gitea: fix ordering regression, chmod 750 before ln -s broke symlink creation

2026-08-30 12:05:44 +00:00 · 2026-08-25 16:02:48 +02:00
66 changed files with 242 additions and 2028 deletions
--- a/.github/changelogs/2026/08.md
+++ b/.github/changelogs/2026/08.md
@@ -1,131 +1,3 @@
-## 2026-08-29
-
-### 📚 Documentation
-
-  - github action: post the command that tests a ct/ or install/ change [@MickLesk](https://github.com/MickLesk) ([#16833](https://github.com/community-scripts/ProxmoxVE/pull/16833))
-
-## 2026-08-28
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - homepage: set CI=true so pnpm can self-heal node_modules without a TTY [@MickLesk](https://github.com/MickLesk) ([#16841](https://github.com/community-scripts/ProxmoxVE/pull/16841))
-    - droppedneedle: launch via automatic_upgrade orchestrator [@MickLesk](https://github.com/MickLesk) ([#16834](https://github.com/community-scripts/ProxmoxVE/pull/16834))
-    - calibre-web: point cps at explicit db path, src-layout package has no default anymore [@MickLesk](https://github.com/MickLesk) ([#16832](https://github.com/community-scripts/ProxmoxVE/pull/16832))
-    - podman: pull portainer images before systemd unit start to avoid start timeout [@MickLesk](https://github.com/MickLesk) ([#16831](https://github.com/community-scripts/ProxmoxVE/pull/16831))
-    - gitea: make gitea own its home dir instead of toggling group perms [@MickLesk](https://github.com/MickLesk) ([#16830](https://github.com/community-scripts/ProxmoxVE/pull/16830))
-    - pve-ups: fix: add pip binary  [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16820](https://github.com/community-scripts/ProxmoxVE/pull/16820))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Calibre-Web database creation [@MickLesk](https://github.com/MickLesk) ([#16842](https://github.com/community-scripts/ProxmoxVE/pull/16842))
-    - mastodon: read .ruby-version dynamically instead of hardcoding 4.0.5 [@MickLesk](https://github.com/MickLesk) ([#16829](https://github.com/community-scripts/ProxmoxVE/pull/16829))
-
-## 2026-08-27
-
-### 🆕 New Scripts
-
-  - Seanime ([#16777](https://github.com/community-scripts/ProxmoxVE/pull/16777))
- Yopass ([#16778](https://github.com/community-scripts/ProxmoxVE/pull/16778))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - excalidash: Add a sed to switch to the correct DB Provider [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16814](https://github.com/community-scripts/ProxmoxVE/pull/16814))
-    - fix(stirling-pdf): remove broken ExecStop using %n [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16813](https://github.com/community-scripts/ProxmoxVE/pull/16813))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Fix: Incorporate the new update functions to prevent a empty grep on … [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16809](https://github.com/community-scripts/ProxmoxVE/pull/16809))
-
-## 2026-08-26
-
-### 🆕 New Scripts
-
-  - CentOS ([#16772](https://github.com/community-scripts/ProxmoxVE/pull/16772))
- AlmaLinux ([#16771](https://github.com/community-scripts/ProxmoxVE/pull/16771))
- Fedora ([#16770](https://github.com/community-scripts/ProxmoxVE/pull/16770))
- Devuan ([#16773](https://github.com/community-scripts/ProxmoxVE/pull/16773))
- OpenEuler ([#16774](https://github.com/community-scripts/ProxmoxVE/pull/16774))
- Gentoo ([#16775](https://github.com/community-scripts/ProxmoxVE/pull/16775))
- openSUSE ([#16776](https://github.com/community-scripts/ProxmoxVE/pull/16776))
- Directus ([#16779](https://github.com/community-scripts/ProxmoxVE/pull/16779))
- HAProxy ([#16760](https://github.com/community-scripts/ProxmoxVE/pull/16760))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - [Fix]: LimeSurvey - enable Apache mod_rewrite [@jonathan8devs](https://github.com/jonathan8devs) ([#16767](https://github.com/community-scripts/ProxmoxVE/pull/16767))
-    - endurain: migrate legacy FRONTEND_DIR path on update [@MickLesk](https://github.com/MickLesk) ([#16794](https://github.com/community-scripts/ProxmoxVE/pull/16794))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: recognize bare XZ-compressed tarballs in fetch_and_deploy* [@MickLesk](https://github.com/MickLesk) ([#16796](https://github.com/community-scripts/ProxmoxVE/pull/16796))
-    - tools.func: fix mongodb version comparison, guard apt purge against removing dependents [@MickLesk](https://github.com/MickLesk) ([#16795](https://github.com/community-scripts/ProxmoxVE/pull/16795))
-
-### 📂 Github
-
-  - github: teach the PocketBase bot every field [@MickLesk](https://github.com/MickLesk) ([#16781](https://github.com/community-scripts/ProxmoxVE/pull/16781))
-
-## 2026-08-25
-
-### 🆕 New Scripts
-
-  - Budget-Board ([#16714](https://github.com/community-scripts/ProxmoxVE/pull/16714))
- Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
- pyLoad ([#16717](https://github.com/community-scripts/ProxmoxVE/pull/16717))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(apache-tika): handle upstream's switch from jar to zip distribution [@Munza2020](https://github.com/Munza2020) ([#16726](https://github.com/community-scripts/ProxmoxVE/pull/16726))
-    - Fix Firecrawl install: add ccache dependency for koffi native build [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16746](https://github.com/community-scripts/ProxmoxVE/pull/16746))
-    - excalidash: Fix broken Update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16747](https://github.com/community-scripts/ProxmoxVE/pull/16747))
-
-  - #### 💥 Breaking Changes
-
-    - Migrate the (remaining) Top 25 scripts to the new core engine [@MickLesk](https://github.com/MickLesk) ([#16749](https://github.com/community-scripts/ProxmoxVE/pull/16749))
-
-## 2026-08-24
-
-### 🆕 New Scripts
-
-  - ArchLinux ([#16715](https://github.com/community-scripts/ProxmoxVE/pull/16715))
- AirTrail ([#16713](https://github.com/community-scripts/ProxmoxVE/pull/16713))
- RockyLinux ([#16718](https://github.com/community-scripts/ProxmoxVE/pull/16718))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Add setup_mongodb back in Omada [@lucacome](https://github.com/lucacome) ([#16736](https://github.com/community-scripts/ProxmoxVE/pull/16736))
-    - fireshare: source fireshare.env during update [@MickLesk](https://github.com/MickLesk) ([#16706](https://github.com/community-scripts/ProxmoxVE/pull/16706))
-    - netbox: serve on plain HTTP too, port 80 forced HTTPS redirect broke reverse proxies [@MickLesk](https://github.com/MickLesk) ([#16707](https://github.com/community-scripts/ProxmoxVE/pull/16707))
-    - FileFlows: Fix Download URL [@MickLesk](https://github.com/MickLesk) ([#16708](https://github.com/community-scripts/ProxmoxVE/pull/16708))
-    - Gitea: fix git-over-SSH auth, group-writable home dir tripped sshd StrictModes [@MickLesk](https://github.com/MickLesk) ([#16710](https://github.com/community-scripts/ProxmoxVE/pull/16710))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - post-pve/pbs-install: fix component_exists_in_sources matching substrings of hyphenated tokens [@MickLesk](https://github.com/MickLesk) ([#16709](https://github.com/community-scripts/ProxmoxVE/pull/16709))
-
-## 2026-08-23
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Set default ProxmoxVE raw URL in PVE-UPS & fix var_cpu sorting  [@MickLesk](https://github.com/MickLesk) ([#16689](https://github.com/community-scripts/ProxmoxVE/pull/16689))
-
 ## 2026-08-22

 ### 🆕 New Scripts
--- a/.github/workflows/pocketbase-bot.yml
+++ b/.github/workflows/pocketbase-bot.yml
@@ -33,10 +33,6 @@ jobs:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          FRONTEND_URL: ${{ secrets.FRONTEND_URL }}
          REVALIDATE_SECRET: ${{ secrets.REVALIDATE_SECRET }}
-          # Screenshot attaching is delegated to the frontend, which owns the
-          # fetching and validation. Without this the subcommand says so rather
-          # than failing halfway.
-          SCREENSHOT_IMPORT_SECRET: ${{ secrets.SCREENSHOT_IMPORT_SECRET }}
        run: |
          node << 'ENDSCRIPT'
          (async function () {
@@ -327,21 +323,11 @@ jobs:
              '/pocketbase <slug> method remove <type>\n' +
              '```\n' +
              'Method fields: `cpu` `ram` `hdd` `os` `version` `config_path` `script`\n\n' +
-              '`cpu` `ram` `hdd` `os` `version` also work without `method` — they go to the\n' +
-              'default install method, e.g. `/pocketbase <slug> hdd=25`\n\n' +
              '**Editable fields:** `name` `description` `logo` `documentation` `website` `project_url` `repository` ' +
              '`config_path` `port` `default_user` `default_passwd` ' +
-              '`updateable` `privileged` `is_dev` `has_arm` ' +
+              '`updateable` `privileged` `is_dev` ' +
              '`architectures` (amd64,arm64) `platforms` (pve,incus) ' +
-              '`execute_in` (pve,lxc,pbs,vm,pmg,pdm) `categories` (names or ids) ' +
-              '`type` (ct, vm, addon, …) ' +
-              '`is_disabled` `disable_message` `is_deleted` `deleted_message`\n\n' +
-              '**Screenshots:**\n' +
-              '```\n' +
-              '/pocketbase <slug> screenshot https://example.com/one.png https://example.com/two.png\n' +
-              '```\n\n' +
-              '`slug` is deliberately not editable: it is the URL, the JSON filename and the\n' +
-              'ct/<slug>.sh path all at once, so renaming it is a migration rather than an edit.';
+              '`is_disabled` `disable_message` `is_deleted` `deleted_message`';

            if (!withoutCmd) {
              await addReaction('-1');
@@ -504,7 +490,6 @@ jobs:
            const noteMatch   = rest.match(/^note\s+(list|add|edit|remove)\b/i);
            const methodMatch = rest.match(/^method\b/i);
            const setMatch    = rest.match(/^set\s+(\S+)/i);
-            const shotMatch   = rest.match(/^screenshots?\s+(.+)$/i);

            if (infoMatch) {
              // ── INFO SUBCOMMAND ──────────────────────────────────────────────
@@ -550,44 +535,6 @@ jobs:
              await addReaction('+1');
              await postComment(out.join('\n'));

