Move the first five high-traffic scripts onto the core engine

Today's engine work reaches 30 of 561 ct scripts, about 5% of ProxmoxVE traffic. The retry on engine downloads, exit 227 for a container that will not start, the umask fix that stops a hardened host producing unusable containers, the TMPDIR guard and the toolchain restore are all sitting where almost nobody runs them. Checked before touching anything, because "migrate" meant something much larger last time: - None of the eighteen remaining top-25 scripts has an alpine-* variant, so there is no merge to do -- unlike the earlier round. - No script references misc/ anywhere except its bootstrap line. - Comparing the two engines' function surfaces, 61 names exist only in misc/. None of the eighteen calls any of them. So it really is one line per script, and the head now matches the scripts migrated earlier byte for byte. Five in this wave rather than all eighteen, chosen as the lowest-volume of the set at roughly 170 installs a day each: enough traffic to surface a problem within a day, contained enough that a regression does not reach thousands. docker at 1255/day and the OS containers should follow only once this wave has run clean. immich and vaultwarden are deliberately not in it. Both already sit near 44% success, and migrating them now would change two variables at once with no way to attribute the result.
2026-08-31 12:35:54 +00:00 · 2026-08-25 10:28:24 +02:00
109 changed files with 279 additions and 3173 deletions
--- a/.github/changelogs/2026/08.md
+++ b/.github/changelogs/2026/08.md
@@ -1,131 +1,3 @@
-## 2026-08-29
-
-### 📚 Documentation
-
-  - github action: post the command that tests a ct/ or install/ change [@MickLesk](https://github.com/MickLesk) ([#16833](https://github.com/community-scripts/ProxmoxVE/pull/16833))
-
-## 2026-08-28
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - homepage: set CI=true so pnpm can self-heal node_modules without a TTY [@MickLesk](https://github.com/MickLesk) ([#16841](https://github.com/community-scripts/ProxmoxVE/pull/16841))
-    - droppedneedle: launch via automatic_upgrade orchestrator [@MickLesk](https://github.com/MickLesk) ([#16834](https://github.com/community-scripts/ProxmoxVE/pull/16834))
-    - calibre-web: point cps at explicit db path, src-layout package has no default anymore [@MickLesk](https://github.com/MickLesk) ([#16832](https://github.com/community-scripts/ProxmoxVE/pull/16832))
-    - podman: pull portainer images before systemd unit start to avoid start timeout [@MickLesk](https://github.com/MickLesk) ([#16831](https://github.com/community-scripts/ProxmoxVE/pull/16831))
-    - gitea: make gitea own its home dir instead of toggling group perms [@MickLesk](https://github.com/MickLesk) ([#16830](https://github.com/community-scripts/ProxmoxVE/pull/16830))
-    - pve-ups: fix: add pip binary  [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16820](https://github.com/community-scripts/ProxmoxVE/pull/16820))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Calibre-Web database creation [@MickLesk](https://github.com/MickLesk) ([#16842](https://github.com/community-scripts/ProxmoxVE/pull/16842))
-    - mastodon: read .ruby-version dynamically instead of hardcoding 4.0.5 [@MickLesk](https://github.com/MickLesk) ([#16829](https://github.com/community-scripts/ProxmoxVE/pull/16829))
-
-## 2026-08-27
-
-### 🆕 New Scripts
-
-  - Seanime ([#16777](https://github.com/community-scripts/ProxmoxVE/pull/16777))
- Yopass ([#16778](https://github.com/community-scripts/ProxmoxVE/pull/16778))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - excalidash: Add a sed to switch to the correct DB Provider [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16814](https://github.com/community-scripts/ProxmoxVE/pull/16814))
-    - fix(stirling-pdf): remove broken ExecStop using %n [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16813](https://github.com/community-scripts/ProxmoxVE/pull/16813))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Fix: Incorporate the new update functions to prevent a empty grep on … [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16809](https://github.com/community-scripts/ProxmoxVE/pull/16809))
-
-## 2026-08-26
-
-### 🆕 New Scripts
-
-  - CentOS ([#16772](https://github.com/community-scripts/ProxmoxVE/pull/16772))
- AlmaLinux ([#16771](https://github.com/community-scripts/ProxmoxVE/pull/16771))
- Fedora ([#16770](https://github.com/community-scripts/ProxmoxVE/pull/16770))
- Devuan ([#16773](https://github.com/community-scripts/ProxmoxVE/pull/16773))
- OpenEuler ([#16774](https://github.com/community-scripts/ProxmoxVE/pull/16774))
- Gentoo ([#16775](https://github.com/community-scripts/ProxmoxVE/pull/16775))
- openSUSE ([#16776](https://github.com/community-scripts/ProxmoxVE/pull/16776))
- Directus ([#16779](https://github.com/community-scripts/ProxmoxVE/pull/16779))
- HAProxy ([#16760](https://github.com/community-scripts/ProxmoxVE/pull/16760))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - [Fix]: LimeSurvey - enable Apache mod_rewrite [@jonathan8devs](https://github.com/jonathan8devs) ([#16767](https://github.com/community-scripts/ProxmoxVE/pull/16767))
-    - endurain: migrate legacy FRONTEND_DIR path on update [@MickLesk](https://github.com/MickLesk) ([#16794](https://github.com/community-scripts/ProxmoxVE/pull/16794))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: recognize bare XZ-compressed tarballs in fetch_and_deploy* [@MickLesk](https://github.com/MickLesk) ([#16796](https://github.com/community-scripts/ProxmoxVE/pull/16796))
-    - tools.func: fix mongodb version comparison, guard apt purge against removing dependents [@MickLesk](https://github.com/MickLesk) ([#16795](https://github.com/community-scripts/ProxmoxVE/pull/16795))
-
-### 📂 Github
-
-  - github: teach the PocketBase bot every field [@MickLesk](https://github.com/MickLesk) ([#16781](https://github.com/community-scripts/ProxmoxVE/pull/16781))
-
-## 2026-08-25
-
-### 🆕 New Scripts
-
-  - Budget-Board ([#16714](https://github.com/community-scripts/ProxmoxVE/pull/16714))
- Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
- pyLoad ([#16717](https://github.com/community-scripts/ProxmoxVE/pull/16717))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(apache-tika): handle upstream's switch from jar to zip distribution [@Munza2020](https://github.com/Munza2020) ([#16726](https://github.com/community-scripts/ProxmoxVE/pull/16726))
-    - Fix Firecrawl install: add ccache dependency for koffi native build [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16746](https://github.com/community-scripts/ProxmoxVE/pull/16746))
-    - excalidash: Fix broken Update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16747](https://github.com/community-scripts/ProxmoxVE/pull/16747))
-
-  - #### 💥 Breaking Changes
-
-    - Migrate the (remaining) Top 25 scripts to the new core engine [@MickLesk](https://github.com/MickLesk) ([#16749](https://github.com/community-scripts/ProxmoxVE/pull/16749))
-
-## 2026-08-24
-
-### 🆕 New Scripts
-
-  - ArchLinux ([#16715](https://github.com/community-scripts/ProxmoxVE/pull/16715))
- AirTrail ([#16713](https://github.com/community-scripts/ProxmoxVE/pull/16713))
- RockyLinux ([#16718](https://github.com/community-scripts/ProxmoxVE/pull/16718))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Add setup_mongodb back in Omada [@lucacome](https://github.com/lucacome) ([#16736](https://github.com/community-scripts/ProxmoxVE/pull/16736))
-    - fireshare: source fireshare.env during update [@MickLesk](https://github.com/MickLesk) ([#16706](https://github.com/community-scripts/ProxmoxVE/pull/16706))
-    - netbox: serve on plain HTTP too, port 80 forced HTTPS redirect broke reverse proxies [@MickLesk](https://github.com/MickLesk) ([#16707](https://github.com/community-scripts/ProxmoxVE/pull/16707))
-    - FileFlows: Fix Download URL [@MickLesk](https://github.com/MickLesk) ([#16708](https://github.com/community-scripts/ProxmoxVE/pull/16708))
-    - Gitea: fix git-over-SSH auth, group-writable home dir tripped sshd StrictModes [@MickLesk](https://github.com/MickLesk) ([#16710](https://github.com/community-scripts/ProxmoxVE/pull/16710))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - post-pve/pbs-install: fix component_exists_in_sources matching substrings of hyphenated tokens [@MickLesk](https://github.com/MickLesk) ([#16709](https://github.com/community-scripts/ProxmoxVE/pull/16709))
-
-## 2026-08-23
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Set default ProxmoxVE raw URL in PVE-UPS & fix var_cpu sorting  [@MickLesk](https://github.com/MickLesk) ([#16689](https://github.com/community-scripts/ProxmoxVE/pull/16689))
-
 ## 2026-08-22

 ### 🆕 New Scripts
--- a/.github/workflows/pocketbase-bot.yml
+++ b/.github/workflows/pocketbase-bot.yml
@@ -33,10 +33,6 @@ jobs:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          FRONTEND_URL: ${{ secrets.FRONTEND_URL }}
          REVALIDATE_SECRET: ${{ secrets.REVALIDATE_SECRET }}
-          # Screenshot attaching is delegated to the frontend, which owns the
-          # fetching and validation. Without this the subcommand says so rather
-          # than failing halfway.
-          SCREENSHOT_IMPORT_SECRET: ${{ secrets.SCREENSHOT_IMPORT_SECRET }}
        run: |
          node << 'ENDSCRIPT'
          (async function () {
@@ -327,21 +323,11 @@ jobs:
              '/pocketbase <slug> method remove <type>\n' +
              '```\n' +
              'Method fields: `cpu` `ram` `hdd` `os` `version` `config_path` `script`\n\n' +
-              '`cpu` `ram` `hdd` `os` `version` also work without `method` — they go to the\n' +
-              'default install method, e.g. `/pocketbase <slug> hdd=25`\n\n' +
              '**Editable fields:** `name` `description` `logo` `documentation` `website` `project_url` `repository` ' +
              '`config_path` `port` `default_user` `default_passwd` ' +
-              '`updateable` `privileged` `is_dev` `has_arm` ' +
+              '`updateable` `privileged` `is_dev` ' +
              '`architectures` (amd64,arm64) `platforms` (pve,incus) ' +
-              '`execute_in` (pve,lxc,pbs,vm,pmg,pdm) `categories` (names or ids) ' +
-              '`type` (ct, vm, addon, …) ' +
-              '`is_disabled` `disable_message` `is_deleted` `deleted_message`\n\n' +
-              '**Screenshots:**\n' +
-              '```\n' +
-              '/pocketbase <slug> screenshot https://example.com/one.png https://example.com/two.png\n' +
-              '```\n\n' +
-              '`slug` is deliberately not editable: it is the URL, the JSON filename and the\n' +
-              'ct/<slug>.sh path all at once, so renaming it is a migration rather than an edit.';
+              '`is_disabled` `disable_message` `is_deleted` `deleted_message`';

            if (!withoutCmd) {
              await addReaction('-1');
@@ -504,7 +490,6 @@ jobs:
            const noteMatch   = rest.match(/^note\s+(list|add|edit|remove)\b/i);
            const methodMatch = rest.match(/^method\b/i);
            const setMatch    = rest.match(/^set\s+(\S+)/i);
-            const shotMatch   = rest.match(/^screenshots?\s+(.+)$/i);

            if (infoMatch) {
              // ── INFO SUBCOMMAND ──────────────────────────────────────────────
@@ -550,44 +535,6 @@ jobs:
              await addReaction('+1');
              await postComment(out.join('\n'));

-            } else if (shotMatch) {
-              // ── SCREENSHOT SUBCOMMAND ────────────────────────────────────────
-              // Delegated to the frontend rather than reimplemented here: it
-              // already fetches the URL, checks the content type and size, and
-              // attaches the file to PocketBase. Doing that a second time in a
-              // workflow would be a second set of bugs.
-              const shotUrls = shotMatch[1].split(/[\s,]+/).map(function (u) { return u.trim(); }).filter(Boolean);
-              const bad = shotUrls.filter(function (u) { return !/^https?:\/\//i.test(u); });
-              if (bad.length > 0) {
-                await addReaction('-1');
-                await postComment('❌ **PocketBase Bot**: not a URL: `' + bad.join('`, `') + '`');
-                process.exit(0);
-              }
-              const frontendUrl = process.env.FRONTEND_URL;
-              const shotSecret = process.env.SCREENSHOT_IMPORT_SECRET;
-              if (!frontendUrl || !shotSecret) {
-                await addReaction('-1');
-                await postComment('❌ **PocketBase Bot**: screenshot import is not configured (FRONTEND_URL / SCREENSHOT_IMPORT_SECRET).');
-                process.exit(1);
-              }
-              const shotRes = await request(frontendUrl.replace(/\/$/, '') + '/api/screenshots', {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ slug: slug, secret: shotSecret, urls: shotUrls })
-              });
-              if (!shotRes.ok) {
-                await addReaction('-1');
-                await postComment('❌ **PocketBase Bot**: screenshot import failed:\n```\n' + shotRes.body + '\n```');
-                process.exit(1);
-              }
-              await revalidate(slug);
-              await addReaction('+1');
-              await postComment(
-                '✅ **PocketBase Bot**: attached ' + shotUrls.length + ' screenshot' + (shotUrls.length === 1 ? '' : 's') +
-                ' to **`' + slug + '`**\n\n' + shotUrls.map(function (u) { return '- ' + u; }).join('\n') +
-                '\n\n*Executed by @' + actor + '*'
-              );
-
            } else if (noteMatch) {
              // ── NOTE SUBCOMMAND ──────────────────────────────────────────────
              const noteAction  = noteMatch[1].toLowerCase();
@@ -891,20 +838,15 @@ jobs:
            } else if (setMatch) {
              // ── SET SUBCOMMAND (value from code block) ───────────────────────
              const fieldName = setMatch[1].toLowerCase();
-              // app_vars is a JSON column, so it rides the code-block path like
-              // the long text fields - but its content is parsed, not stored
-              // verbatim, or PocketBase ends up with a string where an object
-              // belongs and every reader has to guess.
              const SET_ALLOWED = {
                name: 'string', description: 'string', logo: 'string',
                documentation: 'string', website: 'string', project_url: 'string', repository: 'string',
-                config_path: 'string', disable_message: 'string', deleted_message: 'string',
-                app_vars: 'json'
+                config_path: 'string', disable_message: 'string', deleted_message: 'string'
              };
              if (!SET_ALLOWED[fieldName]) {
                await addReaction('-1');
                await postComment(
-                  '❌ **PocketBase Bot**: `set` only supports text and JSON fields.\n\n' +
+                  '❌ **PocketBase Bot**: `set` only supports text fields.\n\n' +
                  '**Allowed:** `' + Object.keys(SET_ALLOWED).join('`, `') + '`\n\n' +
                  'For boolean/number fields use `field=value` syntax instead.'
                );
@@ -919,21 +861,7 @@ jobs:
                process.exit(0);
              }
              const setPayload = {};
-              if (SET_ALLOWED[fieldName] === 'json') {
-                let parsedJson;
-                try {
-                  parsedJson = JSON.parse(codeBlockValue);
-                } catch (e) {
-                  await addReaction('-1');
-                  await postComment(
-                    '❌ **PocketBase Bot**: `' + fieldName + '` must be valid JSON.\n\n```\n' + e.message + '\n```'
-                  );
-                  process.exit(0);
-                }
-                setPayload[fieldName] = parsedJson;
-              } else {
-                setPayload[fieldName] = codeBlockValue;
-              }
+              setPayload[fieldName] = codeBlockValue;
              const setPatchRes = await request(recordsUrl + '/' + record.id, {
                method: 'PATCH',
                headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -973,10 +901,6 @@ jobs:
                privileged:       'boolean',
                architectures:    'select_list',
                platforms:        'select_list',
-                execute_in:       'select_list',
-                has_arm:          'boolean',
-                categories:       'relation_list',
-                type:             'relation_single',
                is_dev:           'boolean',
                is_disabled:      'boolean',
                disable_message:  'string',
@@ -986,18 +910,7 @@ jobs:

              const parsedFields = parseKVPairs(rest);

