runs on vps

1. Fix source URL regex: now captures 'Github: https://github.com/...'
   pattern (pipe-separated), not just '# Source: https://github.com/...'
   This was causing ~50 scripts to show 'No GitHub source'

2. Fix semver comparison: engines.node constraints like '>=18.0.0'
   no longer flag version 22 as drift. >= and ^ constraints are now
   properly evaluated (our_version >= min_major = satisfied)

3. Add fallback detection: when no Dockerfile or engines.node is found,
   check .nvmrc and .node-version files for Node version hints

4. Add subdirectory search: Dockerfile and package.json are now found
   via GitHub API tree search, not just in repo root

5. Use GitHub API to detect default branch instead of guessing
   main/master/dev with multiple HEAD requests

.github/workflows/check-node-versions.yml

@@ -214,12 +214,11 @@ jobs:
             total=$((total + 1))
             slug=$(basename "$script" | sed 's/-install\.sh$//')
 
-            # Extract Source URL (GitHub only) from the "# Source:" line
+            # Extract Source URL (GitHub only)
             # Supports both:
             #   # Source: https://github.com/owner/repo
             #   # Source: https://example.com | Github: https://github.com/owner/repo
-            # NOTE: Must filter for "# Source:" line first to avoid matching the License URL
+            source_url=$(head -20 "$script" | grep -oP 'https://github\.com/[^\s|]+' | head -1 || echo "")
-            source_url=$(head -20 "$script" | grep -i '# Source:' | grep -oP 'https://github\.com/[^\s|]+' | head -1 || echo "")
             if [[ -z "$source_url" ]]; then
               report_lines+=("| \`$slug\` | — | — | — | — | ⏭️ No GitHub source |")
               continue

.github/workflows/close-new-script-prs.yml

@@ -1,119 +0,0 @@
-name: Close Unauthorized New Script PRs
-
-on:
-  pull_request_target:
-    branches: ["main"]
-    types: [opened, labeled]
-
-jobs:
-  check-new-script:
-    if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: coolify-runner
-    permissions:
-      pull-requests: write
-      contents: read
-    steps:
-      - name: Close PR if unauthorized new script submission
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const pr = context.payload.pull_request;
-            const prNumber = pr.number;
-            const author = pr.user.login;
-            const authorType = pr.user.type; // "User" or "Bot"
-            const owner = context.repo.owner;
-            const repo = context.repo.repo;
-
-            // --- Only act on PRs with the "new script" label ---
-            const labels = pr.labels.map(l => l.name);
-            if (!labels.includes("new script")) {
-              core.info(`PR #${prNumber} does not have "new script" label — skipping.`);
-              return;
-            }
-
-            // --- Allow our bots ---
-            const allowedBots = [
-              "push-app-to-main[bot]",
-              "push-app-to-main",
-            ];
-
-            if (allowedBots.includes(author)) {
-              core.info(`PR #${prNumber} by allowed bot "${author}" — skipping.`);
-              return;
-            }
-
-            // --- Check if author is a member of the contributor team ---
-            const teamSlug = "contributor";
-            let isMember = false;
-
-            try {
-              const { status } = await github.rest.teams.getMembershipForUserInOrg({
-                org: owner,
-                team_slug: teamSlug,
-                username: author,
-              });
-              // status 200 means the user is a member (active or pending)
-              isMember = true;
-            } catch (error) {
-              if (error.status === 404) {
-                isMember = false;
-              } else {
-                core.warning(`Could not check team membership for ${author}: ${error.message}`);
-                // Fallback: check org membership
-                try {
-                  await github.rest.orgs.checkMembershipForUser({
-                    org: owner,
-                    username: author,
-                  });
-                  isMember = true;
-                } catch {
-                  isMember = false;
-                }
-              }
-            }
-
-            if (isMember) {
-              core.info(`PR #${prNumber} by contributor "${author}" — skipping.`);
-              return;
-            }
-
-            // --- Unauthorized: close the PR with a comment ---
-            core.info(`Closing PR #${prNumber} by "${author}" — not a contributor or allowed bot.`);
-
-            const comment = [
-              `👋 Hi @${author},`,
-              ``,
-              `Thank you for your interest in contributing a new script!`,
-              ``,
-              `However, **new scripts must first be submitted to our development repository** for testing and review before they can be merged here.`,
-              ``,
-              `> 🛑 New scripts must be submitted to [**ProxmoxVED**](https://github.com/community-scripts/ProxmoxVED) for testing.`,
-              `> PRs without prior testing will be closed.`,
-              ``,
-              `Please open your PR at **https://github.com/community-scripts/ProxmoxVED** instead.`,
-              `Once your script has been tested and approved there, it will be pushed to this repository automatically.`,
-              ``,
-              `This PR will now be closed. Thank you for understanding! 🙏`,
-            ].join("\n");
-
-            await github.rest.issues.createComment({
-              owner,
-              repo,
-              issue_number: prNumber,
-              body: comment,
-            });
-
-            await github.rest.pulls.update({
-              owner,
-              repo,
-              pull_number: prNumber,
-              state: "closed",
-            });
-
-            // Add a label to indicate why it was closed
-            await github.rest.issues.addLabels({
-              owner,
-              repo,
-              issue_number: prNumber,
-              labels: ["not a script issue"],
-            });

CHANGELOG.md

@@ -407,108 +407,10 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-02-28
-
-### 🚀 Updated Scripts
-
-  - Update Reactive Resume install script with useful .env information for reverse proxy setup [@Mazianni](https://github.com/Mazianni) ([#12401](https://github.com/community-scripts/ProxmoxVE/pull/12401))
-
-  - #### 🐞 Bug Fixes
-
-    - gramps-web: install addons (FilterRules) for relationship diagram [@MickLesk](https://github.com/MickLesk) ([#12387](https://github.com/community-scripts/ProxmoxVE/pull/12387))
-    - [Fix] Immich: Change `sed` command to fully replace line in postgresql.conf [@vhsdream](https://github.com/vhsdream) ([#12429](https://github.com/community-scripts/ProxmoxVE/pull/12429))
-    - [FIX] Immich: fix Openvino memory leak during OCR; improve HW-accelerated ML performance [@vhsdream](https://github.com/vhsdream) ([#12426](https://github.com/community-scripts/ProxmoxVE/pull/12426))
-    - Fix default tag for ioBroker LXC install [@josefglatz](https://github.com/josefglatz) ([#12423](https://github.com/community-scripts/ProxmoxVE/pull/12423))
-    - Ombi: Add database.json [@hraphael](https://github.com/hraphael) ([#12412](https://github.com/community-scripts/ProxmoxVE/pull/12412))
-    - Dawarich: add missing build deps and handle seed failure [@MickLesk](https://github.com/MickLesk) ([#12410](https://github.com/community-scripts/ProxmoxVE/pull/12410))
-    - pangolin: increase hdd to 10G [@MickLesk](https://github.com/MickLesk) ([#12409](https://github.com/community-scripts/ProxmoxVE/pull/12409))
-
-  - #### ✨ New Features
-
-    - BookLore: add additional JVM flags [@vhsdream](https://github.com/vhsdream) ([#12421](https://github.com/community-scripts/ProxmoxVE/pull/12421))
-
-### 🗑️ Deleted Scripts
-
-  - Delete Palmr [@vhsdream](https://github.com/vhsdream) ([#12399](https://github.com/community-scripts/ProxmoxVE/pull/12399))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: read from /dev/tty in all interactive prompts | fix empty or cropped logs due build process [@MickLesk](https://github.com/MickLesk) ([#12406](https://github.com/community-scripts/ProxmoxVE/pull/12406))
-
-## 2026-02-27
-
-### 🆕 New Scripts
-
-  - Strapi ([#12320](https://github.com/community-scripts/ProxmoxVE/pull/12320))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - TrueNAS VM: filter out new nightlies with MASTER [@juronja](https://github.com/juronja) ([#12355](https://github.com/community-scripts/ProxmoxVE/pull/12355))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: graceful fallback for apt-get update failures [@MickLesk](https://github.com/MickLesk) ([#12386](https://github.com/community-scripts/ProxmoxVE/pull/12386))
-    - core: Improve error outputs across core functions [@MickLesk](https://github.com/MickLesk) ([#12378](https://github.com/community-scripts/ProxmoxVE/pull/12378))
-
-## 2026-02-26
-
-### 🆕 New Scripts
-
-  - Kima-Hub ([#12319](https://github.com/community-scripts/ProxmoxVE/pull/12319))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: update glx alternatives / nvidia alternative if nvidia glx are missing [@MickLesk](https://github.com/MickLesk) ([#12372](https://github.com/community-scripts/ProxmoxVE/pull/12372))
-    - hotfix: overseer version [@CrazyWolf13](https://github.com/CrazyWolf13) ([#12366](https://github.com/community-scripts/ProxmoxVE/pull/12366))
-
-  - #### ✨ New Features
-
-    - Add ffmpeg for booklore (ffprobe) [@MickLesk](https://github.com/MickLesk) ([#12371](https://github.com/community-scripts/ProxmoxVE/pull/12371))
-    - [QOL] Immich: add warning regarding library compilation time [@vhsdream](https://github.com/vhsdream) ([#12345](https://github.com/community-scripts/ProxmoxVE/pull/12345))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Improves adguardhome-sync addon when running on alpine LXCs [@Darkangeel-hd](https://github.com/Darkangeel-hd) ([#12362](https://github.com/community-scripts/ProxmoxVE/pull/12362))
-
-  - #### ✨ New Features
-
-    - Add Alpine support and improve Tailscale install [@MickLesk](https://github.com/MickLesk) ([#12370](https://github.com/community-scripts/ProxmoxVE/pull/12370))
-
-### 📚 Documentation
-
-  - fix wrong link on contributions README.md [@Darkangeel-hd](https://github.com/Darkangeel-hd) ([#12363](https://github.com/community-scripts/ProxmoxVE/pull/12363))
-
-### 📂 Github
-
-  - github: add workflow to autom. close unauthorized new-script PRs [@MickLesk](https://github.com/MickLesk) ([#12356](https://github.com/community-scripts/ProxmoxVE/pull/12356))
-
 ## 2026-02-25
 
-### 🆕 New Scripts
-
-  - Zerobyte ([#12321](https://github.com/community-scripts/ProxmoxVE/pull/12321))
-
 ### 🚀 Updated Scripts
 
-  - #### 🐞 Bug Fixes
-
-    - fix: overseer migration [@CrazyWolf13](https://github.com/CrazyWolf13) ([#12340](https://github.com/community-scripts/ProxmoxVE/pull/12340))
-    - add: vikunja: daemon reload [@CrazyWolf13](https://github.com/CrazyWolf13) ([#12323](https://github.com/community-scripts/ProxmoxVE/pull/12323))
-    - opnsense-VM: Use ip link to verify bridge existence [@MickLesk](https://github.com/MickLesk) ([#12329](https://github.com/community-scripts/ProxmoxVE/pull/12329))
-    - wger: Use $http_host for proxy Host header [@MickLesk](https://github.com/MickLesk) ([#12327](https://github.com/community-scripts/ProxmoxVE/pull/12327))
-    - Passbolt: Update Nginx config `client_max_body_size` [@tremor021](https://github.com/tremor021) ([#12313](https://github.com/community-scripts/ProxmoxVE/pull/12313))
-    - Zammad: configure Elasticsearch before zammad start [@MickLesk](https://github.com/MickLesk) ([#12308](https://github.com/community-scripts/ProxmoxVE/pull/12308))
-
   - #### 🔧 Refactor
 
     - OpenProject: Various fixes [@tremor021](https://github.com/tremor021) ([#12246](https://github.com/community-scripts/ProxmoxVE/pull/12246))
@@ -519,18 +421,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
     - Fix detection of ssh keys [@1-tempest](https://github.com/1-tempest) ([#12230](https://github.com/community-scripts/ProxmoxVE/pull/12230))
 
-  - #### ✨ New Features
-
-    - tools.func: Improve GitHub/Codeberg API error handling and error output [@MickLesk](https://github.com/MickLesk) ([#12330](https://github.com/community-scripts/ProxmoxVE/pull/12330))
-
-  - #### 🔧 Refactor
-
-    - core: remove duplicate traps, consolidate error handling and harden signal traps [@MickLesk](https://github.com/MickLesk) ([#12316](https://github.com/community-scripts/ProxmoxVE/pull/12316))
-
-### 📂 Github
-
-  - github: improvements for node drift wf [@MickLesk](https://github.com/MickLesk) ([#12309](https://github.com/community-scripts/ProxmoxVE/pull/12309))
-
 ## 2026-02-24
 
 ### 🚀 Updated Scripts

ct/booklore.sh

@@ -34,7 +34,6 @@ function update_script() {
     NODE_VERSION="22" setup_nodejs
     setup_mariadb
     setup_yq
-    ensure_dependencies ffmpeg
 
     msg_info "Stopping Service"
     systemctl stop booklore
@@ -91,7 +90,7 @@ function update_script() {
       echo "SERVER_PORT=6060" >>/opt/booklore_storage/.env
     fi
 
-    sed -i 's|ExecStart=.*|ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -XX:MaxRAMPercentage=75.0 -XX:+ExitOnOutOfMemoryError -jar /opt/booklore/dist/app.jar|' /etc/systemd/system/booklore.service
+    sed -i 's|ExecStart=/usr/bin/java -jar|ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -jar|' /etc/systemd/system/booklore.service
     systemctl daemon-reload
 
     msg_info "Starting Service"

ct/dawarich.sh

@@ -29,8 +29,6 @@ function update_script() {
     exit
   fi
 
-  ensure_dependencies libgeos++-dev libxml2-dev libxslt-dev libjemalloc-dev
-
   if check_for_gh_release "dawarich" "Freika/dawarich"; then
     msg_info "Stopping Services"
     systemctl stop dawarich-web dawarich-worker

ct/gramps-web.sh

@@ -51,23 +51,11 @@ function update_script() {
     cd /opt/gramps-web-api
     GRAMPS_API_CONFIG=/opt/gramps-web/config/config.cfg \
       ALEMBIC_CONFIG=/opt/gramps-web-api/alembic.ini \
-      GRAMPSHOME=/opt/gramps-web/data \
+      GRAMPSHOME=/opt/gramps-web/data/gramps \
       GRAMPS_DATABASE_PATH=/opt/gramps-web/data/gramps/grampsdb \
       $STD /opt/gramps-web/venv/bin/python3 -m gramps_webapi user migrate
     msg_ok "Applied Database Migration"
 
-    msg_info "Updating Gramps Addons"
-    GRAMPS_VERSION=$(/opt/gramps-web/venv/bin/python3 -c "import gramps.version; print('%s%s' % (gramps.version.VERSION_TUPLE[0], gramps.version.VERSION_TUPLE[1]))" 2>/dev/null || echo "60")
-    GRAMPS_PLUGINS_DIR="/opt/gramps-web/data/gramps/gramps${GRAMPS_VERSION}/plugins"
-    mkdir -p "$GRAMPS_PLUGINS_DIR"
-    $STD wget -q https://github.com/gramps-project/addons/archive/refs/heads/master.zip -O /tmp/gramps-addons.zip
-    for addon in FilterRules JSON; do
-      unzip -p /tmp/gramps-addons.zip "addons-master/gramps${GRAMPS_VERSION}/download/${addon}.addon.tgz" |
-        tar -xz -C "$GRAMPS_PLUGINS_DIR"
-    done
-    rm -f /tmp/gramps-addons.zip
-    msg_ok "Updated Gramps Addons"
-
     msg_info "Starting Service"
     systemctl start gramps-web
     msg_ok "Started Service"

ct/headers/kima-hub

@@ -1,6 +0,0 @@
-    __ __ _                       __  __      __  
-   / //_/(_)___ ___  ____ _      / / / /_  __/ /_ 
-  / ,<  / / __ `__ \/ __ `/_____/ /_/ / / / / __ \
- / /| |/ / / / / / / /_/ /_____/ __  / /_/ / /_/ /
-/_/ |_/_/_/ /_/ /_/\__,_/     /_/ /_/\__,_/_.___/ 
-                                                  

ct/headers/palmr

@@ -0,0 +1,6 @@
+    ____        __              
+   / __ \____ _/ /___ ___  _____
+  / /_/ / __ `/ / __ `__ \/ ___/
+ / ____/ /_/ / / / / / / / /    
+/_/    \__,_/_/_/ /_/ /_/_/     
+                                

ct/headers/strapi

@@ -1,6 +0,0 @@
-   _____ __                   _ 
-  / ___// /__________ _____  (_)
-  \__ \/ __/ ___/ __ `/ __ \/ / 
- ___/ / /_/ /  / /_/ / /_/ / /  
-/____/\__/_/   \__,_/ .___/_/   
-                   /_/          

ct/headers/zerobyte

@@ -1,6 +0,0 @@
- _____                   __          __     
-/__  /  ___  _________  / /_  __  __/ /____ 
-  / /  / _ \/ ___/ __ \/ __ \/ / / / __/ _ \
- / /__/  __/ /  / /_/ / /_/ / /_/ / /_/  __/
-/____/\___/_/   \____/_.___/\__, /\__/\___/ 
-                           /____/           

ct/immich.sh

@@ -72,9 +72,9 @@ EOF
   SOURCE_DIR=${STAGING_DIR}/image-source
   cd /tmp
   if [[ -f ~/.intel_version ]]; then
-    curl -fsSLO https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/machine-learning/Dockerfile
+    curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
     readarray -t INTEL_URLS < <(
-      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $3}'
+      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
       sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
     )
     INTEL_RELEASE="$(grep "intel-opencl-icd_" ./Dockerfile | awk -F '_' '{print $2}')"
@@ -97,7 +97,7 @@ EOF
   if [[ -f ~/.immich_library_revisions ]]; then
     libraries=("libjxl" "libheif" "libraw" "imagemagick" "libvips")
     cd "$BASE_DIR"
-    msg_warn "Checking for updates to custom image-processing libraries (recompile time: 2-15min per library)"
+    msg_info "Checking for updates to custom image-processing libraries"
     $STD git pull
     for library in "${libraries[@]}"; do
       compile_"$library"
@@ -214,9 +214,9 @@ EOF
     export VIRTUAL_ENV="${ML_DIR}"/ml-venv
     if [[ -f ~/.openvino ]]; then
       msg_info "Updating HW-accelerated machine-learning"
-      $STD uv add --no-sync --optional openvino onnxruntime-openvino==1.24.1 --active -n -p python3.13 --managed-python
+      $STD uv add --no-sync --optional openvino onnxruntime-openvino==1.20.0 --active -n -p python3.12 --managed-python
-      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.13 --managed-python
+      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.12 --managed-python
-      patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-x86_64-linux-gnu.so"
+      patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.12/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-312-x86_64-linux-gnu.so"
       msg_ok "Updated HW-accelerated machine-learning"
     else
       msg_info "Updating machine-learning"

ct/iobroker.sh

@@ -6,7 +6,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Source: https://www.iobroker.net/#en/intro | Github: https://github.com/ioBroker/ioBroker.js-controller
 
