Update CHANGELOG.md (#5992)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.github/autolabeler-config.json

@@ -4,6 +4,7 @@
       "fileStatus": "added",
       "includeGlobs": [
         "ct/**",
+        "tools/**",
         "install/**",
         "misc/**",
         "turnkey/**",
@@ -17,16 +18,13 @@
       "fileStatus": "modified",
       "includeGlobs": [
         "ct/**",
+        "tools/**",
         "install/**",
         "misc/**",
         "turnkey/**",
         "vm/**"
       ],
-      "excludeGlobs": [
-        "misc/build.func",
-        "misc/install.func",
-        "misc/api.func"
-      ]
+      "excludeGlobs": []
     }
   ],
   "delete script": [
@@ -34,6 +32,7 @@
       "fileStatus": "removed",
       "includeGlobs": [
         "ct/**",
+        "tools/**",
         "install/**",
         "misc/**",
         "turnkey/**",
@@ -46,11 +45,7 @@
     {
       "fileStatus": null,
       "includeGlobs": [
-        "*.md",
-        ".github/**",
-        "misc/*.func",
-        "misc/create_lxc.sh",
-        "api/**"
+        "*.md"
       ],
       "excludeGlobs": []
     }
@@ -62,7 +57,9 @@
         "misc/*.func",
         "misc/create_lxc.sh"
       ],
-      "excludeGlobs": []
+      "excludeGlobs": [
+        "misc/api.func"
+      ]
     }
   ],
   "website": [
@@ -71,7 +68,9 @@
       "includeGlobs": [
         "frontend/**"
       ],
-      "excludeGlobs": []
+      "excludeGlobs": [
+        "frontend/public/json/**"
+      ]
     }
   ],
   "api": [
@@ -102,22 +101,29 @@
       "excludeGlobs": []
     }
   ],
-  "high risk": [
+  "addon": [
     {
       "fileStatus": null,
       "includeGlobs": [
-        "misc/build.func",
-        "misc/install.func",
-        "misc/create_lxc.sh"
+        "tools/addon/**"
       ],
       "excludeGlobs": []
     }
   ],
-  "documentation": [
+  "pve-tool": [
     {
       "fileStatus": null,
       "includeGlobs": [
-        "*.md"
+        "tools/pve/**"
+      ],
+      "excludeGlobs": []
+    }
+  ],
+  "vm": [
+    {
+      "fileStatus": null,
+      "includeGlobs": [
+        "vm/**"
       ],
       "excludeGlobs": []
     }

.github/changelog-pr-config.json

@@ -1,112 +1,148 @@
 [
   {
     "title": "🆕 New Scripts",
-    "labels": ["new script"]
+    "labels": [
+      "new script"
+    ]
   },
   {
     "title": "🚀 Updated Scripts",
-    "labels": ["update script"],
+    "labels": [
+      "update script"
+    ],
     "subCategories": [
       {
         "title": "🐞 Bug Fixes",
-        "labels": ["bugfix"],
-        "notes" : []
+        "labels": [
+          "bugfix"
+        ],
+        "notes": []
       },
       {
         "title": "✨ New Features",
-        "labels": ["feature"],
-        "notes" : []
+        "labels": [
+          "feature"
+        ],
+        "notes": []
       },
       {
         "title": "💥 Breaking Changes",
-        "labels": ["breaking change"],
-        "notes" : []
+        "labels": [
+          "breaking change"
+        ],
+        "notes": []
       },
       {
         "title": "🔧 Refactor",
-        "labels": ["refactor"],
-        "notes" : []
+        "labels": [
+          "refactor"
+        ],
+        "notes": []
       }
     ]
   },
   {
     "title": "🧰 Maintenance",
-    "labels": ["maintenance"],
+    "labels": [
+      "maintenance"
+    ],
     "subCategories": [
       {
         "title": "🐞 Bug Fixes",
-        "labels": ["bugfix"],
-        "notes" : []
+        "labels": [
+          "bugfix"
+        ],
+        "notes": []
       },
       {
         "title": "✨ New Features",
-        "labels": ["feature"],
-        "notes" : []
+        "labels": [
+          "feature"
+        ],
+        "notes": []
       },
       {
         "title": "💥 Breaking Changes",
-        "labels": ["breaking change"],
-        "notes" : []
+        "labels": [
+          "breaking change"
+        ],
+        "notes": []
       },
       {
         "title": "📡 API",
-        "labels": ["api"],
-        "notes" : []
+        "labels": [
+          "api"
+        ],
+        "notes": []
       },
       {
         "title": "💾 Core",
-        "labels": ["core"],
-        "notes" : []
+        "labels": [
+          "core"
+        ],
+        "notes": []
       },
       {
         "title": "📂 Github",
-        "labels": ["github"],
-        "notes" : []
+        "labels": [
+          "github"
+        ],
+        "notes": []
       },
       {
-        "title" :"📝 Documentation",
-        "labels": ["documentation"],
-        "notes" : []
+        "title": "📝 Documentation",
+        "labels": [
+          "maintenance"
+        ],
+        "notes": []
       },
       {
-        "title" :"🔧 Refactor",
-        "labels": ["refactor"],
-        "notes" : []
+        "title": "🔧 Refactor",
+        "labels": [
+          "refactor"
+        ],
+        "notes": []
       }
     ]
   },
   {
     "title": "🌐 Website",
-    "labels": ["website"],
+    "labels": [
+      "website"
+    ],
     "subCategories": [
       {
         "title": "🐞 Bug Fixes",
-        "labels": ["bugfix"],
-        "notes" : []
+        "labels": [
+          "bugfix"
+        ],
+        "notes": []
       },
       {
         "title": "✨ New Features",
-        "labels": ["feature"],
-        "notes" : []
+        "labels": [
+          "feature"
+        ],
+        "notes": []
       },
       {
         "title": "💥 Breaking Changes",
-        "labels": ["breaking change"],
-        "notes" : []
+        "labels": [
+          "breaking change"
+        ],
+        "notes": []
       },
       {
         "title": "📝 Script Information",
-        "labels": ["json"],
-        "notes" : []
+        "labels": [
+          "json"
+        ],
+        "notes": []
       }
     ]
   },
   {
     "title": "❔ Unlabelled",
     "labels": []
-  },
-  {
-    "title": "💥 Breaking Changes",
-    "labels": ["breaking change"]
   }
 ]

.github/workflows/auto-update-app-headers.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   update-app-files:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
 
     permissions:
       contents: write

.github/workflows/autolabeler.yml

@@ -1,6 +1,7 @@
 name: Auto Label Pull Requests
 
 on:
+  workflow_dispatch:
   pull_request_target:
     branches: ["main"]
     types: [opened, synchronize, reopened, edited]
@@ -8,7 +9,7 @@ on:
 jobs:
   autolabeler:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
     permissions:
       pull-requests: write
     env:
@@ -19,7 +20,7 @@ jobs:
 
       - name: Install dependencies
         run: npm install minimatch
-      
+
       - name: Label PR based on file changes and PR template
         uses: actions/github-script@v7
         with:
@@ -33,7 +34,7 @@ jobs:
             const autolabelerConfig = JSON.parse(fileContent);
 
             const prNumber = context.payload.pull_request.number;
-            const prBody = context.payload.pull_request.body.toLowerCase();
+            const prBody = context.payload.pull_request.body || "";
 
             let labelsToAdd = new Set();
 
@@ -43,51 +44,67 @@ jobs:
               pull_number: prNumber,
             });
             const prFiles = prListFilesResponse.data;
-           
 
-          
-            // Apply labels based on file changes
             for (const [label, rules] of Object.entries(autolabelerConfig)) {
               const shouldAddLabel = prFiles.some((prFile) => {
                 return rules.some((rule) => {
                   const isFileStatusMatch = rule.fileStatus ? rule.fileStatus === prFile.status : true;
                   const isIncludeGlobMatch = rule.includeGlobs.some((glob) => minimatch(prFile.filename, glob));
                   const isExcludeGlobMatch = rule.excludeGlobs.some((glob) => minimatch(prFile.filename, glob));
-
                   return isFileStatusMatch && isIncludeGlobMatch && !isExcludeGlobMatch;
                 });
               });
 
               if (shouldAddLabel) {
                 labelsToAdd.add(label);
-              }
-            }
-            //if two labels or more are added, return
-              if (labelsToAdd.size < 2) {
-                const templateLabelMappings = {
-                "🐞 **Bug fix**": "bugfix",
-                "✨ **New feature**": "feature",
-                "💥 **Breaking change**": "breaking change",
-                "🔧 **Refactoring / Code Cleanup**": "refactor",
-              };
-
-              for (const [checkbox, label] of Object.entries(templateLabelMappings)) {
-                const escapedCheckbox = checkbox.replace(/([.*+?^=!:${}()|\[\]\/\\])/g, "\\$1");
-                const regex = new RegExp(`- \\[(x|X)\\]\\s*.*${escapedCheckbox}`, "i");
-                const match = prBody.match(regex);              
-                if (match) {
-                  console.log(`Match: ${match}`);
-                  labelsToAdd.add(label);
+                if (label === "update script") {
+                  for (const prFile of prFiles) {
+                    const filename = prFile.filename;
+                    if (filename.startsWith("vm/")) labelsToAdd.add("vm");
+                    if (filename.startsWith("tools/addon/")) labelsToAdd.add("addon");
+                    if (filename.startsWith("tools/pve/")) labelsToAdd.add("pve-tool");
+                  }
                 }
               }
             }
 
-            
-            
-            console.log(`Labels to add: ${Array.from(labelsToAdd).join(", ")}`);
+            if (labelsToAdd.size < 2) {
+              const templateLabelMappings = {
+                "🐞 **Bug fix**": "bugfix",
+                "✨ **New feature**": "feature",
+                "💥 **Breaking change**": "breaking change",
+                "🆕 **New script**": "new script",
+                "🌍 **Website update**": "website", // handled special
+                "🔧 **Refactoring / Code Cleanup**": "refactor",
+                "📝 **Documentation update**": "documentation" // mapped to maintenance
+              };
+
+              for (const [checkbox, label] of Object.entries(templateLabelMappings)) {
+                const escapedCheckbox = checkbox.replace(/([.*+?^=!:${}()|[\]\/\\])/g, "\\$1");
+                const regex = new RegExp(`- \\[(x|X)\\]\\s*${escapedCheckbox}`, "i");
+
+                if (regex.test(prBody)) {
+                  if (label === "website") {
+                    const hasJson = prFiles.some((f) => f.filename.startsWith("frontend/public/json/"));
+                    const hasUpdateScript = labelsToAdd.has("update script");
+                    const hasContentLabel = ["bugfix", "feature", "refactor"].some((l) => labelsToAdd.has(l));
+
+                    if (!(hasUpdateScript && hasContentLabel)) {
+                      labelsToAdd.add(hasJson ? "json" : "website");
+                    }
+                  } else if (label === "documentation") {
+                    labelsToAdd.add("maintenance");
+                  } else {
+                    labelsToAdd.add(label);
+                  }
+                }
+              }
+            }
+            if (labelsToAdd.size === 0) {
+              labelsToAdd.add("needs triage");
+            }
 
             if (labelsToAdd.size > 0) {
-              console.log(`Adding labels ${Array.from(labelsToAdd).join(", ")} to PR ${prNumber}`);
               await github.rest.issues.addLabels({
                 owner: context.repo.owner,
                 repo: context.repo.repo,

.github/workflows/changelog-pr.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   update-changelog-pull-request:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
     env:
       CONFIG_PATH: .github/changelog-pr-config.json
       BRANCH_NAME: github-action-update-changelog
@@ -80,7 +80,7 @@ jobs:
                     { title: "💥 Breaking Changes", labels: ["breaking change"], notes: [] },
                     { title: "📡 API", labels: ["api"], notes: [] },
                     { title: "Github", labels: ["github"], notes: [] },
-                    { title: "📝 Documentation", labels: ["documentation"], notes: [] },
+                    { title: "📝 Documentation", labels: ["maintenance"], notes: [] },
                     { title: "🔧 Refactor", labels: ["refactor"], notes: [] }
                   ] :
                   obj.labels.includes("website") ? [

.github/workflows/close-discussion.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   close-discussion:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout Repository

.github/workflows/crawl-versions.yaml

@@ -13,7 +13,7 @@ permissions:
 jobs:
   crawl-versions:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout Repository

.github/workflows/delete-json-branch.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   delete_branch:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout the code
         uses: actions/checkout@v3

.github/workflows/frontend-cicd.yml

@@ -26,7 +26,7 @@ concurrency:
 jobs:
   build:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
     defaults:
       run:
         working-directory: frontend  # Set default working directory for all run steps

.github/workflows/github-release.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   create-daily-release:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:

.github/workflows/update-json-date.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   update-app-files:
     if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
 
     permissions:
       contents: write

.github/workflows/validate-filenames.yml

@@ -11,7 +11,7 @@ jobs:
   check-files:
     if: github.repository == 'community-scripts/ProxmoxVE'
     name: Check changed files
-    runs-on: runner-cluster-htl-set
+    runs-on: ubuntu-latest
     permissions:
       pull-requests: write
 

CHANGELOG.md

@@ -10,12 +10,153 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
-> [!NOTE]
-All LXC instances created using this repository come pre-installed with Midnight Commander, which is a command-line tool (`mc`) that offers a user-friendly file and directory management interface for the terminal environment.
+## 2025-07-15
 
+## 2025-07-14
+
+### 🆕 New Scripts
+
+  - Bar Assistant ([#5977](https://github.com/community-scripts/ProxmoxVE/pull/5977))
+- Mealie ([#5968](https://github.com/community-scripts/ProxmoxVE/pull/5968))
+
+### 🚀 Updated Scripts
+
+  - Config-File: Some Addons, Bugfixes...  [@MickLesk](https://github.com/MickLesk) ([#5978](https://github.com/community-scripts/ProxmoxVE/pull/5978))
+
+  - #### 🐞 Bug Fixes
+
+    - add --break-system-packages certbot-dns-cloudflare to the nginxproxym… [@tug-benson](https://github.com/tug-benson) ([#5957](https://github.com/community-scripts/ProxmoxVE/pull/5957))
+    - Dashy: remove unbound variable (RELEASE) [@MickLesk](https://github.com/MickLesk) ([#5974](https://github.com/community-scripts/ProxmoxVE/pull/5974))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - Update nic-offloading-fix: add Intel as search Text  [@calvin-li-developer](https://github.com/calvin-li-developer) ([#5954](https://github.com/community-scripts/ProxmoxVE/pull/5954))
+
+## 2025-07-12
+
+## 2025-07-11
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - immich: hotfix #5921 [@vhsdream](https://github.com/vhsdream) ([#5938](https://github.com/community-scripts/ProxmoxVE/pull/5938))
+    - bookstack: add setup_composer in update [@MickLesk](https://github.com/MickLesk) ([#5935](https://github.com/community-scripts/ProxmoxVE/pull/5935))
+    - Quickfix: Immich: revert install sequence [@vhsdream](https://github.com/vhsdream) ([#5932](https://github.com/community-scripts/ProxmoxVE/pull/5932))
+
+  - #### ✨ New Features
+
+    - Refactor & Function Bump: Docker [@MickLesk](https://github.com/MickLesk) ([#5889](https://github.com/community-scripts/ProxmoxVE/pull/5889))
+
+  - #### 🔧 Refactor
+
+    - Immich: handle custom library dependency updates; other fixes [@vhsdream](https://github.com/vhsdream) ([#5896](https://github.com/community-scripts/ProxmoxVE/pull/5896))
+
+## 2025-07-10
+
+### 🚀 Updated Scripts
+
+  - Refactor: Habitica [@MickLesk](https://github.com/MickLesk) ([#5911](https://github.com/community-scripts/ProxmoxVE/pull/5911))
+
+  - #### 🐞 Bug Fixes
+
+    - core: fix breaking re-download of lxc containers  [@MickLesk](https://github.com/MickLesk) ([#5906](https://github.com/community-scripts/ProxmoxVE/pull/5906))
+    - PLANKA: Fix paths to application directory [@tremor021](https://github.com/tremor021) ([#5900](https://github.com/community-scripts/ProxmoxVE/pull/5900))
+
+  - #### 🔧 Refactor
+
+    - Refactor: EMQX + Update-Function + Improved NodeJS Crawling [@MickLesk](https://github.com/MickLesk) ([#5907](https://github.com/community-scripts/ProxmoxVE/pull/5907))
+
+## 2025-07-09
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Omada Update: add missing exit  [@MickLesk](https://github.com/MickLesk) ([#5894](https://github.com/community-scripts/ProxmoxVE/pull/5894))
+    - FreshRSS: fix needed php modules [@MickLesk](https://github.com/MickLesk) ([#5886](https://github.com/community-scripts/ProxmoxVE/pull/5886))
+    - core: Fix VAAPI passthrough for unprivileged LXC containers via devX  [@MickLesk](https://github.com/MickLesk) ([#5875](https://github.com/community-scripts/ProxmoxVE/pull/5875))
+    - tools.func: fix an bug while php libapache2-mod breaks [@MickLesk](https://github.com/MickLesk) ([#5857](https://github.com/community-scripts/ProxmoxVE/pull/5857))
+    - BabyBuddy: fix path issues for update [@MickLesk](https://github.com/MickLesk) ([#5856](https://github.com/community-scripts/ProxmoxVE/pull/5856))
+
+  - #### ✨ New Features
+
+    - tools.func: strip leading folders for prebuild assets [@MickLesk](https://github.com/MickLesk) ([#5865](https://github.com/community-scripts/ProxmoxVE/pull/5865))
+
+  - #### 💥 Breaking Changes
+
+    - Refactor: Stirling-PDF [@MickLesk](https://github.com/MickLesk) ([#5872](https://github.com/community-scripts/ProxmoxVE/pull/5872))
+
+  - #### 🔧 Refactor
+
+    - Refactor: EMQX [@tremor021](https://github.com/tremor021) ([#5840](https://github.com/community-scripts/ProxmoxVE/pull/5840))
+    - Refactor: Excalidraw [@tremor021](https://github.com/tremor021) ([#5841](https://github.com/community-scripts/ProxmoxVE/pull/5841))
+    - Refactor: Firefly [@tremor021](https://github.com/tremor021) ([#5844](https://github.com/community-scripts/ProxmoxVE/pull/5844))
+    - Refactor: gatus [@tremor021](https://github.com/tremor021) ([#5849](https://github.com/community-scripts/ProxmoxVE/pull/5849))
+    - Refactor: FreshRSS [@tremor021](https://github.com/tremor021) ([#5847](https://github.com/community-scripts/ProxmoxVE/pull/5847))
+    - Refactor: Fluid-Calendar [@tremor021](https://github.com/tremor021) ([#5846](https://github.com/community-scripts/ProxmoxVE/pull/5846))
+    - Refactor: Commafeed [@tremor021](https://github.com/tremor021) ([#5802](https://github.com/community-scripts/ProxmoxVE/pull/5802))
+    - Refactor: FlareSolverr [@tremor021](https://github.com/tremor021) ([#5845](https://github.com/community-scripts/ProxmoxVE/pull/5845))
+    - Refactor: Glance [@tremor021](https://github.com/tremor021) ([#5874](https://github.com/community-scripts/ProxmoxVE/pull/5874))
+    - Refactor: Gitea [@tremor021](https://github.com/tremor021) ([#5876](https://github.com/community-scripts/ProxmoxVE/pull/5876))
+    - Refactor: Ghost (use now MySQL)  [@MickLesk](https://github.com/MickLesk) ([#5871](https://github.com/community-scripts/ProxmoxVE/pull/5871))
+
+### 🧰 Maintenance
+
+  - #### 📂 Github
+
+    - Github: AutoLabler | ChangeLog (Refactor) [@MickLesk](https://github.com/MickLesk) ([#5868](https://github.com/community-scripts/ProxmoxVE/pull/5868))
+
+## 2025-07-08
+
+### 🚀 Updated Scripts
+
+  - Refactor: Emby [@tremor021](https://github.com/tremor021) ([#5839](https://github.com/community-scripts/ProxmoxVE/pull/5839))
+
+  - #### 🐞 Bug Fixes
+
+    - Ollama: fix update script [@lucacome](https://github.com/lucacome) ([#5819](https://github.com/community-scripts/ProxmoxVE/pull/5819))
+
+  - #### ✨ New Features
+
+    - tools.func: add ffmpeg + minor improvement [@MickLesk](https://github.com/MickLesk) ([#5834](https://github.com/community-scripts/ProxmoxVE/pull/5834))
+
+  - #### 🔧 Refactor
+
+    - Refactor: ErsatzTV [@MickLesk](https://github.com/MickLesk) ([#5835](https://github.com/community-scripts/ProxmoxVE/pull/5835))
 
 ## 2025-07-07
 
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Fix/stirling pdf script [@JcMinarro](https://github.com/JcMinarro) ([#5803](https://github.com/community-scripts/ProxmoxVE/pull/5803))
+    - gitea-mirror: update repo-url [@CrazyWolf13](https://github.com/CrazyWolf13) ([#5794](https://github.com/community-scripts/ProxmoxVE/pull/5794))
+    - Fix unbound var in pulse.sh [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#5807](https://github.com/community-scripts/ProxmoxVE/pull/5807))
+    - Bookstack: Fix PHP Issue & Bump to PHP 8.3 [@MickLesk](https://github.com/MickLesk) ([#5779](https://github.com/community-scripts/ProxmoxVE/pull/5779))
+
+  - #### ✨ New Features
+
+    - Refactor: Threadfin (+ updatable) [@MickLesk](https://github.com/MickLesk) ([#5783](https://github.com/community-scripts/ProxmoxVE/pull/5783))
+    - tools.func: better handling when unpacking tarfiles in prebuild mode [@MickLesk](https://github.com/MickLesk) ([#5781](https://github.com/community-scripts/ProxmoxVE/pull/5781))
+    - tools.func: add AVX check for MongoDB [@MickLesk](https://github.com/MickLesk) ([#5780](https://github.com/community-scripts/ProxmoxVE/pull/5780))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Docmost [@tremor021](https://github.com/tremor021) ([#5806](https://github.com/community-scripts/ProxmoxVE/pull/5806))
+    - Refactor: Baby Buddy [@tremor021](https://github.com/tremor021) ([#5769](https://github.com/community-scripts/ProxmoxVE/pull/5769))
+    - Refactor: Changed the way we install BunkerWeb by leveraging the brand new install-bunkerweb.sh [@TheophileDiot](https://github.com/TheophileDiot) ([#5707](https://github.com/community-scripts/ProxmoxVE/pull/5707))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - PBS: add hint for advanced installs [@MickLesk](https://github.com/MickLesk) ([#5788](https://github.com/community-scripts/ProxmoxVE/pull/5788))
+    - EMQX: Add warning to website [@tremor021](https://github.com/tremor021) ([#5770](https://github.com/community-scripts/ProxmoxVE/pull/5770))
+
 ## 2025-07-06
 
 ### 🚀 Updated Scripts

README.md

@@ -1,7 +1,7 @@
 <div align="center">
   <p align="center">
     <a href="#">
-      <img src="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo.png" height="100px" />
+      <img src="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png" height="100px" />
     </a>
   </p>
 </div>

ct/babybuddy.sh

@@ -29,7 +29,7 @@ function update_script() {
   fi
 
   RELEASE=$(curl -fsSL https://api.github.com/repos/babybuddy/babybuddy/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/babybuddy_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.babybuddy 2>/dev/null)" ]] || [[ ! -f ~/.babybuddy ]]; then
     setup_uv
 
     msg_info "Stopping Services"
@@ -38,21 +38,18 @@ function update_script() {
     msg_ok "Services Stopped"
 
     msg_info "Cleaning old files"
-    cp babybuddy/settings/production.py /tmp/production.py.bak
+    cp /opt/babybuddy/babybuddy/settings/production.py /tmp/production.py.bak
     find . -mindepth 1 -maxdepth 1 ! -name '.venv' -exec rm -rf {} +
     msg_ok "Cleaned old files"
 
