Post a test command for vm/, tools/ and turnkey/ changes too

A fix to tools/addon/all-templates.sh got no comment because only ct/ and
install/ were recognised. Each script now also says where it runs, read from
what it calls: the Proxmox VE host, inside a guest, or PBS/PMG/PDM.

.github/workflows/pr-test-command.yml

@@ -2,7 +2,8 @@ name: PR test command
 
 # Posts a ready-to-run test command for reviewers.
 # It uses this PR’s script branch with the production engine, since both resolve
-# independently. Only scripts using community-scripts/core are supported.
+# independently. ct/ scripts need community-scripts/core; vm/, tools/ and
+# turnkey/ scripts run straight from the branch.
 #
 # pull_request_target allows comments on fork PRs. No PR code is checked out or
 # executed; API inputs are validated and the comment is assembled in JavaScript.
@@ -14,6 +15,9 @@ on:
     paths:
       - "ct/**"
       - "install/**"
+      - "vm/**"
+      - "tools/**"
+      - "turnkey/**"
 
 jobs:
   comment:
@@ -50,14 +54,43 @@ jobs:
             // ct/foo.sh and install/foo-install.sh are the same app. A removed
             // file has nothing left to run.
             const apps = new Map();               // slug -> {ct, install}
+            const others = [];
             for (const f of files) {
               if (f.status === 'removed') continue;
               let m = f.filename.match(/^ct\/([a-z0-9][a-z0-9._-]*)\.sh$/);
               if (m) { apps.set(m[1], { ...apps.get(m[1]), ct: true }); continue; }
               m = f.filename.match(/^install\/([a-z0-9][a-z0-9._-]*)-install\.sh$/);
-              if (m) apps.set(m[1], { ...apps.get(m[1]), install: true });
+              if (m) { apps.set(m[1], { ...apps.get(m[1]), install: true }); continue; }
+              if (/^(vm|tools|turnkey)\/[A-Za-z0-9._\/-]+\.sh$/.test(f.filename)) others.push(f.filename);
             }
-            if (apps.size === 0) return;
+            if (apps.size === 0 && others.length === 0) return;
+            others.sort();
+
+            // Where a tool runs is read from the script itself; it is never run.
+            const HOST = /(^|[\s;&|(`$])(pct|qm|pveam|pvesm|pvesh|pveversion)\s/m;
+            async function runsOn(path) {
+              if (path.startsWith('vm/')) return 'pve';
+              const appliance = (path.split('/').pop().match(/(?:^|-)(pbs|pmg|pdm)(?=[0-9-]|\.sh$)/) || [])[1];
+              if (path.startsWith('tools/pve/')) return appliance || 'pve';
+              let text = '';
+              try {
+                const res = await github.rest.repos.getContent({
+                  owner: head.owner.login, repo: head.name, path, ref: pr.head.sha,
+                });
+                text = Buffer.from(res.data.content || '', 'base64').toString('utf8');
+              } catch (e) {}
+              if (HOST.test(text.replace(/^\s*#.*$/gm, '').replace(/command -v \S+/g, ''))) return 'pve';
+              if (appliance) return appliance;
+              return path.startsWith('tools/addon/') ? 'guest' : 'unknown';
+            }
+            const WHERE = {
+              pve: 'in the Proxmox VE shell',
+              guest: 'inside the LXC or VM that should get it',
+              pbs: 'in the Proxmox Backup Server shell',
+              pmg: 'in the Proxmox Mail Gateway shell',
+              pdm: 'in the Proxmox Datacenter Manager shell',
+              unknown: 'wherever the script is meant to run',
+            };
 
             // Read the ct script at the PR head to see which engine it loads.
             // Read only -- it is never sourced or run.
@@ -111,10 +144,9 @@ jobs:
                 );
               }
               lines.push(
-                'Both lines are needed. Each script pins `_CS_DEFAULT_URL` to `main`, and that',
-                'pin is what fills `COMMUNITY_SCRIPTS_URL` when the variable is unset — so',
-                'curling the branch URL on its own gives you the `ct/` script from this PR and',
-                'the `install/` script from `main`. Frequently the one you meant to test.',
+                'Both lines are needed. Without `COMMUNITY_SCRIPTS_URL` the engine falls back to',
+                '`main`, so curling the branch URL on its own gives you the `ct/` script from',
+                'this PR and the `install/` script from `main`. Frequently the one you meant to test.',
                 '',
                 'The same command works on an Incus host: the engine detects the platform and',
                 'loads the matching backend, while the scripts still come from this branch.',
@@ -133,6 +165,30 @@ jobs:
               );
             }
 
