Merge remote-tracking branch 'upstream/main'

2025-07-14 12:56:17 +10:00
parent dea8f387ce 17e671cae9
commit d064c31c80
126 changed files with 3716 additions and 2634 deletions
@@ -14,11 +14,12 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
-$STD apt-get install -y alsa-utils
-$STD apt-get install -y libxext-dev
-$STD apt-get install -y fontconfig
-$STD apt-get install -y libva-drm2
+$STD apt-get install -y \
+  apt-transport-https \
+  alsa-utils \
+  libxext-dev \
+  fontconfig \
+  libva-drm2
 msg_ok "Installed Dependencies"

 msg_info "Installing AgentDVR"
@@ -27,7 +28,6 @@ RELEASE=$(curl -fsSL "https://www.ispyconnect.com/api/Agent/DownloadLocation4?pl
 cd /opt/agentdvr/agent
 curl -fsSL "$RELEASE" -o $(basename "$RELEASE")
 $STD unzip Agent_LinuxARM64*.zip
-rm -rf Agent_Linux64*.zip
 chmod +x ./Agent
 msg_ok "Installed AgentDVR"

@@ -54,6 +54,7 @@ motd_ssh
 customize

 msg_info "Cleaning up"
+rm -rf Agent_LinuxARM64*.zip
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -67,5 +67,14 @@ if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
  msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
 fi

+read -r -p "${TAB3}Would you like to expose the Docker TCP socket? <y/N> " prompt
+if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
+  msg_info "Exposing Docker TCP socket"
+  $STD mkdir -p /etc/docker
+  $STD echo '{ "hosts": ["unix:///var/run/docker.sock", "tcp://0.0.0.0:2375"] }' > /etc/docker/daemon.json
+  $STD rc-service docker restart
+  msg_ok "Exposed Docker TCP socket at tcp://+:2375"
+fi
+
 motd_ssh
 customize
@@ -28,8 +28,7 @@ msg_ok "Enabled Docker Service"

 echo "${TAB3}Choose the database for Komodo installation:"
 echo "${TAB3}1) MongoDB (recommended)"
-echo "${TAB3}2) SQLite"
-echo "${TAB3}3) PostgreSQL"
+echo "${TAB3}2) FerretDB"
 read -rp "${TAB3}Enter your choice (default: 1): " DB_CHOICE
 DB_CHOICE=${DB_CHOICE:-1}

@@ -38,10 +37,7 @@ case $DB_CHOICE in
  DB_COMPOSE_FILE="mongo.compose.yaml"
  ;;
 2)
-  DB_COMPOSE_FILE="sqlite.compose.yaml"
-  ;;
-3)
-  DB_COMPOSE_FILE="postgres.compose.yaml"
+  DB_COMPOSE_FILE="ferretdb.compose.yaml"
  ;;
 *)
  echo "Invalid choice. Defaulting to MongoDB."
@@ -24,13 +24,13 @@ RELEASE=$(curl -s https://api.github.com/repos/steveiliop56/tinyauth/releases/la
 curl -fsSL "https://github.com/steveiliop56/tinyauth/releases/download/v${RELEASE}/tinyauth-amd64" -o /opt/tinyauth/tinyauth
 chmod +x /opt/tinyauth/tinyauth

-PASSWORD=$(openssl rand -base64 8 | tr -dc 'a-zA-Z0-9' | head -c 8)
-USER=$(htpasswd -Bbn "tinyauth" "${PASSWORD}")
+PASS=$(openssl rand -base64 8 | tr -dc 'a-zA-Z0-9' | head -c 8)
+USER=$(htpasswd -Bbn "tinyauth" "${PASS}")

-cat <<EOF > /opt/tinyauth/credentials.txt
+cat <<EOF >/opt/tinyauth/credentials.txt
 Tinyauth Credentials
 Username: tinyauth
-Password: ${PASSWORD}
+Password: ${PASS}
 EOF

 echo "${RELEASE}" >/opt/tinyauth_version.txt
@@ -13,13 +13,9 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Authelia"
-RELEASE=$(curl -fsSL https://api.github.com/repos/authelia/authelia/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/authelia/authelia/releases/download/${RELEASE}/authelia_${RELEASE}_arm64.deb" -o "authelia_${RELEASE}_arm64.deb"
-$STD dpkg -i "authelia_${RELEASE}_arm64.deb"
-msg_ok "Install Authelia completed"
+fetch_and_deploy_gh_release "authelia" "authelia/authelia" "binary"

-read -p "${TAB3}Enter your domain (ex. example.com): " DOMAIN
+read -rp "${TAB3}Enter your domain (ex. example.com): " DOMAIN

 msg_info "Setting Authelia up"
 touch /etc/authelia/emails.txt
@@ -72,7 +68,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f "authelia_${RELEASE}_arm64.deb"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -24,13 +24,10 @@ $STD apt-get install -y \
 msg_ok "Installed Dependencies"

 setup_uv
+fetch_and_deploy_gh_release "babybuddy" "babybuddy/babybuddy"

 msg_info "Installing Babybuddy"
-RELEASE=$(curl -fsSL https://api.github.com/repos/babybuddy/babybuddy/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-temp_file=$(mktemp)
-mkdir -p /opt/{babybuddy,data}
-curl -fsSL "https://github.com/babybuddy/babybuddy/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/babybuddy
+mkdir -p /opt/data
 cd /opt/babybuddy
 $STD uv venv .venv
 $STD source .venv/bin/activate
@@ -102,7 +99,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -13,14 +13,10 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  apache2 \
-  libapache2-mod-php \
-  php-{pgsql,dom}
-msg_ok "Installed Dependencies"
-
 PG_VERSION="16" setup_postgresql
+PHP_APACHE="YES" PHP_MODULE="pgsql" PHP_VERSION="8.2" setup_php
+setup_composer
+fetch_and_deploy_gh_release "baikal" "sabre-io/Baikal"

 msg_info "Setting up PostgreSQL Database"
 DB_NAME=baikal
@@ -36,11 +32,9 @@ $STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMP
 } >>~/baikal.creds
 msg_ok "Set up PostgreSQL Database"

-msg_info "Installing Baikal"
-RELEASE=$(curl -fsSL https://api.github.com/repos/sabre-io/Baikal/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-cd /opt
-curl -fsSL "https://github.com/sabre-io/baikal/releases/download/${RELEASE}/baikal-${RELEASE}.zip" -o "baikal-${RELEASE}.zip"
-$STD unzip "baikal-${RELEASE}.zip"
+msg_info "Configuring Baikal"
+cd /opt/baikal
+$STD composer install
 cat <<EOF >/opt/baikal/config/baikal.yaml
 database:
    backend: pgsql
@@ -51,7 +45,6 @@ database:
 EOF
 chown -R www-data:www-data /opt/baikal/
 chmod -R 755 /opt/baikal/
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Baikal"

 msg_info "Creating Service"
@@ -90,7 +83,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf "/opt/baikal-${RELEASE}.zip"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -14,22 +14,15 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  apache2 \
-  redis \
-  php-{curl,date,json,mbstring,redis,sqlite3,sockets} \
-  libapache2-mod-php
+$STD apt-get install -y redis
 msg_ok "Installed Dependencies"

-msg_info "Installing barcodebuddy"
-RELEASE=$(curl -fsSL https://api.github.com/repos/Forceu/barcodebuddy/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-cd /opt
-curl -fsSL "https://github.com/Forceu/barcodebuddy/archive/refs/tags/v${RELEASE}.zip" -o "v${RELEASE}.zip"
-$STD unzip "v${RELEASE}.zip"
-mv "/opt/barcodebuddy-${RELEASE}" /opt/barcodebuddy
+PHP_VERSION="8.2" PHP_APACHE="YES" PHP_MODULE="redis, sqlite3" setup_php
+fetch_and_deploy_gh_release "barcodebuddy" "Forceu/barcodebuddy"
+
+msg_info "Configuring barcodebuddy"
 chown -R www-data:www-data /opt/barcodebuddy/data
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
-msg_ok "Installed barcodebuddy"
+msg_ok "Configured barcodebuddy"

 msg_info "Creating Services"
 cat <<EOF >/etc/systemd/system/barcodebuddy.service
@@ -73,7 +66,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf "/opt/v${RELEASE}.zip"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -22,17 +22,10 @@ msg_ok "Installed Dependencies"

