Update CHANGELOG.md (#4388)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.github/workflows/auto-update-app-headers.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
   update-app-files:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
 
     permissions:
@@ -89,15 +90,16 @@ jobs:
           if [ -n "$PR_NUMBER" ]; then
             gh pr review $PR_NUMBER --approve
           fi
-          
-      - name: Re-approve pull request after update
+      
+      - name: Approve pull request and merge
         if: env.changed == 'true'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.PAT_AUTOMERGE }}
         run: |
           PR_NUMBER=$(gh pr list --head "pr-update-app-files" --json number --jq '.[].number')
           if [ -n "$PR_NUMBER" ]; then
             gh pr review $PR_NUMBER --approve
+            gh pr merge $PR_NUMBER --squash --admin
           fi
 
       # Step 8: Output success message when no changes

.github/workflows/autolabeler.yml

@@ -7,6 +7,7 @@ on:
 
 jobs:
   autolabeler:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
     permissions:
       pull-requests: write

.github/workflows/changelog-pr.yml

@@ -7,6 +7,7 @@ on:
 
 jobs:
   update-changelog-pull-request:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
     env:
       CONFIG_PATH: .github/changelog-pr-config.json
@@ -263,6 +264,17 @@ jobs:
             gh pr review $PR_NUMBER --approve
           fi
 
+      - name: Approve pull request and merge
+        if: env.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.PAT_AUTOMERGE }}
+        run: |
+          PR_NUMBER=$(gh pr list --head "${BRANCH_NAME}" --json number --jq '.[].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr review $PR_NUMBER --approve
+            gh pr merge $PR_NUMBER --squash --admin
+          fi
+
       - name: Re-approve pull request after update
         if: env.changed == 'true'
         env:
@@ -271,4 +283,4 @@ jobs:
           PR_NUMBER=$(gh pr list --head "${BRANCH_NAME}" --json number --jq '.[].number')
           if [ -n "$PR_NUMBER" ]; then
             gh pr review $PR_NUMBER --approve
-          fi
+          fi

.github/workflows/close-discussion.yml

@@ -11,6 +11,7 @@ permissions:
 
 jobs:
   close-discussion:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
 
     steps:

.github/workflows/close-ttek-issues.yaml

@@ -5,6 +5,7 @@ on:
 
 jobs:
   close_tteck_issues:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: ubuntu-latest
     steps:
       - name: Auto-close if tteck script detected

.github/workflows/close_issue_in_dev.yaml

@@ -5,7 +5,7 @@ on:
       - closed
 jobs:
   close_issue:
-    if: github.event.pull_request.merged == true
+    if: github.event.pull_request.merged == true && github.repository == 'community-scripts/ProxmoxVE'
     runs-on: ubuntu-latest
     
     steps:

.github/workflows/crawl-versions.yaml

@@ -12,6 +12,7 @@ permissions:
 
 jobs:
   crawl-versions:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
 
     steps:
@@ -103,6 +104,17 @@ jobs:
             gh pr review $PR_NUMBER --approve
           fi
 
+      - name: Approve pull request and merge
+        if: env.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.PAT_AUTOMERGE }}
+        run: |
+          PR_NUMBER=$(gh pr list --head "update_versions" --json number --jq '.[].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr review $PR_NUMBER --approve
+            gh pr merge $PR_NUMBER --squash --admin
+          fi
+
       - name: Re-approve pull request after update
         if: env.changed == 'true'
         env:

.github/workflows/create-docker-for-runner.yml

@@ -11,6 +11,7 @@ on:
 
 jobs:
   build:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: ubuntu-latest #To ensure it always builds we use the github runner with all the right tooling
 
     steps:

.github/workflows/delete-json-branch.yml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   delete_branch:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
     steps:
       - name: Checkout the code
@@ -25,4 +26,4 @@ jobs:
             git push origin --delete "$PR_BRANCH"
           else
             echo "Skipping deletion of the main branch"
-          fi
+          fi

.github/workflows/frontend-cicd.yml

@@ -25,6 +25,7 @@ concurrency:
 
 jobs:
   build:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
     defaults:
       run:
@@ -63,7 +64,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     needs: build
-    if: github.ref == 'refs/heads/main'
+    if: github.ref == 'refs/heads/main' && github.repository == 'community-scripts/ProxmoxVE'
     permissions:
       pages: write
       id-token: write

.github/workflows/github-release.yml

@@ -7,6 +7,7 @@ on:
   
 jobs:
   create-daily-release:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
     permissions:
       contents: write

.github/workflows/script-test.yml

@@ -11,6 +11,7 @@ on:
 
 jobs:
   run-install-script:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: pvenode
     steps:
       - name: Checkout PR branch

.github/workflows/script_format.yml

@@ -11,6 +11,7 @@ on:
 
 jobs:
   run-install-script:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: pvenode
     steps:
       - name: Checkout PR branch (supports forks)

.github/workflows/update-json-date.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
   update-app-files:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     runs-on: runner-cluster-htl-set
 
     permissions:
@@ -125,6 +126,16 @@ jobs:
           if [ -n "$PR_NUMBER" ]; then
             gh pr review $PR_NUMBER --approve
           fi
+      - name: Approve pull request and merge
+        if: env.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.PAT_AUTOMERGE }}
+        run: |
+          PR_NUMBER=$(gh pr list --head "${{ env.BRANCH_NAME }}" --json number --jq '.[].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr review $PR_NUMBER --approve
+            gh pr merge $PR_NUMBER --squash --admin
+          fi
 
       - name: No changes detected
         if: env.changed == 'false'

.github/workflows/validate-filenames.yml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   check-files:
+    if: github.repository == 'community-scripts/ProxmoxVE'
     name: Check changed files
     runs-on: runner-cluster-htl-set
     permissions:

CHANGELOG.md

@@ -14,6 +14,41 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 All LXC instances created using this repository come pre-installed with Midnight Commander, which is a command-line tool (`mc`) that offers a user-friendly file and directory management interface for the terminal environment.
 
