openziti-controller: prevent apt hang on postinst TTY prompt

CHANGELOG.md

@@ -521,87 +521,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-08-14
-
-### 🆕 New Scripts
-
-  - GoDoxy ([#16470](https://github.com/community-scripts/ProxmoxVE/pull/16470))
-- Mumble ([#16474](https://github.com/community-scripts/ProxmoxVE/pull/16474))
-- Fleet ([#16472](https://github.com/community-scripts/ProxmoxVE/pull/16472))
-- Newt ([#16473](https://github.com/community-scripts/ProxmoxVE/pull/16473))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(ampache): update to PHP 8.5 asset, auto-upgrade PHP on update [@CervezaStallone](https://github.com/CervezaStallone) ([#16484](https://github.com/community-scripts/ProxmoxVE/pull/16484))
-
-## 2026-08-13
-
-### 🆕 New Scripts
-
-  - SuggestArr ([#16449](https://github.com/community-scripts/ProxmoxVE/pull/16449))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(stirling-pdf): LibreOffice listener collides with unoserver on UNO port 2002, burning a core [@angusmaul](https://github.com/angusmaul) ([#16460](https://github.com/community-scripts/ProxmoxVE/pull/16460))
-    - fix(reitti): enable SNI for tile cache [@kylemd](https://github.com/kylemd) ([#16463](https://github.com/community-scripts/ProxmoxVE/pull/16463))
-    - [wanderer] refactor [@johanngrobe](https://github.com/johanngrobe) ([#16448](https://github.com/community-scripts/ProxmoxVE/pull/16448))
-
-  - #### ✨ New Features
-
-    - feat: Update koillection-install.sh to support API usage [@Crazy-Duck](https://github.com/Crazy-Duck) ([#16425](https://github.com/community-scripts/ProxmoxVE/pull/16425))
-
-## 2026-08-12
-
-### 🆕 New Scripts
-
-  - Stalwart ([#16388](https://github.com/community-scripts/ProxmoxVE/pull/16388))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - networkoptimizer: mitigate dotnet publish hang in LXC [@MickLesk](https://github.com/MickLesk) ([#16436](https://github.com/community-scripts/ProxmoxVE/pull/16436))
-    - lazylibrarian: reinstall deps after git pull on update [@MickLesk](https://github.com/MickLesk) ([#16435](https://github.com/community-scripts/ProxmoxVE/pull/16435))
-    - wanderer: fix deprecated meilisearch upgrade flag [@MickLesk](https://github.com/MickLesk) ([#16434](https://github.com/community-scripts/ProxmoxVE/pull/16434))
-    - calibre-web: fix release asset filename pattern [@MickLesk](https://github.com/MickLesk) ([#16433](https://github.com/community-scripts/ProxmoxVE/pull/16433))
-    - fix(stirling-pdf): unoserver installed into the venv, and login mode truncates .env [@angusmaul](https://github.com/angusmaul) ([#16439](https://github.com/community-scripts/ProxmoxVE/pull/16439))
-    - fix(pulse): keep the container recoverable when an update fails [@rcourtman](https://github.com/rcourtman) ([#16311](https://github.com/community-scripts/ProxmoxVE/pull/16311))
-
-  - #### 🔧 Refactor
-
-    - ConvertX: add some new dependencies [@MickLesk](https://github.com/MickLesk) ([#16437](https://github.com/community-scripts/ProxmoxVE/pull/16437))
-
-## 2026-08-11
-
-### 🚀 Updated Scripts
-
-  - Update source URL for Reactive Resume [@MickLesk](https://github.com/MickLesk) ([#16407](https://github.com/community-scripts/ProxmoxVE/pull/16407))
-
-  - #### 🐞 Bug Fixes
-
-    - Pelican-Panel: add php artisan p:environment:database [@MickLesk](https://github.com/MickLesk) ([#16397](https://github.com/community-scripts/ProxmoxVE/pull/16397))
-    - outline: fix URL sed matching wrong line in .env.sample // refactor .env generation [@MickLesk](https://github.com/MickLesk) ([#16408](https://github.com/community-scripts/ProxmoxVE/pull/16408))
-    - paperless-ngx: reindex Tantivy search index on webserver start [@MickLesk](https://github.com/MickLesk) ([#16395](https://github.com/community-scripts/ProxmoxVE/pull/16395))
-    - karakeep: pin Node.js to 22 LTS, avoid Node 24.19 better-sqlite3 crash [@MickLesk](https://github.com/MickLesk) ([#16396](https://github.com/community-scripts/ProxmoxVE/pull/16396))
-
-  - #### ✨ New Features
-
-    - Open WebUI: add optional OpenTelemetry package install [@irishpadres](https://github.com/irishpadres) ([#16415](https://github.com/community-scripts/ProxmoxVE/pull/16415))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - fix(add-tailscale-lxc): stop spinner before whiptail menu [@halcycon](https://github.com/halcycon) ([#16402](https://github.com/community-scripts/ProxmoxVE/pull/16402))
-
-  - #### 🔧 Refactor
-
-    - arcane: fix projects/builds dir ownership for non-root container UID [@MickLesk](https://github.com/MickLesk) ([#16411](https://github.com/community-scripts/ProxmoxVE/pull/16411))
-
 ## 2026-08-10
 
 ### 🆕 New Scripts

ct/ampache.sh

@@ -39,15 +39,7 @@ function update_script() {
       /opt/ampache/public/play/.htaccess \
       /opt/ampache/advanced-config
 
-    if ! dpkg -l 2>/dev/null | grep -q "libapache2-mod-php8.5"; then
+    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
-      PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
-      sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
-        -e 's/post_max_size = .*/post_max_size = 100M/' \
-        -e 's/max_execution_time = .*/max_execution_time = 600/' \
-        -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.5/apache2/php.ini
-    fi
-
-    fetch_and_deploy_gh_release "Ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.5.zip"
 
     restore_backup
     chmod 664 /opt/ampache/public/rest/.htaccess /opt/ampache/public/play/.htaccess

ct/calibre-web.sh

@@ -38,7 +38,7 @@ function update_script() {
     create_backup /opt/calibre-web/app.db \
       /opt/calibre-web/data
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
     setup_uv
 
     msg_info "Installing Dependencies"

ct/convertx.sh

@@ -34,19 +34,7 @@ function update_script() {
     systemctl stop convertx
     msg_info "Stopped Service"
 
-    ensure_dependencies libreoffice-writer dasel graphicsmagick libemail-outlook-message-perl libheif-examples libjxl-tools resvg
+    ensure_dependencies libreoffice-writer
-
-    if ! command -v markitdown &>/dev/null; then
-      setup_uv
-      msg_info "Installing markitdown"
-      export UV_TOOL_BIN_DIR=/usr/local/bin
-      $STD uv tool install "markitdown[all]"
-      msg_ok "Installed markitdown"
-    fi
-
-    if ! command -v vtracer &>/dev/null; then
-      fetch_and_deploy_gh_release "vtracer" "visioncortex/vtracer" "prebuild" "0.6.4" "/usr/local/bin" "vtracer-$(arch_resolve "x86_64" "aarch64")-unknown-linux-musl.tar.gz"
-    fi
 
     create_backup /opt/convertx/data
 

ct/fleet.sh

@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fleetdm/fleet
-
-APP="Fleet"
-var_tags="${var_tags:-monitoring;device-management;security}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-ubuntu}"
-var_version="${var_version:-24.04}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/fleet/fleet ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "fleet" "fleetdm/fleet"; then
-    msg_info "Stopping Service"
-    systemctl stop fleet
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
-    chmod +x /opt/fleet/fleet
-
-    msg_info "Running Database Migrations"
-    set -a && source /opt/fleet/.env && set +a
-    $STD /opt/fleet/fleet prepare db --no-prompt
-    msg_ok "Ran Database Migrations"
-
-    msg_info "Starting Service"
-    systemctl start fleet
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"
-echo -e "${INFO}${YW} Admin Email:${CL} ${BGN}admin@fleet.local${CL}"
-echo -e "${INFO}${YW} Admin Password:${CL} ${BGN}Check inside the container: cat /opt/fleet/.env${CL}"