-            } else if (shotMatch) {
-              // ── SCREENSHOT SUBCOMMAND ────────────────────────────────────────
-              // Delegated to the frontend rather than reimplemented here: it
-              // already fetches the URL, checks the content type and size, and
-              // attaches the file to PocketBase. Doing that a second time in a
-              // workflow would be a second set of bugs.
-              const shotUrls = shotMatch[1].split(/[\s,]+/).map(function (u) { return u.trim(); }).filter(Boolean);
-              const bad = shotUrls.filter(function (u) { return !/^https?:\/\//i.test(u); });
-              if (bad.length > 0) {
-                await addReaction('-1');
-                await postComment('❌ **PocketBase Bot**: not a URL: `' + bad.join('`, `') + '`');
-                process.exit(0);
-              }
-              const frontendUrl = process.env.FRONTEND_URL;
-              const shotSecret = process.env.SCREENSHOT_IMPORT_SECRET;
-              if (!frontendUrl || !shotSecret) {
-                await addReaction('-1');
-                await postComment('❌ **PocketBase Bot**: screenshot import is not configured (FRONTEND_URL / SCREENSHOT_IMPORT_SECRET).');
-                process.exit(1);
-              }
-              const shotRes = await request(frontendUrl.replace(/\/$/, '') + '/api/screenshots', {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ slug: slug, secret: shotSecret, urls: shotUrls })
-              });
-              if (!shotRes.ok) {
-                await addReaction('-1');
-                await postComment('❌ **PocketBase Bot**: screenshot import failed:\n```\n' + shotRes.body + '\n```');
-                process.exit(1);
-              }
-              await revalidate(slug);
-              await addReaction('+1');
-              await postComment(
-                '✅ **PocketBase Bot**: attached ' + shotUrls.length + ' screenshot' + (shotUrls.length === 1 ? '' : 's') +
-                ' to **`' + slug + '`**\n\n' + shotUrls.map(function (u) { return '- ' + u; }).join('\n') +
-                '\n\n*Executed by @' + actor + '*'
-              );
-
            } else if (noteMatch) {
              // ── NOTE SUBCOMMAND ──────────────────────────────────────────────
              const noteAction  = noteMatch[1].toLowerCase();
@@ -891,20 +838,15 @@ jobs:
            } else if (setMatch) {
              // ── SET SUBCOMMAND (value from code block) ───────────────────────
              const fieldName = setMatch[1].toLowerCase();
-              // app_vars is a JSON column, so it rides the code-block path like
-              // the long text fields - but its content is parsed, not stored
-              // verbatim, or PocketBase ends up with a string where an object
-              // belongs and every reader has to guess.
              const SET_ALLOWED = {
                name: 'string', description: 'string', logo: 'string',
                documentation: 'string', website: 'string', project_url: 'string', repository: 'string',
-                config_path: 'string', disable_message: 'string', deleted_message: 'string',
-                app_vars: 'json'
+                config_path: 'string', disable_message: 'string', deleted_message: 'string'
              };
              if (!SET_ALLOWED[fieldName]) {
                await addReaction('-1');
                await postComment(
-                  '❌ **PocketBase Bot**: `set` only supports text and JSON fields.\n\n' +
+                  '❌ **PocketBase Bot**: `set` only supports text fields.\n\n' +
                  '**Allowed:** `' + Object.keys(SET_ALLOWED).join('`, `') + '`\n\n' +
                  'For boolean/number fields use `field=value` syntax instead.'
                );
@@ -919,21 +861,7 @@ jobs:
                process.exit(0);
              }
              const setPayload = {};
-              if (SET_ALLOWED[fieldName] === 'json') {
-                let parsedJson;
-                try {
-                  parsedJson = JSON.parse(codeBlockValue);
-                } catch (e) {
-                  await addReaction('-1');
-                  await postComment(
-                    '❌ **PocketBase Bot**: `' + fieldName + '` must be valid JSON.\n\n```\n' + e.message + '\n```'
-                  );
-                  process.exit(0);
-                }
-                setPayload[fieldName] = parsedJson;
-              } else {
-                setPayload[fieldName] = codeBlockValue;
-              }
+              setPayload[fieldName] = codeBlockValue;
              const setPatchRes = await request(recordsUrl + '/' + record.id, {
                method: 'PATCH',
                headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -973,10 +901,6 @@ jobs:
                privileged:       'boolean',
                architectures:    'select_list',
                platforms:        'select_list',
-                execute_in:       'select_list',
-                has_arm:          'boolean',
-                categories:       'relation_list',
-                type:             'relation_single',
                is_dev:           'boolean',
                is_disabled:      'boolean',
                disable_message:  'string',
@@ -986,18 +910,7 @@ jobs:

              const parsedFields = parseKVPairs(rest);

-              // cpu/ram/hdd/os/version live inside install_methods, not on the
-              // record itself. "/pocketbase immich hdd=25" is how people ask for
-              // it, so route those keys there instead of rejecting them as
-              // unknown fields. Everything else stays a plain record field.
-              const TOP_RESOURCE_KEYS = { cpu: 'number', ram: 'number', hdd: 'number', os: 'string', version: 'string' };
-              const resourceFields = {};
-              const scriptFields = {};
-              for (const [rk, rv] of Object.entries(parsedFields)) {
-                if (TOP_RESOURCE_KEYS[rk]) resourceFields[rk] = rv; else scriptFields[rk] = rv;
-              }
-
-              const unknownFields = Object.keys(scriptFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
+              const unknownFields = Object.keys(parsedFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
              if (unknownFields.length > 0) {
                await addReaction('-1');
                await postComment(
@@ -1017,10 +930,9 @@ jobs:
              const SELECT_VALUES = {
                architectures: ['amd64', 'arm64'],
                platforms: ['pve', 'incus'],
-                execute_in: ['pve', 'lxc', 'pbs', 'vm', 'pmg', 'pdm'],
              };
              const payload = {};
-              for (const [key, rawVal] of Object.entries(scriptFields)) {
+              for (const [key, rawVal] of Object.entries(parsedFields)) {
                const type = ALLOWED_FIELDS[key];
                if (type === 'boolean') {
                  if (rawVal === 'true') payload[key] = true;
@@ -1050,65 +962,6 @@ jobs:
                    process.exit(0);
                  }
                  payload[key] = values;
-                } else if (type === 'relation_list') {
-                  // categories is a relation, so the stored value is a list of
-                  // record ids. People write category names, so resolve them —
-                  // and accept ids too, which is what a copy out of the
-                  // PocketBase UI gives you.
-                  const wanted = rawVal.split(',').map(function (v) { return v.trim(); }).filter(Boolean);
-                  const catRes = await request(apiBase + '/collections/script_categories/records?perPage=500&fields=id,name', {
-                    headers: { 'Authorization': token }
-                  });
-                  if (!catRes.ok) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: could not read `script_categories` to resolve `' + key + '`.');
-                    process.exit(1);
-                  }
-                  const cats = JSON.parse(catRes.body).items || [];
-                  const byName = {};
-                  const ids = {};
-                  cats.forEach(function (c) { byName[String(c.name).toLowerCase()] = c.id; ids[c.id] = true; });
-                  const resolved = [];
-                  const unknownCats = [];
-                  wanted.forEach(function (w) {
-                    if (ids[w]) { resolved.push(w); return; }
-                    const id = byName[w.toLowerCase()];
-                    if (id) resolved.push(id); else unknownCats.push(w);
-                  });
-                  if (unknownCats.length > 0) {
-                    await addReaction('-1');
-                    await postComment(
-                      '❌ **PocketBase Bot**: unknown ' + key + ': `' + unknownCats.join('`, `') + '`\n\n' +
-                      '**Available:** `' + cats.map(function (c) { return c.name; }).sort().join('`, `') + '`'
-                    );
-                    process.exit(0);
-                  }
-                  payload[key] = resolved;
-                } else if (type === 'relation_single') {
-                  // type points at one z_ref_script_types record. People write
-                  // "ct" or "vm", not a 15-character id.
-                  const typeRes = await request(apiBase + '/collections/z_ref_script_types/records?perPage=200&fields=id,type', {
-                    headers: { 'Authorization': token }
-                  });
-                  if (!typeRes.ok) {
-                    await addReaction('-1');
-                    await postComment('❌ **PocketBase Bot**: could not read `z_ref_script_types` to resolve `' + key + '`.');
-                    process.exit(1);
-                  }
-                  const types = JSON.parse(typeRes.body).items || [];
-                  const wantType = rawVal.trim().toLowerCase();
-                  const hit = types.find(function (t) {
-                    return t.id === rawVal.trim() || String(t.type).toLowerCase() === wantType;
-                  });
-                  if (!hit) {
-                    await addReaction('-1');
-                    await postComment(
-                      '❌ **PocketBase Bot**: unknown type `' + rawVal + '`\n\n' +
-                      '**Available:** `' + types.map(function (t) { return t.type; }).sort().join('`, `') + '`'
-                    );
-                    process.exit(0);
-                  }
-                  payload[key] = hit.id;
                } else if (type === 'nullable_string') {
                  payload[key] = rawVal === '' ? null : rawVal;
                } else {
@@ -1116,42 +969,6 @@ jobs:
                }
              }

