Update nginx-ui.sh

The previous install script started nginx-ui for 3 seconds, stopped it,
and ran reset-password to create an admin user. This caused:
- Race condition: the internal setup wizard could trigger during the brief
  start window, conflicting with the reset-password approach
- Admin users unable to login after the setup wizard fired
- Settings lockup due to overloaded app.ini with hardcoded nginx paths
  that conflict with UI-managed settings

Changes:
- Remove start/stop/reset-password hack from install script
- Simplify app.ini to match upstream defaults (minimal config)
- Let users complete the natural setup wizard on first visit
- Update JSON: remove default credentials, add setup wizard note
- Add setup wizard hint to CT script output

The setup wizard properly handles admin account creation and ACME email
configuration, which are both needed for full functionality.

Ref: ProxmoxVED#1408

CHANGELOG.md

@@ -403,6 +403,13 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-02-09
 
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - tracearr: prepare for next stable release [@durzo](https://github.com/durzo) ([#11673](https://github.com/community-scripts/ProxmoxVE/pull/11673))
+    - PeaNUT: symlink server.js after update [@vhsdream](https://github.com/vhsdream) ([#11696](https://github.com/community-scripts/ProxmoxVE/pull/11696))
+
 ## 2026-02-08
 
 ### 🚀 Updated Scripts

ct/nginxproxymanager.sh

@@ -28,6 +28,12 @@ function update_script() {
     exit
   fi
 
+  msg_error "This script is currently disabled due to an external issue with the OpenResty APT repository."
+  msg_error "The repository's GPG key uses SHA-1 signatures, which are no longer accepted by Debian as of February 1, 2026."
+  msg_error "The issue is tracked in openresty/openresty#1097"
+  msg_error "For more details, see: https://github.com/community-scripts/ProxmoxVE/issues/11406"
+  exit 1
+
   if [[ $(grep -E '^VERSION_ID=' /etc/os-release) == *"12"* ]]; then
     msg_error "Wrong Debian version detected!"
     msg_error "Please create a snapshot first. You must upgrade your LXC to Debian Trixie before updating. Visit: https://github.com/community-scripts/ProxmoxVE/discussions/7489"
@@ -139,17 +145,15 @@ function update_script() {
   "database": {
     "engine": "knex-native",
     "knex": {
-      "client": "better-sqlite3",
+      "client": "sqlite3",
       "connection": {
         "filename": "/data/database.sqlite"
-      },
-      "useNullAsDefault": true
+      }
     }
   }
 }
 EOF
   fi
-  sed -i 's/"client": "sqlite3"/"client": "better-sqlite3"/' /app/config/production.json
   cd /app 
   $STD yarn install --network-timeout 600000
   msg_ok "Initialized Backend"

ct/peanut.sh

@@ -30,30 +30,30 @@ function update_script() {
 
   NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
 
-  if check_for_gh_release "peanut" "Brandawg93/PeaNUT"; then
+  if check_for_gh_release "PeaNUT" "Brandawg93/PeaNUT"; then
     msg_info "Stopping Service"
     systemctl stop peanut
     msg_info "Stopped Service"
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "peanut" "Brandawg93/PeaNUT" "tarball" "latest" "/opt/peanut"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "PeaNUT" "Brandawg93/PeaNUT" "tarball" "latest" "/opt/peanut"
 
     if ! grep -q '/opt/peanut/entrypoint.mjs' /etc/systemd/system/peanut.service; then
       msg_info "Fixing entrypoint"
       cd /opt/peanut
-      ln -sf .next/standalone/server.js server.js
       sed -i 's|/opt/peanut/.next/standalone/server.js|/opt/peanut/entrypoint.mjs|' /etc/systemd/system/peanut.service
       systemctl daemon-reload
       msg_ok "Fixed entrypoint"
     fi
 
-    msg_info "Updating Peanut"
+    msg_info "Updating PeaNUT"
     cd /opt/peanut
     $STD pnpm i
     $STD pnpm run build:local
     cp -r .next/static .next/standalone/.next/
     mkdir -p /opt/peanut/.next/standalone/config
     ln -sf /etc/peanut/settings.yml /opt/peanut/.next/standalone/config/settings.yml
-    msg_ok "Updated Peanut"
+    ln -sf .next/standalone/server.js server.js
+    msg_ok "Updated PeaNUT"
 
     msg_info "Starting Service"
     systemctl start peanut

ct/tracearr.sh

@@ -105,6 +105,7 @@ EOF
     cp -rf pnpm-lock.yaml /opt/tracearr/
     cp -rf apps/server/package.json /opt/tracearr/apps/server/
     cp -rf apps/server/dist /opt/tracearr/apps/server/dist
+    cp -rf apps/server/scripts /opt/tracearr/apps/server/scripts
     cp -rf apps/web/dist /opt/tracearr/apps/web/dist
     cp -rf packages/shared/package.json /opt/tracearr/packages/shared/
     cp -rf packages/shared/dist /opt/tracearr/packages/shared/dist

