Add OpenCloud installation to script

Fetch and deploy OpenCloud version 5.0.1.

CHANGELOG.md

@@ -405,24 +405,12 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
   - Wishlist ([#11527](https://github.com/community-scripts/ProxmoxVE/pull/11527))
 - WriteFreely ([#11524](https://github.com/community-scripts/ProxmoxVE/pull/11524))
 
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: pin version to 2.5.3 [@vhsdream](https://github.com/vhsdream) ([#11515](https://github.com/community-scripts/ProxmoxVE/pull/11515))
-
 ### 💾 Core
 
   - #### ✨ New Features
 
     - core: create vm-core.func from dev [@MickLesk](https://github.com/MickLesk) ([#11528](https://github.com/community-scripts/ProxmoxVE/pull/11528))
 
-### 🧰 Tools
-
-  - #### ✨ New Features
-
-    - [ADDON] Immich Public Proxy addon [@vhsdream](https://github.com/vhsdream) ([#11518](https://github.com/community-scripts/ProxmoxVE/pull/11518))
-
 ### 🌐 Website
 
   - #### 🐞 Bug Fixes

ct/headers/opencloud

@@ -0,0 +1,6 @@
+   ____                   ________                __
+  / __ \____  ___  ____  / ____/ /___  __  ______/ /
+ / / / / __ \/ _ \/ __ \/ /   / / __ \/ / / / __  / 
+/ /_/ / /_/ /  __/ / / / /___/ / /_/ / /_/ / /_/ /  
+\____/ .___/\___/_/ /_/\____/_/\____/\__,_/\__,_/   
+    /_/                                             

ct/immich.sh

@@ -36,6 +36,10 @@ function update_script() {
     exit
   fi
 
+  setup_uv
+  PNPM_VERSION="$(curl -fsSL "https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/package.json" | jq -r '.packageManager | split("@")[1]')"
+  NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
+
   if [[ ! -f /etc/apt/preferences.d/preferences ]]; then
     msg_info "Adding Debian Testing repo"
     sed -i 's/ trixie-updates/ trixie-updates testing/g' /etc/apt/sources.list.d/debian.sources
@@ -105,7 +109,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="2.5.3"
+  RELEASE="2.5.2"
   if check_for_gh_release "immich" "immich-app/immich" "${RELEASE}"; then
     if [[ $(cat ~/.immich) > "2.5.1" ]]; then
       msg_info "Enabling Maintenance Mode"
@@ -160,10 +164,7 @@ EOF
       rm -rf "${APP_DIR:?}"/*
     )
 
-    setup_uv
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v${RELEASE}" "$SRC_DIR"
-    PNPM_VERSION="$(jq -r '.packageManager | split("@")[1]' ${SRC_DIR}/package.json)"
-    NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
 
     msg_info "Updating Immich web and microservices"
     cd "$SRC_DIR"/server

ct/opencloud.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://opencloud.eu
+
+APP="OpenCloud"
+var_tags="${var_tags:-files;cloud}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /etc/opencloud ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  RELEASE="v5.0.1"
+  if check_for_gh_release "opencloud" "opencloud-eu/opencloud" "${RELEASE}"; then
+    msg_info "Stopping services"
+    systemctl stop opencloud opencloud-wopi
+    msg_ok "Stopped services"
+
+    msg_info "Updating packages"
+    $STD apt-get update
+    $STD apt-get dist-upgrade -y
+    msg_ok "Updated packages"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "opencloud" "opencloud-eu/opencloud" "singlefile" "${RELEASE}" "/usr/bin" "opencloud-*-linux-amd64"
+
+    msg_info "Starting services"
+    systemctl start opencloud opencloud-wopi
+    msg_ok "Started services"
+    msg_ok "Updated successfully"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://<your-OpenCloud-domain>${CL}"

ct/sqlserver2022.sh

@@ -27,8 +27,7 @@ function update_script() {
         msg_error "No ${APP} Installation Found!"
         exit
     fi
-    msg_info "Updating SQL Server 2022"
-    rm -f /etc/profile.d/debuginfod.sh /etc/profile.d/debuginfod.csh
+    msg_info "Updating ${APP} LXC"
     $STD apt update
     $STD apt -y upgrade
     msg_ok "Updated successfully!"

ct/sqlserver2025.sh

@@ -1,45 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.microsoft.com/en-us/sql-server/sql-server-2025
-
-APP="SQL Server 2025"
-var_tags="${var_tags:-sql;database}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-ubuntu}"
-var_version="${var_version:-24.04}"
-var_unprivileged="${var_unprivileged:-0}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /opt/mssql ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    msg_info "Updating SQL Server 2025"
-    rm -f /etc/profile.d/debuginfod.sh /etc/profile.d/debuginfod.csh
-    $STD apt update
-    $STD apt -y upgrade
-    msg_ok "Updated successfully!"
-    exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following IP:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}${IP}:1433${CL}"

