-

Added copyright, author, and license information.

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -22,18 +22,6 @@ body:
     validations:
       required: true
 
-  - type: dropdown
-    id: verbose_run
-    attributes:
-      label: 🔎 Did you run the script with verbose mode enabled?
-      description: "Required for debugging any script issue. A verbose log is mandatory."
-      options:
-        - ""
-        - "Yes, verbose mode was enabled and the output is included below"
-        - "No (this issue will likely be closed automatically)"
-    validations:
-      required: true
-
   - type: input
     id: script_name
     attributes:

CHANGELOG.md

@@ -10,102 +10,15 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
-## 2025-11-20
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - core: change 'uv cache clear' to 'uv cache clean' [@MickLesk](https://github.com/MickLesk) ([#9299](https://github.com/community-scripts/ProxmoxVE/pull/9299))
-
-  - #### ✨ New Features
-
-    - kasm: add: update [@CrazyWolf13](https://github.com/CrazyWolf13) ([#9253](https://github.com/community-scripts/ProxmoxVE/pull/9253))
-    - tools/pve: expand PVE support to 9.0–9.1 (post-install & netdata) [@MickLesk](https://github.com/MickLesk) ([#9298](https://github.com/community-scripts/ProxmoxVE/pull/9298))
-
-  - #### 💥 Breaking Changes
-
-    - Omada - AVX-only support [@MickLesk](https://github.com/MickLesk) ([#9295](https://github.com/community-scripts/ProxmoxVE/pull/9295))
-
-## 2025-11-19
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - HotFix: Fix NetVisor env var [@vhsdream](https://github.com/vhsdream) ([#9286](https://github.com/community-scripts/ProxmoxVE/pull/9286))
-    - Jotty: reduce RAM requirement [@vhsdream](https://github.com/vhsdream) ([#9272](https://github.com/community-scripts/ProxmoxVE/pull/9272))
-    - Nginx Proxy Manager: Pin version to v2.13.4 [@tremor021](https://github.com/tremor021) ([#9259](https://github.com/community-scripts/ProxmoxVE/pull/9259))
-
-  - #### ✨ New Features
-
-    - PVE 9.1 version support [@MickLesk](https://github.com/MickLesk) ([#9280](https://github.com/community-scripts/ProxmoxVE/pull/9280))
-    - force disable IPv6 if IPV6_METHOD = none [@MickLesk](https://github.com/MickLesk) ([#9277](https://github.com/community-scripts/ProxmoxVE/pull/9277))
-
-  - #### 💥 Breaking Changes
-
-    - NetVisor: v0.10.0 fixes [@vhsdream](https://github.com/vhsdream) ([#9255](https://github.com/community-scripts/ProxmoxVE/pull/9255))
-
-## 2025-11-18
-
-### 🚀 Updated Scripts
-
-  - librenms: Fix password to short [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#9236](https://github.com/community-scripts/ProxmoxVE/pull/9236))
-
-  - #### 🐞 Bug Fixes
-
-    - Huntarr: Downgrade Python to 3.12 [@MickLesk](https://github.com/MickLesk) ([#9246](https://github.com/community-scripts/ProxmoxVE/pull/9246))
-    - kasm: fix release fetching [@MickLesk](https://github.com/MickLesk) ([#9244](https://github.com/community-scripts/ProxmoxVE/pull/9244))
-
-## 2025-11-17
-
-### 🆕 New Scripts
-
-  - Passbolt ([#9226](https://github.com/community-scripts/ProxmoxVE/pull/9226))
-- Domain-Locker ([#9214](https://github.com/community-scripts/ProxmoxVE/pull/9214))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Domain Monitor: Fix encryption key length in install script [@tremor021](https://github.com/tremor021) ([#9239](https://github.com/community-scripts/ProxmoxVE/pull/9239))
-    - NetVisor: add build deps, increase RAM [@vhsdream](https://github.com/vhsdream) ([#9205](https://github.com/community-scripts/ProxmoxVE/pull/9205))
-    - fix: restart apache2 after installing zabbix config [@AlphaLawless](https://github.com/AlphaLawless) ([#9206](https://github.com/community-scripts/ProxmoxVE/pull/9206))
-
-  - #### ✨ New Features
-
-    - [core]: harmonize app_name for creds [@MickLesk](https://github.com/MickLesk) ([#9224](https://github.com/community-scripts/ProxmoxVE/pull/9224))
-
-  - #### 💥 Breaking Changes
-
-    - Refactor: paperless-ngx (Breaking Change Inside) [@MickLesk](https://github.com/MickLesk) ([#9223](https://github.com/community-scripts/ProxmoxVE/pull/9223))
-
-### 🧰 Maintenance
-
-  - #### 📂 Github
-
-    - github: add verbose mode check to bug report template [@MickLesk](https://github.com/MickLesk) ([#9234](https://github.com/community-scripts/ProxmoxVE/pull/9234))
-
 ## 2025-11-16
 
-### 🆕 New Scripts
-
-  - Metabase ([#9190](https://github.com/community-scripts/ProxmoxVE/pull/9190))
-
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
-    - Change backup directory to /opt for paperless-ngx [@ProfDrYoMan](https://github.com/ProfDrYoMan) ([#9195](https://github.com/community-scripts/ProxmoxVE/pull/9195))
     - Kimai: remove deprecated admin_lte section [@MickLesk](https://github.com/MickLesk) ([#9182](https://github.com/community-scripts/ProxmoxVE/pull/9182))
     - healthchecks: bump python to 3.13 [@MickLesk](https://github.com/MickLesk) ([#9175](https://github.com/community-scripts/ProxmoxVE/pull/9175))
 
-### 🌐 Website
-
-  - #### 📝 Script Information
-
-    - fixed config_path for donetick [@TazztheMonster](https://github.com/TazztheMonster) ([#9203](https://github.com/community-scripts/ProxmoxVE/pull/9203))
-
 ## 2025-11-15
 
 ### 🚀 Updated Scripts

api/go.mod

@@ -1,6 +1,6 @@
 module proxmox-api
 
-go 1.24.0
+go 1.23.2
 
 require (
 	github.com/gorilla/mux v1.8.1
@@ -17,7 +17,7 @@ require (
 	github.com/xdg-go/scram v1.1.2 // indirect
 	github.com/xdg-go/stringprep v1.0.4 // indirect
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.35.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sync v0.11.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
+	golang.org/x/text v0.22.0 // indirect
 )

api/go.sum

@@ -27,16 +27,16 @@ go.mongodb.org/mongo-driver v1.17.2 h1:gvZyk8352qSfzyZ2UMWcpDpMSGEr1eqE4T793Sqyh
 go.mongodb.org/mongo-driver v1.17.2/go.mod h1:Hy04i7O2kC4RS06ZrhPRqj/u4DTYkFDAAccj+rVKqgQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
+golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -48,8 +48,8 @@ golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=

ct/domain-locker.sh

@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Lissy93/domain-locker
-
-APP="Domain-Locker"
-var_tags="${var_tags:-Monitoring}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-10240}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /opt/domain-locker ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
-        msg_info "Stopping Service"
-        systemctl stop domain-locker
-        msg_info "Service stopped"
-
-        PG_VERSION="17" setup_postgresql
-        setup_nodejs
-        CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker"
-
-        msg_info "Installing Modules (patience)"
-        cd /opt/domain-locker
-        $STD npm install
-        msg_ok "Installed Modules"
-
-        msg_info "Building Domain-Locker (a lot of patience)"
-        set -a
-        source /opt/domain-locker.env
-        set +a
-        $STD npm run build
-        msg_info "Built Domain-Locker"
-
-        msg_info "Restarting Services"
-        systemctl start domain-locker
-        msg_ok "Restarted Services"
-        msg_ok "Updated successfully!"
-    fi
-    exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/headers/domain-locker

@@ -1,6 +0,0 @@
-    ____                        _             __               __            
-   / __ \____  ____ ___  ____ _(_)___        / /   ____  _____/ /_____  _____
-  / / / / __ \/ __ `__ \/ __ `/ / __ \______/ /   / __ \/ ___/ //_/ _ \/ ___/
- / /_/ / /_/ / / / / / / /_/ / / / / /_____/ /___/ /_/ / /__/ ,< /  __/ /    
-/_____/\____/_/ /_/ /_/\__,_/_/_/ /_/     /_____/\____/\___/_/|_|\___/_/     
-                                                                             

ct/headers/metabase

@@ -1,6 +0,0 @@
-    __  ___     __        __                  
-   /  |/  /__  / /_____ _/ /_  ____ _________ 
-  / /|_/ / _ \/ __/ __ `/ __ \/ __ `/ ___/ _ \
- / /  / /  __/ /_/ /_/ / /_/ / /_/ (__  )  __/
-/_/  /_/\___/\__/\__,_/_.___/\__,_/____/\___/ 
-                                              

ct/headers/passbolt

@@ -1,6 +0,0 @@
-    ____                  __          ____ 
-   / __ \____ ___________/ /_  ____  / / /_
-  / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
- / ____/ /_/ (__  |__  ) /_/ / /_/ / / /_  
-/_/    \__,_/____/____/_.___/\____/_/\__/  
-                                           

ct/healthchecks.sh

@@ -28,26 +28,42 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
+
   if check_for_gh_release "healthchecks" "healthchecks/healthchecks"; then
     msg_info "Stopping Services"
     systemctl stop healthchecks
     msg_ok "Stopped Services"
 
