pangolin: pin 1.23.0 in installer

pangolin: pin 1.23.0
Update CHANGELOG.md (#17342 )
2026-09-18 10:44:03 +00:00 · 2026-09-18 09:49:59 +02:00 · 2026-09-18 09:46:56 +02:00 · 2026-09-18 06:44:13 +00:00 · 2026-09-18 08:43:49 +02:00 · 2026-09-18 06:43:18 +00:00
9 changed files with 63 additions and 62 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -543,6 +543,23 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

+## 2026-09-18
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - suggestarr: keep the data where the app actually reads it [@MickLesk](https://github.com/MickLesk) ([#17317](https://github.com/community-scripts/ProxmoxVE/pull/17317))
+    - immichframe: set the admin password the new admin UI requires [@MickLesk](https://github.com/MickLesk) ([#17315](https://github.com/community-scripts/ProxmoxVE/pull/17315))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Oxicloud [@MickLesk](https://github.com/MickLesk) ([#17338](https://github.com/community-scripts/ProxmoxVE/pull/17338))
+
+### 💾 Core
+
+  - github api: retry a 200 that is not a usable release payload [@MickLesk](https://github.com/MickLesk) ([core#45](https://github.com/community-scripts/core/pull/45))
+
 ## 2026-09-17

 ### 🆕 New Scripts
--- a/ct/immichframe.sh
+++ b/ct/immichframe.sh
@@ -79,6 +79,17 @@ function update_script() {
    restore_backup
    chown -R immichframe:immichframe /opt/immichframe

+    if ! grep -q '^Environment=IMMICHFRAME_ADMIN_PASSWORD=' /etc/systemd/system/immichframe.service; then
+      msg_info "Setting Admin Password"
+      ADMIN_PASSWORD=$(openssl rand -hex 16)
+      sed -i "/^Environment=DOTNET_CONTENTROOT=/a Environment=IMMICHFRAME_ADMIN_PASSWORD=${ADMIN_PASSWORD}" /etc/systemd/system/immichframe.service
+      cat <<EOF >>~/immichframe.creds
+ImmichFrame Admin User: admin
+ImmichFrame Admin Password: $ADMIN_PASSWORD
+EOF
+      systemctl daemon-reload
+      msg_ok "Set Admin Password (see ~/immichframe.creds)"
+    fi

    msg_info "Starting Service"
    systemctl start immichframe
--- a/ct/oxicloud.sh
+++ b/ct/oxicloud.sh
@@ -10,8 +10,8 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_

 APP="OxiCloud"
 var_tags="${var_tags:-files;documents}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-6144}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-20}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -33,42 +33,19 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="26" setup_nodejs
+  ensure_dependencies ffmpeg

  if check_for_gh_release "OxiCloud" "DioCrafts/OxiCloud"; then
    msg_info "Stopping OxiCloud"
    systemctl stop oxicloud
    msg_ok "Stopped OxiCloud"

-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "tarball" "latest" "/opt/oxicloud"
-    TOOLCHAIN="$(grep -oP 'FROM\s+rust:\K[0-9]+\.[0-9]+(\.[0-9]+)?' /opt/oxicloud/Dockerfile | head -1)"
-    RUST_TOOLCHAIN="${TOOLCHAIN:-stable}" setup_rust
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "prebuild" "latest" "/opt/oxicloud" "oxicloud-*-$(arch_resolve x86_64 aarch64)-unknown-linux-musl.tar.gz"

-    msg_info "Building Frontend SPA"
-    cd /opt/oxicloud/frontend
-    $STD npm ci
-    $STD npm run build
-    msg_ok "Built Frontend SPA"
-
-    msg_info "Updating OxiCloud (Patience)"
-    set -a
-    source /etc/oxicloud/.env
-    set +a
-    cd /opt/oxicloud
-    export DATABASE_URL
-    export RUSTFLAGS="-C target-cpu=native"
-    RAM_MB=$(awk '/MemTotal/ {print int($2/1024)}' /proc/meminfo)
-    CARGO_JOBS=$((RAM_MB / 2560))
-    [[ $CARGO_JOBS -lt 1 ]] && CARGO_JOBS=1
-    [[ $CARGO_JOBS -gt $(nproc) ]] && CARGO_JOBS=$(nproc)
-    $STD cargo build --release -j "$CARGO_JOBS" --bin oxicloud --bin migrate-nfc-filenames
-    mv target/release/oxicloud /usr/local/bin/oxicloud
-    mv target/release/migrate-nfc-filenames /usr/local/bin/migrate-nfc-filenames
-    chmod +x /usr/local/bin/oxicloud /usr/local/bin/migrate-nfc-filenames
-    rm -f /usr/bin/oxicloud
-    rm -rf /opt/oxicloud/static
-    mv /opt/oxicloud/static-dist /opt/oxicloud/static
-    rm -rf /opt/oxicloud/target /opt/oxicloud/frontend/node_modules
+    msg_info "Updating OxiCloud"
+    install -m 755 /opt/oxicloud/oxicloud /usr/local/bin/oxicloud
+    rm -f /usr/local/bin/migrate-nfc-filenames /usr/bin/oxicloud
+    sed -i 's|^OXICLOUD_STATIC_PATH=|#OXICLOUD_STATIC_PATH=|' /etc/oxicloud/.env
    msg_ok "Updated OxiCloud"

