Compare commits

..

1 Commits

Author SHA1 Message Date
CanbiZ
f00c0fd39d Update script URLs to ProxmoxVE repository
Corrected references from 'ProxmoxVED' to 'ProxmoxVE' in sourced URLs across livebook.sh, glances.sh, and pve-privilege-converter.sh to ensure scripts use the correct repository.
2025-11-07 12:06:22 +01:00
21 changed files with 436 additions and 869 deletions

View File

@@ -10,46 +10,6 @@
> [!CAUTION]
Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
## 2025-11-10
### 🚀 Updated Scripts
- #### ✨ New Features
- core: update message for no available updates scenario (if pinned) [@MickLesk](https://github.com/MickLesk) ([#9021](https://github.com/community-scripts/ProxmoxVE/pull/9021))
- Migrate Open WebUI to uv-based installation [@MickLesk](https://github.com/MickLesk) ([#9019](https://github.com/community-scripts/ProxmoxVE/pull/9019))
## 2025-11-09
### 🚀 Updated Scripts
- core: improve log cleaning [@MickLesk](https://github.com/MickLesk) ([#8999](https://github.com/community-scripts/ProxmoxVE/pull/8999))
- #### 🐞 Bug Fixes
- Add wkhtmltopdf to Odoo installation dependencies [@akileos](https://github.com/akileos) ([#9010](https://github.com/community-scripts/ProxmoxVE/pull/9010))
- fix(jotty): Comments removed from variables, as they are interpreted. [@schneider-de-com](https://github.com/schneider-de-com) ([#9002](https://github.com/community-scripts/ProxmoxVE/pull/9002))
- fix(n8n): Add python3-setuptools dependency for Debian 13 [@chrikodo](https://github.com/chrikodo) ([#9007](https://github.com/community-scripts/ProxmoxVE/pull/9007))
- Paperless-ngx: hotfix config path [@vhsdream](https://github.com/vhsdream) ([#9003](https://github.com/community-scripts/ProxmoxVE/pull/9003))
- Paperless-NGX: Move config backup outside of app folder [@vhsdream](https://github.com/vhsdream) ([#8996](https://github.com/community-scripts/ProxmoxVE/pull/8996))
## 2025-11-08
### 🚀 Updated Scripts
- #### 🐞 Bug Fixes
- Technitium DNS: Fix update [@tremor021](https://github.com/tremor021) ([#8980](https://github.com/community-scripts/ProxmoxVE/pull/8980))
- MediaManager: add LOG_FILE to start.sh script; fix BASE_PATH and PUBLIC_API_URL [@vhsdream](https://github.com/vhsdream) ([#8981](https://github.com/community-scripts/ProxmoxVE/pull/8981))
- Firefly: Fix missing command in update script [@tremor021](https://github.com/tremor021) ([#8972](https://github.com/community-scripts/ProxmoxVE/pull/8972))
- MongoDB: Remove unused message [@tremor021](https://github.com/tremor021) ([#8969](https://github.com/community-scripts/ProxmoxVE/pull/8969))
- Set TZ=Etc/UTC in Ghostfolio installation script [@LuloDev](https://github.com/LuloDev) ([#8961](https://github.com/community-scripts/ProxmoxVE/pull/8961))
- #### 🔧 Refactor
- paperless: refactor - remove backup after update and enable clean install [@MickLesk](https://github.com/MickLesk) ([#8988](https://github.com/community-scripts/ProxmoxVE/pull/8988))
- Refactor setup_deb822_repo for optional architectures [@MickLesk](https://github.com/MickLesk) ([#8983](https://github.com/community-scripts/ProxmoxVE/pull/8983))
## 2025-11-07
### 🆕 New Scripts
@@ -60,15 +20,9 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
- #### 🐞 Bug Fixes
- Update script URLs to ProxmoxVE repository [@MickLesk](https://github.com/MickLesk) ([#8946](https://github.com/community-scripts/ProxmoxVE/pull/8946))
- tools.func: fix amd64 arm64 mismatch [@MickLesk](https://github.com/MickLesk) ([#8943](https://github.com/community-scripts/ProxmoxVE/pull/8943))
- ghostfolio: refactor CoinGecko key prompts in installer [@MickLesk](https://github.com/MickLesk) ([#8935](https://github.com/community-scripts/ProxmoxVE/pull/8935))
- flaresolverr: pin release to 3.4.3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#8937](https://github.com/community-scripts/ProxmoxVE/pull/8937))
- #### ✨ New Features
- Pangolin: Add Traefik proxy [@tremor021](https://github.com/tremor021) ([#8952](https://github.com/community-scripts/ProxmoxVE/pull/8952))
## 2025-11-06
### 🚀 Updated Scripts

View File

@@ -51,7 +51,7 @@ function update_script() {
find /opt/firefly/storage -type f -exec chmod 664 {} \;
mkdir -p /opt/firefly/storage/framework/{cache/data,sessions,views}
$STD sudo -u www-data php /opt/firefly/artisan cache:clear
cd /opt/firefly
$STD php artisan migrate --seed --force
$STD php artisan cache:clear
$STD php artisan view:clear

View File

@@ -40,24 +40,19 @@ function update_script() {
MM_DIR="/opt/mm"
export CONFIG_DIR="${MM_DIR}/config"
export FRONTEND_FILES_DIR="${MM_DIR}/web/build"
export BASE_PATH=""
export PUBLIC_VERSION=""
export PUBLIC_API_URL=""
export BASE_PATH="/web"
cd /opt/mediamanager/web
$STD npm ci --no-fund --no-audit
$STD npm ci
$STD npm run build
rm -rf "$FRONTEND_FILES_DIR"/build
cp -r build "$FRONTEND_FILES_DIR"
export BASE_PATH=""
export VIRTUAL_ENV="/opt/${MM_DIR}/venv"
cd /opt/mediamanager
rm -rf "$MM_DIR"/{media_manager,alembic*}
cp -r {media_manager,alembic*} "$MM_DIR"
$STD /usr/local/bin/uv sync --locked --active -n -p cpython3.13 --managed-python
if ! grep -q "LOG_FILE" "$MM_DIR"/start.sh; then
sed -i "\|build\"$|a\export LOG_FILE=\"$CONFIG_DIR/media_manager.log\"" "$MM_DIR"/start.sh
fi
msg_ok "Updated $APP"
msg_info "Starting Service"

View File

@@ -23,62 +23,6 @@ function update_script() {
header_info
check_container_storage
check_container_resources
if [[ -d /opt/open-webui ]]; then
msg_warn "Legacy installation detected — migrating to uv based install..."
msg_info "Stopping Service"
systemctl stop open-webui
msg_ok "Stopped Service"
msg_info "Creating Backup"
mkdir -p /opt/open-webui-backup
cp -a /opt/open-webui/backend/data /opt/open-webui-backup/data || true
msg_ok "Created Backup"
msg_info "Removing legacy installation"
rm -rf /opt/open-webui
rm -rf /root/.open-webui || true
msg_ok "Removed legacy installation"
msg_info "Installing uv-based Open-WebUI"
PYTHON_VERSION="3.12" setup_uv
$STD uv tool install --python $PYTHON_VERSION open-webui[all]
msg_ok "Installed uv-based Open-WebUI"
msg_info "Restoring data"
mkdir -p /root/.open-webui
cp -a /opt/open-webui-backup/data/* /root/.open-webui/ || true
rm -rf /opt/open-webui-backup || true
msg_ok "Restored data"
msg_info "Recreating Service"
cat <<EOF >/etc/systemd/system/open-webui.service
[Unit]
Description=Open WebUI Service
After=network.target
[Service]
Type=simple
Environment=DATA_DIR=/root/.open-webui
EnvironmentFile=-/root/.env
ExecStart=/root/.local/bin/open-webui serve
WorkingDirectory=/root
Restart=on-failure
RestartSec=5
User=root
[Install]
WantedBy=multi-user.target
EOF
$STD systemctl daemon-reload
systemctl enable -q --now open-webui
msg_ok "Recreated Service"
msg_ok "Migration completed"
exit 0
fi
if [[ ! -d /root/.open-webui ]]; then
msg_error "No ${APP} Installation Found!"
exit
@@ -106,11 +50,8 @@ EOF
fi
fi
msg_info "Updating Open WebUI via uv"
PYTHON_VERSION="3.12" setup_uv
$STD uv tool install --python 3.12 open-webui[all]
msg_info "Restarting Open WebUI to initiate update"
systemctl restart open-webui
msg_ok "Updated Open WebUI"
msg_ok "Updated successfully!"
exit
}

