Update api.func

fix(build.func): pct create audit — 5 fixes
1. Disable globbing (set -f) around pct create calls to prevent passwords containing * or ? from expanding to filenames. 2. Fix TAGS: use semicolons (pct format), prevent duplicate community-script prefix, remove trailing separator. 3. Skip keyctl dialog for unprivileged containers — pct always forces keyctl=1 for CT_TYPE=1, so the dialog was misleading. 4. Remove dead IPV6_STATIC variable (IPv6 is handled via IPV6_ADDR/IPV6_GATE which are properly wired into NET_STRING). 5. Remove dead UDHCPC_FIX variable — set and exported but never consumed by any install script.
2026-04-22 09:55:04 +02:00 · 2026-04-17 13:41:00 +02:00 · 2026-04-17 13:03:14 +02:00
74 changed files with 317 additions and 2784 deletions
--- a/.github/changelogs/2026/04.md
+++ b/.github/changelogs/2026/04.md
@@ -1,149 +1,3 @@
-## 2026-04-18
-
-### 🆕 New Scripts
-
-  - Dagu ([#13830](https://github.com/community-scripts/ProxmoxVE/pull/13830))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - BabyBuddy: set DJANGO_SETTINGS_MODULE before migrate in update [@MickLesk](https://github.com/MickLesk) ([#13836](https://github.com/community-scripts/ProxmoxVE/pull/13836))
-    - litellm: add prisma generate and use venv binary directly [@MickLesk](https://github.com/MickLesk) ([#13835](https://github.com/community-scripts/ProxmoxVE/pull/13835))
-    - yamtrack: add missing nginx.conf sed edits to update script [@MickLesk](https://github.com/MickLesk) ([#13834](https://github.com/community-scripts/ProxmoxVE/pull/13834))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - SparkyFitness Garmin Microservice: fix update function [@tomfrenzel](https://github.com/tomfrenzel) ([#13824](https://github.com/community-scripts/ProxmoxVE/pull/13824))
-
-  - #### 🔧 Refactor
-
-    - Clean-Orphan-LVM: check all cluster nodes for VM/CT configs [@MickLesk](https://github.com/MickLesk) ([#13837](https://github.com/community-scripts/ProxmoxVE/pull/13837))
-
-## 2026-04-17
-
-### 🆕 New Scripts
-
-  - step-ca ([#13775](https://github.com/community-scripts/ProxmoxVE/pull/13775))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - core: pin IGC version to compute-runtime compatible tag (Intel GPU) [@MickLesk](https://github.com/MickLesk) ([#13814](https://github.com/community-scripts/ProxmoxVE/pull/13814))
-    - Fix for bambuddy community script update [@abbasegbeyemi](https://github.com/abbasegbeyemi) ([#13816](https://github.com/community-scripts/ProxmoxVE/pull/13816))
-    - Umami: Fix update procedure [@tremor021](https://github.com/tremor021) ([#13807](https://github.com/community-scripts/ProxmoxVE/pull/13807))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: sanitize mount_fs input — strip spaces and trailing commas [@MickLesk](https://github.com/MickLesk) ([#13806](https://github.com/community-scripts/ProxmoxVE/pull/13806))
-
-  - #### 🔧 Refactor
-
-    - core: fix some pct create issues (telemetry) + cleanup [@MickLesk](https://github.com/MickLesk) ([#13810](https://github.com/community-scripts/ProxmoxVE/pull/13810))
-
-## 2026-04-16
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Add pnpm as a dependency to ghost-cli install [@YourFavoriteKyle](https://github.com/YourFavoriteKyle) ([#13789](https://github.com/community-scripts/ProxmoxVE/pull/13789))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: wire ENABLE_MKNOD and ALLOW_MOUNT_FS into LXC features [@MickLesk](https://github.com/MickLesk) ([#13796](https://github.com/community-scripts/ProxmoxVE/pull/13796))
-
-## 2026-04-15
-
-### 🆕 New Scripts
-
-  - iGotify ([#13773](https://github.com/community-scripts/ProxmoxVE/pull/13773))
- GitHub-Runner ([#13709](https://github.com/community-scripts/ProxmoxVE/pull/13709))
- Revert "Remove low-install-count CT scripts and installers (#13570)" [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13752](https://github.com/community-scripts/ProxmoxVE/pull/13752))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - [alpine-nextcloud] Update Nginx MIME types to support .mjs files [@GuiltyFox](https://github.com/GuiltyFox) ([#13771](https://github.com/community-scripts/ProxmoxVE/pull/13771))
-    - Domain Monitor: Fix file ownership after update [@tremor021](https://github.com/tremor021) ([#13759](https://github.com/community-scripts/ProxmoxVE/pull/13759))
-
-  - #### 💥 Breaking Changes
-
-    - Reitti: refactor scripts for v4 - remove RabbitMQ and Photon [@MickLesk](https://github.com/MickLesk) ([#13728](https://github.com/community-scripts/ProxmoxVE/pull/13728))
-
-  - #### 🔧 Refactor
-
-    - Semaphore: add BoltDB to SQLite migration [@tremor021](https://github.com/tremor021) ([#13779](https://github.com/community-scripts/ProxmoxVE/pull/13779))
-
-### 📚 Documentation
-
-  - cleanup: remove docs/, update README & CONTRIBUTING, fix repo config [@MickLesk](https://github.com/MickLesk) ([#13770](https://github.com/community-scripts/ProxmoxVE/pull/13770))
-
-## 2026-04-14
-
-### 🚀 Updated Scripts
-
-  - Immich: Pin photo-processing library revisions [@vhsdream](https://github.com/vhsdream) ([#13748](https://github.com/community-scripts/ProxmoxVE/pull/13748))
-
-  - #### 🐞 Bug Fixes
-
-    - BentoPDF: Nginx fixes [@tremor021](https://github.com/tremor021) ([#13741](https://github.com/community-scripts/ProxmoxVE/pull/13741))
-    - Zerobyte: add git to dependencies to fix bun install failure [@Copilot](https://github.com/Copilot) ([#13721](https://github.com/community-scripts/ProxmoxVE/pull/13721))
-    - alpine-nextcloud-install: do not use deprecated nginx config [@AlexanderStein](https://github.com/AlexanderStein) ([#13726](https://github.com/community-scripts/ProxmoxVE/pull/13726))
-
-  - #### ✨ New Features
-
-    - Mealie: support v3.15+ Nuxt 4 migration [@MickLesk](https://github.com/MickLesk) ([#13731](https://github.com/community-scripts/ProxmoxVE/pull/13731))
-
-  - #### 🔧 Refactor
-
-    - Lyrion: correct service name and version file in update script [@MickLesk](https://github.com/MickLesk) ([#13734](https://github.com/community-scripts/ProxmoxVE/pull/13734))
-    - Changedetection: move env vars from service file to .env [@tremor021](https://github.com/tremor021) ([#13732](https://github.com/community-scripts/ProxmoxVE/pull/13732))
-
-## 2026-04-13
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Slskd: Remove stale Soularr lock file on startup and redirect logs to stderr [@MickLesk](https://github.com/MickLesk) ([#13669](https://github.com/community-scripts/ProxmoxVE/pull/13669))
-    - Bambuddy: preserve database and archive on update [@Copilot](https://github.com/Copilot) ([#13706](https://github.com/community-scripts/ProxmoxVE/pull/13706))
-
-  - #### ✨ New Features
-
-    - Immich: Pin version to 2.7.5 [@vhsdream](https://github.com/vhsdream) ([#13715](https://github.com/community-scripts/ProxmoxVE/pull/13715))
-    - Bytestash: auto backup/restore data on update [@MickLesk](https://github.com/MickLesk) ([#13707](https://github.com/community-scripts/ProxmoxVE/pull/13707))
-    - OpenCloud: pin version to 6.0.0 [@vhsdream](https://github.com/vhsdream) ([#13691](https://github.com/community-scripts/ProxmoxVE/pull/13691))
-
-  - #### 💥 Breaking Changes
-
-    - Mealie: pin version to v3.14.0 in install and update scripts [@Copilot](https://github.com/Copilot) ([#13724](https://github.com/community-scripts/ProxmoxVE/pull/13724))
-
-  - #### 🔧 Refactor
-
-    - core: remove unused TEMP_DIR mktemp leak in build_container / clean sonarqube [@MickLesk](https://github.com/MickLesk) ([#13708](https://github.com/community-scripts/ProxmoxVE/pull/13708))
-
-## 2026-04-12
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Alpine-Wakapi: Remove container checks in update_script function [@MickLesk](https://github.com/MickLesk) ([#13694](https://github.com/community-scripts/ProxmoxVE/pull/13694))
-
-  - #### 🔧 Refactor
-
-    - IronClaw: Install keychain dependencies and launch in a DBus session [@MickLesk](https://github.com/MickLesk) ([#13692](https://github.com/community-scripts/ProxmoxVE/pull/13692))
-    - MeTube: Allow pnpm build scripts to fix ERR_PNPM_IGNORED_BUILDS [@MickLesk](https://github.com/MickLesk) ([#13668](https://github.com/community-scripts/ProxmoxVE/pull/13668))
-
 ## 2026-04-11

 ### 🚀 Updated Scripts
--- a/.github/workflows/pocketbase-bot.yml
+++ b/.github/workflows/pocketbase-bot.yml
@@ -337,8 +337,8 @@ jobs:

            if (infoMatch) {
              // ── INFO SUBCOMMAND ──────────────────────────────────────────────
-              const notesArr   = readJsonBlob(record.notes);
-              const methodsArr = readJsonBlob(record.install_methods);
+              const notesArr   = readJsonBlob(record.notes_json);
+              const methodsArr = readJsonBlob(record.install_methods_json);

              const out = [];
              out.push('ℹ️ **PocketBase Bot**: Info for **`' + slug + '`**\n');
@@ -382,13 +382,13 @@ jobs:
              // ── NOTE SUBCOMMAND ──────────────────────────────────────────────
              const noteAction  = noteMatch[1].toLowerCase();
              const noteArgsStr = rest.substring(noteMatch[0].length).trim();
-              let notesArr = readJsonBlob(record.notes);
+              let notesArr = readJsonBlob(record.notes_json);

              async function patchNotes(arr) {
                const res = await request(recordsUrl + '/' + record.id, {
                  method: 'PATCH',
                  headers: { 'Authorization': token, 'Content-Type': 'application/json' },
-                  body: JSON.stringify({ notes: arr })
+                  body: JSON.stringify({ notes_json: JSON.stringify(arr) })
                });
                if (!res.ok) {
                  await addReaction('-1');
@@ -504,7 +504,7 @@ jobs:
              // ── METHOD SUBCOMMAND ────────────────────────────────────────────
              const methodArgs     = rest.replace(/^method\s*/i, '').trim();
              const methodListMode = !methodArgs || methodArgs.toLowerCase() === 'list';
-              let methodsArr = readJsonBlob(record.install_methods);
+              let methodsArr = readJsonBlob(record.install_methods_json);

              // Method field classification
              const RESOURCE_KEYS = { cpu: 'number', ram: 'number', hdd: 'number', os: 'string', version: 'string' };
@@ -526,7 +526,7 @@ jobs:
                const res = await request(recordsUrl + '/' + record.id, {
                  method: 'PATCH',
                  headers: { 'Authorization': token, 'Content-Type': 'application/json' },
-                  body: JSON.stringify({ install_methods: arr })
+                  body: JSON.stringify({ install_methods_json: arr })
                });
                if (!res.ok) {
                  await addReaction('-1');
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,9 +38,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit



-
-
-



@@ -54,7 +51,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit


 <details>
-<summary><h4>April (18 entries)</h4></summary>
+<summary><h4>April (11 entries)</h4></summary>

 [View April 2026 Changelog](.github/changelogs/2026/04.md)

@@ -445,129 +442,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-04-22
-
-### 🆕 New Scripts
-
-  - Dashy ([#13817](https://github.com/community-scripts/ProxmoxVE/pull/13817))
- Mini-QR ([#13902](https://github.com/community-scripts/ProxmoxVE/pull/13902))
- ownfoil ([#13904](https://github.com/community-scripts/ProxmoxVE/pull/13904))
- ERPNext ([#13921](https://github.com/community-scripts/ProxmoxVE/pull/13921))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - add --clear to uv venv in update_script() to prevent interactive prompt [@MickLesk](https://github.com/MickLesk) ([#13926](https://github.com/community-scripts/ProxmoxVE/pull/13926))
-
-## 2026-04-21
-
-### 🆕 New Scripts
-
-  - gogs ([#13896](https://github.com/community-scripts/ProxmoxVE/pull/13896))
- anchor ([#13895](https://github.com/community-scripts/ProxmoxVE/pull/13895))
- minthcm ([#13903](https://github.com/community-scripts/ProxmoxVE/pull/13903))
- foldergram ([#13900](https://github.com/community-scripts/ProxmoxVE/pull/13900))
-
-### 🚀 Updated Scripts
-
-  - OpenCloud: Pin version to 6.1.0 [@vhsdream](https://github.com/vhsdream) ([#13890](https://github.com/community-scripts/ProxmoxVE/pull/13890))
-
-  - #### 🐞 Bug Fixes
-
-    - Domain-Locker: Update dependencies [@tremor021](https://github.com/tremor021) ([#13901](https://github.com/community-scripts/ProxmoxVE/pull/13901))
-    - homelable: fix install failure by correcting password-reset chmod target [@Copilot](https://github.com/Copilot) ([#13894](https://github.com/community-scripts/ProxmoxVE/pull/13894))
-
-  - #### ✨ New Features
-
-    - FileFlows: Update dependencies [@tremor021](https://github.com/tremor021) ([#13917](https://github.com/community-scripts/ProxmoxVE/pull/13917))
-
-## 2026-04-20
-
-### 🆕 New Scripts
-
-  - WhoDB ([#13880](https://github.com/community-scripts/ProxmoxVE/pull/13880))
-
-### 🚀 Updated Scripts
-
-  - pangolin: create migration tables before data transfer to prevent role loss [@MickLesk](https://github.com/MickLesk) ([#13874](https://github.com/community-scripts/ProxmoxVE/pull/13874))
-
-  - #### 🐞 Bug Fixes
-
-    - Pangolin: pre-apply schema migrations to prevent data loss [@MickLesk](https://github.com/MickLesk) ([#13861](https://github.com/community-scripts/ProxmoxVE/pull/13861))
-    - ActualBudget: change migration messages to warnings [@MickLesk](https://github.com/MickLesk) ([#13860](https://github.com/community-scripts/ProxmoxVE/pull/13860))
-    - slskd: migrate config keys for 0.25.0 breaking change [@MickLesk](https://github.com/MickLesk) ([#13862](https://github.com/community-scripts/ProxmoxVE/pull/13862))
-
-  - #### ✨ New Features
-
-    - Wanderer: add pocketbase CLI wrapper with env [@MickLesk](https://github.com/MickLesk) ([#13863](https://github.com/community-scripts/ProxmoxVE/pull/13863))
-    - feat(homelable): add password reset utility script [@davidsoncabista](https://github.com/davidsoncabista) ([#13798](https://github.com/community-scripts/ProxmoxVE/pull/13798))
-
-  - #### 🔧 Refactor
-
-    - Several Scripts: Bump NodeJS to align Node.js versions with upstream for 5 scripts [@MickLesk](https://github.com/MickLesk) ([#13875](https://github.com/community-scripts/ProxmoxVE/pull/13875))
-    - Refactor: PMG Post Install [@MickLesk](https://github.com/MickLesk) ([#13693](https://github.com/community-scripts/ProxmoxVE/pull/13693))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: detect Perl breakage after LXC stack upgrade and improve storage validation [@MickLesk](https://github.com/MickLesk) ([#13879](https://github.com/community-scripts/ProxmoxVE/pull/13879))
-
-## 2026-04-19
-
-### 🆕 New Scripts
-
-  - nametag ([#13849](https://github.com/community-scripts/ProxmoxVE/pull/13849))
-
-## 2026-04-18
-
-### 🆕 New Scripts
-
-  - Dagu ([#13830](https://github.com/community-scripts/ProxmoxVE/pull/13830))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - BabyBuddy: set DJANGO_SETTINGS_MODULE before migrate in update [@MickLesk](https://github.com/MickLesk) ([#13836](https://github.com/community-scripts/ProxmoxVE/pull/13836))
-    - litellm: add prisma generate and use venv binary directly [@MickLesk](https://github.com/MickLesk) ([#13835](https://github.com/community-scripts/ProxmoxVE/pull/13835))
-    - yamtrack: add missing nginx.conf sed edits to update script [@MickLesk](https://github.com/MickLesk) ([#13834](https://github.com/community-scripts/ProxmoxVE/pull/13834))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - SparkyFitness Garmin Microservice: fix update function [@tomfrenzel](https://github.com/tomfrenzel) ([#13824](https://github.com/community-scripts/ProxmoxVE/pull/13824))
-
-  - #### 🔧 Refactor
-
-    - Clean-Orphan-LVM: check all cluster nodes for VM/CT configs [@MickLesk](https://github.com/MickLesk) ([#13837](https://github.com/community-scripts/ProxmoxVE/pull/13837))
-
-## 2026-04-17
-
-### 🆕 New Scripts
-
-  - step-ca ([#13775](https://github.com/community-scripts/ProxmoxVE/pull/13775))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - core: pin IGC version to compute-runtime compatible tag (Intel GPU) [@MickLesk](https://github.com/MickLesk) ([#13814](https://github.com/community-scripts/ProxmoxVE/pull/13814))
-    - Fix for bambuddy community script update [@abbasegbeyemi](https://github.com/abbasegbeyemi) ([#13816](https://github.com/community-scripts/ProxmoxVE/pull/13816))
-    - Umami: Fix update procedure [@tremor021](https://github.com/tremor021) ([#13807](https://github.com/community-scripts/ProxmoxVE/pull/13807))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: sanitize mount_fs input — strip spaces and trailing commas [@MickLesk](https://github.com/MickLesk) ([#13806](https://github.com/community-scripts/ProxmoxVE/pull/13806))
-
-  - #### 🔧 Refactor
-
-    - core: fix some pct create issues (telemetry) + cleanup [@MickLesk](https://github.com/MickLesk) ([#13810](https://github.com/community-scripts/ProxmoxVE/pull/13810))
-
 ## 2026-04-16

