Refactor: Threadfin (+ updateble)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -14,8 +14,165 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 All LXC instances created using this repository come pre-installed with Midnight Commander, which is a command-line tool (`mc`) that offers a user-friendly file and directory management interface for the terminal environment.
 
 
+## 2025-07-07
+
+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Refactor: Changed the way we install BunkerWeb by leveraging the brand new install-bunkerweb.sh [@TheophileDiot](https://github.com/TheophileDiot) ([#5707](https://github.com/community-scripts/ProxmoxVE/pull/5707))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - EMQX: Add warning to website [@tremor021](https://github.com/tremor021) ([#5770](https://github.com/community-scripts/ProxmoxVE/pull/5770))
+
+## 2025-07-06
+
+### 🚀 Updated Scripts
+
+  - Refactor: Barcodebuddy [@tremor021](https://github.com/tremor021) ([#5735](https://github.com/community-scripts/ProxmoxVE/pull/5735))
+
+  - #### 🐞 Bug Fixes
+
+    - Fix update script for Mafl: ensure directory is removed recursively [@jonalbr](https://github.com/jonalbr) ([#5759](https://github.com/community-scripts/ProxmoxVE/pull/5759))
+    - BookStack: Typo fix [@tremor021](https://github.com/tremor021) ([#5746](https://github.com/community-scripts/ProxmoxVE/pull/5746))
+    - Resolves incorrect URL at end of Pocket ID script [@johnsturgeon](https://github.com/johnsturgeon) ([#5743](https://github.com/community-scripts/ProxmoxVE/pull/5743))
+
+  - #### ✨ New Features
+
+    - [Feature] Add option to expose Docker via TCP port (alpine docker) [@oformaniuk](https://github.com/oformaniuk) ([#5716](https://github.com/community-scripts/ProxmoxVE/pull/5716))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Bitmagnet [@tremor021](https://github.com/tremor021) ([#5733](https://github.com/community-scripts/ProxmoxVE/pull/5733))
+    - Refactor: Baikal [@tremor021](https://github.com/tremor021) ([#5736](https://github.com/community-scripts/ProxmoxVE/pull/5736))
+
+## 2025-07-05
+
+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Refactor: BookStack [@tremor021](https://github.com/tremor021) ([#5732](https://github.com/community-scripts/ProxmoxVE/pull/5732))
+    - Refactor: Authelia [@tremor021](https://github.com/tremor021) ([#5722](https://github.com/community-scripts/ProxmoxVE/pull/5722))
+    - Refactor: Dashy [@tremor021](https://github.com/tremor021) ([#5723](https://github.com/community-scripts/ProxmoxVE/pull/5723))
+    - Refactor: CryptPad [@tremor021](https://github.com/tremor021) ([#5724](https://github.com/community-scripts/ProxmoxVE/pull/5724))
+    - Refactor: ByteStash [@tremor021](https://github.com/tremor021) ([#5725](https://github.com/community-scripts/ProxmoxVE/pull/5725))
+    - Refactor: AgentDVR [@tremor021](https://github.com/tremor021) ([#5726](https://github.com/community-scripts/ProxmoxVE/pull/5726))
+
+## 2025-07-04
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Refactor: Mafl [@tremor021](https://github.com/tremor021) ([#5702](https://github.com/community-scripts/ProxmoxVE/pull/5702))
+    - Outline: Fix sed command for v0.85.0 [@tremor021](https://github.com/tremor021) ([#5688](https://github.com/community-scripts/ProxmoxVE/pull/5688))
+    - Komodo: Update Script to use FerretDB / remove psql & sqlite options [@MickLesk](https://github.com/MickLesk) ([#5690](https://github.com/community-scripts/ProxmoxVE/pull/5690))
+    - ESPHome: Fix Linking issue to prevent version mismatch [@MickLesk](https://github.com/MickLesk) ([#5685](https://github.com/community-scripts/ProxmoxVE/pull/5685))
+    - Cloudflare-DDNS: fix unvisible read command at install [@MickLesk](https://github.com/MickLesk) ([#5682](https://github.com/community-scripts/ProxmoxVE/pull/5682))
+
+  - #### ✨ New Features
+
+    - Core layer refactor: centralized error traps and msg_* consistency [@MickLesk](https://github.com/MickLesk) ([#5705](https://github.com/community-scripts/ProxmoxVE/pull/5705))
+
+  - #### 💥 Breaking Changes
+
+    - Update Iptag [@DesertGamer](https://github.com/DesertGamer) ([#5677](https://github.com/community-scripts/ProxmoxVE/pull/5677))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - MySQL phpMyAdmin Access Information [@austinpilz](https://github.com/austinpilz) ([#5679](https://github.com/community-scripts/ProxmoxVE/pull/5679))
+
+## 2025-07-03
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Zipline: Fix typo in uploads directory path [@tremor021](https://github.com/tremor021) ([#5662](https://github.com/community-scripts/ProxmoxVE/pull/5662))
+
+  - #### ✨ New Features
+
+    - Improve asset matching in fetch_and_deploy_gh_release for prebuild and singlefile modes [@MickLesk](https://github.com/MickLesk) ([#5669](https://github.com/community-scripts/ProxmoxVE/pull/5669))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Trilium [@MickLesk](https://github.com/MickLesk) ([#5665](https://github.com/community-scripts/ProxmoxVE/pull/5665))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - Bump Icons to selfhst repo | switch svg to webp [@MickLesk](https://github.com/MickLesk) ([#5659](https://github.com/community-scripts/ProxmoxVE/pull/5659))
+
+## 2025-07-02
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Changedetection: Base64 encode the launch options [@tremor021](https://github.com/tremor021) ([#5640](https://github.com/community-scripts/ProxmoxVE/pull/5640))
+
+  - #### 🔧 Refactor
+
+    - Refactor & Bump to Node24: Zigbee2MQTT [@MickLesk](https://github.com/MickLesk) ([#5638](https://github.com/community-scripts/ProxmoxVE/pull/5638))
+
+### 🌐 Website
+
+  - #### 💥 Breaking Changes
+
+    - Remove: Pingvin-Share [@MickLesk](https://github.com/MickLesk) ([#5635](https://github.com/community-scripts/ProxmoxVE/pull/5635))
+    - Remove: Readarr [@MickLesk](https://github.com/MickLesk) ([#5636](https://github.com/community-scripts/ProxmoxVE/pull/5636))
+
+## 2025-07-01
+
+### 🆕 New Scripts
+
+  - Librespeed Rust ([#5614](https://github.com/community-scripts/ProxmoxVE/pull/5614))
+- ITSM-NG ([#5615](https://github.com/community-scripts/ProxmoxVE/pull/5615))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Open WebUI: Fix Ollama update procedure [@tremor021](https://github.com/tremor021) ([#5601](https://github.com/community-scripts/ProxmoxVE/pull/5601))
+
+  - #### ✨ New Features
+
+    - [tools]: increase fetch_and_deploy with dns pre check [@MickLesk](https://github.com/MickLesk) ([#5608](https://github.com/community-scripts/ProxmoxVE/pull/5608))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - Jellyfin GPU Passthrough NVIDIA Note [@austinpilz](https://github.com/austinpilz) ([#5625](https://github.com/community-scripts/ProxmoxVE/pull/5625))
+
 ## 2025-06-30
 
+### 🆕 New Scripts
+
+  - Alpine Syncthing [@MickLesk](https://github.com/MickLesk) ([#5586](https://github.com/community-scripts/ProxmoxVE/pull/5586))
+- Kapowarr ([#5584](https://github.com/community-scripts/ProxmoxVE/pull/5584))
+
+### 🚀 Updated Scripts
+
+  - Fixing Cloudflare DDNS - lack of resources [@meszolym](https://github.com/meszolym) ([#5600](https://github.com/community-scripts/ProxmoxVE/pull/5600))
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: make changes to automatically enable QuickSync [@vhsdream](https://github.com/vhsdream) ([#5560](https://github.com/community-scripts/ProxmoxVE/pull/5560))
+    - Apache Guacamole: Install auth-jdbc component that matches release version [@tremor021](https://github.com/tremor021) ([#5563](https://github.com/community-scripts/ProxmoxVE/pull/5563))
+
+  - #### ✨ New Features
+
+    - tools.func: optimize binary installs with fetch_and_deploy helper [@MickLesk](https://github.com/MickLesk) ([#5588](https://github.com/community-scripts/ProxmoxVE/pull/5588))
+    - [core]: add ipv6 configuration support [@MickLesk](https://github.com/MickLesk) ([#5575](https://github.com/community-scripts/ProxmoxVE/pull/5575))
+
 ## 2025-06-29
 
 ### 🚀 Updated Scripts

ct/alpine-komodo.sh

@@ -32,6 +32,15 @@ function update_script() {
     exit 1
   fi
   COMPOSE_BASENAME=$(basename "$COMPOSE_FILE")
+
+  if [[ "$COMPOSE_BASENAME" == "sqlite.compose.yaml" || "$COMPOSE_BASENAME" == "postgres.compose.yaml" ]]; then
+    msg_error "❌ Detected outdated Komodo setup using SQLite or PostgreSQL (FerretDB v1)."
+    echo -e "${YW}This configuration is no longer supported since Komodo v1.18.0.${CL}"
+    echo -e "${YW}Please follow the migration guide:${CL}"
+    echo -e "${BGN}https://github.com/community-scripts/ProxmoxVE/discussions/5689${CL}\n"
+    exit 1
+  fi
+
   BACKUP_FILE="/opt/komodo/${COMPOSE_BASENAME}.bak_$(date +%Y%m%d_%H%M%S)"
   cp "$COMPOSE_FILE" "$BACKUP_FILE" || {
     msg_error "Failed to create backup of ${COMPOSE_BASENAME}!"

ct/alpine-syncthing.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://syncthing.net/
+
+APP="Alpine-Syncthing"
+var_tags="${var_tags:-alpine;networking}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-256}"
+var_disk="${var_disk:-1}"
+var_os="${var_os:-alpine}"
+var_version="${var_version:-3.22}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  msg_info "Updating Alpine Packages"
+  $STD apk -U upgrade
+  msg_ok "Updated Alpine Packages"
+
+  msg_info "Updating Syncthing"
+  $STD apk upgrade syncthing
+  msg_ok "Updated Syncthing"
+
+  msg_info "Restarting Syncthing"
+  $STD rc-service syncthing restart
+  msg_ok "Restarted Syncthing"
+
+  exit 1
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8384${CL}"

ct/authelia.sh

@@ -31,16 +31,16 @@ function update_script() {
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/authelia/authelia/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
   if [[ "${RELEASE}" != "$(/usr/bin/authelia -v | awk '{print substr($3, 2, length($2)) }')" ]]; then
-        msg_info "Updating $APP to ${RELEASE}"
     $STD apt-get update
     $STD apt-get -y upgrade
-        curl -fsSL "https://github.com/authelia/authelia/releases/download/${RELEASE}/authelia_${RELEASE}_amd64.deb" -o $(basename "https://github.com/authelia/authelia/releases/download/${RELEASE}/authelia_${RELEASE}_amd64.deb")
+
-        $STD dpkg -i "authelia_${RELEASE}_amd64.deb"
+    fetch_and_deploy_gh_release "authelia" "authelia/authelia" "binary"
+
     msg_info "Cleaning Up"
-        rm -f "authelia_${RELEASE}_amd64.deb"
     $STD apt-get -y autoremove
     $STD apt-get -y autoclean
     msg_ok "Cleanup Completed"
+
     msg_ok "Updated $APP to ${RELEASE}"
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"

ct/baikal.sh

@@ -23,34 +23,35 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -d /opt/baikal ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/sabre-io/Baikal/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.baikal 2>/dev/null)" ]] || [[ ! -f ~/.baikal ]]; then
     msg_info "Stopping Service"
     systemctl stop apache2
     msg_ok "Stopped Service"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
+    msg_info "Backing up data"
-    cd /opt
-    curl -fsSL "https://github.com/sabre-io/baikal/releases/download/${RELEASE}/baikal-${RELEASE}.zip" -o $(basename "https://github.com/sabre-io/baikal/releases/download/${RELEASE}/baikal-${RELEASE}.zip")
     mv /opt/baikal /opt/baikal-backup
-    $STD unzip -o "baikal-${RELEASE}.zip"
+    msg_ok "Backed up data"
+
+    fetch_and_deploy_gh_release "baikal" "sabre-io/Baikal"
+
+    msg_info "Configuring Baikal"
     cp -r /opt/baikal-backup/config/baikal.yaml /opt/baikal/config/
     cp -r /opt/baikal-backup/Specific/ /opt/baikal/
     chown -R www-data:www-data /opt/baikal/
     chmod -R 755 /opt/baikal/
-    echo "${RELEASE}" >/opt/${APP}_version.txt
+    msg_ok "Configured Baikal"
-    msg_ok "Updated $APP to v${RELEASE}"
 
     msg_info "Starting Service"
     systemctl start apache2
     msg_ok "Started Service"
 
     msg_info "Cleaning up"
-    rm -rf "/opt/baikal-${RELEASE}.zip"
     rm -rf /opt/baikal-backup
     msg_ok "Cleaned"
     msg_ok "Updated Successfully"

ct/barcode-buddy.sh

@@ -23,27 +23,28 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -d /opt/barcodebuddy ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/Forceu/barcodebuddy/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.barcodebuddy 2>/dev/null)" ]] || [[ ! -f ~/.barcodebuddy ]]; then
     msg_info "Stopping Service"
     systemctl stop apache2
     systemctl stop barcodebuddy
     msg_ok "Stopped Service"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
+    msg_info "Backing up data"
-    cd /opt
     mv /opt/barcodebuddy/ /opt/barcodebuddy-backup
-    curl -fsSL "https://github.com/Forceu/barcodebuddy/archive/refs/tags/v${RELEASE}.zip" -o $(basename "https://github.com/Forceu/barcodebuddy/archive/refs/tags/v${RELEASE}.zip")
+    msg_ok "Backed up data"
-    $STD unzip "v${RELEASE}.zip"
+
-    mv "/opt/barcodebuddy-${RELEASE}" /opt/barcodebuddy
+    fetch_and_deploy_gh_release "barcodebuddy" "Forceu/barcodebuddy"
+
+    msg_info "Configuring ${APP}"
     cp -r /opt/barcodebuddy-backup/data/. /opt/barcodebuddy/data
     chown -R www-data:www-data /opt/barcodebuddy/data
-    echo "${RELEASE}" >/opt/${APP}_version.txt
+    msg_ok "Configured ${APP}"
-    msg_ok "Updated $APP to v${RELEASE}"
 
     msg_info "Starting Service"
     systemctl start apache2
@@ -51,7 +52,6 @@ function update_script() {
     msg_ok "Started Service"
 
     msg_info "Cleaning up"
-    rm -r "/opt/v${RELEASE}.zip"
     rm -r /opt/barcodebuddy-backup
     msg_ok "Cleaned"
     msg_ok "Updated Successfully"

ct/bitmagnet.sh

@@ -28,12 +28,12 @@ function update_script() {
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/bitmagnet-io/bitmagnet/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.bitmagnet 2>/dev/null)" ]] || [[ ! -f ~/.bitmagnet ]]; then
     msg_info "Stopping Service"
     systemctl stop bitmagnet-web
     msg_ok "Stopped Service"
 
-    msg_info "Backing up database"
+    msg_info "Backing up data"
     rm -f /tmp/backup.sql
     $STD sudo -u postgres pg_dump \
       --column-inserts \
@@ -56,31 +56,26 @@ function update_script() {
       bitmagnet \
       >/tmp/backup.sql
     mv /tmp/backup.sql /opt/
-    msg_ok "Database backed up"
-
-    msg_info "Updating ${APP} to v${RELEASE}"
     [ -f /opt/bitmagnet/.env ] && cp /opt/bitmagnet/.env /opt/
     [ -f /opt/bitmagnet/config.yml ] && cp /opt/bitmagnet/config.yml /opt/
-    rm -rf /opt/bitmagnet/*
+    msg_ok "Data backed up"
-    temp_file=$(mktemp)
+
-    curl -fsSL "https://github.com/bitmagnet-io/bitmagnet/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
+    rm -rf /opt/bitmagnet
-    tar zxf "$temp_file" --strip-components=1 -C /opt/bitmagnet
+    fetch_and_deploy_gh_release "bitmagnet" "bitmagnet-io/bitmagnet"
+
+    msg_info "Updating ${APP} to v${RELEASE}"
     cd /opt/bitmagnet
     VREL=v$RELEASE
     $STD go build -ldflags "-s -w -X github.com/bitmagnet-io/bitmagnet/internal/version.GitTag=$VREL"
     chmod +x bitmagnet
     [ -f "/opt/.env" ] && cp "/opt/.env" /opt/bitmagnet/
     [ -f "/opt/config.yml" ] && cp "/opt/config.yml" /opt/bitmagnet/
-    echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated $APP to v${RELEASE}"
 
     msg_info "Starting Service"
     systemctl start bitmagnet-web
     msg_ok "Started Service"
 
-    msg_info "Cleaning up"
-    rm -f "$temp_file"
-    msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}"

ct/bookstack.sh

@@ -23,25 +23,31 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -d /opt/bookstack ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/BookStackApp/BookStack/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.bookstack 2>/dev/null)" ]] || [[ ! -f ~/.bookstack ]]; then
     msg_info "Stopping Apache2"
     systemctl stop apache2
     msg_ok "Services Stopped"
 
-    msg_info "Updating ${APP} to v${RELEASE}"
+    msg_info "Backing up data"
     mv /opt/bookstack /opt/bookstack-backup
-    curl -fsSL "https://github.com/BookStackApp/BookStack/archive/refs/tags/v${RELEASE}.zip" -o "/opt/BookStack-${RELEASE}.zip"
+    msg_ok "Backup finished"
-    $STD unzip "/opt/BookStack-${RELEASE}.zip" -d /opt
+
-    mv "/opt/BookStack-${RELEASE}" /opt/bookstack
+    fetch_and_deploy_gh_release "bookstack" "BookStackApp/BookStack"
+
+    msg_info "Restoring backup"
     cp /opt/bookstack-backup/.env /opt/bookstack/.env
     [[ -d /opt/bookstack-backup/public/uploads ]] && cp -a /opt/bookstack-backup/public/uploads/. /opt/bookstack/public/uploads/
     [[ -d /opt/bookstack-backup/storage/uploads ]] && cp -a /opt/bookstack-backup/storage/uploads/. /opt/bookstack/storage/uploads/
     [[ -d /opt/bookstack-backup/themes ]] && cp -a /opt/bookstack-backup/themes/. /opt/bookstack/themes/
+    msg_ok "Backup restored"
+
+    msg_info "Configuring BookStack"
     cd /opt/bookstack
     export COMPOSER_ALLOW_SUPERUSER=1
     $STD composer install --no-dev
@@ -51,7 +57,7 @@ function update_script() {
     chmod -R 775 /opt/bookstack/storage /opt/bookstack/bootstrap/cache /opt/bookstack/public/uploads
     chmod -R 640 /opt/bookstack/.env
     echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated ${APP} to v${RELEASE}"
+    msg_ok "Configured BookStack"
 
     msg_info "Starting Apache2"
     systemctl start apache2
@@ -59,7 +65,6 @@ function update_script() {
 
     msg_info "Cleaning Up"
     rm -rf /opt/bookstack-backup
-    rm -rf "/opt/BookStack-${RELEASE}.zip"
     msg_ok "Cleaned"
     msg_ok "Updated Successfully"
   else

ct/bunkerweb.sh

@@ -37,8 +37,8 @@ Pin: version ${RELEASE}
 Pin-Priority: 1001
 EOF
     apt-get update
-    apt-get install -y nginx=1.26.3*
+    apt-mark unhold bunkerweb nginx
-    apt-get install -y bunkerweb=${RELEASE}
+    apt-get install -y --allow-downgrades bunkerweb=${RELEASE}
     echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP} to ${RELEASE}"
 

ct/bytestash.sh

@@ -23,39 +23,39 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
+
   if [[ ! -d /opt/bytestash ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/jordan-dalby/ByteStash/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-    if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.bytestash 2>/dev/null)" ]] || [[ ! -f ~/.bytestash ]]; then
+
+    read -rp "${TAB3}Did you make a backup via application WebUI? (y/n): " backuped
+    if [[ "$backuped" =~ ^[Yy]$ ]]; then
       msg_info "Stopping Services"
       systemctl stop bytestash-backend
       systemctl stop bytestash-frontend
       msg_ok "Services Stopped"
 
