Rename lxc-delete.sh to guest-delete.sh

The tool deletes VMs as well now, so the name no longer describes it. The telemetry slug moves with the file. Needs a guest-delete entry in PocketBase before merging: the removal workflow derives its slug from the deleted path and will mark lxc-delete as is_deleted, and nothing creates an entry for a newly added tools/ script.
2026-09-11 08:22:44 +00:00 · 2026-09-10 11:55:05 +02:00
31 changed files with 32 additions and 1414 deletions
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -5,19 +5,15 @@ body:
  - type: markdown
    attributes:
      value: |
-        ## ⚠️ **IMPORTANT - READ FIRST**
+        ## ⚠️ **IMPORTANT - READ FIRST**  
+        - 🔍 **Search first:** Before submitting, check if the issue has already been reported or resolved in [closed issues](https://github.com/community-scripts/ProxmoxVE/issues?q=is%3Aissue+is%3Aclosed). If found, comment on that issue instead of creating a new one.  
+        Alternatively, check the **[Discussions](https://github.com/community-scripts/ProxmoxVE/discussions)** under the *"Announcement"* or *"Guide"* categories for relevant information.  
+        - 🔎 If you encounter `[ERROR] in line 23: exit code *: while executing command "$@" > /dev/null 2>&1`, rerun the script with verbose mode before submitting the issue.  
+        - 📜 **Read the script:** Familiarize yourself with the script's content and its purpose. This will help you understand the issue better and provide more relevant information

-        **1. Reproduce the issue with verbose mode - this is mandatory.**
-        Set `var_verbose=yes` (or *Advanced Settings → Verbose Mode*) and run the script again.
-        Only a verbose log shows what actually failed - a bare `[ERROR] in line 23: exit code *` tells us nothing.
-        **Reports without a verbose log will most likely be closed.**
-
-        **2. Search before you post.**
-        Check the [closed issues](https://github.com/community-scripts/ProxmoxVE/issues?q=is%3Aissue+is%3Aclosed) and the [Discussions](https://github.com/community-scripts/ProxmoxVE/discussions) (*Announcement* / *Guide*). If it is already known, comment there instead of opening a new issue.
-
-        **3. Read the script.**
-        Knowing what it does makes it much easier to describe the problem - and often to solve it yourself.
+        Thank you for taking the time to report an issue! Please provide as much detail as possible to help us address the problem efficiently.  

+     
  - type: input
    id: guidelines
    attributes:
@@ -32,6 +28,7 @@ body:
      label: 🔎 Did you run the script with verbose mode enabled?
      description: "Required for debugging any script issue. A verbose log is mandatory."
      options:
+        - ""
        - "Yes, verbose mode was enabled and the output is included below"
        - "No (this issue will likely be closed automatically)"
    validations:
@@ -53,32 +50,6 @@ body:
    validations:
      required: true

-  - type: dropdown
-    id: issue_phase
-    attributes:
-      label: 🕒 When does the issue occur?
-      options:
-        - "Initial creation / installation"
-        - "Update of an existing container"
-        - "While the application is running"
-    validations:
-      required: true
-
-  - type: dropdown
-    id: execution_context
-    attributes:
-      label: 🖱️ Where did you run the command?
-      description: "The shell matters — the Proxmox web console starts without some environment variables that a normal login shell sets."
-      options:
-        - "Proxmox web UI → node → Shell"
-        - "Proxmox web UI → LXC → Console"
-        - "SSH into the Proxmox host"
-        - "SSH into the container"
-        - "pct enter from the host"
-        - "Other / not listed"
-    validations:
-      required: true
-
  - type: checkboxes
    validations:
      required: true
@@ -93,31 +64,18 @@ body:
      value: "💡 **Tip:** If you are using Advanced Settings, please test with Default Settings before submitting an issue."

  - type: dropdown
-    id: os_distribution
+    id: linux_distribution
    attributes:
-      label: 🖥️ Which Linux distribution is the container running?
+      label: 🖥️ Which Linux distribution are you using?
      options:
-        - Debian
-        - Ubuntu
+        - 
        - Alpine
-        - Devuan
-        - AlmaLinux
-        - Rocky Linux
-        - CentOS Stream
-        - Fedora
-        - openSUSE
-        - openEuler
-        - Gentoo
-        - Other / not listed
-    validations:
-      required: true
-
-  - type: input
-    id: os_version
-    attributes:
-      label: 🔢 Which version of that distribution?
-      description: "Run `cat /etc/os-release` inside the container if unsure."
-      placeholder: "e.g. 13 (Debian), 24.04 (Ubuntu), 3.22 (Alpine)"
+        - Debian 11
+        - Debian 12
+        - Debian 13
+        - Ubuntu 22.04
+        - Ubuntu 24.04
+        - Ubuntu 24.10
    validations:
      required: true

@@ -127,27 +85,16 @@ body:
      label: 🧱 Is this Proxmox host running arm64?
      description: "Run `dpkg --print-architecture` on your Proxmox host if unsure."
      options:
+        - ""
        - "No"
        - "Yes"
    validations:
      required: true

-  - type: dropdown
-    id: pve_major
-    attributes:
-      label: 📈 Which Proxmox VE release are you on?
-      options:
-        - "Proxmox VE 9"
-        - "Proxmox VE 8"
-        - "Proxmox VE 7 or older (end of life)"
-    validations:
-      required: true
-
  - type: input
    id: pve_version
    attributes:
-      label: 🔢 Exact Proxmox version and kernel
-      description: "Both matter — several issues turned out to be kernel-specific."
+      label: 📈 Which Proxmox version are you on?
      placeholder: "run pveversion in your PVE node console"
    validations:
      required: true
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -14,9 +14,6 @@ Fixes #
 - [ ] **Tested thoroughly** – Changes work as expected.
 - [ ] **No security risks** – No hardcoded secrets, unnecessary privilege escalations, or permission issues.