 ### 🚀 Updated Scripts
@@ -1096,4 +970,175 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

  - #### 🔧 Refactor

-    - Harden code-server addon install script [@MickLesk](https://github.com/MickLesk) ([#13116](https://github.com/community-scripts/ProxmoxVE/pull/13116))
+    - Harden code-server addon install script [@MickLesk](https://github.com/MickLesk) ([#13116](https://github.com/community-scripts/ProxmoxVE/pull/13116))
+
+## 2026-03-19
+
+### 🚀 Updated Scripts
+
+  - Owncast: increase default disk size from 2GB to 10GB [@Copilot](https://github.com/Copilot) ([#13079](https://github.com/community-scripts/ProxmoxVE/pull/13079))
+
+  - #### 🐞 Bug Fixes
+
+    - fix: remove extra backslash to match single quoted here-doc [@Zelnes](https://github.com/Zelnes) ([#13108](https://github.com/community-scripts/ProxmoxVE/pull/13108))
+    - Reactive-Resume: Upgrade Node to 24 and enable Corepack [@MickLesk](https://github.com/MickLesk) ([#13093](https://github.com/community-scripts/ProxmoxVE/pull/13093))
+    - Increase Tracearr RAM; derive APP_VERSION [@MickLesk](https://github.com/MickLesk) ([#13087](https://github.com/community-scripts/ProxmoxVE/pull/13087))
+    - ProjectSend: Update application access URL [@tremor021](https://github.com/tremor021) ([#13078](https://github.com/community-scripts/ProxmoxVE/pull/13078))
+    - Dispatcharr: use npm install --no-audit --progress=false [@MickLesk](https://github.com/MickLesk) ([#13074](https://github.com/community-scripts/ProxmoxVE/pull/13074))
+    - core: reorder hwaccel setup and adjust GPU group usermod [@MickLesk](https://github.com/MickLesk) ([#13072](https://github.com/community-scripts/ProxmoxVE/pull/13072))
+
+  - #### ✨ New Features
+
+    - tools.func: display pin reason in release-check messages [@MickLesk](https://github.com/MickLesk) ([#13095](https://github.com/community-scripts/ProxmoxVE/pull/13095))
+    - NocoDB: Unpin Version to latest [@MickLesk](https://github.com/MickLesk) ([#13094](https://github.com/community-scripts/ProxmoxVE/pull/13094))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - tools.func: use dpkg-query for reliable JDK version detection [@MickLesk](https://github.com/MickLesk) ([#13101](https://github.com/community-scripts/ProxmoxVE/pull/13101))
+
+### 📚 Documentation
+
+  - Update link from helper-scripts.com to community-scripts.org [@adnanvaldes](https://github.com/adnanvaldes) ([#13098](https://github.com/community-scripts/ProxmoxVE/pull/13098))
+- github: add PocketBase bot workflow [@MickLesk](https://github.com/MickLesk) ([#13075](https://github.com/community-scripts/ProxmoxVE/pull/13075))
+
+## 2026-03-18
+
+### 🆕 New Scripts
+
+  - Alpine-Ntfy [@MickLesk](https://github.com/MickLesk) ([#13048](https://github.com/community-scripts/ProxmoxVE/pull/13048))
+- Split-Pro ([#12975](https://github.com/community-scripts/ProxmoxVE/pull/12975))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Tdarr: use curl_with_retry and correct exit code [@MickLesk](https://github.com/MickLesk) ([#13060](https://github.com/community-scripts/ProxmoxVE/pull/13060))
+    - reitti: fix: v4 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#13039](https://github.com/community-scripts/ProxmoxVE/pull/13039))
+    - Paperless-NGX: increase default RAM to 3GB [@MickLesk](https://github.com/MickLesk) ([#13018](https://github.com/community-scripts/ProxmoxVE/pull/13018))
+    - Plex: restart service after update to apply new version [@MickLesk](https://github.com/MickLesk) ([#13017](https://github.com/community-scripts/ProxmoxVE/pull/13017))
+
+  - #### ✨ New Features
+
+    - tools: centralize GPU group setup via setup_hwaccel [@MickLesk](https://github.com/MickLesk) ([#13044](https://github.com/community-scripts/ProxmoxVE/pull/13044))
+    - Termix: add guacd build and systemd integration [@MickLesk](https://github.com/MickLesk) ([#12999](https://github.com/community-scripts/ProxmoxVE/pull/12999))
+
+  - #### 🔧 Refactor
+
+    - Podman: replace deprecated commands with Quadlets [@MickLesk](https://github.com/MickLesk) ([#13052](https://github.com/community-scripts/ProxmoxVE/pull/13052))
+    - Refactor: Jellyfin repo, ffmpeg package and symlinks [@MickLesk](https://github.com/MickLesk) ([#13045](https://github.com/community-scripts/ProxmoxVE/pull/13045))
+    - pve-scripts-local: Increase default disk size from 4GB to 10GB [@MickLesk](https://github.com/MickLesk) ([#13009](https://github.com/community-scripts/ProxmoxVE/pull/13009))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func Implement pg_cron setup for setup_postgresql [@MickLesk](https://github.com/MickLesk) ([#13053](https://github.com/community-scripts/ProxmoxVE/pull/13053))
+    - tools.func: Implement check_for_gh_tag function [@MickLesk](https://github.com/MickLesk) ([#12998](https://github.com/community-scripts/ProxmoxVE/pull/12998))
+    - tools.func: Implement fetch_and_deploy_gh_tag function [@MickLesk](https://github.com/MickLesk) ([#13000](https://github.com/community-scripts/ProxmoxVE/pull/13000))
+
+## 2026-03-17
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Gluetun: add OpenVPN process user and cleanup stale config [@MickLesk](https://github.com/MickLesk) ([#13016](https://github.com/community-scripts/ProxmoxVE/pull/13016))
+    - Frigate: check OpenVino model files exist before configuring detector and use curl_with_retry instead of default wget [@MickLesk](https://github.com/MickLesk) ([#13019](https://github.com/community-scripts/ProxmoxVE/pull/13019))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - tools.func: Update `create_self_signed_cert()` [@tremor021](https://github.com/tremor021) ([#13008](https://github.com/community-scripts/ProxmoxVE/pull/13008))
+
+## 2026-03-16
+
+### 🆕 New Scripts
+
+  - Gluetun ([#12976](https://github.com/community-scripts/ProxmoxVE/pull/12976))
+- Anytype-Server ([#12974](https://github.com/community-scripts/ProxmoxVE/pull/12974))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: use gcc-13 for compilation & add uv python pre-install with retry logic [@MickLesk](https://github.com/MickLesk) ([#12935](https://github.com/community-scripts/ProxmoxVE/pull/12935))
+    - Tautulli: add setuptools<81 constraint to update script [@MickLesk](https://github.com/MickLesk) ([#12959](https://github.com/community-scripts/ProxmoxVE/pull/12959))
+    - Seerr: add missing build deps [@MickLesk](https://github.com/MickLesk) ([#12960](https://github.com/community-scripts/ProxmoxVE/pull/12960))
+    - fix: yubal update [@CrazyWolf13](https://github.com/CrazyWolf13) ([#12961](https://github.com/community-scripts/ProxmoxVE/pull/12961))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - hwaccel: remove ROCm install from AMD APU setup [@MickLesk](https://github.com/MickLesk) ([#12958](https://github.com/community-scripts/ProxmoxVE/pull/12958))
+
+## 2026-03-15
+
+### 🆕 New Scripts
+
+  - Yamtrack ([#12936](https://github.com/community-scripts/ProxmoxVE/pull/12936))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Wishlist: use --frozen-lockfile for pnpm install [@MickLesk](https://github.com/MickLesk) ([#12892](https://github.com/community-scripts/ProxmoxVE/pull/12892))
+    - SparkyFitness: use --legacy-peer-deps for npm install [@MickLesk](https://github.com/MickLesk) ([#12888](https://github.com/community-scripts/ProxmoxVE/pull/12888))
+    - Frigate: add fallback for OpenVino labelmap file [@MickLesk](https://github.com/MickLesk) ([#12889](https://github.com/community-scripts/ProxmoxVE/pull/12889))
+
+  - #### 🔧 Refactor
+
+    - Refactor: ITSM-NG [@MickLesk](https://github.com/MickLesk) ([#12918](https://github.com/community-scripts/ProxmoxVE/pull/12918))
+    - core: unify RELEASE variable for check_for_gh_release and fetch_and_deploy [@MickLesk](https://github.com/MickLesk) ([#12917](https://github.com/community-scripts/ProxmoxVE/pull/12917))
+    - Standardize NSAPP names across VM scripts [@MickLesk](https://github.com/MickLesk) ([#12924](https://github.com/community-scripts/ProxmoxVE/pull/12924))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: retry downloads with exponential backoff [@MickLesk](https://github.com/MickLesk) ([#12896](https://github.com/community-scripts/ProxmoxVE/pull/12896))
+
+### ❔ Uncategorized
+
+  - [go2rtc] Add ffmpeg dependency to install script [@Copilot](https://github.com/Copilot) ([#12944](https://github.com/community-scripts/ProxmoxVE/pull/12944))
+
+## 2026-03-14
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Patchmon: remove v prefix from pinned version  [@MickLesk](https://github.com/MickLesk) ([#12891](https://github.com/community-scripts/ProxmoxVE/pull/12891))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - tools.func: don't abort on AMD repo apt update failure [@MickLesk](https://github.com/MickLesk) ([#12890](https://github.com/community-scripts/ProxmoxVE/pull/12890))
+
+## 2026-03-13
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Hotfix: Removed clean install usage from original script. [@nickheyer](https://github.com/nickheyer) ([#12870](https://github.com/community-scripts/ProxmoxVE/pull/12870))
+
+  - #### 🔧 Refactor
+
+    - Discopanel: V2 Support + Script rewrite [@nickheyer](https://github.com/nickheyer) ([#12763](https://github.com/community-scripts/ProxmoxVE/pull/12763))
+
+### 🧰 Tools
+
+  - update-apps: fix restore path, add PBS support and improve restore messages [@omertahaoztop](https://github.com/omertahaoztop) ([#12528](https://github.com/community-scripts/ProxmoxVE/pull/12528))
+
+  - #### 🐞 Bug Fixes
+
+    - fix(pve-privilege-converter): handle already stopped container in manage_states [@liuqitoday](https://github.com/liuqitoday) ([#12765](https://github.com/community-scripts/ProxmoxVE/pull/12765))
+
+### 📚 Documentation
+
+  - Update: Docs/website metadata workflow [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#12858](https://github.com/community-scripts/ProxmoxVE/pull/12858))
--- a/ct/actualbudget.sh
+++ b/ct/actualbudget.sh
@@ -48,9 +48,9 @@ function update_script() {
      msg_ok "Updated successfully!"
    fi
  else
-    msg_warn "Old Installation Found, you need to migrate your data and recreate to a new container"
-    msg_warn "Please follow the instructions on the Actual Budget website to migrate your data"
-    msg_warn "https://actualbudget.org/docs/backup-restore/backup"
+    msg_info "Old Installation Found, you need to migrate your data and recreate to a new container"
+    msg_info "Please follow the instructions on the Actual Budget website to migrate your data"
+    msg_info "https://actualbudget.org/docs/backup-restore/backup"
    exit
  fi
  exit
--- a/ct/anchor.sh
+++ b/ct/anchor.sh
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ZhFahim/anchor
-
-APP="Anchor"
-var_tags="${var_tags:-notes;productivity;sync}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f ~/.anchor ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "anchor" "ZhFahim/anchor"; then
-    msg_info "Stopping Services"
-    systemctl stop anchor-web anchor-server
-    msg_ok "Stopped Services"
-
-    msg_info "Backing up Configuration"
-    cp /opt/anchor/.env /opt/anchor.env.bak
-    msg_ok "Backed up Configuration"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "anchor" "ZhFahim/anchor" "tarball"
-
-    msg_info "Building Server"
-    cd /opt/anchor/server
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm prisma generate
-    $STD pnpm build
-    [[ -d src/generated ]] && mkdir -p dist/src && cp -R src/generated dist/src/
-    msg_ok "Built Server"
-
-    msg_info "Building Web Interface"
-    cd /opt/anchor/web
-    $STD pnpm install --frozen-lockfile
-    SERVER_URL=http://127.0.0.1:3001 $STD pnpm build
-    cp -r .next/static .next/standalone/.next/static
-    cp -r public .next/standalone/public
-    msg_ok "Built Web Interface"
-
-    cp /opt/anchor.env.bak /opt/anchor/.env
-    rm -f /opt/anchor.env.bak
-
-    msg_info "Running Database Migrations"
-    cd /opt/anchor/server
-    set -a && source /opt/anchor/.env && set +a
-    $STD pnpm prisma migrate deploy
-    msg_ok "Ran Database Migrations"
-
-    msg_info "Starting Services"
-    systemctl start anchor-server anchor-web
-    msg_ok "Started Services"
-    msg_ok "Updated ${APP}"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/babybuddy.sh
+++ b/ct/babybuddy.sh
@@ -48,7 +48,6 @@ function update_script() {
    mv /tmp/production.py.bak /opt/babybuddy/babybuddy/settings/production.py
    source .venv/bin/activate
    $STD uv pip install -r requirements.txt
-    export DJANGO_SETTINGS_MODULE=babybuddy.settings.production
    $STD python manage.py migrate
    msg_ok "Updated ${APP}"

--- a/ct/bambuddy.sh
+++ b/ct/bambuddy.sh
@@ -48,7 +48,7 @@ function update_script() {

    msg_info "Updating Python Dependencies"
    cd /opt/bambuddy
-    $STD uv venv --clear
+    $STD uv venv
    $STD uv pip install -r requirements.txt
    msg_ok "Updated Python Dependencies"