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-02-04T18:17:33Z",
+  "generated": "2026-02-04T12:11:53Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -256,9 +256,9 @@
     {
       "slug": "docmost",
       "repo": "docmost/docmost",
-      "version": "v0.25.1",
+      "version": "v0.25.0",
       "pinned": false,
-      "date": "2026-02-04T15:19:51Z"
+      "date": "2026-02-04T00:33:45Z"
     },
     {
       "slug": "domain-locker",
@@ -515,9 +515,9 @@
     {
       "slug": "huntarr",
       "repo": "plexguide/Huntarr.io",
-      "version": "9.1.12",
+      "version": "9.1.11",
       "pinned": false,
-      "date": "2026-02-04T14:28:36Z"
+      "date": "2026-02-04T11:30:25Z"
     },
     {
       "slug": "inspircd",
@@ -1096,9 +1096,9 @@
     {
       "slug": "pulse",
       "repo": "rcourtman/Pulse",
-      "version": "v5.1.0",
+      "version": "v5.0.17",
       "pinned": false,
-      "date": "2026-02-04T17:43:59Z"
+      "date": "2026-01-20T19:07:30Z"
     },
     {
       "slug": "pve-scripts-local",
@@ -1271,9 +1271,9 @@
     {
       "slug": "speedtest-tracker",
       "repo": "alexjustesen/speedtest-tracker",
-      "version": "v1.13.7",
+      "version": "v1.13.6",
       "pinned": false,
-      "date": "2026-02-04T16:47:42Z"
+      "date": "2026-02-03T21:20:51Z"
     },
     {
       "slug": "spoolman",
@@ -1369,9 +1369,9 @@
     {
       "slug": "tianji",
       "repo": "msgbyte/tianji",
-      "version": "v1.31.10",
+      "version": "v1.31.9",
       "pinned": false,
-      "date": "2026-02-04T17:21:04Z"
+      "date": "2026-01-31T18:22:40Z"
     },
     {
       "slug": "traccar",
@@ -1411,9 +1411,9 @@
     {
       "slug": "trip",
       "repo": "itskovacs/TRIP",
-      "version": "1.38.1",
+      "version": "1.38.0",
       "pinned": false,
-      "date": "2026-02-04T18:10:15Z"
+      "date": "2026-01-31T15:56:30Z"
     },
     {
       "slug": "tududi",

frontend/public/json/immich-public-proxy.json

@@ -1,44 +0,0 @@
-{
-  "name": "Immich Public Proxy",
-  "slug": "immich-public-proxy",
-  "categories": [
-    21
-  ],
-  "date_created": "2026-02-04",
-  "type": "addon",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 3000,
-  "documentation": "https://github.com/alangrainger/immich-public-proxy/docs",
-  "website": "https://github.com/alangrainger/immich-public-proxy",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/immich-public-proxy.webp",
-  "config_path": "/opt/immich-proxy/app/.env",
-  "description": "Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "tools/addon/immich-public-proxy.sh",
-      "resources": {
-        "cpu": null,
-        "ram": null,
-        "hdd": null,
-        "os": null,
-        "version": null
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "Requires Node.js 24+",
-      "type": "info"
-    },
-    {
-      "text": "Update with: update_immich-public-proxy",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/opencloud.json

@@ -0,0 +1,64 @@
+{
+    "name": "OpenCloud",
+    "slug": "opencloud",
+    "categories": [
+        11
+    ],
+    "date_created": "2025-12-12",
+    "type": "ct",
+    "updateable": true,
+    "privileged": false,
+    "interface_port": 443,
+    "documentation": "https://docs.opencloud.eu",
+    "config_path": "/etc/opencloud/opencloud.env, /etc/opencloud/opencloud.yaml, /etc/opencloud/csp.yaml",
+    "website": "https://opencloud.eu",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/opencloud.webp",
+    "description": "OpenCloud is the file sharing and collaboration solution of the Heinlein Group. Through intelligent file management and a strong open source community, files become valuable resources, effectively structured and usable in the long term. With flexible data rooms and intelligent access rights, teams can access and work together on data anytime, anywhere without barriers, but with a lot of productivity.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/opencloud.sh",
+            "resources": {
+                "cpu": 2,
+                "ram": 2048,
+                "hdd": 20,
+                "os": "Debian",
+                "version": "13"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": "admin",
+        "password": "randomly generated during the installation process"
+    },
+    "notes": [
+        {
+            "text": "Valid TLS certificates and fully-qualified domain names behind a reverse proxy (Caddy) for 3 services - OpenCloud, Collabora, and WOPI are **REQUIRED**",
+            "type": "warning"
+        },
+        {
+            "text": "Forgot your admin password? Check `admin_password` in the 'idm' section in `/etc/opencloud/opencloud.yaml`",
+            "type": "info"
+        },
+        {
+            "text": "**Optional External Apps**: extract zip archives from App Store to `/etc/opencloud/assets/apps`",
+            "type": "info"
+        },
+        {
+            "text": "**Optional CalDAV and CardDAV**: requires separate Radicale install. Edit and rename `/opt/opencloud/proxy.yaml.bak` and change your Radicale config to use `http_x_remote_user` as the auth method",
+            "type": "info"
+        },
+        {
+            "text": "**Optional OpenID**: Authelia and PocketID supported. Uncomment relevant lines in `/opt/opencloud/opencloud.env` and consult OpenCloud GitHub discussions for configuration tips",
+            "type": "info"
+        },
+        {
+            "text": "**Optional Full-text Search with Apache Tika**: requires your own Tika LXC. See `https://community-scripts.github.io/ProxmoxVE/scripts?id=apache-tika`",
+            "type": "info"
+        },
+        {
+            "text": "**Relevant services**: `opencloud.service`, `opencloud-wopi.service`, `coolwsd.service`",
+            "type": "info"
+        }
+    ]
+}