-        msg_info "Updating ${APP} to ${RELEASE}"
+      rm -rf /opt/bytestash
-        temp_file=$(mktemp)
+      fetch_and_deploy_gh_release "bytestash" "jordan-dalby/ByteStash"
-curl -fsSL "https://github.com/jordan-dalby/ByteStash/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
+
-        tar zxf $temp_file
+      msg_info "Configuring ByteStash"
-        rm -rf /opt/bytestash/server/node_modules
-        rm -rf /opt/bytestash/client/node_modules
-        cp -rf ByteStash-${RELEASE}/* /opt/bytestash
       cd /opt/bytestash/server
       $STD npm install
       cd /opt/bytestash/client
       $STD npm install
-        echo "${RELEASE}" >/opt/${APP}_version.txt
       msg_ok "Updated ${APP}"
 
       msg_info "Starting Services"
       systemctl start bytestash-backend
       systemctl start bytestash-frontend
       msg_ok "Started Services"
-
+    else
-        msg_info "Cleaning Up"
+      msg_error "PLEASE MAKE A BACKUP FIRST!"
-        rm -f $temp_file
+      exit
-        msg_ok "Cleaned"
+    fi
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"

ct/cloudflare-ddns.sh

@@ -7,8 +7,8 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 
 APP="Cloudflare-DDNS"
 var_tags="${var_tags:-network}"
-var_cpu="${var_cpu:-1}"
+var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-512}"
+var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-3}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"

ct/cryptpad.sh

@@ -29,29 +29,27 @@ function update_script() {
     exit
   fi
   RELEASE=$(curl -fsSL https://api.github.com/repos/cryptpad/cryptpad/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-    if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.cryptpad 2>/dev/null)" ]] || [[ ! -f ~/.cryptpad ]]; then
     msg_info "Stopping $APP"
     systemctl stop cryptpad
     msg_ok "Stopped $APP"
 
+    msg_info "Backing up configuration"
+    [ -f /opt/cryptpad/config/config.js ] && mv /opt/cryptpad/config/config.js /opt/
+    msg_ok "Backed up configuration"
+
+    fetch_and_deploy_gh_release "cryptpad" "cryptpad/cryptpad"
+
     msg_info "Updating $APP to ${RELEASE}"
-        temp_dir=$(mktemp -d)
-        cp -f /opt/cryptpad/config/config.js /opt/config.js
-        curl -fsSL "https://github.com/cryptpad/cryptpad/archive/refs/tags/${RELEASE}.tar.gz" -o "$temp_dir/cryptpad-${RELEASE}.tar.gz"
-        cd "$temp_dir"
-        tar zxf "cryptpad-${RELEASE}.tar.gz"
-        cp -rf "cryptpad-${RELEASE}"/* /opt/cryptpad
     cd /opt/cryptpad
     $STD npm ci
     $STD npm run install:components
     $STD npm run build
-        cp -f /opt/config.js /opt/cryptpad/config/config.js
-        echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated $APP to ${RELEASE}"
 
-        msg_info "Cleaning Up"
+    msg_info "Restoring configuration"
-        rm -rf $temp_dir
+    mv /opt/config.js /opt/cryptpad/config/
-        msg_ok "Cleanup Completed"
+    msg_ok "Configuration restored"
 
     msg_info "Starting $APP"
     systemctl start cryptpad

ct/dashy.sh

@@ -29,7 +29,7 @@ function update_script() {
   fi
 
   RELEASE=$(curl -fsSL https://api.github.com/repos/Lissy93/dashy/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
-  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
+  if [[ "${RELEASE}" != "$(cat ~/.dashy 2>/dev/null)" ]] || [[ ! -f ~/.dashy ]]; then
     msg_info "Stopping ${APP}"
     systemctl stop dashy
     msg_ok "Stopped ${APP}"
@@ -43,14 +43,13 @@ function update_script() {
     fi
     msg_ok "Backed up conf.yml"
 
-    msg_info "Updating ${APP} to ${RELEASE}"
     rm -rf /opt/dashy
-    mkdir -p /opt/dashy
+    fetch_and_deploy_gh_release "dashy" "Lissy93/dashy"
-    curl -fsSL "https://github.com/Lissy93/dashy/archive/refs/tags/${RELEASE}.tar.gz" | tar -xz -C /opt/dashy --strip-components=1
+
+    msg_info "Updating ${APP} to ${RELEASE}"
     cd /opt/dashy
     npm install
     npm run build
-    echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP} to ${RELEASE}"
 
     msg_info "Restoring conf.yml"
@@ -65,6 +64,7 @@ function update_script() {
     msg_info "Starting Dashy"
     systemctl start dashy
     msg_ok "Started Dashy"
+
     msg_ok "Updated Successfully"
   else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"

ct/esphome.sh

@@ -73,6 +73,11 @@ EOF
     msg_ok "Updated systemd service"
   fi
 
+  msg_info "Linking esphome to /usr/local/bin"
+  rm -f /usr/local/bin/esphome
+  ln -s /opt/esphome/.venv/bin/esphome /usr/local/bin/esphome
+  msg_ok "Linked esphome binary"
+
   msg_info "Starting ${APP}"
   systemctl start esphomeDashboard
   msg_ok "Started ${APP}"

ct/headers/alpine-syncthing

@@ -0,0 +1,6 @@
+    ___    __      _                 _____                  __  __    _            
+   /   |  / /___  (_)___  ___       / ___/__  ______  _____/ /_/ /_  (_)___  ____ _
+  / /| | / / __ \/ / __ \/ _ \______\__ \/ / / / __ \/ ___/ __/ __ \/ / __ \/ __ `/
+ / ___ |/ / /_/ / / / / /  __/_____/__/ / /_/ / / / / /__/ /_/ / / / / / / / /_/ / 
+/_/  |_/_/ .___/_/_/ /_/\___/     /____/\__, /_/ /_/\___/\__/_/ /_/_/_/ /_/\__, /  
+        /_/                            /____/                             /____/   

ct/headers/itsm-ng

@@ -0,0 +1,6 @@
+    _______________ __  ___      _   ________
+   /  _/_  __/ ___//  |/  /     / | / / ____/
+   / /  / /  \__ \/ /|_/ /_____/  |/ / / __  
+ _/ /  / /  ___/ / /  / /_____/ /|  / /_/ /  
+/___/ /_/  /____/_/  /_/     /_/ |_/\____/   
+                                             

ct/headers/kapowarr

@@ -0,0 +1,6 @@
+    __ __                                         
+   / //_/___ _____  ____ _      ______ ___________
+  / ,< / __ `/ __ \/ __ \ | /| / / __ `/ ___/ ___/
+ / /| / /_/ / /_/ / /_/ / |/ |/ / /_/ / /  / /    
+/_/ |_\__,_/ .___/\____/|__/|__/\__,_/_/  /_/     
+          /_/                                     

ct/headers/librespeed-rust

@@ -0,0 +1,6 @@
+    __    _ __                                       __      ____             __ 
+   / /   (_) /_  ________  _________  ___  ___  ____/ /     / __ \__  _______/ /_
+  / /   / / __ \/ ___/ _ \/ ___/ __ \/ _ \/ _ \/ __  /_____/ /_/ / / / / ___/ __/
+ / /___/ / /_/ / /  /  __(__  ) /_/ /  __/  __/ /_/ /_____/ _, _/ /_/ (__  ) /_  
+/_____/_/_.___/_/   \___/____/ .___/\___/\___/\__,_/     /_/ |_|\__,_/____/\__/  
+                            /_/                                                  

ct/itsm-ng.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Florianb63
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://itsm-ng.com/
+
+APP="ITSM-NG"
+var_tags="${var_tags:-asset-management;foss}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/itsm-ng/config_db.php ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit 1
+  fi
+
+  msg_info "Updating ${APP} LXC"
+  $STD apt-get update
+  $STD apt-get -y upgrade
+  msg_ok "Updated Successfully"
+
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/kapowarr.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Casvt/Kapowarr
+
+APP="Kapowarr"
+var_tags="${var_tags:-Arr}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-256}"
+var_disk="${var_disk:-2}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/systemd/system/kapowarr.service ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  RELEASE=$(curl -s https://api.github.com/repos/Casvt/Kapowarr/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+  if [[ "${RELEASE}" != "$(cat $HOME/.kapowarr)" ]] || [[ ! -f $HOME/.kapowarr ]]; then
+    setup_uv 
+    
+    msg_info "Stopping $APP"
+    systemctl stop kapowarr
+    msg_ok "Stopped $APP"
+
+    msg_info "Creating Backup"
+    mv /opt/kapowarr/db /opt/
+    msg_ok "Backup Created"
+
+    fetch_and_deploy_gh_release "kapowarr" "Casvt/Kapowarr"
+    msg_info "Updating $APP to ${RELEASE}"
+    mv /opt/db /opt/kapowarr
+    msg_ok "Updated $APP to ${RELEASE}"
+
+    msg_info "Starting $APP"
+    systemctl start kapowarr
+    msg_ok "Started $APP"
+
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. ${APP} is already at ${RELEASE}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5656${CL}"

ct/komodo.sh

@@ -36,6 +36,15 @@ function update_script() {
     exit 1
   fi
   COMPOSE_BASENAME=$(basename "$COMPOSE_FILE")
+
+  if [[ "$COMPOSE_BASENAME" == "sqlite.compose.yaml" || "$COMPOSE_BASENAME" == "postgres.compose.yaml" ]]; then
+    msg_error "❌ Detected outdated Komodo setup using SQLite or PostgreSQL (FerretDB v1)."
+    echo -e "${YW}This configuration is no longer supported since Komodo v1.18.0.${CL}"
+    echo -e "${YW}Please follow the migration guide:${CL}"
+    echo -e "${BGN}https://github.com/community-scripts/ProxmoxVE/discussions/5689${CL}\n"
+    exit 1
+  fi
+
   BACKUP_FILE="/opt/komodo/${COMPOSE_BASENAME}.bak_$(date +%Y%m%d_%H%M%S)"
   cp "$COMPOSE_FILE" "$BACKUP_FILE" || {
     msg_error "Failed to create backup of ${COMPOSE_BASENAME}!"

ct/librespeed-rust.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Joseph Stubberfield (stubbers)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/librespeed/speedtest-rust
+
+APP="Librespeed-Rust"
+var_tags="${var_tags:-network}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /var/lib/librespeed-rs ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  RELEASE=$(curl -fsSL https://api.github.com/repos/librespeed/speedtest-rust/releases/latest | grep '"tag_name"' | sed -E 's/.*"tag_name": "v([^"]+).*/\1/')
+  if [[ "${RELEASE}" != "$(cat ~/.librespeed 2>/dev/null)" ]] || [[ ! -f ~/.librespeed ]]; then
+    msg_info "Stopping Services"
+    systemctl stop librespeed-rs
+    msg_ok "Services Stopped"
+
+    fetch_and_deploy_gh_release "librespeed-rust" "librespeed/speedtest-rust" "binary" "latest" "/opt/librespeed-rust" "librespeed-rs-x86_64-unknown-linux-gnu.deb"
+
+    msg_info "Starting Service"
+    systemctl start librespeed-rs
+    msg_ok "Started Service"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"

ct/mafl.sh

@@ -27,18 +27,31 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
+
   RELEASE=$(curl -fsSL https://api.github.com/repos/hywax/mafl/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  msg_info "Updating Mafl to v${RELEASE} (Patience)"
+  if [[ "${RELEASE}" != "$(cat ~/.mafl 2>/dev/null)" ]] || [[ ! -f ~/.mafl ]]; then
+    msg_info "Stopping Mafl service"
     systemctl stop mafl
-  curl -fsSL "https://github.com/hywax/mafl/archive/refs/tags/v${RELEASE}.tar.gz" -o $(basename "https://github.com/hywax/mafl/archive/refs/tags/v${RELEASE}.tar.gz")
+    msg_ok "Service stopped"
-  tar -xzf v${RELEASE}.tar.gz
+
-  cp -r mafl-${RELEASE}/* /opt/mafl/
+    msg_info "Performing backup"
-  rm -rf mafl-${RELEASE}
+    mkdir -p /opt/mafl-backup/data
+    mv /opt/mafl/data /opt/mafl-backup/data
+    rm -rf /opt/mafl
+    msg_ok "Backup complete"
+    
+    fetch_and_deploy_gh_release "mafl" "hywax/mafl"
+
+    msg_info "Updating Mafl to v${RELEASE}"
     cd /opt/mafl
     yarn install
     yarn build
+    mv /opt/mafl-backup/data /opt/mafl/data
     systemctl start mafl
     msg_ok "Updated Mafl to v${RELEASE}"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
   exit
 }
 

ct/openwebui.sh

@@ -30,11 +30,11 @@ function update_script() {
 
   if [ -x "/usr/bin/ollama" ]; then
     msg_info "Updating Ollama"
-    rm -rf /usr/lib/ollama
-    rm -rf /usr/bin/ollama
     OLLAMA_VERSION=$(ollama -v | awk '{print $NF}')
     RELEASE=$(curl -s https://api.github.com/repos/ollama/ollama/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
     if [ "$OLLAMA_VERSION" != "$RELEASE" ]; then
+      rm -rf /usr/lib/ollama
+      rm -rf /usr/bin/ollama
       curl -fsSLO https://ollama.com/download/ollama-linux-amd64.tgz
       tar -C /usr -xzf ollama-linux-amd64.tgz
       rm -rf ollama-linux-amd64.tgz

ct/pocketid.sh

@@ -86,4 +86,4 @@ msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Configure your reverse proxy to point to:${BGN} ${IP}:1411${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://{PUBLIC_URL}/login/setup${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://{PUBLIC_URL}/setup${CL}"

ct/qbittorrent.sh

@@ -31,7 +31,7 @@ function update_script() {
     touch /opt/${APP}_version.txt
     mkdir -p $HOME/.config/qBittorrent/
     mkdir -p /opt/qbittorrent/
-    mv /.config/qBittorrent $HOME/.config/
+    [ -d "/.config/qBittorrent" ] && mv /.config/qBittorrent "$HOME/.config/"
     $STD apt-get remove --purge -y qbittorrent-nox
     sed -i 's@ExecStart=/usr/bin/qbittorrent-nox@ExecStart=/opt/qbittorrent/qbittorrent-nox@g' /etc/systemd/system/qbittorrent-nox.service
     systemctl daemon-reload

ct/threadfin.sh

@@ -27,12 +27,24 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  msg_info "Updating $APP"
+
-  systemctl stop threadfin.service
+  RELEASE=$(curl -fsSL https://api.github.com/repos/threadfin/threadfin/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-  curl -fsSL "https://github.com/Threadfin/Threadfin/releases/latest/download/Threadfin_linux_amd64" -o "/opt/threadfin/threadfin"
+  if [[ "${RELEASE}" != "$(cat ~/.threadfin 2>/dev/null)" ]] || [[ ! -f ~/.threadfin ]]; then
-  chmod +x /opt/threadfin/threadfin
+
-  systemctl start threadfin.service
+    msg_info "Stopping $APP"
-  msg_ok "Updated $APP"
+    systemctl stop threadfin
+    msg_ok "Stopped $APP"
+
+    fetch_and_deploy_gh_release "threadfin" "threadfin/threadfin" "singlefile" "latest" "/opt/threadfin" "Threadfin_linux_amd64"
+
+    msg_info "Starting $APP"
+    systemctl start threadfin
+    msg_ok "Started $APP"
+
+    msg_ok "Updated Successfully"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
   exit
 }
 

ct/trilium.sh

@@ -3,7 +3,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2025 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://triliumnext.github.io/Docs/
+# Source: https://github.com/TriliumNext/Trilium
 
 APP="Trilium"
 var_tags="${var_tags:-notes}"
@@ -27,9 +27,8 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
-  if [[ ! -f /opt/${APP}_version.txt ]]; then touch /opt/${APP}_version.txt; fi
+  RELEASE=$(curl -fsSL https://api.github.com/repos/TriliumNext/Trilium/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-  RELEASE=$(curl -fsSL https://api.github.com/repos/TriliumNext/Notes/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+  if [[ "${RELEASE}" != "$(cat ~/.Trilium 2>/dev/null)" ]] || [[ ! -f ~/.Trilium ]]; then
- if [[ "v${RELEASE}" != "$(cat /opt/${APP}_version.txt 2>/dev/null)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
 
     if [[ -d /opt/trilium/db ]]; then
       DB_PATH="/opt/trilium/db"
@@ -47,24 +46,20 @@ function update_script() {
     sleep 1
     msg_ok "Stopped ${APP}"
 
-  msg_info "Updating to ${RELEASE}"
+    msg_info "Backing up Database"
     mkdir -p /opt/trilium_backup
     cp -r "${DB_PATH}" /opt/trilium_backup/
     rm -rf /opt/trilium
-  cd /tmp
+    msg_ok "Backed up Database"
-  curl -fsSL "https://github.com/TriliumNext/trilium/releases/download/v${RELEASE}/TriliumNextNotes-Server-v${RELEASE}-linux-x64.tar.xz" -o "TriliumNextNotes-Server-v${RELEASE}-linux-x64.tar.xz"
-  tar -xf "TriliumNextNotes-Server-v${RELEASE}-linux-x64.tar.xz"
-  mv "TriliumNextNotes-Server-${RELEASE}-linux-x64" /opt/trilium
 
-  # Restore database
+    fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-x64.tar.xz"
+
+    msg_info "Restoring Database"
     mkdir -p "$(dirname "${DB_RESTORE_PATH}")"
     cp -r /opt/trilium_backup/$(basename "${DB_PATH}") "${DB_RESTORE_PATH}"
-
+    msg_ok "Restored Database"
-  echo "v${RELEASE}" >/opt/${APP}_version.txt
-  msg_ok "Updated to ${RELEASE}"
 
     msg_info "Cleaning up"
-  rm -rf "/tmp/TriliumNextNotes-Server-${RELEASE}-linux-x64.tar.xz"
     rm -rf /opt/trilium_backup
     msg_ok "Cleaned"
 
@@ -73,11 +68,11 @@ function update_script() {
     sleep 1
     msg_ok "Started ${APP}"
     msg_ok "Updated Successfully"
-else
+  else
     msg_ok "No update required. ${APP} is already at ${RELEASE}"
-fi
+  fi
 