-              // cpu/ram/hdd/os/version live inside install_methods, not on the
-              // record itself. "/pocketbase immich hdd=25" is how people ask for
-              // it, so route those keys there instead of rejecting them as
-              // unknown fields. Everything else stays a plain record field.
-              const TOP_RESOURCE_KEYS = { cpu: 'number', ram: 'number', hdd: 'number', os: 'string', version: 'string' };
-              const resourceFields = {};
-              const scriptFields = {};
-              for (const [rk, rv] of Object.entries(parsedFields)) {
-                if (TOP_RESOURCE_KEYS[rk]) resourceFields[rk] = rv; else scriptFields[rk] = rv;
-              }
-
-              const unknownFields = Object.keys(scriptFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
+              const unknownFields = Object.keys(parsedFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
              if (unknownFields.length > 0) {
                await addReaction('-1');
                await postComment(
@@ -1017,10 +930,9 @@ jobs:
              const SELECT_VALUES = {
                architectures: ['amd64', 'arm64'],
                platforms: ['pve', 'incus'],
-                execute_in: ['pve', 'lxc', 'pbs', 'vm', 'pmg', 'pdm'],
              };
              const payload = {};
-              for (const [key, rawVal] of Object.entries(scriptFields)) {
+              for (const [key, rawVal] of Object.entries(parsedFields)) {
                const type = ALLOWED_FIELDS[key];
                if (type === 'boolean') {
                  if (rawVal === 'true') payload[key] = true;
@@ -1050,65 +962,6 @@ jobs:
                    process.exit(0);
                  }
                  payload[key] = values;
-                } else if (type === 'relation_list') {
-                  // categories is a relation, so the stored value is a list of
-                  // record ids. People write category names, so resolve them —
-                  // and accept ids too, which is what a copy out of the
-                  // PocketBase UI gives you.
-                  const wanted = rawVal.split(',').map(function (v) { return v.trim(); }).filter(Boolean);
-                  const catRes = await request(apiBase + '/collections/script_categories/records?perPage=500&fields=id,name', {
-                    headers: { 'Authorization': token }
-                  });
-                  if (!catRes.ok) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: could not read `script_categories` to resolve `' + key + '`.');
-                    process.exit(1);
-                  }
-                  const cats = JSON.parse(catRes.body).items || [];
-                  const byName = {};
-                  const ids = {};
-                  cats.forEach(function (c) { byName[String(c.name).toLowerCase()] = c.id; ids[c.id] = true; });
-                  const resolved = [];
-                  const unknownCats = [];
-                  wanted.forEach(function (w) {
-                    if (ids[w]) { resolved.push(w); return; }
-                    const id = byName[w.toLowerCase()];
-                    if (id) resolved.push(id); else unknownCats.push(w);
-                  });
-                  if (unknownCats.length > 0) {
-                    await addReaction('-1');
-                    await postComment(
-                      '❌ **PocketBase Bot**: unknown ' + key + ': `' + unknownCats.join('`, `') + '`\n\n' +
-                      '**Available:** `' + cats.map(function (c) { return c.name; }).sort().join('`, `') + '`'
-                    );
-                    process.exit(0);
-                  }
-                  payload[key] = resolved;
-                } else if (type === 'relation_single') {
-                  // type points at one z_ref_script_types record. People write
-                  // "ct" or "vm", not a 15-character id.
-                  const typeRes = await request(apiBase + '/collections/z_ref_script_types/records?perPage=200&fields=id,type', {
-                    headers: { 'Authorization': token }
-                  });
-                  if (!typeRes.ok) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: could not read `z_ref_script_types` to resolve `' + key + '`.');
-                    process.exit(1);
-                  }
-                  const types = JSON.parse(typeRes.body).items || [];
-                  const wantType = rawVal.trim().toLowerCase();
-                  const hit = types.find(function (t) {
-                    return t.id === rawVal.trim() || String(t.type).toLowerCase() === wantType;
-                  });
-                  if (!hit) {
-                    await addReaction('-1');
-                    await postComment(
-                      '❌ **PocketBase Bot**: unknown type `' + rawVal + '`\n\n' +
-                      '**Available:** `' + types.map(function (t) { return t.type; }).sort().join('`, `') + '`'
-                    );
-                    process.exit(0);
-                  }
-                  payload[key] = hit.id;
                } else if (type === 'nullable_string') {
                  payload[key] = rawVal === '' ? null : rawVal;
                } else {
@@ -1116,42 +969,6 @@ jobs:
                }
              }

-              // Resources go into install_methods. Which method: the only one if
-              // there is only one, otherwise the non-Alpine default — and the
-              // reply says which, so nobody has to guess where 25 GB landed.
-              const resourceKeys = Object.keys(resourceFields);
-              let resourceTargetType = null;
-              if (resourceKeys.length > 0) {
-                const methodsArr = readJsonBlob(record.install_methods) || [];
-                if (methodsArr.length === 0) {
-                  await addReaction('-1');
-                  await postComment(
-                    '❌ **PocketBase Bot**: `' + slug + '` has no install methods, so there is nowhere to put `' +
-                    resourceKeys.join('`, `') + '`.\n\nAdd one first: `/pocketbase ' + slug + ' method add default cpu=2 ram=2048 hdd=8`'
-                  );
-                  process.exit(0);
-                }
-                let target = methodsArr.find(function (m) {
-                  return String(m.type || '').toLowerCase() !== 'alpine';
-                }) || methodsArr[0];
-                resourceTargetType = target.type || 'default';
-                if (!target.resources) target.resources = {};
-                for (const [rk, rv] of Object.entries(resourceFields)) {
-                  if (TOP_RESOURCE_KEYS[rk] === 'number') {
-                    const n = parseInt(rv, 10);
-                    if (isNaN(n)) {
-                      await addReaction('-1');
-                      await postComment('❌ **PocketBase Bot**: `' + rk + '` must be a number, got: `' + rv + '`');
-                      process.exit(0);
-                    }
-                    target.resources[rk] = n;
-                  } else {
-                    target.resources[rk] = rv;
-                  }
-                }
-                payload.install_methods = methodsArr;
-              }
-
              const patchRes = await request(recordsUrl + '/' + record.id, {
                method: 'PATCH',
                headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -1164,16 +981,10 @@ jobs:
              }
              await revalidate(slug);
              const FIELD_TO_CT_VAR = { tags: 'var_tags', unprivileged: 'var_unprivileged' };
-              const RESOURCE_CT_VAR = { cpu: 'var_cpu', ram: 'var_ram', hdd: 'var_disk', os: 'var_os', version: 'var_version' };
              const fieldCtChanges = {};
              for (const [k, v] of Object.entries(payload)) {
                if (FIELD_TO_CT_VAR[k]) fieldCtChanges[FIELD_TO_CT_VAR[k]] = v;
              }
-              // Resources belong in the CT script too, exactly as the `method`
-              // path syncs them - otherwise PocketBase and ct/<slug>.sh drift.
-              for (const [k, v] of Object.entries(resourceFields)) {
-                if (RESOURCE_CT_VAR[k]) fieldCtChanges[RESOURCE_CT_VAR[k]] = v;
-              }
              let fieldCtSync = null;
              try {
                fieldCtSync = await upsertCtDefaultsPr(slug, fieldCtChanges);
@@ -1181,14 +992,8 @@ jobs:
                fieldCtSync = { status: 'skipped', reason: 'CT sync failed: ' + e.message };
              }
              await addReaction('+1');
-              // install_methods is skipped here: dumping the whole array as JSON
-              // buries the one number that actually changed.
              const changesLines = Object.entries(payload)
-                .filter(function (e) { return e[0] !== 'install_methods'; })
                .map(function ([k, v]) { return '- `' + k + '` → `' + JSON.stringify(v) + '`'; })
-                .concat(Object.entries(resourceFields).map(function ([k, v]) {
-                  return '- `' + k + '` → `' + v + '` *(install method `' + resourceTargetType + '`)*';
-                }))
                .join('\n');
              await postComment(
                '✅ **PocketBase Bot**: Updated **`' + slug + '`** successfully!\n\n' +
--- a/.github/workflows/pr-test-command.yml
+++ b/.github/workflows/pr-test-command.yml
@@ -1,171 +0,0 @@
-name: PR test command
-
-# Posts a ready-to-run test command for reviewers.
-# It uses this PR’s script branch with the production engine, since both resolve
-# independently. Only scripts using community-scripts/core are supported.
-#
-# pull_request_target allows comments on fork PRs. No PR code is checked out or
-# executed; API inputs are validated and the comment is assembled in JavaScript.
-
-on:
-  pull_request_target:
-    branches: ["main"]
-    types: [opened, synchronize, reopened]
-    paths:
-      - "ct/**"
-      - "install/**"
-
-jobs:
-  comment:
-    if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: self-hosted
-    permissions:
-      pull-requests: write
-      contents: read
-    steps:
-      - uses: actions/github-script@v9
-        with:
-          script: |
-            const MARKER = '<!-- pr-test-command -->';
-            const MAX_APPS = 10;
-
-            const pr = context.payload.pull_request;
-            const head = pr.head.repo;            // null when the fork is gone
-            if (!head) return;
-
-            const owner = context.repo.owner;
-            const repo = context.repo.repo;
-
-            // Git allows backticks in a ref name, and this one ends up inside a
-            // fenced block. Anything outside the ordinary set is not worth
-            // rendering, so bail rather than escape.
-            const ref = pr.head.ref;
-            if (!/^[A-Za-z0-9._\/-]+$/.test(ref)) return;
-            const base = `https://raw.githubusercontent.com/${head.full_name}/${ref}`;
-
-            const files = await github.paginate(github.rest.pulls.listFiles, {
-              owner, repo, pull_number: pr.number, per_page: 100,
-            });
-
-            // ct/foo.sh and install/foo-install.sh are the same app. A removed
-            // file has nothing left to run.
-            const apps = new Map();               // slug -> {ct, install}
-            for (const f of files) {
-              if (f.status === 'removed') continue;
-              let m = f.filename.match(/^ct\/([a-z0-9][a-z0-9._-]*)\.sh$/);
-              if (m) { apps.set(m[1], { ...apps.get(m[1]), ct: true }); continue; }
-              m = f.filename.match(/^install\/([a-z0-9][a-z0-9._-]*)-install\.sh$/);
-              if (m) apps.set(m[1], { ...apps.get(m[1]), install: true });
-            }
-            if (apps.size === 0) return;
-
-            // Read the ct script at the PR head to see which engine it loads.
-            // Read only -- it is never sourced or run.
-            async function bootstrapOf(slug) {
-              try {
-                const res = await github.rest.repos.getContent({
-                  owner: head.owner.login, repo: head.name,
-                  path: `ct/${slug}.sh`, ref: pr.head.sha,
-                });
-                if (!res.data.content) return 'unknown';
-                const text = Buffer.from(res.data.content, 'base64').toString('utf8');
-                const firstLines = text.split('\n').slice(0, 12).join('\n');
-                return /_cs_boot=/.test(firstLines) ? 'core' : 'legacy';
-              } catch (e) {
-                return e.status === 404 ? 'missing' : 'unknown';
-              }
-            }
-
-            const ready = [], legacy = [], missing = [];
-            for (const slug of [...apps.keys()].sort()) {
-              const kind = await bootstrapOf(slug);
-              if (kind === 'core') ready.push(slug);
-              else if (kind === 'legacy') legacy.push(slug);
-              else if (kind === 'missing') missing.push(slug);
-            }
-
-            const lines = [MARKER];
-
-            if (ready.length > 0) {
-              const shown = ready.slice(0, MAX_APPS);
-              lines.push(
-                '### Try this branch',
-                '',
-                'The engine and the scripts resolve independently, so this runs the changed',
-                '`ct/` and `install/` scripts against the **production** engine:',
-                '',
-              );
-              for (const slug of shown) {
-                lines.push(
-                  '```bash',
-                  `export COMMUNITY_SCRIPTS_URL=${base}`,
-                  `bash -c "$(curl -fsSL "$COMMUNITY_SCRIPTS_URL/ct/${slug}.sh")"`,
-                  '```',
-                  '',
-                );
-              }
-              if (ready.length > shown.length) {
-                lines.push(
-                  `${ready.length - shown.length} more script(s) changed; same command, different slug.`,
-                  '',
-                );
-              }
-              lines.push(
-                'Both lines are needed. Each script pins `_CS_DEFAULT_URL` to `main`, and that',
-                'pin is what fills `COMMUNITY_SCRIPTS_URL` when the variable is unset — so',
-                'curling the branch URL on its own gives you the `ct/` script from this PR and',
-                'the `install/` script from `main`. Frequently the one you meant to test.',
-                '',
-                'The same command works on an Incus host: the engine detects the platform and',
-                'loads the matching backend, while the scripts still come from this branch.',
-                '',
-                '<details><summary>Useful while testing</summary>',
-                '',
-                '`dev_mode=net` logs every fetch with status and URL, which is the quickest way',
-                'to confirm the branch is really being used. `dev_mode=keep` stops a failed',
-                'build from deleting the container along with the evidence.',
-                '',
-                '```bash',
-                `export COMMUNITY_SCRIPTS_URL=${base}`,
-                `dev_mode=net,keep bash -c "$(curl -fsSL "$COMMUNITY_SCRIPTS_URL/ct/${shown[0]}.sh")"`,
-                '```',
-                '</details>',
-              );
-            }
-
-            if (legacy.length > 0) {
-              lines.push(
-                '',
-                ready.length > 0 ? '---' : '### Not testable this way yet',
-                '',
-                `\`${legacy.join('`, `')}\` still uses the older one-liner bootstrap, which`,
-                'resolves everything from `ProxmoxVE/main` and ignores `COMMUNITY_SCRIPTS_URL`.',
-                'There is no way to point it at this branch — test it from a checkout on the',
-                'host instead, or migrate the script to the `_cs_boot` bootstrap first.',
-              );
-            }
-
-            if (missing.length > 0) {
-              lines.push(
-                '',
-                `No \`ct/\` script found for \`${missing.join('`, `')}\`, so there is nothing to`,
-                'run. If the install script was renamed, its `ct/` counterpart needs the same',
-                'name.',
-              );
-            }
-
-            if (lines.length === 1) return;   // marker only, nothing worth saying
-            const body = lines.join('\n');
-
-            // Update in place rather than posting again on every push.
-            const comments = await github.paginate(github.rest.issues.listComments, {
-              owner, repo, issue_number: pr.number, per_page: 100,
-            });
-            const mine = comments.find(c => c.body.includes(MARKER));
-            if (mine) {
-              if (mine.body !== body) {
-                await github.rest.issues.updateComment({ owner, repo, comment_id: mine.id, body });
-              }
-            } else {
-              await github.rest.issues.createComment({ owner, repo, issue_number: pr.number, body });
-            }
--- a/.github/workflows/sync-to-incus.yml
+++ b/.github/workflows/sync-to-incus.yml
@@ -1,56 +0,0 @@
-name: Sync ct/install to Incus
-
-# When a ct/*.sh or install/*.sh file changes on main, trigger the Incus repo's
-# own sync workflow immediately instead of waiting for its daily 04:00 cron.
-#
-# The actual mirroring + transformation lives in community-scripts/Incus
-# (.github/workflows/sync-scripts.yml): it rewrites each script's bootstrap line
-# to load the engine from community-scripts/core (ProxmoxVE's misc/build.func is
-# a monolith with no Incus backend), so a plain 1:1 copy would break every Incus
-# script. We therefore only fire a repository_dispatch and let that single
-# source of truth do the work (and auto-approve + merge its own PR).
-#
-# Auth: the "push-app-to-main" GitHub App (vars.PUSH_MAIN_APP_ID /
-# secrets.PUSH_MAIN_APP_SECRET), scoped to community-scripts/Incus. It has
-# contents:write, which repository_dispatch requires (community-scripts-pr-app
-# only has pull_requests:write, so it cannot dispatch). The app must be
-# installed on the Incus repo.
-
-on:
-  push:
-    branches:
-      - main
-    paths:
-      - "ct/**.sh"
-      - "install/**.sh"
-  workflow_dispatch:
-
-concurrency:
-  group: sync-to-incus
-  cancel-in-progress: false
-
-jobs:
-  dispatch:
-    if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: ubuntu-latest
-    steps:
-      - name: Generate token (dispatch to Incus)
-        id: token
-        uses: actions/create-github-app-token@v3
-        with:
-          app-id: ${{ vars.PUSH_MAIN_APP_ID }}
-          private-key: ${{ secrets.PUSH_MAIN_APP_SECRET }}
-          owner: community-scripts
-          repositories: Incus
-
-      - name: Trigger Incus sync workflow
-        env:
-          GH_TOKEN: ${{ steps.token.outputs.token }}
-          SOURCE_SHA: ${{ github.sha }}
-        run: |
-          set -euo pipefail
-          echo "Dispatching proxmoxve-scripts-changed to community-scripts/Incus (from ${SOURCE_SHA})"
-          gh api repos/community-scripts/Incus/dispatches \
-            -X POST \
-            -f "event_type=proxmoxve-scripts-changed" \
-            -F "client_payload[sha]=${SOURCE_SHA}"
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -95,9 +95,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit



-
-
-



@@ -111,7 +108,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit


 <details>
-<summary><h4>August (29 entries)</h4></summary>
+<summary><h4>August (22 entries)</h4></summary>

 [View August 2026 Changelog](.github/changelogs/2026/08.md)

@@ -530,130 +527,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-08-31
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - node-red: remove --unsafe-perm flag [@MickLesk](https://github.com/MickLesk) ([#16859](https://github.com/community-scripts/ProxmoxVE/pull/16859))
-    - directus: add build-essential dependency [@MickLesk](https://github.com/MickLesk) ([#16858](https://github.com/community-scripts/ProxmoxVE/pull/16858))
-
-  - #### 🔧 Refactor
-
-    - Refactor: OpenGist [@MickLesk](https://github.com/MickLesk) ([#16861](https://github.com/community-scripts/ProxmoxVE/pull/16861))
-
-## 2026-08-30
-
-### 🆕 New Scripts
-
-  - SolidInvoice ([#16869](https://github.com/community-scripts/ProxmoxVE/pull/16869))
- Super-Productivity ([#16870](https://github.com/community-scripts/ProxmoxVE/pull/16870))
- Defguard ([#16871](https://github.com/community-scripts/ProxmoxVE/pull/16871))
- OpenBao ([#16872](https://github.com/community-scripts/ProxmoxVE/pull/16872))
-
-### 🚀 Updated Scripts
-
-  - #### 🔧 Refactor
-
-    - general: remove gitea links overall  [@MickLesk](https://github.com/MickLesk) ([#16863](https://github.com/community-scripts/ProxmoxVE/pull/16863))
-
-## 2026-08-29
-
-### 📚 Documentation
-
-  - github action: post the command that tests a ct/ or install/ change [@MickLesk](https://github.com/MickLesk) ([#16833](https://github.com/community-scripts/ProxmoxVE/pull/16833))
-
-## 2026-08-28
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - homepage: set CI=true so pnpm can self-heal node_modules without a TTY [@MickLesk](https://github.com/MickLesk) ([#16841](https://github.com/community-scripts/ProxmoxVE/pull/16841))
-    - droppedneedle: launch via automatic_upgrade orchestrator [@MickLesk](https://github.com/MickLesk) ([#16834](https://github.com/community-scripts/ProxmoxVE/pull/16834))
-    - calibre-web: point cps at explicit db path, src-layout package has no default anymore [@MickLesk](https://github.com/MickLesk) ([#16832](https://github.com/community-scripts/ProxmoxVE/pull/16832))
-    - podman: pull portainer images before systemd unit start to avoid start timeout [@MickLesk](https://github.com/MickLesk) ([#16831](https://github.com/community-scripts/ProxmoxVE/pull/16831))
-    - gitea: make gitea own its home dir instead of toggling group perms [@MickLesk](https://github.com/MickLesk) ([#16830](https://github.com/community-scripts/ProxmoxVE/pull/16830))
-    - pve-ups: fix: add pip binary  [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16820](https://github.com/community-scripts/ProxmoxVE/pull/16820))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Calibre-Web database creation [@MickLesk](https://github.com/MickLesk) ([#16842](https://github.com/community-scripts/ProxmoxVE/pull/16842))
-    - mastodon: read .ruby-version dynamically instead of hardcoding 4.0.5 [@MickLesk](https://github.com/MickLesk) ([#16829](https://github.com/community-scripts/ProxmoxVE/pull/16829))
-
-## 2026-08-27
-
-### 🆕 New Scripts
-
-  - Seanime ([#16777](https://github.com/community-scripts/ProxmoxVE/pull/16777))
- Yopass ([#16778](https://github.com/community-scripts/ProxmoxVE/pull/16778))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - excalidash: Add a sed to switch to the correct DB Provider [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16814](https://github.com/community-scripts/ProxmoxVE/pull/16814))
-    - fix(stirling-pdf): remove broken ExecStop using %n [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16813](https://github.com/community-scripts/ProxmoxVE/pull/16813))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Fix: Incorporate the new update functions to prevent a empty grep on … [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16809](https://github.com/community-scripts/ProxmoxVE/pull/16809))
-
-## 2026-08-26
-
-### 🆕 New Scripts
-
-  - CentOS ([#16772](https://github.com/community-scripts/ProxmoxVE/pull/16772))
- AlmaLinux ([#16771](https://github.com/community-scripts/ProxmoxVE/pull/16771))
- Fedora ([#16770](https://github.com/community-scripts/ProxmoxVE/pull/16770))
- Devuan ([#16773](https://github.com/community-scripts/ProxmoxVE/pull/16773))
- OpenEuler ([#16774](https://github.com/community-scripts/ProxmoxVE/pull/16774))
- Gentoo ([#16775](https://github.com/community-scripts/ProxmoxVE/pull/16775))
- openSUSE ([#16776](https://github.com/community-scripts/ProxmoxVE/pull/16776))
- Directus ([#16779](https://github.com/community-scripts/ProxmoxVE/pull/16779))
- HAProxy ([#16760](https://github.com/community-scripts/ProxmoxVE/pull/16760))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - [Fix]: LimeSurvey - enable Apache mod_rewrite [@jonathan8devs](https://github.com/jonathan8devs) ([#16767](https://github.com/community-scripts/ProxmoxVE/pull/16767))
-    - endurain: migrate legacy FRONTEND_DIR path on update [@MickLesk](https://github.com/MickLesk) ([#16794](https://github.com/community-scripts/ProxmoxVE/pull/16794))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: recognize bare XZ-compressed tarballs in fetch_and_deploy* [@MickLesk](https://github.com/MickLesk) ([#16796](https://github.com/community-scripts/ProxmoxVE/pull/16796))
-    - tools.func: fix mongodb version comparison, guard apt purge against removing dependents [@MickLesk](https://github.com/MickLesk) ([#16795](https://github.com/community-scripts/ProxmoxVE/pull/16795))
-
-### 📂 Github
-
-  - github: teach the PocketBase bot every field [@MickLesk](https://github.com/MickLesk) ([#16781](https://github.com/community-scripts/ProxmoxVE/pull/16781))
-
-## 2026-08-25
-
-### 🆕 New Scripts
-
-  - Budget-Board ([#16714](https://github.com/community-scripts/ProxmoxVE/pull/16714))
- Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
- pyLoad ([#16717](https://github.com/community-scripts/ProxmoxVE/pull/16717))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(apache-tika): handle upstream's switch from jar to zip distribution [@Munza2020](https://github.com/Munza2020) ([#16726](https://github.com/community-scripts/ProxmoxVE/pull/16726))
-    - Fix Firecrawl install: add ccache dependency for koffi native build [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16746](https://github.com/community-scripts/ProxmoxVE/pull/16746))
-    - excalidash: Fix broken Update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16747](https://github.com/community-scripts/ProxmoxVE/pull/16747))
-
-  - #### 💥 Breaking Changes
-
-    - Migrate the (remaining) Top 25 scripts to the new core engine [@MickLesk](https://github.com/MickLesk) ([#16749](https://github.com/community-scripts/ProxmoxVE/pull/16749))
-
 ## 2026-08-24

