Add helper functions for MariaDB and PostgreSQL setup

Introduces setup_mariadb_db and setup_postgresql_db functions to automate database/user creation, credential management, and optional grants/extensions. Also updates cleanup_lxc to use $STD for cache cleaning commands for consistency.
Improve service stopping logic in stop_all_services
2025-11-11 13:52:51 +00:00 · 2025-11-10 16:46:39 +01:00 · 2025-11-10 13:58:04 +01:00 · 2025-11-10 12:23:26 +00:00 · 2025-11-10 13:22:59 +01:00 · 2025-11-10 13:08:03 +01:00
11 changed files with 457 additions and 179 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,8 +10,29 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.

+## 2025-11-10
+
+### 🚀 Updated Scripts
+
+  - #### ✨ New Features
+
+    - core: update message for no available updates scenario (if pinned) [@MickLesk](https://github.com/MickLesk) ([#9021](https://github.com/community-scripts/ProxmoxVE/pull/9021))
+    - Migrate Open WebUI to uv-based installation [@MickLesk](https://github.com/MickLesk) ([#9019](https://github.com/community-scripts/ProxmoxVE/pull/9019))
+
 ## 2025-11-09

+### 🚀 Updated Scripts
+
+  - core: improve log cleaning [@MickLesk](https://github.com/MickLesk) ([#8999](https://github.com/community-scripts/ProxmoxVE/pull/8999))
+
+  - #### 🐞 Bug Fixes
+
+    - Add wkhtmltopdf to Odoo installation dependencies [@akileos](https://github.com/akileos) ([#9010](https://github.com/community-scripts/ProxmoxVE/pull/9010))
+    - fix(jotty): Comments removed from variables, as they are interpreted. [@schneider-de-com](https://github.com/schneider-de-com) ([#9002](https://github.com/community-scripts/ProxmoxVE/pull/9002))
+    - fix(n8n): Add python3-setuptools dependency for Debian 13 [@chrikodo](https://github.com/chrikodo) ([#9007](https://github.com/community-scripts/ProxmoxVE/pull/9007))
+    - Paperless-ngx: hotfix config path [@vhsdream](https://github.com/vhsdream) ([#9003](https://github.com/community-scripts/ProxmoxVE/pull/9003))
+    - Paperless-NGX: Move config backup outside of app folder [@vhsdream](https://github.com/vhsdream) ([#8996](https://github.com/community-scripts/ProxmoxVE/pull/8996))
+
 ## 2025-11-08

 ### 🚀 Updated Scripts
--- a/ct/openwebui.sh
+++ b/ct/openwebui.sh
@@ -23,6 +23,62 @@ function update_script() {
  header_info
  check_container_storage
  check_container_resources
+
+  if [[ -d /opt/open-webui ]]; then
+    msg_warn "Legacy installation detected — migrating to uv based install..."
+    msg_info "Stopping Service"
+    systemctl stop open-webui
+    msg_ok "Stopped Service"
+
+    msg_info "Creating Backup"
+    mkdir -p /opt/open-webui-backup
+    cp -a /opt/open-webui/backend/data /opt/open-webui-backup/data || true
+    msg_ok "Created Backup"
+
+    msg_info "Removing legacy installation"
+    rm -rf /opt/open-webui
+    rm -rf /root/.open-webui || true
+    msg_ok "Removed legacy installation"
+
+    msg_info "Installing uv-based Open-WebUI"
+    PYTHON_VERSION="3.12" setup_uv
+    $STD uv tool install --python $PYTHON_VERSION open-webui[all]
+    msg_ok "Installed uv-based Open-WebUI"
+
+    msg_info "Restoring data"
+    mkdir -p /root/.open-webui
+    cp -a /opt/open-webui-backup/data/* /root/.open-webui/ || true
+    rm -rf /opt/open-webui-backup || true
+    msg_ok "Restored data"
+
+    msg_info "Recreating Service"
+    cat <<EOF >/etc/systemd/system/open-webui.service
+[Unit]
+Description=Open WebUI Service
+After=network.target
+
+[Service]
+Type=simple
+Environment=DATA_DIR=/root/.open-webui
+EnvironmentFile=-/root/.env
+ExecStart=/root/.local/bin/open-webui serve
+WorkingDirectory=/root
+Restart=on-failure
+RestartSec=5
+User=root
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+    $STD systemctl daemon-reload
+    systemctl enable -q --now open-webui
+    msg_ok "Recreated Service"
+
+    msg_ok "Migration completed"
+    exit 0
+  fi
+
  if [[ ! -d /root/.open-webui ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
@@ -50,8 +106,11 @@ function update_script() {
    fi
  fi

-  msg_info "Restarting Open WebUI to initiate update"
+  msg_info "Updating Open WebUI via uv"
+  PYTHON_VERSION="3.12" setup_uv
+  $STD uv tool install --python 3.12 open-webui[all]
  systemctl restart open-webui
+  msg_ok "Updated Open WebUI"
  msg_ok "Updated successfully!"
  exit
 }
--- a/ct/paperless-ngx.sh
+++ b/ct/paperless-ngx.sh
@@ -35,16 +35,16 @@ function update_script() {
    if grep -q "uv run" /etc/systemd/system/paperless-webserver.service; then

      msg_info "Backing up data"
-      mkdir -p /opt/paperless/backup
-      cp -r /opt/paperless/data /opt/paperless/backup/
-      cp -r /opt/paperless/media /opt/paperless/backup/
-      cp -r /opt/paperless/paperless.conf /opt/paperless/backup/
+      mkdir -p /opt/paperless_backup
+      cp -r /opt/paperless/data /opt/paperless_backup/
+      cp -r /opt/paperless/media /opt/paperless_backup/
+      cp -r /opt/paperless/paperless.conf /opt/paperless_backup/
      msg_ok "Backup completed"

