Refactor IPv6 disable logic and add 'disable' option

Replaces previous IPv6 disabling method with a dedicated 'disable' option, storing sysctl settings in /etc/sysctl.d/99-disable-ipv6.conf. Updates build and install scripts to clarify the difference between 'none' (no assignment) and 'disable' (fully disables IPv6), adds user warnings, and disables IPv6 listeners in nginx if present.

CHANGELOG.md

@@ -10,6 +10,8 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-11-21
+
 ## 2025-11-20
 
 ### 🚀 Updated Scripts

frontend/public/json/filebrowser.json

@@ -11,7 +11,7 @@
   "privileged": false,
   "interface_port": 8080,
   "documentation": null,
-  "website": "https://filebrowser.org/features",
+  "website": "https://filebrowser.org/index.html#features",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/file-browser.webp",
   "config_path": "",
   "description": "File Browser offers a user-friendly web interface for managing files within a designated directory. It allows you to perform various actions such as uploading, deleting, previewing, renaming, and editing files.",

frontend/public/json/versions.json

@@ -1,4 +1,59 @@
 [
+  {
+    "name": "TasmoAdmin/TasmoAdmin",
+    "version": "v4.3.2",
+    "date": "2025-10-18T12:11:00Z"
+  },
+  {
+    "name": "rcourtman/Pulse",
+    "version": "v4.32.2",
+    "date": "2025-11-20T22:25:40Z"
+  },
+  {
+    "name": "project-zot/zot",
+    "version": "v2.1.11",
+    "date": "2025-11-20T20:14:44Z"
+  },
+  {
+    "name": "readeck/readeck",
+    "version": "0.21.0",
+    "date": "2025-11-20T18:35:59Z"
+  },
+  {
+    "name": "saltstack/salt",
+    "version": "v3007.9",
+    "date": "2025-11-20T17:58:32Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.30.12",
+    "date": "2025-11-20T16:13:19Z"
+  },
+  {
+    "name": "meilisearch/meilisearch",
+    "version": "prototype-v1.26.0.arm-native-docker-build-1",
+    "date": "2025-11-20T15:38:39Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.2.0.101-2.2.0.101_canary_2025-11-20",
+    "date": "2025-11-20T14:50:45Z"
+  },
+  {
+    "name": "NodeBB/NodeBB",
+    "version": "v4.6.3",
+    "date": "2025-11-20T14:13:22Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.120.4",
+    "date": "2025-11-19T12:57:55Z"
+  },
+  {
+    "name": "SigNoz/signoz",
+    "version": "v0.102.1",
+    "date": "2025-11-20T12:20:18Z"
+  },
   {
     "name": "kimai/kimai",
     "version": "2.44.0",
@@ -104,11 +159,6 @@
     "version": "0.51.3",
     "date": "2025-11-19T15:45:28Z"
   },
-  {
-    "name": "NodeBB/NodeBB",
-    "version": "v4.6.2",
-    "date": "2025-11-19T15:31:59Z"
-  },
   {
     "name": "BookStackApp/BookStack",
     "version": "v25.11.2",
@@ -139,11 +189,6 @@
     "version": "v0.13.0",
     "date": "2025-11-19T14:16:07Z"
   },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.120.4",
-    "date": "2025-11-19T12:57:55Z"
-  },
   {
     "name": "AdguardTeam/AdGuardHome",
     "version": "v0.107.69",
@@ -159,11 +204,6 @@
     "version": "v7.5.0",
     "date": "2025-11-19T08:36:29Z"
   },
-  {
-    "name": "SigNoz/signoz",
-    "version": "v0.102.0",
-    "date": "2025-11-19T06:53:59Z"
-  },
   {
     "name": "morpheus65535/bazarr",
     "version": "v1.5.3",
@@ -274,11 +314,6 @@
     "version": "v1.4.5",
     "date": "2025-11-17T15:20:35Z"
   },
-  {
-    "name": "meilisearch/meilisearch",
-    "version": "latest",
-    "date": "2025-11-17T09:29:20Z"
-  },
   {
     "name": "rabbitmq/rabbitmq-server",
     "version": "v4.2.1",
@@ -324,11 +359,6 @@
     "version": "3.3.8",
     "date": "2025-11-16T17:04:37Z"
   },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.30.11",
-    "date": "2025-11-16T16:21:04Z"
-  },
   {
     "name": "AlexxIT/go2rtc",
     "version": "v1.9.12",
@@ -434,11 +464,6 @@
     "version": "v0.86.1",
     "date": "2025-11-14T05:05:44Z"
   },
-  {
-    "name": "rcourtman/Pulse",
-    "version": "v4.31.0",
-    "date": "2025-11-14T00:18:50Z"
-  },
   {
     "name": "gristlabs/grist-core",
     "version": "v1.7.7",
@@ -564,11 +589,6 @@
     "version": "v1.0.0-beta19",
     "date": "2025-11-09T17:26:30Z"
   },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.2.0.1_stable_2025-11-09",
-    "date": "2025-11-09T17:21:54Z"
-  },
   {
     "name": "Cleanuparr/Cleanuparr",
     "version": "v2.4.5",
@@ -939,21 +959,6 @@
     "version": "v4.5.0",
     "date": "2025-10-18T22:00:50Z"
   },
-  {
-    "name": "project-zot/zot",
-    "version": "v2.1.10",
-    "date": "2025-10-18T18:46:36Z"
-  },
-  {
-    "name": "TasmoAdmin/TasmoAdmin",
-    "version": "v4.3.2",
-    "date": "2025-10-18T12:11:00Z"
-  },
-  {
-    "name": "readeck/readeck",
-    "version": "0.20.4",
-    "date": "2025-10-18T10:00:42Z"
-  },
   {
     "name": "diced/zipline",
     "version": "v4.3.2",
@@ -1104,11 +1109,6 @@
     "version": "v0.17.0",
     "date": "2025-09-19T22:23:28Z"
   },
-  {
-    "name": "saltstack/salt",
-    "version": "v3007.8",
-    "date": "2025-09-18T18:19:04Z"
-  },
   {
     "name": "docmost/docmost",
     "version": "v0.23.2",

