fix(pangolin): create migration tables before data transfer to prevent role loss

The previous migration fix attempted to INSERT INTO 'userOrgRoles' before that table existed (it is new in 1.17.1). The error was silently ignored, so no role data was migrated. When drizzle-kit then dropped roleId from userOrgs, all user-role associations were permanently lost. - CREATE TABLE IF NOT EXISTS for userOrgRoles before migrating data - Same treatment for userInviteRoles (also new in 1.17.1) Fixes community-scripts/ProxmoxVE#13857
2026-04-22 01:45:04 +02:00 · 2026-04-20 10:42:26 +02:00
33 changed files with 67 additions and 1019 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -445,38 +445,10 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-04-21
-
-### 🆕 New Scripts
-
-  - gogs ([#13896](https://github.com/community-scripts/ProxmoxVE/pull/13896))
- anchor ([#13895](https://github.com/community-scripts/ProxmoxVE/pull/13895))
- minthcm ([#13903](https://github.com/community-scripts/ProxmoxVE/pull/13903))
- foldergram ([#13900](https://github.com/community-scripts/ProxmoxVE/pull/13900))
-
-### 🚀 Updated Scripts
-
-  - OpenCloud: Pin version to 6.1.0 [@vhsdream](https://github.com/vhsdream) ([#13890](https://github.com/community-scripts/ProxmoxVE/pull/13890))
-
-  - #### 🐞 Bug Fixes
-
-    - Domain-Locker: Update dependencies [@tremor021](https://github.com/tremor021) ([#13901](https://github.com/community-scripts/ProxmoxVE/pull/13901))
-    - homelable: fix install failure by correcting password-reset chmod target [@Copilot](https://github.com/Copilot) ([#13894](https://github.com/community-scripts/ProxmoxVE/pull/13894))
-
-  - #### ✨ New Features
-
-    - FileFlows: Update dependencies [@tremor021](https://github.com/tremor021) ([#13917](https://github.com/community-scripts/ProxmoxVE/pull/13917))
-
 ## 2026-04-20

-### 🆕 New Scripts
-
-  - WhoDB ([#13880](https://github.com/community-scripts/ProxmoxVE/pull/13880))
-
 ### 🚀 Updated Scripts

-  - pangolin: create migration tables before data transfer to prevent role loss [@MickLesk](https://github.com/MickLesk) ([#13874](https://github.com/community-scripts/ProxmoxVE/pull/13874))
-
  - #### 🐞 Bug Fixes

    - Pangolin: pre-apply schema migrations to prevent data loss [@MickLesk](https://github.com/MickLesk) ([#13861](https://github.com/community-scripts/ProxmoxVE/pull/13861))
@@ -486,19 +458,11 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
  - #### ✨ New Features

    - Wanderer: add pocketbase CLI wrapper with env [@MickLesk](https://github.com/MickLesk) ([#13863](https://github.com/community-scripts/ProxmoxVE/pull/13863))
-    - feat(homelable): add password reset utility script [@davidsoncabista](https://github.com/davidsoncabista) ([#13798](https://github.com/community-scripts/ProxmoxVE/pull/13798))

  - #### 🔧 Refactor

-    - Several Scripts: Bump NodeJS to align Node.js versions with upstream for 5 scripts [@MickLesk](https://github.com/MickLesk) ([#13875](https://github.com/community-scripts/ProxmoxVE/pull/13875))
    - Refactor: PMG Post Install [@MickLesk](https://github.com/MickLesk) ([#13693](https://github.com/community-scripts/ProxmoxVE/pull/13693))

-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: detect Perl breakage after LXC stack upgrade and improve storage validation [@MickLesk](https://github.com/MickLesk) ([#13879](https://github.com/community-scripts/ProxmoxVE/pull/13879))
-
 ## 2026-04-19

 ### 🆕 New Scripts
--- a/ct/anchor.sh
+++ b/ct/anchor.sh
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ZhFahim/anchor
-
-APP="Anchor"
-var_tags="${var_tags:-notes;productivity;sync}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f ~/.anchor ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "anchor" "ZhFahim/anchor"; then
-    msg_info "Stopping Services"
-    systemctl stop anchor-web anchor-server
-    msg_ok "Stopped Services"
-
-    msg_info "Backing up Configuration"
-    cp /opt/anchor/.env /opt/anchor.env.bak
-    msg_ok "Backed up Configuration"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "anchor" "ZhFahim/anchor" "tarball"
-
-    msg_info "Building Server"
-    cd /opt/anchor/server
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm prisma generate
-    $STD pnpm build
-    [[ -d src/generated ]] && mkdir -p dist/src && cp -R src/generated dist/src/
-    msg_ok "Built Server"
-
-    msg_info "Building Web Interface"
-    cd /opt/anchor/web
-    $STD pnpm install --frozen-lockfile
-    SERVER_URL=http://127.0.0.1:3001 $STD pnpm build
-    cp -r .next/static .next/standalone/.next/static
-    cp -r public .next/standalone/public
-    msg_ok "Built Web Interface"
-
-    cp /opt/anchor.env.bak /opt/anchor/.env
-    rm -f /opt/anchor.env.bak
-
-    msg_info "Running Database Migrations"
-    cd /opt/anchor/server
-    set -a && source /opt/anchor/.env && set +a
-    $STD pnpm prisma migrate deploy
-    msg_ok "Ran Database Migrations"
-
-    msg_info "Starting Services"
-    systemctl start anchor-server anchor-web
-    msg_ok "Started Services"
-    msg_ok "Updated ${APP}"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/domain-locker.sh
+++ b/ct/domain-locker.sh
@@ -20,43 +20,41 @@ color
 catch_errors