-              // Resources go into install_methods. Which method: the only one if
-              // there is only one, otherwise the non-Alpine default — and the
-              // reply says which, so nobody has to guess where 25 GB landed.
-              const resourceKeys = Object.keys(resourceFields);
-              let resourceTargetType = null;
-              if (resourceKeys.length > 0) {
-                const methodsArr = readJsonBlob(record.install_methods) || [];
-                if (methodsArr.length === 0) {
-                  await addReaction('-1');
-                  await postComment(
-                    '❌ **PocketBase Bot**: `' + slug + '` has no install methods, so there is nowhere to put `' +
-                    resourceKeys.join('`, `') + '`.\n\nAdd one first: `/pocketbase ' + slug + ' method add default cpu=2 ram=2048 hdd=8`'
-                  );
-                  process.exit(0);
-                }
-                let target = methodsArr.find(function (m) {
-                  return String(m.type || '').toLowerCase() !== 'alpine';
-                }) || methodsArr[0];
-                resourceTargetType = target.type || 'default';
-                if (!target.resources) target.resources = {};
-                for (const [rk, rv] of Object.entries(resourceFields)) {
-                  if (TOP_RESOURCE_KEYS[rk] === 'number') {
-                    const n = parseInt(rv, 10);
-                    if (isNaN(n)) {
-                      await addReaction('-1');
-                      await postComment('❌ **PocketBase Bot**: `' + rk + '` must be a number, got: `' + rv + '`');
-                      process.exit(0);
-                    }
-                    target.resources[rk] = n;
-                  } else {
-                    target.resources[rk] = rv;
-                  }
-                }
-                payload.install_methods = methodsArr;
-              }
-
              const patchRes = await request(recordsUrl + '/' + record.id, {
                method: 'PATCH',
                headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -1164,16 +981,10 @@ jobs:
              }
              await revalidate(slug);
              const FIELD_TO_CT_VAR = { tags: 'var_tags', unprivileged: 'var_unprivileged' };
-              const RESOURCE_CT_VAR = { cpu: 'var_cpu', ram: 'var_ram', hdd: 'var_disk', os: 'var_os', version: 'var_version' };
              const fieldCtChanges = {};
              for (const [k, v] of Object.entries(payload)) {
                if (FIELD_TO_CT_VAR[k]) fieldCtChanges[FIELD_TO_CT_VAR[k]] = v;
              }
-              // Resources belong in the CT script too, exactly as the `method`
-              // path syncs them - otherwise PocketBase and ct/<slug>.sh drift.
-              for (const [k, v] of Object.entries(resourceFields)) {
-                if (RESOURCE_CT_VAR[k]) fieldCtChanges[RESOURCE_CT_VAR[k]] = v;
-              }
              let fieldCtSync = null;
              try {
                fieldCtSync = await upsertCtDefaultsPr(slug, fieldCtChanges);
@@ -1181,14 +992,8 @@ jobs:
                fieldCtSync = { status: 'skipped', reason: 'CT sync failed: ' + e.message };
              }
              await addReaction('+1');
-              // install_methods is skipped here: dumping the whole array as JSON
-              // buries the one number that actually changed.
              const changesLines = Object.entries(payload)
-                .filter(function (e) { return e[0] !== 'install_methods'; })
                .map(function ([k, v]) { return '- `' + k + '` → `' + JSON.stringify(v) + '`'; })
-                .concat(Object.entries(resourceFields).map(function ([k, v]) {
-                  return '- `' + k + '` → `' + v + '` *(install method `' + resourceTargetType + '`)*';
-                }))
                .join('\n');
              await postComment(
                '✅ **PocketBase Bot**: Updated **`' + slug + '`** successfully!\n\n' +
--- a/.github/workflows/pr-test-command.yml
+++ b/.github/workflows/pr-test-command.yml
@@ -1,171 +0,0 @@
-name: PR test command
-
-# Posts a ready-to-run test command for reviewers.
-# It uses this PR’s script branch with the production engine, since both resolve
-# independently. Only scripts using community-scripts/core are supported.
-#
-# pull_request_target allows comments on fork PRs. No PR code is checked out or
-# executed; API inputs are validated and the comment is assembled in JavaScript.
-
-on:
-  pull_request_target:
-    branches: ["main"]
-    types: [opened, synchronize, reopened]
-    paths:
-      - "ct/**"
-      - "install/**"
-
-jobs:
-  comment:
-    if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: self-hosted
-    permissions:
-      pull-requests: write
-      contents: read
-    steps:
-      - uses: actions/github-script@v9
-        with:
-          script: |
-            const MARKER = '<!-- pr-test-command -->';
-            const MAX_APPS = 10;
-
-            const pr = context.payload.pull_request;
-            const head = pr.head.repo;            // null when the fork is gone
-            if (!head) return;
-
-            const owner = context.repo.owner;
-            const repo = context.repo.repo;
-
-            // Git allows backticks in a ref name, and this one ends up inside a
-            // fenced block. Anything outside the ordinary set is not worth
-            // rendering, so bail rather than escape.
-            const ref = pr.head.ref;
-            if (!/^[A-Za-z0-9._\/-]+$/.test(ref)) return;
-            const base = `https://raw.githubusercontent.com/${head.full_name}/${ref}`;
-
-            const files = await github.paginate(github.rest.pulls.listFiles, {
-              owner, repo, pull_number: pr.number, per_page: 100,
-            });
-
-            // ct/foo.sh and install/foo-install.sh are the same app. A removed
-            // file has nothing left to run.
-            const apps = new Map();               // slug -> {ct, install}
-            for (const f of files) {
-              if (f.status === 'removed') continue;
-              let m = f.filename.match(/^ct\/([a-z0-9][a-z0-9._-]*)\.sh$/);
-              if (m) { apps.set(m[1], { ...apps.get(m[1]), ct: true }); continue; }
-              m = f.filename.match(/^install\/([a-z0-9][a-z0-9._-]*)-install\.sh$/);
-              if (m) apps.set(m[1], { ...apps.get(m[1]), install: true });
-            }
-            if (apps.size === 0) return;
-
-            // Read the ct script at the PR head to see which engine it loads.
-            // Read only -- it is never sourced or run.
-            async function bootstrapOf(slug) {
-              try {
-                const res = await github.rest.repos.getContent({
-                  owner: head.owner.login, repo: head.name,
-                  path: `ct/${slug}.sh`, ref: pr.head.sha,
-                });
-                if (!res.data.content) return 'unknown';
-                const text = Buffer.from(res.data.content, 'base64').toString('utf8');
-                const firstLines = text.split('\n').slice(0, 12).join('\n');
-                return /_cs_boot=/.test(firstLines) ? 'core' : 'legacy';
-              } catch (e) {
-                return e.status === 404 ? 'missing' : 'unknown';
-              }
-            }
-
-            const ready = [], legacy = [], missing = [];
-            for (const slug of [...apps.keys()].sort()) {
-              const kind = await bootstrapOf(slug);
-              if (kind === 'core') ready.push(slug);
-              else if (kind === 'legacy') legacy.push(slug);
-              else if (kind === 'missing') missing.push(slug);
-            }
-
-            const lines = [MARKER];
-
-            if (ready.length > 0) {
-              const shown = ready.slice(0, MAX_APPS);
-              lines.push(
-                '### Try this branch',
-                '',
-                'The engine and the scripts resolve independently, so this runs the changed',
-                '`ct/` and `install/` scripts against the **production** engine:',
-                '',
-              );
-              for (const slug of shown) {
-                lines.push(
-                  '```bash',
-                  `export COMMUNITY_SCRIPTS_URL=${base}`,
-                  `bash -c "$(curl -fsSL "$COMMUNITY_SCRIPTS_URL/ct/${slug}.sh")"`,
-                  '```',
-                  '',
-                );
-              }
-              if (ready.length > shown.length) {
-                lines.push(
-                  `${ready.length - shown.length} more script(s) changed; same command, different slug.`,
-                  '',
-                );
-              }
-              lines.push(
-                'Both lines are needed. Each script pins `_CS_DEFAULT_URL` to `main`, and that',
-                'pin is what fills `COMMUNITY_SCRIPTS_URL` when the variable is unset — so',
-                'curling the branch URL on its own gives you the `ct/` script from this PR and',
-                'the `install/` script from `main`. Frequently the one you meant to test.',
-                '',
-                'The same command works on an Incus host: the engine detects the platform and',
-                'loads the matching backend, while the scripts still come from this branch.',
-                '',
-                '<details><summary>Useful while testing</summary>',
-                '',
-                '`dev_mode=net` logs every fetch with status and URL, which is the quickest way',
-                'to confirm the branch is really being used. `dev_mode=keep` stops a failed',
-                'build from deleting the container along with the evidence.',
-                '',
-                '```bash',
-                `export COMMUNITY_SCRIPTS_URL=${base}`,
-                `dev_mode=net,keep bash -c "$(curl -fsSL "$COMMUNITY_SCRIPTS_URL/ct/${shown[0]}.sh")"`,
-                '```',
-                '</details>',
-              );
-            }
-
-            if (legacy.length > 0) {
-              lines.push(
-                '',
-                ready.length > 0 ? '---' : '### Not testable this way yet',
-                '',
-                `\`${legacy.join('`, `')}\` still uses the older one-liner bootstrap, which`,
-                'resolves everything from `ProxmoxVE/main` and ignores `COMMUNITY_SCRIPTS_URL`.',
-                'There is no way to point it at this branch — test it from a checkout on the',
-                'host instead, or migrate the script to the `_cs_boot` bootstrap first.',
-              );
-            }
-
-            if (missing.length > 0) {
-              lines.push(
-                '',
-                `No \`ct/\` script found for \`${missing.join('`, `')}\`, so there is nothing to`,
-                'run. If the install script was renamed, its `ct/` counterpart needs the same',
-                'name.',
-              );
-            }
-
-            if (lines.length === 1) return;   // marker only, nothing worth saying
-            const body = lines.join('\n');
-
-            // Update in place rather than posting again on every push.
-            const comments = await github.paginate(github.rest.issues.listComments, {
-              owner, repo, issue_number: pr.number, per_page: 100,
-            });
-            const mine = comments.find(c => c.body.includes(MARKER));
-            if (mine) {
-              if (mine.body !== body) {
-                await github.rest.issues.updateComment({ owner, repo, comment_id: mine.id, body });
-              }
-            } else {
-              await github.rest.issues.createComment({ owner, repo, issue_number: pr.number, body });
-            }
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -95,9 +95,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit



-
-
-



@@ -111,7 +108,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit


 <details>
-<summary><h4>August (29 entries)</h4></summary>
+<summary><h4>August (22 entries)</h4></summary>

 [View August 2026 Changelog](.github/changelogs/2026/08.md)

@@ -530,96 +527,11 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-08-30
-
-### 🚀 Updated Scripts
-
-  - #### 🔧 Refactor
-
-    - general: remove gitea links overall  [@MickLesk](https://github.com/MickLesk) ([#16863](https://github.com/community-scripts/ProxmoxVE/pull/16863))
-
-## 2026-08-29
-
-### 📚 Documentation
-
-  - github action: post the command that tests a ct/ or install/ change [@MickLesk](https://github.com/MickLesk) ([#16833](https://github.com/community-scripts/ProxmoxVE/pull/16833))
-
-## 2026-08-28
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - homepage: set CI=true so pnpm can self-heal node_modules without a TTY [@MickLesk](https://github.com/MickLesk) ([#16841](https://github.com/community-scripts/ProxmoxVE/pull/16841))
-    - droppedneedle: launch via automatic_upgrade orchestrator [@MickLesk](https://github.com/MickLesk) ([#16834](https://github.com/community-scripts/ProxmoxVE/pull/16834))
-    - calibre-web: point cps at explicit db path, src-layout package has no default anymore [@MickLesk](https://github.com/MickLesk) ([#16832](https://github.com/community-scripts/ProxmoxVE/pull/16832))
-    - podman: pull portainer images before systemd unit start to avoid start timeout [@MickLesk](https://github.com/MickLesk) ([#16831](https://github.com/community-scripts/ProxmoxVE/pull/16831))
-    - gitea: make gitea own its home dir instead of toggling group perms [@MickLesk](https://github.com/MickLesk) ([#16830](https://github.com/community-scripts/ProxmoxVE/pull/16830))
-    - pve-ups: fix: add pip binary  [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16820](https://github.com/community-scripts/ProxmoxVE/pull/16820))
-
-  - #### 🔧 Refactor
-
-    - Refactor: Calibre-Web database creation [@MickLesk](https://github.com/MickLesk) ([#16842](https://github.com/community-scripts/ProxmoxVE/pull/16842))
-    - mastodon: read .ruby-version dynamically instead of hardcoding 4.0.5 [@MickLesk](https://github.com/MickLesk) ([#16829](https://github.com/community-scripts/ProxmoxVE/pull/16829))
-
-## 2026-08-27
-
-### 🆕 New Scripts
-
-  - Seanime ([#16777](https://github.com/community-scripts/ProxmoxVE/pull/16777))
- Yopass ([#16778](https://github.com/community-scripts/ProxmoxVE/pull/16778))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - excalidash: Add a sed to switch to the correct DB Provider [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16814](https://github.com/community-scripts/ProxmoxVE/pull/16814))
-    - fix(stirling-pdf): remove broken ExecStop using %n [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16813](https://github.com/community-scripts/ProxmoxVE/pull/16813))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Fix: Incorporate the new update functions to prevent a empty grep on … [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16809](https://github.com/community-scripts/ProxmoxVE/pull/16809))
-
-## 2026-08-26
-
-### 🆕 New Scripts
-
-  - CentOS ([#16772](https://github.com/community-scripts/ProxmoxVE/pull/16772))
- AlmaLinux ([#16771](https://github.com/community-scripts/ProxmoxVE/pull/16771))
- Fedora ([#16770](https://github.com/community-scripts/ProxmoxVE/pull/16770))
- Devuan ([#16773](https://github.com/community-scripts/ProxmoxVE/pull/16773))
- OpenEuler ([#16774](https://github.com/community-scripts/ProxmoxVE/pull/16774))
- Gentoo ([#16775](https://github.com/community-scripts/ProxmoxVE/pull/16775))
- openSUSE ([#16776](https://github.com/community-scripts/ProxmoxVE/pull/16776))
- Directus ([#16779](https://github.com/community-scripts/ProxmoxVE/pull/16779))
- HAProxy ([#16760](https://github.com/community-scripts/ProxmoxVE/pull/16760))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - [Fix]: LimeSurvey - enable Apache mod_rewrite [@jonathan8devs](https://github.com/jonathan8devs) ([#16767](https://github.com/community-scripts/ProxmoxVE/pull/16767))
-    - endurain: migrate legacy FRONTEND_DIR path on update [@MickLesk](https://github.com/MickLesk) ([#16794](https://github.com/community-scripts/ProxmoxVE/pull/16794))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: recognize bare XZ-compressed tarballs in fetch_and_deploy* [@MickLesk](https://github.com/MickLesk) ([#16796](https://github.com/community-scripts/ProxmoxVE/pull/16796))
-    - tools.func: fix mongodb version comparison, guard apt purge against removing dependents [@MickLesk](https://github.com/MickLesk) ([#16795](https://github.com/community-scripts/ProxmoxVE/pull/16795))
-
-### 📂 Github
-
-  - github: teach the PocketBase bot every field [@MickLesk](https://github.com/MickLesk) ([#16781](https://github.com/community-scripts/ProxmoxVE/pull/16781))
-
 ## 2026-08-25

 ### 🆕 New Scripts

-  - Budget-Board ([#16714](https://github.com/community-scripts/ProxmoxVE/pull/16714))
- Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
+  - Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
 - pyLoad ([#16717](https://github.com/community-scripts/ProxmoxVE/pull/16717))