 APP="ioBroker"
-var_tags="${var_tags:-automation}"
+var_tags="${var_tags:-automtation}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"

ct/kima-hub.sh

@@ -1,79 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Chevron7Locked/kima-hub
-
-APP="Kima-Hub"
-var_tags="${var_tags:-music;streaming;media}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/kima-hub ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "kima-hub" "Chevron7Locked/kima-hub"; then
-    msg_info "Stopping Services"
-    systemctl stop kima-frontend kima-backend kima-analyzer kima-analyzer-clap
-    msg_ok "Stopped Services"
-
-    msg_info "Backing up Data"
-    cp /opt/kima-hub/backend/.env /opt/kima-hub-backend-env.bak
-    cp /opt/kima-hub/frontend/.env /opt/kima-hub-frontend-env.bak
-    msg_ok "Backed up Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "kima-hub" "Chevron7Locked/kima-hub" "tarball"
-
-    msg_info "Restoring Data"
-    cp /opt/kima-hub-backend-env.bak /opt/kima-hub/backend/.env
-    cp /opt/kima-hub-frontend-env.bak /opt/kima-hub/frontend/.env
-    rm -f /opt/kima-hub-backend-env.bak /opt/kima-hub-frontend-env.bak
-    msg_ok "Restored Data"
-
-    msg_info "Rebuilding Backend"
-    cd /opt/kima-hub/backend
-    $STD npm install
-    $STD npm run build
-    $STD npx prisma generate
-    $STD npx prisma migrate deploy
-    msg_ok "Rebuilt Backend"
-
-    msg_info "Rebuilding Frontend"
-    cd /opt/kima-hub/frontend
-    $STD npm install
-    $STD npm run build
-    msg_ok "Rebuilt Frontend"
-
-    msg_info "Starting Services"
-    systemctl start kima-backend kima-frontend kima-analyzer kima-analyzer-clap
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3030${CL}"

ct/ombi.sh

@@ -36,7 +36,6 @@ function update_script() {
     [[ -f /opt/ombi/Ombi.db ]] && mv /opt/ombi/Ombi.db /opt
     [[ -f /opt/ombi/OmbiExternal.db ]] && mv /opt/ombi/OmbiExternal.db /opt
     [[ -f /opt/ombi/OmbiSettings.db ]] && mv /opt/ombi/OmbiSettings.db /opt
-    [[ -f /opt/ombi/database.json ]] && mv /opt/ombi/database.json /opt
     msg_ok "Backup created"
 
     rm -rf /opt/ombi
@@ -44,7 +43,6 @@ function update_script() {
     [[ -f /opt/Ombi.db ]] && mv /opt/Ombi.db /opt/ombi
     [[ -f /opt/OmbiExternal.db ]] && mv /opt/OmbiExternal.db /opt/ombi
     [[ -f /opt/OmbiSettings.db ]] && mv /opt/OmbiSettings.db /opt/ombi
-    [[ -f /opt/database.json ]] && mv /opt/database.json /opt/ombi
 
     msg_info "Starting Service"
     systemctl start ombi

ct/overseerr.sh

@@ -28,7 +28,7 @@ function update_script() {
     exit
   fi
 
-  if [[ -f "$HOME/.overseerr" ]] && [[ "$(printf '%s\n' "1.35.0" "$(cat "$HOME/.overseerr")" | sort -V | head -n1)" == "1.35.0" ]]; then
+  if [[ -f "$HOME/.overseerr" ]] && [[ "$(cat "$HOME/.overseerr")" == "1.34.0" ]]; then
     echo
     echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
     echo "Overseerr v1.34.0 detected."

ct/palmr.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/kyantech/Palmr
+
+APP="Palmr"
+var_tags="${var_tags:-files}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-6144}"
+var_disk="${var_disk:-6}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/palmr_data ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "palmr" "kyantech/Palmr"; then
+    msg_info "Stopping Services"
+    systemctl stop palmr-frontend palmr-backend
+    msg_ok "Stopped Services"
+
+    cp /opt/palmr/apps/server/.env /opt/palmr.env
+    rm -rf /opt/palmr
+    fetch_and_deploy_gh_release "Palmr" "kyantech/Palmr" "tarball" "latest" "/opt/palmr"
+
+    PNPM="$(jq -r '.packageManager' /opt/palmr/package.json)"
+    NODE_VERSION="24" NODE_MODULE="$PNPM" setup_nodejs
+
+    msg_info "Updating ${APP}"
+    cd /opt/palmr/apps/server
+    mv /opt/palmr.env /opt/palmr/apps/server/.env
+    $STD pnpm install
+    $STD npx prisma generate
+    $STD npx prisma migrate deploy
+    $STD npx prisma db push
+    $STD pnpm build
+
+    cd /opt/palmr/apps/web
+    export NODE_ENV=production
+    export NEXT_TELEMETRY_DISABLED=1
+    mv ./.env.example ./.env
+    $STD pnpm install
+    $STD pnpm build
+    chown -R palmr:palmr /opt/palmr_data /opt/palmr
+    msg_ok "Updated ${APP}"
+
+    msg_info "Starting Services"
+    systemctl start palmr-backend palmr-frontend
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/pangolin.sh

@@ -9,7 +9,7 @@ APP="Pangolin"
 var_tags="${var_tags:-proxy}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-10}"
+var_disk="${var_disk:-5}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
@@ -29,8 +29,6 @@ function update_script() {
     exit
   fi
 
-  ensure_dependencies build-essential python3
-
   NODE_VERSION="24" setup_nodejs
 
   if check_for_gh_release "pangolin" "fosrl/pangolin"; then

ct/strapi.sh

@@ -1,61 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: pespinel
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://strapi.io/
-
-APP="Strapi"
-var_tags="${var_tags:-cms}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/systemd/system/strapi.service ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  NODE_VERSION="24" setup_nodejs
-
-  msg_info "Stopping Strapi"
-  systemctl stop strapi
-  msg_ok "Stopped Strapi"
-
-  msg_info "Updating Strapi"
-  cd /opt/strapi
-  $STD npx @strapi/upgrade minor --yes
-  msg_ok "Updated Strapi"
-
-  msg_info "Building Strapi"
-  export NODE_OPTIONS="--max-old-space-size=3072"
-  $STD npm run build
-  msg_ok "Built Strapi"
-
-  msg_info "Starting Strapi"
-  systemctl start strapi
-  msg_ok "Started Strapi"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:1337${CL}"

ct/vikunja.sh

@@ -65,7 +65,6 @@ function update_script() {
     msg_ok "Stopped Service"
 
     fetch_and_deploy_gh_release "vikunja" "go-vikunja/vikunja" "binary"
-    $STD systemctl daemon-reload
 
     msg_info "Starting Service"
     systemctl start vikunja

ct/zerobyte.sh

@@ -1,71 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: community-scripts
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/nicotsx/zerobyte
-
-APP="Zerobyte"
-var_tags="${var_tags:-backup;encryption;restic}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-6144}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/zerobyte ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "zerobyte" "nicotsx/zerobyte"; then
-    msg_info "Stopping Service"
-    systemctl stop zerobyte
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration"
-    cp /opt/zerobyte/.env /opt/zerobyte.env.bak
-    msg_ok "Backed up Configuration"
-    
-    NODE_VERSION="24" setup_nodejs
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "zerobyte" "nicotsx/zerobyte" "tarball"
-
-    msg_info "Building Zerobyte"
-    export NODE_OPTIONS="--max-old-space-size=3072"
-    cd /opt/zerobyte
-    $STD bun install
-    $STD node ./node_modules/vite/bin/vite.js build
-    msg_ok "Built Zerobyte"
-
-    msg_info "Restoring Configuration"
-    cp /opt/zerobyte.env.bak /opt/zerobyte/.env
-    rm -f /opt/zerobyte.env.bak
-    msg_ok "Restored Configuration"
-
-    msg_info "Starting Service"
-    systemctl start zerobyte
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4096${CL}"

docs/contribution/README.md

@@ -175,7 +175,7 @@ All scripts and configurations must follow our coding standards to ensure consis
 ### Available Guides
 
 - **[CONTRIBUTING.md](CONTRIBUTING.md)** - Essential coding standards and best practices
-- **[CODE-AUDIT.md](CODE-AUDIT.md)** - Code review checklist and audit procedures
+- **[CODE_AUDIT.md](CODE_AUDIT.md)** - Code review checklist and audit procedures
 - **[GUIDE.md](GUIDE.md)** - Comprehensive contribution guide
 - **[HELPER_FUNCTIONS.md](HELPER_FUNCTIONS.md)** - Reference for all tools.func helper functions
 - **Container Scripts** - `/ct/` templates and guidelines

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-02-28T18:06:16Z",
+  "generated": "2026-02-25T06:25:10Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -18,9 +18,9 @@
     {
       "slug": "adguardhome-sync",
       "repo": "bakito/adguardhome-sync",
-      "version": "v0.9.0",
+      "version": "v0.8.2",
       "pinned": false,
-      "date": "2026-02-27T18:37:37Z"
+      "date": "2025-10-24T17:13:47Z"
     },
     {
       "slug": "adventurelog",
@@ -39,9 +39,9 @@
     {
       "slug": "ampache",
       "repo": "ampache/ampache",
-      "version": "7.9.1",
+      "version": "7.9.0",
       "pinned": false,
-      "date": "2026-02-25T08:52:58Z"
+      "date": "2026-02-19T07:01:25Z"
     },
     {
       "slug": "argus",
@@ -109,16 +109,16 @@
     {
       "slug": "bazarr",
       "repo": "morpheus65535/bazarr",
-      "version": "v1.5.6",
+      "version": "v1.5.5",
       "pinned": false,
-      "date": "2026-02-26T11:33:11Z"
+      "date": "2026-02-01T18:00:34Z"
     },
     {
       "slug": "bentopdf",
       "repo": "alam00000/bentopdf",
-      "version": "v2.3.3",
+      "version": "v2.3.1",
       "pinned": false,
-      "date": "2026-02-27T08:40:05Z"
+      "date": "2026-02-21T09:04:27Z"
     },
     {
       "slug": "beszel",
@@ -144,23 +144,23 @@
     {
       "slug": "blocky",
       "repo": "0xERR0R/blocky",
-      "version": "v0.29.0",
+      "version": "v0.28.2",
       "pinned": false,
-      "date": "2026-02-27T15:48:56Z"
+      "date": "2025-11-18T05:51:46Z"
     },
     {
       "slug": "booklore",
       "repo": "booklore-app/BookLore",
-      "version": "v2.0.4",
+      "version": "v2.0.1",
       "pinned": false,
-      "date": "2026-02-28T01:54:25Z"
+      "date": "2026-02-24T04:15:33Z"
     },
     {
       "slug": "bookstack",
       "repo": "BookStackApp/BookStack",
-      "version": "v25.12.8",
+      "version": "v25.12.7",
       "pinned": false,
-      "date": "2026-02-27T10:33:14Z"
+      "date": "2026-02-19T23:36:55Z"
     },
     {
       "slug": "byparr",
@@ -200,9 +200,9 @@
     {
       "slug": "cleanuparr",
       "repo": "Cleanuparr/Cleanuparr",
-      "version": "v2.7.6",
+      "version": "v2.7.5",
       "pinned": false,
-      "date": "2026-02-27T19:32:02Z"
+      "date": "2026-02-24T17:11:50Z"
     },
     {
       "slug": "cloudreve",
@@ -214,9 +214,9 @@
     {
       "slug": "comfyui",
       "repo": "comfyanonymous/ComfyUI",
-      "version": "v0.15.1",
+      "version": "v0.15.0",
       "pinned": false,
-      "date": "2026-02-26T22:01:35Z"
+      "date": "2026-02-24T20:56:09Z"
     },
     {
       "slug": "commafeed",
@@ -242,9 +242,9 @@
     {
       "slug": "cosmos",
       "repo": "azukaar/Cosmos-Server",
-      "version": "v0.21.5",
+      "version": "v0.20.2",
       "pinned": false,
-      "date": "2026-02-27T10:07:11Z"
+      "date": "2026-01-24T00:12:39Z"
     },
     {
       "slug": "cronicle",
@@ -270,16 +270,16 @@
     {
       "slug": "databasus",
       "repo": "databasus/databasus",
-      "version": "v3.16.3",
+      "version": "v3.16.2",
       "pinned": false,
-      "date": "2026-02-25T19:57:26Z"
+      "date": "2026-02-22T21:10:12Z"
     },
     {
       "slug": "dawarich",
       "repo": "Freika/dawarich",
-      "version": "1.3.1",
+      "version": "1.2.0",
       "pinned": false,
-      "date": "2026-02-27T19:47:40Z"
+      "date": "2026-02-15T22:33:56Z"
     },
     {
       "slug": "discopanel",
@@ -291,9 +291,9 @@
     {
       "slug": "dispatcharr",
       "repo": "Dispatcharr/Dispatcharr",
-      "version": "v0.20.1",
+      "version": "v0.19.0",
       "pinned": false,
-      "date": "2026-02-26T21:38:19Z"
+      "date": "2026-02-10T21:18:10Z"
     },
     {
       "slug": "docmost",
@@ -361,9 +361,9 @@
     {
       "slug": "endurain",
       "repo": "endurain-project/endurain",
-      "version": "v0.17.6",
+      "version": "v0.17.5",
       "pinned": false,
-      "date": "2026-02-27T23:08:50Z"
+      "date": "2026-02-24T14:51:03Z"
     },
     {
       "slug": "ersatztv",
@@ -382,9 +382,9 @@
     {
       "slug": "firefly",
       "repo": "firefly-iii/firefly-iii",
-      "version": "v6.5.1",
+      "version": "v6.5.0",
       "pinned": false,
-      "date": "2026-02-27T20:55:55Z"
+      "date": "2026-02-23T19:19:00Z"
     },
     {
       "slug": "fladder",
@@ -438,9 +438,9 @@
     {
       "slug": "ghostfolio",
       "repo": "ghostfolio/ghostfolio",
-      "version": "2.244.0",
+      "version": "2.243.0",
       "pinned": false,
-      "date": "2026-02-28T09:51:45Z"
+      "date": "2026-02-23T19:31:36Z"
     },
     {
       "slug": "gitea",
@@ -452,9 +452,9 @@
     {
       "slug": "gitea-mirror",
       "repo": "RayLabsHQ/gitea-mirror",
-      "version": "v3.9.6",
+      "version": "v3.9.4",
       "pinned": false,
-      "date": "2026-02-27T07:15:42Z"
+      "date": "2026-02-24T06:17:56Z"
     },
     {
       "slug": "glance",
@@ -494,9 +494,9 @@
     {
       "slug": "grist",
       "repo": "gristlabs/grist-core",
-      "version": "v1.7.11",
+      "version": "v1.7.10",
       "pinned": false,
-      "date": "2026-02-27T17:13:50Z"
+      "date": "2026-01-12T20:50:50Z"
     },
     {
       "slug": "grocy",
@@ -550,9 +550,9 @@
     {
       "slug": "homarr",
       "repo": "homarr-labs/homarr",
-      "version": "v1.54.0",
+      "version": "v1.53.2",
       "pinned": false,
-      "date": "2026-02-27T19:38:50Z"
+      "date": "2026-02-20T19:41:55Z"
     },
     {
       "slug": "homebox",
@@ -606,16 +606,16 @@
     {
       "slug": "invoiceninja",
       "repo": "invoiceninja/invoiceninja",
-      "version": "v5.12.69",
+      "version": "v5.12.66",
       "pinned": false,
-      "date": "2026-02-26T22:23:32Z"
+      "date": "2026-02-24T09:12:50Z"
     },
     {
       "slug": "jackett",
       "repo": "Jackett/Jackett",
-      "version": "v0.24.1226",
+      "version": "v0.24.1205",
       "pinned": false,
-      "date": "2026-02-28T05:58:51Z"
+      "date": "2026-02-25T05:49:14Z"
     },
     {
       "slug": "jellystat",
@@ -627,9 +627,9 @@
     {
       "slug": "joplin-server",
       "repo": "laurent22/joplin",
-      "version": "v3.5.13",
+      "version": "v3.5.12",
       "pinned": false,
-      "date": "2026-02-25T21:19:11Z"
+      "date": "2026-01-17T14:20:33Z"
     },
     {
       "slug": "jotty",
@@ -666,19 +666,12 @@
       "pinned": false,
       "date": "2026-02-20T09:19:45Z"
     },
-    {
-      "slug": "kima-hub",
-      "repo": "Chevron7Locked/kima-hub",
-      "version": "v1.5.10",
-      "pinned": false,
-      "date": "2026-02-27T19:25:56Z"
-    },
     {
       "slug": "kimai",
       "repo": "kimai/kimai",
-      "version": "2.50.0",
+      "version": "2.49.0",
       "pinned": false,
-      "date": "2026-02-25T20:13:51Z"
+      "date": "2026-02-15T20:40:19Z"
     },
     {
       "slug": "kitchenowl",
@@ -718,9 +711,9 @@
     {
       "slug": "kubo",
       "repo": "ipfs/kubo",
-      "version": "v0.40.1",
+      "version": "v0.39.0",
       "pinned": false,
-      "date": "2026-02-27T17:58:22Z"
+      "date": "2025-11-27T03:47:38Z"
     },
     {
       "slug": "kutt",
@@ -795,9 +788,9 @@
     {
       "slug": "lubelogger",
       "repo": "hargata/lubelog",
-      "version": "v1.6.1",
+      "version": "v1.6.0",
       "pinned": false,
-      "date": "2026-02-26T20:01:24Z"
+      "date": "2026-02-10T20:16:32Z"
     },
     {
       "slug": "mafl",
@@ -816,9 +809,9 @@
     {
       "slug": "mail-archiver",
       "repo": "s1t5/mail-archiver",
-      "version": "2602.4",
+      "version": "2602.3",
       "pinned": false,
-      "date": "2026-02-26T08:43:01Z"
+      "date": "2026-02-22T20:24:18Z"
     },
     {
       "slug": "managemydamnlife",
@@ -830,9 +823,9 @@
     {
       "slug": "manyfold",
       "repo": "manyfold3d/manyfold",
-      "version": "v0.133.1",
+      "version": "v0.132.1",
       "pinned": false,
-      "date": "2026-02-26T15:50:34Z"
+      "date": "2026-02-09T22:02:28Z"
     },
     {
       "slug": "mealie",
@@ -872,9 +865,9 @@
     {
       "slug": "metube",
       "repo": "alexta69/metube",
-      "version": "2026.02.27",
+      "version": "2026.02.22",
       "pinned": false,
-      "date": "2026-02-27T11:47:02Z"
+      "date": "2026-02-22T00:58:45Z"
     },
     {
       "slug": "miniflux",
@@ -942,9 +935,9 @@
     {
       "slug": "nightscout",
       "repo": "nightscout/cgm-remote-monitor",
-      "version": "15.0.4",
+      "version": "15.0.3",
       "pinned": false,
-      "date": "2026-02-28T17:07:02Z"
+      "date": "2025-05-08T22:12:34Z"
     },
     {
       "slug": "nocodb",
@@ -956,9 +949,9 @@
     {
       "slug": "nodebb",
       "repo": "NodeBB/NodeBB",
-      "version": "v4.9.0",
+      "version": "v4.8.1",
       "pinned": false,
-      "date": "2026-02-27T19:20:51Z"
+      "date": "2026-01-28T14:19:11Z"
     },
     {
       "slug": "nodecast-tv",
@@ -970,9 +963,9 @@
     {
       "slug": "oauth2-proxy",
       "repo": "oauth2-proxy/oauth2-proxy",
-      "version": "v7.14.3",
+      "version": "v7.14.2",
       "pinned": false,
-      "date": "2026-02-26T14:10:21Z"
+      "date": "2026-01-18T00:26:09Z"
     },
     {
       "slug": "ombi",
@@ -1002,13 +995,6 @@
       "pinned": false,
       "date": "2026-02-03T09:00:43Z"
     },
-    {
-      "slug": "openproject",
-      "repo": "jemalloc/jemalloc",
-      "version": "5.3.0",
-      "pinned": false,
-      "date": "2022-05-06T19:14:21Z"
-    },
     {
       "slug": "ots",
       "repo": "Luzifer/ots",
@@ -1037,12 +1023,19 @@
       "pinned": false,
       "date": "2025-02-24T19:47:06Z"
     },
+    {
+      "slug": "palmr",
+      "repo": "kyantech/Palmr",
+      "version": "v3.3.2-beta",
+      "pinned": false,
+      "date": "2025-12-10T05:42:43Z"
+    },
     {
       "slug": "pangolin",
       "repo": "fosrl/pangolin",
-      "version": "1.16.1",
+      "version": "1.15.4",
       "pinned": false,
-      "date": "2026-02-27T21:18:53Z"
+      "date": "2026-02-13T23:01:29Z"
     },
     {
       "slug": "paperless-ai",
@@ -1054,16 +1047,16 @@
     {
       "slug": "paperless-gpt",
       "repo": "icereed/paperless-gpt",
-      "version": "v0.25.1",
+      "version": "v0.25.0",
       "pinned": false,
-      "date": "2026-02-26T14:50:11Z"
+      "date": "2026-02-16T08:31:48Z"
     },
     {
       "slug": "paperless-ngx",
       "repo": "paperless-ngx/paperless-ngx",
-      "version": "v2.20.9",
+      "version": "v2.20.8",
       "pinned": false,
-      "date": "2026-02-28T10:17:35Z"
+      "date": "2026-02-22T01:40:54Z"
     },
     {
       "slug": "patchmon",
@@ -1166,9 +1159,9 @@
     {
       "slug": "prometheus",
       "repo": "prometheus/prometheus",
-      "version": "v3.10.0",
+      "version": "v3.9.1",
       "pinned": false,
-      "date": "2026-02-26T01:19:51Z"
+      "date": "2026-01-07T17:05:53Z"
     },
     {
       "slug": "prometheus-alertmanager",
@@ -1215,9 +1208,9 @@
     {
       "slug": "pulse",
       "repo": "rcourtman/Pulse",
-      "version": "v5.1.15",
+      "version": "v5.1.14",
       "pinned": false,
-      "date": "2026-02-27T15:17:24Z"
+      "date": "2026-02-25T00:11:58Z"
     },
     {
       "slug": "pve-scripts-local",
@@ -1264,9 +1257,9 @@
     {
       "slug": "radicale",
       "repo": "Kozea/Radicale",
-      "version": "v3.6.1",
+      "version": "v3.6.0",
       "pinned": false,
-      "date": "2026-02-24T06:36:23Z"
+      "date": "2026-01-10T06:56:46Z"
     },
     {
       "slug": "rclone",
@@ -1292,9 +1285,9 @@
     {
       "slug": "recyclarr",
       "repo": "recyclarr/recyclarr",
-      "version": "v8.3.2",
+      "version": "v8.3.1",
       "pinned": false,
-      "date": "2026-02-25T22:39:51Z"
+      "date": "2026-02-25T01:01:31Z"
     },
     {
       "slug": "reitti",
@@ -1341,9 +1334,9 @@
     {
       "slug": "scanopy",
       "repo": "scanopy/scanopy",
-      "version": "v0.14.9",
+      "version": "v0.14.8",
       "pinned": false,
-      "date": "2026-02-28T02:59:32Z"
+      "date": "2026-02-24T16:45:30Z"
     },
     {
       "slug": "scraparr",
@@ -1369,16 +1362,16 @@
     {
       "slug": "seerr",
       "repo": "seerr-team/seerr",
-      "version": "v3.1.0",
+      "version": "v3.0.1",
       "pinned": false,
-      "date": "2026-02-27T17:25:29Z"
+      "date": "2026-02-14T19:30:24Z"
     },
     {
       "slug": "semaphore",
       "repo": "semaphoreui/semaphore",
-      "version": "v2.17.15",
+      "version": "v2.17.14",
       "pinned": false,
-      "date": "2026-02-28T09:04:40Z"
+      "date": "2026-02-24T14:27:03Z"
     },
     {
       "slug": "shelfmark",
@@ -1390,9 +1383,9 @@
     {
       "slug": "signoz",
       "repo": "SigNoz/signoz-otel-collector",
-      "version": "v0.144.2",
+      "version": "v0.144.1",
       "pinned": false,
-      "date": "2026-02-26T05:57:26Z"
+      "date": "2026-02-25T05:57:17Z"
     },
     {
       "slug": "silverbullet",
@@ -1481,9 +1474,9 @@
     {
       "slug": "sure",
       "repo": "we-promise/sure",
-      "version": "v0.6.8",
+      "version": "chart-v0.6.8-alpha.13",
       "pinned": false,
-      "date": "2026-02-28T12:55:36Z"
+      "date": "2026-02-20T11:15:15Z"
     },
     {
       "slug": "tandoor",
@@ -1551,9 +1544,9 @@
     {
       "slug": "traccar",
       "repo": "traccar/traccar",
-      "version": "v6.12.2",
+      "version": "v6.12.1",
       "pinned": false,
-      "date": "2026-02-27T15:08:36Z"
+      "date": "2026-02-22T18:47:37Z"
     },
     {
       "slug": "tracearr",
@@ -1600,9 +1593,9 @@
     {
       "slug": "tunarr",
       "repo": "chrisbenincasa/tunarr",
-      "version": "v1.1.18",
+      "version": "v1.1.16",
       "pinned": false,
-      "date": "2026-02-26T22:09:44Z"
+      "date": "2026-02-23T21:24:47Z"
     },
     {
       "slug": "uhf",
@@ -1663,9 +1656,9 @@
     {
       "slug": "vikunja",
       "repo": "go-vikunja/vikunja",
-      "version": "v2.1.0",
+      "version": "v1.1.0",
       "pinned": false,
-      "date": "2026-02-27T14:26:53Z"
+      "date": "2026-02-09T10:34:29Z"
     },
     {
       "slug": "wallabag",
@@ -1779,13 +1772,6 @@
       "pinned": false,
       "date": "2026-02-24T15:15:46Z"
     },
-    {
-      "slug": "zerobyte",
-      "repo": "restic/restic",
-      "version": "v0.18.1",
-      "pinned": false,
-      "date": "2025-09-21T18:24:38Z"
-    },
     {
       "slug": "zigbee2mqtt",
       "repo": "Koenkk/zigbee2mqtt",
@@ -1810,9 +1796,9 @@
     {
       "slug": "zoraxy",
       "repo": "tobychui/zoraxy",
-      "version": "v3.3.2-rc2",
+      "version": "v3.3.2-rc1",
       "pinned": false,
-      "date": "2026-02-27T03:31:25Z"
+      "date": "2026-02-15T02:16:17Z"
     },
     {
       "slug": "zwave-js-ui",