 
+## 2025-05-11
+
+## 2025-05-10
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - (fix) Documenso: fix build failures [@vhsdream](https://github.com/vhsdream) ([#4382](https://github.com/community-scripts/ProxmoxVE/pull/4382))
+    - Jellyseerr: better handling of node and pnpm [@MickLesk](https://github.com/MickLesk) ([#4365](https://github.com/community-scripts/ProxmoxVE/pull/4365))
+
+## 2025-05-09
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Authentik: change install to UV & increase resources to 10GB RAM [@MickLesk](https://github.com/MickLesk) ([#4364](https://github.com/community-scripts/ProxmoxVE/pull/4364))
+
+  - #### ✨ New Features
+
+    - HomeAssistant-Core: update script for 2025.5+ [@MickLesk](https://github.com/MickLesk) ([#4363](https://github.com/community-scripts/ProxmoxVE/pull/4363))
+    - Feature: autologin for Alpine [@MickLesk](https://github.com/MickLesk) ([#4344](https://github.com/community-scripts/ProxmoxVE/pull/4344))
+
+### 🧰 Maintenance
+
+  - #### 💾 Core
+
+    - fix: detect all bridge types, not just vmbr prefix [@filippolauria](https://github.com/filippolauria) ([#4351](https://github.com/community-scripts/ProxmoxVE/pull/4351))
+
+  - #### 📂 Github
+
+    - Add a Repo check to all Workflows [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#4339](https://github.com/community-scripts/ProxmoxVE/pull/4339))
+    - Auto-Merge Automatic PR [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#4343](https://github.com/community-scripts/ProxmoxVE/pull/4343))
+
 ## 2025-05-08
 
 ### 🚀 Updated Scripts

ct/authentik.sh

@@ -9,7 +9,7 @@ APP="Authentik"
 var_tags="${var_tags:-identity-provider}"
 var_disk="${var_disk:-12}"
 var_cpu="${var_cpu:-6}"
-var_ram="${var_ram:-8192}"
+var_ram="${var_ram:-10240}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"
 var_unprivileged="${var_unprivileged:-1}"
@@ -29,6 +29,13 @@ function update_script() {
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/goauthentik/authentik/releases/latest | grep "tarball_url" | awk '{print substr($2, 2, length($2)-3)}')
   if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
+    NODE_VERSION="22"
+    PG_VERSION="16"
+    setup_uv
+    install_postgresql
+    install_node_and_modules
+    install_go
+
     msg_info "Stopping ${APP}"
     systemctl stop authentik-server
     systemctl stop authentik-worker
@@ -54,17 +61,14 @@ function update_script() {
     go build -o /opt/authentik/authentik-server /opt/authentik/cmd/server/
     msg_ok "Built ${APP} server"
 
-    msg_info "Installing Python Dependencies"
+    msg_info "Building Authentik"
     cd /opt/authentik
-    $STD poetry install --only=main --no-ansi --no-interaction --no-root
-    $STD poetry export --without-hashes --without-urls -f requirements.txt --output requirements.txt
-    $STD pip install --no-cache-dir -r requirements.txt
-    $STD pip install .
-    msg_ok "Installed Python Dependencies"
+    $STD uv sync --frozen --no-install-project --no-dev
+    uv run python -m lifecycle.migrate
+    ln -s /opt/authentik/.venv/bin/gunicorn /usr/local/bin/gunicorn
+    ln -s /opt/authentik/.venv/bin/celery /usr/local/bin/celery
+    msg_ok "Authentik built"
 
-    msg_info "Updating ${APP} to v${RELEASE} (Patience)"
-    cp -r /opt/authentik/authentik/blueprints /opt/authentik/blueprints
-    $STD bash /opt/authentik/lifecycle/ak migrate
     echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP} to v${RELEASE}"
 

ct/documenso.sh

@@ -20,46 +20,51 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /opt/documenso ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    RELEASE=$(curl -fsSL https://api.github.com/repos/documenso/documenso/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-    if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
-        msg_info "Stopping ${APP}"
-        systemctl stop documenso
-        msg_ok "${APP} Stopped"
-
-        msg_info "Updating ${APP} to ${RELEASE}"
-        cp /opt/documenso/.env /opt/
-        rm -rf /opt/documenso
-        cd /opt
-        curl -fsSL "https://github.com/documenso/documenso/archive/refs/tags/v${RELEASE}.zip" -o v${RELEASE}.zip
-        unzip -q v${RELEASE}.zip
-        mv documenso-${RELEASE} /opt/documenso
-        cd /opt/documenso
-        mv /opt/.env /opt/documenso/.env
-        $STD npm install
-        $STD npm run build:web
-        $STD npm run prisma:migrate-deploy
-        echo "${RELEASE}" >/opt/${APP}_version.txt
-        msg_ok "Updated ${APP}"
-
-        msg_info "Starting ${APP}"
-        systemctl start documenso
-        msg_ok "Started ${APP}"
-
-        msg_info "Cleaning Up"
-        rm -rf /opt/v${RELEASE}.zip
-        msg_ok "Cleaned"
-        msg_ok "Updated Successfully"
-    else
-        msg_ok "No update required. ${APP} is already at ${RELEASE}"
-    fi
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/documenso ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+  RELEASE=$(curl -fsSL https://api.github.com/repos/documenso/documenso/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+    msg_info "Stopping ${APP}"
+    systemctl stop documenso
+    msg_ok "${APP} Stopped"
+
+    msg_info "Updating ${APP} to ${RELEASE}"
+    cp /opt/documenso/.env /opt/
+    rm -rf /opt/documenso
+    cd /opt
+    curl -fsSL "https://github.com/documenso/documenso/archive/refs/tags/v${RELEASE}.zip" -o v${RELEASE}.zip
+    unzip -q v${RELEASE}.zip
+    mv documenso-${RELEASE} /opt/documenso
+    cd /opt/documenso
+    mv /opt/.env /opt/documenso/.env
+    export TURBO_CACHE=1
+    export NEXT_TELEMETRY_DISABLED=1
+    export CYPRESS_INSTALL_BINARY=0
+    export NODE_OPTIONS="--max-old-space-size=4096"
+    $STD npm ci
+    $STD turbo run build --filter=@documenso/remix
+    $STD npm run prisma:migrate-deploy
+    $STD turbo daemon stop
+    echo "${RELEASE}" >/opt/${APP}_version.txt
+    msg_ok "Updated ${APP}"
+
+    msg_info "Starting ${APP}"
+    systemctl start documenso
+    msg_ok "Started ${APP}"
+
+    msg_info "Cleaning Up"
+    rm -rf /opt/v${RELEASE}.zip
+    msg_ok "Cleaned"
+    msg_ok "Updated Successfully"
+  else
+    msg_ok "No update required. ${APP} is already at ${RELEASE}"
+  fi
+  exit
 }
 
 start

ct/homeassistant-core.sh

@@ -21,8 +21,6 @@ catch_errors
 
 function update_script() {
   header_info
-
-  # OS Check
   if ! lsb_release -d | grep -q "Ubuntu 24.10"; then
     msg_error "Wrong OS detected. This script only supports Ubuntu 24.10."
     msg_error "Read Guide: https://github.com/community-scripts/ProxmoxVE/discussions/1549"
@@ -32,54 +30,88 @@ function update_script() {
   check_container_resources
   if [[ ! -d /srv/homeassistant ]]; then
     msg_error "No ${APP} Installation Found!"
-    exit
+    exit 1
   fi
-  PY=$(ls /srv/homeassistant/lib/)
+  setup_uv
   IP=$(hostname -I | awk '{print $1}')
   UPD=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "UPDATE" --radiolist --cancel-button Exit-Script "Spacebar = Select" 11 58 4 \
     "1" "Update Core" ON \
     "2" "Install HACS" OFF \
     "3" "Install FileBrowser" OFF \
     3>&1 1>&2 2>&3)
+
   if [ "$UPD" == "1" ]; then
     if (whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "SELECT BRANCH" --yesno "Use Beta Branch?" 10 58); then
       clear
       header_info
       echo -e "${GN}Updating to Beta Version${CL}"
-      BR="--pre "
+      BR="--pre"
     else
       clear
       header_info
       echo -e "${GN}Updating to Stable Version${CL}"
       BR=""
     fi
+
     msg_info "Stopping Home Assistant"
     systemctl stop homeassistant
     msg_ok "Stopped Home Assistant"
 