ct/godoxy.sh

@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ) | Co-Authors: yusing
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/yusing/godoxy
-
-APP="GoDoxy"
-var_tags="${var_tags:-reverse-proxy;webserver;network}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/godoxy/godoxy ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "godoxy" "yusing/godoxy"; then
-    msg_info "Stopping Service"
-    systemctl stop godoxy
-    msg_ok "Stopped Service"
-
-    create_backup \
-      /opt/godoxy/config \
-      /opt/godoxy/data \
-      /opt/godoxy/error_pages \
-      /etc/godoxy.env \
-      /etc/ssl/godoxy
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start godoxy
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}${CL}"
-echo -e "${INFO}${YW}Login as admin; the generated password is stored in /etc/godoxy.env.${CL}"

ct/headers/fleet

@@ -1,6 +0,0 @@
-    ________          __ 
-   / ____/ /__  ___  / /_
-  / /_  / / _ \/ _ \/ __/
- / __/ / /  __/  __/ /_  
-/_/   /_/\___/\___/\__/  
-                         

ct/headers/godoxy

@@ -1,6 +0,0 @@
-   ______      ____                  
-  / ____/___  / __ \____  _  ____  __
- / / __/ __ \/ / / / __ \| |/_/ / / /
-/ /_/ / /_/ / /_/ / /_/ />  </ /_/ / 
-\____/\____/_____/\____/_/|_|\__, /  
-                            /____/   

ct/headers/mumble

@@ -1,6 +0,0 @@
-    __  ___                __    __   
-   /  |/  /_  ______ ___  / /_  / /__ 
-  / /|_/ / / / / __ `__ \/ __ \/ / _ \
- / /  / / /_/ / / / / / / /_/ / /  __/
-/_/  /_/\__,_/_/ /_/ /_/_.___/_/\___/ 
-                                      

ct/headers/newt

@@ -1,6 +0,0 @@
-    _   __             __ 
-   / | / /__ _      __/ /_
-  /  |/ / _ \ | /| / / __/
- / /|  /  __/ |/ |/ / /_  
-/_/ |_/\___/|__/|__/\__/  
-                          

ct/headers/stalwart

@@ -1,6 +0,0 @@
-   _____ __        __                    __ 
-  / ___// /_____ _/ /      ______ ______/ /_
-  \__ \/ __/ __ `/ / | /| / / __ `/ ___/ __/
- ___/ / /_/ /_/ / /| |/ |/ / /_/ / /  / /_  
-/____/\__/\__,_/_/ |__/|__/\__,_/_/   \__/  
-                                            

ct/headers/suggestarr

@@ -1,6 +0,0 @@
-   _____                             __  ___             
-  / ___/__  ______ _____ ____  _____/ /_/   |  __________
-  \__ \/ / / / __ `/ __ `/ _ \/ ___/ __/ /| | / ___/ ___/
- ___/ / /_/ / /_/ / /_/ /  __(__  ) /_/ ___ |/ /  / /    
-/____/\__,_/\__, /\__, /\___/____/\__/_/  |_/_/  /_/     
-           /____//____/                                  

ct/karakeep.sh

@@ -88,9 +88,8 @@ EOF
       $STD corepack disable
     fi
     sed -i "s/^SERVER_VERSION=.*$/SERVER_VERSION=${CHECK_UPDATE_RELEASE#v}/" /etc/karakeep/karakeep.env
-    # Node 24.19.x crashes better-sqlite3 on cleanup (karakeep-app/karakeep#2989); stay on 22 LTS until upstream reverts.
     MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-    NODE_VERSION="22" NODE_MODULE="corepack,pnpm@${MODULE_VERSION}" setup_nodejs
+    NODE_VERSION="24" NODE_MODULE="corepack,pnpm@${MODULE_VERSION}" setup_nodejs
     setup_meilisearch
 
     msg_info "Updating Karakeep"
@@ -104,7 +103,6 @@ EOF
     $STD pnpm build
     cd /opt/karakeep/apps/workers 
     $STD pnpm install --frozen-lockfile
-    $STD pnpm rebuild better-sqlite3
     $STD pnpm build
     cd /opt/karakeep/apps/cli 
     $STD pnpm install --frozen-lockfile

ct/lazylibrarian.sh

@@ -34,7 +34,6 @@ function update_script() {
 
     msg_info "Updating $APP LXC"
     $STD git -C /opt/LazyLibrarian pull origin master
-    $STD pip install --break-system-packages /opt/LazyLibrarian
     msg_ok "Updated $APP LXC"
 
     msg_info "Starting LazyLibrarian"

ct/mumble.sh

@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.mumble.info/
-
-APP="Mumble"
-var_tags="${var_tags:-voice;chat;gaming}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/mumble/mumble-server.ini ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "mumble" "mumble-voip/mumble"; then
-    msg_info "Stopping Service"
-    systemctl stop mumble-server
-    msg_ok "Stopped Service"
-
-    create_backup /etc/mumble/mumble-server.ini /var/lib/mumble-server/mumble-server.sqlite
-
-    msg_info "Updating Mumble"
-    $STD apt update
-    $STD apt install -y mumble-server
-    cat <<EOF >~/.mumble
-$(get_latest_github_release "mumble-voip/mumble")
-EOF
-    msg_ok "Updated Mumble"
-
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start mumble-server
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Connect using:${CL}"
-echo -e "${GATEWAY}${BGN}${IP}:64738${CL}"

ct/networkoptimizer.sh

@@ -36,16 +36,13 @@ function update_script() {
     msg_ok "Stopped Service"
 
     create_backup /opt/networkoptimizer/networkoptimizer.env
+
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "networkoptimizer" "Ozark-Connect/NetworkOptimizer" "tarball"
-    restore_backup
 
     msg_info "Rebuilding NetworkOptimizer"
     RID="linux-x64"
     [[ "$(dpkg --print-architecture)" == "arm64" ]] && RID="linux-arm64"
     cd /opt/networkoptimizer
-    export MSBUILDDISABLENODEREUSE=1
-    export DOTNET_CLI_TELEMETRY_OPTOUT=1
-    export DOTNET_SYSTEM_NET_DISABLEIPV6=1
     $STD dotnet publish src/NetworkOptimizer.Web -c Release -r "$RID" --self-contained -o /opt/networkoptimizer/publish
     chmod +x /opt/networkoptimizer/publish/NetworkOptimizer.Web
     mkdir -p /opt/networkoptimizer/publish/tools
@@ -53,6 +50,8 @@ function update_script() {
     CGO_ENABLED=0 GOOS=linux GOARCH=arm64 $STD go build -trimpath -ldflags "-s -w" -o /opt/networkoptimizer/publish/tools/uwnspeedtest-linux-arm64 .
     msg_ok "Rebuilt NetworkOptimizer"
 