frontend/public/json/nginx-ui.json

@@ -28,10 +28,14 @@
         }
     ],
     "default_credentials": {
-        "username": "admin",
+        "username": null,
         "password": null
     },
     "notes": [
+        {
+            "text": "On first visit, the setup wizard will guide you to create an admin account and configure ACME email.",
+            "type": "warning"
+        },
         {
             "text": "Nginx runs on ports 80/443, Nginx UI management interface on port 9000.",
             "type": "info"
@@ -39,10 +43,6 @@
         {
             "text": "SSL certificates can be managed automatically with Let's Encrypt integration.",
             "type": "info"
-        },
-        {
-            "text": "Initial Login data: `cat ~/nginx-ui.creds`",
-            "type": "info"
         }
     ]
 }

frontend/public/json/nginxproxymanager.json

@@ -30,14 +30,10 @@
     }
   ],
   "default_credentials": {
-    "username": null,
-    "password": null
+    "username": "admin@example.com",
+    "password": "changeme"
   },
   "notes": [
-    {
-      "text": "On first launch, a setup wizard will guide you through creating an admin account. There are no default credentials.",
-      "type": "info"
-    },
     {
       "text": "You can install the specific one certbot you prefer, or you can Running /app/scripts/install-certbot-plugins within the Nginx Proxy Manager (NPM) LXC shell will install many common plugins. Important: This script does not install all Certbot plugins, as some require additional, external system dependencies (like specific packages for certain DNS providers). These external dependencies must be manually installed within the LXC container before you can successfully install and use the corresponding Certbot plugin. Consult the plugin's documentation for required packages.",
       "type": "info"

install/nginx-ui-install.sh

@@ -30,29 +30,20 @@ msg_ok "Installed Nginx UI"
 msg_info "Configuring Nginx UI"
 mkdir -p /usr/local/etc/nginx-ui
 cat <<EOF >/usr/local/etc/nginx-ui/app.ini
-[server]
-HttpHost = 0.0.0.0
-HttpPort = 9000
-RunMode = release
-JwtSecret = $(openssl rand -hex 32)
-
-[nginx]
-AccessLogPath = /var/log/nginx/access.log
-ErrorLogPath = /var/log/nginx/error.log
-ConfigDir = /etc/nginx
-PIDPath = /run/nginx.pid
-TestConfigCmd = nginx -t
-ReloadCmd = nginx -s reload
-RestartCmd = systemctl restart nginx
-
 [app]
 PageSize = 10
 
+[server]
+Host = 0.0.0.0
+Port = 9000
+RunMode = release
+JwtSecret = $(openssl rand -hex 32)
+
 [cert]
-Email =
-CADir =
-RenewalInterval = 7
-RecursiveNameservers =
+HTTPChallengePort = 9180
+
+[terminal]
+StartCmd = login
 EOF
 msg_ok "Configured Nginx UI"
 
@@ -78,17 +69,6 @@ EOF
 systemctl daemon-reload
 msg_ok "Created Service"
 
-msg_info "Creating Initial Admin User"
-systemctl start nginx-ui
-sleep 3
-systemctl stop nginx-ui
-sleep 1
-/usr/local/bin/nginx-ui reset-password --config /usr/local/etc/nginx-ui/app.ini &>/tmp/nginx-ui-reset.log || true
-ADMIN_PASS=$(grep -oP 'Password: \K\S+' /tmp/nginx-ui-reset.log || echo "admin")
-echo -e "Nginx-UI Credentials\nUsername: admin\nPassword: $ADMIN_PASS" >~/nginx-ui.creds
-rm -f /tmp/nginx-ui-reset.log
-msg_ok "Created Initial Admin User"
-
 msg_info "Starting Service"
 systemctl enable -q --now nginx-ui
 rm -rf /etc/nginx/sites-enabled/default

install/nginxproxymanager-install.sh

@@ -130,11 +130,10 @@ if [ ! -f /app/config/production.json ]; then
   "database": {
     "engine": "knex-native",
     "knex": {
-      "client": "better-sqlite3",
+      "client": "sqlite3",
       "connection": {
         "filename": "/data/database.sqlite"
-      },
-      "useNullAsDefault": true
+      }
     }
   }
 }

install/tracearr-install.sh

@@ -59,6 +59,7 @@ cp -rf pnpm-workspace.yaml /opt/tracearr/
 cp -rf pnpm-lock.yaml /opt/tracearr/
 cp -rf apps/server/package.json /opt/tracearr/apps/server/
 cp -rf apps/server/dist /opt/tracearr/apps/server/dist
+cp -rf apps/server/scripts /opt/tracearr/apps/server/scripts
 cp -rf apps/web/dist /opt/tracearr/apps/web/dist
 cp -rf packages/shared/package.json /opt/tracearr/packages/shared/
 cp -rf packages/shared/dist /opt/tracearr/packages/shared/dist