Update CHANGELOG.md (#13605 )

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
bambuddy: add mkdir before data restore & add ffmpeg dependency (#13601 )
2026-04-09 11:35:05 +02:00 · 2026-04-08 21:22:58 +00:00 · 2026-04-08 23:22:34 +02:00 · 2026-04-08 19:41:23 +00:00 · 2026-04-08 21:40:52 +02:00 · 2026-04-08 17:47:34 +00:00
99 changed files with 995 additions and 2726 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -439,6 +439,77 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

+## 2026-04-08
+
+### 🆕 New Scripts
+
+  - IronClaw | Alpine-IronClaw ([#13591](https://github.com/community-scripts/ProxmoxVE/pull/13591))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - immich: disable upgrade-insecure-requests CSP directive [@MickLesk](https://github.com/MickLesk) ([#13600](https://github.com/community-scripts/ProxmoxVE/pull/13600))
+    - Immich: v2.7.2 [@vhsdream](https://github.com/vhsdream) ([#13579](https://github.com/community-scripts/ProxmoxVE/pull/13579))
+    - Update flaresolverr-install.sh [@maztheman](https://github.com/maztheman) ([#13584](https://github.com/community-scripts/ProxmoxVE/pull/13584))
+
+  - #### ✨ New Features
+
+    - bambuddy: add mkdir before data restore & add ffmpeg dependency [@MickLesk](https://github.com/MickLesk) ([#13601](https://github.com/community-scripts/ProxmoxVE/pull/13601))
+
+  - #### 🔧 Refactor
+
+    - feat: update UHF Server script to use setup_ffmpeg [@zackwithak13](https://github.com/zackwithak13) ([#13564](https://github.com/community-scripts/ProxmoxVE/pull/13564))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: add script page badges to descriptions | change donate URL [@MickLesk](https://github.com/MickLesk) ([#13596](https://github.com/community-scripts/ProxmoxVE/pull/13596))
+
+## 2026-04-07
+
+### 🗑️ Deleted Scripts
+
+  - Remove low-install-count CT scripts and installers [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#13570](https://github.com/community-scripts/ProxmoxVE/pull/13570))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: improve resilience for top Proxmox error codes (209, 215, 118, 206) [@MickLesk](https://github.com/MickLesk) ([#13575](https://github.com/community-scripts/ProxmoxVE/pull/13575))
+
+## 2026-04-06
+
+### 🆕 New Scripts
+
+  - OpenThread Border Router ([#13536](https://github.com/community-scripts/ProxmoxVE/pull/13536))
+- Homelable ([#13539](https://github.com/community-scripts/ProxmoxVE/pull/13539))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Papra: check env before copy [@MickLesk](https://github.com/MickLesk) ([#13553](https://github.com/community-scripts/ProxmoxVE/pull/13553))
+    - changedetection: fix: typing_extensions error [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13548](https://github.com/community-scripts/ProxmoxVE/pull/13548))
+    - kasm: fix: fetch latest version [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13547](https://github.com/community-scripts/ProxmoxVE/pull/13547))
+
+## 2026-04-05
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Grist: remove install:ee step (private repo, not needed for grist-core) [@MickLesk](https://github.com/MickLesk) ([#13526](https://github.com/community-scripts/ProxmoxVE/pull/13526))
+    - Nginx Proxy Manager: ensure /tmp/nginx/body exists via openresty service  [@MickLesk](https://github.com/MickLesk) ([#13528](https://github.com/community-scripts/ProxmoxVE/pull/13528))
+    - MotionEye: run as root to enable SMB share support [@MickLesk](https://github.com/MickLesk) ([#13527](https://github.com/community-scripts/ProxmoxVE/pull/13527))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: silent() function - use return instead of exit to allow || true error handling [@MickLesk](https://github.com/MickLesk) ([#13529](https://github.com/community-scripts/ProxmoxVE/pull/13529))
+
 ## 2026-04-04

 ### 🧰 Tools
--- a/ct/alpine-ironclaw.sh
+++ b/ct/alpine-ironclaw.sh
@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/nearai/ironclaw
+
+APP="Alpine-IronClaw"
+var_tags="${var_tags:-ai;agent;alpine}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-alpine}"
+var_version="${var_version:-3.23}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /usr/local/bin/ironclaw ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "ironclaw-bin" "nearai/ironclaw"; then
+    msg_info "Stopping Service"
+    rc-service ironclaw stop 2>/dev/null || true
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Configuration"
+    cp /root/.ironclaw/.env /root/ironclaw.env.bak
+    msg_ok "Backed up Configuration"
+
+    fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
+      "ironclaw-$(uname -m)-unknown-linux-musl.tar.gz"
+    chmod +x /usr/local/bin/ironclaw
+
+    msg_info "Restoring Configuration"
+    cp /root/ironclaw.env.bak /root/.ironclaw/.env
+    rm -f /root/ironclaw.env.bak
+    msg_ok "Restored Configuration"
+
+    msg_info "Starting Service"
+    rc-service ironclaw start
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Complete setup by running:${CL}"
+echo -e "${TAB}${BGN}ironclaw onboard${CL}"
+echo -e "${INFO}${YW} Then start the service:${CL}"
+echo -e "${TAB}${BGN}rc-service ironclaw start${CL}"
+echo -e "${INFO}${YW} Access the Web UI at:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Auth token and database credentials:${CL}"
+echo -e "${TAB}${BGN}cat /root/.ironclaw/.env${CL}"
--- a/ct/apache-cassandra.sh
+++ b/ct/apache-cassandra.sh
@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://cassandra.apache.org/_/index.html
-
-APP="Apache-Cassandra"
-var_tags="${var_tags:-database;NoSQL}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/init.d/cassandra ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Apache Cassandra"
-  $STD apt update
-  $STD apt install -y --only-upgrade cassandra cassandra-tools
-  msg_ok "Updated Apache Cassandra"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/argus.sh
+++ b/ct/argus.sh
@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://release-argus.io/ | Github: https://github.com/release-argus/Argus
-
-APP="Argus"
-var_tags="${var_tags:-watcher}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-3}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/argus ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "argus" "release-argus/Argus"; then
-    msg_info "Stopping service"
-    systemctl stop argus
-    msg_ok "Service stopped"
-
-    fetch_and_deploy_gh_release "Argus" "release-argus/Argus" "singlefile" "latest" "/opt/argus" "Argus*linux-amd64"
-
-    msg_info "Starting service"
-    systemctl start argus
-    msg_ok "Service started"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/ct/bambuddy.sh
+++ b/ct/bambuddy.sh
@@ -29,6 +29,8 @@ function update_script() {
    exit
  fi

+  ensure_dependencies ffmpeg
+
  if check_for_gh_release "bambuddy" "maziggy/bambuddy"; then
    msg_info "Stopping Service"
    systemctl stop bambuddy
@@ -54,6 +56,7 @@ function update_script() {
    msg_ok "Rebuilt Frontend"

    msg_info "Restoring Configuration and Data"
+    mkdir -p /opt/bambuddy/data
    cp /opt/bambuddy.env.bak /opt/bambuddy/.env
    cp -r /opt/bambuddy_data_bak/. /opt/bambuddy/data/
    rm -f /opt/bambuddy.env.bak
--- a/ct/changedetection.sh
+++ b/ct/changedetection.sh
@@ -34,11 +34,11 @@ function update_script() {
  NODE_VERSION="24" setup_nodejs

  msg_info "Updating ${APP}"
-  $STD pip3 install changedetection.io --upgrade
+  $STD pip3 install changedetection.io --upgrade --break-system-packages --ignore-installed typing_extensions
  msg_ok "Updated ${APP}"

  msg_info "Updating Playwright"
-  $STD pip3 install playwright --upgrade
+  $STD pip3 install playwright --upgrade --break-system-packages
  msg_ok "Updated Playwright"