      PYTHON_VERSION="3.13" setup_uv
      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
-      
+
      . /etc/os-release
      if [ "$VERSION_CODENAME" = "bookworm" ]; then
        setup_gs
@@ -53,17 +53,20 @@ function update_script() {
      fi

      msg_info "Updating Paperless-ngx"
-      cp -r /opt/paperless/backup/* /opt/paperless/
+      cp -r /opt/paperless_backup/* /opt/paperless/
+      CONSUME_DIR="$(sed -n 's/^PAPERLESS_CONSUMPTION_DIR=//p' /opt/paperless/paperless.conf)"
+      if [[ -z "$CONSUME_DIR" ]]; then
+        CONSUME_DIR="/opt/paperless/consume"
+      fi
+      mkdir -p "$CONSUME_DIR"
      cd /opt/paperless
      $STD uv sync --all-extras
      cd /opt/paperless/src
      $STD uv run -- python manage.py migrate
      msg_ok "Updated Paperless-ngx"

-      if [[ -d /opt/paperless/backup ]]; then
-        rm -rf /opt/paperless/backup || msg_warn "Failed to remove /opt/paperless/backup"
-        msg_ok "Removed backup directory"
-      fi
+      rm -rf /opt/paperless_backup
+
    else
      msg_warn "You are about to migrate your Paperless-ngx installation to uv!"
      msg_custom "🔒" "It is strongly recommended to take a Proxmox snapshot first:"
@@ -107,16 +110,16 @@ function update_script() {

      $STD systemctl daemon-reload
      msg_info "Backing up data"
-      mkdir -p /opt/paperless/backup
-      cp -r /opt/paperless/data /opt/paperless/backup/
-      cp -r /opt/paperless/media /opt/paperless/backup/
-      cp -r /opt/paperless/paperless.conf /opt/paperless/backup/
+      mkdir -p /opt/paperless_backup
+      cp -r /opt/paperless/data /opt/paperless_backup/
+      cp -r /opt/paperless/media /opt/paperless_backup/
+      cp -r /opt/paperless/paperless.conf /opt/paperless_backup/
      msg_ok "Backup completed"

      PYTHON_VERSION="3.13" setup_uv
      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
-      
+
      . /etc/os-release
      if [ "$VERSION_CODENAME" = "bookworm" ]; then
        setup_gs
@@ -127,16 +130,19 @@ function update_script() {
      fi

      msg_info "Updating Paperless-ngx"
-      cp -r /opt/paperless/backup/* /opt/paperless/
+      cp -r /opt/paperless_backup/* /opt/paperless/
+      CONSUME_DIR="$(sed -n '/^PAPERLESS_CONSUMPTION/s/[^=]=*//p' /opt/paperless/paperless.conf)"
+      mkdir -p "${CONSUME_DIR:-/opt/paperless/consume}"
      cd /opt/paperless
      $STD uv sync --all-extras
      cd /opt/paperless/src
      $STD uv run -- python manage.py migrate
      msg_ok "Paperless-ngx migration and update completed"

+      rm -rf /opt/paperless_backup
      if [[ -d /opt/paperless/backup ]]; then
-        rm -rf /opt/paperless/backup || msg_warn "Failed to remove /opt/paperless/backup"
-        msg_ok "Removed backup directory"
+        rm -rf /opt/paperless/backup
+        msg_ok "Removed old backup directory"
      fi
    fi