-exit
+  exit
 }
 
 start

ct/zigbee2mqtt.sh

@@ -9,7 +9,7 @@ APP="Zigbee2MQTT"
 var_tags="${var_tags:-smarthome;zigbee;mqtt}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
+var_disk="${var_disk:-5}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"
 var_unprivileged="${var_unprivileged:-0}"
@@ -27,16 +27,28 @@ function update_script() {
     msg_error "No ${APP} Installation Found!"
     exit
   fi
+
+  if [[ -f ~/.zigbee2mqtt ]]; then
+    CURRENT="$(cat ~/.zigbee2mqtt)"
+  elif [[ -f /opt/${APP}_version.txt ]]; then
+    CURRENT="$(cat /opt/${APP}_version.txt)"
+    rm -f /opt/${APP}_version.txt
+  else
+    CURRENT=""
+  fi
+
   RELEASE=$(curl -fsSL https://api.github.com/repos/Koenkk/zigbee2mqtt/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+  if [[ "$RELEASE" != "$CURRENT" ]]; then
+    if ! command -v jq &>/dev/null; then
+      $STD apt-get update
+      $STD apt-get install -y jq
+    fi
+    NODE_VERSION=24 NODE_MODULE="pnpm@$(curl -fsSL https://raw.githubusercontent.com/Koenkk/zigbee2mqtt/master/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+
     msg_info "Stopping Service"
     systemctl stop zigbee2mqtt
     msg_ok "Stopped Service"
 
-    msg_info "Updating pnpm"
-    $STD npm install -g pnpm@10.4.1
-    msg_ok "Updated pnpm"
-
     msg_info "Creating Backup"
     rm -rf /opt/${APP}_backup*.tar.gz
     mkdir -p /opt/z2m_backup
@@ -44,12 +56,9 @@ function update_script() {
     mv /opt/zigbee2mqtt/data /opt/z2m_backup
     msg_ok "Backup Created"
 
+    fetch_and_deploy_gh_release "Zigbee2MQTT" "Koenkk/zigbee2mqtt" "tarball" "latest" "/opt/zigbee2mqtt"
+
     msg_info "Updating ${APP} to v${RELEASE}"
-    cd /opt
-    curl -fsSL "https://github.com/Koenkk/zigbee2mqtt/archive/refs/tags/${RELEASE}.zip" -o $(basename "https://github.com/Koenkk/zigbee2mqtt/archive/refs/tags/${RELEASE}.zip")
-    $STD unzip ${RELEASE}.zip
-    rm -rf /opt/zigbee2mqtt
-    mv zigbee2mqtt-${RELEASE} /opt/zigbee2mqtt
     rm -rf /opt/zigbee2mqtt/data
     mv /opt/z2m_backup/data /opt/zigbee2mqtt
     cd /opt/zigbee2mqtt
@@ -63,9 +72,7 @@ function update_script() {
 
     msg_info "Cleaning up"
     rm -rf /opt/z2m_backup
-    rm -rf /opt/${RELEASE}.zip
     msg_ok "Cleaned up"
-    echo "${RELEASE}" >/opt/${APP}_version.txt
   else
     msg_ok "No update required. ${APP} is already at v${RELEASE}."
   fi

ct/zipline.sh

@@ -40,9 +40,9 @@ function update_script() {
 
     msg_info "Updating ${APP} to ${RELEASE}"
     cp /opt/zipline/.env /opt/
-    mkdir -p /opt/zipline-upload
+    mkdir -p /opt/zipline-uploads
-    if [ -d /opt/zipline/upload ] && [ "$(ls -A /opt/zipline/upload)" ]; then
+    if [ -d /opt/zipline/uploads ] && [ "$(ls -A /opt/zipline/uploads)" ]; then
-      cp -R /opt/zipline/upload/* /opt/zipline-upload/
+      cp -R /opt/zipline/uploads/* /opt/zipline-uploads/
     fi
     curl -fsSL "https://github.com/diced/zipline/archive/refs/tags/v${RELEASE}.zip" -o $(basename "https://github.com/diced/zipline/archive/refs/tags/v${RELEASE}.zip")
     $STD unzip v"${RELEASE}".zip

frontend/public/json/add-iptag.json

@@ -11,7 +11,7 @@
   "interface_port": null,
   "documentation": null,
   "website": null,
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/svg/proxmox.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/proxmox.webp",
   "config_path": "/opt/iptag/iptag.conf",
   "description": "This script automatically adds IP address as tags to LXC containers or VM's using a systemd service. The service also updates the tags if a LXC/VM IP address is changed.",
   "install_methods": [

frontend/public/json/babybuddy.json

@@ -11,7 +11,7 @@
   "interface_port": 80,
   "documentation": "https://docs.baby-buddy.net/",
   "website": "https://github.com/babybuddy/babybuddy",
-  "logo": "https://raw.githubusercontent.com/selfhst/icons/refs/heads/main/svg/baby-buddy.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/baby-buddy.webp",
   "config_path": "/opt/babybuddy/babybuddy/settings/production.py",
   "description": "Baby Buddy is an open-source web application designed to assist caregivers in tracking various aspects of a baby's daily routine, including sleep, feedings, diaper changes, tummy time, and more. By recording this data, caregivers can better understand and anticipate their baby's needs, reducing guesswork in daily care. The application offers a user-friendly dashboard for data entry and visualization, supports multiple users, and provides features like timers and reminders. Additionally, Baby Buddy can be integrated with platforms like Home Assistant and Grafana for enhanced functionality.",
   "install_methods": [

frontend/public/json/bunkerweb.json

@@ -31,5 +31,10 @@
     "username": null,
     "password": null
   },
-  "notes": []
+  "notes": [
+    {
+      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
+      "type": "warning"
+    }
+  ]
 }

frontend/public/json/cloudflare-ddns.json

@@ -19,8 +19,8 @@
       "type": "default",
       "script": "ct/cloudflare-ddns.sh",
       "resources": {
-        "cpu": 1,
+        "cpu": 2,
-        "ram": 512,
+        "ram": 1024,
         "hdd": 2,
         "os": "Debian",
         "version": "12"

frontend/public/json/convertx.json

@@ -12,7 +12,7 @@
   "interface_port": 3000,
   "documentation": "https://github.com/C4illin/ConvertX",
   "website": "https://github.com/C4illin/ConvertX",
-  "logo": "https://raw.githubusercontent.com/selfhst/icons/refs/heads/main/svg/convertx.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/convertx.webp",
   "description": "ConvertX is a self-hosted online file converter supporting over 1000 formats, including images, audio, video, documents, and more, powered by FFmpeg, GraphicsMagick, and other libraries.",
   "install_methods": [
     {

frontend/public/json/dockge.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 5001,
   "documentation": null,

frontend/public/json/emqx.json

@@ -35,6 +35,10 @@
     {
       "text": "Setup-Steps: Access Control ➡ Authentication ➡ Create ➡ Next ➡ Next ➡ Create ➡ Users ➡ Add ➡ Username / Password (to authenicate with MQTT) ➡ Save. You're now ready to enjoy a high-performance MQTT Broker.",
       "type": "info"
+    },
+    {
+      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
+      "type": "warning"
     }
   ]
 }

frontend/public/json/evcc.json

@@ -6,7 +6,7 @@
     ],
     "date_created": "2024-10-15",
     "type": "ct",
-    "updateable": false,
+    "updateable": true,
     "privileged": false,
     "interface_port": 7070,
     "documentation": "https://evcc.io/#devices",

frontend/public/json/huntarr.json

@@ -12,7 +12,7 @@
   "documentation": "https://github.com/plexguide/Huntarr.io/wiki",
   "config_path": "/opt/huntarr",
   "website": "https://github.com/plexguide/Huntarr.io",
-  "logo": "https://raw.githubusercontent.com/plexguide/Huntarr.io/refs/heads/main/frontend/static/logo/Huntarr.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/huntarr.webp",
   "description": "Huntarr is a tool that automates the search for missing or low-quality media content in your collection. It works seamlessly with applications like Sonarr, Radarr, Lidarr, Readarr, and Whisparr, enhancing their functionality with continuous background scans to identify and update missed or outdated content. Through a user-friendly web interface accessible on port 9705, Huntarr provides real-time statistics, log views, and extensive configuration options. The software is especially useful for users who want to keep their media library up to date by automatically searching for missing episodes or higher-quality versions. Huntarr is well-suited for self-hosted environments and can easily run in LXC containers or Docker setups.",
   "install_methods": [
     {

frontend/public/json/itsm-ng.json

@@ -0,0 +1,35 @@
+{
+  "name": "ITSM-NG",
+  "slug": "itsm-ng",
+  "categories": [
+    25
+  ],
+  "date_created": "2025-07-01",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 80,
+  "documentation": "https://wiki.itsm-ng.org/en/home",
+  "website": "https://itsm-ng.com",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/itsm-ng.webp",
+  "config_path": "/etc/itsm-ng",
+  "description": "ITSM-NG is a powerful, open-source IT Service Management (ITSM) solution designed for managing IT assets, software, licenses, and support processes in accordance with ITIL best practices. It offers integrated features for asset inventory, incident tracking, problem management, change requests, and service desk workflows.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/itsm-ng.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 10,
+        "os": "debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": "itsm",
+    "password": "itsm"
+  },
+  "notes": []
+}

frontend/public/json/jellyfin.json

@@ -39,6 +39,10 @@
     {
       "text": "FFmpeg path: /usr/lib/jellyfin-ffmpeg/ffmpeg",
       "type": "info"
+    },
+     {
+      "text": "For NVIDIA graphics cards, you'll need to install the same drivers in the container that you did on the host. In the container, run the driver installation script and add the CLI arg --no-kernel-module",
+      "type": "info"
     }
   ]
 }

frontend/public/json/kapowarr.json

@@ -0,0 +1,35 @@
+{
+  "name": "Kapowarr",
+  "slug": "kapowarr",
+  "categories": [
+    14
+  ],
+  "date_created": "2025-06-30",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 5656,
+  "documentation": "https://casvt.github.io/Kapowarr/general_info/workings/",
+  "website": "https://casvt.github.io/Kapowarr/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/kapowarr.webp",
+  "config_path": "",
+  "description": "Kapowarr allows you to build a digital library of comics. You can add volumes, map them to a folder and start managing! Download, rename, move and convert issues of the volume (including TPB's, One Shots, Hard Covers, and more). The whole process is automated and can be customised in the settings.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/kapowarr.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 256,
+        "hdd": 2,
+        "os": "debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/librespeed-rust.json

@@ -0,0 +1,35 @@
+{
+  "name": "Librespeed Rust",
+  "slug": "librespeed-rust",
+  "categories": [
+    4
+  ],
+  "date_created": "2025-07-01",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "config_path": "/var/lib/librespeed-rs/configs.toml",
+  "interface_port": 8080,
+  "documentation": "https://github.com/librespeed/speedtest-rust",
+  "website": "https://github.com/librespeed/speedtest-rust",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/librespeed.webp",
+  "description": "Librespeed is a no flash, no java, no websocket speedtest server. This community script deploys the rust version for simplicity and low resource usage.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/librespeed-rust.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 512,
+        "hdd": 4,
+        "os": "Debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/lyrionmusicserver.json

@@ -12,7 +12,7 @@
   "interface_port": 9000,
   "documentation": "https://lyrion.org/",
   "website": "https://lyrion.org/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/lyrion-media-server.webp",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/lyrion-music-server.webp",
   "description": "Lyrion Music Server is an open-source server software to stream local music collections, internet radio, and music services to Squeezebox and compatible audio players.",
   "install_methods": [
     {

frontend/public/json/mysql.json

@@ -39,6 +39,10 @@
         {
             "text": "With an option to install the MySQL 8.4 LTS release instead of MySQL 8.0",
             "type": "info"
+        },
+        {
+            "text": "If installed, access phpMyAdmin at `http://<LXC_IP>/phpMyAdmin`, case sensitive.",
+            "type": "info"
         }
     ]
 }

frontend/public/json/oauth2-proxy.json

@@ -12,7 +12,7 @@
   "interface_port": null,
   "documentation": "https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview",
   "website": "https://oauth2-proxy.github.io/oauth2-proxy/",
-  "logo": "https://raw.githubusercontent.com/oauth2-proxy/oauth2-proxy/f82e90426a1881d36bf995f25de9b7b1db4c2564/docs/static/img/logos/OAuth2_Proxy_icon.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/oauth2-proxy.webp",
   "config_path": "/opt/oauth2-proxy/config.toml",
   "description": "A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.",
   "install_methods": [

frontend/public/json/pingvin.json

@@ -1,40 +0,0 @@
-{
-  "name": "Pingvin Share",
-  "slug": "pingvin",
-  "categories": [
-    11
-  ],
-  "date_created": "2024-05-02",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 3000,
-  "documentation": "https://stonith404.github.io/pingvin-share/introduction",
-  "website": "https://github.com/stonith404/pingvin-share",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/pingvin-share.webp",
-  "config_path": "/opt/pingvin-share/config.yaml",
-  "description": "Pingvin Share is self-hosted file sharing platform and an alternative for WeTransfer.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/pingvin.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 2048,
-        "hdd": 8,
-        "os": "debian",
-        "version": "12"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "Run `DATA_DIRECTORY=path-to-your-data-directory pm2 restart all --update-env` to update path to your data directory or to update environment variables.",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/pulse.json

@@ -11,7 +11,7 @@
   "interface_port": 7655,
   "documentation": null,
   "website": "https://github.com/rcourtman/Pulse",
-  "logo": "https://raw.githubusercontent.com/rcourtman/Pulse/main/src/public/logos/pulse-logo-256x256.png",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/pulse.webp",
   "config_path": "/opt/pulse/.env",
   "description": "A lightweight monitoring application for Proxmox VE that displays real-time status for VMs and containers via a simple web interface.",
   "install_methods": [

frontend/public/json/rclone.json

@@ -11,7 +11,7 @@
   "interface_port": 3000,
   "documentation": "https://rclone.org/docs/",
   "website": "https://rclone.org/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/svg/rclone.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/rclone.webp",
   "config_path": "~/.config/rclone/rclone.conf",
   "description": "Rclone is a command-line program to manage files on cloud storage. It is a feature-rich alternative to cloud vendors' web storage interfaces",
   "install_methods": [

frontend/public/json/readarr.json

@@ -1,35 +0,0 @@
-{
-    "name": "Readarr",
-    "slug": "readarr",
-    "categories": [
-        14
-    ],
-    "date_created": "2024-05-02",
-    "type": "ct",
-    "updateable": false,
-    "privileged": false,
-    "interface_port": 8787,
-    "documentation": null,
-    "website": "https://readarr.com/",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/readarr.webp",
-    "config_path": "",
-    "description": "Readarr is an eBook and audiobook management tool designed for Usenet and BitTorrent users. It allows users to manage and organize their eBook and audiobook collection with ease. Readarr integrates with popular Usenet and BitTorrent clients, such as Sonarr and Lidarr, to automate the downloading and organizing of eBook and audiobook files. The software provides a web-based interface for managing and organizing eBooks and audiobooks, making it easy to search and find titles, authors, and genres. Readarr also supports metadata management, including cover art and information, making it easy for users to keep their eBook and audiobook collection organized and up-to-date. The software is designed to be easy to use and provides a simple and intuitive interface for managing and organizing eBook and audiobook collections, making it a valuable tool for book and audiobook enthusiasts who want to keep their collection organized and up-to-date. With Readarr, users can enjoy their eBook and audiobook collection from anywhere, making it a powerful tool for managing and sharing book and audiobook files.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/readarr.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 1024,
-                "hdd": 4,
-                "os": "debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": []
-}

frontend/public/json/streamlink-webui.json

@@ -12,7 +12,7 @@
   "documentation": "https://github.com/CrazyWolf13/streamlink-webui",
   "config_path": "/opt/streamlink-webui.env",
   "website": "https://github.com/CrazyWolf13/streamlink-webui",
-  "logo": "https://streamlink.github.io/_static/icon.svg",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/streamlink.webp",
   "description": "a simple web-ui to the well-known streamlink cli application, which allows you to save twitch streams to your local disk.",
   "install_methods": [
     {

frontend/public/json/syncthing.json

@@ -12,7 +12,7 @@
     "documentation": null,
     "website": "https://syncthing.net/",
     "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/syncthing.webp",
-    "config_path": "/root/.local/state/syncthing/config.xml",
+    "config_path": "/root/.local/state/syncthing/config.xml - Alpine: /var/lib/syncthing/.local/state/syncthing/config.xml",
     "description": "Syncthing is an open-source file syncing tool that allows users to keep their files in sync across multiple devices by using peer-to-peer synchronization. It doesn't rely on any central server, so all data transfers are directly between devices.",
     "install_methods": [
         {
@@ -25,6 +25,17 @@
                 "os": "debian",
                 "version": "12"
             }
+        },
+    {
+      "type": "alpine",
+      "script": "ct/alpine-syncthing.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 256,
+        "hdd": 1,
+        "os": "alpine",
+        "version": "3.22"
+      }
     }
   ],
     "default_credentials": {

frontend/public/json/threadfin.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-06-12",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 34400,
   "documentation": null,

frontend/public/json/trilium.json

@@ -1,5 +1,5 @@
 {
-  "name": "TriliumNext",
+  "name": "Trilium Notes",
   "slug": "trilium",
   "categories": [
     12
@@ -9,11 +9,11 @@
   "updateable": true,
   "privileged": false,
   "interface_port": 8080,
-  "documentation": "https://triliumnext.github.io/Docs/",
+  "documentation": "https://github.com/TriliumNext/trilium/wiki",
   "website": "https://github.com/TriliumNext/trilium",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/triliumnext.webp",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/trilium-notes.webp",
   "config_path": "/root/trilium-data/config.ini",
-  "description": "TriliumNext is an newer Fork of Trilium. TriliumNext is an open-source note-taking and personal knowledge management application. It allows users to organize and manage their notes, ideas, and information in a single place, using a hierarchical tree-like structure. Trilium offers a range of features, including rich text formatting, links, images, and attachments, making it easy to create and structure notes. The software is designed to be flexible and customizable, with a range of customization options and plugins available, including themes, export options, and more. Trilium is a self-hosted solution, and can be run on a local machine or a cloud-based server, providing users with full control over their notes and information.",
+  "description": "Trilium Notes is the latest and officially maintained version of the powerful, self-hosted note-taking and personal knowledge management application. It enables users to organize information in a hierarchical tree structure and supports rich text editing, internal linking, images, attachments, and powerful scripting capabilities. This version reflects the most current development efforts under the TriliumNext organization and replaces all prior forks or legacy variants. Trilium is ideal for building personal wikis, structured documentation, and long-term knowledge archives, giving users full local control and privacy.",
   "install_methods": [
     {
       "type": "default",

frontend/public/json/zigbee2mqtt.json

@@ -21,7 +21,7 @@
       "resources": {
         "cpu": 2,
         "ram": 1024,
-        "hdd": 4,
+        "hdd": 5,
         "os": "debian",
         "version": "12"
       }

install/agentdvr-install.sh

@@ -14,11 +14,12 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
+$STD apt-get install -y \
-$STD apt-get install -y alsa-utils
+  apt-transport-https \
-$STD apt-get install -y libxext-dev
+  alsa-utils \
-$STD apt-get install -y fontconfig
+  libxext-dev \
-$STD apt-get install -y libva-drm2
+  fontconfig \
+  libva-drm2
 msg_ok "Installed Dependencies"
 
 msg_info "Installing AgentDVR"
@@ -27,7 +28,6 @@ RELEASE=$(curl -fsSL "https://www.ispyconnect.com/api/Agent/DownloadLocation4?pl
 cd /opt/agentdvr/agent
 curl -fsSL "$RELEASE" -o $(basename "$RELEASE")
 $STD unzip Agent_Linux64*.zip
-rm -rf Agent_Linux64*.zip
 chmod +x ./Agent
 msg_ok "Installed AgentDVR"
 