    msg_info "Starting OxiCloud"
--- a/ct/pangolin.sh
+++ b/ct/pangolin.sh
@@ -8,7 +8,7 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_
 # Source: https://pangolin.net/ | Github: https://github.com/fosrl/pangolin

 APP="Pangolin"
-PANGOLIN_VERSION="${PANGOLIN_VERSION:-1.21.0}"
+PANGOLIN_VERSION="${PANGOLIN_VERSION:-1.23.0}"
 var_tags="${var_tags:-proxy}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-4096}"
--- a/ct/suggestarr.sh
+++ b/ct/suggestarr.sh
@@ -37,8 +37,19 @@ function update_script() {
    systemctl stop suggestarr
    msg_ok "Stopped Service"

+    mkdir -p /opt/suggestarr_data
+    if [[ -d /opt/suggestarr/config/config_files && ! -L /opt/suggestarr/config/config_files ]]; then
+      msg_info "Migrating Configuration"
+      cp -an /opt/suggestarr/config/config_files/. /opt/suggestarr_data/
+      msg_ok "Migrated Configuration to /opt/suggestarr_data"
+    fi
+
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "suggestarr" "giuseppe99barchetta/SuggestArr" "tarball"

+    mkdir -p /opt/suggestarr/config
+    rm -rf /opt/suggestarr/config/config_files
+    ln -sfn /opt/suggestarr_data /opt/suggestarr/config/config_files
+
    msg_info "Building Frontend"
    cd /opt/suggestarr/client
    $STD npm install
--- a/install/immichframe-install.sh
+++ b/install/immichframe-install.sh
@@ -60,6 +60,11 @@ chown -R immichframe:immichframe /opt/immichframe
 msg_ok "Setup ImmichFrame"

 msg_info "Creating Service"
+ADMIN_PASSWORD=$(openssl rand -hex 16)
+cat <<EOF >~/immichframe.creds
+ImmichFrame Admin User: admin
+ImmichFrame Admin Password: $ADMIN_PASSWORD
+EOF
 cat <<EOF >/etc/systemd/system/immichframe.service
 [Unit]
 Description=ImmichFrame Digital Photo Frame
@@ -74,6 +79,7 @@ ExecStart=/usr/bin/dotnet /opt/immichframe/ImmichFrame.WebApi.dll
 Environment=ASPNETCORE_URLS=http://0.0.0.0:8080
 Environment=ASPNETCORE_ENVIRONMENT=Production
 Environment=DOTNET_CONTENTROOT=/opt/immichframe
+Environment=IMMICHFRAME_ADMIN_PASSWORD=$ADMIN_PASSWORD
 Restart=always
 RestartSec=5
 StandardOutput=journal
--- a/install/oxicloud-install.sh
+++ b/install/oxicloud-install.sh
@@ -14,43 +14,20 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt install -y build-essential
+$STD apt install -y ffmpeg
 msg_ok "Installed Dependencies"

