Update CHANGELOG.md (#8953)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -20,9 +20,15 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
+    - Update script URLs to ProxmoxVE repository [@MickLesk](https://github.com/MickLesk) ([#8946](https://github.com/community-scripts/ProxmoxVE/pull/8946))
+    - tools.func: fix amd64 arm64 mismatch [@MickLesk](https://github.com/MickLesk) ([#8943](https://github.com/community-scripts/ProxmoxVE/pull/8943))
     - ghostfolio: refactor CoinGecko key prompts in installer [@MickLesk](https://github.com/MickLesk) ([#8935](https://github.com/community-scripts/ProxmoxVE/pull/8935))
     - flaresolverr: pin release to 3.4.3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#8937](https://github.com/community-scripts/ProxmoxVE/pull/8937))
 
+  - #### ✨ New Features
+
+    - Pangolin: Add Traefik proxy [@tremor021](https://github.com/tremor021) ([#8952](https://github.com/community-scripts/ProxmoxVE/pull/8952))
+
 ## 2025-11-06
 
 ### 🚀 Updated Scripts

ct/livebook.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/refs/heads/main/misc/build.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/refs/heads/main/misc/build.func)
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: dkuku
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/pangolin.sh

@@ -21,52 +21,52 @@ color
 catch_errors
 
 function update_script() {
-    header_info
+  header_info
-    check_container_storage
+  check_container_storage
-    check_container_resources
+  check_container_resources
-    if [[ ! -d /opt/pangolin ]]; then
+  if [[ ! -d /opt/pangolin ]]; then
-        msg_error "No ${APP} Installation Found!"
+    msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    if check_for_gh_release "pangolin" "fosrl/pangolin"; then
-        msg_info "Stopping Service"
-        systemctl stop pangolin
-        systemctl stop gerbil
-        msg_info "Service stopped"
-
-        msg_info "Creating backup"
-        tar -czf /opt/pangolin_config_backup.tar.gz -C /opt/pangolin config
-        msg_ok "Created backup"
-
-        CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
-        CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
-
-        msg_info "Updating Pangolin"
-        cd /opt/pangolin
-        $STD npm ci
-        $STD npm run set:sqlite
-        $STD npm run set:oss
-        rm -rf server/private
-        $STD npm run build:sqlite
-        $STD npm run build:cli
-        cp -R .next/standalone ./
-        chmod +x ./dist/cli.mjs
-        cp server/db/names.json ./dist/names.json
-        msg_ok "Updated Pangolin"
-
-        msg_info "Restoring config"
-        tar -xzf /opt/pangolin_config_backup.tar.gz -C /opt/pangolin --overwrite
-        rm -f /opt/pangolin_config_backup.tar.gz
-        msg_ok "Restored config"
-
-        msg_info "Starting Services"
-        systemctl start pangolin
-        systemctl start gerbil
-        msg_ok "Started Services"
-        msg_ok "Updated successfully!"
-    fi
     exit
+  fi
+
+  if check_for_gh_release "pangolin" "fosrl/pangolin"; then
+    msg_info "Stopping Service"
+    systemctl stop pangolin
+    systemctl stop gerbil
+    msg_info "Service stopped"
+
+    msg_info "Creating backup"
+    tar -czf /opt/pangolin_config_backup.tar.gz -C /opt/pangolin config
+    msg_ok "Created backup"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
+
+    msg_info "Updating Pangolin"
+    cd /opt/pangolin
+    $STD npm ci
+    $STD npm run set:sqlite
+    $STD npm run set:oss
+    rm -rf server/private
+    $STD npm run build:sqlite
+    $STD npm run build:cli
+    cp -R .next/standalone ./
+    chmod +x ./dist/cli.mjs
+    cp server/db/names.json ./dist/names.json
+    msg_ok "Updated Pangolin"
+
+    msg_info "Restoring config"
+    tar -xzf /opt/pangolin_config_backup.tar.gz -C /opt/pangolin --overwrite
+    rm -f /opt/pangolin_config_backup.tar.gz
+    msg_ok "Restored config"
+
+    msg_info "Starting Services"
+    systemctl start pangolin
+    systemctl start gerbil
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
 }
 