  if [[ -f /etc/systemd/system/browserless.service ]]; then
--- a/ct/commafeed.sh
+++ b/ct/commafeed.sh
@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.commafeed.com/#/welcome | Github: https://github.com/Athou/commafeed
-
-APP="CommaFeed"
-var_tags="${var_tags:-rss-reader}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/commafeed ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  JAVA_VERSION="25" setup_java
-  if check_for_gh_release "commafeed" "Athou/commafeed"; then
-    msg_info "Stopping Service"
-    systemctl stop commafeed
-    msg_ok "Stopped Service"
-
-    ensure_dependencies rsync
-
-    if [ -d /opt/commafeed/data ] && [ "$(ls -A /opt/commafeed/data)" ]; then
-      msg_info "Backing up existing data"
-      mv /opt/commafeed/data /opt/data.bak
-      msg_ok "Backed up existing data"
-    fi
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "commafeed" "Athou/commafeed" "prebuild" "latest" "/opt/commafeed" "commafeed-*-h2-jvm.zip"
-
-    if [ -d /opt/data.bak ] && [ "$(ls -A /opt/data.bak)" ]; then
-      msg_info "Restoring data"
-      mv /opt/data.bak /opt/commafeed/data
-      msg_ok "Restored data"
-    fi
-
-    msg_info "Starting Service"
-    systemctl start commafeed
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8082${CL}"
--- a/ct/daemonsync.sh
+++ b/ct/daemonsync.sh
@@ -1,45 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://daemonsync.me/
-
-APP="Daemon Sync"
-var_tags="${var_tags:-sync}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating LXC"
-  $STD apt update
-  $STD apt -y upgrade
-  msg_ok "Updated LXC"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8084${CL}"
--- a/ct/globaleaks.sh
+++ b/ct/globaleaks.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Giovanni Pellerano (evilaliv3)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/globaleaks/globaleaks-whistleblowing-software
-
-APP="GlobaLeaks"
-var_tags="${var_tags:-whistleblowing-software}"
-var_disk="${var_disk:-4}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /usr/sbin/globaleaks ]]; then
-    msg_error "No ${APP} installation found!"
-    exit
-  fi
-
-  msg_info "Updating $APP LXC"
-  $STD apt update
-  $STD apt -y upgrade
-  msg_ok "Updated $APP LXC"
-  msg_ok "Updated successfully!"
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN} ${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}${CL}"
--- a/ct/grist.sh
+++ b/ct/grist.sh
@@ -53,7 +53,6 @@ function update_script() {
    [[ -f /opt/grist_bak/landing.db ]] && cp /opt/grist_bak/landing.db /opt/grist/landing.db
    cd /opt/grist
    $STD yarn install
-    $STD yarn run install:ee
    $STD yarn run build:prod
    $STD yarn run install:python
    msg_ok "Updated Grist"
--- a/ct/headers/alpine-ironclaw
+++ b/ct/headers/alpine-ironclaw
@@ -0,0 +1,6 @@
+    ___    __      _                  ____                 ________              
+   /   |  / /___  (_)___  ___        /  _/________  ____  / ____/ /___ __      __
+  / /| | / / __ \/ / __ \/ _ \______ / // ___/ __ \/ __ \/ /   / / __ `/ | /| / /
+ / ___ |/ / /_/ / / / / /  __/_____// // /  / /_/ / / / / /___/ / /_/ /| |/ |/ / 
+/_/  |_/_/ .___/_/_/ /_/\___/     /___/_/   \____/_/ /_/\____/_/\__,_/ |__/|__/  
+        /_/                                                                      
--- a/ct/headers/apache-cassandra
+++ b/ct/headers/apache-cassandra
@@ -1,6 +0,0 @@
-    ___                     __               ______                                __          
-   /   |  ____  ____ ______/ /_  ___        / ____/___ _______________ _____  ____/ /________ _
-  / /| | / __ \/ __ `/ ___/ __ \/ _ \______/ /   / __ `/ ___/ ___/ __ `/ __ \/ __  / ___/ __ `/
- / ___ |/ /_/ / /_/ / /__/ / / /  __/_____/ /___/ /_/ (__  |__  ) /_/ / / / / /_/ / /  / /_/ / 
-/_/  |_/ .___/\__,_/\___/_/ /_/\___/      \____/\__,_/____/____/\__,_/_/ /_/\__,_/_/   \__,_/  
-      /_/                                                                                      
--- a/ct/headers/argus
+++ b/ct/headers/argus
@@ -1,6 +0,0 @@
-    ___                         
-   /   |  _________ ___  _______
-  / /| | / ___/ __ `/ / / / ___/
- / ___ |/ /  / /_/ / /_/ (__  ) 
-/_/  |_/_/   \__, /\__,_/____/  
-            /____/              
--- a/ct/headers/commafeed
+++ b/ct/headers/commafeed
@@ -1,6 +0,0 @@
-   ______                                ______              __
-  / ____/___  ____ ___  ____ ___  ____ _/ ____/__  ___  ____/ /
- / /   / __ \/ __ `__ \/ __ `__ \/ __ `/ /_  / _ \/ _ \/ __  / 
-/ /___/ /_/ / / / / / / / / / / / /_/ / __/ /  __/  __/ /_/ /  
-\____/\____/_/ /_/ /_/_/ /_/ /_/\__,_/_/    \___/\___/\__,_/   
-                                                               
--- a/ct/headers/daemonsync
+++ b/ct/headers/daemonsync
@@ -1,6 +0,0 @@
-    ____                                      _____                 
-   / __ \____ ____  ____ ___  ____  ____     / ___/__  ______  _____
-  / / / / __ `/ _ \/ __ `__ \/ __ \/ __ \    \__ \/ / / / __ \/ ___/
- / /_/ / /_/ /  __/ / / / / / /_/ / / / /   ___/ / /_/ / / / / /__  
-/_____/\__,_/\___/_/ /_/ /_/\____/_/ /_/   /____/\__, /_/ /_/\___/  
-                                                /____/              
--- a/ct/headers/globaleaks
+++ b/ct/headers/globaleaks
@@ -1,6 +0,0 @@
-   ________      __          __               __       
-  / ____/ /___  / /_  ____ _/ /   ___  ____ _/ /_______
- / / __/ / __ \/ __ \/ __ `/ /   / _ \/ __ `/ //_/ ___/
-/ /_/ / / /_/ / /_/ / /_/ / /___/  __/ /_/ / ,< (__  ) 
-\____/_/\____/_.___/\__,_/_____/\___/\__,_/_/|_/____/  
-                                                       
--- a/ct/headers/hivemq
+++ b/ct/headers/hivemq
@@ -1,6 +0,0 @@
-    __  ___            __  _______ 
-   / / / (_)   _____  /  |/  / __ \
-  / /_/ / / | / / _ \/ /|_/ / / / /
- / __  / /| |/ /  __/ /  / / /_/ / 
-/_/ /_/_/ |___/\___/_/  /_/\___\_\ 
-                                   
--- a/ct/headers/homelable
+++ b/ct/headers/homelable
@@ -0,0 +1,6 @@
+    __  __                     __      __    __   
+   / / / /___  ____ ___  ___  / /___ _/ /_  / /__ 
+  / /_/ / __ \/ __ `__ \/ _ \/ / __ `/ __ \/ / _ \
+ / __  / /_/ / / / / / /  __/ / /_/ / /_/ / /  __/
+/_/ /_/\____/_/ /_/ /_/\___/_/\__,_/_.___/_/\___/ 
+                                                  
--- a/ct/headers/inspircd
+++ b/ct/headers/inspircd
@@ -1,6 +0,0 @@
-    ____                 ________  ______    __
-   /  _/___  _________  /  _/ __ \/ ____/___/ /
-   / // __ \/ ___/ __ \ / // /_/ / /   / __  / 
- _/ // / / (__  ) /_/ // // _, _/ /___/ /_/ /  
-/___/_/ /_/____/ .___/___/_/ |_|\____/\__,_/   
-              /_/                              
--- a/ct/headers/ironclaw
+++ b/ct/headers/ironclaw
@@ -0,0 +1,6 @@
+    ____                 ________              
+   /  _/________  ____  / ____/ /___ __      __
+   / // ___/ __ \/ __ \/ /   / / __ `/ | /| / /
+ _/ // /  / /_/ / / / / /___/ / /_/ /| |/ |/ / 
+/___/_/   \____/_/ /_/\____/_/\__,_/ |__/|__/  
+                                               
--- a/ct/headers/kubo
+++ b/ct/headers/kubo
@@ -1,6 +0,0 @@
-    __ __      __        
-   / //_/_  __/ /_  ____ 
-  / ,< / / / / __ \/ __ \
- / /| / /_/ / /_/ / /_/ /
-/_/ |_\__,_/_.___/\____/ 
-                         
--- a/ct/headers/neo4j
+++ b/ct/headers/neo4j
@@ -1,6 +0,0 @@
-    _   __           __ __  _ 
-   / | / /__  ____  / // / (_)
-  /  |/ / _ \/ __ \/ // /_/ / 
- / /|  /  __/ /_/ /__  __/ /  
-/_/ |_/\___/\____/  /_/_/ /   
-                     /___/    
--- a/ct/headers/nodebb
+++ b/ct/headers/nodebb
@@ -1,6 +0,0 @@
-    _   __          __     ____  ____ 
-   / | / /___  ____/ /__  / __ )/ __ )
-  /  |/ / __ \/ __  / _ \/ __  / __  |
- / /|  / /_/ / /_/ /  __/ /_/ / /_/ / 
-/_/ |_/\____/\__,_/\___/_____/_____/  
-                                      
--- a/ct/headers/opengist
+++ b/ct/headers/opengist
@@ -1,6 +0,0 @@
-   ____                         _      __ 
-  / __ \____  ___  ____  ____ _(_)____/ /_
- / / / / __ \/ _ \/ __ \/ __ `/ / ___/ __/
-/ /_/ / /_/ /  __/ / / / /_/ / (__  ) /_  
-\____/ .___/\___/_/ /_/\__, /_/____/\__/  
-    /_/               /____/              
--- a/ct/headers/openthread-br
+++ b/ct/headers/openthread-br
@@ -0,0 +1,6 @@
+   ____                 ________                        __      ____  ____ 
+  / __ \____  ___  ____/_  __/ /_  ________  ____ _____/ /     / __ )/ __ \
+ / / / / __ \/ _ \/ __ \/ / / __ \/ ___/ _ \/ __ `/ __  /_____/ __  / /_/ /
+/ /_/ / /_/ /  __/ / / / / / / / / /  /  __/ /_/ / /_/ /_____/ /_/ / _, _/ 
+\____/ .___/\___/_/ /_/_/ /_/ /_/_/   \___/\__,_/\__,_/     /_____/_/ |_|  
+    /_/                                                                    
--- a/ct/headers/ots
+++ b/ct/headers/ots
@@ -1,6 +0,0 @@
-   ____  ___________
-  / __ \/_  __/ ___/
- / / / / / /  \__ \ 
-/ /_/ / / /  ___/ / 
-\____/ /_/  /____/  
-                    
--- a/ct/headers/pf2etools
+++ b/ct/headers/pf2etools
@@ -1,6 +0,0 @@
-    ____  _______      ______            __    
-   / __ \/ __/__ \ ___/_  __/___  ____  / /____
-  / /_/ / /_ __/ // _ \/ / / __ \/ __ \/ / ___/
- / ____/ __// __//  __/ / / /_/ / /_/ / (__  ) 
-/_/   /_/  /____/\___/_/  \____/\____/_/____/  
-                                               
--- a/ct/headers/ps5-mqtt
+++ b/ct/headers/ps5-mqtt
@@ -1,6 +0,0 @@
-    ____  _____ ______      __  _______  ____________
-   / __ \/ ___// ____/     /  |/  / __ \/_  __/_  __/
-  / /_/ /\__ \/___ \______/ /|_/ / / / / / /   / /   
- / ____/___/ /___/ /_____/ /  / / /_/ / / /   / /    
-/_/    /____/_____/     /_/  /_/\___\_\/_/   /_/     
-                                                     
--- a/ct/headers/rustypaste
+++ b/ct/headers/rustypaste
@@ -1,6 +0,0 @@
-                    __                         __     
-   _______  _______/ /___  ______  ____ ______/ /____ 
-  / ___/ / / / ___/ __/ / / / __ \/ __ `/ ___/ __/ _ \
- / /  / /_/ (__  ) /_/ /_/ / /_/ / /_/ (__  ) /_/  __/
-/_/   \__,_/____/\__/\__, / .___/\__,_/____/\__/\___/ 
-                    /____/_/                          
--- a/ct/headers/seelf
+++ b/ct/headers/seelf
@@ -1,6 +0,0 @@
-                   ______
-   ________  ___  / / __/
-  / ___/ _ \/ _ \/ / /_  
- (__  )  __/  __/ / __/  
-/____/\___/\___/_/_/     
-                         
--- a/ct/headers/streamlink-webui
+++ b/ct/headers/streamlink-webui
@@ -1,6 +0,0 @@
-         __                            ___       __                      __          _ 
-   _____/ /_________  ____ _____ ___  / (_)___  / /__     _      _____  / /_  __  __(_)
-  / ___/ __/ ___/ _ \/ __ `/ __ `__ \/ / / __ \/ //_/____| | /| / / _ \/ __ \/ / / / / 
- (__  ) /_/ /  /  __/ /_/ / / / / / / / / / / / ,< /_____/ |/ |/ /  __/ /_/ / /_/ / /  
-/____/\__/_/   \___/\__,_/_/ /_/ /_/_/_/_/ /_/_/|_|      |__/|__/\___/_.___/\__,_/_/   
-                                                                                       
--- a/ct/headers/typesense
+++ b/ct/headers/typesense
@@ -1,6 +0,0 @@
-  ______                _____                    
- /_  __/_  ______  ___ / ___/___  ____  ________ 
-  / / / / / / __ \/ _ \\__ \/ _ \/ __ \/ ___/ _ \
- / / / /_/ / /_/ /  __/__/ /  __/ / / (__  )  __/
-/_/  \__, / .___/\___/____/\___/_/ /_/____/\___/ 
-    /____/_/                                     
--- a/ct/headers/valkey
+++ b/ct/headers/valkey
@@ -1,6 +0,0 @@
- _    __      ____             
-| |  / /___ _/ / /_____  __  __
-| | / / __ `/ / //_/ _ \/ / / /
-| |/ / /_/ / / ,< /  __/ /_/ / 
-|___/\__,_/_/_/|_|\___/\__, /  
-                      /____/   
--- a/ct/headers/verdaccio
+++ b/ct/headers/verdaccio
@@ -1,6 +0,0 @@
- _    __              __                _     
-| |  / /__  _________/ /___ ___________(_)___ 
-| | / / _ \/ ___/ __  / __ `/ ___/ ___/ / __ \
-| |/ /  __/ /  / /_/ / /_/ / /__/ /__/ / /_/ /
-|___/\___/_/   \__,_/\__,_/\___/\___/_/\____/ 
-                                              
--- a/ct/headers/wavelog
+++ b/ct/headers/wavelog
@@ -1,6 +0,0 @@
- _       __                 __           
-| |     / /___ __   _____  / /___  ____ _
-| | /| / / __ `/ | / / _ \/ / __ \/ __ `/
-| |/ |/ / /_/ /| |/ /  __/ / /_/ / /_/ / 
-|__/|__/\__,_/ |___/\___/_/\____/\__, /  
-                                /____/   
--- a/ct/headers/writefreely
+++ b/ct/headers/writefreely
@@ -1,6 +0,0 @@
- _       __     _ __       ______               __     
-| |     / /____(_) /____  / ____/_______  ___  / /_  __
-| | /| / / ___/ / __/ _ \/ /_  / ___/ _ \/ _ \/ / / / /
-| |/ |/ / /  / / /_/  __/ __/ / /  /  __/  __/ / /_/ / 
-|__/|__/_/  /_/\__/\___/_/   /_/   \___/\___/_/\__, /  
-                                              /____/   
--- a/ct/hivemq.sh
+++ b/ct/hivemq.sh
@@ -1,39 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.hivemq.com/ | Github: https://github.com/hivemq/hivemq-community-edition
-
-APP="HiveMQ"
-var_tags="${var_tags:-mqtt}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_error "Currently we don't provide an update function for this ${APP}."
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/homelable.sh
+++ b/ct/homelable.sh
@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Pouzor/homelable
+
+APP="Homelable"
+var_tags="${var_tags:-monitoring;network;visualization}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/homelable ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "homelable" "Pouzor/homelable"; then
+    msg_info "Stopping Service"
+    systemctl stop homelable
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Configuration and Data"
+    cp /opt/homelable/backend/.env /opt/homelable.env.bak
+    cp -r /opt/homelable/data /opt/homelable_data_bak
+    msg_ok "Backed up Configuration and Data"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "homelable" "Pouzor/homelable" "tarball" "latest" "/opt/homelable"
+
+    msg_info "Updating Python Dependencies"
+    cd /opt/homelable/backend
+    $STD uv venv /opt/homelable/backend/.venv
+    $STD uv pip install --python /opt/homelable/backend/.venv/bin/python -r requirements.txt
+    msg_ok "Updated Python Dependencies"
+
+    msg_info "Rebuilding Frontend"
+    cd /opt/homelable/frontend
+    $STD npm ci
+    $STD npm run build
+    msg_ok "Rebuilt Frontend"
+
+    msg_info "Restoring Configuration and Data"
+    cp /opt/homelable.env.bak /opt/homelable/backend/.env
+    cp -r /opt/homelable_data_bak/. /opt/homelable/data/
+    rm -f /opt/homelable.env.bak
+    rm -rf /opt/homelable_data_bak
+    msg_ok "Restored Configuration and Data"
+
+    msg_info "Starting Service"
+    systemctl start homelable
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/immich.sh
+++ b/ct/immich.sh
@@ -109,7 +109,7 @@ EOF
    msg_ok "Image-processing libraries up to date"
  fi

-  RELEASE="v2.6.3"
+  RELEASE="v2.7.2"
  if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    if [[ $(cat ~/.immich) > "2.5.1" ]]; then
      msg_info "Enabling Maintenance Mode"
@@ -181,6 +181,12 @@ EOF
    unset SHARP_IGNORE_GLOBAL_LIBVIPS
    export SHARP_FORCE_GLOBAL_LIBVIPS=true
    $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
+
+    # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
+    if [[ -f "$APP_DIR/helmet.json" ]]; then
+      jq '.contentSecurityPolicy.directives["upgrade-insecure-requests"] = null' "$APP_DIR/helmet.json" >"$APP_DIR/helmet.json.tmp" && mv "$APP_DIR/helmet.json.tmp" "$APP_DIR/helmet.json"
+    fi
+
    cp "$APP_DIR"/package.json "$APP_DIR"/bin
    sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin

@@ -269,6 +275,9 @@ EOF
    if ! grep -q '^DB_HOSTNAME=' "$INSTALL_DIR"/.env; then
      sed -i '/^DB_DATABASE_NAME/a DB_HOSTNAME=127.0.0.1' "$INSTALL_DIR"/.env
    fi
+    if ! grep -q 'HELMET_FILE' "$INSTALL_DIR"/.env; then
+      echo "IMMICH_HELMET_FILE=true" >>"$INSTALL_DIR"/.env
+    fi

    if grep -q 'ExecStart=/usr/bin/node' /etc/systemd/system/immich-web.service; then
      sed -i '/^EnvironmentFile=/d' /etc/systemd/system/immich-web.service
--- a/ct/inspircd.sh
+++ b/ct/inspircd.sh
@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: kristocopani
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.inspircd.org/ | Github: https://github.com/inspircd/inspircd
-
-APP="InspIRCd"
-var_tags="${var_tags:-IRC}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /lib/systemd/system/inspircd.service ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "inspircd" "inspircd/inspircd"; then
-    msg_info "Stopping Service"
-    systemctl stop inspircd
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "inspircd" "inspircd/inspircd" "binary" "latest" "/opt/inspircd" "inspircd_*.deb13u1_amd64.deb"
-
-    msg_info "Starting Service"
-    systemctl start inspircd
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Server-Acces it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}${IP}:6667${CL}"
--- a/ct/ironclaw.sh
+++ b/ct/ironclaw.sh
@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/nearai/ironclaw
+
+APP="IronClaw"
+var_tags="${var_tags:-ai;agent;security}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /usr/local/bin/ironclaw ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "ironclaw-bin" "nearai/ironclaw"; then
+    msg_info "Stopping Service"
+    systemctl stop ironclaw
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Configuration"
+    cp /root/.ironclaw/.env /root/ironclaw.env.bak
+    msg_ok "Backed up Configuration"
+
+    fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
+      "ironclaw-$(uname -m)-unknown-linux-$([[ -f /etc/alpine-release ]] && echo "musl" || echo "gnu").tar.gz"
+    chmod +x /usr/local/bin/ironclaw
+
+    msg_info "Restoring Configuration"
+    cp /root/ironclaw.env.bak /root/.ironclaw/.env
+    rm -f /root/ironclaw.env.bak
+    msg_ok "Restored Configuration"
+
+    msg_info "Starting Service"
+    systemctl start ironclaw
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Complete setup by running:${CL}"
+echo -e "${TAB}${BGN}ironclaw onboard${CL}"
+echo -e "${INFO}${YW} Then start the service:${CL}"
+echo -e "${TAB}${BGN}systemctl start ironclaw${CL}"
+echo -e "${INFO}${YW} Access the Web UI at:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
+echo -e "${INFO}${YW} Auth token and database credentials:${CL}"
+echo -e "${TAB}${BGN}cat /root/.ironclaw/.env${CL}"
--- a/ct/kasm.sh
+++ b/ct/kasm.sh
@@ -15,6 +15,7 @@ var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-0}"
 var_fuse="${var_fuse:-yes}"
 var_tun="${var_tun:-yes}"
+var_kasm_version="${var_kasm_version:-}"

 header_info "$APP"
 variables
@@ -32,18 +33,21 @@ function update_script() {

  msg_info "Checking for new version"
  CURRENT_VERSION=$(readlink -f /opt/kasm/current | awk -F'/' '{print $4}')
-  KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
-  if [[ -z "$KASM_URL" ]]; then
-    SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
-    if [[ -n "$SERVICE_IMAGE_URL" ]]; then
-      KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-      KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
-    fi
-  else
-    KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-  fi
+  KASM_VERSION=$(curl -s https://kasm.com/downloads | grep -oP '<h1[^>]*>.*?</h1>' | sed -E 's/<\/?h1[^>]*>//g' | grep -oP '\d+\.\d+\.\d+')
+  KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION:-var_kasm_version}.tar.gz"
  
