Update CHANGELOG.md (#9043)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,17 +10,57 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-11-11
+
+## 2025-11-10
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Plex: extend checking for deb822 source [@Matt17000](https://github.com/Matt17000) ([#9036](https://github.com/community-scripts/ProxmoxVE/pull/9036))
+
+  - #### ✨ New Features
+
+    - tools.func: add helper functions for MariaDB and PostgreSQL setup [@MickLesk](https://github.com/MickLesk) ([#9026](https://github.com/community-scripts/ProxmoxVE/pull/9026))
+    - core: update message for no available updates scenario (if pinned) [@MickLesk](https://github.com/MickLesk) ([#9021](https://github.com/community-scripts/ProxmoxVE/pull/9021))
+    - Migrate Open WebUI to uv-based installation [@MickLesk](https://github.com/MickLesk) ([#9019](https://github.com/community-scripts/ProxmoxVE/pull/9019))
+
+  - #### 🔧 Refactor
+
+    - Refactor: phpIPAM [@MickLesk](https://github.com/MickLesk) ([#9027](https://github.com/community-scripts/ProxmoxVE/pull/9027))
+
+## 2025-11-09
+
+### 🚀 Updated Scripts
+
+  - core: improve log cleaning [@MickLesk](https://github.com/MickLesk) ([#8999](https://github.com/community-scripts/ProxmoxVE/pull/8999))
+
+  - #### 🐞 Bug Fixes
+
+    - Add wkhtmltopdf to Odoo installation dependencies [@akileos](https://github.com/akileos) ([#9010](https://github.com/community-scripts/ProxmoxVE/pull/9010))
+    - fix(jotty): Comments removed from variables, as they are interpreted. [@schneider-de-com](https://github.com/schneider-de-com) ([#9002](https://github.com/community-scripts/ProxmoxVE/pull/9002))
+    - fix(n8n): Add python3-setuptools dependency for Debian 13 [@chrikodo](https://github.com/chrikodo) ([#9007](https://github.com/community-scripts/ProxmoxVE/pull/9007))
+    - Paperless-ngx: hotfix config path [@vhsdream](https://github.com/vhsdream) ([#9003](https://github.com/community-scripts/ProxmoxVE/pull/9003))
+    - Paperless-NGX: Move config backup outside of app folder [@vhsdream](https://github.com/vhsdream) ([#8996](https://github.com/community-scripts/ProxmoxVE/pull/8996))
+
 ## 2025-11-08
 
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
+    - Technitium DNS: Fix update [@tremor021](https://github.com/tremor021) ([#8980](https://github.com/community-scripts/ProxmoxVE/pull/8980))
     - MediaManager: add LOG_FILE to start.sh script; fix BASE_PATH and PUBLIC_API_URL [@vhsdream](https://github.com/vhsdream) ([#8981](https://github.com/community-scripts/ProxmoxVE/pull/8981))
     - Firefly: Fix missing command in update script [@tremor021](https://github.com/tremor021) ([#8972](https://github.com/community-scripts/ProxmoxVE/pull/8972))
     - MongoDB: Remove unused message [@tremor021](https://github.com/tremor021) ([#8969](https://github.com/community-scripts/ProxmoxVE/pull/8969))
     - Set TZ=Etc/UTC in Ghostfolio installation script [@LuloDev](https://github.com/LuloDev) ([#8961](https://github.com/community-scripts/ProxmoxVE/pull/8961))
 
+  - #### 🔧 Refactor
+
+    - paperless: refactor - remove backup after update and enable clean install [@MickLesk](https://github.com/MickLesk) ([#8988](https://github.com/community-scripts/ProxmoxVE/pull/8988))
+    - Refactor setup_deb822_repo for optional architectures [@MickLesk](https://github.com/MickLesk) ([#8983](https://github.com/community-scripts/ProxmoxVE/pull/8983))
+
 ## 2025-11-07
 
 ### 🆕 New Scripts

ct/openwebui.sh

@@ -23,6 +23,62 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
+  if [[ -d /opt/open-webui ]]; then
+    msg_warn "Legacy installation detected — migrating to uv based install..."
+    msg_info "Stopping Service"
+    systemctl stop open-webui
+    msg_ok "Stopped Service"
+
+    msg_info "Creating Backup"
+    mkdir -p /opt/open-webui-backup
+    cp -a /opt/open-webui/backend/data /opt/open-webui-backup/data || true
+    msg_ok "Created Backup"
+
+    msg_info "Removing legacy installation"
+    rm -rf /opt/open-webui
+    rm -rf /root/.open-webui || true
+    msg_ok "Removed legacy installation"
+
+    msg_info "Installing uv-based Open-WebUI"
+    PYTHON_VERSION="3.12" setup_uv
+    $STD uv tool install --python $PYTHON_VERSION open-webui[all]
+    msg_ok "Installed uv-based Open-WebUI"
+
+    msg_info "Restoring data"
+    mkdir -p /root/.open-webui
+    cp -a /opt/open-webui-backup/data/* /root/.open-webui/ || true
+    rm -rf /opt/open-webui-backup || true
+    msg_ok "Restored data"
+
+    msg_info "Recreating Service"
+    cat <<EOF >/etc/systemd/system/open-webui.service
+[Unit]
+Description=Open WebUI Service
+After=network.target
+
+[Service]
+Type=simple
+Environment=DATA_DIR=/root/.open-webui
+EnvironmentFile=-/root/.env
+ExecStart=/root/.local/bin/open-webui serve
+WorkingDirectory=/root
+Restart=on-failure
+RestartSec=5
+User=root
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+    $STD systemctl daemon-reload
+    systemctl enable -q --now open-webui
+    msg_ok "Recreated Service"
+
+    msg_ok "Migration completed"
+    exit 0
+  fi
+
   if [[ ! -d /root/.open-webui ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
@@ -50,8 +106,11 @@ function update_script() {
     fi
   fi
 
-  msg_info "Restarting Open WebUI to initiate update"
+  msg_info "Updating Open WebUI via uv"
+  PYTHON_VERSION="3.12" setup_uv
+  $STD uv tool install --python 3.12 open-webui[all]
   systemctl restart open-webui
+  msg_ok "Updated Open WebUI"
   msg_ok "Updated successfully!"
   exit
 }

ct/paperless-ngx.sh

@@ -35,24 +35,38 @@ function update_script() {
     if grep -q "uv run" /etc/systemd/system/paperless-webserver.service; then
 
       msg_info "Backing up data"
-      mkdir -p /opt/paperless/backup
+      mkdir -p /opt/paperless_backup
-      cp -r /opt/paperless/data /opt/paperless/backup/
+      cp -r /opt/paperless/data /opt/paperless_backup/
-      cp -r /opt/paperless/media /opt/paperless/backup/
+      cp -r /opt/paperless/media /opt/paperless_backup/
-      cp -r /opt/paperless/paperless.conf /opt/paperless/backup/
+      cp -r /opt/paperless/paperless.conf /opt/paperless_backup/
       msg_ok "Backup completed"
 