+    fetch_and_deploy_gh_release "babybuddy" "babybuddy/babybuddy"
+
     msg_info "Updating ${APP} to v${RELEASE}"
-    temp_file=$(mktemp)
-    curl -fsSL "https://github.com/babybuddy/babybuddy/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-    cd /opt/babybuddy
-    tar zxf "$temp_file" --strip-components=1 -C /opt/babybuddy
-    mv /tmp/production.py.bak babybuddy/settings/production.py
     cd /opt/babybuddy
+    mv /tmp/production.py.bak /opt/babybuddy/babybuddy/settings/production.py
     source .venv/bin/activate
     $STD uv pip install -r requirements.txt
     $STD python manage.py migrate
-    echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP} to v${RELEASE}"
 
     msg_info "Fixing permissions"
@@ -66,9 +63,6 @@ function update_script() {
     systemctl start nginx
     msg_ok "Services Started"
 
-    msg_info "Cleaning up"
-    rm -f "$temp_file"
-    msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}"

ct/baikal.sh

@@ -45,6 +45,8 @@ function update_script() {
     cp -r /opt/baikal-backup/Specific/ /opt/baikal/
     chown -R www-data:www-data /opt/baikal/
     chmod -R 755 /opt/baikal/
+    cd /opt/baikal
+    $STD composer install
     msg_ok "Configured Baikal"
 
     msg_info "Starting Service"

ct/bar-assistant.sh

@@ -0,0 +1,128 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: bvdberg01 | CanbiZ
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/karlomikus/bar-assistant
+# Source: https://github.com/karlomikus/vue-salt-rim
+# Source: https://www.meilisearch.com/
+
+APP="Bar-Assistant"
+var_tags="${var_tags:-cocktails;drinks}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/bar-assistant ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  RELEASE_MEILISEARCH=$(curl -fsSL https://api.github.com/repos/meilisearch/meilisearch/releases/latest | jq -r '.tag_name | sub("^v"; "")')
+  RELEASE_BARASSISTANT=$(curl -fsSL https://api.github.com/repos/karlomikus/bar-assistant/releases/latest | jq -r '.tag_name | sub("^v"; "")')
+  RELEASE_SALTRIM=$(curl -fsSL https://api.github.com/repos/karlomikus/vue-salt-rim/releases/latest | jq -r '.tag_name | sub("^v"; "")')
+
+  if [[ "${RELEASE_BARASSISTANT}" != "$(cat ~/.bar-assistant 2>/dev/null)" ]] || [[ ! -f ~/.bar-assistant ]]; then
+    msg_info "Stopping nginx"
+    systemctl stop nginx
+    msg_ok "Stopped nginx"
+
+    msg_info "Backing up Bar Assistant"
+    mv /opt/bar-assistant /opt/bar-assistant-backup
+    msg_ok "Backed up Bar Assistant"
+
+    fetch_and_deploy_gh_release "bar-assistant" "karlomikus/bar-assistant" "tarball" "latest" "/opt/bar-assistant"
+
+    msg_info "Updating ${APP} to ${RELEASE_BARASSISTANT}"
+    cp -r /opt/bar-assistant-backup/.env /opt/bar-assistant/.env
+    cp -r /opt/bar-assistant-backup/storage/bar-assistant /opt/bar-assistant/storage/bar-assistant
+    cd /opt/bar-assistant
+    $STD composer install --no-interaction
+    $STD php artisan migrate --force
+    $STD php artisan storage:link
+    $STD php artisan bar:setup-meilisearch
+    $STD php artisan scout:sync-index-settings
+    $STD php artisan config:cache
+    $STD php artisan route:cache
+    $STD php artisan event:cache
+    chown -R www-data:www-data /opt/bar-assistant
+    msg_ok "Updated $APP to ${RELEASE_BARASSISTANT}"
+
+    msg_info "Starting nginx"
+    systemctl start nginx
+    msg_ok "Started nginx"
+
+    msg_info "Cleaning up"
+    rm -rf /opt/bar-assistant-backup
+    msg_ok "Cleaned"
+  else
+    msg_ok "No update required. ${APP} is already at ${RELEASE_BARASSISTANT}"
+  fi
+
+  if [[ "${RELEASE_SALTRIM}" != "$(cat ~/.vue-salt-rim 2>/dev/null)" ]] || [[ ! -f ~/.vue-salt-rim ]]; then
+    msg_info "Backing up Vue Salt Rim"
+    mv /opt/vue-salt-rim /opt/vue-salt-rim-backup
+    msg_ok "Backed up Vue Salt Rim"
+
+    msg_info "Stopping nginx"
+    systemctl stop nginx
+    msg_ok "Stopped nginx"
+
+    fetch_and_deploy_gh_release "vue-salt-rim" "karlomikus/vue-salt-rim" "tarball" "latest" "/opt/vue-salt-rim"
+
+    msg_info "Updating Salt Rim to ${RELEASE_SALTRIM}"
+    cp /opt/vue-salt-rim-backup/public/config.js /opt/vue-salt-rim/public/config.js
+    cd /opt/vue-salt-rim
+    $STD npm install
+    $STD npm run build
+    msg_ok "Updated $APP to ${RELEASE_SALTRIM}"
+
+    msg_info "Starting nginx"
+    systemctl start nginx
+    msg_ok "Started nginx"
+
+    msg_info "Cleaning up"
+    rm -rf /opt/vue-salt-rim-backup
+    msg_ok "Cleaned"
+    msg_ok "Updated"
+  else
+    msg_ok "No update required. Salt Rim is already at ${RELEASE_SALTRIM}"
+  fi
+
+  if [[ "${RELEASE_MEILISEARCH}" != "$(cat ~/.meilisearch 2>/dev/null)" ]] || [[ ! -f ~/.meilisearch ]]; then
+    msg_info "Stopping Meilisearch"
+    systemctl stop meilisearch
+    msg_ok "Stopped Meilisearch"
+
+    fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+
+    msg_info "Starting Meilisearch"
+    systemctl start meilisearch
+    msg_ok "Started Meilisearch"
+
+    msg_ok "Updated Meilisearch"
+  else
+    msg_ok "No update required. Meilisearch is already at ${RELEASE_MEILISEARCH}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/bookstack.sh

@@ -39,6 +39,8 @@ function update_script() {
     msg_ok "Backup finished"
 
     fetch_and_deploy_gh_release "bookstack" "BookStackApp/BookStack"
+    PHP_MODULE="ldap,tidy,bz2,mysqli" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
+    setup_composer
 
     msg_info "Restoring backup"
     cp /opt/bookstack-backup/.env /opt/bookstack/.env

ct/bunkerweb.sh

@@ -37,8 +37,8 @@ Pin: version ${RELEASE}
 Pin-Priority: 1001
 EOF
     apt-get update
-    apt-get install -y nginx=1.26.3*
-    apt-get install -y bunkerweb=${RELEASE}
+    apt-mark unhold bunkerweb nginx
+    apt-get install -y --allow-downgrades bunkerweb=${RELEASE}
     echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP} to ${RELEASE}"
 

ct/commafeed.sh

@@ -23,12 +23,13 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -d /opt/commafeed ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/Athou/commafeed/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.commafeed 2>/dev/null)" ]] || [[ ! -f ~/.commafeed ]]; then
     msg_info "Stopping ${APP}"
     systemctl stop commafeed
     msg_ok "Stopped ${APP}"
@@ -39,13 +40,15 @@ function update_script() {
       $STD apt-get install -y rsync
       msg_ok "Installed Dependencies"
     fi
-
+    if [ -d /opt/commafeed/data ] && [ "$(ls -A /opt/commafeed/data)" ]; then
+      mv /opt/commafeed/data /opt/data.bak
+    fi
+    fetch_and_deploy_gh_release "commafeed" "Athou/commafeed" "prebuild" "latest" "/opt/commafeed" "commafeed-*-h2-jvm.zip"
+    
     msg_info "Updating ${APP} to ${RELEASE}"
-    curl -fsSL "https://github.com/Athou/commafeed/releases/download/${RELEASE}/commafeed-${RELEASE}-h2-jvm.zip" -o $(basename "https://github.com/Athou/commafeed/releases/download/${RELEASE}/commafeed-${RELEASE}-h2-jvm.zip")
-    $STD unzip commafeed-"${RELEASE}"-h2-jvm.zip
-    rsync -a --exclude 'data/' commafeed-"${RELEASE}"-h2/ /opt/commafeed/
-    rm -rf commafeed-"${RELEASE}"-h2 commafeed-"${RELEASE}"-h2-jvm.zip
-    echo "${RELEASE}" >/opt/${APP}_version.txt
+    if [ -d /opt/commafeed/data.bak ] && [ "$(ls -A /opt/commafeed/data.bak)" ]; then
+      mv /opt/commafeed/data.bak /opt/commafeed/data
+    fi
     msg_ok "Updated ${APP} to ${RELEASE}"
 
     msg_info "Starting ${APP}"

ct/docker.sh

@@ -20,18 +20,68 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /var ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    msg_info "Updating ${APP} LXC"
-    $STD apt-get update
-    $STD apt-get -y upgrade
-    msg_ok "Updated ${APP} LXC"
-    exit
+  header_info
+  check_container_storage
+  check_container_resources
+
+  get_latest_release() {
+    curl -fsSL https://api.github.com/repos/"$1"/releases/latest | grep '"tag_name":' | cut -d'"' -f4
+  }
+
+  msg_info "Updating base system"
+  $STD apt-get update
+  $STD apt-get -y upgrade
+  msg_ok "Base system updated"
+
+  msg_info "Updating Docker Engine"
+  $STD apt-get install --only-upgrade -y docker-ce docker-ce-cli containerd.io
+  msg_ok "Docker Engine updated"
+
+  if [[ -f /usr/local/lib/docker/cli-plugins/docker-compose ]]; then
+    COMPOSE_BIN="/usr/local/lib/docker/cli-plugins/docker-compose"
+    COMPOSE_NEW_VERSION=$(get_latest_release "docker/compose")
+    msg_info "Updating Docker Compose to $COMPOSE_NEW_VERSION"
+    curl -fsSL "https://github.com/docker/compose/releases/download/${COMPOSE_NEW_VERSION}/docker-compose-$(uname -s)-$(uname -m)" \
+      -o "$COMPOSE_BIN"
+    chmod +x "$COMPOSE_BIN"
+    msg_ok "Docker Compose updated"
+  fi
+
+  if docker ps -a --format '{{.Names}}' | grep -q '^portainer$'; then
+    msg_info "Updating Portainer"
+    $STD docker pull portainer/portainer-ce:latest
+    $STD docker stop portainer && docker rm portainer
+    $STD docker volume create portainer_data >/dev/null 2>&1
+    $STD docker run -d \
+      -p 8000:8000 \
+      -p 9443:9443 \
+      --name=portainer \
+      --restart=always \
+      -v /var/run/docker.sock:/var/run/docker.sock \
+      -v portainer_data:/data \
+      portainer/portainer-ce:latest
+    msg_ok "Updated Portainer"
+  fi
+
+  if docker ps -a --format '{{.Names}}' | grep -q '^portainer_agent$'; then
+    msg_info "Updating Portainer Agent"
+    $STD docker pull portainer/agent:latest
+    $STD docker stop portainer_agent && docker rm portainer_agent
+    $STD docker run -d \
+      -p 9001:9001 \
+      --name=portainer_agent \
+      --restart=always \
+      -v /var/run/docker.sock:/var/run/docker.sock \
+      -v /var/lib/docker/volumes:/var/lib/docker/volumes \
+      portainer/agent
+    msg_ok "Updated Portainer Agent"
+  fi
+
+  msg_info "Cleaning up"
+  $STD apt-get -y autoremove
+  $STD apt-get -y autoclean
+  msg_ok "Cleanup complete"
+  exit
 }
 
 start
@@ -39,4 +89,4 @@ build_container
 description
 
 msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"

ct/docmost.sh

@@ -27,48 +27,35 @@ function update_script() {
     exit
   fi
   if ! command -v node >/dev/null || [[ "$(/usr/bin/env node -v | grep -oP '^v\K[0-9]+')" != "22" ]]; then
-    msg_info "Installing Node.js 22"
-    $STD apt-get purge -y nodejs
-    rm -f /etc/apt/sources.list.d/nodesource.list
-    rm -f /etc/apt/keyrings/nodesource.gpg
-    mkdir -p /etc/apt/keyrings
-    curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-    $STD apt-get update
-    $STD apt-get install -y nodejs
-    $STD npm install -g pnpm@10.4.0
-    msg_ok "Node.js 22 installed"
+    NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
   fi
   export NODE_OPTIONS="--max_old_space_size=4096"
   RELEASE=$(curl -fsSL https://api.github.com/repos/docmost/docmost/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.docmost 2>/dev/null)" ]] || [[ ! -f ~/.docmost ]]; then
     msg_info "Stopping ${APP}"
     systemctl stop docmost
     msg_ok "${APP} Stopped"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
+    msg_info "Backing up data"
     cp /opt/docmost/.env /opt/
     cp -r /opt/docmost/data /opt/
     rm -rf /opt/docmost
-    temp_file=$(mktemp)
-    curl -fsSL "https://github.com/docmost/docmost/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-    tar -xzf "$temp_file"
-    mv docmost-${RELEASE} /opt/docmost
+    msg_ok "Data backed up"
+
+    fetch_and_deploy_gh_release "docmost" "docmost/docmost"
+
+    msg_info "Updating ${APP} to v${RELEASE}"
     cd /opt/docmost
     mv /opt/.env /opt/docmost/.env
     mv /opt/data /opt/docmost/data
     $STD pnpm install --force
     $STD pnpm build
-    echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP}"
 
     msg_info "Starting ${APP}"
     systemctl start docmost
     msg_ok "Started ${APP}"
 
-    msg_info "Cleaning Up"
-    rm -f ${temp_file}
-    msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"

ct/emby.sh

@@ -23,26 +23,26 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -d /opt/emby-server ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  LATEST=$(curl -fsSL https://api.github.com/repos/MediaBrowser/Emby.Releases/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
-  msg_info "Stopping ${APP}"
-  systemctl stop emby-server
-  msg_ok "Stopped ${APP}"
+  RELEASE=$(curl -fsSL https://api.github.com/repos/MediaBrowser/Emby.Releases/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
+  if [[ "${RELEASE}" != "$(cat ~/.emby 2>/dev/null)" ]] || [[ ! -f ~/.emby ]]; then
+    msg_info "Stopping ${APP}"
+    systemctl stop emby-server
+    msg_ok "Stopped ${APP}"
 
-  msg_info "Updating ${APP}"
-  $STD curl -fsSL "https://github.com/MediaBrowser/Emby.Releases/releases/download/${LATEST}/emby-server-deb_${LATEST}_amd64.deb" -o "emby-server-deb_${LATEST}_amd64.deb"
-  $STD dpkg -i "emby-server-deb_${LATEST}_amd64.deb"
-  rm "emby-server-deb_${LATEST}_amd64.deb"
-  msg_ok "Updated ${APP}"
+    fetch_and_deploy_gh_release "emby" "MediaBrowser/Emby.Releases" "binary"
 
-  msg_info "Starting ${APP}"
-  systemctl start emby-server
-  msg_ok "Started ${APP}"
-  msg_ok "Updated Successfully"
-  exit
+    msg_info "Starting ${APP}"
+    systemctl start emby-server
+    msg_ok "Started ${APP}"
+
+    msg_ok "Updated Successfully"
+    exit
+  fi
 }
 
 start

ct/emqx.sh

@@ -20,18 +20,39 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /var ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    msg_info "Updating $APP LXC"
-    $STD apt-get update
-    $STD apt-get -y upgrade
-    msg_ok "Updated $APP LXC"
-    exit
+  header_info
+  check_container_storage
+  check_container_resources
+
+  RELEASE=$(curl -fsSL https://www.emqx.com/en/downloads/enterprise | grep -oP '/en/downloads/enterprise/v\K[0-9]+\.[0-9]+\.[0-9]+' | sort -V | tail -n1)
+  if [[ "$RELEASE" != "$(cat ~/.emqx 2>/dev/null)" ]] || [[ ! -f ~/.emqx ]]; then
+    msg_info "Stopping EMQX"
+    systemctl stop emqx
+    msg_ok "Stopped EMQX"
+
+    msg_info "Downloading EMQX v${RELEASE}"
+    DEB_FILE="/tmp/emqx-enterprise-${RELEASE}-debian12-amd64.deb"
+    curl -fsSL -o "$DEB_FILE" "https://www.emqx.com/en/downloads/enterprise/v${RELEASE}/emqx-enterprise-${RELEASE}-debian12-amd64.deb"
+    msg_ok "Downloaded EMQX"
+
+    msg_info "Installing EMQX"
+    $STD apt-get install -y "$DEB_FILE"
+    msg_ok "Installed EMQX v${RELEASE}"
+
+    msg_info "Starting EMQX"
+    systemctl start emqx
+    echo "$RELEASE" >~/.emqx
+    msg_ok "Started EMQX"
+
+    msg_info "Cleaning Up"
+    rm -f "$DEB_FILE"
+    msg_ok "Cleanup Completed"
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. EMQX is already at v${RELEASE}"
+  fi
+
+  exit
 }
 
 start
@@ -41,4 +62,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:18083${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:18083${CL}"

ct/ersatztv.sh

@@ -7,7 +7,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 
 APP="ErsatzTV"
 var_tags="${var_tags:-iptv}"
-var_cpu="${var_cpu:-1}"
+var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-5}"
 var_os="${var_os:-debian}"
@@ -27,31 +27,18 @@ function update_script() {
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/ErsatzTV/ErsatzTV/releases | grep -oP '"tag_name": "\K[^"]+' | head -n 1)
-  if [[ ! -f /opt/${APP}_version.txt && $(echo "x.x.x" >/opt/${APP}_version.txt) || "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.ersatztv 2>/dev/null)" ]] || [[ ! -f ~/.ersatztv ]]; then
     msg_info "Stopping ErsatzTV"
     systemctl stop ersatzTV
     msg_ok "Stopped ErsatzTV"
 
-    msg_info "Updating ErsatzTV"
-    cp -R /opt/ErsatzTV/ ErsatzTV-backup
-    rm ErsatzTV-backup/ErsatzTV
-    rm -rf /opt/ErsatzTV
-    temp_file=$(mktemp)
-    curl -fsSL "https://github.com/ErsatzTV/ErsatzTV/releases/download/${RELEASE}/ErsatzTV-${RELEASE}-linux-x64.tar.gz" -o "$temp_file"
-    tar -xzf "$temp_file"
-    mv ErsatzTV-${RELEASE}-linux-x64 /opt/ErsatzTV
-    cp -R ErsatzTV-backup/* /opt/ErsatzTV/
-    rm -rf ErsatzTV-backup
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated ErsatzTV"
+    FFMPEG_VERSION="latest" FFMPEG_TYPE="medium" setup_ffmpeg
+    fetch_and_deploy_gh_release "ersatztv" "ErsatzTV/ErsatzTV" "prebuild" "latest" "/opt/ErsatzTV" "*linux-x64.tar.gz"
 
     msg_info "Starting ErsatzTV"
     systemctl start ersatzTV
     msg_ok "Started ErsatzTV"
 
-    msg_info "Cleaning Up"
-    rm -f ${temp_file}
-    msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"

ct/excalidraw.sh

@@ -28,20 +28,16 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-
   RELEASE=$(curl -fsSL https://api.github.com/repos/excalidraw/excalidraw/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ "${RELEASE}" != "$(cat /opt/excalidraw_version.txt)" ]] || [[ ! -f /opt/excalidraw_version.txt ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.excalidraw 2>/dev/null)" ]] || [[ ! -f ~/.excalidraw ]]; then
     msg_info "Stopping $APP"
     systemctl stop excalidraw
     msg_ok "Stopped $APP"
 
-    msg_info "Updating $APP to v${RELEASE}"
-    cd /tmp
-    temp_file=$(mktemp)
-    curl -fsSL "https://github.com/excalidraw/excalidraw/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-    tar xzf $temp_file
     rm -rf /opt/excalidraw
-    mv excalidraw-${RELEASE} /opt/excalidraw
+    fetch_and_deploy_gh_release "excalidraw" "excalidraw/excalidraw"
+
+    msg_info "Updating $APP to v${RELEASE}"
     cd /opt/excalidraw
     $STD yarn
     msg_ok "Updated $APP to v${RELEASE}"
@@ -50,11 +46,6 @@ function update_script() {
     systemctl start excalidraw
     msg_ok "Started $APP"
 
-    msg_info "Cleaning Up"
-    rm -rf $temp_file
-    msg_ok "Cleanup Completed"
-
-    echo "${RELEASE}" >/opt/excalidraw_version.txt
     msg_ok "Update Successful"
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}"

ct/firefly.sh

@@ -29,17 +29,20 @@ function update_script() {
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/firefly-iii/firefly-iii/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.firefly 2>/dev/null)" ]] || [[ ! -f ~/.firefly ]]; then
     msg_info "Stopping Apache2"
     systemctl stop apache2
     msg_ok "Stopped Apache2"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
+    msg_info "Backing up data"
     cp /opt/firefly/.env /opt/.env
     cp -r /opt/firefly/storage /opt/storage
-    cd /opt
-    curl -fsSL "https://github.com/firefly-iii/firefly-iii/releases/download/v${RELEASE}/FireflyIII-v${RELEASE}.tar.gz" -o $(basename "https://github.com/firefly-iii/firefly-iii/releases/download/v${RELEASE}/FireflyIII-v${RELEASE}.tar.gz")
-    tar -xzf FireflyIII-v${RELEASE}.tar.gz -C /opt/firefly --exclude='storage'
+    msg_ok "Backed up data"
+
+    fetch_and_deploy_gh_release "firefly" "firefly-iii/firefly-iii" "prebuild" "latest" "/opt/firefly" "FireflyIII-*.zip"
+
+    msg_info "Updating ${APP} to v${RELEASE}"
+    rm -rf /opt/firefly/storage
     cp /opt/.env /opt/firefly/.env
     cp -r /opt/storage /opt/firefly/storage
     cd /opt/firefly
@@ -50,16 +53,12 @@ function update_script() {
     $STD php artisan view:clear
     $STD php artisan firefly-iii:upgrade-database
     $STD php artisan firefly-iii:laravel-passport-keys
-    echo "${RELEASE}" >"/opt/${APP}_version.txt"
     msg_ok "Updated ${APP} to v${RELEASE}"
 
     msg_info "Starting Apache2"
     systemctl start apache2
     msg_ok "Started Apache2"
 
-    msg_info "Cleaning up"
-    rm -rf /opt/FireflyIII-v${RELEASE}.tar.gz
-    msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}."

ct/flaresolverr.sh

@@ -23,20 +23,23 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -f /etc/systemd/system/flaresolverr.service ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  RELEASE=$(curl -fsSL https://github.com/FlareSolverr/FlareSolverr/releases/latest | grep "title>Release" | cut -d " " -f 4)
-  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
-    msg_info "Updating $APP LXC"
+  RELEASE=$(curl -fsSL https://api.github.com/repos/FlareSolverr/FlareSolverr/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
+  if [[ "${RELEASE}" != "$(cat ~/.flaresolverr 2>/dev/null)" ]] || [[ ! -f ~/.flaresolverr ]]; then
+    msg_info "Stopping service"
     systemctl stop flaresolverr
-    curl -fsSL "https://github.com/FlareSolverr/FlareSolverr/releases/download/$RELEASE/flaresolverr_linux_x64.tar.gz" -o $(basename "https://github.com/FlareSolverr/FlareSolverr/releases/download/$RELEASE/flaresolverr_linux_x64.tar.gz")
-    tar -xzf flaresolverr_linux_x64.tar.gz -C /opt
-    rm flaresolverr_linux_x64.tar.gz
+    msg_ok "Stopped service"
+
+    rm -rf /opt/flaresolverr
+    fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
+
+    msg_info "Starting service"
     systemctl start flaresolverr
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated $APP LXC"
+    msg_ok "Started service"
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"
   fi

ct/fluid-calendar.sh

@@ -20,51 +20,43 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
+  header_info
+  check_container_storage
+  check_container_resources
 