-  if [[ -z "$KASM_URL" ]] || [[ -z "$KASM_VERSION" ]]; then
+  # KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
+  # if [[ -z "$KASM_URL" ]]; then
+  #   SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
+  #   if [[ -n "$SERVICE_IMAGE_URL" ]]; then
+  #     KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+  #     KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+  #   fi
+  # else
+  #   KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+  # fi
+  
+  if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
    msg_error "Unable to detect latest Kasm release URL."
    exit 250
  fi
--- a/ct/kubo.sh
+++ b/ct/kubo.sh
@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster) | Co-Author: ulmentflam
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ipfs/kubo
-
-APP="Kubo"
-var_tags="${var_tags:-sharing}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /usr/local/kubo/ipfs ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "kubo" "ipfs/kubo"; then
-    msg_info "Stopping service"
-    systemctl stop ipfs
-    msg_ok "Stopped service"
-
-    fetch_and_deploy_gh_release "kubo" "ipfs/kubo" "prebuild" "latest" "/usr/local/kubo" "kubo*linux-amd64.tar.gz"
-
-    msg_info "Starting service"
-    systemctl start ipfs
-    msg_ok "Service started"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5001/webui${CL}"
--- a/ct/neo4j.sh
+++ b/ct/neo4j.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 tteck
-# Author: tteck | Co-Author: havardthom
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://neo4j.com/product/neo4j-graph-database/
-
-APP="Neo4j"
-var_tags="${var_tags:-database}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /etc/neo4j ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  JAVA_VERSION="21" setup_java
-
-  msg_info "Updating ${APP}"
-  $STD apt update
-  $STD apt -y upgrade
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:7474${CL}"
--- a/ct/nginxproxymanager.sh
+++ b/ct/nginxproxymanager.sh
@@ -86,6 +86,7 @@ Wants=network-online.target

 [Service]
 Type=simple
+ExecStartPre=-/bin/mkdir -p /tmp/nginx/body /run/nginx
 ExecStartPre=/usr/local/openresty/nginx/sbin/nginx -t
 ExecStart=/usr/local/openresty/nginx/sbin/nginx -g 'daemon off;'

--- a/ct/nodebb.sh
+++ b/ct/nodebb.sh
@@ -1,59 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (Canbiz)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/NodeBB/NodeBB
-
-APP="NodeBB"
-var_tags="${var_tags:-forum}"
-var_disk="${var_disk:-10}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-2048}"
-var_os="${var_os:-ubuntu}"
-var_version="${var_version:-24.04}"
-var_unprivileged="${var_unprivileged:-1}"
-
-# App Output & Base Settings
-header_info "$APP"
-
-# Core
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/nodebb ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "nodebb" "NodeBB/NodeBB"; then
-    msg_info "Stopping Service"
-    systemctl stop nodebb
-    msg_ok "Stopped Service"
-
-    msg_info "Updating ${APP}"
-    cd /opt/nodebb
-    $STD ./nodebb upgrade
-    echo "${CHECK_UPDATE_RELEASE}" >~/.nodebb
-    msg_ok "Updated ${APP}"
-
-    msg_info "Starting Service"
-    systemctl start nodebb
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4567${CL}"
--- a/ct/opengist.sh
+++ b/ct/opengist.sh
@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Jonathan (jd-apprentice)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://opengist.io/ | Github: https://github.com/thomiceli/opengist
-
-APP="Opengist"
-var_tags="${var_tags:-development}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/opengist ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "opengist" "thomiceli/opengist"; then
-    msg_info "Stopping Service"
-    systemctl stop opengist
-    msg_ok "Stopped Service"
-
-    msg_info "Creating backup"
-    mv /opt/opengist /opt/opengist-backup
-    msg_ok "Backup created"
-
-    fetch_and_deploy_gh_release "opengist" "thomiceli/opengist" "prebuild" "latest" "/opt/opengist" "opengist*linux-amd64.tar.gz"
-
-    msg_info "Restoring Configuration"
-    mv /opt/opengist-backup/config.yml /opt/opengist/config.yml
-    msg_ok "Configuration Restored"
-
-    msg_info "Starting Service"
-    systemctl start opengist
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6157${CL}"
--- a/ct/openthread-br.sh
+++ b/ct/openthread-br.sh
@@ -0,0 +1,87 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://openthread.io/guides/border-router
+
+APP="OpenThread-BR"
+var_tags="${var_tags:-thread;iot;border-router;matter}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-0}"
+var_tun="${var_tun:-yes}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/ot-br-posix ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  cd /opt/ot-br-posix
+  LOCAL_COMMIT=$(git rev-parse HEAD)
+  $STD git fetch --depth 1 origin main
+  REMOTE_COMMIT=$(git rev-parse origin/main)
+
+  if [[ "${LOCAL_COMMIT}" == "${REMOTE_COMMIT}" ]]; then
+    msg_ok "Already up to date (${LOCAL_COMMIT:0:7})"
+    exit
+  fi
+
+  msg_info "Stopping Services"
+  systemctl stop otbr-web
+  systemctl stop otbr-agent
+  msg_ok "Stopped Services"
+
+  msg_info "Updating Source"
+  $STD git reset --hard origin/main
+  $STD git submodule update --depth 1 --init --recursive
+  msg_ok "Updated Source"
+
+  msg_info "Rebuilding OpenThread Border Router (Patience)"
+  cd /opt/ot-br-posix/build
+  $STD cmake -GNinja \
+    -DBUILD_TESTING=OFF \
+    -DCMAKE_INSTALL_PREFIX=/usr \
+    -DOTBR_DBUS=ON \
+    -DOTBR_MDNS=openthread \
+    -DOTBR_REST=ON \
+    -DOTBR_WEB=ON \
+    -DOTBR_BORDER_ROUTING=ON \
+    -DOTBR_BACKBONE_ROUTER=ON \
+    -DOT_FIREWALL=ON \
+    -DOT_POSIX_NAT64_CIDR="192.168.255.0/24" \
+    ..
+  $STD ninja
+  $STD ninja install
+  msg_ok "Rebuilt OpenThread Border Router"
+
+  msg_info "Starting Services"
+  systemctl start otbr-agent
+  systemctl start otbr-web
+  msg_ok "Started Services"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/ots.sh
+++ b/ct/ots.sh
@@ -1,54 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: bvdberg01
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Luzifer/ots
-
-APP="OTS"
-var_tags="${var_tags:-secrets-sharer}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-3}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/ots ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "ots" "Luzifer/ots"; then
-    msg_info "Stopping Services"
-    systemctl stop ots
-    systemctl stop nginx
-    msg_ok "Stopped Services"
-
-    fetch_and_deploy_gh_release "ots" "Luzifer/ots" "prebuild" "latest" "/opt/ots" "ots_linux_amd64.tgz"
-
-    msg_info "Starting Services"
-    systemctl start ots
-    systemctl start nginx
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}${CL}"
--- a/ct/papra.sh
+++ b/ct/papra.sh
@@ -35,14 +35,37 @@ function update_script() {
    msg_ok "Stopped Service"

    msg_info "Backing up Configuration"
-    cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
+    if [[ -f /opt/papra/apps/papra-server/.env ]]; then
+      cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
+    fi
    msg_ok "Backed up Configuration"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball"

    msg_info "Building Application"
    cd /opt/papra
-    cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
+    if [[ -f /opt/papra_env.bak ]]; then
+      cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
+    else
+      msg_warn ".env missing, regenerating from defaults"
+      LOCAL_IP=$(hostname -I | awk '{print $1}')
+      cat <<EOF >/opt/papra/apps/papra-server/.env
+NODE_ENV=production
+SERVER_SERVE_PUBLIC_DIR=true
+PORT=1221
+DATABASE_URL=file:/opt/papra_data/db/db.sqlite
+DOCUMENT_STORAGE_FILESYSTEM_ROOT=/opt/papra_data/documents
+PAPRA_CONFIG_DIR=/opt/papra_data
+AUTH_SECRET=$(cat /opt/papra_data/.secret)
+BETTER_AUTH_SECRET=$(cat /opt/papra_data/.secret)
+BETTER_AUTH_TELEMETRY=0
+CLIENT_BASE_URL=http://${LOCAL_IP}:1221
+SERVER_BASE_URL=http://${LOCAL_IP}:1221
+EMAILS_DRY_RUN=true
+INGESTION_FOLDER_IS_ENABLED=true
+INGESTION_FOLDER_ROOT_PATH=/opt/papra_data/ingestion
+EOF
+    fi
    $STD pnpm install --frozen-lockfile
    $STD pnpm --filter "@papra/app-client..." run build
    $STD pnpm --filter "@papra/app-server..." run build
--- a/ct/pf2etools.sh
+++ b/ct/pf2etools.sh
@@ -1,59 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: TheRealVira
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://pf2etools.com/ | Github: https://github.com/Pf2eToolsOrg/Pf2eTools
-
-APP="Pf2eTools"
-var_tags="${var_tags:-wiki}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-6}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d "/opt/${APP}" ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "pf2etools" "Pf2eToolsOrg/Pf2eTools"; then
-    msg_info "Updating System"
-    $STD apt update
-    $STD apt -y upgrade
-    msg_ok "Updated System"
-
-    rm -rf /opt/Pf2eTools
-    fetch_and_deploy_gh_release "pf2etools" "Pf2eToolsOrg/Pf2eTools" "tarball" "latest" "/opt/Pf2eTools"
-
-    msg_info "Updating ${APP}"
-    cd /opt/Pf2eTools
-    $STD npm install
-    $STD npm run build
-    chown -R www-data: "/opt/${APP}"
-    chmod -R 755 "/opt/${APP}"
-    msg_ok "Updated ${APP}"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/ps5-mqtt.sh
+++ b/ct/ps5-mqtt.sh
@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: liecno
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/FunkeyFlo/ps5-mqtt/
-
-APP="PS5-MQTT"
-var_tags="${var_tags:-smarthome;automation}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-3}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/ps5-mqtt ]]; then
-    msg_error "No ${APP} installation found!"
-    exit
-  fi
-  if check_for_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt"; then
-    msg_info "Stopping service"
-    systemctl stop ps5-mqtt
-    msg_ok "Stopped service"
-
-    fetch_and_deploy_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt" "tarball"
-
-    msg_info "Configuring ${APP}"
-    cd /opt/ps5-mqtt/ps5-mqtt/
-    $STD npm install
-    $STD npm run build
-    msg_ok "Configured ${APP}"
-
-    msg_info "Starting service"
-    systemctl start ps5-mqtt
-    msg_ok "Started service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8645${CL}"
--- a/ct/rustypaste.sh
+++ b/ct/rustypaste.sh
@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -s https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: GoldenSpringness
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/orhun/rustypaste
-
-APP="rustypaste"
-var_tags="${var_tags:-pastebin;storage}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/rustypaste/rustypaste ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "rustypaste" "orhun/rustypaste"; then
-    msg_info "Stopping Services"
-    systemctl stop rustypaste
-    msg_ok "Stopped Services"
-
-    msg_info "Creating Backup"
-    tar -czf "/opt/rustypaste_backup_$(date +%F).tar.gz" /opt/rustypaste/upload 2>/dev/null || true
-    cp /opt/rustypaste/config.toml /tmp/rustypaste_config.toml.bak
-    msg_ok "Backup Created"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "rustypaste" "orhun/rustypaste" "prebuild" "latest" "/opt/rustypaste" "*x86_64-unknown-linux-gnu.tar.gz"
-
-    msg_info "Restoring Data"
-    mv /tmp/rustypaste_config.toml.bak /opt/rustypaste/config.toml
-    tar -xzf "/opt/rustypaste_backup_$(date +%F).tar.gz" -C /opt/rustypaste/upload 2>/dev/null || true
-    rm -rf /opt/rustypaste_backup_$(date +%F).tar.gz
-    msg_ok "Restored Data"
-
-    msg_info "Starting Services"
-    systemctl start rustypaste
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-
-  if check_for_gh_release "rustypaste-cli" "orhun/rustypaste-cli"; then
-    fetch_and_deploy_gh_release "rustypaste-cli" "orhun/rustypaste-cli" "prebuild" "latest" "/usr/local/bin" "*x86_64-unknown-linux-gnu.tar.gz"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}rustypaste setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"
--- a/ct/seelf.sh
+++ b/ct/seelf.sh
@@ -1,56 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/YuukanOO/seelf
-
-APP="seelf"
-var_tags="${var_tags:-server;docker}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/seelf ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "seelf" "YuukanOO/seelf"; then
-    msg_info "Stopping Service"
-    systemctl stop seelf
-    msg_info "Stopped Service"
-
-    msg_info "Updating seelf"
-    cd /opt/seelf 
-    $STD make build
-    msg_ok "Updated seelf"
-
-    msg_info "Starting Service"
-    systemctl start seelf
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/ct/streamlink-webui.sh
+++ b/ct/streamlink-webui.sh
@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/CrazyWolf13/streamlink-webui
-
-APP="streamlink-webui"
-var_tags="${var_tags:-download;streaming}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/streamlink-webui ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "streamlink-webui" "CrazyWolf13/streamlink-webui"; then
-    msg_info "Stopping Service"
-    systemctl stop streamlink-webui
-    msg_info "Stopped Service"
-
-    NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
-    setup_uv
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "streamlink-webui" "CrazyWolf13/streamlink-webui" "tarball"
-
-    msg_info "Updating streamlink-webui"
-    $STD uv venv --clear /opt/streamlink-webui/backend/src/.venv
-    source /opt/streamlink-webui/backend/src/.venv/bin/activate
-    $STD uv pip install -r /opt/streamlink-webui/backend/src/requirements.txt --python=/opt/streamlink-webui/backend/src/.venv
-    cd /opt/streamlink-webui/frontend/src
-    $STD yarn install
-    $STD yarn build
-    chmod +x /opt/streamlink-webui/start.sh
-    msg_ok "Updated streamlink-webui"
-
-    msg_info "Starting Service"
-    systemctl start streamlink-webui
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"
--- a/ct/typesense.sh
+++ b/ct/typesense.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: tlissak | Co-Author MickLesk
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://typesense.org/
-
-APP="TypeSense"
-var_tags="${var_tags:-database}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/typesense/typesense-server.ini ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "typesense" "typesense/typesense"; then
-    msg_info "Updating Typesense"
-    $STD apt update
-    $STD apt -y upgrade
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following IP:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}${IP}:8108${CL}"
--- a/ct/uhf.sh
+++ b/ct/uhf.sh
@@ -38,8 +38,14 @@ function update_script() {
    $STD apt -y upgrade
    msg_ok "Updated LXC"

