Update CHANGELOG.md (#4903)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -14,8 +14,71 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 All LXC instances created using this repository come pre-installed with Midnight Commander, which is a command-line tool (`mc`) that offers a user-friendly file and directory management interface for the terminal environment.
 
 
+## 2025-06-02
+
+## 2025-06-01
+
+### 🆕 New Scripts
+
+  - immich ([#4886](https://github.com/community-scripts/ProxmoxVE/pull/4886))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - AdventureLog: add login credentials info [@tremor021](https://github.com/tremor021) ([#4887](https://github.com/community-scripts/ProxmoxVE/pull/4887))
+
+## 2025-05-31
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Silverbullet: Fix Installation (wrong path) [@MickLesk](https://github.com/MickLesk) ([#4873](https://github.com/community-scripts/ProxmoxVE/pull/4873))
+    - ActualBudget: fix update check (file instead of folder check) [@MickLesk](https://github.com/MickLesk) ([#4874](https://github.com/community-scripts/ProxmoxVE/pull/4874))
+    - Omada Controller: Fix libssl url [@tremor021](https://github.com/tremor021) ([#4868](https://github.com/community-scripts/ProxmoxVE/pull/4868))
+
+### 🌐 Website
+
+  - #### 🐞 Bug Fixes
+
+    - Revert "Update package dependencies in package.json and package-lock.json (#4845) [@BramSuurdje](https://github.com/BramSuurdje) ([#4869](https://github.com/community-scripts/ProxmoxVE/pull/4869))
+
+### 💥 Breaking Changes
+
+  - Remove Authentik script [@tremor021](https://github.com/tremor021) ([#4867](https://github.com/community-scripts/ProxmoxVE/pull/4867))
+
+## 2025-05-30
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - slskd: add space in sed command [@vhsdream](https://github.com/vhsdream) ([#4853](https://github.com/community-scripts/ProxmoxVE/pull/4853))
+    - Alpine Traefik: Fix working directory and plugins [@tremor021](https://github.com/tremor021) ([#4838](https://github.com/community-scripts/ProxmoxVE/pull/4838))
+
+### 🌐 Website
+
+  - #### 🐞 Bug Fixes
+
+    - Update package dependencies in package.json and package-lock.json [@enough-jainil](https://github.com/enough-jainil) ([#4845](https://github.com/community-scripts/ProxmoxVE/pull/4845))
+
 ## 2025-05-29
 
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - SearXNG fix limiter [@CrazyWolf13](https://github.com/CrazyWolf13) ([#4834](https://github.com/community-scripts/ProxmoxVE/pull/4834))
+    - Docmost: add jq before nodejs install [@MickLesk](https://github.com/MickLesk) ([#4831](https://github.com/community-scripts/ProxmoxVE/pull/4831))
+    - Alpine Traefik: Fix Dashboard not beign accessible [@tremor021](https://github.com/tremor021) ([#4828](https://github.com/community-scripts/ProxmoxVE/pull/4828))
+    - MySQL: Fix Wrong Command [@MickLesk](https://github.com/MickLesk) ([#4820](https://github.com/community-scripts/ProxmoxVE/pull/4820))
+    - docs: fix casing of OpenWrt [@GoetzGoerisch](https://github.com/GoetzGoerisch) ([#4805](https://github.com/community-scripts/ProxmoxVE/pull/4805))
+
+  - #### ✨ New Features
+
+    - Docker-VM: set individual Hostname / Disk-Space formatting [@MickLesk](https://github.com/MickLesk) ([#4821](https://github.com/community-scripts/ProxmoxVE/pull/4821))
+
 ## 2025-05-28
 
 ### 🆕 New Scripts

ct/actualbudget.sh

@@ -24,7 +24,7 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -d /opt/actualbudget ]]; then
+  if [[ ! -f /opt/actualbudget_version.txt ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi

ct/authentik.sh

@@ -1,91 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: remz1337
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://goauthentik.io/
-
-APP="Authentik"
-var_tags="${var_tags:-identity-provider}"
-var_disk="${var_disk:-12}"
-var_cpu="${var_cpu:-6}"
-var_ram="${var_ram:-10240}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/systemd/system/authentik-server.service ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/goauthentik/authentik/releases/latest | grep "tarball_url" | awk '{print substr($2, 2, length($2)-3)}')
-  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
-    NODE_VERSION="22"
-    PG_VERSION="16"
-    setup_uv
-    install_postgresql
-    install_node_and_modules
-    install_go
-
-    msg_info "Stopping ${APP}"
-    systemctl stop authentik-server
-    systemctl stop authentik-worker
-    msg_ok "Stopped ${APP}"
-
-    msg_info "Building ${APP} website"
-    mkdir -p /opt/authentik
-    curl -fsSL "${RELEASE}" -o "authentik.tar.gz"
-    tar -xzf authentik.tar.gz -C /opt/authentik --strip-components 1 --overwrite
-    rm -rf authentik.tar.gz
-    cd /opt/authentik/website
-    $STD npm install
-    $STD npm run build-bundled
-    cd /opt/authentik/web
-    $STD npm install
-    $STD npm run build
-    msg_ok "Built ${APP} website"
-
-    msg_info "Building ${APP} server"
-    cd /opt/authentik
-    go mod download
-    go build -o /go/authentik ./cmd/server
-    go build -o /opt/authentik/authentik-server /opt/authentik/cmd/server/
-    msg_ok "Built ${APP} server"
-
-    msg_info "Building Authentik"
-    cd /opt/authentik
-    $STD uv sync --frozen --no-install-project --no-dev
-    uv run python -m lifecycle.migrate
-    ln -s /opt/authentik/.venv/bin/gunicorn /usr/local/bin/gunicorn
-    ln -s /opt/authentik/.venv/bin/celery /usr/local/bin/celery
-    msg_ok "Authentik built"
-
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated ${APP} to v${RELEASE}"
-
-    msg_info "Starting ${APP}"
-    systemctl start authentik-server
-    systemctl start authentik-worker
-    msg_ok "Started ${APP}"
-  else
-    msg_ok "No update required. ${APP} is already at v${RELEASE}"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9000/if/flow/initial-setup/${CL}"

ct/headers/authentik

@@ -1,6 +0,0 @@
-    ___         __  __               __  _ __  
-   /   | __  __/ /_/ /_  ___  ____  / /_(_) /__
-  / /| |/ / / / __/ __ \/ _ \/ __ \/ __/ / //_/
- / ___ / /_/ / /_/ / / /  __/ / / / /_/ / ,<   
-/_/  |_\__,_/\__/_/ /_/\___/_/ /_/\__/_/_/|_|  
-                                               

ct/headers/immich

@@ -0,0 +1,6 @@
+    _                     _      __  
+   (_)___ ___  ____ ___  (_)____/ /_ 
+  / / __ `__ \/ __ `__ \/ / ___/ __ \
+ / / / / / / / / / / / / / /__/ / / /
+/_/_/ /_/ /_/_/ /_/ /_/_/\___/_/ /_/ 
+                                     

