openziti-controller: prevent apt hang on postinst TTY prompt

CHANGELOG.md

@@ -521,101 +521,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-08-14
-
-### 🆕 New Scripts
-
-  - RSS-Bridge ([#16471](https://github.com/community-scripts/ProxmoxVE/pull/16471))
-- GoDoxy ([#16470](https://github.com/community-scripts/ProxmoxVE/pull/16470))
-- Mumble ([#16474](https://github.com/community-scripts/ProxmoxVE/pull/16474))
-- Fleet ([#16472](https://github.com/community-scripts/ProxmoxVE/pull/16472))
-- Newt ([#16473](https://github.com/community-scripts/ProxmoxVE/pull/16473))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - calibre-web: install as package for 0.6.27's src-layout restructure [@MickLesk](https://github.com/MickLesk) ([#16480](https://github.com/community-scripts/ProxmoxVE/pull/16480))
-    - Wanderer: Refactor of Services / Installation / Paths [@johanngrobe](https://github.com/johanngrobe) ([#16487](https://github.com/community-scripts/ProxmoxVE/pull/16487))
-    - pelican-panel: set APP_URL to container IP [@MickLesk](https://github.com/MickLesk) ([#16488](https://github.com/community-scripts/ProxmoxVE/pull/16488))
-    - fix(ampache): update to PHP 8.5 asset, auto-upgrade PHP on update [@CervezaStallone](https://github.com/CervezaStallone) ([#16484](https://github.com/community-scripts/ProxmoxVE/pull/16484))
-
-  - #### ✨ New Features
-
-    - projectsend: rewrite for 2.0.0 (Laravel, nginx, MariaDB) [@MickLesk](https://github.com/MickLesk) ([#16477](https://github.com/community-scripts/ProxmoxVE/pull/16477))
-    - Homepage v2.0 [@vhsdream](https://github.com/vhsdream) ([#16500](https://github.com/community-scripts/ProxmoxVE/pull/16500))
-
-  - #### 🔧 Refactor
-
-    - Refactor: PowerDNS move poweradmin database outside the web root [@MickLesk](https://github.com/MickLesk) ([#16476](https://github.com/community-scripts/ProxmoxVE/pull/16476))
-    - paperless-ngx: run services with uv --no-sync to avoid startup network dependency [@MickLesk](https://github.com/MickLesk) ([#16479](https://github.com/community-scripts/ProxmoxVE/pull/16479))
-
-## 2026-08-13
-
-### 🆕 New Scripts
-
-  - SuggestArr ([#16449](https://github.com/community-scripts/ProxmoxVE/pull/16449))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(stirling-pdf): LibreOffice listener collides with unoserver on UNO port 2002, burning a core [@angusmaul](https://github.com/angusmaul) ([#16460](https://github.com/community-scripts/ProxmoxVE/pull/16460))
-    - fix(reitti): enable SNI for tile cache [@kylemd](https://github.com/kylemd) ([#16463](https://github.com/community-scripts/ProxmoxVE/pull/16463))
-    - [wanderer] refactor [@johanngrobe](https://github.com/johanngrobe) ([#16448](https://github.com/community-scripts/ProxmoxVE/pull/16448))
-
-  - #### ✨ New Features
-
-    - feat: Update koillection-install.sh to support API usage [@Crazy-Duck](https://github.com/Crazy-Duck) ([#16425](https://github.com/community-scripts/ProxmoxVE/pull/16425))
-
-## 2026-08-12
-
-### 🆕 New Scripts
-
-  - Stalwart ([#16388](https://github.com/community-scripts/ProxmoxVE/pull/16388))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - networkoptimizer: mitigate dotnet publish hang in LXC [@MickLesk](https://github.com/MickLesk) ([#16436](https://github.com/community-scripts/ProxmoxVE/pull/16436))
-    - lazylibrarian: reinstall deps after git pull on update [@MickLesk](https://github.com/MickLesk) ([#16435](https://github.com/community-scripts/ProxmoxVE/pull/16435))
-    - wanderer: fix deprecated meilisearch upgrade flag [@MickLesk](https://github.com/MickLesk) ([#16434](https://github.com/community-scripts/ProxmoxVE/pull/16434))
-    - calibre-web: fix release asset filename pattern [@MickLesk](https://github.com/MickLesk) ([#16433](https://github.com/community-scripts/ProxmoxVE/pull/16433))
-    - fix(stirling-pdf): unoserver installed into the venv, and login mode truncates .env [@angusmaul](https://github.com/angusmaul) ([#16439](https://github.com/community-scripts/ProxmoxVE/pull/16439))
-    - fix(pulse): keep the container recoverable when an update fails [@rcourtman](https://github.com/rcourtman) ([#16311](https://github.com/community-scripts/ProxmoxVE/pull/16311))
-
-  - #### 🔧 Refactor
-
-    - ConvertX: add some new dependencies [@MickLesk](https://github.com/MickLesk) ([#16437](https://github.com/community-scripts/ProxmoxVE/pull/16437))
-
-## 2026-08-11
-
-### 🚀 Updated Scripts
-
-  - Update source URL for Reactive Resume [@MickLesk](https://github.com/MickLesk) ([#16407](https://github.com/community-scripts/ProxmoxVE/pull/16407))
-
-  - #### 🐞 Bug Fixes
-
-    - Pelican-Panel: add php artisan p:environment:database [@MickLesk](https://github.com/MickLesk) ([#16397](https://github.com/community-scripts/ProxmoxVE/pull/16397))
-    - outline: fix URL sed matching wrong line in .env.sample // refactor .env generation [@MickLesk](https://github.com/MickLesk) ([#16408](https://github.com/community-scripts/ProxmoxVE/pull/16408))
-    - paperless-ngx: reindex Tantivy search index on webserver start [@MickLesk](https://github.com/MickLesk) ([#16395](https://github.com/community-scripts/ProxmoxVE/pull/16395))
-    - karakeep: pin Node.js to 22 LTS, avoid Node 24.19 better-sqlite3 crash [@MickLesk](https://github.com/MickLesk) ([#16396](https://github.com/community-scripts/ProxmoxVE/pull/16396))
-
-  - #### ✨ New Features
-
-    - Open WebUI: add optional OpenTelemetry package install [@irishpadres](https://github.com/irishpadres) ([#16415](https://github.com/community-scripts/ProxmoxVE/pull/16415))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - fix(add-tailscale-lxc): stop spinner before whiptail menu [@halcycon](https://github.com/halcycon) ([#16402](https://github.com/community-scripts/ProxmoxVE/pull/16402))
-
-  - #### 🔧 Refactor
-
-    - arcane: fix projects/builds dir ownership for non-root container UID [@MickLesk](https://github.com/MickLesk) ([#16411](https://github.com/community-scripts/ProxmoxVE/pull/16411))
-
 ## 2026-08-10
 
 ### 🆕 New Scripts

ct/ampache.sh

@@ -39,15 +39,7 @@ function update_script() {
       /opt/ampache/public/play/.htaccess \
       /opt/ampache/advanced-config
 
-    if ! dpkg -l 2>/dev/null | grep -q "libapache2-mod-php8.5"; then
+    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
-      PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
-      sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
-        -e 's/post_max_size = .*/post_max_size = 100M/' \
-        -e 's/max_execution_time = .*/max_execution_time = 600/' \
-        -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.5/apache2/php.ini
-    fi
-
-    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.5.zip"
 
     restore_backup
     chmod 664 /opt/ampache/public/rest/.htaccess /opt/ampache/public/play/.htaccess

ct/calibre-web.sh

@@ -38,19 +38,16 @@ function update_script() {
     create_backup /opt/calibre-web/app.db \
       /opt/calibre-web/data
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
     setup_uv
 
     msg_info "Installing Dependencies"
     cd /opt/calibre-web
     $STD uv venv --clear /opt/calibre-web/.venv
     $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --upgrade pip setuptools wheel
-    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir .
+    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir -r requirements.txt
     msg_ok "Installed Dependencies"
 
-    sed -i 's|^ExecStart=.*|ExecStart=/opt/calibre-web/.venv/bin/cps|' /etc/systemd/system/calibre-web.service
-    $STD systemctl daemon-reload
-
     restore_backup
 
     msg_info "Starting Service"

ct/convertx.sh

@@ -34,19 +34,7 @@ function update_script() {
     systemctl stop convertx
     msg_info "Stopped Service"
 
-    ensure_dependencies libreoffice-writer dasel graphicsmagick libemail-outlook-message-perl libheif-examples libjxl-tools resvg
+    ensure_dependencies libreoffice-writer
-
-    if ! command -v markitdown &>/dev/null; then
-      setup_uv
-      msg_info "Installing markitdown"
-      export UV_TOOL_BIN_DIR=/usr/local/bin
-      $STD uv tool install "markitdown[all]"
-      msg_ok "Installed markitdown"
-    fi
-
-    if ! command -v vtracer &>/dev/null; then
-      fetch_and_deploy_gh_release "vtracer" "visioncortex/vtracer" "prebuild" "0.6.4" "/usr/local/bin" "vtracer-$(arch_resolve "x86_64" "aarch64")-unknown-linux-musl.tar.gz"
-    fi
 
     create_backup /opt/convertx/data
 

ct/fleet.sh

@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fleetdm/fleet
-
-APP="Fleet"
-var_tags="${var_tags:-monitoring;device-management;security}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-ubuntu}"
-var_version="${var_version:-24.04}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/fleet/fleet ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "fleet" "fleetdm/fleet"; then
-    msg_info "Stopping Service"
-    systemctl stop fleet
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
-    chmod +x /opt/fleet/fleet
-
-    msg_info "Running Database Migrations"
-    set -a && source /opt/fleet/.env && set +a
-    $STD /opt/fleet/fleet prepare db --no-prompt
-    msg_ok "Ran Database Migrations"
-
-    msg_info "Starting Service"
-    systemctl start fleet
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
-echo -e "${INFO}${YW} Admin Email:${CL} ${BGN}admin@fleet.local${CL}"
-echo -e "${INFO}${YW} Admin Password:${CL} ${BGN}Check inside the container: cat /opt/fleet/.env${CL}"

ct/godoxy.sh

@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ) | Co-Authors: yusing
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/yusing/godoxy
-
-APP="GoDoxy"
-var_tags="${var_tags:-reverse-proxy;webserver;network}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/godoxy/godoxy ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "godoxy" "yusing/godoxy"; then
-    msg_info "Stopping Service"
-    systemctl stop godoxy
-    msg_ok "Stopped Service"
-
-    create_backup \
-      /opt/godoxy/config \
-      /opt/godoxy/data \
-      /opt/godoxy/error_pages \
-      /etc/godoxy.env \
-      /etc/ssl/godoxy
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start godoxy
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
-echo -e "${INFO}${YW}Login as admin; the generated password is stored in /etc/godoxy.env.${CL}"

ct/headers/fleet

@@ -1,6 +0,0 @@
-    ________          __ 
-   / ____/ /__  ___  / /_
-  / /_  / / _ \/ _ \/ __/
- / __/ / /  __/  __/ /_  
-/_/   /_/\___/\___/\__/  
-                         

ct/headers/godoxy

@@ -1,6 +0,0 @@
-   ______      ____                  
-  / ____/___  / __ \____  _  ____  __
- / / __/ __ \/ / / / __ \| |/_/ / / /
-/ /_/ / /_/ / /_/ / /_/ />  </ /_/ / 
-\____/\____/_____/\____/_/|_|\__, /  
-                            /____/   

ct/headers/mumble

@@ -1,6 +0,0 @@
-    __  ___                __    __   
-   /  |/  /_  ______ ___  / /_  / /__ 
-  / /|_/ / / / / __ `__ \/ __ \/ / _ \
- / /  / / /_/ / / / / / / /_/ / /  __/
-/_/  /_/\__,_/_/ /_/ /_/_.___/_/\___/ 
-                                      

