HELPER_FUNCTIONS.md](HELPER_FUNCTIONS.md) - Complete tools.func reference
+- [README.md](README.md) - Cherry-pick guide and workflow instructions
+- [../TECHNICAL_REFERENCE.md](../TECHNICAL_REFERENCE.md) - Technical deep dive
+- [../EXIT_CODES.md](../EXIT_CODES.md) - Exit code reference
+- [templates_ct/](templates_ct/) - CT script templates
+- [templates_install/](templates_install/) - Install script templates
+- [templates_json/](templates_json/) - Metadata structure reference; submit via website

docs/contribution/CODE-AUDIT.md

@@ -0,0 +1,41 @@
+# 🧪 Code Audit: LXC Script Flow
+
+This guide explains the current execution flow and what to verify during reviews.
+
+## Execution Flow (CT + Install)
+
+1. `ct/appname.sh` runs on the Proxmox host and sources `misc/build.func`.
+2. `build.func` orchestrates prompts, container creation, and invokes the install script.
+3. Inside the container, `misc/install.func` exposes helper functions via `$FUNCTIONS_FILE_PATH`.
+4. `install/appname-install.sh` performs the application install.
+5. The CT script prints the completion message.
+
+## Audit Checklist
+
+### CT Script (ct/)
+
+- Sources `misc/build.func` from `community-scripts/ProxmoxVE/main` (setup-fork.sh updates for forks).
+- Uses `check_for_gh_release` + `fetch_and_deploy_gh_release` for updates.
+- No Docker-based installs.
+
+### Install Script (install/)
+
+- Sources `$FUNCTIONS_FILE_PATH`.
+- Uses `tools.func` helpers (setup\_\*).
+- Ends with `motd_ssh`, `customize`, `cleanup_lxc`.
+
+### Website Metadata
+
+- Website metadata for new/updated scripts is requested via the website (Report issue on script page) where applicable.
+
+### Testing
+
+- Test via curl from your fork (CT script only).
+- Wait 10-30 seconds after push.
+
+## References
+
+- `docs/contribution/templates_ct/AppName.sh`
+- `docs/contribution/templates_install/AppName-install.sh`
+- `docs/contribution/templates_json/AppName.json`
+- `docs/contribution/GUIDE.md`

docs/contribution/CONTRIBUTING.md

@@ -0,0 +1,176 @@
+# Community Scripts Contribution Guide
+
+## **Welcome to the communty-scripts Repository!**
+
+📜 These documents outline the essential coding standards for all our scripts and JSON files. Adhering to these standards ensures that our codebase remains consistent, readable, and maintainable. By following these guidelines, we can improve collaboration, reduce errors, and enhance the overall quality of our project.
+
+### Why Coding Standards Matter
+
+Coding standards are crucial for several reasons:
+
+1. **Consistency**: Consistent code is easier to read, understand, and maintain. It helps new team members quickly get up to speed and reduces the learning curve.
+2. **Readability**: Clear and well-structured code is easier to debug and extend. It allows developers to quickly identify and fix issues.
+3. **Maintainability**: Code that follows a standard structure is easier to refactor and update. It ensures that changes can be made with minimal risk of introducing new bugs.
+4. **Collaboration**: When everyone follows the same standards, it becomes easier to collaborate on code. It reduces friction and misunderstandings during code reviews and merges.
+
+### Scope of These Documents
+
+These documents cover the coding standards for the following types of files in our project:
+
+- **`install/$AppName-install.sh` Scripts**: These scripts are responsible for the installation of applications.
+- **`ct/$AppName.sh` Scripts**: These scripts handle the creation and updating of containers.
+- **Website metadata**: Display data (name, description, logo, etc.) is requested via the website (Report issue on the script page), not via files in the repo.
+
+Each section provides detailed guidelines on various aspects of coding, including shebang usage, comments, variable naming, function naming, indentation, error handling, command substitution, quoting, script structure, and logging. Additionally, examples are provided to illustrate the application of these standards.
+
+By following the coding standards outlined in this document, we ensure that our scripts and JSON files are of high quality, making our project more robust and easier to manage. Please refer to this guide whenever you create or update scripts and JSON files to maintain a high standard of code quality across the project. 📚🔍
+
+Let's work together to keep our codebase clean, efficient, and maintainable! 💪🚀
+
+## Getting Started
+
+Before contributing, please ensure that you have the following setup:
+
+1. **Visual Studio Code** (recommended for script development)
+2. **Recommended VS Code Extensions:**
+   - [Shell Syntax](https://marketplace.visualstudio.com/items?itemName=bmalehorn.shell-syntax)
+   - [ShellCheck](https://marketplace.visualstudio.com/items?itemName=timonwong.shellcheck)
+   - [Shell Format](https://marketplace.visualstudio.com/items?itemName=foxundermoon.shell-format)
+
+### Important Notes
+
+- Use [AppName.sh](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_ct/AppName.sh) and [AppName-install.sh](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_install/AppName-install.sh) as templates when creating new scripts.
+
+---
+
+# 🚀 The Application Script (ct/AppName.sh)
+
+- You can find all coding standards, as well as the structure for this file [here](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_ct/AppName.md).
+- These scripts are responsible for container creation, setting the necessary variables and handling the update of the application once installed.
+
+---
+
+# 🛠 The Installation Script (install/AppName-install.sh)
+
+- You can find all coding standards, as well as the structure for this file [here](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_install/AppName-install.md).
+- These scripts are responsible for the installation of the application.
+
+---
+
+## 🚀 Building Your Own Scripts
+
+Start with the [template script](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_install/AppName-install.sh)
+
+---
+
+## 🤝 Contribution Process
+
+### 1. Fork the repository
+
+Fork to your GitHub account
+
+### 2. Clone your fork on your local environment
+
+```bash
+git clone https://github.com/yourUserName/ForkName
+```
+
+### 3. Create a new branch
+
+```bash
+git switch -c your-feature-branch
+```
+
+### 4. Run setup-fork.sh to auto-configure your fork
+
+```bash
+bash docs/contribution/setup-fork.sh --full
+```
+
+This script automatically:
+
+- Detects your GitHub username
+- Updates ALL curl URLs to point to your fork (for testing)
+- Creates `.git-setup-info` with your config
+- Backs up all modified files (\*.backup)
+
+**IMPORTANT**: This modifies 600+ files! Use cherry-pick when submitting your PR (see below).
+
+### 5. Commit ONLY your new application files
+
+```bash
+git commit -m "Your commit message"
+```
+
+### 5. Push to your fork
+
+```bash
+git push origin your-feature-branch
+```
+
+### 6. Cherry-Pick: Submit Only Your Files for PR
+
+⚠️ **IMPORTANT**: setup-fork.sh modified 600+ files. You MUST only submit your 2 new files!
+
+See [README.md - Cherry-Pick Guide](README.md#-cherry-pick-submitting-only-your-changes) for step-by-step instructions.
+
+Quick version:
+
+```bash
+# Create clean branch from upstream
+git fetch upstream
+git checkout -b submit/myapp upstream/main
+
+# Copy only your files
+cp ../your-work-branch/ct/myapp.sh ct/myapp.sh
+cp ../your-work-branch/install/myapp-install.sh install/myapp-install.sh
+
+# Commit and verify
+git add ct/myapp.sh install/myapp-install.sh
+git commit -m "feat: add MyApp"
+git diff upstream/main --name-only  # Should show ONLY your 2 files
+
+# Push and create PR
+git push origin submit/myapp
+```
+
+### 7. Create a Pull Request
+
+Open a Pull Request from `submit/myapp` → `community-scripts/ProxmoxVE/main`.
+
+Verify the PR shows ONLY these 2 files:
+
+- `ct/myapp.sh`
+- `install/myapp-install.sh`
+
+---
+
+# 🛠️ Developer Mode & Debugging
+
+When building or testing scripts, you can use the `dev_mode` variable to enable powerful debugging features. These flags can be combined (comma-separated).
+
+**Usage**:
+```bash
+# Example: Run with trace and keep the container even if it fails
+dev_mode="trace,keep" bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/myapp.sh)"
+```
+
+### Available Flags:
+
+| Flag | Description |
+| :--- | :--- |
+| `trace` | Enables `set -x` for maximum verbosity during execution. |
+| `keep` | Prevents the container from being deleted if the build fails. |
+| `pause` | Pauses execution at key points (e.g., before customization). |
+| `breakpoint` | Allows hardcoded `breakpoint` calls in scripts to drop to a shell. |
+| `logs` | Saves detailed build logs to `/var/log/community-scripts/`. |
+| `dryrun` | Bypasses actual container creation (limited support). |
+| `motd` | Forces an update of the Message of the Day (MOTD). |
+
+---
+
+## 📚 Pages
+
+- [CT Template: AppName.sh](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_ct/AppName.sh)
+- [Install Template: AppName-install.sh](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_install/AppName-install.sh)
+- [JSON Template: AppName.json](https://github.com/community-scripts/ProxmoxVE/blob/main/docs/contribution/templates_json/AppName.json) — metadata structure reference; submit via the website (Report issue on script page)

docs/contribution/FORK_SETUP.md

@@ -0,0 +1,231 @@
+# 🍴 Fork Setup Guide
+
+**Just forked ProxmoxVE? Run this first!**
+
+## Quick Start
+
+```bash
+# Clone your fork
+git clone https://github.com/YOUR_USERNAME/ProxmoxVE.git
+cd ProxmoxVE
+
+# Run setup script (auto-detects your username from git)
+bash docs/contribution/setup-fork.sh --full
+```
+
+That's it! ✅
+
+---
+
+## What Does It Do?
+
+The `setup-fork.sh` script automatically:
+
+1. **Detects** your GitHub username from git config
+2. **Updates ALL hardcoded links** to point to your fork:
+   - Documentation links pointing to `community-scripts/ProxmoxVE`
+   - **Curl download URLs** in scripts (e.g., `curl ... github.com/community-scripts/ProxmoxVE/main/...`)
+3. **Creates** `.git-setup-info` with your configuration details
+4. **Backs up** all modified files (\*.backup for safety)
+
+### Why Updating Curl Links Matters
+
+Your scripts contain `curl` commands that download dependencies from GitHub (build.func, tools.func, etc.):
+
+```bash
+# First line of ct/myapp.sh
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+```
+
+**WITHOUT setup-fork.sh:**
+
+- Script URLs still point to `community-scripts/ProxmoxVE/main`
+- If you test locally with `bash ct/myapp.sh`, you're testing local files, but the script's curl commands would download from **upstream** repo
+- Your modifications aren't actually being tested via the curl commands! ❌
+
+**AFTER setup-fork.sh:**
+
+- Script URLs are updated to `YourUsername/ProxmoxVE/main`
+- When you test via curl from GitHub: `bash -c "$(curl ... YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"`, it downloads from **your fork**
+- The script's curl commands also point to your fork, so you're actually testing your changes! ✅
+- ⏱️ **Important:** GitHub takes 10-30 seconds to recognize pushed files - wait before testing!
+
+```bash
+# Example: What setup-fork.sh changes
+
+# BEFORE (points to upstream):
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+
+# AFTER (points to your fork):
+source <(curl -fsSL https://raw.githubusercontent.com/john/ProxmoxVE/main/misc/build.func)
+```
+
+---
+
+## Usage
+
+### Auto-Detect (Recommended)
+
+```bash
+bash docs/contribution/setup-fork.sh --full
+```
+
+Automatically reads your GitHub username from `git remote origin url`
+
+### Specify Username
+
+```bash
+bash docs/contribution/setup-fork.sh --full john
+```
+
+Updates links to `github.com/john/ProxmoxVE`
+
+### Custom Repository Name
+
+```bash
+bash docs/contribution/setup-fork.sh --full john my-fork
+```
+
+Updates links to `github.com/john/my-fork`
+
+---
+
+## What Gets Updated?
+
+The script updates hardcoded links in these areas when using `--full`:
+
+- `ct/`, `install/`, `vm/` scripts
+- `misc/` function libraries
+- `docs/` (including `docs/contribution/`)
+- Code examples in documentation
+
+---
+
+## After Setup
+
+1. **Review changes**
+
+   ```bash
+   git diff docs/
+   ```
+
+2. **Read git workflow tips**
+
+   ```bash
+   cat .git-setup-info
+   ```
+
+3. **Start contributing**
+
+   ```bash
+   git checkout -b feature/my-app
+   # Make your changes...
+   git commit -m "feat: add my awesome app"
+   ```
+
+4. **Follow the guide**
+   ```bash
+   cat docs/contribution/GUIDE.md
+   ```
+
+---
+
+## Common Workflows
+
+### Keep Your Fork Updated
+
+```bash
+# Add upstream if you haven't already
+git remote add upstream https://github.com/community-scripts/ProxmoxVE.git
+
+# Get latest from upstream
+git fetch upstream
+git rebase upstream/main
+git push origin main
+```
+
+### Create a Feature Branch
+
+```bash
+git checkout -b feature/docker-improvements
+# Make changes...
+git push origin feature/docker-improvements
+# Then create PR on GitHub
+```
+
+### Sync Before Contributing
+
+```bash
+git fetch upstream
+git rebase upstream/main
+git push -f origin main  # Update your fork's main
+git checkout -b feature/my-feature
+```
+
+---
+
+## Troubleshooting
+
+### "Git is not installed" or "not a git repository"
+
+```bash
+# Make sure you cloned the repo first
+git clone https://github.com/YOUR_USERNAME/ProxmoxVE.git
+cd ProxmoxVE
+bash docs/contribution/setup-fork.sh --full
+```
+
+### "Could not auto-detect GitHub username"
+
+```bash
+# Your git origin URL isn't set up correctly
+git remote -v
+# Should show your fork URL, not community-scripts
+
+# Fix it:
+git remote set-url origin https://github.com/YOUR_USERNAME/ProxmoxVE.git
+bash docs/contribution/setup-fork.sh --full
+```
+
+### "Permission denied"
+
+```bash
+# Make script executable
+chmod +x docs/contribution/setup-fork.sh
+bash docs/contribution/setup-fork.sh --full
+```
+
+### Reverted Changes by Accident?
+
+```bash
+# Backups are created automatically
+git checkout docs/*.backup
+# Or just re-run setup-fork.sh
+bash docs/contribution/setup-fork.sh --full
+```
+
+---
+
+## Next Steps
+
+1. ✅ Run `bash docs/contribution/setup-fork.sh --full`
+2. 📖 Read [docs/contribution/GUIDE.md](GUIDE.md)
+3. 🍴 Choose your contribution path:
+   - **Containers** → [docs/ct/README.md](docs/ct/README.md)
+   - **Installation** → [docs/install/README.md](docs/install/README.md)
+   - **VMs** → [docs/vm/README.md](docs/vm/README.md)
+   - **Tools** → [docs/tools/README.md](docs/tools/README.md)
+4. 💻 Create your feature branch and contribute!
+
+---
+
+## Questions?
+
+- **Fork Setup Issues?** → See [Troubleshooting](#troubleshooting) above
+- **How to Contribute?** → [docs/contribution/GUIDE.md](GUIDE.md)
+- **Git Workflows?** → `cat .git-setup-info`
+- **Project Structure?** → [docs/README.md](docs/README.md)
+
+---
+
+## Happy Contributing! 🚀