--- a/ct/calibre-web.sh
+++ b/ct/calibre-web.sh
@@ -44,7 +44,7 @@ function update_script() {

    msg_info "Installing Dependencies"
    cd /opt/calibre-web
-    $STD uv venv --clear /opt/calibre-web/.venv
+    $STD uv venv
    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --upgrade pip setuptools wheel
    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir -r requirements.txt
    msg_ok "Installed Dependencies"
--- a/ct/dagu.sh
+++ b/ct/dagu.sh
@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://dagu.sh/
-
-APP="Dagu"
-var_tags="${var_tags:-automation;workflow;scheduler}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/dagu/dagu ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "dagu" "dagucloud/dagu"; then
-    msg_info "Stopping Service"
-    systemctl stop dagu
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Data"
-    cp -r /opt/dagu/data /opt/dagu_data_backup
-    msg_ok "Backed up Data"
-
-    fetch_and_deploy_gh_release "dagu" "dagucloud/dagu" "prebuild" "latest" "/opt/dagu" "dagu_*_linux_amd64.tar.gz"
-
-    msg_info "Restoring Data"
-    mkdir -p /opt/dagu/data
-    cp -r /opt/dagu_data_backup/. /opt/dagu/data
-    rm -rf /opt/dagu_data_backup
-    msg_ok "Restored Data"
-
-    msg_info "Starting Service"
-    systemctl start dagu
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/ct/dashy.sh
+++ b/ct/dashy.sh
@@ -1,73 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: tteck (tteckster) | Co-Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://dashy.to/
-
-APP="Dashy"
-var_tags="${var_tags:-dashboard}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-6}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/dashy/public/ ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if check_for_gh_release "dashy" "Lissy93/dashy"; then
-    msg_info "Stopping Service"
-    systemctl stop dashy
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up conf.yml"
-    if [[ -f /opt/dashy/public/conf.yml ]]; then
-      cp -R /opt/dashy/public/conf.yml /opt/dashy_conf_backup.yml
-    else
-      cp -R /opt/dashy/user-data/conf.yml /opt/dashy_conf_backup.yml
-    fi
-    msg_ok "Backed up conf.yml"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "dashy" "Lissy93/dashy" "prebuild" "latest" "/opt/dashy" "dashy-*.tar.gz"
-
-    msg_info "Updating Dashy"
-    cd /opt/dashy
-    $STD yarn install --ignore-engines --network-timeout 300000
-    msg_ok "Updated Dashy"
-
-    msg_info "Restoring conf.yml"
-    cp -R /opt/dashy_conf_backup.yml /opt/dashy/user-data
-    msg_ok "Restored conf.yml"
-
-    msg_info "Cleaning"
-    rm -rf /opt/dashy_conf_backup.yml /opt/dashy/public/conf.yml
-    msg_ok "Cleaned"
-
-    msg_info "Starting Dashy"
-    systemctl start dashy
-    msg_ok "Started Dashy"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4000${CL}"
--- a/ct/domain-locker.sh
+++ b/ct/domain-locker.sh
@@ -20,43 +20,41 @@ color
 catch_errors

 function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/domain-locker ]]; then
-    msg_error "No ${APP} Installation Found!"
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -d /opt/domain-locker ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+
+    if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
+        msg_info "Stopping Service"
+        systemctl stop domain-locker
+        msg_info "Service stopped"
+
+        PG_VERSION="17" setup_postgresql
+        NODE_VERSION="22" setup_nodejs
+        CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker" "tarball"
+
+        msg_info "Installing Modules (patience)"
+        cd /opt/domain-locker
+        $STD npm install
+        msg_ok "Installed Modules"
+
+        msg_info "Building Domain-Locker (a lot of patience)"
+        set -a
+        source /opt/domain-locker.env
+        set +a
+        $STD npm run build
+        msg_info "Built Domain-Locker"
+
+        msg_info "Restarting Services"
+        systemctl start domain-locker
+        msg_ok "Restarted Services"
+        msg_ok "Updated successfully!"
+    fi
    exit
-  fi
-
-  ensure_dependencies whois
-
-  if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
-    msg_info "Stopping Service"
-    systemctl stop domain-locker
-    msg_info "Service stopped"
-
-    PG_VERSION="17" setup_postgresql
-    NODE_VERSION="22" setup_nodejs
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker" "tarball"
-
-    msg_info "Installing Modules (patience)"
-    cd /opt/domain-locker
-    $STD npm install
-    msg_ok "Installed Modules"
-
-    msg_info "Building Domain-Locker (a lot of patience)"
-    set -a
-    source /opt/domain-locker.env
-    set +a
-    $STD npm run build
-    msg_info "Built Domain-Locker"
-
-    msg_info "Restarting Services"
-    systemctl start domain-locker
-    msg_ok "Restarted Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
 }

 start
--- a/ct/erpnext.sh
+++ b/ct/erpnext.sh
@@ -1,47 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/frappe/erpnext
-
-APP="ERPNext"
-var_tags="${var_tags:-erp;business;accounting}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/frappe-bench ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating ERPNext"
-  $STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; cd /opt/frappe-bench && bench update --reset'
-  msg_ok "Updated ERPNext"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
-echo -e "${INFO}${YW} Credentials:${CL}"
-echo -e "${TAB}${BGN}Username: Administrator${CL}"
-echo -e "${TAB}${BGN}Password: see ~/erpnext.creds${CL}"
--- a/ct/foldergram.sh
+++ b/ct/foldergram.sh
@@ -1,61 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/foldergram/foldergram
-
-APP="Foldergram"
-var_tags="${var_tags:-photos}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/foldergram ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "foldergram" "foldergram/foldergram"; then
-    msg_info "Stopping Service"
-    systemctl stop foldergram
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "foldergram" "foldergram/foldergram" "tarball"
-
-    msg_info "Installing Foldergram"
-    cd /opt/foldergram
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm run build
-    msg_ok "Installed Foldergram"
-
-    msg_info "Starting Service"
-    systemctl start foldergram
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  cleanup_lxc
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4141${CL}"
--- a/ct/gogs.sh
+++ b/ct/gogs.sh
@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://gogs.io/
-
-APP="Gogs"
-var_tags="${var_tags:-git;code;devops}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/gogs/gogs ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "gogs" "gogs/gogs"; then
-    msg_info "Stopping Service"
-    systemctl stop gogs
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Data"
-    cp -r /opt/gogs/custom /opt/gogs_custom_backup
-    cp -r /opt/gogs/data /opt/gogs_data_backup
-    msg_ok "Backed up Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gogs" "gogs/gogs" "prebuild" "latest" "/opt/gogs" "gogs_*_linux_amd64.tar.gz"
-
-    msg_info "Restoring Data"
-    cp -r /opt/gogs_custom_backup/. /opt/gogs/custom
-    cp -r /opt/gogs_data_backup/. /opt/gogs/data
-    rm -rf /opt/gogs_custom_backup /opt/gogs_data_backup
-    msg_ok "Restored Data"
-
-    msg_info "Starting Service"
-    systemctl start gogs
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/headers/anchor
+++ b/ct/headers/anchor
@@ -1,6 +0,0 @@
-    ___               __              
-   /   |  ____  _____/ /_  ____  _____
-  / /| | / __ \/ ___/ __ \/ __ \/ ___/
- / ___ |/ / / / /__/ / / / /_/ / /    
-/_/  |_/_/ /_/\___/_/ /_/\____/_/     
-                                      
--- a/ct/headers/dagu
+++ b/ct/headers/dagu
@@ -1,6 +0,0 @@
-    ____                   
-   / __ \____ _____ ___  __
-  / / / / __ `/ __ `/ / / /
- / /_/ / /_/ / /_/ / /_/ / 
-/_____/\__,_/\__, /\__,_/  
-            /____/         
--- a/ct/headers/dashy
+++ b/ct/headers/dashy
@@ -1,6 +0,0 @@
-    ____             __         
-   / __ \____ ______/ /_  __  __
-  / / / / __ `/ ___/ __ \/ / / /
- / /_/ / /_/ (__  ) / / / /_/ / 
-/_____/\__,_/____/_/ /_/\__, /  
-                       /____/   
--- a/ct/headers/erpnext
+++ b/ct/headers/erpnext
@@ -1,6 +0,0 @@
-    __________  ____  _   __          __ 
-   / ____/ __ \/ __ \/ | / /__  _  __/ /_
-  / __/ / /_/ / /_/ /  |/ / _ \| |/_/ __/
- / /___/ _, _/ ____/ /|  /  __/>  </ /_  
-/_____/_/ |_/_/   /_/ |_/\___/_/|_|\__/  
-                                         
--- a/ct/headers/foldergram
+++ b/ct/headers/foldergram
@@ -1,6 +0,0 @@
-    ______      __    __                                   
-   / ____/___  / /___/ /__  _________ __________ _____ ___ 
-  / /_  / __ \/ / __  / _ \/ ___/ __ `/ ___/ __ `/ __ `__ \
- / __/ / /_/ / / /_/ /  __/ /  / /_/ / /  / /_/ / / / / / /
-/_/    \____/_/\__,_/\___/_/   \__, /_/   \__,_/_/ /_/ /_/ 
-                              /____/                       
--- a/ct/headers/gogs
+++ b/ct/headers/gogs
@@ -1,6 +0,0 @@
-   ______                
-  / ____/___  ____ ______
- / / __/ __ \/ __ `/ ___/
-/ /_/ / /_/ / /_/ (__  ) 
-\____/\____/\__, /____/  
-           /____/        
--- a/ct/headers/mini-qr
+++ b/ct/headers/mini-qr
@@ -1,6 +0,0 @@
-    __  ____       _       ____    ____ 
-   /  |/  (_)___  (_)     / __ \  / __ \
-  / /|_/ / / __ \/ /_____/ / / / / /_/ /
- / /  / / / / / / /_____/ /_/ / / _, _/ 
-/_/  /_/_/_/ /_/_/      \___\_\/_/ |_|  
-                                        
--- a/ct/headers/minthcm
+++ b/ct/headers/minthcm
@@ -1,6 +0,0 @@
-    __  ____       __  __  __________  ___
-   /  |/  (_)___  / /_/ / / / ____/  |/  /
-  / /|_/ / / __ \/ __/ /_/ / /   / /|_/ / 
- / /  / / / / / / /_/ __  / /___/ /  / /  
-/_/  /_/_/_/ /_/\__/_/ /_/\____/_/  /_/   
-                                          
--- a/ct/headers/nametag
+++ b/ct/headers/nametag
@@ -1,6 +0,0 @@
-    _   __                     __             
-   / | / /___ _____ ___  ___  / /_____ _____ _
-  /  |/ / __ `/ __ `__ \/ _ \/ __/ __ `/ __ `/
- / /|  / /_/ / / / / / /  __/ /_/ /_/ / /_/ / 
-/_/ |_/\__,_/_/ /_/ /_/\___/\__/\__,_/\__, /  
-                                     /____/   
--- a/ct/headers/ownfoil
+++ b/ct/headers/ownfoil
@@ -1,6 +0,0 @@
-                       ____      _ __
-  ____ _      ______  / __/___  (_) /
- / __ \ | /| / / __ \/ /_/ __ \/ / / 
-/ /_/ / |/ |/ / / / / __/ /_/ / / /  
-\____/|__/|__/_/ /_/_/  \____/_/_/   
-                                     
--- a/ct/headers/step-ca
+++ b/ct/headers/step-ca
@@ -1,6 +0,0 @@
-         __                             
-   _____/ /____  ____        _________ _
-  / ___/ __/ _ \/ __ \______/ ___/ __ `/
- (__  ) /_/  __/ /_/ /_____/ /__/ /_/ / 
-/____/\__/\___/ .___/      \___/\__,_/  
-             /_/                        
--- a/ct/headers/whodb
+++ b/ct/headers/whodb
@@ -1,6 +0,0 @@
- _       ____          ____  ____ 
-| |     / / /_  ____  / __ \/ __ )
-| | /| / / __ \/ __ \/ / / / __  |
-| |/ |/ / / / / /_/ / /_/ / /_/ / 
-|__/|__/_/ /_/\____/_____/_____/  
-                                  
--- a/ct/homelable.sh
+++ b/ct/homelable.sh
@@ -43,7 +43,7 @@ function update_script() {

    msg_info "Updating Python Dependencies"
    cd /opt/homelable/backend
-    $STD uv venv --clear /opt/homelable/backend/.venv
+    $STD uv venv /opt/homelable/backend/.venv
    $STD uv pip install --python /opt/homelable/backend/.venv/bin/python -r requirements.txt
    msg_ok "Updated Python Dependencies"

--- a/ct/iobroker.sh
+++ b/ct/iobroker.sh
@@ -27,9 +27,6 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-
-  NODE_VERSION="24" setup_nodejs
-
  msg_info "Updating ${APP} LXC"
  $STD apt update
  $STD apt -y upgrade
--- a/ct/jellyfin.sh
+++ b/ct/jellyfin.sh
@@ -32,16 +32,10 @@ function update_script() {
  if ! grep -qEi 'ubuntu' /etc/os-release; then
    msg_info "Updating Intel Dependencies"
    rm -f ~/.intel-* || true
-
-    # Fetch compute-runtime first so /tmp/gh_rel.json is populated for IGC tag resolution
+    fetch_and_deploy_gh_release "intel-igc-core-2" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-core-2_*_amd64.deb"
+    fetch_and_deploy_gh_release "intel-igc-opencl-2" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-opencl-2_*_amd64.deb"
    fetch_and_deploy_gh_release "intel-libgdgmm12" "intel/compute-runtime" "binary" "latest" "" "libigdgmm12_*_amd64.deb"
    fetch_and_deploy_gh_release "intel-opencl-icd" "intel/compute-runtime" "binary" "latest" "" "intel-opencl-icd_*_amd64.deb"
-
-    local igc_tag
-    _resolve_igc_tag igc_tag
-
-    fetch_and_deploy_gh_release "intel-igc-core-2" "intel/intel-graphics-compiler" "binary" "$igc_tag" "" "intel-igc-core-2_*_amd64.deb"
-    fetch_and_deploy_gh_release "intel-igc-opencl-2" "intel/intel-graphics-compiler" "binary" "$igc_tag" "" "intel-igc-opencl-2_*_amd64.deb"
    msg_ok "Updated Intel Dependencies"
  fi

--- a/ct/kima-hub.sh
+++ b/ct/kima-hub.sh
@@ -29,8 +29,6 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="22" setup_nodejs
-
  if check_for_gh_release "kima-hub" "Chevron7Locked/kima-hub"; then
    msg_info "Stopping Services"
    systemctl stop kima-frontend kima-backend kima-analyzer kima-analyzer-clap
--- a/ct/litellm.sh
+++ b/ct/litellm.sh
@@ -38,18 +38,12 @@ function update_script() {

  msg_info "Updating LiteLLM"
  $STD "$VENV_PATH/bin/python" -m pip install --upgrade litellm[proxy] prisma
-  $STD "$VENV_PATH/bin/prisma" generate
  msg_ok "LiteLLM updated"

  msg_info "Updating DB Schema"
-  $STD /opt/litellm/.venv/bin/litellm --config /opt/litellm/litellm.yaml --use_prisma_db_push --skip_server_startup
+  $STD uv --directory=/opt/litellm run litellm --config /opt/litellm/litellm.yaml --use_prisma_db_push --skip_server_startup
  msg_ok "DB Schema Updated"

-  msg_info "Updating Service"
-  sed -i 's|ExecStart=uv --directory=/opt/litellm run litellm|ExecStart=/opt/litellm/.venv/bin/litellm|' /etc/systemd/system/litellm.service
-  systemctl daemon-reload
-  msg_ok "Updated Service"
-
  msg_info "Starting Service"
  systemctl start litellm
  msg_ok "Started Service"
--- a/ct/mini-qr.sh
+++ b/ct/mini-qr.sh
@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: doge0420
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/lyqht/mini-qr
-
-APP="Mini-QR"
-var_tags="${var_tags:-QRcode;}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-6}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/mini-qr ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "mini-qr" "lyqht/mini-qr"; then
-    msg_info "Stopping Service"
-    systemctl stop caddy
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mini-qr" "lyqht/mini-qr" "tarball"
-
-    msg_info "Installing Dependencies"
-    cd /opt/mini-qr
-    $STD npm install
-    msg_ok "Installed Dependencies"
-
-    msg_info "Building MiniQR"
-    $STD npm run build
-    msg_ok "Built MiniQR"
-
-    msg_info "Starting Service"
-    systemctl start caddy
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/minthcm.sh
+++ b/ct/minthcm.sh
@@ -1,41 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MintHCM
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/minthcm/minthcm
-
-APP="MintHCM"
-var_tags="${var_tags:-hcm}"
-var_disk="${var_disk:-20}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var/www/MintHCM ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_custom "🚀" "${GN}" "The app offers a built-in updater. Please use it."
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/myip.sh
+++ b/ct/myip.sh
@@ -28,8 +28,6 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
-
  if check_for_gh_release "myip" "jason5ng32/MyIP"; then
    msg_info "Stopping Services"
    systemctl stop myip
--- a/ct/nametag.sh
+++ b/ct/nametag.sh
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mattogodoy/nametag
-
-APP="Nametag"
-var_tags="${var_tags:-contacts;crm}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/nametag ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "nametag" "mattogodoy/nametag"; then
-    msg_info "Stopping Service"
-    systemctl stop nametag
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Data"
-    cp /opt/nametag/.env /opt/nametag.env.bak
-    cp -r /opt/nametag/data /opt/nametag_data_bak
-    msg_ok "Backed up Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "nametag" "mattogodoy/nametag" "tarball" "latest" "/opt/nametag"
-
-    msg_info "Rebuilding Application"
-    cd /opt/nametag
-    $STD npm ci
-    set -a
-    source /opt/nametag/.env
-    set +a
-    $STD npx prisma generate
-    $STD npm run build
-    cp -r /opt/nametag/.next/static /opt/nametag/.next/standalone/.next/static
-    cp -r /opt/nametag/public /opt/nametag/.next/standalone/public
-    msg_ok "Rebuilt Application"
-
-    msg_info "Restoring Data"
-    cp /opt/nametag.env.bak /opt/nametag/.env
-    cp -r /opt/nametag_data_bak/. /opt/nametag/data/
-    rm -f /opt/nametag.env.bak
-    rm -rf /opt/nametag_data_bak
-    msg_ok "Restored Data"
-
-    msg_info "Running Migrations"
-    cd /opt/nametag
-    $STD npx prisma migrate deploy
-    msg_ok "Ran Migrations"
-
-    msg_info "Starting Service"
-    systemctl start nametag
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/opencloud.sh
+++ b/ct/opencloud.sh
@@ -29,7 +29,7 @@ function update_script() {
    exit
  fi

