Merge remote-tracking branch 'upstream/main'

2025-07-21 14:21:29 +10:00
parent 8dae06ae39 88d58cd100
commit fdae0fd419
44 changed files with 1709 additions and 708 deletions
@@ -19,7 +19,7 @@ $STD apt-get install -y \
  nginx
 msg_ok "Installed Dependencies"

-PHP_VERSION="8.3" PHP_MODULE="common,ctype,fileinfo,fpm,mysql,cli" setup_php
+PHP_VERSION="8.3" PHP_MODULE="common,ctype,fileinfo,mysql,cli" PHP_FPM="YES" setup_php
 setup_composer
 setup_mariadb

@@ -0,0 +1,197 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: bvdberg01 | CanbiZ
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/karlomikus/bar-assistant
+# Source: https://github.com/karlomikus/vue-salt-rim
+# Source: https://www.meilisearch.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  redis-server \
+  nginx \
+  lsb-release \
+  libvips
+#php-{ffi,opcache,redis,zip,pdo-sqlite,bcmath,pdo,curl,dom,fpm}
+msg_ok "Installed Dependencies"
+
+PHP_VERSION="8.3" PHP_FPM=YES PHP_MODULE="ffi,opcache,redis,zip,pdo-sqlite,bcmath,pdo,curl,dom,fpm" setup_php
+setup_composer
+NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary"
+fetch_and_deploy_gh_release "bar-assistant" "karlomikus/bar-assistant" "tarball" "latest" "/opt/bar-assistant"
+fetch_and_deploy_gh_release "vue-salt-rim" "karlomikus/vue-salt-rim" "tarball" "latest" "/opt/vue-salt-rim"
+
+msg_info "Configuring PHP"
+PHPVER=$(php -r 'echo PHP_MAJOR_VERSION . "." . PHP_MINOR_VERSION . "\n";')
+sed -i.bak -E 's/^\s*;?\s*ffi\.enable\s*=.*/ffi.enable=true/' /etc/php/${PHPVER}/fpm/php.ini
+$STD systemctl reload php${PHPVER}-fpm
+msg_info "configured PHP"
+
+msg_info "Configure MeiliSearch"
+curl -fsSL https://raw.githubusercontent.com/meilisearch/meilisearch/latest/config.toml -o /etc/meilisearch.toml
+MASTER_KEY=$(openssl rand -base64 12)
+sed -i \
+  -e 's|^env =.*|env = "production"|' \
+  -e "s|^# master_key =.*|master_key = \"$MASTER_KEY\"|" \
+  -e 's|^db_path =.*|db_path = "/var/lib/meilisearch/data"|' \
+  -e 's|^dump_dir =.*|dump_dir = "/var/lib/meilisearch/dumps"|' \
+  -e 's|^snapshot_dir =.*|snapshot_dir = "/var/lib/meilisearch/snapshots"|' \
+  -e 's|^# no_analytics = true|no_analytics = true|' \
+  -e 's|^http_addr =.*|http_addr = "127.0.0.1:7700"|' \
+  /etc/meilisearch.toml
+msg_ok "Configured MeiliSearch"
+
+msg_info "Creating MeiliSearch service"
+cat <<EOF >/etc/systemd/system/meilisearch.service
+[Unit]
+Description=Meilisearch
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/meilisearch --config-file-path /etc/meilisearch.toml
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now meilisearch
+sleep 5
+msg_ok "Created Service MeiliSearch"
+
+msg_info "Installing Bar Assistant"
+cd /opt/bar-assistant
+cp /opt/bar-assistant/.env.dist /opt/bar-assistant/.env
+mkdir -p /opt/bar-assistant/resources/data
+curl -fsSL https://github.com/bar-assistant/data/archive/refs/heads/v5.tar.gz | tar -xz --strip-components=1 -C /opt/bar-assistant/resources/data
+MeiliSearch_API_KEY=$(curl -s -X GET 'http://127.0.0.1:7700/keys' -H "Authorization: Bearer $MASTER_KEY" | grep -o '"key":"[^"]*"' | head -n 1 | sed 's/"key":"//;s/"//')
+MeiliSearch_API_KEY_UID=$(curl -s -X GET 'http://127.0.0.1:7700/keys' -H "Authorization: Bearer $MASTER_KEY" | grep -o '"uid":"[^"]*"' | head -n 1 | sed 's/"uid":"//;s/"//')
+LOCAL_IP=$(hostname -I | awk '{print $1}')
+sed -i -e "s|^APP_URL=|APP_URL=http://${LOCAL_IP}/bar/|" \
+  -e "s|^MEILISEARCH_HOST=|MEILISEARCH_HOST=http://127.0.0.1:7700|" \
+  -e "s|^MEILISEARCH_KEY=|MEILISEARCH_KEY=${MASTER_KEY}|" \
+  -e "s|^MEILISEARCH_API_KEY=|MEILISEARCH_API_KEY=${MeiliSearch_API_KEY}|" \
+  -e "s|^MEILISEARCH_API_KEY_UID=|MEILISEARCH_API_KEY_UID=${MeiliSearch_API_KEY_UID}|" \
+  /opt/bar-assistant/.env
+$STD composer install --no-interaction
+$STD php artisan key:generate
+touch storage/bar-assistant/database.ba3.sqlite
+$STD php artisan migrate --force
+$STD php artisan storage:link
+$STD php artisan bar:setup-meilisearch
+$STD php artisan scout:sync-index-settings
+$STD php artisan config:cache
+$STD php artisan route:cache
+$STD php artisan event:cache
+mkdir /opt/bar-assistant/storage/bar-assistant/uploads/temp
+chown -R www-data:www-data /opt/bar-assistant
+msg_ok "Installed Bar Assistant"
+
+msg_info "Installing Salt Rim"
+cd /opt/vue-salt-rim
+cat <<EOF >/opt/vue-salt-rim/public/config.js
+window.srConfig = {}
+window.srConfig.API_URL = "http://${LOCAL_IP}/bar"
+window.srConfig.MEILISEARCH_URL = "http://${LOCAL_IP}/search"
+EOF
+$STD npm install
+$STD npm run build
+msg_ok "Installed Salt Rim"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/nginx/sites-available/barassistant.conf
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name _;
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    client_max_body_size 100M;
+
+    location /bar/ {
+        proxy_pass http://127.0.0.1:8080/;
+        proxy_set_header Host \$host;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+
+    location /search/ {
+        proxy_pass http://127.0.0.1:7700/;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8081/;
+        proxy_set_header Host \$host;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+}
+
+server {
+    listen 127.0.0.1:8080;
+    server_name example.com;
+    root /opt/bar-assistant/public;
+
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-Content-Type-Options "nosniff";
+
+    index index.php;
+    charset utf-8;
+
+    location / {
+        try_files \$uri \$uri/ /index.php?\$query_string;
+    }
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    error_page 404 /index.php;
+
+    location ~ ^/index\.php(/|$) {
+        fastcgi_pass unix:/var/run/php/php$PHPVER-fpm.sock;
+        fastcgi_param SCRIPT_FILENAME \$realpath_root\$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_hide_header X-Powered-By;
+    }
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+}
+
+server {
+    listen 127.0.0.1:8081;
+    server_name _;
+    root /opt/vue-salt-rim/dist;
+
+    location / {
+        try_files \$uri \$uri/ /index.html;
+    }
+}
+EOF
+
+ln -s /etc/nginx/sites-available/barassistant.conf /etc/nginx/sites-enabled/
+rm -f /etc/nginx/sites-enabled/default
+$STD systemctl reload nginx
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"
@@ -24,13 +24,20 @@ motd_ssh
 customize

