Add screenshots and type to the bot

Two gaps were left. type is a relation to z_ref_script_types, so it needs the
same name-to-id resolution as categories - people write "ct", not a
fifteen-character id. Screenshots had no command at all.

The screenshot subcommand hands the URLs to the frontend's /api/screenshots
rather than fetching images inside a workflow. That endpoint already checks
the content type and size and attaches the file to PocketBase; doing it a
second time here would be a second set of bugs. It needs
SCREENSHOT_IMPORT_SECRET, and says so plainly when it is missing instead of
failing halfway.

slug stays deliberately out of reach. It is the URL, the JSON filename and the
ct/<slug>.sh path at once, so renaming it is a migration rather than an edit,
and the help text now says that instead of leaving people to wonder.

.github/workflows/pocketbase-bot.yml

@@ -33,6 +33,10 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           FRONTEND_URL: ${{ secrets.FRONTEND_URL }}
           REVALIDATE_SECRET: ${{ secrets.REVALIDATE_SECRET }}
+          # Screenshot attaching is delegated to the frontend, which owns the
+          # fetching and validation. Without this the subcommand says so rather
+          # than failing halfway.
+          SCREENSHOT_IMPORT_SECRET: ${{ secrets.SCREENSHOT_IMPORT_SECRET }}
         run: |
           node << 'ENDSCRIPT'
           (async function () {
@@ -323,11 +327,21 @@ jobs:
               '/pocketbase <slug> method remove <type>\n' +
               '```\n' +
               'Method fields: `cpu` `ram` `hdd` `os` `version` `config_path` `script`\n\n' +
+              '`cpu` `ram` `hdd` `os` `version` also work without `method` — they go to the\n' +
+              'default install method, e.g. `/pocketbase <slug> hdd=25`\n\n' +
               '**Editable fields:** `name` `description` `logo` `documentation` `website` `project_url` `repository` ' +
               '`config_path` `port` `default_user` `default_passwd` ' +
-              '`updateable` `privileged` `is_dev` ' +
+              '`updateable` `privileged` `is_dev` `has_arm` ' +
               '`architectures` (amd64,arm64) `platforms` (pve,incus) ' +
-              '`is_disabled` `disable_message` `is_deleted` `deleted_message`';
+              '`execute_in` (pve,lxc,pbs,vm,pmg,pdm) `categories` (names or ids) ' +
+              '`type` (ct, vm, addon, …) ' +
+              '`is_disabled` `disable_message` `is_deleted` `deleted_message`\n\n' +
+              '**Screenshots:**\n' +
+              '```\n' +
+              '/pocketbase <slug> screenshot https://example.com/one.png https://example.com/two.png\n' +
+              '```\n\n' +
+              '`slug` is deliberately not editable: it is the URL, the JSON filename and the\n' +
+              'ct/<slug>.sh path all at once, so renaming it is a migration rather than an edit.';
 
             if (!withoutCmd) {
               await addReaction('-1');
@@ -490,6 +504,7 @@ jobs:
             const noteMatch   = rest.match(/^note\s+(list|add|edit|remove)\b/i);
             const methodMatch = rest.match(/^method\b/i);
             const setMatch    = rest.match(/^set\s+(\S+)/i);
+            const shotMatch   = rest.match(/^screenshots?\s+(.+)$/i);
 
             if (infoMatch) {
               // ── INFO SUBCOMMAND ──────────────────────────────────────────────
@@ -535,6 +550,44 @@ jobs:
               await addReaction('+1');
               await postComment(out.join('\n'));
 