ct/headers/newt

@@ -1,6 +0,0 @@
-    _   __             __ 
-   / | / /__ _      __/ /_
-  /  |/ / _ \ | /| / / __/
- / /|  /  __/ |/ |/ / /_  
-/_/ |_/\___/|__/|__/\__/  
-                          

ct/headers/rss-bridge

@@ -1,6 +0,0 @@
-    ____  __________       ____       _     __         
-   / __ \/ ___/ ___/      / __ )_____(_)___/ /___ ____ 
-  / /_/ /\__ \\__ \______/ __  / ___/ / __  / __ `/ _ \
- / _, _/___/ /__/ /_____/ /_/ / /  / / /_/ / /_/ /  __/
-/_/ |_|/____/____/     /_____/_/  /_/\__,_/\__, /\___/ 
-                                          /____/       

ct/headers/stalwart

@@ -1,6 +0,0 @@
-   _____ __        __                    __ 
-  / ___// /_____ _/ /      ______ ______/ /_
-  \__ \/ __/ __ `/ / | /| / / __ `/ ___/ __/
- ___/ / /_/ /_/ / /| |/ |/ / /_/ / /  / /_  
-/____/\__/\__,_/_/ |__/|__/\__,_/_/   \__/  
-                                            

ct/headers/suggestarr

@@ -1,6 +0,0 @@
-   _____                             __  ___             
-  / ___/__  ______ _____ ____  _____/ /_/   |  __________
-  \__ \/ / / / __ `/ __ `/ _ \/ ___/ __/ /| | / ___/ ___/
- ___/ / /_/ / /_/ / /_/ /  __(__  ) /_/ ___ |/ /  / /    
-/____/\__,_/\__, /\__, /\___/____/\__/_/  |_/_/  /_/     
-           /____//____/                                  

ct/homepage.sh

@@ -47,7 +47,7 @@ function update_script() {
     msg_info "Updating Homepage (Patience)"
     RELEASE=$(get_latest_github_release "gethomepage/homepage")
     cd /opt/homepage
-    echo 'onlyBuiltDependencies=*' >>.npmrc
+    echo 'onlyBuiltDependencies=*' >> .npmrc
     $STD pnpm install
     $STD pnpm update --no-save caniuse-lite
     export NEXT_PUBLIC_VERSION="v$RELEASE"
@@ -56,27 +56,6 @@ function update_script() {
     export NEXT_TELEMETRY_DISABLED=1
     $STD pnpm build
     BACKUP_DIR=/opt/homepage-assets.backup restore_backup
-    if ! grep -q 'AUTH' /opt/homepage/.env; then
-      msg_info "Updating .env"
-      cp /opt/homepage/.env /opt/homepage/env.bak
-      cat <<EOF >>/opt/homepage/.env
-## Optional Authentication
-# HOMEPAGE_AUTH_ENABLED=true
-# HOMEPAGE_AUTH_SECRET="$(openssl rand -base64 32)"
-# HOMEPAGE_EXTERNAL_URL=<your-external-url>
-## Uncomment below and use strong, unique password for password login
-# HOMEPAGE_AUTH_PASSWORD=
-## Uncomment and fill in below for OIDC login
-# HOMEPAGE_OIDC_ISSUER=
-# HOMEPAGE_OIDC_CLIENT_ID=
-# HOMEPAGE_OIDC_CLIENT_SECRET=
-# HOMEPAGE_OIDC_SCOPE=openid email profile
-# HOMEPAGE_OIDC_NAME=
-EOF
-      msg_ok "Updated .env"
-      rm /opt/homepage/env.bak
-      chmod 600 /opt/homepage/.env
-    fi
     msg_ok "Updated Homepage"
 
     msg_info "Starting service"

ct/karakeep.sh

@@ -88,9 +88,8 @@ EOF
       $STD corepack disable
     fi
     sed -i "s/^SERVER_VERSION=.*$/SERVER_VERSION=${CHECK_UPDATE_RELEASE#v}/" /etc/karakeep/karakeep.env
-    # Node 24.19.x crashes better-sqlite3 on cleanup (karakeep-app/karakeep#2989); stay on 22 LTS until upstream reverts.
     MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-    NODE_VERSION="22" NODE_MODULE="corepack,pnpm@${MODULE_VERSION}" setup_nodejs
+    NODE_VERSION="24" NODE_MODULE="corepack,pnpm@${MODULE_VERSION}" setup_nodejs
     setup_meilisearch
 
     msg_info "Updating Karakeep"
@@ -104,7 +103,6 @@ EOF
     $STD pnpm build
     cd /opt/karakeep/apps/workers 
     $STD pnpm install --frozen-lockfile
-    $STD pnpm rebuild better-sqlite3
     $STD pnpm build
     cd /opt/karakeep/apps/cli 
     $STD pnpm install --frozen-lockfile

ct/lazylibrarian.sh

@@ -34,7 +34,6 @@ function update_script() {
 
     msg_info "Updating $APP LXC"
     $STD git -C /opt/LazyLibrarian pull origin master
-    $STD pip install --break-system-packages /opt/LazyLibrarian
     msg_ok "Updated $APP LXC"
 
     msg_info "Starting LazyLibrarian"

ct/mumble.sh

@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.mumble.info/
-
-APP="Mumble"
-var_tags="${var_tags:-voice;chat;gaming}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/mumble/mumble-server.ini ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "mumble" "mumble-voip/mumble"; then
-    msg_info "Stopping Service"
-    systemctl stop mumble-server
-    msg_ok "Stopped Service"
-
-    create_backup /etc/mumble/mumble-server.ini /var/lib/mumble-server/mumble-server.sqlite
-
-    msg_info "Updating Mumble"
-    $STD apt update
-    $STD apt install -y mumble-server
-    cat <<EOF >~/.mumble
-$(get_latest_github_release "mumble-voip/mumble")
-EOF
-    msg_ok "Updated Mumble"
-
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start mumble-server
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Connect using:${CL}"
-echo -e "${GATEWAY}${BGN}${IP}:64738${CL}"

ct/networkoptimizer.sh

@@ -36,27 +36,22 @@ function update_script() {
     msg_ok "Stopped Service"
 
     create_backup /opt/networkoptimizer/networkoptimizer.env
+
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "networkoptimizer" "Ozark-Connect/NetworkOptimizer" "tarball"
-    restore_backup
 
     msg_info "Rebuilding NetworkOptimizer"
     RID="linux-x64"
     [[ "$(dpkg --print-architecture)" == "arm64" ]] && RID="linux-arm64"
     cd /opt/networkoptimizer
-    export MSBUILDDISABLENODEREUSE=1
-    export DOTNET_CLI_TELEMETRY_OPTOUT=1
-    export DOTNET_SYSTEM_NET_DISABLEIPV6=1
     $STD dotnet publish src/NetworkOptimizer.Web -c Release -r "$RID" --self-contained -o /opt/networkoptimizer/publish
     chmod +x /opt/networkoptimizer/publish/NetworkOptimizer.Web
     mkdir -p /opt/networkoptimizer/publish/tools
     cd /opt/networkoptimizer/src/uwnspeedtest
     CGO_ENABLED=0 GOOS=linux GOARCH=arm64 $STD go build -trimpath -ldflags "-s -w" -o /opt/networkoptimizer/publish/tools/uwnspeedtest-linux-arm64 .
-    SERVER_ARCH="$(arch_resolve)"
-    if [[ "$SERVER_ARCH" != "arm64" ]]; then
-      CGO_ENABLED=0 GOOS=linux GOARCH="$SERVER_ARCH" $STD go build -trimpath -ldflags "-s -w" -o "/opt/networkoptimizer/publish/tools/uwnspeedtest-linux-${SERVER_ARCH}" .
-    fi
     msg_ok "Rebuilt NetworkOptimizer"
 
+    restore_backup
+
     msg_info "Starting Service"
     systemctl start networkoptimizer
     msg_ok "Started Service"

ct/newt.sh

@@ -1,53 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Arubinu
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fosrl/newt
-
-APP="Newt"
-var_tags="${var_tags:-network;tunnel}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-256}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/newt/newt.env ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "newt" "fosrl/newt"; then
-    msg_info "Stopping Service"
-    systemctl stop newt
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "newt" "fosrl/newt" "singlefile" "latest" "/opt/newt" "newt_linux_$(arch_resolve)"
-    ln -sf /opt/newt/newt /usr/local/bin/newt
-
-    msg_info "Starting Service"
-    systemctl start newt
-    msg_ok "Started Service"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${INFO}${YW} Check the site status in your Pangolin dashboard.${CL}"

ct/openwebui.sh

@@ -114,14 +114,7 @@ EOF
 
   msg_info "Updating Open WebUI via uv"
   PYTHON_VERSION="3.12" setup_uv
-  OWUI_PYTHON="/root/.local/share/uv/tools/open-webui/bin/python3.12"
+  $STD uv tool install --force --python 3.12 --constraint <(echo "numba>=0.60") open-webui[all]
-  OTEL_ARGS=()
-  if [[ -x "$OWUI_PYTHON" ]]; then
-    while IFS= read -r pkg; do
-      OTEL_ARGS+=(--with "$pkg")
-    done < <(uv pip list --python "$OWUI_PYTHON" --format freeze 2>/dev/null | grep -i '^opentelemetry-' | cut -d= -f1)
-  fi
-  $STD uv tool install --force --python 3.12 --constraint <(echo "numba>=0.60") "${OTEL_ARGS[@]}" open-webui[all]
   systemctl restart open-webui
   msg_ok "Updated Open WebUI"
   msg_ok "Updated successfully!"

ct/openziti-controller.sh

@@ -30,7 +30,7 @@ function update_script() {
   fi
   msg_info "Updating $APP LXC"
   $STD apt update
-  $STD apt -y upgrade
+  $STD apt -y upgrade </dev/null
   msg_ok "Updated $APP LXC"
   msg_ok "Updated successfully!"
   exit

ct/paperless-ngx.sh

@@ -165,9 +165,7 @@ function update_script() {
 
       msg_info "Updating Paperless-ngx"
       if ((BRIDGE_UPDATE == 0)); then
-        sed -i 's|^ExecStart=.*|ExecStart=uv run --no-sync -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"|' /etc/systemd/system/paperless-webserver.service
+        sed -i 's|^ExecStart=.*|ExecStart=uv run -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"|' /etc/systemd/system/paperless-webserver.service
-        grep -q "document_index reindex" /etc/systemd/system/paperless-webserver.service ||
-          sed -i '/^ExecStart=/i ExecStartPre=uv run -- python manage.py document_index reindex --if-needed --no-progress-bar' /etc/systemd/system/paperless-webserver.service
         $STD systemctl daemon-reload
       fi
       cd /opt/paperless
@@ -207,10 +205,10 @@ function update_script() {
       msg_ok "Backup completed to $BACKUP_DIR"
 
       declare -A PATCHES=(
-        ["paperless-consumer.service"]="ExecStart=uv run --no-sync -- python manage.py document_consumer"
+        ["paperless-consumer.service"]="ExecStart=uv run -- python manage.py document_consumer"
-        ["paperless-scheduler.service"]="ExecStart=uv run --no-sync -- celery --app paperless beat --loglevel INFO"
+        ["paperless-scheduler.service"]="ExecStart=uv run -- celery --app paperless beat --loglevel INFO"
-        ["paperless-task-queue.service"]="ExecStart=uv run --no-sync -- celery --app paperless worker --loglevel INFO"
+        ["paperless-task-queue.service"]="ExecStart=uv run -- celery --app paperless worker --loglevel INFO"
-        ["paperless-webserver.service"]="ExecStart=uv run --no-sync -- granian --interface asgi --ws \"paperless.asgi:application\""
+        ["paperless-webserver.service"]="ExecStart=uv run -- granian --interface asgi --ws \"paperless.asgi:application\""
       )
 