+    msg_info "Updating UHF Server"
+    if dpkg -l ffmpeg 2>&1 | grep -q "ii"; then
+      apt remove ffmpeg -y && apt autoremove -y
+    fi
+    setup_ffmpeg
    fetch_and_deploy_gh_release "comskip" "swapplications/comskip" "prebuild" "latest" "/opt/comskip" "comskip-x64-*.zip"
    fetch_and_deploy_gh_release "uhf-server" "swapplications/uhf-server-dist" "prebuild" "latest" "/opt/uhf-server" "UHF.Server-linux-x64-*.zip"
+    msg_ok "Updated UHF Server"

    msg_info "Starting Service"
    systemctl start uhf-server
--- a/ct/valkey.sh
+++ b/ct/valkey.sh
@@ -1,45 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: pshankinclarke (lazarillo)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://valkey.io/
-
-APP="Valkey"
-var_tags="${var_tags:-database}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -f /lib/systemd/system/valkey-server.service ]]; then
-        msg_error "No Valkey Installation Found!"
-        exit
-    fi
-    msg_info "Updating Valkey LXC"
-    $STD apt update
-    $STD apt -y upgrade
-    msg_ok "Updated Valkey LXC"
-    msg_ok "Updated successfully!"
-    exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6379${CL}"
--- a/ct/verdaccio.sh
+++ b/ct/verdaccio.sh
@@ -1,49 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: BrynnJKnight
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://verdaccio.org/ | Github: https://github.com/verdaccio/verdaccio
-
-APP="Verdaccio"
-var_tags="${var_tags:-dev-tools;npm;registry}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/systemd/system/verdaccio.service ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Updating LXC Container"
-  $STD apt update
-  $STD apt upgrade -y
-  msg_ok "Updated LXC Container"
-
-  NODE_VERSION="24" NODE_MODULE="verdaccio" setup_nodejs
-  systemctl restart verdaccio
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4873${CL}"
--- a/ct/wavelog.sh
+++ b/ct/wavelog.sh
@@ -1,77 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Don Locke (DonLocke)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/wavelog/wavelog
-
-APP="Wavelog"
-var_tags="${var_tags:-radio-logging}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/wavelog ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  setup_mariadb
-  if check_for_gh_release "wavelog" "wavelog/wavelog"; then
-    msg_info "Stopping Services"
-    systemctl stop apache2
-    msg_ok "Services Stopped"
-
-    msg_info "Creating backup"
-    cp /opt/wavelog/application/config/config.php /opt/config.php
-    cp /opt/wavelog/application/config/database.php /opt/database.php
-    cp -r /opt/wavelog/userdata /opt/userdata
-    if [[ -f /opt/wavelog/assets/js/sections/custom.js ]]; then
-      cp /opt/wavelog/assets/js/sections/custom.js /opt/custom.js
-    fi
-    msg_ok "Backup created"
-
-    rm -rf /opt/wavelog
-    fetch_and_deploy_gh_release "wavelog" "wavelog/wavelog" "tarball"
-
-    msg_info "Updating Wavelog"
-    rm -rf /opt/wavelog/install
-    mv /opt/config.php /opt/wavelog/application/config/config.php
-    mv /opt/database.php /opt/wavelog/application/config/database.php
-    cp -r /opt/userdata/* /opt/wavelog/userdata
-    rm -rf /opt/userdata
-    if [[ -f /opt/custom.js ]]; then
-      mv /opt/custom.js /opt/wavelog/assets/js/sections/custom.js
-    fi
-    chown -R www-data:www-data /opt/wavelog/
-    find /opt/wavelog/ -type d -exec chmod 755 {} \;
-    find /opt/wavelog/ -type f -exec chmod 664 {} \;
-    msg_ok "Updated Wavelog"
-
-    msg_info "Starting Services"
-    systemctl start apache2
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/writefreely.sh
+++ b/ct/writefreely.sh
@@ -1,72 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: StellaeAlis
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/writefreely/writefreely
-
-APP="WriteFreely"
-var_tags="${var_tags:-writing}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/writefreely ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "writefreely" "writefreely/writefreely"; then
-    msg_info "Stopping Services"
-    systemctl stop writefreely
-    msg_ok "Stopped Services"
-
-    msg_info "Creating Backup"
-    mkdir -p /tmp/writefreely_backup
-    cp /opt/writefreely/keys /tmp/writefreely_backup/ 2>/dev/null
-    cp /opt/writefreely/config.ini /tmp/writefreely_backup/ 2>/dev/null
-    msg_ok "Created Backup"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "writefreely" "writefreely/writefreely" "prebuild" "latest" "/opt/writefreely" "writefreely_*_linux_amd64.tar.gz"
-
-    msg_info "Restoring Data"
-    cp /tmp/writefreely_backup/config.ini /opt/writefreely/ 2>/dev/null
-    cp /tmp/writefreely_backup/keys/* /opt/writefreely/keys/ 2>/dev/null
-    rm -rf /tmp/writefreely_backup
-    msg_ok "Restored Data"
-
-    msg_info "Running Post-Update Tasks"
-    cd /opt/writefreely
-    $STD ./writefreely db migrate
-    ln -s /opt/writefreely/writefreely /usr/local/bin/writefreely
-    msg_ok "Ran Post-Update Tasks"
-
-    msg_info "Starting Services"
-    systemctl start writefreely
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/install/alpine-ironclaw-install.sh
+++ b/install/alpine-ironclaw-install.sh
@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/nearai/ironclaw
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apk add openssl
+msg_ok "Installed Dependencies"
+
+msg_info "Installing PostgreSQL"
+$STD apk add postgresql17 postgresql17-openrc postgresql-pgvector postgresql-common
+$STD rc-service postgresql setup
+$STD rc-update add postgresql default
+$STD rc-service postgresql start
+msg_ok "Installed PostgreSQL"
+
+msg_info "Setting up Database"
+PG_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+$STD su -s /bin/sh postgres -c "psql -c \"CREATE ROLE ironclaw WITH LOGIN PASSWORD '${PG_PASS}';\""
+$STD su -s /bin/sh postgres -c "psql -c \"CREATE DATABASE ironclaw WITH OWNER ironclaw;\""
+$STD su -s /bin/sh postgres -c "psql -d ironclaw -c \"CREATE EXTENSION IF NOT EXISTS vector;\""
+msg_ok "Set up Database"
+
+fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
+  "ironclaw-$(uname -m)-unknown-linux-musl.tar.gz"
+chmod +x /usr/local/bin/ironclaw
+
+msg_info "Configuring IronClaw"
+mkdir -p /root/.ironclaw
+GATEWAY_TOKEN=$(openssl rand -hex 32)
+cat <<EOF >/root/.ironclaw/.env
+DATABASE_URL=postgresql://ironclaw:${PG_PASS}@localhost:5432/ironclaw?sslmode=disable
+GATEWAY_ENABLED=true
+GATEWAY_HOST=0.0.0.0
+GATEWAY_PORT=3000
+GATEWAY_AUTH_TOKEN=${GATEWAY_TOKEN}
+CLI_ENABLED=false
+AGENT_NAME=ironclaw
+RUST_LOG=ironclaw=info,tower_http=info
+EOF
+chmod 600 /root/.ironclaw/.env
+msg_ok "Configured IronClaw"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/init.d/ironclaw
+#!/sbin/openrc-run
+
+name="IronClaw"
+description="IronClaw AI Agent"
+command="/usr/local/bin/ironclaw"
+command_background=true
+pidfile="/run/ironclaw.pid"
+directory="/root"
+supervise_daemon_args="--env-file /root/.ironclaw/.env"
+
+depend() {
+  need net postgresql
+}
+EOF
+chmod +x /etc/init.d/ironclaw
+$STD rc-update add ironclaw default
+msg_ok "Created Service"
+
+motd_ssh
+customize
--- a/install/apache-cassandra-install.sh
+++ b/install/apache-cassandra-install.sh
@@ -1,31 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://cassandra.apache.org/_/index.html
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-JAVA_VERSION="11" setup_java
-
-msg_info "Installing Apache Cassandra"
-setup_deb822_repo \
-  "cassandra" \
-  "https://downloads.apache.org/cassandra/KEYS" \
-  "https://debian.cassandra.apache.org" \
-  "41x" \
-  "main"
-$STD apt install -y cassandra cassandra-tools
-sed -i -e 's/^rpc_address: localhost/#rpc_address: localhost/g' -e 's/^# rpc_interface: eth1/rpc_interface: eth0/g' /etc/cassandra/cassandra.yaml
-msg_ok "Installed Apache Cassandra"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/argus-install.sh
+++ b/install/argus-install.sh
@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://release-argus.io/ | Github: https://github.com/release-argus/Argus
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "Argus" "release-argus/Argus" "singlefile" "latest" "/opt/argus" "Argus*linux-amd64"
-
-msg_info "Setup Argus Config"
-cat <<EOF >/opt/argus/config.yml
-settings:
-  log:
-    level: INFO
-    timestamps: false
-  data:
-    database_file: data/argus.db
-  web:
-    listen_host: 0.0.0.0
-    listen_port: 8080
-    route_prefix: /
-
-defaults:
-  service:
-    options:
-      interval: 30m
-      semantic_versioning: true
-    latest_version:
-      allow_invalid_certs: false
-      use_prerelease: false
-    dashboard:
-      auto_approve: true
-  webhook:
-    desired_status_code: 201
-
-service:
-  release-argus/argus:
-    latest_version:
-      type: github
-      url: release-argus/argus
-    dashboard:
-      icon: https://raw.githubusercontent.com/release-argus/Argus/master/web/ui/react-app/public/favicon.svg
-      icon_link_to: https://release-argus.io
-      web_url: https://github.com/release-argus/Argus/blob/master/CHANGELOG.md
-
-  community-scripts/ProxmoxVE:
-    latest_version:
-      type: github
-      url: community-scripts/ProxmoxVE
-      use_prerelease: false
-    dashboard:
-      icon: https://raw.githubusercontent.com/community-scripts/ProxmoxVE/refs/heads/main/misc/images/logo.png
-      icon_link_to: https://community-scripts.org/
-      web_url: https://github.com/community-scripts/ProxmoxVE/releases
-EOF
-msg_ok "Setup Config"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/argus.service
-[Unit]
-Description=Argus
-After=network.target
-[Service]
-Type=simple
-WorkingDirectory=/opt/argus
-ExecStart=/opt/argus/Argus
-Restart=on-failure
-RestartSec=5
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now argus
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/bambuddy-install.sh
+++ b/install/bambuddy-install.sh
@@ -14,7 +14,7 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt install -y libglib2.0-0
+$STD apt install -y libglib2.0-0 ffmpeg
 msg_ok "Installed Dependencies"

 PYTHON_VERSION="3.13" setup_uv
--- a/install/commafeed-install.sh
+++ b/install/commafeed-install.sh
@@ -1,42 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.commafeed.com/#/welcome | Github: https://github.com/Athou/commafeed
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y rsync
-msg_ok "Installed Dependencies"
-
-JAVA_VERSION="25" setup_java
-fetch_and_deploy_gh_release "commafeed" "Athou/commafeed" "prebuild" "latest" "/opt/commafeed" "commafeed-*-h2-jvm.zip"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/commafeed.service
-[Unit]
-Description=CommaFeed Service
-After=network.target
-
-[Service]
-ExecStart=java -Xminf0.05 -Xmaxf0.1 -jar quarkus-run.jar
-WorkingDirectory=/opt/commafeed/
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now commafeed
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/daemonsync-install.sh
+++ b/install/daemonsync-install.sh
@@ -1,28 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://daemonsync.me/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y g++-multilib
-msg_ok "Installed Dependencies"
-
-msg_info "Installing Daemon Sync Server"
-curl -fsSL "https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/daemonsync_2.2.0.0059_amd64.deb" -o "daemonsync_2.2.0.0059_amd64.deb"
-$STD dpkg -i daemonsync_2.2.0.0059_amd64.deb
-rm -rf daemonsync_2.2.0.0059_amd64.deb
-msg_ok "Installed Daemon Sync Server"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/flaresolverr-install.sh
+++ b/install/flaresolverr-install.sh
@@ -29,7 +29,9 @@ setup_deb822_repo \
 $STD apt update
 $STD apt install -y google-chrome-stable
 # remove google-chrome.list added by google-chrome-stable
-rm /etc/apt/sources.list.d/google-chrome.list
+if [ -f /etc/apt/sources.list.d/google-chrome.list ]; then
+  rm /etc/apt/sources.list.d/google-chrome.list
+fi
 msg_ok "Installed Chrome"

 fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
--- a/install/globaleaks-install.sh
+++ b/install/globaleaks-install.sh
@@ -1,26 +0,0 @@
-#!/usr/bin/env bash
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Giovanni Pellerano (evilaliv3)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/globaleaks/globaleaks-whistleblowing-software
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Setup GlobaLeaks"
-DISTRO_CODENAME="$(awk -F= '/^VERSION_CODENAME=/{print $2}' /etc/os-release)"
-curl -fsSL https://deb.globaleaks.org/globaleaks.asc | gpg --dearmor -o /etc/apt/trusted.gpg.d/globaleaks.gpg
-echo "deb [signed-by=/etc/apt/trusted.gpg.d/globaleaks.gpg] http://deb.globaleaks.org $DISTRO_CODENAME/" >/etc/apt/sources.list.d/globaleaks.list
-echo 'APPARMOR_SANDBOXING=0' >/etc/default/globaleaks
-$STD apt update
-$STD apt -y -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold install globaleaks
-msg_ok "Setup GlobaLeaks"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/grist-install.sh
+++ b/install/grist-install.sh
@@ -28,7 +28,6 @@ export CYPRESS_INSTALL_BINARY=0
 export NODE_OPTIONS="--max-old-space-size=2048"
 cd /opt/grist
 $STD yarn install
-$STD yarn run install:ee
 $STD yarn run build:prod
 $STD yarn run install:python
 cat <<EOF >/opt/grist/.env
--- a/install/hivemq-install.sh
+++ b/install/hivemq-install.sh
@@ -1,34 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.hivemq.com/ | Github: https://github.com/hivemq/hivemq-community-edition
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-JAVA_VERSION="21" setup_java
-fetch_and_deploy_gh_release "hivemq" "hivemq/hivemq-community-edition" "prebuild" "latest" "/opt/hivemq" "hivemq-ce-*.zip"
-
-msg_info "Configuring HiveMQ CE"
-useradd -d /opt/hivemq hivemq
-chown -R hivemq:hivemq /opt/hivemq
-chmod +x /opt/hivemq/bin/run.sh
-cp /opt/hivemq/bin/init-script/hivemq.service /etc/systemd/system/hivemq.service
-rm /opt/hivemq/conf/config.xml
-mv /opt/hivemq/conf/examples/configuration/config-sample-tcp-and-websockets.xml /opt/hivemq/conf/config.xml
-msg_ok "Configured HiveMQ CE"
-
-msg_info "Starting service"
-systemctl enable -q --now hivemq
-msg_ok "Service started"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/homelable-install.sh
+++ b/install/homelable-install.sh
@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Pouzor/homelable
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nmap \
+  iputils-ping \
+  caddy
+msg_ok "Installed Dependencies"
+
+UV_PYTHON="3.13" setup_uv
+NODE_VERSION="20" setup_nodejs
+fetch_and_deploy_gh_release "homelable" "Pouzor/homelable" "tarball" "latest" "/opt/homelable"
+
+msg_info "Setting up Python Backend"
+cd /opt/homelable/backend
+$STD uv venv /opt/homelable/backend/.venv
+$STD uv pip install --python /opt/homelable/backend/.venv/bin/python -r requirements.txt
+msg_ok "Set up Python Backend"
+
+msg_info "Configuring Homelable"
+mkdir -p /opt/homelable/data
+SECRET_KEY=$(openssl rand -hex 32)
+BCRYPT_HASH=$(/opt/homelable/backend/.venv/bin/python -c "from passlib.context import CryptContext; print(CryptContext(schemes=['bcrypt']).hash('admin'))")
+cat <<EOF >/opt/homelable/backend/.env
+SECRET_KEY=${SECRET_KEY}
+SQLITE_PATH=/opt/homelable/data/homelab.db
+CORS_ORIGINS=["http://localhost:3000","http://${LOCAL_IP}:3000"]
+AUTH_USERNAME=admin
+AUTH_PASSWORD_HASH='${BCRYPT_HASH}'
+SCANNER_RANGES=["192.168.1.0/24"]
+STATUS_CHECKER_INTERVAL=60
+EOF
+msg_ok "Configured Homelable"
+
+msg_info "Building Frontend"
+cd /opt/homelable/frontend
+$STD npm ci
+$STD npm run build
+msg_ok "Built Frontend"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/homelable.service
+[Unit]
+Description=Homelable Backend
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/homelable/backend
+EnvironmentFile=/opt/homelable/backend/.env
+ExecStart=/opt/homelable/backend/.venv/bin/uvicorn app.main:app --host 127.0.0.1 --port 8000
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now homelable
+msg_ok "Created Service"
+
+msg_info "Configuring Caddy"
+cat <<EOF >/etc/caddy/Caddyfile
+:3000 {
+    root * /opt/homelable/frontend/dist
+    file_server
+
+    @websocket path /api/v1/status/ws/*
+    handle @websocket {
+        reverse_proxy 127.0.0.1:8000
+    }
+
+    handle /ws/* {
+        reverse_proxy 127.0.0.1:8000
+    }
+
+    handle /api/* {
+        reverse_proxy 127.0.0.1:8000
+    }
+
+    handle {
+        try_files {path} {path}.html /index.html
+    }
+}
+EOF
+systemctl reload caddy
+msg_ok "Configured Caddy"
+
+motd_ssh
+customize
+cleanup_lxc
--- a/install/immich-install.sh
+++ b/install/immich-install.sh
@@ -295,7 +295,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}