+            } else if (shotMatch) {
+              // ── SCREENSHOT SUBCOMMAND ────────────────────────────────────────
+              // Delegated to the frontend rather than reimplemented here: it
+              // already fetches the URL, checks the content type and size, and
+              // attaches the file to PocketBase. Doing that a second time in a
+              // workflow would be a second set of bugs.
+              const shotUrls = shotMatch[1].split(/[\s,]+/).map(function (u) { return u.trim(); }).filter(Boolean);
+              const bad = shotUrls.filter(function (u) { return !/^https?:\/\//i.test(u); });
+              if (bad.length > 0) {
+                await addReaction('-1');
+                await postComment('❌ **PocketBase Bot**: not a URL: `' + bad.join('`, `') + '`');
+                process.exit(0);
+              }
+              const frontendUrl = process.env.FRONTEND_URL;
+              const shotSecret = process.env.SCREENSHOT_IMPORT_SECRET;
+              if (!frontendUrl || !shotSecret) {
+                await addReaction('-1');
+                await postComment('❌ **PocketBase Bot**: screenshot import is not configured (FRONTEND_URL / SCREENSHOT_IMPORT_SECRET).');
+                process.exit(1);
+              }
+              const shotRes = await request(frontendUrl.replace(/\/$/, '') + '/api/screenshots', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ slug: slug, secret: shotSecret, urls: shotUrls })
+              });
+              if (!shotRes.ok) {
+                await addReaction('-1');
+                await postComment('❌ **PocketBase Bot**: screenshot import failed:\n```\n' + shotRes.body + '\n```');
+                process.exit(1);
+              }
+              await revalidate(slug);
+              await addReaction('+1');
+              await postComment(
+                '✅ **PocketBase Bot**: attached ' + shotUrls.length + ' screenshot' + (shotUrls.length === 1 ? '' : 's') +
+                ' to **`' + slug + '`**\n\n' + shotUrls.map(function (u) { return '- ' + u; }).join('\n') +
+                '\n\n*Executed by @' + actor + '*'
+              );
+
             } else if (noteMatch) {
               // ── NOTE SUBCOMMAND ──────────────────────────────────────────────
               const noteAction  = noteMatch[1].toLowerCase();
@@ -838,15 +891,20 @@ jobs:
             } else if (setMatch) {
               // ── SET SUBCOMMAND (value from code block) ───────────────────────
               const fieldName = setMatch[1].toLowerCase();
+              // app_vars is a JSON column, so it rides the code-block path like
+              // the long text fields - but its content is parsed, not stored
+              // verbatim, or PocketBase ends up with a string where an object
+              // belongs and every reader has to guess.
               const SET_ALLOWED = {
                 name: 'string', description: 'string', logo: 'string',
                 documentation: 'string', website: 'string', project_url: 'string', repository: 'string',
-                config_path: 'string', disable_message: 'string', deleted_message: 'string'
+                config_path: 'string', disable_message: 'string', deleted_message: 'string',
+                app_vars: 'json'
               };
               if (!SET_ALLOWED[fieldName]) {
                 await addReaction('-1');
                 await postComment(
-                  '❌ **PocketBase Bot**: `set` only supports text fields.\n\n' +
+                  '❌ **PocketBase Bot**: `set` only supports text and JSON fields.\n\n' +
                   '**Allowed:** `' + Object.keys(SET_ALLOWED).join('`, `') + '`\n\n' +
                   'For boolean/number fields use `field=value` syntax instead.'
                 );
@@ -861,7 +919,21 @@ jobs:
                 process.exit(0);
               }
               const setPayload = {};
-              setPayload[fieldName] = codeBlockValue;
+              if (SET_ALLOWED[fieldName] === 'json') {
+                let parsedJson;
+                try {
+                  parsedJson = JSON.parse(codeBlockValue);
+                } catch (e) {
+                  await addReaction('-1');
+                  await postComment(
+                    '❌ **PocketBase Bot**: `' + fieldName + '` must be valid JSON.\n\n```\n' + e.message + '\n```'
+                  );
+                  process.exit(0);
+                }
+                setPayload[fieldName] = parsedJson;
+              } else {
+                setPayload[fieldName] = codeBlockValue;
+              }
               const setPatchRes = await request(recordsUrl + '/' + record.id, {
                 method: 'PATCH',
                 headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -901,6 +973,10 @@ jobs:
                 privileged:       'boolean',
                 architectures:    'select_list',
                 platforms:        'select_list',
+                execute_in:       'select_list',
+                has_arm:          'boolean',
+                categories:       'relation_list',
+                type:             'relation_single',
                 is_dev:           'boolean',
                 is_disabled:      'boolean',
                 disable_message:  'string',
@@ -910,7 +986,18 @@ jobs:
 
               const parsedFields = parseKVPairs(rest);
 