-**Tested on:** <!-- e.g. PVE 9.2 / Debian 13 / fresh install + update. Write "not tested" if you could not run it. -->
-
-
 ---

 ## 🤖 AI Assistance (**X** in brackets)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -540,64 +540,15 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-09-11
-
-### 🆕 New Scripts
-
-  - OneTimeSecret ([#17097](https://github.com/community-scripts/ProxmoxVE/pull/17097))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - passwordpusher: restore data before running migrations [@MickLesk](https://github.com/MickLesk) ([#17141](https://github.com/community-scripts/ProxmoxVE/pull/17141))
-    - paperclip: install the rust toolchain needed by the runner build [@MickLesk](https://github.com/MickLesk) ([#17142](https://github.com/community-scripts/ProxmoxVE/pull/17142))
-    - homepage: run next directly instead of through pnpm [@MickLesk](https://github.com/MickLesk) ([#17155](https://github.com/community-scripts/ProxmoxVE/pull/17155))
-    - changedetection: fix: pin browserless [@CrazyWolf13](https://github.com/CrazyWolf13) ([#17163](https://github.com/community-scripts/ProxmoxVE/pull/17163))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - core.func: fall back to a usable HOME when the shell has none [@MickLesk](https://github.com/MickLesk) ([#17154](https://github.com/community-scripts/ProxmoxVE/pull/17154))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - update-apps: rewrite the retired Gitea base in every container before updating it [@MickLesk](https://github.com/MickLesk) ([#17156](https://github.com/community-scripts/ProxmoxVE/pull/17156))
-
-  - #### 🔧 Refactor
-
-    - Rename lxc-delete.sh to guest-delete.sh [@MickLesk](https://github.com/MickLesk) ([#17152](https://github.com/community-scripts/ProxmoxVE/pull/17152))
-
-### 📚 Documentation
-
-  - issue template: add PVE release, execution context and phase; refresh distro list / pve versions [@MickLesk](https://github.com/MickLesk) ([#17160](https://github.com/community-scripts/ProxmoxVE/pull/17160))
-
 ## 2026-09-10

-### 🆕 New Scripts
-
-  - Chevereto ([#17131](https://github.com/community-scripts/ProxmoxVE/pull/17131))
- Portabase ([#17111](https://github.com/community-scripts/ProxmoxVE/pull/17111))
- Logseq ([#17112](https://github.com/community-scripts/ProxmoxVE/pull/17112))
- Safebucket ([#17096](https://github.com/community-scripts/ProxmoxVE/pull/17096))
-
 ### 🚀 Updated Scripts

  - #### 🐞 Bug Fixes

-    - Immich v3.2.0 [@vhsdream](https://github.com/vhsdream) ([#17137](https://github.com/community-scripts/ProxmoxVE/pull/17137))
    - fix(solidtime): prevent composer install from hanging on root prompt [@supersoju](https://github.com/supersoju) ([#17146](https://github.com/community-scripts/ProxmoxVE/pull/17146))
    - fix(hermesagent): wait for root gateway cleanup [@steveonjava](https://github.com/steveonjava) ([#17147](https://github.com/community-scripts/ProxmoxVE/pull/17147))

-### 💾 Core
-
-  - Keep the script name when regenerating the entrypoint [@MickLesk](https://github.com/MickLesk) ([core#35](https://github.com/community-scripts/core/pull/35))
- Rewrite the dead Gitea base onto GitHub instead of failing the update [@MickLesk](https://github.com/MickLesk) ([core#33](https://github.com/community-scripts/core/pull/33))
- core.func: fall back to a usable HOME when the shell has none [@MickLesk](https://github.com/MickLesk) ([core#32](https://github.com/community-scripts/core/pull/32))
-
 ## 2026-09-09

 ### 🆕 New Scripts
--- a/ct/changedetection.sh
+++ b/ct/changedetection.sh
@@ -69,7 +69,6 @@ function update_script() {
    $STD git -C /opt/browserless/ reset --hard origin/main
    $STD npm update --prefix /opt/browserless
    $STD npm ci --include=optional --include=dev --prefix /opt/browserless
-    $STD npm install --save-exact playwright-core@1.62.1 --prefix /opt/browserless
    $STD /opt/browserless/node_modules/playwright-core/cli.js install --with-deps
    # Update Chrome separately, as it has to be done with the force option. Otherwise the installation of other browsers will not be done if Chrome is already installed.
    $STD /opt/browserless/node_modules/playwright-core/cli.js install --force chrome
--- a/ct/chevereto.sh
+++ b/ct/chevereto.sh
@@ -1,73 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://chevereto.com/
-
-APP="Chevereto"
-var_tags="${var_tags:-image-hosting;gallery;media}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/chevereto ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "chevereto" "chevereto/chevereto"; then
-    PHP_FPM_SERVICE="$(basename "$(get_php_fpm_socket)" .sock)"
-
-    msg_info "Stopping Services"
-    systemctl stop nginx "$PHP_FPM_SERVICE"
-    msg_ok "Stopped Services"
-
-    create_backup /opt/chevereto/app/env.php \
-      /opt/chevereto/images \
-      /opt/chevereto/content
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "chevereto" "chevereto/chevereto" "tarball"
-
-    restore_backup
-
-    msg_info "Updating Chevereto"
-    cd /opt/chevereto/app
-    export COMPOSER_ALLOW_SUPERUSER=1
-    $STD composer install --no-dev --prefer-dist --no-interaction --optimize-autoloader
-    chown -R www-data:www-data /opt/chevereto
-    chmod -R 775 /opt/chevereto/images /opt/chevereto/content
-    msg_ok "Updated Chevereto"
-
-    msg_info "Starting Services"
-    systemctl start "$PHP_FPM_SERVICE" nginx
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/headers/chevereto
+++ b/ct/headers/chevereto
@@ -1,6 +0,0 @@
-   ________                             __      
-  / ____/ /_  ___ _   _____  ________  / /_____ 
- / /   / __ \/ _ \ | / / _ \/ ___/ _ \/ __/ __ \
-/ /___/ / / /  __/ |/ /  __/ /  /  __/ /_/ /_/ /
-\____/_/ /_/\___/|___/\___/_/   \___/\__/\____/ 
-                                                
--- a/ct/headers/logseq
+++ b/ct/headers/logseq
@@ -1,6 +0,0 @@
-    __                               
-   / /   ____  ____ _________  ____ _
-  / /   / __ \/ __ `/ ___/ _ \/ __ `/
- / /___/ /_/ / /_/ (__  )  __/ /_/ / 
-/_____/\____/\__, /____/\___/\__, /  
-            /____/             /_/   
--- a/ct/headers/onetimesecret
+++ b/ct/headers/onetimesecret
@@ -1,6 +0,0 @@
-   ____           _______               _____                     __ 
-  / __ \____  ___/_  __(_)___ ___  ___ / ___/___  _____________  / /_
- / / / / __ \/ _ \/ / / / __ `__ \/ _ \\__ \/ _ \/ ___/ ___/ _ \/ __/
-/ /_/ / / / /  __/ / / / / / / / /  __/__/ /  __/ /__/ /  /  __/ /_  
-\____/_/ /_/\___/_/ /_/_/ /_/ /_/\___/____/\___/\___/_/   \___/\__/  
-                                                                     
--- a/ct/headers/portabase
+++ b/ct/headers/portabase
@@ -1,6 +0,0 @@
-    ____             __        __                  
-   / __ \____  _____/ /_____ _/ /_  ____ _________ 
-  / /_/ / __ \/ ___/ __/ __ `/ __ \/ __ `/ ___/ _ \
- / ____/ /_/ / /  / /_/ /_/ / /_/ / /_/ (__  )  __/
-/_/    \____/_/   \__/\__,_/_.___/\__,_/____/\___/ 
-                                                   
--- a/ct/headers/safebucket
+++ b/ct/headers/safebucket
@@ -1,6 +0,0 @@
-   _____       ____     __               __        __ 
-  / ___/____ _/ __/__  / /_  __  _______/ /_____  / /_
-  \__ \/ __ `/ /_/ _ \/ __ \/ / / / ___/ //_/ _ \/ __/
- ___/ / /_/ / __/  __/ /_/ / /_/ / /__/ ,< /  __/ /_  
-/____/\__,_/_/  \___/_.___/\__,_/\___/_/|_|\___/\__/  
-                                                      
--- a/ct/homepage.sh
+++ b/ct/homepage.sh
@@ -83,10 +83,6 @@ EOF
      sed -i '/^ExecStart=/i Environment=CI=true' /etc/systemd/system/homepage.service
      systemctl daemon-reload
    fi
-    if grep -q '^ExecStart=pnpm start' /etc/systemd/system/homepage.service; then
-      sed -i 's|^ExecStart=pnpm start$|ExecStart=/opt/homepage/node_modules/.bin/next start|' /etc/systemd/system/homepage.service
-      systemctl daemon-reload
-    fi
    msg_ok "Updated Homepage"