ct/immich.sh

@@ -0,0 +1,319 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://immich.app
+
+APP="immich"
+var_tags="${var_tags:-photos}"
+var_disk="${var_disk:-20}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/immich ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  STAGING_DIR=/opt/staging
+  BASE_DIR=${STAGING_DIR}/base-images
+  SOURCE_DIR=${STAGING_DIR}/image-source
+  if [[ -f ~/.intel_version ]]; then
+    curl -fsSLO https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/machine-learning/Dockerfile
+    readarray -t INTEL_URLS < <(sed -n "/intel/p" ./Dockerfile | awk '{print $3}')
+    INTEL_RELEASE="$(grep "intel-opencl-icd" ./Dockerfile | awk -F '_' '{print $2}')"
+    if [[ "$INTEL_RELEASE" != "$(cat ~/.intel_version)" ]]; then
+      msg_info "Updating Intel iGPU dependencies"
+      for url in "${INTEL_URLS[@]}"; do
+        curl -fsSLO "$url"
+      done
+      $STD dpkg -i ./*.deb
+      rm ./*.deb
+      msg_ok "Intel iGPU dependencies updated"
+    fi
+    rm ~/Dockerfile
+  fi
+  if [[ -f ~/.immich_library_revisions ]]; then
+    libraries=("libjxl" "libheif" "libraw" "imagemagick" "libvips")
+    readarray -d '' NEW_REVISIONS < <(for library in "${libraries[@]}"; do
+      echo "$library: $(curl -fsSL https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/sources/"$library".json | jq -cr '.revision' -)"
+    done)
+    UPDATED_REVISIONS="$(comm -13 <(sort ~/.immich_library_revisions) <(echo -n "${NEW_REVISIONS[@]}" | sort))"
+    if [[ "$UPDATED_REVISIONS" ]]; then
+      readarray -t NAMES < <(echo "$UPDATED_REVISIONS" | awk -F ':' '{print $1}')
+      rm -rf "$SOURCE_DIR"
+      mkdir -p "$SOURCE_DIR"
+      cd "$BASE_DIR"
+      $STD git pull
+      cd "$STAGING_DIR"
+      for name in "${NAMES[@]}"; do
+        if [[ "$name" == "libjxl" ]]; then
+          msg_info "Recompiling libjxl"
+          SOURCE=${SOURCE_DIR}/libjxl
+          JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
+          JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
+          : "${LIBJXL_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libjxl.json)}"
+          $STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
+          cd "$SOURCE"
+          $STD git reset --hard "$LIBJXL_REVISION"
+          $STD git submodule update --init --recursive --depth 1 --recommend-shallow
+          $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-empty-dht-marker.patch
+          $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-icc-warning.patch
+          mkdir build
+          cd build
+          $STD cmake \
+            -DCMAKE_BUILD_TYPE=Release \
+            -DBUILD_TESTING=OFF \
+            -DJPEGXL_ENABLE_DOXYGEN=OFF \
+            -DJPEGXL_ENABLE_MANPAGES=OFF \
+            -DJPEGXL_ENABLE_PLUGIN_GIMP210=OFF \
+            -DJPEGXL_ENABLE_BENCHMARK=OFF \
+            -DJPEGXL_ENABLE_EXAMPLES=OFF \
+            -DJPEGXL_FORCE_SYSTEM_BROTLI=ON \
+            -DJPEGXL_FORCE_SYSTEM_HWY=ON \
+            -DJPEGXL_ENABLE_JPEGLI=ON \
+            -DJPEGXL_ENABLE_JPEGLI_LIBJPEG=ON \
+            -DJPEGXL_INSTALL_JPEGLI_LIBJPEG=ON \
+            -DJPEGXL_ENABLE_PLUGINS=ON \
+            -DJPEGLI_LIBJPEG_LIBRARY_SOVERSION="$JPEGLI_LIBJPEG_LIBRARY_SOVERSION" \
+            -DJPEGLI_LIBJPEG_LIBRARY_VERSION="$JPEGLI_LIBJPEG_LIBRARY_VERSION" \
+            -DLIBJPEG_TURBO_VERSION_NUMBER=2001005 \
+            ..
+          $STD cmake --build . -- -j"$(nproc)"
+          $STD cmake --install .
+          ldconfig /usr/local/lib
+          $STD make clean
+          cd "$STAGING_DIR"
+          rm -rf "$SOURCE"/{build,third_party}
+          msg_ok "Recompiled libjxl"
+        fi
+        if [[ "$name" == "libheif" ]]; then
+          msg_info "Recompiling libheif"
+          SOURCE=${SOURCE_DIR}/libheif
+          : "${LIBHEIF_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libheif.json)}"
+          $STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
+          cd "$SOURCE"
+          $STD git reset --hard "$LIBHEIF_REVISION"
+          mkdir build
+          cd build
+          $STD cmake --preset=release-noplugins \
+            -DWITH_DAV1D=ON \
+            -DENABLE_PARALLEL_TILE_DECODING=ON \
+            -DWITH_LIBSHARPYUV=ON \
+            -DWITH_LIBDE265=ON \
+            -DWITH_AOM_DECODER=OFF \
+            -DWITH_AOM_ENCODER=OFF \
+            -DWITH_X265=OFF \
+            -DWITH_EXAMPLES=OFF \
+            ..
+          $STD make install -j "$(nproc)"
+          ldconfig /usr/local/lib
+          $STD make clean
+          cd "$STAGING_DIR"
+          rm -rf "$SOURCE"/build
+          msg_ok "Recompiled libheif"
+        fi
+        if [[ "$name" == "libraw" ]]; then
+          msg_info "Recompiling libraw"
+          SOURCE=${SOURCE_DIR}/libraw
+          : "${LIBRAW_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libraw.json)}"
+          $STD git clone https://github.com/libraw/libraw.git "$SOURCE"
+          cd "$SOURCE"
+          $STD git reset --hard "$LIBRAW_REVISION"
+          $STD autoreconf --install
+          $STD ./configure
+          $STD make -j"$(nproc)"
+          $STD make install
+          ldconfig /usr/local/lib
+          $STD make clean
+          cd "$STAGING_DIR"
+          msg_ok "Recompiled libraw"
+        fi
+        if [[ "$name" == "imagemagick" ]]; then
+          msg_info "Recompiling ImageMagick"
+          SOURCE=$SOURCE_DIR/imagemagick
+          : "${IMAGEMAGICK_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/imagemagick.json)}"
+          $STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
+          cd "$SOURCE"
+          $STD git reset --hard "$IMAGEMAGICK_REVISION"
+          $STD ./configure --with-modules
+          $STD make -j"$(nproc)"
+          $STD make install
+          ldconfig /usr/local/lib
+          $STD make clean
+          cd "$STAGING_DIR"
+          msg_ok "Recompiled ImageMagick"
+        fi
+        if [[ "$name" == "libvips" ]]; then
+          msg_info "Recompiling libvips"
+          SOURCE=$SOURCE_DIR/libvips
+          : "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
+          $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
+          cd "$SOURCE"
+          $STD git reset --hard "$LIBVIPS_REVISION"
+          $STD meson setup build --buildtype=release --libdir=lib -Dintrospection=disabled -Dtiff=disabled
+          cd build
+          $STD ninja install
+          ldconfig /usr/local/lib
+          cd "$STAGING_DIR"
+          rm -rf "$SOURCE"/build
+          msg_ok "Recompiled libvips"
+        fi
+      done
+      echo -n "${NEW_REVISIONS[@]}" >~/.immich_library_revisions
+      msg_ok "Image-processing libraries compiled"
+    fi
+  fi
+  RELEASE=$(curl -s https://api.github.com/repos/immich-app/immich/releases?per_page=1 | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
+    msg_info "Stopping ${APP} services"
+    systemctl stop immich-web
+    systemctl stop immich-ml
+    msg_ok "Stopped ${APP}"
+    if [[ "$(cat /opt/${APP}_version.txt)" < "1.133.0" ]]; then
+      msg_info "Upgrading to the VectorChord PostgreSQL extension"
+      NUMBER="$(
+        sed -n '2p' <(
+          sudo -u postgres psql -A -d immich <<EOF
+        SELECT atttypmod as dimsize
+          FROM pg_attribute f
+          JOIN pg_class c ON c.oid = f.attrelid
+          WHERE c.relkind = 'r'::char
+          AND f.attnum > 0
+          AND c.relname = 'smart_search'::text
+          AND f.attname = 'embedding'::text;
+EOF
+        )
+      )"
+      $STD sudo -u postgres psql -d immich <<EOF
+      DROP INDEX IF EXISTS clip_index;
+      DROP INDEX IF EXISTS face_index;
+      ALTER TABLE smart_search ALTER COLUMN embedding SET DATA TYPE real[];
+      ALTER TABLE face_search ALTER COLUMN embedding SET DATA TYPE real[];
+EOF
+      $STD apt-get update
+      $STD apt-get install postgresql-16-pgvector -y
+      curl -fsSL https://github.com/tensorchord/VectorChord/releases/download/0.3.0/postgresql-16-vchord_0.3.0-1_amd64.deb -o vchord.deb
+      $STD dpkg -i vchord.deb
+      rm vchord.deb
+      sed -i "s|vectors.so|vchord.so|" /etc/postgresql/16/main/postgresql.conf
+      systemctl restart postgresql.service
+      $STD sudo -u postgres psql -d immich <<EOF
+      CREATE EXTENSION IF NOT EXISTS vchord CASCADE;
+      ALTER TABLE smart_search ALTER COLUMN embedding SET DATA TYPE vector($NUMBER);
+      ALTER TABLE face_search ALTER COLUMN embedding SET DATA TYPE vector(512);
+EOF
+      $STD apt purge vectors-pg16 -y
+      msg_ok "Database upgrade complete"
+    fi
+    INSTALL_DIR="/opt/${APP}"
+    UPLOAD_DIR="$(sed -n '/^IMMICH_MEDIA_LOCATION/s/[^=]*=//p' /opt/immich/.env)"
+    SRC_DIR="${INSTALL_DIR}/source"
+    APP_DIR="${INSTALL_DIR}/app"
+    ML_DIR="${APP_DIR}/machine-learning"
+    GEO_DIR="${INSTALL_DIR}/geodata"
+    cp "$ML_DIR"/ml_start.sh "$INSTALL_DIR"
+    rm -rf "${APP_DIR:?}"/*
+    rm -rf "$SRC_DIR"
+    immich_zip=$(mktemp)
+    curl -fsSL "https://github.com/immich-app/immich/archive/refs/tags/v${RELEASE}.zip" -o "$immich_zip"
+    msg_info "Updating ${APP} web and microservices"
+    unzip -q "$immich_zip"
+    mv "$APP-$RELEASE"/ "$SRC_DIR"
+    mkdir -p "$ML_DIR"
+    cd "$SRC_DIR"/server
+    $STD npm install -g node-gyp node-pre-gyp
+    $STD npm ci
+    $STD npm run build
+    $STD npm prune --omit=dev --omit=optional
+    cd "$SRC_DIR"/open-api/typescript-sdk
+    $STD npm ci
+    $STD npm run build
+    cd "$SRC_DIR"/web
+    $STD npm ci
+    $STD npm run build
+    cd "$SRC_DIR"
+    cp -a server/{node_modules,dist,bin,resources,package.json,package-lock.json,start*.sh} "$APP_DIR"/
+    cp -a web/build "$APP_DIR"/www
+    cp LICENSE "$APP_DIR"
+    msg_ok "Updated ${APP} web and microservices"
+
+    cd "$SRC_DIR"/machine-learning
+    $STD python3 -m venv "$ML_DIR"/ml-venv
+    if [[ -f ~/.openvino ]]; then
+      msg_info "Updating HW-accelerated machine-learning"
+      (
+        source "$ML_DIR"/ml-venv/bin/activate
+        $STD pip3 install -U uv
+        uv -q sync --extra openvino --no-cache --active
+      )
+      patchelf --clear-execstack "$ML_DIR"/ml-venv/lib/python3.11/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-311-x86_64-linux-gnu.so
+      msg_ok "Updated HW-accelerated machine-learning"
+    else
+      msg_info "Updating machine-learning"
+      (
+        source "$ML_DIR"/ml-venv/bin/activate
+        $STD pip3 install -U uv
+        uv -q sync --extra cpu --no-cache --active
+      )
+      msg_ok "Updated machine-learning"
+    fi
+    cd "$SRC_DIR"
+    cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
+    cp "$INSTALL_DIR"/ml_start.sh "$ML_DIR"
+    if [[ -f ~/.openvino ]]; then
+      sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
+    fi
+    ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
+    cd "$APP_DIR"
+    grep -Rl /usr/src | xargs -n1 sed -i "s|\/usr/src|$INSTALL_DIR|g"
+    grep -RlE "'/build'" | xargs -n1 sed -i "s|'/build'|'$APP_DIR'|g"
+    sed -i "s@\"/cache\"@\"$INSTALL_DIR/cache\"@g" "$ML_DIR"/immich_ml/config.py
+    ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$APP_DIR"/upload
+    ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$ML_DIR"/upload
+    ln -s "$GEO_DIR" "$APP_DIR"
+
+    msg_info "Updating Immich CLI"
+    $STD npm install --build-from-source sharp
+    rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
+    $STD npm i -g @immich/cli
+    msg_ok "Updated Immich CLI"
+
+    sed -i "s|pgvecto.rs|vectorchord|" /opt/"${APP}"/.env
+
+    chown -R immich:immich "$INSTALL_DIR"
+    echo "$RELEASE" >/opt/"${APP}"_version.txt
+    msg_ok "Updated ${APP} to v${RELEASE}"
+
+    msg_info "Cleaning up"
+    rm -f "$immich_zip"
+    $STD apt-get -y autoremove
+    $STD apt-get -y autoclean
+    msg_ok "Cleaned"
+  else
+    msg_ok "${APP} is already at v${RELEASE}"
+  fi
+  systemctl restart immich-ml immich-web
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:2283${CL}"