frontend/public/json/sqlserver2025.json

@@ -1,52 +0,0 @@
-{
-    "name": "SQL Server 2025",
-    "slug": "sqlserver2025",
-    "categories": [
-        8
-    ],
-    "date_created": "2026-02-04",
-    "type": "ct",
-    "updateable": true,
-    "privileged": true,
-    "interface_port": 1433,
-    "documentation": "https://learn.microsoft.com/en-us/sql/sql-server/?view=sql-server-ver17",
-    "website": "https://www.microsoft.com/en-us/sql-server/sql-server-2025",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/microsoft-sql-server.webp",
-    "config_path": "",
-    "description": "Script to automatically set up a SQL Server 2025 installation with Ubuntu 24.04 support.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/sqlserver2025.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 2048,
-                "hdd": 10,
-                "os": "Ubuntu",
-                "version": "24.04"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "If you choose not to run the installation setup, execute: `/opt/mssql/bin/mssql-conf setup` in LXC shell.",
-            "type": "info"
-        },
-        {
-            "text": "You can setup the admin account 'SA' during installation",
-            "type": "info"
-        },
-        {
-            "text": "Make sure you disable the SA account if you intend to use this in production!",
-            "type": "warning"
-        },
-        {
-            "text": "Ubuntu 24.04 support requires SQL Server 2025 CU1 or later",
-            "type": "info"
-        }
-    ]
-}

install/immich-install.sh

@@ -13,44 +13,44 @@ setting_up_container
 network_check
 update_os
 
-if [ -d /dev/dri ]; then
-  echo ""
-  echo ""
-  echo -e "🤖 ${BL}Immich Machine Learning Options${CL}"
-  echo "─────────────────────────────────────────"
-  echo "Please choose your machine-learning type:"
-  echo ""
-  echo " 1) CPU only (default)"
-  echo " 2) Intel OpenVINO (requires GPU passthrough)"
-  echo ""
+echo ""
+echo ""
+echo -e "🤖 ${BL}Immich Machine Learning Options${CL}"
+echo "─────────────────────────────────────────"
+echo "Please choose your machine-learning type:"
+echo ""
+echo " 1) CPU only (default)"
+echo " 2) Intel OpenVINO (requires GPU passthrough)"
+echo ""
 
-  read -r -p "${TAB3}Select machine-learning type [1]: " ML_TYPE
-  ML_TYPE="${ML_TYPE:-1}"
-  if [[ "$ML_TYPE" == "2" ]]; then
-    msg_info "Installing OpenVINO dependencies"
-    touch ~/.openvino
-    $STD apt install -y --no-install-recommends patchelf
-    tmp_dir=$(mktemp -d)
-    $STD pushd "$tmp_dir"
-    curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
-    readarray -t INTEL_URLS < <(
-      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
-      sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
-    )
-    for url in "${INTEL_URLS[@]}"; do
-      curl -fsSLO "$url"
-    done
-    $STD apt install -y ./libigdgmm12*.deb
-    rm ./libigdgmm12*.deb
-    $STD apt install -y ./*.deb
-    $STD apt-mark hold libigdgmm12
-    $STD popd
-    rm -rf "$tmp_dir"
-    dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
-    msg_ok "Installed OpenVINO dependencies"
-  fi
+read -r -p "${TAB3}Select machine-learning type [1]: " ML_TYPE
+ML_TYPE="${ML_TYPE:-1}"
+if [[ "$ML_TYPE" == "2" ]]; then
+  msg_info "Installing OpenVINO dependencies"
+  touch ~/.openvino
+  $STD apt install -y --no-install-recommends patchelf
+  tmp_dir=$(mktemp -d)
+  $STD pushd "$tmp_dir"
+  curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
+  readarray -t INTEL_URLS < <(
+    sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
+    sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
+  )
+  for url in "${INTEL_URLS[@]}"; do
+    curl -fsSLO "$url"
+  done
+  $STD apt install -y ./libigdgmm12*.deb
+  rm ./libigdgmm12*.deb
+  $STD apt install -y ./*.deb
+  $STD apt-mark hold libigdgmm12
+  $STD popd
+  rm -rf "$tmp_dir"
+  dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
+  msg_ok "Installed OpenVINO dependencies"
 fi
 