       for svc in "${!PATCHES[@]}"; do

ct/pelican-panel.sh

@@ -60,7 +60,6 @@ function update_script() {
 
     msg_info "Updating Pelican Panel"
     cp -a /opt/backup/.env /opt/pelican-panel/
-    grep -q "^APP_URL=http://panel.test$" /opt/pelican-panel/.env && sed -i "s|^APP_URL=.*|APP_URL=http://${LOCAL_IP}|" /opt/pelican-panel/.env
     $SQLITE_INSTALL && mv /opt/backup/*.sqlite /opt/pelican-panel/database/
     cp -a /opt/backup/storage/app/public /opt/pelican-panel/storage/app/
 

ct/powerdns.sh

@@ -30,26 +30,13 @@ function update_script() {
     exit
   fi
 
-  if [[ -f /opt/poweradmin/powerdns.db ]]; then
-    msg_info "Moving PowerDNS database out of the web root"
-    systemctl stop pdns apache2
-    mkdir -p /var/lib/powerdns
-    mv /opt/poweradmin/powerdns.db /var/lib/powerdns/powerdns.db
-    sed -i 's#/opt/poweradmin/powerdns.db#/var/lib/powerdns/powerdns.db#' \
-      /etc/powerdns/pdns.d/gsqlite3.conf /opt/poweradmin/config/settings.php
-    chown pdns:pdns /var/lib/powerdns/powerdns.db
-    chmod 664 /var/lib/powerdns/powerdns.db
-    systemctl start pdns apache2
-    msg_ok "Moved PowerDNS database out of the web root"
-  fi
-
   msg_info "Updating PowerDNS"
   $STD apt update
   $STD apt install -y --only-upgrade pdns-server pdns-backend-sqlite3
   msg_ok "Updated PowerDNS"
 
   if check_for_gh_release "poweradmin" "poweradmin/poweradmin"; then
-    create_backup /opt/poweradmin/config/settings.php
+    create_backup /opt/poweradmin/config/settings.php /opt/poweradmin/powerdns.db
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "poweradmin" "poweradmin/poweradmin" "tarball"
 
@@ -59,6 +46,8 @@ function update_script() {
     rm -rf /opt/poweradmin/install
     chown -R www-data:pdns /opt/poweradmin
     chmod 775 /opt/poweradmin
+    chown pdns:pdns /opt/poweradmin/powerdns.db
+    chmod 664 /opt/poweradmin/powerdns.db
     msg_ok "Updated Poweradmin"
 
     msg_info "Restarting Services"

ct/projectsend.sh

@@ -28,37 +28,27 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-
+  setup_mariadb
-  if [[ -f /opt/projectsend/includes/sys.config.php ]]; then
-    msg_error "This container runs ProjectSend Legacy (pre-2.0)."
-    msg_error "2.0 is a new application, not an update - there is no in-place upgrade."
-    msg_error "Set up a fresh ProjectSend container and use projectsend/v1-migration-tool to bring your data across."
-    exit
-  fi
 
   if check_for_gh_release "projectsend" "projectsend/projectsend"; then
-    msg_info "Stopping Services"
+    msg_info "Stopping Service"
-    systemctl stop nginx projectsend-worker
+    systemctl stop apache2
-    msg_ok "Stopped Services"
+    msg_ok "Stopped Service"
 
-    create_backup /opt/projectsend/.env /opt/projectsend/storage/app/files
+    php_ver=$(php -v | head -n 1 | awk '{print $2}')
+    if [[ ! $php_ver == "8.4"* ]]; then
+      PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
+    fi
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "projectsend" "projectsend/projectsend" "prebuild" "latest" "/opt/projectsend"
+    mv /opt/projectsend/includes/sys.config.php /opt/sys.config.php
-
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "projectsend" "projectsend/projectsend" "prebuild" "latest" "/opt/projectsend" "projectsend-r*.zip"
-    restore_backup
+    mv /opt/sys.config.php /opt/projectsend/includes/sys.config.php
-
-    msg_info "Updating ProjectSend"
-    cd /opt/projectsend
     chown -R www-data:www-data /opt/projectsend
-    chmod -R 775 /opt/projectsend/storage /opt/projectsend/bootstrap/cache
+    chmod -R 775 /opt/projectsend
-    $STD sudo -u www-data php artisan migrate --force
-    $STD sudo -u www-data php artisan projectsend:ensure-roles
-    $STD sudo -u www-data php artisan optimize:clear
-    msg_ok "Updated ProjectSend"
 
-    msg_info "Starting Services"
+    msg_info "Starting Service"
-    systemctl start nginx projectsend-worker
+    systemctl start apache2
-    msg_ok "Started Services"
+    msg_ok "Started Service"
     msg_ok "Updated successfully!"
   fi
   exit
@@ -71,5 +61,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}/install for the initial setup${CL}"
-echo -e "${INFO}${YW}Admin credentials saved to ~/projectsend.creds${CL}"

ct/pulse.sh

@@ -35,34 +35,22 @@ function update_script() {
     systemctl stop pulse*.service
     msg_ok "Stopped Services"
 
-    if ! CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "pulse-v*-linux-$(arch_resolve).tar.gz"; then
+    if [[ -f /opt/pulse/pulse ]]; then
-      msg_error "Download or deployment failed - check network connectivity and GitHub API availability"
+      rm -f /opt/pulse/pulse
-      if systemctl start pulse 2>/dev/null || systemctl start pulse-backend 2>/dev/null; then
-        msg_ok "Restarted the previously installed ${APP}"
-      else
-        msg_error "${APP} could not be restarted - reinstall it or restore the container from a backup"
-      fi
-      exit 250
     fi
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "pulse-v*-linux-$(arch_resolve).tar.gz"
     ln -sf /opt/pulse/bin/pulse /usr/local/bin/pulse
     mkdir -p /etc/pulse
     chown pulse:pulse /etc/pulse
     chown -R pulse:pulse /opt/pulse
     chmod 700 /etc/pulse
-    UNIT_WAS_ENABLED=0
     if [[ -f "$SERVICE_PATH"/pulse-backend.service ]]; then
-      if [[ $(systemctl is-enabled pulse-backend) == enabled ]]; then
-        UNIT_WAS_ENABLED=1
-      fi
-      systemctl disable -q pulse-backend.service 2>/dev/null || true
       mv "$SERVICE_PATH"/pulse-backend.service "$SERVICE_PATH"/pulse.service
     fi
     sed -i -e 's|pulse/pulse|pulse/bin/pulse|' \
       -e 's/^Environment="API.*$//' "$SERVICE_PATH"/pulse.service
     systemctl daemon-reload
-    if [[ "$UNIT_WAS_ENABLED" == "1" ]]; then
-      systemctl enable -q pulse
-    fi
     if grep -q 'pulse-home:/bin/bash' /etc/passwd; then
       usermod -s /usr/sbin/nologin pulse
     fi

ct/reactive-resume.sh

@@ -3,7 +3,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream | MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://rxresu.me/ | Github: https://github.com/amruthpillai/reactive-resume
+# Source: https://rxresume.org | Github: https://github.com/amruthpillai/reactive-resume
 
 APP="Reactive-Resume"
 var_tags="${var_tags:-documents}"
@@ -45,6 +45,7 @@ function update_script() {
     msg_info "Updating Reactive Resume (Patience)"
     cd /opt/reactive-resume
     export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+
     corepack prepare --activate
     export CI="true"
     export NODE_ENV="production"

ct/reitti.sh

@@ -223,8 +223,6 @@ http {
       proxy_pass $upstream_url;
       proxy_set_header Host $proxy_host;
       proxy_set_header User-Agent "Reitti/1.0";
-      proxy_ssl_server_name on;
-      proxy_ssl_name $proxy_host;
       proxy_cache tiles;
       proxy_cache_key $upstream_url;
       proxy_cache_valid 200 30d;

ct/rss-bridge.sh

@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://rss-bridge.org/
-
-APP="RSS-Bridge"
-var_tags="${var_tags:-rss;feed;bridge}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/rss-bridge ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "rss-bridge" "RSS-Bridge/rss-bridge"; then
-    create_backup /opt/rss-bridge/config.ini.php
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "rss-bridge" "RSS-Bridge/rss-bridge" "tarball"
-
-    restore_backup
-
-    msg_info "Updating Application"
-    cd /opt/rss-bridge
-    $STD composer install --no-dev --optimize-autoloader
-    chown -R www-data:www-data /opt/rss-bridge
-    systemctl restart caddy
-    msg_ok "Updated Application"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/stalwart.sh

@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/stalwartlabs/stalwart
-
-APP="Stalwart"
-var_tags="${var_tags:-mail;smtp;imap}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/stalwart ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "stalwart" "stalwartlabs/stalwart"; then
-    msg_info "Stopping Service"
-    systemctl stop stalwart
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "stalwart" "stalwartlabs/stalwart" "prebuild" "latest" "/opt/stalwart" "stalwart-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
-    chmod +x /opt/stalwart/stalwart
-
-    msg_info "Starting Service"
-    systemctl start stalwart
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080/admin${CL}"
-echo -e "${INFO}${YW}The bootstrap admin password was printed to the service log:${CL}"
-echo -e "${TAB}${DEFAULT}${BGN}journalctl -u stalwart | grep -A8 'bootstrap mode'${CL}"

ct/stirling-pdf.sh

@@ -43,20 +43,8 @@ function update_script() {
     find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
     msg_ok "Patched Native Libraries"
 
-    if [[ -f /etc/systemd/system/libreoffice-listener.service ]]; then
-      msg_info "Removing Conflicting LibreOffice Listener"
-      systemctl disable -q --now libreoffice-listener
-      rm -f /etc/systemd/system/libreoffice-listener.service
-      sed -i '/^Requires=libreoffice-listener.service$/d' /etc/systemd/system/stirlingpdf.service /etc/systemd/system/unoserver.service
-      sed -i 's/^After=syslog.target network.target libreoffice-listener.service$/After=syslog.target network.target unoserver.service/' /etc/systemd/system/stirlingpdf.service
-      sed -i 's/^After=libreoffice-listener.service$/After=network.target/' /etc/systemd/system/unoserver.service
-      systemctl daemon-reload
-      systemctl reset-failed libreoffice-listener.service 2>/dev/null || true
-      msg_ok "Removed Conflicting LibreOffice Listener"
-    fi
-
     msg_info "Stopping Services"
-    systemctl stop stirlingpdf unoserver
+    systemctl stop stirlingpdf libreoffice-listener unoserver
     msg_ok "Stopped Services"
 
     if [[ -f ~/.Stirling-PDF-login ]]; then
@@ -71,7 +59,7 @@ function update_script() {
     msg_ok "Font Cache Updated"
 
     msg_info "Starting Services"
-    systemctl start unoserver stirlingpdf
+    systemctl start stirlingpdf libreoffice-listener unoserver
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/suggestarr.sh

@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/giuseppe99barchetta/SuggestArr
-
-APP="SuggestArr"
-var_tags="${var_tags:-arr;media}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/suggestarr ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr"; then
-    msg_info "Stopping Service"
-    systemctl stop suggestarr
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"
-
-    msg_info "Building Frontend"
-    cd /opt/suggestarr/client
-    $STD npm install
-    $STD npm run build
-    mkdir -p /opt/suggestarr/static
-    cp -r /opt/suggestarr/client/dist/* /opt/suggestarr/static/
-    cp -r /opt/suggestarr/client/node_modules/swagger-ui-dist /opt/suggestarr/static/swagger-ui
-    msg_ok "Built Frontend"
-
-    msg_info "Updating Python Environment"
-    cd /opt/suggestarr
-    $STD uv venv --python 3.12 /opt/suggestarr/.venv
-    $STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_service/requirements.txt
-    msg_ok "Updated Python Environment"
-
-    msg_info "Starting Service"
-    systemctl start suggestarr
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:5000${CL}"

ct/wanderer.sh

@@ -25,149 +25,32 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -d /opt/wanderer/source && ! -d /opt/wanderer/db ]]; then
+  if [[ ! -f /opt/wanderer/start.sh ]]; then
     msg_error "No wanderer Installation Found!"
     exit
   fi
 