View File

@@ -76,4 +76,4 @@ description
msg_ok "Completed Successfully!\n"
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
echo -e "${INFO}${YW} Access it using the following URL:${CL}"
echo -e "${TAB}${GATEWAY}${BGN}https://<YOUR_PANGOLIN_URL>${CL}"
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3002${CL}"

View File

@@ -35,38 +35,24 @@ function update_script() {
if grep -q "uv run" /etc/systemd/system/paperless-webserver.service; then
msg_info "Backing up data"
mkdir -p /opt/paperless_backup
cp -r /opt/paperless/data /opt/paperless_backup/
cp -r /opt/paperless/media /opt/paperless_backup/
cp -r /opt/paperless/paperless.conf /opt/paperless_backup/
mkdir -p /opt/paperless/backup
cp -r /opt/paperless/data /opt/paperless/backup/
cp -r /opt/paperless/media /opt/paperless/backup/
cp -r /opt/paperless/paperless.conf /opt/paperless/backup/
msg_ok "Backup completed"
PYTHON_VERSION="3.13" setup_uv
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
. /etc/os-release
if [ "$VERSION_CODENAME" = "bookworm" ]; then
fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
setup_gs
else
$STD apt install -y ghostscript
fi
msg_info "Updating Paperless-ngx"
cp -r /opt/paperless_backup/* /opt/paperless/
CONSUME_DIR="$(sed -n 's/^PAPERLESS_CONSUMPTION_DIR=//p' /opt/paperless/paperless.conf)"
if [[ -z "$CONSUME_DIR" ]]; then
CONSUME_DIR="/opt/paperless/consume"
fi
mkdir -p "$CONSUME_DIR"
cp -r /opt/paperless/backup/* /opt/paperless/
cd /opt/paperless
$STD uv sync --all-extras
cd /opt/paperless/src
$STD uv run -- python manage.py migrate
msg_ok "Updated Paperless-ngx"
rm -rf /opt/paperless_backup
else
msg_warn "You are about to migrate your Paperless-ngx installation to uv!"
msg_custom "🔒" "It is strongly recommended to take a Proxmox snapshot first:"
@@ -110,40 +96,24 @@ function update_script() {
$STD systemctl daemon-reload
msg_info "Backing up data"
mkdir -p /opt/paperless_backup
cp -r /opt/paperless/data /opt/paperless_backup/
cp -r /opt/paperless/media /opt/paperless_backup/
cp -r /opt/paperless/paperless.conf /opt/paperless_backup/
mkdir -p /opt/paperless/backup
cp -r /opt/paperless/data /opt/paperless/backup/
cp -r /opt/paperless/media /opt/paperless/backup/
cp -r /opt/paperless/paperless.conf /opt/paperless/backup/
msg_ok "Backup completed"
PYTHON_VERSION="3.13" setup_uv
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
. /etc/os-release
if [ "$VERSION_CODENAME" = "bookworm" ]; then
fetch_and_deploy_gh_release "paperless" "paperless-ngx/paperless-ngx" "prebuild" "latest" "/opt/paperless" "paperless*tar.xz"
fetch_and_deploy_gh_release "jbig2enc" "ie13/jbig2enc" "tarball" "latest" "/opt/jbig2enc"
setup_gs
else
msg_info "Installing Ghostscript"
$STD apt install -y ghostscript
msg_ok "Installed Ghostscript"
fi
msg_info "Updating Paperless-ngx"
cp -r /opt/paperless_backup/* /opt/paperless/
CONSUME_DIR="$(sed -n '/^PAPERLESS_CONSUMPTION/s/[^=]=*//p' /opt/paperless/paperless.conf)"
mkdir -p "${CONSUME_DIR:-/opt/paperless/consume}"
cp -r /opt/paperless/backup/* /opt/paperless/
cd /opt/paperless
$STD uv sync --all-extras
cd /opt/paperless/src
$STD uv run -- python manage.py migrate
msg_ok "Paperless-ngx migration and update completed"
rm -rf /opt/paperless_backup
if [[ -d /opt/paperless/backup ]]; then
rm -rf /opt/paperless/backup
msg_ok "Removed old backup directory"
fi
fi
msg_info "Starting all Paperless-ngx Services"

View File

@@ -28,11 +28,6 @@ function update_script() {
exit
fi
if is_package_installed "aspnetcore-runtime-8.0"; then
$STD apt remove -y aspnetcore-runtime-8.0
$STD apt install -y aspnetcore-runtime-9.0
fi
RELEASE=$(curl -fsSL https://technitium.com/dns/ | grep -oP 'Version \K[\d.]+')
if [[ ! -f ~/.technitium || "${RELEASE}" != "$(cat ~/.technitium)" ]]; then
msg_info "Updating Technitium DNS"

View File

@@ -33,12 +33,8 @@
},
"notes": [
{
"text": "Set a root password if using autologin. This will be the Cockpit password. To set root password run `sudo passwd root`",
"text": "Set a root password if using autologin. This will be the Cockpit password.`sudo passwd root`",
"type": "info"
},
{
"text": "If you plan on using 45Drives extension with NFS, you must setup LXC as privileged. Some features of 45Drives don't work on Debian 13, so Debian 12 must be used.",
"type": "warning"
}
]
}

View File

@@ -8,7 +8,7 @@
"type": "ct",
"updateable": true,
"privileged": false,
"interface_port": 443,
"interface_port": 3002,
"documentation": "https://docs.pangolin.net/",
"config_path": "/opt/pangolin/config/config.yml",
"website": "https://pangolin.net/",