+    restore_backup
+
     msg_info "Starting Service"
     systemctl start networkoptimizer
     msg_ok "Started Service"

ct/newt.sh

@@ -1,53 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Arubinu
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fosrl/newt
-
-APP="Newt"
-var_tags="${var_tags:-network;tunnel}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-256}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/newt/newt.env ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "newt" "fosrl/newt"; then
-    msg_info "Stopping Service"
-    systemctl stop newt
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "newt" "fosrl/newt" "singlefile" "latest" "/opt/newt" "newt_linux_$(arch_resolve)"
-    ln -sf /opt/newt/newt /usr/local/bin/newt
-
-    msg_info "Starting Service"
-    systemctl start newt
-    msg_ok "Started Service"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${INFO}${YW} Check the site status in your Pangolin dashboard.${CL}"

ct/openwebui.sh

@@ -114,14 +114,7 @@ EOF
 
   msg_info "Updating Open WebUI via uv"
   PYTHON_VERSION="3.12" setup_uv
-  OWUI_PYTHON="/root/.local/share/uv/tools/open-webui/bin/python3.12"
+  $STD uv tool install --force --python 3.12 --constraint <(echo "numba>=0.60") open-webui[all]
-  OTEL_ARGS=()
-  if [[ -x "$OWUI_PYTHON" ]]; then
-    while IFS= read -r pkg; do
-      OTEL_ARGS+=(--with "$pkg")
-    done < <(uv pip list --python "$OWUI_PYTHON" --format freeze 2>/dev/null | grep -i '^opentelemetry-' | cut -d= -f1)
-  fi
-  $STD uv tool install --force --python 3.12 --constraint <(echo "numba>=0.60") "${OTEL_ARGS[@]}" open-webui[all]
   systemctl restart open-webui
   msg_ok "Updated Open WebUI"
   msg_ok "Updated successfully!"

ct/openziti-controller.sh

@@ -30,7 +30,7 @@ function update_script() {
   fi
   msg_info "Updating $APP LXC"
   $STD apt update
-  $STD apt -y upgrade
+  $STD apt -y upgrade </dev/null
   msg_ok "Updated $APP LXC"
   msg_ok "Updated successfully!"
   exit

ct/paperless-ngx.sh

@@ -166,8 +166,6 @@ function update_script() {
       msg_info "Updating Paperless-ngx"
       if ((BRIDGE_UPDATE == 0)); then
         sed -i 's|^ExecStart=.*|ExecStart=uv run -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"|' /etc/systemd/system/paperless-webserver.service
-        grep -q "document_index reindex" /etc/systemd/system/paperless-webserver.service ||
-          sed -i '/^ExecStart=/i ExecStartPre=uv run -- python manage.py document_index reindex --if-needed --no-progress-bar' /etc/systemd/system/paperless-webserver.service
         $STD systemctl daemon-reload
       fi
       cd /opt/paperless

ct/pulse.sh

@@ -35,34 +35,22 @@ function update_script() {
     systemctl stop pulse*.service
     msg_ok "Stopped Services"
 
-    if ! CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "pulse-v*-linux-$(arch_resolve).tar.gz"; then
+    if [[ -f /opt/pulse/pulse ]]; then
-      msg_error "Download or deployment failed - check network connectivity and GitHub API availability"
+      rm -f /opt/pulse/pulse
-      if systemctl start pulse 2>/dev/null || systemctl start pulse-backend 2>/dev/null; then
-        msg_ok "Restarted the previously installed ${APP}"
-      else
-        msg_error "${APP} could not be restarted - reinstall it or restore the container from a backup"
-      fi
-      exit 250
     fi
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "pulse-v*-linux-$(arch_resolve).tar.gz"
     ln -sf /opt/pulse/bin/pulse /usr/local/bin/pulse
     mkdir -p /etc/pulse
     chown pulse:pulse /etc/pulse
     chown -R pulse:pulse /opt/pulse
     chmod 700 /etc/pulse
-    UNIT_WAS_ENABLED=0
     if [[ -f "$SERVICE_PATH"/pulse-backend.service ]]; then
-      if [[ $(systemctl is-enabled pulse-backend) == enabled ]]; then
-        UNIT_WAS_ENABLED=1
-      fi
-      systemctl disable -q pulse-backend.service 2>/dev/null || true
       mv "$SERVICE_PATH"/pulse-backend.service "$SERVICE_PATH"/pulse.service
     fi
     sed -i -e 's|pulse/pulse|pulse/bin/pulse|' \
       -e 's/^Environment="API.*$//' "$SERVICE_PATH"/pulse.service
     systemctl daemon-reload
-    if [[ "$UNIT_WAS_ENABLED" == "1" ]]; then
-      systemctl enable -q pulse
-    fi
     if grep -q 'pulse-home:/bin/bash' /etc/passwd; then
       usermod -s /usr/sbin/nologin pulse
     fi

ct/reactive-resume.sh

@@ -3,7 +3,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream | MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://rxresu.me/ | Github: https://github.com/amruthpillai/reactive-resume
+# Source: https://rxresume.org | Github: https://github.com/amruthpillai/reactive-resume
 
 APP="Reactive-Resume"
 var_tags="${var_tags:-documents}"
@@ -45,6 +45,7 @@ function update_script() {
     msg_info "Updating Reactive Resume (Patience)"
     cd /opt/reactive-resume
     export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+
     corepack prepare --activate
     export CI="true"
     export NODE_ENV="production"

ct/reitti.sh

@@ -223,8 +223,6 @@ http {
       proxy_pass $upstream_url;
       proxy_set_header Host $proxy_host;
       proxy_set_header User-Agent "Reitti/1.0";
-      proxy_ssl_server_name on;
-      proxy_ssl_name $proxy_host;
       proxy_cache tiles;
       proxy_cache_key $upstream_url;
       proxy_cache_valid 200 30d;

ct/stalwart.sh

@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/stalwartlabs/stalwart
-
-APP="Stalwart"
-var_tags="${var_tags:-mail;smtp;imap}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/stalwart ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "stalwart" "stalwartlabs/stalwart"; then
-    msg_info "Stopping Service"
-    systemctl stop stalwart
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "stalwart" "stalwartlabs/stalwart" "prebuild" "latest" "/opt/stalwart" "stalwart-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
-    chmod +x /opt/stalwart/stalwart
-
-    msg_info "Starting Service"
-    systemctl start stalwart
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8080/admin${CL}"
-echo -e "${INFO}${YW}The bootstrap admin password was printed to the service log:${CL}"
-echo -e "${TAB}${DEFAULT}${BGN}journalctl -u stalwart | grep -A8 'bootstrap mode'${CL}"

ct/stirling-pdf.sh

@@ -43,20 +43,8 @@ function update_script() {
     find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
     msg_ok "Patched Native Libraries"
 
-    if [[ -f /etc/systemd/system/libreoffice-listener.service ]]; then
-      msg_info "Removing Conflicting LibreOffice Listener"
-      systemctl disable -q --now libreoffice-listener
-      rm -f /etc/systemd/system/libreoffice-listener.service
-      sed -i '/^Requires=libreoffice-listener.service$/d' /etc/systemd/system/stirlingpdf.service /etc/systemd/system/unoserver.service
-      sed -i 's/^After=syslog.target network.target libreoffice-listener.service$/After=syslog.target network.target unoserver.service/' /etc/systemd/system/stirlingpdf.service
-      sed -i 's/^After=libreoffice-listener.service$/After=network.target/' /etc/systemd/system/unoserver.service
-      systemctl daemon-reload
-      systemctl reset-failed libreoffice-listener.service 2>/dev/null || true
-      msg_ok "Removed Conflicting LibreOffice Listener"
-    fi
-
     msg_info "Stopping Services"
-    systemctl stop stirlingpdf unoserver
+    systemctl stop stirlingpdf libreoffice-listener unoserver
     msg_ok "Stopped Services"
 
     if [[ -f ~/.Stirling-PDF-login ]]; then
@@ -71,7 +59,7 @@ function update_script() {
     msg_ok "Font Cache Updated"
 
     msg_info "Starting Services"
-    systemctl start unoserver stirlingpdf
+    systemctl start stirlingpdf libreoffice-listener unoserver
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/suggestarr.sh