+            if (others.length > 0) {
+              const shown = others.slice(0, MAX_APPS);
+              lines.push(...(ready.length > 0 ? ['', '---', ''] : ['### Try this branch', '']));
+              for (const path of shown) {
+                lines.push(
+                  `\`${path}\`, run ${WHERE[await runsOn(path)]}:`,
+                  '```bash',
+                  `bash -c "$(curl -fsSL "${base}/${path}")"`,
+                  '```',
+                  '',
+                );
+              }
+              if (others.length > shown.length) {
+                lines.push(
+                  `${others.length - shown.length} more script(s) changed; same command, different path.`,
+                  '',
+                );
+              }
+              lines.push(
+                'Only the script itself comes from this branch. Whatever it loads, the engine',
+                'or the `misc/` helpers, still comes from `main`.',
+              );
+            }
+
             if (legacy.length > 0) {
               lines.push(
                 '',

CHANGELOG.md

@@ -549,6 +549,42 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-09-29
+
+### 🆕 New Scripts
+
+  - Anki Sync Server ([#17416](https://github.com/community-scripts/ProxmoxVE/pull/17416))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(romm): snapshot Redis hourly like the upstream image [@DenislavDenev](https://github.com/DenislavDenev) ([#17562](https://github.com/community-scripts/ProxmoxVE/pull/17562))
+    - checkmate: bump Node.js from 22 to 24 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17554](https://github.com/community-scripts/ProxmoxVE/pull/17554))
+
+### 💾 Core
+
+  - Default the scripts base to ProxmoxVE [@MickLesk](https://github.com/MickLesk) ([core#76](https://github.com/community-scripts/core/pull/76))
+- Generate app headers [@github-actions[bot]](https://github.com/github-actions[bot]) ([core#75](https://github.com/community-scripts/core/pull/75))
+
+## 2026-09-28
+
+### 🚀 Updated Scripts
+
+  - Immich: Pin version to 3.2.4 [@vhsdream](https://github.com/vhsdream) ([#17564](https://github.com/community-scripts/ProxmoxVE/pull/17564))
+
+  - #### 🐞 Bug Fixes
+
+    - fix(autocaliweb): wire .env into all service units, not just autocali… [@bobartlett](https://github.com/bobartlett) ([#17561](https://github.com/community-scripts/ProxmoxVE/pull/17561))
+    - Zipline: Change cp command [@Mraedis](https://github.com/Mraedis) ([#17559](https://github.com/community-scripts/ProxmoxVE/pull/17559))
+    - Borg-UI: start through upstream's start.sh so migrations run [@MickLesk](https://github.com/MickLesk) ([#17563](https://github.com/community-scripts/ProxmoxVE/pull/17563))
+    - linkding: serve favicons and preview images [@MickLesk](https://github.com/MickLesk) ([#17557](https://github.com/community-scripts/ProxmoxVE/pull/17557))
+    - SparkyFitness: Fill in the nginx resolver 1.7.3 added [@MickLesk](https://github.com/MickLesk) ([#17556](https://github.com/community-scripts/ProxmoxVE/pull/17556))
+
+  - #### 🔧 Refactor
+
+    - Plane: Replace MinIO installation with Silo [@MickLesk](https://github.com/MickLesk) ([#17347](https://github.com/community-scripts/ProxmoxVE/pull/17347))
+
 ## 2026-09-27
 
