Update CHANGELOG.md

Pangolin: Add Traefik proxy (#8952 )
* Add Traefik * Update * Update
2025-11-07 20:02:49 +00:00 · 2025-11-07 13:59:49 +00:00 · 2025-11-07 14:59:34 +01:00 · 2025-11-07 13:06:11 +01:00 · 2025-11-07 11:21:48 +00:00 · 2025-11-07 12:21:23 +01:00
21 changed files with 603 additions and 277 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,12 +10,33 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.

+## 2025-11-07
+
+### 🆕 New Scripts
+
+  - infisical ([#8926](https://github.com/community-scripts/ProxmoxVE/pull/8926))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Update script URLs to ProxmoxVE repository [@MickLesk](https://github.com/MickLesk) ([#8946](https://github.com/community-scripts/ProxmoxVE/pull/8946))
+    - tools.func: fix amd64 arm64 mismatch [@MickLesk](https://github.com/MickLesk) ([#8943](https://github.com/community-scripts/ProxmoxVE/pull/8943))
+    - ghostfolio: refactor CoinGecko key prompts in installer [@MickLesk](https://github.com/MickLesk) ([#8935](https://github.com/community-scripts/ProxmoxVE/pull/8935))
+    - flaresolverr: pin release to 3.4.3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#8937](https://github.com/community-scripts/ProxmoxVE/pull/8937))
+
+  - #### ✨ New Features
+
+    - Pangolin: Add Traefik proxy [@tremor021](https://github.com/tremor021) ([#8952](https://github.com/community-scripts/ProxmoxVE/pull/8952))
+
 ## 2025-11-06

 ### 🚀 Updated Scripts

  - #### 🐞 Bug Fixes

+    - OpenProject: Remove duplicate server_path_prefix configuration [@tremor021](https://github.com/tremor021) ([#8919](https://github.com/community-scripts/ProxmoxVE/pull/8919))
+    - Grist: Fix change directory to /opt/grist before build steps [@tremor021](https://github.com/tremor021) ([#8913](https://github.com/community-scripts/ProxmoxVE/pull/8913))
    - Jotty hotfix: SSO_FALLBACK_LOCAL value [@vhsdream](https://github.com/vhsdream) ([#8907](https://github.com/community-scripts/ProxmoxVE/pull/8907))
    - npm: add Debian version check to update script [@MickLesk](https://github.com/MickLesk) ([#8901](https://github.com/community-scripts/ProxmoxVE/pull/8901))

@@ -23,6 +44,10 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

    - MongoDB: install script now use setup_mongodb [@MickLesk](https://github.com/MickLesk) ([#8897](https://github.com/community-scripts/ProxmoxVE/pull/8897))

+  - #### 🔧 Refactor
+
+    - Refactor: Graylog [@tremor021](https://github.com/tremor021) ([#8912](https://github.com/community-scripts/ProxmoxVE/pull/8912))
+
 ## 2025-11-05

 ### 🚀 Updated Scripts
--- a/ct/flaresolverr.sh
+++ b/ct/flaresolverr.sh
@@ -33,13 +33,13 @@ function update_script() {
    msg_error "You must upgrade your LXC to Debian Trixie before updating."
    exit
  fi
-  if check_for_gh_release "flaresolverr" "FlareSolverr/FlareSolverr"; then
+  if check_for_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "3.4.3"; then
    msg_info "Stopping service"
    systemctl stop flaresolverr
    msg_ok "Stopped service"

    rm -rf /opt/flaresolverr
-    fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
+    fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "v3.4.3" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"

    msg_info "Starting service"
    systemctl start flaresolverr
--- a/ct/graylog.sh
+++ b/ct/graylog.sh
@@ -11,7 +11,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-8192}"
 var_disk="${var_disk:-30}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"

 header_info "$APP"
@@ -28,15 +28,32 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
+
  msg_info "Stopping Service"
  systemctl stop graylog-datanode
  systemctl stop graylog-server
  msg_info "Stopped Service"

-  msg_info "Updating $APP"
-  $STD apt-get update
-  $STD apt-get upgrade -y
-  msg_ok "Updated $APP"
+  CURRENT_VERSION=$(apt list --installed 2>/dev/null | grep graylog-server | grep -oP '\d+\.\d+\.\d+')
+
+  if dpkg --compare-versions "$CURRENT_VERSION" lt "6.3"; then
+    MONGO_VERSION="8.0" setup_mongodb
+
+    msg_info "Updating Graylog"
+    $STD apt update
+    $STD apt upgrade -y
+    curl -fsSL "https://packages.graylog2.org/repo/packages/graylog-7.0-repository_latest.deb" -o "graylog-7.0-repository_latest.deb"
+    $STD dpkg -i graylog-7.0-repository_latest.deb
+    $STD apt update
+    $STD apt install -y graylog-server graylog-datanode
+    rm -f graylog-7.0-repository_latest.deb
+    msg_ok "Updated Graylog"
+  elif dpkg --compare-versions "$CURRENT_VERSION" ge "7.0"; then
+    msg_info "Updating Graylog"
+    $STD apt update
+    $STD apt upgrade -y
+    msg_ok "Updated Graylog"
+  fi

  msg_info "Starting Service"
  systemctl start graylog-datanode
--- a/ct/headers/infisical
+++ b/ct/headers/infisical
@@ -0,0 +1,6 @@
+    ____      _____      _            __
+   /  _/___  / __(_)____(_)________ _/ /
+   / // __ \/ /_/ / ___/ / ___/ __ `/ / 
+ _/ // / / / __/ (__  ) / /__/ /_/ / /  
+/___/_/ /_/_/ /_/____/_/\___/\__,_/_/   
+                                        
--- a/ct/infisical.sh
+++ b/ct/infisical.sh
@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://infisical.com/
+
+APP="Infisical"
+var_tags="${var_tags:-auth}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-6}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /etc/infisical ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Stopping service"
+  $STD infisical-ctl stop
+  msg_ok "Service stopped"
+
+  msg_info "Creating backup"
+  DB_PASS=$(grep -Po '(?<=^Database Password:\s).*' ~/infisical.creds | head -n1)
+  PGPASSWORD=$DB_PASS pg_dump -U infisical -h localhost -d infisical_db > /opt/infisical_backup.sql
+  msg_ok "Created backup"
+
+  msg_info "Updating Infisical"
+  $STD apt update
+  $STD apt install -y infisical-core
+  $STD infisical-ctl reconfigure
+  msg_ok "Updated Infisical"
+
+  msg_info "Starting service"
+  infisical-ctl start
+  msg_ok "Started service"
+  msg_ok "Updated successfully"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/ct/livebook.sh
+++ b/ct/livebook.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/refs/heads/main/misc/build.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/refs/heads/main/misc/build.func)
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: dkuku
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/pangolin.sh
+++ b/ct/pangolin.sh
@@ -76,4 +76,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3002${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://<YOUR_PANGOLIN_URL>${CL}"
--- a/ct/sonarqube.sh
+++ b/ct/sonarqube.sh
@@ -39,6 +39,7 @@ function update_script() {
    msg_ok "Backup created"