+    if [[ -d /srv/homeassistant/bin ]]; then
+      msg_info "Migrating to .venv-based structure"
+      $STD source /srv/homeassistant/bin/activate
+      PY_VER=$(python3 -c "import sys; print(f'{sys.version_info.major}.{sys.version_info.minor}')")
+      $STD deactivate
+      mv /srv/homeassistant "/srv/homeassistant_backup_$PY_VER"
+      mkdir -p /srv/homeassistant
+      cd /srv/homeassistant
+
+      $STD uv python install 3.13
+      UV_PYTHON=$(uv python list | awk '/3\.13\.[0-9]+.*\/root\/.local/ {print $2; exit}')
+      if [[ -z "$UV_PYTHON" ]]; then
+        msg_error "No local Python 3.13 found via uv"
+        exit 1
+      fi
+
+      $STD uv venv .venv --python "$UV_PYTHON"
+      $STD source .venv/bin/activate
+      $STD uv pip install homeassistant mysqlclient psycopg2-binary isal webrtcvad wheel
+      mkdir -p /root/.homeassistant
+      msg_ok "Migration complete"
+    else
+      source /srv/homeassistant/.venv/bin/activate
+    fi
+
     msg_info "Updating Home Assistant"
-    source /srv/homeassistant/bin/activate
-    $STD pip install ${BR}--upgrade homeassistant
+    $STD uv pip install $BR --upgrade homeassistant
     msg_ok "Updated Home Assistant"
 
     msg_info "Starting Home Assistant"
+    if [[ -f /etc/systemd/system/homeassistant.service ]] && grep -q "/srv/homeassistant/bin/python3" /etc/systemd/system/homeassistant.service; then
+      sed -i 's|ExecStart=/srv/homeassistant/bin/python3|ExecStart=/srv/homeassistant/.venv/bin/python3|' /etc/systemd/system/homeassistant.service
+      sed -i 's|PATH=/srv/homeassistant/bin|PATH=/srv/homeassistant/.venv/bin|' /etc/systemd/system/homeassistant.service
+      $STD systemctl daemon-reload
+    fi
+
     systemctl start homeassistant
-    sleep 2
+    sleep 5
     msg_ok "Started Home Assistant"
     msg_ok "Update Successful"
-    echo -e "\n  Go to http://${IP}:8123 \n"
+    echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8123${CL}"
     exit
   fi
+
   if [ "$UPD" == "2" ]; then
     msg_info "Installing Home Assistant Community Store (HACS)"
     $STD apt update
     $STD apt install -y unzip
-    cd .homeassistant
+    cd /root/.homeassistant
     $STD bash <(curl -fsSL https://get.hacs.xyz)
     msg_ok "Installed Home Assistant Community Store (HACS)"
     echo -e "\n Reboot Home Assistant and clear browser cache then Add HACS integration.\n"
     exit
   fi
+
   if [ "$UPD" == "3" ]; then
     set +Eeuo pipefail
     read -r -p "Would you like to use No Authentication? <y/N> " prompt
@@ -131,4 +163,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8123${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8123${CL}"

ct/homeassistant.sh

@@ -38,7 +38,7 @@ function update_script() {
     msg_info "Updating All Containers"
     CONTAINER_LIST="${1:-$(docker ps -q)}"
     for container in ${CONTAINER_LIST}; do
-      CONTAINER_IMAGE="$(docker inspect --format "{{.Config.Image}}" --type container ${container})"
+      CONTAINER_IMAGE="$(docker inspect --format "{{.Config.Image}}" --type container "${container}")"
       RUNNING_IMAGE="$(docker inspect --format "{{.Image}}" --type container "${container}")"
       docker pull "${CONTAINER_IMAGE}"
       LATEST_IMAGE="$(docker inspect --format "{{.Id}}" --type image "${CONTAINER_IMAGE}")"
@@ -47,7 +47,7 @@ function update_script() {
         echo "Updating ${container} image ${CONTAINER_IMAGE}"
         DOCKER_COMMAND="$(runlike --use-volume-id "${container}")"
         docker rm --force "${container}"
-        eval ${DOCKER_COMMAND}
+        eval "${DOCKER_COMMAND}"
       fi
     done
     msg_ok "Updated All Containers"
@@ -109,4 +109,4 @@ msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
 echo -e "${TAB}${GATEWAY}${BGN}HA: http://${IP}:8123${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}Portainer: http://${IP}:9443${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}Portainer: https://${IP}:9443${CL}"

ct/jellyseerr.sh

@@ -53,10 +53,10 @@ function update_script() {
 
     if [ -z "$pnpm_current" ]; then
         msg_error "pnpm not found. Installing version $pnpm_desired..."
-        $STD npm install -g pnpm@"$pnpm_desired"
+        NODE_VERSION="22" NODE_MODULE="pnpm@$pnpm_desired" install_node_and_modules
     elif ! node -e "const semver = require('semver'); process.exit(semver.satisfies('$pnpm_current', '$pnpm_desired') ? 0 : 1)"; then
         msg_error "Updating pnpm from version $pnpm_current to $pnpm_desired..."
-        $STD npm install -g pnpm@"$pnpm_desired"
+        NODE_VERSION="22" NODE_MODULE="pnpm@$pnpm_desired" install_node_and_modules
     else
         msg_ok "pnpm is already installed and satisfies version $pnpm_desired."
     fi
@@ -103,4 +103,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5055${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5055${CL}"

frontend/public/json/authentik.json

@@ -20,7 +20,7 @@
             "script": "ct/authentik.sh",
             "resources": {
                 "cpu": 6,
-                "ram": 8192,
+                "ram": 10240,
                 "hdd": 12,
                 "os": "debian",
                 "version": "12"
@@ -33,7 +33,11 @@
     },
     "notes": [
         {
-            "text": "Authentik is very resource-heavy, it is recommended to use at least 8GB RAM anytime!",
+            "text": "Authentik is very resource-heavy, it is recommended to use at least 10GB RAM anytime!",
+            "type": "warning"
+        },
+        {
+            "text": "Some updates don't work due to massive dependency errors, it's recommended to do a backup before updating or a pg_dump and a new LXC.",
             "type": "warning"
         }
     ]

