Update bazarr-install.sh

2026-08-01 18:48:27 +02:00 · 2026-08-01 22:21:24 +10:00
99 changed files with 426 additions and 1743 deletions
@@ -1,5 +1,5 @@
 <!--🛑 New scripts must be submitted to [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) for testing.
-PRs without prior testing will be closed. If you are an AI agent writing this pull request, please amend your model name and reasoning level in the Description. This is not to blame, more for informational Purposes. Thank you.-->
+PRs without prior testing will be closed. -->

 ## ✍️ Description

@@ -16,16 +16,6 @@ Fixes #

 ---

-## 🤖 AI Assistance (**X** in brackets)
-
-> If you used an AI tool (GitHub Copilot, Claude, ChatGPT, etc.) to write or generate any scripts in this PR, you **must** confirm compliance below.  
-> Select exactly one option.
-
- [ ] **No AI used** – Scripts were written without AI assistance.
- [ ] **AI was used** – I confirm the scripts were built using [`AGENTS.md`](https://github.com/community-scripts/ProxmoxVED/blob/main/AGENTS.md) and [`.github/agents/pve-script-creator.agent.md`](https://github.com/community-scripts/ProxmoxVED/blob/main/.github/agents/pve-script-creator.agent.md) as guidance, and the output has been reviewed and corrected to match those guidelines.
-
---
-
 ## 🛠️ Type of Change (**X** in brackets)

 - [ ] 🐞 **Bug fix** – Resolves an issue without breaking functionality.
@@ -242,7 +242,7 @@ jobs:
            checked=$((checked + 1))

            # Extract our NODE_VERSION
-            our_version=$(grep -oP 'NODE_VERSION=\K"?\d+' "$script" | head -1 | grep -oP '\d+' || echo "")
+            our_version=$(grep -oP 'NODE_VERSION="(\d+)"' "$script" | head -1 | grep -oP '\d+' || echo "")
            if [[ -z "$our_version" ]]; then
              if grep -q 'NODE_VERSION=\$(' "$script"; then
                our_version="dynamic"
@@ -508,95 +508,16 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-07-31
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Docmost: cleanup folder at update [@MickLesk](https://github.com/MickLesk) ([#16177](https://github.com/community-scripts/ProxmoxVE/pull/16177))
-    - Firecrawl: Add dependency [@tremor021](https://github.com/tremor021) ([#16174](https://github.com/community-scripts/ProxmoxVE/pull/16174))
-
-## 2026-07-30
-
-### 🆕 New Scripts
-
-  - Firecrawl ([#16156](https://github.com/community-scripts/ProxmoxVE/pull/16156))
- OmniRoute ([#16155](https://github.com/community-scripts/ProxmoxVE/pull/16155))
- PegaProx ([#16154](https://github.com/community-scripts/ProxmoxVE/pull/16154))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: Pin version to 3.1.0 [@vhsdream](https://github.com/vhsdream) ([#16170](https://github.com/community-scripts/ProxmoxVE/pull/16170))
-    - romm: remove stale 1.x alembic migrations on update [@Darkatek7](https://github.com/Darkatek7) ([#16101](https://github.com/community-scripts/ProxmoxVE/pull/16101))
-
-  - #### 🔧 Refactor
-
-    - Medusa: convert the non-free unrar source to deb822 format [@angusmaul](https://github.com/angusmaul) ([#16093](https://github.com/community-scripts/ProxmoxVE/pull/16093))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - tools.func: support dynamic gitlab URL | add setup_mysql_db function [@MickLesk](https://github.com/MickLesk) ([#16166](https://github.com/community-scripts/ProxmoxVE/pull/16166))
-    - core: add configurable host CA inheritance during bootstrap [@MickLesk](https://github.com/MickLesk) ([#15889](https://github.com/community-scripts/ProxmoxVE/pull/15889))
-
-## 2026-07-29
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - backup virtual printer in bambuddy [@asylumexp](https://github.com/asylumexp) ([#16142](https://github.com/community-scripts/ProxmoxVE/pull/16142))
-    - ImmichFrame: check .NET SDK before update deployment [@aidaskni](https://github.com/aidaskni) ([#16104](https://github.com/community-scripts/ProxmoxVE/pull/16104))
-
-  - #### ✨ New Features
-
-    - Bichon: Migration for V2 Release [@MickLesk](https://github.com/MickLesk) ([#16145](https://github.com/community-scripts/ProxmoxVE/pull/16145))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - core: Harden remote func bootstrapping with dns issues [@MickLesk](https://github.com/MickLesk) ([#16146](https://github.com/community-scripts/ProxmoxVE/pull/16146))
-
 ## 2026-07-28

 ### 🚀 Updated Scripts

  - #### 🐞 Bug Fixes

-    - Create search directory in wanderer-install.sh [@Isnubi](https://github.com/Isnubi) ([#16134](https://github.com/community-scripts/ProxmoxVE/pull/16134))
-    - npmplus: Remove duplicate msg_info for container recreation [@MickLesk](https://github.com/MickLesk) ([#16122](https://github.com/community-scripts/ProxmoxVE/pull/16122))
-    - fix Node.js version drift [@asylumexp](https://github.com/asylumexp) ([#16111](https://github.com/community-scripts/ProxmoxVE/pull/16111))
    - UmlautAdaptarr: use the Debian 13 Microsoft repo with its 2025 signing key [@angusmaul](https://github.com/angusmaul) ([#16077](https://github.com/community-scripts/ProxmoxVE/pull/16077))
    - fix(bazarr): store data in /var/lib/bazarr instead of inside /opt/bazarr [@angusmaul](https://github.com/angusmaul) ([#16098](https://github.com/community-scripts/ProxmoxVE/pull/16098))
    - Cloudflare-DDNS: store API token in a 600 env file and build the binary at install time [@angusmaul](https://github.com/angusmaul) ([#16100](https://github.com/community-scripts/ProxmoxVE/pull/16100))

-  - #### ✨ New Features
-
-    - tools.func:  add nginx site helper and PHP socket resolver  [@MickLesk](https://github.com/MickLesk) ([#16118](https://github.com/community-scripts/ProxmoxVE/pull/16118))
-
-  - #### 💥 Breaking Changes
-
-    - Migrate Musicseerr to DroppedNeedle [@vhsdream](https://github.com/vhsdream) ([#15751](https://github.com/community-scripts/ProxmoxVE/pull/15751))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core: fix read prompt input directly from /dev/tty [@MickLesk](https://github.com/MickLesk) ([#16126](https://github.com/community-scripts/ProxmoxVE/pull/16126))
-
-### 🧰 Tools
-
-  - actual-budget-prometheus-exporter ([#16109](https://github.com/community-scripts/ProxmoxVE/pull/16109))
-
-  - #### 🐞 Bug Fixes
-
-    - fix: prometheus-paperless-exporter incompatibility with paperless v3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16119](https://github.com/community-scripts/ProxmoxVE/pull/16119))
-
 ### 📂 Github

  - fix keep-open for close invalid pr [@asylumexp](https://github.com/asylumexp) ([#16105](https://github.com/community-scripts/ProxmoxVE/pull/16105))
@@ -42,8 +42,7 @@ function update_script() {
      /opt/bambuddy/data \
      /opt/bambuddy/bambuddy.db \
      /opt/bambuddy/bambutrack.db \
-      /opt/bambuddy/archive \
-      /opt/bambuddy/virtual_printer
+      /opt/bambuddy/archive
    msg_ok "Backed up Configuration and Data"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bambuddy" "maziggy/bambuddy" "tarball" "latest" "/opt/bambuddy"
@@ -34,27 +34,30 @@ function update_script() {
    CURRENT_VERSION=$(cat /root/.bichon)
  fi

-  if [[ $CURRENT_VERSION != 1.* && $CURRENT_VERSION != 2.* ]]; then
-    msg_error "Installed ${APP} version (${CURRENT_VERSION}) is too old for an automatic update to v2.x."
-    msg_error "Please create a new ${APP} container and migrate your data manually."
-    msg_error "Guide: https://github.com/rustmailer/bichon/wiki/Bichon-v2.x-Migration-Guide"
-    exit
-  fi
-
-  MIGRATE_V2=0
-  if [[ $CURRENT_VERSION == 1.* ]]; then
-    MIGRATE_V2=1
-    STORAGE_KB=$(du -sk /opt/bichon-data/bichon-storage 2>/dev/null | awk '{print $1}')
-    FREE_KB=$(df -Pk /opt/bichon-data | awk 'NR==2 {print $4}')
-    if [[ -n "$STORAGE_KB" && -n "$FREE_KB" && "$FREE_KB" -lt "$STORAGE_KB" ]]; then
-      echo -e "\n${RD}Warning: migration needs about $((STORAGE_KB / 1024))MB, only $((FREE_KB / 1024))MB free.${CL}"
-      echo -e "${RD}The new bichon-blob store is written alongside the existing fjall data.${CL}"
+  MIGRATE_V1=0
+  if [[ $CURRENT_VERSION == 0.* ]]; then
+    MIGRATE_V1=1
+    DISK_USAGE=$(df / | awk 'NR==2 {print $5}' | sed 's/%//')
+    if [ "$DISK_USAGE" -gt 50 ]; then
+      echo -e "\n${RD}Warning: Less than 50% free storage remaining on the root disk.${CL}"
+      echo -e "${RD}Bichon v1 data migration temporarily duplicates data and requires free space for it.${CL}"
      read -r -p "Are you sure you want to proceed with the update? (y/N): " proceed
      if [[ ! $proceed =~ ^[Yy]$ ]]; then
        msg_error "Update cancelled by user."
        exit
      fi
    fi
+
+    RAM_TOTAL=$(free -m | awk '/^Mem:/{print $2}')
+    if [ "$RAM_TOTAL" -lt 2000 ]; then
+      echo -e "\n${RD}Warning: LXC has less than 2GB of RAM allocated (${RAM_TOTAL}MB).${CL}"
+      echo -e "${RD}Bichon v1 data migration consumes significant memory and may crash if insufficient.${CL}"
+      read -r -p "Are you sure you want to proceed with the update? (y/N): " proceed_ram
+      if [[ ! $proceed_ram =~ ^[Yy]$ ]]; then
+        msg_error "Update cancelled by user."
+        exit
+      fi
+    fi
  fi

  if check_for_gh_release "bichon" "rustmailer/bichon"; then
@@ -64,44 +67,55 @@ function update_script() {

    create_backup /opt/bichon/bichon.env

+    if [ "$MIGRATE_V1" -eq 1 ] && [ "$CURRENT_VERSION" != "0.3.7" ]; then
+      msg_info "Updating to intermediate version v0.3.7"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bichon" "rustmailer/bichon" "prebuild" "v0.3.7" "/opt/bichon" "bichon-*-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.tar.gz"
+      restore_backup
+      systemctl start bichon
+      sleep 30
+      systemctl stop bichon
+      msg_ok "Intermediate update completed"
+    fi
+
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bichon" "rustmailer/bichon" "prebuild" "latest" "/opt/bichon" "bichon-*-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.tar.gz"
    restore_backup

-    if [ "$MIGRATE_V2" -eq 1 ]; then
-      msg_info "Migrating storage from fjall to bichon-blob (patience)"
+    if [ "$MIGRATE_V1" -eq 1 ]; then
+      msg_info "Running Bichon v1 Data Migration (patience)"
      $STD apt install -y expect
-      # Menu: 0 Reset Password, 1 Migrate v0.3.7, 2 Migrate v1.x, 3 Exit
      $STD expect <<'EOF'
 set timeout -1
 spawn /opt/bichon/bichon-admin
 expect "*Select an operation*"
-send "\033\[B\033\[B\r"
+send "\033\[B\r"
 expect "*--bichon-root-dir*"
 send "/opt/bichon-data\r"
+expect "*--bichon-index-dir*"
+send "\r"
 expect "*--bichon-data-dir*"
 send "\r"
-expect "*batch size*"
+expect "*Ready to migrate?*"
+send "y"
+expect "*Enter batch size*"
 send "1000\r"
 expect eof
 catch wait
 EOF
      $STD apt remove --purge expect -y
      $STD apt autoremove -y
+      msg_ok "Migration completed"

-      if [[ ! -d /opt/bichon-data/bichon-storage/blobs ]] ||
-        [[ "$(cat /opt/bichon-data/STORAGE_VERSION 2>/dev/null)" != "2" ]]; then
-        msg_error "Storage migration did not complete - service left stopped, legacy data untouched."
-        msg_error "Run /opt/bichon/bichon-admin manually and select 'Migrate v1.x Storage to v2.x'."
-        exit
-      fi
-      msg_ok "Migrated storage to bichon-blob"
+      msg_info "Cleaning up legacy Bichon v0.x storage files"
+      rm -rf /opt/bichon-data/envelope
+      rm -rf /opt/bichon-data/eml
+      rm -f /opt/bichon-data/mailbox.db
+      rm -f /opt/bichon-data/meta.db
+      msg_ok "Cleanup completed"

-      msg_info "Removing legacy fjall files"
-      rm -rf /opt/bichon-data/bichon-storage/keyspaces
-      rm -f /opt/bichon-data/bichon-storage/0.jnl
-      rm -f /opt/bichon-data/bichon-storage/lock
-      rm -f /opt/bichon-data/bichon-storage/version
-      msg_ok "Removed legacy fjall files"
+      msg_info "Updating Bichon service for v1"
+      sed -i 's|ExecStart=/opt/bichon/bichon|ExecStart=/opt/bichon/bichon-server|g; s|RestartSec=5|RestartSec=5\n\nLimitNOFILE=65536|g' /etc/systemd/system/bichon.service
+      systemctl daemon-reload
+      msg_ok "Service updated"
    fi

    msg_info "Starting service"
@@ -25,7 +25,7 @@ function update_script() {
  check_container_storage
  check_container_resources

-  NODE_VERSION="26" setup_nodejs
+  NODE_VERSION="24" setup_nodejs
  ensure_dependencies build-essential

  if command -v cross-seed &>/dev/null; then
@@ -100,7 +100,7 @@ server {
    }
 }
 EOF
-    nginx_enable_site dispatcharr.conf
+    systemctl reload nginx
    msg_ok "Migrated Nginx Configuration"
  fi

@@ -27,8 +27,8 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  if ! command -v node >/dev/null || [[ "$(/usr/bin/env node -v | grep -oP '^v\K[0-9]+')" != "26" ]]; then
-    NODE_VERSION="26" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+  if ! command -v node >/dev/null || [[ "$(/usr/bin/env node -v | grep -oP '^v\K[0-9]+')" != "22" ]]; then
+    NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
  fi
  export NODE_OPTIONS="--max_old_space_size=4096"

@@ -37,9 +37,9 @@ function update_script() {
    systemctl stop docmost
    msg_ok "Stopped Service"

