outline: fix env generation (empty DB user, duplicate secrets, URL sed)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -521,6 +521,14 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-08-11
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - karakeep: pin Node.js to 22 LTS, avoid Node 24.19 better-sqlite3 crash [@MickLesk](https://github.com/MickLesk) ([#16396](https://github.com/community-scripts/ProxmoxVE/pull/16396))
+
 ## 2026-08-10
 
 ### 🆕 New Scripts

ct/karakeep.sh

@@ -88,8 +88,9 @@ EOF
       $STD corepack disable
     fi
     sed -i "s/^SERVER_VERSION=.*$/SERVER_VERSION=${CHECK_UPDATE_RELEASE#v}/" /etc/karakeep/karakeep.env
+    # Node 24.19.x crashes better-sqlite3 on cleanup (karakeep-app/karakeep#2989); stay on 22 LTS until upstream reverts.
     MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-    NODE_VERSION="24" NODE_MODULE="corepack,pnpm@${MODULE_VERSION}" setup_nodejs
+    NODE_VERSION="22" NODE_MODULE="corepack,pnpm@${MODULE_VERSION}" setup_nodejs
     setup_meilisearch
 
     msg_info "Updating Karakeep"
@@ -103,6 +104,7 @@ EOF
     $STD pnpm build
     cd /opt/karakeep/apps/workers
     $STD pnpm install --frozen-lockfile
+    $STD pnpm rebuild better-sqlite3
     $STD pnpm build
     cd /opt/karakeep/apps/cli 
     $STD pnpm install --frozen-lockfile

install/karakeep-install.sh

@@ -31,8 +31,9 @@ setup_meilisearch
 
 fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep" "tarball"
 cd /opt/karakeep
+# Node 24.19.x crashes better-sqlite3 on cleanup (karakeep-app/karakeep#2989); stay on 22 LTS until upstream reverts.
 MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-NODE_VERSION="24" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
+NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
 
 msg_info "Installing external JavaScript Extension for yt-dlp"
 $STD pip install -U yt-dlp-ejs --break-system-packages

install/outline-install.sh

@@ -22,27 +22,31 @@ msg_ok "Installed Dependencies"
 
 NODE_VERSION="26" NODE_MODULE="corepack" setup_nodejs
 PG_VERSION="16" setup_postgresql
-PG_DB_NAME="outline" PG_DB_USER="outline" setup_postgresql_db
+PG_DB_NAME="outline"
+PG_DB_USER="outline"
+setup_postgresql_db
 
 fetch_and_deploy_gh_release "outline" "outline/outline" "tarball"
 
 msg_info "Configuring Outline (Patience)"
 SECRET_KEY="$(openssl rand -hex 32)"
+UTILS_SECRET="$(openssl rand -hex 32)"
 cd /opt/outline
 cp .env.sample .env
 export NODE_ENV=development
-sed -i 's/NODE_ENV=production/NODE_ENV=development/g' /opt/outline/.env
-sed -i "s/generate_a_new_key/${SECRET_KEY}/g" /opt/outline/.env
-sed -i "s/user:pass@postgres/${PG_DB_USER}:${PG_DB_PASS}@localhost/g" /opt/outline/.env
-sed -i 's/redis:6379/localhost:6379/g' /opt/outline/.env
-sed -i "5s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
-sed -i 's/FORCE_HTTPS=true/FORCE_HTTPS=false/g' /opt/outline/.env
+sed -i "s#^NODE_ENV=.*#NODE_ENV=development#" /opt/outline/.env
+sed -i "s#^SECRET_KEY=.*#SECRET_KEY=${SECRET_KEY}#" /opt/outline/.env
+sed -i "s#^UTILS_SECRET=.*#UTILS_SECRET=${UTILS_SECRET}#" /opt/outline/.env
+sed -i "s#^DATABASE_URL=.*#DATABASE_URL=postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}#" /opt/outline/.env
+sed -i "s#^REDIS_URL=.*#REDIS_URL=redis://localhost:6379#" /opt/outline/.env
+sed -i "s#^URL=.*#URL=http://${LOCAL_IP}#" /opt/outline/.env
+sed -i "s#^FORCE_HTTPS=.*#FORCE_HTTPS=false#" /opt/outline/.env
 export NODE_OPTIONS="--max-old-space-size=3584"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 
 $STD yarn install --immutable
 export NODE_ENV=production
-sed -i 's/NODE_ENV=development/NODE_ENV=production/g' /opt/outline/.env
+sed -i "s#^NODE_ENV=.*#NODE_ENV=production#" /opt/outline/.env
 $STD yarn build
 msg_ok "Configured Outline"
 

install/pelican-panel-install.sh

@@ -27,7 +27,6 @@ msg_info "Installing Pelican Panel"
 cd /opt/pelican-panel
 $STD composer install --no-dev --optimize-autoloader --no-interaction
 $STD php artisan p:environment:setup
-echo "yes" | $STD php artisan p:environment:database --driver mariadb --host localhost --port 3306 --database "$MARIADB_DB_NAME" --username "$MARIADB_DB_USER" --password "$MARIADB_DB_PASS"
 $STD php artisan p:environment:queue-service --no-interaction
 echo "* * * * * php /opt/pelican-panel/artisan schedule:run >> /dev/null 2>&1" | crontab -u www-data -
 chown -R www-data:www-data /opt/pelican-panel