 function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/domain-locker ]]; then
-    msg_error "No ${APP} Installation Found!"
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -d /opt/domain-locker ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+
+    if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
+        msg_info "Stopping Service"
+        systemctl stop domain-locker
+        msg_info "Service stopped"
+
+        PG_VERSION="17" setup_postgresql
+        NODE_VERSION="22" setup_nodejs
+        CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker" "tarball"
+
+        msg_info "Installing Modules (patience)"
+        cd /opt/domain-locker
+        $STD npm install
+        msg_ok "Installed Modules"
+
+        msg_info "Building Domain-Locker (a lot of patience)"
+        set -a
+        source /opt/domain-locker.env
+        set +a
+        $STD npm run build
+        msg_info "Built Domain-Locker"
+
+        msg_info "Restarting Services"
+        systemctl start domain-locker
+        msg_ok "Restarted Services"
+        msg_ok "Updated successfully!"
+    fi
    exit
-  fi
-
-  ensure_dependencies whois
-
-  if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
-    msg_info "Stopping Service"
-    systemctl stop domain-locker
-    msg_info "Service stopped"
-
-    PG_VERSION="17" setup_postgresql
-    NODE_VERSION="22" setup_nodejs
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker" "tarball"
-
-    msg_info "Installing Modules (patience)"
-    cd /opt/domain-locker
-    $STD npm install
-    msg_ok "Installed Modules"
-
-    msg_info "Building Domain-Locker (a lot of patience)"
-    set -a
-    source /opt/domain-locker.env
-    set +a
-    $STD npm run build
-    msg_info "Built Domain-Locker"
-
-    msg_info "Restarting Services"
-    systemctl start domain-locker
-    msg_ok "Restarted Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
 }

 start
--- a/ct/foldergram.sh
+++ b/ct/foldergram.sh
@@ -1,61 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/foldergram/foldergram
-
-APP="Foldergram"
-var_tags="${var_tags:-photos}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/foldergram ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "foldergram" "foldergram/foldergram"; then
-    msg_info "Stopping Service"
-    systemctl stop foldergram
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "foldergram" "foldergram/foldergram" "tarball"
-
-    msg_info "Installing Foldergram"
-    cd /opt/foldergram
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm run build
-    msg_ok "Installed Foldergram"
-
-    msg_info "Starting Service"
-    systemctl start foldergram
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  cleanup_lxc
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4141${CL}"
--- a/ct/gogs.sh
+++ b/ct/gogs.sh
@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://gogs.io/
-
-APP="Gogs"
-var_tags="${var_tags:-git;code;devops}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/gogs/gogs ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "gogs" "gogs/gogs"; then
-    msg_info "Stopping Service"
-    systemctl stop gogs
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Data"
-    cp -r /opt/gogs/custom /opt/gogs_custom_backup
-    cp -r /opt/gogs/data /opt/gogs_data_backup
-    msg_ok "Backed up Data"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gogs" "gogs/gogs" "prebuild" "latest" "/opt/gogs" "gogs_*_linux_amd64.tar.gz"
-
-    msg_info "Restoring Data"
-    cp -r /opt/gogs_custom_backup/. /opt/gogs/custom
-    cp -r /opt/gogs_data_backup/. /opt/gogs/data
-    rm -rf /opt/gogs_custom_backup /opt/gogs_data_backup
-    msg_ok "Restored Data"
-
-    msg_info "Starting Service"
-    systemctl start gogs
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/headers/anchor
+++ b/ct/headers/anchor
@@ -1,6 +0,0 @@
-    ___               __              
-   /   |  ____  _____/ /_  ____  _____
-  / /| | / __ \/ ___/ __ \/ __ \/ ___/
- / ___ |/ / / / /__/ / / / /_/ / /    
-/_/  |_/_/ /_/\___/_/ /_/\____/_/     
-                                      
--- a/ct/headers/foldergram
+++ b/ct/headers/foldergram
@@ -1,6 +0,0 @@
-    ______      __    __                                   
-   / ____/___  / /___/ /__  _________ __________ _____ ___ 
-  / /_  / __ \/ / __  / _ \/ ___/ __ `/ ___/ __ `/ __ `__ \
- / __/ / /_/ / / /_/ /  __/ /  / /_/ / /  / /_/ / / / / / /
-/_/    \____/_/\__,_/\___/_/   \__, /_/   \__,_/_/ /_/ /_/ 
-                              /____/                       
--- a/ct/headers/gogs
+++ b/ct/headers/gogs
@@ -1,6 +0,0 @@
-   ______                
-  / ____/___  ____ ______
- / / __/ __ \/ __ `/ ___/
-/ /_/ / /_/ / /_/ (__  ) 
-\____/\____/\__, /____/  
-           /____/        
--- a/ct/headers/minthcm
+++ b/ct/headers/minthcm
@@ -1,6 +0,0 @@
-    __  ____       __  __  __________  ___
-   /  |/  (_)___  / /_/ / / / ____/  |/  /
-  / /|_/ / / __ \/ __/ /_/ / /   / /|_/ / 
- / /  / / / / / / /_/ __  / /___/ /  / /  
-/_/  /_/_/_/ /_/\__/_/ /_/\____/_/  /_/   
-                                          
--- a/ct/headers/whodb
+++ b/ct/headers/whodb
@@ -1,6 +0,0 @@
- _       ____          ____  ____ 
-| |     / / /_  ____  / __ \/ __ )
-| | /| / / __ \/ __ \/ / / / __  |
-| |/ |/ / / / / /_/ / /_/ / /_/ / 
-|__/|__/_/ /_/\____/_____/_____/  
-                                  
--- a/ct/iobroker.sh
+++ b/ct/iobroker.sh
@@ -27,9 +27,6 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-
-  NODE_VERSION="24" setup_nodejs
-
  msg_info "Updating ${APP} LXC"
  $STD apt update
  $STD apt -y upgrade
--- a/ct/kima-hub.sh
+++ b/ct/kima-hub.sh
@@ -29,8 +29,6 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="22" setup_nodejs
-
  if check_for_gh_release "kima-hub" "Chevron7Locked/kima-hub"; then
    msg_info "Stopping Services"
    systemctl stop kima-frontend kima-backend kima-analyzer kima-analyzer-clap
--- a/ct/minthcm.sh
+++ b/ct/minthcm.sh
@@ -1,41 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MintHCM
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/minthcm/minthcm
-
-APP="MintHCM"
-var_tags="${var_tags:-hcm}"
-var_disk="${var_disk:-20}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var/www/MintHCM ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_custom "🚀" "${GN}" "The app offers a built-in updater. Please use it."
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/myip.sh
+++ b/ct/myip.sh
@@ -28,8 +28,6 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
-
  if check_for_gh_release "myip" "jason5ng32/MyIP"; then
    msg_info "Stopping Services"
    systemctl stop myip
--- a/ct/opencloud.sh
+++ b/ct/opencloud.sh
@@ -29,7 +29,7 @@ function update_script() {
    exit
  fi

