Fix installation command syntax for dependencies

Replace the unreliable openresty.org apt repository with building
OpenResty from source. Uses fetch_and_deploy_gh_release to download
from github.com/openresty/openresty/releases, then compiles locally.

The apt mirror frequently has sync issues (mismatched file sizes/hashes)
causing 'apt update' to fail with exit code 100.

Changes:
- Use fetch_and_deploy_gh_release for OpenResty source download
- Compile with configure/make/make install
- Add build dependencies (libpcre3-dev, libssl-dev, zlib1g-dev)
- Create systemd service unit for source-built OpenResty
- Update script: remove old apt repo, migrate to source build

CHANGELOG.md

@@ -423,14 +423,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-03-21
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Isponsorblocktv: use quoted heredoc to prevent unbound variable error during CLI wrapper creation [@Copilot](https://github.com/Copilot) ([#13146](https://github.com/community-scripts/ProxmoxVE/pull/13146))
-
 ## 2026-03-20
 
 ### 🆕 New Scripts
@@ -441,11 +433,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ### 🚀 Updated Scripts
 
-  - #### 🐞 Bug Fixes
-
-    - Reactive-Resume: add git dependency for v5.0.13+ [@MickLesk](https://github.com/MickLesk) ([#13133](https://github.com/community-scripts/ProxmoxVE/pull/13133))
-    - Scanopy: increase default CPU, RAM, and HDD to prevent OOM during Rust build [@Copilot](https://github.com/Copilot) ([#13130](https://github.com/community-scripts/ProxmoxVE/pull/13130))
-
   - #### ✨ New Features
 
     - Immich: v2.6.1 [@vhsdream](https://github.com/vhsdream) ([#13111](https://github.com/community-scripts/ProxmoxVE/pull/13111))

ct/nginxproxymanager.sh

@@ -154,19 +154,55 @@ EOF
   $STD yarn install --network-timeout 600000
   msg_ok "Initialized Backend"
 
-  msg_info "Updating Certbot"
+  msg_info "Cleaning old OpenResty apt repo"
-  [ -f /etc/apt/trusted.gpg.d/openresty-archive-keyring.gpg ] && rm -f /etc/apt/trusted.gpg.d/openresty-archive-keyring.gpg
+  rm -f /etc/apt/trusted.gpg.d/openresty-archive-keyring.gpg /etc/apt/trusted.gpg.d/openresty.gpg
-  [ -f /etc/apt/sources.list.d/openresty.list ] && rm -f /etc/apt/sources.list.d/openresty.list
+  rm -f /etc/apt/sources.list.d/openresty.list /etc/apt/sources.list.d/openresty.sources
-  [ ! -f /etc/apt/trusted.gpg.d/openresty.gpg ] && curl -fsSL https://openresty.org/package/pubkey.gpg | gpg --dearmor --yes -o /etc/apt/trusted.gpg.d/openresty.gpg
+  if dpkg -l openresty &>/dev/null; then
-  [ ! -f /etc/apt/sources.list.d/openresty.sources ] && cat <<'EOF' >/etc/apt/sources.list.d/openresty.sources
+    $STD apt remove -y openresty
-Types: deb
+    $STD apt autoremove -y
-URIs: http://openresty.org/package/debian/
+  fi
-Suites: bookworm
+  $STD apt install -y build-essential libpcre3-dev libssl-dev zlib1g-dev
-Components: openresty
+  msg_ok "Cleaned old OpenResty apt repo"
-Signed-By: /etc/apt/trusted.gpg.d/openresty.gpg
+
+  CLEAN_INSTALL=1 fetch_and_deploy_gh_release "openresty" "openresty/openresty" "prebuild" "latest" "/opt/openresty" "openresty-*.tar.gz"
+
+  msg_info "Building OpenResty"
+  cd /opt/openresty
+  $STD ./configure \
+    --with-http_v2_module \
+    --with-http_realip_module \
+    --with-http_stub_status_module \
+    --with-http_ssl_module \
+    --with-pcre-jit \
+    --with-stream \
+    --with-stream_ssl_module
+  $STD make -j"$(nproc)"
+  $STD make install
+  rm -rf /opt/openresty
+  if [ ! -f /lib/systemd/system/openresty.service ]; then
+    cat <<'EOF' >/lib/systemd/system/openresty.service
+[Unit]
+Description=The OpenResty Application Platform
+After=syslog.target network-online.target remote-fs.target nss-lookup.target
+Wants=network-online.target
+
+[Service]
+Type=forking
+PIDFile=/usr/local/openresty/nginx/logs/nginx.pid
+ExecStartPre=/usr/local/openresty/nginx/sbin/nginx -t
+ExecStart=/usr/local/openresty/nginx/sbin/nginx
+ExecReload=/bin/kill -s HUP $MAINPID
+ExecStop=/bin/kill -s QUIT $MAINPID
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
 EOF
-  $STD apt update
+    systemctl daemon-reload
-  $STD apt -y install openresty
+  fi
+  msg_ok "Built OpenResty"
+
+  msg_info "Updating Certbot"
   if [ -d /opt/certbot ]; then
     $STD /opt/certbot/bin/pip install --upgrade pip setuptools wheel
     $STD /opt/certbot/bin/pip install --upgrade certbot certbot-dns-cloudflare

ct/reactive-resume.sh

@@ -33,8 +33,6 @@ function update_script() {
     systemctl stop reactive-resume
     msg_ok "Stopped services"
 