 ### 🆕 New Scripts
@@ -1127,4 +1000,183 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
  - #### 🐞 Bug Fixes

    - Docmost: cleanup folder at update [@MickLesk](https://github.com/MickLesk) ([#16177](https://github.com/community-scripts/ProxmoxVE/pull/16177))
-    - Firecrawl: Add dependency [@tremor021](https://github.com/tremor021) ([#16174](https://github.com/community-scripts/ProxmoxVE/pull/16174))
+    - Firecrawl: Add dependency [@tremor021](https://github.com/tremor021) ([#16174](https://github.com/community-scripts/ProxmoxVE/pull/16174))
+
+## 2026-07-30
+
+### 🆕 New Scripts
+
+  - Firecrawl ([#16156](https://github.com/community-scripts/ProxmoxVE/pull/16156))
+- OmniRoute ([#16155](https://github.com/community-scripts/ProxmoxVE/pull/16155))
+- PegaProx ([#16154](https://github.com/community-scripts/ProxmoxVE/pull/16154))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: Pin version to 3.1.0 [@vhsdream](https://github.com/vhsdream) ([#16170](https://github.com/community-scripts/ProxmoxVE/pull/16170))
+    - romm: remove stale 1.x alembic migrations on update [@Darkatek7](https://github.com/Darkatek7) ([#16101](https://github.com/community-scripts/ProxmoxVE/pull/16101))
+
+  - #### 🔧 Refactor
+
+    - Medusa: convert the non-free unrar source to deb822 format [@angusmaul](https://github.com/angusmaul) ([#16093](https://github.com/community-scripts/ProxmoxVE/pull/16093))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func: support dynamic gitlab URL | add setup_mysql_db function [@MickLesk](https://github.com/MickLesk) ([#16166](https://github.com/community-scripts/ProxmoxVE/pull/16166))
+    - core: add configurable host CA inheritance during bootstrap [@MickLesk](https://github.com/MickLesk) ([#15889](https://github.com/community-scripts/ProxmoxVE/pull/15889))
+
+## 2026-07-29
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - backup virtual printer in bambuddy [@asylumexp](https://github.com/asylumexp) ([#16142](https://github.com/community-scripts/ProxmoxVE/pull/16142))
+    - ImmichFrame: check .NET SDK before update deployment [@aidaskni](https://github.com/aidaskni) ([#16104](https://github.com/community-scripts/ProxmoxVE/pull/16104))
+
+  - #### ✨ New Features
+
+    - Bichon: Migration for V2 Release [@MickLesk](https://github.com/MickLesk) ([#16145](https://github.com/community-scripts/ProxmoxVE/pull/16145))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: Harden remote func bootstrapping with dns issues [@MickLesk](https://github.com/MickLesk) ([#16146](https://github.com/community-scripts/ProxmoxVE/pull/16146))
+
+## 2026-07-28
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Create search directory in wanderer-install.sh [@Isnubi](https://github.com/Isnubi) ([#16134](https://github.com/community-scripts/ProxmoxVE/pull/16134))
+    - npmplus: Remove duplicate msg_info for container recreation [@MickLesk](https://github.com/MickLesk) ([#16122](https://github.com/community-scripts/ProxmoxVE/pull/16122))
+    - fix Node.js version drift [@asylumexp](https://github.com/asylumexp) ([#16111](https://github.com/community-scripts/ProxmoxVE/pull/16111))
+    - UmlautAdaptarr: use the Debian 13 Microsoft repo with its 2025 signing key [@angusmaul](https://github.com/angusmaul) ([#16077](https://github.com/community-scripts/ProxmoxVE/pull/16077))
+    - fix(bazarr): store data in /var/lib/bazarr instead of inside /opt/bazarr [@angusmaul](https://github.com/angusmaul) ([#16098](https://github.com/community-scripts/ProxmoxVE/pull/16098))
+    - Cloudflare-DDNS: store API token in a 600 env file and build the binary at install time [@angusmaul](https://github.com/angusmaul) ([#16100](https://github.com/community-scripts/ProxmoxVE/pull/16100))
+
+  - #### ✨ New Features
+
+    - tools.func:  add nginx site helper and PHP socket resolver  [@MickLesk](https://github.com/MickLesk) ([#16118](https://github.com/community-scripts/ProxmoxVE/pull/16118))
+
+  - #### 💥 Breaking Changes
+
+    - Migrate Musicseerr to DroppedNeedle [@vhsdream](https://github.com/vhsdream) ([#15751](https://github.com/community-scripts/ProxmoxVE/pull/15751))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: fix read prompt input directly from /dev/tty [@MickLesk](https://github.com/MickLesk) ([#16126](https://github.com/community-scripts/ProxmoxVE/pull/16126))
+
+### 🧰 Tools
+
+  - actual-budget-prometheus-exporter ([#16109](https://github.com/community-scripts/ProxmoxVE/pull/16109))
+
+  - #### 🐞 Bug Fixes
+
+    - fix: prometheus-paperless-exporter incompatibility with paperless v3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16119](https://github.com/community-scripts/ProxmoxVE/pull/16119))
+
+### 📂 Github
+
+  - fix keep-open for close invalid pr [@asylumexp](https://github.com/asylumexp) ([#16105](https://github.com/community-scripts/ProxmoxVE/pull/16105))
+- Bump GitHub Actions across workflows  [@MickLesk](https://github.com/MickLesk) ([#16091](https://github.com/community-scripts/ProxmoxVE/pull/16091))
+
+## 2026-07-27
+
+### 🆕 New Scripts
+
+  - Unpackerr ([#16034](https://github.com/community-scripts/ProxmoxVE/pull/16034))
+- CookCLI ([#16028](https://github.com/community-scripts/ProxmoxVE/pull/16028))
+- Discourse ([#16024](https://github.com/community-scripts/ProxmoxVE/pull/16024))
+- Mastodon ([#16029](https://github.com/community-scripts/ProxmoxVE/pull/16029))
+- Docspell ([#16033](https://github.com/community-scripts/ProxmoxVE/pull/16033))
+- Poznote ([#16030](https://github.com/community-scripts/ProxmoxVE/pull/16030))
+- Shiori ([#16026](https://github.com/community-scripts/ProxmoxVE/pull/16026))
+- Nezha ([#16025](https://github.com/community-scripts/ProxmoxVE/pull/16025))
+- PasswordPusher ([#16031](https://github.com/community-scripts/ProxmoxVE/pull/16031))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Update MeiliSearch command for database upgrade [@Isnubi](https://github.com/Isnubi) ([#16081](https://github.com/community-scripts/ProxmoxVE/pull/16081))
+    - Mylar3 & Medusa: use trixie non-free for unrar, not bookworm [@angusmaul](https://github.com/angusmaul) ([#16072](https://github.com/community-scripts/ProxmoxVE/pull/16072))
+    - Vikunja: pin install/update to v2.3.0 due upstream issues [@MickLesk](https://github.com/MickLesk) ([#16059](https://github.com/community-scripts/ProxmoxVE/pull/16059))
+
+  - #### ✨ New Features
+
+    - OpenThread-BR: Add runtime configuration options [@tomfrenzel](https://github.com/tomfrenzel) ([#16038](https://github.com/community-scripts/ProxmoxVE/pull/16038))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: Handle LXC upgrade prompt cancellation [@MickLesk](https://github.com/MickLesk) ([#16058](https://github.com/community-scripts/ProxmoxVE/pull/16058))
+
+  - #### ✨ New Features
+
+    - core: fix OS version fallback when the host catalog lacks the requested version & harden template validation [@MickLesk](https://github.com/MickLesk) ([#16068](https://github.com/community-scripts/ProxmoxVE/pull/16068))
+
+## 2026-07-26
+
+### 🆕 New Scripts
+
+  - Satisfactory ([#16023](https://github.com/community-scripts/ProxmoxVE/pull/16023))
+- OmniTools ([#16032](https://github.com/community-scripts/ProxmoxVE/pull/16032))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Apache Tika: Remove software-properties-common from Apache Tika install [@andygrunwald](https://github.com/andygrunwald) ([#16054](https://github.com/community-scripts/ProxmoxVE/pull/16054))
+    - Fix inventree missing db engine (upstream issue / postinstall)  [@MickLesk](https://github.com/MickLesk) ([#16022](https://github.com/community-scripts/ProxmoxVE/pull/16022))
+    - OPNsense VM: answer console password prompt explicitly, add inter-key delay [@MickLesk](https://github.com/MickLesk) ([#16021](https://github.com/community-scripts/ProxmoxVE/pull/16021))
+    - [endurain] add node update to update script [@johanngrobe](https://github.com/johanngrobe) ([#16014](https://github.com/community-scripts/ProxmoxVE/pull/16014))
+
+  - #### 🔧 Refactor
+
+    - Apache Tika: Switch from Debian Bookworm to Debian Trixie and replace manual install of OpenJDK with setup_java [@andygrunwald](https://github.com/andygrunwald) ([#16036](https://github.com/community-scripts/ProxmoxVE/pull/16036))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: improve OS mismatch message [@MickLesk](https://github.com/MickLesk) ([#16035](https://github.com/community-scripts/ProxmoxVE/pull/16035))
+
+### 🧰 Tools
+
+  - #### 🔧 Refactor
+
+    - Improve command description for disabling pve-enterprise repo [@Marcondiro](https://github.com/Marcondiro) ([#16020](https://github.com/community-scripts/ProxmoxVE/pull/16020))
+
+## 2026-07-25
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - SparkyFitness: substitute SPARKY_FITNESS_FRONTEND_URL in nginx config [@MickLesk](https://github.com/MickLesk) ([#16007](https://github.com/community-scripts/ProxmoxVE/pull/16007))
+
+  - #### ✨ New Features
+
+    - AFFiNE: Bump version to v0.27.3 [@Oscar006](https://github.com/Oscar006) ([#16012](https://github.com/community-scripts/ProxmoxVE/pull/16012))
+
+## 2026-07-24
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Termix: migrate database to new db/data layout  [@MickLesk](https://github.com/MickLesk) ([#15996](https://github.com/community-scripts/ProxmoxVE/pull/15996))
+    - Sync-in: create admin user with admin role instead of default user [@MickLesk](https://github.com/MickLesk) ([#15983](https://github.com/community-scripts/ProxmoxVE/pull/15983))
+    - VM: fix machine type selection being ignored, VM always created as q35 [@MickLesk](https://github.com/MickLesk) ([#15995](https://github.com/community-scripts/ProxmoxVE/pull/15995))
+
+  - #### ✨ New Features
+
+    - Bump all Alpine scripts to 3.24 [@asylumexp](https://github.com/asylumexp) ([#15994](https://github.com/community-scripts/ProxmoxVE/pull/15994))
--- a/ct/almalinux.sh
+++ b/ct/almalinux.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://almalinux.org/
-
-APP="AlmaLinux"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-almalinux}"
-var_version="${var_version:-10}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating  AlmaLinux"
-  $STD dnf -y upgrade
-  msg_ok "Updated AlmaLinux"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/apache-tika.sh
+++ b/ct/apache-tika.sh
@@ -35,8 +35,11 @@ function update_script() {
    msg_ok "Stopped Service"

    msg_info "Updating ${APP} to v${RELEASE}"
-    CLEAN_INSTALL=1 fetch_and_deploy_from_url "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.zip" /opt/apache-tika
-    mv "/opt/apache-tika/tika-server-standard-${RELEASE}.jar" /opt/apache-tika/tika-server-standard.jar
+    cd /opt/apache-tika
+    curl -fsSL -o tika-server-standard-${RELEASE}.jar "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.jar"
+    mv --force tika-server-standard.jar tika-server-standard-prev-version.jar
+    mv tika-server-standard-${RELEASE}.jar tika-server-standard.jar
+    rm -rf /opt/apache-tika/tika-server-standard-prev-version.jar
    echo "${RELEASE}" >/opt/${APP}_version.txt
    msg_ok "Updated ${APP} to v${RELEASE}"

--- a/ct/bambuddy.sh
+++ b/ct/bambuddy.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: Adrian-RDA
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -64,11 +62,6 @@ function update_script() {

    restore_backup

-    if ! grep -q -- '--loop asyncio' /etc/systemd/system/bambuddy.service; then
-      sed -i 's|^ExecStart=.*|ExecStart=/opt/bambuddy/.venv/bin/uvicorn backend.app.main:app --host 0.0.0.0 --port 8000 --loop asyncio|' /etc/systemd/system/bambuddy.service
-      systemctl daemon-reload
-    fi
-
    msg_info "Starting Service"
    systemctl start bambuddy
    msg_ok "Started Service"
--- a/ct/budget-board.sh
+++ b/ct/budget-board.sh
@@ -1,77 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/teelur/budget-board
-
-APP="Budget-Board"
-var_tags="${var_tags:-finance;budget;money}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/budget-board ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "budget-board" "teelur/budget-board"; then
-    msg_info "Stopping Service"
-    systemctl stop budget-board
-    msg_ok "Stopped Service"
-
-    create_backup /opt/budget-board/budget-board.env
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "budget-board" "teelur/budget-board" "tarball"
-
-    restore_backup
-
-    msg_info "Rebuilding Backend"
-    cd /opt/budget-board/server
-    $STD dotnet restore "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj"
-    export configuration=Release
-    $STD dotnet publish "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj" -c $configuration -o /opt/budget-board/publish /p:UseAppHost=false --no-restore
-    msg_ok "Rebuilt Backend"
-
-    msg_info "Rebuilding Frontend"
-    cd /opt/budget-board/client
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    $STD yarn install
-    $STD yarn run build
-    cp -r dist/. /var/www/html/
-    msg_ok "Rebuilt Frontend"
-
-    msg_info "Starting Service"
-    systemctl start budget-board
-    nginx_enable_site budget-board.conf
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/calibre-web.sh
+++ b/ct/calibre-web.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: mikolaj92
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -37,7 +35,8 @@ function update_script() {
    systemctl stop calibre-web
    msg_ok "Stopped Service"

-    create_backup /opt/calibre-web/data
+    create_backup /opt/calibre-web/app.db \
+      /opt/calibre-web/data

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
    setup_uv
@@ -49,26 +48,11 @@ function update_script() {
    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir .
    msg_ok "Installed Dependencies"

-    sed -i 's|^ExecStart=.*|ExecStart=/opt/calibre-web/.venv/bin/cps -p /opt/calibre-web/data/app.db|' /etc/systemd/system/calibre-web.service
-    if ! grep -q '^Environment=HOME=' /etc/systemd/system/calibre-web.service; then
-      sed -i '/^ExecStart=/i Environment=HOME=/opt/calibre-web/data' /etc/systemd/system/calibre-web.service
-    fi
+    sed -i 's|^ExecStart=.*|ExecStart=/opt/calibre-web/.venv/bin/cps|' /etc/systemd/system/calibre-web.service
    $STD systemctl daemon-reload

    restore_backup

-    mkdir -p /opt/calibre-web-library
-    if [[ -f /opt/calibre-web/data/metadata.db && ! -f /opt/calibre-web-library/metadata.db ]]; then
-      msg_info "Migrating Calibre Library to its own directory"
-      find /opt/calibre-web/data -mindepth 1 -maxdepth 1 ! -name app.db ! -name .calibre-web -exec mv -t /opt/calibre-web-library -- {} +
-      msg_ok "Migrated Calibre Library"
-    fi
-    if [[ ! -f /opt/calibre-web-library/metadata.db ]]; then
-      msg_info "Creating Empty Calibre Library"
-      $STD calibredb list --with-library /opt/calibre-web-library
-      msg_ok "Created Empty Calibre Library"
-    fi
-
    msg_info "Starting Service"
    systemctl start calibre-web
    msg_ok "Started Service"
--- a/ct/centos.sh
+++ b/ct/centos.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.centos.org/centos-stream/
-
-APP="CentOS"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-centos}"
-var_version="${var_version:-10}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating CentOS LXC"
-  $STD dnf -y upgrade
-  msg_ok "Updated CentOS LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/debian.sh
+++ b/ct/debian.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/defguard.sh
+++ b/ct/defguard.sh
@@ -1,54 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/DefGuard/defguard
-
-APP="Defguard"
-var_tags="${var_tags:-vpn;wireguard;sso}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/defguard/core.conf ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Updating Defguard"
-  $STD apt update
-  $STD apt install -y defguard defguard-proxy
-  msg_ok "Updated Defguard"
-
-  msg_info "Restarting Services"
-  systemctl restart defguard defguard-proxy
-  msg_ok "Restarted Services"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}"
--- a/ct/devuan.sh
+++ b/ct/devuan.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.devuan.org/
-
-APP="Devuan"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-devuan}"
-var_version="${var_version:-5.0}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Devuan LXC"
-  $STD apt update
-  $STD apt -y upgrade
-  msg_ok "Updated Devuan LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/directus.sh
+++ b/ct/directus.sh
@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://directus.com/
-
-APP="Directus"
-var_tags="${var_tags:-cms;api;database;headless}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/directus/node_modules/.bin/directus ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "directus" "directus/directus"; then
-    msg_info "Stopping Service"
-    systemctl stop directus
-    msg_ok "Stopped Service"
-
-    create_backup /opt/directus/.env \
-      /opt/directus/uploads \
-      /opt/directus/extensions
-
-    ensure_dependencies build-essential
-
-    msg_info "Updating Directus"
-    cd /opt/directus
-    $STD npm install --omit=dev "directus@${CHECK_UPDATE_RELEASE#v}"
-    cat <<EOF >~/.directus
-${CHECK_UPDATE_RELEASE#v}
-EOF
-    restore_backup
-    msg_ok "Updated Directus"
-
-    msg_info "Starting Service"
-    systemctl start directus
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8055${CL}"
--- a/ct/droppedneedle.sh
+++ b/ct/droppedneedle.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: michelroegl-brunner | Co-Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -93,7 +91,7 @@ WorkingDirectory=/opt/droppedneedle/backend
 Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
 Environment=PORT=8688
 # Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
-ExecStart=/opt/droppedneedle/venv/bin/python -m maintenance.automatic_upgrade --start-target
+ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
 Restart=on-failure
 RestartSec=5

@@ -102,11 +100,8 @@ WantedBy=multi-user.target
 EOF
      rm -f /etc/systemd/system/musicseerr.service
      msg_ok "Replaced systemd Service"
-    else
-      if ! grep -q 'SLSKD' /etc/systemd/system/droppedneedle.service; then
-        sed -i '\|=8688$|a# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>' /etc/systemd/system/droppedneedle.service
-      fi
-      sed -i 's|^ExecStart=.*|ExecStart=/opt/droppedneedle/venv/bin/python -m maintenance.automatic_upgrade --start-target|' /etc/systemd/system/droppedneedle.service
+    elif ! grep -q 'SLSKD' /etc/systemd/system/droppedneedle.service; then
+      sed -i '\|=8688$|a# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>' /etc/systemd/system/droppedneedle.service
    fi

    systemctl daemon-reload
--- a/ct/endurain.sh
+++ b/ct/endurain.sh
@@ -35,29 +35,29 @@ function update_script() {
    msg_ok "Stopped Service"

    NODE_VERSION="24" setup_nodejs
+
    create_backup /opt/endurain/.env /opt/endurain/frontend/dist/env.js
    CLEAN_INSTALL=1 fetch_and_deploy_codeberg_release "endurain" "endurain-project/endurain" "tarball" "latest" "/opt/endurain"