docs/contribution/HELPER_FUNCTIONS.md

@@ -0,0 +1,753 @@
+# 🛠️ Helper Functions Reference
+
+**Quick reference for all helper functions available in `tools.func`**
+
+> These functions are automatically available in install scripts via `$FUNCTIONS_FILE_PATH`
+
+---
+
+## 📋 Table of Contents
+
+- [Scripts to Watch](#scripts-to-watch)
+- [Runtime & Language Setup](#runtime--language-setup)
+- [Database Setup](#database-setup)
+- [GitHub Release Helpers](#github-release-helpers)
+- [Tools & Utilities](#tools--utilities)
+- [SSL/TLS](#ssltls)
+- [Utility Functions](#utility-functions)
+- [Package Management](#package-management)
+
+---
+
+## 📚 Scripts to Watch
+
+**Learn from real, well-implemented scripts. Each app requires TWO files that work together:**
+
+| File               | Location                     | Purpose                                                                  |
+| ------------------ | ---------------------------- | ------------------------------------------------------------------------ |
+| **CT Script**      | `ct/appname.sh`              | Runs on **Proxmox host** - creates container, contains `update_script()` |
+| **Install Script** | `install/appname-install.sh` | Runs **inside container** - installs and configures the app              |
+
+> ⚠️ **Both files are ALWAYS required!** The CT script calls the install script automatically during container creation.
+
+Install scripts are **not** run directly by users; they are invoked by the CT script inside the container.
+
+### Node.js + PostgreSQL
+
+**Koel** - Music streaming with PHP + Node.js + PostgreSQL
+| File | Link |
+| ----------------- | -------------------------------------------------------- |
+| CT (update logic) | [ct/koel.sh](../../ct/koel.sh) |
+| Install | [install/koel-install.sh](../../install/koel-install.sh) |
+
+**Actual Budget** - Finance app with npm global install
+| File | Link |
+| ----------------- | ------------------------------------------------------------------------ |
+| CT (update logic) | [ct/actualbudget.sh](../../ct/actualbudget.sh) |
+| Install | [install/actualbudget-install.sh](../../install/actualbudget-install.sh) |
+
+### Python + uv
+
+**MeTube** - YouTube downloader with Python uv + Node.js + Deno
+| File | Link |
+| ----------------- | ------------------------------------------------------------ |
+| CT (update logic) | [ct/metube.sh](../../ct/metube.sh) |
+| Install | [install/metube-install.sh](../../install/metube-install.sh) |
+
+**Endurain** - Fitness tracker with Python uv + PostgreSQL/PostGIS
+| File | Link |
+| ----------------- | ---------------------------------------------------------------- |
+| CT (update logic) | [ct/endurain.sh](../../ct/endurain.sh) |
+| Install | [install/endurain-install.sh](../../install/endurain-install.sh) |
+
+### Java + Gradle
+
+**BookLore** - Book management with Java 21 + Gradle + MariaDB + Nginx
+| File | Link |
+| ----------------- | -------------------------------------------------------------- |
+| CT (update logic) | [ct/booklore.sh](../../ct/booklore.sh) |
+| Install | [install/booklore-install.sh](../../install/booklore-install.sh) |
+
+### Pnpm + Meilisearch
+
+**KaraKeep** - Bookmark manager with Pnpm + Meilisearch + Puppeteer
+| File | Link |
+| ----------------- | -------------------------------------------------------------- |
+| CT (update logic) | [ct/karakeep.sh](../../ct/karakeep.sh) |
+| Install | [install/karakeep-install.sh](../../install/karakeep-install.sh) |
+
+### PHP + MariaDB/MySQL
+
+**Wallabag** - Read-it-later with PHP + MariaDB + Redis + Nginx
+| File | Link |
+| ----------------- | ---------------------------------------------------------------- |
+| CT (update logic) | [ct/wallabag.sh](../../ct/wallabag.sh) |
+| Install | [install/wallabag-install.sh](../../install/wallabag-install.sh) |
+
+**InvoiceNinja** - Invoicing with PHP + MariaDB + Supervisor
+| File | Link |
+| ----------------- | ------------------------------------------------------------------------ |
+| CT (update logic) | [ct/invoiceninja.sh](../../ct/invoiceninja.sh) |
+| Install | [install/invoiceninja-install.sh](../../install/invoiceninja-install.sh) |
+
+**BookStack** - Wiki/Docs with PHP + MariaDB + Apache
+| File | Link |
+| ----------------- | ------------------------------------------------------------------ |
+| CT (update logic) | [ct/bookstack.sh](../../ct/bookstack.sh) |
+| Install | [install/bookstack-install.sh](../../install/bookstack-install.sh) |
+
+### PHP + SQLite (Simple)
+
+**Speedtest Tracker** - Speedtest with PHP + SQLite + Nginx
+| File | Link |
+| ----------------- | ---------------------------------------------------------------------------------- |
+| CT (update logic) | [ct/speedtest-tracker.sh](../../ct/speedtest-tracker.sh) |
+| Install | [install/speedtest-tracker-install.sh](../../install/speedtest-tracker-install.sh) |
+
+---
+
+## Runtime & Language Setup
+
+### `setup_nodejs`
+
+Install Node.js from NodeSource repository.
+
+```bash
+# Default (Node.js 24)
+setup_nodejs
+
+# Specific version
+NODE_VERSION="20" setup_nodejs
+NODE_VERSION="22" setup_nodejs
+NODE_VERSION="24" setup_nodejs
+```
+
+### `setup_go`
+
+Install Go programming language (latest stable).
+
+```bash
+setup_go
+
+# Use in script
+setup_go
+cd /opt/myapp
+$STD go build -o myapp .
+```
+
+### `setup_rust`
+
+Install Rust via rustup.
+
+```bash
+setup_rust
+
+# Use in script
+setup_rust
+source "$HOME/.cargo/env"
+$STD cargo build --release
+```
+
+### `setup_uv`
+
+Install Python uv package manager (fast pip/venv replacement).
+
+```bash
+# Default
+setup_uv
+
+# Install a specific Python version
+PYTHON_VERSION="3.12" setup_uv
+
+# Use in script
+setup_uv
+cd /opt/myapp
+$STD uv sync --locked
+```
+
+### `setup_ruby`
+
+Install Ruby from official repositories.
+
+```bash
+setup_ruby
+```
+
+### `setup_php`
+
+Install PHP with configurable modules and FPM/Apache support.
+
+```bash
+# Basic PHP
+setup_php
+
+# Full configuration
+PHP_VERSION="8.4" \
+PHP_MODULE="mysqli,gd,curl,mbstring,xml,zip,ldap" \
+PHP_FPM="YES" \
+PHP_APACHE="YES" \
+setup_php
+```
+
+**Environment Variables:**
+| Variable | Default | Description |
+| ------------- | ------- | ------------------------------- |
+| `PHP_VERSION` | `8.4` | PHP version to install |
+| `PHP_MODULE` | `""` | Comma-separated list of modules |
+| `PHP_FPM` | `NO` | Install PHP-FPM |
+| `PHP_APACHE` | `NO` | Install Apache module |
+
+### `setup_composer`
+
+Install PHP Composer package manager.
+
+```bash
+setup_php
+setup_composer
+
+# Use in script
+$STD composer install --no-dev
+```
+
+### `setup_java`
+
+Install Java (OpenJDK).
+
+```bash
+# Default (Java 21)
+setup_java
+
+# Specific version
+JAVA_VERSION="17" setup_java
+JAVA_VERSION="21" setup_java
+```
+
+---
+
+## Database Setup
+
+### `setup_mariadb`
+
+Install MariaDB server.
+
+```bash
+setup_mariadb
+```
+
+### `setup_mariadb_db`
+
+Create a MariaDB database and user. Sets `$MARIADB_DB_PASS` with the generated password.
+
+```bash
+setup_mariadb
+MARIADB_DB_NAME="myapp_db" MARIADB_DB_USER="myapp_user" setup_mariadb_db
+
+# After calling, these variables are available:
+# $MARIADB_DB_NAME - Database name
+# $MARIADB_DB_USER - Database user
+# $MARIADB_DB_PASS - Generated password (saved to ~/[appname].creds)
+```
+
+### `setup_mysql`
+
+Install MySQL server.
+
+```bash
+setup_mysql
+```
+
+### `setup_postgresql`
+
+Install PostgreSQL server.
+
+```bash
+# Default (PostgreSQL 16)
+setup_postgresql
+
+# Specific version
+PG_VERSION="16" setup_postgresql
+PG_VERSION="16" setup_postgresql
+```
+
+### `setup_postgresql_db`
+
+Create a PostgreSQL database and user. Sets `$PG_DB_PASS` with the generated password.
+
+```bash
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="myapp_db" PG_DB_USER="myapp_user" setup_postgresql_db
+
+# After calling, these variables are available:
+# $PG_DB_NAME - Database name
+# $PG_DB_USER - Database user
+# $PG_DB_PASS - Generated password (saved to ~/[appname].creds)
+```
+
+### `setup_mongodb`
+
+Install MongoDB server.
+
+```bash
+setup_mongodb
+```
+
+### `setup_clickhouse`
+
+Install ClickHouse analytics database.
+
+```bash
+setup_clickhouse
+```
+
+---
+
+## Advanced Repository Management
+
+### `setup_deb822_repo`
+
+The modern standard (Debian 12+) for adding external repositories. Automatically handles GPG keys and sources.
+
+```bash
+setup_deb822_repo \
+  "nodejs" \
+  "https://deb.nodesource.com/gpgkey/nodesource.gpg.key" \
+  "https://deb.nodesource.com/node_22.x" \
+  "bookworm" \
+  "main"
+```
+
+### `prepare_repository_setup`
+
+A high-level helper that performs three critical tasks before adding a new repo:
+1. Cleans up old repo files matching the names provided.
+2. Removes old GPG keyrings from all standard locations.
+3. Ensures APT is in a working state (fixes locks, runs update).
+
+```bash
+# Clean up old mysql/mariadb artifacts before setup
+prepare_repository_setup "mariadb" "mysql"
+```
+
+### `cleanup_tool_keyrings`
+
+Force-removes GPG keys for specific tools from `/usr/share/keyrings/`, `/etc/apt/keyrings/`, and `/etc/apt/trusted.gpg.d/`.
+
+```bash
+cleanup_tool_keyrings "docker" "kubernetes"
+```
+
+---
+
+## GitHub Release Helpers
+
+> **Note**: `fetch_and_deploy_gh_release` is the **preferred method** for downloading GitHub releases. It handles version tracking automatically. Only use `get_latest_github_release` if you need the version number separately.
+
+### `fetch_and_deploy_gh_release`
+
+**Primary method** for downloading and extracting GitHub releases. Handles version tracking automatically.
+
+```bash
+# Basic usage - downloads tarball to /opt/appname
+fetch_and_deploy_gh_release "appname" "owner/repo"
+
+# With explicit parameters
+fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+
+# Pre-built release with specific asset pattern
+fetch_and_deploy_gh_release "koel" "koel/koel" "prebuild" "latest" "/opt/koel" "koel-*.tar.gz"
+
+# Clean install (removes old directory first) - used in update_script
+CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo" "tarball" "latest" "/opt/appname"
+```
+
+**Parameters:**
+| Parameter | Default | Description |
+| --------------- | ------------- | ----------------------------------------------------------------- |
+| `name` | required | App name (for version tracking) |
+| `repo` | required | GitHub repo (`owner/repo`) |
+| `type` | `tarball` | Release type: `tarball`, `zipball`, `prebuild`, `binary` |
+| `version` | `latest` | Version tag or `latest` |
+| `dest` | `/opt/[name]` | Destination directory |
+| `asset_pattern` | `""` | For `prebuild`: glob pattern to match asset (e.g. `app-*.tar.gz`) |
+
+**Environment Variables:**
+| Variable | Description |
+| ----------------- | ------------------------------------------------------------ |
+| `CLEAN_INSTALL=1` | Remove destination directory before extracting (for updates) |
+
+### `check_for_gh_release`
+
+Check if a newer version is available. Returns 0 if update needed, 1 if already at latest. **Use in `update_script()` function.**
+
+```bash
+# In update_script() function in ct/appname.sh
+if check_for_gh_release "appname" "owner/repo"; then
+  msg_info "Updating..."
+  # Stop services, backup, update, restore, start
+  CLEAN_INSTALL=1 fetch_and_deploy_gh_release "appname" "owner/repo"
+  msg_ok "Updated successfully!"
+fi
+```
+
+### `get_latest_github_release`
+
+Get the latest release version from a GitHub repository. **Only use if you need the version number separately** (e.g., for manual download or display).
+
+```bash
+RELEASE=$(get_latest_github_release "owner/repo")
+echo "Latest version: $RELEASE"
+```
+
+---
+
+## Tools & Utilities
+
+### `setup_meilisearch`
+
+Install Meilisearch, a lightning-fast search engine.
+
+```bash
+setup_meilisearch
+
+# Use in script
+$STD php artisan scout:sync-index-settings
+```
+
+### `setup_yq`
+
+Install yq YAML processor.
+
+```bash
+setup_yq
+
+# Use in script
+yq '.server.port = 8080' -i config.yaml
+````
+
+### `setup_ffmpeg`
+
+Install FFmpeg with common codecs.
+
+```bash
+setup_ffmpeg
+```
+
+### `setup_hwaccel`
+
+Setup GPU hardware acceleration (Intel/AMD/NVIDIA).
+
+```bash
+# Only runs if GPU passthrough is detected (/dev/dri, /dev/nvidia0, /dev/kfd)
+setup_hwaccel
+```
+
+### `setup_imagemagick`
+
+Install ImageMagick 7 from source.
+
+```bash
+setup_imagemagick
+```
+
+### `setup_docker`
+
+Install Docker Engine.
+
+```bash
+setup_docker
+```
+
+### `setup_adminer`
+
+Install Adminer for database management.
+
+```bash
+setup_mariadb
+setup_adminer
+
+# Access at http://IP/adminer
+```
+
+---
+
+## SSL/TLS
+
+### `create_self_signed_cert`
+
+Create a self-signed SSL certificate.
+
+```bash
+create_self_signed_cert
+
+# Creates files at:
+# /etc/ssl/[appname]/[appname].key
+# /etc/ssl/[appname]/[appname].crt
+```
+
+---
+
+## Utility Functions
+
+### `verify_tool_version`
+
+Validate that the installed major version matches the expected version. Useful during upgrades or troubleshooting.
+
+```bash
+# Verify Node.js is version 22
+verify_tool_version "nodejs" "22" "$(node -v | grep -oP '^v\K[0-9]+')"
+```
+
+### `get_lxc_ip`
+
+Set the `$LOCAL_IP` variable with the container's IP address.
+
+```bash
+get_lxc_ip
+echo "Container IP: $LOCAL_IP"
+
+# Use in config files
+sed -i "s/localhost/$LOCAL_IP/g" /opt/myapp/config.yaml
+```
+
+### `ensure_dependencies`
+
+Ensure packages are installed (installs if missing).
+
+```bash
+ensure_dependencies "jq" "unzip" "curl"
+```
+
+### `msg_info` / `msg_ok` / `msg_error` / `msg_warn`
+
+Display formatted messages.
+
+```bash
+msg_info "Installing application..."
+# ... do work ...
+msg_ok "Installation complete"
+
+msg_warn "Optional feature not available"
+msg_error "Installation failed"
+```
+
+---
+
+## Package Management
+
+### `cleanup_lxc`
+
+Final cleanup function - call at end of install script.
+
+```bash
+# At the end of your install script
+motd_ssh
+customize
+cleanup_lxc  # Handles autoremove, autoclean, cache cleanup
+```
+
+### `install_packages_with_retry`
+
+Install packages with automatic retry on failure.
+
+```bash
+install_packages_with_retry "package1" "package2" "package3"
+```
+
+### `prepare_repository_setup`
+
+Prepare system for adding new repositories (cleanup old repos, keyrings).
+
+```bash
+prepare_repository_setup "mariadb" "mysql"
+```
+
+---
+
+## Complete Examples
+
+### Example 1: Node.js App with PostgreSQL (install script)
+
+```bash
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: YourUsername
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/example/myapp
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+msg_ok "Installed Dependencies"
+
+# Setup runtimes and databases FIRST
+NODE_VERSION="22" setup_nodejs
+PG_VERSION="16" setup_postgresql
+PG_DB_NAME="myapp" PG_DB_USER="myapp" setup_postgresql_db
+get_lxc_ip
+
+# Download app using fetch_and_deploy (handles version tracking)
+fetch_and_deploy_gh_release "myapp" "example/myapp" "tarball" "latest" "/opt/myapp"
+
+msg_info "Setting up MyApp"
+cd /opt/myapp
+$STD npm ci --production
+msg_ok "Setup MyApp"
+
+msg_info "Configuring MyApp"
+cat <<EOF >/opt/myapp/.env
+DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost/${PG_DB_NAME}
+HOST=${LOCAL_IP}
+PORT=3000
+EOF
+msg_ok "Configured MyApp"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/myapp.service
+[Unit]
+Description=MyApp
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/myapp
+ExecStart=/usr/bin/node /opt/myapp/server.js
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now myapp
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
+```
+
+### Example 2: Matching Container Script (ct script)
+
+```bash
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: YourUsername
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/example/myapp
+
+APP="MyApp"
+var_tags="${var_tags:-webapp}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-6}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/myapp ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  # check_for_gh_release returns true if update available
+  if check_for_gh_release "myapp" "example/myapp"; then
+    msg_info "Stopping Service"
+    systemctl stop myapp
+    msg_ok "Stopped Service"
+
+    msg_info "Creating Backup"
+    cp /opt/myapp/.env /tmp/myapp_env.bak
+    msg_ok "Created Backup"
+
+    # CLEAN_INSTALL=1 removes old dir before extracting
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "myapp" "example/myapp" "tarball" "latest" "/opt/myapp"
+
+    msg_info "Restoring Config & Rebuilding"
+    cp /tmp/myapp_env.bak /opt/myapp/.env
+    rm /tmp/myapp_env.bak
+    cd /opt/myapp
+    $STD npm ci --production
+    msg_ok "Restored Config & Rebuilt"
+
+    msg_info "Starting Service"
+    systemctl start myapp
+    msg_ok "Started Service"
+
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
+```
+
+### Example 3: PHP App with MariaDB (install script)
+
+```bash
+#!/usr/bin/env bash
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+msg_ok "Installed Dependencies"
+
+# PHP with FPM and common modules
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="bcmath,curl,gd,intl,mbstring,mysql,xml,zip" setup_php
+setup_composer
+setup_mariadb
+MARIADB_DB_NAME="myapp" MARIADB_DB_USER="myapp" setup_mariadb_db
+get_lxc_ip
+
+# Download pre-built release (with asset pattern)
+fetch_and_deploy_gh_release "myapp" "example/myapp" "prebuild" "latest" "/opt/myapp" "myapp-*.tar.gz"
+
+msg_info "Configuring MyApp"
+cd /opt/myapp
+cp .env.example .env
+sed -i "s|APP_URL=.*|APP_URL=http://${LOCAL_IP}|" .env
+sed -i "s|DB_DATABASE=.*|DB_DATABASE=${MARIADB_DB_NAME}|" .env
+sed -i "s|DB_USERNAME=.*|DB_USERNAME=${MARIADB_DB_USER}|" .env
+sed -i "s|DB_PASSWORD=.*|DB_PASSWORD=${MARIADB_DB_PASS}|" .env
+$STD composer install --no-dev --no-interaction
+$STD php artisan key:generate --force
+$STD php artisan migrate --force
+chown -R www-data:www-data /opt/myapp
+msg_ok "Configured MyApp"
+
+# ... nginx config, service creation ...
+
+motd_ssh
+customize
+cleanup_lxc
+```

