Merge remote-tracking branch 'upstream/main'

install/actualbudget-install.sh

@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://actualbudget.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Actual Budget"
+cd /opt
+RELEASE=$(curl -fsSL https://api.github.com/repos/actualbudget/actual/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+NODE_VERSION="22"
+install_node_and_modules
+mkdir -p /opt/actualbudget-data/{server-files,upload,migrate,user-files,migrations,config}
+chown -R root:root /opt/actualbudget-data
+chmod -R 755 /opt/actualbudget-data
+
+cat <<EOF >/opt/actualbudget-data/config.json
+{
+  "port": 5006,
+  "hostname": "::",
+  "serverFiles": "/opt/actualbudget-data/server-files",
+  "userFiles": "/opt/actualbudget-data/user-files",
+  "trustedProxies": [
+    "10.0.0.0/8",
+    "172.16.0.0/12",
+    "192.168.0.0/16",
+    "127.0.0.0/8",
+    "::1/128",
+    "fc00::/7"
+  ],
+  "https": {
+    "key": "/opt/actualbudget/selfhost.key",
+    "cert": "/opt/actualbudget/selfhost.crt"
+  }
+}
+EOF
+
+mkdir -p /opt/actualbudget
+cd /opt/actualbudget
+$STD npm install --location=global @actual-app/sync-server
+$STD openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout selfhost.key -out selfhost.crt <<EOF
+US
+California
+San Francisco
+My Organization
+My Unit
+localhost
+myemail@example.com
+EOF
+echo "${RELEASE}" >"/opt/actualbudget_version.txt"
+msg_ok "Installed Actual Budget"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/actualbudget.service
+[Unit]
+Description=Actual Budget Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+Group=root
+WorkingDirectory=/opt/actualbudget
+Environment=ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
+Environment=ACTUAL_UPLOAD_SYNC_ENCRYPTED_FILE_SYNC_SIZE_LIMIT_MB=50
+Environment=ACTUAL_UPLOAD_FILE_SYNC_SIZE_LIMIT_MB=20
+ExecStart=/usr/bin/actual-server --config /opt/actualbudget-data/config.json
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now actualbudget
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/alpine-komodo-install.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://komo.do/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apk add --no-cache ca-certificates openssl
+msg_ok "Installed Dependencies"
+
+msg_info "Setup Docker Repository"
+$STD apk add --no-cache docker docker-cli docker-compose openrc
+msg_ok "Setup Docker Repository"
+
+msg_info "Enabling Docker Service"
+$STD rc-update add docker boot
+$STD service docker start
+msg_ok "Enabled Docker Service"
+
+echo "Choose the database for Komodo installation:"
+echo "1) MongoDB (recommended)"
+echo "2) SQLite"
+echo "3) PostgreSQL"
+read -rp "Enter your choice (default: 1): " DB_CHOICE
+DB_CHOICE=${DB_CHOICE:-1}
+
+case $DB_CHOICE in
+1)
+  DB_COMPOSE_FILE="mongo.compose.yaml"
+  ;;
+2)
+  DB_COMPOSE_FILE="sqlite.compose.yaml"
+  ;;
+3)
+  DB_COMPOSE_FILE="postgres.compose.yaml"
+  ;;
+*)
+  echo "Invalid choice. Defaulting to MongoDB."
+  DB_COMPOSE_FILE="mongo.compose.yaml"
+  ;;
+esac
+
+mkdir -p /opt/komodo
+cd /opt/komodo
+curl -fsSL "https://raw.githubusercontent.com/moghtech/komodo/main/compose/$DB_COMPOSE_FILE" -o "$(basename "$DB_COMPOSE_FILE")"
+
+msg_info "Setup Komodo Environment"
+curl -fsSL "https://raw.githubusercontent.com/moghtech/komodo/main/compose/compose.env" -o "/opt/komodo/compose.env"
+DB_PASSWORD=$(openssl rand -base64 16 | tr -d '/+=')
+PASSKEY=$(openssl rand -base64 24 | tr -d '/+=')
+WEBHOOK_SECRET=$(openssl rand -base64 24 | tr -d '/+=')
+JWT_SECRET=$(openssl rand -base64 24 | tr -d '/+=')
+
+sed -i "s/^KOMODO_DB_USERNAME=.*/KOMODO_DB_USERNAME=komodo_admin/" /opt/komodo/compose.env
+sed -i "s/^KOMODO_DB_PASSWORD=.*/KOMODO_DB_PASSWORD=${DB_PASSWORD}/" /opt/komodo/compose.env
+sed -i "s/^KOMODO_PASSKEY=.*/KOMODO_PASSKEY=${PASSKEY}/" /opt/komodo/compose.env
+sed -i "s/^KOMODO_WEBHOOK_SECRET=.*/KOMODO_WEBHOOK_SECRET=${WEBHOOK_SECRET}/" /opt/komodo/compose.env
+sed -i "s/^KOMODO_JWT_SECRET=.*/KOMODO_JWT_SECRET=${JWT_SECRET}/" /opt/komodo/compose.env
+msg_ok "Setup Komodo Environment"
+
+msg_info "Initialize Komodo"
+$STD docker compose -p komodo -f "/opt/komodo/$DB_COMPOSE_FILE" --env-file /opt/komodo/compose.env up -d
+msg_ok "Initialized Komodo"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apk cache clean
+msg_ok "Cleaned"

install/alpine-rclone-install.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/rclone/rclone
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing dependencies"
+$STD apk add --no-cache \
+  unzip \
+  apache2-utils
+msg_ok "Installed dependencies"
+
+msg_info "Installing rclone"
+temp_file=$(mktemp)
+mkdir -p /opt/rclone
+RELEASE=$(curl -s https://api.github.com/repos/rclone/rclone/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+curl -fsSL "https://github.com/rclone/rclone/releases/download/v${RELEASE}/rclone-v${RELEASE}-linux-amd64.zip" -o "$temp_file"
+$STD unzip -j "$temp_file" '*/**' -d /opt/rclone
+cd /opt/rclone
+RCLONE_PASSWORD=$(head -c 16 /dev/urandom | xxd -p -c 16)
+$STD htpasswd -cb -B login.pwd admin "$RCLONE_PASSWORD"
+{
+  echo "rclone-Credentials"
+  echo "rclone User Name: admin"
+  echo "rclone Password: $RCLONE_PASSWORD"
+} >>~/rclone.creds
+echo "${RELEASE}" >/opt/rclone_version.txt
+rm -f "$temp_file"
+msg_ok "Installed rclone"
+
+msg_info "Enabling rclone Service"
+cat <<EOF >/etc/init.d/rclone
+#!/sbin/openrc-run
+description="rclone Service"
+command="/opt/rclone/rclone"
+command_args="rcd --rc-web-gui --rc-web-gui-no-open-browser --rc-addr :3000 --rc-htpasswd /opt/rclone/login.pwd"
+command_background="true"
+command_user="root"
+pidfile="/var/run/rclone.pid"
+
+depend() {
+    use net
+}
+EOF
+chmod +x /etc/init.d/rclone
+$STD rc-update add rclone default
+msg_ok "Enabled rclone Service"
+
+msg_info "Starting rclone"
+$STD service rclone start
+msg_ok "Started rclone"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+rm -rf "$temp_file"
+$STD apk cache clean
+msg_ok "Cleaned"

install/alpine-tinyauth-install.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/steveiliop56/tinyauth
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apk add --no-cache \
+  npm \
+  curl \
+  go
+msg_ok "Installed Dependencies"
+
+msg_info "Installing tinyauth"
+temp_file=$(mktemp)
+$STD npm install -g bun
+mkdir -p /opt/tinyauth
+RELEASE=$(curl -s https://api.github.com/repos/steveiliop56/tinyauth/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+curl -fsSL "https://github.com/steveiliop56/tinyauth/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
+tar -xzf "$temp_file" -C /opt/tinyauth --strip-components=1
+cd /opt/tinyauth/frontend
+$STD bun install
+$STD bun run build
+mv dist /opt/tinyauth/internal/assets/
+cd /opt/tinyauth
+$STD go mod download
+CGO_ENABLED=0 go build -ldflags "-s -w"
+{
+  echo "tinyauth Credentials"
+  echo "Username: admin@example.com"
+  echo "Password: admin"
+} >>~/tinyauth.creds
+echo "${RELEASE}" >/opt/tinyauth_version.txt
+msg_ok "Installed tinyauth"
+
+msg_info "Enabling tinyauth Service"
+SECRET=$(head -c 16 /dev/urandom | xxd -p -c 16 | tr -d '\n')
+{
+  echo "SECRET=${SECRET}"
+  echo "USERS=admin@example.com:\$2a\$10\$CrTK.W7WXSClo3ZY1yJUFupg5UdV8WNcynEhZhJFNjhGQB.Ga0ZDm"
+  echo "APP_URL=http://localhost:3000"
+} >>/opt/tinyauth/.env
+
+cat <<EOF >/etc/init.d/tinyauth
+#!/sbin/openrc-run
+description="tinyauth Service"
+
+command="/opt/tinyauth/tinyauth"
+directory="/opt/tinyauth"
+command_user="root"
+command_background="true"
+pidfile="/var/run/tinyauth.pid"
+
+start_pre() {
+    if [ -f "/opt/tinyauth/.env" ]; then
+        export \$(grep -v '^#' /opt/tinyauth/.env | xargs)
+    fi
+}
+
+depend() {
+    use net
+}
+EOF
+
+chmod +x /etc/init.d/tinyauth
+$STD rc-update add tinyauth default
+msg_ok "Enabled tinyauth Service"
+
+msg_info "Starting tinyauth"
+$STD service tinyauth start
+msg_ok "Started tinyauth"
+
+motd_ssh
+customize