-    create_backup /opt/docmost/.env /opt/docmost/data
-    
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "docmost" "docmost/docmost" "tarball"
+    create_backup /opt/docmost/.env \
+      /opt/docmost/data
+    fetch_and_deploy_gh_release "docmost" "docmost/docmost" "tarball"

    restore_backup

@@ -1,147 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: michelroegl-brunner | Co-Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://droppedneedle.com/ | Github: https://github.com/DroppedNeedle/DroppedNeedle
-
-APP="DroppedNeedle"
-var_tags="${var_tags:-arr;media}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/droppedneedle && ! -d /opt/musicseerr ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  MIGRATING=false
-  [[ -d /opt/musicseerr ]] && MIGRATING=true
-
-  if [[ "$MIGRATING" == "true" ]] || check_for_gh_release "droppedneedle" "DroppedNeedle/DroppedNeedle"; then
-    if [[ "$MIGRATING" == "true" ]]; then
-      msg_warn "Migrating Musicseerr to DroppedNeedle"
-      msg_info "Stopping Musicseerr Service"
-      systemctl disable -q --now musicseerr
-      msg_ok "Stopped Musicseerr Service"
-      DATA_DIR="/opt/musicseerr/backend"
-    else
-      msg_info "Stopping Service"
-      systemctl stop droppedneedle
-      msg_ok "Stopped Service"
-      DATA_DIR="/opt/droppedneedle/backend"
-    fi
-
-    create_backup "$DATA_DIR/config" "$DATA_DIR/cache"
-
-    PYTHON_VERSION="3.13" setup_uv
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "droppedneedle" "DroppedNeedle/DroppedNeedle" "tarball"
-    NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
-
-    msg_info "Building Frontend"
-    cd /opt/droppedneedle/frontend
-    export NODE_OPTIONS="--max-old-space-size=3072"
-    rm -rf node_modules build
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm run build
-    msg_ok "Built Frontend"
-
-    msg_info "Updating Application"
-    mkdir -p /opt/droppedneedle/backend/config /opt/droppedneedle/backend/cache
-    $STD uv venv --clear /opt/droppedneedle/venv
-    $STD uv pip install -r /opt/droppedneedle/backend/requirements.txt --python=/opt/droppedneedle/venv/bin/python
-    rm -rf /opt/droppedneedle/backend/static
-    cp -r /opt/droppedneedle/frontend/build /opt/droppedneedle/backend/static
-    msg_ok "Updated Application"
-
-    restore_backup
-
-    if [[ "$MIGRATING" == "true" ]]; then
-      msg_info "Migrating Musicseerr Data"
-      rm -rf /opt/droppedneedle/backend/config /opt/droppedneedle/backend/cache
-      cp -a /opt/musicseerr/backend/config /opt/droppedneedle/backend/config
-      cp -a /opt/musicseerr/backend/cache /opt/droppedneedle/backend/cache
-      msg_ok "Migrated Musicseerr Data"
-
-      msg_info "Replacing systemd Service"
-      cat <<EOF >/etc/systemd/system/droppedneedle.service
-[Unit]
-Description=DroppedNeedle Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/droppedneedle/backend
-Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
-Environment=PORT=8688
-# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
-ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-      rm -f /etc/systemd/system/musicseerr.service
-      msg_ok "Replaced systemd Service"
-    elif ! grep -q 'SLSKD' /etc/systemd/system/droppedneedle.service; then
-      sed -i '\|=8688$|a# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>' /etc/systemd/system/droppedneedle.service
-    fi
-
-    systemctl daemon-reload
-    if [[ "$MIGRATING" == "true" ]]; then
-      msg_info "Enabling DroppedNeedle Service"
-      systemctl enable -q --now droppedneedle
-      msg_ok "Enabled DroppedNeedle Service"
-
-      sed -i 's/musicseerr/droppedneedle/g' /bin/update
-      rm -rf /opt/musicseerr
-
-      msg_info "Waiting up to 1min for backend to boot and retrieve Admin Username"
-      for i in {1..30}; do
-        username=$(/opt/droppedneedle/venv/bin/python -c 'import sqlite3; conn = sqlite3.connect("/opt/droppedneedle/backend/cache/library.db"); c = conn.cursor(); c.execute("SELECT username FROM auth_users WHERE role=\"admin\""); admin=c.fetchone(); print(admin[0]) if (admin and admin[0]) else None' 2>/dev/null || true)
-        if [[ -n "$username" ]]; then
-          break
-        fi
-        sleep 2
-      done
-      if [[ -n "$username" ]]; then
-        msg_ok "Admin Username retrieved (Admin Username is: ${username})"
-      else
-        msg_warn "Failed to retrieve Admin Username. The backend might still be starting."
-      fi
-      msg_ok "Migrated successfully!"
-    else
-      msg_info "Starting Service"
-      systemctl start droppedneedle
-      msg_ok "Started Service"
-      msg_ok "Updated successfully!"
-    fi
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8688${CL}"
@@ -59,7 +59,9 @@ function update_script() {

    envsubst </opt/feishin/settings.js.template >/etc/nginx/conf.d/settings.js
    envsubst '${PUBLIC_PATH}' </opt/feishin/ng.conf.template >/etc/nginx/sites-available/feishin
-    nginx_enable_site feishin
+    ln -sf /etc/nginx/sites-available/feishin /etc/nginx/sites-enabled/feishin
+    rm -f /etc/nginx/sites-enabled/default
+    systemctl restart nginx
    msg_ok "Published Web Assets"

    msg_ok "Updated successfully!"
@@ -1,93 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: esatbayhan
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.firecrawl.dev/
-
-APP="Firecrawl"
-var_tags="${var_tags:-scraping;ai;crawler}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-30}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/firecrawl/apps/api ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  ensure_dependencies build-essential
-
-  if check_for_gh_release "firecrawl" "firecrawl/firecrawl"; then
-    msg_info "Stopping Services"
-    systemctl stop firecrawl firecrawl-playwright
-    msg_ok "Stopped Services"
-
-    create_backup /opt/firecrawl/.env
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "firecrawl" "firecrawl/firecrawl" "tarball" "latest" "/opt/firecrawl"
-
-    restore_backup
-
-    FDB_VERSION="$(awk -F= '/^ARG FDB_VERSION=/{print $2; exit}' /opt/firecrawl/apps/api/Dockerfile)"
-    if [[ -z "$FDB_VERSION" ]]; then
-      msg_error "FDB_VERSION pin not found in upstream Dockerfile"
-      exit 1
-    fi
-    if [[ "$(dpkg-query -W -f='${Version}' foundationdb-clients 2>/dev/null)" != "${FDB_VERSION}-"* ]]; then
-      FDB_ARCH="$(get_system_arch)"
-      [[ "$FDB_ARCH" == "arm64" ]] && FDB_ARCH="aarch64"
-      fetch_and_deploy_gh_release "foundationdb-clients" "apple/foundationdb" "binary" "$FDB_VERSION" "/opt/foundationdb-clients" "foundationdb-clients_${FDB_VERSION}-1_${FDB_ARCH}.deb"
-    fi
-
-    msg_info "Building Go Library"
-    cd /opt/firecrawl/apps/api/sharedLibs/go-html-to-md
-    $STD go build -o libhtml-to-markdown.so -buildmode=c-shared html-to-markdown.go
-    msg_ok "Built Go Library"
-
-    msg_info "Building Firecrawl API"
-    source "$HOME/.cargo/env"
-    cd /opt/firecrawl/apps/api
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm build
-    CI=true $STD pnpm prune --prod --ignore-scripts
-    msg_ok "Built Firecrawl API"
-
-    msg_info "Building Playwright Service"
-    cd /opt/firecrawl/apps/playwright-service-ts
-    $STD npm install
-    $STD npx playwright install chromium --with-deps
-    $STD npm run build
-    $STD npm prune --omit=dev
-    msg_ok "Built Playwright Service"
-
-    msg_info "Starting Services"
-    systemctl start firecrawl-playwright firecrawl
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3002${CL}"
@@ -1,6 +0,0 @@
-    ____                                  ___   __              ____   
-   / __ \_________  ____  ____  ___  ____/ / | / /__  ___  ____/ / /__ 
-  / / / / ___/ __ \/ __ \/ __ \/ _ \/ __  /  |/ / _ \/ _ \/ __  / / _ \
- / /_/ / /  / /_/ / /_/ / /_/ /  __/ /_/ / /|  /  __/  __/ /_/ / /  __/
-/_____/_/   \____/ .___/ .___/\___/\__,_/_/ |_/\___/\___/\__,_/_/\___/ 
-                /_/   /_/                                              
@@ -1,6 +0,0 @@
-    _______                                    __
-   / ____(_)_______  ______________ __      __/ /
-  / /_  / / ___/ _ \/ ___/ ___/ __ `/ | /| / / / 
- / __/ / / /  /  __/ /__/ /  / /_/ /| |/ |/ / /  
-/_/   /_/_/   \___/\___/_/   \__,_/ |__/|__/_/   
-                                                 
@@ -1,6 +0,0 @@
-   ____                  _ ____              __     
-  / __ \____ ___  ____  (_) __ \____  __  __/ /____ 
- / / / / __ `__ \/ __ \/ / /_/ / __ \/ / / / __/ _ \
-/ /_/ / / / / / / / / / / _, _/ /_/ / /_/ / /_/  __/
-\____/_/ /_/ /_/_/ /_/_/_/ |_|\____/\__,_/\__/\___/ 
-                                                    
@@ -1,6 +0,0 @@
-    ____                   ____                 
-   / __ \___  ____ _____ _/ __ \_________  _  __
-  / /_/ / _ \/ __ `/ __ `/ /_/ / ___/ __ \| |/_/
- / ____/  __/ /_/ / /_/ / ____/ /  / /_/ />  <  
-/_/    \___/\__, /\__,_/_/   /_/   \____/_/|_|  
-           /____/                               
@@ -110,7 +110,7 @@ EOF
    msg_ok "Image-processing libraries up to date"
  fi

-  RELEASE="v3.1.0"
+  RELEASE="v3.0.3"
  if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    if [[ $(cat ~/.immich) > "2.5.1" ]]; then
      msg_info "Enabling Maintenance Mode"
@@ -310,7 +310,6 @@ EOF
    grep -rl /usr/src | xargs -n1 sed -i "s|\/usr/src|$INSTALL_DIR|g"
    grep -rlE "'/build'" | xargs -n1 sed -i "s|'/build'|'$APP_DIR'|g"
    sed -i "s@\"/cache\"@\"$INSTALL_DIR/cache\"@g" "$ML_DIR"/immich_ml/config.py
-    [[ ! -f "$GEO_DIR/countryInfo.txt" ]] && curl_with_retry "https://download.geonames.org/export/dump/countryInfo.txt" "countryInfo.txt"
    ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$APP_DIR"/upload
    ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$ML_DIR"/upload
    ln -s "$GEO_DIR" "$APP_DIR"
@@ -30,25 +30,6 @@ function update_script() {
    exit
  fi

-  if ! dotnet --list-sdks 2>/dev/null | grep -q '^8\.'; then
-    msg_info "Installing .NET SDK 8.0"
-    if [[ "$(arch_resolve)" == "arm64" ]]; then
-      curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-      $STD bash /tmp/dotnet-install.sh --channel 8.0 --install-dir /usr/lib/dotnet8
-      ln -sf /usr/lib/dotnet8/dotnet /usr/bin/dotnet
-      rm -f /tmp/dotnet-install.sh
-    else
-      setup_deb822_repo \
-        "microsoft" \
-        "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-        "https://packages.microsoft.com/debian/13/prod/" \
-        "trixie" \
-        "main"
-      $STD apt install -y dotnet-sdk-8.0
-    fi
-    msg_ok "Installed .NET SDK 8.0"
-  fi
-
  if check_for_gh_release "immichframe" "immichFrame/ImmichFrame"; then
    msg_info "Stopping Service"
    systemctl stop immichframe
@@ -1,17 +1,85 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
-# Author: michelroegl-brunner | Co-Author: vhsdream
+# Author: michelroegl-brunner
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://musicseerr.com/ | Github: https://github.com/HabiRabbu/Musicseerr

 APP="MusicSeerr"
+var_tags="${var_tags:-arr;media}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"

 header_info "$APP"
 variables
 color
+catch_errors

-msg_error "This script is no longer available."
-msg_warn "MusicSeerr has been renamed to DroppedNeedle."
-msg_warn "Run the DroppedNeedle script to migrate an existing installation:"
-echo 'bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/droppedneedle.sh)"'
-exit 1
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/musicseerr ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "musicseerr" "HabiRabbu/Musicseerr"; then
+    msg_info "Stopping Service"
+    systemctl stop musicseerr
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Data"
+    cp -a /opt/musicseerr/backend/config /opt/musicseerr_config_backup
+    cp -a /opt/musicseerr/backend/cache /opt/musicseerr_cache_backup
+    msg_ok "Backed up Data"
+
+    PYTHON_VERSION="3.13" setup_uv
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "musicseerr" "HabiRabbu/Musicseerr" "tarball"
+    NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
+
+    msg_info "Building Frontend"
+    cd /opt/musicseerr/frontend
+    export NODE_OPTIONS="--max-old-space-size=3072"
+    rm -rf node_modules build
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm run build
+    msg_ok "Built Frontend"
+
+    msg_info "Updating Application"
+    mkdir -p /opt/musicseerr/backend/config /opt/musicseerr/backend/cache
+    $STD uv venv --clear /opt/musicseerr/venv
+    $STD uv pip install -r /opt/musicseerr/backend/requirements.txt --python=/opt/musicseerr/venv/bin/python
+    rm -rf /opt/musicseerr/backend/static
+    cp -r /opt/musicseerr/frontend/build /opt/musicseerr/backend/static
+    msg_ok "Updated Application"
+
+    msg_info "Restoring Data"
+    rm -rf /opt/musicseerr/backend/config /opt/musicseerr/backend/cache
+    cp -a /opt/musicseerr_config_backup/. /opt/musicseerr/backend/config/
+    cp -a /opt/musicseerr_cache_backup/. /opt/musicseerr/backend/cache/
+    rm -rf /opt/musicseerr_config_backup /opt/musicseerr_cache_backup
+    msg_ok "Restored Data"
+
+    msg_info "Starting Service"
+    systemctl start musicseerr
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8688${CL}"
@@ -21,6 +21,8 @@ color
 catch_errors

 function update_script() {
+  header_info "$APP"
+
  msg_info "Updating Alpine OS"
  $STD apk -U upgrade
  msg_ok "System updated"
@@ -28,8 +30,10 @@ function update_script() {
  msg_info "Pulling latest NPMplus container image"
  cd /opt
  $STD docker compose pull
+  msg_info "Recreating container"
  $STD docker compose up -d
  msg_ok "Updated NPMplus container"
+
  msg_ok "Updated successfully!"
  exit
 }
@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/diegosouzapw/OmniRoute
-
-APP="OmniRoute"
-var_tags="${var_tags:-ai;gateway;llm}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/omniroute ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Checking for Updates"
-  local LATEST
-  LATEST=$(npm view omniroute version 2>/dev/null)
-  if [[ -z "$LATEST" ]]; then
-    msg_error "Could not determine latest OmniRoute version"
-    exit
-  fi
-  if [[ "$LATEST" == "$(omniroute --version 2>/dev/null)" ]]; then
-    msg_ok "Already up to date (${LATEST})"
-    exit
-  fi
-  msg_ok "New version available: ${LATEST}"
-
-  msg_info "Stopping Service"
-  systemctl stop omniroute
-  msg_ok "Stopped Service"
-
-  msg_info "Updating OmniRoute to ${LATEST}"
-  $STD npm install -g omniroute@latest
-  msg_ok "Updated OmniRoute to ${LATEST}"
-
-  msg_info "Starting Service"
-  systemctl start omniroute
-  msg_ok "Started Service"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:20128${CL}"
-echo -e "${INFO}${YW} The admin password is stored in /opt/omniroute/.env (INITIAL_PASSWORD)${CL}"
@@ -29,7 +29,7 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="26" NODE_MODULE="corepack" setup_nodejs
+  NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs

  if check_for_gh_release "outline" "outline/outline"; then
    msg_info "Stopping Services"
@@ -31,8 +31,6 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="26" setup_nodejs
-
  if check_for_gh_release "OxiCloud" "DioCrafts/OxiCloud"; then
    msg_info "Stopping OxiCloud"
    systemctl stop oxicloud
@@ -34,9 +34,8 @@ function update_script() {
  if [[ "$CURRENT_PHP" != "8.3" ]]; then
    PHP_VERSION="8.3" PHP_FPM="YES" setup_php
    setup_composer
-    PHP_SOCK=$(get_php_fpm_socket)
-    sed -i "s|fastcgi_pass unix:.*|fastcgi_pass unix:${PHP_SOCK};|" /etc/nginx/sites-available/paymenter.conf
-    nginx_enable_site paymenter.conf
+    sed -i 's|php8\.2-fpm\.sock|php8.3-fpm.sock|g' /etc/nginx/sites-available/paymenter.conf
+    $STD systemctl reload nginx
  fi

  if check_for_gh_release "paymenter" "paymenter/paymenter"; then
@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/PegaProx/project-pegaprox
-
-APP="PegaProx"
-var_tags="${var_tags:-proxmox;management}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/pegaprox ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "pegaprox" "PegaProx/project-pegaprox"; then
-    msg_info "Stopping Service"
-    systemctl stop pegaprox
-    msg_ok "Stopped Service"
-
-    create_backup /opt/pegaprox/config /etc/pegaprox/secret.key
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pegaprox" "PegaProx/project-pegaprox" "tarball"
-
-    msg_info "Updating Python Environment"
-    $STD uv venv --python 3.12 /opt/pegaprox/venv
-    $STD uv pip install --python /opt/pegaprox/venv/bin/python -r /opt/pegaprox/requirements.txt
-    msg_ok "Updated Python Environment"
-
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start pegaprox
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:5000${CL}"
@@ -28,9 +28,6 @@ function update_script() {
    msg_error "No ${APP} installation found!"
    exit
  fi
-
-  NODE_VERSION="24" NODE_MODULE="playactor" setup_nodejs
-
  if check_for_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt"; then
    msg_info "Stopping service"
    systemctl stop ps5-mqtt
@@ -62,9 +62,9 @@ function update_script() {
    msg_ok "Updated Configuration"

    msg_info "Starting Services"
+    $STD nginx -t
    systemctl daemon-reload
-    nginx_enable_site rackula
-    systemctl start rackula-api
+    systemctl start nginx rackula-api
    msg_ok "Started Services"
    msg_ok "Updated successfully!"
  fi
@@ -30,12 +30,6 @@ function update_script() {
    exit
  fi

-  if [[ ! -x /usr/bin/7zz || ! -x /usr/bin/bsdtar ]]; then
-    msg_info "Installing Archive Tools"
-    $STD apt install -y 7zip-standalone libarchive-tools
-    msg_ok "Installed Archive Tools"
-  fi
-
  NODE_VERSION="24" setup_nodejs

  if check_for_gh_release "romm" "rommapp/romm"; then
@@ -50,10 +44,6 @@ function update_script() {

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "romm" "rommapp/romm" "tarball" "latest" "/opt/romm"

-    find /opt/romm/backend/alembic/versions -maxdepth 1 -type f -name '1.*.py' -delete 2>/dev/null || true
-    find /opt/romm/backend/alembic/versions -maxdepth 1 -type f -name '2.0.0_.py' -delete 2>/dev/null || true
-    find /opt/romm/backend -name '__pycache__' -type d -prune -exec rm -rf {} + 2>/dev/null || true
-
    restore_backup

    msg_info "Updating ROMM"
@@ -85,7 +75,7 @@ function update_script() {
      systemctl reload angie
    elif [[ -f /etc/nginx/sites-available/romm ]]; then
      sed -i "s|alias .*/library/;|alias ${ROMM_BASE}/library/;|" /etc/nginx/sites-available/romm
-      nginx_enable_site romm
+      systemctl reload nginx
    fi
    msg_ok "Updated ROMM"

@@ -93,8 +93,7 @@ EOF
    msg_ok "Refreshed SparkyFitness Service"

    msg_info "Starting Services"
-    $STD systemctl start sparkyfitness-server
-    nginx_enable_site sparkyfitness
+    $STD systemctl start sparkyfitness-server nginx
    msg_ok "Started Services"
    msg_ok "Updated successfully!"
  fi
@@ -30,8 +30,6 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="24" setup_nodejs
-
  if check_for_gh_release "sync-in" "Sync-in/server"; then
    msg_info "Stopping Service"
    systemctl stop sync-in
@@ -30,7 +30,7 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="26" setup_nodejs
+  NODE_VERSION="24" setup_nodejs

  if check_for_gh_tag "guacd" "apache/guacamole-server"; then
    msg_info "Stopping guacd"
@@ -49,7 +49,6 @@ chmod -R 755 /opt/2fauth
 msg_ok "Setup 2fauth"

 msg_info "Configure Service"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/conf.d/2fauth.conf
 server {
        listen 80;
@@ -68,7 +67,7 @@ server {
        error_page 404 /index.php;

        location ~ \.php\$ {
-                fastcgi_pass unix:${PHP_SOCK};
+                fastcgi_pass unix:/var/run/php/php${PHP_VERSION}-fpm.sock;
                fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
                include fastcgi_params;
        }
@@ -207,7 +207,9 @@ server {
    }
 }
 EOF
-nginx_enable_site affine.conf
+ln -sf /etc/nginx/sites-available/affine.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+systemctl enable -q --now nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -89,7 +89,10 @@ server {
 }
 EOF

-nginx_enable_site babybuddy
+ln -sf /etc/nginx/sites-available/babybuddy /etc/nginx/sites-enabled/babybuddy
+rm /etc/nginx/sites-enabled/default
+systemctl enable -q --now nginx
+service nginx reload
 msg_ok "Configured NGINX"

 motd_ssh
@@ -73,7 +73,6 @@ $STD npm run build
 msg_ok "Installed Salt Rim"

 msg_info "Creating Service"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/barassistant.conf
 server {
    listen 80 default_server;
@@ -127,7 +126,7 @@ server {
    error_page 404 /index.php;

    location ~ ^/index\.php(/|$) {
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/var/run/php/php$PHPVER-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
        include fastcgi_params;
        fastcgi_hide_header X-Powered-By;
@@ -149,7 +148,9 @@ server {
 }
 EOF

-nginx_enable_site barassistant.conf
+ln -s /etc/nginx/sites-available/barassistant.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Created Service"

 motd_ssh
@@ -22,6 +22,7 @@ chmod 775 /opt/bazarr /var/lib/bazarr/
 sed -i.bak 's/--only-binary=Pillow//g' /opt/bazarr/requirements.txt
 $STD uv venv --clear /opt/bazarr/venv --python 3.12
 $STD uv pip install -r /opt/bazarr/requirements.txt --python /opt/bazarr/venv/bin/python3
+$STD uv pip install psycopg2-binary --python /opt/bazarr/venv/bin/python3
 msg_ok "Installed Bazarr"

 msg_info "Creating Service"
@@ -60,7 +60,7 @@ LimitNOFILE=65536
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now bichon
-msg_ok "Created Service"
+msg_info "Created Service"

 motd_ssh
 customize
@@ -122,7 +122,9 @@ server {
  }
 }
 EOF
-nginx_enable_site checkmate
+ln -sf /etc/nginx/sites-available/checkmate /etc/nginx/sites-enabled/checkmate
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured Nginx Reverse Proxy"

 motd_ssh
@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y build-essential
 msg_ok "Installed Dependencies"

-NODE_VERSION="26" setup_nodejs
+NODE_VERSION="24" setup_nodejs

 msg_info "Setup Cross-Seed"
 $STD npm install cross-seed@latest -g
@@ -185,7 +185,11 @@ server {
    }
 }
 EOF
-nginx_enable_site databasus
+ln -sf /etc/nginx/sites-available/databasus /etc/nginx/sites-enabled/databasus
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+$STD systemctl enable -q --now nginx
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -174,7 +174,9 @@ server {
    }
 }
 EOF
-nginx_enable_site dawarich.conf
+ln -sf /etc/nginx/sites-available/dawarich.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+systemctl enable -q --now nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -207,7 +207,10 @@ server {
  }
 }
 EOF
-nginx_enable_site discourse
+ln -sf /etc/nginx/sites-available/discourse /etc/nginx/sites-enabled/discourse
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl enable --now nginx
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -139,7 +139,9 @@ server {
    }
 }
 EOF
-nginx_enable_site dispatcharr.conf
+ln -sf /etc/nginx/sites-available/dispatcharr.conf /etc/nginx/sites-enabled/dispatcharr.conf
+rm -f /etc/nginx/sites-enabled/default
+systemctl restart nginx
 msg_ok "Configured Nginx"

 msg_info "Creating Services"
@@ -19,7 +19,7 @@ $STD apt install -y \
  make
 msg_ok "Installed Dependencies"

-NODE_VERSION="26" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="docmost_db" PG_DB_USER="docmost_user" setup_postgresql_db
 fetch_and_deploy_gh_release "docmost" "docmost/docmost" "tarball"
@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: michelroegl-brunner | Co-Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://droppedneedle.com/ | Github: https://github.com/DroppedNeedle/DroppedNeedle
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PYTHON_VERSION="3.13" setup_uv
-fetch_and_deploy_gh_release "droppedneedle" "DroppedNeedle/DroppedNeedle" "tarball"
-NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
-
-msg_info "Building Frontend"
-cd /opt/droppedneedle/frontend
-export NODE_OPTIONS="--max-old-space-size=3072"
-$STD pnpm install --frozen-lockfile
-$STD pnpm run build
-msg_ok "Built Frontend"
-
-msg_info "Setting up Application"
-mkdir -p /opt/droppedneedle/backend/config /opt/droppedneedle/backend/cache
-$STD uv venv /opt/droppedneedle/venv
-$STD uv pip install -r /opt/droppedneedle/backend/requirements.txt --python=/opt/droppedneedle/venv/bin/python
-rm -rf /opt/droppedneedle/backend/static
-cp -r /opt/droppedneedle/frontend/build /opt/droppedneedle/backend/static
-msg_ok "Set up Application"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/droppedneedle.service
-[Unit]
-Description=DroppedNeedle Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/droppedneedle/backend
-Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
-Environment=PORT=8688
-# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
-ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now droppedneedle
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -46,7 +46,11 @@ server {
    }
 }
 EOF
-nginx_enable_site espconnect
+ln -sf /etc/nginx/sites-available/espconnect /etc/nginx/sites-enabled/espconnect
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q nginx
+systemctl restart nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -108,7 +108,9 @@ server {
    }
 }
 EOF
-nginx_enable_site excalidash
+ln -sf /etc/nginx/sites-available/excalidash /etc/nginx/sites-enabled/excalidash
+rm -f /etc/nginx/sites-enabled/default
+systemctl reload nginx
 msg_ok "Configured Nginx"

 msg_info "Creating Service"
@@ -57,7 +57,10 @@ set +a
 envsubst </opt/feishin/settings.js.template >/etc/nginx/conf.d/settings.js
 envsubst '${PUBLIC_PATH}' </opt/feishin/ng.conf.template >/etc/nginx/sites-available/feishin

-nginx_enable_site feishin
+ln -sf /etc/nginx/sites-available/feishin /etc/nginx/sites-enabled/feishin
+rm -f /etc/nginx/sites-enabled/default
+systemctl enable -q --now nginx
+systemctl reload nginx
 msg_ok "Published Web Assets"

