changedetection: fix: pin browserless

CHANGELOG.md

@@ -544,16 +544,12 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ### 🆕 New Scripts
 
-  - Chevereto ([#17131](https://github.com/community-scripts/ProxmoxVE/pull/17131))
+  - Safebucket ([#17096](https://github.com/community-scripts/ProxmoxVE/pull/17096))
-- Portabase ([#17111](https://github.com/community-scripts/ProxmoxVE/pull/17111))
-- Logseq ([#17112](https://github.com/community-scripts/ProxmoxVE/pull/17112))
-- Safebucket ([#17096](https://github.com/community-scripts/ProxmoxVE/pull/17096))
 
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
-    - Immich v3.2.0 [@vhsdream](https://github.com/vhsdream) ([#17137](https://github.com/community-scripts/ProxmoxVE/pull/17137))
     - fix(solidtime): prevent composer install from hanging on root prompt [@supersoju](https://github.com/supersoju) ([#17146](https://github.com/community-scripts/ProxmoxVE/pull/17146))
     - fix(hermesagent): wait for root gateway cleanup [@steveonjava](https://github.com/steveonjava) ([#17147](https://github.com/community-scripts/ProxmoxVE/pull/17147))
 

ct/changedetection.sh

@@ -69,6 +69,7 @@ function update_script() {
     $STD git -C /opt/browserless/ reset --hard origin/main
     $STD npm update --prefix /opt/browserless
     $STD npm ci --include=optional --include=dev --prefix /opt/browserless
+    $STD npm install --save-exact playwright-core@1.62.1 --prefix /opt/browserless
     $STD /opt/browserless/node_modules/playwright-core/cli.js install --with-deps
     # Update Chrome separately, as it has to be done with the force option. Otherwise the installation of other browsers will not be done if Chrome is already installed.
     $STD /opt/browserless/node_modules/playwright-core/cli.js install --force chrome

ct/chevereto.sh

@@ -1,73 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://chevereto.com/
-
-APP="Chevereto"
-var_tags="${var_tags:-image-hosting;gallery;media}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/chevereto ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "chevereto" "chevereto/chevereto"; then
-    PHP_FPM_SERVICE="$(basename "$(get_php_fpm_socket)" .sock)"
-
-    msg_info "Stopping Services"
-    systemctl stop nginx "$PHP_FPM_SERVICE"
-    msg_ok "Stopped Services"
-
-    create_backup /opt/chevereto/app/env.php \
-      /opt/chevereto/images \
-      /opt/chevereto/content
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "chevereto" "chevereto/chevereto" "tarball"
-
-    restore_backup
-
-    msg_info "Updating Chevereto"
-    cd /opt/chevereto/app
-    export COMPOSER_ALLOW_SUPERUSER=1
-    $STD composer install --no-dev --prefer-dist --no-interaction --optimize-autoloader
-    chown -R www-data:www-data /opt/chevereto
-    chmod -R 775 /opt/chevereto/images /opt/chevereto/content
-    msg_ok "Updated Chevereto"
-
-    msg_info "Starting Services"
-    systemctl start "$PHP_FPM_SERVICE" nginx
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/headers/chevereto

@@ -1,6 +0,0 @@
-   ________                             __      
-  / ____/ /_  ___ _   _____  ________  / /_____ 
- / /   / __ \/ _ \ | / / _ \/ ___/ _ \/ __/ __ \
-/ /___/ / / /  __/ |/ /  __/ /  /  __/ /_/ /_/ /
-\____/_/ /_/\___/|___/\___/_/   \___/\__/\____/ 
-                                                

ct/headers/logseq

@@ -1,6 +0,0 @@
-    __                               
-   / /   ____  ____ _________  ____ _
-  / /   / __ \/ __ `/ ___/ _ \/ __ `/
- / /___/ /_/ / /_/ (__  )  __/ /_/ / 
-/_____/\____/\__, /____/\___/\__, /  
-            /____/             /_/   

ct/headers/portabase

@@ -1,6 +0,0 @@
-    ____             __        __                  
-   / __ \____  _____/ /_____ _/ /_  ____ _________ 
-  / /_/ / __ \/ ___/ __/ __ `/ __ \/ __ `/ ___/ _ \
- / ____/ /_/ / /  / /_/ /_/ / /_/ / /_/ (__  )  __/
-/_/    \____/_/   \__/\__,_/_.___/\__,_/____/\___/ 
-                                                   

ct/immich.sh

@@ -112,7 +112,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="v3.2.0"
+  RELEASE="v3.1.0"
   if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     if [[ $(cat ~/.immich) > "2.5.1" ]]; then
       msg_info "Enabling Maintenance Mode"
@@ -187,10 +187,11 @@ EOF
     msg_info "Updating Immich web and microservices"
     cd "$SRC_DIR"/server
     # server build
+    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
     $STD pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter immich build
-    $STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
+    unset SHARP_IGNORE_GLOBAL_LIBVIPS
     export SHARP_FORCE_GLOBAL_LIBVIPS=true
-    $STD pnpm --dir "$APP_DIR/node_modules/sharp" exec npm run build
+    $STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
 
     # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
     if [[ -f "$APP_DIR/helmet.json" ]]; then
@@ -204,6 +205,7 @@ EOF
     cd "$SRC_DIR"
     echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
     unset SHARP_FORCE_GLOBAL_LIBVIPS
+    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
     $STD pnpm --filter @immich/sdk --filter immich-web --filter @immich/cli build
     $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
     cp -a web/build "$APP_DIR"/www

ct/logseq.sh

@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://logseq.com/
-
-APP="Logseq"
-var_tags="${var_tags:-notes;knowledge-base}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-16}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/logseq ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "logseq" "logseq/logseq"; then
-    NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-    JAVA_VERSION="21" setup_java
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "logseq" "logseq/logseq" "tarball"
-
-    msg_info "Building Logseq Web App (Patience)"
-    cd /opt/logseq
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export NODE_OPTIONS="--max-old-space-size=4096"
-    export JAVA_TOOL_OPTIONS="-Xmx4g"
-    $STD corepack enable
-    $STD pnpm install --config.network-timeout=240000
-    $STD pnpm release
-    msg_ok "Built Logseq Web App"
-
-    msg_info "Reloading Webserver"
-    systemctl reload nginx
-    msg_ok "Reloaded Webserver"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/portabase.sh

@@ -1,76 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://portabase.io
-
-APP="Portabase"
-var_tags="${var_tags:-database;backup}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-15}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/portabase ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "portabase" "Portabase/portabase"; then
-    msg_info "Stopping Services"
-    systemctl stop portabase portabase-tusd
-    msg_ok "Stopped Services"
-
-    create_backup /opt/portabase/.env
-
-    NODE_VERSION="22" NODE_MODULE="pnpm@11.8.0" setup_nodejs
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "portabase" "Portabase/portabase" "tarball"
-
-    restore_backup
-
-    msg_info "Building Portabase"
-    cd /opt/portabase
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export NEXT_TELEMETRY_DISABLED=1
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm run build
-    cp -r /opt/portabase/.next/static /opt/portabase/.next/standalone/.next/static
-    cp -r /opt/portabase/public /opt/portabase/.next/standalone/public
-    mkdir -p /opt/portabase/.next/standalone/src/db
-    cp -r /opt/portabase/src/db/migrations /opt/portabase/.next/standalone/src/db/migrations
-    ln -sf /opt/portabase/.env /opt/portabase/.next/standalone/.env
-    msg_ok "Built Portabase"
-
-    msg_info "Starting Services"
-    systemctl start portabase-tusd portabase
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"

install/changedetection-install.sh

@@ -62,6 +62,7 @@ mkdir /opt/browserless
 $STD /opt/changedetection/.venv/bin/python -m pip install playwright
 $STD git clone https://github.com/browserless/chrome /opt/browserless
 $STD npm ci --include=optional --include=dev --prefix /opt/browserless
+$STD npm install --save-exact playwright-core@1.62.1 --prefix /opt/browserless
 $STD /opt/browserless/node_modules/playwright-core/cli.js install --with-deps &>/dev/null
 $STD /opt/browserless/node_modules/playwright-core/cli.js install --force chrome &>/dev/null
 $STD /opt/browserless/node_modules/playwright-core/cli.js install chromium firefox webkit &>/dev/null