    msg_info "Installing sonarqube"
+    temp_file=$(mktemp)
    RELEASE=$(curl -fsSL https://api.github.com/repos/SonarSource/sonarqube/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
    curl -fsSL "https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-${RELEASE}.zip" -o $temp_file
    unzip -q "$temp_file" -d /opt
--- a/frontend/public/json/graylog.json
+++ b/frontend/public/json/graylog.json
@@ -23,7 +23,7 @@
        "ram": 8192,
        "hdd": 30,
        "os": "debian",
-                "version": "12"
+        "version": "13"
      }
    }
  ],
--- a/frontend/public/json/infisical.json
+++ b/frontend/public/json/infisical.json
@@ -0,0 +1,35 @@
+{
+  "name": "Infisical",
+  "slug": "infisical",
+  "categories": [
+    6
+  ],
+  "date_created": "2025-11-07",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8080,
+  "documentation": "https://infisical.com/docs/documentation/getting-started/overview",
+  "config_path": "/etc/infisical/infisical.rb",
+  "website": "https://infisical.com/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/infisical.webp",
+  "description": "Secrets, certificates, and access management on autopilot. All-in-one platform to securely manage application secrets, certificates, SSH keys, and configurations across your team and infrastructure.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/infisical.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 6,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}
--- a/frontend/public/json/pangolin.json
+++ b/frontend/public/json/pangolin.json
@@ -8,7 +8,7 @@
  "type": "ct",
  "updateable": true,
  "privileged": false,
-  "interface_port": 3002,
+  "interface_port": 443,
  "documentation": "https://docs.pangolin.net/",
  "config_path": "/opt/pangolin/config/config.yml",
  "website": "https://pangolin.net/",
--- a/frontend/public/json/versions.json
+++ b/frontend/public/json/versions.json
@@ -1,4 +1,134 @@
 [
+  {
+    "name": "fuma-nama/fumadocs",
+    "version": "fumadocs-core@16.0.8",
+    "date": "2025-11-07T11:23:47Z"
+  },
+  {
+    "name": "element-hq/synapse",
+    "version": "v1.142.0rc4",
+    "date": "2025-11-07T11:19:40Z"
+  },
+  {
+    "name": "Paymenter/Paymenter",
+    "version": "v1.4.3",
+    "date": "2025-11-07T11:07:17Z"
+  },
+  {
+    "name": "cloudflare/cloudflared",
+    "version": "2025.11.0",
+    "date": "2025-11-07T10:19:35Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.16.0",
+    "date": "2025-11-07T09:42:01Z"
+  },
+  {
+    "name": "wazuh/wazuh",
+    "version": "coverity-w45-4.14.1",
+    "date": "2025-11-05T16:56:57Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.4",
+    "date": "2025-11-07T08:55:27Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.6",
+    "date": "2025-11-04T09:43:16Z"
+  },
+  {
+    "name": "umami-software/umami",
+    "version": "v3.0.0",
+    "date": "2025-11-07T06:13:49Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.255",
+    "date": "2025-11-07T05:55:20Z"
+  },
+  {
+    "name": "documenso/documenso",
+    "version": "v2.0.0",
+    "date": "2025-11-07T04:44:34Z"
+  },
+  {
+    "name": "OliveTin/OliveTin",
+    "version": "3000.3.2",
+    "date": "2025-11-07T01:05:59Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.4.20",
+    "date": "2025-11-07T00:27:13Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.0.1",
+    "date": "2025-10-15T16:53:55Z"
+  },
+  {
+    "name": "FlowiseAI/Flowise",
+    "version": "flowise@3.0.10",
+    "date": "2025-11-06T23:10:38Z"
+  },
+  {
+    "name": "Ombi-app/Ombi",
+    "version": "v4.52.0",
+    "date": "2025-11-06T22:39:26Z"
+  },
+  {
+    "name": "rcourtman/Pulse",
+    "version": "v4.26.4",
+    "date": "2025-11-06T22:38:52Z"
+  },
+  {
+    "name": "open-webui/open-webui",
+    "version": "v0.6.36",
+    "date": "2025-11-06T21:45:33Z"
+  },
+  {
+    "name": "paperless-ngx/paperless-ngx",
+    "version": "v2.19.5",
+    "date": "2025-11-06T20:20:13Z"
+  },
+  {
+    "name": "chrisbenincasa/tunarr",
+    "version": "v0.22.12",
+    "date": "2025-11-06T18:43:51Z"
+  },
+  {
+    "name": "MariaDB/server",
+    "version": "mariadb-11.8.4",
+    "date": "2025-11-06T17:24:30Z"
+  },
+  {
+    "name": "chrisvel/tududi",
+    "version": "v0.85.1",
+    "date": "2025-10-31T10:45:26Z"
+  },
+  {
+    "name": "HabitRPG/habitica",
+    "version": "v5.41.6",
+    "date": "2025-11-06T15:32:07Z"
+  },
+  {
+    "name": "pocket-id/pocket-id",
+    "version": "v1.15.0",
+    "date": "2025-11-06T15:03:22Z"
+  },
+  {
+    "name": "wizarrrr/wizarr",
+    "version": "v2025.11.2",
+    "date": "2025-11-06T12:08:24Z"
+  },
+  {
+    "name": "meilisearch/meilisearch",
+    "version": "prototype-v1.24.0.s3-snapshots-5",
+    "date": "2025-11-06T11:43:12Z"
+  },
  {
    "name": "transmission/transmission",
    "version": "4.0.1-beta.1",
@@ -9,21 +139,6 @@
    "version": "v2.17.0-beta20",
    "date": "2025-11-06T10:49:56Z"
  },
-  {
-    "name": "FlowiseAI/Flowise",
-    "version": "flowise@3.0.9",
-    "date": "2025-11-06T10:27:13Z"
-  },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.3",
-    "date": "2025-11-06T09:56:20Z"
-  },
-  {
-    "name": "OliveTin/OliveTin",
-    "version": "2025.11.06",
-    "date": "2025-11-06T08:45:02Z"
-  },
  {
    "name": "SigNoz/signoz",
    "version": "v0.100.1",
@@ -34,11 +149,6 @@
    "version": "9.0.112",
    "date": "2025-11-06T07:49:59Z"
  },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.252",
-    "date": "2025-11-06T05:55:30Z"
-  },
  {
    "name": "Kozea/Radicale",
    "version": "v3.5.8",
@@ -59,20 +169,10 @@
    "version": "v0.9.1",