 motd_ssh
@@ -1,230 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: esatbayhan
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.firecrawl.dev/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  cmake \
-  git \
-  nftables \
-  pkg-config \
-  procps \
-  python3 \
-  rabbitmq-server \
-  redis-server
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" NODE_MODULE="pnpm@11.4.0" setup_nodejs
-setup_go
-RUST_PROFILE="minimal" setup_rust
-PG_VERSION="17" PG_MODULES="cron" setup_postgresql
-
-fetch_and_deploy_gh_release "firecrawl" "firecrawl/firecrawl" "tarball" "latest" "/opt/firecrawl"
-
-msg_info "Configuring FDB"
-FDB_VERSION="$(awk -F= '/^ARG FDB_VERSION=/{print $2; exit}' /opt/firecrawl/apps/api/Dockerfile)"
-if [[ -z "$FDB_VERSION" ]]; then
-  msg_error "FDB_VERSION pin not found in upstream Dockerfile"
-  exit 1
-fi
-FDB_ARCH="$(get_system_arch)"
-[[ "$FDB_ARCH" == "arm64" ]] && FDB_ARCH="aarch64"
-fetch_and_deploy_gh_release "foundationdb-clients" "apple/foundationdb" "binary" "$FDB_VERSION" "/opt/foundationdb-clients" "foundationdb-clients_${FDB_VERSION}-1_${FDB_ARCH}.deb"
-msg_ok "Configured FDB"
-
-PG_DB_NAME="firecrawl" PG_DB_USER="firecrawl" PG_DB_EXTENSIONS="pgcrypto,pg_cron" PG_DB_CREDS_FILE="/dev/null" setup_postgresql_db
-
-msg_info "Configuring pg_cron"
-$STD runuser -u postgres -- psql -c "ALTER SYSTEM SET cron.use_background_workers = 'on';"
-systemctl restart postgresql
-until runuser -u postgres -- psql -c "SELECT 1;" &>/dev/null; do sleep 1; done
-msg_ok "Configured pg_cron"
-
-msg_info "Configuring RabbitMQ"
-systemctl enable -q --now rabbitmq-server
-until rabbitmqctl status &>/dev/null; do sleep 1; done
-RABBITMQ_PASSWORD="$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c24)"
-$STD rabbitmqctl add_user firecrawl "$RABBITMQ_PASSWORD"
-$STD rabbitmqctl set_permissions -p / firecrawl ".*" ".*" ".*"
-msg_ok "Configured RabbitMQ"
-
-systemctl enable -q --now redis-server
-
-msg_info "Importing NuQ Schema"
-$STD runuser -u postgres -- psql -d firecrawl -f /opt/firecrawl/apps/nuq-postgres/nuq.sql
-$STD runuser -u postgres -- psql -d firecrawl -c "GRANT USAGE ON SCHEMA nuq TO firecrawl;"
-$STD runuser -u postgres -- psql -d firecrawl -c "GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA nuq TO firecrawl;"
-$STD runuser -u postgres -- psql -d firecrawl -c "GRANT USAGE, SELECT, UPDATE ON ALL SEQUENCES IN SCHEMA nuq TO firecrawl;"
-$STD runuser -u postgres -- psql -d firecrawl -c "ALTER DEFAULT PRIVILEGES IN SCHEMA nuq GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO firecrawl;"
-$STD runuser -u postgres -- psql -d firecrawl -c "ALTER DEFAULT PRIVILEGES IN SCHEMA nuq GRANT USAGE, SELECT, UPDATE ON SEQUENCES TO firecrawl;"
-msg_ok "Imported NuQ Schema"
-
-msg_info "Generating Configuration"
-cat <<EOF >/opt/firecrawl/.env
-ENV=local
-HOST=0.0.0.0
-PORT=3002
-USE_DB_AUTHENTICATION=false
-BULL_AUTH_KEY=$(openssl rand -hex 32)
-JWT_SECRET=$(openssl rand -hex 32)
-
-REDIS_URL=redis://127.0.0.1:6379
-REDIS_RATE_LIMIT_URL=redis://127.0.0.1:6379
-
-PLAYWRIGHT_MICROSERVICE_URL=http://127.0.0.1:3000/scrape
-
-POSTGRES_HOST=127.0.0.1
-POSTGRES_PORT=5432
-POSTGRES_USER=${PG_DB_USER}
-POSTGRES_PASSWORD=${PG_DB_PASS}
-POSTGRES_DB=${PG_DB_NAME}
-NUQ_DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}
-NUQ_DATABASE_URL_LISTEN=postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}
-
-NUQ_BACKEND=pg
-NUQ_RABBITMQ_URL=amqp://firecrawl:${RABBITMQ_PASSWORD}@127.0.0.1:5672/%2f
-
-WORKER_PORT=3005
-EXTRACT_WORKER_PORT=3004
-NUQ_WORKER_START_PORT=3006
-NUQ_WORKER_COUNT=5
-NUQ_PREFETCH_WORKER_PORT=3011
-NUQ_RECONCILER_WORKER_PORT=3012
-HARNESS_STARTUP_TIMEOUT_MS=60000
-
-LOGGING_LEVEL=INFO
-MAX_CONCURRENT_PAGES=10
-ALLOW_LOCAL_WEBHOOKS=false
-BLOCK_MEDIA=false
-
-OPENAI_API_KEY=
-OPENAI_BASE_URL=
-OLLAMA_BASE_URL=
-MODEL_NAME=
-MODEL_EMBEDDING_NAME=
-SEARXNG_ENDPOINT=
-SEARXNG_ENGINES=
-SEARXNG_CATEGORIES=
-PROXY_SERVER=
-PROXY_USERNAME=
-PROXY_PASSWORD=
-SELF_HOSTED_WEBHOOK_URL=
-SELF_HOSTED_WEBHOOK_HMAC_SECRET=
-EOF
-chmod 600 /opt/firecrawl/.env
-msg_ok "Generated Configuration"
-
-msg_info "Building Go Library"
-cd /opt/firecrawl/apps/api/sharedLibs/go-html-to-md
-$STD go build -o libhtml-to-markdown.so -buildmode=c-shared html-to-markdown.go
-msg_ok "Built Go Library"
-
-msg_info "Building Firecrawl API"
-cd /opt/firecrawl/apps/api
-$STD pnpm install --frozen-lockfile
-$STD pnpm build
-CI=true $STD pnpm prune --prod --ignore-scripts
-msg_ok "Built Firecrawl API"
-
-msg_info "Building Playwright Service"
-cd /opt/firecrawl/apps/playwright-service-ts
-$STD npm install
-$STD npx playwright install chromium --with-deps
-$STD npm run build
-$STD npm prune --omit=dev
-msg_ok "Built Playwright Service"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/firecrawl-playwright.service
-[Unit]
-Description=Firecrawl Playwright Service
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/firecrawl/apps/playwright-service-ts
-EnvironmentFile=/opt/firecrawl/.env
-Environment=PORT=3000
-# /opt/firecrawl/.env also contains the API PORT=3002; force Playwright's private port here.
-ExecStart=/usr/bin/env PORT=3000 /usr/bin/node /opt/firecrawl/apps/playwright-service-ts/dist/api.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/firecrawl.service
-[Unit]
-Description=Firecrawl API and Workers
-After=network.target postgresql.service redis-server.service rabbitmq-server.service firecrawl-playwright.service
-Requires=postgresql.service redis-server.service rabbitmq-server.service firecrawl-playwright.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/firecrawl/apps/api
-EnvironmentFile=/opt/firecrawl/.env
-Environment=NODE_ENV=production
-# Upstream uses --start-docker to skip install/build and start compiled node dist entrypoints.
-ExecStart=/usr/bin/node /opt/firecrawl/apps/api/dist/src/harness.js --start-docker
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now firecrawl-playwright
-systemctl enable -q --now firecrawl
-msg_ok "Created Services"
-
-msg_info "Configuring Firewall"
-cat <<'EOF' >/etc/nftables.conf
-#!/usr/sbin/nft -f
-
-flush ruleset
-
-table inet firecrawl_filter {
-  chain input {
-    type filter hook input priority 0; policy drop;
-
-    iif "lo" accept
-    ct state established,related accept
-
-    ip protocol icmp accept
-    ip6 nexthdr icmpv6 accept
-    udp sport 67 udp dport 68 accept
-    udp sport 547 udp dport 546 accept
-
-    tcp dport { 22, 3002 } accept
-  }
-
-  chain forward {
-    type filter hook forward priority 0; policy drop;
-  }
-
-  chain output {
-    type filter hook output priority 0; policy accept;
-  }
-}
-EOF
-systemctl enable -q nftables
-systemctl restart nftables
-msg_ok "Configured Firewall"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -178,7 +178,10 @@ server {
    error_log /var/log/geopulse/nginx/error.log;
 }
 EOF
-nginx_enable_site geopulse.conf
+ln -sf /etc/nginx/sites-available/geopulse.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+systemctl enable -q --now nginx
+systemctl reload nginx
 msg_ok "Configured Nginx"

 msg_info "Creating Admin Helper"
@@ -26,7 +26,9 @@ chown -R www-data:www-data /opt/grav

 msg_info "Configuring Nginx"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_FPM_SOCK=$(get_php_fpm_socket)
+PHP_FPM_SOCK=$(find /run/php -maxdepth 1 -name "php*-fpm.sock" -type s | sort -V | tail -1)
+unlink /etc/nginx/sites-enabled/default
+rm -f /etc/nginx/sites-available/default
 cat <<EOF >/etc/nginx/sites-available/grav
 server {
    listen 80;
@@ -97,8 +99,11 @@ server {
    }
 }
 EOF
+ln -sf /etc/nginx/sites-available/grav /etc/nginx/sites-enabled/grav
 systemctl enable -q --now php${PHP_VER}-fpm
-nginx_enable_site grav
+$STD nginx -t
+systemctl enable -q --now nginx
+$STD nginx -s reload
 msg_ok "Configured Nginx"

 motd_ssh
@@ -312,7 +312,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}

-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.1.0" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.0.3" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
@@ -429,7 +429,6 @@ msg_info "Installing GeoNames data"
 cd "$GEO_DIR"
 curl_with_retry "https://download.geonames.org/export/dump/admin1CodesASCII.txt" "admin1CodesASCII.txt"
 curl_with_retry "https://download.geonames.org/export/dump/admin2Codes.txt" "admin2Codes.txt"
-curl_with_retry "https://download.geonames.org/export/dump/countryInfo.txt" "countryInfo.txt"
 curl_with_retry "https://download.geonames.org/export/dump/cities500.zip" "cities500.zip"
 curl_with_retry "https://raw.githubusercontent.com/nvkelso/natural-earth-vector/v5.1.2/geojson/ne_10m_admin_0_countries.geojson" "ne_10m_admin_0_countries.geojson"
 unzip -q cities500.zip
@@ -115,7 +115,6 @@ chmod -R 775 /opt/investbrain/bootstrap/cache
 msg_ok "Installed Investbrain"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/investbrain.conf
 server {
    listen 8000 default_server;
@@ -136,7 +135,7 @@ server {
    }

    location ~ \.php\$ {
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/var/run/php/php${PHP_VERSION}-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
        include fastcgi_params;
        fastcgi_hide_header X-Powered-By;
@@ -151,7 +150,9 @@ server {
    access_log /var/log/nginx/investbrain_access.log;
 }
 EOF
-nginx_enable_site investbrain.conf
+ln -sf /etc/nginx/sites-available/investbrain.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 msg_info "Setting up Supervisor"
@@ -110,7 +110,6 @@ chown -R www-data:www-data /opt/invoiceninja
 msg_ok "Set up Database"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<'EOF' >/etc/nginx/sites-available/invoiceninja
 server {
    listen 8080;
@@ -131,7 +130,7 @@ server {
    }

    location = /index.php {
-        fastcgi_pass unix:__PHP_SOCK__;
+        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
        fastcgi_param HTTP_X_FORWARDED_HOST $http_host;
@@ -152,8 +151,9 @@ server {
 }
 EOF

-sed -i "s|__PHP_SOCK__|${PHP_SOCK}|" /etc/nginx/sites-available/invoiceninja
-nginx_enable_site invoiceninja
+ln -sf /etc/nginx/sites-available/invoiceninja /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 msg_info "Setting up Queue Worker"
@@ -56,11 +56,10 @@ msg_ok "Set up InvoiceShelf"

 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
    root * /opt/invoiceshelf/public
-    php_fastcgi unix/${PHP_SOCK}
+    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
    file_server
    encode gzip
 }
@@ -86,6 +86,7 @@ systemctl enable -q --now kitchenowl
 msg_ok "Created and Started Service"

 msg_info "Configuring Nginx"
+rm -f /etc/nginx/sites-enabled/default
 cat <<'EOF' >/etc/nginx/sites-available/kitchenowl.conf
 server {
    listen 80;
@@ -133,7 +134,9 @@ server {
    }
 }
 EOF
-nginx_enable_site kitchenowl.conf
+ln -sf /etc/nginx/sites-available/kitchenowl.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -129,7 +129,6 @@ $STD systemctl restart php8.4-fpm
 msg_ok "Tuned PHP-FPM"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<'EOF' >/etc/nginx/sites-available/koel
 server {
    listen 80;
@@ -157,7 +156,7 @@ server {

    location ~ \.php$ {
        try_files $uri $uri/ /index.php?$args;
-        fastcgi_pass unix:__PHP_SOCK__;
+        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
        fastcgi_index index.php;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_intercept_errors on;
@@ -172,8 +171,9 @@ server {
    }
 }
 EOF
-sed -i "s|__PHP_SOCK__|${PHP_SOCK}|" /etc/nginx/sites-available/koel
-nginx_enable_site koel
+rm -f /etc/nginx/sites-enabled/default
+ln -sf /etc/nginx/sites-available/koel /etc/nginx/sites-enabled/koel
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 msg_info "Setting up Cron Job"
@@ -80,7 +80,7 @@ sed -i "s/listen = \/run\/php\/php8.4-fpm.sock/listen = \/run\/php-fpm-librenms.
 msg_ok "Configured PHP-FPM"

 msg_info "Configure Nginx"
-cat <<EOF >/etc/nginx/sites-available/librenms
+cat <<EOF >/etc/nginx/sites-enabled/librenms
 server {
 listen      80;
 server_name ${LOCAL_IP};
@@ -103,7 +103,8 @@ server {
 }
 }
 EOF
-nginx_enable_site librenms
+rm /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 systemctl restart php8.4-fpm
 msg_ok "Configured Nginx"

@@ -115,8 +115,10 @@ server {
    }
 }
 EOF
-systemctl enable -q --now linkding linkding-tasks
-nginx_enable_site linkding
+$STD rm -f /etc/nginx/sites-enabled/default
+$STD ln -sf /etc/nginx/sites-available/linkding /etc/nginx/sites-enabled/linkding
+systemctl enable -q --now nginx linkding linkding-tasks
+systemctl restart nginx
 msg_ok "Created Services"

 motd_ssh
@@ -56,11 +56,10 @@ chown -R www-data:www-data /opt/lychee

 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
    root * /opt/lychee/public
-    php_fastcgi unix/${PHP_SOCK}
+    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
    file_server
    encode gzip
 }
@@ -134,7 +134,9 @@ server {
    }
 }
 EOF
-nginx_enable_site manyfold.conf
+ln -s /etc/nginx/sites-available/manyfold.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Created Services"

 motd_ssh
@@ -262,8 +262,12 @@ server {
  }
 }
 EOF
+ln -sf /etc/nginx/sites-available/mastodon /etc/nginx/sites-enabled/mastodon
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
 systemctl enable -q --now redis-server
-nginx_enable_site mastodon
+systemctl enable -q --now nginx
+systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -45,13 +45,12 @@ msg_ok "Set up Matomo"

 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
    root * /opt/matomo
    @blocked path /config /config/* /tmp /tmp/* /.* /.*/*
    respond @blocked 403
-    php_fastcgi unix/${PHP_SOCK}
+    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
    file_server
    encode gzip
 }
@@ -19,16 +19,12 @@ $STD apt install -y \
  git-core \
  mediainfo

-cat <<EOF >/etc/apt/sources.list.d/non-free.sources
-Types: deb
-URIs: https://deb.debian.org/debian
-Suites: trixie
-Components: non-free non-free-firmware
-Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+cat <<EOF >/etc/apt/sources.list.d/non-free.list
+deb https://deb.debian.org/debian trixie main contrib non-free non-free-firmware
 EOF
 $STD apt update
 $STD apt install -y unrar
-rm /etc/apt/sources.list.d/non-free.sources
+rm /etc/apt/sources.list.d/non-free.list
 msg_ok "Installed Dependencies"

 msg_info "Installing Medusa"
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: michelroegl-brunner
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://musicseerr.com/ | Github: https://github.com/HabiRabbu/Musicseerr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+PYTHON_VERSION="3.13" setup_uv
+fetch_and_deploy_gh_release "musicseerr" "HabiRabbu/Musicseerr" "tarball"
+NODE_VERSION="25" NODE_MODULE="pnpm@10.33.0" setup_nodejs
+
+msg_info "Building Frontend"
+cd /opt/musicseerr/frontend
+export NODE_OPTIONS="--max-old-space-size=3072"
+$STD pnpm install --frozen-lockfile
+$STD pnpm run build
+msg_ok "Built Frontend"
+
+msg_info "Setting up Application"
+mkdir -p /opt/musicseerr/backend/config /opt/musicseerr/backend/cache
+$STD uv venv /opt/musicseerr/venv
+$STD uv pip install -r /opt/musicseerr/backend/requirements.txt --python=/opt/musicseerr/venv/bin/python
+rm -rf /opt/musicseerr/backend/static
+cp -r /opt/musicseerr/frontend/build /opt/musicseerr/backend/static
+msg_ok "Set up Application"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/musicseerr.service
+[Unit]
+Description=MusicSeerr Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/musicseerr/backend
+Environment=ROOT_APP_DIR=/opt/musicseerr/backend
+Environment=PORT=8688
+ExecStart=/opt/musicseerr/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now musicseerr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -59,6 +59,7 @@ USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-multiarch-im
 USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "netboot-xyz-checksums" "netbootxyz/netboot.xyz" "singlefile" "latest" "/var/www/html" "netboot.xyz-sha256-checksums.txt"

 msg_info "Configuring Webserver"
+rm -f /etc/nginx/sites-enabled/default
 cat <<'EOF' >/etc/nginx/sites-available/netboot-xyz
 server {
    listen 80 default_server;
@@ -82,7 +83,8 @@ server {
    }
 }
 EOF
-nginx_enable_site netboot-xyz
+ln -sf /etc/nginx/sites-available/netboot-xyz /etc/nginx/sites-enabled/netboot-xyz
+$STD systemctl reload nginx
 msg_ok "Configured Webserver"

 msg_info "Configuring TFTP Server"
@@ -1,59 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/diegosouzapw/OmniRoute
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-NODE_VERSION="24" setup_nodejs
-
-msg_info "Installing OmniRoute"
-$STD npm install -g omniroute@latest
-msg_ok "Installed OmniRoute"
-
-msg_info "Configuring OmniRoute"
-mkdir -p /opt/omniroute
-cat <<EOF >/opt/omniroute/.env
-JWT_SECRET=$(openssl rand -base64 48)
-API_KEY_SECRET=$(openssl rand -hex 32)
-STORAGE_ENCRYPTION_KEY=$(openssl rand -hex 32)
-STORAGE_ENCRYPTION_KEY_VERSION=v1
-INITIAL_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-20)
-PORT=20128
-OMNIROUTE_SERVER_HOST=0.0.0.0
-EOF
-chmod 600 /opt/omniroute/.env
-msg_ok "Configured OmniRoute"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/omniroute.service
-[Unit]
-Description=OmniRoute AI Gateway
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/omniroute
-Environment=DATA_DIR=/opt/omniroute
-ExecStart=/usr/bin/omniroute
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now omniroute
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -55,7 +55,11 @@ server {
 }
 EOF