 start
@@ -76,4 +76,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3002${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://<YOUR_PANGOLIN_URL>${CL}"

frontend/public/json/pangolin.json

@@ -8,7 +8,7 @@
   "type": "ct",
   "updateable": true,
   "privileged": false,
-  "interface_port": 3002,
+  "interface_port": 443,
   "documentation": "https://docs.pangolin.net/",
   "config_path": "/opt/pangolin/config/config.yml",
   "website": "https://pangolin.net/",

frontend/public/json/versions.json

@@ -1,4 +1,74 @@
 [
+  {
+    "name": "fuma-nama/fumadocs",
+    "version": "fumadocs-core@16.0.8",
+    "date": "2025-11-07T11:23:47Z"
+  },
+  {
+    "name": "element-hq/synapse",
+    "version": "v1.142.0rc4",
+    "date": "2025-11-07T11:19:40Z"
+  },
+  {
+    "name": "Paymenter/Paymenter",
+    "version": "v1.4.3",
+    "date": "2025-11-07T11:07:17Z"
+  },
+  {
+    "name": "cloudflare/cloudflared",
+    "version": "2025.11.0",
+    "date": "2025-11-07T10:19:35Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.16.0",
+    "date": "2025-11-07T09:42:01Z"
+  },
+  {
+    "name": "wazuh/wazuh",
+    "version": "coverity-w45-4.14.1",
+    "date": "2025-11-05T16:56:57Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.4",
+    "date": "2025-11-07T08:55:27Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.6",
+    "date": "2025-11-04T09:43:16Z"
+  },
+  {
+    "name": "umami-software/umami",
+    "version": "v3.0.0",
+    "date": "2025-11-07T06:13:49Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.255",
+    "date": "2025-11-07T05:55:20Z"
+  },
+  {
+    "name": "documenso/documenso",
+    "version": "v2.0.0",
+    "date": "2025-11-07T04:44:34Z"
+  },
+  {
+    "name": "OliveTin/OliveTin",
+    "version": "3000.3.2",
+    "date": "2025-11-07T01:05:59Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.4.20",
+    "date": "2025-11-07T00:27:13Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.0.1",
+    "date": "2025-10-15T16:53:55Z"
+  },
   {
     "name": "FlowiseAI/Flowise",
     "version": "flowise@3.0.10",
@@ -69,16 +139,6 @@
     "version": "v2.17.0-beta20",
     "date": "2025-11-06T10:49:56Z"
   },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.3",
-    "date": "2025-11-06T09:56:20Z"
-  },
-  {
-    "name": "OliveTin/OliveTin",
-    "version": "2025.11.06",
-    "date": "2025-11-06T08:45:02Z"
-  },
   {
     "name": "SigNoz/signoz",
     "version": "v0.100.1",
@@ -89,11 +149,6 @@
     "version": "9.0.112",
     "date": "2025-11-06T07:49:59Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.252",
-    "date": "2025-11-06T05:55:30Z"
-  },
   {
     "name": "Kozea/Radicale",
     "version": "v3.5.8",
@@ -114,16 +169,6 @@
     "version": "v0.9.1",
     "date": "2025-11-06T02:26:53Z"
   },
-  {
-    "name": "jeedom/core",
-    "version": "4.4.20",
-    "date": "2025-11-06T00:27:04Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.0.1",
-    "date": "2025-10-15T16:53:55Z"
-  },
   {
     "name": "ollama/ollama",
     "version": "v0.12.10",
@@ -159,16 +204,6 @@
     "version": "v1.6.5",
     "date": "2025-10-06T15:25:17Z"
   },
-  {
-    "name": "wazuh/wazuh",
-    "version": "coverity-w45-4.14.1",
-    "date": "2025-11-05T16:56:57Z"
-  },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.6",
-    "date": "2025-11-04T09:43:16Z"
-  },
   {
     "name": "javedh-dev/tracktor",
     "version": "0.5.1",
@@ -269,11 +304,6 @@
     "version": "nightly",
     "date": "2025-11-04T19:16:17Z"
   },
-  {
-    "name": "element-hq/synapse",
-    "version": "v1.142.0rc2",
-    "date": "2025-11-04T16:22:11Z"
-  },
   {
     "name": "jhuckaby/Cronicle",
     "version": "v0.9.100",
@@ -359,11 +389,6 @@
     "version": "0.50.39",
     "date": "2025-11-03T17:58:41Z"
   },
-  {
-    "name": "cloudflare/cloudflared",
-    "version": "2025.10.1-3-g52809511",
-    "date": "2025-11-03T17:13:35Z"
-  },
   {
     "name": "goauthentik/authentik",
     "version": "version/2025.10.1",
@@ -379,21 +404,11 @@
     "version": "debian/12.1.34",
     "date": "2025-11-03T16:42:07Z"
   },
-  {
-    "name": "Paymenter/Paymenter",
-    "version": "v1.4.2",
-    "date": "2025-11-03T11:52:53Z"
-  },
   {
     "name": "silverbulletmd/silverbullet",
     "version": "2.2.1",
     "date": "2025-11-03T06:57:15Z"
   },
-  {
-    "name": "fuma-nama/fumadocs",
-    "version": "fumadocs-mdx@13.0.5",
-    "date": "2025-11-03T06:55:11Z"
-  },
   {
     "name": "jellyfin/jellyfin",
     "version": "v10.11.2",
@@ -529,11 +544,6 @@
     "version": "v1.5.3",
     "date": "2025-09-20T12:12:33Z"
   },
-  {
-    "name": "documenso/documenso",
-    "version": "v1.13.2",
-    "date": "2025-10-30T04:12:40Z"
-  },
   {
     "name": "ipfs/kubo",
     "version": "v0.38.2",
@@ -574,11 +584,6 @@
     "version": "cassandra-5.0.6",
     "date": "2025-10-29T07:40:47Z"
   },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.15.3",
-    "date": "2025-10-29T05:15:45Z"
-  },
   {
     "name": "outline/outline",
     "version": "v1.0.1",
@@ -1244,11 +1249,6 @@
     "version": "v0.58.0",
     "date": "2025-07-28T18:59:50Z"
   },
-  {
-    "name": "umami-software/umami",
-    "version": "v2.19.0",
-    "date": "2025-07-27T22:25:00Z"
-  },
   {
     "name": "PCJones/UmlautAdaptarr",
     "version": "v0.7.3",