install/alpine-transmission-install.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://transmissionbt.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Transmission"
+$STD apk add --no-cache transmission-cli transmission-daemon
+$STD rc-service transmission-daemon start
+$STD rc-service transmission-daemon stop
+sed -i '{s/"rpc-whitelist-enabled": true/"rpc-whitelist-enabled": false/g; s/"rpc-host-whitelist-enabled": true,/"rpc-host-whitelist-enabled": false,/g}' /var/lib/transmission/config/settings.json
+msg_ok "Installed Transmission"
+
+msg_info "Enabling Transmission Service"
+$STD rc-update add transmission-daemon default
+msg_ok "Enabled Transmission Service"
+
+msg_info "Starting Transmission"
+$STD rc-service transmission-daemon start
+msg_ok "Started Transmission"
+
+motd_ssh
+customize

install/alpine-vaultwarden-install.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 
 # Copyright (c) 2021-2025 tteck
-# Author: tteck (tteckster)
+# Author: tteck (tteckster) | Co-Author: Slaviša Arežina (tremor021)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/dani-garcia/vaultwarden
 
@@ -14,18 +14,24 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apk add argon2
+$STD apk add --no-cache \
+  openssl \
+  argon2
 msg_ok "Installed Dependencies"
 
 msg_info "Installing Alpine-Vaultwarden"
-$STD apk add vaultwarden
-sed -i -e 's|export WEB_VAULT_ENABLED=.*|export WEB_VAULT_ENABLED=true|' /etc/conf.d/vaultwarden
+$STD apk add --no-cache vaultwarden
+sed -i 's|export WEB_VAULT_ENABLED=.*|export WEB_VAULT_ENABLED=true|' /etc/conf.d/vaultwarden
 echo -e "export ADMIN_TOKEN=''" >>/etc/conf.d/vaultwarden
 echo -e "export ROCKET_ADDRESS=0.0.0.0" >>/etc/conf.d/vaultwarden
+echo -e "export ROCKET_TLS='{certs=\"/etc/ssl/certs/vaultwarden-selfsigned.crt\",key=\"/etc/ssl/private/vaultwarden-selfsigned.key\"}'" >>/etc/conf.d/vaultwarden
+$STD openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/vaultwarden-selfsigned.key -out /etc/ssl/certs/vaultwarden-selfsigned.crt -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost"
+chown vaultwarden:vaultwarden /etc/ssl/certs/vaultwarden-selfsigned.crt
+chown vaultwarden:vaultwarden /etc/ssl/private/vaultwarden-selfsigned.key
 msg_ok "Installed Alpine-Vaultwarden"
 
 msg_info "Installing Web-Vault"
-$STD apk add vaultwarden-web-vault
+$STD apk add --no-cache vaultwarden-web-vault
 msg_ok "Installed Web-Vault"
 
 msg_info "Starting Alpine-Vaultwarden"

install/apache-guacamole-install.sh

@@ -52,7 +52,7 @@ msg_ok "Setup Apache Tomcat"
 
 msg_info "Setup Apache Guacamole"
 mkdir -p /etc/guacamole/{extensions,lib}
-RELEASE_SERVER=$(curl -fsSL https://api.github.com/repos/apache/guacamole-server/tags | jq -r '.[0].name')
+RELEASE_SERVER=$(curl -fsSL https://api.github.com/repos/apache/guacamole-server/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
 curl -fsSL "https://api.github.com/repos/apache/guacamole-server/tarball/refs/tags/${RELEASE_SERVER}" | tar -xz --strip-components=1 -C /opt/apache-guacamole/server
 cd /opt/apache-guacamole/server
 $STD autoreconf -fi
@@ -60,7 +60,7 @@ $STD ./configure --with-init-dir=/etc/init.d --enable-allow-freerdp-snapshots
 $STD make
 $STD make install
 $STD ldconfig
-RELEASE_CLIENT=$(curl -fsSL https://api.github.com/repos/apache/guacamole-client/tags | jq -r '.[0].name')
+RELEASE_CLIENT=$(curl -fsSL https://api.github.com/repos/apache/guacamole-client/tags | jq -r '.[].name' | grep -v -- '-RC' | head -n 1)
 curl -fsSL "https://downloads.apache.org/guacamole/${RELEASE_CLIENT}/binary/guacamole-${RELEASE_CLIENT}.war" -o "/opt/apache-guacamole/tomcat9/webapps/guacamole.war"
 cd /root
 curl -fsSL "https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-java-8.0.26.tar.gz" -o "/root/mysql-connector-java-8.0.26.tar.gz"

install/apt-cacher-ng-install.sh

@@ -16,6 +16,9 @@ update_os
 msg_info "Installing Apt-Cacher NG"
 DEBIAN_FRONTEND=noninteractive $STD apt-get -o Dpkg::Options::="--force-confold" install -y apt-cacher-ng
 sed -i 's/# PassThroughPattern: .* # this would allow CONNECT to everything/PassThroughPattern: .*/' /etc/apt-cacher-ng/acng.conf
+cat << EOF >/etc/apt/apt.conf.d/00aptproxy.conf
+Acquire::http::Proxy "http://localhost:3142";
+EOF
 systemctl enable -q --now apt-cacher-ng
 msg_ok "Installed Apt-Cacher NG"
 

install/authentik-install.sh

@@ -15,7 +15,6 @@ update_os
 
 msg_info "Installing Dependencies (Patience)"
 $STD apt-get install -y \
-  gpg \
   pkg-config \
   libffi-dev \
   build-essential \
@@ -33,9 +32,15 @@ $STD apt-get install -y \
   libxmlsec1-openssl \
   libmaxminddb0 \
   python3-pip \
+  redis-server \
   git
 msg_ok "Installed Dependencies"
 
+setup_uv
+PG_VERSION="16" install_postgresql
+NODE_VERSION="22" install_node_and_modules
+install_go
+
 msg_info "Installing yq"
 cd /tmp
 YQ_LATEST="$(curl -fsSL https://api.github.com/repos/mikefarah/yq/releases/latest | grep -Po '"tag_name": "\K.*?(?=")')"
@@ -95,7 +100,7 @@ systemctl enable -q --now redis-server
 msg_ok "Installed Redis"
 
 msg_info "Installing PostgreSQL"
-$STD apt-get install -y postgresql postgresql-contrib
+$STD apt-get install -y postgresql-16 postgresql-contrib-16
 DB_NAME="authentik"
 DB_USER="authentik"
 DB_PASS="$(openssl rand -base64 18 | cut -c1-13)"
@@ -111,25 +116,29 @@ RELEASE=$(curl -fsSL https://api.github.com/repos/goauthentik/authentik/releases
 mkdir -p /opt/authentik
 curl -fsSL "${RELEASE}" -o "authentik.tar.gz"
 tar -xzf authentik.tar.gz -C /opt/authentik --strip-components 1 --overwrite
+export NODE_OPTIONS="--max-old-space-size=4096"
 cd /opt/authentik/website
 $STD npm install
 $STD npm run build-bundled
+
 cd /opt/authentik/web
 $STD npm install
 $STD npm run build
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+
 cd /opt/authentik
 $STD go mod download
 $STD go build -o /go/authentik ./cmd/server
 $STD go build -o /opt/authentik/authentik-server /opt/authentik/cmd/server/
-cd /opt/authentik
-$STD pip3 install --upgrade pip
-$STD pip3 install poetry poetry-plugin-export
-ln -s /usr/local/bin/poetry /usr/bin/poetry
-$STD poetry install --only=main --no-ansi --no-interaction --no-root
-$STD poetry export --without-hashes --without-urls -f requirements.txt --output requirements.txt
-$STD pip install --no-cache-dir -r requirements.txt
-$STD pip install .
+$STD uv sync --frozen --no-install-project --no-dev
+#$STD pip3 install --no-cache-dir --upgrade pip
+#$STD pip3 install --upgrade pip
+#$STD pip3 install poetry poetry-plugin-export
+
+#ln -s /usr/local/bin/poetry /usr/bin/poetry
+#$STD poetry install --only=main --no-ansi --no-interaction --no-root
+#$STD poetry export --without-hashes --without-urls -f requirements.txt --output requirements.txt
+#$STD pip install --no-cache-dir -r requirements.txt
+#$STD pip install .
 mkdir -p /etc/authentik
 mv /opt/authentik/authentik/lib/default.yml /etc/authentik/config.yml
 $STD yq -i ".secret_key = \"$(openssl rand -hex 32)\"" /etc/authentik/config.yml
@@ -137,23 +146,30 @@ $STD yq -i ".postgresql.password = \"${DB_PASS}\"" /etc/authentik/config.yml
 $STD yq -i ".geoip = \"/opt/authentik/tests/GeoLite2-City-Test.mmdb\"" /etc/authentik/config.yml
 cp -r /opt/authentik/authentik/blueprints /opt/authentik/blueprints
 $STD yq -i ".blueprints_dir = \"/opt/authentik/blueprints\"" /etc/authentik/config.yml
-ln -s /usr/bin/python3 /usr/bin/python
-ln -s /usr/local/bin/gunicorn /usr/bin/gunicorn
-ln -s /usr/local/bin/celery /usr/bin/celery
-$STD bash /opt/authentik/lifecycle/ak migrate
-cd ~
+#ln -s /usr/bin/python3 /usr/bin/python
+#ln -s /usr/local/bin/gunicorn /usr/bin/gunicorn
+#ln -s /usr/local/bin/celery /usr/bin/celery
+#$STD bash /opt/authentik/lifecycle/ak migrate
+cd /opt/authentik
+uv run python -m lifecycle.migrate
+ln -s /opt/authentik/.venv/bin/gunicorn /usr/local/bin/gunicorn
+ln -s /opt/authentik/.venv/bin/celery /usr/local/bin/celery
+echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed authentik"
 