-    PYTHON_VERSION="3.13" setup_uv
+    msg_info "Backing up existing installation"
+    BACKUP="/opt/healthchecks-backup-$(date +%F-%H%M)"
+    cp -a /opt/healthchecks "$BACKUP"
+    msg_ok "Backup created at $BACKUP"
+
     fetch_and_deploy_gh_release "healthchecks" "healthchecks/healthchecks"
 
-    msg_info "Updating healthchecks"
     cd /opt/healthchecks
-    mkdir -p /opt/healthchecks/static-collected/
+    if [[ -d venv ]]; then
-    $STD uv pip install wheel gunicorn -r requirements.txt --system
+      rm -rf venv
-    $STD uv run -- python manage.py makemigrations
+    fi
-    $STD uv run -- python manage.py migrate --noinput
+    msg_info "Recreating Python venv"
-    $STD uv run -- python manage.py collectstatic --noinput
+    $STD python3 -m venv venv
-    $STD uv run -- python manage.py compress
+    $STD source venv/bin/activate
-    msg_ok "Updated healthchecks"
+    $STD pip install --upgrade pip wheel
+    msg_ok "Created venv"
+
+    msg_info "Installing requirements"
+    $STD pip install gunicorn -r requirements.txt
+    msg_ok "Installed requirements"
+
+    msg_info "Running Django migrations"
+    $STD python manage.py migrate --noinput
+    $STD python manage.py collectstatic --noinput
+    $STD python manage.py compress
+    msg_ok "Completed Django migrations and static build"
+
     msg_info "Starting Services"
     systemctl start healthchecks
-    systemctl restart caddy
+    systemctl reload caddy
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi

ct/huntarr.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  PYTHON_VERSION="3.12" setup_uv
+  setup_uv
 
   if check_for_gh_release "huntarr" "plexguide/Huntarr.io"; then
     msg_info "Stopping Service"

ct/jotty.sh

@@ -8,7 +8,7 @@ source <(curl -s https://raw.githubusercontent.com/community-scripts/ProxmoxVE/m
 APP="jotty"
 var_tags="${var_tags:-tasks;notes}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-3072}"
+var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"

ct/kasm.sh

@@ -25,51 +25,14 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [[ ! -d /opt/kasm/current ]]; then
+  if [[ ! -d /var ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-
+  msg_info "Updating LXC"
-  msg_info "Checking for new version"
+  $STD apt update
-  CURRENT_VERSION=$(readlink -f /opt/kasm/current | awk -F'/' '{print $4}')
+  $STD apt -y upgrade
-  KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
+  msg_ok "Updated LXC"
-  if [[ -z "$KASM_URL" ]]; then
-    msg_error "Unable to detect latest Kasm release URL."
-    exit 1
-  fi
-  KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-  msg_info "Checked for new version"
-
-  msg_info "Removing outdated docker-compose plugin"
-  [ -f ~/.docker/cli-plugins/docker-compose ] && rm -rf ~/.docker/cli-plugins/docker-compose
-  msg_ok "Removed outdated docker-compose plugin"
-  
-  if [[ -z "$CURRENT_VERSION" ]] || [[ "$KASM_VERSION" != "$CURRENT_VERSION" ]]; then
-    msg_info "Updating Kasm"
-    cd /tmp
-
-    msg_warn "WARNING: This script will run an external installer from a third-party source (https://www.kasmweb.com/)."
-    msg_warn "The following code is NOT maintained or audited by our repository."
-    msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
-    msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  upgrade.sh inside tar.gz $KASM_URL"
-    echo
-    read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
-    if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
-      msg_error "Aborted by user. No changes have been made."
-      exit 10
-    fi
-    curl -fsSL -o "/tmp/kasm_release_${KASM_VERSION}.tar.gz" "$KASM_URL"
-    tar -xf "kasm_release_${KASM_VERSION}.tar.gz"
-    chmod +x /tmp/kasm_release/install.sh
-    rm -f /tmp/kasm_release_${KASM_VERSION}.tar.gz
-  
-    bash /tmp/kasm_release/upgrade.sh --proxy-port 443
-    rm -rf /tmp/kasm_release
-    msg_ok "Updated Successfully"
-  else
-    msg_ok "No update required. Kasm is already at v${KASM_VERSION}"
-  
-  fi
   exit
 }
 

ct/metabase.sh

@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.metabase.com/
-
-APP="Metabase"
-var_tags="${var_tags:-analytics}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-6}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /opt/metabase ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    if check_for_gh_release "metabase" "metabase/metabase"; then
-        msg_info "Stopping Service"
-        systemctl stop metabase
-        msg_info "Stopped Service"
-
-        msg_info "Creating backup"
-        mv /opt/metabase/.env /opt
-        msg_ok "Created backup"
-
-        msg_info "Updating Metabase"
-        RELEASE=$(get_latest_github_release "metabase/metabase")
-        curl -fsSL "https://downloads.metabase.com/v${RELEASE}.x/metabase.jar" -o /opt/metabase/metabase.jar
-        echo $RELEASE >~/.metabase
-        msg_ok "Updated Metabase"
-
-        msg_info "Restoring backup"
-        mv /opt/.env /opt/metabase
-        msg_ok "Restored backup"
-
-        msg_info "Starting Service"
-        systemctl start metabase
-        msg_ok "Started Service"
-        msg_ok "Updated successfully!"
-    fi
-    exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/netvisor.sh

@@ -8,7 +8,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 APP="NetVisor"
 var_tags="${var_tags:-analytics}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-3072}"
+var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-6}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -35,30 +35,18 @@ function update_script() {
     msg_ok "Stopped services"
 
     msg_info "Backing up configurations"
-    cp /opt/netvisor/.env /opt/netvisor.env.bak
+    cp /opt/netvisor/.env /opt/netvisor.env
     msg_ok "Backed up configurations"
 
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "netvisor" "mayanayza/netvisor" "tarball" "latest" "/opt/netvisor"
 
-    if ! dpkg -l | grep -q "pkg-config"; then
-      $STD apt install -y pkg-config
-    fi
-    if ! dpkg -l | grep -q "libssl-dev"; then
-      $STD apt install -y libssl-dev
-    fi
     TOOLCHAIN="$(grep "channel" /opt/netvisor/backend/rust-toolchain.toml | awk -F\" '{print $2}')"
     RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
 
-    cp /opt/netvisor.env.bak /opt/netvisor/.env
+    mv /opt/netvisor.env /opt/netvisor/.env
-    LOCAL_IP="$(hostname -I | awk '{print $1}')"
-    if ! grep -q "PUBLIC_URL"; then
-      sed -i "\|_PATH=|a\NETVISOR_PUBLIC_URL=http://${LOCAL_IP}:60072" /opt/netvisor/.env
-    fi
-    sed -i 's|_TARGET=.*$|_URL=http://127.0.0.1:60072|' /opt/netvisor/.env
-
     msg_info "Creating frontend UI"
     export PUBLIC_SERVER_HOSTNAME=default
-    export PUBLIC_SERVER_PORT=""
+    export PUBLIC_SERVER_PORT=60072
     cd /opt/netvisor/ui
     $STD npm ci --no-fund --no-audit
     $STD npm run build
@@ -70,16 +58,10 @@ function update_script() {
     mv ./target/release/server /usr/bin/netvisor-server
     msg_ok "Built Netvisor-server"
 
-    msg_info "Building Netvisor-daemon"
+    msg_info "Building Netvisor-daemon (amd64 version)"
     $STD cargo build --release --bin daemon
     cp ./target/release/daemon /usr/bin/netvisor-daemon
-    msg_ok "Built Netvisor-daemon"
+    msg_ok "Built Netvisor-daemon (amd64 version)"
-
-    sed -i -e 's|-target|-url|' \
-      -e 's| --server-port |:|' \
-      /etc/systemd/system/netvisor-daemon.service
-    sed -i '/^  \"server_target.*$/d' /root/.config/daemon/config.json
-    systemctl daemon-reload
 
     msg_info "Starting services"
     systemctl start netvisor-server netvisor-daemon

ct/nginxproxymanager.sh

@@ -49,12 +49,11 @@ function update_script() {
 
   NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
 
-  #RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
+  RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
-    #grep "tag_name" |
+    grep "tag_name" |
-    #awk '{print substr($2, 3, length($2)-4) }')
+    awk '{print substr($2, 3, length($2)-4) }')
 
-  RELEASE="2.13.4"
+  fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager"
-  CLEAN_INSTALL=1 fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager" "tarball" "v${RELEASE}" "/opt/nginxproxymanager"
 
   msg_info "Stopping Services"
   systemctl stop openresty

ct/omada.sh

@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-3072}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 
 header_info "$APP"
@@ -32,11 +32,19 @@ function update_script() {
   if lscpu | grep -q 'avx'; then
     MONGO_VERSION="8.0" setup_mongodb
   else
-    msg_error "No AVX detected (CPU-Flag)! We have discontinued support for this. You are welcome to try it manually with a Debian LXC, but due to the many issues with Omada, we currently only support AVX CPUs."
+    msg_warn "No AVX detected: Using older MongoDB 4.4"
-    exit 10
+    MONGO_VERSION="4.4" setup_mongodb
   fi
 