    msg_info "Starting service"
--- a/ct/immich.sh
+++ b/ct/immich.sh
@@ -112,7 +112,7 @@ EOF
    msg_ok "Image-processing libraries up to date"
  fi

-  RELEASE="v3.2.0"
+  RELEASE="v3.1.0"
  if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
    if [[ $(cat ~/.immich) > "2.5.1" ]]; then
      msg_info "Enabling Maintenance Mode"
@@ -187,10 +187,11 @@ EOF
    msg_info "Updating Immich web and microservices"
    cd "$SRC_DIR"/server
    # server build
+    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
    $STD pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter immich build
-    $STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
+    unset SHARP_IGNORE_GLOBAL_LIBVIPS
    export SHARP_FORCE_GLOBAL_LIBVIPS=true
-    $STD pnpm --dir "$APP_DIR/node_modules/sharp" exec npm run build
+    $STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"

    # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
    if [[ -f "$APP_DIR/helmet.json" ]]; then
@@ -204,6 +205,7 @@ EOF
    cd "$SRC_DIR"
    echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
    unset SHARP_FORCE_GLOBAL_LIBVIPS
+    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
    $STD pnpm --filter @immich/sdk --filter immich-web --filter @immich/cli build
    $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
    cp -a web/build "$APP_DIR"/www
--- a/ct/logseq.sh
+++ b/ct/logseq.sh
@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://logseq.com/
-
-APP="Logseq"
-var_tags="${var_tags:-notes;knowledge-base}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-16}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/logseq ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "logseq" "logseq/logseq"; then
-    NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-    JAVA_VERSION="21" setup_java
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "logseq" "logseq/logseq" "tarball"
-
-    msg_info "Building Logseq Web App (Patience)"
-    cd /opt/logseq
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export NODE_OPTIONS="--max-old-space-size=4096"
-    export JAVA_TOOL_OPTIONS="-Xmx4g"
-    $STD corepack enable
-    $STD pnpm install --config.network-timeout=240000
-    $STD pnpm release
-    msg_ok "Built Logseq Web App"
-
-    msg_info "Reloading Webserver"
-    systemctl reload nginx
-    msg_ok "Reloaded Webserver"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
--- a/ct/onetimesecret.sh
+++ b/ct/onetimesecret.sh
@@ -1,101 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Hai Tran (epiHATR)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://onetimesecret.com/ | Github: https://github.com/onetimesecret/onetimesecret
-
-APP="OneTimeSecret"
-var_tags="${var_tags:-security;privacy;secrets}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  SSL_VALUE="${OTS_SSL:-}"
-  if [[ -n "${SSL_VALUE}" ]]; then
-    case "${SSL_VALUE,,}" in
-    1 | true | yes | on) SSL_VALUE="true" ;;
-    0 | false | no | off) SSL_VALUE="false" ;;
-    *)
-      msg_error "Invalid OTS_SSL value '${OTS_SSL}' (use true/false)"
-      exit 1
-      ;;
-    esac
-  fi
-
-  if [[ ! -d /opt/onetimesecret ]] || [[ ! -f /opt/onetimesecret/.env ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "onetimesecret" "onetimesecret/onetimesecret"; then
-    msg_info "Stopping Service"
-    systemctl stop onetimesecret
-    msg_ok "Stopped Service"
-
-    create_backup /opt/onetimesecret/.env
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "onetimesecret" "onetimesecret/onetimesecret" "tarball"
-    RUBY_VERSION=$(tr -d ' \n' </opt/onetimesecret/.ruby-version 2>/dev/null)
-    RUBY_VERSION="${RUBY_VERSION:-3.4.10}" setup_ruby
-
-    PNPM_VERSION=$(sed -n 's/.*"packageManager": "pnpm@\([^"]*\)".*/\1/p' /opt/onetimesecret/package.json)
-    NODE_VERSION=$(tr -d ' \n' </opt/onetimesecret/.nvmrc 2>/dev/null)
-    NODE_VERSION="${NODE_VERSION:-25}" NODE_MODULE="pnpm@${PNPM_VERSION:-11.1.2}" setup_nodejs
-
-    restore_backup
-
-    msg_info "Reconciling Application"
-    systemctl enable -q --now redis-server
-    cd /opt/onetimesecret
-    mkdir -p tmp/pids log
-    $STD bash bin/setup reconcile
-    msg_ok "Reconciled Application"
-
-    msg_info "Building Frontend"
-    cd /opt/onetimesecret
-    $STD pnpm run build
-    msg_ok "Built Frontend"
-
-    msg_info "Starting Service"
-    systemctl start onetimesecret
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-DISPLAY_HOST="${OTS_HOST:-$IP}"
-case "${OTS_SSL:-false,,}" in
-1 | true | yes | on)
-  DISPLAY_SCHEME="https"
-  ;;
-*)
-  DISPLAY_SCHEME="http"
-  ;;
-esac
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}${DISPLAY_SCHEME}://${DISPLAY_HOST}${CL}"
--- a/ct/paperclip.sh
+++ b/ct/paperclip.sh
@@ -43,8 +43,6 @@ function update_script() {

    restore_backup

-    setup_rust
-
    msg_info "Rebuilding Paperclip"
    cd /opt/paperclip-ai
    export HUSKY=0
--- a/ct/passwordpusher.sh
+++ b/ct/passwordpusher.sh
@@ -40,9 +40,6 @@ function update_script() {
    create_backup /opt/passwordpusher/storage /opt/passwordpusher/.env.production

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "passwordpusher" "pglombardo/PasswordPusher" "tarball"
-
-    restore_backup
-
    RUBY_VERSION="$(cat /opt/passwordpusher/.ruby-version)" RUBY_INSTALL_RAILS="false" setup_ruby

    msg_info "Installing Gem Dependencies"
@@ -65,6 +62,8 @@ function update_script() {
    RAILS_ENV=production SECRET_KEY_BASE_DUMMY=1 $STD bundle exec rails assets:precompile
    msg_ok "Precompiled Assets"

