Update CHANGELOG.md (#15172 )

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
chore(paperless-ngx): pin version to prevent v3 update (#15171 )
2026-06-18 05:21:18 +02:00 · 2026-06-17 16:11:43 +00:00 · 2026-06-17 18:11:08 +02:00 · 2026-06-17 13:35:06 +00:00 · 2026-06-17 15:34:27 +02:00 · 2026-06-17 13:31:18 +00:00
22 changed files with 515 additions and 83 deletions
@@ -483,11 +483,48 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

+## 2026-06-17
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - kasm: fix release detection [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15151](https://github.com/community-scripts/ProxmoxVE/pull/15151))
+
+  - #### ✨ New Features
+
+    - trek: update install and upgrade workflow for v3.1.0 [@MickLesk](https://github.com/MickLesk) ([#15165](https://github.com/community-scripts/ProxmoxVE/pull/15165))
+
+  - #### 💥 Breaking Changes
+
+    - TREK: Pin version [@tremor021](https://github.com/tremor021) ([#15156](https://github.com/community-scripts/ProxmoxVE/pull/15156))
+
+  - #### 🔧 Refactor
+
+    - chore(paperless-ngx): pin version to prevent v3 update [@tomfrenzel](https://github.com/tomfrenzel) ([#15171](https://github.com/community-scripts/ProxmoxVE/pull/15171))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - immich public proxy: replace npm install with npm ci for consistent dependency installation [@MickLesk](https://github.com/MickLesk) ([#15166](https://github.com/community-scripts/ProxmoxVE/pull/15166))
+
 ## 2026-06-16

 ### 🆕 New Scripts

-  - Add runtime status guard and deleted script stubs [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15125](https://github.com/community-scripts/ProxmoxVE/pull/15125))
+  - Feishin ([#15130](https://github.com/community-scripts/ProxmoxVE/pull/15130))
+- Kiwix ([#15131](https://github.com/community-scripts/ProxmoxVE/pull/15131))
+- Add runtime status guard and deleted script stubs [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15125](https://github.com/community-scripts/ProxmoxVE/pull/15125))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(degoog): use localhost for valkey url [@ethan-hgwr](https://github.com/ethan-hgwr) ([#15149](https://github.com/community-scripts/ProxmoxVE/pull/15149))
+    - Fix InvoiceShelf install/update Yarn package manager mismatch [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15141](https://github.com/community-scripts/ProxmoxVE/pull/15141))
+    - fix storyteller install failure with yarn 4 corepack [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15140](https://github.com/community-scripts/ProxmoxVE/pull/15140))
+    - fix: generate policy-compliant OpenObserve root password [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15137](https://github.com/community-scripts/ProxmoxVE/pull/15137))