-              const unknownFields = Object.keys(parsedFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
+              // cpu/ram/hdd/os/version live inside install_methods, not on the
+              // record itself. "/pocketbase immich hdd=25" is how people ask for
+              // it, so route those keys there instead of rejecting them as
+              // unknown fields. Everything else stays a plain record field.
+              const TOP_RESOURCE_KEYS = { cpu: 'number', ram: 'number', hdd: 'number', os: 'string', version: 'string' };
+              const resourceFields = {};
+              const scriptFields = {};
+              for (const [rk, rv] of Object.entries(parsedFields)) {
+                if (TOP_RESOURCE_KEYS[rk]) resourceFields[rk] = rv; else scriptFields[rk] = rv;
+              }
+
+              const unknownFields = Object.keys(scriptFields).filter(function (f) { return !ALLOWED_FIELDS[f]; });
               if (unknownFields.length > 0) {
                 await addReaction('-1');
                 await postComment(
@@ -930,9 +1017,10 @@ jobs:
               const SELECT_VALUES = {
                 architectures: ['amd64', 'arm64'],
                 platforms: ['pve', 'incus'],
+                execute_in: ['pve', 'lxc', 'pbs', 'vm', 'pmg', 'pdm'],
               };
               const payload = {};
-              for (const [key, rawVal] of Object.entries(parsedFields)) {
+              for (const [key, rawVal] of Object.entries(scriptFields)) {
                 const type = ALLOWED_FIELDS[key];
                 if (type === 'boolean') {
                   if (rawVal === 'true') payload[key] = true;
@@ -962,6 +1050,65 @@ jobs:
                     process.exit(0);
                   }
                   payload[key] = values;
+                } else if (type === 'relation_list') {
+                  // categories is a relation, so the stored value is a list of
+                  // record ids. People write category names, so resolve them —
+                  // and accept ids too, which is what a copy out of the
+                  // PocketBase UI gives you.
+                  const wanted = rawVal.split(',').map(function (v) { return v.trim(); }).filter(Boolean);
+                  const catRes = await request(apiBase + '/collections/script_categories/records?perPage=500&fields=id,name', {
+                    headers: { 'Authorization': token }
+                  });
+                  if (!catRes.ok) {
+                    await addReaction('-1');
+                    await postComment('❌ **PocketBase Bot**: could not read `script_categories` to resolve `' + key + '`.');
+                    process.exit(1);
+                  }
+                  const cats = JSON.parse(catRes.body).items || [];
+                  const byName = {};
+                  const ids = {};
+                  cats.forEach(function (c) { byName[String(c.name).toLowerCase()] = c.id; ids[c.id] = true; });
+                  const resolved = [];
+                  const unknownCats = [];
+                  wanted.forEach(function (w) {
+                    if (ids[w]) { resolved.push(w); return; }
+                    const id = byName[w.toLowerCase()];
+                    if (id) resolved.push(id); else unknownCats.push(w);
+                  });
+                  if (unknownCats.length > 0) {
+                    await addReaction('-1');
+                    await postComment(
+                      '❌ **PocketBase Bot**: unknown ' + key + ': `' + unknownCats.join('`, `') + '`\n\n' +
+                      '**Available:** `' + cats.map(function (c) { return c.name; }).sort().join('`, `') + '`'
+                    );
+                    process.exit(0);
+                  }
+                  payload[key] = resolved;
+                } else if (type === 'relation_single') {
+                  // type points at one z_ref_script_types record. People write
+                  // "ct" or "vm", not a 15-character id.
+                  const typeRes = await request(apiBase + '/collections/z_ref_script_types/records?perPage=200&fields=id,type', {
+                    headers: { 'Authorization': token }
+                  });
+                  if (!typeRes.ok) {
+                    await addReaction('-1');
+                    await postComment('❌ **PocketBase Bot**: could not read `z_ref_script_types` to resolve `' + key + '`.');
+                    process.exit(1);
+                  }
+                  const types = JSON.parse(typeRes.body).items || [];
+                  const wantType = rawVal.trim().toLowerCase();
+                  const hit = types.find(function (t) {
+                    return t.id === rawVal.trim() || String(t.type).toLowerCase() === wantType;
+                  });
+                  if (!hit) {
+                    await addReaction('-1');
+                    await postComment(
+                      '❌ **PocketBase Bot**: unknown type `' + rawVal + '`\n\n' +
+                      '**Available:** `' + types.map(function (t) { return t.type; }).sort().join('`, `') + '`'
+                    );
+                    process.exit(0);
+                  }
+                  payload[key] = hit.id;
                 } else if (type === 'nullable_string') {
                   payload[key] = rawVal === '' ? null : rawVal;
                 } else {
@@ -969,6 +1116,42 @@ jobs:
                 }
               }
 
+              // Resources go into install_methods. Which method: the only one if
+              // there is only one, otherwise the non-Alpine default — and the
+              // reply says which, so nobody has to guess where 25 GB landed.
+              const resourceKeys = Object.keys(resourceFields);
+              let resourceTargetType = null;
+              if (resourceKeys.length > 0) {
+                const methodsArr = readJsonBlob(record.install_methods) || [];
+                if (methodsArr.length === 0) {
+                  await addReaction('-1');
+                  await postComment(
+                    '❌ **PocketBase Bot**: `' + slug + '` has no install methods, so there is nowhere to put `' +
+                    resourceKeys.join('`, `') + '`.\n\nAdd one first: `/pocketbase ' + slug + ' method add default cpu=2 ram=2048 hdd=8`'
+                  );
+                  process.exit(0);
+                }
+                let target = methodsArr.find(function (m) {
+                  return String(m.type || '').toLowerCase() !== 'alpine';
+                }) || methodsArr[0];
+                resourceTargetType = target.type || 'default';
+                if (!target.resources) target.resources = {};
+                for (const [rk, rv] of Object.entries(resourceFields)) {
+                  if (TOP_RESOURCE_KEYS[rk] === 'number') {
+                    const n = parseInt(rv, 10);
+                    if (isNaN(n)) {
+                      await addReaction('-1');
+                      await postComment('❌ **PocketBase Bot**: `' + rk + '` must be a number, got: `' + rv + '`');
+                      process.exit(0);
+                    }
+                    target.resources[rk] = n;
+                  } else {
+                    target.resources[rk] = rv;
+                  }
+                }
+                payload.install_methods = methodsArr;
+              }
+
               const patchRes = await request(recordsUrl + '/' + record.id, {
                 method: 'PATCH',
                 headers: { 'Authorization': token, 'Content-Type': 'application/json' },
@@ -981,10 +1164,16 @@ jobs:
               }
               await revalidate(slug);
               const FIELD_TO_CT_VAR = { tags: 'var_tags', unprivileged: 'var_unprivileged' };
+              const RESOURCE_CT_VAR = { cpu: 'var_cpu', ram: 'var_ram', hdd: 'var_disk', os: 'var_os', version: 'var_version' };
               const fieldCtChanges = {};
               for (const [k, v] of Object.entries(payload)) {
                 if (FIELD_TO_CT_VAR[k]) fieldCtChanges[FIELD_TO_CT_VAR[k]] = v;
               }
+              // Resources belong in the CT script too, exactly as the `method`
+              // path syncs them - otherwise PocketBase and ct/<slug>.sh drift.
+              for (const [k, v] of Object.entries(resourceFields)) {
+                if (RESOURCE_CT_VAR[k]) fieldCtChanges[RESOURCE_CT_VAR[k]] = v;
+              }
               let fieldCtSync = null;
               try {
                 fieldCtSync = await upsertCtDefaultsPr(slug, fieldCtChanges);
@@ -992,8 +1181,14 @@ jobs:
                 fieldCtSync = { status: 'skipped', reason: 'CT sync failed: ' + e.message };
               }
               await addReaction('+1');
+              // install_methods is skipped here: dumping the whole array as JSON
+              // buries the one number that actually changed.
               const changesLines = Object.entries(payload)
+                .filter(function (e) { return e[0] !== 'install_methods'; })
                 .map(function ([k, v]) { return '- `' + k + '` → `' + JSON.stringify(v) + '`'; })
+                .concat(Object.entries(resourceFields).map(function ([k, v]) {
+                  return '- `' + k + '` → `' + v + '` *(install method `' + resourceTargetType + '`)*';
+                }))
                 .join('\n');
               await postComment(
                 '✅ **PocketBase Bot**: Updated **`' + slug + '`** successfully!\n\n' +