--- a/frontend/public/json/cockpit.json
+++ b/frontend/public/json/cockpit.json
@@ -33,8 +33,12 @@
  },
  "notes": [
    {
-      "text": "Set a root password if using autologin. This will be the Cockpit password.`sudo passwd root`",
+      "text": "Set a root password if using autologin. This will be the Cockpit password. To set root password run `sudo passwd root`",
      "type": "info"
+    },
+    {
+      "text": "If you plan on using 45Drives extension with NFS, you must setup LXC as privileged. Some features of 45Drives don't work on Debian 13, so Debian 12 must be used.",
+      "type": "warning"
    }
  ]
 }
--- a/frontend/public/json/versions.json
+++ b/frontend/public/json/versions.json
@@ -1,13 +1,33 @@
 [
  {
-    "name": "BerriAI/litellm",
-    "version": "v1.79.1-stable",
-    "date": "2025-11-08T22:53:21Z"
+    "name": "dgtlmoon/changedetection.io",
+    "version": "0.50.41",
+    "date": "2025-11-10T11:00:46Z"
  },
  {
-    "name": "raydak-labs/configarr",
-    "version": "v1.17.2",
-    "date": "2025-11-08T22:47:58Z"
+    "name": "emqx/emqx",
+    "version": "e5.10.2",
+    "date": "2025-11-10T10:58:21Z"
+  },
+  {
+    "name": "autobrr/autobrr",
+    "version": "v1.69.0",
+    "date": "2025-11-10T10:57:40Z"
+  },
+  {
+    "name": "documenso/documenso",
+    "version": "v2.0.6",
+    "date": "2025-11-10T08:08:43Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.6",
+    "date": "2025-11-04T09:43:16Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.270",
+    "date": "2025-11-10T05:57:22Z"
  },
  {
    "name": "firefly-iii/firefly-iii",
@@ -15,14 +35,104 @@
    "date": "2025-11-08T22:45:35Z"
  },
  {
-    "name": "TwiN/gatus",
-    "version": "v5.31.0",
-    "date": "2025-11-08T22:18:46Z"
+    "name": "jeedom/core",
+    "version": "4.4.20",
+    "date": "2025-11-10T00:27:05Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.0.1",
+    "date": "2025-10-15T16:53:55Z"
+  },
+  {
+    "name": "navidrome/navidrome",
+    "version": "v0.58.5",
+    "date": "2025-11-09T19:12:41Z"
+  },
+  {
+    "name": "rcourtman/Pulse",
+    "version": "v4.27.2",
+    "date": "2025-11-09T18:39:30Z"
+  },
+  {
+    "name": "pelican-dev/panel",
+    "version": "v1.0.0-beta28",
+    "date": "2025-11-09T17:36:07Z"
+  },
+  {
+    "name": "pelican-dev/wings",
+    "version": "v1.0.0-beta19",
+    "date": "2025-11-09T17:26:30Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.2.0.1_stable_2025-11-09",
+    "date": "2025-11-09T17:21:54Z"
+  },
+  {
+    "name": "Cleanuparr/Cleanuparr",
+    "version": "v2.4.5",
+    "date": "2025-11-09T17:14:01Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.30.7",
+    "date": "2025-11-09T16:20:57Z"
+  },
+  {
+    "name": "TechnitiumSoftware/DnsServer",
+    "version": "v14.0.1",
+    "date": "2025-11-09T13:03:18Z"
+  },
+  {
+    "name": "BookStackApp/BookStack",
+    "version": "v25.11",
+    "date": "2025-11-09T13:00:14Z"
  },
  {
    "name": "karakeep-app/karakeep",
-    "version": "ios/v1.8.1-0",
-    "date": "2025-11-08T21:29:59Z"
+    "version": "extension/v1.2.7",
+    "date": "2025-11-09T12:21:54Z"
+  },
+  {
+    "name": "NginxProxyManager/nginx-proxy-manager",
+    "version": "v2.13.2",
+    "date": "2025-11-09T11:56:25Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.4",
+    "date": "2025-11-07T08:55:27Z"
+  },
+  {
+    "name": "authelia/authelia",
+    "version": "v4.39.14",
+    "date": "2025-11-09T07:18:40Z"
+  },
+  {
+    "name": "apache/couchdb",
+    "version": "3.5.1",
+    "date": "2025-11-09T05:09:28Z"
+  },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.79.3.rc.1",
+    "date": "2025-11-09T02:52:13Z"
+  },
+  {
+    "name": "inventree/InvenTree",
+    "version": "1.1.3",
+    "date": "2025-11-09T00:28:21Z"
+  },
+  {
+    "name": "raydak-labs/configarr",
+    "version": "v1.17.2",
+    "date": "2025-11-08T22:47:58Z"
+  },
+  {
+    "name": "TwiN/gatus",
+    "version": "v5.31.0",
+    "date": "2025-11-08T22:18:46Z"
  },
  {
    "name": "hargata/lubelog",
@@ -49,11 +159,6 @@
    "version": "v0.62.16",
    "date": "2025-11-08T12:15:30Z"
  },
-  {
-    "name": "TechnitiumSoftware/DnsServer",
-    "version": "v14.0.0",
-    "date": "2025-11-08T10:34:10Z"
-  },
  {
    "name": "runtipi/runtipi",
    "version": "v4.6.3",
@@ -74,31 +179,6 @@
    "version": "v0.85.1",
    "date": "2025-10-31T10:45:26Z"
  },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.262",
-    "date": "2025-11-08T05:54:55Z"
-  },
-  {
-    "name": "documenso/documenso",
-    "version": "v2.0.5",
-    "date": "2025-11-08T05:03:59Z"
-  },
-  {
-    "name": "jeedom/core",
-    "version": "4.4.20",
-    "date": "2025-11-08T00:27:05Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.0.1",
-    "date": "2025-10-15T16:53:55Z"
-  },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.4",
-    "date": "2025-11-07T08:55:27Z"
-  },
  {
    "name": "home-assistant/core",
    "version": "2025.11.1",
@@ -114,11 +194,6 @@
    "version": "v2.16.45",