 ## 2026-06-15

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/jeffvli/feishin
+
+APP="Feishin"
+var_tags="${var_tags:-music;player;streaming}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/feishin ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "feishin" "jeffvli/feishin"; then
+    create_backup /opt/feishin/.env
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "feishin" "jeffvli/feishin" "tarball"
+
+    msg_info "Rebuilding Feishin Web"
+    cd /opt/feishin
+    #PNPM_VERSION=$(jq -r '.packageManager | ltrimstr("pnpm@")' /opt/feishin/package.json)
+    $STD corepack enable
+    $STD corepack prepare "pnpm@10" --activate
+    $STD pnpm install
+    $STD pnpm run build:web
+    msg_ok "Rebuilt Feishin Web"
+
+    restore_backup
+
+    msg_info "Publishing Web Assets"
+    rm -rf /usr/share/nginx/html
+    mkdir -p /usr/share/nginx/html
+    cp -r /opt/feishin/out/web/. /usr/share/nginx/html/
+
+    set -a
+    source /opt/feishin/.env
+    set +a
+
+    envsubst </opt/feishin/settings.js.template >/etc/nginx/conf.d/settings.js
+    envsubst '${PUBLIC_PATH}' </opt/feishin/ng.conf.template >/etc/nginx/sites-available/feishin
+    ln -sf /etc/nginx/sites-available/feishin /etc/nginx/sites-enabled/feishin
+    rm -f /etc/nginx/sites-enabled/default
+    systemctl restart nginx
+    msg_ok "Published Web Assets"
+
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9180${CL}"
@@ -0,0 +1,6 @@
+    ____              __   __                  
+   / __ )____  ____  / /__/ /   ____  ________ 
+  / __  / __ \/ __ \/ //_/ /   / __ \/ ___/ _ \
+ / /_/ / /_/ / /_/ / ,< / /___/ /_/ / /  /  __/
+/_____/\____/\____/_/|_/_____/\____/_/   \___/ 
+                                               
@@ -0,0 +1,6 @@
+    ______     _      __    _     
+   / ____/__  (_)____/ /_  (_)___ 
+  / /_  / _ \/ / ___/ __ \/ / __ \
+ / __/ /  __/ (__  ) / / / / / / /
+/_/    \___/_/____/_/ /_/_/_/ /_/ 
+                                  
@@ -0,0 +1,6 @@
+    __ __ _          _     
+   / //_/(_)      __(_)  __
+  / ,<  / / | /| / / / |/_/
+ / /| |/ /| |/ |/ / />  <  
+/_/ |_/_/ |__/|__/_/_/|_|  
+                           
@@ -0,0 +1,6 @@
+    __    _ __       __    __    __  ___
+   / /   (_) /____  / /   / /   /  |/  /
+  / /   / / __/ _ \/ /   / /   / /|_/ / 
+ / /___/ / /_/  __/ /___/ /___/ /  / /  
+/_____/_/\__/\___/_____/_____/_/  /_/   
+                                        
@@ -52,8 +52,14 @@ function update_script() {
    msg_info "Updating Application"
    cd /opt/invoiceshelf
    $STD composer install --no-dev --optimize-autoloader
-    $STD yarn install
-    $STD yarn build
+    if command -v corepack >/dev/null 2>&1; then
+      $STD corepack enable
+      $STD corepack yarn install
+      $STD corepack yarn build
+    else
+      $STD yarn install
+      $STD yarn build
+    fi
    $STD php artisan migrate --force
    $STD php artisan optimize:clear
    chown -R www-data:www-data /opt/invoiceshelf
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
-# Author: Omar Minaya
+# Author: CrazyWolf13
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://www.kasmweb.com/docs/latest/index.html

@@ -16,7 +16,7 @@ var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-0}"
 var_fuse="${var_fuse:-yes}"
 var_tun="${var_tun:-yes}"
-var_kasm_version="${var_kasm_version:-}"
+var_kasm_version="${var_kasm_version:-1.19.0}"

 header_info "$APP"
 variables
@@ -34,19 +34,18 @@ function update_script() {

  msg_info "Checking for new version"
  CURRENT_VERSION=$(readlink -f /opt/kasm/current | awk -F'/' '{print $4}')
-  KASM_VERSION=$(curl -s https://kasm.com/downloads | grep -oP '<h1[^>]*>.*?</h1>' | sed -E 's/<\/?h1[^>]*>//g' | grep -oP '\d+\.\d+\.\d+')
-  KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION:-var_kasm_version}.tar.gz"
+  KASM_URL=$(curl -s https://kasm.com/downloads \
+    | grep -oP 'https://kasm-static-content\.s3\.amazonaws\.com/kasm_release_\d+\.\d+\.\d+-latest\.tar\.gz' \
+    | head -1)
+  KASM_VERSION=$(echo "$KASM_URL" | grep -oP '\d+\.\d+\.\d+(?=-latest)')

-  # KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
-  # if [[ -z "$KASM_URL" ]]; then
-  #   SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
-  #   if [[ -n "$SERVICE_IMAGE_URL" ]]; then
-  #     KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-  #     KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
-  #   fi
-  # else
-  #   KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-  # fi
+  # Fallback to predefined version if online lookup failed.
+  if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
+    msg_warn "Unable to fetch latest Kasm release online, falling back to v${var_kasm_version}"
+  fi
+
+  KASM_VERSION="${KASM_VERSION:-$var_kasm_version}"
+  KASM_URL="${KASM_URL:-https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}-latest.tar.gz}"