@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/giuseppe99barchetta/SuggestArr
-
-APP="SuggestArr"
-var_tags="${var_tags:-arr;media}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/suggestarr ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr"; then
-    msg_info "Stopping Service"
-    systemctl stop suggestarr
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"
-
-    msg_info "Building Frontend"
-    cd /opt/suggestarr/client
-    $STD npm install
-    $STD npm run build
-    mkdir -p /opt/suggestarr/static
-    cp -r /opt/suggestarr/client/dist/* /opt/suggestarr/static/
-    cp -r /opt/suggestarr/client/node_modules/swagger-ui-dist /opt/suggestarr/static/swagger-ui
-    msg_ok "Built Frontend"
-
-    msg_info "Updating Python Environment"
-    cd /opt/suggestarr
-    $STD uv venv --python 3.12 /opt/suggestarr/.venv
-    $STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_service/requirements.txt
-    msg_ok "Updated Python Environment"
-
-    msg_info "Starting Service"
-    systemctl start suggestarr
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:5000${CL}"

ct/wanderer.sh

@@ -25,111 +25,17 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -d /opt/wanderer/source ]]; then
+  if [[ ! -f /opt/wanderer/start.sh ]]; then
     msg_error "No wanderer Installation Found!"
     exit
   fi
 
-  if [[ ! -f /etc/systemd/system/meilisearch.service ]]; then
-    msg_info "Migrating MeiliSearch"
-    systemctl stop wanderer-web
-
-    rm -rf /opt/wanderer/source/search
-    MEILI_MASTER_KEY_VAL=$(grep -oP '^MEILI_MASTER_KEY=\K.*' /opt/wanderer/.env)
-    cat <<EOF >/etc/meilisearch.toml
-env = "production"
-master_key = "$MEILI_MASTER_KEY_VAL"
-db_path = "/opt/wanderer/data/meili_data"
-dump_dir = "/var/lib/meilisearch/dumps"
-snapshot_dir = "/var/lib/meilisearch/snapshots"
-no_analytics = true
-http_addr = "127.0.0.1:7700"
-EOF
-    mkdir -p /var/lib/meilisearch/dumps /var/lib/meilisearch/snapshots
-
-    cat <<EOF >/etc/systemd/system/meilisearch.service
-[Unit]
-Description=Meilisearch
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-    systemctl daemon-reload
-    systemctl enable -q --now meilisearch
-
-    sed -i \
-      -e "s|^MEILI_HTTP_ADDR=.*|MEILI_HTTP_ADDR=127.0.0.1:7700|" \
-      -e "s|^MEILI_URL=.*|MEILI_URL=http://127.0.0.1:7700|" \
-      /opt/wanderer/.env
-
-    msg_ok "Migrated Meilisearch"
-  fi
-
-  setup_meilisearch
-
-  if [[ -f /opt/wanderer/start.sh ]]; then
-    msg_info "Migrating wanderer services"
-    systemctl stop wanderer-web
-    rm -f /opt/wanderer/start.sh
-    rm -rf /opt/wanderer/source/search
-
-    cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
-[Unit]
-Description=wanderer PocketBase
-Wants=network.target
-After=network.target
-PartOf=wanderer-web.service
-StartLimitIntervalSec=10
-StartLimitBurst=5
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/wanderer/source/db
-EnvironmentFile=/opt/wanderer/.env
-ExecStart=/opt/wanderer/source/db/pocketbase serve --http=\${PB_URL} --dir=\${PB_DB_LOCATION}
-Restart=always
-RestartSec=1
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-    cat <<EOF >/etc/systemd/system/wanderer-web.service
-[Unit]
-Description=wanderer
-Wants=network.target meilisearch.service wanderer-pocketbase.service
-After=network.target meilisearch.service wanderer-pocketbase.service
-StartLimitIntervalSec=10
-StartLimitBurst=5
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/wanderer/source/web
-EnvironmentFile=/opt/wanderer/.env
-ExecStart=/usr/bin/node build
-Restart=always
-RestartSec=1
-
-[Install]
-WantedBy=multi-user.target
-EOF
-    systemctl daemon-reload
-    systemctl enable -q wanderer-pocketbase
-    systemctl start wanderer-web
-    msg_ok "Migrated wanderer services"
-  fi
-
   if check_for_gh_release "wanderer" "open-wanderer/wanderer"; then
     msg_info "Stopping service"
     systemctl stop wanderer-web
     msg_ok "Stopped service"
 
-    create_backup /opt/wanderer/source
+    create_backup /opt/wanderer/source/search
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
     restore_backup
 
@@ -154,6 +60,19 @@ EOF
     msg_ok "Started service"
     msg_ok "Update Successful"
   fi
+  if check_for_gh_release "meilisearch" "meilisearch/meilisearch"; then
+    msg_info "Stopping service"
+    systemctl stop wanderer-web
+    msg_ok "Stopped service"
+
+    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
+    grep -q -- '--experimental-dumpless-upgrade' /opt/wanderer/start.sh || sed -i 's|meilisearch --master-key|meilisearch --experimental-dumpless-upgrade --master-key|' /opt/wanderer/start.sh
+
+    msg_info "Starting service"
+    systemctl start wanderer-web
+    msg_ok "Started service"
+    msg_ok "Update Successful"
+  fi
   exit
 }
 

install/ampache-install.sh

@@ -27,11 +27,11 @@ $STD apt install -y \
   libvpx-dev
 msg_ok "Installed dependencies"
 
-PHP_VERSION="8.5" PHP_APACHE="YES" setup_php
+PHP_VERSION="8.4" PHP_APACHE="YES" setup_php
 setup_mariadb
 MARIADB_DB_USER="ampache" MARIADB_DB_NAME="ampache" setup_mariadb_db
 
-fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.5.zip"
+fetch_and_deploy_gh_release "ampache" "ampache/ampache" "prebuild" "latest" "/opt/ampache" "ampache-*_all_php8.4.zip"
 
 msg_info "Setting up Ampache"
 rm -rf /var/www/html
@@ -58,7 +58,7 @@ msg_info "Configuring PHP"
 sed -i -e 's/upload_max_filesize = .*/upload_max_filesize = 100M/' \
   -e 's/post_max_size = .*/post_max_size = 100M/' \
   -e 's/max_execution_time = .*/max_execution_time = 600/' \
-  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.5/apache2/php.ini
+  -e 's/memory_limit = .*/memory_limit = 512M/' /etc/php/8.4/apache2/php.ini
 $STD a2enmod rewrite
 $STD systemctl restart apache2
 msg_ok "Configured PHP"

install/calibre-web-install.sh

@@ -32,7 +32,7 @@ msg_info "Installing Calibre (for eBook conversion)"
 $STD apt install -y calibre
 msg_ok "Installed Calibre"
 
-fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
+fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
 setup_uv
 
 msg_info "Installing Python Dependencies"

install/convertx-install.sh

@@ -20,15 +20,10 @@ msg_info "Installing Dependencies"
 $STD apt install -y \
   assimp-utils \
   calibre \
-  dasel \
   dcraw \
   dvisvgm \
   ffmpeg \
-  graphicsmagick \
   inkscape \
-  libemail-outlook-message-perl \
-  libheif-examples \
-  libjxl-tools \
   libreoffice-writer \
   libva2 \
   libvips-tools \
@@ -38,7 +33,6 @@ $STD apt install -y \
   poppler-utils \
   potrace \
   python3-numpy \
-  resvg \
   texlive \
   texlive-fonts-recommended \
   texlive-latex-extra \
@@ -46,15 +40,6 @@ $STD apt install -y \
   texlive-xetex
 msg_ok "Installed Dependencies"
 