-  RELEASE="v6.1.0"
+  RELEASE="v6.0.0"
  if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    msg_info "Stopping services"
    systemctl stop opencloud opencloud-wopi
--- a/ct/outline.sh
+++ b/ct/outline.sh
@@ -28,7 +28,7 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
+  NODE_VERSION="22" setup_nodejs

  if check_for_gh_release "outline" "outline/outline"; then
    msg_info "Stopping Services"
--- a/ct/ownfoil.sh
+++ b/ct/ownfoil.sh
@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: pajjski
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/a1ex4/ownfoil
-
-APP="ownfoil"
-var_tags="${var_tags:-gaming}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/ownfoil ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "ownfoil" "a1ex4/ownfoil"; then
-    msg_info "Stopping Service"
-    systemctl stop ownfoil
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Data"
-    cp -r /opt/ownfoil/app/config /opt/ownfoil_data_backup
-    msg_ok "Backed up Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "ownfoil" "a1ex4/ownfoil" "tarball"
-
-    msg_info "Installing Dependencies"
-    cd /opt/ownfoil
-    $STD source .venv/bin/activate
-    $STD uv pip install -r requirements.txt
-    msg_ok "Installed Dependencies"
-
-    msg_info "Restoring Data"
-    cp -r /opt/ownfoil_data_backup /opt/ownfoil/app/config
-    rm -rf /opt/ownfoil_data_backup
-    msg_ok "Restored Data"
-
-    msg_info "Starting Service"
-    systemctl start ownfoil
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8465${CL}"
--- a/ct/pangolin.sh
+++ b/ct/pangolin.sh
@@ -69,33 +69,7 @@ function update_script() {

    msg_info "Running database migrations"
    cd /opt/pangolin
-
-    # Pre-apply potentially destructive schema changes safely so drizzle-kit
-    # does not recreate tables (which would delete all rows).
-    local DB="/opt/pangolin/config/db/db.sqlite"
-    if [[ -f "$DB" ]]; then
-      sqlite3 "$DB" "ALTER TABLE 'orgs' ADD COLUMN 'settingsLogRetentionDaysConnection' integer DEFAULT 0 NOT NULL;" 2>/dev/null || true
-      sqlite3 "$DB" "ALTER TABLE 'clientSitesAssociationsCache' ADD COLUMN 'isJitMode' integer DEFAULT 0 NOT NULL;" 2>/dev/null || true
-
-      # Create new role-mapping tables and migrate data before drizzle-kit
-      # drops the roleId columns from userOrgs and userInvites.
-      sqlite3 "$DB" "CREATE TABLE IF NOT EXISTS 'userOrgRoles' (
-        'userId' text NOT NULL REFERENCES 'user'('id') ON DELETE CASCADE,
-        'orgId' text NOT NULL REFERENCES 'orgs'('orgId') ON DELETE CASCADE,
-        'roleId' integer NOT NULL REFERENCES 'roles'('roleId') ON DELETE CASCADE,
-        UNIQUE('userId', 'orgId', 'roleId')
-      );" 2>/dev/null || true
-      sqlite3 "$DB" "INSERT OR IGNORE INTO 'userOrgRoles' (userId, orgId, roleId) SELECT userId, orgId, roleId FROM 'userOrgs' WHERE roleId IS NOT NULL;" 2>/dev/null || true
-
-      sqlite3 "$DB" "CREATE TABLE IF NOT EXISTS 'userInviteRoles' (
-        'inviteId' text NOT NULL REFERENCES 'userInvites'('inviteId') ON DELETE CASCADE,
-        'roleId' integer NOT NULL REFERENCES 'roles'('roleId') ON DELETE CASCADE,
-        PRIMARY KEY('inviteId', 'roleId')
-      );" 2>/dev/null || true
-      sqlite3 "$DB" "INSERT OR IGNORE INTO 'userInviteRoles' (inviteId, roleId) SELECT inviteId, roleId FROM 'userInvites' WHERE roleId IS NOT NULL;" 2>/dev/null || true
-    fi
-
-    ENVIRONMENT=prod $STD npx drizzle-kit push --force --config drizzle.sqlite.config.ts
+    ENVIRONMENT=prod $STD npx drizzle-kit push --config drizzle.sqlite.config.ts
    msg_ok "Ran database migrations"

    msg_info "Updating Badger plugin version"
--- a/ct/profilarr.sh
+++ b/ct/profilarr.sh
@@ -44,7 +44,7 @@ function update_script() {

    msg_info "Installing Python Dependencies"
    cd /opt/profilarr/backend
-    $STD uv venv --clear /opt/profilarr/backend/.venv
+    $STD uv venv /opt/profilarr/backend/.venv
    sed 's/==/>=/g' requirements.txt >requirements-relaxed.txt
    $STD uv pip install --python /opt/profilarr/backend/.venv/bin/python -r requirements-relaxed.txt
    rm -f requirements-relaxed.txt
--- a/ct/shelfmark.sh
+++ b/ct/shelfmark.sh
@@ -29,7 +29,7 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
+  NODE_VERSION="22" setup_nodejs
  PYTHON_VERSION="3.12" setup_uv

  if check_for_gh_release "shelfmark" "calibrain/shelfmark"; then
--- a/ct/slskd.sh
+++ b/ct/slskd.sh
@@ -43,10 +43,6 @@ function update_script() {

    msg_info "Restoring config"
    mv /opt/slskd.yml.bak /opt/slskd/config/slskd.yml
-
-    # Migrate 0.25.0 breaking config key renames
-    sed -i 's/^global:/transfers:/' /opt/slskd/config/slskd.yml
-    sed -i 's/^integration:/integrations:/' /opt/slskd/config/slskd.yml
    msg_ok "Restored config"

    msg_info "Starting Service(s)"
--- a/ct/step-ca.sh
+++ b/ct/step-ca.sh
@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Joerg Heinemann (heinemannj)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/smallstep/certificates
-
-APP="step-ca"
-var_tags="${var_tags:-certificate-authority;pki;acme-server}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/apt/sources.list.d/smallstep.sources ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating step-ca and step-cli"
-  $STD apt update
-  $STD apt upgrade -y step-ca step-cli
-  $STD systemctl restart step-ca
-  msg_ok "Updated step-ca and step-cli"
-
-  if check_for_gh_release "step-badger" "lukasz-lobocki/step-badger"; then
-    fetch_and_deploy_gh_release "step-badger" "lukasz-lobocki/step-badger" "prebuild" "latest" "/opt/step-badger" "step-badger_Linux_x86_64.tar.gz"
-    msg_ok "Updated step-badger"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}/provisioners${CL}"
--- a/ct/umami.sh
+++ b/ct/umami.sh
@@ -33,9 +33,7 @@ function update_script() {
    systemctl stop umami
    msg_ok "Stopped Service"

-    mv /opt/umami/.env /opt/.env.bak
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "umami" "umami-software/umami" "tarball"
-    mv /opt/.env.bak /opt/umami/.env
+    fetch_and_deploy_gh_release "umami" "umami-software/umami" "tarball"

    msg_info "Updating Umami"
    cd /opt/umami
--- a/ct/whodb.sh
+++ b/ct/whodb.sh
@@ -1,54 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://whodb.com/
-
-APP="WhoDB"
-var_tags="${var_tags:-database;management;gui}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/whodb/whodb ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "whodb" "clidey/whodb"; then
-    msg_info "Stopping Service"
-    systemctl stop whodb
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "whodb" "clidey/whodb" "singlefile" "latest" "/opt/whodb" "whodb-*-linux-amd64"
-
-    msg_info "Starting Service"
-    systemctl start whodb
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/ct/yamtrack.sh
+++ b/ct/yamtrack.sh
@@ -43,7 +43,7 @@ function update_script() {

    msg_info "Installing Python Dependencies"
    cd /opt/yamtrack
-    $STD uv venv --clear .venv
+    $STD uv venv .venv
    $STD uv pip install --no-cache-dir -r requirements.txt
    msg_ok "Installed Python Dependencies"

@@ -61,10 +61,7 @@ function update_script() {
    msg_info "Updating Nginx Configuration"
    cp /opt/yamtrack/nginx.conf /etc/nginx/nginx.conf
    sed -i 's|user abc;|user www-data;|' /etc/nginx/nginx.conf
-    sed -i 's|pid /tmp/nginx.pid;|pid /run/nginx.pid;|' /etc/nginx/nginx.conf
    sed -i 's|/yamtrack/staticfiles/|/opt/yamtrack/src/staticfiles/|' /etc/nginx/nginx.conf
-    sed -i 's|error_log /dev/stderr|error_log /var/log/nginx/error.log|' /etc/nginx/nginx.conf
-    sed -i 's|access_log /dev/stdout|access_log /var/log/nginx/access.log|' /etc/nginx/nginx.conf
    $STD systemctl reload nginx
    msg_ok "Updated Nginx Configuration"

--- a/install/anchor-install.sh
+++ b/install/anchor-install.sh
@@ -1,99 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ZhFahim/anchor
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="anchor" PG_DB_USER="anchor" setup_postgresql_db
-
-fetch_and_deploy_gh_release "anchor" "ZhFahim/anchor" "tarball"
-
-msg_info "Building Server"
-cd /opt/anchor/server
-$STD pnpm install --frozen-lockfile
-$STD pnpm prisma generate
-$STD pnpm build
-[[ -d src/generated ]] && mkdir -p dist/src && cp -R src/generated dist/src/
-msg_ok "Built Server"
-
-msg_info "Building Web Interface"
-cd /opt/anchor/web
-$STD pnpm install --frozen-lockfile
-SERVER_URL=http://127.0.0.1:3001 $STD pnpm build
-cp -r .next/static .next/standalone/.next/static
-cp -r public .next/standalone/public
-msg_ok "Built Web Interface"
-
-msg_info "Configuring Application"
-JWT_SECRET=$(openssl rand -base64 32)
-cat <<EOF >/opt/anchor/.env
-APP_URL=http://${LOCAL_IP}:3000
-JWT_SECRET=${JWT_SECRET}
-DATABASE_URL=postgresql://anchor:${PG_DB_PASS}@localhost:5432/anchor
-PG_HOST=localhost
-PG_USER=anchor
-PG_PASSWORD=${PG_DB_PASS}
-PG_DATABASE=anchor
-PG_PORT=5432
-EOF
-msg_ok "Configured Application"
-
-msg_info "Running Database Migrations"
-cd /opt/anchor/server
-set -a && source /opt/anchor/.env && set +a
-$STD pnpm prisma migrate deploy
-msg_ok "Ran Database Migrations"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/anchor-server.service
-[Unit]
-Description=Anchor API Server
-After=network.target postgresql.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/anchor/server
-EnvironmentFile=/opt/anchor/.env
-ExecStart=/usr/bin/node dist/src/main.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-cat <<EOF >/etc/systemd/system/anchor-web.service
-[Unit]
-Description=Anchor Web Interface
-After=network.target anchor-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/anchor/web/.next/standalone
-EnvironmentFile=/opt/anchor/.env
-Environment=PORT=3000 HOSTNAME=0.0.0.0 NODE_ENV=production
-ExecStart=/usr/bin/node server.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now anchor-server anchor-web
-msg_ok "Created Services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/dagu-install.sh
+++ b/install/dagu-install.sh
@@ -1,47 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://dagu.sh/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "dagu" "dagucloud/dagu" "prebuild" "latest" "/opt/dagu" "dagu_*_linux_amd64.tar.gz"
-
-msg_info "Setting up Dagu"
-mkdir -p /opt/dagu/data
-msg_ok "Set up Dagu"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/dagu.service
-[Unit]
-Description=Dagu Workflow Engine
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/dagu
-Environment=DAGU_HOME=/opt/dagu/data
-Environment=DAGU_HOST=0.0.0.0
-Environment=DAGU_PORT=8080
-ExecStart=/opt/dagu/dagu start-all
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now dagu
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/dashy-install.sh
+++ b/install/dashy-install.sh
@@ -1,42 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: tteck (tteckster) | Co-Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://dashy.to/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-NODE_VERSION="24" NODE_MODULE="yarn" setup_nodejs
-fetch_and_deploy_gh_release "dashy" "Lissy93/dashy" "prebuild" "latest" "/opt/dashy" "dashy-*.tar.gz"
-
-msg_info "Installing Dashy"
-cd /opt/dashy
-$STD yarn install --ignore-engines --network-timeout 300000
-msg_ok "Installed Dashy"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/dashy.service
-[Unit]
-Description=dashy
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/dashy
-Environment=NODE_OPTIONS=--openssl-legacy-provider
-ExecStart=/usr/bin/node server.js
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now dashy
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/domain-locker-install.sh
+++ b/install/domain-locker-install.sh
@@ -13,10 +13,6 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing dependencies"
-$STD apt install -y whois
-msg_ok "Installed dependencies"
-
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="domainlocker_db" PG_DB_USER="domainlocker" setup_postgresql_db
 NODE_VERSION="22" setup_nodejs
--- a/install/erpnext-install.sh
+++ b/install/erpnext-install.sh
@@ -1,106 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/frappe/erpnext
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  git \
-  build-essential \
-  python3-dev \
-  libffi-dev \
-  libssl-dev \
-  redis-server \
-  nginx \
-  supervisor \
-  fail2ban \
-  xvfb \
-  libfontconfig1 \
-  libxrender1 \
-  fontconfig \
-  libjpeg-dev \
-  libmariadb-dev \
-  python3-pip
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" NODE_MODULE="yarn" setup_nodejs
-UV_PYTHON="3.13" setup_uv
-setup_mariadb
-
-msg_info "Configuring MariaDB for ERPNext"
-cat <<EOF >/etc/mysql/mariadb.conf.d/50-erpnext.cnf
-[mysqld]
-character-set-server=utf8mb4
-collation-server=utf8mb4_unicode_ci
-
-[client]
-default-character-set=utf8mb4
-EOF
-$STD systemctl restart mariadb
-msg_ok "Configured MariaDB for ERPNext"
-
-msg_info "Installing wkhtmltopdf"
-WKHTMLTOPDF_URL="https://github.com/wkhtmltopdf/packaging/releases/download/0.12.6.1-3/wkhtmltox_0.12.6.1-3.bookworm_amd64.deb"
-$STD curl -fsSL -o /tmp/wkhtmltox.deb "$WKHTMLTOPDF_URL"
-$STD apt install -y /tmp/wkhtmltox.deb
-rm -f /tmp/wkhtmltox.deb
-msg_ok "Installed wkhtmltopdf"
-
-msg_info "Installing Frappe Bench"
-useradd -m -s /bin/bash frappe
-chown frappe:frappe /opt
-echo "frappe ALL=(ALL) NOPASSWD:ALL" >/etc/sudoers.d/frappe
-$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; uv tool install frappe-bench'
-msg_ok "Installed Frappe Bench"
-
-msg_info "Initializing Frappe Bench"
-ADMIN_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-DB_ROOT_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-mysql -u root -e "ALTER USER 'root'@'localhost' IDENTIFIED BY '${DB_ROOT_PASS}'; FLUSH PRIVILEGES;"
-$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; cd /opt && bench init --frappe-branch version-15 frappe-bench'
-$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; cd /opt/frappe-bench && bench get-app erpnext --branch version-15'
-$STD sudo -u frappe bash -c "export PATH=\"\$HOME/.local/bin:\$PATH\"; cd /opt/frappe-bench && bench new-site site1.local --db-root-username root --db-root-password \"$DB_ROOT_PASS\" --admin-password \"$ADMIN_PASS\" --install-app erpnext --set-default"
-msg_ok "Initialized Frappe Bench"
-
-msg_info "Configuring ERPNext"
-cat <<EOF >/opt/frappe-bench/.env
-ADMIN_PASSWORD=${ADMIN_PASS}
-DB_ROOT_PASSWORD=${DB_ROOT_PASS}
-SITE_NAME=site1.local
-EOF
-{
-  echo "ERPNext Credentials"
-  echo "=================="
-  echo "Admin Username: Administrator"
-  echo "Admin Password: ${ADMIN_PASS}"
-  echo "DB Root Password: ${DB_ROOT_PASS}"
-  echo "Site Name: site1.local"
-} >~/erpnext.creds
-$STD systemctl enable --now redis-server
-msg_ok "Configured ERPNext"
-
-msg_info "Setting up Production"
-BENCH_PY="/home/frappe/.local/share/uv/tools/frappe-bench/bin/python"
-$STD sudo -u frappe bash -c "curl -fsSL https://bootstrap.pypa.io/get-pip.py | \"${BENCH_PY}\""
-$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; uv tool install ansible'
-ln -sf /home/frappe/.local/bin/ansible* /usr/local/bin/
-$STD bash -c 'export PATH="/home/frappe/.local/bin:$PATH"; cd /opt/frappe-bench && bench setup production frappe --yes'
-ln -sf /opt/frappe-bench/config/supervisor.conf /etc/supervisor/conf.d/frappe-bench.conf
-$STD supervisorctl reread
-$STD supervisorctl update
-$STD systemctl enable --now supervisor
-msg_ok "Set up Production"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/fileflows-install.sh
+++ b/install/fileflows-install.sh
@@ -5,6 +5,7 @@
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://fileflows.com/