frontend/public/json/documenso.json

@@ -1,35 +0,0 @@
-{
-    "name": "Documenso",
-    "slug": "documenso",
-    "categories": [
-        12
-    ],
-    "date_created": "2025-04-28",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 3000,
-    "documentation": "https://documenso.com/",
-    "website": "https://documenso.com/",
-    "logo": "https://raw.githubusercontent.com/selfhst/icons/refs/heads/main/svg/documenso.svg",
-    "config_path": "/opt/documenso/.env",
-    "description": "Signing documents digitally should be fast and easy and should be the best practice for every document signed worldwide. This is technically quite easy today, but it also introduces a new party to every signature: The signing tool providers. While this is not a problem in itself, it should make us think about how we want these providers of trust to work. Documenso aims to be the world's most trusted document-signing tool. This trust is built by empowering you to self-host Documenso and review how it works under the hood.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/documenso.sh",
-            "resources": {
-                "cpu": 4,
-                "ram": 6144,
-                "hdd": 10,
-                "os": "Debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": "helper-scripts@local.com",
-        "password": "helper-scripts"
-    },
-    "notes": []
-}

frontend/public/json/suwayomi-server.json

@@ -1,40 +0,0 @@
-{
-    "name": "Suwayomi-Server",
-    "slug": "suwayomi-server",
-    "categories": [
-        13
-    ],
-    "date_created": "2025-02-07",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 4567,
-    "documentation": "https://github.com/Suwayomi/Suwayomi-Server/wiki",
-    "website": "https://github.com/Suwayomi/Suwayomi-Server",
-    "logo": "https://github.com/Suwayomi/Suwayomi-Server/raw/master/server/src/main/resources/icon/faviconlogo.png",
-    "config_path": "",
-    "description": "A free and open source manga reader server that runs extensions built for Mihon (Tachiyomi).",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/suwayomiserver.sh",
-            "resources": {
-                "cpu": 1,
-                "ram": 1024,
-                "hdd": 4,
-                "os": "debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "This application is conflicting with Kaspersky products. You need to disable Kaspersky in order to use this application.",
-            "type": "info"
-        }
-    ]
-}