-    if [[ ! -d /opt/fluid-calendar ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    RELEASE=$(curl -fsSL https://api.github.com/repos/dotnetfactory/fluid-calendar/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-    if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
-        msg_info "Stopping $APP"
-        systemctl stop fluid-calendar.service
-        msg_ok "Stopped $APP"
-
-        msg_info "Updating $APP to v${RELEASE}"
-        cp /opt/fluid-calendar/.env /opt/fluid.env
-        rm -rf /opt/fluid-calendar
-        tmp_file=$(mktemp)
-        curl -fsSL "https://github.com/dotnetfactory/fluid-calendar/archive/refs/tags/v${RELEASE}.zip" -o "$tmp_file"
-        $STD unzip $tmp_file
-        mv ${APP}-${RELEASE}/ /opt/fluid-calendar
-        mv /opt/fluid.env /opt/fluid-calendar/.env
-        cd /opt/fluid-calendar
-        export NEXT_TELEMETRY_DISABLED=1
-        $STD npm install --legacy-peer-deps
-        $STD npm run prisma:generate
-        $STD npx prisma migrate deploy
-        $STD npm run build:os
-        msg_ok "Updated $APP to v${RELEASE}"
-
-        msg_info "Starting $APP"
-        systemctl start fluid-calendar.service
-        msg_ok "Started $APP"
-
-        msg_info "Cleaning Up"
-        rm -rf $tmp_file
-        msg_ok "Cleanup Completed"
-
-        echo "${RELEASE}" >/opt/${APP}_version.txt
-        msg_ok "Update Successful"
-    else
-        msg_ok "No update required. ${APP} is already at v${RELEASE}"
-    fi
+  if [[ ! -d /opt/fluid-calendar ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+  RELEASE=$(curl -fsSL https://api.github.com/repos/dotnetfactory/fluid-calendar/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+  if [[ "${RELEASE}" != "$(cat ~/.fluid-calendar 2>/dev/null)" ]] || [[ ! -f ~/.fluid-calendar ]]; then
+    msg_info "Stopping $APP"
+    systemctl stop fluid-calendar
+    msg_ok "Stopped $APP"
+
+    cp /opt/fluid-calendar/.env /opt/fluid.env
+    rm -rf /opt/fluid-calendar
+    fetch_and_deploy_gh_release "fluid-calendar" "dotnetfactory/fluid-calendar"
+
+    msg_info "Updating $APP to v${RELEASE}"
+    mv /opt/fluid.env /opt/fluid-calendar/.env
+    cd /opt/fluid-calendar
+    export NEXT_TELEMETRY_DISABLED=1
+    $STD npm install --legacy-peer-deps
+    $STD npm run prisma:generate
+    $STD npx prisma migrate deploy
+    $STD npm run build:os
+    msg_ok "Updated $APP to v${RELEASE}"
+
+    msg_info "Starting $APP"
+    systemctl start fluid-calendar
+    msg_ok "Started $APP"
+
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
+  exit
 }
 
 start

ct/gatus.sh

@@ -29,35 +29,29 @@ function update_script() {
     exit
   fi
   RELEASE=$(curl -s https://api.github.com/repos/TwiN/gatus/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.gatus 2>/dev/null)" ]] || [[ ! -f ~/.gatus ]]; then
     msg_info "Updating $APP"
 
     msg_info "Stopping $APP"
     systemctl stop gatus
     msg_ok "Stopped $APP"
 
-    msg_info "Updating $APP to v${RELEASE}"
     mv /opt/gatus/config/config.yaml /opt
-    rm -rf /opt/gatus/*
-    temp_file=$(mktemp)
-    curl -fsSL "https://github.com/TwiN/gatus/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-    tar zxf "$temp_file" --strip-components=1 -C /opt/gatus
+    rm -rf /opt/gatus
+    fetch_and_deploy_gh_release "gatus" "TwiN/gatus"
+
+    msg_info "Updating $APP to v${RELEASE}"
     cd /opt/gatus
     $STD go mod tidy
     CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o gatus .
     setcap CAP_NET_RAW+ep gatus
     mv /opt/config.yaml config
-    echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated $APP to v${RELEASE}"
 
     msg_info "Starting $APP"
     systemctl start gatus
     msg_ok "Started $APP"
 
-    msg_info "Cleaning Up"
-    rm -f "$temp_file"
-    msg_ok "Cleanup Completed"
-
     msg_ok "Update Successful"
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}"

ct/ghost.sh

@@ -20,26 +20,31 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    msg_info "Updating ${APP} LXC"
+  header_info
+  check_container_storage
+  check_container_resources
 
-    if command -v ghost &>/dev/null; then
-        current_version=$(ghost version | grep 'Ghost-CLI version' | awk '{print $3}')
-        latest_version=$(npm show ghost-cli version)
-        if [ "$current_version" != "$latest_version" ]; then
-            msg_info "Updating ${APP} from version v${current_version} to v${latest_version}"
-            $STD npm install -g ghost-cli@latest
-            msg_ok "Updated Successfully"
-        else
-            msg_ok "${APP} is already at v${current_version}"
-        fi
+  if ! dpkg-query -W -f='${Status}' mariadb-server 2>/dev/null | grep -q "install ok installed"; then
+    setup_mysql
+  fi
+  NODE_VERSION="22" setup_nodejs
+
+  msg_info "Updating ${APP} LXC"
+  if command -v ghost &>/dev/null; then
+    current_version=$(ghost version | grep 'Ghost-CLI version' | awk '{print $3}')
+    latest_version=$(npm show ghost-cli version)
+    if [ "$current_version" != "$latest_version" ]; then
+      msg_info "Updating ${APP} from version v${current_version} to v${latest_version}"
+      $STD npm install -g ghost-cli@latest
+      msg_ok "Updated Successfully"
     else
-        msg_error "No ${APP} Installation Found!"
-        exit
+      msg_ok "${APP} is already at v${current_version}"
     fi
+  else
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+  exit
 }
 
 start
@@ -49,4 +54,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:2368${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:2368${CL}"

ct/gitea-mirror.sh

@@ -3,7 +3,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: CrazyWolf13
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/arunavo4/gitea-mirror
+# Source: https://github.com/RayLabsHQ/gitea-mirror
 
 APP="gitea-mirror"
 var_tags="${var_tags:-mirror;gitea}"
@@ -28,7 +28,7 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/arunavo4/gitea-mirror/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+  RELEASE=$(curl -fsSL https://api.github.com/repos/RayLabsHQ/gitea-mirror/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
   if [[ "${RELEASE}" != "$(cat ~/.${APP} 2>/dev/null || cat /opt/${APP}_version.txt 2>/dev/null)" ]]; then
 
     msg_info "Stopping Services"
@@ -48,7 +48,7 @@ function update_script() {
     msg_ok "Installed Bun"
 
     rm -rf /opt/gitea-mirror
-    fetch_and_deploy_gh_release "gitea-mirror" "arunavo4/gitea-mirror"
+    fetch_and_deploy_gh_release "gitea-mirror" "RayLabsHQ/gitea-mirror"
 
     msg_info "Updating and rebuilding ${APP} to v${RELEASE}"
     cd /opt/gitea-mirror

ct/gitea.sh

@@ -20,24 +20,33 @@ color
 catch_errors
 
 function update_script() {
-   header_info
-   check_container_storage
-   check_container_resources
-   if [[ ! -f /usr/local/bin/gitea ]]; then
-      msg_error "No ${APP} Installation Found!"
-      exit
-   fi
-   RELEASE=$(curl -fsSL https://github.com/go-gitea/gitea/releases/latest | grep "title>Release" | cut -d " " -f 4 | sed 's/^v//')
-   msg_info "Updating $APP to ${RELEASE}"
-   FILENAME="gitea-$RELEASE-linux-amd64"
-   curl -fsSL "https://github.com/go-gitea/gitea/releases/download/v$RELEASE/gitea-$RELEASE-linux-amd64" -o $FILENAME
-   systemctl stop gitea
-   rm -rf /usr/local/bin/gitea
-   mv $FILENAME /usr/local/bin/gitea
-   chmod +x /usr/local/bin/gitea
-   systemctl start gitea
-   msg_ok "Updated $APP Successfully"
-   exit
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /usr/local/bin/gitea ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  RELEASE=$(curl -fsSL https://github.com/go-gitea/gitea/releases/latest | grep "title>Release" | cut -d " " -f 4 | sed 's/^v//')
+  if [[ "${RELEASE}" != "$(cat ~/.gitea 2>/dev/null)" ]] || [[ ! -f ~/.gitea ]]; then
+    msg_info "Stopping service"
+    systemctl stop gitea
+    msg_ok "Service stopped"
+
+    rm -rf /usr/local/bin/gitea
+    fetch_and_deploy_gh_release "gitea" "go-gitea/gitea" "singlefile" "latest" "/usr/local/bin" "gitea-*-linux-amd64"
+    chmod +x /usr/local/bin/gitea
+
+    msg_info "Starting service"
+    systemctl start gitea
+    msg_ok "Started service"
+
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. ${APP} is already at ${RELEASE}"
+  fi
+  exit
 }
 
 start

ct/glance.sh

@@ -28,28 +28,19 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-
   RELEASE=$(curl -fsSL https://api.github.com/repos/glanceapp/glance/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.glance 2>/dev/null)" ]] || [[ ! -f ~/.glance ]]; then
     msg_info "Stopping Service"
     systemctl stop glance
     msg_ok "Stopped Service"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
-    cd /opt
-    curl -fsSL "https://github.com/glanceapp/glance/releases/download/v${RELEASE}/glance-linux-amd64.tar.gz" -o $(basename "https://github.com/glanceapp/glance/releases/download/v${RELEASE}/glance-linux-amd64.tar.gz")
-    rm -rf /opt/glance/glance
-    tar -xzf glance-linux-amd64.tar.gz -C /opt/glance
-    echo "${RELEASE}" >"/opt/${APP}_version.txt"
-    msg_ok "Updated ${APP} to v${RELEASE}"
+    rm -f /opt/glance/glance
+    fetch_and_deploy_gh_release "glance" "glanceapp/glance" "prebuild" "latest" "/opt/glance" "glance-linux-amd64.tar.gz"
 
     msg_info "Starting Service"
     systemctl start glance
     msg_ok "Started Service"
 
-    msg_info "Cleaning up"
-    rm -rf /opt/glance-linux-amd64.tar.gz
-    msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}."

ct/habitica.sh

@@ -20,48 +20,61 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
+  header_info
+  check_container_storage
+  check_container_resources
 
-    if [[ ! -d "/opt/habitica" ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-    RELEASE=$(curl -fsSL https://api.github.com/repos/HabitRPG/habitica/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-    if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
-        msg_info "Stopping $APP"
-        systemctl stop habitica-mongodb
-        systemctl stop habitica
-        systemctl stop habitica-client
-        msg_ok "Stopped $APP"
-
-        msg_info "Updating $APP to ${RELEASE}"
-        temp_file=$(mktemp)
-curl -fsSL "https://github.com/HabitRPG/habitica/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-        tar zxf $temp_file
-        cp -rf habitica-${RELEASE}/* /opt/habitica
-        cd /opt/habitica
-        $STD npm i
-        echo "${RELEASE}" >/opt/${APP}_version.txt
-        msg_ok "Updated $APP to ${RELEASE}"
-
-        msg_info "Starting $APP"
-        systemctl start habitica-mongodb
-        systemctl start habitica
-        systemctl start habitica-client
-        msg_ok "Started $APP"
-
-        msg_info "Cleaning Up"
-        rm -f $temp_file
-        rm -rf ~/habitica-${RELEASE}
-        msg_ok "Cleanup Completed"
-
-        msg_ok "Update Successful"
-    else
-        msg_ok "No update required. ${APP} is already at ${RELEASE}"
-    fi
+  if [[ ! -d "/opt/habitica" ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+  NODE_VERSION="20" NODE_MODULE="gulp-cli,mocha" setup_nodejs
+  RELEASE=$(curl -fsSL https://api.github.com/repos/HabitRPG/habitica/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+  if [[ "${RELEASE}" != "$(cat ~/.habitica 2>/dev/null)" ]] || [[ ! -f ~/.habitica ]]; then
+
+    msg_info "Stopping $APP"
+    systemctl stop habitica-mongodb
+    systemctl stop habitica
+    systemctl stop habitica-client
+    msg_ok "Stopped $APP"
+
+    msg_info "Save configuration"
+    if [[ -f /opt/habitica/config.json ]]; then
+      cp /opt/habitica/config.json ~/config.json
+      msg_ok "Saved configuration"
+    else
+      msg_warn "No configuration file found, skipping save"
+    fi
+
+    fetch_and_deploy_gh_release "habitica" "HabitRPG/habitica" "tarball" "latest" "/opt/habitica"
+
+    msg_info "Updating $APP to ${RELEASE}"
+    cd /opt/habitica
+    $STD npm i
+    $STD npm run postinstall
+    $STD npm run client:build
+    $STD gulp build:prod
+    msg_ok "Updated $APP to ${RELEASE}"
+
+    msg_info "Restoring configuration"
+    if [[ -f ~/config.json ]]; then
+      cp ~/config.json /opt/habitica/config.json
+      msg_ok "Restored configuration"
+    else
+      msg_warn "No configuration file found to restore"
+    fi
+
+    msg_info "Starting $APP"
+    systemctl start habitica-mongodb
+    systemctl start habitica
+    systemctl start habitica-client
+    msg_ok "Started $APP"
+
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. ${APP} is already at ${RELEASE}"
+  fi
+  exit
 }
 
 start
@@ -71,4 +84,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/headers/bar-assistant

@@ -0,0 +1,6 @@
+    ____                   ___              _      __              __ 
+   / __ )____ ______      /   |  __________(_)____/ /_____ _____  / /_
+  / __  / __ `/ ___/_____/ /| | / ___/ ___/ / ___/ __/ __ `/ __ \/ __/
+ / /_/ / /_/ / /  /_____/ ___ |(__  |__  ) (__  ) /_/ /_/ / / / / /_  
+/_____/\__,_/_/        /_/  |_/____/____/_/____/\__/\__,_/_/ /_/\__/  
+                                                                      

ct/headers/mealie

@@ -0,0 +1,6 @@
+    __  ___           ___    
+   /  |/  /__  ____ _/ (_)__ 
+  / /|_/ / _ \/ __ `/ / / _ \
+ / /  / /  __/ /_/ / / /  __/
+/_/  /_/\___/\__,_/_/_/\___/ 
+                             

ct/immich.sh

@@ -51,134 +51,12 @@ function update_script() {
   fi
   if [[ -f ~/.immich_library_revisions ]]; then
     libraries=("libjxl" "libheif" "libraw" "imagemagick" "libvips")
-    readarray -d '' NEW_REVISIONS < <(for library in "${libraries[@]}"; do
-      echo "$library: $(curl -fsSL https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/sources/"$library".json | jq -cr '.revision' -)"
-    done)
-    UPDATED_REVISIONS="$(comm -13 <(sort ~/.immich_library_revisions) <(echo -n "${NEW_REVISIONS[@]}" | sort))"
-    if [[ "$UPDATED_REVISIONS" ]]; then
-      readarray -t NAMES < <(echo "$UPDATED_REVISIONS" | awk -F ':' '{print $1}')
-      rm -rf "$SOURCE_DIR"
-      mkdir -p "$SOURCE_DIR"
-      cd "$BASE_DIR"
-      $STD git pull
-      cd "$STAGING_DIR"
-      for name in "${NAMES[@]}"; do
-        if [[ "$name" == "libjxl" ]]; then
-          msg_info "Recompiling libjxl"
-          SOURCE=${SOURCE_DIR}/libjxl
-          JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
-          JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
-          : "${LIBJXL_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libjxl.json)}"
-          $STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
-          cd "$SOURCE"
-          $STD git reset --hard "$LIBJXL_REVISION"
-          $STD git submodule update --init --recursive --depth 1 --recommend-shallow
-          $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-empty-dht-marker.patch
-          $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-icc-warning.patch
-          mkdir build
-          cd build
-          $STD cmake \
-            -DCMAKE_BUILD_TYPE=Release \
-            -DBUILD_TESTING=OFF \
-            -DJPEGXL_ENABLE_DOXYGEN=OFF \
-            -DJPEGXL_ENABLE_MANPAGES=OFF \
-            -DJPEGXL_ENABLE_PLUGIN_GIMP210=OFF \
-            -DJPEGXL_ENABLE_BENCHMARK=OFF \
-            -DJPEGXL_ENABLE_EXAMPLES=OFF \
-            -DJPEGXL_FORCE_SYSTEM_BROTLI=ON \
-            -DJPEGXL_FORCE_SYSTEM_HWY=ON \
-            -DJPEGXL_ENABLE_JPEGLI=ON \
-            -DJPEGXL_ENABLE_JPEGLI_LIBJPEG=ON \
-            -DJPEGXL_INSTALL_JPEGLI_LIBJPEG=ON \
-            -DJPEGXL_ENABLE_PLUGINS=ON \
-            -DJPEGLI_LIBJPEG_LIBRARY_SOVERSION="$JPEGLI_LIBJPEG_LIBRARY_SOVERSION" \
-            -DJPEGLI_LIBJPEG_LIBRARY_VERSION="$JPEGLI_LIBJPEG_LIBRARY_VERSION" \
-            -DLIBJPEG_TURBO_VERSION_NUMBER=2001005 \
-            ..
-          $STD cmake --build . -- -j"$(nproc)"
-          $STD cmake --install .
-          ldconfig /usr/local/lib
-          $STD make clean
-          cd "$STAGING_DIR"
-          rm -rf "$SOURCE"/{build,third_party}
-          msg_ok "Recompiled libjxl"
-        fi
-        if [[ "$name" == "libheif" ]]; then
-          msg_info "Recompiling libheif"
-          SOURCE=${SOURCE_DIR}/libheif
-          : "${LIBHEIF_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libheif.json)}"
-          $STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
-          cd "$SOURCE"
-          $STD git reset --hard "$LIBHEIF_REVISION"
-          mkdir build
-          cd build
-          $STD cmake --preset=release-noplugins \
-            -DWITH_DAV1D=ON \
-            -DENABLE_PARALLEL_TILE_DECODING=ON \
-            -DWITH_LIBSHARPYUV=ON \
-            -DWITH_LIBDE265=ON \
-            -DWITH_AOM_DECODER=OFF \
-            -DWITH_AOM_ENCODER=OFF \
-            -DWITH_X265=OFF \
-            -DWITH_EXAMPLES=OFF \
-            ..
-          $STD make install -j "$(nproc)"
-          ldconfig /usr/local/lib
-          $STD make clean
-          cd "$STAGING_DIR"
-          rm -rf "$SOURCE"/build
-          msg_ok "Recompiled libheif"
-        fi
-        if [[ "$name" == "libraw" ]]; then
-          msg_info "Recompiling libraw"
-          SOURCE=${SOURCE_DIR}/libraw
-          : "${LIBRAW_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libraw.json)}"
-          $STD git clone https://github.com/libraw/libraw.git "$SOURCE"
-          cd "$SOURCE"
-          $STD git reset --hard "$LIBRAW_REVISION"
-          $STD autoreconf --install
-          $STD ./configure
-          $STD make -j"$(nproc)"
-          $STD make install
-          ldconfig /usr/local/lib
-          $STD make clean
-          cd "$STAGING_DIR"
-          msg_ok "Recompiled libraw"
-        fi
-        if [[ "$name" == "imagemagick" ]]; then
-          msg_info "Recompiling ImageMagick"
-          SOURCE=$SOURCE_DIR/imagemagick
-          : "${IMAGEMAGICK_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/imagemagick.json)}"
-          $STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
-          cd "$SOURCE"
-          $STD git reset --hard "$IMAGEMAGICK_REVISION"
-          $STD ./configure --with-modules
-          $STD make -j"$(nproc)"
-          $STD make install
-          ldconfig /usr/local/lib
-          $STD make clean
-          cd "$STAGING_DIR"
-          msg_ok "Recompiled ImageMagick"
-        fi
-        if [[ "$name" == "libvips" ]]; then
-          msg_info "Recompiling libvips"
-          SOURCE=$SOURCE_DIR/libvips
-          : "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
-          $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
-          cd "$SOURCE"
-          $STD git reset --hard "$LIBVIPS_REVISION"
-          $STD meson setup build --buildtype=release --libdir=lib -Dintrospection=disabled -Dtiff=disabled
-          cd build
-          $STD ninja install
-          ldconfig /usr/local/lib
-          cd "$STAGING_DIR"
-          rm -rf "$SOURCE"/build
-          msg_ok "Recompiled libvips"
-        fi
-      done
-      echo -n "${NEW_REVISIONS[@]}" >~/.immich_library_revisions
-      msg_ok "Image-processing libraries compiled"
-    fi
+    cd "$BASE_DIR"
+    $STD git pull
+    for library in "${libraries[@]}"; do
+      compile_"$library"
+    done
+    msg_ok "Image-processing libraries updated"
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/immich-app/immich/releases?per_page=1 | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
   if [[ -f ~/.immich && "$RELEASE" == "$(cat ~/.immich)" ]]; then
@@ -245,6 +123,10 @@ function update_script() {
   cp -a server/{node_modules,dist,bin,resources,package.json,package-lock.json,start*.sh} "$APP_DIR"/
   cp -a web/build "$APP_DIR"/www
   cp LICENSE "$APP_DIR"
+  cd "$APP_DIR"
+  export SHARP_FORCE_GLOBAL_LIBVIPS=true
+  $STD npm install sharp
+  rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
   msg_ok "Updated ${APP} web and microservices"
 
   cd "$SRC_DIR"/machine-learning
@@ -276,8 +158,6 @@ function update_script() {
   ln -s "$GEO_DIR" "$APP_DIR"
 
   msg_info "Updating Immich CLI"
-  $STD npm install --build-from-source sharp
-  rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
   $STD npm i -g @immich/cli
   msg_ok "Updated Immich CLI"
 
