fix(netbird): add systemd ordering to start after Docker

When Docker is installed in the same LXC, Docker sets the FORWARD chain
policy to DROP on startup. If Netbird starts before Docker finishes
initializing its iptables rules, Docker overrides the Netbird routing
rules, causing traffic routing to fail despite the tunnel being up.

Add a systemd drop-in override that ensures netbird.service starts after
docker.service (only if Docker is installed). This prevents the race
condition and ensures correct iptables ordering after reboot.

Closes #11354

CHANGELOG.md

@@ -410,6 +410,10 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
     - tracearr: prepare for next stable release [@durzo](https://github.com/durzo) ([#11673](https://github.com/community-scripts/ProxmoxVE/pull/11673))
     - PeaNUT: symlink server.js after update [@vhsdream](https://github.com/vhsdream) ([#11696](https://github.com/community-scripts/ProxmoxVE/pull/11696))
 
+### ❔ Uncategorized
+
+  - Bichon: Update website [@tremor021](https://github.com/tremor021) ([#11711](https://github.com/community-scripts/ProxmoxVE/pull/11711))
+
 ## 2026-02-08
 
 ### 🚀 Updated Scripts

frontend/public/json/bichon.json

@@ -35,6 +35,10 @@
     {
       "text": "The Disk space initially allocated by the script is only a placeholder, as we can't know how much space you will ever need. You should increase it to match your workload.",
       "type": "info"
+    },
+    {
+      "text": "Please copy your `BICHON_ENCRYPT_PASSWORD` from `/opt/bichon/bichon.env` to a safe place.",
+      "type": "warning"
     }
   ]
 }

frontend/public/json/nginx-ui.json

@@ -28,14 +28,10 @@
         }
     ],
     "default_credentials": {
-        "username": null,
+        "username": "admin",
         "password": null
     },
     "notes": [
-        {
-            "text": "On first visit, the setup wizard will guide you to create an admin account and configure ACME email.",
-            "type": "warning"
-        },
         {
             "text": "Nginx runs on ports 80/443, Nginx UI management interface on port 9000.",
             "type": "info"
@@ -43,6 +39,10 @@
         {
             "text": "SSL certificates can be managed automatically with Let's Encrypt integration.",
             "type": "info"
+        },
+        {
+            "text": "Initial Login data: `cat ~/nginx-ui.creds`",
+            "type": "info"
         }
     ]
 }

install/nginx-ui-install.sh

@@ -30,20 +30,29 @@ msg_ok "Installed Nginx UI"
 msg_info "Configuring Nginx UI"
 mkdir -p /usr/local/etc/nginx-ui
 cat <<EOF >/usr/local/etc/nginx-ui/app.ini
-[app]
-PageSize = 10
-
 [server]
-Host = 0.0.0.0
-Port = 9000
+HttpHost = 0.0.0.0
+HttpPort = 9000
 RunMode = release
 JwtSecret = $(openssl rand -hex 32)
 
-[cert]
-HTTPChallengePort = 9180
+[nginx]
+AccessLogPath = /var/log/nginx/access.log
+ErrorLogPath = /var/log/nginx/error.log
+ConfigDir = /etc/nginx
+PIDPath = /run/nginx.pid
+TestConfigCmd = nginx -t
+ReloadCmd = nginx -s reload
+RestartCmd = systemctl restart nginx
 
-[terminal]
-StartCmd = login
+[app]
+PageSize = 10
+
+[cert]
+Email =
+CADir =
+RenewalInterval = 7
+RecursiveNameservers =
 EOF
 msg_ok "Configured Nginx UI"
 
@@ -69,6 +78,17 @@ EOF
 systemctl daemon-reload
 msg_ok "Created Service"
 
+msg_info "Creating Initial Admin User"
+systemctl start nginx-ui
+sleep 3
+systemctl stop nginx-ui
+sleep 1
+/usr/local/bin/nginx-ui reset-password --config /usr/local/etc/nginx-ui/app.ini &>/tmp/nginx-ui-reset.log || true
+ADMIN_PASS=$(grep -oP 'Password: \K\S+' /tmp/nginx-ui-reset.log || echo "admin")
+echo -e "Nginx-UI Credentials\nUsername: admin\nPassword: $ADMIN_PASS" >~/nginx-ui.creds
+rm -f /tmp/nginx-ui-reset.log
+msg_ok "Created Initial Admin User"
+
 msg_info "Starting Service"
 systemctl enable -q --now nginx-ui
 rm -rf /etc/nginx/sites-enabled/default

tools/addon/add-netbird-lxc.sh

@@ -84,6 +84,15 @@ curl -fsSL "https://pkgs.netbird.io/debian/public.key" | gpg --dearmor >/usr/sha
 echo "deb [signed-by=/usr/share/keyrings/netbird-archive-keyring.gpg] https://pkgs.netbird.io/debian stable main" >/etc/apt/sources.list.d/netbird.list
 apt-get update &>/dev/null
 apt-get install -y netbird-ui &>/dev/null
+if systemctl list-unit-files docker.service &>/dev/null; then
+  mkdir -p /etc/systemd/system/netbird.service.d
+  cat <<OVERRIDE >/etc/systemd/system/netbird.service.d/after-docker.conf
+[Unit]
+After=docker.service
+Wants=docker.service
+OVERRIDE
+  systemctl daemon-reload
+fi
 '
 msg "\e[1;32m ✔ Installed NetBird.\e[0m"
 sleep 2