+    restore_backup
+
    msg_info "Starting Service"
    systemctl start passwordpusher
    msg_ok "Started Service"
--- a/ct/portabase.sh
+++ b/ct/portabase.sh
@@ -1,76 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://portabase.io
-
-APP="Portabase"
-var_tags="${var_tags:-database;backup}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-8192}"
-var_disk="${var_disk:-15}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/portabase ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "portabase" "Portabase/portabase"; then
-    msg_info "Stopping Services"
-    systemctl stop portabase portabase-tusd
-    msg_ok "Stopped Services"
-
-    create_backup /opt/portabase/.env
-
-    NODE_VERSION="22" NODE_MODULE="pnpm@11.8.0" setup_nodejs
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "portabase" "Portabase/portabase" "tarball"
-
-    restore_backup
-
-    msg_info "Building Portabase"
-    cd /opt/portabase
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export NEXT_TELEMETRY_DISABLED=1
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm run build
-    cp -r /opt/portabase/.next/static /opt/portabase/.next/standalone/.next/static
-    cp -r /opt/portabase/public /opt/portabase/.next/standalone/public
-    mkdir -p /opt/portabase/.next/standalone/src/db
-    cp -r /opt/portabase/src/db/migrations /opt/portabase/.next/standalone/src/db/migrations
-    ln -sf /opt/portabase/.env /opt/portabase/.next/standalone/.env
-    msg_ok "Built Portabase"
-
-    msg_info "Starting Services"
-    systemctl start portabase-tusd portabase
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"
--- a/ct/safebucket.sh
+++ b/ct/safebucket.sh
@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: renizmy
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/safebucket/safebucket
-
-APP="Safebucket"
-var_tags="${var_tags:-files;sharing}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/safebucket/safebucket ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit 1
-  fi
-
-  if check_for_gh_release "safebucket" "safebucket/safebucket"; then
-    msg_info "Stopping Service"
-    systemctl stop safebucket
-    msg_ok "Stopped Service"
-
-    create_backup /opt/safebucket/config.yaml /opt/safebucket/data/
-    fetch_and_deploy_gh_release "safebucket" "safebucket/safebucket" "singlefile" "latest" "/opt/safebucket" "safebucket-linux-$(arch_resolve)"
-    restore_backup
-
-    msg_info "Configuring Safebucket"
-    chown -R safebucket:safebucket /opt/safebucket
-    msg_ok "Configured Safebucket"
-
-    msg_info "Starting Service"
-    systemctl start safebucket
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
--- a/install/changedetection-install.sh
+++ b/install/changedetection-install.sh
@@ -62,7 +62,6 @@ mkdir /opt/browserless
 $STD /opt/changedetection/.venv/bin/python -m pip install playwright
 $STD git clone https://github.com/browserless/chrome /opt/browserless
 $STD npm ci --include=optional --include=dev --prefix /opt/browserless
-$STD npm install --save-exact playwright-core@1.62.1 --prefix /opt/browserless
 $STD /opt/browserless/node_modules/playwright-core/cli.js install --with-deps &>/dev/null
 $STD /opt/browserless/node_modules/playwright-core/cli.js install --force chrome &>/dev/null
 $STD /opt/browserless/node_modules/playwright-core/cli.js install chromium firefox webkit &>/dev/null
--- a/install/chevereto-install.sh
+++ b/install/chevereto-install.sh
@@ -1,106 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://chevereto.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  nginx \
-  exiftran \
-  libimage-exiftool-perl
-msg_ok "Installed Dependencies"
-
-PHP_VERSION="8.3" PHP_FPM="YES" PHP_UPLOAD_MAX_FILESIZE="512M" PHP_POST_MAX_SIZE="512M" PHP_MAX_EXECUTION_TIME="600" setup_php
-setup_composer
-setup_mariadb
-setup_ffmpeg
-MARIADB_DB_NAME="chevereto" MARIADB_DB_USER="chevereto" setup_mariadb_db
-
-fetch_and_deploy_gh_release "chevereto" "chevereto/chevereto" "tarball"
-
-msg_info "Installing Chevereto Dependencies"
-cd /opt/chevereto/app
-export COMPOSER_ALLOW_SUPERUSER=1
-$STD composer install --no-dev --prefer-dist --no-interaction --optimize-autoloader
-msg_ok "Installed Chevereto Dependencies"
-
-msg_info "Configuring Chevereto"
-cat <<EOF >/opt/chevereto/app/env.php
-<?php
-
-return [
-    'CHEVERETO_DB_HOST' => 'localhost',
-    'CHEVERETO_DB_PORT' => '3306',
-    'CHEVERETO_DB_NAME' => '${MARIADB_DB_NAME}',
-    'CHEVERETO_DB_USER' => '${MARIADB_DB_USER}',
-    'CHEVERETO_DB_PASS' => '${MARIADB_DB_PASS}',
-    'CHEVERETO_DB_TABLE_PREFIX' => 'chv_',
-    'CHEVERETO_HOSTNAME' => '${LOCAL_IP}',
-];
-EOF
-chown -R www-data:www-data /opt/chevereto
-chmod -R 775 /opt/chevereto/images /opt/chevereto/content
-msg_ok "Configured Chevereto"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/chevereto
-server {
-    listen 80;
-    server_name _;
-    root /opt/chevereto;
-    index index.php;
-
-    charset utf-8;
-    client_max_body_size 512M;
-
-    add_header X-Frame-Options "SAMEORIGIN";
-    add_header X-Content-Type-Options "nosniff";
-
-    location / {
-        try_files $uri $uri/ /index.php$is_args$args;
-    }
-
-    location = /favicon.ico { access_log off; log_not_found off; }
-    location = /robots.txt  { access_log off; log_not_found off; }
-
-    location ~* ^/images/.+\.(gif|jpe?g|png|bmp|webp)$ {
-        try_files $uri =404;
-    }
-
-    location = /index.php {
-        include fastcgi_params;
-        fastcgi_pass unix:__PHP_FPM_SOCK__;
-        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
-        fastcgi_read_timeout 600;
-    }
-
-    location ~ \.php$ {
-        deny all;
-    }
-
-    location ^~ /app/ {
-        deny all;
-    }
-
-    location ~ /\.(?!well-known).* {
-        deny all;
-    }
-}
-EOF
-sed -i "s|__PHP_FPM_SOCK__|$(get_php_fpm_socket)|" /etc/nginx/sites-available/chevereto
-nginx_enable_site chevereto
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/homepage-install.sh
+++ b/install/homepage-install.sh
@@ -64,7 +64,7 @@ RestartSec=1
 User=root
 WorkingDirectory=/opt/homepage/
 Environment=CI=true
-ExecStart=/opt/homepage/node_modules/.bin/next start
+ExecStart=pnpm start