-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v2.6.3" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v2.7.2" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
 NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs

@@ -312,6 +312,12 @@ $STD pnpm --filter immich --frozen-lockfile build
 unset SHARP_IGNORE_GLOBAL_LIBVIPS
 export SHARP_FORCE_GLOBAL_LIBVIPS=true
 $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
+
+# Patch helmet.json: disable upgrade-insecure-requests for HTTP access
+if [[ -f "$APP_DIR/helmet.json" ]]; then
+  jq '.contentSecurityPolicy.directives["upgrade-insecure-requests"] = null' "$APP_DIR/helmet.json" >"$APP_DIR/helmet.json.tmp" && mv "$APP_DIR/helmet.json.tmp" "$APP_DIR/helmet.json"
+fi
+
 cp "$APP_DIR"/package.json "$APP_DIR"/bin
 sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin

@@ -419,6 +425,9 @@ IMMICH_VERSION=release
 NODE_ENV=production
 IMMICH_ALLOW_SETUP=true

+## Change to 'false' to disable CSP
+IMMICH_HELMET_FILE=true
+
 DB_HOSTNAME=127.0.0.1
 DB_USERNAME=${PG_DB_USER}
 DB_PASSWORD=${PG_DB_PASS}
--- a/install/inspircd-install.sh
+++ b/install/inspircd-install.sh
@@ -1,37 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: kristocopani
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.inspircd.org/ | Github: https://github.com/inspircd/inspircd
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "inspircd" "inspircd/inspircd" "binary" "latest" "/opt/inspircd" "inspircd_*.deb13u1_amd64.deb"
-
-msg_info "Configuring InspIRCd"
-cat <<EOF >/etc/inspircd/inspircd.conf
-<define name="networkDomain" value="community-scripts.org">
-<define name="networkName" value="Proxmox VE Helper-Scripts">
-
-<server
-        name="irc.&networkDomain;"
-        description="&networkName; IRC server"
-        network="&networkName;">
-<admin
-       name="Admin"
-       description="Supreme Overlord"
-       email="irc@&networkDomain;">
-<bind address="" port="6667" type="clients">
-EOF
-msg_ok "Installed InspIRCd"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/ironclaw-install.sh
+++ b/install/ironclaw-install.sh
@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/nearai/ironclaw
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+PG_VERSION="17" PG_MODULES="pgvector" setup_postgresql
+PG_DB_NAME="ironclaw" PG_DB_USER="ironclaw" PG_DB_EXTENSIONS="vector" setup_postgresql_db
+
+fetch_and_deploy_gh_release "ironclaw-bin" "nearai/ironclaw" "prebuild" "latest" "/usr/local/bin" \
+  "ironclaw-$(uname -m)-unknown-linux-$([[ -f /etc/alpine-release ]] && echo "musl" || echo "gnu").tar.gz"
+chmod +x /usr/local/bin/ironclaw
+
+msg_info "Configuring IronClaw"
+mkdir -p /root/.ironclaw
+GATEWAY_TOKEN=$(openssl rand -hex 32)
+cat <<EOF >/root/.ironclaw/.env
+DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}?sslmode=disable
+GATEWAY_ENABLED=true
+GATEWAY_HOST=0.0.0.0
+GATEWAY_PORT=3000
+GATEWAY_AUTH_TOKEN=${GATEWAY_TOKEN}
+CLI_ENABLED=false
+AGENT_NAME=ironclaw
+RUST_LOG=ironclaw=info,tower_http=info
+EOF
+chmod 600 /root/.ironclaw/.env
+msg_ok "Configured IronClaw"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/ironclaw.service
+[Unit]
+Description=IronClaw AI Agent
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/root
+ExecStart=/usr/local/bin/ironclaw
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q ironclaw
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
--- a/install/kasm-install.sh
+++ b/install/kasm-install.sh
@@ -18,18 +18,21 @@ $STD sh <(curl -fsSL https://get.docker.com/)
 msg_ok "Installed Docker"

 msg_info "Detecting latest Kasm Workspaces release"
-KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
-if [[ -z "$KASM_URL" ]]; then
-  SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
-  if [[ -n "$SERVICE_IMAGE_URL" ]]; then
-    KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-    KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
-  fi
-else
-  KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-fi
+KASM_VERSION=$(curl -s https://kasm.com/downloads | grep -oP '<h1[^>]*>.*?</h1>' | sed -E 's/<\/?h1[^>]*>//g' | grep -oP '\d+\.\d+\.\d+')
+KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION:-var_kasm_version}.tar.gz"
+  
+# KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
+# if [[ -z "$KASM_URL" ]]; then
+#   SERVICE_IMAGE_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_service_images_amd64_[0-9]+\.[0-9]+\.[0-9]+\.tar\.gz' | head -n 1)
+#   if [[ -n "$SERVICE_IMAGE_URL" ]]; then
+#     KASM_VERSION=$(echo "$SERVICE_IMAGE_URL" | sed -E 's/.*kasm_release_service_images_amd64_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+#     KASM_URL="https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+#   fi
+# else
+#   KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
+# fi

-if [[ -z "$KASM_URL" ]] || [[ -z "$KASM_VERSION" ]]; then
+if [[ -z "$KASM_VERSION" ]] || [[ -z "$KASM_URL" ]]; then
  msg_error "Unable to detect latest Kasm release URL."
  exit 250
 fi
--- a/install/kubo-install.sh
+++ b/install/kubo-install.sh
@@ -1,47 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 tteck
-# Author: tteck (tteckster)
-# Co-Author: ulmentflam
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ipfs/kubo
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "kubo" "ipfs/kubo" "prebuild" "latest" "/usr/local/kubo" "kubo*linux-amd64.tar.gz"
-
-msg_info "Configuring IPFS"
-$STD ln -s /usr/local/kubo/ipfs /usr/local/bin/ipfs
-$STD ipfs init
-ipfs config Addresses.API /ip4/0.0.0.0/tcp/5001
-ipfs config Addresses.Gateway /ip4/0.0.0.0/tcp/8080
-ipfs config --json API.HTTPHeaders.Access-Control-Allow-Origin "[\"http://${LOCAL_IP}:5001\", \"http://localhost:3000\", \"http://127.0.0.1:5001\", \"https://webui.ipfs.io\", \"http://0.0.0.0:5001\"]"
-ipfs config --json API.HTTPHeaders.Access-Control-Allow-Methods '["PUT", "POST"]'
-msg_ok "Configured IPFS"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/ipfs.service
-[Unit]
-Description=IPFS Daemon
-After=syslog.target network.target
-
-[Service]
-Type=simple
-ExecStart=/usr/local/bin/ipfs daemon
-Restart=on-failure
-Environment=HOME=/root
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now ipfs
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/motioneye-install.sh
+++ b/install/motioneye-install.sh
@@ -50,6 +50,7 @@ msg_ok "Installed MotionEye"

 msg_info "Creating Service"
 curl -fsSL "https://raw.githubusercontent.com/motioneye-project/motioneye/dev/motioneye/extra/motioneye.systemd" -o "/etc/systemd/system/motioneye.service"
+sed -i 's/^User=.*/User=root/' /etc/systemd/system/motioneye.service
 systemctl enable -q --now motioneye
 msg_ok "Created Service"

--- a/install/neo4j-install.sh
+++ b/install/neo4j-install.sh
@@ -1,30 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 tteck
-# Author: tteck
-# Co-Author: havardthom
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://neo4j.com/product/neo4j-graph-database/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-JAVA_VERSION="21" setup_java
-
-msg_info "Installing Neo4j (patience)"
-curl -fsSL "https://debian.neo4j.com/neotechnology.gpg.key" | gpg --dearmor -o /etc/apt/keyrings/neotechnology.gpg
-echo 'deb [signed-by=/etc/apt/keyrings/neotechnology.gpg] https://debian.neo4j.com stable latest' >/etc/apt/sources.list.d/neo4j.list
-$STD apt update
-$STD apt install -y neo4j
-sed -i '/server.default_listen_address/s/^#//' /etc/neo4j/neo4j.conf
-systemctl enable -q --now neo4j
-msg_ok "Installed Neo4j"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/nginxproxymanager-install.sh
+++ b/install/nginxproxymanager-install.sh
@@ -62,6 +62,7 @@ Wants=network-online.target

 [Service]
 Type=simple
+ExecStartPre=-/bin/mkdir -p /tmp/nginx/body /run/nginx
 ExecStartPre=/usr/local/openresty/nginx/sbin/nginx -t
 ExecStart=/usr/local/openresty/nginx/sbin/nginx -g 'daemon off;'