-nginx_enable_site omnitools
+ln -sf /etc/nginx/sites-available/omnitools /etc/nginx/sites-enabled/omnitools
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q --now nginx
+systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -62,7 +62,9 @@ server {
 }
 EOF

-nginx_enable_site ots.conf
+ln -s /etc/nginx/sites-available/ots.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured nginx"

 msg_info "Creating Services"
@@ -20,7 +20,7 @@ $STD apt install -y \
  redis
 msg_ok "Installed Dependencies"

-NODE_VERSION="26" NODE_MODULE="corepack" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
 PG_VERSION="16" setup_postgresql
 PG_DB_NAME="outline" PG_DB_USER="outline" setup_postgresql_db

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y build-essential
 msg_ok "Installed Dependencies"

-NODE_VERSION="26" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="oxicloud" PG_DB_USER="oxicloud" setup_postgresql_db
 fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "tarball" "latest" "/opt/oxicloud"
@@ -57,7 +57,6 @@ $STD php artisan app:user:create paymenter admin admin@paymenter.org paymenter 1
 msg_ok "Created Admin User"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/paymenter.conf
 server {
    listen 80;
@@ -73,7 +72,7 @@ server {

    location ~ \.php\$ {
        include snippets/fastcgi-php.conf;
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
        include fastcgi_params;
    }
@@ -83,7 +82,9 @@ server {
    }
 }
 EOF
-nginx_enable_site paymenter.conf
+ln -s /etc/nginx/sites-available/paymenter.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 chown -R www-data:www-data /opt/paymenter/*
 msg_ok "Configured Nginx"

@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/PegaProx/project-pegaprox
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y sshpass
-msg_ok "Installed Dependencies"
-
-PYTHON_VERSION="3.12" setup_uv
-
-fetch_and_deploy_gh_release "pegaprox" "PegaProx/project-pegaprox" "tarball"
-
-msg_info "Setting up Python Environment"
-$STD uv venv --python 3.12 /opt/pegaprox/venv
-$STD uv pip install --python /opt/pegaprox/venv/bin/python -r /opt/pegaprox/requirements.txt
-msg_ok "Set up Python Environment"
-
-msg_info "Generating Master Key"
-mkdir -p /etc/pegaprox
-cat <<EOF >/etc/pegaprox/secret.key
-$(openssl rand -base64 32 | tr '+/' '-_')
-EOF
-chmod 600 /etc/pegaprox/secret.key
-msg_ok "Generated Master Key"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/pegaprox.service
-[Unit]
-Description=PegaProx - Multi-Cluster Proxmox VE Management
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/pegaprox
-ExecStart=/opt/pegaprox/venv/bin/python /opt/pegaprox/pegaprox_multi_cluster.py
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now pegaprox
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
@@ -376,7 +376,9 @@ server {
    }
 }
 EOF
-nginx_enable_site plane.conf
+ln -sf /etc/nginx/sites-available/plane.conf /etc/nginx/sites-enabled/plane.conf
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -236,7 +236,11 @@ server {
  }
 }
 EOF
-nginx_enable_site postiz
+ln -sf /etc/nginx/sites-available/postiz /etc/nginx/sites-enabled/postiz
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q nginx
+systemctl reload -q nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -29,7 +29,6 @@ chown -R www-data:www-data /var/www/html
 msg_ok "Deployed Poznote"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/poznote
 server {
    listen 8040;
@@ -42,7 +41,7 @@ server {

    location ~ \.php$ {
        include fastcgi_params;
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT \$document_root;
    }
@@ -52,7 +51,11 @@ server {
    }
 }
 EOF
-nginx_enable_site poznote
+ln -sf /etc/nginx/sites-available/poznote /etc/nginx/sites-enabled/poznote
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q --now nginx
+systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -37,7 +37,6 @@ systemctl restart php8.2-fpm
 msg_ok "Configured PHP"

 msg_info "Configuring Universal Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/privatebin.conf
 server {
    listen 80 default_server;
@@ -61,7 +60,7 @@ server {

    location ~ \.php\$ {
        include snippets/fastcgi-php.conf;
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
        include fastcgi_params;
    }
@@ -76,7 +75,9 @@ server {
    add_header X-XSS-Protection "1; mode=block";
 }
 EOF
-nginx_enable_site privatebin.conf
+ln -s /etc/nginx/sites-available/privatebin.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+systemctl reload nginx
 msg_ok "Nginx Configured"

 motd_ssh
@@ -19,7 +19,7 @@ $STD apt install -y \
  ca-certificates
 msg_ok "Installed Dependencies"

-NODE_VERSION="24" NODE_MODULE="playactor" setup_nodejs
+NODE_VERSION="22" NODE_MODULE="playactor" setup_nodejs
 fetch_and_deploy_gh_release "ps5-mqtt" "FunkeyFlo/ps5-mqtt" "tarball"

 msg_info "Configuring PS5-MQTT"
@@ -55,7 +55,9 @@ msg_ok "Set up Rackula"

 msg_info "Configuring nginx"
 cp /opt/rackula/config/nginx.conf /etc/nginx/sites-available/rackula
-nginx_enable_site rackula
+rm -f /etc/nginx/sites-enabled/default
+ln -sf /etc/nginx/sites-available/rackula /etc/nginx/sites-enabled/rackula
+$STD nginx -t
 msg_ok "Configured nginx"

 msg_info "Creating Services"
@@ -37,8 +37,6 @@ $STD apt install -y \
  redis-server \
  redis-tools \
  p7zip-full \
-  7zip-standalone \
-  libarchive-tools \
  tzdata
 msg_ok "Installed Dependencies"

@@ -93,7 +93,10 @@ server {
    }
 }
 EOF
-  nginx_enable_site shlink-web-client
+  ln -sf /etc/nginx/sites-available/shlink-web-client /etc/nginx/sites-enabled/shlink-web-client
+  rm -f /etc/nginx/sites-enabled/default
+  systemctl enable -q nginx
+  $STD systemctl restart nginx
  msg_ok "Set up Web Client"
 fi

@@ -40,7 +40,6 @@ $STD php artisan key:generate --force
 msg_ok "Configured Snipe-IT"

 msg_info "Creating Service"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/conf.d/snipeit.conf
 server {
        listen 80;
@@ -56,7 +55,7 @@ server {
        location ~ \.php\$ {
                include fastcgi.conf;
                include snippets/fastcgi-php.conf;
-                fastcgi_pass unix:${PHP_SOCK};
+                fastcgi_pass unix:/run/php/php8.3-fpm.sock;
                fastcgi_split_path_info ^(.+\.php)(/.+)\$;
                fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
                include fastcgi_params;
@@ -68,11 +68,10 @@ msg_ok "Set up SolidTime"

 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
    root * /opt/solidtime/public
-    php_fastcgi unix/${PHP_SOCK}
+    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
    file_server
    encode gzip
 }
@@ -91,7 +91,11 @@ sed \
  -e 's|root /usr/share/nginx/html;|root /var/www/sparkyfitness;|g' \
  -e 's|server_name localhost;|server_name _;|g' \
  "/opt/sparkyfitness/docker/nginx.conf" >/etc/nginx/sites-available/sparkyfitness
-nginx_enable_site sparkyfitness
+ln -sf /etc/nginx/sites-available/sparkyfitness /etc/nginx/sites-enabled/sparkyfitness
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+$STD systemctl enable -q --now nginx
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -120,7 +120,6 @@ EOF
 msg_ok "Set up Scheduler"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/speedtest-tracker
 server {
    listen 80;
@@ -144,7 +143,7 @@ server {
    error_page 404 /index.php;

    location ~ \.php$ {
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/var/run/php/php8.4-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
        include fastcgi_params;
    }
@@ -155,7 +154,9 @@ server {
 }
 EOF

-nginx_enable_site speedtest-tracker
+ln -sf /etc/nginx/sites-available/speedtest-tracker /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os

-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 setup_mariadb
 MARIADB_DB_NAME="sync_in" MARIADB_DB_USER="sync_in" setup_mariadb_db

@@ -54,7 +54,7 @@ cd /opt
 rm -rf /opt/guacamole-server
 msg_ok "Built Guacamole Server (guacd)"

-NODE_VERSION="26" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 fetch_and_deploy_gh_release "termix" "Termix-SSH/Termix" "tarball"

 msg_info "Building Frontend"
@@ -93,7 +93,6 @@ chmod -R 755 /opt/wallabag/{var,web/assets}
 msg_ok "Installed Wallabag"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<'EOF' >/etc/nginx/sites-available/wallabag
 server {
    listen 8000;
@@ -111,7 +110,7 @@ server {
    }

    location ~ ^/app\.php(/|$) {
-        fastcgi_pass unix:__PHP_SOCK__;
+        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
@@ -132,8 +131,9 @@ server {
 }
 EOF

-sed -i "s|__PHP_SOCK__|${PHP_SOCK}|" /etc/nginx/sites-available/wallabag
-nginx_enable_site wallabag
+ln -sf /etc/nginx/sites-available/wallabag /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Configured Nginx"

 msg_info "Enabling Services"
@@ -23,7 +23,6 @@ fi
 mkdir -p /opt/wanderer/{source,data/pb_data,data/meili_data,data/plugins}
 fetch_and_deploy_gh_release "wanderer" "open-wanderer/wanderer" "tarball" "latest" "/opt/wanderer/source"
 mkdir -p /opt/wanderer/source/db/data
-mkdir -p /opt/wanderer/source/search
 [[ -e /opt/wanderer/source/db/data/plugins ]] || ln -sfn /opt/wanderer/data/plugins /opt/wanderer/source/db/data/plugins

 msg_info "Installing wanderer (patience)"
@@ -69,7 +69,10 @@ sed -i \
    -e "s|/var/www/html|/opt/warracker/frontend|g" \
    -e "s/client_max_body_size __NGINX_MAX_BODY_SIZE_CONFIG_VALUE__/client_max_body_size 32M/" \
    /etc/nginx/sites-available/warracker.conf
-nginx_enable_site warracker.conf
+ln -s /etc/nginx/sites-available/warracker.conf /etc/nginx/sites-enabled/warracker.conf
+rm /etc/nginx/sites-enabled/default
+systemctl restart nginx
+
 msg_ok "Configured Nginx"

 msg_info "Creating systemd services"
@@ -32,11 +32,10 @@ msg_ok "Set up Webtrees"

 msg_info "Configuring Caddy"
 PHP_VER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION;')
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/caddy/Caddyfile
 :80 {
    root * /opt/webtrees
-    php_fastcgi unix/${PHP_SOCK}
+    php_fastcgi unix//run/php/php${PHP_VER}-fpm.sock
    file_server
    encode gzip
 }
@@ -48,7 +48,6 @@ chown -R www-data:www-data /opt/yourls
 msg_ok "Configured YOURLS"

 msg_info "Configuring Nginx"
-PHP_SOCK=$(get_php_fpm_socket)
 cat <<EOF >/etc/nginx/sites-available/yourls
 server {
    listen 80 default_server;
@@ -63,7 +62,7 @@ server {
    location ~ \.php\$ {
        try_files \$uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)\$;
-        fastcgi_pass unix:${PHP_SOCK};
+        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
@@ -80,7 +79,11 @@ server {
    }
 }
 EOF
-nginx_enable_site yourls
+ln -sf /etc/nginx/sites-available/yourls /etc/nginx/sites-enabled/yourls
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl enable -q --now nginx
+systemctl reload nginx
 msg_ok "Configured Nginx"

 motd_ssh
@@ -65,7 +65,9 @@ msg_ok "Installed Zammad"
 msg_info "Setup Services"
 cp /opt/zammad/contrib/nginx/zammad.conf /etc/nginx/sites-available/zammad.conf
 sed -i "s/server_name localhost;/server_name $LOCAL_IP;/g" /etc/nginx/sites-available/zammad.conf
-nginx_enable_site zammad.conf
+ln -sf /etc/nginx/sites-available/zammad.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
 msg_ok "Created Service"

 motd_ssh
@@ -10,29 +10,8 @@ fi
 # must write local failure artifacts instead of talking to the telemetry API
 # (the host is the single telemetry reporter).
 export TELEMETRY_CONTEXT="container"
-# A freshly booted container may not have DNS up yet. `source <(curl ...)` hides
-# curl's exit code, so a failed download would silently source an empty stream.
-_bootstrap_die() {
-  if declare -f msg_error >/dev/null 2>&1; then
-    msg_error "$1"
-  else
-    echo "FATAL: $1" >&2
-  fi
-  exit 115
-}
-
-_bootstrap_source() {
-  local url="$1" probe="$2" content
-  content=$(curl -fsSL --connect-timeout 10 --retry 5 --retry-connrefused --retry-delay 2 "$url") ||
-    _bootstrap_die "Failed to download ${url##*/}"
-  source /dev/stdin <<<"$content"
-  declare -f "$probe" >/dev/null 2>&1 ||
-    _bootstrap_die "${url##*/} loaded but incomplete (missing ${probe})"
-}
-
-_FUNC_BASE="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc"
-_bootstrap_source "$_FUNC_BASE/core.func" load_functions
-_bootstrap_source "$_FUNC_BASE/error_handler.func" catch_errors
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
 load_functions
 catch_errors

@@ -88,38 +88,19 @@ variables() {
  fi
 }

-# `source <(curl ...)` hides the download exit code, so a failed fetch would
-# silently source an empty stream and leave the helpers undefined.
-_bootstrap_die() {
-  if declare -f msg_error >/dev/null 2>&1; then
-    msg_error "$1"
-  else
-    echo "FATAL: $1" >&2
-  fi
-  exit 115
-}
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func)

