Frigate: bump to v0.17.2

CHANGELOG.md

@@ -489,24 +489,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-07-02
-
-### 🆕 New Scripts
-
-  - Rackula ([#15465](https://github.com/community-scripts/ProxmoxVE/pull/15465))
-
-### 🚀 Updated Scripts
-
-  - #### ✨ New Features
-
-    - Frigate: bump to v0.17.2 [@MickLesk](https://github.com/MickLesk) ([#15536](https://github.com/community-scripts/ProxmoxVE/pull/15536))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: configure pnpm to allow all build scripts for environments [@MickLesk](https://github.com/MickLesk) ([#15532](https://github.com/community-scripts/ProxmoxVE/pull/15532))
-
 ## 2026-07-01
 
 ### 🆕 New Scripts
@@ -517,9 +499,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
-    - Stirling-PDF: patch libicudata execstack flag for LXC container compatibility [@MickLesk](https://github.com/MickLesk) ([#15531](https://github.com/community-scripts/ProxmoxVE/pull/15531))
-    - FlowiseAI: align install to use pnpm instead of npm to fix missing dependencies [@MickLesk](https://github.com/MickLesk) ([#15530](https://github.com/community-scripts/ProxmoxVE/pull/15530))
-    - Vaultwarden: handle version detection failure gracefully in update [@MickLesk](https://github.com/MickLesk) ([#15526](https://github.com/community-scripts/ProxmoxVE/pull/15526))
     - homarr: fix: update-fail [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15512](https://github.com/community-scripts/ProxmoxVE/pull/15512))
     - n8n: pin version to 2.27.5 [@tremor021](https://github.com/tremor021) ([#15516](https://github.com/community-scripts/ProxmoxVE/pull/15516))
 
@@ -527,13 +506,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
     - [arm64] feat: iventory arm64 support [@asylumexp](https://github.com/asylumexp) ([#15521](https://github.com/community-scripts/ProxmoxVE/pull/15521))
 
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: fix SDN vnet network parameter to use bridge instead of vnet [@MickLesk](https://github.com/MickLesk) ([#15527](https://github.com/community-scripts/ProxmoxVE/pull/15527))
-    - tools.func: use safe variable expansion in check_for_gh_release RETURN trap [@MickLesk](https://github.com/MickLesk) ([#15529](https://github.com/community-scripts/ProxmoxVE/pull/15529))
-
 ## 2026-06-30
 
 ### 🚀 Updated Scripts

ct/headers/rackula

@@ -1,6 +0,0 @@
-    ____             __         __     
-   / __ \____ ______/ /____  __/ /___ _
-  / /_/ / __ `/ ___/ //_/ / / / / __ `/
- / _, _/ /_/ / /__/ ,< / /_/ / / /_/ / 
-/_/ |_|\__,_/\___/_/|_|\__,_/_/\__,_/  
-                                       

ct/rackula.sh

@@ -1,81 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: gVNS (ggfevans)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/RackulaLives/Rackula
-
-APP="Rackula"
-var_tags="${var_tags:-homelab}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/rackula ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit 1
-  fi
-
-  if check_for_gh_release "rackula" "RackulaLives/Rackula"; then
-    msg_info "Stopping Services"
-    systemctl stop rackula-api nginx
-    msg_ok "Stopped Services"
-
-    create_backup /opt/rackula/data
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "rackula" "RackulaLives/Rackula" "prebuild" "latest" "/opt/rackula" "rackula-lxc-*.tar.gz"
-    restore_backup
-
-    msg_info "Updating Configuration"
-    cp /opt/rackula/config/nginx.conf /etc/nginx/sites-available/rackula
-    cp /opt/rackula/config/security-headers.conf /etc/nginx/snippets/security-headers.conf
-    cp /opt/rackula/config/rackula-api.service /etc/systemd/system/rackula-api.service
-    if grep -q '^User=' /etc/systemd/system/rackula-api.service; then
-      sed -i 's/^User=.*/User=root/' /etc/systemd/system/rackula-api.service
-    else
-      sed -i '/^\[Service\]/a User=root' /etc/systemd/system/rackula-api.service
-    fi
-    if grep -q '^Group=' /etc/systemd/system/rackula-api.service; then
-      sed -i 's/^Group=.*/Group=root/' /etc/systemd/system/rackula-api.service
-    else
-      sed -i '/^\[Service\]/a Group=root' /etc/systemd/system/rackula-api.service
-    fi
-    mkdir -p /etc/systemd/system/nginx.service.d
-    cp /opt/rackula/config/nginx.service.d-override.conf /etc/systemd/system/nginx.service.d/override.conf
-    chown -R root:root /opt/rackula/frontend
-    find /opt/rackula/frontend -type d -exec chmod 755 {} \;
-    find /opt/rackula/frontend -type f -exec chmod 644 {} \;
-    chmod 750 /opt/rackula/data
-    msg_ok "Updated Configuration"
-
-    msg_info "Starting Services"
-    $STD nginx -t
-    systemctl daemon-reload
-    systemctl start nginx rackula-api
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/stirling-pdf.sh