       PYTHON_VERSION="3.13" setup_uv
-      fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
-      fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
-      setup_gs
+
+      . /etc/os-release
+      if [ "$VERSION_CODENAME" = "bookworm" ]; then
+        setup_gs
+      else
+        $STD apt install -y ghostscript
+      fi
 
       msg_info "Updating Paperless-ngx"
-      cp -r /opt/paperless/backup/* /opt/paperless/
+      cp -r /opt/paperless_backup/* /opt/paperless/
+      CONSUME_DIR="$(sed -n 's/^PAPERLESS_CONSUMPTION_DIR=//p' /opt/paperless/paperless.conf)"
+      if [[ -z "$CONSUME_DIR" ]]; then
+        CONSUME_DIR="/opt/paperless/consume"
+      fi
+      mkdir -p "$CONSUME_DIR"
       cd /opt/paperless
       $STD uv sync --all-extras
       cd /opt/paperless/src
       $STD uv run -- python manage.py migrate
       msg_ok "Updated Paperless-ngx"
+
+      rm -rf /opt/paperless_backup
+
     else
       msg_warn "You are about to migrate your Paperless-ngx installation to uv!"
       msg_custom "🔒" "It is strongly recommended to take a Proxmox snapshot first:"
@@ -96,24 +110,40 @@ function update_script() {
 
       $STD systemctl daemon-reload
       msg_info "Backing up data"
-      mkdir -p /opt/paperless/backup
+      mkdir -p /opt/paperless_backup
-      cp -r /opt/paperless/data /opt/paperless/backup/
+      cp -r /opt/paperless/data /opt/paperless_backup/
-      cp -r /opt/paperless/media /opt/paperless/backup/
+      cp -r /opt/paperless/media /opt/paperless_backup/
-      cp -r /opt/paperless/paperless.conf /opt/paperless/backup/
+      cp -r /opt/paperless/paperless.conf /opt/paperless_backup/
       msg_ok "Backup completed"
 
       PYTHON_VERSION="3.13" setup_uv
-      fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
-      fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
+      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
-      setup_gs
+
+      . /etc/os-release
+      if [ "$VERSION_CODENAME" = "bookworm" ]; then
+        setup_gs
+      else
+        msg_info "Installing Ghostscript"
+        $STD apt install -y ghostscript
+        msg_ok "Installed Ghostscript"
+      fi
 
       msg_info "Updating Paperless-ngx"
-      cp -r /opt/paperless/backup/* /opt/paperless/
+      cp -r /opt/paperless_backup/* /opt/paperless/
+      CONSUME_DIR="$(sed -n '/^PAPERLESS_CONSUMPTION/s/[^=]=*//p' /opt/paperless/paperless.conf)"
+      mkdir -p "${CONSUME_DIR:-/opt/paperless/consume}"
       cd /opt/paperless
       $STD uv sync --all-extras
       cd /opt/paperless/src
       $STD uv run -- python manage.py migrate
       msg_ok "Paperless-ngx migration and update completed"
+
+      rm -rf /opt/paperless_backup
+      if [[ -d /opt/paperless/backup ]]; then
+        rm -rf /opt/paperless/backup
+        msg_ok "Removed old backup directory"
+      fi
     fi
 
     msg_info "Starting all Paperless-ngx Services"

ct/phpipam.sh

@@ -33,17 +33,22 @@ function update_script() {
     systemctl stop apache2
     msg_ok "Stopped Service"
 
+    PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="mysql,gmp,snmp,ldap,apcu" setup_php
+
+    msg_info "Installing PHP-PEAR"
+    $STD apt install -y \
+      php-pear \
+      php-dev
+    msg_ok "Installed PHP-PEAR"
+
     mv /opt/phpipam/ /opt/phpipam-backup
-    fetch_and_deploy_gh_release "phpipam" "phpipam/phpipam" "prebuild" "latest" "/opt/phpipam" "phpipam-v*.zip"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "phpipam" "phpipam/phpipam" "prebuild" "latest" "/opt/phpipam" "phpipam-v*.zip"
     cp /opt/phpipam-backup/config.php /opt/phpipam
+    rm -r /opt/phpipam-backup
 
     msg_info "Starting Service"
     systemctl start apache2
     msg_ok "Started Service"
-
-    msg_info "Cleaning up"
-    rm -r /opt/phpipam-backup
-    msg_ok "Cleaned"
     msg_ok "Updated successfully!"
   fi
   exit

ct/plex.sh

@@ -23,7 +23,7 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [[ ! -f /etc/apt/sources.list.d/plexmediaserver.list ]]; then
+  if [ ! -f /etc/apt/sources.list.d/plexmediaserver.list ]] && [[ ! -f /etc/apt/sources.list.d/plexmediaserver.sources ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi

ct/technitiumdns.sh

@@ -28,6 +28,11 @@ function update_script() {
     exit
   fi
 
+  if is_package_installed "aspnetcore-runtime-8.0"; then
+    $STD apt remove -y aspnetcore-runtime-8.0
+    $STD apt install -y aspnetcore-runtime-9.0
+  fi
+
   RELEASE=$(curl -fsSL https://technitium.com/dns/ | grep -oP 'Version \K[\d.]+')
   if [[ ! -f ~/.technitium || "${RELEASE}" != "$(cat ~/.technitium)" ]]; then
     msg_info "Updating Technitium DNS"

frontend/public/json/cockpit.json

@@ -33,8 +33,12 @@
   },
   "notes": [
     {
-      "text": "Set a root password if using autologin. This will be the Cockpit password.`sudo passwd root`",
+      "text": "Set a root password if using autologin. This will be the Cockpit password. To set root password run `sudo passwd root`",
       "type": "info"
+    },
+    {
+      "text": "If you plan on using 45Drives extension with NFS, you must setup LXC as privileged. Some features of 45Drives don't work on Debian 13, so Debian 12 must be used.",
+      "type": "warning"
     }
   ]
 }