 ### 🚀 Updated Scripts

ct/anki-sync-server.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://docs.ankiweb.net/sync-server.html
+
+APP="Anki-Sync-Server"
+var_tags="${var_tags:-anki;flashcards;sync}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /opt/anki-sync-server/.env ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "anki-sync-server" "ankitects/anki"; then
+    msg_info "Stopping Service"
+    systemctl stop anki-sync-server
+    msg_ok "Stopped Service"
+
+    create_backup /opt/anki-sync-server/.env /opt/anki-sync-server/data
+
+    msg_info "Updating Anki Sync Server"
+    $STD uv pip install --python /opt/anki-sync-server/venv/bin/python "anki==$(get_latest_github_release "ankitects/anki")"
+    cat <<EOF >~/.anki-sync-server
+$(get_latest_github_release "ankitects/anki")
+EOF
+    msg_ok "Updated Anki Sync Server"
+
+    restore_backup
+
+    msg_info "Starting Service"
+    systemctl start anki-sync-server
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8080${CL}"

ct/borg-ui.sh

@@ -32,15 +32,9 @@ function update_script() {
     exit
   fi
 
-  if grep -q -- '--workers 2' /etc/systemd/system/borg-ui.service 2>/dev/null; then
-    msg_info "Reducing Service to a single worker"
-    sed -i 's/--workers 2/--workers 1/' /etc/systemd/system/borg-ui.service
-    systemctl daemon-reload
-    systemctl try-restart borg-ui
-    msg_ok "Reduced Service to a single worker"
-  fi
-
+  local changed=0
   if check_for_gh_release "borg-ui" "karanhudia/borg-ui"; then
+    changed=1
     msg_info "Stopping Service"
     systemctl stop borg-ui
     msg_ok "Stopped Service"
@@ -110,9 +104,37 @@ function update_script() {
     $STD uv venv --python "$BORG_PYTHON" /opt/borg-ui/.venv
     $STD uv pip install --python /opt/borg-ui/.venv -r requirements.txt
     msg_ok "Updated Python Environment"
+  fi
 
+  if [[ -f /opt/borg-ui/packaging/native/start.sh ]] && ! grep -q 'packaging/native/start.sh' /etc/systemd/system/borg-ui.service; then
+    msg_info "Switching Service to the upstream start script"
+    cat <<EOF >/etc/systemd/system/borg-ui.service
+[Unit]
+Description=Borg-UI
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/borg-ui
+EnvironmentFile=/opt/borg-ui/.env
+Environment=BORG_UI_VENV=/opt/borg-ui/.venv
+ExecStart=/bin/bash /opt/borg-ui/packaging/native/start.sh
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    systemctl daemon-reload
+    msg_ok "Switched Service to the upstream start script"
+    changed=1
+  fi
+
+  if [[ "$changed" == 1 ]]; then
     msg_info "Starting Service"
-    systemctl start borg-ui
+    systemctl restart borg-ui
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
   fi

ct/headers/anki-sync-server

@@ -0,0 +1,6 @@
+    ___          __   _      _____                       _____                          
+   /   |  ____  / /__(_)    / ___/__  ______  _____     / ___/___  ______   _____  _____
+  / /| | / __ \/ //_/ /_____\__ \/ / / / __ \/ ___/_____\__ \/ _ \/ ___/ | / / _ \/ ___/
+ / ___ |/ / / / ,< / /_____/__/ / /_/ / / / / /__/_____/__/ /  __/ /   | |/ /  __/ /    
+/_/  |_/_/ /_/_/|_/_/     /____/\__, /_/ /_/\___/     /____/\___/_/    |___/\___/_/     
+                               /____/                                                   

ct/immich.sh

@@ -113,7 +113,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="v3.2.2"
+  RELEASE="v3.2.4"
   if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     if [[ $(cat ~/.immich) > "2.5.1" ]]; then
       msg_info "Enabling Maintenance Mode"

ct/linkding.sh

@@ -32,6 +32,16 @@ function update_script() {
     exit
   fi
 
+  if grep -q 'alias /opt/linkding/static/;' /etc/nginx/sites-available/linkding 2>/dev/null; then
+    msg_info "Serving Favicons and Preview Images"
+    sed -i \
+      -e 's|location /static/ {|location ~ ^/static/(.*)$ {|' \
+      -e 's|alias /opt/linkding/static/;|root /opt/linkding;\n        try_files /static/$1 /data/favicons/$1 /data/previews/$1 =404;\n        add_header Content-Security-Policy "sandbox";|' \
+      /etc/nginx/sites-available/linkding
+    $STD systemctl reload nginx
+    msg_ok "Serving Favicons and Preview Images"
+  fi
+
   if check_for_gh_release "linkding" "sissbruecker/linkding"; then
     msg_info "Stopping Services"
     systemctl stop nginx linkding linkding-tasks

ct/romm.sh

@@ -56,6 +56,13 @@ function update_script() {
     msg_ok "Migrated RQ services"
   fi
 