install/chevereto-install.sh

@@ -1,106 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://chevereto.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  nginx \
-  exiftran \
-  libimage-exiftool-perl
-msg_ok "Installed Dependencies"
-
-PHP_VERSION="8.3" PHP_FPM="YES" PHP_UPLOAD_MAX_FILESIZE="512M" PHP_POST_MAX_SIZE="512M" PHP_MAX_EXECUTION_TIME="600" setup_php
-setup_composer
-setup_mariadb
-setup_ffmpeg
-MARIADB_DB_NAME="chevereto" MARIADB_DB_USER="chevereto" setup_mariadb_db
-
-fetch_and_deploy_gh_release "chevereto" "chevereto/chevereto" "tarball"
-
-msg_info "Installing Chevereto Dependencies"
-cd /opt/chevereto/app
-export COMPOSER_ALLOW_SUPERUSER=1
-$STD composer install --no-dev --prefer-dist --no-interaction --optimize-autoloader
-msg_ok "Installed Chevereto Dependencies"
-
-msg_info "Configuring Chevereto"
-cat <<EOF >/opt/chevereto/app/env.php
-<?php
-
-return [
-    'CHEVERETO_DB_HOST' => 'localhost',
-    'CHEVERETO_DB_PORT' => '3306',
-    'CHEVERETO_DB_NAME' => '${MARIADB_DB_NAME}',
-    'CHEVERETO_DB_USER' => '${MARIADB_DB_USER}',
-    'CHEVERETO_DB_PASS' => '${MARIADB_DB_PASS}',
-    'CHEVERETO_DB_TABLE_PREFIX' => 'chv_',
-    'CHEVERETO_HOSTNAME' => '${LOCAL_IP}',
-];
-EOF
-chown -R www-data:www-data /opt/chevereto
-chmod -R 775 /opt/chevereto/images /opt/chevereto/content
-msg_ok "Configured Chevereto"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/chevereto
-server {
-    listen 80;
-    server_name _;
-    root /opt/chevereto;
-    index index.php;
-
-    charset utf-8;
-    client_max_body_size 512M;
-
-    add_header X-Frame-Options "SAMEORIGIN";
-    add_header X-Content-Type-Options "nosniff";
-
-    location / {
-        try_files $uri $uri/ /index.php$is_args$args;
-    }
-
-    location = /favicon.ico { access_log off; log_not_found off; }
-    location = /robots.txt  { access_log off; log_not_found off; }
-
-    location ~* ^/images/.+\.(gif|jpe?g|png|bmp|webp)$ {
-        try_files $uri =404;
-    }
-
-    location = /index.php {
-        include fastcgi_params;
-        fastcgi_pass unix:__PHP_FPM_SOCK__;
-        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
-        fastcgi_read_timeout 600;
-    }
-
-    location ~ \.php$ {
-        deny all;
-    }
-
-    location ^~ /app/ {
-        deny all;
-    }
-
-    location ~ /\.(?!well-known).* {
-        deny all;
-    }
-}
-EOF
-sed -i "s|__PHP_FPM_SOCK__|$(get_php_fpm_socket)|" /etc/nginx/sites-available/chevereto
-nginx_enable_site chevereto
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc

install/immich-install.sh

@@ -353,7 +353,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.2.0" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.1.0" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
@@ -370,10 +370,11 @@ export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 export CI=1
 
 # server build
+export SHARP_IGNORE_GLOBAL_LIBVIPS=true
 $STD pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter immich build
-$STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
+unset SHARP_IGNORE_GLOBAL_LIBVIPS
 export SHARP_FORCE_GLOBAL_LIBVIPS=true
-$STD pnpm --dir "$APP_DIR/node_modules/sharp" exec npm run build
+$STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
 
 # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
 if [[ -f "$APP_DIR/helmet.json" ]]; then
@@ -387,6 +388,7 @@ sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin
 cd "$SRC_DIR"
 echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
 unset SHARP_FORCE_GLOBAL_LIBVIPS
+export SHARP_IGNORE_GLOBAL_LIBVIPS=true
 $STD pnpm --filter @immich/sdk --filter immich-web --filter @immich/cli build
 $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
 cp -a web/build "$APP_DIR"/www

install/logseq-install.sh

@@ -1,86 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://logseq.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  git \
-  nginx \
-  build-essential \
-  libcairo2-dev \
-  libpango1.0-dev \
-  libjpeg-dev \
-  libgif-dev \
-  librsvg2-dev
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-JAVA_VERSION="21" setup_java
-
-msg_info "Installing Clojure CLI"
-cd /tmp
-curl_download "linux-install.sh" "https://github.com/clojure/brew-install/releases/latest/download/linux-install.sh"
-$STD bash linux-install.sh
-rm -f linux-install.sh
-msg_ok "Installed Clojure CLI"
-
-fetch_and_deploy_gh_release "logseq" "logseq/logseq" "tarball"
-
-msg_info "Building Logseq Web App (Patience)"
-cd /opt/logseq
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export NODE_OPTIONS="--max-old-space-size=4096"
-export JAVA_TOOL_OPTIONS="-Xmx4g"
-$STD corepack enable
-$STD pnpm install --config.network-timeout=240000
-$STD pnpm release
-msg_ok "Built Logseq Web App"
-
-msg_info "Generating Self-Signed Certificate"
-create_self_signed_cert "logseq"
-msg_ok "Generated Self-Signed Certificate"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/logseq
-server {
-    listen 80 default_server;
-    server_name _;
-    return 301 https://$host$request_uri;
-}
-
-server {
-    listen 443 ssl default_server;
-    http2 on;
-    server_name _;
-
-    ssl_certificate /etc/ssl/logseq/logseq.crt;
-    ssl_certificate_key /etc/ssl/logseq/logseq.key;
-
-    root /opt/logseq/static;
-    index index.html;
-
-    add_header Cross-Origin-Opener-Policy same-origin always;
-    add_header Cross-Origin-Embedder-Policy require-corp always;
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-}
-EOF
-nginx_enable_site logseq
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc

install/portabase-install.sh

@@ -1,163 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://portabase.io
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  git \
-  nginx
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" NODE_MODULE="pnpm@11.8.0" setup_nodejs
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="portabase" PG_DB_USER="portabase" setup_postgresql_db
-
-fetch_and_deploy_gh_release "portabase" "Portabase/portabase" "tarball"
-fetch_and_deploy_gh_release "tusd" "tus/tusd" "prebuild" "latest" "/opt/tusd" "tusd_linux_$(arch_resolve).tar.gz"
-
-msg_info "Configuring Portabase"
-mkdir -p /opt/portabase-data/uploads/tmp
-mv -f "/opt/tusd/tusd_linux_$(arch_resolve)/tusd" /opt/tusd/tusd
-rm -rf "/opt/tusd/tusd_linux_$(arch_resolve)"
-chmod +x /opt/tusd/tusd
-PROJECT_SECRET=$(openssl rand -hex 32)
-ADMIN_PASSWORD=$(openssl rand -base64 18 | tr -dc 'A-Za-z0-9' | head -c 16)
-cat <<EOF >/opt/portabase/.env
-LOG_LEVEL=info
-DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}
-PROJECT_NAME=Portabase
-PROJECT_URL=http://${LOCAL_IP}:3000
-PROJECT_SECRET=${PROJECT_SECRET}
-TRUSTED_DOMAINS=http://${LOCAL_IP}:3000
-PRIVATE_PATH=/opt/portabase-data
-AUTH_DEFAULT_USER_NAME=Portabase Admin
-AUTH_DEFAULT_USER=admin@example.com
-AUTH_DEFAULT_PASSWORD=${ADMIN_PASSWORD}
-AUTH_EMAIL_PASSWORD_ENABLED=true
-AUTH_SIGNUP_ENABLED=true
-RETENTION_CRON=0 7 * * *
-TUSD_BEHIND_PROXY=true
-TELEMETRY=false
-EOF
-cat <<EOF >~/portabase.creds
-Portabase Admin
-Username: admin@example.com
-Password: ${ADMIN_PASSWORD}
-EOF
-msg_ok "Configured Portabase"
-
-msg_info "Building Portabase"
-cd /opt/portabase
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export NEXT_TELEMETRY_DISABLED=1
-$STD pnpm install --frozen-lockfile
-$STD pnpm run build
-cp -r /opt/portabase/.next/static /opt/portabase/.next/standalone/.next/static
-cp -r /opt/portabase/public /opt/portabase/.next/standalone/public
-mkdir -p /opt/portabase/.next/standalone/src/db
-cp -r /opt/portabase/src/db/migrations /opt/portabase/.next/standalone/src/db/migrations
-ln -sf /opt/portabase/.env /opt/portabase/.next/standalone/.env
-msg_ok "Built Portabase"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/portabase-tusd.service
-[Unit]
-Description=Portabase tusd Upload Server
-After=network.target
-Before=portabase.service
-
-[Service]
-Type=simple
-ExecStart=/opt/tusd/tusd --base-path /tus/files/ --upload-dir /opt/portabase-data/uploads/tmp --hooks-http http://127.0.0.1:8887/api/tus/hooks --port 1080 --max-size 21474836480 --behind-proxy
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/portabase.service
-[Unit]
-Description=Portabase
-After=network.target postgresql.service portabase-tusd.service
-Wants=postgresql.service
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/portabase/.next/standalone
-Environment=NODE_ENV=production
-Environment=PORT=8887
-Environment=HOSTNAME=127.0.0.1
-ExecStart=/usr/bin/node /opt/portabase/.next/standalone/server.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now portabase-tusd portabase
-msg_ok "Created Services"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/portabase
-map $http_x_forwarded_proto $forwarded_proto {
-    default $scheme;
-    "~*^\s*(https?)\s*(?:,|$)" $1;
-}
-
-server {
-    listen 3000;
-    server_name _;
-
-    client_max_body_size 20G;
-    ignore_invalid_headers off;
-
-    location /tus/ {
-        proxy_pass http://127.0.0.1:1080/tus/;
-        proxy_pass_request_headers on;
-        proxy_request_buffering off;
-        proxy_buffering off;
-        proxy_http_version 1.1;
-        proxy_set_header Host $http_host;
-        proxy_set_header X-Forwarded-Host $http_host;
-        proxy_set_header X-Forwarded-Proto $forwarded_proto;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-    }
-
-    location = /api/tus/hooks {
-        deny all;
-        return 404;
-    }
-
-    location / {
-        proxy_pass http://127.0.0.1:8887;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $http_host;
-        proxy_set_header X-Forwarded-Host $http_host;
-        proxy_set_header X-Forwarded-Proto $forwarded_proto;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    }
-}
-EOF
-nginx_enable_site portabase
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc