Update CHANGELOG.md (#4198)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -14,6 +14,22 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 All LXC instances created using this repository come pre-installed with Midnight Commander, which is a command-line tool (`mc`) that offers a user-friendly file and directory management interface for the terminal environment.
 
 
+## 2025-05-03
+
+### 🚀 Updated Scripts
+
+  - Vaultwarden: Enable HTTPS by default [@tremor021](https://github.com/tremor021) ([#4197](https://github.com/community-scripts/ProxmoxVE/pull/4197))
+
+  - #### 🐞 Bug Fixes
+
+    - Vaultwarden: Fix access URL [@tremor021](https://github.com/tremor021) ([#4199](https://github.com/community-scripts/ProxmoxVE/pull/4199))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - SFTPGo: Switch updatable to true on website [@tremor021](https://github.com/tremor021) ([#4186](https://github.com/community-scripts/ProxmoxVE/pull/4186))
+
 ## 2025-05-02
 
 ### 🚀 Updated Scripts

ct/vaultwarden.sh

@@ -76,12 +76,12 @@ function update_script() {
     msg_ok "Stopped Vaultwarden"
 
     msg_info "Updating Web-Vault to $WVRELEASE"
-    $STD curl -fsSLO https://github.com/dani-garcia/bw_web_builds/releases/download/$WVRELEASE/bw_web_$WVRELEASE.tar.gz
-    $STD tar -zxf bw_web_$WVRELEASE.tar.gz -C /opt/vaultwarden/
+    $STD curl -fsSLO https://github.com/dani-garcia/bw_web_builds/releases/download/"$WVRELEASE"/bw_web_"$WVRELEASE".tar.gz
+    $STD tar -zxf bw_web_"$WVRELEASE".tar.gz -C /opt/vaultwarden/
     msg_ok "Updated Web-Vault"
 
     msg_info "Cleaning up"
-    rm bw_web_$WVRELEASE.tar.gz
+    rm bw_web_"$WVRELEASE".tar.gz
     msg_ok "Cleaned"
 
     msg_info "Starting Vaultwarden"
@@ -94,7 +94,7 @@ function update_script() {
     if NEWTOKEN=$(whiptail --backtitle "Proxmox VE Helper Scripts" --passwordbox "Set the ADMIN_TOKEN" 10 58 3>&1 1>&2 2>&3); then
       if [[ -z "$NEWTOKEN" ]]; then exit; fi
       if ! command -v argon2 >/dev/null 2>&1; then $STD apt-get install -y argon2; fi
-      TOKEN=$(echo -n ${NEWTOKEN} | argon2 "$(openssl rand -base64 32)" -t 2 -m 16 -p 4 -l 64 -e)
+      TOKEN=$(echo -n "${NEWTOKEN}" | argon2 "$(openssl rand -base64 32)" -t 2 -m 16 -p 4 -l 64 -e)
       sed -i "s|ADMIN_TOKEN=.*|ADMIN_TOKEN='${TOKEN}'|" /opt/vaultwarden/.env
       if [[ -f /opt/vaultwarden/data/config.json ]]; then
         sed -i "s|\"admin_token\":.*|\"admin_token\": \"${TOKEN}\"|" /opt/vaultwarden/data/config.json
@@ -112,4 +112,4 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:8000${CL}"

frontend/public/json/sftpgo.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8080,
   "documentation": "https://docs.sftpgo.com/latest/",