+  if ! grep -q '^save ' /etc/redis/redis.conf; then
+    msg_info "Reducing Redis snapshot frequency"
+    echo 'save 3600 1' >>/etc/redis/redis.conf
+    $STD redis-cli CONFIG SET save "3600 1"
+    msg_ok "Reduced Redis snapshot frequency"
+  fi
+
   if check_for_gh_release "romm" "rommapp/romm"; then
     msg_info "Stopping Services"
     systemctl stop romm-backend romm-worker romm-scan-worker romm-scheduler romm-watcher

ct/sparkyfitness.sh

@@ -62,12 +62,14 @@ function update_script() {
 
     msg_info "Refreshing Nginx Config"
     FRONTEND_URL=$(grep -oP '^SPARKY_FITNESS_FRONTEND_URL=\K.*' /etc/sparkyfitness/.env)
+    NGINX_RESOLVER=$(awk '$1=="nameserver" {ns=$2; sub(/%.*/, "", ns); printf "%s%s", sep, (ns ~ /:/ ? "[" ns "]" : ns); sep=" "}' /etc/resolv.conf)
     sed \
       -e 's|${SPARKY_FITNESS_SERVER_HOST}|127.0.0.1|g' \
       -e 's|${SPARKY_FITNESS_SERVER_PORT}|3010|g' \
       -e "s|\${SPARKY_FITNESS_FRONTEND_URL}|${FRONTEND_URL}|g" \
       -e 's|${NGINX_LISTEN_PORT}|80|g' \
       -e 's|${NGINX_RATE_LIMIT}|5r/s|g' \
+      -e "s|\${NGINX_RESOLVER}|${NGINX_RESOLVER:-127.0.0.1}|g" \
       -e 's|${NGINX_ACCESS_LOG}|/var/log/nginx/sparkyfitness.access.log|g' \
       -e 's|${NGINX_ERROR_LOG}|/var/log/nginx/sparkyfitness.error.log|g' \
       -e 's|root /usr/share/nginx/html;|root /var/www/sparkyfitness;|g' \

ct/zipline.sh

@@ -39,7 +39,7 @@ function update_script() {
 
     mkdir -p /opt/zipline-uploads
     if [ -d /opt/zipline/uploads ] && [ "$(ls -A /opt/zipline/uploads)" ]; then
-      cp -R /opt/zipline/uploads/* /opt/zipline-uploads/
+      cp -R /opt/zipline/uploads/. /opt/zipline-uploads/
     fi
     cp /opt/zipline/.env /opt/
     rm -R /opt/zipline

install/anki-sync-server-install.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://docs.ankiweb.net/sync-server.html
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+UV_PYTHON="3.12" setup_uv
+
+msg_info "Installing Anki Sync Server"
+$STD uv venv --python 3.12 /opt/anki-sync-server/venv
+$STD uv pip install --python /opt/anki-sync-server/venv/bin/python "anki==$(get_latest_github_release "ankitects/anki")"
+cat <<EOF >~/.anki-sync-server
+$(get_latest_github_release "ankitects/anki")
+EOF
+msg_ok "Installed Anki Sync Server"
+
+msg_info "Configuring Anki Sync Server"
+mkdir -p /opt/anki-sync-server/data
+cat <<EOF >/opt/anki-sync-server/.env
+SYNC_USER1=anki:$(tr -d '-' </proc/sys/kernel/random/uuid)
+SYNC_BASE=/opt/anki-sync-server/data
+SYNC_HOST=0.0.0.0
+SYNC_PORT=8080
+EOF
+chmod 600 /opt/anki-sync-server/.env
+msg_ok "Configured Anki Sync Server"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/anki-sync-server.service
+[Unit]
+Description=Anki Sync Server
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/anki-sync-server
+EnvironmentFile=/opt/anki-sync-server/.env
+ExecStart=/opt/anki-sync-server/venv/bin/python -m anki.syncserver
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now anki-sync-server
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/autocaliweb-install.sh