-  RELEASE="v6.1.0"
+  RELEASE="v6.0.0"
  if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    msg_info "Stopping services"
    systemctl stop opencloud opencloud-wopi
--- a/ct/outline.sh
+++ b/ct/outline.sh
@@ -28,7 +28,7 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
+  NODE_VERSION="22" setup_nodejs

  if check_for_gh_release "outline" "outline/outline"; then
    msg_info "Stopping Services"
--- a/ct/shelfmark.sh
+++ b/ct/shelfmark.sh
@@ -29,7 +29,7 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
+  NODE_VERSION="22" setup_nodejs
  PYTHON_VERSION="3.12" setup_uv

  if check_for_gh_release "shelfmark" "calibrain/shelfmark"; then
--- a/ct/whodb.sh
+++ b/ct/whodb.sh
@@ -1,54 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://whodb.com/
-
-APP="WhoDB"
-var_tags="${var_tags:-database;management;gui}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/whodb/whodb ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "whodb" "clidey/whodb"; then
-    msg_info "Stopping Service"
-    systemctl stop whodb
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "whodb" "clidey/whodb" "singlefile" "latest" "/opt/whodb" "whodb-*-linux-amd64"
-
-    msg_info "Starting Service"
-    systemctl start whodb
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/install/anchor-install.sh
+++ b/install/anchor-install.sh
@@ -1,99 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/ZhFahim/anchor
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="anchor" PG_DB_USER="anchor" setup_postgresql_db
-
-fetch_and_deploy_gh_release "anchor" "ZhFahim/anchor" "tarball"
-
-msg_info "Building Server"
-cd /opt/anchor/server
-$STD pnpm install --frozen-lockfile
-$STD pnpm prisma generate
-$STD pnpm build
-[[ -d src/generated ]] && mkdir -p dist/src && cp -R src/generated dist/src/
-msg_ok "Built Server"
-
-msg_info "Building Web Interface"
-cd /opt/anchor/web
-$STD pnpm install --frozen-lockfile
-SERVER_URL=http://127.0.0.1:3001 $STD pnpm build
-cp -r .next/static .next/standalone/.next/static
-cp -r public .next/standalone/public
-msg_ok "Built Web Interface"
-
-msg_info "Configuring Application"
-JWT_SECRET=$(openssl rand -base64 32)
-cat <<EOF >/opt/anchor/.env
-APP_URL=http://${LOCAL_IP}:3000
-JWT_SECRET=${JWT_SECRET}
-DATABASE_URL=postgresql://anchor:${PG_DB_PASS}@localhost:5432/anchor
-PG_HOST=localhost
-PG_USER=anchor
-PG_PASSWORD=${PG_DB_PASS}
-PG_DATABASE=anchor
-PG_PORT=5432
-EOF
-msg_ok "Configured Application"
-
-msg_info "Running Database Migrations"
-cd /opt/anchor/server
-set -a && source /opt/anchor/.env && set +a
-$STD pnpm prisma migrate deploy
-msg_ok "Ran Database Migrations"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/anchor-server.service
-[Unit]
-Description=Anchor API Server
-After=network.target postgresql.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/anchor/server
-EnvironmentFile=/opt/anchor/.env
-ExecStart=/usr/bin/node dist/src/main.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-cat <<EOF >/etc/systemd/system/anchor-web.service
-[Unit]
-Description=Anchor Web Interface
-After=network.target anchor-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/anchor/web/.next/standalone
-EnvironmentFile=/opt/anchor/.env
-Environment=PORT=3000 HOSTNAME=0.0.0.0 NODE_ENV=production
-ExecStart=/usr/bin/node server.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now anchor-server anchor-web
-msg_ok "Created Services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/domain-locker-install.sh
+++ b/install/domain-locker-install.sh
@@ -13,10 +13,6 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing dependencies"
-$STD apt install -y whois
-msg_ok "Installed dependencies"
-
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="domainlocker_db" PG_DB_USER="domainlocker" setup_postgresql_db
 NODE_VERSION="22" setup_nodejs
--- a/install/fileflows-install.sh
+++ b/install/fileflows-install.sh
@@ -5,6 +5,7 @@
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://fileflows.com/