-    msg_info "Updating Endurain Frontend"
+    msg_info "Preparing Update"
    cd /opt/endurain
    rm -rf /opt/endurain/{docs,example.env,screenshot_01.png} /opt/endurain/docker* /opt/endurain/*.yml
+    msg_ok "Prepared Update"
+
+    msg_info "Updating Frontend"
    cd /opt/endurain/frontend
    $STD npm ci
    $STD npm run build
-    msg_ok "Updated Endurain Frontend"
+    msg_ok "Updated Frontend"

    restore_backup

-    if grep -qxF 'FRONTEND_DIR="/opt/endurain/frontend/app/dist"' /opt/endurain/.env; then
-      sed -i 's|^FRONTEND_DIR="/opt/endurain/frontend/app/dist"$|FRONTEND_DIR="/opt/endurain/frontend/dist"|' /opt/endurain/.env
-    fi
-
-    msg_info "Updating Endurain Backend"
+    msg_info "Updating Backend"
    cd /opt/endurain/backend
    UV_VERSION=$(grep -Po 'required-version\s*=\s*"\K[^"]+' pyproject.toml 2>/dev/null || echo "0.11.18")
    UV_VERSION="$UV_VERSION" setup_uv
    $STD uv sync --frozen --no-dev
-    msg_ok "Endurain Backend Updated"
+    msg_ok "Backend Updated"

    msg_info "Starting Service"
    systemctl start endurain
--- a/ct/excalidash.sh
+++ b/ct/excalidash.sh
@@ -42,17 +42,16 @@ function update_script() {
    msg_info "Configuring Database Provider (${DATABASE_PROVIDER:-sqlite})"
    cd /opt/excalidash/backend
    sed -i '/datasource db {/,/}/ s/provider = env("[^"]*")/provider = "'"${DATABASE_PROVIDER:-sqlite}"'"/' prisma/schema.prisma
-    sed -i '/datasource db {/,/}/ s/provider = "[^"]*"/provider = "'"${DATABASE_PROVIDER:-sqlite}"'"/' prisma/schema.prisma
    mv prisma/migrations/"${DATABASE_PROVIDER:-sqlite}"/* prisma/migrations/
    rm -rf prisma/migrations/postgresql prisma/migrations/sqlite
    msg_ok "Configured Database Provider"

    msg_info "Rebuilding Application"
-    $STD npm ci --include=dev
+    $STD npm ci
    $STD npx prisma generate
    $STD npx tsc
    cd /opt/excalidash/frontend
-    $STD npm ci --include=dev
+    $STD npm ci
    $STD npm run build
    cp -r /opt/excalidash/frontend/dist/. /var/www/excalidash/
    msg_ok "Rebuilt Application"
--- a/ct/fedora.sh
+++ b/ct/fedora.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://fedoraproject.org/
-
-APP="Fedora"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-fedora}"
-var_version="${var_version:-43}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Fedora LXC"
-  $STD dnf -y upgrade
-  msg_ok "Updated Fedora LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/firecrawl.sh
+++ b/ct/firecrawl.sh
@@ -30,7 +30,7 @@ function update_script() {
    exit
  fi

-  ensure_dependencies build-essential ccache
+  ensure_dependencies build-essential

  if check_for_gh_release "firecrawl" "firecrawl/firecrawl"; then
    msg_info "Stopping Services"
--- a/ct/frigate.sh
+++ b/ct/frigate.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Authors: MickLesk (CanbiZ) | Co-Author: remz1337
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/gentoo.sh
+++ b/ct/gentoo.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.gentoo.org/
-
-APP="Gentoo"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-gentoo}"
-var_version="${var_version:-current}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Gentoo LXC"
-  $STD emerge --sync
-  $STD emerge --quiet --update --deep @world
-  msg_ok "Updated Gentoo LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/haproxy.sh
+++ b/ct/haproxy.sh
@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.haproxy.org/
-
-APP="HAProxy"
-var_tags="${var_tags:-network;proxy}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/haproxy/haproxy.cfg ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Updating ${APP}"
-  $STD apt update
-  $STD apt install -y haproxy
-  msg_ok "Updated ${APP}"
-
-  msg_info "Validating Configuration"
-  if ! $STD haproxy -c -f /etc/haproxy/haproxy.cfg; then
-    msg_error "Configuration is invalid - service not restarted"
-    exit
-  fi
-  msg_ok "Validated Configuration"
-
-  msg_info "Restarting Service"
-  systemctl restart haproxy
-  msg_ok "Restarted Service"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Statistics page:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8404${CL}"
-echo -e "${INFO}${YW}The generated stats password is in /etc/haproxy/haproxy.cfg${CL}"
--- a/ct/headers/almalinux
+++ b/ct/headers/almalinux
@@ -1,6 +0,0 @@
-    ___    __                __    _                 
-   /   |  / /___ ___  ____ _/ /   (_)___  __  ___  __
-  / /| | / / __ `__ \/ __ `/ /   / / __ \/ / / / |/_/
- / ___ |/ / / / / / / /_/ / /___/ / / / / /_/ />  <  
-/_/  |_/_/_/ /_/ /_/\__,_/_____/_/_/ /_/\__,_/_/|_|  
-                                                     
--- a/ct/headers/budget-board
+++ b/ct/headers/budget-board
@@ -1,6 +0,0 @@
-    ____            __           __        ____                       __
-   / __ )__  ______/ /___ ____  / /_      / __ )____  ____ __________/ /
-  / __  / / / / __  / __ `/ _ \/ __/_____/ __  / __ \/ __ `/ ___/ __  / 
- / /_/ / /_/ / /_/ / /_/ /  __/ /_/_____/ /_/ / /_/ / /_/ / /  / /_/ /  
-/_____/\__,_/\__,_/\__, /\___/\__/     /_____/\____/\__,_/_/   \__,_/   
-                  /____/                                                
--- a/ct/headers/centos
+++ b/ct/headers/centos
@@ -1,6 +0,0 @@
-   ______           __  ____  _____
-  / ____/__  ____  / /_/ __ \/ ___/
- / /   / _ \/ __ \/ __/ / / /\__ \ 
-/ /___/  __/ / / / /_/ /_/ /___/ / 
-\____/\___/_/ /_/\__/\____//____/  
-                                   
--- a/ct/headers/defguard
+++ b/ct/headers/defguard
@@ -1,6 +0,0 @@
-    ____       ____                           __
-   / __ \___  / __/___ ___  ______ __________/ /
-  / / / / _ \/ /_/ __ `/ / / / __ `/ ___/ __  / 
- / /_/ /  __/ __/ /_/ / /_/ / /_/ / /  / /_/ /  
-/_____/\___/_/  \__, /\__,_/\__,_/_/   \__,_/   
-               /____/                           
--- a/ct/headers/devuan
+++ b/ct/headers/devuan
@@ -1,6 +0,0 @@
-    ____                            
-   / __ \___ _   ____  ______ _____ 
-  / / / / _ \ | / / / / / __ `/ __ \
- / /_/ /  __/ |/ / /_/ / /_/ / / / /
-/_____/\___/|___/\__,_/\__,_/_/ /_/ 
-                                    
--- a/ct/headers/directus
+++ b/ct/headers/directus
@@ -1,6 +0,0 @@
-    ____  _                __            
-   / __ \(_)_______  _____/ /___  _______
-  / / / / / ___/ _ \/ ___/ __/ / / / ___/
- / /_/ / / /  /  __/ /__/ /_/ /_/ (__  ) 
-/_____/_/_/   \___/\___/\__/\__,_/____/  
-                                         
--- a/ct/headers/fedora
+++ b/ct/headers/fedora
@@ -1,6 +0,0 @@
-    ______         __                
-   / ____/__  ____/ /___  _________ _
-  / /_  / _ \/ __  / __ \/ ___/ __ `/
- / __/ /  __/ /_/ / /_/ / /  / /_/ / 
-/_/    \___/\__,_/\____/_/   \__,_/  
-                                     
--- a/ct/headers/gentoo
+++ b/ct/headers/gentoo
@@ -1,6 +0,0 @@
-   ______           __            
-  / ____/__  ____  / /_____  ____ 
- / / __/ _ \/ __ \/ __/ __ \/ __ \
-/ /_/ /  __/ / / / /_/ /_/ / /_/ /
-\____/\___/_/ /_/\__/\____/\____/ 
-                                  
--- a/ct/headers/haproxy
+++ b/ct/headers/haproxy
@@ -1,6 +0,0 @@
-    __  _____    ____                       
-   / / / /   |  / __ \_________  _  ____  __
-  / /_/ / /| | / /_/ / ___/ __ \| |/_/ / / /
- / __  / ___ |/ ____/ /  / /_/ />  </ /_/ / 
-/_/ /_/_/  |_/_/   /_/   \____/_/|_|\__, /  
-                                   /____/   
--- a/ct/headers/maintainerr
+++ b/ct/headers/maintainerr
@@ -1,6 +0,0 @@
-    __  ___      _       __        _                     
-   /  |/  /___ _(_)___  / /_____ _(_)___  ___  __________
-  / /|_/ / __ `/ / __ \/ __/ __ `/ / __ \/ _ \/ ___/ ___/
- / /  / / /_/ / / / / / /_/ /_/ / / / / /  __/ /  / /    
-/_/  /_/\__,_/_/_/ /_/\__/\__,_/_/_/ /_/\___/_/  /_/     
-                                                         
--- a/ct/headers/openbao
+++ b/ct/headers/openbao
@@ -1,6 +0,0 @@
-   ____                   ____            
-  / __ \____  ___  ____  / __ )____ _____ 
- / / / / __ \/ _ \/ __ \/ __  / __ `/ __ \
-/ /_/ / /_/ /  __/ / / / /_/ / /_/ / /_/ /
-\____/ .___/\___/_/ /_/_____/\__,_/\____/ 
-    /_/                                   
--- a/ct/headers/openeuler
+++ b/ct/headers/openeuler
@@ -1,6 +0,0 @@
-                          ______      __         
-  ____  ____  ___  ____  / ____/_  __/ /__  _____
- / __ \/ __ \/ _ \/ __ \/ __/ / / / / / _ \/ ___/
-/ /_/ / /_/ /  __/ / / / /___/ /_/ / /  __/ /    
-\____/ .___/\___/_/ /_/_____/\__,_/_/\___/_/     
-    /_/                                          
--- a/ct/headers/opensuse
+++ b/ct/headers/opensuse
@@ -1,6 +0,0 @@
-                         _____ __  _______ ______
-  ____  ____  ___  ____ / ___// / / / ___// ____/
- / __ \/ __ \/ _ \/ __ \\__ \/ / / /\__ \/ __/   
-/ /_/ / /_/ /  __/ / / /__/ / /_/ /___/ / /___   
-\____/ .___/\___/_/ /_/____/\____//____/_____/   
-    /_/                                          
--- a/ct/headers/pyload
+++ b/ct/headers/pyload
@@ -1,6 +0,0 @@
-                 __                    __
-    ____  __  __/ /   ____  ____ _____/ /
-   / __ \/ / / / /   / __ \/ __ `/ __  / 
-  / /_/ / /_/ / /___/ /_/ / /_/ / /_/ /  
- / .___/\__, /_____/\____/\__,_/\__,_/   
-/_/    /____/                            
--- a/ct/headers/seanime
+++ b/ct/headers/seanime
@@ -1,6 +0,0 @@
-   _____                  _              
-  / ___/___  ____ _____  (_)___ ___  ___ 
-  \__ \/ _ \/ __ `/ __ \/ / __ `__ \/ _ \
- ___/ /  __/ /_/ / / / / / / / / / /  __/
-/____/\___/\__,_/_/ /_/_/_/ /_/ /_/\___/ 
-                                         
--- a/ct/headers/solidinvoice
+++ b/ct/headers/solidinvoice
@@ -1,6 +0,0 @@
-   _____       ___     ______                 _         
-  / ___/____  / (_)___/ /  _/___ _   ______  (_)_______ 
-  \__ \/ __ \/ / / __  // // __ \ | / / __ \/ / ___/ _ \
- ___/ / /_/ / / / /_/ // // / / / |/ / /_/ / / /__/  __/
-/____/\____/_/_/\__,_/___/_/ /_/|___/\____/_/\___/\___/ 
-                                                        
--- a/ct/headers/super-productivity
+++ b/ct/headers/super-productivity
@@ -1,6 +0,0 @@
-   _____                             ____                 __           __  _       _ __       
-  / ___/__  ______  ___  _____      / __ \_________  ____/ /_  _______/ /_(_)   __(_) /___  __
-  \__ \/ / / / __ \/ _ \/ ___/_____/ /_/ / ___/ __ \/ __  / / / / ___/ __/ / | / / / __/ / / /
- ___/ / /_/ / /_/ /  __/ /  /_____/ ____/ /  / /_/ / /_/ / /_/ / /__/ /_/ /| |/ / / /_/ /_/ / 
-/____/\__,_/ .___/\___/_/        /_/   /_/   \____/\__,_/\__,_/\___/\__/_/ |___/_/\__/\__, /  
-          /_/                                                                        /____/   
--- a/ct/headers/yopass
+++ b/ct/headers/yopass
@@ -1,6 +0,0 @@
-__  __                           
-\ \/ /___  ____  ____ ___________
- \  / __ \/ __ \/ __ `/ ___/ ___/
- / / /_/ / /_/ / /_/ (__  |__  ) 
-/_/\____/ .___/\__,_/____/____/  
-       /_/                       
--- a/ct/hermesagent.sh
+++ b/ct/hermesagent.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: Stephen Chin (steveonjava)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/homepage.sh
+++ b/ct/homepage.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -79,10 +77,6 @@ EOF
      rm /opt/homepage/env.bak
      chmod 600 /opt/homepage/.env
    fi
-    if ! grep -q '^Environment=CI=true' /etc/systemd/system/homepage.service; then
-      sed -i '/^ExecStart=/i Environment=CI=true' /etc/systemd/system/homepage.service
-      systemctl daemon-reload
-    fi
    msg_ok "Updated Homepage"

    msg_info "Starting service"
--- a/ct/immich.sh
+++ b/ct/immich.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/jellyfin.sh
+++ b/ct/jellyfin.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/limesurvey.sh
+++ b/ct/limesurvey.sh
@@ -28,13 +28,6 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  if [[ ! -L /etc/apache2/mods-enabled/rewrite.load ]]; then
-    msg_info "Enabling Apache mod_rewrite"
-    $STD a2enmod rewrite
-    systemctl restart apache2
-    msg_ok "Enabled Apache mod_rewrite"
-  fi
-
  setup_mariadb

  msg_warn "Application is updated via Web Interface"
--- a/ct/maintainerr.sh
+++ b/ct/maintainerr.sh
@@ -1,80 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Karolis Stanelis (kstanelis)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Maintainerr/Maintainerr
-
-APP="Maintainerr"
-var_tags="${var_tags:-media;arr;cleanup}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-24}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/maintainerr ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "maintainerr" "Maintainerr/Maintainerr"; then
-    msg_info "Stopping Service"
-    systemctl stop maintainerr
-    msg_ok "Stopped Service"
-
-    create_backup /opt/data /opt/maintainerr/.env
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "maintainerr" "Maintainerr/Maintainerr" "tarball" "latest" "/opt/maintainerr"
-    restore_backup
-
-    msg_info "Rebuilding Maintainerr (Patience)"
-    cd /opt/maintainerr
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export NODE_OPTIONS="--max-old-space-size=4096"
-    $STD corepack enable
-    $STD corepack prepare yarn@4.11.0 --activate
-    $STD yarn config set enableTelemetry 0
-    $STD yarn install --network-timeout 300000
-    $STD yarn turbo build --concurrency=1
-    cp -r apps/ui/dist apps/server/dist/ui
-    cp -r apps/server/assets apps/server/dist/assets
-    find apps/server/dist/ui -type f -not -path '*/node_modules/*' -print0 | xargs -0 sed -i "s,/__PATH_PREFIX__,,g"
-    $STD yarn workspaces focus --all --production
-    rm -rf /opt/maintainerr/.yarn/cache /opt/maintainerr/.turbo /opt/maintainerr/apps/ui
-    sed -i '/^npm_package_version=/d;/^VERSION_TAG=/d' /opt/maintainerr/.env
-    {
-      echo "VERSION_TAG=stable"
-      echo "npm_package_version=$(cat ~/.maintainerr)"
-    } >>/opt/maintainerr/.env
-    msg_ok "Rebuilt Maintainerr"
-
-    msg_info "Starting Service"
-    systemctl start maintainerr
-    msg_ok "Started Service"
-    msg_ok "Updated Successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6246${CL}"
--- a/ct/mastodon.sh
+++ b/ct/mastodon.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -42,7 +40,6 @@ function update_script() {
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
    sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
    sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
-    RUBY_VERSION="$(cat /opt/mastodon/.ruby-version)" RUBY_INSTALL_RAILS="false" setup_ruby