    "date": "2025-11-07T19:08:05Z"
  },
-  {
-    "name": "rcourtman/Pulse",
-    "version": "v4.26.5",
-    "date": "2025-11-07T18:05:58Z"
-  },
  {
    "name": "cloudflare/cloudflared",
    "version": "2025.11.1",
@@ -149,11 +224,6 @@
    "version": "v1.0.0",
    "date": "2025-11-07T12:52:42Z"
  },
-  {
-    "name": "dgtlmoon/changedetection.io",
-    "version": "0.50.40",
-    "date": "2025-11-07T12:22:58Z"
-  },
  {
    "name": "element-hq/synapse",
    "version": "v1.142.0rc2",
@@ -169,11 +239,6 @@
    "version": "coverity-w45-4.14.1",
    "date": "2025-11-05T16:56:57Z"
  },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.6",
-    "date": "2025-11-04T09:43:16Z"
-  },
  {
    "name": "umami-software/umami",
    "version": "v3.0.0",
@@ -254,11 +319,6 @@
    "version": "v3.5.8",
    "date": "2025-11-06T05:32:51Z"
  },
-  {
-    "name": "apache/couchdb",
-    "version": "3.5.1-RC1",
-    "date": "2025-11-06T03:23:20Z"
-  },
  {
    "name": "Notifiarr/notifiarr",
    "version": "v0.9.1",
@@ -287,7 +347,7 @@
  {
    "name": "javedh-dev/tracktor",
    "version": "0.5.1",
-    "date": "2025-11-05T16:14:37Z"
+    "date": "2025-11-05T15:51:02Z"
  },
  {
    "name": "zitadel/zitadel",
@@ -304,11 +364,6 @@
    "version": "v2.2.3",
    "date": "2025-11-05T13:47:03Z"
  },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.2.0.100-2.2.0.100_canary_2025-11-05",
-    "date": "2025-11-05T13:01:37Z"
-  },
  {
    "name": "azukaar/Cosmos-Server",
    "version": "v0.18.4",
@@ -319,11 +374,6 @@
    "version": "1.5.0",
    "date": "2025-11-05T11:10:20Z"
  },
-  {
-    "name": "emqx/emqx",
-    "version": "e5.10.2-alpha.1",
-    "date": "2025-11-05T09:55:26Z"
-  },
  {
    "name": "glpi-project/glpi",
    "version": "11.0.2",
@@ -339,11 +389,6 @@
    "version": "0.209.7",
    "date": "2025-11-05T08:32:08Z"
  },
-  {
-    "name": "NginxProxyManager/nginx-proxy-manager",
-    "version": "v2.13.1",
-    "date": "2025-11-05T06:06:08Z"
-  },
  {
    "name": "jenkinsci/jenkins",
    "version": "jenkins-2.535",
@@ -384,11 +429,6 @@
    "version": "v0.9.100",
    "date": "2025-11-04T17:44:39Z"
  },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.30.6",
-    "date": "2025-11-04T17:41:01Z"
-  },
  {
    "name": "VictoriaMetrics/VictoriaMetrics",
    "version": "v1.129.1",
@@ -444,11 +484,6 @@
    "version": "v25.11.0",
    "date": "2025-11-04T00:32:21Z"
  },
-  {
-    "name": "inventree/InvenTree",
-    "version": "1.1.2",
-    "date": "2025-11-03T23:16:29Z"
-  },
  {
    "name": "gtsteffaniak/filebrowser",
    "version": "v1.0.0-stable",
@@ -464,11 +499,6 @@
    "version": "version/2025.10.1",
    "date": "2025-11-03T16:49:16Z"
  },
-  {
-    "name": "Cleanuparr/Cleanuparr",
-    "version": "v2.4.3",
-    "date": "2025-11-03T16:49:03Z"
-  },
  {
    "name": "silverbulletmd/silverbullet",
    "version": "2.2.1",
@@ -779,11 +809,6 @@
    "version": "v1.71.2",
    "date": "2025-10-20T15:25:52Z"
  },
-  {
-    "name": "pelican-dev/panel",
-    "version": "v1.0.0-beta27",
-    "date": "2025-10-20T00:38:13Z"
-  },
  {
    "name": "seriousm4x/UpSnap",
    "version": "5.2.3",
@@ -894,11 +919,6 @@
    "version": "v5.0.85",
    "date": "2025-10-12T19:55:18Z"
  },
-  {
-    "name": "authelia/authelia",
-    "version": "v4.39.13",
-    "date": "2025-10-12T05:45:48Z"
-  },
  {
    "name": "gelbphoenix/autocaliweb",
    "version": "v0.10.4",
@@ -919,11 +939,6 @@
    "version": "r1945",
    "date": "2025-10-10T02:30:05Z"
  },
-  {
-    "name": "autobrr/autobrr",
-    "version": "v1.68.0",
-    "date": "2025-10-08T18:33:12Z"
-  },
  {
    "name": "advplyr/audiobookshelf",
    "version": "v2.30.0",
@@ -934,11 +949,6 @@
    "version": "1.23.5",
    "date": "2025-10-08T07:31:37Z"
  },
-  {
-    "name": "pelican-dev/wings",
-    "version": "v1.0.0-beta18",
-    "date": "2025-10-07T21:05:57Z"
-  },
  {
    "name": "C4illin/ConvertX",
    "version": "v0.15.1",
@@ -964,11 +974,6 @@
    "version": "v1.5.9",
    "date": "2025-10-06T08:34:01Z"
  },
-  {
-    "name": "BookStackApp/BookStack",
-    "version": "v25.07.3",
-    "date": "2025-10-05T14:47:20Z"
-  },
  {
    "name": "webmin/webmin",
    "version": "2.520",
@@ -1249,11 +1254,6 @@
    "version": "v0.4.5",
    "date": "2025-07-29T16:39:18Z"
  },
-  {
-    "name": "navidrome/navidrome",
-    "version": "v0.58.0",
-    "date": "2025-07-28T18:59:50Z"
-  },
  {
    "name": "PCJones/UmlautAdaptarr",
    "version": "v0.7.3",
--- a/install/jotty-install.sh
+++ b/install/jotty-install.sh
@@ -40,9 +40,9 @@ NODE_ENV=production
 # OIDC_ISSUER=<your-oidc-issuer-url>
 # OIDC_CLIENT_ID=<oidc-client-id>
 # APP_URL=<https://app.domain.tld>
-# SSO_FALLBACK_LOCAL=yes # Allow both SSO and normal login
-# OIDC_CLIENT_SECRET=your_client_secret  # Enable confidential client mode with client authentication
-# OIDC_ADMIN_GROUPS=admins # Map provider groups to admin role
+# SSO_FALLBACK_LOCAL=yes
+# OIDC_CLIENT_SECRET=your_client_secret
+# OIDC_ADMIN_GROUPS=admins
 EOF
 msg_ok "Installed ${APPLICATION}"

--- a/install/n8n-install.sh
+++ b/install/n8n-install.sh
@@ -16,7 +16,9 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
  ca-certificates \
-  build-essential
+  build-essential \
+  python3 \
+  python3-setuptools
 msg_ok "Installed Dependencies"

 NODE_VERSION="22" setup_nodejs
--- a/install/odoo-install.sh
+++ b/install/odoo-install.sh
@@ -14,7 +14,7 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt install -y python3-lxml
+$STD apt install -y python3-lxml wkhtmltopdf
 curl -fsSL "http://archive.ubuntu.com/ubuntu/pool/universe/l/lxml-html-clean/python3-lxml-html-clean_0.1.1-1_all.deb" -o /opt/python3-lxml-html-clean.deb
 $STD dpkg -i /opt/python3-lxml-html-clean.deb
 msg_ok "Installed Dependencies"
--- a/install/openwebui-install.sh
+++ b/install/openwebui-install.sh
@@ -17,7 +17,11 @@ msg_info "Installing Dependencies"
 $STD apt install -y ffmpeg
 msg_ok "Installed Dependencies"

-USE_UVX="YES" PYTHON_VERSION="3.12" setup_uv
+PYTHON_VERSION="3.12" setup_uv
+
+msg_info "Installing Open WebUI"
+$STD uv tool install --python 3.12 open-webui[all]
+msg_ok "Installed Open WebUI"

 read -r -p "${TAB3}Would you like to add Ollama? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
@@ -56,7 +60,7 @@ After=network.target
 Type=simple
 EnvironmentFile=-/root/.env
 Environment=DATA_DIR=/root/.open-webui
-ExecStart=/usr/local/bin/uvx --python 3.12 open-webui@latest serve
+ExecStart=/root/.local/bin/open-webui serve
 WorkingDirectory=/root
 Restart=on-failure
 RestartSec=5
@@ -70,9 +74,4 @@ msg_ok "Created Service"

 motd_ssh
 customize
-
-msg_info "Cleaning up"
-$STD apt -y autoremove
-$STD apt -y autoclean
-$STD apt -y clean
-msg_ok "Cleaned"
+cleanup_lxc
--- a/misc/core.func
+++ b/misc/core.func
@@ -370,6 +370,7 @@ run_container_safe() {

 cleanup_lxc() {
  msg_info "Cleaning up"
+
  if is_alpine; then
    $STD apk cache clean || true
    rm -rf /var/cache/apk/*
@@ -379,36 +380,38 @@ cleanup_lxc() {
    $STD apt -y clean || true
  fi

-  rm -rf /tmp/* /var/tmp/*
-
-  # Remove temp files created by mktemp/tempfile
+  # Clear temp artifacts (keep sockets/FIFOs; ignore errors)
  find /tmp /var/tmp -type f -name 'tmp*' -delete 2>/dev/null || true
  find /tmp /var/tmp -type f -name 'tempfile*' -delete 2>/dev/null || true

-  find /var/log -type f -exec truncate -s 0 {} +
+  # Truncate writable log files silently (permission errors ignored)
+  if command -v truncate >/dev/null 2>&1; then
+    find /var/log -type f -writable -print0 2>/dev/null |
+      xargs -0 -n1 truncate -s 0 2>/dev/null || true
+  fi

  # Python pip
-  if command -v pip &>/dev/null; then pip cache purge || true; fi
+  if command -v pip &>/dev/null; then $STD pip cache purge || true; fi
  # Python uv
-  if command -v uv &>/dev/null; then uv cache clear || true; fi
+  if command -v uv &>/dev/null; then $STD uv cache clear || true; fi
  # Node.js npm
-  if command -v npm &>/dev/null; then npm cache clean --force || true; fi
+  if command -v npm &>/dev/null; then $STD npm cache clean --force || true; fi
  # Node.js yarn
-  if command -v yarn &>/dev/null; then yarn cache clean || true; fi
+  if command -v yarn &>/dev/null; then $STD yarn cache clean || true; fi
  # Node.js pnpm
-  if command -v pnpm &>/dev/null; then pnpm store prune || true; fi
+  if command -v pnpm &>/dev/null; then $STD pnpm store prune || true; fi
  # Go
-  if command -v go &>/dev/null; then go clean -cache -modcache || true; fi
+  if command -v go &>/dev/null; then $STD go clean -cache -modcache || true; fi
  # Rust cargo
-  if command -v cargo &>/dev/null; then cargo clean || true; fi
+  if command -v cargo &>/dev/null; then $STD cargo clean || true; fi
  # Ruby gem
-  if command -v gem &>/dev/null; then gem cleanup || true; fi
+  if command -v gem &>/dev/null; then $STD gem cleanup || true; fi
  # Composer (PHP)
-  if command -v composer &>/dev/null; then composer clear-cache || true; fi
+  if command -v composer &>/dev/null; then $STD composer clear-cache || true; fi