frontend/public/json/immich.json

@@ -51,10 +51,6 @@
     {
       "text": "Logs: `/var/log/immich`",
       "type": "info"
-    },
-    {
-      "text": "During first install, 5 custom libraries need to be compiled from source. Depending on your CPU, this can take anywhere between 15 minutes and 2 hours. Please be patient. Touch grass or something.",
-      "type": "warning"
     }
   ]
 }

frontend/public/json/kima-hub.json

@@ -1,48 +0,0 @@
-{
-  "name": "Kima-Hub",
-  "slug": "kima-hub",
-  "categories": [
-    13
-  ],
-  "date_created": "2026-02-26",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 3030,
-  "documentation": "https://github.com/Chevron7Locked/kima-hub#readme",
-  "website": "https://github.com/Chevron7Locked/kima-hub",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kima-hub.webp",
-  "config_path": "/opt/kima-hub/backend/.env",
-  "description": "Self-hosted, on-demand audio streaming platform with AI-powered vibe matching, mood detection, smart playlists, and Lidarr/Audiobookshelf integration.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/kima-hub.sh",
-      "resources": {
-        "cpu": 4,
-        "ram": 8192,
-        "hdd": 20,
-        "os": "Debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "First user to register becomes the administrator.",
-      "type": "info"
-    },
-    {
-      "text": "Mount your music library to /music in the container.",
-      "type": "warning"
-    },
-    {
-      "text": "Audio analysis (mood/vibe detection) requires significant RAM (2-4GB per worker).",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/palmr.json

@@ -0,0 +1,45 @@
+{
+  "name": "Palmr",
+  "slug": "palmr",
+  "categories": [
+    11
+  ],
+  "date_created": "2025-08-08",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "disable": true,
+  "documentation": "https://palmr.kyantech.com.br/docs/3.1-beta",
+  "config_path": "/opt/palmr/apps/server/.env, /opt/palmr/apps/web/.env",
+  "website": "https://palmr.kyantech.com.br/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/palmr.webp",
+  "description": "Palmr is a fast and secure platform for sharing files, built with performance and privacy in mind.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/palmr.sh",
+      "resources": {
+        "cpu": 4,
+        "ram": 6144,
+        "hdd": 6,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "To use a bind mount for storage, create symlinks to your mount for both `uploads` and `temp-uploads` in `/opt/palmr_data`, and uncomment `CUSTOM_PATH` to add the path to your bind mount",
+      "type": "info"
+    },
+    {
+      "text": "To use Palmr with a reverse proxy, uncomment `SECURE_SITE` in `/opt/palmr/apps/server/.env`",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/pangolin.json

@@ -21,7 +21,7 @@
       "resources": {
         "cpu": 2,
         "ram": 4096,
-        "hdd": 10,
+        "hdd": 5,
         "os": "Debian",
         "version": "13"
       }

frontend/public/json/strapi.json

@@ -1,48 +0,0 @@
-{
-  "name": "Strapi",
-  "slug": "strapi",
-  "categories": [
-    12
-  ],
-  "date_created": "2026-02-27",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 1337,
-  "documentation": "https://docs.strapi.io/",
-  "website": "https://strapi.io/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/strapi.webp",
-  "config_path": "/opt/strapi/.env",
-  "description": "Strapi is a leading open-source headless CMS that enables developers to build powerful APIs quickly. It features a flexible content structure with customizable content types, supporting both REST and GraphQL APIs. The intuitive admin panel allows non-technical users to manage content easily, while developers can extend functionality through plugins. Built on Node.js, Strapi offers role-based access control, media library management, and internationalization support out of the box.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/strapi.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 4096,
-        "hdd": 8,
-        "os": "debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "First-time setup requires creating an admin account at http://IP:1337/admin",
-      "type": "info"
-    },
-    {
-      "text": "Default installation uses SQLite. For production use, consider configuring PostgreSQL or MySQL.",
-      "type": "info"
-    },
-    {
-      "text": "Building the admin panel requires 4GB RAM. Container may take 10-15 minutes to fully initialize.",
-      "type": "warning"
-    }
-  ]
-}

frontend/public/json/zerobyte.json

@@ -1,40 +0,0 @@
-{
-    "name": "Zerobyte",
-    "slug": "zerobyte",
-    "categories": [
-        7
-    ],
-    "date_created": "2026-02-25",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 4096,
-    "documentation": "https://github.com/nicotsx/zerobyte#readme",
-    "website": "https://github.com/nicotsx/zerobyte",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/zerobyte.webp",
-    "config_path": "/opt/zerobyte/.env",
-    "description": "Zerobyte is a backup automation tool built on top of Restic that provides a modern web interface to schedule, manage, and monitor encrypted backups across multiple storage backends including NFS, SMB, WebDAV, SFTP, S3, and local directories.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/zerobyte.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 6144,
-                "hdd": 10,
-                "os": "Debian",
-                "version": "13"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "For remote mount support (NFS, SMB, WebDAV, SFTP), enable FUSE device passthrough on the LXC container. (FUSE is pre-configured)",
-            "type": "info"
-        }
-    ]
-}

install/booklore-install.sh

@@ -13,10 +13,6 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt install -y ffmpeg
-msg_ok "Installed Dependencies"
-
 JAVA_VERSION="25" setup_java
 NODE_VERSION="22" setup_nodejs
 setup_mariadb
@@ -74,7 +70,7 @@ After=network.target mariadb.service
 Type=simple
 User=root
 WorkingDirectory=/opt/booklore/dist
-ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -XX:MaxRAMPercentage=75.0 -XX:+ExitOnOutOfMemoryError -jar /opt/booklore/dist/app.jar
+ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -jar /opt/booklore/dist/app.jar
 EnvironmentFile=/opt/booklore_storage/.env
 SuccessExitStatus=143
 TimeoutStopSec=10

install/dawarich-install.sh

@@ -16,23 +16,19 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   build-essential \
-  cmake \
   git \
-  imagemagick \
-  libffi-dev \
-  libgeos-dev \
-  libgeos++-dev \
-  libjemalloc2 \
-  libjemalloc-dev \
-  libmagickwand-dev \
   libpq-dev \
-  libssl-dev \
+  libgeos-dev \
-  libvips-dev \
-  libxml2-dev \
-  libxslt-dev \
   libyaml-dev \
-  nginx \
+  libffi-dev \
-  redis-server
+  libssl-dev \
+  libjemalloc2 \
+  imagemagick \
+  libmagickwand-dev \
+  libvips-dev \
+  cmake \
+  redis-server \
+  nginx
 msg_ok "Installed Dependencies"
 
 PG_VERSION="17" PG_MODULES="postgis-3" setup_postgresql
@@ -86,9 +82,7 @@ elif [[ -f /opt/dawarich/app/package.json ]]; then
   $STD npm install
 fi
 $STD bundle exec rake assets:precompile
-$STD bundle exec rails db:create
+$STD bundle exec rails db:prepare
-$STD bundle exec rails db:schema:load
-$STD bundle exec rails db:seed || msg_warn "Database seed failed (upstream rgeo-geojson issue), app will still work"
 $STD bundle exec rake data:migrate
 msg_ok "Installed Dawarich"
 

install/gramps-web-install.sh

@@ -76,20 +76,6 @@ source /opt/gramps-web/venv/bin/activate
 $STD uv pip install --no-cache-dir --upgrade pip setuptools wheel
 $STD uv pip install --no-cache-dir gunicorn
 $STD uv pip install --no-cache-dir /opt/gramps-web-api
-
-GRAMPS_VERSION=$(/opt/gramps-web/venv/bin/python3 -c "import gramps.version; print('%s%s' % (gramps.version.VERSION_TUPLE[0], gramps.version.VERSION_TUPLE[1]))" 2>/dev/null || echo "60")
-GRAMPS_PLUGINS_DIR="/opt/gramps-web/data/gramps/gramps${GRAMPS_VERSION}/plugins"
-mkdir -p "$GRAMPS_PLUGINS_DIR"
-
-msg_info "Installing Gramps Addons (gramps${GRAMPS_VERSION})"
-$STD wget -q https://github.com/gramps-project/addons/archive/refs/heads/master.zip -O /tmp/gramps-addons.zip
-for addon in FilterRules JSON; do
-  unzip -p /tmp/gramps-addons.zip "addons-master/gramps${GRAMPS_VERSION}/download/${addon}.addon.tgz" | \
-    tar -xz -C "$GRAMPS_PLUGINS_DIR"
-done
-rm -f /tmp/gramps-addons.zip
-msg_ok "Installed Gramps Addons"
-
 cd /opt/gramps-web/frontend
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 $STD corepack enable
@@ -98,7 +84,7 @@ $STD npm run build
 cd /opt/gramps-web-api
 GRAMPS_API_CONFIG=/opt/gramps-web/config/config.cfg \
   ALEMBIC_CONFIG=/opt/gramps-web-api/alembic.ini \
-  GRAMPSHOME=/opt/gramps-web/data \
+  GRAMPSHOME=/opt/gramps-web/data/gramps \
   GRAMPS_DATABASE_PATH=/opt/gramps-web/data/gramps/grampsdb \
   $STD /opt/gramps-web/venv/bin/python3 -m gramps_webapi user migrate
 msg_ok "Set up Gramps Web"
@@ -114,7 +100,7 @@ Type=simple
 User=root
 WorkingDirectory=/opt/gramps-web-api
 Environment=GRAMPS_API_CONFIG=/opt/gramps-web/config/config.cfg
-Environment=GRAMPSHOME=/opt/gramps-web/data
+Environment=GRAMPSHOME=/opt/gramps-web/data/gramps
 Environment=GRAMPS_DATABASE_PATH=/opt/gramps-web/data/gramps/grampsdb
 Environment=PATH=/opt/gramps-web/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 ExecStart=/opt/gramps-web/venv/bin/gunicorn -w 2 -b 0.0.0.0:5000 gramps_webapi.wsgi:app --timeout 120 --limit-request-line 8190

install/immich-install.sh

@@ -32,9 +32,9 @@ if [ -d /dev/dri ]; then
     $STD apt install -y --no-install-recommends patchelf
     tmp_dir=$(mktemp -d)
     $STD pushd "$tmp_dir"
-    curl -fsSLO https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/machine-learning/Dockerfile
+    curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
     readarray -t INTEL_URLS < <(
-      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $3}'
+      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
       sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
     )
     for url in "${INTEL_URLS[@]}"; do
@@ -150,11 +150,11 @@ PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 VCHORD_RELEASE="0.5.3"
 fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-16-vchord_*_amd64.deb"
 
-sed -i "s/^#shared_preload.*/shared_preload_libraries = 'vchord.so'/" /etc/postgresql/16/main/postgresql.conf
+sed -i -e "/^#shared_preload/s/^#//;/^shared_preload/s/''/'vchord.so'/" /etc/postgresql/16/main/postgresql.conf
 systemctl restart postgresql.service
 PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_GRANT_SUPERUSER="true" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
 