 PG_VERSION="16" setup_postgresql
 setup_go
+fetch_and_deploy_gh_release "bitmagnet" "bitmagnet-io/bitmagnet"
 RELEASE=$(curl -fsSL https://api.github.com/repos/bitmagnet-io/bitmagnet/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')

-msg_info "Installing bitmagnet v${RELEASE}"
-mkdir -p /opt/bitmagnet
-temp_file=$(mktemp)
-curl -fsSL "https://github.com/bitmagnet-io/bitmagnet/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/bitmagnet
-cd /opt/bitmagnet
-VREL=v$RELEASE
-$STD go build -ldflags "-s -w -X github.com/bitmagnet-io/bitmagnet/internal/version.GitTag=$VREL"
-chmod +x bitmagnet
+msg_info "Setting up database"
 POSTGRES_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
 $STD sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$POSTGRES_PASSWORD';"
 $STD sudo -u postgres psql -c "CREATE DATABASE bitmagnet;"
@@ -41,8 +34,14 @@ $STD sudo -u postgres psql -c "CREATE DATABASE bitmagnet;"
  echo ""
  echo "postgres user password: $POSTGRES_PASSWORD"
 } >>~/postgres.creds
-echo "${RELEASE}" >/opt/bitmagnet_version.txt
-msg_ok "Installed bitmagnet v${RELEASE}"
+msg_ok "Database set up"
+
+msg_info "Configuring bitmagnet v${RELEASE}"
+cd /opt/bitmagnet
+VREL=v$RELEASE
+$STD go build -ldflags "-s -w -X github.com/bitmagnet-io/bitmagnet/internal/version.GitTag=$VREL"
+chmod +x bitmagnet
+msg_ok "Configured bitmagnet v${RELEASE}"

 read -r -p "${TAB3}Enter your TMDB API key if you have one: " tmdbapikey

@@ -72,7 +71,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -16,13 +16,12 @@ update_os
 msg_info "Installing Dependencies (Patience)"
 $STD apt-get install -y \
  apache2 \
-  unzip \
-  php8.2-{mbstring,gd,fpm,curl,intl,ldap,tidy,bz2,mysql,zip,xml} \
-  composer \
-  libapache2-mod-php \
  make
 msg_ok "Installed Dependencies"

+PHP_MODULE="ldap,tidy,bz2,mysqli" PHP_FPM="YES" PHP_APACHE="YES" PHP_VERSION="8.3" setup_php
+
+setup_composer
 setup_mariadb

 msg_info "Setting up Database"
@@ -40,13 +39,10 @@ $STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUS
 } >>~/bookstack.creds
 msg_ok "Set up database"

-msg_info "Setup Bookstack (Patience)"
+fetch_and_deploy_gh_release "bookstack" "BookStackApp/BookStack"
 LOCAL_IP="$(hostname -I | awk '{print $1}')"
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/BookStackApp/BookStack/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/BookStackApp/BookStack/archive/refs/tags/v${RELEASE}.zip" -o "v${RELEASE}.zip"
-$STD unzip v${RELEASE}.zip
-mv BookStack-${RELEASE} /opt/bookstack
+
+msg_info "Configuring Bookstack (Patience)"
 cd /opt/bookstack
 cp .env.example .env
 sudo sed -i "s|APP_URL=.*|APP_URL=http://$LOCAL_IP|g" /opt/bookstack/.env
@@ -61,9 +57,8 @@ chmod -R 755 /opt/bookstack /opt/bookstack/bootstrap/cache /opt/bookstack/public
 chmod -R 775 /opt/bookstack/storage /opt/bookstack/bootstrap/cache /opt/bookstack/public/uploads
 chmod -R 640 /opt/bookstack/.env
 $STD a2enmod rewrite
-$STD a2enmod php8.2
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Bookstack"
+$STD a2enmod php8.3
+msg_ok "Configured Bookstack"

 msg_info "Creating Service"
 cat <<EOF >/etc/apache2/sites-available/bookstack.conf
@@ -112,7 +107,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf /opt/v${RELEASE}.zip
 $STD apt-get autoremove
 $STD apt-get autoclean
 msg_ok "Cleaned"
@@ -18,19 +18,12 @@ $STD apt-get install -y apt-transport-https
 $STD apt-get install -y lsb-release
 msg_ok "Installed Dependencies"

-msg_info "Installing Nginx"
-curl -fsSL "https://nginx.org/keys/nginx_signing.key" | gpg --dearmor >/usr/share/keyrings/nginx-archive-keyring.gpg
-echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian $(lsb_release -cs) nginx" >/etc/apt/sources.list.d/nginx.list
-$STD apt-get update
-$STD apt-get install -y nginx=1.26.3*
-msg_ok "Installed Nginx"
-
 RELEASE=$(curl -fsSL https://api.github.com/repos/bunkerity/bunkerweb/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 msg_info "Installing BunkerWeb v${RELEASE} (Patience)"
-curl -fsSL "https://repo.bunkerweb.io/bunkerity/bunkerweb/gpgkey" | gpg --dearmor >/etc/apt/keyrings/bunkerity_bunkerweb-archive-keyring.gpg
-echo "deb [signed-by=/etc/apt/keyrings/bunkerity_bunkerweb-archive-keyring.gpg] https://repo.bunkerweb.io/bunkerity/bunkerweb/debian/ bookworm main" >/etc/apt/sources.list.d/bunkerity_bunkerweb.list
-$STD apt-get update
-$STD apt-get install -y bunkerweb=${RELEASE}
+curl -fsSL -o install-bunkerweb.sh https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh
+chmod +x install-bunkerweb.sh
+$STD ./install-bunkerweb.sh --yes
+$STD apt-mark unhold bunkerweb nginx
 cat <<EOF >/etc/apt/preferences.d/bunkerweb
 Package: bunkerweb
 Pin: version ${RELEASE}
@@ -14,22 +14,17 @@ network_check
 update_os

 NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "bytestash" "jordan-dalby/ByteStash"

 msg_info "Installing ByteStash"
 JWT_SECRET=$(openssl rand -base64 32 | tr -d '/+=')
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/jordan-dalby/ByteStash/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/jordan-dalby/ByteStash/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf $temp_file
-mv ByteStash-${RELEASE} /opt/bytestash
 cd /opt/bytestash/server
 $STD npm install
 cd /opt/bytestash/client
 $STD npm install
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
 msg_ok "Installed ByteStash"

-read -p "${TAB3}Do you want to allow registration of multiple accounts? [y/n]: " allowreg
+read -rp "${TAB3}Do you want to allow registration of multiple accounts? [y/n]: " allowreg

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/bytestash-backend.service
@@ -73,7 +68,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -116,7 +116,7 @@ Wants=browserless.service
 Type=simple
 WorkingDirectory=/opt/changedetection
 Environment=WEBDRIVER_URL=http://127.0.0.1:4444/wd/hub
-Environment=PLAYWRIGHT_DRIVER_URL=ws://localhost:3000/chrome?launch={"defaultViewport":{"height":720,"width":1280},"headless":false,"stealth":true}&blockAds=true
+Environment=PLAYWRIGHT_DRIVER_URL=ws://localhost:3000/chrome?launch=eyJkZWZhdWx0Vmlld3BvcnQiOnsiaGVpZ2h0Ijo3MjAsIndpZHRoIjoxMjgwfSwiaGVhZGxlc3MiOmZhbHNlLCJzdGVhbHRoIjp0cnVlfQ==&blockAds=true
 ExecStart=changedetection.io -d /opt/changedetection -p 5000
 [Install]
 WantedBy=multi-user.target
@@ -15,16 +15,15 @@ update_os

 setup_go

-msg_info "Configure Application"
 var_cf_api_token="default"
-read -rp "Enter the Cloudflare API token: " var_cf_api_token
+read -rp "${TAB3}Enter the Cloudflare API token: " var_cf_api_token

 var_cf_domains="default"
-read -rp "Enter the domains separated with a comma (*.example.org,www.example.org) " var_cf_domains
+read -rp "${TAB3}Enter the domains separated with a comma (*.example.org,www.example.org) " var_cf_domains

 var_cf_proxied="false"
 while true; do
-  read -rp "Proxied? (y/n): " answer
+  read -rp "${TAB3}Proxied? (y/n): " answer
  case "$answer" in
  [Yy]*)
    var_cf_proxied="true"
@@ -39,7 +38,7 @@ while true; do
 done
 var_cf_ip6_provider="none"
 while true; do
-  read -rp "Enable IPv6 support? (y/n): " answer
+  read -rp "${TAB3}Enable IPv6 support? (y/n): " answer
  case "$answer" in
  [Yy]*)
    var_cf_ip6_provider="auto"
@@ -17,22 +17,8 @@ msg_info "Installing Dependencies"
 $STD apt-get install -y rsync
 msg_ok "Installed Dependencies"