ct/searxng.sh

@@ -27,6 +27,7 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
+  sed -i 's/^\([[:space:]]*limiter:\)[[:space:]]*true/\1 false/' /etc/searxng/settings.yml
   if cd /usr/local/searxng/searxng-src && git pull | grep -q 'Already up to date'; then
     msg_ok "There is currently no update available."
   fi

frontend/public/json/adventurelog.json

@@ -35,6 +35,10 @@
     {
       "text": "AdventureLog uses an initial local IP, if you change your LXC-IP, you need to change the IP here: `/opt/adventurelog/backend/server/.env` and here: `/opt/adventurelog/frontend/.env`",
       "type": "warning"
+    },
+    {
+      "text": "Use `cat ~/adventurelog.creds` to see login credentials.",
+      "type": "info"
     }
   ]
 }

frontend/public/json/authentik.json

@@ -1,44 +0,0 @@
-{
-    "name": "authentik",
-    "slug": "authentik",
-    "categories": [
-        6
-    ],
-    "date_created": "2024-12-27",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 9000,
-    "documentation": "https://docs.goauthentik.io/docs/",
-    "website": "https://goauthentik.io/",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/authentik.webp",
-    "config_path": "/etc/authentik/config.yml",
-    "description": "authentik is an IdP (Identity Provider) and SSO (single sign on) that is built with security at the forefront of every piece of code, every feature, with an emphasis on flexibility and versatility.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/authentik.sh",
-            "resources": {
-                "cpu": 6,
-                "ram": 10240,
-                "hdd": 12,
-                "os": "debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "Authentik is very resource-heavy, it is recommended to use at least 10GB RAM anytime!",
-            "type": "warning"
-        },
-        {
-            "text": "Some updates don't work due to massive dependency errors, it's recommended to do a backup before updating or a pg_dump and a new LXC.",
-            "type": "warning"
-        }
-    ]
-}

frontend/public/json/docker-vm.json

@@ -22,7 +22,7 @@
       "resources": {
         "cpu": 2,
         "ram": 4096,
-        "hdd": 8,
+        "hdd": 10,
         "os": "debian",
         "version": "12"
       }

frontend/public/json/immich.json

@@ -0,0 +1,48 @@
+{
+  "name": "Immich",
+  "slug": "immich",
+  "categories": [
+    13
+  ],
+  "date_created": "2025-06-01",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 2283,
+  "documentation": "https://immich.app/docs/overview/introduction",
+  "website": "https://immich.app",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/immich.webp",
+  "config_path": "/opt/immich/.env",
+  "description": "High performance self-hosted photo and video management solution.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/immich.sh",
+      "resources": {
+        "cpu": 4,
+        "ram": 4096,
+        "hdd": 20,
+        "os": "Debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "During installation, HW-accelerated machine-learning (with OpenVINO) is an available option. This also allows for HW-accelerated transcoding, but it must be enabled in Video Transcoding Settings",
+      "type": "info"
+    },
+    {
+      "text": "If using OpenVINO HW machine-learning, increase RAM because OpenVINO is memory-intensive",
+      "type": "info"
+    },
+    {
+      "text": "To change upload location, edit 'IMMICH_MEDIA_LOCATION' in `/opt/immich/.env`",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/versions.json