 [Install]
 WantedBy=multi-user.target
--- a/install/immich-install.sh
+++ b/install/immich-install.sh
@@ -353,7 +353,7 @@ ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}

-fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.2.0" "$SRC_DIR"
+fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "v3.1.0" "$SRC_DIR"
 PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
 export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
@@ -370,10 +370,11 @@ export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 export CI=1

 # server build
+export SHARP_IGNORE_GLOBAL_LIBVIPS=true
 $STD pnpm --filter @immich/sdk --filter @immich/plugin-sdk --filter immich build
-$STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"
+unset SHARP_IGNORE_GLOBAL_LIBVIPS
 export SHARP_FORCE_GLOBAL_LIBVIPS=true
-$STD pnpm --dir "$APP_DIR/node_modules/sharp" exec npm run build
+$STD pnpm --filter immich --prod --no-optional deploy "$APP_DIR"

 # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
 if [[ -f "$APP_DIR/helmet.json" ]]; then
@@ -387,6 +388,7 @@ sed -i "s|^start|${APP_DIR}/bin/start|" "$APP_DIR"/bin/immich-admin
 cd "$SRC_DIR"
 echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
 unset SHARP_FORCE_GLOBAL_LIBVIPS
+export SHARP_IGNORE_GLOBAL_LIBVIPS=true
 $STD pnpm --filter @immich/sdk --filter immich-web --filter @immich/cli build
 $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
 cp -a web/build "$APP_DIR"/www
--- a/install/logseq-install.sh
+++ b/install/logseq-install.sh
@@ -1,86 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://logseq.com/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  git \
-  nginx \
-  build-essential \
-  libcairo2-dev \
-  libpango1.0-dev \
-  libjpeg-dev \
-  libgif-dev \
-  librsvg2-dev
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
-JAVA_VERSION="21" setup_java
-
-msg_info "Installing Clojure CLI"
-cd /tmp
-curl_download "linux-install.sh" "https://github.com/clojure/brew-install/releases/latest/download/linux-install.sh"
-$STD bash linux-install.sh
-rm -f linux-install.sh
-msg_ok "Installed Clojure CLI"
-
-fetch_and_deploy_gh_release "logseq" "logseq/logseq" "tarball"
-
-msg_info "Building Logseq Web App (Patience)"
-cd /opt/logseq
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export NODE_OPTIONS="--max-old-space-size=4096"
-export JAVA_TOOL_OPTIONS="-Xmx4g"
-$STD corepack enable
-$STD pnpm install --config.network-timeout=240000
-$STD pnpm release
-msg_ok "Built Logseq Web App"
-
-msg_info "Generating Self-Signed Certificate"
-create_self_signed_cert "logseq"
-msg_ok "Generated Self-Signed Certificate"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/logseq
-server {
-    listen 80 default_server;
-    server_name _;
-    return 301 https://$host$request_uri;
-}
-
-server {
-    listen 443 ssl default_server;
-    http2 on;
-    server_name _;
-
-    ssl_certificate /etc/ssl/logseq/logseq.crt;
-    ssl_certificate_key /etc/ssl/logseq/logseq.key;
-
-    root /opt/logseq/static;
-    index index.html;
-
-    add_header Cross-Origin-Opener-Policy same-origin always;
-    add_header Cross-Origin-Embedder-Policy require-corp always;
-
-    location / {
-        try_files $uri $uri/ /index.html;
-    }
-}
-EOF
-nginx_enable_site logseq
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/onetimesecret-install.sh
+++ b/install/onetimesecret-install.sh
@@ -1,138 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Hai Tran (epiHATR)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://onetimesecret.com/ | Github: https://github.com/onetimesecret/onetimesecret
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  git \
-  libffi-dev \
-  libgmp-dev \
-  libpq-dev \
-  libreadline-dev \
-  libsodium23 \
-  libsqlite3-dev \
-  libssl-dev \
-  libxml2-dev \
-  libxslt1-dev \
-  libyaml-dev \
-  nginx \
-  pkg-config \
-  python3 \
-  redis-server \
-  zlib1g-dev
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "onetimesecret" "onetimesecret/onetimesecret" "tarball"
-
-RUBY_VERSION=$(tr -d ' \n' </opt/onetimesecret/.ruby-version 2>/dev/null)
-RUBY_VERSION="${RUBY_VERSION:-3.4.10}" setup_ruby
-PNPM_VERSION=$(sed -n 's/.*"packageManager": "pnpm@\([^"]*\)".*/\1/p' /opt/onetimesecret/package.json)
-NODE_VERSION=$(tr -d ' \n' </opt/onetimesecret/.nvmrc 2>/dev/null)
-NODE_VERSION="${NODE_VERSION:-25}" NODE_MODULE="pnpm@${PNPM_VERSION:-11.1.2}" setup_nodejs
-HOST_VALUE="${OTS_HOST:-$LOCAL_IP}"
-SSL_VALUE="${OTS_SSL:-false}"
-case "${SSL_VALUE,,}" in
-1 | true | yes | on) SSL_VALUE="true" ;;
-0 | false | no | off | "") SSL_VALUE="false" ;;
-*)
-  msg_error "Invalid OTS_SSL value '${OTS_SSL}' (use true/false)"
-  exit 1
-  ;;
-esac
-
-msg_info "Configuring Application"
-systemctl enable -q --now redis-server
-cd /opt/onetimesecret
-$STD bash bin/setup init
-sed -i \
-  -e "s|^REDIS_URL=.*|REDIS_URL=redis://127.0.0.1:6379/0|" \
-  -e "s|^HOST=.*|HOST=${HOST_VALUE//&/\\&}|" \
-  -e "s|^SSL=.*|SSL=${SSL_VALUE}|" \
-  /opt/onetimesecret/.env
-if grep -q '^RACK_ENV=' /opt/onetimesecret/.env; then
-  sed -i 's|^RACK_ENV=.*|RACK_ENV=production|' /opt/onetimesecret/.env
-else
-  echo "RACK_ENV=production" >>/opt/onetimesecret/.env
-fi
-if grep -q '^AUTHENTICATION_MODE=' /opt/onetimesecret/.env; then
-  sed -i 's|^AUTHENTICATION_MODE=.*|AUTHENTICATION_MODE=simple|' /opt/onetimesecret/.env
-else
-  echo "AUTHENTICATION_MODE=simple" >>/opt/onetimesecret/.env
-fi
-if ! grep -q '^PORT=' /opt/onetimesecret/.env; then
-  echo "PORT=3000" >>/opt/onetimesecret/.env
-fi
-chmod 600 /opt/onetimesecret/.env
-mkdir -p /opt/onetimesecret/tmp/pids /opt/onetimesecret/log
-msg_ok "Configured Application"
-
-msg_info "Reconciling Application"
-cd /opt/onetimesecret
-$STD bash bin/setup reconcile
-msg_ok "Reconciled Application"
-
-msg_info "Building Frontend"
-cd /opt/onetimesecret
-$STD pnpm run build
-msg_ok "Built Frontend"
-
-msg_info "Creating Service"
-cat <<'EOF' >/etc/systemd/system/onetimesecret.service
-[Unit]
-Description=Onetime Secret Service
-After=network.target redis-server.service
-Requires=redis-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/onetimesecret
-Environment=HOME=/root
-Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-EnvironmentFile=/opt/onetimesecret/.env
-ExecStart=/root/.rbenv/shims/bundle exec puma -C etc/puma.rb
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now onetimesecret
-msg_ok "Created Service"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/onetimesecret
-server {
-  listen 80 default_server;
-  server_name _;
-
-  location / {
-    proxy_pass http://127.0.0.1:3000;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection "upgrade";
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-  }
-}
-EOF
-nginx_enable_site onetimesecret
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/paperclip-install.sh
+++ b/install/paperclip-install.sh
@@ -23,7 +23,6 @@ msg_ok "Installed Dependencies"
 NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="paperclip" PG_DB_USER="paperclip" setup_postgresql_db
-setup_rust