-msg_info "Installing Azul Zulu"
-curl -fsSL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xB1998361219BD9C9" -o "/etc/apt/trusted.gpg.d/zulu-repo.asc"
-curl -fsSL "https://cdn.azul.com/zulu/bin/zulu-repo_1.0.0-3_all.deb" -o "zulu-repo_1.0.0-3_all.deb"
-$STD dpkg -i zulu-repo_1.0.0-3_all.deb
-$STD apt-get update
-$STD apt-get -y install zulu17-jdk
-msg_ok "Installed Azul Zulu"
-
-RELEASE=$(curl -fsSL https://api.github.com/repos/Athou/commafeed/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
-msg_info "Installing CommaFeed ${RELEASE}"
-mkdir /opt/commafeed
-curl -fsSL "https://github.com/Athou/commafeed/releases/download/${RELEASE}/commafeed-${RELEASE}-h2-jvm.zip" -o "commafeed-${RELEASE}-h2-jvm.zip"
-$STD unzip commafeed-${RELEASE}-h2-jvm.zip
-mv commafeed-${RELEASE}-h2/* /opt/commafeed/
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
-msg_ok "Installed CommaFeed ${RELEASE}"
+JAVA_VERSION="17" setup_java
+fetch_and_deploy_gh_release "commafeed" "Athou/commafeed" "prebuild" "latest" "/opt/commafeed" "commafeed-*-h2-jvm.zip"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/commafeed.service
@@ -55,7 +41,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf commafeed-${RELEASE}-h2 commafeed-${RELEASE}-h2-jvm.zip zulu-repo_1.0.0-3_all.deb
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -14,20 +14,15 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  git
+$STD apt-get install -y git
 msg_ok "Installed Dependencies"

 NODE_VERSION="22" setup_nodejs

-read -p "${TAB3}Install OnlyOffice components instead of CKEditor? (Y/N): " onlyoffice
+read -rp "${TAB3}Install OnlyOffice components instead of CKEditor? (Y/N): " onlyoffice
+fetch_and_deploy_gh_release "cryptpad" "cryptpad/cryptpad"

 msg_info "Setup ${APPLICATION}"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/cryptpad/cryptpad/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/cryptpad/cryptpad/archive/refs/tags/${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf $temp_file
-mv cryptpad-$RELEASE /opt/cryptpad
 cd /opt/cryptpad
 $STD npm ci
 $STD npm run install:components
@@ -39,7 +34,6 @@ sed -i "80s#//httpAddress: 'localhost'#httpAddress: '0.0.0.0'#g" /opt/cryptpad/c
 if [[ "$onlyoffice" =~ ^[Yy]$ ]]; then
  $STD bash -c "./install-onlyoffice.sh --accept-license"
 fi
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Setup ${APPLICATION}"

 msg_info "Creating Service"
@@ -69,7 +63,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -14,15 +14,12 @@ network_check
 update_os

 NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "dashy" "Lissy93/dashy"

-RELEASE=$(curl -fsSL https://api.github.com/repos/Lissy93/dashy/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
 msg_info "Installing Dashy ${RELEASE} (Patience)"
-mkdir -p /opt/dashy
-curl -fsSL "https://github.com/Lissy93/dashy/archive/refs/tags/${RELEASE}.tar.gz" | tar -xz -C /opt/dashy --strip-components=1
 cd /opt/dashy
 $STD npm install
 $STD npm run build
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Dashy ${RELEASE}"

 msg_info "Creating Service"
@@ -29,7 +29,17 @@ echo -e '{\n  "log-driver": "journald"\n}' >/etc/docker/daemon.json
 $STD sh <(curl -fsSL https://get.docker.com)
 msg_ok "Installed Docker $DOCKER_LATEST_VERSION"

-read -r -p "${TAB3}Would you like to add Portainer? <y/N> " prompt
+read -r -p "${TAB3}Install Docker Compose v2 plugin? <y/N> " prompt_compose
+if [[ ${prompt_compose,,} =~ ^(y|yes)$ ]]; then
+  msg_info "Installing Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
+  mkdir -p /usr/local/lib/docker/cli-plugins
+  curl -fsSL "https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_LATEST_VERSION}/docker-compose-$(uname -s)-$(uname -m)" \
+    -o /usr/local/lib/docker/cli-plugins/docker-compose
+  chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+  msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
+fi
+
+read -r -p "${TAB3}Would you like to add Portainer (UI)? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
  msg_info "Installing Portainer $PORTAINER_LATEST_VERSION"
  docker volume create portainer_data >/dev/null
@@ -43,9 +53,9 @@ if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
    portainer/portainer-ce:latest
  msg_ok "Installed Portainer $PORTAINER_LATEST_VERSION"
 else
-  read -r -p "${TAB3}Would you like to add the Portainer Agent? <y/N> " prompt
-  if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
-    msg_info "Installing Portainer agent $PORTAINER_AGENT_LATEST_VERSION"
+  read -r -p "${TAB3}Would you like to install the Portainer Agent (for remote management)? <y/N> " prompt_agent
+  if [[ ${prompt_agent,,} =~ ^(y|yes)$ ]]; then
+    msg_info "Installing Portainer Agent $PORTAINER_AGENT_LATEST_VERSION"
    $STD docker run -d \
      -p 9001:9001 \
      --name portainer_agent \
@@ -57,6 +67,43 @@ else
  fi
 fi

+read -r -p "${TAB3}Expose Docker TCP socket (insecure) ? [n = No, l = Local only (127.0.0.1), a = All interfaces (0.0.0.0)] <n/l/a>: " socket_choice
+case "${socket_choice,,}" in
+  l)
+    socket="tcp://127.0.0.1:2375"
+    ;;
+  a)
+    socket="tcp://0.0.0.0:2375"
+    ;;
+  *)
+    socket=""
+    ;;
+esac
+
+if [[ -n "$socket" ]]; then
+  msg_info "Enabling Docker TCP socket on $socket"
+  $STD apt-get install -y jq
+
+  tmpfile=$(mktemp)
+  jq --arg sock "$socket" '. + { "hosts": ["unix:///var/run/docker.sock", $sock] }' /etc/docker/daemon.json > "$tmpfile" && mv "$tmpfile" /etc/docker/daemon.json
+
+  mkdir -p /etc/systemd/system/docker.service.d
+  cat <<EOF > /etc/systemd/system/docker.service.d/override.conf
+[Service]
+ExecStart=
+ExecStart=/usr/bin/dockerd
+EOF
+
+  $STD systemctl daemon-reexec
+  $STD systemctl daemon-reload
+
+  if systemctl restart docker; then
+    msg_ok "Docker TCP socket available on $socket"
+  else
+    msg_error "Docker failed to restart. Check journalctl -xeu docker.service"
+    exit 1
+  fi
+fi

 motd_ssh
 customize
@@ -22,6 +22,7 @@ msg_ok "Installed Dependencies"

 NODE_VERSION="22" NODE_MODULE="pnpm@$(curl -s https://raw.githubusercontent.com/docmost/docmost/main/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
 PG_VERSION="16" setup_postgresql
+fetch_and_deploy_gh_release "docmost" "docmost/docmost"

 msg_info "Setting up PostgreSQL"
 DB_NAME="docmost_db"
@@ -40,12 +41,7 @@ $STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
 } >>~/docmost.creds
 msg_ok "Set up PostgreSQL"