 msg_info "Creating Service"
-PASSWORD=$(omd create monitoring | grep "password:" | awk '{print $NF}')
-$STD omd start
+SITE_NAME="monitoring"
+$STD omd create "$SITE_NAME"
+MKPASSWORD=$(openssl rand -base64 18 | tr -d '/+=' | cut -c1-16)
+
+echo -e "$MKPASSWORD\n$MKPASSWORD" | su - "$SITE_NAME" -c "cmk-passwd cmkadmin --stdin"
+$STD omd start "$SITE_NAME"
+
 {
-    echo "Application-Credentials"
-    echo "Username: cmkadmin"
-    echo "Password: $PASSWORD"
+  echo "Application-Credentials"
+  echo "Username: cmkadmin"
+  echo "Password: $MKPASSWORD"
+  echo "Site: $SITE_NAME"
 } >>~/checkmk.creds
+
 msg_ok "Created Service"

 msg_info "Cleaning up"
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://cloudreve.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "cloudreve" "cloudreve/cloudreve" "prebuild" "latest" "/opt/cloudreve" "*linux_amd64.tar.gz"
+
+msg_info "Setup Service"
+cat <<EOF >/etc/systemd/system/cloudreve.service
+[Unit]
+Description=Cloudreve Service
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/opt/cloudreve/cloudreve
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl enable -q --now cloudreve
+msg_ok "Service Setup"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"
@@ -16,11 +16,11 @@ update_os
 NODE_VERSION="22" setup_nodejs
 fetch_and_deploy_gh_release "dashy" "Lissy93/dashy"