-msg_warn "Compiling Custom Photo-processing Libraries (can take anywhere from 15min to 2h)"
+msg_info "Compiling Custom Photo-processing Library (extreme patience)"
 LD_LIBRARY_PATH=/usr/local/lib
 export LD_RUN_PATH=/usr/local/lib
 STAGING_DIR=/opt/staging
@@ -342,9 +342,9 @@ mkdir -p "$ML_DIR" && chown -R immich:immich "$INSTALL_DIR"
 export VIRTUAL_ENV="${ML_DIR}/ml-venv"
 if [[ -f ~/.openvino ]]; then
   msg_info "Installing HW-accelerated machine-learning"
-  $STD uv add --no-sync --optional openvino onnxruntime-openvino==1.24.1 --active -n -p python3.13 --managed-python
+  $STD uv add --no-sync --optional openvino onnxruntime-openvino==1.20.0 --active -n -p python3.12 --managed-python
-  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.13 --managed-python
+  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.12 --managed-python
-  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-x86_64-linux-gnu.so"
+  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.12/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-312-x86_64-linux-gnu.so"
   msg_ok "Installed HW-accelerated machine-learning"
 else
   msg_info "Installing machine-learning"

install/kima-hub-install.sh

@@ -1,212 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Chevron7Locked/kima-hub
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  build-essential \
-  git \
-  openssl \
-  ffmpeg \
-  python3 \
-  python3-pip \
-  python3-dev \
-  python3-numpy \
-  redis-server
-msg_ok "Installed Dependencies"
-
-PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
-PG_DB_NAME="kima" PG_DB_USER="kima" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
-NODE_VERSION="20" setup_nodejs
-
-msg_info "Configuring Redis"
-systemctl enable -q --now redis-server
-msg_ok "Configured Redis"
-
-fetch_and_deploy_gh_release "kima-hub" "Chevron7Locked/kima-hub" "tarball"
-
-msg_info "Installing Python Dependencies"
-export PIP_BREAK_SYSTEM_PACKAGES=1
-$STD pip3 install --no-cache-dir \
-  tensorflow \
-  essentia-tensorflow \
-  redis \
-  psycopg2-binary \
-  laion-clap \
-  torch \
-  torchaudio \
-  librosa \
-  transformers \
-  pgvector \
-  python-dotenv \
-  requests
-msg_ok "Installed Python Dependencies"
-
-msg_info "Downloading Essentia ML Models"
-mkdir -p /opt/kima-hub/models
-cd /opt/kima-hub/models
-curl -fsSL -o msd-musicnn-1.pb "https://essentia.upf.edu/models/autotagging/msd/msd-musicnn-1.pb"
-curl -fsSL -o mood_happy-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_happy/mood_happy-msd-musicnn-1.pb"
-curl -fsSL -o mood_sad-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_sad/mood_sad-msd-musicnn-1.pb"
-curl -fsSL -o mood_relaxed-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_relaxed/mood_relaxed-msd-musicnn-1.pb"
-curl -fsSL -o mood_aggressive-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_aggressive/mood_aggressive-msd-musicnn-1.pb"
-curl -fsSL -o mood_party-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_party/mood_party-msd-musicnn-1.pb"
-curl -fsSL -o mood_acoustic-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_acoustic/mood_acoustic-msd-musicnn-1.pb"
-curl -fsSL -o mood_electronic-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/mood_electronic/mood_electronic-msd-musicnn-1.pb"
-curl -fsSL -o danceability-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/danceability/danceability-msd-musicnn-1.pb"
-curl -fsSL -o voice_instrumental-msd-musicnn-1.pb "https://essentia.upf.edu/models/classification-heads/voice_instrumental/voice_instrumental-msd-musicnn-1.pb"
-msg_ok "Downloaded Essentia ML Models"
-
-msg_info "Downloading CLAP Model"
-curl -fsSL -o /opt/kima-hub/models/music_audioset_epoch_15_esc_90.14.pt "https://huggingface.co/lukewys/laion_clap/resolve/main/music_audioset_epoch_15_esc_90.14.pt"
-msg_ok "Downloaded CLAP Model"
-
-msg_info "Building Backend"
-cd /opt/kima-hub/backend
-$STD npm ci
-$STD npm run build
-msg_ok "Built Backend"
-
-msg_info "Configuring Backend"
-SESSION_SECRET=$(openssl rand -hex 32)
-ENCRYPTION_KEY=$(openssl rand -hex 32)
-cat <<EOF >/opt/kima-hub/backend/.env
-NODE_ENV=production
-DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}
-REDIS_URL=redis://localhost:6379
-PORT=3006
-MUSIC_PATH=/music
-TRANSCODE_CACHE_PATH=/opt/kima-hub/cache/transcodes
-SESSION_SECRET=${SESSION_SECRET}
-SETTINGS_ENCRYPTION_KEY=${ENCRYPTION_KEY}
-INTERNAL_API_SECRET=$(openssl rand -hex 16)
-EOF
-msg_ok "Configured Backend"
-
-msg_info "Running Database Migrations"
-cd /opt/kima-hub/backend
-$STD npx prisma generate
-$STD npx prisma migrate deploy
-msg_ok "Ran Database Migrations"
-
-msg_info "Building Frontend"
-cd /opt/kima-hub/frontend
-$STD npm ci
-export NEXT_PUBLIC_BACKEND_URL=http://127.0.0.1:3006
-$STD npm run build
-msg_ok "Built Frontend"
-
-msg_info "Configuring Frontend"
-cat <<EOF >/opt/kima-hub/frontend/.env
-NODE_ENV=production
-BACKEND_URL=http://localhost:3006
-PORT=3030
-EOF
-msg_ok "Configured Frontend"
-
-msg_info "Creating Directories"
-mkdir -p /opt/kima-hub/cache/transcodes
-mkdir -p /music
-msg_ok "Created Directories"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/kima-backend.service
-[Unit]
-Description=Kima Hub Backend
-After=network.target postgresql.service redis-server.service
-Wants=postgresql.service redis-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/kima-hub/backend
-EnvironmentFile=/opt/kima-hub/backend/.env
-ExecStart=/usr/bin/node /opt/kima-hub/backend/dist/index.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/kima-frontend.service
-[Unit]
-Description=Kima Hub Frontend
-After=network.target kima-backend.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/kima-hub/frontend
-EnvironmentFile=/opt/kima-hub/frontend/.env
-ExecStart=/usr/bin/npm start
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/kima-analyzer.service
-[Unit]
-Description=Kima Hub Audio Analyzer (Essentia)
-After=network.target postgresql.service redis-server.service kima-backend.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/kima-hub/services/audio-analyzer
-Environment=DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}
-Environment=REDIS_URL=redis://localhost:6379
-Environment=MUSIC_PATH=/music
-Environment=BATCH_SIZE=10
-Environment=SLEEP_INTERVAL=5
-Environment=NUM_WORKERS=2
-Environment=THREADS_PER_WORKER=1
-ExecStart=/usr/bin/python3 /opt/kima-hub/services/audio-analyzer/analyzer.py
-Restart=on-failure
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/kima-analyzer-clap.service
-[Unit]
-Description=Kima Hub CLAP Audio Analyzer
-After=network.target postgresql.service redis-server.service kima-backend.service kima-analyzer.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/kima-hub/services/audio-analyzer-clap
-Environment=DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}
-Environment=REDIS_URL=redis://localhost:6379
-Environment=BACKEND_URL=http://localhost:3006
-Environment=MUSIC_PATH=/music
-Environment=SLEEP_INTERVAL=5
-Environment=NUM_WORKERS=1
-ExecStart=/usr/bin/python3 /opt/kima-hub/services/audio-analyzer-clap/analyzer.py
-Restart=on-failure
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now kima-backend kima-frontend kima-analyzer kima-analyzer-clap
-msg_ok "Created Services"
-
-motd_ssh
-customize
-cleanup_lxc

install/palmr-install.sh

@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/kyantech/Palmr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "Palmr" "kyantech/Palmr" "tarball" "latest" "/opt/palmr"
+PNPM="$(jq -r '.packageManager' /opt/palmr/package.json)"
+NODE_VERSION="24" NODE_MODULE="$PNPM" setup_nodejs
+
+msg_info "Configuring palmr backend"
+PALMR_DIR="/opt/palmr_data"
+mkdir -p "$PALMR_DIR"
+PALMR_DB="${PALMR_DIR}/palmr.db"
+PALMR_KEY="$(openssl rand -hex 32)"
+cd /opt/palmr/apps/server
+sed -e 's/_ENCRYPTION=true/_ENCRYPTION=false/' \
+  -e '/^# ENC/s/# //' \
+  -e "s/ENCRYPTION_KEY=.*$/ENCRYPTION_KEY=$PALMR_KEY/" \
+  -e "s|file:.*$|file:$PALMR_DB\"|" \
+  -e "\|db\"$|a\\# Uncomment below when using a reverse proxy\\
+# SECURE_SITE=true\\
+# Uncomment and add your path if using symlinks for data storage\\
+# CUSTOM_PATH=<path-to-your-bind-mount>" \
+  .env.example >./.env
+$STD pnpm install
+$STD npx prisma generate
+$STD npx prisma migrate deploy
+$STD npx prisma db push
+$STD pnpm db:seed
+$STD pnpm build
+msg_ok "Configured palmr backend"
+
+msg_info "Configuring palmr frontend"
+cd /opt/palmr/apps/web
+mv ./.env.example ./.env
+export NODE_ENV=production
+export NEXT_TELEMETRY_DISABLED=1
+$STD pnpm install
+$STD pnpm build
+msg_ok "Configured palmr frontend"
+
+msg_info "Creating service"
+useradd -d "$PALMR_DIR" -M -s /usr/sbin/nologin -U palmr
+chown -R palmr:palmr "$PALMR_DIR" /opt/palmr
+cat <<EOF >/etc/systemd/system/palmr-backend.service
+[Unit]
+Description=palmr Backend Service
+After=network.target
+
+[Service]
+Type=simple
+User=palmr
+Group=palmr
+WorkingDirectory=/opt/palmr_data
+ExecStart=/usr/bin/node /opt/palmr/apps/server/dist/server.js
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/palmr-frontend.service
+[Unit]
+Description=palmr Frontend Service
+After=network.target palmr-backend.service
+
+[Service]
+Type=simple
+User=palmr
+Group=palmr
+WorkingDirectory=/opt/palmr/apps/web
+ExecStart=/usr/bin/pnpm start
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now palmr-backend palmr-frontend
+msg_ok "Created service"
+
+motd_ssh
+customize
+cleanup_lxc

install/pangolin-install.sh

@@ -15,8 +15,6 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt install -y \
-  build-essential \
-  python3 \
   sqlite3 \
   iptables
 msg_ok "Installed Dependencies"

install/passbolt-install.sh

@@ -44,8 +44,6 @@ echo passbolt-ce-server passbolt/nginx-domain string $LOCAL_IP | debconf-set-sel
 echo passbolt-ce-server passbolt/nginx-certificate-file string /etc/ssl/passbolt/passbolt.crt | debconf-set-selections
 echo passbolt-ce-server passbolt/nginx-certificate-key-file string /etc/ssl/passbolt/passbolt.key | debconf-set-selections
 $STD apt install -y --no-install-recommends passbolt-ce-server
-sed -i 's/client_max_body_size[[:space:]]\+[0-9]\+M;/client_max_body_size        15M;/' /etc/nginx/sites-enabled/nginx-passbolt.conf
-systemctl reload nginx
 msg_ok "Setup Passbolt"
 
 motd_ssh

install/reactive-resume-install.sh

@@ -69,10 +69,6 @@ cat <<EOF >/opt/Reactive-Resume/.env
 NODE_ENV=production
 PORT=3000
 # for use behind a reverse proxy, use your FQDN for PUBLIC_URL and STORAGE_URL
-# To avoid issues when behind a reverse proxy with downloading PDFs, ensure that the 
-# storage path is accessible via a subdomain (i.e storage.yourapp.xyz) or you set your 
-# reverse proxy to properly rewrite the subpath (/rxresume) to point to the service
-# running on port 9000 (minio).
 PUBLIC_URL=http://${LOCAL_IP}:3000
 STORAGE_URL=http://${LOCAL_IP}:9000/rxresume
 DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}?schema=public

install/strapi-install.sh

@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: pespinel
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://strapi.io/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  python3 \
-  python3-setuptools \
-  libvips42
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" setup_nodejs
-
-msg_info "Installing Strapi (Patience)"
-mkdir -p /opt/strapi
-cd /opt/strapi
-$STD npx --yes create-strapi-app@latest . --quickstart --no-run --skip-cloud
-msg_ok "Installed Strapi"
-
-msg_info "Building Strapi"
-cd /opt/strapi
-export NODE_OPTIONS="--max-old-space-size=3072"
-$STD npm run build
-msg_ok "Built Strapi"
-
-msg_info "Creating Service"
-cat <<EOF >/opt/strapi/.env
-HOST=0.0.0.0
-PORT=1337
-APP_KEYS=$(openssl rand -base64 32)
-API_TOKEN_SALT=$(openssl rand -base64 32)
-ADMIN_JWT_SECRET=$(openssl rand -base64 32)
-TRANSFER_TOKEN_SALT=$(openssl rand -base64 32)
-JWT_SECRET=$(openssl rand -base64 32)
-EOF
-cat <<EOF >/etc/systemd/system/strapi.service
-[Unit]
-Description=Strapi CMS
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/strapi
-EnvironmentFile=/opt/strapi/.env
-ExecStart=/usr/bin/npm run start
-Restart=on-failure
-Environment=NODE_ENV=production
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now strapi
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/wger-install.sh

@@ -164,7 +164,7 @@ server {
 
     location / {
         proxy_pass http://127.0.0.1:8000;
-        proxy_set_header Host $http_host;
+        proxy_set_header Host $host;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_redirect off;

install/zammad-install.sh

@@ -28,23 +28,12 @@ setup_deb822_repo \
   "stable" \
   "main"
 $STD apt install -y elasticsearch
-sed -i 's/^#\{0,2\} *-Xms[0-9]*g.*/-Xms2g/' /etc/elasticsearch/jvm.options
+sed -i 's/^-Xms.*/-Xms2g/' /etc/elasticsearch/jvm.options
-sed -i 's/^#\{0,2\} *-Xmx[0-9]*g.*/-Xmx2g/' /etc/elasticsearch/jvm.options
+sed -i 's/^-Xmx.*/-Xmx2g/' /etc/elasticsearch/jvm.options
-cat <<EOF >>/etc/elasticsearch/elasticsearch.yml
-discovery.type: single-node
-xpack.security.enabled: false
-bootstrap.memory_lock: false
-EOF
 $STD /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment -b
 systemctl daemon-reload
 systemctl enable -q elasticsearch
 systemctl restart -q elasticsearch
-for i in $(seq 1 30); do
-  if curl -s http://localhost:9200 >/dev/null 2>&1; then
-    break
-  fi
-  sleep 2
-done
 msg_ok "Setup Elasticsearch"
 
 msg_info "Installing Zammad"

install/zerobyte-install.sh

@@ -1,96 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: community-scripts
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/nicotsx/zerobyte
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-echo "davfs2 davfs2/suid_file boolean false" | debconf-set-selections
-$STD apt-get install -y \
-  bzip2 \
-  fuse3 \
-  sshfs \
-  davfs2 \
-  openssh-client
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "restic" "restic/restic" "singlefile" "latest" "/usr/local/bin" "restic_*_linux_amd64.bz2"
-mv /usr/local/bin/restic /usr/local/bin/restic.bz2
-bzip2 -d /usr/local/bin/restic.bz2
-chmod +x /usr/local/bin/restic
-
-fetch_and_deploy_gh_release "rclone" "rclone/rclone" "prebuild" "latest" "/opt/rclone" "rclone-*-linux-amd64.zip"
-ln -sf /opt/rclone/rclone /usr/local/bin/rclone
-
-fetch_and_deploy_gh_release "shoutrrr" "nicholas-fedor/shoutrrr" "prebuild" "latest" "/opt/shoutrrr" "shoutrrr_linux_amd64_*.tar.gz"
-ln -sf /opt/shoutrrr/shoutrrr /usr/local/bin/shoutrrr
-
-msg_info "Installing Bun"
-export BUN_INSTALL="/root/.bun"
-curl -fsSL https://bun.sh/install | $STD bash
-ln -sf /root/.bun/bin/bun /usr/local/bin/bun
-ln -sf /root/.bun/bin/bunx /usr/local/bin/bunx
-msg_ok "Installed Bun"
-
-NODE_VERSION="24" setup_nodejs
-fetch_and_deploy_gh_release "zerobyte" "nicotsx/zerobyte" "tarball"
-
-msg_info "Building Zerobyte (Patience)"
-cd /opt/zerobyte
-export VITE_RESTIC_VERSION=$(cat ~/.restic)
-export VITE_RCLONE_VERSION=$(cat ~/.rclone)
-export VITE_SHOUTRRR_VERSION=$(cat ~/.shoutrrr)
-export NODE_OPTIONS="--max-old-space-size=3072"
-$STD bun install
-$STD node ./node_modules/vite/bin/vite.js build
-msg_ok "Built Zerobyte"
-
-msg_info "Configuring Zerobyte"
-mkdir -p /var/lib/zerobyte/{data,restic/cache,repositories,volumes}
-APP_SECRET=$(openssl rand -hex 32)
-cat <<EOF >/opt/zerobyte/.env
-BASE_URL=http://${LOCAL_IP}:4096
-APP_SECRET=${APP_SECRET}
-PORT=4096
-ZEROBYTE_DATABASE_URL=/var/lib/zerobyte/data/zerobyte.db
-RESTIC_CACHE_DIR=/var/lib/zerobyte/restic/cache
-ZEROBYTE_REPOSITORIES_DIR=/var/lib/zerobyte/repositories
-ZEROBYTE_VOLUMES_DIR=/var/lib/zerobyte/volumes
-MIGRATIONS_PATH=/opt/zerobyte/app/drizzle
-NODE_ENV=production
-EOF
-msg_ok "Configured Zerobyte"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/zerobyte.service
-[Unit]
-Description=Zerobyte Backup Automation
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/zerobyte
-EnvironmentFile=/opt/zerobyte/.env
-ExecStart=/usr/local/bin/bun .output/server/index.mjs
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now zerobyte
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

misc/api.func

@@ -312,8 +312,7 @@ json_escape() {
   s=${s//$'\r'/}
   s=${s//$'\t'/\\t}
   # Remove any remaining control characters (0x00-0x1F except those already handled)
-  # Also remove DEL (0x7F) and invalid high bytes that break JSON parsers
+  s=$(printf '%s' "$s" | tr -d '\000-\010\013\014\016-\037')
-  s=$(printf '%s' "$s" | tr -d '\000-\010\013\014\016-\037\177')
   printf '%s' "$s"
 }
 
@@ -983,7 +982,7 @@ EOF
   fi
 
   # All 3 attempts failed — do NOT set POST_UPDATE_DONE=true.
-  # This allows the EXIT trap (on_exit in error_handler.func) to retry.
+  # This allows the EXIT trap (api_exit_script) to retry with 3 fresh attempts.
   # No infinite loop risk: EXIT trap fires exactly once.
 }
 

misc/build.func

@@ -118,7 +118,7 @@ maxkeys_check() {
 
   # Exit if kernel parameters are unavailable
   if [[ "$per_user_maxkeys" -eq 0 || "$per_user_maxbytes" -eq 0 ]]; then
-    msg_error "Unable to read kernel key parameters. Ensure proper permissions."
+    echo -e "${CROSS}${RD} Error: Unable to read kernel parameters. Ensure proper permissions.${CL}"
     exit 1
   fi
 
@@ -135,19 +135,19 @@ maxkeys_check() {
   # Check if key or byte usage is near limits
   failure=0
   if [[ "$used_lxc_keys" -gt "$threshold_keys" ]]; then
-    msg_warn "Key usage is near the limit (${used_lxc_keys}/${per_user_maxkeys})"
+    echo -e "${CROSS}${RD} Warning: Key usage is near the limit (${used_lxc_keys}/${per_user_maxkeys}).${CL}"
     echo -e "${INFO} Suggested action: Set ${GN}kernel.keys.maxkeys=${new_limit_keys}${CL} in ${BOLD}/etc/sysctl.d/98-community-scripts.conf${CL}."
     failure=1
   fi
   if [[ "$used_lxc_bytes" -gt "$threshold_bytes" ]]; then
-    msg_warn "Key byte usage is near the limit (${used_lxc_bytes}/${per_user_maxbytes})"
+    echo -e "${CROSS}${RD} Warning: Key byte usage is near the limit (${used_lxc_bytes}/${per_user_maxbytes}).${CL}"
     echo -e "${INFO} Suggested action: Set ${GN}kernel.keys.maxbytes=${new_limit_bytes}${CL} in ${BOLD}/etc/sysctl.d/98-community-scripts.conf${CL}."
     failure=1
   fi
 
   # Provide next steps if issues are detected
   if [[ "$failure" -eq 1 ]]; then
-    msg_error "Kernel key limits exceeded - see suggestions above"
+    echo -e "${INFO} To apply changes, run: ${BOLD}service procps force-reload${CL}"
     exit 1
   fi
 