-setup_uv
-
-msg_info "Installing markitdown"
-export UV_TOOL_BIN_DIR=/usr/local/bin
-$STD uv tool install "markitdown[all]"
-msg_ok "Installed markitdown"
-
-fetch_and_deploy_gh_release "vtracer" "visioncortex/vtracer" "prebuild" "0.6.4" "/usr/local/bin" "vtracer-$(arch_resolve "x86_64" "aarch64")-unknown-linux-musl.tar.gz"
-
 NODE_VERSION="22" NODE_MODULE="bun" setup_nodejs
 fetch_and_deploy_gh_release "ConvertX" "C4illin/ConvertX" "tarball" "latest" "/opt/convertx"
 

install/fleet-install.sh

@@ -1,93 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fleetdm/fleet
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y redis-server mysql-server
-msg_ok "Installed Dependencies"
-
-MYSQL_DB_NAME="fleet" MYSQL_DB_USER="fleet" setup_mysql_db
-fetch_and_deploy_gh_release "fleet" "fleetdm/fleet" "prebuild" "latest" "/opt/fleet" "fleet_v*_linux.tar.gz"
-
-msg_info "Configuring Application"
-chmod +x /opt/fleet/fleet
-PRIVATE_KEY=$(openssl rand -hex 32)
-cat <<EOF >/opt/fleet/.env
-FLEET_MYSQL_ADDRESS=127.0.0.1:3306
-FLEET_MYSQL_DATABASE=fleet
-FLEET_MYSQL_USERNAME=fleet
-FLEET_MYSQL_PASSWORD=${MYSQL_DB_PASS}
-FLEET_SERVER_ADDRESS=0.0.0.0:8080
-FLEET_SERVER_TLS=false
-FLEET_SERVER_PRIVATE_KEY=${PRIVATE_KEY}
-FLEET_REDIS_ADDRESS=127.0.0.1:6379
-FLEET_LOGGING_JSON=true
-EOF
-msg_ok "Configured Application"
-
-msg_info "Running Database Migrations"
-set -a && source /opt/fleet/.env && set +a
-$STD /opt/fleet/fleet prepare db --no-prompt
-msg_ok "Ran Database Migrations"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/fleet.service
-[Unit]
-Description=Fleet
-After=network.target mysql.service redis-server.service
-Requires=mysql.service redis-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/fleet
-EnvironmentFile=/opt/fleet/.env
-ExecStart=/opt/fleet/fleet serve
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now fleet redis-server
-msg_ok "Created Service"
-
-msg_info "Initializing Fleet"
-FLEET_ADMIN_EMAIL="admin@fleet.local"
-FLEET_ADMIN_PASS="$(openssl rand -hex 8)1!"
-ELAPSED=0
-until curl -sf "http://127.0.0.1:8080/healthz" >/dev/null 2>&1; do
-  sleep 2
-  ELAPSED=$((ELAPSED + 2))
-  [[ $ELAPSED -ge 60 ]] && break
-done
-SETUP_RESPONSE=$(curl -s -X POST "http://127.0.0.1:8080/api/v1/setup" \
-  -H "Content-Type: application/json" \
-  -d "{\"admin\":{\"admin\":true,\"email\":\"${FLEET_ADMIN_EMAIL}\",\"name\":\"Admin\",\"password\":\"${FLEET_ADMIN_PASS}\"},\"org_info\":{\"org_name\":\"Fleet\",\"org_logo_url\":\"\"},\"server_url\":\"http://127.0.0.1:8080\"}")
-FLEET_TOKEN=$(echo "${SETUP_RESPONSE}" | grep -o '"token":"[^"]*"' | cut -d'"' -f4) || true
-if [[ -n "${FLEET_TOKEN}" ]]; then
-  curl -s -X PATCH "http://127.0.0.1:8080/api/latest/fleet/config" \
-    -H "Content-Type: application/json" \
-    -H "Authorization: Bearer ${FLEET_TOKEN}" \
-    -d "{\"server_settings\":{\"server_url\":\"http://${LOCAL_IP}:8080\"}}" >/dev/null
-fi
-cat <<EOF >>/opt/fleet/.env
-FLEET_ADMIN_EMAIL=${FLEET_ADMIN_EMAIL}
-FLEET_ADMIN_PASSWORD=${FLEET_ADMIN_PASS}
-EOF
-msg_ok "Initialized Fleet"
-
-motd_ssh
-customize
-cleanup_lxc

install/godoxy-install.sh

@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# Co-Authors: yusing
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/yusing/godoxy
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "godoxy" "yusing/godoxy" "singlefile" "latest" "/opt/godoxy" "godoxy-linux-$(arch_resolve)"
-
-msg_info "Generating Self-Signed Certificate"
-create_self_signed_cert "godoxy"
-msg_ok "Generated Self-Signed Certificate"
-
-msg_info "Configuring GoDoxy"
-mkdir -p \
-  /opt/godoxy/config/middlewares \
-  /opt/godoxy/data \
-  /opt/godoxy/error_pages
-
-cat <<EOF >/opt/godoxy/config/config.yml
-autocert:
-  provider: local
-  cert_path: /etc/ssl/godoxy/godoxy.crt
-  key_path: /etc/ssl/godoxy/godoxy.key
-
-providers:
-  include:
-    - routes.yml
-
-webui:
-  aliases:
-    - "${LOCAL_IP}"
-EOF
-
-cat <<'EOF' >/opt/godoxy/config/routes.yml
-{}
-EOF
-
-cat <<EOF >/etc/godoxy.env
-GODOXY_API_USER="admin"
-GODOXY_API_PASSWORD="$(openssl rand -hex 16)"
-GODOXY_API_JWT_SECRET="$(openssl rand -base64 32)"
-EOF
-chmod 600 /etc/godoxy.env
-msg_ok "Configured GoDoxy"
-
-msg_info "Creating Service"
-cat <<'EOF' >/etc/systemd/system/godoxy.service
-[Unit]
-Description=GoDoxy Reverse Proxy
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-Group=root
-WorkingDirectory=/opt/godoxy
-EnvironmentFile=/etc/godoxy.env
-ExecStart=/opt/godoxy/godoxy
-Restart=on-failure
-RestartSec=5
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-NoNewPrivileges=true
-PrivateTmp=true
-ProtectHome=true
-ProtectSystem=full
-ReadWritePaths=/opt/godoxy /etc/ssl/godoxy
-UMask=0077
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now godoxy
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/karakeep-install.sh

@@ -31,9 +31,8 @@ setup_meilisearch
 
 fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep" "tarball"
 cd /opt/karakeep
-# Node 24.19.x crashes better-sqlite3 on cleanup (karakeep-app/karakeep#2989); stay on 22 LTS until upstream reverts.
 MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
-NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs
 
 msg_info "Installing external JavaScript Extension for yt-dlp"
 $STD pip install -U yt-dlp-ejs --break-system-packages

install/koillection-install.sh

@@ -38,7 +38,6 @@ export APP_RUNTIME='Symfony\Component\Runtime\SymfonyRuntime'
 $STD composer install --no-dev -o --no-interaction --classmap-authoritative
 $STD php bin/console doctrine:migrations:migrate --no-interaction
 $STD php bin/console app:translations:dump
-$STD php bin/console lexik:jwt:generate-keypair --skip-if-exists
 cd assets/
 $STD yarn install
 $STD yarn build
@@ -52,7 +51,6 @@ cat <<EOF >/etc/apache2/sites-available/koillection.conf
     ServerName koillection
     DocumentRoot /opt/koillection/public
     SetEnv APP_RUNTIME "Symfony\\Component\\Runtime\\SymfonyRuntime"
-    SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=\$1
     <Directory /opt/koillection/public>
         Options Indexes FollowSymLinks
         AllowOverride All

install/mumble-install.sh

@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.mumble.info/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Mumble"
-$STD apt install -y mumble-server
-cat <<EOF >~/.mumble
-$(get_latest_github_release "mumble-voip/mumble")
-EOF
-msg_ok "Installed Mumble"
-
-msg_info "Configuring Mumble"
-mkdir -p /var/lib/mumble-server
-cat <<EOF >/etc/mumble/mumble-server.ini
-database=/var/lib/mumble-server/mumble-server.sqlite
-sqlite_wal=2
-port=64738
-users=100
-bandwidth=558000
-allowping=true
-obfuscate=true
-ice="tcp -h 127.0.0.1 -p 6502"
-icesecretwrite=$(tr -d '-' </proc/sys/kernel/random/uuid)
-EOF
-chown -R mumble-server:mumble-server /var/lib/mumble-server
-chown root:mumble-server /etc/mumble/mumble-server.ini
-chmod 640 /etc/mumble/mumble-server.ini
-msg_ok "Configured Mumble"
-
-msg_info "Setting SuperUser Password"
-MUMBLE_PASSWORD=$(tr -d '-' </proc/sys/kernel/random/uuid)
-mumble-server -ini /etc/mumble/mumble-server.ini -supw "$MUMBLE_PASSWORD"
-chown -R mumble-server:mumble-server /var/lib/mumble-server
-msg_ok "Set SuperUser password: ${MUMBLE_PASSWORD}"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/mumble-server.service
-[Unit]
-Description=Mumble Server
-After=network.target
-
-[Service]
-Type=simple
-User=mumble-server
-Group=mumble-server
-ExecStart=/usr/bin/mumble-server -ini /etc/mumble/mumble-server.ini -fg
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now mumble-server
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/networkoptimizer-install.sh