frontend/public/json/vaultwarden.json

@@ -1,56 +1,55 @@
 {
-    "name": "Vaultwarden",
-    "slug": "vaultwarden",
-    "categories": [
-        6
-    ],
-    "date_created": "2024-05-02",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 8000,
-    "documentation": null,
-    "website": "https://github.com/dani-garcia/vaultwarden/",
-    "logo": "https://raw.githubusercontent.com/dani-garcia/vaultwarden/main/resources/vaultwarden-icon-white.svg",
-    "config_path": "/opt/vaultwarden/.env",
-    "description": "Vaultwarden is a self-hosted password manager which provides secure and encrypted password storage. It uses client-side encryption and provides access to passwords through a web interface and mobile apps.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/vaultwarden.sh",
-            "resources": {
-                "cpu": 4,
-                "ram": 6144,
-                "hdd": 6,
-                "os": "debian",
-                "version": "12"
-            }
-        },
-        {
-            "type": "alpine",
-            "script": "ct/alpine-vaultwarden.sh",
-            "resources": {
-                "cpu": 1,
-                "ram": 256,
-                "hdd": 0.5,
-                "os": "alpine",
-                "version": "3.21"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
+  "name": "Vaultwarden",
+  "slug": "vaultwarden",
+  "categories": [
+    6
+  ],
+  "date_created": "2024-05-02",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8000,
+  "documentation": "https://github.com/dani-garcia/vaultwarden/wiki",
+  "website": "https://github.com/dani-garcia/vaultwarden/",
+  "logo": "https://raw.githubusercontent.com/dani-garcia/vaultwarden/main/resources/vaultwarden-icon-white.svg",
+  "config_path": "/opt/vaultwarden/.env",
+  "description": "Vaultwarden is a self-hosted password manager which provides secure and encrypted password storage. It uses client-side encryption and provides access to passwords through a web interface and mobile apps.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/vaultwarden.sh",
+      "resources": {
+        "cpu": 4,
+        "ram": 6144,
+        "hdd": 6,
+        "os": "debian",
+        "version": "12"
+      }
     },
-    "notes": [
-        {
-            "text": "Vaultwarden needs to be behind a proxy (Nginx Proxy Manager, Caddy, etc) to obtain HTTPS and to allow clients to connect. If you try to open the web page directly on the new container, the web site will not load",
-            "type": "warning"
-        },
-        {
-            "text": "To set the Admin Token, run the command below (or type update) in the LXC Console.",
-            "type": "info"
-        }
-    ]
+    {
+      "type": "alpine",
+      "script": "ct/alpine-vaultwarden.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 256,
+        "hdd": 0.5,
+        "os": "alpine",
+        "version": "3.21"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Application uses self-signed certificate for HTTPS to work and is enabled by default. If you need a different setup, please read the documentation.",
+      "type": "warning"
+    },
+    {
+      "text": "To set the Admin Token, run the command below (or type update) in the LXC Console.",
+      "type": "info"
+    }
+  ]
 }
-