View File

@@ -1,254 +1,4 @@
[
{
"name": "dgtlmoon/changedetection.io",
"version": "0.50.41",
"date": "2025-11-10T11:00:46Z"
},
{
"name": "emqx/emqx",
"version": "e5.10.2",
"date": "2025-11-10T10:58:21Z"
},
{
"name": "autobrr/autobrr",
"version": "v1.69.0",
"date": "2025-11-10T10:57:40Z"
},
{
"name": "documenso/documenso",
"version": "v2.0.6",
"date": "2025-11-10T08:08:43Z"
},
{
"name": "mattermost/mattermost",
"version": "v10.11.6",
"date": "2025-11-04T09:43:16Z"
},
{
"name": "Jackett/Jackett",
"version": "v0.24.270",
"date": "2025-11-10T05:57:22Z"
},
{
"name": "firefly-iii/firefly-iii",
"version": "v6.4.6",
"date": "2025-11-08T22:45:35Z"
},
{
"name": "jeedom/core",
"version": "4.4.20",
"date": "2025-11-10T00:27:05Z"
},
{
"name": "steveiliop56/tinyauth",
"version": "v4.0.1",
"date": "2025-10-15T16:53:55Z"
},
{
"name": "navidrome/navidrome",
"version": "v0.58.5",
"date": "2025-11-09T19:12:41Z"
},
{
"name": "rcourtman/Pulse",
"version": "v4.27.2",
"date": "2025-11-09T18:39:30Z"
},
{
"name": "pelican-dev/panel",
"version": "v1.0.0-beta28",
"date": "2025-11-09T17:36:07Z"
},
{
"name": "pelican-dev/wings",
"version": "v1.0.0-beta19",
"date": "2025-11-09T17:26:30Z"
},
{
"name": "duplicati/duplicati",
"version": "v2.2.0.1_stable_2025-11-09",
"date": "2025-11-09T17:21:54Z"
},
{
"name": "Cleanuparr/Cleanuparr",
"version": "v2.4.5",
"date": "2025-11-09T17:14:01Z"
},
{
"name": "msgbyte/tianji",
"version": "v1.30.7",
"date": "2025-11-09T16:20:57Z"
},
{
"name": "TechnitiumSoftware/DnsServer",
"version": "v14.0.1",
"date": "2025-11-09T13:03:18Z"
},
{
"name": "BookStackApp/BookStack",
"version": "v25.11",
"date": "2025-11-09T13:00:14Z"
},
{
"name": "karakeep-app/karakeep",
"version": "extension/v1.2.7",
"date": "2025-11-09T12:21:54Z"
},
{
"name": "NginxProxyManager/nginx-proxy-manager",
"version": "v2.13.2",
"date": "2025-11-09T11:56:25Z"
},
{
"name": "keycloak/keycloak",
"version": "26.4.4",
"date": "2025-11-07T08:55:27Z"
},
{
"name": "authelia/authelia",
"version": "v4.39.14",
"date": "2025-11-09T07:18:40Z"
},
{
"name": "apache/couchdb",
"version": "3.5.1",
"date": "2025-11-09T05:09:28Z"
},
{
"name": "BerriAI/litellm",
"version": "v1.79.3.rc.1",
"date": "2025-11-09T02:52:13Z"
},
{
"name": "inventree/InvenTree",
"version": "1.1.3",
"date": "2025-11-09T00:28:21Z"
},
{
"name": "raydak-labs/configarr",
"version": "v1.17.2",
"date": "2025-11-08T22:47:58Z"
},
{
"name": "TwiN/gatus",
"version": "v5.31.0",
"date": "2025-11-08T22:18:46Z"
},
{
"name": "hargata/lubelog",
"version": "v1.5.4",
"date": "2025-11-08T16:26:45Z"
},
{
"name": "Luligu/matterbridge",
"version": "3.3.7",
"date": "2025-11-08T15:47:24Z"
},
{
"name": "heiher/hev-socks5-server",
"version": "2.11.1",
"date": "2025-11-08T14:27:27Z"
},
{
"name": "oauth2-proxy/oauth2-proxy",
"version": "v7.13.0",
"date": "2025-11-08T13:36:25Z"
},
{
"name": "pommee/goaway",
"version": "v0.62.16",
"date": "2025-11-08T12:15:30Z"
},
{
"name": "runtipi/runtipi",
"version": "v4.6.3",
"date": "2025-11-08T10:06:18Z"
},
{
"name": "fuma-nama/fumadocs",
"version": "fumadocs-openapi@10.0.2",
"date": "2025-11-08T09:58:09Z"
},
{
"name": "pocketbase/pocketbase",
"version": "v0.32.0",
"date": "2025-11-08T09:36:27Z"
},
{
"name": "chrisvel/tududi",
"version": "v0.85.1",
"date": "2025-10-31T10:45:26Z"
},
{
"name": "home-assistant/core",
"version": "2025.11.1",
"date": "2025-11-07T21:32:26Z"
},
{
"name": "homarr-labs/homarr",
"version": "v1.43.2",
"date": "2025-11-07T19:16:41Z"
},
{
"name": "semaphoreui/semaphore",
"version": "v2.16.45",
"date": "2025-11-07T19:08:05Z"
},
{
"name": "cloudflare/cloudflared",
"version": "2025.11.1",
"date": "2025-11-07T17:05:45Z"
},
{
"name": "traefik/traefik",
"version": "v3.6.0",
"date": "2025-11-07T15:34:35Z"
},
{
"name": "YunoHost/yunohost",
"version": "debian/12.1.35",
"date": "2025-11-07T14:35:24Z"
},
{
"name": "nzbgetcom/nzbget",
"version": "v25.4",
"date": "2025-10-09T10:27:01Z"
},
{
"name": "openobserve/openobserve",
"version": "v0.16.0",
"date": "2025-11-07T12:55:42Z"
},
{
"name": "n8n-io/n8n",
"version": "v1.0.0",
"date": "2025-11-07T12:52:42Z"
},
{
"name": "element-hq/synapse",
"version": "v1.142.0rc2",
"date": "2025-11-04T16:22:11Z"
},
{
"name": "Paymenter/Paymenter",
"version": "v1.4.3",
"date": "2025-11-07T11:07:17Z"
},
{
"name": "wazuh/wazuh",
"version": "coverity-w45-4.14.1",
"date": "2025-11-05T16:56:57Z"
},
{
"name": "umami-software/umami",
"version": "v3.0.0",
"date": "2025-11-07T06:13:49Z"
},
{
"name": "OliveTin/OliveTin",
"version": "3000.3.2",
"date": "2025-11-07T01:05:59Z"
},
{
"name": "FlowiseAI/Flowise",
"version": "flowise@3.0.10",
@@ -259,6 +9,11 @@
"version": "v4.52.0",
"date": "2025-11-06T22:39:26Z"
},
{
"name": "rcourtman/Pulse",
"version": "v4.26.4",
"date": "2025-11-06T22:38:52Z"
},
{
"name": "open-webui/open-webui",
"version": "v0.6.36",
@@ -279,6 +34,11 @@
"version": "mariadb-11.8.4",
"date": "2025-11-06T17:24:30Z"
},
{
"name": "chrisvel/tududi",
"version": "v0.85.1",
"date": "2025-10-31T10:45:26Z"
},
{
"name": "HabitRPG/habitica",
"version": "v5.41.6",
@@ -304,6 +64,21 @@
"version": "4.0.1-beta.1",
"date": "2024-12-13T00:16:24Z"
},
{
"name": "semaphoreui/semaphore",
"version": "v2.17.0-beta20",
"date": "2025-11-06T10:49:56Z"
},
{
"name": "keycloak/keycloak",
"version": "26.4.3",
"date": "2025-11-06T09:56:20Z"
},
{
"name": "OliveTin/OliveTin",
"version": "2025.11.06",
"date": "2025-11-06T08:45:02Z"
},
{
"name": "SigNoz/signoz",
"version": "v0.100.1",
@@ -314,16 +89,41 @@
"version": "9.0.112",
"date": "2025-11-06T07:49:59Z"
},
{
"name": "Jackett/Jackett",
"version": "v0.24.252",
"date": "2025-11-06T05:55:30Z"
},
{
"name": "Kozea/Radicale",
"version": "v3.5.8",
"date": "2025-11-06T05:32:51Z"
},
{
"name": "firefly-iii/firefly-iii",
"version": "v6.4.4",
"date": "2025-11-01T19:48:08Z"
},
{
"name": "apache/couchdb",
"version": "3.5.1-RC1",
"date": "2025-11-06T03:23:20Z"
},
{
"name": "Notifiarr/notifiarr",
"version": "v0.9.1",
"date": "2025-11-06T02:26:53Z"
},
{
"name": "jeedom/core",
"version": "4.4.20",
"date": "2025-11-06T00:27:04Z"
},
{
"name": "steveiliop56/tinyauth",
"version": "v4.0.1",
"date": "2025-10-15T16:53:55Z"
},
{
"name": "ollama/ollama",
"version": "v0.12.10",
@@ -334,16 +134,41 @@
"version": "5.26.16",
"date": "2025-11-05T20:41:40Z"
},
{
"name": "BerriAI/litellm",
"version": "v1.79.1.dev6",
"date": "2025-11-05T19:25:05Z"
},
{
"name": "home-assistant/core",
"version": "2025.11.0",
"date": "2025-11-05T19:23:12Z"
},
{
"name": "leiweibau/Pi.Alert",
"version": "v2025-11-05",
"date": "2025-11-05T18:08:26Z"
},
{
"name": "n8n-io/n8n",
"version": "n8n@1.118.2",
"date": "2025-11-05T18:07:04Z"
},
{
"name": "bunkerity/bunkerweb",
"version": "v1.6.5",
"date": "2025-10-06T15:25:17Z"
},
{
"name": "wazuh/wazuh",
"version": "coverity-w45-4.14.1",
"date": "2025-11-05T16:56:57Z"
},
{
"name": "mattermost/mattermost",
"version": "v10.11.6",
"date": "2025-11-04T09:43:16Z"
},
{
"name": "javedh-dev/tracktor",
"version": "0.5.1",
@@ -364,6 +189,11 @@
