Upstream's deb postinstall runs chown navidrome:navidrome on
/var/lib/navidrome/cache without -R, and only behind an .installed
flag, so it never runs again on an upgrade. Every navidrome command
the packaging invokes as root creates cache content owned by root,
which the service then cannot write as the navidrome user - artwork
that was already cached keeps working while newly resolved album and
playlist covers fail.
Reassert ownership of the data folder after deploying the release.
The music folder is left alone, it is commonly a bind mount.
Adds five optional var_jitsi_* settings to the install script. All default
to empty, which keeps the previous LAN-only behaviour (container IP,
self-signed certificate):
- var_jitsi_domain public hostname instead of the container IP
- var_jitsi_le_email Let's Encrypt via the packaged debconf option
- var_jitsi_public_ip static NAT mapping in jvb.conf (JVB 2.3+)
- var_jitsi_admin_user secure domain: only authenticated users create rooms
- var_jitsi_admin_pass password for that user (generated when empty)
Tested on Proxmox VE 9.2 as unprivileged Debian 13 LXC, both with all
variables set (self-signed) and with none set.
Co-authored-by: klanghans <13657862+klanghans@users.noreply.github.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
* Add gotenberg (ct)
* Update messages in gotenberg.sh for clarity
* Implement unoconverter update in gotenberg.sh
* Fix formatting and add Go version setup in script
* Update Gotenberg installation script for Go version
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com>
* Add chevereto (ct)
* Update var_arm64 default value and cleanup messages
Changed default value of var_arm64 to 'yes' and removed setup completion message.
* Remove ffmpeg installation and add setup_ffmpeg call
* chevereto: derive php-fpm from one version, use nginx_enable_site
* chevereto: drop php modules already covered by setup_php
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>
* Add logseq (ct)
* logseq: provision corepack via setup_nodejs, use nginx helper, set up toolchains on update
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: MickLesk <47820557+MickLesk@users.noreply.github.com>
composer's root/superuser safety prompt blocks on stdin during update_script,
since the container's terminal isn't attached to answer it. Set
COMPOSER_ALLOW_SUPERUSER=1 to suppress the prompt, matching composer's
documented approach for running as root non-interactively.
* Add matter-hub (ct)
* Enable ARM64 support by default in matter-hub.sh
* Remove Home Assistant setup instruction
Removed instruction to set Home Assistant URL and token.
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>
CLEAN_INSTALL wipes /opt/shlink-web-client on every `update`, deleting the
user's servers.json (and its API key) with no backup, unlike the main
/opt/shlink app which already backs up/restores .env and data around its
CLEAN_INSTALL. This makes the Web Client lose its configured server(s) on
every update.
Reuse the existing create_backup/restore_backup helpers around the
web-client's CLEAN_INSTALL, mirroring the pattern already used for
/opt/shlink.