 ### 🚀 Updated Scripts
@@ -1107,4 +1019,183 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
  - #### 🐞 Bug Fixes

    - Docmost: cleanup folder at update [@MickLesk](https://github.com/MickLesk) ([#16177](https://github.com/community-scripts/ProxmoxVE/pull/16177))
-    - Firecrawl: Add dependency [@tremor021](https://github.com/tremor021) ([#16174](https://github.com/community-scripts/ProxmoxVE/pull/16174))
+    - Firecrawl: Add dependency [@tremor021](https://github.com/tremor021) ([#16174](https://github.com/community-scripts/ProxmoxVE/pull/16174))
+
+## 2026-07-30
+
+### 🆕 New Scripts
+
+  - Firecrawl ([#16156](https://github.com/community-scripts/ProxmoxVE/pull/16156))
+- OmniRoute ([#16155](https://github.com/community-scripts/ProxmoxVE/pull/16155))
+- PegaProx ([#16154](https://github.com/community-scripts/ProxmoxVE/pull/16154))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: Pin version to 3.1.0 [@vhsdream](https://github.com/vhsdream) ([#16170](https://github.com/community-scripts/ProxmoxVE/pull/16170))
+    - romm: remove stale 1.x alembic migrations on update [@Darkatek7](https://github.com/Darkatek7) ([#16101](https://github.com/community-scripts/ProxmoxVE/pull/16101))
+
+  - #### 🔧 Refactor
+
+    - Medusa: convert the non-free unrar source to deb822 format [@angusmaul](https://github.com/angusmaul) ([#16093](https://github.com/community-scripts/ProxmoxVE/pull/16093))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - tools.func: support dynamic gitlab URL | add setup_mysql_db function [@MickLesk](https://github.com/MickLesk) ([#16166](https://github.com/community-scripts/ProxmoxVE/pull/16166))
+    - core: add configurable host CA inheritance during bootstrap [@MickLesk](https://github.com/MickLesk) ([#15889](https://github.com/community-scripts/ProxmoxVE/pull/15889))
+
+## 2026-07-29
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - backup virtual printer in bambuddy [@asylumexp](https://github.com/asylumexp) ([#16142](https://github.com/community-scripts/ProxmoxVE/pull/16142))
+    - ImmichFrame: check .NET SDK before update deployment [@aidaskni](https://github.com/aidaskni) ([#16104](https://github.com/community-scripts/ProxmoxVE/pull/16104))
+
+  - #### ✨ New Features
+
+    - Bichon: Migration for V2 Release [@MickLesk](https://github.com/MickLesk) ([#16145](https://github.com/community-scripts/ProxmoxVE/pull/16145))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: Harden remote func bootstrapping with dns issues [@MickLesk](https://github.com/MickLesk) ([#16146](https://github.com/community-scripts/ProxmoxVE/pull/16146))
+
+## 2026-07-28
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Create search directory in wanderer-install.sh [@Isnubi](https://github.com/Isnubi) ([#16134](https://github.com/community-scripts/ProxmoxVE/pull/16134))
+    - npmplus: Remove duplicate msg_info for container recreation [@MickLesk](https://github.com/MickLesk) ([#16122](https://github.com/community-scripts/ProxmoxVE/pull/16122))
+    - fix Node.js version drift [@asylumexp](https://github.com/asylumexp) ([#16111](https://github.com/community-scripts/ProxmoxVE/pull/16111))
+    - UmlautAdaptarr: use the Debian 13 Microsoft repo with its 2025 signing key [@angusmaul](https://github.com/angusmaul) ([#16077](https://github.com/community-scripts/ProxmoxVE/pull/16077))
+    - fix(bazarr): store data in /var/lib/bazarr instead of inside /opt/bazarr [@angusmaul](https://github.com/angusmaul) ([#16098](https://github.com/community-scripts/ProxmoxVE/pull/16098))
+    - Cloudflare-DDNS: store API token in a 600 env file and build the binary at install time [@angusmaul](https://github.com/angusmaul) ([#16100](https://github.com/community-scripts/ProxmoxVE/pull/16100))
+
+  - #### ✨ New Features
+
+    - tools.func:  add nginx site helper and PHP socket resolver  [@MickLesk](https://github.com/MickLesk) ([#16118](https://github.com/community-scripts/ProxmoxVE/pull/16118))
+
+  - #### 💥 Breaking Changes
+
+    - Migrate Musicseerr to DroppedNeedle [@vhsdream](https://github.com/vhsdream) ([#15751](https://github.com/community-scripts/ProxmoxVE/pull/15751))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: fix read prompt input directly from /dev/tty [@MickLesk](https://github.com/MickLesk) ([#16126](https://github.com/community-scripts/ProxmoxVE/pull/16126))
+
+### 🧰 Tools
+
+  - actual-budget-prometheus-exporter ([#16109](https://github.com/community-scripts/ProxmoxVE/pull/16109))
+
+  - #### 🐞 Bug Fixes
+
+    - fix: prometheus-paperless-exporter incompatibility with paperless v3 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16119](https://github.com/community-scripts/ProxmoxVE/pull/16119))
+
+### 📂 Github
+
+  - fix keep-open for close invalid pr [@asylumexp](https://github.com/asylumexp) ([#16105](https://github.com/community-scripts/ProxmoxVE/pull/16105))
+- Bump GitHub Actions across workflows  [@MickLesk](https://github.com/MickLesk) ([#16091](https://github.com/community-scripts/ProxmoxVE/pull/16091))
+
+## 2026-07-27
+
+### 🆕 New Scripts
+
+  - Unpackerr ([#16034](https://github.com/community-scripts/ProxmoxVE/pull/16034))
+- CookCLI ([#16028](https://github.com/community-scripts/ProxmoxVE/pull/16028))
+- Discourse ([#16024](https://github.com/community-scripts/ProxmoxVE/pull/16024))
+- Mastodon ([#16029](https://github.com/community-scripts/ProxmoxVE/pull/16029))
+- Docspell ([#16033](https://github.com/community-scripts/ProxmoxVE/pull/16033))
+- Poznote ([#16030](https://github.com/community-scripts/ProxmoxVE/pull/16030))
+- Shiori ([#16026](https://github.com/community-scripts/ProxmoxVE/pull/16026))
+- Nezha ([#16025](https://github.com/community-scripts/ProxmoxVE/pull/16025))
+- PasswordPusher ([#16031](https://github.com/community-scripts/ProxmoxVE/pull/16031))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Update MeiliSearch command for database upgrade [@Isnubi](https://github.com/Isnubi) ([#16081](https://github.com/community-scripts/ProxmoxVE/pull/16081))
+    - Mylar3 & Medusa: use trixie non-free for unrar, not bookworm [@angusmaul](https://github.com/angusmaul) ([#16072](https://github.com/community-scripts/ProxmoxVE/pull/16072))
+    - Vikunja: pin install/update to v2.3.0 due upstream issues [@MickLesk](https://github.com/MickLesk) ([#16059](https://github.com/community-scripts/ProxmoxVE/pull/16059))
+
+  - #### ✨ New Features
+
+    - OpenThread-BR: Add runtime configuration options [@tomfrenzel](https://github.com/tomfrenzel) ([#16038](https://github.com/community-scripts/ProxmoxVE/pull/16038))
+
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: Handle LXC upgrade prompt cancellation [@MickLesk](https://github.com/MickLesk) ([#16058](https://github.com/community-scripts/ProxmoxVE/pull/16058))
+
+  - #### ✨ New Features
+
+    - core: fix OS version fallback when the host catalog lacks the requested version & harden template validation [@MickLesk](https://github.com/MickLesk) ([#16068](https://github.com/community-scripts/ProxmoxVE/pull/16068))
+
+## 2026-07-26
+
+### 🆕 New Scripts
+
+  - Satisfactory ([#16023](https://github.com/community-scripts/ProxmoxVE/pull/16023))
+- OmniTools ([#16032](https://github.com/community-scripts/ProxmoxVE/pull/16032))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Apache Tika: Remove software-properties-common from Apache Tika install [@andygrunwald](https://github.com/andygrunwald) ([#16054](https://github.com/community-scripts/ProxmoxVE/pull/16054))
+    - Fix inventree missing db engine (upstream issue / postinstall)  [@MickLesk](https://github.com/MickLesk) ([#16022](https://github.com/community-scripts/ProxmoxVE/pull/16022))
+    - OPNsense VM: answer console password prompt explicitly, add inter-key delay [@MickLesk](https://github.com/MickLesk) ([#16021](https://github.com/community-scripts/ProxmoxVE/pull/16021))
+    - [endurain] add node update to update script [@johanngrobe](https://github.com/johanngrobe) ([#16014](https://github.com/community-scripts/ProxmoxVE/pull/16014))
+
+  - #### 🔧 Refactor
+
+    - Apache Tika: Switch from Debian Bookworm to Debian Trixie and replace manual install of OpenJDK with setup_java [@andygrunwald](https://github.com/andygrunwald) ([#16036](https://github.com/community-scripts/ProxmoxVE/pull/16036))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: improve OS mismatch message [@MickLesk](https://github.com/MickLesk) ([#16035](https://github.com/community-scripts/ProxmoxVE/pull/16035))
+
+### 🧰 Tools
+
+  - #### 🔧 Refactor
+
+    - Improve command description for disabling pve-enterprise repo [@Marcondiro](https://github.com/Marcondiro) ([#16020](https://github.com/community-scripts/ProxmoxVE/pull/16020))
+
+## 2026-07-25
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - SparkyFitness: substitute SPARKY_FITNESS_FRONTEND_URL in nginx config [@MickLesk](https://github.com/MickLesk) ([#16007](https://github.com/community-scripts/ProxmoxVE/pull/16007))
+
+  - #### ✨ New Features
+
+    - AFFiNE: Bump version to v0.27.3 [@Oscar006](https://github.com/Oscar006) ([#16012](https://github.com/community-scripts/ProxmoxVE/pull/16012))
+
+## 2026-07-24
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Termix: migrate database to new db/data layout  [@MickLesk](https://github.com/MickLesk) ([#15996](https://github.com/community-scripts/ProxmoxVE/pull/15996))
+    - Sync-in: create admin user with admin role instead of default user [@MickLesk](https://github.com/MickLesk) ([#15983](https://github.com/community-scripts/ProxmoxVE/pull/15983))
+    - VM: fix machine type selection being ignored, VM always created as q35 [@MickLesk](https://github.com/MickLesk) ([#15995](https://github.com/community-scripts/ProxmoxVE/pull/15995))
+
+  - #### ✨ New Features
+
+    - Bump all Alpine scripts to 3.24 [@asylumexp](https://github.com/asylumexp) ([#15994](https://github.com/community-scripts/ProxmoxVE/pull/15994))
--- a/ct/almalinux.sh
+++ b/ct/almalinux.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://almalinux.org/
-
-APP="AlmaLinux"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-almalinux}"
-var_version="${var_version:-10}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating  AlmaLinux"
-  $STD dnf -y upgrade
-  msg_ok "Updated AlmaLinux"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/budget-board.sh
+++ b/ct/budget-board.sh
@@ -1,77 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/teelur/budget-board
-
-APP="Budget-Board"
-var_tags="${var_tags:-finance;budget;money}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/budget-board ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "budget-board" "teelur/budget-board"; then
-    msg_info "Stopping Service"
-    systemctl stop budget-board
-    msg_ok "Stopped Service"
-
-    create_backup /opt/budget-board/budget-board.env
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "budget-board" "teelur/budget-board" "tarball"
-
-    restore_backup
-
-    msg_info "Rebuilding Backend"
-    cd /opt/budget-board/server
-    $STD dotnet restore "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj"
-    export configuration=Release
-    $STD dotnet publish "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj" -c $configuration -o /opt/budget-board/publish /p:UseAppHost=false --no-restore
-    msg_ok "Rebuilt Backend"
-
-    msg_info "Rebuilding Frontend"
-    cd /opt/budget-board/client
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    $STD yarn install
-    $STD yarn run build
-    cp -r dist/. /var/www/html/
-    msg_ok "Rebuilt Frontend"
-
-    msg_info "Starting Service"
-    systemctl start budget-board
-    nginx_enable_site budget-board.conf
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/calibre-web.sh
+++ b/ct/calibre-web.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: mikolaj92
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -37,7 +35,8 @@ function update_script() {
    systemctl stop calibre-web
    msg_ok "Stopped Service"

-    create_backup /opt/calibre-web/data
+    create_backup /opt/calibre-web/app.db \
+      /opt/calibre-web/data

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
    setup_uv
@@ -49,26 +48,11 @@ function update_script() {
    $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir .
    msg_ok "Installed Dependencies"