-  JAVA_VERSION="21" setup_java
+  msg_info "Checking if right Azul Zulu Java is installed"
+  java_version=$(java -version 2>&1 | awk -F[\"_] '/version/ {print $2}')
+  if [[ "$java_version" =~ ^1\.8\.* ]]; then
+    $STD apt remove --purge -y zulu8-jdk
+    $STD apt -y install zulu21-jre-headless
+    msg_ok "Updated Azul Zulu Java to 21"
+  else
+    msg_ok "Azul Zulu Java 21 already installed"
+  fi
 
   msg_info "Updating Omada Controller"
   OMADA_URL=$(curl -fsSL "https://support.omadanetworks.com/en/download/software/omada-controller/" |

ct/paperless-ngx.sh

@@ -27,27 +27,6 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-
-  # Check for old data structure and prompt migration
-  if [[ -f /opt/paperless/paperless.conf ]]; then
-    local OLD_DIRS=()
-    [[ -d /opt/paperless/consume ]] && OLD_DIRS+=("consume")
-    [[ -d /opt/paperless/data ]] && OLD_DIRS+=("data")
-    [[ -d /opt/paperless/media ]] && OLD_DIRS+=("media")
-
-    if [[ ${#OLD_DIRS[@]} -gt 0 ]]; then
-      msg_error "Old data structure detected in /opt/paperless/"
-      msg_custom "📂" "Found directories: ${OLD_DIRS[*]}"
-      echo -e ""
-      msg_custom "🔄" "Migration required to new data structure (/opt/paperless_data/)"
-      msg_custom "📖" "Please follow the migration guide:"
-      echo -e "${TAB}${GATEWAY}${BGN}https://github.com/community-scripts/ProxmoxVE/discussions/9223${CL}"
-      echo -e ""
-      msg_custom "⚠️" "Update aborted. Please migrate your data first."
-      exit 1
-    fi
-  fi
-
   if check_for_gh_release "paperless" "paperless-ngx/paperless-ngx"; then
     msg_info "Stopping all Paperless-ngx Services"
     systemctl stop paperless-consumer paperless-webserver paperless-scheduler paperless-task-queue
@@ -55,9 +34,15 @@ function update_script() {
 
     if grep -q "uv run" /etc/systemd/system/paperless-webserver.service; then
 
-      msg_info "Backing up configuration"
+      msg_info "Backing up user data and configuration"
-      local BACKUP_DIR="/opt/paperless_backup_$$"
+      local BACKUP_DIR="/tmp/paperless_backup_$$"
       mkdir -p "$BACKUP_DIR"
+      for dir in /opt/paperless/*/; do
+        dir_name=$(basename "$dir")
+        if [[ ! "$dir_name" =~ ^(docker|docs|scripts|src|static)$ ]]; then
+          cp -r "/opt/paperless/$dir_name" "$BACKUP_DIR/" 2>/dev/null || true
+        fi
+      done
       [[ -f /opt/paperless/paperless.conf ]] && cp /opt/paperless/paperless.conf "$BACKUP_DIR/"
       msg_ok "Backup completed to $BACKUP_DIR"
 
@@ -98,9 +83,16 @@ function update_script() {
       rm -rf /opt/paperless/venv
       find /opt/paperless -name "__pycache__" -type d -exec rm -rf {} +
 
-      msg_info "Backing up configuration"
+      msg_info "Backing up user data and configuration"
-      local BACKUP_DIR="/opt/paperless_backup_$$"
+      local BACKUP_DIR="/tmp/paperless_backup_$$"
       mkdir -p "$BACKUP_DIR"
+
+      for dir in /opt/paperless/*/; do
+        dir_name=$(basename "$dir")
+        if [[ ! "$dir_name" =~ ^(docker|docs|scripts|src|static)$ ]]; then
+          cp -r "/opt/paperless/$dir_name" "$BACKUP_DIR/" 2>/dev/null || true
+        fi
+      done
       [[ -f /opt/paperless/paperless.conf ]] && cp /opt/paperless/paperless.conf "$BACKUP_DIR/"
       msg_ok "Backup completed to $BACKUP_DIR"
 
@@ -129,9 +121,16 @@ function update_script() {
       done
 
       $STD systemctl daemon-reload
-      msg_info "Backing up configuration"
+      msg_info "Backing up user data and configuration"
-      BACKUP_DIR="/opt/paperless_backup_$$"
+      BACKUP_DIR="/tmp/paperless_backup_$$"
       mkdir -p "$BACKUP_DIR"
+
+      for dir in /opt/paperless/*/; do
+        dir_name=$(basename "$dir")
+        if [[ ! "$dir_name" =~ ^(docker|docs|scripts|src|static)$ ]]; then
+          cp -r "/opt/paperless/$dir_name" "$BACKUP_DIR/" 2>/dev/null || true
+        fi
+      done
       [[ -f /opt/paperless/paperless.conf ]] && cp /opt/paperless/paperless.conf "$BACKUP_DIR/"
       msg_ok "Backup completed to $BACKUP_DIR"
 

ct/passbolt.sh

@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.passbolt.com/
-
-APP="Passbolt"
-var_tags="${var_tags:-auth}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating $APP LXC"
-  $STD apt update
-  $STD apt upgrade -y
-  msg_ok "Updated $APP LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}${CL}"

frontend/public/json/domain-locker.json

@@ -1,44 +0,0 @@
-{
-  "name": "Domain Locker",
-  "slug": "domain-locker",
-  "categories": [
-    9
-  ],
-  "date_created": "2025-11-17",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 3000,
-  "documentation": "https://domain-locker.com/about",
-  "config_path": "/opt/domain-locker.env",
-  "website": "https://github.com/Lissy93/domain-locker",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/domain-locker.webp",
-  "description": "The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker! ",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/domain-locker.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 4096,
-        "hdd": 8,
-        "os": "Debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "Show DB credentials: `cat ~/Domain-Locker.creds`",
-      "type": "info"
-    },
-    {
-      "text": "Domain-locker takes quite some time to build and a lot of ressources, RAM and Cores can be lowered after install.",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/donetick.json

@@ -10,7 +10,7 @@
   "privileged": false,
   "interface_port": 2021,
   "documentation": "https://docs.donetick.com/getting-started/",
-  "config_path": "/opt/donetick/config/selfhosted.yaml",
+  "config_path": "/opt/donetick/config/selfhosted.yml",
   "website": "https://donetick.com",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/donetick.webp",
   "description": "Donetick an open-source, user-friendly app for managing tasks and chores, featuring customizable options to help you and others stay organized",

frontend/public/json/huntarr.json

@@ -23,7 +23,7 @@
         "ram": 1024,
         "hdd": 4,
         "os": "debian",
-        "version": "12"
+        "version": "13"
       }
     }
   ],

frontend/public/json/jotty.json

@@ -20,7 +20,7 @@
       "script": "ct/jotty.sh",
       "resources": {
         "cpu": 2,
-        "ram": 3072,
+        "ram": 4096,
         "hdd": 6,
         "os": "debian",
         "version": "13"

frontend/public/json/kasm.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-05-26",
   "type": "ct",
-  "updateable": true,
+  "updateable": false,
   "privileged": true,
   "config_path": "",
   "interface_port": 443,

frontend/public/json/librenms.json

@@ -28,13 +28,8 @@
     }
   ],
   "default_credentials": {
-    "username": null,
+    "username": "admin",
-    "password": null
+    "password": "admin"
   },
-  "notes": [
+  "notes": []
-    {
-      "text": "After installation, the admin user credentials are saved in the file ~/librenms.creds inside the container.",
-      "type": "info"
-    }
-  ]
 }

frontend/public/json/metabase.json

@@ -1,35 +0,0 @@
-{
-  "name": "Metabase",
-  "slug": "metabase",
-  "categories": [
-    9
-  ],
-  "date_created": "2025-11-16",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 3000,
-  "documentation": "https://www.metabase.com/docs/latest/",
-  "config_path": "/opt/metabase/.env",
-  "website": "https://www.metabase.com/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/metabase.webp",
-  "description": "Metabase is an open-source business intelligence platform. You can use Metabase to ask questions about your data, or embed Metabase in your app to let your customers explore their data on their own.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/metabase.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 2048,
-        "hdd": 6,
-        "os": "Debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": []
-}

frontend/public/json/netvisor.json

@@ -20,7 +20,7 @@
       "script": "ct/netvisor.sh",
       "resources": {
         "cpu": 2,
-        "ram": 3072,
+        "ram": 2048,
         "hdd": 6,
         "os": "Debian",
         "version": "13"
@@ -35,10 +35,6 @@
     {
       "text": "The integrated daemon config is located at `/root/.config/daemon/config.json`",
       "type": "info"
-    },
-    {
-      "text": "When using a reverse proxy, edit `/opt/netvisor/ui/build/_app/env.js`: add 443 to `PUBLIC_SERVER_PORT` and remove 'default' from `PUBLIC_SERVER_HOSTNAME`.",
-      "type": "info"
     }
   ]
 }