@@ -1,8 +1,223 @@
 [
+  {
+    "name": "advplyr/audiobookshelf",
+    "version": "v2.24.0",
+    "date": "2025-06-01T21:38:08Z"
+  },
+  {
+    "name": "TriliumNext/Notes",
+    "version": "v0.93.0",
+    "date": "2025-04-17T20:05:25Z"
+  },
+  {
+    "name": "traccar/traccar",
+    "version": "v6.7.2",
+    "date": "2025-06-01T20:40:00Z"
+  },
+  {
+    "name": "gethomepage/homepage",
+    "version": "v1.3.2",
+    "date": "2025-06-01T19:02:46Z"
+  },
+  {
+    "name": "Koenkk/zigbee2mqtt",
+    "version": "2.4.0",
+    "date": "2025-06-01T18:08:44Z"
+  },
+  {
+    "name": "OliveTin/OliveTin",
+    "version": "2025.6.1",
+    "date": "2025-06-01T12:31:14Z"
+  },
+  {
+    "name": "runtipi/runtipi",
+    "version": "v4.2.0",
+    "date": "2025-06-01T12:31:14Z"
+  },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "v6.2.16",
+    "date": "2025-05-27T16:27:42Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.21.3",
+    "date": "2025-06-01T10:27:50Z"
+  },
+  {
+    "name": "evcc-io/evcc",
+    "version": "0.204.1",
+    "date": "2025-06-01T08:19:18Z"
+  },
+  {
+    "name": "Radarr/Radarr",
+    "version": "v5.25.0.10024",
+    "date": "2025-05-26T21:58:37Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.22.1975",
+    "date": "2025-06-01T05:58:55Z"
+  },
+  {
+    "name": "home-assistant/core",
+    "version": "2025.5.3",
+    "date": "2025-05-23T15:10:33Z"
+  },
+  {
+    "name": "kimai/kimai",
+    "version": "2.35.1",
+    "date": "2025-05-31T15:05:27Z"
+  },
+  {
+    "name": "prometheus/prometheus",
+    "version": "v3.4.1",
+    "date": "2025-05-31T13:45:40Z"
+  },
+  {
+    "name": "BookStackApp/BookStack",
+    "version": "v25.05",
+    "date": "2025-05-31T13:36:23Z"
+  },
+  {
+    "name": "Forceu/Gokapi",
+    "version": "v2.0.0",
+    "date": "2025-05-31T12:32:40Z"
+  },
+  {
+    "name": "blakeblackshear/frigate",
+    "version": "v0.14.1",
+    "date": "2024-08-29T22:32:51Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.2.5",
+    "date": "2025-05-28T06:49:43Z"
+  },
+  {
+    "name": "goauthentik/authentik",
+    "version": "version/2025.4.1",
+    "date": "2025-05-15T17:48:29Z"
+  },
+  {
+    "name": "pi-hole/pi-hole",
+    "version": "v6.1",
+    "date": "2025-05-30T22:07:45Z"
+  },
+  {
+    "name": "moghtech/komodo",
+    "version": "v1.18.0",
+    "date": "2025-05-30T20:12:54Z"
+  },
+  {
+    "name": "homarr-labs/homarr",
+    "version": "v1.22.0",
+    "date": "2025-05-30T19:17:15Z"
+  },
+  {
+    "name": "emqx/emqx",
+    "version": "e5.10.0-beta.1",
+    "date": "2025-05-30T16:49:17Z"
+  },
+  {
+    "name": "element-hq/synapse",
+    "version": "test-pro",
+    "date": "2025-05-30T14:53:00Z"
+  },
+  {
+    "name": "icereed/paperless-gpt",
+    "version": "v0.20.0",
+    "date": "2025-05-30T14:39:51Z"
+  },
+  {
+    "name": "wazuh/wazuh",
+    "version": "coverity-w22-4.13.0",
+    "date": "2025-05-26T15:04:48Z"
+  },
+  {
+    "name": "nzbgetcom/nzbget",
+    "version": "v25.0",
+    "date": "2025-05-12T09:12:04Z"
+  },
+  {
+    "name": "binwiederhier/ntfy",
+    "version": "v2.12.0",
+    "date": "2025-05-30T00:26:27Z"
+  },
+  {
+    "name": "VictoriaMetrics/VictoriaMetrics",
+    "version": "v1.23.2-victorialogs",
+    "date": "2025-05-29T22:26:27Z"
+  },
+  {
+    "name": "open-webui/open-webui",
+    "version": "v0.6.13",
+    "date": "2025-05-29T21:37:38Z"
+  },
+  {
+    "name": "gristlabs/grist-core",
+    "version": "v1.6.0",
+    "date": "2025-05-29T19:11:21Z"
+  },
   {
     "name": "navidrome/navidrome",
-    "version": "v0.56.0",
-    "date": "2025-05-28T23:36:58Z"
+    "version": "v0.56.1",
+    "date": "2025-05-29T19:09:16Z"
+  },
+  {
+    "name": "tailscale/tailscale",
+    "version": "v1.84.1",
+    "date": "2025-05-29T17:41:04Z"
+  },
+  {
+    "name": "influxdata/influxdb",
+    "version": "v2.7.12",
+    "date": "2025-05-29T17:08:26Z"
+  },
+  {
+    "name": "HabitRPG/habitica",
+    "version": "v5.36.5",
+    "date": "2025-05-29T17:06:01Z"
+  },
+  {
+    "name": "FlowiseAI/Flowise",
+    "version": "flowise@3.0.1",
+    "date": "2025-05-29T17:00:06Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.94.1",
+    "date": "2025-05-27T10:36:43Z"
+  },
+  {
+    "name": "syncthing/syncthing",
+    "version": "v1.29.6",
+    "date": "2025-05-06T07:57:02Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "server/public/v0.1.14",
+    "date": "2025-05-29T15:35:16Z"
+  },
+  {
+    "name": "readeck/readeck",
+    "version": "0.19.2",
+    "date": "2025-05-29T14:39:17Z"
+  },
+  {
+    "name": "zwave-js/zwave-js-ui",
+    "version": "v10.6.1",
+    "date": "2025-05-29T13:36:09Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.1.0.119-2.1.0.119_canary_2025-05-29",
+    "date": "2025-05-29T06:14:27Z"
+  },
+  {
+    "name": "ollama/ollama",
+    "version": "v0.9.0",
+    "date": "2025-05-29T05:41:01Z"
   },
   {
     "name": "webmin/webmin",
@@ -19,46 +234,11 @@
     "version": "r6.0.24",
     "date": "2025-05-28T21:25:03Z"
   },
-  {
-    "name": "home-assistant/core",
-    "version": "2025.5.3",
-    "date": "2025-05-23T15:10:33Z"
-  },
-  {
-    "name": "influxdata/influxdb",
-    "version": "v3.1.0",
-    "date": "2025-05-28T18:48:34Z"
-  },
-  {
-    "name": "nzbgetcom/nzbget",
-    "version": "v25.0",
-    "date": "2025-05-12T09:12:04Z"
-  },
-  {
-    "name": "zwave-js/zwave-js-ui",
-    "version": "v10.6.0",
-    "date": "2025-05-28T15:45:44Z"
-  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.504.2",
     "date": "2025-05-28T14:36:54Z"
   },
-  {
-    "name": "kimai/kimai",
-    "version": "2.35.0",
-    "date": "2025-05-28T12:41:09Z"
-  },
-  {
-    "name": "VictoriaMetrics/VictoriaMetrics",
-    "version": "v1.23.0-victorialogs",
-    "date": "2025-05-28T12:27:36Z"
-  },
-  {
-    "name": "element-hq/synapse",
-    "version": "v1.130.0",
-    "date": "2025-05-20T15:33:54Z"
-  },
   {
     "name": "pocket-id/pocket-id",
     "version": "v1.1.0",
@@ -69,21 +249,11 @@
     "version": "v2.71.11",
     "date": "2025-05-28T09:16:41Z"
   },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.2.5",
-    "date": "2025-05-28T06:49:43Z"
-  },
   {
     "name": "Checkmk/checkmk",
     "version": "v2.2.0p43-rc1",
     "date": "2025-05-28T06:23:13Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.22.1960",
-    "date": "2025-05-28T05:56:49Z"
-  },
   {
     "name": "Athou/commafeed",
     "version": "5.10.0",
@@ -94,21 +264,11 @@
     "version": "v6.12.6",
     "date": "2025-05-28T00:13:19Z"
   },
-  {
-    "name": "ollama/ollama",
-    "version": "v0.8.0",
-    "date": "2025-05-27T19:55:15Z"
-  },
   {
     "name": "bluenviron/mediamtx",
     "version": "v1.12.3",
     "date": "2025-05-27T20:43:10Z"
   },
-  {
-    "name": "runtipi/runtipi",
-    "version": "nightly",
-    "date": "2025-05-27T19:00:14Z"
-  },
   {
     "name": "Threadfin/Threadfin",
     "version": "1.2.34",
@@ -119,11 +279,6 @@
     "version": "v1.134.0",
     "date": "2025-05-27T17:28:27Z"
   },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "v6.2.16",
-    "date": "2025-05-27T16:27:42Z"
-  },
   {
     "name": "neo4j/neo4j",
     "version": "5.26.7",
@@ -134,11 +289,6 @@
     "version": "7.2.9",
     "date": "2025-05-27T14:08:53Z"
   },
-  {
-    "name": "readeck/readeck",
-    "version": "0.19.1",
-    "date": "2025-05-27T13:13:07Z"
-  },
   {
     "name": "traefik/traefik",
     "version": "v3.4.1",
@@ -149,16 +299,6 @@
     "version": "v0.107.62",
     "date": "2025-05-27T12:10:19Z"
   },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.5.7",
-    "date": "2025-05-27T05:34:42Z"
-  },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.94.1",
-    "date": "2025-05-27T10:36:43Z"
-  },
   {
     "name": "esphome/esphome",
     "version": "2025.5.1",
@@ -169,16 +309,6 @@
     "version": "v2.14.12",
     "date": "2025-05-27T03:58:59Z"
   },
-  {
-    "name": "open-webui/open-webui",
-    "version": "v0.6.11",
-    "date": "2025-05-26T22:27:26Z"
-  },
-  {
-    "name": "Radarr/Radarr",
-    "version": "v5.25.0.10024",
-    "date": "2025-05-26T21:58:37Z"
-  },
   {
     "name": "dani-garcia/vaultwarden",
     "version": "1.34.1",
@@ -194,31 +324,16 @@
     "version": "4.8.11.0",
     "date": "2025-03-10T06:39:11Z"
   },
-  {
-    "name": "wazuh/wazuh",
-    "version": "coverity-w22-4.13.0",
-    "date": "2025-05-26T15:04:48Z"
-  },
   {
     "name": "jupyter/notebook",
     "version": "v7.4.3",
     "date": "2025-05-26T14:27:27Z"
   },
-  {
-    "name": "syncthing/syncthing",
-    "version": "v1.29.6",
-    "date": "2025-05-06T07:57:02Z"
-  },
   {
     "name": "Graylog2/graylog2-server",
     "version": "6.3.0-beta.3",
     "date": "2025-05-26T12:40:56Z"
   },
-  {
-    "name": "OliveTin/OliveTin",
-    "version": "2025.5.26",
-    "date": "2025-05-26T11:30:11Z"
-  },
   {
     "name": "Luligu/matterbridge",
     "version": "3.0.4",
@@ -234,11 +349,6 @@
     "version": "v1.13.0",
     "date": "2025-05-25T20:21:13Z"
   },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.21.0",
-    "date": "2025-05-25T16:41:43Z"
-  },
   {
     "name": "Prowlarr/Prowlarr",
     "version": "v1.36.3.5071",
@@ -279,16 +389,6 @@
     "version": "v0.28.2",
     "date": "2025-05-24T07:59:15Z"
   },
-  {
-    "name": "traccar/traccar",
-    "version": "v6.7.1",
-    "date": "2025-05-24T04:51:02Z"
-  },
-  {
-    "name": "homarr-labs/homarr",
-    "version": "v1.21.0",
-    "date": "2025-05-23T19:17:15Z"
-  },
   {
     "name": "docker/compose",
     "version": "v2.36.2",
@@ -334,11 +434,6 @@
     "version": "3.2.0-rc2",
     "date": "2025-05-21T20:09:07Z"
   },
-  {
-    "name": "tailscale/tailscale",
-    "version": "v1.84.0",
-    "date": "2025-05-21T19:39:53Z"
-  },
   {
     "name": "clusterzx/paperless-ai",
     "version": "v3.0.4",
@@ -374,11 +469,6 @@
     "version": "v4.1.0",
     "date": "2025-05-21T04:12:44Z"
   },
-  {
-    "name": "icereed/paperless-gpt",
-    "version": "v0.19.0",
-    "date": "2025-05-21T03:46:14Z"
-  },
   {
     "name": "matze/wastebin",
     "version": "3.1.0",
@@ -404,11 +494,6 @@
     "version": "v4.4.9",
     "date": "2025-05-20T00:08:29Z"
   },
-  {
-    "name": "HabitRPG/habitica",
-    "version": "v5.36.4",
-    "date": "2025-05-19T22:28:11Z"
-  },
   {
     "name": "glanceapp/glance",
     "version": "v0.8.3",
@@ -419,11 +504,6 @@
     "version": "v1.6.1",
     "date": "2025-03-15T17:29:17Z"
   },
-  {
-    "name": "Forceu/Gokapi",
-    "version": "v1.9.6",
-    "date": "2024-12-18T14:35:37Z"
-  },
   {
     "name": "Part-DB/Part-DB-server",
     "version": "v1.17.1",
@@ -449,31 +529,11 @@
     "version": "v25.05.2",
     "date": "2025-05-17T12:53:29Z"
   },
-  {
-    "name": "BookStackApp/BookStack",
-    "version": "v25.02.5",
-    "date": "2025-05-17T11:24:01Z"
-  },
   {
     "name": "Paymenter/Paymenter",
     "version": "v1.1.1",
     "date": "2025-05-17T10:10:36Z"
   },
-  {
-    "name": "evcc-io/evcc",
-    "version": "0.203.6",
-    "date": "2025-05-17T07:30:49Z"
-  },
-  {
-    "name": "prometheus/prometheus",
-    "version": "v0.304.0",
-    "date": "2025-05-17T07:29:09Z"
-  },
-  {
-    "name": "advplyr/audiobookshelf",
-    "version": "v2.23.0",
-    "date": "2025-05-16T22:13:53Z"
-  },
   {
     "name": "NodeBB/NodeBB",
     "version": "v4.4.1",
@@ -484,11 +544,6 @@
     "version": "2.0.4",
     "date": "2025-05-16T15:09:53Z"
   },
-  {
-    "name": "emqx/emqx",
-    "version": "e5.10.0-alpha.1",
-    "date": "2025-05-16T13:30:53Z"
-  },
   {
     "name": "gotson/komga",
     "version": "1.21.3",
@@ -499,11 +554,6 @@
     "version": "v4.100.2",
     "date": "2025-05-15T23:02:46Z"
   },
-  {
-    "name": "goauthentik/authentik",
-    "version": "version/2025.4.1",
-    "date": "2025-05-15T17:48:29Z"
-  },
   {
     "name": "cloudflare/cloudflared",
     "version": "2025.5.0",
@@ -514,11 +564,6 @@
     "version": "v3.1.1",
     "date": "2025-05-15T15:17:57Z"
   },
-  {
-    "name": "FlowiseAI/Flowise",
-    "version": "flowise@3.0.0",
-    "date": "2025-05-15T01:49:47Z"
-  },
   {
     "name": "Ombi-app/Ombi",
     "version": "v4.47.1",
@@ -534,11 +579,6 @@
     "version": "0.42.1",
     "date": "2020-06-07T07:27:04Z"
   },
-  {
-    "name": "blakeblackshear/frigate",
-    "version": "v0.14.1",
-    "date": "2024-08-29T22:32:51Z"
-  },
   {
     "name": "TandoorRecipes/recipes",
     "version": "2.0.0-alpha-4",
@@ -564,11 +604,6 @@
     "version": "v2025-05-11",
     "date": "2025-05-12T19:14:57Z"
   },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.1.0.118-2.1.0.118_canary_2025-05-12",
-    "date": "2025-05-12T18:50:44Z"
-  },
   {
     "name": "usememos/memos",
     "version": "v0.24.3",
@@ -659,11 +694,6 @@
     "version": "3.5.0",
     "date": "2025-05-05T16:28:24Z"
   },
-  {
-    "name": "moghtech/komodo",
-    "version": "v1.17.5",
-    "date": "2025-05-04T22:17:06Z"
-  },
   {
     "name": "Readarr/Readarr",
     "version": "v2.0.0.4645",
@@ -694,11 +724,6 @@
     "version": "v3.5.4",
     "date": "2025-05-02T13:42:06Z"
   },
-  {
-    "name": "Koenkk/zigbee2mqtt",
-    "version": "2.3.0",
-    "date": "2025-05-01T18:24:31Z"
-  },
   {
     "name": "WordPress/WordPress",
     "version": "6.8.1",
@@ -719,11 +744,6 @@
     "version": "2025.3",
     "date": "2025-04-30T02:52:28Z"
   },
-  {
-    "name": "gristlabs/grist-core",
-    "version": "v1.5.2",
-    "date": "2025-04-29T20:42:32Z"
-  },
   {
     "name": "hargata/lubelog",
     "version": "v1.4.7",
@@ -739,11 +759,6 @@
     "version": "deluge-2.2.0",
     "date": "2025-04-28T21:31:06Z"
   },
-  {
-    "name": "gethomepage/homepage",
-    "version": "v1.2.0",
-    "date": "2025-04-28T17:55:01Z"
-  },
   {
     "name": "karakeep-app/karakeep",
     "version": "v0.24.1",
@@ -809,11 +824,6 @@
     "version": "v2.10.0",
     "date": "2025-04-18T20:46:28Z"
   },
-  {
-    "name": "TriliumNext/Notes",
-    "version": "v0.93.0",
-    "date": "2025-04-17T20:05:25Z"
-  },
   {
     "name": "benzino77/tasmocompiler",
     "version": "v12.6.1",
@@ -904,11 +914,6 @@
     "version": "1.5.0",
     "date": "2025-03-30T17:42:59Z"
   },
-  {
-    "name": "pi-hole/pi-hole",
-    "version": "v6.0.6",
-    "date": "2025-03-30T16:59:06Z"
-  },
   {
     "name": "aceberg/WatchYourLAN",
     "version": "2.1.2-alpine",
@@ -1214,11 +1219,6 @@
     "version": "v1.0.9",
     "date": "2024-05-21T22:15:33Z"
   },
-  {
-    "name": "binwiederhier/ntfy",
-    "version": "v2.11.0",
-    "date": "2024-05-13T20:19:54Z"
-  },
   {
     "name": "pterodactyl/wings",
     "version": "v1.11.13",