-    ensure_dependencies git
-
     cp /opt/reactive-resume/.env /opt/reactive-resume.env.bak
     NODE_VERSION="24" setup_nodejs
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "reactive-resume" "amruthpillai/reactive-resume" "tarball" "latest" "/opt/reactive-resume"

ct/scanopy.sh

@@ -7,9 +7,9 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 
 APP="Scanopy"
 var_tags="${var_tags:-analytics}"
-var_cpu="${var_cpu:-4}"
+var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
+var_ram="${var_ram:-3072}"
-var_disk="${var_disk:-8}"
+var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"

install/isponsorblocktv-install.sh

@@ -42,7 +42,7 @@ systemctl enable -q isponsorblocktv
 msg_ok "Created Service"
 
 msg_info "Creating CLI wrapper"
-cat <<'EOF' >/usr/local/bin/iSponsorBlockTV
+cat <<EOF >/usr/local/bin/iSponsorBlockTV
 #!/usr/bin/env bash
 export iSPBTV_data_dir="/var/lib/isponsorblocktv"
 

install/nginxproxymanager-install.sh

@@ -14,12 +14,14 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt update
+$STD apt install -y \
-$STD apt -y install \
   ca-certificates \
   apache2-utils \
   logrotate \
   build-essential \
+  libpcre3-dev \
+  libssl-dev \
+  zlib1g-dev \
   git
 msg_ok "Installed Dependencies"
 
@@ -39,18 +41,42 @@ $STD /opt/certbot/bin/pip install certbot certbot-dns-cloudflare
 ln -sf /opt/certbot/bin/certbot /usr/local/bin/certbot
 msg_ok "Set up Certbot"
 
-msg_info "Installing Openresty"
+fetch_and_deploy_gh_release "openresty" "openresty/openresty" "prebuild" "latest" "/opt/openresty" "openresty-*.tar.gz"
-curl -fsSL "https://openresty.org/package/pubkey.gpg" | gpg --dearmor -o /etc/apt/trusted.gpg.d/openresty.gpg
+
-cat <<'EOF' >/etc/apt/sources.list.d/openresty.sources
+msg_info "Building OpenResty"
-Types: deb
+cd /opt/openresty
-URIs: http://openresty.org/package/debian/
+$STD ./configure \
-Suites: bookworm
+  --with-http_v2_module \
-Components: openresty
+  --with-http_realip_module \
-Signed-By: /etc/apt/trusted.gpg.d/openresty.gpg
+  --with-http_stub_status_module \
+  --with-http_ssl_module \
+  --with-pcre-jit \
+  --with-stream \
+  --with-stream_ssl_module
+$STD make -j"$(nproc)"
+$STD make install
+rm -rf /opt/openresty
+
+cat <<'EOF' >/lib/systemd/system/openresty.service
+[Unit]
+Description=The OpenResty Application Platform
+After=syslog.target network-online.target remote-fs.target nss-lookup.target
+Wants=network-online.target
+
+[Service]
+Type=forking
+PIDFile=/usr/local/openresty/nginx/logs/nginx.pid
+ExecStartPre=/usr/local/openresty/nginx/sbin/nginx -t
+ExecStart=/usr/local/openresty/nginx/sbin/nginx
+ExecReload=/bin/kill -s HUP $MAINPID
+ExecStop=/bin/kill -s QUIT $MAINPID
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
 EOF
-$STD apt update
+systemctl daemon-reload
-$STD apt -y install openresty
+msg_ok "Built OpenResty"
-msg_ok "Installed Openresty"
 
 NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
 

install/reactive-resume-install.sh

@@ -18,9 +18,7 @@ PG_DB_NAME="reactive_resume" PG_DB_USER="reactive_resume" setup_postgresql_db
 NODE_VERSION="24" setup_nodejs
 
 msg_info "Installing Dependencies"
-$STD apt install -y \
+$STD apt install -y chromium
-  chromium \
-  git
 msg_ok "Installed Dependencies"
 
 fetch_and_deploy_gh_release "reactive-resume" "amruthpillai/reactive-resume" "tarball"