--- a/install/nodebb-install.sh
+++ b/install/nodebb-install.sh
@@ -1,133 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2024 tteck
-# Author: MickLesk (Canbiz)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/NodeBB/NodeBB
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies (Patience)"
-$STD apt install -y \
-  build-essential \
-  redis-server \
-  expect \
-  ca-certificates
-msg_ok "Installed Dependencies"
-
-setup_mongodb
-NODE_VERSION="22" setup_nodejs
-
-msg_info "Configuring MongoDB"
-MONGO_ADMIN_USER="admin"
-MONGO_ADMIN_PWD="$(openssl rand -base64 18 | cut -c1-13)"
-NODEBB_USER="nodebb"
-NODEBB_PWD="$(openssl rand -base64 18 | cut -c1-13)"
-MONGO_CONNECTION_STRING="mongodb://${NODEBB_USER}:${NODEBB_PWD}@localhost:27017/nodebb"
-NODEBB_SECRET=$(uuidgen)
-{
-  echo "NodeBB-Credentials"
-  echo "Mongo Database User: $MONGO_ADMIN_USER"
-  echo "Mongo Database Password: $MONGO_ADMIN_PWD"
-  echo "NodeBB User: $NODEBB_USER"
-  echo "NodeBB Password: $NODEBB_PWD"
-  echo "NodeBB Secret: $NODEBB_SECRET"
-} >>~/nodebb.creds
-
-$STD mongosh <<EOF
-use admin
-db.createUser({
-  user: "$MONGO_ADMIN_USER",
-  pwd: "$MONGO_ADMIN_PWD",
-  roles: [{ role: "root", db: "admin" }]
-})
-
-use nodebb
-db.createUser({
-  user: "$NODEBB_USER",
-  pwd: "$NODEBB_PWD",
-  roles: [
-    { role: "readWrite", db: "nodebb" },
-    { role: "clusterMonitor", db: "admin" }
-  ]
-})
-quit()
-EOF
-sed -i 's/bindIp: 127.0.0.1/bindIp: 0.0.0.0/' /etc/mongod.conf
-sed -i '/security:/d' /etc/mongod.conf
-bash -c 'echo -e "\nsecurity:\n  authorization: enabled" >> /etc/mongod.conf'
-systemctl restart mongod
-msg_ok "MongoDB configured"
-
-fetch_and_deploy_gh_release "nodebb" "NodeBB/NodeBB" "tarball"
-
-msg_info "Configuring NodeBB"
-cd /opt/nodebb
-touch pidfile
-expect <<EOF >/dev/null 2>&1
-log_file /dev/null
-set timeout -1
-
-spawn ./nodebb setup
-expect "URL used to access this NodeBB" {
-    send "http://localhost:4567\r"
-}
-expect "Please enter a NodeBB secret" {
-    send "$NODEBB_SECRET\r"
-}
-expect "Would you like to submit anonymous plugin usage to nbbpm? (yes)" {
-    send "no\r"
-}
-expect "Which database to use (mongo)" {
-    send "mongo\r"
-}
-expect "Format: mongodb://*" {
-    send "$MONGO_CONNECTION_STRING\r"
-}
-expect "Administrator username" {
-    send "community-scripts\r"
-}
-expect "Administrator email address" {
-    send "admin@community-scripts.org\r"
-}
-expect "Password" {
-    send "community-scripts\r"
-}
-expect "Confirm Password" {
-    send "community-scripts\r"
-}
-expect eof
-EOF
-msg_ok "Configured NodeBB"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/nodebb.service
-[Unit]
-Description=NodeBB
-Documentation=https://docs.nodebb.org
-After=system.slice multi-user.target mongod.service
-
-[Service]
-Type=forking
-User=root
-
-WorkingDirectory=/opt/nodebb
-PIDFile=/opt/nodebb/pidfile
-ExecStart=/usr/bin/node /opt/nodebb/loader.js
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now nodebb
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/opengist-install.sh
+++ b/install/opengist-install.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Jonathan (jd-apprentice)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://opengist.io/ | Github: https://github.com/thomiceli/opengist
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y git
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "opengist" "thomiceli/opengist" "prebuild" "latest" "/opt/opengist" "opengist*linux-amd64.tar.gz"
-mkdir -p /opt/opengist-data
-sed -i 's|opengist-home:.*|opengist-home: /opt/opengist-data|' /opt/opengist/config.yml
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/opengist.service
-[Unit]
-Description=Opengist server to manage your Gists
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/opengist
-ExecStart=/opt/opengist/opengist --config /opt/opengist/config.yml
-Restart=always
-User=root
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now opengist
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/openthread-br-install.sh
+++ b/install/openthread-br-install.sh
@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://openthread.io/guides/border-router
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  cmake \
+  ninja-build \
+  pkg-config \
+  git \
+  iproute2 \
+  libreadline-dev \
+  libncurses-dev \
+  rsyslog \
+  dbus \
+  libdbus-1-dev \
+  libjsoncpp-dev \
+  iptables \
+  ipset \
+  bind9 \
+  libnetfilter-queue1 \
+  libnetfilter-queue-dev \
+  libprotobuf-dev \
+  protobuf-compiler \
+  socat
+msg_ok "Installed Dependencies"
+
+setup_nodejs
+
+msg_info "Cloning OpenThread Border Router"
+# git clone is needed to fetch submodules, fetch_and_deploy_gh_release doesn't support this. We use --depth 1 to minimize the amount of data cloned, but it still may take a while.
+$STD git clone --depth 1 https://github.com/openthread/ot-br-posix /opt/ot-br-posix
+cd /opt/ot-br-posix
+$STD git submodule update --depth 1 --init --recursive
+msg_ok "Cloned OpenThread Border Router"
+
+msg_info "Building OpenThread Border Router (Patience)"
+mkdir -p build && cd build
+$STD cmake -GNinja \
+  -DBUILD_TESTING=OFF \
+  -DCMAKE_INSTALL_PREFIX=/usr \
+  -DOTBR_DBUS=ON \
+  -DOTBR_MDNS=openthread \
+  -DOTBR_REST=ON \
+  -DOTBR_WEB=ON \
+  -DOTBR_BORDER_ROUTING=ON \
+  -DOTBR_BACKBONE_ROUTER=ON \
+  -DOT_FIREWALL=ON \
+  -DOT_POSIX_NAT64_CIDR="192.168.255.0/24" \
+  ..
+$STD ninja
+$STD ninja install
+msg_ok "Built OpenThread Border Router"
+
+msg_info "Configuring Network"
+cat <<EOF >/etc/sysctl.d/99-otbr.conf
+net.ipv6.conf.all.forwarding=1
+net.ipv4.ip_forward=1
+EOF
+$STD sysctl -p /etc/sysctl.d/99-otbr.conf
+msg_ok "Configured Network"
+
+msg_info "Configuring Services"
+cat <<'EOF' >/etc/default/otbr-agent
+# USB example:
+#   OTBR_AGENT_OPTS="-I wpan0 -B eth0 --vendor-name OpenThread --model-name BorderRouter --rest-listen-address 0.0.0.0 --rest-listen-port 8081 spinel+hdlc+uart:///dev/ttyACM0"
+# TCP via socat (for network-attached RCP like SLZB-06/SLZB-MR3):
+
+#   OTBR_AGENT_OPTS="-I wpan0 -B eth0 --vendor-name OpenThread --model-name BorderRouter --rest-listen-address 0.0.0.0 --rest-listen-port 8081 spinel+hdlc+forkpty:///usr/bin/socat?forkpty-arg=-,rawer&forkpty-arg=tcp:IP:PORT trel://eth0"
+OTBR_AGENT_OPTS="-I wpan0 -B eth0 --vendor-name OpenThread --model-name BorderRouter --rest-listen-address 0.0.0.0 --rest-listen-port 8081 spinel+hdlc+uart:///dev/ttyACM0"
+EOF
+cat <<'EOF' >/etc/default/otbr-web
+OTBR_WEB_OPTS="-I wpan0 -a 0.0.0.0 -p 80"
+EOF
+systemctl enable -q dbus rsyslog otbr-agent otbr-web
+systemctl enable -q bind9 2>/dev/null || systemctl enable -q named 2>/dev/null || true
+systemctl start -q dbus rsyslog bind9
+msg_ok "Configured Services"
+
+motd_ssh
+customize
+cleanup_lxc
--- a/install/ots-install.sh
+++ b/install/ots-install.sh
@@ -1,91 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: bvberg01
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Luzifer/ots
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  redis-server \
-  nginx
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "ots" "Luzifer/ots" "prebuild" "latest" "/opt/ots" "ots_linux_amd64.tgz"
-create_self_signed_cert
-
-msg_info "Setup OTS"
-cat <<EOF >/opt/ots/.env
-LISTEN=127.0.0.1:3000
-REDIS_URL=redis://127.0.0.1:6379
-SECRET_EXPIRY=604800
-STORAGE_TYPE=redis
-EOF
-msg_ok "Setup OTS"
-
-msg_info "Setting up nginx"
-cat <<EOF >/etc/nginx/sites-available/ots.conf
-server {
-    listen 80;
-    listen [::]:80;
-    server_name ots;
-    return 301 https://\$host\$request_uri;
-}
-server {
-  listen 443 ssl;
-  listen [::]:443 ssl;
-  server_name ots;
-
-  ssl_certificate /etc/ssl/ots/ots.crt;
-  ssl_certificate_key /etc/ssl/ots/ots.key;
-
-  location / {
-    add_header X-Robots-Tag noindex;
-
-    proxy_set_header Upgrade \$http_upgrade;
-    proxy_set_header Connection "Upgrade";
-    proxy_set_header Host \$host;
-    proxy_set_header X-Real-IP \$remote_addr;
-    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto \$scheme;
-    client_max_body_size 64M;
-    proxy_pass http://127.0.0.1:3000/;
-  }
-}
-EOF
-
-ln -s /etc/nginx/sites-available/ots.conf /etc/nginx/sites-enabled/
-rm -f /etc/nginx/sites-enabled/default
-$STD systemctl reload nginx
-msg_ok "Configured nginx"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/ots.service
-[Unit]
-Description=One-Time-Secret Service
-After=network-online.target
-Requires=network-online.target
-
-[Service]
-EnvironmentFile=/opt/ots/.env
-ExecStart=/opt/ots/ots
-Restart=Always
-RestartSecs=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now ots
-msg_ok "Created Services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/pf2etools-install.sh
+++ b/install/pf2etools-install.sh
@@ -1,47 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: TheRealVira
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://pf2etools.com/ | Github: https://github.com/Pf2eToolsOrg/Pf2eTools
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  apache2 \
-  ca-certificates \
-  git
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" setup_nodejs
-fetch_and_deploy_gh_release "pf2etools" "Pf2eToolsOrg/Pf2eTools" "tarball" "latest" "/opt/Pf2eTools"
-
-msg_info "Configuring Pf2eTools"
-cd /opt/Pf2eTools
-$STD npm install
-$STD npm run build
-msg_ok "Configured Pf2eTools"
-
-msg_info "Creating Service"
-cat <<EOF >>/etc/apache2/apache2.conf
-<Location /server-status>
-    SetHandler server-status
-    Order deny,allow
-    Allow from all
-</Location>
-EOF
-rm -rf /var/www/html
-ln -s "/opt/Pf2eTools" /var/www/html
-chown -R www-data: "/opt/Pf2eTools"
-chmod -R 755 "/opt/Pf2eTools"
-msg_ok "Created Service"
-cleanup_lxc
-motd_ssh
-customize
--- a/install/ps5-mqtt-install.sh
+++ b/install/ps5-mqtt-install.sh
@@ -1,87 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: liecno
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/FunkeyFlo/ps5-mqtt/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  jq \
-  ca-certificates
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" NODE_MODULE="playactor" setup_nodejs
-fetch_and_deploy_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt" "tarball"
-
-msg_info "Configuring PS5-MQTT"
-cd /opt/ps5-mqtt/ps5-mqtt/
-$STD npm install
-$STD npm run build
-mkdir -p /opt/.config/ps5-mqtt/
-mkdir -p /opt/.config/ps5-mqtt/playactor
-cat <<EOF >/opt/.config/ps5-mqtt/config.json
-{
-  "mqtt": {
-      "host": "",
-      "port": "",
-      "user": "",
-      "pass": "",
-      "discovery_topic": "homeassistant"
-  },
-
-  "device_check_interval": 5000,
-  "device_discovery_interval": 60000,
-  "device_discovery_broadcast_address": "",
-
-  "include_ps4_devices": false,
-
-  "psn_accounts": [
-    {
-      "username": "",
-      "npsso":""
-    }
-  ],
-
-  "account_check_interval": 5000,
-
-  "credentialsStoragePath": "/opt/.config/ps5-mqtt/credentials.json",
-  "frontendPort": "8645"
-}
-EOF
-msg_ok "Configured PS5-MQTT"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/ps5-mqtt.service
-[Unit]
-Description=PS5-MQTT Daemon
-After=syslog.target network.target
-
-[Service]
-WorkingDirectory=/opt/ps5-mqtt/ps5-mqtt
-Environment="CONFIG_PATH=/opt/.config/ps5-mqtt/config.json"
-Environment="DEBUG='@ha:ps5:*'"
-Restart=always
-RestartSec=5
-Type=simple
-ExecStart=node server/dist/index.js
-KillMode=process
-SyslogIdentifier=ps5-mqtt
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now ps5-mqtt
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/rustypaste-install.sh
+++ b/install/rustypaste-install.sh
@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: GoldenSpringness | MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/orhun/rustypaste
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "rustypaste" "orhun/rustypaste" "prebuild" "latest" "/opt/rustypaste" "*x86_64-unknown-linux-gnu.tar.gz"
-fetch_and_deploy_gh_release "rustypaste-cli" "orhun/rustypaste-cli" "prebuild" "latest" "/usr/local/bin" "*x86_64-unknown-linux-gnu.tar.gz"
-
-msg_info "Setting up RustyPaste"
-cd /opt/rustypaste
-sed -i 's|^address = ".*"|address = "0.0.0.0:8000"|' config.toml
-msg_ok "Set up RustyPaste"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/rustypaste.service
-[Unit]
-Description=rustypaste Service
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/rustypaste
-ExecStart=/opt/rustypaste/rustypaste
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now rustypaste
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/seelf-install.sh
+++ b/install/seelf-install.sh
@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/YuukanOO/seelf
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  make \
-  gcc
-msg_ok "Installed Dependencies"
-
-setup_go
-NODE_VERSION="22" setup_nodejs
-fetch_and_deploy_gh_release "seelf" "YuukanOO/seelf" "tarball"
-
-msg_info "Setting up seelf. Patience"
-cd /opt/seelf
-$STD make build
-PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-mkdir -p /opt/seelf/data
-{
-  echo "ADMIN_EMAIL=admin@example.com"
-  echo "ADMIN_PASSWORD=$PASS"
-} | tee .env ~/seelf.creds >/dev/null
-SEELF_ADMIN_EMAIL=admin@example.com SEELF_ADMIN_PASSWORD=$PASS ./seelf serve &>/dev/null &
-sleep 5
-kill $!
-msg_ok "Done setting up seelf"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/seelf.service
-[Unit]
-Description=seelf Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-Group=root
-EnvironmentFile=/opt/seelf/.env
-Environment=DATA_PATH=/opt/seelf/data
-WorkingDirectory=/opt/seelf
-ExecStart=/opt/seelf/./seelf -c data/conf.yml serve
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now seelf
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/streamlink-webui-install.sh
+++ b/install/streamlink-webui-install.sh
@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/CrazyWolf13/streamlink-webui
-
-# Import Functions und Setup
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-NODE_VERSION="22"
-NODE_MODULE="npm@latest,yarn@latest"
-setup_nodejs
-setup_uv
-fetch_and_deploy_gh_release "streamlink-webui" "CrazyWolf13/streamlink-webui" "tarball"
-
-msg_info "Setup ${APPLICATION}"
-mkdir -p "/opt/${APPLICATION}-download"
-$STD uv venv --clear /opt/"${APPLICATION}"/backend/src/.venv
-source /opt/"${APPLICATION}"/backend/src/.venv/bin/activate
-$STD uv pip install -r /opt/streamlink-webui/backend/src/requirements.txt --python=/opt/"${APPLICATION}"/backend/src/.venv
-cd /opt/"${APPLICATION}"/frontend/src
-$STD yarn install
-$STD yarn build
-chmod +x /opt/"${APPLICATION}"/start.sh
-msg_ok "Setup ${APPLICATION}"
-
-msg_info "Creating Service"
-cat <<'EOF' >/opt/"${APPLICATION}".env
-CLIENT_ID='your_client_id'
-CLIENT_SECRET='your_client_secret'
-DOWNLOAD_PATH='/opt/streamlink-webui-download'
-# BASE_URL='https://sub.domain.com' \
-# REVERSE_PROXY=True \
-EOF
-
-cat <<EOF >/etc/systemd/system/"${APPLICATION}".service
-[Unit]
-Description=${APPLICATION} Service
-After=network.target
-
-[Service]
-EnvironmentFile=/opt/${APPLICATION}.env
-WorkingDirectory=/opt/${APPLICATION}/backend/src
-ExecStart=/bin/bash -c 'source /opt/${APPLICATION}/backend/src/.venv/bin/activate && exec /opt/${APPLICATION}/start.sh'
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now "${APPLICATION}"
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/typesense-install.sh
+++ b/install/typesense-install.sh
@@ -1,28 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: tlissak
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://typesense.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing TypeSense"
-RELEASE=$(curl -fsSL https://api.github.com/repos/typesense/typesense/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-cd /opt
-curl -fsSL "https://dl.typesense.org/releases/${RELEASE}/typesense-server-${RELEASE}-amd64.deb" -o "/opt/typesense-server-${RELEASE}-amd64.deb"
-$STD apt install -y /opt/typesense-server-${RELEASE}-amd64.deb
-echo 'enable-cors = true' >>/etc/typesense/typesense-server.ini
-rm -rf /opt/typesense-server-${RELEASE}-amd64.deb
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed TypeSense"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/uhf-install.sh
+++ b/install/uhf-install.sh
@@ -15,7 +15,7 @@ update_os
 setup_hwaccel

 msg_info "Installing Dependencies"
-$STD apt install -y ffmpeg
+setup_ffmpeg
 msg_ok "Installed Dependencies"