-msg_info "Installing Docmost (Patience)"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/docmost/docmost/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/docmost/docmost/archive/refs/tags/v${RELEASE}.tar.gz" -o ""$temp_file""
-tar -xzf "$temp_file"
-mv docmost-${RELEASE} /opt/docmost
+msg_info "Configuring Docmost (Patience)"
 cd /opt/docmost
 mv .env.example .env
 mkdir data
@@ -56,8 +52,7 @@ sed -i -e "s|APP_SECRET=.*|APP_SECRET=$(openssl rand -base64 32 | tr -dc 'a-zA-Z
 export NODE_OPTIONS="--max-old-space-size=2048"
 $STD pnpm install
 $STD pnpm build
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Docmost"
+msg_ok "Configured Docmost"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/docmost.service
@@ -81,7 +76,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -24,17 +24,15 @@ if [[ "$CTTYPE" == "0" ]]; then
 fi
 msg_ok "Set Up Hardware Acceleration"

-LATEST=$(curl -fsSL https://api.github.com/repos/MediaBrowser/Emby.Releases/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
+fetch_and_deploy_gh_release "emby" "MediaBrowser/Emby.Releases" "binary"

-msg_info "Installing Emby"
-curl -fsSL "https://github.com/MediaBrowser/Emby.Releases/releases/download/${LATEST}/emby-server-deb_${LATEST}_arm64.deb" -o "emby-server-deb_${LATEST}_arm64.deb"
-$STD dpkg -i emby-server-deb_${LATEST}_arm64.deb
+msg_info "Configuring Emby"
 if [[ "$CTTYPE" == "0" ]]; then
  sed -i -e 's/^ssl-cert:x:104:$/render:x:104:root,emby/' -e 's/^render:x:108:root,emby$/ssl-cert:x:108:/' /etc/group
 else
  sed -i -e 's/^ssl-cert:x:104:$/render:x:104:emby/' -e 's/^render:x:108:emby$/ssl-cert:x:108:/' /etc/group
 fi
-msg_ok "Installed Emby"
+msg_ok "Configured Emby"

 motd_ssh
 customize
@@ -42,5 +40,4 @@ customize
 msg_info "Cleaning up"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
-rm emby-server-deb_${LATEST}_arm64.deb
 msg_ok "Cleaned"
@@ -13,16 +13,39 @@ setting_up_container
 network_check
 update_os

+msg_info "Installing dependencies"
+$STD apt-get install -y ca-certificates
+msg_ok "Installed dependencies"
+
+msg_info "Fetching latest EMQX Enterprise version"
+LATEST_VERSION=$(curl -fsSL https://www.emqx.com/en/downloads/enterprise | grep -oP '/en/downloads/enterprise/v\K[0-9]+\.[0-9]+\.[0-9]+' | sort -V | tail -n1)
+if [[ -z "$LATEST_VERSION" ]]; then
+  msg_error "Failed to determine latest EMQX version"
+  exit 1
+fi
+msg_ok "Latest version: v$LATEST_VERSION"
+
+DOWNLOAD_URL="https://www.emqx.com/en/downloads/enterprise/v$LATEST_VERSION/emqx-enterprise-${LATEST_VERSION}-debian12-amd64.deb"
+DEB_FILE="/tmp/emqx-enterprise-${LATEST_VERSION}-debian12-amd64.deb"
+
+msg_info "Downloading EMQX v$LATEST_VERSION"
+$STD curl -fsSL -o "$DEB_FILE" "$DOWNLOAD_URL"
+msg_ok "Downloaded EMQX"
+
 msg_info "Installing EMQX"
-$STD bash <(curl -fsSL https://packagecloud.io/install/repositories/emqx/emqx/script.deb.sh)
-$STD apt-get install -y emqx
-$STD systemctl enable --now emqx
+$STD apt-get install -y "$DEB_FILE"
+echo "$LATEST_VERSION" >~/.emqx
 msg_ok "Installed EMQX"

+msg_info "Starting EMQX service"
+$STD systemctl enable -q --now emqx
+msg_ok "Enabled EMQX service"
+
 motd_ssh
 customize

 msg_info "Cleaning up"
-apt-get autoremove >/dev/null
-apt-get autoclean >/dev/null
+rm -f "$DEB_FILE"
+$STD apt-get autoremove
+$STD apt-get autoclean
 msg_ok "Cleaned"
@@ -13,19 +13,7 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Dependencies"
-$STD apt-get install -y ca-certificates
-msg_ok "Installed Dependencies"
-
-msg_info "Installing FFmpeg (Patience)"
-cd /usr/local/bin
-curl -fsSL "https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-arm64-static.tar.xz" -o "ffmpeg-release-arm64-static.tar.xz"
-$STD tar -xvf ffmpeg-release-arm64-static.tar.xz
-rm -f ffmpeg-*.tar.xz
-cd ffmpeg-*
-mv ffmpeg ffprobe /usr/local/bin/
-rm -rf /usr/local/bin/ffmpeg-*
-msg_ok "Installed FFmpeg"
+FFMPEG_VERSION="latest" FFMPEG_TYPE="medium" setup_ffmpeg

 msg_info "Setting Up Hardware Acceleration"
 $STD apt-get -y install {va-driver-all,ocl-icd-libopencl1,intel-opencl-icd,vainfo,intel-gpu-tools}
@@ -38,15 +26,7 @@ if [[ "$CTTYPE" == "0" ]]; then
 fi
 msg_ok "Set Up Hardware Acceleration"

-msg_info "Installing ErsatzTV"
-temp_file=$(mktemp)
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/ErsatzTV/ErsatzTV/releases | grep -oP '"tag_name": "\K[^"]+' | head -n 1)
-curl -fsSL "https://github.com/ErsatzTV/ErsatzTV/releases/download/${RELEASE}/ErsatzTV-${RELEASE}-linux-arm64.tar.gz" -o "$temp_file"
-tar -xzf "$temp_file"
-mv /opt/ErsatzTV-${RELEASE}-linux-arm64 /opt/ErsatzTV
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed ErsatzTV"
+fetch_and_deploy_gh_release "ersatztv" "ErsatzTV/ErsatzTV" "prebuild" "latest" "/opt/ErsatzTV" "*linux-arm64.tar.gz"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/ersatzTV.service
@@ -57,8 +37,8 @@ After=multi-user.target
 [Service]
 Type=simple
 User=root
-WorkingDirectory=/opt/ErsatzTV 
-ExecStart=/opt/ErsatzTV/ErsatzTV  
+WorkingDirectory=/opt/ErsatzTV
+ExecStart=/opt/ErsatzTV/ErsatzTV
 Restart=always
 RestartSec=30

@@ -72,7 +52,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f ${temp_file}
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -29,6 +29,11 @@ $STD /opt/esphome/.venv/bin/python -m pip install --upgrade pip
 $STD /opt/esphome/.venv/bin/python -m pip install esphome tornado esptool
 msg_ok "Setup and Installed ESPHome"

+msg_info "Linking esphome to /usr/local/bin"
+rm -f /usr/local/bin/esphome
+ln -s /opt/esphome/.venv/bin/esphome /usr/local/bin/esphome
+msg_ok "Linked esphome binary"
+
 msg_info "Creating Service"
 mkdir -p /root/config
 cat <<EOF >/etc/systemd/system/esphomeDashboard.service
@@ -14,21 +14,15 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  xdg-utils
+$STD apt-get install -y xdg-utils
 msg_ok "Installed Dependencies"

 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
+fetch_and_deploy_gh_release "excalidraw" "excalidraw/excalidraw"

-msg_info "Setup Excalidraw"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/excalidraw/excalidraw/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/excalidraw/excalidraw/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar xzf $temp_file
-mv excalidraw-${RELEASE} /opt/excalidraw
+msg_info "Configuring Excalidraw"
 cd /opt/excalidraw
 $STD yarn
-echo "${RELEASE}" >/opt/excalidraw_version.txt
 msg_ok "Setup Excalidraw"

 msg_info "Creating Service"
@@ -53,7 +47,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -13,18 +13,10 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Dependencies"
-curl -fsSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg
-echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ bookworm main" >/etc/apt/sources.list.d/php.list
-$STD apt-get update
-$STD apt-get install -y \
-  apache2 \
-  libapache2-mod-php8.4 \
-  php8.4-{bcmath,cli,intl,curl,zip,gd,xml,mbstring,mysql} \
-  composer
-msg_ok "Installed Dependencies"
-
+PHP_VERSION="8.4" PHP_APACHE="YES" PHP_MODULE="mysql" setup_php
+setup_composer
 setup_mariadb
+LOCAL_IP=$(hostname -I | awk '{print $1}')

 msg_info "Setting up database"
 DB_NAME=firefly
@@ -41,21 +33,15 @@ mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRI
 } >>~/firefly.creds
 msg_ok "Set up database"