frontend/public/json/versions.json

@@ -1,8 +1,73 @@
 [
   {
-    "name": "mattermost/mattermost",
-    "version": "server/public/v0.1.12",
-    "date": "2025-05-08T11:04:17Z"
+    "name": "cross-seed/cross-seed",
+    "version": "v6.12.3",
+    "date": "2025-05-07T20:35:11Z"
+  },
+  {
+    "name": "owncast/owncast",
+    "version": "v0.2.3",
+    "date": "2025-05-10T21:14:45Z"
+  },
+  {
+    "name": "runtipi/runtipi",
+    "version": "e2e",
+    "date": "2025-05-10T20:46:31Z"
+  },
+  {
+    "name": "open-webui/open-webui",
+    "version": "v0.6.9",
+    "date": "2025-05-10T19:05:02Z"
+  },
+  {
+    "name": "Stirling-Tools/Stirling-PDF",
+    "version": "v0.46.1",
+    "date": "2025-05-10T15:39:10Z"
+  },
+  {
+    "name": "juanfont/headscale",
+    "version": "v0.25.1",
+    "date": "2025-02-25T17:30:48Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.22.1887",
+    "date": "2025-05-10T05:57:46Z"
+  },
+  {
+    "name": "authelia/authelia",
+    "version": "v4.39.2",
+    "date": "2025-05-10T05:23:02Z"
+  },
+  {
+    "name": "VictoriaMetrics/VictoriaMetrics",
+    "version": "v1.22.2-victorialogs",
+    "date": "2025-05-10T01:20:19Z"
+  },
+  {
+    "name": "pelican-dev/wings",
+    "version": "v1.0.0-beta13",
+    "date": "2025-05-09T23:14:41Z"
+  },
+  {
+    "name": "pelican-dev/panel",
+    "version": "v1.0.0-beta21",
+    "date": "2025-05-09T23:14:23Z"
+  },
+  {
+    "name": "homarr-labs/homarr",
+    "version": "v1.19.1",
+    "date": "2025-05-09T19:15:10Z"
+  },
+  {
+    "name": "MediaBrowser/Emby.Releases",
+    "version": "4.8.11.0",
+    "date": "2025-03-10T06:39:11Z"
+  },
+  {
+    "name": "home-assistant/core",
+    "version": "2025.5.1",
+    "date": "2025-05-09T15:05:54Z"
   },
   {
     "name": "keycloak/keycloak",
@@ -10,55 +75,80 @@
     "date": "2025-05-08T09:10:10Z"
   },
   {
-    "name": "zwave-js/zwave-js-ui",
-    "version": "v10.4.2",
-    "date": "2025-05-08T08:11:27Z"
+    "name": "mattermost/mattermost",
+    "version": "v9.11.15",
+    "date": "2025-05-09T13:48:50Z"
+  },
+  {
+    "name": "crowdsecurity/crowdsec",
+    "version": "v1.6.8",
+    "date": "2025-03-25T13:33:10Z"
   },
   {
     "name": "zitadel/zitadel",
-    "version": "v2.71.10",
-    "date": "2025-05-08T08:01:47Z"
+    "version": "v3.0.4",
+    "date": "2025-05-09T11:38:33Z"
+  },
+  {
+    "name": "theonedev/onedev",
+    "version": "v11.9.4",
+    "date": "2025-05-09T02:45:16Z"
+  },
+  {
+    "name": "coder/code-server",
+    "version": "v4.99.4",
+    "date": "2025-05-02T18:33:09Z"
+  },
+  {
+    "name": "pocket-id/pocket-id",
+    "version": "v0.53.0",
+    "date": "2025-05-08T19:56:55Z"
+  },
+  {
+    "name": "ellite/Wallos",
+    "version": "v3.1.0",
+    "date": "2025-05-08T15:33:17Z"
+  },
+  {
+    "name": "BookStackApp/BookStack",
+    "version": "v25.02.4",
+    "date": "2025-05-08T15:03:17Z"
+  },
+  {
+    "name": "wazuh/wazuh",
+    "version": "v4.12.0",
+    "date": "2025-05-08T13:27:46Z"
+  },
+  {
+    "name": "apache/tomcat",
+    "version": "10.1.41",
+    "date": "2025-05-08T12:45:44Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.91.3",
+    "date": "2025-05-08T12:25:10Z"
+  },
+  {
+    "name": "zwave-js/zwave-js-ui",
+    "version": "v10.4.2",
+    "date": "2025-05-08T08:11:27Z"
   },
   {
     "name": "umami-software/umami",
     "version": "v2.18.0",
     "date": "2025-05-08T07:14:55Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.22.1877",
-    "date": "2025-05-08T05:57:36Z"
-  },
-  {
-    "name": "cross-seed/cross-seed",
-    "version": "v6.12.3",
-    "date": "2025-05-07T20:35:11Z"
-  },
   {
     "name": "semaphoreui/semaphore",
     "version": "v2.14.10",
     "date": "2025-05-07T20:23:29Z"
   },
-  {
-    "name": "runtipi/runtipi",
-    "version": "v4.0.2",
-    "date": "2025-05-01T16:10:58Z"
-  },
   {
     "name": "readeck/readeck",
     "version": "0.18.2",
     "date": "2025-05-07T19:22:22Z"
   },
-  {
-    "name": "apache/tomcat",
-    "version": "9.0.105",
-    "date": "2025-05-07T18:52:24Z"
-  },
-  {
-    "name": "home-assistant/core",
-    "version": "2025.5.0",
-    "date": "2025-05-07T17:26:14Z"
-  },
   {
     "name": "HabitRPG/habitica",
     "version": "v5.36.3",
@@ -144,21 +234,11 @@
     "version": "@jupyter-notebook/ui-components@7.5.0-alpha.0",
     "date": "2025-05-07T09:12:08Z"
   },
-  {
-    "name": "open-webui/open-webui",
-    "version": "v0.6.7",
-    "date": "2025-05-06T23:08:38Z"
-  },
   {
     "name": "influxdata/influxdb",
     "version": "v1.12.1rc0",
     "date": "2025-05-06T20:56:30Z"
   },
-  {
-    "name": "pocket-id/pocket-id",
-    "version": "v0.52.0",
-    "date": "2025-05-06T20:14:44Z"
-  },
   {
     "name": "redis/redis",
     "version": "8.0.1-int",
@@ -174,11 +254,6 @@
     "version": "v0.19.0",
     "date": "2025-05-06T18:05:42Z"
   },
-  {
-    "name": "wazuh/wazuh",
-    "version": "coverity-w19-4.13.0",
-    "date": "2025-05-06T15:59:45Z"
-  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.509",
@@ -204,11 +279,6 @@
     "version": "v1.129.0",
     "date": "2025-05-06T12:28:54Z"
   },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.91.2",
-    "date": "2025-05-05T12:59:51Z"
-  },
   {
     "name": "Luligu/matterbridge",
     "version": "3.0.1",
@@ -254,11 +324,6 @@
     "version": "v12.0.0",
     "date": "2025-05-05T18:28:19Z"
   },
-  {
-    "name": "BookStackApp/BookStack",
-    "version": "v25.02.3",
-    "date": "2025-05-05T17:39:11Z"
-  },
   {
     "name": "apache/couchdb",
     "version": "3.5.0",
@@ -284,21 +349,11 @@
     "version": "v3.4.0",
     "date": "2025-05-05T13:59:23Z"
   },
-  {
-    "name": "theonedev/onedev",
-    "version": "v11.9.3",
-    "date": "2025-05-05T10:22:11Z"
-  },
   {
     "name": "evcc-io/evcc",
     "version": "0.203.5",
     "date": "2025-05-05T06:41:02Z"
   },
-  {
-    "name": "MediaBrowser/Emby.Releases",
-    "version": "4.8.11.0",
-    "date": "2025-03-10T06:39:11Z"
-  },
   {
     "name": "firefly-iii/firefly-iii",
     "version": "v6.2.12",
@@ -314,11 +369,6 @@
     "version": "debian/12.0.16",
     "date": "2025-05-04T22:06:15Z"
   },
-  {
-    "name": "juanfont/headscale",
-    "version": "v0.25.1",
-    "date": "2025-02-25T17:30:48Z"
-  },
   {
     "name": "Lidarr/Lidarr",
     "version": "v2.11.2.4629",
@@ -359,11 +409,6 @@
     "version": "v25.5.0",
     "date": "2025-05-03T19:03:17Z"
   },
-  {
-    "name": "owncast/owncast",
-    "version": "v0.2.2",
-    "date": "2025-05-03T18:45:34Z"
-  },
   {
     "name": "rogerfar/rdt-client",
     "version": "v2.0.111",
@@ -374,11 +419,6 @@
     "version": "0.49.16",
     "date": "2025-05-03T14:44:01Z"
   },
-  {
-    "name": "ellite/Wallos",
-    "version": "v3.0.2",
-    "date": "2025-05-03T13:38:57Z"
-  },
   {
     "name": "blakeblackshear/frigate",
     "version": "v0.14.1",
@@ -394,16 +434,6 @@
     "version": "v1.10.3",
     "date": "2025-05-02T23:23:25Z"
   },
-  {
-    "name": "homarr-labs/homarr",
-    "version": "v1.19.0",
-    "date": "2025-05-02T19:15:25Z"
-  },
-  {
-    "name": "coder/code-server",
-    "version": "v4.99.4",
-    "date": "2025-05-02T18:33:09Z"
-  },
   {
     "name": "prometheus/prometheus",
     "version": "v0.304.0-rc.0",
@@ -474,11 +504,6 @@
     "version": "version/2025.4.0",
     "date": "2025-04-30T12:34:14Z"
   },
-  {
-    "name": "Stirling-Tools/Stirling-PDF",
-    "version": "v0.46.0",
-    "date": "2025-04-30T07:05:42Z"
-  },
   {
     "name": "go-gitea/gitea",
     "version": "v1.25.0-dev",
@@ -529,11 +554,6 @@
     "version": "v0.27.2",
     "date": "2025-04-28T12:03:30Z"
   },
-  {
-    "name": "VictoriaMetrics/VictoriaMetrics",
-    "version": "pmm-6401-v1.116.0",
-    "date": "2025-04-28T11:30:10Z"
-  },
   {
     "name": "FlowiseAI/Flowise",
     "version": "flowise@2.2.8",
@@ -744,16 +764,6 @@
     "version": "cassandra-5.0.4",
     "date": "2025-04-10T16:32:00Z"
   },
-  {
-    "name": "pelican-dev/panel",
-    "version": "v1.0.0-beta19",
-    "date": "2025-04-07T23:06:29Z"
-  },
-  {
-    "name": "pelican-dev/wings",
-    "version": "v1.0.0-beta11",
-    "date": "2025-04-07T23:02:00Z"
-  },
   {
     "name": "Threadfin/Threadfin",
     "version": "1.2.32",
@@ -869,11 +879,6 @@
     "version": "v0.0.7",
     "date": "2025-03-25T15:11:18Z"
   },
-  {
-    "name": "crowdsecurity/crowdsec",
-    "version": "v1.6.8",
-    "date": "2025-03-25T13:33:10Z"
-  },
   {
     "name": "nextcloud/nextcloudpi",
     "version": "v1.55.4",
@@ -909,11 +914,6 @@
     "version": "v0.22.1",
     "date": "2025-03-18T21:01:22Z"
   },
-  {
-    "name": "authelia/authelia",
-    "version": "v4.39.1",
-    "date": "2025-03-18T03:57:41Z"
-  },
   {
     "name": "Sonarr/Sonarr",
     "version": "v4.0.14.2939",