frontend/public/json/versions.json

@@ -1,64 +1,214 @@
 [
   {
-    "name": "TechnitiumSoftware/DnsServer",
+    "name": "chrisvel/tududi",
-    "version": "v14.0.0",
+    "version": "v0.86",
-    "date": "2025-11-08T10:34:10Z"
+    "date": "2025-11-10T20:54:25Z"
-  },
-  {
-    "name": "firefly-iii/firefly-iii",
-    "version": "v6.4.5",
-    "date": "2025-11-08T10:24:28Z"
-  },
-  {
-    "name": "runtipi/runtipi",
-    "version": "v4.6.3",
-    "date": "2025-11-08T10:06:18Z"
-  },
-  {
-    "name": "fuma-nama/fumadocs",
-    "version": "fumadocs-openapi@10.0.2",
-    "date": "2025-11-08T09:58:09Z"
   },
   {
     "name": "pommee/goaway",
-    "version": "v0.62.14",
+    "version": "v0.62.17",
-    "date": "2025-11-08T09:46:33Z"
+    "date": "2025-11-10T19:45:49Z"
   },
   {
-    "name": "pocketbase/pocketbase",
+    "name": "chrisbenincasa/tunarr",
-    "version": "v0.32.0",
+    "version": "v0.22.13",
-    "date": "2025-11-08T09:36:27Z"
+    "date": "2025-11-10T18:12:24Z"
   },
   {
-    "name": "chrisvel/tududi",
+    "name": "autobrr/autobrr",
-    "version": "v0.85.1",
+    "version": "v1.69.0",
-    "date": "2025-10-31T10:45:26Z"
+    "date": "2025-11-10T17:22:00Z"
   },
   {
-    "name": "Jackett/Jackett",
+    "name": "meilisearch/meilisearch",
-    "version": "v0.24.262",
+    "version": "latest",
-    "date": "2025-11-08T05:54:55Z"
+    "date": "2025-11-10T17:01:21Z"
+  },
+  {
+    "name": "gtsteffaniak/filebrowser",
+    "version": "v1.0.1-stable",
+    "date": "2025-11-10T16:51:44Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.30.9",
+    "date": "2025-11-10T16:23:29Z"
+  },
+  {
+    "name": "fuma-nama/fumadocs",
+    "version": "fumadocs-mdx@13.0.6",
+    "date": "2025-11-10T14:43:06Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "v1.0.0",
+    "date": "2025-11-07T12:52:42Z"
+  },
+  {
+    "name": "grokability/snipe-it",
+    "version": "v8.3.5",
+    "date": "2025-11-10T14:12:12Z"
+  },
+  {
+    "name": "SigNoz/signoz",
+    "version": "v0.101.0-rc.1",
+    "date": "2025-11-10T13:08:55Z"
+  },
+  {
+    "name": "dgtlmoon/changedetection.io",
+    "version": "0.50.42",
+    "date": "2025-11-10T12:32:49Z"
+  },
+  {
+    "name": "emqx/emqx",
+    "version": "e6.0.1",
+    "date": "2025-11-10T11:58:39Z"
   },
   {
     "name": "documenso/documenso",
-    "version": "v2.0.5",
+    "version": "v2.0.6",
-    "date": "2025-11-08T05:03:59Z"
+    "date": "2025-11-10T08:08:43Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.6",
+    "date": "2025-11-04T09:43:16Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.270",
+    "date": "2025-11-10T05:57:22Z"
+  },
+  {
+    "name": "firefly-iii/firefly-iii",
+    "version": "v6.4.6",
+    "date": "2025-11-08T22:45:35Z"
   },
   {
     "name": "jeedom/core",
     "version": "4.4.20",
-    "date": "2025-11-08T00:27:05Z"
+    "date": "2025-11-10T00:27:05Z"
   },
   {
     "name": "steveiliop56/tinyauth",
     "version": "v4.0.1",
     "date": "2025-10-15T16:53:55Z"
   },
+  {
+    "name": "navidrome/navidrome",
+    "version": "v0.58.5",
+    "date": "2025-11-09T19:12:41Z"
+  },
+  {
+    "name": "rcourtman/Pulse",
+    "version": "v4.27.2",
+    "date": "2025-11-09T18:39:30Z"
+  },
+  {
+    "name": "pelican-dev/panel",
+    "version": "v1.0.0-beta28",
+    "date": "2025-11-09T17:36:07Z"
+  },
+  {
+    "name": "pelican-dev/wings",
+    "version": "v1.0.0-beta19",
+    "date": "2025-11-09T17:26:30Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.2.0.1_stable_2025-11-09",
+    "date": "2025-11-09T17:21:54Z"
+  },
+  {
+    "name": "Cleanuparr/Cleanuparr",
+    "version": "v2.4.5",
+    "date": "2025-11-09T17:14:01Z"
+  },
+  {
+    "name": "TechnitiumSoftware/DnsServer",
+    "version": "v14.0.1",
+    "date": "2025-11-09T13:03:18Z"
+  },
+  {
+    "name": "BookStackApp/BookStack",
+    "version": "v25.11",
+    "date": "2025-11-09T13:00:14Z"
+  },
+  {
+    "name": "karakeep-app/karakeep",
+    "version": "extension/v1.2.7",
+    "date": "2025-11-09T12:21:54Z"
+  },
+  {
+    "name": "NginxProxyManager/nginx-proxy-manager",
+    "version": "v2.13.2",
+    "date": "2025-11-09T11:56:25Z"
+  },
   {
     "name": "keycloak/keycloak",
     "version": "26.4.4",
     "date": "2025-11-07T08:55:27Z"
   },
+  {
+    "name": "authelia/authelia",
+    "version": "v4.39.14",
+    "date": "2025-11-09T07:18:40Z"
+  },
+  {
+    "name": "apache/couchdb",
+    "version": "3.5.1",
+    "date": "2025-11-09T05:09:28Z"
+  },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.79.3.rc.1",
+    "date": "2025-11-09T02:52:13Z"
+  },
+  {
+    "name": "inventree/InvenTree",
+    "version": "1.1.3",
+    "date": "2025-11-09T00:28:21Z"
+  },
+  {
+    "name": "raydak-labs/configarr",
+    "version": "v1.17.2",
+    "date": "2025-11-08T22:47:58Z"
+  },
+  {
+    "name": "TwiN/gatus",
+    "version": "v5.31.0",
+    "date": "2025-11-08T22:18:46Z"
+  },
+  {
+    "name": "hargata/lubelog",
+    "version": "v1.5.4",
+    "date": "2025-11-08T16:26:45Z"
+  },
+  {
+    "name": "Luligu/matterbridge",
+    "version": "3.3.7",
+    "date": "2025-11-08T15:47:24Z"
+  },
+  {
+    "name": "heiher/hev-socks5-server",
+    "version": "2.11.1",
+    "date": "2025-11-08T14:27:27Z"
+  },
+  {
+    "name": "oauth2-proxy/oauth2-proxy",
+    "version": "v7.13.0",
+    "date": "2025-11-08T13:36:25Z"
+  },
+  {
+    "name": "runtipi/runtipi",
+    "version": "v4.6.3",
+    "date": "2025-11-08T10:06:18Z"
+  },
+  {
+    "name": "pocketbase/pocketbase",
+    "version": "v0.32.0",
+    "date": "2025-11-08T09:36:27Z"
+  },
   {
     "name": "home-assistant/core",
     "version": "2025.11.1",
@@ -74,11 +224,6 @@
     "version": "v2.16.45",
     "date": "2025-11-07T19:08:05Z"
   },
-  {
-    "name": "rcourtman/Pulse",
-    "version": "v4.26.5",
-    "date": "2025-11-07T18:05:58Z"
-  },
   {
     "name": "cloudflare/cloudflared",
     "version": "2025.11.1",
@@ -104,16 +249,6 @@
     "version": "v0.16.0",
     "date": "2025-11-07T12:55:42Z"
   },
-  {
-    "name": "n8n-io/n8n",
-    "version": "v1.0.0",
-    "date": "2025-11-07T12:52:42Z"
-  },
-  {
-    "name": "dgtlmoon/changedetection.io",
-    "version": "0.50.40",
-    "date": "2025-11-07T12:22:58Z"
-  },
   {
     "name": "element-hq/synapse",
     "version": "v1.142.0rc2",
@@ -129,11 +264,6 @@
     "version": "coverity-w45-4.14.1",
     "date": "2025-11-05T16:56:57Z"
   },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.6",
-    "date": "2025-11-04T09:43:16Z"
-  },
   {
     "name": "umami-software/umami",
     "version": "v3.0.0",
@@ -164,11 +294,6 @@
     "version": "v2.19.5",
     "date": "2025-11-06T20:20:13Z"
   },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v0.22.12",