    "date": "2025-11-06T02:26:53Z"
  },
-  {
-    "name": "jeedom/core",
-    "version": "4.4.20",
-    "date": "2025-11-06T00:27:04Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.0.1",
-    "date": "2025-10-15T16:53:55Z"
-  },
  {
    "name": "ollama/ollama",
-    "version": "v0.12.10-rc0",
-    "date": "2025-11-05T19:58:03Z"
+    "version": "v0.12.10",
+    "date": "2025-11-05T21:41:21Z"
  },
  {
    "name": "neo4j/neo4j",
@@ -104,16 +204,6 @@
    "version": "v1.6.5",
    "date": "2025-10-06T15:25:17Z"
  },
-  {
-    "name": "wazuh/wazuh",
-    "version": "coverity-w45-4.14.1",
-    "date": "2025-11-05T16:56:57Z"
-  },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.6",
-    "date": "2025-11-04T09:43:16Z"
-  },
  {
    "name": "javedh-dev/tracktor",
    "version": "0.5.1",
@@ -124,11 +214,6 @@
    "version": "v4.6.4",
    "date": "2025-11-05T15:57:00Z"
  },
-  {
-    "name": "chrisvel/tududi",
-    "version": "v0.85.1",
-    "date": "2025-10-31T10:45:26Z"
-  },
  {
    "name": "Graylog2/graylog2-server",
    "version": "6.2.9",
@@ -209,16 +294,6 @@
    "version": "v0.15.4",
    "date": "2025-11-04T22:34:12Z"
  },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v0.23.0-alpha.21",
-    "date": "2025-11-04T22:05:17Z"
-  },
-  {
-    "name": "wizarrrr/wizarr",
-    "version": "v2025.11.1",
-    "date": "2025-11-04T20:55:51Z"
-  },
  {
    "name": "go-gitea/gitea",
    "version": "v1.25.1",
@@ -226,13 +301,8 @@
  },
  {
    "name": "runtipi/runtipi",
-    "version": "v4.6.2",
-    "date": "2025-11-03T19:45:24Z"
-  },
-  {
-    "name": "element-hq/synapse",
-    "version": "v1.142.0rc2",
-    "date": "2025-11-04T16:22:11Z"
+    "version": "nightly",
+    "date": "2025-11-04T19:16:17Z"
  },
  {
    "name": "jhuckaby/Cronicle",
@@ -244,11 +314,6 @@
    "version": "v1.30.6",
    "date": "2025-11-04T17:41:01Z"
  },
-  {
-    "name": "meilisearch/meilisearch",
-    "version": "prototype-v1.24.0.s3-snapshots-4",
-    "date": "2025-11-04T16:46:01Z"
-  },
  {
    "name": "VictoriaMetrics/VictoriaMetrics",
    "version": "v1.129.1",
@@ -294,11 +359,6 @@
    "version": "2025.10.4",
    "date": "2025-11-04T03:04:13Z"
  },
-  {
-    "name": "paperless-ngx/paperless-ngx",
-    "version": "v2.19.4",
-    "date": "2025-11-04T01:34:35Z"
-  },
  {
    "name": "hyperion-project/hyperion.ng",
    "version": "2.1.1",
@@ -329,11 +389,6 @@
    "version": "0.50.39",
    "date": "2025-11-03T17:58:41Z"
  },
-  {
-    "name": "cloudflare/cloudflared",
-    "version": "2025.10.1-3-g52809511",
-    "date": "2025-11-03T17:13:35Z"
-  },
  {
    "name": "goauthentik/authentik",
    "version": "version/2025.10.1",
@@ -349,21 +404,11 @@
    "version": "debian/12.1.34",
    "date": "2025-11-03T16:42:07Z"
  },
-  {
-    "name": "Paymenter/Paymenter",
-    "version": "v1.4.2",
-    "date": "2025-11-03T11:52:53Z"
-  },
  {
    "name": "silverbulletmd/silverbullet",
    "version": "2.2.1",
    "date": "2025-11-03T06:57:15Z"
  },
-  {
-    "name": "fuma-nama/fumadocs",
-    "version": "fumadocs-mdx@13.0.5",
-    "date": "2025-11-03T06:55:11Z"
-  },
  {
    "name": "jellyfin/jellyfin",
    "version": "v10.11.2",
@@ -499,11 +544,6 @@
    "version": "v1.5.3",
    "date": "2025-09-20T12:12:33Z"
  },
-  {
-    "name": "documenso/documenso",
-    "version": "v1.13.2",
-    "date": "2025-10-30T04:12:40Z"
-  },
  {
    "name": "ipfs/kubo",
    "version": "v0.38.2",
@@ -539,21 +579,11 @@
    "version": "350",
    "date": "2025-10-29T09:51:00Z"
  },
-  {
-    "name": "pocket-id/pocket-id",
-    "version": "v1.14.2",
-    "date": "2025-10-29T08:37:03Z"
-  },
  {
    "name": "apache/cassandra",
    "version": "cassandra-5.0.6",
    "date": "2025-10-29T07:40:47Z"
  },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.15.3",
-    "date": "2025-10-29T05:15:45Z"
-  },
  {
    "name": "outline/outline",
    "version": "v1.0.1",
@@ -669,21 +699,11 @@
    "version": "v2.7.0",
    "date": "2025-10-23T17:15:07Z"
  },
-  {
-    "name": "HabitRPG/habitica",
-    "version": "v5.41.5",
-    "date": "2025-10-23T15:12:42Z"
-  },
  {
    "name": "Kareadita/Kavita",
    "version": "v0.8.8.3",
    "date": "2025-10-23T12:31:49Z"
  },
-  {
-    "name": "rcourtman/Pulse",
-    "version": "issue-596",
-    "date": "2025-10-22T19:48:56Z"
-  },
  {
    "name": "louislam/uptime-kuma",
    "version": "2.0.2",
@@ -799,21 +819,11 @@
    "version": "RELEASE.2025-10-15T17-29-55Z",
    "date": "2025-10-16T19:33:51Z"
  },
-  {
-    "name": "open-webui/open-webui",
-    "version": "v0.6.34",
-    "date": "2025-10-16T16:55:58Z"
-  },
  {
    "name": "cloudreve/cloudreve",
    "version": "4.9.2",
    "date": "2025-10-16T03:24:44Z"
  },
-  {
-    "name": "Ombi-app/Ombi",
-    "version": "v4.47.1",
-    "date": "2025-01-05T21:14:23Z"
-  },
  {
    "name": "linkwarden/linkwarden",
    "version": "v2.13.1",
@@ -1204,11 +1214,6 @@
    "version": "1012-08-09",
    "date": "2025-08-10T13:50:58Z"
  },
-  {
-    "name": "MariaDB/server",
-    "version": "mariadb-12.0.2",
-    "date": "2025-08-07T21:23:15Z"
-  },
  {
    "name": "TryGhost/Ghost-CLI",
    "version": "v1.28.3",
@@ -1244,11 +1249,6 @@
    "version": "v0.58.0",
    "date": "2025-07-28T18:59:50Z"
  },
-  {
-    "name": "umami-software/umami",
-    "version": "v2.19.0",
-    "date": "2025-07-27T22:25:00Z"
-  },
  {
    "name": "PCJones/UmlautAdaptarr",
    "version": "v0.7.3",
--- a/install/flaresolverr-install.sh
+++ b/install/flaresolverr-install.sh
@@ -32,7 +32,7 @@ $STD apt install -y google-chrome-stable
 rm /etc/apt/sources.list.d/google-chrome.list
 msg_ok "Installed Chrome"

-fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "latest" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"
+fetch_and_deploy_gh_release "flaresolverr" "FlareSolverr/FlareSolverr" "prebuild" "v3.4.3" "/opt/flaresolverr" "flaresolverr_linux_x64.tar.gz"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/flaresolverr.service
--- a/install/ghostfolio-install.sh
+++ b/install/ghostfolio-install.sh
@@ -60,11 +60,10 @@ $STD npm ci
 $STD npm run build:production
 msg_ok "Built Ghostfolio"

-msg_ok "Optional CoinGecko API Configuration"
-echo
-echo -e "${YW}CoinGecko API keys are optional but provide better cryptocurrency data.${CL}"
-echo -e "${YW}You can skip this and add them later by editing /opt/ghostfolio/.env${CL}"
-echo
+echo -e ""
+msg_custom "🪙" "$YW" "CoinGecko API keys are optional but provide better cryptocurrency data."
+msg_custom "🪙" "$YW" "You can skip this and add them later by editing /opt/ghostfolio/.env"
+echo -e ""
 read -rp "${TAB3}CoinGecko Demo API key (press Enter to skip): " COINGECKO_DEMO_KEY
 read -rp "${TAB3}CoinGecko Pro API key (press Enter to skip): " COINGECKO_PRO_KEY

--- a/install/graylog-install.sh
+++ b/install/graylog-install.sh
@@ -13,12 +13,12 @@ setting_up_container
 network_check
 update_os

-MONGO_VERSION="7.0" setup_mongodb
+MONGO_VERSION="8.0" setup_mongodb

 msg_info "Setup Graylog Data Node"
 PASSWORD_SECRET=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
-curl -fsSL "https://packages.graylog2.org/repo/packages/graylog-6.3-repository_latest.deb" -o "graylog-6.3-repository_latest.deb"
-$STD dpkg -i graylog-6.3-repository_latest.deb
+curl -fsSL "https://packages.graylog2.org/repo/packages/graylog-7.0-repository_latest.deb" -o "graylog-7.0-repository_latest.deb"
+$STD dpkg -i graylog-7.0-repository_latest.deb
 $STD apt-get update
 $STD apt-get install graylog-datanode -y
 sed -i "s/password_secret =/password_secret = $PASSWORD_SECRET/g" /etc/graylog/datanode/datanode.conf
@@ -42,9 +42,4 @@ msg_ok "Setup ${APPLICATION}"

