Update CHANGELOG.md (#8816)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,15 +10,26 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-11-02
+
 ## 2025-11-01
 
+### 🆕 New Scripts
+
+  - Pangolin ([#8809](https://github.com/community-scripts/ProxmoxVE/pull/8809))
+
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
+    - VictoriaMetrics: Fix release fetching for Victori Logs add-on [@tremor021](https://github.com/tremor021) ([#8807](https://github.com/community-scripts/ProxmoxVE/pull/8807))
     - Immich: Pin version to 2.2.1 [@vhsdream](https://github.com/vhsdream) ([#8800](https://github.com/community-scripts/ProxmoxVE/pull/8800))
     - jellyfin: fix: initial update [@CrazyWolf13](https://github.com/CrazyWolf13) ([#8784](https://github.com/community-scripts/ProxmoxVE/pull/8784))
 
+### 🌐 Website
+
+  - frontend: chore: bump debian OS [@CrazyWolf13](https://github.com/CrazyWolf13) ([#8798](https://github.com/community-scripts/ProxmoxVE/pull/8798))
+
 ## 2025-10-31
 
 ### 🚀 Updated Scripts

ct/headers/pangolin

@@ -0,0 +1,6 @@
+    ____                          ___     
+   / __ \____ _____  ____ _____  / (_)___ 
+  / /_/ / __ `/ __ \/ __ `/ __ \/ / / __ \
+ / ____/ /_/ / / / / /_/ / /_/ / / / / / /
+/_/    \__,_/_/ /_/\__, /\____/_/_/_/ /_/ 
+                  /____/                  

ct/pangolin.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://pangolin.net/
+
+APP="Pangolin"
+var_tags="${var_tags:-proxy}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-5}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+var_tun="${var_tun:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -d /opt/pangolin ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+
+    if check_for_gh_release "pangolin" "fosrl/pangolin"; then
+        msg_info "Stopping Service"
+        systemctl stop pangolin
+        msg_info "Service stopped"
+
+        msg_info "Creating backup"
+        tar -czf /opt/pangolin_config_backup.tar.gz -C /opt/pangolin config
+        msg_ok "Created backup"
+
+        fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
+        fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
+
+        msg_info "Updating Pangolin"
+        export BUILD=oss
+        export DATABASE=sqlite
+        cd /opt/pangolin
+        $STD npm ci
+        echo "export * from \"./$DATABASE\";" > server/db/index.ts
+        echo "export const build = \"$BUILD\" as any;" > server/build.ts
+        cp tsconfig.oss.json tsconfig.json
+        $STD npm run next:build
+        $STD node esbuild.mjs -e server/index.ts -o dist/server.mjs -b $BUILD
+        $STD node esbuild.mjs -e server/setup/migrationsSqlite.ts -o dist/migrations.mjs
+        $STD npm run build:cli
+        cp -R .next/standalone ./
+
+        cat <<EOF >/usr/local/bin/pangctl
+#!/bin/sh
+cd /opt/pangolin
+./dist/cli.mjs "$@"
+EOF
+        chmod +x /usr/local/bin/pangctl ./dist/cli.mjs
+        cp server/db/names.json ./dist/names.json
+        msg_ok "Updated Pangolin"
+
+        msg_info "Restoring config"
+        tar -xzf /opt/pangolin_config_backup.tar.gz -C /opt/pangolin --overwrite
+        rm -f /opt/pangolin_config_backup.tar.gz
+        msg_ok "Restored config"
+        msg_ok "Updated successfully!"
+    fi
+    exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3002${CL}"

ct/victoriametrics.sh

@@ -45,8 +45,15 @@ function update_script() {
     fetch_and_deploy_gh_release "vmutils" "VictoriaMetrics/VictoriaMetrics" "prebuild" "latest" "/opt/victoriametrics" "$vmutils_filename"
 
     if [[ -f /etc/systemd/system/victoriametrics-logs.service ]]; then
-      fetch_and_deploy_gh_release "victorialogs" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "victoria-logs-linux-amd64*.tar.gz"
-      fetch_and_deploy_gh_release "vlutils" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "vlutils-linux-amd64*.tar.gz"
+      vmlogs_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaLogs/releases/latest" |
+        jq -r '.assets[].name' |
+        grep -E '^victoria-logs-linux-amd64-v[0-9.]+\.tar\.gz$')  
+      vlutils_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaLogs/releases/latest" |
+        jq -r '.assets[].name' |
+        grep -E '^vlutils-linux-amd64-v[0-9.]+\.tar\.gz$')
+        
+      fetch_and_deploy_gh_release "victorialogs" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "$vmlogs_filename"
+      fetch_and_deploy_gh_release "vlutils" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "$vlutils_filename"
     fi
     chmod +x /opt/victoriametrics/*
 