@@ -38,11 +38,6 @@ function update_script() {
     PYTHON_VERSION="3.12" setup_uv
     JAVA_VERSION="25" setup_java
 
-    msg_info "Patching Native Libraries for LXC Compatibility"
-    ensure_dependencies patchelf
-    find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
-    msg_ok "Patched Native Libraries"
-
     msg_info "Stopping Services"
     systemctl stop stirlingpdf libreoffice-listener unoserver
     msg_ok "Stopped Services"

ct/vaultwarden.sh

@@ -37,7 +37,7 @@ function update_script() {
     "2" "Set Admin Token")
 
   if [ "$UPD" == "1" ]; then
-    INSTALLED_VERSION="$(/opt/vaultwarden/bin/vaultwarden --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -n1 || true)"
+    INSTALLED_VERSION="$(/opt/vaultwarden/bin/vaultwarden --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -n1)"
     if [[ -n "$INSTALLED_VERSION" ]] &&
       ! grep -qxF "$INSTALLED_VERSION" "$HOME/.vaultwarden" 2>/dev/null; then
       printf '%s\n' "$INSTALLED_VERSION" >"$HOME/.vaultwarden"

install/flowiseai-install.sh

@@ -20,12 +20,16 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.11" setup_uv
-NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
+NODE_VERSION="22" setup_nodejs #needed because better-sql break
 
 msg_info "Installing FlowiseAI (Patience)"
 PYTHON_BIN="$(uv python find 3.11)"
 export npm_config_python="$PYTHON_BIN"
-$STD pnpm add -g flowise
+$STD npm install -g flowise \
+  @opentelemetry/exporter-trace-otlp-grpc \
+  @opentelemetry/exporter-trace-otlp-proto \
+  @opentelemetry/sdk-trace-node \
+  langchainhub
 mkdir -p /opt/flowiseai
 curl -fsSL "https://raw.githubusercontent.com/FlowiseAI/Flowise/main/packages/server/.env.example" -o "/opt/flowiseai/.env"
 msg_ok "Installed FlowiseAI"

install/rackula-install.sh

@@ -1,84 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: gVNS (ggfevans)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/RackulaLives/Rackula
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y nginx
-msg_ok "Installed Dependencies"
-
-msg_info "Installing Bun"
-export BUN_INSTALL="/opt/bun"
-curl -fsSL https://bun.sh/install | $STD bash
-ln -sf /opt/bun/bin/bun /usr/local/bin/bun
-msg_ok "Installed Bun"
-
-fetch_and_deploy_gh_release "rackula" "RackulaLives/Rackula" "prebuild" "latest" "/opt/rackula" "rackula-lxc-*.tar.gz"
-
-msg_info "Setting up Rackula"
-mkdir -p /opt/rackula/data /etc/nginx/snippets
-SECURITY_HEADERS_SRC="/opt/rackula/config/security-headers.conf"
-cp "$SECURITY_HEADERS_SRC" /etc/nginx/snippets/security-headers.conf
-chown -R root:root /opt/rackula/frontend
-find /opt/rackula/frontend -type d -exec chmod 755 {} \;
-find /opt/rackula/frontend -type f -exec chmod 644 {} \;
-chmod 750 /opt/rackula/data
-
-API_WRITE_TOKEN=$(openssl rand -hex 32)
-cat <<EOF >/opt/rackula/data/.env
-RACKULA_API_WRITE_TOKEN=${API_WRITE_TOKEN}
-CORS_ORIGIN=http://localhost
-ALLOW_INSECURE_CORS=false
-EOF
-chmod 600 /opt/rackula/data/.env
-
-cat <<EOF >/etc/nginx/snippets/rackula-api-token.conf
-map \$host \$rackula_api_write_token {
-  default "${API_WRITE_TOKEN}";
-}
-map \$host \$rackula_has_api_write_token {
-  default 1;
-}
-EOF
-chmod 640 /etc/nginx/snippets/rackula-api-token.conf
-msg_ok "Set up Rackula"
-
-msg_info "Configuring nginx"
-cp /opt/rackula/config/nginx.conf /etc/nginx/sites-available/rackula
-rm -f /etc/nginx/sites-enabled/default
-ln -sf /etc/nginx/sites-available/rackula /etc/nginx/sites-enabled/rackula
-$STD nginx -t
-msg_ok "Configured nginx"
-
-msg_info "Creating Services"
-cp /opt/rackula/config/rackula-api.service /etc/systemd/system/rackula-api.service
-if grep -q '^User=' /etc/systemd/system/rackula-api.service; then
-  sed -i 's/^User=.*/User=root/' /etc/systemd/system/rackula-api.service
-else
-  sed -i '/^\[Service\]/a User=root' /etc/systemd/system/rackula-api.service
-fi
-if grep -q '^Group=' /etc/systemd/system/rackula-api.service; then
-  sed -i 's/^Group=.*/Group=root/' /etc/systemd/system/rackula-api.service
-else
-  sed -i '/^\[Service\]/a Group=root' /etc/systemd/system/rackula-api.service
-fi
-mkdir -p /etc/systemd/system/nginx.service.d
-cp /opt/rackula/config/nginx.service.d-override.conf /etc/systemd/system/nginx.service.d/override.conf
-systemctl daemon-reload
-systemctl enable -q nginx rackula-api
-systemctl restart nginx rackula-api
-msg_ok "Created Services"
-
-motd_ssh
-customize
-cleanup_lxc