docs/contribution/README.md

@@ -0,0 +1,654 @@
+# 🤝 Contributing to ProxmoxVE
+
+Complete guide to contributing to the ProxmoxVE project - from your first fork to submitting your pull request.
+
+---
+
+## 📋 Table of Contents
+
+- [Quick Start](#quick-start)
+- [Setting Up Your Fork](#setting-up-your-fork)
+- [Coding Standards](#coding-standards)
+- [Code Audit](#code-audit)
+- [Guides & Resources](#guides--resources)
+- [FAQ](#faq)
+
+---
+
+## 🚀 Quick Start
+
+### 60 Seconds to Contributing (Development)
+
+When developing and testing **in your fork**:
+
+```bash
+# 1. Fork on GitHub
+# Visit: https://github.com/community-scripts/ProxmoxVE → Fork (top right)
+
+# 2. Clone your fork
+git clone https://github.com/YOUR_USERNAME/ProxmoxVE.git
+cd ProxmoxVE
+
+# 3. Auto-configure your fork (IMPORTANT - updates all links!)
+bash docs/contribution/setup-fork.sh --full
+
+# 4. Create a feature branch
+git checkout -b feature/my-awesome-app
+
+# 5. Read the guides
+cat docs/README.md              # Documentation overview
+cat docs/ct/DETAILED_GUIDE.md   # For container scripts
+cat docs/install/DETAILED_GUIDE.md  # For install scripts
+
+# 6. Create your contribution
+cp docs/contribution/templates_ct/AppName.sh ct/myapp.sh
+cp docs/contribution/templates_install/AppName-install.sh install/myapp-install.sh
+# ... edit files ...
+
+# 7. Push to your fork and test via GitHub
+git push origin feature/my-awesome-app
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"
+# ⏱️ GitHub may take 10-30 seconds to update files - be patient!
+
+# 8. Request website metadata via the website
+# Go to the script's page on the website, use the "Report issue" button — it will guide you.
+
+# 9. No direct install-script test
+# Install scripts are executed by the CT script inside the container
+
+# 10. Commit ONLY your new files (see Cherry-Pick section below!)
+git add ct/myapp.sh install/myapp-install.sh
+git commit -m "feat: add MyApp container and install scripts"
+git push origin feature/my-awesome-app
+
+# 11. Create Pull Request on GitHub
+```
+
+⚠️ **IMPORTANT: After setup-fork.sh, many files are modified!**
+
+See the **Cherry-Pick: Submitting Only Your Changes** section below to learn how to push ONLY your 2 files instead of 600+ modified files!
+
+### How Users Run Scripts (After Merged)
+
+Once your script is merged to the main repository, users download and run it from GitHub like this:
+
+```bash
+# ✅ Users run from GitHub (normal usage after PR merged)
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/myapp.sh)"
+
+# Install scripts are called by the CT script and are not run directly by users
+```
+
+### Development vs. Production Execution
+
+**During Development (you, in your fork):**
+
+```bash
+# You MUST test via curl from your GitHub fork (not local files!)
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"
+
+# The script's curl commands are updated by setup-fork.sh to point to YOUR fork
+# This ensures you're testing your actual changes
+# ⏱️ Wait 10-30 seconds after pushing - GitHub updates slowly
+```
+
+**After Merge (users, from GitHub):**
+
+```bash
+# Users download the script from upstream via curl
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/myapp.sh)"
+
+# The script's curl commands now point back to upstream (community-scripts)
+# This is the stable, tested version
+```
+
+**Summary:**
+
+- **Development**: Push to fork, test via curl → setup-fork.sh changes curl URLs to your fork
+- **Production**: curl | bash from upstream → curl URLs point to community-scripts repo
+
+---
+
+## 🍴 Setting Up Your Fork
+
+### Automatic Setup (Recommended)
+
+When you clone your fork, run the setup script to automatically configure everything:
+
+```bash
+bash docs/contribution/setup-fork.sh --full
+```
+
+**What it does:**
+
+- Auto-detects your GitHub username from git config
+- Auto-detects your fork repository name
+- Updates **ALL** hardcoded links to point to your fork instead of the main repo (`--full`)
+- Creates `.git-setup-info` with your configuration
+- Allows you to develop and test independently in your fork
+
+**Why this matters:**
+
+Without running this script, all links in your fork will still point to the upstream repository (community-scripts). This is a problem when testing because:
+
+- Installation links will pull from upstream, not your fork
+- Updates will target the wrong repository
+- Your contributions won't be properly tested
+
+**After running setup-fork.sh:**
+
+Your fork is fully configured and ready to develop. You can:
+
+- Push changes to your fork
+- Test via curl: `bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"`
+- All links will reference your fork for development
+- ⏱️ Wait 10-30 seconds after pushing - GitHub takes time to update
+- Commit and push with confidence
+- Create a PR to merge into upstream
+
+**See**: [FORK_SETUP.md](FORK_SETUP.md) for detailed instructions
+
+### Manual Setup
+
+If the script doesn't work, manually configure:
+
+```bash
+# Set git user
+git config user.name "Your Name"
+git config user.email "your.email@example.com"
+
+# Add upstream remote for syncing with main repo
+git remote add upstream https://github.com/community-scripts/ProxmoxVE.git
+
+# Verify remotes
+git remote -v
+# Should show: origin (your fork) and upstream (main repo)
+```
+
+---
+
+## 📖 Coding Standards
+
+All scripts and configurations must follow our coding standards to ensure consistency and quality.
+
+### Available Guides
+
+- **[CONTRIBUTING.md](CONTRIBUTING.md)** - Essential coding standards and best practices
+- **[CODE-AUDIT.md](CODE-AUDIT.md)** - Code review checklist and audit procedures
+- **[GUIDE.md](GUIDE.md)** - Comprehensive contribution guide
+- **[HELPER_FUNCTIONS.md](HELPER_FUNCTIONS.md)** - Reference for all tools.func helper functions
+- **Container Scripts** - `/ct/` templates and guidelines
+- **Install Scripts** - `/install/` templates and guidelines
+- **Website metadata** – Request via the website (Report issue on the script page); see [templates_json/AppName.md](templates_json/AppName.md)
+
+### Quick Checklist
+
+- ✅ Use `/ct/example.sh` as template for container scripts
+- ✅ Use `/install/example-install.sh` as template for install scripts
+- ✅ Follow naming conventions: `appname.sh` and `appname-install.sh`
+- ✅ Include proper shebang: `#!/usr/bin/env bash`
+- ✅ Add copyright header with author
+- ✅ Handle errors properly with `msg_error`, `msg_ok`, etc.
+- ✅ Test before submitting PR (via curl from your fork, not local bash)
+- ✅ Update documentation if needed
+
+---
+
+## 🔍 Code Audit
+
+Before submitting a pull request, ensure your code passes our audit:
+
+**See**: [CODE_AUDIT.md](CODE_AUDIT.md) for complete audit checklist
+
+Key points:
+
+- Code consistency with existing scripts
+- Proper error handling
+- Correct variable naming
+- Adequate comments and documentation
+- Security best practices
+
+---
+
+## 🍒 Cherry-Pick: Submitting Only Your Changes
+
+**Problem**: `setup-fork.sh` modifies 600+ files to update links. You don't want to submit all of those changes - only your new 2 files!
+
+**Solution**: Use git cherry-pick to select only YOUR files.
+
+### Step-by-Step Cherry-Pick Guide
+
+#### 1. Check what changed
+
+```bash
+# See all modified files
+git status
+
+# Verify your files are there
+git status | grep -E "ct/myapp|install/myapp"
+```
+
+#### 2. Create a clean feature branch for submission
+
+```bash
+# Go back to upstream main (clean slate)
+git fetch upstream
+git checkout -b submit/myapp upstream/main
+
+# Don't use your modified main branch!
+```
+
+#### 3. Cherry-pick ONLY your files
+
+Cherry-picking extracts specific changes from commits:
+
+```bash
+# Option A: Cherry-pick commits that added your files
+# (if you committed your files separately)
+git cherry-pick <commit-hash-of-your-files>
+
+# Option B: Manually copy and commit only your files
+# From your work branch, get the file contents
+git show feature/my-awesome-app:ct/myapp.sh > /tmp/myapp.sh
+git show feature/my-awesome-app:install/myapp-install.sh > /tmp/myapp-install.sh
+
+# Add them to the clean branch
+cp /tmp/myapp.sh ct/myapp.sh
+cp /tmp/myapp-install.sh install/myapp-install.sh
+
+# Commit
+git add ct/myapp.sh install/myapp-install.sh
+git commit -m "feat: add MyApp"
+```
+
+#### 4. Verify only your files are in the PR
+
+```bash
+# Check git diff against upstream
+git diff upstream/main --name-only
+# Should show ONLY:
+#   ct/myapp.sh
+#   install/myapp-install.sh
+```
+
+#### 5. Push and create PR
+
+```bash
+# Push your clean submission branch
+git push origin submit/myapp
+
+# Create PR on GitHub from: submit/myapp → main
+```
+
+### Why This Matters
+
+- ✅ Clean PR with only your changes
+- ✅ Easier for maintainers to review
+- ✅ Faster merge without conflicts
+- ❌ Without cherry-pick: PR has 600+ file changes (won't merge!)
+
+### If You Made a Mistake
+
+```bash
+# Delete the messy branch
+git branch -D submit/myapp
+
+# Go back to clean branch
+git checkout -b submit/myapp upstream/main
+
+# Try cherry-picking again
+```
+
+---
+
+If you're using **Visual Studio Code** with an AI assistant, you can leverage our detailed guidelines to generate high-quality contributions automatically.
+
+### How to Use AI Assistance
+
+1. **Open the AI Guidelines**
+
+   ```
+   docs/contribution/AI.md
+   ```
+
+   This file contains all requirements, patterns, and examples for writing proper scripts.
+
+2. **Prepare Your Information**
+
+   Before asking the AI to generate code, gather:
+   - **Repository URL**: e.g., `https://github.com/owner/myapp`
+   - **Dockerfile/Script**: Paste the app's installation instructions (if available)
+   - **Dependencies**: What packages does it need? (Node, Python, Java, PostgreSQL, etc.)
+   - **Ports**: What port does it listen on? (e.g., 3000, 8080, 5000)