"version": "v2.2.3",
"date": "2025-11-05T13:47:03Z"
},
{
"name": "duplicati/duplicati",
"version": "v2.2.0.100-2.2.0.100_canary_2025-11-05",
"date": "2025-11-05T13:01:37Z"
},
{
"name": "azukaar/Cosmos-Server",
"version": "v0.18.4",
@@ -374,6 +204,11 @@
"version": "1.5.0",
"date": "2025-11-05T11:10:20Z"
},
{
"name": "emqx/emqx",
"version": "e5.10.2-alpha.1",
"date": "2025-11-05T09:55:26Z"
},
{
"name": "glpi-project/glpi",
"version": "11.0.2",
@@ -389,6 +224,11 @@
"version": "0.209.7",
"date": "2025-11-05T08:32:08Z"
},
{
"name": "NginxProxyManager/nginx-proxy-manager",
"version": "v2.13.1",
"date": "2025-11-05T06:06:08Z"
},
{
"name": "jenkinsci/jenkins",
"version": "jenkins-2.535",
@@ -424,11 +264,26 @@
"version": "v1.25.1",
"date": "2025-11-04T20:01:09Z"
},
{
"name": "runtipi/runtipi",
"version": "nightly",
"date": "2025-11-04T19:16:17Z"
},
{
"name": "element-hq/synapse",
"version": "v1.142.0rc2",
"date": "2025-11-04T16:22:11Z"
},
{
"name": "jhuckaby/Cronicle",
"version": "v0.9.100",
"date": "2025-11-04T17:44:39Z"
},
{
"name": "msgbyte/tianji",
"version": "v1.30.6",
"date": "2025-11-04T17:41:01Z"
},
{
"name": "VictoriaMetrics/VictoriaMetrics",
"version": "v1.129.1",
@@ -484,6 +339,11 @@
"version": "v25.11.0",
"date": "2025-11-04T00:32:21Z"
},
{
"name": "inventree/InvenTree",
"version": "1.1.2",
"date": "2025-11-03T23:16:29Z"
},
{
"name": "gtsteffaniak/filebrowser",
"version": "v1.0.0-stable",
@@ -494,16 +354,46 @@
"version": "@jupyter-notebook/ui-components@7.5.0-rc.0",
"date": "2025-11-03T19:37:03Z"
},
{
"name": "dgtlmoon/changedetection.io",
"version": "0.50.39",
"date": "2025-11-03T17:58:41Z"
},
{
"name": "cloudflare/cloudflared",
"version": "2025.10.1-3-g52809511",
"date": "2025-11-03T17:13:35Z"
},
{
"name": "goauthentik/authentik",
"version": "version/2025.10.1",
"date": "2025-11-03T16:49:16Z"
},
{
"name": "Cleanuparr/Cleanuparr",
"version": "v2.4.3",
"date": "2025-11-03T16:49:03Z"
},
{
"name": "YunoHost/yunohost",
"version": "debian/12.1.34",
"date": "2025-11-03T16:42:07Z"
},
{
"name": "Paymenter/Paymenter",
"version": "v1.4.2",
"date": "2025-11-03T11:52:53Z"
},
{
"name": "silverbulletmd/silverbullet",
"version": "2.2.1",
"date": "2025-11-03T06:57:15Z"
},
{
"name": "fuma-nama/fumadocs",
"version": "fumadocs-mdx@13.0.5",
"date": "2025-11-03T06:55:11Z"
},
{
"name": "jellyfin/jellyfin",
"version": "v10.11.2",
@@ -544,16 +434,31 @@
"version": "0.42.1",
"date": "2020-06-07T07:27:04Z"
},
{
"name": "Luligu/matterbridge",
"version": "3.3.6",
"date": "2025-11-01T10:41:15Z"
},
{
"name": "tailscale/tailscale",
"version": "v1.90.6",
"date": "2025-10-31T22:24:04Z"
},
{
"name": "homarr-labs/homarr",
"version": "v1.43.1",
"date": "2025-10-31T19:15:02Z"
},
{
"name": "mealie-recipes/mealie",
"version": "v3.4.0",
"date": "2025-10-31T18:50:18Z"
},
{
"name": "pommee/goaway",
"version": "v0.62.12",
"date": "2025-10-31T17:30:55Z"
},
{
"name": "zabbix/zabbix",
"version": "7.4.5",
@@ -589,6 +494,11 @@
"version": "1.0.2",
"date": "2025-10-30T18:23:23Z"
},
{
"name": "TwiN/gatus",
"version": "v5.30.0",
"date": "2025-10-30T16:52:58Z"
},
{
"name": "AdguardTeam/AdGuardHome",
"version": "v0.107.69",
@@ -619,6 +529,11 @@
"version": "v1.5.3",
"date": "2025-09-20T12:12:33Z"
},
{
"name": "documenso/documenso",
"version": "v1.13.2",
"date": "2025-10-30T04:12:40Z"
},
{
"name": "ipfs/kubo",
"version": "v0.38.2",
@@ -644,6 +559,11 @@
"version": "server-v3.4.4",
"date": "2025-09-25T13:19:26Z"
},
{
"name": "heiher/hev-socks5-server",
"version": "2.11.0",
"date": "2025-10-29T14:26:23Z"
},
{
"name": "cockpit-project/cockpit",
"version": "350",
@@ -654,6 +574,11 @@
"version": "cassandra-5.0.6",
"date": "2025-10-29T07:40:47Z"
},
{
"name": "openobserve/openobserve",
"version": "v0.15.3",
"date": "2025-10-29T05:15:45Z"
},
{
"name": "outline/outline",
"version": "v1.0.1",
@@ -684,11 +609,21 @@
"version": "2.0.2",
"date": "2025-10-28T15:51:35Z"
},
{
"name": "traefik/traefik",
"version": "v3.5.4",
"date": "2025-10-28T11:09:25Z"
},
{
"name": "librespeed/speedtest-rust",
"version": "v1.4.0",
"date": "2025-10-28T15:11:12Z"
},
{
"name": "nzbgetcom/nzbget",
"version": "v25.4",
"date": "2025-10-09T10:27:01Z"
},
{
"name": "thecfu/scraparr",
"version": "v3.0.0-beta.2",
@@ -749,6 +684,11 @@
"version": "v1.7.3",
"date": "2025-10-24T10:51:12Z"
},
{
"name": "pocketbase/pocketbase",
"version": "v0.31.0",
"date": "2025-10-24T04:07:27Z"
},
{
"name": "drakkan/sftpgo",
"version": "v2.7.0",
@@ -809,6 +749,11 @@
"version": "v1.71.2",
"date": "2025-10-20T15:25:52Z"
},
{
"name": "pelican-dev/panel",
"version": "v1.0.0-beta27",
"date": "2025-10-20T00:38:13Z"
},
{
"name": "seriousm4x/UpSnap",
"version": "5.2.3",
@@ -909,6 +854,11 @@
"version": "v2.0.119",
"date": "2025-10-13T23:15:11Z"
},
{
"name": "hargata/lubelog",
"version": "v1.5.3",
"date": "2025-10-13T19:59:30Z"
},
{
"name": "node-red/node-red",
"version": "4.1.1",
@@ -919,6 +869,11 @@
"version": "v5.0.85",
"date": "2025-10-12T19:55:18Z"
},
{
"name": "authelia/authelia",
"version": "v4.39.13",
"date": "2025-10-12T05:45:48Z"
},
{
"name": "gelbphoenix/autocaliweb",
"version": "v0.10.4",
@@ -934,11 +889,21 @@
"version": "v5.16.0",
"date": "2025-10-10T16:17:02Z"
},
{
"name": "raydak-labs/configarr",
"version": "v1.17.1",
"date": "2025-10-10T16:12:41Z"
},
{
"name": "projectsend/projectsend",
"version": "r1945",
"date": "2025-10-10T02:30:05Z"
},
{
"name": "autobrr/autobrr",
"version": "v1.68.0",
"date": "2025-10-08T18:33:12Z"
},
{
"name": "advplyr/audiobookshelf",
"version": "v2.30.0",
@@ -949,6 +914,11 @@
"version": "1.23.5",
"date": "2025-10-08T07:31:37Z"
},
{
"name": "pelican-dev/wings",
"version": "v1.0.0-beta18",
"date": "2025-10-07T21:05:57Z"
},
{
"name": "C4illin/ConvertX",
"version": "v0.15.1",
@@ -974,6 +944,11 @@
"version": "v1.5.9",
"date": "2025-10-06T08:34:01Z"
},
{
"name": "BookStackApp/BookStack",
"version": "v25.07.3",
"date": "2025-10-05T14:47:20Z"
},
{
"name": "webmin/webmin",
"version": "2.520",
@@ -1104,6 +1079,11 @@
"version": "v2.7.6",
"date": "2025-09-15T15:50:44Z"
},
{
"name": "karakeep-app/karakeep",
"version": "cli/v0.27.1",
"date": "2025-09-14T14:48:48Z"
},
{
"name": "intri-in/manage-my-damn-life-nextjs",
"version": "v0.8.1",
@@ -1179,6 +1159,11 @@
"version": "v2.10.2",
"date": "2025-08-23T03:10:31Z"
},
{
"name": "oauth2-proxy/oauth2-proxy",
"version": "v7.12.0",
"date": "2025-08-19T06:57:20Z"
},
{
"name": "ventoy/Ventoy",
"version": "v1.1.07",
@@ -1254,6 +1239,16 @@
"version": "v0.4.5",
"date": "2025-07-29T16:39:18Z"
},
{
"name": "navidrome/navidrome",
"version": "v0.58.0",
"date": "2025-07-28T18:59:50Z"
},
{
"name": "umami-software/umami",
"version": "v2.19.0",
"date": "2025-07-27T22:25:00Z"
},
{
"name": "PCJones/UmlautAdaptarr",
"version": "v0.7.3",
@@ -1354,6 +1349,11 @@
"version": "2025-05-07-r1",
"date": "2025-05-07T12:18:42Z"
},
{
"name": "TechnitiumSoftware/DnsServer",
"version": "v13.6.0",
"date": "2025-04-26T10:21:12Z"
},
{
"name": "dotnetfactory/fluid-calendar",
"version": "v1.4.0",