    msg_info "Installing Ruby Dependencies"
    cd /opt/mastodon
--- a/ct/nginxproxymanager.sh
+++ b/ct/nginxproxymanager.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: tteck (tteckster) | Co-Author: CrazyWolf13, MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/node-red.sh
+++ b/ct/node-red.sh
@@ -49,7 +49,7 @@ update_deb_based() {
    msg_ok "Stopped Service"

    msg_info "Updating Node-Red"
-    $STD npm install -g node-red
+    $STD npm install -g --unsafe-perm node-red
    msg_ok "Updated Node-Red"

    msg_info "Starting Service"
@@ -106,7 +106,7 @@ update_alpine() {
  msg_ok "Updated Node.js and npm"

  msg_info "Updating Node-RED"
-  $STD npm install -g node-red
+  $STD npm install -g --unsafe-perm node-red
  msg_ok "Updated Node-RED"

  msg_info "Restarting Node-RED"
--- a/ct/ntopng.sh
+++ b/ct/ntopng.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/ollama.sh
+++ b/ct/ollama.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: havardthom | Co-Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/openbao.sh
+++ b/ct/openbao.sh
@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Marc Went (Dunky13)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://openbao.org/
-
-APP="OpenBao"
-var_tags="${var_tags:-security;secrets}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/bin/bao ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "openbao" "openbao/openbao"; then
-    msg_info "Stopping Service"
-    systemctl stop openbao
-    msg_ok "Stopped Service"
-
-    create_backup /etc/openbao
-    DPKG_FORCE_CONFOLD=1 fetch_and_deploy_gh_release "openbao" "openbao/openbao" "binary" "latest" "/opt/openbao" "openbao_*_linux_$(arch_resolve).deb"
-    restore_backup
-
-    msg_info "Starting Service"
-    $STD systemctl daemon-reload
-    systemctl start openbao
-    msg_ok "Started Service"
-    for _ in {1..15}; do
-      BAO_ADDR=https://127.0.0.1:8200 BAO_SKIP_VERIFY=true bao status -format=json 2>/dev/null | jq -e '.sealed == false' >/dev/null && break
-      sleep 2
-    done
-    if ! BAO_ADDR=https://127.0.0.1:8200 BAO_SKIP_VERIFY=true bao status -format=json 2>/dev/null | jq -e '.sealed == false' >/dev/null; then
-      msg_error "OpenBao did not unseal within 30 seconds"
-      exit 1
-    fi
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:8200${CL}"
--- a/ct/openeuler.sh
+++ b/ct/openeuler.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.openeuler.org/
-
-APP="openEuler"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-openeuler}"
-var_version="${var_version:-25.03}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating OpenEuler LXC"
-  $STD dnf -y upgrade
-  msg_ok "Updated OpenEuler LXC"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/opengist.sh
+++ b/ct/opengist.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: Jonathan (jd-apprentice)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -35,11 +33,15 @@ function update_script() {
    systemctl stop opengist
    msg_ok "Stopped Service"

-    create_backup /opt/opengist/config.yml
+    msg_info "Creating backup"
+    mv /opt/opengist /opt/opengist-backup
+    msg_ok "Backup created"

-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "opengist" "thomiceli/opengist" "prebuild" "latest" "/opt/opengist" "opengist*linux-$(arch_resolve).tar.gz"
+    fetch_and_deploy_gh_release "opengist" "thomiceli/opengist" "prebuild" "latest" "/opt/opengist" "opengist*linux-$(arch_resolve).tar.gz"

-    restore_backup
+    msg_info "Restoring Configuration"
+    mv /opt/opengist-backup/config.yml /opt/opengist/config.yml
+    msg_ok "Configuration Restored"

    msg_info "Starting Service"
    systemctl start opengist
--- a/ct/opensuse.sh
+++ b/ct/opensuse.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.opensuse.org/
-
-APP="openSUSE"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-opensuse}"
-var_version="${var_version:-16.0}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating OpenSUSE LXC"
-  $STD zypper -n update
-  msg_ok "Updated OpenSUSE LXC"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-msg_custom "🚀" "${GN}" "${APP} setup has been successfully initialized!"
--- a/ct/openwebui.sh
+++ b/ct/openwebui.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck | Co-Author: havardthom | Co-Author: Slaviša Arežina (tremor021)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/paperless-ngx.sh
+++ b/ct/paperless-ngx.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/pihole.sh
+++ b/ct/pihole.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/podman.sh
+++ b/ct/podman.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/proxmox-backup-server.sh
+++ b/ct/proxmox-backup-server.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/pve-ups.sh
+++ b/ct/pve-ups.sh
@@ -41,7 +41,7 @@ function update_script() {

    msg_info "Updating Application"
    cd /opt/pve-usv
-    $STD uv venv --clear --seed venv
+    $STD uv venv --clear venv
    $STD uv pip install --python venv/bin/python .
    chown -R pveusv:pveusv /opt/pve-usv
    chmod 0755 deploy/pve-usv-agent.sh
--- a/ct/pyload.sh
+++ b/ct/pyload.sh
@@ -1,57 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/pyload/pyload
-
-APP="pyLoad"
-var_tags="${var_tags:-downloader}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-16}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/pyload ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Stopping Service"
-  systemctl stop pyload
-  msg_ok "Stopped Service"
-
-  msg_info "Updating ${APP}"
-  $STD uv pip install --python /opt/pyload/.venv --upgrade --prerelease allow "pyload-ng[all]"
-  msg_ok "Updated ${APP}"
-
-  msg_info "Starting Service"
-  systemctl start pyload
-  msg_ok "Started Service"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}"
--- a/ct/seanime.sh
+++ b/ct/seanime.sh
@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: hasan-ismail
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://seanime.app/
-
-APP="Seanime"
-var_tags="${var_tags:-media;anime;manga}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-var_gpu="${var_gpu:-yes}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/seanime ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "seanime" "5rahim/seanime"; then
-    msg_info "Stopping Service"
-    systemctl stop seanime
-    msg_ok "Stopped Service"
-
-    create_backup /opt/seanime-data/config.toml
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "seanime" "5rahim/seanime" "prebuild" "latest" "/opt/seanime" "seanime-[0-9]*_Linux_$(arch_resolve x86_64 arm64).tar.gz"
-    chmod +x /opt/seanime/seanime
-
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start seanime
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:43211${CL}"
--- a/ct/solidinvoice.sh
+++ b/ct/solidinvoice.sh
@@ -1,57 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Pierre du Plessis
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/solidinvoice/solidinvoice
-
-APP="SolidInvoice"
-var_tags="${var_tags:-invoicing;finance;billing}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /usr/bin/solidinvoice ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "solidinvoice" "SolidInvoice/SolidInvoice"; then
-    msg_info "Stopping Service"
-    systemctl stop solidinvoice
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "solidinvoice" "SolidInvoice/SolidInvoice" "singlefile" "latest" "/usr/bin" "solidinvoice-linux-$(arch_resolve)"
-
-    msg_info "Starting Service"
-    systemctl start solidinvoice
-    msg_ok "Started Service"
-    msg_ok "Updated Successfully"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8765${CL}"
--- a/ct/super-productivity.sh
+++ b/ct/super-productivity.sh
@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://super-productivity.com/
-
-APP="Super-Productivity"
-var_tags="${var_tags:-productivity;todo}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-6144}"
-var_disk="${var_disk:-12}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/super-productivity ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "super-productivity" "super-productivity/super-productivity"; then
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "super-productivity" "super-productivity/super-productivity" "tarball"
-
-    msg_info "Building Web App"
-    cd /opt/super-productivity
-    export HUSKY=0
-    export UNSPLASH_KEY=DUMMY_UNSPLASH_KEY
-    export UNSPLASH_CLIENT_ID=DUMMY_UNSPLASH_CLIENT_ID
-    export NODE_OPTIONS="--max-old-space-size=4096"
-    $STD git config --global url."https://github.com/".insteadOf ssh://git@github.com/
-    $STD npm ci
-    $STD npm run buildFrontend:prodWeb
-    msg_ok "Built Web App"
-
-    msg_info "Deploying Web App"
-    rm -rf /var/www/html/*
-    cp -r /opt/super-productivity/dist/browser/. /var/www/html/
-    systemctl reload nginx
-    msg_ok "Deployed Web App"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/ubuntu.sh
+++ b/ct/ubuntu.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/unifi-os-server.sh
+++ b/ct/unifi-os-server.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/yopass.sh
+++ b/ct/yopass.sh
@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/jhaals/yopass
-
-APP="Yopass"
-var_tags="${var_tags:-security;secrets}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/yopass ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "yopass" "jhaals/yopass"; then
-    msg_info "Stopping Service"
-    systemctl stop yopass
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "yopass" "jhaals/yopass" "tarball"
-
-    msg_info "Building Yopass"
-    cd /opt/yopass
-    $STD go build -ldflags "-X main.version=$(cat ~/.yopass)" ./cmd/yopass-server
-    cd /opt/yopass/website
-    $STD yarn install --network-timeout 600000
-    $STD yarn build
-    msg_ok "Built Yopass"
-
-    msg_info "Starting Service"
-    systemctl start yopass
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}:1337${CL}"
--- a/install/almalinux-install.sh
+++ b/install/almalinux-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://almalinux.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/apache-tika-install.sh
+++ b/install/apache-tika-install.sh
@@ -35,9 +35,11 @@ msg_ok "Installed Dependencies"
 JAVA_VERSION="21" setup_java

 msg_info "Installing Apache Tika"
+mkdir -p /opt/apache-tika
+cd /opt/apache-tika
 RELEASE="$(curl -fsSL https://dlcdn.apache.org/tika/ | grep -oP '(?<=href=")[0-9]+\.[0-9]+\.[0-9]+(?=/")' | sort -V | tail -n1)"
-fetch_and_deploy_from_url "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.zip" /opt/apache-tika
-mv "/opt/apache-tika/tika-server-standard-${RELEASE}.jar" /opt/apache-tika/tika-server-standard.jar
+curl -fsSL "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.jar" -o tika-server-standard-${RELEASE}.jar
+mv tika-server-standard-${RELEASE}.jar tika-server-standard.jar
 echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Apache Tika"

--- a/install/bambuddy-install.sh
+++ b/install/bambuddy-install.sh
@@ -52,7 +52,7 @@ After=network.target
 [Service]
 Type=simple
 WorkingDirectory=/opt/bambuddy
-ExecStart=/opt/bambuddy/.venv/bin/uvicorn backend.app.main:app --host 0.0.0.0 --port 8000 --loop asyncio
+ExecStart=/opt/bambuddy/.venv/bin/uvicorn backend.app.main:app --host 0.0.0.0 --port 8000
 Restart=on-failure
 RestartSec=5

--- a/install/budget-board-install.sh
+++ b/install/budget-board-install.sh
@@ -1,127 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/teelur/budget-board
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y nginx
-setup_deb822_repo \
-  "microsoft" \
-  "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-  "https://packages.microsoft.com/debian/13/prod/" \
-  "trixie"
-$STD apt install -y dotnet-sdk-10.0
-msg_ok "Installed Dependencies"
-
-NODE_VERSION=25 setup_nodejs
-PG_VERSION=16 setup_postgresql
-PG_DB_NAME=budget_board_db PG_DB_USER=budget_board setup_postgresql_db
-
-fetch_and_deploy_gh_release "budget-board" "teelur/budget-board" "tarball"
-
-msg_info "Configuring Budget Board Backend"
-cd /opt/budget-board/server
-$STD dotnet restore "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj"
-export configuration=Release
-$STD dotnet publish "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj" -c $configuration -o /opt/budget-board/publish /p:UseAppHost=false --no-restore
-
-cat <<EOF >/opt/budget-board/budget-board.env
-Logging__LogLevel__Default=Information
-CLIENT_ADDRESS=$LOCAL_IP
-POSTGRES_HOST=localhost
-POSTGRES_PORT=5432
-POSTGRES_DATABASE=$PG_DB_NAME
-POSTGRES_USER=$PG_DB_USER
-POSTGRES_PASSWORD=$PG_DB_PASS
-OIDC_ENABLED=false
-OIDC_ISSUER=
-OIDC_CLIENT_ID=
-OIDC_CLIENT_SECRET=
-EMAIL_SENDER=
-EMAIL_SENDER_USERNAME=
-EMAIL_SENDER_PASSWORD=
-EMAIL_SMTP_HOST=
-EMAIL_SMTP_PORT=587
-DISABLE_NEW_USERS=false
-DISABLE_LOCAL_AUTH=false
-AUTO_UPDATE_DB=true
-DISABLE_AUTO_SYNC=false
-SYNC_INTERVAL_HOURS=8
-TZ=UTC
-
-ASPNETCORE_URLS=http://127.0.0.1:6253
-PORT=6253
-VITE_SERVER_ADDRESS=${LOCAL_IP}
-VITE_OIDC_ENABLED=false
-VITE_OIDC_PROVIDER=
-VITE_OIDC_CLIENT_ID=
-VITE_DISABLE_NEW_USERS=false
-VITE_DISABLE_LOCAL_AUTH=false
-EOF
-msg_ok "Configured Budget Board Backend"
-
-msg_info "Configuring Budget Board Frontend"
-cd /opt/budget-board/client
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-$STD yarn config set --home enableTelemetry 0
-$STD npm install --global corepack@latest
-$STD corepack enable
-$STD yarn install
-$STD yarn run build
-cp -r dist/. /var/www/html/
-msg_ok "Configured Budget Board Frontend"
-
-msg_info "Creating services"
-cat <<EOF >/etc/systemd/system/budget-board.service
-[Unit]
-Description=Budget Board Service
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/budget-board/publish
-ExecStart=dotnet BudgetBoard.WebAPI.dll
-Restart=always
-EnvironmentFile=/opt/budget-board/budget-board.env
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now budget-board
-
-cat <<'EOF' >/etc/nginx/sites-available/budget-board.conf
-server {
-    listen 80 default_server;
-    server_name _;
-    root /var/www/html;
-    index index.html;
-
-    location /api/ {
-        proxy_pass http://127.0.0.1:6253;
-        proxy_http_version 1.1;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-}
-EOF
-nginx_enable_site budget-board.conf
-msg_ok "Created services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/calibre-web-install.sh
+++ b/install/calibre-web-install.sh
@@ -42,14 +42,8 @@ $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --
 $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir .
 msg_ok "Installed Python Dependencies"