+setup_uv
+
 msg_info "Installing dependencies"
 $STD apt install --no-install-recommends -y \
   git \
@@ -144,7 +144,8 @@ msg_info "Installing packages from Debian Testing repo"
 $STD apt install -t testing --no-install-recommends -yqq libmimalloc3 libde265-dev
 msg_ok "Installed packages from Debian Testing repo"
 
-setup_uv
+PNPM_VERSION="$(curl -fsSL "https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/package.json" | jq -r '.packageManager | split("@")[1]')"
+NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
 PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 
 VCHORD_RELEASE="0.5.3"
@@ -289,9 +290,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.5.3" "$SRC_DIR"
-PNPM_VERSION="$(jq -r '.packageManager | split("@")[1]' ${SRC_DIR}/package.json)"
-NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
+fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.5.2" "$SRC_DIR"
 
 msg_info "Installing Immich (patience)"
 

install/opencloud-install.sh

@@ -0,0 +1,203 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://opencloud.eu
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+read -r -p "${TAB3}Enter the hostname of your OpenCloud server (eg cloud.domain.tld): " oc_host
+if [[ "$oc_host" ]]; then
+  OC_HOST="$oc_host"
+fi
+read -r -p "${TAB3}Enter the hostname of your Collabora server (eg collabora.domain.tld): " collabora_host
+if [[ "$collabora_host" ]]; then
+  COLLABORA_HOST="$collabora_host"
+fi
+read -r -p "${TAB3}Enter the hostname of your WOPI server (eg wopiserver.domain.tld): " wopi_host
+if [[ "$wopi_host" ]]; then
+  WOPI_HOST="$wopi_host"
+fi
+
+
+msg_info "Installing Collabora Online"
+curl -fsSL https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg -o /etc/apt/keyrings/collaboraonline-release-keyring.gpg
+cat <<EOF >/etc/apt/sources.list.d/colloboraonline.sources
+Types: deb
+URIs: https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-deb
+Suites: ./
+Signed-By: /etc/apt/keyrings/collaboraonline-release-keyring.gpg
+EOF
+$STD apt-get update
+$STD apt-get install -y coolwsd code-brand
+systemctl stop coolwsd
+mkdir -p /etc/systemd/system/coolwsd.service.d
+cat <<EOF >/etc/systemd/system/coolwsd.service.d/override.conf
+[Unit]
+Before=opencloud-wopi.service
+EOF
+systemctl daemon-reload
+COOLPASS="$(openssl rand -base64 36)"
+$STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPASS"
+echo "$COOLPASS" >~/.coolpass
+msg_ok "Installed Collabora Online"
+
+
+fetch_and_deploy_gh_release "opencloud" "opencloud-eu/opencloud" "singlefile" "v5.0.1" "/usr/bin" "opencloud-*-linux-amd64"
+
+msg_info "Configuring OpenCloud"
+DATA_DIR="/var/lib/opencloud/"
+CONFIG_DIR="/etc/opencloud"
+ENV_FILE="${CONFIG_DIR}/opencloud.env"
+mkdir -p "$DATA_DIR" "$CONFIG_DIR"/assets/apps
+
+curl -fsSL https://raw.githubusercontent.com/opencloud-eu/opencloud-compose/refs/heads/main/config/opencloud/csp.yaml -o "$CONFIG_DIR"/csp.yaml
+curl -fsSL https://raw.githubusercontent.com/opencloud-eu/opencloud-compose/refs/heads/main/config/opencloud/proxy.yaml -o "$CONFIG_DIR"/proxy.yaml.bak
+
+cat <<EOF >"$ENV_FILE"
+OC_URL=https://${OC_HOST}
+OC_INSECURE=false
+IDM_CREATE_DEMO_USERS=false
+OC_LOG_LEVEL=warning
+OC_CONFIG_DIR=${CONFIG_DIR}
+OC_BASE_DATA_PATH=${DATA_DIR}
+STORAGE_SYSTEM_OC_ROOT=${DATA_DIR}/storage/metadata
+
+## Web
+WEB_ASSET_CORE_PATH=${CONFIG_DIR}/web/assets
+WEB_ASSET_APPS_PATH=${CONFIG_DIR}/web/assets/apps
+WEB_UI_CONFIG_FILE=${CONFIG_DIR}/web/config.json
+# WEB_ASSET_THEMES_PATH=${CONFIG_DIR}/web/assets/themes
+# WEB_UI_THEME_PATH=
+
+## Frontend
+FRONTEND_DISABLE_RADICALE=true
+FRONTEND_GROUPWARE_ENABLED=false
+GRAPH_INCLUDE_OCM_SHAREES=true
+