-msg_info "Installing Firefly III (Patience)"
-LOCAL_IP=$(hostname -I | awk '{print $1}')
-RELEASE=$(curl -fsSL https://api.github.com/repos/firefly-iii/firefly-iii/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
-cd /opt
-curl -fsSL "https://github.com/firefly-iii/firefly-iii/releases/download/v${RELEASE}/FireflyIII-v${RELEASE}.tar.gz" -o "FireflyIII-v${RELEASE}.tar.gz"
-mkdir -p /opt/firefly
-tar -xzf FireflyIII-v${RELEASE}.tar.gz -C /opt/firefly
+fetch_and_deploy_gh_release "firefly" "firefly-iii/firefly-iii" "prebuild" "latest" "/opt/firefly" "FireflyIII-*.zip"
+
+msg_info "Configuring Firefly III (Patience)"
 chown -R www-data:www-data /opt/firefly
 chmod -R 775 /opt/firefly/storage
 cd /opt/firefly
 cp .env.example .env
 sed -i "s/DB_HOST=.*/DB_HOST=localhost/" /opt/firefly/.env
 sed -i "s/DB_PASSWORD=.*/DB_PASSWORD=$DB_PASS/" /opt/firefly/.env
-echo "export COMPOSER_ALLOW_SUPERUSER=1" >>~/.bashrc
-source ~/.bashrc
 $STD composer install --no-dev --no-plugins --no-interaction
 $STD php artisan firefly:upgrade-database
 $STD php artisan firefly:correct-database
@@ -69,8 +55,7 @@ tar -xzf "DataImporter-v${IMPORTER_RELEASE}.tar.gz" -C /opt/firefly/dataimporter
 cp /opt/firefly/dataimporter/.env.example /opt/firefly/dataimporter/.env
 sed -i "s#FIREFLY_III_URL=#FIREFLY_III_URL=http://${LOCAL_IP}#g" /opt/firefly/dataimporter/.env
 chown -R www-data:www-data /opt/firefly
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Firefly III"
+msg_ok "Configured Firefly III"

 msg_info "Creating Service"
 cat <<EOF >/etc/apache2/sites-available/firefly.conf
@@ -112,7 +97,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf "/opt/FireflyIII-v${RELEASE}.tar.gz"
 rm -rf "/opt/DataImporter-v${IMPORTER_RELEASE}.tar.gz"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
@@ -14,17 +14,11 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  zip \
-  postgresql-common
+$STD apt-get install -y zip
 msg_ok "Installed Dependencies"

-msg_info "Installing Additional Dependencies"
-curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" >/etc/apt/sources.list.d/nodesource.list
-echo "YES" | /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh &>/dev/null
-$STD apt-get install -y postgresql-17 nodejs
-msg_ok "Installed Additional Dependencies"
+PG_VERSION="17" setup_postgresql
+NODE_VERSION="20" setup_nodejs

 msg_info "Setting up Postgresql Database"
 DB_NAME="fluiddb"
@@ -44,14 +38,9 @@ $STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
 } >>~/$APPLICATION.creds
 msg_ok "Set up Postgresql Database"

-msg_info "Setup ${APPLICATION}"
-tmp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/dotnetfactory/fluid-calendar/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/dotnetfactory/fluid-calendar/archive/refs/tags/v${RELEASE}.zip" -o "$tmp_file"
-$STD unzip $tmp_file
-mv ${APPLICATION}-${RELEASE}/ /opt/${APPLICATION}
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
+fetch_and_deploy_gh_release "fluid-calendar" "dotnetfactory/fluid-calendar"

+msg_info "Configuring ${APPLICATION}"
 cat <<EOF >/opt/fluid-calendar/.env
 DATABASE_URL="postgresql://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}"

@@ -72,7 +61,7 @@ $STD npm install --legacy-peer-deps
 $STD npm run prisma:generate
 $STD npx prisma migrate deploy
 $STD npm run build:os
-msg_ok "Setup ${APPLICATION}"
+msg_ok "Configuring ${APPLICATION}"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/fluid-calendar.service
@@ -95,7 +84,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f $tmp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -13,13 +13,7 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  apache2 \
-  php-{curl,dom,json,ctype,pgsql,gmp,mbstring,iconv,zip} \
-  libapache2-mod-php
-msg_ok "Installed Dependencies"
-
+PHP_VERSION="8.2" PHP_MODULE="curl,xml,mbstring,intl,zip,pgsql,gmp" PHP_APACHE="YES" setup_php
 PG_VERSION="16" setup_postgresql

 msg_info "Setting up PostgreSQL"
@@ -36,17 +30,14 @@ $STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMP
 } >>~/freshrss.creds
 msg_ok "Set up PostgreSQL"

-msg_info "Installing FreshRSS"
-RELEASE=$(curl -fsSL https://api.github.com/repos/FreshRSS/FreshRSS/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-cd /opt
-curl -fsSL "https://github.com/FreshRSS/FreshRSS/archive/refs/tags/${RELEASE}.zip" -o "${RELEASE}.zip"
-$STD unzip "${RELEASE}.zip"
-mv "/opt/FreshRSS-${RELEASE}" /opt/freshrss
+fetch_and_deploy_gh_release "freshrss" "FreshRSS/FreshRSS"
+
+msg_info "Configuring FreshRSS"
 cd /opt/freshrss
 chown -R www-data:www-data /opt/freshrss
 chmod -R g+rX /opt/freshrss
 chmod -R g+w /opt/freshrss/data/
-msg_ok "Installed FreshRSS"
+msg_ok "Configured FreshRSS"

 msg_info "Setting up cron job for feed refresh"
 cat <<EOF >/etc/cron.d/freshrss-actualize
@@ -83,7 +74,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf "/opt/${RELEASE}.zip"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -20,20 +20,15 @@ $STD apt-get install -y \
 msg_ok "Installed Dependencies"

 setup_go
+fetch_and_deploy_gh_release "gatus" "TwiN/gatus"

-RELEASE=$(curl -s https://api.github.com/repos/TwiN/gatus/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-msg_info "Setting up gatus v${RELEASE}"
-temp_file=$(mktemp)
-mkdir -p /opt/gatus
-curl -fsSL "https://github.com/TwiN/gatus/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf "$temp_file" --strip-components=1 -C /opt/gatus
+msg_info "Configuring gatus"
 cd /opt/gatus
 $STD go mod tidy
 CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o gatus .
 setcap CAP_NET_RAW+ep gatus
 mv config.yaml config
-echo "${RELEASE}" >/opt/gatus_version.txt
-msg_ok "Done setting up gatus"
+msg_ok "Configured gatus"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/gatus.service
@@ -58,10 +53,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f "$temp_file"
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
-
-motd_ssh
-customize
@@ -16,19 +16,19 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
  nginx \
-  ca-certificates
+  ca-certificates \
+  libjemalloc2
 msg_ok "Installed Dependencies"

-setup_mariadb
+setup_mysql

 msg_info "Configuring Database"
 DB_NAME=ghost
 DB_USER=ghostuser
 DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
-$STD mariadb -u root -e "CREATE DATABASE $DB_NAME;"
-$STD mariadb -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
-$STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
-
+$STD mysql -u root -e "CREATE DATABASE $DB_NAME;"
+$STD mysql -u root -e "CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';"
+$STD mysql -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUSH PRIVILEGES;"
 {
  echo "Ghost-Credentials"
  echo "Ghost Database User: $DB_USER"
@@ -37,7 +37,7 @@ $STD mariadb -u root -e "GRANT ALL ON $DB_NAME.* TO '$DB_USER'@'localhost'; FLUS
 } >>~/ghost.creds
 msg_ok "Configured MySQL"