View File

@@ -78,7 +78,6 @@ JWT_SECRET_KEY=$JWT_SECRET_KEY
NODE_ENV=production
PORT=3333
HOST=0.0.0.0
TZ=Etc/UTC
EOF
if [[ -n "${COINGECKO_DEMO_KEY:-}" ]]; then

View File

@@ -40,9 +40,9 @@ NODE_ENV=production
# OIDC_ISSUER=<your-oidc-issuer-url>
# OIDC_CLIENT_ID=<oidc-client-id>
# APP_URL=<https://app.domain.tld>
# SSO_FALLBACK_LOCAL=yes
# OIDC_CLIENT_SECRET=your_client_secret
# OIDC_ADMIN_GROUPS=admins
# SSO_FALLBACK_LOCAL=yes # Allow both SSO and normal login
# OIDC_CLIENT_SECRET=your_client_secret # Enable confidential client mode with client authentication
# OIDC_ADMIN_GROUPS=admins # Map provider groups to admin role
EOF
msg_ok "Installed ${APPLICATION}"

View File

@@ -45,15 +45,15 @@ MM_DIR="/opt/mm"
MEDIA_DIR="${MM_DIR}/media"
export CONFIG_DIR="${MM_DIR}/config"
export FRONTEND_FILES_DIR="${MM_DIR}/web/build"
export BASE_PATH=""
export PUBLIC_VERSION=""
export PUBLIC_API_URL=""
export BASE_PATH="/web"
export BASE_PATH=""
cd /opt/mediamanager/web
$STD npm ci --no-fund --no-audit
$STD npm ci
$STD npm run build
mkdir -p {"$MM_DIR"/web,"$MEDIA_DIR","$CONFIG_DIR"}
cp -r build "$FRONTEND_FILES_DIR"
export BASE_PATH=""
export VIRTUAL_ENV="${MM_DIR}/venv"
cd /opt/mediamanager
cp -r {media_manager,alembic*} "$MM_DIR"
@@ -81,9 +81,8 @@ cat <<EOF >"$MM_DIR"/start.sh
export CONFIG_DIR="$CONFIG_DIR"
export FRONTEND_FILES_DIR="$FRONTEND_FILES_DIR"
export LOG_FILE="$CONFIG_DIR/media_manager.log"
export BASE_PATH=""
cd $MM_DIR
cd "$MM_DIR"
source ./venv/bin/activate
/usr/local/bin/uv run alembic upgrade head
/usr/local/bin/uv run fastapi run ./media_manager/main.py --port 8000

View File

@@ -20,7 +20,13 @@ else
MONGO_VERSION="7.0" setup_mongodb
fi
sed -i 's/bindIp: 127.0.0.1/bindIp: 0.0.0.0/' /etc/mongod.conf
msg_ok "Installed MongoDB $MONGO_VERSION"
motd_ssh
customize
cleanup_lxc
msg_info "Cleaning up"
$STD apt -y autoremove
$STD apt -y autoclean
$STD apt -y clean
msg_ok "Cleaned"

View File

@@ -16,9 +16,7 @@ update_os
msg_info "Installing Dependencies"
$STD apt install -y \
ca-certificates \
build-essential \
python3 \
python3-setuptools
build-essential
msg_ok "Installed Dependencies"
NODE_VERSION="22" setup_nodejs

View File

@@ -14,7 +14,7 @@ network_check
update_os
msg_info "Installing Dependencies"
$STD apt install -y python3-lxml wkhtmltopdf
$STD apt install -y python3-lxml
curl -fsSL "http://archive.ubuntu.com/ubuntu/pool/universe/l/lxml-html-clean/python3-lxml-html-clean_0.1.1-1_all.deb" -o /opt/python3-lxml-html-clean.deb
$STD dpkg -i /opt/python3-lxml-html-clean.deb
msg_ok "Installed Dependencies"

View File

@@ -17,11 +17,7 @@ msg_info "Installing Dependencies"
$STD apt install -y ffmpeg
msg_ok "Installed Dependencies"
PYTHON_VERSION="3.12" setup_uv
msg_info "Installing Open WebUI"
$STD uv tool install --python 3.12 open-webui[all]
msg_ok "Installed Open WebUI"
USE_UVX="YES" PYTHON_VERSION="3.12" setup_uv
read -r -p "${TAB3}Would you like to add Ollama? <y/N> " prompt
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
@@ -60,7 +56,7 @@ After=network.target
Type=simple
EnvironmentFile=-/root/.env
Environment=DATA_DIR=/root/.open-webui
ExecStart=/root/.local/bin/open-webui serve
ExecStart=/usr/local/bin/uvx --python 3.12 open-webui@latest serve
WorkingDirectory=/root
Restart=on-failure
RestartSec=5
@@ -74,4 +70,9 @@ msg_ok "Created Service"
motd_ssh
customize
cleanup_lxc
msg_info "Cleaning up"
$STD apt -y autoremove
$STD apt -y autoclean
$STD apt -y clean
msg_ok "Cleaned"