-_bootstrap_source() {
-  local url="$1" probe="$2" content=""
-  if command -v curl >/dev/null 2>&1; then
-    content=$(curl -fsSL --connect-timeout 10 --retry 5 --retry-connrefused --retry-delay 2 "$url") || content=""
-  elif command -v wget >/dev/null 2>&1; then
-    content=$(wget -qO- --tries=5 --timeout=10 "$url") || content=""
-  else
-    _bootstrap_die "Neither curl nor wget available"
-  fi
-  [[ -n "$content" ]] || _bootstrap_die "Failed to download ${url##*/}"
-  source /dev/stdin <<<"$content"
-  declare -f "$probe" >/dev/null 2>&1 ||
-    _bootstrap_die "${url##*/} loaded but incomplete (missing ${probe})"
-}
-
-_FUNC_BASE="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc"
-_bootstrap_source "$_FUNC_BASE/api.func" post_to_api
-_bootstrap_source "$_FUNC_BASE/core.func" load_functions
-_bootstrap_source "$_FUNC_BASE/error_handler.func" catch_errors
-load_functions
-catch_errors
+if command -v curl >/dev/null 2>&1; then
+  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+  load_functions
+  catch_errors
+elif command -v wget >/dev/null 2>&1; then
+  source <(wget -qO- https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+  source <(wget -qO- https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+  load_functions
+  catch_errors
+fi

 # ==============================================================================
 # SECTION 2: PRE-FLIGHT CHECKS & SYSTEM VALIDATION
@@ -1130,7 +1111,6 @@ base_settings() {

  APT_CACHER=${var_apt_cacher:-""}
  APT_CACHER_IP=${var_apt_cacher_ip:-""}
-  INHERIT_HOST_CA="${var_inherit_host_ca:-no}"

  # Runtime check: Verify APT cacher is reachable if configured
  if [[ -n "$APT_CACHER_IP" && "$APT_CACHER" == "yes" ]]; then
@@ -1213,7 +1193,7 @@ load_vars_file() {

  # Allowed var_* keys
  local VAR_WHITELIST=(
-    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_github_token var_gpu var_http_no_proxy var_http_proxy var_inherit_host_ca var_keyctl
+    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_github_token var_gpu var_http_no_proxy var_http_proxy var_keyctl
    var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
@@ -1410,12 +1390,6 @@ load_vars_file() {
            continue
          fi
          ;;
-        var_inherit_host_ca)
-          if [[ "$var_val" != "yes" && "$var_val" != "no" && "$var_val" != "auto" ]]; then
-            msg_warn "Invalid host CA inheritance value '$var_val' in $file (must be yes/no/auto), ignoring"
-            continue
-          fi
-          ;;
        var_container_storage | var_template_storage)
          # Validate that the storage exists and is active on the current node
          local _storage_status
@@ -1455,7 +1429,7 @@ default_var_settings() {
  # Allowed var_* keys (alphabetically sorted)
  # Note: Removed var_ctid (can only exist once), var_ipv6_static (static IPs are unique)
  local VAR_WHITELIST=(
-    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_github_token var_gpu var_http_no_proxy var_http_proxy var_inherit_host_ca var_keyctl
+    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_github_token var_gpu var_http_no_proxy var_http_proxy var_keyctl
    var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
@@ -1538,7 +1512,6 @@ var_ssh=no
 # HTTP/HTTPS proxy (optional - for networks requiring a proxy)
 # var_http_proxy=http://proxy.local:8080
 # var_http_no_proxy=localhost,127.0.0.1,.local
-# var_inherit_host_ca=no

 # Features/Tags/verbosity
 var_fuse=no
@@ -1639,7 +1612,7 @@ get_app_defaults_path() {
 if ! declare -p VAR_WHITELIST >/dev/null 2>&1; then
  # Note: Removed var_ctid (can only exist once), var_ipv6_static (static IPs are unique)
  declare -ag VAR_WHITELIST=(
-    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_github_token var_gpu var_http_no_proxy var_http_proxy var_inherit_host_ca var_keyctl
+    var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_github_token var_gpu var_http_no_proxy var_http_proxy var_keyctl
    var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
@@ -1789,7 +1762,6 @@ _build_current_app_vars_tmp() {
  _apt_cacher_ip="${APT_CACHER_IP:-}"
  _http_proxy="${HTTP_PROXY:-${var_http_proxy:-}}"
  _http_no_proxy="${HTTP_NO_PROXY:-${var_http_no_proxy:-}}"
-  _inherit_host_ca="${INHERIT_HOST_CA:-${var_inherit_host_ca:-no}}"
  _fuse="${ENABLE_FUSE:-no}"
  _tun="${ENABLE_TUN:-no}"
  _gpu="${ENABLE_GPU:-no}"
@@ -1843,7 +1815,6 @@ _build_current_app_vars_tmp() {
    [ -n "$_apt_cacher_ip" ] && echo "var_apt_cacher_ip=$(_sanitize_value "$_apt_cacher_ip")"
    [ -n "$_http_proxy" ] && echo "var_http_proxy=$(_sanitize_value "$_http_proxy")"
    [ -n "$_http_no_proxy" ] && echo "var_http_no_proxy=$(_sanitize_value "$_http_no_proxy")"
-    [ -n "$_inherit_host_ca" ] && echo "var_inherit_host_ca=$(_sanitize_value "$_inherit_host_ca")"

    [ -n "$_fuse" ] && echo "var_fuse=$(_sanitize_value "$_fuse")"
    [ -n "$_tun" ] && echo "var_tun=$(_sanitize_value "$_tun")"
@@ -2008,7 +1979,7 @@ advanced_settings() {
    TAGS="community-script${var_tags:+;${var_tags}}"
  fi
  local STEP=1
-  local MAX_STEP=31
+  local MAX_STEP=30

  # Store values for back navigation - inherit from var_* app defaults
  local _ct_type="${var_unprivileged:-1}"
@@ -2030,7 +2001,6 @@ advanced_settings() {
  local _apt_cacher_ip="${var_apt_cacher_ip:-}"
  local _http_proxy="${var_http_proxy:-}"
  local _http_no_proxy="${var_http_no_proxy:-}"
-  local _inherit_host_ca="${var_inherit_host_ca:-no}"
  local _mtu="${var_mtu:-}"
  local _sd="${var_searchdomain:-}"
  local _ns="${var_ns:-}"
@@ -2860,47 +2830,9 @@ advanced_settings() {
      ;;

    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 25: Host CA Inheritance
+    # STEP 25: Container Timezone
    # ═══════════════════════════════════════════════════════════════════════════
    25)
-      local host_ca_count=0
-      local host_ca_dir="/usr/local/share/ca-certificates"
-      local cert
-      shopt -s nullglob
-      for cert in "$host_ca_dir"/*.crt; do
-        host_ca_count=$((host_ca_count + 1))
-      done
-      shopt -u nullglob
-
-      if [[ $host_ca_count -eq 0 ]]; then
-        _inherit_host_ca="no"
-        ((STEP++))
-        continue
-      fi
-
-      local host_ca_default_flag="--defaultno"
-      [[ "$_inherit_host_ca" == "yes" ]] && host_ca_default_flag=""
-      if whiptail --backtitle "Proxmox VE Helper Scripts [Step $STEP/$MAX_STEP]" \
-        --title "HOST CA INHERITANCE" \
-        --ok-button "Next" --cancel-button "Back" \
-        $host_ca_default_flag \
-        --yesno "\nInherit host CA certificates into this container?\n\nDetected on host: ${host_ca_count} certificate(s) in:\n${host_ca_dir}\n\nRecommended for private PKI / TLS-inspection environments.\n\n(App default: ${var_inherit_host_ca:-no})" 16 72; then
-        _inherit_host_ca="yes"
-      else
-        if [ $? -eq 1 ]; then
-          _inherit_host_ca="no"
-        else
-          ((STEP--))
-          continue
-        fi
-      fi
-      ((STEP++))
-      ;;
-
-    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 26: Container Timezone
-    # ═══════════════════════════════════════════════════════════════════════════
-    26)
      local tz_hint="$_ct_timezone"
      [[ -z "$tz_hint" ]] && tz_hint="(empty - will use host timezone)"

@@ -2923,9 +2855,9 @@ advanced_settings() {
      ;;

    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 27: Container Protection
+    # STEP 26: Container Protection
    # ═══════════════════════════════════════════════════════════════════════════
-    27)
+    26)
      local protect_default_flag="--defaultno"
      [[ "$_protect_ct" == "yes" || "$_protect_ct" == "1" ]] && protect_default_flag=""

@@ -2947,9 +2879,9 @@ advanced_settings() {
      ;;

    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 28: Device Node Creation (mknod)
+    # STEP 27: Device Node Creation (mknod)
    # ═══════════════════════════════════════════════════════════════════════════
-    28)
+    27)
      local mknod_default_flag="--defaultno"
      [[ "$_enable_mknod" == "1" ]] && mknod_default_flag=""

@@ -2971,9 +2903,9 @@ advanced_settings() {
      ;;

    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 29: Mount Filesystems
+    # STEP 28: Mount Filesystems
    # ═══════════════════════════════════════════════════════════════════════════
-    29)
+    28)
      local mount_hint=""
      [[ -n "$_mount_fs" ]] && mount_hint="$_mount_fs" || mount_hint="(none)"

@@ -2994,9 +2926,9 @@ advanced_settings() {
      ;;

    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 30: Optional host-side post-install hook (path on the Proxmox HOST)
+    # STEP 29: Optional host-side post-install hook (path on the Proxmox HOST)
    # ═══════════════════════════════════════════════════════════════════════════
-    30)
+    29)
      local _hook_prompt="Optional: absolute path to a *.sh file ON THE PROXMOX HOST.

 It runs as root on the HOST (NOT in the LXC) after the container
@@ -3046,9 +2978,9 @@ Leave empty to skip."
      ;;

    # ═══════════════════════════════════════════════════════════════════════════
-    # STEP 31: Verbose Mode & Confirmation
+    # STEP 30: Verbose Mode & Confirmation
    # ═══════════════════════════════════════════════════════════════════════════
-    31)
+    30)
      local verbose_default_flag="--defaultno"
      [[ "$_verbose" == "yes" ]] && verbose_default_flag=""

@@ -3077,7 +3009,6 @@ Leave empty to skip."
      local apt_display="${_apt_cacher:-no}"
      [[ "$_apt_cacher" == "yes" && -n "$_apt_cacher_ip" ]] && apt_display="$_apt_cacher_ip"
      local http_proxy_display="${_http_proxy:-(none)}"
-      local inherit_ca_display="${_inherit_host_ca:-no}"

      local post_install_display="${_post_install:-(none)}"
      local post_install_warn=""
@@ -3108,7 +3039,6 @@ Advanced:
  Timezone: $tz_display
  APT Cacher: $apt_display
  HTTP Proxy: $http_proxy_display
-  Inherit Host CAs: $inherit_ca_display
  Verbose: $_verbose
  Post-Install Script: ${post_install_display}${post_install_warn}"

@@ -3154,7 +3084,6 @@ Advanced:
  APT_CACHER_IP="$_apt_cacher_ip"
  HTTP_PROXY="$_http_proxy"
  HTTP_NO_PROXY="$_http_no_proxy"
-  INHERIT_HOST_CA="$_inherit_host_ca"
  VERBOSE="$_verbose"
  var_post_install="$_post_install"

@@ -3173,7 +3102,6 @@ Advanced:
  var_sdn_vnet="$_sdn_vnet"
  var_http_proxy="$_http_proxy"
  var_http_no_proxy="$_http_no_proxy"
-  var_inherit_host_ca="$_inherit_host_ca"

  # Format optional values
  [[ -n "$_mtu" ]] && MTU=",mtu=$_mtu" || MTU=""
@@ -4213,83 +4141,6 @@ EOF
  msg_ok "Applied HTTP proxy in container"
 }

-# ------------------------------------------------------------------------------
-# _apply_host_ca_certs_in_container()
-#
-# - Copies administrator-provided CA certificates from the Proxmox host into the
-#   container before base package bootstrap
-# - Source: /usr/local/share/ca-certificates/*.crt (Debian convention)
-# - Refreshes the container trust store when update-ca-certificates is available
-# - No-op when no host certificates are present; failures are non-fatal
-# ------------------------------------------------------------------------------
-_apply_host_ca_certs_in_container() {
-  local host_ca_dir="/usr/local/share/ca-certificates"
-  [[ -z "${CTID:-}" ]] && return 0
-  local inherit_host_ca="${INHERIT_HOST_CA:-${var_inherit_host_ca:-no}}"
-
-  local -a host_certs=()
-  local cert
-  shopt -s nullglob
-  for cert in "$host_ca_dir"/*.crt; do
-    host_certs+=("$cert")
-  done
-  shopt -u nullglob
-
-  [[ ${#host_certs[@]} -eq 0 ]] && return 0
-
-  # Opt-in only: copy host CA certs solely when explicitly enabled.
-  # Any other value (no/auto/unset) is a silent no-op to preserve LXC isolation.
-  case "${inherit_host_ca,,}" in
-  yes | true | 1 | on) ;;
-  *)
-    return 0
-    ;;
-  esac
-
-  msg_info "Inheriting host CA certificates into container"
-
-  local found=${#host_certs[@]}
-  local copied=0
-  local skipped=0
-  local cert_name
-
-  pct exec "$CTID" -- mkdir -p /usr/local/share/ca-certificates >/dev/null 2>&1 || {
-    msg_warn "Failed to create CA certificate directory in container"
-    return 0
-  }
-
-  for cert in "${host_certs[@]}"; do
-    cert_name="$(basename "$cert")"
-    if [[ ! -r "$cert" || "$cert_name" != *.crt ]]; then
-      msg_warn "Skipping invalid or unreadable host CA certificate: ${cert_name}"
-      skipped=$((skipped + 1))
-      continue
-    fi
-
-    if pct push "$CTID" "$cert" "/usr/local/share/ca-certificates/${cert_name}" >/dev/null 2>&1; then
-      pct exec "$CTID" -- chmod 644 "/usr/local/share/ca-certificates/${cert_name}" >/dev/null 2>&1 || true
-      copied=$((copied + 1))
-    else
-      msg_warn "Failed to push host CA certificate: ${cert_name}"
-      skipped=$((skipped + 1))
-    fi
-  done
-
-  if [[ $copied -eq 0 ]]; then
-    msg_warn "No host CA certificates were copied (${found} found, ${skipped} skipped)"
-    return 0
-  fi
-
-  local refresh_shell="bash"
-  [[ "$var_os" == "alpine" ]] && refresh_shell="ash"
-
-  if pct exec "$CTID" -- "$refresh_shell" -c 'command -v update-ca-certificates >/dev/null 2>&1 && update-ca-certificates' >/dev/null 2>&1; then
-    msg_ok "Inherited ${copied} host CA certificate(s) and updated trust store (${skipped} skipped)"
-  else
-    msg_warn "Copied ${copied} host CA certificate(s), but trust store update failed or update-ca-certificates is unavailable (${skipped} skipped)"
-  fi
-}
-
 # ------------------------------------------------------------------------------
 # build_container()
 #
@@ -4919,7 +4770,6 @@ EOF
  local install_exit_code=0