@@ -2034,7 +2034,6 @@ advanced_settings() {
           ((STEP++))
         else
           whiptail --msgbox "Default bridge 'vmbr0' not found!\n\nPlease configure a network bridge in Proxmox first." 10 58
-          msg_error "Default bridge 'vmbr0' not found"
           exit 1
         fi
       else
@@ -3050,7 +3049,7 @@ install_script() {
       CHOICE=""
       ;;
     *)
-      msg_error "Invalid option: $CHOICE"
+      echo -e "${CROSS}${RD}Invalid option: $CHOICE${CL}"
       exit 1
       ;;
     esac
@@ -3129,12 +3128,12 @@ check_container_resources() {
   current_cpu=$(nproc)
 
   if [[ "$current_ram" -lt "$var_ram" ]] || [[ "$current_cpu" -lt "$var_cpu" ]]; then
-    msg_warn "Under-provisioned: Required ${var_cpu} CPU/${var_ram}MB RAM, Current ${current_cpu} CPU/${current_ram}MB RAM"
+    echo -e "\n${INFO}${HOLD} ${GN}Required: ${var_cpu} CPU, ${var_ram}MB RAM ${CL}| ${RD}Current: ${current_cpu} CPU, ${current_ram}MB RAM${CL}"
     echo -e "${YWB}Please ensure that the ${APP} LXC is configured with at least ${var_cpu} vCPU and ${var_ram} MB RAM for the build process.${CL}\n"
     echo -ne "${INFO}${HOLD} May cause data loss! ${INFO} Continue update with under-provisioned LXC? <yes/No>  "
-    read -r prompt </dev/tty
+    read -r prompt
     if [[ ! ${prompt,,} =~ ^(yes)$ ]]; then
-      msg_error "Aborted: under-provisioned LXC (${current_cpu} CPU/${current_ram}MB RAM < ${var_cpu} CPU/${var_ram}MB RAM)"
+      echo -e "${CROSS}${HOLD} ${YWB}Exiting based on user input.${CL}"
       exit 1
     fi
   else
@@ -3153,11 +3152,11 @@ check_container_storage() {
   local used_size=$(df /boot --output=used | tail -n 1)
   usage=$((100 * used_size / total_size))
   if ((usage > 80)); then
-    msg_warn "Storage is dangerously low (${usage}% used on /boot)"
+    echo -e "${INFO}${HOLD} ${YWB}Warning: Storage is dangerously low (${usage}%).${CL}"
     echo -ne "Continue anyway? <y/N>  "
-    read -r prompt </dev/tty
+    read -r prompt
     if [[ ! ${prompt,,} =~ ^(y|yes)$ ]]; then
-      msg_error "Aborted: storage too low (${usage}% used)"
+      echo -e "${CROSS}${HOLD}${YWB}Exiting based on user input.${CL}"
       exit 1
     fi
   fi
@@ -3547,16 +3546,10 @@ build_container() {
   # Build PCT_OPTIONS as string for export
   TEMP_DIR=$(mktemp -d)
   pushd "$TEMP_DIR" >/dev/null
-  local _func_url
   if [ "$var_os" == "alpine" ]; then
-    _func_url="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/alpine-install.func"
+    export FUNCTIONS_FILE_PATH="$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/alpine-install.func)"
   else
-    _func_url="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/install.func"
+    export FUNCTIONS_FILE_PATH="$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/install.func)"
-  fi
-  export FUNCTIONS_FILE_PATH="$(curl -fsSL "$_func_url")"
-  if [[ -z "$FUNCTIONS_FILE_PATH" || ${#FUNCTIONS_FILE_PATH} -lt 100 ]]; then
-    msg_error "Failed to download install functions from: $_func_url"
-    exit 1
   fi
 
   # Core exports for install.func
@@ -3707,18 +3700,10 @@ $PCT_OPTIONS_STRING"
     NVIDIA_DEVICES=()
 
     # Store PCI info to avoid multiple calls
-    # grep returns exit 1 when no match — use || true to prevent ERR trap
+    local pci_vga_info=$(lspci -nn 2>/dev/null | grep -E "VGA|Display|3D")
-    local pci_vga_info
-    pci_vga_info=$(lspci -nn 2>/dev/null | grep -E "VGA|Display|3D" || true)
-
-    # No GPU-related PCI devices at all? Skip silently.
-    if [[ -z "$pci_vga_info" ]]; then
-      msg_debug "No VGA/Display/3D PCI devices found"
-      return 0
-    fi
 
     # Check for Intel GPU - look for Intel vendor ID [8086]
-    if grep -q "\[8086:" <<<"$pci_vga_info"; then
+    if echo "$pci_vga_info" | grep -q "\[8086:"; then
       msg_custom "🎮" "${BL}" "Detected Intel GPU"
       if [[ -d /dev/dri ]]; then
         for d in /dev/dri/renderD* /dev/dri/card*; do
@@ -3728,7 +3713,7 @@ $PCT_OPTIONS_STRING"
     fi
 
     # Check for AMD GPU - look for AMD vendor IDs [1002] (AMD/ATI) or [1022] (AMD)
-    if grep -qE "\[1002:|\[1022:" <<<"$pci_vga_info"; then
+    if echo "$pci_vga_info" | grep -qE "\[1002:|\[1022:"; then
       msg_custom "🎮" "${RD}" "Detected AMD GPU"
       if [[ -d /dev/dri ]]; then
         # Only add if not already claimed by Intel
@@ -3741,7 +3726,7 @@ $PCT_OPTIONS_STRING"
     fi
 
     # Check for NVIDIA GPU - look for NVIDIA vendor ID [10de]
-    if grep -q "\[10de:" <<<"$pci_vga_info"; then
+    if echo "$pci_vga_info" | grep -q "\[10de:"; then
       msg_custom "🎮" "${GN}" "Detected NVIDIA GPU"
 
       # Simple passthrough - just bind /dev/nvidia* devices if they exist
@@ -3842,7 +3827,7 @@ EOF
       for gpu in "${available_gpus[@]}"; do
         echo "  - $gpu"
       done
-      read -rp "Which GPU type to passthrough? (${available_gpus[*]}): " selected_gpu </dev/tty
+      read -rp "Which GPU type to passthrough? (${available_gpus[*]}): " selected_gpu
       selected_gpu="${selected_gpu^^}"
 
       # Validate selection
@@ -3935,9 +3920,7 @@ EOF
     fi
     sleep 1
     if [ "$i" -eq 10 ]; then
-      local ct_status
+      msg_error "LXC Container did not reach running state"
-      ct_status=$(pct status "$CTID" 2>/dev/null || echo "unknown")
-      msg_error "LXC Container did not reach running state (status: ${ct_status})"
       exit 1
     fi
   done
@@ -3961,7 +3944,7 @@ EOF
 
     if [ -z "$ip_in_lxc" ]; then
       msg_error "No IP assigned to CT $CTID after 20s"
-      msg_custom "🔧" "${YW}" "Troubleshooting:"
+      echo -e "${YW}Troubleshooting:${CL}"
       echo "  • Verify bridge ${BRG} exists and has connectivity"
       echo "  • Check if DHCP server is reachable (if using DHCP)"
       echo "  • Verify static IP configuration (if using static IP)"
@@ -3983,7 +3966,8 @@ EOF
     done
 
     if [ "$ping_success" = false ]; then
-      msg_warn "Network configured (IP: $ip_in_lxc) but connectivity test failed - installation will continue"
+      msg_warn "Network configured (IP: $ip_in_lxc) but connectivity test failed"
+      echo -e "${YW}Container may have limited internet access. Installation will continue...${CL}"
     else
       msg_ok "Network in LXC is reachable (ping)"
     fi
@@ -4020,16 +4004,6 @@ EOF
   #   install_gpu_userland "NVIDIA"
   # fi
 
-  # Disable error trap for entire customization & install phase.
-  # All errors are handled explicitly — recovery menu shown on failure.
-  # Without this, customization errors (e.g. container stopped during base package
-  # install) would trigger error_handler() with a simple "Remove broken container?"
-  # prompt instead of the full recovery menu with retry/repair options.
-  set +Eeuo pipefail
-  trap - ERR
-
-  local install_exit_code=0
-
   # Continue with standard container setup
   if [ "$var_os" == "alpine" ]; then
     sleep 3
@@ -4037,10 +4011,7 @@ EOF
 http://dl-cdn.alpinelinux.org/alpine/latest-stable/main
 http://dl-cdn.alpinelinux.org/alpine/latest-stable/community
 EOF'
-    pct exec "$CTID" -- ash -c "apk add bash newt curl openssh nano mc ncurses jq" >>"$BUILD_LOG" 2>&1 || {
+    pct exec "$CTID" -- ash -c "apk add bash newt curl openssh nano mc ncurses jq >/dev/null"
-      msg_error "Failed to install base packages in Alpine container"
-      install_exit_code=1
-    }
   else
     sleep 3
     LANG=${LANG:-en_US.UTF-8}
@@ -4063,76 +4034,70 @@ EOF'
       msg_warn "Skipping timezone setup – zone '$tz' not found in container"
     fi
 
-    pct exec "$CTID" -- bash -c "apt-get update 2>&1 && apt-get install -y sudo curl mc gnupg2 jq 2>&1" >>"$BUILD_LOG" 2>&1 || {
+    pct exec "$CTID" -- bash -c "apt-get update >/dev/null && apt-get install -y sudo curl mc gnupg2 jq >/dev/null" || {
       msg_error "apt-get base packages installation failed"
-      install_exit_code=1
+      exit 1
     }
   fi
 
-  # Only continue with installation if customization succeeded
+  msg_ok "Customized LXC Container"
-  if [[ $install_exit_code -eq 0 ]]; then
-    msg_ok "Customized LXC Container"
 
-    # Optional DNS override for retry scenarios (inside LXC, never on host)
+  # Optional DNS override for retry scenarios (inside LXC, never on host)
-    if [[ "${DNS_RETRY_OVERRIDE:-false}" == "true" ]]; then
+  if [[ "${DNS_RETRY_OVERRIDE:-false}" == "true" ]]; then
-      msg_info "Applying DNS retry override in LXC (8.8.8.8, 1.1.1.1)"
+    msg_info "Applying DNS retry override in LXC (8.8.8.8, 1.1.1.1)"
-      pct exec "$CTID" -- bash -c "printf 'nameserver 8.8.8.8\nnameserver 1.1.1.1\n' >/etc/resolv.conf" >/dev/null 2>&1 || true
+    pct exec "$CTID" -- bash -c "printf 'nameserver 8.8.8.8\nnameserver 1.1.1.1\n' >/etc/resolv.conf" >/dev/null 2>&1 || true
-      msg_ok "DNS override applied in LXC"
+    msg_ok "DNS override applied in LXC"
+  fi
+
+  # Install SSH keys
+  install_ssh_keys_into_ct
+
+  # Start timer for duration tracking
+  start_install_timer
+
+  # Run application installer
+  # Disable error trap - container errors are handled internally via flag file
+  set +Eeuo pipefail # Disable ALL error handling temporarily
+  trap - ERR         # Remove ERR trap completely
+
+  # Signal handlers use this flag to stop the container on abort (SIGHUP/SIGINT/SIGTERM)
+  # Without this, SSH disconnects leave the container running as an orphan process
+  # that sends "configuring" status AFTER the host already reported "failed"
+  export CONTAINER_INSTALLING=true
+
+  # Capture lxc-attach terminal output to host-side log via tee.
+  # This is the ONLY reliable way to get install output when:
+  #   - install.func fails to load (DNS error) → no container-side logging
+  #   - install script crashes before logging starts
+  #   - $STD/silent() not used for some commands
+  # PIPESTATUS[0] gets the real exit code from lxc-attach (not from tee).
+  local _LXC_CAPTURE_LOG="/tmp/.install-capture-${SESSION_ID}.log"
+  lxc-attach -n "$CTID" -- bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/install/${var_install}.sh)" 2>&1 | tee "$_LXC_CAPTURE_LOG"
+  local lxc_exit=${PIPESTATUS[0]}
+
+  unset CONTAINER_INSTALLING
+
+  # Keep error handling DISABLED during failure detection and recovery
+  # Re-enabling it here would cause any pct exec/pull failure to trigger
+  # error_handler() on the host, bypassing the recovery menu entirely
+
+  # Check for error flag file in container (more reliable than lxc-attach exit code)
+  local install_exit_code=0
+  if [[ -n "${SESSION_ID:-}" ]]; then
+    local error_flag="/root/.install-${SESSION_ID}.failed"
+    if pct exec "$CTID" -- test -f "$error_flag" 2>/dev/null; then
+      install_exit_code=$(pct exec "$CTID" -- cat "$error_flag" 2>/dev/null || echo "1")
+      pct exec "$CTID" -- rm -f "$error_flag" 2>/dev/null || true
     fi
+  fi
 
-    # Install SSH keys
+  # Fallback to lxc-attach exit code if no flag file
-    install_ssh_keys_into_ct
+  if [[ $install_exit_code -eq 0 && $lxc_exit -ne 0 ]]; then
+    install_exit_code=$lxc_exit
+  fi
 
-    # Start timer for duration tracking
+  # Installation failed?
-    start_install_timer
-
-    # Run application installer
-    # Error handling already disabled above (before customization phase)
-
-    # Signal handlers use this flag to stop the container on abort (SIGHUP/SIGINT/SIGTERM)
-    # Without this, SSH disconnects leave the container running as an orphan process
-    # that sends "configuring" status AFTER the host already reported "failed"
-    export CONTAINER_INSTALLING=true
-
-    # Capture lxc-attach terminal output to host-side log via tee.
-    # This is the ONLY reliable way to get install output when:
-    #   - install.func fails to load (DNS error) → no container-side logging
-    #   - install script crashes before logging starts
-    #   - $STD/silent() not used for some commands
-    # PIPESTATUS[0] gets the real exit code from lxc-attach (not from tee).
-    local _LXC_CAPTURE_LOG="/tmp/.install-capture-${SESSION_ID}.log"
-    lxc-attach -n "$CTID" -- bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/install/${var_install}.sh)" 2>&1 | tee "$_LXC_CAPTURE_LOG"
-    local lxc_exit=${PIPESTATUS[0]}
-
-    unset CONTAINER_INSTALLING
-
-    # Keep error handling DISABLED during failure detection and recovery
-    # Re-enabling it here would cause any pct exec/pull failure to trigger
-    # error_handler() on the host, bypassing the recovery menu entirely
-
-    # Check for error flag file in container (more reliable than lxc-attach exit code)
-    if [[ -n "${SESSION_ID:-}" ]]; then
-      local error_flag="/root/.install-${SESSION_ID}.failed"
-      if pct exec "$CTID" -- test -f "$error_flag" 2>/dev/null; then
-        install_exit_code=$(pct exec "$CTID" -- cat "$error_flag" 2>/dev/null || echo "1")
-        pct exec "$CTID" -- rm -f "$error_flag" 2>/dev/null || true
-      fi
-    fi
-
-    # Fallback to lxc-attach exit code if no flag file
-    if [[ $install_exit_code -eq 0 && ${lxc_exit:-0} -ne 0 ]]; then
-      install_exit_code=${lxc_exit:-0}
-    fi
-  fi # end: if [[ $install_exit_code -eq 0 ]] (customization succeeded)
-
-  # Installation or customization failed?
   if [[ $install_exit_code -ne 0 ]]; then
-    # Prevent job-control signals from suspending the script during recovery.
-    # In non-interactive shells (bash -c), background processes (spinner) can
-    # trigger terminal-related signals that stop the entire process group.
-    # TSTP = Ctrl+Z, TTIN = bg read from tty, TTOU = bg write to tty (tostop)
-    trap '' TSTP TTIN TTOU
-
     msg_error "Installation failed in container ${CTID} (exit code: ${install_exit_code})"
 
     # Copy install log from container BEFORE API call so get_error_text() can read it
@@ -4208,12 +4173,7 @@ EOF'
     fi
 
     # Report failure to telemetry API (now with log available on host)
-    # NOTE: Do NOT use msg_info/spinner here — the background spinner process
-    # causes SIGTSTP in non-interactive shells (bash -c "$(curl ...)"), which
-    # stops the entire process group and prevents the recovery dialog from appearing.
-    $STD echo -e "${TAB}⏳ Reporting failure to telemetry..."
     post_update_to_api "failed" "$install_exit_code"
-    $STD echo -e "${TAB}${CM:-✔} Failure reported"
 
     # Defense-in-depth: Ensure error handling stays disabled during recovery.
     # Some functions (e.g. silent/$STD) unconditionally re-enable set -Eeuo pipefail
@@ -4237,7 +4197,7 @@ EOF'
       pct enter "$CTID"
       echo ""
       echo -en "${YW}Container ${CTID} still running. Remove now? (y/N): ${CL}"
-      if read -r response </dev/tty && [[ "$response" =~ ^[Yy]$ ]]; then
+      if read -r response && [[ "$response" =~ ^[Yy]$ ]]; then
         pct stop "$CTID" &>/dev/null || true
         pct destroy "$CTID" &>/dev/null || true
         msg_ok "Container ${CTID} removed"
@@ -4387,7 +4347,7 @@ EOF'
     echo ""
     echo -en "${YW}Select option [1-${max_option}] (default: 1, auto-remove in 60s): ${CL}"
 
-    if read -t 60 -r response </dev/tty; then
+    if read -t 60 -r response; then
       case "${response:-1}" in
       1)
         # Remove container
@@ -4577,12 +4537,8 @@ EOF'
 
     # Force one final status update attempt after cleanup
     # This ensures status is updated even if the first attempt failed (e.g., HTTP 400)
-    $STD echo -e "${TAB}⏳ Finalizing telemetry report..."
     post_update_to_api "failed" "$install_exit_code" "force"
-    $STD echo -e "${TAB}${CM:-✔} Telemetry finalized"
 
-    # Restore default job-control signal handling before exit
-    trap - TSTP TTIN TTOU
     exit $install_exit_code
   fi
 
@@ -4604,7 +4560,7 @@ destroy_lxc() {
   trap 'echo; msg_error "Aborted by user (SIGINT/SIGQUIT)"; return 130' INT QUIT
 
   local prompt
-  if ! read -rp "Remove this Container? <y/N> " prompt </dev/tty; then
+  if ! read -rp "Remove this Container? <y/N> " prompt; then
     # read returns non-zero on Ctrl-D/ESC
     msg_error "Aborted input (Ctrl-D/ESC)"
     return 130
@@ -4937,16 +4893,16 @@ create_lxc_container() {
       return 0
     fi
 
-    msg_info "An update for the Proxmox LXC stack is available"
+    echo
+    echo "An update for the Proxmox LXC stack is available:"
     echo "  pve-container: installed=${_pvec_i:-n/a}  candidate=${_pvec_c:-n/a}"
     echo "  lxc-pve     : installed=${_lxcp_i:-n/a}  candidate=${_lxcp_c:-n/a}"
     echo
-    read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
+    read -rp "Do you want to upgrade now? [y/N] " _ans
     case "${_ans,,}" in
     y | yes)
       msg_info "Upgrading Proxmox LXC stack (pve-container, lxc-pve)"
-      apt_update_safe
+      if $STD apt-get update && $STD apt-get install -y --only-upgrade pve-container lxc-pve; then
-      if $STD apt-get install -y --only-upgrade pve-container lxc-pve; then
         msg_ok "LXC stack upgraded."
         if [[ "$do_retry" == "yes" ]]; then
           msg_info "Retrying container creation after upgrade"
@@ -4990,6 +4946,7 @@ create_lxc_container() {
     exit 205
   }
   if qm status "$CTID" &>/dev/null || pct status "$CTID" &>/dev/null; then
+    echo -e "ID '$CTID' is already in use."
     unset CTID
     msg_error "Cannot use ID that is already in use."
     exit 206
@@ -5047,40 +5004,17 @@ create_lxc_container() {
   msg_info "Validating storage '$CONTAINER_STORAGE'"
   STORAGE_TYPE=$(grep -E "^[^:]+: $CONTAINER_STORAGE$" /etc/pve/storage.cfg | cut -d: -f1 | head -1)
 
-  if [[ -z "$STORAGE_TYPE" ]]; then
-    msg_error "Storage '$CONTAINER_STORAGE' not found in /etc/pve/storage.cfg"
-    exit 213
-  fi
-
   case "$STORAGE_TYPE" in
-  iscsidirect)
+  iscsidirect) exit 212 ;;
-    msg_error "Storage '$CONTAINER_STORAGE' uses iSCSI-direct which does not support container rootfs."
+  iscsi | zfs) exit 213 ;;
-    exit 212
+  cephfs) exit 219 ;;
-    ;;
+  pbs) exit 224 ;;
-  iscsi | zfs)
-    msg_error "Storage '$CONTAINER_STORAGE' ($STORAGE_TYPE) does not support container rootdir content."
-    exit 213
-    ;;
-  cephfs)
-    msg_error "Storage '$CONTAINER_STORAGE' uses CephFS which is not supported for LXC rootfs."
-    exit 219
-    ;;
-  pbs)
-    msg_error "Storage '$CONTAINER_STORAGE' is a Proxmox Backup Server — cannot be used for containers."
-    exit 224
-    ;;
   linstor | rbd | nfs | cifs)
-    if ! pvesm status -storage "$CONTAINER_STORAGE" &>/dev/null; then
+    pvesm status -storage "$CONTAINER_STORAGE" &>/dev/null || exit 217
-      msg_error "Storage '$CONTAINER_STORAGE' ($STORAGE_TYPE) is not accessible or inactive."
-      exit 217
-    fi
     ;;
   esac
 
-  if ! pvesm status -content rootdir 2>/dev/null | awk 'NR>1{print $1}' | grep -qx "$CONTAINER_STORAGE"; then
+  pvesm status -content rootdir 2>/dev/null | awk 'NR>1{print $1}' | grep -qx "$CONTAINER_STORAGE" || exit 213
-    msg_error "Storage '$CONTAINER_STORAGE' ($STORAGE_TYPE) does not support 'rootdir' content."
-    exit 213
-  fi
   msg_ok "Storage '$CONTAINER_STORAGE' ($STORAGE_TYPE) validated"
 
   msg_info "Validating template storage '$TEMPLATE_STORAGE'"
@@ -5153,7 +5087,8 @@ create_lxc_container() {
 
   # If still no template, try to find alternatives
   if [[ -z "$TEMPLATE" ]]; then
-    msg_warn "No template found for ${PCT_OSTYPE} ${PCT_OSVERSION}, searching for alternatives..."
+    echo ""
+    echo "[DEBUG] No template found for ${PCT_OSTYPE} ${PCT_OSVERSION}, searching for alternatives..."
 