install/alpine-traefik-install.sh

@@ -24,31 +24,13 @@ msg_ok "Installed Traefik"
 read -p "${TAB3}Enable Traefik WebUI (Port 8080)? [y/N]: " enable_webui
 if [[ "$enable_webui" =~ ^[Yy]$ ]]; then
   msg_info "Configuring Traefik WebUI"
-  mkdir -p /etc/traefik/config
-  cat <<EOF >/etc/traefik/traefik.yml
-entryPoints:
-  web:
-    address: ":80"
-  traefik:
-    address: ":8080"
-
-api:
-  dashboard: true
-  insecure: true
-
-log:
-  level: INFO
-
-providers:
-  file:
-    directory: /etc/traefik/config
-    watch: true
-EOF
+  sed -i 's/localhost//g' /etc/traefik/traefik.yaml
   msg_ok "Configured Traefik WebUI"
 fi
 
 msg_info "Enabling and starting Traefik service"
 $STD rc-update add traefik default
+sed -i '/^command=.*/i directory="/etc/traefik"' /etc/init.d/traefik
 $STD rc-service traefik start
 msg_ok "Traefik service started"
 

install/authentik-install.sh

@@ -1,198 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: remz1337
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://goauthentik.io/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies (Patience)"
-$STD apt-get install -y \
-  pkg-config \
-  libffi-dev \
-  build-essential \
-  libpq-dev \
-  libkrb5-dev \
-  libssl-dev \
-  libsqlite3-dev \
-  tk-dev \
-  libgdbm-dev \
-  libc6-dev \
-  libbz2-dev \
-  zlib1g-dev \
-  libxmlsec1 \
-  libxmlsec1-dev \
-  libxmlsec1-openssl \
-  libmaxminddb0 \
-  python3-pip \
-  redis-server \
-  git
-msg_ok "Installed Dependencies"
-
-setup_uv
-PG_VERSION="16" PG_MODULES="contrib" install_postgresql
-NODE_VERSION="22" install_node_and_modules
-install_go
-
-msg_info "Installing yq"
-cd /tmp
-YQ_LATEST="$(curl -fsSL https://api.github.com/repos/mikefarah/yq/releases/latest | grep -Po '"tag_name": "\K.*?(?=")')"
-curl -fsSL "https://github.com/mikefarah/yq/releases/download/${YQ_LATEST}/yq_linux_amd64" -o /usr/bin/yq
-chmod +x /usr/bin/yq
-msg_ok "Installed yq"
-
-msg_info "Installing GeoIP"
-cd /tmp
-GEOIP_RELEASE=$(curl -fsSL https://api.github.com/repos/maxmind/geoipupdate/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/maxmind/geoipupdate/releases/download/v${GEOIP_RELEASE}/geoipupdate_${GEOIP_RELEASE}_linux_amd64.deb" -o "geoipupdate.deb"
-$STD dpkg -i geoipupdate.deb
-cat <<EOF >/etc/GeoIP.conf
-#GEOIPUPDATE_EDITION_IDS="GeoLite2-City GeoLite2-ASN"
-#GEOIPUPDATE_VERBOSE="1"
-#GEOIPUPDATE_ACCOUNT_ID_FILE="/run/secrets/GEOIPUPDATE_ACCOUNT_ID"
-#GEOIPUPDATE_LICENSE_KEY_FILE="/run/secrets/GEOIPUPDATE_LICENSE_KEY"
-EOF
-msg_ok "Installed GeoIP"
-
-msg_info "Setup PostgreSQL Database"
-DB_NAME="authentik"
-DB_USER="authentik"
-DB_PASS="$(openssl rand -base64 18 | cut -c1-13)"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME;"
-$STD sudo -u postgres psql -c "CREATE USER $DB_USER WITH PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME TO $DB_USER;"
-$STD sudo -u postgres psql -c "ALTER DATABASE $DB_NAME OWNER TO $DB_USER;"
-$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
-msg_ok "Installed PostgreSQL"
-
-msg_info "Installing authentik"
-RELEASE=$(curl -fsSL https://api.github.com/repos/goauthentik/authentik/releases/latest | grep "tarball_url" | awk '{print substr($2, 2, length($2)-3)}')
-mkdir -p /opt/authentik
-curl -fsSL "${RELEASE}" -o "authentik.tar.gz"
-tar -xzf authentik.tar.gz -C /opt/authentik --strip-components 1 --overwrite
-export NODE_OPTIONS="--max-old-space-size=4096"
-cd /opt/authentik/website
-$STD npm install
-$STD npm run build-bundled
-
-cd /opt/authentik/web
-$STD npm install
-$STD npm run build
-
-cd /opt/authentik
-$STD go mod download
-$STD go build -o /go/authentik ./cmd/server
-$STD go build -o /opt/authentik/authentik-server /opt/authentik/cmd/server/
-$STD uv sync --frozen --no-install-project --no-dev
-#$STD pip3 install --no-cache-dir --upgrade pip
-#$STD pip3 install --upgrade pip
-#$STD pip3 install poetry poetry-plugin-export
-
-#ln -s /usr/local/bin/poetry /usr/bin/poetry
-#$STD poetry install --only=main --no-ansi --no-interaction --no-root
-#$STD poetry export --without-hashes --without-urls -f requirements.txt --output requirements.txt
-#$STD pip install --no-cache-dir -r requirements.txt
-#$STD pip install .
-mkdir -p /etc/authentik
-mv /opt/authentik/authentik/lib/default.yml /etc/authentik/config.yml
-$STD yq -i ".secret_key = \"$(openssl rand -hex 32)\"" /etc/authentik/config.yml
-$STD yq -i ".postgresql.password = \"${DB_PASS}\"" /etc/authentik/config.yml
-$STD yq -i ".geoip = \"/opt/authentik/tests/GeoLite2-City-Test.mmdb\"" /etc/authentik/config.yml
-cp -r /opt/authentik/authentik/blueprints /opt/authentik/blueprints
-$STD yq -i ".blueprints_dir = \"/opt/authentik/blueprints\"" /etc/authentik/config.yml
-#ln -s /usr/bin/python3 /usr/bin/python
-#ln -s /usr/local/bin/gunicorn /usr/bin/gunicorn
-#ln -s /usr/local/bin/celery /usr/bin/celery
-#$STD bash /opt/authentik/lifecycle/ak migrate
-cd /opt/authentik
-uv run python -m lifecycle.migrate
-ln -s /opt/authentik/.venv/bin/gunicorn /usr/local/bin/gunicorn
-ln -s /opt/authentik/.venv/bin/celery /usr/local/bin/celery
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
-msg_ok "Installed authentik"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/authentik-server.service
-[Unit]
-Description=authentik Go Server (API Gateway)
-After=network.target
-Wants=redis.service postgresql.service
-
-[Service]
-WorkingDirectory=/opt/authentik/
-ExecStart=/opt/authentik/authentik-server
-Restart=always
-RestartSec=5
-Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/authentik-worker.service
-[Unit]
-Description=authentik Celery Worker
-After=network.target redis.service postgresql.service
-Requires=redis.service
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/authentik
-ExecStart=/opt/authentik/.venv/bin/celery \
-  -A authentik.root.celery worker \
-  -Ofair \
-  --max-tasks-per-child=1 \
-  --autoscale 3,1 \
-  -Q authentik,authentik_scheduled,authentik_events \
-  -E
-Restart=always
-RestartSec=5
-Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/authentik-celery-beat.service
-[Unit]
-Description=authentik Celery Beat Scheduler
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/authentik
-ExecStart=/opt/authentik/.venv/bin/celery \
-  -A authentik.root.celery beat \
-  -s /tmp/celerybeat-schedule
-Restart=always
-RestartSec=5
-#User=authentik
-Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-systemctl enable -q --now authentik-server authentik-worker authentik-celery-beat
-msg_ok "Created Services"
-
-motd_ssh
-customize
-
-msg_info "Cleaning up"
-rm -rf /tmp/Python-3.12.1
-rm -rf /tmp/Python.tgz
-rm -rf go/
-rm -rf /tmp/geoipupdate.deb
-rm -rf authentik.tar.gz
-$STD apt-get -y remove yq
-$STD apt-get -y autoremove
-$STD apt-get -y autoclean
-msg_ok "Cleaned"

install/docmost-install.sh

@@ -16,6 +16,7 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
   redis \
+  jq \
   make
 msg_ok "Installed Dependencies"
 