  if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
    msg_error "Unable to detect latest Kasm release URL."
@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/kiwix/kiwix-tools
+
+APP="Kiwix"
+var_tags="${var_tags:-documentation;offline}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-ubuntu}"
+var_version="${var_version:-24.04}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if ! dpkg -s kiwix-tools &>/dev/null; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  CURRENT=$(dpkg-query -W -f='${Version}' kiwix-tools 2>/dev/null)
+
+  msg_info "Updating Package Index"
+  $STD apt update
+  msg_ok "Updated Package Index"
+
+  CANDIDATE=$(apt-cache policy kiwix-tools | awk '/Candidate:/{print $2}')
+  if [[ -z "$CANDIDATE" || "$CANDIDATE" == "(none)" ]]; then
+    msg_error "No Candidate Version Found for kiwix-tools"
+    exit
+  fi
+
+  if [[ "$CURRENT" == "$CANDIDATE" ]]; then
+    echo "${CURRENT}" >/root/.kiwix
+    msg_ok "Already on latest version: ${CURRENT}"
+    exit
+  fi
+
+  msg_info "Stopping Service"
+  systemctl stop kiwix-serve
+  msg_ok "Stopped Service"
+
+  msg_info "Updating Kiwix-Tools"
+  $STD apt install -y --only-upgrade kiwix-tools
+  RELEASE=$(dpkg-query -W -f='${Version}' kiwix-tools 2>/dev/null)
+  echo "${RELEASE}" >/root/.kiwix
+  msg_ok "Updated Kiwix-Tools"
+  msg_ok "Updated successfully from ${CURRENT} to ${RELEASE}!"
+
+  msg_info "Starting Service"
+  systemctl start kiwix-serve
+  msg_ok "Started Service"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -49,7 +49,8 @@ function update_script() {
    fi
  fi

-  if check_for_gh_release "paperless" "paperless-ngx/paperless-ngx"; then
+  RELEASE="v2.20.15"
+  if check_for_gh_release "paperless" "paperless-ngx/paperless-ngx" "${RELEASE}" "v3 needs further testing"; then
    msg_info "Stopping all Paperless-ngx Services"
    systemctl stop paperless-consumer paperless-webserver paperless-scheduler paperless-task-queue
    msg_ok "Stopped all Paperless-ngx Services"
@@ -63,7 +64,7 @@ function update_script() {
      msg_ok "Backup completed to $BACKUP_DIR"

      PYTHON_VERSION="3.13" setup_uv
-      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "${RELEASE}" "/opt/paperless" "paperless*tar.xz"
      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"

      . /etc/os-release
@@ -138,7 +139,7 @@ function update_script() {
      msg_ok "Backup completed to $BACKUP_DIR"

      PYTHON_VERSION="3.13" setup_uv
-      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "${RELEASE}" "/opt/paperless" "paperless*tar.xz"
      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"

      . /etc/os-release
@@ -48,13 +48,14 @@ function update_script() {
    msg_info "Rebuilding Storyteller"
    cd /opt/storyteller
    export NODE_OPTIONS="--max-old-space-size=4096"
-    $STD yarn install --network-timeout 600000
+    $STD corepack enable
+    $STD corepack yarn install --network-timeout 600000
    $STD gcc -g -fPIC -rdynamic -shared web/sqlite/uuid.c -o web/sqlite/uuid.c.so
    export CI=1
    export NODE_ENV=production
    export NEXT_TELEMETRY_DISABLED=1
    export SQLITE_NATIVE_BINDING=/opt/storyteller/node_modules/better-sqlite3/build/Release/better_sqlite3.node
-    $STD yarn workspaces foreach -Rpt --from @storyteller-platform/web --exclude @storyteller-platform/eslint run build
+    $STD corepack yarn workspaces foreach -Rpt --from @storyteller-platform/web --exclude @storyteller-platform/eslint run build
    mkdir -p /opt/storyteller/web/.next/standalone/web/.next/static
    cp -rT /opt/storyteller/web/.next/static /opt/storyteller/web/.next/standalone/web/.next/static
    if [[ -d /opt/storyteller/web/public ]]; then
@@ -33,47 +33,80 @@ function update_script() {
  NODE_VERSION="24" setup_nodejs

  if check_for_gh_release "trek" "mauriceboe/TREK"; then
+    MIGRATION=0
+    grep -qF "ExecStart=/usr/bin/node --import tsx src/index.ts" \
+      /etc/systemd/system/trek.service && MIGRATION=1
+
    msg_info "Stopping Service"
    systemctl stop trek
    msg_ok "Stopped Service"

-    msg_info "Backing up Data"
-    cp /opt/trek/server/.env /opt/trek.env.bak
-    mv /opt/trek/data /opt/trek-data.bak
-    mv /opt/trek/uploads /opt/trek-uploads.bak
-    msg_ok "Backed up Data"
+    ensure_dependencies "libkitinerary-bin"
+
+    create_backup /opt/trek/server/.env \
+      /opt/trek/data \
+      /opt/trek/uploads

