Calibre-Web: Remove from Frontend during Critical Security Issues

2025-07-30 17:57:36 +00:00 · 2025-07-26 10:09:15 +02:00
9 changed files with 108 additions and 106 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -10,27 +10,6 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.

-## 2025-07-28
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - add 'g++' to actualbudget-install.sh [@saivishnu725](https://github.com/saivishnu725) ([#6293](https://github.com/community-scripts/ProxmoxVE/pull/6293))
-
-  - #### ✨ New Features
-
-    - karakeep: Run workers in prod without tsx [@vhsdream](https://github.com/vhsdream) ([#6285](https://github.com/community-scripts/ProxmoxVE/pull/6285))
-
-## 2025-07-27
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - karakeep: export DATA_DIR from user config in update [@vhsdream](https://github.com/vhsdream) ([#6283](https://github.com/community-scripts/ProxmoxVE/pull/6283))
-    - go2rtc: Fix release download handling [@tremor021](https://github.com/tremor021) ([#6280](https://github.com/community-scripts/ProxmoxVE/pull/6280))
-
 ## 2025-07-26

 ### 🚀 Updated Scripts
--- a/ct/karakeep.sh
+++ b/ct/karakeep.sh
@ -52,10 +52,6 @@ function update_script() {
  rm -rf /opt/karakeep
  msg_ok "Update prepared"

-  if grep -q "start:prod" /etc/systemd/system/karakeep-workers.service; then
-    sed -i 's|^ExecStart=.*$|ExecStart=/usr/bin/node dist/index.mjs|' /etc/systemd/system/karakeep-workers.service
-    systemctl daemon-reload
-  fi
  fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep"
  if command -v corepack >/dev/null; then
    $STD corepack disable
@ -64,7 +60,6 @@ function update_script() {
  NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs

  msg_info "Updating ${APP} to v${RELEASE}"
-  corepack enable
  export PUPPETEER_SKIP_DOWNLOAD="true"
  export PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD="true"
  export NEXT_TELEMETRY_DISABLED=1
@ -74,12 +69,10 @@ function update_script() {
  $STD pnpm build
  cd /opt/karakeep/apps/workers
  $STD pnpm install --frozen-lockfile
-  $STD pnpm build
  cd /opt/karakeep/apps/cli
  $STD pnpm install --frozen-lockfile
  $STD pnpm build
-  DATA_DIR="$(sed -n '/^DATA_DIR/p' /etc/karakeep/karakeep.env | awk -F= '{print $2}')"
-  export DATA_DIR="${DATA_DIR:-/opt/karakeep_data}"
+  export DATA_DIR=/opt/karakeep_data
  cd /opt/karakeep/packages/db
  $STD pnpm migrate
  $STD pnpm store prune
--- a/frontend/public/json/onlyoffice.json
+++ b/frontend/public/json/onlyoffice.json
@ -2,7 +2,7 @@
  "name": "ONLYOFFICE Docs",
  "slug": "onlyoffice",
  "categories": [
-    12
+    9
  ],
  "date_created": "2025-06-24",
  "type": "ct",
--- a/frontend/public/json/opnsense-vm.json
+++ b/frontend/public/json/opnsense-vm.json
@ -0,0 +1,41 @@
+{
+  "name": "OPNsense",
+  "slug": "opnsense-vm",
+  "categories": [
+    4,
+    2
+  ],
+  "date_created": "2025-02-11",
+  "type": "vm",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 443,
+  "documentation": "https://docs.opnsense.org/",
+  "website": "https://opnsense.org/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/opnsense.webp",
+  "config_path": "",
+  "description": "OPNsense is an open-source firewall and routing platform based on FreeBSD. It provides advanced security features, including intrusion detection, VPN support, traffic shaping, and web filtering, with an intuitive web interface for easy management. Known for its reliability and regular updates, OPNsense is a popular choice for both businesses and home networks.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "vm/opnsense-vm.sh",
+      "resources": {
+        "cpu": 4,
+        "ram": 8192,
+        "hdd": 10,
+        "os": "FreeBSD",
+        "version": "latest"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": "root",
+    "password": "opnsense"
+  },
+  "notes": [
+    {
+      "text": "It will fail with default settings if there is no vmbr0 and vmbr1 on your node. Use advanced settings in this case.",
+      "type": "warning"
+    }
+  ]
+}
--- a/frontend/public/json/versions.json
+++ b/frontend/public/json/versions.json
@ -1,64 +1,4 @@
 [
-  {
-    "name": "umami-software/umami",
-    "version": "v2.19.0",
-    "date": "2025-07-27T22:25:00Z"
-  },
-  {
-    "name": "moghtech/komodo",
-    "version": "v1.18.4",
-    "date": "2025-06-25T00:06:56Z"
-  },
-  {
-    "name": "dani-garcia/vaultwarden",
-    "version": "1.34.2",
-    "date": "2025-07-27T18:49:05Z"
-  },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.24.7",
-    "date": "2025-07-27T18:34:18Z"
-  },
-  {
-    "name": "benjaminjonard/koillection",
-    "version": "1.6.16",
-    "date": "2025-07-27T14:48:37Z"
-  },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.22.2200",
-    "date": "2025-07-27T05:52:33Z"
-  },
-  {
-    "name": "project-zot/zot",
-    "version": "v2.1.6",
-    "date": "2025-07-27T01:14:14Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v3.6.2",
-    "date": "2025-07-17T12:08:03Z"
-  },
-  {
-    "name": "aceberg/WatchYourLAN",
-    "version": "2.1.3",
-    "date": "2025-07-26T14:19:00Z"
-  },
-  {
-    "name": "blakeblackshear/frigate",
-    "version": "v0.14.1",
-    "date": "2024-08-29T22:32:51Z"
-  },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.3.2",
-    "date": "2025-07-24T10:14:27Z"
-  },
-  {
-    "name": "MediaBrowser/Emby.Releases",
-    "version": "4.9.1.2",
-    "date": "2025-06-26T22:08:00Z"
-  },
  {
    "name": "henrygd/beszel",
    "version": "v0.12.1",
@ -114,6 +54,11 @@
    "version": "v1.5.3-beta.10",
    "date": "2025-07-15T06:07:03Z"
  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.22.2193",
+    "date": "2025-07-25T05:54:10Z"
+  },
  {
    "name": "ErsatzTV/ErsatzTV",
    "version": "v25.3.1",
@ -124,6 +69,11 @@
    "version": "v1.28.0",
    "date": "2025-07-25T01:21:13Z"
  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v3.6.2",
+    "date": "2025-07-17T12:08:03Z"
+  },
  {
    "name": "Brandawg93/PeaNUT",
    "version": "v5.10.0",
@ -134,6 +84,11 @@
    "version": "v4.102.2",
    "date": "2025-07-24T22:42:01Z"
  },
+  {
+    "name": "MediaBrowser/Emby.Releases",
+    "version": "4.9.1.2",
+    "date": "2025-06-26T22:08:00Z"
+  },
  {
    "name": "linuxserver/Heimdall",
    "version": "v2.7.3",
@ -159,6 +114,11 @@
    "version": "prototype-cellulite-1",
    "date": "2025-07-24T16:32:57Z"
  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.3.2",
+    "date": "2025-07-24T10:14:27Z"
+  },
  {
    "name": "grokability/snipe-it",
    "version": "v8.2.1",
@ -279,6 +239,11 @@
    "version": "v3.42.0",
    "date": "2025-07-14T22:07:28Z"
  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.24.6",
+    "date": "2025-07-22T17:14:21Z"
+  },
  {
    "name": "Dolibarr/dolibarr",
    "version": "21.0.2",
@ -479,6 +444,11 @@
    "version": "8.1.15",
    "date": "2025-07-16T18:06:03Z"
  },
+  {
+    "name": "benjaminjonard/koillection",
+    "version": "1.6.15",
+    "date": "2025-07-16T16:47:57Z"
+  },
  {
    "name": "usememos/memos",
    "version": "v0.25.0",
@ -584,6 +554,11 @@
    "version": "v10.10.7",
    "date": "2025-04-05T19:14:59Z"
  },
+  {
+    "name": "blakeblackshear/frigate",
+    "version": "v0.14.1",
+    "date": "2024-08-29T22:32:51Z"
+  },
  {
    "name": "leiweibau/Pi.Alert",
    "version": "v2025-07-12",
@ -824,6 +799,11 @@
    "version": "v1.6.1",
    "date": "2025-06-25T21:19:25Z"
  },
+  {
+    "name": "moghtech/komodo",
+    "version": "v1.18.4",
+    "date": "2025-06-25T00:06:56Z"
+  },
  {
    "name": "arunavo4/gitea-mirror",
    "version": "v2.18.0",
@ -894,6 +874,11 @@
    "version": "2.0.0-pre3",
    "date": "2025-06-18T08:01:24Z"
  },
+  {
+    "name": "project-zot/zot",
+    "version": "v2.1.5",
+    "date": "2025-06-17T18:04:11Z"
+  },
  {
    "name": "donaldzou/WGDashboard",
    "version": "v4.2.4",
@ -1024,6 +1009,11 @@
    "version": "5.10.0",
    "date": "2025-05-28T05:48:20Z"
  },
+  {
+    "name": "dani-garcia/vaultwarden",
+    "version": "1.34.1",
+    "date": "2025-05-26T21:40:54Z"
+  },
  {
    "name": "stonith404/pingvin-share",
    "version": "v1.13.0",
@ -1069,6 +1059,11 @@
    "version": "1.0.0",
    "date": "2025-05-12T07:39:23Z"
  },
+  {
+    "name": "umami-software/umami",
+    "version": "v2.18.1",
+    "date": "2025-05-12T07:16:12Z"
+  },
  {
    "name": "owncast/owncast",
    "version": "v0.2.3",
@ -1174,6 +1169,11 @@
    "version": "1.5.0",
    "date": "2025-03-30T17:42:59Z"
  },
+  {
+    "name": "aceberg/WatchYourLAN",
+    "version": "2.1.2-alpine",
+    "date": "2025-03-30T06:25:22Z"
+  },
  {
    "name": "inspircd/inspircd",
    "version": "v4.7.0",
--- a/install/actualbudget-install.sh
+++ b/install/actualbudget-install.sh
@ -15,8 +15,7 @@ update_os