@@ -293,6 +173,144 @@ function update_script() {
   exit
 }
 
+function compile_libjxl() {
+  SOURCE=${SOURCE_DIR}/libjxl
+  JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
+  JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
+  : "${LIBJXL_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libjxl.json)}"
+  if [[ "${update:-}" ]] || [[ "$LIBJXL_REVISION" != "$(grep 'libjxl' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
+    msg_info "Recompiling libjxl"
+    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    $STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
+    cd "$SOURCE"
+    $STD git reset --hard "$LIBJXL_REVISION"
+    $STD git submodule update --init --recursive --depth 1 --recommend-shallow
+    $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-empty-dht-marker.patch
+    $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-icc-warning.patch
+    mkdir build
+    cd build
+    $STD cmake \
+      -DCMAKE_BUILD_TYPE=Release \
+      -DBUILD_TESTING=OFF \
+      -DJPEGXL_ENABLE_DOXYGEN=OFF \
+      -DJPEGXL_ENABLE_MANPAGES=OFF \
+      -DJPEGXL_ENABLE_PLUGIN_GIMP210=OFF \
+      -DJPEGXL_ENABLE_BENCHMARK=OFF \
+      -DJPEGXL_ENABLE_EXAMPLES=OFF \
+      -DJPEGXL_FORCE_SYSTEM_BROTLI=ON \
+      -DJPEGXL_FORCE_SYSTEM_HWY=ON \
+      -DJPEGXL_ENABLE_JPEGLI=ON \
+      -DJPEGXL_ENABLE_JPEGLI_LIBJPEG=ON \
+      -DJPEGXL_INSTALL_JPEGLI_LIBJPEG=ON \
+      -DJPEGXL_ENABLE_PLUGINS=ON \
+      -DJPEGLI_LIBJPEG_LIBRARY_SOVERSION="$JPEGLI_LIBJPEG_LIBRARY_SOVERSION" \
+      -DJPEGLI_LIBJPEG_LIBRARY_VERSION="$JPEGLI_LIBJPEG_LIBRARY_VERSION" \
+      -DLIBJPEG_TURBO_VERSION_NUMBER=2001005 \
+      ..
+    $STD cmake --build . -- -j"$(nproc)"
+    $STD cmake --install .
+    ldconfig /usr/local/lib
+    $STD make clean
+    cd "$STAGING_DIR"
+    rm -rf "$SOURCE"/{build,third_party}
+    msg_ok "Recompiled libjxl"
+  fi
+}
+
+function compile_libheif() {
+  SOURCE=${SOURCE_DIR}/libheif
+  if ! dpkg -l | grep -q libaom; then
+    $STD apt-get install -y libaom-dev
+    local update="required"
+  fi
+  : "${LIBHEIF_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libheif.json)}"
+  if [[ "${update:-}" ]] || [[ "$LIBHEIF_REVISION" != "$(grep 'libheif' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
+    msg_info "Recompiling libheif"
+    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    $STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
+    cd "$SOURCE"
+    $STD git reset --hard "$LIBHEIF_REVISION"
+    mkdir build
+    cd build
+    $STD cmake --preset=release-noplugins \
+      -DWITH_DAV1D=ON \
+      -DENABLE_PARALLEL_TILE_DECODING=ON \
+      -DWITH_LIBSHARPYUV=ON \
+      -DWITH_LIBDE265=ON \
+      -DWITH_AOM_DECODER=OFF \
+      -DWITH_AOM_ENCODER=ON \
+      -DWITH_X265=OFF \
+      -DWITH_EXAMPLES=OFF \
+      ..
+    $STD make install -j "$(nproc)"
+    ldconfig /usr/local/lib
+    $STD make clean
+    cd "$STAGING_DIR"
+    rm -rf "$SOURCE"/build
+    msg_ok "Recompiled libheif"
+  fi
+}
+
+function compile_libraw() {
+  SOURCE=${SOURCE_DIR}/libraw
+  local update
+  : "${LIBRAW_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libraw.json)}"
+  if [[ "${update:-}" ]] || [[ "$LIBRAW_REVISION" != "$(grep 'libraw' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
+    msg_info "Recompiling libraw"
+    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    $STD git clone https://github.com/libraw/libraw.git "$SOURCE"
+    cd "$SOURCE"
+    $STD git reset --hard "$LIBRAW_REVISION"
+    $STD autoreconf --install
+    $STD ./configure
+    $STD make -j"$(nproc)"
+    $STD make install
+    ldconfig /usr/local/lib
+    $STD make clean
+    cd "$STAGING_DIR"
+    msg_ok "Recompiled libraw"
+  fi
+}
+
+function compile_imagemagick() {
+  SOURCE=$SOURCE_DIR/imagemagick
+  : "${IMAGEMAGICK_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/imagemagick.json)}"
+  if [[ "${update:-}" ]] || [[ "$IMAGEMAGICK_REVISION" != "$(grep 'imagemagick' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
+    msg_info "Recompiling ImageMagick"
+    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    $STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
+    cd "$SOURCE"
+    $STD git reset --hard "$IMAGEMAGICK_REVISION"
+    $STD ./configure --with-modules
+    $STD make -j"$(nproc)"
+    $STD make install
+    ldconfig /usr/local/lib
+    $STD make clean
+    cd "$STAGING_DIR"
+    msg_ok "Recompiled ImageMagick"
+  fi
+}
+
+function compile_libvips() {
+  SOURCE=$SOURCE_DIR/libvips
+  # : "${LIBVIPS_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libvips.json)}"
+  : "${LIBVIPS_REVISION:=8fa37a64547e392d3808eed8d72adab7e02b3d00}"
+  if [[ "${update:-}" ]] || [[ "$LIBVIPS_REVISION" != "$(grep 'libvips' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
+    msg_info "Recompiling libvips"
+    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
+    $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
+    cd "$SOURCE"
+    $STD git reset --hard "$LIBVIPS_REVISION"
+    $STD meson setup build --buildtype=release --libdir=lib -Dintrospection=disabled -Dtiff=disabled
+    cd build
+    $STD ninja install
+    ldconfig /usr/local/lib
+    cd "$STAGING_DIR"
+    rm -rf "$SOURCE"/build
+    msg_ok "Recompiled libvips"
+  fi
+}
+
 start
 build_container
 description

ct/mealie.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://mealie.io
+
+APP="Mealie"
+var_tags="${var_tags:-recipes}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/mealie ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  RELEASE=$(curl -fsSL https://api.github.com/repos/mealie-recipes/mealie/releases/latest | jq -r '.tag_name | sub("^v"; "")')
+  if [[ "${RELEASE}" != "$(cat ~/.mealie 2>/dev/null)" ]] || [[ ! -f ~/.mealie ]]; then
+
+    PYTHON_VERSION="3.12" setup_uv
+    NODE_MODULE="yarn" NODE_VERSION="20" setup_nodejs
+
+    msg_info "Stopping $APP"
+    systemctl stop mealie
+    msg_ok "Stopped $APP"
+
+    msg_info "Backing up .env and start.sh"
+    cp -f /opt/mealie/mealie.env /opt/mealie/mealie.env.bak
+    cp -f /opt/mealie/start.sh /opt/mealie/start.sh.bak
+    msg_ok "Backup completed"
+
+    fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
+
+    msg_info "Rebuilding Frontend"
+    export NUXT_TELEMETRY_DISABLED=1
+    cd /opt/mealie/frontend
+    $STD yarn install --prefer-offline --frozen-lockfile --non-interactive --production=false --network-timeout 1000000
+    $STD yarn generate
+    cp -r /opt/mealie/frontend/dist /opt/mealie/mealie/frontend
+    msg_ok "Frontend rebuilt"
+
+    msg_info "Rebuilding Backend Environment"
+    cd /opt/mealie
+    $STD /opt/mealie/.venv/bin/poetry self add "poetry-plugin-export>=1.9"
+    MEALIE_VERSION=$(/opt/mealie/.venv/bin/poetry version --short)
+    $STD /opt/mealie/.venv/bin/poetry build --output dist
+    $STD /opt/mealie/.venv/bin/poetry export --only=main --extras=pgsql --output=dist/requirements.txt
+    echo "mealie[pgsql]==$MEALIE_VERSION \\" >>dist/requirements.txt
+    /opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.whl | tail -n1 | tr -d '\n' >>dist/requirements.txt
+    echo " \\" >>dist/requirements.txt
+    /opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.tar.gz | tail -n1 >>dist/requirements.txt
+    msg_ok "Backend prepared"
+
+    msg_info "Finalize Installation"
+    $STD /opt/mealie/.venv/bin/uv pip install --require-hashes -r /opt/mealie/dist/requirements.txt --find-links dist
+    msg_ok "Mealie installed"
+
+    msg_info "Restoring Configuration"
+    mv -f /opt/mealie/mealie.env.bak /opt/mealie/mealie.env
+    mv -f /opt/mealie/start.sh.bak /opt/mealie/start.sh
+    chmod +x /opt/mealie/start.sh
+    msg_ok "Configuration restored"
+
+    msg_info "Starting $APP"
+    systemctl start mealie
+    msg_ok "Started $APP"
+
+    msg_ok "Update to $RELEASE Successful"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9000${CL}"

ct/nginxproxymanager.sh

@@ -99,7 +99,7 @@ function update_script() {
   mkdir -p /app/global /app/frontend/images
   cp -r backend/* /app
   cp -r global/* /app/global
-  $STD python3 -m pip install --no-cache-dir certbot-dns-cloudflare
+  $STD python3 -m pip install --no-cache-dir --break-system-packages certbot-dns-cloudflare
   msg_ok "Setup Enviroment"
 
   msg_info "Building Frontend"

ct/ollama.sh

@@ -40,6 +40,7 @@ function update_script() {
     msg_info "Updating Ollama to ${RELEASE}"
     rm -rf /usr/local/lib/ollama
     rm -rf /usr/local/bin/ollama
+    mkdir -p /usr/local/lib/ollama
     tar -xzf "${TMP_TAR}" -C /usr/local/lib/ollama
     ln -sf /usr/local/lib/ollama/bin/ollama /usr/local/bin/ollama
     echo "${RELEASE}" >/opt/Ollama_version.txt

ct/omada.sh

@@ -66,6 +66,7 @@ function update_script() {
   $STD dpkg -i "$OMADA_PKG"
   rm -f "$OMADA_PKG"
   msg_ok "Updated Omada Controller"
+  exit 0
 }
 
 start

ct/planka.sh

@@ -40,20 +40,20 @@ function update_script() {
     mkdir -p /opt/planka-backup/user-avatars
     mkdir -p /opt/planka-backup/background-images
     mkdir -p /opt/planka-backup/attachments
-    mv /opt/planka/planka/.env /opt/planka-backup
-    [ -n "$(ls -A /opt/planka/planka/public/favicons 2>/dev/null)" ] && mv /opt/planka/planka/public/favicons/* /opt/planka-backup/favicons/
-    [ -n "$(ls -A /opt/planka/planka/public/user-avatars 2>/dev/null)" ] && mv /opt/planka/planka/public/user-avatars/* /opt/planka-backup/user-avatars/
-    [ -n "$(ls -A /opt/planka/planka/public/background-images 2>/dev/null)" ] && mv /opt/planka/planka/public/background-images/* /opt/planka-backup/background-images/
-    [ -n "$(ls -A /opt/planka/planka/private/attachments 2>/dev/null)" ] && mv /opt/planka/planka/private/attachments/* /opt/planka-backup/attachments/
+    mv /opt/planka/.env /opt/planka-backup
+    [ -n "$(ls -A /opt/planka/public/favicons 2>/dev/null)" ] && mv /opt/planka/public/favicons/* /opt/planka-backup/favicons/
+    [ -n "$(ls -A /opt/planka/public/user-avatars 2>/dev/null)" ] && mv /opt/planka/public/user-avatars/* /opt/planka-backup/user-avatars/
+    [ -n "$(ls -A /opt/planka/public/background-images 2>/dev/null)" ] && mv /opt/planka/public/background-images/* /opt/planka-backup/background-images/
+    [ -n "$(ls -A /opt/planka/private/attachments 2>/dev/null)" ] && mv /opt/planka/private/attachments/* /opt/planka-backup/attachments/
     rm -rf /opt/planka
     fetch_and_deploy_gh_release "planka" "plankanban/planka" "prebuild" "latest" "/opt/planka" "planka-prebuild.zip"
-    cd /opt/planka/planka
+    cd /opt/planka
     $STD npm install
-    mv /opt/planka-backup/.env /opt/planka/planka/
-    [ -n "$(ls -A /opt/planka-backup/favicons 2>/dev/null)" ] && mv /opt/planka-backup/favicons/* /opt/planka/planka/public/favicons/
-    [ -n "$(ls -A /opt/planka-backup/user-avatars 2>/dev/null)" ] && mv /opt/planka-backup/user-avatars/* /opt/planka/planka/public/user-avatars/
-    [ -n "$(ls -A /opt/planka-backup/background-images 2>/dev/null)" ] && mv /opt/planka-backup/background-images/* /opt/planka/planka/public/background-images/
-    [ -n "$(ls -A /opt/planka-backup/attachments 2>/dev/null)" ] && mv /opt/planka-backup/attachments/* /opt/planka/planka/private/attachments/
+    mv /opt/planka-backup/.env /opt/planka/
+    [ -n "$(ls -A /opt/planka-backup/favicons 2>/dev/null)" ] && mv /opt/planka-backup/favicons/* /opt/planka/public/favicons/
+    [ -n "$(ls -A /opt/planka-backup/user-avatars 2>/dev/null)" ] && mv /opt/planka-backup/user-avatars/* /opt/planka/public/user-avatars/
+    [ -n "$(ls -A /opt/planka-backup/background-images 2>/dev/null)" ] && mv /opt/planka-backup/background-images/* /opt/planka/public/background-images/
+    [ -n "$(ls -A /opt/planka-backup/attachments 2>/dev/null)" ] && mv /opt/planka-backup/attachments/* /opt/planka/private/attachments/
     msg_ok "Updated $APP to ${RELEASE}"
 
     msg_info "Starting $APP"

ct/pulse.sh

@@ -58,6 +58,7 @@ function update_script() {
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}."
   fi
+  exit  
 }
 
 start

ct/stirling-pdf.sh

@@ -27,29 +27,41 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  msg_info "Updating ${APP}"
-  systemctl stop stirlingpdf
-  if [[ -n $(dpkg -l | grep -w ocrmypdf) ]] && [[ -z $(dpkg -l | grep -w qpdf) ]]; then
-    $STD apt-get remove -y ocrmypdf
-    $STD apt-get install -y qpdf
+  RELEASE=$(curl -fsSL https://api.github.com/repos/Stirling-Tools/Stirling-PDF/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+  if [[ "${RELEASE}" != "$(cat ~/.stirling-pdf 2>/dev/null)" ]] || [[ ! -f ~/.stirling-pdf ]]; then
+    if [[ ! -f /etc/systemd/system/unoserver.service ]]; then
+      msg_custom "⚠️ " "\e[33m" "Legacy installation detected – please recreate the container using the latest install script."
+      exit 0
+    fi
+
+    PYTHON_VERSION="3.12" setup_uv
+    JAVA_VERSION="21" setup_java
+
+    msg_info "Stopping Services"
+    systemctl stop stirlingpdf libreoffice-listener unoserver
+    msg_ok "Stopped Services"
+
+    if [[ -f ~/.Stirling-PDF-login ]]; then
+      USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "stirling-pdf" "Stirling-Tools/Stirling-PDF" "singlefile" "latest" "/opt/Stirling-PDF" "Stirling-PDF-with-login.jar"
+      mv /opt/Stirling-PDF/Stirling-PDF-with-login.jar /opt/Stirling-PDF/Stirling-PDF.jar
+    else
+      USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "stirling-pdf" "Stirling-Tools/Stirling-PDF" "singlefile" "latest" "/opt/Stirling-PDF" "Stirling-PDF.jar"
+    fi
+
+    msg_info "Refreshing Font Cache"
+    $STD fc-cache -fv
+    msg_ok "Font Cache Updated"
+
+    msg_info "Starting Services"
+    systemctl start stirlingpdf libreoffice-listener unoserver
+    msg_ok "Started Services"
+
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
   fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/Stirling-Tools/Stirling-PDF/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  curl -fsSL "https://github.com/Stirling-Tools/Stirling-PDF/archive/refs/tags/v$RELEASE.tar.gz" -o $(basename "https://github.com/Stirling-Tools/Stirling-PDF/archive/refs/tags/v$RELEASE.tar.gz")
-  tar -xzf v$RELEASE.tar.gz
-  cd Stirling-PDF-$RELEASE
-  chmod +x ./gradlew
-  $STD ./gradlew build
-  rm -rf /opt/Stirling-PDF/Stirling-PDF-*.jar
-  cp -r ./build/libs/Stirling-PDF-*.jar /opt/Stirling-PDF/
-  cp -r scripts /opt/Stirling-PDF/
-  cd ~
-  rm -rf Stirling-PDF-$RELEASE v$RELEASE.tar.gz
-  ln -sf /opt/Stirling-PDF/Stirling-PDF-$RELEASE.jar /opt/Stirling-PDF/Stirling-PDF.jar
-  systemctl start stirlingpdf
-  msg_ok "Updated ${APP} to v$RELEASE"
   exit
 }
-
 start
 build_container
 description

ct/threadfin.sh

@@ -27,12 +27,24 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  msg_info "Updating $APP"
-  systemctl stop threadfin.service
-  curl -fsSL "https://github.com/Threadfin/Threadfin/releases/latest/download/Threadfin_linux_amd64" -o "/opt/threadfin/threadfin"
-  chmod +x /opt/threadfin/threadfin
-  systemctl start threadfin.service
-  msg_ok "Updated $APP"
+
+  RELEASE=$(curl -fsSL https://api.github.com/repos/threadfin/threadfin/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+  if [[ "${RELEASE}" != "$(cat ~/.threadfin_version 2>/dev/null)" ]] || [[ ! -f ~/.threadfin_version ]]; then
+
+    msg_info "Stopping $APP"
+    systemctl stop threadfin
+    msg_ok "Stopped $APP"
+
+    fetch_and_deploy_gh_release "threadfin" "threadfin/threadfin" "singlefile" "latest" "/opt/threadfin" "Threadfin_linux_amd64"
+
+    msg_info "Starting $APP"
+    systemctl start threadfin
+    msg_ok "Started $APP"
+
+    msg_ok "Updated Successfully"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
   exit
 }
 

frontend/public/json/add-iptag.json

@@ -37,12 +37,16 @@
       "type": "info"
     },
     {
-      "text": "Configuration: `nano /opt/iptag/iptag.conf`. iptag.service must be restarted after change.",
+      "text": "Configuration: `nano /opt/iptag/iptag.conf`. iptag Service must be restarted after change. See here for full documentation: `https://github.com/community-scripts/ProxmoxVE/discussions/5790`",
       "type": "info"
     },
     {
       "text": "The Proxmox Node must contain ipcalc and net-tools. `apt-get install -y ipcalc net-tools`",
       "type": "warning"
+    },
+    {
+      "text": "You can execute the ip tool manually with `iptag-run`",
+      "type": "info"
     }
   ]
 }

frontend/public/json/bar-assistant.json

@@ -0,0 +1,35 @@
+{
+  "name": "Bar-Assistant",
+  "slug": "bar-assistant",
+  "categories": [
+    24
+  ],
+  "date_created": "2025-07-14",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 80,
+  "documentation": "https://docs.barassistant.app/",
+  "website": "https://barassistant.app/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/bar-assistant.webp",
+  "config_path": "/opt/bar-assistant",
+  "description": "Bar Assistant is all-in-one solution for managing your home bar. Compared to other recipe management software that usually tries to be more for general use, Bar Assistant is made specifically for managing cocktail recipes. This means that there are a lot of cocktail-oriented features, like ingredient substitutes, first-class ingredients, ABV calculations, unit switching and more..",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/bar-assistant.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 4,
+        "os": "debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/bunkerweb.json

@@ -31,5 +31,10 @@
     "username": null,
     "password": null
   },
-  "notes": []
+  "notes": [
+    {
+      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
+      "type": "warning"
+    }
+  ]
 }

frontend/public/json/dockge.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 5001,
   "documentation": null,

frontend/public/json/docmost.json

@@ -31,5 +31,10 @@
     "username": null,
     "password": null
   },
-  "notes": []
+  "notes": [
+    {
+      "text": "Use `cat ~/docmost.creds` to see database credentials.",
+      "type": "info"
+    }
+  ]
 }

frontend/public/json/emqx.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 18083,
   "documentation": "https://docs.emqx.com/en/emqx/latest/",

frontend/public/json/ersatztv.json

@@ -19,7 +19,7 @@
       "type": "default",
       "script": "ct/ersatztv.sh",
       "resources": {
-        "cpu": 1,
+        "cpu": 2,
         "ram": 1024,
         "hdd": 5,
         "os": "debian",

frontend/public/json/gitea-mirror.json

@@ -9,9 +9,9 @@
   "updateable": true,
   "privileged": false,
   "interface_port": 4321,
-  "documentation": "https://github.com/arunavo4/gitea-mirror/",
+  "documentation": "https://github.com/RayLabsHQ/gitea-mirror/",
   "config_path": "/etc/systemd/system/gitea-mirror.service",
-  "website": "https://github.com/arunavo4/gitea-mirror/",
+  "website": "https://github.com/RayLabsHQ/gitea-mirror/",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/gitea-mirror.webp",
   "description": "Gitea Mirror auto-syncs GitHub repos to your self-hosted Gitea, with a sleek Web UI and easy Docker deployment. ",
   "install_methods": [

frontend/public/json/habitica.json

@@ -8,7 +8,7 @@
   "type": "ct",
   "updateable": true,
   "privileged": false,
-  "interface_port": 8080,
+  "interface_port": 3000,
   "documentation": "https://github.com/HabitRPG/habitica/wiki",
   "website": "https://habitica.com/",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/habitica.webp",

frontend/public/json/mealie.json

@@ -0,0 +1,35 @@
+{
+  "name": "Mealie",
+  "slug": "mealie",
+  "categories": [
+    13
+  ],
+  "date_created": "2025-07-14",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "config_path": "/opt/mealie/mealie.env",
+  "interface_port": 3000,
+  "documentation": "https://mealie.io/",
+  "website": "https://mealie.io/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/mealie.webp",
+  "description": "Mealie is a self hosted recipe manager, meal planner and shopping list with a RestAPI backend and a reactive frontend built in Vue for a pleasant user experience for the whole family. Easily add recipes into your database by providing the URL and Mealie will automatically import the relevant data, or add a family recipe with the UI editor. Mealie also provides an API for interactions from 3rd party applications.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/mealie.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 10,
+        "os": "Debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/nic-offloading-fix.json

@@ -1,5 +1,5 @@
 {
-  "name": "NIC Offloading Fix",
+  "name": "Intel e1000e NIC Offloading Fix",
   "slug": "nic-offloading-fix",
   "categories": [
     1

frontend/public/json/proxmox-backup-server.json

@@ -35,6 +35,10 @@
         {
             "text": "Set a root password if using autologin. This will be the PBS password. `passwd root`",
             "type": "warning"
+        },
+        {
+            "text": "Advanced Install is only possible without root password and root SSH access, you can configure this after installation.",
+            "type": "warning"
         }
     ]
 }

frontend/public/json/stirling-pdf.json

@@ -1,35 +1,35 @@
 {
-    "name": "Stirling-PDF",
-    "slug": "stirling-pdf",
-    "categories": [
-        12
-    ],
-    "date_created": "2024-05-02",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 8080,
-    "documentation": null,
-    "website": "https://github.com/Stirling-Tools/Stirling-PDF",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/stirling-pdf.webp",
-    "config_path": "/opt/Stirling-PDF/.env",
-    "description": "Stirling-PDF is a powerful locally hosted web based PDF manipulation tool that allows you to perform various operations on PDF files, such as splitting merging, converting, reorganizing, adding images, rotating, compressing, and more.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/stirling-pdf.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 2048,
-                "hdd": 8,
-                "os": "debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": []
+  "name": "Stirling-PDF",
+  "slug": "stirling-pdf",
+  "categories": [
+    12
+  ],
+  "date_created": "2024-05-02",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8080,
+  "documentation": null,
+  "website": "https://github.com/Stirling-Tools/Stirling-PDF",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/stirling-pdf.webp",
+  "config_path": "/opt/Stirling-PDF/.env",
+  "description": "Stirling-PDF is a powerful locally hosted web based PDF manipulation tool that allows you to perform various operations on PDF files, such as splitting merging, converting, reorganizing, adding images, rotating, compressing, and more.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/stirling-pdf.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": "admin",
+    "password": "stirling"
+  },
+  "notes": []
 }

frontend/public/json/threadfin.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-06-12",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 34400,
   "documentation": null,

install/alpine-tinyauth-install.sh

@@ -24,13 +24,13 @@ RELEASE=$(curl -s https://api.github.com/repos/steveiliop56/tinyauth/releases/la
 curl -fsSL "https://github.com/steveiliop56/tinyauth/releases/download/v${RELEASE}/tinyauth-amd64" -o /opt/tinyauth/tinyauth
 chmod +x /opt/tinyauth/tinyauth
 
-PASSWORD=$(openssl rand -base64 8 | tr -dc 'a-zA-Z0-9' | head -c 8)
-USER=$(htpasswd -Bbn "tinyauth" "${PASSWORD}")
+PASS=$(openssl rand -base64 8 | tr -dc 'a-zA-Z0-9' | head -c 8)
+USER=$(htpasswd -Bbn "tinyauth" "${PASS}")
 