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "trek" "mauriceboe/TREK" "tarball"

-    msg_info "Building Client"
-    cd /opt/trek/client
+    msg_info "Building TREK"
+    cd /opt/trek
    $STD npm ci
-    $STD npm run build
-    mkdir -p /opt/trek/server/public
-    cp -r /opt/trek/client/dist/* /opt/trek/server/public/
-    cp -r /opt/trek/client/public/fonts /opt/trek/server/public/fonts 2>/dev/null || true
-    msg_ok "Built Client"
+    $STD npm run build --workspace=shared
+    $STD npm run build --workspace=client
+    $STD npm run build --workspace=server
+    msg_ok "Built TREK"

-    msg_info "Installing Server Dependencies"
-    cd /opt/trek/server
-    $STD npm ci
-    msg_ok "Installed Server Dependencies"
+    msg_info "Setting up TREK Workspace"
+    rm -rf /opt/trek/server/public
+    mkdir -p /opt/trek/server/public/fonts
+    cp -a /opt/trek/client/dist/. /opt/trek/server/public/
+    cp -a /opt/trek/client/public/fonts/. /opt/trek/server/public/fonts/
+
+    restore_backup

-    msg_info "Restoring Data"
-    mv /opt/trek-data.bak /opt/trek/data
-    mv /opt/trek-uploads.bak /opt/trek/uploads
    rm -rf /opt/trek/server/data /opt/trek/server/uploads
    ln -s /opt/trek/data /opt/trek/server/data
    ln -s /opt/trek/uploads /opt/trek/server/uploads
-    cp /opt/trek.env.bak /opt/trek/server/.env
-    rm -f /opt/trek.env.bak
-    msg_ok "Restored Data"
+
+    rm -rf /opt/trek/node_modules
+    cd /opt/trek
+    $STD npm ci --workspace=server --omit=dev
+    msg_ok "Set up TREK Workspace"
+
+    if [[ "$MIGRATION" == "1" ]]; then
+      msg_info "Migrating TREK Service"
+      cat <<EOF >/etc/systemd/system/trek.service
+[Unit]
+Description=TREK Travel Planner
+Documentation=https://github.com/mauriceboe/TREK
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/trek/server
+EnvironmentFile=/opt/trek/server/.env
+Environment=XDG_CACHE_HOME=/tmp/trek-kf6-cache
+Environment=QT_QPA_PLATFORM=offscreen
+ExecStart=/usr/bin/node --require tsconfig-paths/register dist/index.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+      systemctl daemon-reload
+      msg_ok "Migrated TREK Service"
+    fi

    msg_info "Starting Service"
    systemctl start trek
    msg_ok "Started Service"
    msg_ok "Updated Successfully!"
  fi
+
  exit
 }