     # Get all available versions for this OS type
     AVAILABLE_VERSIONS=()
@@ -5173,7 +5108,7 @@ create_lxc_container() {
         echo "  [$((i + 1))] ${AVAILABLE_VERSIONS[$i]}"
       done
       echo ""
-      read -p "Select version [1-${#AVAILABLE_VERSIONS[@]}] or press Enter to cancel: " choice </dev/tty
+      read -p "Select version [1-${#AVAILABLE_VERSIONS[@]}] or press Enter to cancel: " choice
 
       if [[ "$choice" =~ ^[0-9]+$ ]] && [[ "$choice" -ge 1 ]] && [[ "$choice" -le ${#AVAILABLE_VERSIONS[@]} ]]; then
         PCT_OSVERSION="${AVAILABLE_VERSIONS[$((choice - 1))]}"
@@ -5236,7 +5171,7 @@ create_lxc_container() {
         done
 
         echo ""
-        read -p "Select version [1-${#AVAILABLE_VERSIONS[@]}] or Enter to exit: " choice </dev/tty
+        read -p "Select version [1-${#AVAILABLE_VERSIONS[@]}] or Enter to exit: " choice
 
         if [[ "$choice" =~ ^[0-9]+$ ]] && [[ "$choice" -ge 1 ]] && [[ "$choice" -le ${#AVAILABLE_VERSIONS[@]} ]]; then
           export var_version="${AVAILABLE_VERSIONS[$((choice - 1))]}"
@@ -5346,7 +5281,7 @@ create_lxc_container() {
     [[ -f "$TEMPLATE_PATH" ]] && rm -f "$TEMPLATE_PATH"
     for attempt in {1..3}; do
       msg_info "Attempt $attempt: Downloading template $TEMPLATE to $TEMPLATE_STORAGE"
-      if pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1; then
+      if pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >/dev/null 2>&1; then
         msg_ok "Template download successful."
         break
       fi
@@ -5423,35 +5358,17 @@ create_lxc_container() {
 
   LOGFILE="/tmp/pct_create_${CTID}_$(date +%Y%m%d_%H%M%S)_${SESSION_ID}.log"
 
-  # Helper: append pct_create log to BUILD_LOG before exit so combined log has full context
-  _flush_pct_log() {
-    if [[ -s "${LOGFILE:-}" && -n "${BUILD_LOG:-}" ]]; then
-      {
-        echo ""
-        echo "--- pct create output (${LOGFILE}) ---"
-        cat "$LOGFILE"
-        echo "--- end pct create output ---"
-      } >>"$BUILD_LOG" 2>/dev/null || true
-    fi
-  }
-
   # Validate template before pct create (while holding lock)
   if [[ ! -s "$TEMPLATE_PATH" || "$(stat -c%s "$TEMPLATE_PATH" 2>/dev/null || echo 0)" -lt 1000000 ]]; then
     msg_info "Template file missing or too small – downloading"
     rm -f "$TEMPLATE_PATH"
-    pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1 || {
+    pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >/dev/null 2>&1
-      msg_error "Failed to download template '$TEMPLATE' to storage '$TEMPLATE_STORAGE'"
-      exit 222
-    }
     msg_ok "Template downloaded"
   elif ! tar -tf "$TEMPLATE_PATH" &>/dev/null; then
     if [[ -n "$ONLINE_TEMPLATE" ]]; then
       msg_info "Template appears corrupted – re-downloading"
       rm -f "$TEMPLATE_PATH"
-      pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1 || {
+      pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >/dev/null 2>&1
-        msg_error "Failed to re-download template '$TEMPLATE'"
-        exit 222
-      }
       msg_ok "Template re-downloaded"
     else
       msg_warn "Template appears corrupted, but no online version exists. Skipping re-download."
@@ -5472,7 +5389,7 @@ create_lxc_container() {
     if grep -qiE 'unable to open|corrupt|invalid' "$LOGFILE"; then
       msg_info "Template may be corrupted – re-downloading"
       rm -f "$TEMPLATE_PATH"
-      pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1
+      pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >/dev/null 2>&1
       msg_ok "Template re-downloaded"
     fi
 
@@ -5485,7 +5402,7 @@ create_lxc_container() {
         if [[ ! -f "$LOCAL_TEMPLATE_PATH" ]]; then
           msg_ok "Trying local storage fallback"
           msg_info "Downloading template to local"
-          pveam download local "$TEMPLATE" >>"${BUILD_LOG:-/dev/null}" 2>&1
+          pveam download local "$TEMPLATE" >/dev/null 2>&1
           msg_ok "Template downloaded to local"
         else
           msg_ok "Trying local storage fallback"
@@ -5493,19 +5410,20 @@ create_lxc_container() {
         if ! pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
           # Local fallback also failed - check for LXC stack version issue
           if grep -qiE 'unsupported .* version' "$LOGFILE"; then
-            msg_warn "pct reported 'unsupported version' – LXC stack might be too old for this template"
+            echo
+            echo "pct reported 'unsupported ... version' – your LXC stack might be too old for this template."
+            echo "We can try to upgrade 'pve-container' and 'lxc-pve' now and retry automatically."
             offer_lxc_stack_upgrade_and_maybe_retry "yes"
             rc=$?
             case $rc in
             0) : ;; # success - container created, continue
             2)
-              msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+              echo "Upgrade was declined. Please update and re-run:
-              _flush_pct_log
+  apt update && apt install --only-upgrade pve-container lxc-pve"
               exit 231
               ;;
             3)
-              msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+              echo "Upgrade and/or retry failed. Please inspect: $LOGFILE"
-              _flush_pct_log
               exit 231
               ;;
             esac
@@ -5516,7 +5434,6 @@ create_lxc_container() {
               pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS 2>&1 | tee -a "$LOGFILE"
               set +x
             fi
-            _flush_pct_log
             exit 209
           fi
         else
@@ -5525,19 +5442,20 @@ create_lxc_container() {
       else
         # Already on local storage and still failed - check LXC stack version
         if grep -qiE 'unsupported .* version' "$LOGFILE"; then
-          msg_warn "pct reported 'unsupported version' – LXC stack might be too old for this template"
+          echo
+          echo "pct reported 'unsupported ... version' – your LXC stack might be too old for this template."
+          echo "We can try to upgrade 'pve-container' and 'lxc-pve' now and retry automatically."
           offer_lxc_stack_upgrade_and_maybe_retry "yes"
           rc=$?
           case $rc in
           0) : ;; # success - container created, continue
           2)
-            msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+            echo "Upgrade was declined. Please update and re-run:
-            _flush_pct_log
+  apt update && apt install --only-upgrade pve-container lxc-pve"
             exit 231
             ;;
           3)
-            msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+            echo "Upgrade and/or retry failed. Please inspect: $LOGFILE"
-            _flush_pct_log
             exit 231
             ;;
           esac
@@ -5548,7 +5466,6 @@ create_lxc_container() {
             pct create "$CTID" "local:vztmpl/${TEMPLATE}" $PCT_OPTIONS 2>&1 | tee -a "$LOGFILE"
             set +x
           fi
-          _flush_pct_log
           exit 209
         fi
       fi
@@ -5560,28 +5477,16 @@ create_lxc_container() {
   # Verify container exists
   pct list | awk '{print $1}' | grep -qx "$CTID" || {
     msg_error "Container ID $CTID not listed in 'pct list'. See $LOGFILE"
-    _flush_pct_log
     exit 215
   }
 
   # Verify config rootfs
   grep -q '^rootfs:' "/etc/pve/lxc/$CTID.conf" || {
     msg_error "RootFS entry missing in container config. See $LOGFILE"
-    _flush_pct_log
     exit 216
   }
 
   msg_ok "LXC Container ${BL}$CTID${CL} ${GN}was successfully created."
-
-  # Append pct create log to BUILD_LOG for combined log visibility
-  if [[ -s "$LOGFILE" && -n "${BUILD_LOG:-}" ]]; then
-    {
-      echo ""
-      echo "--- pct create output ---"
-      cat "$LOGFILE"
-      echo "--- end pct create output ---"
-    } >>"$BUILD_LOG" 2>/dev/null || true
-  fi
 }
 
 # ==============================================================================
@@ -5703,21 +5608,44 @@ ensure_log_on_host() {
   fi
 }
 
-# ==============================================================================
+# ------------------------------------------------------------------------------
-# TRAP MANAGEMENT
+# api_exit_script()
-# ==============================================================================
-# All traps (ERR, EXIT, INT, TERM, HUP) are set by catch_errors() in
-# error_handler.func — called at the top of this file after sourcing.
 #
-# Do NOT set duplicate traps here. The handlers in error_handler.func
+# - Exit trap handler for reporting to API telemetry
-# (on_exit, on_interrupt, on_terminate, on_hangup, error_handler) already:
+# - Captures exit code and reports to PocketBase using centralized error descriptions
-#   - Send telemetry via post_update_to_api / _send_abort_telemetry
+# - Uses explain_exit_code() from api.func for consistent error messages
-#   - Stop orphaned containers via _stop_container_if_installing
+# - ALWAYS sends telemetry FIRST before log collection to prevent pct pull
-#   - Collect logs via ensure_log_on_host
+#   hangs from blocking status updates (container may be dead/unresponsive)
-#   - Clean up lock files and spinner processes
+# - For non-zero exit codes: posts "failed" status
-#
+# - For zero exit codes where post_update_to_api was never called:
-# Previously, inline traps here overwrote catch_errors() traps, causing:
+#   catches orphaned "installing" records (e.g., script exited cleanly
-#   - error_handler() never fired (no error output, no cleanup dialog)
+#   but description() was never reached)
-#   - on_hangup() never fired (SSH disconnect → stuck records)
+# ------------------------------------------------------------------------------
-#   - Duplicated logic in two places (hard to debug)
+api_exit_script() {
-# ==============================================================================
+  local exit_code=$?
+  if [ $exit_code -ne 0 ]; then
+    # ALWAYS send telemetry FIRST - ensure status is reported even if
+    # ensure_log_on_host hangs (e.g. pct pull on dead container)
+    post_update_to_api "failed" "$exit_code" 2>/dev/null || true
+    # Best-effort log collection (non-critical after telemetry is sent)
+    if declare -f ensure_log_on_host >/dev/null 2>&1; then
+      ensure_log_on_host 2>/dev/null || true
+    fi
+    # Stop orphaned container if we're in the install phase
+    if [[ "${CONTAINER_INSTALLING:-}" == "true" && -n "${CTID:-}" ]] && command -v pct &>/dev/null; then
+      pct stop "$CTID" 2>/dev/null || true
+    fi
+  elif [[ "${POST_TO_API_DONE:-}" == "true" && "${POST_UPDATE_DONE:-}" != "true" ]]; then
+    # Script exited with 0 but never sent a completion status
+    # exit_code=0 is never an error — report as success
+    post_update_to_api "done" "0"
+  fi
+}
+
+if command -v pveversion >/dev/null 2>&1; then
+  trap 'api_exit_script' EXIT
+fi
+trap 'local _ec=$?; if [[ $_ec -ne 0 ]]; then post_update_to_api "failed" "$_ec" 2>/dev/null || true; if declare -f ensure_log_on_host &>/dev/null; then ensure_log_on_host 2>/dev/null || true; fi; fi' ERR
+trap 'post_update_to_api "failed" "129" 2>/dev/null || true; if [[ -n "${CTID:-}" ]] && command -v pct &>/dev/null; then pct stop "$CTID" 2>/dev/null || true; fi; exit 129' SIGHUP
+trap 'post_update_to_api "failed" "130" 2>/dev/null || true; if [[ -n "${CTID:-}" ]] && command -v pct &>/dev/null; then pct stop "$CTID" 2>/dev/null || true; fi; exit 130' SIGINT
+trap 'post_update_to_api "failed" "143" 2>/dev/null || true; if [[ -n "${CTID:-}" ]] && command -v pct &>/dev/null; then pct stop "$CTID" 2>/dev/null || true; fi; exit 143' SIGTERM

misc/core.func

@@ -276,7 +276,7 @@ shell_check() {
     msg_error "Your default shell is currently not set to Bash. To use these scripts, please switch to the Bash shell."
     echo -e "\nExiting..."
     sleep 2
-    exit 1
+    exit
   fi
 }
 
@@ -293,7 +293,7 @@ root_check() {
     msg_error "Please run this script as root."
     echo -e "\nExiting..."
     sleep 2
-    exit 1
+    exit
   fi
 }
 
@@ -345,10 +345,11 @@ pve_check() {
 # ------------------------------------------------------------------------------
 arch_check() {
   if [ "$(dpkg --print-architecture)" != "amd64" ]; then
-    msg_error "This script will not work with PiMox (ARM architecture detected)."
+    echo -e "\n ${INFO}${YWB}This script will not work with PiMox! \n"
-    msg_warn "Visit https://github.com/asylumexp/Proxmox for ARM64 support."
+    echo -e "\n ${YWB}Visit https://github.com/asylumexp/Proxmox for ARM64 support. \n"
+    echo -e "Exiting..."
     sleep 2
-    exit 1
+    exit
   fi
 }
 
@@ -529,9 +530,7 @@ silent() {
   if [[ $rc -ne 0 ]]; then
     # Source explain_exit_code if needed
     if ! declare -f explain_exit_code >/dev/null 2>&1; then
-      if ! source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func); then
+      source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
-        explain_exit_code() { echo "unknown (error_handler.func download failed)"; }
-      fi
     fi
 
     local explanation
@@ -552,53 +551,6 @@ silent() {
   fi
 }
 
-# ------------------------------------------------------------------------------
-# apt_update_safe()
-#
-# - Runs apt-get update with graceful error handling
-# - On failure: shows warning with common causes instead of aborting
-# - Logs full output to active log file
-# - Returns 0 even on failure so the caller can continue
-# - Typical cause: enterprise repos returning 401 Unauthorized
-#
-# Usage:
-#   apt_update_safe       # Warn on failure, continue without aborting
-# ------------------------------------------------------------------------------
-apt_update_safe() {
-  local logfile
-  logfile="$(get_active_logfile)"
-
-  local _restore_errexit=false
-  [[ "$-" == *e* ]] && _restore_errexit=true
-
-  set +Eeuo pipefail
-  trap - ERR
-
-  apt-get update >>"$logfile" 2>&1
-  local rc=$?
-
-  if $_restore_errexit; then
-    set -Eeuo pipefail
-    trap 'error_handler' ERR
-  fi
-
-  if [[ $rc -ne 0 ]]; then
-    msg_warn "apt-get update exited with code ${rc} — some repositories may have failed."
-
-    # Check log for common 401/403 enterprise repo issues
-    if grep -qiE '401\s*Unauthorized|403\s*Forbidden|enterprise\.proxmox\.com' "$logfile" 2>/dev/null; then
-      echo -e "${TAB}${INFO} ${YWB}Hint: Proxmox enterprise repository returned an auth error.${CL}"
-      echo -e "${TAB}       If you don't have a subscription, you can disable the enterprise"
-      echo -e "${TAB}       repo and use the no-subscription repo instead."
-    fi
-
-    echo -e "${TAB}${INFO} ${YWB}Continuing despite partial update failure — packages may still be installable.${CL}"
-    echo ""
-  fi
-
-  return 0
-}
-
 # ------------------------------------------------------------------------------
 # spinner()
 #
@@ -655,7 +607,6 @@ stop_spinner() {
 
   unset SPINNER_PID SPINNER_MSG
   stty sane 2>/dev/null || true
-  stty -tostop 2>/dev/null || true
 }
 
 # ==============================================================================
@@ -833,8 +784,8 @@ fatal() {
 # ------------------------------------------------------------------------------
 exit_script() {
   clear
-  msg_error "User exited script"
+  echo -e "\n${CROSS}${RD}User exited script${CL}\n"
-  exit 0
+  exit
 }
 
 # ------------------------------------------------------------------------------
@@ -855,7 +806,6 @@ get_header() {
 
   if [ ! -s "$local_header_path" ]; then
     if ! curl -fsSL "$header_url" -o "$local_header_path"; then
-      msg_warn "Failed to download header: $header_url"
       return 1
     fi
   fi
@@ -896,10 +846,10 @@ header_info() {
 ensure_tput() {
   if ! command -v tput >/dev/null 2>&1; then
     if grep -qi 'alpine' /etc/os-release; then
-      apk add --no-cache ncurses >/dev/null 2>&1 || msg_warn "Failed to install ncurses (tput may be unavailable)"
+      apk add --no-cache ncurses >/dev/null 2>&1
     elif command -v apt-get >/dev/null 2>&1; then
       apt-get update -qq >/dev/null
-      apt-get install -y -qq ncurses-bin >/dev/null 2>&1 || msg_warn "Failed to install ncurses-bin (tput may be unavailable)"
+      apt-get install -y -qq ncurses-bin >/dev/null 2>&1
     fi
   fi
 }
@@ -1359,7 +1309,6 @@ prompt_select() {
 
   # Validate options
   if [[ $num_options -eq 0 ]]; then
-    msg_warn "prompt_select called with no options"
     echo "" >&2
     return 1
   fi
@@ -1602,30 +1551,22 @@ check_or_create_swap() {
   local swap_size_mb
   swap_size_mb=$(prompt_input "Enter swap size in MB (e.g., 2048 for 2GB):" "2048" 60)
   if ! [[ "$swap_size_mb" =~ ^[0-9]+$ ]]; then
-    msg_error "Invalid swap size: '${swap_size_mb}' (must be a number in MB)"
+    msg_error "Invalid size input. Aborting."
     return 1
   fi
 
   local swap_file="/swapfile"
 
   msg_info "Creating ${swap_size_mb}MB swap file at $swap_file"
-  if ! dd if=/dev/zero of="$swap_file" bs=1M count="$swap_size_mb" status=progress; then
+  if dd if=/dev/zero of="$swap_file" bs=1M count="$swap_size_mb" status=progress &&
-    msg_error "Failed to allocate swap file (dd failed)"
+    chmod 600 "$swap_file" &&
+    mkswap "$swap_file" &&
+    swapon "$swap_file"; then
+    msg_ok "Swap file created and activated successfully"
+  else
+    msg_error "Failed to create or activate swap"
     return 1
   fi
-  if ! chmod 600 "$swap_file"; then
-    msg_error "Failed to set permissions on $swap_file"
-    return 1
-  fi
-  if ! mkswap "$swap_file"; then
-    msg_error "Failed to format swap file (mkswap failed)"
-    return 1
-  fi
-  if ! swapon "$swap_file"; then
-    msg_error "Failed to activate swap (swapon failed)"
-    return 1
-  fi
-  msg_ok "Swap file created and activated successfully"
 }
 
