paperless: refactor - remove backup after update and enable clean install

Removes backup directory post-update to prevent orphans. Enables CLEAN_INSTALL for proper cleanup. Adds Debian version-specific Ghostscript installation.

CHANGELOG.md

@@ -10,8 +10,6 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
-## 2025-11-09
-
 ## 2025-11-08
 
 ### 🚀 Updated Scripts
@@ -24,11 +22,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
     - MongoDB: Remove unused message [@tremor021](https://github.com/tremor021) ([#8969](https://github.com/community-scripts/ProxmoxVE/pull/8969))
     - Set TZ=Etc/UTC in Ghostfolio installation script [@LuloDev](https://github.com/LuloDev) ([#8961](https://github.com/community-scripts/ProxmoxVE/pull/8961))
 
-  - #### 🔧 Refactor
-
-    - paperless: refactor - remove backup after update and enable clean install [@MickLesk](https://github.com/MickLesk) ([#8988](https://github.com/community-scripts/ProxmoxVE/pull/8988))
-    - Refactor setup_deb822_repo for optional architectures [@MickLesk](https://github.com/MickLesk) ([#8983](https://github.com/community-scripts/ProxmoxVE/pull/8983))
-
 ## 2025-11-07
 
 ### 🆕 New Scripts

frontend/public/json/versions.json

@@ -1,59 +1,14 @@
 [
-  {
-    "name": "BerriAI/litellm",
-    "version": "v1.79.1-stable",
-    "date": "2025-11-08T22:53:21Z"
-  },
-  {
-    "name": "raydak-labs/configarr",
-    "version": "v1.17.2",
-    "date": "2025-11-08T22:47:58Z"
-  },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "v6.4.6",
-    "date": "2025-11-08T22:45:35Z"
-  },
-  {
-    "name": "TwiN/gatus",
-    "version": "v5.31.0",
-    "date": "2025-11-08T22:18:46Z"
-  },
-  {
-    "name": "karakeep-app/karakeep",
-    "version": "ios/v1.8.1-0",
-    "date": "2025-11-08T21:29:59Z"
-  },
-  {
-    "name": "hargata/lubelog",
-    "version": "v1.5.4",
-    "date": "2025-11-08T16:26:45Z"
-  },
-  {
-    "name": "Luligu/matterbridge",
-    "version": "3.3.7",
-    "date": "2025-11-08T15:47:24Z"
-  },
-  {
-    "name": "heiher/hev-socks5-server",
-    "version": "2.11.1",
-    "date": "2025-11-08T14:27:27Z"
-  },
-  {
-    "name": "oauth2-proxy/oauth2-proxy",
-    "version": "v7.13.0",
-    "date": "2025-11-08T13:36:25Z"
-  },
-  {
-    "name": "pommee/goaway",
-    "version": "v0.62.16",
-    "date": "2025-11-08T12:15:30Z"
-  },
   {
     "name": "TechnitiumSoftware/DnsServer",
     "version": "v14.0.0",
     "date": "2025-11-08T10:34:10Z"
   },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "v6.4.5",
+    "date": "2025-11-08T10:24:28Z"
+  },
   {
     "name": "runtipi/runtipi",
     "version": "v4.6.3",
@@ -64,6 +19,11 @@
     "version": "fumadocs-openapi@10.0.2",
     "date": "2025-11-08T09:58:09Z"
   },
+  {
+    "name": "pommee/goaway",
+    "version": "v0.62.14",
+    "date": "2025-11-08T09:46:33Z"
+  },
   {
     "name": "pocketbase/pocketbase",
     "version": "v0.32.0",
@@ -274,6 +234,11 @@
     "version": "5.26.16",
     "date": "2025-11-05T20:41:40Z"
   },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.79.1.dev6",
+    "date": "2025-11-05T19:25:05Z"
+  },
   {
     "name": "leiweibau/Pi.Alert",
     "version": "v2025-11-05",
@@ -514,6 +479,11 @@
     "version": "0.42.1",
     "date": "2020-06-07T07:27:04Z"
   },
+  {
+    "name": "Luligu/matterbridge",
+    "version": "3.3.6",
+    "date": "2025-11-01T10:41:15Z"
+  },
   {
     "name": "tailscale/tailscale",
     "version": "v1.90.6",
@@ -559,6 +529,11 @@
     "version": "1.0.2",
     "date": "2025-10-30T18:23:23Z"
   },
+  {
+    "name": "TwiN/gatus",
+    "version": "v5.30.0",
+    "date": "2025-10-30T16:52:58Z"
+  },
   {
     "name": "AdguardTeam/AdGuardHome",
     "version": "v0.107.69",
@@ -614,6 +589,11 @@
     "version": "server-v3.4.4",
     "date": "2025-09-25T13:19:26Z"
   },
+  {
+    "name": "heiher/hev-socks5-server",
+    "version": "2.11.0",
+    "date": "2025-10-29T14:26:23Z"
+  },
   {
     "name": "cockpit-project/cockpit",
     "version": "350",
@@ -884,6 +864,11 @@
     "version": "v2.0.119",
     "date": "2025-10-13T23:15:11Z"
   },
+  {
+    "name": "hargata/lubelog",
+    "version": "v1.5.3",
+    "date": "2025-10-13T19:59:30Z"
+  },
   {
     "name": "node-red/node-red",
     "version": "4.1.1",
@@ -914,6 +899,11 @@
     "version": "v5.16.0",
     "date": "2025-10-10T16:17:02Z"
   },
+  {
+    "name": "raydak-labs/configarr",
+    "version": "v1.17.1",
+    "date": "2025-10-10T16:12:41Z"
+  },
   {
     "name": "projectsend/projectsend",
     "version": "r1945",
@@ -1099,6 +1089,11 @@
     "version": "v2.7.6",
     "date": "2025-09-15T15:50:44Z"
   },
+  {
+    "name": "karakeep-app/karakeep",
+    "version": "cli/v0.27.1",
+    "date": "2025-09-14T14:48:48Z"
+  },
   {
     "name": "intri-in/manage-my-damn-life-nextjs",
     "version": "v0.8.1",
@@ -1174,6 +1169,11 @@
     "version": "v2.10.2",
     "date": "2025-08-23T03:10:31Z"
   },
+  {
+    "name": "oauth2-proxy/oauth2-proxy",
+    "version": "v7.12.0",
+    "date": "2025-08-19T06:57:20Z"
+  },
   {
     "name": "ventoy/Ventoy",
     "version": "v1.1.07",