@@ -54,6 +54,7 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
+rm -rf Agent_Linux64*.zip
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/alpine-docker-install.sh

@@ -67,5 +67,14 @@ if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
   msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
 fi
 
+read -r -p "${TAB3}Would you like to expose the Docker TCP socket? <y/N> " prompt
+if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
+  msg_info "Exposing Docker TCP socket"
+  $STD mkdir -p /etc/docker
+  $STD echo '{ "hosts": ["unix:///var/run/docker.sock", "tcp://0.0.0.0:2375"] }' > /etc/docker/daemon.json
+  $STD rc-service docker restart
+  msg_ok "Exposed Docker TCP socket at tcp://+:2375"
+fi
+
 motd_ssh
 customize

install/alpine-komodo-install.sh

@@ -28,8 +28,7 @@ msg_ok "Enabled Docker Service"
 
 echo "${TAB3}Choose the database for Komodo installation:"
 echo "${TAB3}1) MongoDB (recommended)"
-echo "${TAB3}2) SQLite"
+echo "${TAB3}2) FerretDB"
-echo "${TAB3}3) PostgreSQL"
 read -rp "${TAB3}Enter your choice (default: 1): " DB_CHOICE
 DB_CHOICE=${DB_CHOICE:-1}
 
@@ -38,10 +37,7 @@ case $DB_CHOICE in
   DB_COMPOSE_FILE="mongo.compose.yaml"
   ;;
 2)
-  DB_COMPOSE_FILE="sqlite.compose.yaml"
+  DB_COMPOSE_FILE="ferretdb.compose.yaml"
-  ;;
-3)
-  DB_COMPOSE_FILE="postgres.compose.yaml"
   ;;
 *)
   echo "Invalid choice. Defaulting to MongoDB."

install/alpine-syncthing-install.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://syncthing.net/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Setup Syncthing"
+$STD apk add --no-cache syncthing
+sed -i "{s/127.0.0.1:8384/0.0.0.0:8384/g}" /var/lib/syncthing/.local/state/syncthing/config.xml
+msg_ok "Setup Syncthing"
+
+msg_info "Enabling Syncthing Service"
+$STD rc-update add syncthing default
+msg_ok "Enabled Syncthing Service"
+
+msg_info "Starting Syncthing"
+$STD rc-service syncthing start
+msg_ok "Started Syncthing"
+
+motd_ssh
+customize

install/apache-guacamole-install.sh

@@ -64,12 +64,12 @@ $STD ldconfig
 RELEASE_CLIENT=$(curl -fsSL https://api.github.com/repos/apache/guacamole-client/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
 curl -fsSL "https://downloads.apache.org/guacamole/${RELEASE_CLIENT}/binary/guacamole-${RELEASE_CLIENT}.war" -o "/opt/apache-guacamole/tomcat9/webapps/guacamole.war"
 cd /root
-curl -fsSL "https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-java-8.0.26.tar.gz" -o "/root/mysql-connector-java-8.0.26.tar.gz"
+curl -fsSL "https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-j-9.3.0.tar.gz" -o "/root/mysql-connector-j-9.3.0.tar.gz"
-$STD tar -xf ~/mysql-connector-java-8.0.26.tar.gz
+$STD tar -xf ~/mysql-connector-j-9.3.0.tar.gz
-mv ~/mysql-connector-java-8.0.26/mysql-connector-java-8.0.26.jar /etc/guacamole/lib/
+mv ~/mysql-connector-j-9.3.0/mysql-connector-j-9.3.0.jar /etc/guacamole/lib/
-curl -fsSL "https://downloads.apache.org/guacamole/1.5.5/binary/guacamole-auth-jdbc-1.5.5.tar.gz" -o "/root/guacamole-auth-jdbc-1.5.5.tar.gz"
+curl -fsSL "https://downloads.apache.org/guacamole/${RELEASE_SERVER}/binary/guacamole-auth-jdbc-${RELEASE_SERVER}.tar.gz" -o "/root/guacamole-auth-jdbc-${RELEASE_SERVER}.tar.gz"
-$STD tar -xf ~/guacamole-auth-jdbc-1.5.5.tar.gz
+$STD tar -xf ~/guacamole-auth-jdbc-$RELEASE_SERVER.tar.gz
-mv ~/guacamole-auth-jdbc-1.5.5/mysql/guacamole-auth-jdbc-mysql-1.5.5.jar /etc/guacamole/extensions/
+mv ~/guacamole-auth-jdbc-$RELEASE_SERVER/mysql/guacamole-auth-jdbc-mysql-$RELEASE_SERVER.jar /etc/guacamole/extensions/
 msg_ok "Setup Apache Guacamole"
 
 msg_info "Setup Database"
@@ -85,7 +85,7 @@ $STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUS
   echo "Database Password: $DB_PASS"
   echo "Database Name: $DB_NAME"
 } >>~/guacamole.creds
-cd guacamole-auth-jdbc-1.5.5/mysql/schema
+cd guacamole-auth-jdbc-${RELEASE_SERVER}/mysql/schema
 cat *.sql | mariadb -u root ${DB_NAME}
 {
   echo "mysql-hostname: 127.0.0.1"
@@ -147,8 +147,8 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf ~/mysql-connector-java-8.0.26{,.tar.gz}
+rm -rf ~/mysql-connector-j-9.3.0{,.tar.gz}
-rm -rf ~/guacamole-auth-jdbc-1.5.5{,.tar.gz}
+rm -rf ~/guacamole-auth-jdbc-$RELEASE_SERVER{,.tar.gz}
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/authelia-install.sh

@@ -13,13 +13,9 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Authelia"
+fetch_and_deploy_gh_release "authelia" "authelia/authelia" "binary"
-RELEASE=$(curl -fsSL https://api.github.com/repos/authelia/authelia/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/authelia/authelia/releases/download/${RELEASE}/authelia_${RELEASE}_amd64.deb" -o "authelia_${RELEASE}_amd64.deb"
-$STD dpkg -i "authelia_${RELEASE}_amd64.deb"
-msg_ok "Install Authelia completed"
 
-read -p "${TAB3}Enter your domain (ex. example.com): " DOMAIN
+read -rp "${TAB3}Enter your domain (ex. example.com): " DOMAIN
 
 msg_info "Setting Authelia up"
 touch /etc/authelia/emails.txt
@@ -72,7 +68,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f "authelia_${RELEASE}_amd64.deb"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/baikal-install.sh

@@ -14,13 +14,12 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
+$STD apt-get install -y apache2
-  apache2 \
-  libapache2-mod-php \
-  php-{pgsql,dom}
 msg_ok "Installed Dependencies"
 
 PG_VERSION="16" setup_postgresql
+PHP_APACHE="YES" PHP_MODULE="pgsql, dom" PHP_VERSION="8.2" setup_php
+fetch_and_deploy_gh_release "baikal" "sabre-io/Baikal"
 
 msg_info "Setting up PostgreSQL Database"
 DB_NAME=baikal
@@ -36,11 +35,7 @@ $STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMP
 } >>~/baikal.creds
 msg_ok "Set up PostgreSQL Database"
 
-msg_info "Installing Baikal"
+msg_info "Configuring Baikal"
-RELEASE=$(curl -fsSL https://api.github.com/repos/sabre-io/Baikal/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-cd /opt
-curl -fsSL "https://github.com/sabre-io/baikal/releases/download/${RELEASE}/baikal-${RELEASE}.zip" -o "baikal-${RELEASE}.zip"
-$STD unzip "baikal-${RELEASE}.zip"
 cat <<EOF >/opt/baikal/config/baikal.yaml
 database:
     backend: pgsql
@@ -51,7 +46,6 @@ database:
 EOF
 chown -R www-data:www-data /opt/baikal/
 chmod -R 755 /opt/baikal/
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Baikal"
 
 msg_info "Creating Service"
@@ -90,7 +84,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf "/opt/baikal-${RELEASE}.zip"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/barcode-buddy-install.sh

@@ -16,20 +16,15 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
   apache2 \
-  redis \
+  redis
-  php-{curl,date,json,mbstring,redis,sqlite3,sockets} \
-  libapache2-mod-php
 msg_ok "Installed Dependencies"
 
-msg_info "Installing barcodebuddy"
+PHP_VERSION="8.2" PHP_APACHE="YES" PHP_MODULE="date, json, redis, sqlite3, sockets" setup_php
-RELEASE=$(curl -fsSL https://api.github.com/repos/Forceu/barcodebuddy/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+fetch_and_deploy_gh_release "barcodebuddy" "Forceu/barcodebuddy"
-cd /opt
+
-curl -fsSL "https://github.com/Forceu/barcodebuddy/archive/refs/tags/v${RELEASE}.zip" -o "v${RELEASE}.zip"
+msg_info "Configuring barcodebuddy"
-$STD unzip "v${RELEASE}.zip"
-mv "/opt/barcodebuddy-${RELEASE}" /opt/barcodebuddy
 chown -R www-data:www-data /opt/barcodebuddy/data
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+msg_ok "Configured barcodebuddy"
-msg_ok "Installed barcodebuddy"
 
 msg_info "Creating Services"
 cat <<EOF >/etc/systemd/system/barcodebuddy.service
@@ -73,7 +68,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf "/opt/v${RELEASE}.zip"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/bitmagnet-install.sh

@@ -22,17 +22,10 @@ msg_ok "Installed Dependencies"
 
 PG_VERSION="16" setup_postgresql
 setup_go
+fetch_and_deploy_gh_release "bitmagnet" "bitmagnet-io/bitmagnet"
 RELEASE=$(curl -fsSL https://api.github.com/repos/bitmagnet-io/bitmagnet/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 
-msg_info "Installing bitmagnet v${RELEASE}"
+msg_info "Setting up database"
-mkdir -p /opt/bitmagnet
-temp_file=$(mktemp)
-curl -fsSL "https://github.com/bitmagnet-io/bitmagnet/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/bitmagnet
-cd /opt/bitmagnet
-VREL=v$RELEASE
-$STD go build -ldflags "-s -w -X github.com/bitmagnet-io/bitmagnet/internal/version.GitTag=$VREL"
-chmod +x bitmagnet
 POSTGRES_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
 $STD sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$POSTGRES_PASSWORD';"
 $STD sudo -u postgres psql -c "CREATE DATABASE bitmagnet;"
@@ -41,8 +34,14 @@ $STD sudo -u postgres psql -c "CREATE DATABASE bitmagnet;"
   echo ""
   echo "postgres user password: $POSTGRES_PASSWORD"
 } >>~/postgres.creds
-echo "${RELEASE}" >/opt/bitmagnet_version.txt
+msg_ok "Database set up"
-msg_ok "Installed bitmagnet v${RELEASE}"
+
+msg_info "Configuring bitmagnet v${RELEASE}"
+cd /opt/bitmagnet
+VREL=v$RELEASE
+$STD go build -ldflags "-s -w -X github.com/bitmagnet-io/bitmagnet/internal/version.GitTag=$VREL"
+chmod +x bitmagnet
+msg_ok "Configured bitmagnet v${RELEASE}"
 
 read -r -p "${TAB3}Enter your TMDB API key if you have one: " tmdbapikey
 
@@ -72,7 +71,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/bookstack-install.sh

@@ -16,12 +16,11 @@ update_os
 msg_info "Installing Dependencies (Patience)"
 $STD apt-get install -y \
   apache2 \
-  php8.2-{mbstring,gd,fpm,curl,intl,ldap,tidy,bz2,mysql,zip,xml} \
-  composer \
-  libapache2-mod-php \
   make
 msg_ok "Installed Dependencies"
 
+PHP_MODULE="fpm, ldap, tidy, bz2, mysql" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.2" setup_php
+setup_composer
 setup_mariadb
 
 msg_info "Setting up Database"
@@ -39,13 +38,10 @@ $STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUS
 } >>~/bookstack.creds
 msg_ok "Set up database"
 
-msg_info "Setup Bookstack (Patience)"
+fetch_and_deploy_gh_release "bookstack" "BookStackApp/BookStack"
 LOCAL_IP="$(hostname -I | awk '{print $1}')"
-cd /opt
+
-RELEASE=$(curl -fsSL https://api.github.com/repos/BookStackApp/BookStack/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+msg_info "Configuring Bookstack (Patience)"
-curl -fsSL "https://github.com/BookStackApp/BookStack/archive/refs/tags/v${RELEASE}.zip" -o "v${RELEASE}.zip"
-$STD unzip v${RELEASE}.zip
-mv BookStack-${RELEASE} /opt/bookstack
 cd /opt/bookstack
 cp .env.example .env
 sudo sed -i "s|APP_URL=.*|APP_URL=http://$LOCAL_IP|g" /opt/bookstack/.env
@@ -61,8 +57,7 @@ chmod -R 775 /opt/bookstack/storage /opt/bookstack/bootstrap/cache /opt/bookstac
 chmod -R 640 /opt/bookstack/.env
 $STD a2enmod rewrite
 $STD a2enmod php8.2
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
+msg_ok "Configured Bookstack"
-msg_ok "Installed Bookstack"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/apache2/sites-available/bookstack.conf
@@ -111,7 +106,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf /opt/v${RELEASE}.zip
 $STD apt-get autoremove
 $STD apt-get autoclean
 msg_ok "Cleaned"

install/bunkerweb-install.sh

@@ -18,19 +18,12 @@ $STD apt-get install -y apt-transport-https
 $STD apt-get install -y lsb-release
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Nginx"
-curl -fsSL "https://nginx.org/keys/nginx_signing.key" | gpg --dearmor >/usr/share/keyrings/nginx-archive-keyring.gpg
-echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian $(lsb_release -cs) nginx" >/etc/apt/sources.list.d/nginx.list
-$STD apt-get update
-$STD apt-get install -y nginx=1.26.3*
-msg_ok "Installed Nginx"
-
 RELEASE=$(curl -fsSL https://api.github.com/repos/bunkerity/bunkerweb/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 msg_info "Installing BunkerWeb v${RELEASE} (Patience)"
-curl -fsSL "https://repo.bunkerweb.io/bunkerity/bunkerweb/gpgkey" | gpg --dearmor >/etc/apt/keyrings/bunkerity_bunkerweb-archive-keyring.gpg
+curl -fsSL -o install-bunkerweb.sh https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh
-echo "deb [signed-by=/etc/apt/keyrings/bunkerity_bunkerweb-archive-keyring.gpg] https://repo.bunkerweb.io/bunkerity/bunkerweb/debian/ bookworm main" >/etc/apt/sources.list.d/bunkerity_bunkerweb.list
+chmod +x install-bunkerweb.sh
-$STD apt-get update
+$STD ./install-bunkerweb.sh --yes
-$STD apt-get install -y bunkerweb=${RELEASE}
+$STD apt-mark unhold bunkerweb nginx
 cat <<EOF >/etc/apt/preferences.d/bunkerweb
 Package: bunkerweb
 Pin: version ${RELEASE}

install/bytestash-install.sh

@@ -14,22 +14,17 @@ network_check
 update_os
 
 NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "bytestash" "jordan-dalby/ByteStash"
 
 msg_info "Installing ByteStash"
 JWT_SECRET=$(openssl rand -base64 32 | tr -d '/+=')
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/jordan-dalby/ByteStash/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/jordan-dalby/ByteStash/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf $temp_file
-mv ByteStash-${RELEASE} /opt/bytestash
 cd /opt/bytestash/server
 $STD npm install
 cd /opt/bytestash/client
 $STD npm install
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
 msg_ok "Installed ByteStash"
 
-read -p "${TAB3}Do you want to allow registration of multiple accounts? [y/n]: " allowreg
+read -rp "${TAB3}Do you want to allow registration of multiple accounts? [y/n]: " allowreg
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/bytestash-backend.service
@@ -73,7 +68,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/changedetection-install.sh

@@ -116,7 +116,7 @@ Wants=browserless.service
 Type=simple
 WorkingDirectory=/opt/changedetection
 Environment=WEBDRIVER_URL=http://127.0.0.1:4444/wd/hub
-Environment=PLAYWRIGHT_DRIVER_URL=ws://localhost:3000/chrome?launch={"defaultViewport":{"height":720,"width":1280},"headless":false,"stealth":true}&blockAds=true
+Environment=PLAYWRIGHT_DRIVER_URL=ws://localhost:3000/chrome?launch=eyJkZWZhdWx0Vmlld3BvcnQiOnsiaGVpZ2h0Ijo3MjAsIndpZHRoIjoxMjgwfSwiaGVhZGxlc3MiOmZhbHNlLCJzdGVhbHRoIjp0cnVlfQ==&blockAds=true
 ExecStart=changedetection.io -d /opt/changedetection -p 5000
 [Install]
 WantedBy=multi-user.target

install/cloudflare-ddns-install.sh

@@ -15,16 +15,15 @@ update_os
 
 setup_go
 
-msg_info "Configure Application"
 var_cf_api_token="default"
-read -rp "Enter the Cloudflare API token: " var_cf_api_token
+read -rp "${TAB3}Enter the Cloudflare API token: " var_cf_api_token
 
 var_cf_domains="default"
-read -rp "Enter the domains separated with a comma (*.example.org,www.example.org) " var_cf_domains
+read -rp "${TAB3}Enter the domains separated with a comma (*.example.org,www.example.org) " var_cf_domains
 
 var_cf_proxied="false"
 while true; do
-  read -rp "Proxied? (y/n): " answer
+  read -rp "${TAB3}Proxied? (y/n): " answer
   case "$answer" in
   [Yy]*)
     var_cf_proxied="true"
@@ -39,7 +38,7 @@ while true; do
 done
 var_cf_ip6_provider="none"
 while true; do
-  read -rp "Enable IPv6 support? (y/n): " answer
+  read -rp "${TAB3}Enable IPv6 support? (y/n): " answer
   case "$answer" in
   [Yy]*)
     var_cf_ip6_provider="auto"

install/cryptpad-install.sh

@@ -14,20 +14,15 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
+$STD apt-get install -y git
-  git
 msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" setup_nodejs
 
-read -p "${TAB3}Install OnlyOffice components instead of CKEditor? (Y/N): " onlyoffice
+read -rp "${TAB3}Install OnlyOffice components instead of CKEditor? (Y/N): " onlyoffice
+fetch_and_deploy_gh_release "cryptpad" "cryptpad/cryptpad"
 
 msg_info "Setup ${APPLICATION}"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/cryptpad/cryptpad/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/cryptpad/cryptpad/archive/refs/tags/${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf $temp_file
-mv cryptpad-$RELEASE /opt/cryptpad
 cd /opt/cryptpad
 $STD npm ci
 $STD npm run install:components
@@ -39,7 +34,6 @@ sed -i "80s#//httpAddress: 'localhost'#httpAddress: '0.0.0.0'#g" /opt/cryptpad/c
 if [[ "$onlyoffice" =~ ^[Yy]$ ]]; then
   $STD bash -c "./install-onlyoffice.sh --accept-license"
 fi
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Setup ${APPLICATION}"
 
 msg_info "Creating Service"
@@ -69,7 +63,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/dashy-install.sh

@@ -14,15 +14,12 @@ network_check
 update_os
 
 NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "dashy" "Lissy93/dashy"
 