 fetch_and_deploy_gh_release "paperclip-ai" "paperclipai/paperclip" "tarball"

--- a/install/portabase-install.sh
+++ b/install/portabase-install.sh
@@ -1,163 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://portabase.io
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  git \
-  nginx
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="22" NODE_MODULE="pnpm@11.8.0" setup_nodejs
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="portabase" PG_DB_USER="portabase" setup_postgresql_db
-
-fetch_and_deploy_gh_release "portabase" "Portabase/portabase" "tarball"
-fetch_and_deploy_gh_release "tusd" "tus/tusd" "prebuild" "latest" "/opt/tusd" "tusd_linux_$(arch_resolve).tar.gz"
-
-msg_info "Configuring Portabase"
-mkdir -p /opt/portabase-data/uploads/tmp
-mv -f "/opt/tusd/tusd_linux_$(arch_resolve)/tusd" /opt/tusd/tusd
-rm -rf "/opt/tusd/tusd_linux_$(arch_resolve)"
-chmod +x /opt/tusd/tusd
-PROJECT_SECRET=$(openssl rand -hex 32)
-ADMIN_PASSWORD=$(openssl rand -base64 18 | tr -dc 'A-Za-z0-9' | head -c 16)
-cat <<EOF >/opt/portabase/.env
-LOG_LEVEL=info
-DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}
-PROJECT_NAME=Portabase
-PROJECT_URL=http://${LOCAL_IP}:3000
-PROJECT_SECRET=${PROJECT_SECRET}
-TRUSTED_DOMAINS=http://${LOCAL_IP}:3000
-PRIVATE_PATH=/opt/portabase-data
-AUTH_DEFAULT_USER_NAME=Portabase Admin
-AUTH_DEFAULT_USER=admin@example.com
-AUTH_DEFAULT_PASSWORD=${ADMIN_PASSWORD}
-AUTH_EMAIL_PASSWORD_ENABLED=true
-AUTH_SIGNUP_ENABLED=true
-RETENTION_CRON=0 7 * * *
-TUSD_BEHIND_PROXY=true
-TELEMETRY=false
-EOF
-cat <<EOF >~/portabase.creds
-Portabase Admin
-Username: admin@example.com
-Password: ${ADMIN_PASSWORD}
-EOF
-msg_ok "Configured Portabase"
-
-msg_info "Building Portabase"
-cd /opt/portabase
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export NEXT_TELEMETRY_DISABLED=1
-$STD pnpm install --frozen-lockfile
-$STD pnpm run build
-cp -r /opt/portabase/.next/static /opt/portabase/.next/standalone/.next/static
-cp -r /opt/portabase/public /opt/portabase/.next/standalone/public
-mkdir -p /opt/portabase/.next/standalone/src/db
-cp -r /opt/portabase/src/db/migrations /opt/portabase/.next/standalone/src/db/migrations
-ln -sf /opt/portabase/.env /opt/portabase/.next/standalone/.env
-msg_ok "Built Portabase"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/portabase-tusd.service
-[Unit]
-Description=Portabase tusd Upload Server
-After=network.target
-Before=portabase.service
-
-[Service]
-Type=simple
-ExecStart=/opt/tusd/tusd --base-path /tus/files/ --upload-dir /opt/portabase-data/uploads/tmp --hooks-http http://127.0.0.1:8887/api/tus/hooks --port 1080 --max-size 21474836480 --behind-proxy
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/portabase.service
-[Unit]
-Description=Portabase
-After=network.target postgresql.service portabase-tusd.service
-Wants=postgresql.service
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/portabase/.next/standalone
-Environment=NODE_ENV=production
-Environment=PORT=8887
-Environment=HOSTNAME=127.0.0.1
-ExecStart=/usr/bin/node /opt/portabase/.next/standalone/server.js
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now portabase-tusd portabase
-msg_ok "Created Services"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/portabase
-map $http_x_forwarded_proto $forwarded_proto {
-    default $scheme;
-    "~*^\s*(https?)\s*(?:,|$)" $1;
-}
-
-server {
-    listen 3000;
-    server_name _;
-
-    client_max_body_size 20G;
-    ignore_invalid_headers off;
-
-    location /tus/ {
-        proxy_pass http://127.0.0.1:1080/tus/;
-        proxy_pass_request_headers on;
-        proxy_request_buffering off;
-        proxy_buffering off;
-        proxy_http_version 1.1;
-        proxy_set_header Host $http_host;
-        proxy_set_header X-Forwarded-Host $http_host;
-        proxy_set_header X-Forwarded-Proto $forwarded_proto;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-    }
-
-    location = /api/tus/hooks {
-        deny all;
-        return 404;
-    }
-
-    location / {
-        proxy_pass http://127.0.0.1:8887;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $http_host;
-        proxy_set_header X-Forwarded-Host $http_host;
-        proxy_set_header X-Forwarded-Proto $forwarded_proto;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    }
-}
-EOF
-nginx_enable_site portabase
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/install/safebucket-install.sh
+++ b/install/safebucket-install.sh
@@ -1,226 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: renizmy
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/safebucket/safebucket
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y awscli
-msg_ok "Installed Dependencies"
-
-msg_info "Installing Garage"
-useradd --system --no-create-home --shell /usr/sbin/nologin garage 2>/dev/null || true
-GARAGE_VERSION=$(get_latest_gh_tag "deuxfleurs-org/garage" "v")
-if [[ -z "$GARAGE_VERSION" ]]; then
-  msg_error "Could not determine latest stable Garage version"
-  exit 1
-fi
-curl -fsSL "https://garagehq.deuxfleurs.fr/_releases/${GARAGE_VERSION}/$(arch_resolve "x86_64-unknown-linux-musl" "aarch64-unknown-linux-musl")/garage" -o /usr/local/bin/garage
-chmod +x /usr/local/bin/garage
-mkdir -p /opt/garage/{data,meta}
-RPC_SECRET=$(openssl rand -hex 32)
-ADMIN_TOKEN=$(openssl rand -base64 32)
-cat <<EOF >/opt/garage/garage.toml
-metadata_dir = "/opt/garage/meta"
-data_dir = "/opt/garage/data"
-db_engine = "lmdb"
-replication_factor = 1
-
-rpc_bind_addr = "[::]:3901"