-  if [[ ! -f /etc/systemd/system/meilisearch.service ]]; then
-    msg_info "Migrating MeiliSearch"
-    systemctl stop wanderer-web
-
-    rm -rf /opt/wanderer/source/search
-    mkdir -p /opt/wanderer_data
-    [[ -d /opt/wanderer/data/meili_data ]] && cp -r /opt/wanderer/data/meili_data /opt/wanderer_data/
-    mkdir -p /opt/wanderer_data/meili_data
-    rm -rf /opt/wanderer/data/meili_data
-    MEILI_MASTER_KEY_VAL=$(grep -oP '^MEILI_MASTER_KEY=\K.*' /opt/wanderer/.env)
-    cat <<EOF >/etc/meilisearch.toml
-env = "production"
-master_key = "$MEILI_MASTER_KEY_VAL"
-db_path = "/opt/wanderer_data/meili_data"
-dump_dir = "/var/lib/meilisearch/dumps"
-snapshot_dir = "/var/lib/meilisearch/snapshots"
-no_analytics = true
-http_addr = "127.0.0.1:7700"
-EOF
-    mkdir -p /var/lib/meilisearch/dumps /var/lib/meilisearch/snapshots
-
-    cat <<EOF >/etc/systemd/system/meilisearch.service
-[Unit]
-Description=Meilisearch
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-    systemctl daemon-reload
-    systemctl enable -q --now meilisearch
-
-    sed -i \
-      -e "s|^MEILI_HTTP_ADDR=.*|MEILI_HTTP_ADDR=127.0.0.1:7700|" \
-      -e "s|^MEILI_URL=.*|MEILI_URL=http://127.0.0.1:7700|" \
-      /opt/wanderer/.env
-
-    msg_ok "Migrated Meilisearch"
-  fi
-
-  setup_meilisearch
-
-  if [[ -f /opt/wanderer/start.sh || -d /opt/wanderer/source ]]; then
-    msg_info "Migrating wanderer services"
-    systemctl stop wanderer-web
-    rm -f /opt/wanderer/start.sh
-
-    mkdir -p /opt/wanderer_data
-    [[ -d /opt/wanderer/data/pb_data ]] && cp -r /opt/wanderer/data/pb_data /opt/wanderer_data/
-    [[ -d /opt/wanderer/data/plugins ]] && cp -r /opt/wanderer/data/plugins /opt/wanderer_data/
-    mkdir -p /opt/wanderer_data/{pb_data,plugins}
-    rm -rf /opt/wanderer/data
-
-    [[ -d /opt/wanderer/source ]] && cp -r /opt/wanderer/source/. /opt/wanderer/
-    rm -rf /opt/wanderer/source
-
-    if [[ -d /opt/wanderer/db/data ]]; then
-      [[ -e /opt/wanderer/db/data/plugins ]] || ln -sfn /opt/wanderer_data/plugins /opt/wanderer/db/data/plugins
-    fi
-
-    sed -i \
-      -e "s|^PB_DB_LOCATION=.*|PB_DB_LOCATION=/opt/wanderer_data/pb_data|" \
-      -e "s|^MEILI_DB_PATH=.*|MEILI_DB_PATH=/opt/wanderer_data/meili_data|" \
-      /opt/wanderer/.env
-    sed -i "s|^db_path =.*|db_path = \"/opt/wanderer_data/meili_data\"|" /etc/meilisearch.toml
-    rm -f /usr/local/bin/wanderer-pb
-
-    cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
-[Unit]
-Description=wanderer PocketBase
-Wants=network.target
-After=network.target
-PartOf=wanderer-web.service
-StartLimitIntervalSec=10
-StartLimitBurst=5
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/wanderer/db
-EnvironmentFile=/opt/wanderer/.env
-ExecStart=/opt/wanderer/db/pocketbase serve --http=\${PB_URL} --dir=\${PB_DB_LOCATION}
-Restart=always
-RestartSec=1
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-    cat <<EOF >/etc/systemd/system/wanderer-web.service
-[Unit]
-Description=wanderer
-Wants=network.target meilisearch.service wanderer-pocketbase.service
-After=network.target meilisearch.service wanderer-pocketbase.service
-StartLimitIntervalSec=10
-StartLimitBurst=5
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/wanderer/web
-EnvironmentFile=/opt/wanderer/.env
-ExecStart=/usr/bin/node build
-Restart=always
-RestartSec=1
-
-[Install]
-WantedBy=multi-user.target
-EOF
-    systemctl daemon-reload
-    systemctl enable -q wanderer-pocketbase
-    systemctl start wanderer-web
-    msg_ok "Migrated wanderer services"
-  fi
-
   if check_for_gh_release "wanderer" "open-wanderer/wanderer"; then
     msg_info "Stopping service"
     systemctl stop wanderer-web
     msg_ok "Stopped service"
 
-    create_backup /opt/wanderer/.env
+    create_backup /opt/wanderer/source/search
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
     restore_backup
 
     msg_info "Updating wanderer"
-    cd /opt/wanderer/db
+    cd /opt/wanderer/source/db
     $STD go mod tidy
     $STD go build
-    cd /opt/wanderer/web
+    cd /opt/wanderer/source/web
     $STD npm ci
     $STD npm run build
-    mkdir -p /opt/wanderer_data/plugins /opt/wanderer/db/data
+    mkdir -p /opt/wanderer/data/plugins /opt/wanderer/source/db/data
-    [[ -e /opt/wanderer/db/data/plugins ]] || ln -sfn /opt/wanderer_data/plugins /opt/wanderer/db/data/plugins
+    [[ -e /opt/wanderer/source/db/data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /opt/wanderer/source/db/data/plugins
     msg_info "Installing wanderer plugins"
     for plugin in hammerhead komoot strava; do
-      fetch_and_deploy_gh_release "wanderer-plugin-${plugin}" "open-wanderer/wanderer" "prebuild" "${CHECK_UPDATE_RELEASE:-latest}" "/opt/wanderer_data/plugins" "wanderer-plugin-${plugin}.tar.gz" || msg_warn "Failed to install wanderer plugin: ${plugin}"
+      fetch_and_deploy_gh_release "wanderer-plugin-${plugin}" "open-wanderer/wanderer" "prebuild" "${CHECK_UPDATE_RELEASE:-latest}" "/opt/wanderer/data/plugins" "wanderer-plugin-${plugin}.tar.gz" || msg_warn "Failed to install wanderer plugin: ${plugin}"
     done
     msg_ok "Installed wanderer plugins"
     msg_ok "Updated wanderer"
@@ -177,6 +60,19 @@ EOF
     msg_ok "Started service"
     msg_ok "Update Successful"
   fi
+  if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
+    msg_info "Stopping service"
+    systemctl stop wanderer-web
+    msg_ok "Stopped service"
+
+    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
+    grep -q -- '--experimental-dumpless-upgrade' /opt/wanderer/start.sh || sed -i 's|meilisearch --master-key|meilisearch --experimental-dumpless-upgrade --master-key|' /opt/wanderer/start.sh
+
+    msg_info "Starting service"
+    systemctl start wanderer-web
+    msg_ok "Started service"
+    msg_ok "Update Successful"
+  fi
   exit
 }
 

install/ampache-install.sh

@@ -27,11 +27,11 @@ $STD apt install -y \
   libvpx-dev
 msg_ok "Installed dependencies"
 
-PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 setup_mariadb
 MARIADB_DB_USER="ampache" MARIADB_DB_NAME="ampache" setup_mariadb_db
 
-fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.5.zip"
+fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
 
 msg_info "Setting up Ampache"
 rm -rf /var/www/html
@@ -58,7 +58,7 @@ msg_info "Configuring PHP"
 sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
   -e 's/post_max_size = .*/post_max_size = 100M/' \
   -e 's/max_execution_time = .*/max_execution_time = 600/' \
-  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.5/apache2/php.ini
+  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.4/apache2/php.ini
 $STD a2enmod rewrite
 $STD systemctl restart apache2
 msg_ok "Configured PHP"

install/calibre-web-install.sh

@@ -32,14 +32,14 @@ msg_info "Installing Calibre (for eBook conversion)"
 $STD apt install -y calibre
 msg_ok "Installed Calibre"
 
-fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
+fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
 setup_uv
 
 msg_info "Installing Python Dependencies"
 cd /opt/calibre-web
 $STD uv venv
 $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --upgrade pip setuptools wheel
-$STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir .
+$STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir -r requirements.txt
 msg_ok "Installed Python Dependencies"
 
 msg_info "Creating Service"
@@ -54,7 +54,7 @@ Type=simple
 User=root
 Environment="QTWEBENGINE_CHROMIUM_FLAGS=--no-sandbox"
 WorkingDirectory=/opt/calibre-web
-ExecStart=/opt/calibre-web/.venv/bin/cps
+ExecStart=/opt/calibre-web/.venv/bin/python /opt/calibre-web/cps.py
 Restart=on-failure
 RestartSec=5
 

install/convertx-install.sh

@@ -20,15 +20,10 @@ msg_info "Installing Dependencies"
 $STD apt install -y \
   assimp-utils \
   calibre \
-  dasel \
   dcraw \
   dvisvgm \
   ffmpeg \
-  graphicsmagick \
   inkscape \
-  libemail-outlook-message-perl \
-  libheif-examples \
-  libjxl-tools \
   libreoffice-writer \
   libva2 \
   libvips-tools \
@@ -38,7 +33,6 @@ $STD apt install -y \
   poppler-utils \
   potrace \
   python3-numpy \
-  resvg \
   texlive \
   texlive-fonts-recommended \
   texlive-latex-extra \
@@ -46,15 +40,6 @@ $STD apt install -y \
   texlive-xetex
 msg_ok "Installed Dependencies"
 
-setup_uv
-
-msg_info "Installing markitdown"
-export UV_TOOL_BIN_DIR=/usr/local/bin
-$STD uv tool install "markitdown[all]"
-msg_ok "Installed markitdown"
-
-fetch_and_deploy_gh_release "vtracer" "visioncortex/vtracer" "prebuild" "0.6.4" "/usr/local/bin" "vtracer-$(arch_resolve "x86_64" "aarch64")-unknown-linux-musl.tar.gz"
-
 NODE_VERSION="22" NODE_MODULE="bun" setup_nodejs
 fetch_and_deploy_gh_release "ConvertX" "C4illin/ConvertX" "tarball" "latest" "/opt/convertx"
 