@@ -40,7 +40,7 @@ DEGOOG_PLUGINS_DIR=/opt/degoog/data/plugins
 DEGOOG_THEMES_DIR=/opt/degoog/data/themes
 DEGOOG_ALIASES_FILE=/opt/degoog/data/aliases.json
 DEGOOG_PLUGIN_SETTINGS_FILE=/opt/degoog/data/plugin-settings.json
-DEGOOG_VALKEY_URL=redis://valkey:6379
+DEGOOG_VALKEY_URL=redis://127.0.0.1:6379
 DEGOOG_CACHE_MAX_ENTRIES=1000
 DEGOOG_CACHE_TTL_MS=43200000
 # DEGOOG_SETTINGS_PASSWORDS=changeme
@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/jeffvli/feishin
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nginx \
+  gettext-base
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+
+fetch_and_deploy_gh_release "feishin" "jeffvli/feishin" "tarball"
+
+msg_info "Building Feishin Web"
+cd /opt/feishin
+#PNPM_VERSION=$(jq -r '.packageManager | ltrimstr("pnpm@")' /opt/feishin/package.json)
+$STD corepack enable
+$STD corepack prepare "pnpm@10" --activate
+$STD pnpm install
+$STD pnpm run build:web
+msg_ok "Built Feishin Web"
+
+msg_info "Configuring Environment"
+cat <<EOF >/opt/feishin/.env
+SERVER_NAME=jellyfin
+SERVER_LOCK=false
+SERVER_TYPE=jellyfin
+SERVER_URL=http://localhost:8096
+REMOTE_URL=
+LEGACY_AUTHENTICATION=false
+ANALYTICS_DISABLED=false
+PUBLIC_PATH=/
+EOF
+msg_ok "Configured Environment"
+
+msg_info "Publishing Web Assets"
+rm -rf /usr/share/nginx/html
+mkdir -p /usr/share/nginx/html
+cp -r /opt/feishin/out/web/. /usr/share/nginx/html/
+
+set -a
+source /opt/feishin/.env
+set +a
+
+envsubst </opt/feishin/settings.js.template >/etc/nginx/conf.d/settings.js
+envsubst '${PUBLIC_PATH}' </opt/feishin/ng.conf.template >/etc/nginx/sites-available/feishin
+
+ln -sf /etc/nginx/sites-available/feishin /etc/nginx/sites-enabled/feishin
+rm -f /etc/nginx/sites-enabled/default
+systemctl enable -q --now nginx
+systemctl reload nginx
+msg_ok "Published Web Assets"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -39,8 +39,14 @@ sed -i "s|^DB_USERNAME=.*|DB_USERNAME=${PG_DB_USER}|" .env
 sed -i "s|^DB_PASSWORD=.*|DB_PASSWORD=${PG_DB_PASS}|" .env
 COMPOSER_ALLOW_SUPERUSER=1 $STD composer install --no-dev --optimize-autoloader --no-interaction
 $STD php artisan key:generate
-$STD yarn install
-$STD yarn build
+if command -v corepack >/dev/null 2>&1; then
+  $STD corepack enable
+  $STD corepack yarn install
+  $STD corepack yarn build
+else
+  $STD yarn install
+  $STD yarn build
+fi
 mkdir -p storage/framework/{cache,sessions,views} storage/logs bootstrap/cache
 chown -R www-data:www-data /opt/invoiceshelf
 chmod -R 775 storage bootstrap/cache
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash

 # Copyright (c) 2021-2026 community-scripts ORG
-# Author: Omar Minaya
+# Author: CrazyWolf13
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://www.kasmweb.com/docs/latest/index.html

@@ -18,19 +18,18 @@ $STD sh <(curl -fsSL https://get.docker.com/)
 msg_ok "Installed Docker"

 msg_info "Detecting latest Kasm Workspaces release"
-KASM_VERSION=$(curl -s https://kasm.com/downloads | grep -oP '<h1[^>]*>.*?</h1>' | sed -E 's/<\/?h1[^>]*>//g' | grep -oP '\d+\.\d+\.\d+')
-KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION:-var_kasm_version}.tar.gz"
+KASM_URL=$(curl -s https://kasm.com/downloads \
+  | grep -oP 'https://kasm-static-content\.s3\.amazonaws\.com/kasm_release_\d+\.\d+\.\d+-latest\.tar\.gz' \
+  | head -1)
+KASM_VERSION=$(echo "$KASM_URL" | grep -oP '\d+\.\d+\.\d+(?=-latest)')

-# KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
-# if [[ -z "$KASM_URL" ]]; then
-#   SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
-#   if [[ -n "$SERVICE_IMAGE_URL" ]]; then
-#     KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-#     KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
-#   fi
-# else
-#   KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-# fi
+# Fallback to predefined version if online lookup failed.
+if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
+  msg_warn "Unable to fetch latest Kasm release online, falling back to v${var_kasm_version}"
+fi
+
+KASM_VERSION="${KASM_VERSION:-$var_kasm_version}"
+KASM_URL="${KASM_URL:-https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}-latest.tar.gz}"