-rpc_public_addr = "127.0.0.1:3901"
-rpc_secret = "${RPC_SECRET}"
-
-[s3_api]
-s3_region = "garage"
-api_bind_addr = "[::]:3900"
-root_domain = ".s3.garage.localhost"
-
-[admin]
-api_bind_addr = "[::]:3903"
-admin_token = "${ADMIN_TOKEN}"
-EOF
-chmod 600 /opt/garage/garage.toml
-chown -R garage:garage /opt/garage
-cat <<EOF >/etc/systemd/system/garage.service
-[Unit]
-Description=Garage Object Storage
-After=network.target
-
-[Service]
-Type=simple
-User=garage
-Group=garage
-WorkingDirectory=/opt/garage
-ExecStart=/usr/local/bin/garage -c /opt/garage/garage.toml server
-Restart=on-failure
-RestartSec=5
-LimitNOFILE=65536
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now garage
-msg_ok "Installed Garage"
-
-msg_info "Configuring Garage Bucket"
-RETRIES=0
-until garage -c /opt/garage/garage.toml status &>/dev/null; do
-  RETRIES=$((RETRIES + 1))
-  if [[ $RETRIES -ge 60 ]]; then
-    msg_error "Garage did not become ready within 60 seconds"
-    exit 1
-  fi
-  sleep 1
-done
-NODE_ID=$(garage -c /opt/garage/garage.toml status 2>/dev/null | awk '/^[0-9a-f]/{print $1; exit}')
-if [[ -z "$NODE_ID" ]]; then
-  msg_error "Could not determine Garage node ID from cluster status"
-  exit 1
-fi
-GARAGE_CAPACITY="${GARAGE_CAPACITY:-$(df -BG --output=avail /opt/garage | awk 'NR==2{gsub(/G/,"",$1); v=$1-1; print (v<1?1:v)"G"}')}"
-$STD garage -c /opt/garage/garage.toml layout assign -z dc1 -c "${GARAGE_CAPACITY}" "${NODE_ID}"
-$STD garage -c /opt/garage/garage.toml layout apply --version 1
-GARAGE_KEY_INFO=$(garage -c /opt/garage/garage.toml key create safebucket-key)
-GARAGE_ACCESS_KEY=$(echo "$GARAGE_KEY_INFO" | awk '/Key ID:/{print $3}')
-GARAGE_SECRET_KEY=$(echo "$GARAGE_KEY_INFO" | awk '/Secret key:/{print $3}')
-$STD garage -c /opt/garage/garage.toml bucket create safebucket
-$STD garage -c /opt/garage/garage.toml bucket allow --read --write --owner safebucket --key safebucket-key
-msg_ok "Configured Garage Bucket"
-
-msg_info "Applying CORS Policy to Bucket"
-export AWS_ACCESS_KEY_ID="${GARAGE_ACCESS_KEY}"
-export AWS_SECRET_ACCESS_KEY="${GARAGE_SECRET_KEY}"
-export AWS_DEFAULT_REGION="garage"
-if aws s3api put-bucket-cors \
-  --bucket safebucket \
-  --endpoint-url "http://127.0.0.1:3900" \
-  --cors-configuration '{"CORSRules":[{"AllowedHeaders":["*"],"AllowedMethods":["GET","PUT","POST","DELETE","HEAD"],"AllowedOrigins":["http://'"${LOCAL_IP}"':8080"],"ExposeHeaders":["ETag"]}]}' &>/dev/null; then
-  msg_ok "Applied CORS Policy to Bucket"
-else
-  msg_warn "Could not apply CORS policy automatically; direct browser uploads may fail until CORS is configured manually"
-fi
-unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_DEFAULT_REGION
-
-fetch_and_deploy_gh_release "safebucket" "safebucket/safebucket" "singlefile" "latest" "/opt/safebucket" "safebucket-linux-$(arch_resolve)"
-
-msg_info "Configuring Safebucket"
-useradd --system --no-create-home --shell /usr/sbin/nologin safebucket 2>/dev/null || true
-mkdir -p /opt/safebucket/data/{notifications,activity}
-TOKEN_SECRET=$(openssl rand -base64 32)
-MFA_KEY=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | cut -c1-32)
-ADMIN_PASSWORD=$(openssl rand -hex 12)
-cat <<EOF >/opt/safebucket/config.yaml
-app:
-  profile: default
-  log_level: info
-  api_url: http://${LOCAL_IP}:8080
-  web_url: http://${LOCAL_IP}:8080
-  allowed_origins:
-    - http://${LOCAL_IP}:8080
-  port: 8080
-  token_secret: "${TOKEN_SECRET}"
-  mfa_encryption_key: "${MFA_KEY}"
-  mfa_required: false
-  admin_email: admin@safebucket.io
-  admin_password: "${ADMIN_PASSWORD}"
-  trash_retention_days: 7
-  max_upload_size: 5368709120
-  trusted_proxies:
-    - 10.0.0.0/8
-    - 172.16.0.0/12
-    - 192.168.0.0/16
-    - 127.0.0.0/8
-    - ::1/128
-    - fc00::/7
-  static_files:
-    enabled: true
-
-database:
-  type: sqlite
-  sqlite:
-    path: /opt/safebucket/data/safebucket.db
-
-cache:
-  type: memory
-
-storage:
-  type: s3
-  s3:
-    bucket_name: safebucket
-    endpoint: 127.0.0.1:3900
-    external_endpoint: http://${LOCAL_IP}:3900
-    access_key: ${GARAGE_ACCESS_KEY}
-    secret_key: ${GARAGE_SECRET_KEY}
-    region: garage
-    force_path_style: true
-    use_tls: false
-
-events:
-  type: memory
-  queues:
-    notifications:
-      name: safebucket-notifications
-    object_deletion:
-      name: safebucket-object-deletion
-    bucket_events:
-      name: safebucket-bucket-events
-
-notifier:
-  type: filesystem
-  filesystem:
-    directory: /opt/safebucket/data/notifications
-
-activity:
-  type: filesystem
-  filesystem:
-    directory: /opt/safebucket/data/activity
-
-auth:
-  providers:
-    local:
-      name: local
-      type: local
-      sharing:
-        allowed: true
-        domains: []
-EOF
-chmod 600 /opt/safebucket/config.yaml
-chown -R safebucket:safebucket /opt/safebucket
-msg_ok "Configured Safebucket"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/safebucket.service
-[Unit]
-Description=Safebucket File Sharing Platform
-After=network-online.target garage.service
-Wants=network-online.target
-Requires=garage.service
-
-[Service]
-Type=simple
-User=safebucket
-Group=safebucket
-WorkingDirectory=/opt/safebucket
-Environment=CONFIG_FILE_PATH=/opt/safebucket/config.yaml
-ExecStart=/opt/safebucket/safebucket
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now safebucket
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc
--- a/misc/core.func
+++ b/misc/core.func
@@ -15,11 +15,6 @@
 [[ -n "${_CORE_FUNC_LOADED:-}" ]] && return
 _CORE_FUNC_LOADED=1