-NODE_VERSION="20" setup_nodejs
+NODE_VERSION="22" setup_nodejs

 msg_info "Installing Ghost CLI"
 $STD npm install ghost-cli@latest -g
@@ -19,10 +19,9 @@ $STD apt-get install -y git
 $STD apt-get install -y sqlite3
 msg_ok "Installed Dependencies"

-msg_info "Installing Gitea"
-RELEASE=$(curl -fsSL https://github.com/go-gitea/gitea/releases/latest | grep "title>Release" | cut -d " " -f 4 | sed 's/^v//')
-curl -fsSL "https://github.com/go-gitea/gitea/releases/download/v$RELEASE/gitea-$RELEASE-linux-arm64" -o "gitea-$RELEASE-linux-arm64"
-mv gitea* /usr/local/bin/gitea
+fetch_and_deploy_gh_release "gitea" "go-gitea/gitea" "singlefile" "latest" "/usr/local/bin" "gitea-*-linux-arm64"
+
+msg_info "Configuring Gitea"
 chmod +x /usr/local/bin/gitea
 adduser --system --group --disabled-password --shell /bin/bash --home /etc/gitea gitea >/dev/null
 mkdir -p /var/lib/gitea/{custom,data,log}
@@ -31,7 +30,7 @@ chmod -R 750 /var/lib/gitea/
 chown root:gitea /etc/gitea
 chmod 770 /etc/gitea
 sudo -u gitea ln -s /var/lib/gitea/data/.ssh/ /etc/gitea/.ssh
-msg_ok "Installed Gitea"
+msg_ok "Configured Gitea"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/gitea.service
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: CrazyWolf13
 # License: MIT | https://github.com/asylumexp/Proxmox/raw/main/LICENSE
-# Source: https://github.com/arunavo4/gitea-mirror
+# Source: https://github.com/RayLabsHQ/gitea-mirror

 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -28,7 +28,7 @@ ln -sf /opt/bun/bin/bun /usr/local/bin/bun
 ln -sf /opt/bun/bin/bun /usr/local/bin/bunx
 msg_ok "Installed Bun"

-fetch_and_deploy_gh_release "gitea-mirror" "arunavo4/gitea-mirror"
+fetch_and_deploy_gh_release "gitea-mirror" "RayLabsHQ/gitea-mirror"

 msg_info "Installing gitea-mirror"
 cd /opt/gitea-mirror
@@ -13,12 +13,9 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Glance"
-RELEASE=$(curl -fsSL https://api.github.com/repos/glanceapp/glance/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-cd /opt
-curl -fsSL "https://github.com/glanceapp/glance/releases/download/v${RELEASE}/glance-linux-arm64.tar.gz" -o "glance-linux-arm64.tar.gz"
-mkdir -p /opt/glance
-tar -xzf glance-linux-arm64.tar.gz -C /opt/glance
+fetch_and_deploy_gh_release "glance" "glanceapp/glance" "prebuild" "latest" "/opt/glance" "glance-linux-arm64.tar.gz"
+
+msg_info "Configuring Glance"
 cat <<EOF >/opt/glance/glance.yml
 pages:
  - name: Startpage
@@ -39,9 +36,7 @@ pages:
                  - title: Helper Scripts
                    url: https://github.com/community-scripts/ProxmoxVE
 EOF
-
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Installed Glance"
+msg_ok "Configured Glance"

 msg_info "Creating Service"
 service_path="/etc/systemd/system/glance.service"
@@ -67,7 +62,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf /opt/glance-linux-arm64.tar.gz
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -22,18 +22,16 @@ curl -fsSL "http://ports.ubuntu.com/pool/main/o/openssl/libssl1.1_1.1.1f-1ubuntu
 $STD dpkg -i libssl1.1_1.1.1f-1ubuntu2_arm64.deb
 msg_ok "Installed Dependencies"

-NODE_VERSION="20" setup_nodejs
+NODE_VERSION="20" NODE_MODULE="gulp-cli,mocha" setup_nodejs
+fetch_and_deploy_gh_release "habitica" "HabitRPG/habitica" "tarball" "latest" "/opt/habitica"

 msg_info "Setup ${APPLICATION}"
-temp_file=$(mktemp)
-RELEASE=$(curl -fsSL https://api.github.com/repos/HabitRPG/habitica/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/HabitRPG/habitica/archive/refs/tags/v${RELEASE}.tar.gz" -o "$temp_file"
-tar zxf $temp_file
-mv habitica-${RELEASE}/ /opt/habitica
 cd /opt/habitica
 $STD npm i
+$STD npm run postinstall
+$STD npm run client:build
+$STD gulp build:prod
 cp config.json.example config.json
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Setup ${APPLICATION}"

 msg_info "Creating Service"
@@ -91,7 +89,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f $temp_file
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -66,6 +66,7 @@ $STD apt-get install --no-install-recommends -y \
  mesa-vulkan-drivers \
  ocl-icd-libopencl1 \
  tini \
+  libaom-dev \
  zlib1g
 $STD apt-get install -y \
  libgdk-pixbuf-2.0-dev librsvg2-dev libtool
@@ -136,7 +137,6 @@ if [[ -f ~/.openvino ]]; then
 fi
 msg_ok "Packages from Testing Repo Installed"

-# Fix default DB collation issue after libc update
 $STD sudo -u postgres psql -c "ALTER DATABASE postgres REFRESH COLLATION VERSION;"
 $STD sudo -u postgres psql -c "ALTER DATABASE $DB_NAME REFRESH COLLATION VERSION;"

@@ -201,7 +201,7 @@ $STD cmake --preset=release-noplugins \
  -DWITH_LIBSHARPYUV=ON \
  -DWITH_LIBDE265=ON \
  -DWITH_AOM_DECODER=OFF \
-  -DWITH_AOM_ENCODER=OFF \
+  -DWITH_AOM_ENCODER=ON \
  -DWITH_X265=OFF \
  -DWITH_EXAMPLES=OFF \
  ..
@@ -237,7 +237,8 @@ $STD make clean
 cd "$STAGING_DIR"

 SOURCE=$SOURCE_DIR/libvips
-: "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
+# : "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
+: "${LIBVIPS_REVISION:=8fa37a64547e392d3808eed8d72adab7e02b3d00}"
 $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
 cd "$SOURCE"
 $STD git reset --hard "$LIBVIPS_REVISION"
@@ -284,6 +285,10 @@ cd "$SRC_DIR"
 cp -a server/{node_modules,dist,bin,resources,package.json,package-lock.json,start*.sh} "$APP_DIR"/
 cp -a web/build "$APP_DIR"/www
 cp LICENSE "$APP_DIR"
+cd "$APP_DIR"
+export SHARP_FORCE_GLOBAL_LIBVIPS=true
+$STD npm install sharp
+rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-x64}
 msg_ok "Installed Immich Web Components"

 cd "$SRC_DIR"/machine-learning
@@ -307,8 +312,6 @@ ln -s "$UPLOAD_DIR" "$APP_DIR"/upload
 ln -s "$UPLOAD_DIR" "$ML_DIR"/upload

 msg_info "Installing Immich CLI"
-$STD npm install --build-from-source sharp
-rm -rf "$APP_DIR"/node_modules/@img/sharp-{libvips*,linuxmusl-aarch64}
 $STD npm i -g @immich/cli
 msg_ok "Installed Immich CLI"

@@ -39,8 +39,7 @@ msg_ok "Installed Docker"

 echo "${TAB3}Choose the database for Komodo installation:"
 echo "${TAB3}1) MongoDB (recommended)"
-echo "${TAB3}2) SQLite"
-echo "${TAB3}3) PostgreSQL"
+echo "${TAB3}2) FerretDB"
 read -rp "${TAB3}Enter your choice (default: 1): " DB_CHOICE
 DB_CHOICE=${DB_CHOICE:-1}

@@ -49,10 +48,7 @@ case $DB_CHOICE in
  DB_COMPOSE_FILE="mongo.compose.yaml"
  ;;
 2)
-  DB_COMPOSE_FILE="sqlite.compose.yaml"
-  ;;
-3)
-  DB_COMPOSE_FILE="postgres.compose.yaml"
+  DB_COMPOSE_FILE="ferretdb.compose.yaml"
  ;;
 *)
  echo "Invalid choice. Defaulting to MongoDB."
@@ -14,22 +14,17 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y make
-$STD apt-get install -y g++
-$STD apt-get install -y gcc
-$STD apt-get install -y ca-certificates
+$STD apt-get install -y \
+  ca-certificates \
+  build-essential
 msg_ok "Installed Dependencies"

 NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
+fetch_and_deploy_gh_release "mafl" "hywax/mafl"

-RELEASE=$(curl -fsSL https://api.github.com/repos/hywax/mafl/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
 msg_info "Installing Mafl v${RELEASE}"
-curl -fsSL "https://github.com/hywax/mafl/archive/refs/tags/v${RELEASE}.tar.gz" -o "v${RELEASE}.tar.gz"
-tar -xzf v${RELEASE}.tar.gz
 mkdir -p /opt/mafl/data
 curl -fsSL "https://raw.githubusercontent.com/hywax/mafl/main/.example/config.yml" -o "/opt/mafl/data/config.yml"
-mv mafl-${RELEASE}/* /opt/mafl
-rm -rf mafl-${RELEASE}
 cd /opt/mafl
 export NUXT_TELEMETRY_DISABLED=true
 $STD yarn install
@@ -15,7 +15,7 @@ update_os

 msg_info "Installing Mosquitto MQTT Broker"
 source /etc/os-release
-curl -fsSL http://repo.mosquitto.org/debian/mosquitto-repo.gpg.key >/usr/share/keyrings/mosquitto-repo.gpg.key
+curl -fsSL http://repo.mosquitto.org/debian/mosquitto-repo.gpg >/usr/share/keyrings/mosquitto-repo.gpg.key
 chmod go+r /usr/share/keyrings/mosquitto-repo.gpg.key
 echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/mosquitto-repo.gpg.key] http://repo.mosquitto.org/debian ${VERSION_CODENAME} main" >/etc/apt/sources.list.d/mosquitto.list
 $STD apt-get update
@@ -55,7 +55,7 @@ sed -i 's/NODE_ENV=production/NODE_ENV=development/g' /opt/outline/.env
 sed -i "s/generate_a_new_key/${SECRET_KEY}/g" /opt/outline/.env
 sed -i "s/user:pass@postgres/${DB_USER}:${DB_PASS}@localhost/g" /opt/outline/.env
 sed -i 's/redis:6379/localhost:6379/g' /opt/outline/.env
-sed -i "32s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
+sed -i "5s#URL=#URL=http://${LOCAL_IP}#g" /opt/outline/.env
 sed -i 's/FORCE_HTTPS=true/FORCE_HTTPS=false/g' /opt/outline/.env
 $STD yarn install --frozen-lockfile
 export NODE_OPTIONS="--max-old-space-size=3584"
@@ -45,12 +45,12 @@ fetch_and_deploy_gh_release "planka" "plankanban/planka" "prebuild" "latest" "/o
 msg_info "Configuring PLANKA"
 LOCAL_IP=$(hostname -I | awk '{print $1}')
 SECRET_KEY=$(openssl rand -hex 64)
-cd /opt/planka/planka
+cd /opt/planka
 $STD npm install
 cp .env.sample .env
-sed -i "s#http://localhost:1337#http://$LOCAL_IP:1337#g" /opt/planka/planka/.env
-sed -i "s#postgres@localhost#planka:$DB_PASS@localhost#g" /opt/planka/planka/.env
-sed -i "s#notsecretkey#$SECRET_KEY#g" /opt/planka/planka/.env
+sed -i "s#http://localhost:1337#http://$LOCAL_IP:1337#g" /opt/planka/.env
+sed -i "s#postgres@localhost#planka:$DB_PASS@localhost#g" /opt/planka/.env
+sed -i "s#notsecretkey#$SECRET_KEY#g" /opt/planka/.env
 $STD npm run db:init
 msg_ok "Configured PLANKA"

@@ -84,7 +84,7 @@ Description=planka Service
 After=network.target

 [Service]
-WorkingDirectory=/opt/planka/planka
+WorkingDirectory=/opt/planka
 ExecStart=/usr/bin/npm start --prod
 Restart=always

@@ -15,7 +15,6 @@ update_os

 msg_info "Installing Dependencies (Patience)"
 $STD apt-get install -y \
-  git \
  automake \
  autoconf \
  libtool \
@@ -25,10 +24,26 @@ $STD apt-get install -y \
  make \
  g++ \
  unpaper \
-  ocrmypdf \
+  fonts-urw-base35 \
+  qpdf \
  poppler-utils
 msg_ok "Installed Dependencies"

+PYTHON_VERSION="3.12" setup_uv
+JAVA_VERSION="21" setup_java
+
+read -r -p "${TAB3}Do you want to Stirling-PDF with Login? (no/n = without Login) [Y/n] " response
+response=${response,,} # Convert to lowercase
+login_mode="false"
+if [[ "$response" == "y" || "$response" == "yes" || -z "$response" ]]; then
+  USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "stirling-pdf" "Stirling-Tools/Stirling-PDF" "singlefile" "latest" "/opt/Stirling-PDF" "Stirling-PDF-with-login.jar"
+  mv /opt/Stirling-PDF/Stirling-PDF-with-login.jar /opt/Stirling-PDF/Stirling-PDF.jar
+  touch ~/.Stirling-PDF-login
+  login_mode="true"
+else
+  USE_ORIGINAL_FILENAME=true fetch_and_deploy_gh_release "stirling-pdf" "Stirling-Tools/Stirling-PDF" "singlefile" "latest" "/opt/Stirling-PDF" "Stirling-PDF.jar"
+fi
+
 msg_info "Installing LibreOffice Components"
 $STD apt-get install -y \
  libreoffice-writer \
@@ -37,32 +52,35 @@ $STD apt-get install -y \
  libreoffice-core \
  libreoffice-common \
  libreoffice-base-core \
-  python3-uno
+  libreoffice-script-provider-python \
+  libreoffice-java-common \
+  unoconv \
+  pngquant \
+  weasyprint
 msg_ok "Installed LibreOffice Components"

 msg_info "Installing Python Dependencies"
-$STD apt-get install -y \
-  python3 \
-  python3-pip
-rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
-$STD pip3 install \
-  uno \
+mkdir -p /tmp/stirling-pdf
+$STD uv venv /opt/.venv
+export PATH="/opt/.venv/bin:$PATH"
+source /opt/.venv/bin/activate
+$STD uv pip install --upgrade pip
+$STD uv pip install \
  opencv-python-headless \
-  unoconv \
-  pngquant \
-  WeasyPrint
+  ocrmypdf \
+  pillow \
+  pdf2image
+
+$STD apt-get install -y python3-uno python3-pip
+$STD pip3 install --break-system-packages unoserver
+ln -sf /opt/.venv/bin/python3 /usr/local/bin/python3
+ln -sf /opt/.venv/bin/pip /usr/local/bin/pip
 msg_ok "Installed Python Dependencies"

-msg_info "Installing Azul Zulu"
-curl -fsSL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xB1998361219BD9C9" -o "/etc/apt/trusted.gpg.d/zulu-repo.asc"
-curl -fsSL "https://cdn.azul.com/zulu/bin/zulu-repo_1.0.0-3_all.deb" -o "/zulu-repo_1.0.0-3_all.deb"
-$STD dpkg -i zulu-repo_1.0.0-3_all.deb
-$STD apt-get update
-$STD apt-get -y install zulu17-jdk
-msg_ok "Installed Azul Zulu"
-
 msg_info "Installing JBIG2"
-$STD git clone https://github.com/agl/jbig2enc /opt/jbig2enc
+$STD curl -fsSL -o /tmp/jbig2enc.tar.gz https://github.com/agl/jbig2enc/archive/refs/tags/0.30.tar.gz
+mkdir -p /opt/jbig2enc
+tar -xzf /tmp/jbig2enc.tar.gz -C /opt/jbig2enc --strip-components=1
 cd /opt/jbig2enc
 $STD bash ./autogen.sh
 $STD bash ./configure
@@ -74,23 +92,46 @@ msg_info "Installing Language Packs (Patience)"
 $STD apt-get install -y 'tesseract-ocr-*'
 msg_ok "Installed Language Packs"

