Refactor admin credentials output to use heredoc

CHANGELOG.md

@@ -510,36 +510,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-07-26
 
-### 🆕 New Scripts
-
-  - Satisfactory ([#16023](https://github.com/community-scripts/ProxmoxVE/pull/16023))
-- OmniTools ([#16032](https://github.com/community-scripts/ProxmoxVE/pull/16032))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Apache Tika: Remove software-properties-common from Apache Tika install [@andygrunwald](https://github.com/andygrunwald) ([#16054](https://github.com/community-scripts/ProxmoxVE/pull/16054))
-    - Fix inventree missing db engine (upstream issue / postinstall)  [@MickLesk](https://github.com/MickLesk) ([#16022](https://github.com/community-scripts/ProxmoxVE/pull/16022))
-    - OPNsense VM: answer console password prompt explicitly, add inter-key delay [@MickLesk](https://github.com/MickLesk) ([#16021](https://github.com/community-scripts/ProxmoxVE/pull/16021))
-    - [endurain] add node update to update script [@johanngrobe](https://github.com/johanngrobe) ([#16014](https://github.com/community-scripts/ProxmoxVE/pull/16014))
-
-  - #### 🔧 Refactor
-
-    - Apache Tika: Switch from Debian Bookworm to Debian Trixie and replace manual install of OpenJDK with setup_java [@andygrunwald](https://github.com/andygrunwald) ([#16036](https://github.com/community-scripts/ProxmoxVE/pull/16036))
-
-### 💾 Core
-
-  - #### 🔧 Refactor
-
-    - core: improve OS mismatch message [@MickLesk](https://github.com/MickLesk) ([#16035](https://github.com/community-scripts/ProxmoxVE/pull/16035))
-
-### 🧰 Tools
-
-  - #### 🔧 Refactor
-
-    - Improve command description for disabling pve-enterprise repo [@Marcondiro](https://github.com/Marcondiro) ([#16020](https://github.com/community-scripts/ProxmoxVE/pull/16020))
-
 ## 2026-07-25
 
 ### 🚀 Updated Scripts

ct/apache-tika.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-10}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
+var_version="${var_version:-12}"
 var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"
 

ct/endurain.sh

@@ -34,8 +34,6 @@ function update_script() {
     systemctl stop endurain
     msg_ok "Stopped Service"
 
-    NODE_VERSION="24" setup_nodejs
-
     create_backup /opt/endurain/.env /opt/endurain/frontend/dist/env.js
     CLEAN_INSTALL=1 fetch_and_deploy_codeberg_release "endurain" "endurain-project/endurain" "tarball" "latest" "/opt/endurain"
 

ct/headers/mastodon

@@ -0,0 +1,6 @@
+    __  ___           __            __          
+   /  |/  /___ ______/ /_____  ____/ /___  ____ 
+  / /|_/ / __ `/ ___/ __/ __ \/ __  / __ \/ __ \
+ / /  / / /_/ (__  ) /_/ /_/ / /_/ / /_/ / / / /
+/_/  /_/\__,_/____/\__/\____/\__,_/\____/_/ /_/ 
+                                                

ct/headers/omnitools

@@ -1,6 +0,0 @@
-   ____                  _ ______            __    
-  / __ \____ ___  ____  (_)_  __/___  ____  / /____
- / / / / __ `__ \/ __ \/ / / / / __ \/ __ \/ / ___/
-/ /_/ / / / / / / / / / / / / / /_/ / /_/ / (__  ) 
-\____/_/ /_/ /_/_/ /_/_/ /_/  \____/\____/_/____/  
-                                                   

ct/headers/satisfactory

@@ -1,6 +0,0 @@
-   _____       __  _      ____           __                  
-  / ___/____ _/ /_(_)____/ __/___ ______/ /_____  _______  __
-  \__ \/ __ `/ __/ / ___/ /_/ __ `/ ___/ __/ __ \/ ___/ / / /
- ___/ / /_/ / /_/ (__  ) __/ /_/ / /__/ /_/ /_/ / /  / /_/ / 
-/____/\__,_/\__/_/____/_/  \__,_/\___/\__/\____/_/   \__, /  
-                                                    /____/   