.github/workflows/sync-to-incus.yml

@@ -0,0 +1,56 @@
+name: Sync ct/install to Incus
+
+# When a ct/*.sh or install/*.sh file changes on main, trigger the Incus repo's
+# own sync workflow immediately instead of waiting for its daily 04:00 cron.
+#
+# The actual mirroring + transformation lives in community-scripts/Incus
+# (.github/workflows/sync-scripts.yml): it rewrites each script's bootstrap line
+# to load the engine from community-scripts/core (ProxmoxVE's misc/build.func is
+# a monolith with no Incus backend), so a plain 1:1 copy would break every Incus
+# script. We therefore only fire a repository_dispatch and let that single
+# source of truth do the work (and auto-approve + merge its own PR).
+#
+# Auth: the "push-app-to-main" GitHub App (vars.PUSH_MAIN_APP_ID /
+# secrets.PUSH_MAIN_APP_SECRET), scoped to community-scripts/Incus. It has
+# contents:write, which repository_dispatch requires (community-scripts-pr-app
+# only has pull_requests:write, so it cannot dispatch). The app must be
+# installed on the Incus repo.
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "ct/**.sh"
+      - "install/**.sh"
+  workflow_dispatch:
+
+concurrency:
+  group: sync-to-incus
+  cancel-in-progress: false
+
+jobs:
+  dispatch:
+    if: github.repository == 'community-scripts/ProxmoxVE'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate token (dispatch to Incus)
+        id: token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ vars.PUSH_MAIN_APP_ID }}
+          private-key: ${{ secrets.PUSH_MAIN_APP_SECRET }}
+          owner: community-scripts
+          repositories: Incus
+
+      - name: Trigger Incus sync workflow
+        env:
+          GH_TOKEN: ${{ steps.token.outputs.token }}
+          SOURCE_SHA: ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          echo "Dispatching proxmoxve-scripts-changed to community-scripts/Incus (from ${SOURCE_SHA})"
+          gh api repos/community-scripts/Incus/dispatches \
+            -X POST \
+            -f "event_type=proxmoxve-scripts-changed" \
+            -F "client_payload[sha]=${SOURCE_SHA}"

CHANGELOG.md

@@ -527,6 +527,32 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-08-26
+
+### 🆕 New Scripts
+
+  - HAProxy ([#16760](https://github.com/community-scripts/ProxmoxVE/pull/16760))
+
+## 2026-08-25
+
+### 🆕 New Scripts
+
+  - Budget-Board ([#16714](https://github.com/community-scripts/ProxmoxVE/pull/16714))
+- Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
+- pyLoad ([#16717](https://github.com/community-scripts/ProxmoxVE/pull/16717))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(apache-tika): handle upstream's switch from jar to zip distribution [@Munza2020](https://github.com/Munza2020) ([#16726](https://github.com/community-scripts/ProxmoxVE/pull/16726))
+    - Fix Firecrawl install: add ccache dependency for koffi native build [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16746](https://github.com/community-scripts/ProxmoxVE/pull/16746))
+    - excalidash: Fix broken Update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16747](https://github.com/community-scripts/ProxmoxVE/pull/16747))
+
+  - #### 💥 Breaking Changes
+
+    - Migrate the (remaining) Top 25 scripts to the new core engine [@MickLesk](https://github.com/MickLesk) ([#16749](https://github.com/community-scripts/ProxmoxVE/pull/16749))
+
 ## 2026-08-24
 