install/authentik-install.sh

@@ -15,7 +15,6 @@ update_os
 
 msg_info "Installing Dependencies (Patience)"
 $STD apt-get install -y \
-  gpg \
   pkg-config \
   libffi-dev \
   build-essential \
@@ -33,9 +32,15 @@ $STD apt-get install -y \
   libxmlsec1-openssl \
   libmaxminddb0 \
   python3-pip \
+  redis-server \
   git
 msg_ok "Installed Dependencies"
 
+setup_uv
+PG_VERSION="16" install_postgresql
+NODE_VERSION="22" install_node_and_modules
+install_go
+
 msg_info "Installing yq"
 cd /tmp
 YQ_LATEST="$(curl -fsSL https://api.github.com/repos/mikefarah/yq/releases/latest | grep -Po '"tag_name": "\K.*?(?=")')"
@@ -56,46 +61,8 @@ cat <<EOF >/etc/GeoIP.conf
 EOF
 msg_ok "Installed GeoIP"
 
-msg_info "Setting up Python 3"
-cd /tmp
-curl -fsSL "https://www.python.org/ftp/python/3.12.1/Python-3.12.1.tgz" -o "Python.tgz"
-tar -zxf Python.tgz
-cd Python-3.12.1
-$STD ./configure --enable-optimizations
-$STD make altinstall
-cd ~
-$STD update-alternatives --install /usr/bin/python3 python3 /usr/local/bin/python3.12 1
-msg_ok "Setup Python 3"
-
-msg_info "Setting up Node.js Repository"
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-msg_ok "Set up Node.js Repository"
-
-msg_info "Installing Node.js"
-$STD apt-get update
-$STD apt-get install -y nodejs
-msg_ok "Installed Node.js"
-
-msg_info "Installing Golang"
-set +o pipefail
-temp_file=$(mktemp)
-golang_tarball=$(curl -fsSL https://go.dev/dl/ | grep -oP 'go[\d\.]+\.linux-amd64\.tar\.gz' | head -n 1)
-curl -fsSL "https://golang.org/dl/${golang_tarball}" -o "$temp_file"
-tar -C /usr/local -xzf "$temp_file"
-ln -sf /usr/local/go/bin/go /usr/local/bin/go
-rm -f "$temp_file"
-set -o pipefail
-msg_ok "Installed Golang"
-
-msg_info "Installing Redis"
-$STD apt-get install -y redis-server
-systemctl enable -q --now redis-server
-msg_ok "Installed Redis"
-
 msg_info "Installing PostgreSQL"
-$STD apt-get install -y postgresql postgresql-contrib
+$STD apt-get install -y postgresql-16 postgresql-contrib-16
 DB_NAME="authentik"
 DB_USER="authentik"
 DB_PASS="$(openssl rand -base64 18 | cut -c1-13)"
@@ -111,25 +78,29 @@ RELEASE=$(curl -fsSL https://api.github.com/repos/goauthentik/authentik/releases
 mkdir -p /opt/authentik
 curl -fsSL "${RELEASE}" -o "authentik.tar.gz"
 tar -xzf authentik.tar.gz -C /opt/authentik --strip-components 1 --overwrite
+export NODE_OPTIONS="--max-old-space-size=4096"
 cd /opt/authentik/website
 $STD npm install
 $STD npm run build-bundled
+
 cd /opt/authentik/web
 $STD npm install
 $STD npm run build
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+
 cd /opt/authentik
 $STD go mod download
 $STD go build -o /go/authentik ./cmd/server
 $STD go build -o /opt/authentik/authentik-server /opt/authentik/cmd/server/
-cd /opt/authentik
-$STD pip3 install --upgrade pip
-$STD pip3 install poetry poetry-plugin-export
-ln -s /usr/local/bin/poetry /usr/bin/poetry
-$STD poetry install --only=main --no-ansi --no-interaction --no-root
-$STD poetry export --without-hashes --without-urls -f requirements.txt --output requirements.txt
-$STD pip install --no-cache-dir -r requirements.txt
-$STD pip install .
+$STD uv sync --frozen --no-install-project --no-dev
+#$STD pip3 install --no-cache-dir --upgrade pip
+#$STD pip3 install --upgrade pip
+#$STD pip3 install poetry poetry-plugin-export
+
+#ln -s /usr/local/bin/poetry /usr/bin/poetry
+#$STD poetry install --only=main --no-ansi --no-interaction --no-root
+#$STD poetry export --without-hashes --without-urls -f requirements.txt --output requirements.txt
+#$STD pip install --no-cache-dir -r requirements.txt
+#$STD pip install .
 mkdir -p /etc/authentik
 mv /opt/authentik/authentik/lib/default.yml /etc/authentik/config.yml
 $STD yq -i ".secret_key = \"$(openssl rand -hex 32)\"" /etc/authentik/config.yml
@@ -137,23 +108,30 @@ $STD yq -i ".postgresql.password = \"${DB_PASS}\"" /etc/authentik/config.yml
 $STD yq -i ".geoip = \"/opt/authentik/tests/GeoLite2-City-Test.mmdb\"" /etc/authentik/config.yml
 cp -r /opt/authentik/authentik/blueprints /opt/authentik/blueprints
 $STD yq -i ".blueprints_dir = \"/opt/authentik/blueprints\"" /etc/authentik/config.yml
-ln -s /usr/bin/python3 /usr/bin/python
-ln -s /usr/local/bin/gunicorn /usr/bin/gunicorn
-ln -s /usr/local/bin/celery /usr/bin/celery
-$STD bash /opt/authentik/lifecycle/ak migrate
-cd ~
+#ln -s /usr/bin/python3 /usr/bin/python
+#ln -s /usr/local/bin/gunicorn /usr/bin/gunicorn
+#ln -s /usr/local/bin/celery /usr/bin/celery
+#$STD bash /opt/authentik/lifecycle/ak migrate
+cd /opt/authentik
+uv run python -m lifecycle.migrate
+ln -s /opt/authentik/.venv/bin/gunicorn /usr/local/bin/gunicorn
+ln -s /opt/authentik/.venv/bin/celery /usr/local/bin/celery
+echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed authentik"
 
 msg_info "Creating Services"
 cat <<EOF >/etc/systemd/system/authentik-server.service
 [Unit]
-Description = authentik Server
+Description=authentik Go Server (API Gateway)
+After=network.target
+Wants=redis.service postgresql.service
 