-RELEASE=$(curl -fsSL https://api.github.com/repos/Lissy93/dashy/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
 msg_info "Installing Dashy ${RELEASE} (Patience)"
-mkdir -p /opt/dashy
-curl -fsSL "https://github.com/Lissy93/dashy/archive/refs/tags/${RELEASE}.tar.gz" | tar -xz -C /opt/dashy --strip-components=1
 cd /opt/dashy
 $STD npm install
 $STD npm run build
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Dashy ${RELEASE}"
 
 msg_info "Creating Service"

install/docker-install.sh

@@ -57,6 +57,15 @@ else
   fi
 fi
 
+read -r -p "${TAB3}Would you like to expose the Docker TCP socket? <y/N> " prompt
+if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
+  msg_info "Exposing Docker TCP socket"
+  $STD mkdir -p /etc/docker
+  $STD echo '{ "hosts": ["unix:///var/run/docker.sock", "tcp://0.0.0.0:2375"] }' > /etc/docker/daemon.json
+  $STD rc-service docker restart
+  msg_ok "Exposed Docker TCP socket at tcp://+:2375"
+fi
+
 motd_ssh
 customize
 

install/esphome-install.sh

@@ -29,6 +29,11 @@ $STD /opt/esphome/.venv/bin/python -m pip install --upgrade pip
 $STD /opt/esphome/.venv/bin/python -m pip install esphome tornado esptool
 msg_ok "Setup and Installed ESPHome"
 
+msg_info "Linking esphome to /usr/local/bin"
+rm -f /usr/local/bin/esphome
+ln -s /opt/esphome/.venv/bin/esphome /usr/local/bin/esphome
+msg_ok "Linked esphome binary"
+
 msg_info "Creating Service"
 mkdir -p /root/config
 cat <<EOF >/etc/systemd/system/esphomeDashboard.service

install/immich-install.sh

@@ -84,9 +84,16 @@ $STD apt-get update
 $STD apt-get install -y jellyfin-ffmpeg7
 ln -s /usr/lib/jellyfin-ffmpeg/ffmpeg /usr/bin/ffmpeg
 ln -s /usr/lib/jellyfin-ffmpeg/ffprobe /usr/bin/ffprobe
+if [[ "$CTTYPE" == "0" ]]; then
+  chgrp video /dev/dri
+  chmod 755 /dev/dri
+  chmod 660 /dev/dri/*
+  $STD adduser "$(id -u -n)" video
+  $STD adduser "$(id -u -n)" render
+fi
 msg_ok "Dependencies Installed"
 
-read -r -p "Install OpenVINO dependencies for Intel HW-accelerated machine-learning? y/N " prompt
+read -r -p "${TAB3}Install OpenVINO dependencies for Intel HW-accelerated machine-learning? y/N " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   msg_info "Installing OpenVINO dependencies"
   touch ~/.openvino
@@ -100,13 +107,6 @@ if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   $STD popd
   rm -rf "$tmp_dir"
   dpkg -l | grep "intel-opencl-icd" | awk '{print $3}' >~/.intel_version
-  if [[ "$CTTYPE" == "0" ]]; then
-    chgrp video /dev/dri
-    chmod 755 /dev/dri
-    chmod 660 /dev/dri/*
-    $STD adduser "$(id -u -n)" video
-    $STD adduser "$(id -u -n)" render
-  fi
   msg_ok "Installed OpenVINO dependencies"
 fi
 
@@ -360,9 +360,8 @@ msg_ok "Installed ${APPLICATION}"
 
 msg_info "Creating user, env file, scripts & services"
 $STD useradd -U -s /usr/sbin/nologin -r -M -d "$INSTALL_DIR" immich
-if [[ -f ~/.openvino ]]; then
+usermod -aG video,render immich
-  usermod -aG video,render immich
+
-fi
 cat <<EOF >"${INSTALL_DIR}"/.env
 TZ=$(cat /etc/timezone)
 IMMICH_VERSION=release

install/itsm-ng-install.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Florianb63
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://itsm-ng.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+setup_mariadb
+
+msg_info "Setting up database"
+DB_NAME=itsmng_db
+DB_USER=itsmng
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+mariadb-tzinfo-to-sql /usr/share/zoneinfo | mariadb mysql
+mariadb -u root -e "CREATE DATABASE $DB_NAME;"
+mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
+mariadb -u root -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost';"
+mariadb -u root -e "GRANT SELECT ON \`mysql\`.\`time_zone_name\` TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
+{
+  echo "ITSM-NG Database Credentials"
+  echo "Database: $DB_NAME"
+  echo "Username: $DB_USER"
+  echo "Password: $DB_PASS"
+} >>~/itsmng_db.creds
+msg_ok "Set up database"
+
+msg_info "Setup ITSM-NG Repository"
+curl -fsSL http://deb.itsm-ng.org/pubkey.gpg | gpg --dearmor -o /etc/apt/trusted.gpg.d/itsm-ng-keyring.gpg
+echo "deb http://deb.itsm-ng.org/$(. /etc/os-release && echo "$ID")/ $(. /etc/os-release && echo "$VERSION_CODENAME") main" >/etc/apt/sources.list.d/itsm-ng.list
+$STD apt-get update
+msg_ok "Setup ITSM-NG Repository"
+
+msg_info "Installing ITSM-NG"
+$STD apt install -y itsm-ng
+cd /usr/share/itsm-ng
+$STD php bin/console db:install --db-name=$DB_NAME --db-user=$DB_USER --db-password=$DB_PASS --no-interaction
+$STD a2dissite 000-default.conf
+echo "* * * * * php /usr/share/itsm-ng/front/cron.php" | crontab -
+msg_ok "Installed ITSM-NG"
+
+msg_info "Configuring PHP"
+PHP_VERSION=$(ls /etc/php/ | grep -E '^[0-9]+\.[0-9]+$' | head -n 1)
+PHP_INI="/etc/php/$PHP_VERSION/apache2/php.ini"
+sed -i 's/^upload_max_filesize = .*/upload_max_filesize = 20M/' $PHP_INI
+sed -i 's/^post_max_size = .*/post_max_size = 20M/' $PHP_INI
+sed -i 's/^max_execution_time = .*/max_execution_time = 60/' $PHP_INI
+sed -i 's/^[;]*max_input_vars *=.*/max_input_vars = 5000/' "$PHP_INI"
+sed -i 's/^memory_limit = .*/memory_limit = 256M/' $PHP_INI
+sed -i 's/^;\?\s*session.cookie_httponly\s*=.*/session.cookie_httponly = On/' $PHP_INI
+systemctl restart apache2
+msg_ok "Configured PHP"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+rm -rf /usr/share/itsm-ng/install
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/kapowarr-install.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Casvt/Kapowarr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Setup Python3"
+$STD apt-get install -y python3-pip
+msg_ok "Setup Python3"
+
+setup_uv
+fetch_and_deploy_gh_release "kapowarr" "Casvt/Kapowarr"
+
+msg_info "Setup Kapowarr"
+cd /opt/kapowarr
+$STD uv venv .venv
+$STD source .venv/bin/activate
+$STD uv pip install --upgrade pip
+$STD uv pip install --no-cache-dir -r requirements.txt
+msg_ok "Installed Kapowarr"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/kapowarr.service
+[Unit]
+Description=Kapowarr Service
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/kapowarr/
+ExecStart=/opt/kapowarr/.venv/bin/python3 Kapowarr.py
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now kapowarr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/komodo-install.sh

@@ -39,8 +39,7 @@ msg_ok "Installed Docker"
 
 echo "${TAB3}Choose the database for Komodo installation:"
 echo "${TAB3}1) MongoDB (recommended)"
-echo "${TAB3}2) SQLite"
+echo "${TAB3}2) FerretDB"
-echo "${TAB3}3) PostgreSQL"
 read -rp "${TAB3}Enter your choice (default: 1): " DB_CHOICE
 DB_CHOICE=${DB_CHOICE:-1}
 
@@ -49,10 +48,7 @@ case $DB_CHOICE in
   DB_COMPOSE_FILE="mongo.compose.yaml"
   ;;
 2)
-  DB_COMPOSE_FILE="sqlite.compose.yaml"
+  DB_COMPOSE_FILE="ferretdb.compose.yaml"
-  ;;
-3)
-  DB_COMPOSE_FILE="postgres.compose.yaml"
   ;;
 *)
   echo "Invalid choice. Defaulting to MongoDB."

install/librespeed-rust-install.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Joseph Stubberfield (stubbers)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/librespeed/speedtest-rust
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "librespeed-rust" "librespeed/speedtest-rust" "binary" "latest" "/opt/librespeed-rust" "librespeed-rs-x86_64-unknown-linux-gnu.deb"
+
+msg_info "Enabling Service"
+systemctl enable -q --now speedtest_rs.service
+msg_ok "Enabled Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/mafl-install.sh

@@ -14,22 +14,17 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y make
+$STD apt-get install -y \
-$STD apt-get install -y g++
+  ca-certificates \
-$STD apt-get install -y gcc
+  build-essential
-$STD apt-get install -y ca-certificates
 msg_ok "Installed Dependencies"
 
 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
+fetch_and_deploy_gh_release "mafl" "hywax/mafl"
 
-RELEASE=$(curl -fsSL https://api.github.com/repos/hywax/mafl/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 msg_info "Installing Mafl v${RELEASE}"
-curl -fsSL "https://github.com/hywax/mafl/archive/refs/tags/v${RELEASE}.tar.gz" -o "v${RELEASE}.tar.gz"
-tar -xzf v${RELEASE}.tar.gz
 mkdir -p /opt/mafl/data
 curl -fsSL "https://raw.githubusercontent.com/hywax/mafl/main/.example/config.yml" -o "/opt/mafl/data/config.yml"
-mv mafl-${RELEASE}/* /opt/mafl
-rm -rf mafl-${RELEASE}
 cd /opt/mafl
 export NUXT_TELEMETRY_DISABLED=true
 $STD yarn install

install/outline-install.sh

@@ -55,7 +55,7 @@ sed -i 's/NODE_ENV=production/NODE_ENV=development/g' /opt/outline/.env
 sed -i "s/generate_a_new_key/${SECRET_KEY}/g" /opt/outline/.env
 sed -i "s/user:pass@postgres/${DB_USER}:${DB_PASS}@localhost/g" /opt/outline/.env
 sed -i 's/redis:6379/localhost:6379/g' /opt/outline/.env
-sed -i "32s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
+sed -i "5s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
 sed -i 's/FORCE_HTTPS=true/FORCE_HTTPS=false/g' /opt/outline/.env
 $STD yarn install --frozen-lockfile
 export NODE_OPTIONS="--max-old-space-size=3584"

install/threadfin-install.sh

@@ -14,16 +14,12 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y ffmpeg
+$STD apt-get install -y \
-$STD apt-get install -y vlc
+  ffmpeg \
+  vlc
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Threadfin"
+fetch_and_deploy_gh_release "threadfin" "threadfin/threadfin" "singlefile" "latest" "/opt/threadfin" "Threadfin_linux_amd64"
-mkdir -p /opt/threadfin
-curl -fsSL "https://github.com/Threadfin/Threadfin/releases/latest/download/Threadfin_linux_amd64" -o "/opt/threadfin/threadfin"
-chmod +x /opt/threadfin/threadfin
-
-msg_ok "Installed Threadfin"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/threadfin.service

install/trilium-install.sh

@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://triliumnext.github.io/Docs/
+# Source: https://github.com/TriliumNext/Trilium
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -13,14 +13,7 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Setup TriliumNext"
+fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-x64.tar.xz"
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/TriliumNext/trilium/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/TriliumNext/trilium/releases/download/v${RELEASE}/TriliumNextNotes-Server-v${RELEASE}-linux-x64.tar.xz" -o "TriliumNextNotes-Server-v${RELEASE}-linux-x64.tar.xz"
-tar -xf TriliumNextNotes-Server-v${RELEASE}-linux-x64.tar.xz
-mv TriliumNextNotes-Server-$RELEASE-linux-x64 /opt/trilium
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Setup TriliumNext"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/trilium.service
@@ -46,7 +39,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf /opt/TriliumNextNotes-Server-${RELEASE}-linux-x64.tar.xz
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/zigbee2mqtt-install.sh

@@ -19,17 +19,15 @@ $STD apt-get install -y \
   make \
   g++ \
   gcc \
-  ca-certificates
+  ca-certificates \
+  jq
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="22" NODE_MODULE="pnpm@latest" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="pnpm@$(curl -fsSL https://raw.githubusercontent.com/Koenkk/zigbee2mqtt/master/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+
+fetch_and_deploy_gh_release "Zigbee2MQTT" "Koenkk/zigbee2mqtt" "tarball" "latest" "/opt/zigbee2mqtt"
 
 msg_info "Setting up Zigbee2MQTT"
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/Koenkk/zigbee2mqtt/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/Koenkk/zigbee2mqtt/archive/refs/tags/${RELEASE}.zip" -o "${RELEASE}.zip"
-$STD unzip ${RELEASE}.zip
-mv zigbee2mqtt-${RELEASE} /opt/zigbee2mqtt
 cd /opt/zigbee2mqtt/data
 mv configuration.example.yaml configuration.yaml
 cd /opt/zigbee2mqtt
@@ -60,7 +58,6 @@ motd_ssh
 customize
 
 msg_info "Cleaning up"
-rm -rf /opt/${RELEASE}.zip
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/zipline-install.sh

@@ -50,9 +50,9 @@ CORE_HOSTNAME=0.0.0.0
 CORE_PORT=3000
 CORE_RETURN_HTTPS=false
 DATASOURCE_TYPE=local
-DATASOURCE_LOCAL_DIRECTORY=/opt/zipline-upload
+DATASOURCE_LOCAL_DIRECTORY=/opt/zipline-uploads
 EOF
-mkdir -p /opt/zipline-upload
+mkdir -p /opt/zipline-uploads
 $STD pnpm install
 $STD pnpm build
 echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"

misc/alpine-install.func

@@ -83,11 +83,6 @@ update_os() {
   msg_info "Updating Container OS"
   $STD apk -U upgrade
   msg_ok "Updated Container OS"
-
-  msg_info "Installing core dependencies"
-  $STD apk update
-  $STD apk add newt curl openssh nano mc ncurses gpg
-  msg_ok "Core dependencies installed"
 }
 
 # This function modifies the message of the day (motd) and SSH settings

misc/api.func

@@ -30,7 +30,7 @@ post_to_api() {
     "ram_size": $RAM_SIZE,
     "os_type": "$var_os",
     "os_version": "$var_version",
-    "disableip6": "$DISABLEIP6",
+    "disableip6": "",
     "nsapp": "$NSAPP",
     "method": "$METHOD",
     "pve_version": "$pve_version",

misc/build.func

@@ -20,11 +20,9 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 if command -v curl >/dev/null 2>&1; then
   source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
   load_functions
-  #echo "(build.func) Loaded core.func via curl"
 elif command -v wget >/dev/null 2>&1; then
   source <(wget -qO- https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
   load_functions
-  #echo "(build.func) Loaded core.func via wget"
 fi
 # This function enables error handling in the script by setting options and defining a trap for the ERR signal.
 catch_errors() {
@@ -189,10 +187,12 @@ base_settings() {
   HN=$NSAPP
   BRG="vmbr0"
   NET="dhcp"
+  IPV6_METHOD="none"
+  IPV6_STATIC=""
   GATE=""
   APT_CACHER=""
   APT_CACHER_IP=""
-  DISABLEIP6="no"
+  #DISABLEIP6="no"
   MTU=""
   SD=""
   NS=""
@@ -239,7 +239,7 @@ RAM_SIZE="${RAM_SIZE}"
 HN="${HN}"
 BRG="${BRG}"
 APT_CACHER_IP="${APT_CACHER_IP:-none}"
-DISABLEIP6="${DISABLEIP6}"
+DISABLEIP6=""
 PW='${PW:-none}'
 SSH="${SSH}"
 SSH_AUTHORIZED_KEY="${SSH_AUTHORIZED_KEY}"
@@ -271,7 +271,7 @@ RAM_SIZE="${RAM_SIZE}"
 HN="${HN}"
 BRG="${BRG}"
 APT_CACHER_IP="${APT_CACHER_IP:-none}"
-DISABLEIP6="${DISABLEIP6}"
+DISABLEIP6=""
 PW='${PW:-none}'
 SSH="${SSH}"
 SSH_AUTHORIZED_KEY="${SSH_AUTHORIZED_KEY}"
@@ -304,13 +304,12 @@ echo_default() {
   fi
 
   # Output the selected values with icons
-  echo -e "${OS}${BOLD}${DGN}Operating System: ${BGN}$var_os${CL}"
+  echo -e "${CONTAINERID}${BOLD}${DGN}Container ID: ${BGN}${CT_ID}${CL}"
-  echo -e "${OSVERSION}${BOLD}${DGN}Version: ${BGN}$var_version${CL}"
+  echo -e "${OS}${BOLD}${DGN}Operating System: ${BGN}$var_os ($var_version)${CL}"
   echo -e "${CONTAINERTYPE}${BOLD}${DGN}Container Type: ${BGN}$CT_TYPE_DESC${CL}"
   echo -e "${DISKSIZE}${BOLD}${DGN}Disk Size: ${BGN}${DISK_SIZE} GB${CL}"
   echo -e "${CPUCORE}${BOLD}${DGN}CPU Cores: ${BGN}${CORE_COUNT}${CL}"
   echo -e "${RAMSIZE}${BOLD}${DGN}RAM Size: ${BGN}${RAM_SIZE} MiB${CL}"
-  echo -e "${CONTAINERID}${BOLD}${DGN}Container ID: ${BGN}${CT_ID}${CL}"
   if [ "$VERB" == "yes" ]; then
     echo -e "${SEARCH}${BOLD}${DGN}Verbose Mode: ${BGN}Enabled${CL}"
   fi
@@ -531,43 +530,130 @@ advanced_settings() {
     fi
   fi
 
+  # IPv4 methods: dhcp, static, none
   while true; do
-    NET=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Static IPv4 CIDR Address (/24)" 8 58 dhcp --title "IP ADDRESS" 3>&1 1>&2 2>&3)
+    IPV4_METHOD=$(whiptail --backtitle "Proxmox VE Helper Scripts" \
+      --title "IPv4 Address Management" \
+      --menu "Select IPv4 Address Assignment Method:" 12 60 2 \
+      "dhcp" "Automatic (DHCP, recommended)" \
+      "static" "Static (manual entry)" \
+      3>&1 1>&2 2>&3)
+
     exit_status=$?
-    if [ $exit_status -eq 0 ]; then
+    if [ $exit_status -ne 0 ]; then
-      if [ "$NET" = "dhcp" ]; then
-        echo -e "${NETWORK}${BOLD}${DGN}IP Address: ${BGN}$NET${CL}"
-        break
-      else
-        if [[ "$NET" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}/([0-9]|[1-2][0-9]|3[0-2])$ ]]; then
-          echo -e "${NETWORK}${BOLD}${DGN}IP Address: ${BGN}$NET${CL}"
-          break
-        else
-          whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox "$NET is an invalid IPv4 CIDR address. Please enter a valid IPv4 CIDR address or 'dhcp'" 8 58
-        fi
-      fi
-    else
       exit_script
     fi
+
+    case "$IPV4_METHOD" in
+    dhcp)
+      NET="dhcp"
+      GATE=""
+      echo -e "${NETWORK}${BOLD}${DGN}IPv4: DHCP${CL}"
+      break
+      ;;
+    static)
+      # Static: call and validate CIDR address
+      while true; do
+        NET=$(whiptail --backtitle "Proxmox VE Helper Scripts" \
+          --inputbox "Enter Static IPv4 CIDR Address (e.g. 192.168.100.50/24)" 8 58 "" \
+          --title "IPv4 ADDRESS" 3>&1 1>&2 2>&3)
+        if [ -z "$NET" ]; then
+          whiptail --msgbox "IPv4 address must not be empty." 8 58
+          continue
+        elif [[ "$NET" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}/([0-9]|[1-2][0-9]|3[0-2])$ ]]; then
+          echo -e "${NETWORK}${BOLD}${DGN}IPv4 Address: ${BGN}$NET${CL}"
+          break
+        else
+          whiptail --msgbox "$NET is not a valid IPv4 CIDR address. Please enter a correct value!" 8 58
+        fi
       done
 