+   - **Configuration**: Any environment variables or config files?
+
+3. **Tell the AI Assistant**
+
+   Share with the AI:
+   - The repository URL
+   - The Dockerfile or install instructions
+   - Link to [docs/contribution/AI.md](AI.md) with instructions to follow
+
+   **Example prompt:**
+
+   ```
+   I want to contribute a container script for MyApp to ProxmoxVE.
+   Repository: https://github.com/owner/myapp
+
+   Here's the Dockerfile:
+   [paste Dockerfile content]
+
+   Please follow the guidelines in docs/contribution/AI.md to create:
+   1. ct/myapp.sh (container script)
+   2. install/myapp-install.sh (installation script)
+
+   Website listing/metadata is requested separately via the website (Report issue on the script page).
+   ```
+
+4. **AI Will Generate**
+
+   The AI will produce scripts that:
+   - Follow all ProxmoxVE patterns and conventions
+   - Use helper functions from `tools.func` correctly
+   - Include proper error handling and messages
+   - Have correct update mechanisms
+   - Are ready to submit as a PR
+
+   Website listing/metadata is requested separately via the website (Report issue on the script page).
+
+### Key Points for AI Assistants
+
+- **Templates Location**: `docs/contribution/templates_ct/AppName.sh`, `templates_install/`, `templates_json/`
+- **Guidelines**: Must follow `docs/contribution/AI.md` exactly
+- **Helper Functions**: Use only functions from `misc/tools.func` - never write custom ones
+- **Testing**: Always test before submission via curl from your fork
+  ```bash
+  bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"
+  # Wait 10-30 seconds after pushing changes
+  ```
+- **No Docker**: Container scripts must be bare-metal, not Docker-based
+
+### Benefits
+
+- **Speed**: AI generates boilerplate in seconds
+- **Consistency**: Follows same patterns as 200+ existing scripts
+- **Quality**: Less bugs and more maintainable code
+- **Learning**: See how your app should be structured
+
+---
+
+### Documentation
+
+- **[docs/README.md](../README.md)** - Main documentation hub
+- **[docs/ct/README.md](../ct/README.md)** - Container scripts overview
+- **[docs/install/README.md](../install/README.md)** - Installation scripts overview
+- **[docs/ct/DETAILED_GUIDE.md](../ct/DETAILED_GUIDE.md)** - Complete ct/ script reference
+- **[docs/install/DETAILED_GUIDE.md](../install/DETAILED_GUIDE.md)** - Complete install/ script reference
+- **[docs/TECHNICAL_REFERENCE.md](../TECHNICAL_REFERENCE.md)** - Architecture deep-dive
+- **[docs/EXIT_CODES.md](../EXIT_CODES.md)** - Exit codes reference
+- **[docs/DEV_MODE.md](../DEV_MODE.md)** - Debugging guide
+
+### Community Guides
+
+See [USER_SUBMITTED_GUIDES.md](USER_SUBMITTED_GUIDES.md) for excellent community-written guides:
+
+- Home Assistant installation and configuration
+- Frigate setup on Proxmox
+- Docker and Portainer installation
+- Database setup and optimization
+- And many more!
+
+### Templates
+
+Use these templates when creating new scripts:
+
+```bash
+# Container script template
+cp docs/contribution/templates_ct/AppName.sh ct/my-app.sh
+
+# Installation script template
+cp docs/contribution/templates_install/AppName-install.sh install/my-app-install.sh
+```
+
+For website metadata (description, logo, etc.), use the Report issue button on the script's page on the website.
+
+**Template Features:**
+
+- Updated to match current codebase patterns
+- Includes all available helper functions from `tools.func`
+- Examples for Node.js, Python, PHP, Go applications
+- Database setup examples (MariaDB, PostgreSQL)
+- Proper service creation and cleanup
+
+---
+
+## 🔄 Git Workflow
+
+### Keep Your Fork Updated
+
+```bash
+# Fetch latest from upstream
+git fetch upstream
+
+# Rebase your work on latest main
+git rebase upstream/main
+
+# Push to your fork
+git push -f origin main
+```
+
+### Create Feature Branch
+
+```bash
+# Create and switch to new branch
+git checkout -b feature/my-feature
+
+# Make changes...
+git add .
+git commit -m "feat: description of changes"
+
+# Push to your fork
+git push origin feature/my-feature
+
+# Create Pull Request on GitHub
+```
+
+### Before Submitting PR
+
+1. **Sync with upstream**
+
+   ```bash
+   git fetch upstream
+   git rebase upstream/main
+   ```
+
+2. **Test your changes** (via curl from your fork)
+
+   ```bash
+   bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/my-app.sh)"
+   # Follow prompts and test the container
+   # ⏱️ Wait 10-30 seconds after pushing - GitHub takes time to update
+   ```
+
+3. **Check code standards**
+   - [ ] Follows template structure
+   - [ ] Proper error handling
+   - [ ] Documentation updated (if needed)
+   - [ ] No hardcoded values
+   - [ ] Version tracking implemented
+
+4. **Push final changes**
+   ```bash
+   git push origin feature/my-feature
+   ```
+
+---
+
+## 📋 Pull Request Checklist
+
+Before opening a PR:
+
+- [ ] Code follows coding standards (see CONTRIBUTING.md)
+- [ ] All templates used correctly
+- [ ] Tested on Proxmox VE
+- [ ] Error handling implemented
+- [ ] Documentation updated (if applicable)
+- [ ] No merge conflicts
+- [ ] Synced with upstream/main
+- [ ] Clear PR title and description
+
+---
+
+## ❓ FAQ
+
+### ❌ Why can't I test with `bash ct/myapp.sh` locally?
+
+You might try:
+
+```bash
+# ❌ WRONG - This won't test your actual changes!
+bash ct/myapp.sh
+./ct/myapp.sh
+sh ct/myapp.sh
+```
+
+**Why this fails:**
+
+- `bash ct/myapp.sh` uses the LOCAL clone file
+- The LOCAL file doesn't execute the curl commands - it's already on disk
+- The curl URLs INSIDE the script are modified by setup-fork.sh, but they're not executed
+- So you can't verify if your curl URLs actually work
+- Users will get the curl URL version (which may be broken)
+
+**Solution:** Always test via curl from GitHub:
+
+```bash
+# ✅ CORRECT - Tests the actual GitHub URLs
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/myapp.sh)"
+```
+
+### ❓ How do I test my changes?
+
+You **cannot** test locally with `bash ct/myapp.sh` from your cloned directory!
+
+You **must** push to GitHub and test via curl from your fork:
+
+```bash
+# 1. Push your changes to your fork
+git push origin feature/my-awesome-app
+
+# 2. Test via curl (this loads the script from GitHub, not local files)
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/my-app.sh)"
+
+# 3. For verbose/debug output, pass environment variables
+VERBOSE=yes bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/my-app.sh)"
+DEV_MODE_LOGS=true bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/my-app.sh)"
+```
+
+**Why?**
+
+- Local `bash ct/myapp.sh` uses local files from your clone
+- But the script's INTERNAL curl commands have been modified by setup-fork.sh to point to your fork
+- This discrepancy means you're not actually testing the curl URLs
+- Testing via curl ensures the script downloads from YOUR fork GitHub URLs
+- ⏱️ **Important:** GitHub takes 10-30 seconds to recognize newly pushed files. Wait before testing!
+
+**What if local bash worked?**
+
+You'd be testing local files only, not the actual GitHub URLs that users will download. This means broken curl links wouldn't be caught during testing.
+
+### What if my PR has conflicts?
+
+```bash
+# Sync with upstream main repository
+git fetch upstream
+git rebase upstream/main
+
+# Resolve conflicts in your editor
+git add .
+git rebase --continue
+git push -f origin your-branch
+```
+
+### How do I keep my fork updated?
+
+Two ways:
+
+**Option 1: Run setup script again**
+
+```bash
+bash docs/contribution/setup-fork.sh --full
+```
+
+**Option 2: Manual sync**
+
+```bash
+git fetch upstream
+git rebase upstream/main
+git push -f origin main
+```
+
+### Where do I ask questions?
+
+- **GitHub Issues**: For bugs and feature requests
+- **GitHub Discussions**: For general questions and ideas
+- **Discord**: Community-scripts server for real-time chat
+
+---
+
+## 🎓 Learning Resources
+
+### For First-Time Contributors
+
+1. Read: [docs/README.md](../README.md) - Documentation overview
+2. Read: [CONTRIBUTING.md](CONTRIBUTING.md) - Essential coding standards
+3. Choose your path:
+   - Containers → [docs/ct/DETAILED_GUIDE.md](../ct/DETAILED_GUIDE.md)
+   - Installation → [docs/install/DETAILED_GUIDE.md](../install/DETAILED_GUIDE.md)
+4. Study existing scripts in same category
+5. Create your contribution
+
+### For Experienced Developers
+
+1. Review [CONTRIBUTING.md](CONTRIBUTING.md) - Coding standards
+2. Review [CODE_AUDIT.md](CODE_AUDIT.md) - Audit checklist
+3. Check templates in `/docs/contribution/templates_*/`
+4. Use AI assistants with [AI.md](AI.md) for code generation
+5. Submit PR with confidence
+
+### For Using AI Assistants
+
+See "Using AI Assistants" section above for:
+
+- How to structure prompts
+- What information to provide
+- How to validate AI output
+
+---
+
+## 🚀 Ready to Contribute?
+
+1. **Fork** the repository
+2. **Clone** your fork and **setup** with `bash docs/contribution/setup-fork.sh --full`
+3. **Choose** your contribution type (container, installation, tools, etc.)
+4. **Read** the appropriate detailed guide
+5. **Create** your feature branch
+6. **Develop** and **test** your changes
+7. **Commit** with clear messages
+8. **Push** to your fork
+9. **Create** Pull Request
+
+---
+
+## 📞 Contact & Support
+
+- **GitHub**: [community-scripts/ProxmoxVE](https://github.com/community-scripts/ProxmoxVE)
+- **Issues**: [GitHub Issues](https://github.com/community-scripts/ProxmoxVE/issues)
+- **Discussions**: [GitHub Discussions](https://github.com/community-scripts/ProxmoxVE/discussions)
+- **Discord**: [Join Server](https://discord.gg/UHrpNWGwkH)
+
+---
+
+**Thank you for contributing to ProxmoxVE!** 🙏
+
+Your efforts help make Proxmox VE automation accessible to everyone. Happy coding! 🚀