-mkdir -p /opt/calibre-web/data /opt/calibre-web-library
-if [[ ! -f /opt/calibre-web-library/metadata.db ]]; then
-  msg_info "Creating Empty Calibre Library"
-  $STD calibredb list --with-library /opt/calibre-web-library
-  msg_ok "Created Empty Calibre Library"
-fi
-
 msg_info "Creating Service"
+mkdir -p /opt/calibre-web/data
 cat <<EOF >/etc/systemd/system/calibre-web.service
 [Unit]
 Description=Calibre-Web Service
@@ -59,9 +53,8 @@ After=network.target
 Type=simple
 User=root
 Environment="QTWEBENGINE_CHROMIUM_FLAGS=--no-sandbox"
-Environment=HOME=/opt/calibre-web/data
 WorkingDirectory=/opt/calibre-web
-ExecStart=/opt/calibre-web/.venv/bin/cps -p /opt/calibre-web/data/app.db
+ExecStart=/opt/calibre-web/.venv/bin/cps
 Restart=on-failure
 RestartSec=5

--- a/install/centos-install.sh
+++ b/install/centos-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.centos.org/centos-stream/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/defguard-install.sh
+++ b/install/defguard-install.sh
@@ -1,78 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/DefGuard/defguard
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="defguard" PG_DB_USER="defguard" setup_postgresql_db
-
-setup_deb822_repo \
-  "defguard" \
-  "https://apt.defguard.net/defguard.asc" \
-  "https://apt.defguard.net" \
-  "$(get_os_info codename)" \
-  "release-2.0"
-
-msg_info "Installing Defguard"
-$STD apt install -y defguard
-msg_ok "Installed Defguard"
-
-msg_info "Configuring Defguard"
-DEFGUARD_ADMIN_PASSWORD=$(openssl rand -base64 18)
-cat <<EOF >/etc/defguard/core.conf
-DEFGUARD_DB_HOST=localhost
-DEFGUARD_DB_PORT=5432
-DEFGUARD_DB_NAME=defguard
-DEFGUARD_DB_USER=defguard
-DEFGUARD_DB_PASSWORD=${PG_DB_PASS}
-
-DEFGUARD_URL=http://${LOCAL_IP}:8000
-DEFGUARD_HTTP_PORT=8000
-DEFGUARD_GRPC_PORT=50055
-
-DEFGUARD_DEFAULT_ADMIN_PASSWORD=${DEFGUARD_ADMIN_PASSWORD}
-DEFGUARD_COOKIE_INSECURE=true
-DEFGUARD_LOG_LEVEL=info
-EOF
-chown root:defguard /etc/defguard/core.conf
-chmod 640 /etc/defguard/core.conf
-systemctl restart defguard
-msg_ok "Configured Defguard"
-
-msg_info "Installing Defguard Edge"
-$STD apt install -y defguard-proxy
-mkdir -p /etc/defguard/certs
-cat <<EOF >/etc/defguard/proxy.toml
-# Defguard Edge (proxy) configuration
-# Apply changes with: systemctl restart defguard-proxy
-
-# Port the API/enrollment HTTP server listens on
-http_port = 8080
-# Port the HTTPS server listens on (used after Core provisions TLS)
-https_port = 8443
-# Port the gRPC server listens on. Core connects here to adopt and manage the Edge.
-grpc_port = 50051
-# Directory where adoption-provisioned mTLS certificates are stored
-cert_dir = "/etc/defguard/certs"
-
-log_level = "info"
-rate_limit_per_second = 0
-rate_limit_burst = 0
-EOF
-chown -R defguard:defguard /etc/defguard/certs /etc/defguard/proxy.toml
-systemctl enable -q --now defguard-proxy
-msg_ok "Installed Defguard Edge"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/devuan-install.sh
+++ b/install/devuan-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.devuan.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/directus-install.sh
+++ b/install/directus-install.sh
@@ -1,94 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://directus.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y build-essential
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" setup_nodejs
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="directus" PG_DB_USER="directus" setup_postgresql_db
-
-msg_info "Installing Directus"
-mkdir -p /opt/directus/uploads /opt/directus/extensions
-cd /opt/directus
-$STD npm init -y
-DIRECTUS_VERSION=$(get_latest_github_release "directus/directus")
-$STD npm install --omit=dev "directus@${DIRECTUS_VERSION}"
-cat <<EOF >~/.directus
-${DIRECTUS_VERSION}
-EOF
-msg_ok "Installed Directus"
-
-msg_info "Configuring Directus"
-DIRECTUS_KEY=$(openssl rand -hex 32)
-DIRECTUS_SECRET=$(openssl rand -hex 32)
-DIRECTUS_ADMIN_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
-cat <<EOF >/opt/directus/.env
-HOST="0.0.0.0"
-PORT=8055
-PUBLIC_URL="http://${LOCAL_IP}:8055"
-KEY="${DIRECTUS_KEY}"
-SECRET="${DIRECTUS_SECRET}"
-
-DB_CLIENT="pg"
-DB_HOST="127.0.0.1"
-DB_PORT=5432
-DB_DATABASE="${PG_DB_NAME}"
-DB_USER="${PG_DB_USER}"
-DB_PASSWORD="${PG_DB_PASS}"
-
-ADMIN_EMAIL="admin@community-scripts.org"
-ADMIN_PASSWORD="${DIRECTUS_ADMIN_PASSWORD}"
-
-STORAGE_LOCATIONS="local"
-STORAGE_LOCAL_DRIVER="local"
-STORAGE_LOCAL_ROOT="/opt/directus/uploads"
-EXTENSIONS_PATH="/opt/directus/extensions"
-TELEMETRY=false
-EOF
-chmod 640 /opt/directus/.env
-msg_ok "Configured Directus"
-
-msg_info "Initializing Directus"
-cd /opt/directus
-$STD /opt/directus/node_modules/.bin/directus bootstrap
-msg_ok "Initialized Directus"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/directus.service
-[Unit]
-Description=Directus
-After=network.target postgresql.service
-Requires=postgresql.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/directus
-EnvironmentFile=/opt/directus/.env
-ExecStart=/opt/directus/node_modules/.bin/directus start
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now directus
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/droppedneedle-install.sh
+++ b/install/droppedneedle-install.sh
@@ -45,7 +45,7 @@ WorkingDirectory=/opt/droppedneedle/backend
 Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
 Environment=PORT=8688
 # Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
-ExecStart=/opt/droppedneedle/venv/bin/python -m maintenance.automatic_upgrade --start-target
+ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
 Restart=on-failure
 RestartSec=5

--- a/install/fedora-install.sh
+++ b/install/fedora-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://fedoraproject.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/firecrawl-install.sh
+++ b/install/firecrawl-install.sh
@@ -16,7 +16,6 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
  build-essential \
-  ccache \
  cmake \
  git \
  nftables \
--- a/install/gentoo-install.sh
+++ b/install/gentoo-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.gentoo.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/gitea-install.sh
+++ b/install/gitea-install.sh
@@ -29,7 +29,7 @@ setup_deb_based() {
  mkdir -p /var/lib/gitea/{custom,data,log}
  chown -R gitea:gitea /var/lib/gitea/
  chmod -R 750 /var/lib/gitea/
-  chown gitea:gitea /etc/gitea
+  chown root:gitea /etc/gitea
  chmod 750 /etc/gitea
  sudo -u gitea ln -s /var/lib/gitea/data/.ssh/ /etc/gitea/.ssh
  msg_ok "Configured Gitea"
--- a/install/haproxy-install.sh
+++ b/install/haproxy-install.sh
@@ -1,73 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.haproxy.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing HAProxy"
-$STD apt install -y haproxy
-msg_ok "Installed HAProxy"
-
-msg_info "Configuring HAProxy"
-HAPROXY_STATS_PASSWORD=$(openssl rand -base64 18)
-cat <<EOF >/etc/haproxy/haproxy.cfg
-global
-	log /dev/log local0
-	chroot /var/lib/haproxy
-	stats socket /run/haproxy/admin.sock mode 660 level admin
-	stats timeout 30s
-	user haproxy
-	group haproxy
-	daemon
-	ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets
-
-defaults
-	log global
-	mode http
-	option httplog
-	option dontlognull
-	timeout connect 5s
-	timeout client 50s
-	timeout server 50s
-	errorfile 400 /etc/haproxy/errors/400.http
-	errorfile 403 /etc/haproxy/errors/403.http
-	errorfile 408 /etc/haproxy/errors/408.http
-	errorfile 500 /etc/haproxy/errors/500.http
-	errorfile 502 /etc/haproxy/errors/502.http
-	errorfile 503 /etc/haproxy/errors/503.http
-	errorfile 504 /etc/haproxy/errors/504.http
-
-listen stats
-	bind *:8404
-	stats enable
-	stats uri /
-	stats refresh 10s
-	stats admin if TRUE
-	stats auth admin:${HAPROXY_STATS_PASSWORD}
-
-# Example: replace with your own frontend/backend pairs.
-#frontend http_in
-#	bind *:80
-#	default_backend servers
-#
-#backend servers
-#	balance roundrobin
-#	server web1 192.168.1.10:80 check
-#	server web2 192.168.1.11:80 check
-EOF
-$STD haproxy -c -f /etc/haproxy/haproxy.cfg
-systemctl restart haproxy
-msg_ok "Configured HAProxy"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/homepage-install.sh
+++ b/install/homepage-install.sh
@@ -63,7 +63,6 @@ Restart=always
 RestartSec=1
 User=root
 WorkingDirectory=/opt/homepage/
-Environment=CI=true
 ExecStart=pnpm start

 [Install]
--- a/install/limesurvey-install.sh
+++ b/install/limesurvey-install.sh
@@ -60,7 +60,6 @@ cat <<EOF >/etc/apache2/sites-enabled/000-default.conf
 EOF
 chown -R www-data:www-data "/opt/limesurvey"
 chmod -R 750 "/opt/limesurvey"
-$STD a2enmod rewrite
 systemctl reload apache2
 rm -rf "$temp_file"
 msg_ok "Set up LimeSurvey"
--- a/install/maintainerr-install.sh
+++ b/install/maintainerr-install.sh
@@ -1,84 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Karolis Stanelis (kstanelis)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Maintainerr/Maintainerr
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  pkg-config \
-  libcairo2-dev \
-  libpango1.0-dev \
-  libjpeg-dev \
-  libgif-dev \
-  libpixman-1-dev \
-  librsvg2-dev
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" setup_nodejs
-
-fetch_and_deploy_gh_release "maintainerr" "Maintainerr/Maintainerr" "tarball" "latest" "/opt/maintainerr"
-
-msg_info "Building Maintainerr (Patience)"
-cd /opt/maintainerr
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export NODE_OPTIONS="--max-old-space-size=4096"
-$STD corepack enable
-$STD corepack prepare yarn@4.11.0 --activate
-$STD yarn config set enableTelemetry 0
-$STD yarn install --network-timeout 300000
-$STD yarn turbo build --concurrency=1
-cp -r apps/ui/dist apps/server/dist/ui
-cp -r apps/server/assets apps/server/dist/assets
-find apps/server/dist/ui -type f -not -path '*/node_modules/*' -print0 | xargs -0 sed -i "s,/__PATH_PREFIX__,,g"
-$STD yarn workspaces focus --all --production
-rm -rf /opt/maintainerr/.yarn/cache /opt/maintainerr/.turbo /opt/maintainerr/apps/ui
-msg_ok "Built Maintainerr"
-
-msg_info "Configuring Environment"
-mkdir -p /opt/data/logs
-ln -sfn /opt/maintainerr /opt/app
-cat <<EOF >/opt/maintainerr/.env
-NODE_ENV=production
-DATA_DIR=/opt/data
-UI_PORT=6246
-UI_HOSTNAME=0.0.0.0
-BASE_PATH=
-VERSION_TAG=stable
-npm_package_version=$(cat ~/.maintainerr)
-EOF
-msg_ok "Configured Environment"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/maintainerr.service
-[Unit]
-Description=Maintainerr
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/maintainerr/apps/server
-EnvironmentFile=/opt/maintainerr/.env
-ExecStart=/usr/bin/node dist/main
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now maintainerr
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/mastodon-install.sh
+++ b/install/mastodon-install.sh
@@ -48,13 +48,13 @@ PG_VERSION="17" setup_postgresql
 PG_DB_NAME="mastodon_production" PG_DB_USER="mastodon" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
 $STD sudo -u postgres psql -c "ALTER USER mastodon CREATEDB;"

+RUBY_VERSION="4.0.5" RUBY_INSTALL_RAILS="false" setup_ruby
+export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
+
 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
 sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
 sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb

-RUBY_VERSION="$(cat /opt/mastodon/.ruby-version)" RUBY_INSTALL_RAILS="false" setup_ruby
-export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
-
 msg_info "Installing Ruby Dependencies"
 cd /opt/mastodon
 $STD bundle config set --local without 'development test'
--- a/install/node-red-install.sh
+++ b/install/node-red-install.sh
@@ -23,7 +23,7 @@ setup_deb_based() {
  NODE_VERSION="22" setup_nodejs

  msg_info "Installing Node-Red"
-  $STD npm install -g node-red
+  $STD npm install -g --unsafe-perm node-red
  echo "journalctl -f -n 100 -u nodered -o cat" >/usr/bin/node-red-log
  chmod +x /usr/bin/node-red-log
  echo "systemctl stop nodered" >/usr/bin/node-red-stop
@@ -71,7 +71,7 @@ setup_alpine() {
  msg_ok "Created Node-RED User"

  msg_info "Installing Node-RED"
-  $STD npm install -g node-red
+  $STD npm install -g --unsafe-perm node-red
  msg_ok "Installed Node-RED"

  msg_info "Creating /home/nodered"
--- a/install/ntopng-install.sh
+++ b/install/ntopng-install.sh
@@ -13,15 +13,7 @@ setting_up_container
 network_check
 update_os