 motd_ssh
 customize
-
-msg_info "Cleaning up"
-rm -f graylog-*-repository_latest.deb
-$STD apt-get -y autoremove
-$STD apt-get -y autoclean
-msg_ok "Cleaned"
+cleanup_lxc
--- a/install/infisical-install.sh
+++ b/install/infisical-install.sh
@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://infisical.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  apt-transport-https \
+  ca-certificates \
+  redis
+msg_ok "Installed Dependencies"
+
+PG_VERSION="17" setup_postgresql
+
+msg_info "Setting up Infisical Repository"
+setup_deb822_repo \
+  "infisical" \
+  "https://artifacts-infisical-core.infisical.com/infisical.gpg" \
+  "https://artifacts-infisical-core.infisical.com/deb" \
+  "stable"
+msg_ok "Setup Infisical repository"
+
+msg_info "Configuring PostgreSQL"
+DB_NAME="infisical_db"
+DB_USER="infisical"
+DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC';"
+{
+  echo "Infiscal Credentials"
+  echo "Database Name: $DB_NAME"
+  echo "Database User: $DB_USER"
+  echo "Database Password: $DB_PASS"
+} >>~/infisical.creds
+msg_ok "Configured PostgreSQL"
+
+msg_info "Setting up Infisical"
+AUTH_SECRET="$(openssl rand -base64 32 | tr -d '\n')"
+ENC_KEY="$(openssl rand -hex 16 | tr -d '\n')"
+IP_ADDR=$(hostname -I | awk '{print $1}')
+$STD apt install -y infisical-core
+mkdir -p /etc/infisical
+cat <<EOF >/etc/infisical/infisical.rb
+infisical_core['ENCRYPTION_KEY'] = '$ENC_KEY'
+infisical_core['AUTH_SECRET'] = '$AUTH_SECRET'
+infisical_core['HOST'] = '$IP_ADDR'
+infisical_core['DB_CONNECTION_URI'] = 'postgres://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}'
+infisical_core['REDIS_URL'] = 'redis://localhost:6379'
+EOF
+$STD infisical-ctl reconfigure
+msg_ok "Setup Infisical"
+
+motd_ssh
+customize
+cleanup_lxc
--- a/install/openproject-install.sh
+++ b/install/openproject-install.sh
@@ -66,7 +66,6 @@ server/hostname ${IP_ADDR}
 server/server_path_prefix /openproject
 server/ssl no
 server/variant apache2
-server/server_path_prefix
 repositories/api-key ${API_KEY}
 repositories/svn-install skip
 repositories/git-install install
--- a/install/pangolin-install.sh
+++ b/install/pangolin-install.sh
@@ -22,11 +22,16 @@ msg_ok "Installed Dependencies"
 NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball"
 fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_amd64"
+fetch_and_deploy_gh_release "traefik" "traefik/traefik" "prebuild" "latest" "/usr/bin" "traefik_v*_linux_amd64.tar.gz"
+
+read -rp "${TAB3}Enter your Pangolin URL (ex: https://pangolin.example.com): " pango_url
+read -rp "${TAB3}Enter your email address: " pango_email

 msg_info "Setup Pangolin"
 IP_ADDR=$(hostname -I | awk '{print $1}')
 SECRET_KEY=$(openssl rand -base64 48 | tr -dc 'A-Za-z0-9' | head -c 32)
 cd /opt/pangolin
+mkdir -p /opt/pangolin/config/{traefik,db,letsencrypt,logs}
 $STD npm ci
 $STD npm run set:sqlite
 $STD npm run set:oss
@@ -46,30 +51,129 @@ mkdir -p /var/config

 cat <<EOF >/opt/pangolin/config/config.yml
 app:
-  dashboard_url: http://$IP_ADDR:3002
-  log_level: debug
+  dashboard_url: "$pango_url"

 domains:
  domain1:
-    base_domain: example.com
+    base_domain: "$pango_url"
+    cert_resolver: "letsencrypt"

 server:
-  secret: $SECRET_KEY
+  secret: "$SECRET_KEY"

 gerbil:
-  base_endpoint: example.com
-
-orgs:
-  block_size: 24
-  subnet_group: 100.90.137.0/20
+  base_endpoint: "$pango_url"

 flags:
  require_email_verification: false
-  disable_signup_without_invite: true
-  disable_user_create_org: true
-  allow_raw_resources: true
-  enable_integration_api: true
-  enable_clients: true
+  disable_signup_without_invite: false
+  disable_user_create_org: false
+EOF
+
+cat <<EOF >/opt/pangolin/config/traefik/traefik_config.yml
+api:
+  insecure: true
+  dashboard: true
+
+providers:
+  http:
+    endpoint: "http://$IP_ADDR:3001/api/v1/traefik-config"
+    pollInterval: "5s"
+  file:
+    filename: "/opt/pangolin/config/traefik/dynamic_config.yml"
+
+experimental:
+  plugins:
+    badger:
+      moduleName: "github.com/fosrl/badger"
+      version: "v1.2.0"
+
+log:
+  level: "INFO"
+  format: "common"
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      httpChallenge:
+        entryPoint: web
+      email: $pango_email
+      storage: "/opt/pangolin/config/letsencrypt/acme.json"
+      caServer: "https://acme-v02.api.letsencrypt.org/directory"
+
+entryPoints:
+  web:
+    address: ":80"
+  websecure:
+    address: ":443"
+    transport:
+      respondingTimeouts:
+        readTimeout: "30m"
+    http:
+      tls:
+        certResolver: "letsencrypt"
+
+serversTransport:
+  insecureSkipVerify: true
+
+ping:
+    entryPoint: "web"
+EOF
+
+cat <<EOF >/opt/pangolin/config/traefik/dynamic_config.yml
+http:
+  middlewares:
+    redirect-to-https:
+      redirectScheme:
+        scheme: https
+
+  routers:
+    # HTTP to HTTPS redirect router
+    main-app-router-redirect:
+      rule: "Host(\`$pango_url\`)"
+      service: next-service
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-https
+
+    # Next.js router (handles everything except API and WebSocket paths)
+    next-router:
+      rule: "Host(\`$pango_url\`) && !PathPrefix(\`/api/v1\`)"
+      service: next-service
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+    # API router (handles /api/v1 paths)
+    api-router:
+      rule: "Host(\`$pango_url\`) && PathPrefix(\`/api/v1\`)"
+      service: api-service
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+    # WebSocket router
+    ws-router:
+      rule: "Host(\`$pango_url\`)"
+      service: api-service
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    next-service:
+      loadBalancer:
+        servers:
+          - url: "http://$IP_ADDR:3002"
+
+    api-service:
+      loadBalancer:
+        servers:
+          - url: "http://$IP_ADDR:3000"
 EOF
 $STD npm run db:sqlite:generate
 $STD npm run db:sqlite:push
@@ -122,6 +226,21 @@ RestartSec=10
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now gerbil
+
+cat <<'EOF' >/etc/systemd/system/traefik.service
+[Unit]
+Description=Traefik is an open-source Edge Router that makes publishing your services a fun and easy experience
+
+[Service]
+Type=notify
+ExecStart=/usr/bin/traefik --configFile=/opt/pangolin/config/traefik/traefik_config.yml
+Restart=on-failure
+ExecReload=/bin/kill -USR1 \$MAINPID
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now traefik
 msg_ok "Created Services"