install/stirling-pdf-install.sh

@@ -27,8 +27,7 @@ $STD apt install -y \
   fonts-urw-base35 \
   qpdf \
   poppler-utils \
-  jbig2 \
-  patchelf
+  jbig2
 msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.12" setup_uv
@@ -116,10 +115,6 @@ EOF
 fi
 msg_ok "Created Environment Variables"
 
-msg_info "Patching Native Libraries for LXC Compatibility"
-find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
-msg_ok "Patched Native Libraries"
-
 msg_info "Refreshing Font Cache"
 $STD fc-cache -fv
 msg_ok "Font Cache Updated"

misc/build.func

@@ -3788,17 +3788,6 @@ runtime_script_status_guard() {
   fi
 
   if [[ "$is_disabled" == "true" ]]; then
-    # Allow bypass via var_ignore_disable=true (still warn, but continue)
-    case "${var_ignore_disable:-}" in
-    1 | yes | true | on)
-      msg_warn "This script is currently disabled in community-scripts."
-      [[ -n "$disable_message" ]] && msg_warn "$disable_message"
-      msg_warn "Bypassing disable status via var_ignore_disable — continuing at your own risk."
-      msg_warn "More info: ${info_url}"
-      return 0
-      ;;
-    esac
-
     msg_error "This script is currently disabled in community-scripts."
     [[ -n "$disable_message" ]] && msg_error "$disable_message"
     [[ -z "$disable_message" ]] && msg_error "Updates and installs are temporarily disabled for this script."
@@ -3941,7 +3930,7 @@ build_container() {
 
   NET_STRING="-net0 name=eth0,bridge=${BRG:-vmbr0}"
   if [[ -n "${var_sdn_vnet:-${SDN_VNET:-}}" ]]; then
-    NET_STRING="-net0 name=eth0,bridge=${var_sdn_vnet:-$SDN_VNET}"
+    NET_STRING="-net0 name=eth0,vnet=${var_sdn_vnet:-$SDN_VNET}"
   fi
 
   # MAC

misc/tools.func

@@ -2647,9 +2647,9 @@ check_for_gh_release() {
 
   ensure_dependencies jq
 
-  local gh_check_json=""
+  local gh_check_json
   gh_check_json=$(mktemp /tmp/tools-gh-check-XXXXXX) || return 73
-  trap 'rm -f "${gh_check_json:-}"' RETURN
+  trap 'rm -f "$gh_check_json"' RETURN
 
   # Build auth header if token is available
   local header_args=()
@@ -7657,12 +7657,6 @@ setup_nodejs() {
     fi
   fi
 
-  # pnpm v10+ blocks dependency build scripts by default (ERR_PNPM_IGNORED_BUILDS).
-  # In a container environment all installed packages are trusted, so we enable builds globally.
-  if command -v pnpm >/dev/null 2>&1; then
-    pnpm config set --global dangerouslyAllowAllBuilds true >/dev/null 2>&1 || true
-  fi
-
   if [[ "$NODE_COREPACK_ENABLE" == "1" ]] && ((wants_corepack)) && command -v corepack >/dev/null 2>&1; then
     msg_info "Enabling corepack"
     if $STD corepack enable 2>/dev/null; then