docs/contribution/setup-fork.sh

@@ -0,0 +1,336 @@
+#!/bin/bash
+
+################################################################################
+# ProxmoxVE Fork Setup Script
+#
+# Automatically configures documentation and scripts for your fork
+# Detects your GitHub username and repository from git config
+# Updates all hardcoded links to point to your fork
+#
+# Usage:
+#   ./setup-fork.sh                    # Auto-detect from git config (updates misc/ only)
+#   ./setup-fork.sh YOUR_USERNAME      # Specify username (updates misc/ only)
+#   ./setup-fork.sh YOUR_USERNAME REPO_NAME  # Specify both (updates misc/ only)
+#   ./setup-fork.sh --full             # Update all files including ct/, install/, vm/, etc.
+#
+# Examples:
+#   ./setup-fork.sh john               # Uses john/ProxmoxVE, updates misc/ only
+#   ./setup-fork.sh john my-fork       # Uses john/my-fork, updates misc/ only
+#   ./setup-fork.sh --full             # Auto-detect + update all files
+################################################################################
+
+set -e
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# Default values
+REPO_NAME="ProxmoxVE"
+USERNAME=""
+AUTO_DETECT=true
+UPDATE_ALL=false
+
+################################################################################
+# FUNCTIONS
+################################################################################
+
+print_header() {
+  echo -e "\n${BLUE}╔════════════════════════════════════════════════════════════╗${NC}"
+  echo -e "${BLUE}║${NC} ProxmoxVE Fork Setup Script"
+  echo -e "${BLUE}║${NC} Configuring for your fork..."
+  echo -e "${BLUE}╚════════════════════════════════════════════════════════════╝${NC}\n"
+}
+
+print_info() {
+  echo -e "${BLUE}ℹ${NC}  $1"
+}
+
+print_success() {
+  echo -e "${GREEN}✓${NC}  $1"
+}
+
+print_warning() {
+  echo -e "${YELLOW}⚠${NC}  $1"
+}
+
+print_error() {
+  echo -e "${RED}✗${NC}  $1"
+}
+
+# Detect username from git remote
+detect_username() {
+  local remote_url
+
+  # Try to get from origin
+  if ! remote_url=$(git config --get remote.origin.url 2>/dev/null); then
+    return 1
+  fi
+
+  # Extract username from SSH or HTTPS URL
+  if [[ $remote_url =~ git@github.com:([^/]+) ]]; then
+    echo "${BASH_REMATCH[1]}"
+  elif [[ $remote_url =~ github.com/([^/]+) ]]; then
+    echo "${BASH_REMATCH[1]}"
+  else
+    return 1
+  fi
+}
+
+# Detect repo name from git remote
+detect_repo_name() {
+  local remote_url
+
+  if ! remote_url=$(git config --get remote.origin.url 2>/dev/null); then
+    return 1
+  fi
+
+  # Extract repo name (remove .git if present)
+  if [[ $remote_url =~ /([^/]+?)(.git)?$ ]]; then
+    local repo="${BASH_REMATCH[1]}"
+    echo "${repo%.git}"
+  else
+    return 1
+  fi
+}
+
+# Ask user for confirmation
+confirm() {
+  local prompt="$1"
+  local response
+
+  echo -ne "${YELLOW}${prompt} (y/n)${NC} "
+  read -r response
+  [[ $response =~ ^[Yy]$ ]]
+}
+
+# Update links in files
+update_links() {
+  local old_repo="community-scripts"
+  local old_name="ProxmoxVE"
+  local new_owner="$1"
+  local new_repo="$2"
+  local files_updated=0
+
+  print_info "Scanning for hardcoded links..."
+
+  # Change to repo root
+  local repo_root=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+
+  # Determine search path
+  local search_path="$repo_root/misc"
+  if [[ "$UPDATE_ALL" == "true" ]]; then
+    search_path="$repo_root"
+    print_info "Searching all files (--full mode)"
+  else
+    print_info "Searching misc/ directory only (core functions)"
+  fi
+
+  echo ""
+
+  # Find all files containing the old repo reference
+  while IFS= read -r file; do
+    # Count occurrences
+    local count=$(grep -E -c "(github.com|githubusercontent.com)/$old_repo/$old_name" "$file" 2>/dev/null || echo 0)
+
+    if [[ $count -gt 0 ]]; then
+      # Backup original
+      cp "$file" "$file.backup"
+
+      # Replace links - use different sed syntax for BSD/macOS vs GNU sed
+      if sed --version &>/dev/null 2>&1; then
+        # GNU sed
+        sed -E -i "s@(github.com|githubusercontent.com)/$old_repo/$old_name@\\1/$new_owner/$new_repo@g" "$file"
+      else
+        # BSD sed (macOS)
+        sed -E -i '' "s@(github.com|githubusercontent.com)/$old_repo/$old_name@\\1/$new_owner/$new_repo@g" "$file"
+      fi
+
+      ((files_updated++))
+      print_success "Updated $file ($count links)"
+    fi
+  done < <(find "$search_path" -type f \( -name "*.md" -o -name "*.sh" -o -name "*.func" -o -name "*.json" \) -not -path "*/.git/*" 2>/dev/null | xargs grep -E -l "(github.com|githubusercontent.com)/$old_repo/$old_name" 2>/dev/null)
+
+  return $files_updated
+}
+
+# Create user git config setup info
+create_git_setup_info() {
+  local username="$1"
+
+  cat >.git-setup-info <<'EOF'
+# Git Configuration for ProxmoxVE Development
+
+## Recommended Git Configuration
+
+### Set up remotes for easy syncing with upstream:
+
+```bash
+# View your current remotes
+git remote -v
+
+# If you don't have 'upstream' configured, add it:
+git remote add upstream https://github.com/community-scripts/ProxmoxVE.git
+
+# Verify both remotes exist:
+git remote -v
+# Should show:
+# origin     https://github.com/YOUR_USERNAME/ProxmoxVE.git (fetch)
+# origin     https://github.com/YOUR_USERNAME/ProxmoxVE.git (push)
+# upstream   https://github.com/community-scripts/ProxmoxVE.git (fetch)
+# upstream   https://github.com/community-scripts/ProxmoxVE.git (push)
+```
+
+### Configure Git User (if not done globally)
+
+```bash
+git config user.name "Your Name"
+git config user.email "your.email@example.com"
+
+# Or configure globally:
+git config --global user.name "Your Name"
+git config --global user.email "your.email@example.com"
+```
+
+### Useful Git Workflows
+
+**Keep your fork up-to-date:**
+```bash
+git fetch upstream
+git rebase upstream/main
+git push origin main
+```
+
+**Create feature branch:**
+```bash
+git checkout -b feature/my-awesome-app
+# Make changes...
+git commit -m "feat: add my awesome app"
+git push origin feature/my-awesome-app
+```
+
+**Pull latest from upstream:**
+```bash
+git fetch upstream
+git merge upstream/main
+```
+
+---
+
+For more help, see: docs/contribution/README.md
+EOF
+
+  print_success "Created .git-setup-info file"
+}
+
+################################################################################
+# MAIN LOGIC
+################################################################################
+
+print_header
+
+# Parse command line arguments
+if [[ $# -gt 0 ]]; then
+  # Check for --full flag
+  if [[ "$1" == "--full" ]]; then
+    UPDATE_ALL=true
+    shift # Remove --full from arguments
+  fi
+
+  # Process remaining arguments
+  if [[ $# -gt 0 ]]; then
+    USERNAME="$1"
+    AUTO_DETECT=false
+
+    if [[ $# -gt 1 ]]; then
+      REPO_NAME="$2"
+    fi
+  fi
+fi
+
+# Try auto-detection
+if [[ -z "$USERNAME" ]]; then
+  if username=$(detect_username); then
+    USERNAME="$username"
+    print_success "Detected GitHub username: $USERNAME"
+  else
+    print_error "Could not auto-detect GitHub username from git config"
+    echo -e "${YELLOW}Please run:${NC}"
+    echo "  ./setup-fork.sh YOUR_USERNAME"
+    exit 1
+  fi
+fi
+
+# Auto-detect repo name if needed
+if repo_name=$(detect_repo_name); then
+  REPO_NAME="$repo_name"
+  if [[ "$REPO_NAME" != "ProxmoxVE" ]]; then
+    print_info "Detected custom repo name: $REPO_NAME"
+  else
+    print_success "Using default repo name: ProxmoxVE"
+  fi
+fi
+
+# Validate inputs
+if [[ -z "$USERNAME" ]]; then
+  print_error "Username cannot be empty"
+  exit 1
+fi
+
+if [[ -z "$REPO_NAME" ]]; then
+  print_error "Repository name cannot be empty"
+  exit 1
+fi
+
+# Show what we'll do
+echo -e "${BLUE}Configuration Summary:${NC}"
+echo "  Repository URL: https://github.com/$USERNAME/$REPO_NAME"
+if [[ "$UPDATE_ALL" == "true" ]]; then
+  echo "  Files to update: ALL files (ct/, install/, vm/, misc/, docs/, etc.)"
+else
+  echo "  Files to update: misc/ directory only (core functions)"
+fi
+echo ""
+
+# Ask for confirmation
+if ! confirm "Apply these changes?"; then
+  print_warning "Setup cancelled"
+  exit 0
+fi
+
+echo ""
+
+# Update all links
+if update_links "$USERNAME" "$REPO_NAME"; then
+  links_changed=$?
+  print_success "Updated $links_changed files"
+else
+  print_warning "No links needed updating or some files not found"
+fi
+
+# Create git setup info file
+create_git_setup_info "$USERNAME"
+
+# Final summary
+echo ""
+echo -e "${GREEN}╔════════════════════════════════════════════════════════════╗${NC}"
+echo -e "${GREEN}║${NC} Fork Setup Complete!                                    ${GREEN}║${NC}"
+echo -e "${GREEN}╚════════════════════════════════════════════════════════════╝${NC}"
+echo ""
+
+print_success "All documentation links updated to point to your fork"
+print_info "Your fork: https://github.com/$USERNAME/$REPO_NAME"
+print_info "Upstream: https://github.com/community-scripts/ProxmoxVE"
+echo ""
+
+echo -e "${BLUE}Next Steps:${NC}"
+echo "  1. Review the changes: git diff"
+echo "  2. Check .git-setup-info for recommended git workflow"
+echo "  3. Start developing: git checkout -b feature/my-app"
+echo "  4. Read: docs/contribution/README.md"
+echo ""
+
+print_success "Happy contributing! 🚀"