+# Import Functions und Setup
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
@@ -16,7 +17,6 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
  ffmpeg \
-  pciutils \
  imagemagick
 msg_ok "Installed Dependencies"

@@ -35,7 +35,6 @@ fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"

 $STD ln -svf /usr/bin/ffmpeg /usr/local/bin/ffmpeg
 $STD ln -svf /usr/bin/ffprobe /usr/local/bin/ffprobe
-$STD rm -rf /opt/fileflows/Server/runtimes/win-*

 read -r -p "${TAB3}Do you want to install FileFlows Server or Node? (S/N): " install_server

--- a/install/foldergram-install.sh
+++ b/install/foldergram-install.sh
@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/foldergram/foldergram
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y --no-install-recommends ffmpeg
-msg_ok "Installed Dependencies"
-
-NODE_VERSION=25 NODE_MODULE="corepack" setup_nodejs
-
-fetch_and_deploy_gh_release "foldergram" "foldergram/foldergram" "tarball"
-
-msg_info "Configuring Foldergram"
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-$STD corepack enable
-cd /opt/foldergram
-$STD pnpm install
-$STD pnpm run build
-mkdir -p /opt/foldergram_media
-cat <<EOF >/opt/foldergram_media/foldergram.env
-NODE_ENV=production
-SERVER_PORT=4141
-DATA_ROOT=/opt/foldergram_media
-GALLERY_ROOT=/opt/foldergram_media/gallery
-DB_DIR=/opt/foldergram_media/db
-THUMBNAILS_DIR=/opt/foldergram_media/thumbnails
-PREVIEWS_DIR=/opt/foldergram_media/previews
-IMAGE_DETAIL_SOURCE=preview
-DERIVATIVE_MODE=eager
-GALLERY_EXCLUDED_FOLDERS=
-EOF
-msg_ok "Configured Foldergram"
-
-msg_info "Creating services"
-cat <<EOF >/etc/systemd/system/foldergram.service
-[Unit]
-Description=Foldergram Service
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/foldergram
-ExecStart=/usr/bin/pnpm start
-Restart=always
-EnvironmentFile=/opt/foldergram_media/foldergram.env
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now foldergram
-msg_ok "Created services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/gogs-install.sh
+++ b/install/gogs-install.sh
@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://gogs.io/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y git
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "gogs" "gogs/gogs" "prebuild" "latest" "/opt/gogs" "gogs_*_linux_amd64.tar.gz"
-
-msg_info "Setting up Gogs"
-mkdir -p /opt/gogs/{custom/conf,data,log}
-msg_ok "Set up Gogs"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/gogs.service
-[Unit]
-Description=Gogs Git Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/gogs
-ExecStart=/opt/gogs/gogs web
-Restart=on-failure
-RestartSec=5
-Environment=USER=root
-Environment=HOME=/root
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now gogs
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/homelable-install.sh
+++ b/install/homelable-install.sh
@@ -45,30 +45,6 @@ STATUS_CHECKER_INTERVAL=60
 EOF
 msg_ok "Configured Homelable"

-msg_info "Creating Password Reset Utility"
-cat <<'EOF' >/root/change_password.sh
-#!/usr/bin/env bash
-
-NEW_PASS=""
-
-while [[ -z "$NEW_PASS" ]]; do
-    read -s -p "Enter new password: " NEW_PASS
-    echo ""
-    if [[ -z "$NEW_PASS" ]]; then
-        echo "Error: Password cannot be blank. Try again."
-    fi
-done
-
-HASH=$(/opt/homelable/backend/.venv/bin/python -c "from passlib.context import CryptContext; print(CryptContext(schemes=['bcrypt']).hash('${NEW_PASS}'))")
-
-sed -i "s|^AUTH_PASSWORD_HASH=.*|AUTH_PASSWORD_HASH='${HASH}'|" /opt/homelable/backend/.env
-
-systemctl restart homelable
-echo "Password updated and service restarted successfully!"
-EOF
-chmod +x /root/change_password.sh
-msg_ok "Created Password Reset Utility"
-
 msg_info "Building Frontend"
 cd /opt/homelable/frontend
 $STD npm ci
--- a/install/iobroker-install.sh
+++ b/install/iobroker-install.sh
@@ -28,7 +28,7 @@ if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
  exit 10
 fi

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs

 msg_info "Installing ioBroker (Patience)"
 $STD bash <(curl -fsSL https://iobroker.net/install.sh)
--- a/install/kima-hub-install.sh
+++ b/install/kima-hub-install.sh
@@ -28,7 +28,7 @@ msg_ok "Installed Dependencies"

 PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 PG_DB_NAME="kima" PG_DB_USER="kima" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
-NODE_VERSION="22" setup_nodejs
+NODE_VERSION="20" setup_nodejs

 msg_info "Configuring Redis"
 systemctl enable -q --now redis-server
--- a/install/litellm-install.sh
+++ b/install/litellm-install.sh
@@ -30,7 +30,6 @@ $STD uv venv --clear /opt/litellm/.venv
 $STD /opt/litellm/.venv/bin/python -m ensurepip --upgrade
 $STD /opt/litellm/.venv/bin/python -m pip install --upgrade pip
 $STD /opt/litellm/.venv/bin/python -m pip install litellm[proxy] prisma
-$STD /opt/litellm/.venv/bin/prisma generate
 msg_ok "Installed LiteLLM"

 msg_info "Configuring LiteLLM"
@@ -41,7 +40,7 @@ general_settings:
  database_url: postgresql://$PG_DB_USER:$PG_DB_PASS@127.0.0.1:5432/$PG_DB_NAME
  store_model_in_db: true
 EOF
-$STD /opt/litellm/.venv/bin/litellm --config /opt/litellm/litellm.yaml --use_prisma_db_push --skip_server_startup
+uv --directory=/opt/litellm run litellm --config /opt/litellm/litellm.yaml --use_prisma_db_push --skip_server_startup
 msg_ok "Configured LiteLLM"

 msg_info "Creating Service"
@@ -51,7 +50,7 @@ Description=LiteLLM

 [Service]
 Type=simple
-ExecStart=/opt/litellm/.venv/bin/litellm --config /opt/litellm/litellm.yaml
+ExecStart=uv --directory=/opt/litellm run litellm --config /opt/litellm/litellm.yaml
 Restart=always

 [Install]
--- a/install/mini-qr-install.sh
+++ b/install/mini-qr-install.sh
@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: doge0420
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/lyqht/mini-qr
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  libharfbuzz0b \
-  caddy \
-  fontconfig
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="20" setup_nodejs
-fetch_and_deploy_gh_release "mini-qr" "lyqht/mini-qr" "tarball"
-
-msg_info "Building MiniQR"
-cd /opt/mini-qr
-$STD npm install
-$STD npm run build
-msg_ok "Built MiniQR"
-
-msg_info "Configuring Caddy"
-cat <<EOF >/etc/caddy/Caddyfile
-:80 {
-    root * /opt/mini-qr/dist
-    file_server
-
-    # Handle client-side routing
-    try_files {path} /index.html
-
-    # Cache static assets
-    @assets {
-        path /assets/*
-    }
-    header @assets Cache-Control "public, immutable, max-age=31536000"
-
-    # Correct MIME types for JS modules
-    @jsmodules {
-        path *.js *.mjs
-    }
-    header @jsmodules Content-Type "application/javascript"
-}
-EOF
-systemctl enable -q --now caddy
-systemctl reload caddy
-msg_ok "Configured Caddy"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/minthcm-install.sh
+++ b/install/minthcm-install.sh
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MintHCM
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/minthcm/minthcm
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PHP_VERSION="8.2"
-PHP_APACHE="YES" PHP_MODULE="mysql,redis" PHP_FPM="YES" setup_php
-setup_composer
-setup_mariadb
-$STD mariadb -u root -e "SET GLOBAL sql_mode='STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION'"
-
-fetch_and_deploy_gh_release "MintHCM" "minthcm/minthcm" "tarball" "latest" "/var/www/MintHCM"
-
-msg_info "Configuring MintHCM"
-mkdir -p /etc/php/${PHP_VERSION}/mods-available
-cp /var/www/MintHCM/docker/config/000-default.conf /etc/apache2/sites-available/000-default.conf
-cp /var/www/MintHCM/docker/config/php-minthcm.ini /etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini
-mkdir -p "/etc/php/${PHP_VERSION}/cli/conf.d" "/etc/php/${PHP_VERSION}/apache2/conf.d"
-ln -s "/etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini" "/etc/php/${PHP_VERSION}/cli/conf.d/20-minthcm.ini"
-ln -s "/etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini" "/etc/php/${PHP_VERSION}/apache2/conf.d/20-minthcm.ini"
-chown -R www-data:www-data /var/www/MintHCM
-find /var/www/MintHCM -type d -exec chmod 755 {} \;
-find /var/www/MintHCM -type f -exec chmod 644 {} \;
-mkdir -p /var/www/script
-cp /var/www/MintHCM/docker/script/generate_config.php /var/www/script/generate_config.php
-cp /var/www/MintHCM/docker/.env /var/www/script/.env
-chown -R www-data:www-data /var/www/script
-$STD a2enmod rewrite
-$STD a2enmod headers
-$STD systemctl restart apache2
-msg_ok "Configured MintHCM"
-
-msg_info "Setting up Elasticsearch"
-setup_deb822_repo \
-  "elasticsearch" \
-  "https://artifacts.elastic.co/GPG-KEY-elasticsearch" \
-  "https://artifacts.elastic.co/packages/7.x/apt" \
-  "stable"
-$STD apt install -y elasticsearch
-echo "-Xms2g" >>/etc/elasticsearch/jvm.options
-echo "-Xmx2g" >>/etc/elasticsearch/jvm.options
-$STD /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment -b
-systemctl enable -q --now elasticsearch
-msg_ok "Set up Elasticsearch"
-
-msg_info "Configuring Database"
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE USER 'minthcm'@'localhost' IDENTIFIED BY '${DB_PASS}';"
-$STD mariadb -u root -e "GRANT ALL ON *.* TO 'minthcm'@'localhost'; FLUSH PRIVILEGES;"
-sed -i "s/^DB_HOST=.*/DB_HOST=localhost/" /var/www/script/.env
-sed -i "s/^DB_USER=.*/DB_USER=minthcm/" /var/www/script/.env
-sed -i "s/^DB_PASS=.*/DB_PASS=$DB_PASS/" /var/www/script/.env
-sed -i "s/^ELASTICSEARCH_HOST=.*/ELASTICSEARCH_HOST=localhost/" /var/www/script/.env
-msg_ok "Configured Database"
-
-msg_info "Generating configuration file"
-set -a
-source /var/www/script/.env
-set +a
-$STD php /var/www/script/generate_config.php
-msg_ok "Generated configuration file"
-
-msg_info "Installing MintHCM"
-cd /var/www/MintHCM
-$STD sudo -u www-data php MintCLI install </var/www/MintHCM/configMint4
-printf "*    *    *    *    *     cd /var/www/MintHCM/legacy; php -f cron.php > /dev/null 2>&1\n" >/var/spool/cron/crontabs/www-data
-service cron start
-rm -f /var/www/MintHCM/configMint4
-msg_ok "Installed MintHCM"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/myip-install.sh
+++ b/install/myip-install.sh
@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "myip" "jason5ng32/MyIP" "tarball"

 msg_info "Configuring MyIP"
--- a/install/nametag-install.sh
+++ b/install/nametag-install.sh
@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mattogodoy/nametag
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PG_VERSION="16" setup_postgresql
-PG_DB_NAME="nametag_db" PG_DB_USER="nametag" setup_postgresql_db
-NODE_VERSION="20" setup_nodejs
-fetch_and_deploy_gh_release "nametag" "mattogodoy/nametag" "tarball" "latest" "/opt/nametag"
-
-msg_info "Setting up Application"
-cd /opt/nametag
-$STD npm ci
-DATABASE_URL="postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}" $STD npx prisma generate
-DATABASE_URL="postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}" $STD npx prisma migrate deploy
-msg_ok "Set up Application"
-
-msg_info "Configuring Nametag"
-NEXTAUTH_SECRET=$(openssl rand -base64 32)
-CRON_SECRET=$(openssl rand -base64 16)
-mkdir -p /opt/nametag/data/photos
-cat <<EOF >/opt/nametag/.env
-DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}
-NEXTAUTH_URL=http://${LOCAL_IP}:3000
-NEXTAUTH_SECRET=${NEXTAUTH_SECRET}
-CRON_SECRET=${CRON_SECRET}
-PHOTO_STORAGE_PATH=/opt/nametag/data/photos
-NODE_ENV=production
-EOF
-msg_ok "Configured Nametag"
-
-msg_info "Building Application"
-cd /opt/nametag
-set -a
-source /opt/nametag/.env
-set +a
-$STD npm run build
-cp -r /opt/nametag/.next/static /opt/nametag/.next/standalone/.next/static
-cp -r /opt/nametag/public /opt/nametag/.next/standalone/public
-msg_ok "Built Application"
-
-msg_info "Running Production Seed"
-cd /opt/nametag
-$STD npx esbuild prisma/seed.production.ts --platform=node --format=cjs --outfile=prisma/seed.production.js --bundle --external:@prisma/client --external:pg --minify
-$STD node prisma/seed.production.js
-msg_ok "Ran Production Seed"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/nametag.service
-[Unit]
-Description=Nametag - Personal Relationships Manager
-After=network.target postgresql.service
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/nametag
-EnvironmentFile=/opt/nametag/.env
-ExecStart=/usr/bin/node /opt/nametag/.next/standalone/server.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now nametag
-msg_ok "Created Service"
-
-msg_info "Setting up Cron Jobs"
-cat <<EOF >/etc/cron.d/nametag
-0 8 * * * root curl -sf -H "Authorization: Bearer ${CRON_SECRET}" http://127.0.0.1:3000/api/cron/send-reminders >/dev/null 2>&1
-0 3 * * * root curl -sf -H "Authorization: Bearer ${CRON_SECRET}" http://127.0.0.1:3000/api/cron/purge-deleted >/dev/null 2>&1
-EOF
-chmod 644 /etc/cron.d/nametag
-msg_ok "Set up Cron Jobs"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/opencloud-install.sh
+++ b/install/opencloud-install.sh
@@ -64,7 +64,7 @@ $STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPA
 echo "$COOLPASS" >~/.coolpass
 msg_ok "Installed Collabora Online"

-fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v6.1.0" "/usr/bin" "opencloud-*-linux-amd64"
+fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v6.0.0" "/usr/bin" "opencloud-*-linux-amd64"
 mv /usr/bin/OpenCloud /usr/bin/opencloud

 msg_info "Configuring OpenCloud"
--- a/install/outline-install.sh
+++ b/install/outline-install.sh
@@ -20,7 +20,7 @@ $STD apt install -y \
  redis
 msg_ok "Installed Dependencies"

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="outline" PG_DB_USER="outline" setup_postgresql_db

--- a/install/ownfoil-install.sh
+++ b/install/ownfoil-install.sh
@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: pajjski
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/a1ex4/ownfoil
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y git
-msg_ok "Installed Dependencies"
-
-setup_uv
-fetch_and_deploy_gh_release "ownfoil" "a1ex4/ownfoil" "tarball"
-
-msg_info "Setting up Ownfoil"
-cd /opt/ownfoil
-$STD uv venv .venv
-$STD source .venv/bin/activate
-$STD uv pip install -r requirements.txt
-msg_ok "Setup ownfoil"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/ownfoil.service
-[Unit]
-Description=ownfoil Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/ownfoil
-ExecStart=/opt/ownfoil/.venv/bin/python /opt/ownfoil/app/app.py
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now ownfoil
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/shelfmark-install.sh
+++ b/install/shelfmark-install.sh
@@ -115,7 +115,7 @@ else
  msg_ok "Installed internal bypasser dependencies"
 fi