install/pangolin-install.sh

@@ -22,11 +22,16 @@ msg_ok "Installed Dependencies"
 NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
 fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
+fetch_and_deploy_gh_release "traefik" "traefik/traefik" "prebuild" "latest" "/usr/bin" "traefik_v*_linux_amd64.tar.gz"
+
+read -rp "${TAB3}Enter your Pangolin URL (ex: https://pangolin.example.com): " pango_url
+read -rp "${TAB3}Enter your email address: " pango_email
 
 msg_info "Setup Pangolin"
 IP_ADDR=$(hostname -I | awk '{print $1}')
 SECRET_KEY=$(openssl rand -base64 48 | tr -dc 'A-Za-z0-9' | head -c 32)
 cd /opt/pangolin
+mkdir -p /opt/pangolin/config/{traefik,db,letsencrypt,logs}
 $STD npm ci
 $STD npm run set:sqlite
 $STD npm run set:oss
@@ -46,30 +51,129 @@ mkdir -p /var/config
 
 cat <<EOF >/opt/pangolin/config/config.yml
 app:
-  dashboard_url: http://$IP_ADDR:3002
+  dashboard_url: "$pango_url"
-  log_level: debug
 
 domains:
   domain1:
-    base_domain: example.com
+    base_domain: "$pango_url"
+    cert_resolver: "letsencrypt"
 