-    "date": "2025-11-06T18:43:51Z"
-  },
   {
     "name": "MariaDB/server",
     "version": "mariadb-11.8.4",
@@ -189,21 +314,11 @@
     "version": "v2025.11.2",
     "date": "2025-11-06T12:08:24Z"
   },
-  {
-    "name": "meilisearch/meilisearch",
-    "version": "prototype-v1.24.0.s3-snapshots-5",
-    "date": "2025-11-06T11:43:12Z"
-  },
   {
     "name": "transmission/transmission",
     "version": "4.0.1-beta.1",
     "date": "2024-12-13T00:16:24Z"
   },
-  {
-    "name": "SigNoz/signoz",
-    "version": "v0.100.1",
-    "date": "2025-11-06T07:53:11Z"
-  },
   {
     "name": "apache/tomcat",
     "version": "9.0.112",
@@ -214,11 +329,6 @@
     "version": "v3.5.8",
     "date": "2025-11-06T05:32:51Z"
   },
-  {
-    "name": "apache/couchdb",
-    "version": "3.5.1-RC1",
-    "date": "2025-11-06T03:23:20Z"
-  },
   {
     "name": "Notifiarr/notifiarr",
     "version": "v0.9.1",
@@ -234,11 +344,6 @@
     "version": "5.26.16",
     "date": "2025-11-05T20:41:40Z"
   },
-  {
-    "name": "BerriAI/litellm",
-    "version": "v1.79.1.dev6",
-    "date": "2025-11-05T19:25:05Z"
-  },
   {
     "name": "leiweibau/Pi.Alert",
     "version": "v2025-11-05",
@@ -269,11 +374,6 @@
     "version": "v2.2.3",
     "date": "2025-11-05T13:47:03Z"
   },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.2.0.100-2.2.0.100_canary_2025-11-05",
-    "date": "2025-11-05T13:01:37Z"
-  },
   {
     "name": "azukaar/Cosmos-Server",
     "version": "v0.18.4",
@@ -284,11 +384,6 @@
     "version": "1.5.0",
     "date": "2025-11-05T11:10:20Z"
   },
-  {
-    "name": "emqx/emqx",
-    "version": "e5.10.2-alpha.1",
-    "date": "2025-11-05T09:55:26Z"
-  },
   {
     "name": "glpi-project/glpi",
     "version": "11.0.2",
@@ -304,11 +399,6 @@
     "version": "0.209.7",
     "date": "2025-11-05T08:32:08Z"
   },
-  {
-    "name": "NginxProxyManager/nginx-proxy-manager",
-    "version": "v2.13.1",
-    "date": "2025-11-05T06:06:08Z"
-  },
   {
     "name": "jenkinsci/jenkins",
     "version": "jenkins-2.535",
@@ -349,11 +439,6 @@
     "version": "v0.9.100",
     "date": "2025-11-04T17:44:39Z"
   },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.30.6",
-    "date": "2025-11-04T17:41:01Z"
-  },
   {
     "name": "VictoriaMetrics/VictoriaMetrics",
     "version": "v1.129.1",
@@ -409,16 +494,6 @@
     "version": "v25.11.0",
     "date": "2025-11-04T00:32:21Z"
   },
-  {
-    "name": "inventree/InvenTree",
-    "version": "1.1.2",
-    "date": "2025-11-03T23:16:29Z"
-  },
-  {
-    "name": "gtsteffaniak/filebrowser",
-    "version": "v1.0.0-stable",
-    "date": "2025-11-03T22:24:23Z"
-  },
   {
     "name": "jupyter/notebook",
     "version": "@jupyter-notebook/ui-components@7.5.0-rc.0",
@@ -429,11 +504,6 @@
     "version": "version/2025.10.1",
     "date": "2025-11-03T16:49:16Z"
   },
-  {
-    "name": "Cleanuparr/Cleanuparr",
-    "version": "v2.4.3",
-    "date": "2025-11-03T16:49:03Z"
-  },
   {
     "name": "silverbulletmd/silverbullet",
     "version": "2.2.1",
@@ -479,11 +549,6 @@
     "version": "0.42.1",
     "date": "2020-06-07T07:27:04Z"
   },
-  {
-    "name": "Luligu/matterbridge",
-    "version": "3.3.6",
-    "date": "2025-11-01T10:41:15Z"
-  },
   {
     "name": "tailscale/tailscale",
     "version": "v1.90.6",
@@ -529,11 +594,6 @@
     "version": "1.0.2",
     "date": "2025-10-30T18:23:23Z"
   },
-  {
-    "name": "TwiN/gatus",
-    "version": "v5.30.0",
-    "date": "2025-10-30T16:52:58Z"
-  },
   {
     "name": "AdguardTeam/AdGuardHome",
     "version": "v0.107.69",
@@ -589,11 +649,6 @@
     "version": "server-v3.4.4",
     "date": "2025-09-25T13:19:26Z"
   },
-  {
-    "name": "heiher/hev-socks5-server",
-    "version": "2.11.0",
-    "date": "2025-10-29T14:26:23Z"
-  },
   {
     "name": "cockpit-project/cockpit",
     "version": "350",
@@ -759,11 +814,6 @@
     "version": "v1.71.2",
     "date": "2025-10-20T15:25:52Z"
   },
-  {
-    "name": "pelican-dev/panel",
-    "version": "v1.0.0-beta27",
-    "date": "2025-10-20T00:38:13Z"
-  },
   {
     "name": "seriousm4x/UpSnap",
     "version": "5.2.3",
@@ -799,11 +849,6 @@
     "version": "0.20.4",
     "date": "2025-10-18T10:00:42Z"
   },
-  {
-    "name": "grokability/snipe-it",
-    "version": "v8.3.4",
-    "date": "2025-10-17T18:13:24Z"
-  },
   {
     "name": "NodeBB/NodeBB",
     "version": "v4.6.1",
@@ -864,11 +909,6 @@
     "version": "v2.0.119",
     "date": "2025-10-13T23:15:11Z"
   },
-  {
-    "name": "hargata/lubelog",
-    "version": "v1.5.3",
-    "date": "2025-10-13T19:59:30Z"
-  },
   {
     "name": "node-red/node-red",
     "version": "4.1.1",
@@ -879,11 +919,6 @@
     "version": "v5.0.85",
     "date": "2025-10-12T19:55:18Z"
   },
-  {
-    "name": "authelia/authelia",
-    "version": "v4.39.13",
-    "date": "2025-10-12T05:45:48Z"
-  },
   {
     "name": "gelbphoenix/autocaliweb",
     "version": "v0.10.4",
@@ -899,21 +934,11 @@
     "version": "v5.16.0",
     "date": "2025-10-10T16:17:02Z"
   },
-  {
-    "name": "raydak-labs/configarr",
-    "version": "v1.17.1",
-    "date": "2025-10-10T16:12:41Z"
-  },
   {
     "name": "projectsend/projectsend",
     "version": "r1945",
     "date": "2025-10-10T02:30:05Z"
   },
-  {
-    "name": "autobrr/autobrr",
-    "version": "v1.68.0",
-    "date": "2025-10-08T18:33:12Z"
-  },
   {
     "name": "advplyr/audiobookshelf",
     "version": "v2.30.0",
@@ -924,11 +949,6 @@
     "version": "1.23.5",
     "date": "2025-10-08T07:31:37Z"
   },
-  {
-    "name": "pelican-dev/wings",
-    "version": "v1.0.0-beta18",
-    "date": "2025-10-07T21:05:57Z"
-  },
   {
     "name": "C4illin/ConvertX",
     "version": "v0.15.1",
@@ -954,11 +974,6 @@
     "version": "v1.5.9",
     "date": "2025-10-06T08:34:01Z"
   },
-  {
-    "name": "BookStackApp/BookStack",
-    "version": "v25.07.3",
-    "date": "2025-10-05T14:47:20Z"
-  },
   {
     "name": "webmin/webmin",
     "version": "2.520",
@@ -1089,11 +1104,6 @@
     "version": "v2.7.6",
     "date": "2025-09-15T15:50:44Z"
   },
-  {
-    "name": "karakeep-app/karakeep",
-    "version": "cli/v0.27.1",
-    "date": "2025-09-14T14:48:48Z"
-  },
   {
     "name": "intri-in/manage-my-damn-life-nextjs",
     "version": "v0.8.1",
@@ -1169,11 +1179,6 @@
     "version": "v2.10.2",
     "date": "2025-08-23T03:10:31Z"
   },
-  {
-    "name": "oauth2-proxy/oauth2-proxy",
-    "version": "v7.12.0",
-    "date": "2025-08-19T06:57:20Z"
-  },
   {
     "name": "ventoy/Ventoy",
     "version": "v1.1.07",
@@ -1249,11 +1254,6 @@
     "version": "v0.4.5",
     "date": "2025-07-29T16:39:18Z"
   },
-  {
-    "name": "navidrome/navidrome",
-    "version": "v0.58.0",
-    "date": "2025-07-28T18:59:50Z"
-  },
   {
     "name": "PCJones/UmlautAdaptarr",
     "version": "v0.7.3",