View File

@@ -22,16 +22,11 @@ msg_ok "Installed Dependencies"
NODE_VERSION="22" setup_nodejs
fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
fetch_and_deploy_gh_release "traefik" "traefik/traefik" "prebuild" "latest" "/usr/bin" "traefik_v*_linux_amd64.tar.gz"
read -rp "${TAB3}Enter your Pangolin URL (ex: https://pangolin.example.com): " pango_url
read -rp "${TAB3}Enter your email address: " pango_email
msg_info "Setup Pangolin"
IP_ADDR=$(hostname -I | awk '{print $1}')
SECRET_KEY=$(openssl rand -base64 48 | tr -dc 'A-Za-z0-9' | head -c 32)
cd /opt/pangolin
mkdir -p /opt/pangolin/config/{traefik,db,letsencrypt,logs}
$STD npm ci
$STD npm run set:sqlite
$STD npm run set:oss
@@ -51,129 +46,30 @@ mkdir -p /var/config
cat <<EOF >/opt/pangolin/config/config.yml
app:
dashboard_url: "$pango_url"
dashboard_url: http://$IP_ADDR:3002
log_level: debug
domains:
domain1:
base_domain: "$pango_url"
cert_resolver: "letsencrypt"
base_domain: example.com
server:
secret: "$SECRET_KEY"
secret: $SECRET_KEY
gerbil:
base_endpoint: "$pango_url"
base_endpoint: example.com
orgs:
block_size: 24
subnet_group: 100.90.137.0/20
flags:
require_email_verification: false
disable_signup_without_invite: false
disable_user_create_org: false
EOF
cat <<EOF >/opt/pangolin/config/traefik/traefik_config.yml
api:
insecure: true
dashboard: true
providers:
http:
endpoint: "http://$IP_ADDR:3001/api/v1/traefik-config"
pollInterval: "5s"
file:
filename: "/opt/pangolin/config/traefik/dynamic_config.yml"
experimental:
plugins:
badger:
moduleName: "github.com/fosrl/badger"
version: "v1.2.0"
log:
level: "INFO"
format: "common"
certificatesResolvers:
letsencrypt:
acme:
httpChallenge:
entryPoint: web
email: $pango_email
storage: "/opt/pangolin/config/letsencrypt/acme.json"
caServer: "https://acme-v02.api.letsencrypt.org/directory"
entryPoints:
web:
address: ":80"
websecure:
address: ":443"
transport:
respondingTimeouts:
readTimeout: "30m"
http:
tls:
certResolver: "letsencrypt"
serversTransport:
insecureSkipVerify: true
ping:
entryPoint: "web"
EOF
cat <<EOF >/opt/pangolin/config/traefik/dynamic_config.yml
http:
middlewares:
redirect-to-https:
redirectScheme:
scheme: https
routers:
# HTTP to HTTPS redirect router
main-app-router-redirect:
rule: "Host(\`$pango_url\`)"
service: next-service
entryPoints:
- web
middlewares:
- redirect-to-https
# Next.js router (handles everything except API and WebSocket paths)
next-router:
rule: "Host(\`$pango_url\`) && !PathPrefix(\`/api/v1\`)"
service: next-service
entryPoints:
- websecure
tls:
certResolver: letsencrypt
# API router (handles /api/v1 paths)
api-router:
rule: "Host(\`$pango_url\`) && PathPrefix(\`/api/v1\`)"
service: api-service
entryPoints:
- websecure
tls:
certResolver: letsencrypt
# WebSocket router
ws-router:
rule: "Host(\`$pango_url\`)"
service: api-service
entryPoints:
- websecure
tls:
certResolver: letsencrypt
services:
next-service:
loadBalancer:
servers:
- url: "http://$IP_ADDR:3002"
api-service:
loadBalancer:
servers:
- url: "http://$IP_ADDR:3000"
disable_signup_without_invite: true
disable_user_create_org: true
allow_raw_resources: true
enable_integration_api: true
enable_clients: true
EOF
$STD npm run db:sqlite:generate
$STD npm run db:sqlite:push
@@ -226,21 +122,6 @@ RestartSec=10
WantedBy=multi-user.target
EOF
systemctl enable -q --now gerbil
cat <<'EOF' >/etc/systemd/system/traefik.service
[Unit]
Description=Traefik is an open-source Edge Router that makes publishing your services a fun and easy experience
[Service]
Type=notify
ExecStart=/usr/bin/traefik --configFile=/opt/pangolin/config/traefik/traefik_config.yml
Restart=on-failure
ExecReload=/bin/kill -USR1 \$MAINPID
[Install]
WantedBy=multi-user.target
EOF
systemctl enable -q --now traefik
msg_ok "Created Services"
motd_ssh

View File

@@ -18,7 +18,7 @@ curl -fsSL "https://packages.microsoft.com/config/debian/12/packages-microsoft-p
$STD dpkg -i packages-microsoft-prod.deb
rm -rf packages-microsoft-prod.deb
$STD apt update
$STD apt install -y aspnetcore-runtime-9.0
$STD apt install -y aspnetcore-runtime-8.0
msg_ok "Installed ASP.NET Core Runtime"
RELEASE=$(curl -fsSL https://technitium.com/dns/ | grep -oP 'Version \K[\d.]+')
@@ -26,7 +26,6 @@ msg_info "Installing Technitium DNS"
mkdir -p /opt/technitium/dns
curl -fsSL "https://download.technitium.com/dns/DnsServerPortable.tar.gz" -o /opt/DnsServerPortable.tar.gz
$STD tar zxvf /opt/DnsServerPortable.tar.gz -C /opt/technitium/dns/
rm -f /opt/DnsServerPortable.tar.gz
echo "${RELEASE}" >~/.technitium
msg_ok "Installed Technitium DNS"
@@ -37,4 +36,10 @@ msg_ok "Service created"
motd_ssh
customize
cleanup_lxc
msg_info "Cleaning up"
rm -f /opt/DnsServerPortable.tar.gz
$STD apt -y autoremove
$STD apt -y autoclean
$STD apt -y clean
msg_ok "Cleaned"

View File

@@ -370,7 +370,6 @@ run_container_safe() {
cleanup_lxc() {
msg_info "Cleaning up"
if is_alpine; then
$STD apk cache clean || true
rm -rf /var/cache/apk/*
@@ -380,38 +379,36 @@ cleanup_lxc() {
$STD apt -y clean || true
fi
# Clear temp artifacts (keep sockets/FIFOs; ignore errors)
rm -rf /tmp/* /var/tmp/*
# Remove temp files created by mktemp/tempfile
find /tmp /var/tmp -type f -name 'tmp*' -delete 2>/dev/null || true
find /tmp /var/tmp -type f -name 'tempfile*' -delete 2>/dev/null || true
# Truncate writable log files silently (permission errors ignored)
if command -v truncate >/dev/null 2>&1; then
find /var/log -type f -writable -print0 2>/dev/null |
xargs -0 -n1 truncate -s 0 2>/dev/null || true
fi
find /var/log -type f -exec truncate -s 0 {} +
# Python pip
if command -v pip &>/dev/null; then $STD pip cache purge || true; fi
if command -v pip &>/dev/null; then pip cache purge || true; fi
# Python uv
if command -v uv &>/dev/null; then $STD uv cache clear || true; fi
if command -v uv &>/dev/null; then uv cache clear || true; fi
# Node.js npm
if command -v npm &>/dev/null; then $STD npm cache clean --force || true; fi
if command -v npm &>/dev/null; then npm cache clean --force || true; fi
# Node.js yarn
if command -v yarn &>/dev/null; then $STD yarn cache clean || true; fi
if command -v yarn &>/dev/null; then yarn cache clean || true; fi
# Node.js pnpm
if command -v pnpm &>/dev/null; then $STD pnpm store prune || true; fi
if command -v pnpm &>/dev/null; then pnpm store prune || true; fi
# Go
if command -v go &>/dev/null; then $STD go clean -cache -modcache || true; fi
if command -v go &>/dev/null; then go clean -cache -modcache || true; fi
# Rust cargo
if command -v cargo &>/dev/null; then $STD cargo clean || true; fi
if command -v cargo &>/dev/null; then cargo clean || true; fi
# Ruby gem
if command -v gem &>/dev/null; then $STD gem cleanup || true; fi
if command -v gem &>/dev/null; then gem cleanup || true; fi
# Composer (PHP)
if command -v composer &>/dev/null; then $STD composer clear-cache || true; fi
if command -v composer &>/dev/null; then composer clear-cache || true; fi
if command -v journalctl &>/dev/null; then
$STD journalctl --rotate || true
$STD journalctl --vacuum-time=10m || true
$STD journalctl --rotate
$STD journalctl --vacuum-time=10m
fi
msg_ok "Cleaned"
}