  _apply_http_proxy_in_container
-  _apply_host_ca_certs_in_container

  # Continue with standard container setup
  if [ "$var_os" == "alpine" ]; then
@@ -5200,16 +5050,6 @@ EOF
    # TSTP = Ctrl+Z, TTIN = bg read from tty, TTOU = bg write to tty (tostop)
    trap '' TSTP TTIN TTOU

-    # lxc-attach takes the controlling terminal while the install runs and does
-    # not hand it back, leaving us in a background process group. Reading from
-    # the terminal then returns EIO instead of blocking, because SIGTTIN is
-    # ignored above - so every recovery prompt fails before the user can answer.
-    # Redirecting to /dev/tty does not help: the rule applies to the terminal,
-    # not the file descriptor. Claim the foreground group back; SIGTTOU is
-    # ignored too, so tcsetpgrp() succeeds instead of stopping us. No-op when we
-    # already are in the foreground. perl is a hard dependency of Proxmox VE.
-    perl -e 'use POSIX; open(my $t, "+<", "/dev/tty") or exit 1; POSIX::tcsetpgrp(fileno($t), getpgrp()) or exit 1;' 2>/dev/null || true
-
    msg_error "Installation failed in container ${CTID} (exit code: ${install_exit_code})"

    # Copy install log from container BEFORE API call so get_error_text() can read it
@@ -5497,7 +5337,7 @@ EOF

    local response=""
    local read_rc
-    read -t 60 -r response </dev/tty
+    read -t 60 -r response
    read_rc=$?
    if [[ $read_rc -eq 0 ]]; then
      case "${response:-1}" in
@@ -37,29 +37,8 @@ fi
 # (the host is the single telemetry reporter).
 export TELEMETRY_CONTEXT="container"

-# A freshly booted container may not have DNS up yet. `source <(curl ...)` hides
-# curl's exit code, so a failed download would silently source an empty stream.
-_bootstrap_die() {
-  if declare -f msg_error >/dev/null 2>&1; then
-    msg_error "$1"
-  else
-    echo "FATAL: $1" >&2
-  fi
-  exit 115
-}
-
-_bootstrap_source() {
-  local url="$1" probe="$2" content
-  content=$(curl -fsSL --connect-timeout 10 --retry 5 --retry-connrefused --retry-delay 2 "$url") ||
-    _bootstrap_die "Failed to download ${url##*/}"
-  source /dev/stdin <<<"$content"
-  declare -f "$probe" >/dev/null 2>&1 ||
-    _bootstrap_die "${url##*/} loaded but incomplete (missing ${probe})"
-}
-
-_FUNC_BASE="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc"
-_bootstrap_source "$_FUNC_BASE/core.func" load_functions
-_bootstrap_source "$_FUNC_BASE/error_handler.func" catch_errors
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
 load_functions
 catch_errors

@@ -2736,8 +2736,7 @@ get_latest_gl_tag() {
  local repo_encoded
  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')

-  local gitlab_url="${GITLAB_URL:-https://gitlab.com}"
-  local api_base="${gitlab_url}/api/v4/projects/${repo_encoded}/repository/tags"
+  local api_base="https://gitlab.com/api/v4/projects/${repo_encoded}/repository/tags"
  local api_timeout="--connect-timeout 10 --max-time 60"

  local header=()
@@ -2819,7 +2818,6 @@ get_latest_gl_tag() {
 # Notes:
 #   - Supports CLEAN_INSTALL=1 to wipe target before extracting
 #   - Supports GITLAB_TOKEN for private/rate-limited projects
-#   - Supports GITLAB_URL for self-hosted GitLab (default: https://gitlab.com)
 #   - For repos that only publish tags, not formal GitLab Releases
 #     (use fetch_and_deploy_gl_release for proper Releases with assets)
 # ------------------------------------------------------------------------------
@@ -2863,9 +2861,8 @@ fetch_and_deploy_gl_tag() {
  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')

  # GitLab source tarball URL (no release needed, works for any tag).
-  local gitlab_url="${GITLAB_URL:-https://gitlab.com}"
  local version_safe="${resolved_tag//\//-}"
-  local tarball_url="${gitlab_url}/${repo}/-/archive/${resolved_tag}/${app_lc}-${version_safe}.tar.gz"
+  local tarball_url="https://gitlab.com/${repo}/-/archive/${resolved_tag}/${app_lc}-${version_safe}.tar.gz"

  local tmpdir
  tmpdir=$(mktemp -d) || return 1
@@ -6950,60 +6947,6 @@ setup_mariadb_db() {
  export MARIADB_DB_PASS
 }

-# ------------------------------------------------------------------------------
-# Creates a MySQL database and user (for apps that require MySQL, not MariaDB).
-#
-# Description:
-#   - Creates database, user and grants using the mysql root socket login
-#   - The user is created with host '%' because MySQL treats 'localhost'
-#     (socket) and '127.0.0.1' (TCP) as distinct hosts; apps connecting over
-#     TCP to 127.0.0.1 would not match a 'localhost' account. mysql-server
-#     binds to 127.0.0.1 by default, so '%' stays local-only.
-#
-# Variables:
-#   MYSQL_DB_NAME   - Database name (required)
-#   MYSQL_DB_USER   - Database user (required)
-#   MYSQL_DB_PASS   - Password (optional, generated if unset)
-#
-# Exports:
-#   MYSQL_DB_NAME, MYSQL_DB_USER, MYSQL_DB_PASS
-#
-# Example:
-#   MYSQL_DB_NAME="fleet" MYSQL_DB_USER="fleet" setup_mysql_db
-# ------------------------------------------------------------------------------
-setup_mysql_db() {
-  if [[ -z "${MYSQL_DB_NAME:-}" || -z "${MYSQL_DB_USER:-}" ]]; then
-    msg_error "MYSQL_DB_NAME and MYSQL_DB_USER must be set before calling setup_mysql_db"
-    return 65
-  fi
-
-  if [[ -z "${MYSQL_DB_PASS:-}" ]]; then
-    MYSQL_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-  fi
-
-  msg_info "Setting up MySQL Database"
-
-  $STD mysql -u root -e "CREATE DATABASE \`${MYSQL_DB_NAME//\`/\`\`}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
-  $STD mysql -u root -e "CREATE USER '${MYSQL_DB_USER//\'/\'\'}'@'%' IDENTIFIED BY '${MYSQL_DB_PASS//\'/\'\'}';"
-  $STD mysql -u root -e "GRANT ALL ON \`${MYSQL_DB_NAME//\`/\`\`}\`.* TO '${MYSQL_DB_USER//\'/\'\'}'@'%';"
-  $STD mysql -u root -e "FLUSH PRIVILEGES;"
-
-  local app_name="${APPLICATION,,}"
-  local CREDS_FILE="${MYSQL_DB_CREDS_FILE:-${HOME}/${app_name}.creds}"
-  {
-    echo "MySQL Credentials"
-    echo "Database: $MYSQL_DB_NAME"
-    echo "User: $MYSQL_DB_USER"
-    echo "Password: $MYSQL_DB_PASS"
-  } >>"$CREDS_FILE"
-
-  msg_ok "Set up MySQL Database"
-
-  export MYSQL_DB_NAME
-  export MYSQL_DB_USER
-  export MYSQL_DB_PASS
-}
-
 # ------------------------------------------------------------------------------
 # Installs or updates MeiliSearch search engine.
 #
@@ -8230,78 +8173,6 @@ EOF
  msg_ok "Setup PHP ${INSTALLED_VERSION}"
 }

-# ------------------------------------------------------------------------------
-# Resolves the path of the active PHP-FPM unix socket.
-#
-# Description:
-#   - Prefers the socket of ${PHP_VERSION} when that variable is set, which is
-#     the deterministic case directly after setup_php ran
-#   - Falls back to the highest version found below /run/php
-#   - Webserver-agnostic: works for nginx (fastcgi_pass) and Caddy (php_fastcgi)
-#
-# Notes:
-#   - Prints the path to stdout, diagnostics go to stderr, so the result can be
-#     captured via command substitution
-#   - Deliberately avoids `head -n1`: it closes the pipe early and with
-#     `set -o pipefail` (see catch_errors) SIGPIPE would abort the install
-#   - php-fpm has to be running, the socket only exists after the service start
-#
-# Usage:
-#   PHP_SOCK=$(get_php_fpm_socket)
-#   echo "fastcgi_pass unix:${PHP_SOCK};"
-# ------------------------------------------------------------------------------
-get_php_fpm_socket() {
-  local sock
-  if [[ -n "${PHP_VERSION:-}" && -S "/run/php/php${PHP_VERSION}-fpm.sock" ]]; then
-    echo "/run/php/php${PHP_VERSION}-fpm.sock"
-    return 0
-  fi
-  sock=$(find /run/php -maxdepth 1 -name "php*-fpm.sock" -type s 2>/dev/null | sort -V | tail -1)
-  if [[ -z "$sock" ]]; then
-    msg_error "No active PHP-FPM socket found under /run/php"
-    return 1
-  fi
-  echo "$sock"
-}
-# ------------------------------------------------------------------------------
-# Enables an nginx site, validates the configuration and reloads the service.
-#
-# Description:
-#   - Removes the packaged default vhost (idempotent, unlike `unlink`)
-#   - Links the site from sites-available into sites-enabled
-#   - Runs `nginx -t` and aborts before a broken config reaches a running service
-#   - Enables the unit so nginx survives a reboot, then restarts it via
-#     safe_service_restart so a failed start is actually reported
-#
-# Variables:
-#   $1 - site name, has to exist as /etc/nginx/sites-available/<name>
-#
-# Usage:
-#   cat <<EOF >/etc/nginx/sites-available/myapp
-#   ...
-#   EOF
-#   nginx_enable_site myapp
-# ------------------------------------------------------------------------------
-nginx_enable_site() {
-  local site="${1:-}"
-  if [[ -z "$site" ]]; then
-    msg_error "nginx_enable_site: no site name given"
-    return 1
-  fi
-  if [[ ! -f "/etc/nginx/sites-available/${site}" ]]; then
-    msg_error "nginx site config not found: /etc/nginx/sites-available/${site}"
-    return 1
-  fi
-  rm -f /etc/nginx/sites-enabled/default /etc/nginx/sites-available/default
-  ln -sf "/etc/nginx/sites-available/${site}" "/etc/nginx/sites-enabled/${site}"
-  if ! $STD nginx -t; then
-    msg_error "nginx configuration test failed for site '${site}'"
-    return 1
-  fi
-  $STD systemctl enable -q nginx
-  safe_service_restart nginx
-}
-
 # ------------------------------------------------------------------------------
 # Installs or upgrades PostgreSQL and optional extensions/modules.
 #
@@ -9494,12 +9365,11 @@ get_latest_gitlab_release() {
  local temp_file
  temp_file=$(mktemp)

-  local gitlab_url="${GITLAB_URL:-https://gitlab.com}"
  local http_code
  http_code=$(curl --connect-timeout 10 --max-time 30 -sSL \
    -w "%{http_code}" -o "$temp_file" \
    "${header[@]}" \
-    "${gitlab_url}/api/v4/projects/$repo_encoded/releases?per_page=1&order_by=released_at&sort=desc" 2>/dev/null) || true
+    "https://gitlab.com/api/v4/projects/$repo_encoded/releases?per_page=1&order_by=released_at&sort=desc" 2>/dev/null) || true

  if [[ "$http_code" != "200" ]]; then
    rm -f "$temp_file"
@@ -9541,7 +9411,6 @@ get_latest_gitlab_release() {
 # Notes:
 #   - Requires `jq` (auto-installed if missing)
 #   - Supports GITLAB_TOKEN env var for private/rate-limited repos
-#   - Supports GITLAB_URL for self-hosted GitLab (default: https://gitlab.com)
 #   - Does not modify anything, only checks version state
 # ------------------------------------------------------------------------------
 check_for_gl_release() {
@@ -9553,15 +9422,11 @@ check_for_gl_release() {
  local app_lc="${app,,}"
  local current_file="$HOME/.${app_lc}"

-  local gitlab_url="${GITLAB_URL:-https://gitlab.com}"
-  local gitlab_hostname="${gitlab_url#*://}"
-  gitlab_hostname="${gitlab_hostname%%/*}"
-
  msg_info "Checking for update: ${app}"

  # DNS check
-  if ! getent hosts "$gitlab_hostname" >/dev/null 2>&1; then
-    msg_error "Network error: cannot resolve $gitlab_hostname"
+  if ! getent hosts gitlab.com >/dev/null 2>&1; then
+    msg_error "Network error: cannot resolve gitlab.com"
    return 6
  fi

@@ -9584,7 +9449,7 @@ check_for_gl_release() {
    local pinned_encoded="${pinned_version_in//\//%2F}"
    http_code=$(curl -sSL --max-time 20 -w "%{http_code}" -o "$gl_check_json" \
      "${header[@]}" \
-      "${gitlab_url}/api/v4/projects/$repo_encoded/releases/$pinned_encoded" 2>/dev/null) || true
+      "https://gitlab.com/api/v4/projects/$repo_encoded/releases/$pinned_encoded" 2>/dev/null) || true
    if [[ "$http_code" == "200" ]] && [[ -s "$gl_check_json" ]]; then
      releases_json="[$(<"$gl_check_json")]"
    fi
@@ -9595,7 +9460,7 @@ check_for_gl_release() {
  if [[ -z "$releases_json" ]]; then
    http_code=$(curl -sSL --max-time 20 -w "%{http_code}" -o "$gl_check_json" \
      "${header[@]}" \
-      "${gitlab_url}/api/v4/projects/$repo_encoded/releases?per_page=100&order_by=released_at&sort=desc" 2>/dev/null) || true
+      "https://gitlab.com/api/v4/projects/$repo_encoded/releases?per_page=100&order_by=released_at&sort=desc" 2>/dev/null) || true

    if [[ "$http_code" == "200" ]] && [[ -s "$gl_check_json" ]]; then
      releases_json=$(<"$gl_check_json")
@@ -9619,7 +9484,7 @@ check_for_gl_release() {
      return 22
    elif [[ "$http_code" == "000" || -z "$http_code" ]]; then
      msg_error "GitLab API connection failed (no response)."
-      msg_error "Check your network/DNS: curl -sSL ${gitlab_url}/api/v4/version"
+      msg_error "Check your network/DNS: curl -sSL https://gitlab.com/api/v4/version"
      rm -f "$gl_check_json"
      return 7
    else
@@ -9864,8 +9729,7 @@ fetch_and_deploy_gl_release() {
  local repo_encoded
  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')

-  local gitlab_url="${GITLAB_URL:-https://gitlab.com}"
-  local api_base="${gitlab_url}/api/v4/projects/$repo_encoded/releases"
+  local api_base="https://gitlab.com/api/v4/projects/$repo_encoded/releases"
  local api_url
  if [[ "$version" != "latest" ]]; then
    api_url="$api_base/$version"
@@ -9914,7 +9778,7 @@ fetch_and_deploy_gl_release() {
      msg_error "  export GITLAB_TOKEN=\"glpat-your_token_here\""
    elif [[ "$http_code" == "000" || -z "$http_code" ]]; then
      msg_error "GitLab API connection failed (no response)."
-      msg_error "Check your network/DNS: curl -sSL ${gitlab_url}/api/v4/version"
+      msg_error "Check your network/DNS: curl -sSL https://gitlab.com/api/v4/version"
    else
      msg_error "Failed to fetch release metadata (HTTP $http_code)"
    fi
@@ -9969,7 +9833,7 @@ fetch_and_deploy_gl_release() {