install/immich-install.sh

@@ -0,0 +1,459 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://immich.app
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Configuring apt and installing dependencies"
+echo "deb http://deb.debian.org/debian testing main contrib" >/etc/apt/sources.list.d/immich.list
+cat <<EOF >/etc/apt/preferences.d/immich
+Package: *
+Pin: release a=testing
+Pin-Priority: -10
+EOF
+
+$STD apt-get update
+$STD apt-get install --no-install-recommends -y \
+  git \
+  redis \
+  autoconf \
+  build-essential \
+  python3-venv \
+  python3-dev \
+  cmake \
+  jq \
+  libbrotli-dev \
+  libde265-dev \
+  libexif-dev \
+  libexpat1-dev \
+  libglib2.0-dev \
+  libgsf-1-dev \
+  libjpeg62-turbo-dev \
+  librsvg2-dev \
+  libspng-dev \
+  meson \
+  ninja-build \
+  pkg-config \
+  cpanminus \
+  libde265-0 \
+  libexif12 \
+  libexpat1 \
+  libgcc-s1 \
+  libglib2.0-0 \
+  libgomp1 \
+  libgsf-1-114 \
+  liblcms2-dev \
+  liblqr-1-0 \
+  libltdl7 \
+  libmimalloc2.0 \
+  libopenexr-dev \
+  libgif-dev \
+  libopenjp2-7 \
+  librsvg2-2 \
+  libspng0 \
+  mesa-utils \
+  mesa-va-drivers \
+  mesa-vulkan-drivers \
+  tini \
+  zlib1g
+$STD apt-get install -y \
+  libgdk-pixbuf-2.0-dev librsvg2-dev libtool
+curl -fsSL https://repo.jellyfin.org/jellyfin_team.gpg.key | gpg --dearmor -o /etc/apt/keyrings/jellyfin.gpg
+DPKG_ARCHITECTURE="$(dpkg --print-architecture)"
+export DPKG_ARCHITECTURE
+cat <<EOF >/etc/apt/sources.list.d/jellyfin.sources
+Types: deb
+URIs: https://repo.jellyfin.org/debian
+Suites: bookworm
+Components: main
+Architectures: ${DPKG_ARCHITECTURE}
+Signed-By: /etc/apt/keyrings/jellyfin.gpg
+EOF
+$STD apt-get update
+$STD apt-get install -y jellyfin-ffmpeg7
+ln -s /usr/lib/jellyfin-ffmpeg/ffmpeg /usr/bin/ffmpeg
+ln -s /usr/lib/jellyfin-ffmpeg/ffprobe /usr/bin/ffprobe
+msg_ok "Dependencies Installed"
+
+NODE_VERSION="22" install_node_and_modules
+PG_VERSION="16" install_postgresql
+
+read -r -p "Install OpenVINO dependencies for Intel HW-accelerated machine-learning? " prompt
+if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
+  msg_info "Installing OpenVINO dependencies"
+  touch ~/.openvino
+  $STD apt-get -y install --no-install-recommends ocl-icd-libopencl1
+  tmp_dir=$(mktemp -d)
+  $STD pushd "$tmp_dir"
+  curl -fsSL https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17384.11/intel-igc-core_1.0.17384.11_amd64.deb -O
+  curl -fsSL https://github.com/intel/intel-graphics-compiler/releases/download/igc-1.0.17384.11/intel-igc-opencl_1.0.17384.11_amd64.deb -O
+  curl -fsSL https://github.com/intel/compute-runtime/releases/download/24.31.30508.7/intel-opencl-icd_24.31.30508.7_amd64.deb -O
+  curl -fsSL https://github.com/intel/compute-runtime/releases/download/24.31.30508.7/libigdgmm12_22.4.1_amd64.deb -O
+  $STD dpkg -i ./*.deb
+  $STD popd
+  rm -rf "$tmp_dir"
+  dpkg -l | grep "intel-opencl-icd" | awk '{print $3}' >~/.intel_version
+  if [[ "$CTTYPE" == "0" ]]; then
+    chgrp video /dev/dri
+    chmod 755 /dev/dri
+    chmod 660 /dev/dri/*
+    $STD adduser "$(id -u -n)" video
+    $STD adduser "$(id -u -n)" render
+  fi
+  msg_ok "Installed OpenVINO dependencies"
+fi
+
+msg_info "Setting up Postgresql Database"
+$STD apt-get install postgresql-16-pgvector
+curl -fsSL https://github.com/tensorchord/VectorChord/releases/download/0.3.0/postgresql-16-vchord_0.3.0-1_amd64.deb -o vchord.deb
+$STD dpkg -i vchord.deb
+rm vchord.deb
+DB_NAME="immich"
+DB_USER="immich"
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c18)
+sed -i -e "/^#shared_preload/s/^#//;/^shared_preload/s/''/'vchord.so'/" /etc/postgresql/16/main/postgresql.conf
+systemctl restart postgresql.service
+$STD sudo -u postgres psql -c "CREATE USER $DB_USER WITH ENCRYPTED PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME to $DB_USER;"
+$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
+{
+  echo "${APPLICATION} DB Credentials"
+  echo "Database User: $DB_USER"
+  echo "Database Password: $DB_PASS"
+  echo "Database Name: $DB_NAME"
+} >>~/"$APPLICATION".creds
+msg_ok "Set up Postgresql Database"
+
+msg_info "Installing Packages from Testing Repo"
+export APT_LISTCHANGES_FRONTEND=none
+export DEBIAN_FRONTEND=noninteractive
+$STD apt-get install -t testing --no-install-recommends -y \
+  libio-compress-brotli-perl \
+  libwebp7 \
+  libwebpdemux2 \
+  libwebpmux3 \
+  libhwy1t64 \
+  libdav1d-dev \
+  libhwy-dev \
+  libwebp-dev
+if [[ -f ~/.openvino ]]; then
+  $STD apt-get install -t testing -y patchelf
+fi
+msg_ok "Packages from Testing Repo Installed"
+
+# Fix default DB collation issue after libc update
+$STD sudo -u postgres psql -c "ALTER DATABASE postgres REFRESH COLLATION VERSION;"
+$STD sudo -u postgres psql -c "ALTER DATABASE $DB_NAME REFRESH COLLATION VERSION;"
+
+msg_info "Compiling Custom Photo-processing Library (extreme patience)"
+LD_LIBRARY_PATH=/usr/local/lib
+export LD_RUN_PATH=/usr/local/lib
+STAGING_DIR=/opt/staging
+BASE_REPO="https://github.com/immich-app/base-images"
+BASE_DIR=${STAGING_DIR}/base-images
+SOURCE_DIR=${STAGING_DIR}/image-source
+$STD git clone -b main "$BASE_REPO" "$BASE_DIR"
+mkdir -p "$SOURCE_DIR"
+
+cd "$STAGING_DIR"
+SOURCE=${SOURCE_DIR}/libjxl
+JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
+JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
+: "${LIBJXL_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libjxl.json)}"
+$STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
+cd "$SOURCE"
+$STD git reset --hard "$LIBJXL_REVISION"
+$STD git submodule update --init --recursive --depth 1 --recommend-shallow
+$STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-empty-dht-marker.patch
+$STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-icc-warning.patch
+mkdir build
+cd build
+$STD cmake \
+  -DCMAKE_BUILD_TYPE=Release \
+  -DBUILD_TESTING=OFF \
+  -DJPEGXL_ENABLE_DOXYGEN=OFF \
+  -DJPEGXL_ENABLE_MANPAGES=OFF \
+  -DJPEGXL_ENABLE_PLUGIN_GIMP210=OFF \
+  -DJPEGXL_ENABLE_BENCHMARK=OFF \
+  -DJPEGXL_ENABLE_EXAMPLES=OFF \
+  -DJPEGXL_FORCE_SYSTEM_BROTLI=ON \
+  -DJPEGXL_FORCE_SYSTEM_HWY=ON \
+  -DJPEGXL_ENABLE_JPEGLI=ON \
+  -DJPEGXL_ENABLE_JPEGLI_LIBJPEG=ON \
+  -DJPEGXL_INSTALL_JPEGLI_LIBJPEG=ON \
+  -DJPEGXL_ENABLE_PLUGINS=ON \
+  -DJPEGLI_LIBJPEG_LIBRARY_SOVERSION="$JPEGLI_LIBJPEG_LIBRARY_SOVERSION" \
+  -DJPEGLI_LIBJPEG_LIBRARY_VERSION="$JPEGLI_LIBJPEG_LIBRARY_VERSION" \
+  -DLIBJPEG_TURBO_VERSION_NUMBER=2001005 \
+  ..
+$STD cmake --build . -- -j"$(nproc)"
+$STD cmake --install .
+ldconfig /usr/local/lib
+$STD make clean
+cd "$STAGING_DIR"
+rm -rf "$SOURCE"/{build,third_party}
+
+SOURCE=${SOURCE_DIR}/libheif
+: "${LIBHEIF_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libheif.json)}"
+$STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
+cd "$SOURCE"
+$STD git reset --hard "$LIBHEIF_REVISION"
+mkdir build
+cd build
+$STD cmake --preset=release-noplugins \
+  -DWITH_DAV1D=ON \
+  -DENABLE_PARALLEL_TILE_DECODING=ON \
+  -DWITH_LIBSHARPYUV=ON \
+  -DWITH_LIBDE265=ON \
+  -DWITH_AOM_DECODER=OFF \
+  -DWITH_AOM_ENCODER=OFF \
+  -DWITH_X265=OFF \
+  -DWITH_EXAMPLES=OFF \
+  ..
+$STD make install -j "$(nproc)"
+ldconfig /usr/local/lib
+$STD make clean
+cd "$STAGING_DIR"
+rm -rf "$SOURCE"/build
+
+SOURCE=${SOURCE_DIR}/libraw
+: "${LIBRAW_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libraw.json)}"
+$STD git clone https://github.com/libraw/libraw.git "$SOURCE"
+cd "$SOURCE"
+$STD git reset --hard "$LIBRAW_REVISION"
+$STD autoreconf --install
+$STD ./configure
+$STD make -j"$(nproc)"
+$STD make install
+ldconfig /usr/local/lib
+$STD make clean
+cd "$STAGING_DIR"
+
+SOURCE=$SOURCE_DIR/imagemagick
+: "${IMAGEMAGICK_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/imagemagick.json)}"
+$STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
+cd "$SOURCE"
+$STD git reset --hard "$IMAGEMAGICK_REVISION"
+$STD ./configure --with-modules
+$STD make -j"$(nproc)"
+$STD make install
+ldconfig /usr/local/lib
+$STD make clean
+cd "$STAGING_DIR"
+
+SOURCE=$SOURCE_DIR/libvips
+: "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
+$STD git clone https://github.com/libvips/libvips.git "$SOURCE"
+cd "$SOURCE"
+$STD git reset --hard "$LIBVIPS_REVISION"
+$STD meson setup build --buildtype=release --libdir=lib -Dintrospection=disabled -Dtiff=disabled
+cd build
+$STD ninja install
+ldconfig /usr/local/lib
+cd "$STAGING_DIR"
+rm -rf "$SOURCE"/build
+{
+  echo "imagemagick: $IMAGEMAGICK_REVISION"
+  echo "libheif: $LIBHEIF_REVISION"
+  echo "libjxl: $LIBJXL_REVISION"
+  echo "libraw: $LIBRAW_REVISION"
+  echo "libvips: $LIBVIPS_REVISION"
+} >~/.immich_library_revisions
+msg_ok "Custom Photo-processing Library Compiled"
+
+msg_info "Installing ${APPLICATION} (more patience please)"
+tmp_file=$(mktemp)
+RELEASE=$(curl -s https://api.github.com/repos/immich-app/immich/releases?per_page=1 | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+curl -fsSL "https://github.com/immich-app/immich/archive/refs/tags/v${RELEASE}.zip" -o "$tmp_file"
+unzip -q "$tmp_file"
+INSTALL_DIR="/opt/${APPLICATION}"
+UPLOAD_DIR="${INSTALL_DIR}/upload"
+SRC_DIR="${INSTALL_DIR}/source"
+APP_DIR="${INSTALL_DIR}/app"
+ML_DIR="${APP_DIR}/machine-learning"
+GEO_DIR="${INSTALL_DIR}/geodata"
+mkdir -p "$INSTALL_DIR"
+mv "$APPLICATION-$RELEASE"/ "$SRC_DIR"
+mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${ML_DIR}","${INSTALL_DIR}"/cache}
+
+cd "$SRC_DIR"/server
+$STD npm install -g node-gyp node-pre-gyp
+$STD npm ci
+$STD npm run build
+$STD npm prune --omit=dev --omit=optional
+cd "$SRC_DIR"/open-api/typescript-sdk
+$STD npm ci
+$STD npm run build
+cd "$SRC_DIR"/web
+$STD npm ci
+$STD npm run build
+cd "$SRC_DIR"
+cp -a server/{node_modules,dist,bin,resources,package.json,package-lock.json,start*.sh} "$APP_DIR"/
+cp -a web/build "$APP_DIR"/www
+cp LICENSE "$APP_DIR"
+msg_ok "Installed Immich Web Components"
+
+cd "$SRC_DIR"/machine-learning
+$STD python3 -m venv "$ML_DIR/ml-venv"
+if [[ -f ~/.openvino ]]; then
+  msg_info "Installing HW-accelerated machine-learning"
+  (
+    source "$ML_DIR"/ml-venv/bin/activate
+    $STD pip3 install uv
+    uv -q sync --extra openvino --no-cache --active
+  )
+  patchelf --clear-execstack "$ML_DIR"/ml-venv/lib/python3.11/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-311-x86_64-linux-gnu.so
+  msg_ok "Installed HW-accelerated machine-learning"
+else
+  msg_info "Installing machine-learning"
+  (
+    source "$ML_DIR"/ml-venv/bin/activate
+    $STD pip3 install uv
+    uv -q sync --extra cpu --no-cache --active
+  )
+  msg_ok "Installed machine-learning"
+fi
+cd "$SRC_DIR"
+cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
+if [[ -f ~/.openvino ]]; then
+  sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
+fi
+ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
+
+cd "$APP_DIR"
+grep -Rl /usr/src | xargs -n1 sed -i "s|\/usr/src|$INSTALL_DIR|g"
+grep -RlE "'/build'" | xargs -n1 sed -i "s|'/build'|'$APP_DIR'|g"
+sed -i "s@\"/cache\"@\"$INSTALL_DIR/cache\"@g" "$ML_DIR"/immich_ml/config.py
+ln -s "$UPLOAD_DIR" "$APP_DIR"/upload
+ln -s "$UPLOAD_DIR" "$ML_DIR"/upload
+
+msg_info "Installing Immich CLI"
+$STD npm install --build-from-source sharp
+rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
+$STD npm i -g @immich/cli
+msg_ok "Installed Immich CLI"
+
+msg_info "Installing GeoNames data"
+cd "$GEO_DIR"
+URL_LIST=(
+  https://download.geonames.org/export/dump/admin1CodesASCII.txt
+  https://download.geonames.org/export/dump/admin2Codes.txt
+  https://download.geonames.org/export/dump/cities500.zip
+  https://raw.githubusercontent.com/nvkelso/natural-earth-vector/v5.1.2/geojson/ne_10m_admin_0_countries.geojson
+)
+echo "${URL_LIST[@]}" | xargs -n1 -P 8 wget -q
+unzip -q cities500.zip
+date --iso-8601=seconds | tr -d "\n" >geodata-date.txt
+rm cities500.zip
+cd "$INSTALL_DIR"
+ln -s "$GEO_DIR" "$APP_DIR"
+msg_ok "Installed GeoNames data"
+
+mkdir -p /var/log/immich
+touch /var/log/immich/{web.log,ml.log}
+echo "$RELEASE" >/opt/"${APPLICATION}"_version.txt
+msg_ok "Installed ${APPLICATION}"
+
+msg_info "Creating user, env file, scripts & services"
+$STD useradd -U -s /usr/sbin/nologin -r -M -d "$INSTALL_DIR" immich
+if [[ -f ~/.openvino ]]; then
+  usermod -aG video,render immich
+fi
+cat <<EOF >"${INSTALL_DIR}"/.env
+TZ=$(cat /etc/timezone)
+IMMICH_VERSION=release
+NODE_ENV=production
+
+DB_HOSTNAME=127.0.0.1
+DB_USERNAME=${DB_USER}
+DB_PASSWORD=${DB_PASS}
+DB_DATABASE_NAME=${DB_NAME}
+DB_VECTOR_EXTENSION=vectorchord
+
+REDIS_HOSTNAME=127.0.0.1
+IMMICH_MACHINE_LEARNING_URL=http://127.0.0.1:3003
+MACHINE_LEARNING_CACHE_FOLDER=${INSTALL_DIR}/cache
+
+IMMICH_MEDIA_LOCATION=${UPLOAD_DIR}
+EOF
+cat <<EOF >"${ML_DIR}"/ml_start.sh
+#!/usr/bin/env bash
+
+cd ${ML_DIR}
+. ml-venv/bin/activate
+
+set -a
+. ${INSTALL_DIR}/.env
+set +a
+
+python -m immich_ml
+EOF
+chmod +x "$ML_DIR"/ml_start.sh
+cat <<EOF >/etc/systemd/system/"${APPLICATION}"-web.service
+[Unit]
+Description=${APPLICATION} Web Service
+After=network.target
+Requires=redis-server.service
+Requires=postgresql.service
+Requires=immich-ml.service
+
+[Service]
+Type=simple
+User=immich
+Group=immich
+UMask=0077
+WorkingDirectory=${APP_DIR}
+EnvironmentFile=${INSTALL_DIR}/.env
+ExecStart=/usr/bin/node ${APP_DIR}/dist/main
+Restart=on-failure
+SyslogIdentifier=immich-web
+StandardOutput=append:/var/log/immich/web.log
+StandardError=append:/var/log/immich/web.log
+
+[Install]
+WantedBy=multi-user.target
+EOF
+cat <<EOF >/etc/systemd/system/"${APPLICATION}"-ml.service
+[Unit]
+Description=${APPLICATION} Machine-Learning
+After=network.target
+
+[Service]
+Type=simple
+UMask=0077
+User=immich
+Group=immich
+WorkingDirectory=${APP_DIR}
+EnvironmentFile=${INSTALL_DIR}/.env
+ExecStart=${ML_DIR}/ml_start.sh
+Restart=on-failure
+SyslogIdentifier=immich-machine-learning
+StandardOutput=append:/var/log/immich/ml.log
+StandardError=append:/var/log/immich/ml.log
+
+[Install]
+WantedBy=multi-user.target
+EOF
+chown -R immich:immich "$INSTALL_DIR" /var/log/immich
+systemctl enable -q --now "$APPLICATION"-ml.service "$APPLICATION"-web.service
+msg_ok "Created user, env file, scripts and services"
+
+sed -i "$ a VERSION_ID=12" /etc/os-release # otherwise the motd_ssh function will fail
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+rm -f "$tmp_file"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/monica-install.sh