-cat <<EOF > /opt/tinyauth/credentials.txt
+cat <<EOF >/opt/tinyauth/credentials.txt
 Tinyauth Credentials
 Username: tinyauth
-Password: ${PASSWORD}
+Password: ${PASS}
 EOF
 
 echo "${RELEASE}" >/opt/tinyauth_version.txt

install/babybuddy-install.sh

@@ -24,13 +24,10 @@ $STD apt-get install -y \
 msg_ok "Installed Dependencies"
 
 setup_uv
+fetch_and_deploy_gh_release "babybuddy" "babybuddy/babybuddy"
 
 msg_info "Installing Babybuddy"
-RELEASE=$(curl -fsSL https://api.github.com/repos/babybuddy/babybuddy/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-temp_file=$(mktemp)
-mkdir -p /opt/{babybuddy,data}
-curl -fsSL "https://github.com/babybuddy/babybuddy/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/babybuddy
+mkdir -p /opt/data
 cd /opt/babybuddy
 $STD uv venv .venv
 $STD source .venv/bin/activate
@@ -102,7 +99,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/baikal-install.sh

@@ -13,12 +13,9 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y apache2
-msg_ok "Installed Dependencies"
-
 PG_VERSION="16" setup_postgresql
-PHP_APACHE="YES" PHP_MODULE="pgsql, dom" PHP_VERSION="8.2" setup_php
+PHP_APACHE="YES" PHP_MODULE="pgsql" PHP_VERSION="8.2" setup_php
+setup_composer
 fetch_and_deploy_gh_release "baikal" "sabre-io/Baikal"
 
 msg_info "Setting up PostgreSQL Database"
@@ -36,6 +33,8 @@ $STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMP
 msg_ok "Set up PostgreSQL Database"
 
 msg_info "Configuring Baikal"
+cd /opt/baikal
+$STD composer install
 cat <<EOF >/opt/baikal/config/baikal.yaml
 database:
     backend: pgsql

install/bar-assistant-install.sh

@@ -0,0 +1,195 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: bvdberg01 | CanbiZ
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/karlomikus/bar-assistant
+# Source: https://github.com/karlomikus/vue-salt-rim
+# Source: https://www.meilisearch.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  redis-server \
+  nginx \
+  lsb-release \
+  libvips
+#php-{ffi,opcache,redis,zip,pdo-sqlite,bcmath,pdo,curl,dom,fpm}
+msg_ok "Installed Dependencies"
+
+PHP_VERSION="8.3" PHP_FPM=YES PHP_MODULE="ffi,opcache,redis,zip,pdo-sqlite,bcmath,pdo,curl,dom,fpm" setup_php
+setup_composer
+NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+fetch_and_deploy_gh_release "bar-assistant" "karlomikus/bar-assistant" "tarball" "latest" "/opt/bar-assistant"
+fetch_and_deploy_gh_release "vue-salt-rim" "karlomikus/vue-salt-rim" "tarball" "latest" "/opt/vue-salt-rim"
+
+msg_info "Configuring PHP"
+PHPVER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION . "\n";')
+sed -i.bak -E 's/^\s*;?\s*ffi\.enable\s*=.*/ffi.enable=true/' /etc/php/${PHPVER}/fpm/php.ini
+$STD systemctl reload php${PHPVER}-fpm
+msg_info "configured PHP"
+
+msg_info "Configure MeiliSearch"
+curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml
+MASTER_KEY=$(openssl rand -base64 12)
+sed -i \
+  -e 's|^env =.*|env = "production"|' \
+  -e "s|^# master_key =.*|master_key = \"$MASTER_KEY\"|" \
+  -e 's|^db_path =.*|db_path = "/var/lib/meilisearch/data"|' \
+  -e 's|^dump_dir =.*|dump_dir = "/var/lib/meilisearch/dumps"|' \
+  -e 's|^snapshot_dir =.*|snapshot_dir = "/var/lib/meilisearch/snapshots"|' \
+  -e 's|^# no_analytics = true|no_analytics = true|' \
+  -e 's|^http_addr =.*|http_addr = "127.0.0.1:7700"|' \
+  /etc/meilisearch.toml
+msg_ok "Configured MeiliSearch"
+
+msg_info "Creating MeiliSearch service"
+cat <<EOF >/etc/systemd/system/meilisearch.service
+[Unit]
+Description=Meilisearch
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now meilisearch
+sleep 5
+msg_ok "Created Service MeiliSearch"
+
+msg_info "Installing Bar Assistant"
+cd /opt/bar-assistant
+cp /opt/bar-assistant/.env.dist /opt/bar-assistant/.env
+MeiliSearch_API_KEY=$(curl -s -X GET 'http://127.0.0.1:7700/keys' -H "Authorization: Bearer $MASTER_KEY" | grep -o '"key":"[^"]*"' | head -n 1 | sed 's/"key":"//;s/"//')
+MeiliSearch_API_KEY_UID=$(curl -s -X GET 'http://127.0.0.1:7700/keys' -H "Authorization: Bearer $MASTER_KEY" | grep -o '"uid":"[^"]*"' | head -n 1 | sed 's/"uid":"//;s/"//')
+LOCAL_IP=$(hostname -I | awk '{print $1}')
+sed -i -e "s|^APP_URL=|APP_URL=http://${LOCAL_IP}/bar/|" \
+  -e "s|^MEILISEARCH_HOST=|MEILISEARCH_HOST=http://127.0.0.1:7700|" \
+  -e "s|^MEILISEARCH_KEY=|MEILISEARCH_KEY=${MASTER_KEY}|" \
+  -e "s|^MEILISEARCH_API_KEY=|MEILISEARCH_API_KEY=${MeiliSearch_API_KEY}|" \
+  -e "s|^MEILISEARCH_API_KEY_UID=|MEILISEARCH_API_KEY_UID=${MeiliSearch_API_KEY_UID}|" \
+  /opt/bar-assistant/.env
+$STD composer install --no-interaction
+$STD php artisan key:generate
+touch storage/bar-assistant/database.ba3.sqlite
+$STD php artisan migrate --force
+$STD php artisan storage:link
+$STD php artisan bar:setup-meilisearch
+$STD php artisan scout:sync-index-settings
+$STD php artisan config:cache
+$STD php artisan route:cache
+$STD php artisan event:cache
+mkdir /opt/bar-assistant/storage/bar-assistant/uploads/temp
+chown -R www-data:www-data /opt/bar-assistant
+msg_ok "Installed Bar Assistant"
+
+msg_info "Installing Salt Rim"
+cd /opt/vue-salt-rim
+cat <<EOF >/opt/vue-salt-rim/public/config.js
+window.srConfig = {}
+window.srConfig.API_URL = "http://${LOCAL_IP}/bar"
+window.srConfig.MEILISEARCH_URL = "http://${LOCAL_IP}/search"
+EOF
+$STD npm install
+$STD npm run build
+msg_ok "Installed Salt Rim"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/nginx/sites-available/barassistant.conf
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name _;
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    client_max_body_size 100M;
+
+    location /bar/ {
+        proxy_pass http://127.0.0.1:8080/;
+        proxy_set_header Host \$host;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+
+    location /search/ {
+        proxy_pass http://127.0.0.1:7700/;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8081/;
+        proxy_set_header Host \$host;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+}
+
+server {
+    listen 127.0.0.1:8080;
+    server_name example.com;
+    root /opt/bar-assistant/public;
+
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-Content-Type-Options "nosniff";
+
+    index index.php;
+    charset utf-8;
+
+    location / {
+        try_files \$uri \$uri/ /index.php?\$query_string;
+    }
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    error_page 404 /index.php;
+
+    location ~ ^/index\.php(/|$) {
+        fastcgi_pass unix:/var/run/php/php$PHPVER-fpm.sock;
+        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_hide_header X-Powered-By;
+    }
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+}
+
+server {
+    listen 127.0.0.1:8081;
+    server_name _;
+    root /opt/vue-salt-rim/dist;
+
+    location / {
+        try_files \$uri \$uri/ /index.html;
+    }
+}
+EOF
+
+ln -s /etc/nginx/sites-available/barassistant.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/barcode-buddy-install.sh

@@ -14,12 +14,10 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  apache2 \
-  redis
+$STD apt-get install -y redis
 msg_ok "Installed Dependencies"
 
-PHP_VERSION="8.2" PHP_APACHE="YES" PHP_MODULE="date, json, redis, sqlite3, sockets" setup_php
+PHP_VERSION="8.2" PHP_APACHE="YES" PHP_MODULE="redis, sqlite3" setup_php
 fetch_and_deploy_gh_release "barcodebuddy" "Forceu/barcodebuddy"
 
 msg_info "Configuring barcodebuddy"

install/bookstack-install.sh

@@ -19,7 +19,8 @@ $STD apt-get install -y \
   make
 msg_ok "Installed Dependencies"
 
-PHP_MODULE="fpm, ldap, tidy, bz2, mysql" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.2" setup_php
+PHP_MODULE="ldap,tidy,bz2,mysqli" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
+
 setup_composer
 setup_mariadb
 
@@ -56,7 +57,7 @@ chmod -R 755 /opt/bookstack /opt/bookstack/bootstrap/cache /opt/bookstack/public
 chmod -R 775 /opt/bookstack/storage /opt/bookstack/bootstrap/cache /opt/bookstack/public/uploads
 chmod -R 640 /opt/bookstack/.env
 $STD a2enmod rewrite
-$STD a2enmod php8.2
+$STD a2enmod php8.3
 msg_ok "Configured Bookstack"
 
 msg_info "Creating Service"

install/bunkerweb-install.sh

@@ -18,19 +18,12 @@ $STD apt-get install -y apt-transport-https
 $STD apt-get install -y lsb-release
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Nginx"
-curl -fsSL "https://nginx.org/keys/nginx_signing.key" | gpg --dearmor >/usr/share/keyrings/nginx-archive-keyring.gpg
-echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian $(lsb_release -cs) nginx" >/etc/apt/sources.list.d/nginx.list
-$STD apt-get update
-$STD apt-get install -y nginx=1.26.3*
-msg_ok "Installed Nginx"
-
 RELEASE=$(curl -fsSL https://api.github.com/repos/bunkerity/bunkerweb/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 msg_info "Installing BunkerWeb v${RELEASE} (Patience)"
-curl -fsSL "https://repo.bunkerweb.io/bunkerity/bunkerweb/gpgkey" | gpg --dearmor >/etc/apt/keyrings/bunkerity_bunkerweb-archive-keyring.gpg
-echo "deb [signed-by=/etc/apt/keyrings/bunkerity_bunkerweb-archive-keyring.gpg] https://repo.bunkerweb.io/bunkerity/bunkerweb/debian/ bookworm main" >/etc/apt/sources.list.d/bunkerity_bunkerweb.list
-$STD apt-get update
-$STD apt-get install -y bunkerweb=${RELEASE}
+curl -fsSL -o install-bunkerweb.sh https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh
+chmod +x install-bunkerweb.sh
+$STD ./install-bunkerweb.sh --yes
+$STD apt-mark unhold bunkerweb nginx
 cat <<EOF >/etc/apt/preferences.d/bunkerweb
 Package: bunkerweb
 Pin: version ${RELEASE}

install/commafeed-install.sh

@@ -17,22 +17,8 @@ msg_info "Installing Dependencies"
 $STD apt-get install -y rsync
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Azul Zulu"
-curl -fsSL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xB1998361219BD9C9" -o "/etc/apt/trusted.gpg.d/zulu-repo.asc"
-curl -fsSL "https://cdn.azul.com/zulu/bin/zulu-repo_1.0.0-3_all.deb" -o "zulu-repo_1.0.0-3_all.deb"
-$STD dpkg -i zulu-repo_1.0.0-3_all.deb
-$STD apt-get update
-$STD apt-get -y install zulu17-jdk
-msg_ok "Installed Azul Zulu"
-
-RELEASE=$(curl -fsSL https://api.github.com/repos/Athou/commafeed/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
-msg_info "Installing CommaFeed ${RELEASE}"
-mkdir /opt/commafeed
-curl -fsSL "https://github.com/Athou/commafeed/releases/download/${RELEASE}/commafeed-${RELEASE}-h2-jvm.zip" -o "commafeed-${RELEASE}-h2-jvm.zip"
-$STD unzip commafeed-${RELEASE}-h2-jvm.zip
-mv commafeed-${RELEASE}-h2/* /opt/commafeed/
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
-msg_ok "Installed CommaFeed ${RELEASE}"
+JAVA_VERSION="17" setup_java
+fetch_and_deploy_gh_release "commafeed" "Athou/commafeed" "prebuild" "latest" "/opt/commafeed" "commafeed-*-h2-jvm.zip"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/commafeed.service
@@ -55,7 +41,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf commafeed-${RELEASE}-h2 commafeed-${RELEASE}-h2-jvm.zip zulu-repo_1.0.0-3_all.deb
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/dashy-install.sh

@@ -16,11 +16,11 @@ update_os
 NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "dashy" "Lissy93/dashy"
 
-msg_info "Installing Dashy ${RELEASE} (Patience)"
+msg_info "Installing Dashy"
 cd /opt/dashy
 $STD npm install
 $STD npm run build
-msg_ok "Installed Dashy ${RELEASE}"
+msg_ok "Installed Dashy"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/dashy.service

install/docker-install.sh

@@ -29,7 +29,17 @@ echo -e '{\n  "log-driver": "journald"\n}' >/etc/docker/daemon.json
 $STD sh <(curl -fsSL https://get.docker.com)
 msg_ok "Installed Docker $DOCKER_LATEST_VERSION"
 
-read -r -p "${TAB3}Would you like to add Portainer? <y/N> " prompt
+read -r -p "${TAB3}Install Docker Compose v2 plugin? <y/N> " prompt_compose
+if [[ ${prompt_compose,,} =~ ^(y|yes)$ ]]; then
+  msg_info "Installing Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
+  mkdir -p /usr/local/lib/docker/cli-plugins
+  curl -fsSL "https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_LATEST_VERSION}/docker-compose-$(uname -s)-$(uname -m)" \
+    -o /usr/local/lib/docker/cli-plugins/docker-compose
+  chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+  msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
+fi
+
+read -r -p "${TAB3}Would you like to add Portainer (UI)? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   msg_info "Installing Portainer $PORTAINER_LATEST_VERSION"
   docker volume create portainer_data >/dev/null
@@ -43,9 +53,9 @@ if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
     portainer/portainer-ce:latest
   msg_ok "Installed Portainer $PORTAINER_LATEST_VERSION"
 else
-  read -r -p "${TAB3}Would you like to add the Portainer Agent? <y/N> " prompt
-  if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-    msg_info "Installing Portainer agent $PORTAINER_AGENT_LATEST_VERSION"
+  read -r -p "${TAB3}Would you like to install the Portainer Agent (for remote management)? <y/N> " prompt_agent
+  if [[ ${prompt_agent,,} =~ ^(y|yes)$ ]]; then
+    msg_info "Installing Portainer Agent $PORTAINER_AGENT_LATEST_VERSION"
     $STD docker run -d \
       -p 9001:9001 \
       --name portainer_agent \
@@ -57,13 +67,42 @@ else
   fi
 fi
 
-read -r -p "${TAB3}Would you like to expose the Docker TCP socket? <y/N> " prompt
-if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
-  msg_info "Exposing Docker TCP socket"
-  $STD mkdir -p /etc/docker
-  $STD echo '{ "hosts": ["unix:///var/run/docker.sock", "tcp://0.0.0.0:2375"] }' > /etc/docker/daemon.json
-  $STD rc-service docker restart
-  msg_ok "Exposed Docker TCP socket at tcp://+:2375"
+read -r -p "${TAB3}Expose Docker TCP socket (insecure) ? [n = No, l = Local only (127.0.0.1), a = All interfaces (0.0.0.0)] <n/l/a>: " socket_choice
+case "${socket_choice,,}" in
+  l)
+    socket="tcp://127.0.0.1:2375"
+    ;;
+  a)
+    socket="tcp://0.0.0.0:2375"
+    ;;
+  *)
+    socket=""
+    ;;
+esac
+
+if [[ -n "$socket" ]]; then
+  msg_info "Enabling Docker TCP socket on $socket"
+  $STD apt-get install -y jq
+
+  tmpfile=$(mktemp)
+  jq --arg sock "$socket" '. + { "hosts": ["unix:///var/run/docker.sock", $sock] }' /etc/docker/daemon.json > "$tmpfile" && mv "$tmpfile" /etc/docker/daemon.json
+
+  mkdir -p /etc/systemd/system/docker.service.d
+  cat <<EOF > /etc/systemd/system/docker.service.d/override.conf
+[Service]
+ExecStart=
+ExecStart=/usr/bin/dockerd
+EOF
+
+  $STD systemctl daemon-reexec
+  $STD systemctl daemon-reload
+
+  if systemctl restart docker; then
+    msg_ok "Docker TCP socket available on $socket"
+  else
+    msg_error "Docker failed to restart. Check journalctl -xeu docker.service"
+    exit 1
+  fi
 fi
 
 motd_ssh

install/docmost-install.sh

@@ -22,6 +22,7 @@ msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
 PG_VERSION="16" setup_postgresql
+fetch_and_deploy_gh_release "docmost" "docmost/docmost"
 
 msg_info "Setting up PostgreSQL"
 DB_NAME="docmost_db"
@@ -40,12 +41,7 @@ $STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
 } >>~/docmost.creds
 msg_ok "Set up PostgreSQL"
 
-msg_info "Installing Docmost (Patience)"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/docmost/docmost/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/docmost/docmost/archive/refs/tags/v${RELEASE}.tar.gz" -o ""$temp_file""
-tar -xzf "$temp_file"
-mv docmost-${RELEASE} /opt/docmost
+msg_info "Configuring Docmost (Patience)"
 cd /opt/docmost
 mv .env.example .env
 mkdir data
@@ -56,8 +52,7 @@ sed -i -e "s|APP_SECRET=.*|APP_SECRET=$(openssl rand -base64 32 | tr -dc 'a-zA-Z
 export NODE_OPTIONS="--max-old-space-size=2048"
 $STD pnpm install
 $STD pnpm build
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Docmost"
+msg_ok "Configured Docmost"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/docmost.service
@@ -81,7 +76,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/emby-install.sh

@@ -24,17 +24,15 @@ if [[ "$CTTYPE" == "0" ]]; then
 fi
 msg_ok "Set Up Hardware Acceleration"
 
-LATEST=$(curl -fsSL https://api.github.com/repos/MediaBrowser/Emby.Releases/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
+fetch_and_deploy_gh_release "emby" "MediaBrowser/Emby.Releases" "binary"
 
-msg_info "Installing Emby"
-curl -fsSL "https://github.com/MediaBrowser/Emby.Releases/releases/download/${LATEST}/emby-server-deb_${LATEST}_amd64.deb" -o "emby-server-deb_${LATEST}_amd64.deb"
-$STD dpkg -i emby-server-deb_${LATEST}_amd64.deb
+msg_info "Configuring Emby"
 if [[ "$CTTYPE" == "0" ]]; then
   sed -i -e 's/^ssl-cert:x:104:$/render:x:104:root,emby/' -e 's/^render:x:108:root,emby$/ssl-cert:x:108:/' /etc/group
 else
   sed -i -e 's/^ssl-cert:x:104:$/render:x:104:emby/' -e 's/^render:x:108:emby$/ssl-cert:x:108:/' /etc/group
 fi
-msg_ok "Installed Emby"
+msg_ok "Configured Emby"
 
 motd_ssh
 customize
@@ -42,5 +40,4 @@ customize
 msg_info "Cleaning up"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
-rm emby-server-deb_${LATEST}_amd64.deb
 msg_ok "Cleaned"

install/emqx-install.sh

@@ -13,16 +13,39 @@ setting_up_container
 network_check
 update_os
 
+msg_info "Installing dependencies"
+$STD apt-get install -y ca-certificates
+msg_ok "Installed dependencies"
+
+msg_info "Fetching latest EMQX Enterprise version"
+LATEST_VERSION=$(curl -fsSL https://www.emqx.com/en/downloads/enterprise | grep -oP '/en/downloads/enterprise/v\K[0-9]+\.[0-9]+\.[0-9]+' | sort -V | tail -n1)
+if [[ -z "$LATEST_VERSION" ]]; then
+  msg_error "Failed to determine latest EMQX version"
+  exit 1
+fi
+msg_ok "Latest version: v$LATEST_VERSION"
+
+DOWNLOAD_URL="https://www.emqx.com/en/downloads/enterprise/v$LATEST_VERSION/emqx-enterprise-${LATEST_VERSION}-debian12-amd64.deb"
+DEB_FILE="/tmp/emqx-enterprise-${LATEST_VERSION}-debian12-amd64.deb"
+
+msg_info "Downloading EMQX v$LATEST_VERSION"
+$STD curl -fsSL -o "$DEB_FILE" "$DOWNLOAD_URL"
+msg_ok "Downloaded EMQX"
+
 msg_info "Installing EMQX"
-$STD bash <(curl -fsSL https://packagecloud.io/install/repositories/emqx/emqx/script.deb.sh)
-$STD apt-get install -y emqx
-$STD systemctl enable --now emqx
+$STD apt-get install -y "$DEB_FILE"
+echo "$LATEST_VERSION" >~/.emqx
 msg_ok "Installed EMQX"
 
+msg_info "Starting EMQX service"
+$STD systemctl enable -q --now emqx
+msg_ok "Enabled EMQX service"
+
 motd_ssh
 customize
 
 msg_info "Cleaning up"
-apt-get autoremove >/dev/null
-apt-get autoclean >/dev/null
+rm -f "$DEB_FILE"
+$STD apt-get autoremove
+$STD apt-get autoclean
 msg_ok "Cleaned"

install/ersatztv-install.sh

@@ -13,15 +13,7 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing FFmpeg (Patience)"
-cd /usr/local/bin
-curl -fsSL "https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz" -o "ffmpeg-release-amd64-static.tar.xz"
-$STD tar -xvf ffmpeg-release-amd64-static.tar.xz
-rm -f ffmpeg-*.tar.xz
-cd ffmpeg-*
-mv ffmpeg ffprobe /usr/local/bin/
-rm -rf /usr/local/bin/ffmpeg-*
-msg_ok "Installed FFmpeg"
+FFMPEG_VERSION="latest" FFMPEG_TYPE="medium" setup_ffmpeg
 
 msg_info "Setting Up Hardware Acceleration"
 $STD apt-get -y install {va-driver-all,ocl-icd-libopencl1,intel-opencl-icd,vainfo,intel-gpu-tools}
@@ -34,15 +26,7 @@ if [[ "$CTTYPE" == "0" ]]; then
 fi
 msg_ok "Set Up Hardware Acceleration"
 
-msg_info "Installing ErsatzTV"
-temp_file=$(mktemp)
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/ErsatzTV/ErsatzTV/releases | grep -oP '"tag_name": "\K[^"]+' | head -n 1)
-curl -fsSL "https://github.com/ErsatzTV/ErsatzTV/releases/download/${RELEASE}/ErsatzTV-${RELEASE}-linux-x64.tar.gz" -o "$temp_file"
-tar -xzf "$temp_file"
-mv /opt/ErsatzTV-${RELEASE}-linux-x64 /opt/ErsatzTV
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed ErsatzTV"
+fetch_and_deploy_gh_release "ersatztv" "ErsatzTV/ErsatzTV" "prebuild" "latest" "/opt/ErsatzTV" "*linux-x64.tar.gz"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/ersatzTV.service
@@ -53,8 +37,8 @@ After=multi-user.target
 [Service]
 Type=simple
 User=root
-WorkingDirectory=/opt/ErsatzTV 
-ExecStart=/opt/ErsatzTV/ErsatzTV  
+WorkingDirectory=/opt/ErsatzTV
+ExecStart=/opt/ErsatzTV/ErsatzTV
 Restart=always
 RestartSec=30
 
@@ -68,7 +52,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f ${temp_file}
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/excalidraw-install.sh

@@ -14,21 +14,15 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  xdg-utils
+$STD apt-get install -y xdg-utils
 msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
+fetch_and_deploy_gh_release "excalidraw" "excalidraw/excalidraw"
 