install/fleet-install.sh

@@ -1,93 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fleetdm/fleet
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y redis-server mysql-server
-msg_ok "Installed Dependencies"
-
-MYSQL_DB_NAME="fleet" MYSQL_DB_USER="fleet" setup_mysql_db
-fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
-
-msg_info "Configuring Application"
-chmod +x /opt/fleet/fleet
-PRIVATE_KEY=$(openssl rand -hex 32)
-cat <<EOF >/opt/fleet/.env
-FLEET_MYSQL_ADDRESS=127.0.0.1:3306
-FLEET_MYSQL_DATABASE=fleet
-FLEET_MYSQL_USERNAME=fleet
-FLEET_MYSQL_PASSWORD=${MYSQL_DB_PASS}
-FLEET_SERVER_ADDRESS=0.0.0.0:8080
-FLEET_SERVER_TLS=false
-FLEET_SERVER_PRIVATE_KEY=${PRIVATE_KEY}
-FLEET_REDIS_ADDRESS=127.0.0.1:6379
-FLEET_LOGGING_JSON=true
-EOF
-msg_ok "Configured Application"
-
-msg_info "Running Database Migrations"
-set -a && source /opt/fleet/.env && set +a
-$STD /opt/fleet/fleet prepare db --no-prompt
-msg_ok "Ran Database Migrations"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/fleet.service
-[Unit]
-Description=Fleet
-After=network.target mysql.service redis-server.service
-Requires=mysql.service redis-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/fleet
-EnvironmentFile=/opt/fleet/.env
-ExecStart=/opt/fleet/fleet serve
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now fleet redis-server
-msg_ok "Created Service"
-
-msg_info "Initializing Fleet"
-FLEET_ADMIN_EMAIL="admin@fleet.local"
-FLEET_ADMIN_PASS="$(openssl rand -hex 8)1!"
-ELAPSED=0
-until curl -sf "http://127.0.0.1:8080/healthz" >/dev/null 2>&1; do
-  sleep 2
-  ELAPSED=$((ELAPSED + 2))
-  [[ $ELAPSED -ge 60 ]] && break
-done
-SETUP_RESPONSE=$(curl -s -X POST "http://127.0.0.1:8080/api/v1/setup" \
-  -H "Content-Type: application/json" \
-  -d "{\"admin\":{\"admin\":true,\"email\":\"${FLEET_ADMIN_EMAIL}\",\"name\":\"Admin\",\"password\":\"${FLEET_ADMIN_PASS}\"},\"org_info\":{\"org_name\":\"Fleet\",\"org_logo_url\":\"\"},\"server_url\":\"http://127.0.0.1:8080\"}")
-FLEET_TOKEN=$(echo "${SETUP_RESPONSE}" | grep -o '"token":"[^"]*"' | cut -d'"' -f4) || true
-if [[ -n "${FLEET_TOKEN}" ]]; then
-  curl -s -X PATCH "http://127.0.0.1:8080/api/latest/fleet/config" \
-    -H "Content-Type: application/json" \
-    -H "Authorization: Bearer ${FLEET_TOKEN}" \
-    -d "{\"server_settings\":{\"server_url\":\"http://${LOCAL_IP}:8080\"}}" >/dev/null
-fi
-cat <<EOF >>/opt/fleet/.env
-FLEET_ADMIN_EMAIL=${FLEET_ADMIN_EMAIL}
-FLEET_ADMIN_PASSWORD=${FLEET_ADMIN_PASS}
-EOF
-msg_ok "Initialized Fleet"
-
-motd_ssh
-customize
-cleanup_lxc

install/godoxy-install.sh

@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# Co-Authors: yusing
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/yusing/godoxy
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
-
-msg_info "Generating Self-Signed Certificate"
-create_self_signed_cert "godoxy"
-msg_ok "Generated Self-Signed Certificate"
-
-msg_info "Configuring GoDoxy"
-mkdir -p \
-  /opt/godoxy/config/middlewares \
-  /opt/godoxy/data \
-  /opt/godoxy/error_pages
-
-cat <<EOF >/opt/godoxy/config/config.yml
-autocert:
-  provider: local
-  cert_path: /etc/ssl/godoxy/godoxy.crt
-  key_path: /etc/ssl/godoxy/godoxy.key
-
-providers:
-  include:
-    - routes.yml
-
-webui:
-  aliases:
-    - "${LOCAL_IP}"
-EOF
-
-cat <<'EOF' >/opt/godoxy/config/routes.yml
-{}
-EOF
-
-cat <<EOF >/etc/godoxy.env
-GODOXY_API_USER="admin"
-GODOXY_API_PASSWORD="$(openssl rand -hex 16)"
-GODOXY_API_JWT_SECRET="$(openssl rand -base64 32)"
-EOF
-chmod 600 /etc/godoxy.env
-msg_ok "Configured GoDoxy"
-
-msg_info "Creating Service"
-cat <<'EOF' >/etc/systemd/system/godoxy.service
-[Unit]
-Description=GoDoxy Reverse Proxy
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-Group=root
-WorkingDirectory=/opt/godoxy
-EnvironmentFile=/etc/godoxy.env
-ExecStart=/opt/godoxy/godoxy
-Restart=on-failure
-RestartSec=5
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-NoNewPrivileges=true
-PrivateTmp=true
-ProtectHome=true
-ProtectSystem=full
-ReadWritePaths=/opt/godoxy /etc/ssl/godoxy
-UMask=0077
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now godoxy
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/homepage-install.sh

@@ -25,29 +25,14 @@ msg_info "Installing Homepage (Patience)"
 mkdir -p /opt/homepage/config
 cd /opt/homepage
 cp /opt/homepage/src/skeleton/* /opt/homepage/config
-echo 'onlyBuiltDependencies=*' >>.npmrc
+echo 'onlyBuiltDependencies=*' >> .npmrc
 $STD pnpm install
 export NEXT_PUBLIC_VERSION="v$RELEASE"
 export NEXT_PUBLIC_REVISION="source"
 export NEXT_PUBLIC_BUILDTIME=$(curl -fsSL https://api.github.com/repos/gethomepage/homepage/releases/latest | jq -r '.published_at')
 export NEXT_TELEMETRY_DISABLED=1
 $STD pnpm build
-cat <<EOF >/opt/homepage/.env
+echo "HOMEPAGE_ALLOWED_HOSTS=localhost:3000,${LOCAL_IP}:3000" >/opt/homepage/.env
-HOMEPAGE_ALLOWED_HOSTS=localhost:3000,${LOCAL_IP}:3000
-## Optional Authentication
-# HOMEPAGE_AUTH_ENABLED=true
-# HOMEPAGE_AUTH_SECRET="$(openssl rand -base64 32)"
-# HOMEPAGE_EXTERNAL_URL=<your-external-url>
-## Uncomment below and use strong, unique password for password login
-# HOMEPAGE_AUTH_PASSWORD=
-## Uncomment and fill in below for OIDC login
-# HOMEPAGE_OIDC_ISSUER=
-# HOMEPAGE_OIDC_CLIENT_ID=
-# HOMEPAGE_OIDC_CLIENT_SECRET=
-# HOMEPAGE_OIDC_SCOPE=openid email profile
-# HOMEPAGE_OIDC_NAME=
-EOF
-chmod 600 /opt/homepage/.env
 msg_ok "Installed Homepage"
 
 msg_info "Creating Service"

install/karakeep-install.sh

@@ -31,9 +31,8 @@ setup_meilisearch
 
 fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep" "tarball"
 cd /opt/karakeep
-# Node 24.19.x crashes better-sqlite3 on cleanup (karakeep-app/karakeep#2989); stay on 22 LTS until upstream reverts.
 MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
 
 msg_info "Installing external JavaScript Extension for yt-dlp"
 $STD pip install -U yt-dlp-ejs --break-system-packages

install/koillection-install.sh

@@ -38,7 +38,6 @@ export APP_RUNTIME='Symfony\Component\Runtime\SymfonyRuntime'
 $STD composer install --no-dev -o --no-interaction --classmap-authoritative
 $STD php bin/console doctrine:migrations:migrate --no-interaction
 $STD php bin/console app:translations:dump
-$STD php bin/console lexik:jwt:generate-keypair --skip-if-exists
 cd assets/
 $STD yarn install
 $STD yarn build
@@ -52,7 +51,6 @@ cat <<EOF >/etc/apache2/sites-available/koillection.conf
     ServerName koillection
     DocumentRoot /opt/koillection/public
     SetEnv APP_RUNTIME "Symfony\\Component\\Runtime\\SymfonyRuntime"
-    SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=\$1
     <Directory /opt/koillection/public>
         Options Indexes FollowSymLinks
         AllowOverride All

install/mumble-install.sh

@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.mumble.info/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Mumble"
-$STD apt install -y mumble-server
-cat <<EOF >~/.mumble
-$(get_latest_github_release "mumble-voip/mumble")
-EOF
-msg_ok "Installed Mumble"
-
-msg_info "Configuring Mumble"
-mkdir -p /var/lib/mumble-server
-cat <<EOF >/etc/mumble/mumble-server.ini
-database=/var/lib/mumble-server/mumble-server.sqlite
-sqlite_wal=2
-port=64738
-users=100
-bandwidth=558000
-allowping=true
-obfuscate=true
-ice="tcp -h 127.0.0.1 -p 6502"
-icesecretwrite=$(tr -d '-' </proc/sys/kernel/random/uuid)
-EOF
-chown -R mumble-server:mumble-server /var/lib/mumble-server
-chown root:mumble-server /etc/mumble/mumble-server.ini
-chmod 640 /etc/mumble/mumble-server.ini
-msg_ok "Configured Mumble"
-
-msg_info "Setting SuperUser Password"
-MUMBLE_PASSWORD=$(tr -d '-' </proc/sys/kernel/random/uuid)
-mumble-server -ini /etc/mumble/mumble-server.ini -supw "$MUMBLE_PASSWORD"
-chown -R mumble-server:mumble-server /var/lib/mumble-server
-msg_ok "Set SuperUser password: ${MUMBLE_PASSWORD}"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/mumble-server.service
-[Unit]
-Description=Mumble Server
-After=network.target
-
-[Service]
-Type=simple
-User=mumble-server
-Group=mumble-server
-ExecStart=/usr/bin/mumble-server -ini /etc/mumble/mumble-server.ini -fg
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now mumble-server
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/networkoptimizer-install.sh

@@ -35,22 +35,15 @@ RID="linux-x64"
 [[ "$(dpkg --print-architecture)" == "arm64" ]] && RID="linux-arm64"
 cd /opt/networkoptimizer
 export MinVerVersionOverride="$(cat ~/.networkoptimizer)"
-export MSBUILDDISABLENODEREUSE=1
-export DOTNET_CLI_TELEMETRY_OPTOUT=1
-export DOTNET_SYSTEM_NET_DISABLEIPV6=1
 $STD dotnet publish src/NetworkOptimizer.Web -c Release -r "$RID" --self-contained -o /opt/networkoptimizer/publish
 chmod +x /opt/networkoptimizer/publish/NetworkOptimizer.Web
 msg_ok "Built NetworkOptimizer"
 
-msg_info "Building Speed Test Binaries"
+msg_info "Building Gateway Speed Test Binary"
 mkdir -p /opt/networkoptimizer/publish/tools
 cd /opt/networkoptimizer/src/uwnspeedtest
 CGO_ENABLED=0 GOOS=linux GOARCH=arm64 $STD go build -trimpath -ldflags "-s -w" -o /opt/networkoptimizer/publish/tools/uwnspeedtest-linux-arm64 .
-SERVER_ARCH="$(arch_resolve)"
+msg_ok "Built Gateway Speed Test Binary"
-if [[ "$SERVER_ARCH" != "arm64" ]]; then
-  CGO_ENABLED=0 GOOS=linux GOARCH="$SERVER_ARCH" $STD go build -trimpath -ldflags "-s -w" -o "/opt/networkoptimizer/publish/tools/uwnspeedtest-linux-${SERVER_ARCH}" .
-fi
-msg_ok "Built Speed Test Binaries"
 
 msg_info "Configuring NetworkOptimizer"
 cat <<EOF >/opt/networkoptimizer/networkoptimizer.env

install/newt-install.sh

@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Arubinu
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fosrl/newt
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "newt" "fosrl/newt" "singlefile" "latest" "/opt/newt" "newt_linux_$(arch_resolve)"
-ln -sf /opt/newt/newt /usr/local/bin/newt
-
-if [[ -z "${NEWT_ID:-}" ]]; then
-  read -rp "Newt ID (from your Pangolin dashboard): " NEWT_ID
-fi
-if [[ -z "${NEWT_SECRET:-}" ]]; then
-  read -rsp "Newt Secret: " NEWT_SECRET
-  echo
-fi
-if [[ -z "${PANGOLIN_ENDPOINT:-}" ]]; then
-  read -rp "Pangolin endpoint (e.g. https://pangolin.example.com): " PANGOLIN_ENDPOINT
-fi
-
-if [[ -z "$NEWT_ID" || -z "$NEWT_SECRET" || -z "$PANGOLIN_ENDPOINT" ]]; then
-  msg_error "Newt ID, Secret and Endpoint are all required. Aborting."
-  exit 1
-fi
-
-msg_info "Configuring Newt"
-mkdir -p /etc/newt
-cat <<EOF >/etc/newt/newt.env
-NEWT_ID=${NEWT_ID}
-NEWT_SECRET=${NEWT_SECRET}
-PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}
-EOF
-chmod 600 /etc/newt/newt.env
-msg_ok "Configured Newt"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/newt.service
-[Unit]
-Description=Newt (Pangolin tunnel client)
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-EnvironmentFile=/etc/newt/newt.env
-ExecStart=/usr/local/bin/newt
-Restart=always
-RestartSec=2
-UMask=0077
-PrivateTmp=true
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now newt
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/openwebui-install.sh