 if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
  msg_error "Unable to detect latest Kasm release URL."
@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ) | tewalds
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/kiwix/kiwix-tools
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y software-properties-common
+msg_ok "Installed Dependencies"
+
+msg_info "Adding Kiwix PPA"
+add-apt-repository -y ppa:kiwixteam/release >>"$(get_active_logfile)" 2>&1
+$STD apt update
+msg_ok "Added Kiwix PPA"
+
+msg_info "Installing Kiwix-Tools"
+$STD apt install -y kiwix-tools
+RELEASE=$(dpkg -s kiwix-tools 2>/dev/null | awk '/^Version:/{print $2}')
+mkdir -p /data
+echo "${RELEASE}" >/root/.kiwix
+msg_ok "Installed Kiwix-Tools"
+
+msg_info "Downloading Kiwix Test Archive"
+ZIM_BASE_URL="https://download.kiwix.org/zim/wikipedia"
+ZIM_FILE="$(CURL_TIMEOUT=60 CURL_CONNECT_TO=15 curl_with_retry "${ZIM_BASE_URL}/" "-" |
+  grep -oE 'href="speedtest_en_blob_[0-9]{4}-[0-9]{2}\.zim"' |
+  sed -E 's/^href="|"$//g' |
+  sort -V |
+  tail -n 1)" || true
+
+if [[ -z "${ZIM_FILE}" ]]; then
+  msg_warn "No Kiwix speedtest ZIM archive found - skipping optional download"
+else
+  ZIM_URL="${ZIM_BASE_URL}/${ZIM_FILE}"
+  ZIM_TEMP="/data/.${ZIM_FILE}.tmp"
+  ZIM_TARGET="/data/${ZIM_FILE}"
+  if ! CURL_TIMEOUT=120 CURL_CONNECT_TO=15 curl_with_retry "${ZIM_URL}" "${ZIM_TEMP}"; then
+    rm -f "${ZIM_TEMP}"
+    msg_warn "Failed to download Kiwix ZIM archive - skipping optional download"
+    ZIM_FILE=""
+  elif [[ ! -s "${ZIM_TEMP}" ]]; then
+    rm -f "${ZIM_TEMP}"
+    msg_warn "Downloaded Kiwix ZIM archive is empty - skipping optional download"
+    ZIM_FILE=""
+  else
+    mv "${ZIM_TEMP}" "${ZIM_TARGET}"
+    msg_ok "Downloaded Kiwix Test Archive (${ZIM_FILE})"
+  fi
+fi
+
+msg_info "Creating Service"
+cat <<'EOF' >/etc/systemd/system/kiwix-serve.service
+[Unit]
+Description=Kiwix ZIM Server
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/bin/sh -c 'exec /usr/bin/kiwix-serve --port 8080 /data/*.zim'
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now kiwix-serve
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -17,7 +17,7 @@ msg_info "Installing OpenObserve"
 mkdir -p /opt/openobserve/data
 RELEASE=$(get_latest_github_release "openobserve/openobserve")
 tar zxf <(curl -fsSL https://downloads.openobserve.ai/releases/openobserve/v$RELEASE/openobserve-v$RELEASE-linux-amd64.tar.gz) -C /opt/openobserve
-ROOT_PASS=$(openssl rand -base64 18 | cut -c1-13)
+ROOT_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c9)Aa1!"

 cat <<EOF >/opt/openobserve/data/.env
 ZO_ROOT_USER_EMAIL = "admin@example.com"
@@ -46,7 +46,7 @@ msg_ok "Installed Dependencies"
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="paperlessdb" PG_DB_USER="paperless" setup_postgresql_db
 PYTHON_VERSION="3.13" setup_uv
-fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
+fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "v2.20.15" "/opt/paperless" "paperless*tar.xz"

 msg_info "Setup Paperless-ngx"
 cd /opt/paperless
@@ -32,7 +32,8 @@ fetch_and_deploy_gl_release "storyteller" "storyteller-platform/storyteller" "ta

 msg_info "Setting up Storyteller"
 cd /opt/storyteller
-$STD yarn install --network-timeout 600000
+$STD corepack enable
+$STD corepack yarn install --network-timeout 600000
 $STD gcc -g -fPIC -rdynamic -shared web/sqlite/uuid.c -o web/sqlite/uuid.c.so
 STORYTELLER_SECRET_KEY=$(openssl rand -base64 32)
 cat <<EOF >/opt/storyteller/.env
@@ -58,7 +59,7 @@ export CI=1
 export NODE_ENV=production
 export NEXT_TELEMETRY_DISABLED=1
 export SQLITE_NATIVE_BINDING=/opt/storyteller/node_modules/better-sqlite3/build/Release/better_sqlite3.node
-$STD yarn workspaces foreach -Rpt --from @storyteller-platform/web --exclude @storyteller-platform/eslint run build
+$STD corepack yarn workspaces foreach -Rpt --from @storyteller-platform/web --exclude @storyteller-platform/eslint run build
 mkdir -p /opt/storyteller/web/.next/standalone/web/.next/static
 cp -rT /opt/storyteller/web/.next/static /opt/storyteller/web/.next/standalone/web/.next/static
 if [[ -d /opt/storyteller/web/public ]]; then
@@ -14,57 +14,82 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt install -y build-essential
+$STD apt install -y \
+  build-essential \
+  libkitinerary-bin
 msg_ok "Installed Dependencies"