-msg_info "Setup Excalidraw"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/excalidraw/excalidraw/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/excalidraw/excalidraw/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar xzf $temp_file
-mv excalidraw-${RELEASE} /opt/excalidraw
+msg_info "Configuring Excalidraw"
 cd /opt/excalidraw
 $STD yarn
-echo "${RELEASE}" >/opt/excalidraw_version.txt
 msg_ok "Setup Excalidraw"
 
 msg_info "Creating Service"
@@ -53,7 +47,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/firefly-install.sh

@@ -13,18 +13,10 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-curl -fsSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg
-echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ bookworm main" >/etc/apt/sources.list.d/php.list
-$STD apt-get update
-$STD apt-get install -y \
-  apache2 \
-  libapache2-mod-php8.4 \
-  php8.4-{bcmath,cli,intl,curl,zip,gd,xml,mbstring,mysql} \
-  composer
-msg_ok "Installed Dependencies"
-
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="mysql" setup_php
+setup_composer
 setup_mariadb
+LOCAL_IP=$(hostname -I | awk '{print $1}')
 
 msg_info "Setting up database"
 DB_NAME=firefly
@@ -41,21 +33,15 @@ mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRI
 } >>~/firefly.creds
 msg_ok "Set up database"
 
-msg_info "Installing Firefly III (Patience)"
-LOCAL_IP=$(hostname -I | awk '{print $1}')
-RELEASE=$(curl -fsSL https://api.github.com/repos/firefly-iii/firefly-iii/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
-cd /opt
-curl -fsSL "https://github.com/firefly-iii/firefly-iii/releases/download/v${RELEASE}/FireflyIII-v${RELEASE}.tar.gz" -o "FireflyIII-v${RELEASE}.tar.gz"
-mkdir -p /opt/firefly
-tar -xzf FireflyIII-v${RELEASE}.tar.gz -C /opt/firefly
+fetch_and_deploy_gh_release "firefly" "firefly-iii/firefly-iii" "prebuild" "latest" "/opt/firefly" "FireflyIII-*.zip"
+
+msg_info "Configuring Firefly III (Patience)"
 chown -R www-data:www-data /opt/firefly
 chmod -R 775 /opt/firefly/storage
 cd /opt/firefly
 cp .env.example .env
 sed -i "s/DB_HOST=.*/DB_HOST=localhost/" /opt/firefly/.env
 sed -i "s/DB_PASSWORD=.*/DB_PASSWORD=$DB_PASS/" /opt/firefly/.env
-echo "export COMPOSER_ALLOW_SUPERUSER=1" >>~/.bashrc
-source ~/.bashrc
 $STD composer install --no-dev --no-plugins --no-interaction
 $STD php artisan firefly:upgrade-database
 $STD php artisan firefly:correct-database
@@ -69,8 +55,7 @@ tar -xzf "DataImporter-v${IMPORTER_RELEASE}.tar.gz" -C /opt/firefly/dataimporter
 cp /opt/firefly/dataimporter/.env.example /opt/firefly/dataimporter/.env
 sed -i "s#FIREFLY_III_URL=#FIREFLY_III_URL=http://${LOCAL_IP}#g" /opt/firefly/dataimporter/.env
 chown -R www-data:www-data /opt/firefly
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Firefly III"
+msg_ok "Configured Firefly III"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/apache2/sites-available/firefly.conf
@@ -112,7 +97,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf "/opt/FireflyIII-v${RELEASE}.tar.gz"
 rm -rf "/opt/DataImporter-v${IMPORTER_RELEASE}.tar.gz"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean

install/flaresolverr-install.sh

@@ -15,8 +15,9 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
-$STD apt-get install -y xvfb
+$STD apt-get install -y \
+  apt-transport-https \
+  xvfb
 msg_ok "Installed Dependencies"
 
 msg_info "Installing Chrome"
@@ -26,13 +27,7 @@ $STD apt update
 $STD apt install -y google-chrome-stable
 msg_ok "Installed Chrome"
 
-msg_info "Installing FlareSolverr"
-RELEASE=$(curl -fsSL https://github.com/FlareSolverr/FlareSolverr/releases/latest | grep "title>Release" | cut -d " " -f 4)
-$STD curl -fsSL "https://github.com/FlareSolverr/FlareSolverr/releases/download/$RELEASE/flaresolverr_linux_x64.tar.gz" -o "flaresolverr_linux_x64.tar.gz"
-$STD tar -xzf flaresolverr_linux_x64.tar.gz -C /opt
-$STD rm flaresolverr_linux_x64.tar.gz
-echo "${RELEASE}" >/opt/"${APPLICATION}"_version.txt
-msg_ok "Installed FlareSolverr"
+fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/flaresolverr.service

install/fluid-calendar-install.sh

@@ -14,17 +14,11 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  zip \
-  postgresql-common
+$STD apt-get install -y zip
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Additional Dependencies"
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-echo "YES" | /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh &>/dev/null
-$STD apt-get install -y postgresql-17 nodejs
-msg_ok "Installed Additional Dependencies"
+PG_VERSION="17" setup_postgresql
+NODE_VERSION="20" setup_nodejs
 
 msg_info "Setting up Postgresql Database"
 DB_NAME="fluiddb"
@@ -44,14 +38,9 @@ $STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
 } >>~/$APPLICATION.creds
 msg_ok "Set up Postgresql Database"
 
-msg_info "Setup ${APPLICATION}"
-tmp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/dotnetfactory/fluid-calendar/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/dotnetfactory/fluid-calendar/archive/refs/tags/v${RELEASE}.zip" -o "$tmp_file"
-$STD unzip $tmp_file
-mv ${APPLICATION}-${RELEASE}/ /opt/${APPLICATION}
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+fetch_and_deploy_gh_release "fluid-calendar" "dotnetfactory/fluid-calendar"
 
+msg_info "Configuring ${APPLICATION}"
 cat <<EOF >/opt/fluid-calendar/.env
 DATABASE_URL="postgresql://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}"
 
@@ -72,7 +61,7 @@ $STD npm install --legacy-peer-deps
 $STD npm run prisma:generate
 $STD npx prisma migrate deploy
 $STD npm run build:os
-msg_ok "Setup ${APPLICATION}"
+msg_ok "Configuring ${APPLICATION}"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/fluid-calendar.service
@@ -95,7 +84,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f $tmp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/freshrss-install.sh

@@ -13,13 +13,7 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  apache2 \
-  php-{curl,dom,json,ctype,pgsql,gmp,mbstring,iconv,zip} \
-  libapache2-mod-php
-msg_ok "Installed Dependencies"
-
+PHP_VERSION="8.2" PHP_MODULE="curl,xml,mbstring,intl,zip,pgsql,gmp" PHP_APACHE="YES" setup_php
 PG_VERSION="16" setup_postgresql
 
 msg_info "Setting up PostgreSQL"
@@ -36,17 +30,14 @@ $STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMP
 } >>~/freshrss.creds
 msg_ok "Set up PostgreSQL"
 
-msg_info "Installing FreshRSS"
-RELEASE=$(curl -fsSL https://api.github.com/repos/FreshRSS/FreshRSS/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-cd /opt
-curl -fsSL "https://github.com/FreshRSS/FreshRSS/archive/refs/tags/${RELEASE}.zip" -o "${RELEASE}.zip"
-$STD unzip "${RELEASE}.zip"
-mv "/opt/FreshRSS-${RELEASE}" /opt/freshrss
+fetch_and_deploy_gh_release "freshrss" "FreshRSS/FreshRSS"
+
+msg_info "Configuring FreshRSS"
 cd /opt/freshrss
 chown -R www-data:www-data /opt/freshrss
 chmod -R g+rX /opt/freshrss
 chmod -R g+w /opt/freshrss/data/
-msg_ok "Installed FreshRSS"
+msg_ok "Configured FreshRSS"
 
 msg_info "Setting up cron job for feed refresh"
 cat <<EOF >/etc/cron.d/freshrss-actualize
@@ -83,7 +74,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf "/opt/${RELEASE}.zip"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/gatus-install.sh

@@ -20,20 +20,15 @@ $STD apt-get install -y \
 msg_ok "Installed Dependencies"
 
 setup_go
+fetch_and_deploy_gh_release "gatus" "TwiN/gatus"
 
-RELEASE=$(curl -s https://api.github.com/repos/TwiN/gatus/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-msg_info "Setting up gatus v${RELEASE}"
-temp_file=$(mktemp)
-mkdir -p /opt/gatus
-curl -fsSL "https://github.com/TwiN/gatus/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/gatus
+msg_info "Configuring gatus"
 cd /opt/gatus
 $STD go mod tidy
 CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o gatus .
 setcap CAP_NET_RAW+ep gatus
 mv config.yaml config
-echo "${RELEASE}" >/opt/gatus_version.txt
-msg_ok "Done setting up gatus"
+msg_ok "Configured gatus"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/gatus.service
@@ -58,10 +53,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
-
-motd_ssh
-customize

install/ghost-install.sh

@@ -16,19 +16,19 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
   nginx \
-  ca-certificates
+  ca-certificates \
+  libjemalloc2
 msg_ok "Installed Dependencies"
 
-setup_mariadb
+setup_mysql
 
 msg_info "Configuring Database"
 DB_NAME=ghost
 DB_USER=ghostuser
 DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-
+$STD mysql -u root -e "CREATE DATABASE $DB_NAME;"
+$STD mysql -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
+$STD mysql -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
 {
   echo "Ghost-Credentials"
   echo "Ghost Database User: $DB_USER"
@@ -37,7 +37,7 @@ $STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUS
 } >>~/ghost.creds
 msg_ok "Configured MySQL"
 
-NODE_VERSION="20" setup_nodejs
+NODE_VERSION="22" setup_nodejs
 
 msg_info "Installing Ghost CLI"
 $STD npm install ghost-cli@latest -g

install/gitea-install.sh

@@ -19,10 +19,9 @@ $STD apt-get install -y git
 $STD apt-get install -y sqlite3
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Gitea"
-RELEASE=$(curl -fsSL https://github.com/go-gitea/gitea/releases/latest | grep "title>Release" | cut -d " " -f 4 | sed 's/^v//')
-curl -fsSL "https://github.com/go-gitea/gitea/releases/download/v$RELEASE/gitea-$RELEASE-linux-amd64" -o "gitea-$RELEASE-linux-amd64"
-mv gitea* /usr/local/bin/gitea
+fetch_and_deploy_gh_release "gitea" "go-gitea/gitea" "singlefile" "latest" "/usr/local/bin" "gitea-*-linux-amd64"
+
+msg_info "Configuring Gitea"
 chmod +x /usr/local/bin/gitea
 adduser --system --group --disabled-password --shell /bin/bash --home /etc/gitea gitea >/dev/null
 mkdir -p /var/lib/gitea/{custom,data,log}
@@ -31,7 +30,7 @@ chmod -R 750 /var/lib/gitea/
 chown root:gitea /etc/gitea
 chmod 770 /etc/gitea
 sudo -u gitea ln -s /var/lib/gitea/data/.ssh/ /etc/gitea/.ssh
-msg_ok "Installed Gitea"
+msg_ok "Configured Gitea"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/gitea.service

install/gitea-mirror-install.sh

@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: CrazyWolf13
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/arunavo4/gitea-mirror
+# Source: https://github.com/RayLabsHQ/gitea-mirror
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -28,7 +28,7 @@ ln -sf /opt/bun/bin/bun /usr/local/bin/bun
 ln -sf /opt/bun/bin/bun /usr/local/bin/bunx
 msg_ok "Installed Bun"
 
-fetch_and_deploy_gh_release "gitea-mirror" "arunavo4/gitea-mirror"
+fetch_and_deploy_gh_release "gitea-mirror" "RayLabsHQ/gitea-mirror"
 
 msg_info "Installing gitea-mirror"
 cd /opt/gitea-mirror

install/glance-install.sh

@@ -13,12 +13,9 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Glance"
-RELEASE=$(curl -fsSL https://api.github.com/repos/glanceapp/glance/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-cd /opt
-curl -fsSL "https://github.com/glanceapp/glance/releases/download/v${RELEASE}/glance-linux-amd64.tar.gz" -o "glance-linux-amd64.tar.gz"
-mkdir -p /opt/glance
-tar -xzf glance-linux-amd64.tar.gz -C /opt/glance
+fetch_and_deploy_gh_release "glance" "glanceapp/glance" "prebuild" "latest" "/opt/glance" "glance-linux-amd64.tar.gz"
+
+msg_info "Configuring Glance"
 cat <<EOF >/opt/glance/glance.yml
 pages:
   - name: Startpage
@@ -39,9 +36,7 @@ pages:
                   - title: Helper Scripts
                     url: https://github.com/community-scripts/ProxmoxVE
 EOF
-
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Glance"
+msg_ok "Configured Glance"
 
 msg_info "Creating Service"
 service_path="/etc/systemd/system/glance.service"
@@ -67,7 +62,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf /opt/glance-linux-amd64.tar.gz
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/habitica-install.sh

@@ -22,18 +22,16 @@ curl -fsSL "http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1
 $STD dpkg -i libssl1.1_1.1.1f-1ubuntu2_amd64.deb
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="20" setup_nodejs
+NODE_VERSION="20" NODE_MODULE="gulp-cli,mocha" setup_nodejs
+fetch_and_deploy_gh_release "habitica" "HabitRPG/habitica" "tarball" "latest" "/opt/habitica"
 
 msg_info "Setup ${APPLICATION}"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/HabitRPG/habitica/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/HabitRPG/habitica/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf $temp_file
-mv habitica-${RELEASE}/ /opt/habitica
 cd /opt/habitica
 $STD npm i
+$STD npm run postinstall
+$STD npm run client:build
+$STD gulp build:prod
 cp config.json.example config.json
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Setup ${APPLICATION}"
 
 msg_info "Creating Service"
@@ -91,7 +89,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/immich-install.sh

@@ -66,6 +66,7 @@ $STD apt-get install --no-install-recommends -y \
   mesa-vulkan-drivers \
   ocl-icd-libopencl1 \
   tini \
+  libaom-dev \
   zlib1g
 $STD apt-get install -y \
   libgdk-pixbuf-2.0-dev librsvg2-dev libtool
@@ -153,7 +154,6 @@ if [[ -f ~/.openvino ]]; then
 fi
 msg_ok "Packages from Testing Repo Installed"
 
-# Fix default DB collation issue after libc update
 $STD sudo -u postgres psql -c "ALTER DATABASE postgres REFRESH COLLATION VERSION;"
 $STD sudo -u postgres psql -c "ALTER DATABASE $DB_NAME REFRESH COLLATION VERSION;"
 
@@ -218,7 +218,7 @@ $STD cmake --preset=release-noplugins \
   -DWITH_LIBSHARPYUV=ON \
   -DWITH_LIBDE265=ON \
   -DWITH_AOM_DECODER=OFF \
-  -DWITH_AOM_ENCODER=OFF \
+  -DWITH_AOM_ENCODER=ON \
   -DWITH_X265=OFF \
   -DWITH_EXAMPLES=OFF \
   ..
@@ -254,7 +254,8 @@ $STD make clean
 cd "$STAGING_DIR"
 
 SOURCE=$SOURCE_DIR/libvips
-: "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
+# : "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
+: "${LIBVIPS_REVISION:=8fa37a64547e392d3808eed8d72adab7e02b3d00}"
 $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
 cd "$SOURCE"
 $STD git reset --hard "$LIBVIPS_REVISION"
@@ -301,6 +302,10 @@ cd "$SRC_DIR"
 cp -a server/{node_modules,dist,bin,resources,package.json,package-lock.json,start*.sh} "$APP_DIR"/
 cp -a web/build "$APP_DIR"/www
 cp LICENSE "$APP_DIR"
+cd "$APP_DIR"
+export SHARP_FORCE_GLOBAL_LIBVIPS=true
+$STD npm install sharp
+rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
 msg_ok "Installed Immich Web Components"
 
 cd "$SRC_DIR"/machine-learning
@@ -331,8 +336,6 @@ ln -s "$UPLOAD_DIR" "$APP_DIR"/upload
 ln -s "$UPLOAD_DIR" "$ML_DIR"/upload
 
 msg_info "Installing Immich CLI"
-$STD npm install --build-from-source sharp
-rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
 $STD npm i -g @immich/cli
 msg_ok "Installed Immich CLI"
 

install/mealie-install.sh

@@ -0,0 +1,148 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://mealie.io
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  build-essential \
+  libpq-dev \
+  libwebp-dev \
+  libsasl2-dev \
+  libldap2-dev \
+  libssl-dev
+msg_ok "Installed Dependencies"
+
+PYTHON_VERSION="3.12" setup_uv
+POSTGRES_VERSION="16" setup_postgresql
+NODE_MODULE="yarn" NODE_VERSION="20" setup_nodejs
+
+fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
+
+msg_info "Setup Database"
+DB_NAME=mealie_db
+DB_USER=mealie__user
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
+{
+  echo "Mealie-Credentials"
+  echo "Mealie Database User: $DB_USER"
+  echo "Mealie Database Password: $DB_PASS"
+  echo "Mealie Database Name: $DB_NAME"
+} >>~/mealie.creds
+msg_ok "Set up Database"
+
+msg_info "Building Frontend"
+export NUXT_TELEMETRY_DISABLED=1
+cd /opt/mealie/frontend
+$STD yarn install --prefer-offline --frozen-lockfile --non-interactive --production=false --network-timeout 1000000
+$STD yarn generate
+msg_ok "Built Frontend"
+
+msg_info "Copying Built Frontend into Backend Package"
+cp -r /opt/mealie/frontend/dist /opt/mealie/mealie/frontend
+msg_ok "Copied Frontend"
+
+msg_info "Preparing Backend (Poetry)"
+$STD uv venv /opt/mealie/.venv
+$STD /opt/mealie/.venv/bin/python -m ensurepip --upgrade
+$STD /opt/mealie/.venv/bin/python -m pip install --upgrade pip
+$STD /opt/mealie/.venv/bin/pip install uv
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/uv pip install poetry==2.0.1
+$STD /opt/mealie/.venv/bin/poetry self add "poetry-plugin-export>=1.9"
+msg_ok "Prepared Poetry"
+
+msg_info "Writing Environment File"
+cat <<EOF >/opt/mealie/mealie.env
+HOST=0.0.0.0
+PORT=9000
+DB_ENGINE=postgres
+POSTGRES_SERVER=localhost
+POSTGRES_PORT=5432
+POSTGRES_USER=${DB_USER}
+POSTGRES_PASSWORD=${DB_PASS}
+POSTGRES_DB=${DB_NAME}
+NLTK_DATA=/nltk_data
+PRODUCTION=true
+STATIC_FILES=/opt/mealie/frontend/dist
+EOF
+msg_ok "Wrote Environment File"
+
+msg_info "Creating Start Script"
+cat <<'EOF' >/opt/mealie/start.sh
+#!/bin/bash
+set -a
+source /opt/mealie/mealie.env
+set +a
+exec /opt/mealie/.venv/bin/mealie
+EOF
+chmod +x /opt/mealie/start.sh
+msg_ok "Created Start Script"
+
+msg_info "Building Mealie Backend Wheel"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/poetry build --output dist
+MEALIE_VERSION=$(/opt/mealie/.venv/bin/poetry version --short)
+$STD /opt/mealie/.venv/bin/poetry export --only=main --extras=pgsql --output=dist/requirements.txt
+echo "mealie[pgsql]==$MEALIE_VERSION \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.whl | tail -n1 | tr -d '\n' >>dist/requirements.txt
+echo " \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.tar.gz | tail -n1 >>dist/requirements.txt
+msg_ok "Built Wheel + Requirements"
+
+msg_info "Installing Mealie via uv"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/uv pip install --require-hashes -r /opt/mealie/dist/requirements.txt --find-links dist
+msg_ok "Installed Mealie"
+
+msg_info "Downloading NLTK Data"
+mkdir -p /nltk_data/
+$STD /opt/mealie/.venv/bin/python -m nltk.downloader -d /nltk_data averaged_perceptron_tagger_eng
+msg_ok "Downloaded NLTK Data"
+
+msg_info "Set Symbolic Links for Mealie"
+ln -sf /opt/mealie/.venv/bin/mealie /usr/local/bin/mealie
+ln -sf /opt/mealie/.venv/bin/poetry /usr/local/bin/poetry
+msg_ok "Set Symbolic Links"
+
+msg_info "Creating Systemd Service"
+cat <<EOF >/etc/systemd/system/mealie.service
+[Unit]
+Description=Mealie Backend Server
+After=network.target postgresql.service
+
+[Service]
+User=root
+WorkingDirectory=/opt/mealie
+ExecStart=/opt/mealie/start.sh
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now mealie
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/mqtt-install.sh

@@ -15,7 +15,7 @@ update_os
 
 msg_info "Installing Mosquitto MQTT Broker"
 source /etc/os-release
-curl -fsSL http://repo.mosquitto.org/debian/mosquitto-repo.gpg.key >/usr/share/keyrings/mosquitto-repo.gpg.key
+curl -fsSL http://repo.mosquitto.org/debian/mosquitto-repo.gpg >/usr/share/keyrings/mosquitto-repo.gpg.key
 chmod go+r /usr/share/keyrings/mosquitto-repo.gpg.key
 echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/mosquitto-repo.gpg.key] http://repo.mosquitto.org/debian ${VERSION_CODENAME} main" >/etc/apt/sources.list.d/mosquitto.list
 $STD apt-get update

install/planka-install.sh

@@ -45,12 +45,12 @@ fetch_and_deploy_gh_release "planka" "plankanban/planka" "prebuild" "latest" "/o
 msg_info "Configuring PLANKA"
 LOCAL_IP=$(hostname -I | awk '{print $1}')
 SECRET_KEY=$(openssl rand -hex 64)
-cd /opt/planka/planka
+cd /opt/planka
 $STD npm install
 cp .env.sample .env
-sed -i "s#http://localhost:1337#http://$LOCAL_IP:1337#g" /opt/planka/planka/.env
-sed -i "s#postgres@localhost#planka:$DB_PASS@localhost#g" /opt/planka/planka/.env
-sed -i "s#notsecretkey#$SECRET_KEY#g" /opt/planka/planka/.env
+sed -i "s#http://localhost:1337#http://$LOCAL_IP:1337#g" /opt/planka/.env
+sed -i "s#postgres@localhost#planka:$DB_PASS@localhost#g" /opt/planka/.env
+sed -i "s#notsecretkey#$SECRET_KEY#g" /opt/planka/.env
 $STD npm run db:init
 msg_ok "Configured PLANKA"
 
@@ -84,7 +84,7 @@ Description=planka Service
 After=network.target
 
 [Service]
-WorkingDirectory=/opt/planka/planka
+WorkingDirectory=/opt/planka
 ExecStart=/usr/bin/npm start --prod
 Restart=always
 

install/stirling-pdf-install.sh

@@ -15,7 +15,6 @@ update_os
 
 msg_info "Installing Dependencies (Patience)"
 $STD apt-get install -y \
-  git \
   automake \
   autoconf \
   libtool \
@@ -25,10 +24,26 @@ $STD apt-get install -y \
   make \
   g++ \
   unpaper \
+  fonts-urw-base35 \
   qpdf \
   poppler-utils
 msg_ok "Installed Dependencies"
 