@@ -22,7 +22,7 @@ $STD apt-get install -y \
 msg_ok "Installed Dependencies"
 
 install_mariadb
-NODE_VERSION="22" NODE_MODULE="yarn@latest" install_node_and_modules
+NODE_VERSION="20" NODE_MODULE="yarn@latest" install_node_and_modules
 
 msg_info "Setting up MariaDB"
 DB_NAME=monica

install/mysql-install.sh

@@ -43,7 +43,7 @@ msg_ok "Installed MySQL"
 
 msg_info "Configure MySQL Server"
 ADMIN_PASS="$(openssl rand -base64 18 | cut -c1-13)"
-$STD mariadb -uroot -p"$ADMIN_PASS" -e "ALTER USER 'root'@'localhost' IDENTIFIED WITH $RELEASE_AUTH BY '$ADMIN_PASS'; FLUSH PRIVILEGES;"
+$STD mysql -uroot -p"$ADMIN_PASS" -e "ALTER USER 'root'@'localhost' IDENTIFIED WITH $RELEASE_AUTH BY '$ADMIN_PASS'; FLUSH PRIVILEGES;"
 echo "" >~/mysql.creds
 echo -e "MySQL user: root" >>~/mysql.creds
 echo -e "MySQL password: $ADMIN_PASS" >>~/mysql.creds

install/omada-install.sh

@@ -36,7 +36,7 @@ msg_ok "Installed Azul Zulu Java"
 
 msg_info "Installing libssl (if needed)"
 if ! dpkg -l | grep -q 'libssl1.1'; then
-  curl -fsSL "https://security.debian.org/debian-security/pool/updates/main/o/openssl/libssl1.1_1.1.1w-0+deb11u2_amd64.deb" -o "/tmp/libssl.deb"
+  curl -fsSL "https://security.debian.org/debian-security/pool/updates/main/o/openssl/libssl1.1_1.1.1w-0+deb11u3_amd64.deb" -o "/tmp/libssl.deb"
   $STD dpkg -i /tmp/libssl.deb
   rm -f /tmp/libssl.deb
   msg_ok "Installed libssl1.1"