 server:
-  secret: $SECRET_KEY
+  secret: "$SECRET_KEY"
 
 gerbil:
-  base_endpoint: example.com
+  base_endpoint: "$pango_url"
-
-orgs:
-  block_size: 24
-  subnet_group: 100.90.137.0/20
 
 flags:
   require_email_verification: false
-  disable_signup_without_invite: true
+  disable_signup_without_invite: false
-  disable_user_create_org: true
+  disable_user_create_org: false
-  allow_raw_resources: true
+EOF
-  enable_integration_api: true
+
-  enable_clients: true
+cat <<EOF >/opt/pangolin/config/traefik/traefik_config.yml
+api:
+  insecure: true
+  dashboard: true
+
+providers:
+  http:
+    endpoint: "http://$IP_ADDR:3001/api/v1/traefik-config"
+    pollInterval: "5s"
+  file:
+    filename: "/opt/pangolin/config/traefik/dynamic_config.yml"
+
+experimental:
+  plugins:
+    badger:
+      moduleName: "github.com/fosrl/badger"
+      version: "v1.2.0"
+
+log:
+  level: "INFO"
+  format: "common"
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      httpChallenge:
+        entryPoint: web
+      email: $pango_email
+      storage: "/opt/pangolin/config/letsencrypt/acme.json"
+      caServer: "https://acme-v02.api.letsencrypt.org/directory"
+
+entryPoints:
+  web:
+    address: ":80"
+  websecure:
+    address: ":443"
+    transport:
+      respondingTimeouts:
+        readTimeout: "30m"
+    http:
+      tls:
+        certResolver: "letsencrypt"
+
+serversTransport:
+  insecureSkipVerify: true
+
+ping:
+    entryPoint: "web"
+EOF
+
+cat <<EOF >/opt/pangolin/config/traefik/dynamic_config.yml
+http:
+  middlewares:
+    redirect-to-https:
+      redirectScheme:
+        scheme: https
+
+  routers:
+    # HTTP to HTTPS redirect router
+    main-app-router-redirect:
+      rule: "Host(\`$pango_url\`)"
+      service: next-service
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-https
+
+    # Next.js router (handles everything except API and WebSocket paths)
+    next-router:
+      rule: "Host(\`$pango_url\`) && !PathPrefix(\`/api/v1\`)"
+      service: next-service
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+    # API router (handles /api/v1 paths)
+    api-router:
+      rule: "Host(\`$pango_url\`) && PathPrefix(\`/api/v1\`)"
+      service: api-service
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+    # WebSocket router
+    ws-router:
+      rule: "Host(\`$pango_url\`)"
+      service: api-service
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    next-service:
+      loadBalancer:
+        servers:
+          - url: "http://$IP_ADDR:3002"
+
+    api-service:
+      loadBalancer:
+        servers:
+          - url: "http://$IP_ADDR:3000"
 EOF
 $STD npm run db:sqlite:generate
 $STD npm run db:sqlite:push
@@ -122,6 +226,21 @@ RestartSec=10
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now gerbil
+
+cat <<'EOF' >/etc/systemd/system/traefik.service
+[Unit]
+Description=Traefik is an open-source Edge Router that makes publishing your services a fun and easy experience
+
+[Service]
+Type=notify
+ExecStart=/usr/bin/traefik --configFile=/opt/pangolin/config/traefik/traefik_config.yml
+Restart=on-failure
+ExecReload=/bin/kill -USR1 \$MAINPID
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now traefik
 msg_ok "Created Services"
 
 motd_ssh

misc/tools.func

@@ -427,7 +427,12 @@ manage_tool_repository() {
     suite=$(get_fallback_suite "$distro_id" "$distro_codename" "$repo_url/$distro_id")
 
     # Setup new repository using deb822 format
-    setup_deb822_repo "mariadb" "$gpg_key_url" "$repo_url/$distro_id" "$suite" "main" "amd64 arm64" || return 1
+    setup_deb822_repo \
+      "mariadb" \
+      "$gpg_key_url" \
+      "$repo_url/$distro_id" \
+      "$suite" \
+      "main"
     return 0
     ;;
 