+# Import Functions und Setup
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
@@ -16,7 +17,6 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
  ffmpeg \
-  pciutils \
  imagemagick
 msg_ok "Installed Dependencies"

@@ -35,7 +35,6 @@ fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"

 $STD ln -svf /usr/bin/ffmpeg /usr/local/bin/ffmpeg
 $STD ln -svf /usr/bin/ffprobe /usr/local/bin/ffprobe
-$STD rm -rf /opt/fileflows/Server/runtimes/win-*

 read -r -p "${TAB3}Do you want to install FileFlows Server or Node? (S/N): " install_server

--- a/install/foldergram-install.sh
+++ b/install/foldergram-install.sh
@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/foldergram/foldergram
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y --no-install-recommends ffmpeg
-msg_ok "Installed Dependencies"
-
-NODE_VERSION=25 NODE_MODULE="corepack" setup_nodejs
-
-fetch_and_deploy_gh_release "foldergram" "foldergram/foldergram" "tarball"
-
-msg_info "Configuring Foldergram"
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-$STD corepack enable
-cd /opt/foldergram
-$STD pnpm install
-$STD pnpm run build
-mkdir -p /opt/foldergram_media
-cat <<EOF >/opt/foldergram_media/foldergram.env
-NODE_ENV=production
-SERVER_PORT=4141
-DATA_ROOT=/opt/foldergram_media
-GALLERY_ROOT=/opt/foldergram_media/gallery
-DB_DIR=/opt/foldergram_media/db
-THUMBNAILS_DIR=/opt/foldergram_media/thumbnails
-PREVIEWS_DIR=/opt/foldergram_media/previews
-IMAGE_DETAIL_SOURCE=preview
-DERIVATIVE_MODE=eager
-GALLERY_EXCLUDED_FOLDERS=
-EOF
-msg_ok "Configured Foldergram"
-
-msg_info "Creating services"
-cat <<EOF >/etc/systemd/system/foldergram.service
-[Unit]
-Description=Foldergram Service
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/foldergram
-ExecStart=/usr/bin/pnpm start
-Restart=always
-EnvironmentFile=/opt/foldergram_media/foldergram.env
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now foldergram
-msg_ok "Created services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/gogs-install.sh
+++ b/install/gogs-install.sh
@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://gogs.io/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y git
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "gogs" "gogs/gogs" "prebuild" "latest" "/opt/gogs" "gogs_*_linux_amd64.tar.gz"
-
-msg_info "Setting up Gogs"
-mkdir -p /opt/gogs/{custom/conf,data,log}
-msg_ok "Set up Gogs"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/gogs.service
-[Unit]
-Description=Gogs Git Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/gogs
-ExecStart=/opt/gogs/gogs web
-Restart=on-failure
-RestartSec=5
-Environment=USER=root
-Environment=HOME=/root
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now gogs
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/homelable-install.sh
+++ b/install/homelable-install.sh
@@ -45,30 +45,6 @@ STATUS_CHECKER_INTERVAL=60
 EOF
 msg_ok "Configured Homelable"

-msg_info "Creating Password Reset Utility"
-cat <<'EOF' >/root/change_password.sh
-#!/usr/bin/env bash
-
-NEW_PASS=""
-
-while [[ -z "$NEW_PASS" ]]; do
-    read -s -p "Enter new password: " NEW_PASS
-    echo ""
-    if [[ -z "$NEW_PASS" ]]; then
-        echo "Error: Password cannot be blank. Try again."
-    fi
-done
-
-HASH=$(/opt/homelable/backend/.venv/bin/python -c "from passlib.context import CryptContext; print(CryptContext(schemes=['bcrypt']).hash('${NEW_PASS}'))")
-
-sed -i "s|^AUTH_PASSWORD_HASH=.*|AUTH_PASSWORD_HASH='${HASH}'|" /opt/homelable/backend/.env
-
-systemctl restart homelable
-echo "Password updated and service restarted successfully!"
-EOF
-chmod +x /root/change_password.sh
-msg_ok "Created Password Reset Utility"
-
 msg_info "Building Frontend"
 cd /opt/homelable/frontend
 $STD npm ci
--- a/install/iobroker-install.sh
+++ b/install/iobroker-install.sh
@@ -28,7 +28,7 @@ if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
  exit 10
 fi