-  if [ "$NET" != "dhcp" ]; then
+      # call and validate Gateway
       while true; do
-      GATE1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Enter gateway IP address" 8 58 --title "Gateway IP" 3>&1 1>&2 2>&3)
+        GATE1=$(whiptail --backtitle "Proxmox VE Helper Scripts" \
+          --inputbox "Enter Gateway IP address for static IPv4" 8 58 "" \
+          --title "Gateway IP" 3>&1 1>&2 2>&3)
         if [ -z "$GATE1" ]; then
-        whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox "Gateway IP address cannot be empty" 8 58
+          whiptail --msgbox "Gateway IP address cannot be empty." 8 58
         elif [[ ! "$GATE1" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]]; then
-        whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox "Invalid IP address format" 8 58
+          whiptail --msgbox "Invalid Gateway IP address format." 8 58
         else
           GATE=",gw=$GATE1"
           echo -e "${GATEWAY}${BOLD}${DGN}Gateway IP Address: ${BGN}$GATE1${CL}"
           break
         fi
       done
+      break
+      ;;
+    esac
+  done
+
+  # IPv6 Address Management selection
+  while true; do
+    IPV6_METHOD=$(whiptail --backtitle "Proxmox VE Helper Scripts" --menu \
+      "Select IPv6 Address Management Type:" 15 58 4 \
+      "auto" "SLAAC/AUTO (recommended, default)" \
+      "dhcp" "DHCPv6" \
+      "static" "Static (manual entry)" \
+      "none" "Disabled" \
+      --default-item "auto" 3>&1 1>&2 2>&3)
+    [ $? -ne 0 ] && exit_script
+
+    case "$IPV6_METHOD" in
+    auto)
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}SLAAC/AUTO${CL}"
+      IPV6_ADDR=""
+      IPV6_GATE=""
+      break
+      ;;
+    dhcp)
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}DHCPv6${CL}"
+      IPV6_ADDR="dhcp"
+      IPV6_GATE=""
+      break
+      ;;
+    static)
+      # Ask for static IPv6 address (CIDR notation, e.g., 2001:db8::1234/64)
+      while true; do
+        IPV6_ADDR=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox \
+          "Set a static IPv6 CIDR address (e.g., 2001:db8::1234/64)" 8 58 "" \
+          --title "IPv6 STATIC ADDRESS" 3>&1 1>&2 2>&3) || exit_script
+        if [[ "$IPV6_ADDR" =~ ^([0-9a-fA-F:]+:+)+[0-9a-fA-F]+(/[0-9]{1,3})$ ]]; then
+          echo -e "${NETWORK}${BOLD}${DGN}IPv6 Address: ${BGN}$IPV6_ADDR${CL}"
+          break
         else
-    GATE=""
+          whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox \
-    echo -e "${GATEWAY}${BOLD}${DGN}Gateway IP Address: ${BGN}Default${CL}"
+            "$IPV6_ADDR is an invalid IPv6 CIDR address. Please enter a valid IPv6 CIDR address (e.g., 2001:db8::1234/64)" 8 58
         fi
+      done
+      # Optional: ask for IPv6 gateway for static config
+      while true; do
+        IPV6_GATE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox \
+          "Enter IPv6 gateway address (optional, leave blank for none)" 8 58 "" --title "IPv6 GATEWAY" 3>&1 1>&2 2>&3)
+        if [ -z "$IPV6_GATE" ]; then
+          IPV6_GATE=""
+          break
+        elif [[ "$IPV6_GATE" =~ ^([0-9a-fA-F:]+:+)+[0-9a-fA-F]+$ ]]; then
+          break
+        else
+          whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox \
+            "Invalid IPv6 gateway format." 8 58
+
+        fi
+      done
+      break
+      ;;
+    none)
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}Disabled${CL}"
+      IPV6_ADDR="none"
+      IPV6_GATE=""
+      break
+      ;;
+    *)
+      exit_script
+      ;;
+    esac
+  done
 
   if [ "$var_os" == "alpine" ]; then
     APT_CACHER=""
@@ -581,12 +667,12 @@ advanced_settings() {
     fi
   fi
 
-  if (whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "IPv6" --yesno "Disable IPv6?" 10 58); then
+  # if (whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "IPv6" --yesno "Disable IPv6?" 10 58); then
-    DISABLEIP6="yes"
+  #   DISABLEIP6="yes"
-  else
+  # else
-    DISABLEIP6="no"
+  #   DISABLEIP6="no"
-  fi
+  # fi
-  echo -e "${DISABLEIPV6}${BOLD}${DGN}Disable IPv6: ${BGN}$DISABLEIP6${CL}"
+  # echo -e "${DISABLEIPV6}${BOLD}${DGN}Disable IPv6: ${BGN}$DISABLEIP6${CL}"
 
   if MTU1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Interface MTU Size (leave blank for default [The MTU of your selected vmbr, default is 1500])" 8 58 --title "MTU SIZE" 3>&1 1>&2 2>&3); then
     if [ -z "$MTU1" ]; then
@@ -941,6 +1027,16 @@ start() {
 build_container() {
   #  if [ "$VERBOSE" == "yes" ]; then set -x; fi
 
+  NET_STRING="-net0 name=eth0,bridge=$BRG$MAC,ip=$NET$GATE$VLAN$MTU"
+  case "$IPV6_METHOD" in
+  auto) NET_STRING="$NET_STRING,ip6=auto" ;;
+  dhcp) NET_STRING="$NET_STRING,ip6=dhcp" ;;
+  static)
+    NET_STRING="$NET_STRING,ip6=$IPV6_ADDR"
+    [ -n "$IPV6_GATE" ] && NET_STRING="$NET_STRING,gw6=$IPV6_GATE"
+    ;;
+  none) ;;
+  esac
   if [ "$CT_TYPE" == "1" ]; then
     FEATURES="keyctl=1,nesting=1"
   else
@@ -968,7 +1064,7 @@ build_container() {
   export CACHER="$APT_CACHER"
   export CACHER_IP="$APT_CACHER_IP"
   export tz="$timezone"
-  export DISABLEIPV6="$DISABLEIP6"
+  #export DISABLEIPV6="$DISABLEIP6"
   export APPLICATION="$APP"
   export app="$NSAPP"
   export PASSWORD="$PW"
@@ -988,7 +1084,7 @@ build_container() {
     -tags $TAGS
     $SD
     $NS
-    -net0 name=eth0,bridge=$BRG$MAC,ip=$NET$GATE$VLAN$MTU
+    $NET_STRING
     -onboot 1
     -cores $CORE_COUNT
     -memory $RAM_SIZE
@@ -998,7 +1094,9 @@ build_container() {
   # This executes create_lxc.sh and creates the container and .conf file
   bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/create_lxc.sh)" $?
 
-  LXC_CONFIG=/etc/pve/lxc/${CTID}.conf
+  LXC_CONFIG="/etc/pve/lxc/${CTID}.conf"
+
+  # USB passthrough for privileged LXC (CT_TYPE=0)
   if [ "$CT_TYPE" == "0" ]; then
     cat <<EOF >>"$LXC_CONFIG"
 # USB passthrough
@@ -1014,38 +1112,98 @@ lxc.mount.entry: /dev/ttyACM1       dev/ttyACM1       none bind,optional,create=
 EOF
   fi
 
-  if [ "$CT_TYPE" == "0" ]; then
+  # VAAPI passthrough for privileged containers or known apps
-    if [[ "$APP" == "Channels" || "$APP" == "Emby" || "$APP" == "ErsatzTV" || "$APP" == "Frigate" || "$APP" == "Jellyfin" || "$APP" == "Plex" || "$APP" == "immich" || "$APP" == "Tdarr" || "$APP" == "Open WebUI" || "$APP" == "Unmanic" || "$APP" == "Ollama" || "$APP" == "FileFlows" ]]; then
+  VAAPI_APPS=(
-      cat <<EOF >>"$LXC_CONFIG"
+    "immich"
-# VAAPI hardware transcoding
+    "Channels"
-lxc.cgroup2.devices.allow: c 226:0 rwm
+    "Emby"
-lxc.cgroup2.devices.allow: c 226:128 rwm
+    "ErsatzTV"
-lxc.cgroup2.devices.allow: c 29:0 rwm
+    "Frigate"
-lxc.mount.entry: /dev/fb0 dev/fb0 none bind,optional,create=file
+    "Jellyfin"
-lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir
+    "Plex"
-lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
+    "Scrypted"
-EOF
+    "Tdarr"
+    "Unmanic"
+    "Ollama"
+    "FileFlows"
+    "Open WebUI"
+  )
+
+  is_vaapi_app=false
+  for vaapi_app in "${VAAPI_APPS[@]}"; do
+    if [[ "$APP" == "$vaapi_app" ]]; then
+      is_vaapi_app=true
+      break
+    fi
+  done
+
+  if ([ "$CT_TYPE" == "0" ] || [ "$is_vaapi_app" == "true" ]) &&
+    ([[ -e /dev/dri/renderD128 ]] || [[ -e /dev/dri/card0 ]] || [[ -e /dev/fb0 ]]); then
+
+    echo ""
+    msg_custom "⚙️ " "\e[96m" "Configuring VAAPI passthrough for LXC container"
+
+    if [ "$CT_TYPE" != "0" ]; then
+      msg_custom "⚠️ " "\e[33m" "Container is unprivileged – VAAPI passthrough may not work without additional host configuration (e.g., idmap)."
+    fi
+
+    msg_custom "ℹ️ " "\e[96m" "VAAPI enables GPU hardware acceleration (e.g., for video transcoding in Jellyfin or Plex)."
+
+    echo ""
+    read -rp "➤ Automatically mount all available VAAPI devices? [Y/n]: " VAAPI_ALL
+
+    if [[ "$VAAPI_ALL" =~ ^[Yy]$|^$ ]]; then
+      # Mount all devices automatically
+      if [[ -e /dev/dri/renderD128 ]]; then
+        echo "lxc.cgroup2.devices.allow: c 226:128 rwm" >>"$LXC_CONFIG"
+        echo "lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file" >>"$LXC_CONFIG"
+      fi
+      if [[ -e /dev/dri/card0 ]]; then
+        echo "lxc.cgroup2.devices.allow: c 226:0 rwm" >>"$LXC_CONFIG"
+
+        echo "lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file" >>"$LXC_CONFIG"
+      fi
+      if [[ -e /dev/fb0 ]]; then
+        echo "lxc.cgroup2.devices.allow: c 29:0 rwm" >>"$LXC_CONFIG"
+        echo "lxc.mount.entry: /dev/fb0 dev/fb0 none bind,optional,create=file" >>"$LXC_CONFIG"
+      fi
+      if [[ -d /dev/dri ]]; then
+        echo "lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir" >>"$LXC_CONFIG"
       fi
     else
-    if [[ "$APP" == "Channels" || "$APP" == "Emby" || "$APP" == "ErsatzTV" || "$APP" == "Frigate" || "$APP" == "Jellyfin" || "$APP" == "Plex" || "$APP" == "immich" || "$APP" == "Tdarr" || "$APP" == "Open WebUI" || "$APP" == "Unmanic" || "$APP" == "Ollama" || "$APP" == "FileFlows" ]]; then
+      # Manual selection per device
-      if [[ -e "/dev/dri/renderD128" ]]; then
+      if [[ -e /dev/dri/renderD128 ]]; then
-        if [[ -e "/dev/dri/card0" ]]; then
+        read -rp "➤ Mount /dev/dri/renderD128 (GPU rendering)? [y/N]: " MOUNT_D128
-          cat <<EOF >>"$LXC_CONFIG"
+        if [[ "$MOUNT_D128" =~ ^[Yy]$ ]]; then
-# VAAPI hardware transcoding
+          echo "lxc.cgroup2.devices.allow: c 226:128 rwm" >>"$LXC_CONFIG"
-dev0: /dev/dri/card0,gid=44
+          echo "lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file" >>"$LXC_CONFIG"
-dev1: /dev/dri/renderD128,gid=104
-EOF
-        else
-          cat <<EOF >>"$LXC_CONFIG"
-# VAAPI hardware transcoding
-dev0: /dev/dri/card1,gid=44
-dev1: /dev/dri/renderD128,gid=104
-EOF
         fi
       fi
+
+      if [[ -e /dev/dri/card0 ]]; then
+        read -rp "➤ Mount /dev/dri/card0 (GPU hardware interface)? [y/N]: " MOUNT_CARD0
+        if [[ "$MOUNT_CARD0" =~ ^[Yy]$ ]]; then
+          echo "lxc.cgroup2.devices.allow: c 226:0 rwm" >>"$LXC_CONFIG"
+          echo "lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file" >>"$LXC_CONFIG"
+
+        fi
+      fi
+
+      if [[ -e /dev/fb0 ]]; then
+        read -rp "➤ Mount /dev/fb0 (Framebuffer, GUI)? [y/N]: " MOUNT_FB0
+        if [[ "$MOUNT_FB0" =~ ^[Yy]$ ]]; then
+          echo "lxc.cgroup2.devices.allow: c 29:0 rwm" >>"$LXC_CONFIG"
+          echo "lxc.mount.entry: /dev/fb0 dev/fb0 none bind,optional,create=file" >>"$LXC_CONFIG"
+        fi
+      fi
+
+      if [[ -d /dev/dri ]]; then
+        echo "lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir" >>"$LXC_CONFIG"
+      fi
     fi
   fi
 
+  # TUN device passthrough
   if [ "$ENABLE_TUN" == "yes" ]; then
     cat <<EOF >>"$LXC_CONFIG"
 lxc.cgroup2.devices.allow: c 10:200 rwm
@@ -1075,10 +1233,13 @@ EOF'
     locale-gen >/dev/null && \
     export LANG=\$locale_line"
 
+    if [[ -z "${tz:-}" ]]; then
+      tz=$(timedatectl show --property=Timezone --value 2>/dev/null || echo "Etc/UTC")
+    fi
     if pct exec "$CTID" -- test -e "/usr/share/zoneinfo/$tz"; then
-      pct exec "$CTID" -- bash -c "echo $tz >/etc/timezone && ln -sf /usr/share/zoneinfo/$tz /etc/localtime"
+      pct exec "$CTID" -- bash -c "tz='$tz'; echo \"\$tz\" >/etc/timezone && ln -sf \"/usr/share/zoneinfo/\$tz\" /etc/localtime"
     else
-      msg_info "Skipping timezone setup – zone '$tz' not found in container"
+      msg_warn "Skipping timezone setup – zone '$tz' not found in container"
     fi
 
     pct exec "$CTID" -- bash -c "apt-get update >/dev/null && apt-get install -y sudo curl mc gnupg2 >/dev/null"
@@ -1158,7 +1319,9 @@ api_exit_script() {
   fi
 }
 
-trap 'api_exit_script' EXIT
+if command -v pveversion >/dev/null 2>&1; then
+  trap 'api_exit_script' EXIT
+fi
 trap 'post_update_to_api "failed" "$BASH_COMMAND"' ERR
 trap 'post_update_to_api "failed" "INTERRUPTED"' SIGINT
 trap 'post_update_to_api "failed" "TERMINATED"' SIGTERM

misc/config-file.func

@@ -424,19 +424,6 @@ config_file() {
     fi
   fi
 
-  if [[ "${DISABLEIP6-}" == "yes" ]]; then
-    echo -e "${DISABLEIPV6}${BOLD}${DGN}Disable IPv6: ${BGN}Yes${CL}"
-  elif [[ "${DISABLEIP6-}" == "no" ]]; then
-    echo -e "${DISABLEIPV6}${BOLD}${DGN}Disable IPv6: ${BGN}No${CL}"
-  else
-    if (whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "IPv6" --yesno "Disable IPv6?" 10 58); then
-      DISABLEIP6="yes"
-    else
-      DISABLEIP6="no"
-    fi
-    echo -e "${DISABLEIPV6}${BOLD}${DGN}Disable IPv6: ${BGN}$DISABLEIP6${CL}"
-  fi
-
   if [[ -n "${MTU-}" ]]; then
     if [[ "$MTU" =~ ^-?[0-9]+$ ]]; then
       echo -e "${DEFAULT}${BOLD}${DGN}Interface MTU Size: ${BGN}$MTU${CL}"

misc/core.func

@@ -1,30 +1,6 @@
 # Copyright (c) 2021-2025 community-scripts ORG
 # License: MIT | https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/LICENSE
 
-# if ! declare -f wait_for >/dev/null; then
-#   echo "[DEBUG] Undefined function 'wait_for' used from: ${BASH_SOURCE[*]}" >&2
-#   wait_for() {
-#     echo "[DEBUG] Fallback: wait_for called with: $*" >&2
-#     true
-#   }
-# fi
-
-trap 'on_error $? $LINENO' ERR
-trap 'on_exit' EXIT
-trap 'on_interrupt' INT
-trap 'on_terminate' TERM
-
-if ! declare -f wait_for >/dev/null; then
-  wait_for() {
-    true
-  }
-fi
-
-declare -A MSG_INFO_SHOWN=()
-SPINNER_PID=""
-SPINNER_ACTIVE=0
-SPINNER_MSG=""
-
 # ------------------------------------------------------------------------------
 # Loads core utility groups once (colors, formatting, icons, defaults).
 # ------------------------------------------------------------------------------
@@ -43,100 +19,51 @@ load_functions() {
   # add more
 }
 
-on_error() {
+# ============================================================================
-  local exit_code="$1"
+# Error & Signal Handling – robust, universal, subshell-safe
-  local lineno="$2"
+# ============================================================================
 