 msg_info "Creating Services"
 cat <<EOF >/etc/systemd/system/authentik-server.service
 [Unit]
-Description = authentik Server
+Description=authentik Go Server (API Gateway)
+After=network.target
+Wants=redis.service postgresql.service
 
 [Service]
-ExecStart=/opt/authentik/authentik-server
 WorkingDirectory=/opt/authentik/
+ExecStart=/opt/authentik/authentik-server
 Restart=always
 RestartSec=5
+Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
 
 [Install]
 WantedBy=multi-user.target
@@ -161,21 +177,49 @@ EOF
 
 cat <<EOF >/etc/systemd/system/authentik-worker.service
 [Unit]
-Description = authentik Worker
+Description=authentik Celery Worker
+After=network.target redis.service postgresql.service
+Requires=redis.service
 
 [Service]
-Environment=DJANGO_SETTINGS_MODULE="authentik.root.settings"
-ExecStart=celery -A authentik.root.celery worker -Ofair --max-tasks-per-child=1 --autoscale 3,1 -E -B -s /tmp/celerybeat-schedule -Q authentik,authentik_scheduled,authentik_events
-WorkingDirectory=/opt/authentik/authentik
+Type=simple
+WorkingDirectory=/opt/authentik
+ExecStart=/opt/authentik/.venv/bin/celery \
+  -A authentik.root.celery worker \
+  -Ofair \
+  --max-tasks-per-child=1 \
+  --autoscale 3,1 \
+  -Q authentik,authentik_scheduled,authentik_events \
+  -E
 Restart=always
 RestartSec=5
+Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
 
 [Install]
 WantedBy=multi-user.target
 EOF
-systemctl enable -q --now authentik-server
-sleep 2
-systemctl enable -q --now authentik-worker
+
+cat <<EOF >/etc/systemd/system/authentik-celery-beat.service
+[Unit]
+Description=authentik Celery Beat Scheduler
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/authentik
+ExecStart=/opt/authentik/.venv/bin/celery \
+  -A authentik.root.celery beat \
+  -s /tmp/celerybeat-schedule
+Restart=always
+RestartSec=5
+#User=authentik
+Environment=DJANGO_SETTINGS_MODULE=authentik.root.settings
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl enable -q --now authentik-server authentik-worker authentik-celery-beat
 msg_ok "Created Services"
 
 motd_ssh

install/bazarr-install.sh

@@ -26,7 +26,7 @@ mkdir -p /var/lib/bazarr/
 curl -fsSL "https://github.com/morpheus65535/bazarr/releases/latest/download/bazarr.zip" -o $(basename "https://github.com/morpheus65535/bazarr/releases/latest/download/bazarr.zip")
 unzip -qq bazarr -d /opt/bazarr
 chmod 775 /opt/bazarr /var/lib/bazarr/
-python3 -m pip install -q -r /opt/bazarr/requirements.txt
+$STD python3 -m pip install -q -r /opt/bazarr/requirements.txt
 msg_ok "Installed Bazarr"
 
 msg_info "Creating Service"

install/checkmk-install.sh

@@ -14,7 +14,7 @@ network_check
 update_os
 
 msg_info "Install Checkmk"
-RELEASE=$(curl -fsSL https://api.github.com/repos/checkmk/checkmk/tags | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -v '\-rc' | sort -V | tail -n 1)
+RELEASE=$(curl -fsSL https://api.github.com/repos/checkmk/checkmk/tags | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -Ev 'rc|b' | sort -V | tail -n 1)
 curl -fsSL "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-raw-${RELEASE}_0.bookworm_arm64.deb" -o "/opt/checkmk.deb"
 $STD apt-get install -y /opt/checkmk.deb
 echo "${RELEASE}" >"/opt/checkmk_version.txt"

install/documenso-install.sh

@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (Canbiz)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/documenso/documenso
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Setup Functions"
+setup_local_ip_helper
+import_local_ip
+msg_ok "Setup Functions"
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  gpg \
+  libc6 \
+  make \
+  cmake \
+  jq \
+  postgresql \
+  python3 \
+  python3-bcrypt
+msg_ok "Installed Dependencies"
+
+msg_info "Setting up Node.js Repository"
+mkdir -p /etc/apt/keyrings
+curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
+echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
+msg_ok "Set up Node.js Repository"
+
+msg_info "Installing Node.js"
+$STD apt-get update
+$STD apt-get install -y nodejs
+$STD npm install -g turbo@1.9.3
+msg_ok "Installed Node.js"
+
+msg_info "Setting up PostgreSQL"
+DB_NAME="documenso_db"
+DB_USER="documenso_user"
+DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+{
+  echo "Documenso-Credentials"
+  echo "Database Name: $DB_NAME"
+  echo "Database User: $DB_USER"
+  echo "Database Password: $DB_PASS"
+} >>~/documenso.creds
+msg_ok "Set up PostgreSQL"
+
+msg_info "Installing Documenso (Patience)"
+cd /opt
+RELEASE=$(curl -fsSL https://api.github.com/repos/documenso/documenso/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
+curl -fsSL "https://github.com/documenso/documenso/archive/refs/tags/v${RELEASE}.zip" -o v${RELEASE}.zip
+unzip -q v${RELEASE}.zip
+mv documenso-${RELEASE} /opt/documenso
+cd /opt/documenso
+mv .env.example /opt/documenso/.env
+sed -i \
+  -e "s|^NEXTAUTH_SECRET=.*|NEXTAUTH_SECRET='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^NEXT_PRIVATE_ENCRYPTION_KEY=.*|NEXT_PRIVATE_ENCRYPTION_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY=.*|NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^DOCUMENSO_ENCRYPTION_KEY=.*|DOCUMENSO_ENCRYPTION_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^DOCUMENSO_ENCRYPTION_SECONDARY_KEY=.*|DOCUMENSO_ENCRYPTION_SECONDARY_KEY='$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)'|" \
+  -e "s|^NEXT_PUBLIC_WEBAPP_URL=.*|NEXT_PUBLIC_WEBAPP_URL='http://${LOCAL_IP}:3000'|" \
+  -e "s|^NEXT_PRIVATE_INTERNAL_WEBAPP_URL=.*|NEXT_PRIVATE_INTERNAL_WEBAPP_URL=\"http://${LOCAL_IP}:3000\"|" \
+  -e "s|^NEXT_PRIVATE_DATABASE_URL=.*|NEXT_PRIVATE_DATABASE_URL=\"postgres://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME\"|" \
+  -e "s|^NEXT_PRIVATE_DIRECT_DATABASE_URL=.*|NEXT_PRIVATE_DIRECT_DATABASE_URL=\"postgres://$DB_USER:$DB_PASS@localhost:5432/$DB_NAME\"|" \
+  /opt/documenso/.env
+export TURBO_CACHE=1
+export NEXT_TELEMETRY_DISABLED=1
+export CYPRESS_INSTALL_BINARY=0
+export NODE_OPTIONS="--max-old-space-size=4096"
+$STD npm ci
+$STD turbo run build --filter=@documenso/remix
+$STD npm run prisma:migrate-deploy
+echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
+msg_ok "Installed Documenso"
+
+msg_info "Create User"
+PASSWORD_HASH=$(python3 -c "import bcrypt; print(bcrypt.hashpw(b'helper-scripts', bcrypt.gensalt(rounds=12)).decode())")
+sudo -u postgres psql -d documenso_db -c "INSERT INTO \"User\" (name, email, \"emailVerified\", password, \"identityProvider\", roles, \"createdAt\", \"lastSignedIn\", \"updatedAt\", \"customerId\") VALUES ('helper-scripts', 'helper-scripts@local.com', '2025-01-20 17:14:45.058', '$PASSWORD_HASH', 'DOCUMENSO', ARRAY['USER', 'ADMIN']::\"Role\"[], '2025-01-20 16:04:05.543', '2025-01-20 16:14:55.249', '2025-01-20 16:14:55.25', NULL) RETURNING id;"
+$STD npm run prisma:migrate-deploy
+msg_ok "User created"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/documenso.service
+[Unit]
+Description=Documenso Service
+After=network.target postgresql.service
+
+[Service]
+WorkingDirectory=/opt/documenso
+ExecStart=/usr/bin/turbo run start --filter=@documenso/remix
+Restart=always
+EnvironmentFile=/opt/documenso/.env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now documenso
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD turbo daemon stop
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/elementsynapse-install.sh