@@ -35,9 +35,6 @@ RID="linux-x64"
 [[ "$(dpkg --print-architecture)" == "arm64" ]] && RID="linux-arm64"
 cd /opt/networkoptimizer
 export MinVerVersionOverride="$(cat ~/.networkoptimizer)"
-export MSBUILDDISABLENODEREUSE=1
-export DOTNET_CLI_TELEMETRY_OPTOUT=1
-export DOTNET_SYSTEM_NET_DISABLEIPV6=1
 $STD dotnet publish src/NetworkOptimizer.Web -c Release -r "$RID" --self-contained -o /opt/networkoptimizer/publish
 chmod +x /opt/networkoptimizer/publish/NetworkOptimizer.Web
 msg_ok "Built NetworkOptimizer"

install/newt-install.sh

@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Arubinu
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/fosrl/newt
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "newt" "fosrl/newt" "singlefile" "latest" "/opt/newt" "newt_linux_$(arch_resolve)"
-ln -sf /opt/newt/newt /usr/local/bin/newt
-
-if [[ -z "${NEWT_ID:-}" ]]; then
-  read -rp "Newt ID (from your Pangolin dashboard): " NEWT_ID
-fi
-if [[ -z "${NEWT_SECRET:-}" ]]; then
-  read -rsp "Newt Secret: " NEWT_SECRET
-  echo
-fi
-if [[ -z "${PANGOLIN_ENDPOINT:-}" ]]; then
-  read -rp "Pangolin endpoint (e.g. https://pangolin.example.com): " PANGOLIN_ENDPOINT
-fi
-
-if [[ -z "$NEWT_ID" || -z "$NEWT_SECRET" || -z "$PANGOLIN_ENDPOINT" ]]; then
-  msg_error "Newt ID, Secret and Endpoint are all required. Aborting."
-  exit 1
-fi
-
-msg_info "Configuring Newt"
-mkdir -p /etc/newt
-cat <<EOF >/etc/newt/newt.env
-NEWT_ID=${NEWT_ID}
-NEWT_SECRET=${NEWT_SECRET}
-PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}
-EOF
-chmod 600 /etc/newt/newt.env
-msg_ok "Configured Newt"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/newt.service
-[Unit]
-Description=Newt (Pangolin tunnel client)
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-EnvironmentFile=/etc/newt/newt.env
-ExecStart=/usr/local/bin/newt
-Restart=always
-RestartSec=2
-UMask=0077
-PrivateTmp=true
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now newt
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/openwebui-install.sh

@@ -25,28 +25,8 @@ setup_hwaccel
 
 PYTHON_VERSION="3.12" setup_uv
 
-OTEL_ARGS=()
-read -r -p "${TAB3}Would you like to install OpenTelemetry instrumentation packages (requires manual .env configuration)? <y/N> " prompt
-if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-  for pkg in \
-    opentelemetry-api \
-    opentelemetry-sdk \
-    opentelemetry-exporter-otlp \
-    opentelemetry-exporter-otlp-proto-http \
-    opentelemetry-instrumentation-fastapi \
-    opentelemetry-instrumentation-aiohttp-client \
-    opentelemetry-instrumentation-httpx \
-    opentelemetry-instrumentation-sqlalchemy \
-    opentelemetry-instrumentation-requests \
-    opentelemetry-instrumentation-logging \
-    opentelemetry-instrumentation-redis \
-    opentelemetry-instrumentation-system-metrics; do
-    OTEL_ARGS+=(--with "$pkg")
-  done
-fi
-
 msg_info "Installing Open WebUI"
-$STD uv tool install --python 3.12 --constraint <(echo "numba>=0.60") "${OTEL_ARGS[@]}" open-webui[all]
+$STD uv tool install --python 3.12 --constraint <(echo "numba>=0.60") open-webui[all]
 msg_ok "Installed Open WebUI"
 
 read -r -p "${TAB3}Would you like to add Ollama? <y/N> " prompt

install/openziti-controller-install.sh

@@ -24,7 +24,7 @@ Components: main
 Signed-By: /usr/share/keyrings/openziti.gpg
 EOF
 $STD apt update
-$STD apt install -y openziti-controller openziti-console
+$STD apt install -y openziti-controller openziti-console </dev/null
 msg_ok "Installed openziti"
 
 read -r -p "${TAB3}Would you like to go through the auto configuration now? <y/N>" prompt

install/outline-install.sh

@@ -28,23 +28,21 @@ fetch_and_deploy_gh_release "outline" "outline/outline" "tarball"
 
 msg_info "Configuring Outline (Patience)"
 SECRET_KEY="$(openssl rand -hex 32)"
-UTILS_SECRET="$(openssl rand -hex 32)"
 cd /opt/outline
 cp .env.sample .env
 export NODE_ENV=development
-sed -i "s#^NODE_ENV=.*#NODE_ENV=development#" /opt/outline/.env
+sed -i 's/NODE_ENV=production/NODE_ENV=development/g' /opt/outline/.env
-sed -i "s#^SECRET_KEY=.*#SECRET_KEY=${SECRET_KEY}#" /opt/outline/.env
+sed -i "s/generate_a_new_key/${SECRET_KEY}/g" /opt/outline/.env
-sed -i "s#^UTILS_SECRET=.*#UTILS_SECRET=${UTILS_SECRET}#" /opt/outline/.env
+sed -i "s/user:pass@postgres/${PG_DB_USER}:${PG_DB_PASS}@localhost/g" /opt/outline/.env
-sed -i "s#^DATABASE_URL=.*#DATABASE_URL=postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}#" /opt/outline/.env
+sed -i 's/redis:6379/localhost:6379/g' /opt/outline/.env
-sed -i "s#^REDIS_URL=.*#REDIS_URL=redis://localhost:6379#" /opt/outline/.env
+sed -i "5s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
-sed -i "s#^URL=.*#URL=http://${LOCAL_IP}#" /opt/outline/.env
+sed -i 's/FORCE_HTTPS=true/FORCE_HTTPS=false/g' /opt/outline/.env
-sed -i "s#^FORCE_HTTPS=.*#FORCE_HTTPS=false#" /opt/outline/.env
 export NODE_OPTIONS="--max-old-space-size=3584"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 
 $STD yarn install --immutable
 export NODE_ENV=production
-sed -i "s#^NODE_ENV=.*#NODE_ENV=production#" /opt/outline/.env
+sed -i 's/NODE_ENV=development/NODE_ENV=production/g' /opt/outline/.env
 $STD yarn build
 msg_ok "Configured Outline"
 

install/paperless-ngx-install.sh

@@ -151,7 +151,6 @@ Requires=redis.service
 
 [Service]
 WorkingDirectory=/opt/paperless/src
-#ExecStartPre=uv run -- python manage.py document_index reindex --if-needed --no-progress-bar
 ExecStart=uv run -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"
 Environment=GRANIAN_HOST=::
 Environment=GRANIAN_PORT=8000