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 PYTHON_VERSION="3.12" setup_uv

 fetch_and_deploy_gh_release "shelfmark" "calibrain/shelfmark" "tarball" "latest" "/opt/shelfmark"
--- a/install/step-ca-install.sh
+++ b/install/step-ca-install.sh
@@ -1,400 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Joerg Heinemann (heinemannj)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/smallstep/certificates
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-setup_deb822_repo \
-  "smallstep" \
-  "https://packages.smallstep.com/keys/apt/repo-signing-key.gpg" \
-  "https://packages.smallstep.com/stable/debian" \
-  "debs" \
-  "main"
-
-msg_info "Installing step-ca and step-cli"
-$STD apt install -y step-ca step-cli
-
-STEPHOME="/root/.step"
-export STEPPATH=/etc/step-ca
-export STEPHOME=$STEPHOME
-
-sed  -i '1i export STEPPATH=/etc/step-ca' /etc/profile
-sed  -i '1i export STEPHOME=/root/.step' /etc/profile
-
-setcap CAP_NET_BIND_SERVICE=+eip $(which step-ca)
-
-$STD useradd --user-group --system --home $(step path) --shell /bin/false step
-msg_ok "Installed step-ca and step-cli"
-
-DomainName="$(hostname -d)"
-
-PKIName="$(prompt_input "Enter PKIName" "MyHomePKI" 30)"
-PKIProvisioner="$(prompt_input "Enter PKIProvisioner" "pki@$DomainName" 30)"
-AcmeProvisioner="$(prompt_input "Enter AcmeProvisioner" "acme@$DomainName" 30)"
-X509MinDur="$(prompt_input "Enter X509MinDur" "48h" 30)"
-X509MaxDur="$(prompt_input "Enter X509MaxDur" "87600h" 30)"
-X509DefaultDur="$(prompt_input "Enter X509DefaultDur" "168h" 30)"
-
-msg_info "Initializing step-ca"
-DeploymentType="standalone"
-FQDN="$(hostname -f)"
-IP="${LOCAL_IP}"
-LISTENER=":443"
-
-EncryptionPwdDir="$(step path)/encryption"
-PwdFile="$EncryptionPwdDir/ca.pwd"
-ProvisionerPwdFile="$EncryptionPwdDir/provisioner.pwd"
-mkdir -p "$EncryptionPwdDir"
-gpg -q --gen-random --armor 2 32 >"$PwdFile"
-gpg -q --gen-random --armor 2 32 >"$ProvisionerPwdFile"
-
-$STD step ca init --deployment-type="$DeploymentType" --ssh --name="$PKIName" --dns="$FQDN" --dns="$IP" --address="$LISTENER" --provisioner="$PKIProvisioner" --password-file="$PwdFile" --provisioner-password-file="$ProvisionerPwdFile"
-
-ln -s "$PwdFile" "$(step path)/password.txt"
-chown -R step:step $(step path)
-chmod -R 700 $(step path)
-$STD step ca provisioner add "$AcmeProvisioner" --type ACME --admin-name "$AcmeProvisioner"
-$STD step ca provisioner update "$PKIProvisioner" --x509-min-dur="$X509MinDur" --x509-max-dur="$X509MaxDur" --x509-default-dur="$X509DefaultDur" --allow-renewal-after-expiry
-$STD step ca provisioner update "$AcmeProvisioner" --x509-min-dur="$X509MinDur" --x509-max-dur="$X509MaxDur" --x509-default-dur="$X509DefaultDur" --allow-renewal-after-expiry
-$STD step certificate install --all $(step path)/certs/root_ca.crt
-$STD update-ca-certificates
-msg_ok "Initialized step-ca"
-
-msg_info "Start step-ca as a Daemon"
-cat <<'EOF' >/etc/systemd/system/step-ca.service
-[Unit]
-Description=step-ca service
-Documentation=https://smallstep.com/docs/step-ca
-Documentation=https://smallstep.com/docs/step-ca/certificate-authority-server-production
-After=network-online.target
-Wants=network-online.target
-StartLimitIntervalSec=30
-StartLimitBurst=3
-ConditionFileNotEmpty=/etc/step-ca/config/ca.json
-ConditionFileNotEmpty=/etc/step-ca/password.txt
-
-[Service]
-Type=simple
-User=step
-Group=step
-Environment=STEPPATH=/etc/step-ca
-WorkingDirectory=/etc/step-ca
-ExecStart=/usr/bin/step-ca config/ca.json --password-file password.txt
-ExecReload=/bin/kill -USR1 $MAINPID
-Restart=on-failure
-RestartSec=5
-TimeoutStopSec=30
-StartLimitAction=reboot
-
-; Process capabilities & privileges
-AmbientCapabilities=CAP_NET_BIND_SERVICE
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-SecureBits=keep-caps
-NoNewPrivileges=yes
-
-; Sandboxing
-SystemCallArchitectures=native
-SystemCallFilter=@system-service
-SystemCallFilter=~@resources @privileged
-RestrictNamespaces=yes
-LockPersonality=yes
-MemoryDenyWriteExecute=yes
-RestrictRealtime=yes
-RestrictSUIDSGID=yes
-PrivateMounts=yes
-ProtectControlGroups=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-ProtectSystem=strict
-ProtectHome=yes
-ReadWritePaths=/etc/step-ca/db
-
-; Read only paths
-ReadOnlyPaths=/etc/step-ca
-
-[Install]
-WantedBy=multi-user.target
-EOF
-$STD systemctl enable -q --now step-ca
-msg_ok "Started step-ca as a Daemon"
-
-fetch_and_deploy_gh_release "step-badger" "lukasz-lobocki/step-badger" "prebuild" "latest" "/opt/step-badger" "step-badger_Linux_x86_64.tar.gz"
-ln -s /opt/step-badger/step-badger /usr/local/bin/step-badger
-
-msg_info "Install step-ca Admin script"
-mkdir -p "$STEPHOME"
-cat <<'ADDON_EOF' >"$STEPHOME/step-ca-admin.sh"
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Joerg Heinemann (heinemannj)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-
-function header_info() {
-  clear
-  cat <<"EOF"
-         __                                 ___       __          _     
-   _____/ /____  ____        _________ _   /   | ____/ /___ ___  (_)___ 
-  / ___/ __/ _ \/ __ \______/ ___/ __ `/  / /| |/ __  / __ `__ \/ / __ \
- (__  ) /_/  __/ /_/ /_____/ /__/ /_/ /  / ___ / /_/ / / / / / / / / / /
-/____/\__/\___/ .___/      \___/\__,_/  /_/  |_\__,_/_/ /_/ /_/_/_/ /_/ 
-             /_/                                                            
-
-EOF
-}
-
-function die() {
-  echo -e "\n${BL}[ERROR]${GN} ${RD}${1}${CL}\n"
-  exit
-}
-
-function success() {
-  echo -e "${BL}[SUCCESS]${GN} ${1}${CL}\n"
-  exit
-}
-
-function whiptail_menu() {
-  MENU_ARRAY=()
-  MSG_MAX_LENGTH=0
-  while read -r TAG ITEM; do
-    OFFSET=2
-    ((${#ITEM} + OFFSET > MSG_MAX_LENGTH)) && MSG_MAX_LENGTH=${#ITEM}+OFFSET
-    MENU_ARRAY+=("$TAG" "$ITEM " "OFF")
-  done < <(echo "$1")
-}
-
-function x509_list() {
-  CERT_LIST=""
-  cp --recursive --force "$(step path)/db/"* "$STEPHOME/db-copy/"
-  cp --recursive --force "$(step path)/certs/"* "$STEPHOME/certs/ca/"
-  if [[ $(step-badger x509Certs "${STEPHOME}/db-copy" 2>/dev/null) ]]; then
-    CERT_LIST=$(step-badger x509Certs ${STEPHOME}/db-copy 2>/dev/null)
-  fi
-}
-
-function ssh_list() {
-  CERT_LIST=""
-  cp --recursive --force "$(step path)/db/"* "$STEPHOME/db-copy/"
-  cp --recursive --force "$(step path)/certs/"* "$STEPHOME/certs/ca/"
-  if [[ $(step-badger sshCerts "${STEPHOME}/db-copy" 2>/dev/null) ]]; then
-    CERT_LIST=$(step-badgersshCerts ${STEPHOME}/db-copy 2>/dev/null)
-  fi
-}
-
-function x509_serial_to_cn() {
-  x509_list
-  CN="$(echo "${CERT_LIST}" | grep "${SERIAL_NUMBER}" | awk '{print $2}' | sed 's/CN=//g')"
-  CRT="$STEPHOME/certs/x509/$CN.crt"
-  KEY="$STEPHOME/certs/x509/$CN.key"
-  if ! [[ -f ${CRT} ]]; then
-    die "Certificate ${CRT} not found!"
-  elif ! [[ -f ${KEY} ]]; then
-    die "Private Key ${KEY} not found!"
-  fi
-}
-
-function x509_revoke() {
-  # shellcheck disable=SC2206
-  SERIAL_NUMBER_ARRAY=(${CERT_SERIAL_NUMBERS})
-  for SERIAL_NUMBER in "${SERIAL_NUMBER_ARRAY[@]}"; do
-    echo -e "${BL}[Info]${GN} Revoke x509 Certificate with Serial Number ${BL}${SERIAL_NUMBER}${GN}:${CL}"
-    echo
-    TOKEN=$(step ca token --provisioner="$PROVISIONER" --provisioner-password-file="$PROVISIONER_PASSWORD" --revoke "${SERIAL_NUMBER}")
-    step ca revoke --token "$TOKEN" "${SERIAL_NUMBER}" || die "Failed to revoke certificate!"
-    echo
-  done
-  success "Finished."
-}
-
-function x509_renew() {
-  # shellcheck disable=SC2206
-  SERIAL_NUMBER_ARRAY=(${CERT_SERIAL_NUMBERS})
-  for SERIAL_NUMBER in "${SERIAL_NUMBER_ARRAY[@]}"; do
-    echo -e "${BL}[Info]${GN} Renew x509 Certificate with Serial Number ${BL}${SERIAL_NUMBER}${GN}:${CL}"
-    echo
-    x509_serial_to_cn
-    step ca renew "${CRT}" "${KEY}" --force || die "Failed to renew certificate!"
-    echo
-  done
-  success "Finished."
-}
-
-function x509_inspect() {
-  # shellcheck disable=SC2206
-  SERIAL_NUMBER_ARRAY=(${CERT_SERIAL_NUMBERS})
-  for SERIAL_NUMBER in "${SERIAL_NUMBER_ARRAY[@]}"; do
-    echo -e "${BL}[Info]${GN} Inspect x509 Certificate with Serial Number ${BL}${SERIAL_NUMBER}${GN}:${CL}\n"
-    x509_serial_to_cn
-    step certificate inspect "${CRT}" || die "Failed to inspect certificate!"
-    if ! [[ $(step certificate inspect "${CRT}" | grep "${SERIAL_NUMBER}") ]]; then
-      die "Serial Number ${SERIAL_NUMBER} mismatch!"
-    fi
-    echo -e "\n${BL}[Info]${GN} Public Key:${CL}\n"
-    cat "${CRT}"
-    echo -e "\n${BL}[Info]${GN} Private Key:${CL}\n"
-    cat "${KEY}"
-    echo
-  done
-  success "Finished."
-}
-
-function x509_request() {
-  FQDN=""
-  SAN=""
-
-  while true; do
-    FQDN=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificate Signing Request (CSR)" --inputbox '\nFQDN (e.g. MyLXC.example.com)' 10 50 "$FQDN" 3>&1 1>&2 2>&3)
-    IP=$(dig +short "$FQDN")
-    if [[ -z "$IP" ]]; then
-      die "Resolution failed for $FQDN!"
-    fi
-    HOST=$(echo "$FQDN" | awk -F'.' '{print $1}')
-    IP=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificate Signing Request (CSR)" --inputbox '\nIP Address (e.g. x.x.x.x)' 10 50 "$IP" 3>&1 1>&2 2>&3)
-    HOST=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificate Signing Request (CSR)" --inputbox '\nHostname (e.g. MyHostName)' 10 50 "$HOST" 3>&1 1>&2 2>&3)
-    SAN=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificate Signing Request (CSR)" --inputbox '\nSubject Alternative Name(s) (SAN) (e.g. myapp-1.example.com, myapp-2.example.com)' 10 50 "$SAN" 3>&1 1>&2 2>&3)
-    VALID_TO=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificate Signing Request (CSR)" --inputbox '\nValidity (e.g. 2034-01-31T00:00:00Z)' 10 50 "2034-01-31T00:00:00Z" 3>&1 1>&2 2>&3)
-
-    # shellcheck disable=SC2034
-    if whiptail_yesno=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificate Signing Request (CSR)" --yesno "Continue with below?\n
-      FQDN: $FQDN
-      Hostname: $HOST
-      IP Address: $IP
-      Subject Alternative Name(s) (SAN): $SAN
-      Validity: $VALID_TO" --no-button "Change" --yes-button "Continue" 15 70 3>&1 1>&2 2>&3); then
-      break
-    fi
-  done
-
-  echo -e "${BL}[Info]${GN} Request x509 Certificate with subject ${BL}${FQDN}${GN}:${CL}"
-  echo
-  CRT="$STEPHOME/certs/x509/$FQDN.crt"
-  KEY="$STEPHOME/certs/x509/$FQDN.key"
-
-  SAN="$FQDN, $HOST, $IP, $SAN"
-
-  IFS=', ' read -r -a array <<< "$SAN"
-  for element in "${array[@]}"
-  do
-    SAN_ARRAY+=(--san "$element")
-  done
-
-  step ca certificate "$FQDN" "$CRT" "$KEY" \
-    --provisioner="$PROVISIONER" \
-    --provisioner-password-file="$PROVISIONER_PASSWORD" \
-    --not-after="$VALID_TO" \
-    "${SAN_ARRAY[@]}" \
-  || die "Failed to request certificate!"
-
-  echo -e "\n${BL}[Info]${GN} Inspect Certificate:${CL}\n"
-  step certificate inspect "${CRT}" || die "Failed to inspect certificate!"
-  echo -e "\n${BL}[Info]${GN} Public Key:${CL}\n"
-  cat "${CRT}"
-  echo -e "\n${BL}[Info]${GN} Private Key:${CL}\n"
-  cat "${KEY}"
-  echo
-  success "Finished."
-}
-
-set -eEuo pipefail
-# shellcheck disable=SC2034
-# shellcheck disable=SC2116
-# shellcheck disable=SC2028
-YW=$(echo "\033[33m")
-# shellcheck disable=SC2116
-# shellcheck disable=SC2028
-BL=$(echo "\033[36m")
-# shellcheck disable=SC2116
-# shellcheck disable=SC2028
-RD=$(echo "\033[01;31m")
-# shellcheck disable=SC2034
-CM='\xE2\x9C\x94\033'
-# shellcheck disable=SC2116
-# shellcheck disable=SC2028
-GN=$(echo "\033[1;92m")
-# shellcheck disable=SC2116
-# shellcheck disable=SC2028
-CL=$(echo "\033[m")
-
-# Telemetry
-# shellcheck disable=SC1090
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "step-ca-admin" "step-ca"
-
-header_info
-
-mkdir --parents "$STEPHOME/db-copy/"
-mkdir --parents "$STEPHOME/certs/ca/_archive/"
-mkdir --parents "$STEPHOME/certs/ssh/_archive/"
-mkdir --parents "$STEPHOME/certs/x509/_archive/"
-
-PROVISIONER=$(jq '.authority.provisioners.[] | select(.type=="JWK") | .name' "$(step path)"/config/ca.json)
-PROVISIONER="${PROVISIONER#\"}"
-PROVISIONER="${PROVISIONER%\"}"
-PROVISIONER_PASSWORD=$(step path)/encryption/provisioner.pwd
-
-whiptail --backtitle "Proxmox VE Helper Scripts" --title "step-ca Admin" --yesno "This will maintain step-ca issued x509 and ssh Certificates. Proceed?" 10 58
-
-MENU_ARRAY=("x509" "Maintain x509 Certificates." "ON")
-MENU_ARRAY+=("ssh" "Maintain ssh Certificates." "OFF")
-CERT_TYPE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "step-ca Admin" --radiolist "\nSelect Certificate Type:" 16 48 6 "${MENU_ARRAY[@]}" 3>&1 1>&2 2>&3 | tr -d '"')
-
-[[ -z ${CERT_TYPE} ]] && die "No Certificate Type selected!"
-
-case ${CERT_TYPE} in
-("x509")
-  x509_list
-  CERT_LIST=$(echo "$CERT_LIST" | awk 'NR>1 {print $1 " " $2 "|" $3 "|" $4 "|" $5}')
-  if [[ $CERT_LIST ]]; then
-    whiptail_menu "$CERT_LIST"
-  else
-    MENU_ARRAY=()
-    MSG_MAX_LENGTH=2
-  fi
-  MENU_ARRAY+=("" "Create a new Certificate" "OFF")
-  CERT_SERIAL_NUMBERS=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Certificates on $(hostname)" --checklist "\nSelect Certificate(s) to maintain:\n" 16 $((MSG_MAX_LENGTH + 55)) 6 "${MENU_ARRAY[@]}" 3>&1 1>&2 2>&3 | tr -d '"')
-
-  [[ -z ${CERT_SERIAL_NUMBERS} ]] && x509_request
-  
-  MENU_ARRAY=("Renew" "Renew x509 Certificates." "ON")
-  MENU_ARRAY+=("Revoke" "Revoke x509 Certificates." "OFF")
-  MENU_ARRAY+=("Inspect" "Inspect x509 Certificates." "OFF")
-  CERT_MAINTENANCE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "step-ca Admin" --radiolist "\nSelect Maintenance Type:" 16 48 6 "${MENU_ARRAY[@]}" 3>&1 1>&2 2>&3 | tr -d '"')
-
-  case ${CERT_MAINTENANCE} in
-  ("Renew")
-    x509_renew "${CERT_SERIAL_NUMBERS[@]}"
-    ;;
-  ("Revoke")
-    x509_revoke "${CERT_SERIAL_NUMBERS[@]}"
-    ;;
-  ("Inspect")
-    x509_inspect "${CERT_SERIAL_NUMBERS[@]}"
-    ;;
-  *)
-    die "Unsupported CERT_MAINTENANCE Option!"
-    ;;
-  esac
-  ;;
-("ssh")
-  die "Maintain ssh Certificates - To be implemented in future"
-  ;;
-*)
-  die "Unsupported CERT_TYPE Option!"
-  ;;
-esac
-ADDON_EOF
-chmod 700 "$STEPHOME/step-ca-admin.sh"
-msg_ok "Installed step-ca Admin script"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/wanderer-install.sh
+++ b/install/wanderer-install.sh
@@ -60,16 +60,6 @@ wait -n
 EOF
 chmod +x /opt/wanderer/start.sh