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs

 msg_info "Installing ioBroker (Patience)"
 $STD bash <(curl -fsSL https://iobroker.net/install.sh)
--- a/install/kima-hub-install.sh
+++ b/install/kima-hub-install.sh
@@ -28,7 +28,7 @@ msg_ok "Installed Dependencies"

 PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 PG_DB_NAME="kima" PG_DB_USER="kima" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
-NODE_VERSION="22" setup_nodejs
+NODE_VERSION="20" setup_nodejs

 msg_info "Configuring Redis"
 systemctl enable -q --now redis-server
--- a/install/minthcm-install.sh
+++ b/install/minthcm-install.sh
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MintHCM
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/minthcm/minthcm
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PHP_VERSION="8.2"
-PHP_APACHE="YES" PHP_MODULE="mysql,redis" PHP_FPM="YES" setup_php
-setup_composer
-setup_mariadb
-$STD mariadb -u root -e "SET GLOBAL sql_mode='STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION'"
-
-fetch_and_deploy_gh_release "MintHCM" "minthcm/minthcm" "tarball" "latest" "/var/www/MintHCM"
-
-msg_info "Configuring MintHCM"
-mkdir -p /etc/php/${PHP_VERSION}/mods-available
-cp /var/www/MintHCM/docker/config/000-default.conf /etc/apache2/sites-available/000-default.conf
-cp /var/www/MintHCM/docker/config/php-minthcm.ini /etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini
-mkdir -p "/etc/php/${PHP_VERSION}/cli/conf.d" "/etc/php/${PHP_VERSION}/apache2/conf.d"
-ln -s "/etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini" "/etc/php/${PHP_VERSION}/cli/conf.d/20-minthcm.ini"
-ln -s "/etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini" "/etc/php/${PHP_VERSION}/apache2/conf.d/20-minthcm.ini"
-chown -R www-data:www-data /var/www/MintHCM
-find /var/www/MintHCM -type d -exec chmod 755 {} \;
-find /var/www/MintHCM -type f -exec chmod 644 {} \;
-mkdir -p /var/www/script
-cp /var/www/MintHCM/docker/script/generate_config.php /var/www/script/generate_config.php
-cp /var/www/MintHCM/docker/.env /var/www/script/.env
-chown -R www-data:www-data /var/www/script
-$STD a2enmod rewrite
-$STD a2enmod headers
-$STD systemctl restart apache2
-msg_ok "Configured MintHCM"
-
-msg_info "Setting up Elasticsearch"
-setup_deb822_repo \
-  "elasticsearch" \
-  "https://artifacts.elastic.co/GPG-KEY-elasticsearch" \
-  "https://artifacts.elastic.co/packages/7.x/apt" \
-  "stable"
-$STD apt install -y elasticsearch
-echo "-Xms2g" >>/etc/elasticsearch/jvm.options
-echo "-Xmx2g" >>/etc/elasticsearch/jvm.options
-$STD /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment -b
-systemctl enable -q --now elasticsearch
-msg_ok "Set up Elasticsearch"
-
-msg_info "Configuring Database"
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE USER 'minthcm'@'localhost' IDENTIFIED BY '${DB_PASS}';"
-$STD mariadb -u root -e "GRANT ALL ON *.* TO 'minthcm'@'localhost'; FLUSH PRIVILEGES;"
-sed -i "s/^DB_HOST=.*/DB_HOST=localhost/" /var/www/script/.env
-sed -i "s/^DB_USER=.*/DB_USER=minthcm/" /var/www/script/.env
-sed -i "s/^DB_PASS=.*/DB_PASS=$DB_PASS/" /var/www/script/.env
-sed -i "s/^ELASTICSEARCH_HOST=.*/ELASTICSEARCH_HOST=localhost/" /var/www/script/.env
-msg_ok "Configured Database"
-
-msg_info "Generating configuration file"
-set -a
-source /var/www/script/.env
-set +a
-$STD php /var/www/script/generate_config.php
-msg_ok "Generated configuration file"
-
-msg_info "Installing MintHCM"
-cd /var/www/MintHCM
-$STD sudo -u www-data php MintCLI install </var/www/MintHCM/configMint4
-printf "*    *    *    *    *     cd /var/www/MintHCM/legacy; php -f cron.php > /dev/null 2>&1\n" >/var/spool/cron/crontabs/www-data
-service cron start
-rm -f /var/www/MintHCM/configMint4
-msg_ok "Installed MintHCM"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/myip-install.sh
+++ b/install/myip-install.sh
@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "myip" "jason5ng32/MyIP" "tarball"

 msg_info "Configuring MyIP"
--- a/install/opencloud-install.sh
+++ b/install/opencloud-install.sh
@@ -64,7 +64,7 @@ $STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPA
 echo "$COOLPASS" >~/.coolpass
 msg_ok "Installed Collabora Online"

-fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v6.1.0" "/usr/bin" "opencloud-*-linux-amd64"
+fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v6.0.0" "/usr/bin" "opencloud-*-linux-amd64"
 mv /usr/bin/OpenCloud /usr/bin/opencloud

 msg_info "Configuring OpenCloud"
--- a/install/outline-install.sh
+++ b/install/outline-install.sh
@@ -20,7 +20,7 @@ $STD apt install -y \
  redis
 msg_ok "Installed Dependencies"

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="outline" PG_DB_USER="outline" setup_postgresql_db

--- a/install/shelfmark-install.sh
+++ b/install/shelfmark-install.sh
@@ -115,7 +115,7 @@ else
  msg_ok "Installed internal bypasser dependencies"
 fi

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 PYTHON_VERSION="3.12" setup_uv

 fetch_and_deploy_gh_release "shelfmark" "calibrain/shelfmark" "tarball" "latest" "/opt/shelfmark"
--- a/install/whodb-install.sh
+++ b/install/whodb-install.sh
@@ -1,40 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://whodb.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "whodb" "clidey/whodb" "singlefile" "latest" "/opt/whodb" "whodb-*-linux-amd64"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/whodb.service
-[Unit]
-Description=WhoDB Database Management
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/whodb
-ExecStart=/opt/whodb/whodb
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now whodb
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/misc/build.func
+++ b/misc/build.func
@@ -3658,7 +3658,7 @@ build_container() {
    local _mount_clean="${ALLOW_MOUNT_FS// /}"
    _mount_clean="${_mount_clean%%,}"
    _mount_clean="${_mount_clean##,}"
-    _mount_clean="${_mount_clean%%;}"
+    _mount_clean="${_mount_clean%%;}"  
    _mount_clean="${_mount_clean//,/;}"
    if [ -n "$_mount_clean" ]; then
      [ -n "$FEATURES" ] && FEATURES="$FEATURES,"
@@ -5250,133 +5250,9 @@ create_lxc_container() {
  # Extract Debian OS minor from template name: debian-13-standard_13.1-1_amd64.tar.zst => "13.1"
  parse_template_osver() { sed -n 's/.*_\([0-9][0-9]*\(\.[0-9]\+\)\?\)-.*/\1/p' <<<"$1"; }