@@ -25,28 +25,8 @@ setup_hwaccel
 
 PYTHON_VERSION="3.12" setup_uv
 
-OTEL_ARGS=()
-read -r -p "${TAB3}Would you like to install OpenTelemetry instrumentation packages (requires manual .env configuration)? <y/N> " prompt
-if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-  for pkg in \
-    opentelemetry-api \
-    opentelemetry-sdk \
-    opentelemetry-exporter-otlp \
-    opentelemetry-exporter-otlp-proto-http \
-    opentelemetry-instrumentation-fastapi \
-    opentelemetry-instrumentation-aiohttp-client \
-    opentelemetry-instrumentation-httpx \
-    opentelemetry-instrumentation-sqlalchemy \
-    opentelemetry-instrumentation-requests \
-    opentelemetry-instrumentation-logging \
-    opentelemetry-instrumentation-redis \
-    opentelemetry-instrumentation-system-metrics; do
-    OTEL_ARGS+=(--with "$pkg")
-  done
-fi
-
 msg_info "Installing Open WebUI"
-$STD uv tool install --python 3.12 --constraint <(echo "numba>=0.60") "${OTEL_ARGS[@]}" open-webui[all]
+$STD uv tool install --python 3.12 --constraint <(echo "numba>=0.60") open-webui[all]
 msg_ok "Installed Open WebUI"
 
 read -r -p "${TAB3}Would you like to add Ollama? <y/N> " prompt

install/openziti-controller-install.sh

@@ -24,7 +24,7 @@ Components: main
 Signed-By: /usr/share/keyrings/openziti.gpg
 EOF
 $STD apt update
-$STD apt install -y openziti-controller openziti-console
+$STD apt install -y openziti-controller openziti-console </dev/null
 msg_ok "Installed openziti"
 
 read -r -p "${TAB3}Would you like to go through the auto configuration now? <y/N>" prompt

install/outline-install.sh

@@ -28,23 +28,21 @@ fetch_and_deploy_gh_release "outline" "outline/outline" "tarball"
 
 msg_info "Configuring Outline (Patience)"
 SECRET_KEY="$(openssl rand -hex 32)"
-UTILS_SECRET="$(openssl rand -hex 32)"
 cd /opt/outline
 cp .env.sample .env
 export NODE_ENV=development
-sed -i "s#^NODE_ENV=.*#NODE_ENV=development#" /opt/outline/.env
+sed -i 's/NODE_ENV=production/NODE_ENV=development/g' /opt/outline/.env
-sed -i "s#^SECRET_KEY=.*#SECRET_KEY=${SECRET_KEY}#" /opt/outline/.env
+sed -i "s/generate_a_new_key/${SECRET_KEY}/g" /opt/outline/.env
-sed -i "s#^UTILS_SECRET=.*#UTILS_SECRET=${UTILS_SECRET}#" /opt/outline/.env
+sed -i "s/user:pass@postgres/${PG_DB_USER}:${PG_DB_PASS}@localhost/g" /opt/outline/.env
-sed -i "s#^DATABASE_URL=.*#DATABASE_URL=postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}#" /opt/outline/.env
+sed -i 's/redis:6379/localhost:6379/g' /opt/outline/.env
-sed -i "s#^REDIS_URL=.*#REDIS_URL=redis://localhost:6379#" /opt/outline/.env
+sed -i "5s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
-sed -i "s#^URL=.*#URL=http://${LOCAL_IP}#" /opt/outline/.env
+sed -i 's/FORCE_HTTPS=true/FORCE_HTTPS=false/g' /opt/outline/.env
-sed -i "s#^FORCE_HTTPS=.*#FORCE_HTTPS=false#" /opt/outline/.env
 export NODE_OPTIONS="--max-old-space-size=3584"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 
 $STD yarn install --immutable
 export NODE_ENV=production
-sed -i "s#^NODE_ENV=.*#NODE_ENV=production#" /opt/outline/.env
+sed -i 's/NODE_ENV=development/NODE_ENV=production/g' /opt/outline/.env
 $STD yarn build
 msg_ok "Configured Outline"
 

install/paperless-ngx-install.sh

@@ -108,7 +108,7 @@ Requires=redis.service
 
 [Service]
 WorkingDirectory=/opt/paperless/src
-ExecStart=uv run --no-sync -- celery --app paperless beat --loglevel INFO
+ExecStart=uv run -- celery --app paperless beat --loglevel INFO
 
 [Install]
 WantedBy=multi-user.target
@@ -122,7 +122,7 @@ After=postgresql.service
 
 [Service]
 WorkingDirectory=/opt/paperless/src
-ExecStart=uv run --no-sync -- celery --app paperless worker --loglevel INFO
+ExecStart=uv run -- celery --app paperless worker --loglevel INFO
 
 [Install]
 WantedBy=multi-user.target
@@ -136,7 +136,7 @@ Requires=redis.service
 [Service]
 WorkingDirectory=/opt/paperless/src
 ExecStartPre=/bin/sleep 2
-ExecStart=uv run --no-sync -- python manage.py document_consumer
+ExecStart=uv run -- python manage.py document_consumer
 
 [Install]
 WantedBy=multi-user.target
@@ -151,8 +151,7 @@ Requires=redis.service
 
 [Service]
 WorkingDirectory=/opt/paperless/src
-#ExecStartPre=uv run -- python manage.py document_index reindex --if-needed --no-progress-bar
+ExecStart=uv run -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"
-ExecStart=uv run --no-sync -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"
 Environment=GRANIAN_HOST=::
 Environment=GRANIAN_PORT=8000
 Environment=GRANIAN_WORKERS=1

install/pelican-panel-install.sh

@@ -27,8 +27,6 @@ msg_info "Installing Pelican Panel"
 cd /opt/pelican-panel
 $STD composer install --no-dev --optimize-autoloader --no-interaction
 $STD php artisan p:environment:setup
-sed -i "s|^APP_URL=.*|APP_URL=http://${LOCAL_IP}|" /opt/pelican-panel/.env
-echo "yes" | $STD php artisan p:environment:database --driver mariadb --host localhost --port 3306 --database "$MARIADB_DB_NAME" --username "$MARIADB_DB_USER" --password "$MARIADB_DB_PASS"
 $STD php artisan p:environment:queue-service --no-interaction
 echo "* * * * * php /opt/pelican-panel/artisan schedule:run >> /dev/null 2>&1" | crontab -u www-data -
 chown -R www-data:www-data /opt/pelican-panel

install/powerdns-install.sh

@@ -40,25 +40,24 @@ $STD apt install -y \
   pdns-backend-sqlite3
 sed -i 's/^launch=$/# launch=/' /etc/powerdns/pdns.conf
 rm -f /etc/powerdns/pdns.d/bind.conf
-mkdir -p /var/lib/powerdns
 cat <<EOF >/etc/powerdns/pdns.d/gsqlite3.conf
 launch=gsqlite3
-gsqlite3-database=/var/lib/powerdns/powerdns.db
+gsqlite3-database=/opt/poweradmin/powerdns.db
 EOF
 msg_ok "Setup PowerDNS"
 
 fetch_and_deploy_gh_release "poweradmin" "poweradmin/poweradmin" "tarball"
 
 msg_info "Setting up Poweradmin"
-sqlite3 /var/lib/powerdns/powerdns.db </opt/poweradmin/sql/poweradmin-sqlite-db-structure.sql
+sqlite3 /opt/poweradmin/powerdns.db </opt/poweradmin/sql/poweradmin-sqlite-db-structure.sql
-sqlite3 /var/lib/powerdns/powerdns.db </opt/poweradmin/sql/pdns/49/schema.sqlite3.sql
+sqlite3 /opt/poweradmin/powerdns.db </opt/poweradmin/sql/pdns/49/schema.sqlite3.sql
 PA_ADMIN_USERNAME="admin"
 PA_ADMIN_EMAIL="admin@example.com"
 PA_ADMIN_FULLNAME="Administrator"
 PA_ADMIN_PASSWORD=$(openssl rand -base64 16 | tr -d "=+/" | cut -c1-16)
 PA_SESSION_KEY=$(openssl rand -base64 75 | tr -dc 'A-Za-z0-9^@#!(){}[]%_\-+=~' | head -c 50)
 PASSWORD_HASH=$(php -r "echo password_hash(\$argv[1], PASSWORD_DEFAULT);" -- "${PA_ADMIN_PASSWORD}" 2>/dev/null)
-sqlite3 /var/lib/powerdns/powerdns.db "INSERT INTO users (username, password, fullname, email, description, perm_templ, active, use_ldap) \
+sqlite3 /opt/poweradmin/powerdns.db "INSERT INTO users (username, password, fullname, email, description, perm_templ, active, use_ldap) \
   VALUES ('$(escape_sql "${PA_ADMIN_USERNAME}")', '$(escape_sql "${PASSWORD_HASH}")', '$(escape_sql "${PA_ADMIN_FULLNAME}")', \
   '$(escape_sql "${PA_ADMIN_EMAIL}")', 'System Administrator', 1, 1, 0);"
 
@@ -82,7 +81,7 @@ return [
      */
     'database' => [
         'type' => 'sqlite',
-        'file' => '/var/lib/powerdns/powerdns.db',
+        'file' => '/opt/poweradmin/powerdns.db',
     ],
 
     /**
@@ -134,8 +133,8 @@ EOF
 $STD a2enmod rewrite headers
 chown -R www-data:pdns /opt/poweradmin
 chmod 775 /opt/poweradmin
-chown pdns:pdns /var/lib/powerdns/powerdns.db
+chown pdns:pdns /opt/poweradmin/powerdns.db
-chmod 664 /var/lib/powerdns/powerdns.db
+chmod 664 /opt/poweradmin/powerdns.db
 usermod -aG pdns www-data
 $STD systemctl restart pdns apache2
 msg_ok "Created Service"

install/projectsend-install.sh

@@ -13,106 +13,46 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
-$STD apt install -y nginx
-msg_ok "Installed Dependencies"
-
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="ldap,pcntl" setup_php
 setup_mariadb
-MARIADB_DB_NAME="projectsend"
+MARIADB_DB_NAME="projectsend" MARIADB_DB_USER="projectsend" setup_mariadb_db
-MARIADB_DB_USER="projectsend"
+fetch_and_deploy_gh_release "projectsend" "projectsend/projectsend" "prebuild" "latest" "/opt/projectsend" "projectsend-r*.zip"
-setup_mariadb_db
-fetch_and_deploy_gh_release "projectsend" "projectsend/projectsend" "prebuild" "latest" "/opt/projectsend" "projectsend-*.zip"
 