+PYTHON_VERSION="3.12" setup_uv
+JAVA_VERSION="21" setup_java
+
+read -r -p "${TAB3}Do you want to Stirling-PDF with Login? (no/n = without Login) [Y/n] " response
+response=${response,,} # Convert to lowercase
+login_mode="false"
+if [[ "$response" == "y" || "$response" == "yes" || -z "$response" ]]; then
+  USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "stirling-pdf" "Stirling-Tools/Stirling-PDF" "singlefile" "latest" "/opt/Stirling-PDF" "Stirling-PDF-with-login.jar"
+  mv /opt/Stirling-PDF/Stirling-PDF-with-login.jar /opt/Stirling-PDF/Stirling-PDF.jar
+  touch ~/.Stirling-PDF-login
+  login_mode="true"
+else
+  USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "stirling-pdf" "Stirling-Tools/Stirling-PDF" "singlefile" "latest" "/opt/Stirling-PDF" "Stirling-PDF.jar"
+fi
+
 msg_info "Installing LibreOffice Components"
 $STD apt-get install -y \
   libreoffice-writer \
@@ -37,32 +52,35 @@ $STD apt-get install -y \
   libreoffice-core \
   libreoffice-common \
   libreoffice-base-core \
-  python3-uno
+  libreoffice-script-provider-python \
+  libreoffice-java-common \
+  unoconv \
+  pngquant \
+  weasyprint
 msg_ok "Installed LibreOffice Components"
 
 msg_info "Installing Python Dependencies"
-$STD apt-get install -y \
-  python3 \
-  python3-pip
-rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
-$STD pip3 install \
-  uno \
+mkdir -p /tmp/stirling-pdf
+$STD uv venv /opt/.venv
+export PATH="/opt/.venv/bin:$PATH"
+source /opt/.venv/bin/activate
+$STD uv pip install --upgrade pip
+$STD uv pip install \
   opencv-python-headless \
-  unoconv \
-  pngquant \
-  WeasyPrint
+  ocrmypdf \
+  pillow \
+  pdf2image
+
+$STD apt-get install -y python3-uno python3-pip
+$STD pip3 install --break-system-packages unoserver
+ln -sf /opt/.venv/bin/python3 /usr/local/bin/python3
+ln -sf /opt/.venv/bin/pip /usr/local/bin/pip
 msg_ok "Installed Python Dependencies"
 
-msg_info "Installing Azul Zulu"
-curl -fsSL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xB1998361219BD9C9" -o "/etc/apt/trusted.gpg.d/zulu-repo.asc"
-curl -fsSL "https://cdn.azul.com/zulu/bin/zulu-repo_1.0.0-3_all.deb" -o "/zulu-repo_1.0.0-3_all.deb"
-$STD dpkg -i zulu-repo_1.0.0-3_all.deb
-$STD apt-get update
-$STD apt-get -y install zulu17-jdk
-msg_ok "Installed Azul Zulu"
-
 msg_info "Installing JBIG2"
-$STD git clone https://github.com/agl/jbig2enc /opt/jbig2enc
+$STD curl -fsSL -o /tmp/jbig2enc.tar.gz https://github.com/agl/jbig2enc/archive/refs/tags/0.30.tar.gz
+mkdir -p /opt/jbig2enc
+tar -xzf /tmp/jbig2enc.tar.gz -C /opt/jbig2enc --strip-components=1
 cd /opt/jbig2enc
 $STD bash ./autogen.sh
 $STD bash ./configure
@@ -74,23 +92,46 @@ msg_info "Installing Language Packs (Patience)"
 $STD apt-get install -y 'tesseract-ocr-*'
 msg_ok "Installed Language Packs"
 
-msg_info "Installing Stirling-PDF (Additional Patience)"
-RELEASE=$(curl -fsSL https://api.github.com/repos/Stirling-Tools/Stirling-PDF/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/Stirling-Tools/Stirling-PDF/archive/refs/tags/v${RELEASE}.tar.gz" -o "v${RELEASE}.tar.gz"
-tar -xzf v${RELEASE}.tar.gz
-cd Stirling-PDF-$RELEASE
-chmod +x ./gradlew
-$STD ./gradlew build
-mkdir -p /opt/Stirling-PDF
-touch /opt/Stirling-PDF/.env
-mv ./build/libs/Stirling-PDF-*.jar /opt/Stirling-PDF/
-mv scripts /opt/Stirling-PDF/
-ln -s /opt/Stirling-PDF/Stirling-PDF-$RELEASE.jar /opt/Stirling-PDF/Stirling-PDF.jar
-ln -s /usr/share/tesseract-ocr/5/tessdata/ /usr/share/tessdata
-msg_ok "Installed Stirling-PDF"
+msg_info "Creating Environment Variables"
+cat <<EOF >/opt/Stirling-PDF/.env
+# Java tuning
+JAVA_BASE_OPTS="-XX:+UnlockExperimentalVMOptions -XX:MaxRAMPercentage=75 -XX:InitiatingHeapOccupancyPercent=20 -XX:+G1PeriodicGCInvokesConcurrent -XX:G1PeriodicGCInterval=10000 -XX:+UseStringDeduplication -XX:G1PeriodicGCSystemLoadThreshold=70"
+JAVA_CUSTOM_OPTS=""
+
+# LibreOffice
+PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+UNO_PATH=/usr/lib/libreoffice/program
+URE_BOOTSTRAP=file:///usr/lib/libreoffice/program/fundamentalrc
+PYTHONPATH=/usr/lib/libreoffice/program:/opt/.venv/lib/python3.12/site-packages
+LD_LIBRARY_PATH=/usr/lib/libreoffice/program
+
+STIRLING_TEMPFILES_DIRECTORY=/tmp/stirling-pdf
+TMPDIR=/tmp/stirling-pdf
+TEMP=/tmp/stirling-pdf
+TMP=/tmp/stirling-pdf
+
+# Paths
+PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+EOF
+
+if [[ "$login_mode" == "true" ]]; then
+  cat <<EOF >>/opt/Stirling-PDF/.env
+# activate Login
+DISABLE_ADDITIONAL_FEATURES=false
+SECURITY_ENABLELOGIN=true
+
+# login credentials
+SECURITY_INITIALLOGIN_USERNAME=admin
+SECURITY_INITIALLOGIN_PASSWORD=stirling
+EOF
+fi
+msg_ok "Created Environment Variables"
+
+msg_info "Refreshing Font Cache"
+$STD fc-cache -fv
+msg_ok "Font Cache Updated"
 
 msg_info "Creating Service"
-# Create LibreOffice listener service
 cat <<EOF >/etc/systemd/system/libreoffice-listener.service
 [Unit]
 Description=LibreOffice Headless Listener Service
@@ -107,14 +148,6 @@ Restart=always
 WantedBy=multi-user.target
 EOF
 
-# Set up environment variables
-cat <<EOF >/opt/Stirling-PDF/.env
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/libreoffice/program
-UNO_PATH=/usr/lib/libreoffice/program
-PYTHONPATH=/usr/lib/python3/dist-packages:/usr/lib/libreoffice/program
-LD_LIBRARY_PATH=/usr/lib/libreoffice/program
-EOF
-
 cat <<EOF >/etc/systemd/system/stirlingpdf.service
 [Unit]
 Description=Stirling-PDF service
@@ -137,16 +170,32 @@ RestartSec=10
 WantedBy=multi-user.target
 EOF
 
-# Enable and start services
+cat <<EOF >/etc/systemd/system/unoserver.service
+[Unit]
+Description=UnoServer RPC Interface
+After=libreoffice-listener.service
+Requires=libreoffice-listener.service
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/unoserver --port 2003 --interface 127.0.0.1
+Restart=always
+EnvironmentFile=/opt/Stirling-PDF/.env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
 systemctl enable -q --now libreoffice-listener
 systemctl enable -q --now stirlingpdf
+systemctl enable -q --now unoserver
 msg_ok "Created Service"
 
 motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf v${RELEASE}.tar.gz /zulu-repo_1.0.0-3_all.deb
+rm -f /tmp/jbig2enc.tar.gz
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/threadfin-install.sh

@@ -14,16 +14,14 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y ffmpeg
-$STD apt-get install -y vlc
+$STD apt-get install -y \
+  ffmpeg \
+  vlc
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Threadfin"
-mkdir -p /opt/threadfin
-curl -fsSL "https://github.com/Threadfin/Threadfin/releases/latest/download/Threadfin_linux_amd64" -o "/opt/threadfin/threadfin"
-chmod +x /opt/threadfin/threadfin
-
-msg_ok "Installed Threadfin"
+fetch_and_deploy_gh_release "threadfin" "threadfin/threadfin" "singlefile" "latest" "/opt/threadfin" "Threadfin_linux_amd64"
+mv /root/.threadfin /root/.threadfin_version
+mkdir -p /root/.threadfin
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/threadfin.service

misc/build.func

@@ -192,7 +192,6 @@ base_settings() {
   GATE=""
   APT_CACHER=""
   APT_CACHER_IP=""
-  #DISABLEIP6="no"
   MTU=""
   SD=""
   NS=""
@@ -228,7 +227,7 @@ write_config() {
   if whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "Write configfile" --yesno "Do you want to write the selections to a config file?" 10 60; then
     FILEPATH="/opt/community-scripts/${NSAPP}.conf"
     if [[ ! -f $FILEPATH ]]; then
-      cat <<EOF >"$FILEPATH"
+  cat <<EOF >"$FILEPATH"
 # ${NSAPP} Configuration File
 # Generated on $(date)
 
@@ -236,31 +235,36 @@ CT_TYPE="${CT_TYPE}"
 DISK_SIZE="${DISK_SIZE}"
 CORE_COUNT="${CORE_COUNT}"
 RAM_SIZE="${RAM_SIZE}"
+VERBOSE="${VERBOSE}"
+PW="${PW##-password }"
+#CT_ID=$NEXTID
 HN="${HN}"
 BRG="${BRG}"
+NET="${NET}"
+IPV6_METHOD="${IPV6_METHOD:-none}"
+# Set this only if using "IPV6_METHOD=static"
+#IPV6STATIC="fd00::1234/64"
+
+GATE="${GATE:-none}"
 APT_CACHER_IP="${APT_CACHER_IP:-none}"
-DISABLEIP6=""
-PW='${PW:-none}'
+MTU="${MTU:-1500}"
+SD="${SD:-none}"
+NS="${NS:-none}"
+MAC="${MAC:-none}"
+VLAN="${VLAN:-none}"
 SSH="${SSH}"
 SSH_AUTHORIZED_KEY="${SSH_AUTHORIZED_KEY}"
-VERBOSE="${VERBOSE}"
 TAGS="${TAGS:-none}"
-VLAN="${VLAN:-none}"
-MTU="${MTU:-1500}"
-GATE="${GATE:-none}"
-SD="${SD:-none}"
-MAC="${MAC:-none}"
-NS="${NS:-none}"
-NET="${NET}"
-FUSE="${ENABLE_FUSE}"
-
+ENABLE_FUSE="$ENABLE_FUSE"
+ENABLE_TUN="$ENABLE_TUN"
 EOF
+
       echo -e "${INFO}${BOLD}${GN}Writing configuration to ${FILEPATH}${CL}"
     else
       echo -e "${INFO}${BOLD}${RD}Configuration file already exists at ${FILEPATH}${CL}"
       if whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "Overwrite configfile" --yesno "Do you want to overwrite the existing config file?" 10 60; then
         rm -f "$FILEPATH"
-        cat <<EOF >"$FILEPATH"
+          cat <<EOF >"$FILEPATH"
 # ${NSAPP} Configuration File
 # Generated on $(date)
 
@@ -268,24 +272,29 @@ CT_TYPE="${CT_TYPE}"
 DISK_SIZE="${DISK_SIZE}"
 CORE_COUNT="${CORE_COUNT}"
 RAM_SIZE="${RAM_SIZE}"
+VERBOSE="${VERBOSE}"
+PW="${PW##-password }"
+#CT_ID=$NEXTID
 HN="${HN}"
 BRG="${BRG}"
+NET="${NET}"
+IPV6_METHOD="${IPV6_METHOD:-none}"
+
+# Set this only if using "IPV6_METHOD=static"
+#IPV6STATIC="fd00::1234/64"
+
+GATE="${GATE:-none}"
 APT_CACHER_IP="${APT_CACHER_IP:-none}"
-DISABLEIP6=""
-PW='${PW:-none}'
+MTU="${MTU:-1500}"
+SD="${SD:-none}"
+NS="${NS:-none}"
+MAC="${MAC:-none}"
+VLAN="${VLAN:-none}"
 SSH="${SSH}"
 SSH_AUTHORIZED_KEY="${SSH_AUTHORIZED_KEY}"
-VERBOSE="${VERBOSE}"
 TAGS="${TAGS:-none}"
-VLAN="${VLAN:-none}"
-MTU="${MTU:-1500}"
-GATE="${GATE:-none}"
-SD="${SD:-none}"
-MAC="${MAC:-none}"
-NS="${NS:-none}"
-NET="${NET}"
-FUSE="${ENABLE_FUSE}"
-
+ENABLE_FUSE="$ENABLE_FUSE"
+ENABLE_TUN="$ENABLE_TUN"
 EOF
         echo -e "${INFO}${BOLD}${GN}Writing configuration to ${FILEPATH}${CL}"
       else
@@ -667,13 +676,6 @@ advanced_settings() {
     fi
   fi
 
-  # if (whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "IPv6" --yesno "Disable IPv6?" 10 58); then
-  #   DISABLEIP6="yes"
-  # else
-  #   DISABLEIP6="no"
-  # fi
-  # echo -e "${DISABLEIPV6}${BOLD}${DGN}Disable IPv6: ${BGN}$DISABLEIP6${CL}"
-
   if MTU1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Interface MTU Size (leave blank for default [The MTU of your selected vmbr, default is 1500])" 8 58 --title "MTU SIZE" 3>&1 1>&2 2>&3); then
     if [ -z "$MTU1" ]; then
       MTU1="Default"
@@ -815,7 +817,6 @@ DIAGNOSTICS=yes
 #"ram_size"
 #"os_type"
 #"os_version"
-#"disableip6"
 #"nsapp"
 #"method"
 #"pve_version"
@@ -842,7 +843,6 @@ DIAGNOSTICS=no
 #"ram_size"
 #"os_type"
 #"os_version"
-#"disableip6"
 #"nsapp"
 #"method"
 #"pve_version"
@@ -1064,7 +1064,6 @@ build_container() {
   export CACHER="$APT_CACHER"
   export CACHER_IP="$APT_CACHER_IP"
   export tz="$timezone"
-  #export DISABLEIPV6="$DISABLEIP6"
   export APPLICATION="$APP"
   export app="$NSAPP"
   export PASSWORD="$PW"
@@ -1142,64 +1141,48 @@ EOF
 
     echo ""
     msg_custom "⚙️ " "\e[96m" "Configuring VAAPI passthrough for LXC container"
-
     if [ "$CT_TYPE" != "0" ]; then
       msg_custom "⚠️ " "\e[33m" "Container is unprivileged – VAAPI passthrough may not work without additional host configuration (e.g., idmap)."
     fi
-
     msg_custom "ℹ️ " "\e[96m" "VAAPI enables GPU hardware acceleration (e.g., for video transcoding in Jellyfin or Plex)."
-
     echo ""
     read -rp "➤ Automatically mount all available VAAPI devices? [Y/n]: " VAAPI_ALL
 
     if [[ "$VAAPI_ALL" =~ ^[Yy]$|^$ ]]; then
-      # Mount all devices automatically
-      if [[ -e /dev/dri/renderD128 ]]; then
-        echo "lxc.cgroup2.devices.allow: c 226:128 rwm" >>"$LXC_CONFIG"
-        echo "lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file" >>"$LXC_CONFIG"
-      fi
-      if [[ -e /dev/dri/card0 ]]; then
-        echo "lxc.cgroup2.devices.allow: c 226:0 rwm" >>"$LXC_CONFIG"
-
-        echo "lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file" >>"$LXC_CONFIG"
-      fi
-      if [[ -e /dev/fb0 ]]; then
-        echo "lxc.cgroup2.devices.allow: c 29:0 rwm" >>"$LXC_CONFIG"
-        echo "lxc.mount.entry: /dev/fb0 dev/fb0 none bind,optional,create=file" >>"$LXC_CONFIG"
-      fi
-      if [[ -d /dev/dri ]]; then
-        echo "lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir" >>"$LXC_CONFIG"
-      fi
-    else
-      # Manual selection per device
-      if [[ -e /dev/dri/renderD128 ]]; then
-        read -rp "➤ Mount /dev/dri/renderD128 (GPU rendering)? [y/N]: " MOUNT_D128
-        if [[ "$MOUNT_D128" =~ ^[Yy]$ ]]; then
+      if [ "$CT_TYPE" == "0" ]; then
+        # PRV Container → alles zulässig
+        [[ -e /dev/dri/renderD128 ]] && {
           echo "lxc.cgroup2.devices.allow: c 226:128 rwm" >>"$LXC_CONFIG"
           echo "lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file" >>"$LXC_CONFIG"
-        fi
-      fi
-
-      if [[ -e /dev/dri/card0 ]]; then
-        read -rp "➤ Mount /dev/dri/card0 (GPU hardware interface)? [y/N]: " MOUNT_CARD0
-        if [[ "$MOUNT_CARD0" =~ ^[Yy]$ ]]; then
+        }
+        [[ -e /dev/dri/card0 ]] && {
           echo "lxc.cgroup2.devices.allow: c 226:0 rwm" >>"$LXC_CONFIG"
           echo "lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file" >>"$LXC_CONFIG"
-
-        fi
-      fi
-
-      if [[ -e /dev/fb0 ]]; then
-        read -rp "➤ Mount /dev/fb0 (Framebuffer, GUI)? [y/N]: " MOUNT_FB0
-        if [[ "$MOUNT_FB0" =~ ^[Yy]$ ]]; then
+        }
+        [[ -e /dev/fb0 ]] && {
           echo "lxc.cgroup2.devices.allow: c 29:0 rwm" >>"$LXC_CONFIG"
           echo "lxc.mount.entry: /dev/fb0 dev/fb0 none bind,optional,create=file" >>"$LXC_CONFIG"
-        fi
+        }
+        [[ -d /dev/dri ]] && {
+          echo "lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir" >>"$LXC_CONFIG"
+        }
+      else
+        # UNPRV Container → nur devX für UI
+        [[ -e /dev/dri/card0 ]] && echo "dev0: /dev/dri/card0,gid=44" >>"$LXC_CONFIG"
+        [[ -e /dev/dri/card1 ]] && echo "dev0: /dev/dri/card1,gid=44" >>"$LXC_CONFIG"
+        [[ -e /dev/dri/renderD128 ]] && echo "dev1: /dev/dri/renderD128,gid=104" >>"$LXC_CONFIG"
       fi
+    fi
 
-      if [[ -d /dev/dri ]]; then
-        echo "lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir" >>"$LXC_CONFIG"
-      fi
+  fi
+  if [ "$CT_TYPE" == "1" ] && [ "$is_vaapi_app" == "true" ]; then
+    if [[ -e /dev/dri/card0 ]]; then
+      echo "dev0: /dev/dri/card0,gid=44" >>"$LXC_CONFIG"
+    elif [[ -e /dev/dri/card1 ]]; then
+      echo "dev0: /dev/dri/card1,gid=44" >>"$LXC_CONFIG"
+    fi
+    if [[ -e /dev/dri/renderD128 ]]; then
+      echo "dev1: /dev/dri/renderD128,gid=104" >>"$LXC_CONFIG"
     fi
   fi
 

misc/config-file.func

@@ -446,6 +446,22 @@ config_file() {
     fi
   fi
 
+  if [[ "$IPV6_METHOD" == "static" ]]; then
+    if [[ -n "$IPV6STATIC" ]]; then
+      IP6=",ip6=${IPV6STATIC}"
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6 Address: ${BGN}${IPV6STATIC}${CL}"
+    else
+      msg_error "IPV6_METHOD is set to static but IPV6STATIC is empty"
+      exit
+    fi
+  elif [[ "$IPV6_METHOD" == "auto" ]]; then
+    IP6=",ip6=auto"
+    echo -e "${NETWORK}${BOLD}${DGN}IPv6 Address: ${BGN}auto${CL}"
+  else
+    IP6=""
+    echo -e "${NETWORK}${BOLD}${DGN}IPv6 Address: ${BGN}none${CL}"
+  fi
+
   if [[ -n "${SD-}" ]]; then
     if [[ "$SD" == "none" ]]; then
       SD=""
@@ -622,6 +638,24 @@ config_file() {
     echo -e "${FUSE}${BOLD}${DGN}Enable FUSE: ${BGN}$ENABLE_FUSE${CL}"
   fi
 
+  if [[ -n "$ENABLE_TUN" ]]; then
+    if [[ "$ENABLE_TUN" == "yes" ]]; then
+      echo -e "${FUSE}${BOLD}${DGN}Enable TUN: ${BGN}Yes${CL}"
+    elif [[ "$ENABLE_TUN" == "no" ]]; then
+      echo -e "${FUSE}${BOLD}${DGN}Enable TUN: ${BGN}No${CL}"
+    else
+      msg_error "Enable TUN needs to be 'yes' or 'no', was ${ENABLE_TUN}"
+      exit
+    fi
+  else
+    if (whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "TUN" --yesno "Enable TUN?" 10 58); then
+      ENABLE_TUN="yes"
+    else
+      ENABLE_TUN="no"
+    fi
+    echo -e "${FUSE}${BOLD}${DGN}Enable TUN: ${BGN}$ENABLE_TUN${CL}"
+  fi
+
   if [[ -n "${VERBOSE-}" ]]; then
     if [[ "$VERBOSE" == "yes" ]]; then
       echo -e "${SEARCH}${BOLD}${DGN}Verbose Mode: ${BGN}$VERBOSE${CL}"

misc/core.func

@@ -355,7 +355,6 @@ msg_custom() {
   [[ -z "$msg" ]] && return
   stop_spinner
   echo -e "${BFR:-} ${symbol} ${color}${msg}${CL:-\e[0m}"
-  printf "\r\033[K\e[?25h\n"
 }
 
 run_container_safe() {

misc/create_lxc.sh

@@ -253,7 +253,7 @@ fi
 TEMPLATE_SEARCH="${PCT_OSTYPE}-${PCT_OSVERSION:-}"
 
 msg_info "Updating LXC Template List"
-if ! timeout 15 pveam update >/dev/null 2>&1; then
+if ! pveam update >/dev/null 2>&1; then
   TEMPLATE_FALLBACK=$(pveam list "$TEMPLATE_STORAGE" | awk "/$TEMPLATE_SEARCH/ {print \$2}" | sort -t - -k 2 -V | tail -n1)
   if [[ -z "$TEMPLATE_FALLBACK" ]]; then
     msg_error "Failed to update LXC template list and no local template matching '$TEMPLATE_SEARCH' found."
@@ -284,7 +284,7 @@ if ! pveam list "$TEMPLATE_STORAGE" | grep -q "$TEMPLATE" || ! zstdcat "$TEMPLAT
   for attempt in {1..3}; do
     msg_info "Attempt $attempt: Downloading LXC template..."
 
