Upstream's deb postinstall runs chown navidrome:navidrome on
/var/lib/navidrome/cache without -R, and only behind an .installed
flag, so it never runs again on an upgrade. Every navidrome command
the packaging invokes as root creates cache content owned by root,
which the service then cannot write as the navidrome user - artwork
that was already cached keeps working while newly resolved album and
playlist covers fail.
Reassert ownership of the data folder after deploying the release.
The music folder is left alone, it is commonly a bind mount.
Adds five optional var_jitsi_* settings to the install script. All default
to empty, which keeps the previous LAN-only behaviour (container IP,
self-signed certificate):
- var_jitsi_domain public hostname instead of the container IP
- var_jitsi_le_email Let's Encrypt via the packaged debconf option
- var_jitsi_public_ip static NAT mapping in jvb.conf (JVB 2.3+)
- var_jitsi_admin_user secure domain: only authenticated users create rooms
- var_jitsi_admin_pass password for that user (generated when empty)
Tested on Proxmox VE 9.2 as unprivileged Debian 13 LXC, both with all
variables set (self-signed) and with none set.
Co-authored-by: klanghans <13657862+klanghans@users.noreply.github.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
* Add gotenberg (ct)
* Update messages in gotenberg.sh for clarity
* Implement unoconverter update in gotenberg.sh
* Fix formatting and add Go version setup in script
* Update Gotenberg installation script for Go version
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com>
* Add chevereto (ct)
* Update var_arm64 default value and cleanup messages
Changed default value of var_arm64 to 'yes' and removed setup completion message.
* Remove ffmpeg installation and add setup_ffmpeg call
* chevereto: derive php-fpm from one version, use nginx_enable_site
* chevereto: drop php modules already covered by setup_php
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>
* Add logseq (ct)
* logseq: provision corepack via setup_nodejs, use nginx helper, set up toolchains on update
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: MickLesk <47820557+MickLesk@users.noreply.github.com>
bullseye left security.debian.org when its LTS ended, so the hardcoded
libssl1.1_1.1.1w-0+deb11u8 filename now 404s. Scan the security, the
security-archive and the archive pools and take the newest build on offer
for the host architecture.
Closes#17104
* Add matter-hub (ct)
* Enable ARM64 support by default in matter-hub.sh
* Remove Home Assistant setup instruction
Removed instruction to set Home Assistant URL and token.
---------
Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com>
Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>
* FileFlows Node: Stop Spinner before read -rp
* fileflows: update install path for Node->Agent rename, detect service unit dynamically
* fileflows: tolerate no pre-existing fileflows units when checking for the new Agent unit
* fix(poznote): align nginx config with upstream Docker defaults
* fix(poznote): run init.sh on install and update, not just in Docker
* fix(poznote): add systemd units for the reminder-email and s3-backup workers
* fix(poznote): retrofit nginx config and worker services on update, sanitize timeout comment
* fix(poznote): silence init.sh output and consolidate worker enable/start
* fix(poznote): update ct/poznote.sh to use new default bootstrapper