-    sed -i 's|^ExecStart=.*|ExecStart=/opt/calibre-web/.venv/bin/cps -p /opt/calibre-web/data/app.db|' /etc/systemd/system/calibre-web.service
-    if ! grep -q '^Environment=HOME=' /etc/systemd/system/calibre-web.service; then
-      sed -i '/^ExecStart=/i Environment=HOME=/opt/calibre-web/data' /etc/systemd/system/calibre-web.service
-    fi
+    sed -i 's|^ExecStart=.*|ExecStart=/opt/calibre-web/.venv/bin/cps|' /etc/systemd/system/calibre-web.service
    $STD systemctl daemon-reload

    restore_backup

-    mkdir -p /opt/calibre-web-library
-    if [[ -f /opt/calibre-web/data/metadata.db && ! -f /opt/calibre-web-library/metadata.db ]]; then
-      msg_info "Migrating Calibre Library to its own directory"
-      find /opt/calibre-web/data -mindepth 1 -maxdepth 1 ! -name app.db ! -name .calibre-web -exec mv -t /opt/calibre-web-library -- {} +
-      msg_ok "Migrated Calibre Library"
-    fi
-    if [[ ! -f /opt/calibre-web-library/metadata.db ]]; then
-      msg_info "Creating Empty Calibre Library"
-      $STD calibredb list --with-library /opt/calibre-web-library
-      msg_ok "Created Empty Calibre Library"
-    fi
-
    msg_info "Starting Service"
    systemctl start calibre-web
    msg_ok "Started Service"
--- a/ct/centos.sh
+++ b/ct/centos.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.centos.org/centos-stream/
-
-APP="CentOS"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-centos}"
-var_version="${var_version:-10}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating CentOS LXC"
-  $STD dnf -y upgrade
-  msg_ok "Updated CentOS LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/devuan.sh
+++ b/ct/devuan.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.devuan.org/
-
-APP="Devuan"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-devuan}"
-var_version="${var_version:-5.0}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Devuan LXC"
-  $STD apt update
-  $STD apt -y upgrade
-  msg_ok "Updated Devuan LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/directus.sh
+++ b/ct/directus.sh
@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://directus.com/
-
-APP="Directus"
-var_tags="${var_tags:-cms;api;database;headless}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/directus/node_modules/.bin/directus ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "directus" "directus/directus"; then
-    msg_info "Stopping Service"
-    systemctl stop directus
-    msg_ok "Stopped Service"
-
-    create_backup /opt/directus/.env \
-      /opt/directus/uploads \
-      /opt/directus/extensions
-
-    msg_info "Updating Directus"
-    cd /opt/directus
-    $STD npm install --omit=dev "directus@${CHECK_UPDATE_RELEASE#v}"
-    cat <<EOF >~/.directus
-${CHECK_UPDATE_RELEASE#v}
-EOF
-    restore_backup
-    msg_ok "Updated Directus"
-
-    msg_info "Starting Service"
-    systemctl start directus
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8055${CL}"
--- a/ct/droppedneedle.sh
+++ b/ct/droppedneedle.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: michelroegl-brunner | Co-Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -93,7 +91,7 @@ WorkingDirectory=/opt/droppedneedle/backend
 Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
 Environment=PORT=8688
 # Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
-ExecStart=/opt/droppedneedle/venv/bin/python -m maintenance.automatic_upgrade --start-target
+ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
 Restart=on-failure
 RestartSec=5

@@ -102,11 +100,8 @@ WantedBy=multi-user.target
 EOF
      rm -f /etc/systemd/system/musicseerr.service
      msg_ok "Replaced systemd Service"
-    else
-      if ! grep -q 'SLSKD' /etc/systemd/system/droppedneedle.service; then
-        sed -i '\|=8688$|a# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>' /etc/systemd/system/droppedneedle.service
-      fi
-      sed -i 's|^ExecStart=.*|ExecStart=/opt/droppedneedle/venv/bin/python -m maintenance.automatic_upgrade --start-target|' /etc/systemd/system/droppedneedle.service
+    elif ! grep -q 'SLSKD' /etc/systemd/system/droppedneedle.service; then
+      sed -i '\|=8688$|a# Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>' /etc/systemd/system/droppedneedle.service
    fi

    systemctl daemon-reload
--- a/ct/endurain.sh
+++ b/ct/endurain.sh
@@ -35,29 +35,29 @@ function update_script() {
    msg_ok "Stopped Service"

    NODE_VERSION="24" setup_nodejs
+
    create_backup /opt/endurain/.env /opt/endurain/frontend/dist/env.js
    CLEAN_INSTALL=1 fetch_and_deploy_codeberg_release "endurain" "endurain-project/endurain" "tarball" "latest" "/opt/endurain"

-    msg_info "Updating Endurain Frontend"
+    msg_info "Preparing Update"
    cd /opt/endurain
    rm -rf /opt/endurain/{docs,example.env,screenshot_01.png} /opt/endurain/docker* /opt/endurain/*.yml
+    msg_ok "Prepared Update"
+
+    msg_info "Updating Frontend"
    cd /opt/endurain/frontend
    $STD npm ci
    $STD npm run build
-    msg_ok "Updated Endurain Frontend"
+    msg_ok "Updated Frontend"

    restore_backup

-    if grep -qxF 'FRONTEND_DIR="/opt/endurain/frontend/app/dist"' /opt/endurain/.env; then
-      sed -i 's|^FRONTEND_DIR="/opt/endurain/frontend/app/dist"$|FRONTEND_DIR="/opt/endurain/frontend/dist"|' /opt/endurain/.env
-    fi
-
-    msg_info "Updating Endurain Backend"
+    msg_info "Updating Backend"
    cd /opt/endurain/backend
    UV_VERSION=$(grep -Po 'required-version\s*=\s*"\K[^"]+' pyproject.toml 2>/dev/null || echo "0.11.18")
    UV_VERSION="$UV_VERSION" setup_uv
    $STD uv sync --frozen --no-dev
-    msg_ok "Endurain Backend Updated"
+    msg_ok "Backend Updated"

    msg_info "Starting Service"
    systemctl start endurain
--- a/ct/excalidash.sh
+++ b/ct/excalidash.sh
@@ -42,7 +42,6 @@ function update_script() {
    msg_info "Configuring Database Provider (${DATABASE_PROVIDER:-sqlite})"
    cd /opt/excalidash/backend
    sed -i '/datasource db {/,/}/ s/provider = env("[^"]*")/provider = "'"${DATABASE_PROVIDER:-sqlite}"'"/' prisma/schema.prisma
-    sed -i '/datasource db {/,/}/ s/provider = "[^"]*"/provider = "'"${DATABASE_PROVIDER:-sqlite}"'"/' prisma/schema.prisma
    mv prisma/migrations/"${DATABASE_PROVIDER:-sqlite}"/* prisma/migrations/
    rm -rf prisma/migrations/postgresql prisma/migrations/sqlite
    msg_ok "Configured Database Provider"
--- a/ct/fedora.sh
+++ b/ct/fedora.sh
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://fedoraproject.org/
-
-APP="Fedora"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-fedora}"
-var_version="${var_version:-43}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Fedora LXC"
-  $STD dnf -y upgrade
-  msg_ok "Updated Fedora LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/gentoo.sh
+++ b/ct/gentoo.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.gentoo.org/
-
-APP="Gentoo"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-gentoo}"
-var_version="${var_version:-current}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Gentoo LXC"
-  $STD emerge --sync
-  $STD emerge --quiet --update --deep @world
-  msg_ok "Updated Gentoo LXC"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/haproxy.sh
+++ b/ct/haproxy.sh
@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.haproxy.org/
-
-APP="HAProxy"
-var_tags="${var_tags:-network;proxy}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/haproxy/haproxy.cfg ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Updating ${APP}"
-  $STD apt update
-  $STD apt install -y haproxy
-  msg_ok "Updated ${APP}"
-
-  msg_info "Validating Configuration"
-  if ! $STD haproxy -c -f /etc/haproxy/haproxy.cfg; then
-    msg_error "Configuration is invalid - service not restarted"
-    exit
-  fi
-  msg_ok "Validated Configuration"
-
-  msg_info "Restarting Service"
-  systemctl restart haproxy
-  msg_ok "Restarted Service"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Statistics page:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8404${CL}"
-echo -e "${INFO}${YW}The generated stats password is in /etc/haproxy/haproxy.cfg${CL}"
--- a/ct/headers/almalinux
+++ b/ct/headers/almalinux
@@ -1,6 +0,0 @@
-    ___    __                __    _                 
-   /   |  / /___ ___  ____ _/ /   (_)___  __  ___  __
-  / /| | / / __ `__ \/ __ `/ /   / / __ \/ / / / |/_/
- / ___ |/ / / / / / / /_/ / /___/ / / / / /_/ />  <  
-/_/  |_/_/_/ /_/ /_/\__,_/_____/_/_/ /_/\__,_/_/|_|  
-                                                     
--- a/ct/headers/budget-board
+++ b/ct/headers/budget-board
@@ -1,6 +0,0 @@
-    ____            __           __        ____                       __
-   / __ )__  ______/ /___ ____  / /_      / __ )____  ____ __________/ /
-  / __  / / / / __  / __ `/ _ \/ __/_____/ __  / __ \/ __ `/ ___/ __  / 
- / /_/ / /_/ / /_/ / /_/ /  __/ /_/_____/ /_/ / /_/ / /_/ / /  / /_/ /  
-/_____/\__,_/\__,_/\__, /\___/\__/     /_____/\____/\__,_/_/   \__,_/   
-                  /____/                                                
--- a/ct/headers/centos
+++ b/ct/headers/centos
@@ -1,6 +0,0 @@
-   ______           __  ____  _____
-  / ____/__  ____  / /_/ __ \/ ___/
- / /   / _ \/ __ \/ __/ / / /\__ \ 
-/ /___/  __/ / / / /_/ /_/ /___/ / 
-\____/\___/_/ /_/\__/\____//____/  
-                                   
--- a/ct/headers/devuan
+++ b/ct/headers/devuan
@@ -1,6 +0,0 @@
-    ____                            
-   / __ \___ _   ____  ______ _____ 
-  / / / / _ \ | / / / / / __ `/ __ \
- / /_/ /  __/ |/ / /_/ / /_/ / / / /
-/_____/\___/|___/\__,_/\__,_/_/ /_/ 
-                                    
--- a/ct/headers/directus
+++ b/ct/headers/directus
@@ -1,6 +0,0 @@
-    ____  _                __            
-   / __ \(_)_______  _____/ /___  _______
-  / / / / / ___/ _ \/ ___/ __/ / / / ___/
- / /_/ / / /  /  __/ /__/ /_/ /_/ (__  ) 
-/_____/_/_/   \___/\___/\__/\__,_/____/  
-                                         
--- a/ct/headers/fedora
+++ b/ct/headers/fedora
@@ -1,6 +0,0 @@
-    ______         __                
-   / ____/__  ____/ /___  _________ _
-  / /_  / _ \/ __  / __ \/ ___/ __ `/
- / __/ /  __/ /_/ / /_/ / /  / /_/ / 
-/_/    \___/\__,_/\____/_/   \__,_/  
-                                     
--- a/ct/headers/gentoo
+++ b/ct/headers/gentoo
@@ -1,6 +0,0 @@
-   ______           __            
-  / ____/__  ____  / /_____  ____ 
- / / __/ _ \/ __ \/ __/ __ \/ __ \
-/ /_/ /  __/ / / / /_/ /_/ / /_/ /
-\____/\___/_/ /_/\__/\____/\____/ 
-                                  
--- a/ct/headers/haproxy
+++ b/ct/headers/haproxy
@@ -1,6 +0,0 @@
-    __  _____    ____                       
-   / / / /   |  / __ \_________  _  ____  __
-  / /_/ / /| | / /_/ / ___/ __ \| |/_/ / / /
- / __  / ___ |/ ____/ /  / /_/ />  </ /_/ / 
-/_/ /_/_/  |_/_/   /_/   \____/_/|_|\__, /  
-                                   /____/   
--- a/ct/headers/openeuler
+++ b/ct/headers/openeuler
@@ -1,6 +0,0 @@
-                          ______      __         
-  ____  ____  ___  ____  / ____/_  __/ /__  _____
- / __ \/ __ \/ _ \/ __ \/ __/ / / / / / _ \/ ___/
-/ /_/ / /_/ /  __/ / / / /___/ /_/ / /  __/ /    
-\____/ .___/\___/_/ /_/_____/\__,_/_/\___/_/     
-    /_/                                          
--- a/ct/headers/opensuse
+++ b/ct/headers/opensuse
@@ -1,6 +0,0 @@
-                         _____ __  _______ ______
-  ____  ____  ___  ____ / ___// / / / ___// ____/
- / __ \/ __ \/ _ \/ __ \\__ \/ / / /\__ \/ __/   
-/ /_/ / /_/ /  __/ / / /__/ / /_/ /___/ / /___   
-\____/ .___/\___/_/ /_/____/\____//____/_____/   
-    /_/                                          
--- a/ct/headers/seanime
+++ b/ct/headers/seanime
@@ -1,6 +0,0 @@
-   _____                  _              
-  / ___/___  ____ _____  (_)___ ___  ___ 
-  \__ \/ _ \/ __ `/ __ \/ / __ `__ \/ _ \
- ___/ /  __/ /_/ / / / / / / / / / /  __/
-/____/\___/\__,_/_/ /_/_/_/ /_/ /_/\___/ 
-                                         
--- a/ct/headers/yopass
+++ b/ct/headers/yopass
@@ -1,6 +0,0 @@
-__  __                           
-\ \/ /___  ____  ____ ___________
- \  / __ \/ __ \/ __ `/ ___/ ___/
- / / /_/ / /_/ / /_/ (__  |__  ) 
-/_/\____/ .___/\__,_/____/____/  
-       /_/                       
--- a/ct/homepage.sh
+++ b/ct/homepage.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -79,10 +77,6 @@ EOF
      rm /opt/homepage/env.bak
      chmod 600 /opt/homepage/.env
    fi
-    if ! grep -q '^Environment=CI=true' /etc/systemd/system/homepage.service; then
-      sed -i '/^ExecStart=/i Environment=CI=true' /etc/systemd/system/homepage.service
-      systemctl daemon-reload
-    fi
    msg_ok "Updated Homepage"