-NTOP_CODENAME="$(get_os_info codename)"
-case "$NTOP_CODENAME" in
-bookworm | trixie)
-  fetch_and_deploy_from_url "https://packages.ntop.org/apt/${NTOP_CODENAME}/all/apt-ntop.deb" ""
-  ;;
-*)
-  fetch_and_deploy_from_url "https://packages.ntop.org/apt-stable/${NTOP_CODENAME}/all/apt-ntop-stable.deb" ""
-  ;;
-esac
+fetch_and_deploy_from_url "https://packages.ntop.org/apt-stable/$(get_os_info codename)/all/apt-ntop-stable.deb" ""

 msg_info "Installing ntopng"
 $STD apt update
--- a/install/openbao-install.sh
+++ b/install/openbao-install.sh
@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Marc Went (Dunky13)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://openbao.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-fetch_and_deploy_gh_release "openbao" "openbao/openbao" "binary" "latest" "/opt/openbao" "openbao_*_linux_$(arch_resolve).deb"
-
-msg_info "Configuring CLI Environment"
-cat <<EOF >/etc/profile.d/openbao.sh
-export BAO_ADDR=https://127.0.0.1:8200
-export BAO_SKIP_VERIFY=true
-EOF
-source /etc/profile.d/openbao.sh
-msg_ok "Configured CLI Environment"
-
-msg_info "Starting OpenBao"
-systemctl enable -q --now openbao
-for _ in {1..30}; do
-  curl -fsSk -o /dev/null "https://127.0.0.1:8200/v1/sys/seal-status" && break
-  sleep 2
-done
-msg_ok "Started OpenBao"
-
-msg_info "Initializing OpenBao"
-(
-  umask 077
-  cat <<'EOF' >/etc/openbao/openbao-init.json
-EOF
-)
-bao operator init -key-shares=1 -key-threshold=1 -format=json >/etc/openbao/openbao-init.json
-chmod 600 /etc/openbao/openbao.env
-chown root:root /etc/openbao/openbao.env
-cat <<EOF >>/etc/openbao/openbao.env
-BAO_ADDR=https://127.0.0.1:8200
-BAO_SKIP_VERIFY=true
-BAO_UNSEAL_KEY=$(jq -r '.unseal_keys_b64[0]' /etc/openbao/openbao-init.json)
-BAO_ROOT_TOKEN=$(jq -r '.root_token' /etc/openbao/openbao-init.json)
-EOF
-rm -f /etc/openbao/openbao-init.json
-msg_ok "Initialized OpenBao"
-
-msg_info "Enabling Auto-Unseal"
-mkdir -p /etc/systemd/system/openbao.service.d
-cat <<'EOF' >/etc/systemd/system/openbao.service.d/unseal.conf
-[Service]
-ExecStartPost=-/usr/bin/bao operator unseal ${BAO_UNSEAL_KEY}
-EOF
-systemctl daemon-reload
-systemctl restart openbao
-for _ in {1..15}; do
-  bao status -format=json 2>/dev/null | jq -e '.sealed == false' >/dev/null && break
-  sleep 2
-done
-msg_ok "Enabled Auto-Unseal"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/openeuler-install.sh
+++ b/install/openeuler-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.openeuler.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/opensuse-install.sh
+++ b/install/opensuse-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.opensuse.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/podman-install.sh
+++ b/install/podman-install.sh
@@ -51,7 +51,6 @@ read -r -p "${TAB3}Would you like to add Portainer? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
  msg_info "Installing Portainer $PORTAINER_LATEST_VERSION"
  podman volume create portainer_data >/dev/null
-  $STD podman pull docker.io/portainer/portainer-ce:latest
  cat <<EOF >/etc/containers/systemd/portainer.container
 [Unit]
 Description=Portainer Container
@@ -78,7 +77,6 @@ else
  read -r -p "${TAB3}Would you like to add the Portainer Agent? <y/N> " prompt
  if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
    msg_info "Installing Portainer agent $PORTAINER_AGENT_LATEST_VERSION"
-    $STD podman pull docker.io/portainer/agent:latest
    cat <<EOF >/etc/containers/systemd/portainer-agent.container
 [Unit]
 Description=Portainer Agent Container
--- a/install/pve-ups-install.sh
+++ b/install/pve-ups-install.sh
@@ -27,7 +27,7 @@ install -d -o pveusv -g pveusv -m 0750 \
  /var/lib/pve-usv/updates
 chown -R pveusv:pveusv /opt/pve-usv
 cd /opt/pve-usv
-$STD uv venv --clear --seed venv
+$STD uv venv --clear venv
 $STD uv pip install --python venv/bin/python .
 chmod 0755 deploy/pve-usv-agent.sh
 msg_ok "Set up Application"
--- a/install/pyload-install.sh
+++ b/install/pyload-install.sh
@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/pyload/pyload
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  unrar-free \
-  p7zip-full \
-  tesseract-ocr
-msg_ok "Installed Dependencies"
-
-UV_PYTHON="3.13" setup_uv
-
-msg_info "Setting up pyLoad"
-mkdir -p /opt/pyload_data/{userdir,downloads}
-$STD uv venv --python 3.13 /opt/pyload/.venv
-$STD uv pip install --python /opt/pyload/.venv --prerelease allow "pyload-ng[all]"
-msg_ok "Set up pyLoad"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/pyload.service
-[Unit]
-Description=pyLoad Download Manager
-Wants=network-online.target
-After=network-online.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/pyload
-ExecStart=/opt/pyload/.venv/bin/pyload --userdir /opt/pyload_data/userdir --storagedir /opt/pyload_data/downloads
-Restart=always
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now pyload
-msg_ok "Created Service"
-
-msg_info "Configuring Web Interface"
-for _ in {1..30}; do
-  [[ -f /opt/pyload_data/userdir/settings/pyload.cfg ]] && break
-  sleep 1
-done
-sed -i 's|^\([[:space:]]*ip host : "IP address"\) = localhost$|\1 = 0.0.0.0|' /opt/pyload_data/userdir/settings/pyload.cfg
-
-# pyLoad rewrites storage_folder from --storagedir on every start; the first start seeded it.
-sed -i 's| --storagedir /opt/pyload_data/downloads||' /etc/systemd/system/pyload.service
-systemctl daemon-reload
-systemctl restart pyload
-msg_ok "Configured Web Interface"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/seanime-install.sh
+++ b/install/seanime-install.sh
@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: hasan-ismail
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://seanime.app/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-setup_hwaccel
-
-msg_info "Installing FFmpeg"
-setup_deb822_repo \
-  "jellyfin" \
-  "https://repo.jellyfin.org/jellyfin_team.gpg.key" \
-  "https://repo.jellyfin.org/debian" \
-  "$(get_os_info codename)"
-$STD apt install -y jellyfin-ffmpeg7
-ln -sf /usr/lib/jellyfin-ffmpeg/ffmpeg /usr/bin/ffmpeg
-ln -sf /usr/lib/jellyfin-ffmpeg/ffprobe /usr/bin/ffprobe
-msg_ok "Installed FFmpeg"
-
-fetch_and_deploy_gh_release "seanime" "5rahim/seanime" "prebuild" "latest" "/opt/seanime" "seanime-[0-9]*_Linux_$(arch_resolve x86_64 arm64).tar.gz"
-chmod +x /opt/seanime/seanime
-
-msg_info "Configuring Seanime"
-SEANIME_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-mkdir -p /opt/seanime-data
-cat <<EOF >/opt/seanime-data/config.toml
-[server]
-password = "${SEANIME_PASSWORD}"
-EOF
-cat <<EOF >/root/seanime.creds
-Seanime URL: http://${LOCAL_IP}:43211
-Password: ${SEANIME_PASSWORD}
-EOF
-msg_ok "Configured Seanime"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/seanime.service
-[Unit]
-Description=Seanime
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/seanime
-ExecStart=/opt/seanime/seanime --datadir /opt/seanime-data --host 0.0.0.0
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now seanime
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/solidinvoice-install.sh
+++ b/install/solidinvoice-install.sh
@@ -1,190 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Pierre du Plessis
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/solidinvoice/solidinvoice
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Creating Directories"
-mkdir -p /etc/solidinvoice /var/lib/solidinvoice
-msg_ok "Created Directories"
-
-fetch_and_deploy_gh_release "solidinvoice" "SolidInvoice/SolidInvoice" "singlefile" "latest" "/usr/bin" "solidinvoice-linux-$(arch_resolve)"
-
-msg_info "Configuring SolidInvoice"
-cat <<'EOF' >/etc/solidinvoice/solidinvoice.env
-# SolidInvoice environment configuration
-# This file is sourced by the systemd service unit.
-# CLI flags always take precedence over values set here.
-
-# ------------------------------------------------------------------
-# Network
-# ------------------------------------------------------------------
-
-# Port to listen on (default: 8765)
-#SOLIDINVOICE_PORT=8765
-
-# IP address to bind to (default: auto-detected outbound IP)
-#SOLIDINVOICE_SERVER_IP=0.0.0.0
-
-# Domain name — required when using Let's Encrypt or custom certificates.
-# When set, the application binds to https://<domain> instead of an IP.
-#SOLIDINVOICE_DOMAIN=
-
-# Bind the bundled webserver to every hostname so it answers regardless of the
-# Host header — required behind a reverse proxy that forwards the original domain.
-SOLIDINVOICE_DOCKER=true
-
-# ------------------------------------------------------------------
-# HTTPS / TLS
-# ------------------------------------------------------------------
-
-# Disable HTTPS and serve plain HTTP. Set to 1 when running behind a
-# reverse proxy (nginx, Caddy, Traefik, etc.) that handles TLS termination.
-# Remove or set to 0 when you want the application to manage its own certificates.
-SOLIDINVOICE_DISABLE_HTTPS=1
-
-# Enable automatic Let's Encrypt certificates (requires SOLIDINVOICE_DOMAIN).
-# Incompatible with SOLIDINVOICE_DISABLE_HTTPS=1.
-#SOLIDINVOICE_LETS_ENCRYPT=1
-
-# Paths to a custom TLS certificate and private key (requires SOLIDINVOICE_DOMAIN).
-# Incompatible with SOLIDINVOICE_DISABLE_HTTPS=1 and SOLIDINVOICE_LETS_ENCRYPT=1.
-#SOLIDINVOICE_SSL_CERT=/etc/ssl/certs/solidinvoice.crt
-#SOLIDINVOICE_SSL_KEY=/etc/ssl/private/solidinvoice.key
-
-# ------------------------------------------------------------------
-# Performance
-# ------------------------------------------------------------------
-
-# Enable FrankenPHP worker mode for improved performance (keeps PHP workers
-# alive between requests). Recommended for high-traffic deployments.
-# Set to 1 to enable.
-#FRANKENPHP_WORKER_MODE=1
-
-# Number of FrankenPHP worker threads when worker mode is enabled (default: 2).
-#SOLIDINVOICE_WORKER_THREADS=2
-
-# Number of background messenger worker processes (default: 1).
-# Set to 0 to disable built-in workers (use the dedicated 'solidinvoice worker'
-# command instead).
-#SOLIDINVOICE_MESSENGER_WORKERS=1
-
-# ------------------------------------------------------------------
-# Application
-# ------------------------------------------------------------------
-
-# Application environment. Change to "dev" only for local development.
-#SOLIDINVOICE_ENV=prod
-
-# Enable debug mode (0 or 1). Never enable in production.
-#SOLIDINVOICE_DEBUG=0
-
-# Configuration directory — stores generated secrets, OAuth keys, and the
-# SQLite database (when no external database is configured).
-SOLIDINVOICE_CONFIG_DIR=/etc/solidinvoice
-
-# Installation type identifier used for telemetry when opted in.
-SOLIDINVOICE_INSTALL_TYPE=proxmox-community-scripts
-
-# Skip the ASCII art / URL summary printed on startup.
-SOLIDINVOICE_SKIP_INTRO=1
-
-# Log format: "json" for structured logs (default for systemd), "console" for human-readable.
-SOLIDINVOICE_LOG_FORMAT=json
-
-# ------------------------------------------------------------------
-# Database
-# ------------------------------------------------------------------
-
-# Database connection URL. Defaults to SQLite stored in SOLIDINVOICE_CONFIG_DIR
-# when not set. Supported drivers: mysql, postgresql, sqlite.
-#SOLIDINVOICE_DATABASE_URL=mysql://user:password@127.0.0.1:3306/solidinvoice
-
-# ------------------------------------------------------------------
-# Email
-# ------------------------------------------------------------------
-
-# Outbound mail transport DSN. Overrides the transport configured in the UI.
-# See https://symfony.com/doc/current/mailer.html for DSN formats.
-#SOLIDINVOICE_MAILER_DSN=smtp://user:password@localhost:25
-
-# From address used for all outgoing emails. Overrides the address configured in the UI.
-#SOLIDINVOICE_MAILER_SENDER=SolidInvoice <noreply@example.com>
-
-# ------------------------------------------------------------------
-# Async messaging
-# ------------------------------------------------------------------
-
-# Messenger transport DSN. Defaults to the database (doctrine) queue.
-#SOLIDINVOICE_MESSENGER_DSN=doctrine://default?queue_name=async
-
-# ------------------------------------------------------------------
-# Search (optional)
-# ------------------------------------------------------------------
-
-# Meilisearch instance for full-text search. Leave blank to disable.
-#SOLIDINVOICE_MEILISEARCH_URL=http://localhost:7700
-#SOLIDINVOICE_MEILISEARCH_API_KEY=
-
-# ------------------------------------------------------------------
-# Localisation
-# ------------------------------------------------------------------
-
-# Default locale for the application interface (e.g. en, fr, de, nl).
-#SOLIDINVOICE_LOCALE=en
-
-# ------------------------------------------------------------------
-# User registration
-# ------------------------------------------------------------------
-
-# Allow visitors to create their own accounts (0 = disabled, 1 = enabled).
-#SOLIDINVOICE_ALLOW_REGISTRATION=0
-
-# ------------------------------------------------------------------
-# Monitoring (optional)
-# ------------------------------------------------------------------
-
-# Sentry DSN for error and performance monitoring.
-#SOLIDINVOICE_SENTRY_DSN=
-
-# Expose a Prometheus metrics endpoint on a dedicated port.
-#SOLIDINVOICE_ENABLE_METRICS=1
-#SOLIDINVOICE_METRICS_PORT=9090
-EOF
-chmod 640 /etc/solidinvoice/solidinvoice.env
-msg_ok "Configured SolidInvoice"
-
-msg_info "Creating Service"
-cat <<'EOF' >/etc/systemd/system/solidinvoice.service
-[Unit]
-Description=SolidInvoice
-Documentation=https://solidinvoice.co/docs
-After=network.target
-
-[Service]
-Type=exec
-User=root
-WorkingDirectory=/var/lib/solidinvoice
-ExecStart=/usr/bin/solidinvoice run
-EnvironmentFile=/etc/solidinvoice/solidinvoice.env
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now solidinvoice
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/stirling-pdf-install.sh
+++ b/install/stirling-pdf-install.sh
@@ -147,6 +147,7 @@ Group=root
 EnvironmentFile=/opt/Stirling-PDF/.env
 WorkingDirectory=/opt/Stirling-PDF
 ExecStart=/usr/bin/java -jar Stirling-PDF.jar
+ExecStop=/bin/kill -15 %n
 Restart=always
 RestartSec=10

--- a/install/super-productivity-install.sh
+++ b/install/super-productivity-install.sh
@@ -1,61 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://super-productivity.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  nginx \
-  git
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" setup_nodejs
-
-fetch_and_deploy_gh_release "super-productivity" "super-productivity/super-productivity" "tarball"
-
-msg_info "Building Web App"
-cd /opt/super-productivity
-export HUSKY=0
-export UNSPLASH_KEY=DUMMY_UNSPLASH_KEY
-export UNSPLASH_CLIENT_ID=DUMMY_UNSPLASH_CLIENT_ID
-export NODE_OPTIONS="--max-old-space-size=4096"
-$STD git config --global url."https://github.com/".insteadOf ssh://git@github.com/
-$STD npm ci
-$STD npm run buildFrontend:prodWeb
-msg_ok "Built Web App"
-
-msg_info "Deploying Web App"
-cp -r /opt/super-productivity/dist/browser/. /var/www/html/
-msg_ok "Deployed Web App"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/super-productivity.conf
-server {
-    listen 80 default_server;
-    server_name _;
-    root /var/www/html;
-    index index.html;
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-}
-EOF
-ln -sf /etc/nginx/sites-available/super-productivity.conf /etc/nginx/sites-enabled/super-productivity.conf
-rm -f /etc/nginx/sites-enabled/default
-systemctl reload nginx
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/Show More
+++ b/Show More