@@ -266,6 +266,7 @@ Group=${SERVICE_GROUP}
 WorkingDirectory=${INSTALL_DIR}
 Environment=CALIBRE_DBPATH=${CONFIG_DIR}
 Environment=HOME=${CONFIG_DIR}
+EnvironmentFile=${INSTALL_DIR}/.env
 ExecStart=/bin/bash ${SCRIPTS_DIR}/ingest_watcher.sh
 Restart=always
 StandardOutput=journal
@@ -285,6 +286,7 @@ User=${SERVICE_USER}
 Group=${SERVICE_GROUP}
 WorkingDirectory=${INSTALL_DIR}
 Environment=CALIBRE_DBPATH=${CONFIG_DIR}
+EnvironmentFile=${INSTALL_DIR}/.env
 ExecStart=${SCRIPTS_DIR}/auto_zipper_wrapper.sh
 Restart=always
 StandardOutput=journal
@@ -303,6 +305,7 @@ After=network.target
 User=${SERVICE_USER}
 Group=${SERVICE_GROUP}
 WorkingDirectory=${INSTALL_DIR}
+EnvironmentFile=${INSTALL_DIR}/.env
 ExecStart=/bin/bash ${SCRIPTS_DIR}/metadata_change_detector_wrapper.sh
 Restart=always
 StandardOutput=journal

install/borg-ui-install.sh

@@ -111,7 +111,8 @@ Type=simple
 User=root
 WorkingDirectory=/opt/borg-ui
 EnvironmentFile=/opt/borg-ui/.env
-ExecStart=/opt/borg-ui/.venv/bin/gunicorn app.main:app --bind 0.0.0.0:8081 --workers 1 --worker-class uvicorn.workers.UvicornWorker --timeout 300
+Environment=BORG_UI_VENV=/opt/borg-ui/.venv
+ExecStart=/bin/bash /opt/borg-ui/packaging/native/start.sh
 Restart=on-failure
 RestartSec=5
 

install/checkmate-install.sh

@@ -21,7 +21,7 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 MONGO_VERSION="8.0" setup_mongodb
-NODE_VERSION="22" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 fetch_and_deploy_gh_release "checkmate" "bluewave-labs/Checkmate" "tarball"
 
 msg_info "Configuring Checkmate"

install/immich-install.sh

@@ -353,7 +353,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.2.2" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.2.4" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs

install/linkding-install.sh

@@ -101,8 +101,10 @@ server {
 
     client_max_body_size 20M;
 
-    location /static/ {
-        alias /opt/linkding/static/;
+    location ~ ^/static/(.*)$ {
+        root /opt/linkding;
+        try_files /static/$1 /data/favicons/$1 /data/previews/$1 =404;
+        add_header Content-Security-Policy "sandbox";
         expires 30d;
     }
 

install/plane-install.sh

@@ -43,9 +43,10 @@ $STD rabbitmqctl add_user plane "${RABBITMQ_PASS}"
 $STD rabbitmqctl set_permissions -p plane plane ".*" ".*" ".*"
 msg_ok "Configured RabbitMQ"
 
-msg_info "Installing MinIO"
-curl -fsSL https://dl.min.io/server/minio/release/linux-$(arch_resolve)/minio -o /usr/local/bin/minio
-chmod +x /usr/local/bin/minio
+fetch_and_deploy_gh_release "silo" "pgsty/silo" "prebuild" "latest" "/opt/silo" "silo_*_linux_$(arch_resolve).tar.gz"
+fetch_and_deploy_gh_release "mcli" "pgsty/mc" "prebuild" "latest" "/opt/mcli" "mcli_*_linux_$(arch_resolve).tar.gz"
+
+msg_info "Configuring Silo"
 mkdir -p /opt/minio/data
 MINIO_ACCESS_KEY=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
 MINIO_SECRET_KEY=$(openssl rand -base64 36 | tr -dc 'a-zA-Z0-9' | head -c32)
@@ -56,13 +57,13 @@ MINIO_VOLUMES="/opt/minio/data"
 EOF
 cat <<EOF >/etc/systemd/system/minio.service
 [Unit]
-Description=MinIO Object Storage
+Description=Silo Object Storage
 After=network.target
 