    msg_info "Starting service"
--- a/ct/limesurvey.sh
+++ b/ct/limesurvey.sh
@@ -28,13 +28,6 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  if [[ ! -L /etc/apache2/mods-enabled/rewrite.load ]]; then
-    msg_info "Enabling Apache mod_rewrite"
-    $STD a2enmod rewrite
-    systemctl restart apache2
-    msg_ok "Enabled Apache mod_rewrite"
-  fi
-
  setup_mariadb

  msg_warn "Application is updated via Web Interface"
--- a/ct/mastodon.sh
+++ b/ct/mastodon.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
@@ -42,7 +40,6 @@ function update_script() {
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
    sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
    sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb
-    RUBY_VERSION="$(cat /opt/mastodon/.ruby-version)" RUBY_INSTALL_RAILS="false" setup_ruby

    msg_info "Installing Ruby Dependencies"
    cd /opt/mastodon
--- a/ct/openeuler.sh
+++ b/ct/openeuler.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.openeuler.org/
-
-APP="openEuler"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-openeuler}"
-var_version="${var_version:-25.03}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating OpenEuler LXC"
-  $STD dnf -y upgrade
-  msg_ok "Updated OpenEuler LXC"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
--- a/ct/opensuse.sh
+++ b/ct/opensuse.sh
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.opensuse.org/
-
-APP="openSUSE"
-var_tags="${var_tags:-os}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-opensuse}"
-var_version="${var_version:-16.0}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /var ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating OpenSUSE LXC"
-  $STD zypper -n update
-  msg_ok "Updated OpenSUSE LXC"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-msg_custom "🚀" "${GN}" "${APP} setup has been successfully initialized!"
--- a/ct/podman.sh
+++ b/ct/podman.sh
@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
--- a/ct/pve-ups.sh
+++ b/ct/pve-ups.sh
@@ -41,7 +41,7 @@ function update_script() {

    msg_info "Updating Application"
    cd /opt/pve-usv
-    $STD uv venv --clear --seed venv
+    $STD uv venv --clear venv
    $STD uv pip install --python venv/bin/python .
    chown -R pveusv:pveusv /opt/pve-usv
    chmod 0755 deploy/pve-usv-agent.sh
--- a/ct/seanime.sh
+++ b/ct/seanime.sh
@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: hasan-ismail
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://seanime.app/
-
-APP="Seanime"
-var_tags="${var_tags:-media;anime;manga}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-var_gpu="${var_gpu:-yes}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/seanime ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "seanime" "5rahim/seanime"; then
-    msg_info "Stopping Service"
-    systemctl stop seanime
-    msg_ok "Stopped Service"
-
-    create_backup /opt/seanime-data/config.toml
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "seanime" "5rahim/seanime" "prebuild" "latest" "/opt/seanime" "seanime-[0-9]*_Linux_$(arch_resolve x86_64 arm64).tar.gz"
-    chmod +x /opt/seanime/seanime
-
-    restore_backup
-
-    msg_info "Starting Service"
-    systemctl start seanime
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:43211${CL}"
--- a/ct/yopass.sh
+++ b/ct/yopass.sh
@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/jhaals/yopass
-
-APP="Yopass"
-var_tags="${var_tags:-security;secrets}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/yopass ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "yopass" "jhaals/yopass"; then
-    msg_info "Stopping Service"
-    systemctl stop yopass
-    msg_ok "Stopped Service"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "yopass" "jhaals/yopass" "tarball"
-
-    msg_info "Building Yopass"
-    cd /opt/yopass
-    $STD go build -ldflags "-X main.version=$(cat ~/.yopass)" ./cmd/yopass-server
-    cd /opt/yopass/website
-    $STD yarn install --network-timeout 600000
-    $STD yarn build
-    msg_ok "Built Yopass"
-
-    msg_info "Starting Service"
-    systemctl start yopass
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}https://${IP}:1337${CL}"
--- a/install/almalinux-install.sh
+++ b/install/almalinux-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://almalinux.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/budget-board-install.sh
+++ b/install/budget-board-install.sh
@@ -1,127 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Slaviša Arežina (tremor021)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/teelur/budget-board
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y nginx
-setup_deb822_repo \
-  "microsoft" \
-  "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-  "https://packages.microsoft.com/debian/13/prod/" \
-  "trixie"
-$STD apt install -y dotnet-sdk-10.0
-msg_ok "Installed Dependencies"
-
-NODE_VERSION=25 setup_nodejs
-PG_VERSION=16 setup_postgresql
-PG_DB_NAME=budget_board_db PG_DB_USER=budget_board setup_postgresql_db
-
-fetch_and_deploy_gh_release "budget-board" "teelur/budget-board" "tarball"
-
-msg_info "Configuring Budget Board Backend"
-cd /opt/budget-board/server
-$STD dotnet restore "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj"
-export configuration=Release
-$STD dotnet publish "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj" -c $configuration -o /opt/budget-board/publish /p:UseAppHost=false --no-restore
-
-cat <<EOF >/opt/budget-board/budget-board.env
-Logging__LogLevel__Default=Information
-CLIENT_ADDRESS=$LOCAL_IP
-POSTGRES_HOST=localhost
-POSTGRES_PORT=5432
-POSTGRES_DATABASE=$PG_DB_NAME
-POSTGRES_USER=$PG_DB_USER
-POSTGRES_PASSWORD=$PG_DB_PASS
-OIDC_ENABLED=false
-OIDC_ISSUER=
-OIDC_CLIENT_ID=
-OIDC_CLIENT_SECRET=
-EMAIL_SENDER=
-EMAIL_SENDER_USERNAME=
-EMAIL_SENDER_PASSWORD=
-EMAIL_SMTP_HOST=
-EMAIL_SMTP_PORT=587
-DISABLE_NEW_USERS=false
-DISABLE_LOCAL_AUTH=false
-AUTO_UPDATE_DB=true
-DISABLE_AUTO_SYNC=false
-SYNC_INTERVAL_HOURS=8
-TZ=UTC
-
-ASPNETCORE_URLS=http://127.0.0.1:6253
-PORT=6253
-VITE_SERVER_ADDRESS=${LOCAL_IP}
-VITE_OIDC_ENABLED=false
-VITE_OIDC_PROVIDER=
-VITE_OIDC_CLIENT_ID=
-VITE_DISABLE_NEW_USERS=false
-VITE_DISABLE_LOCAL_AUTH=false
-EOF
-msg_ok "Configured Budget Board Backend"
-
-msg_info "Configuring Budget Board Frontend"
-cd /opt/budget-board/client
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-$STD yarn config set --home enableTelemetry 0
-$STD npm install --global corepack@latest
-$STD corepack enable
-$STD yarn install
-$STD yarn run build
-cp -r dist/. /var/www/html/
-msg_ok "Configured Budget Board Frontend"
-
-msg_info "Creating services"
-cat <<EOF >/etc/systemd/system/budget-board.service
-[Unit]
-Description=Budget Board Service
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/budget-board/publish
-ExecStart=dotnet BudgetBoard.WebAPI.dll
-Restart=always
-EnvironmentFile=/opt/budget-board/budget-board.env
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now budget-board
-
-cat <<'EOF' >/etc/nginx/sites-available/budget-board.conf
-server {
-    listen 80 default_server;
-    server_name _;
-    root /var/www/html;
-    index index.html;
-
-    location /api/ {
-        proxy_pass http://127.0.0.1:6253;
-        proxy_http_version 1.1;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-}
-EOF
-nginx_enable_site budget-board.conf
-msg_ok "Created services"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/calibre-web-install.sh
+++ b/install/calibre-web-install.sh
@@ -42,14 +42,8 @@ $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir --
 $STD uv pip install --python /opt/calibre-web/.venv/bin/python --no-cache-dir .
 msg_ok "Installed Python Dependencies"

-mkdir -p /opt/calibre-web/data /opt/calibre-web-library
-if [[ ! -f /opt/calibre-web-library/metadata.db ]]; then
-  msg_info "Creating Empty Calibre Library"
-  $STD calibredb list --with-library /opt/calibre-web-library
-  msg_ok "Created Empty Calibre Library"
-fi
-
 msg_info "Creating Service"
+mkdir -p /opt/calibre-web/data
 cat <<EOF >/etc/systemd/system/calibre-web.service
 [Unit]
 Description=Calibre-Web Service
@@ -59,9 +53,8 @@ After=network.target
 Type=simple
 User=root
 Environment="QTWEBENGINE_CHROMIUM_FLAGS=--no-sandbox"
-Environment=HOME=/opt/calibre-web/data
 WorkingDirectory=/opt/calibre-web
-ExecStart=/opt/calibre-web/.venv/bin/cps -p /opt/calibre-web/data/app.db
+ExecStart=/opt/calibre-web/.venv/bin/cps
 Restart=on-failure
 RestartSec=5

--- a/install/centos-install.sh
+++ b/install/centos-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.centos.org/centos-stream/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/devuan-install.sh
+++ b/install/devuan-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.devuan.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/directus-install.sh
+++ b/install/directus-install.sh
@@ -1,90 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://directus.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-NODE_VERSION="22" setup_nodejs
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="directus" PG_DB_USER="directus" setup_postgresql_db
-
-msg_info "Installing Directus"
-mkdir -p /opt/directus/uploads /opt/directus/extensions
-cd /opt/directus
-$STD npm init -y
-DIRECTUS_VERSION=$(get_latest_github_release "directus/directus")
-$STD npm install --omit=dev "directus@${DIRECTUS_VERSION}"
-cat <<EOF >~/.directus
-${DIRECTUS_VERSION}
-EOF
-msg_ok "Installed Directus"
-
-msg_info "Configuring Directus"
-DIRECTUS_KEY=$(openssl rand -hex 32)
-DIRECTUS_SECRET=$(openssl rand -hex 32)
-DIRECTUS_ADMIN_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
-cat <<EOF >/opt/directus/.env
-HOST="0.0.0.0"
-PORT=8055
-PUBLIC_URL="http://${LOCAL_IP}:8055"
-KEY="${DIRECTUS_KEY}"
-SECRET="${DIRECTUS_SECRET}"
-
-DB_CLIENT="pg"
-DB_HOST="127.0.0.1"
-DB_PORT=5432
-DB_DATABASE="${PG_DB_NAME}"
-DB_USER="${PG_DB_USER}"
-DB_PASSWORD="${PG_DB_PASS}"
-
-ADMIN_EMAIL="admin@community-scripts.org"
-ADMIN_PASSWORD="${DIRECTUS_ADMIN_PASSWORD}"
-
-STORAGE_LOCATIONS="local"
-STORAGE_LOCAL_DRIVER="local"
-STORAGE_LOCAL_ROOT="/opt/directus/uploads"
-EXTENSIONS_PATH="/opt/directus/extensions"
-TELEMETRY=false
-EOF
-chmod 640 /opt/directus/.env
-msg_ok "Configured Directus"
-
-msg_info "Initializing Directus"
-cd /opt/directus
-$STD /opt/directus/node_modules/.bin/directus bootstrap
-msg_ok "Initialized Directus"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/directus.service
-[Unit]
-Description=Directus
-After=network.target postgresql.service
-Requires=postgresql.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/directus
-EnvironmentFile=/opt/directus/.env
-ExecStart=/opt/directus/node_modules/.bin/directus start
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now directus
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/droppedneedle-install.sh
+++ b/install/droppedneedle-install.sh
@@ -45,7 +45,7 @@ WorkingDirectory=/opt/droppedneedle/backend
 Environment=ROOT_APP_DIR=/opt/droppedneedle/backend
 Environment=PORT=8688
 # Environment=SLSKD_DOWNLOADS_PATH=<path-to-slskd-downloads>
-ExecStart=/opt/droppedneedle/venv/bin/python -m maintenance.automatic_upgrade --start-target
+ExecStart=/opt/droppedneedle/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8688 --loop uvloop --http httptools --workers 1
 Restart=on-failure
 RestartSec=5