install/pelican-panel-install.sh

@@ -27,7 +27,6 @@ msg_info "Installing Pelican Panel"
 cd /opt/pelican-panel
 $STD composer install --no-dev --optimize-autoloader --no-interaction
 $STD php artisan p:environment:setup
-echo "yes" | $STD php artisan p:environment:database --driver mariadb --host localhost --port 3306 --database "$MARIADB_DB_NAME" --username "$MARIADB_DB_USER" --password "$MARIADB_DB_PASS"
 $STD php artisan p:environment:queue-service --no-interaction
 echo "* * * * * php /opt/pelican-panel/artisan schedule:run >> /dev/null 2>&1" | crontab -u www-data -
 chown -R www-data:www-data /opt/pelican-panel

install/reactive-resume-install.sh

@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream | Rewrite: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://rxresu.me/ | Github: https://github.com/amruthpillai/reactive-resume
+# Source: https://rxresume.org | Github: https://github.com/amruthpillai/reactive-resume
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -39,6 +39,7 @@ msg_ok "Built Reactive Resume"
 
 msg_info "Configuring Reactive Resume"
 AUTH_SECRET=$(openssl rand -hex 32)
+
 cat <<EOF >/opt/reactive-resume/.env
 # Reactive Resume v5 Configuration
 NODE_ENV=production

install/reitti-install.sh

@@ -46,8 +46,6 @@ http {
       proxy_pass $upstream_url;
       proxy_set_header Host $proxy_host;
       proxy_set_header User-Agent "Reitti/1.0";
-      proxy_ssl_server_name on;
-      proxy_ssl_name $proxy_host;
       proxy_cache tiles;
       proxy_cache_key $upstream_url;
       proxy_cache_valid 200 30d;

install/stalwart-install.sh

@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/stalwartlabs/stalwart
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "stalwart" "stalwartlabs/stalwart" "prebuild" "latest" "/opt/stalwart" "stalwart-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
-chmod +x /opt/stalwart/stalwart
-
-msg_info "Configuring Stalwart"
-mkdir -p /opt/stalwart_data/{etc,data,logs}
-cat <<EOF >/opt/stalwart_data/etc/stalwart.env
-# Uncomment and edit an entry to override its default.
-# Apply changes with: systemctl restart stalwart
-
-#STALWART_HOSTNAME=mail.example.com
-#STALWART_PUBLIC_URL=https://mail.example.com
-#STALWART_RECOVERY_MODE=true
-#STALWART_RECOVERY_ADMIN=admin:changeme
-EOF
-chmod 600 /opt/stalwart_data/etc/stalwart.env
-msg_ok "Configured Stalwart"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/stalwart.service
-[Unit]
-Description=Stalwart Mail Server
-Conflicts=postfix.service sendmail.service exim4.service
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/stalwart_data
-EnvironmentFile=-/opt/stalwart_data/etc/stalwart.env
-ExecStart=/opt/stalwart/stalwart --config=/opt/stalwart_data/etc/config.json
-LimitNOFILE=65536
-KillMode=process
-KillSignal=SIGINT
-Restart=on-failure
-RestartSec=5
-SyslogIdentifier=stalwart
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now stalwart
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/stirling-pdf-install.sh

@@ -34,11 +34,7 @@ msg_ok "Installed Dependencies"
 PYTHON_VERSION="3.12" setup_uv
 JAVA_VERSION="25" setup_java
 
-if ! read -r -p "${TAB3}Do you want to use Stirling-PDF with Login? (no/n = without Login) [Y/n] " response; then
+read -r -p "${TAB3}Do you want to use Stirling-PDF with Login? (no/n = without Login) [Y/n] " response
-  # No interactive stdin (EOF): fall back to the no-login install instead of
-  # silently selecting login, which the -z test below would otherwise do.
-  response="n"
-fi
 response=${response,,} # Convert to lowercase
 login_mode="false"
 if [[ "$response" == "y" || "$response" == "yes" || -z "$response" ]]; then
@@ -76,10 +72,7 @@ $STD uv pip install \
   pillow \
   pdf2image
 $STD apt install -y python3-uno python3-pip
-# Install unoserver for the system Python, not the venv activated above: `uno` is
+$STD pip3 install --break-system-packages --timeout=120 unoserver
-# provided by python3-uno for /usr/bin/python3 only, and unoserver.service expects
-# /usr/local/bin/unoserver. A bare `pip3` here resolves to the venv's pip.
-$STD /usr/bin/python3 -m pip install --break-system-packages --timeout=120 unoserver
 ln -sf /opt/.venv/bin/python3 /usr/local/bin/python3
 ln -sf /opt/.venv/bin/pip /usr/local/bin/pip
 msg_ok "Installed Python Dependencies"
@@ -111,7 +104,7 @@ PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:
 EOF
 
 if [[ "$login_mode" == "true" ]]; then
-  cat <<EOF >>/opt/Stirling-PDF/.env
+  cat <<EOF >/opt/Stirling-PDF/.env
 # activate Login
 DISABLE_ADDITIONAL_FEATURES=false
 SECURITY_ENABLELOGIN=true
@@ -132,12 +125,27 @@ $STD fc-cache -fv
 msg_ok "Font Cache Updated"
 
 msg_info "Creating Service"
-# unoserver starts and supervises its own LibreOffice on UNO port 2002, so a separate
+cat <<EOF >/etc/systemd/system/libreoffice-listener.service
-# listener on that port only collides with it. Do not reintroduce one.
+[Unit]
+Description=LibreOffice Headless Listener Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+Group=root
+ExecStart=/usr/lib/libreoffice/program/soffice --headless --invisible --nodefault --nofirststartwizard --nolockcheck --nologo --accept="socket,host=127.0.0.1,port=2002;urp;StarOffice.ComponentContext"
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
 cat <<EOF >/etc/systemd/system/stirlingpdf.service
 [Unit]
 Description=Stirling-PDF service
-After=syslog.target network.target unoserver.service
+After=syslog.target network.target libreoffice-listener.service
+Requires=libreoffice-listener.service
 
 [Service]
 SuccessExitStatus=143
@@ -158,7 +166,8 @@ EOF
 cat <<EOF >/etc/systemd/system/unoserver.service
 [Unit]
 Description=UnoServer RPC Interface
-After=network.target
+After=libreoffice-listener.service
+Requires=libreoffice-listener.service
 
 [Service]
 Type=simple
@@ -170,8 +179,9 @@ EnvironmentFile=/opt/Stirling-PDF/.env
 WantedBy=multi-user.target
 EOF
 
-systemctl enable -q --now unoserver
+systemctl enable -q --now libreoffice-listener
 systemctl enable -q --now stirlingpdf
+systemctl enable -q --now unoserver
 msg_ok "Created Service"
 
 motd_ssh

install/suggestarr-install.sh

@@ -1,74 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/giuseppe99barchetta/SuggestArr
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y build-essential
-msg_ok "Installed Dependencies"
-
-UV_PYTHON="3.12" setup_uv
-NODE_VERSION="22" setup_nodejs
-
-fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"
-
-msg_info "Building Frontend"
-cd /opt/suggestarr/client
-$STD npm install
-$STD npm run build
-mkdir -p /opt/suggestarr/static
-cp -r /opt/suggestarr/client/dist/* /opt/suggestarr/static/
-cp -r /opt/suggestarr/client/node_modules/swagger-ui-dist /opt/suggestarr/static/swagger-ui
-msg_ok "Built Frontend"
-
-msg_info "Setting up Python Environment"
-cd /opt/suggestarr
-$STD uv venv --python 3.12 /opt/suggestarr/.venv
-$STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_service/requirements.txt
-msg_ok "Set up Python Environment"
-
-msg_info "Configuring SuggestArr"
-mkdir -p /opt/suggestarr_data
-cat <<EOF >/opt/suggestarr.env
-SUGGESTARR_PORT=5000
-LOG_LEVEL=info
-CONFIG_DIR=/opt/suggestarr_data
-EOF
-chmod 600 /opt/suggestarr.env
-msg_ok "Configured SuggestArr"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/suggestarr.service
-[Unit]
-Description=SuggestArr
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/suggestarr
-EnvironmentFile=/opt/suggestarr.env
-ExecStart=/opt/suggestarr/.venv/bin/uvicorn api_service.app:asgi_app --host 0.0.0.0 --port 5000 --log-level info
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now suggestarr
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/wanderer-install.sh