 msg_info "Setting Up UHF Server Environment"
--- a/install/valkey-install.sh
+++ b/install/valkey-install.sh
@@ -1,78 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: pshankinclarke (lazarillo)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://valkey.io/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Valkey"
-$STD apt update
-$STD apt install -y valkey openssl
-sed -i 's/^bind .*/bind 0.0.0.0/' /etc/valkey/valkey.conf
-
-PASS="$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c32)"
-echo "requirepass $PASS" >> /etc/valkey/valkey.conf
-echo "$PASS" >~/valkey.creds
-chmod 600 ~/valkey.creds
-
-MEMTOTAL_MB=$(free -m | grep ^Mem: | awk '{print $2}')
-# reserve 25% of a node type's maxmemory value for system use
-MAXMEMORY_MB=$((MEMTOTAL_MB * 75 / 100))
-
-echo "" >> /etc/valkey/valkey.conf
-echo "# Memory-optimized settings for small-scale deployments" >> /etc/valkey/valkey.conf
-echo "maxmemory ${MAXMEMORY_MB}mb" >> /etc/valkey/valkey.conf
-echo "maxmemory-policy allkeys-lru" >> /etc/valkey/valkey.conf
-echo "maxmemory-samples 10" >> /etc/valkey/valkey.conf
-msg_ok "Installed Valkey"
-
-echo
-read -r -p "${TAB3}Enable TLS for Valkey (Sentinel mode does not supported)? [y/N]: " prompt
-if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-    read -r -p "${TAB3}Use TLS-only mode (disable TCP port 6379)? [y/N]: " tls_only
-    msg_info "Configuring TLS for Valkey..."
-
-    create_self_signed_cert "Valkey"
-    TLS_DIR="/etc/ssl/valkey"
-    TLS_CERT="$TLS_DIR/valkey.crt"
-    TLS_KEY="$TLS_DIR/valkey.key"
-    chown valkey:valkey "$TLS_CERT" "$TLS_KEY"
-
-    if [[ ${tls_only,,} =~ ^(y|yes)$ ]]; then
-    {
-      echo ""
-      echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
-      echo "port 0"
-      echo "tls-port 6379"
-      echo "tls-cert-file $TLS_DIR/valkey.crt"
-      echo "tls-key-file $TLS_DIR/valkey.key"
-      echo "tls-auth-clients no"
-    } >> /etc/valkey/valkey.conf
-    msg_ok "Enabled TLS-only mode on port 6379"
-    else
-    {
-      echo ""
-      echo "# TLS configuration generated by Proxmox VE Valkey helper-script"
-      echo "tls-port 6380"
-      echo "tls-cert-file $TLS_DIR/valkey.crt"
-      echo "tls-key-file $TLS_DIR/valkey.key"
-      echo "tls-auth-clients no"
-    } >> /etc/valkey/valkey.conf
-    msg_ok "Enabled TLS on port 6380 and TCP on 6379"
-    fi
-fi
-
-systemctl enable -q --now valkey-server
-systemctl restart valkey-server
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/verdaccio-install.sh
+++ b/install/verdaccio-install.sh
@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: BrynnJKnight
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://verdaccio.org/ | Github: https://github.com/verdaccio/verdaccio
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y build-essential
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" NODE_MODULE="verdaccio" setup_nodejs
-
-msg_info "Configuring Verdaccio"
-mkdir -p /opt/verdaccio/config
-mkdir -p /opt/verdaccio/storage
-cat <<EOF >/opt/verdaccio/config/config.yaml
-# Verdaccio configuration
-storage: /opt/verdaccio/storage
-auth:
-  htpasswd:
-    file: /opt/verdaccio/storage/htpasswd
-    max_users: 1000
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-packages:
-  '@*/*':
-    access: \$all
-    publish: \$authenticated
-    proxy: npmjs
-  '**':
-    access: \$all
-    publish: \$authenticated
-    proxy: npmjs
-middlewares:
-  audit:
-    enabled: true
-logs:
-  - {type: stdout, format: pretty, level: http}
-listen:
-  - 0.0.0.0:4873
-web:
-  enable: true
-  title: Verdaccio
-  gravatar: true
-  sort_packages: asc
-  login: true
-EOF
-chown -R root:root /opt/verdaccio
-chmod -R 755 /opt/verdaccio
-msg_ok "Configured Verdaccio"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/verdaccio.service
-[Unit]
-Description=Verdaccio lightweight private npm proxy registry
-After=network.target
-
-[Service]
-Type=simple
-ExecStart=/usr/bin/verdaccio --config /opt/verdaccio/config/config.yaml
-Restart=on-failure
-StandardOutput=journal
-StandardError=journal
-SyslogIdentifier=verdaccio
-KillMode=control-group
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now verdaccio
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/wavelog-install.sh
+++ b/install/wavelog-install.sh
@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Don Locke (DonLocke)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/wavelog/wavelog
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MAX_EXECUTION_TIME="600" setup_php
-setup_mariadb
-MARIADB_DB_NAME="wavelog" MARIADB_DB_USER="waveloguser" setup_mariadb_db
-fetch_and_deploy_gh_release "wavelog" "wavelog/wavelog" "tarball"
-
-msg_info "Configuring Wavelog"
-chown -R www-data:www-data /opt/wavelog/
-find /opt/wavelog/ -type d -exec chmod 755 {} \;
-find /opt/wavelog/ -type f -exec chmod 664 {} \;
-msg_ok "Configured Wavelog"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/apache2/sites-available/wavelog.conf
-<VirtualHost *:80>
-    ServerAdmin webmaster@localhost
-    DocumentRoot /opt/wavelog
-
-    <Directory /opt/wavelog>
-        Options Indexes FollowSymLinks
-        AllowOverride All
-        Require all granted
-    </Directory>
-
-    ErrorLog /var/log/apache2/error.log
-    CustomLog /var/log/apache2/access.log combined
-</VirtualHost>
-EOF
-$STD a2ensite wavelog.conf
-$STD a2dissite 000-default.conf
-$STD systemctl reload apache2
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/writefreely-install.sh
+++ b/install/writefreely-install.sh
@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: StellaeAlis
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/writefreely/writefreely
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y crudini
-msg_ok "Installed Dependencies"
-
-setup_mariadb
-MARIADB_DB_NAME="writefreely" MARIADB_DB_USER="writefreely" setup_mariadb_db
-fetch_and_deploy_gh_release "writefreely" "writefreely/writefreely" "prebuild" "latest" "/opt/writefreely" "writefreely_*_linux_amd64.tar.gz"
-
-msg_info "Setting up WriteFreely"
-cd /opt/writefreely
-$STD ./writefreely config generate
-$STD ./writefreely keys generate
-msg_ok "Setup WriteFreely"
-
-msg_info "Configuring WriteFreely"
-$STD crudini --set config.ini server port 80
-$STD crudini --set config.ini server bind $LOCAL_IP
-$STD crudini --set config.ini database username $MARIADB_DB_USER
-$STD crudini --set config.ini database password $MARIADB_DB_PASS
-$STD crudini --set config.ini database database $MARIADB_DB_NAME
-$STD crudini --set config.ini app host http://$LOCAL_IP:80
-$STD ./writefreely db init
-ln -s /opt/writefreely/writefreely /usr/local/bin/writefreely
-msg_ok "Configured WriteFreely"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/writefreely.service
-[Unit]
-Description=WriteFreely Service
-After=syslog.target network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/writefreely
-ExecStart=/opt/writefreely/writefreely
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now writefreely
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/misc/build.func
+++ b/misc/build.func
@@ -4018,7 +4018,7 @@ EOF

    # Wait for IP assignment (IPv4 or IPv6)
    local ip_in_lxc=""
-    for i in {1..20}; do
+    for i in {1..60}; do
      # Try IPv4 first
      ip_in_lxc=$(pct exec "$CTID" -- ip -4 addr show dev eth0 2>/dev/null | awk '/inet / {print $2}' | cut -d/ -f1)
      # Fallback to IPv6 if IPv4 not available
@@ -4026,11 +4026,18 @@ EOF
        ip_in_lxc=$(pct exec "$CTID" -- ip -6 addr show dev eth0 scope global 2>/dev/null | awk '/inet6 / {print $2}' | cut -d/ -f1 | head -n1)
      fi
      [ -n "$ip_in_lxc" ] && break
-      sleep 1
+      # Progressive backoff: 1s for first 20, 2s for next 20, 3s for last 20
+      if [ "$i" -le 20 ]; then
+        sleep 1
+      elif [ "$i" -le 40 ]; then
+        sleep 2
+      else
+        sleep 3
+      fi
    done

    if [ -z "$ip_in_lxc" ]; then
-      msg_error "No IP assigned to CT $CTID after 20s"
+      msg_error "No IP assigned to CT $CTID after 60 attempts"
      msg_custom "🔧" "${YW}" "Troubleshooting:"
      echo "  • Verify bridge ${BRG} exists and has connectivity"
      echo "  • Check if DHCP server is reachable (if using DHCP)"
@@ -5261,9 +5268,10 @@ create_lxc_container() {
    exit 205
  }
  if qm status "$CTID" &>/dev/null || pct status "$CTID" &>/dev/null; then
-    unset CTID
-    msg_error "Cannot use ID that is already in use."
-    exit 206
+    msg_warn "Container/VM ID $CTID is already in use (detected late). Reassigning..."
+    CTID=$(get_valid_container_id "$((CTID + 1))")
+    export CTID
+    msg_ok "Reassigned to container ID $CTID"
  fi

  # Report installation start to API early - captures failures in storage/template/create
@@ -5739,30 +5747,77 @@ create_lxc_container() {
  if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
    msg_debug "Container creation failed on ${TEMPLATE_STORAGE}. Checking error..."

-    # Check if template issue - retry with fresh download
-    if grep -qiE 'unable to open|corrupt|invalid' "$LOGFILE"; then
-      msg_info "Template may be corrupted – re-downloading"
-      rm -f "$TEMPLATE_PATH"
-      pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1
-      msg_ok "Template re-downloaded"
-    fi
+    # Check if CTID collision (race condition: ID claimed between validation and creation)
+    if grep -qiE 'already exists|already in use' "$LOGFILE"; then
+      local old_ctid="$CTID"
+      CTID=$(get_valid_container_id "$((CTID + 1))")
+      export CTID
+      msg_warn "Container ID $old_ctid was claimed by another process. Retrying with ID $CTID"
+      LOGFILE="/tmp/pct_create_${CTID}_$(date +%Y%m%d_%H%M%S)_${SESSION_ID}.log"
+      if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
+        msg_ok "Container successfully created with new ID $CTID"
+      else
+        msg_error "Container creation failed even with new ID $CTID. See $LOGFILE"
+        _flush_pct_log
+        exit 209
+      fi
+    else
+      # Not a CTID collision - check if template issue and retry with fresh download
+      if grep -qiE 'unable to open|corrupt|invalid' "$LOGFILE"; then
+        msg_info "Template may be corrupted – re-downloading"
+        rm -f "$TEMPLATE_PATH"
+        pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1
+        msg_ok "Template re-downloaded"
+      fi

-    # Retry after repair
-    if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
-      # Fallback to local storage if not already on local
-      if [[ "$TEMPLATE_STORAGE" != "local" ]]; then
-        msg_info "Retrying container creation with fallback to local storage"
-        LOCAL_TEMPLATE_PATH="/var/lib/vz/template/cache/$TEMPLATE"
-        if [[ ! -f "$LOCAL_TEMPLATE_PATH" ]]; then
-          msg_ok "Trying local storage fallback"
-          msg_info "Downloading template to local"
-          pveam download local "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1
-          msg_ok "Template downloaded to local"
+      # Retry after repair
+      if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
+        # Fallback to local storage if not already on local
+        if [[ "$TEMPLATE_STORAGE" != "local" ]]; then
+          msg_info "Retrying container creation with fallback to local storage"
+          LOCAL_TEMPLATE_PATH="/var/lib/vz/template/cache/$TEMPLATE"
+          if [[ ! -f "$LOCAL_TEMPLATE_PATH" ]]; then
+            msg_ok "Trying local storage fallback"
+            msg_info "Downloading template to local"
+            pveam download local "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1
+            msg_ok "Template downloaded to local"
+          else
+            msg_ok "Trying local storage fallback"
+          fi
+          if ! pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
+            # Local fallback also failed - check for LXC stack version issue
+            if grep -qiE 'unsupported .* version' "$LOGFILE"; then
+              msg_warn "pct reported 'unsupported version' – LXC stack might be too old for this template"
+              offer_lxc_stack_upgrade_and_maybe_retry "yes"
+              rc=$?
+              case $rc in
+              0) : ;; # success - container created, continue
+              2)
+                msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+                _flush_pct_log
+                exit 231
+                ;;
+              3)
+                msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+                _flush_pct_log
+                exit 231
+                ;;
+              esac
+            else
+              msg_error "Container creation failed. See $LOGFILE"
+              if whiptail --yesno "pct create failed.\nDo you want to enable verbose debug mode and view detailed logs?" 12 70; then
+                set -x
+                pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS 2>&1 | tee -a "$LOGFILE"
+                set +x
+              fi
+              _flush_pct_log
+              exit 209
+            fi
+          else
+            msg_ok "Container successfully created using local fallback."
+          fi
        else
-          msg_ok "Trying local storage fallback"
-        fi
-        if ! pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
-          # Local fallback also failed - check for LXC stack version issue
+          # Already on local storage and still failed - check LXC stack version
          if grep -qiE 'unsupported .* version' "$LOGFILE"; then
            msg_warn "pct reported 'unsupported version' – LXC stack might be too old for this template"
            offer_lxc_stack_upgrade_and_maybe_retry "yes"
@@ -5790,50 +5845,28 @@ create_lxc_container() {
            _flush_pct_log
            exit 209
          fi
-        else
-          msg_ok "Container successfully created using local fallback."
        fi
      else
-        # Already on local storage and still failed - check LXC stack version
-        if grep -qiE 'unsupported .* version' "$LOGFILE"; then
-          msg_warn "pct reported 'unsupported version' – LXC stack might be too old for this template"
-          offer_lxc_stack_upgrade_and_maybe_retry "yes"
-          rc=$?
-          case $rc in
-          0) : ;; # success - container created, continue
-          2)
-            msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
-            _flush_pct_log
-            exit 231
-            ;;
-          3)
-            msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
-            _flush_pct_log
-            exit 231
-            ;;
-          esac
-        else
-          msg_error "Container creation failed. See $LOGFILE"
-          if whiptail --yesno "pct create failed.\nDo you want to enable verbose debug mode and view detailed logs?" 12 70; then
-            set -x
-            pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS 2>&1 | tee -a "$LOGFILE"
-            set +x
-          fi
-          _flush_pct_log
-          exit 209
-        fi
+        msg_ok "Container successfully created after template repair."
      fi
-    else
-      msg_ok "Container successfully created after template repair."
-    fi
+    fi # close CTID collision else-branch
  fi

-  # Verify container exists
-  pct list | awk '{print $1}' | grep -qx "$CTID" || {
-    msg_error "Container ID $CTID not listed in 'pct list'. See $LOGFILE"
+  # Verify container exists (allow up to 10s for pmxcfs sync in clusters)
+  local _pct_visible=false
+  for _pct_check in {1..10}; do
+    if pct list | awk '{print $1}' | grep -qx "$CTID"; then
+      _pct_visible=true
+      break
+    fi
+    sleep 1
+  done
+  if [[ "$_pct_visible" != true ]]; then
+    msg_error "Container ID $CTID not listed in 'pct list' after 10s. See $LOGFILE"
+    msg_custom "🔧" "${YW}" "This can happen in clusters with pmxcfs sync delays."
    _flush_pct_log
    exit 215
-  }
+  fi

  # Verify config rootfs
  grep -q '^rootfs:' "/etc/pve/lxc/$CTID.conf" || {
@@ -5873,6 +5906,12 @@ create_lxc_container() {
 # ------------------------------------------------------------------------------
 description() {
  IP=$(pct exec "$CTID" ip a s dev eth0 | awk '/inet / {print $2}' | cut -d/ -f1)
+  local script_slug script_url donate_url
+
+  script_slug="${SCRIPT_SLUG:-${NSAPP}}"
+  script_slug="$(echo "$script_slug" | tr '[:upper:]' '[:lower:]' | tr ' ' '-')"
+  script_url="https://community-scripts.org/scripts/${script_slug}"
+  donate_url="https://community-scripts.org/donate"