 [Service]
-ExecStart=/opt/authentik/authentik-server
 WorkingDirectory=/opt/authentik/
+ExecStart=/opt/authentik/authentik-server
 Restart=always
 RestartSec=5
+Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
 
 [Install]
 WantedBy=multi-user.target
@@ -161,21 +139,49 @@ EOF
 
 cat <<EOF >/etc/systemd/system/authentik-worker.service
 [Unit]
-Description = authentik Worker
+Description=authentik Celery Worker
+After=network.target redis.service postgresql.service
+Requires=redis.service
 
 [Service]
-Environment=DJANGO_SETTINGS_MODULE="authentik.root.settings"
-ExecStart=celery -A authentik.root.celery worker -Ofair --max-tasks-per-child=1 --autoscale 3,1 -E -B -s /tmp/celerybeat-schedule -Q authentik,authentik_scheduled,authentik_events
-WorkingDirectory=/opt/authentik/authentik
+Type=simple
+WorkingDirectory=/opt/authentik
+ExecStart=/opt/authentik/.venv/bin/celery \
+  -A authentik.root.celery worker \
+  -Ofair \
+  --max-tasks-per-child=1 \
+  --autoscale 3,1 \
+  -Q authentik,authentik_scheduled,authentik_events \
+  -E
 Restart=always
 RestartSec=5
+Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
 
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now authentik-server
-sleep 2
-systemctl enable -q --now authentik-worker
+
+cat <<EOF >/etc/systemd/system/authentik-celery-beat.service
+[Unit]
+Description=authentik Celery Beat Scheduler
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/authentik
+ExecStart=/opt/authentik/.venv/bin/celery \
+  -A authentik.root.celery beat \
+  -s /tmp/celerybeat-schedule
+Restart=always
+RestartSec=5
+#User=authentik
+Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl enable -q --now authentik-server authentik-worker authentik-celery-beat
 msg_ok "Created Services"
 
 motd_ssh

install/bazarr-install.sh

@@ -26,7 +26,7 @@ mkdir -p /var/lib/bazarr/
 curl -fsSL "https://github.com/morpheus65535/bazarr/releases/latest/download/bazarr.zip" -o $(basename "https://github.com/morpheus65535/bazarr/releases/latest/download/bazarr.zip")
 unzip -qq bazarr -d /opt/bazarr
 chmod 775 /opt/bazarr /var/lib/bazarr/
-python3 -m pip install -q -r /opt/bazarr/requirements.txt
+$STD python3 -m pip install -q -r /opt/bazarr/requirements.txt
 msg_ok "Installed Bazarr"
 
 msg_info "Creating Service"

install/documenso-install.sh

@@ -20,14 +20,14 @@ msg_ok "Setup Functions"
 
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
-    gpg \
-    libc6 \
-    make \
-    cmake \
-    jq \
-    postgresql \
-    python3 \
-    python3-bcrypt
+  gpg \
+  libc6 \
+  make \
+  cmake \
+  jq \
+  postgresql \
+  python3 \
+  python3-bcrypt
 msg_ok "Installed Dependencies"
 
 msg_info "Setting up Node.js Repository"
@@ -52,10 +52,10 @@ $STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8'
 $STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
 $STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
 {
-    echo "Documenso-Credentials"
-    echo "Database Name: $DB_NAME"
-    echo "Database User: $DB_USER"
-    echo "Database Password: $DB_PASS"
+  echo "Documenso-Credentials"
+  echo "Database Name: $DB_NAME"
+  echo "Database User: $DB_USER"
+  echo "Database Password: $DB_PASS"
 } >>~/documenso.creds
 msg_ok "Set up PostgreSQL"
 
@@ -68,24 +68,22 @@ mv documenso-${RELEASE} /opt/documenso
 cd /opt/documenso
 mv .env.example /opt/documenso/.env
 sed -i \
-    -e "s|^NEXTAUTH_SECRET=.*|NEXTAUTH_SECRET='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
-    -e "s|^NEXT_PRIVATE_ENCRYPTION_KEY=.*|NEXT_PRIVATE_ENCRYPTION_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
-    -e "s|^NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY=.*|NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
-    -e "s|^DOCUMENSO_ENCRYPTION_KEY=.*|DOCUMENSO_ENCRYPTION_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
-    -e "s|^DOCUMENSO_ENCRYPTION_SECONDARY_KEY=.*|DOCUMENSO_ENCRYPTION_SECONDARY_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
-    -e "s|^NEXTAUTH_URL=.*|NEXTAUTH_URL=\"http://${LOCAL_IP}:3000\"|" \
-    -e "s|^NEXT_PUBLIC_WEBAPP_URL=.*|NEXT_PUBLIC_WEBAPP_URL='http://${LOCAL_IP}:9000'|" \
-    -e "s|^NEXT_PUBLIC_MARKETING_URL=.*|NEXT_PUBLIC_MARKETING_URL=\"http://${LOCAL_IP}:3001\"|" \
-    -e "s|^NEXT_PRIVATE_INTERNAL_WEBAPP_URL=.*|NEXT_PRIVATE_INTERNAL_WEBAPP_URL=\"http://${LOCAL_IP}:3000\"|" \
-    -e "s|^NEXT_PRIVATE_DATABASE_URL=.*|NEXT_PRIVATE_DATABASE_URL=\"postgres://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME\"|" \
-    -e "s|^NEXT_PRIVATE_DIRECT_DATABASE_URL=.*|NEXT_PRIVATE_DIRECT_DATABASE_URL=\"postgres://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME\"|" \
-    /opt/documenso/.env
+  -e "s|^NEXTAUTH_SECRET=.*|NEXTAUTH_SECRET='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^NEXT_PRIVATE_ENCRYPTION_KEY=.*|NEXT_PRIVATE_ENCRYPTION_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY=.*|NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^DOCUMENSO_ENCRYPTION_KEY=.*|DOCUMENSO_ENCRYPTION_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^DOCUMENSO_ENCRYPTION_SECONDARY_KEY=.*|DOCUMENSO_ENCRYPTION_SECONDARY_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^NEXT_PUBLIC_WEBAPP_URL=.*|NEXT_PUBLIC_WEBAPP_URL='http://${LOCAL_IP}:3000'|" \
+  -e "s|^NEXT_PRIVATE_INTERNAL_WEBAPP_URL=.*|NEXT_PRIVATE_INTERNAL_WEBAPP_URL=\"http://${LOCAL_IP}:3000\"|" \
+  -e "s|^NEXT_PRIVATE_DATABASE_URL=.*|NEXT_PRIVATE_DATABASE_URL=\"postgres://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME\"|" \
+  -e "s|^NEXT_PRIVATE_DIRECT_DATABASE_URL=.*|NEXT_PRIVATE_DIRECT_DATABASE_URL=\"postgres://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME\"|" \
+  /opt/documenso/.env
 export TURBO_CACHE=1
 export NEXT_TELEMETRY_DISABLED=1
 export CYPRESS_INSTALL_BINARY=0
 export NODE_OPTIONS="--max-old-space-size=4096"
 $STD npm ci
-$STD npm run build:web
+$STD turbo run build --filter=@documenso/remix
 $STD npm run prisma:migrate-deploy
 echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
 msg_ok "Installed Documenso"
@@ -103,8 +101,8 @@ Description=Documenso Service
 After=network.target postgresql.service
 