frontend/public/json/versions.json

@@ -1,44 +1,114 @@
 [
   {
-    "name": "emqx/emqx",
-    "version": "e5.9.0",
-    "date": "2025-05-02T11:07:10Z"
+    "name": "blakeblackshear/frigate",
+    "version": "v0.14.1",
+    "date": "2024-08-29T22:32:51Z"
+  },
+  {
+    "name": "kimai/kimai",
+    "version": "2.33.0",
+    "date": "2025-05-03T10:33:49Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.22.1857",
+    "date": "2025-05-03T05:54:00Z"
+  },
+  {
+    "name": "theonedev/onedev",
+    "version": "v11.9.1",
+    "date": "2025-05-03T02:48:33Z"
+  },
+  {
+    "name": "Brandawg93/PeaNUT",
+    "version": "v5.7.4",
+    "date": "2025-05-02T23:41:08Z"
+  },
+  {
+    "name": "documenso/documenso",
+    "version": "v1.10.3",
+    "date": "2025-05-02T23:23:25Z"
+  },
+  {
+    "name": "homarr-labs/homarr",
+    "version": "v1.19.0",
+    "date": "2025-05-02T19:15:25Z"
+  },
+  {
+    "name": "coder/code-server",
+    "version": "v4.99.4",
+    "date": "2025-05-02T18:33:09Z"
+  },
+  {
+    "name": "prometheus/prometheus",
+    "version": "v0.304.0-rc.0",
+    "date": "2025-05-02T17:29:18Z"
+  },
+  {
+    "name": "influxdata/influxdb",
+    "version": "v3.0.2",
+    "date": "2025-05-02T18:11:39Z"
+  },
+  {
+    "name": "forgejo/forgejo",
+    "version": "v11.0.1",
+    "date": "2025-05-02T17:10:30Z"
+  },
+  {
+    "name": "jhuckaby/Cronicle",
+    "version": "v0.9.80",
+    "date": "2025-05-02T16:48:15Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.2.2",
+    "date": "2025-04-30T06:14:22Z"
+  },
+  {
+    "name": "prometheus-pve/prometheus-pve-exporter",
+    "version": "v3.5.4",
+    "date": "2025-05-02T13:42:06Z"
+  },
+  {
+    "name": "zitadel/zitadel",
+    "version": "v2.71.9",
+    "date": "2025-05-02T12:48:14Z"
   },
   {
     "name": "nzbgetcom/nzbget",
     "version": "v24.8",
     "date": "2025-03-18T07:33:51Z"
   },
+  {
+    "name": "motioneye-project/motioneye",
+    "version": "0.42.1",
+    "date": "2020-06-07T07:27:04Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.20.8",
+    "date": "2025-05-02T11:37:05Z"
+  },
+  {
+    "name": "redis/redis",
+    "version": "8.0.0",
+    "date": "2025-05-02T11:20:31Z"
+  },
+  {
+    "name": "emqx/emqx",
+    "version": "e5.9.0",
+    "date": "2025-05-02T11:07:10Z"
+  },
   {
     "name": "semaphoreui/semaphore",
     "version": "v2.14.7",
     "date": "2025-05-02T07:57:33Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.22.1846",
-    "date": "2025-05-02T06:04:23Z"
-  },
   {
     "name": "apache/couchdb",
     "version": "3.5.0-RC1",
     "date": "2025-05-02T04:34:23Z"
   },
-  {
-    "name": "theonedev/onedev",
-    "version": "v11.9.0",
-    "date": "2025-05-02T02:44:12Z"
-  },
-  {
-    "name": "documenso/documenso",
-    "version": "v1.10.0",
-    "date": "2025-05-02T02:06:44Z"
-  },
-  {
-    "name": "Brandawg93/PeaNUT",
-    "version": "v5.7.3",
-    "date": "2025-05-02T01:16:34Z"
-  },
   {
     "name": "syncthing/syncthing",
     "version": "v2.0.0-rc.14",
@@ -49,11 +119,6 @@
     "version": "2025.4.4",
     "date": "2025-04-25T07:47:57Z"
   },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.2.2",
-    "date": "2025-04-30T06:14:22Z"
-  },
   {
     "name": "stackblitz-labs/bolt.diy",
     "version": "v0.0.7-hf1",
@@ -71,8 +136,8 @@
   },
   {
     "name": "runtipi/runtipi",
-    "version": "v4.0.1",
-    "date": "2025-05-01T15:37:16Z"
+    "version": "v4.0.2",
+    "date": "2025-05-01T16:10:58Z"
   },
   {
     "name": "fallenbagel/jellyseerr",
@@ -134,11 +199,6 @@
     "version": "jenkins-2.504.1",
     "date": "2025-04-30T14:33:59Z"