+## Proxy
+PROXY_TLS=false
+PROXY_CSP_CONFIG_FILE_LOCATION=${CONFIG_DIR}/csp.yaml
+
+## Collaboration - requires VALID TLS
+COLLABORA_DOMAIN=${COLLABORA_HOST}
+COLLABORATION_APP_NAME="CollaboraOnline"
+COLLABORATION_APP_PRODUCT="Collabora"
+COLLABORATION_APP_ADDR=https://${COLLABORA_HOST}
+COLLABORATION_APP_INSECURE=false
+COLLABORATION_HTTP_ADDR=0.0.0.0:9300
+COLLABORATION_WOPI_SRC=https://${WOPI_HOST}
+COLLABORATION_JWT_SECRET=
+
+## Notifications - Email settings
+# NOTIFICATIONS_SMTP_HOST=
+# NOTIFICATIONS_SMTP_PORT=
+# NOTIFICATIONS_SMTP_SENDER=
+# NOTIFICATIONS_SMTP_USERNAME=
+# NOTIFICATIONS_SMTP_PASSWORD=
+# NOTIFICATIONS_SMTP_AUTHENTICATION=login
+## Encryption method. Possible values are 'starttls', 'ssltls' and 'none'
+# NOTIFICATIONS_SMTP_ENCRYPTION=starttls
+## Allow insecure connections. Defaults to false.
+# NOTIFICATIONS_SMTP_INSECURE=false
+
+## Start additional services at runtime
+## Examples: notifications, antivirus etc.
+## Do not uncomment unless configured above.
+# OC_ADD_RUN_SERVICES="notifications"
+
+## OpenID - via web browser
+## uncomment for OpenID in general
+# OC_EXCLUDE_RUN_SERVICES=idp
+# OC_OIDC_ISSUER=<your auth URL>
+# IDP_DOMAIN=<your auth URL>
+# PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD=none
+# PROXY_OIDC_REWRITE_WELLKNOWN=true
+# PROXY_USER_OIDC_CLAIM=preferred_username
+# PROXY_USER_CS3_CLAIM=username
+## automatically create accounts
+# PROXY_AUTOPROVISION_ACCOUNTS=true
+# WEB_OIDC_SCOPE=openid profile email groups
+# GRAPH_ASSIGN_DEFAULT_USER_ROLE=false
+#
+## uncomment below if using PocketID
+# WEB_OIDC_CLIENT_ID=<generated in PocketID>
+# WEB_OIDC_METADATA_URL=<your auth URL>/.well-known/openid-configuration
+
+## Full Text Search - Apache Tika
+## Requires a separate install of Tika - see https://community-scripts.github.io/ProxmoxVE/scripts?id=apache-tika
+# SEARCH_EXTRACTOR_TYPE=tika
+# FRONTEND_FULL_TEXT_SEARCH_ENABLED=true
+# SEARCH_EXTRACTOR_TIKA_TIKA_URL=<your-tika-url>
+
+## External storage test - Only NFS v4.2+ is supported
+## User files
+# STORAGE_USERS_POSIX_ROOT=<path-to-your-bind_mount>
+EOF
+
+cat <<EOF >/etc/systemd/system/opencloud.service
+[Unit]
+Description=OpenCloud server
+After=network-online.target
+
+[Service]
+Type=simple
+User=opencloud
+Group=opencloud
+EnvironmentFile=${ENV_FILE}
+ExecStart=/usr/bin/opencloud server
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/opencloud-wopi.service
+[Unit]
+Description=OpenCloud WOPI Server
+Wants=coolwsd.service
+After=opencloud.service coolwsd.service
+
+[Service]
+Type=simple
+User=opencloud
+Group=opencloud
+EnvironmentFile=${ENV_FILE}
+ExecStartPre=/bin/sleep 10
+ExecStart=/usr/bin/opencloud collaboration server
+Restart=always
+KillSignal=SIGKILL
+KillMode=mixed
+TimeoutStopSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+$STD sudo -u cool coolconfig set ssl.enable false
+$STD sudo -u cool coolconfig set ssl.termination true
+$STD sudo -u cool coolconfig set ssl.ssl_verification true
+sed -i "s|CSP2\"/>|CSP2\">frame-ancestors https://${OC_HOST}</content_security_policy>|" /etc/coolwsd/coolwsd.xml
+useradd -r -M -s /usr/sbin/nologin opencloud
+chown -R opencloud:opencloud "$CONFIG_DIR" "$DATA_DIR"
+sudo -u opencloud opencloud init --config-path "$CONFIG_DIR" --insecure no
+OPENCLOUD_SECRET="$(sed -n '/jwt/p' "$CONFIG_DIR"/opencloud.yaml | awk '{print $2}')"
+sed -i "s/JWT_SECRET=/&${OPENCLOUD_SECRET//&/\\&}/" "$ENV_FILE"
+msg_ok "Configured OpenCloud"
+
+msg_info "Starting services"
+systemctl enable -q --now coolwsd opencloud
+sleep 5
+systemctl enable -q --now opencloud-wopi
+msg_ok "Started services"
+
+motd_ssh
+customize
+cleanup_lxc