 [Service]
-WorkingDirectory=/opt/documenso/apps/web
-ExecStart=/usr/bin/npm start
+WorkingDirectory=/opt/documenso
+ExecStart=/usr/bin/turbo run start --filter=@documenso/remix
 Restart=always
 EnvironmentFile=/opt/documenso/.env
 
@@ -118,6 +116,7 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
+$STD turbo daemon stop
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/homeassistant-core-install.sh

@@ -46,29 +46,33 @@ $STD apt-get install -y \
   pkg-config
 msg_ok "Installed Dependencies"
 
+setup_uv
 msg_info "Setup Python3"
-$STD apt-get update
-$STD rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
-$STD apt-get remove --purge -y python3.12 python3.12-dev python3.12-venv
-
 $STD apt-get install -y \
   python3.13 \
-  python3-pip \
   python3.13-dev \
   python3.13-venv
-
-ln -sf /usr/bin/python3.13 /usr/bin/python3
 msg_ok "Setup Python3"
 
+msg_info "Preparing Python 3.13 for uv"
+$STD uv python install 3.13
+UV_PYTHON=$(uv python list | awk '/3\.13\.[0-9]+.*\/root\/.local/ {print $2; exit}')
+if [[ -z "$UV_PYTHON" ]]; then
+  msg_error "No local Python 3.13 found via uv"
+  exit 1
+fi
+msg_ok "Prepared Python 3.13"
+
 msg_info "Setting up Home Assistant-Core environment"
-mkdir /srv/homeassistant
+rm -rf /srv/homeassistant
+mkdir -p /srv/homeassistant
 cd /srv/homeassistant
-python3 -m venv .
-source bin/activate
+$STD uv venv .venv --python "$UV_PYTHON"
+source .venv/bin/activate
 msg_ok "Created virtual environment"
 
 msg_info "Installing Home Assistant-Core"
-$STD python3 -m pip install webrtcvad wheel homeassistant mysqlclient psycopg2-binary isal
+$STD uv pip install homeassistant mysqlclient psycopg2-binary isal webrtcvad wheel
 mkdir -p /root/.homeassistant
 msg_ok "Installed Home Assistant-Core"
 
@@ -77,16 +81,19 @@ cat <<EOF >/etc/systemd/system/homeassistant.service
 [Unit]
 Description=Home Assistant
 After=network-online.target
+
 [Service]
 Type=simple
 WorkingDirectory=/root/.homeassistant
-Environment="PATH=/srv/homeassistant/bin:/usr/local/bin:/usr/bin:/usr/local/bin/uv"
-ExecStart=/srv/homeassistant/bin/python3 -m homeassistant --config /root/.homeassistant
+Environment="PATH=/srv/homeassistant/.venv/bin:/usr/local/bin:/usr/bin"
+ExecStart=/srv/homeassistant/.venv/bin/python3 -m homeassistant --config /root/.homeassistant
 Restart=always
 RestartForceExitStatus=100
+
 [Install]
 WantedBy=multi-user.target
 EOF
+
 systemctl enable -q --now homeassistant
 msg_ok "Created Service"
 

install/jellyseerr-install.sh

@@ -15,30 +15,18 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
-    gnupg \
     git \
     build-essential
 msg_ok "Installed Dependencies"
 
-msg_info "Setting up Node.js Repository"
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-msg_ok "Set up Node.js Repository"
 
-msg_info "Installing Node.js"
-$STD apt-get update
-$STD apt-get install -y nodejs
-msg_ok "Installed Node.js"
 
 git clone -q https://github.com/Fallenbagel/jellyseerr.git /opt/jellyseerr
 cd /opt/jellyseerr
 $STD git checkout main
 
 pnpm_desired=$(grep -Po '"pnpm":\s*"\K[^"]+' /opt/jellyseerr/package.json)
-msg_info "Installing pnpm version $pnpm_desired..."
-$STD npm install -g pnpm@$pnpm_desired
-msg_ok "Installed pnpm"
+NODE_VERSION="22" NODE_MODULE="pnpm@$pnpm_desired" install_node_and_modules
 
 msg_info "Installing Jellyseerr (Patience)"
 export CYPRESS_INSTALL_BINARY=0

misc/alpine-install.func

@@ -190,10 +190,29 @@ validate_tz() {
 customize() {
   if [[ "$PASSWORD" == "" ]]; then
     msg_info "Customizing Container"
-    bash -c "passwd -d root" >/dev/null 2>&1
+    passwd -d root >/dev/null 2>&1
+
+    # Ensure agetty is available
+    apk add --no-cache --force-broken-world util-linux >/dev/null 2>&1
+
+    # Create persistent autologin boot script
+    mkdir -p /etc/local.d
+    cat <<'EOF' >/etc/local.d/autologin.start
+#!/bin/sh
+sed -i 's|^tty1::respawn:.*|tty1::respawn:/sbin/agetty --autologin root --noclear tty1 38400 linux|' /etc/inittab
+kill -HUP 1
+EOF
+    touch /root/.hushlogin
+
+    chmod +x /etc/local.d/autologin.start
+    rc-update add local >/dev/null 2>&1
+
+    # Apply autologin immediately for current session
+    /etc/local.d/autologin.start
+
     msg_ok "Customized Container"
   fi
 
-  echo "bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/${app}.sh)\"" >/usr/bin/update
+  echo "bash -c \"\$(curl -fsSL https://github.com/community-scripts/ProxmoxVE/raw/main/ct/${app}.sh)\"" >/usr/bin/update
   chmod +x /usr/bin/update
 }

misc/tools.func

@@ -479,7 +479,7 @@ install_mongodb() {
 
 fetch_and_deploy_gh_release() {
   local repo="$1"
-  local app=$(echo ${APPLICATION,,} | tr -d ' ')
+  local app=${APP:-$(echo "${APPLICATION,,}" | tr -d ' ')}
   local api_url="https://api.github.com/repos/$repo/releases/latest"
   local header=()
   local attempt=0