misc/tools.func

@@ -1198,8 +1198,8 @@ ensure_apt_working() {
 }
 
 # ------------------------------------------------------------------------------
-# Standardized deb822 repository setup (with optional Architectures)
-# Always runs apt update after repo creation to ensure package availability
+# Standardized deb822 repository setup
+# Validates all parameters and fails safely if any are empty
 # ------------------------------------------------------------------------------
 setup_deb822_repo() {
   local name="$1"
@@ -1207,40 +1207,56 @@ setup_deb822_repo() {
   local repo_url="$3"
   local suite="$4"
   local component="${5:-main}"
-  local architectures="${6-}"   # optional
+  local architectures="${6:-$(dpkg --print-architecture)}"
 
   # Validate required parameters
   if [[ -z "$name" || -z "$gpg_url" || -z "$repo_url" || -z "$suite" ]]; then
-    msg_error "setup_deb822_repo: missing required parameters (name=$name repo=$repo_url suite=$suite)"
+    msg_error "setup_deb822_repo: missing required parameters (name=$name, gpg=$gpg_url, repo=$repo_url, suite=$suite)"
     return 1
   fi
 
-  # Cleanup
+  # Cleanup old configs for this app
   cleanup_old_repo_files "$name"
+
+  # Cleanup any orphaned .sources files from other apps
   cleanup_orphaned_sources
 
+  # Ensure keyring directory exists
   mkdir -p /etc/apt/keyrings || {
-    msg_error "Failed to create /etc/apt/keyrings"
+    msg_error "Failed to create /etc/apt/keyrings directory"
     return 1
   }
 
-  # Import GPG
-  curl -fsSL "$gpg_url" | gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" || {
-    msg_error "Failed to import GPG key for ${name}"
+  # Download GPG key (with --yes to avoid interactive prompts)
+  curl -fsSL "$gpg_url" | gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" 2>/dev/null || {
+    msg_error "Failed to download or import GPG key for ${name} from $gpg_url"
     return 1
   }
 
-  # Write deb822
-  {
-    echo "Types: deb"
-    echo "URIs: $repo_url"
-    echo "Suites: $suite"
-    echo "Components: $component"
-    [[ -n "$architectures" ]] && echo "Architectures: $architectures"
-    echo "Signed-By: /etc/apt/keyrings/${name}.gpg"
-  } >/etc/apt/sources.list.d/${name}.sources
+  # Create deb822 sources file
+  cat <<EOF >/etc/apt/sources.list.d/${name}.sources
+Types: deb
+URIs: $repo_url
+Suites: $suite
+Components: $component
+Architectures: $architectures
+Signed-By: /etc/apt/keyrings/${name}.gpg
+EOF
 
+  # Use cached apt update
+  local apt_cache_file="/var/cache/apt-update-timestamp"
+  local current_time=$(date +%s)
+  local last_update=0
+
+  if [[ -f "$apt_cache_file" ]]; then
+    last_update=$(cat "$apt_cache_file" 2>/dev/null || echo 0)
+  fi
+
+  # For repo changes, always update but respect short-term cache (30s)
+  if ((current_time - last_update > 30)); then
     $STD apt update
+    echo "$current_time" >"$apt_cache_file"
+  fi
 }
 
 # ------------------------------------------------------------------------------