-msg_info "Configuring ProjectSend"
+msg_info "Installing ProjectSend"
-cd /opt/projectsend
+mv /opt/projectsend/includes/sys.config.sample.php /opt/projectsend/includes/sys.config.php
-cp .env.example .env
-ADMIN_EMAIL="admin@example.com"
-ADMIN_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-sed -i \
-  -e "s|^APP_ENV=.*|APP_ENV=production|" \
-  -e "s|^APP_DEBUG=.*|APP_DEBUG=false|" \
-  -e "s|^APP_URL=.*|APP_URL=http://${LOCAL_IP}|" \
-  -e "s|^DB_HOST=.*|DB_HOST=localhost|" \
-  -e "s|^DB_DATABASE=.*|DB_DATABASE=${MARIADB_DB_NAME}|" \
-  -e "s|^DB_USERNAME=.*|DB_USERNAME=${MARIADB_DB_USER}|" \
-  -e "s|^DB_PASSWORD=.*|DB_PASSWORD=${MARIADB_DB_PASS}|" \
-  -e "s|^SESSION_DRIVER=.*|SESSION_DRIVER=database|" \
-  -e "s|^CACHE_STORE=.*|CACHE_STORE=database|" \
-  -e "s|^QUEUE_CONNECTION=.*|QUEUE_CONNECTION=database|" \
-  .env
 chown -R www-data:www-data /opt/projectsend
-chmod -R 775 /opt/projectsend/storage /opt/projectsend/bootstrap/cache
+chmod -R 775 /opt/projectsend
-$STD sudo -u www-data php artisan key:generate --force --no-interaction
+chmod 644 /opt/projectsend/includes/sys.config.php
-$STD sudo -u www-data php artisan migrate --force
+sed -i -e "s/\(define('DB_NAME', \).*/\1'$MARIADB_DB_NAME');/" \
-$STD sudo -u www-data php artisan storage:link --force
+  -e "s/\(define('DB_USER', \).*/\1'$MARIADB_DB_USER');/" \
-$STD sudo -u www-data php artisan projectsend:ensure-roles
+  -e "s/\(define('DB_PASSWORD', \).*/\1'$MARIADB_DB_PASS');/" \
-$STD sudo -u www-data php artisan projectsend:admin --if-none \
+  /opt/projectsend/includes/sys.config.php
-  --name="Administrator" \
+sed -i -e "s/^\(memory_limit = \).*/\1 256M/" \
-  --email="${ADMIN_EMAIL}" \
+  -e "s/^\(post_max_size = \).*/\1 256M/" \
-  --password="${ADMIN_PASSWORD}"
+  -e "s/^\(upload_max_filesize = \).*/\1 256M/" \
-cat <<EOF >~/projectsend.creds
+  -e "s/^\(max_execution_time = \).*/\1 300/" \
-ProjectSend Credentials
+  /etc/php/8.4/apache2/php.ini
-Admin Email: ${ADMIN_EMAIL}
+msg_ok "Installed projectsend"
-Admin Password: ${ADMIN_PASSWORD}
-EOF
-msg_ok "Configured ProjectSend"
 
 msg_info "Creating Service"
-PHP_SOCK=$(get_php_fpm_socket)
+cat <<EOF >/etc/apache2/sites-available/projectsend.conf
-cat <<EOF >/etc/nginx/sites-available/projectsend.conf
+<VirtualHost *:80>
-server {
+    ServerName projectsend
-    listen 80 default_server;
+    DocumentRoot /opt/projectsend
-    server_name _;
+    <Directory /opt/projectsend>
-    root /opt/projectsend/public;
+        Options FollowSymLinks
-    index index.php;
+        AllowOverride All
+        Require all granted
+    </Directory>
 
-    client_max_body_size 100m;
+    ErrorLog /var/log/apache2/projectsend_error.log
-
+    CustomLog /var/log/apache2/projectsend_access.log combined
-    location / {
+</VirtualHost>
-        try_files \$uri \$uri/ /index.php?\$query_string;
-    }
-
-    location /protected-files/ {
-        internal;
-        alias /opt/projectsend/storage/app/files/;
-    }
-
-    location ~ \.php\$ {
-        try_files \$uri =404;
-        fastcgi_pass unix:${PHP_SOCK};
-        fastcgi_index index.php;
-        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
-        include fastcgi_params;
-        fastcgi_buffer_size 32k;
-        fastcgi_buffers 8 32k;
-    }
-
-    location ~ /\.(?!well-known) {
-        deny all;
-    }
-}
 EOF
-nginx_enable_site projectsend.conf
+$STD a2ensite projectsend
-
+$STD a2enmod rewrite
-cat <<EOF >/etc/systemd/system/projectsend-worker.service
+$STD a2dissite 000-default.conf
-[Unit]
+$STD systemctl reload apache2
-Description=ProjectSend queue worker
-After=network.target mariadb.service
-
-[Service]
-User=www-data
-Group=www-data
-Restart=always
-WorkingDirectory=/opt/projectsend
-ExecStart=/usr/bin/php artisan queue:work --tries=3 --backoff=3
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now projectsend-worker
-
-echo "* * * * * cd /opt/projectsend && php artisan schedule:run >> /dev/null 2>&1" | crontab -u www-data -
 msg_ok "Created Service"
 
 motd_ssh

install/reactive-resume-install.sh

@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream | Rewrite: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://rxresu.me/ | Github: https://github.com/amruthpillai/reactive-resume
+# Source: https://rxresume.org | Github: https://github.com/amruthpillai/reactive-resume
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -39,6 +39,7 @@ msg_ok "Built Reactive Resume"
 
 msg_info "Configuring Reactive Resume"
 AUTH_SECRET=$(openssl rand -hex 32)
+
 cat <<EOF >/opt/reactive-resume/.env
 # Reactive Resume v5 Configuration
 NODE_ENV=production

install/reitti-install.sh

@@ -46,8 +46,6 @@ http {
       proxy_pass $upstream_url;
       proxy_set_header Host $proxy_host;
       proxy_set_header User-Agent "Reitti/1.0";
-      proxy_ssl_server_name on;
-      proxy_ssl_name $proxy_host;
       proxy_cache tiles;
       proxy_cache_key $upstream_url;
       proxy_cache_valid 200 30d;

install/rss-bridge-install.sh

@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://rss-bridge.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y caddy patchelf
-msg_ok "Installed Dependencies"
-
-PHP_VERSION="8.4" PHP_FPM="YES" setup_php
-setup_composer
-
-fetch_and_deploy_gh_release "curl-impersonate" "lexiforest/curl-impersonate" "prebuild" "latest" "/usr/local/lib/curl-impersonate" "libcurl-impersonate-v*.$(arch_resolve x86_64-linux-gnu aarch64-linux-gnu).tar.gz"
-
-fetch_and_deploy_gh_release "rss-bridge" "RSS-Bridge/rss-bridge" "tarball"
-
-msg_info "Setting up RSS-Bridge"
-cd /opt/rss-bridge
-$STD composer install --no-dev --optimize-autoloader
-cp config.default.ini.php config.ini.php
-chown -R www-data:www-data /opt/rss-bridge
-msg_ok "Set up RSS-Bridge"
-
-msg_info "Configuring Caddy"
-PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-cat <<EOF >/etc/caddy/Caddyfile
-:80 {
-    root * /opt/rss-bridge
-    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
-    file_server
-    encode gzip
-}
-EOF
-usermod -aG www-data caddy
-msg_ok "Configured Caddy"
-
-if [[ -f /usr/local/lib/curl-impersonate/libcurl-impersonate.so ]]; then
-  msg_info "Enabling curl-impersonate for PHP-FPM"
-  patchelf --set-soname libcurl.so.4 /usr/local/lib/curl-impersonate/libcurl-impersonate.so
-  mkdir -p /etc/systemd/system/php${PHP_VER}-fpm.service.d
-  cat <<EOF >/etc/systemd/system/php${PHP_VER}-fpm.service.d/curl-impersonate.conf
-[Service]
-Environment=LD_PRELOAD=/usr/local/lib/curl-impersonate/libcurl-impersonate.so
-EOF
-  cat <<EOF >>/etc/php/${PHP_VER}/fpm/pool.d/www.conf
-env[CURL_IMPERSONATE] = chrome142
-EOF
-  $STD systemctl daemon-reload
-  safe_service_restart php${PHP_VER}-fpm
-  msg_ok "Enabled curl-impersonate for PHP-FPM"
-fi
-
-systemctl enable -q --now php${PHP_VER}-fpm
-systemctl restart caddy
-
-motd_ssh
-customize
-cleanup_lxc

install/stalwart-install.sh

@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/stalwartlabs/stalwart
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "stalwart" "stalwartlabs/stalwart" "prebuild" "latest" "/opt/stalwart" "stalwart-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
-chmod +x /opt/stalwart/stalwart
-
-msg_info "Configuring Stalwart"
-mkdir -p /opt/stalwart_data/{etc,data,logs}
-cat <<EOF >/opt/stalwart_data/etc/stalwart.env
-# Uncomment and edit an entry to override its default.
-# Apply changes with: systemctl restart stalwart
-
-#STALWART_HOSTNAME=mail.example.com
-#STALWART_PUBLIC_URL=https://mail.example.com
-#STALWART_RECOVERY_MODE=true
-#STALWART_RECOVERY_ADMIN=admin:changeme
-EOF
-chmod 600 /opt/stalwart_data/etc/stalwart.env
-msg_ok "Configured Stalwart"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/stalwart.service
-[Unit]
-Description=Stalwart Mail Server
-Conflicts=postfix.service sendmail.service exim4.service
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/stalwart_data
-EnvironmentFile=-/opt/stalwart_data/etc/stalwart.env
-ExecStart=/opt/stalwart/stalwart --config=/opt/stalwart_data/etc/config.json
-LimitNOFILE=65536
-KillMode=process
-KillSignal=SIGINT
-Restart=on-failure
-RestartSec=5
-SyslogIdentifier=stalwart
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now stalwart
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/stirling-pdf-install.sh

@@ -34,11 +34,7 @@ msg_ok "Installed Dependencies"
 PYTHON_VERSION="3.12" setup_uv
 JAVA_VERSION="25" setup_java
 
-if ! read -r -p "${TAB3}Do you want to use Stirling-PDF with Login? (no/n = without Login) [Y/n] " response; then
+read -r -p "${TAB3}Do you want to use Stirling-PDF with Login? (no/n = without Login) [Y/n] " response
-  # No interactive stdin (EOF): fall back to the no-login install instead of
-  # silently selecting login, which the -z test below would otherwise do.
-  response="n"
-fi
 response=${response,,} # Convert to lowercase
 login_mode="false"
 if [[ "$response" == "y" || "$response" == "yes" || -z "$response" ]]; then
@@ -76,10 +72,7 @@ $STD uv pip install \
   pillow \
   pdf2image
 $STD apt install -y python3-uno python3-pip
-# Install unoserver for the system Python, not the venv activated above: `uno` is
+$STD pip3 install --break-system-packages --timeout=120 unoserver
-# provided by python3-uno for /usr/bin/python3 only, and unoserver.service expects
-# /usr/local/bin/unoserver. A bare `pip3` here resolves to the venv's pip.
-$STD /usr/bin/python3 -m pip install --break-system-packages --timeout=120 unoserver
 ln -sf /opt/.venv/bin/python3 /usr/local/bin/python3
 ln -sf /opt/.venv/bin/pip /usr/local/bin/pip
 msg_ok "Installed Python Dependencies"
@@ -111,7 +104,7 @@ PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:
 EOF
 
 if [[ "$login_mode" == "true" ]]; then
-  cat <<EOF >>/opt/Stirling-PDF/.env
+  cat <<EOF >/opt/Stirling-PDF/.env
 # activate Login
 DISABLE_ADDITIONAL_FEATURES=false
 SECURITY_ENABLELOGIN=true
@@ -132,12 +125,27 @@ $STD fc-cache -fv
 msg_ok "Font Cache Updated"
 
 msg_info "Creating Service"
-# unoserver starts and supervises its own LibreOffice on UNO port 2002, so a separate
+cat <<EOF >/etc/systemd/system/libreoffice-listener.service
-# listener on that port only collides with it. Do not reintroduce one.
+[Unit]
+Description=LibreOffice Headless Listener Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+Group=root
+ExecStart=/usr/lib/libreoffice/program/soffice --headless --invisible --nodefault --nofirststartwizard --nolockcheck --nologo --accept="socket,host=127.0.0.1,port=2002;urp;StarOffice.ComponentContext"
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
 cat <<EOF >/etc/systemd/system/stirlingpdf.service
 [Unit]
 Description=Stirling-PDF service
-After=syslog.target network.target unoserver.service
+After=syslog.target network.target libreoffice-listener.service
+Requires=libreoffice-listener.service
 