  # Generate LXC Description
  DESCRIPTION=$(
@@ -5885,8 +5924,14 @@ description() {
  <h2 style='font-size: 24px; margin: 20px 0;'>${APP} LXC</h2>

  <p style='margin: 16px 0;'>
-    <a href='https://ko-fi.com/community_scripts' target='_blank' rel='noopener noreferrer'>
-      <img src='https://img.shields.io/badge/&#x2615;-Buy us a coffee-blue' alt='spend Coffee' />
+    <a href='${donate_url}' target='_blank' rel='noopener noreferrer'>
+      <img src='https://img.shields.io/badge/❤️-Sponsoring%20%26%20Donations-FF5E5B' alt='Sponsoring and donations' />
+    </a>
+  </p>
+
+  <p style='margin: 12px 0;'>
+    <a href='${script_url}' target='_blank' rel='noopener noreferrer'>
+      <img src='https://img.shields.io/badge/📦-Open%20Script%20Page-00617f' alt='Open script page' />
    </a>
  </p>

--- a/misc/core.func
+++ b/misc/core.func
@@ -527,29 +527,23 @@ silent() {
  fi

  if [[ $rc -ne 0 ]]; then
-    # Source explain_exit_code if needed
-    if ! declare -f explain_exit_code >/dev/null 2>&1; then
-      if ! source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func); then
-        explain_exit_code() { echo "unknown (error_handler.func download failed)"; }
-      fi
-    fi
+    # Return instead of exit so that callers can use `$STD cmd || true`
+    # or `if $STD cmd; then ...` to handle errors gracefully.
+    # When no || / if is used, set -e + ERR trap will still catch it
+    # and error_handler() will display the error and exit.
+    #
+    # Set flag so error_handler knows to show log tail from silent's logfile
+    export _SILENT_FAILED_RC="$rc"
+    export _SILENT_FAILED_CMD="$cmd"
+    export _SILENT_FAILED_LINE="$caller_line"
+    export _SILENT_FAILED_LOG="$logfile"

-    local explanation
-    explanation="$(explain_exit_code "$rc")"
-
-    printf "\e[?25h"
-    msg_error "in line ${caller_line}: exit code ${rc} (${explanation})"
-    msg_custom "→" "${YWB}" "${cmd}"
-
-    if [[ -s "$logfile" ]]; then
-      echo -e "\n${TAB}--- Last 20 lines of log ---"
-      tail -n 20 "$logfile"
-      echo -e "${TAB}-----------------------------------"
-      echo -e "${TAB}📋 Full log: ${logfile}\n"
-    fi
-
-    exit "$rc"
+    return "$rc"
  fi
+
+  # Clear stale flags on success (prevents false positives if a previous
+  # $STD cmd || true failed and a later non-silent command triggers error_handler)
+  unset _SILENT_FAILED_RC _SILENT_FAILED_CMD _SILENT_FAILED_LINE _SILENT_FAILED_LOG 2>/dev/null || true
 }

 # ------------------------------------------------------------------------------
--- a/misc/error_handler.func
+++ b/misc/error_handler.func
@@ -236,6 +236,16 @@ error_handler() {

  command="${command//\$STD/}"

+  # If error originated from silent(), use its captured metadata
+  # This provides the actual command and line number instead of "silent ..."
+  if [[ -n "${_SILENT_FAILED_RC:-}" ]]; then
+    exit_code="$_SILENT_FAILED_RC"
+    command="$_SILENT_FAILED_CMD"
+    line_number="$_SILENT_FAILED_LINE"
+    # Clear flags to prevent stale data on subsequent errors
+    unset _SILENT_FAILED_RC _SILENT_FAILED_CMD _SILENT_FAILED_LINE
+  fi
+
  if [[ "$exit_code" -eq 0 ]]; then
    return 0
  fi
@@ -279,8 +289,12 @@ error_handler() {
  fi

  # Get active log file (BUILD_LOG or INSTALL_LOG)
+  # Prefer silent()'s logfile when available (contains the actual command output)
  local active_log=""
-  if declare -f get_active_logfile >/dev/null 2>&1; then
+  if [[ -n "${_SILENT_FAILED_LOG:-}" && -s "${_SILENT_FAILED_LOG}" ]]; then
+    active_log="$_SILENT_FAILED_LOG"
+    unset _SILENT_FAILED_LOG
+  elif declare -f get_active_logfile >/dev/null 2>&1; then
    active_log="$(get_active_logfile)"
  elif [[ -n "${SILENT_LOGFILE:-}" ]]; then
    active_log="$SILENT_LOGFILE"
--- a/misc/vm-core.func
+++ b/misc/vm-core.func
@@ -188,32 +188,18 @@ silent() {
  trap 'error_handler' ERR

  if [[ $rc -ne 0 ]]; then
-    # Source explain_exit_code if needed
-    if ! declare -f explain_exit_code >/dev/null 2>&1; then
-      source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/error_handler.func) 2>/dev/null || true
-    fi
+    # Return instead of exit so that callers can use `$STD cmd || true`
+    # When no || is used, set -e + ERR trap catches it via error_handler()
+    export _SILENT_FAILED_RC="$rc"
+    export _SILENT_FAILED_CMD="$cmd"
+    export _SILENT_FAILED_LINE="$caller_line"
+    export _SILENT_FAILED_LOG="$logfile"

-    local explanation=""
-    if declare -f explain_exit_code >/dev/null 2>&1; then
-      explanation="$(explain_exit_code "$rc")"
-    fi
-
-    printf "\e[?25h"
-    if [[ -n "$explanation" ]]; then
-      msg_error "in line ${caller_line}: exit code ${rc} (${explanation})"
-    else
-      msg_error "in line ${caller_line}: exit code ${rc}"
-    fi
-    msg_custom "→" "${YWB}" "${cmd}"
-
-    if [[ -s "$logfile" ]]; then
-      echo -e "\n${TAB}--- Last 20 lines of log ---"
-      tail -n 20 "$logfile"
-      echo -e "${TAB}----------------------------\n"
-    fi
-
-    exit "$rc"
+    return "$rc"
  fi
+
+  # Clear stale flags on success
+  unset _SILENT_FAILED_RC _SILENT_FAILED_CMD _SILENT_FAILED_LINE _SILENT_FAILED_LOG 2>/dev/null || true
 }

 # ------------------------------------------------------------------------------
@@ -591,6 +577,13 @@ check_hostname_conflict() {
 }

 set_description() {
+  local app_name script_slug script_url donate_url
+  app_name=$(echo "${APP,,}" | tr ' ' '-')
+  script_slug="${SCRIPT_SLUG:-${app_name}}"
+  script_slug="$(echo "$script_slug" | tr '[:upper:]' '[:lower:]' | tr ' ' '-')"
+  script_url="https://community-scripts.org/scripts/${script_slug}"
+  donate_url="https://community-scripts.org/donate"
+
  DESCRIPTION=$(
    cat <<EOF
 <div align='center'>
@@ -601,8 +594,14 @@ set_description() {
  <h2 style='font-size: 24px; margin: 20px 0;'>${NSAPP} VM</h2>

  <p style='margin: 16px 0;'>
-    <a href='https://ko-fi.com/community_scripts' target='_blank' rel='noopener noreferrer'>
-      <img src='https://img.shields.io/badge/&#x2615;-Buy us a coffee-blue' alt='spend Coffee' />
+    <a href='${donate_url}' target='_blank' rel='noopener noreferrer'>
+      <img src='https://img.shields.io/badge/❤️-Sponsoring%20%26%20Donations-FF5E5B' alt='Sponsoring and donations' />
+    </a>
+  </p>
+
+  <p style='margin: 12px 0;'>
+    <a href='${script_url}' target='_blank' rel='noopener noreferrer'>
+      <img src='https://img.shields.io/badge/📦-Open%20Script%20Page-00617f' alt='Open script page' />
    </a>
  </p>
Author	SHA1	Message	Date
community-scripts-pr-app[bot]	a10100d66a	Update CHANGELOG.md (#13605 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 21:22:58 +00:00
CanbiZ (MickLesk)	41848653d6	bambuddy: add mkdir before data restore & add ffmpeg dependency (#13601 )	2026-04-08 23:22:34 +02:00
community-scripts-pr-app[bot]	1eb246ee41	Update CHANGELOG.md (#13604 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 19:41:23 +00:00
CanbiZ (MickLesk)	68b486be92	Add donate & script page badges to descriptions (#13596 ) Update LXC and VM description blocks to include donation and script page badges. Introduces script_slug, script_url and donate_url variables (derived from SCRIPT_SLUG or NSAPP/APP, normalized to lowercase and dashed) and uses them to build links. Replaces the old Ko-fi "Buy us a coffee" badge with a generic donate badge and adds an "Open Script Page" badge linking to the script detail page.	2026-04-08 21:40:52 +02:00
community-scripts-pr-app[bot]	9dd4bff9c5	Update CHANGELOG.md (#13602 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 17:47:34 +00:00
CanbiZ (MickLesk)	ae3e1deece	fix(immich): disable upgrade-insecure-requests CSP directive (#13600 ) Helmet's useDefaults adds upgrade-insecure-requests to the CSP, which forces browsers to upgrade all HTTP requests to HTTPS. Since most LXC users access Immich directly via HTTP, this breaks the web UI completely (CORS errors, spinning logo). Patch helmet.json after deploy to explicitly null out the directive, keeping CSP benefits while allowing HTTP access. Fixes #13597	2026-04-08 19:47:10 +02:00
community-scripts-pr-app[bot]	c11b2e9db2	Update .app files (#13595 ) Co-authored-by: GitHub Actions <github-actions[bot]@users.noreply.github.com>	2026-04-08 16:05:59 +02:00
community-scripts-pr-app[bot]	f7c2477e09	Update CHANGELOG.md (#13594 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 13:59:50 +00:00
push-app-to-main[bot]	8b7c620f92	IronClaw \| Alpine-IronClaw (#13591 ) * Add ironclaw (ct) * add alpine variant --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>	2026-04-08 15:59:21 +02:00
community-scripts-pr-app[bot]	d3a935e347	Update CHANGELOG.md (#13592 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 12:57:01 +00:00
Zack	74c430ddf2	feat: update UHF Server script to use setup_ffmpeg (#13564 ) Co-authored-by: Zack Rupinga <zackruppert@livenation.com>	2026-04-08 14:56:33 +02:00
community-scripts-pr-app[bot]	be0d0a6a7a	Update CHANGELOG.md (#13587 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 08:39:18 +00:00
maztheman	507ad186dd	Update flaresolverr-install.sh (#13584 ) Fix error saying this file already doesnt exist?	2026-04-08 10:38:53 +02:00
community-scripts-pr-app[bot]	927e7181c2	Update CHANGELOG.md (#13583 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-08 05:21:31 +00:00
Chris	c5083471d9	Immich: v2.7.2 (#13579 ) * Squash merge dev/openvino-cpu into immich * Immich: bump to v2.7.0 * Upstream fix for helmet.json * Pin to 2.7.1; revert `helmet.json` fix * Pin to v2.7.2	2026-04-08 07:21:07 +02:00
community-scripts-pr-app[bot]	fb6c428a0f	Update CHANGELOG.md (#13581 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-07 21:11:00 +00:00
CanbiZ (MickLesk)	ac3cf75b11	core: improve resilience for top Proxmox error codes (209, 215, 118, 206) (#13575 )	2026-04-07 23:10:37 +02:00
community-scripts-pr-app[bot]	8e010cacfe	Update CHANGELOG.md (#13571 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-07 12:46:23 +00:00
Michel Roegl-Brunner	a7a6d5dd17	Remove low-install-count CT scripts and installers (#13570 )	2026-04-07 14:45:56 +02:00
community-scripts-pr-app[bot]	046e8c749a	Update CHANGELOG.md (#13561 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-06 19:45:40 +00:00
CanbiZ (MickLesk)	daffd75719	Papra: check env before copy (#13553 )	2026-04-06 21:45:11 +02:00
community-scripts-pr-app[bot]	c999a61c60	Update .app files (#13559 ) Co-authored-by: GitHub Actions <github-actions[bot]@users.noreply.github.com>	2026-04-06 21:08:26 +02:00
community-scripts-pr-app[bot]	e8201ef3e5	Update CHANGELOG.md (#13560 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-06 19:07:45 +00:00
community-scripts-pr-app[bot]	10af5efd6b	Update CHANGELOG.md (#13558 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-06 19:07:30 +00:00
community-scripts-pr-app[bot]	00fdd3a3c5	Update .app files (#13556 ) Co-authored-by: GitHub Actions <github-actions[bot]@users.noreply.github.com>	2026-04-06 21:07:20 +02:00
community-scripts-pr-app[bot]	0c5bcb8122	Update CHANGELOG.md (#13557 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-06 19:07:09 +00:00
push-app-to-main[bot]	42c02d1326	Add openthread-br (ct) (#13536 ) Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>	2026-04-06 21:07:05 +02:00
push-app-to-main[bot]	5d84c935e5	Add homelable (ct) (#13539 ) Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>	2026-04-06 21:06:40 +02:00
community-scripts-pr-app[bot]	f489db21cd	Update CHANGELOG.md (#13555 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-06 18:27:47 +00:00
Tobias	a674e84eef	changedetection: fix: typing_extensions error (#13548 )	2026-04-06 20:27:26 +02:00
community-scripts-pr-app[bot]	ec8b73c148	Update CHANGELOG.md (#13554 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-06 18:27:25 +00:00
Tobias	e5fd7e4436	kasm: fix: fetch latest version (#13547 )	2026-04-06 20:26:59 +02:00
community-scripts-pr-app[bot]	c2d5b27a79	Update CHANGELOG.md (#13538 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-05 19:51:33 +00:00
CanbiZ (MickLesk)	b72d91ef8e	Grist: remove install:ee step (private repo, not needed for grist-core) (#13526 )	2026-04-05 21:51:10 +02:00
community-scripts-pr-app[bot]	9ef3b919c7	Update CHANGELOG.md (#13537 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-05 19:28:59 +00:00
CanbiZ (MickLesk)	70a9d99ecd	Nginx Proxy Manager: ensure /tmp/nginx/body exists via openresty service ExecStartPre (#13528 )	2026-04-05 21:28:34 +02:00
community-scripts-pr-app[bot]	e247a8ee8b	Update CHANGELOG.md (#13535 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-05 19:04:34 +00:00
CanbiZ (MickLesk)	68e009e9c6	MotionEye: run as root to enable SMB share support (#13527 )	2026-04-05 21:04:08 +02:00
community-scripts-pr-app[bot]	f652864208	Update CHANGELOG.md (#13534 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-05 19:03:18 +00:00
CanbiZ (MickLesk)	59c0052bc8	core: silent() function - use return instead of exit to allow \|\| true error handling (#13529 )	2026-04-05 21:02:56 +02:00
community-scripts-pr-app[bot]	05748eb1ed	Update CHANGELOG.md (#13531 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-05 00:08:20 +00:00
community-scripts-pr-app[bot]	f2d6840756	Archive old changelog entries (#13530 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-05 00:07:55 +00:00