-NODE_VERSION="26" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="oxicloud" PG_DB_USER="oxicloud" setup_postgresql_db
-fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "tarball" "latest" "/opt/oxicloud"
-TOOLCHAIN="$(grep -oP 'FROM\s+rust:\K[0-9]+\.[0-9]+(\.[0-9]+)?' /opt/oxicloud/Dockerfile | head -1)"
-RUST_TOOLCHAIN="${TOOLCHAIN:-stable}" setup_rust
-
-msg_info "Building Frontend SPA"
-cd /opt/oxicloud/frontend
-$STD npm ci
-$STD npm run build
-msg_ok "Built Frontend SPA"
-
-msg_info "Building OxiCloud (Patience)"
-cd /opt/oxicloud
-export DATABASE_URL="postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost/${PG_DB_NAME}"
-export RUSTFLAGS="-C target-cpu=native"
-RAM_MB=$(awk '/MemTotal/ {print int($2/1024)}' /proc/meminfo)
-CARGO_JOBS=$((RAM_MB / 2560))
-[[ $CARGO_JOBS -lt 1 ]] && CARGO_JOBS=1
-[[ $CARGO_JOBS -gt $(nproc) ]] && CARGO_JOBS=$(nproc)
-$STD cargo build --release -j "$CARGO_JOBS" --bin oxicloud --bin migrate-nfc-filenames
-mv target/release/oxicloud /usr/local/bin/oxicloud
-mv target/release/migrate-nfc-filenames /usr/local/bin/migrate-nfc-filenames
-rm -rf /opt/oxicloud/static
-mv /opt/oxicloud/static-dist /opt/oxicloud/static
-rm -rf /opt/oxicloud/target /opt/oxicloud/frontend/node_modules
-msg_ok "Built OxiCloud"
+fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "prebuild" "latest" "/opt/oxicloud" "oxicloud-*-$(arch_resolve x86_64 aarch64)-unknown-linux-musl.tar.gz"
+install -m 755 /opt/oxicloud/oxicloud /usr/local/bin/oxicloud

 msg_info "Configuring OxiCloud"
 mkdir -p {/mnt/oxicloud,/etc/oxicloud}
+DATABASE_URL="postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost/${PG_DB_NAME}"
 sed -e 's|OXICLOUD_STORAGE_PATH=.*|OXICLOUD_STORAGE_PATH=/mnt/oxicloud|' \
  -e 's|OXICLOUD_SERVER_HOST=.*|OXICLOUD_SERVER_HOST=0.0.0.0|' \
-  -e 's|OXICLOUD_STATIC_PATH=.*|OXICLOUD_STATIC_PATH=/opt/oxicloud/static|' \
+  -e 's|^OXICLOUD_STATIC_PATH=|#OXICLOUD_STATIC_PATH=|' \
  -e "s|^#OXICLOUD_BASE_URL=.*|OXICLOUD_BASE_URL=http://${LOCAL_IP}:8086|" \
  -e "s|OXICLOUD_DB_CONNECTION_STRING=.*|OXICLOUD_DB_CONNECTION_STRING=${DATABASE_URL}|" \
  -e "s|^DATABASE_URL=.*|DATABASE_URL=${DATABASE_URL}|" \
--- a/install/pangolin-install.sh
+++ b/install/pangolin-install.sh
@@ -22,7 +22,7 @@ msg_ok "Installed Dependencies"
 NODE_VERSION="24" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="pangolin" PG_DB_USER="pangolin" setup_postgresql_db
-PANGOLIN_VERSION="${PANGOLIN_VERSION:-1.21.0}"
+PANGOLIN_VERSION="${PANGOLIN_VERSION:-1.23.0}"
 fetch_and_deploy_gh_release "pangolin" "fosrl/pangolin" "tarball" "$PANGOLIN_VERSION"
 fetch_and_deploy_gh_release "gerbil" "fosrl/gerbil" "singlefile" "latest" "/usr/bin" "gerbil_linux_$(arch_resolve)"
 fetch_and_deploy_gh_release "traefik" "traefik/traefik" "prebuild" "latest" "/usr/bin" "traefik_v*_linux_$(arch_resolve).tar.gz"
--- a/install/suggestarr-install.sh
+++ b/install/suggestarr-install.sh
@@ -38,7 +38,9 @@ $STD uv pip install --python /opt/suggestarr/.venv -r /opt/suggestarr/api_servic
 msg_ok "Set up Python Environment"