frontend/public/json/omada.json

@@ -23,7 +23,7 @@
                 "ram": 3072,
                 "hdd": 8,
                 "os": "debian",
-                "version": "12"
+                "version": "13"
             }
         }
     ],

frontend/public/json/passbolt.json

@@ -1,44 +0,0 @@
-{
-  "name": "Passbolt",
-  "slug": "passbolt",
-  "categories": [
-    6
-  ],
-  "date_created": "2025-11-17",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 443,
-  "documentation": "https://www.passbolt.com/docs/",
-  "config_path": "/etc/passbolt/passbolt.php",
-  "website": "https://www.passbolt.com/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/passbolt.webp",
-  "description": "Passbolt is a hybrid credential platform. It is built-first for modern IT teams, yet simple enough for everyone. A sovereign, battle-tested solution that delivers for a team of 5, or an organisation of 5000.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/passbolt.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 2048,
-        "hdd": 2,
-        "os": "Debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "Type `cat ~/passbolt.creds` to see MariaDB database credentials. You will need those to setup Passbolt.",
-      "type": "info"
-    },
-    {
-      "text": "The application uses self-signed certificates. You can also use Let's Encrypt to get a valid certificate for your domain. Please read the documentation for more information.",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/searxng.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-08-26",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8888,
   "documentation": "https://docs.searxng.org/",

install/domain-locker-install.sh

@@ -1,72 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: CrazyWolf13
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/CrazyWolf13/domain-locker
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="domainlocker_db" PG_DB_USER="domainlocker" setup_postgresql_db
-NODE_VERSION="22" setup_nodejs
-
-fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker"
-
-msg_info "Installing Modules (patience)"
-cd /opt/domain-locker
-$STD npm install
-msg_ok "Installed Modules"
-
-msg_info "Building Domain-Locker (a lot of patience)"
-cat <<EOF >/opt/domain-locker.env
-# Database connection
-DL_PG_HOST=localhost
-DL_PG_PORT=5432
-DL_PG_USER=$PG_DB_USER
-DL_PG_PASSWORD=$PG_DB_PASS
-DL_PG_NAME=$PG_DB_NAME
-
-# Build + Runtime
-DL_ENV_TYPE=selfHosted
-NITRO_PRESET=node_server
-NODE_ENV=production
-EOF
-set -a
-source /opt/domain-locker.env
-set +a
-$STD npm run build
-msg_info "Built Domain-Locker"
-
-msg_info "Building Database schema"
-export PGPASSWORD="$DL_PG_PASSWORD"
-$STD psql -h "$DL_PG_HOST" -p "$DL_PG_PORT" -U "$DL_PG_USER" -d "$DL_PG_NAME" -f "/opt/domain-locker/db/schema.sql"
-msg_ok "Built Database schema"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/domain-locker.service
-[Unit]
-Description=Domain-Locker Service
-After=network.target
-
-[Service]
-EnvironmentFile=/opt/domain-locker.env
-WorkingDirectory=/opt/domain-locker
-ExecStart=/opt/domain-locker/start.sh
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl start --now -q domain-locker
-msg_info "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/domain-monitor-install.sh

@@ -33,7 +33,7 @@ MARIADB_DB_NAME="domain_monitor" MARIADB_DB_USER="domainmonitor" setup_mariadb_d
 fetch_and_deploy_gh_release "domain-monitor" "Hosteroid/domain-monitor" "prebuild" "latest" "/opt/domain-monitor" "domain-monitor-v*.zip"
 
 msg_info "Setting up Domain Monitor"
-ENC_KEY=$(openssl rand -base64 32 | tr -d '\n')
+ENC_KEY=$(openssl rand -base64 48 | tr -dc 'A-Za-z0-9' | head -c 32)
 cd /opt/domain-monitor
 $STD composer install
 cp env.example.txt .env

install/healthchecks-install.sh

@@ -1,5 +1,4 @@
 #!/usr/bin/env bash
-
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: MickLesk (Canbiz)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -16,43 +15,44 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   gcc \
+  python3 \
+  python3-dev \
+  python3-venv \
   libpq-dev \
   libcurl4-openssl-dev \
   libssl-dev \
   caddy
+
+mkdir -p ~/.config/pip
+cat > ~/.config/pip/pip.conf << EOF
+[global]
+break-system-packages = true
+EOF
 msg_ok "Installed Dependencies"
 
-PYTHON_VERSION="3.13" setup_uv
 PG_VERSION=16 setup_postgresql
+PG_DB_NAME="healthchecks_db" PG_DB_USER="hc_user" PG_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13) setup_postgresql_db
 
-msg_info "Setup Database"
+msg_info "Setup Keys (Admin / Secret)"
-DB_NAME=healthchecks_db
-DB_USER=hc_user
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
 SECRET_KEY="$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)"
 ADMIN_EMAIL="admin@helper-scripts.local"
 ADMIN_PASSWORD="$DB_PASS"
-$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
-$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
-$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
 {
-  echo "healthchecks-Credentials"
-  echo "healthchecks Database User: $DB_USER"
-  echo "healthchecks Database Password: $DB_PASS"
-  echo "healthchecks Database Name: $DB_NAME"
   echo "healthchecks Admin Email: $ADMIN_EMAIL"
   echo "healthchecks Admin Password: $ADMIN_PASSWORD"
 } >>~/healthchecks.creds
-msg_ok "Set up Database"
+msg_ok "Set up Keys"
 
 fetch_and_deploy_gh_release "healthchecks" "healthchecks/healthchecks"
 
-msg_info "Setup healthchecks"
+msg_info "Installing Healthchecks (venv)"
 cd /opt/healthchecks
-mkdir -p /opt/healthchecks/static-collected/
+python3 -m venv venv
-$STD uv pip install wheel gunicorn -r requirements.txt --system
+source venv/bin/activate
+
+$STD pip install --upgrade pip wheel
+$STD pip install gunicorn -r requirements.txt
+msg_ok "Installed Python packages"
 
 LOCAL_IP=$(hostname -I | awk '{print $1}')
 cat <<EOF >/opt/healthchecks/hc/local_settings.py
@@ -83,18 +83,19 @@ DATABASES = {
 }
 EOF
 
-$STD uv run -- python manage.py makemigrations
+msg_info "Running Django setup"
-$STD uv run -- python manage.py migrate --noinput
+$STD python manage.py makemigrations
-$STD uv run -- python manage.py collectstatic --noinput
+$STD python manage.py migrate --noinput
-$STD uv run -- python manage.py compress
+$STD python manage.py collectstatic --noinput
+$STD python manage.py compress
 
-cat <<EOF | $STD uv run -- python manage.py shell
+python <<EOF
 from django.contrib.auth import get_user_model
 User = get_user_model()
 if not User.objects.filter(email="${ADMIN_EMAIL}").exists():
     User.objects.create_superuser("${ADMIN_EMAIL}", "${ADMIN_EMAIL}", "${ADMIN_PASSWORD}")
 EOF
-msg_ok "Installed healthchecks"
+msg_ok "Configured Django"
 
 msg_info "Configuring Caddy"
 cat <<EOF >/etc/caddy/Caddyfile
@@ -108,7 +109,7 @@ ${LOCAL_IP} {
 EOF
 msg_ok "Configured Caddy"
 
-msg_info "Creating Service"
+msg_info "Creating systemd service"
 cat <<EOF >/etc/systemd/system/healthchecks.service
 [Unit]
 Description=Healthchecks Service
@@ -116,12 +117,13 @@ After=network.target postgresql.service
 
 [Service]
 WorkingDirectory=/opt/healthchecks/
-ExecStart=/usr/local/bin/uv run -- gunicorn hc.wsgi:application --bind 127.0.0.1:8000
+ExecStart=/opt/healthchecks/venv/bin/gunicorn hc.wsgi:application --bind 127.0.0.1:8000
 Restart=always
 
 [Install]
 WantedBy=multi-user.target
 EOF
+
 systemctl enable -q --now healthchecks caddy
 systemctl reload caddy
 msg_ok "Created Service"

install/huntarr-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-PYTHON_VERSION="3.12" setup_uv
+setup_uv
 fetch_and_deploy_gh_release "huntarr" "plexguide/Huntarr.io"
 
 msg_info "Configure Huntarr"

install/kasm-install.sh

@@ -13,23 +13,12 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Docker"
+KASM_VERSION=$(curl -fsSL 'https://www.kasmweb.com/downloads' | grep -o 'https://kasm-static-content.s3.amazonaws.com/kasm_release_[^"]*\.tar\.gz' | head -n 1 | sed -E 's/.*release_(.*)\.tar\.gz/\1/')
-$STD sh <(curl -fsSL https://get.docker.com/)
-msg_ok "Installed Docker"
-
-msg_info "Detecting latest Kasm Workspaces release"
-KASM_URL=$(curl -fsSL "https://www.kasm.com/downloads" | tr '\n' ' ' | grep -oE 'https://kasm-static-content[^"]*kasm_release_[0-9]+\.[0-9]+\.[0-9]+\.[a-z0-9]+\.tar\.gz' | head -n 1)
-if [[ -z "$KASM_URL" ]]; then
-  msg_error "Unable to detect latest Kasm release URL."
-  exit 1
-fi
-KASM_VERSION=$(echo "$KASM_URL" | sed -E 's/.*kasm_release_([0-9]+\.[0-9]+\.[0-9]+).*/\1/')
-msg_ok "Detected Kasm Workspaces version $KASM_VERSION"
 