 NODE_VERSION="24" setup_nodejs
 fetch_and_deploy_gh_release "trek" "mauriceboe/TREK" "tarball"

-msg_info "Building Client"
-cd /opt/trek/client
+msg_info "Setup TREK"
+cd /opt/trek
 $STD npm ci
-$STD npm run build
-msg_ok "Built Client"
+$STD npm run build --workspace=shared
+$STD npm run build --workspace=client
+$STD npm run build --workspace=server
+msg_ok "Setup TREK"

-msg_info "Setting up Server"
-cd /opt/trek/server
-$STD npm ci
+msg_info "Setting up TREK Workspace"
+rm -rf /opt/trek/server/public
 mkdir -p /opt/trek/server/public
-cp -r /opt/trek/client/dist/* /opt/trek/server/public/
-cp -r /opt/trek/client/public/fonts /opt/trek/server/public/fonts 2>/dev/null || true
-mkdir -p /opt/trek/{data/logs,uploads/{files,covers,avatars,photos}}
-rm -rf /opt/trek/server/data /opt/trek/server/uploads
+cp -a /opt/trek/client/dist/. /opt/trek/server/public/
+if [[ -d /opt/trek/client/public/fonts ]]; then
+  mkdir -p /opt/trek/server/public/fonts
+  cp -a /opt/trek/client/public/fonts/. /opt/trek/server/public/fonts/
+fi
+mkdir -p \
+  /opt/trek/data/logs \
+  /opt/trek/uploads/files \
+  /opt/trek/uploads/covers \
+  /opt/trek/uploads/avatars \
+  /opt/trek/uploads/photos
+rm -rf /opt/trek/server/data
+rm -rf /opt/trek/server/uploads
 ln -s /opt/trek/data /opt/trek/server/data
 ln -s /opt/trek/uploads /opt/trek/server/uploads
+cd /opt/trek
+$STD npm prune --omit=dev
+msg_ok "Set up TREK Workspace"
+
+msg_info "Configuring TREK"
 ENCRYPTION_KEY=$(openssl rand -hex 32)
 ADMIN_EMAIL="admin@trek.local"
 ADMIN_PASSWORD=$(openssl rand -base64 18 | tr -dc 'A-Za-z0-9' | head -c 16)
 cat <<EOF >/opt/trek/server/.env
 NODE_ENV=production
+HOST=0.0.0.0
 PORT=3000
 ENCRYPTION_KEY=${ENCRYPTION_KEY}
 ADMIN_EMAIL=${ADMIN_EMAIL}
 ADMIN_PASSWORD=${ADMIN_PASSWORD}
+TZ=UTC
+LOG_LEVEL=info
+DEFAULT_LANGUAGE=en
+ALLOWED_ORIGINS=
 COOKIE_SECURE=false
 FORCE_HTTPS=false
-LOG_LEVEL=info
-TZ=UTC
+TRUST_PROXY=1
 EOF
 chmod 600 /opt/trek/server/.env
-msg_ok "Set up Server"
+msg_ok "Configured TREK"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/trek.service
 [Unit]
 Description=TREK Travel Planner
-After=network.target
+Documentation=https://github.com/mauriceboe/TREK
+After=network-online.target
+Wants=network-online.target

 [Service]
 Type=simple
 User=root
 WorkingDirectory=/opt/trek/server
 EnvironmentFile=/opt/trek/server/.env
-ExecStart=/usr/bin/node --import tsx src/index.ts
+Environment=XDG_CACHE_HOME=/tmp/trek-kf6-cache
+Environment=QT_QPA_PLATFORM=offscreen
+ExecStart=/usr/bin/node --require tsconfig-paths/register dist/index.js
 Restart=on-failure
 RestartSec=5

@@ -99,7 +99,7 @@ function update() {

    msg_info "Installing dependencies"
    cd "$CONFIG_PATH"
-    $STD npm install
+    $STD npm ci
    msg_ok "Installed dependencies"

    msg_info "Building ${APP}"
@@ -151,7 +151,7 @@ function install() {

  msg_info "Installing dependencies"
  cd "$CONFIG_PATH"
-  $STD npm install
+  $STD npm ci
  msg_ok "Installed dependencies"