docs/contribution/templates_ct/AppName.md

@@ -0,0 +1,278 @@
+# CT Container Scripts - Quick Reference
+
+> [!WARNING]
+> **This is legacy documentation.** Refer to the **modern template** at [templates_ct/AppName.sh](AppName.sh) for best practices.
+>
+> Current templates use:
+>
+> - `tools.func` helpers instead of manual patterns
+> - `check_for_gh_release` and `fetch_and_deploy_gh_release` from build.func
+> - Automatic setup-fork.sh configuration
+
+---
+
+## Before Creating a Script
+
+1. **Fork & Clone:**
+
+   ```bash
+   git clone https://github.com/YOUR_USERNAME/ProxmoxVE.git
+   cd ProxmoxVE
+   ```
+
+2. **Run setup-fork.sh** (updates all curl URLs to your fork):
+
+   ```bash
+   bash docs/contribution/setup-fork.sh
+   ```
+
+3. **Copy the Modern Template:**
+
+   ```bash
+   cp templates_ct/AppName.sh ct/MyApp.sh
+   # Edit ct/MyApp.sh with your app details
+   ```
+
+4. **Test Your Script (via GitHub):**
+
+   ⚠️ **Important:** You must push to GitHub and test via curl, not `bash ct/MyApp.sh`!
+
+   ```bash
+   # Push your changes to your fork first
+   git push origin feature/my-awesome-app
+
+   # Then test via curl (this loads from YOUR fork, not local files)
+   bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/MyApp.sh)"
+   ```
+
+   > 💡 **Why?** The script's curl commands are modified by setup-fork.sh, but local execution uses local files, not the updated GitHub URLs. Testing via curl ensures your script actually works.
+   >
+   > ⏱️ **Note:** GitHub sometimes takes 10-30 seconds to update files. If you don't see your changes, wait and try again.
+
+5. **Cherry-Pick for PR** (submit ONLY your 3-4 files):
+   - See [Cherry-Pick Guide](../README.md) for step-by-step git commands
+
+---
+
+## Template Structure
+
+The modern template includes:
+
+### Header
+
+```bash
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# (Note: setup-fork.sh changes this URL to point to YOUR fork during development)
+```
+
+### Metadata
+
+```bash
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: YourUsername
+# License: MIT
+APP="MyApp"
+var_tags="app-category;foss"
+var_cpu="2"
+var_ram="2048"
+var_disk="4"
+var_os="alpine"
+var_version="3.20"
+var_unprivileged="1"
+```
+
+### Core Setup
+
+```bash
+header_info "$APP"
+variables
+color
+catch_errors
+```
+
+### Update Function
+
+The modern template provides a standard update pattern:
+
+```bash
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  # Use tools.func helpers:
+  check_for_gh_release "myapp" "owner/repo"
+  fetch_and_deploy_gh_release "myapp" "owner/repo" "tarball" "latest" "/opt/myapp"
+}
+```
+
+---
+
+## Key Patterns
+
+### Check for Updates (App Repository)
+
+Use `check_for_gh_release` with the **app repo**:
+
+```bash
+check_for_gh_release "myapp" "owner/repo"
+```
+
+### Deploy External App
+
+Use `fetch_and_deploy_gh_release` with the **app repo**:
+
+```bash
+fetch_and_deploy_gh_release "myapp" "owner/repo"
+```
+
+### Avoid Manual Version Checking
+
+❌ OLD (manual):
+
+```bash
+RELEASE=$(curl -fsSL https://api.github.com/repos/myapp/myapp/releases/latest | grep tag_name)
+```
+
+✅ NEW (use tools.func):
+
+```bash
+fetch_and_deploy_gh_release "myapp" "owner/repo"
+```
+
+---
+
+## Best Practices
+
+1. **Use tools.func helpers** - Don't manually curl for versions
+2. **Only add app-specific dependencies** - Don't add ca-certificates, curl, gnupg (handled by build.func)
+3. **Test via curl from your fork** - Push first, then: `bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/MyApp.sh)"`
+4. **Wait for GitHub to update** - Takes 10-30 seconds after git push
+5. **Cherry-pick only YOUR files** - Submit only ct/MyApp.sh, install/MyApp-install.sh (2 files). Website metadata: use Report issue on the script's page on the website.
+6. **Verify before PR** - Run `git diff upstream/main --name-only` to confirm only your files changed
+
+---
+
+## Common Update Patterns
+
+See the [modern template](AppName.sh) and [AI.md](../AI.md) for complete working examples.
+
+Recent reference scripts with good update functions:
+
+- [Trip](https://github.com/community-scripts/ProxmoxVE/blob/main/ct/trip.sh)
+- [Thingsboard](https://github.com/community-scripts/ProxmoxVE/blob/main/ct/thingsboard.sh)
+- [UniFi](https://github.com/community-scripts/ProxmoxVE/blob/main/ct/unifi.sh)
+
+---
+
+## Need Help?
+
+- **[README.md](../README.md)** - Full contribution workflow
+- **[AI.md](../AI.md)** - AI-generated script guidelines
+- **[FORK_SETUP.md](../FORK_SETUP.md)** - Why setup-fork.sh is important
+- **[Slack Community](https://discord.gg/your-link)** - Ask questions
+
+````
+
+### 3.4 **Verbosity**
+
+- Use the appropriate flag (**-q** in the examples) for a command to suppress its output.
+  Example:
+
+```bash
+curl -fsSL
+unzip -q
+````
+
+- If a command does not come with this functionality use `$STD` to suppress it's output.
+
+Example:
+
+```bash
+$STD php artisan migrate --force
+$STD php artisan config:clear
+```
+
+### 3.5 **Backups**
+
+- Backup user data if necessary.
+- Move all user data back in the directory when the update is finished.
+
+> [!NOTE]
+> This is not meant to be a permanent backup
+
+Example backup:
+
+```bash
+  mv /opt/snipe-it /opt/snipe-it-backup
+```
+
+Example config restore:
+
+```bash
+  cp /opt/snipe-it-backup/.env /opt/snipe-it/.env
+  cp -r /opt/snipe-it-backup/public/uploads/ /opt/snipe-it/public/uploads/
+  cp -r /opt/snipe-it-backup/storage/private_uploads /opt/snipe-it/storage/private_uploads
+```
+
+### 3.6 **Cleanup**
+
+- Do not forget to remove any temporary files/folders such as zip-files or temporary backups.
+  Example:
+
+```bash
+  rm -rf /opt/v${RELEASE}.zip
+  rm -rf /opt/snipe-it-backup
+```
+
+### 3.7 **No update function**
+
+- In case you can not provide an update function use the following code to provide user feedback.
+
+```bash
+function update_script() {
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -d /opt/snipeit ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+    msg_error "Currently we don't provide an update function for this ${APP}."
+    exit
+}
+```
+
+---
+
+## 4 **End of the script**
+
+- `start`: Launches Whiptail dialogue
+- `build_container`: Collects and integrates user settings
+- `description`: Sets LXC container description
+- With `echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"` you can point the user to the IP:PORT/folder needed to access the app.
+
+```bash
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
+```
+
+---
+
+## 5. **Contribution checklist**
+
+- [ ] Shebang is correctly set (`#!/usr/bin/env bash`).
+- [ ] Correct link to _build.func_
+- [ ] Metadata (author, license) is included at the top.
+- [ ] Variables follow naming conventions.
+- [ ] Update function exists.
+- [ ] Update functions checks if app is installed and for new version.
+- [ ] Update function cleans up temporary files.
+- [ ] Script ends with a helpful message for the user to reach the application.

docs/contribution/templates_ct/AppName.sh

@@ -0,0 +1,138 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: [YourGitHubUsername]
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: [SOURCE_URL e.g. https://github.com/example/app]
+
+# ============================================================================
+# APP CONFIGURATION
+# ============================================================================
+# These values are sent to build.func and define default container resources.
+# Users can customize these during installation via the interactive prompts.
+# ============================================================================
+
+APP="[AppName]"
+var_tags="${var_tags:-[category1];[category2]}" # Max 2 tags, semicolon-separated
+var_cpu="${var_cpu:-2}"                         # CPU cores: 1-4 typical
+var_ram="${var_ram:-2048}"                      # RAM in MB: 512, 1024, 2048, etc.
+var_disk="${var_disk:-8}"                       # Disk in GB: 6, 8, 10, 20 typical
+var_os="${var_os:-debian}"                      # OS: debian, ubuntu, alpine
+var_version="${var_version:-13}"                # OS Version: 13 (Debian), 24.04 (Ubuntu), 3.21 (Alpine)
+var_unprivileged="${var_unprivileged:-1}"       # 1=unprivileged (secure), 0=privileged (for Docker/Podman)
+
+# ============================================================================
+# INITIALIZATION - These are required in all CT scripts
+# ============================================================================
+header_info "$APP" # Display app name and setup header
+variables          # Initialize build.func variables
+color              # Load color variables for output
+catch_errors       # Enable error handling with automatic exit on failure
+
+# ============================================================================
+# UPDATE SCRIPT - Called when user selects "Update" from web interface
+# ============================================================================
+# This function is triggered by the web interface to update the application.
+# It should:
+#   1. Check if installation exists
+#   2. Check for new GitHub releases
+#   3. Stop running services
+#   4. Backup critical data
+#   5. Deploy new version
+#   6. Run post-update commands (migrations, config updates, etc.)
+#   7. Restore data if needed
+#   8. Start services
+#
+# Exit with `exit` at the end to prevent container restart.
+# ============================================================================
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  # Step 1: Verify installation exists
+  if [[ ! -d /opt/[appname] ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  # Step 2: Check if update is available
+  if check_for_gh_release "[appname]" "YourUsername/YourRepo"; then
+
+    # Step 3: Stop services before update
+    msg_info "Stopping Service"
+    systemctl stop [appname]
+    msg_ok "Stopped Service"
+
+    # Step 4: Backup critical data before overwriting
+    msg_info "Backing up Data"
+    cp -r /opt/[appname]/data /opt/[appname]_data_backup 2>/dev/null || true
+    msg_ok "Backed up Data"
+
+    # Step 5: Download and deploy new version
+    # CLEAN_INSTALL=1 removes old directory before extracting
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "[appname]" "owner/repo" "tarball" "latest" "/opt/[appname]"
+
+    # Step 6: Run post-update commands (uncomment as needed)
+    # These examples show common patterns - use what applies to your app:
+    #
+    # For Node.js apps:
+    # msg_info "Installing Dependencies"
+    # cd /opt/[appname]
+    # $STD npm ci --production
+    # msg_ok "Installed Dependencies"
+    #
+    # For Python apps:
+    # msg_info "Installing Dependencies"
+    # cd /opt/[appname]
+    # $STD uv sync --frozen
+    # msg_ok "Installed Dependencies"
+    #
+    # For database migrations:
+    # msg_info "Running Database Migrations"
+    # cd /opt/[appname]
+    # $STD npm run migrate
+    # msg_ok "Ran Database Migrations"
+    #
+    # For PHP apps:
+    # msg_info "Installing Dependencies"
+    # cd /opt/[appname]
+    # $STD composer install --no-dev
+    # msg_ok "Installed Dependencies"
+
+    # Step 7: Restore data from backup
+    msg_info "Restoring Data"
+    cp -r /opt/[appname]_data_backup/. /opt/[appname]/data/ 2>/dev/null || true
+    rm -rf /opt/[appname]_data_backup
+    msg_ok "Restored Data"
+
+    # Step 8: Restart service with new version
+    msg_info "Starting Service"
+    systemctl start [appname]
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+# ============================================================================
+# MAIN EXECUTION - Container creation flow
+# ============================================================================
+# These are called by build.func and handle the full installation process:
+#   1. start              - Initialize container creation
+#   2. build_container    - Execute the install script inside container
+#   3. description        - Display completion info and access details
+# ============================================================================
+
+start
+build_container
+description
+
+# ============================================================================
+# COMPLETION MESSAGE
+# ============================================================================
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:[PORT]${CL}"