 ### 🆕 New Scripts

ct/apache-tika.sh

@@ -35,11 +35,8 @@ function update_script() {
     msg_ok "Stopped Service"
 
     msg_info "Updating ${APP} to v${RELEASE}"
-    cd /opt/apache-tika
-    curl -fsSL -o tika-server-standard-${RELEASE}.jar "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.jar"
-    mv --force tika-server-standard.jar tika-server-standard-prev-version.jar
-    mv tika-server-standard-${RELEASE}.jar tika-server-standard.jar
-    rm -rf /opt/apache-tika/tika-server-standard-prev-version.jar
+    CLEAN_INSTALL=1 fetch_and_deploy_from_url "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.zip" /opt/apache-tika
+    mv "/opt/apache-tika/tika-server-standard-${RELEASE}.jar" /opt/apache-tika/tika-server-standard.jar
     echo "${RELEASE}" >/opt/${APP}_version.txt
     msg_ok "Updated ${APP} to v${RELEASE}"
 

ct/budget-board.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/teelur/budget-board
+
+APP="Budget-Board"
+var_tags="${var_tags:-finance;budget;money}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/budget-board ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "budget-board" "teelur/budget-board"; then
+    msg_info "Stopping Service"
+    systemctl stop budget-board
+    msg_ok "Stopped Service"
+
+    create_backup /opt/budget-board/budget-board.env
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "budget-board" "teelur/budget-board" "tarball"
+
+    restore_backup
+
+    msg_info "Rebuilding Backend"
+    cd /opt/budget-board/server
+    $STD dotnet restore "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj"
+    export configuration=Release
+    $STD dotnet publish "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj" -c $configuration -o /opt/budget-board/publish /p:UseAppHost=false --no-restore
+    msg_ok "Rebuilt Backend"
+
+    msg_info "Rebuilding Frontend"
+    cd /opt/budget-board/client
+    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+    $STD yarn install
+    $STD yarn run build
+    cp -r dist/. /var/www/html/
+    msg_ok "Rebuilt Frontend"
+
+    msg_info "Starting Service"
+    systemctl start budget-board
+    nginx_enable_site budget-board.conf
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/cloudflared.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/debian.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/excalidash.sh

@@ -47,11 +47,11 @@ function update_script() {
     msg_ok "Configured Database Provider"
 
     msg_info "Rebuilding Application"
-    $STD npm ci
+    $STD npm ci --include=dev
     $STD npx prisma generate
     $STD npx tsc
     cd /opt/excalidash/frontend
-    $STD npm ci
+    $STD npm ci --include=dev
     $STD npm run build
     cp -r /opt/excalidash/frontend/dist/. /var/www/excalidash/
     msg_ok "Rebuilt Application"

ct/firecrawl.sh

@@ -30,7 +30,7 @@ function update_script() {
     exit
   fi
 
-  ensure_dependencies build-essential
+  ensure_dependencies build-essential ccache
 
   if check_for_gh_release "firecrawl" "firecrawl/firecrawl"; then
     msg_info "Stopping Services"

ct/frigate.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
 # Authors: MickLesk (CanbiZ) | Co-Author: remz1337
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/haproxy.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.haproxy.org/
+
+APP="HAProxy"
+var_tags="${var_tags:-network;proxy}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/haproxy/haproxy.cfg ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Updating ${APP}"
+  $STD apt update
+  $STD apt install -y haproxy
+  msg_ok "Updated ${APP}"
+
+  msg_info "Validating Configuration"
+  if ! $STD haproxy -c -f /etc/haproxy/haproxy.cfg; then
+    msg_error "Configuration is invalid - service not restarted"
+    exit
+  fi
+  msg_ok "Validated Configuration"
+
+  msg_info "Restarting Service"
+  systemctl restart haproxy
+  msg_ok "Restarted Service"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Statistics page:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8404${CL}"
+echo -e "${INFO}${YW}The generated stats password is in /etc/haproxy/haproxy.cfg${CL}"

ct/headers/budget-board

@@ -0,0 +1,6 @@
+    ____            __           __        ____                       __
+   / __ )__  ______/ /___ ____  / /_      / __ )____  ____ __________/ /
+  / __  / / / / __  / __ `/ _ \/ __/_____/ __  / __ \/ __ `/ ___/ __  / 
+ / /_/ / /_/ / /_/ / /_/ /  __/ /_/_____/ /_/ / /_/ / /_/ / /  / /_/ /  
+/_____/\__,_/\__,_/\__, /\___/\__/     /_____/\____/\__,_/_/   \__,_/   
+                  /____/                                                

ct/headers/haproxy

@@ -0,0 +1,6 @@
+    __  _____    ____                       
+   / / / /   |  / __ \_________  _  ____  __
+  / /_/ / /| | / /_/ / ___/ __ \| |/_/ / / /
+ / __  / ___ |/ ____/ /  / /_/ />  </ /_/ / 
+/_/ /_/_/  |_/_/   /_/   \____/_/|_|\__, /  
+                                   /____/   

ct/headers/maintainerr

@@ -0,0 +1,6 @@
+    __  ___      _       __        _                     
+   /  |/  /___ _(_)___  / /_____ _(_)___  ___  __________
+  / /|_/ / __ `/ / __ \/ __/ __ `/ / __ \/ _ \/ ___/ ___/
+ / /  / / /_/ / / / / / /_/ /_/ / / / / /  __/ /  / /    
+/_/  /_/\__,_/_/_/ /_/\__/\__,_/_/_/ /_/\___/_/  /_/     
+                                                         

ct/headers/pyload

@@ -0,0 +1,6 @@
+                 __                    __
+    ____  __  __/ /   ____  ____ _____/ /
+   / __ \/ / / / /   / __ \/ __ `/ __  / 
+  / /_/ / /_/ / /___/ /_/ / /_/ / /_/ /  
+ / .___/\__, /_____/\____/\__,_/\__,_/   
+/_/    /____/                            

ct/hermesagent.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: Stephen Chin (steveonjava)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/immich.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/jellyfin.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/maintainerr.sh

