wanderer: set the proxy secret and install plugins in their own directories

0.21 requires POCKETBASE_PROXY_SECRET on both services, or every
incoming federation request is rejected; both read the same .env.

Each plugin archive holds one directory, which the deploy strips, so all
three landed flat in plugins/ and overwrote each other. wanderer only
loads direct child directories, so it found none. Existing installs are
moved over on the next update.

CHANGELOG.md

@@ -567,21 +567,12 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
-    - wanderer: set the proxy secret and install plugins in their own directories [@MickLesk](https://github.com/MickLesk) ([#17698](https://github.com/community-scripts/ProxmoxVE/pull/17698))
-    - discourse: serve stylesheets and repair the update [@MickLesk](https://github.com/MickLesk) ([#17697](https://github.com/community-scripts/ProxmoxVE/pull/17697))
     - wikijs: bump Node.js from 24 to 26 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17689](https://github.com/community-scripts/ProxmoxVE/pull/17689))
     - jotty: bump Node.js from 22 to 24 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17688](https://github.com/community-scripts/ProxmoxVE/pull/17688))
 
 ### 💾 Core
 
-  - Read releases from github.com when the API is rate limited, resume stalled downloads [@MickLesk](https://github.com/MickLesk) ([core#99](https://github.com/community-scripts/core/pull/99))
-- Check for template and container storage before the settings menu [@MickLesk](https://github.com/MickLesk) ([core#98](https://github.com/community-scripts/core/pull/98))
-- Check /etc/pve before the settings menu [@MickLesk](https://github.com/MickLesk) ([core#97](https://github.com/community-scripts/core/pull/97))
-- Check container settings before pct create rejects them [@MickLesk](https://github.com/MickLesk) ([core#96](https://github.com/community-scripts/core/pull/96))
-- PVE: Smart Diagnosis - say why a container would not start [@MickLesk](https://github.com/MickLesk) ([core#95](https://github.com/community-scripts/core/pull/95))
-- Retry template downloads that pveam reports as done but are not [@MickLesk](https://github.com/MickLesk) ([core#94](https://github.com/community-scripts/core/pull/94))
-- Check the OS release against pve-container before creating anything [@MickLesk](https://github.com/MickLesk) ([core#93](https://github.com/community-scripts/core/pull/93))
-- Rename "ProxmoxVED"-Links to "DevScripts" [@MickLesk](https://github.com/MickLesk) ([core#91](https://github.com/community-scripts/core/pull/91))
+  - Rename "ProxmoxVED"-Links to "DevScripts" [@MickLesk](https://github.com/MickLesk) ([core#91](https://github.com/community-scripts/core/pull/91))
 
 ### 🧰 Tools
 

ct/discourse.sh

@@ -36,35 +36,28 @@ function update_script() {
     exit
   fi
 
-  if grep -q 'X-Accel-Mapping' /etc/nginx/sites-available/discourse 2>/dev/null; then
-    msg_info "Fixing stylesheet delivery in Nginx"
-    sed -i '/X-Accel-Mapping/d' /etc/nginx/sites-available/discourse
-    $STD systemctl reload nginx
-    msg_ok "Fixed stylesheet delivery in Nginx"
-  fi
+  msg_info "Stopping Service"
+  systemctl stop discourse
+  msg_ok "Stopped Service"
 
-  msg_info "Stopping Services"
-  systemctl stop discourse discourse-sidekiq
-  msg_ok "Stopped Services"
+  create_backup /opt/discourse/.env
 
   msg_info "Updating Discourse"
+  PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
   cd /opt/discourse
-  export PATH="$HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH"
-  export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-  set -a
-  source /opt/discourse/.env
-  set +a
-  $STD git pull origin main
-  $STD bundle install
-  $STD pnpm install
+  git pull origin main
+  $STD bundle install --deployment --without test development
+  $STD yarn install
   $STD runuser -u postgres -- psql -d discourse -c "CREATE EXTENSION IF NOT EXISTS vector;"
-  $STD bundle exec rails db:migrate
   $STD bundle exec rails assets:precompile
+  $STD bundle exec rails db:migrate
   msg_ok "Updated Discourse"
 
-  msg_info "Starting Services"
-  systemctl start discourse discourse-sidekiq
-  msg_ok "Started Services"
+    restore_backup
+
+  msg_info "Starting Service"
+  systemctl start discourse
+  msg_ok "Started Service"
   msg_ok "Updated successfully!"
   exit
 }

install/discourse-install.sh

@@ -203,6 +203,7 @@ server {
     proxy_set_header X-Real-IP \$remote_addr;
     proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto \$scheme;
+    proxy_set_header X-Accel-Mapping /opt/discourse/public/=/downloads/;
   }
 }
 EOF