  if command -v journalctl &>/dev/null; then
-    $STD journalctl --rotate
-    $STD journalctl --vacuum-time=10m
+    $STD journalctl --rotate || true
+    $STD journalctl --vacuum-time=10m || true
  fi
  msg_ok "Cleaned"
 }
--- a/misc/tools.func
+++ b/misc/tools.func
@@ -72,15 +72,23 @@ stop_all_services() {
  local service_patterns=("$@")

  for pattern in "${service_patterns[@]}"; do
-    # Find all matching services
-    systemctl list-units --type=service --all 2>/dev/null |
-      grep -oE "${pattern}[^ ]*\.service" |
-      sort -u |
-      while read -r service; do
+    # Find all matching services (use || true to avoid pipeline failures)
+    local services
+    services=$(systemctl list-units --type=service --all 2>/dev/null |
+      grep -oE "${pattern}[^ ]*\.service" 2>/dev/null |
+      sort -u 2>/dev/null || true)
+
+    # Only process if we found any services
+    if [[ -n "$services" ]]; then
+      while IFS= read -r service; do
+        [[ -z "$service" ]] && continue
        $STD systemctl stop "$service" 2>/dev/null || true
        $STD systemctl disable "$service" 2>/dev/null || true
-      done
+      done <<<"$services"
+    fi
  done
+
+  return 0
 }

 # ------------------------------------------------------------------------------
@@ -1207,7 +1215,7 @@ setup_deb822_repo() {
  local repo_url="$3"
  local suite="$4"
  local component="${5:-main}"
-  local architectures="${6-}"   # optional
+  local architectures="${6-}" # optional

  # Validate required parameters
  if [[ -z "$name" || -z "$gpg_url" || -z "$repo_url" || -z "$suite" ]]; then
@@ -1399,7 +1407,7 @@ verify_gpg_fingerprint() {
 }

 # ==============================================================================
-# EXISTING FUNCTIONS
+# INSTALL FUNCTIONS
 # ==============================================================================

 # ------------------------------------------------------------------------------
@@ -1501,7 +1509,7 @@ check_for_gh_release() {
      return 0
    fi

-    msg_error "No update available: ${app} is not installed!"
+    msg_ok "No update available: ${app} is already on pinned version (${current})"
    return 1
  fi

@@ -3044,6 +3052,85 @@ setup_mariadb() {
  msg_ok "Setup MariaDB $MARIADB_VERSION"
 }

+# ------------------------------------------------------------------------------
+# Creates MariaDB database with user, charset and optional extra grants/modes
+#
+# Description:
+#   - Generates password if empty
+#   - Creates database with utf8mb4_unicode_ci
+#   - Creates local user with password
+#   - Grants full access to this DB
+#   - Optional: apply extra GRANT statements (comma-separated)
+#   - Optional: apply custom GLOBAL sql_mode
+#   - Saves credentials to file
+#   - Exports variables for use in calling script
+#
+# Usage:
+#   MARIADB_DB_NAME="myapp_db" MARIADB_DB_USER="myapp_user" setup_mariadb_db
+#   MARIADB_DB_NAME="domain_monitor" MARIADB_DB_USER="domainmonitor" setup_mariadb_db
+#   MARIADB_DB_NAME="myapp" MARIADB_DB_USER="myapp" MARIADB_DB_EXTRA_GRANTS="GRANT SELECT ON \`mysql\`.\`time_zone_name\`" setup_mariadb_db
+#   MARIADB_DB_NAME="ghostfolio" MARIADB_DB_USER="ghostfolio" MARIADB_DB_SQL_MODE="" setup_mariadb_db
+#
+# Variables:
+#   MARIADB_DB_NAME         - Database name (required)
+#   MARIADB_DB_USER         - Database user (required)
+#   MARIADB_DB_PASS         - User password (optional, auto-generated if empty)
+#   MARIADB_DB_EXTRA_GRANTS - Comma-separated GRANT statements (optional)
+#                             Example: "GRANT SELECT ON \`mysql\`.\`time_zone_name\`"
+#   MARIADB_DB_SQL_MODE     - Optional global sql_mode override (e.g. "", "STRICT_TRANS_TABLES")
+#   MARIADB_DB_CREDS_FILE   - Credentials file path (optional, default: ~/${APPLICATION}.creds)
+#
+# Exports:
+#   MARIADB_DB_NAME, MARIADB_DB_USER, MARIADB_DB_PASS
+# ------------------------------------------------------------------------------
+
+function setup_mariadb_db() {
+  if [[ -z "${MARIADB_DB_NAME:-}" || -z "${MARIADB_DB_USER:-}" ]]; then
+    msg_error "MARIADB_DB_NAME and MARIADB_DB_USER must be set before calling setup_mariadb_db"
+    return 1
+  fi
+
+  if [[ -z "${MARIADB_DB_PASS:-}" ]]; then
+    MARIADB_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+  fi
+
+  msg_info "Setting up MariaDB Database"
+
+  $STD mariadb -u root -e "CREATE DATABASE \`$MARIADB_DB_NAME\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
+  $STD mariadb -u root -e "CREATE USER '$MARIADB_DB_USER'@'localhost' IDENTIFIED BY '$MARIADB_DB_PASS';"
+  $STD mariadb -u root -e "GRANT ALL ON \`$MARIADB_DB_NAME\`.* TO '$MARIADB_DB_USER'@'localhost';"
+
+  # Optional extra grants
+  if [[ -n "${MARIADB_DB_EXTRA_GRANTS:-}" ]]; then
+    IFS=',' read -ra G_LIST <<<"${MARIADB_DB_EXTRA_GRANTS:-}"
+    for g in "${G_LIST[@]}"; do
+      g=$(echo "$g" | xargs)
+      $STD mariadb -u root -e "$g TO '$MARIADB_DB_USER'@'localhost';"
+    done
+  fi
+
+  # Optional sql_mode override
+  if [[ -n "${MARIADB_DB_SQL_MODE:-}" ]]; then
+    $STD mariadb -u root -e "SET GLOBAL sql_mode='${MARIADB_DB_SQL_MODE:-}';"
+  fi
+
+  $STD mariadb -u root -e "FLUSH PRIVILEGES;"
+
+  local CREDS_FILE="${MARIADB_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
+  {
+    echo "MariaDB Credentials"
+    echo "Database: $MARIADB_DB_NAME"
+    echo "User: $MARIADB_DB_USER"
+    echo "Password: $MARIADB_DB_PASS"
+  } >>"$CREDS_FILE"
+
+  msg_ok "Set up MariaDB Database"
+
+  export MARIADB_DB_NAME
+  export MARIADB_DB_USER
+  export MARIADB_DB_PASS
+}
+
 # ------------------------------------------------------------------------------
 # Installs or updates MongoDB to specified major version.
 #
@@ -3803,6 +3890,103 @@ function setup_postgresql() {
  fi
 }