 # ------------------------------------------------------------------------------
@@ -1707,7 +1648,7 @@ function get_lxc_ip() {
 
     LOCAL_IP="$(get_current_ip || true)"
     if [[ -z "$LOCAL_IP" ]]; then
-      msg_error "Could not determine LOCAL_IP (checked: eth0, hostname -I, ip route, IPv6 targets)"
+      msg_error "Could not determine LOCAL_IP"
       return 1
     fi
   fi

misc/error_handler.func

@@ -199,16 +199,11 @@ error_handler() {
     return 0
   fi
 
-  # Stop spinner and restore cursor FIRST — before any output
-  # This prevents spinner text overlapping with error messages
-  if declare -f stop_spinner >/dev/null 2>&1; then
-    stop_spinner 2>/dev/null || true
-  fi
-  printf "\e[?25h"
-
   local explanation
   explanation="$(explain_exit_code "$exit_code")"
 
+  printf "\e[?25h"
+
   # ALWAYS report failure to API immediately - don't wait for container checks
   # This ensures we capture failures that occur before/after container exists
   if declare -f post_update_to_api &>/dev/null; then
@@ -286,7 +281,7 @@ error_handler() {
         echo -en "${YW}Remove broken container ${CTID}? (Y/n) [auto-remove in 60s]: ${CL}"
       fi
 
-      if read -t 60 -r response </dev/tty; then
+      if read -t 60 -r response; then
         if [[ -z "$response" || "$response" =~ ^[Yy]$ ]]; then
           echo ""
           if declare -f msg_info >/dev/null 2>&1; then
@@ -364,39 +359,9 @@ _send_abort_telemetry() {
   command -v curl &>/dev/null || return 0
   [[ "${DIAGNOSTICS:-no}" == "no" ]] && return 0
   [[ -z "${RANDOM_UUID:-}" ]] && return 0
-
+  curl -fsS -m 5 -X POST "${TELEMETRY_URL:-https://telemetry.community-scripts.org/telemetry}" \
-  # Collect last 20 log lines for error diagnosis (best-effort)
+    -H "Content-Type: application/json" \
-  local error_text=""
+    -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"${TELEMETRY_TYPE:-lxc}\",\"nsapp\":\"${NSAPP:-${app:-unknown}}\",\"status\":\"failed\",\"exit_code\":${exit_code}}" &>/dev/null || true
-  if [[ -n "${INSTALL_LOG:-}" && -s "${INSTALL_LOG}" ]]; then
-    error_text=$(tail -n 20 "$INSTALL_LOG" 2>/dev/null | sed 's/\x1b\[[0-9;]*[a-zA-Z]//g; s/\\/\\\\/g; s/"/\\"/g; s/\r//g' | tr '\n' '|' | sed 's/|$//' | tr -d '\000-\010\013\014\016-\037\177') || true
-  fi
-
-  # Calculate duration if start time is available
-  local duration=""
-  if [[ -n "${DIAGNOSTICS_START_TIME:-}" ]]; then
-    duration=$(($(date +%s) - DIAGNOSTICS_START_TIME))
-  fi
-
-  # Build JSON payload with error context
-  local payload
-  payload="{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"${TELEMETRY_TYPE:-lxc}\",\"nsapp\":\"${NSAPP:-${app:-unknown}}\",\"status\":\"failed\",\"exit_code\":${exit_code}"
-  [[ -n "$error_text" ]] && payload="${payload},\"error\":\"${error_text}\""
-  [[ -n "$duration" ]] && payload="${payload},\"duration\":${duration}"
-  payload="${payload}}"
-
-  local api_url="${TELEMETRY_URL:-https://telemetry.community-scripts.org/telemetry}"
-
-  # 2 attempts (retry once on failure) — original had no retry
-  local attempt
-  for attempt in 1 2; do
-    if curl -fsS -m 5 -X POST "$api_url" \
-      -H "Content-Type: application/json" \
-      -d "$payload" &>/dev/null; then
-      return 0
-    fi
-    [[ $attempt -eq 1 ]] && sleep 1
-  done
-  return 0
 }
 
 # ------------------------------------------------------------------------------
@@ -472,12 +437,6 @@ on_exit() {
 # - Exits with code 130 (128 + SIGINT=2)
 # ------------------------------------------------------------------------------
 on_interrupt() {
-  # Stop spinner and restore cursor before any output
-  if declare -f stop_spinner >/dev/null 2>&1; then
-    stop_spinner 2>/dev/null || true
-  fi
-  printf "\e[?25h" 2>/dev/null || true
-
   _send_abort_telemetry "130"
   _stop_container_if_installing
   if declare -f msg_error >/dev/null 2>&1; then
@@ -497,12 +456,6 @@ on_interrupt() {
 # - Exits with code 143 (128 + SIGTERM=15)
 # ------------------------------------------------------------------------------
 on_terminate() {
-  # Stop spinner and restore cursor before any output
-  if declare -f stop_spinner >/dev/null 2>&1; then
-    stop_spinner 2>/dev/null || true
-  fi
-  printf "\e[?25h" 2>/dev/null || true
-
   _send_abort_telemetry "143"
   _stop_container_if_installing
   if declare -f msg_error >/dev/null 2>&1; then
@@ -525,11 +478,6 @@ on_terminate() {
 # - Exits with code 129 (128 + SIGHUP=1)
 # ------------------------------------------------------------------------------
 on_hangup() {
-  # Stop spinner (no cursor restore needed — terminal is already gone)
-  if declare -f stop_spinner >/dev/null 2>&1; then
-    stop_spinner 2>/dev/null || true
-  fi
-
   _send_abort_telemetry "129"
   _stop_container_if_installing
   exit 129

misc/install.func

@@ -233,7 +233,7 @@ fi
 EOF
     chmod +x /usr/local/bin/apt-proxy-detect.sh
   fi
-  apt_update_safe
+  $STD apt-get update
   $STD apt-get -o Dpkg::Options::="--force-confold" -y dist-upgrade
   rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
   msg_ok "Updated Container OS"

misc/tools.func

@@ -201,7 +201,6 @@ install_packages_with_retry() {
     fi
   done
 
-  msg_error "Failed to install packages after $((max_retries + 1)) attempts: ${packages[*]}"
   return 1
 }
 
@@ -232,7 +231,6 @@ upgrade_packages_with_retry() {
     fi
   done
 
-  msg_error "Failed to upgrade packages after $((max_retries + 1)) attempts: ${packages[*]}"
   return 1
 }
 
@@ -677,7 +675,6 @@ verify_repo_available() {
   if curl -fsSL --max-time 10 "${repo_url}/dists/${suite}/Release" &>/dev/null; then
     return 0
   fi
-  msg_warn "Repository not available: ${repo_url} (suite: ${suite})"
   return 1
 }
 
@@ -786,25 +783,16 @@ github_api_call() {
 
   for attempt in $(seq 1 $max_retries); do
     local http_code
-    http_code=$(curl -sSL -w "%{http_code}" -o "$output_file" \
+    http_code=$(curl -fsSL -w "%{http_code}" -o "$output_file" \
       -H "Accept: application/vnd.github+json" \
       -H "X-GitHub-Api-Version: 2022-11-28" \
       "${header_args[@]}" \
-      "$url" 2>/dev/null) || true
+      "$url" 2>/dev/null || echo "000")
 
     case "$http_code" in
     200)
       return 0
       ;;
-    401)
-      msg_error "GitHub API authentication failed (HTTP 401)."
-      if [[ -n "${GITHUB_TOKEN:-}" ]]; then
-        msg_error "Your GITHUB_TOKEN appears to be invalid or expired."
-      else
-        msg_error "The repository may require authentication. Try: export GITHUB_TOKEN=\"ghp_your_token\""
-      fi
-      return 1
-      ;;
     403)
       # Rate limit - check if we can retry
       if [[ $attempt -lt $max_retries ]]; then
@@ -813,22 +801,11 @@ github_api_call() {
         retry_delay=$((retry_delay * 2))
         continue
       fi
-      msg_error "GitHub API rate limit exceeded (HTTP 403)."
+      msg_error "GitHub API rate limit exceeded. Set GITHUB_TOKEN to increase limits."
-      msg_error "To increase the limit, export a GitHub token before running the script:"
-      msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
       return 1
       ;;
     404)
-      msg_error "GitHub repository or release not found (HTTP 404): $url"
+      msg_error "GitHub API endpoint not found: $url"
-      return 1
-      ;;
-    000 | "")
-      if [[ $attempt -lt $max_retries ]]; then
-        sleep "$retry_delay"
-        continue
-      fi
-      msg_error "GitHub API connection failed (no response)."
-      msg_error "Check your network/DNS: curl -sSL https://api.github.com/rate_limit"
       return 1
       ;;
     *)
@@ -836,13 +813,12 @@ github_api_call() {
         sleep "$retry_delay"
         continue
       fi
-      msg_error "GitHub API call failed (HTTP $http_code)."
+      msg_error "GitHub API call failed with HTTP $http_code"
       return 1
       ;;
     esac
   done
 
-  msg_error "GitHub API call failed after ${max_retries} attempts: ${url}"
   return 1
 }
 
@@ -857,18 +833,14 @@ codeberg_api_call() {
 
   for attempt in $(seq 1 $max_retries); do
     local http_code
-    http_code=$(curl -sSL -w "%{http_code}" -o "$output_file" \
+    http_code=$(curl -fsSL -w "%{http_code}" -o "$output_file" \
       -H "Accept: application/json" \
-      "$url" 2>/dev/null) || true
+      "$url" 2>/dev/null || echo "000")
 
     case "$http_code" in
     200)
       return 0
       ;;
-    401)
-      msg_error "Codeberg API authentication failed (HTTP 401)."
-      return 1
-      ;;
     403)
       # Rate limit - retry
       if [[ $attempt -lt $max_retries ]]; then
@@ -877,20 +849,11 @@ codeberg_api_call() {
         retry_delay=$((retry_delay * 2))
         continue
       fi
-      msg_error "Codeberg API rate limit exceeded (HTTP 403)."
+      msg_error "Codeberg API rate limit exceeded."
       return 1
       ;;
     404)
-      msg_error "Codeberg repository or release not found (HTTP 404): $url"
+      msg_error "Codeberg API endpoint not found: $url"
-      return 1
-      ;;
-    000 | "")
-      if [[ $attempt -lt $max_retries ]]; then
-        sleep "$retry_delay"
-        continue
-      fi
-      msg_error "Codeberg API connection failed (no response)."
-      msg_error "Check your network/DNS: curl -sSL https://codeberg.org"
       return 1
       ;;
     *)
@@ -898,13 +861,12 @@ codeberg_api_call() {
         sleep "$retry_delay"
         continue
       fi
-      msg_error "Codeberg API call failed (HTTP $http_code)."
+      msg_error "Codeberg API call failed with HTTP $http_code"
       return 1
       ;;
     esac
   done
 
-  msg_error "Codeberg API call failed after ${max_retries} attempts: ${url}"
   return 1
 }
 
@@ -1374,9 +1336,7 @@ setup_deb822_repo() {
     [[ -n "$enabled" ]] && echo "Enabled: $enabled"
   } >/etc/apt/sources.list.d/${name}.sources
 
-  $STD apt update || {
+  $STD apt update
-    msg_warn "apt update failed after adding repository: ${name}"
-  }
 }
 
 # ------------------------------------------------------------------------------
@@ -1384,16 +1344,12 @@ setup_deb822_repo() {
 # ------------------------------------------------------------------------------
 hold_package_version() {
   local package="$1"
-  $STD apt-mark hold "$package" || {
+  $STD apt-mark hold "$package"
-    msg_warn "Failed to hold package version: ${package}"
-  }
 }
 
 unhold_package_version() {
   local package="$1"
-  $STD apt-mark unhold "$package" || {
+  $STD apt-mark unhold "$package"
-    msg_warn "Failed to unhold package version: ${package}"
-  }
 }
 
 # ------------------------------------------------------------------------------
@@ -1423,7 +1379,6 @@ enable_and_start_service() {
   local service="$1"
 
   if ! systemctl enable "$service" &>/dev/null; then
-    msg_error "Failed to enable service: $service"
     return 1
   fi
 
@@ -1466,7 +1421,6 @@ extract_version_from_json() {
   version=$(echo "$json" | jq -r ".${field} // empty")
 
   if [[ -z "$version" ]]; then
-    msg_warn "JSON field '${field}' is empty in API response"
     return 1
   fi
 
@@ -1486,7 +1440,6 @@ get_latest_github_release() {
   local temp_file=$(mktemp)
 
   if ! github_api_call "https://api.github.com/repos/${repo}/releases/latest" "$temp_file"; then
-    msg_warn "GitHub API call failed for ${repo}"
     rm -f "$temp_file"
     return 1
   fi
@@ -1496,7 +1449,6 @@ get_latest_github_release() {
   rm -f "$temp_file"
 
   if [[ -z "$version" ]]; then
-    msg_error "Could not determine latest version for ${repo}"
     return 1
   fi
 
@@ -1513,7 +1465,6 @@ get_latest_codeberg_release() {
 
   # Codeberg API: get all releases and pick the first non-draft/non-prerelease
   if ! codeberg_api_call "https://codeberg.org/api/v1/repos/${repo}/releases" "$temp_file"; then
-    msg_warn "Codeberg API call failed for ${repo}"
     rm -f "$temp_file"
     return 1
   fi
@@ -1529,7 +1480,6 @@ get_latest_codeberg_release() {
   rm -f "$temp_file"
 
   if [[ -z "$version" ]]; then
-    msg_error "Could not determine latest version for ${repo}"
     return 1
   fi
 
@@ -1617,34 +1567,13 @@ get_latest_gh_tag() {
     "${header_args[@]}" \
     "https://api.github.com/repos/${repo}/tags?per_page=100" 2>/dev/null) || true
 
-  if [[ "$http_code" == "401" ]]; then
-    msg_error "GitHub API authentication failed (HTTP 401)."
-    if [[ -n "${GITHUB_TOKEN:-}" ]]; then
-      msg_error "Your GITHUB_TOKEN appears to be invalid or expired."
-    else
-      msg_error "The repository may require authentication. Try: export GITHUB_TOKEN=\"ghp_your_token\""
-    fi
-    rm -f /tmp/gh_tags.json
-    return 1
-  fi
-
   if [[ "$http_code" == "403" ]]; then
-    msg_error "GitHub API rate limit exceeded (HTTP 403)."
+    msg_warn "GitHub API rate limit exceeded while fetching tags for ${repo}"
-    msg_error "To increase the limit, export a GitHub token before running the script:"
-    msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
-    rm -f /tmp/gh_tags.json
-    return 1
-  fi
-
-  if [[ "$http_code" == "000" || -z "$http_code" ]]; then
-    msg_error "GitHub API connection failed (no response)."
-    msg_error "Check your network/DNS: curl -sSL https://api.github.com/rate_limit"
     rm -f /tmp/gh_tags.json
     return 1
   fi
 
   if [[ "$http_code" != "200" ]] || [[ ! -s /tmp/gh_tags.json ]]; then
-    msg_error "Unable to fetch tags for ${repo} (HTTP ${http_code})"
     rm -f /tmp/gh_tags.json
     return 1
   fi
@@ -1661,7 +1590,6 @@ get_latest_gh_tag() {
     sort -V | tail -n1)
 
   if [[ -z "$latest" ]]; then
-    msg_warn "No matching tags found for ${repo}${prefix:+ (prefix: $prefix)}"
     return 1
   fi
 
@@ -1731,15 +1659,6 @@ check_for_gh_release() {
 
     if [[ "$http_code" == "200" ]] && [[ -s /tmp/gh_check.json ]]; then
       releases_json="[$(</tmp/gh_check.json)]"
-    elif [[ "$http_code" == "401" ]]; then
-      msg_error "GitHub API authentication failed (HTTP 401)."
-      if [[ -n "${GITHUB_TOKEN:-}" ]]; then
-        msg_error "Your GITHUB_TOKEN appears to be invalid or expired."
-      else
-        msg_error "The repository may require authentication. Try: export GITHUB_TOKEN=\"ghp_your_token\""
-      fi
-      rm -f /tmp/gh_check.json
-      return 1
     elif [[ "$http_code" == "403" ]]; then
       msg_error "GitHub API rate limit exceeded (HTTP 403)."
       msg_error "To increase the limit, export a GitHub token before running the script:"
@@ -1760,26 +1679,12 @@ check_for_gh_release() {
 
     if [[ "$http_code" == "200" ]] && [[ -s /tmp/gh_check.json ]]; then
       releases_json=$(</tmp/gh_check.json)
-    elif [[ "$http_code" == "401" ]]; then
-      msg_error "GitHub API authentication failed (HTTP 401)."
-      if [[ -n "${GITHUB_TOKEN:-}" ]]; then
-        msg_error "Your GITHUB_TOKEN appears to be invalid or expired."
-      else
-        msg_error "The repository may require authentication. Try: export GITHUB_TOKEN=\"ghp_your_token\""
-      fi
-      rm -f /tmp/gh_check.json
-      return 1
     elif [[ "$http_code" == "403" ]]; then
       msg_error "GitHub API rate limit exceeded (HTTP 403)."
       msg_error "To increase the limit, export a GitHub token before running the script:"
       msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
       rm -f /tmp/gh_check.json
       return 1
-    elif [[ "$http_code" == "000" || -z "$http_code" ]]; then
-      msg_error "GitHub API connection failed (no response)."
-      msg_error "Check your network/DNS: curl -sSL https://api.github.com/rate_limit"
-      rm -f /tmp/gh_check.json
-      return 1
     else
       msg_error "Unable to fetch releases for ${app} (HTTP ${http_code})"
       rm -f /tmp/gh_check.json
@@ -1897,7 +1802,7 @@ check_for_codeberg_release() {
   releases_json=$(curl -fsSL --max-time 20 \
     -H 'Accept: application/json' \
     "https://codeberg.org/api/v1/repos/${source}/releases" 2>/dev/null) || {
-    msg_error "Unable to fetch releases for ${app} (codeberg.org/api/v1/repos/${source}/releases)"
+    msg_error "Unable to fetch releases for ${app}"
     return 1
   }
 