frontend/public/json/pangolin.json

@@ -0,0 +1,48 @@
+{
+  "name": "Pangolin",
+  "slug": "pangolin",
+  "categories": [
+    21
+  ],
+  "date_created": "2025-11-01",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3002,
+  "documentation": "https://docs.pangolin.net/",
+  "config_path": "/opt/pangolin/config/config.yml",
+  "website": "https://pangolin.net/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/pangolin.webp",
+  "description": "Pangolin securely routes traffic over WireGuard tunnels to any private network. It works like a reverse proxy that spans multiple networks — no public IPs, DNS setup, or certificates required.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/pangolin.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 4096,
+        "hdd": 5,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Type `journalctl -u pangolin | grep -oP 'Token:\\s*\\K\\w+'` into LXC console to get admin token which you will use to create admin account.",
+      "type": "info"
+    },
+    {
+      "text": "LXC has 4GB of RAM set initially for the build stage. After installation finishes, you can decrease the RAM allocated to 1024MB or 512MB even.",
+      "type": "info"
+    },
+    {
+      "text": "Make sure you edit `/opt/pangolin/config/config.yml` and change it to match your needs",
+      "type": "warning"
+    }
+  ]
+}

frontend/public/json/versions.json

@@ -1,4 +1,39 @@
 [
+  {
+    "name": "inventree/InvenTree",
+    "version": "1.0.9",
+    "date": "2025-11-01T21:48:35Z"
+  },
+  {
+    "name": "Koenkk/zigbee2mqtt",
+    "version": "2.6.3",
+    "date": "2025-11-01T20:48:39Z"
+  },
+  {
+    "name": "henrygd/beszel",
+    "version": "v0.15.3",
+    "date": "2025-11-01T20:13:33Z"
+  },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "v6.4.4",
+    "date": "2025-11-01T19:48:08Z"
+  },
+  {
+    "name": "Paymenter/Paymenter",
+    "version": "v1.4.1",
+    "date": "2025-11-01T19:38:55Z"
+  },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.79.1-nightly",
+    "date": "2025-11-01T19:37:32Z"
+  },
+  {
+    "name": "motioneye-project/motioneye",
+    "version": "0.42.1",
+    "date": "2020-06-07T07:27:04Z"
+  },
   {
     "name": "chrisbenincasa/tunarr",
     "version": "v0.23.0-alpha.20",
@@ -9,11 +44,6 @@
     "version": "3.3.6",
     "date": "2025-11-01T10:41:15Z"
   },
-  {
-    "name": "Paymenter/Paymenter",
-    "version": "v1.4.0",
-    "date": "2025-11-01T09:51:45Z"
-  },
   {
     "name": "fuma-nama/fumadocs",
     "version": "fumadocs-ui@16.0.7",
@@ -46,8 +76,8 @@
   },
   {
     "name": "ollama/ollama",
-    "version": "v0.12.8",
-    "date": "2025-10-30T23:22:27Z"
+    "version": "v0.12.9",
+    "date": "2025-10-31T23:33:13Z"
   },
   {
     "name": "tailscale/tailscale",
@@ -56,8 +86,8 @@
   },
   {
     "name": "runtipi/runtipi",
-    "version": "v4.5.5",
-    "date": "2025-10-28T21:53:07Z"
+    "version": "nightly",
+    "date": "2025-10-31T21:55:26Z"
   },
   {
     "name": "evcc-io/evcc",
@@ -74,11 +104,6 @@
     "version": "v3.4.0",
     "date": "2025-10-31T18:50:18Z"
   },
-  {
-    "name": "BerriAI/litellm",
-    "version": "v1.78.5.rc.4",
-    "date": "2025-10-31T18:44:14Z"
-  },
   {
     "name": "immich-app/immich",
     "version": "v2.2.1",
@@ -154,11 +179,6 @@
     "version": "v1.10.1",
     "date": "2025-10-31T08:25:57Z"
   },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "6.4.3",
-    "date": "2025-10-31T05:51:51Z"
-  },
   {
     "name": "getumbrel/umbrel",
     "version": "1.4.2",
@@ -344,11 +364,6 @@
     "version": "v0.99.0",
     "date": "2025-10-29T06:32:09Z"
   },
-  {
-    "name": "henrygd/beszel",
-    "version": "v0.15.2",
-    "date": "2025-10-29T05:26:32Z"
-  },
   {
     "name": "openobserve/openobserve",
     "version": "v0.15.3",
@@ -519,11 +534,6 @@
     "version": "prototype-v1.24.0.s3-snapshots-3",
     "date": "2025-10-24T09:47:47Z"
   },
-  {
-    "name": "inventree/InvenTree",
-    "version": "1.0.8",
-    "date": "2025-10-24T05:32:09Z"
-  },
   {
     "name": "pocketbase/pocketbase",
     "version": "v0.31.0",
@@ -899,11 +909,6 @@
     "version": "v25.10.0",
     "date": "2025-10-02T11:34:39Z"
   },
-  {
-    "name": "Koenkk/zigbee2mqtt",
-    "version": "2.6.2",
-    "date": "2025-10-01T17:51:09Z"
-  },
   {
     "name": "Kozea/Radicale",
     "version": "v3.5.7.pypi",
@@ -1319,11 +1324,6 @@
     "version": "v0.0.8",
     "date": "2025-05-18T11:37:31Z"
   },
-  {
-    "name": "motioneye-project/motioneye",
-    "version": "0.42.1",
-    "date": "2020-06-07T07:27:04Z"
-  },
   {
     "name": "stackblitz-labs/bolt.diy",
     "version": "1.0.0",