@@ -64,7 +64,7 @@ mkdir -p /opt/synapse-admin
 RELEASE=$(curl -fsSL https://api.github.com/repos/etkecc/synapse-admin/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 curl -fsSL "https://github.com/etkecc/synapse-admin/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
 tar xzf "$temp_file" -C /opt/synapse-admin --strip-components=1
-cd /opt/synapse-adminsys
+cd /opt/synapse-admin
 $STD yarn install --ignore-engines
 msg_ok "Installed Element Synapse"
 

install/fumadocs-install.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  ca-certificates
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="22" NODE_MODULE="pnpm@latest" install_node_and_modules
+
+msg_info "Installing Fumadocs"
+mkdir -p /opt/fumadocs
+cd /opt/fumadocs
+pnpm create fumadocs-app
+PROJECT_NAME=$(find . -maxdepth 1 -type d ! -name '.' ! -name '..' | sed 's|^\./||')
+echo "$PROJECT_NAME" >/opt/fumadocs/.projectname
+msg_ok "Installed Fumadocs"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/fumadocs_$PROJECT_NAME.service
+[Unit]
+Description=Fumadocs Documentation Server
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/fumadocs/$PROJECT_NAME
+ExecStart=/usr/bin/pnpm run dev
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now fumadocs_$PROJECT_NAME
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/homeassistant-core-install.sh

@@ -47,29 +47,36 @@ $STD apt-get install -y \
   libmariadb-dev \
   pkg-config
 msg_ok "Installed Dependencies"
-
+setup_uv
 msg_info "Setup Python3"
-$STD apt-get update
-$STD rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
 
 $STD apt-get install -y \
   python3.13 \
-  python3-pip \
   python3.13-dev \
   python3.13-venv
 rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
 ln -sf /usr/bin/python3.13 /usr/bin/python3
 msg_ok "Setup Python3"
 
+msg_info "Preparing Python 3.13 for uv"
+$STD uv python install 3.13
+UV_PYTHON=$(uv python list | awk '/3\.13\.[0-9]+.*\/root\/.local/ {print $2; exit}')
+if [[ -z "$UV_PYTHON" ]]; then
+  msg_error "No local Python 3.13 found via uv"
+  exit 1
+fi
+msg_ok "Prepared Python 3.13"
+
 msg_info "Setting up Home Assistant-Core environment"
-mkdir /srv/homeassistant
+rm -rf /srv/homeassistant
+mkdir -p /srv/homeassistant
 cd /srv/homeassistant
-python3 -m venv .
-source bin/activate
+$STD uv venv .venv --python "$UV_PYTHON"
+source .venv/bin/activate
 msg_ok "Created virtual environment"
 
 msg_info "Installing Home Assistant-Core"
-$STD python3 -m pip install webrtcvad wheel homeassistant mysqlclient psycopg2-binary isal
+$STD uv pip install homeassistant mysqlclient psycopg2-binary isal webrtcvad wheel
 mkdir -p /root/.homeassistant
 msg_ok "Installed Home Assistant-Core"
 
@@ -78,16 +85,19 @@ cat <<EOF >/etc/systemd/system/homeassistant.service
 [Unit]
 Description=Home Assistant
 After=network-online.target
+
 [Service]
 Type=simple
 WorkingDirectory=/root/.homeassistant
-Environment="PATH=/srv/homeassistant/bin:/usr/local/bin:/usr/bin:/usr/local/bin/uv"
-ExecStart=/srv/homeassistant/bin/python3 -m homeassistant --config /root/.homeassistant
+Environment="PATH=/srv/homeassistant/.venv/bin:/usr/local/bin:/usr/bin"
+ExecStart=/srv/homeassistant/.venv/bin/python3 -m homeassistant --config /root/.homeassistant
 Restart=always
 RestartForceExitStatus=100
+
 [Install]
 WantedBy=multi-user.target
 EOF
+
 systemctl enable -q --now homeassistant
 msg_ok "Created Service"
 

install/homepage-install.sh

@@ -14,8 +14,7 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y ca-certificates
-$STD apt-get install -y gpg
+$STD apt-get install -y gpg jq ca-certificates
 msg_ok "Installed Dependencies"
 
 msg_info "Setting up Node.js Repository"
@@ -44,6 +43,7 @@ cp /opt/homepage/src/skeleton/* /opt/homepage/config
 $STD pnpm install
 export NEXT_PUBLIC_VERSION="v$RELEASE"
 export NEXT_PUBLIC_REVISION="source"
+export NEXT_PUBLIC_BUILDTIME=$(curl -fsSL https://api.github.com/repos/gethomepage/homepage/releases/latest | jq -r '.published_at')
 export NEXT_TELEMETRY_DISABLED=1
 $STD pnpm build
 echo "HOMEPAGE_ALLOWED_HOSTS=localhost:3000,${LOCAL_IP}:3000" >/opt/homepage/.env

install/jellyseerr-install.sh

@@ -14,31 +14,21 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y git
-$STD apt-get install -y ca-certificates
-$STD apt-get install -y gpg
-$STD apt-get install -y build-essential
+$STD apt-get install -y \
+    git \
+    build-essential \
+    ca-certificates \
+    gpg
 msg_ok "Installed Dependencies"
 
-msg_info "Setting up Node.js Repository"
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-msg_ok "Set up Node.js Repository"
 
-msg_info "Installing Node.js"
-$STD apt-get update
-$STD apt-get install -y nodejs
-msg_ok "Installed Node.js"
 
 git clone -q https://github.com/Fallenbagel/jellyseerr.git /opt/jellyseerr
 cd /opt/jellyseerr
 $STD git checkout main
 
 pnpm_desired=$(grep -Po '"pnpm":\s*"\K[^"]+' /opt/jellyseerr/package.json)
-msg_info "Installing pnpm version $pnpm_desired..."
-$STD npm install -g pnpm@$pnpm_desired
-msg_ok "Installed pnpm"
+NODE_VERSION="22" NODE_MODULE="pnpm@$pnpm_desired" install_node_and_modules
 
 msg_info "Installing Jellyseerr (Patience)"
 export CYPRESS_INSTALL_BINARY=0

install/karakeep-install.sh

@@ -71,10 +71,15 @@ export NEXT_TELEMETRY_DISABLED=1
 export CI="true"
 cd /opt/karakeep/apps/web
 $STD pnpm install --frozen-lockfile
-$STD pnpm exec next build --experimental-build-mode compile
-cp -r /opt/karakeep/apps/web/.next/standalone/apps/web/server.js /opt/karakeep/apps/web
+$STD pnpm build
 cd /opt/karakeep/apps/workers
 $STD pnpm install --frozen-lockfile
+cd /opt/karakeep/apps/cli
+$STD pnpm install --frozen-lockfile
+$STD pnpm build
+cd /opt/karakeep/apps/mcp
+$STD pnpm install --frozen-lockfile
+$STD pnpm build
 
 export DATA_DIR=/opt/karakeep_data
 karakeep_SECRET=$(openssl rand -base64 36 | cut -c1-24)

install/linkwarden-install.sh

@@ -18,23 +18,15 @@ msg_info "Installing Dependencies"
 $STD apt-get install -y \
   make \
   git \
-  postgresql \
   build-essential \
-  cargo \
-  gnupg
+  cargo
 msg_ok "Installed Dependencies"
 
-msg_info "Setting up Node.js Repository"
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-msg_ok "Set up Node.js Repository"
-
-msg_info "Installing Node.js/Yarn"
-$STD apt-get update
-$STD apt-get install -y nodejs
-$STD npm install -g yarn
-msg_ok "Installed Node.js/Yarn"
+NODE_VERSION="22"
+NODE_MODULE="yarn@latest"
+install_node_and_modules
+PG_VERSION="15"
+install_postgresql
 
 msg_info "Installing Rust"
 curl -fsSL https://sh.rustup.rs -o rustup-init.sh
@@ -92,7 +84,7 @@ fi
 msg_info "Installing Linkwarden (Patience)"
 cd /opt
 RELEASE=$(curl -fsSL https://api.github.com/repos/linkwarden/linkwarden/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/linkwarden/linkwarden/archive/refs/tags/${RELEASE}.zip" -o $(basename "https://github.com/linkwarden/linkwarden/archive/refs/tags/${RELEASE}.zip")
+curl -fsSL "https://github.com/linkwarden/linkwarden/archive/refs/tags/${RELEASE}.zip" -o ${RELEASE}.zip
 unzip -q ${RELEASE}.zip
 mv linkwarden-${RELEASE:1} /opt/linkwarden
 cd /opt/linkwarden
@@ -106,8 +98,9 @@ NEXTAUTH_SECRET=${SECRET_KEY}
 NEXTAUTH_URL=http://${IP}:3000
 DATABASE_URL=postgresql://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}
 " >$env_path
-$STD yarn build
-$STD yarn prisma migrate deploy
+$STD yarn prisma:generate
+$STD yarn web:build
+$STD yarn prisma:deploy
 echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Linkwarden"
 