ct/mastodon.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/mastodon/mastodon
+
+APP="Mastodon"
+var_tags="${var_tags:-social;fediverse;activitypub}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/mastodon ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "mastodon" "mastodon/mastodon"; then
+    msg_info "Stopping Services"
+    systemctl stop mastodon-web mastodon-sidekiq mastodon-streaming
+    msg_ok "Stopped Services"
+
+    create_backup /opt/mastodon/public/system /opt/mastodon/.env.production
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
+    sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
+    sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
+
+    msg_info "Installing Ruby Dependencies"
+    cd /opt/mastodon
+    export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
+    $STD bundle config set --local without 'development test'
+    $STD bundle config set --local deployment 'true'
+    $STD bundle install -j"$(nproc)"
+    msg_ok "Installed Ruby Dependencies"
+
+    msg_info "Installing Node.js Dependencies"
+    $STD yarn install
+    msg_ok "Installed Node.js Dependencies"
+
+    restore_backup
+
+    msg_info "Running Database Migrations"
+    RAILS_ENV=production $STD bundle exec rails db:migrate
+    msg_ok "Ran Database Migrations"
+
+    msg_info "Precompiling Assets"
+    RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
+    msg_ok "Precompiled Assets"
+
+    msg_info "Starting Services"
+    systemctl start mastodon-web mastodon-sidekiq mastodon-streaming
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/omnitools.sh

@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Majiiin
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/iib0011/omni-tools
-
-APP="OmniTools"
-var_tags="${var_tags:-utilities;tools;converter}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/omnitools ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  NODE_VERSION="24" setup_nodejs
-
-  if check_for_gh_release "omnitools" "iib0011/omni-tools"; then
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "omnitools" "iib0011/omni-tools" "tarball"
-
-    msg_info "Building OmniTools"
-    cd /opt/omnitools
-    export HUSKY=0
-    $STD npm ci
-    $STD npm run build
-    msg_ok "Built OmniTools"
-
-    msg_info "Publishing Web Assets"
-    rm -rf /usr/share/nginx/html
-    mkdir -p /usr/share/nginx/html
-    cp -a /opt/omnitools/dist/. /usr/share/nginx/html/
-    rm -rf /opt/omnitools/node_modules
-    systemctl reload nginx
-    msg_ok "Published Web Assets"
-    msg_ok "Updated successfully!"
-  fi
-
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/satisfactory.sh

@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: n8flx
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.satisfactorygame.com/
-
-APP="Satisfactory"
-var_tags="${var_tags:-gaming;server}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -x /opt/steamcmd/steamcmd.sh || ! -d /opt/satisfactory/server ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Stopping Satisfactory"
-  systemctl stop satisfactory
-  msg_ok "Stopped Satisfactory"
-
-  create_backup /home/steam/.config/Epic/FactoryGame/Saved
-
-  msg_info "Updating Satisfactory"
-  if $STD runuser -u steam -- /opt/steamcmd/steamcmd.sh \
-    +force_install_dir /opt/satisfactory/server \
-    +login anonymous \
-    +app_update 1690800 -beta public validate \
-    +quit; then
-    msg_ok "Updated Satisfactory"
-  else
-    restore_backup
-    systemctl start satisfactory
-    msg_error "Failed to update Satisfactory"
-    exit 1
-  fi
-
-  restore_backup
-
-  msg_info "Starting Satisfactory"
-  systemctl start satisfactory
-  msg_ok "Started Satisfactory"
-  msg_ok "Updated Successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Add the server in Satisfactory Server Manager:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}${IP}:7777${CL}"
-echo -e "${INFO}${YW} Required ports:${CL} ${BGN}7777 TCP/UDP and 8888 TCP${CL}"

install/apache-tika-install.sh

@@ -15,6 +15,7 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
+  software-properties-common \
   gdal-bin \
   tesseract-ocr \
   tesseract-ocr-eng \
@@ -32,7 +33,10 @@ $STD apt-get install -y \
   cabextract
 msg_ok "Installed Dependencies"
 