-  stop_spinner
+_tool_error_hint() {
-
+  local cmd="$1"
-  case "$exit_code" in
+  local code="$2"
-  1) msg_error "Generic error occurred (line $lineno)" ;;
+  case "$cmd" in
-  2) msg_error "Shell misuse (line $lineno)" ;;
+  curl)
-  126) msg_error "Command cannot execute (line $lineno)" ;;
+    case "$code" in
-  127) msg_error "Command not found (line $lineno)" ;;
+    6) echo "Curl: Could not resolve host (DNS problem)" ;;
-  128) msg_error "Invalid exit argument (line $lineno)" ;;
+    7) echo "Curl: Failed to connect to host (connection refused)" ;;
-  130) msg_error "Script aborted by user (CTRL+C)" ;;
+    22) echo "Curl: HTTP error (404/403 etc)" ;;
-  143) msg_error "Script terminated by SIGTERM" ;;
+    28) echo "Curl: Operation timeout" ;;
-  *) msg_error "Script failed at line $lineno with exit code $exit_code" ;;
+    *) echo "Curl: Unknown error ($code)" ;;
     esac
-
-  exit "$exit_code"
-}
-
-on_exit() {
-  cleanup_spinner || true
-  [[ "${VERBOSE:-no}" == "yes" ]] && msg_info "Script exited"
-}
-
-on_interrupt() {
-  msg_error "Interrupted by user (CTRL+C)"
-  exit 130
-}
-
-on_terminate() {
-  msg_error "Terminated by signal (TERM)"
-  exit 143
-}
-
-setup_trap_abort_handling() {
-  trap '__handle_signal_abort SIGINT' SIGINT
-  trap '__handle_signal_abort SIGTERM' SIGTERM
-  trap '__handle_unexpected_error $?' ERR
-}
-
-__handle_signal_abort() {
-  local signal="$1"
-  echo
-  [ -n "${SPINNER_PID:-}" ] && kill "$SPINNER_PID" 2>/dev/null && wait "$SPINNER_PID" 2>/dev/null
-
-  case "$signal" in
-  SIGINT)
-    msg_error "Script aborted by user (CTRL+C)"
-    exit 130
     ;;
-  SIGTERM)
+  wget)
-    msg_error "Script terminated (SIGTERM)"
+    echo "Wget failed – URL unreachable or permission denied"
-    exit 143
     ;;
-  *)
+  systemctl)
-    msg_error "Script interrupted (unknown signal: $signal)"
+    echo "Systemd unit failure – check service name and permissions"
-    exit 1
     ;;
+  jq)
+    echo "jq parse error – malformed JSON or missing key"
+    ;;
+  mariadb | mysql)
+    echo "MySQL/MariaDB command failed – check credentials or DB"
+    ;;
+  unzip)
+    echo "unzip failed – corrupt file or missing permission"
+    ;;
+  tar)
+    echo "tar failed – invalid format or missing binary"
+    ;;
+  node | npm | pnpm | yarn)
+    echo "Node tool failed – check version compatibility or package.json"
+    ;;
+  *) echo "" ;;
   esac
 }
 
-__handle_unexpected_error() {
+catch_errors() {
-  local exit_code="$1"
+  set -Eeuo pipefail
-  echo
+  trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
-  [ -n "${SPINNER_PID:-}" ] && kill "$SPINNER_PID" 2>/dev/null && wait "$SPINNER_PID" 2>/dev/null
-
-  case "$exit_code" in
-  1)
-    msg_error "Generic error occurred (exit code 1)"
-    ;;
-  2)
-    msg_error "Misuse of shell builtins (exit code 2)"
-    ;;
-  126)
-    msg_error "Command invoked cannot execute (exit code 126)"
-    ;;
-  127)
-    msg_error "Command not found (exit code 127)"
-    ;;
-  128)
-    msg_error "Invalid exit argument (exit code 128)"
-    ;;
-  130)
-    msg_error "Script aborted by user (CTRL+C)"
-    ;;
-  143)
-    msg_error "Script terminated by SIGTERM"
-    ;;
-  *)
-    msg_error "Unexpected error occurred (exit code $exit_code)"
-    ;;
-  esac
-  exit "$exit_code"
 }
 
 # ------------------------------------------------------------------------------
@@ -153,6 +80,13 @@ color() {
   CL=$(echo "\033[m")
 }
 
+# Special for spinner and colorized output via printf
+color_spinner() {
+  CS_YW=$'\033[33m'
+  CS_YWB=$'\033[93m'
+  CS_CL=$'\033[m'
+}
+
 # ------------------------------------------------------------------------------
 # Defines formatting helpers like tab, bold, and line reset sequences.
 # ------------------------------------------------------------------------------
@@ -196,6 +130,7 @@ icons() {
   ADVANCED="${TAB}🧩${TAB}${CL}"
   FUSE="${TAB}🗂️${TAB}${CL}"
   HOURGLASS="${TAB}⏳${TAB}"
+
 }
 
 # ------------------------------------------------------------------------------
@@ -227,7 +162,7 @@ silent() {
 # Function to download & save header files
 get_header() {
   local app_name=$(echo "${APP,,}" | tr -d ' ')
-  local app_type=${APP_TYPE:-ct} # Default 'ct'
+  local app_type=${APP_TYPE:-ct}
   local header_url="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/${app_type}/headers/${app_name}"
   local local_header_path="/usr/local/community-scripts/headers/${app_type}/${app_name}"
 
@@ -257,77 +192,39 @@ header_info() {
   fi
 }
 
-# ------------------------------------------------------------------------------
+ensure_tput() {
-# Performs a curl request with retry logic and inline feedback.
+  if ! command -v tput >/dev/null 2>&1; then
-# ------------------------------------------------------------------------------
+    if grep -qi 'alpine' /etc/os-release; then
-
+      apk add --no-cache ncurses >/dev/null 2>&1
-run_curl() {
+    elif command -v apt-get >/dev/null 2>&1; then
-  if [ "$VERBOSE" = "no" ]; then
+      apt-get update -qq >/dev/null
-    $STD curl "$@"
+      apt-get install -y -qq ncurses-bin >/dev/null 2>&1
-  else
+    fi
-    curl "$@"
   fi
 }
 
-curl_handler() {
+is_alpine() {
-  set +e
+  local os_id="${var_os:-${PCT_OSTYPE:-}}"
-  trap 'set -e' RETURN
-  local args=()
-  local url=""
-  local max_retries=3
-  local delay=2
-  local attempt=1
-  local exit_code
-  local has_output_file=false
-  local result=""
 
-  # Parse arguments
+  if [[ -z "$os_id" && -f /etc/os-release ]]; then
-  for arg in "$@"; do
+    os_id="$(
-    if [[ "$arg" != -* && -z "$url" ]]; then
+      . /etc/os-release 2>/dev/null
-      url="$arg"
+      echo "${ID:-}"
-    fi
+    )"
-    [[ "$arg" == "-o" || "$arg" == --output ]] && has_output_file=true
-    args+=("$arg")
-  done
-
-  if [[ -z "$url" ]]; then
-    msg_error "No valid URL or option entered for curl_handler"
-    return 1
   fi
 
-  $STD msg_info "Fetching: $url"
+  [[ "$os_id" == "alpine" ]]
+}
 
-  while [[ $attempt -le $max_retries ]]; do
+is_verbose_mode() {
-    if $has_output_file; then
+  local verbose="${VERBOSE:-${var_verbose:-no}}"
-      $STD run_curl "${args[@]}"
+  local tty_status
-      exit_code=$?
+  if [[ -t 2 ]]; then
+    tty_status="interactive"
   else
-      result=$(run_curl "${args[@]}")
+    tty_status="not-a-tty"
-      exit_code=$?
   fi
-
+  [[ "$verbose" != "no" || ! -t 2 ]]
-    if [[ $exit_code -eq 0 ]]; then
-      $STD msg_ok "Fetched: $url"
-      $has_output_file || printf '%s' "$result"
-      return 0
-    fi
-
-    if ((attempt >= max_retries)); then
-      # Read error log if it exists
-      if [ -s /tmp/curl_error.log ]; then
-        local curl_stderr
-        curl_stderr=$(</tmp/curl_error.log)
-        rm -f /tmp/curl_error.log
-      fi
-      __curl_err_handler "$exit_code" "$url" "${curl_stderr:-}"
-      exit
-    fi
-
-    $STD printf "\r\033[K${INFO}${YW}Retry $attempt/$max_retries in ${delay}s...${CL}" >&2
-    sleep "$delay"
-    ((attempt++))
-  done
-  set -e
 }
 
 # ------------------------------------------------------------------------------
@@ -372,144 +269,93 @@ fatal() {
   kill -INT $$
 }
 
-# Ensure POSIX compatibility across Alpine and Debian/Ubuntu
+spinner() {
-# === Spinner Start ===
+  local chars=(⠋ ⠙ ⠹ ⠸ ⠼ ⠴ ⠦ ⠧ ⠇ ⠏)
-# Trap cleanup on various signals
+  local i=0
-trap 'cleanup_spinner' EXIT INT TERM HUP
+  while true; do
-
+    local index=$((i++ % ${#chars[@]}))
-spinner_frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
+    printf "\r\033[2K%s %b" "${CS_YWB}${chars[$index]}${CS_CL}" "${CS_YWB}${SPINNER_MSG:-}${CS_CL}"
-
+    sleep 0.1
-# === Spinner Start ===
-start_spinner() {
-  local msg="$1"
-  local spin_i=0
-  local interval=0.1
-
-  stop_spinner
-  SPINNER_MSG="$msg"
-  SPINNER_ACTIVE=1
-
-  {
-    while [[ "$SPINNER_ACTIVE" -eq 1 ]]; do
-      if [[ -t 2 ]]; then
-        printf "\r\e[2K%s %b" "${TAB}${spinner_frames[spin_i]}${TAB}" "${YW}${SPINNER_MSG}${CL}" >&2
-      else
-        printf "%s...\n" "$SPINNER_MSG" >&2
-        break
-      fi
-      spin_i=$(((spin_i + 1) % ${#spinner_frames[@]}))
-      sleep "$interval"
   done
-  } &
-
-  local pid=$!
-  if ps -p "$pid" >/dev/null 2>&1; then
-    SPINNER_PID="$pid"
-  else
-    SPINNER_ACTIVE=0
-    SPINNER_PID=""
-  fi
 }
 
-# === Spinner Stop ===
+clear_line() {
+  tput cr 2>/dev/null || echo -en "\r"
+  tput el 2>/dev/null || echo -en "\033[K"
+}
+
 stop_spinner() {
-  if [[ "$SPINNER_ACTIVE" -eq 1 && -n "$SPINNER_PID" ]]; then
+  local pid="${SPINNER_PID:-}"
-    SPINNER_ACTIVE=0
+  [[ -z "$pid" && -f /tmp/.spinner.pid ]] && pid=$(</tmp/.spinner.pid)
 
-    if kill -0 "$SPINNER_PID" 2>/dev/null; then
+  if [[ -n "$pid" && "$pid" =~ ^[0-9]+$ ]]; then
-      kill "$SPINNER_PID" 2>/dev/null || true
+    if kill "$pid" 2>/dev/null; then
-      for _ in $(seq 1 10); do
       sleep 0.05
-        kill -0 "$SPINNER_PID" 2>/dev/null || break
+      kill -9 "$pid" 2>/dev/null || true
-      done
+      wait "$pid" 2>/dev/null || true
+    fi
+    rm -f /tmp/.spinner.pid
   fi
 
-    if [[ "$SPINNER_PID" =~ ^[0-9]+$ ]]; then
+  unset SPINNER_PID SPINNER_MSG
-      ps -p "$SPINNER_PID" -o pid= >/dev/null 2>&1 && wait "$SPINNER_PID" 2>/dev/null || true
+  stty sane 2>/dev/null || true
-    fi
-
-    printf "\r\e[2K" >&2
-    SPINNER_PID=""
-  fi
-}
-
-cleanup_spinner() {
-  stop_spinner
 }
 
 msg_info() {
   local msg="$1"
-  [[ -z "$msg" || -n "${MSG_INFO_SHOWN["$msg"]+x}" ]] && return
+  [[ -z "$msg" ]] && return
+
+  if ! declare -p MSG_INFO_SHOWN &>/dev/null || ! declare -A MSG_INFO_SHOWN &>/dev/null; then
+    declare -gA MSG_INFO_SHOWN=()
+  fi
+  [[ -n "${MSG_INFO_SHOWN["$msg"]+x}" ]] && return
   MSG_INFO_SHOWN["$msg"]=1
 
   stop_spinner
+  SPINNER_MSG="$msg"
 
-  if [[ "${VERBOSE:-no}" == "no" && -t 2 ]]; then
+  if is_verbose_mode || is_alpine; then
-    start_spinner "$msg"
+    local HOURGLASS="${TAB}⏳${TAB}"
-  else
     printf "\r\e[2K%s %b" "$HOURGLASS" "${YW}${msg}${CL}" >&2
+    return
   fi
+
+  color_spinner
+  spinner &
+  SPINNER_PID=$!
+  echo "$SPINNER_PID" >/tmp/.spinner.pid
+  disown "$SPINNER_PID" 2>/dev/null || true
 }
 
 msg_ok() {
   local msg="$1"
   [[ -z "$msg" ]] && return
   stop_spinner
-  printf "\r\e[2K%s %b\n" "$CM" "${GN}${msg}${CL}" >&2
+  clear_line
+  printf "%s %b\n" "$CM" "${GN}${msg}${CL}" >&2
   unset MSG_INFO_SHOWN["$msg"]
 }
 
 msg_error() {
-  local msg="$1"
-  [[ -z "$msg" ]] && return
   stop_spinner
-  printf "\r\e[2K%s %b\n" "$CROSS" "${RD}${msg}${CL}" >&2
+  local msg="$1"
+  echo -e "${BFR:-} ${CROSS:-✖️} ${RD}${msg}${CL}"
 }
 
 msg_warn() {
-  local msg="$1"
-  [[ -z "$msg" ]] && return
   stop_spinner
-  printf "\r\e[2K%s %b\n" "$INFO" "${YWB}${msg}${CL}" >&2
+  local msg="$1"
-  unset MSG_INFO_SHOWN["$msg"]
+  echo -e "${BFR:-} ${INFO:-ℹ️} ${YWB}${msg}${CL}"
 }
 
 msg_custom() {
   local symbol="${1:-"[*]"}"
-  local color="${2:-"\e[36m"}" # Default: Cyan
+  local color="${2:-"\e[36m"}"
   local msg="${3:-}"
-
   [[ -z "$msg" ]] && return
-  stop_spinner 2>/dev/null || true
+  stop_spinner
-  printf "\r\e[2K%s %b\n" "$symbol" "${color}${msg}${CL:-\e[0m}" >&2
+  echo -e "${BFR:-} ${symbol} ${color}${msg}${CL:-\e[0m}"
-}
+  printf "\r\033[K\e[?25h\n"
-
-msg_progress() {
-  local current="$1"
-  local total="$2"
-  local label="$3"
-  local width=40
-  local filled percent bar empty
-  local fill_char="#"
-  local empty_char="-"
-
-  if ! [[ "$current" =~ ^[0-9]+$ ]] || ! [[ "$total" =~ ^[0-9]+$ ]] || [[ "$total" -eq 0 ]]; then
-    printf "\r\e[2K%s %b\n" "$CROSS" "${RD}Invalid progress input${CL}" >&2
-    return
-  fi
-
-  percent=$(((current * 100) / total))
-  filled=$(((current * width) / total))
-  empty=$((width - filled))
-
-  bar=$(printf "%${filled}s" | tr ' ' "$fill_char")
-  bar+=$(printf "%${empty}s" | tr ' ' "$empty_char")
-
-  printf "\r\e[2K%s [%s] %3d%% %s" "${TAB}" "$bar" "$percent" "$label" >&2
-
-  if [[ "$current" -eq "$total" ]]; then
-    printf "\n" >&2
-  fi
 }
 
 run_container_safe() {
@@ -560,3 +406,5 @@ check_or_create_swap() {
     return 1
   fi
 }
+
+trap 'stop_spinner' EXIT INT TERM

misc/create_lxc.sh

@@ -21,36 +21,67 @@ fi
 # This sets error handling options and defines the error_handler function to handle errors
 set -Eeuo pipefail
 trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
+trap on_exit EXIT
+trap on_interrupt INT
+trap on_terminate TERM
+
+function on_exit() {
+  local exit_code="$?"
+  [[ -n "${lockfile:-}" && -e "$lockfile" ]] && rm -f "$lockfile"
+  exit "$exit_code"
+}
 
-# This function handles errors
 function error_handler() {
-  printf "\e[?25h"
+
   local exit_code="$?"
   local line_number="$1"
   local command="$2"
-  local error_message="${RD}[ERROR]${CL} in line ${RD}$line_number${CL}: exit code ${RD}$exit_code${CL}: while executing command ${YW}$command${CL}"
+  printf "\e[?25h"
-  echo -e "\n$error_message\n"
+  echo -e "\n${RD}[ERROR]${CL} in line ${RD}$line_number${CL}: exit code ${RD}$exit_code${CL}: while executing command ${YW}$command${CL}\n"
-  exit 200
+  exit "$exit_code"
+}
+
+function on_interrupt() {
+  echo -e "\n${RD}Interrupted by user (SIGINT)${CL}"
+  exit 130
+}
+
+function on_terminate() {
+  echo -e "\n${RD}Terminated by signal (SIGTERM)${CL}"
+  exit 143
+}
+
+function check_storage_support() {
+  local CONTENT="$1"
+  local -a VALID_STORAGES=()
+
+  while IFS= read -r line; do
+    local STORAGE=$(awk '{print $1}' <<<"$line")
+    [[ "$STORAGE" == "storage" || -z "$STORAGE" ]] && continue
+    VALID_STORAGES+=("$STORAGE")
+  done < <(pvesm status -content "$CONTENT" 2>/dev/null | awk 'NR>1')
+
+  [[ ${#VALID_STORAGES[@]} -gt 0 ]]
 }
 
 # This checks for the presence of valid Container Storage and Template Storage locations
 msg_info "Validating Storage"
-VALIDCT=$(pvesm status -content rootdir | awk 'NR>1')
+if ! check_storage_support "rootdir"; then
-if [ -z "$VALIDCT" ]; then
+
-  msg_error "Unable to detect a valid Container Storage location."
+  msg_error "No valid storage found for 'rootdir' (Container)."
   exit 1
 fi
-VALIDTMP=$(pvesm status -content vztmpl | awk 'NR>1')
+if ! check_storage_support "vztmpl"; then
-if [ -z "$VALIDTMP" ]; then
+
-  msg_error "Unable to detect a valid Template Storage location."
+  msg_error "No valid storage found for 'vztmpl' (Template)."
   exit 1
 fi
+msg_ok "Validated Storage (rootdir / vztmpl)."
 