-msg_info "Installing Dashy ${RELEASE} (Patience)"
+msg_info "Installing Dashy"
 cd /opt/dashy
 $STD npm install
 $STD npm run build
-msg_ok "Installed Dashy ${RELEASE}"
+msg_ok "Installed Dashy"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/dashy.service
@@ -13,8 +13,6 @@ setting_up_container
 network_check
 update_os

-FFMPEG_VERSION="latest" FFMPEG_TYPE="medium" setup_ffmpeg
-
 msg_info "Setting Up Hardware Acceleration"
 $STD apt-get -y install {va-driver-all,ocl-icd-libopencl1,intel-opencl-icd,vainfo,intel-gpu-tools}
 if [[ "$CTTYPE" == "0" ]]; then
@@ -27,6 +25,14 @@ fi
 msg_ok "Set Up Hardware Acceleration"

 fetch_and_deploy_gh_release "ersatztv" "ErsatzTV/ErsatzTV" "prebuild" "latest" "/opt/ErsatzTV" "*linux-arm64.tar.gz"
+fetch_and_deploy_gh_release "ersatztv-ffmpeg" "ErsatzTV/ErsatzTV-ffmpeg" "prebuild" "latest" "/opt/ErsatzTV-ffmpeg" "*-linuxarm64-gpl-7.1.tar.xz"
+
+msg_info "Set ErsatzTV-ffmpeg links"
+chmod +x /opt/ErsatzTV-ffmpeg/bin/*
+ln -sf /opt/ErsatzTV-ffmpeg/bin/ffmpeg /usr/local/bin/ffmpeg
+ln -sf /opt/ErsatzTV-ffmpeg/bin/ffplay /usr/local/bin/ffplay
+ln -sf /opt/ErsatzTV-ffmpeg/bin/ffprobe /usr/local/bin/ffprobe
+msg_ok "ffmpeg links set"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/ersatzTV.service
@@ -22,7 +22,8 @@ $STD apt-get install -y \
  chromium/stable \
  chromium-common/stable \
  graphicsmagick \
-  ghostscript
+  ghostscript \
+  jq
 msg_ok "Installed Dependencies"

 msg_info "Installing Additional Tools"
@@ -48,18 +49,14 @@ sed -i \
  /etc/meilisearch.toml
 msg_ok "Installed Meilisearch"

-NODE_VERSION="22" NODE_MODULE="yarn@latest" setup_nodejs
-$STD npm install -g corepack@0.31.0
+fetch_and_deploy_gh_release "karakeep" "karakeep-app/karakeep"
+cd /opt/karakeep
+MODULE_VERSION="$(jq -r '.packageManager | split("@")[1]' /opt/karakeep/package.json)"
+NODE_VERSION="22" NODE_MODULE="pnpm@${MODULE_VERSION}" setup_nodejs

 msg_info "Installing karakeep"
-cd /opt
-RELEASE=$(curl -fsSL https://api.github.com/repos/karakeep-app/karakeep/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/karakeep-app/karakeep/archive/refs/tags/v${RELEASE}.zip" -o "v${RELEASE}.zip"
-$STD unzip "v${RELEASE}.zip"
-mv karakeep-"${RELEASE}" /opt/karakeep
-cd /opt/karakeep
-corepack enable
 export PUPPETEER_SKIP_DOWNLOAD="true"
+export PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD="true"
 export NEXT_TELEMETRY_DISABLED=1
 export CI="true"
 cd /opt/karakeep/apps/web
@@ -70,21 +67,20 @@ $STD pnpm install --frozen-lockfile
 cd /opt/karakeep/apps/cli
 $STD pnpm install --frozen-lockfile
 $STD pnpm build
-cd /opt/karakeep/apps/mcp
-$STD pnpm install --frozen-lockfile
-$STD pnpm build
+$STD pnpm store prune

 export DATA_DIR=/opt/karakeep_data
 karakeep_SECRET=$(openssl rand -base64 36 | cut -c1-24)
 mkdir -p /etc/karakeep
 cat <<EOF >/etc/karakeep/karakeep.env
-SERVER_VERSION=$RELEASE
+SERVER_VERSION="$(cat ~/.karakeep)"
 NEXTAUTH_SECRET="$karakeep_SECRET"
 NEXTAUTH_URL="http://localhost:3000"
 DATA_DIR="$DATA_DIR"
 MEILI_ADDR="http://127.0.0.1:7700"
 MEILI_MASTER_KEY="$MASTER_KEY"
 BROWSER_WEB_URL="http://127.0.0.1:9222"
+DB_WAL_MODE=true