install/sqlserver2022-install.sh

@@ -14,32 +14,24 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y coreutils
+$STD apt install -y \
+  coreutils
 msg_ok "Installed Dependencies"
 
-msg_info "Setting up SQL Server 2022 Repository"
-setup_deb822_repo \
-  "mssql-server-2022" \
-  "https://packages.microsoft.com/keys/microsoft.asc" \
-  "https://packages.microsoft.com/ubuntu/22.04/mssql-server-2022" \
-  "./" \
-  ""
-msg_ok "Repository configured"
-
-msg_info "Installing SQL Server 2022"
-$STD apt install -y mssql-server
-msg_ok "Installed SQL Server 2022"
+msg_info "Setup SQL Server 2022"
+curl -fsSL https://packages.microsoft.com/keys/microsoft.asc | sudo tee /etc/apt/trusted.gpg.d/microsoft.asc >/dev/null
+curl -fsSL https://packages.microsoft.com/config/ubuntu/22.04/mssql-server-2022.list | tee /etc/apt/sources.list.d/mssql-server-2022.list >/dev/null
+$STD apt-get update -y
+$STD apt-get install -y mssql-server
+msg_ok "Setup Server 2022"
 
 msg_info "Installing SQL Server Tools"
 export DEBIAN_FRONTEND=noninteractive
 export ACCEPT_EULA=Y
-setup_deb822_repo \
-  "mssql-release" \
-  "https://packages.microsoft.com/keys/microsoft.asc" \
-  "https://packages.microsoft.com/ubuntu/22.04/prod" \
-  "jammy" \
-  "main"
-$STD apt-get install -y \
+curl -fsSL https://packages.microsoft.com/keys/microsoft.asc | tee /etc/apt/trusted.gpg.d/microsoft.asc >/dev/null
+curl -fsSL https://packages.microsoft.com/config/ubuntu/22.04/prod.list | tee /etc/apt/sources.list.d/mssql-release.list >/dev/null
+$STD apt-get update
+$STD apt-get install -y -qq \
   mssql-tools18 \
   unixodbc-dev
 echo 'export PATH="$PATH:/opt/mssql-tools18/bin"' >>~/.bash_profile
@@ -57,11 +49,6 @@ msg_info "Start Service"
 systemctl enable -q --now mssql-server
 msg_ok "Service started"
 
-msg_info "Cleaning up"
-rm -f /etc/profile.d/debuginfod.sh
-rm -f /etc/profile.d/debuginfod.csh
-msg_ok "Cleaned up"
-
 motd_ssh
 customize
 cleanup_lxc

install/sqlserver2025-install.sh

@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.microsoft.com/en-us/sql-server/sql-server-2025
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y coreutils
-msg_ok "Installed Dependencies"
-
-msg_info "Setting up SQL Server 2025 Repository"
-setup_deb822_repo \
-  "mssql-server-2025" \
-  "https://packages.microsoft.com/keys/microsoft.asc" \
-  "https://packages.microsoft.com/ubuntu/24.04/mssql-server-2025" \
-  "./" \
-  ""
-msg_ok "Repository configured"
-
-msg_info "Installing SQL Server 2025"
-$STD apt install -y mssql-server
-msg_ok "Installed SQL Server 2025"
-
-msg_info "Installing SQL Server Tools"
-export DEBIAN_FRONTEND=noninteractive
-export ACCEPT_EULA=Y
-setup_deb822_repo \
-  "mssql-release" \
-  "https://packages.microsoft.com/keys/microsoft.asc" \
-  "https://packages.microsoft.com/ubuntu/24.04/prod" \
-  "noble" \
-  "main"
-$STD apt-get install -y \
-  mssql-tools18 \
-  unixodbc-dev
-echo 'export PATH="$PATH:/opt/mssql-tools18/bin"' >>~/.bash_profile
-source ~/.bash_profile
-msg_ok "Installed SQL Server Tools"
-
-read -r -p "${TAB3}Do you want to run the SQL Server setup now? (Later is also possible) <y/N>" prompt
-if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
-  /opt/mssql/bin/mssql-conf setup
-else
-  msg_ok "Skipping SQL Server setup. You can run it later with '/opt/mssql/bin/mssql-conf setup'."
-fi
-
-msg_info "Starting SQL Server Service"
-systemctl enable -q --now mssql-server
-msg_ok "Service started"
-
-msg_info "Cleaning up"
-rm -f /etc/profile.d/debuginfod.sh /etc/profile.d/debuginfod.csh
-msg_ok "Cleaned up"
-
-motd_ssh
-customize
-cleanup_lxc