-    if timeout 120 pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >/dev/null 2>&1; then
+    if pveam download "$TEMPLATE_STORAGE" "$TEMPLATE" >/dev/null 2>&1; then
       msg_ok "Template download successful."
       break
     fi

misc/tools.func

@@ -54,9 +54,14 @@ function setup_nodejs() {
     echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_${NODE_VERSION}.x nodistro main" \
       >/etc/apt/sources.list.d/nodesource.list
 
+    sleep 2
     if ! apt-get update >/dev/null 2>&1; then
-      msg_error "Failed to update APT repositories after adding NodeSource"
-      exit 1
+      msg_warn "APT update failed – retrying in 5s"
+      sleep 5
+      if ! apt-get update >/dev/null 2>&1; then
+        msg_error "Failed to update APT repositories after adding NodeSource"
+        exit 1
+      fi
     fi
 
     if ! apt-get install -y nodejs >/dev/null 2>&1; then
@@ -368,25 +373,6 @@ function setup_mysql() {
 #   PHP_MAX_EXECUTION_TIME     - (default: 300)
 # ------------------------------------------------------------------------------
 
-# ------------------------------------------------------------------------------
-# Installs PHP with selected modules and configures Apache/FPM support.
-#
-# Description:
-#   - Adds Sury PHP repo if needed
-#   - Installs default and user-defined modules
-#   - Patches php.ini for CLI, Apache, and FPM as needed
-#
-# Variables:
-#   PHP_VERSION                - PHP version to install (default: 8.4)
-#   PHP_MODULE                 - Additional comma-separated modules
-#   PHP_APACHE                 - Set YES to enable PHP with Apache
-#   PHP_FPM                    - Set YES to enable PHP-FPM
-#   PHP_MEMORY_LIMIT           - (default: 512M)
-#   PHP_UPLOAD_MAX_FILESIZE    - (default: 128M)
-#   PHP_POST_MAX_SIZE          - (default: 128M)
-#   PHP_MAX_EXECUTION_TIME     - (default: 300)
-# ------------------------------------------------------------------------------
-
 function setup_php() {
   local PHP_VERSION="${PHP_VERSION:-8.4}"
   local PHP_MODULE="${PHP_MODULE:-}"
@@ -435,6 +421,13 @@ function setup_php() {
   fi
 
   local MODULE_LIST="php${PHP_VERSION}"
+  for pkg in $MODULE_LIST; do
+    if ! apt-cache show "$pkg" >/dev/null 2>&1; then
+      msg_error "Package not found: $pkg"
+      exit 1
+    fi
+  done
+
   IFS=',' read -ra MODULES <<<"$COMBINED_MODULES"
   for mod in "${MODULES[@]}"; do
     MODULE_LIST+=" php${PHP_VERSION}-${mod}"
@@ -443,11 +436,17 @@ function setup_php() {
   if [[ "$PHP_FPM" == "YES" ]]; then
     MODULE_LIST+=" php${PHP_VERSION}-fpm"
   fi
+  if [[ "$PHP_APACHE" == "YES" ]]; then
+    $STD apt-get install -y apache2 libapache2-mod-php${PHP_VERSION}
+    $STD systemctl restart apache2 || true
+  fi
 
   if [[ "$PHP_APACHE" == "YES" ]] && [[ -n "$CURRENT_PHP" ]]; then
     if [[ -f /etc/apache2/mods-enabled/php${CURRENT_PHP}.load ]]; then
       $STD a2dismod php${CURRENT_PHP} || true
     fi
+    $STD a2enmod php${PHP_VERSION}
+    $STD systemctl restart apache2 || true
   fi
 
   if [[ "$PHP_FPM" == "YES" ]] && [[ -n "$CURRENT_PHP" ]]; then
@@ -458,10 +457,6 @@ function setup_php() {
   $STD apt-get install -y $MODULE_LIST
   msg_ok "Setup PHP $PHP_VERSION"
 
-  if [[ "$PHP_APACHE" == "YES" ]]; then
-    $STD systemctl restart apache2 || true
-  fi
-
   if [[ "$PHP_FPM" == "YES" ]]; then
     $STD systemctl enable php${PHP_VERSION}-fpm
     $STD systemctl restart php${PHP_VERSION}-fpm
@@ -651,6 +646,15 @@ function setup_mongodb() {
   DISTRO_ID=$(awk -F= '/^ID=/{ gsub(/"/,"",$2); print $2 }' /etc/os-release)
   DISTRO_CODENAME=$(awk -F= '/^VERSION_CODENAME=/{ print $2 }' /etc/os-release)
 
+  # Check AVX support
+  if ! grep -qm1 'avx[^ ]*' /proc/cpuinfo; then
+    local major="${MONGO_VERSION%%.*}"
+    if ((major > 5)); then
+      msg_error "MongoDB ${MONGO_VERSION} requires AVX support, which is not available on this system."
+      return 1
+    fi
+  fi
+
   case "$DISTRO_ID" in
   ubuntu)
     MONGO_BASE_URL="https://repo.mongodb.org/apt/ubuntu"
@@ -899,7 +903,7 @@ function fetch_and_deploy_gh_release() {
       }
     }
 
-    ### Prebuild Mode ###
+  ### Prebuild Mode ###
   elif [[ "$mode" == "prebuild" ]]; then
     local pattern="${6%\"}"
     pattern="${pattern#\"}"
@@ -918,7 +922,6 @@ function fetch_and_deploy_gh_release() {
         break
         ;;
       esac
-
     done
 
     [[ -z "$asset_url" ]] && {
@@ -934,20 +937,42 @@ function fetch_and_deploy_gh_release() {
       return 1
     }
 
+    local unpack_tmp
+    unpack_tmp=$(mktemp -d)
     mkdir -p "$target"
+
     if [[ "$filename" == *.zip ]]; then
       if ! command -v unzip &>/dev/null; then
         $STD apt-get install -y unzip
       fi
-      $STD unzip "$tmpdir/$filename" -d "$target"
+      unzip -q "$tmpdir/$filename" -d "$unpack_tmp"
     elif [[ "$filename" == *.tar.* ]]; then
-      tar --strip-components=1 -xf "$tmpdir/$filename" -C "$target"
+      tar -xf "$tmpdir/$filename" -C "$unpack_tmp"
     else
       msg_error "Unsupported archive format: $filename"
-      rm -rf "$tmpdir"
+      rm -rf "$tmpdir" "$unpack_tmp"
       return 1
     fi
 
+    local top_dirs
+    top_dirs=$(find "$unpack_tmp" -mindepth 1 -maxdepth 1 -type d | wc -l)
+
+    if [[ "$top_dirs" -eq 1 ]]; then
+      # Strip leading folder
+      local inner_dir
+      inner_dir=$(find "$unpack_tmp" -mindepth 1 -maxdepth 1 -type d)
+      shopt -s dotglob nullglob
+      cp -r "$inner_dir"/* "$target/"
+      shopt -u dotglob nullglob
+    else
+      # Copy all contents
+      shopt -s dotglob nullglob
+      cp -r "$unpack_tmp"/* "$target/"
+      shopt -u dotglob nullglob
+    fi
+
+    rm -rf "$unpack_tmp"
+
     ### Singlefile Mode ###
   elif [[ "$mode" == "singlefile" ]]; then
     local pattern="${6%\"}"
@@ -977,13 +1002,20 @@ function fetch_and_deploy_gh_release() {
 
     filename="${asset_url##*/}"
     mkdir -p "$target"
-    curl $download_timeout -fsSL -o "$target/$app" "$asset_url" || {
+
+    local use_filename="${USE_ORIGINAL_FILENAME:-false}"
+    local target_file="$app"
+    [[ "$use_filename" == "true" ]] && target_file="$filename"
+
+    curl $download_timeout -fsSL -o "$target/$target_file" "$asset_url" || {
       msg_error "Download failed: $asset_url"
       rm -rf "$tmpdir"
       return 1
     }
 
-    chmod +x "$target/$app"
+    if [[ "$target_file" != *.jar && -f "$target/$target_file" ]]; then
+      chmod +x "$target/$target_file"
+    fi
 
   else
     msg_error "Unknown mode: $mode"
@@ -1662,3 +1694,154 @@ function setup_imagemagick() {
   ensure_usr_local_bin_persist
   msg_ok "Setup ImageMagick $VERSION"
 }
+
+# ------------------------------------------------------------------------------
+# Installs FFmpeg from source or prebuilt binary (Debian/Ubuntu only).
+#
+# Description:
+#   - Downloads and builds FFmpeg from GitHub (https://github.com/FFmpeg/FFmpeg)
+#   - Supports specific version override via FFMPEG_VERSION (e.g. n7.1.1)
+#   - Supports build profile via FFMPEG_TYPE:
+#       - minimal : x264, vpx, mp3 only
+#       - medium  : adds subtitles, fonts, opus, vorbis
+#       - full    : adds dav1d, svt-av1, zlib, numa
+#       - binary  : downloads static build (johnvansickle.com)
+#   - Defaults to latest stable version and full feature set
+#
+# Notes:
+#   - Requires: curl, jq, build-essential, and matching codec libraries
+#   - Result is installed to /usr/local/bin/ffmpeg
+# ------------------------------------------------------------------------------
+
+function setup_ffmpeg() {
+  local TMP_DIR
+  TMP_DIR=$(mktemp -d)
+  local GITHUB_REPO="FFmpeg/FFmpeg"
+  local VERSION="${FFMPEG_VERSION:-latest}"
+  local TYPE="${FFMPEG_TYPE:-full}"
+  local BIN_PATH="/usr/local/bin/ffmpeg"
+
+  # Binary fallback mode
+  if [[ "$TYPE" == "binary" ]]; then
+    msg_info "Installing FFmpeg (static binary)"
+    curl -fsSL https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz -o "$TMP_DIR/ffmpeg.tar.xz"
+    tar -xf "$TMP_DIR/ffmpeg.tar.xz" -C "$TMP_DIR"
+    local EXTRACTED_DIR
+    EXTRACTED_DIR=$(find "$TMP_DIR" -maxdepth 1 -type d -name "ffmpeg-*")
+    cp "$EXTRACTED_DIR/ffmpeg" "$BIN_PATH"
+    cp "$EXTRACTED_DIR/ffprobe" /usr/local/bin/ffprobe
+    chmod +x "$BIN_PATH" /usr/local/bin/ffprobe
+    rm -rf "$TMP_DIR"
+    msg_ok "Installed FFmpeg binary ($($BIN_PATH -version | head -n1))"
+    return
+  fi
+
+  if ! command -v jq &>/dev/null; then
+    $STD apt-get update
+    $STD apt-get install -y jq
+  fi
+
+  # Auto-detect latest stable version if none specified
+  if [[ "$VERSION" == "latest" || -z "$VERSION" ]]; then
+    msg_info "Resolving latest FFmpeg tag"
+    VERSION=$(curl -fsSL "https://api.github.com/repos/${GITHUB_REPO}/tags" |
+      jq -r '.[].name' |
+      grep -E '^n[0-9]+\.[0-9]+\.[0-9]+$' |
+      sort -V | tail -n1)
+  fi
+
+  if [[ -z "$VERSION" ]]; then
+    msg_error "Could not determine FFmpeg version"
+    rm -rf "$TMP_DIR"
+    return 1
+  fi
+
+  msg_info "Installing FFmpeg ${VERSION} ($TYPE)"
+
+  # Dependency selection
+  local DEPS=(build-essential yasm nasm pkg-config)
+  case "$TYPE" in
+  minimal)
+    DEPS+=(libx264-dev libvpx-dev libmp3lame-dev)
+    ;;
+  medium)
+    DEPS+=(libx264-dev libvpx-dev libmp3lame-dev libfreetype6-dev libass-dev libopus-dev libvorbis-dev)
+    ;;
+  full)
+    DEPS+=(
+      libx264-dev libx265-dev libvpx-dev libmp3lame-dev
+      libfreetype6-dev libass-dev libopus-dev libvorbis-dev
+      libdav1d-dev libsvtav1-dev zlib1g-dev libnuma-dev
+    )
+    ;;
+  *)
+    msg_error "Invalid FFMPEG_TYPE: $TYPE"
+    rm -rf "$TMP_DIR"
+    return 1
+    ;;
+  esac
+
+  $STD apt-get update
+  $STD apt-get install -y "${DEPS[@]}"
+
+  curl -fsSL "https://github.com/${GITHUB_REPO}/archive/refs/tags/${VERSION}.tar.gz" -o "$TMP_DIR/ffmpeg.tar.gz"
+  tar -xzf "$TMP_DIR/ffmpeg.tar.gz" -C "$TMP_DIR"
+  cd "$TMP_DIR/FFmpeg-"* || {
+    msg_error "Source extraction failed"
+    rm -rf "$TMP_DIR"
+    return 1
+  }
+
+  local args=(
+    --enable-gpl
+    --enable-shared
+    --enable-nonfree
+    --disable-static
+    --enable-libx264
+    --enable-libvpx
+    --enable-libmp3lame
+  )
+
+  if [[ "$TYPE" != "minimal" ]]; then
+    args+=(--enable-libfreetype --enable-libass --enable-libopus --enable-libvorbis)
+  fi
+
+  if [[ "$TYPE" == "full" ]]; then
+    args+=(--enable-libx265 --enable-libdav1d --enable-zlib)
+  fi
+
+  if [[ ${#args[@]} -eq 0 ]]; then
+    msg_error "FFmpeg configure args array is empty – aborting."
+    rm -rf "$TMP_DIR"
+    return 1
+  fi
+
+  ./configure "${args[@]}" >"$TMP_DIR/configure.log" 2>&1 || {
+    msg_error "FFmpeg ./configure failed (see $TMP_DIR/configure.log)"
+    cat "$TMP_DIR/configure.log" | tail -n 20
+    rm -rf "$TMP_DIR"
+    return 1
+  }
+
+  $STD make -j"$(nproc)"
+  $STD make install
+  echo "/usr/local/lib" >/etc/ld.so.conf.d/ffmpeg.conf
+  ldconfig
+
+  ldconfig -p | grep libavdevice >/dev/null || {
+    msg_error "libavdevice not registered with dynamic linker"
+    return 1
+  }
+
+  if ! command -v ffmpeg &>/dev/null; then
+    msg_error "FFmpeg installation failed"
+    rm -rf "$TMP_DIR"
+    return 1
+  fi
+
+  local FINAL_VERSION
+  FINAL_VERSION=$(ffmpeg -version | head -n1 | awk '{print $3}')
+  rm -rf "$TMP_DIR"
+  ensure_usr_local_bin_persist
+  msg_ok "Setup FFmpeg $FINAL_VERSION"
+}

tools/pve/add-iptag.sh

@@ -162,6 +162,21 @@ update_installation() {
   generate_service >/lib/systemd/system/iptag.service
   msg_ok "Updated service file"
 
+  msg_info "Creating manual run command"
+  cat <<'EOF' >/usr/local/bin/iptag-run
+#!/usr/bin/env bash
+CONFIG_FILE="/opt/iptag/iptag.conf"
+SCRIPT_FILE="/opt/iptag/iptag"
+if [[ ! -f "$SCRIPT_FILE" ]]; then
+  echo "❌ Main script not found: $SCRIPT_FILE"
+  exit 1
+fi
+export FORCE_SINGLE_RUN=true
+exec "$SCRIPT_FILE"
+EOF
+  chmod +x /usr/local/bin/iptag-run
+  msg_ok "Created iptag-run executable - You can execute this manually by entering “iptag-run” in the Proxmox host, so the script is executed by hand."
+
   msg_info "Restarting service"
   systemctl daemon-reload &>/dev/null
   systemctl enable -q --now iptag.service &>/dev/null
@@ -194,18 +209,19 @@ LXC_STATUS_CHECK_INTERVAL=300
 FORCE_UPDATE_INTERVAL=7200
 
 # Performance optimizations
-VM_IP_CACHE_TTL=120
-MAX_PARALLEL_VM_CHECKS=5
+VM_IP_CACHE_TTL=300
+MAX_PARALLEL_VM_CHECKS=1
 
 # LXC performance optimizations  
-LXC_IP_CACHE_TTL=0
-MAX_PARALLEL_LXC_CHECKS=7
+LXC_IP_CACHE_TTL=300
+MAX_PARALLEL_LXC_CHECKS=2
 
 # Extreme LXC optimizations
-LXC_BATCH_SIZE=20
-LXC_STATUS_CACHE_TTL=30
+LXC_BATCH_SIZE=3
+LXC_STATUS_CACHE_TTL=300
 LXC_AGGRESSIVE_CACHING=true
 LXC_SKIP_SLOW_METHODS=true
+LXC_ALLOW_FORCED_COMMANDS=false
 
 # Debug settings (set to true to enable debugging)
 DEBUG=false
@@ -222,8 +238,8 @@ After=network.target
 [Service]
 Type=simple
 ExecStart=/opt/iptag/iptag
-Restart=always
-RestartSec=1
+Restart=on-failure
+RestartSec=10
 
 [Install]
 WantedBy=multi-user.target
@@ -576,7 +592,9 @@ update_tags() {
 
     if [[ "$type" == "lxc" ]]; then
         current_ips_full=$(get_lxc_ips "${vmid}")
-        local current_tags_raw=$(pct config "${vmid}" 2>/dev/null | grep tags | awk '{print $2}')
+        while IFS= read -r line; do
+          [[ "$line" == tags:* ]] && current_tags_raw="${line#tags: }" && break
+        done < <(pct config "$vmid" 2>/dev/null)
     else
         current_ips_full=$(get_vm_ips "${vmid}")
         local vm_config="/etc/pve/qemu-server/${vmid}.conf"
@@ -789,7 +807,10 @@ check_status_changed() {
 check() {
     local current_time changes_detected=false
     current_time=$(date +%s)
-    
+
+    local update_lxc=false
+    local update_vm=false
+
     # Periodic cache cleanup (every 10 minutes)
     local time_since_last_cleanup=$((current_time - ${last_cleanup_time:-0}))
     if [[ $time_since_last_cleanup -ge 600 ]]; then
@@ -801,60 +822,56 @@ check() {
     # Check LXC status
     local time_since_last_lxc_check=$((current_time - last_lxc_status_check_time))
     if [[ "${LXC_STATUS_CHECK_INTERVAL:-60}" -gt 0 ]] && \
-       [[ "${time_since_last_lxc_check}" -ge "${LXC_STATUS_CHECK_INTERVAL:-60}" ]]; then
-        last_lxc_status_check_time=${current_time}
+       [[ "$time_since_last_lxc_check" -ge "${LXC_STATUS_CHECK_INTERVAL:-60}" ]]; then
+        last_lxc_status_check_time=$current_time
         if check_status_changed "lxc"; then
-            changes_detected=true
-            log_warning "LXC status changes detected, updating tags"
-            update_all_tags "lxc"
-            last_update_lxc_time=${current_time}
+            update_lxc=true
+            log_warning "LXC status changes detected"
         fi
     fi
 
     # Check VM status
     local time_since_last_vm_check=$((current_time - last_vm_status_check_time))
     if [[ "${VM_STATUS_CHECK_INTERVAL:-60}" -gt 0 ]] && \
-       [[ "${time_since_last_vm_check}" -ge "${VM_STATUS_CHECK_INTERVAL:-60}" ]]; then
-        last_vm_status_check_time=${current_time}
+       [[ "$time_since_last_vm_check" -ge "${VM_STATUS_CHECK_INTERVAL:-60}" ]]; then
+        last_vm_status_check_time=$current_time
         if check_status_changed "vm"; then
-            changes_detected=true
-            log_warning "VM status changes detected, updating tags"
-            update_all_tags "vm"
-            last_update_vm_time=${current_time}
+            update_vm=true
+            log_warning "VM status changes detected"
         fi
     fi
 
     # Check network interface changes
     local time_since_last_fw_check=$((current_time - last_fw_net_interface_check_time))
     if [[ "${FW_NET_INTERFACE_CHECK_INTERVAL:-60}" -gt 0 ]] && \
-       [[ "${time_since_last_fw_check}" -ge "${FW_NET_INTERFACE_CHECK_INTERVAL:-60}" ]]; then
-        last_fw_net_interface_check_time=${current_time}
+       [[ "$time_since_last_fw_check" -ge "${FW_NET_INTERFACE_CHECK_INTERVAL:-60}" ]]; then
+        last_fw_net_interface_check_time=$current_time
         if check_status_changed "fw"; then
-            changes_detected=true
-            log_warning "Network interface changes detected, updating all tags"
-            update_all_tags "lxc"
-            update_all_tags "vm"
-            last_update_lxc_time=${current_time}
-            last_update_vm_time=${current_time}
+            update_lxc=true
+            update_vm=true
+            log_warning "Network interface changes detected"
         fi
     fi
 
-    # Force update if needed
+    # Force update if interval exceeded
     for type in "lxc" "vm"; do
         local last_update_var="last_update_${type}_time"
         local time_since_last_update=$((current_time - ${!last_update_var}))
-        if [[ ${time_since_last_update} -ge ${FORCE_UPDATE_INTERVAL:-1800} ]]; then
-            changes_detected=true
-            local minutes=$((${FORCE_UPDATE_INTERVAL:-1800} / 60))
+        if [[ $time_since_last_update -ge ${FORCE_UPDATE_INTERVAL:-1800} ]]; then
             if [[ "$type" == "lxc" ]]; then
-                log_info "Scheduled LXC update (every ${minutes} minutes)"
+                update_lxc=true
+                log_info "Scheduled LXC update (every $((FORCE_UPDATE_INTERVAL / 60)) minutes)"
             else
-                log_info "Scheduled VM update (every ${minutes} minutes)"
+                update_vm=true
+                log_info "Scheduled VM update (every $((FORCE_UPDATE_INTERVAL / 60)) minutes)"
             fi
-            update_all_tags "$type"
             eval "${last_update_var}=${current_time}"
         fi
     done
+
+    # Final execution
+    $update_lxc && update_all_tags "lxc"
+    $update_vm && update_all_tags "vm"
 }
 
 # Initialize time variables
@@ -872,9 +889,19 @@ main() {
     echo -e "${BLUE}ℹ${NC} Tag format: ${WHITE}${TAG_FORMAT:-$DEFAULT_TAG_FORMAT}${NC}"
     echo -e "${BLUE}ℹ${NC} Allowed CIDRs: ${WHITE}${CIDR_LIST[*]}${NC}"
     echo -e "${PURPLE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}\n"
-    check
+
+    if [[ "$FORCE_SINGLE_RUN" == "true" ]]; then
+        check
+        exit 0
+    fi
+
+    while true; do
+        check
+        sleep "${LOOP_INTERVAL:-300}"
+    done
 }
 
+
 # Cache cleanup function
 cleanup_vm_cache() {
     local cache_dir="/tmp"
@@ -997,7 +1024,7 @@ process_vms_parallel() {
 # Parallel LXC processing function
 process_lxc_parallel() {
     local lxc_list=("$@")
-    local max_parallel=${MAX_PARALLEL_LXC_CHECKS:-7}
+    local max_parallel=${MAX_PARALLEL_LXC_CHECKS:-2}
     local batch_size=${LXC_BATCH_SIZE:-20}
     local job_count=0
     local pids=()
@@ -1173,7 +1200,7 @@ get_lxc_ips() {
     fi
     
     # Fallback: always do lxc-attach/pct exec with timeout if nothing found
-    if [[ -z "$ips" ]]; then
+    if [[ -z "$ips" && "${LXC_ALLOW_FORCED_COMMANDS:-true}" == "true" ]]; then
         debug_log "lxc $vmid: trying fallback lxc-attach (forced)"
         local attach_ip=""
         attach_ip=$(timeout 7s lxc-attach -n "$vmid" -- ip -4 addr show 2>/dev/null | grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' | grep -v '127.0.0.1' | head -1)
@@ -1188,7 +1215,7 @@ get_lxc_ips() {
             method_used="lxc_attach_forced"
         fi
     fi
-    if [[ -z "$ips" ]]; then
+    if [[ -z "$ips" && "${LXC_ALLOW_FORCED_COMMANDS:-true}" == "true" ]]; then
         debug_log "lxc $vmid: trying fallback pct exec (forced)"
         local pct_ip=""
         pct_ip=$(timeout 7s pct exec "$vmid" -- ip -4 addr show 2>/dev/null | grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' | grep -v '127.0.0.1' | head -1)
@@ -1310,6 +1337,21 @@ msg_info "Restarting Service with optimizations"
 systemctl restart iptag.service &>/dev/null
 msg_ok "Service restarted with CPU optimizations"
 
+msg_info "Creating manual run command"
+cat <<'EOF' >/usr/local/bin/iptag-run
+#!/usr/bin/env bash
+CONFIG_FILE="/opt/iptag/iptag.conf"
+SCRIPT_FILE="/opt/iptag/iptag"
+if [[ ! -f "$SCRIPT_FILE" ]]; then
+  echo "❌ Main script not found: $SCRIPT_FILE"
+  exit 1
+fi
+export FORCE_SINGLE_RUN=true
+exec "$SCRIPT_FILE"
+EOF
+chmod +x /usr/local/bin/iptag-run
+msg_ok "Created iptag-run executable - You can execute this manually by entering “iptag-run” in the Proxmox host, so the script is executed by hand."
+
 SPINNER_PID=""
 echo -e "\n${APP} installation completed successfully! ${CL}\n"