 motd_ssh
--- a/misc/tools.func
+++ b/misc/tools.func
@@ -427,7 +427,12 @@ manage_tool_repository() {
    suite=$(get_fallback_suite "$distro_id" "$distro_codename" "$repo_url/$distro_id")

    # Setup new repository using deb822 format
-    setup_deb822_repo "mariadb" "$gpg_key_url" "$repo_url/$distro_id" "$suite" "main" "amd64 arm64" || return 1
+    setup_deb822_repo \
+      "mariadb" \
+      "$gpg_key_url" \
+      "$repo_url/$distro_id" \
+      "$suite" \
+      "main"
    return 0
    ;;

@@ -504,7 +509,7 @@ Types: deb
 URIs: ${repo_url}
 Suites: ${suite}/mongodb-org/${version}
 Components: ${repo_component}
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/mongodb-server-${version}.gpg
 EOF
    return 0
@@ -536,7 +541,7 @@ Types: deb
 URIs: $repo_url
 Suites: nodistro
 Components: main
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/nodesource.gpg
 EOF
    return 0
@@ -570,7 +575,7 @@ Types: deb
 URIs: https://packages.sury.org/php
 Suites: $distro_codename
 Components: main
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /usr/share/keyrings/deb.sury.org-php.gpg
 EOF
    return 0
@@ -601,7 +606,7 @@ Types: deb
 URIs: http://apt.postgresql.org/pub/repos/apt
 Suites: $distro_codename-pgdg
 Components: main
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/postgresql.gpg
 EOF
    return 0
@@ -1202,7 +1207,7 @@ setup_deb822_repo() {
  local repo_url="$3"
  local suite="$4"
  local component="${5:-main}"
-  local architectures="${6:-amd64 arm64}"
+  local architectures="${6:-$(dpkg --print-architecture)}"

  # Validate required parameters
  if [[ -z "$name" || -z "$gpg_url" || -z "$repo_url" || -z "$suite" ]]; then
@@ -2780,8 +2785,7 @@ function setup_java() {
      "https://packages.adoptium.net/artifactory/api/gpg/key/public" \
      "https://packages.adoptium.net/artifactory/deb" \
      "$SUITE" \
-      "main" \
-      "amd64 arm64"
+      "main"
  fi

  # Get currently installed version
@@ -3233,12 +3237,12 @@ function setup_mysql() {
      return 1
    fi

-    cat >/etc/apt/sources.list.d/mysql.sources <<'EOF'
+    cat >/etc/apt/sources.list.d/mysql.sources <<EOF
 Types: deb
 URIs: https://repo.mysql.com/apt/debian/
 Suites: bookworm
 Components: mysql-8.4-lts
-Architectures: amd64 arm64
+Architectures: $(dpkg --print-architecture)
 Signed-By: /etc/apt/keyrings/mysql.gpg
 EOF

@@ -3746,8 +3750,7 @@ function setup_postgresql() {
    "https://www.postgresql.org/media/keys/ACCC4CF8.asc" \
    "https://apt.postgresql.org/pub/repos/apt" \
    "$SUITE" \
-    "main" \
-    "amd64 arm64"
+    "main"

  if ! $STD apt update; then
    msg_error "APT update failed for PostgreSQL repository"
@@ -4096,8 +4099,7 @@ function setup_clickhouse() {
    "https://packages.clickhouse.com/rpm/lts/repodata/repomd.xml.key" \
    "https://packages.clickhouse.com/deb" \
    "stable" \
-    "main" \
-    "amd64 arm64"
+    "main"