View File

@@ -72,23 +72,15 @@ stop_all_services() {
local service_patterns=("$@")
for pattern in "${service_patterns[@]}"; do
# Find all matching services (use || true to avoid pipeline failures)
local services
services=$(systemctl list-units --type=service --all 2>/dev/null |
grep -oE "${pattern}[^ ]*\.service" 2>/dev/null |
sort -u 2>/dev/null || true)
# Only process if we found any services
if [[ -n "$services" ]]; then
while IFS= read -r service; do
[[ -z "$service" ]] && continue
# Find all matching services
systemctl list-units --type=service --all 2>/dev/null |
grep -oE "${pattern}[^ ]*\.service" |
sort -u |
while read -r service; do
$STD systemctl stop "$service" 2>/dev/null || true
$STD systemctl disable "$service" 2>/dev/null || true
done <<<"$services"
fi
done
return 0
done
}
# ------------------------------------------------------------------------------
@@ -435,12 +427,7 @@ manage_tool_repository() {
suite=$(get_fallback_suite "$distro_id" "$distro_codename" "$repo_url/$distro_id")
# Setup new repository using deb822 format
setup_deb822_repo \
"mariadb" \
"$gpg_key_url" \
"$repo_url/$distro_id" \
"$suite" \
"main"
setup_deb822_repo "mariadb" "$gpg_key_url" "$repo_url/$distro_id" "$suite" "main" "amd64 arm64" || return 1
return 0
;;
@@ -517,7 +504,7 @@ Types: deb
URIs: ${repo_url}
Suites: ${suite}/mongodb-org/${version}
Components: ${repo_component}
Architectures: $(dpkg --print-architecture)
Architectures: amd64 arm64
Signed-By: /etc/apt/keyrings/mongodb-server-${version}.gpg
EOF
return 0
@@ -549,7 +536,7 @@ Types: deb
URIs: $repo_url
Suites: nodistro
Components: main
Architectures: $(dpkg --print-architecture)
Architectures: amd64 arm64
Signed-By: /etc/apt/keyrings/nodesource.gpg
EOF
return 0
@@ -583,7 +570,7 @@ Types: deb
URIs: https://packages.sury.org/php
Suites: $distro_codename
Components: main
Architectures: $(dpkg --print-architecture)
Architectures: amd64 arm64
Signed-By: /usr/share/keyrings/deb.sury.org-php.gpg
EOF
return 0
@@ -614,7 +601,7 @@ Types: deb
URIs: http://apt.postgresql.org/pub/repos/apt
Suites: $distro_codename-pgdg
Components: main
Architectures: $(dpkg --print-architecture)
Architectures: amd64 arm64
Signed-By: /etc/apt/keyrings/postgresql.gpg
EOF
return 0
@@ -1206,8 +1193,8 @@ ensure_apt_working() {
}
# ------------------------------------------------------------------------------
# Standardized deb822 repository setup (with optional Architectures)
# Always runs apt update after repo creation to ensure package availability
# Standardized deb822 repository setup
# Validates all parameters and fails safely if any are empty
# ------------------------------------------------------------------------------
setup_deb822_repo() {
local name="$1"
@@ -1215,40 +1202,56 @@ setup_deb822_repo() {
local repo_url="$3"
local suite="$4"
local component="${5:-main}"
local architectures="${6-}" # optional
local architectures="${6:-amd64 arm64}"
# Validate required parameters
if [[ -z "$name" || -z "$gpg_url" || -z "$repo_url" || -z "$suite" ]]; then
msg_error "setup_deb822_repo: missing required parameters (name=$name repo=$repo_url suite=$suite)"
msg_error "setup_deb822_repo: missing required parameters (name=$name, gpg=$gpg_url, repo=$repo_url, suite=$suite)"
return 1
fi
# Cleanup
# Cleanup old configs for this app
cleanup_old_repo_files "$name"
# Cleanup any orphaned .sources files from other apps
cleanup_orphaned_sources
# Ensure keyring directory exists
mkdir -p /etc/apt/keyrings || {
msg_error "Failed to create /etc/apt/keyrings"
msg_error "Failed to create /etc/apt/keyrings directory"
return 1
}
# Import GPG
curl -fsSL "$gpg_url" | gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" || {
msg_error "Failed to import GPG key for ${name}"
# Download GPG key (with --yes to avoid interactive prompts)
curl -fsSL "$gpg_url" | gpg --dearmor --yes -o "/etc/apt/keyrings/${name}.gpg" 2>/dev/null || {
msg_error "Failed to download or import GPG key for ${name} from $gpg_url"
return 1
}
# Write deb822
{
echo "Types: deb"
echo "URIs: $repo_url"
echo "Suites: $suite"
echo "Components: $component"
[[ -n "$architectures" ]] && echo "Architectures: $architectures"
echo "Signed-By: /etc/apt/keyrings/${name}.gpg"
} >/etc/apt/sources.list.d/${name}.sources
# Create deb822 sources file
cat <<EOF >/etc/apt/sources.list.d/${name}.sources
Types: deb
URIs: $repo_url
Suites: $suite
Components: $component
Architectures: $architectures
Signed-By: /etc/apt/keyrings/${name}.gpg
EOF
# Use cached apt update
local apt_cache_file="/var/cache/apt-update-timestamp"
local current_time=$(date +%s)
local last_update=0
if [[ -f "$apt_cache_file" ]]; then
last_update=$(cat "$apt_cache_file" 2>/dev/null || echo 0)
fi
# For repo changes, always update but respect short-term cache (30s)
if ((current_time - last_update > 30)); then
$STD apt update
echo "$current_time" >"$apt_cache_file"
fi
}
# ------------------------------------------------------------------------------
@@ -1407,7 +1410,7 @@ verify_gpg_fingerprint() {
}
# ==============================================================================
# INSTALL FUNCTIONS
# EXISTING FUNCTIONS
# ==============================================================================
# ------------------------------------------------------------------------------
@@ -1509,7 +1512,7 @@ check_for_gh_release() {
return 0
fi
msg_ok "No update available: ${app} is already on pinned version (${current})"
msg_error "No update available: ${app} is not installed!"
return 1
fi
@@ -2777,7 +2780,8 @@ function setup_java() {
"https://packages.adoptium.net/artifactory/api/gpg/key/public" \
"https://packages.adoptium.net/artifactory/deb" \
"$SUITE" \
"main"
"main" \
"amd64 arm64"
fi
# Get currently installed version
@@ -3052,85 +3056,6 @@ setup_mariadb() {
msg_ok "Setup MariaDB $MARIADB_VERSION"
}
# ------------------------------------------------------------------------------
# Creates MariaDB database with user, charset and optional extra grants/modes
#
# Description:
# - Generates password if empty
# - Creates database with utf8mb4_unicode_ci
# - Creates local user with password
# - Grants full access to this DB
# - Optional: apply extra GRANT statements (comma-separated)
# - Optional: apply custom GLOBAL sql_mode
# - Saves credentials to file
# - Exports variables for use in calling script
#
# Usage:
# MARIADB_DB_NAME="myapp_db" MARIADB_DB_USER="myapp_user" setup_mariadb_db
# MARIADB_DB_NAME="domain_monitor" MARIADB_DB_USER="domainmonitor" setup_mariadb_db
# MARIADB_DB_NAME="myapp" MARIADB_DB_USER="myapp" MARIADB_DB_EXTRA_GRANTS="GRANT SELECT ON \`mysql\`.\`time_zone_name\`" setup_mariadb_db
# MARIADB_DB_NAME="ghostfolio" MARIADB_DB_USER="ghostfolio" MARIADB_DB_SQL_MODE="" setup_mariadb_db
#
# Variables:
# MARIADB_DB_NAME - Database name (required)
# MARIADB_DB_USER - Database user (required)
# MARIADB_DB_PASS - User password (optional, auto-generated if empty)
# MARIADB_DB_EXTRA_GRANTS - Comma-separated GRANT statements (optional)
# Example: "GRANT SELECT ON \`mysql\`.\`time_zone_name\`"
# MARIADB_DB_SQL_MODE - Optional global sql_mode override (e.g. "", "STRICT_TRANS_TABLES")
# MARIADB_DB_CREDS_FILE - Credentials file path (optional, default: ~/${APPLICATION}.creds)
#
# Exports:
# MARIADB_DB_NAME, MARIADB_DB_USER, MARIADB_DB_PASS
# ------------------------------------------------------------------------------
function setup_mariadb_db() {