   },
-  {
-    "name": "zitadel/zitadel",
-    "version": "v2.71.8",
-    "date": "2025-04-25T11:50:04Z"
-  },
   {
     "name": "cloudflare/cloudflared",
     "version": "2025.4.2",
@@ -166,8 +226,8 @@
   },
   {
     "name": "wazuh/wazuh",
-    "version": "coverity-w17-4.12.0",
-    "date": "2025-04-16T11:20:57Z"
+    "version": "coverity-w18-4.12.0",
+    "date": "2025-04-30T09:30:26Z"
   },
   {
     "name": "mattermost/mattermost",
@@ -269,11 +329,6 @@
     "version": "pmm-6401-v1.116.0",
     "date": "2025-04-28T11:30:10Z"
   },
-  {
-    "name": "redis/redis",
-    "version": "8.0-rc2-int",
-    "date": "2025-04-28T09:56:36Z"
-  },
   {
     "name": "pocket-id/pocket-id",
     "version": "v0.51.0",
@@ -304,11 +359,6 @@
     "version": "v2.21.0",
     "date": "2025-04-27T16:31:14Z"
   },
-  {
-    "name": "homarr-labs/homarr",
-    "version": "v1.18.1",
-    "date": "2025-04-27T15:17:35Z"
-  },
   {
     "name": "evcc-io/evcc",
     "version": "0.203.4",
@@ -394,11 +444,6 @@
     "version": "v1.4.0",
     "date": "2025-04-24T16:20:17Z"
   },
-  {
-    "name": "jhuckaby/Cronicle",
-    "version": "v0.9.79",
-    "date": "2025-04-24T15:53:43Z"
-  },
   {
     "name": "openobserve/openobserve",
     "version": "v0.14.6-rc8",
@@ -504,11 +549,6 @@
     "version": "v2.15.3",
     "date": "2025-04-19T23:02:17Z"
   },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.20.7",
-    "date": "2025-04-19T20:35:09Z"
-  },
   {
     "name": "caddyserver/caddy",
     "version": "v2.10.0",
@@ -519,11 +559,6 @@
     "version": "v1.0.4",
     "date": "2025-04-18T16:08:02Z"
   },
-  {
-    "name": "prometheus/prometheus",
-    "version": "v3.3.0",
-    "date": "2025-04-18T13:46:38Z"
-  },
   {
     "name": "dgtlmoon/changedetection.io",
     "version": "0.49.15",
@@ -544,11 +579,6 @@
     "version": "v0.93.0",
     "date": "2025-04-17T20:05:25Z"
   },
-  {
-    "name": "coder/code-server",
-    "version": "v4.99.3",
-    "date": "2025-04-17T18:33:11Z"
-  },
   {
     "name": "benzino77/tasmocompiler",
     "version": "v12.6.1",
@@ -559,31 +589,16 @@
     "version": "v2.35.1",
     "date": "2025-04-17T14:29:11Z"
   },
-  {
-    "name": "influxdata/influxdb",
-    "version": "v3.0.1",
-    "date": "2025-04-17T14:06:09Z"
-  },
   {
     "name": "neo4j/neo4j",
     "version": "2025.04.0",
     "date": "2025-04-17T11:13:20Z"
   },
-  {
-    "name": "prometheus-pve/prometheus-pve-exporter",
-    "version": "v3.5.3",
-    "date": "2025-04-17T10:40:47Z"
-  },
   {
     "name": "IceWhaleTech/CasaOS",
     "version": "v0.4.15",
     "date": "2024-12-19T03:19:49Z"
   },
-  {
-    "name": "forgejo/forgejo",
-    "version": "v11.0.0",
-    "date": "2025-04-16T19:25:53Z"
-  },
   {
     "name": "rabbitmq/rabbitmq-server",
     "version": "v4.1.0",
@@ -594,11 +609,6 @@
     "version": "0.22.5",
     "date": "2025-04-15T02:52:26Z"
   },
-  {
-    "name": "blakeblackshear/frigate",
-    "version": "v0.14.1",
-    "date": "2024-08-29T22:32:51Z"
-  },
   {
     "name": "home-assistant/operating-system",
     "version": "15.2",
@@ -694,11 +704,6 @@
     "version": "2.0.3",
     "date": "2025-04-06T17:35:41Z"
   },
-  {
-    "name": "kimai/kimai",
-    "version": "2.32.0",
-    "date": "2025-04-06T09:43:51Z"
-  },
   {
     "name": "jellyfin/jellyfin",
     "version": "v10.10.7",
@@ -1204,11 +1209,6 @@
     "version": "3.1.1",
     "date": "2024-05-30T17:20:53Z"
   },
-  {
-    "name": "motioneye-project/motioneye",
-    "version": "0.42.1",
-    "date": "2020-06-07T07:27:04Z"
-  },
   {
     "name": "gnmyt/MySpeed",
     "version": "v1.0.9",