 msg_info "Installing Dependencies"
 $STD apt-get install -y \
-  make \
-  g++
+  make
 msg_ok "Installed Dependencies"

 msg_info "Installing Actual Budget"
--- a/install/go2rtc-install.sh
+++ b/install/go2rtc-install.sh
@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os

-USE_ORIGINAL_FILENAME="true" fetch_and_deploy_gh_release "go2rtc" "AlexxIT/go2rtc" "singlefile" "latest" "/opt/go2rtc" "go2rtc_linux_amd64"
+fetch_and_deploy_gh_release "go2rtc" "AlexxIT/go2rtc" "singlefile" "latest" "/opt/go2rtc" "go2rtc_linux_amd64"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/go2rtc.service
--- a/install/karakeep-install.sh
+++ b/install/karakeep-install.sh
@ -64,7 +64,6 @@ $STD pnpm install --frozen-lockfile
 $STD pnpm build
 cd /opt/karakeep/apps/workers
 $STD pnpm install --frozen-lockfile
-$STD pnpm build
 cd /opt/karakeep/apps/cli
 $STD pnpm install --frozen-lockfile
 $STD pnpm build
@ -168,7 +167,7 @@ Wants=network.target karakeep-browser.service meilisearch.service
 After=network.target karakeep-browser.service meilisearch.service

 [Service]
-ExecStart=/usr/bin/node dist/index.mjs
+ExecStart=pnpm start:prod
 WorkingDirectory=/opt/karakeep/apps/workers
 EnvironmentFile=/etc/karakeep/karakeep.env
 Restart=always
--- a/install/n8n-install.sh
+++ b/install/n8n-install.sh
@ -1,7 +1,7 @@
 #!/usr/bin/env bash

 # Copyright (c) 2021-2025 tteck
-# Author: tteck (tteckster) | Co-Author: CrazyWolf13
+# Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://n8n.io/

@ -26,22 +26,13 @@ $STD npm install --global n8n
 msg_ok "Installed n8n"

 msg_info "Creating Service"
-HOST_IP=$(hostname -I | awk '{print $1}')
-mkdir -p /opt
-cat <<EOF >/opt/n8n.env
-N8N_SECURE_COOKIE=false
-N8N_PORT=5678
-N8N_PROTOCOL=http
-N8N_HOST=$HOST_IP
-EOF
-
 cat <<EOF >/etc/systemd/system/n8n.service
 [Unit]
 Description=n8n

 [Service]
 Type=simple
-EnvironmentFile="/opt/n8n.env"
+Environment="N8N_SECURE_COOKIE=false"
 ExecStart=n8n start
 [Install]
 WantedBy=multi-user.target