@@ -121,7 +114,7 @@ After=network.target
 Type=exec
 Environment=PATH=$PATH
 WorkingDirectory=/opt/linkwarden
-ExecStart=/usr/bin/yarn start
+ExecStart=/usr/bin/yarn concurrently:start
 
 [Install]
 WantedBy=multi-user.target

install/matterbridge-install.sh

@@ -1,8 +1,7 @@
 #!/usr/bin/env bash
 
 # Copyright (c) 2021-2025 tteck
-# Author: tteck
-# Co-Author: MickLesk (Canbiz)
+# Author: MickLesk (Canbiz)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/Luligu/matterbridge/
 
@@ -14,24 +13,11 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies"
-$STD apt-get install -y gpg
-msg_ok "Installed Dependencies"
-
-msg_info "Setting up Node.js Repository"
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-msg_ok "Set up Node.js Repository"
-
-msg_info "Installing Node.js"
-$STD apt-get update
-$STD apt-get install -y nodejs
-msg_ok "Installed Node.js"
-
 msg_info "Install Matterbridge"
 mkdir -p /root/Matterbridge
-$STD npm install -g matterbridge
+NODE_VERSION="22"
+NODE_MODULE="matterbridge"
+install_node_and_modules
 msg_ok "Installed Matterbridge"
 
 msg_info "Creating Service"

install/navidrome-install.sh

@@ -1,9 +1,9 @@
 #!/usr/bin/env bash
 
-# Copyright (c) 2021-2024 tteck
+# Copyright (c) 2021-2025 tteck
 # Author: tteck (tteckster)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.navidrome.org/
+# License: MIT | https://github.com/asylumexp/Proxmox/raw/main/LICENSE
+# Source: https://github.com/navidrome/navidrome
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -13,67 +13,30 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Dependencies (patience)"
-$STD apt-get install -y ffmpeg
+msg_info "Installing Dependencies (Patience)"
+$STD apt-get install -y \
+    ffmpeg
 msg_ok "Installed Dependencies"
 
 msg_info "Installing Navidrome"
-RELEASE=$(curl -fsSL https://api.github.com/repos/navidrome/navidrome/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-install -d -o root -g root /opt/navidrome
-install -d -o root -g root /var/lib/navidrome
-curl -fsSL "https://github.com/navidrome/navidrome/releases/download/v${RELEASE}/navidrome_${RELEASE}_linux_arm64.tar.gz" -o "Navidrome.tar.gz"
-$STD tar -xvzf Navidrome.tar.gz -C /opt/navidrome/
-chown -R root:root /opt/navidrome
-chmod +x /opt/navidrome/navidrome
-mkdir -p /music
-cat <<EOF >/var/lib/navidrome/navidrome.toml
-MusicFolder = '/music'
-EOF
+RELEASE=$(curl -fsSL https://api.github.com/repos/navidrome/navidrome/releases/latest | grep "tag_name" | awk -F '"' '{print $4}')
+TMP_DEB=$(mktemp --suffix=.deb)
+curl -fsSL -o "${TMP_DEB}" "https://github.com/navidrome/navidrome/releases/download/${RELEASE}/navidrome_${RELEASE#v}_linux_arm64.deb"
+$STD apt-get install -y "${TMP_DEB}"
+systemctl enable -q --now navidrome
+echo "${RELEASE}" >/opt/Navidrome_version.txt
 msg_ok "Installed Navidrome"
 
-msg_info "Creating Service"
-service_path="/etc/systemd/system/navidrome.service"
-
-echo "[Unit]
-Description=Navidrome Music Server and Streamer compatible with Subsonic/Airsonic
-After=remote-fs.target network.target
-AssertPathExists=/var/lib/navidrome
-
-[Service]
-User=root
-Group=root
-Type=simple
-ExecStart=/opt/navidrome/navidrome --configfile '/var/lib/navidrome/navidrome.toml'
-WorkingDirectory=/var/lib/navidrome
-TimeoutStopSec=20
-KillMode=process
-Restart=on-failure
-DevicePolicy=closed
-NoNewPrivileges=yes
-PrivateTmp=yes
-PrivateUsers=yes
-ProtectControlGroups=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-RestrictNamespaces=yes
-RestrictRealtime=yes
-SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap
-ReadWritePaths=/var/lib/navidrome
-ProtectSystem=full
-
-[Install]
-WantedBy=multi-user.target" >$service_path
-systemctl daemon-reload
-systemctl enable -q --now navidrome
-
-msg_ok "Created Service"
+read -p "Do you want to install filebrowser addon? (y/n) " -n 1 -r
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+    bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/filebrowser.sh)"
+fi
 
 motd_ssh
 customize
 
 msg_info "Cleaning up"
+rm -f "${TMP_DEB}"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
-rm -rf /root/Navidrome.tar.gz
 msg_ok "Cleaned"

install/netbox-install.sh

@@ -33,7 +33,7 @@ $STD apt-get install -y \
   python3-pip \
   python3-venv \
   python3-dev
-msg_ok "Installed Python"  
+msg_ok "Installed Python"
 
 msg_info "Setting up PostgreSQL"
 DB_NAME=netbox
@@ -54,7 +54,7 @@ cd /opt
 RELEASE=$(curl -fsSL https://api.github.com/repos/netbox-community/netbox/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 curl -fsSL "https://github.com/netbox-community/netbox/archive/refs/tags/v${RELEASE}.zip" -o $(basename "https://github.com/netbox-community/netbox/archive/refs/tags/v${RELEASE}.zip")
 unzip -q "v${RELEASE}.zip"
-mv /opt/netbox-${RELEASE}/ /opt/netbox
+mv /opt/netbox-"${RELEASE}"/ /opt/netbox
 
 $STD adduser --system --group netbox
 chown --recursive netbox /opt/netbox/netbox/media/
@@ -68,8 +68,8 @@ ESCAPED_SECRET_KEY=$(printf '%s\n' "$SECRET_KEY" | sed 's/[&/\]/\\&/g')
 
 sed -i 's/ALLOWED_HOSTS = \[\]/ALLOWED_HOSTS = ["*"]/' /opt/netbox/netbox/netbox/configuration.py
 sed -i "s|SECRET_KEY = ''|SECRET_KEY = '${ESCAPED_SECRET_KEY}'|" /opt/netbox/netbox/netbox/configuration.py
-sed -i "/DATABASE = {/,/}/s/'USER': '[^']*'/'USER': '$DB_USER'/" /opt/netbox/netbox/netbox/configuration.py
-sed -i "/DATABASE = {/,/}/s/'PASSWORD': '[^']*'/'PASSWORD': '$DB_PASS'/" /opt/netbox/netbox/netbox/configuration.py
+sed -i "/DATABASES = {/,/}/s/'USER': '[^']*'/'USER': '$DB_USER'/" /opt/netbox/netbox/netbox/configuration.py
+sed -i "/DATABASES = {/,/}/s/'PASSWORD': '[^']*'/'PASSWORD': '$DB_PASS'/" /opt/netbox/netbox/netbox/configuration.py
 
 $STD /opt/netbox/upgrade.sh
 ln -s /opt/netbox/contrib/netbox-housekeeping.sh /etc/cron.daily/netbox-housekeeping
@@ -85,7 +85,7 @@ mv /opt/netbox/contrib/*.service /etc/systemd/system/
 systemctl daemon-reload
 systemctl enable -q --now netbox netbox-rq
 
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+echo "${RELEASE}" >/opt/"${APPLICATION}"_version.txt
 echo -e "Netbox Secret: \e[32m$SECRET_KEY\e[0m" >>~/netbox.creds
 msg_ok "Installed NetBox"
 

install/ollama-install.sh

@@ -1,8 +1,7 @@
 #!/usr/bin/env bash
 
 # Copyright (c) 2021-2025 tteck
-# Author: tteck
-# Co-Author: havardthom
+# Author: havardthom | Co-Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://ollama.com/
 