--- a/install/fedora-install.sh
+++ b/install/fedora-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://fedoraproject.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/gentoo-install.sh
+++ b/install/gentoo-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.gentoo.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/gitea-install.sh
+++ b/install/gitea-install.sh
@@ -29,9 +29,13 @@ setup_deb_based() {
  mkdir -p /var/lib/gitea/{custom,data,log}
  chown -R gitea:gitea /var/lib/gitea/
  chmod -R 750 /var/lib/gitea/
-  chown gitea:gitea /etc/gitea
-  chmod 750 /etc/gitea
+  chown root:gitea /etc/gitea
+  chmod 770 /etc/gitea
  sudo -u gitea ln -s /var/lib/gitea/data/.ssh/ /etc/gitea/.ssh
+  # sshd's StrictModes rejects pubkey auth if authorized_keys or any parent dir up to
+  # $HOME is group-writable, so 770 can only be transient - tighten it once the gitea
+  # user no longer needs group-write to create the symlink above.
+  chmod 750 /etc/gitea
  msg_ok "Configured Gitea"

  msg_info "Creating Service"
--- a/install/haproxy-install.sh
+++ b/install/haproxy-install.sh
@@ -1,73 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.haproxy.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing HAProxy"
-$STD apt install -y haproxy
-msg_ok "Installed HAProxy"
-
-msg_info "Configuring HAProxy"
-HAPROXY_STATS_PASSWORD=$(openssl rand -base64 18)
-cat <<EOF >/etc/haproxy/haproxy.cfg
-global
-	log /dev/log local0
-	chroot /var/lib/haproxy
-	stats socket /run/haproxy/admin.sock mode 660 level admin
-	stats timeout 30s
-	user haproxy
-	group haproxy
-	daemon
-	ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets
-
-defaults
-	log global
-	mode http
-	option httplog
-	option dontlognull
-	timeout connect 5s
-	timeout client 50s
-	timeout server 50s
-	errorfile 400 /etc/haproxy/errors/400.http
-	errorfile 403 /etc/haproxy/errors/403.http
-	errorfile 408 /etc/haproxy/errors/408.http
-	errorfile 500 /etc/haproxy/errors/500.http
-	errorfile 502 /etc/haproxy/errors/502.http
-	errorfile 503 /etc/haproxy/errors/503.http
-	errorfile 504 /etc/haproxy/errors/504.http
-
-listen stats
-	bind *:8404
-	stats enable
-	stats uri /
-	stats refresh 10s
-	stats admin if TRUE
-	stats auth admin:${HAPROXY_STATS_PASSWORD}
-
-# Example: replace with your own frontend/backend pairs.
-#frontend http_in
-#	bind *:80
-#	default_backend servers
-#
-#backend servers
-#	balance roundrobin
-#	server web1 192.168.1.10:80 check
-#	server web2 192.168.1.11:80 check
-EOF
-$STD haproxy -c -f /etc/haproxy/haproxy.cfg
-systemctl restart haproxy
-msg_ok "Configured HAProxy"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/homepage-install.sh
+++ b/install/homepage-install.sh
@@ -63,7 +63,6 @@ Restart=always
 RestartSec=1
 User=root
 WorkingDirectory=/opt/homepage/
-Environment=CI=true
 ExecStart=pnpm start

 [Install]
--- a/install/limesurvey-install.sh
+++ b/install/limesurvey-install.sh
@@ -60,7 +60,6 @@ cat <<EOF >/etc/apache2/sites-enabled/000-default.conf
 EOF
 chown -R www-data:www-data "/opt/limesurvey"
 chmod -R 750 "/opt/limesurvey"
-$STD a2enmod rewrite
 systemctl reload apache2
 rm -rf "$temp_file"
 msg_ok "Set up LimeSurvey"
--- a/install/mastodon-install.sh
+++ b/install/mastodon-install.sh
@@ -48,13 +48,13 @@ PG_VERSION="17" setup_postgresql
 PG_DB_NAME="mastodon_production" PG_DB_USER="mastodon" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
 $STD sudo -u postgres psql -c "ALTER USER mastodon CREATEDB;"

+RUBY_VERSION="4.0.5" RUBY_INSTALL_RAILS="false" setup_ruby
+export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
+
 fetch_and_deploy_gh_release "mastodon" "mastodon/mastodon" "tarball"
 sed -i "s/config.force_ssl = true/config.force_ssl = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/environments/production.rb
 sed -i "s/https = Rails.env.production? || ENV\['LOCAL_HTTPS'\] == 'true'/https = ENV.fetch('LOCAL_HTTPS', 'false') == 'true'/" /opt/mastodon/config/initializers/1_hosts.rb

-RUBY_VERSION="$(cat /opt/mastodon/.ruby-version)" RUBY_INSTALL_RAILS="false" setup_ruby
-export PATH="$HOME/.rbenv/shims:$HOME/.rbenv/bin:$PATH"
-
 msg_info "Installing Ruby Dependencies"
 cd /opt/mastodon
 $STD bundle config set --local without 'development test'
--- a/install/openeuler-install.sh
+++ b/install/openeuler-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.openeuler.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/opensuse-install.sh
+++ b/install/opensuse-install.sh
@@ -1,18 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.opensuse.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/podman-install.sh
+++ b/install/podman-install.sh
@@ -51,7 +51,6 @@ read -r -p "${TAB3}Would you like to add Portainer? <y/N> " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
  msg_info "Installing Portainer $PORTAINER_LATEST_VERSION"
  podman volume create portainer_data >/dev/null
-  $STD podman pull docker.io/portainer/portainer-ce:latest
  cat <<EOF >/etc/containers/systemd/portainer.container
 [Unit]
 Description=Portainer Container
@@ -78,7 +77,6 @@ else
  read -r -p "${TAB3}Would you like to add the Portainer Agent? <y/N> " prompt
  if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
    msg_info "Installing Portainer agent $PORTAINER_AGENT_LATEST_VERSION"
-    $STD podman pull docker.io/portainer/agent:latest
    cat <<EOF >/etc/containers/systemd/portainer-agent.container
 [Unit]
 Description=Portainer Agent Container
--- a/install/pve-ups-install.sh
+++ b/install/pve-ups-install.sh
@@ -27,7 +27,7 @@ install -d -o pveusv -g pveusv -m 0750 \
  /var/lib/pve-usv/updates
 chown -R pveusv:pveusv /opt/pve-usv
 cd /opt/pve-usv
-$STD uv venv --clear --seed venv
+$STD uv venv --clear venv
 $STD uv pip install --python venv/bin/python .
 chmod 0755 deploy/pve-usv-agent.sh
 msg_ok "Set up Application"
--- a/install/seanime-install.sh
+++ b/install/seanime-install.sh
@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: hasan-ismail
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://seanime.app/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-setup_hwaccel
-
-msg_info "Installing FFmpeg"
-setup_deb822_repo \
-  "jellyfin" \
-  "https://repo.jellyfin.org/jellyfin_team.gpg.key" \
-  "https://repo.jellyfin.org/debian" \
-  "$(get_os_info codename)"
-$STD apt install -y jellyfin-ffmpeg7
-ln -sf /usr/lib/jellyfin-ffmpeg/ffmpeg /usr/bin/ffmpeg
-ln -sf /usr/lib/jellyfin-ffmpeg/ffprobe /usr/bin/ffprobe
-msg_ok "Installed FFmpeg"
-
-fetch_and_deploy_gh_release "seanime" "5rahim/seanime" "prebuild" "latest" "/opt/seanime" "seanime-[0-9]*_Linux_$(arch_resolve x86_64 arm64).tar.gz"
-chmod +x /opt/seanime/seanime
-
-msg_info "Configuring Seanime"
-SEANIME_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
-mkdir -p /opt/seanime-data
-cat <<EOF >/opt/seanime-data/config.toml
-[server]
-password = "${SEANIME_PASSWORD}"
-EOF
-cat <<EOF >/root/seanime.creds
-Seanime URL: http://${LOCAL_IP}:43211
-Password: ${SEANIME_PASSWORD}
-EOF
-msg_ok "Configured Seanime"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/seanime.service
-[Unit]
-Description=Seanime
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/seanime
-ExecStart=/opt/seanime/seanime --datadir /opt/seanime-data --host 0.0.0.0
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now seanime
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/stirling-pdf-install.sh
+++ b/install/stirling-pdf-install.sh
@@ -147,6 +147,7 @@ Group=root
 EnvironmentFile=/opt/Stirling-PDF/.env
 WorkingDirectory=/opt/Stirling-PDF
 ExecStart=/usr/bin/java -jar Stirling-PDF.jar
+ExecStop=/bin/kill -15 %n
 Restart=always
 RestartSec=10

--- a/install/yopass-install.sh
+++ b/install/yopass-install.sh
@@ -1,69 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/jhaals/yopass
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y redis-server
-systemctl enable -q --now redis-server
-msg_ok "Installed Dependencies"
-
-setup_go
-NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
-
-fetch_and_deploy_gh_release "yopass" "jhaals/yopass" "tarball"
-
-msg_info "Building Yopass"
-cd /opt/yopass
-$STD go build -ldflags "-X main.version=$(cat ~/.yopass)" ./cmd/yopass-server
-cd /opt/yopass/website
-$STD yarn install --network-timeout 600000
-$STD yarn build
-msg_ok "Built Yopass"
-
-msg_info "Generating SSL Certificate"
-mkdir -p /opt/yopass/certificates
-openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
-  -keyout /opt/yopass/certificates/key.pem \
-  -out /opt/yopass/certificates/cert.pem \
-  -subj "/C=US/ST=State/L=City/O=Yopass/CN=${LOCAL_IP}" \
-  -addext "subjectAltName=IP:${LOCAL_IP},DNS:localhost,IP:127.0.0.1" \
-  2>/dev/null
-chmod 600 /opt/yopass/certificates/key.pem
-chmod 644 /opt/yopass/certificates/cert.pem
-msg_ok "Generated SSL Certificate"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/yopass.service
-[Unit]
-Description=Yopass
-Wants=network-online.target
-After=network-online.target redis-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/yopass
-ExecStart=/opt/yopass/yopass-server --address 0.0.0.0 --port 1337 --tls-cert /opt/yopass/certificates/cert.pem --tls-key /opt/yopass/certificates/key.pem --database redis --redis redis://127.0.0.1:6379/0 --asset-path /opt/yopass/website/dist
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now yopass
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/misc/alpine-install.func
+++ b/misc/alpine-install.func
@@ -136,7 +136,7 @@ network_check() {
  fi

  # DNS resolution checks for GitHub-related domains
-  GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com")
+  GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com" "git.community-scripts.org")
  GIT_STATUS="Git DNS:"
  DNS_FAILED=false

--- a/misc/core.func
+++ b/misc/core.func
@@ -10,6 +10,10 @@
 # including colors, formatting, validation checks, message output, and
 # execution helpers used throughout the Community-Scripts ecosystem.
 #
+# Usage:
+#   source <(curl -fsSL https://git.community-scripts.org/.../core.func)
+#   load_functions
+#
 # ==============================================================================

 [[ -n "${_CORE_FUNC_LOADED:-}" ]] && return
--- a/misc/install.func
+++ b/misc/install.func
@@ -211,7 +211,7 @@ network_check() {
  fi

  # DNS resolution checks for GitHub-related domains (IPv4 and/or IPv6)
-  GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com")
+  GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com" "git.community-scripts.org")
  GIT_STATUS="Git DNS:"
  DNS_FAILED=false