 msg_warn "WARNING: This script will run an external installer from a third-party source (https://www.kasmweb.com/)."
 msg_warn "The following code is NOT maintained or audited by our repository."
 msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
-msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  install.sh inside tar.gz $KASM_URL"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  install.sh inside tar.gz https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
 echo
 read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
 if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
@@ -38,7 +27,7 @@ if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
 fi
 
 msg_info "Installing Kasm Workspaces"
-curl -fsSL -o "/opt/kasm_release_${KASM_VERSION}.tar.gz" "$KASM_URL"
+curl -fsSL -o "/opt/kasm_release_${KASM_VERSION}.tar.gz" "https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
 cd /opt
 tar -xf "kasm_release_${KASM_VERSION}.tar.gz"
 chmod +x /opt/kasm_release/install.sh
@@ -50,10 +39,10 @@ awk '
   in_token && /^-+$/ {dash_count++}
   in_token && dash_count==2 {exit}
 ' ~/kasm-install.output >~/kasm.creds
-rm -f /opt/kasm_release_${KASM_VERSION}.tar.gz
-rm -f ~/kasm-install.output
 msg_ok "Installed Kasm Workspaces"
 
 motd_ssh
 customize
+rm -f /opt/kasm_release_${KASM_VERSION}.tar.gz
+rm -f ~/kasm-install.output
 cleanup_lxc

install/librenms-install.sh

@@ -113,19 +113,11 @@ mkdir -p /etc/bash_completion.d/
 cp /opt/librenms/misc/lnms-completion.bash /etc/bash_completion.d/
 cp /opt/librenms/snmpd.conf.example /etc/snmp/snmpd.conf
 
-APP_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-APP_USER="admin"
-{
-  echo "LibreNMS Credentials"
-  echo "Username: ${APP_USER}"
-  echo "Password: ${APP_PASSWORD}"
-} >>~/librenms.creds
-
 $STD su - librenms -s /bin/bash -c "cd /opt/librenms && COMPOSER_ALLOW_SUPERUSER=1 composer install --no-dev"
 $STD su - librenms -s /bin/bash -c "cd /opt/librenms && php8.4 artisan migrate --force"
 $STD su - librenms -s /bin/bash -c "cd /opt/librenms && php8.4 artisan key:generate --force"
 $STD su - librenms -s /bin/bash -c "cd /opt/librenms && lnms db:seed --force"
-$STD su - librenms -s /bin/bash -c "cd /opt/librenms && lnms user:add -p ${APP_PASSWORD} ${APP_USER} --role=admin"
+$STD su - librenms -s /bin/bash -c "cd /opt/librenms && lnms user:add -p admin -r admin admin"
 
 RANDOM_STRING=$(openssl rand -base64 16 | tr -dc 'a-zA-Z0-9')
 sed -i "s/RANDOMSTRINGHERE/$RANDOM_STRING/g" /etc/snmp/snmpd.conf

install/mealie-install.sh

@@ -25,14 +25,27 @@ msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.12" setup_uv
 POSTGRES_VERSION="16" setup_postgresql
-NODE_MODULE="yarn" NODE_VERSION="24" setup_nodejs
+NODE_MODULE="yarn" NODE_VERSION="20" setup_nodejs
-fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
-PG_DB_NAME="mealie_db" PG_DB_USER="mealie_user" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
 
-msg_info "Installing Python Dependencies with uv"
+fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
-cd /opt/mealie
+
-$STD uv sync --frozen --extra pgsql
+msg_info "Setup Database"
-msg_ok "Installed Python Dependencies"
+DB_NAME=mealie_db
+DB_USER=mealie__user
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
+{
+  echo "Mealie-Credentials"
+  echo "Mealie Database User: $DB_USER"
+  echo "Mealie Database Password: $DB_PASS"
+  echo "Mealie Database Name: $DB_NAME"
+} >>~/mealie.creds
+msg_ok "Set up Database"
 
 msg_info "Building Frontend"
 export NUXT_TELEMETRY_DISABLED=1
@@ -41,35 +54,33 @@ $STD yarn install --prefer-offline --frozen-lockfile --non-interactive --product
 $STD yarn generate
 msg_ok "Built Frontend"
 
-msg_info "Copying Built Frontend"
+msg_info "Copying Built Frontend into Backend Package"
-mkdir -p /opt/mealie/mealie/frontend
+cp -r /opt/mealie/frontend/dist /opt/mealie/mealie/frontend
-cp -r /opt/mealie/frontend/dist/* /opt/mealie/mealie/frontend/
 msg_ok "Copied Frontend"
 
-msg_info "Downloading NLTK Data"
+msg_info "Preparing Backend (Poetry)"
-mkdir -p /nltk_data/
+$STD uv venv /opt/mealie/.venv
+$STD /opt/mealie/.venv/bin/python -m ensurepip --upgrade
+$STD /opt/mealie/.venv/bin/python -m pip install --upgrade pip
+$STD /opt/mealie/.venv/bin/pip install uv
 cd /opt/mealie
-$STD uv run python -m nltk.downloader -d /nltk_data averaged_perceptron_tagger_eng
+$STD /opt/mealie/.venv/bin/uv pip install poetry==2.0.1
-msg_ok "Downloaded NLTK Data"
+$STD /opt/mealie/.venv/bin/poetry self add "poetry-plugin-export>=1.9"
+msg_ok "Prepared Poetry"
 
 msg_info "Writing Environment File"
-SECRET=$(openssl rand -hex 32)
-mkdir -p /run/secrets
 cat <<EOF >/opt/mealie/mealie.env
-MEALIE_HOME=/opt/mealie
+HOST=0.0.0.0
-NLTK_DATA=/nltk_data
+PORT=9000
-SECRET=${SECRET}
-
 DB_ENGINE=postgres
 POSTGRES_SERVER=localhost
 POSTGRES_PORT=5432
-POSTGRES_USER=${PG_DB_USER}
+POSTGRES_USER=${DB_USER}
-POSTGRES_PASSWORD=${PG_DB_PASS}
+POSTGRES_PASSWORD=${DB_PASS}
-POSTGRES_DB=${PG_DB_NAME}
+POSTGRES_DB=${DB_NAME}
-
+NLTK_DATA=/nltk_data
 PRODUCTION=true
-HOST=0.0.0.0
+STATIC_FILES=/opt/mealie/frontend/dist
-PORT=9000
 EOF
 msg_ok "Wrote Environment File"
 
@@ -79,32 +90,60 @@ cat <<'EOF' >/opt/mealie/start.sh
 set -a
 source /opt/mealie/mealie.env
 set +a
-exec uv run mealie
+exec /opt/mealie/.venv/bin/mealie
 EOF
 chmod +x /opt/mealie/start.sh
 msg_ok "Created Start Script"
 
+msg_info "Building Mealie Backend Wheel"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/poetry build --output dist
+MEALIE_VERSION=$(/opt/mealie/.venv/bin/poetry version --short)
+$STD /opt/mealie/.venv/bin/poetry export --only=main --extras=pgsql --output=dist/requirements.txt
+echo "mealie[pgsql]==$MEALIE_VERSION \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.whl | tail -n1 | tr -d '\n' >>dist/requirements.txt
+echo " \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.tar.gz | tail -n1 >>dist/requirements.txt
+msg_ok "Built Wheel + Requirements"
+
+msg_info "Installing Mealie via uv"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/uv pip install --require-hashes -r /opt/mealie/dist/requirements.txt --find-links dist
+msg_ok "Installed Mealie"
+
+msg_info "Downloading NLTK Data"
+mkdir -p /nltk_data/
+$STD /opt/mealie/.venv/bin/python -m nltk.downloader -d /nltk_data averaged_perceptron_tagger_eng
+msg_ok "Downloaded NLTK Data"
+
+msg_info "Set Symbolic Links for Mealie"
+ln -sf /opt/mealie/.venv/bin/mealie /usr/local/bin/mealie
+ln -sf /opt/mealie/.venv/bin/poetry /usr/local/bin/poetry
+msg_ok "Set Symbolic Links"
+
 msg_info "Creating Systemd Service"
-cat <<'EOF' >/etc/systemd/system/mealie.service
+cat <<EOF >/etc/systemd/system/mealie.service
 [Unit]
-Description=Mealie Recipe Manager
+Description=Mealie Backend Server
 After=network.target postgresql.service
-Wants=postgresql.service
 
 [Service]
-Type=simple
 User=root
 WorkingDirectory=/opt/mealie
 ExecStart=/opt/mealie/start.sh
-Restart=on-failure
+Restart=always
-RestartSec=5
 