-cat <<'EOF' >/usr/local/bin/wanderer-pb
-#!/usr/bin/env bash
-set -a
-source /opt/wanderer/.env
-set +a
-cd /opt/wanderer/source/db
-exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
-EOF
-chmod +x /usr/local/bin/wanderer-pb
-
 cat <<EOF >/etc/systemd/system/wanderer-web.service
 [Unit]
 Description=wanderer
--- a/install/whodb-install.sh
+++ b/install/whodb-install.sh
@@ -1,40 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://whodb.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "whodb" "clidey/whodb" "singlefile" "latest" "/opt/whodb" "whodb-*-linux-amd64"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/whodb.service
-[Unit]
-Description=WhoDB Database Management
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/whodb
-ExecStart=/opt/whodb/whodb
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now whodb
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/misc/build.func
+++ b/misc/build.func
@@ -1214,11 +1214,7 @@ load_vars_file() {
          fi
          ;;
        var_mount_fs)
-          # Normalize: strip spaces, trailing commas
-          var_val="${var_val// /}"
-          var_val="${var_val%%,}"
-          var_val="${var_val##,}"
-          if [[ -n "$var_val" ]] && [[ ! "$var_val" =~ ^[a-zA-Z0-9]+(,[a-zA-Z0-9]+)*$ ]]; then
+          if [[ ! "$var_val" =~ ^[a-zA-Z0-9,]+$ ]]; then
            msg_warn "Invalid mount_fs value '$var_val' in $file (comma-separated fs names only, e.g. nfs,cifs), ignoring"
            continue
          fi
@@ -2687,10 +2683,6 @@ advanced_settings() {
        --ok-button "Next" --cancel-button "Back" \
        --inputbox "\nAllow specific filesystem mounts.\n\nComma-separated list: nfs, cifs, fuse, ext4, etc.\nLeave empty for defaults (none).\n\nCurrent: $mount_hint" 14 62 "$_mount_fs" \
        3>&1 1>&2 2>&3); then
-        # Normalize: strip spaces and trailing/leading commas
-        result="${result// /}"
-        result="${result%%,}"
-        result="${result##,}"
        _mount_fs="$result"
        ((STEP++))
      else
@@ -3654,16 +3646,8 @@ build_container() {

  # Mount filesystem types (user configurable via advanced settings)
  if [ -n "${ALLOW_MOUNT_FS:-}" ]; then
-    # Sanitize: strip spaces, trailing/leading commas, then convert commas to semicolons
-    local _mount_clean="${ALLOW_MOUNT_FS// /}"
-    _mount_clean="${_mount_clean%%,}"
-    _mount_clean="${_mount_clean##,}"
-    _mount_clean="${_mount_clean%%;}"
-    _mount_clean="${_mount_clean//,/;}"
-    if [ -n "$_mount_clean" ]; then
-      [ -n "$FEATURES" ] && FEATURES="$FEATURES,"
-      FEATURES="${FEATURES}mount=${_mount_clean}"
-    fi
+    [ -n "$FEATURES" ] && FEATURES="$FEATURES,"
+    FEATURES="${FEATURES}mount=${ALLOW_MOUNT_FS//,/;}"
  fi

  # Build PCT_OPTIONS as string for export
@@ -5250,133 +5234,9 @@ create_lxc_container() {
  # Extract Debian OS minor from template name: debian-13-standard_13.1-1_amd64.tar.zst => "13.1"
  parse_template_osver() { sed -n 's/.*_\([0-9][0-9]*\(\.[0-9]\+\)\?\)-.*/\1/p' <<<"$1"; }

-  # Switch to the previous OS major version template and retry pct create
-  # Determines the fallback version automatically based on available templates.
-  # Returns: 0 = success, 1 = failed
-  fallback_to_previous_os_version() {
-    local old_template="$TEMPLATE"
-    local os_type="${PCT_OSTYPE:-}"
-    local current_ver="${PCT_OSVERSION:-}"
-
-    # Determine template search pattern based on OS type
-    local tpl_pattern=""
-    case "$os_type" in
-    debian | ubuntu) tpl_pattern="-standard_" ;;
-    alpine | fedora | rocky | centos) tpl_pattern="-default_" ;;
-    *) tpl_pattern="" ;;
-    esac
-
-    msg_info "Searching for an older $os_type template (current: $os_type $current_ver)"
-
-    # Collect all available versions for this OS type (local + online)
-    local -a all_versions=()
-
-    # Local templates
-    mapfile -t _local_vers < <(
-      pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
-        awk -v os="$os_type" -v pat="$tpl_pattern" '$1 ~ ("^"os"|/"os) && $1 ~ pat {print $1}' |
-        sed 's|.*/||' |
-        sed -E "s/^${os_type}-([0-9]+(\.[0-9]+)?).*/\1/" |
-        sort -u -V
-    )
-    all_versions+=("${_local_vers[@]}")
-
-    # Online templates (only if needed)
-    if command -v timeout &>/dev/null; then
-      timeout 30 pveam update >/dev/null 2>&1 || true
-    else
-      pveam update >/dev/null 2>&1 || true
-    fi
-    mapfile -t _online_vers < <(
-      pveam available -section system 2>/dev/null |
-        awk '{print $2}' |
-        grep -E "^${os_type}-[0-9]" |
-        { [[ -n "$tpl_pattern" ]] && grep "$tpl_pattern" || cat; } |
-        sed -E "s/^${os_type}-([0-9]+(\.[0-9]+)?).*/\1/" |
-        sort -u -V 2>/dev/null || true
-    )
-    all_versions+=("${_online_vers[@]}")
-
-    # Deduplicate and sort, find the highest version below current
-    local fallback_ver=""
-    fallback_ver=$(printf '%s\n' "${all_versions[@]}" | sort -u -V | awk -v cur="$current_ver" '{
-      # Compare major versions: extract major part
-      split($0, a, ".")
-      split(cur, b, ".")
-      if (a[1]+0 < b[1]+0) ver=$0
-    } END { if (ver) print ver }')
-
-    if [[ -z "$fallback_ver" ]]; then
-      msg_error "No older $os_type template version found."
-      return 1
-    fi
-
-    msg_ok "Fallback version: $os_type $fallback_ver"
-
-    # Find the actual template file for this version
-    local fallback_search="${os_type}-${fallback_ver}"
-    local fallback_template=""
-
-    # Check local first
-    mapfile -t _fb_local < <(
-      pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
-        awk -v search="$fallback_search" -v pat="$tpl_pattern" '$1 ~ search && $1 ~ pat {print $1}' |
-        sed 's|.*/||' | sort -t - -k 2 -V
-    )
-    if [[ ${#_fb_local[@]} -gt 0 ]]; then
-      fallback_template="${_fb_local[-1]}"
-    else
-      # Check online
-      mapfile -t _fb_online < <(
-        pveam available -section system 2>/dev/null |
-          awk '{print $2}' |
-          grep -E "^${fallback_search}.*${tpl_pattern}" |
-          sort -t - -k 2 -V 2>/dev/null || true
-      )
-      [[ ${#_fb_online[@]} -gt 0 ]] && fallback_template="${_fb_online[-1]}"
-    fi
-
-    if [[ -z "$fallback_template" ]]; then
-      msg_error "No template found for $os_type $fallback_ver."
-      return 1
-    fi
-
-    msg_ok "Found template: $fallback_template"
-
-    # Download if needed
-    local fallback_path
-    fallback_path="$(pvesm path "$TEMPLATE_STORAGE:vztmpl/$fallback_template" 2>/dev/null || true)"
-    [[ -z "$fallback_path" ]] && fallback_path="/var/lib/vz/template/cache/$fallback_template"
-
-    if [[ ! -f "$fallback_path" ]]; then
-      msg_info "Downloading $os_type $fallback_ver template"
-      if ! pveam download "$TEMPLATE_STORAGE" "$fallback_template" >>"${BUILD_LOG:-/dev/null}" 2>&1; then
-        msg_error "Failed to download $os_type $fallback_ver template."
-        return 1
-      fi
-      msg_ok "Template downloaded"
-    fi
-
-    # Update variables
-    TEMPLATE="$fallback_template"
-    TEMPLATE_PATH="$fallback_path"
-    PCT_OSVERSION="$fallback_ver"
-    export PCT_OSVERSION
-
-    # Retry pct create
-    msg_info "Retrying container creation with $os_type $fallback_ver"
-    if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
-      msg_ok "Container created successfully with $os_type $fallback_ver (fallback from $old_template)."
-      return 0
-    else
-      msg_error "Container creation with $os_type $fallback_ver also failed. See $LOGFILE"
-      return 1
-    fi
-  }
-
  # Offer upgrade for pve-container/lxc-pve if candidate > installed; optional auto-retry pct create
  # Returns:
-  #   0 = no upgrade needed / container created after upgrade or fallback
+  #   0 = no upgrade needed
  #   1 = upgraded (and if do_retry=yes and retry succeeded, creation done)
  #   2 = user declined
  #   3 = upgrade attempted but failed OR retry failed
@@ -5404,58 +5264,13 @@ create_lxc_container() {
    echo "  pve-container: installed=${_pvec_i:-n/a}  candidate=${_pvec_c:-n/a}"
    echo "  lxc-pve     : installed=${_lxcp_i:-n/a}  candidate=${_lxcp_c:-n/a}"
    echo
-
-    # Offer older OS version fallback when template version might be too new for LXC stack
-    local _has_fallback_option=false
-    if [[ -n "${PCT_OSTYPE:-}" && -n "${PCT_OSVERSION:-}" ]]; then
-      _has_fallback_option=true
-      echo "  [1] Upgrade LXC stack now (recommended)"
-      echo "  [2] Use an older ${PCT_OSTYPE} template instead (may not work with all scripts)"
-      echo "  [3] Cancel"
-      echo
-      read -rp "Select option [1/2/3]: " _ans </dev/tty
-    else
-      read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
-    fi
-
-    if [[ "$_has_fallback_option" == true ]]; then
-      case "$_ans" in
-      1)
-        _ans="y"
-        ;;
-      2)
-        if [[ "$do_retry" == "yes" ]]; then
-          if fallback_to_previous_os_version; then
-            return 0
-          else
-            return 3
-          fi
-        else
-          msg_custom "ℹ️" "${YW}" "OS version fallback is only available during container creation."
-          return 2
-        fi
-        ;;
-      *)
-        return 2
-        ;;
-      esac
-    fi
-
+    read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
    case "${_ans,,}" in
    y | yes)
      msg_info "Upgrading Proxmox LXC stack (pve-container, lxc-pve)"
      apt_update_safe
      if $STD apt-get install -y --only-upgrade pve-container lxc-pve; then
        msg_ok "LXC stack upgraded."
-        # Verify pct binary still works after upgrade (partial upgrades can break Perl modules)
-        if ! pct list &>/dev/null; then
-          msg_error "LXC stack upgrade caused PVE tool breakage (likely Perl module incompatibility)."
-          msg_custom "⚠️" "${YW}" "A partial package upgrade has left the PVE stack in an inconsistent state."
-          msg_custom "🔧" "${YW}" "Please run the following on the Proxmox host, then retry:"
-          echo -e "${TAB}  apt update && apt dist-upgrade -y"
-          echo -e "${TAB}  reboot"
-          return 3
-        fi
        if [[ "$do_retry" == "yes" ]]; then
          msg_info "Retrying container creation after upgrade"
          if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
@@ -5554,35 +5369,10 @@ create_lxc_container() {
  fi

  msg_info "Validating storage '$CONTAINER_STORAGE'"
-  # Check if storage.cfg is accessible (pmxcfs must be mounted)
-  if [[ ! -f /etc/pve/storage.cfg ]]; then
-    if ! mountpoint -q /etc/pve 2>/dev/null; then
-      msg_error "Proxmox cluster filesystem (pmxcfs) is not mounted at /etc/pve."
-      msg_custom "🔧" "${YW}" "Try: systemctl restart pve-cluster"
-    else
-      msg_error "/etc/pve/storage.cfg does not exist."
-      msg_custom "🔧" "${YW}" "Check Proxmox cluster filesystem integrity: pvecm status"
-    fi
-    exit 213
-  fi
-
-  STORAGE_TYPE=$(grep -E "^[^:]+:[[:space:]]*$CONTAINER_STORAGE[[:space:]]*$" /etc/pve/storage.cfg | cut -d: -f1 | head -1 || true)
-
-  # Fallback: use pvesm status to determine storage type
-  if [[ -z "$STORAGE_TYPE" ]]; then
-    STORAGE_TYPE=$(pvesm status -storage "$CONTAINER_STORAGE" 2>/dev/null | awk 'NR>1{print $2}')
-  fi
+  STORAGE_TYPE=$(grep -E "^[^:]+: $CONTAINER_STORAGE$" /etc/pve/storage.cfg | cut -d: -f1 | head -1 || true)

  if [[ -z "$STORAGE_TYPE" ]]; then
    msg_error "Storage '$CONTAINER_STORAGE' not found in /etc/pve/storage.cfg"
-    msg_custom "📋" "${YW}" "Available storages: $(pvesm status 2>/dev/null | awk 'NR>1{printf "%s (%s) ", $1, $2}' || echo 'n/a')"
-    if [[ -r /etc/pve/storage.cfg ]]; then
-      msg_custom "📋" "${YW}" "Storage definitions found in config:"
-      grep -E '^[a-z]+:' /etc/pve/storage.cfg 2>/dev/null | while IFS= read -r _line; do
-        echo "${TAB}  $_line"
-      done
-    fi
-    msg_custom "📖" "${YW}" "See https://pve.proxmox.com/wiki/Storage for storage configuration details."
    exit 213
  fi

@@ -6005,17 +5795,6 @@ create_lxc_container() {
  if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
    msg_debug "Container creation failed on ${TEMPLATE_STORAGE}. Checking error..."