 # If you're planning to use OpenAI for tagging. Uncomment the following line:
 # OPENAI_API_KEY="<API_KEY>"
@@ -112,7 +108,6 @@ BROWSER_WEB_URL="http://127.0.0.1:9222"
 # CRAWLER_VIDEO_DOWNLOAD_MAX_SIZE="50"
 # CRAWLER_ENABLE_ADBLOCKER=true
 EOF
-echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"
 msg_ok "Installed karakeep"

 msg_info "Running Database Migration"
@@ -190,7 +185,6 @@ customize

 msg_info "Cleaning up"
 rm -rf /tmp/meilisearch-aarch64.deb
-rm -f /opt/v"${RELEASE}".zip
 $STD apt-get autoremove -y
 $STD apt-get autoclean -y
 msg_ok "Cleaned"
@@ -0,0 +1,148 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://mealie.io
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  build-essential \
+  libpq-dev \
+  libwebp-dev \
+  libsasl2-dev \
+  libldap2-dev \
+  libssl-dev
+msg_ok "Installed Dependencies"
+
+PYTHON_VERSION="3.12" setup_uv
+POSTGRES_VERSION="16" setup_postgresql
+NODE_MODULE="yarn" NODE_VERSION="20" setup_nodejs
+
+fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
+
+msg_info "Setup Database"
+DB_NAME=mealie_db
+DB_USER=mealie__user
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
+{
+  echo "Mealie-Credentials"
+  echo "Mealie Database User: $DB_USER"
+  echo "Mealie Database Password: $DB_PASS"
+  echo "Mealie Database Name: $DB_NAME"
+} >>~/mealie.creds
+msg_ok "Set up Database"
+
+msg_info "Building Frontend"
+export NUXT_TELEMETRY_DISABLED=1
+cd /opt/mealie/frontend
+$STD yarn install --prefer-offline --frozen-lockfile --non-interactive --production=false --network-timeout 1000000
+$STD yarn generate
+msg_ok "Built Frontend"
+
+msg_info "Copying Built Frontend into Backend Package"
+cp -r /opt/mealie/frontend/dist /opt/mealie/mealie/frontend
+msg_ok "Copied Frontend"
+
+msg_info "Preparing Backend (Poetry)"
+$STD uv venv /opt/mealie/.venv
+$STD /opt/mealie/.venv/bin/python -m ensurepip --upgrade
+$STD /opt/mealie/.venv/bin/python -m pip install --upgrade pip
+$STD /opt/mealie/.venv/bin/pip install uv
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/uv pip install poetry==2.0.1
+$STD /opt/mealie/.venv/bin/poetry self add "poetry-plugin-export>=1.9"
+msg_ok "Prepared Poetry"
+
+msg_info "Writing Environment File"
+cat <<EOF >/opt/mealie/mealie.env
+HOST=0.0.0.0
+PORT=9000
+DB_ENGINE=postgres
+POSTGRES_SERVER=localhost
+POSTGRES_PORT=5432
+POSTGRES_USER=${DB_USER}
+POSTGRES_PASSWORD=${DB_PASS}
+POSTGRES_DB=${DB_NAME}
+NLTK_DATA=/nltk_data
+PRODUCTION=true
+STATIC_FILES=/opt/mealie/frontend/dist
+EOF
+msg_ok "Wrote Environment File"
+
+msg_info "Creating Start Script"
+cat <<'EOF' >/opt/mealie/start.sh
+#!/bin/bash
+set -a
+source /opt/mealie/mealie.env
+set +a
+exec /opt/mealie/.venv/bin/mealie
+EOF
+chmod +x /opt/mealie/start.sh
+msg_ok "Created Start Script"
+
+msg_info "Building Mealie Backend Wheel"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/poetry build --output dist
+MEALIE_VERSION=$(/opt/mealie/.venv/bin/poetry version --short)
+$STD /opt/mealie/.venv/bin/poetry export --only=main --extras=pgsql --output=dist/requirements.txt
+echo "mealie[pgsql]==$MEALIE_VERSION \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.whl | tail -n1 | tr -d '\n' >>dist/requirements.txt
+echo " \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.tar.gz | tail -n1 >>dist/requirements.txt
+msg_ok "Built Wheel + Requirements"
+
+msg_info "Installing Mealie via uv"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/uv pip install --require-hashes -r /opt/mealie/dist/requirements.txt --find-links dist
+msg_ok "Installed Mealie"
+
+msg_info "Downloading NLTK Data"
+mkdir -p /nltk_data/
+$STD /opt/mealie/.venv/bin/python -m nltk.downloader -d /nltk_data averaged_perceptron_tagger_eng
+msg_ok "Downloaded NLTK Data"
+
+msg_info "Set Symbolic Links for Mealie"
+ln -sf /opt/mealie/.venv/bin/mealie /usr/local/bin/mealie
+ln -sf /opt/mealie/.venv/bin/poetry /usr/local/bin/poetry
+msg_ok "Set Symbolic Links"
+
+msg_info "Creating Systemd Service"
+cat <<EOF >/etc/systemd/system/mealie.service
+[Unit]
+Description=Mealie Backend Server
+After=network.target postgresql.service
+
+[Service]
+User=root
+WorkingDirectory=/opt/mealie
+ExecStart=/opt/mealie/start.sh
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now mealie
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"
@@ -41,7 +41,7 @@ ENV=prod
 ENABLE_OLLAMA_API=false
 OLLAMA_BASE_URL=http://0.0.0.0:11434
 EOF
-$STD npm install
+$STD npm install --force
 export NODE_OPTIONS="--max-old-space-size=3584"
 $STD npm run build
 msg_ok "Installed Open WebUI"
@@ -14,22 +14,17 @@ setting_up_container
 network_check
 update_os