--- a/misc/tools.func
+++ b/misc/tools.func
@@ -632,7 +632,7 @@ is_tool_installed() {
    ;;
  mongodb | mongod)
    if command -v mongod >/dev/null 2>&1; then
-      installed_version=$(mongod --version 2>/dev/null | awk '/db version/{print $3}' | sed 's/^v//' | cut -d. -f1,2)
+      installed_version=$(mongod --version 2>/dev/null | awk '/db version/{print $3}' | cut -d. -f1,2)
    fi
    ;;
  node | nodejs)
@@ -685,39 +685,6 @@ is_tool_installed() {
  return 0 # Installed and version matches (if specified)
 }

-# ------------------------------------------------------------------------------
-# Checks whether purging the given package glob(s) would also remove packages
-# outside those globs (i.e. reverse dependents, such as an app depending on
-# mongodb-org-server). Uses `apt-get -s` (simulate) with the stable apt-get
-# output format, not `apt`, whose output is explicitly unstable for scripting.
-# Returns 0 (safe to purge) or 1 (unsafe - prints the unexpected packages).
-# Usage: _purge_is_safe 'mongodb*' ['other-glob*' ...]
-# ------------------------------------------------------------------------------
-_purge_is_safe() {
-  local -a globs=("$@")
-  local -a collateral=()
-  local pkg glob matched
-  local sim_out
-  sim_out=$(apt-get -s purge -y "${globs[@]}" 2>/dev/null) || return 0
-  while IFS= read -r pkg; do
-    [[ -z "$pkg" ]] && continue
-    matched=0
-    for glob in "${globs[@]}"; do
-      # shellcheck disable=SC2053
-      [[ "$pkg" == $glob ]] && {
-        matched=1
-        break
-      }
-    done
-    ((matched)) || collateral+=("$pkg")
-  done < <(awk '/^(Remv|Purg) /{print $2}' <<<"$sim_out")
-  if ((${#collateral[@]} > 0)); then
-    msg_warn "Refusing purge of '${globs[*]}': would also remove ${collateral[*]}"
-    return 1
-  fi
-  return 0
-}
-
 # ------------------------------------------------------------------------------
 # Remove old tool version completely (purge + cleanup repos)
 # Usage: remove_old_tool_version "mariadb" "repository-name"
@@ -729,13 +696,11 @@ remove_old_tool_version() {
  case "$tool_name" in
  mariadb)
    stop_all_services "mariadb"
-    _purge_is_safe 'mariadb*' || return 1
    $STD apt purge -y 'mariadb*' >/dev/null 2>&1 || true
    cleanup_tool_keyrings "mariadb"
    ;;
  mysql)
    stop_all_services "mysql"
-    _purge_is_safe 'mysql*' || return 1
    $STD apt purge -y 'mysql*' >/dev/null 2>&1 || true
    # Keep data directory for safety (remove manually if needed)
    # rm -rf /var/lib/mysql 2>/dev/null || true
@@ -743,14 +708,12 @@ remove_old_tool_version() {
    ;;
  mongodb)
    stop_all_services "mongod"
-    _purge_is_safe 'mongodb*' || return 1
    $STD apt purge -y 'mongodb*' >/dev/null 2>&1 || true
    # Keep data directory for safety (remove manually if needed)
    # rm -rf /var/lib/mongodb 2>/dev/null || true
    cleanup_tool_keyrings "mongodb"
    ;;
  node | nodejs)
-    _purge_is_safe nodejs npm || return 1
    $STD apt purge -y nodejs npm >/dev/null 2>&1 || true
    # Clean up npm global modules
    if command -v npm >/dev/null 2>&1; then
@@ -763,27 +726,23 @@ remove_old_tool_version() {
    ;;
  php)
    stop_all_services "php.*-fpm"
-    _purge_is_safe 'php*' || return 1
    $STD apt purge -y 'php*' >/dev/null 2>&1 || true
    rm -rf /etc/php 2>/dev/null || true
    cleanup_tool_keyrings "deb.sury.org-php" "php"
    ;;
  postgresql)
    stop_all_services "postgresql"
-    _purge_is_safe 'postgresql*' || return 1
    $STD apt purge -y 'postgresql*' >/dev/null 2>&1 || true
    # Keep data directory for safety (can be removed manually if needed)
    # rm -rf /var/lib/postgresql 2>/dev/null || true
    cleanup_tool_keyrings "postgresql" "pgdg"
    ;;
  java)
-    _purge_is_safe 'temurin*' 'adoptium*' 'openjdk*' || return 1
    $STD apt purge -y 'temurin*' 'adoptium*' 'openjdk*' >/dev/null 2>&1 || true
    cleanup_tool_keyrings "adoptium"
    ;;
  ruby)
    cleanup_legacy_install "ruby"
-    _purge_is_safe 'ruby*' || return 1
    $STD apt purge -y 'ruby*' >/dev/null 2>&1 || true
    ;;
  rust)
@@ -795,7 +754,6 @@ remove_old_tool_version() {
    ;;
  clickhouse)
    stop_all_services "clickhouse-server"
-    _purge_is_safe 'clickhouse*' || return 1
    $STD apt purge -y 'clickhouse*' >/dev/null 2>&1 || true
    # Keep data directory for safety (remove manually if needed)
    # rm -rf /var/lib/clickhouse 2>/dev/null || true
@@ -4515,10 +4473,7 @@ setup_clickhouse() {
  if [[ -n "$CURRENT_VERSION" && "$CURRENT_VERSION" != "$CLICKHOUSE_VERSION" ]]; then
    msg_info "Upgrade ClickHouse from $CURRENT_VERSION to $CLICKHOUSE_VERSION"
    stop_all_services "clickhouse-server"
-    remove_old_tool_version "clickhouse" || {
-      msg_error "Aborting ClickHouse upgrade: another package depends on it"
-      return 1
-    }
+    remove_old_tool_version "clickhouse"
  else
    msg_info "Setup ClickHouse $CLICKHOUSE_VERSION"
  fi
@@ -5195,10 +5150,7 @@ setup_go() {
  # Scenario 2: Different version or not installed
  if [[ -n "$CURRENT_VERSION" && "$CURRENT_VERSION" != "$GO_VERSION" ]]; then
    msg_info "Upgrade Go from $CURRENT_VERSION to $GO_VERSION"
-    remove_old_tool_version "go" || {
-      msg_error "Aborting Go upgrade: another package depends on it"
-      return 1
-    }
+    remove_old_tool_version "go"
  else
    msg_info "Setup Go $GO_VERSION"
  fi
@@ -6801,10 +6753,7 @@ EOF
  # Scenario 2b: Different version installed - clean upgrade
  if [[ -n "$CURRENT_VERSION" ]] && ! version_matches_spec "$CURRENT_VERSION" "$MARIADB_VERSION"; then
    msg_info "Upgrade MariaDB from $CURRENT_VERSION to $MARIADB_VERSION"
-    remove_old_tool_version "mariadb" || {
-      msg_error "Aborting MariaDB upgrade: another package depends on it"
-      return 1
-    }
+    remove_old_tool_version "mariadb"
  fi

  # Scenario 3: Fresh install or version change with specific version
@@ -7334,10 +7283,7 @@ setup_mongodb() {
  # Scenario 2: Different version installed - clean upgrade
  if [[ -n "$INSTALLED_VERSION" && "$INSTALLED_VERSION" != "$MONGO_VERSION" ]]; then
    msg_info "Upgrade MongoDB from $INSTALLED_VERSION to $MONGO_VERSION"
-    remove_old_tool_version "mongodb" || {
-      msg_error "Aborting MongoDB upgrade: another package depends on it (e.g. an app using it)"
-      return 1
-    }
+    remove_old_tool_version "mongodb"
  else
    msg_info "Setup MongoDB $MONGO_VERSION"
  fi
@@ -7527,10 +7473,7 @@ setup_mysql() {
  # Scenario 2: Different version installed - clean upgrade
  if [[ -n "$CURRENT_VERSION" ]] && ! version_matches_spec "$CURRENT_VERSION" "$MYSQL_VERSION"; then
    msg_info "Upgrade MySQL from $CURRENT_VERSION to $MYSQL_VERSION"
-    remove_old_tool_version "mysql" || {
-      msg_error "Aborting MySQL upgrade: another package depends on it"
-      return 1
-    }
+    remove_old_tool_version "mysql"
  else
    msg_info "Setup MySQL $MYSQL_VERSION"
  fi
@@ -7694,10 +7637,7 @@ setup_nodejs() {
    if [[ -n "$CURRENT_NODE_VERSION" && "$CURRENT_NODE_VERSION" != "$NODE_VERSION" ]]; then
      msg_info "Upgrade Node.js from $CURRENT_NODE_VERSION to $NODE_VERSION"
      node_setup_ok_msg="Upgrade Node.js to $NODE_VERSION"
-      remove_old_tool_version "nodejs" || {
-        msg_error "Aborting Node.js upgrade: another package depends on it"
-        return 1
-      }
+      remove_old_tool_version "nodejs"
    else
      msg_info "Setup Node.js $NODE_VERSION"
      node_setup_ok_msg="Setup Node.js $NODE_VERSION"
@@ -9394,8 +9334,6 @@ fetch_and_deploy_from_url() {

  if [[ "$file_desc" =~ gzip.*compressed|gzip\ compressed\ data ]]; then
    archive_type="tar"
-  elif [[ "$file_desc" =~ XZ\ compressed\ data ]]; then
-    archive_type="tar"
  elif [[ "$file_desc" =~ Zip.*archive|ZIP\ archive ]]; then
    archive_type="zip"
  elif [[ "$file_desc" =~ Debian.*package|Debian\ binary\ package ]]; then
--- a/misc/vm-core.func
+++ b/misc/vm-core.func
@@ -14,7 +14,7 @@ declare -A MSG_INFO_SHOWN
 [[ -n "${_CORE_FUNC_LOADED:-}" ]] && return
 _CORE_FUNC_LOADED=1

-COMMUNITY_SCRIPTS_URL="${COMMUNITY_SCRIPTS_URL:-https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main}"
+COMMUNITY_SCRIPTS_URL="${COMMUNITY_SCRIPTS_URL:-https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main}"

 load_api_functions() {
  if ! declare -f post_to_api_vm >/dev/null 2>&1; then
--- a/tools/pve/pve-privilege-converter.sh
+++ b/tools/pve/pve-privilege-converter.sh
@@ -10,7 +10,7 @@ if ! command -v curl >/dev/null 2>&1; then
  apt-get update >/dev/null 2>&1
  apt-get install -y curl >/dev/null 2>&1
 fi
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/core.func)
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/core.func)
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
 load_functions
 declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pve-privilege-converter" "pve"
--- a/tools/pve/update-apps.sh
+++ b/tools/pve/update-apps.sh
@@ -173,11 +173,7 @@ function detect_service() {
    rm -rf "$tmpdir"
    return 1
  fi
-
-  service=$(sed -n -E 's/^[[:space:]]*export[[:space:]]+UPDATE_SCRIPT_NAME=["'"'"']?([a-zA-Z0-9._-]+).*/\1/p' "$update_file" | head -n1)
-  [[ -z "$service" ]] && service=$(sed -n -E 's/^[[:space:]]*export[[:space:]]+SCRIPT_SLUG=["'"'"']?([a-zA-Z0-9._-]+).*/\1/p' "$update_file" | head -n1)
-  [[ -z "$service" ]] && service=$(grep -oE '/ct/[a-zA-Z0-9._-]+\.sh' "$update_file" 2>/dev/null | head -n1 | sed 's|.*/ct/||; s|\.sh$||')
-
+  service=$(grep -oE '/ct/[a-zA-Z0-9._-]+\.sh' "$update_file" 2>/dev/null | head -n1 | sed 's|.*/ct/||; s|\.sh$||')
  rm -rf "$tmpdir"
 }

--- a/vm/docker-vm.sh
+++ b/vm/docker-vm.sh
@@ -8,9 +8,9 @@
 # Docker VM - Creates a Docker-ready Virtual Machine
 # ==============================================================================

-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/vm-core.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/cloud-init.func) || true
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/api.func) 2>/dev/null
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/vm-core.func) 2>/dev/null
+source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/cloud-init.func) 2>/dev/null || true

 # ==============================================================================
 # SCRIPT VARIABLES