 msg_info "Configuring SuggestArr"
-mkdir -p /opt/suggestarr_data
+mkdir -p /opt/suggestarr_data /opt/suggestarr/config
+rm -rf /opt/suggestarr/config/config_files
+ln -sfn /opt/suggestarr_data /opt/suggestarr/config/config_files
 cat <<EOF >/opt/suggestarr.env
 SUGGESTARR_PORT=5000
 LOG_LEVEL=info
Author	SHA1	Message	Date
MickLesk	3afb357de2	pangolin: pin 1.23.0 in installer	2026-09-18 09:49:59 +02:00
MickLesk	3c549f903b	pangolin: pin 1.23.0	2026-09-18 09:46:56 +02:00
community-scripts-pr-app[bot]	aea1e6201d	Update CHANGELOG.md (#17342 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-18 06:44:13 +00:00
CanbiZ (MickLesk)	46dfe21e68	suggestarr: keep the data where the app actually reads it (#17317 ) * suggestarr: keep the data where the app actually reads it The env file sets CONFIG_DIR=/opt/suggestarr_data and the service passes it through, but SuggestArr never reads that variable. Its database manager builds the path from the application directory: DB_PATH = os.path.join(BASE_DIR, 'config', 'config_files', 'requests.db') so config.yaml, requests.db and secret.key live under /opt/suggestarr, which the update wipes with CLEAN_INSTALL. Every update came back as a fresh install. Make config/config_files a symlink to /opt/suggestarr_data and lay it down again after each deploy, since the deploy replaces it with a real directory. Existing installs have their files copied across first, with cp -an so anything already in the data directory wins. CONFIG_DIR stays in the env file: it is inert today and costs nothing if upstream starts reading it. * suggestarr: let a failed migration stop the update The \|\| true was wrong and the review caught it. CLEAN_INSTALL wipes /opt/suggestarr right after this copy, so swallowing a failure here means the source is deleted with nothing carried across. The guard was not even doing anything: cp -an exits 0 when it skips a file that already exists in the target, which is the only case that looked like it needed one. It only returns non-zero on a real failure, which is exactly when the update has to stop - and it now stops before the deploy, with the original data still in place. cp -an, target file exists -> exit 0, continues cp -an, source missing -> exit 1, ERR trap, aborts before deploy 2>/dev/null goes as well, so the reason is visible.	2026-09-18 08:43:49 +02:00
community-scripts-pr-app[bot]	c2aa18ae85	Update CHANGELOG.md (#17341 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-18 06:43:18 +00:00
CanbiZ (MickLesk)	5555c6e404	Refactor: Oxicloud (#17338 ) * refactor: streamline OxiCloud installation process by using prebuilt binaries * oxicloud: take the prebuilt binary in the update too Upstream now attaches musl tarballs to every release (AtalayaLabs/ OxiCloud#533), so the update no longer has to install a Rust toolchain and Node and compile for up to 35 minutes. That compile is also what broke #16216: a release whose source did not build left users with a failed install and no way forward. The tarball carries one top-level directory, which the deploy helper strips, so the binary lands at /opt/oxicloud/oxicloud. The frontend is baked into it, so the SPA build and OXICLOUD_STATIC_PATH both go; the variable is commented out rather than removed, since a stale ./static path would otherwise point at a directory that no longer exists. migrate-nfc-filenames is gone as a separate binary - it is now a subcommand, oxicloud migrate nfc-filenames - so the update removes the old one. ffmpeg replaces build-essential: the server forks it for video thumbnails and it is the one runtime dependency the musl build still needs from the system. Defaults drop to 2 CPU and 2048 MB, which were sized for the compile. * oxicloud: install ffmpeg on update as well The install gained it, the update did not, so a container created before this change would never get it. The musl binary forks ffmpeg for video thumbnails; without it that one feature stays silently unavailable.	2026-09-18 08:42:54 +02:00
CanbiZ (MickLesk)	afbdf20aed	immichframe: set the admin password the new admin UI requires (#17315 ) * immichframe: set the admin password the new admin UI requires immichFrame/ImmichFrame#698 added an admin UI that refuses to open /admin unless IMMICHFRAME_ADMIN_PASSWORD is set, leaving users to edit the unit by hand after an install or an upgrade from an older version. Generate one, put it in the unit next to the other Environment lines, and record it in ~/immichframe.creds the way the other scripts record credentials. The update adds the line only when it is missing, so a password already set by hand survives. * immichframe: write the creds file the way the other scripts do Sixty install scripts use cat <<EOF for their .creds file and exactly one used an echo block, which was this one. Match the rest. The install writes the file, the update appends: on an existing container the file may already be there from the original install, and the password line is only added when the unit has none.	2026-09-18 08:42:44 +02:00
community-scripts-pr-app[bot]	addda5f6a9	Update CHANGELOG.md (#17340 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-18 06:22:14 +00:00