-if [[ -z "${HOME:-}" ]]; then
-  HOME="$(getent passwd "$(id -u)" 2>/dev/null | cut -d: -f6)"
-  export HOME="${HOME:-/root}"
-fi
-
 # ==============================================================================
 # SECTION 1: INITIALIZATION & SETUP
 # ==============================================================================
--- a/tools/addon/dockhand.sh
+++ b/tools/addon/dockhand.sh
@@ -1,111 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/Finsys/dockhand
-
-if command -v curl >/dev/null 2>&1; then
-  source <(curl -fsSL ${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/core.func)
-  load_functions
-elif command -v wget >/dev/null 2>&1; then
-  source <(wget -qO- ${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/core.func)
-  load_functions
-fi
-source <(curl -fsSL ${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/lib/tools.func)
-
-color
-catch_errors
-
-APP="Dockhand"
-APP_TYPE="addon"
-INSTALL_PATH="/opt/dockhand"
-COMPOSE_FILE="${INSTALL_PATH}/docker-compose.yaml"
-DEFAULT_PORT=3000
-
-header_info "$APP"
-
-IP=$(_get_current_ip)
-
-function check_docker() {
-  if ! command -v docker >/dev/null 2>&1; then
-    msg_error "Docker is not installed. This addon requires an existing Docker host/LXC. Exiting."
-    exit 1
-  fi
-  if ! docker compose version >/dev/null 2>&1; then
-    msg_error "Docker Compose plugin is not available. Install it before running this addon. Exiting."
-    exit 1
-  fi
-  msg_ok "Docker $(docker --version | cut -d' ' -f3 | tr -d ',') and Docker Compose are available"
-}
-
-function install_dockhand() {
-  local port="${1:-$DEFAULT_PORT}"
-  check_docker
-
-  msg_info "Creating Compose Project"
-  mkdir -p "$INSTALL_PATH"
-  cat <<EOF >"$COMPOSE_FILE"
-services:
-  dockhand:
-    image: fnsys/dockhand:latest
-    container_name: dockhand
-    restart: unless-stopped
-    ports:
-      - ${port}:3000
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
-      - dockhand_data:/app/data
-
-volumes:
-  dockhand_data:
-EOF
-  msg_ok "Created Compose Project"
-
-  msg_info "Starting ${APP}"
-  cd "$INSTALL_PATH"
-  $STD docker compose up -d
-  msg_ok "Started ${APP}"
-
-  msg_ok "${APP} is reachable at http://${IP}:${port}"
-  echo -e "${TAB}Open the URL and complete the first-run setup wizard to create the admin account."
-}
-
-function update_dockhand() {
-  msg_info "Pulling latest ${APP} image"
-  cd "$INSTALL_PATH"
-  $STD docker compose pull
-  msg_ok "Pulled latest image"
-
-  msg_info "Restarting ${APP}"
-  $STD docker compose up -d --remove-orphans
-  msg_ok "Restarted ${APP}"
-
-  msg_ok "${APP} updated successfully"
-}
-
-function uninstall_dockhand() {
-  msg_info "Removing ${APP}"
-  cd "$INSTALL_PATH"
-  $STD docker compose down --remove-orphans
-  cd /
-  rm -rf "$INSTALL_PATH"
-  msg_ok "${APP} uninstalled (the dockhand_data volume was kept; remove it with: docker volume rm dockhand_data)"
-}
-
-if [[ -f "$COMPOSE_FILE" ]]; then
-  read -r -p "Update (1), Uninstall (2), Cancel (3)? [1/2/3]: " action
-  action="${action//[[:space:]]/}"
-  case "$action" in
-  1) update_dockhand ;;
-  2) uninstall_dockhand ;;
-  3) msg_info "Cancelled" ;;
-  *) msg_error "Invalid input" ;;
-  esac
-else
-  read -r -p "Enter port number (default: ${DEFAULT_PORT}): " PORT_INPUT
-  PORT="${PORT_INPUT:-$DEFAULT_PORT}"
-  read -r -p "Install ${APP}? (y/n): " answer
-  answer="${answer//[[:space:]]/}"
-  [[ "${answer,,}" =~ ^(y|yes)$ ]] && install_dockhand "$PORT" || msg_info "Installation skipped"
-fi
--- a/tools/headers/dockhand
+++ b/tools/headers/dockhand
@@ -1,6 +0,0 @@
-    ____             __   __                    __
-   / __ \____  _____/ /__/ /_  ____ _____  ____/ /
-  / / / / __ \/ ___/ //_/ __ \/ __ `/ __ \/ __  / 
- / /_/ / /_/ / /__/ ,< / / / / /_/ / / / / /_/ /  
-/_____/\____/\___/_/|_/_/ /_/\__,_/_/ /_/\__,_/   
-                                                  
--- a/tools/pve/update-apps.sh
+++ b/tools/pve/update-apps.sh
@@ -178,24 +178,6 @@ function resolve_service_script() {
  return 1
 }

-# The retired Gitea mirror. The old entrypoint pulls ct/<app>.sh straight from
-# it and never reaches the update helper that would repair itself, so rewrite it
-# here. Only host and /raw/<kind>/ change; owner, repo and ref are kept.
-function repair_update_url() {
-  local container="$1"
-  pct exec "$container" -- sh -c '
-    [ -f /usr/bin/update ] || exit 1
-    grep -q git.community-scripts.org /usr/bin/update || exit 1
-    sed -i \
-      -e "s|https://git[.]community-scripts[.]org/|https://raw.githubusercontent.com/|g" \
-      -e "s|/raw/branch/|/|g" -e "s|/raw/tag/|/|g" -e "s|/raw/commit/|/|g" \
-      /usr/bin/update
-  ' >/dev/null 2>&1 || return 1
-
-  echo -e "${BL}[INFO]${CL} Repaired update URL (Gitea -> GitHub) in container $container"
-  log_write "Container $container: rewrote the retired Gitea base in /usr/bin/update"
-}
-
 function detect_service() {
  local container="$1"
  local tmpdir update_file
@@ -507,9 +489,6 @@ for container in $CHOICE; do
    sleep 5
  fi

-  #0.5) Rewrite a retired Gitea base before anything reads it.
-  repair_update_url "$container"
-
  #1) Detect service using the service name in the update command
  detect_service $container