@@ -504,7 +509,7 @@ Types: deb
 URIs: ${repo_url}
 Suites: ${suite}/mongodb-org/${version}
 Components: ${repo_component}
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/mongodb-server-${version}.gpg
 EOF
     return 0
@@ -536,7 +541,7 @@ Types: deb
 URIs: $repo_url
 Suites: nodistro
 Components: main
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/nodesource.gpg
 EOF
     return 0
@@ -570,7 +575,7 @@ Types: deb
 URIs: https://packages.sury.org/php
 Suites: $distro_codename
 Components: main
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /usr/share/keyrings/deb.sury.org-php.gpg
 EOF
     return 0
@@ -601,7 +606,7 @@ Types: deb
 URIs: http://apt.postgresql.org/pub/repos/apt
 Suites: $distro_codename-pgdg
 Components: main
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/postgresql.gpg
 EOF
     return 0
@@ -1202,7 +1207,7 @@ setup_deb822_repo() {
   local repo_url="$3"
   local suite="$4"
   local component="${5:-main}"
-  local architectures="${6:-amd64 arm64}"
+  local architectures="${6:-$(dpkg --print-architecture)}"
 
   # Validate required parameters
   if [[ -z "$name" || -z "$gpg_url" || -z "$repo_url" || -z "$suite" ]]; then
@@ -2780,8 +2785,7 @@ function setup_java() {
       "https://packages.adoptium.net/artifactory/api/gpg/key/public" \
       "https://packages.adoptium.net/artifactory/deb" \
       "$SUITE" \
-      "main" \
+      "main"
-      "amd64 arm64"
   fi
 
   # Get currently installed version
@@ -3233,12 +3237,12 @@ function setup_mysql() {
       return 1
     fi
 
-    cat >/etc/apt/sources.list.d/mysql.sources <<'EOF'
+    cat >/etc/apt/sources.list.d/mysql.sources <<EOF
 Types: deb
 URIs: https://repo.mysql.com/apt/debian/
 Suites: bookworm
 Components: mysql-8.4-lts
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/mysql.gpg
 EOF
 
@@ -3746,8 +3750,7 @@ function setup_postgresql() {
     "https://www.postgresql.org/media/keys/ACCC4CF8.asc" \
     "https://apt.postgresql.org/pub/repos/apt" \
     "$SUITE" \
-    "main" \
+    "main"
-    "amd64 arm64"
 
   if ! $STD apt update; then
     msg_error "APT update failed for PostgreSQL repository"
@@ -4096,8 +4099,7 @@ function setup_clickhouse() {
     "https://packages.clickhouse.com/rpm/lts/repodata/repomd.xml.key" \
     "https://packages.clickhouse.com/deb" \
     "stable" \
-    "main" \
+    "main"
-    "amd64 arm64"
 
   # Install packages with retry logic
   export DEBIAN_FRONTEND=noninteractive

tools/addon/glances.sh

@@ -48,7 +48,7 @@ install_glances_debian() {
   msg_ok "Installed dependencies"
 
   msg_info "Setting up Python + uv"
-  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/tools.func)
+  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
   setup_uv PYTHON_VERSION="3.12"
   msg_ok "Setup Python + uv"
 
@@ -118,7 +118,7 @@ install_glances_alpine() {
   msg_ok "Installed dependencies"
 
   msg_info "Setting up Python + uv"
-  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/tools.func)
+  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
   setup_uv PYTHON_VERSION="3.12"
   msg_ok "Setup Python + uv"
 

tools/pve/pve-privilege-converter.sh

@@ -10,7 +10,7 @@ if ! command -v curl >/dev/null 2>&1; then
   apt-get update >/dev/null 2>&1
   apt-get install -y curl >/dev/null 2>&1
 fi
-source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/core.func)
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/core.func)
 load_functions
 
 set -euo pipefail