 [Service]
 Type=simple
 EnvironmentFile=/etc/default/minio
-ExecStart=/usr/local/bin/minio server \$MINIO_VOLUMES --console-address ":9090"
+ExecStart=/opt/silo/silo server \$MINIO_VOLUMES --console-address ":9090"
 Restart=on-failure
 RestartSec=5
 
@@ -70,7 +71,7 @@ RestartSec=5
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now minio
-msg_ok "Installed MinIO"
+msg_ok "Configured Silo"
 
 fetch_and_deploy_gh_release "plane" "makeplane/plane" "tarball"
 
@@ -175,12 +176,10 @@ $STD /opt/plane-venv/bin/python manage.py configure_instance
 $STD /opt/plane-venv/bin/python manage.py register_instance "${MACHINE_SIG}"
 msg_ok "Ran Database Migrations"
 
-msg_info "Creating Services and MinIO Bucket"
-curl -fsSL https://dl.min.io/client/mc/release/linux-$(arch_resolve)/mc -o /usr/local/bin/mcli
-chmod +x /usr/local/bin/mcli
-$STD /usr/local/bin/mcli alias set plane http://localhost:9000 "${MINIO_ACCESS_KEY}" "${MINIO_SECRET_KEY}"
-$STD /usr/local/bin/mcli mb plane/uploads --ignore-existing
-$STD /usr/local/bin/mcli anonymous set download plane/uploads
+msg_info "Creating Services and Bucket"
+$STD /opt/mcli/mcli alias set plane http://localhost:9000 "${MINIO_ACCESS_KEY}" "${MINIO_SECRET_KEY}"
+$STD /opt/mcli/mcli mb plane/uploads --ignore-existing
+$STD /opt/mcli/mcli anonymous set download plane/uploads
 
 cat <<EOF >/etc/systemd/system/plane-api.service
 [Unit]
@@ -279,7 +278,7 @@ MinIO Secret Key: ${MINIO_SECRET_KEY}
 Secret Key: ${SECRET_KEY}
 Config: /opt/plane/apps/api/.env
 EOF
-msg_ok "Created Services and MinIO Bucket"
+msg_ok "Created Services and Bucket"
 
 msg_info "Configuring Nginx"
 cat <<'EOF' >/etc/nginx/sites-available/plane.conf

install/romm-install.sh

@@ -167,6 +167,7 @@ echo "__version__ = \"$(cat ~/.romm)\"" >/opt/romm/backend/__version__.py
 
 msg_info "Creating environment file"
 sed -i 's/^supervised no/supervised systemd/' /etc/redis/redis.conf
+echo 'save 3600 1' >>/etc/redis/redis.conf
 systemctl restart redis-server
 systemctl enable -q --now redis-server
 AUTH_SECRET_KEY=$(openssl rand -hex 32)

install/sparkyfitness-install.sh

@@ -81,12 +81,14 @@ systemctl enable -q --now sparkyfitness-server
 msg_ok "Created SparkyFitness Service"
 
 msg_info "Configuring Nginx"
+NGINX_RESOLVER=$(awk '$1=="nameserver" {ns=$2; sub(/%.*/, "", ns); printf "%s%s", sep, (ns ~ /:/ ? "[" ns "]" : ns); sep=" "}' /etc/resolv.conf)
 sed \
   -e 's|${SPARKY_FITNESS_SERVER_HOST}|127.0.0.1|g' \
   -e 's|${SPARKY_FITNESS_SERVER_PORT}|3010|g' \
   -e "s|\${SPARKY_FITNESS_FRONTEND_URL}|http://${LOCAL_IP}:80|g" \
   -e 's|${NGINX_LISTEN_PORT}|80|g' \
   -e 's|${NGINX_RATE_LIMIT}|5r/s|g' \
+  -e "s|\${NGINX_RESOLVER}|${NGINX_RESOLVER:-127.0.0.1}|g" \
   -e 's|${NGINX_ACCESS_LOG}|/var/log/nginx/sparkyfitness.access.log|g' \
   -e 's|${NGINX_ERROR_LOG}|/var/log/nginx/sparkyfitness.error.log|g' \
   -e 's|root /usr/share/nginx/html;|root /var/www/sparkyfitness;|g' \