-NODE_VERSION="22" setup_nodejs
-
 msg_info "Installing NUT"
 $STD apt-get install -y nut-client
 msg_ok "Installed NUT"

-msg_info "Installing Peanut"
-RELEASE=$(curl -fsSL https://api.github.com/repos/Brandawg93/PeaNUT/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
-curl -fsSL "https://api.github.com/repos/Brandawg93/PeaNUT/tarball/${RELEASE}" -o "peanut.tar.gz"
-mkdir -p /opt/peanut
-tar -xzf peanut.tar.gz -C /opt/peanut --strip-components=1
-rm peanut.tar.gz
+NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
+fetch_and_deploy_gh_release "peanut" "Brandawg93/PeaNUT" "tarball" "latest" "/opt/peanut"
+
+msg_info "Setup Peanut"
 cd /opt/peanut
-$STD npm install -g pnpm
 $STD pnpm i
-$STD pnpm run build
+$STD pnpm run build:local
 cp -r .next/static .next/standalone/.next/
 mkdir -p /opt/peanut/.next/standalone/config
 mkdir -p /etc/peanut/
@@ -40,7 +35,7 @@ NUT_HOST: 0.0.0.0
 NUT_PORT: 3493
 EOF
 ln -sf /etc/peanut/settings.yml /opt/peanut/.next/standalone/config/settings.yml
-msg_ok "Installed Peanut"
+msg_ok "Setup Peanut"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/peanut.service
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 community-scripts ORG
 # Author: vhsdream
 # License: MIT | https://github.com/asylumexp/Proxmox/raw/main/LICENSE
-# Source: https://rxresu.me
+# Source: https://rxresume.org

 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -32,19 +32,16 @@ $STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME to $DB_
 $STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
 msg_ok "Set up Database"