install/jotty-install.sh

@@ -40,9 +40,9 @@ NODE_ENV=production
 # OIDC_ISSUER=<your-oidc-issuer-url>
 # OIDC_CLIENT_ID=<oidc-client-id>
 # APP_URL=<https://app.domain.tld>
-# SSO_FALLBACK_LOCAL=yes # Allow both SSO and normal login
+# SSO_FALLBACK_LOCAL=yes
-# OIDC_CLIENT_SECRET=your_client_secret  # Enable confidential client mode with client authentication
+# OIDC_CLIENT_SECRET=your_client_secret
-# OIDC_ADMIN_GROUPS=admins # Map provider groups to admin role
+# OIDC_ADMIN_GROUPS=admins
 EOF
 msg_ok "Installed ${APPLICATION}"
 

install/n8n-install.sh

@@ -16,7 +16,9 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   ca-certificates \
-  build-essential
+  build-essential \
+  python3 \
+  python3-setuptools
 msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" setup_nodejs

install/odoo-install.sh

@@ -14,7 +14,7 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y python3-lxml
+$STD apt install -y python3-lxml wkhtmltopdf
 curl -fsSL "http://archive.ubuntu.com/ubuntu/pool/universe/l/lxml-html-clean/python3-lxml-html-clean_0.1.1-1_all.deb" -o /opt/python3-lxml-html-clean.deb
 $STD dpkg -i /opt/python3-lxml-html-clean.deb
 msg_ok "Installed Dependencies"

install/openwebui-install.sh

@@ -17,7 +17,11 @@ msg_info "Installing Dependencies"
 $STD apt install -y ffmpeg
 msg_ok "Installed Dependencies"
 
-USE_UVX="YES" PYTHON_VERSION="3.12" setup_uv
+PYTHON_VERSION="3.12" setup_uv
+
+msg_info "Installing Open WebUI"
+$STD uv tool install --python 3.12 open-webui[all]
+msg_ok "Installed Open WebUI"
 
 read -r -p "${TAB3}Would you like to add Ollama? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
@@ -56,7 +60,7 @@ After=network.target
 Type=simple
 EnvironmentFile=-/root/.env
 Environment=DATA_DIR=/root/.open-webui
-ExecStart=/usr/local/bin/uvx --python 3.12 open-webui@latest serve
+ExecStart=/root/.local/bin/open-webui serve
 WorkingDirectory=/root
 Restart=on-failure
 RestartSec=5
@@ -70,9 +74,4 @@ msg_ok "Created Service"
 
 motd_ssh
 customize
-
+cleanup_lxc
-msg_info "Cleaning up"
-$STD apt -y autoremove
-$STD apt -y autoclean
-$STD apt -y clean
-msg_ok "Cleaned"

install/phpipam-install.sh

@@ -13,39 +13,27 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="mysql,gmp,snmp,ldap,apcu" setup_php
-$STD apt install -y php-pear
+
-msg_ok "Installed Dependencies"
+msg_info "Installing PHP-PEAR"
+$STD apt install -y \
+  php-pear \
+  php-dev
+msg_ok "Installed PHP-PEAR"
 