  ### Tarball Mode ###
  if [[ "$mode" == "tarball" || "$mode" == "source" ]]; then
-    local direct_tarball_url="${gitlab_url}/$repo/-/archive/$tag_name/${app_lc}-${version_safe}.tar.gz"
+    local direct_tarball_url="https://gitlab.com/$repo/-/archive/$tag_name/${app_lc}-${version_safe}.tar.gz"
    filename="${app_lc}-${version_safe}.tar.gz"

    _download_source_tarball "$direct_tarball_url" "$tmpdir/$filename" "${header[@]}" || {
@@ -10017,7 +9881,7 @@ fetch_and_deploy_gl_release() {

    if [[ -z "$url_match" ]]; then
      local fallback_json
-      if fallback_json=$(_gl_scan_older_releases "$repo" "$repo_encoded" "$gitlab_url" "binary" "$asset_pattern" "$tag_name"); then
+      if fallback_json=$(_gl_scan_older_releases "$repo" "$repo_encoded" "https://gitlab.com" "binary" "$asset_pattern" "$tag_name"); then
        json="$fallback_json"
        tag_name=$(echo "$json" | jq -r '.tag_name // empty')
        [[ "$tag_name" =~ ^v[0-9] ]] && version="${tag_name:1}" || version="$tag_name"
@@ -10089,7 +9953,7 @@ fetch_and_deploy_gl_release() {

    if [[ -z "$asset_url" ]]; then
      local fallback_json
-      if fallback_json=$(_gl_scan_older_releases "$repo" "$repo_encoded" "$gitlab_url" "prebuild" "$pattern" "$tag_name"); then
+      if fallback_json=$(_gl_scan_older_releases "$repo" "$repo_encoded" "https://gitlab.com" "prebuild" "$pattern" "$tag_name"); then
        json="$fallback_json"
        tag_name=$(echo "$json" | jq -r '.tag_name // empty')
        [[ "$tag_name" =~ ^v[0-9] ]] && version="${tag_name:1}" || version="$tag_name"
@@ -10142,7 +10006,7 @@ fetch_and_deploy_gl_release() {

    if [[ -z "$asset_url" ]]; then
      local fallback_json
-      if fallback_json=$(_gl_scan_older_releases "$repo" "$repo_encoded" "$gitlab_url" "singlefile" "$pattern" "$tag_name"); then
+      if fallback_json=$(_gl_scan_older_releases "$repo" "$repo_encoded" "https://gitlab.com" "singlefile" "$pattern" "$tag_name"); then
        json="$fallback_json"
        tag_name=$(echo "$json" | jq -r '.tag_name // empty')
        [[ "$tag_name" =~ ^v[0-9] ]] && version="${tag_name:1}" || version="$tag_name"
@@ -1,224 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/sakowicz/actual-budget-prometheus-exporter
-
-if ! command -v curl &>/dev/null; then
-  printf "\r\e[2K%b" '\033[93m Setup Source \033[m' >&2
-  apt-get update >/dev/null 2>&1
-  apt-get install -y curl >/dev/null 2>&1
-fi
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "actual-budget-prometheus-exporter" "addon"
-
-# Enable error handling
-set -Eeuo pipefail
-trap 'error_handler' ERR
-load_functions
-
-# ==============================================================================
-# CONFIGURATION
-# ==============================================================================
-VERBOSE=${var_verbose:-no}
-APP="actual-budget-prometheus-exporter"
-APP_TYPE="tools"
-INSTALL_PATH="/opt/actual-budget-prometheus-exporter"
-CONFIG_PATH="/opt/actual-budget-prometheus-exporter.env"
-SERVICE_PATH="/etc/systemd/system/actual-budget-prometheus-exporter.service"
-
-# ==============================================================================
-# OS DETECTION
-# ==============================================================================
-if ! grep -qE 'ID=debian|ID=ubuntu' /etc/os-release 2>/dev/null; then
-  echo -e "${CROSS} Unsupported OS detected. This script only supports Debian and Ubuntu."
-  exit 238
-fi
-
-# ==============================================================================
-# UNINSTALL
-# ==============================================================================
-function uninstall() {
-  msg_info "Uninstalling Actual-Budget-Prometheus-Exporter"
-  systemctl disable -q --now actual-budget-prometheus-exporter
-  rm -f "$SERVICE_PATH"
-  rm -rf "$INSTALL_PATH"
-  rm -f "$CONFIG_PATH"
-  rm -f "/usr/local/bin/update_actual-budget-prometheus-exporter"
-  rm -f "$HOME/.actual-budget-prometheus-exporter"
-  msg_ok "Actual-Budget-Prometheus-Exporter has been uninstalled"
-}
-
-# ==============================================================================
-# UPDATE
-# ==============================================================================
-function update() {
-  if check_for_gh_release "actual-budget-prometheus-exporter" "sakowicz/actual-budget-prometheus-exporter"; then
-    msg_info "Stopping service"
-    systemctl stop actual-budget-prometheus-exporter
-    msg_ok "Stopped service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "actual-budget-prometheus-exporter" "sakowicz/actual-budget-prometheus-exporter" "tarball" "latest"
-    NODE_VERSION="22" setup_nodejs
-
-    msg_info "Building Actual-Budget-Prometheus-Exporter"
-    cd "$INSTALL_PATH"
-    $STD npm ci
-    $STD npm run build
-    msg_ok "Built Actual-Budget-Prometheus-Exporter"
-
-    msg_info "Starting service"
-    systemctl start actual-budget-prometheus-exporter
-    msg_ok "Started service"
-    msg_ok "Updated successfully!"
-    exit
-  fi
-}
-
-# ==============================================================================
-# INSTALL
-# ==============================================================================
-function install() {
-  read -erp "Enter URL of Actual Budget server, example: (http://127.0.0.1:5006): " ACTUAL_SERVER_URL
-  read -rsp "Enter Actual Budget server password: " ACTUAL_PASSWORD
-  printf "\n"
-  echo -e "${TAB}${INFO} Find the Sync ID in Actual under Settings > Advanced settings > Sync ID"
-  read -erp "Enter Budget Sync ID: " ACTUAL_BUDGET_ID_1
-  read -rsp "Enter E2E encryption password (leave empty if end-to-end encryption is disabled): " ACTUAL_E2E_PASSWORD_1
-  printf "\n"
-  read -erp "Enter metrics port (default: 3001): " PORT_INPUT
-  PORT="${PORT_INPUT:-3001}"
-
-  # build-essential and python3 are required to compile better-sqlite3
-  # (native dependency of @actual-app/api) when no prebuilt binary is available.
-  msg_info "Installing Dependencies"
-  $STD apt install -y build-essential python3
-  msg_ok "Installed Dependencies"
-
-  fetch_and_deploy_gh_release "actual-budget-prometheus-exporter" "sakowicz/actual-budget-prometheus-exporter" "tarball" "latest"
-  NODE_VERSION="22" setup_nodejs
-
-  msg_info "Building Actual-Budget-Prometheus-Exporter"
-  cd "$INSTALL_PATH"
-  $STD npm ci
-  $STD npm run build
-  msg_ok "Built Actual-Budget-Prometheus-Exporter"
-
-  msg_info "Creating configuration"
-  cat <<EOF >"$CONFIG_PATH"
-# https://github.com/sakowicz/actual-budget-prometheus-exporter
-ACTUAL_SERVER_URL="${ACTUAL_SERVER_URL}"
-ACTUAL_PASSWORD="${ACTUAL_PASSWORD}"
-ACTUAL_BUDGET_ID_1="${ACTUAL_BUDGET_ID_1}"
-ACTUAL_E2E_PASSWORD_1="${ACTUAL_E2E_PASSWORD_1}"
-PORT="${PORT}"
-# Optional: friendly label for the budget shown in the exported metrics
-# ACTUAL_BUDGET_NAME_1=""
-# Optional: monitor additional budgets by incrementing the numeric suffix
-# ACTUAL_BUDGET_ID_2=""
-# ACTUAL_E2E_PASSWORD_2=""
-# ACTUAL_BUDGET_NAME_2=""
-# Optional: set to 0 to accept a self-signed TLS certificate on the Actual server
-# NODE_TLS_REJECT_UNAUTHORIZED="0"
-EOF
-  msg_ok "Created configuration"
-
-  msg_info "Creating service"
-  cat <<EOF >"$SERVICE_PATH"
-[Unit]
-Description=Actual Budget Prometheus Exporter
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-User=root
-WorkingDirectory=$INSTALL_PATH
-EnvironmentFile=$CONFIG_PATH
-ExecStart=/usr/bin/node $INSTALL_PATH/dist/app.js
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-  systemctl enable -q --now actual-budget-prometheus-exporter
-  msg_ok "Created and started service"
-
-  # Create update script
-  msg_info "Creating update script"
-  ensure_usr_local_bin_persist
-  cat <<'UPDATEEOF' >/usr/local/bin/update_actual-budget-prometheus-exporter
-#!/usr/bin/env bash
-# actual-budget-prometheus-exporter Update Script
-type=update bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/actual-budget-prometheus-exporter.sh)"
-UPDATEEOF
-  chmod +x /usr/local/bin/update_actual-budget-prometheus-exporter
-  msg_ok "Created update script (/usr/local/bin/update_actual-budget-prometheus-exporter)"
-
-  echo ""
-  msg_ok "Actual-Budget-Prometheus-Exporter installed successfully"
-  msg_ok "Metrics: ${BL}http://${LOCAL_IP}:${PORT}/metrics${CL}"
-  msg_ok "Config: ${BL}${CONFIG_PATH}${CL}"
-}
-
-# ==============================================================================
-# MAIN
-# ==============================================================================
-header_info
-ensure_usr_local_bin_persist
-get_lxc_ip
-
-# Handle type=update (called from update script)
-if [[ "${type:-}" == "update" ]]; then
-  if [[ -d "$INSTALL_PATH" && -f "$INSTALL_PATH/dist/app.js" ]]; then
-    update
-  else
-    msg_error "Actual-Budget-Prometheus-Exporter is not installed. Nothing to update."
-    exit 233
-  fi
-  exit 0
-fi
-
-# Check if already installed
-if [[ -d "$INSTALL_PATH" && -f "$INSTALL_PATH/dist/app.js" ]]; then
-  msg_warn "Actual-Budget-Prometheus-Exporter is already installed."
-  echo ""
-
-  echo -n "${TAB}Uninstall Actual-Budget-Prometheus-Exporter? (y/N): "
-  read -r uninstall_prompt
-  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
-    uninstall
-    exit 0
-  fi
-
-  echo -n "${TAB}Update Actual-Budget-Prometheus-Exporter? (y/N): "
-  read -r update_prompt
-  if [[ "${update_prompt,,}" =~ ^(y|yes)$ ]]; then
-    update
-    exit 0
-  fi
-
-  msg_warn "No action selected. Exiting."
-  exit 0
-fi
-
-# Fresh installation
-msg_warn "Actual-Budget-Prometheus-Exporter is not installed."
-echo ""
-echo -e "${TAB}${INFO} This will install:"
-echo -e "${TAB}  - Actual Budget Prometheus Exporter (Node.js source build)"
-echo -e "${TAB}  - Systemd service"
-echo ""
-
-echo -n "${TAB}Install Actual-Budget-Prometheus-Exporter? (y/N): "
-read -r install_prompt
-if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
-  install
-else
-  msg_warn "Installation cancelled. Exiting."
-  exit 0
-fi
@@ -57,50 +57,19 @@ function uninstall() {
 # UPDATE
 # ==============================================================================
 function update() {
-  local release_found=1
-
  if check_for_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter"; then
-    release_found=0
    msg_info "Stopping service"
    systemctl stop prometheus-paperless-ngx-exporter
    msg_ok "Stopped service"

    fetch_and_deploy_gh_release "prom-paperless-exp" "hansmi/prometheus-paperless-exporter" "binary" "latest"
-  fi

-  msg_info "Refreshing service configuration"
-  cat <<EOF >"$SERVICE_PATH"
-[Unit]
-Description=Prometheus Paperless NGX Exporter
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-User=root
-EnvironmentFile=$CONFIG_PATH
-ExecStart=$BINARY_PATH \\
-    --paperless_url=\${PAPERLESS_URL} \\
-    --paperless_auth_token_file=$AUTH_TOKEN_FILE \\
-    --paperless_header 'Accept: application/json; version=9' \\
-    --collectors=tag,correspondent,document_type,storage_path,task,log,group,user,status,statistics
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-  systemctl daemon-reload
-  msg_ok "Refreshed service configuration"
-
-  msg_info "Starting service"
-  systemctl restart prometheus-paperless-ngx-exporter
-  msg_ok "Started service"
-
-  if [[ $release_found -eq 0 ]]; then
+    msg_info "Starting service"
+    systemctl start prometheus-paperless-ngx-exporter
+    msg_ok "Started service"
    msg_ok "Updated successfully!"
-  else
-    msg_ok "No new release found, service configuration refreshed"
+    exit
  fi
-  exit
 }

 # ==============================================================================
@@ -135,9 +104,7 @@ User=root
 EnvironmentFile=$CONFIG_PATH
 ExecStart=$BINARY_PATH \\
    --paperless_url=\${PAPERLESS_URL} \\
-    --paperless_auth_token_file=$AUTH_TOKEN_FILE \\
-    --paperless_header 'Accept: application/json; version=9' \\
-    --collectors=tag,correspondent,document_type,storage_path,task,log,group,user,status,statistics
+    --paperless_auth_token_file=$AUTH_TOKEN_FILE
 Restart=always

 [Install]
@@ -1,6 +0,0 @@
-              __              __      __              __           __                                        __  __                                                     __           
-  ____ ______/ /___  ______ _/ /     / /_  __  ______/ /___ ____  / /_      ____  _________  ____ ___  ___  / /_/ /_  ___  __  _______      ___  _  ______  ____  _____/ /____  _____
- / __ `/ ___/ __/ / / / __ `/ /_____/ __ \/ / / / __  / __ `/ _ \/ __/_____/ __ \/ ___/ __ \/ __ `__ \/ _ \/ __/ __ \/ _ \/ / / / ___/_____/ _ \| |/_/ __ \/ __ \/ ___/ __/ _ \/ ___/
-/ /_/ / /__/ /_/ /_/ / /_/ / /_____/ /_/ / /_/ / /_/ / /_/ /  __/ /_/_____/ /_/ / /  / /_/ / / / / / /  __/ /_/ / / /  __/ /_/ (__  )_____/  __/>  </ /_/ / /_/ / /  / /_/  __/ /    
-\__,_/\___/\__/\__,_/\__,_/_/     /_.___/\__,_/\__,_/\__, /\___/\__/     / .___/_/   \____/_/ /_/ /_/\___/\__/_/ /_/\___/\__,_/____/      \___/_/|_/ .___/\____/_/   \__/\___/_/     
-                                                    /____/              /_/                                                                       /_/