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Karolis Stanelis (kstanelis)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Maintainerr/Maintainerr
+
+APP="Maintainerr"
+var_tags="${var_tags:-media;arr;cleanup}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-8192}"
+var_disk="${var_disk:-24}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/maintainerr ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "maintainerr" "Maintainerr/Maintainerr"; then
+    msg_info "Stopping Service"
+    systemctl stop maintainerr
+    msg_ok "Stopped Service"
+
+    create_backup /opt/data /opt/maintainerr/.env
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "maintainerr" "Maintainerr/Maintainerr" "tarball" "latest" "/opt/maintainerr"
+    restore_backup
+
+    msg_info "Rebuilding Maintainerr (Patience)"
+    cd /opt/maintainerr
+    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+    export NODE_OPTIONS="--max-old-space-size=4096"
+    $STD corepack enable
+    $STD corepack prepare yarn@4.11.0 --activate
+    $STD yarn config set enableTelemetry 0
+    $STD yarn install --network-timeout 300000
+    $STD yarn turbo build --concurrency=1
+    cp -r apps/ui/dist apps/server/dist/ui
+    cp -r apps/server/assets apps/server/dist/assets
+    find apps/server/dist/ui -type f -not -path '*/node_modules/*' -print0 | xargs -0 sed -i "s,/__PATH_PREFIX__,,g"
+    $STD yarn workspaces focus --all --production
+    rm -rf /opt/maintainerr/.yarn/cache /opt/maintainerr/.turbo /opt/maintainerr/apps/ui
+    sed -i '/^npm_package_version=/d;/^VERSION_TAG=/d' /opt/maintainerr/.env
+    {
+      echo "VERSION_TAG=stable"
+      echo "npm_package_version=$(cat ~/.maintainerr)"
+    } >>/opt/maintainerr/.env
+    msg_ok "Rebuilt Maintainerr"
+
+    msg_info "Starting Service"
+    systemctl start maintainerr
+    msg_ok "Started Service"
+    msg_ok "Updated Successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6246${CL}"

ct/n8n.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/nginxproxymanager.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: tteck (tteckster) | Co-Author: CrazyWolf13, MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/ollama.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: havardthom | Co-Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/openwebui.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck | Co-Author: havardthom | Co-Author: Slaviša Arežina (tremor021)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/paperless-ngx.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/pihole.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/proxmox-backup-server.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/pyload.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/pyload/pyload
+
+APP="pyLoad"
+var_tags="${var_tags:-downloader}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-16}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/pyload ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Stopping Service"
+  systemctl stop pyload
+  msg_ok "Stopped Service"
+
+  msg_info "Updating ${APP}"
+  $STD uv pip install --python /opt/pyload/.venv --upgrade --prerelease allow "pyload-ng[all]"
+  msg_ok "Updated ${APP}"
+
+  msg_info "Starting Service"
+  systemctl start pyload
+  msg_ok "Started Service"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}"

ct/qbittorrent.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: tteck (tteckster) | Co-Author: Slaviša Arežina (tremor021)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/technitiumdns.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/ubuntu.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/unifi-os-server.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

ct/uptimekuma.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

install/apache-tika-install.sh

@@ -35,11 +35,9 @@ msg_ok "Installed Dependencies"
 JAVA_VERSION="21" setup_java
 
 msg_info "Installing Apache Tika"
-mkdir -p /opt/apache-tika
-cd /opt/apache-tika
 RELEASE="$(curl -fsSL https://dlcdn.apache.org/tika/ | grep -oP '(?<=href=")[0-9]+\.[0-9]+\.[0-9]+(?=/")' | sort -V | tail -n1)"
-curl -fsSL "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.jar" -o tika-server-standard-${RELEASE}.jar
-mv tika-server-standard-${RELEASE}.jar tika-server-standard.jar
+fetch_and_deploy_from_url "https://dlcdn.apache.org/tika/${RELEASE}/tika-server-standard-${RELEASE}.zip" /opt/apache-tika
+mv "/opt/apache-tika/tika-server-standard-${RELEASE}.jar" /opt/apache-tika/tika-server-standard.jar
 echo "${RELEASE}" >/opt/${APPLICATION}_version.txt
 msg_ok "Installed Apache Tika"
 