-PHP_VERSION="8.2" PHP_APACHE="YES" PHP_FPM="YES" PHP_MODULE="mysql,imap,apcu,pspell,tidy,xmlrpc,gmp,ldap,common,snmp" setup_php
 setup_mariadb
-
+MARIADB_DB_NAME="phpipam" MARIADB_DB_USER="phpipam" setup_mariadb_db
-msg_info "Setting up MariaDB"
-DB_NAME=phpipam
-DB_USER=phpipam
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-{
-  echo "phpIPAM-Credentials"
-  echo "phpIPAM Database User: $DB_USER"
-  echo "phpIPAM Database Password: $DB_PASS"
-  echo "phpIPAM Database Name: $DB_NAME"
-} >>~/phpipam.creds
-msg_ok "Set up MariaDB"
-
 fetch_and_deploy_gh_release "phpipam" "phpipam/phpipam" "prebuild" "latest" "/opt/phpipam" "phpipam-v*.zip"
 
 msg_info "Installing phpIPAM"
-$STD mariadb -u root "${DB_NAME}" </opt/phpipam/db/SCHEMA.sql
+$STD mariadb -u root "${MARIADB_DB_NAME}" </opt/phpipam/db/SCHEMA.sql
 cp /opt/phpipam/config.dist.php /opt/phpipam/config.php
 sed -i -e "s/\(\$disable_installer = \).*/\1true;/" \
-  -e "s/\(\$db\['user'\] = \).*/\1'$DB_USER';/" \
+  -e "s/\(\$db\['user'\] = \).*/\1'$MARIADB_DB_USER';/" \
-  -e "s/\(\$db\['pass'\] = \).*/\1'$DB_PASS';/" \
+  -e "s/\(\$db\['pass'\] = \).*/\1'$MARIADB_DB_PASS';/" \
-  -e "s/\(\$db\['name'\] = \).*/\1'$DB_NAME';/" \
+  -e "s/\(\$db\['name'\] = \).*/\1'$MARIADB_DB_NAME';/" \
   /opt/phpipam/config.php
-sed -i '/max_execution_time/s/= .*/= 600/' /etc/php/8.2/apache2/php.ini
+sed -i '/max_execution_time/s/= .*/= 600/' /etc/php/8.4/apache2/php.ini
 msg_ok "Installed phpIPAM"
 
 msg_info "Creating Service"
@@ -71,9 +59,4 @@ msg_ok "Created Service"
 
 motd_ssh
 customize
-
+cleanup_lxc
-msg_info "Cleaning up"
-$STD apt -y autoremove
-$STD apt -y autoclean
-$STD apt -y clean
-msg_ok "Cleaned"

install/technitiumdns-install.sh

@@ -18,7 +18,7 @@ curl -fsSL "https://packages.microsoft.com/config/debian/12/packages-microsoft-p
 $STD dpkg -i packages-microsoft-prod.deb
 rm -rf packages-microsoft-prod.deb
 $STD apt update
-$STD apt install -y aspnetcore-runtime-8.0
+$STD apt install -y aspnetcore-runtime-9.0
 msg_ok "Installed ASP.NET Core Runtime"
 
 RELEASE=$(curl -fsSL https://technitium.com/dns/ | grep -oP 'Version \K[\d.]+')
@@ -26,20 +26,15 @@ msg_info "Installing Technitium DNS"
 mkdir -p /opt/technitium/dns
 curl -fsSL "https://download.technitium.com/dns/DnsServerPortable.tar.gz" -o /opt/DnsServerPortable.tar.gz
 $STD tar zxvf /opt/DnsServerPortable.tar.gz -C /opt/technitium/dns/
+rm -f /opt/DnsServerPortable.tar.gz
 echo "${RELEASE}" >~/.technitium
 msg_ok "Installed Technitium DNS"
 
 msg_info "Creating service"
 cp /opt/technitium/dns/systemd.service /etc/systemd/system/technitium.service
-systemctl enable -q --now technitium
+systemctl enable -q --now technitium 
 msg_ok "Service created"
 
 motd_ssh
 customize
-
+cleanup_lxc
-msg_info "Cleaning up"
-rm -f /opt/DnsServerPortable.tar.gz
-$STD apt -y autoremove
-$STD apt -y autoclean
-$STD apt -y clean
-msg_ok "Cleaned"

misc/core.func

@@ -370,6 +370,7 @@ run_container_safe() {
 
 cleanup_lxc() {
   msg_info "Cleaning up"
+
   if is_alpine; then
     $STD apk cache clean || true
     rm -rf /var/cache/apk/*
@@ -379,36 +380,38 @@ cleanup_lxc() {
     $STD apt -y clean || true
   fi
 
-  rm -rf /tmp/* /var/tmp/*
+  # Clear temp artifacts (keep sockets/FIFOs; ignore errors)
-
-  # Remove temp files created by mktemp/tempfile
   find /tmp /var/tmp -type f -name 'tmp*' -delete 2>/dev/null || true
   find /tmp /var/tmp -type f -name 'tempfile*' -delete 2>/dev/null || true
 
-  find /var/log -type f -exec truncate -s 0 {} +
+  # Truncate writable log files silently (permission errors ignored)
+  if command -v truncate >/dev/null 2>&1; then
+    find /var/log -type f -writable -print0 2>/dev/null |
+      xargs -0 -n1 truncate -s 0 2>/dev/null || true
+  fi
 
   # Python pip
-  if command -v pip &>/dev/null; then pip cache purge || true; fi
+  if command -v pip &>/dev/null; then $STD pip cache purge || true; fi
   # Python uv
-  if command -v uv &>/dev/null; then uv cache clear || true; fi
+  if command -v uv &>/dev/null; then $STD uv cache clear || true; fi
   # Node.js npm
-  if command -v npm &>/dev/null; then npm cache clean --force || true; fi
+  if command -v npm &>/dev/null; then $STD npm cache clean --force || true; fi
   # Node.js yarn
-  if command -v yarn &>/dev/null; then yarn cache clean || true; fi
+  if command -v yarn &>/dev/null; then $STD yarn cache clean || true; fi
   # Node.js pnpm
-  if command -v pnpm &>/dev/null; then pnpm store prune || true; fi
+  if command -v pnpm &>/dev/null; then $STD pnpm store prune || true; fi
   # Go
-  if command -v go &>/dev/null; then go clean -cache -modcache || true; fi
+  if command -v go &>/dev/null; then $STD go clean -cache -modcache || true; fi
   # Rust cargo
-  if command -v cargo &>/dev/null; then cargo clean || true; fi
+  if command -v cargo &>/dev/null; then $STD cargo clean || true; fi
   # Ruby gem
-  if command -v gem &>/dev/null; then gem cleanup || true; fi
+  if command -v gem &>/dev/null; then $STD gem cleanup || true; fi
   # Composer (PHP)
-  if command -v composer &>/dev/null; then composer clear-cache || true; fi
+  if command -v composer &>/dev/null; then $STD composer clear-cache || true; fi
 
   if command -v journalctl &>/dev/null; then
-    $STD journalctl --rotate
+    $STD journalctl --rotate || true
-    $STD journalctl --vacuum-time=10m
+    $STD journalctl --vacuum-time=10m || true
   fi
   msg_ok "Cleaned"
 }

misc/tools.func

@@ -72,15 +72,23 @@ stop_all_services() {
   local service_patterns=("$@")
 
   for pattern in "${service_patterns[@]}"; do
-    # Find all matching services
+    # Find all matching services (use || true to avoid pipeline failures)
-    systemctl list-units --type=service --all 2>/dev/null |
+    local services
-      grep -oE "${pattern}[^ ]*\.service" |
+    services=$(systemctl list-units --type=service --all 2>/dev/null |
-      sort -u |
+      grep -oE "${pattern}[^ ]*\.service" 2>/dev/null |
-      while read -r service; do
+      sort -u 2>/dev/null || true)
+
+    # Only process if we found any services
+    if [[ -n "$services" ]]; then
+      while IFS= read -r service; do
+        [[ -z "$service" ]] && continue
         $STD systemctl stop "$service" 2>/dev/null || true
         $STD systemctl disable "$service" 2>/dev/null || true
-      done
+      done <<<"$services"
+    fi
   done
+
+  return 0
 }
 