@@ -2030,12 +1935,12 @@ function download_with_progress() {
 
   if [[ -z "$content_length" ]]; then
     if ! curl -fL# -o "$output" "$url"; then
-      msg_error "Download failed: $url"
+      msg_error "Download failed"
       return 1
     fi
   else
     if ! curl -fsSL "$url" | pv -s "$content_length" >"$output"; then
-      msg_error "Download failed: $url"
+      msg_error "Download failed"
       return 1
     fi
   fi
@@ -2578,10 +2483,7 @@ _gh_scan_older_releases() {
     -H 'Accept: application/vnd.github+json' \
     -H 'X-GitHub-Api-Version: 2022-11-28' \
     "${header[@]}" \
-    "https://api.github.com/repos/${repo}/releases?per_page=15" 2>/dev/null) || {
+    "https://api.github.com/repos/${repo}/releases?per_page=15" 2>/dev/null) || return 1
-    msg_warn "Failed to fetch older releases for ${repo}"
-    return 1
-  }
 
   local count
   count=$(echo "$releases_list" | jq 'length')
@@ -2706,22 +2608,12 @@ function fetch_and_deploy_gh_release() {
   done
 
   if ! $success; then
-    if [[ "$http_code" == "401" ]]; then
+    if [[ "$http_code" == "403" ]]; then
-      msg_error "GitHub API authentication failed (HTTP 401)."
-      if [[ -n "${GITHUB_TOKEN:-}" ]]; then
-        msg_error "Your GITHUB_TOKEN appears to be invalid or expired."
-      else
-        msg_error "The repository may require authentication. Try: export GITHUB_TOKEN=\"ghp_your_token\""
-      fi
-    elif [[ "$http_code" == "403" ]]; then
       msg_error "GitHub API rate limit exceeded (HTTP 403)."
       msg_error "To increase the limit, export a GitHub token before running the script:"
       msg_error "  export GITHUB_TOKEN=\"ghp_your_token_here\""
-    elif [[ "$http_code" == "000" || -z "$http_code" ]]; then
-      msg_error "GitHub API connection failed (no response)."
-      msg_error "Check your network/DNS: curl -sSL https://api.github.com/rate_limit"
     else
-      msg_error "Failed to fetch release metadata (HTTP $http_code)"
+      msg_error "Failed to fetch release metadata from $api_url after $max_retries attempts (HTTP $http_code)"
     fi
     return 1
   fi
@@ -3123,9 +3015,7 @@ function setup_composer() {
   # Scenario 1: Already installed - just self-update
   if [[ -n "$INSTALLED_VERSION" ]]; then
     msg_info "Update Composer $INSTALLED_VERSION"
-    $STD "$COMPOSER_BIN" self-update --no-interaction || {
+    $STD "$COMPOSER_BIN" self-update --no-interaction || true
-      msg_warn "Composer self-update failed, continuing with current version"
-    }
     local UPDATED_VERSION
     UPDATED_VERSION=$("$COMPOSER_BIN" --version 2>/dev/null | awk '{print $3}')
     cache_installed_version "composer" "$UPDATED_VERSION"
@@ -3161,9 +3051,7 @@ function setup_composer() {
   fi
 
   chmod +x "$COMPOSER_BIN"
-  $STD "$COMPOSER_BIN" self-update --no-interaction || {
+  $STD "$COMPOSER_BIN" self-update --no-interaction || true
-    msg_warn "Composer self-update failed after fresh install"
-  }
 
   local FINAL_VERSION
   FINAL_VERSION=$("$COMPOSER_BIN" --version 2>/dev/null | awk '{print $3}')
@@ -4260,18 +4148,6 @@ NVIDIA_PIN
   # VA-API for hybrid setups (Intel + NVIDIA)
   $STD apt-get -y install va-driver-all vainfo 2>/dev/null || true
 
-  # Fix GLX alternatives: nvidia-alternative diverts mesa libs but in LXC
-  # containers the nvidia GLX libs are typically missing, leaving libGL.so.1
-  # pointing nowhere. Fall back to mesa if nvidia GLX dir is empty/missing.
-  if command -v update-glx &>/dev/null; then
-    local nvidia_glx_dir="/usr/lib/nvidia"
-    if [[ ! -f "${nvidia_glx_dir}/libGL.so.1" ]] && [[ -d /usr/lib/mesa-diverted ]]; then
-      msg_info "NVIDIA GLX libs missing in container - falling back to mesa"
-      $STD update-glx --set glx /usr/lib/mesa-diverted 2>/dev/null || true
-      ldconfig 2>/dev/null || true
-    fi
-  fi
-
   msg_ok "NVIDIA GPU configured"
 }
 
@@ -5246,9 +5122,7 @@ function setup_mysql() {
     ensure_apt_working || return 1
 
     # Perform upgrade with retry logic (non-fatal if fails)
-    upgrade_packages_with_retry "mysql-server" "mysql-client" || {
+    upgrade_packages_with_retry "mysql-server" "mysql-client" || true
-      msg_warn "MySQL package upgrade had issues, continuing with current version"
-    }
 
     cache_installed_version "mysql" "$MYSQL_VERSION"
     msg_ok "Update MySQL $MYSQL_VERSION"
@@ -5438,9 +5312,7 @@ function setup_nodejs() {
     }
 
     # Force APT cache refresh after repository setup
-    $STD apt update || {
+    $STD apt update
-      msg_warn "apt update failed after Node.js repository setup"
-    }
 
     ensure_dependencies curl ca-certificates gnupg
 
@@ -5683,10 +5555,7 @@ EOF
   if [[ "$DISTRO_ID" == "ubuntu" ]]; then
     # Ubuntu: Use ondrej/php PPA
     msg_info "Adding ondrej/php PPA for Ubuntu"
-    $STD apt install -y software-properties-common || {
+    $STD apt install -y software-properties-common
-      msg_error "Failed to install software-properties-common"
-      return 1
-    }
     # Don't use $STD for add-apt-repository as it uses background processes
     add-apt-repository -y ppa:ondrej/php >>"$(get_active_logfile)" 2>&1
   else
@@ -5697,9 +5566,7 @@ EOF
     }
   fi
   ensure_apt_working || return 1
-  $STD apt update || {
+  $STD apt update
-    msg_warn "apt update failed after PHP repository setup"
-  }
 
   # Get available PHP version from repository
   local AVAILABLE_PHP_VERSION=""
@@ -5994,9 +5861,7 @@ function setup_postgresql() {
     }
   fi
 
-  $STD systemctl enable --now postgresql 2>/dev/null || {
+  $STD systemctl enable --now postgresql 2>/dev/null || true
-    msg_warn "Failed to enable/start PostgreSQL service"
-  }
 
   # Add PostgreSQL binaries to PATH
   if ! grep -q '/usr/lib/postgresql' /etc/environment 2>/dev/null; then
@@ -6010,9 +5875,7 @@ function setup_postgresql() {
   if [[ -n "$PG_MODULES" ]]; then
     IFS=',' read -ra MODULES <<<"$PG_MODULES"
     for module in "${MODULES[@]}"; do
-      $STD apt install -y "postgresql-${PG_VERSION}-${module}" 2>/dev/null || {
+      $STD apt install -y "postgresql-${PG_VERSION}-${module}" 2>/dev/null || true
-        msg_warn "Failed to install PostgreSQL module: ${module}"
-      }
     done
   fi
 }
@@ -6671,9 +6534,7 @@ function setup_clickhouse() {
     ensure_apt_working || return 1
 
     # Perform upgrade with retry logic (non-fatal if fails)
-    upgrade_packages_with_retry "clickhouse-server" "clickhouse-client" || {
+    upgrade_packages_with_retry "clickhouse-server" "clickhouse-client" || true
-      msg_warn "ClickHouse package upgrade had issues, continuing with current version"
-    }
     cache_installed_version "clickhouse" "$CLICKHOUSE_VERSION"
     msg_ok "Update ClickHouse $CLICKHOUSE_VERSION"
     return 0
@@ -6808,9 +6669,7 @@ function setup_rust() {
     }
 
     # Update to latest patch version
-    $STD rustup update "$RUST_TOOLCHAIN" </dev/null || {
+    $STD rustup update "$RUST_TOOLCHAIN" </dev/null || true
-      msg_warn "Rust toolchain update had issues"
-    }
 
     # Ensure PATH is updated for current shell session
     export PATH="$CARGO_BIN:$PATH"
@@ -7212,10 +7071,7 @@ function setup_docker() {
         docker-ce-cli \
         containerd.io \
         docker-buildx-plugin \
-        docker-compose-plugin || {
+        docker-compose-plugin
-        msg_error "Failed to update Docker packages"
-        return 1
-      }
       msg_ok "Updated Docker to $DOCKER_LATEST_VERSION"
     else
       msg_ok "Docker is up-to-date ($DOCKER_CURRENT_VERSION)"
@@ -7227,10 +7083,7 @@ function setup_docker() {
       docker-ce-cli \
       containerd.io \
       docker-buildx-plugin \
-      docker-compose-plugin || {
+      docker-compose-plugin
-      msg_error "Failed to install Docker packages"
-      return 1
-    }
 
     DOCKER_CURRENT_VERSION=$(docker --version | grep -oP '\d+\.\d+\.\d+' | head -1)
     msg_ok "Installed Docker $DOCKER_CURRENT_VERSION"

tools/addon/add-tailscale-lxc.sh

@@ -76,90 +76,70 @@ grep -q "lxc.mount.entry: /dev/net/tun" "$CTID_CONFIG_PATH" || echo "lxc.mount.e
 header_info
 msg_info "Installing Tailscale in CT $CTID"
 
-pct exec "$CTID" -- sh -c '
+pct exec "$CTID" -- bash -c '
 set -e
+export DEBIAN_FRONTEND=noninteractive
 
-# Detect OS inside container
+# Source os-release properly (handles quoted values)
-if [ -f /etc/alpine-release ]; then
+source /etc/os-release
-  # ── Alpine Linux ──
-  echo "[INFO] Alpine Linux detected, installing Tailscale via apk..."
 
-  # Enable community repo if not already enabled
+# Fallback if DNS is poisoned or blocked
-  if ! grep -q "^[^#].*community" /etc/apk/repositories 2>/dev/null; then
+ORIG_RESOLV="/etc/resolv.conf"
-    ALPINE_VERSION=$(cat /etc/alpine-release | cut -d. -f1,2)
+BACKUP_RESOLV="/tmp/resolv.conf.backup"
-    echo "https://dl-cdn.alpinelinux.org/alpine/v${ALPINE_VERSION}/community" >> /etc/apk/repositories
-  fi
 
-  apk update
+# Check DNS resolution using multiple methods (dig may not be installed)
-  apk add --no-cache tailscale
+dns_check_failed=true
-
+if command -v dig &>/dev/null; then
-  # Enable and start Tailscale service
+  if dig +short pkgs.tailscale.com 2>/dev/null | grep -qvE "^127\.|^0\.0\.0\.0$|^$"; then
-  rc-update add tailscale default 2>/dev/null || true
-  rc-service tailscale start 2>/dev/null || true
-
-else
-  # ── Debian / Ubuntu ──
-  export DEBIAN_FRONTEND=noninteractive
-
-  # Source os-release properly (handles quoted values)
-  . /etc/os-release
-
-  # Fallback if DNS is poisoned or blocked
-  ORIG_RESOLV="/etc/resolv.conf"
-  BACKUP_RESOLV="/tmp/resolv.conf.backup"
-
-  # Check DNS resolution using multiple methods (dig may not be installed)
-  dns_check_failed=true
-  if command -v dig >/dev/null 2>&1; then
-    if dig +short pkgs.tailscale.com 2>/dev/null | grep -qvE "^127\.|^0\.0\.0\.0$|^$"; then
-      dns_check_failed=false
-    fi
-  elif command -v host >/dev/null 2>&1; then
-    if host pkgs.tailscale.com 2>/dev/null | grep -q "has address"; then
-      dns_check_failed=false
-    fi
-  elif command -v nslookup >/dev/null 2>&1; then
-    if nslookup pkgs.tailscale.com 2>/dev/null | grep -q "Address:"; then
-      dns_check_failed=false
-    fi
-  elif command -v getent >/dev/null 2>&1; then
-    if getent hosts pkgs.tailscale.com >/dev/null 2>&1; then
-      dns_check_failed=false
-    fi
-  else
-    # No DNS tools available, try curl directly and assume DNS works
     dns_check_failed=false
   fi
-
+elif command -v host &>/dev/null; then
-  if $dns_check_failed; then
+  if host pkgs.tailscale.com 2>/dev/null | grep -q "has address"; then
-    echo "[INFO] DNS resolution for pkgs.tailscale.com failed (blocked or redirected)."
+    dns_check_failed=false
-    echo "[INFO] Temporarily overriding /etc/resolv.conf with Cloudflare DNS (1.1.1.1)"
-    cp "$ORIG_RESOLV" "$BACKUP_RESOLV"
-    echo "nameserver 1.1.1.1" >"$ORIG_RESOLV"
   fi
-
+elif command -v nslookup &>/dev/null; then
-  if ! command -v curl >/dev/null 2>&1; then
+  if nslookup pkgs.tailscale.com 2>/dev/null | grep -q "Address:"; then
-    echo "[INFO] curl not found, installing..."
+    dns_check_failed=false
-    apt-get update -qq
-    apt-get install -y curl >/dev/null
   fi
+elif command -v getent &>/dev/null; then
+  if getent hosts pkgs.tailscale.com &>/dev/null; then
+    dns_check_failed=false
+  fi
+else
+  # No DNS tools available, try curl directly and assume DNS works
+  dns_check_failed=false
+fi
 
-  # Ensure keyrings directory exists
+if $dns_check_failed; then
-  mkdir -p /usr/share/keyrings
+  echo "[INFO] DNS resolution for pkgs.tailscale.com failed (blocked or redirected)."
-
+  echo "[INFO] Temporarily overriding /etc/resolv.conf with Cloudflare DNS (1.1.1.1)"
-  curl -fsSL "https://pkgs.tailscale.com/stable/${ID}/${VERSION_CODENAME}.noarmor.gpg" \
+  cp "$ORIG_RESOLV" "$BACKUP_RESOLV"
-    | tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
+  echo "nameserver 1.1.1.1" >"$ORIG_RESOLV"
-
+fi
-  echo "deb [signed-by=/usr/share/keyrings/tailscale-archive-keyring.gpg] https://pkgs.tailscale.com/stable/${ID} ${VERSION_CODENAME} main" \
-    >/etc/apt/sources.list.d/tailscale.list
 
+if ! command -v curl &>/dev/null; then
+  echo "[INFO] curl not found, installing..."
   apt-get update -qq
-  apt-get install -y tailscale >/dev/null
+ apt update -qq
+ apt install -y curl >/dev/null
+fi
 
-  if [ -f /tmp/resolv.conf.backup ]; then
+# Ensure keyrings directory exists
-    echo "[INFO] Restoring original /etc/resolv.conf"
+mkdir -p /usr/share/keyrings
-    mv /tmp/resolv.conf.backup /etc/resolv.conf
+
-  fi
+curl -fsSL "https://pkgs.tailscale.com/stable/${ID}/${VERSION_CODENAME}.noarmor.gpg" \
+  | tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
+
+echo "deb [signed-by=/usr/share/keyrings/tailscale-archive-keyring.gpg] https://pkgs.tailscale.com/stable/${ID} ${VERSION_CODENAME} main" \
+  >/etc/apt/sources.list.d/tailscale.list
+
+apt-get update -qq
+apt update -qq
+apt install -y tailscale >/dev/null
+
+if [[ -f /tmp/resolv.conf.backup ]]; then
+  echo "[INFO] Restoring original /etc/resolv.conf"
+  mv /tmp/resolv.conf.backup /etc/resolv.conf
 fi
 '
 

tools/addon/adguardhome-sync.sh

@@ -7,12 +7,8 @@
 
 if ! command -v curl &>/dev/null; then
   printf "\r\e[2K%b" '\033[93m Setup Source \033[m' >&2
-  if [[ -f "/etc/alpine-release" ]]; then
+  apt-get update >/dev/null 2>&1
-    apk -U add curl >/dev/null 2>&1
+  apt-get install -y curl >/dev/null 2>&1
-  else
-    apt-get update >/dev/null 2>&1
-    apt-get install -y curl >/dev/null 2>&1
-  fi
 fi
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
@@ -55,7 +51,7 @@ EOF
 # HELPER FUNCTIONS
 # ==============================================================================
 get_ip() {
- ifconfig | grep -v '127.0.0.1' | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -m1 -Eo '([0-9]*\.){3}[0-9]*' || echo "127.0.0.1"
+  hostname -I 2>/dev/null | awk '{print $1}' || echo "127.0.0.1"
 }
 
 # ==============================================================================
@@ -72,16 +68,6 @@ else
   exit 1
 fi
 
-# ==============================================================================
-# DEPENDENCY CHECK
-# ==============================================================================
-if ! command -v jq &>/dev/null; then
-  printf "\r\e[2K%b" '\033[93m Installing jq \033[m' >&2
-  if [[ "$OS" == "Alpine" ]]; then
-    apk -U add jq >/dev/null 2>&1
-  fi
-fi
-
 # ==============================================================================
 # UNINSTALL
 # ==============================================================================

tools/addon/immich-public-proxy.sh

@@ -28,7 +28,7 @@ INSTALL_PATH="/opt/immich-proxy"
 CONFIG_PATH="/opt/immich-proxy/app"
 DEFAULT_PORT=3000
 
-# Initialize all core functions (colors, formatting, icons, $STD mode)
+# Initialize all core functions (colors, formatting, icons, STD mode)
 load_functions
 init_tool_telemetry "" "addon"
 

vm/opnsense-vm.sh

@@ -288,8 +288,8 @@ function default_settings() {
   echo -e "${DGN}Using Hostname: ${BGN}${HN}${CL}"
   echo -e "${DGN}Allocated Cores: ${BGN}${CORE_COUNT}${CL}"
   echo -e "${DGN}Allocated RAM: ${BGN}${RAM_SIZE}${CL}"
-  if ! ip link show "${BRG}" &>/dev/null; then
+  if ! grep -q "^iface ${BRG}" /etc/network/interfaces; then
-    msg_error "Bridge '${BRG}' does not exist"
+    msg_error "Bridge '${BRG}' does not exist in /etc/network/interfaces"
     exit
   else
     echo -e "${DGN}Using LAN Bridge: ${BGN}${BRG}${CL}"
@@ -305,8 +305,8 @@ function default_settings() {
     if [ "$NETWORK_MODE" = "dual" ]; then
       echo -e "${DGN}Network Mode: ${BGN}Dual Interface (Firewall)${CL}"
       echo -e "${DGN}Using WAN MAC Address: ${BGN}${WAN_MAC}${CL}"
-      if ! ip link show "${WAN_BRG}" &>/dev/null; then
+      if ! grep -q "^iface ${WAN_BRG}" /etc/network/interfaces; then
-        msg_error "Bridge '${WAN_BRG}' does not exist"
+        msg_error "Bridge '${WAN_BRG}' does not exist in /etc/network/interfaces"
         exit
       else
         echo -e "${DGN}Using WAN Bridge: ${BGN}${WAN_BRG}${CL}"
@@ -424,8 +424,8 @@ function advanced_settings() {
     if [ -z $BRG ]; then
       BRG="vmbr0"
     fi
-    if ! ip link show "${BRG}" &>/dev/null; then
+    if ! grep -q "^iface ${BRG}" /etc/network/interfaces; then
-      msg_error "Bridge '${BRG}' does not exist"
+      msg_error "Bridge '${BRG}' does not exist in /etc/network/interfaces"
       exit
     fi
     echo -e "${DGN}Using LAN Bridge: ${BGN}$BRG${CL}"
@@ -474,8 +474,8 @@ function advanced_settings() {
     if [ -z $WAN_BRG ]; then
       WAN_BRG="vmbr1"
     fi
-    if ! ip link show "${WAN_BRG}" &>/dev/null; then
+    if ! grep -q "^iface ${WAN_BRG}" /etc/network/interfaces; then
-      msg_error "WAN Bridge '${WAN_BRG}' does not exist"
+      msg_error "WAN Bridge '${WAN_BRG}' does not exist in /etc/network/interfaces"
       exit
     fi
     echo -e "${DGN}Using WAN Bridge: ${BGN}$WAN_BRG${CL}"

vm/truenas-vm.sh

@@ -88,7 +88,7 @@ function truenas_iso_lookup() {
     curl -sL "$BASE_URL" |
       grep -oE 'href="[^"]+\.iso"' |
       sed 's/href="//; s/"$//' |
-      grep -vE '(MASTER|ALPHA)' |
+      grep -vE '(nightly|ALPHA)' |
       grep -E "$year_pattern"
   )