install/budget-board-install.sh

@@ -0,0 +1,127 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/teelur/budget-board
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+setup_deb822_repo \
+  "microsoft" \
+  "https://packages.microsoft.com/keys/microsoft-2025.asc" \
+  "https://packages.microsoft.com/debian/13/prod/" \
+  "trixie"
+$STD apt install -y dotnet-sdk-10.0
+msg_ok "Installed Dependencies"
+
+NODE_VERSION=25 setup_nodejs
+PG_VERSION=16 setup_postgresql
+PG_DB_NAME=budget_board_db PG_DB_USER=budget_board setup_postgresql_db
+
+fetch_and_deploy_gh_release "budget-board" "teelur/budget-board" "tarball"
+
+msg_info "Configuring Budget Board Backend"
+cd /opt/budget-board/server
+$STD dotnet restore "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj"
+export configuration=Release
+$STD dotnet publish "BudgetBoard.WebAPI/BudgetBoard.WebAPI.csproj" -c $configuration -o /opt/budget-board/publish /p:UseAppHost=false --no-restore
+
+cat <<EOF >/opt/budget-board/budget-board.env
+Logging__LogLevel__Default=Information
+CLIENT_ADDRESS=$LOCAL_IP
+POSTGRES_HOST=localhost
+POSTGRES_PORT=5432
+POSTGRES_DATABASE=$PG_DB_NAME
+POSTGRES_USER=$PG_DB_USER
+POSTGRES_PASSWORD=$PG_DB_PASS
+OIDC_ENABLED=false
+OIDC_ISSUER=
+OIDC_CLIENT_ID=
+OIDC_CLIENT_SECRET=
+EMAIL_SENDER=
+EMAIL_SENDER_USERNAME=
+EMAIL_SENDER_PASSWORD=
+EMAIL_SMTP_HOST=
+EMAIL_SMTP_PORT=587
+DISABLE_NEW_USERS=false
+DISABLE_LOCAL_AUTH=false
+AUTO_UPDATE_DB=true
+DISABLE_AUTO_SYNC=false
+SYNC_INTERVAL_HOURS=8
+TZ=UTC
+
+ASPNETCORE_URLS=http://127.0.0.1:6253
+PORT=6253
+VITE_SERVER_ADDRESS=${LOCAL_IP}
+VITE_OIDC_ENABLED=false
+VITE_OIDC_PROVIDER=
+VITE_OIDC_CLIENT_ID=
+VITE_DISABLE_NEW_USERS=false
+VITE_DISABLE_LOCAL_AUTH=false
+EOF
+msg_ok "Configured Budget Board Backend"
+
+msg_info "Configuring Budget Board Frontend"
+cd /opt/budget-board/client
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+$STD yarn config set --home enableTelemetry 0
+$STD npm install --global corepack@latest
+$STD corepack enable
+$STD yarn install
+$STD yarn run build
+cp -r dist/. /var/www/html/
+msg_ok "Configured Budget Board Frontend"
+
+msg_info "Creating services"
+cat <<EOF >/etc/systemd/system/budget-board.service
+[Unit]
+Description=Budget Board Service
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/budget-board/publish
+ExecStart=dotnet BudgetBoard.WebAPI.dll
+Restart=always
+EnvironmentFile=/opt/budget-board/budget-board.env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now budget-board
+
+cat <<'EOF' >/etc/nginx/sites-available/budget-board.conf
+server {
+    listen 80 default_server;
+    server_name _;
+    root /var/www/html;
+    index index.html;
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:6253;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}
+EOF
+nginx_enable_site budget-board.conf
+msg_ok "Created services"
+
+motd_ssh
+customize
+cleanup_lxc

install/firecrawl-install.sh

@@ -16,6 +16,7 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   build-essential \
+  ccache \
   cmake \
   git \
   nftables \

install/gitea-install.sh

@@ -30,8 +30,9 @@ setup_deb_based() {
   chown -R gitea:gitea /var/lib/gitea/
   chmod -R 750 /var/lib/gitea/
   chown root:gitea /etc/gitea
-  chmod 750 /etc/gitea
+  chmod 770 /etc/gitea
   sudo -u gitea ln -s /var/lib/gitea/data/.ssh/ /etc/gitea/.ssh
+  chmod 750 /etc/gitea
   msg_ok "Configured Gitea"
 
   msg_info "Creating Service"

install/haproxy-install.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.haproxy.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing HAProxy"
+$STD apt install -y haproxy
+msg_ok "Installed HAProxy"
+
+msg_info "Configuring HAProxy"
+HAPROXY_STATS_PASSWORD=$(openssl rand -base64 18)
+cat <<EOF >/etc/haproxy/haproxy.cfg
+global
+	log /dev/log local0
+	chroot /var/lib/haproxy
+	stats socket /run/haproxy/admin.sock mode 660 level admin
+	stats timeout 30s
+	user haproxy
+	group haproxy
+	daemon
+	ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets
+
+defaults
+	log global
+	mode http
+	option httplog
+	option dontlognull
+	timeout connect 5s
+	timeout client 50s
+	timeout server 50s
+	errorfile 400 /etc/haproxy/errors/400.http
+	errorfile 403 /etc/haproxy/errors/403.http
+	errorfile 408 /etc/haproxy/errors/408.http
+	errorfile 500 /etc/haproxy/errors/500.http
+	errorfile 502 /etc/haproxy/errors/502.http
+	errorfile 503 /etc/haproxy/errors/503.http
+	errorfile 504 /etc/haproxy/errors/504.http
+
+listen stats
+	bind *:8404
+	stats enable
+	stats uri /
+	stats refresh 10s
+	stats admin if TRUE
+	stats auth admin:${HAPROXY_STATS_PASSWORD}
+
+# Example: replace with your own frontend/backend pairs.
+#frontend http_in
+#	bind *:80
+#	default_backend servers
+#
+#backend servers
+#	balance roundrobin
+#	server web1 192.168.1.10:80 check
+#	server web2 192.168.1.11:80 check
+EOF
+$STD haproxy -c -f /etc/haproxy/haproxy.cfg
+systemctl restart haproxy
+msg_ok "Configured HAProxy"
+
+motd_ssh
+customize
+cleanup_lxc