install/alpine-vaultwarden-install.sh

@@ -28,6 +28,11 @@ $STD apk add vaultwarden
 sed -i -e 's|export WEB_VAULT_ENABLED=.*|export WEB_VAULT_ENABLED=true|' /etc/conf.d/vaultwarden
 echo -e "export ADMIN_TOKEN=''" >>/etc/conf.d/vaultwarden
 echo -e "export ROCKET_ADDRESS=0.0.0.0" >>/etc/conf.d/vaultwarden
+echo -e "export ROCKET_TLS='{certs=\"/etc/ssl/certs/vaultwarden-selfsigned.crt\",key=\"/etc/ssl/private/vaultwarden-selfsigned.key\"}'"
+$STD openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/vaultwarden-selfsigned.key -out /etc/ssl/certs/vaultwarden-selfsigned.crt -subj "/C=US/O=Vaultwarden/O
+U=Domain Control Validated/CN=localhost"
+chown vaultwarden:vaultwarden /etc/ssl/certs/vaultwarden-selfsigned.crt
+chown vaultwarden:vaultwarden /etc/ssl/private/vaultwarden-selfsigned.key
 msg_ok "Installed Alpine-Vaultwarden"
 
 msg_info "Installing Web-Vault"

install/vaultwarden-install.sh

@@ -15,28 +15,23 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt-get update
-$STD apt-get -qqy install \
-  git \
+$STD apt-get install -y git \
   build-essential \
   pkgconf \
   libssl-dev \
   libmariadb-dev-compat \
   libpq-dev \
-  argon2
+  argon2 \
+  ssl-cert
 msg_ok "Installed Dependencies"
 
-WEBVAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/bw_web_builds/releases/latest |
-  grep "tag_name" |
-  awk '{print substr($2, 2, length($2)-3) }')
-
-VAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/vaultwarden/releases/latest |
-  grep "tag_name" |
-  awk '{print substr($2, 2, length($2)-3) }')
+WEBVAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/bw_web_builds/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+VAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/vaultwarden/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
 
 msg_info "Installing Rust"
 curl -fsSL https://sh.rustup.rs -o rustup-init.sh
 $STD bash rustup-init.sh -y --profile minimal
-echo 'export PATH="$HOME/.cargo/bin:$PATH"' >> ~/.bashrc
+echo 'export PATH="$HOME/.cargo/bin:$PATH"' >>~/.bashrc
 export PATH="$HOME/.cargo/bin:$PATH"
 rm rustup-init.sh
 msg_ok "Installed Rust"
@@ -54,19 +49,23 @@ mkdir -p /opt/vaultwarden/data
 cp target/release/vaultwarden /opt/vaultwarden/bin/
 
 msg_info "Downloading Web-Vault ${WEBVAULT}"
-$STD curl -fsSLO https://github.com/dani-garcia/bw_web_builds/releases/download/$WEBVAULT/bw_web_$WEBVAULT.tar.gz
-$STD tar -xzf bw_web_$WEBVAULT.tar.gz -C /opt/vaultwarden/
+$STD curl -fsSLO https://github.com/dani-garcia/bw_web_builds/releases/download/"$WEBVAULT"/bw_web_"$WEBVAULT".tar.gz
+$STD tar -xzf bw_web_"$WEBVAULT".tar.gz -C /opt/vaultwarden/
 msg_ok "Downloaded Web-Vault ${WEBVAULT}"
 
 cat <<EOF >/opt/vaultwarden/.env
 ADMIN_TOKEN=''
 ROCKET_ADDRESS=0.0.0.0
+ROCKET_TLS='{certs="/opt/vaultwarden/ssl-cert-snakeoil.pem",key="/opt/vaultwarden/ssl-cert-snakeoil.key"}'
 DATA_FOLDER=/opt/vaultwarden/data
 DATABASE_MAX_CONNS=10
 WEB_VAULT_FOLDER=/opt/vaultwarden/web-vault
 WEB_VAULT_ENABLED=true
 EOF
 
+mv /etc/ssl/certs/ssl-cert-snakeoil.pem /opt/vaultwarden/
+mv /etc/ssl/private/ssl-cert-snakeoil.key /opt/vaultwarden/
+
 msg_info "Creating Service"
 chown -R vaultwarden:vaultwarden /opt/vaultwarden/
 chown root:root /opt/vaultwarden/bin/vaultwarden