if [[ -z "${MARIADB_DB_NAME:-}" || -z "${MARIADB_DB_USER:-}" ]]; then
msg_error "MARIADB_DB_NAME and MARIADB_DB_USER must be set before calling setup_mariadb_db"
return 1
fi
if [[ -z "${MARIADB_DB_PASS:-}" ]]; then
MARIADB_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
fi
msg_info "Setting up MariaDB Database"
$STD mariadb -u root -e "CREATE DATABASE \`$MARIADB_DB_NAME\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
$STD mariadb -u root -e "CREATE USER '$MARIADB_DB_USER'@'localhost' IDENTIFIED BY '$MARIADB_DB_PASS';"
$STD mariadb -u root -e "GRANT ALL ON \`$MARIADB_DB_NAME\`.* TO '$MARIADB_DB_USER'@'localhost';"
# Optional extra grants
if [[ -n "${MARIADB_DB_EXTRA_GRANTS:-}" ]]; then
IFS=',' read -ra G_LIST <<<"${MARIADB_DB_EXTRA_GRANTS:-}"
for g in "${G_LIST[@]}"; do
g=$(echo "$g" | xargs)
$STD mariadb -u root -e "$g TO '$MARIADB_DB_USER'@'localhost';"
done
fi
# Optional sql_mode override
if [[ -n "${MARIADB_DB_SQL_MODE:-}" ]]; then
$STD mariadb -u root -e "SET GLOBAL sql_mode='${MARIADB_DB_SQL_MODE:-}';"
fi
$STD mariadb -u root -e "FLUSH PRIVILEGES;"
local CREDS_FILE="${MARIADB_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
{
echo "MariaDB Credentials"
echo "Database: $MARIADB_DB_NAME"
echo "User: $MARIADB_DB_USER"
echo "Password: $MARIADB_DB_PASS"
} >>"$CREDS_FILE"
msg_ok "Set up MariaDB Database"
export MARIADB_DB_NAME
export MARIADB_DB_USER
export MARIADB_DB_PASS
}
# ------------------------------------------------------------------------------
# Installs or updates MongoDB to specified major version.
#
@@ -3308,12 +3233,12 @@ function setup_mysql() {
return 1
fi
cat >/etc/apt/sources.list.d/mysql.sources <<EOF
cat >/etc/apt/sources.list.d/mysql.sources <<'EOF'
Types: deb
URIs: https://repo.mysql.com/apt/debian/
Suites: bookworm
Components: mysql-8.4-lts
Architectures: $(dpkg --print-architecture)
Architectures: amd64 arm64
Signed-By: /etc/apt/keyrings/mysql.gpg
EOF
@@ -3821,7 +3746,8 @@ function setup_postgresql() {
"https://www.postgresql.org/media/keys/ACCC4CF8.asc" \
"https://apt.postgresql.org/pub/repos/apt" \
"$SUITE" \
"main"
"main" \
"amd64 arm64"
if ! $STD apt update; then
msg_error "APT update failed for PostgreSQL repository"
@@ -3890,103 +3816,6 @@ function setup_postgresql() {
fi
}
# ------------------------------------------------------------------------------
# Creates PostgreSQL database with user and optional extensions
#
# Description:
# - Creates PostgreSQL role with login and password
# - Creates database with UTF8 encoding and template0
# - Installs optional extensions (postgis, pgvector, etc.)
# - Configures ALTER ROLE settings for Django/Rails compatibility
# - Saves credentials to file
# - Exports variables for use in calling script
#
# Usage:
# PG_DB_NAME="myapp_db" PG_DB_USER="myapp_user" setup_postgresql_db
# PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_EXTENSIONS="pgvector" setup_postgresql_db
# PG_DB_NAME="ghostfolio" PG_DB_USER="ghostfolio" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
# PG_DB_NAME="adventurelog" PG_DB_USER="adventurelog" PG_DB_EXTENSIONS="postgis" setup_postgresql_db
#
# Variables:
# PG_DB_NAME - Database name (required)
# PG_DB_USER - Database user (required)
# PG_DB_PASS - Database password (optional, auto-generated if empty)
# PG_DB_EXTENSIONS - Comma-separated list of extensions (optional, e.g. "postgis,pgvector")
# PG_DB_GRANT_SUPERUSER - Grant SUPERUSER privilege (optional, "true" to enable, security risk!)
# PG_DB_SCHEMA_PERMS - Grant schema-level permissions (optional, "true" to enable)
# PG_DB_SKIP_ALTER_ROLE - Skip ALTER ROLE settings (optional, "true" to skip)
# PG_DB_CREDS_FILE - Credentials file path (optional, default: ~/${APPLICATION}.creds)
#
# Exports:
# PG_DB_NAME, PG_DB_USER, PG_DB_PASS - For use in calling script
# ------------------------------------------------------------------------------
function setup_postgresql_db() {
# Validation
if [[ -z "${PG_DB_NAME:-}" || -z "${PG_DB_USER:-}" ]]; then
msg_error "PG_DB_NAME and PG_DB_USER must be set before calling setup_postgresql_db"
return 1
fi
# Generate password if not provided
if [[ -z "${PG_DB_PASS:-}" ]]; then
PG_DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
fi
msg_info "Setting up PostgreSQL Database"
$STD sudo -u postgres psql -c "CREATE ROLE $PG_DB_USER WITH LOGIN PASSWORD '$PG_DB_PASS';"
$STD sudo -u postgres psql -c "CREATE DATABASE $PG_DB_NAME WITH OWNER $PG_DB_USER ENCODING 'UTF8' TEMPLATE template0;"
# Install extensions (comma-separated)
if [[ -n "${PG_DB_EXTENSIONS:-}" ]]; then
IFS=',' read -ra EXT_LIST <<<"${PG_DB_EXTENSIONS:-}"
for ext in "${EXT_LIST[@]}"; do
ext=$(echo "$ext" | xargs) # Trim whitespace
$STD sudo -u postgres psql -d "$PG_DB_NAME" -c "CREATE EXTENSION IF NOT EXISTS $ext;"
done
fi
# ALTER ROLE settings for Django/Rails compatibility (unless skipped)
if [[ "${PG_DB_SKIP_ALTER_ROLE:-}" != "true" ]]; then
$STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET client_encoding TO 'utf8';"
$STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET default_transaction_isolation TO 'read committed';"
$STD sudo -u postgres psql -c "ALTER ROLE $PG_DB_USER SET timezone TO 'UTC';"
fi
# Schema permissions (if requested)
if [[ "${PG_DB_SCHEMA_PERMS:-}" == "true" ]]; then
$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $PG_DB_NAME TO $PG_DB_USER;"
$STD sudo -u postgres psql -c "ALTER USER $PG_DB_USER CREATEDB;"
$STD sudo -u postgres psql -d "$PG_DB_NAME" -c "GRANT ALL ON SCHEMA public TO $PG_DB_USER;"
$STD sudo -u postgres psql -d "$PG_DB_NAME" -c "GRANT CREATE ON SCHEMA public TO $PG_DB_USER;"
$STD sudo -u postgres psql -d "$PG_DB_NAME" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO $PG_DB_USER;"
$STD sudo -u postgres psql -d "$PG_DB_NAME" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO $PG_DB_USER;"
fi
# Superuser grant (if requested - WARNING!)
if [[ "${PG_DB_GRANT_SUPERUSER:-}" == "true" ]]; then
msg_warn "Granting SUPERUSER privilege (security risk!)"
$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $PG_DB_NAME to $PG_DB_USER;"
$STD sudo -u postgres psql -c "ALTER USER $PG_DB_USER WITH SUPERUSER;"
fi
# Save credentials
local CREDS_FILE="${PG_DB_CREDS_FILE:-${HOME}/${APPLICATION}.creds}"
{
echo "PostgreSQL Credentials"
echo "Database: $PG_DB_NAME"
echo "User: $PG_DB_USER"
echo "Password: $PG_DB_PASS"
} >>"$CREDS_FILE"
msg_ok "Set up PostgreSQL Database"
# Export for use in calling script
export PG_DB_NAME
export PG_DB_USER
export PG_DB_PASS
}
# ------------------------------------------------------------------------------
# Installs rbenv and ruby-build, installs Ruby and optionally Rails.
#
@@ -4267,7 +4096,8 @@ function setup_clickhouse() {
"https://packages.clickhouse.com/rpm/lts/repodata/repomd.xml.key" \
"https://packages.clickhouse.com/deb" \
"stable" \
"main"
"main" \
"amd64 arm64"
# Install packages with retry logic
export DEBIAN_FRONTEND=noninteractive