  # Install packages with retry logic
  export DEBIAN_FRONTEND=noninteractive
--- a/tools/addon/glances.sh
+++ b/tools/addon/glances.sh
@@ -48,7 +48,7 @@ install_glances_debian() {
  msg_ok "Installed dependencies"

  msg_info "Setting up Python + uv"
-  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/tools.func)
+  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
  setup_uv PYTHON_VERSION="3.12"
  msg_ok "Setup Python + uv"

@@ -118,7 +118,7 @@ install_glances_alpine() {
  msg_ok "Installed dependencies"

  msg_info "Setting up Python + uv"
-  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/tools.func)
+  source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
  setup_uv PYTHON_VERSION="3.12"
  msg_ok "Setup Python + uv"

--- a/tools/pve/pve-privilege-converter.sh
+++ b/tools/pve/pve-privilege-converter.sh
@@ -10,7 +10,7 @@ if ! command -v curl >/dev/null 2>&1; then
  apt-get update >/dev/null 2>&1
  apt-get install -y curl >/dev/null 2>&1
 fi
-source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/core.func)
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/core.func)
 load_functions

 set -euo pipefail
Author	SHA1	Message	Date
github-actions[bot]	a2427a62ec	Update CHANGELOG.md	2025-11-07 13:59:49 +00:00
Slaviša Arežina	1ba79a3d8d	Pangolin: Add Traefik proxy (#8952 ) * Add Traefik * Update * Update	2025-11-07 14:59:34 +01:00
community-scripts-pr-app[bot]	baa4344663	Update versions.json (#8950 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 13:06:11 +01:00
community-scripts-pr-app[bot]	82b9cac71a	Update CHANGELOG.md (#8947 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 11:21:48 +00:00
CanbiZ	9c7d09d368	Update script URLs to ProxmoxVE repository (#8946 ) Corrected references from 'ProxmoxVED' to 'ProxmoxVE' in sourced URLs across livebook.sh, glances.sh, and pve-privilege-converter.sh to ensure scripts use the correct repository.	2025-11-07 12:21:23 +01:00
community-scripts-pr-app[bot]	a4c8a315cc	Update CHANGELOG.md (#8944 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 10:49:39 +00:00
CanbiZ	faeedc729e	tools.func: fix amd64 arm64 missmatch (#8943 )	2025-11-07 11:49:16 +01:00
community-scripts-pr-app[bot]	dfcc26e18d	Update CHANGELOG.md (#8940 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 08:40:32 +00:00
push-app-to-main[bot]	ea756dc87e	infisical (#8926 ) * 'Add new script' * Update infisical.sh * Update Infisical installation script with dynamic keys * Remove cleanup commands from install script Removed cleanup commands from the Infisical installation script. * Refactor Infisical repository setup process * Update date_created to 2025-11-07 --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: Slaviša Arežina <58952836+tremor021@users.noreply.github.com> Co-authored-by: CanbiZ <47820557+MickLesk@users.noreply.github.com>	2025-11-07 09:40:08 +01:00
community-scripts-pr-app[bot]	96fb53514d	Update CHANGELOG.md (#8939 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 08:37:13 +00:00
CanbiZ	aeaefe2ec0	ghostfolio: refactor CoinGecko key prompts in installer (#8935 ) Updated CoinGecko API configuration messages for clarity.	2025-11-07 09:36:51 +01:00
community-scripts-pr-app[bot]	0ea12a3485	Update CHANGELOG.md (#8938 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 08:36:08 +00:00
Tobias	f957cb9d21	flaresolverr: pin release to 3.4.3 (#8937 ) * fix: flaresolverr: pin release to 3.4.3 * fix: flaresolverr: pin release to 3.4.3 * Specify version for FlareSolverr release check --------- Co-authored-by: CanbiZ <47820557+MickLesk@users.noreply.github.com>	2025-11-07 09:35:42 +01:00
community-scripts-pr-app[bot]	ce33e59bf7	Update CHANGELOG.md (#8930 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 00:14:05 +00:00
community-scripts-pr-app[bot]	af432445e1	Update versions.json (#8929 ) Co-authored-by: GitHub Actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-07 01:13:43 +01:00
community-scripts-pr-app[bot]	a68cfab83f	Update CHANGELOG.md (#8923 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-06 19:42:57 +00:00
Slaviša Arežina	d1ca42a403	Refactor: Graylog (#8912 ) * Refactor * Update graylog.sh * Update graylog-install.sh	2025-11-06 20:42:35 +01:00
community-scripts-pr-app[bot]	2909a570b3	Update CHANGELOG.md (#8921 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-06 17:52:29 +00:00
Slaviša Arežina	a545cad897	Remove duplicate server_path_prefix configuration (#8919 )	2025-11-06 18:52:02 +01:00
community-scripts-pr-app[bot]	b7bc5831b4	Update CHANGELOG.md (#8920 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-11-06 17:51:09 +00:00
Slaviša Arežina	d4d175d689	Change directory to /opt/grist before build steps (#8913 )	2025-11-06 18:50:46 +01:00
CanbiZ	b16501652c	Create temp file for SonarQube download Added temporary file creation for SonarQube installation.	2025-11-06 15:54:37 +01:00