install/pangolin-install.sh

@@ -0,0 +1,137 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://pangolin.net/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  sqlite3 \
+  iptables
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
+fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
+
+msg_info "Setup Pangolin"
+IP_ADDR=$(hostname -I | awk '{print $1}')
+SECRET_KEY=$(openssl rand -base64 48 | tr -dc 'A-Za-z0-9' | head -c 32)
+export BUILD=oss
+export DATABASE=sqlite
+cd /opt/pangolin
+$STD npm ci
+echo "export * from \"./$DATABASE\";" > server/db/index.ts
+echo "export const build = \"$BUILD\" as any;" > server/build.ts
+cp tsconfig.oss.json tsconfig.json
+mkdir -p dist
+$STD npm run next:build
+$STD node esbuild.mjs -e server/index.ts -o dist/server.mjs -b $BUILD
+$STD node esbuild.mjs -e server/setup/migrationsSqlite.ts -o dist/migrations.mjs
+$STD npm run build:cli
+cp -R .next/standalone ./
+
+cat <<EOF >/usr/local/bin/pangctl
+#!/bin/sh
+cd /opt/pangolin
+./dist/cli.mjs "$@"
+EOF
+chmod +x /usr/local/bin/pangctl ./dist/cli.mjs
+cp server/db/names.json ./dist/names.json
+mkdir -p /var/config
+
+cat <<EOF >/opt/pangolin/config/config.yml
+app:
+  dashboard_url: http://$IP_ADDR:3002
+  log_level: debug
+
+domains:
+  domain1:
+    base_domain: example.com
+
+server:
+  secret: $SECRET_KEY
+
+gerbil:
+  base_endpoint: example.com
+
+orgs:
+  block_size: 24
+  subnet_group: 100.90.137.0/20
+
+flags:
+  require_email_verification: false
+  disable_signup_without_invite: true
+  disable_user_create_org: true
+  allow_raw_resources: true
+  enable_integration_api: true
+  enable_clients: true
+EOF
+$STD npm run db:sqlite:generate
+$STD npm run db:sqlite:push
+
+. /etc/os-release
+if [ "$VERSION_CODENAME" = "trixie" ]; then
+  echo "net.ipv4.ip_forward=1" >>/etc/sysctl.d/sysctl.conf
+  $STD sysctl -p /etc/sysctl.d/sysctl.conf
+else
+  echo "net.ipv4.ip_forward=1" >>/etc/sysctl.conf
+  $STD sysctl -p /etc/sysctl.conf
+fi
+msg_ok "Setup Pangolin"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/pangolin.service
+[Unit]
+Description=Pangolin Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/pangolin
+ExecStart=/usr/bin/npm start
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now pangolin
+
+cat <<EOF >/etc/systemd/system/gerbil.service
+[Unit]
+Description=Gerbil Service
+After=network.target
+Requires=pangolin.service
+
+[Service]
+Type=simple
+User=root
+ExecStart=/usr/bin/gerbil --reachableAt=http://$IP_ADDR:3004 --generateAndSaveKeyTo=/var/config/key --remoteConfig=http://$IP_ADDR:3001/api/v1/
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now gerbil
+msg_ok "Created Services"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt -y autoremove
+$STD apt -y autoclean
+$STD apt -y clean
+msg_ok "Cleaned"

install/victoriametrics-install.sh

@@ -28,8 +28,14 @@ fetch_and_deploy_gh_release "vmutils" "VictoriaMetrics/VictoriaMetrics" "prebuil
 read -r -p "${TAB3}Would you like to add VictoriaLogs? <y/N> " prompt
 
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-  fetch_and_deploy_gh_release "victorialogs" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "victoria-logs-linux-amd64*.tar.gz"
-  fetch_and_deploy_gh_release "vlutils" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "vlutils-linux-amd64*.tar.gz"
+  vmlogs_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaLogs/releases/latest" |
+    jq -r '.assets[].name' |
+    grep -E '^victoria-logs-linux-amd64-v[0-9.]+\.tar\.gz$')  
+  vlutils_filename=$(curl -fsSL "https://api.github.com/repos/VictoriaMetrics/VictoriaLogs/releases/latest" |
+    jq -r '.assets[].name' |
+    grep -E '^vlutils-linux-amd64-v[0-9.]+\.tar\.gz$')
+  fetch_and_deploy_gh_release "victorialogs" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "$vmlogs_filename"
+  fetch_and_deploy_gh_release "vlutils" "VictoriaMetrics/VictoriaLogs" "prebuild" "latest" "/opt/victoriametrics" "$vlutils_filename"
 fi
 
 msg_info "Setup VictoriaMetrics"