@@ -16,11 +15,8 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
-  gpg \
-  git \
   build-essential \
-  pkg-config \
-  cmake
+  pkg-config
 msg_ok "Installed Dependencies"
 
 msg_info "Installing Golang"
@@ -55,11 +51,35 @@ fi
 msg_ok "Set Up Hardware Acceleration"
 
 msg_info "Installing Ollama (Patience)"
-$STD git clone https://github.com/ollama/ollama.git /opt/ollama
-cd /opt/ollama
-$STD go generate ./...
-$STD go build .
-msg_ok "Installed Ollama"
+RELEASE=$(curl -fsSL https://api.github.com/repos/ollama/ollama/releases/latest | grep "tag_name" | awk -F '"' '{print $4}')
+OLLAMA_INSTALL_DIR="/usr/local/lib/ollama"
+BINDIR="/usr/local/bin"
+mkdir -p $OLLAMA_INSTALL_DIR
+OLLAMA_URL="https://github.com/ollama/ollama/releases/download/${RELEASE}/ollama-linux-amd64.tgz"
+TMP_TAR="/tmp/ollama.tgz"
+echo -e "\n"
+if curl -fL# -o "$TMP_TAR" "$OLLAMA_URL"; then
+  if tar -xzf "$TMP_TAR" -C "$OLLAMA_INSTALL_DIR"; then
+    ln -sf "$OLLAMA_INSTALL_DIR/bin/ollama" "$BINDIR/ollama"
+    echo "${RELEASE}" >/opt/Ollama_version.txt
+    msg_ok "Installed Ollama ${RELEASE}"
+  else
+    msg_error "Extraction failed – archive corrupt or incomplete"
+    exit 1
+  fi
+else
+  msg_error "Download failed – $OLLAMA_URL not reachable"
+  exit 1
+fi
+
+msg_info "Creating ollama User and Group"
+if ! id ollama >/dev/null 2>&1; then
+  useradd -r -s /usr/sbin/nologin -U -m -d /usr/share/ollama ollama
+fi
+$STD usermod -aG render ollama || true
+$STD usermod -aG video ollama || true
+$STD usermod -aG ollama $(id -u -n)
+msg_ok "Created ollama User and adjusted Groups"
 
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/ollama.service
@@ -69,7 +89,7 @@ After=network-online.target
 
 [Service]
 Type=exec
-ExecStart=/opt/ollama/ollama serve
+ExecStart=/usr/local/bin/ollama serve
 Environment=HOME=$HOME
 Environment=OLLAMA_INTEL_GPU=true
 Environment=OLLAMA_HOST=0.0.0.0

install/readeck-install.sh

@@ -14,7 +14,7 @@ network_check
 update_os
 
 msg_info "Installing Readeck"
-LATEST=$(curl -fsSL https://codeberg.org/readeck/readeck/releases/ | grep -oP '(?<=Version )\d+\.\d+\.\d+' | head -1)
+LATEST=$(curl -fsSL https://codeberg.org/readeck/readeck/releases/ | grep -oP '/releases/tag/\K\d+\.\d+\.\d+' | head -1)
 mkdir -p /opt/readeck
 cd /opt/readeck
 curl -fsSL "https://codeberg.org/readeck/readeck/releases/download/${LATEST}/readeck-${LATEST}-linux-arm64" -o "readeck"

install/sabnzbd-install.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 
 # Copyright (c) 2021-2025 tteck
-# Author: tteck (tteckster)
+# Author: tteck (tteckster) | Co-Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://sabnzbd.org/
 
@@ -14,52 +14,58 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y par2
-$STD apt-get install -y p7zip-full
+$STD apt-get install -y \
+    par2 \
+    p7zip-full
+msg_ok "Installed Dependencies"
+
+msg_info "Setup uv"
+setup_uv
+msg_ok "Setup uv"
+
+msg_info "Setup Unrar"
 cat <<EOF >/etc/apt/sources.list.d/non-free.list
 deb http://deb.debian.org/debian bookworm main contrib non-free non-free-firmware
 EOF
 $STD apt-get update
 $STD apt-get install -y unrar
 rm /etc/apt/sources.list.d/non-free.list
-msg_ok "Installed Dependencies"
-
-msg_info "Setup Python3"
-$STD apt-get install -y \
-  python3-dev \
-  python3-pip
-$STD apt-get install -y python3-setuptools
-rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
-msg_ok "Setup Python3"
+msg_ok "Setup Unrar"
 
 msg_info "Installing SABnzbd"
 RELEASE=$(curl -fsSL https://api.github.com/repos/sabnzbd/sabnzbd/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-$STD tar zxvf <(curl -fsSL https://github.com/sabnzbd/sabnzbd/releases/download/$RELEASE/SABnzbd-${RELEASE}-src.tar.gz)
-mv SABnzbd-${RELEASE} /opt/sabnzbd
-cd /opt/sabnzbd
-$STD python3 -m pip install -r requirements.txt
+mkdir -p /opt/sabnzbd
+$STD uv venv /opt/sabnzbd/venv
+temp_file=$(mktemp)
+curl -fsSL "https://github.com/sabnzbd/sabnzbd/releases/download/${RELEASE}/SABnzbd-${RELEASE}-src.tar.gz" -o "$temp_file"
+tar -xzf "$temp_file" -C /opt/sabnzbd --strip-components=1
+$STD uv pip install -r /opt/sabnzbd/requirements.txt --python=/opt/sabnzbd/venv/bin/python
 echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed SABnzbd"
 
 msg_info "Creating Service"
-service_path="/etc/systemd/system/sabnzbd.service"
-echo "[Unit]
+cat <<EOF >/etc/systemd/system/sabnzbd.service
+[Unit]
 Description=SABnzbd
 After=network.target
+
 [Service]
 WorkingDirectory=/opt/sabnzbd
-ExecStart=python3 SABnzbd.py -s 0.0.0.0:7777
+ExecStart=/opt/sabnzbd/venv/bin/python SABnzbd.py -s 0.0.0.0:7777
 Restart=always
 User=root
+
 [Install]
-WantedBy=multi-user.target" >$service_path
-systemctl enable --now -q sabnzbd.service
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now sabnzbd
 msg_ok "Created Service"
 
 motd_ssh
 customize
 
 msg_info "Cleaning up"
+rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/seafile-install.sh