-JAVA_VERSION="21" setup_java
+msg_info "Setup OpenJDK"
+$STD apt-get install -y \
+  openjdk-17-jre-headless
+msg_ok "Setup OpenJDK"
 
 msg_info "Installing Apache Tika"
 mkdir -p /opt/apache-tika

install/inventree-install.sh

@@ -30,11 +30,6 @@ msg_ok "Installed InvenTree"
 msg_info "Configuring InvenTree"
 if [[ -f /etc/inventree/config.yaml ]]; then
   sed -i "s|site_url:.*|site_url: http://${LOCAL_IP}|" /etc/inventree/config.yaml
-  if ! grep -q "^  engine:" /etc/inventree/config.yaml; then
-    mkdir -p /home/inventree/data
-    chown inventree:inventree /home/inventree/data
-    sed -i "/^database:$/a\\  engine: sqlite3\\n  name: '/home/inventree/data/database.sqlite3'" /etc/inventree/config.yaml
-  fi
 fi
 $STD inventree run invoke update
 msg_ok "Configured InvenTree"

install/mastodon-install.sh

@@ -0,0 +1,275 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/mastodon/mastodon
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  git \
+  imagemagick \
+  libvips-tools \
+  libpq-dev \
+  libxslt1-dev \
+  file \
+  protobuf-compiler \
+  pkg-config \
+  autoconf \
+  bison \
+  build-essential \
+  libssl-dev \
+  libyaml-dev \
+  libreadline-dev \
+  zlib1g-dev \
+  libffi-dev \
+  libgdbm-dev \
+  libidn-dev \
+  libicu-dev \
+  libjemalloc-dev \
+  libjemalloc2 \
+  redis-server \
+  nginx
+msg_ok "Installed Dependencies"
+
+setup_ffmpeg
+NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
+$STD corepack enable
+
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="mastodon_production" PG_DB_USER="mastodon" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
+$STD sudo -u postgres psql -c "ALTER USER mastodon CREATEDB;"
+
+RUBY_VERSION="4.0.5" RUBY_INSTALL_RAILS="false" setup_ruby
+export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
+
+fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
+sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
+sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
+
+msg_info "Installing Ruby Dependencies"
+cd /opt/mastodon
+$STD bundle config set --local without 'development test'
+$STD bundle config set --local deployment 'true'
+$STD bundle install -j"$(nproc)"
+msg_ok "Installed Ruby Dependencies"
+
+msg_info "Installing Node.js Dependencies"
+$STD yarn install
+msg_ok "Installed Node.js Dependencies"
+
+msg_info "Configuring Mastodon"
+SECRET_KEY_BASE=$(RAILS_ENV=production bundle exec rails secret)
+OTP_SECRET=$(RAILS_ENV=production bundle exec rails secret)
+
+VAPID_OUTPUT=$(RAILS_ENV=production bundle exec rails mastodon:webpush:generate_vapid_key 2>/dev/null)
+VAPID_PRIVATE_KEY=$(echo "$VAPID_OUTPUT" | grep "^VAPID_PRIVATE_KEY=" | cut -d= -f2-)
+VAPID_PUBLIC_KEY=$(echo "$VAPID_OUTPUT" | grep "^VAPID_PUBLIC_KEY=" | cut -d= -f2-)
+
+ENCRYPT_OUTPUT=$(RAILS_ENV=production bundle exec rails db:encryption:init 2>/dev/null)
+AR_DET_KEY=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=" | cut -d= -f2-)
+AR_SALT=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=" | cut -d= -f2-)
+AR_PRIMARY=$(echo "$ENCRYPT_OUTPUT" | grep "^ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=" | cut -d= -f2-)
+
+mkdir -p /opt/mastodon/public/system
+cat <<EOF >/opt/mastodon/.env.production
+LOCAL_DOMAIN=${LOCAL_IP}
+LOCAL_HTTPS=false
+REDIS_HOST=127.0.0.1
+REDIS_PORT=6379
+DB_HOST=127.0.0.1
+DB_USER=mastodon
+DB_NAME=mastodon_production
+DB_PASS=${PG_DB_PASS}
+DB_PORT=5432
+RAILS_ENV=production
+NODE_ENV=production
+RAILS_SERVE_STATIC_FILES=true
+BIND=0.0.0.0
+SECRET_KEY_BASE=${SECRET_KEY_BASE}
+OTP_SECRET=${OTP_SECRET}
+VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY}
+VAPID_PUBLIC_KEY=${VAPID_PUBLIC_KEY}
+ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=${AR_DET_KEY}
+ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=${AR_SALT}
+ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=${AR_PRIMARY}
+SMTP_SERVER=
+SMTP_PORT=587
+SMTP_FROM_ADDRESS=notifications@${LOCAL_IP}
+EOF
+msg_ok "Configured Mastodon"
+
+msg_info "Setting up Database"
+RAILS_ENV=production $STD bundle exec rails db:setup
+msg_ok "Set up Database"
+
+msg_info "Precompiling Assets (Patience)"
+RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
+msg_ok "Precompiled Assets"
+
+msg_info "Creating Admin Account"
+if ! ADMIN_OUTPUT=$(EMAIL_DOMAIN_ALLOWLIST="${LOCAL_IP}" RAILS_ENV=production bundle exec bin/tootctl accounts create admin \
+  --email "admin@${LOCAL_IP}" \
+  --confirmed \
+  --approve \
+  --role Owner); then
+  msg_error "Failed to create Mastodon admin account"
+  exit 1
+fi
+ADMIN_PASS=$(echo "$ADMIN_OUTPUT" | sed -n 's/^New password: //p')
+if [[ -z "$ADMIN_PASS" ]]; then
+  msg_error "Failed to retrieve Mastodon admin password"
+  exit 1
+fi
+RAILS_ENV=production $STD bundle exec bin/tootctl settings registrations approved
+cat <<EOF > ~/mastodon.creds
+  Mastodon Admin Credentials
+  URL:      http://${LOCAL_IP}
+  Email:    admin@${LOCAL_IP}
+  Password: ${ADMIN_PASS}
+EOF
+msg_ok "Created Admin Account"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/mastodon-web.service
+[Unit]
+Description=mastodon-web
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/mastodon
+Environment=RAILS_ENV=production
+Environment=PORT=3000
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/root/.rbenv/shims/bundle exec puma -C config/puma.rb
+ExecReload=/bin/kill -SIGUSR1 \$MAINPID
+TimeoutSec=15
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/mastodon-sidekiq.service
+[Unit]
+Description=mastodon-sidekiq
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/mastodon
+Environment=RAILS_ENV=production
+Environment=DB_POOL=25
+Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/root/.rbenv/shims/bundle exec sidekiq -c 25
+TimeoutSec=15
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/mastodon-streaming.service
+[Unit]
+Description=mastodon-streaming
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/mastodon
+Environment=NODE_ENV=production
+Environment=PORT=4000
+ExecStart=/usr/bin/node ./streaming
+TimeoutSec=15
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now mastodon-web mastodon-sidekiq mastodon-streaming
+msg_ok "Created Services"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/mastodon
+map $http_upgrade $connection_upgrade {
+  default upgrade;
+  ''      close;
+}
+
+upstream mastodon_web {
+  server 127.0.0.1:3000 fail_timeout=0;
+}
+
+upstream mastodon_streaming {
+  server 127.0.0.1:4000 fail_timeout=0;
+}
+
+server {
+  listen 80;
+  server_name _;
+  client_max_body_size 99m;
+  root /opt/mastodon/public;
+
+  gzip on;
+  gzip_types text/plain application/json application/javascript text/css image/svg+xml;
+
+  location / {
+    try_files $uri @proxy;
+  }
+
+  location ~ ^/assets/ {
+    add_header Cache-Control "public, max-age=2419200, must-revalidate";
+    try_files $uri =404;
+  }
+
+  location ^~ /api/v1/streaming {
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_pass http://mastodon_streaming;
+    proxy_buffering off;
+    proxy_redirect off;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade;
+    tcp_nodelay on;
+  }
+
+  location @proxy {
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_pass http://mastodon_web;
+    proxy_buffering on;
+    proxy_redirect off;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade;
+  }
+}
+EOF
+ln -sf /etc/nginx/sites-available/mastodon /etc/nginx/sites-enabled/mastodon
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q --now redis-server
+systemctl enable -q --now nginx
+systemctl reload nginx
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc

install/omnitools-install.sh

@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Majiiin
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/iib0011/omni-tools
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y nginx
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" setup_nodejs
-fetch_and_deploy_gh_release "omnitools" "iib0011/omni-tools" "tarball"
-
-msg_info "Building OmniTools"
-cd /opt/omnitools
-export HUSKY=0
-$STD npm ci
-$STD npm run build
-msg_ok "Built OmniTools"
-
-msg_info "Publishing Web Assets"
-rm -rf /usr/share/nginx/html
-mkdir -p /usr/share/nginx/html
-cp -a /opt/omnitools/dist/. /usr/share/nginx/html/
-rm -rf /opt/omnitools/node_modules
-msg_ok "Published Web Assets"
-
-msg_info "Configuring Nginx"
-sed -i \
-  's/application\/javascript.*js;/application\/javascript                js mjs;/' \
-  /etc/nginx/mime.types
-
-cat <<'EOF' >/etc/nginx/sites-available/omnitools
-server {
-    listen 80 default_server;
-    listen [::]:80 default_server;
-
-    server_name _;
-
-    root /usr/share/nginx/html;
-    index index.html;
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-}
-EOF
-
-ln -sf /etc/nginx/sites-available/omnitools /etc/nginx/sites-enabled/omnitools
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now nginx
-systemctl reload nginx
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc

install/satisfactory-install.sh

@@ -1,75 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: n8flx
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.satisfactorygame.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  lib32gcc-s1 \
-  lib32stdc++6
-msg_ok "Installed Dependencies"
-
-msg_info "Creating Steam User and Application Directories"
-useradd --system \
-  --create-home \
-  --home-dir /home/steam \
-  --shell /usr/sbin/nologin \
-  steam
-mkdir -p /opt/satisfactory/server /opt/steamcmd
-chown -R steam:steam /opt/satisfactory /opt/steamcmd /home/steam
-msg_ok "Created Steam User and Application Directories"
-
-fetch_and_deploy_from_url \
-  "https://steamcdn-a.akamaihd.net/client/installer/steamcmd_linux.tar.gz" \
-  "/opt/steamcmd"
-chown -R steam:steam /opt/steamcmd
-
-msg_info "Installing Satisfactory Dedicated Server"
-$STD runuser -u steam -- /opt/steamcmd/steamcmd.sh \
-  +force_install_dir /opt/satisfactory/server \
-  +login anonymous \
-  +app_update 1690800 -beta public validate \
-  +quit
-msg_ok "Installed Satisfactory Dedicated Server"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/satisfactory.service
-[Unit]
-Description=Satisfactory Dedicated Server
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=steam
-Group=steam
-WorkingDirectory=/opt/satisfactory/server
-Environment=LANG=C.UTF-8
-Environment=HOME=/home/steam
-ExecStart=/opt/satisfactory/server/FactoryServer.sh -log
-Restart=on-failure
-RestartSec=10
-KillSignal=SIGINT
-TimeoutStopSec=120
-StandardOutput=journal+console
-StandardError=journal+console
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now satisfactory
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

misc/build.func

@@ -3858,13 +3858,6 @@ check_container_os_guard() {
     return 0
   fi
 
-  local downgraded_target=0
-  if [[ "$cur_os" == "$rec_os" ]] && [[ "$cur_ver" != "$rec_ver" ]]; then
-    if [[ "$(printf '%s\n%s\n' "$cur_ver" "$rec_ver" | sort -V | tail -n1)" == "$cur_ver" ]]; then
-      downgraded_target=1
-    fi
-  fi
-
   case "${var_ignore_os_mismatch:-}" in
   1 | yes | true | on)
     msg_warn "Container OS is ${cur_os} ${cur_ver} but the script recommends ${rec_os} ${rec_ver} — continuing via var_ignore_os_mismatch (may break, no support)."
@@ -3880,19 +3873,10 @@ check_container_os_guard() {
     return 0
   fi
 