tools/addon/immich-public-proxy.sh

@@ -1,264 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/alangrainger/immich-public-proxy
-
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
-
-# Enable error handling
-set -Eeuo pipefail
-trap 'error_handler' ERR
-
-# ==============================================================================
-# CONFIGURATION
-# ==============================================================================
-APP="Immich Public Proxy"
-APP_TYPE="addon"
-INSTALL_PATH="/opt/immich-proxy"
-CONFIG_PATH="/opt/immich-proxy/app"
-DEFAULT_PORT=3000
-
-# Initialize all core functions (colors, formatting, icons, STD mode)
-load_functions
-
-# ==============================================================================
-# HEADER
-# ==============================================================================
-function header_info {
-  clear
-  cat <<"EOF"
-    ____                    _      __          ____
-   /  _/___ ___  ____ ___  (_)____/ /_        / __ \_________  _  ____  __
-   / // __ `__ \/ __ `__ \/ / ___/ __ \______/ /_/ / ___/ __ \| |/_/ / / /
- _/ // / / / / / / / / / / / /__/ / / /_____/ ____/ /  / /_/ />  </ /_/ /
-/___/_/ /_/ /_/_/ /_/ /_/_/\___/_/ /_/     /_/   /_/   \____/_/|_|\__, /
-                                                                 /____/
-EOF
-}
-
-# ==============================================================================
-# OS DETECTION
-# ==============================================================================
-if [[ -f "/etc/alpine-release" ]]; then
-  msg_error "Alpine is not supported for ${APP}. Use Debian."
-  exit 1
-elif [[ -f "/etc/debian_version" ]]; then
-  OS="Debian"
-  SERVICE_PATH="/etc/systemd/system/immich-proxy.service"
-else
-  echo -e "${CROSS} Unsupported OS detected. Exiting."
-  exit 1
-fi
-
-# ==============================================================================
-# UNINSTALL
-# ==============================================================================
-function uninstall() {
-  msg_info "Uninstalling ${APP}"
-  systemctl disable --now immich-proxy.service &>/dev/null || true
-  rm -f "$SERVICE_PATH"
-  rm -rf "$INSTALL_PATH"
-  rm -f "/usr/local/bin/update_immich-public-proxy"
-  rm -f "$HOME/.immichpublicproxy"
-  msg_ok "${APP} has been uninstalled"
-}
-
-# ==============================================================================
-# UPDATE
-# ==============================================================================
-function update() {
-  if check_for_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy"; then
-    msg_info "Stopping service"
-    systemctl stop immich-proxy.service &>/dev/null || true
-    msg_ok "Stopped service"
-
-    msg_info "Backing up configuration"
-    cp "$CONFIG_PATH"/.env /tmp/ipp.env.bak 2>/dev/null || true
-    cp "$CONFIG_PATH"/config.json /tmp/ipp.config.json.bak 2>/dev/null || true
-    msg_ok "Backed up configuration"
-
-    NODE_VERSION="24" setup_nodejs
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy" "tarball" "latest" "$INSTALL_PATH"
-
-    msg_info "Restoring configuration"
-    cp /tmp/ipp.env.bak "$CONFIG_PATH"/.env 2>/dev/null || true
-    cp /tmp/ipp.config.json.bak "$CONFIG_PATH"/config.json 2>/dev/null || true
-    rm -f /tmp/ipp.*.bak
-    msg_ok "Restored configuration"
-
-    msg_info "Installing dependencies"
-    cd "$CONFIG_PATH"
-    $STD npm install
-    msg_ok "Installed dependencies"
-
-    msg_info "Building ${APP}"
-    $STD npm run build
-    msg_ok "Built ${APP}"
-
-    msg_info "Starting service"
-    systemctl start immich-proxy
-    msg_ok "Started service"
-    msg_ok "Updated successfully"
-    exit
-  fi
-}
-
-# ==============================================================================
-# INSTALL
-# ==============================================================================
-function install() {
-  NODE_VERSION="24" setup_nodejs
-
-  # Force fresh download by removing version cache
-  rm -f "$HOME/.immichpublicproxy"