+# ------------------------------------------------------------------------------
+# Creates PostgreSQL database with user and optional extensions
+#
+# Description:
+#   - Creates PostgreSQL role with login and password
+#   - Creates database with UTF8 encoding and template0
+#   - Installs optional extensions (postgis, pgvector, etc.)
+#   - Configures ALTER ROLE settings for Django/Rails compatibility
+#   - Saves credentials to file
+#   - Exports variables for use in calling script
+#
+# Usage:
+#   PG_DB_NAME="myapp_db" PG_DB_USER="myapp_user" setup_postgresql_db
+#   PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_EXTENSIONS="pgvector" setup_postgresql_db
+#   PG_DB_NAME="ghostfolio" PG_DB_USER="ghostfolio" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
+#   PG_DB_NAME="adventurelog" PG_DB_USER="adventurelog" PG_DB_EXTENSIONS="postgis" setup_postgresql_db
+#
+# Variables:
+#   PG_DB_NAME             - Database name (required)
+#   PG_DB_USER             - Database user (required)
+#   PG_DB_PASS             - Database password (optional, auto-generated if empty)
+#   PG_DB_EXTENSIONS       - Comma-separated list of extensions (optional, e.g. "postgis,pgvector")
+#   PG_DB_GRANT_SUPERUSER  - Grant SUPERUSER privilege (optional, "true" to enable, security risk!)
+#   PG_DB_SCHEMA_PERMS     - Grant schema-level permissions (optional, "true" to enable)
+#   PG_DB_SKIP_ALTER_ROLE  - Skip ALTER ROLE settings (optional, "true" to skip)
+#   PG_DB_CREDS_FILE       - Credentials file path (optional, default: ~/${APPLICATION}.creds)
+#
+# Exports:
+#   PG_DB_NAME, PG_DB_USER, PG_DB_PASS - For use in calling script
+# ------------------------------------------------------------------------------
+
+function setup_postgresql_db() {
+  # Validation
+  if [[ -z "${PG_DB_NAME:-}" || -z "${PG_DB_USER:-}" ]]; then
+    msg_error "PG_DB_NAME and PG_DB_USER must be set before calling setup_postgresql_db"
+    return 1
+  fi
+
+  # Generate password if not provided
+  if [[ -z "${PG_DB_PASS:-}" ]]; then
+    PG_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+  fi
+
+  msg_info "Setting up PostgreSQL Database"
+  $STD sudo -u postgres psql -c "CREATE ROLE $PG_DB_USER WITH LOGIN PASSWORD '$PG_DB_PASS';"
+  $STD sudo -u postgres psql -c "CREATE DATABASE $PG_DB_NAME WITH OWNER $PG_DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+
+  # Install extensions (comma-separated)
+  if [[ -n "${PG_DB_EXTENSIONS:-}" ]]; then
+    IFS=',' read -ra EXT_LIST <<<"${PG_DB_EXTENSIONS:-}"
+    for ext in "${EXT_LIST[@]}"; do
+      ext=$(echo "$ext" | xargs) # Trim whitespace
+      $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "CREATE EXTENSION IF NOT EXISTS $ext;"
+    done
+  fi
+
+  # ALTER ROLE settings for Django/Rails compatibility (unless skipped)
+  if [[ "${PG_DB_SKIP_ALTER_ROLE:-}" != "true" ]]; then
+    $STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET client_encoding TO 'utf8';"
+    $STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET default_transaction_isolation TO 'read committed';"
+    $STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET timezone TO 'UTC';"
+  fi
+
+  # Schema permissions (if requested)
+  if [[ "${PG_DB_SCHEMA_PERMS:-}" == "true" ]]; then
+    $STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $PG_DB_NAME TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -c "ALTER USER $PG_DB_USER CREATEDB;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "GRANT ALL ON SCHEMA public TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "GRANT CREATE ON SCHEMA public TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO $PG_DB_USER;"
+  fi
+
+  # Superuser grant (if requested - WARNING!)
+  if [[ "${PG_DB_GRANT_SUPERUSER:-}" == "true" ]]; then
+    msg_warn "Granting SUPERUSER privilege (security risk!)"
+    $STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $PG_DB_NAME to $PG_DB_USER;"
+    $STD sudo -u postgres psql -c "ALTER USER $PG_DB_USER WITH SUPERUSER;"
+  fi
+
+  # Save credentials
+  local CREDS_FILE="${PG_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
+  {
+    echo "PostgreSQL Credentials"
+    echo "Database: $PG_DB_NAME"
+    echo "User: $PG_DB_USER"
+    echo "Password: $PG_DB_PASS"
+  } >>"$CREDS_FILE"
+
+  msg_ok "Set up PostgreSQL Database"
+
+  # Export for use in calling script
+  export PG_DB_NAME
+  export PG_DB_USER
+  export PG_DB_PASS
+}
+
 # ------------------------------------------------------------------------------
 # Installs rbenv and ruby-build, installs Ruby and optionally Rails.
 #
Author	SHA1	Message	Date