-  local mismatch_detail remediation
-  if [[ "$downgraded_target" -eq 1 ]]; then
-    mismatch_detail="Your container runs ${cur_os} ${cur_ver}, which is newer than what this script now targets (${rec_os} ${rec_ver}).\n\nThe target was likely lowered on purpose, e.g. because ${APP:-the app} had problems on newer OS versions - check the GitHub issues for ${APP:-this app} for details.\n\nContinuing on ${cur_ver} often still works, but isn't guaranteed. If you are unsure, ask in our Discord (https://discord.gg/3AnUqsXnmK) before continuing."
-    remediation="This script now targets the older ${rec_os} ${rec_ver}. Check the GitHub issues for ${APP:-this app}, or ask in Discord (https://discord.gg/3AnUqsXnmK) if you are unsure"
-  else
-    mismatch_detail="This container runs ${cur_os} ${cur_ver}, but this script now targets ${rec_os} ${rec_ver}.\n\nUpdating on the older base OS may fail or leave ${APP:-the application} broken (e.g. required runtime versions are not available).\n\nRecommended: upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again."
-    remediation="Upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again"
-  fi
-
   if [[ "${PHS_SILENT:-0}" != "1" ]] && command -v whiptail &>/dev/null && [ -t 0 ] && [[ "$TERM" != "dumb" ]]; then
     local choice
     choice=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "OS VERSION MISMATCH" --menu \
-      "${mismatch_detail}\n\nIf you continue anyway, it may break — no support is provided in that case.\n\nContinue anyway?" \
+      "This container runs ${cur_os} ${cur_ver}, but this script now targets ${rec_os} ${rec_ver}.\n\nUpdating on the older base OS may fail or leave ${APP:-the application} broken (e.g. required runtime versions are not available).\n\nRecommended: upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again.\n\nIf you continue anyway, it may break — no support is provided in that case.\n\nContinue anyway?" \
       20 70 3 \
       "1" "No  (cancel update)" \
       "2" "Yes (continue this time)" \
@@ -3915,7 +3899,7 @@ check_container_os_guard() {
   fi
 
   msg_error "Container OS ${cur_os} ${cur_ver} does not match the recommended ${rec_os} ${rec_ver} — skipping update."
-  msg_error "${remediation} — or bypass this check (may break, no support) with: echo \"${rec_os} ${rec_ver}\" > ${ignore_file}"
+  msg_error "Upgrade the container OS to ${rec_os} ${rec_ver} first, then run this update again — or bypass this check (may break, no support) with: echo \"${rec_os} ${rec_ver}\" > ${ignore_file}"
   return 1
 }
 

tools/pve/post-pve-install.sh

@@ -300,7 +300,7 @@ EOF
       --title "PVE-ENTERPRISE" \
       --menu "'pve-enterprise' repository already exists.\n\nWhat do you want to do?" 14 58 2 \
       "keep" "Keep as is" \
-      "disable" "Disable this repo (set Enabled: false)" \
+      "disable" "Comment out (disable) this repo" \
       "delete" "Delete this repo file" \
       3>&2 2>&1 1>&3)
     case $CHOICE in

vm/opnsense-vm.sh

@@ -810,8 +810,6 @@ msg_ok "Starting OPNsense VM (Patience this takes 20-30 minutes)"
 qm start $VMID
 sleep 90
 send_line_to_vm "root"
-sleep 2
-send_line_to_vm ""
 send_line_to_vm "fetch https://raw.githubusercontent.com/opnsense/update/master/src/bootstrap/opnsense-bootstrap.sh.in"
 if [ -n "$WAN_BRG" ]; then
   msg_info "Adding WAN interface"