-  fetch_and_deploy_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy" "tarball" "latest" "$INSTALL_PATH"
-
-  msg_info "Installing dependencies"
-  cd "$CONFIG_PATH"
-  $STD npm install
-  msg_ok "Installed dependencies"
-
-  msg_info "Building ${APP}"
-  $STD npm run build
-  msg_ok "Built ${APP}"
-
-  MAX_ATTEMPTS=3
-  attempt=0
-  while true; do
-    attempt=$((attempt + 1))
-    read -rp "${TAB3}Enter your LOCAL Immich IP or domain (ex. 192.168.1.100 or immich.local.lan): " DOMAIN
-    if [[ -z "$DOMAIN" ]]; then
-      if ((attempt >= MAX_ATTEMPTS)); then
-        DOMAIN="${LOCAL_IP:-localhost}"
-        msg_warn "Using fallback: $DOMAIN"
-        break
-      fi
-      msg_warn "Domain cannot be empty! (Attempt $attempt/$MAX_ATTEMPTS)"
-    elif [[ "$DOMAIN" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]]; then
-      valid_ip=true
-      IFS='.' read -ra octets <<<"$DOMAIN"
-      for octet in "${octets[@]}"; do
-        if ((octet > 255)); then
-          valid_ip=false
-          break
-        fi
-      done
-      if $valid_ip; then
-        break
-      else
-        msg_warn "Invalid IP address!"
-      fi
-    elif [[ "$DOMAIN" =~ ^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\.[a-zA-Z]{2,}$ || "$DOMAIN" == "localhost" ]]; then
-      break
-    else
-      msg_warn "Invalid domain format!"
-    fi
-  done
-
-  msg_info "Creating configuration"
-  cat <<EOF >"$CONFIG_PATH"/.env
-NODE_ENV=production
-IMMICH_URL=http://${DOMAIN}:2283
-EOF
-  chmod 600 "$CONFIG_PATH"/.env
-  msg_ok "Created configuration"
-
-  msg_info "Creating service"
-  cat <<EOF >"$SERVICE_PATH"
-[Unit]
-Description=Immich Public Proxy
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=${INSTALL_PATH}
-EnvironmentFile=${CONFIG_PATH}/.env
-ExecStart=/usr/bin/node ${INSTALL_PATH}/app/server.js
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-  systemctl enable -q --now immich-proxy
-  msg_ok "Created and started service"
-
-  # Create update script (simple wrapper that calls this addon with type=update)
-  msg_info "Creating update script"
-  cat <<'UPDATEEOF' >/usr/local/bin/update_immich-public-proxy
-#!/usr/bin/env bash
-# Immich Public Proxy Update Script
-type=update bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/immich-public-proxy.sh)"
-UPDATEEOF
-  chmod +x /usr/local/bin/update_immich-public-proxy
-  msg_ok "Created update script (/usr/local/bin/update_immich-public-proxy)"
-
-  echo ""
-  msg_ok "${APP} is reachable at: ${BL}http://${LOCAL_IP}:${DEFAULT_PORT}${CL}"
-  echo ""
-  msg_warn "Additional configuration is available at '/opt/immich-proxy/app/config.json'"
-}
-
-# ==============================================================================
-# MAIN
-# ==============================================================================
-
-# Handle type=update (called from update script)
-if [[ "${type:-}" == "update" ]]; then
-  header_info
-  if [[ -d "$INSTALL_PATH" && -f "$SERVICE_PATH" ]]; then
-    update
-  else
-    msg_error "${APP} is not installed. Nothing to update."
-    exit 1
-  fi
-  exit 0
-fi
-
-header_info
-get_lxc_ip
-
-# Check if already installed
-if [[ -d "$INSTALL_PATH" && -f "$SERVICE_PATH" ]]; then
-  msg_warn "${APP} is already installed."
-  echo ""
-
-  echo -n "${TAB}Uninstall ${APP}? (y/N): "
-  read -r uninstall_prompt
-  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
-    uninstall
-    exit 0
-  fi
-
-  echo -n "${TAB}Update ${APP}? (y/N): "
-  read -r update_prompt
-  if [[ "${update_prompt,,}" =~ ^(y|yes)$ ]]; then
-    update
-    exit 0
-  fi
-
-  msg_warn "No action selected. Exiting."
-  exit 0
-fi
-
-# Fresh installation
-msg_warn "${APP} is not installed."
-echo ""
-echo -e "${TAB}${INFO} This will install:"
-echo -e "${TAB}  - Node.js 24"
-echo -e "${TAB}  - Immich Public Proxy"
-echo ""
-
-echo -n "${TAB}Install ${APP}? (y/N): "
-read -r install_prompt
-if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
-  install
-else
-  msg_warn "Installation cancelled. Exiting."
-  exit 0
-fi