docs/contribution/templates_install/AppName-install.md

@@ -0,0 +1,494 @@
+# Install Scripts - Quick Reference
+
+> [!WARNING]
+> **This is legacy documentation.** Refer to the **modern template** at [templates_install/AppName-install.sh](AppName-install.sh) for best practices.
+>
+> Current templates use:
+>
+> - `tools.func` helpers (setup_nodejs, setup_uv, setup_postgresql_db, etc.)
+> - Automatic dependency installation via build.func
+> - Standardized environment variable patterns
+
+---
+
+## Before Creating a Script
+
+1. **Copy the Modern Template:**
+
+   ```bash
+   cp templates_install/AppName-install.sh install/MyApp-install.sh
+   # Edit install/MyApp-install.sh
+   ```
+
+2. **Key Pattern:**
+   - CT scripts source build.func and call the install script
+   - Install scripts use sourced FUNCTIONS_FILE_PATH (via build.func)
+   - Both scripts work together in the container
+
+3. **Test via GitHub:**
+
+   ```bash
+   # Push your changes to your fork first
+   git push origin feature/my-awesome-app
+
+   # Test the CT script via curl (it will call the install script)
+   bash -c "$(curl -fsSL https://raw.githubusercontent.com/YOUR_USERNAME/ProxmoxVE/main/ct/MyApp.sh)"
+   # ⏱️ Wait 10-30 seconds after pushing - GitHub takes time to update
+   ```
+
+---
+
+## Template Structure
+
+### Header
+
+```bash
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/install.func)
+# (setup-fork.sh modifies this URL to point to YOUR fork during development)
+```
+
+### Dependencies (App-Specific Only)
+
+```bash
+# Don't add: ca-certificates, curl, gnupg, wget, git, jq
+# These are handled by build.func
+msg_info "Installing dependencies"
+$STD apt-get install -y app-specific-deps
+msg_ok "Installed dependencies"
+```
+
+### Runtime Setup
+
+Use tools.func helpers instead of manual installation:
+
+```bash
+# ✅ NEW (use tools.func):
+NODE_VERSION="20"
+setup_nodejs
+# OR
+PYTHON_VERSION="3.12"
+setup_uv
+# OR
+PG_DB_NAME="myapp_db"
+PG_DB_USER="myapp"
+setup_postgresql_db
+```
+
+### Service Configuration
+
+```bash
+# Create .env file
+msg_info "Configuring MyApp"
+cat << EOF > /opt/myapp/.env
+DEBUG=false
+PORT=8080
+DATABASE_URL=postgresql://...
+EOF
+msg_ok "Configuration complete"
+
+# Create systemd service
+msg_info "Creating systemd service"
+cat << EOF > /etc/systemd/system/myapp.service
+[Unit]
+Description=MyApp
+[Service]
+ExecStart=/usr/bin/node /opt/myapp/app.js
+[Install]
+WantedBy=multi-user.target
+EOF
+msg_ok "Service created"
+```
+
+### Finalization
+
+```bash
+msg_info "Finalizing MyApp installation"
+systemctl enable --now myapp
+motd_ssh
+customize
+msg_ok "MyApp installation complete"
+cleanup_lxc
+```
+
+---
+
+## Key Patterns
+
+### Avoid Manual Version Checking
+
+❌ OLD (manual):
+
+```bash
+RELEASE=$(curl -fsSL https://api.github.com/repos/app/repo/releases/latest | grep tag_name)
+wget https://github.com/app/repo/releases/download/$RELEASE/app.tar.gz
+```
+
+✅ NEW (use tools.func via CT script's fetch_and_deploy_gh_release):
+
+```bash
+# In CT script, not install script:
+fetch_and_deploy_gh_release "myapp" "app/repo" "app.tar.gz" "latest" "/opt/myapp"
+```
+
+### Database Setup
+
+```bash
+# Use setup_postgresql_db, setup_mysql_db, etc.
+PG_DB_NAME="myapp"
+PG_DB_USER="myapp"
+setup_postgresql_db
+```
+
+### Node.js Setup
+
+```bash
+NODE_VERSION="20"
+setup_nodejs
+npm install --no-save
+```
+
+---
+
+## Best Practices
+
+1. **Only add app-specific dependencies**
+   - Don't add: ca-certificates, curl, gnupg, wget, git, jq
+   - These are handled by build.func
+
+2. **Use tools.func helpers**
+   - setup_nodejs, setup_python, setup_uv, setup_postgresql_db, setup_mysql_db, etc.
+
+3. **Don't do version checks in install script**
+   - Version checking happens in CT script's update_script()
+   - Install script just installs the latest
+
+4. **Structure:**
+   - Dependencies
+   - Runtime setup (tools.func)
+   - Deployment (fetch from CT script)
+   - Configuration files
+   - Systemd service
+   - Finalization
+
+---
+
+## Reference Scripts
+
+See working examples:
+
+- [Trip](https://github.com/community-scripts/ProxmoxVE/blob/main/install/trip-install.sh)
+- [Thingsboard](https://github.com/community-scripts/ProxmoxVE/blob/main/install/thingsboard-install.sh)
+- [UniFi](https://github.com/community-scripts/ProxmoxVE/blob/main/install/unifi-install.sh)
+
+---
+
+## Need Help?
+
+- **[Modern Template](AppName-install.sh)** - Start here
+- **[CT Template](../templates_ct/AppName.sh)** - How CT scripts work
+- **[README.md](../README.md)** - Full contribution workflow
+- **[AI.md](../AI.md)** - AI-generated script guidelines
+
+### 1.2 **Comments**
+
+- Add clear comments for script metadata, including author, copyright, and license information.
+- Use meaningful inline comments to explain complex commands or logic.
+
+Example:
+
+```bash
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: [YourUserName]
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: [SOURCE_URL]
+```
+
+> [!NOTE]:
+>
+> - Add your username
+> - When updating/reworking scripts, add "| Co-Author [YourUserName]"
+
+### 1.3 **Variables and function import**
+
+- This sections adds the support for all needed functions and variables.
+
+```bash
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+```
+
+---
+
+## 2. **Variable naming and management**
+
+### 2.1 **Naming conventions**
+
+- Use uppercase names for constants and environment variables.
+- Use lowercase names for local script variables.
+
+Example:
+
+```bash
+DB_NAME=snipeit_db    # Environment-like variable (constant)
+db_user="snipeit"     # Local variable
+```
+
+---
+
+## 3. **Dependencies**
+
+### 3.1 **Install all at once**
+
+- Install all dependencies with a single command if possible
+
+Example:
+
+```bash
+$STD apt-get install -y \
+  curl \
+  composer \
+  git \
+  sudo \
+  mc \
+  nginx
+```
+
+### 3.2 **Collapse dependencies**
+
+Collapse dependencies to keep the code readable.
+
+Example:
+Use
+
+```bash
+php8.2-{bcmath,common,ctype}
+```
+
+instead of
+
+```bash
+php8.2-bcmath php8.2-common php8.2-ctype
+```
+
+---
+
+## 4. **Paths to application files**
+
+If possible install the app and all necessary files in `/opt/`
+
+---
+
+## 5. **Version management**
+
+### 5.1 **Install the latest release**
+
+- Always try and install the latest release
+- Do not hardcode any version if not absolutely necessary
+
+Example for a git release:
+
+```bash
+RELEASE=$(curl -fsSL https://api.github.com/repos/snipe/snipe-it/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+curl -fsSL "https://github.com/snipe/snipe-it/archive/refs/tags/v${RELEASE}.zip"
+```
+
+### 5.2 **Save the version for update checks**
+
+- Write the installed version into a file.
+- This is used for the update function in **AppName.sh** to check for if a Update is needed.
+
+Example:
+
+```bash
+echo "${RELEASE}" >"/opt/AppName_version.txt"
+```
+
+---
+
+## 6. **Input and output management**
+
+### 6.1 **User feedback**
+
+- Use standard functions like `msg_info`, `msg_ok` or `msg_error` to print status messages.
+- Each `msg_info` must be followed with a `msg_ok` before any other output is made.
+- Display meaningful progress messages at key stages.
+
+Example:
+
+```bash
+msg_info "Installing Dependencies"
+$STD apt-get install -y ...
+msg_ok "Installed Dependencies"
+```
+
+### 6.2 **Verbosity**
+
+- Use the appropiate flag (**-q** in the examples) for a command to suppres its output
+  Example:
+
+```bash
+curl -fsSL
+unzip -q
+```
+
+- If a command dose not come with such a functionality use `$STD` (a custom standard redirection variable) for managing output verbosity.
+
+Example:
+
+```bash
+$STD apt-get install -y nginx
+```
+
+---
+
+## 7. **String/File Manipulation**
+
+### 7.1 **File Manipulation**
+
+- Use `sed` to replace placeholder values in configuration files.
+
+Example:
+
+```bash
+sed -i -e "s|^DB_DATABASE=.*|DB_DATABASE=$DB_NAME|" \
+       -e "s|^DB_USERNAME=.*|DB_USERNAME=$DB_USER|" \
+       -e "s|^DB_PASSWORD=.*|DB_PASSWORD=$DB_PASS|" .env
+```
+
+---
+
+## 8. **Security practices**
+
+### 8.1 **Password generation**
+
+- Use `openssl` to generate random passwords.
+- Use only alphanumeric values to not introduce unknown behaviour.
+
+Example:
+
+```bash
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+```
+
+### 8.2 **File permissions**
+
+Explicitly set secure ownership and permissions for sensitive files.
+
+Example:
+
+```bash
+chown -R www-data: /opt/snipe-it
+chmod -R 755 /opt/snipe-it
+```
+
+---
+
+## 9. **Service Configuration**
+
+### 9.1 **Configuration files**
+
+Use `cat <<EOF` to write configuration files in a clean and readable way.
+
+Example:
+
+```bash
+cat <<EOF >/etc/nginx/conf.d/snipeit.conf
+server {
+    listen 80;
+    root /opt/snipe-it/public;
+    index index.php;
+}
+EOF
+```
+
+### 9.2 **Credential management**
+
+Store the generated credentials in a file.
+
+Example:
+
+```bash
+USERNAME=username
+PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+{
+    echo "Application-Credentials"
+    echo "Username: $USERNAME"
+    echo "Password: $PASSWORD"
+} >> ~/application.creds
+```
+
+### 9.3 **Enviroment files**
+
+Use `cat <<EOF` to write enviromental files in a clean and readable way.
+
+Example:
+
+```bash
+cat <<EOF >/path/to/.env
+VARIABLE="value"
+PORT=3000
+DB_NAME="${DB_NAME}"
+EOF
+```
+
+### 9.4 **Services**
+
+Enable affected services after configuration changes and start them right away.
+
+Example:
+
+```bash
+systemctl enable -q --now nginx
+```
+
+---
+
+## 10. **Cleanup**
+
+### 10.1 **Remove temporary files**
+
+Remove temporary files and downloads after use.
+
+Example:
+
+```bash
+rm -rf /opt/v${RELEASE}.zip
+```
+
+### 10.2 **Autoremove and autoclean**
+
+Remove unused dependencies to reduce disk space usage.
+
+Example:
+
+```bash
+apt-get -y autoremove
+apt-get -y autoclean
+```
+
+---
+
+## 11. **Best Practices Checklist**
+
+- [ ] Shebang is correctly set (`#!/usr/bin/env bash`).
+- [ ] Metadata (author, license) is included at the top.
+- [ ] Variables follow naming conventions.
+- [ ] Sensitive values are dynamically generated.
+- [ ] Files and services have proper permissions.
+- [ ] Script cleans up temporary files.
+
+---
+
+### Example: High-Level Script Flow
+
+1. Dependencies installation
+2. Database setup
+3. Download and configure application
+4. Service configuration
+5. Final cleanup