install/pulse-install.sh

@@ -34,7 +34,7 @@ RELEASE=$(curl -fsSL https://api.github.com/repos/rcourtman/Pulse/releases/lates
 temp_file=$(mktemp)
 mkdir -p /opt/pulse-proxmox
 curl -fsSL "https://github.com/rcourtman/Pulse/releases/download/v${RELEASE}/pulse-v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/pulse-proxmox 2> >(grep -v 'LIBARCHIVE.xattr.com.apple.provenance' >&2)
+tar zxf "$temp_file" --strip-components=1 -C /opt/pulse-proxmox
 echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Pulse"
 

install/searxng-install.sh

@@ -54,7 +54,7 @@ server:
   bind_address: "0.0.0.0"
   port: 8888
   secret_key: "${SECRET_KEY}"
-  limiter: true
+  limiter: false
   image_proxy: true
 redis:
   url: "redis://127.0.0.1:6379/0"

install/silverbullet-install.sh

@@ -16,7 +16,8 @@ update_os
 msg_info "Installing Silverbullet"
 RELEASE=$(curl -fsSL https://api.github.com/repos/silverbulletmd/silverbullet/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
 mkdir -p /opt/silverbullet/bin /opt/silverbullet/space
-curl -fsSL "https://github.com/silverbulletmd/silverbullet/releases/download/${RELEASE}/silverbullet-server-linux-x86_64.zip" -o "/opt/silverbullet/bin/silverbullet-server-linux-x86_64.zip"
+cd /opt
+curl -fsSL "https://github.com/silverbulletmd/silverbullet/releases/download/${RELEASE}/silverbullet-server-linux-x86_64.zip" -o "silverbullet-server-linux-x86_64.zip"
 $STD unzip -o -d /opt/silverbullet/bin/ silverbullet-server-linux-x86_64.zip
 chmod +x /opt/silverbullet/bin/silverbullet
 echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
@@ -46,7 +47,7 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf silverbullet-server-linux-x86_64.zip
+rm -rf /opt/silverbullet-server-linux-x86_64.zip
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/slskd-install.sh

@@ -35,7 +35,7 @@ sed -i \
     s|0.0.0.0/0,::/0|& # Replace this with your subnet|" \
   -e "\|soulseek|,\|write_queue|s|^#||" \
   -e "\|jwt:|,\|ttl|s|key: ~|key: $JWT_KEY|" \
-  -e "s|^  picture|#  picture|" \
+  -e "s|^   picture|#   picture|" \
   /opt/${APPLICATION}/config/slskd.yml
 msg_ok "Setup ${APPLICATION}"
 

vm/docker-vm.sh

@@ -22,10 +22,10 @@ echo -e "\n Loading..."
 GEN_MAC=02:$(openssl rand -hex 5 | awk '{print toupper($0)}' | sed 's/\(..\)/\1:/g; s/.$//')
 RANDOM_UUID="$(cat /proc/sys/kernel/random/uuid)"
 METHOD=""
-NSAPP="debian12vm"
+NSAPP="docker-vm"
 var_os="debian"
 var_version="12"
-DISK_SIZE="8G"
+DISK_SIZE="10G"
 
 YW=$(echo "\033[33m")
 BL=$(echo "\033[36m")
@@ -107,7 +107,7 @@ function cleanup() {
 
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
-if whiptail --backtitle "Proxmox VE Helper Scripts" --title "Debian 12 VM" --yesno "This will create a New Debian 12 VM. Proceed?" 10 58; then
+if whiptail --backtitle "Proxmox VE Helper Scripts" --title "Docker VM" --yesno "This will create a New Docker VM. Proceed?" 10 58; then
   :
 else
   header_info && echo -e "${CROSS}${RD}User exited script${CL}\n" && exit
@@ -206,7 +206,7 @@ function default_settings() {
   echo -e "${VLANTAG}${BOLD}${DGN}VLAN: ${BGN}Default${CL}"
   echo -e "${DEFAULT}${BOLD}${DGN}Interface MTU Size: ${BGN}Default${CL}"
   echo -e "${GATEWAY}${BOLD}${DGN}Start VM when completed: ${BGN}yes${CL}"
-  echo -e "${CREATING}${BOLD}${DGN}Creating a Debian 12 VM using the above default settings${CL}"
+  echo -e "${CREATING}${BOLD}${DGN}Creating a Docker VM using the above default settings${CL}"
 }
 
 function advanced_settings() {
@@ -276,9 +276,9 @@ function advanced_settings() {
     exit-script
   fi
 
-  if VM_NAME=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Hostname" 8 58 debian --title "HOSTNAME" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
+  if VM_NAME=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Hostname" 8 58 docker --title "HOSTNAME" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
     if [ -z $VM_NAME ]; then
-      HN="debian"
+      HN="docker"
       echo -e "${HOSTNAME}${BOLD}${DGN}Hostname: ${BGN}$HN${CL}"
     else
       HN=$(echo ${VM_NAME,,} | tr -d ' ')
@@ -382,8 +382,8 @@ function advanced_settings() {
     START_VM="no"
   fi
 
-  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create a Debian 12 VM?" --no-button Do-Over 10 58); then
-    echo -e "${CREATING}${BOLD}${DGN}Creating a Debian 12 VM using the above advanced settings${CL}"
+  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create a Docker VM?" --no-button Do-Over 10 58); then
+    echo -e "${CREATING}${BOLD}${DGN}Creating a Docker VM using the above advanced settings${CL}"
   else
     header_info
     echo -e "${ADVANCED}${BOLD}${RD}Using Advanced Settings${CL}"
@@ -468,9 +468,12 @@ for i in {0,1}; do
   eval DISK${i}_REF=${STORAGE}:${DISK_REF:-}${!disk}
 done
 
-msg_info "Installing Pre-Requisite libguestfs-tools onto Host"
-apt-get -qq update && apt-get -qq install libguestfs-tools lsb-release -y >/dev/null
-msg_ok "Installed libguestfs-tools successfully"
+if ! command -v virt-customize &>/dev/null; then
+  msg_info "Installing Pre-Requisite libguestfs-tools onto Host"
+  apt-get -qq update >/dev/null
+  apt-get -qq install libguestfs-tools lsb-release -y >/dev/null
+  msg_ok "Installed libguestfs-tools successfully"
+fi
 
 msg_info "Adding Docker and Docker Compose Plugin to Debian 12 Qcow2 Disk Image"
 virt-customize -q -a "${FILE}" --install qemu-guest-agent,apt-transport-https,ca-certificates,curl,gnupg,software-properties-common,lsb-release >/dev/null &&
@@ -478,9 +481,16 @@ virt-customize -q -a "${FILE}" --install qemu-guest-agent,apt-transport-https,ca
   virt-customize -q -a "${FILE}" --run-command "echo 'deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian bookworm stable' > /etc/apt/sources.list.d/docker.list" >/dev/null &&
   virt-customize -q -a "${FILE}" --run-command "apt-get update -qq && apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin" >/dev/null &&
   virt-customize -q -a "${FILE}" --run-command "systemctl enable docker" >/dev/null &&
+  virt-customize -q -a "${FILE}" --hostname "${HN}" >/dev/null &&
   virt-customize -q -a "${FILE}" --run-command "echo -n > /etc/machine-id" >/dev/null
 msg_ok "Added Docker and Docker Compose Plugin to Debian 12 Qcow2 Disk Image successfully"
 
+msg_info "Expanding root partition to use full disk space"
+qemu-img create -f qcow2 expanded.qcow2 ${DISK_SIZE} >/dev/null 2>&1
+virt-resize --expand /dev/sda1 ${FILE} expanded.qcow2 >/dev/null 2>&1
+mv expanded.qcow2 ${FILE} >/dev/null 2>&1
+msg_ok "Expanded image to full size"
+
 msg_info "Creating a Docker VM"
 qm create $VMID -agent 1${MACHINE} -tablet 0 -localtime 1 -bios ovmf${CPU_TYPE} -cores $CORE_COUNT -memory $RAM_SIZE \
   -name $HN -tags community-script -net0 virtio,bridge=$BRG,macaddr=$MAC$VLAN$MTU -onboot 1 -ostype l26 -scsihw virtio-scsi-pci
@@ -526,14 +536,6 @@ EOF
 )
 qm set "$VMID" -description "$DESCRIPTION" >/dev/null
 
-if [ -n "$DISK_SIZE" ]; then
-  msg_info "Resizing disk to $DISK_SIZE GB"
-  qm resize $VMID scsi0 ${DISK_SIZE} >/dev/null
-else
-  msg_info "Using default disk size of $DEFAULT_DISK_SIZE GB"
-  qm resize $VMID scsi0 ${DEFAULT_DISK_SIZE} >/dev/null
-fi
-
 msg_ok "Created a Docker VM ${CL}${BL}(${HN})"
 if [ "$START_VM" == "yes" ]; then
   msg_info "Starting Docker VM"

vm/headers/umbrel-os-vm

@@ -1,6 +0,0 @@
-   __  __          __              __   ____  _____    _    ____  ___
-  / / / /___ ___  / /_  ________  / /  / __ \/ ___/   | |  / /  |/  /
- / / / / __ `__ \/ __ \/ ___/ _ \/ /  / / / /\__ \    | | / / /|_/ / 
-/ /_/ / / / / / / /_/ / /  /  __/ /  / /_/ /___/ /    | |/ / /  / /  
-\____/_/ /_/ /_/_.___/_/   \___/_/   \____//____/     |___/_/  /_/   
-                                                                     

vm/openwrt.sh

@@ -252,7 +252,7 @@ function default_settings() {
   echo -e "${DGN}Using LAN NETMASK: ${BGN}${LAN_NETMASK}${CL}"
   echo -e "${DGN}Using Interface MTU Size: ${BGN}Default${CL}"
   echo -e "${DGN}Start VM when completed: ${BGN}yes${CL}"
-  echo -e "${BL}Creating a OpenWRT VM using the above default settings${CL}"
+  echo -e "${BL}Creating a OpenWrt VM using the above default settings${CL}"
 }
 
 function advanced_settings() {
@@ -510,7 +510,7 @@ qm set $VMID \
   -tags community-script \
   -description "<div align='center'><a href='https://Helper-Scripts.com'><img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png'/></a>
 
-  # OpenWRT
+  # OpenWrt
 
   <a href='https://ko-fi.com/D1D7EP4GF'><img src='https://img.shields.io/badge/&#x2615;-Buy me a coffee-blue' /></a>
   </div>" >/dev/null