 [Service]
 SuccessExitStatus=143
@@ -158,7 +166,8 @@ EOF
 cat <<EOF >/etc/systemd/system/unoserver.service
 [Unit]
 Description=UnoServer RPC Interface
-After=network.target
+After=libreoffice-listener.service
+Requires=libreoffice-listener.service
 
 [Service]
 Type=simple
@@ -170,8 +179,9 @@ EnvironmentFile=/opt/Stirling-PDF/.env
 WantedBy=multi-user.target
 EOF
 
-systemctl enable -q --now unoserver
+systemctl enable -q --now libreoffice-listener
 systemctl enable -q --now stirlingpdf
+systemctl enable -q --now unoserver
 msg_ok "Created Service"
 
 motd_ssh

install/suggestarr-install.sh

@@ -1,74 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/giuseppe99barchetta/SuggestArr
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y build-essential
-msg_ok "Installed Dependencies"
-
-UV_PYTHON="3.12" setup_uv
-NODE_VERSION="22" setup_nodejs
-
-fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"
-
-msg_info "Building Frontend"
-cd /opt/suggestarr/client
-$STD npm install
-$STD npm run build
-mkdir -p /opt/suggestarr/static
-cp -r /opt/suggestarr/client/dist/* /opt/suggestarr/static/
-cp -r /opt/suggestarr/client/node_modules/swagger-ui-dist /opt/suggestarr/static/swagger-ui
-msg_ok "Built Frontend"
-
-msg_info "Setting up Python Environment"
-cd /opt/suggestarr
-$STD uv venv --python 3.12 /opt/suggestarr/.venv
-$STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_service/requirements.txt
-msg_ok "Set up Python Environment"
-
-msg_info "Configuring SuggestArr"
-mkdir -p /opt/suggestarr_data
-cat <<EOF >/opt/suggestarr.env
-SUGGESTARR_PORT=5000
-LOG_LEVEL=info
-CONFIG_DIR=/opt/suggestarr_data
-EOF
-chmod 600 /opt/suggestarr.env
-msg_ok "Configured SuggestArr"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/suggestarr.service
-[Unit]
-Description=SuggestArr
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/suggestarr
-EnvironmentFile=/opt/suggestarr.env
-ExecStart=/opt/suggestarr/.venv/bin/uvicorn api_service.app:asgi_app --host 0.0.0.0 --port 5000 --log-level info
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now suggestarr
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/wanderer-install.sh

@@ -15,77 +15,84 @@ update_os
 
 setup_go
 NODE_VERSION="22" setup_nodejs
-mkdir -p /opt/{wanderer,wanderer_data/pb_data,wanderer_data/meili_data,wanderer_data/plugins}
+if [[ "$(arch_resolve)" == "arm64" ]]; then
-MEILISEARCH_DB_PATH="/opt/wanderer_data/meili_data" setup_meilisearch
+  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "singlefile" "latest" "/usr/local/bin" "meilisearch-linux-aarch64"
-fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest"
+else
-mkdir -p /opt/wanderer/db/data
+  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
-[[ -e /opt/wanderer/db/data/plugins ]] || ln -sfn /opt/wanderer_data/plugins /opt/wanderer/db/data/plugins
+fi
+mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data,data/plugins}
+fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
+mkdir -p /opt/wanderer/source/db/data
+mkdir -p /opt/wanderer/source/search
+[[ -e /opt/wanderer/source/db/data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /opt/wanderer/source/db/data/plugins
 
 msg_info "Installing wanderer (patience)"
-cd /opt/wanderer/db
+cd /opt/wanderer/source/db
 $STD go mod tidy
 $STD go build
-cd /opt/wanderer/web
+cd /opt/wanderer/source/web
 $STD npm ci
 $STD npm run build
 msg_ok "Installed wanderer"
 
 msg_info "Installing wanderer plugins"
 for plugin in hammerhead komoot strava; do
-  fetch_and_deploy_gh_release "wanderer-plugin-${plugin}" "open-wanderer/wanderer" "prebuild" "latest" "/opt/wanderer_data/plugins" "wanderer-plugin-${plugin}.tar.gz" || msg_warn "Failed to install wanderer plugin: ${plugin}"
+  fetch_and_deploy_gh_release "wanderer-plugin-${plugin}" "open-wanderer/wanderer" "prebuild" "latest" "/opt/wanderer/data/plugins" "wanderer-plugin-${plugin}.tar.gz" || msg_warn "Failed to install wanderer plugin: ${plugin}"
 done
 msg_ok "Installed wanderer plugins"
 
 msg_info "Creating Service"
+MEILI_KEY=$(openssl rand -hex 32)
 POCKETBASE_KEY=$(openssl rand -hex 16)
 
 cat <<EOF >/opt/wanderer/.env
 ORIGIN=http://${LOCAL_IP}:3000
-MEILI_HTTP_ADDR=127.0.0.1:7700
+MEILI_HTTP_ADDR=${LOCAL_IP}:7700
-MEILI_URL=http://127.0.0.1:7700
+MEILI_URL=http://${LOCAL_IP}:7700
-MEILI_MASTER_KEY=${MEILISEARCH_MASTER_KEY}
+MEILI_MASTER_KEY=${MEILI_KEY}
 PB_URL=${LOCAL_IP}:8090
 PUBLIC_POCKETBASE_URL=http://${LOCAL_IP}:8090
 PUBLIC_VALHALLA_URL=https://valhalla1.openstreetmap.de
 POCKETBASE_ENCRYPTION_KEY=${POCKETBASE_KEY}
-PB_DB_LOCATION=/opt/wanderer_data/pb_data
+PB_DB_LOCATION=/opt/wanderer/data/pb_data
-MEILI_DB_PATH=/opt/wanderer_data/meili_data
+MEILI_DB_PATH=/opt/wanderer/data/meili_data
 EOF
 
-cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
+cat <<EOF >/opt/wanderer/start.sh
-[Unit]
+#!/usr/bin/env bash
-Description=wanderer PocketBase
-Wants=network.target
-After=network.target
-PartOf=wanderer-web.service
-StartLimitIntervalSec=10
-StartLimitBurst=5
 
-[Service]
+trap "kill 0" EXIT
-Type=simple
-WorkingDirectory=/opt/wanderer/db
-EnvironmentFile=/opt/wanderer/.env
-ExecStart=/opt/wanderer/db/pocketbase serve --http=\${PB_URL} --dir=\${PB_DB_LOCATION}
-Restart=always
-RestartSec=1
 
-[Install]
+cd /opt/wanderer/source/search && meilisearch --upgrade-db --master-key \$MEILI_MASTER_KEY &
-WantedBy=multi-user.target
+sleep 1
+cd /opt/wanderer/source/db && ./pocketbase serve --http=\$PB_URL --dir=\$PB_DB_LOCATION &
+cd /opt/wanderer/source/web && node build &
+
+wait -n
 EOF
+chmod +x /opt/wanderer/start.sh
+
+cat <<'EOF' >/usr/local/bin/wanderer-pb
+#!/usr/bin/env bash
+set -a
+source /opt/wanderer/.env
+set +a
+cd /opt/wanderer/source/db
+exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
+EOF
+chmod +x /usr/local/bin/wanderer-pb
 
 cat <<EOF >/etc/systemd/system/wanderer-web.service
 [Unit]
 Description=wanderer
-Wants=network.target meilisearch.service wanderer-pocketbase.service
+After=network.target
-After=network.target meilisearch.service wanderer-pocketbase.service
 StartLimitIntervalSec=10
 StartLimitBurst=5
 
 [Service]
 Type=simple
-WorkingDirectory=/opt/wanderer/web
 EnvironmentFile=/opt/wanderer/.env
-ExecStart=/usr/bin/node build
+ExecStart=/usr/bin/bash /opt/wanderer/start.sh
 Restart=always
 RestartSec=1
 
@@ -93,7 +100,7 @@ RestartSec=1
 WantedBy=multi-user.target
 EOF
 sleep 1
-systemctl enable -q --now wanderer-pocketbase wanderer-web
+systemctl enable -q --now wanderer-web
 msg_ok "Created Service"
 
 motd_ssh

tools/addon/add-tailscale-lxc.sh

@@ -57,7 +57,6 @@ while read -r line; do
   CTID_MENU+=("$TAG" "$ITEM" "OFF")
 done < <(pct list | awk 'NR>1')
 
-stop_spinner
 CTID=""
 while [[ -z "${CTID}" ]]; do
   CTID=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Containers on $NODE" --radiolist \

tools/addon/arcane.sh

@@ -59,8 +59,6 @@ function uninstall() {
 # UPDATE
 # ==============================================================================
 function update() {
-  chown -R 65532:65532 /etc/arcane/projects /etc/arcane/builds 2>/dev/null || true
-
   msg_info "Pulling latest ${APP} image"
   cd "$INSTALL_PATH"
   $STD docker compose pull
@@ -85,25 +83,15 @@ function install() {
   msg_ok "Created ${INSTALL_PATH}"
 
   # Generate secrets and config values
-  local ENCRYPTION_KEY JWT_SECRET PROJ_DIR BUILDS_DIR
+  local ENCRYPTION_KEY JWT_SECRET PROJ_DIR
   ENCRYPTION_KEY=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c32)
   JWT_SECRET=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c32)
   PROJ_DIR="/etc/arcane/projects"
-  BUILDS_DIR="/etc/arcane/builds"
 
-  # Arcane drops root and runs as UID/GID 65532 by default (Dockerfile default,
-  # see backend/pkg/libarcane/startup/runtime_identity.go), so bind-mounted
-  # host directories must be owned by that UID or the container can't write to them.
   msg_info "Creating stacks directory"
   mkdir -p "$PROJ_DIR"
-  chown -R 65532:65532 "$PROJ_DIR"
   msg_ok "Created ${PROJ_DIR}"
 
-  msg_info "Creating builds directory"
-  mkdir -p "$BUILDS_DIR"
-  chown -R 65532:65532 "$BUILDS_DIR"
-  msg_ok "Created ${BUILDS_DIR}"
-
   msg_info "Downloading Docker Compose file"
   curl -fsSL "https://raw.githubusercontent.com/getarcaneapp/arcane/refs/heads/main/docker/examples/compose.basic.yaml" -o "$COMPOSE_FILE"
   msg_ok "Downloaded Docker Compose file"
@@ -115,7 +103,6 @@ function install() {
 
   msg_info "Configuring compose and env files"
   sed -i '/^[[:space:]]*#/!s|/host/path/to/projects|'"$PROJ_DIR"'|g' "$COMPOSE_FILE"
-  sed -i '/^[[:space:]]*#/!s|/host/path/to/builds|'"$BUILDS_DIR"'|g' "$COMPOSE_FILE"
   sed -i '/^[[:space:]]*#/!s|ENCRYPTION_KEY=.*|ENCRYPTION_KEY='"$ENCRYPTION_KEY"'|g' "$COMPOSE_FILE"
   sed -i '/^[[:space:]]*#/!s|JWT_SECRET=.*|JWT_SECRET='"$JWT_SECRET"'|g' "$COMPOSE_FILE"
   sed -i '/^[[:space:]]*#/!s|APP_URL=.*|APP_URL=http://localhost:'"$DEFAULT_PORT"'|g' "$ENV_FILE"