@@ -1,285 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2025 community-scripts ORG
-# Author: dave-yap
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://seafile.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies (Patience)"
-$STD apt-get install -y expect
-msg_ok "Installed Dependencies"
-
-msg_info "Installing MariaDB"
-$STD apt-get install -y mariadb-server
-systemctl start mariadb
-msg_ok "Installed MariaDB"
-
-msg_info "Setup MariaDB for Seafile"
-CCNET_DB="ccnet_db"
-SEAFILE_DB="seafile_db"
-SEAHUB_DB="seahub_db"
-DB_USER="seafile"
-DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-ADMIN_EMAIL="admin@localhost.local"
-ADMIN_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-sudo -u mysql mysql -s -e "CREATE DATABASE $CCNET_DB CHARACTER SET utf8;"
-sudo -u mysql mysql -s -e "CREATE DATABASE $SEAFILE_DB CHARACTER SET utf8;"
-sudo -u mysql mysql -s -e "CREATE DATABASE $SEAHUB_DB CHARACTER SET utf8;"
-sudo -u mysql mysql -s -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-sudo -u mysql mysql -s -e "GRANT ALL PRIVILEGES ON $CCNET_DB.* TO '$DB_USER'@localhost;"
-sudo -u mysql mysql -s -e "GRANT ALL PRIVILEGES ON $SEAFILE_DB.* TO '$DB_USER'@localhost;"
-sudo -u mysql mysql -s -e "GRANT ALL PRIVILEGES ON $SEAHUB_DB.* TO '$DB_USER'@localhost;"
-{
-    echo "Application Credentials"
-    echo "CCNET_DB: $CCNET_DB"
-    echo "SEAFILE_DB: $SEAFILE_DB"
-    echo "SEAHUB_DB: $SEAHUB_DB"
-    echo "DB_USER: $DB_USER"
-    echo "DB_PASS: $DB_PASS"
-    echo "ADMIN_EMAIL: $ADMIN_EMAIL"
-    echo "ADMIN_PASS: $ADMIN_PASS"
-} >>~/seafile.creds
-msg_ok "MariaDB setup for Seafile"
-
-msg_info "Installing Seafile Python Dependencies"
-$STD apt-get install -y \
-    python3 \
-    python3-dev \
-    python3-setuptools \
-    python3-pip \
-    libmariadb-dev \
-    ldap-utils \
-    libldap2-dev \
-    libsasl2-dev \
-    pkg-config
-$STD pip3 install \
-    django \
-    future \
-    mysqlclient \
-    pymysql \
-    pillow \
-    pylibmc \
-    captcha \
-    markupsafe \
-    jinja2 \
-    sqlalchemy \
-    psd-tools \
-    django-pylibmc \
-    django_simple_captcha \
-    djangosaml2 \
-    pysaml2 \
-    pycryptodome \
-    cffi \
-    lxml \
-    python-ldap
-msg_ok "Installed Seafile Python Dependecies"
-
-msg_info "Installing Seafile"
-IP=$(ip a s dev eth0 | awk '/inet / {print $2}' | cut -d/ -f1)
-mkdir -p /opt/seafile
-useradd seafile
-mkdir -p /home/seafile
-chown seafile: /home/seafile
-chown seafile: /opt/seafile
-$STD su - seafile -c "curl -fsSL https://s3.eu-central-1.amazonaws.com/download.seadrive.org/seafile-server_11.0.13_x86-64.tar.gz -o seafile-server_11.0.13_x86-64.tar.gz"
-$STD su - seafile -c "tar -xzf seafile-server_11.0.13_x86-64.tar.gz -C /opt/seafile/"
-$STD su - seafile -c "expect <<EOF
-spawn bash /opt/seafile/seafile-server-11.0.13/setup-seafile-mysql.sh
-expect {
-    \"Press ENTER to continue\" {
-        send \"\r\"
-    }
-}
-expect {
-    \"What is the name of the server\" {
-        send \"Seafile\r\"
-    }
-}
-expect {
-    \"What is the ip or domain of the server\" {
-        send \"$IP\r\"
-    }
-}
-expect {
-    \"Which port do you want to use for the seafile fileserver\" {
-        send \"8082\r\"
-    }
-}
-expect {
-    \"1 or 2\" {
-        send \"2\r\"
-    }
-}
-expect {
-    \"What is the host of mysql server\" {
-        send \"localhost\r\"
-    }
-}
-expect {
-    \"What is the port of mysql server\" {
-        send \"3306\r\"
-    }
-}
-expect {
-    \"Which mysql user to use for seafile\" {
-        send \"seafile\r\"
-    }
-}
-expect {
-    \"What is the password for mysql user\" {
-        send \"$DB_PASS\r\"
-    }
-}
-expect {
-    \"Enter the existing database name for ccnet\" {
-        send \"$CCNET_DB\r\"
-    }
-}
-expect {
-    \"Enter the existing database name for seafile\" {
-        send \"$SEAFILE_DB\r\"
-    }
-}
-expect {
-    \"Enter the existing database name for seahub\" {
-        send \"$SEAHUB_DB\r\"
-    }
-}
-expect {
-    \"Press ENTER to continue, or Ctrl-C to abort\" {
-        send \"\r\"
-    }
-}
-expect eof
-EOF"
-msg_ok "Installed Seafile"
-
-msg_info "Setting up Memcached"
-$STD apt-get install -y \
-    memcached \
-    libmemcached-dev
-$STD pip3 install \
-    pylibmc \
-    django-pylibmc
-systemctl enable --now -q memcached
-cat <<EOF >>/opt/seafile/conf/seahub_settings.py
-CACHES = {
-    'default': {
-        'BACKEND': 'django_pylibmc.memcached.PyLibMCCache',
-        'LOCATION': '127.0.0.1:11211',
-    },
-}
-EOF
-msg_ok "Memcached Started"
-
-msg_info "Adjusting Conf files"
-sed -i "0,/127.0.0.1/s/127.0.0.1/0.0.0.0/" /opt/seafile/conf/gunicorn.conf.py
-sed -i "0,/SERVICE_URL = \"http:\/\/$IP\"/s/SERVICE_URL = \"http:\/\/$IP\"/SERVICE_URL = \"http:\/\/$IP:8000\"/" /opt/seafile/conf/seahub_settings.py
-echo -e "\nFILE_SERVER_ROOT = \"http://$IP:8082\"" >>/opt/seafile/conf/seahub_settings.py
-echo -e "CSRF_TRUSTED_ORIGINS = [\"http://$IP/\"]" >>/opt/seafile/conf/seahub_settings.py
-echo -e "ALLOWED_HOSTS = [\"$IP\"]" >>/opt/seafile/conf/seahub_settings.py
-echo -e "CSRF_TRUSTED_ORIGINS = ['http://$IP/']" >>/opt/seafile/conf/seahub_settings.py
-msg_ok "Conf files adjusted"
-
-msg_info "Setting up Seafile"
-$STD su - seafile -c "bash /opt/seafile/seafile-server-latest/seafile.sh start"
-$STD su - seafile -c "expect <<EOF
-spawn bash /opt/seafile/seafile-server-latest/seahub.sh start
-expect {
-    \"email\" {
-        send \"$ADMIN_EMAIL\r\"
-        }
-    }
-expect {
-    \"password\" {
-        send \"$ADMIN_PASS\r\"
-        }
-    }
-expect {
-    \"password again\" {
-        send \"$ADMIN_PASS\r\"
-        }
-    }
-expect eof
-EOF"
-$STD su - seafile -c "bash /opt/seafile/seafile-server-latest/seahub.sh stop" || true
-$STD su - seafile -c "bash /opt/seafile/seafile-server-latest/seafile.sh stop" || true
-msg_ok "Seafile setup"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/seafile.service
-[Unit]
-Description=Seafile File-hosting
-After=network.target mysql.service memcached.service
-Wants=mysql.service memcached.service
-
-[Service]
-Type=oneshot
-User=seafile
-Group=seafile
-WorkingDirectory=/opt/seafile
-RemainAfterExit=yes
-
-ExecStart=/opt/seafile/seafile-server-latest/seafile.sh start 
-ExecStart=/opt/seafile/seafile-server-latest/seahub.sh start
-ExecStop=/opt/seafile/seafile-server-latest/seahub.sh stop 
-ExecStop=/opt/seafile/seafile-server-latest/seafile.sh stop
-
-Restart=on-failure
-RestartSec=5s
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable --now -q seafile.service
-msg_ok "Created Services"
-
-msg_info "Creating External Storage script"
-cat <<'EOF' >~/external-storage.sh
-#!/bin/bash
-STORAGE_DIR="/path/to/your/external/storage"
-
-# Move the seafile-data folder to external storage
-mv /opt/seafile/seafile-data $STORAGE_DIR/seafile-data
-
-# Create a symlink for access
-ln -s $STORAGE_DIR/seafile-data /opt/seafile/seafile-data
-EOF
-chmod +x ~/external-storage.sh
-msg_ok "Bash Script for External Storage created"
-
-msg_info "Creating Domain access script"
-cat <<'EOF' >~/domain.sh
-#!/bin/bash
-DOMAIN=$1
-IP=$(ip a s dev eth0 | awk '/inet / {print $2}' | cut -d/ -f1)
-DOMAIN_NOSCHEME=$(echo $DOMAIN | sed 's|^https://||')
-
-#Change the CORS to provided domain
-sed -i "s|SERVICE_URL = \"http://$IP:8000\"|SERVICE_URL = \"$DOMAIN\"|g" /opt/seafile/conf/seahub_settings.py
-sed -i "s|CSRF_TRUSTED_ORIGINS = \[\"http://$IP/\"\]|CSRF_TRUSTED_ORIGINS = \[\"$DOMAIN/\"\]|g" /opt/seafile/conf/seahub_settings.py
-sed -i "s|FILE_SERVER_ROOT = \"http://$IP:8082\"|FILE_SERVER_ROOT = \"$DOMAIN/seafhttp\"|g" /opt/seafile/conf/seahub_settings.py
-sed -i "s|ALLOWED_HOSTS = \[\"$IP\"\]|ALLOWED_HOSTS = \[\"\.$DOMAIN_NOSCHEME\"\]|g" /opt/seafile/conf/seahub_settings.py
-
-systemctl restart seafile
-echo "Seafile server restarted! Access it at $DOMAIN."
-EOF
-chmod +x ~/domain.sh
-msg_ok "Bash Script for Domain access created"
-
-motd_ssh
-customize
-
-msg_info "Cleaning up"
-rm -rf /home/seafile/seafile*.tar.gz
-$STD apt-get -y autoremove
-$STD apt-get -y autoclean
-msg_ok "Cleaned"

install/searxng-install.sh

@@ -40,7 +40,7 @@ sudo -u searxng python3 -m venv /usr/local/searxng/searx-pyenv
 source /usr/local/searxng/searx-pyenv/bin/activate
 $STD pip install --upgrade pip setuptools wheel
 $STD pip install pyyaml
-$STD pip install -e /usr/local/searxng/searxng-src
+$STD pip install --use-pep517 --no-build-isolation -e /usr/local/searxng/searxng-src
 SECRET_KEY=$(openssl rand -hex 32)
 cat <<EOF >/etc/searxng/settings.yml
 # SearXNG settings

install/streamlink-webui-install.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: CrazyWolf13
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/CrazyWolf13/streamlink-webui
+
+# Import Functions und Setup
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+NODE_VERSION="22"
+NODE_MODULE="npm@latest,yarn@latest"
+install_node_and_modules
+setup_uv
+fetch_and_deploy_gh_release "CrazyWolf13/streamlink-webui"
+
+msg_info "Setup ${APPLICATION}"
+mkdir -p "/opt/${APPLICATION}-download"
+$STD uv venv /opt/"${APPLICATION}"/backend/src/.venv
+source /opt/"${APPLICATION}"/backend/src/.venv/bin/activate
+$STD uv pip install -r /opt/streamlink-webui/backend/src/requirements.txt --python=/opt/"${APPLICATION}"/backend/src/.venv
+cd /opt/"${APPLICATION}"/frontend/src
+$STD yarn install
+$STD yarn build
+chmod +x /opt/"${APPLICATION}"/start.sh
+msg_ok "Setup ${APPLICATION}"
+
+msg_info "Creating Service"
+cat <<'EOF' >/opt/"${APPLICATION}".env
+CLIENT_ID='your_client_id'
+CLIENT_SECRET='your_client_secret'
+DOWNLOAD_PATH='/opt/streamlink-webui-download'
+# BASE_URL='https://sub.domain.com' \
+# REVERSE_PROXY=True \
+EOF
+
+cat <<EOF >/etc/systemd/system/"${APPLICATION}".service
+[Unit]
+Description=${APPLICATION} Service
+After=network.target
+
+[Service]
+EnvironmentFile=/opt/${APPLICATION}.env
+WorkingDirectory=/opt/${APPLICATION}/backend/src
+ExecStart=/bin/bash -c 'source /opt/${APPLICATION}/backend/src/.venv/bin/activate && exec /opt/${APPLICATION}/start.sh'
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now "${APPLICATION}"
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/suwayomiserver-install.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 
 # Copyright (c) 2021-2025 community-scripts ORG
-# Author: tremor021
+# Author: Slaviša Arežina (tremor021)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/Suwayomi/Suwayomi-Server
 