 [Install]
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now mealie
-msg_ok "Created and Started Service"
+msg_ok "Created Service"
 
 motd_ssh
 customize
-cleanup_lxc
+
+msg_info "Cleaning up"
+$STD apt -y autoremove
+$STD apt -y autoclean
+$STD apt -y clean
+msg_ok "Cleaned"

install/metabase-install.sh

@@ -1,59 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.metabase.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-JAVA_VERSION="21" setup_java
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="metabase_db" PG_DB_USER="metabase" setup_postgresql_db
-
-msg_info "Setting up Metabase"
-mkdir -p /opt/metabase
-RELEASE=$(get_latest_github_release "metabase/metabase")
-curl -fsSL "https://downloads.metabase.com/v${RELEASE}.x/metabase.jar" -o /opt/metabase/metabase.jar
-cd /opt/metabase
-
-cat <<EOF >/opt/metabase/.env
-MB_DB_TYPE=postgres
-MB_DB_DBNAME=$PG_DB_NAME
-MB_DB_PORT=5432
-MB_DB_USER=$PG_DB_USER
-MB_DB_PASS=$PG_DB_PASS
-MB_DB_HOST=localhost
-EOF
-echo $RELEASE >~/.metabase
-msg_ok "Setup Metabase"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/metabase.service
-[Unit]
-Description=Metabase Service
-After=network.target
-
-[Service]
-EnvironmentFile=/opt/metabase/.env
-WorkingDirectory=/opt/metabase
-ExecStart=/usr/bin/java --add-opens java.base/java.nio=ALL-UNNAMED -jar metabase.jar
-Restart=always
-SuccessExitStatus=143
-TimeoutStopSec=120
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now metabase
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/netvisor-install.sh

@@ -15,9 +15,7 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt install -y \
-  build-essential \
+  build-essential
-  libssl-dev \
-  pkg-config
 msg_ok "Installed Dependencies"
 
 PG_VERSION=17 setup_postgresql
@@ -31,7 +29,7 @@ RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
 
 msg_info "Creating frontend UI"
 export PUBLIC_SERVER_HOSTNAME=default
-export PUBLIC_SERVER_PORT=""
+export PUBLIC_SERVER_PORT=60072
 cd /opt/netvisor/ui
 $STD npm ci --no-fund --no-audit
 $STD npm run build
@@ -49,18 +47,20 @@ cp ./target/release/daemon /usr/bin/netvisor-daemon
 msg_ok "Built Netvisor-daemon"
 
 msg_info "Configuring server & daemon for first-run"
-LOCAL_IP="$(hostname -I | awk '{print $1}')"
 cat <<EOF >/opt/netvisor/.env
+### - UI
+PUBLIC_SERVER_HOSTNAME=default
+PUBLIC_SERVER_PORT=60072
+
 ### - SERVER
 NETVISOR_DATABASE_URL=postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME
 NETVISOR_WEB_EXTERNAL_PATH="/opt/netvisor/ui/build"
-NETVISOR_PUBLIC_URL=http://${LOCAL_IP}:60072
 NETVISOR_SERVER_PORT=60072
 NETVISOR_LOG_LEVEL=info
 NETVISOR_INTEGRATED_DAEMON_URL=http://127.0.0.1:60073
 ## - uncomment to disable signups
 # NETVISOR_DISABLE_REGISTRATION=true
-## - uncomment when using TLS
+## - uncomment when behind reverse proxy
 # NETVISOR_USE_SECURE_SESSION_COOKIES=true
 
 ### - OIDC (optional)
@@ -72,14 +72,8 @@ NETVISOR_INTEGRATED_DAEMON_URL=http://127.0.0.1:60073
 ## - Callback URL for reference
 # http://your-netvisor-domain:60072/api/auth/oidc/callback
 
-### - SMTP (password reset and notifications - optional)
-# NETVISOR_SMTP_RELAY=smtp.gmail.com:587
-# NETVISOR_SMTP_USERNAME=your-email@gmail.com
-# NETVISOR_SMTP_PASSWORD=your-app-password
-# NETVISOR_SMTP_EMAIL=netvisor@yourdomain.tld
-
 ### - INTEGRATED DAEMON
-NETVISOR_SERVER_URL=http://127.0.0.1:60072
+NETVISOR_SERVER_TARGET=127.0.0.1
 NETVISOR_BIND_ADDRESS=0.0.0.0
 NETVISOR_NAME="netvisor-daemon"
 NETVISOR_HEARTBEAT_INTERVAL=30
@@ -116,7 +110,7 @@ After=network.target netvisor-server.service
 [Service]
 Type=simple
 EnvironmentFile=/opt/netvisor/.env
-ExecStart=/usr/bin/netvisor-daemon --server-url http://127.0.0.1:60072 --network-id ${NETWORK_ID} --daemon-api-key ${API_KEY}
+ExecStart=/usr/bin/netvisor-daemon --server-target http://127.0.0.1 --server-port 60072 --network-id ${NETWORK_ID} --daemon-api-key ${API_KEY}
 Restart=always
 RestartSec=10
 StandardOutput=journal

install/nginxproxymanager-install.sh

@@ -54,12 +54,11 @@ msg_ok "Installed Openresty"
 
 NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
 
-# RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
+RELEASE=$(curl -fsSL https://api.github.com/repos/NginxProxyManager/nginx-proxy-manager/releases/latest |
-#  grep "tag_name" |
+  grep "tag_name" |
-#  awk '{print substr($2, 3, length($2)-4) }')
+  awk '{print substr($2, 3, length($2)-4) }')
-RELEASE="2.13.4"
 
-fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager" "tarball" "v2.13.4"
+fetch_and_deploy_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager"
 
 msg_info "Setting up Environment"
 ln -sf /usr/bin/python3 /usr/bin/python

install/omada-install.sh

@@ -17,15 +17,24 @@ msg_info "Installing Dependencies"
 $STD apt install -y jsvc
 msg_ok "Installed Dependencies"
 
-JAVA_VERSION="21" setup_java
+msg_info "Checking CPU Features"
-
 if lscpu | grep -q 'avx'; then
+  MONGODB_VERSION="8.0"
+  msg_ok "AVX detected: Using MongoDB 8.0"
   MONGO_VERSION="8.0" setup_mongodb
 else
-  msg_error "No AVX detected (CPU-Flag)! We have discontinued support for this. You are welcome to try it manually with a Debian LXC, but due to the many issues with Omada, we currently only support AVX CPUs."
+  MONGO_VERSION="4.4" setup_mongodb
-  exit 10
 fi
 
+msg_info "Installing Azul Zulu Java"
+curl -fsSL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xB1998361219BD9C9" -o "/etc/apt/trusted.gpg.d/zulu-repo.asc"
+curl -fsSL "https://cdn.azul.com/zulu/bin/zulu-repo_1.0.0-3_all.deb" -o zulu-repo.deb
+$STD dpkg -i zulu-repo.deb
+$STD apt update
+$STD apt -y install zulu21-jre-headless
+msg_ok "Installed Azul Zulu Java"
+
+
 if ! dpkg -l | grep -q 'libssl1.1'; then
   msg_info "Installing libssl (if needed)"
   curl -fsSL "https://security.debian.org/debian-security/pool/updates/main/o/openssl/libssl1.1_1.1.1w-0+deb11u4_amd64.deb" -o "/tmp/libssl.deb"
@@ -41,9 +50,14 @@ OMADA_URL=$(curl -fsSL "https://support.omadanetworks.com/en/download/software/o
 OMADA_PKG=$(basename "$OMADA_URL")
 curl -fsSL "$OMADA_URL" -o "$OMADA_PKG"
 $STD dpkg -i "$OMADA_PKG"
-rm -rf "$OMADA_PKG"
 msg_ok "Installed Omada Controller"
 
 motd_ssh
 customize
-cleanup_lxc
+
+msg_info "Cleaning up"
+rm -rf "$OMADA_PKG" zulu-repo.deb
+$STD apt -y autoremove
+$STD apt -y autoclean
+$STD apt -y clean
+msg_ok "Cleaned"

install/paperless-ngx-install.sh

@@ -44,36 +44,46 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 PG_VERSION="16" setup_postgresql
-PG_DB_NAME="paperlessdb" PG_DB_USER="paperless" setup_postgresql_db
 PYTHON_VERSION="3.13" setup_uv
 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
 