  msg_info "Building ${APP}"
Author	SHA1	Message	Date
community-scripts-pr-app[bot]	a5398b742c	Update CHANGELOG.md (#15172 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-17 16:11:43 +00:00
Tom Frenzel	3d7fd049fa	chore(paperless-ngx): pin version to prevent v3 update (#15171 )	2026-06-17 18:11:08 +02:00
community-scripts-pr-app[bot]	4b80e0db29	Update CHANGELOG.md (#15168 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-17 13:35:06 +00:00
CanbiZ (MickLesk)	5169c61968	immich public proxy: replace npm install with npm ci for consistent dependency installation (#15166 )	2026-06-17 15:34:27 +02:00
community-scripts-pr-app[bot]	1d8518b305	Update CHANGELOG.md (#15167 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-17 13:31:18 +00:00
CanbiZ (MickLesk)	04e6933b3b	trek: update install and upgrade workflow for v3.1.0 (#15165 ) * trek: update install and upgrade workflow Remove the hardcoded release tag and fetch the latest TREK release. Consolidate builds to npm workspaces (shared, client, server), copy client dist into server/public, and install/prune server deps for production. Add libkitinerary dependency and ensure dependencies during upgrade. Implement backup/restore during upgrades and add migration logic that detects the old systemd ExecStart; when present, rewrite trek.service to run the compiled dist via node --require tsconfig-paths/register, add XDG_CACHE_HOME and QT_QPA_PLATFORM env vars, and switch to network-online.target. Installer changes also create data/uploads directories, set additional .env defaults (TZ, LOG_LEVEL, DEFAULT_LANGUAGE, ALLOWED_ORIGINS), and adjust workspace setup steps. * add proxy env	2026-06-17 15:30:38 +02:00
community-scripts-pr-app[bot]	00fe32dc3c	Update CHANGELOG.md (#15158 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-17 08:13:04 +00:00
Tobias	59a389fb2d	kasm: fix release detection (#15151 )	2026-06-17 10:12:39 +02:00
community-scripts-pr-app[bot]	d42fd9893e	Update CHANGELOG.md (#15157 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-17 07:01:06 +00:00
Slaviša Arežina	4556d40b07	Pin version (#15156 )	2026-06-17 09:00:40 +02:00
community-scripts-pr-app[bot]	49b7de22c3	Update CHANGELOG.md (#15150 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-16 19:12:40 +00:00
Ethan H.	2112e2793e	fix(degoog): use localhost for valkey url (#15149 )	2026-06-16 21:12:02 +02:00
community-scripts-pr-app[bot]	2e8ff7a6c5	Update CHANGELOG.md (#15147 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-16 14:44:00 +00:00
Michel Roegl-Brunner	4d4e1d7654	fix storyteller Yarn 4 install mismatch (#15140 ) Enable Corepack and run Storyteller install/build commands through corepack yarn so the script honors upstream packageManager and avoids Yarn 1 failures.	2026-06-16 16:43:27 +02:00
community-scripts-pr-app[bot]	6b25e35ecf	Update CHANGELOG.md (#15146 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-16 14:05:03 +00:00
Michel Roegl-Brunner	6c23883d94	Fix InvoiceShelf install/update package manager execution. (#15141 ) Use Corepack-managed Yarn when available so installs respect upstream packageManager metadata and avoid Yarn classic mismatch failures during both fresh installs and updates.	2026-06-16 16:04:22 +02:00
community-scripts-pr-app[bot]	e08719ac3f	Update CHANGELOG.md (#15145 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-16 13:22:46 +00:00
Michel Roegl-Brunner	0683d4942c	fix openobserve root password policy failure (#15137 ) Generate a policy-compliant ZO_ROOT_USER_PASSWORD during install so OpenObserve can start reliably on versions that require lower/upper/digit/special character complexity.	2026-06-16 15:22:06 +02:00
community-scripts-pr-app[bot]	b0896dbdeb	Update .app files (#15139 ) Co-authored-by: GitHub Actions <github-actions[bot]@users.noreply.github.com>	2026-06-16 14:52:29 +02:00
community-scripts-pr-app[bot]	f1ee2a2b91	Update CHANGELOG.md (#15138 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-16 12:28:50 +00:00
push-app-to-main[bot]	691ce33090	Add feishin (ct) (#15130 ) Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>	2026-06-16 14:28:15 +02:00
community-scripts-pr-app[bot]	5f5881c757	Update CHANGELOG.md (#15132 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-16 11:26:58 +00:00
push-app-to-main[bot]	af7e83300f	Add kiwix (ct) (#15131 ) Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>	2026-06-16 13:26:24 +02:00