@@ -14,18 +14,19 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  openjdk-17-jre \
-  libc++-dev
+$STD apt-get install -y libc++-dev
 msg_ok "Installed Dependencies"
 
+JAVA_VERSION=21 install_java
+
 msg_info "Settting up Suwayomi-Server"
-URL=$(curl -fsSL https://api.github.com/repos/Suwayomi/Suwayomi-Server/releases/latest | grep "browser_download_url" | awk '{print substr($2, 2, length($2)-2) }' | tail -n+2 | head -n 1)
+temp_file=$(mktemp)
 RELEASE=$(curl -fsSL https://api.github.com/repos/Suwayomi/Suwayomi-Server/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "$URL" -o $(basename "$URL")
-$STD dpkg -i *.deb
-echo ${RELEASE} >/opt/suwayomi-server_version.txt
+curl -fsSL "https://github.com/Suwayomi/Suwayomi-Server/releases/download/${RELEASE}/Suwayomi-Server-${RELEASE}-debian-all.deb" -o "$temp_file"
+$STD dpkg -i "$temp_file"
+echo "${RELEASE}" >/opt/suwayomi-server_version.txt
 msg_ok "Done setting up Suwayomi-Server"
+
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/suwayomi-server.service
 [Unit]
@@ -41,10 +42,12 @@ WantedBy=multi-user.target
 EOF
 systemctl enable -q --now suwayomi-server
 msg_ok "Created Service"
+
 motd_ssh
 customize
+
 msg_info "Cleaning up"
-rm -f *.deb
+rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"

install/umlautadaptarr-install.sh

@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: elvito
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/PCJones/UmlautAdaptarr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD curl -fsSL https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb -o packages-microsoft-prod.deb
+$STD dpkg -i packages-microsoft-prod.deb
+$STD apt-get update
+$STD apt-get install -y \
+    dotnet-sdk-8.0 \
+    aspnetcore-runtime-8.0
+msg_ok "Installed Dependencies"
+
+msg_info "Installing Umlautadaptarr"
+temp_file=$(mktemp)
+RELEASE=$(curl -s https://api.github.com/repos/PCJones/Umlautadaptarr/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3)}')
+curl -fsSL "https://github.com/PCJones/Umlautadaptarr/releases/download/${RELEASE}/linux-x64.zip" -o $temp_file
+unzip -qj $temp_file '*/**' -d /opt/UmlautAdaptarr
+echo "${RELEASE}" >"/opt/UmlautAdaptarr_version.txt"
+msg_ok "Installation completed"
+
+msg_info "Creating appsettings.json"
+cat <<EOF >/opt/UmlautAdaptarr/appsettings.json
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    },
+    "Console": {
+      "TimestampFormat": "yyyy-MM-dd HH:mm:ss::"
+    }
+  },
+  "AllowedHosts": "*",
+  "Kestrel": {
+    "Endpoints": {
+      "Http": {
+        "Url": "http://[::]:5005"
+      }
+    }
+  },
+  "Settings": {
+    "UserAgent": "UmlautAdaptarr/1.0",
+    "UmlautAdaptarrApiHost": "https://umlautadaptarr.pcjones.de/api/v1",
+    "IndexerRequestsCacheDurationInMinutes": 12
+  },
+  "Sonarr": [
+    {
+      "Enabled": false,
+      "Name": "Sonarr",
+      "Host": "http://192.168.1.100:8989",
+      "ApiKey": "dein_sonarr_api_key"
+    }
+  ],
+  "Radarr": [
+    {
+      "Enabled": false,
+      "Name": "Radarr",
+      "Host": "http://192.168.1.101:7878",
+      "ApiKey": "dein_radarr_api_key"
+    }
+  ],
+  "Lidarr": [
+  {
+    "Enabled": false,
+    "Host": "http://192.168.1.102:8686",
+    "ApiKey": "dein_lidarr_api_key"
+  },
+ ],
+  "Readarr": [
+  {
+    "Enabled": false,
+    "Host": "http://192.168.1.103:8787",
+    "ApiKey": "dein_readarr_api_key"
+  },
+ ],
+  "IpLeakTest": {
+    "Enabled": false
+  }
+}
+EOF
+msg_ok "appsettings.json created"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/umlautadaptarr.service
+[Unit]
+Description=UmlautAdaptarr Service
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/UmlautAdaptarr
+ExecStart=/usr/bin/dotnet /opt/UmlautAdaptarr/UmlautAdaptarr.dll --urls=http://0.0.0.0:5005
+Restart=always
+User=root
+Group=root
+Environment=ASPNETCORE_ENVIRONMENT=Production
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl -q --now enable umlautadaptarr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+rm -f $temp_file
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"

install/vaultwarden-install.sh

@@ -15,28 +15,23 @@ update_os
 
 msg_info "Installing Dependencies"
 $STD apt-get update
-$STD apt-get -qqy install \
-  git \
+$STD apt-get install -y git \
   build-essential \
   pkgconf \
   libssl-dev \
   libmariadb-dev-compat \
   libpq-dev \
-  argon2
+  argon2 \
+  ssl-cert
 msg_ok "Installed Dependencies"
 
-WEBVAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/bw_web_builds/releases/latest |
-  grep "tag_name" |
-  awk '{print substr($2, 2, length($2)-3) }')
-
-VAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/vaultwarden/releases/latest |
-  grep "tag_name" |
-  awk '{print substr($2, 2, length($2)-3) }')
+WEBVAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/bw_web_builds/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+VAULT=$(curl -fsSL https://api.github.com/repos/dani-garcia/vaultwarden/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
 
 msg_info "Installing Rust"
 curl -fsSL https://sh.rustup.rs -o rustup-init.sh
 $STD bash rustup-init.sh -y --profile minimal
-echo 'export PATH="$HOME/.cargo/bin:$PATH"' >> ~/.bashrc
+echo 'export PATH="$HOME/.cargo/bin:$PATH"' >>~/.bashrc
 export PATH="$HOME/.cargo/bin:$PATH"
 rm rustup-init.sh
 msg_ok "Installed Rust"
@@ -54,19 +49,23 @@ mkdir -p /opt/vaultwarden/data
 cp target/release/vaultwarden /opt/vaultwarden/bin/
 
 msg_info "Downloading Web-Vault ${WEBVAULT}"
-$STD curl -fsSLO https://github.com/dani-garcia/bw_web_builds/releases/download/$WEBVAULT/bw_web_$WEBVAULT.tar.gz
-$STD tar -xzf bw_web_$WEBVAULT.tar.gz -C /opt/vaultwarden/
+$STD curl -fsSLO https://github.com/dani-garcia/bw_web_builds/releases/download/"$WEBVAULT"/bw_web_"$WEBVAULT".tar.gz
+$STD tar -xzf bw_web_"$WEBVAULT".tar.gz -C /opt/vaultwarden/
 msg_ok "Downloaded Web-Vault ${WEBVAULT}"
 
 cat <<EOF >/opt/vaultwarden/.env
 ADMIN_TOKEN=''
 ROCKET_ADDRESS=0.0.0.0
+ROCKET_TLS='{certs="/opt/vaultwarden/ssl-cert-snakeoil.pem",key="/opt/vaultwarden/ssl-cert-snakeoil.key"}'
 DATA_FOLDER=/opt/vaultwarden/data
 DATABASE_MAX_CONNS=10
 WEB_VAULT_FOLDER=/opt/vaultwarden/web-vault
 WEB_VAULT_ENABLED=true
 EOF
 
+mv /etc/ssl/certs/ssl-cert-snakeoil.pem /opt/vaultwarden/
+mv /etc/ssl/private/ssl-cert-snakeoil.key /opt/vaultwarden/
+
 msg_info "Creating Service"
 chown -R vaultwarden:vaultwarden /opt/vaultwarden/
 chown root:root /opt/vaultwarden/bin/vaultwarden

install/zammad-install.sh

@@ -30,7 +30,8 @@ $STD apt-get -y install elasticsearch
 echo "-Xms2g" >>/etc/elasticsearch/jvm.options
 echo "-Xmx2g" >>/etc/elasticsearch/jvm.options
 $STD /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment -b
-systemctl -q restart elasticsearch
+systemctl enable -q elasticsearch
+systemctl restart -q elasticsearch
 msg_ok "Setup Elasticsearch"
 
 msg_info "Installing Zammad"