+msg_info "Setting up PostgreSQL database"
+DB_NAME=paperlessdb
+DB_USER=paperless
+DB_PASS="$(openssl rand -base64 18 | cut -c1-13)"
+SECRET_KEY="$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)"
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+{
+  echo "Paperless-ngx-Credentials"
+  echo "Paperless-ngx Database Name: $DB_NAME"
+  echo "Paperless-ngx Database User: $DB_USER"
+  echo "Paperless-ngx Database Password: $DB_PASS"
+  echo "Paperless-ngx Secret Key: $SECRET_KEY\n"
+  echo "Paperless-ngx WebUI User: admin"
+  echo "Paperless-ngx WebUI Password: $DB_PASS"
+} >>~/paperless-ngx.creds
+msg_ok "Setup PostgreSQL database"
+
 msg_info "Setup Paperless-ngx"
 cd /opt/paperless
-rm -rf /opt/paperless/docker
 $STD uv sync --all-extras
 curl -fsSL "https://raw.githubusercontent.com/paperless-ngx/paperless-ngx/main/paperless.conf.example" -o /opt/paperless/paperless.conf
-mkdir -p /opt/paperless_data/{consume,data,media,trash}
+mkdir -p {consume,data,media,static}
-mkdir -p /opt/paperless/static
-SECRET_KEY="$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)"
-{
-  echo ""
-  echo "Paperless-ngx Secret Key: $SECRET_KEY"
-  echo "Paperless-ngx WebUI User: admin"
-  echo "Paperless-ngx WebUI Password: $PG_DB_PASS"
-} >>~/paperless-ngx.creds
 sed -i \
   -e 's|#PAPERLESS_REDIS=redis://localhost:6379|PAPERLESS_REDIS=redis://localhost:6379|' \
-  -e "s|#PAPERLESS_CONSUMPTION_DIR=../consume|PAPERLESS_CONSUMPTION_DIR=/opt/paperless_data/consume|" \
+  -e "s|#PAPERLESS_CONSUMPTION_DIR=../consume|PAPERLESS_CONSUMPTION_DIR=/opt/paperless/consume|" \
-  -e "s|#PAPERLESS_DATA_DIR=../data|PAPERLESS_DATA_DIR=/opt/paperless_data/data|" \
+  -e "s|#PAPERLESS_DATA_DIR=../data|PAPERLESS_DATA_DIR=/opt/paperless/data|" \
-  -e "s|#PAPERLESS_MEDIA_ROOT=../media|PAPERLESS_MEDIA_ROOT=/opt/paperless_data/media|" \
+  -e "s|#PAPERLESS_MEDIA_ROOT=../media|PAPERLESS_MEDIA_ROOT=/opt/paperless/media|" \
-  -e "s|#PAPERLESS_EMPTY_TRASH_DIR=|PAPERLESS_EMPTY_TRASH_DIR=/opt/paperless_data/trash|" \
   -e "s|#PAPERLESS_STATICDIR=../static|PAPERLESS_STATICDIR=/opt/paperless/static|" \
   -e 's|#PAPERLESS_DBHOST=localhost|PAPERLESS_DBHOST=localhost|' \
   -e 's|#PAPERLESS_DBPORT=5432|PAPERLESS_DBPORT=5432|' \
-  -e "s|#PAPERLESS_DBNAME=paperless|PAPERLESS_DBNAME=$PG_DB_NAME|" \
+  -e "s|#PAPERLESS_DBNAME=paperless|PAPERLESS_DBNAME=$DB_NAME|" \
-  -e "s|#PAPERLESS_DBUSER=paperless|PAPERLESS_DBUSER=$PG_DB_USER|" \
+  -e "s|#PAPERLESS_DBUSER=paperless|PAPERLESS_DBUSER=$DB_USER|" \
-  -e "s|#PAPERLESS_DBPASS=paperless|PAPERLESS_DBPASS=$PG_DB_PASS|" \
+  -e "s|#PAPERLESS_DBPASS=paperless|PAPERLESS_DBPASS=$DB_PASS|" \
   -e "s|#PAPERLESS_SECRET_KEY=change-me|PAPERLESS_SECRET_KEY=$SECRET_KEY|" \
   /opt/paperless/paperless.conf
 cd /opt/paperless/src
@@ -87,7 +97,7 @@ msg_info "Setting up admin Paperless-ngx User & Password"
 cat <<EOF | uv run -- python /opt/paperless/src/manage.py shell
 from django.contrib.auth import get_user_model
 UserModel = get_user_model()
-user = UserModel.objects.create_user('admin', password='$PG_DB_PASS')
+user = UserModel.objects.create_user('admin', password='$DB_PASS')
 user.is_superuser = True
 user.is_staff = True
 user.save()
@@ -98,8 +108,8 @@ msg_info "Installing Natural Language Toolkit (Patience)"
 cd /opt/paperless
 $STD uv run python -m nltk.downloader -d /usr/share/nltk_data snowball_data
 $STD uv run python -m nltk.downloader -d /usr/share/nltk_data stopwords
-$STD uv run python -m nltk.downloader -d /usr/share/nltk_data punkt_tab ||
+$STD uv run python -m nltk.downloader -d /usr/share/nltk_data punkt_tab || \
-  $STD uv run python -m nltk.downloader -d /usr/share/nltk_data punkt
+$STD uv run python -m nltk.downloader -d /usr/share/nltk_data punkt
 for policy_file in /etc/ImageMagick-6/policy.xml /etc/ImageMagick-7/policy.xml; do
   if [[ -f "$policy_file" ]]; then
     sed -i -e 's/rights="none" pattern="PDF"/rights="read|write" pattern="PDF"/' "$policy_file"
@@ -176,4 +186,11 @@ fi
 
 motd_ssh
 customize
-cleanup_lxc
+
+msg_info "Cleaning up"
+rm -rf /opt/paperless/docker
+rm -rf /tmp/ghostscript*
+$STD apt -y autoremove
+$STD apt -y autoclean
+$STD apt -y clean
+msg_ok "Cleaned"

install/passbolt-install.sh

@@ -1,51 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.passbolt.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing dependencies"
-$STD apt install -y \
-  apt-transport-https \
-  python3-certbot-nginx \
-  debconf-utils
-msg_ok "Installed dependencies"
-
-setup_mariadb
-MARIADB_DB_NAME="passboltdb" MARIADB_DB_USER="passbolt" MARIADB_DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)" setup_mariadb_db
-setup_deb822_repo \
-  "passbolt" \
-  "https://keys.openpgp.org/pks/lookup?op=get&options=mr&search=0x3D1A0346C8E1802F774AEF21DE8B853FC155581D" \
-  "https://download.passbolt.com/ce/debian" \
-  "buster" \
-  "stable"
-create_self_signed_cert "passbolt"
-
-msg_info "Setting up Passbolt (Patience)"
-export DEBIAN_FRONTEND=noninteractive
-IP_ADDR=$(hostname -I | awk '{print $1}')
-echo passbolt-ce-server passbolt/mysql-configuration boolean true | debconf-set-selections
-echo passbolt-ce-server passbolt/mysql-passbolt-username string $MARIADB_DB_USER | debconf-set-selections
-echo passbolt-ce-server passbolt/mysql-passbolt-password password $MARIADB_DB_PASS | debconf-set-selections
-echo passbolt-ce-server passbolt/mysql-passbolt-password-repeat password $MARIADB_DB_PASS | debconf-set-selections
-echo passbolt-ce-server passbolt/mysql-passbolt-dbname string $MARIADB_DB_NAME | debconf-set-selections
-echo passbolt-ce-server passbolt/nginx-configuration boolean true | debconf-set-selections
-echo passbolt-ce-server passbolt/nginx-configuration-three-choices select manual | debconf-set-selections
-echo passbolt-ce-server passbolt/nginx-domain string $IP_ADDR | debconf-set-selections
-echo passbolt-ce-server passbolt/nginx-certificate-file string /etc/ssl/passbolt/passbolt.crt | debconf-set-selections
-echo passbolt-ce-server passbolt/nginx-certificate-key-file string /etc/ssl/passbolt/passbolt.key | debconf-set-selections
-$STD apt install -y --no-install-recommends passbolt-ce-server
-msg_ok "Setup Passbolt"
-
-motd_ssh
-customize
-cleanup_lxc

install/zabbix-install.sh

@@ -108,7 +108,7 @@ else
   AGENT_SERVICE="zabbix-agent"
 fi
 
-systemctl restart zabbix-server apache2
+systemctl restart zabbix-server
 systemctl enable -q --now zabbix-server $AGENT_SERVICE apache2
 msg_ok "Started Services"
 

misc/alpine-install.func

@@ -13,16 +13,10 @@ load_functions
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "none" ] || [ "$DISABLEIPV6" == "yes" ]; then
+  if [ "$DISABLEIPV6" == "yes" ]; then
-    msg_info "Disabling IPv6"
     $STD sysctl -w net.ipv6.conf.all.disable_ipv6=1
-    $STD sysctl -w net.ipv6.conf.default.disable_ipv6=1
-    $STD sysctl -w net.ipv6.conf.lo.disable_ipv6=1
     echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
-    echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
-    echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.conf
     $STD rc-update add sysctl default
-    msg_ok "Disabled IPv6"
   fi
 }
 

misc/api.func

@@ -30,6 +30,7 @@ post_to_api() {
     "ram_size": $RAM_SIZE,
     "os_type": "$var_os",
     "os_version": "$var_version",
+    "disableip6": "",
     "nsapp": "$NSAPP",
     "method": "$METHOD",
     "pve_version": "$pve_version",
@@ -80,6 +81,7 @@ post_to_api_vm() {
     "ram_size": $RAM_SIZE,
     "os_type": "$var_os",
     "os_version": "$var_version",
+    "disableip6": "",
     "nsapp": "$NSAPP",
     "method": "$METHOD",
     "pve_version": "$pve_version",

misc/build.func

@@ -65,7 +65,7 @@ root_check() {
 }
 
 # This function checks the version of Proxmox Virtual Environment (PVE) and exits if the version is not supported.
-# Supported: Proxmox VE 8.0.x – 8.9.x, 9.0 and 9.1
+# Supported: Proxmox VE 8.0.x – 8.9.x and 9.0 (NOT 9.1+)
 pve_check() {
   local PVE_VER
   PVE_VER="$(pveversion | awk -F'/' '{print $2}' | awk -F'-' '{print $1}')"
@@ -81,12 +81,12 @@ pve_check() {
     return 0
   fi
 