misc/alpine-install.func

@@ -13,14 +13,17 @@ load_functions
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "none" ] || [ "$DISABLEIPV6" == "yes" ]; then
-    msg_info "Disabling IPv6"
+  if [ "$IPV6_METHOD" == "disable" ]; then
+    msg_info "Disabling IPv6 (this may affect some services)"
     $STD sysctl -w net.ipv6.conf.all.disable_ipv6=1
     $STD sysctl -w net.ipv6.conf.default.disable_ipv6=1
     $STD sysctl -w net.ipv6.conf.lo.disable_ipv6=1
-    echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
-    echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
-    echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.conf
+    mkdir -p /etc/sysctl.d
+    $STD tee /etc/sysctl.d/99-disable-ipv6.conf >/dev/null <<EOF
+net.ipv6.conf.all.disable_ipv6 = 1
+net.ipv6.conf.default.disable_ipv6 = 1
+net.ipv6.conf.lo.disable_ipv6 = 1
+EOF
     $STD rc-update add sysctl default
     msg_ok "Disabled IPv6"
   fi

misc/build.func

@@ -627,11 +627,12 @@ advanced_settings() {
   # IPv6 Address Management selection
   while true; do
     IPV6_METHOD=$(whiptail --backtitle "Proxmox VE Helper Scripts" --menu \
-      "Select IPv6 Address Management Type:" 15 58 4 \
-      "auto" "SLAAC/AUTO (recommended, default)" \
-      "dhcp" "DHCPv6" \
-      "static" "Static (manual entry)" \
-      "none" "Disabled" \
+      "Select IPv6 Address Management Type:" 16 70 5 \
+      "auto" "SLAAC/AUTO (recommended) - Dynamic IPv6 from network" \
+      "dhcp" "DHCPv6 - DHCP-assigned IPv6 address" \
+      "static" "Static - Manual IPv6 address configuration" \
+      "none" "None - No IPv6 assignment (most containers)" \
+      "disable" "Fully Disabled - (breaks some services)" \
       --default-item "auto" 3>&1 1>&2 2>&3)
     [ $? -ne 0 ] && exit_script
 
@@ -680,7 +681,15 @@ advanced_settings() {
       break
       ;;
     none)
-      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}Disabled${CL}"
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}None${CL}"
+      IPV6_ADDR="none"
+      IPV6_GATE=""
+      break
+      ;;
+    disable)
+      whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox \
+        "⚠️  WARNING - FULLY DISABLE IPv6:\n\nThis will completely disable IPv6 inside the container via sysctl.\n\nSide Effects:\n  • Services requiring IPv6 will fail\n  • Localhost IPv6 (::1) will not work\n  • Some applications may not start\n\nOnly use if you have a specific reason to completely disable IPv6.\n\nFor most use cases, select 'None' instead." 14 70
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}Fully Disabled (IPv6 disabled via sysctl)${CL}"
       IPV6_ADDR="none"
       IPV6_GATE=""
       break

misc/install.func

@@ -15,12 +15,16 @@ load_functions
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "none" ] || [ "$DISABLEIPV6" == "yes" ]; then
-    msg_info "Disabling IPv6"
-    $STD echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
-    $STD echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
-    $STD echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.conf
-    $STD sysctl -p
+  if [ "$IPV6_METHOD" == "disable" ]; then
+    msg_info "Disabling IPv6 (this may affect some services)"
+    mkdir -p /etc/sysctl.d
+    $STD tee /etc/sysctl.d/99-disable-ipv6.conf >/dev/null <<EOF
+# Disable IPv6 (set by community-scripts)
+net.ipv6.conf.all.disable_ipv6 = 1
+net.ipv6.conf.default.disable_ipv6 = 1
+net.ipv6.conf.lo.disable_ipv6 = 1
+EOF
+    $STD sysctl -p /etc/sysctl.d/99-disable-ipv6.conf
     msg_ok "Disabled IPv6"
   fi
 }