 # This function is used to select the storage class and determine the corresponding storage content type and label.
 function select_storage() {
-  local CLASS=$1
+  local CLASS=$1 CONTENT CONTENT_LABEL
-  local CONTENT
+
-  local CONTENT_LABEL
   case $CLASS in
   container)
     CONTENT='rootdir'
@@ -60,51 +91,72 @@ function select_storage() {
     CONTENT='vztmpl'
     CONTENT_LABEL='Container template'
     ;;
-  *) false || {
+  iso)
-    msg_error "Invalid storage class."
+    CONTENT='iso'
-    exit 201
+    CONTENT_LABEL='ISO image'
-  } ;;
+    ;;
+  images)
+    CONTENT='images'
+    CONTENT_LABEL='VM Disk image'
+    ;;
+  backup)
+    CONTENT='backup'
+    CONTENT_LABEL='Backup'
+    ;;
+  snippets)
+    CONTENT='snippets'
+    CONTENT_LABEL='Snippets'
+    ;;
+  *)
+    msg_error "Invalid storage class '$CLASS'"
+    return 1
+    ;;
   esac
 
-  # Collect storage options
+local -a MENU
-  local -a MENU
+  local -A STORAGE_MAP
-  local MSG_MAX_LENGTH=0
+  local COL_WIDTH=0
 
-  while read -r TAG TYPE _ _ _ FREE _; do
+  while read -r TAG TYPE _ TOTAL USED FREE _; do
-    local TYPE_PADDED
+    [[ -n "$TAG" && -n "$TYPE" ]] || continue
-    local FREE_FMT
+    local DISPLAY="${TAG} (${TYPE})"
-
+    local USED_FMT=$(numfmt --to=iec --from-unit=K --format %.1f <<<"$USED")
-    TYPE_PADDED=$(printf "%-10s" "$TYPE")
+    local FREE_FMT=$(numfmt --to=iec --from-unit=K --format %.1f <<<"$FREE")
-    FREE_FMT=$(numfmt --to=iec --from-unit=K --format %.2f <<<"$FREE")B
+    local INFO="Free: ${FREE_FMT}B  Used: ${USED_FMT}B"
-    local ITEM="Type: $TYPE_PADDED Free: $FREE_FMT"
+    STORAGE_MAP["$DISPLAY"]="$TAG"
-
+    MENU+=("$DISPLAY" "$INFO" "OFF")
-    ((${#ITEM} + 2 > MSG_MAX_LENGTH)) && MSG_MAX_LENGTH=$((${#ITEM} + 2))
+    ((${#DISPLAY} > COL_WIDTH)) && COL_WIDTH=${#DISPLAY}
-
-    MENU+=("$TAG" "$ITEM" "OFF")
   done < <(pvesm status -content "$CONTENT" | awk 'NR>1')
 
-  local OPTION_COUNT=$((${#MENU[@]} / 3))
+  if [ ${#MENU[@]} -eq 0 ]; then
+    msg_error "No storage found for content type '$CONTENT'."
+    return 2
+  fi
 
-  # Auto-select if only one option available
+  if [ $((${#MENU[@]} / 3)) -eq 1 ]; then
-  if [[ "$OPTION_COUNT" -eq 1 ]]; then
+    STORAGE_RESULT="${STORAGE_MAP[${MENU[0]}]}"
-    echo "${MENU[0]}"
     return 0
   fi
 
-  # Display selection menu
+  local WIDTH=$((COL_WIDTH + 42))
-  local STORAGE
+  while true; do
-  while [[ -z "${STORAGE:+x}" ]]; do
+    local DISPLAY_SELECTED=$(whiptail --backtitle "Proxmox VE Helper Scripts" \
-    STORAGE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Storage Pools" --radiolist \
+      --title "Storage Pools" \
-      "Select the storage pool to use for the ${CONTENT_LABEL,,}.\nUse the spacebar to make a selection.\n" \
+      --radiolist "Which storage pool for ${CONTENT_LABEL,,}?\n(Spacebar to select)" \
-      16 $((MSG_MAX_LENGTH + 23)) 6 \
+      16 "$WIDTH" 6 "${MENU[@]}" 3>&1 1>&2 2>&3)
-      "${MENU[@]}" 3>&1 1>&2 2>&3) || {
-      msg_error "Storage selection cancelled."
-      exit 202
-    }
-  done
 
-  echo "$STORAGE"
+    [[ $? -ne 0 ]] && return 3
+
+    if [[ -z "$DISPLAY_SELECTED" || -z "${STORAGE_MAP[$DISPLAY_SELECTED]+_}" ]]; then
+      whiptail --msgbox "No valid storage selected. Please try again." 8 58
+      continue
+    fi
+
+    STORAGE_RESULT="${STORAGE_MAP[$DISPLAY_SELECTED]}"
+    return 0
+  done
 }
+
 # Test if required variables are set
 [[ "${CTID:-}" ]] || {
   msg_error "You need to set 'CTID' variable."
@@ -129,13 +181,55 @@ if qm status "$CTID" &>/dev/null || pct status "$CTID" &>/dev/null; then
   exit 206
 fi
 
-# Get template storage
+# DEFAULT_FILE="/usr/local/community-scripts/default_storage"
-TEMPLATE_STORAGE=$(select_storage template)
+# if [[ -f "$DEFAULT_FILE" ]]; then
-msg_ok "Using ${BL}$TEMPLATE_STORAGE${CL} ${GN}for Template Storage."
+#   source "$DEFAULT_FILE"
+#   if [[ -n "$TEMPLATE_STORAGE" && -n "$CONTAINER_STORAGE" ]]; then
+#     msg_info "Using default storage configuration from: $DEFAULT_FILE"
+#     msg_ok "Template Storage: ${BL}$TEMPLATE_STORAGE${CL} ${GN}|${CL} Container Storage: ${BL}$CONTAINER_STORAGE${CL}"
+#   else
+#     msg_warn "Default storage file exists but is incomplete – falling back to manual selection"
+#     TEMPLATE_STORAGE=$(select_storage template)
+#     msg_ok "Using ${BL}$TEMPLATE_STORAGE${CL} ${GN}for Template Storage."
+#     CONTAINER_STORAGE=$(select_storage container)
+#     msg_ok "Using ${BL}$CONTAINER_STORAGE${CL} ${GN}for Container Storage."
+#   fi
+# else
+#   # TEMPLATE STORAGE SELECTION
+#   # Template Storage
+#   while true; do
+#     TEMPLATE_STORAGE=$(select_storage template)
+#     if [[ -n "$TEMPLATE_STORAGE" ]]; then
+#       msg_ok "Using ${BL}$TEMPLATE_STORAGE${CL} ${GN}for Template Storage."
+#       break
+#     fi
+#     msg_warn "No valid template storage selected. Please try again."
+#   done
 
-# Get container storage
+#   while true; do
-CONTAINER_STORAGE=$(select_storage container)
+#     CONTAINER_STORAGE=$(select_storage container)
-msg_ok "Using ${BL}$CONTAINER_STORAGE${CL} ${GN}for Container Storage."
+#     if [[ -n "$CONTAINER_STORAGE" ]]; then
+#       msg_ok "Using ${BL}$CONTAINER_STORAGE${CL} ${GN}for Container Storage."
+#       break
+#     fi
+#     msg_warn "No valid container storage selected. Please try again."
+#   done
+
+# fi
+
+while true; do
+  if select_storage template; then
+    TEMPLATE_STORAGE="$STORAGE_RESULT"
+    break
+  fi
+done
+
+while true; do
+  if select_storage container; then
+    CONTAINER_STORAGE="$STORAGE_RESULT"
+    break
+  fi
+done
 
 # Check free space on selected container storage
 STORAGE_FREE=$(pvesm status | awk -v s="$CONTAINER_STORAGE" '$1 == s { print $6 }')
@@ -204,7 +298,7 @@ if ! pveam list "$TEMPLATE_STORAGE" | grep -q "$TEMPLATE" || ! zstdcat "$TEMPLAT
   done
 fi
 
-msg_ok "LXC Template '$TEMPLATE' is ready to use."
+msg_info "Creating LXC Container"
 # Check and fix subuid/subgid
 grep -q "root:100000:65536" /etc/subuid || echo "root:100000:65536" >>/etc/subuid
 grep -q "root:100000:65536" /etc/subgid || echo "root:100000:65536" >>/etc/subgid
@@ -215,12 +309,15 @@ PCT_OPTIONS=(${PCT_OPTIONS[@]:-${DEFAULT_PCT_OPTIONS[@]}})
 
 # Secure creation of the LXC container with lock and template check
 lockfile="/tmp/template.${TEMPLATE}.lock"
-exec 9>"$lockfile"
+exec 9>"$lockfile" >/dev/null 2>&1 || {
+  msg_error "Failed to create lock file '$lockfile'."
+  exit 200
+}
 flock -w 60 9 || {
   msg_error "Timeout while waiting for template lock"
   exit 211
 }
-msg_info "Creating LXC Container"
+
 if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" "${PCT_OPTIONS[@]}" &>/dev/null; then
   msg_error "Container creation failed. Checking if template is corrupted or incomplete."
 
@@ -252,16 +349,23 @@ if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" "${PCT_OPTIONS[
   sleep 1 # I/O-Sync-Delay
 
   msg_ok "Re-downloaded LXC Template"
+fi
 
-  if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" "${PCT_OPTIONS[@]}" &>/dev/null; then
+if ! pct list | awk '{print $1}' | grep -qx "$CTID"; then
-    msg_error "Container creation failed after re-downloading template."
+  msg_error "Container ID $CTID not listed in 'pct list' – unexpected failure."
-    exit 200
+  exit 215
+fi
+
+if ! grep -q '^rootfs:' "/etc/pve/lxc/$CTID.conf"; then
+  msg_error "RootFS entry missing in container config – storage not correctly assigned."
+  exit 216
+fi
+
+if grep -q '^hostname:' "/etc/pve/lxc/$CTID.conf"; then
+  CT_HOSTNAME=$(grep '^hostname:' "/etc/pve/lxc/$CTID.conf" | awk '{print $2}')
+  if [[ ! "$CT_HOSTNAME" =~ ^[a-z0-9-]+$ ]]; then
+    msg_warn "Hostname '$CT_HOSTNAME' contains invalid characters – may cause issues with networking or DNS."
   fi
 fi
 
-if ! pct status "$CTID" &>/dev/null; then
-  msg_error "Container not found after pct create – assuming failure."
-  exit 210
-fi
-
 msg_ok "LXC Container ${BL}$CTID${CL} ${GN}was successfully created."

misc/install.func

@@ -62,9 +62,11 @@ setting_up_container() {
   rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
   systemctl disable -q --now systemd-networkd-wait-online.service
   msg_ok "Set up Container OS"
-  msg_custom "${CM}" "${GN}" "Network Connected: ${BL}$(hostname -I)"
+  #msg_custom "${CM}" "${GN}" "Network Connected: ${BL}$(hostname -I)"
+  msg_ok "Network Connected: ${BL}$(hostname -I)"
 }
 
+# This function checks the network connection by pinging a known IP address and prompts the user to continue if the internet is not connected
 # This function checks the network connection by pinging a known IP address and prompts the user to continue if the internet is not connected
 network_check() {
   set +e
@@ -72,6 +74,7 @@ network_check() {
   ipv4_connected=false
   ipv6_connected=false
   sleep 1
+
   # Check IPv4 connectivity to Google, Cloudflare & Quad9 DNS servers.
   if ping -c 1 -W 1 1.1.1.1 &>/dev/null || ping -c 1 -W 1 8.8.8.8 &>/dev/null || ping -c 1 -W 1 9.9.9.9 &>/dev/null; then
     msg_ok "IPv4 Internet Connected"
@@ -100,25 +103,26 @@ network_check() {
   fi
 
   # DNS resolution checks for GitHub-related domains (IPv4 and/or IPv6)
-  GITHUB_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com")
+  GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com" "git.community-scripts.org")
-  GITHUB_STATUS="GitHub DNS:"
+  GIT_STATUS="Git DNS:"
   DNS_FAILED=false
 
-  for HOST in "${GITHUB_HOSTS[@]}"; do
+  for HOST in "${GIT_HOSTS[@]}"; do
     RESOLVEDIP=$(getent hosts "$HOST" | awk '{ print $1 }' | grep -E '(^([0-9]{1,3}\.){3}[0-9]{1,3}$)|(^[a-fA-F0-9:]+$)' | head -n1)
     if [[ -z "$RESOLVEDIP" ]]; then
-      GITHUB_STATUS+="$HOST:($DNSFAIL)"
+      GIT_STATUS+="$HOST:($DNSFAIL)"
       DNS_FAILED=true
     else
-      GITHUB_STATUS+=" $HOST:($DNSOK)"
+      GIT_STATUS+=" $HOST:($DNSOK)"
     fi
   done
 
   if [[ "$DNS_FAILED" == true ]]; then
-    fatal "$GITHUB_STATUS"
+    fatal "$GIT_STATUS"
   else
-    msg_ok "$GITHUB_STATUS"
+    msg_ok "$GIT_STATUS"
   fi
+
   set -e
   trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
 }

misc/tools.func

@@ -239,10 +239,14 @@ setup_mariadb() {
   DISTRO_CODENAME="$(awk -F= '/^VERSION_CODENAME=/{print $2}' /etc/os-release)"
   CURRENT_OS="$(awk -F= '/^ID=/{print $2}' /etc/os-release)"
 
+  if ! curl -fsI http://mirror.mariadb.org/repo/ >/dev/null; then
+    msg_error "MariaDB mirror not reachable"
+    return 1
+  fi
+
   msg_info "Setting up MariaDB $MARIADB_VERSION"
   # grab dynamic latest LTS version
   if [[ "$MARIADB_VERSION" == "latest" ]]; then
-    $STD msg_info "Resolving latest GA MariaDB version"
     MARIADB_VERSION=$(curl -fsSL http://mirror.mariadb.org/repo/ |
       grep -Eo '[0-9]+\.[0-9]+\.[0-9]+/' |
       grep -vE 'rc/|rolling/' |
@@ -253,7 +257,6 @@ setup_mariadb() {
       msg_error "Could not determine latest GA MariaDB version"
       return 1
     fi
-    $STD msg_ok "Latest GA MariaDB version is $MARIADB_VERSION"
   fi
 
   local CURRENT_VERSION=""
@@ -278,7 +281,6 @@ setup_mariadb() {
     $STD msg_info "Setup MariaDB $MARIADB_VERSION"
   fi
 
-  $STD msg_info "Setting up MariaDB Repository"
   curl -fsSL "https://mariadb.org/mariadb_release_signing_key.asc" |
     gpg --dearmor -o /etc/apt/trusted.gpg.d/mariadb.gpg
 
@@ -757,11 +759,12 @@ function fetch_and_deploy_gh_release() {
   local mode="${3:-tarball}" # tarball | binary | prebuild | singlefile
   local version="${4:-latest}"
   local target="${5:-/opt/$app}"
+  local asset_pattern="${6:-}"
 
   local app_lc=$(echo "${app,,}" | tr -d ' ')
   local version_file="$HOME/.${app_lc}"
 
-  local api_timeout="--connect-timeout 5 --max-time 30"
+  local api_timeout="--connect-timeout 10 --max-time 60"
   local download_timeout="--connect-timeout 15 --max-time 900"
 
   local current_version=""
@@ -776,6 +779,14 @@ function fetch_and_deploy_gh_release() {
   local header=()
   [[ -n "${GITHUB_TOKEN:-}" ]] && header=(-H "Authorization: token $GITHUB_TOKEN")
 
+  # dns pre check
+  local gh_host
+  gh_host=$(awk -F/ '{print $3}' <<<"$api_url")
+  if ! getent hosts "$gh_host" &>/dev/null; then
+    msg_error "DNS resolution failed for $gh_host – check /etc/resolv.conf or networking"
+    return 1
+  fi
+
   local max_retries=3 retry_delay=2 attempt=1 success=false resp http_code
 
   while ((attempt <= max_retries)); do
@@ -785,7 +796,7 @@ function fetch_and_deploy_gh_release() {
   done
 
   if ! $success; then
-    msg_error "Failed to fetch release metadata after $max_retries attempts"
+    msg_error "Failed to fetch release metadata from $api_url after $max_retries attempts"
     return 1
   fi
 
@@ -811,6 +822,7 @@ function fetch_and_deploy_gh_release() {
 
   msg_info "Fetching GitHub release: $app ($version)"
 
+  ### Tarball Mode ###
   if [[ "$mode" == "tarball" || "$mode" == "source" ]]; then
     url=$(echo "$json" | jq -r '.tarball_url // empty')
     [[ -z "$url" ]] && url="https://github.com/$repo/archive/refs/tags/v$version.tar.gz"
@@ -831,22 +843,34 @@ function fetch_and_deploy_gh_release() {
     cp -r "$unpack_dir"/* "$target/"
     shopt -u dotglob nullglob
 
+    ### Binary Mode ###
   elif [[ "$mode" == "binary" ]]; then
     local arch
     arch=$(dpkg --print-architecture 2>/dev/null || uname -m)
-    [[ "$arch" == "x86_64" ]] && arch="x86_64"
+    [[ "$arch" == "x86_64" ]] && arch="amd64"
     [[ "$arch" == "aarch64" ]] && arch="arm64"
 
     local assets url_match=""
     assets=$(echo "$json" | jq -r '.assets[].browser_download_url')
 
+    # If explicit filename pattern is provided (param $6), match that first
+    if [[ -n "$asset_pattern" ]]; then
+      for u in $assets; do
+        [[ "$u" =~ $asset_pattern || "$u" == *"$asset_pattern" ]] && url_match="$u" && break
+      done
+    fi
+
+    # If no match via explicit pattern, fall back to architecture heuristic
+    if [[ -z "$url_match" ]]; then
       for u in $assets; do
         if [[ "$u" =~ ($arch|amd64|x86_64|aarch64|arm64).*\.deb$ ]]; then
           url_match="$u"
           break
         fi
       done
+    fi
 
+    # Fallback: any .deb file
     if [[ -z "$url_match" ]]; then
       for u in $assets; do
         [[ "$u" =~ \.deb$ ]] && url_match="$u" && break
@@ -875,8 +899,10 @@ function fetch_and_deploy_gh_release() {
       }
     }
 
+    ### Prebuild Mode ###
   elif [[ "$mode" == "prebuild" ]]; then
-    local pattern="$6"
+    local pattern="${6%\"}"
+    pattern="${pattern#\"}"
     [[ -z "$pattern" ]] && {
       msg_error "Mode 'prebuild' requires 6th parameter (asset filename pattern)"
       rm -rf "$tmpdir"
@@ -885,7 +911,14 @@ function fetch_and_deploy_gh_release() {
 
     local asset_url=""
     for u in $(echo "$json" | jq -r '.assets[].browser_download_url'); do
-      [[ "$u" =~ $pattern || "$u" == *"$pattern" ]] && asset_url="$u" && break
+      filename_candidate="${u##*/}"
+      case "$filename_candidate" in
+      $pattern)
+        asset_url="$u"
+        break
+        ;;
+      esac
+
     done
 
     [[ -z "$asset_url" ]] && {
@@ -907,16 +940,18 @@ function fetch_and_deploy_gh_release() {
         $STD apt-get install -y unzip
       fi
       $STD unzip "$tmpdir/$filename" -d "$target"
-    elif [[ "$filename" == *.tar.gz ]]; then
+    elif [[ "$filename" == *.tar.* ]]; then
-      tar -xzf "$tmpdir/$filename" -C "$target"
+      tar --strip-components=1 -xf "$tmpdir/$filename" -C "$target"
     else
       msg_error "Unsupported archive format: $filename"
       rm -rf "$tmpdir"
       return 1
     fi
 
+    ### Singlefile Mode ###
   elif [[ "$mode" == "singlefile" ]]; then
-    local pattern="$6"
+    local pattern="${6%\"}"
+    pattern="${pattern#\"}"
     [[ -z "$pattern" ]] && {
       msg_error "Mode 'singlefile' requires 6th parameter (asset filename pattern)"
       rm -rf "$tmpdir"
@@ -925,7 +960,13 @@ function fetch_and_deploy_gh_release() {
 
     local asset_url=""
     for u in $(echo "$json" | jq -r '.assets[].browser_download_url'); do
-      [[ "$u" =~ $pattern || "$u" == *"$pattern" ]] && asset_url="$u" && break
+      filename_candidate="${u##*/}"
+      case "$filename_candidate" in
+      $pattern)
+        asset_url="$u"
+        break
+        ;;
+      esac
     done
 
     [[ -z "$asset_url" ]] && {

tools/addon/filebrowser-quantum.sh

@@ -163,7 +163,7 @@ server:
         disableIndexing: false
         indexingIntervalMinutes: 240
         exclude:
-          folders:
+          folderPaths:
             - "/proc"
             - "/sys"
             - "/dev"
@@ -185,7 +185,7 @@ server:
         disableIndexing: false
         indexingIntervalMinutes: 240
         exclude:
-          folders:
+          folderPaths:
             - "/proc"
             - "/sys"
             - "/dev"