-  # Check for Proxmox VE 9.x: allow 9.0 and 9.1
+  # Check for Proxmox VE 9.x: allow ONLY 9.0
   if [[ "$PVE_VER" =~ ^9\.([0-9]+) ]]; then
     local MINOR="${BASH_REMATCH[1]}"
-    if ((MINOR < 0 || MINOR > 1)); then
+    if ((MINOR != 0)); then
-      msg_error "This version of Proxmox VE is not supported."
+      msg_error "This version of Proxmox VE is not yet supported."
-      msg_error "Supported: Proxmox VE version 9.0 – 9.1"
+      msg_error "Supported: Proxmox VE version 9.0"
       exit 1
     fi
     return 0
@@ -94,7 +94,7 @@ pve_check() {
 
   # All other unsupported versions
   msg_error "This version of Proxmox VE is not supported."
-  msg_error "Supported versions: Proxmox VE 8.0 – 8.x or 9.0 – 9.1"
+  msg_error "Supported versions: Proxmox VE 8.0 – 8.x or 9.0"
   exit 1
 }
 

misc/core.func

@@ -393,7 +393,7 @@ cleanup_lxc() {
   # Python pip
   if command -v pip &>/dev/null; then $STD pip cache purge || true; fi
   # Python uv
-  if command -v uv &>/dev/null; then $STD uv cache clean || true; fi
+  if command -v uv &>/dev/null; then $STD uv cache clear || true; fi
   # Node.js npm
   if command -v npm &>/dev/null; then $STD npm cache clean --force || true; fi
   # Node.js yarn

misc/create_lxc.sh

@@ -200,6 +200,7 @@ if qm status "$CTID" &>/dev/null || pct status "$CTID" &>/dev/null; then
 fi
 
 # This checks for the presence of valid Container Storage and Template Storage locations
+msg_info "Validating storage"
 if ! check_storage_support "rootdir"; then
   msg_error "No valid storage found for 'rootdir' [Container]"
   exit 1
@@ -209,6 +210,7 @@ if ! check_storage_support "vztmpl"; then
   exit 1
 fi
 
+#msg_info "Checking template storage"
 while true; do
   if select_storage template; then
     TEMPLATE_STORAGE="$STORAGE_RESULT"

misc/install.func

@@ -15,13 +15,9 @@ load_functions
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "none" ] || [ "$DISABLEIPV6" == "yes" ]; then
+  if [ "$DISABLEIPV6" == "yes" ]; then
-    msg_info "Disabling IPv6"
+    echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
-    $STD echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
-    $STD echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
-    $STD echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.conf
     $STD sysctl -p
-    msg_ok "Disabled IPv6"
   fi
 }
 

misc/tools.func

@@ -3117,8 +3117,7 @@ function setup_mariadb_db() {
 
   $STD mariadb -u root -e "FLUSH PRIVILEGES;"
 
-  local app_name="${APPLICATION,,}"
+  local CREDS_FILE="${MARIADB_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
-  local CREDS_FILE="${MARIADB_DB_CREDS_FILE:-${HOME}/${app_name}.creds}"
   {
     echo "MariaDB Credentials"
     echo "Database: $MARIADB_DB_NAME"
@@ -3806,73 +3805,10 @@ function setup_postgresql() {
   local SUITE
   case "$DISTRO_CODENAME" in
   trixie | forky | sid)
-    # For Debian Testing/Unstable, try PostgreSQL repo first, fallback to native packages
     if verify_repo_available "https://apt.postgresql.org/pub/repos/apt" "trixie-pgdg"; then
       SUITE="trixie-pgdg"
-
-      setup_deb822_repo \
-        "pgdg" \
-        "https://www.postgresql.org/media/keys/ACCC4CF8.asc" \
-        "https://apt.postgresql.org/pub/repos/apt" \
-        "$SUITE" \
-        "main"
-
-      if ! $STD apt update; then
-        msg_warn "Failed to update PostgreSQL repository, falling back to native packages"
-        SUITE=""
-      fi
     else
-      SUITE=""
+      SUITE="bookworm-pgdg"
-    fi
-
-    # If no repo or packages not installable, use native Debian packages
-    if [[ -z "$SUITE" ]] || ! apt-cache show "postgresql-${PG_VERSION}" 2>/dev/null | grep -q "Version:"; then
-      msg_info "Using native Debian packages for $DISTRO_CODENAME"
-
-      # Install ssl-cert dependency if available
-      if apt-cache search "^ssl-cert$" 2>/dev/null | grep -q .; then
-        $STD apt install -y ssl-cert 2>/dev/null || true
-      fi
-
-      if ! $STD apt install -y postgresql postgresql-client 2>/dev/null; then
-        msg_error "Failed to install native PostgreSQL packages"
-        return 1
-      fi
-
-      if ! command -v psql >/dev/null 2>&1; then
-        msg_error "PostgreSQL installed but psql command not found"
-        return 1
-      fi
-
-      # Restore database backup if we upgraded from previous version
-      if [[ -n "$CURRENT_PG_VERSION" ]]; then
-        msg_info "Restoring PostgreSQL databases from backup..."
-        $STD runuser -u postgres -- psql </var/lib/postgresql/backup_$(date +%F)_v${CURRENT_PG_VERSION}.sql 2>/dev/null || {
-          msg_warn "Failed to restore database backup - this may be expected for major version upgrades"
-        }
-      fi
-
-      $STD systemctl enable --now postgresql 2>/dev/null || true
-
-      # Get actual installed version
-      INSTALLED_VERSION="$(psql -V 2>/dev/null | awk '{print $3}' | cut -d. -f1)"
-
-      # Add PostgreSQL binaries to PATH
-      if ! grep -q '/usr/lib/postgresql' /etc/environment 2>/dev/null; then
-        echo 'PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/postgresql/'"${INSTALLED_VERSION}"'/bin"' >/etc/environment
-      fi
-
-      cache_installed_version "postgresql" "$INSTALLED_VERSION"
-      msg_ok "Setup PostgreSQL $INSTALLED_VERSION (native)"
-
-      # Install optional modules if specified
-      if [[ -n "$PG_MODULES" ]]; then
-        IFS=',' read -ra MODULES <<<"$PG_MODULES"
-        for module in "${MODULES[@]}"; do
-          $STD apt install -y "postgresql-${INSTALLED_VERSION}-${module}" 2>/dev/null || true
-        done
-      fi
-      return 0
     fi
     ;;
   *)
@@ -4036,8 +3972,7 @@ function setup_postgresql_db() {
   fi
 
   # Save credentials
-  local app_name="${APPLICATION,,}"
+  local CREDS_FILE="${PG_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
-  local CREDS_FILE="${PG_DB_CREDS_FILE:-${HOME}/${app_name}.creds}"
   {
     echo "PostgreSQL Credentials"
     echo "Database: $PG_DB_NAME"

tools/addon/netdata.sh

@@ -42,7 +42,7 @@ function msg_ok() {
 function msg_error() { echo -e "${RD}✗ $1${CL}"; }
 
 # This function checks the version of Proxmox Virtual Environment (PVE) and exits if the version is not supported.
-# Supported: Proxmox VE 8.0.x – 8.9.x and 9.0–9.1.x
+# Supported: Proxmox VE 8.0.x – 8.9.x and 9.0 (NOT 9.1+)
 pve_check() {
   local PVE_VER
   PVE_VER="$(pveversion | awk -F'/' '{print $2}' | awk -F'-' '{print $1}')"
@@ -58,12 +58,12 @@ pve_check() {
     return 0
   fi
 
-  # Check for Proxmox VE 9.x: allow 9.0–9.1.x
+  # Check for Proxmox VE 9.x: allow ONLY 9.0
   if [[ "$PVE_VER" =~ ^9\.([0-9]+) ]]; then
     local MINOR="${BASH_REMATCH[1]}"
-    if ((MINOR < 0 || MINOR > 1)); then
+    if ((MINOR != 0)); then
       msg_error "This version of Proxmox VE is not yet supported."
-      msg_error "Supported: Proxmox VE version 9.0–9.1.x"
+      msg_error "Supported: Proxmox VE version 9.0"
       exit 1
     fi
     return 0
@@ -71,7 +71,7 @@ pve_check() {
 
   # All other unsupported versions
   msg_error "This version of Proxmox VE is not supported."
-  msg_error "Supported versions: Proxmox VE 8.0 – 8.9 or 9.0–9.1.x"
+  msg_error "Supported versions: Proxmox VE 8.0 – 8.x or 9.0"
   exit 1
 }
 

tools/pve/post-pve-install.sh

@@ -88,14 +88,14 @@ main() {
     fi
     start_routines_8
   elif [[ "$PVE_MAJOR" == "9" ]]; then
-    if ((PVE_MINOR < 0 || PVE_MINOR > 1)); then
+    if ((PVE_MINOR != 0)); then
-      msg_error "Only Proxmox 9.0-9.1.x is currently supported"
+      msg_error "Only Proxmox 9.0 is currently supported"
       exit 1
     fi
     start_routines_9
   else
     msg_error "Unsupported Proxmox VE major version: $PVE_MAJOR"
-    echo -e "Supported: 8.0–8.9.x and 9.0–9.1.x"
+    echo -e "Supported: 8.0–8.9.x and 9.0"
     exit 1
   fi
 }