@@ -15,10 +15,15 @@ update_os
 
 setup_go
 NODE_VERSION="22" setup_nodejs
+if [[ "$(arch_resolve)" == "arm64" ]]; then
+  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "singlefile" "latest" "/usr/local/bin" "meilisearch-linux-aarch64"
+else
+  fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
+fi
 mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data,data/plugins}
-MEILISEARCH_DB_PATH="/opt/wanderer/data/meili_data" setup_meilisearch
 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
 mkdir -p /opt/wanderer/source/db/data
+mkdir -p /opt/wanderer/source/search
 [[ -e /opt/wanderer/source/db/data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /opt/wanderer/source/db/data/plugins
 
 msg_info "Installing wanderer (patience)"
@@ -37,13 +42,14 @@ done
 msg_ok "Installed wanderer plugins"
 
 msg_info "Creating Service"
+MEILI_KEY=$(openssl rand -hex 32)
 POCKETBASE_KEY=$(openssl rand -hex 16)
 
 cat <<EOF >/opt/wanderer/.env
 ORIGIN=http://${LOCAL_IP}:3000
-MEILI_HTTP_ADDR=127.0.0.1:7700
+MEILI_HTTP_ADDR=${LOCAL_IP}:7700
-MEILI_URL=http://127.0.0.1:7700
+MEILI_URL=http://${LOCAL_IP}:7700
-MEILI_MASTER_KEY=${MEILISEARCH_MASTER_KEY}
+MEILI_MASTER_KEY=${MEILI_KEY}
 PB_URL=${LOCAL_IP}:8090
 PUBLIC_POCKETBASE_URL=http://${LOCAL_IP}:8090
 PUBLIC_VALHALLA_URL=https://valhalla1.openstreetmap.de
@@ -52,6 +58,20 @@ PB_DB_LOCATION=/opt/wanderer/data/pb_data
 MEILI_DB_PATH=/opt/wanderer/data/meili_data
 EOF
 
+cat <<EOF >/opt/wanderer/start.sh
+#!/usr/bin/env bash
+
+trap "kill 0" EXIT
+
+cd /opt/wanderer/source/search && meilisearch --upgrade-db --master-key \$MEILI_MASTER_KEY &
+sleep 1
+cd /opt/wanderer/source/db && ./pocketbase serve --http=\$PB_URL --dir=\$PB_DB_LOCATION &
+cd /opt/wanderer/source/web && node build &
+
+wait -n
+EOF
+chmod +x /opt/wanderer/start.sh
+
 cat <<'EOF' >/usr/local/bin/wanderer-pb
 #!/usr/bin/env bash
 set -a
@@ -62,40 +82,17 @@ exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
 EOF
 chmod +x /usr/local/bin/wanderer-pb
 
-cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
-[Unit]
-Description=wanderer PocketBase
-Wants=network.target
-After=network.target
-PartOf=wanderer-web.service
-StartLimitIntervalSec=10
-StartLimitBurst=5
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/wanderer/source/db
-EnvironmentFile=/opt/wanderer/.env
-ExecStart=/opt/wanderer/source/db/pocketbase serve --http=\${PB_URL} --dir=\${PB_DB_LOCATION}
-Restart=always
-RestartSec=1
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
 cat <<EOF >/etc/systemd/system/wanderer-web.service
 [Unit]
 Description=wanderer
-Wants=network.target meilisearch.service wanderer-pocketbase.service
+After=network.target
-After=network.target meilisearch.service wanderer-pocketbase.service
 StartLimitIntervalSec=10
 StartLimitBurst=5
 
 [Service]
 Type=simple
-WorkingDirectory=/opt/wanderer/source/web
 EnvironmentFile=/opt/wanderer/.env
-ExecStart=/usr/bin/node build
+ExecStart=/usr/bin/bash /opt/wanderer/start.sh
 Restart=always
 RestartSec=1
 
@@ -103,7 +100,7 @@ RestartSec=1
 WantedBy=multi-user.target
 EOF
 sleep 1
-systemctl enable -q --now wanderer-pocketbase wanderer-web
+systemctl enable -q --now wanderer-web
 msg_ok "Created Service"
 
 motd_ssh

tools/addon/add-tailscale-lxc.sh

@@ -57,7 +57,6 @@ while read -r line; do
   CTID_MENU+=("$TAG" "$ITEM" "OFF")
 done < <(pct list | awk 'NR>1')
 
-stop_spinner
 CTID=""
 while [[ -z "${CTID}" ]]; do
   CTID=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Containers on $NODE" --radiolist \

tools/addon/arcane.sh

@@ -59,8 +59,6 @@ function uninstall() {
 # UPDATE
 # ==============================================================================
 function update() {
-  chown -R 65532:65532 /etc/arcane/projects /etc/arcane/builds 2>/dev/null || true
-
   msg_info "Pulling latest ${APP} image"
   cd "$INSTALL_PATH"
   $STD docker compose pull
@@ -85,25 +83,15 @@ function install() {
   msg_ok "Created ${INSTALL_PATH}"
 
   # Generate secrets and config values
-  local ENCRYPTION_KEY JWT_SECRET PROJ_DIR BUILDS_DIR
+  local ENCRYPTION_KEY JWT_SECRET PROJ_DIR
   ENCRYPTION_KEY=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c32)
   JWT_SECRET=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c32)
   PROJ_DIR="/etc/arcane/projects"
-  BUILDS_DIR="/etc/arcane/builds"
 
-  # Arcane drops root and runs as UID/GID 65532 by default (Dockerfile default,
-  # see backend/pkg/libarcane/startup/runtime_identity.go), so bind-mounted
-  # host directories must be owned by that UID or the container can't write to them.
   msg_info "Creating stacks directory"
   mkdir -p "$PROJ_DIR"
-  chown -R 65532:65532 "$PROJ_DIR"
   msg_ok "Created ${PROJ_DIR}"
 
-  msg_info "Creating builds directory"
-  mkdir -p "$BUILDS_DIR"
-  chown -R 65532:65532 "$BUILDS_DIR"
-  msg_ok "Created ${BUILDS_DIR}"
-
   msg_info "Downloading Docker Compose file"
   curl -fsSL "https://raw.githubusercontent.com/getarcaneapp/arcane/refs/heads/main/docker/examples/compose.basic.yaml" -o "$COMPOSE_FILE"
   msg_ok "Downloaded Docker Compose file"
@@ -115,7 +103,6 @@ function install() {
 
   msg_info "Configuring compose and env files"
   sed -i '/^[[:space:]]*#/!s|/host/path/to/projects|'"$PROJ_DIR"'|g' "$COMPOSE_FILE"
-  sed -i '/^[[:space:]]*#/!s|/host/path/to/builds|'"$BUILDS_DIR"'|g' "$COMPOSE_FILE"
   sed -i '/^[[:space:]]*#/!s|ENCRYPTION_KEY=.*|ENCRYPTION_KEY='"$ENCRYPTION_KEY"'|g' "$COMPOSE_FILE"
   sed -i '/^[[:space:]]*#/!s|JWT_SECRET=.*|JWT_SECRET='"$JWT_SECRET"'|g' "$COMPOSE_FILE"
   sed -i '/^[[:space:]]*#/!s|APP_URL=.*|APP_URL=http://localhost:'"$DEFAULT_PORT"'|g' "$ENV_FILE"