-msg_info "Installing ${APPLICATION}"
+msg_info "Installing $APPLICATION"
 MINIO_PASS=$(openssl rand -base64 48)
 ACCESS_TOKEN=$(openssl rand -base64 48)
 REFRESH_TOKEN=$(openssl rand -base64 48)
 CHROME_TOKEN=$(openssl rand -hex 32)
 LOCAL_IP=$(hostname -I | awk '{print $1}')
 TAG=$(curl -fsSL https://api.github.com/repos/browserless/browserless/tags?per_page=1 | grep "name" | awk '{print substr($2, 3, length($2)-4) }')
-RELEASE=$(curl -fsSL https://api.github.com/repos/AmruthPillai/Reactive-Resume/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-curl -fsSL "https://github.com/AmruthPillai/Reactive-Resume/archive/refs/tags/v${RELEASE}.zip" -o v${RELEASE}.zip
-$STD unzip v${RELEASE}.zip
-mv ${APPLICATION}-${RELEASE}/ /opt/${APPLICATION}
-cd /opt/${APPLICATION}
-corepack enable
+
+fetch_and_deploy_gh_release "Reactive-Resume" "lazy-media/Reactive-Resume"
+cd /opt/"$APPLICATION"
 export CI="true"
 export PUPPETEER_SKIP_DOWNLOAD="true"
 export NODE_ENV="production"
@@ -53,13 +50,13 @@ $STD pnpm install --frozen-lockfile
 $STD pnpm run build
 $STD pnpm install --prod --frozen-lockfile
 $STD pnpm run prisma:generate
-msg_ok "Installed ${APPLICATION}"
+msg_ok "Installed $APPLICATION"

 msg_info "Installing Browserless (Patience)"
 cd /tmp
-curl -fsSL https://github.com/browserless/browserless/archive/refs/tags/v${TAG}.zip -o v${TAG}.zip
-$STD unzip v${TAG}.zip
-mv browserless-${TAG} /opt/browserless
+curl -fsSL https://github.com/browserless/browserless/archive/refs/tags/v"$TAG".zip -o v"$TAG".zip
+$STD unzip v"$TAG".zip
+mv browserless-"$TAG" /opt/browserless
 cd /opt/browserless
 $STD npm install
 rm -rf src/routes/{chrome,edge,firefox,webkit}
@@ -77,9 +74,10 @@ MINIO_ROOT_PASSWORD="${MINIO_PASS}"
 MINIO_VOLUMES=/opt/minio
 MINIO_OPTS="--address :9000 --console-address 127.0.0.1:9001"
 EOF
-cat <<EOF >/opt/${APPLICATION}/.env
+cat <<EOF >/opt/"$APPLICATION"/.env
 NODE_ENV=production
 PORT=3000
+# for use behind a reverse proxy, use your FQDN for PUBLIC_URL and STORAGE_URL
 PUBLIC_URL=http://${LOCAL_IP}:3000
 STORAGE_URL=http://${LOCAL_IP}:9000/rxresume
 DATABASE_URL=postgresql://${DB_USER}:${DB_PASS}@localhost:5432/${DB_NAME}?schema=public
@@ -116,14 +114,13 @@ HOST=localhost
 PORT=8080
 TOKEN=${CHROME_TOKEN}
 EOF
-echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 {
  echo "${APPLICATION} Credentials"
  echo "Database User: $DB_USER"
  echo "Database Password: $DB_PASS"
  echo "Database Name: $DB_NAME"
  echo "Minio Root Password: ${MINIO_PASS}"
-} >>~/${APPLICATION}.creds
+} >>~/"$APPLICATION".creds
 msg_ok "Configured applications"

 msg_info "Creating Services"
@@ -136,7 +133,7 @@ WorkingDirectory=/usr/local/bin
 EnvironmentFile=/opt/minio/.env
 EOF

-cat <<EOF >/etc/systemd/system/${APPLICATION}.service
+cat <<EOF >/etc/systemd/system/"$APPLICATION".service
 [Unit]
 Description=${APPLICATION} Service
 After=network.target postgresql.service minio.service
@@ -167,15 +164,14 @@ Restart=unless-stopped
 WantedBy=multi-user.target
 EOF
 systemctl daemon-reload
-systemctl enable -q --now minio.service ${APPLICATION}.service browserless.service
+systemctl enable -q --now minio.service "$APPLICATION".service browserless.service
 msg_ok "Created Services"

 motd_ssh
 customize

 msg_info "Cleaning up"
-rm -f /tmp/v${RELEASE}.zip
-rm -f /tmp/v${TAG}.zip
+rm -f /tmp/v"$TAG".zip
 rm -f /tmp/minio.deb
 $STD apt-get -y autoremove
 $STD apt-get -y autoclean
@@ -20,6 +20,8 @@ $STD apt-get install -y \
 msg_ok "Installed Dependencies"

 fetch_and_deploy_gh_release "threadfin" "threadfin/threadfin" "singlefile" "latest" "/opt/threadfin" "Threadfin_linux_arm64"
+mv /root/.threadfin /root/.threadfin_version
+mkdir -p /root/.threadfin

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/threadfin.service