-    # Check for Perl module breakage (partial PVE upgrade)
-    if grep -qiE 'Compilation failed|Bareword.*not allowed' "$LOGFILE"; then
-      msg_error "Container creation failed due to broken Perl modules on the PVE host."
-      msg_custom "⚠️" "${YW}" "This usually happens after a partial PVE package upgrade."
-      msg_custom "🔧" "${YW}" "Please run the following on the Proxmox host, then retry:"
-      echo -e "${TAB}  apt update && apt dist-upgrade -y"
-      echo -e "${TAB}  reboot"
-      _flush_pct_log
-      exit 232
-    fi
-
    # Check if CTID collision (race condition: ID claimed between validation and creation)
    if grep -qiE 'already exists|already in use' "$LOGFILE"; then
      local old_ctid="$CTID"
@@ -6061,16 +5840,15 @@ create_lxc_container() {
              rc=$?
              case $rc in
              0) : ;; # success - container created, continue
-              2 | 3)
-                # Upgrade declined or failed — try older OS version as last resort
-                msg_warn "Attempting older ${PCT_OSTYPE:-} version as last resort"
-                if fallback_to_previous_os_version; then
-                  : # success
-                else
-                  msg_error "All recovery options exhausted. Please inspect: $LOGFILE"
-                  _flush_pct_log
-                  exit 231
-                fi
+              2)
+                msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+                _flush_pct_log
+                exit 231
+                ;;
+              3)
+                msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+                _flush_pct_log
+                exit 231
                ;;
              esac
            else
@@ -6094,16 +5872,15 @@ create_lxc_container() {
            rc=$?
            case $rc in
            0) : ;; # success - container created, continue
-            2 | 3)
-              # Upgrade declined or failed — try older OS version as last resort
-              msg_warn "Attempting older ${PCT_OSTYPE:-} version as last resort"
-              if fallback_to_previous_os_version; then
-                : # success
-              else
-                msg_error "All recovery options exhausted. Please inspect: $LOGFILE"
-                _flush_pct_log
-                exit 231
-              fi
+            2)
+              msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+              _flush_pct_log
+              exit 231
+              ;;
+            3)
+              msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+              _flush_pct_log
+              exit 231
              ;;
            esac
          else
@@ -6122,7 +5899,7 @@ create_lxc_container() {
      fi
    fi # close CTID collision else-branch
  fi
-  set +f # re-enable globbing after pct create block
+  set +f  # re-enable globbing after pct create block

  # Verify container exists (allow up to 10s for pmxcfs sync in clusters)
  local _pct_visible=false
--- a/misc/tools.func
+++ b/misc/tools.func
@@ -1139,42 +1139,39 @@ validate_github_token() {
    -H "Authorization: Bearer $token" \
    -H "Accept: application/vnd.github+json" \
    -H "X-GitHub-Api-Version: 2022-11-28" \
-    "https://api.github.com/user" 2>/dev/null) || {
-    rm -f "$headers"
-    return 3
-  }
+    "https://api.github.com/user" 2>/dev/null) || { rm -f "$headers"; return 3; }
  http_code="$response"

  # Read expiry header (fine-grained PATs carry this)
-  expiry_date=$(grep -i '^github-authentication-token-expiration:' "$headers" |
-    sed 's/.*: *//' | tr -d '\r\n' || true)
+  expiry_date=$(grep -i '^github-authentication-token-expiration:' "$headers" \
+    | sed 's/.*: *//' | tr -d '\r\n' || true)
  # Read token scopes (classic PATs)
-  scopes=$(grep -i '^x-oauth-scopes:' "$headers" |
-    sed 's/.*: *//' | tr -d '\r\n' || true)
+  scopes=$(grep -i '^x-oauth-scopes:' "$headers" \
+    | sed 's/.*: *//' | tr -d '\r\n' || true)
  rm -f "$headers"

  case "$http_code" in
-  200)
-    if [[ -n "$expiry_date" ]]; then
-      msg_ok "GitHub token is valid (expires: $expiry_date)."
-    else
-      msg_ok "GitHub token is valid (no expiry / fine-grained PAT)."
-    fi
-    # Warn if classic PAT has no public_repo scope
-    if [[ -n "$scopes" && "$scopes" != *"public_repo"* && "$scopes" != *"repo"* ]]; then
-      msg_warn "Token has no 'public_repo' scope - private repos and some release APIs may fail."
-      return 2
-    fi
-    return 0
-    ;;
-  401)
-    msg_error "GitHub token is invalid or expired (HTTP 401)."
-    return 1
-    ;;
-  *)
-    msg_warn "GitHub token validation returned HTTP $http_code - treating as valid."
-    return 0
-    ;;
+    200)
+      if [[ -n "$expiry_date" ]]; then
+        msg_ok "GitHub token is valid (expires: $expiry_date)."
+      else
+        msg_ok "GitHub token is valid (no expiry / fine-grained PAT)."
+      fi
+      # Warn if classic PAT has no public_repo scope
+      if [[ -n "$scopes" && "$scopes" != *"public_repo"* && "$scopes" != *"repo"* ]]; then
+        msg_warn "Token has no 'public_repo' scope - private repos and some release APIs may fail."
+        return 2
+      fi
+      return 0
+      ;;
+    401)
+      msg_error "GitHub token is invalid or expired (HTTP 401)."
+      return 1
+      ;;
+    *)
+      msg_warn "GitHub token validation returned HTTP $http_code - treating as valid."
+      return 0
+      ;;
  esac
 }

@@ -4607,23 +4604,6 @@ function setup_hwaccel() {
  msg_ok "Setup Hardware Acceleration"
 }

-# ══════════════════════════════════════════════════════════════════════════════
-# Resolve the IGC tag that the latest compute-runtime was built against.
-# Must be called AFTER a fetch_and_deploy_gh_release for intel/compute-runtime
-# so that /tmp/gh_rel.json contains the compute-runtime release metadata.
-# Sets the variable named by $1 (default: igc_tag) to the discovered tag.
-# ══════════════════════════════════════════════════════════════════════════════
-_resolve_igc_tag() {
-  local -n _out_ref="${1:-igc_tag}"
-  _out_ref="latest"
-  if [[ -f /tmp/gh_rel.json ]]; then
-    local _body _parsed
-    _body=$(jq -r '.body // empty' /tmp/gh_rel.json 2>/dev/null) || return 0
-    _parsed=$(grep -oP 'intel-graphics-compiler/releases/tag/\K[^\s\)]+' <<<"$_body" | head -1)
-    [[ -n "$_parsed" ]] && _out_ref="$_parsed"
-  fi
-}
-
 # ══════════════════════════════════════════════════════════════════════════════
 # Intel Arc GPU Setup
 # ══════════════════════════════════════════════════════════════════════════════
@@ -4650,17 +4630,12 @@ _setup_intel_arc() {
    if [[ "$os_codename" == "trixie" || "$os_codename" == "sid" ]]; then
      msg_info "Fetching Intel compute-runtime from GitHub for Arc support"

-      # Fetch a compute-runtime package first so /tmp/gh_rel.json is populated,
-      # then resolve the matching IGC tag from the release notes.
      # libigdgmm - bundled in compute-runtime releases
      fetch_and_deploy_gh_release "libigdgmm12" "intel/compute-runtime" "binary" "latest" "" "libigdgmm12_*_amd64.deb" || true

-      local igc_tag
-      _resolve_igc_tag igc_tag
-
-      # Intel Graphics Compiler – pinned to the version compute-runtime expects
-      fetch_and_deploy_gh_release "intel-igc-core" "intel/intel-graphics-compiler" "binary" "$igc_tag" "" "intel-igc-core-2_*_amd64.deb" || true
-      fetch_and_deploy_gh_release "intel-igc-opencl" "intel/intel-graphics-compiler" "binary" "$igc_tag" "" "intel-igc-opencl-2_*_amd64.deb" || true
+      # Intel Graphics Compiler (note: packages have -2 suffix)
+      fetch_and_deploy_gh_release "intel-igc-core" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-core-2_*_amd64.deb" || true
+      fetch_and_deploy_gh_release "intel-igc-opencl" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-opencl-2_*_amd64.deb" || true

      # Compute Runtime (depends on IGC and gmmlib)
      fetch_and_deploy_gh_release "intel-opencl-icd" "intel/compute-runtime" "binary" "latest" "" "intel-opencl-icd_*_amd64.deb" || true
@@ -4710,17 +4685,12 @@ _setup_intel_modern() {
    if [[ "$os_codename" == "trixie" || "$os_codename" == "sid" ]]; then
      msg_info "Fetching Intel compute-runtime from GitHub"

-      # Fetch a compute-runtime package first so /tmp/gh_rel.json is populated,
-      # then resolve the matching IGC tag from the release notes.
      # libigdgmm first (bundled in compute-runtime releases)
      fetch_and_deploy_gh_release "libigdgmm12" "intel/compute-runtime" "binary" "latest" "" "libigdgmm12_*_amd64.deb" || true

-      local igc_tag
-      _resolve_igc_tag igc_tag
-
-      # Intel Graphics Compiler – pinned to the version compute-runtime expects
-      fetch_and_deploy_gh_release "intel-igc-core" "intel/intel-graphics-compiler" "binary" "$igc_tag" "" "intel-igc-core-2_*_amd64.deb" || true
-      fetch_and_deploy_gh_release "intel-igc-opencl" "intel/intel-graphics-compiler" "binary" "$igc_tag" "" "intel-igc-opencl-2_*_amd64.deb" || true
+      # Intel Graphics Compiler (note: packages have -2 suffix)
+      fetch_and_deploy_gh_release "intel-igc-core" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-core-2_*_amd64.deb" || true
+      fetch_and_deploy_gh_release "intel-igc-opencl" "intel/intel-graphics-compiler" "binary" "latest" "" "intel-igc-opencl-2_*_amd64.deb" || true

      # Compute Runtime
      fetch_and_deploy_gh_release "intel-opencl-icd" "intel/compute-runtime" "binary" "latest" "" "intel-opencl-icd_*_amd64.deb" || true
--- a/tools/addon/sparkyfitness-garmin.sh
+++ b/tools/addon/sparkyfitness-garmin.sh
@@ -69,9 +69,6 @@ function update() {
    msg_ok "Stopped service"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "sparkyfitness-garmin" "CodeWithCJ/SparkyFitness" "tarball" "latest" $INSTALL_PATH
-    cd $INSTALL_PATH/SparkyFitnessGarmin
-    $STD uv venv --clear .venv
-    $STD uv pip install -r requirements.txt

    msg_info "Starting service"
    systemctl start sparkyfitness-garmin
--- a/tools/pve/clean-orphaned-lvm.sh
+++ b/tools/pve/clean-orphaned-lvm.sh
@@ -37,9 +37,8 @@ function find_orphaned_lvm {
    fi

    container_id=$(echo "$lv" | grep -oE "[0-9]+" | head -1)
-    # Check if the ID exists as a VM or LXC container on any cluster node
-    if compgen -G "/etc/pve/nodes/*/lxc/${container_id}.conf" >/dev/null 2>&1 ||
-      compgen -G "/etc/pve/nodes/*/qemu-server/${container_id}.conf" >/dev/null 2>&1; then
+    # Check if the ID exists as a VM or LXC container
+    if [ -f "/etc/pve/lxc/${container_id}.conf" ] || [ -f "/etc/pve/qemu-server/${container_id}.conf" ]; then
      continue
    fi

--- a/tools/pve/post-pmg-install.sh
+++ b/tools/pve/post-pmg-install.sh
@@ -47,8 +47,7 @@ msg_error() {
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
 declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pmg-install" "pve"

-if ! dpkg -s proxmox-mailgateway-container >/dev/null 2>&1 &&
-  ! dpkg -s proxmox-mailgateway >/dev/null 2>&1; then
+if ! grep -q "Proxmox Mail Gateway" /etc/issue 2>/dev/null; then
  msg_error "This script is only intended for Proxmox Mail Gateway"
  exit 232
 fi
@@ -58,24 +57,14 @@ repo_state() {
  local repo="$1"
  local file=""
  local state="missing"
-  for f in /etc/apt/sources.list /etc/apt/sources.list.d/*.list /etc/apt/sources.list.d/*.sources; do
+  for f in /etc/apt/sources.list /etc/apt/sources.list.d/*.list; do
    [[ -f "$f" ]] || continue
    if grep -q "$repo" "$f"; then
      file="$f"
-      if [[ "$f" == *.sources ]]; then
-        # deb822 format: check Enabled field
-        if grep -qiE '^Enabled:\s*no' "$f"; then
-          state="disabled"
-        else
-          state="active"
-        fi
-      else
-        # legacy format
-        if grep -qE "^[^#].*${repo}" "$f"; then
-          state="active"
-        elif grep -qE "^#.*${repo}" "$f"; then
-          state="disabled"
-        fi
+      if grep -qE "^[^#].*${repo}" "$f"; then
+        state="active"
+      elif grep -qE "^#.*${repo}" "$f"; then
+        state="disabled"
      fi
      break
    fi
@@ -83,28 +72,6 @@ repo_state() {
  echo "$state $file"
 }

-toggle_repo() {
-  # $1 = file, $2 = action (enable|disable)
-  local file="$1" action="$2"
-  if [[ "$file" == *.sources ]]; then
-    if [[ "$action" == "disable" ]]; then
-      if grep -qiE '^Enabled:' "$file"; then
-        sed -i 's/^Enabled:.*/Enabled: no/' "$file"
-      else
-        echo "Enabled: no" >>"$file"
-      fi
-    else
-      sed -i 's/^Enabled:.*/Enabled: yes/' "$file"
-    fi
-  else
-    if [[ "$action" == "disable" ]]; then
-      sed -i '/^[^#]/s/^/# /' "$file"
-    else
-      sed -i 's/^# *//' "$file"
-    fi
-  fi
-}
-
 start_routines() {
  header_info
  VERSION="$(awk -F'=' '/^VERSION_CODENAME=/{ print $NF }' /etc/os-release)"
@@ -117,20 +84,11 @@ start_routines() {
  case $CHOICE in
  yes)
    msg_info "Correcting Debian Sources"
-    cat <<EOF >/etc/apt/sources.list.d/debian.sources
-Types: deb
-URIs: http://deb.debian.org/debian
-Suites: ${VERSION} ${VERSION}-updates
-Components: main contrib non-free non-free-firmware
-Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
-
-Types: deb
-URIs: http://security.debian.org/debian-security
-Suites: ${VERSION}-security
-Components: main contrib non-free non-free-firmware
-Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+    cat <<EOF >/etc/apt/sources.list
+deb http://deb.debian.org/debian ${VERSION} main contrib
+deb http://deb.debian.org/debian ${VERSION}-updates main contrib
+deb http://security.debian.org/debian-security ${VERSION}-security main contrib
 EOF
-    rm -f /etc/apt/sources.list
    msg_ok "Corrected Debian Sources"
    ;;
  no) msg_error "Selected no to Correcting Debian Sources" ;;
@@ -150,7 +108,7 @@ EOF
    keep) msg_ok "Kept 'pmg-enterprise' repository" ;;
    disable)
      msg_info "Disabling 'pmg-enterprise' repository"
-      toggle_repo "$file" disable
+      sed -i "s/^[^#].*pmg-enterprise/# &/" "$file"
      msg_ok "Disabled 'pmg-enterprise' repository"
      ;;
    delete)
@@ -170,7 +128,7 @@ EOF
    case $CHOICE in
    enable)
      msg_info "Enabling 'pmg-enterprise' repository"
-      toggle_repo "$file" enable
+      sed -i "s/^#.*pmg-enterprise/deb/" "$file"
      msg_ok "Enabled 'pmg-enterprise' repository"
      ;;
    keep) msg_ok "Kept 'pmg-enterprise' repository disabled" ;;
@@ -191,12 +149,8 @@ EOF
    case $CHOICE in
    yes)
      msg_info "Adding 'pmg-enterprise' repository"
-      cat >/etc/apt/sources.list.d/pmg-enterprise.sources <<EOF
-Types: deb
-URIs: https://enterprise.proxmox.com/debian/pmg
-Suites: ${VERSION}
-Components: pmg-enterprise
-Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+      cat >/etc/apt/sources.list.d/pmg-enterprise.list <<EOF
+deb https://enterprise.proxmox.com/debian/pmg ${VERSION} pmg-enterprise
 EOF
      msg_ok "Added 'pmg-enterprise' repository"
      ;;
@@ -219,7 +173,7 @@ EOF
    keep) msg_ok "Kept 'pmg-no-subscription' repository" ;;
    disable)
      msg_info "Disabling 'pmg-no-subscription' repository"
-      toggle_repo "$file" disable
+      sed -i "s/^[^#].*pmg-no-subscription/# &/" "$file"
      msg_ok "Disabled 'pmg-no-subscription' repository"
      ;;
    delete)
@@ -239,7 +193,7 @@ EOF
    case $CHOICE in
    enable)
      msg_info "Enabling 'pmg-no-subscription' repository"
-      toggle_repo "$file" enable
+      sed -i "s/^#.*pmg-no-subscription/deb/" "$file"
      msg_ok "Enabled 'pmg-no-subscription' repository"
      ;;
    keep) msg_ok "Kept 'pmg-no-subscription' repository disabled" ;;
@@ -259,12 +213,8 @@ EOF
    case $CHOICE in
    yes)
      msg_info "Adding 'pmg-no-subscription' repository"
-      cat >/etc/apt/sources.list.d/pmg-no-subscription.sources <<EOF
-Types: deb
-URIs: http://download.proxmox.com/debian/pmg
-Suites: ${VERSION}
-Components: pmg-no-subscription
-Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
+      cat >/etc/apt/sources.list.d/pmg-install-repo.list <<EOF
+deb http://download.proxmox.com/debian/pmg ${VERSION} pmg-no-subscription
 EOF
      msg_ok "Added 'pmg-no-subscription' repository"
      ;;
@@ -286,13 +236,8 @@ EOF
    case $CHOICE in
    yes)
      msg_info "Adding 'pmgtest' repository (disabled)"
-      cat >/etc/apt/sources.list.d/pmgtest.sources <<EOF
-Types: deb
-URIs: http://download.proxmox.com/debian/pmg
-Suites: ${VERSION}
-Components: pmgtest
-Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
-Enabled: no
+      cat >/etc/apt/sources.list.d/pmgtest-for-beta.list <<EOF
+# deb http://download.proxmox.com/debian/pmg ${VERSION} pmgtest
 EOF
      msg_ok "Added 'pmgtest' repository"
      ;;