CanbiZ	c724906755	Add helper functions for MariaDB and PostgreSQL setup Introduces setup_mariadb_db and setup_postgresql_db functions to automate database/user creation, credential management, and optional grants/extensions. Also updates cleanup_lxc to use $STD for cache cleaning commands for consistency.	2025-11-10 16:46:39 +01:00
CanbiZ	ef9a008d2a	Improve service stopping logic in stop_all_services Refactored stop_all_services to handle empty service lists and avoid pipeline failures. Now checks for found services before attempting to stop and disable them, improving robustness and error handling.	2025-11-10 13:58:04 +01:00
community-scripts-pr-app[bot]	de07b62cff	Update CHANGELOG.md (#9024 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-10 12:23:26 +00:00
CanbiZ	8b30ed74df	core: update message for no available updates scenario (if pinned) (#9021 )	2025-11-10 13:22:59 +01:00
community-scripts-pr-app[bot]	53e6422ee3	Update versions.json (#9023 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-10 13:08:03 +01:00
community-scripts-pr-app[bot]	257e89cc5c	Update CHANGELOG.md (#9022 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-10 12:07:09 +00:00
CanbiZ	26090bad32	Migrate Open WebUI to uv-based installation (#9019 ) * Migrate Open WebUI to uv-based installation Added migration logic to detect and upgrade legacy Open WebUI installations to a uv-based setup, including data backup and service recreation. Updated install and update scripts to use uv for installing Open WebUI and adjusted service configuration and cleanup steps accordingly. * english --------- Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com>	2025-11-10 13:06:44 +01:00
CanbiZ	787a99fc27	Fix consumption directory retrieval in script	2025-11-10 11:53:55 +01:00
Slaviša Arežina	0b122749b7	Update website (#8971 )	2025-11-10 08:39:56 +01:00
community-scripts-pr-app[bot]	48c9a16673	Update CHANGELOG.md (#9016 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-10 00:14:04 +00:00
community-scripts-pr-app[bot]	9bf67982e3	Update versions.json (#9015 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-10 01:13:38 +01:00
community-scripts-pr-app[bot]	008c037cf7	Update CHANGELOG.md (#9011 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 17:32:52 +00:00
akileos	0ab91cc4c1	Add wkhtmltopdf to Odoo installation dependencies (#9010 ) Required for invoice/ticket generation	2025-11-09 18:32:33 +01:00
community-scripts-pr-app[bot]	dfa05f3845	Update CHANGELOG.md (#9009 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 15:55:50 +00:00
chrikodo	a3d42dba45	fix(n8n): Add python3-setuptools dependency for Debian 13 (#9007 ) Fixes ModuleNotFoundError: No module named 'distutils' during sqlite3 compile on Python 3.12+ (Debian 13) by adding the required setuptools package.	2025-11-09 07:55:29 -08:00
community-scripts-pr-app[bot]	a89b841684	Update CHANGELOG.md (#9008 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 15:39:04 +00:00
Sven Schneider	88097dcd19	fix(jotty): Comments removed from variables, as they are interpreted. (#9002 ) The following comments have been removed because they cause the comments to become part of the variable's value and therefore cannot be interpreted by the application. SSO_FALLBACK_LOCAL=yes # Allow both SSO and normal login OIDC_CLIENT_SECRET=your_client_secret # Enable confidential client mode with client authentication OIDC_ADMIN_GROUPS=admins # Map provider groups to admin role https://github.com/fccview/jotty/issues/200#issuecomment-3508394682	2025-11-09 07:38:40 -08:00
community-scripts-pr-app[bot]	1a76fc0095	Update CHANGELOG.md (#9005 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 14:43:01 +00:00
Chris	69c2e9ed2c	Paperless-ngx: hotfix config path (#9003 )	2025-11-09 15:42:40 +01:00
community-scripts-pr-app[bot]	9d876e2d06	Update CHANGELOG.md (#9001 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 13:46:27 +00:00
CanbiZ	c0c5fd4532	core: improve log cleaning (#8999 ) Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com>	2025-11-09 14:46:09 +01:00
community-scripts-pr-app[bot]	0e7be1dd1e	Update versions.json (#9000 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 13:05:35 +01:00
community-scripts-pr-app[bot]	6e349dbcef	Update CHANGELOG.md (#8997 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-09 07:34:14 +00:00
Chris	9b3879ef41	Paperless-NGX: Move config backup outside of app folder (#8996 )	2025-11-08 23:33:51 -08:00