-msg_info "Installing Stirling-PDF (Additional Patience)"
-RELEASE=$(curl -fsSL https://api.github.com/repos/Stirling-Tools/Stirling-PDF/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/Stirling-Tools/Stirling-PDF/archive/refs/tags/v${RELEASE}.tar.gz" -o "v${RELEASE}.tar.gz"
-tar -xzf v${RELEASE}.tar.gz
-cd Stirling-PDF-$RELEASE
-chmod +x ./gradlew
-$STD ./gradlew build
-mkdir -p /opt/Stirling-PDF
-touch /opt/Stirling-PDF/.env
-mv ./build/libs/Stirling-PDF-*.jar /opt/Stirling-PDF/
-mv scripts /opt/Stirling-PDF/
-ln -s /opt/Stirling-PDF/Stirling-PDF-$RELEASE.jar /opt/Stirling-PDF/Stirling-PDF.jar
-ln -s /usr/share/tesseract-ocr/5/tessdata/ /usr/share/tessdata
-msg_ok "Installed Stirling-PDF"
+msg_info "Creating Environment Variables"
+cat <<EOF >/opt/Stirling-PDF/.env
+# Java tuning
+JAVA_BASE_OPTS="-XX:+UnlockExperimentalVMOptions -XX:MaxRAMPercentage=75 -XX:InitiatingHeapOccupancyPercent=20 -XX:+G1PeriodicGCInvokesConcurrent -XX:G1PeriodicGCInterval=10000 -XX:+UseStringDeduplication -XX:G1PeriodicGCSystemLoadThreshold=70"
+JAVA_CUSTOM_OPTS=""
+
+# LibreOffice
+PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+UNO_PATH=/usr/lib/libreoffice/program
+URE_BOOTSTRAP=file:///usr/lib/libreoffice/program/fundamentalrc
+PYTHONPATH=/usr/lib/libreoffice/program:/opt/.venv/lib/python3.12/site-packages
+LD_LIBRARY_PATH=/usr/lib/libreoffice/program
+
+STIRLING_TEMPFILES_DIRECTORY=/tmp/stirling-pdf
+TMPDIR=/tmp/stirling-pdf
+TEMP=/tmp/stirling-pdf
+TMP=/tmp/stirling-pdf
+
+# Paths
+PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+EOF
+
+if [[ "$login_mode" == "true" ]]; then
+  cat <<EOF >>/opt/Stirling-PDF/.env
+# activate Login
+DISABLE_ADDITIONAL_FEATURES=false
+SECURITY_ENABLELOGIN=true
+
+# login credentials
+SECURITY_INITIALLOGIN_USERNAME=admin
+SECURITY_INITIALLOGIN_PASSWORD=stirling
+EOF
+fi
+msg_ok "Created Environment Variables"
+
+msg_info "Refreshing Font Cache"
+$STD fc-cache -fv
+msg_ok "Font Cache Updated"

 msg_info "Creating Service"
-# Create LibreOffice listener service
 cat <<EOF >/etc/systemd/system/libreoffice-listener.service
 [Unit]
 Description=LibreOffice Headless Listener Service
@@ -107,14 +148,6 @@ Restart=always
 WantedBy=multi-user.target
 EOF

-# Set up environment variables
-cat <<EOF >/opt/Stirling-PDF/.env
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/libreoffice/program
-UNO_PATH=/usr/lib/libreoffice/program
-PYTHONPATH=/usr/lib/python3/dist-packages:/usr/lib/libreoffice/program
-LD_LIBRARY_PATH=/usr/lib/libreoffice/program
-EOF
-
 cat <<EOF >/etc/systemd/system/stirlingpdf.service
 [Unit]
 Description=Stirling-PDF service
@@ -137,16 +170,32 @@ RestartSec=10
 WantedBy=multi-user.target
 EOF

-# Enable and start services
+cat <<EOF >/etc/systemd/system/unoserver.service
+[Unit]
+Description=UnoServer RPC Interface
+After=libreoffice-listener.service
+Requires=libreoffice-listener.service
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/unoserver --port 2003 --interface 127.0.0.1
+Restart=always
+EnvironmentFile=/opt/Stirling-PDF/.env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
 systemctl enable -q --now libreoffice-listener
 systemctl enable -q --now stirlingpdf
+systemctl enable -q --now unoserver
 msg_ok "Created Service"

 motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf v${RELEASE}.tar.gz /zulu-repo_1.0.0-3_all.deb
+rm -f /tmp/jbig2enc.tar.gz
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -14,16 +14,12 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y ffmpeg
-$STD apt-get install -y vlc
+$STD apt-get install -y \
+  ffmpeg \
+  vlc
 msg_ok "Installed Dependencies"

-msg_info "Installing Threadfin"
-mkdir -p /opt/threadfin
-curl -fsSL "https://github.com/Threadfin/Threadfin/releases/latest/download/Threadfin_linux_arm64" -o "/opt/threadfin/threadfin"
-chmod +x /opt/threadfin/threadfin
-
-msg_ok "Installed Threadfin"
+fetch_and_deploy_gh_release "threadfin" "threadfin/threadfin" "singlefile" "latest" "/opt/threadfin" "Threadfin_linux_arm64"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/threadfin.service
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/asylumexp/Proxmox/raw/main/LICENSE
-# Source: https://triliumnext.github.io/Docs/
+# Source: https://github.com/TriliumNext/Trilium

 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -13,14 +13,7 @@ setting_up_container
 network_check
 update_os

-msg_info "Setup TriliumNext"
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/TriliumNext/trilium/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/TriliumNext/trilium/releases/download/v${RELEASE}/TriliumNextNotes-Server-v${RELEASE}-linux-arm64.tar.xz" -o "TriliumNextNotes-Server-v${RELEASE}-linux-arm64.tar.xz"
-tar -xf TriliumNextNotes-Server-v${RELEASE}-linux-arm64.tar.xz
-mv TriliumNextNotes-Server-$RELEASE-linux-arm64 /opt/trilium
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
-msg_ok "Setup TriliumNext"
+fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-arm64.tar.xz"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/trilium.service
@@ -46,7 +39,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf /opt/TriliumNextNotes-Server-${RELEASE}-linux-arm64.tar.xz
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -19,17 +19,15 @@ $STD apt-get install -y \
  make \
  g++ \
  gcc \
-  ca-certificates
+  ca-certificates \
+  jq
 msg_ok "Installed Dependencies"

-NODE_VERSION="22" NODE_MODULE="pnpm@latest" setup_nodejs
+NODE_VERSION="24" NODE_MODULE="pnpm@$(curl -fsSL https://raw.githubusercontent.com/Koenkk/zigbee2mqtt/master/package.json | jq -r '.packageManager | split("@")[1]')" setup_nodejs
+
+fetch_and_deploy_gh_release "Zigbee2MQTT" "Koenkk/zigbee2mqtt" "tarball" "latest" "/opt/zigbee2mqtt"

 msg_info "Setting up Zigbee2MQTT"
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/Koenkk/zigbee2mqtt/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
-curl -fsSL "https://github.com/Koenkk/zigbee2mqtt/archive/refs/tags/${RELEASE}.zip" -o "${RELEASE}.zip"
-$STD unzip ${RELEASE}.zip
-mv zigbee2mqtt-${RELEASE} /opt/zigbee2mqtt
 cd /opt/zigbee2mqtt/data
 mv configuration.example.yaml configuration.yaml
 cd /opt/zigbee2mqtt
@@ -60,7 +58,6 @@ motd_ssh
 customize

 msg_info "Cleaning up"
-rm -rf /opt/${RELEASE}.zip
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
 msg_ok "Cleaned"
@@ -50,9 +50,9 @@ CORE_HOSTNAME=0.0.0.0
 CORE_PORT=3000
 CORE_RETURN_HTTPS=false
 DATASOURCE_TYPE=local
-DATASOURCE_LOCAL_DIRECTORY=/opt/zipline-upload
+DATASOURCE_LOCAL_DIRECTORY=/opt/zipline-uploads
 EOF
-mkdir -p /opt/zipline-upload
+mkdir -p /opt/zipline-uploads
 $STD pnpm install
 $STD pnpm build
 echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"