-  # Switch to the previous OS major version template and retry pct create
-  # Determines the fallback version automatically based on available templates.
-  # Returns: 0 = success, 1 = failed
-  fallback_to_previous_os_version() {
-    local old_template="$TEMPLATE"
-    local os_type="${PCT_OSTYPE:-}"
-    local current_ver="${PCT_OSVERSION:-}"
-
-    # Determine template search pattern based on OS type
-    local tpl_pattern=""
-    case "$os_type" in
-    debian | ubuntu) tpl_pattern="-standard_" ;;
-    alpine | fedora | rocky | centos) tpl_pattern="-default_" ;;
-    *) tpl_pattern="" ;;
-    esac
-
-    msg_info "Searching for an older $os_type template (current: $os_type $current_ver)"
-
-    # Collect all available versions for this OS type (local + online)
-    local -a all_versions=()
-
-    # Local templates
-    mapfile -t _local_vers < <(
-      pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
-        awk -v os="$os_type" -v pat="$tpl_pattern" '$1 ~ ("^"os"|/"os) && $1 ~ pat {print $1}' |
-        sed 's|.*/||' |
-        sed -E "s/^${os_type}-([0-9]+(\.[0-9]+)?).*/\1/" |
-        sort -u -V
-    )
-    all_versions+=("${_local_vers[@]}")
-
-    # Online templates (only if needed)
-    if command -v timeout &>/dev/null; then
-      timeout 30 pveam update >/dev/null 2>&1 || true
-    else
-      pveam update >/dev/null 2>&1 || true
-    fi
-    mapfile -t _online_vers < <(
-      pveam available -section system 2>/dev/null |
-        awk '{print $2}' |
-        grep -E "^${os_type}-[0-9]" |
-        { [[ -n "$tpl_pattern" ]] && grep "$tpl_pattern" || cat; } |
-        sed -E "s/^${os_type}-([0-9]+(\.[0-9]+)?).*/\1/" |
-        sort -u -V 2>/dev/null || true
-    )
-    all_versions+=("${_online_vers[@]}")
-
-    # Deduplicate and sort, find the highest version below current
-    local fallback_ver=""
-    fallback_ver=$(printf '%s\n' "${all_versions[@]}" | sort -u -V | awk -v cur="$current_ver" '{
-      # Compare major versions: extract major part
-      split($0, a, ".")
-      split(cur, b, ".")
-      if (a[1]+0 < b[1]+0) ver=$0
-    } END { if (ver) print ver }')
-
-    if [[ -z "$fallback_ver" ]]; then
-      msg_error "No older $os_type template version found."
-      return 1
-    fi
-
-    msg_ok "Fallback version: $os_type $fallback_ver"
-
-    # Find the actual template file for this version
-    local fallback_search="${os_type}-${fallback_ver}"
-    local fallback_template=""
-
-    # Check local first
-    mapfile -t _fb_local < <(
-      pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
-        awk -v search="$fallback_search" -v pat="$tpl_pattern" '$1 ~ search && $1 ~ pat {print $1}' |
-        sed 's|.*/||' | sort -t - -k 2 -V
-    )
-    if [[ ${#_fb_local[@]} -gt 0 ]]; then
-      fallback_template="${_fb_local[-1]}"
-    else
-      # Check online
-      mapfile -t _fb_online < <(
-        pveam available -section system 2>/dev/null |
-          awk '{print $2}' |
-          grep -E "^${fallback_search}.*${tpl_pattern}" |
-          sort -t - -k 2 -V 2>/dev/null || true
-      )
-      [[ ${#_fb_online[@]} -gt 0 ]] && fallback_template="${_fb_online[-1]}"
-    fi
-
-    if [[ -z "$fallback_template" ]]; then
-      msg_error "No template found for $os_type $fallback_ver."
-      return 1
-    fi
-
-    msg_ok "Found template: $fallback_template"
-
-    # Download if needed
-    local fallback_path
-    fallback_path="$(pvesm path "$TEMPLATE_STORAGE:vztmpl/$fallback_template" 2>/dev/null || true)"
-    [[ -z "$fallback_path" ]] && fallback_path="/var/lib/vz/template/cache/$fallback_template"
-
-    if [[ ! -f "$fallback_path" ]]; then
-      msg_info "Downloading $os_type $fallback_ver template"
-      if ! pveam download "$TEMPLATE_STORAGE" "$fallback_template" >>"${BUILD_LOG:-/dev/null}" 2>&1; then
-        msg_error "Failed to download $os_type $fallback_ver template."
-        return 1
-      fi
-      msg_ok "Template downloaded"
-    fi
-
-    # Update variables
-    TEMPLATE="$fallback_template"
-    TEMPLATE_PATH="$fallback_path"
-    PCT_OSVERSION="$fallback_ver"
-    export PCT_OSVERSION
-
-    # Retry pct create
-    msg_info "Retrying container creation with $os_type $fallback_ver"
-    if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
-      msg_ok "Container created successfully with $os_type $fallback_ver (fallback from $old_template)."
-      return 0
-    else
-      msg_error "Container creation with $os_type $fallback_ver also failed. See $LOGFILE"
-      return 1
-    fi
-  }
-
  # Offer upgrade for pve-container/lxc-pve if candidate > installed; optional auto-retry pct create
  # Returns:
-  #   0 = no upgrade needed / container created after upgrade or fallback
+  #   0 = no upgrade needed
  #   1 = upgraded (and if do_retry=yes and retry succeeded, creation done)
  #   2 = user declined
  #   3 = upgrade attempted but failed OR retry failed
@@ -5404,58 +5280,13 @@ create_lxc_container() {
    echo "  pve-container: installed=${_pvec_i:-n/a}  candidate=${_pvec_c:-n/a}"
    echo "  lxc-pve     : installed=${_lxcp_i:-n/a}  candidate=${_lxcp_c:-n/a}"
    echo
-
-    # Offer older OS version fallback when template version might be too new for LXC stack
-    local _has_fallback_option=false
-    if [[ -n "${PCT_OSTYPE:-}" && -n "${PCT_OSVERSION:-}" ]]; then
-      _has_fallback_option=true
-      echo "  [1] Upgrade LXC stack now (recommended)"
-      echo "  [2] Use an older ${PCT_OSTYPE} template instead (may not work with all scripts)"
-      echo "  [3] Cancel"
-      echo
-      read -rp "Select option [1/2/3]: " _ans </dev/tty
-    else
-      read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
-    fi
-
-    if [[ "$_has_fallback_option" == true ]]; then
-      case "$_ans" in
-      1)
-        _ans="y"
-        ;;
-      2)
-        if [[ "$do_retry" == "yes" ]]; then
-          if fallback_to_previous_os_version; then
-            return 0
-          else
-            return 3
-          fi
-        else
-          msg_custom "ℹ️" "${YW}" "OS version fallback is only available during container creation."
-          return 2
-        fi
-        ;;
-      *)
-        return 2
-        ;;
-      esac
-    fi
-
+    read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
    case "${_ans,,}" in
    y | yes)
      msg_info "Upgrading Proxmox LXC stack (pve-container, lxc-pve)"
      apt_update_safe
      if $STD apt-get install -y --only-upgrade pve-container lxc-pve; then
        msg_ok "LXC stack upgraded."
-        # Verify pct binary still works after upgrade (partial upgrades can break Perl modules)
-        if ! pct list &>/dev/null; then
-          msg_error "LXC stack upgrade caused PVE tool breakage (likely Perl module incompatibility)."
-          msg_custom "⚠️" "${YW}" "A partial package upgrade has left the PVE stack in an inconsistent state."
-          msg_custom "🔧" "${YW}" "Please run the following on the Proxmox host, then retry:"
-          echo -e "${TAB}  apt update && apt dist-upgrade -y"
-          echo -e "${TAB}  reboot"
-          return 3
-        fi
        if [[ "$do_retry" == "yes" ]]; then
          msg_info "Retrying container creation after upgrade"
          if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
@@ -5554,35 +5385,10 @@ create_lxc_container() {
  fi

