Update CHANGELOG.md (#14595)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -476,11 +476,16 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
+    - ESPConnect: Fix paths to SSL certificates [@tremor021](https://github.com/tremor021) ([#14591](https://github.com/community-scripts/ProxmoxVE/pull/14591))
     - ReactiveResume: set correct WorkingDirectory for systemd service [@MickLesk](https://github.com/MickLesk) ([#14579](https://github.com/community-scripts/ProxmoxVE/pull/14579))
     - Sparkyfitness: add missing nginx template variable substitutions [@MickLesk](https://github.com/MickLesk) ([#14578](https://github.com/community-scripts/ProxmoxVE/pull/14578))
     - Wanderer: include dev dependencies during build [@MickLesk](https://github.com/MickLesk) ([#14577](https://github.com/community-scripts/ProxmoxVE/pull/14577))
     - Whisparr: switch from nightly to stable GitHub release [@MickLesk](https://github.com/MickLesk) ([#14581](https://github.com/community-scripts/ProxmoxVE/pull/14581))
 
+  - #### 🔧 Refactor
+
+    - Refactor: SonarQube [@tremor021](https://github.com/tremor021) ([#14594](https://github.com/community-scripts/ProxmoxVE/pull/14594))
+
 ## 2026-05-18
 
 ### 🆕 New Scripts

ct/reactive-resume.sh

@@ -48,17 +48,7 @@ function update_script() {
     export NODE_ENV="production"
     $STD pnpm install --frozen-lockfile
     $STD pnpm run build
-    msg_info "Deploying Nitro Runtime Externals"
-    $STD pnpm --filter=@reactive-resume/runtime-externals deploy --prod --legacy /tmp/rr-runtime
-    cp -r /tmp/rr-runtime/node_modules/. /opt/reactive-resume/apps/web/node_modules/
-    rm -rf /tmp/rr-runtime
-    msg_ok "Deployed Nitro Runtime Externals"
     mv /opt/reactive-resume.env.bak /opt/reactive-resume/.env
-    # Inject ENCRYPTION_SECRET if missing (required for AI providers since v5.1.4)
-    if ! grep -q '^ENCRYPTION_SECRET=' /opt/reactive-resume/.env; then
-      ENCRYPTION_SECRET=$(openssl rand -hex 32)
-      echo "ENCRYPTION_SECRET=${ENCRYPTION_SECRET}" >> /opt/reactive-resume/.env
-    fi
     msg_ok "Updated Reactive Resume"
 
     msg_info "Updating Service"

ct/sonarqube.sh

@@ -39,13 +39,11 @@ function update_script() {
     msg_ok "Created Backup"
 
     msg_info "Updating SonarQube"
-    temp_file=$(mktemp)
-    RELEASE=$(get_latest_github_release "SonarSource/sonarqube")
-    curl -fsSL "https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-${RELEASE}.zip" -o $temp_file
-    unzip -q "$temp_file" -d /opt
-    rm -f "$temp_file"
-    mv /opt/sonarqube-${RELEASE} /opt/sonarqube
-    echo "${RELEASE}" > ~/.sonarqube
+    RELEASE=$(curl -fsSL "https://binaries.sonarsource.com/s3api?prefix=Distribution/sonarqube/sonarqube-&delimiter=/" |
+      grep -oP 'sonarqube-[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\.zip' |
+      sort -V | tail -n1)
+    fetch_and_deploy_from_url "https://binaries.sonarsource.com/Distribution/sonarqube/${RELEASE}" /opt/sonarqube
+    echo "${RELEASE}" >~/.sonarqube
     msg_ok "Updated SonarQube"
 
     msg_info "Restoring Backup"

install/espconnect-install.sh

@@ -34,8 +34,8 @@ server {
     listen 443 ssl default_server;
     listen [::]:443 ssl default_server;
 
-    ssl_certificate /etc/ssl/certs/espconnect-selfsigned.crt;
-    ssl_certificate_key /etc/ssl/private/espconnect-selfsigned.key;
+    ssl_certificate /etc/ssl/espconnect/espconnect.crt;
+    ssl_certificate_key /etc/ssl/espconnect/espconnect.key;
     ssl_protocols TLSv1.2 TLSv1.3;
 
     root /opt/espconnect;

install/reactive-resume-install.sh

@@ -34,17 +34,11 @@ export NODE_ENV="production"
 export CI="true"
 $STD pnpm install --frozen-lockfile
 $STD pnpm run build
-msg_info "Deploying Nitro Runtime Externals"
-$STD pnpm --filter=@reactive-resume/runtime-externals deploy --prod --legacy /tmp/rr-runtime
-cp -r /tmp/rr-runtime/node_modules/. /opt/reactive-resume/apps/web/node_modules/
-rm -rf /tmp/rr-runtime
-msg_ok "Deployed Nitro Runtime Externals"
 mkdir -p /opt/reactive-resume/data
 msg_ok "Built Reactive Resume"
 
 msg_info "Configuring Reactive Resume"
 AUTH_SECRET=$(openssl rand -hex 32)
-ENCRYPTION_SECRET=$(openssl rand -hex 32)
 
 cat <<EOF >/opt/reactive-resume/.env
 # Reactive Resume v5 Configuration
@@ -60,8 +54,8 @@ DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAM
 # Authentication Secret (do not change after initial setup)
 AUTH_SECRET=${AUTH_SECRET}
 
-# Encryption Secret (required for saved AI providers, do not change after initial setup)
-ENCRYPTION_SECRET=${ENCRYPTION_SECRET}
+# Printer (headless Chromium for PDF generation)
+PRINTER_ENDPOINT=http://127.0.0.1:9222
 
 # Storage: uses local filesystem (/opt/reactive-resume/data) when S3 is not configured
 # S3_ACCESS_KEY_ID=
@@ -84,9 +78,6 @@ ENCRYPTION_SECRET=${ENCRYPTION_SECRET}
 # GOOGLE_CLIENT_ID=
 # GOOGLE_CLIENT_SECRET=
 
-# AI Agent (optional, required for the Agent workspace feature)
-# REDIS_URL=redis://localhost:6379
-
 # Feature Flags
 # FLAG_DISABLE_SIGNUPS=false
 # FLAG_DISABLE_EMAIL_AUTH=false

install/sonarqube-install.sh

@@ -17,12 +17,10 @@ PG_VERSION="17" setup_postgresql
 PG_DB_NAME="sonarqube" PG_DB_USER="sonarqube" setup_postgresql_db
 
 msg_info "Setting up SonarQube"
-temp_file=$(mktemp)
-RELEASE=$(get_latest_github_release "SonarSource/sonarqube")
-curl -fsSL "https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-${RELEASE}.zip" -o $temp_file
-unzip -q "$temp_file" -d /opt
-rm -f "$temp_file"
-mv /opt/sonarqube-* /opt/sonarqube
+RELEASE=$(curl -s "https://binaries.sonarsource.com/s3api?prefix=Distribution/sonarqube/sonarqube-&delimiter=/" |
+  grep -oP 'sonarqube-[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\.zip' |
+  sort -V | tail -n1)
+fetch_and_deploy_from_url "https://binaries.sonarsource.com/Distribution/sonarqube/${RELEASE}" /opt/sonarqube
 $STD useradd -r -m -U -d /opt/sonarqube -s /bin/bash sonarqube
 chown -R sonarqube:sonarqube /opt/sonarqube
 chmod -R 755 /opt/sonarqube