 # ------------------------------------------------------------------------------
@@ -1198,8 +1206,8 @@ ensure_apt_working() {
 }
 
 # ------------------------------------------------------------------------------
-# Standardized deb822 repository setup
+# Standardized deb822 repository setup (with optional Architectures)
-# Validates all parameters and fails safely if any are empty
+# Always runs apt update after repo creation to ensure package availability
 # ------------------------------------------------------------------------------
 setup_deb822_repo() {
   local name="$1"
@@ -1207,56 +1215,40 @@ setup_deb822_repo() {
   local repo_url="$3"
   local suite="$4"
   local component="${5:-main}"
-  local architectures="${6:-$(dpkg --print-architecture)}"
+  local architectures="${6-}" # optional
 
   # Validate required parameters
   if [[ -z "$name" || -z "$gpg_url" || -z "$repo_url" || -z "$suite" ]]; then
-    msg_error "setup_deb822_repo: missing required parameters (name=$name, gpg=$gpg_url, repo=$repo_url, suite=$suite)"
+    msg_error "setup_deb822_repo: missing required parameters (name=$name repo=$repo_url suite=$suite)"
     return 1
   fi
 
-  # Cleanup old configs for this app
+  # Cleanup
   cleanup_old_repo_files "$name"
-
-  # Cleanup any orphaned .sources files from other apps
   cleanup_orphaned_sources
 
-  # Ensure keyring directory exists
   mkdir -p /etc/apt/keyrings || {
-    msg_error "Failed to create /etc/apt/keyrings directory"
+    msg_error "Failed to create /etc/apt/keyrings"
     return 1
   }
 
-  # Download GPG key (with --yes to avoid interactive prompts)
+  # Import GPG
-  curl -fsSL "$gpg_url" | gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" 2>/dev/null || {
+  curl -fsSL "$gpg_url" | gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" || {
-    msg_error "Failed to download or import GPG key for ${name} from $gpg_url"
+    msg_error "Failed to import GPG key for ${name}"
     return 1
   }
 
-  # Create deb822 sources file
+  # Write deb822
-  cat <<EOF >/etc/apt/sources.list.d/${name}.sources
+  {
-Types: deb
+    echo "Types: deb"
-URIs: $repo_url
+    echo "URIs: $repo_url"
-Suites: $suite
+    echo "Suites: $suite"
-Components: $component
+    echo "Components: $component"
-Architectures: $architectures
+    [[ -n "$architectures" ]] && echo "Architectures: $architectures"
-Signed-By: /etc/apt/keyrings/${name}.gpg
+    echo "Signed-By: /etc/apt/keyrings/${name}.gpg"
-EOF
+  } >/etc/apt/sources.list.d/${name}.sources
 
-  # Use cached apt update
+  $STD apt update
-  local apt_cache_file="/var/cache/apt-update-timestamp"
-  local current_time=$(date +%s)
-  local last_update=0
-
-  if [[ -f "$apt_cache_file" ]]; then
-    last_update=$(cat "$apt_cache_file" 2>/dev/null || echo 0)
-  fi
-
-  # For repo changes, always update but respect short-term cache (30s)
-  if ((current_time - last_update > 30)); then
-    $STD apt update
-    echo "$current_time" >"$apt_cache_file"
-  fi
 }
 
 # ------------------------------------------------------------------------------
@@ -1415,7 +1407,7 @@ verify_gpg_fingerprint() {
 }
 
 # ==============================================================================
-# EXISTING FUNCTIONS
+# INSTALL FUNCTIONS
 # ==============================================================================
 
 # ------------------------------------------------------------------------------
@@ -1517,7 +1509,7 @@ check_for_gh_release() {
       return 0
     fi
 
-    msg_error "No update available: ${app} is not installed!"
+    msg_ok "No update available: ${app} is already on pinned version (${current})"
     return 1
   fi
 
@@ -3060,6 +3052,85 @@ setup_mariadb() {
   msg_ok "Setup MariaDB $MARIADB_VERSION"
 }
 
+# ------------------------------------------------------------------------------
+# Creates MariaDB database with user, charset and optional extra grants/modes
+#
+# Description:
+#   - Generates password if empty
+#   - Creates database with utf8mb4_unicode_ci
+#   - Creates local user with password
+#   - Grants full access to this DB
+#   - Optional: apply extra GRANT statements (comma-separated)
+#   - Optional: apply custom GLOBAL sql_mode
+#   - Saves credentials to file
+#   - Exports variables for use in calling script
+#
+# Usage:
+#   MARIADB_DB_NAME="myapp_db" MARIADB_DB_USER="myapp_user" setup_mariadb_db
+#   MARIADB_DB_NAME="domain_monitor" MARIADB_DB_USER="domainmonitor" setup_mariadb_db
+#   MARIADB_DB_NAME="myapp" MARIADB_DB_USER="myapp" MARIADB_DB_EXTRA_GRANTS="GRANT SELECT ON \`mysql\`.\`time_zone_name\`" setup_mariadb_db
+#   MARIADB_DB_NAME="ghostfolio" MARIADB_DB_USER="ghostfolio" MARIADB_DB_SQL_MODE="" setup_mariadb_db
+#
+# Variables:
+#   MARIADB_DB_NAME         - Database name (required)
+#   MARIADB_DB_USER         - Database user (required)
+#   MARIADB_DB_PASS         - User password (optional, auto-generated if empty)
+#   MARIADB_DB_EXTRA_GRANTS - Comma-separated GRANT statements (optional)
+#                             Example: "GRANT SELECT ON \`mysql\`.\`time_zone_name\`"
+#   MARIADB_DB_SQL_MODE     - Optional global sql_mode override (e.g. "", "STRICT_TRANS_TABLES")
+#   MARIADB_DB_CREDS_FILE   - Credentials file path (optional, default: ~/${APPLICATION}.creds)
+#
+# Exports:
+#   MARIADB_DB_NAME, MARIADB_DB_USER, MARIADB_DB_PASS
+# ------------------------------------------------------------------------------
+
+function setup_mariadb_db() {
+  if [[ -z "${MARIADB_DB_NAME:-}" || -z "${MARIADB_DB_USER:-}" ]]; then
+    msg_error "MARIADB_DB_NAME and MARIADB_DB_USER must be set before calling setup_mariadb_db"
+    return 1
+  fi
+
+  if [[ -z "${MARIADB_DB_PASS:-}" ]]; then
+    MARIADB_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+  fi
+
+  msg_info "Setting up MariaDB Database"
+
+  $STD mariadb -u root -e "CREATE DATABASE \`$MARIADB_DB_NAME\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
+  $STD mariadb -u root -e "CREATE USER '$MARIADB_DB_USER'@'localhost' IDENTIFIED BY '$MARIADB_DB_PASS';"
+  $STD mariadb -u root -e "GRANT ALL ON \`$MARIADB_DB_NAME\`.* TO '$MARIADB_DB_USER'@'localhost';"
+
+  # Optional extra grants
+  if [[ -n "${MARIADB_DB_EXTRA_GRANTS:-}" ]]; then
+    IFS=',' read -ra G_LIST <<<"${MARIADB_DB_EXTRA_GRANTS:-}"
+    for g in "${G_LIST[@]}"; do
+      g=$(echo "$g" | xargs)
+      $STD mariadb -u root -e "$g TO '$MARIADB_DB_USER'@'localhost';"
+    done
+  fi
+
+  # Optional sql_mode override
+  if [[ -n "${MARIADB_DB_SQL_MODE:-}" ]]; then
+    $STD mariadb -u root -e "SET GLOBAL sql_mode='${MARIADB_DB_SQL_MODE:-}';"
+  fi
+
+  $STD mariadb -u root -e "FLUSH PRIVILEGES;"
+
+  local CREDS_FILE="${MARIADB_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
+  {
+    echo "MariaDB Credentials"
+    echo "Database: $MARIADB_DB_NAME"
+    echo "User: $MARIADB_DB_USER"
+    echo "Password: $MARIADB_DB_PASS"
+  } >>"$CREDS_FILE"
+
+  msg_ok "Set up MariaDB Database"
+
+  export MARIADB_DB_NAME
+  export MARIADB_DB_USER
+  export MARIADB_DB_PASS
+}
+
 # ------------------------------------------------------------------------------
 # Installs or updates MongoDB to specified major version.
 #
@@ -3819,6 +3890,103 @@ function setup_postgresql() {
   fi
 }
 