  msg_info "Validating storage '$CONTAINER_STORAGE'"
-  # Check if storage.cfg is accessible (pmxcfs must be mounted)
-  if [[ ! -f /etc/pve/storage.cfg ]]; then
-    if ! mountpoint -q /etc/pve 2>/dev/null; then
-      msg_error "Proxmox cluster filesystem (pmxcfs) is not mounted at /etc/pve."
-      msg_custom "🔧" "${YW}" "Try: systemctl restart pve-cluster"
-    else
-      msg_error "/etc/pve/storage.cfg does not exist."
-      msg_custom "🔧" "${YW}" "Check Proxmox cluster filesystem integrity: pvecm status"
-    fi
-    exit 213
-  fi
-
-  STORAGE_TYPE=$(grep -E "^[^:]+:[[:space:]]*$CONTAINER_STORAGE[[:space:]]*$" /etc/pve/storage.cfg | cut -d: -f1 | head -1 || true)
-
-  # Fallback: use pvesm status to determine storage type
-  if [[ -z "$STORAGE_TYPE" ]]; then
-    STORAGE_TYPE=$(pvesm status -storage "$CONTAINER_STORAGE" 2>/dev/null | awk 'NR>1{print $2}')
-  fi
+  STORAGE_TYPE=$(grep -E "^[^:]+: $CONTAINER_STORAGE$" /etc/pve/storage.cfg | cut -d: -f1 | head -1 || true)

  if [[ -z "$STORAGE_TYPE" ]]; then
    msg_error "Storage '$CONTAINER_STORAGE' not found in /etc/pve/storage.cfg"
-    msg_custom "📋" "${YW}" "Available storages: $(pvesm status 2>/dev/null | awk 'NR>1{printf "%s (%s) ", $1, $2}' || echo 'n/a')"
-    if [[ -r /etc/pve/storage.cfg ]]; then
-      msg_custom "📋" "${YW}" "Storage definitions found in config:"
-      grep -E '^[a-z]+:' /etc/pve/storage.cfg 2>/dev/null | while IFS= read -r _line; do
-        echo "${TAB}  $_line"
-      done
-    fi
-    msg_custom "📖" "${YW}" "See https://pve.proxmox.com/wiki/Storage for storage configuration details."
    exit 213
  fi

@@ -6005,17 +5811,6 @@ create_lxc_container() {
  if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
    msg_debug "Container creation failed on ${TEMPLATE_STORAGE}. Checking error..."

-    # Check for Perl module breakage (partial PVE upgrade)
-    if grep -qiE 'Compilation failed|Bareword.*not allowed' "$LOGFILE"; then
-      msg_error "Container creation failed due to broken Perl modules on the PVE host."
-      msg_custom "⚠️" "${YW}" "This usually happens after a partial PVE package upgrade."
-      msg_custom "🔧" "${YW}" "Please run the following on the Proxmox host, then retry:"
-      echo -e "${TAB}  apt update && apt dist-upgrade -y"
-      echo -e "${TAB}  reboot"
-      _flush_pct_log
-      exit 232
-    fi
-
    # Check if CTID collision (race condition: ID claimed between validation and creation)
    if grep -qiE 'already exists|already in use' "$LOGFILE"; then
      local old_ctid="$CTID"
@@ -6061,16 +5856,15 @@ create_lxc_container() {
              rc=$?
              case $rc in
              0) : ;; # success - container created, continue
-              2 | 3)
-                # Upgrade declined or failed — try older OS version as last resort
-                msg_warn "Attempting older ${PCT_OSTYPE:-} version as last resort"
-                if fallback_to_previous_os_version; then
-                  : # success
-                else
-                  msg_error "All recovery options exhausted. Please inspect: $LOGFILE"
-                  _flush_pct_log
-                  exit 231
-                fi
+              2)
+                msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+                _flush_pct_log
+                exit 231
+                ;;
+              3)
+                msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+                _flush_pct_log
+                exit 231
                ;;
              esac
            else
@@ -6094,16 +5888,15 @@ create_lxc_container() {
            rc=$?
            case $rc in
            0) : ;; # success - container created, continue
-            2 | 3)
-              # Upgrade declined or failed — try older OS version as last resort
-              msg_warn "Attempting older ${PCT_OSTYPE:-} version as last resort"
-              if fallback_to_previous_os_version; then
-                : # success
-              else
-                msg_error "All recovery options exhausted. Please inspect: $LOGFILE"
-                _flush_pct_log
-                exit 231
-              fi
+            2)
+              msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
+              _flush_pct_log
+              exit 231
+              ;;
+            3)
+              msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
+              _flush_pct_log
+              exit 231
              ;;
            esac
          else
@@ -6122,7 +5915,7 @@ create_lxc_container() {
      fi
    fi # close CTID collision else-branch
  fi
-  set +f # re-enable globbing after pct create block
+  set +f  # re-enable globbing after pct create block

  # Verify container exists (allow up to 10s for pmxcfs sync in clusters)
  local _pct_visible=false