docs/contribution/templates_install/AppName-install.sh

@@ -0,0 +1,207 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: [YourGitHubUsername]
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: [SOURCE_URL e.g. https://github.com/example/app]
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+# =============================================================================
+# DEPENDENCIES - Only add app-specific dependencies here!
+# Don't add: ca-certificates, curl, gnupg, git, build-essential (handled by build.func)
+# =============================================================================
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  libharfbuzz0b \
+  fontconfig
+msg_ok "Installed Dependencies"
+
+# =============================================================================
+# SETUP RUNTIMES & DATABASES (if needed)
+# =============================================================================
+# Examples (uncomment as needed):
+#
+#   NODE_VERSION="22" setup_nodejs
+#   NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs  # Installs pnpm
+#   PYTHON_VERSION="3.13" setup_uv
+#   JAVA_VERSION="21" setup_java
+#   GO_VERSION="1.22" setup_go
+#   PHP_VERSION="8.4" PHP_FPM="YES" setup_php
+#   setup_postgresql           # Server only
+#   setup_mariadb              # Server only
+#   setup_meilisearch          # Search engine
+#
+#   Then set up DB and user (sets $[DB]_DB_PASS):
+#   PG_DB_NAME="myapp" PG_DB_USER="myapp" setup_postgresql_db
+#   MARIADB_DB_NAME="myapp" MARIADB_DB_USER="myapp" setup_mariadb_db
+
+# =============================================================================
+# DOWNLOAD & DEPLOY APPLICATION
+# =============================================================================
+# fetch_and_deploy_gh_release modes:
+#   "tarball"  - Source tarball (default if omitted)
+#   "binary"   - .deb package (auto-detects amd64/arm64)
+#   "prebuild" - Pre-built archive (.tar.gz)
+#   "singlefile" - Single binary file
+#
+# Examples:
+#   fetch_and_deploy_gh_release "myapp" "YourUsername/myapp" "tarball" "latest" "/opt/myapp"
+#   fetch_and_deploy_gh_release "myapp" "YourUsername/myapp" "binary" "latest" "/tmp"
+#   fetch_and_deploy_gh_release "myapp" "YourUsername/myapp" "prebuild" "latest" "/opt/myapp" "myapp-*.tar.gz"
+
+fetch_and_deploy_gh_release "[appname]" "owner/repo" "tarball" "latest" "/opt/[appname]"
+
+# --- Tools & Utilities ---
+# get_lxc_ip                          # Sets $LOCAL_IP variable (call early!)
+# setup_ffmpeg                             # Install FFmpeg with codecs
+# setup_hwaccel                            # Setup GPU hardware acceleration
+# setup_imagemagick                        # Install ImageMagick 7
+# setup_docker                             # Install Docker Engine
+# setup_adminer                            # Install Adminer for DB management
+# create_self_signed_cert                  # Creates cert in /etc/ssl/[appname]/
+
+# =============================================================================
+# EXAMPLES
+# =============================================================================
+#
+# EXAMPLE 1: Node.js Application with PostgreSQL
+# ---------------------------------------------
+# NODE_VERSION="22" setup_nodejs
+# PG_VERSION="17" setup_postgresql
+# PG_DB_NAME="myapp" PG_DB_USER="myapp" setup_postgresql_db
+# get_lxc_ip
+# fetch_and_deploy_gh_release "myapp" "owner/myapp" "tarball" "latest" "/opt/myapp"
+#
+# msg_info "Configuring MyApp"
+# cd /opt/myapp
+# $STD npm ci
+# cat <<EOF >/opt/myapp/.env
+# DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost/${PG_DB_NAME}
+# HOST=${LOCAL_IP}
+# PORT=3000
+# EOF
+# msg_ok "Configured MyApp"
+#
+# EXAMPLE 2: Python Application with uv
+# ------------------------------------
+# PYTHON_VERSION="3.13" setup_uv
+# get_lxc_ip
+# fetch_and_deploy_gh_release "myapp" "owner/myapp" "tarball" "latest" "/opt/myapp"
+#
+# msg_info "Setting up MyApp"
+# cd /opt/myapp
+# $STD uv sync
+# cat <<EOF >/opt/myapp/.env
+# HOST=${LOCAL_IP}
+# PORT=8000
+# EOF
+# msg_ok "Setup MyApp"
+
+# =============================================================================
+# EXAMPLE 3: PHP Application with MariaDB + Nginx
+# =============================================================================
+# PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="bcmath,curl,gd,intl,mbstring,mysql,xml,zip" setup_php
+# setup_composer
+# setup_mariadb
+# MARIADB_DB_NAME="myapp" MARIADB_DB_USER="myapp" setup_mariadb_db
+# get_lxc_ip
+# fetch_and_deploy_gh_release "myapp" "owner/myapp" "prebuild" "latest" "/opt/myapp" "myapp-*.tar.gz"
+#
+# msg_info "Configuring MyApp"
+# cd /opt/myapp
+# cp .env.example .env
+# sed -i "s|APP_URL=.*|APP_URL=http://${LOCAL_IP}|" .env
+# sed -i "s|DB_DATABASE=.*|DB_DATABASE=${MARIADB_DB_NAME}|" .env
+# sed -i "s|DB_USERNAME=.*|DB_USERNAME=${MARIADB_DB_USER}|" .env
+# sed -i "s|DB_PASSWORD=.*|DB_PASSWORD=${MARIADB_DB_PASS}|" .env
+# $STD composer install --no-dev --no-interaction
+# chown -R www-data:www-data /opt/myapp
+# msg_ok "Configured MyApp"
+
+# =============================================================================
+# YOUR APPLICATION INSTALLATION
+# =============================================================================
+# 1. Setup runtimes and databases FIRST
+# 2. Call get_lxc_ip if you need the container IP
+# 3. Use fetch_and_deploy_gh_release to download the app (handles version tracking)
+# 4. Configure the application
+# 5. Create systemd service
+# 6. Finalize with motd_ssh, customize, cleanup_lxc
+
+# --- Setup runtimes/databases ---
+NODE_VERSION="22" setup_nodejs
+get_lxc_ip
+
+# --- Download and install app ---
+fetch_and_deploy_gh_release "[appname]" "[owner/repo]" "tarball" "latest" "/opt/[appname]"
+
+msg_info "Setting up [AppName]"
+cd /opt/[appname]
+# $STD npm ci
+msg_ok "Setup [AppName]"
+
+# =============================================================================
+# CONFIGURATION
+# =============================================================================
+
+msg_info "Configuring [AppName]"
+cd /opt/[appname]
+
+# Install application dependencies (uncomment as needed):
+# $STD npm ci --production         # Node.js apps
+# $STD uv sync --frozen            # Python apps
+# $STD composer install --no-dev   # PHP apps
+# $STD cargo build --release       # Rust apps
+
+# Create .env file if needed:
+cat <<EOF >/opt/[appname]/.env
+# Use import_local_ip to get container IP, or hardcode if building on Proxmox
+APP_URL=http://localhost
+PORT=8080
+EOF
+
+msg_ok "Configured [AppName]"
+
+# =============================================================================
+# CREATE SYSTEMD SERVICE
+# =============================================================================
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/[appname].service
+[Unit]
+Description=[AppName] Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/[appname]
+ExecStart=/usr/bin/node /opt/[appname]/server.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now [appname]
+msg_ok "Created Service"
+
+# =============================================================================
+# CLEANUP & FINALIZATION
+# =============================================================================
+# These are called automatically, but shown here for clarity:
+#   motd_ssh           - Displays service info on SSH login
+#   customize          - Enables optional customizations
+#   cleanup_lxc        - Removes temp files, bash history, logs
+
+motd_ssh
+customize
+cleanup_lxc

docs/contribution/templates_json/AppName.json

@@ -0,0 +1,40 @@
+{
+  "name": "AppName",
+  "slug": "appname",
+  "categories": [
+    0
+  ],
+  "date_created": "2026-01-18",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://docs.example.com/",
+  "website": "https://example.com/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/appname.webp",
+  "config_path": "/opt/appname/.env",
+  "description": "Short description of what AppName does and its main features.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/appname.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Change the default password after first login!",
+      "type": "warning"
+    }
+  ]
+}

docs/contribution/templates_json/AppName.md

@@ -0,0 +1,160 @@
+# Website Metadata - Quick Reference
+
+Metadata (name, slug, description, logo, categories, etc.) controls how your application appears on the website. You do **not** add JSON files to the repo — you request changes via the website.
+
+---
+
+## How to Request or Update Metadata
+
+1. **Go to the script on the website** — Open the [ProxmoxVE website](https://community-scripts.github.io/ProxmoxVE/), find your script (or the script you want to update).
+2. **Press the "Report issue" button** on that script’s page.
+3. **Follow the guide** — The flow will walk you through submitting or updating metadata.
+
+---
+
+## Metadata Structure (Reference)
+
+The following describes the structure of script metadata used by the website. Use it as reference when filling out the form or describing what you need.
+
+```json
+{
+  "name": "MyApp",
+  "slug": "myapp",
+  "categories": [1],
+  "date_created": "2026-01-18",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://docs.example.com/",
+  "website": "https://example.com/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/myapp.webp",
+  "config_path": "/opt/myapp/.env",
+  "description": "Brief description of what MyApp does",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/myapp.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Change the default password after first login!",
+      "type": "warning"
+    }
+  ]
+}
+```
+
+---
+
+## Field Reference
+
+| Field                 | Required | Example           | Notes                                          |
+| --------------------- | -------- | ----------------- | ---------------------------------------------- |
+| `name`                | Yes      | "MyApp"           | Display name                                   |
+| `slug`                | Yes      | "myapp"           | URL-friendly identifier (lowercase, no spaces) |
+| `categories`          | Yes      | [1]               | One or more category IDs                       |
+| `date_created`        | Yes      | "2026-01-18"      | Format: YYYY-MM-DD                             |
+| `type`                | Yes      | "ct"              | Container type: "ct" or "vm"                   |
+| `interface_port`      | Yes      | 3000              | Default web interface port                     |
+| `logo`                | No       | "https://..."     | Logo URL (64px x 64px PNG)                     |
+| `config_path`         | Yes      | "/opt/myapp/.env" | Main config file location                      |
+| `description`         | Yes      | "App description" | Brief description (100 chars)                  |
+| `install_methods`     | Yes      | See below         | Installation resources (array)                 |
+| `default_credentials` | No       | See below         | Optional default login                         |
+| `notes`               | No       | See below         | Additional notes (array)                       |
+
+---
+
+## Install Methods
+
+Each installation method specifies resource requirements:
+
+```json
+"install_methods": [
+  {
+    "type": "default",
+    "script": "ct/myapp.sh",
+    "resources": {
+      "cpu": 2,
+      "ram": 2048,
+      "hdd": 8,
+      "os": "Debian",
+      "version": "13"
+    }
+  }
+]
+```
+
+**Resource Defaults:**
+
+- CPU: Cores (1-8)
+- RAM: Megabytes (256-4096)
+- Disk: Gigabytes (4-50)
+
+---
+
+## Common Categories
+
+- `0` Miscellaneous
+- `1` Proxmox & Virtualization
+- `2` Operating Systems
+- `3` Containers & Docker
+- `4` Network & Firewall
+- `5` Adblock & DNS
+- `6` Authentication & Security
+- `7` Backup & Recovery
+- `8` Databases
+- `9` Monitoring & Analytics
+- `10` Dashboards & Frontends
+- `11` Files & Downloads
+- `12` Documents & Notes
+- `13` Media & Streaming
+- `14` \*Arr Suite
+- `15` NVR & Cameras
+- `16` IoT & Smart Home
+- `17` ZigBee, Z-Wave & Matter
+- `18` MQTT & Messaging
+- `19` Automation & Scheduling
+- `20` AI / Coding & Dev-Tools
+- `21` Webservers & Proxies
+- `22` Bots & ChatOps
+- `23` Finance & Budgeting
+- `24` Gaming & Leisure
+- `25` Business & ERP
+
+---
+
+## Best Practices
+
+1. **Use the JSON Generator** - It validates structure
+2. **Keep descriptions short** - 100 characters max
+3. **Use real resource requirements** - Based on your testing
+4. **Include sensible defaults** - Pre-filled in install_methods
+5. **Slug must be lowercase** - No spaces, use hyphens
+
+---
+
+## See Examples on the Website
+
+View script pages on the [ProxmoxVE website](https://community-scripts.github.io/ProxmoxVE/) to see how metadata is displayed for existing scripts.
+
+---
+
+## Need Help?
+
+- **Request metadata** — Use the Report issue button on the script’s page on the website (see [How to Request or Update Metadata](#how-to-request-or-update-metadata) above).
+- **[JSON Generator](https://community-scripts.github.io/ProxmoxVE/json-editor)** - Reference only; structure validation
+- **[README.md](../README.md)** - Full contribution workflow