+# ------------------------------------------------------------------------------
+# Creates PostgreSQL database with user and optional extensions
+#
+# Description:
+#   - Creates PostgreSQL role with login and password
+#   - Creates database with UTF8 encoding and template0
+#   - Installs optional extensions (postgis, pgvector, etc.)
+#   - Configures ALTER ROLE settings for Django/Rails compatibility
+#   - Saves credentials to file
+#   - Exports variables for use in calling script
+#
+# Usage:
+#   PG_DB_NAME="myapp_db" PG_DB_USER="myapp_user" setup_postgresql_db
+#   PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_EXTENSIONS="pgvector" setup_postgresql_db
+#   PG_DB_NAME="ghostfolio" PG_DB_USER="ghostfolio" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
+#   PG_DB_NAME="adventurelog" PG_DB_USER="adventurelog" PG_DB_EXTENSIONS="postgis" setup_postgresql_db
+#
+# Variables:
+#   PG_DB_NAME             - Database name (required)
+#   PG_DB_USER             - Database user (required)
+#   PG_DB_PASS             - Database password (optional, auto-generated if empty)
+#   PG_DB_EXTENSIONS       - Comma-separated list of extensions (optional, e.g. "postgis,pgvector")
+#   PG_DB_GRANT_SUPERUSER  - Grant SUPERUSER privilege (optional, "true" to enable, security risk!)
+#   PG_DB_SCHEMA_PERMS     - Grant schema-level permissions (optional, "true" to enable)
+#   PG_DB_SKIP_ALTER_ROLE  - Skip ALTER ROLE settings (optional, "true" to skip)
+#   PG_DB_CREDS_FILE       - Credentials file path (optional, default: ~/${APPLICATION}.creds)
+#
+# Exports:
+#   PG_DB_NAME, PG_DB_USER, PG_DB_PASS - For use in calling script
+# ------------------------------------------------------------------------------
+
+function setup_postgresql_db() {
+  # Validation
+  if [[ -z "${PG_DB_NAME:-}" || -z "${PG_DB_USER:-}" ]]; then
+    msg_error "PG_DB_NAME and PG_DB_USER must be set before calling setup_postgresql_db"
+    return 1
+  fi
+
+  # Generate password if not provided
+  if [[ -z "${PG_DB_PASS:-}" ]]; then
+    PG_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+  fi
+
+  msg_info "Setting up PostgreSQL Database"
+  $STD sudo -u postgres psql -c "CREATE ROLE $PG_DB_USER WITH LOGIN PASSWORD '$PG_DB_PASS';"
+  $STD sudo -u postgres psql -c "CREATE DATABASE $PG_DB_NAME WITH OWNER $PG_DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+
+  # Install extensions (comma-separated)
+  if [[ -n "${PG_DB_EXTENSIONS:-}" ]]; then
+    IFS=',' read -ra EXT_LIST <<<"${PG_DB_EXTENSIONS:-}"
+    for ext in "${EXT_LIST[@]}"; do
+      ext=$(echo "$ext" | xargs) # Trim whitespace
+      $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "CREATE EXTENSION IF NOT EXISTS $ext;"
+    done
+  fi
+
+  # ALTER ROLE settings for Django/Rails compatibility (unless skipped)
+  if [[ "${PG_DB_SKIP_ALTER_ROLE:-}" != "true" ]]; then
+    $STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET client_encoding TO 'utf8';"
+    $STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET default_transaction_isolation TO 'read committed';"
+    $STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET timezone TO 'UTC';"
+  fi
+
+  # Schema permissions (if requested)
+  if [[ "${PG_DB_SCHEMA_PERMS:-}" == "true" ]]; then
+    $STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $PG_DB_NAME TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -c "ALTER USER $PG_DB_USER CREATEDB;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "GRANT ALL ON SCHEMA public TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "GRANT CREATE ON SCHEMA public TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO $PG_DB_USER;"
+    $STD sudo -u postgres psql -d "$PG_DB_NAME" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO $PG_DB_USER;"
+  fi
+
+  # Superuser grant (if requested - WARNING!)
+  if [[ "${PG_DB_GRANT_SUPERUSER:-}" == "true" ]]; then
+    msg_warn "Granting SUPERUSER privilege (security risk!)"
+    $STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $PG_DB_NAME to $PG_DB_USER;"
+    $STD sudo -u postgres psql -c "ALTER USER $PG_DB_USER WITH SUPERUSER;"
+  fi
+
+  # Save credentials
+  local CREDS_FILE="${PG_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
+  {
+    echo "PostgreSQL Credentials"
+    echo "Database: $PG_DB_NAME"
+    echo "User: $PG_DB_USER"
+    echo "Password: $PG_DB_PASS"
+  } >>"$CREDS_FILE"
+
+  msg_ok "Set up PostgreSQL Database"
+
+  # Export for use in calling script
+  export PG_DB_NAME
+  export PG_DB_USER
+  export PG_DB_PASS
+}
+
 # ------------------------------------------------------------------------------
 # Installs rbenv and ruby-build, installs Ruby and optionally Rails.
 #