install/maintainerr-install.sh

@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Karolis Stanelis (kstanelis)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Maintainerr/Maintainerr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  pkg-config \
+  libcairo2-dev \
+  libpango1.0-dev \
+  libjpeg-dev \
+  libgif-dev \
+  libpixman-1-dev \
+  librsvg2-dev
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+
+fetch_and_deploy_gh_release "maintainerr" "Maintainerr/Maintainerr" "tarball" "latest" "/opt/maintainerr"
+
+msg_info "Building Maintainerr (Patience)"
+cd /opt/maintainerr
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+export NODE_OPTIONS="--max-old-space-size=4096"
+$STD corepack enable
+$STD corepack prepare yarn@4.11.0 --activate
+$STD yarn config set enableTelemetry 0
+$STD yarn install --network-timeout 300000
+$STD yarn turbo build --concurrency=1
+cp -r apps/ui/dist apps/server/dist/ui
+cp -r apps/server/assets apps/server/dist/assets
+find apps/server/dist/ui -type f -not -path '*/node_modules/*' -print0 | xargs -0 sed -i "s,/__PATH_PREFIX__,,g"
+$STD yarn workspaces focus --all --production
+rm -rf /opt/maintainerr/.yarn/cache /opt/maintainerr/.turbo /opt/maintainerr/apps/ui
+msg_ok "Built Maintainerr"
+
+msg_info "Configuring Environment"
+mkdir -p /opt/data/logs
+ln -sfn /opt/maintainerr /opt/app
+cat <<EOF >/opt/maintainerr/.env
+NODE_ENV=production
+DATA_DIR=/opt/data
+UI_PORT=6246
+UI_HOSTNAME=0.0.0.0
+BASE_PATH=
+VERSION_TAG=stable
+npm_package_version=$(cat ~/.maintainerr)
+EOF
+msg_ok "Configured Environment"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/maintainerr.service
+[Unit]
+Description=Maintainerr
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/maintainerr/apps/server
+EnvironmentFile=/opt/maintainerr/.env
+ExecStart=/usr/bin/node dist/main
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now maintainerr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/pyload-install.sh

@@ -0,0 +1,67 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/pyload/pyload
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  unrar-free \
+  p7zip-full \
+  tesseract-ocr
+msg_ok "Installed Dependencies"
+
+UV_PYTHON="3.13" setup_uv
+
+msg_info "Setting up pyLoad"
+mkdir -p /opt/pyload_data/{userdir,downloads}
+$STD uv venv --python 3.13 /opt/pyload/.venv
+$STD uv pip install --python /opt/pyload/.venv --prerelease allow "pyload-ng[all]"
+msg_ok "Set up pyLoad"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/pyload.service
+[Unit]
+Description=pyLoad Download Manager
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/pyload
+ExecStart=/opt/pyload/.venv/bin/pyload --userdir /opt/pyload_data/userdir --storagedir /opt/pyload_data/downloads
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now pyload
+msg_ok "Created Service"
+
+msg_info "Configuring Web Interface"
+for _ in {1..30}; do
+  [[ -f /opt/pyload_data/userdir/settings/pyload.cfg ]] && break
+  sleep 1
+done
+sed -i 's|^\([[:space:]]*ip host : "IP address"\) = localhost$|\1 = 0.0.0.0|' /opt/pyload_data/userdir/settings/pyload.cfg
+
+# pyLoad rewrites storage_folder from --storagedir on every start; the first start seeded it.
+sed -i 's| --storagedir /opt/pyload_data/downloads||' /etc/systemd/system/pyload.service
+systemctl daemon-reload
+systemctl restart pyload
+msg_ok "Configured Web Interface"
+
+motd_ssh
+customize
+cleanup_lxc

tools/pve/update-apps.sh

@@ -4,8 +4,9 @@
 # Author: BvdBerg01 | Co-Author: remz1337
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/refs/heads/main/misc/core.func)
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
+_CS_CORE_URL="${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}"
+source <(curl -fsSL "${_CS_CORE_URL}/core/core.func")
+source <(curl -fsSL "${_CS_CORE_URL}/api/api.func") 2>/dev/null || true
 declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-apps" "pve"
 
 # =============================================================================